Commit | Line | Data |
---|---|---|
8ca151b5 JB |
1 | /****************************************************************************** |
2 | * | |
3 | * This file is provided under a dual BSD/GPLv2 license. When using or | |
4 | * redistributing this file, you may do so under either license. | |
5 | * | |
6 | * GPL LICENSE SUMMARY | |
7 | * | |
8 | * Copyright(c) 2012 - 2013 Intel Corporation. All rights reserved. | |
9 | * | |
10 | * This program is free software; you can redistribute it and/or modify | |
11 | * it under the terms of version 2 of the GNU General Public License as | |
12 | * published by the Free Software Foundation. | |
13 | * | |
14 | * This program is distributed in the hope that it will be useful, but | |
15 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
17 | * General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU General Public License | |
20 | * along with this program; if not, write to the Free Software | |
21 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, | |
22 | * USA | |
23 | * | |
24 | * The full GNU General Public License is included in this distribution | |
410dc5aa | 25 | * in the file called COPYING. |
8ca151b5 JB |
26 | * |
27 | * Contact Information: | |
28 | * Intel Linux Wireless <ilw@linux.intel.com> | |
29 | * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 | |
30 | * | |
31 | * BSD LICENSE | |
32 | * | |
33 | * Copyright(c) 2012 - 2013 Intel Corporation. All rights reserved. | |
34 | * All rights reserved. | |
35 | * | |
36 | * Redistribution and use in source and binary forms, with or without | |
37 | * modification, are permitted provided that the following conditions | |
38 | * are met: | |
39 | * | |
40 | * * Redistributions of source code must retain the above copyright | |
41 | * notice, this list of conditions and the following disclaimer. | |
42 | * * Redistributions in binary form must reproduce the above copyright | |
43 | * notice, this list of conditions and the following disclaimer in | |
44 | * the documentation and/or other materials provided with the | |
45 | * distribution. | |
46 | * * Neither the name Intel Corporation nor the names of its | |
47 | * contributors may be used to endorse or promote products derived | |
48 | * from this software without specific prior written permission. | |
49 | * | |
50 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
51 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | |
52 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | |
53 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | |
54 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
55 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
56 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
57 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
58 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
59 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
60 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
61 | * | |
62 | *****************************************************************************/ | |
63 | ||
64 | #include <linux/etherdevice.h> | |
65 | #include <net/mac80211.h> | |
66 | ||
67 | #include "mvm.h" | |
68 | #include "iwl-eeprom-parse.h" | |
69 | #include "fw-api-scan.h" | |
70 | ||
71 | #define IWL_PLCP_QUIET_THRESH 1 | |
72 | #define IWL_ACTIVE_QUIET_TIME 10 | |
73 | ||
74 | static inline __le16 iwl_mvm_scan_rx_chain(struct iwl_mvm *mvm) | |
75 | { | |
76 | u16 rx_chain; | |
91b05d10 | 77 | u8 rx_ant; |
8ca151b5 | 78 | |
91b05d10 OG |
79 | if (mvm->scan_rx_ant != ANT_NONE) |
80 | rx_ant = mvm->scan_rx_ant; | |
81 | else | |
82 | rx_ant = iwl_fw_valid_rx_ant(mvm->fw); | |
8ca151b5 JB |
83 | rx_chain = rx_ant << PHY_RX_CHAIN_VALID_POS; |
84 | rx_chain |= rx_ant << PHY_RX_CHAIN_FORCE_MIMO_SEL_POS; | |
85 | rx_chain |= rx_ant << PHY_RX_CHAIN_FORCE_SEL_POS; | |
86 | rx_chain |= 0x1 << PHY_RX_CHAIN_DRIVER_FORCE_POS; | |
87 | return cpu_to_le16(rx_chain); | |
88 | } | |
89 | ||
90 | static inline __le32 iwl_mvm_scan_max_out_time(struct ieee80211_vif *vif) | |
91 | { | |
92 | if (vif->bss_conf.assoc) | |
93 | return cpu_to_le32(200 * 1024); | |
94 | else | |
95 | return 0; | |
96 | } | |
97 | ||
