1 /* 2 * Copyright 2002-2005, Instant802 Networks, Inc. 3 * Copyright 2005-2006, Devicescape Software, Inc. 4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net> 6 * Copyright 2013-2014 Intel Mobile Communications GmbH 7 * 8 * This program is free software; you can redistribute it and/or modify 9 * it under the terms of the GNU General Public License version 2 as 10 * published by the Free Software Foundation. 11 * 12 * utilities for mac80211 13 */ 14 15 #include <net/mac80211.h> 16 #include <linux/netdevice.h> 17 #include <linux/export.h> 18 #include <linux/types.h> 19 #include <linux/slab.h> 20 #include <linux/skbuff.h> 21 #include <linux/etherdevice.h> 22 #include <linux/if_arp.h> 23 #include <linux/bitmap.h> 24 #include <linux/crc32.h> 25 #include <net/net_namespace.h> 26 #include <net/cfg80211.h> 27 #include <net/rtnetlink.h> 28 29 #include "ieee80211_i.h" 30 #include "driver-ops.h" 31 #include "rate.h" 32 #include "mesh.h" 33 #include "wme.h" 34 #include "led.h" 35 #include "wep.h" 36 37 /* privid for wiphys to determine whether they belong to us or not */ 38 const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid; 39 40 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy) 41 { 42 struct ieee80211_local *local; 43 BUG_ON(!wiphy); 44 45 local = wiphy_priv(wiphy); 46 return &local->hw; 47 } 48 EXPORT_SYMBOL(wiphy_to_ieee80211_hw); 49 50 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len, 51 enum nl80211_iftype type) 52 { 53 __le16 fc = hdr->frame_control; 54 55 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */ 56 if (len < 16) 57 return NULL; 58 59 if (ieee80211_is_data(fc)) { 60 if (len < 24) /* drop incorrect hdr len (data) */ 61 return NULL; 62 63 if (ieee80211_has_a4(fc)) 64 return NULL; 65 if (ieee80211_has_tods(fc)) 66 return hdr->addr1; 67 if (ieee80211_has_fromds(fc)) 68 return hdr->addr2; 69 70 return hdr->addr3; 71 } 72 73 if (ieee80211_is_mgmt(fc)) { 74 if (len < 24) /* drop incorrect hdr len (mgmt) */ 75 return NULL; 76 return hdr->addr3; 77 } 78 79 if (ieee80211_is_ctl(fc)) { 80 if (ieee80211_is_pspoll(fc)) 81 return hdr->addr1; 82 83 if (ieee80211_is_back_req(fc)) { 84 switch (type) { 85 case NL80211_IFTYPE_STATION: 86 return hdr->addr2; 87 case NL80211_IFTYPE_AP: 88 case NL80211_IFTYPE_AP_VLAN: 89 return hdr->addr1; 90 default: 91 break; /* fall through to the return */ 92 } 93 } 94 } 95 96 return NULL; 97 } 98 99 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx) 100 { 101 struct sk_buff *skb; 102 struct ieee80211_hdr *hdr; 103 104 skb_queue_walk(&tx->skbs, skb) { 105 hdr = (struct ieee80211_hdr *) skb->data; 106 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 107 } 108 } 109 110 int ieee80211_frame_duration(enum ieee80211_band band, size_t len, 111 int rate, int erp, int short_preamble, 112 int shift) 113 { 114 int dur; 115 116 /* calculate duration (in microseconds, rounded up to next higher 117 * integer if it includes a fractional microsecond) to send frame of 118 * len bytes (does not include FCS) at the given rate. Duration will 119 * also include SIFS. 120 * 121 * rate is in 100 kbps, so divident is multiplied by 10 in the 122 * DIV_ROUND_UP() operations. 123 * 124 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and 125 * is assumed to be 0 otherwise. 126 */ 127 128 if (band == IEEE80211_BAND_5GHZ || erp) { 129 /* 130 * OFDM: 131 * 132 * N_DBPS = DATARATE x 4 133 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS) 134 * (16 = SIGNAL time, 6 = tail bits) 135 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext 136 * 137 * T_SYM = 4 usec 138 * 802.11a - 18.5.2: aSIFSTime = 16 usec 139 * 802.11g - 19.8.4: aSIFSTime = 10 usec + 140 * signal ext = 6 usec 141 */ 142 dur = 16; /* SIFS + signal ext */ 143 dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */ 144 dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */ 145 146 /* IEEE 802.11-2012 18.3.2.4: all values above are: 147 * * times 4 for 5 MHz 148 * * times 2 for 10 MHz 149 */ 150 dur *= 1 << shift; 151 152 /* rates should already consider the channel bandwidth, 153 * don't apply divisor again. 154 */ 155 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10, 156 4 * rate); /* T_SYM x N_SYM */ 157 } else { 158 /* 159 * 802.11b or 802.11g with 802.11b compatibility: 160 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime + 161 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0. 162 * 163 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4 164 * aSIFSTime = 10 usec 165 * aPreambleLength = 144 usec or 72 usec with short preamble 166 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble 167 */ 168 dur = 10; /* aSIFSTime = 10 usec */ 169 dur += short_preamble ? (72 + 24) : (144 + 48); 170 171 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate); 172 } 173 174 return dur; 175 } 176 177 /* Exported duration function for driver use */ 178 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw, 179 struct ieee80211_vif *vif, 180 enum ieee80211_band band, 181 size_t frame_len, 182 struct ieee80211_rate *rate) 183 { 184 struct ieee80211_sub_if_data *sdata; 185 u16 dur; 186 int erp, shift = 0; 187 bool short_preamble = false; 188 189 erp = 0; 190 if (vif) { 191 sdata = vif_to_sdata(vif); 192 short_preamble = sdata->vif.bss_conf.use_short_preamble; 193 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 194 erp = rate->flags & IEEE80211_RATE_ERP_G; 195 shift = ieee80211_vif_get_shift(vif); 196 } 197 198 dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp, 199 short_preamble, shift); 200 201 return cpu_to_le16(dur); 202 } 203 EXPORT_SYMBOL(ieee80211_generic_frame_duration); 204 205 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw, 206 struct ieee80211_vif *vif, size_t frame_len, 207 const struct ieee80211_tx_info *frame_txctl) 208 { 209 struct ieee80211_local *local = hw_to_local(hw); 210 struct ieee80211_rate *rate; 211 struct ieee80211_sub_if_data *sdata; 212 bool short_preamble; 213 int erp, shift = 0, bitrate; 214 u16 dur; 215 struct ieee80211_supported_band *sband; 216 217 sband = local->hw.wiphy->bands[frame_txctl->band]; 218 219 short_preamble = false; 220 221 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 222 223 erp = 0; 224 if (vif) { 225 sdata = vif_to_sdata(vif); 226 short_preamble = sdata->vif.bss_conf.use_short_preamble; 227 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 228 erp = rate->flags & IEEE80211_RATE_ERP_G; 229 shift = ieee80211_vif_get_shift(vif); 230 } 231 232 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 233 234 /* CTS duration */ 235 dur = ieee80211_frame_duration(sband->band, 10, bitrate, 236 erp, short_preamble, shift); 237 /* Data frame duration */ 238 dur += ieee80211_frame_duration(sband->band, frame_len, bitrate, 239 erp, short_preamble, shift); 240 /* ACK duration */ 241 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 242 erp, short_preamble, shift); 243 244 return cpu_to_le16(dur); 245 } 246 EXPORT_SYMBOL(ieee80211_rts_duration); 247 248 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw, 249 struct ieee80211_vif *vif, 250 size_t frame_len, 251 const struct ieee80211_tx_info *frame_txctl) 252 { 253 struct ieee80211_local *local = hw_to_local(hw); 254 struct ieee80211_rate *rate; 255 struct ieee80211_sub_if_data *sdata; 256 bool short_preamble; 257 int erp, shift = 0, bitrate; 258 u16 dur; 259 struct ieee80211_supported_band *sband; 260 261 sband = local->hw.wiphy->bands[frame_txctl->band]; 262 263 short_preamble = false; 264 265 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 266 erp = 0; 267 if (vif) { 268 sdata = vif_to_sdata(vif); 269 short_preamble = sdata->vif.bss_conf.use_short_preamble; 270 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 271 erp = rate->flags & IEEE80211_RATE_ERP_G; 272 shift = ieee80211_vif_get_shift(vif); 273 } 274 275 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 276 277 /* Data frame duration */ 278 dur = ieee80211_frame_duration(sband->band, frame_len, bitrate, 279 erp, short_preamble, shift); 280 if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) { 281 /* ACK duration */ 282 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 283 erp, short_preamble, shift); 284 } 285 286 return cpu_to_le16(dur); 287 } 288 EXPORT_SYMBOL(ieee80211_ctstoself_duration); 289 290 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue) 291 { 292 struct ieee80211_sub_if_data *sdata; 293 int n_acs = IEEE80211_NUM_ACS; 294 295 if (local->hw.queues < IEEE80211_NUM_ACS) 296 n_acs = 1; 297 298 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 299 int ac; 300 301 if (!sdata->dev) 302 continue; 303 304 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE && 305 local->queue_stop_reasons[sdata->vif.cab_queue] != 0) 306 continue; 307 308 for (ac = 0; ac < n_acs; ac++) { 309 int ac_queue = sdata->vif.hw_queue[ac]; 310 311 if (ac_queue == queue || 312 (sdata->vif.cab_queue == queue && 313 local->queue_stop_reasons[ac_queue] == 0 && 314 skb_queue_empty(&local->pending[ac_queue]))) 315 netif_wake_subqueue(sdata->dev, ac); 316 } 317 } 318 } 319 320 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue, 321 enum queue_stop_reason reason, 322 bool refcounted) 323 { 324 struct ieee80211_local *local = hw_to_local(hw); 325 326 trace_wake_queue(local, queue, reason); 327 328 if (WARN_ON(queue >= hw->queues)) 329 return; 330 331 if (!test_bit(reason, &local->queue_stop_reasons[queue])) 332 return; 333 334 if (!refcounted) 335 local->q_stop_reasons[queue][reason] = 0; 336 else 337 local->q_stop_reasons[queue][reason]--; 338 339 if (local->q_stop_reasons[queue][reason] == 0) 340 __clear_bit(reason, &local->queue_stop_reasons[queue]); 341 342 if (local->queue_stop_reasons[queue] != 0) 343 /* someone still has this queue stopped */ 344 return; 345 346 if (skb_queue_empty(&local->pending[queue])) { 347 rcu_read_lock(); 348 ieee80211_propagate_queue_wake(local, queue); 349 rcu_read_unlock(); 350 } else 351 tasklet_schedule(&local->tx_pending_tasklet); 352 } 353 354 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue, 355 enum queue_stop_reason reason, 356 bool refcounted) 357 { 358 struct ieee80211_local *local = hw_to_local(hw); 359 unsigned long flags; 360 361 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 362 __ieee80211_wake_queue(hw, queue, reason, refcounted); 363 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 364 } 365 366 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue) 367 { 368 ieee80211_wake_queue_by_reason(hw, queue, 369 IEEE80211_QUEUE_STOP_REASON_DRIVER, 370 false); 371 } 372 EXPORT_SYMBOL(ieee80211_wake_queue); 373 374 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue, 375 enum queue_stop_reason reason, 376 bool refcounted) 377 { 378 struct ieee80211_local *local = hw_to_local(hw); 379 struct ieee80211_sub_if_data *sdata; 380 int n_acs = IEEE80211_NUM_ACS; 381 382 trace_stop_queue(local, queue, reason); 383 384 if (WARN_ON(queue >= hw->queues)) 385 return; 386 387 if (!refcounted) 388 local->q_stop_reasons[queue][reason] = 1; 389 else 390 local->q_stop_reasons[queue][reason]++; 391 392 if (__test_and_set_bit(reason, &local->queue_stop_reasons[queue])) 393 return; 394 395 if (local->hw.queues < IEEE80211_NUM_ACS) 396 n_acs = 1; 397 398 rcu_read_lock(); 