Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * Copyright 2002-2005, Instant802 Networks, Inc. | |
3 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
4 | * | |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of the GNU General Public License version 2 as | |
7 | * published by the Free Software Foundation. | |
8 | */ | |
9 | ||
10 | #include <linux/module.h> | |
11 | #include <linux/init.h> | |
12 | #include <linux/netdevice.h> | |
13 | #include <linux/types.h> | |
14 | #include <linux/slab.h> | |
15 | #include <linux/skbuff.h> | |
16 | #include <linux/if_arp.h> | |
0d174406 | 17 | #include <linux/timer.h> |
d0709a65 | 18 | #include <linux/rtnetlink.h> |
f0706e82 JB |
19 | |
20 | #include <net/mac80211.h> | |
21 | #include "ieee80211_i.h" | |
24487981 | 22 | #include "driver-ops.h" |
2c8dccc7 | 23 | #include "rate.h" |
f0706e82 | 24 | #include "sta_info.h" |
e9f207f0 | 25 | #include "debugfs_sta.h" |
ee385855 | 26 | #include "mesh.h" |
ce662b44 | 27 | #include "wme.h" |
f0706e82 | 28 | |
d0709a65 JB |
29 | /** |
30 | * DOC: STA information lifetime rules | |
31 | * | |
32 | * STA info structures (&struct sta_info) are managed in a hash table | |
33 | * for faster lookup and a list for iteration. They are managed using | |
34 | * RCU, i.e. access to the list and hash table is protected by RCU. | |
35 | * | |
34e89507 JB |
36 | * Upon allocating a STA info structure with sta_info_alloc(), the caller |
37 | * owns that structure. It must then insert it into the hash table using | |
38 | * either sta_info_insert() or sta_info_insert_rcu(); only in the latter | |
39 | * case (which acquires an rcu read section but must not be called from | |
40 | * within one) will the pointer still be valid after the call. Note that | |
41 | * the caller may not do much with the STA info before inserting it, in | |
42 | * particular, it may not start any mesh peer link management or add | |
43 | * encryption keys. | |
93e5deb1 JB |
44 | * |
45 | * When the insertion fails (sta_info_insert()) returns non-zero), the | |
46 | * structure will have been freed by sta_info_insert()! | |
d0709a65 | 47 | * |
34e89507 | 48 | * Station entries are added by mac80211 when you establish a link with a |
7e189a12 LR |
49 | * peer. This means different things for the different type of interfaces |
50 | * we support. For a regular station this mean we add the AP sta when we | |
25985edc | 51 | * receive an association response from the AP. For IBSS this occurs when |
34e89507 | 52 | * get to know about a peer on the same IBSS. For WDS we add the sta for |
25985edc | 53 | * the peer immediately upon device open. When using AP mode we add stations |
34e89507 | 54 | * for each respective station upon request from userspace through nl80211. |
7e189a12 | 55 | * |
34e89507 JB |
56 | * In order to remove a STA info structure, various sta_info_destroy_*() |
57 | * calls are available. | |
d0709a65 | 58 | * |
34e89507 JB |
59 | * There is no concept of ownership on a STA entry, each structure is |
60 | * owned by the global hash table/list until it is removed. All users of | |
61 | * the structure need to be RCU protected so that the structure won't be | |
62 | * freed before they are done using it. | |
d0709a65 | 63 | */ |
f0706e82 JB |
64 | |
65 | /* Caller must hold local->sta_lock */ | |
be8755e1 MW |
66 | static int sta_info_hash_del(struct ieee80211_local *local, |
67 | struct sta_info *sta) | |
f0706e82 JB |
68 | { |
69 | struct sta_info *s; | |
70 | ||
40b275b6 JB |
71 | s = rcu_dereference_protected(local->sta_hash[STA_HASH(sta->sta.addr)], |
72 | lockdep_is_held(&local->sta_lock)); | |
f0706e82 | 73 | if (!s) |
be8755e1 MW |
74 | return -ENOENT; |
75 | if (s == sta) { | |
17741cdc | 76 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], |
d0709a65 | 77 | s->hnext); |
be8755e1 | 78 | return 0; |
f0706e82 JB |
79 | } |
80 | ||
40b275b6 JB |
81 | while (rcu_access_pointer(s->hnext) && |
82 | rcu_access_pointer(s->hnext) != sta) | |
83 | s = rcu_dereference_protected(s->hnext, | |
84 | lockdep_is_held(&local->sta_lock)); | |
85 | if (rcu_access_pointer(s->hnext)) { | |
d0709a65 | 86 | rcu_assign_pointer(s->hnext, sta->hnext); |
be8755e1 MW |
87 | return 0; |
88 | } | |
f0706e82 | 89 | |
be8755e1 | 90 | return -ENOENT; |
f0706e82 JB |
91 | } |
92 | ||
d0709a65 | 93 | /* protected by RCU */ |
abe60632 JB |
94 | struct sta_info *sta_info_get(struct ieee80211_sub_if_data *sdata, |
95 | const u8 *addr) | |
f0706e82 | 96 | { |
abe60632 | 97 | struct ieee80211_local *local = sdata->local; |
f0706e82 JB |
98 | struct sta_info *sta; |
99 | ||
2a33bee2 GE |
100 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
101 | lockdep_is_held(&local->sta_lock) || | |
102 | lockdep_is_held(&local->sta_mtx)); | |
103 | while (sta) { | |
104 | if (sta->sdata == sdata && !sta->dummy && | |
105 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) | |
106 | break; | |
107 | sta = rcu_dereference_check(sta->hnext, | |
108 | lockdep_is_held(&local->sta_lock) || | |
109 | lockdep_is_held(&local->sta_mtx)); | |
110 | } | |
111 | return sta; | |
112 | } | |
113 | ||
114 | /* get a station info entry even if it is a dummy station*/ | |
115 | struct sta_info *sta_info_get_rx(struct ieee80211_sub_if_data *sdata, | |
116 | const u8 *addr) | |
117 | { | |
118 | struct ieee80211_local *local = sdata->local; | |
119 | struct sta_info *sta; | |
120 | ||
0379185b | 121 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
0379185b JB |
122 | lockdep_is_held(&local->sta_lock) || |
123 | lockdep_is_held(&local->sta_mtx)); | |
f0706e82 | 124 | while (sta) { |
abe60632 JB |
125 | if (sta->sdata == sdata && |
126 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) | |
f0706e82 | 127 | break; |
0379185b | 128 | sta = rcu_dereference_check(sta->hnext, |
0379185b JB |
129 | lockdep_is_held(&local->sta_lock) || |
130 | lockdep_is_held(&local->sta_mtx)); | |
f0706e82 | 131 | } |
43ba7e95 JB |
132 | return sta; |
133 | } | |
134 | ||
0e5ded5a FF |
135 | /* |
136 | * Get sta info either from the specified interface | |
137 | * or from one of its vlans | |
138 | */ | |
139 | struct sta_info *sta_info_get_bss(struct ieee80211_sub_if_data *sdata, | |
140 | const u8 *addr) | |
141 | { | |
142 | struct ieee80211_local *local = sdata->local; | |
143 | struct sta_info *sta; | |
144 | ||
2a33bee2 GE |
145 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
146 | lockdep_is_held(&local->sta_lock) || | |
147 | lockdep_is_held(&local->sta_mtx)); | |
148 | while (sta) { | |
149 | if ((sta->sdata == sdata || | |
150 | (sta->sdata->bss && sta->sdata->bss == sdata->bss)) && | |
151 | !sta->dummy && | |
152 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) | |
153 | break; | |
154 | sta = rcu_dereference_check(sta->hnext, | |
155 | lockdep_is_held(&local->sta_lock) || | |
156 | lockdep_is_held(&local->sta_mtx)); | |
157 | } | |
158 | return sta; | |
159 | } | |
160 | ||
161 | /* | |
162 | * Get sta info either from the specified interface | |
163 | * or from one of its vlans (including dummy stations) | |