98 | static inline __le32 iwl_mvm_scan_suspend_time(struct ieee80211_vif *vif) | |
99 | { | |
2a311543 | 100 | if (!vif->bss_conf.assoc) |
8ca151b5 | 101 | return 0; |
2a311543 AB |
102 | |
103 | return cpu_to_le32(ieee80211_tu_to_usec(vif->bss_conf.beacon_int)); | |
8ca151b5 JB |
104 | } |
105 | ||
106 | static inline __le32 | |
107 | iwl_mvm_scan_rxon_flags(struct cfg80211_scan_request *req) | |
108 | { | |
109 | if (req->channels[0]->band == IEEE80211_BAND_2GHZ) | |
110 | return cpu_to_le32(PHY_BAND_24); | |
111 | else | |
112 | return cpu_to_le32(PHY_BAND_5); | |
113 | } | |
114 | ||
115 | static inline __le32 | |
116 | iwl_mvm_scan_rate_n_flags(struct iwl_mvm *mvm, enum ieee80211_band band, | |
117 | bool no_cck) | |
118 | { | |
119 | u32 tx_ant; | |
120 | ||
121 | mvm->scan_last_antenna_idx = | |
33223542 | 122 | iwl_mvm_next_antenna(mvm, iwl_fw_valid_tx_ant(mvm->fw), |
8ca151b5 JB |
123 | mvm->scan_last_antenna_idx); |
124 | tx_ant = BIT(mvm->scan_last_antenna_idx) << RATE_MCS_ANT_POS; | |
125 | ||
126 | if (band == IEEE80211_BAND_2GHZ && !no_cck) | |
127 | return cpu_to_le32(IWL_RATE_1M_PLCP | RATE_MCS_CCK_MSK | | |
128 | tx_ant); | |
129 | else | |
130 | return cpu_to_le32(IWL_RATE_6M_PLCP | tx_ant); | |
131 | } | |
132 | ||
133 | /* | |
134 | * We insert the SSIDs in an inverted order, because the FW will | |
135 | * invert it back. The most prioritized SSID, which is first in the | |
136 | * request list, is not copied here, but inserted directly to the probe | |
137 | * request. | |
138 | */ | |
139 | static void iwl_mvm_scan_fill_ssids(struct iwl_scan_cmd *cmd, | |
20f1a5de DS |
140 | struct cfg80211_scan_request *req, |
141 | int first) | |
8ca151b5 JB |
142 | { |
143 | int fw_idx, req_idx; | |
144 | ||
20f1a5de | 145 | for (req_idx = req->n_ssids - 1, fw_idx = 0; req_idx >= first; |
fe04e837 | 146 | req_idx--, fw_idx++) { |
8ca151b5 JB |
147 | cmd->direct_scan[fw_idx].id = WLAN_EID_SSID; |
148 | cmd->direct_scan[fw_idx].len = req->ssids[req_idx].ssid_len; | |
149 | memcpy(cmd->direct_scan[fw_idx].ssid, | |
150 | req->ssids[req_idx].ssid, | |
151 | req->ssids[req_idx].ssid_len); | |
152 | } | |
153 | } | |
154 | ||
155 | /* | |
156 | * If req->n_ssids > 0, it means we should do an active scan. | |
157 | * In case of active scan w/o directed scan, we receive a zero-length SSID | |
158 | * just to notify that this scan is active and not passive. | |
159 | * In order to notify the FW of the number of SSIDs we wish to scan (including | |
160 | * the zero-length one), we need to set the corresponding bits in chan->type, | |
20f1a5de DS |
161 | * one for each SSID, and set the active bit (first). If the first SSID is |
162 | * already included in the probe template, so we need to set only | |
163 | * req->n_ssids - 1 bits in addition to the first bit. | |
8ca151b5 JB |
164 | */ |
165 | static u16 iwl_mvm_get_active_dwell(enum ieee80211_band band, int n_ssids) | |
166 | { | |
167 | if (band == IEEE80211_BAND_2GHZ) | |
168 | return 30 + 3 * (n_ssids + 1); | |
169 | return 20 + 2 * (n_ssids + 1); | |
170 | } | |
171 | ||
172 | static u16 iwl_mvm_get_passive_dwell(enum ieee80211_band band) | |
173 | { | |
174 | return band == IEEE80211_BAND_2GHZ ? 100 + 20 : 100 + 10; | |
175 | } | |
176 | ||
177 | static void iwl_mvm_scan_fill_channels(struct iwl_scan_cmd *cmd, | |
20f1a5de DS |
178 | struct cfg80211_scan_request *req, |
179 | bool basic_ssid) | |
8ca151b5 JB |
180 | { |
181 | u16 passive_dwell = iwl_mvm_get_passive_dwell(req->channels[0]->band); | |
182 | u16 active_dwell = iwl_mvm_get_active_dwell(req->channels[0]->band, | |
183 | req->n_ssids); | |
184 | struct iwl_scan_channel *chan = (struct iwl_scan_channel *) | |
185 | (cmd->data + le16_to_cpu(cmd->tx_cmd.len)); | |
186 | int i; | |
20f1a5de DS |
187 | int type = BIT(req->n_ssids) - 1; |
188 | ||
189 | if (!basic_ssid) | |
190 | type |= BIT(req->n_ssids); | |
8ca151b5 JB |
191 | |
192 | for (i = 0; i < cmd->channel_count; i++) { | |
193 | chan->channel = cpu_to_le16(req->channels[i]->hw_value); | |
20f1a5de | 194 | chan->type = cpu_to_le32(type); |
8fe02e16 | 195 | if (req->channels[i]->flags & IEEE80211_CHAN_NO_IR) |
bb963c4a | 196 | chan->type &= cpu_to_le32(~SCAN_CHANNEL_TYPE_ACTIVE); |
