main.c 52.5 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <net/mac80211.h>
#include <net/ieee80211_radiotap.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/netdevice.h>
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/wireless.h>
#include <linux/rtnetlink.h>
#include <linux/bitmap.h>
24
#include <net/net_namespace.h>
25
26
27
#include <net/cfg80211.h>

#include "ieee80211_i.h"
Johannes Berg's avatar
Johannes Berg committed
28
#include "rate.h"
29
#include "mesh.h"
30
31
32
#include "wep.h"
#include "wme.h"
#include "aes_ccm.h"
Johannes Berg's avatar
Johannes Berg committed
33
#include "led.h"
34
#include "cfg.h"
35
36
#include "debugfs.h"
#include "debugfs_netdev.h"
37

38
39
40
41
42
43
44
45
46
47
/*
 * For seeing transmitted packets on monitor interfaces
 * we have a radiotap header too.
 */
struct ieee80211_tx_status_rtap_hdr {
	struct ieee80211_radiotap_header hdr;
	__le16 tx_flags;
	u8 data_retries;
} __attribute__ ((packed));

48
/* common interface routines */
49

50
static int header_parse_80211(const struct sk_buff *skb, unsigned char *haddr)
51
52
53
54
{
	memcpy(haddr, skb_mac_header(skb) + 10, ETH_ALEN); /* addr2 */
	return ETH_ALEN;
}
55

56
57
58
59
60
61
/* must be called under mdev tx lock */
static void ieee80211_configure_filter(struct ieee80211_local *local)
{
	unsigned int changed_flags;
	unsigned int new_flags = 0;

62
	if (atomic_read(&local->iff_promiscs))
63
64
		new_flags |= FIF_PROMISC_IN_BSS;

65
	if (atomic_read(&local->iff_allmultis))
66
67
68
		new_flags |= FIF_ALLMULTI;

	if (local->monitors)
69
70
71
72
73
74
75
76
77
78
79
80
81
		new_flags |= FIF_BCN_PRBRESP_PROMISC;

	if (local->fif_fcsfail)
		new_flags |= FIF_FCSFAIL;

	if (local->fif_plcpfail)
		new_flags |= FIF_PLCPFAIL;

	if (local->fif_control)
		new_flags |= FIF_CONTROL;

	if (local->fif_other_bss)
		new_flags |= FIF_OTHER_BSS;
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97

	changed_flags = local->filter_flags ^ new_flags;

	/* be a bit nasty */
	new_flags |= (1<<31);

	local->ops->configure_filter(local_to_hw(local),
				     changed_flags, &new_flags,
				     local->mdev->mc_count,
				     local->mdev->mc_list);

	WARN_ON(new_flags & (1<<31));

	local->filter_flags = new_flags & ~(1<<31);
}

98
/* master interface */
99

100
101
102
103
104
static int ieee80211_master_open(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
	int res = -EOPNOTSUPP;
105

106
107
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list) {
108
109
110
111
112
		if (sdata->dev != dev && netif_running(sdata->dev)) {
			res = 0;
			break;
		}
	}
113
114
115
116
117
118
119

	if (res)
		return res;

	netif_start_queue(local->mdev);

	return 0;
120
}
121

122
static int ieee80211_master_stop(struct net_device *dev)
123
{
124
125
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata;
126

127
128
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(sdata, &local->interfaces, list)
129
130
		if (sdata->dev != dev && netif_running(sdata->dev))
			dev_close(sdata->dev);
131

132
133
	return 0;
}
134

135
136
137
138
139
140
141
static void ieee80211_master_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);

	ieee80211_configure_filter(local);
}

142
/* regular interfaces */
143

144
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
145
{
146
147
148
149
150
	int meshhdrlen;
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	meshhdrlen = (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT) ? 5 : 0;

151
152
	/* FIX: what would be proper limits for MTU?
	 * This interface uses 802.3 frames. */
153
154
	if (new_mtu < 256 ||
		new_mtu > IEEE80211_MAX_DATA_LEN - 24 - 6 - meshhdrlen) {
155
156
157
158
		printk(KERN_WARNING "%s: invalid MTU %d\n",
		       dev->name, new_mtu);
		return -EINVAL;
	}
159

160
161
162
163
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
	printk(KERN_DEBUG "%s: setting MTU %d\n", dev->name, new_mtu);
#endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
	dev->mtu = new_mtu;
164
165
166
	return 0;
}

