main.c 52.5 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <net/mac80211.h>
#include <net/ieee80211_radiotap.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/netdevice.h>
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/wireless.h>
#include <linux/rtnetlink.h>
#include <linux/bitmap.h>
24
#include <net/net_namespace.h>
25 26 27
#include <net/cfg80211.h>

#include "ieee80211_i.h"
Johannes Berg's avatar
Johannes Berg committed
28
#include "rate.h"
29
#include "mesh.h"
30 31 32
#include "wep.h"
#include "wme.h"
#include "aes_ccm.h"
Johannes Berg's avatar
Johannes Berg committed
33
#include "led.h"
34
#include "cfg.h"
35 36
#include "debugfs.h"
#include "debugfs_netdev.h"
37

38 39 40 41 42 43 44 45 46 47
/*
 * For seeing transmitted packets on monitor interfaces
 * we have a radiotap header too.
 */
struct ieee80211_tx_status_rtap_hdr {
	struct ieee80211_radiotap_header hdr;
	__le16 tx_flags;
	u8 data_retries;
} __attribute__ ((packed));

48
/* common interface routines */
49

50
static int header_parse_80211(const struct sk_buff *skb, unsigned char *haddr)
51 52 53 54
{
	memcpy(haddr, skb_mac_header(skb) + 10, ETH_ALEN); /* addr2 */
	return ETH_ALEN;
}
55

56 57 58 59 60 61
/* must be called under mdev tx lock */
static void ieee80211_configure_filter(struct ieee80211_local *local)
{
	unsigned int changed_flags;
	unsigned int new_flags = 0;

62
	if (atomic_read(&local->iff_promiscs))
63 64
		new_flags |= FIF_PROMISC_IN_BSS;

65
	if (atomic_read(&local->iff_allmultis))
66 67 68
		new_flags |= FIF_ALLMULTI;

	if (local->monitors)
69 70 71 72 73 74 75 76 77 78 79 80 81
		new_flags |= FIF_BCN_PRBRESP_PROMISC;

	if (local->fif_fcsfail)
		new_flags |= FIF_FCSFAIL;

	if (local->fif_plcpfail)
		new_flags |= FIF_PLCPFAIL;

	if (local->fif_control)
		new_flags |= FIF_CONTROL;

	if (local->fif_other_bss)
		new_flags |= FIF_OTHER_BSS;
82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97

	changed_flags = local->filter_flags ^ new_flags;

	/* be a bit nasty */
	new_flags |= (1<<31);

	local->ops->configure_filter(local_to_hw(local),
				     changed_flags, &new_flags,
				     local->mdev->mc_count,
				     local->mdev->mc_list);

	WARN_ON(new_flags & (1<<31));

	local->filter_flags = new_flags & ~(1<<31);
}

98
/* master interface */
99

100 101 102 103 104
static int ieee80211_master_open(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
	int res = -EOPNOTSUPP;
105

106 107
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list) {
108 109 110 111 112
		if (sdata->dev != dev && netif_running(sdata->dev)) {
			res = 0;
			break;
		}
	}
113 114 115 116 117 118 119

	if (res)
		return res;

	netif_start_queue(local->mdev);

	return 0;
120
}
121

122
static int ieee80211_master_stop(struct net_device *dev)
123
{
124 125
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
126

127 128
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list)
129 130
		if (sdata->dev != dev && netif_running(sdata->dev))
			dev_close(sdata->dev);
131

132 133
	return 0;
}
134

135 136 137 138 139 140 141
static void ieee80211_master_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);

	ieee80211_configure_filter(local);
}

142
/* regular interfaces */
143

144
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
145
{
146 147 148 149 150
	int meshhdrlen;
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	meshhdrlen = (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT) ? 5 : 0;

151 152
	/* FIX: what would be proper limits for MTU?
	 * This interface uses 802.3 frames. */
153 154
	if (new_mtu < 256 ||
		new_mtu > IEEE80211_MAX_DATA_LEN - 24 - 6 - meshhdrlen) {
155 156 157 158
		printk(KERN_WARNING "%s: invalid MTU %d\n",
		       dev->name, new_mtu);
		return -EINVAL;
	}
159

160 161 162 163
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
	printk(KERN_DEBUG "%s: setting MTU %d\n", dev->name, new_mtu);
#endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
	dev->mtu = new_mtu;
164 165 166
	return 0;
}