164 | */ | |
165 | struct sta_info *sta_info_get_bss_rx(struct ieee80211_sub_if_data *sdata, | |
166 | const u8 *addr) | |
167 | { | |
168 | struct ieee80211_local *local = sdata->local; | |
169 | struct sta_info *sta; | |
170 | ||
0379185b | 171 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
0379185b JB |
172 | lockdep_is_held(&local->sta_lock) || |
173 | lockdep_is_held(&local->sta_mtx)); | |
0e5ded5a FF |
174 | while (sta) { |
175 | if ((sta->sdata == sdata || | |
a2c1e3da | 176 | (sta->sdata->bss && sta->sdata->bss == sdata->bss)) && |
0e5ded5a FF |
177 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) |
178 | break; | |
0379185b | 179 | sta = rcu_dereference_check(sta->hnext, |
0379185b JB |
180 | lockdep_is_held(&local->sta_lock) || |
181 | lockdep_is_held(&local->sta_mtx)); | |
0e5ded5a FF |
182 | } |
183 | return sta; | |
184 | } | |
185 | ||
3b53fde8 JB |
186 | struct sta_info *sta_info_get_by_idx(struct ieee80211_sub_if_data *sdata, |
187 | int idx) | |
ee385855 | 188 | { |
3b53fde8 | 189 | struct ieee80211_local *local = sdata->local; |
ee385855 LCC |
190 | struct sta_info *sta; |
191 | int i = 0; | |
192 | ||
d0709a65 | 193 | list_for_each_entry_rcu(sta, &local->sta_list, list) { |
3b53fde8 | 194 | if (sdata != sta->sdata) |
2a8ca29a | 195 | continue; |
ee385855 LCC |
196 | if (i < idx) { |
197 | ++i; | |
198 | continue; | |
ee385855 | 199 | } |
2a8ca29a | 200 | return sta; |
ee385855 | 201 | } |
ee385855 LCC |
202 | |
203 | return NULL; | |
204 | } | |
f0706e82 | 205 | |
93e5deb1 JB |
206 | /** |
207 | * __sta_info_free - internal STA free helper | |
208 | * | |
6ef307bc | 209 | * @local: pointer to the global information |
93e5deb1 JB |
210 | * @sta: STA info to free |
211 | * | |
212 | * This function must undo everything done by sta_info_alloc() | |
213 | * that may happen before sta_info_insert(). | |
214 | */ | |
215 | static void __sta_info_free(struct ieee80211_local *local, | |
216 | struct sta_info *sta) | |
217 | { | |
af65cd96 JB |
218 | if (sta->rate_ctrl) { |
219 | rate_control_free_sta(sta); | |
220 | rate_control_put(sta->rate_ctrl); | |
221 | } | |
93e5deb1 JB |
222 | |
223 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
0fb9a9ec | 224 | wiphy_debug(local->hw.wiphy, "Destroyed STA %pM\n", sta->sta.addr); |
93e5deb1 JB |
225 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
226 | ||
227 | kfree(sta); | |
228 | } | |
229 | ||
d0709a65 JB |
230 | /* Caller must hold local->sta_lock */ |
231 | static void sta_info_hash_add(struct ieee80211_local *local, | |
232 | struct sta_info *sta) | |
f0706e82 | 233 | { |
17741cdc JB |
234 | sta->hnext = local->sta_hash[STA_HASH(sta->sta.addr)]; |
235 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], sta); | |
f0706e82 | 236 | } |
f0706e82 | 237 | |
af818581 JB |
238 | static void sta_unblock(struct work_struct *wk) |
239 | { | |
240 | struct sta_info *sta; | |
241 | ||
242 | sta = container_of(wk, struct sta_info, drv_unblock_wk); | |
243 | ||
244 | if (sta->dead) | |
245 | return; | |
246 | ||
247 | if (!test_sta_flags(sta, WLAN_STA_PS_STA)) | |
248 | ieee80211_sta_ps_deliver_wakeup(sta); | |
50a9432d JB |
249 | else if (test_and_clear_sta_flags(sta, WLAN_STA_PSPOLL)) { |
250 | clear_sta_flags(sta, WLAN_STA_PS_DRIVER); | |
ce662b44 JB |
251 | |
252 | local_bh_disable(); | |
af818581 | 253 | ieee80211_sta_ps_deliver_poll_response(sta); |
ce662b44 | 254 | local_bh_enable(); |
47086fc5 JB |
255 | } else if (test_and_clear_sta_flags(sta, WLAN_STA_UAPSD)) { |
256 | clear_sta_flags(sta, WLAN_STA_PS_DRIVER); | |
ce662b44 JB |
257 | |
258 | local_bh_disable(); | |
47086fc5 | 259 | ieee80211_sta_ps_deliver_uapsd(sta); |
ce662b44 | 260 | local_bh_enable(); |
50a9432d JB |
261 | } else |
262 | clear_sta_flags(sta, WLAN_STA_PS_DRIVER); | |
af818581 JB |
263 | } |
264 | ||
af65cd96 JB |
265 | static int sta_prepare_rate_control(struct ieee80211_local *local, |
266 | struct sta_info *sta, gfp_t gfp) | |
267 | { | |
268 | if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) | |
269 | return 0; | |
270 | ||
271 | sta->rate_ctrl = rate_control_get(local->rate_ctrl); | |
272 | sta->rate_ctrl_priv = rate_control_alloc_sta(sta->rate_ctrl, | |
273 | &sta->sta, gfp); | |
274 | if (!sta->rate_ctrl_priv) { | |
275 | rate_control_put(sta->rate_ctrl); | |
276 | return -ENOMEM; | |
277 | } | |
278 | ||
279 | return 0; | |
280 | } | |
281 | ||
73651ee6 JB |
282 | struct sta_info *sta_info_alloc(struct ieee80211_sub_if_data *sdata, |
283 | u8 *addr, gfp_t gfp) | |
f0706e82 | 284 | { |
d0709a65 | 285 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 286 | struct sta_info *sta; |
ebe27c91 | 287 | struct timespec uptime; |
16c5f15c | 288 | int i; |
f0706e82 | 289 | |
17741cdc | 290 | sta = kzalloc(sizeof(*sta) + local->hw.sta_data_size, gfp); |
f0706e82 | 291 | if (!sta) |
73651ee6 | 292 | return NULL; |
f0706e82 | 293 | |
07346f81 | 294 | spin_lock_init(&sta->lock); |
5a9f7b04 | 295 | spin_lock_init(&sta->flaglock); |
af818581 | 296 | INIT_WORK(&sta->drv_unblock_wk, sta_unblock); |
67c282c0 | 297 | INIT_WORK(&sta->ampdu_mlme.work, ieee80211_ba_session_work); |
a93e3644 | 298 | mutex_init(&sta->ampdu_mlme.mtx); |
07346f81 | 299 | |
17741cdc | 300 | memcpy(sta->sta.addr, addr, ETH_ALEN); |
d0709a65 JB |
301 | sta->local = local; |
302 | sta->sdata = sdata; | |
8bc8aecd | 303 | sta->last_rx = jiffies; |
f0706e82 | 304 | |
ebe27c91 MSS |
305 | do_posix_clock_monotonic_gettime(&uptime); |
306 | sta->last_connected = uptime.tv_sec; | |
541a45a1 BR |
307 | ewma_init(&sta->avg_signal, 1024, 8); |
308 | ||
af65cd96 | 309 | if (sta_prepare_rate_control(local, sta, gfp)) { |
f0706e82 | 310 | kfree(sta); |
73651ee6 | 311 | return NULL; |
f0706e82 JB |
312 | } |
313 | ||
16c5f15c | 314 | for (i = 0; i < STA_TID_NUM; i++) { |
a622ab72 JB |
315 | /* |
316 | * timer_to_tid must be initialized with identity mapping | |
317 | * to enable session_timer's data differentiation. See | |
318 | * sta_rx_agg_session_timer_expired for usage. | |
319 | */ | |
16c5f15c | 320 | sta->timer_to_tid[i] = i; |
16c5f15c | 321 | } |
948d887d JB |
322 | for (i = 0; i < IEEE80211_NUM_ACS; i++) { |
323 | skb_queue_head_init(&sta->ps_tx_buf[i]); | |
324 | skb_queue_head_init(&sta->tx_filtered[i]); | |
325 | } | |
73651ee6 | 326 | |
cccaec98 | 327 | for (i = 0; i < NUM_RX_DATA_QUEUES; i++) |
4be929be | 328 | sta->last_seq_ctrl[i] = cpu_to_le16(USHRT_MAX); |
cccaec98 | 329 | |
73651ee6 | 330 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
0fb9a9ec | 331 | wiphy_debug(local->hw.wiphy, "Allocated STA %pM\n", sta->sta.addr); |
73651ee6 JB |
332 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
333 | ||
03e4497e | 334 | #ifdef CONFIG_MAC80211_MESH |
57cf8043 | 335 | sta->plink_state = NL80211_PLINK_LISTEN; |
03e4497e JB |
336 | init_timer(&sta->plink_timer); |
337 | #endif | |
338 | ||
73651ee6 JB |
339 | return sta; |
340 | } | |
341 | ||
2a33bee2 GE |
342 | static int sta_info_finish_insert(struct sta_info *sta, |
343 | bool async, bool dummy_reinsert) | |
73651ee6 JB |
