main.c 53.2 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <net/mac80211.h>
#include <net/ieee80211_radiotap.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/netdevice.h>
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/wireless.h>
#include <linux/rtnetlink.h>
#include <linux/bitmap.h>
24
#include <net/net_namespace.h>
25 26 27
#include <net/cfg80211.h>

#include "ieee80211_i.h"
Johannes Berg's avatar
Johannes Berg committed
28
#include "rate.h"
29
#include "mesh.h"
30 31 32
#include "wep.h"
#include "wme.h"
#include "aes_ccm.h"
Johannes Berg's avatar
Johannes Berg committed
33
#include "led.h"
34
#include "cfg.h"
35 36
#include "debugfs.h"
#include "debugfs_netdev.h"
37

38 39 40 41 42 43 44 45 46 47
/*
 * For seeing transmitted packets on monitor interfaces
 * we have a radiotap header too.
 */
struct ieee80211_tx_status_rtap_hdr {
	struct ieee80211_radiotap_header hdr;
	__le16 tx_flags;
	u8 data_retries;
} __attribute__ ((packed));

48
/* common interface routines */
49

50
static int header_parse_80211(const struct sk_buff *skb, unsigned char *haddr)
51 52 53 54
{
	memcpy(haddr, skb_mac_header(skb) + 10, ETH_ALEN); /* addr2 */
	return ETH_ALEN;
}
55

56 57 58 59 60 61
/* must be called under mdev tx lock */
static void ieee80211_configure_filter(struct ieee80211_local *local)
{
	unsigned int changed_flags;
	unsigned int new_flags = 0;

62
	if (atomic_read(&local->iff_promiscs))
63 64
		new_flags |= FIF_PROMISC_IN_BSS;

65
	if (atomic_read(&local->iff_allmultis))
66 67 68
		new_flags |= FIF_ALLMULTI;

	if (local->monitors)
69 70 71 72 73 74 75 76 77 78 79 80 81
		new_flags |= FIF_BCN_PRBRESP_PROMISC;

	if (local->fif_fcsfail)
		new_flags |= FIF_FCSFAIL;

	if (local->fif_plcpfail)
		new_flags |= FIF_PLCPFAIL;

	if (local->fif_control)
		new_flags |= FIF_CONTROL;

	if (local->fif_other_bss)
		new_flags |= FIF_OTHER_BSS;
82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97

	changed_flags = local->filter_flags ^ new_flags;

	/* be a bit nasty */
	new_flags |= (1<<31);

	local->ops->configure_filter(local_to_hw(local),
				     changed_flags, &new_flags,
				     local->mdev->mc_count,
				     local->mdev->mc_list);

	WARN_ON(new_flags & (1<<31));

	local->filter_flags = new_flags & ~(1<<31);
}

98
/* master interface */
99

100 101 102 103 104
static int ieee80211_master_open(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
	int res = -EOPNOTSUPP;
105

106 107
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list) {
108 109 110 111 112
		if (sdata->dev != dev && netif_running(sdata->dev)) {
			res = 0;
			break;
		}
	}
113 114 115 116 117 118 119

	if (res)
		return res;

	netif_start_queue(local->mdev);

	return 0;
120
}
121

122
static int ieee80211_master_stop(struct net_device *dev)
123
{
124 125
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
126

127 128
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list)
129 130
		if (sdata->dev != dev && netif_running(sdata->dev))
			dev_close(sdata->dev);
131

132 133
	return 0;
}
134

135 136 137 138 139 140 141
static void ieee80211_master_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);

	ieee80211_configure_filter(local);
}

142
/* regular interfaces */
143

144
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
145
{
146 147 148 149 150
	int meshhdrlen;
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	meshhdrlen = (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT) ? 5 : 0;

151 152
	/* FIX: what would be proper limits for MTU?
	 * This interface uses 802.3 frames. */
153
	if (new_mtu < 256 ||
154
	    new_mtu > IEEE80211_MAX_DATA_LEN - 24 - 6 - meshhdrlen) {
155 156
		return -EINVAL;
	}
157