167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return (type1 == IEEE80211_IF_TYPE_MNTR ||
		type2 == IEEE80211_IF_TYPE_MNTR ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_WDS) ||
		(type1 == IEEE80211_IF_TYPE_WDS &&
		 (type2 == IEEE80211_IF_TYPE_WDS ||
		  type2 == IEEE80211_IF_TYPE_AP)) ||
		(type1 == IEEE80211_IF_TYPE_AP &&
		 type2 == IEEE80211_IF_TYPE_VLAN) ||
		(type1 == IEEE80211_IF_TYPE_VLAN &&
		 (type2 == IEEE80211_IF_TYPE_AP ||
		  type2 == IEEE80211_IF_TYPE_VLAN)));
}
182

183
static int ieee80211_open(struct net_device *dev)
184
{
185
186
187
188
	struct ieee80211_sub_if_data *sdata, *nsdata;
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_if_init_conf conf;
	int res;
189
	bool need_hw_reconfig = 0;
190
	struct sta_info *sta;
191

192
	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
193

194
195
	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
196
		struct net_device *ndev = nsdata->dev;
197

198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
		if (ndev != dev && ndev != local->mdev && netif_running(ndev)) {
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
			if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
			    nsdata->vif.type == IEEE80211_IF_TYPE_IBSS)
				return -EBUSY;

			/*
			 * Disallow multiple IBSS/STA mode interfaces.
			 *
			 * This is a technical restriction, it is possible although
			 * most likely not IEEE 802.11 compliant to have multiple
			 * STAs with just a single hardware (the TSF timer will not
			 * be adjusted properly.)
			 *
			 * However, because mac80211 uses the master device's BSS
			 * information for each STA/IBSS interface, doing this will
			 * currently corrupt that BSS information completely, unless,
			 * a not very useful case, both STAs are associated to the
			 * same BSS.
			 *
			 * To remove this restriction, the BSS information needs to
			 * be embedded in the STA/IBSS mode sdata instead of using
			 * the master device's BSS structure.
			 */
			if ((sdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     sdata->vif.type == IEEE80211_IF_TYPE_IBSS) &&
			    (nsdata->vif.type == IEEE80211_IF_TYPE_STA ||
			     nsdata->vif.type == IEEE80211_IF_TYPE_IBSS))
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
			if (compare_ether_addr(dev->dev_addr, ndev->dev_addr))
				continue;

244
245
246
			/*
			 * check whether it may have the same address
			 */
247
248
			if (!identical_mac_addr_allowed(sdata->vif.type,
							nsdata->vif.type))
249
250
251
252
253
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
254
			if (sdata->vif.type == IEEE80211_IF_TYPE_VLAN &&
255
			    nsdata->vif.type == IEEE80211_IF_TYPE_AP)
256
				sdata->u.vlan.ap = nsdata;
257
258
		}
	}
259

260
	switch (sdata->vif.type) {
261
	case IEEE80211_IF_TYPE_WDS:
262
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
263
264
265
266
267
268
			return -ENOLINK;
		break;
	case IEEE80211_IF_TYPE_VLAN:
		if (!sdata->u.vlan.ap)
			return -ENOLINK;
		break;
Johannes Berg's avatar
Johannes Berg committed
269
270
271
272
	case IEEE80211_IF_TYPE_AP:
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_MNTR:
	case IEEE80211_IF_TYPE_IBSS:
273
	case IEEE80211_IF_TYPE_MESH_POINT:
Johannes Berg's avatar
Johannes Berg committed
274
275
		/* no special treatment */
		break;
276
277
278
279
	case IEEE80211_IF_TYPE_INVALID:
		/* cannot happen */
		WARN_ON(1);
		break;
280
	}
281

282
283
	if (local->open_count == 0) {
		res = 0;
284
285
286
		if (local->ops->start)
			res = local->ops->start(local_to_hw(local));
		if (res)
287
			return res;
288
		need_hw_reconfig = 1;
289
		ieee80211_led_radio(local, local->hw.conf.radio_enabled);
290
	}
291

292
	switch (sdata->vif.type) {
293
294
295
296
	case IEEE80211_IF_TYPE_VLAN:
		list_add(&sdata->u.vlan.list, &sdata->u.vlan.ap->u.ap.vlans);
		/* no need to tell driver */
		break;
297
	case IEEE80211_IF_TYPE_MNTR:
298
299
300
301
302
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

303
		/* must be before the call to ieee80211_configure_filter */
304
		local->monitors++;
305
		if (local->monitors == 1)
306
			local->hw.conf.flags |= IEEE80211_CONF_RADIOTAP;
307
308
309
310
311
312
313
314
315
316
317
318
319