399 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 400 int ac; 401 402 if (!sdata->dev) 403 continue; 404 405 for (ac = 0; ac < n_acs; ac++) { 406 if (sdata->vif.hw_queue[ac] == queue || 407 sdata->vif.cab_queue == queue) 408 netif_stop_subqueue(sdata->dev, ac); 409 } 410 } 411 rcu_read_unlock(); 412 } 413 414 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue, 415 enum queue_stop_reason reason, 416 bool refcounted) 417 { 418 struct ieee80211_local *local = hw_to_local(hw); 419 unsigned long flags; 420 421 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 422 __ieee80211_stop_queue(hw, queue, reason, refcounted); 423 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 424 } 425 426 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue) 427 { 428 ieee80211_stop_queue_by_reason(hw, queue, 429 IEEE80211_QUEUE_STOP_REASON_DRIVER, 430 false); 431 } 432 EXPORT_SYMBOL(ieee80211_stop_queue); 433 434 void ieee80211_add_pending_skb(struct ieee80211_local *local, 435 struct sk_buff *skb) 436 { 437 struct ieee80211_hw *hw = &local->hw; 438 unsigned long flags; 439 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 440 int queue = info->hw_queue; 441 442 if (WARN_ON(!info->control.vif)) { 443 ieee80211_free_txskb(&local->hw, skb); 444 return; 445 } 446 447 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 448 __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD, 449 false); 450 __skb_queue_tail(&local->pending[queue], skb); 451 __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD, 452 false); 453 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 454 } 455 456 void ieee80211_add_pending_skbs(struct ieee80211_local *local, 457 struct sk_buff_head *skbs) 458 { 459 struct ieee80211_hw *hw = &local->hw; 460 struct sk_buff *skb; 461 unsigned long flags; 462 int queue, i; 463 464 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 465 while ((skb = skb_dequeue(skbs))) { 466 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 467 468 if (WARN_ON(!info->control.vif)) { 469 ieee80211_free_txskb(&local->hw, skb); 470 continue; 471 } 472 473 queue = info->hw_queue; 474 475 __ieee80211_stop_queue(hw, queue, 476 IEEE80211_QUEUE_STOP_REASON_SKB_ADD, 477 false); 478 479 __skb_queue_tail(&local->pending[queue], skb); 480 } 481 482 for (i = 0; i < hw->queues; i++) 483 __ieee80211_wake_queue(hw, i, 484 IEEE80211_QUEUE_STOP_REASON_SKB_ADD, 485 false); 486 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 487 } 488 489 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw, 490 unsigned long queues, 491 enum queue_stop_reason reason, 492 bool refcounted) 493 { 494 struct ieee80211_local *local = hw_to_local(hw); 495 unsigned long flags; 496 int i; 497 498 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 499 500 for_each_set_bit(i, &queues, hw->queues) 501 __ieee80211_stop_queue(hw, i, reason, refcounted); 502 503 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 504 } 505 506 void ieee80211_stop_queues(struct ieee80211_hw *hw) 507 { 508 ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 509 IEEE80211_QUEUE_STOP_REASON_DRIVER, 510 false); 511 } 512 EXPORT_SYMBOL(ieee80211_stop_queues); 513 514 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue) 515 { 516 struct ieee80211_local *local = hw_to_local(hw); 517 unsigned long flags; 518 int ret; 519 520 if (WARN_ON(queue >= hw->queues)) 521 return true; 522 523 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 524 ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER, 525 &local->queue_stop_reasons[queue]); 526 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 527 return ret; 528 } 529 EXPORT_SYMBOL(ieee80211_queue_stopped); 530 531 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw, 532 unsigned long queues, 533 enum queue_stop_reason reason, 534 bool refcounted) 535 { 536 struct ieee80211_local *local = hw_to_local(hw); 537 unsigned long flags; 538 int i; 539 540 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 541 542 for_each_set_bit(i, &queues, hw->queues) 543 __ieee80211_wake_queue(hw, i, reason, refcounted); 544 545 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 546 } 547 548 void ieee80211_wake_queues(struct ieee80211_hw *hw) 549 { 550 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 551 IEEE80211_QUEUE_STOP_REASON_DRIVER, 552 false); 553 } 554 EXPORT_SYMBOL(ieee80211_wake_queues); 555 556 static unsigned int 557 ieee80211_get_vif_queues(struct ieee80211_local *local, 558 struct ieee80211_sub_if_data *sdata) 559 { 560 unsigned int queues; 561 562 if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) { 563 int ac; 564 565 queues = 0; 566 567 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 568 queues |= BIT(sdata->vif.hw_queue[ac]); 569 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE) 570 queues |= BIT(sdata->vif.cab_queue); 571 } else { 572 /* all queues */ 573 queues = BIT(local->hw.queues) - 1; 574 } 575 576 return queues; 577 } 578 579 void ieee80211_flush_queues(struct ieee80211_local *local, 580 struct ieee80211_sub_if_data *sdata) 581 { 582 unsigned int queues; 583 584 if (!local->ops->flush) 585 return; 586 587 queues = ieee80211_get_vif_queues(local, sdata); 588 589 ieee80211_stop_queues_by_reason(&local->hw, queues, 590 IEEE80211_QUEUE_STOP_REASON_FLUSH, 591 false); 592 593 drv_flush(local, sdata, queues, false); 594 595 ieee80211_wake_queues_by_reason(&local->hw, queues, 596 IEEE80211_QUEUE_STOP_REASON_FLUSH, 597 false); 598 } 599 600 void ieee80211_stop_vif_queues(struct ieee80211_local *local, 601 struct ieee80211_sub_if_data *sdata, 602 enum queue_stop_reason reason) 603 { 604 ieee80211_stop_queues_by_reason(&local->hw, 605 ieee80211_get_vif_queues(local, sdata), 606 reason, true); 607 } 608 609 void ieee80211_wake_vif_queues(struct ieee80211_local *local, 610 struct ieee80211_sub_if_data *sdata, 611 enum queue_stop_reason reason) 612 { 613 ieee80211_wake_queues_by_reason(&local->hw, 614 ieee80211_get_vif_queues(local, sdata), 615 reason, true); 616 } 617 618 static void __iterate_active_interfaces(struct ieee80211_local *local, 619 u32 iter_flags, 620 void (*iterator)(void *data, u8 *mac, 621 struct ieee80211_vif *vif), 622 void *data) 623 { 624 struct ieee80211_sub_if_data *sdata; 625 626 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 627 switch (sdata->vif.type) { 628 case NL80211_IFTYPE_MONITOR: 629 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 630 continue; 631 break; 632 case NL80211_IFTYPE_AP_VLAN: 633 continue; 634 default: 635 break; 636 } 637 if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) && 638 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 639 continue; 640 if (ieee80211_sdata_running(sdata)) 641 iterator(data, sdata->vif.addr, 642 &sdata->vif); 643 } 644 645 sdata = rcu_dereference_check(local->monitor_sdata, 646 lockdep_is_held(&local->iflist_mtx) || 647 lockdep_rtnl_is_held()); 648 if (sdata && 649 (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL || 650 sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 651 iterator(data, sdata->vif.addr, &sdata->vif); 652 } 653 654 void ieee80211_iterate_active_interfaces( 655 struct ieee80211_hw *hw, u32 iter_flags, 656 void (*iterator)(void *data, u8 *mac, 657 struct ieee80211_vif *vif), 658 void *data) 659 { 660 struct ieee80211_local *local = hw_to_local(hw); 661 662 mutex_lock(&local->iflist_mtx); 663 __iterate_active_interfaces(local, iter_flags, iterator, data); 664 mutex_unlock(&local->iflist_mtx); 665 } 666 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces); 667 668 void ieee80211_iterate_active_interfaces_atomic( 669 struct ieee80211_hw *hw, u32 iter_flags, 670 void (*iterator)(void *data, u8 *mac, 671 struct ieee80211_vif *vif), 672 void *data) 673 { 674 struct ieee80211_local *local = hw_to_local(hw); 675 676 rcu_read_lock(); 677 __iterate_active_interfaces(local, iter_flags, iterator, data); 678 rcu_read_unlock(); 679 } 680 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic); 681 682 void ieee80211_iterate_active_interfaces_rtnl( 683 struct ieee80211_hw *hw, u32 iter_flags, 684 void (*iterator)(void *data, u8 *mac, 685 struct ieee80211_vif *vif), 686 void *data) 687 { 688 struct ieee80211_local *local = hw_to_local(hw); 689 690 ASSERT_RTNL(); 691 692 __iterate_active_interfaces(local, iter_flags, iterator, data); 693 } 694 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl); 695 696 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev) 697 { 698 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 699 700 if (!ieee80211_sdata_running(sdata) || 701 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 702 return NULL; 703 return &sdata->vif; 704 } 705 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif); 706 707 /* 708 * Nothing should have been stuffed into the workqueue during 709 * the suspend->resume cycle. If this WARN is seen then there 710 * is a bug with either the driver suspend or something in 711 * mac80211 stuffing into the workqueue which we haven't yet 712 * cleared during mac80211's suspend cycle. 713 */ 714 static bool ieee80211_can_queue_work(struct ieee80211_local *local) 715 { 716 if (WARN(local->suspended && !local->resuming, 717 "queueing ieee80211 work while going to suspend\n")) 718 return false; 719 720 return true; 721 } 722 723 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work) 724 { 725 struct ieee80211_local *local = hw_to_local(hw); 726 727 if (!ieee80211_can_queue_work(local)) 728 return; 729 730 queue_work(local->workqueue, work); 731 } 732 EXPORT_SYMBOL(ieee80211_queue_work); 733 734 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw, 735 struct delayed_work *dwork, 736 unsigned long delay) 737 { 738 struct ieee80211_local *local = hw_to_local(hw); 739 740 if (!ieee80211_can_queue_work(local)) 741 return; 742 743 queue_delayed_work(local->workqueue, dwork, delay); 744 } 745 EXPORT_SYMBOL(ieee80211_queue_delayed_work); 746 747 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action, 748 struct ieee802_11_elems *elems, 749 u64 filter, u32 crc) 750 { 751 size_t left = len; 752 const u8 *pos = start; 753 bool calc_crc = filter != 0; 754 DECLARE_BITMAP(seen_elems, 256); 755 const u8 *ie; 756 757 bitmap_zero(seen_elems, 256); 758 memset(elems, 0, sizeof(*elems)); 759 elems->ie_start = start; 760 elems->total_len = len; 761 762 while (left >= 2) { 763 u8 id, elen; 764 bool elem_parse_failed; 765 766 id = *pos++; 767 elen = *pos++; 768 left -= 2; 769 770 if (elen > left) { 771 elems->parse_error = true; 772 break; 773 } 774 775 switch (id) { 776 case WLAN_EID_SSID: 777 case WLAN_EID_SUPP_RATES: 778 case WLAN_EID_FH_PARAMS: 779 case WLAN_EID_DS_PARAMS: 780 case WLAN_EID_CF_PARAMS: 781 case WLAN_EID_TIM: 782 case WLAN_EID_IBSS_PARAMS: 783 case WLAN_EID_CHALLENGE: 784 case WLAN_EID_RSN: 785 case WLAN_EID_ERP_INFO: 786 case WLAN_EID_EXT_SUPP_RATES: 787 case WLAN_EID_HT_CAPABILITY: 788 case WLAN_EID_HT_OPERATION: 789 case WLAN_EID_VHT_CAPABILITY: 790 case WLAN_EID_VHT_OPERATION: 791 case WLAN_EID_MESH_ID: 792 case WLAN_EID_MESH_CONFIG: 793 case WLAN_EID_PEER_MGMT: 794 case WLAN_EID_PREQ: 795 case WLAN_EID_PREP: 796 case WLAN_EID_PERR: 797 case WLAN_EID_RANN: 798 case WLAN_EID_CHANNEL_SWITCH: 799 case WLAN_EID_EXT_CHANSWITCH_ANN: 