158 159 160 161
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
	printk(KERN_DEBUG "%s: setting MTU %d\n", dev->name, new_mtu);
#endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
	dev->mtu = new_mtu;
162 163 164
	return 0;
}

165 166 167 168 169 170 171 172 173 174 175 176 177 178 179
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return (type1 == IEEE80211_IF_TYPE_MNTR ||
		type2 == IEEE80211_IF_TYPE_MNTR ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_WDS) ||
		(type1 == IEEE80211_IF_TYPE_WDS &&
		 (type2 == IEEE80211_IF_TYPE_WDS ||
		  type2 == IEEE80211_IF_TYPE_AP)) ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_VLAN) ||
		(type1 == IEEE80211_IF_TYPE_VLAN &&
		 (type2 == IEEE80211_IF_TYPE_AP ||
		  type2 == IEEE80211_IF_TYPE_VLAN)));
}
180

181
static int ieee80211_open(struct net_device *dev)
182
{
183 184
	struct ieee80211_sub_if_data *sdata, *nsdata;
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
185
	struct sta_info *sta;
186
	struct ieee80211_if_init_conf conf;
187
	u32 changed = 0;
188
	int res;
189
	bool need_hw_reconfig = 0;
190

191
	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
192

193 194
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
195
		struct net_device *ndev = nsdata->dev;
196

197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242
		if (ndev != dev && ndev != local->mdev && netif_running(ndev)) {
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
			if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
			    nsdata->vif.type == IEEE80211_IF_TYPE_IBSS)
				return -EBUSY;

			/*
			 * Disallow multiple IBSS/STA mode interfaces.
			 *
			 * This is a technical restriction, it is possible although
			 * most likely not IEEE 802.11 compliant to have multiple
			 * STAs with just a single hardware (the TSF timer will not
			 * be adjusted properly.)
			 *
			 * However, because mac80211 uses the master device's BSS
			 * information for each STA/IBSS interface, doing this will
			 * currently corrupt that BSS information completely, unless,
			 * a not very useful case, both STAs are associated to the
			 * same BSS.
			 *
			 * To remove this restriction, the BSS information needs to
			 * be embedded in the STA/IBSS mode sdata instead of using
			 * the master device's BSS structure.
			 */
			if ((sdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     sdata->vif.type == IEEE80211_IF_TYPE_IBSS) &&
			    (nsdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     nsdata->vif.type == IEEE80211_IF_TYPE_IBSS))
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
			if (compare_ether_addr(dev->dev_addr, ndev->dev_addr))
				continue;

243 244 245
			/*
			 * check whether it may have the same address
			 */
246 247
			if (!identical_mac_addr_allowed(sdata->vif.type,
							nsdata->vif.type))
248 249 250 251 252
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
253
			if (sdata->vif.type == IEEE80211_IF_TYPE_VLAN &&
254
			    nsdata->vif.type == IEEE80211_IF_TYPE_AP)
255
				sdata->u.vlan.ap = nsdata;
256 257
		}
	}
258

259
	switch (sdata->vif.type) {
260
	case IEEE80211_IF_TYPE_WDS:
261
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
262 263 264 265 266 267
			return -ENOLINK;
		break;
	case IEEE80211_IF_TYPE_VLAN:
		if (!sdata->u.vlan.ap)
			return -ENOLINK;
		break;
Johannes Berg's avatar
Johannes Berg committed
268 269 270 271
	case IEEE80211_IF_TYPE_AP:
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_MNTR:
	case IEEE80211_IF_TYPE_IBSS:
272
	case IEEE80211_IF_TYPE_MESH_POINT:
Johannes Berg's avatar
Johannes Berg committed
273 274
		/* no special treatment */
		break;
275 276 277 278
	case IEEE80211_IF_TYPE_INVALID:
		/* cannot happen */
		WARN_ON(1);
		break;
279
	}
280