8ca151b5 JB |
197 | chan->active_dwell = cpu_to_le16(active_dwell); |
198 | chan->passive_dwell = cpu_to_le16(passive_dwell); | |
199 | chan->iteration_count = cpu_to_le16(1); | |
200 | chan++; | |
201 | } | |
202 | } | |
203 | ||
204 | /* | |
205 | * Fill in probe request with the following parameters: | |
206 | * TA is our vif HW address, which mac80211 ensures we have. | |
207 | * Packet is broadcasted, so this is both SA and DA. | |
208 | * The probe request IE is made out of two: first comes the most prioritized | |
209 | * SSID if a directed scan is requested. Second comes whatever extra | |
210 | * information was given to us as the scan request IE. | |
211 | */ | |
212 | static u16 iwl_mvm_fill_probe_req(struct ieee80211_mgmt *frame, const u8 *ta, | |
213 | int n_ssids, const u8 *ssid, int ssid_len, | |
214 | const u8 *ie, int ie_len, | |
215 | int left) | |
216 | { | |
217 | int len = 0; | |
218 | u8 *pos = NULL; | |
219 | ||
220 | /* Make sure there is enough space for the probe request, | |
221 | * two mandatory IEs and the data */ | |
222 | left -= 24; | |
223 | if (left < 0) | |
224 | return 0; | |
225 | ||
226 | frame->frame_control = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ); | |
227 | eth_broadcast_addr(frame->da); | |
228 | memcpy(frame->sa, ta, ETH_ALEN); | |
229 | eth_broadcast_addr(frame->bssid); | |
230 | frame->seq_ctrl = 0; | |
231 | ||
232 | len += 24; | |
233 | ||
234 | /* for passive scans, no need to fill anything */ | |
235 | if (n_ssids == 0) | |
236 | return (u16)len; | |
237 | ||
238 | /* points to the payload of the request */ | |
239 | pos = &frame->u.probe_req.variable[0]; | |
240 | ||
241 | /* fill in our SSID IE */ | |
242 | left -= ssid_len + 2; | |
243 | if (left < 0) | |
244 | return 0; | |
245 | *pos++ = WLAN_EID_SSID; | |
246 | *pos++ = ssid_len; | |
247 | if (ssid && ssid_len) { /* ssid_len may be == 0 even if ssid is valid */ | |
248 | memcpy(pos, ssid, ssid_len); | |
249 | pos += ssid_len; | |
250 | } | |
251 | ||
252 | len += ssid_len + 2; | |
253 | ||
254 | if (WARN_ON(left < ie_len)) | |
255 | return len; | |
256 | ||
257 | if (ie && ie_len) { | |
258 | memcpy(pos, ie, ie_len); | |
259 | len += ie_len; | |
260 | } | |
261 | ||
262 | return (u16)len; | |
263 | } | |
264 | ||
265 | int iwl_mvm_scan_request(struct iwl_mvm *mvm, | |
266 | struct ieee80211_vif *vif, | |
267 | struct cfg80211_scan_request *req) | |
268 | { | |
269 | struct iwl_host_cmd hcmd = { | |
270 | .id = SCAN_REQUEST_CMD, | |
271 | .len = { 0, }, | |
272 | .data = { mvm->scan_cmd, }, | |
273 | .flags = CMD_SYNC, | |
274 | .dataflags = { IWL_HCMD_DFL_NOCOPY, }, | |
275 | }; | |
276 | struct iwl_scan_cmd *cmd = mvm->scan_cmd; | |
277 | int ret; | |
278 | u32 status; | |
279 | int ssid_len = 0; | |
280 | u8 *ssid = NULL; | |
20f1a5de DS |
281 | bool basic_ssid = !(mvm->fw->ucode_capa.flags & |
282 | IWL_UCODE_TLV_FLAGS_NO_BASIC_SSID); | |
8ca151b5 JB |
283 | |
284 | lockdep_assert_held(&mvm->mutex); | |
285 | BUG_ON(mvm->scan_cmd == NULL); | |
286 | ||
287 | IWL_DEBUG_SCAN(mvm, "Handling mac80211 scan request\n"); | |
288 | mvm->scan_status = IWL_MVM_SCAN_OS; | |
289 | memset(cmd, 0, sizeof(struct iwl_scan_cmd) + | |
290 | mvm->fw->ucode_capa.max_probe_length + | |
291 | (MAX_NUM_SCAN_CHANNELS * sizeof(struct iwl_scan_channel))); | |
292 | ||
293 | cmd->channel_count = (u8)req->n_channels; | |
294 | cmd->quiet_time = cpu_to_le16(IWL_ACTIVE_QUIET_TIME); | |
295 | cmd->quiet_plcp_th = cpu_to_le16(IWL_PLCP_QUIET_THRESH); | |
296 | cmd->rxchain_sel_flags = iwl_mvm_scan_rx_chain(mvm); | |
297 | cmd->max_out_time = iwl_mvm_scan_max_out_time(vif); | |
298 | cmd->suspend_time = iwl_mvm_scan_suspend_time(vif); | |
299 | cmd->rxon_flags = iwl_mvm_scan_rxon_flags(req); | |
300 | cmd->filter_flags = cpu_to_le32(MAC_FILTER_ACCEPT_GRP | | |
301 | MAC_FILTER_IN_BEACON); | |
d91b06d2 IP |
302 | |
303 | if (vif->type == NL80211_IFTYPE_P2P_DEVICE) | |
304 | cmd->type = cpu_to_le32(SCAN_TYPE_DISCOVERY_FORCED); | |
305 | else | |
306 | cmd->type = cpu_to_le32(SCAN_TYPE_FORCED); | |
307 | ||
8ca151b5 JB |
308 | cmd->repeats = cpu_to_le32(1); |
309 | ||
310 | /* | |