800 case WLAN_EID_COUNTRY: 801 case WLAN_EID_PWR_CONSTRAINT: 802 case WLAN_EID_TIMEOUT_INTERVAL: 803 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 804 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 805 case WLAN_EID_CHAN_SWITCH_PARAM: 806 /* 807 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible 808 * that if the content gets bigger it might be needed more than once 809 */ 810 if (test_bit(id, seen_elems)) { 811 elems->parse_error = true; 812 left -= elen; 813 pos += elen; 814 continue; 815 } 816 break; 817 } 818 819 if (calc_crc && id < 64 && (filter & (1ULL << id))) 820 crc = crc32_be(crc, pos - 2, elen + 2); 821 822 elem_parse_failed = false; 823 824 switch (id) { 825 case WLAN_EID_SSID: 826 elems->ssid = pos; 827 elems->ssid_len = elen; 828 break; 829 case WLAN_EID_SUPP_RATES: 830 elems->supp_rates = pos; 831 elems->supp_rates_len = elen; 832 break; 833 case WLAN_EID_DS_PARAMS: 834 if (elen >= 1) 835 elems->ds_params = pos; 836 else 837 elem_parse_failed = true; 838 break; 839 case WLAN_EID_TIM: 840 if (elen >= sizeof(struct ieee80211_tim_ie)) { 841 elems->tim = (void *)pos; 842 elems->tim_len = elen; 843 } else 844 elem_parse_failed = true; 845 break; 846 case WLAN_EID_CHALLENGE: 847 elems->challenge = pos; 848 elems->challenge_len = elen; 849 break; 850 case WLAN_EID_VENDOR_SPECIFIC: 851 if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 && 852 pos[2] == 0xf2) { 853 /* Microsoft OUI (00:50:F2) */ 854 855 if (calc_crc) 856 crc = crc32_be(crc, pos - 2, elen + 2); 857 858 if (elen >= 5 && pos[3] == 2) { 859 /* OUI Type 2 - WMM IE */ 860 if (pos[4] == 0) { 861 elems->wmm_info = pos; 862 elems->wmm_info_len = elen; 863 } else if (pos[4] == 1) { 864 elems->wmm_param = pos; 865 elems->wmm_param_len = elen; 866 } 867 } 868 } 869 break; 870 case WLAN_EID_RSN: 871 elems->rsn = pos; 872 elems->rsn_len = elen; 873 break; 874 case WLAN_EID_ERP_INFO: 875 if (elen >= 1) 876 elems->erp_info = pos; 877 else 878 elem_parse_failed = true; 879 break; 880 case WLAN_EID_EXT_SUPP_RATES: 881 elems->ext_supp_rates = pos; 882 elems->ext_supp_rates_len = elen; 883 break; 884 case WLAN_EID_HT_CAPABILITY: 885 if (elen >= sizeof(struct ieee80211_ht_cap)) 886 elems->ht_cap_elem = (void *)pos; 887 else 888 elem_parse_failed = true; 889 break; 890 case WLAN_EID_HT_OPERATION: 891 if (elen >= sizeof(struct ieee80211_ht_operation)) 892 elems->ht_operation = (void *)pos; 893 else 894 elem_parse_failed = true; 895 break; 896 case WLAN_EID_VHT_CAPABILITY: 897 if (elen >= sizeof(struct ieee80211_vht_cap)) 898 elems->vht_cap_elem = (void *)pos; 899 else 900 elem_parse_failed = true; 901 break; 902 case WLAN_EID_VHT_OPERATION: 903 if (elen >= sizeof(struct ieee80211_vht_operation)) 904 elems->vht_operation = (void *)pos; 905 else 906 elem_parse_failed = true; 907 break; 908 case WLAN_EID_OPMODE_NOTIF: 909 if (elen > 0) 910 elems->opmode_notif = pos; 911 else 912 elem_parse_failed = true; 913 break; 914 case WLAN_EID_MESH_ID: 915 elems->mesh_id = pos; 916 elems->mesh_id_len = elen; 917 break; 918 case WLAN_EID_MESH_CONFIG: 919 if (elen >= sizeof(struct ieee80211_meshconf_ie)) 920 elems->mesh_config = (void *)pos; 921 else 922 elem_parse_failed = true; 923 break; 924 case WLAN_EID_PEER_MGMT: 925 elems->peering = pos; 926 elems->peering_len = elen; 927 break; 928 case WLAN_EID_MESH_AWAKE_WINDOW: 929 if (elen >= 2) 930 elems->awake_window = (void *)pos; 931 break; 932 case WLAN_EID_PREQ: 933 elems->preq = pos; 934 elems->preq_len = elen; 935 break; 936 case WLAN_EID_PREP: 937 elems->prep = pos; 938 elems->prep_len = elen; 939 break; 940 case WLAN_EID_PERR: 941 elems->perr = pos; 942 elems->perr_len = elen; 943 break; 944 case WLAN_EID_RANN: 945 if (elen >= sizeof(struct ieee80211_rann_ie)) 946 elems->rann = (void *)pos; 947 else 948 elem_parse_failed = true; 949 break; 950 case WLAN_EID_CHANNEL_SWITCH: 951 if (elen != sizeof(struct ieee80211_channel_sw_ie)) { 952 elem_parse_failed = true; 953 break; 954 } 955 elems->ch_switch_ie = (void *)pos; 956 break; 957 case WLAN_EID_EXT_CHANSWITCH_ANN: 958 if (elen != sizeof(struct ieee80211_ext_chansw_ie)) { 959 elem_parse_failed = true; 960 break; 961 } 962 elems->ext_chansw_ie = (void *)pos; 963 break; 964 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 965 if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) { 966 elem_parse_failed = true; 967 break; 968 } 969 elems->sec_chan_offs = (void *)pos; 970 break; 971 case WLAN_EID_CHAN_SWITCH_PARAM: 972 if (elen != 973 sizeof(*elems->mesh_chansw_params_ie)) { 974 elem_parse_failed = true; 975 break; 976 } 977 elems->mesh_chansw_params_ie = (void *)pos; 978 break; 979 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 980 if (!action || 981 elen != sizeof(*elems->wide_bw_chansw_ie)) { 982 elem_parse_failed = true; 983 break; 984 } 985 elems->wide_bw_chansw_ie = (void *)pos; 986 break; 987 case WLAN_EID_CHANNEL_SWITCH_WRAPPER: 988 if (action) { 989 elem_parse_failed = true; 990 break; 991 } 992 /* 993 * This is a bit tricky, but as we only care about 994 * the wide bandwidth channel switch element, so 995 * just parse it out manually. 996 */ 997 ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH, 998 pos, elen); 999 if (ie) { 1000 if (ie[1] == sizeof(*elems->wide_bw_chansw_ie)) 1001 elems->wide_bw_chansw_ie = 1002 (void *)(ie + 2); 1003 else 1004 elem_parse_failed = true; 1005 } 1006 break; 1007 case WLAN_EID_COUNTRY: 1008 elems->country_elem = pos; 1009 elems->country_elem_len = elen; 1010 break; 1011 case WLAN_EID_PWR_CONSTRAINT: 1012 if (elen != 1) { 1013 elem_parse_failed = true; 1014 break; 1015 } 1016 elems->pwr_constr_elem = pos; 1017 break; 1018 case WLAN_EID_CISCO_VENDOR_SPECIFIC: 1019 /* Lots of different options exist, but we only care 1020 * about the Dynamic Transmit Power Control element. 1021 * First check for the Cisco OUI, then for the DTPC 1022 * tag (0x00). 1023 */ 1024 if (elen < 4) { 1025 elem_parse_failed = true; 1026 break; 1027 } 1028 1029 if (pos[0] != 0x00 || pos[1] != 0x40 || 1030 pos[2] != 0x96 || pos[3] != 0x00) 1031 break; 1032 1033 if (elen != 6) { 1034 elem_parse_failed = true; 1035 break; 1036 } 1037 1038 if (calc_crc) 1039 crc = crc32_be(crc, pos - 2, elen + 2); 1040 1041 elems->cisco_dtpc_elem = pos; 1042 break; 1043 case WLAN_EID_TIMEOUT_INTERVAL: 1044 if (elen >= sizeof(struct ieee80211_timeout_interval_ie)) 1045 elems->timeout_int = (void *)pos; 1046 else 1047 elem_parse_failed = true; 1048 break; 1049 default: 1050 break; 1051 } 1052 1053 if (elem_parse_failed) 1054 elems->parse_error = true; 1055 else 1056 __set_bit(id, seen_elems); 1057 1058 left -= elen; 1059 pos += elen; 1060 } 1061 1062 if (left != 0) 1063 elems->parse_error = true; 1064 1065 return crc; 1066 } 1067 1068 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata, 1069 bool bss_notify) 1070 { 1071 struct ieee80211_local *local = sdata->local; 1072 struct ieee80211_tx_queue_params qparam; 1073 struct ieee80211_chanctx_conf *chanctx_conf; 1074 int ac; 1075 bool use_11b, enable_qos; 1076 int aCWmin, aCWmax; 1077 1078 if (!local->ops->conf_tx) 1079 return; 1080 1081 if (local->hw.queues < IEEE80211_NUM_ACS) 1082 return; 1083 1084 memset(&qparam, 0, sizeof(qparam)); 1085 1086 rcu_read_lock(); 1087 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 1088 use_11b = (chanctx_conf && 1089 chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) && 1090 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE); 1091 rcu_read_unlock(); 1092 1093 /* 1094 * By default disable QoS in STA mode for old access points, which do 1095 * not support 802.11e. New APs will provide proper queue parameters, 1096 * that we will configure later. 1097 */ 1098 enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION); 1099 1100 /* Set defaults according to 802.11-2007 Table 7-37 */ 1101 aCWmax = 1023; 1102 if (use_11b) 1103 aCWmin = 31; 1104 else 1105 aCWmin = 15; 1106 1107 /* Confiure old 802.11b/g medium access rules. */ 1108 qparam.cw_max = aCWmax; 1109 qparam.cw_min = aCWmin; 1110 qparam.txop = 0; 1111 qparam.aifs = 2; 1112 1113 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1114 /* Update if QoS is enabled. */ 1115 if (enable_qos) { 1116 switch (ac) { 1117 case IEEE80211_AC_BK: 1118 qparam.cw_max = aCWmax; 1119 qparam.cw_min = aCWmin; 1120 qparam.txop = 0; 1121 qparam.aifs = 7; 1122 break; 1123 /* never happens but let's not leave undefined */ 1124 default: 1125 case IEEE80211_AC_BE: 1126 qparam.cw_max = aCWmax; 1127 qparam.cw_min = aCWmin; 1128 qparam.txop = 0; 1129 qparam.aifs = 3; 1130 break; 1131 case IEEE80211_AC_VI: 1132 qparam.cw_max = aCWmin; 1133 qparam.cw_min = (aCWmin + 1) / 2 - 1; 1134 if (use_11b) 1135 qparam.txop = 6016/32; 1136 else 1137 qparam.txop = 3008/32; 1138 qparam.aifs = 2; 1139 break; 1140 case IEEE80211_AC_VO: 1141 qparam.cw_max = (aCWmin + 1) / 2 - 1; 1142 qparam.cw_min = (aCWmin + 1) / 4 - 1; 1143 if (use_11b) 1144 qparam.txop = 3264/32; 1145 else 1146 qparam.txop = 1504/32; 1147 qparam.aifs = 2; 1148 break; 1149 } 1150 } 1151 1152 qparam.uapsd = false; 1153 1154 sdata->tx_conf[ac] = qparam; 1155 drv_conf_tx(local, sdata, ac, &qparam); 1156 } 1157 1158 if (sdata->vif.type != NL80211_IFTYPE_MONITOR && 1159 sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) { 1160 sdata->vif.bss_conf.qos = enable_qos; 1161 if (bss_notify) 1162 ieee80211_bss_info_change_notify(sdata, 1163 BSS_CHANGED_QOS); 1164 } 1165 } 1166 1167 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata, 1168 u16 transaction, u16 auth_alg, u16 status, 1169 const u8 *extra, size_t extra_len, const u8 *da, 1170 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx, 1171 u32 tx_flags) 1172 { 1173 struct ieee80211_local *local = sdata->local; 1174 struct sk_buff *skb; 1175 struct ieee80211_mgmt *mgmt; 1176 int err; 1177 1178 /* 24 + 6 = header + auth_algo + auth_transaction + status_code */ 1179 skb = dev_alloc_skb(local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN + 1180 24 + 6 + extra_len + IEEE80211_WEP_ICV_LEN); 1181 if (!skb) 1182 return; 1183 1184 skb_reserve(skb, local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN); 1185 1186 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6); 1187 memset(mgmt, 0, 24 + 6); 1188 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 1189 IEEE80211_STYPE_AUTH); 1190 memcpy(mgmt->da, da, ETH_ALEN); 1191 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1192 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1193 mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg); 1194 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction); 1195 mgmt->u.auth.status_code = cpu_to_le16(status); 1196 if (extra) 1197 memcpy(skb_put(skb, extra_len), extra, extra_len); 1198 1199 if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) { 1200 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 1201 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx); 1202 WARN_ON(err); 1203 } 1204 1205 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT | 1206 tx_flags; 1207 ieee80211_tx_skb(sdata, skb); 1208 } 1209 1210 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, 1211 const u8 *bssid, u16 stype, u16 reason, 1212 bool send_frame, u8 *frame_buf) 1213 { 1214 struct ieee80211_local *local = sdata->local; 1215 struct sk_buff *skb; 1216 struct ieee80211_mgmt *mgmt = (void *)frame_buf; 1217 1218 /* build frame */ 1219 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); 1220 mgmt->duration = 0; /* initialize only */ 1221 mgmt->seq_ctrl = 0; /* initialize only */ 1222 memcpy(mgmt->da, bssid, ETH_ALEN); 1223 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1224 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1225 /* u.deauth.reason_code == u.disassoc.reason_code */ 1226 mgmt->u.deauth.reason_code = cpu_to_le16(reason); 1227 1228 if (send_frame) { 1229 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 1230 IEEE80211_DEAUTH_FRAME_LEN); 1231 if (!skb) 1232 return; 1233 1234 skb_reserve(skb, local->hw.extra_tx_headroom); 1235 1236 /* copy in frame */ 1237 memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN), 1238 mgmt, IEEE80211_DEAUTH_FRAME_LEN); 1239 1240 if (sdata->vif.type != NL80211_IFTYPE_STATION || 1241 !