344 | { |
345 | struct ieee80211_local *local = sta->local; | |
346 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
98b62183 | 347 | struct station_info sinfo; |
73651ee6 | 348 | unsigned long flags; |
93e5deb1 | 349 | int err = 0; |
73651ee6 | 350 | |
46a5ebaf | 351 | lockdep_assert_held(&local->sta_mtx); |
34e89507 | 352 | |
2a33bee2 GE |
353 | if (!sta->dummy || dummy_reinsert) { |
354 | /* notify driver */ | |
355 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) | |
356 | sdata = container_of(sdata->bss, | |
357 | struct ieee80211_sub_if_data, | |
358 | u.ap); | |
359 | err = drv_sta_add(local, sdata, &sta->sta); | |
360 | if (err) { | |
361 | if (!async) | |
362 | return err; | |
363 | printk(KERN_DEBUG "%s: failed to add IBSS STA %pM to " | |
364 | "driver (%d) - keeping it anyway.\n", | |
365 | sdata->name, sta->sta.addr, err); | |
366 | } else { | |
367 | sta->uploaded = true; | |
34e89507 | 368 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
2a33bee2 GE |
369 | if (async) |
370 | wiphy_debug(local->hw.wiphy, | |
371 | "Finished adding IBSS STA %pM\n", | |
372 | sta->sta.addr); | |
34e89507 | 373 | #endif |
2a33bee2 GE |
374 | } |
375 | ||
376 | sdata = sta->sdata; | |
34e89507 JB |
377 | } |
378 | ||
2a33bee2 GE |
379 | if (!dummy_reinsert) { |
380 | if (!async) { | |
381 | local->num_sta++; | |
382 | local->sta_generation++; | |
383 | smp_mb(); | |
34e89507 | 384 | |
2a33bee2 GE |
385 | /* make the station visible */ |
386 | spin_lock_irqsave(&local->sta_lock, flags); | |
387 | sta_info_hash_add(local, sta); | |
388 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
389 | } | |
34e89507 | 390 | |
2a33bee2 GE |
391 | list_add(&sta->list, &local->sta_list); |
392 | } else { | |
393 | sta->dummy = false; | |
34e89507 JB |
394 | } |
395 | ||
2a33bee2 GE |
396 | if (!sta->dummy) { |
397 | ieee80211_sta_debugfs_add(sta); | |
398 | rate_control_add_sta_debugfs(sta); | |
34e89507 | 399 | |
2a33bee2 GE |
400 | memset(&sinfo, 0, sizeof(sinfo)); |
401 | sinfo.filled = 0; | |
402 | sinfo.generation = local->sta_generation; | |
403 | cfg80211_new_sta(sdata->dev, sta->sta.addr, &sinfo, GFP_KERNEL); | |
404 | } | |
34e89507 JB |
405 | |
406 | return 0; | |
407 | } | |
408 | ||
409 | static void sta_info_finish_pending(struct ieee80211_local *local) | |
410 | { | |
411 | struct sta_info *sta; | |
412 | unsigned long flags; | |
413 | ||
414 | spin_lock_irqsave(&local->sta_lock, flags); | |
415 | while (!list_empty(&local->sta_pending_list)) { | |
416 | sta = list_first_entry(&local->sta_pending_list, | |
417 | struct sta_info, list); | |
418 | list_del(&sta->list); | |
419 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
420 | ||
2a33bee2 | 421 | sta_info_finish_insert(sta, true, false); |
34e89507 JB |
422 | |
423 | spin_lock_irqsave(&local->sta_lock, flags); | |
424 | } | |
425 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
426 | } | |
427 | ||
428 | static void sta_info_finish_work(struct work_struct *work) | |
429 | { | |
430 | struct ieee80211_local *local = | |
431 | container_of(work, struct ieee80211_local, sta_finish_work); | |
432 | ||
433 | mutex_lock(&local->sta_mtx); | |
434 | sta_info_finish_pending(local); | |
435 | mutex_unlock(&local->sta_mtx); | |
436 | } | |
437 | ||
8c71df7a | 438 | static int sta_info_insert_check(struct sta_info *sta) |
34e89507 | 439 | { |
34e89507 | 440 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
34e89507 | 441 | |
03e4497e JB |
442 | /* |
443 | * Can't be a WARN_ON because it can be triggered through a race: | |
444 | * something inserts a STA (on one CPU) without holding the RTNL | |
445 | * and another CPU turns off the net device. | |
446 | */ | |
8c71df7a GE |
447 | if (unlikely(!ieee80211_sdata_running(sdata))) |
448 | return -ENETDOWN; | |
03e4497e | 449 | |
47846c9b | 450 | if (WARN_ON(compare_ether_addr(sta->sta.addr, sdata->vif.addr) == 0 || |
8c71df7a GE |
451 | is_multicast_ether_addr(sta->sta.addr))) |
452 | return -EINVAL; | |
453 | ||
454 | return 0; | |
455 | } | |
456 | ||
457 | static int sta_info_insert_ibss(struct sta_info *sta) __acquires(RCU) | |
458 | { | |
459 | struct ieee80211_local *local = sta->local; | |
460 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
461 | unsigned long flags; | |
462 | ||
463 | spin_lock_irqsave(&local->sta_lock, flags); | |
464 | /* check if STA exists already */ | |
2a33bee2 | 465 | if (sta_info_get_bss_rx(sdata, sta->sta.addr)) { |
8c71df7a | 466 | spin_unlock_irqrestore(&local->sta_lock, flags); |
34e89507 | 467 | rcu_read_lock(); |
8c71df7a | 468 | return -EEXIST; |
93e5deb1 | 469 | } |
44213b5e | 470 | |
8c71df7a GE |
471 | local->num_sta++; |
472 | local->sta_generation++; | |
473 | smp_mb(); | |
474 | sta_info_hash_add(local, sta); | |
34e89507 | 475 | |
8c71df7a | 476 | list_add_tail(&sta->list, &local->sta_pending_list); |
34e89507 | 477 | |
8c71df7a GE |
478 | rcu_read_lock(); |
479 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
34e89507 JB |
480 | |
481 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
8c71df7a GE |
482 | wiphy_debug(local->hw.wiphy, "Added IBSS STA %pM\n", |
483 | sta->sta.addr); | |
34e89507 JB |
484 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
485 | ||
8c71df7a | 486 | ieee80211_queue_work(&local->hw, &local->sta_finish_work); |
34e89507 | 487 | |
8c71df7a GE |
488 | return 0; |
489 | } | |
490 | ||
491 | /* | |
492 | * should be called with sta_mtx locked | |
493 | * this function replaces the mutex lock | |
494 | * with a RCU lock | |
495 | */ | |
496 | static int sta_info_insert_non_ibss(struct sta_info *sta) __acquires(RCU) | |
497 | { | |
498 | struct ieee80211_local *local = sta->local; | |
499 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
500 | unsigned long flags; | |
2a33bee2 GE |
501 | struct sta_info *exist_sta; |
502 | bool dummy_reinsert = false; | |
8c71df7a GE |
503 | int err = 0; |
504 | ||
505 | lockdep_assert_held(&local->sta_mtx); | |
34e89507 JB |
506 | |
507 | /* | |
508 | * On first glance, this will look racy, because the code | |
8c71df7a | 509 | * in this function, which inserts a station with sleeping, |
34e89507 JB |
510 | * unlocks the sta_lock between checking existence in the |
511 | * hash table and inserting into it. | |
512 | * | |
513 | * However, it is not racy against itself because it keeps | |
8c71df7a | 514 | * the mutex locked. |
34e89507 JB |
515 | */ |
516 | ||
d0709a65 | 517 | spin_lock_irqsave(&local->sta_lock, flags); |
2a33bee2 GE |
518 | /* |
519 | * check if STA exists already. | |
520 | * only accept a scenario of a second call to sta_info_insert_non_ibss | |
521 | * with a dummy station entry that was inserted earlier | |
522 | * in that case - assume that the dummy station flag should | |
523 | * be removed. | |
524 | */ | |
525 | exist_sta = sta_info_get_bss_rx(sdata, sta->sta.addr); | |
526 | if (exist_sta) { | |
527 | if (exist_sta == sta && sta->dummy) { | |
528 | dummy_reinsert = true; | |
529 | } else { | |
530 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
