Commit | Line | Data |
---|---|---|
780e87c2 JB |
1 | /****************************************************************************** |
2 | * | |
3 | * This file is provided under a dual BSD/GPLv2 license. When using or | |
4 | * redistributing this file, you may do so under either license. | |
5 | * | |
6 | * GPL LICENSE SUMMARY | |
7 | * | |
8 | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | |
9 | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | |
e29cc6b9 | 10 | * Copyright(c) 2015 - 2016 Intel Deutschland GmbH |
780e87c2 JB |
11 | * |
12 | * This program is free software; you can redistribute it and/or modify | |
13 | * it under the terms of version 2 of the GNU General Public License as | |
14 | * published by the Free Software Foundation. | |
15 | * | |
16 | * This program is distributed in the hope that it will be useful, but | |
17 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
18 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
19 | * General Public License for more details. | |
20 | * | |
21 | * The full GNU General Public License is included in this distribution | |
22 | * in the file called COPYING. | |
23 | * | |
24 | * Contact Information: | |
25 | * Intel Linux Wireless <ilw@linux.intel.com> | |
26 | * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 | |
27 | * | |
28 | * BSD LICENSE | |
29 | * | |
30 | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | |
31 | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | |
e29cc6b9 | 32 | * Copyright(c) 2015 - 2016 Intel Deutschland GmbH |
780e87c2 JB |
33 | * All rights reserved. |
34 | * | |
35 | * Redistribution and use in source and binary forms, with or without | |
36 | * modification, are permitted provided that the following conditions | |
37 | * are met: | |
38 | * | |
39 | * * Redistributions of source code must retain the above copyright | |
40 | * notice, this list of conditions and the following disclaimer. | |
41 | * * Redistributions in binary form must reproduce the above copyright | |
42 | * notice, this list of conditions and the following disclaimer in | |
43 | * the documentation and/or other materials provided with the | |
44 | * distribution. | |
45 | * * Neither the name Intel Corporation nor the names of its | |
46 | * contributors may be used to endorse or promote products derived | |
47 | * from this software without specific prior written permission. | |
48 | * | |
49 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
50 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | |
51 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | |
52 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | |
53 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
54 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
55 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
56 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
57 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
58 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
59 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
60 | *****************************************************************************/ | |
61 | #include <linux/etherdevice.h> | |
62 | #include <linux/skbuff.h> | |
63 | #include "iwl-trans.h" | |
64 | #include "mvm.h" | |
65 | #include "fw-api.h" | |
66 | #include "fw-dbg.h" | |
67 | ||
68 | void iwl_mvm_rx_phy_cmd_mq(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb) | |
69 | { | |
70 | mvm->ampdu_ref++; | |
71 | ||
72 | #ifdef CONFIG_IWLWIFI_DEBUGFS | |
73 | if (mvm->last_phy_info.phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_AGG)) { | |
74 | spin_lock(&mvm->drv_stats_lock); | |
75 | mvm->drv_rx_stats.ampdu_count++; | |
76 | spin_unlock(&mvm->drv_stats_lock); | |
77 | } | |
78 | #endif | |
79 | } | |
80 | ||
f5e28eac JB |
81 | static inline int iwl_mvm_check_pn(struct iwl_mvm *mvm, struct sk_buff *skb, |
82 | int queue, struct ieee80211_sta *sta) | |
83 | { | |
84 | struct iwl_mvm_sta *mvmsta; | |
85 | struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; | |
86 | struct ieee80211_rx_status *stats = IEEE80211_SKB_RXCB(skb); | |
87 | struct iwl_mvm_key_pn *ptk_pn; | |
88 | u8 tid, keyidx; | |
89 | u8 pn[IEEE80211_CCMP_PN_LEN]; | |
90 | u8 *extiv; | |
91 | ||
92 | /* do PN checking */ | |
93 | ||
94 | /* multicast and non-data only arrives on default queue */ | |
95 | if (!ieee80211_is_data(hdr->frame_control) || | |
96 | is_multicast_ether_addr(hdr->addr1)) | |
97 | return 0; | |
98 | ||
99 | /* do not check PN for open AP */ | |
100 | if (!(stats->flag & RX_FLAG_DECRYPTED)) | |
101 | return 0; | |
102 | ||
103 | /* | |
104 | * avoid checking for default queue - we don't want to replicate | |
