[linux-2.6-block.git] / net / mac80211 / offchannel.c

/*
 * Off-channel operation helpers
 *
 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
 * Copyright 2004, Instant802 Networks, Inc.
 * Copyright 2005, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
 * Copyright 2009	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
#include <linux/export.h>
#include <net/mac80211.h>
#include "ieee80211_i.h"
#include "driver-trace.h"
#include "driver-ops.h"

/*
 * Tell our hardware to disable PS.
 * Optionally inform AP that we will go to sleep so that it will buffer
 * the frames while we are doing off-channel work.  This is optional
 * because we *may* be doing work on-operating channel, and want our
 * hardware unconditionally awake, but still let the AP send us normal frames.
 */
static void ieee80211_offchannel_ps_enable(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

	local->offchannel_ps_enabled = false;

	/* FIXME: what to do when local->pspolling is true? */

	del_timer_sync(&local->dynamic_ps_timer);
	del_timer_sync(&ifmgd->bcn_mon_timer);
	del_timer_sync(&ifmgd->conn_mon_timer);

	cancel_work_sync(&local->dynamic_ps_enable_work);

	if (local->hw.conf.flags & IEEE80211_CONF_PS) {
		local->offchannel_ps_enabled = true;
		local->hw.conf.flags &= ~IEEE80211_CONF_PS;
		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	}

	if (!local->offchannel_ps_enabled ||
	    !(local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK))
		/*
		 * If power save was enabled, no need to send a nullfunc
		 * frame because AP knows that we are sleeping. But if the
		 * hardware is creating the nullfunc frame for power save
		 * status (ie. IEEE80211_HW_PS_NULLFUNC_STACK is not
		 * enabled) and power save was enabled, the firmware just
		 * sent a null frame with power save disabled. So we need
		 * to send a new nullfunc frame to inform the AP that we
		 * are again sleeping.
		 */
		ieee80211_send_nullfunc(local, sdata, 1);
}

/* inform AP that we are awake again, unless power save is enabled */
static void ieee80211_offchannel_ps_disable(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;

	if (!local->ps_sdata)
		ieee80211_send_nullfunc(local, sdata, 0);
	else if (local->offchannel_ps_enabled) {
		/*
		 * In !IEEE80211_HW_PS_NULLFUNC_STACK case the hardware
		 * will send a nullfunc frame with the powersave bit set
		 * even though the AP already knows that we are sleeping.
		 * This could be avoided by sending a null frame with power
		 * save bit disabled before enabling the power save, but
		 * this doesn't gain anything.
		 *
		 * When IEEE80211_HW_PS_NULLFUNC_STACK is enabled, no need
		 * to send a nullfunc frame because AP already knows that
		 * we are sleeping, let's just enable power save mode in
		 * hardware.
		 */
		/* TODO:  Only set hardware if CONF_PS changed?
		 * TODO:  Should we set offchannel_ps_enabled to false?
		 */
		local->hw.conf.flags |= IEEE80211_CONF_PS;
		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	} else if (local->hw.conf.dynamic_ps_timeout > 0) {
		/*
		 * If IEEE80211_CONF_PS was not set and the dynamic_ps_timer
		 * had been running before leaving the operating channel,
		 * restart the timer now and send a nullfunc frame to inform
		 * the AP that we are awake.
		 */
		ieee80211_send_nullfunc(local, sdata, 0);
		mod_timer(&local->dynamic_ps_timer, jiffies +
			  msecs_to_jiffies(local->hw.conf.dynamic_ps_timeout));
	}

	ieee80211_sta_reset_beacon_monitor(sdata);
	ieee80211_sta_reset_conn_monitor(sdata);
}

void ieee80211_offchannel_stop_vifs(struct ieee80211_local *local,
				    bool offchannel_ps_enable)
{
	struct ieee80211_sub_if_data *sdata;

	/*
	 * notify the AP about us leaving the channel and stop all
	 * STA interfaces.
	 */
	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (!ieee80211_sdata_running(sdata))
			continue;

		if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
			set_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);

