main.c 53.2 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <net/mac80211.h>
#include <net/ieee80211_radiotap.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/netdevice.h>
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/wireless.h>
#include <linux/rtnetlink.h>
#include <linux/bitmap.h>
24
#include <net/net_namespace.h>
25 26 27
#include <net/cfg80211.h>

#include "ieee80211_i.h"
Johannes Berg's avatar
Johannes Berg committed
28
#include "rate.h"
29
#include "mesh.h"
30 31 32
#include "wep.h"
#include "wme.h"
#include "aes_ccm.h"
Johannes Berg's avatar
Johannes Berg committed
33
#include "led.h"
34
#include "cfg.h"
35 36
#include "debugfs.h"
#include "debugfs_netdev.h"
37

38 39 40 41 42 43 44 45 46 47
/*
 * For seeing transmitted packets on monitor interfaces
 * we have a radiotap header too.
 */
struct ieee80211_tx_status_rtap_hdr {
	struct ieee80211_radiotap_header hdr;
	__le16 tx_flags;
	u8 data_retries;
} __attribute__ ((packed));

48
/* common interface routines */
49

50
static int header_parse_80211(const struct sk_buff *skb, unsigned char *haddr)
51 52 53 54
{
	memcpy(haddr, skb_mac_header(skb) + 10, ETH_ALEN); /* addr2 */
	return ETH_ALEN;
}
55

56 57 58 59 60 61
/* must be called under mdev tx lock */
static void ieee80211_configure_filter(struct ieee80211_local *local)
{
	unsigned int changed_flags;
	unsigned int new_flags = 0;

62
	if (atomic_read(&local->iff_promiscs))
63 64
		new_flags |= FIF_PROMISC_IN_BSS;

65
	if (atomic_read(&local->iff_allmultis))
66 67 68
		new_flags |= FIF_ALLMULTI;

	if (local->monitors)
69 70 71 72 73 74 75 76 77 78 79 80 81
		new_flags |= FIF_BCN_PRBRESP_PROMISC;

	if (local->fif_fcsfail)
		new_flags |= FIF_FCSFAIL;

	if (local->fif_plcpfail)
		new_flags |= FIF_PLCPFAIL;

	if (local->fif_control)
		new_flags |= FIF_CONTROL;

	if (local->fif_other_bss)
		new_flags |= FIF_OTHER_BSS;
82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97

	changed_flags = local->filter_flags ^ new_flags;

	/* be a bit nasty */
	new_flags |= (1<<31);

	local->ops->configure_filter(local_to_hw(local),
				     changed_flags, &new_flags,
				     local->mdev->mc_count,
				     local->mdev->mc_list);

	WARN_ON(new_flags & (1<<31));

	local->filter_flags = new_flags & ~(1<<31);
}

98
/* master interface */
99

100 101 102 103 104
static int ieee80211_master_open(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
	int res = -EOPNOTSUPP;
105

106 107
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list) {
108 109 110 111 112
		if (sdata->dev != dev && netif_running(sdata->dev)) {
			res = 0;
			break;
		}
	}
113 114 115 116 117 118 119

	if (res)
		return res;

	netif_start_queue(local->mdev);

	return 0;
120
}
121

122
static int ieee80211_master_stop(struct net_device *dev)
123
{
124 125
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
126

127 128
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list)
129 130
		if (sdata->dev != dev && netif_running(sdata->dev))
			dev_close(sdata->dev);
131

132 133
	return 0;
}
134

135 136 137 138 139 140 141
static void ieee80211_master_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);

	ieee80211_configure_filter(local);
}

142
/* regular interfaces */
143

144
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
145
{
146 147 148 149 150
	int meshhdrlen;
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	meshhdrlen = (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT) ? 5 : 0;

151 152
	/* FIX: what would be proper limits for MTU?
	 * This interface uses 802.3 frames. */
153
	if (new_mtu < 256 ||
154
	    new_mtu > IEEE80211_MAX_DATA_LEN - 24 - 6 - meshhdrlen) {
155 156
		return -EINVAL;
	}
157