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED)) 1242 IEEE80211_SKB_CB(skb)->flags |= 1243 IEEE80211_TX_INTFL_DONT_ENCRYPT; 1244 1245 ieee80211_tx_skb(sdata, skb); 1246 } 1247 } 1248 1249 static int ieee80211_build_preq_ies_band(struct ieee80211_local *local, 1250 u8 *buffer, size_t buffer_len, 1251 const u8 *ie, size_t ie_len, 1252 enum ieee80211_band band, 1253 u32 rate_mask, 1254 struct cfg80211_chan_def *chandef, 1255 size_t *offset) 1256 { 1257 struct ieee80211_supported_band *sband; 1258 u8 *pos = buffer, *end = buffer + buffer_len; 1259 size_t noffset; 1260 int supp_rates_len, i; 1261 u8 rates[32]; 1262 int num_rates; 1263 int ext_rates_len; 1264 int shift; 1265 u32 rate_flags; 1266 1267 *offset = 0; 1268 1269 sband = local->hw.wiphy->bands[band]; 1270 if (WARN_ON_ONCE(!sband)) 1271 return 0; 1272 1273 rate_flags = ieee80211_chandef_rate_flags(chandef); 1274 shift = ieee80211_chandef_get_shift(chandef); 1275 1276 num_rates = 0; 1277 for (i = 0; i < sband->n_bitrates; i++) { 1278 if ((BIT(i) & rate_mask) == 0) 1279 continue; /* skip rate */ 1280 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 1281 continue; 1282 1283 rates[num_rates++] = 1284 (u8) DIV_ROUND_UP(sband->bitrates[i].bitrate, 1285 (1 << shift) * 5); 1286 } 1287 1288 supp_rates_len = min_t(int, num_rates, 8); 1289 1290 if (end - pos < 2 + supp_rates_len) 1291 goto out_err; 1292 *pos++ = WLAN_EID_SUPP_RATES; 1293 *pos++ = supp_rates_len; 1294 memcpy(pos, rates, supp_rates_len); 1295 pos += supp_rates_len; 1296 1297 /* insert "request information" if in custom IEs */ 1298 if (ie && ie_len) { 1299 static const u8 before_extrates[] = { 1300 WLAN_EID_SSID, 1301 WLAN_EID_SUPP_RATES, 1302 WLAN_EID_REQUEST, 1303 }; 1304 noffset = ieee80211_ie_split(ie, ie_len, 1305 before_extrates, 1306 ARRAY_SIZE(before_extrates), 1307 *offset); 1308 if (end - pos < noffset - *offset) 1309 goto out_err; 1310 memcpy(pos, ie + *offset, noffset - *offset); 1311 pos += noffset - *offset; 1312 *offset = noffset; 1313 } 1314 1315 ext_rates_len = num_rates - supp_rates_len; 1316 if (ext_rates_len > 0) { 1317 if (end - pos < 2 + ext_rates_len) 1318 goto out_err; 1319 *pos++ = WLAN_EID_EXT_SUPP_RATES; 1320 *pos++ = ext_rates_len; 1321 memcpy(pos, rates + supp_rates_len, ext_rates_len); 1322 pos += ext_rates_len; 1323 } 1324 1325 if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) { 1326 if (end - pos < 3) 1327 goto out_err; 1328 *pos++ = WLAN_EID_DS_PARAMS; 1329 *pos++ = 1; 1330 *pos++ = ieee80211_frequency_to_channel( 1331 chandef->chan->center_freq); 1332 } 1333 1334 /* insert custom IEs that go before HT */ 1335 if (ie && ie_len) { 1336 static const u8 before_ht[] = { 1337 WLAN_EID_SSID, 1338 WLAN_EID_SUPP_RATES, 1339 WLAN_EID_REQUEST, 1340 WLAN_EID_EXT_SUPP_RATES, 1341 WLAN_EID_DS_PARAMS, 1342 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1343 }; 1344 noffset = ieee80211_ie_split(ie, ie_len, 1345 before_ht, ARRAY_SIZE(before_ht), 1346 *offset); 1347 if (end - pos < noffset - *offset) 1348 goto out_err; 1349 memcpy(pos, ie + *offset, noffset - *offset); 1350 pos += noffset - *offset; 1351 *offset = noffset; 1352 } 1353 1354 if (sband->ht_cap.ht_supported) { 1355 if (end - pos < 2 + sizeof(struct ieee80211_ht_cap)) 1356 goto out_err; 1357 pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, 1358 sband->ht_cap.cap); 1359 } 1360 1361 /* 1362 * If adding more here, adjust code in main.c 1363 * that calculates local->scan_ies_len. 1364 */ 1365 1366 /* insert custom IEs that go before VHT */ 1367 if (ie && ie_len) { 1368 static const u8 before_vht[] = { 1369 WLAN_EID_SSID, 1370 WLAN_EID_SUPP_RATES, 1371 WLAN_EID_REQUEST, 1372 WLAN_EID_EXT_SUPP_RATES, 1373 WLAN_EID_DS_PARAMS, 1374 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1375 WLAN_EID_HT_CAPABILITY, 1376 WLAN_EID_BSS_COEX_2040, 1377 WLAN_EID_EXT_CAPABILITY, 1378 WLAN_EID_SSID_LIST, 1379 WLAN_EID_CHANNEL_USAGE, 1380 WLAN_EID_INTERWORKING, 1381 /* mesh ID can't happen here */ 1382 /* 60 GHz can't happen here right now */ 1383 }; 1384 noffset = ieee80211_ie_split(ie, ie_len, 1385 before_vht, ARRAY_SIZE(before_vht), 1386 *offset); 1387 if (end - pos < noffset - *offset) 1388 goto out_err; 1389 memcpy(pos, ie + *offset, noffset - *offset); 1390 pos += noffset - *offset; 1391 *offset = noffset; 1392 } 1393 1394 if (sband->vht_cap.vht_supported) { 1395 if (end - pos < 2 + sizeof(struct ieee80211_vht_cap)) 1396 goto out_err; 1397 pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, 1398 sband->vht_cap.cap); 1399 } 1400 1401 return pos - buffer; 1402 out_err: 1403 WARN_ONCE(1, "not enough space for preq IEs\n"); 1404 return pos - buffer; 1405 } 1406 1407 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer, 1408 size_t buffer_len, 1409 struct ieee80211_scan_ies *ie_desc, 1410 const u8 *ie, size_t ie_len, 1411 u8 bands_used, u32 *rate_masks, 1412 struct cfg80211_chan_def *chandef) 1413 { 1414 size_t pos = 0, old_pos = 0, custom_ie_offset = 0; 1415 int i; 1416 1417 memset(ie_desc, 0, sizeof(*ie_desc)); 1418 1419 for (i = 0; i < IEEE80211_NUM_BANDS; i++) { 1420 if (bands_used & BIT(i)) { 1421 pos += ieee80211_build_preq_ies_band(local, 1422 buffer + pos, 1423 buffer_len - pos, 1424 ie, ie_len, i, 1425 rate_masks[i], 1426 chandef, 1427 &custom_ie_offset); 1428 ie_desc->ies[i] = buffer + old_pos; 1429 ie_desc->len[i] = pos - old_pos; 1430 old_pos = pos; 1431 } 1432 } 1433 1434 /* add any remaining custom IEs */ 1435 if (ie && ie_len) { 1436 if (WARN_ONCE(buffer_len - pos < ie_len - custom_ie_offset, 1437 "not enough space for preq custom IEs\n")) 1438 return pos; 1439 memcpy(buffer + pos, ie + custom_ie_offset, 1440 ie_len - custom_ie_offset); 1441 ie_desc->common_ies = buffer + pos; 1442 ie_desc->common_ie_len = ie_len - custom_ie_offset; 1443 pos += ie_len - custom_ie_offset; 1444 } 1445 1446 return pos; 1447 }; 1448 1449 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata, 1450 u8 *dst, u32 ratemask, 1451 struct ieee80211_channel *chan, 1452 const u8 *ssid, size_t ssid_len, 1453 const u8 *ie, size_t ie_len, 1454 bool directed) 1455 { 1456 struct ieee80211_local *local = sdata->local; 1457 struct cfg80211_chan_def chandef; 1458 struct sk_buff *skb; 1459 struct ieee80211_mgmt *mgmt; 1460 int ies_len; 1461 u32 rate_masks[IEEE80211_NUM_BANDS] = {}; 1462 struct ieee80211_scan_ies dummy_ie_desc; 1463 1464 /* 1465 * Do not send DS Channel parameter for directed probe requests 1466 * in order to maximize the chance that we get a response. Some 1467 * badly-behaved APs don't respond when this parameter is included. 1468 */ 1469 chandef.width = sdata->vif.bss_conf.chandef.width; 1470 if (directed) 1471 chandef.chan = NULL; 1472 else 1473 chandef.chan = chan; 1474 1475 skb = ieee80211_probereq_get(&local->hw, &sdata->vif, 1476 ssid, ssid_len, 100 + ie_len); 1477 if (!skb) 1478 return NULL; 1479 1480 rate_masks[chan->band] = ratemask; 1481 ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb), 1482 skb_tailroom(skb), &dummy_ie_desc, 1483 ie, ie_len, BIT(chan->band), 1484 rate_masks, &chandef); 1485 skb_put(skb, ies_len); 1486 1487 if (dst) { 1488 mgmt = (struct ieee80211_mgmt *) skb->data; 1489 memcpy(mgmt->da, dst, ETH_ALEN); 1490 memcpy(mgmt->bssid, dst, ETH_ALEN); 1491 } 1492 1493 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; 1494 1495 return skb; 1496 } 1497 1498 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst, 1499 const u8 *ssid, size_t ssid_len, 1500 const u8 *ie, size_t ie_len, 1501 u32 ratemask, bool directed, u32 tx_flags, 1502 struct ieee80211_channel *channel, bool scan) 1503 { 1504 struct sk_buff *skb; 1505 1506 skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel, 1507 ssid, ssid_len, 1508 ie, ie_len, directed); 1509 if (skb) { 1510 IEEE80211_SKB_CB(skb)->flags |= tx_flags; 1511 if (scan) 1512 ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band); 1513 else 1514 ieee80211_tx_skb(sdata, skb); 1515 } 1516 } 1517 1518 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata, 1519 struct ieee802_11_elems *elems, 1520 enum ieee80211_band band, u32 *basic_rates) 1521 { 1522 struct ieee80211_supported_band *sband; 1523 size_t num_rates; 1524 u32 supp_rates, rate_flags; 1525 int i, j, shift; 1526 sband = sdata->local->hw.wiphy->bands[band]; 1527 1528 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 1529 shift = ieee80211_vif_get_shift(&sdata->vif); 1530 1531 if (WARN_ON(!sband)) 1532 return 1; 1533 1534 num_rates = sband->n_bitrates; 1535 supp_rates = 0; 1536 for (i = 0; i < elems->supp_rates_len + 1537 elems->ext_supp_rates_len; i++) { 1538 u8 rate = 0; 1539 int own_rate; 1540 bool is_basic; 1541 if (i < elems->supp_rates_len) 1542 rate = elems->supp_rates[i]; 1543 else if (elems->ext_supp_rates) 1544 rate = elems->ext_supp_rates 1545 [i - elems->supp_rates_len]; 1546 own_rate = 5 * (rate & 0x7f); 1547 is_basic = !!(rate & 0x80); 1548 1549 if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY) 1550 continue; 1551 1552 for (j = 0; j < num_rates; j++) { 1553 int brate; 1554 if ((rate_flags & sband->bitrates[j].flags) 1555 != rate_flags) 1556 continue; 1557 1558 brate = DIV_ROUND_UP(sband->bitrates[j].bitrate, 1559 1 << shift); 1560 1561 if (brate == own_rate) { 1562 supp_rates |= BIT(j); 1563 if (basic_rates && is_basic) 1564 *basic_rates |= BIT(j); 1565 } 1566 } 1567 } 1568 return supp_rates; 1569 } 1570 1571 void ieee80211_stop_device(struct ieee80211_local *local) 1572 { 1573 ieee80211_led_radio(local, false); 1574 ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO); 1575 1576 cancel_work_sync(&local->reconfig_filter); 1577 1578 flush_workqueue(local->workqueue); 1579 drv_stop(local); 1580 } 1581 1582 static void ieee80211_handle_reconfig_failure(struct ieee80211_local *local) 1583 { 1584 struct ieee80211_sub_if_data *sdata; 1585 struct ieee80211_chanctx *ctx; 1586 1587 /* 1588 * We get here if during resume the device can't be restarted properly. 1589 * We might also get here if this happens during HW reset, which is a 1590 * slightly different situation and we need to drop all connections in 1591 * the latter case. 1592 * 1593 * Ask cfg80211 to turn off all interfaces, this will result in more 1594 * warnings but at least we'll then get into a clean stopped state. 