281 282
	if (local->open_count == 0) {
		res = 0;
283 284 285
		if (local->ops->start)
			res = local->ops->start(local_to_hw(local));
		if (res)
286
			return res;
287
		need_hw_reconfig = 1;
288
		ieee80211_led_radio(local, local->hw.conf.radio_enabled);
289
	}
290

291
	switch (sdata->vif.type) {
292 293 294 295
	case IEEE80211_IF_TYPE_VLAN:
		list_add(&sdata->u.vlan.list, &sdata->u.vlan.ap->u.ap.vlans);
		/* no need to tell driver */
		break;
296
	case IEEE80211_IF_TYPE_MNTR:
297 298 299 300 301
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

302
		/* must be before the call to ieee80211_configure_filter */
303
		local->monitors++;
304
		if (local->monitors == 1)
305
			local->hw.conf.flags |= IEEE80211_CONF_RADIOTAP;
306 307 308 309 310 311 312 313 314 315 316 317 318

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss++;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
319 320 321 322 323 324
		break;
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.flags &= ~IEEE80211_STA_PREV_BSSID_SET;
		/* fall through */
	default:
325
		conf.vif = &sdata->vif;
326
		conf.type = sdata->vif.type;
327 328 329
		conf.mac_addr = dev->dev_addr;
		res = local->ops->add_interface(local_to_hw(local), &conf);
		if (res)
330
			goto err_stop;
331

332
		ieee80211_if_config(dev);
333 334
		changed |= ieee80211_reset_erp_info(dev);
		ieee80211_bss_info_change_notify(sdata, changed);
335
		ieee80211_enable_keys(sdata);
336

337
		if (sdata->vif.type == IEEE80211_IF_TYPE_STA &&
338
		    !(sdata->flags & IEEE80211_SDATA_USERSPACE_MLME))
339 340 341
			netif_carrier_off(dev);
		else
			netif_carrier_on(dev);
342
	}
343

344 345 346 347 348 349 350 351 352
	if (sdata->vif.type == IEEE80211_IF_TYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

353
		/* no locking required since STA is not live yet */
354 355 356 357 358 359 360 361 362
		sta->flags |= WLAN_STA_AUTHORIZED;

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
	}

363 364 365
	if (local->open_count == 0) {
		res = dev_open(local->mdev);
		WARN_ON(res);
366 367
		if (res)
			goto err_del_interface;
368 369 370 371
		tasklet_enable(&local->tx_pending_tasklet);
		tasklet_enable(&local->tasklet);
	}

372 373 374 375 376 377 378 379 380 381 382
	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

383
	local->open_count++;
384 385
	if (need_hw_reconfig)
		ieee80211_hw_config(local);
386

387 388 389 390 391 392
	/*
	 * ieee80211_sta_work is disabled while network interface
	 * is down. Therefore, some configuration changes may not
	 * yet be effective. Trigger execution of ieee80211_sta_work
	 * to fix this.
	 */
Johannes Berg's avatar
Johannes Berg committed
393 394
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
395 396 397 398
		struct ieee80211_if_sta *ifsta = &sdata->u.sta;
		queue_work(local->hw.workqueue, &ifsta->work);
	}

399
	netif_start_queue(dev);
400

401
	return 0;
402 403 404 405 406 407
 err_del_interface:
	local->ops->remove_interface(local_to_hw(local), &conf);
 err_stop:
	if (!local->open_count && local->ops->stop)
		local->ops->stop(local_to_hw(local));
	return res;
408 409
}

410
static int ieee80211_stop(struct net_device *dev)
411
{
412 413
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = sdata->local;
414
	struct ieee80211_if_init_conf conf;
415
	struct sta_info *sta;
416

417 418 419 420
	/*
	 * Stop TX on this interface first.
	 */
	netif_stop_queue(dev);
421

422 423 424
	/*
	 * Now delete all active aggregation sessions.
	 */
425 426 427 428
	rcu_read_lock();

	list_for_each_entry_rcu(sta, &local->sta_list, list) {
		if (sta->sdata == sdata)
429
			ieee80211_sta_tear_down_BA_sessions(dev, sta->addr);
430 431
	}