158 159 160 161
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
	printk(KERN_DEBUG "%s: setting MTU %d\n", dev->name, new_mtu);
#endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
	dev->mtu = new_mtu;
162 163 164
	return 0;
}

165 166 167 168 169 170 171 172 173 174 175 176 177 178 179
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return (type1 == IEEE80211_IF_TYPE_MNTR ||
		type2 == IEEE80211_IF_TYPE_MNTR ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_WDS) ||
		(type1 == IEEE80211_IF_TYPE_WDS &&
		 (type2 == IEEE80211_IF_TYPE_WDS ||
		  type2 == IEEE80211_IF_TYPE_AP)) ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_VLAN) ||
		(type1 == IEEE80211_IF_TYPE_VLAN &&
		 (type2 == IEEE80211_IF_TYPE_AP ||
		  type2 == IEEE80211_IF_TYPE_VLAN)));
}
180

181
static int ieee80211_open(struct net_device *dev)
182
{
183 184
	struct ieee80211_sub_if_data *sdata, *nsdata;
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
185
	struct sta_info *sta;
186
	struct ieee80211_if_init_conf conf;
187
	u32 changed = 0;
188
	int res;
189
	bool need_hw_reconfig = 0;
190

191
	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
192

193 194
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
195
		struct net_device *ndev = nsdata->dev;
196

197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242
		if (ndev != dev && ndev != local->mdev && netif_running(ndev)) {
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
			if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
			    nsdata->vif.type == IEEE80211_IF_TYPE_IBSS)
				return -EBUSY;

			/*
			 * Disallow multiple IBSS/STA mode interfaces.
			 *
			 * This is a technical restriction, it is possible although
			 * most likely not IEEE 802.11 compliant to have multiple
			 * STAs with just a single hardware (the TSF timer will not
			 * be adjusted properly.)
			 *
			 * However, because mac80211 uses the master device's BSS
			 * information for each STA/IBSS interface, doing this will
			 * currently corrupt that BSS information completely, unless,
			 * a not very useful case, both STAs are associated to the
			 * same BSS.
			 *
			 * To remove this restriction, the BSS information needs to
			 * be embedded in the STA/IBSS mode sdata instead of using
			 * the master device's BSS structure.
			 */
			if ((sdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     sdata->vif.type == IEEE80211_IF_TYPE_IBSS) &&
			    (nsdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     nsdata->vif.type == IEEE80211_IF_TYPE_IBSS))
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
			if (compare_ether_addr(dev->dev_addr, ndev->dev_addr))
				continue;

243 244 245
			/*
			 * check whether it may have the same address
			 */
246 247
			if (!identical_mac_addr_allowed(sdata->vif.type,
							nsdata->vif.type))
248 249 250 251 252
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
253
			if (sdata->vif.type == IEEE80211_IF_TYPE_VLAN &&
254
			    nsdata->vif.type == IEEE80211_IF_TYPE_AP)
255
				sdata->u.vlan.ap = nsdata;
256 257
		}
	}
258

259
	switch (sdata->vif.type) {
260
	case IEEE80211_IF_TYPE_WDS:
261
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
262 263 264 265 266 267
			return -ENOLINK;
		break;
	case IEEE80211_IF_TYPE_VLAN:
		if (!sdata->u.vlan.ap)
			return -ENOLINK;
		break;
Johannes Berg's avatar
Johannes Berg committed
268 269 270 271
	case IEEE80211_IF_TYPE_AP:
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_MNTR:
	case IEEE80211_IF_TYPE_IBSS:
272
	case IEEE80211_IF_TYPE_MESH_POINT:
Johannes Berg's avatar
Johannes Berg committed
273 274
		/* no special treatment */
		break;
275 276 277 278
	case IEEE80211_IF_TYPE_INVALID:
		/* cannot happen */
		WARN_ON(1);
		break;
279
	}
280

281 282
	if (local->open_count == 0) {
		res = 0;
283 284 285
		if (local->ops->start)
			res = local->ops->start(local_to_hw(local));
		if (res)
286
			return res;
287
		need_hw_reconfig = 1;
288
		ieee80211_led_radio(local, local->hw.conf.radio_enabled);
289
	}
290