167 168 169 170 171 172 173 174 175 176 177 178 179 180 181
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return (type1 == IEEE80211_IF_TYPE_MNTR ||
		type2 == IEEE80211_IF_TYPE_MNTR ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_WDS) ||
		(type1 == IEEE80211_IF_TYPE_WDS &&
		 (type2 == IEEE80211_IF_TYPE_WDS ||
		  type2 == IEEE80211_IF_TYPE_AP)) ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_VLAN) ||
		(type1 == IEEE80211_IF_TYPE_VLAN &&
		 (type2 == IEEE80211_IF_TYPE_AP ||
		  type2 == IEEE80211_IF_TYPE_VLAN)));
}
182

183
static int ieee80211_open(struct net_device *dev)
184
{
185 186 187 188
	struct ieee80211_sub_if_data *sdata, *nsdata;
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_if_init_conf conf;
	int res;
189
	bool need_hw_reconfig = 0;
190
	struct sta_info *sta;
191

192
	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
193

194 195
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
196
		struct net_device *ndev = nsdata->dev;
197

198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243
		if (ndev != dev && ndev != local->mdev && netif_running(ndev)) {
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
			if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
			    nsdata->vif.type == IEEE80211_IF_TYPE_IBSS)
				return -EBUSY;

			/*
			 * Disallow multiple IBSS/STA mode interfaces.
			 *
			 * This is a technical restriction, it is possible although
			 * most likely not IEEE 802.11 compliant to have multiple
			 * STAs with just a single hardware (the TSF timer will not
			 * be adjusted properly.)
			 *
			 * However, because mac80211 uses the master device's BSS
			 * information for each STA/IBSS interface, doing this will
			 * currently corrupt that BSS information completely, unless,
			 * a not very useful case, both STAs are associated to the
			 * same BSS.
			 *
			 * To remove this restriction, the BSS information needs to
			 * be embedded in the STA/IBSS mode sdata instead of using
			 * the master device's BSS structure.
			 */
			if ((sdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     sdata->vif.type == IEEE80211_IF_TYPE_IBSS) &&
			    (nsdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     nsdata->vif.type == IEEE80211_IF_TYPE_IBSS))
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
			if (compare_ether_addr(dev->dev_addr, ndev->dev_addr))
				continue;

244 245 246
			/*
			 * check whether it may have the same address
			 */
247 248
			if (!identical_mac_addr_allowed(sdata->vif.type,
							nsdata->vif.type))
249 250 251 252 253
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
254
			if (sdata->vif.type == IEEE80211_IF_TYPE_VLAN &&
255
			    nsdata->vif.type == IEEE80211_IF_TYPE_AP)
256
				sdata->u.vlan.ap = nsdata;
257 258
		}
	}
259

260
	switch (sdata->vif.type) {
261
	case IEEE80211_IF_TYPE_WDS:
262
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
263 264 265 266 267 268
			return -ENOLINK;
		break;
	case IEEE80211_IF_TYPE_VLAN:
		if (!sdata->u.vlan.ap)
			return -ENOLINK;
		break;
Johannes Berg's avatar
Johannes Berg committed
269 270 271 272
	case IEEE80211_IF_TYPE_AP:
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_MNTR:
	case IEEE80211_IF_TYPE_IBSS:
273
	case IEEE80211_IF_TYPE_MESH_POINT:
Johannes Berg's avatar
Johannes Berg committed
274 275
		/* no special treatment */
		break;
276 277 278 279
	case IEEE80211_IF_TYPE_INVALID:
		/* cannot happen */
		WARN_ON(1);
		break;
280
	}
281

282 283
	if (local->open_count == 0) {
		res = 0;
284 285 286
		if (local->ops->start)
			res = local->ops->start(local_to_hw(local));
		if (res)
287
			return res;
288
		need_hw_reconfig = 1;
289
		ieee80211_led_radio(local, local->hw.conf.radio_enabled);
290
	}
291

292
	switch (sdata->vif.type) {
293 294 295 296
	case IEEE80211_IF_TYPE_VLAN:
		list_add(&sdata->u.vlan.list, &sdata->u.vlan.ap->u.ap.vlans);
		/* no need to tell driver */
		break;
297
	case IEEE80211_IF_TYPE_MNTR:
298 299 300 301 302
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