105 | * all the logic that's necessary for checking the PN on fragmented | |
106 | * frames, leave that to mac80211 | |
107 | */ | |
108 | if (queue == 0) | |
109 | return 0; | |
110 | ||
111 | /* if we are here - this for sure is either CCMP or GCMP */ | |
112 | if (IS_ERR_OR_NULL(sta)) { | |
113 | IWL_ERR(mvm, | |
114 | "expected hw-decrypted unicast frame for station\n"); | |
115 | return -1; | |
116 | } | |
117 | ||
118 | mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
119 | ||
120 | extiv = (u8 *)hdr + ieee80211_hdrlen(hdr->frame_control); | |
121 | keyidx = extiv[3] >> 6; | |
122 | ||
123 | ptk_pn = rcu_dereference(mvmsta->ptk_pn[keyidx]); | |
124 | if (!ptk_pn) | |
125 | return -1; | |
126 | ||
127 | if (ieee80211_is_data_qos(hdr->frame_control)) | |
128 | tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK; | |
129 | else | |
130 | tid = 0; | |
131 | ||
132 | /* we don't use HCCA/802.11 QoS TSPECs, so drop such frames */ | |
133 | if (tid >= IWL_MAX_TID_COUNT) | |
134 | return -1; | |
135 | ||
136 | /* load pn */ | |
137 | pn[0] = extiv[7]; | |
138 | pn[1] = extiv[6]; | |
139 | pn[2] = extiv[5]; | |
140 | pn[3] = extiv[4]; | |
141 | pn[4] = extiv[1]; | |
142 | pn[5] = extiv[0]; | |
143 | ||
144 | if (memcmp(pn, ptk_pn->q[queue].pn[tid], | |
145 | IEEE80211_CCMP_PN_LEN) <= 0) | |
146 | return -1; | |
147 | ||
148 | memcpy(ptk_pn->q[queue].pn[tid], pn, IEEE80211_CCMP_PN_LEN); | |
149 | stats->flag |= RX_FLAG_PN_VALIDATED; | |
150 | ||
151 | return 0; | |
152 | } | |
153 | ||
154 | /* iwl_mvm_create_skb Adds the rxb to a new skb */ | |
155 | static void iwl_mvm_create_skb(struct sk_buff *skb, struct ieee80211_hdr *hdr, | |
156 | u16 len, u8 crypt_len, | |
157 | struct iwl_rx_cmd_buffer *rxb) | |
780e87c2 | 158 | { |
e29cc6b9 SS |
159 | struct iwl_rx_packet *pkt = rxb_addr(rxb); |
160 | struct iwl_rx_mpdu_desc *desc = (void *)pkt->data; | |
161 | unsigned int headlen, fraglen, pad_len = 0; | |
162 | unsigned int hdrlen = ieee80211_hdrlen(hdr->frame_control); | |
163 | ||
164 | if (desc->mac_flags2 & IWL_RX_MPDU_MFLG2_PAD) | |
165 | pad_len = 2; | |
166 | len -= pad_len; | |
780e87c2 JB |
167 | |
168 | /* If frame is small enough to fit in skb->head, pull it completely. | |
169 | * If not, only pull ieee80211_hdr (including crypto if present, and | |
170 | * an additional 8 bytes for SNAP/ethertype, see below) so that | |
171 | * splice() or TCP coalesce are more efficient. | |
172 | * | |
173 | * Since, in addition, ieee80211_data_to_8023() always pull in at | |
174 | * least 8 bytes (possibly more for mesh) we can do the same here | |
175 | * to save the cost of doing it later. That still doesn't pull in | |
176 | * the actual IP header since the typical case has a SNAP header. | |
177 | * If the latter changes (there are efforts in the standards group | |
178 | * to do so) we should revisit this and ieee80211_data_to_8023(). | |
179 | */ | |
e29cc6b9 SS |
180 | headlen = (len <= skb_tailroom(skb)) ? len : |
181 | hdrlen + crypt_len + 8; | |
780e87c2 | 182 | |
e29cc6b9 SS |
183 | /* The firmware may align the packet to DWORD. |
184 | * The padding is inserted after the IV. | |
185 | * After copying the header + IV skip the padding if | |
186 | * present before copying packet data. | |
187 | */ | |
188 | hdrlen += crypt_len; | |
780e87c2 | 189 | memcpy(skb_put(skb, hdrlen), hdr, hdrlen); |
e29cc6b9 SS |
190 | memcpy(skb_put(skb, headlen - hdrlen), (u8 *)hdr + hdrlen + pad_len, |
191 | headlen - hdrlen); | |
192 | ||
193 | fraglen = len - headlen; | |
780e87c2 JB |
194 | |
195 | if (fraglen) { | |
e29cc6b9 | 196 | int offset = (void *)hdr + headlen + pad_len - |
780e87c2 JB |
197 | rxb_addr(rxb) + rxb_offset(rxb); |
198 | ||
199 | skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset, | |
200 | fraglen, rxb->truesize); | |
201 | } | |
f5e28eac | 202 | } |
780e87c2 | 203 | |
f5e28eac JB |
204 | /* iwl_mvm_pass_packet_to_mac80211 - passes the packet for mac80211 */ |
205 | static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm, | |
206 | struct napi_struct *napi, | |
207 | struct sk_buff *skb, int queue, | |
208 | struct ieee80211_sta *sta) | |
209 | { | |
210 | if (iwl_mvm_check_pn(mvm, skb, queue, sta)) | |
211 | kfree_skb(skb); | |
212 | else | |
43ec72b7 | 213 | ieee80211_rx_napi(mvm->hw, sta, skb, napi); |
780e87c2 JB |
214 | } |
215 | ||
216 | static void iwl_mvm_get_signal_strength(struct iwl_mvm *mvm, | |
217 | struct iwl_rx_mpdu_desc *desc, | |
218 | struct ieee80211_rx_status *rx_status) | |
219 | { | |
d56a7801 | 220 | int energy_a, energy_b, max_energy; |
780e87c2 JB |
221 | |
222 | energy_a = desc->energy_a; | |
223 | energy_a = energy_a ? -energy_a : S8_MIN; | |