291
	switch (sdata->vif.type) {
292 293 294 295
	case IEEE80211_IF_TYPE_VLAN:
		list_add(&sdata->u.vlan.list, &sdata->u.vlan.ap->u.ap.vlans);
		/* no need to tell driver */
		break;
296
	case IEEE80211_IF_TYPE_MNTR:
297 298 299 300 301
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

302
		/* must be before the call to ieee80211_configure_filter */
303
		local->monitors++;
304
		if (local->monitors == 1)
305
			local->hw.conf.flags |= IEEE80211_CONF_RADIOTAP;
306 307 308 309 310 311 312 313 314 315 316 317 318

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss++;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
319 320 321 322 323 324
		break;
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.flags &= ~IEEE80211_STA_PREV_BSSID_SET;
		/* fall through */
	default:
325
		conf.vif = &sdata->vif;
326
		conf.type = sdata->vif.type;
327 328 329
		conf.mac_addr = dev->dev_addr;
		res = local->ops->add_interface(local_to_hw(local), &conf);
		if (res)
330
			goto err_stop;
331

332
		ieee80211_if_config(dev);
333 334
		changed |= ieee80211_reset_erp_info(dev);
		ieee80211_bss_info_change_notify(sdata, changed);
335
		ieee80211_enable_keys(sdata);
336

337
		if (sdata->vif.type == IEEE80211_IF_TYPE_STA &&
338
		    !(sdata->flags & IEEE80211_SDATA_USERSPACE_MLME))
339 340 341
			netif_carrier_off(dev);
		else
			netif_carrier_on(dev);
342
	}
343

344 345 346 347 348 349 350 351 352
	if (sdata->vif.type == IEEE80211_IF_TYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

353
		/* no locking required since STA is not live yet */
354 355 356 357 358 359 360 361 362
		sta->flags |= WLAN_STA_AUTHORIZED;

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
	}

363 364 365
	if (local->open_count == 0) {
		res = dev_open(local->mdev);
		WARN_ON(res);
366 367
		if (res)
			goto err_del_interface;
368 369 370 371
		tasklet_enable(&local->tx_pending_tasklet);
		tasklet_enable(&local->tasklet);
	}

372 373 374 375 376 377 378 379 380 381 382
	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

383
	local->open_count++;
384 385
	if (need_hw_reconfig)
		ieee80211_hw_config(local);
386

387 388 389 390 391 392
	/*
	 * ieee80211_sta_work is disabled while network interface
	 * is down. Therefore, some configuration changes may not
	 * yet be effective. Trigger execution of ieee80211_sta_work
	 * to fix this.
	 */
Johannes Berg's avatar
Johannes Berg committed
393 394
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
395 396 397 398
		struct ieee80211_if_sta *ifsta = &sdata->u.sta;
		queue_work(local->hw.workqueue, &ifsta->work);
	}

399
	netif_start_queue(dev);
400

401
	return 0;
402 403 404 405 406 407
 err_del_interface:
	local->ops->remove_interface(local_to_hw(local), &conf);
 err_stop:
	if (!local->open_count && local->ops->stop)
		local->ops->stop(local_to_hw(local));
	return res;
408 409
}

410
static int ieee80211_stop(struct net_device *dev)
411
{
412 413
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = sdata->local;
414
	struct ieee80211_if_init_conf conf;
415
	struct sta_info *sta;
416

417 418 419 420
	/*
	 * Stop TX on this interface first.
	 */
	netif_stop_queue(dev);
421

422 423 424
	/*
	 * Now delete all active aggregation sessions.
	 */
425 426 427 428
	rcu_read_lock();

	list_for_each_entry_rcu(sta, &local->sta_list, list) {
		if (sta->sdata == sdata)
429
			ieee80211_sta_tear_down_BA_sessions(dev, sta->addr);
430 431
	}

432 433
	rcu_read_unlock();

434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
	 * We could relax this and only unlink the stations from the
	 * hash table and list but keep them on a per-sdata list that
	 * will be inserted back again when the interface is brought
	 * up again, but I don't currently see a use case for that,
	 * except with WDS which gets a STA entry created when it is
	 * brought up.
	 */
	sta_info_flush(local, sdata);
452