		/* Check to see if we should disable beaconing. */
		if (sdata->vif.type == NL80211_IFTYPE_AP ||
		    sdata->vif.type == NL80211_IFTYPE_ADHOC ||
		    sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
			ieee80211_bss_info_change_notify(
				sdata, BSS_CHANGED_BEACON_ENABLED);

		if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
			netif_tx_stop_all_queues(sdata->dev);
			if (offchannel_ps_enable &&
			    (sdata->vif.type == NL80211_IFTYPE_STATION) &&
			    sdata->u.mgd.associated)
				ieee80211_offchannel_ps_enable(sdata);
		}
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_offchannel_return(struct ieee80211_local *local,
				 bool offchannel_ps_disable)
{
	struct ieee80211_sub_if_data *sdata;

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
			clear_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);

		if (!ieee80211_sdata_running(sdata))
			continue;

		/* Tell AP we're back */
		if (offchannel_ps_disable &&
		    sdata->vif.type == NL80211_IFTYPE_STATION) {
			if (sdata->u.mgd.associated)
				ieee80211_offchannel_ps_disable(sdata);
		}

		if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
			/*
			 * This may wake up queues even though the driver
			 * currently has them stopped. This is not very
			 * likely, since the driver won't have gotten any
			 * (or hardly any) new packets while we weren't
			 * on the right channel, and even if it happens
			 * it will at most lead to queueing up one more
			 * packet per queue in mac80211 rather than on
			 * the interface qdisc.
			 */
			netif_tx_wake_all_queues(sdata->dev);
		}

		if (sdata->vif.type == NL80211_IFTYPE_AP ||
		    sdata->vif.type == NL80211_IFTYPE_ADHOC ||
		    sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
			ieee80211_bss_info_change_notify(
				sdata, BSS_CHANGED_BEACON_ENABLED);
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_handle_roc_started(struct ieee80211_roc_work *roc)
{
	if (roc->notified)
		return;

	if (roc->mgmt_tx_cookie) {
		if (!WARN_ON(!roc->frame)) {
			ieee80211_tx_skb(roc->sdata, roc->frame);
			roc->frame = NULL;
		}
	} else {
		cfg80211_ready_on_channel(roc->sdata->dev, (unsigned long)roc,
					  roc->chan, roc->chan_type,
					  roc->req_duration, GFP_KERNEL);
	}

	roc->notified = true;
}

static void ieee80211_hw_roc_start(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, hw_roc_start);
	struct ieee80211_roc_work *roc, *dep, *tmp;

	mutex_lock(&local->mtx);

	if (list_empty(&local->roc_list))
		goto out_unlock;

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (!roc->started)
		goto out_unlock;

	roc->hw_begun = true;
	roc->hw_start_time = local->hw_roc_start_time;

	ieee80211_handle_roc_started(roc);
	list_for_each_entry_safe(dep, tmp, &roc->dependents, list) {
		ieee80211_handle_roc_started(dep);

		if (dep->duration > roc->duration) {
			u32 dur = dep->duration;
			dep->duration = dur - roc->duration;
			roc->duration = dur;
			list_del(&dep->list);
			list_add(&dep->list, &roc->list);
		}
	}
 out_unlock:
	mutex_unlock(&local->mtx);
}

void ieee80211_ready_on_channel(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	local->hw_roc_start_time = jiffies;

	trace_api_ready_on_channel(local);

	ieee80211_queue_work(hw, &local->hw_roc_start);
}
EXPORT_SYMBOL_GPL(ieee80211_ready_on_channel);

void ieee80211_start_next_roc(struct ieee80211_local *local)
{
	struct ieee80211_roc_work *roc;

	lockdep_assert_held(&local->mtx);

	if (list_empty(&local->roc_list)) {
		ieee80211_run_deferred_scan(local);
		return;
	}

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (local->ops->remain_on_channel) {
		int ret, duration = roc->duration;

