Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
b8695a8f JB |
2 | /* |
3 | * HT handling | |
4 | * | |
5 | * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> | |
6 | * Copyright 2002-2005, Instant802 Networks, Inc. | |
7 | * Copyright 2005-2006, Devicescape Software, Inc. | |
8 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
9 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
a93e3644 | 10 | * Copyright 2007-2010, Intel Corporation |
04c2cf34 | 11 | * Copyright(c) 2015-2017 Intel Deutschland GmbH |
93382a0d | 12 | * Copyright (C) 2018-2020 Intel Corporation |
b8695a8f JB |
13 | */ |
14 | ||
73a72a81 JB |
15 | /** |
16 | * DOC: RX A-MPDU aggregation | |
17 | * | |
18 | * Aggregation on the RX side requires only implementing the | |
19 | * @ampdu_action callback that is invoked to start/stop any | |
20 | * block-ack sessions for RX aggregation. | |
21 | * | |
22 | * When RX aggregation is started by the peer, the driver is | |
23 | * notified via @ampdu_action function, with the | |
24 | * %IEEE80211_AMPDU_RX_START action, and may reject the request | |
25 | * in which case a negative response is sent to the peer, if it | |
26 | * accepts it a positive response is sent. | |
27 | * | |
28 | * While the session is active, the device/driver are required | |
29 | * to de-aggregate frames and pass them up one by one to mac80211, | |
30 | * which will handle the reorder buffer. | |
31 | * | |
32 | * When the aggregation session is stopped again by the peer or | |
33 | * ourselves, the driver's @ampdu_action function will be called | |
34 | * with the action %IEEE80211_AMPDU_RX_STOP. In this case, the | |
35 | * call must not fail. | |
36 | */ | |
37 | ||
b8695a8f | 38 | #include <linux/ieee80211.h> |
5a0e3ad6 | 39 | #include <linux/slab.h> |
bc3b2d7f | 40 | #include <linux/export.h> |
b8695a8f JB |
41 | #include <net/mac80211.h> |
42 | #include "ieee80211_i.h" | |
24487981 | 43 | #include "driver-ops.h" |
b8695a8f | 44 | |
a87f736d JB |
45 | static void ieee80211_free_tid_rx(struct rcu_head *h) |
46 | { | |
47 | struct tid_ampdu_rx *tid_rx = | |
48 | container_of(h, struct tid_ampdu_rx, rcu_head); | |
49 | int i; | |
50 | ||
51 | for (i = 0; i < tid_rx->buf_size; i++) | |
83eb935e | 52 | __skb_queue_purge(&tid_rx->reorder_buf[i]); |
a87f736d JB |
53 | kfree(tid_rx->reorder_buf); |
54 | kfree(tid_rx->reorder_time); | |
55 | kfree(tid_rx); | |
56 | } | |
57 | ||
7c3b1dd8 | 58 | void ___ieee80211_stop_rx_ba_session(struct sta_info *sta, u16 tid, |
53f73c09 | 59 | u16 initiator, u16 reason, bool tx) |
b8695a8f | 60 | { |
d75636ef | 61 | struct ieee80211_local *local = sta->local; |
098a6070 | 62 | struct tid_ampdu_rx *tid_rx; |
50ea05ef SS |
63 | struct ieee80211_ampdu_params params = { |
64 | .sta = &sta->sta, | |
65 | .action = IEEE80211_AMPDU_RX_STOP, | |
66 | .tid = tid, | |
67 | .amsdu = false, | |
68 | .timeout = 0, | |
69 | .ssn = 0, | |
70 | }; | |
b8695a8f | 71 | |
a93e3644 | 72 | lockdep_assert_held(&sta->ampdu_mlme.mtx); |