311 | * If the user asked for passive scan, don't change to active scan if | |
312 | * you see any activity on the channel - remain passive. | |
313 | */ | |
314 | if (req->n_ssids > 0) { | |
315 | cmd->passive2active = cpu_to_le16(1); | |
26e05cc3 | 316 | cmd->scan_flags |= SCAN_FLAGS_PASSIVE2ACTIVE; |
20f1a5de DS |
317 | if (basic_ssid) { |
318 | ssid = req->ssids[0].ssid; | |
319 | ssid_len = req->ssids[0].ssid_len; | |
320 | } | |
8ca151b5 JB |
321 | } else { |
322 | cmd->passive2active = 0; | |
26e05cc3 | 323 | cmd->scan_flags &= ~SCAN_FLAGS_PASSIVE2ACTIVE; |
8ca151b5 JB |
324 | } |
325 | ||
20f1a5de | 326 | iwl_mvm_scan_fill_ssids(cmd, req, basic_ssid ? 1 : 0); |
8ca151b5 JB |
327 | |
328 | cmd->tx_cmd.tx_flags = cpu_to_le32(TX_CMD_FLG_SEQ_CTL); | |
329 | cmd->tx_cmd.sta_id = mvm->aux_sta.sta_id; | |
330 | cmd->tx_cmd.life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE); | |
331 | cmd->tx_cmd.rate_n_flags = | |
332 | iwl_mvm_scan_rate_n_flags(mvm, req->channels[0]->band, | |
333 | req->no_cck); | |
334 | ||
335 | cmd->tx_cmd.len = | |
336 | cpu_to_le16(iwl_mvm_fill_probe_req( | |
337 | (struct ieee80211_mgmt *)cmd->data, | |
338 | vif->addr, | |
339 | req->n_ssids, ssid, ssid_len, | |
340 | req->ie, req->ie_len, | |
341 | mvm->fw->ucode_capa.max_probe_length)); | |
342 | ||
20f1a5de | 343 | iwl_mvm_scan_fill_channels(cmd, req, basic_ssid); |
8ca151b5 JB |
344 | |
345 | cmd->len = cpu_to_le16(sizeof(struct iwl_scan_cmd) + | |
346 | le16_to_cpu(cmd->tx_cmd.len) + | |
347 | (cmd->channel_count * sizeof(struct iwl_scan_channel))); | |
348 | hcmd.len[0] = le16_to_cpu(cmd->len); | |
349 | ||
350 | status = SCAN_RESPONSE_OK; | |
351 | ret = iwl_mvm_send_cmd_status(mvm, &hcmd, &status); | |
352 | if (!ret && status == SCAN_RESPONSE_OK) { | |
353 | IWL_DEBUG_SCAN(mvm, "Scan request was sent successfully\n"); | |
354 | } else { | |
355 | /* | |
356 | * If the scan failed, it usually means that the FW was unable | |
357 | * to allocate the time events. Warn on it, but maybe we | |
358 | * should try to send the command again with different params. | |
359 | */ | |
360 | IWL_ERR(mvm, "Scan failed! status 0x%x ret %d\n", | |
361 | status, ret); | |
362 | mvm->scan_status = IWL_MVM_SCAN_NONE; | |
363 | ret = -EIO; | |
364 | } | |
365 | return ret; | |
366 | } | |
367 | ||
368 | int iwl_mvm_rx_scan_response(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb, | |
369 | struct iwl_device_cmd *cmd) | |
370 | { | |
371 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
372 | struct iwl_cmd_response *resp = (void *)pkt->data; | |
373 | ||
374 | IWL_DEBUG_SCAN(mvm, "Scan response received. status 0x%x\n", | |
375 | le32_to_cpu(resp->status)); | |
376 | return 0; | |
377 | } | |
378 | ||
379 | int iwl_mvm_rx_scan_complete(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb, | |
380 | struct iwl_device_cmd *cmd) | |
381 | { | |
382 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
383 | struct iwl_scan_complete_notif *notif = (void *)pkt->data; | |
384 | ||
385 | IWL_DEBUG_SCAN(mvm, "Scan complete: status=0x%x scanned channels=%d\n", | |
386 | notif->status, notif->scanned_channels); | |
387 | ||
388 | mvm->scan_status = IWL_MVM_SCAN_NONE; | |
389 | ieee80211_scan_completed(mvm->hw, notif->status != SCAN_COMP_STATUS_OK); | |
390 | ||
391 | return 0; | |
392 | } | |
393 | ||
35a000b7 DS |
394 | int iwl_mvm_rx_sched_scan_results(struct iwl_mvm *mvm, |
395 | struct iwl_rx_cmd_buffer *rxb, | |
396 | struct iwl_device_cmd *cmd) | |
397 | { | |
398 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
399 | struct iwl_sched_scan_results *notif = (void *)pkt->data; | |
400 | ||
401 | if (notif->client_bitmap & SCAN_CLIENT_SCHED_SCAN) { | |
402 | IWL_DEBUG_SCAN(mvm, "Scheduled scan results\n"); | |
403 | ieee80211_sched_scan_results(mvm->hw); | |
404 | } | |
405 | ||
406 | return 0; | |
407 | } | |
408 | ||
8ca151b5 JB |
409 | static bool iwl_mvm_scan_abort_notif(struct iwl_notif_wait_data *notif_wait, |
410 | struct iwl_rx_packet *pkt, void *data) | |
411 | { | |
412 | struct iwl_mvm *mvm = | |
413 | container_of(notif_wait, struct iwl_mvm, notif_wait); | |
414 | struct iwl_scan_complete_notif *notif; | |
415 | u32 *resp; | |
416 | ||
417 | switch (pkt->hdr.cmd) { | |