		/* XXX: duplicated, see ieee80211_start_roc_work() */
		if (!duration)
			duration = 10;

		ret = drv_remain_on_channel(local, roc->chan,
					    roc->chan_type,
					    duration);

		roc->started = true;

		if (ret) {
			wiphy_warn(local->hw.wiphy,
				   "failed to start next HW ROC (%d)\n", ret);
			/*
			 * queue the work struct again to avoid recursion
			 * when multiple failures occur
			 */
			ieee80211_remain_on_channel_expired(&local->hw);
		}
	} else {
		/* delay it a bit */
		ieee80211_queue_delayed_work(&local->hw, &roc->work,
					     round_jiffies_relative(HZ/2));
	}
}

void ieee80211_roc_notify_destroy(struct ieee80211_roc_work *roc)
{
	struct ieee80211_roc_work *dep, *tmp;

	/* was never transmitted */
	if (roc->frame) {
		cfg80211_mgmt_tx_status(roc->sdata->dev,
					(unsigned long)roc->frame,
					roc->frame->data, roc->frame->len,
					false, GFP_KERNEL);
		kfree_skb(roc->frame);
	}

	if (!roc->mgmt_tx_cookie)
		cfg80211_remain_on_channel_expired(roc->sdata->dev,
						   (unsigned long)roc,
						   roc->chan, roc->chan_type,
						   GFP_KERNEL);

	list_for_each_entry_safe(dep, tmp, &roc->dependents, list)
		ieee80211_roc_notify_destroy(dep);

	kfree(roc);
}

void ieee80211_sw_roc_work(struct work_struct *work)
{
	struct ieee80211_roc_work *roc =
		container_of(work, struct ieee80211_roc_work, work.work);
	struct ieee80211_sub_if_data *sdata = roc->sdata;
	struct ieee80211_local *local = sdata->local;

	mutex_lock(&local->mtx);

	if (roc->abort)
		goto finish;

	if (WARN_ON(list_empty(&local->roc_list)))
		goto out_unlock;

	if (WARN_ON(roc != list_first_entry(&local->roc_list,
					    struct ieee80211_roc_work,
					    list)))
		goto out_unlock;

	if (!roc->started) {
		struct ieee80211_roc_work *dep;

		/* start this ROC */

		/* switch channel etc */
		ieee80211_recalc_idle(local);

		local->tmp_channel = roc->chan;
		local->tmp_channel_type = roc->chan_type;
		ieee80211_hw_config(local, 0);

		/* tell userspace or send frame */
		ieee80211_handle_roc_started(roc);
		list_for_each_entry(dep, &roc->dependents, list)
			ieee80211_handle_roc_started(dep);

		/* if it was pure TX, just finish right away */
		if (!roc->duration)
			goto finish;

		roc->started = true;
		ieee80211_queue_delayed_work(&local->hw, &roc->work,
					     msecs_to_jiffies(roc->duration));
	} else {
		/* finish this ROC */
 finish:
		list_del(&roc->list);
		ieee80211_roc_notify_destroy(roc);

		if (roc->started) {
			drv_flush(local, false);

			local->tmp_channel = NULL;
			ieee80211_hw_config(local, 0);

			ieee80211_offchannel_return(local, true);
		}

		ieee80211_recalc_idle(local);

		ieee80211_start_next_roc(local);
	}

 out_unlock:
	mutex_unlock(&local->mtx);
}

static void ieee80211_hw_roc_done(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, hw_roc_done);
	struct ieee80211_roc_work *roc;

	mutex_lock(&local->mtx);

	if (list_empty(&local->roc_list))
		goto out_unlock;

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (!roc->started)
		goto out_unlock;

	list_del(&roc->list);

	ieee80211_roc_notify_destroy(roc);