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control++;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss++;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
320
321
322
323
324
325
		break;
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.flags &= ~IEEE80211_STA_PREV_BSSID_SET;
		/* fall through */
	default:
326
		conf.vif = &sdata->vif;
327
		conf.type = sdata->vif.type;
328
329
330
		conf.mac_addr = dev->dev_addr;
		res = local->ops->add_interface(local_to_hw(local), &conf);
		if (res)
331
			goto err_stop;
332

333
		ieee80211_if_config(dev);
334
		ieee80211_reset_erp_info(dev);
335
		ieee80211_enable_keys(sdata);
336

337
		if (sdata->vif.type == IEEE80211_IF_TYPE_STA &&
338
		    !(sdata->flags & IEEE80211_SDATA_USERSPACE_MLME))
339
340
341
			netif_carrier_off(dev);
		else
			netif_carrier_on(dev);
342
	}
343

344
345
346
347
348
349
350
351
352
	if (sdata->vif.type == IEEE80211_IF_TYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

353
		/* no locking required since STA is not live yet */
354
355
356
357
358
359
360
361
362
		sta->flags |= WLAN_STA_AUTHORIZED;

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
	}

363
364
365
	if (local->open_count == 0) {
		res = dev_open(local->mdev);
		WARN_ON(res);
366
367
		if (res)
			goto err_del_interface;
368
369
370
371
		tasklet_enable(&local->tx_pending_tasklet);
		tasklet_enable(&local->tasklet);
	}

372
373
374
375
376
377
378
379
380
381
382
	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

383
	local->open_count++;
384
385
	if (need_hw_reconfig)
		ieee80211_hw_config(local);
386

387
388
389
390
391
392
	/*
	 * ieee80211_sta_work is disabled while network interface
	 * is down. Therefore, some configuration changes may not
	 * yet be effective. Trigger execution of ieee80211_sta_work
	 * to fix this.
	 */
Johannes Berg's avatar
Johannes Berg committed
393
394
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
395
396
397
398
		struct ieee80211_if_sta *ifsta = &sdata->u.sta;
		queue_work(local->hw.workqueue, &ifsta->work);
	}

399
	netif_start_queue(dev);
400

401
	return 0;
402
403
404
405
406
407
 err_del_interface:
	local->ops->remove_interface(local_to_hw(local), &conf);
 err_stop:
	if (!local->open_count && local->ops->stop)
		local->ops->stop(local_to_hw(local));
	return res;
408
409
}

410
static int ieee80211_stop(struct net_device *dev)
411
{
412
413
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = sdata->local;
414
	struct ieee80211_if_init_conf conf;
415
	struct sta_info *sta;
416

417
418
419
420
	/*
	 * Stop TX on this interface first.
	 */
	netif_stop_queue(dev);
421

422
423
424
	/*
	 * Now delete all active aggregation sessions.
	 */
425
426
427
428
	rcu_read_lock();

	list_for_each_entry_rcu(sta, &local->sta_list, list) {
		if (sta->sdata == sdata)
429
			ieee80211_sta_tear_down_BA_sessions(dev, sta->addr);
430
431
	}

432
433
	rcu_read_unlock();

434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
	 * We could relax this and only unlink the stations from the
	 * hash table and list but keep them on a per-sdata list that
	 * will be inserted back again when the interface is brought
	 * up again, but I don't currently see a use case for that,
	 * except with WDS which gets a STA entry created when it is
	 * brought up.
	 */
	sta_info_flush(local, sdata);
452

453
454
455
456
457
458
459
460
461
462
463
464
	/*
	 * Don't count this interface for promisc/allmulti while it
	 * is down. dev_mc_unsync() will invoke set_multicast_list
	 * on the master interface which will sync these down to the
	 * hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

465
466
	dev_mc_unsync(local->mdev, dev);

467
	/* APs need special treatment */
468
	if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
469
		struct ieee80211_sub_if_data *vlan, *tmp;
470
		struct beacon_data *old_beacon = sdata->u.ap.beacon;
471

472
473
474
475
476
477
		/* remove beacon */
		rcu_assign_pointer(sdata->u.ap.beacon, NULL);
		synchronize_rcu();
		kfree(old_beacon);

		/* down all dependent devices, that is VLANs */
478
479
480
481
482
483
		list_for_each_entry_safe(vlan, tmp, &sdata->u.ap.vlans,
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
	}