1595 */ 1596 1597 local->resuming = false; 1598 local->suspended = false; 1599 local->started = false; 1600 1601 /* scheduled scan clearly can't be running any more, but tell 1602 * cfg80211 and clear local state 1603 */ 1604 ieee80211_sched_scan_end(local); 1605 1606 list_for_each_entry(sdata, &local->interfaces, list) 1607 sdata->flags &= ~IEEE80211_SDATA_IN_DRIVER; 1608 1609 /* Mark channel contexts as not being in the driver any more to avoid 1610 * removing them from the driver during the shutdown process... 1611 */ 1612 mutex_lock(&local->chanctx_mtx); 1613 list_for_each_entry(ctx, &local->chanctx_list, list) 1614 ctx->driver_present = false; 1615 mutex_unlock(&local->chanctx_mtx); 1616 1617 cfg80211_shutdown_all_interfaces(local->hw.wiphy); 1618 } 1619 1620 static void ieee80211_assign_chanctx(struct ieee80211_local *local, 1621 struct ieee80211_sub_if_data *sdata) 1622 { 1623 struct ieee80211_chanctx_conf *conf; 1624 struct ieee80211_chanctx *ctx; 1625 1626 if (!local->use_chanctx) 1627 return; 1628 1629 mutex_lock(&local->chanctx_mtx); 1630 conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1631 lockdep_is_held(&local->chanctx_mtx)); 1632 if (conf) { 1633 ctx = container_of(conf, struct ieee80211_chanctx, conf); 1634 drv_assign_vif_chanctx(local, sdata, ctx); 1635 } 1636 mutex_unlock(&local->chanctx_mtx); 1637 } 1638 1639 int ieee80211_reconfig(struct ieee80211_local *local) 1640 { 1641 struct ieee80211_hw *hw = &local->hw; 1642 struct ieee80211_sub_if_data *sdata; 1643 struct ieee80211_chanctx *ctx; 1644 struct sta_info *sta; 1645 int res, i; 1646 bool reconfig_due_to_wowlan = false; 1647 struct ieee80211_sub_if_data *sched_scan_sdata; 1648 bool sched_scan_stopped = false; 1649 1650 #ifdef CONFIG_PM 1651 if (local->suspended) 1652 local->resuming = true; 1653 1654 if (local->wowlan) { 1655 res = drv_resume(local); 1656 local->wowlan = false; 1657 if (res < 0) { 1658 local->resuming = false; 1659 return res; 1660 } 1661 if (res == 0) 1662 goto wake_up; 1663 WARN_ON(res > 1); 1664 /* 1665 * res is 1, which means the driver requested 1666 * to go through a regular reset on wakeup. 1667 */ 1668 reconfig_due_to_wowlan = true; 1669 } 1670 #endif 1671 /* everything else happens only if HW was up & running */ 1672 if (!local->open_count) 1673 goto wake_up; 1674 1675 /* 1676 * Upon resume hardware can sometimes be goofy due to 1677 * various platform / driver / bus issues, so restarting 1678 * the device may at times not work immediately. Propagate 1679 * the error. 1680 */ 1681 res = drv_start(local); 1682 if (res) { 1683 if (local->suspended) 1684 WARN(1, "Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue.\n"); 1685 else 1686 WARN(1, "Hardware became unavailable during restart.\n"); 1687 ieee80211_handle_reconfig_failure(local); 1688 return res; 1689 } 1690 1691 /* setup fragmentation threshold */ 1692 drv_set_frag_threshold(local, hw->wiphy->frag_threshold); 1693 1694 /* setup RTS threshold */ 1695 drv_set_rts_threshold(local, hw->wiphy->rts_threshold); 1696 1697 /* reset coverage class */ 1698 drv_set_coverage_class(local, hw->wiphy->coverage_class); 1699 1700 ieee80211_led_radio(local, true); 1701 ieee80211_mod_tpt_led_trig(local, 1702 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0); 1703 1704 /* add interfaces */ 1705 sdata = rtnl_dereference(local->monitor_sdata); 1706 if (sdata) { 1707 /* in HW restart it exists already */ 1708 WARN_ON(local->resuming); 1709 res = drv_add_interface(local, sdata); 1710 if (WARN_ON(res)) { 1711 RCU_INIT_POINTER(local->monitor_sdata, NULL); 1712 synchronize_net(); 1713 kfree(sdata); 1714 } 1715 } 1716 1717 list_for_each_entry(sdata, &local->interfaces, list) { 1718 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 1719 sdata->vif.type != NL80211_IFTYPE_MONITOR && 1720 ieee80211_sdata_running(sdata)) 1721 res = drv_add_interface(local, sdata); 1722 } 1723 1724 /* add channel contexts */ 1725 if (local->use_chanctx) { 1726 mutex_lock(&local->chanctx_mtx); 1727 list_for_each_entry(ctx, &local->chanctx_list, list) 1728 if (ctx->replace_state != 1729 IEEE80211_CHANCTX_REPLACES_OTHER) 1730 WARN_ON(drv_add_chanctx(local, ctx)); 1731 mutex_unlock(&local->chanctx_mtx); 1732 1733 list_for_each_entry(sdata, &local->interfaces, list) { 1734 if (!ieee80211_sdata_running(sdata)) 1735 continue; 1736 ieee80211_assign_chanctx(local, sdata); 1737 } 1738 1739 sdata = rtnl_dereference(local->monitor_sdata); 1740 if (sdata && ieee80211_sdata_running(sdata)) 1741 ieee80211_assign_chanctx(local, sdata); 1742 } 1743 1744 /* add STAs back */ 1745 mutex_lock(&local->sta_mtx); 1746 list_for_each_entry(sta, &local->sta_list, list) { 1747 enum ieee80211_sta_state state; 1748 1749 if (!sta->uploaded) 1750 continue; 1751 1752 /* AP-mode stations will be added later */ 1753 if (sta->sdata->vif.type == NL80211_IFTYPE_AP) 1754 continue; 1755 1756 for (state = IEEE80211_STA_NOTEXIST; 1757 state < sta->sta_state; state++) 1758 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1759 state + 1)); 1760 } 1761 mutex_unlock(&local->sta_mtx); 1762 1763 /* reconfigure tx conf */ 1764 if (hw->queues >= IEEE80211_NUM_ACS) { 1765 list_for_each_entry(sdata, &local->interfaces, list) { 1766 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 1767 sdata->vif.type == NL80211_IFTYPE_MONITOR || 1768 !ieee80211_sdata_running(sdata)) 1769 continue; 1770 1771 for (i = 0; i < IEEE80211_NUM_ACS; i++) 1772 drv_conf_tx(local, sdata, i, 1773 &sdata->tx_conf[i]); 1774 } 1775 } 1776 1777 /* reconfigure hardware */ 1778 ieee80211_hw_config(local, ~0); 1779 1780 ieee80211_configure_filter(local); 1781 1782 /* Finally also reconfigure all the BSS information */ 1783 list_for_each_entry(sdata, &local->interfaces, list) { 1784 u32 changed; 1785 1786 if (!ieee80211_sdata_running(sdata)) 1787 continue; 1788 1789 /* common change flags for all interface types */ 1790 changed = BSS_CHANGED_ERP_CTS_PROT | 1791 BSS_CHANGED_ERP_PREAMBLE | 1792 BSS_CHANGED_ERP_SLOT | 1793 BSS_CHANGED_HT | 1794 BSS_CHANGED_BASIC_RATES | 1795 BSS_CHANGED_BEACON_INT | 1796 BSS_CHANGED_BSSID | 1797 BSS_CHANGED_CQM | 1798 BSS_CHANGED_QOS | 1799 BSS_CHANGED_IDLE | 1800 BSS_CHANGED_TXPOWER; 1801 1802 switch (sdata->vif.type) { 1803 case NL80211_IFTYPE_STATION: 1804 changed |= BSS_CHANGED_ASSOC | 1805 BSS_CHANGED_ARP_FILTER | 1806 BSS_CHANGED_PS; 1807 1808 /* Re-send beacon info report to the driver */ 1809 if (sdata->u.mgd.have_beacon) 1810 changed |= BSS_CHANGED_BEACON_INFO; 1811 1812 sdata_lock(sdata); 1813 ieee80211_bss_info_change_notify(sdata, changed); 1814 sdata_unlock(sdata); 1815 break; 1816 case NL80211_IFTYPE_ADHOC: 1817 changed |= BSS_CHANGED_IBSS; 1818 /* fall through */ 1819 case NL80211_IFTYPE_AP: 1820 changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS; 1821 1822 if (sdata->vif.type == NL80211_IFTYPE_AP) { 1823 changed |= BSS_CHANGED_AP_PROBE_RESP; 1824 1825 if (rcu_access_pointer(sdata->u.ap.beacon)) 1826 drv_start_ap(local, sdata); 1827 } 1828 1829 /* fall through */ 1830 case NL80211_IFTYPE_MESH_POINT: 1831 if (sdata->vif.bss_conf.enable_beacon) { 1832 changed |= BSS_CHANGED_BEACON | 1833 BSS_CHANGED_BEACON_ENABLED; 1834 ieee80211_bss_info_change_notify(sdata, changed); 1835 } 1836 break; 1837 case NL80211_IFTYPE_WDS: 1838 case NL80211_IFTYPE_AP_VLAN: 1839 case NL80211_IFTYPE_MONITOR: 1840 case NL80211_IFTYPE_P2P_DEVICE: 1841 /* nothing to do */ 1842 break; 1843 case NL80211_IFTYPE_UNSPECIFIED: 1844 case NUM_NL80211_IFTYPES: 1845 case NL80211_IFTYPE_P2P_CLIENT: 1846 case NL80211_IFTYPE_P2P_GO: 1847 WARN_ON(1); 1848 break; 1849 } 1850 } 1851 1852 ieee80211_recalc_ps(local, -1); 1853 1854 /* 1855 * The sta might be in psm against the ap (e.g. because 1856 * this was the state before a hw restart), so we 1857 * explicitly send a null packet in order to make sure 1858 * it'll sync against the ap (and get out of psm). 1859 */ 1860 if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) { 1861 list_for_each_entry(sdata, &local->interfaces, list) { 1862 if (sdata->vif.type != NL80211_IFTYPE_STATION) 1863 continue; 1864 if (!sdata->u.mgd.associated) 1865 continue; 1866 1867 ieee80211_send_nullfunc(local, sdata, 0); 1868 } 1869 } 1870 1871 /* APs are now beaconing, add back stations */ 1872 mutex_lock(&local->sta_mtx); 1873 list_for_each_entry(sta, &local->sta_list, list) { 1874 enum ieee80211_sta_state state; 1875 1876 if (!sta->uploaded) 1877 continue; 1878 1879 if (sta->sdata->vif.type != NL80211_IFTYPE_AP) 1880 continue; 1881 1882 for (state = IEEE80211_STA_NOTEXIST; 1883 state < sta->sta_state; state++) 1884 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1885 state + 1)); 1886 } 1887 mutex_unlock(&local->sta_mtx); 1888 1889 /* add back keys */ 1890 list_for_each_entry(sdata, &local->interfaces, list) 1891 if (ieee80211_sdata_running(sdata)) 1892 ieee80211_enable_keys(sdata); 1893 1894 wake_up: 1895 local->in_reconfig = false; 1896 barrier(); 1897 1898 if (local->monitors == local->open_count && local->monitors > 0) 1899 ieee80211_add_virtual_monitor(local); 1900 1901 /* 1902 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation 1903 * sessions can be established after a resume. 1904 * 1905 * Also tear down aggregation sessions since reconfiguring 1906 * them in a hardware restart scenario is not easily done 1907 * right now, and the hardware will have lost information 1908 * about the sessions, but we and the AP still think they 1909 * are active. This is really a workaround though. 1910 */ 1911 if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) { 1912 mutex_lock(&local->sta_mtx); 1913 1914 list_for_each_entry(sta, &local->sta_list, list) { 1915 ieee80211_sta_tear_down_BA_sessions( 1916 sta, AGG_STOP_LOCAL_REQUEST); 1917 clear_sta_flag(sta, WLAN_STA_BLOCK_BA); 1918 } 1919 1920 mutex_unlock(&local->sta_mtx); 1921 } 1922 1923 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 1924 IEEE80211_QUEUE_STOP_REASON_SUSPEND, 1925 false); 1926 1927 /* 1928 * Reconfigure sched scan if it was interrupted by FW restart or 1929 * suspend. 1930 */ 1931 mutex_lock(&local->mtx); 1932 sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata, 1933 lockdep_is_held(&local->mtx)); 1934 if (sched_scan_sdata && local->sched_scan_req) 1935 /* 1936 * Sched scan stopped, but we don't want to report it. Instead, 1937 * we're trying to reschedule. 1938 */ 1939 if (__ieee80211_request_sched_scan_start(sched_scan_sdata, 1940 local->sched_scan_req)) 1941 sched_scan_stopped = true; 1942 mutex_unlock(&local->mtx); 1943 1944 if (sched_scan_stopped) 1945 cfg80211_sched_scan_stopped_rtnl(local->hw.wiphy); 1946 1947 /* 1948 * If this is for hw restart things are still running. 1949 * We may want to change that later, however. 