453 454 455 456 457 458 459 460 461 462 463 464
	/*
	 * Don't count this interface for promisc/allmulti while it
	 * is down. dev_mc_unsync() will invoke set_multicast_list
	 * on the master interface which will sync these down to the
	 * hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

465 466
	dev_mc_unsync(local->mdev, dev);

467
	/* APs need special treatment */
468
	if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
469
		struct ieee80211_sub_if_data *vlan, *tmp;
470
		struct beacon_data *old_beacon = sdata->u.ap.beacon;
471

472 473 474 475 476 477
		/* remove beacon */
		rcu_assign_pointer(sdata->u.ap.beacon, NULL);
		synchronize_rcu();
		kfree(old_beacon);

		/* down all dependent devices, that is VLANs */
478 479 480 481 482 483
		list_for_each_entry_safe(vlan, tmp, &sdata->u.ap.vlans,
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
	}

484
	local->open_count--;
485

486
	switch (sdata->vif.type) {
487 488 489 490 491
	case IEEE80211_IF_TYPE_VLAN:
		list_del(&sdata->u.vlan.list);
		sdata->u.vlan.ap = NULL;
		/* no need to tell driver */
		break;
492
	case IEEE80211_IF_TYPE_MNTR:
493 494 495 496 497
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

498
		local->monitors--;
499
		if (local->monitors == 0)
500
			local->hw.conf.flags &= ~IEEE80211_CONF_RADIOTAP;
501 502 503 504 505 506 507 508 509 510 511 512 513

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss--;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
514
		break;
515
	case IEEE80211_IF_TYPE_MESH_POINT:
516 517 518
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.state = IEEE80211_DISABLED;
519
		memset(sdata->u.sta.bssid, 0, ETH_ALEN);
520
		del_timer_sync(&sdata->u.sta.timer);
521
		/*
522 523 524 525
		 * When we get here, the interface is marked down.
		 * Call synchronize_rcu() to wait for the RX path
		 * should it be using the interface and enqueuing
		 * frames at this very time on another CPU.
526
		 */
527
		synchronize_rcu();
528
		skb_queue_purge(&sdata->u.sta.skb_queue);
529

Zhu Yi's avatar
Zhu Yi committed
530 531 532 533 534 535
		if (local->scan_dev == sdata->dev) {
			if (!local->ops->hw_scan) {
				local->sta_sw_scanning = 0;
				cancel_delayed_work(&local->scan_work);
			} else
				local->sta_hw_scanning = 0;
536
		}
Zhu Yi's avatar
Zhu Yi committed
537

538 539 540 541
		sdata->u.sta.flags &= ~IEEE80211_STA_PRIVACY_INVOKED;
		kfree(sdata->u.sta.extra_ie);
		sdata->u.sta.extra_ie = NULL;
		sdata->u.sta.extra_ie_len = 0;
542 543
		/* fall through */
	default:
544
		conf.vif = &sdata->vif;
545
		conf.type = sdata->vif.type;
546
		conf.mac_addr = dev->dev_addr;
547 548
		/* disable all keys for as long as this netdev is down */
		ieee80211_disable_keys(sdata);
549
		local->ops->remove_interface(local_to_hw(local), &conf);
550 551
	}

552 553 554
	if (local->open_count == 0) {
		if (netif_running(local->mdev))
			dev_close(local->mdev);
555

556 557
		if (local->ops->stop)
			local->ops->stop(local_to_hw(local));
558

559 560
		ieee80211_led_radio(local, 0);

561 562
		flush_workqueue(local->hw.workqueue);

563 564 565 566
		tasklet_disable(&local->tx_pending_tasklet);
		tasklet_disable(&local->tasklet);
	}

567 568 569
	return 0;
}

570 571 572
int ieee80211_start_tx_ba_session(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
573
	struct netdev_queue *txq;
574 575 576 577 578 579 580 581 582 583 584 585 586 587 588
	struct sta_info *sta;
	struct ieee80211_sub_if_data *sdata;
	u16 start_seq_num = 0;
	u8 *state;
	int ret;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Open BA session requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

589 590
	rcu_read_lock();