484
	local->open_count--;
485

486
	switch (sdata->vif.type) {
487
488
489
490
491
	case IEEE80211_IF_TYPE_VLAN:
		list_del(&sdata->u.vlan.list);
		sdata->u.vlan.ap = NULL;
		/* no need to tell driver */
		break;
492
	case IEEE80211_IF_TYPE_MNTR:
493
494
495
496
497
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

498
		local->monitors--;
499
		if (local->monitors == 0)
500
			local->hw.conf.flags &= ~IEEE80211_CONF_RADIOTAP;
501
502
503
504
505
506
507
508
509
510
511
512
513

		if (sdata->u.mntr_flags & MONITOR_FLAG_FCSFAIL)
			local->fif_fcsfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_PLCPFAIL)
			local->fif_plcpfail--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_CONTROL)
			local->fif_control--;
		if (sdata->u.mntr_flags & MONITOR_FLAG_OTHER_BSS)
			local->fif_other_bss--;

		netif_tx_lock_bh(local->mdev);
		ieee80211_configure_filter(local);
		netif_tx_unlock_bh(local->mdev);
514
		break;
515
	case IEEE80211_IF_TYPE_MESH_POINT:
516
517
518
	case IEEE80211_IF_TYPE_STA:
	case IEEE80211_IF_TYPE_IBSS:
		sdata->u.sta.state = IEEE80211_DISABLED;
519
		memset(sdata->u.sta.bssid, 0, ETH_ALEN);
520
		del_timer_sync(&sdata->u.sta.timer);
521
		/*
522
523
524
525
		 * When we get here, the interface is marked down.
		 * Call synchronize_rcu() to wait for the RX path
		 * should it be using the interface and enqueuing
		 * frames at this very time on another CPU.
526
		 */
527
		synchronize_rcu();
528
		skb_queue_purge(&sdata->u.sta.skb_queue);
529

Zhu Yi's avatar
Zhu Yi committed
530
531
532
533
534
535
		if (local->scan_dev == sdata->dev) {
			if (!local->ops->hw_scan) {
				local->sta_sw_scanning = 0;
				cancel_delayed_work(&local->scan_work);
			} else
				local->sta_hw_scanning = 0;
536
		}
Zhu Yi's avatar
Zhu Yi committed
537

538
		flush_workqueue(local->hw.workqueue);
539
540
541
542
543

		sdata->u.sta.flags &= ~IEEE80211_STA_PRIVACY_INVOKED;
		kfree(sdata->u.sta.extra_ie);
		sdata->u.sta.extra_ie = NULL;
		sdata->u.sta.extra_ie_len = 0;
544
545
		/* fall through */
	default:
546
		conf.vif = &sdata->vif;
547
		conf.type = sdata->vif.type;
548
		conf.mac_addr = dev->dev_addr;
549
550
		/* disable all keys for as long as this netdev is down */
		ieee80211_disable_keys(sdata);
551
		local->ops->remove_interface(local_to_hw(local), &conf);
552
553
	}

554
555
556
	if (local->open_count == 0) {
		if (netif_running(local->mdev))
			dev_close(local->mdev);
557

558
559
		if (local->ops->stop)
			local->ops->stop(local_to_hw(local));
560

561
562
		ieee80211_led_radio(local, 0);

563
564
565
566
		tasklet_disable(&local->tx_pending_tasklet);
		tasklet_disable(&local->tasklet);
	}

567
568
569
	return 0;
}

570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
int ieee80211_start_tx_ba_session(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	struct ieee80211_sub_if_data *sdata;
	u16 start_seq_num = 0;
	u8 *state;
	int ret;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Open BA session requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

588
589
	rcu_read_lock();

590
591
592
	sta = sta_info_get(local, ra);
	if (!sta) {
		printk(KERN_DEBUG "Could not find the station\n");
593
594
		ret = -ENOENT;
		goto exit;
595
596
	}

597
	spin_lock_bh(&sta->lock);
598
599

	/* we have tried too many times, receiver does not want A-MPDU */
600
	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {
601
		ret = -EBUSY;
602
		goto err_unlock_sta;
603
604
	}

605
	state = &sta->ampdu_mlme.tid_state_tx[tid];
606
607
608
609
610
611
612
	/* check if the TID is not in aggregation flow already */
	if (*state != HT_AGG_STATE_IDLE) {
#ifdef CONFIG_MAC80211_HT_DEBUG
		printk(KERN_DEBUG "BA request denied - session is not "
				 "idle on tid %u\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
		ret = -EAGAIN;
613
		goto err_unlock_sta;
614
615
	}