418 | case SCAN_ABORT_CMD: | |
419 | resp = (void *)pkt->data; | |
420 | if (*resp == CAN_ABORT_STATUS) { | |
421 | IWL_DEBUG_SCAN(mvm, | |
422 | "Scan can be aborted, wait until completion\n"); | |
423 | return false; | |
424 | } | |
425 | ||
5a3e9f7f EG |
426 | /* |
427 | * If scan cannot be aborted, it means that we had a | |
428 | * SCAN_COMPLETE_NOTIFICATION in the pipe and it called | |
429 | * ieee80211_scan_completed already. | |
430 | */ | |
8ca151b5 JB |
431 | IWL_DEBUG_SCAN(mvm, "Scan cannot be aborted, exit now: %d\n", |
432 | *resp); | |
433 | return true; | |
434 | ||
435 | case SCAN_COMPLETE_NOTIFICATION: | |
436 | notif = (void *)pkt->data; | |
437 | IWL_DEBUG_SCAN(mvm, "Scan aborted: status 0x%x\n", | |
438 | notif->status); | |
439 | return true; | |
440 | ||
441 | default: | |
442 | WARN_ON(1); | |
443 | return false; | |
444 | }; | |
445 | } | |
446 | ||
447 | void iwl_mvm_cancel_scan(struct iwl_mvm *mvm) | |
448 | { | |
449 | struct iwl_notification_wait wait_scan_abort; | |
450 | static const u8 scan_abort_notif[] = { SCAN_ABORT_CMD, | |
451 | SCAN_COMPLETE_NOTIFICATION }; | |
452 | int ret; | |
453 | ||
5a3e9f7f EG |
454 | if (mvm->scan_status == IWL_MVM_SCAN_NONE) |
455 | return; | |
456 | ||
8ca151b5 JB |
457 | iwl_init_notification_wait(&mvm->notif_wait, &wait_scan_abort, |
458 | scan_abort_notif, | |
459 | ARRAY_SIZE(scan_abort_notif), | |
460 | iwl_mvm_scan_abort_notif, NULL); | |
461 | ||
5a3e9f7f EG |
462 | ret = iwl_mvm_send_cmd_pdu(mvm, SCAN_ABORT_CMD, |
463 | CMD_SYNC | CMD_SEND_IN_RFKILL, 0, NULL); | |
8ca151b5 JB |
464 | if (ret) { |
465 | IWL_ERR(mvm, "Couldn't send SCAN_ABORT_CMD: %d\n", ret); | |
5a3e9f7f | 466 | /* mac80211's state will be cleaned in the fw_restart flow */ |
8ca151b5 JB |
467 | goto out_remove_notif; |
468 | } | |
469 | ||
470 | ret = iwl_wait_notification(&mvm->notif_wait, &wait_scan_abort, 1 * HZ); | |
471 | if (ret) | |
472 | IWL_ERR(mvm, "%s - failed on timeout\n", __func__); | |
473 | ||
474 | return; | |
475 | ||
476 | out_remove_notif: | |
477 | iwl_remove_notification(&mvm->notif_wait, &wait_scan_abort); | |
478 | } | |
35a000b7 DS |
479 | |
480 | int iwl_mvm_rx_scan_offload_complete_notif(struct iwl_mvm *mvm, | |
481 | struct iwl_rx_cmd_buffer *rxb, | |
482 | struct iwl_device_cmd *cmd) | |
483 | { | |
484 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
485 | struct iwl_scan_offload_complete *scan_notif = (void *)pkt->data; | |
486 | ||
487 | IWL_DEBUG_SCAN(mvm, "Scheduled scan completed, status %s\n", | |
488 | scan_notif->status == IWL_SCAN_OFFLOAD_COMPLETED ? | |
489 | "completed" : "aborted"); | |
490 | ||
491 | mvm->scan_status = IWL_MVM_SCAN_NONE; | |
492 | ieee80211_sched_scan_stopped(mvm->hw); | |
493 | ||
494 | return 0; | |
495 | } | |
496 | ||
497 | static void iwl_scan_offload_build_tx_cmd(struct iwl_mvm *mvm, | |
498 | struct ieee80211_vif *vif, | |
499 | struct ieee80211_sched_scan_ies *ies, | |
500 | enum ieee80211_band band, | |
501 | struct iwl_tx_cmd *cmd, | |
502 | u8 *data) | |
503 | { | |
504 | u16 cmd_len; | |
505 | ||
506 | cmd->tx_flags = cpu_to_le32(TX_CMD_FLG_SEQ_CTL); | |
507 | cmd->life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE); | |
508 | cmd->sta_id = mvm->aux_sta.sta_id; | |
509 | ||
510 | cmd->rate_n_flags = iwl_mvm_scan_rate_n_flags(mvm, band, false); | |
511 | ||
512 | cmd_len = iwl_mvm_fill_probe_req((struct ieee80211_mgmt *)data, | |
513 | vif->addr, | |
514 | 1, NULL, 0, | |
515 | ies->ie[band], ies->len[band], | |
516 | SCAN_OFFLOAD_PROBE_REQ_SIZE); | |
517 | cmd->len = cpu_to_le16(cmd_len); | |
518 | } | |
519 | ||
520 | static void iwl_build_scan_cmd(struct iwl_mvm *mvm, | |
521 | struct ieee80211_vif *vif, | |
522 | struct cfg80211_sched_scan_request *req, | |
523 | struct iwl_scan_offload_cmd *scan) | |
524 | { | |
525 | scan->channel_count = | |
526 | mvm->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels + | |
527 | mvm->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels; | |
528 | scan->quiet_time = cpu_to_le16(IWL_ACTIVE_QUIET_TIME); | |
529 | scan->quiet_plcp_th = cpu_to_le16(IWL_PLCP_QUIET_THRESH); | |
530 | scan->good_CRC_th = IWL_GOOD_CRC_TH_DEFAULT; | |