224 | energy_b = desc->energy_b; | |
225 | energy_b = energy_b ? -energy_b : S8_MIN; | |
780e87c2 | 226 | max_energy = max(energy_a, energy_b); |
780e87c2 | 227 | |
d56a7801 SS |
228 | IWL_DEBUG_STATS(mvm, "energy In A %d B %d, and max %d\n", |
229 | energy_a, energy_b, max_energy); | |
780e87c2 JB |
230 | |
231 | rx_status->signal = max_energy; | |
232 | rx_status->chains = 0; /* TODO: phy info */ | |
233 | rx_status->chain_signal[0] = energy_a; | |
234 | rx_status->chain_signal[1] = energy_b; | |
d56a7801 | 235 | rx_status->chain_signal[2] = S8_MIN; |
780e87c2 JB |
236 | } |
237 | ||
f5e28eac | 238 | static int iwl_mvm_rx_crypto(struct iwl_mvm *mvm, struct ieee80211_hdr *hdr, |
780e87c2 JB |
239 | struct ieee80211_rx_status *stats, |
240 | struct iwl_rx_mpdu_desc *desc, int queue, | |
241 | u8 *crypt_len) | |
242 | { | |
243 | u16 status = le16_to_cpu(desc->status); | |
244 | ||
245 | if (!ieee80211_has_protected(hdr->frame_control) || | |
246 | (status & IWL_RX_MPDU_STATUS_SEC_MASK) == | |
247 | IWL_RX_MPDU_STATUS_SEC_NONE) | |
248 | return 0; | |
249 | ||
250 | /* TODO: handle packets encrypted with unknown alg */ | |
251 | ||
252 | switch (status & IWL_RX_MPDU_STATUS_SEC_MASK) { | |
253 | case IWL_RX_MPDU_STATUS_SEC_CCM: | |
254 | case IWL_RX_MPDU_STATUS_SEC_GCM: | |
f5e28eac | 255 | BUILD_BUG_ON(IEEE80211_CCMP_PN_LEN != IEEE80211_GCMP_PN_LEN); |
780e87c2 JB |
256 | /* alg is CCM: check MIC only */ |
257 | if (!(status & IWL_RX_MPDU_STATUS_MIC_OK)) | |
258 | return -1; | |
259 | ||
260 | stats->flag |= RX_FLAG_DECRYPTED; | |
261 | *crypt_len = IEEE80211_CCMP_HDR_LEN; | |
262 | return 0; | |
263 | case IWL_RX_MPDU_STATUS_SEC_TKIP: | |
264 | /* Don't drop the frame and decrypt it in SW */ | |
265 | if (!(status & IWL_RX_MPDU_RES_STATUS_TTAK_OK)) | |
266 | return 0; | |
267 | ||
268 | *crypt_len = IEEE80211_TKIP_IV_LEN; | |
269 | /* fall through if TTAK OK */ | |
270 | case IWL_RX_MPDU_STATUS_SEC_WEP: | |
271 | if (!(status & IWL_RX_MPDU_STATUS_ICV_OK)) | |
272 | return -1; | |
273 | ||
274 | stats->flag |= RX_FLAG_DECRYPTED; | |
275 | if ((status & IWL_RX_MPDU_STATUS_SEC_MASK) == | |
276 | IWL_RX_MPDU_STATUS_SEC_WEP) | |
277 | *crypt_len = IEEE80211_WEP_IV_LEN; | |
278 | return 0; | |
279 | case IWL_RX_MPDU_STATUS_SEC_EXT_ENC: | |
280 | if (!(status & IWL_RX_MPDU_STATUS_MIC_OK)) | |
281 | return -1; | |
282 | stats->flag |= RX_FLAG_DECRYPTED; | |
283 | return 0; | |
284 | default: | |
285 | IWL_ERR(mvm, "Unhandled alg: 0x%x\n", status); | |
286 | } | |
287 | ||
288 | return 0; | |
289 | } | |
290 | ||
291 | static void iwl_mvm_rx_csum(struct ieee80211_sta *sta, | |
292 | struct sk_buff *skb, | |
293 | struct iwl_rx_mpdu_desc *desc) | |
294 | { | |
295 | struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
296 | struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif); | |
b238be07 SS |
297 | u16 flags = le16_to_cpu(desc->l3l4_flags); |
298 | u8 l3_prot = (u8)((flags & IWL_RX_L3L4_L3_PROTO_MASK) >> | |
299 | IWL_RX_L3_PROTO_POS); | |
780e87c2 JB |
300 | |
301 | if (mvmvif->features & NETIF_F_RXCSUM && | |
b238be07 SS |
302 | flags & IWL_RX_L3L4_TCP_UDP_CSUM_OK && |
303 | (flags & IWL_RX_L3L4_IP_HDR_CSUM_OK || | |
304 | l3_prot == IWL_RX_L3_TYPE_IPV6 || | |
305 | l3_prot == IWL_RX_L3_TYPE_IPV6_FRAG)) | |
780e87c2 JB |
306 | skb->ip_summed = CHECKSUM_UNNECESSARY; |
307 | } | |
308 | ||
a571f5f6 SS |
309 | /* |
310 | * returns true if a packet outside BA session is a duplicate and | |
311 | * should be dropped | |
312 | */ | |
313 | static bool iwl_mvm_is_nonagg_dup(struct ieee80211_sta *sta, int queue, | |
314 | struct ieee80211_rx_status *rx_status, | |
315 | struct ieee80211_hdr *hdr, | |
316 | struct iwl_rx_mpdu_desc *desc) | |
317 | { | |
318 | struct iwl_mvm_sta *mvm_sta; | |
319 | struct iwl_mvm_rxq_dup_data *dup_data; | |
320 | u8 baid, tid, sub_frame_idx; | |
321 | ||
322 | if (WARN_ON(IS_ERR_OR_NULL(sta))) | |
323 | return false; | |
324 | ||
325 | baid = (le32_to_cpu(desc->reorder_data) & | |
326 | IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
327 | IWL_RX_MPDU_REORDER_BAID_SHIFT; | |
328 | ||
329 | if (baid != IWL_RX_REORDER_DATA_INVALID_BAID) | |
330 | return false; | |
331 | ||
332 | mvm_sta = iwl_mvm_sta_from_mac80211(sta); | |
333 | dup_data = &mvm_sta->dup_data[queue]; | |
334 | ||
335 | /* | |
336 | * Drop duplicate 802.11 retransmissions | |
337 | * (IEEE 802.11-2012: 9.3.2.10 "Duplicate detection and recovery") | |
338 | */ | |
339 | if (ieee80211_is_ctl(hdr->frame_control) || | |
340 | ieee80211_is_qos_nullfunc(hdr->frame_control) || | |
341 | is_multicast_ether_addr(hdr->addr1)) { | |
342 | rx_status->flag |= RX_FLAG_DUP_VALIDATED; | |
343 | return false; | |