616
617
618
619
620
621
622
623
	/* prepare A-MPDU MLME for Tx aggregation */
	sta->ampdu_mlme.tid_tx[tid] =
			kmalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC);
	if (!sta->ampdu_mlme.tid_tx[tid]) {
		if (net_ratelimit())
			printk(KERN_ERR "allocate tx mlme to tid %d failed\n",
					tid);
		ret = -ENOMEM;
624
		goto err_unlock_sta;
625
626
627
628
629
630
631
632
	}
	/* Tx timer */
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.function =
			sta_addba_resp_timer_expired;
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.data =
			(unsigned long)&sta->timer_to_tid[tid];
	init_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);

633
634
635
636
637
	/* ensure that TX flow won't interrupt us
	 * until the end of the call to requeue function */
	spin_lock_bh(&local->mdev->queue_lock);

	/* create a new queue for this aggregation */
638
	ret = ieee80211_ht_agg_queue_add(local, sta, tid);
639
640
641
642
643

	/* case no queue is available to aggregation
	 * don't switch to aggregation */
	if (ret) {
#ifdef CONFIG_MAC80211_HT_DEBUG
644
		printk(KERN_DEBUG "BA request denied - queue unavailable for"
645
646
					" tid %d\n", tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */
647
		goto err_unlock_queue;
648
	}
649
	sdata = sta->sdata;
650
651
652
653
654
655
656
657
658
659
660
661
662

	/* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
	 * call back right away, it must see that the flow has begun */
	*state |= HT_ADDBA_REQUESTED_MSK;

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_START,
						ra, tid, &start_seq_num);

	if (ret) {
		/* No need to requeue the packets in the agg queue, since we
		 * held the tx lock: no packet could be enqueued to the newly
		 * allocated queue */
663
		 ieee80211_ht_agg_queue_remove(local, sta, tid, 0);
664
#ifdef CONFIG_MAC80211_HT_DEBUG
665
666
		printk(KERN_DEBUG "BA request denied - HW unavailable for"
					" tid %d\n", tid);
667
668
#endif /* CONFIG_MAC80211_HT_DEBUG */
		*state = HT_AGG_STATE_IDLE;
669
		goto err_unlock_queue;
670
671
672
	}

	/* Will put all the packets in the new SW queue */
673
	ieee80211_requeue(local, ieee802_1d_to_ac[tid]);
674
	spin_unlock_bh(&local->mdev->queue_lock);
675
	spin_unlock_bh(&sta->lock);
676
677
678

	/* send an addBA request */
	sta->ampdu_mlme.dialog_token_allocator++;
679
	sta->ampdu_mlme.tid_tx[tid]->dialog_token =
680
			sta->ampdu_mlme.dialog_token_allocator;
681
	sta->ampdu_mlme.tid_tx[tid]->ssn = start_seq_num;
682

683

684
	ieee80211_send_addba_request(sta->sdata->dev, ra, tid,
685
686
			 sta->ampdu_mlme.tid_tx[tid]->dialog_token,
			 sta->ampdu_mlme.tid_tx[tid]->ssn,
687
688
			 0x40, 5000);
	/* activate the timer for the recipient's addBA response */
689
	sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.expires =
690
				jiffies + ADDBA_RESP_INTERVAL;
691
	add_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
692
	printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid);
693
	goto exit;
694

695
err_unlock_queue:
696
697
698
699
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
	spin_unlock_bh(&local->mdev->queue_lock);
	ret = -EBUSY;
700
err_unlock_sta:
701
	spin_unlock_bh(&sta->lock);
702
exit:
703
	rcu_read_unlock();
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
	return ret;
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_session);

int ieee80211_stop_tx_ba_session(struct ieee80211_hw *hw,
				 u8 *ra, u16 tid,
				 enum ieee80211_back_parties initiator)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int ret = 0;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM)
		return -EINVAL;

721
	rcu_read_lock();
722
	sta = sta_info_get(local, ra);
723
724
	if (!sta) {
		rcu_read_unlock();
725
		return -ENOENT;
726
	}
727
728

	/* check if the TID is in aggregation */
729
	state = &sta->ampdu_mlme.tid_state_tx[tid];
730
	spin_lock_bh(&sta->lock);
731
732
733
734
735
736

	if (*state != HT_AGG_STATE_OPERATIONAL) {
		ret = -ENOENT;
		goto stop_BA_exit;
	}

737
738
739
740
741
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Tx BA session stop requested for %s tid %u\n",
				print_mac(mac, ra), tid);
#endif /* CONFIG_MAC80211_HT_DEBUG */

742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
	ieee80211_stop_queue(hw, sta->tid_to_tx_q[tid]);