531 | scan->rx_chain = iwl_mvm_scan_rx_chain(mvm); | |
532 | scan->max_out_time = cpu_to_le32(200 * 1024); | |
533 | scan->suspend_time = iwl_mvm_scan_suspend_time(vif); | |
534 | scan->filter_flags |= cpu_to_le32(MAC_FILTER_ACCEPT_GRP | | |
535 | MAC_FILTER_IN_BEACON); | |
536 | scan->scan_type = cpu_to_le32(SCAN_TYPE_BACKGROUND); | |
537 | scan->rep_count = cpu_to_le32(1); | |
538 | } | |
539 | ||
540 | static int iwl_ssid_exist(u8 *ssid, u8 ssid_len, struct iwl_ssid_ie *ssid_list) | |
541 | { | |
542 | int i; | |
543 | ||
544 | for (i = 0; i < PROBE_OPTION_MAX; i++) { | |
545 | if (!ssid_list[i].len) | |
546 | break; | |
547 | if (ssid_list[i].len == ssid_len && | |
548 | !memcmp(ssid_list->ssid, ssid, ssid_len)) | |
549 | return i; | |
550 | } | |
551 | return -1; | |
552 | } | |
553 | ||
554 | static void iwl_scan_offload_build_ssid(struct cfg80211_sched_scan_request *req, | |
555 | struct iwl_scan_offload_cmd *scan, | |
556 | u32 *ssid_bitmap) | |
557 | { | |
558 | int i, j; | |
559 | int index; | |
560 | ||
561 | /* | |
562 | * copy SSIDs from match list. | |
563 | * iwl_config_sched_scan_profiles() uses the order of these ssids to | |
564 | * config match list. | |
565 | */ | |
566 | for (i = 0; i < req->n_match_sets && i < PROBE_OPTION_MAX; i++) { | |
567 | scan->direct_scan[i].id = WLAN_EID_SSID; | |
568 | scan->direct_scan[i].len = req->match_sets[i].ssid.ssid_len; | |
569 | memcpy(scan->direct_scan[i].ssid, req->match_sets[i].ssid.ssid, | |
570 | scan->direct_scan[i].len); | |
571 | } | |
572 | ||
573 | /* add SSIDs from scan SSID list */ | |
574 | *ssid_bitmap = 0; | |
575 | for (j = 0; j < req->n_ssids && i < PROBE_OPTION_MAX; j++) { | |
576 | index = iwl_ssid_exist(req->ssids[j].ssid, | |
577 | req->ssids[j].ssid_len, | |
578 | scan->direct_scan); | |
579 | if (index < 0) { | |
580 | if (!req->ssids[j].ssid_len) | |
581 | continue; | |
582 | scan->direct_scan[i].id = WLAN_EID_SSID; | |
583 | scan->direct_scan[i].len = req->ssids[j].ssid_len; | |
584 | memcpy(scan->direct_scan[i].ssid, req->ssids[j].ssid, | |
585 | scan->direct_scan[i].len); | |
586 | *ssid_bitmap |= BIT(i + 1); | |
587 | i++; | |
588 | } else { | |
589 | *ssid_bitmap |= BIT(index + 1); | |
590 | } | |
591 | } | |
592 | } | |
593 | ||
594 | static void iwl_build_channel_cfg(struct iwl_mvm *mvm, | |
595 | struct cfg80211_sched_scan_request *req, | |
596 | struct iwl_scan_channel_cfg *channels, | |
597 | enum ieee80211_band band, | |
598 | int *head, int *tail, | |
599 | u32 ssid_bitmap) | |
600 | { | |
601 | struct ieee80211_supported_band *s_band; | |
602 | int n_probes = req->n_ssids; | |
603 | int n_channels = req->n_channels; | |
604 | u8 active_dwell, passive_dwell; | |
605 | int i, j, index = 0; | |
606 | bool partial; | |
607 | ||
608 | /* | |
609 | * We have to configure all supported channels, even if we don't want to | |
610 | * scan on them, but we have to send channels in the order that we want | |
611 | * to scan. So add requested channels to head of the list and others to | |
612 | * the end. | |
613 | */ | |
614 | active_dwell = iwl_mvm_get_active_dwell(band, n_probes); | |
615 | passive_dwell = iwl_mvm_get_passive_dwell(band); | |
616 | s_band = &mvm->nvm_data->bands[band]; | |
617 | ||
618 | for (i = 0; i < s_band->n_channels && *head <= *tail; i++) { | |
619 | partial = false; | |
620 | for (j = 0; j < n_channels; j++) | |
621 | if (s_band->channels[i].center_freq == | |
622 | req->channels[j]->center_freq) { | |
623 | index = *head; | |
624 | (*head)++; | |
625 | /* | |
626 | * Channels that came with the request will be | |
627 | * in partial scan . | |
628 | */ | |
629 | partial = true; | |
630 | break; | |
631 | } | |
632 | if (!partial) { | |
633 | index = *tail; | |
634 | (*tail)--; | |
635 | } | |
636 | channels->channel_number[index] = | |
637 | cpu_to_le16(ieee80211_frequency_to_channel( | |
638 | s_band->channels[i].center_freq)); | |
639 | channels->dwell_time[index][0] = active_dwell; | |
640 | channels->dwell_time[index][1] = passive_dwell; | |
641 | ||
642 | channels->iter_count[index] = cpu_to_le16(1); | |
643 | channels->iter_interval[index] = 0; | |
644 | ||
8fe02e16 | 645 | if (!(s_band->channels[i].flags & IEEE80211_CHAN_NO_IR)) |