098a6070 | 73 | |
40b275b6 JB |
74 | tid_rx = rcu_dereference_protected(sta->ampdu_mlme.tid_rx[tid], |
75 | lockdep_is_held(&sta->ampdu_mlme.mtx)); | |
a87f736d | 76 | |
412a6d80 | 77 | if (!test_bit(tid, sta->ampdu_mlme.agg_session_valid)) |
b8695a8f | 78 | return; |
d75636ef | 79 | |
a9b3cd7f | 80 | RCU_INIT_POINTER(sta->ampdu_mlme.tid_rx[tid], NULL); |
412a6d80 | 81 | __clear_bit(tid, sta->ampdu_mlme.agg_session_valid); |
b8695a8f | 82 | |
bdcbd8e0 JB |
83 | ht_dbg(sta->sdata, |
84 | "Rx BA session stop requested for %pM tid %u %s reason: %d\n", | |
85 | sta->sta.addr, tid, | |
09e0a2fe | 86 | initiator == WLAN_BACK_RECIPIENT ? "recipient" : "initiator", |
bdcbd8e0 | 87 | (int)reason); |
b8695a8f | 88 | |
50ea05ef | 89 | if (drv_ampdu_action(local, sta->sdata, ¶ms)) |
bdcbd8e0 | 90 | sdata_info(sta->sdata, |
0a214d3f JB |
91 | "HW problem - can not stop rx aggregation for %pM tid %d\n", |
92 | sta->sta.addr, tid); | |
b8695a8f | 93 | |
b8695a8f | 94 | /* check if this is a self generated aggregation halt */ |
53f73c09 | 95 | if (initiator == WLAN_BACK_RECIPIENT && tx) |
d75636ef | 96 | ieee80211_send_delba(sta->sdata, sta->sta.addr, |
a7f39f60 | 97 | tid, WLAN_BACK_RECIPIENT, reason); |
b8695a8f | 98 | |
412a6d80 SS |
99 | /* |
100 | * return here in case tid_rx is not assigned - which will happen if | |
101 | * IEEE80211_HW_SUPPORTS_REORDERING_BUFFER is set. | |
102 | */ | |
103 | if (!tid_rx) | |
104 | return; | |
105 | ||
7c3b1dd8 | 106 | del_timer_sync(&tid_rx->session_timer); |
a87f736d | 107 | |
788211d8 JB |
108 | /* make sure ieee80211_sta_reorder_release() doesn't re-arm the timer */ |
109 | spin_lock_bh(&tid_rx->reorder_lock); | |
110 | tid_rx->removed = true; | |
111 | spin_unlock_bh(&tid_rx->reorder_lock); | |
112 | del_timer_sync(&tid_rx->reorder_timer); | |
113 | ||
a87f736d | 114 | call_rcu(&tid_rx->rcu_head, ieee80211_free_tid_rx); |
b8695a8f JB |
115 | } |
116 | ||
2aab4c27 | 117 | void __ieee80211_stop_rx_ba_session(struct sta_info *sta, u16 tid, |
53f73c09 | 118 | u16 initiator, u16 reason, bool tx) |
2aab4c27 | 119 | { |
a93e3644 | 120 | mutex_lock(&sta->ampdu_mlme.mtx); |
53f73c09 | 121 | ___ieee80211_stop_rx_ba_session(sta, tid, initiator, reason, tx); |
a93e3644 | 122 | mutex_unlock(&sta->ampdu_mlme.mtx); |
2aab4c27 JB |
123 | } |
124 | ||
f41ccd71 SL |
125 | void ieee80211_stop_rx_ba_session(struct ieee80211_vif *vif, u16 ba_rx_bitmap, |
126 | const u8 *addr) | |
127 | { | |
128 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
0a557ed3 | 129 | struct sta_info *sta; |
f41ccd71 SL |
130 | int i; |
131 | ||
0a557ed3 | 132 | rcu_read_lock(); |
bc192f89 | 133 | sta = sta_info_get_bss(sdata, addr); |
0a557ed3 EP |
134 | if (!sta) { |
135 | rcu_read_unlock(); | |
136 | return; | |
137 | } | |
138 | ||
5a306f58 | 139 | for (i = 0; i < IEEE80211_NUM_TIDS; i++) |
f41ccd71 SL |
140 | if (ba_rx_bitmap & BIT(i)) |
141 | set_bit(i, sta->ampdu_mlme.tid_rx_stop_requested); | |