	*state = HT_AGG_STATE_REQ_STOP_BA_MSK |
		(initiator << HT_AGG_STATE_INITIATOR_SHIFT);

	if (local->ops->ampdu_action)
		ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_STOP,
						ra, tid, NULL);

	/* case HW denied going back to legacy */
	if (ret) {
		WARN_ON(ret != -EBUSY);
		*state = HT_AGG_STATE_OPERATIONAL;
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
		goto stop_BA_exit;
	}

stop_BA_exit:
760
	spin_unlock_bh(&sta->lock);
761
	rcu_read_unlock();
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
	return ret;
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_session);

void ieee80211_start_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
		return;
	}

779
	rcu_read_lock();
780
781
	sta = sta_info_get(local, ra);
	if (!sta) {
782
		rcu_read_unlock();
783
784
785
786
787
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
		return;
	}

788
	state = &sta->ampdu_mlme.tid_state_tx[tid];
789
	spin_lock_bh(&sta->lock);
790
791
792
793

	if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
		printk(KERN_DEBUG "addBA was not requested yet, state is %d\n",
				*state);
794
		spin_unlock_bh(&sta->lock);
795
		rcu_read_unlock();
796
797
798
799
800
801
802
803
804
805
806
		return;
	}

	WARN_ON_ONCE(*state & HT_ADDBA_DRV_READY_MSK);

	*state |= HT_ADDBA_DRV_READY_MSK;

	if (*state == HT_AGG_STATE_OPERATIONAL) {
		printk(KERN_DEBUG "Aggregation is on for tid %d \n", tid);
		ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
	}
807
	spin_unlock_bh(&sta->lock);
808
	rcu_read_unlock();
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb);

void ieee80211_stop_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u8 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct sta_info *sta;
	u8 *state;
	int agg_queue;
	DECLARE_MAC_BUF(mac);

	if (tid >= STA_TID_NUM) {
		printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
				tid, STA_TID_NUM);
		return;
	}

826
827
#ifdef CONFIG_MAC80211_HT_DEBUG
	printk(KERN_DEBUG "Stopping Tx BA session for %s tid %d\n",
828
				print_mac(mac, ra), tid);
829
#endif /* CONFIG_MAC80211_HT_DEBUG */
830

831
	rcu_read_lock();
832
833
834
835
	sta = sta_info_get(local, ra);
	if (!sta) {
		printk(KERN_DEBUG "Could not find station: %s\n",
				print_mac(mac, ra));
836
		rcu_read_unlock();
837
838
		return;
	}
839
	state = &sta->ampdu_mlme.tid_state_tx[tid];
840

841
842
843
	/* NOTE: no need to use sta->lock in this state check, as
	 * ieee80211_stop_tx_ba_session will let only
	 * one stop call to pass through per sta/tid */
844
845
	if ((*state & HT_AGG_STATE_REQ_STOP_BA_MSK) == 0) {
		printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n");
846
		rcu_read_unlock();
847
848
849
850
		return;
	}

	if (*state & HT_AGG_STATE_INITIATOR_MSK)
851
		ieee80211_send_delba(sta->sdata->dev, ra, tid,
852
853
854
855
856
857
858
859
			WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE);

	agg_queue = sta->tid_to_tx_q[tid];

	/* avoid ordering issues: we are the only one that can modify
	 * the content of the qdiscs */
	spin_lock_bh(&local->mdev->queue_lock);
	/* remove the queue for this aggregation */
860
	ieee80211_ht_agg_queue_remove(local, sta, tid, 1);
861
862
863
864
865
866
867
	spin_unlock_bh(&local->mdev->queue_lock);

	/* we just requeued the all the frames that were in the removed
	 * queue, and since we might miss a softirq we do netif_schedule.
	 * ieee80211_wake_queue is not used here as this queue is not
	 * necessarily stopped */
	netif_schedule(local->mdev);
868
	spin_lock_bh(&sta->lock);
869
	*state = HT_AGG_STATE_IDLE;
870
871
872
	sta->ampdu_mlme.addba_req_num[tid] = 0;
	kfree(sta->ampdu_mlme.tid_tx[tid]);
	sta->ampdu_mlme.tid_tx[tid] = NULL;
873
	spin_unlock_bh(&sta->lock);
874

