[linux-block.git] / net / mac80211 / ht.c

/*
 * HT handling
 *
 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
 * Copyright 2007-2010, Intel Corporation
 * Copyright 2017	Intel Deutschland GmbH
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/ieee80211.h>
#include <linux/export.h>
#include <net/mac80211.h>
#include "ieee80211_i.h"
#include "rate.h"

static void __check_htcap_disable(struct ieee80211_ht_cap *ht_capa,
				  struct ieee80211_ht_cap *ht_capa_mask,
				  struct ieee80211_sta_ht_cap *ht_cap,
				  u16 flag)
{
	__le16 le_flag = cpu_to_le16(flag);
	if (ht_capa_mask->cap_info & le_flag) {
		if (!(ht_capa->cap_info & le_flag))
			ht_cap->cap &= ~flag;
	}
}

static void __check_htcap_enable(struct ieee80211_ht_cap *ht_capa,
				  struct ieee80211_ht_cap *ht_capa_mask,
				  struct ieee80211_sta_ht_cap *ht_cap,
				  u16 flag)
{
	__le16 le_flag = cpu_to_le16(flag);

	if ((ht_capa_mask->cap_info & le_flag) &&
	    (ht_capa->cap_info & le_flag))
		ht_cap->cap |= flag;
}

void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data *sdata,
				     struct ieee80211_sta_ht_cap *ht_cap)
{
	struct ieee80211_ht_cap *ht_capa, *ht_capa_mask;
	u8 *scaps, *smask;
	int i;

	if (!ht_cap->ht_supported)
		return;

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_STATION:
		ht_capa = &sdata->u.mgd.ht_capa;
		ht_capa_mask = &sdata->u.mgd.ht_capa_mask;
		break;
	case NL80211_IFTYPE_ADHOC:
		ht_capa = &sdata->u.ibss.ht_capa;
		ht_capa_mask = &sdata->u.ibss.ht_capa_mask;
		break;
	default:
		WARN_ON_ONCE(1);
		return;
	}

	scaps = (u8 *)(&ht_capa->mcs.rx_mask);
	smask = (u8 *)(&ht_capa_mask->mcs.rx_mask);

	/* NOTE:  If you add more over-rides here, update register_hw
	 * ht_capa_mod_mask logic in main.c as well.
	 * And, if this method can ever change ht_cap.ht_supported, fix
	 * the check in ieee80211_add_ht_ie.
	 */

	/* check for HT over-rides, MCS rates first. */
	for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
		u8 m = smask[i];
		ht_cap->mcs.rx_mask[i] &= ~m; /* turn off all masked bits */
		/* Add back rates that are supported */
		ht_cap->mcs.rx_mask[i] |= (m & scaps[i]);
	}

	/* Force removal of HT-40 capabilities? */
	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
			      IEEE80211_HT_CAP_SUP_WIDTH_20_40);
	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
			      IEEE80211_HT_CAP_SGI_40);

	/* Allow user to disable SGI-20 (SGI-40 is handled above) */
	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
			      IEEE80211_HT_CAP_SGI_20);

	/* Allow user to disable the max-AMSDU bit. */
	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
			      IEEE80211_HT_CAP_MAX_AMSDU);

	/* Allow user to disable LDPC */
	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
			      IEEE80211_HT_CAP_LDPC_CODING);

	/* Allow user to enable 40 MHz intolerant bit. */
	__check_htcap_enable(ht_capa, ht_capa_mask, ht_cap,
			     IEEE80211_HT_CAP_40MHZ_INTOLERANT);

	/* Allow user to decrease AMPDU factor */
	if (ht_capa_mask->ampdu_params_info &
	    IEEE80211_HT_AMPDU_PARM_FACTOR) {
		u8 n = ht_capa->ampdu_params_info &
		       IEEE80211_HT_AMPDU_PARM_FACTOR;
		if (n < ht_cap->ampdu_factor)
			ht_cap->ampdu_factor = n;
	}

	/* Allow the user to increase AMPDU density. */
	if (ht_capa_mask->ampdu_params_info &
	    IEEE80211_HT_AMPDU_PARM_DENSITY) {
		u8 n = (ht_capa->ampdu_params_info &
			IEEE80211_HT_AMPDU_PARM_DENSITY)
			>> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
		if (n > ht_cap->ampdu_density)
			ht_cap->ampdu_density = n;
	}
}


bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data *sdata,
				       struct ieee80211_supported_band *sband,
				       const struct ieee80211_ht_cap *ht_cap_ie,
				       struct sta_info *sta)
{
	struct ieee80211_sta_ht_cap ht_cap, own_cap;
	u8 ampdu_info, tx_mcs_set_cap;
	int i, max_tx_streams;
	bool changed;
	enum ieee80211_sta_rx_bandwidth bw;
	enum ieee80211_smps_mode smps_mode;

	memset(&ht_cap, 0, sizeof(ht_cap));

	if (!ht_cap_ie || !sband->ht_cap.ht_supported)
		goto apply;

	ht_cap.ht_supported = true;

	own_cap = sband->ht_cap;

	/*
	 * If user has specified capability over-rides, take care
	 * of that if the station we're setting up is the AP or TDLS peer that
	 * we advertised a restricted capability set to. Override
	 * our own capabilities and then use those below.
	 */
	if (sdata->vif.type == NL80211_IFTYPE_STATION ||
	    sdata->vif.type == NL80211_IFTYPE_ADHOC)
		ieee80211_apply_htcap_overrides(sdata, &own_cap);

	/*
	 * The bits listed in this expression should be
	 * the same for the peer and us, if the station
	 * advertises more then we can't use those thus
	 * we mask them out.
	 */
	ht_cap.cap = le16_to_cpu(ht_cap_ie->cap_info) &
		(own_cap.cap | ~(IEEE80211_HT_CAP_LDPC_CODING |
				 IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
				 IEEE80211_HT_CAP_GRN_FLD |
				 IEEE80211_HT_CAP_SGI_20 |
				 IEEE80211_HT_CAP_SGI_40 |
				 IEEE80211_HT_CAP_DSSSCCK40));