531 | mutex_unlock(&local->sta_mtx); | |
532 | rcu_read_lock(); | |
533 | return -EEXIST; | |
534 | } | |
43ba7e95 | 535 | } |
32bfd35d | 536 | |
34e89507 | 537 | spin_unlock_irqrestore(&local->sta_lock, flags); |
32bfd35d | 538 | |
2a33bee2 | 539 | err = sta_info_finish_insert(sta, false, dummy_reinsert); |
34e89507 JB |
540 | if (err) { |
541 | mutex_unlock(&local->sta_mtx); | |
542 | rcu_read_lock(); | |
8c71df7a | 543 | return err; |
32bfd35d | 544 | } |
d0709a65 | 545 | |
f0706e82 | 546 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
2a33bee2 GE |
547 | wiphy_debug(local->hw.wiphy, "Inserted %sSTA %pM\n", |
548 | sta->dummy ? "dummy " : "", sta->sta.addr); | |
f0706e82 JB |
549 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
550 | ||
34e89507 JB |
551 | /* move reference to rcu-protected */ |
552 | rcu_read_lock(); | |
553 | mutex_unlock(&local->sta_mtx); | |
e9f207f0 | 554 | |
73651ee6 JB |
555 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
556 | mesh_accept_plinks_update(sdata); | |
557 | ||
8c71df7a GE |
558 | return 0; |
559 | } | |
560 | ||
561 | int sta_info_insert_rcu(struct sta_info *sta) __acquires(RCU) | |
562 | { | |
563 | struct ieee80211_local *local = sta->local; | |
564 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
565 | int err = 0; | |
566 | ||
567 | err = sta_info_insert_check(sta); | |
568 | if (err) { | |
569 | rcu_read_lock(); | |
570 | goto out_free; | |
571 | } | |
572 | ||
573 | /* | |
574 | * In ad-hoc mode, we sometimes need to insert stations | |
575 | * from tasklet context from the RX path. To avoid races, | |
576 | * always do so in that case -- see the comment below. | |
577 | */ | |
578 | if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { | |
579 | err = sta_info_insert_ibss(sta); | |
580 | if (err) | |
581 | goto out_free; | |
582 | ||
583 | return 0; | |
584 | } | |
585 | ||
586 | /* | |
587 | * It might seem that the function called below is in race against | |
588 | * the function call above that atomically inserts the station... That, | |
589 | * however, is not true because the above code can only | |
590 | * be invoked for IBSS interfaces, and the below code will | |
591 | * not be -- and the two do not race against each other as | |
592 | * the hash table also keys off the interface. | |
593 | */ | |
594 | ||
595 | might_sleep(); | |
596 | ||
597 | mutex_lock(&local->sta_mtx); | |
598 | ||
599 | err = sta_info_insert_non_ibss(sta); | |
600 | if (err) | |
601 | goto out_free; | |
602 | ||
73651ee6 | 603 | return 0; |
93e5deb1 JB |
604 | out_free: |
605 | BUG_ON(!err); | |
606 | __sta_info_free(local, sta); | |
607 | return err; | |
f0706e82 JB |
608 | } |
609 | ||
34e89507 JB |
610 | int sta_info_insert(struct sta_info *sta) |
611 | { | |
612 | int err = sta_info_insert_rcu(sta); | |
613 | ||
614 | rcu_read_unlock(); | |
615 | ||
616 | return err; | |
617 | } | |
618 | ||
2a33bee2 GE |
619 | /* Caller must hold sta->local->sta_mtx */ |
620 | int sta_info_reinsert(struct sta_info *sta) | |
621 | { | |
622 | struct ieee80211_local *local = sta->local; | |
623 | int err = 0; | |
624 | ||
625 | err = sta_info_insert_check(sta); | |
626 | if (err) { | |
627 | mutex_unlock(&local->sta_mtx); | |
628 | return err; | |
629 | } | |
630 | ||
631 | might_sleep(); | |
632 | ||
633 | err = sta_info_insert_non_ibss(sta); | |
634 | rcu_read_unlock(); | |
635 | return err; | |
636 | } | |
637 | ||
004c872e JB |
638 | static inline void __bss_tim_set(struct ieee80211_if_ap *bss, u16 aid) |
639 | { | |
640 | /* | |
641 | * This format has been mandated by the IEEE specifications, | |
642 | * so this line may not be changed to use the __set_bit() format. | |
643 | */ | |
644 | bss->tim[aid / 8] |= (1 << (aid % 8)); | |
645 | } | |
646 | ||
647 | static inline void __bss_tim_clear(struct ieee80211_if_ap *bss, u16 aid) | |
648 | { | |
649 | /* | |
650 | * This format has been mandated by the IEEE specifications, | |
651 | * so this line may not be changed to use the __clear_bit() format. | |
652 | */ | |
653 | bss->tim[aid / 8] &= ~(1 << (aid % 8)); | |
654 | } | |
655 | ||
948d887d JB |
656 | static unsigned long ieee80211_tids_for_ac(int ac) |
657 | { | |
658 | /* If we ever support TIDs > 7, this obviously needs to be adjusted */ | |
659 | switch (ac) { | |
660 | case IEEE80211_AC_VO: | |
661 | return BIT(6) | BIT(7); | |
662 | case IEEE80211_AC_VI: | |
663 | return BIT(4) | BIT(5); | |
664 | case IEEE80211_AC_BE: | |
665 | return BIT(0) | BIT(3); | |
666 | case IEEE80211_AC_BK: | |
667 | return BIT(1) | BIT(2); | |
668 | default: | |
669 | WARN_ON(1); | |
670 | return 0; | |
671 | } | |
672 | } | |
673 | ||
c868cb35 | 674 | void sta_info_recalc_tim(struct sta_info *sta) |
004c872e | 675 | { |
c868cb35 JB |
676 | struct ieee80211_local *local = sta->local; |
677 | struct ieee80211_if_ap *bss = sta->sdata->bss; | |
d0709a65 | 678 | unsigned long flags; |
948d887d JB |
679 | bool indicate_tim = false; |
680 | u8 ignore_for_tim = sta->sta.uapsd_queues; | |
681 | int ac; | |
004c872e | 682 | |
c868cb35 JB |
683 | if (WARN_ON_ONCE(!sta->sdata->bss)) |
684 | return; | |
3e122be0 | 685 | |
c868cb35 JB |
686 | /* No need to do anything if the driver does all */ |
687 | if (local->hw.flags & IEEE80211_HW_AP_LINK_PS) | |
688 | return; | |
004c872e | 689 | |
c868cb35 JB |
690 | if (sta->dead) |
691 | goto done; | |
3e122be0 | 692 | |
948d887d JB |
693 | /* |
694 | * If all ACs are delivery-enabled then we should build | |
695 | * the TIM bit for all ACs anyway; if only some are then | |
696 | * we ignore those and build the TIM bit using only the | |
697 | * non-enabled ones. | |
698 | */ | |
699 | if (ignore_for_tim == BIT(IEEE80211_NUM_ACS) - 1) | |
700 | ignore_for_tim = 0; | |
701 | ||
702 | for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { | |
703 | unsigned long tids; | |
704 | ||
705 | if (ignore_for_tim & BIT(ac)) | |
706 | continue; | |
707 | ||
708 | indicate_tim |= !skb_queue_empty(&sta->tx_filtered[ac]) || | |
709 | !skb_queue_empty(&sta->ps_tx_buf[ac]); | |
710 | if (indicate_tim) | |
711 | break; | |
712 | ||
713 | tids = ieee80211_tids_for_ac(ac); | |
714 | ||
715 | indicate_tim |= | |
716 | sta->driver_buffered_tids & tids; | |
717 | } | |
3e122be0 | 718 | |
c868cb35 JB |
719 | done: |
720 | spin_lock_irqsave(&local->sta_lock, flags); | |
004c872e | 721 | |
948d887d | 722 | if (indicate_tim) |
c868cb35 JB |
723 | __bss_tim_set(bss, sta->sta.aid); |
724 | else | |
725 | __bss_tim_clear(bss, sta->sta.aid); | |
004c872e | 726 | |
c868cb35 JB |
727 | if (local->ops->set_tim) { |
728 | local->tim_in_locked_section = true; | |
948d887d | 729 | drv_set_tim(local, &sta->sta, indicate_tim); |
c868cb35 JB |
730 | local->tim_in_locked_section = false; |
731 | } | |
3e122be0 | 732 | |
c868cb35 | 733 | spin_unlock_irqrestore(&local->sta_lock, flags); |
004c872e JB |
734 | } |
735 | ||
cd0b8d89 | 736 | static bool sta_info_buffer_expired(struct sta_info *sta, struct sk_buff *skb) |
f0706e82 | 737 | { |
e039fa4a | 738 | struct ieee80211_tx_info *info; |
f0706e82 JB |