142 | ||
143 | ieee80211_queue_work(&sta->local->hw, &sta->ampdu_mlme.work); | |
0a557ed3 | 144 | rcu_read_unlock(); |
f41ccd71 SL |
145 | } |
146 | EXPORT_SYMBOL(ieee80211_stop_rx_ba_session); | |
147 | ||
b8695a8f JB |
148 | /* |
149 | * After accepting the AddBA Request we activated a timer, | |
150 | * resetting it after each frame that arrives from the originator. | |
b8695a8f | 151 | */ |
7cca2acd | 152 | static void sta_rx_agg_session_timer_expired(struct timer_list *t) |
b8695a8f | 153 | { |
d559e303 JB |
154 | struct tid_ampdu_rx *tid_rx = from_timer(tid_rx, t, session_timer); |
155 | struct sta_info *sta = tid_rx->sta; | |
156 | u8 tid = tid_rx->tid; | |
12d3952f FF |
157 | unsigned long timeout; |
158 | ||
12d3952f FF |
159 | timeout = tid_rx->last_rx + TU_TO_JIFFIES(tid_rx->timeout); |
160 | if (time_is_after_jiffies(timeout)) { | |
161 | mod_timer(&tid_rx->session_timer, timeout); | |
162 | return; | |
163 | } | |
b8695a8f | 164 | |
0a214d3f | 165 | ht_dbg(sta->sdata, "RX session timer expired on %pM tid %d\n", |
7cca2acd | 166 | sta->sta.addr, tid); |
d63e9ae3 | 167 | |
7cca2acd | 168 | set_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired); |
7c3b1dd8 | 169 | ieee80211_queue_work(&sta->local->hw, &sta->ampdu_mlme.work); |
b8695a8f JB |
170 | } |
171 | ||
7cca2acd | 172 | static void sta_rx_agg_reorder_timer_expired(struct timer_list *t) |
2bff8ebf | 173 | { |
7cca2acd | 174 | struct tid_ampdu_rx *tid_rx = from_timer(tid_rx, t, reorder_timer); |
2bff8ebf CL |
175 | |
176 | rcu_read_lock(); | |
7cca2acd | 177 | ieee80211_release_reorder_timeout(tid_rx->sta, tid_rx->tid); |
2bff8ebf CL |
178 | rcu_read_unlock(); |
179 | } | |
180 | ||
2ab45876 JC |
181 | static void ieee80211_add_addbaext(struct ieee80211_sub_if_data *sdata, |
182 | struct sk_buff *skb, | |
183 | const struct ieee80211_addba_ext_ie *req) | |
184 | { | |
185 | struct ieee80211_supported_band *sband; | |
186 | struct ieee80211_addba_ext_ie *resp; | |
187 | const struct ieee80211_sta_he_cap *he_cap; | |
188 | u8 frag_level, cap_frag_level; | |
189 | u8 *pos; | |
190 | ||
191 | sband = ieee80211_get_sband(sdata); | |
f12cac53 CIK |
192 | if (!sband) |
193 | return; | |
2ab45876 JC |
194 | he_cap = ieee80211_get_he_iftype_cap(sband, sdata->vif.type); |
195 | if (!he_cap) | |
196 | return; | |
197 | ||
198 | pos = skb_put_zero(skb, 2 + sizeof(struct ieee80211_addba_ext_ie)); | |
199 | *pos++ = WLAN_EID_ADDBA_EXT; | |
200 | *pos++ = sizeof(struct ieee80211_addba_ext_ie); | |
201 | resp = (struct ieee80211_addba_ext_ie *)pos; | |
202 | resp->data = req->data & IEEE80211_ADDBA_EXT_NO_FRAG; | |
203 | ||
204 | frag_level = u32_get_bits(req->data, | |
205 | IEEE80211_ADDBA_EXT_FRAG_LEVEL_MASK); | |
206 | cap_frag_level = u32_get_bits(he_cap->he_cap_elem.mac_cap_info[0], | |
207 | IEEE80211_HE_MAC_CAP0_DYNAMIC_FRAG_MASK); | |
208 | if (frag_level > cap_frag_level) | |
209 | frag_level = cap_frag_level; | |
210 | resp->data |= u8_encode_bits(frag_level, | |