	/*
	 * The STBC bits are asymmetric -- if we don't have
	 * TX then mask out the peer's RX and vice versa.
	 */
	if (!(own_cap.cap & IEEE80211_HT_CAP_TX_STBC))
		ht_cap.cap &= ~IEEE80211_HT_CAP_RX_STBC;
	if (!(own_cap.cap & IEEE80211_HT_CAP_RX_STBC))
		ht_cap.cap &= ~IEEE80211_HT_CAP_TX_STBC;

	ampdu_info = ht_cap_ie->ampdu_params_info;
	ht_cap.ampdu_factor =
		ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
	ht_cap.ampdu_density =
		(ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2;

	/* own MCS TX capabilities */
	tx_mcs_set_cap = own_cap.mcs.tx_params;

	/* Copy peer MCS TX capabilities, the driver might need them. */
	ht_cap.mcs.tx_params = ht_cap_ie->mcs.tx_params;

	/* can we TX with MCS rates? */
	if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED))
		goto apply;

	/* Counting from 0, therefore +1 */
	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF)
		max_tx_streams =
			((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK)
				>> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1;
	else
		max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS;

	/*
	 * 802.11n-2009 20.3.5 / 20.6 says:
	 * - indices 0 to 7 and 32 are single spatial stream
	 * - 8 to 31 are multiple spatial streams using equal modulation
	 *   [8..15 for two streams, 16..23 for three and 24..31 for four]
	 * - remainder are multiple spatial streams using unequal modulation
	 */
	for (i = 0; i < max_tx_streams; i++)
		ht_cap.mcs.rx_mask[i] =
			own_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i];

	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION)
		for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE;
		     i < IEEE80211_HT_MCS_MASK_LEN; i++)
			ht_cap.mcs.rx_mask[i] =
				own_cap.mcs.rx_mask[i] &
					ht_cap_ie->mcs.rx_mask[i];

	/* handle MCS rate 32 too */
	if (own_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1)
		ht_cap.mcs.rx_mask[32/8] |= 1;

	/* set Rx highest rate */
	ht_cap.mcs.rx_highest = ht_cap_ie->mcs.rx_highest;

	if (ht_cap.cap & IEEE80211_HT_CAP_MAX_AMSDU)
		sta->sta.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_7935;
	else
		sta->sta.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_3839;

 apply:
	changed = memcmp(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));

	memcpy(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));

	switch (sdata->vif.bss_conf.chandef.width) {
	default:
		WARN_ON_ONCE(1);
		/* fall through */
	case NL80211_CHAN_WIDTH_20_NOHT:
	case NL80211_CHAN_WIDTH_20:
		bw = IEEE80211_STA_RX_BW_20;
		break;
	case NL80211_CHAN_WIDTH_40:
	case NL80211_CHAN_WIDTH_80:
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_160:
		bw = ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
				IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
		break;
	}

	sta->sta.bandwidth = bw;

	sta->cur_max_bandwidth =
		ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
				IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;

	switch ((ht_cap.cap & IEEE80211_HT_CAP_SM_PS)
			>> IEEE80211_HT_CAP_SM_PS_SHIFT) {
	case WLAN_HT_CAP_SM_PS_INVALID:
	case WLAN_HT_CAP_SM_PS_STATIC:
		smps_mode = IEEE80211_SMPS_STATIC;
		break;
	case WLAN_HT_CAP_SM_PS_DYNAMIC:
		smps_mode = IEEE80211_SMPS_DYNAMIC;
		break;
	case WLAN_HT_CAP_SM_PS_DISABLED:
		smps_mode = IEEE80211_SMPS_OFF;
		break;
	}

	if (smps_mode != sta->sta.smps_mode)
		changed = true;
	sta->sta.smps_mode = smps_mode;

	return changed;
}

void ieee80211_sta_tear_down_BA_sessions(struct sta_info *sta,
					 enum ieee80211_agg_stop_reason reason)
{
	int i;

	mutex_lock(&sta->ampdu_mlme.mtx);
	for (i = 0; i <  IEEE80211_NUM_TIDS; i++)
		___ieee80211_stop_rx_ba_session(sta, i, WLAN_BACK_RECIPIENT,
						WLAN_REASON_QSTA_LEAVE_QBSS,
						reason != AGG_STOP_DESTROY_STA &&
						reason != AGG_STOP_PEER_REQUEST);

	for (i = 0; i <  IEEE80211_NUM_TIDS; i++)
		___ieee80211_stop_tx_ba_session(sta, i, reason);
	mutex_unlock(&sta->ampdu_mlme.mtx);

	/* stopping might queue the work again - so cancel only afterwards */
	cancel_work_sync(&sta->ampdu_mlme.work);

	/*
	 * In case the tear down is part of a reconfigure due to HW restart
	 * request, it is possible that the low level driver requested to stop
	 * the BA session, so handle it to properly clean tid_tx data.
	 */
	mutex_lock(&sta->ampdu_mlme.mtx);
	for (i = 0; i < IEEE80211_NUM_TIDS; i++) {
		struct tid_ampdu_tx *tid_tx =
			rcu_dereference_protected_tid_tx(sta, i);

		if (!tid_tx)
			continue;

		if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
			ieee80211_stop_tx_ba_cb(sta, i, tid_tx);
	}
	mutex_unlock(&sta->ampdu_mlme.mtx);
}

void ieee80211_ba_session_work(struct work_struct *work)
{
	struct sta_info *sta =
		container_of(work, struct sta_info, ampdu_mlme.work);
	struct tid_ampdu_tx *tid_tx;
	int tid;