344 | } | |
345 | ||
346 | if (ieee80211_is_data_qos(hdr->frame_control)) | |
347 | /* frame has qos control */ | |
348 | tid = *ieee80211_get_qos_ctl(hdr) & | |
349 | IEEE80211_QOS_CTL_TID_MASK; | |
350 | else | |
351 | tid = IWL_MAX_TID_COUNT; | |
352 | ||
353 | /* If this wasn't a part of an A-MSDU the sub-frame index will be 0 */ | |
354 | sub_frame_idx = desc->amsdu_info & IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK; | |
355 | ||
356 | if (unlikely(ieee80211_has_retry(hdr->frame_control) && | |
357 | dup_data->last_seq[tid] == hdr->seq_ctrl && | |
358 | dup_data->last_sub_frame[tid] >= sub_frame_idx)) | |
359 | return true; | |
360 | ||
361 | dup_data->last_seq[tid] = hdr->seq_ctrl; | |
362 | dup_data->last_sub_frame[tid] = sub_frame_idx; | |
363 | ||
364 | rx_status->flag |= RX_FLAG_DUP_VALIDATED; | |
365 | ||
366 | return false; | |
367 | } | |
368 | ||
94bb4481 SS |
369 | int iwl_mvm_notify_rx_queue(struct iwl_mvm *mvm, u32 rxq_mask, |
370 | const u8 *data, u32 count) | |
371 | { | |
372 | struct iwl_rxq_sync_cmd *cmd; | |
373 | u32 data_size = sizeof(*cmd) + count; | |
374 | int ret; | |
375 | ||
376 | /* should be DWORD aligned */ | |
377 | if (WARN_ON(count & 3 || count > IWL_MULTI_QUEUE_SYNC_MSG_MAX_SIZE)) | |
378 | return -EINVAL; | |
379 | ||
380 | cmd = kzalloc(data_size, GFP_KERNEL); | |
381 | if (!cmd) | |
382 | return -ENOMEM; | |
383 | ||
384 | cmd->rxq_mask = cpu_to_le32(rxq_mask); | |
385 | cmd->count = cpu_to_le32(count); | |
386 | cmd->flags = 0; | |
387 | memcpy(cmd->payload, data, count); | |
388 | ||
389 | ret = iwl_mvm_send_cmd_pdu(mvm, | |
390 | WIDE_ID(DATA_PATH_GROUP, | |
391 | TRIGGER_RX_QUEUES_NOTIF_CMD), | |
392 | 0, data_size, cmd); | |
393 | ||
394 | kfree(cmd); | |
395 | return ret; | |
396 | } | |
397 | ||
74dd1764 SS |
398 | /* |
399 | * Returns true if sn2 - buffer_size < sn1 < sn2. | |
400 | * To be used only in order to compare reorder buffer head with NSSN. | |
401 | * We fully trust NSSN unless it is behind us due to reorder timeout. | |
402 | * Reorder timeout can only bring us up to buffer_size SNs ahead of NSSN. | |
403 | */ | |
404 | static bool iwl_mvm_is_sn_less(u16 sn1, u16 sn2, u16 buffer_size) | |
405 | { | |
406 | return ieee80211_sn_less(sn1, sn2) && | |
407 | !ieee80211_sn_less(sn1, sn2 - buffer_size); | |
408 | } | |
409 | ||
0690405f SS |
410 | #define RX_REORDER_BUF_TIMEOUT_MQ (HZ / 10) |
411 | ||
b915c101 SS |
412 | static void iwl_mvm_release_frames(struct iwl_mvm *mvm, |
413 | struct ieee80211_sta *sta, | |
414 | struct napi_struct *napi, | |
415 | struct iwl_mvm_reorder_buffer *reorder_buf, | |
416 | u16 nssn) | |
417 | { | |
418 | u16 ssn = reorder_buf->head_sn; | |
419 | ||
0690405f SS |
420 | lockdep_assert_held(&reorder_buf->lock); |
421 | ||
422 | /* ignore nssn smaller than head sn - this can happen due to timeout */ | |
74dd1764 | 423 | if (iwl_mvm_is_sn_less(nssn, ssn, reorder_buf->buf_size)) |
0690405f SS |
424 | return; |
425 | ||
74dd1764 | 426 | while (iwl_mvm_is_sn_less(ssn, nssn, reorder_buf->buf_size)) { |
b915c101 SS |
427 | int index = ssn % reorder_buf->buf_size; |
428 | struct sk_buff_head *skb_list = &reorder_buf->entries[index]; | |
429 | struct sk_buff *skb; | |
430 | ||
431 | ssn = ieee80211_sn_inc(ssn); | |
432 | ||
433 | /* holes are valid since nssn indicates frames were received. */ | |
434 | if (skb_queue_empty(skb_list) || !skb_peek_tail(skb_list)) | |
435 | continue; | |
436 | /* Empty the list. Will have more than one frame for A-MSDU */ | |
437 | while ((skb = __skb_dequeue(skb_list))) { | |
438 | iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, | |
439 | reorder_buf->queue, | |
440 | sta); | |
441 | reorder_buf->num_stored--; | |
442 | } | |
443 | } | |
444 | reorder_buf->head_sn = nssn; | |
0690405f SS |
445 | |
446 | if (reorder_buf->num_stored && !reorder_buf->removed) { | |
447 | u16 index = reorder_buf->head_sn % reorder_buf->buf_size; | |
448 | ||
449 | while (!skb_peek_tail(&reorder_buf->entries[index])) | |
450 | index = (index + 1) % reorder_buf->buf_size; | |
451 | /* modify timer to match next frame's expiration time */ | |
452 | mod_timer(&reorder_buf->reorder_timer, | |
453 | reorder_buf->reorder_time[index] + 1 + | |
454 | RX_REORDER_BUF_TIMEOUT_MQ); | |
455 | } else { | |
456 | del_timer(&reorder_buf->reorder_timer); | |
457 | } | |
458 | } | |
459 | ||
460 | void iwl_mvm_reorder_timer_expired(unsigned long data) | |
461 | { | |
462 | struct iwl_mvm_reorder_buffer *buf = (void *)data; | |
463 | int i; | |
464 | u16 sn = 0, index = 0; | |
465 | bool expired = false; | |
466 | ||
467 | spin_lock_bh(&buf->lock); | |
468 | ||
469 | if (!buf->num_stored || buf->removed) { | |