303
		/* must be before the call to ieee80211_configure_filter */
304
		local->monitors++;
305
		if (local->monitors == 1)
306
			local->hw.conf.flags |= IEEE80211_CONF_RADIOTAP;
307 308 309 310 311 312 313 314 315 316 317 318 319

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss++;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
320 321 322 323 324 325
		break;
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.flags &= ~IEEE80211_STA_PREV_BSSID_SET;
		/* fall through */
	default:
326
		conf.vif = &sdata->vif;
327
		conf.type = sdata->vif.type;
328 329 330
		conf.mac_addr = dev->dev_addr;
		res = local->ops->add_interface(local_to_hw(local), &conf);
		if (res)
331
			goto err_stop;
332

333
		ieee80211_if_config(dev);
334
		ieee80211_reset_erp_info(dev);
335
		ieee80211_enable_keys(sdata);
336

337
		if (sdata->vif.type == IEEE80211_IF_TYPE_STA &&
338
		    !(sdata->flags & IEEE80211_SDATA_USERSPACE_MLME))
339 340 341
			netif_carrier_off(dev);
		else
			netif_carrier_on(dev);
342
	}
343

344 345 346 347 348 349 350 351 352
	if (sdata->vif.type == IEEE80211_IF_TYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

353
		/* no locking required since STA is not live yet */
354 355 356 357 358 359 360 361 362
		sta->flags |= WLAN_STA_AUTHORIZED;

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
	}

363 364 365
	if (local->open_count == 0) {
		res = dev_open(local->mdev);
		WARN_ON(res);
366 367
		if (res)
			goto err_del_interface;
368 369 370 371
		tasklet_enable(&local->tx_pending_tasklet);
		tasklet_enable(&local->tasklet);
	}

372 373 374 375 376 377 378 379 380 381 382
	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

383
	local->open_count++;
384 385
	if (need_hw_reconfig)
		ieee80211_hw_config(local);
386

387 388 389 390 391 392
	/*
	 * ieee80211_sta_work is disabled while network interface
	 * is down. Therefore, some configuration changes may not
	 * yet be effective. Trigger execution of ieee80211_sta_work
	 * to fix this.
	 */
Johannes Berg's avatar
Johannes Berg committed
393 394
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
395 396 397 398
		struct ieee80211_if_sta *ifsta = &sdata->u.sta;
		queue_work(local->hw.workqueue, &ifsta->work);
	}

399
	netif_start_queue(dev);
400

401
	return 0;
402 403 404 405 406 407
 err_del_interface:
	local->ops->remove_interface(local_to_hw(local), &conf);
 err_stop:
	if (!local->open_count && local->ops->stop)
		local->ops->stop(local_to_hw(local));
	return res;
408 409
}

410
static int ieee80211_stop(struct net_device *dev)
411
{
412 413
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = sdata->local;
414
	struct ieee80211_if_init_conf conf;
415
	struct sta_info *sta;
416

417 418 419 420
	/*
	 * Stop TX on this interface first.
	 */
	netif_stop_queue(dev);
421

422 423 424
	/*
	 * Now delete all active aggregation sessions.
	 */
425 426 427 428
	rcu_read_lock();

	list_for_each_entry_rcu(sta, &local->sta_list, list) {
		if (sta->sdata == sdata)
429
			ieee80211_sta_tear_down_BA_sessions(dev, sta->addr);
430 431
	}

432 433
	rcu_read_unlock();

434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
	 * We could relax this and only unlink the stations from the
	 * hash table and list but keep them on a per-sdata list that
	 * will be inserted back again when the interface is brought
	 * up again, but I don't currently see a use case for that,
	 * except with WDS which gets a STA entry created when it is
	 * brought up.
	 */
	sta_info_flush(local, sdata);
452

453 454 455 456 457 458 459 460 461 462 463 464
	/*
	 * Don't count this interface for promisc/allmulti while it
	 * is down. dev_mc_unsync() will invoke set_multicast_list
	 * on the master interface which will sync these down to the
	 * hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

465 466
	dev_mc_unsync(local->mdev, dev);

467
	/* APs need special treatment */
468
	if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
469
		struct ieee80211_sub_if_data *vlan, *tmp;
470
		struct beacon_data *old_beacon = sdata->u.ap.beacon;
471