739 | int timeout; |
740 | ||
741 | if (!skb) | |
cd0b8d89 | 742 | return false; |
f0706e82 | 743 | |
e039fa4a | 744 | info = IEEE80211_SKB_CB(skb); |
f0706e82 JB |
745 | |
746 | /* Timeout: (2 * listen_interval * beacon_int * 1024 / 1000000) sec */ | |
57c4d7b4 JB |
747 | timeout = (sta->listen_interval * |
748 | sta->sdata->vif.bss_conf.beacon_int * | |
749 | 32 / 15625) * HZ; | |
f0706e82 JB |
750 | if (timeout < STA_TX_BUFFER_EXPIRE) |
751 | timeout = STA_TX_BUFFER_EXPIRE; | |
e039fa4a | 752 | return time_after(jiffies, info->control.jiffies + timeout); |
f0706e82 JB |
753 | } |
754 | ||
755 | ||
948d887d JB |
756 | static bool sta_info_cleanup_expire_buffered_ac(struct ieee80211_local *local, |
757 | struct sta_info *sta, int ac) | |
f0706e82 JB |
758 | { |
759 | unsigned long flags; | |
760 | struct sk_buff *skb; | |
761 | ||
60750397 JB |
762 | /* |
763 | * First check for frames that should expire on the filtered | |
764 | * queue. Frames here were rejected by the driver and are on | |
765 | * a separate queue to avoid reordering with normal PS-buffered | |
766 | * frames. They also aren't accounted for right now in the | |
767 | * total_ps_buffered counter. | |
768 | */ | |
769 | for (;;) { | |
948d887d JB |
770 | spin_lock_irqsave(&sta->tx_filtered[ac].lock, flags); |
771 | skb = skb_peek(&sta->tx_filtered[ac]); | |
60750397 | 772 | if (sta_info_buffer_expired(sta, skb)) |
948d887d | 773 | skb = __skb_dequeue(&sta->tx_filtered[ac]); |
60750397 JB |
774 | else |
775 | skb = NULL; | |
948d887d | 776 | spin_unlock_irqrestore(&sta->tx_filtered[ac].lock, flags); |
60750397 JB |
777 | |
778 | /* | |
779 | * Frames are queued in order, so if this one | |
780 | * hasn't expired yet we can stop testing. If | |
781 | * we actually reached the end of the queue we | |
782 | * also need to stop, of course. | |
783 | */ | |
784 | if (!skb) | |
785 | break; | |
786 | dev_kfree_skb(skb); | |
787 | } | |
788 | ||
789 | /* | |
790 | * Now also check the normal PS-buffered queue, this will | |
791 | * only find something if the filtered queue was emptied | |
792 | * since the filtered frames are all before the normal PS | |
793 | * buffered frames. | |
794 | */ | |
f0706e82 | 795 | for (;;) { |
948d887d JB |
796 | spin_lock_irqsave(&sta->ps_tx_buf[ac].lock, flags); |
797 | skb = skb_peek(&sta->ps_tx_buf[ac]); | |
57c4d7b4 | 798 | if (sta_info_buffer_expired(sta, skb)) |
948d887d | 799 | skb = __skb_dequeue(&sta->ps_tx_buf[ac]); |
836341a7 | 800 | else |
f0706e82 | 801 | skb = NULL; |
948d887d | 802 | spin_unlock_irqrestore(&sta->ps_tx_buf[ac].lock, flags); |
f0706e82 | 803 | |
60750397 JB |
804 | /* |
805 | * frames are queued in order, so if this one | |
806 | * hasn't expired yet (or we reached the end of | |
807 | * the queue) we can stop testing | |
808 | */ | |
836341a7 | 809 | if (!skb) |
f0706e82 | 810 | break; |
836341a7 | 811 | |
836341a7 | 812 | local->total_ps_buffered--; |
f4ea83dd | 813 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
0c68ae26 JB |
814 | printk(KERN_DEBUG "Buffered frame expired (STA %pM)\n", |
815 | sta->sta.addr); | |
f4ea83dd | 816 | #endif |
836341a7 | 817 | dev_kfree_skb(skb); |
f0706e82 | 818 | } |
3393a608 | 819 | |
60750397 JB |
820 | /* |
821 | * Finally, recalculate the TIM bit for this station -- it might | |
822 | * now be clear because the station was too slow to retrieve its | |
823 | * frames. | |
824 | */ | |
825 | sta_info_recalc_tim(sta); | |
826 | ||
827 | /* | |
828 | * Return whether there are any frames still buffered, this is | |
829 | * used to check whether the cleanup timer still needs to run, | |
830 | * if there are no frames we don't need to rearm the timer. | |
831 | */ | |
948d887d JB |
832 | return !(skb_queue_empty(&sta->ps_tx_buf[ac]) && |
833 | skb_queue_empty(&sta->tx_filtered[ac])); | |
834 | } | |
835 | ||
836 | static bool sta_info_cleanup_expire_buffered(struct ieee80211_local *local, | |
837 | struct sta_info *sta) | |
838 | { | |
839 | bool have_buffered = false; | |
840 | int ac; | |
841 | ||
842 | /* This is only necessary for stations on BSS interfaces */ | |
843 | if (!sta->sdata->bss) | |
844 | return false; | |
845 | ||
846 | for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) | |
847 | have_buffered |= | |
848 | sta_info_cleanup_expire_buffered_ac(local, sta, ac); | |
849 | ||
850 | return have_buffered; | |
f0706e82 JB |
851 | } |
852 | ||
34e89507 | 853 | static int __must_check __sta_info_destroy(struct sta_info *sta) |
f0706e82 | 854 | { |
34e89507 JB |
855 | struct ieee80211_local *local; |
856 | struct ieee80211_sub_if_data *sdata; | |
34e89507 | 857 | unsigned long flags; |
948d887d | 858 | int ret, i, ac; |
f0706e82 | 859 | |
34e89507 | 860 | might_sleep(); |
f0706e82 | 861 | |
34e89507 JB |
862 | if (!sta) |
863 | return -ENOENT; | |
5bb644a0 | 864 | |
34e89507 JB |
865 | local = sta->local; |
866 | sdata = sta->sdata; | |
f0706e82 | 867 | |
098a6070 JB |
868 | /* |
869 | * Before removing the station from the driver and | |
870 | * rate control, it might still start new aggregation | |
871 | * sessions -- block that to make sure the tear-down | |
872 | * will be sufficient. | |
873 | */ | |
874 | set_sta_flags(sta, WLAN_STA_BLOCK_BA); | |
53f73c09 | 875 | ieee80211_sta_tear_down_BA_sessions(sta, true); |
098a6070 | 876 | |
34e89507 JB |
877 | spin_lock_irqsave(&local->sta_lock, flags); |
878 | ret = sta_info_hash_del(local, sta); | |
879 | /* this might still be the pending list ... which is fine */ | |
880 | if (!ret) | |
881 | list_del(&sta->list); | |
882 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
883 | if (ret) | |
884 | return ret; | |
885 | ||
8cb23153 | 886 | mutex_lock(&local->key_mtx); |
e31b8213 | 887 | for (i = 0; i < NUM_DEFAULT_KEYS; i++) |
40b275b6 | 888 | __ieee80211_key_free(key_mtx_dereference(local, sta->gtk[i])); |
e31b8213 | 889 | if (sta->ptk) |
40b275b6 | 890 | __ieee80211_key_free(key_mtx_dereference(local, sta->ptk)); |
8cb23153 | 891 | mutex_unlock(&local->key_mtx); |
34e89507 JB |
892 | |
893 | sta->dead = true; | |
894 | ||
895 | if (test_and_clear_sta_flags(sta, | |
896 | WLAN_STA_PS_STA | WLAN_STA_PS_DRIVER)) { | |
897 | BUG_ON(!sdata->bss); | |
898 | ||
899 | atomic_dec(&sdata->bss->num_sta_ps); | |
c868cb35 | 900 | sta_info_recalc_tim(sta); |
34e89507 JB |
901 | } |
902 | ||
903 | local->num_sta--; | |
904 | local->sta_generation++; | |
905 | ||
906 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) | |
907 | rcu_assign_pointer(sdata->u.vlan.sta, NULL); | |
908 | ||
909 | if (sta->uploaded) { | |
910 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) | |
911 | sdata = container_of(sdata->bss, | |
912 | struct ieee80211_sub_if_data, | |
913 | u.ap); | |
914 | drv_sta_remove(local, sdata, &sta->sta); | |
915 | sdata = sta->sdata; | |
916 | } | |
917 | ||
e64b3795 JB |
918 | /* |
919 | * At this point, after we wait for an RCU grace period, | |
920 | * neither mac80211 nor the driver can reference this | |
921 | * sta struct any more except by still existing timers | |