211 | IEEE80211_ADDBA_EXT_FRAG_LEVEL_MASK); | |
212 | } | |
213 | ||
214 | static void ieee80211_send_addba_resp(struct sta_info *sta, u8 *da, u16 tid, | |
b8695a8f | 215 | u8 dialog_token, u16 status, u16 policy, |
2ab45876 JC |
216 | u16 buf_size, u16 timeout, |
217 | const struct ieee80211_addba_ext_ie *addbaext) | |
b8695a8f | 218 | { |
2ab45876 | 219 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
b8695a8f JB |
220 | struct ieee80211_local *local = sdata->local; |
221 | struct sk_buff *skb; | |
222 | struct ieee80211_mgmt *mgmt; | |
99e7ca44 | 223 | bool amsdu = ieee80211_hw_check(&local->hw, SUPPORTS_AMSDU_IN_AMPDU); |
b8695a8f JB |
224 | u16 capab; |
225 | ||
2ab45876 JC |
226 | skb = dev_alloc_skb(sizeof(*mgmt) + |
227 | 2 + sizeof(struct ieee80211_addba_ext_ie) + | |
228 | local->hw.extra_tx_headroom); | |
d15b8459 | 229 | if (!skb) |
b8695a8f | 230 | return; |
b8695a8f JB |
231 | |
232 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
b080db58 | 233 | mgmt = skb_put_zero(skb, 24); |
b8695a8f | 234 | memcpy(mgmt->da, da, ETH_ALEN); |
47846c9b | 235 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); |
8abd3f9b | 236 | if (sdata->vif.type == NL80211_IFTYPE_AP || |
ae2772b3 TP |
237 | sdata->vif.type == NL80211_IFTYPE_AP_VLAN || |
238 | sdata->vif.type == NL80211_IFTYPE_MESH_POINT) | |
47846c9b | 239 | memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); |
46900298 JB |
240 | else if (sdata->vif.type == NL80211_IFTYPE_STATION) |
241 | memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN); | |
13c40c54 AS |
242 | else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) |
243 | memcpy(mgmt->bssid, sdata->u.ibss.bssid, ETH_ALEN); | |
46900298 | 244 | |
b8695a8f JB |
245 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | |
246 | IEEE80211_STYPE_ACTION); | |
247 | ||
248 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_resp)); | |
249 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
250 | mgmt->u.action.u.addba_resp.action_code = WLAN_ACTION_ADDBA_RESP; | |
251 | mgmt->u.action.u.addba_resp.dialog_token = dialog_token; | |
252 | ||
db8ebd06 JB |
253 | capab = u16_encode_bits(amsdu, IEEE80211_ADDBA_PARAM_AMSDU_MASK); |
254 | capab |= u16_encode_bits(policy, IEEE80211_ADDBA_PARAM_POLICY_MASK); | |
255 | capab |= u16_encode_bits(tid, IEEE80211_ADDBA_PARAM_TID_MASK); | |
256 | capab |= u16_encode_bits(buf_size, IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK); | |
b8695a8f JB |
257 | |
258 | mgmt->u.action.u.addba_resp.capab = cpu_to_le16(capab); | |
259 | mgmt->u.action.u.addba_resp.timeout = cpu_to_le16(timeout); | |
260 | mgmt->u.action.u.addba_resp.status = cpu_to_le16(status); | |
261 | ||
2ab45876 JC |
262 | if (sta->sta.he_cap.has_he && addbaext) |
263 | ieee80211_add_addbaext(sdata, skb, addbaext); | |
264 | ||
62ae67be | 265 | ieee80211_tx_skb(sdata, skb); |
b8695a8f JB |
266 | } |
267 | ||
bde59c47 JB |
268 | void ___ieee80211_start_rx_ba_session(struct sta_info *sta, |