472 473 474 475 476 477
		/* remove beacon */
		rcu_assign_pointer(sdata->u.ap.beacon, NULL);
		synchronize_rcu();
		kfree(old_beacon);

		/* down all dependent devices, that is VLANs */
478 479 480 481 482 483
		list_for_each_entry_safe(vlan, tmp, &sdata->u.ap.vlans,
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
	}

484
	local->open_count--;
485

486
	switch (sdata->vif.type) {
487 488 489 490 491
	case IEEE80211_IF_TYPE_VLAN:
		list_del(&sdata->u.vlan.list);
		sdata->u.vlan.ap = NULL;
		/* no need to tell driver */
		break;
492
	case IEEE80211_IF_TYPE_MNTR:
493 494 495 496 497
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

498
		local->monitors--;
499
		if (local->monitors == 0)
500
			local->hw.conf.flags &= ~IEEE80211_CONF_RADIOTAP;
501 502 503 504 505 506 507 508 509 510 511 512 513

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss--;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
514
		break;
515
	case IEEE80211_IF_TYPE_MESH_POINT:
516 517 518
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.state = IEEE80211_DISABLED;
519
		memset(sdata->u.sta.bssid, 0, ETH_ALEN);
520
		del_timer_sync(&sdata->u.sta.timer);
521
		/*
522 523 524 525
		 * When we get here, the interface is marked down.
		 * Call synchronize_rcu() to wait for the RX path
		 * should it be using the interface and enqueuing
		 * frames at this very time on another CPU.
526
		 */
527
		synchronize_rcu();
528
		skb_queue_purge(&sdata->u.sta.skb_queue);
529

Zhu Yi's avatar
Zhu Yi committed
530 531 532 533 534 535
		if (local->scan_dev == sdata->dev) {
			if (!local->ops->hw_scan) {
				local->sta_sw_scanning = 0;
				cancel_delayed_work(&local->scan_work);
			} else
				local->sta_hw_scanning = 0;
536
		}
Zhu Yi's avatar
Zhu Yi committed
537

538
		flush_workqueue(local->hw.workqueue);
539 540 541 542 543

		sdata->u.sta.flags &= ~IEEE80211_STA_PRIVACY_INVOKED;
		kfree(sdata->u.sta.extra_ie);
		sdata->u.sta.extra_ie = NULL;
		sdata->u.sta.extra_ie_len = 0;
544 545
		/* fall through */
	default:
546
		conf.vif = &sdata->vif;
547
		conf.type = sdata->vif.type;
548
		conf.mac_addr = dev->dev_addr;
549 550
		/* disable all keys for as long as this netdev is down */
		ieee80211_disable_keys(sdata);
551
		local->ops->remove_interface(local_to_hw(local), &conf);
552 553
	}

554 555 556
	if (local->open_count == 0) {
		if (netif_running(local->mdev))
			dev_close(local->mdev);
557

558 559
		if (local->ops->stop)
			local->ops->stop(local_to_hw(local));
560

561 562
		ieee80211_led_radio(local, 0);

563 564 565 566
		tasklet_disable(&local->tx_pending_tasklet);
		tasklet_disable(&local->tasklet);
	}

567 568 569
	return 0;
}

570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587
int ieee80211_start_tx_ba_session(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	struct ieee80211_sub_if_data *sdata;
	u16 start_seq_num = 0;
	u8 *state;
	int ret;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Open BA session requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

588 589
	rcu_read_lock();

590 591 592
	sta = sta_info_get(local, ra);
	if (!sta) {
		printk(KERN_DEBUG "Could not find the station\n");
593 594
		ret = -ENOENT;
		goto exit;
595 596
	}

597
	spin_lock_bh(&sta->lock);
598 599

	/* we have tried too many times, receiver does not want A-MPDU */
600
	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {
601
		ret = -EBUSY;
602
		goto err_unlock_sta;
603 604
	}

605
	state = &sta->ampdu_mlme.tid_state_tx[tid];
606 607 608 609 610 611 612
	/* check if the TID is not in aggregation flow already */
	if (*state != HT_AGG_STATE_IDLE) {
#ifdef CONFIG_MAC80211_HT_DEBUG
		printk(KERN_DEBUG "BA request denied - session is not "
				 "idle on tid %u\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
		ret = -EAGAIN;
613
		goto err_unlock_sta;
614 615
	}