1950 */ 1951 if (!local->suspended || reconfig_due_to_wowlan) 1952 drv_restart_complete(local); 1953 1954 if (!local->suspended) 1955 return 0; 1956 1957 #ifdef CONFIG_PM 1958 /* first set suspended false, then resuming */ 1959 local->suspended = false; 1960 mb(); 1961 local->resuming = false; 1962 1963 list_for_each_entry(sdata, &local->interfaces, list) { 1964 if (!ieee80211_sdata_running(sdata)) 1965 continue; 1966 if (sdata->vif.type == NL80211_IFTYPE_STATION) 1967 ieee80211_sta_restart(sdata); 1968 } 1969 1970 mod_timer(&local->sta_cleanup, jiffies + 1); 1971 #else 1972 WARN_ON(1); 1973 #endif 1974 1975 return 0; 1976 } 1977 1978 void ieee80211_resume_disconnect(struct ieee80211_vif *vif) 1979 { 1980 struct ieee80211_sub_if_data *sdata; 1981 struct ieee80211_local *local; 1982 struct ieee80211_key *key; 1983 1984 if (WARN_ON(!vif)) 1985 return; 1986 1987 sdata = vif_to_sdata(vif); 1988 local = sdata->local; 1989 1990 if (WARN_ON(!local->resuming)) 1991 return; 1992 1993 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION)) 1994 return; 1995 1996 sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME; 1997 1998 mutex_lock(&local->key_mtx); 1999 list_for_each_entry(key, &sdata->key_list, list) 2000 key->flags |= KEY_FLAG_TAINTED; 2001 mutex_unlock(&local->key_mtx); 2002 } 2003 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect); 2004 2005 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata) 2006 { 2007 struct ieee80211_local *local = sdata->local; 2008 struct ieee80211_chanctx_conf *chanctx_conf; 2009 struct ieee80211_chanctx *chanctx; 2010 2011 mutex_lock(&local->chanctx_mtx); 2012 2013 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 2014 lockdep_is_held(&local->chanctx_mtx)); 2015 2016 if (WARN_ON_ONCE(!chanctx_conf)) 2017 goto unlock; 2018 2019 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 2020 ieee80211_recalc_smps_chanctx(local, chanctx); 2021 unlock: 2022 mutex_unlock(&local->chanctx_mtx); 2023 } 2024 2025 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata) 2026 { 2027 struct ieee80211_local *local = sdata->local; 2028 struct ieee80211_chanctx_conf *chanctx_conf; 2029 struct ieee80211_chanctx *chanctx; 2030 2031 mutex_lock(&local->chanctx_mtx); 2032 2033 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 2034 lockdep_is_held(&local->chanctx_mtx)); 2035 2036 if (WARN_ON_ONCE(!chanctx_conf)) 2037 goto unlock; 2038 2039 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 2040 ieee80211_recalc_chanctx_min_def(local, chanctx); 2041 unlock: 2042 mutex_unlock(&local->chanctx_mtx); 2043 } 2044 2045 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id) 2046 { 2047 int i; 2048 2049 for (i = 0; i < n_ids; i++) 2050 if (ids[i] == id) 2051 return true; 2052 return false; 2053 } 2054 2055 /** 2056 * ieee80211_ie_split - split an IE buffer according to ordering 2057 * 2058 * @ies: the IE buffer 2059 * @ielen: the length of the IE buffer 2060 * @ids: an array with element IDs that are allowed before 2061 * the split 2062 * @n_ids: the size of the element ID array 2063 * @offset: offset where to start splitting in the buffer 2064 * 2065 * This function splits an IE buffer by updating the @offset 2066 * variable to point to the location where the buffer should be 2067 * split. 2068 * 2069 * It assumes that the given IE buffer is well-formed, this 2070 * has to be guaranteed by the caller! 2071 * 2072 * It also assumes that the IEs in the buffer are ordered 2073 * correctly, if not the result of using this function will not 2074 * be ordered correctly either, i.e. it does no reordering. 2075 * 2076 * The function returns the offset where the next part of the 2077 * buffer starts, which may be @ielen if the entire (remainder) 2078 * of the buffer should be used. 2079 */ 2080 size_t ieee80211_ie_split(const u8 *ies, size_t ielen, 2081 const u8 *ids, int n_ids, size_t offset) 2082 { 2083 size_t pos = offset; 2084 2085 while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos])) 2086 pos += 2 + ies[pos + 1]; 2087 2088 return pos; 2089 } 2090 2091 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset) 2092 { 2093 size_t pos = offset; 2094 2095 while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC) 2096 pos += 2 + ies[pos + 1]; 2097 2098 return pos; 2099 } 2100 2101 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata, 2102 int rssi_min_thold, 2103 int rssi_max_thold) 2104 { 2105 trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold); 2106 2107 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) 2108 return; 2109 2110 /* 2111 * Scale up threshold values before storing it, as the RSSI averaging 2112 * algorithm uses a scaled up value as well. Change this scaling 2113 * factor if the RSSI averaging algorithm changes. 2114 */ 2115 sdata->u.mgd.rssi_min_thold = rssi_min_thold*16; 2116 sdata->u.mgd.rssi_max_thold = rssi_max_thold*16; 2117 } 2118 2119 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif, 2120 int rssi_min_thold, 2121 int rssi_max_thold) 2122 { 2123 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2124 2125 WARN_ON(rssi_min_thold == rssi_max_thold || 2126 rssi_min_thold > rssi_max_thold); 2127 2128 _ieee80211_enable_rssi_reports(sdata, rssi_min_thold, 2129 rssi_max_thold); 2130 } 2131 EXPORT_SYMBOL(ieee80211_enable_rssi_reports); 2132 2133 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif) 2134 { 2135 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2136 2137 _ieee80211_enable_rssi_reports(sdata, 0, 0); 2138 } 2139 EXPORT_SYMBOL(ieee80211_disable_rssi_reports); 2140 2141 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 2142 u16 cap) 2143 { 2144 __le16 tmp; 2145 2146 *pos++ = WLAN_EID_HT_CAPABILITY; 2147 *pos++ = sizeof(struct ieee80211_ht_cap); 2148 memset(pos, 0, sizeof(struct ieee80211_ht_cap)); 2149 2150 /* capability flags */ 2151 tmp = cpu_to_le16(cap); 2152 memcpy(pos, &tmp, sizeof(u16)); 2153 pos += sizeof(u16); 2154 2155 /* AMPDU parameters */ 2156 *pos++ = ht_cap->ampdu_factor | 2157 (ht_cap->ampdu_density << 2158 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT); 2159 2160 /* MCS set */ 2161 memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs)); 2162 pos += sizeof(ht_cap->mcs); 2163 2164 /* extended capabilities */ 2165 pos += sizeof(__le16); 2166 2167 /* BF capabilities */ 2168 pos += sizeof(__le32); 2169 2170 /* antenna selection */ 2171 pos += sizeof(u8); 2172 2173 return pos; 2174 } 2175 2176 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap, 2177 u32 cap) 2178 { 2179 __le32 tmp; 2180 2181 *pos++ = WLAN_EID_VHT_CAPABILITY; 2182 *pos++ = sizeof(struct ieee80211_vht_cap); 2183 memset(pos, 0, sizeof(struct ieee80211_vht_cap)); 2184 2185 /* capability flags */ 2186 tmp = cpu_to_le32(cap); 2187 memcpy(pos, &tmp, sizeof(u32)); 2188 pos += sizeof(u32); 2189 2190 /* VHT MCS set */ 2191 memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs)); 2192 pos += sizeof(vht_cap->vht_mcs); 2193 2194 return pos; 2195 } 2196 2197 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 2198 const struct cfg80211_chan_def *chandef, 2199 u16 prot_mode) 2200 { 2201 struct ieee80211_ht_operation *ht_oper; 2202 /* Build HT Information */ 2203 *pos++ = WLAN_EID_HT_OPERATION; 2204 *pos++ = sizeof(struct ieee80211_ht_operation); 2205 ht_oper = (struct ieee80211_ht_operation *)pos; 2206 ht_oper->primary_chan = ieee80211_frequency_to_channel( 2207 chandef->chan->center_freq); 2208 switch (chandef->width) { 2209 case NL80211_CHAN_WIDTH_160: 2210 case NL80211_CHAN_WIDTH_80P80: 2211 case NL80211_CHAN_WIDTH_80: 2212 case NL80211_CHAN_WIDTH_40: 2213 if (chandef->center_freq1 > chandef->chan->center_freq) 2214 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2215 else 2216 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2217 break; 2218 default: 2219 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE; 2220 break; 2221 } 2222 if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 && 2223 chandef->width != NL80211_CHAN_WIDTH_20_NOHT && 2224 chandef->width != NL80211_CHAN_WIDTH_20) 2225 ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY; 2226 2227 ht_oper->operation_mode = cpu_to_le16(prot_mode); 2228 ht_oper->stbc_param = 0x0000; 2229 2230 /* It seems that Basic MCS set and Supported MCS set 2231 are identical for the first 10 bytes */ 2232 memset(&ht_oper->basic_set, 0, 16); 2233 memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10); 2234 2235 return pos + sizeof(struct ieee80211_ht_operation); 2236 } 2237 2238 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan, 2239 const struct ieee80211_ht_operation *ht_oper, 2240 struct cfg80211_chan_def *chandef) 2241 { 2242 enum nl80211_channel_type channel_type; 2243 2244 if (!ht_oper) { 2245 cfg80211_chandef_create(chandef, control_chan, 2246 NL80211_CHAN_NO_HT); 2247 return; 2248 } 2249 2250 switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { 2251 case IEEE80211_HT_PARAM_CHA_SEC_NONE: 2252 channel_type = NL80211_CHAN_HT20; 2253 break; 2254 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: 2255 channel_type = NL80211_CHAN_HT40PLUS; 2256 break; 2257 case IEEE80211_HT_PARAM_CHA_SEC_BELOW: 2258 channel_type = NL80211_CHAN_HT40MINUS; 2259 break; 2260 default: 2261 channel_type = NL80211_CHAN_NO_HT; 2262 } 2263 2264 cfg80211_chandef_create(chandef, control_chan, channel_type); 2265 } 2266 2267 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef, 2268 const struct ieee80211_supported_band *sband, 2269 const u8 *srates, int srates_len, u32 *rates) 2270 { 2271 u32 rate_flags = ieee80211_chandef_rate_flags(chandef); 2272 int shift = ieee80211_chandef_get_shift(chandef); 2273 struct ieee80211_rate *br; 2274 int brate, rate, i, j, count = 0; 2275 2276 *rates = 0; 2277 2278 for (i = 0; i < srates_len; i++) { 2279 rate = srates[i] & 0x7f; 2280 2281 for (j = 0; j < sband->n_bitrates; j++) { 2282 br = &sband->bitrates[j]; 2283 if ((rate_flags & br->flags) != rate_flags) 2284 continue; 2285 2286 brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5); 2287 if (brate == rate) { 2288 *rates |= BIT(j); 2289 count++; 2290 break; 2291 } 2292 } 2293 } 2294 return count; 2295 } 2296 2297 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata, 2298 struct sk_buff *skb, bool need_basic, 2299 enum ieee80211_band band) 2300 { 2301 struct ieee80211_local *local = sdata->local; 2302 struct ieee80211_supported_band *sband; 2303 int rate, shift; 2304 u8 i, rates, *pos; 2305 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2306 u32 rate_flags; 2307 2308 shift = ieee80211_vif_get_shift(&sdata->vif); 2309 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2310 sband = local->hw.wiphy->bands[band]; 2311 rates = 0; 2312 for (i = 0; i < sband->n_bitrates; i++) { 2313 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2314 continue; 2315 rates++; 2316 } 2317 if (rates > 8) 2318 rates = 8; 2319 2320 if (skb_tailroom(skb) < rates + 2) 2321 return -ENOMEM; 2322 2323 pos = skb_put(skb, rates + 2); 2324 *pos++ = WLAN_EID_SUPP_RATES; 2325 *pos++ = rates; 2326 for (i = 0; i < rates; i++) { 2327 u8 basic = 0; 2328 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2329 continue; 2330 2331 if (need_basic && basic_rates & BIT(i)) 2332 basic = 0x80; 2333 rate = sband->bitrates[i].bitrate; 2334 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2335 5 * (1 << shift)); 2336 *pos++ = basic | (u8) rate; 2337 } 2338 2339 return 0; 2340 } 2341 2342 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata, 2343 struct sk_buff *skb, bool need_basic, 2344 enum ieee80211_band band) 2345 { 2346 struct ieee80211_local *local = sdata->local; 2347 struct ieee80211_supported_band *sband; 2348 int rate, shift; 2349 u8 i, exrates, *pos; 2350 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2351 u32 rate_flags; 2352 2353 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2354 shift = ieee80211_vif_get_shift(&sdata->vif); 