	/* if there's another roc, start it now */
	ieee80211_start_next_roc(local);

 out_unlock:
	mutex_unlock(&local->mtx);
}

void ieee80211_remain_on_channel_expired(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	trace_api_remain_on_channel_expired(local);

	ieee80211_queue_work(hw, &local->hw_roc_done);
}
EXPORT_SYMBOL_GPL(ieee80211_remain_on_channel_expired);

void ieee80211_roc_setup(struct ieee80211_local *local)
{
	INIT_WORK(&local->hw_roc_start, ieee80211_hw_roc_start);
	INIT_WORK(&local->hw_roc_done, ieee80211_hw_roc_done);
	INIT_LIST_HEAD(&local->roc_list);
}

void ieee80211_roc_purge(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_roc_work *roc, *tmp;
	LIST_HEAD(tmp_list);

	mutex_lock(&local->mtx);
	list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
		if (roc->sdata != sdata)
			continue;

		if (roc->started && local->ops->remain_on_channel) {
			/* can race, so ignore return value */
			drv_cancel_remain_on_channel(local);
		}

		list_move_tail(&roc->list, &tmp_list);
		roc->abort = true;
	}

	ieee80211_start_next_roc(local);
	mutex_unlock(&local->mtx);

	list_for_each_entry_safe(roc, tmp, &tmp_list, list) {
		if (local->ops->remain_on_channel) {
			list_del(&roc->list);
			ieee80211_roc_notify_destroy(roc);
		} else {
			ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);