269 | u8 dialog_token, u16 timeout, | |
270 | u16 start_seq_num, u16 ba_policy, u16 tid, | |
2ab45876 JC |
271 | u16 buf_size, bool tx, bool auto_seq, |
272 | const struct ieee80211_addba_ext_ie *addbaext) | |
b8695a8f | 273 | { |
08cf42e8 | 274 | struct ieee80211_local *local = sta->sdata->local; |
b8695a8f | 275 | struct tid_ampdu_rx *tid_agg_rx; |
50ea05ef SS |
276 | struct ieee80211_ampdu_params params = { |
277 | .sta = &sta->sta, | |
278 | .action = IEEE80211_AMPDU_RX_START, | |
279 | .tid = tid, | |
280 | .amsdu = false, | |
281 | .timeout = timeout, | |
282 | .ssn = start_seq_num, | |
283 | }; | |
83eb935e | 284 | int i, ret = -EOPNOTSUPP; |
08cf42e8 | 285 | u16 status = WLAN_STATUS_REQUEST_DECLINED; |
41cbb0f5 | 286 | u16 max_buf_size; |
b8695a8f | 287 | |
85d5313e JB |
288 | if (tid >= IEEE80211_FIRST_TSPEC_TSID) { |
289 | ht_dbg(sta->sdata, | |
290 | "STA %pM requests BA session on unsupported tid %d\n", | |
291 | sta->sta.addr, tid); | |
bde59c47 | 292 | goto end; |
85d5313e JB |
293 | } |
294 | ||
93382a0d JB |
295 | if (!sta->sta.ht_cap.ht_supported && |
296 | sta->sdata->vif.bss_conf.chandef.chan->band != NL80211_BAND_6GHZ) { | |
8f9c77fc JB |
297 | ht_dbg(sta->sdata, |
298 | "STA %pM erroneously requests BA session on tid %d w/o QoS\n", | |
299 | sta->sta.addr, tid); | |
300 | /* send a response anyway, it's an error case if we get here */ | |
bde59c47 | 301 | goto end; |
8f9c77fc JB |
302 | } |
303 | ||
c2c98fde | 304 | if (test_sta_flag(sta, WLAN_STA_BLOCK_BA)) { |
0a214d3f JB |
305 | ht_dbg(sta->sdata, |
306 | "Suspend in progress - Denying ADDBA request (%pM tid %d)\n", | |
307 | sta->sta.addr, tid); | |
bde59c47 | 308 | goto end; |
722f069a S |
309 | } |
310 | ||
41cbb0f5 LC |
311 | if (sta->sta.he_cap.has_he) |
312 | max_buf_size = IEEE80211_MAX_AMPDU_BUF; | |
313 | else | |
314 | max_buf_size = IEEE80211_MAX_AMPDU_BUF_HT; | |
315 | ||
b8695a8f JB |
316 | /* sanity check for incoming parameters: |
317 | * check if configuration can support the BA policy | |
318 | * and if buffer size does not exceeds max value */ | |
319 | /* XXX: check own ht delayed BA capability?? */ | |
f64f9e71 JP |
320 | if (((ba_policy != 1) && |
321 | (!(sta->sta.ht_cap.cap & IEEE80211_HT_CAP_DELAY_BA))) || | |
41cbb0f5 | 322 | (buf_size > max_buf_size)) { |
b8695a8f | 323 | status = WLAN_STATUS_INVALID_QOS_PARAM; |
bdcbd8e0 JB |
324 | ht_dbg_ratelimited(sta->sdata, |
325 | "AddBA Req with bad params from %pM on tid %u. policy %d, buffer size %d\n", | |
08cf42e8 | 326 | sta->sta.addr, tid, ba_policy, buf_size); |
bde59c47 | 327 | goto end; |
b8695a8f JB |
328 | } |
329 | /* determine default buffer size */ | |
82694f76 | 330 | if (buf_size == 0) |
41cbb0f5 | 331 | buf_size = max_buf_size; |
b8695a8f | 332 | |
df6ba5d8 | 333 | /* make sure the size doesn't exceed the maximum supported by the hw */ |
480dd46b MA |
334 | if (buf_size > sta->sta.max_rx_aggregation_subframes) |
335 | buf_size = sta->sta.max_rx_aggregation_subframes; | |