	/*
	 * When this flag is set, new sessions should be
	 * blocked, and existing sessions will be torn
	 * down by the code that set the flag, so this
	 * need not run.
	 */
	if (test_sta_flag(sta, WLAN_STA_BLOCK_BA))
		return;

	mutex_lock(&sta->ampdu_mlme.mtx);
	for (tid = 0; tid < IEEE80211_NUM_TIDS; tid++) {
		if (test_and_clear_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired))
			___ieee80211_stop_rx_ba_session(
				sta, tid, WLAN_BACK_RECIPIENT,
				WLAN_REASON_QSTA_TIMEOUT, true);

		if (test_and_clear_bit(tid,
				       sta->ampdu_mlme.tid_rx_stop_requested))
			___ieee80211_stop_rx_ba_session(
				sta, tid, WLAN_BACK_RECIPIENT,
				WLAN_REASON_UNSPECIFIED, true);

		if (test_and_clear_bit(tid,
				       sta->ampdu_mlme.tid_rx_manage_offl))
			___ieee80211_start_rx_ba_session(sta, 0, 0, 0, 1, tid,
							 IEEE80211_MAX_AMPDU_BUF,
							 false, true);

		if (test_and_clear_bit(tid + IEEE80211_NUM_TIDS,
				       sta->ampdu_mlme.tid_rx_manage_offl))
			___ieee80211_stop_rx_ba_session(
				sta, tid, WLAN_BACK_RECIPIENT,
				0, false);

		spin_lock_bh(&sta->lock);

		tid_tx = sta->ampdu_mlme.tid_start_tx[tid];
		if (tid_tx) {
			/*
			 * Assign it over to the normal tid_tx array
			 * where it "goes live".
			 */

			sta->ampdu_mlme.tid_start_tx[tid] = NULL;
			/* could there be a race? */
			if (sta->ampdu_mlme.tid_tx[tid])
				kfree(tid_tx);
			else
				ieee80211_assign_tid_tx(sta, tid, tid_tx);
			spin_unlock_bh(&sta->lock);

			ieee80211_tx_ba_session_handle_start(sta, tid);
			continue;
		}
		spin_unlock_bh(&sta->lock);

		tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
		if (!tid_tx)
			continue;

		if (test_and_clear_bit(HT_AGG_STATE_START_CB, &tid_tx->state))
			ieee80211_start_tx_ba_cb(sta, tid, tid_tx);
		if (test_and_clear_bit(HT_AGG_STATE_WANT_STOP, &tid_tx->state))
			___ieee80211_stop_tx_ba_session(sta, tid,
							AGG_STOP_LOCAL_REQUEST);
		if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
			ieee80211_stop_tx_ba_cb(sta, tid, tid_tx);
	}
	mutex_unlock(&sta->ampdu_mlme.mtx);
}

void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata,
			  const u8 *da, u16 tid,
			  u16 initiator, u16 reason_code)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
	u16 params;

	skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
	if (!skb)
		return;

	skb_reserve(skb, local->hw.extra_tx_headroom);
	mgmt = skb_put_zero(skb, 24);
	memcpy(mgmt->da, da, ETH_ALEN);
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
	if (sdata->vif.type == NL80211_IFTYPE_AP ||
	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
	    sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
		memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
	else if (sdata->vif.type == NL80211_IFTYPE_STATION)
		memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
	else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
		memcpy(mgmt->bssid, sdata->u.ibss.bssid, ETH_ALEN);

	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_ACTION);

	skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba));

	mgmt->u.action.category = WLAN_CATEGORY_BACK;
	mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA;
	params = (u16)(initiator << 11); 	/* bit 11 initiator */
	params |= (u16)(tid << 12); 		/* bit 15:12 TID number */

	mgmt->u.action.u.delba.params = cpu_to_le16(params);
	mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code);

	ieee80211_tx_skb(sdata, skb);
}

void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata,
			     struct sta_info *sta,
			     struct ieee80211_mgmt *mgmt, size_t len)
{
	u16 tid, params;
	u16 initiator;

	params = le16_to_cpu(mgmt->u.action.u.delba.params);
	tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
	initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;

	ht_dbg_ratelimited(sdata, "delba from %pM (%s) tid %d reason code %d\n",
			   mgmt->sa, initiator ? "initiator" : "recipient",
			   tid,
			   le16_to_cpu(mgmt->u.action.u.delba.reason_code));

	if (initiator == WLAN_BACK_INITIATOR)
		__ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_INITIATOR, 0,
					       true);
	else
		__ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_PEER_REQUEST);
}

enum nl80211_smps_mode
ieee80211_smps_mode_to_smps_mode(enum ieee80211_smps_mode smps)
{
	switch (smps) {
	case IEEE80211_SMPS_OFF:
		return NL80211_SMPS_OFF;
	case IEEE80211_SMPS_STATIC:
		return NL80211_SMPS_STATIC;
	case IEEE80211_SMPS_DYNAMIC:
		return NL80211_SMPS_DYNAMIC;
	default:
		return NL80211_SMPS_OFF;
	}
}

int ieee80211_send_smps_action(struct ieee80211_sub_if_data *sdata,
			       enum ieee80211_smps_mode smps, const u8 *da,
			       const u8 *bssid)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *action_frame;

	/* 27 = header + category + action + smps mode */
	skb = dev_alloc_skb(27 + local->hw.extra_tx_headroom);
	if (!skb)
		return -ENOMEM;

	skb_reserve(skb, local->hw.extra_tx_headroom);
	action_frame = skb_put(skb, 27);
	memcpy(action_frame->da, da, ETH_ALEN);
	memcpy(action_frame->sa, sdata->dev->dev_addr, ETH_ALEN);
	memcpy(action_frame->bssid, bssid, ETH_ALEN);
	action_frame->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
						  IEEE80211_STYPE_ACTION);
	action_frame->u.action.category = WLAN_CATEGORY_HT;
	action_frame->u.action.u.ht_smps.action = WLAN_HT_ACTION_SMPS;
	switch (smps) {
	case IEEE80211_SMPS_AUTOMATIC:
	case IEEE80211_SMPS_NUM_MODES:
		WARN_ON(1);
		/* fall through */
	case IEEE80211_SMPS_OFF:
		action_frame->u.action.u.ht_smps.smps_control =
				WLAN_HT_SMPS_CONTROL_DISABLED;
		break;
	case IEEE80211_SMPS_STATIC:
		action_frame->u.action.u.ht_smps.smps_control =
				WLAN_HT_SMPS_CONTROL_STATIC;
		break;
	case IEEE80211_SMPS_DYNAMIC:
		action_frame->u.action.u.ht_smps.smps_control =
				WLAN_HT_SMPS_CONTROL_DYNAMIC;
		break;
	}