35a000b7 DS |
646 | channels->type[index] |= |
647 | cpu_to_le32(IWL_SCAN_OFFLOAD_CHANNEL_ACTIVE); | |
648 | ||
649 | channels->type[index] |= | |
650 | cpu_to_le32(IWL_SCAN_OFFLOAD_CHANNEL_FULL); | |
651 | if (partial) | |
652 | channels->type[index] |= | |
653 | cpu_to_le32(IWL_SCAN_OFFLOAD_CHANNEL_PARTIAL); | |
654 | ||
655 | if (s_band->channels[i].flags & IEEE80211_CHAN_NO_HT40) | |
656 | channels->type[index] |= | |
657 | cpu_to_le32(IWL_SCAN_OFFLOAD_CHANNEL_NARROW); | |
658 | ||
659 | /* scan for all SSIDs from req->ssids */ | |
660 | channels->type[index] |= cpu_to_le32(ssid_bitmap); | |
661 | } | |
662 | } | |
663 | ||
664 | int iwl_mvm_config_sched_scan(struct iwl_mvm *mvm, | |
665 | struct ieee80211_vif *vif, | |
666 | struct cfg80211_sched_scan_request *req, | |
667 | struct ieee80211_sched_scan_ies *ies) | |
668 | { | |
669 | int supported_bands = 0; | |
670 | int band_2ghz = mvm->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels; | |
671 | int band_5ghz = mvm->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels; | |
672 | int head = 0; | |
673 | int tail = band_2ghz + band_5ghz; | |
674 | u32 ssid_bitmap; | |
675 | int cmd_len; | |
676 | int ret; | |
677 | ||
678 | struct iwl_scan_offload_cfg *scan_cfg; | |
679 | struct iwl_host_cmd cmd = { | |
680 | .id = SCAN_OFFLOAD_CONFIG_CMD, | |
681 | .flags = CMD_SYNC, | |
682 | }; | |
683 | ||
684 | lockdep_assert_held(&mvm->mutex); | |
685 | ||
686 | if (band_2ghz) | |
687 | supported_bands++; | |
688 | if (band_5ghz) | |
689 | supported_bands++; | |
690 | ||
691 | cmd_len = sizeof(struct iwl_scan_offload_cfg) + | |
692 | supported_bands * SCAN_OFFLOAD_PROBE_REQ_SIZE; | |
693 | ||
694 | scan_cfg = kzalloc(cmd_len, GFP_KERNEL); | |
695 | if (!scan_cfg) | |
696 | return -ENOMEM; | |
697 | ||
698 | iwl_build_scan_cmd(mvm, vif, req, &scan_cfg->scan_cmd); | |
699 | scan_cfg->scan_cmd.len = cpu_to_le16(cmd_len); | |
700 | ||
701 | iwl_scan_offload_build_ssid(req, &scan_cfg->scan_cmd, &ssid_bitmap); | |
702 | /* build tx frames for supported bands */ | |
703 | if (band_2ghz) { | |
704 | iwl_scan_offload_build_tx_cmd(mvm, vif, ies, | |
705 | IEEE80211_BAND_2GHZ, | |
706 | &scan_cfg->scan_cmd.tx_cmd[0], | |
707 | scan_cfg->data); | |
708 | iwl_build_channel_cfg(mvm, req, &scan_cfg->channel_cfg, | |
709 | IEEE80211_BAND_2GHZ, &head, &tail, | |
710 | ssid_bitmap); | |
711 | } | |
712 | if (band_5ghz) { | |
713 | iwl_scan_offload_build_tx_cmd(mvm, vif, ies, | |
714 | IEEE80211_BAND_5GHZ, | |
715 | &scan_cfg->scan_cmd.tx_cmd[1], | |
716 | scan_cfg->data + | |
717 | SCAN_OFFLOAD_PROBE_REQ_SIZE); | |
718 | iwl_build_channel_cfg(mvm, req, &scan_cfg->channel_cfg, | |
719 | IEEE80211_BAND_5GHZ, &head, &tail, | |
720 | ssid_bitmap); | |
721 | } | |
722 | ||
723 | cmd.data[0] = scan_cfg; | |
724 | cmd.len[0] = cmd_len; | |
725 | cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY; | |
726 | ||
727 | IWL_DEBUG_SCAN(mvm, "Sending scheduled scan config\n"); | |
728 | ||
729 | ret = iwl_mvm_send_cmd(mvm, &cmd); | |
730 | kfree(scan_cfg); | |
731 | return ret; | |
732 | } | |
733 | ||
734 | int iwl_mvm_config_sched_scan_profiles(struct iwl_mvm *mvm, | |
735 | struct cfg80211_sched_scan_request *req) | |
736 | { | |
737 | struct iwl_scan_offload_profile *profile; | |
738 | struct iwl_scan_offload_profile_cfg *profile_cfg; | |
739 | struct iwl_scan_offload_blacklist *blacklist; | |
740 | struct iwl_host_cmd cmd = { | |
741 | .id = SCAN_OFFLOAD_UPDATE_PROFILES_CMD, | |
742 | .flags = CMD_SYNC, | |
743 | .len[1] = sizeof(*profile_cfg), | |
744 | .dataflags[0] = IWL_HCMD_DFL_NOCOPY, | |
745 | .dataflags[1] = IWL_HCMD_DFL_NOCOPY, | |
746 | }; | |
747 | int blacklist_len; | |
748 | int i; | |
749 | int ret; | |
750 | ||
751 | if (WARN_ON(req->n_match_sets > IWL_SCAN_MAX_PROFILES)) | |
752 | return -EIO; | |
753 | ||
754 | if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_SHORT_BL) | |
755 | blacklist_len = IWL_SCAN_SHORT_BLACKLIST_LEN; | |
756 | else | |
757 | blacklist_len = IWL_SCAN_MAX_BLACKLIST_LEN; | |
758 | ||
759 | blacklist = kzalloc(sizeof(*blacklist) * blacklist_len, GFP_KERNEL); | |
760 | if (!blacklist) | |
761 | return -ENOMEM; | |
762 | ||