591 592
	sta = sta_info_get(local, ra);
	if (!sta) {
593
#ifdef CONFIG_MAC80211_HT_DEBUG
594
		printk(KERN_DEBUG "Could not find the station\n");
595
#endif
596 597
		ret = -ENOENT;
		goto exit;
598 599
	}

600
	spin_lock_bh(&sta->lock);
601 602

	/* we have tried too many times, receiver does not want A-MPDU */
603
	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {
604
		ret = -EBUSY;
605
		goto err_unlock_sta;
606 607
	}

608
	state = &sta->ampdu_mlme.tid_state_tx[tid];
609 610 611 612 613 614 615
	/* check if the TID is not in aggregation flow already */
	if (*state != HT_AGG_STATE_IDLE) {
#ifdef CONFIG_MAC80211_HT_DEBUG
		printk(KERN_DEBUG "BA request denied - session is not "
				 "idle on tid %u\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
		ret = -EAGAIN;
616
		goto err_unlock_sta;
617 618
	}

619 620 621 622
	/* prepare A-MPDU MLME for Tx aggregation */
	sta->ampdu_mlme.tid_tx[tid] =
			kmalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC);
	if (!sta->ampdu_mlme.tid_tx[tid]) {
623
#ifdef CONFIG_MAC80211_HT_DEBUG
624 625 626
		if (net_ratelimit())
			printk(KERN_ERR "allocate tx mlme to tid %d failed\n",
					tid);
627
#endif
628
		ret = -ENOMEM;
629
		goto err_unlock_sta;
630 631 632 633 634 635 636 637
	}
	/* Tx timer */
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.function =
			sta_addba_resp_timer_expired;
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.data =
			(unsigned long)&sta->timer_to_tid[tid];
	init_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);

638 639
	/* ensure that TX flow won't interrupt us
	 * until the end of the call to requeue function */
640 641
	txq = &local->mdev->tx_queue;
	spin_lock_bh(&txq->lock);
642 643

	/* create a new queue for this aggregation */
644
	ret = ieee80211_ht_agg_queue_add(local, sta, tid);
645 646 647 648 649

	/* case no queue is available to aggregation
	 * don't switch to aggregation */
	if (ret) {
#ifdef CONFIG_MAC80211_HT_DEBUG
650
		printk(KERN_DEBUG "BA request denied - queue unavailable for"
651 652
					" tid %d\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
653
		goto err_unlock_queue;
654
	}
655
	sdata = sta->sdata;
656 657 658 659 660 661 662 663 664 665 666 667 668

	/* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
	 * call back right away, it must see that the flow has begun */
	*state |= HT_ADDBA_REQUESTED_MSK;

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_START,
						ra, tid, &start_seq_num);

	if (ret) {
		/* No need to requeue the packets in the agg queue, since we
		 * held the tx lock: no packet could be enqueued to the newly
		 * allocated queue */
669
		 ieee80211_ht_agg_queue_remove(local, sta, tid, 0);
670
#ifdef CONFIG_MAC80211_HT_DEBUG
671 672
		printk(KERN_DEBUG "BA request denied - HW unavailable for"
					" tid %d\n", tid);
673 674
#endif /* CONFIG_MAC80211_HT_DEBUG */
		*state = HT_AGG_STATE_IDLE;
675
		goto err_unlock_queue;
676 677 678
	}

	/* Will put all the packets in the new SW queue */
679
	ieee80211_requeue(local, ieee802_1d_to_ac[tid]);
680
	spin_unlock_bh(&txq->lock);
681
	spin_unlock_bh(&sta->lock);
682 683 684

	/* send an addBA request */
	sta->ampdu_mlme.dialog_token_allocator++;
685
	sta->ampdu_mlme.tid_tx[tid]->dialog_token =
686
			sta->ampdu_mlme.dialog_token_allocator;
687
	sta->ampdu_mlme.tid_tx[tid]->ssn = start_seq_num;
688