616 617 618 619 620 621 622 623
	/* prepare A-MPDU MLME for Tx aggregation */
	sta->ampdu_mlme.tid_tx[tid] =
			kmalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC);
	if (!sta->ampdu_mlme.tid_tx[tid]) {
		if (net_ratelimit())
			printk(KERN_ERR "allocate tx mlme to tid %d failed\n",
					tid);
		ret = -ENOMEM;
624
		goto err_unlock_sta;
625 626 627 628 629 630 631 632
	}
	/* Tx timer */
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.function =
			sta_addba_resp_timer_expired;
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.data =
			(unsigned long)&sta->timer_to_tid[tid];
	init_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);

633 634 635 636 637
	/* ensure that TX flow won't interrupt us
	 * until the end of the call to requeue function */
	spin_lock_bh(&local->mdev->queue_lock);

	/* create a new queue for this aggregation */
638
	ret = ieee80211_ht_agg_queue_add(local, sta, tid);
639 640 641 642 643

	/* case no queue is available to aggregation
	 * don't switch to aggregation */
	if (ret) {
#ifdef CONFIG_MAC80211_HT_DEBUG
644
		printk(KERN_DEBUG "BA request denied - queue unavailable for"
645 646
					" tid %d\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
647
		goto err_unlock_queue;
648
	}
649
	sdata = sta->sdata;
650 651 652 653 654 655 656 657 658 659 660 661 662

	/* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
	 * call back right away, it must see that the flow has begun */
	*state |= HT_ADDBA_REQUESTED_MSK;

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_START,
						ra, tid, &start_seq_num);

	if (ret) {
		/* No need to requeue the packets in the agg queue, since we
		 * held the tx lock: no packet could be enqueued to the newly
		 * allocated queue */
663
		 ieee80211_ht_agg_queue_remove(local, sta, tid, 0);
664
#ifdef CONFIG_MAC80211_HT_DEBUG
665 666
		printk(KERN_DEBUG "BA request denied - HW unavailable for"
					" tid %d\n", tid);
667 668
#endif /* CONFIG_MAC80211_HT_DEBUG */
		*state = HT_AGG_STATE_IDLE;
669
		goto err_unlock_queue;
670 671 672
	}

	/* Will put all the packets in the new SW queue */
673
	ieee80211_requeue(local, ieee802_1d_to_ac[tid]);
674
	spin_unlock_bh(&local->mdev->queue_lock);
675
	spin_unlock_bh(&sta->lock);
676 677 678

	/* send an addBA request */
	sta->ampdu_mlme.dialog_token_allocator++;
679
	sta->ampdu_mlme.tid_tx[tid]->dialog_token =
680
			sta->ampdu_mlme.dialog_token_allocator;
681
	sta->ampdu_mlme.tid_tx[tid]->ssn = start_seq_num;
682

683

684
	ieee80211_send_addba_request(sta->sdata->dev, ra, tid,
685 686
			 sta->ampdu_mlme.tid_tx[tid]->dialog_token,
			 sta->ampdu_mlme.tid_tx[tid]->ssn,
687 688
			 0x40, 5000);
	/* activate the timer for the recipient's addBA response */
689
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.expires =
690
				jiffies + ADDBA_RESP_INTERVAL;
691
	add_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
692
	printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid);
693
	goto exit;
694

695
err_unlock_queue:
696 697 698 699
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
	spin_unlock_bh(&local->mdev->queue_lock);
	ret = -EBUSY;
700
err_unlock_sta:
701
	spin_unlock_bh(&sta->lock);
702
exit:
703
	rcu_read_unlock();
704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720
	return ret;
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_session);

int ieee80211_stop_tx_ba_session(struct ieee80211_hw *hw,
				 u8 *ra, u16 tid,
				 enum ieee80211_back_parties initiator)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int ret = 0;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

721
	rcu_read_lock();
722
	sta = sta_info_get(local, ra);
723 724
	if (!sta) {
		rcu_read_unlock();
725
		return -ENOENT;
726
	}
727 728