	/* we'll do more on status of this frame */
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS;
	ieee80211_tx_skb(sdata, skb);

	return 0;
}

void ieee80211_request_smps_mgd_work(struct work_struct *work)
{
	struct ieee80211_sub_if_data *sdata =
		container_of(work, struct ieee80211_sub_if_data,
			     u.mgd.request_smps_work);

	sdata_lock(sdata);
	__ieee80211_request_smps_mgd(sdata, sdata->u.mgd.driver_smps_mode);
	sdata_unlock(sdata);
}

void ieee80211_request_smps_ap_work(struct work_struct *work)
{
	struct ieee80211_sub_if_data *sdata =
		container_of(work, struct ieee80211_sub_if_data,
			     u.ap.request_smps_work);

	sdata_lock(sdata);
	if (sdata_dereference(sdata->u.ap.beacon, sdata))
		__ieee80211_request_smps_ap(sdata,
					    sdata->u.ap.driver_smps_mode);
	sdata_unlock(sdata);
}

void ieee80211_request_smps(struct ieee80211_vif *vif,
			    enum ieee80211_smps_mode smps_mode)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	if (WARN_ON_ONCE(vif->type != NL80211_IFTYPE_STATION &&
			 vif->type != NL80211_IFTYPE_AP))
		return;

	if (vif->type == NL80211_IFTYPE_STATION) {
		if (sdata->u.mgd.driver_smps_mode == smps_mode)
			return;
		sdata->u.mgd.driver_smps_mode = smps_mode;
		ieee80211_queue_work(&sdata->local->hw,
				     &sdata->u.mgd.request_smps_work);
	} else {
		/* AUTOMATIC is meaningless in AP mode */
		if (WARN_ON_ONCE(smps_mode == IEEE80211_SMPS_AUTOMATIC))
			return;
		if (sdata->u.ap.driver_smps_mode == smps_mode)
			return;
		sdata->u.ap.driver_smps_mode = smps_mode;
		ieee80211_queue_work(&sdata->local->hw,
				     &sdata->u.ap.request_smps_work);
	}
}
/* this might change ... don't want non-open drivers using it */
EXPORT_SYMBOL_GPL(ieee80211_request_smps);
Commit	Line	Data
44d414db JB	1	/*
	2	* HT handling
	3	*
	4	* Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
bacac545 JB	5	* Copyright 2002-2005, Instant802 Networks, Inc.
bacac545 JB	6	* Copyright 2005-2006, Devicescape Software, Inc.
44d414db JB	7	* Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
44d414db JB	8	* Copyright 2007, Michael Wu <flamingice@sourmilk.net>
cfcdbde3	9	* Copyright 2007-2010, Intel Corporation
7a7c0a64	10	* Copyright 2017 Intel Deutschland GmbH
44d414db JB	11	*
	12	* This program is free software; you can redistribute it and/or modify
	13	* it under the terms of the GNU General Public License version 2 as
	14	* published by the Free Software Foundation.
	15	*/
	16
	17	#include <linux/ieee80211.h>
bc3b2d7f	18	#include <linux/export.h>
44d414db JB	19	#include <net/mac80211.h>
44d414db JB	20	#include "ieee80211_i.h"
81cb7623	21	#include "rate.h"
44d414db	22
822854b0 SW	23	static void __check_htcap_disable(struct ieee80211_ht_cap *ht_capa,
822854b0 SW	24	struct ieee80211_ht_cap *ht_capa_mask,
32dfefac BG	25	struct ieee80211_sta_ht_cap *ht_cap,
32dfefac BG	26	u16 flag)
ef96a842 BG	27	{
ef96a842 BG	28	__le16 le_flag = cpu_to_le16(flag);
822854b0 SW	29	if (ht_capa_mask->cap_info & le_flag) {
822854b0 SW	30	if (!(ht_capa->cap_info & le_flag))
ef96a842 BG	31	ht_cap->cap &= ~flag;
	32	}
	33	}
	34
9a07bf50 JM	35	static void __check_htcap_enable(struct ieee80211_ht_cap *ht_capa,
	36	struct ieee80211_ht_cap *ht_capa_mask,
	37	struct ieee80211_sta_ht_cap *ht_cap,
	38	u16 flag)
	39	{
	40	__le16 le_flag = cpu_to_le16(flag);
	41
	42	if ((ht_capa_mask->cap_info & le_flag) &&
	43	(ht_capa->cap_info & le_flag))
	44	ht_cap->cap \|= flag;
	45	}
	46
ef96a842 BG	47	void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data *sdata,
	48	struct ieee80211_sta_ht_cap *ht_cap)
	49	{
822854b0 SW	50	struct ieee80211_ht_cap ht_capa, ht_capa_mask;
822854b0 SW	51	u8 scaps, smask;
ef96a842 BG	52	int i;
ef96a842 BG	53
e1a0c6b3 JB	54	if (!ht_cap->ht_supported)
	55	return;
	56
822854b0 SW	57	switch (sdata->vif.type) {
	58	case NL80211_IFTYPE_STATION:
	59	ht_capa = &sdata->u.mgd.ht_capa;
	60	ht_capa_mask = &sdata->u.mgd.ht_capa_mask;
	61	break;
	62	case NL80211_IFTYPE_ADHOC:
	63	ht_capa = &sdata->u.ibss.ht_capa;
	64	ht_capa_mask = &sdata->u.ibss.ht_capa_mask;
	65	break;
	66	default:
	67	WARN_ON_ONCE(1);
	68	return;
	69	}
	70
	71	scaps = (u8 *)(&ht_capa->mcs.rx_mask);
	72	smask = (u8 *)(&ht_capa_mask->mcs.rx_mask);
	73
ef96a842	74	/* NOTE: If you add more over-rides here, update register_hw
9a07bf50	75	* ht_capa_mod_mask logic in main.c as well.
ef96a842 BG	76	* And, if this method can ever change ht_cap.ht_supported, fix
	77	* the check in ieee80211_add_ht_ie.
	78	*/
	79
	80	/* check for HT over-rides, MCS rates first. */
	81	for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
	82	u8 m = smask[i];
	83	ht_cap->mcs.rx_mask[i] &= ~m; /* turn off all masked bits */
	84	/* Add back rates that are supported */