875
	rcu_read_unlock();
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb);

void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				      const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping start BA session", skb->dev->name);
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_ADDBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe);

void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw *hw,
				     const u8 *ra, u16 tid)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_ra_tid *ra_tid;
	struct sk_buff *skb = dev_alloc_skb(0);

	if (unlikely(!skb)) {
		if (net_ratelimit())
			printk(KERN_WARNING "%s: Not enough memory, "
			       "dropping stop BA session", skb->dev->name);
		return;
	}
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
	memcpy(&ra_tid->ra, ra, ETH_ALEN);
	ra_tid->tid = tid;

	skb->pkt_type = IEEE80211_DELBA_MSG;
	skb_queue_tail(&local->skb_queue, skb);
	tasklet_schedule(&local->tasklet);
}
EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe);

925
926
927
928
static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
929
	int allmulti, promisc, sdata_allmulti, sdata_promisc;
930

931
932
	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
933
934
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
935
936
937

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
938
			atomic_inc(&local->iff_allmultis);
939
		else
940
			atomic_dec(&local->iff_allmultis);
941
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
942
	}
943
944
945

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
946
			atomic_inc(&local->iff_promiscs);
947
		else
948
			atomic_dec(&local->iff_promiscs);
949
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
950
	}
951
952

	dev_mc_sync(local->mdev, dev);
953
954
}

955
956
957
958
959
960
961
962
static const struct header_ops ieee80211_header_ops = {
	.create		= eth_header,
	.parse		= header_parse_80211,
	.rebuild	= eth_rebuild_header,
	.cache		= eth_header_cache,
	.cache_update	= eth_header_cache_update,
};

963
/* Must not be called for mdev */
964
void ieee80211_if_setup(struct net_device *dev)
965
{
966
967
968
969
970
971
972
973
974
	ether_setup(dev);
	dev->hard_start_xmit = ieee80211_subif_start_xmit;
	dev->wireless_handlers = &ieee80211_iw_handler_def;
	dev->set_multicast_list = ieee80211_set_multicast_list;
	dev->change_mtu = ieee80211_change_mtu;
	dev->open = ieee80211_open;
	dev->stop = ieee80211_stop;
	dev->destructor = ieee80211_if_free;
}
975

976
977
978
/* everything else */

static int __ieee80211_if_config(struct net_device *dev,
979
				 struct sk_buff *beacon)
980
981
982
983
984
985
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	struct ieee80211_if_conf conf;

	if (!local->ops->config_interface || !netif_running(dev))
986
987
		return 0;

988
	memset(&conf, 0, sizeof(conf));
989
990
991
	conf.type = sdata->vif.type;
	if (sdata->vif.type == IEEE80211_IF_TYPE_STA ||
	    sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
992
		conf.bssid = sdata->u.sta.bssid;
993
994
		conf.ssid = sdata->u.sta.ssid;
		conf.ssid_len = sdata->u.sta.ssid_len;
Johannes Berg's avatar
Johannes Berg committed
995
	} else if (ieee80211_vif_is_mesh(&sdata->vif)) {
996
997
		conf.beacon = beacon;
		ieee80211_start_mesh(dev);
998
	} else if (sdata->vif.type == IEEE80211_IF_TYPE_AP) {
999
1000
1001
		conf.ssid = sdata->u.ap.ssid;
		conf.ssid_len = sdata->u.ap.ssid_len;
		conf.beacon = beacon;
1002
	}
1003
	return local->ops->config_interface(local_to_hw(local),
1004
					    &sdata->vif, &conf);
1005
1006
}

1007
1008
int ieee80211_if_config(struct net_device *dev)
{
1009
1010
1011
1012
1013
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
	if (sdata->vif.type == IEEE80211_IF_TYPE_MESH_POINT &&
	    (local->hw.flags & IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE))
		return ieee80211_if_config_beacon(dev);
1014
	return __ieee80211_if_config(dev, NULL);
1015
}
1016

1017
int ieee80211_if_config_beacon(struct net_device *dev)
1018
1019
{
	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1020
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1021
	struct sk_buff *skb;
1022

1023
	if (!(local->hw.flags & IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE))
1024
		return 0;
1025
	skb = ieee80211_beacon_get(local_to_hw(local), &sdata->vif);
1026
1027
	if (!skb)
		return -ENOMEM;
1028
	return __ieee80211_if_config(dev, skb);
1029
}
1030

1031
1032
1033
1034
int ieee80211_hw_config(struct ieee80211_local *local)
{
	struct ieee80211_channel *chan;
	int ret = 0;
1035

1036
	if (local->sta_sw_scanning)
1037
		chan = local->scan_channel;
1038
	else
1039
		chan = local->oper_channel;
1040