			/* work will clean up etc */
			flush_delayed_work(&roc->work);
		}
	}

	WARN_ON_ONCE(!list_empty(&tmp_list));
}
Commit	Line	Data
b203ffc3 JM	1	/*
	2	* Off-channel operation helpers
	3	*
	4	* Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
	5	* Copyright 2004, Instant802 Networks, Inc.
	6	* Copyright 2005, Devicescape Software, Inc.
	7	* Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
	8	* Copyright 2007, Michael Wu <flamingice@sourmilk.net>
	9	* Copyright 2009 Johannes Berg <johannes@sipsolutions.net>
	10	*
	11	* This program is free software; you can redistribute it and/or modify
	12	* it under the terms of the GNU General Public License version 2 as
	13	* published by the Free Software Foundation.
	14	*/
bc3b2d7f	15	#include <linux/export.h>
b203ffc3 JM	16	#include <net/mac80211.h>
b203ffc3 JM	17	#include "ieee80211_i.h"
21f83589	18	#include "driver-trace.h"
2eb278e0	19	#include "driver-ops.h"
b203ffc3 JM	20
b203ffc3 JM	21	/*
b23b025f BG	22	* Tell our hardware to disable PS.
	23	* Optionally inform AP that we will go to sleep so that it will buffer
	24	* the frames while we are doing off-channel work. This is optional
	25	* because we may be doing work on-operating channel, and want our
	26	* hardware unconditionally awake, but still let the AP send us normal frames.
b203ffc3	27	*/
559cef99	28	static void ieee80211_offchannel_ps_enable(struct ieee80211_sub_if_data *sdata)
b203ffc3 JM	29	{
b203ffc3 JM	30	struct ieee80211_local *local = sdata->local;
4730d597	31	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
b203ffc3 JM	32
	33	local->offchannel_ps_enabled = false;
	34
	35	/* FIXME: what to do when local->pspolling is true? */
	36
	37	del_timer_sync(&local->dynamic_ps_timer);
3bc3c0d7	38	del_timer_sync(&ifmgd->bcn_mon_timer);
4730d597 LR	39	del_timer_sync(&ifmgd->conn_mon_timer);
4730d597 LR	40
b203ffc3 JM	41	cancel_work_sync(&local->dynamic_ps_enable_work);
	42
	43	if (local->hw.conf.flags & IEEE80211_CONF_PS) {
	44	local->offchannel_ps_enabled = true;
	45	local->hw.conf.flags &= ~IEEE80211_CONF_PS;
	46	ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	47	}
	48
559cef99 RM	49	if (!local->offchannel_ps_enabled \|\|
559cef99 RM	50	!(local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK))
b203ffc3 JM	51	/*
	52	* If power save was enabled, no need to send a nullfunc
	53	* frame because AP knows that we are sleeping. But if the
	54	* hardware is creating the nullfunc frame for power save
	55	* status (ie. IEEE80211_HW_PS_NULLFUNC_STACK is not
	56	* enabled) and power save was enabled, the firmware just
	57	* sent a null frame with power save disabled. So we need
	58	* to send a new nullfunc frame to inform the AP that we
	59	* are again sleeping.
	60	*/
	61	ieee80211_send_nullfunc(local, sdata, 1);
	62	}
	63
	64	/* inform AP that we are awake again, unless power save is enabled */
	65	static void ieee80211_offchannel_ps_disable(struct ieee80211_sub_if_data *sdata)
	66	{
	67	struct ieee80211_local *local = sdata->local;
	68
	69	if (!local->ps_sdata)
	70	ieee80211_send_nullfunc(local, sdata, 0);
	71	else if (local->offchannel_ps_enabled) {
	72	/*
	73	* In !IEEE80211_HW_PS_NULLFUNC_STACK case the hardware
	74	* will send a nullfunc frame with the powersave bit set
	75	* even though the AP already knows that we are sleeping.
	76	* This could be avoided by sending a null frame with power
	77	* save bit disabled before enabling the power save, but
	78	* this doesn't gain anything.
	79	*
	80	* When IEEE80211_HW_PS_NULLFUNC_STACK is enabled, no need
	81	* to send a nullfunc frame because AP already knows that
	82	* we are sleeping, let's just enable power save mode in
	83	* hardware.
	84	*/
b23b025f BG	85	/* TODO: Only set hardware if CONF_PS changed?
	86	* TODO: Should we set offchannel_ps_enabled to false?
	87	*/
b203ffc3 JM	88	local->hw.conf.flags \|= IEEE80211_CONF_PS;