50ea05ef | 336 | params.buf_size = buf_size; |
b8695a8f | 337 | |
480dd46b MA |
338 | ht_dbg(sta->sdata, "AddBA Req buf_size=%d for %pM\n", |
339 | buf_size, sta->sta.addr); | |
340 | ||
b8695a8f | 341 | /* examine state machine */ |
bde59c47 | 342 | lockdep_assert_held(&sta->ampdu_mlme.mtx); |
b8695a8f | 343 | |
412a6d80 | 344 | if (test_bit(tid, sta->ampdu_mlme.agg_session_valid)) { |
1c3d185a | 345 | if (sta->ampdu_mlme.tid_rx_token[tid] == dialog_token) { |
21b7022f IP |
346 | struct tid_ampdu_rx *tid_rx; |
347 | ||
f89e07d4 JB |
348 | ht_dbg_ratelimited(sta->sdata, |
349 | "updated AddBA Req from %pM on tid %u\n", | |
350 | sta->sta.addr, tid); | |
351 | /* We have no API to update the timeout value in the | |
21b7022f | 352 | * driver so reject the timeout update if the timeout |
39f774e7 | 353 | * changed. If it did not change, i.e., no real update, |
21b7022f | 354 | * just reply with success. |
f89e07d4 | 355 | */ |
21b7022f IP |
356 | rcu_read_lock(); |
357 | tid_rx = rcu_dereference(sta->ampdu_mlme.tid_rx[tid]); | |
358 | if (tid_rx && tid_rx->timeout == timeout) | |
359 | status = WLAN_STATUS_SUCCESS; | |
360 | else | |
361 | status = WLAN_STATUS_REQUEST_DECLINED; | |
362 | rcu_read_unlock(); | |
f89e07d4 JB |
363 | goto end; |
364 | } | |
365 | ||
bdcbd8e0 JB |
366 | ht_dbg_ratelimited(sta->sdata, |
367 | "unexpected AddBA Req from %pM on tid %u\n", | |
08cf42e8 | 368 | sta->sta.addr, tid); |
15b4d843 AN |
369 | |
370 | /* delete existing Rx BA session on the same tid */ | |
371 | ___ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_RECIPIENT, | |
372 | WLAN_STATUS_UNSPECIFIED_QOS, | |
373 | false); | |
b8695a8f JB |
374 | } |
375 | ||
412a6d80 SS |
376 | if (ieee80211_hw_check(&local->hw, SUPPORTS_REORDERING_BUFFER)) { |
377 | ret = drv_ampdu_action(local, sta->sdata, ¶ms); | |
378 | ht_dbg(sta->sdata, | |
379 | "Rx A-MPDU request on %pM tid %d result %d\n", | |
380 | sta->sta.addr, tid, ret); | |
381 | if (!ret) | |
382 | status = WLAN_STATUS_SUCCESS; | |
383 | goto end; | |
384 | } | |
385 | ||
b8695a8f | 386 | /* prepare A-MPDU MLME for Rx aggregation */ |
f39ea269 | 387 | tid_agg_rx = kzalloc(sizeof(*tid_agg_rx), GFP_KERNEL); |
d15b8459 | 388 | if (!tid_agg_rx) |
b8695a8f | 389 | goto end; |
b8695a8f | 390 | |
2bff8ebf CL |
391 | spin_lock_init(&tid_agg_rx->reorder_lock); |
392 | ||
a87f736d | 393 | /* rx timer */ |
7cca2acd KC |
394 | timer_setup(&tid_agg_rx->session_timer, |
395 | sta_rx_agg_session_timer_expired, TIMER_DEFERRABLE); | |
b8695a8f | 396 | |
2bff8ebf | 397 | /* rx reorder timer */ |
7cca2acd KC |
398 | timer_setup(&tid_agg_rx->reorder_timer, |
399 | sta_rx_agg_reorder_timer_expired, 0); | |
2bff8ebf | 400 | |
b8695a8f JB |
401 | /* prepare reordering buffer */ |
402 | tid_agg_rx->reorder_buf = | |
83eb935e | 403 | kcalloc(buf_size, sizeof(struct sk_buff_head), GFP_KERNEL); |
4d050f1d | 404 | tid_agg_rx->reorder_time = |
dd318575 | 405 | kcalloc(buf_size, sizeof(unsigned long), GFP_KERNEL); |