470 | spin_unlock_bh(&buf->lock); | |
471 | return; | |
472 | } | |
473 | ||
474 | for (i = 0; i < buf->buf_size ; i++) { | |
475 | index = (buf->head_sn + i) % buf->buf_size; | |
476 | ||
477 | if (!skb_peek_tail(&buf->entries[index])) | |
478 | continue; | |
479 | if (!time_after(jiffies, buf->reorder_time[index] + | |
480 | RX_REORDER_BUF_TIMEOUT_MQ)) | |
481 | break; | |
482 | expired = true; | |
483 | sn = ieee80211_sn_add(buf->head_sn, i + 1); | |
484 | } | |
485 | ||
486 | if (expired) { | |
487 | struct ieee80211_sta *sta; | |
488 | ||
489 | rcu_read_lock(); | |
490 | sta = rcu_dereference(buf->mvm->fw_id_to_mac_id[buf->sta_id]); | |
491 | /* SN is set to the last expired frame + 1 */ | |
492 | iwl_mvm_release_frames(buf->mvm, sta, NULL, buf, sn); | |
493 | rcu_read_unlock(); | |
494 | } else if (buf->num_stored) { | |
495 | /* | |
496 | * If no frame expired and there are stored frames, index is now | |
497 | * pointing to the first unexpired frame - modify timer | |
498 | * accordingly to this frame. | |
499 | */ | |
500 | mod_timer(&buf->reorder_timer, | |
501 | buf->reorder_time[index] + | |
502 | 1 + RX_REORDER_BUF_TIMEOUT_MQ); | |
503 | } | |
504 | spin_unlock_bh(&buf->lock); | |
b915c101 SS |
505 | } |
506 | ||
507 | static void iwl_mvm_del_ba(struct iwl_mvm *mvm, int queue, | |
508 | struct iwl_mvm_delba_data *data) | |
509 | { | |
510 | struct iwl_mvm_baid_data *ba_data; | |
511 | struct ieee80211_sta *sta; | |
512 | struct iwl_mvm_reorder_buffer *reorder_buf; | |
513 | u8 baid = data->baid; | |
514 | ||
515 | if (WARN_ON_ONCE(baid >= IWL_RX_REORDER_DATA_INVALID_BAID)) | |
516 | return; | |
517 | ||
518 | rcu_read_lock(); | |
519 | ||
520 | ba_data = rcu_dereference(mvm->baid_map[baid]); | |
521 | if (WARN_ON_ONCE(!ba_data)) | |
522 | goto out; | |
523 | ||
524 | sta = rcu_dereference(mvm->fw_id_to_mac_id[ba_data->sta_id]); | |
525 | if (WARN_ON_ONCE(IS_ERR_OR_NULL(sta))) | |
526 | goto out; | |
527 | ||
528 | reorder_buf = &ba_data->reorder_buf[queue]; | |
529 | ||
530 | /* release all frames that are in the reorder buffer to the stack */ | |
0690405f | 531 | spin_lock_bh(&reorder_buf->lock); |
b915c101 SS |
532 | iwl_mvm_release_frames(mvm, sta, NULL, reorder_buf, |
533 | ieee80211_sn_add(reorder_buf->head_sn, | |
534 | reorder_buf->buf_size)); | |
0690405f SS |
535 | spin_unlock_bh(&reorder_buf->lock); |
536 | del_timer_sync(&reorder_buf->reorder_timer); | |
b915c101 SS |
537 | |
538 | out: | |
539 | rcu_read_unlock(); | |
540 | } | |
541 | ||
94bb4481 SS |
542 | void iwl_mvm_rx_queue_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb, |
543 | int queue) | |
544 | { | |
545 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
546 | struct iwl_rxq_sync_notification *notif; | |
547 | struct iwl_mvm_internal_rxq_notif *internal_notif; | |
548 | ||
549 | notif = (void *)pkt->data; | |
550 | internal_notif = (void *)notif->payload; | |
551 | ||
d0ff5d22 SS |
552 | if (internal_notif->sync) { |
553 | if (mvm->queue_sync_cookie != internal_notif->cookie) { | |
0636b938 SS |
554 | WARN_ONCE(1, |
555 | "Received expired RX queue sync message\n"); | |
d0ff5d22 SS |
556 | return; |
557 | } | |
558 | atomic_dec(&mvm->queue_sync_counter); | |
559 | } | |
560 | ||
561 | switch (internal_notif->type) { | |
562 | case IWL_MVM_RXQ_EMPTY: | |
0636b938 | 563 | break; |
94bb4481 | 564 | case IWL_MVM_RXQ_NOTIF_DEL_BA: |
b915c101 | 565 | iwl_mvm_del_ba(mvm, queue, (void *)internal_notif->data); |
94bb4481 SS |
566 | break; |
567 | default: | |
568 | WARN_ONCE(1, "Invalid identifier %d", internal_notif->type); | |
569 | } | |
570 | } | |
571 | ||
b915c101 SS |
572 | /* |
573 | * Returns true if the MPDU was buffered\dropped, false if it should be passed | |
574 | * to upper layer. | |
575 | */ | |
576 | static bool iwl_mvm_reorder(struct iwl_mvm *mvm, | |
577 | struct napi_struct *napi, | |
578 | int queue, | |
579 | struct ieee80211_sta *sta, | |
580 | struct sk_buff *skb, | |
581 | struct iwl_rx_mpdu_desc *desc) | |
582 | { | |
583 | struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; | |
1f9788f3 | 584 | struct iwl_mvm_sta *mvm_sta; |
b915c101 SS |
585 | struct iwl_mvm_baid_data *baid_data; |
586 | struct iwl_mvm_reorder_buffer *buffer; | |
587 | struct sk_buff *tail; | |
588 | u32 reorder = le32_to_cpu(desc->reorder_data); | |
589 | bool amsdu = desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU; | |
590 | u8 tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK; | |
591 | u8 sub_frame_idx = desc->amsdu_info & | |
592 | IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK; | |
593 | int index; | |
594 | u16 nssn, sn; | |
595 | u8 baid; | |
596 | ||