922 | * associated with this station that we clean up below. | |
923 | */ | |
924 | synchronize_rcu(); | |
925 | ||
948d887d JB |
926 | for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { |
927 | local->total_ps_buffered -= skb_queue_len(&sta->ps_tx_buf[ac]); | |
928 | __skb_queue_purge(&sta->ps_tx_buf[ac]); | |
929 | __skb_queue_purge(&sta->tx_filtered[ac]); | |
930 | } | |
c868cb35 | 931 | |
34e89507 | 932 | #ifdef CONFIG_MAC80211_MESH |
e64b3795 | 933 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
34e89507 | 934 | mesh_accept_plinks_update(sdata); |
34e89507 JB |
935 | #endif |
936 | ||
937 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
0fb9a9ec | 938 | wiphy_debug(local->hw.wiphy, "Removed STA %pM\n", sta->sta.addr); |
34e89507 JB |
939 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
940 | cancel_work_sync(&sta->drv_unblock_wk); | |
941 | ||
ec15e68b JM |
942 | cfg80211_del_sta(sdata->dev, sta->sta.addr, GFP_KERNEL); |
943 | ||
34e89507 JB |
944 | rate_control_remove_sta_debugfs(sta); |
945 | ieee80211_sta_debugfs_remove(sta); | |
946 | ||
947 | #ifdef CONFIG_MAC80211_MESH | |
948 | if (ieee80211_vif_is_mesh(&sta->sdata->vif)) { | |
949 | mesh_plink_deactivate(sta); | |
950 | del_timer_sync(&sta->plink_timer); | |
951 | } | |
952 | #endif | |
953 | ||
34e89507 JB |
954 | __sta_info_free(local, sta); |
955 | ||
956 | return 0; | |
4d6141c3 JS |
957 | } |
958 | ||
34e89507 | 959 | int sta_info_destroy_addr(struct ieee80211_sub_if_data *sdata, const u8 *addr) |
4d6141c3 | 960 | { |
34e89507 JB |
961 | struct sta_info *sta; |
962 | int ret; | |
4d6141c3 | 963 | |
34e89507 | 964 | mutex_lock(&sdata->local->sta_mtx); |
2a33bee2 | 965 | sta = sta_info_get_rx(sdata, addr); |
34e89507 JB |
966 | ret = __sta_info_destroy(sta); |
967 | mutex_unlock(&sdata->local->sta_mtx); | |
4d6141c3 JS |
968 | |
969 | return ret; | |
970 | } | |
971 | ||
34e89507 JB |
972 | int sta_info_destroy_addr_bss(struct ieee80211_sub_if_data *sdata, |
973 | const u8 *addr) | |
e9f207f0 | 974 | { |
34e89507 JB |
975 | struct sta_info *sta; |
976 | int ret; | |
e9f207f0 | 977 | |
34e89507 | 978 | mutex_lock(&sdata->local->sta_mtx); |
2a33bee2 | 979 | sta = sta_info_get_bss_rx(sdata, addr); |
34e89507 JB |
980 | ret = __sta_info_destroy(sta); |
981 | mutex_unlock(&sdata->local->sta_mtx); | |
d0709a65 | 982 | |
34e89507 JB |
983 | return ret; |
984 | } | |
e9f207f0 | 985 | |
34e89507 JB |
986 | static void sta_info_cleanup(unsigned long data) |
987 | { | |
988 | struct ieee80211_local *local = (struct ieee80211_local *) data; | |
989 | struct sta_info *sta; | |
3393a608 | 990 | bool timer_needed = false; |
34e89507 JB |
991 | |
992 | rcu_read_lock(); | |
993 | list_for_each_entry_rcu(sta, &local->sta_list, list) | |
3393a608 JO |
994 | if (sta_info_cleanup_expire_buffered(local, sta)) |
995 | timer_needed = true; | |
34e89507 | 996 | rcu_read_unlock(); |
e9f207f0 | 997 | |
34e89507 JB |
998 | if (local->quiescing) |
999 | return; | |
d0709a65 | 1000 | |
3393a608 JO |
1001 | if (!timer_needed) |
1002 | return; | |
1003 | ||
26d59535 JB |
1004 | mod_timer(&local->sta_cleanup, |
1005 | round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL)); | |
e9f207f0 | 1006 | } |
e9f207f0 | 1007 | |
f0706e82 JB |
1008 | void sta_info_init(struct ieee80211_local *local) |
1009 | { | |
d0709a65 | 1010 | spin_lock_init(&local->sta_lock); |
34e89507 | 1011 | mutex_init(&local->sta_mtx); |
f0706e82 | 1012 | INIT_LIST_HEAD(&local->sta_list); |
34e89507 JB |
1013 | INIT_LIST_HEAD(&local->sta_pending_list); |
1014 | INIT_WORK(&local->sta_finish_work, sta_info_finish_work); | |
f0706e82 | 1015 | |
b24b8a24 PE |
1016 | setup_timer(&local->sta_cleanup, sta_info_cleanup, |
1017 | (unsigned long)local); | |
f0706e82 JB |
1018 | } |
1019 | ||
1020 | void sta_info_stop(struct ieee80211_local *local) | |
1021 | { | |
f0706e82 | 1022 | del_timer(&local->sta_cleanup); |
be8755e1 | 1023 | sta_info_flush(local, NULL); |
f0706e82 JB |
1024 | } |
1025 | ||
f0706e82 JB |
1026 | /** |
1027 | * sta_info_flush - flush matching STA entries from the STA table | |
44213b5e JB |
1028 | * |
1029 | * Returns the number of removed STA entries. | |
1030 | * | |
f0706e82 | 1031 | * @local: local interface data |
d0709a65 | 1032 | * @sdata: matching rule for the net device (sta->dev) or %NULL to match all STAs |
f0706e82 | 1033 | */ |
44213b5e | 1034 | int sta_info_flush(struct ieee80211_local *local, |
af8cdcd8 | 1035 | struct ieee80211_sub_if_data *sdata) |
f0706e82 JB |
1036 | { |
1037 | struct sta_info *sta, *tmp; | |
44213b5e | 1038 | int ret = 0; |
f0706e82 | 1039 | |
d0709a65 | 1040 | might_sleep(); |
be8755e1 | 1041 | |
34e89507 JB |
1042 | mutex_lock(&local->sta_mtx); |
1043 | ||
1044 | sta_info_finish_pending(local); | |
1045 | ||
d0709a65 | 1046 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) { |
34e89507 JB |
1047 | if (!sdata || sdata == sta->sdata) |
1048 | WARN_ON(__sta_info_destroy(sta)); | |
be8755e1 | 1049 | } |
34e89507 | 1050 | mutex_unlock(&local->sta_mtx); |
44213b5e JB |
1051 | |
1052 | return ret; | |
f0706e82 | 1053 | } |
dc6676b7 | 1054 | |
24723d1b JB |
1055 | void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, |
1056 | unsigned long exp_time) | |
1057 | { | |
1058 | struct ieee80211_local *local = sdata->local; | |
1059 | struct sta_info *sta, *tmp; | |
24723d1b | 1060 | |
34e89507 | 1061 | mutex_lock(&local->sta_mtx); |
24723d1b JB |
1062 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) |
1063 | if (time_after(jiffies, sta->last_rx + exp_time)) { | |
1064 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0c68ae26 | 1065 | printk(KERN_DEBUG "%s: expiring inactive STA %pM\n", |
47846c9b | 1066 | sdata->name, sta->sta.addr); |
24723d1b | 1067 | #endif |
34e89507 | 1068 | WARN_ON(__sta_info_destroy(sta)); |
24723d1b | 1069 | } |
34e89507 | 1070 | mutex_unlock(&local->sta_mtx); |
24723d1b | 1071 | } |
17741cdc | 1072 | |
686b9cb9 BG |
1073 | struct ieee80211_sta *ieee80211_find_sta_by_ifaddr(struct ieee80211_hw *hw, |
1074 | const u8 *addr, | |
1075 | const u8 *localaddr) | |
17741cdc | 1076 | { |
abe60632 | 1077 | struct sta_info *sta, *nxt; |
17741cdc | 1078 | |
686b9cb9 BG |
1079 | /* |
1080 | * Just return a random station if localaddr is NULL | |
1081 | * ... first in list. | |
1082 | */ | |
f7c65594 | 1083 | for_each_sta_info(hw_to_local(hw), addr, sta, nxt) { |
686b9cb9 BG |
1084 | if (localaddr && |
1085 | compare_ether_addr(sta->sdata->vif.addr, localaddr) != 0) | |
1086 | continue; | |
f7c65594 JB |
1087 | if (!sta->uploaded) |
1088 | return NULL; | |
abe60632 | 1089 | return &sta->sta; |
f7c65594 JB |
1090 | } |
1091 | ||
abe60632 | 1092 | return NULL; |
17741cdc | 1093 | } |
686b9cb9 | 1094 | EXPORT_SYMBOL_GPL(ieee80211_find_sta_by_ifaddr); |
5ed176e1 JB |
1095 | |
1096 | struct ieee80211_sta *ieee80211_find_sta(struct ieee80211_vif *vif, | |
1097 | const u8 *addr) | |
1098 | { | |
f7c65594 | 1099 | struct sta_info *sta; |
5ed176e1 JB |
1100 | |
1101 | if (!vif) | |
1102 | return NULL; | |
1103 | ||
f7c65594 JB |