432 433
	rcu_read_unlock();

434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
	 * We could relax this and only unlink the stations from the
	 * hash table and list but keep them on a per-sdata list that
	 * will be inserted back again when the interface is brought
	 * up again, but I don't currently see a use case for that,
	 * except with WDS which gets a STA entry created when it is
	 * brought up.
	 */
	sta_info_flush(local, sdata);
452

453 454 455 456 457 458 459 460 461 462 463 464
	/*
	 * Don't count this interface for promisc/allmulti while it
	 * is down. dev_mc_unsync() will invoke set_multicast_list
	 * on the master interface which will sync these down to the
	 * hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

465 466
	dev_mc_unsync(local->mdev, dev);

467
	/* APs need special treatment */
468
	if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
469
		struct ieee80211_sub_if_data *vlan, *tmp;
470
		struct beacon_data *old_beacon = sdata->u.ap.beacon;
471

472 473 474 475 476 477
		/* remove beacon */
		rcu_assign_pointer(sdata->u.ap.beacon, NULL);
		synchronize_rcu();
		kfree(old_beacon);

		/* down all dependent devices, that is VLANs */
478 479 480 481 482 483
		list_for_each_entry_safe(vlan, tmp, &sdata->u.ap.vlans,
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
	}

484
	local->open_count--;
485

486
	switch (sdata->vif.type) {
487 488 489 490 491
	case IEEE80211_IF_TYPE_VLAN:
		list_del(&sdata->u.vlan.list);
		sdata->u.vlan.ap = NULL;
		/* no need to tell driver */
		break;
492
	case IEEE80211_IF_TYPE_MNTR:
493 494 495 496 497
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

498
		local->monitors--;
499
		if (local->monitors == 0)
500
			local->hw.conf.flags &= ~IEEE80211_CONF_RADIOTAP;
501 502 503 504 505 506 507 508 509 510 511 512 513

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss--;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
514
		break;
515
	case IEEE80211_IF_TYPE_MESH_POINT:
516 517 518
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.state = IEEE80211_DISABLED;
519
		memset(sdata->u.sta.bssid, 0, ETH_ALEN);
520
		del_timer_sync(&sdata->u.sta.timer);
521
		/*
522 523 524 525
		 * When we get here, the interface is marked down.
		 * Call synchronize_rcu() to wait for the RX path
		 * should it be using the interface and enqueuing
		 * frames at this very time on another CPU.
526
		 */
527
		synchronize_rcu();
528
		skb_queue_purge(&sdata->u.sta.skb_queue);
529

Zhu Yi's avatar
Zhu Yi committed
530 531 532 533 534 535
		if (local->scan_dev == sdata->dev) {
			if (!local->ops->hw_scan) {
				local->sta_sw_scanning = 0;
				cancel_delayed_work(&local->scan_work);
			} else
				local->sta_hw_scanning = 0;
536
		}
Zhu Yi's avatar
Zhu Yi committed
537

538 539 540 541
		sdata->u.sta.flags &= ~IEEE80211_STA_PRIVACY_INVOKED;
		kfree(sdata->u.sta.extra_ie);
		sdata->u.sta.extra_ie = NULL;
		sdata->u.sta.extra_ie_len = 0;
542 543
		/* fall through */
	default:
544
		conf.vif = &sdata->vif;
545
		conf.type = sdata->vif.type;
546
		conf.mac_addr = dev->dev_addr;
547 548
		/* disable all keys for as long as this netdev is down */
		ieee80211_disable_keys(sdata);
549
		local->ops->remove_interface(local_to_hw(local), &conf);
550 551
	}

552 553 554
	if (local->open_count == 0) {
		if (netif_running(local->mdev))
			dev_close(local->mdev);
555

556 557
		if (local->ops->stop)
			local->ops->stop(local_to_hw(local));
558

559 560
		ieee80211_led_radio(local, 0);

561 562
		flush_workqueue(local->hw.workqueue);