2355 2356 sband = local->hw.wiphy->bands[band]; 2357 exrates = 0; 2358 for (i = 0; i < sband->n_bitrates; i++) { 2359 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2360 continue; 2361 exrates++; 2362 } 2363 2364 if (exrates > 8) 2365 exrates -= 8; 2366 else 2367 exrates = 0; 2368 2369 if (skb_tailroom(skb) < exrates + 2) 2370 return -ENOMEM; 2371 2372 if (exrates) { 2373 pos = skb_put(skb, exrates + 2); 2374 *pos++ = WLAN_EID_EXT_SUPP_RATES; 2375 *pos++ = exrates; 2376 for (i = 8; i < sband->n_bitrates; i++) { 2377 u8 basic = 0; 2378 if ((rate_flags & sband->bitrates[i].flags) 2379 != rate_flags) 2380 continue; 2381 if (need_basic && basic_rates & BIT(i)) 2382 basic = 0x80; 2383 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2384 5 * (1 << shift)); 2385 *pos++ = basic | (u8) rate; 2386 } 2387 } 2388 return 0; 2389 } 2390 2391 int ieee80211_ave_rssi(struct ieee80211_vif *vif) 2392 { 2393 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2394 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; 2395 2396 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) { 2397 /* non-managed type inferfaces */ 2398 return 0; 2399 } 2400 return ifmgd->ave_beacon_signal / 16; 2401 } 2402 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi); 2403 2404 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs) 2405 { 2406 if (!mcs) 2407 return 1; 2408 2409 /* TODO: consider rx_highest */ 2410 2411 if (mcs->rx_mask[3]) 2412 return 4; 2413 if (mcs->rx_mask[2]) 2414 return 3; 2415 if (mcs->rx_mask[1]) 2416 return 2; 2417 return 1; 2418 } 2419 2420 /** 2421 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame 2422 * @local: mac80211 hw info struct 2423 * @status: RX status 2424 * @mpdu_len: total MPDU length (including FCS) 2425 * @mpdu_offset: offset into MPDU to calculate timestamp at 2426 * 2427 * This function calculates the RX timestamp at the given MPDU offset, taking 2428 * into account what the RX timestamp was. An offset of 0 will just normalize 2429 * the timestamp to TSF at beginning of MPDU reception. 2430 */ 2431 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local, 2432 struct ieee80211_rx_status *status, 2433 unsigned int mpdu_len, 2434 unsigned int mpdu_offset) 2435 { 2436 u64 ts = status->mactime; 2437 struct rate_info ri; 2438 u16 rate; 2439 2440 if (WARN_ON(!ieee80211_have_rx_timestamp(status))) 2441 return 0; 2442 2443 memset(&ri, 0, sizeof(ri)); 2444 2445 /* Fill cfg80211 rate info */ 2446 if (status->flag & RX_FLAG_HT) { 2447 ri.mcs = status->rate_idx; 2448 ri.flags |= RATE_INFO_FLAGS_MCS; 2449 if (status->flag & RX_FLAG_40MHZ) 2450 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2451 if (status->flag & RX_FLAG_SHORT_GI) 2452 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2453 } else if (status->flag & RX_FLAG_VHT) { 2454 ri.flags |= RATE_INFO_FLAGS_VHT_MCS; 2455 ri.mcs = status->rate_idx; 2456 ri.nss = status->vht_nss; 2457 if (status->flag & RX_FLAG_40MHZ) 2458 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2459 if (status->vht_flag & RX_VHT_FLAG_80MHZ) 2460 ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 2461 if (status->vht_flag & RX_VHT_FLAG_80P80MHZ) 2462 ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH; 2463 if (status->vht_flag & RX_VHT_FLAG_160MHZ) 2464 ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 2465 if (status->flag & RX_FLAG_SHORT_GI) 2466 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2467 } else { 2468 struct ieee80211_supported_band *sband; 2469 int shift = 0; 2470 int bitrate; 2471 2472 if (status->flag & RX_FLAG_10MHZ) 2473 shift = 1; 2474 if (status->flag & RX_FLAG_5MHZ) 2475 shift = 2; 2476 2477 sband = local->hw.wiphy->bands[status->band]; 2478 bitrate = sband->bitrates[status->rate_idx].bitrate; 2479 ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift)); 2480 } 2481 2482 rate = cfg80211_calculate_bitrate(&ri); 2483 if (WARN_ONCE(!rate, 2484 "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n", 2485 status->flag, status->rate_idx, status->vht_nss)) 2486 return 0; 2487 2488 /* rewind from end of MPDU */ 2489 if (status->flag & RX_FLAG_MACTIME_END) 2490 ts -= mpdu_len * 8 * 10 / rate; 2491 2492 ts += mpdu_offset * 8 * 10 / rate; 2493 2494 return ts; 2495 } 2496 2497 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local) 2498 { 2499 struct ieee80211_sub_if_data *sdata; 2500 struct cfg80211_chan_def chandef; 2501 2502 mutex_lock(&local->mtx); 2503 mutex_lock(&local->iflist_mtx); 2504 list_for_each_entry(sdata, &local->interfaces, list) { 2505 /* it might be waiting for the local->mtx, but then 2506 * by the time it gets it, sdata->wdev.cac_started 2507 * will no longer be true 2508 */ 2509 cancel_delayed_work(&sdata->dfs_cac_timer_work); 2510 2511 if (sdata->wdev.cac_started) { 2512 chandef = sdata->vif.bss_conf.chandef; 2513 ieee80211_vif_release_channel(sdata); 2514 cfg80211_cac_event(sdata->dev, 2515 &chandef, 2516 NL80211_RADAR_CAC_ABORTED, 2517 GFP_KERNEL); 2518 } 2519 } 2520 mutex_unlock(&local->iflist_mtx); 2521 mutex_unlock(&local->mtx); 2522 } 2523 2524 void ieee80211_dfs_radar_detected_work(struct work_struct *work) 2525 { 2526 struct ieee80211_local *local = 2527 container_of(work, struct ieee80211_local, radar_detected_work); 2528 struct cfg80211_chan_def chandef = local->hw.conf.chandef; 2529 2530 ieee80211_dfs_cac_cancel(local); 2531 2532 if (local->use_chanctx) 2533 /* currently not handled */ 2534 WARN_ON(1); 2535 else 2536 cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL); 2537 } 2538 2539 void ieee80211_radar_detected(struct ieee80211_hw *hw) 2540 { 2541 struct ieee80211_local *local = hw_to_local(hw); 2542 2543 trace_api_radar_detected(local); 2544 2545 ieee80211_queue_work(hw, &local->radar_detected_work); 2546 } 2547 EXPORT_SYMBOL(ieee80211_radar_detected); 2548 2549 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c) 2550 { 2551 u32 ret; 2552 int tmp; 2553 2554 switch (c->width) { 2555 case NL80211_CHAN_WIDTH_20: 2556 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2557 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2558 break; 2559 case NL80211_CHAN_WIDTH_40: 2560 c->width = NL80211_CHAN_WIDTH_20; 2561 c->center_freq1 = c->chan->center_freq; 2562 ret = IEEE80211_STA_DISABLE_40MHZ | 2563 IEEE80211_STA_DISABLE_VHT; 2564 break; 2565 case NL80211_CHAN_WIDTH_80: 2566 tmp = (30 + c->chan->center_freq - c->center_freq1)/20; 2567 /* n_P40 */ 2568 tmp /= 2; 2569 /* freq_P40 */ 2570 c->center_freq1 = c->center_freq1 - 20 + 40 * tmp; 2571 c->width = NL80211_CHAN_WIDTH_40; 2572 ret = IEEE80211_STA_DISABLE_VHT; 2573 break; 2574 case NL80211_CHAN_WIDTH_80P80: 2575 c->center_freq2 = 0; 2576 c->width = NL80211_CHAN_WIDTH_80; 2577 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2578 IEEE80211_STA_DISABLE_160MHZ; 2579 break; 2580 case NL80211_CHAN_WIDTH_160: 2581 /* n_P20 */ 2582 tmp = (70 + c->chan->center_freq - c->center_freq1)/20; 2583 /* n_P80 */ 2584 tmp /= 4; 2585 c->center_freq1 = c->center_freq1 - 40 + 80 * tmp; 2586 c->width = NL80211_CHAN_WIDTH_80; 2587 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2588 IEEE80211_STA_DISABLE_160MHZ; 2589 break; 2590 default: 2591 case NL80211_CHAN_WIDTH_20_NOHT: 2592 WARN_ON_ONCE(1); 2593 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2594 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2595 break; 2596 case NL80211_CHAN_WIDTH_5: 2597 case NL80211_CHAN_WIDTH_10: 2598 WARN_ON_ONCE(1); 2599 /* keep c->width */ 2600 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2601 break; 2602 } 2603 2604 WARN_ON_ONCE(!cfg80211_chandef_valid(c)); 2605 2606 return ret; 2607 } 2608 2609 /* 2610 * Returns true if smps_mode_new is strictly more restrictive than 2611 * smps_mode_old. 2612 */ 2613 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old, 2614 enum ieee80211_smps_mode smps_mode_new) 2615 { 2616 if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC || 2617 smps_mode_new == IEEE80211_SMPS_AUTOMATIC)) 2618 return false; 2619 2620 switch (smps_mode_old) { 2621 case IEEE80211_SMPS_STATIC: 2622 return false; 2623 case IEEE80211_SMPS_DYNAMIC: 2624 return smps_mode_new == IEEE80211_SMPS_STATIC; 2625 case IEEE80211_SMPS_OFF: 2626 return smps_mode_new != IEEE80211_SMPS_OFF; 2627 default: 2628 WARN_ON(1); 2629 } 2630 2631 return false; 2632 } 2633 2634 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata, 2635 struct cfg80211_csa_settings *csa_settings) 2636 { 2637 struct sk_buff *skb; 2638 struct ieee80211_mgmt *mgmt; 2639 struct ieee80211_local *local = sdata->local; 2640 int freq; 2641 int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) + 2642 sizeof(mgmt->u.action.u.chan_switch); 2643 u8 *pos; 2644 2645 if (sdata->vif.type != NL80211_IFTYPE_ADHOC && 2646 sdata->vif.type != NL80211_IFTYPE_MESH_POINT) 2647 return -EOPNOTSUPP; 2648 2649 skb = dev_alloc_skb(local->tx_headroom + hdr_len + 2650 5 + /* channel switch announcement element */ 2651 3 + /* secondary channel offset element */ 2652 8); /* mesh channel switch parameters element */ 2653 if (!skb) 2654 return -ENOMEM; 2655 2656 skb_reserve(skb, local->tx_headroom); 2657 mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len); 2658 memset(mgmt, 0, hdr_len); 2659 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 2660 IEEE80211_STYPE_ACTION); 2661 2662 eth_broadcast_addr(mgmt->da); 2663 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 2664 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2665 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); 2666 } else { 2667 struct ieee80211_if_ibss *ifibss = &sdata->u.ibss; 2668 memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN); 2669 } 2670 mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT; 2671 mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH; 2672 pos = skb_put(skb, 5); 2673 *pos++ = WLAN_EID_CHANNEL_SWITCH; /* EID */ 2674 *pos++ = 3; /* IE length */ 2675 *pos++ = csa_settings->block_tx ? 1 : 0; /* CSA mode */ 2676 freq = csa_settings->chandef.chan->center_freq; 2677 *pos++ = ieee80211_frequency_to_channel(freq); /* channel */ 2678 *pos++ = csa_settings->count; /* count */ 2679 2680 if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) { 2681 enum nl80211_channel_type ch_type; 2682 2683 skb_put(skb, 3); 2684 *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */ 2685 *pos++ = 1; /* IE length */ 2686 ch_type = cfg80211_get_chandef_type(&csa_settings->chandef); 2687 if (ch_type == NL80211_CHAN_HT40PLUS) 2688 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2689 else 2690 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2691 } 2692 2693 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2694 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 2695 2696 skb_put(skb, 8); 2697 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM; /* EID */ 2698 *pos++ = 6; /* IE length */ 2699 *pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL; /* Mesh TTL */ 2700 *pos = 0x00; /* Mesh Flag: Tx Restrict, Initiator, Reason */ 2701 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR; 2702 *pos++ |= csa_settings->block_tx ? 