	85	ht_cap->mcs.rx_mask[i] \|= (m & scaps[i]);
	86	}
	87
	88	/* Force removal of HT-40 capabilities? */
822854b0 SW	89	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
	90	IEEE80211_HT_CAP_SUP_WIDTH_20_40);
	91	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
	92	IEEE80211_HT_CAP_SGI_40);
ef96a842	93
bc0784d9	94	/* Allow user to disable SGI-20 (SGI-40 is handled above) */
822854b0 SW	95	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
822854b0 SW	96	IEEE80211_HT_CAP_SGI_20);
bc0784d9	97
ef96a842	98	/* Allow user to disable the max-AMSDU bit. */
822854b0 SW	99	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
822854b0 SW	100	IEEE80211_HT_CAP_MAX_AMSDU);
ef96a842	101
a2e7495d PK	102	/* Allow user to disable LDPC */
	103	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
	104	IEEE80211_HT_CAP_LDPC_CODING);
	105
9a07bf50 JM	106	/* Allow user to enable 40 MHz intolerant bit. */
	107	__check_htcap_enable(ht_capa, ht_capa_mask, ht_cap,
	108	IEEE80211_HT_CAP_40MHZ_INTOLERANT);
	109
ef96a842	110	/* Allow user to decrease AMPDU factor */
822854b0	111	if (ht_capa_mask->ampdu_params_info &
ef96a842	112	IEEE80211_HT_AMPDU_PARM_FACTOR) {
822854b0 SW	113	u8 n = ht_capa->ampdu_params_info &
822854b0 SW	114	IEEE80211_HT_AMPDU_PARM_FACTOR;
ef96a842 BG	115	if (n < ht_cap->ampdu_factor)
	116	ht_cap->ampdu_factor = n;
	117	}
	118
	119	/* Allow the user to increase AMPDU density. */
822854b0	120	if (ht_capa_mask->ampdu_params_info &
ef96a842	121	IEEE80211_HT_AMPDU_PARM_DENSITY) {
822854b0	122	u8 n = (ht_capa->ampdu_params_info &
ef96a842 BG	123	IEEE80211_HT_AMPDU_PARM_DENSITY)
	124	>> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
	125	if (n > ht_cap->ampdu_density)
	126	ht_cap->ampdu_density = n;
	127	}
	128	}
	129
	130
e1a0c6b3	131	bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data *sdata,
ef96a842	132	struct ieee80211_supported_band *sband,
4a3cb702	133	const struct ieee80211_ht_cap *ht_cap_ie,
e1a0c6b3	134	struct sta_info *sta)
44d414db	135	{
c07270b6	136	struct ieee80211_sta_ht_cap ht_cap, own_cap;
ae5eb026 JB	137	u8 ampdu_info, tx_mcs_set_cap;
ae5eb026 JB	138	int i, max_tx_streams;
e1a0c6b3 JB	139	bool changed;
e1a0c6b3 JB	140	enum ieee80211_sta_rx_bandwidth bw;
af0ed69b	141	enum ieee80211_smps_mode smps_mode;
44d414db	142
e1a0c6b3	143	memset(&ht_cap, 0, sizeof(ht_cap));
44d414db	144
15804e3e	145	if (!ht_cap_ie \|\| !sband->ht_cap.ht_supported)
e1a0c6b3	146	goto apply;
d9fe60de	147
e1a0c6b3	148	ht_cap.ht_supported = true;
d9fe60de	149
c07270b6 JB	150	own_cap = sband->ht_cap;
	151
	152	/*
	153	* If user has specified capability over-rides, take care
13cc8a4a	154	* of that if the station we're setting up is the AP or TDLS peer that
c07270b6 JB	155	* we advertised a restricted capability set to. Override
	156	* our own capabilities and then use those below.
	157	*/
13cc8a4a AN	158	if (sdata->vif.type == NL80211_IFTYPE_STATION \|\|
13cc8a4a AN	159	sdata->vif.type == NL80211_IFTYPE_ADHOC)
c07270b6 JB	160	ieee80211_apply_htcap_overrides(sdata, &own_cap);
c07270b6 JB	161
9a418af5 JB	162	/*
	163	* The bits listed in this expression should be
	164	* the same for the peer and us, if the station
	165	* advertises more then we can't use those thus
	166	* we mask them out.
	167	*/
e1a0c6b3	168	ht_cap.cap = le16_to_cpu(ht_cap_ie->cap_info) &
c07270b6 JB	169	(own_cap.cap \| ~(IEEE80211_HT_CAP_LDPC_CODING \|
	170	IEEE80211_HT_CAP_SUP_WIDTH_20_40 \|
	171	IEEE80211_HT_CAP_GRN_FLD \|
	172	IEEE80211_HT_CAP_SGI_20 \|
	173	IEEE80211_HT_CAP_SGI_40 \|
	174	IEEE80211_HT_CAP_DSSSCCK40));
21add825	175
9a418af5 JB	176	/*
	177	* The STBC bits are asymmetric -- if we don't have
	178	* TX then mask out the peer's RX and vice versa.
	179	*/
c07270b6	180	if (!(own_cap.cap & IEEE80211_HT_CAP_TX_STBC))
e1a0c6b3	181	ht_cap.cap &= ~IEEE80211_HT_CAP_RX_STBC;
c07270b6	182	if (!(own_cap.cap & IEEE80211_HT_CAP_RX_STBC))
e1a0c6b3	183	ht_cap.cap &= ~IEEE80211_HT_CAP_TX_STBC;
d9fe60de	184
ae5eb026	185	ampdu_info = ht_cap_ie->ampdu_params_info;
e1a0c6b3	186	ht_cap.ampdu_factor =
ae5eb026	187	ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
e1a0c6b3	188	ht_cap.ampdu_density =
ae5eb026	189	(ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2;
44d414db	190
d9fe60de	191	/* own MCS TX capabilities */
c07270b6	192	tx_mcs_set_cap = own_cap.mcs.tx_params;
d9fe60de	193
90b4ca9d	194	/* Copy peer MCS TX capabilities, the driver might need them. */
e1a0c6b3	195	ht_cap.mcs.tx_params = ht_cap_ie->mcs.tx_params;
90b4ca9d	196
d9fe60de JB	197	/* can we TX with MCS rates? */
d9fe60de JB	198	if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED))
e1a0c6b3	199	goto apply;
d9fe60de JB	200
	201	/* Counting from 0, therefore +1 */