563 564 565 566
		tasklet_disable(&local->tx_pending_tasklet);
		tasklet_disable(&local->tasklet);
	}

567 568 569
	return 0;
}

570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587
int ieee80211_start_tx_ba_session(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	struct ieee80211_sub_if_data *sdata;
	u16 start_seq_num = 0;
	u8 *state;
	int ret;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Open BA session requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

588 589
	rcu_read_lock();

590 591
	sta = sta_info_get(local, ra);
	if (!sta) {
592
#ifdef CONFIG_MAC80211_HT_DEBUG
593
		printk(KERN_DEBUG "Could not find the station\n");
594
#endif
595 596
		ret = -ENOENT;
		goto exit;
597 598
	}

599
	spin_lock_bh(&sta->lock);
600 601

	/* we have tried too many times, receiver does not want A-MPDU */
602
	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {
603
		ret = -EBUSY;
604
		goto err_unlock_sta;
605 606
	}

607
	state = &sta->ampdu_mlme.tid_state_tx[tid];
608 609 610 611 612 613 614
	/* check if the TID is not in aggregation flow already */
	if (*state != HT_AGG_STATE_IDLE) {
#ifdef CONFIG_MAC80211_HT_DEBUG
		printk(KERN_DEBUG "BA request denied - session is not "
				 "idle on tid %u\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
		ret = -EAGAIN;
615
		goto err_unlock_sta;
616 617
	}

618 619 620 621
	/* prepare A-MPDU MLME for Tx aggregation */
	sta->ampdu_mlme.tid_tx[tid] =
			kmalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC);
	if (!sta->ampdu_mlme.tid_tx[tid]) {
622
#ifdef CONFIG_MAC80211_HT_DEBUG
623 624 625
		if (net_ratelimit())
			printk(KERN_ERR "allocate tx mlme to tid %d failed\n",
					tid);
626
#endif
627
		ret = -ENOMEM;
628
		goto err_unlock_sta;
629 630 631 632 633 634 635 636
	}
	/* Tx timer */
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.function =
			sta_addba_resp_timer_expired;
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.data =
			(unsigned long)&sta->timer_to_tid[tid];
	init_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);

637 638 639 640 641
	/* ensure that TX flow won't interrupt us
	 * until the end of the call to requeue function */
	spin_lock_bh(&local->mdev->queue_lock);

	/* create a new queue for this aggregation */
642
	ret = ieee80211_ht_agg_queue_add(local, sta, tid);
643 644 645 646 647

	/* case no queue is available to aggregation
	 * don't switch to aggregation */
	if (ret) {
#ifdef CONFIG_MAC80211_HT_DEBUG
648
		printk(KERN_DEBUG "BA request denied - queue unavailable for"
649 650
					" tid %d\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
651
		goto err_unlock_queue;
652
	}
653
	sdata = sta->sdata;
654 655 656 657 658 659 660 661 662 663 664 665 666

	/* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
	 * call back right away, it must see that the flow has begun */
	*state |= HT_ADDBA_REQUESTED_MSK;

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_START,
						ra, tid, &start_seq_num);

	if (ret) {
		/* No need to requeue the packets in the agg queue, since we
		 * held the tx lock: no packet could be enqueued to the newly
		 * allocated queue */
667
		 ieee80211_ht_agg_queue_remove(local, sta, tid, 0);
668
#ifdef CONFIG_MAC80211_HT_DEBUG
669 670
		printk(KERN_DEBUG "BA request denied - HW unavailable for"
					" tid %d\n", tid);
671 672
#endif /* CONFIG_MAC80211_HT_DEBUG */
		*state = HT_AGG_STATE_IDLE;
673
		goto err_unlock_queue;
674 675 676
	}

	/* Will put all the packets in the new SW queue */
677
	ieee80211_requeue(local, ieee802_1d_to_ac[tid]);
678
	spin_unlock_bh(&local->mdev->queue_lock);
679
	spin_unlock_bh(&sta->lock);
680 681 682