1104 | sta = sta_info_get_bss(vif_to_sdata(vif), addr); |
1105 | if (!sta) | |
1106 | return NULL; | |
1107 | ||
1108 | if (!sta->uploaded) | |
1109 | return NULL; | |
5ed176e1 | 1110 | |
f7c65594 | 1111 | return &sta->sta; |
5ed176e1 | 1112 | } |
17741cdc | 1113 | EXPORT_SYMBOL(ieee80211_find_sta); |
af818581 | 1114 | |
50a9432d JB |
1115 | static void clear_sta_ps_flags(void *_sta) |
1116 | { | |
1117 | struct sta_info *sta = _sta; | |
1118 | ||
1119 | clear_sta_flags(sta, WLAN_STA_PS_DRIVER | WLAN_STA_PS_STA); | |
1120 | } | |
1121 | ||
af818581 JB |
1122 | /* powersave support code */ |
1123 | void ieee80211_sta_ps_deliver_wakeup(struct sta_info *sta) | |
1124 | { | |
1125 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
1126 | struct ieee80211_local *local = sdata->local; | |
948d887d JB |
1127 | struct sk_buff_head pending; |
1128 | int filtered = 0, buffered = 0, ac; | |
1129 | ||
47086fc5 JB |
1130 | clear_sta_flags(sta, WLAN_STA_SP); |
1131 | ||
948d887d JB |
1132 | BUILD_BUG_ON(BITS_TO_LONGS(STA_TID_NUM) > 1); |
1133 | sta->driver_buffered_tids = 0; | |
af818581 | 1134 | |
d057e5a3 AN |
1135 | if (!(local->hw.flags & IEEE80211_HW_AP_LINK_PS)) |
1136 | drv_sta_notify(local, sdata, STA_NOTIFY_AWAKE, &sta->sta); | |
af818581 | 1137 | |
948d887d JB |
1138 | skb_queue_head_init(&pending); |
1139 | ||
af818581 | 1140 | /* Send all buffered frames to the station */ |
948d887d JB |
1141 | for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { |
1142 | int count = skb_queue_len(&pending), tmp; | |
1143 | ||
1144 | skb_queue_splice_tail_init(&sta->tx_filtered[ac], &pending); | |
1145 | tmp = skb_queue_len(&pending); | |
1146 | filtered += tmp - count; | |
1147 | count = tmp; | |
1148 | ||
1149 | skb_queue_splice_tail_init(&sta->ps_tx_buf[ac], &pending); | |
1150 | tmp = skb_queue_len(&pending); | |
1151 | buffered += tmp - count; | |
1152 | } | |
1153 | ||
1154 | ieee80211_add_pending_skbs_fn(local, &pending, clear_sta_ps_flags, sta); | |
1155 | ||
af818581 JB |
1156 | local->total_ps_buffered -= buffered; |
1157 | ||
c868cb35 JB |
1158 | sta_info_recalc_tim(sta); |
1159 | ||
af818581 JB |
1160 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
1161 | printk(KERN_DEBUG "%s: STA %pM aid %d sending %d filtered/%d PS frames " | |
47846c9b | 1162 | "since STA not sleeping anymore\n", sdata->name, |
948d887d | 1163 | sta->sta.addr, sta->sta.aid, filtered, buffered); |
af818581 JB |
1164 | #endif /* CONFIG_MAC80211_VERBOSE_PS_DEBUG */ |
1165 | } | |
1166 | ||
ce662b44 JB |
1167 | static void ieee80211_send_null_response(struct ieee80211_sub_if_data *sdata, |
1168 | struct sta_info *sta, int tid, | |
1169 | bool uapsd) | |
1170 | { | |
1171 | struct ieee80211_local *local = sdata->local; | |
1172 | struct ieee80211_qos_hdr *nullfunc; | |
1173 | struct sk_buff *skb; | |
1174 | int size = sizeof(*nullfunc); | |
1175 | __le16 fc; | |
1176 | bool qos = test_sta_flags(sta, WLAN_STA_WME); | |
1177 | struct ieee80211_tx_info *info; | |
1178 | ||
1179 | if (qos) { | |
1180 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | | |
1181 | IEEE80211_STYPE_QOS_NULLFUNC | | |
1182 | IEEE80211_FCTL_FROMDS); | |
1183 | } else { | |
1184 | size -= 2; | |
1185 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | | |
1186 | IEEE80211_STYPE_NULLFUNC | | |
1187 | IEEE80211_FCTL_FROMDS); | |
1188 | } | |
1189 | ||
1190 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + size); | |
1191 | if (!skb) | |
1192 | return; | |
1193 | ||
1194 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
1195 | ||
1196 | nullfunc = (void *) skb_put(skb, size); | |
1197 | nullfunc->frame_control = fc; | |
1198 | nullfunc->duration_id = 0; | |
1199 | memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN); | |
1200 | memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN); | |
1201 | memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN); | |
1202 | ||
1203 | if (qos) { | |
1204 | skb->priority = tid; | |
1205 | ||
1206 | skb_set_queue_mapping(skb, ieee802_1d_to_ac[tid]); | |
1207 | ||
1208 | nullfunc->qos_ctrl = cpu_to_le16(tid); | |
1209 | ||
1210 | if (uapsd) | |
1211 | nullfunc->qos_ctrl |= | |
1212 | cpu_to_le16(IEEE80211_QOS_CTL_EOSP); | |
1213 | } | |
1214 | ||
1215 | info = IEEE80211_SKB_CB(skb); | |
1216 | ||
1217 | /* | |
1218 | * Tell TX path to send this frame even though the | |
1219 | * STA may still remain is PS mode after this frame | |
1220 | * exchange. | |
1221 | */ | |
1222 | info->flags |= IEEE80211_TX_CTL_POLL_RESPONSE; | |
1223 | ||
1224 | if (uapsd) | |
1225 | info->flags |= IEEE80211_TX_STATUS_EOSP | | |
1226 | IEEE80211_TX_CTL_REQ_TX_STATUS; | |
1227 | ||
1228 | ieee80211_xmit(sdata, skb); | |
1229 | } | |
1230 | ||
47086fc5 JB |
1231 | static void |
1232 | ieee80211_sta_ps_deliver_response(struct sta_info *sta, | |
1233 | int n_frames, u8 ignored_acs, | |
1234 | enum ieee80211_frame_release_type reason) | |
af818581 JB |
1235 | { |
1236 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
1237 | struct ieee80211_local *local = sdata->local; | |
4049e09a | 1238 | bool found = false; |
948d887d JB |
1239 | bool more_data = false; |
1240 | int ac; | |
4049e09a | 1241 | unsigned long driver_release_tids = 0; |
47086fc5 | 1242 | struct sk_buff_head frames; |
af818581 | 1243 | |
47086fc5 | 1244 | __skb_queue_head_init(&frames); |
948d887d JB |
1245 | |
1246 | /* | |
47086fc5 | 1247 | * Get response frame(s) and more data bit for it. |
948d887d JB |
1248 | */ |
1249 | for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { | |
4049e09a JB |
1250 | unsigned long tids; |
1251 | ||
47086fc5 | 1252 | if (ignored_acs & BIT(ac)) |
948d887d JB |
1253 | continue; |
1254 | ||
4049e09a JB |
1255 | tids = ieee80211_tids_for_ac(ac); |
1256 | ||
1257 | if (!found) { | |
1258 | driver_release_tids = sta->driver_buffered_tids & tids; | |
1259 | if (driver_release_tids) { | |
1260 | found = true; | |
1261 | } else { | |
47086fc5 JB |
1262 | struct sk_buff *skb; |
1263 | ||
1264 | while (n_frames > 0) { | |
1265 | skb = skb_dequeue(&sta->tx_filtered[ac]); | |
1266 | if (!skb) { | |
1267 | skb = skb_dequeue( | |
1268 | &sta->ps_tx_buf[ac]); | |
1269 | if (skb) | |
1270 | local->total_ps_buffered--; | |
1271 | } | |
1272 | if (!skb) | |
1273 | break; | |
1274 | n_frames--; | |
4049e09a | 1275 | found = true; |
47086fc5 JB |
1276 | __skb_queue_tail(&frames, skb); |
1277 | } | |
948d887d | 1278 | } |
948d887d | 1279 | |
4049e09a JB |
1280 | /* |
1281 | * If the driver has data on more than one TID then | |
1282 | * certainly there's more data if we release just a | |
1283 | * single frame now (from a single TID). | |
1284 | */ | |
47086fc5 JB |
1285 | if (reason == IEEE80211_FRAME_RELEASE_PSPOLL && |
1286 | hweight16(driver_release_tids) > 1) { | |
4049e09a JB |
1287 | more_data = true; |
1288 | driver_release_tids = | |
1289 | BIT(ffs(driver_release_tids) - 1); | |
1290 | break; | |
1291 | } | |
1292 | } | |
948d887d JB |
1293 | |
1294 | if (!skb_queue_empty(&sta->tx_filtered[ac]) || | |
1295 | !skb_queue_empty(&sta->ps_tx_buf[ac])) { | |
1296 | more_data = true; | |