	202	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF)
	203	max_tx_streams =
	204	((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK)
	205	>> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1;
	206	else
	207	max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS;
	208
	209	/*
90b4ca9d	210	* 802.11n-2009 20.3.5 / 20.6 says:
d9fe60de JB	211	* - indices 0 to 7 and 32 are single spatial stream
	212	* - 8 to 31 are multiple spatial streams using equal modulation
	213	* [8..15 for two streams, 16..23 for three and 24..31 for four]
	214	* - remainder are multiple spatial streams using unequal modulation
	215	*/
	216	for (i = 0; i < max_tx_streams; i++)
e1a0c6b3	217	ht_cap.mcs.rx_mask[i] =
c07270b6	218	own_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i];
d9fe60de JB	219
	220	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION)
	221	for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE;
	222	i < IEEE80211_HT_MCS_MASK_LEN; i++)
e1a0c6b3	223	ht_cap.mcs.rx_mask[i] =
c07270b6	224	own_cap.mcs.rx_mask[i] &
ae5eb026	225	ht_cap_ie->mcs.rx_mask[i];
d9fe60de JB	226
d9fe60de JB	227	/* handle MCS rate 32 too */
c07270b6	228	if (own_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1)
e1a0c6b3	229	ht_cap.mcs.rx_mask[32/8] \|= 1;
ef96a842	230
dc5943d5 AN	231	/* set Rx highest rate */
	232	ht_cap.mcs.rx_highest = ht_cap_ie->mcs.rx_highest;
	233
506bcfa8 EG	234	if (ht_cap.cap & IEEE80211_HT_CAP_MAX_AMSDU)
	235	sta->sta.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_7935;
	236	else
	237	sta->sta.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_3839;
	238
e1a0c6b3	239	apply:
e1a0c6b3 JB	240	changed = memcmp(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));
	241
	242	memcpy(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));
	243
	244	switch (sdata->vif.bss_conf.chandef.width) {
	245	default:
	246	WARN_ON_ONCE(1);
	247	/* fall through */
	248	case NL80211_CHAN_WIDTH_20_NOHT:
	249	case NL80211_CHAN_WIDTH_20:
	250	bw = IEEE80211_STA_RX_BW_20;
	251	break;
	252	case NL80211_CHAN_WIDTH_40:
	253	case NL80211_CHAN_WIDTH_80:
	254	case NL80211_CHAN_WIDTH_80P80:
	255	case NL80211_CHAN_WIDTH_160:
	256	bw = ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
	257	IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
	258	break;
	259	}
	260
e1a0c6b3 JB	261	sta->sta.bandwidth = bw;
e1a0c6b3 JB	262
0af83d3d JB	263	sta->cur_max_bandwidth =
	264	ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
	265	IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
	266
af0ed69b JB	267	switch ((ht_cap.cap & IEEE80211_HT_CAP_SM_PS)
	268	>> IEEE80211_HT_CAP_SM_PS_SHIFT) {
	269	case WLAN_HT_CAP_SM_PS_INVALID:
	270	case WLAN_HT_CAP_SM_PS_STATIC:
	271	smps_mode = IEEE80211_SMPS_STATIC;
	272	break;
	273	case WLAN_HT_CAP_SM_PS_DYNAMIC:
	274	smps_mode = IEEE80211_SMPS_DYNAMIC;
	275	break;
	276	case WLAN_HT_CAP_SM_PS_DISABLED:
	277	smps_mode = IEEE80211_SMPS_OFF;
	278	break;
	279	}
	280
	281	if (smps_mode != sta->sta.smps_mode)
	282	changed = true;
	283	sta->sta.smps_mode = smps_mode;
	284
e1a0c6b3	285	return changed;
ae5eb026 JB	286	}
ae5eb026 JB	287
c82c4a80 JB	288	void ieee80211_sta_tear_down_BA_sessions(struct sta_info *sta,
c82c4a80 JB	289	enum ieee80211_agg_stop_reason reason)
de1ede7a	290	{
b8695a8f	291	int i;
de1ede7a	292
12811037	293	mutex_lock(&sta->ampdu_mlme.mtx);
0afe9d4a	294	for (i = 0; i < IEEE80211_NUM_TIDS; i++)
12811037 I	295	___ieee80211_stop_rx_ba_session(sta, i, WLAN_BACK_RECIPIENT,
	296	WLAN_REASON_QSTA_LEAVE_QBSS,
	297	reason != AGG_STOP_DESTROY_STA &&
	298	reason != AGG_STOP_PEER_REQUEST);
7a7c0a64	299
72e2c343 SS	300	for (i = 0; i < IEEE80211_NUM_TIDS; i++)
72e2c343 SS	301	___ieee80211_stop_tx_ba_session(sta, i, reason);
0afe9d4a	302	mutex_unlock(&sta->ampdu_mlme.mtx);
72e2c343	303
7a7c0a64 JB	304	/* stopping might queue the work again - so cancel only afterwards */
7a7c0a64 JB	305	cancel_work_sync(&sta->ampdu_mlme.work);
98e93e96 I	306
	307	/*
	308	* In case the tear down is part of a reconfigure due to HW restart
	309	* request, it is possible that the low level driver requested to stop
	310	* the BA session, so handle it to properly clean tid_tx data.
	311	*/
	312	mutex_lock(&sta->ampdu_mlme.mtx);
	313	for (i = 0; i < IEEE80211_NUM_TIDS; i++) {
	314	struct tid_ampdu_tx *tid_tx =
	315	rcu_dereference_protected_tid_tx(sta, i);
	316
	317	if (!tid_tx)
	318	continue;
	319
	320	if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
	321	ieee80211_stop_tx_ba_cb(sta, i, tid_tx);
	322	}
	323	mutex_unlock(&sta->ampdu_mlme.mtx);
de1ede7a JB	324	}
de1ede7a JB	325
67c282c0 JB	326	void ieee80211_ba_session_work(struct work_struct *work)
	327	{
	328	struct sta_info *sta =