597 | baid = (reorder & IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
598 | IWL_RX_MPDU_REORDER_BAID_SHIFT; | |
599 | ||
600 | if (baid == IWL_RX_REORDER_DATA_INVALID_BAID) | |
601 | return false; | |
602 | ||
603 | /* no sta yet */ | |
604 | if (WARN_ON(IS_ERR_OR_NULL(sta))) | |
605 | return false; | |
606 | ||
1f9788f3 LC |
607 | mvm_sta = iwl_mvm_sta_from_mac80211(sta); |
608 | ||
b915c101 SS |
609 | /* not a data packet */ |
610 | if (!ieee80211_is_data_qos(hdr->frame_control) || | |
611 | is_multicast_ether_addr(hdr->addr1)) | |
612 | return false; | |
613 | ||
614 | if (unlikely(!ieee80211_is_data_present(hdr->frame_control))) | |
615 | return false; | |
616 | ||
617 | baid_data = rcu_dereference(mvm->baid_map[baid]); | |
618 | if (WARN(!baid_data, | |
619 | "Received baid %d, but no data exists for this BAID\n", baid)) | |
620 | return false; | |
621 | if (WARN(tid != baid_data->tid || mvm_sta->sta_id != baid_data->sta_id, | |
622 | "baid 0x%x is mapped to sta:%d tid:%d, but was received for sta:%d tid:%d\n", | |
623 | baid, baid_data->sta_id, baid_data->tid, mvm_sta->sta_id, | |
624 | tid)) | |
625 | return false; | |
626 | ||
627 | nssn = reorder & IWL_RX_MPDU_REORDER_NSSN_MASK; | |
628 | sn = (reorder & IWL_RX_MPDU_REORDER_SN_MASK) >> | |
629 | IWL_RX_MPDU_REORDER_SN_SHIFT; | |
630 | ||
631 | buffer = &baid_data->reorder_buf[queue]; | |
632 | ||
0690405f SS |
633 | spin_lock_bh(&buffer->lock); |
634 | ||
b915c101 SS |
635 | /* |
636 | * If there was a significant jump in the nssn - adjust. | |
637 | * If the SN is smaller than the NSSN it might need to first go into | |
638 | * the reorder buffer, in which case we just release up to it and the | |
639 | * rest of the function will take of storing it and releasing up to the | |
640 | * nssn | |
641 | */ | |
74dd1764 SS |
642 | if (!iwl_mvm_is_sn_less(nssn, buffer->head_sn + buffer->buf_size, |
643 | buffer->buf_size)) { | |
b915c101 SS |
644 | u16 min_sn = ieee80211_sn_less(sn, nssn) ? sn : nssn; |
645 | ||
646 | iwl_mvm_release_frames(mvm, sta, napi, buffer, min_sn); | |
647 | } | |
648 | ||
649 | /* drop any oudated packets */ | |
650 | if (ieee80211_sn_less(sn, buffer->head_sn)) | |
651 | goto drop; | |
652 | ||
653 | /* release immediately if allowed by nssn and no stored frames */ | |
654 | if (!buffer->num_stored && ieee80211_sn_less(sn, nssn)) { | |
74dd1764 SS |
655 | if (iwl_mvm_is_sn_less(buffer->head_sn, nssn, |
656 | buffer->buf_size)) | |
0690405f | 657 | buffer->head_sn = nssn; |
b915c101 | 658 | /* No need to update AMSDU last SN - we are moving the head */ |
0690405f | 659 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
660 | return false; |
661 | } | |
662 | ||
663 | index = sn % buffer->buf_size; | |
664 | ||
665 | /* | |
666 | * Check if we already stored this frame | |
667 | * As AMSDU is either received or not as whole, logic is simple: | |
668 | * If we have frames in that position in the buffer and the last frame | |
669 | * originated from AMSDU had a different SN then it is a retransmission. | |
670 | * If it is the same SN then if the subframe index is incrementing it | |
671 | * is the same AMSDU - otherwise it is a retransmission. | |
672 | */ | |
673 | tail = skb_peek_tail(&buffer->entries[index]); | |
674 | if (tail && !amsdu) | |
675 | goto drop; | |
676 | else if (tail && (sn != buffer->last_amsdu || | |
677 | buffer->last_sub_index >= sub_frame_idx)) | |
678 | goto drop; | |
679 | ||
680 | /* put in reorder buffer */ | |
681 | __skb_queue_tail(&buffer->entries[index], skb); | |
682 | buffer->num_stored++; | |
0690405f SS |
683 | buffer->reorder_time[index] = jiffies; |
684 | ||
b915c101 SS |
685 | if (amsdu) { |
686 | buffer->last_amsdu = sn; | |
687 | buffer->last_sub_index = sub_frame_idx; | |
688 | } | |
689 | ||
690 | iwl_mvm_release_frames(mvm, sta, napi, buffer, nssn); | |
0690405f | 691 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
692 | return true; |
693 | ||
694 | drop: | |
695 | kfree_skb(skb); | |
0690405f | 696 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
697 | return true; |
698 | } | |
699 | ||
10b2b201 SS |
700 | static void iwl_mvm_agg_rx_received(struct iwl_mvm *mvm, u8 baid) |
701 | { | |
702 | unsigned long now = jiffies; | |
703 | unsigned long timeout; | |
704 | struct iwl_mvm_baid_data *data; | |
705 | ||
706 | rcu_read_lock(); | |
707 | ||
708 | data = rcu_dereference(mvm->baid_map[baid]); | |
709 | if (WARN_ON(!data)) | |
710 | goto out; | |
711 | ||
712 | if (!data->timeout) | |
713 | goto out; | |
714 | ||
715 | timeout = data->timeout; | |
716 | /* | |
717 | * Do not update last rx all the time to avoid cache bouncing | |
718 | * between the rx queues. | |