	/* check if the TID is in aggregation */
729
	state = &sta->ampdu_mlme.tid_state_tx[tid];
730
	spin_lock_bh(&sta->lock);
731 732 733 734 735 736

	if (*state != HT_AGG_STATE_OPERATIONAL) {
		ret = -ENOENT;
		goto stop_BA_exit;
	}

737 738 739 740 741
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Tx BA session stop requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759
	ieee80211_stop_queue(hw, sta->tid_to_tx_q[tid]);

	*state = HT_AGG_STATE_REQ_STOP_BA_MSK |
		(initiator << HT_AGG_STATE_INITIATOR_SHIFT);

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_STOP,
						ra, tid, NULL);

	/* case HW denied going back to legacy */
	if (ret) {
		WARN_ON(ret != -EBUSY);
		*state = HT_AGG_STATE_OPERATIONAL;
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
		goto stop_BA_exit;
	}

stop_BA_exit:
760
	spin_unlock_bh(&sta->lock);
761
	rcu_read_unlock();
762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778
	return ret;
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_session);

void ieee80211_start_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
		return;
	}

779
	rcu_read_lock();
780 781
	sta = sta_info_get(local, ra);
	if (!sta) {
782
		rcu_read_unlock();
783 784 785 786 787
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
		return;
	}

788
	state = &sta->ampdu_mlme.tid_state_tx[tid];
789
	spin_lock_bh(&sta->lock);
790 791 792 793

	if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
		printk(KERN_DEBUG "addBA was not requested yet, state is %d\n",
				*state);
794
		spin_unlock_bh(&sta->lock);
795
		rcu_read_unlock();
796 797 798 799 800 801 802 803 804 805 806
		return;
	}

	WARN_ON_ONCE(*state & HT_ADDBA_DRV_READY_MSK);

	*state |= HT_ADDBA_DRV_READY_MSK;

	if (*state == HT_AGG_STATE_OPERATIONAL) {
		printk(KERN_DEBUG "Aggregation is on for tid %d \n", tid);
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
	}
807
	spin_unlock_bh(&sta->lock);
808
	rcu_read_unlock();
809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb);

void ieee80211_stop_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u8 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int agg_queue;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
		return;
	}

826 827
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Stopping Tx BA session for %s tid %d\n",
828
				print_mac(mac, ra), tid);
829
#endif /* CONFIG_MAC80211_HT_DEBUG */
830

831
	rcu_read_lock();
832 833 834 835
	sta = sta_info_get(local, ra);
	if (!sta) {
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
836
		rcu_read_unlock();
837 838
		return;
	}
839
	state = &sta->ampdu_mlme.tid_state_tx[tid];
840

841 842 843
	/* NOTE: no need to use sta->lock in this state check, as
	 * ieee80211_stop_tx_ba_session will let only
	 * one stop call to pass through per sta/tid */
844 845
	if ((*state & HT_AGG_STATE_REQ_STOP_BA_MSK) == 0) {
		printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n");
846
		rcu_read_unlock();
847 848 849 850
		return;
	}

	if (*state & HT_AGG_STATE_INITIATOR_MSK)
851
		ieee80211_send_delba(sta->sdata->dev, ra, tid,
852 853 854 855 856 857 858 859
			WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE);

	agg_queue = sta->tid_to_tx_q[tid];

	/* avoid ordering issues: we are the only one that can modify
	 * the content of the qdiscs */
	spin_lock_bh(&local->mdev->queue_lock);
	/* remove the queue for this aggregation */
860
	ieee80211_ht_agg_queue_remove(local, sta, tid, 1);
861 862 863 864 865 866 867
	spin_unlock_bh(&local->mdev->queue_lock);

	/* we just requeued the all the frames that were in the removed
	 * queue, and since we might miss a softirq we do netif_schedule.
	 * ieee80211_wake_queue is not used here as this queue is not
	 * necessarily stopped */
	netif_schedule(local->mdev);
868
	spin_lock_bh(&sta->lock);
869
	*state = HT_AGG_STATE_IDLE;
870 871 872
	sta->ampdu_mlme.addba_req_num[tid] = 0;
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
873
	spin_unlock_bh(&sta->lock);
874

875
	rcu_read_unlock();
876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb);

void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				      const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping start BA session", skb->dev->name);
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_ADDBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe);

void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				     const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping stop BA session", skb->dev->name);
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_DELBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe);