763 | profile_cfg = kzalloc(sizeof(*profile_cfg), GFP_KERNEL); | |
764 | if (!profile_cfg) { | |
765 | ret = -ENOMEM; | |
766 | goto free_blacklist; | |
767 | } | |
768 | ||
769 | cmd.data[0] = blacklist; | |
770 | cmd.len[0] = sizeof(*blacklist) * blacklist_len; | |
771 | cmd.data[1] = profile_cfg; | |
772 | ||
773 | /* No blacklist configuration */ | |
774 | ||
775 | profile_cfg->num_profiles = req->n_match_sets; | |
776 | profile_cfg->active_clients = SCAN_CLIENT_SCHED_SCAN; | |
777 | profile_cfg->pass_match = SCAN_CLIENT_SCHED_SCAN; | |
778 | profile_cfg->match_notify = SCAN_CLIENT_SCHED_SCAN; | |
779 | ||
780 | for (i = 0; i < req->n_match_sets; i++) { | |
781 | profile = &profile_cfg->profiles[i]; | |
782 | profile->ssid_index = i; | |
783 | /* Support any cipher and auth algorithm */ | |
784 | profile->unicast_cipher = 0xff; | |
785 | profile->auth_alg = 0xff; | |
786 | profile->network_type = IWL_NETWORK_TYPE_ANY; | |
787 | profile->band_selection = IWL_SCAN_OFFLOAD_SELECT_ANY; | |
788 | profile->client_bitmap = SCAN_CLIENT_SCHED_SCAN; | |
789 | } | |
790 | ||
791 | IWL_DEBUG_SCAN(mvm, "Sending scheduled scan profile config\n"); | |
792 | ||
793 | ret = iwl_mvm_send_cmd(mvm, &cmd); | |
794 | kfree(profile_cfg); | |
795 | free_blacklist: | |
796 | kfree(blacklist); | |
797 | ||
798 | return ret; | |
799 | } | |
800 | ||
801 | int iwl_mvm_sched_scan_start(struct iwl_mvm *mvm, | |
802 | struct cfg80211_sched_scan_request *req) | |
803 | { | |
804 | struct iwl_scan_offload_req scan_req = { | |
805 | .watchdog = IWL_SCHED_SCAN_WATCHDOG, | |
806 | ||
807 | .schedule_line[0].iterations = IWL_FAST_SCHED_SCAN_ITERATIONS, | |
808 | .schedule_line[0].delay = req->interval / 1000, | |
809 | .schedule_line[0].full_scan_mul = 1, | |
810 | ||
811 | .schedule_line[1].iterations = 0xff, | |
812 | .schedule_line[1].delay = req->interval / 1000, | |
813 | .schedule_line[1].full_scan_mul = IWL_FULL_SCAN_MULTIPLIER, | |
814 | }; | |
815 | ||
816 | if (req->n_match_sets && req->match_sets[0].ssid.ssid_len) { | |
817 | IWL_DEBUG_SCAN(mvm, | |
818 | "Sending scheduled scan with filtering, filter len %d\n", | |
819 | req->n_match_sets); | |
820 | scan_req.flags |= | |
821 | cpu_to_le16(IWL_SCAN_OFFLOAD_FLAG_FILTER_SSID); | |
822 | } else { | |
823 | IWL_DEBUG_SCAN(mvm, | |
824 | "Sending Scheduled scan without filtering\n"); | |
825 | } | |
826 | ||
827 | return iwl_mvm_send_cmd_pdu(mvm, SCAN_OFFLOAD_REQUEST_CMD, CMD_SYNC, | |
828 | sizeof(scan_req), &scan_req); | |
829 | } | |
830 | ||
831 | static int iwl_mvm_send_sched_scan_abort(struct iwl_mvm *mvm) | |
832 | { | |
833 | int ret; | |
834 | struct iwl_host_cmd cmd = { | |
835 | .id = SCAN_OFFLOAD_ABORT_CMD, | |
836 | .flags = CMD_SYNC, | |
837 | }; | |
838 | u32 status; | |
839 | ||
840 | /* Exit instantly with error when device is not ready | |
841 | * to receive scan abort command or it does not perform | |
842 | * scheduled scan currently */ | |
843 | if (mvm->scan_status != IWL_MVM_SCAN_SCHED) | |
844 | return -EIO; | |
845 | ||
846 | ret = iwl_mvm_send_cmd_status(mvm, &cmd, &status); | |
847 | if (ret) | |
848 | return ret; | |
849 | ||
850 | if (status != CAN_ABORT_STATUS) { | |
851 | /* | |
852 | * The scan abort will return 1 for success or | |
853 | * 2 for "failure". A failure condition can be | |
854 | * due to simply not being in an active scan which | |
855 | * can occur if we send the scan abort before the | |
856 | * microcode has notified us that a scan is completed. | |
857 | */ | |
858 | IWL_DEBUG_SCAN(mvm, "SCAN OFFLOAD ABORT ret %d.\n", status); | |
859 | ret = -EIO; | |
860 | } | |
861 | ||
862 | return ret; | |
863 | } | |
864 | ||
865 | void iwl_mvm_sched_scan_stop(struct iwl_mvm *mvm) | |
866 | { | |
867 | int ret; | |
868 | ||
869 | lockdep_assert_held(&mvm->mutex); | |
870 | ||
871 | if (mvm->scan_status != IWL_MVM_SCAN_SCHED) { | |
872 | IWL_DEBUG_SCAN(mvm, "No offloaded scan to stop\n"); | |
873 | return; | |
874 | } | |
875 | ||
876 | ret = iwl_mvm_send_sched_scan_abort(mvm); | |
877 | if (ret) | |
878 | IWL_DEBUG_SCAN(mvm, "Send stop offload scan failed %d\n", ret); | |
879 | else | |
880 | IWL_DEBUG_SCAN(mvm, "Successfully sent stop offload scan\n"); | |
881 | } |