	89	ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	90	} else if (local->hw.conf.dynamic_ps_timeout > 0) {
	91	/*
	92	* If IEEE80211_CONF_PS was not set and the dynamic_ps_timer
	93	* had been running before leaving the operating channel,
	94	* restart the timer now and send a nullfunc frame to inform
	95	* the AP that we are awake.
	96	*/
	97	ieee80211_send_nullfunc(local, sdata, 0);
	98	mod_timer(&local->dynamic_ps_timer, jiffies +
	99	msecs_to_jiffies(local->hw.conf.dynamic_ps_timeout));
	100	}
4730d597	101
3bc3c0d7	102	ieee80211_sta_reset_beacon_monitor(sdata);
4730d597	103	ieee80211_sta_reset_conn_monitor(sdata);
b203ffc3 JM	104	}
b203ffc3 JM	105
b23b025f BG	106	void ieee80211_offchannel_stop_vifs(struct ieee80211_local *local,
b23b025f BG	107	bool offchannel_ps_enable)
b203ffc3 JM	108	{
	109	struct ieee80211_sub_if_data *sdata;
	110
b23b025f BG	111	/*
	112	* notify the AP about us leaving the channel and stop all
	113	* STA interfaces.
	114	*/
b203ffc3 JM	115	mutex_lock(&local->iflist_mtx);
	116	list_for_each_entry(sdata, &local->interfaces, list) {
	117	if (!ieee80211_sdata_running(sdata))
	118	continue;
	119
b23b025f BG	120	if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
	121	set_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);
	122
	123	/* Check to see if we should disable beaconing. */
b203ffc3 JM	124	if (sdata->vif.type == NL80211_IFTYPE_AP \|\|
	125	sdata->vif.type == NL80211_IFTYPE_ADHOC \|\|
	126	sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
	127	ieee80211_bss_info_change_notify(
	128	sdata, BSS_CHANGED_BEACON_ENABLED);
	129
b23b025f	130	if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
cfa6cb20	131	netif_tx_stop_all_queues(sdata->dev);
b23b025f BG	132	if (offchannel_ps_enable &&
	133	(sdata->vif.type == NL80211_IFTYPE_STATION) &&
	134	sdata->u.mgd.associated)
559cef99	135	ieee80211_offchannel_ps_enable(sdata);
5b714c6a	136	}
b203ffc3 JM	137	}
	138	mutex_unlock(&local->iflist_mtx);
	139	}
	140
b203ffc3	141	void ieee80211_offchannel_return(struct ieee80211_local *local,
b23b025f	142	bool offchannel_ps_disable)
b203ffc3 JM	143	{
	144	struct ieee80211_sub_if_data *sdata;
	145
	146	mutex_lock(&local->iflist_mtx);
	147	list_for_each_entry(sdata, &local->interfaces, list) {
f6e8cb72 EP	148	if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
	149	clear_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);
	150
b203ffc3 JM	151	if (!ieee80211_sdata_running(sdata))
	152	continue;
	153
	154	/* Tell AP we're back */
b23b025f BG	155	if (offchannel_ps_disable &&
b23b025f BG	156	sdata->vif.type == NL80211_IFTYPE_STATION) {
b203ffc3 JM	157	if (sdata->u.mgd.associated)
b203ffc3 JM	158	ieee80211_offchannel_ps_disable(sdata);
b203ffc3 JM	159	}
b203ffc3 JM	160
5b714c6a	161	if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
5b714c6a JB	162	/*
	163	* This may wake up queues even though the driver
	164	* currently has them stopped. This is not very
	165	* likely, since the driver won't have gotten any
	166	* (or hardly any) new packets while we weren't
	167	* on the right channel, and even if it happens
	168	* it will at most lead to queueing up one more
	169	* packet per queue in mac80211 rather than on
	170	* the interface qdisc.
	171	*/
93895757	172	netif_tx_wake_all_queues(sdata->dev);
5b714c6a	173	}
93895757	174
e76aadc5 JB	175	if (sdata->vif.type == NL80211_IFTYPE_AP \|\|
	176	sdata->vif.type == NL80211_IFTYPE_ADHOC \|\|
	177	sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
b203ffc3 JM	178	ieee80211_bss_info_change_notify(
	179	sdata, BSS_CHANGED_BEACON_ENABLED);
	180	}
	181	mutex_unlock(&local->iflist_mtx);
	182	}
21f83589	183
2eb278e0 JB	184	void ieee80211_handle_roc_started(struct ieee80211_roc_work *roc)
	185	{
	186	if (roc->notified)
	187	return;
	188
	189	if (roc->mgmt_tx_cookie) {
	190	if (!WARN_ON(!roc->frame)) {
	191	ieee80211_tx_skb(roc->sdata, roc->frame);