689

690
	ieee80211_send_addba_request(sta->sdata->dev, ra, tid,
691 692
			 sta->ampdu_mlme.tid_tx[tid]->dialog_token,
			 sta->ampdu_mlme.tid_tx[tid]->ssn,
693 694
			 0x40, 5000);
	/* activate the timer for the recipient's addBA response */
695
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.expires =
696
				jiffies + ADDBA_RESP_INTERVAL;
697
	add_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
698
#ifdef CONFIG_MAC80211_HT_DEBUG
699
	printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid);
700
#endif
701
	goto exit;
702

703
err_unlock_queue:
704 705
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
706
	spin_unlock_bh(&txq->lock);
707
	ret = -EBUSY;
708
err_unlock_sta:
709
	spin_unlock_bh(&sta->lock);
710
exit:
711
	rcu_read_unlock();
712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728
	return ret;
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_session);

int ieee80211_stop_tx_ba_session(struct ieee80211_hw *hw,
				 u8 *ra, u16 tid,
				 enum ieee80211_back_parties initiator)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int ret = 0;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

729
	rcu_read_lock();
730
	sta = sta_info_get(local, ra);
731 732
	if (!sta) {
		rcu_read_unlock();
733
		return -ENOENT;
734
	}
735 736

	/* check if the TID is in aggregation */
737
	state = &sta->ampdu_mlme.tid_state_tx[tid];
738
	spin_lock_bh(&sta->lock);
739 740 741 742 743 744

	if (*state != HT_AGG_STATE_OPERATIONAL) {
		ret = -ENOENT;
		goto stop_BA_exit;
	}

745 746 747 748 749
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Tx BA session stop requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767
	ieee80211_stop_queue(hw, sta->tid_to_tx_q[tid]);

	*state = HT_AGG_STATE_REQ_STOP_BA_MSK |
		(initiator << HT_AGG_STATE_INITIATOR_SHIFT);

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_STOP,
						ra, tid, NULL);

	/* case HW denied going back to legacy */
	if (ret) {
		WARN_ON(ret != -EBUSY);
		*state = HT_AGG_STATE_OPERATIONAL;
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
		goto stop_BA_exit;
	}

stop_BA_exit:
768
	spin_unlock_bh(&sta->lock);
769
	rcu_read_unlock();
770 771 772 773 774 775 776 777 778 779 780 781
	return ret;
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_session);

void ieee80211_start_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
782
#ifdef CONFIG_MAC80211_HT_DEBUG
783 784
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
785
#endif
786 787 788
		return;
	}

789
	rcu_read_lock();
790 791
	sta = sta_info_get(local, ra);
	if (!sta) {
792
		rcu_read_unlock();
793
#ifdef CONFIG_MAC80211_HT_DEBUG
794 795
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
796
#endif
797 798 799
		return;
	}

800
	state = &sta->ampdu_mlme.tid_state_tx[tid];
801
	spin_lock_bh(&sta->lock);
802 803

	if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
804
#ifdef CONFIG_MAC80211_HT_DEBUG
805 806
		printk(KERN_DEBUG "addBA was not requested yet, state is %d\n",
				*state);
807
#endif
808
		spin_unlock_bh(&sta->lock);
809
		rcu_read_unlock();
810 811 812 813 814 815 816 817
		return;
	}

	WARN_ON_ONCE(*state & HT_ADDBA_DRV_READY_MSK);

	*state |= HT_ADDBA_DRV_READY_MSK;

	if (*state == HT_AGG_STATE_OPERATIONAL) {
818
#ifdef CONFIG_MAC80211_HT_DEBUG
819
		printk(KERN_DEBUG "Aggregation is on for tid %d \n", tid);
820
#endif
821 822
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
	}
823
	spin_unlock_bh(&sta->lock);
824
	rcu_read_unlock();
825 826 827 828 829 830
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb);

void ieee80211_stop_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u8 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
831
	struct netdev_queue *txq;
832 833 834 835 836 837
	struct sta_info *sta;
	u8 *state;
	int agg_queue;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
838
#ifdef CONFIG_MAC80211_HT_DEBUG
839 840
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
841
#endif
842 843 844
		return;
	}

845 846
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Stopping Tx BA session for %s tid %d\n",
847
				print_mac(mac, ra), tid);
848
#endif /* CONFIG_MAC80211_HT_DEBUG */
849