1041
1042
1043
1044
1045
1046
1047
1048
1049
	local->hw.conf.channel = chan;

	if (!local->hw.conf.power_level)
		local->hw.conf.power_level = chan->max_power;
	else
		local->hw.conf.power_level = min(chan->max_power,
					       local->hw.conf.power_level);

	local->hw.conf.max_antenna_gain = chan->max_antenna_gain;
1050

1051
#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1052
1053
1054
	printk(KERN_DEBUG "%s: HW CONFIG: freq=%d\n",
	       wiphy_name(local->hw.wiphy), chan->center_freq);
#endif
1055

1056
	if (local->open_count)
1057
		ret = local->ops->config(local_to_hw(local), &local->hw.conf);
1058

1059
1060
	return ret;
}
1061

1062
/**
Tomas Winkler's avatar
Tomas Winkler committed
1063
1064
1065
 * ieee80211_handle_ht should be used only after legacy configuration
 * has been determined namely band, as ht configuration depends upon
 * the hardware's HT abilities for a _specific_ band.
1066
 */
Tomas Winkler's avatar
Tomas Winkler committed
1067
u32 ieee80211_handle_ht(struct ieee80211_local *local, int enable_ht,
1068
1069
1070
1071
			   struct ieee80211_ht_info *req_ht_cap,
			   struct ieee80211_ht_bss_info *req_bss_cap)
{
	struct ieee80211_conf *conf = &local->hw.conf;
1072
	struct ieee80211_supported_band *sband;
Tomas Winkler's avatar
Tomas Winkler committed
1073
1074
1075
	struct ieee80211_ht_info ht_conf;
	struct ieee80211_ht_bss_info ht_bss_conf;
	u32 changed = 0;
1076
1077
1078
	int i;
	u8 max_tx_streams = IEEE80211_HT_CAP_MAX_STREAMS;
	u8 tx_mcs_set_cap;
1079

1080
1081
	sband = local->hw.wiphy->bands[conf->channel->band];

1082
1083
1084
	memset(&ht_conf, 0, sizeof(struct ieee80211_ht_info));
	memset(&ht_bss_conf, 0, sizeof(struct ieee80211_ht_bss_info));

1085
	/* HT is not supported */
1086
	if (!sband->ht_info.ht_supported) {
1087
		conf->flags &= ~IEEE80211_CONF_SUPPORT_HT_MODE;
1088
		goto out;
1089
1090
	}

1091
1092
1093
	/* disable HT */
	if (!enable_ht) {
		if (conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE)
Tomas Winkler's avatar
Tomas Winkler committed
1094
			changed |= BSS_CHANGED_HT;
1095
1096
1097
1098
		conf->flags &= ~IEEE80211_CONF_SUPPORT_HT_MODE;
		conf->ht_conf.ht_supported = 0;
		goto out;
	}
Tomas Winkler's avatar
Tomas Winkler committed
1099
1100


1101
1102
	if (!(conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE))
		changed |= BSS_CHANGED_HT;
Tomas Winkler's avatar
Tomas Winkler committed
1103

1104
1105
	conf->flags |= IEEE80211_CONF_SUPPORT_HT_MODE;
	ht_conf.ht_supported = 1;
Tomas Winkler's avatar
Tomas Winkler committed
1106

1107
1108
1109
1110
1111
1112
	ht_conf.cap = req_ht_cap->cap & sband->ht_info.cap;
	ht_conf.cap &= ~(IEEE80211_HT_CAP_MIMO_PS);
	ht_conf.cap |= sband->ht_info.cap & IEEE80211_HT_CAP_MIMO_PS;
	ht_bss_conf.primary_channel = req_bss_cap->primary_channel;
	ht_bss_conf.bss_cap = req_bss_cap->bss_cap;
	ht_bss_conf.bss_op_mode = req_bss_cap->bss_op_mode;
Tomas Winkler's avatar
Tomas Winkler committed
1113

1114
1115
	ht_conf.ampdu_factor = req_ht_cap->ampdu_factor;
	ht_conf.ampdu_density = req_ht_cap->ampdu_density;
Tomas Winkler's avatar
Tomas Winkler committed
1116

1117
1118
1119
1120
1121
1122
1123
1124
1125
	/* Bits 96-100 */
	tx_mcs_set_cap = sband->ht_info.supp_mcs_set[12];

	/* configure suppoerted Tx MCS according to requested MCS
	 * (based in most cases on Rx capabilities of peer) and self
	 * Tx MCS capabilities (as defined by low level driver HW
	 * Tx capabilities) */
	if (!(tx_mcs_set_cap & IEEE80211_HT_CAP_MCS_TX_DEFINED))
		goto check_changed;
1126