719 | * Update it every timeout. Worst case is the session will | |
720 | * expire after ~ 2 * timeout, which doesn't matter that much. | |
721 | */ | |
722 | if (time_before(data->last_rx + TU_TO_JIFFIES(timeout), now)) | |
723 | /* Update is atomic */ | |
724 | data->last_rx = now; | |
725 | ||
726 | out: | |
727 | rcu_read_unlock(); | |
728 | } | |
729 | ||
780e87c2 JB |
730 | void iwl_mvm_rx_mpdu_mq(struct iwl_mvm *mvm, struct napi_struct *napi, |
731 | struct iwl_rx_cmd_buffer *rxb, int queue) | |
732 | { | |
733 | struct ieee80211_rx_status *rx_status; | |
734 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
735 | struct iwl_rx_mpdu_desc *desc = (void *)pkt->data; | |
0c1c6e37 | 736 | struct ieee80211_hdr *hdr = (void *)(pkt->data + sizeof(*desc)); |
780e87c2 JB |
737 | u32 len = le16_to_cpu(desc->mpdu_len); |
738 | u32 rate_n_flags = le32_to_cpu(desc->rate_n_flags); | |
739 | struct ieee80211_sta *sta = NULL; | |
740 | struct sk_buff *skb; | |
780e87c2 JB |
741 | u8 crypt_len = 0; |
742 | ||
743 | /* Dont use dev_alloc_skb(), we'll have enough headroom once | |
744 | * ieee80211_hdr pulled. | |
745 | */ | |
746 | skb = alloc_skb(128, GFP_ATOMIC); | |
747 | if (!skb) { | |
748 | IWL_ERR(mvm, "alloc_skb failed\n"); | |
749 | return; | |
750 | } | |
751 | ||
752 | rx_status = IEEE80211_SKB_RXCB(skb); | |
753 | ||
754 | if (iwl_mvm_rx_crypto(mvm, hdr, rx_status, desc, queue, &crypt_len)) { | |
755 | kfree_skb(skb); | |
756 | return; | |
757 | } | |
758 | ||
759 | /* | |
760 | * Keep packets with CRC errors (and with overrun) for monitor mode | |
761 | * (otherwise the firmware discards them) but mark them as bad. | |
762 | */ | |
763 | if (!(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_CRC_OK)) || | |
764 | !(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_OVERRUN_OK))) { | |
765 | IWL_DEBUG_RX(mvm, "Bad CRC or FIFO: 0x%08X.\n", | |
766 | le16_to_cpu(desc->status)); | |
767 | rx_status->flag |= RX_FLAG_FAILED_FCS_CRC; | |
768 | } | |
769 | ||
770 | rx_status->mactime = le64_to_cpu(desc->tsf_on_air_rise); | |
771 | rx_status->device_timestamp = le32_to_cpu(desc->gp2_on_air_rise); | |
57fbcce3 JB |
772 | rx_status->band = desc->channel > 14 ? NL80211_BAND_5GHZ : |
773 | NL80211_BAND_2GHZ; | |
780e87c2 JB |
774 | rx_status->freq = ieee80211_channel_to_frequency(desc->channel, |
775 | rx_status->band); | |
776 | iwl_mvm_get_signal_strength(mvm, desc, rx_status); | |
77fe7395 SS |
777 | /* TSF as indicated by the firmware is at INA time */ |
778 | rx_status->flag |= RX_FLAG_MACTIME_PLCP_START; | |
780e87c2 JB |
779 | |
780 | rcu_read_lock(); | |
781 | ||
782 | if (le16_to_cpu(desc->status) & IWL_RX_MPDU_STATUS_SRC_STA_FOUND) { | |
783 | u8 id = desc->sta_id_flags & IWL_RX_MPDU_SIF_STA_ID_MASK; | |
784 | ||
785 | if (!WARN_ON_ONCE(id >= IWL_MVM_STATION_COUNT)) { | |
786 | sta = rcu_dereference(mvm->fw_id_to_mac_id[id]); | |
787 | if (IS_ERR(sta)) | |
788 | sta = NULL; | |
789 | } | |
790 | } else if (!is_multicast_ether_addr(hdr->addr2)) { | |
791 | /* | |
792 | * This is fine since we prevent two stations with the same | |
793 | * address from being added. | |
794 | */ | |
795 | sta = ieee80211_find_sta_by_ifaddr(mvm->hw, hdr->addr2, NULL); | |
796 | } | |
797 | ||
798 | if (sta) { | |
799 | struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
10b2b201 SS |
800 | u8 baid = (u8)((le32_to_cpu(desc->reorder_data) & |
801 | IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
802 | IWL_RX_MPDU_REORDER_BAID_SHIFT); | |
780e87c2 JB |
803 | |
804 | /* | |
805 | * We have tx blocked stations (with CS bit). If we heard | |
806 | * frames from a blocked station on a new channel we can | |
807 | * TX to it again. | |
808 | */ | |
809 | if (unlikely(mvm->csa_tx_block_bcn_timeout)) | |
810 | iwl_mvm_sta_modify_disable_tx_ap(mvm, sta, false); | |
811 | ||
812 | rs_update_last_rssi(mvm, &mvmsta->lq_sta, rx_status); | |
813 | ||
814 | if (iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_RSSI) && | |
815 | ieee80211_is_beacon(hdr->frame_control)) { | |
816 | struct iwl_fw_dbg_trigger_tlv *trig; | |
817 | struct iwl_fw_dbg_trigger_low_rssi *rssi_trig; | |
818 | bool trig_check; | |
819 | s32 rssi; | |
820 | ||
821 | trig = iwl_fw_dbg_get_trigger(mvm->fw, | |
822 | FW_DBG_TRIGGER_RSSI); | |
823 | rssi_trig = (void *)trig->data; | |
824 | rssi = le32_to_cpu(rssi_trig->rssi); | |
825 | ||
826 | trig_check = | |
827 | iwl_fw_dbg_trigger_check_stop(mvm, mvmsta->vif, | |
828 | trig); | |
829 | if (trig_check && rx_status->signal < rssi) | |
830 | iwl_mvm_fw_dbg_collect_trig(mvm, trig, NULL); | |
831 | } | |
832 | ||
833 | /* TODO: multi queue TCM */ | |
834 | ||
835 | if (ieee80211_is_data(hdr->frame_control)) | |