2703 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00; 2704 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */ 2705 pos += 2; 2706 put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */ 2707 pos += 2; 2708 } 2709 2710 ieee80211_tx_skb(sdata, skb); 2711 return 0; 2712 } 2713 2714 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs) 2715 { 2716 return !(cs == NULL || cs->cipher == 0 || 2717 cs->hdr_len < cs->pn_len + cs->pn_off || 2718 cs->hdr_len <= cs->key_idx_off || 2719 cs->key_idx_shift > 7 || 2720 cs->key_idx_mask == 0); 2721 } 2722 2723 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n) 2724 { 2725 int i; 2726 2727 /* Ensure we have enough iftype bitmap space for all iftype values */ 2728 WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype)); 2729 2730 for (i = 0; i < n; i++) 2731 if (!ieee80211_cs_valid(&cs[i])) 2732 return false; 2733 2734 return true; 2735 } 2736 2737 const struct ieee80211_cipher_scheme * 2738 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher, 2739 enum nl80211_iftype iftype) 2740 { 2741 const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes; 2742 int n = local->hw.n_cipher_schemes; 2743 int i; 2744 const struct ieee80211_cipher_scheme *cs = NULL; 2745 2746 for (i = 0; i < n; i++) { 2747 if (l[i].cipher == cipher) { 2748 cs = &l[i]; 2749 break; 2750 } 2751 } 2752 2753 if (!cs || !(cs->iftype & BIT(iftype))) 2754 return NULL; 2755 2756 return cs; 2757 } 2758 2759 int ieee80211_cs_headroom(struct ieee80211_local *local, 2760 struct cfg80211_crypto_settings *crypto, 2761 enum nl80211_iftype iftype) 2762 { 2763 const struct ieee80211_cipher_scheme *cs; 2764 int headroom = IEEE80211_ENCRYPT_HEADROOM; 2765 int i; 2766 2767 for (i = 0; i < crypto->n_ciphers_pairwise; i++) { 2768 cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i], 2769 iftype); 2770 2771 if (cs && headroom < cs->hdr_len) 2772 headroom = cs->hdr_len; 2773 } 2774 2775 cs = ieee80211_cs_get(local, crypto->cipher_group, iftype); 2776 if (cs && headroom < cs->hdr_len) 2777 headroom = cs->hdr_len; 2778 2779 return headroom; 2780 } 2781 2782 static bool 2783 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i) 2784 { 2785 s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1); 2786 int skip; 2787 2788 if (end > 0) 2789 return false; 2790 2791 /* End time is in the past, check for repetitions */ 2792 skip = DIV_ROUND_UP(-end, data->desc[i].interval); 2793 if (data->count[i] < 255) { 2794 if (data->count[i] <= skip) { 2795 data->count[i] = 0; 2796 return false; 2797 } 2798 2799 data->count[i] -= skip; 2800 } 2801 2802 data->desc[i].start += skip * data->desc[i].interval; 2803 2804 return true; 2805 } 2806 2807 static bool 2808 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf, 2809 s32 *offset) 2810 { 2811 bool ret = false; 2812 int i; 2813 2814 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2815 s32 cur; 2816 2817 if (!data->count[i]) 2818 continue; 2819 2820 if (ieee80211_extend_noa_desc(data, tsf + *offset, i)) 2821 ret = true; 2822 2823 cur = data->desc[i].start - tsf; 2824 if (cur > *offset) 2825 continue; 2826 2827 cur = data->desc[i].start + data->desc[i].duration - tsf; 2828 if (cur > *offset) 2829 *offset = cur; 2830 } 2831 2832 return ret; 2833 } 2834 2835 static u32 2836 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf) 2837 { 2838 s32 offset = 0; 2839 int tries = 0; 2840 /* 2841 * arbitrary limit, used to avoid infinite loops when combined NoA 2842 * descriptors cover the full time period. 2843 */ 2844 int max_tries = 5; 2845 2846 ieee80211_extend_absent_time(data, tsf, &offset); 2847 do { 2848 if (!ieee80211_extend_absent_time(data, tsf, &offset)) 2849 break; 2850 2851 tries++; 2852 } while (tries < max_tries); 2853 2854 return offset; 2855 } 2856 2857 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf) 2858 { 2859 u32 next_offset = BIT(31) - 1; 2860 int i; 2861 2862 data->absent = 0; 2863 data->has_next_tsf = false; 2864 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2865 s32 start; 2866 2867 if (!data->count[i]) 2868 continue; 2869 2870 ieee80211_extend_noa_desc(data, tsf, i); 2871 start = data->desc[i].start - tsf; 2872 if (start <= 0) 2873 data->absent |= BIT(i); 2874 2875 if (next_offset > start) 2876 next_offset = start; 2877 2878 data->has_next_tsf = true; 2879 } 2880 2881 if (data->absent) 2882 next_offset = ieee80211_get_noa_absent_time(data, tsf); 2883 2884 data->next_tsf = tsf + next_offset; 2885 } 2886 EXPORT_SYMBOL(ieee80211_update_p2p_noa); 2887 2888 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr, 2889 struct ieee80211_noa_data *data, u32 tsf) 2890 { 2891 int ret = 0; 2892 int i; 2893 2894 memset(data, 0, sizeof(*data)); 2895 2896 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2897 const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i]; 2898 2899 if (!desc->count || !desc->duration) 2900 continue; 2901 2902 data->count[i] = desc->count; 2903 data->desc[i].start = le32_to_cpu(desc->start_time); 2904 data->desc[i].duration = le32_to_cpu(desc->duration); 2905 data->desc[i].interval = le32_to_cpu(desc->interval); 2906 2907 if (data->count[i] > 1 && 2908 data->desc[i].interval < data->desc[i].duration) 2909 continue; 2910 2911 ieee80211_extend_noa_desc(data, tsf, i); 2912 ret++; 2913 } 2914 2915 if (ret) 2916 ieee80211_update_p2p_noa(data, tsf); 2917 2918 return ret; 2919 } 2920 EXPORT_SYMBOL(ieee80211_parse_p2p_noa); 2921 2922 void ieee80211_recalc_dtim(struct ieee80211_local *local, 2923 struct ieee80211_sub_if_data *sdata) 2924 { 2925 u64 tsf = drv_get_tsf(local, sdata); 2926 u64 dtim_count = 0; 2927 u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024; 2928 u8 dtim_period = sdata->vif.bss_conf.dtim_period; 2929 struct ps_data *ps; 2930 u8 bcns_from_dtim; 2931 2932 if (tsf == -1ULL || !beacon_int || !dtim_period) 2933 return; 2934 2935 if (sdata->vif.type == NL80211_IFTYPE_AP || 2936 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 2937 if (!sdata->bss) 2938 return; 2939 2940 ps = &sdata->bss->ps; 2941 } else if (ieee80211_vif_is_mesh(&sdata->vif)) { 2942 ps = &sdata->u.mesh.ps; 2943 } else { 2944 return; 2945 } 2946 2947 /* 2948 * actually finds last dtim_count, mac80211 will update in 2949 * __beacon_add_tim(). 2950 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period 2951 */ 2952 do_div(tsf, beacon_int); 2953 bcns_from_dtim = do_div(tsf, dtim_period); 2954 /* just had a DTIM */ 2955 if (!bcns_from_dtim) 2956 dtim_count = 0; 2957 else 2958 dtim_count = dtim_period - bcns_from_dtim; 2959 2960 ps->dtim_count = dtim_count; 2961 } 2962 2963 static u8 ieee80211_chanctx_radar_detect(struct ieee80211_local *local, 2964 struct ieee80211_chanctx *ctx) 2965 { 2966 struct ieee80211_sub_if_data *sdata; 2967 u8 radar_detect = 0; 2968 2969 lockdep_assert_held(&local->chanctx_mtx); 2970 2971 if (WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED)) 2972 return 0; 2973 2974 list_for_each_entry(sdata, &ctx->reserved_vifs, reserved_chanctx_list) 2975 if (sdata->reserved_radar_required) 2976 radar_detect |= BIT(sdata->reserved_chandef.width); 2977 2978 /* 2979 * An in-place reservation context should not have any assigned vifs 2980 * until it replaces the other context. 2981 */ 2982 WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_REPLACES_OTHER && 2983 !list_empty(&ctx->assigned_vifs)); 2984 2985 list_for_each_entry(sdata, &ctx->assigned_vifs, assigned_chanctx_list) 2986 if (sdata->radar_required) 2987 radar_detect |= BIT(sdata->vif.bss_conf.chandef.width); 2988 2989 return radar_detect; 2990 } 2991 2992 int ieee80211_check_combinations(struct ieee80211_sub_if_data *sdata, 2993 const struct cfg80211_chan_def *chandef, 2994 enum ieee80211_chanctx_mode chanmode, 2995 u8 radar_detect) 2996 { 2997 struct ieee80211_local *local = sdata->local; 2998 struct ieee80211_sub_if_data *sdata_iter; 2999 enum nl80211_iftype iftype = sdata->wdev.iftype; 3000 int num[NUM_NL80211_IFTYPES]; 3001 struct ieee80211_chanctx *ctx; 3002 int num_different_channels = 0; 3003 int total = 1; 3004 3005 lockdep_assert_held(&local->chanctx_mtx); 3006 3007 if (WARN_ON(hweight32(radar_detect) > 1)) 3008 return -EINVAL; 3009 3010 if (WARN_ON(chandef && chanmode == IEEE80211_CHANCTX_SHARED && 3011 !chandef->chan)) 3012 return -EINVAL; 3013 3014 if (chandef) 3015 num_different_channels = 1; 3016 3017 if (WARN_ON(iftype >= NUM_NL80211_IFTYPES)) 3018 return -EINVAL; 3019 3020 /* Always allow software iftypes */ 3021 if (local->hw.wiphy->software_iftypes & BIT(iftype)) { 3022 if (radar_detect) 3023 return -EINVAL; 3024 return 0; 3025 } 3026 3027 memset(num, 0, sizeof(num)); 3028 3029 if (iftype != NL80211_IFTYPE_UNSPECIFIED) 3030 num[iftype] = 1; 3031 3032 list_for_each_entry(ctx, &local->chanctx_list, list) { 3033 if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED) 3034 continue; 3035 radar_detect |= ieee80211_chanctx_radar_detect(local, ctx); 3036 if (ctx->mode == IEEE80211_CHANCTX_EXCLUSIVE) { 3037 num_different_channels++; 3038 continue; 3039 } 3040 if (chandef && chanmode == IEEE80211_CHANCTX_SHARED && 3041 cfg80211_chandef_compatible(chandef, 3042 &ctx->conf.def)) 3043 continue; 3044 num_different_channels++; 3045 } 3046 3047 list_for_each_entry_rcu(sdata_iter, &local->interfaces, list) { 3048 struct wireless_dev *wdev_iter; 3049 3050 wdev_iter = &sdata_iter->wdev; 3051 3052 if (sdata_iter == sdata || 3053 rcu_access_pointer(sdata_iter->vif.chanctx_conf) == NULL || 3054 local->hw.wiphy->software_iftypes & BIT(wdev_iter->iftype)) 3055 continue; 3056 3057 num[wdev_iter->iftype]++; 3058 total++; 3059 } 3060 3061 if (total == 1 && !radar_detect) 3062 return 0; 3063 3064 return cfg80211_check_combinations(local->hw.wiphy, 3065 num_different_channels, 3066 radar_detect, num); 3067 } 3068 3069 static void 3070 ieee80211_iter_max_chans(const struct ieee80211_iface_combination *c, 3071 void *data) 3072 { 3073 u32 *max_num_different_channels = data; 3074 3075 *max_num_different_channels = max(*max_num_different_channels, 3076 c->num_different_channels); 3077 } 3078 3079 int ieee80211_max_num_channels(struct ieee80211_local *local) 3080 { 3081 struct ieee80211_sub_if_data *sdata; 3082 int num[NUM_NL80211_IFTYPES] = {}; 3083 struct ieee80211_chanctx *ctx; 3084 int num_different_channels = 0; 3085 u8 radar_detect = 0; 3086 u32 max_num_different_channels = 1; 3087 int err; 3088 3089 lockdep_assert_held(&local->chanctx_mtx); 3090 3091 list_for_each_entry(ctx, &local->chanctx_list, list) { 3092 if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED) 3093 continue; 3094 3095 num_different_channels++; 3096 3097 radar_detect |= ieee80211_chanctx_radar_detect(local, ctx); 3098 } 3099 3100 list_for_each_entry_rcu(sdata, &local->interfaces, list) 3101 num[sdata->wdev.iftype]++; 3102 3103 err = cfg80211_iter_combinations(local->hw.wiphy, 3104 num_different_channels, radar_detect, 3105 num, ieee80211_iter_max_chans, 3106 &max_num_different_channels); 3107 if (err < 0) 3108 return err; 3109 3110 return max_num_different_channels; 3111 } 3112 3113 u8 *ieee80211_add_wmm_info_ie(u8 *buf, u8 qosinfo) 3114 { 3115 *buf++ = WLAN_EID_VENDOR_SPECIFIC; 3116 *buf++ = 7; /* len */ 3117 *buf++ = 0x00; /* Microsoft OUI 00:50:F2 */ 3118 *buf++ = 0x50; 3119 *buf++ = 0xf2; 3120 *buf++ = 2; /* WME */ 3121 *buf++ = 0; /* WME info */ 3122 *buf++ = 1; /* WME ver */ 3123 *buf++ = qosinfo; /* U-APSD no in use */ 3124 3125 return buf; 3126 } 3127