	329	container_of(work, struct sta_info, ampdu_mlme.work);
	330	struct tid_ampdu_tx *tid_tx;
	331	int tid;
	332
	333	/*
	334	* When this flag is set, new sessions should be
	335	* blocked, and existing sessions will be torn
	336	* down by the code that set the flag, so this
	337	* need not run.
	338	*/
c2c98fde	339	if (test_sta_flag(sta, WLAN_STA_BLOCK_BA))
67c282c0 JB	340	return;
67c282c0 JB	341
a93e3644	342	mutex_lock(&sta->ampdu_mlme.mtx);
5a306f58	343	for (tid = 0; tid < IEEE80211_NUM_TIDS; tid++) {
7c3b1dd8 JB	344	if (test_and_clear_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired))
	345	___ieee80211_stop_rx_ba_session(
	346	sta, tid, WLAN_BACK_RECIPIENT,
53f73c09	347	WLAN_REASON_QSTA_TIMEOUT, true);
7c3b1dd8	348
f41ccd71 SL	349	if (test_and_clear_bit(tid,
	350	sta->ampdu_mlme.tid_rx_stop_requested))
	351	___ieee80211_stop_rx_ba_session(
	352	sta, tid, WLAN_BACK_RECIPIENT,
	353	WLAN_REASON_UNSPECIFIED, true);
	354
699cb58c JB	355	if (test_and_clear_bit(tid,
699cb58c JB	356	sta->ampdu_mlme.tid_rx_manage_offl))
bde59c47 JB	357	___ieee80211_start_rx_ba_session(sta, 0, 0, 0, 1, tid,
	358	IEEE80211_MAX_AMPDU_BUF,
	359	false, true);
699cb58c JB	360
	361	if (test_and_clear_bit(tid + IEEE80211_NUM_TIDS,
	362	sta->ampdu_mlme.tid_rx_manage_offl))
	363	___ieee80211_stop_rx_ba_session(
	364	sta, tid, WLAN_BACK_RECIPIENT,
	365	0, false);
	366
e562078a BG	367	spin_lock_bh(&sta->lock);
e562078a BG	368
ec034b20 JB	369	tid_tx = sta->ampdu_mlme.tid_start_tx[tid];
	370	if (tid_tx) {
	371	/*
	372	* Assign it over to the normal tid_tx array
	373	* where it "goes live".
	374	*/
ec034b20 JB	375
	376	sta->ampdu_mlme.tid_start_tx[tid] = NULL;
	377	/* could there be a race? */
	378	if (sta->ampdu_mlme.tid_tx[tid])
	379	kfree(tid_tx);
	380	else
	381	ieee80211_assign_tid_tx(sta, tid, tid_tx);
	382	spin_unlock_bh(&sta->lock);
67c282c0	383
67c282c0	384	ieee80211_tx_ba_session_handle_start(sta, tid);
ec034b20 JB	385	continue;
ec034b20 JB	386	}
e562078a	387	spin_unlock_bh(&sta->lock);
ec034b20	388
40b275b6	389	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
7a7c0a64 JB	390	if (!tid_tx)
	391	continue;
	392
	393	if (test_and_clear_bit(HT_AGG_STATE_START_CB, &tid_tx->state))
	394	ieee80211_start_tx_ba_cb(sta, tid, tid_tx);
	395	if (test_and_clear_bit(HT_AGG_STATE_WANT_STOP, &tid_tx->state))
67c282c0	396	___ieee80211_stop_tx_ba_session(sta, tid,
c82c4a80	397	AGG_STOP_LOCAL_REQUEST);
7a7c0a64 JB	398	if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
7a7c0a64 JB	399	ieee80211_stop_tx_ba_cb(sta, tid, tid_tx);
67c282c0	400	}
cfcdbde3	401	mutex_unlock(&sta->ampdu_mlme.mtx);
67c282c0 JB	402	}
67c282c0 JB	403
b8695a8f JB	404	void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata,
	405	const u8 *da, u16 tid,
	406	u16 initiator, u16 reason_code)
44d414db JB	407	{
44d414db JB	408	struct ieee80211_local *local = sdata->local;
44d414db JB	409	struct sk_buff *skb;
	410	struct ieee80211_mgmt *mgmt;
	411	u16 params;
	412
	413	skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
d15b8459	414	if (!skb)
44d414db	415	return;
44d414db JB	416
44d414db JB	417	skb_reserve(skb, local->hw.extra_tx_headroom);
b080db58	418	mgmt = skb_put_zero(skb, 24);
44d414db	419	memcpy(mgmt->da, da, ETH_ALEN);
47846c9b	420	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
8abd3f9b	421	if (sdata->vif.type == NL80211_IFTYPE_AP \|\|
ae2772b3 TP	422	sdata->vif.type == NL80211_IFTYPE_AP_VLAN \|\|
ae2772b3 TP	423	sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
47846c9b	424	memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
46900298 JB	425	else if (sdata->vif.type == NL80211_IFTYPE_STATION)
46900298 JB	426	memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
13c40c54 AS	427	else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
13c40c54 AS	428	memcpy(mgmt->bssid, sdata->u.ibss.bssid, ETH_ALEN);
46900298	429
44d414db JB	430	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT \|
	431	IEEE80211_STYPE_ACTION);
	432
	433	skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba));
	434
	435	mgmt->u.action.category = WLAN_CATEGORY_BACK;
	436	mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA;
	437	params = (u16)(initiator << 11); /* bit 11 initiator */
	438	params \|= (u16)(tid << 12); /* bit 15:12 TID number */
	439
	440	mgmt->u.action.u.delba.params = cpu_to_le16(params);
	441	mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code);
	442
c6e13327	443	ieee80211_tx_skb(sdata, skb);
44d414db JB	444	}
44d414db JB	445
de1ede7a JB	446	void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata,
	447	struct sta_info *sta,
	448	struct ieee80211_mgmt *mgmt, size_t len)
	449	{
de1ede7a JB	450	u16 tid, params;
de1ede7a JB	451	u16 initiator;