	192	roc->frame = NULL;
	193	}
	194	} else {
	195	cfg80211_ready_on_channel(roc->sdata->dev, (unsigned long)roc,
	196	roc->chan, roc->chan_type,
	197	roc->req_duration, GFP_KERNEL);
	198	}
	199
	200	roc->notified = true;
	201	}
	202
21f83589 JB	203	static void ieee80211_hw_roc_start(struct work_struct *work)
	204	{
	205	struct ieee80211_local *local =
	206	container_of(work, struct ieee80211_local, hw_roc_start);
2eb278e0	207	struct ieee80211_roc_work roc, dep, *tmp;
21f83589 JB	208
	209	mutex_lock(&local->mtx);
	210
2eb278e0 JB	211	if (list_empty(&local->roc_list))
2eb278e0 JB	212	goto out_unlock;
21f83589	213
2eb278e0 JB	214	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
	215	list);
	216
	217	if (!roc->started)
	218	goto out_unlock;
	219
	220	roc->hw_begun = true;
	221	roc->hw_start_time = local->hw_roc_start_time;
90fc4b3a	222
2eb278e0 JB	223	ieee80211_handle_roc_started(roc);
	224	list_for_each_entry_safe(dep, tmp, &roc->dependents, list) {
	225	ieee80211_handle_roc_started(dep);
	226
	227	if (dep->duration > roc->duration) {
	228	u32 dur = dep->duration;
	229	dep->duration = dur - roc->duration;
	230	roc->duration = dur;
	231	list_del(&dep->list);
	232	list_add(&dep->list, &roc->list);
	233	}
	234	}
	235	out_unlock:
21f83589 JB	236	mutex_unlock(&local->mtx);
	237	}
	238
	239	void ieee80211_ready_on_channel(struct ieee80211_hw *hw)
	240	{
	241	struct ieee80211_local *local = hw_to_local(hw);
	242
2eb278e0 JB	243	local->hw_roc_start_time = jiffies;
2eb278e0 JB	244
21f83589 JB	245	trace_api_ready_on_channel(local);
	246
	247	ieee80211_queue_work(hw, &local->hw_roc_start);
	248	}
	249	EXPORT_SYMBOL_GPL(ieee80211_ready_on_channel);
	250
2eb278e0	251	void ieee80211_start_next_roc(struct ieee80211_local *local)
21f83589	252	{
2eb278e0	253	struct ieee80211_roc_work *roc;
21f83589	254
2eb278e0	255	lockdep_assert_held(&local->mtx);
21f83589	256
2eb278e0 JB	257	if (list_empty(&local->roc_list)) {
2eb278e0 JB	258	ieee80211_run_deferred_scan(local);
21f83589 JB	259	return;
	260	}
	261
2eb278e0 JB	262	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
2eb278e0 JB	263	list);
71ecfa18	264
2eb278e0 JB	265	if (local->ops->remain_on_channel) {
2eb278e0 JB	266	int ret, duration = roc->duration;
71ecfa18	267
2eb278e0 JB	268	/* XXX: duplicated, see ieee80211_start_roc_work() */
	269	if (!duration)
	270	duration = 10;
71ecfa18	271
2eb278e0 JB	272	ret = drv_remain_on_channel(local, roc->chan,
	273	roc->chan_type,
	274	duration);
	275
	276	roc->started = true;
	277
	278	if (ret) {
	279	wiphy_warn(local->hw.wiphy,
	280	"failed to start next HW ROC (%d)\n", ret);
	281	/*
	282	* queue the work struct again to avoid recursion
	283	* when multiple failures occur
	284	*/
	285	ieee80211_remain_on_channel_expired(&local->hw);
	286	}
	287	} else {
	288	/* delay it a bit */
	289	ieee80211_queue_delayed_work(&local->hw, &roc->work,
	290	round_jiffies_relative(HZ/2));
	291	}
	292	}
	293
	294	void ieee80211_roc_notify_destroy(struct ieee80211_roc_work *roc)
	295	{
	296	struct ieee80211_roc_work dep, tmp;
	297
	298	/* was never transmitted */
	299	if (roc->frame) {
	300	cfg80211_mgmt_tx_status(roc->sdata->dev,
	301	(unsigned long)roc->frame,
	302	roc->frame->data, roc->frame->len,
	303	false, GFP_KERNEL);
	304	kfree_skb(roc->frame);
71ecfa18 JB	305	}
71ecfa18 JB	306
2eb278e0 JB	307	if (!roc->mgmt_tx_cookie)
	308	cfg80211_remain_on_channel_expired(roc->sdata->dev,
	309	(unsigned long)roc,
	310	roc->chan, roc->chan_type,
90fc4b3a	311	GFP_KERNEL);
21f83589	312
2eb278e0 JB	313	list_for_each_entry_safe(dep, tmp, &roc->dependents, list)
	314	ieee80211_roc_notify_destroy(dep);
	315
	316	kfree(roc);
	317	}
	318
	319	void ieee80211_sw_roc_work(struct work_struct *work)
	320	{
	321	struct ieee80211_roc_work *roc =
	322	container_of(work, struct ieee80211_roc_work, work.work);
	323	struct ieee80211_sub_if_data *sdata = roc->sdata;