	/* send an addBA request */
	sta->ampdu_mlme.dialog_token_allocator++;
683
	sta->ampdu_mlme.tid_tx[tid]->dialog_token =
684
			sta->ampdu_mlme.dialog_token_allocator;
685
	sta->ampdu_mlme.tid_tx[tid]->ssn = start_seq_num;
686

687

688
	ieee80211_send_addba_request(sta->sdata->dev, ra, tid,
689 690
			 sta->ampdu_mlme.tid_tx[tid]->dialog_token,
			 sta->ampdu_mlme.tid_tx[tid]->ssn,
691 692
			 0x40, 5000);
	/* activate the timer for the recipient's addBA response */
693
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.expires =
694
				jiffies + ADDBA_RESP_INTERVAL;
695
	add_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
696
#ifdef CONFIG_MAC80211_HT_DEBUG
697
	printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid);
698
#endif
699
	goto exit;
700

701
err_unlock_queue:
702 703 704 705
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
	spin_unlock_bh(&local->mdev->queue_lock);
	ret = -EBUSY;
706
err_unlock_sta:
707
	spin_unlock_bh(&sta->lock);
708
exit:
709
	rcu_read_unlock();
710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726
	return ret;
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_session);

int ieee80211_stop_tx_ba_session(struct ieee80211_hw *hw,
				 u8 *ra, u16 tid,
				 enum ieee80211_back_parties initiator)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int ret = 0;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

727
	rcu_read_lock();
728
	sta = sta_info_get(local, ra);
729 730
	if (!sta) {
		rcu_read_unlock();
731
		return -ENOENT;
732
	}
733 734

	/* check if the TID is in aggregation */
735
	state = &sta->ampdu_mlme.tid_state_tx[tid];
736
	spin_lock_bh(&sta->lock);
737 738 739 740 741 742

	if (*state != HT_AGG_STATE_OPERATIONAL) {
		ret = -ENOENT;
		goto stop_BA_exit;
	}

743 744 745 746 747
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Tx BA session stop requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765
	ieee80211_stop_queue(hw, sta->tid_to_tx_q[tid]);

	*state = HT_AGG_STATE_REQ_STOP_BA_MSK |
		(initiator << HT_AGG_STATE_INITIATOR_SHIFT);

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_STOP,
						ra, tid, NULL);

	/* case HW denied going back to legacy */
	if (ret) {
		WARN_ON(ret != -EBUSY);
		*state = HT_AGG_STATE_OPERATIONAL;
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
		goto stop_BA_exit;
	}

stop_BA_exit:
766
	spin_unlock_bh(&sta->lock);
767
	rcu_read_unlock();
768 769 770 771 772 773 774 775 776 777 778 779
	return ret;
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_session);

void ieee80211_start_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
780
#ifdef CONFIG_MAC80211_HT_DEBUG
781 782
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
783
#endif
784 785 786
		return;
	}

787
	rcu_read_lock();
788 789
	sta = sta_info_get(local, ra);
	if (!sta) {
790
		rcu_read_unlock();
791
#ifdef CONFIG_MAC80211_HT_DEBUG
792 793
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
794
#endif
795 796 797
		return;
	}

798
	state = &sta->ampdu_mlme.tid_state_tx[tid];
799
	spin_lock_bh(&sta->lock);
800 801

	if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
802
#ifdef CONFIG_MAC80211_HT_DEBUG
803 804
		printk(KERN_DEBUG "addBA was not requested yet, state is %d\n",
				*state);
805
#endif
806
		spin_unlock_bh(&sta->lock);
807
		rcu_read_unlock();
808 809 810 811 812 813 814 815
		return;
	}

	WARN_ON_ONCE(*state & HT_ADDBA_DRV_READY_MSK);