836 | iwl_mvm_rx_csum(sta, skb, desc); | |
a571f5f6 SS |
837 | |
838 | if (iwl_mvm_is_nonagg_dup(sta, queue, rx_status, hdr, desc)) { | |
839 | kfree_skb(skb); | |
840 | rcu_read_unlock(); | |
841 | return; | |
842 | } | |
62d23403 SS |
843 | |
844 | /* | |
845 | * Our hardware de-aggregates AMSDUs but copies the mac header | |
846 | * as it to the de-aggregated MPDUs. We need to turn off the | |
847 | * AMSDU bit in the QoS control ourselves. | |
848 | */ | |
849 | if ((desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU) && | |
850 | !WARN_ON(!ieee80211_is_data_qos(hdr->frame_control))) { | |
851 | u8 *qc = ieee80211_get_qos_ctl(hdr); | |
852 | ||
853 | *qc &= ~IEEE80211_QOS_CTL_A_MSDU_PRESENT; | |
854 | } | |
10b2b201 SS |
855 | if (baid != IWL_RX_REORDER_DATA_INVALID_BAID) |
856 | iwl_mvm_agg_rx_received(mvm, baid); | |
780e87c2 JB |
857 | } |
858 | ||
780e87c2 JB |
859 | /* |
860 | * TODO: PHY info. | |
861 | * Verify we don't have the information in the MPDU descriptor and | |
862 | * that it is not needed. | |
863 | * Make sure for monitor mode that we are on default queue, update | |
864 | * ampdu_ref and the rest of phy info then | |
865 | */ | |
866 | ||
867 | /* Set up the HT phy flags */ | |
868 | switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) { | |
869 | case RATE_MCS_CHAN_WIDTH_20: | |
870 | break; | |
871 | case RATE_MCS_CHAN_WIDTH_40: | |
872 | rx_status->flag |= RX_FLAG_40MHZ; | |
873 | break; | |
874 | case RATE_MCS_CHAN_WIDTH_80: | |
875 | rx_status->vht_flag |= RX_VHT_FLAG_80MHZ; | |
876 | break; | |
877 | case RATE_MCS_CHAN_WIDTH_160: | |
878 | rx_status->vht_flag |= RX_VHT_FLAG_160MHZ; | |
879 | break; | |
880 | } | |
881 | if (rate_n_flags & RATE_MCS_SGI_MSK) | |
882 | rx_status->flag |= RX_FLAG_SHORT_GI; | |
883 | if (rate_n_flags & RATE_HT_MCS_GF_MSK) | |
884 | rx_status->flag |= RX_FLAG_HT_GF; | |
885 | if (rate_n_flags & RATE_MCS_LDPC_MSK) | |
886 | rx_status->flag |= RX_FLAG_LDPC; | |
887 | if (rate_n_flags & RATE_MCS_HT_MSK) { | |
888 | u8 stbc = (rate_n_flags & RATE_MCS_HT_STBC_MSK) >> | |
889 | RATE_MCS_STBC_POS; | |
890 | rx_status->flag |= RX_FLAG_HT; | |
891 | rx_status->rate_idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK; | |
892 | rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT; | |
893 | } else if (rate_n_flags & RATE_MCS_VHT_MSK) { | |
894 | u8 stbc = (rate_n_flags & RATE_MCS_VHT_STBC_MSK) >> | |
895 | RATE_MCS_STBC_POS; | |
896 | rx_status->vht_nss = | |
897 | ((rate_n_flags & RATE_VHT_MCS_NSS_MSK) >> | |
898 | RATE_VHT_MCS_NSS_POS) + 1; | |
899 | rx_status->rate_idx = rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK; | |
900 | rx_status->flag |= RX_FLAG_VHT; | |
901 | rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT; | |
902 | if (rate_n_flags & RATE_MCS_BF_MSK) | |
903 | rx_status->vht_flag |= RX_VHT_FLAG_BF; | |
904 | } else { | |
905 | rx_status->rate_idx = | |
906 | iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags, | |
907 | rx_status->band); | |
908 | } | |
909 | ||
910 | /* TODO: PHY info - update ampdu queue statistics (for debugfs) */ | |
911 | /* TODO: PHY info - gscan */ | |
912 | ||
f5e28eac | 913 | iwl_mvm_create_skb(skb, hdr, len, crypt_len, rxb); |
b915c101 SS |
914 | if (!iwl_mvm_reorder(mvm, napi, queue, sta, skb, desc)) |
915 | iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, queue, sta); | |
f5e28eac | 916 | rcu_read_unlock(); |
780e87c2 | 917 | } |
585a6fcc | 918 | |
a338384b | 919 | void iwl_mvm_rx_frame_release(struct iwl_mvm *mvm, struct napi_struct *napi, |
585a6fcc SS |
920 | struct iwl_rx_cmd_buffer *rxb, int queue) |
921 | { | |
a338384b SS |
922 | struct iwl_rx_packet *pkt = rxb_addr(rxb); |
923 | struct iwl_frame_release *release = (void *)pkt->data; | |
924 | struct ieee80211_sta *sta; | |
925 | struct iwl_mvm_reorder_buffer *reorder_buf; | |
926 | struct iwl_mvm_baid_data *ba_data; | |
927 | ||
928 | int baid = release->baid; | |
929 | ||
930 | if (WARN_ON_ONCE(baid == IWL_RX_REORDER_DATA_INVALID_BAID)) | |
931 | return; | |
932 | ||
933 | rcu_read_lock(); | |
934 | ||
935 | ba_data = rcu_dereference(mvm->baid_map[baid]); | |
936 | if (WARN_ON_ONCE(!ba_data)) | |
937 | goto out; | |
938 | ||
939 | sta = rcu_dereference(mvm->fw_id_to_mac_id[ba_data->sta_id]); | |
940 | if (WARN_ON_ONCE(IS_ERR_OR_NULL(sta))) | |
941 | goto out; | |
942 | ||
943 | reorder_buf = &ba_data->reorder_buf[queue]; | |
944 | ||
945 | spin_lock_bh(&reorder_buf->lock); | |
946 | iwl_mvm_release_frames(mvm, sta, napi, reorder_buf, | |
947 | le16_to_cpu(release->nssn)); | |
948 | spin_unlock_bh(&reorder_buf->lock); | |
949 | ||
950 | out: | |
951 | rcu_read_unlock(); | |
585a6fcc | 952 | } |