925 926 927 928
static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
929
	int allmulti, promisc, sdata_allmulti, sdata_promisc;
930

931 932
	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
933 934
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
935 936 937

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
938
			atomic_inc(&local->iff_allmultis);
939
		else
940
			atomic_dec(&local->iff_allmultis);
941
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
942
	}
943 944 945

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
946
			atomic_inc(&local->iff_promiscs);
947
		else
948
			atomic_dec(&local->iff_promiscs);
949
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
950
	}
951 952

	dev_mc_sync(local->mdev, dev);
953 954
}

955 956 957 958 959 960 961 962
static const struct header_ops ieee80211_header_ops = {
	.create		= eth_header,
	.parse		= header_parse_80211,
	.rebuild	= eth_rebuild_header,
	.cache		= eth_header_cache,
	.cache_update	= eth_header_cache_update,
};

963
/* Must not be called for mdev */
964
void ieee80211_if_setup(struct net_device *dev)
965
{
966 967 968 969 970 971 972 973 974
	ether_setup(dev);
	dev->hard_start_xmit = ieee80211_subif_start_xmit;
	dev->wireless_handlers = &ieee80211_iw_handler_def;
	dev->set_multicast_list = ieee80211_set_multicast_list;
	dev->change_mtu = ieee80211_change_mtu;
	dev->open = ieee80211_open;
	dev->stop = ieee80211_stop;
	dev->destructor = ieee80211_if_free;
}
975

976 977 978
/* everything else */

static int __ieee80211_if_config(struct net_device *dev,
979
				 struct sk_buff *beacon)
980 981 982 983 984 985
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_if_conf conf;

	if (!local->ops->config_interface || !netif_running(dev))
986 987
		return 0;

988
	memset(&conf, 0, sizeof(conf));
989 990 991
	conf.type = sdata->vif.type;
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
992
		conf.bssid = sdata->u.sta.bssid;
993 994
		conf.ssid = sdata->u.sta.ssid;
		conf.ssid_len = sdata->u.sta.ssid_len;
Johannes Berg's avatar
Johannes Berg committed
995
	} else if (ieee80211_vif_is_mesh(&sdata->vif)) {
996 997
		conf.beacon = beacon;
		ieee80211_start_mesh(dev);
998
	} else if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
999 1000 1001
		conf.ssid = sdata->u.ap.ssid;
		conf.ssid_len = sdata->u.ap.ssid_len;
		conf.beacon = beacon;
1002
	}
1003
	return local->ops->config_interface(local_to_hw(local),
1004
					    &sdata->vif, &conf);
1005 1006
}

1007 1008
int ieee80211_if_config(struct net_device *dev)
{
1009 1010 1011 1012 1013
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	if (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT &&
	    (local->hw.flags & IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE))
		return ieee80211_if_config_beacon(dev);
1014
	return __ieee80211_if_config(dev, NULL);
1015
}
1016

1017
int ieee80211_if_config_beacon(struct net_device *dev)
1018 1019
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1020
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1021
	struct sk_buff *skb;
1022

1023
	if (!(local->hw.flags & IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE))
1024
		return 0;
1025
	skb = ieee80211_beacon_get(local_to_hw(local), &sdata->vif);
1026 1027
	if (!skb)
		return -ENOMEM;
1028
	return __ieee80211_if_config(dev, skb);
1029
}
1030

1031 1032 1033 1034
int ieee80211_hw_config(struct ieee80211_local *local)
{
	struct ieee80211_channel *chan;
	int ret = 0;
1035

1036
	if (local->sta_sw_scanning)
1037
		chan = local->scan_channel;
1038
	else
1039
		chan = local->oper_channel;
1040

1041 1042 1043 1044 1045 1046 1047 1048 1049
	local->hw.conf.channel = chan;

	if (!local->hw.conf.power_level)
		local->hw.conf.power_level = chan->max_power;
	else
		local->hw.conf.power_level = min(chan->max_power,
					       local->hw.conf.power_level);

	local->hw.conf.max_antenna_gain = chan->max_antenna_gain;
1050

1051
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1052 1053 1054
	printk(KERN_DEBUG "%s: HW CONFIG: freq=%d\n",
	       wiphy_name(local->hw.wiphy), chan->center_freq);
#endif
1055