de1ede7a JB	452
	453	params = le16_to_cpu(mgmt->u.action.u.delba.params);
	454	tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
	455	initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;
	456
bdcbd8e0 JB	457	ht_dbg_ratelimited(sdata, "delba from %pM (%s) tid %d reason code %d\n",
	458	mgmt->sa, initiator ? "initiator" : "recipient",
	459	tid,
	460	le16_to_cpu(mgmt->u.action.u.delba.reason_code));
de1ede7a JB	461
de1ede7a JB	462	if (initiator == WLAN_BACK_INITIATOR)
53f73c09 JB	463	__ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_INITIATOR, 0,
53f73c09 JB	464	true);
a622ab72	465	else
c82c4a80	466	__ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_PEER_REQUEST);
de1ede7a	467	}
0f78231b	468
57566b20	469	enum nl80211_smps_mode
	470	ieee80211_smps_mode_to_smps_mode(enum ieee80211_smps_mode smps)
	471	{
	472	switch (smps) {
	473	case IEEE80211_SMPS_OFF:
	474	return NL80211_SMPS_OFF;
	475	case IEEE80211_SMPS_STATIC:
	476	return NL80211_SMPS_STATIC;
	477	case IEEE80211_SMPS_DYNAMIC:
	478	return NL80211_SMPS_DYNAMIC;
	479	default:
	480	return NL80211_SMPS_OFF;
	481	}
	482	}
	483
0f78231b JB	484	int ieee80211_send_smps_action(struct ieee80211_sub_if_data *sdata,
	485	enum ieee80211_smps_mode smps, const u8 *da,
	486	const u8 *bssid)
	487	{
	488	struct ieee80211_local *local = sdata->local;
	489	struct sk_buff *skb;
	490	struct ieee80211_mgmt *action_frame;
	491
	492	/* 27 = header + category + action + smps mode */
	493	skb = dev_alloc_skb(27 + local->hw.extra_tx_headroom);
	494	if (!skb)
	495	return -ENOMEM;
	496
	497	skb_reserve(skb, local->hw.extra_tx_headroom);
4df864c1	498	action_frame = skb_put(skb, 27);
0f78231b JB	499	memcpy(action_frame->da, da, ETH_ALEN);
	500	memcpy(action_frame->sa, sdata->dev->dev_addr, ETH_ALEN);
	501	memcpy(action_frame->bssid, bssid, ETH_ALEN);
	502	action_frame->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT \|
	503	IEEE80211_STYPE_ACTION);
	504	action_frame->u.action.category = WLAN_CATEGORY_HT;
	505	action_frame->u.action.u.ht_smps.action = WLAN_HT_ACTION_SMPS;
	506	switch (smps) {
	507	case IEEE80211_SMPS_AUTOMATIC:
	508	case IEEE80211_SMPS_NUM_MODES:
	509	WARN_ON(1);
02049ce2	510	/* fall through */
0f78231b JB	511	case IEEE80211_SMPS_OFF:
	512	action_frame->u.action.u.ht_smps.smps_control =
	513	WLAN_HT_SMPS_CONTROL_DISABLED;
	514	break;
	515	case IEEE80211_SMPS_STATIC:
	516	action_frame->u.action.u.ht_smps.smps_control =
	517	WLAN_HT_SMPS_CONTROL_STATIC;
	518	break;
	519	case IEEE80211_SMPS_DYNAMIC:
	520	action_frame->u.action.u.ht_smps.smps_control =
	521	WLAN_HT_SMPS_CONTROL_DYNAMIC;
	522	break;
	523	}
	524
	525	/* we'll do more on status of this frame */
	526	IEEE80211_SKB_CB(skb)->flags \|= IEEE80211_TX_CTL_REQ_TX_STATUS;
	527	ieee80211_tx_skb(sdata, skb);
	528
	529	return 0;
	530	}
d1f5b7a3	531
687da132	532	void ieee80211_request_smps_mgd_work(struct work_struct *work)
d1f5b7a3 JB	533	{
	534	struct ieee80211_sub_if_data *sdata =
	535	container_of(work, struct ieee80211_sub_if_data,
	536	u.mgd.request_smps_work);
	537
8d61ffa5	538	sdata_lock(sdata);
687da132 EG	539	__ieee80211_request_smps_mgd(sdata, sdata->u.mgd.driver_smps_mode);
	540	sdata_unlock(sdata);
	541	}
	542
	543	void ieee80211_request_smps_ap_work(struct work_struct *work)
	544	{
	545	struct ieee80211_sub_if_data *sdata =
	546	container_of(work, struct ieee80211_sub_if_data,
	547	u.ap.request_smps_work);
	548
	549	sdata_lock(sdata);
8ffcc704 EG	550	if (sdata_dereference(sdata->u.ap.beacon, sdata))
	551	__ieee80211_request_smps_ap(sdata,
	552	sdata->u.ap.driver_smps_mode);
8d61ffa5	553	sdata_unlock(sdata);
d1f5b7a3 JB	554	}
	555
	556	void ieee80211_request_smps(struct ieee80211_vif *vif,
	557	enum ieee80211_smps_mode smps_mode)
	558	{
	559	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
	560
687da132 EG	561	if (WARN_ON_ONCE(vif->type != NL80211_IFTYPE_STATION &&
687da132 EG	562	vif->type != NL80211_IFTYPE_AP))
d1f5b7a3 JB	563	return;
d1f5b7a3 JB	564
687da132 EG	565	if (vif->type == NL80211_IFTYPE_STATION) {
	566	if (sdata->u.mgd.driver_smps_mode == smps_mode)
	567	return;
	568	sdata->u.mgd.driver_smps_mode = smps_mode;
	569	ieee80211_queue_work(&sdata->local->hw,
	570	&sdata->u.mgd.request_smps_work);
	571	} else {
	572	/* AUTOMATIC is meaningless in AP mode */
	573	if (WARN_ON_ONCE(smps_mode == IEEE80211_SMPS_AUTOMATIC))
	574	return;
	575	if (sdata->u.ap.driver_smps_mode == smps_mode)
	576	return;
	577	sdata->u.ap.driver_smps_mode = smps_mode;
	578	ieee80211_queue_work(&sdata->local->hw,
	579	&sdata->u.ap.request_smps_work);
	580	}
d1f5b7a3 JB	581	}
	582	/* this might change ... don't want non-open drivers using it */
	583	EXPORT_SYMBOL_GPL(ieee80211_request_smps);