850
	rcu_read_lock();
851 852
	sta = sta_info_get(local, ra);
	if (!sta) {
853
#ifdef CONFIG_MAC80211_HT_DEBUG
854 855
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
856
#endif
857
		rcu_read_unlock();
858 859
		return;
	}
860
	state = &sta->ampdu_mlme.tid_state_tx[tid];
861

862 863 864
	/* NOTE: no need to use sta->lock in this state check, as
	 * ieee80211_stop_tx_ba_session will let only
	 * one stop call to pass through per sta/tid */
865
	if ((*state & HT_AGG_STATE_REQ_STOP_BA_MSK) == 0) {
866
#ifdef CONFIG_MAC80211_HT_DEBUG
867
		printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n");
868
#endif
869
		rcu_read_unlock();
870 871 872 873
		return;
	}

	if (*state & HT_AGG_STATE_INITIATOR_MSK)
874
		ieee80211_send_delba(sta->sdata->dev, ra, tid,
875 876 877 878 879 880
			WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE);

	agg_queue = sta->tid_to_tx_q[tid];

	/* avoid ordering issues: we are the only one that can modify
	 * the content of the qdiscs */
881 882
	txq = &local->mdev->tx_queue;
	spin_lock_bh(&txq->lock);
883
	/* remove the queue for this aggregation */
884
	ieee80211_ht_agg_queue_remove(local, sta, tid, 1);
885
	spin_unlock_bh(&txq->lock);
886 887

	/* we just requeued the all the frames that were in the removed
888
	 * queue, and since we might miss a softirq we do netif_schedule_queue.
889 890
	 * ieee80211_wake_queue is not used here as this queue is not
	 * necessarily stopped */
891
	netif_schedule_queue(txq);
892
	spin_lock_bh(&sta->lock);
893
	*state = HT_AGG_STATE_IDLE;
894 895 896
	sta->ampdu_mlme.addba_req_num[tid] = 0;
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
897
	spin_unlock_bh(&sta->lock);
898

899
	rcu_read_unlock();
900 901 902 903 904 905 906 907 908 909 910
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb);

void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				      const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
911
#ifdef CONFIG_MAC80211_HT_DEBUG
912 913 914
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping start BA session", skb->dev->name);
915
#endif
916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_ADDBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe);

void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				     const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
936
#ifdef CONFIG_MAC80211_HT_DEBUG
937 938 939
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping stop BA session", skb->dev->name);
940
#endif
941 942 943 944 945 946 947 948 949 950 951 952
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_DELBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe);

953 954 955 956
static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
957
	int allmulti, promisc, sdata_allmulti, sdata_promisc;
958

959 960
	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
961 962
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
963 964 965

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
966
			atomic_inc(&local->iff_allmultis);
967
		else
968
			atomic_dec(&local->iff_allmultis);
969
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
970
	}
971 972 973

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
974
			atomic_inc(&local->iff_promiscs);
975
		else
976
			atomic_dec(&local->iff_promiscs);
977
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
978
	}
979 980

	dev_mc_sync(local->mdev, dev);
981 982
}

983 984 985 986 987 988 989 990
static const struct header_ops ieee80211_header_ops = {
	.create		= eth_header,
	.parse		= header_parse_80211,
	.rebuild	= eth_rebuild_header,
	.cache		= eth_header_cache,
	.cache_update	= eth_header_cache_update,
};

991
/* Must not be called for mdev */
992
void ieee80211_if_setup(struct net_device *dev)
993
{
994 995 996 997 998 999 1000 1001 1002
	ether_setup(dev);
	dev->hard_start_xmit = ieee80211_subif_start_xmit;
	dev->wireless_handlers = &ieee80211_iw_handler_def;
	dev->set_multicast_list = ieee80211_set_multicast_list;
	dev->change_mtu = ieee80211_change_mtu;
	dev->open = ieee80211_open;
	dev->stop = ieee80211_stop;
	dev->destructor = ieee80211_if_free;
}
1003

1004 1005 1006
/* everything else */

static int __ieee80211_if_config(struct net_device *dev,
1007
				 struct sk_buff *beacon)