	324	struct ieee80211_local *local = sdata->local;
	325
	326	mutex_lock(&local->mtx);
	327
	328	if (roc->abort)
	329	goto finish;
	330
	331	if (WARN_ON(list_empty(&local->roc_list)))
	332	goto out_unlock;
	333
	334	if (WARN_ON(roc != list_first_entry(&local->roc_list,
	335	struct ieee80211_roc_work,
	336	list)))
	337	goto out_unlock;
	338
	339	if (!roc->started) {
	340	struct ieee80211_roc_work *dep;
	341
	342	/* start this ROC */
21f83589	343
2eb278e0 JB	344	/* switch channel etc */
	345	ieee80211_recalc_idle(local);
	346
	347	local->tmp_channel = roc->chan;
	348	local->tmp_channel_type = roc->chan_type;
	349	ieee80211_hw_config(local, 0);
	350
	351	/* tell userspace or send frame */
	352	ieee80211_handle_roc_started(roc);
	353	list_for_each_entry(dep, &roc->dependents, list)
	354	ieee80211_handle_roc_started(dep);
	355
	356	/* if it was pure TX, just finish right away */
	357	if (!roc->duration)
	358	goto finish;
	359
	360	roc->started = true;
	361	ieee80211_queue_delayed_work(&local->hw, &roc->work,
	362	msecs_to_jiffies(roc->duration));
	363	} else {
	364	/* finish this ROC */
	365	finish:
	366	list_del(&roc->list);
	367	ieee80211_roc_notify_destroy(roc);
	368
	369	if (roc->started) {
	370	drv_flush(local, false);
	371
	372	local->tmp_channel = NULL;
	373	ieee80211_hw_config(local, 0);
	374
	375	ieee80211_offchannel_return(local, true);
	376	}
	377
	378	ieee80211_recalc_idle(local);
	379
	380	ieee80211_start_next_roc(local);
2eb278e0 JB	381	}
	382
	383	out_unlock:
	384	mutex_unlock(&local->mtx);
	385	}
	386
	387	static void ieee80211_hw_roc_done(struct work_struct *work)
	388	{
	389	struct ieee80211_local *local =
	390	container_of(work, struct ieee80211_local, hw_roc_done);
	391	struct ieee80211_roc_work *roc;
	392
	393	mutex_lock(&local->mtx);
	394
	395	if (list_empty(&local->roc_list))
	396	goto out_unlock;
	397
	398	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
	399	list);
	400
	401	if (!roc->started)
	402	goto out_unlock;
	403
	404	list_del(&roc->list);
	405
	406	ieee80211_roc_notify_destroy(roc);
	407
	408	/* if there's another roc, start it now */
	409	ieee80211_start_next_roc(local);
	410
2eb278e0	411	out_unlock:
21f83589 JB	412	mutex_unlock(&local->mtx);
	413	}
	414
	415	void ieee80211_remain_on_channel_expired(struct ieee80211_hw *hw)
	416	{
	417	struct ieee80211_local *local = hw_to_local(hw);
	418
	419	trace_api_remain_on_channel_expired(local);
	420
	421	ieee80211_queue_work(hw, &local->hw_roc_done);
	422	}
	423	EXPORT_SYMBOL_GPL(ieee80211_remain_on_channel_expired);
	424
2eb278e0	425	void ieee80211_roc_setup(struct ieee80211_local *local)
21f83589 JB	426	{
	427	INIT_WORK(&local->hw_roc_start, ieee80211_hw_roc_start);
	428	INIT_WORK(&local->hw_roc_done, ieee80211_hw_roc_done);
2eb278e0 JB	429	INIT_LIST_HEAD(&local->roc_list);
	430	}
	431
	432	void ieee80211_roc_purge(struct ieee80211_sub_if_data *sdata)
	433	{
	434	struct ieee80211_local *local = sdata->local;
	435	struct ieee80211_roc_work roc, tmp;
	436	LIST_HEAD(tmp_list);
	437
	438	mutex_lock(&local->mtx);
	439	list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
	440	if (roc->sdata != sdata)
	441	continue;
	442
	443	if (roc->started && local->ops->remain_on_channel) {
	444	/* can race, so ignore return value */
	445	drv_cancel_remain_on_channel(local);
	446	}
	447
	448	list_move_tail(&roc->list, &tmp_list);
	449	roc->abort = true;
	450	}
	451
	452	ieee80211_start_next_roc(local);
2eb278e0 JB	453	mutex_unlock(&local->mtx);
	454
	455	list_for_each_entry_safe(roc, tmp, &tmp_list, list) {
	456	if (local->ops->remain_on_channel) {
	457	list_del(&roc->list);
	458	ieee80211_roc_notify_destroy(roc);
	459	} else {
	460	ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
	461
	462	/* work will clean up etc */
	463	flush_delayed_work(&roc->work);
	464	}
	465	}
	466
	467	WARN_ON_ONCE(!list_empty(&tmp_list));
21f83589	468	}