4d050f1d | 406 | if (!tid_agg_rx->reorder_buf || !tid_agg_rx->reorder_time) { |
4d050f1d JM |
407 | kfree(tid_agg_rx->reorder_buf); |
408 | kfree(tid_agg_rx->reorder_time); | |
a87f736d | 409 | kfree(tid_agg_rx); |
b8695a8f JB |
410 | goto end; |
411 | } | |
412 | ||
83eb935e MK |
413 | for (i = 0; i < buf_size; i++) |
414 | __skb_queue_head_init(&tid_agg_rx->reorder_buf[i]); | |
415 | ||
50ea05ef | 416 | ret = drv_ampdu_action(local, sta->sdata, ¶ms); |
0a214d3f JB |
417 | ht_dbg(sta->sdata, "Rx A-MPDU request on %pM tid %d result %d\n", |
418 | sta->sta.addr, tid, ret); | |
b8695a8f JB |
419 | if (ret) { |
420 | kfree(tid_agg_rx->reorder_buf); | |
a87f736d | 421 | kfree(tid_agg_rx->reorder_time); |
b8695a8f | 422 | kfree(tid_agg_rx); |
b8695a8f JB |
423 | goto end; |
424 | } | |
425 | ||
a87f736d | 426 | /* update data */ |
b8695a8f JB |
427 | tid_agg_rx->ssn = start_seq_num; |
428 | tid_agg_rx->head_seq_num = start_seq_num; | |
429 | tid_agg_rx->buf_size = buf_size; | |
430 | tid_agg_rx->timeout = timeout; | |
431 | tid_agg_rx->stored_mpdu_num = 0; | |
4549cf2b | 432 | tid_agg_rx->auto_seq = auto_seq; |
b7540d8f | 433 | tid_agg_rx->started = false; |
06470f74 | 434 | tid_agg_rx->reorder_buf_filtered = 0; |
7cca2acd KC |
435 | tid_agg_rx->tid = tid; |
436 | tid_agg_rx->sta = sta; | |
b8695a8f | 437 | status = WLAN_STATUS_SUCCESS; |
a87f736d JB |
438 | |
439 | /* activate it for RX */ | |
cf778b00 | 440 | rcu_assign_pointer(sta->ampdu_mlme.tid_rx[tid], tid_agg_rx); |
f955ebb4 | 441 | |
12d3952f | 442 | if (timeout) { |
f955ebb4 | 443 | mod_timer(&tid_agg_rx->session_timer, TU_TO_EXP_TIME(timeout)); |
12d3952f FF |
444 | tid_agg_rx->last_rx = jiffies; |
445 | } | |
f955ebb4 | 446 | |
b8695a8f | 447 | end: |
bfe40fa3 | 448 | if (status == WLAN_STATUS_SUCCESS) { |
412a6d80 | 449 | __set_bit(tid, sta->ampdu_mlme.agg_session_valid); |
bfe40fa3 | 450 | __clear_bit(tid, sta->ampdu_mlme.unexpected_agg); |
1c3d185a | 451 | sta->ampdu_mlme.tid_rx_token[tid] = dialog_token; |
bfe40fa3 | 452 | } |
b8695a8f | 453 | |
08cf42e8 | 454 | if (tx) |
2ab45876 | 455 | ieee80211_send_addba_resp(sta, sta->sta.addr, tid, |
08cf42e8 | 456 | dialog_token, status, 1, buf_size, |
2ab45876 | 457 | timeout, addbaext); |
08cf42e8 MK |
458 | } |
459 | ||
a9d09bc1 JB |
460 | static void __ieee80211_start_rx_ba_session(struct sta_info *sta, |
461 | u8 dialog_token, u16 timeout, | |
462 | u16 start_seq_num, u16 ba_policy, | |
463 | u16 tid, u16 buf_size, bool tx, | |
2ab45876 JC |
464 | bool auto_seq, |
465 | const struct ieee80211_addba_ext_ie *addbaext) | |
bde59c47 JB |
466 | { |
467 | mutex_lock(&sta->ampdu_mlme.mtx); | |
468 | ___ieee80211_start_rx_ba_session(sta, dialog_token, timeout, | |
469 | start_seq_num, ba_policy, tid, | |
2ab45876 | 470 | buf_size, tx, auto_seq, addbaext); |
bde59c47 JB |
471 | mutex_unlock(&sta->ampdu_mlme.mtx); |
472 | } | |
473 | ||
08cf42e8 MK |
474 | void ieee80211_process_addba_request(struct ieee80211_local *local, |