	*state |= HT_ADDBA_DRV_READY_MSK;

	if (*state == HT_AGG_STATE_OPERATIONAL) {
816
#ifdef CONFIG_MAC80211_HT_DEBUG
817
		printk(KERN_DEBUG "Aggregation is on for tid %d \n", tid);
818
#endif
819 820
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
	}
821
	spin_unlock_bh(&sta->lock);
822
	rcu_read_unlock();
823 824 825 826 827 828 829 830 831 832 833 834
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb);

void ieee80211_stop_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u8 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int agg_queue;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
835
#ifdef CONFIG_MAC80211_HT_DEBUG
836 837
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
838
#endif
839 840 841
		return;
	}

842 843
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Stopping Tx BA session for %s tid %d\n",
844
				print_mac(mac, ra), tid);
845
#endif /* CONFIG_MAC80211_HT_DEBUG */
846

847
	rcu_read_lock();
848 849
	sta = sta_info_get(local, ra);
	if (!sta) {
850
#ifdef CONFIG_MAC80211_HT_DEBUG
851 852
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
853
#endif
854
		rcu_read_unlock();
855 856
		return;
	}
857
	state = &sta->ampdu_mlme.tid_state_tx[tid];
858

859 860 861
	/* NOTE: no need to use sta->lock in this state check, as
	 * ieee80211_stop_tx_ba_session will let only
	 * one stop call to pass through per sta/tid */
862
	if ((*state & HT_AGG_STATE_REQ_STOP_BA_MSK) == 0) {
863
#ifdef CONFIG_MAC80211_HT_DEBUG
864
		printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n");
865
#endif
866
		rcu_read_unlock();
867 868 869 870
		return;
	}

	if (*state & HT_AGG_STATE_INITIATOR_MSK)
871
		ieee80211_send_delba(sta->sdata->dev, ra, tid,
872 873 874 875 876 877 878 879
			WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE);

	agg_queue = sta->tid_to_tx_q[tid];

	/* avoid ordering issues: we are the only one that can modify
	 * the content of the qdiscs */
	spin_lock_bh(&local->mdev->queue_lock);
	/* remove the queue for this aggregation */
880
	ieee80211_ht_agg_queue_remove(local, sta, tid, 1);
881 882 883 884 885 886 887
	spin_unlock_bh(&local->mdev->queue_lock);

	/* we just requeued the all the frames that were in the removed
	 * queue, and since we might miss a softirq we do netif_schedule.
	 * ieee80211_wake_queue is not used here as this queue is not
	 * necessarily stopped */
	netif_schedule(local->mdev);
888
	spin_lock_bh(&sta->lock);
889
	*state = HT_AGG_STATE_IDLE;
890 891 892
	sta->ampdu_mlme.addba_req_num[tid] = 0;
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
893
	spin_unlock_bh(&sta->lock);
894

895
	rcu_read_unlock();
896 897 898 899 900 901 902 903 904 905 906
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb);

void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				      const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
907
#ifdef CONFIG_MAC80211_HT_DEBUG
908 909 910
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping start BA session", skb->dev->name);
911
#endif
912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_ADDBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe);

void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				     const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
932
#ifdef CONFIG_MAC80211_HT_DEBUG
933 934 935
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping stop BA session", skb->dev->name);
936
#endif
937 938 939 940 941 942 943 944 945 946 947 948
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_DELBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe);

949 950 951 952
static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
953
	int allmulti, promisc, sdata_allmulti, sdata_promisc;
954

955 956
	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
957 958
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
959 960 961

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
962
			atomic_inc(&local->iff_allmultis);
963
		else
964
			atomic_dec(&local->iff_allmultis);
965
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
966
	}
967 968 969

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
970
			atomic_inc(&local->iff_promiscs);
971
		else
972
			atomic_dec(&local->iff_promiscs);
973
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
974
	}
975 976

	dev_mc_sync(local->mdev, dev);
977 978
}

979 980 981 982 983 984 985 986
static const struct header_ops ieee80211_header_ops = {
	.create		= eth_header,
	.parse		= header_parse_80211,
	.rebuild	= eth_rebuild_header,
	.cache		= eth_header_cache,
	.cache_update	= eth_header_cache_update,
};

987
/* Must not be called for mdev */
988
void ieee80211_if_setup(struct net_device *dev)
989
{