1297 | break; | |
1298 | } | |
af818581 | 1299 | } |
af818581 | 1300 | |
4049e09a | 1301 | if (!found) { |
ce662b44 JB |
1302 | int tid; |
1303 | ||
4049e09a | 1304 | /* |
ce662b44 JB |
1305 | * For PS-Poll, this can only happen due to a race condition |
1306 | * when we set the TIM bit and the station notices it, but | |
1307 | * before it can poll for the frame we expire it. | |
1308 | * | |
1309 | * For uAPSD, this is said in the standard (11.2.1.5 h): | |
1310 | * At each unscheduled SP for a non-AP STA, the AP shall | |
1311 | * attempt to transmit at least one MSDU or MMPDU, but no | |
1312 | * more than the value specified in the Max SP Length field | |
1313 | * in the QoS Capability element from delivery-enabled ACs, | |
1314 | * that are destined for the non-AP STA. | |
1315 | * | |
1316 | * Since we have no other MSDU/MMPDU, transmit a QoS null frame. | |
4049e09a | 1317 | */ |
4049e09a | 1318 | |
ce662b44 JB |
1319 | /* This will evaluate to 1, 3, 5 or 7. */ |
1320 | tid = 7 - ((ffs(~ignored_acs) - 1) << 1); | |
1321 | ||
1322 | ieee80211_send_null_response(sdata, sta, tid, | |
1323 | reason == IEEE80211_FRAME_RELEASE_UAPSD); | |
4049e09a JB |
1324 | return; |
1325 | } | |
1326 | ||
47086fc5 JB |
1327 | if (!driver_release_tids) { |
1328 | struct sk_buff_head pending; | |
1329 | struct sk_buff *skb; | |
af818581 | 1330 | |
47086fc5 | 1331 | skb_queue_head_init(&pending); |
af818581 | 1332 | |
47086fc5 JB |
1333 | while ((skb = __skb_dequeue(&frames))) { |
1334 | struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); | |
1335 | struct ieee80211_hdr *hdr = (void *) skb->data; | |
af818581 | 1336 | |
47086fc5 JB |
1337 | /* |
1338 | * Tell TX path to send this frame even though the | |
1339 | * STA may still remain is PS mode after this frame | |
1340 | * exchange. | |
1341 | */ | |
1342 | info->flags |= IEEE80211_TX_CTL_POLL_RESPONSE; | |
1343 | ||
1344 | /* | |
1345 | * Use MoreData flag to indicate whether there are | |
1346 | * more buffered frames for this STA | |
1347 | */ | |
1348 | if (!more_data) | |
1349 | hdr->frame_control &= | |
1350 | cpu_to_le16(~IEEE80211_FCTL_MOREDATA); | |
1351 | else | |
1352 | hdr->frame_control |= | |
1353 | cpu_to_le16(IEEE80211_FCTL_MOREDATA); | |
1354 | ||
1355 | if (reason == IEEE80211_FRAME_RELEASE_UAPSD && | |
1356 | skb_queue_empty(&frames)) { | |
1357 | /* set EOSP for the frame */ | |
1358 | u8 *p = ieee80211_get_qos_ctl(hdr); | |
1359 | *p |= IEEE80211_QOS_CTL_EOSP; | |
1360 | info->flags |= IEEE80211_TX_STATUS_EOSP | | |
1361 | IEEE80211_TX_CTL_REQ_TX_STATUS; | |
1362 | } | |
af818581 | 1363 | |
47086fc5 JB |
1364 | __skb_queue_tail(&pending, skb); |
1365 | } | |
1366 | ||
1367 | ieee80211_add_pending_skbs(local, &pending); | |
af818581 | 1368 | |
c868cb35 | 1369 | sta_info_recalc_tim(sta); |
af818581 JB |
1370 | } else { |
1371 | /* | |
4049e09a JB |
1372 | * We need to release a frame that is buffered somewhere in the |
1373 | * driver ... it'll have to handle that. | |
1374 | * Note that, as per the comment above, it'll also have to see | |
1375 | * if there is more than just one frame on the specific TID that | |
1376 | * we're releasing from, and it needs to set the more-data bit | |
1377 | * accordingly if we tell it that there's no more data. If we do | |
1378 | * tell it there's more data, then of course the more-data bit | |
1379 | * needs to be set anyway. | |
1380 | */ | |
1381 | drv_release_buffered_frames(local, sta, driver_release_tids, | |
47086fc5 | 1382 | n_frames, reason, more_data); |
4049e09a JB |
1383 | |
1384 | /* | |
1385 | * Note that we don't recalculate the TIM bit here as it would | |
1386 | * most likely have no effect at all unless the driver told us | |
1387 | * that the TID became empty before returning here from the | |
1388 | * release function. | |
1389 | * Either way, however, when the driver tells us that the TID | |
1390 | * became empty we'll do the TIM recalculation. | |
af818581 | 1391 | */ |
af818581 JB |
1392 | } |
1393 | } | |
1394 | ||
47086fc5 JB |
1395 | void ieee80211_sta_ps_deliver_poll_response(struct sta_info *sta) |
1396 | { | |
1397 | u8 ignore_for_response = sta->sta.uapsd_queues; | |
1398 | ||
1399 | /* | |
1400 | * If all ACs are delivery-enabled then we should reply | |
1401 | * from any of them, if only some are enabled we reply | |
1402 | * only from the non-enabled ones. | |
1403 | */ | |
1404 | if (ignore_for_response == BIT(IEEE80211_NUM_ACS) - 1) | |
1405 | ignore_for_response = 0; | |
1406 | ||
1407 | ieee80211_sta_ps_deliver_response(sta, 1, ignore_for_response, | |
1408 | IEEE80211_FRAME_RELEASE_PSPOLL); | |
1409 | } | |
1410 | ||
1411 | void ieee80211_sta_ps_deliver_uapsd(struct sta_info *sta) | |
1412 | { | |
1413 | int n_frames = sta->sta.max_sp; | |
1414 | u8 delivery_enabled = sta->sta.uapsd_queues; | |
1415 | ||
1416 | /* | |
1417 | * If we ever grow support for TSPEC this might happen if | |
1418 | * the TSPEC update from hostapd comes in between a trigger | |
1419 | * frame setting WLAN_STA_UAPSD in the RX path and this | |
1420 | * actually getting called. | |
1421 | */ | |
1422 | if (!delivery_enabled) | |
1423 | return; | |
1424 | ||
1425 | /* Ohh, finally, the service period starts :-) */ | |
1426 | set_sta_flags(sta, WLAN_STA_SP); | |
1427 | ||
1428 | switch (sta->sta.max_sp) { | |
1429 | case 1: | |
1430 | n_frames = 2; | |
1431 | break; | |
1432 | case 2: | |
1433 | n_frames = 4; | |
1434 | break; | |
1435 | case 3: | |
1436 | n_frames = 6; | |
1437 | break; | |
1438 | case 0: | |
1439 | /* XXX: what is a good value? */ | |
1440 | n_frames = 8; | |
1441 | break; | |
1442 | } | |
1443 | ||
1444 | ieee80211_sta_ps_deliver_response(sta, n_frames, ~delivery_enabled, | |
1445 | IEEE80211_FRAME_RELEASE_UAPSD); | |
1446 | } | |
1447 | ||
af818581 JB |
1448 | void ieee80211_sta_block_awake(struct ieee80211_hw *hw, |
1449 | struct ieee80211_sta *pubsta, bool block) | |
1450 | { | |
1451 | struct sta_info *sta = container_of(pubsta, struct sta_info, sta); | |
1452 | ||
b5878a2d JB |
1453 | trace_api_sta_block_awake(sta->local, pubsta, block); |
1454 | ||
af818581 JB |
1455 | if (block) |
1456 | set_sta_flags(sta, WLAN_STA_PS_DRIVER); | |
50a9432d | 1457 | else if (test_sta_flags(sta, WLAN_STA_PS_DRIVER)) |
af818581 JB |
1458 | ieee80211_queue_work(hw, &sta->drv_unblock_wk); |
1459 | } | |
1460 | EXPORT_SYMBOL(ieee80211_sta_block_awake); | |
dcf55fb5 | 1461 | |
042ec453 JB |
1462 | void ieee80211_sta_set_buffered(struct ieee80211_sta *pubsta, |
1463 | u8 tid, bool buffered) | |
dcf55fb5 FF |
1464 | { |
1465 | struct sta_info *sta = container_of(pubsta, struct sta_info, sta); | |
1466 | ||
948d887d | 1467 | if (WARN_ON(tid >= STA_TID_NUM)) |
042ec453 JB |
1468 | return; |
1469 | ||
948d887d JB |
1470 | if (buffered) |
1471 | set_bit(tid, &sta->driver_buffered_tids); | |
1472 | else | |
1473 | clear_bit(tid, &sta->driver_buffered_tids); | |
1474 | ||
c868cb35 | 1475 | sta_info_recalc_tim(sta); |
dcf55fb5 | 1476 | } |
042ec453 | 1477 | EXPORT_SYMBOL(ieee80211_sta_set_buffered); |