475 | struct sta_info *sta, | |
476 | struct ieee80211_mgmt *mgmt, | |
477 | size_t len) | |
478 | { | |
479 | u16 capab, tid, timeout, ba_policy, buf_size, start_seq_num; | |
6628d001 | 480 | struct ieee802_11_elems elems = { }; |
08cf42e8 | 481 | u8 dialog_token; |
2ab45876 | 482 | int ies_len; |
08cf42e8 MK |
483 | |
484 | /* extract session parameters from addba request frame */ | |
485 | dialog_token = mgmt->u.action.u.addba_req.dialog_token; | |
486 | timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout); | |
487 | start_seq_num = | |
488 | le16_to_cpu(mgmt->u.action.u.addba_req.start_seq_num) >> 4; | |
489 | ||
490 | capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab); | |
491 | ba_policy = (capab & IEEE80211_ADDBA_PARAM_POLICY_MASK) >> 1; | |
492 | tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2; | |
493 | buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6; | |
494 | ||
2ab45876 JC |
495 | ies_len = len - offsetof(struct ieee80211_mgmt, |
496 | u.action.u.addba_req.variable); | |
497 | if (ies_len) { | |
498 | ieee802_11_parse_elems(mgmt->u.action.u.addba_req.variable, | |
499 | ies_len, true, &elems, mgmt->bssid, NULL); | |
500 | if (elems.parse_error) | |
501 | return; | |
502 | } | |
503 | ||
08cf42e8 MK |
504 | __ieee80211_start_rx_ba_session(sta, dialog_token, timeout, |
505 | start_seq_num, ba_policy, tid, | |
2ab45876 JC |
506 | buf_size, true, false, |
507 | elems.addba_ext_ie); | |
08cf42e8 MK |
508 | } |
509 | ||
699cb58c | 510 | void ieee80211_manage_rx_ba_offl(struct ieee80211_vif *vif, |
1272c5d8 | 511 | const u8 *addr, unsigned int tid) |
08cf42e8 MK |
512 | { |
513 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
514 | struct ieee80211_local *local = sdata->local; | |
699cb58c | 515 | struct sta_info *sta; |
08cf42e8 | 516 | |
699cb58c JB |
517 | rcu_read_lock(); |
518 | sta = sta_info_get_bss(sdata, addr); | |
519 | if (!sta) | |
520 | goto unlock; | |
08cf42e8 | 521 | |
1272c5d8 | 522 | set_bit(tid, sta->ampdu_mlme.tid_rx_manage_offl); |
699cb58c JB |
523 | ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work); |
524 | unlock: | |
525 | rcu_read_unlock(); | |
b8695a8f | 526 | } |
699cb58c | 527 | EXPORT_SYMBOL(ieee80211_manage_rx_ba_offl); |
04c2cf34 NG |
528 | |
529 | void ieee80211_rx_ba_timer_expired(struct ieee80211_vif *vif, | |
530 | const u8 *addr, unsigned int tid) | |
531 | { | |
532 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
533 | struct ieee80211_local *local = sdata->local; | |
534 | struct sta_info *sta; | |
535 | ||
536 | rcu_read_lock(); | |
537 | sta = sta_info_get_bss(sdata, addr); | |
538 | if (!sta) | |
539 | goto unlock; | |
540 | ||
541 | set_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired); | |
542 | ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work); | |
543 | ||
544 | unlock: | |
545 | rcu_read_unlock(); | |
546 | } | |
547 | EXPORT_SYMBOL(ieee80211_rx_ba_timer_expired); |