nl80211: Fix potential memory leak in nl80211_connect
[linux-block.git] / net / mac80211 / util.c
CommitLineData
c2d1560a
JB
1/*
2 * Copyright 2002-2005, Instant802 Networks, Inc.
3 * Copyright 2005-2006, Devicescape Software, Inc.
4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net>
d98ad83e 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
43d6df00 7 * Copyright (C) 2015 Intel Deutschland GmbH
c2d1560a
JB
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
12 *
13 * utilities for mac80211
14 */
15
16#include <net/mac80211.h>
17#include <linux/netdevice.h>
bc3b2d7f 18#include <linux/export.h>
c2d1560a
JB
19#include <linux/types.h>
20#include <linux/slab.h>
21#include <linux/skbuff.h>
22#include <linux/etherdevice.h>
23#include <linux/if_arp.h>
c2d1560a 24#include <linux/bitmap.h>
dd76986b 25#include <linux/crc32.h>
881d966b 26#include <net/net_namespace.h>
c2d1560a 27#include <net/cfg80211.h>
dabeb344 28#include <net/rtnetlink.h>
c2d1560a
JB
29
30#include "ieee80211_i.h"
24487981 31#include "driver-ops.h"
2c8dccc7 32#include "rate.h"
ee385855 33#include "mesh.h"
c2d1560a 34#include "wme.h"
f2753ddb 35#include "led.h"
fffd0934 36#include "wep.h"
c2d1560a
JB
37
38/* privid for wiphys to determine whether they belong to us or not */
8a47cea7 39const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid;
c2d1560a 40
9a95371a
LR
41struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
42{
43 struct ieee80211_local *local;
44 BUG_ON(!wiphy);
45
46 local = wiphy_priv(wiphy);
47 return &local->hw;
48}
49EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
c2d1560a 50
5cf121c3 51void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
c2d1560a 52{
252b86c4 53 struct sk_buff *skb;
2de8e0d9
JB
54 struct ieee80211_hdr *hdr;
55
252b86c4 56 skb_queue_walk(&tx->skbs, skb) {
2de8e0d9
JB
57 hdr = (struct ieee80211_hdr *) skb->data;
58 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
252b86c4 59 }
c2d1560a
JB
60}
61
4ee73f33 62int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
438b61b7
SW
63 int rate, int erp, int short_preamble,
64 int shift)
c2d1560a
JB
65{
66 int dur;
67
68 /* calculate duration (in microseconds, rounded up to next higher
69 * integer if it includes a fractional microsecond) to send frame of
70 * len bytes (does not include FCS) at the given rate. Duration will
71 * also include SIFS.
72 *
73 * rate is in 100 kbps, so divident is multiplied by 10 in the
74 * DIV_ROUND_UP() operations.
438b61b7
SW
75 *
76 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and
77 * is assumed to be 0 otherwise.
c2d1560a
JB
78 */
79
4ee73f33 80 if (band == IEEE80211_BAND_5GHZ || erp) {
c2d1560a
JB
81 /*
82 * OFDM:
83 *
84 * N_DBPS = DATARATE x 4
85 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
86 * (16 = SIGNAL time, 6 = tail bits)
87 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
88 *
89 * T_SYM = 4 usec
438b61b7 90 * 802.11a - 18.5.2: aSIFSTime = 16 usec
c2d1560a
JB
91 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
92 * signal ext = 6 usec
93 */
c2d1560a 94 dur = 16; /* SIFS + signal ext */
438b61b7
SW
95 dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */
96 dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */
438b61b7
SW
97
98 /* IEEE 802.11-2012 18.3.2.4: all values above are:
99 * * times 4 for 5 MHz
100 * * times 2 for 10 MHz
101 */
102 dur *= 1 << shift;
2103dec1
SW
103
104 /* rates should already consider the channel bandwidth,
105 * don't apply divisor again.
106 */
107 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
108 4 * rate); /* T_SYM x N_SYM */
c2d1560a
JB
109 } else {
110 /*
111 * 802.11b or 802.11g with 802.11b compatibility:
112 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
113 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
114 *
115 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
116 * aSIFSTime = 10 usec
117 * aPreambleLength = 144 usec or 72 usec with short preamble
118 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
119 */
120 dur = 10; /* aSIFSTime = 10 usec */
121 dur += short_preamble ? (72 + 24) : (144 + 48);
122
123 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
124 }
125
126 return dur;
127}
128
129/* Exported duration function for driver use */
32bfd35d
JB
130__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
131 struct ieee80211_vif *vif,
4ee73f33 132 enum ieee80211_band band,
8318d78a
JB
133 size_t frame_len,
134 struct ieee80211_rate *rate)
c2d1560a 135{
25d834e1 136 struct ieee80211_sub_if_data *sdata;
c2d1560a 137 u16 dur;
438b61b7 138 int erp, shift = 0;
25d834e1 139 bool short_preamble = false;
c2d1560a 140
8318d78a 141 erp = 0;
25d834e1
JB
142 if (vif) {
143 sdata = vif_to_sdata(vif);
bda3933a 144 short_preamble = sdata->vif.bss_conf.use_short_preamble;
25d834e1
JB
145 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
146 erp = rate->flags & IEEE80211_RATE_ERP_G;
438b61b7 147 shift = ieee80211_vif_get_shift(vif);
25d834e1 148 }
8318d78a 149
4ee73f33 150 dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
438b61b7 151 short_preamble, shift);
c2d1560a
JB
152
153 return cpu_to_le16(dur);
154}
155EXPORT_SYMBOL(ieee80211_generic_frame_duration);
156
32bfd35d
JB
157__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
158 struct ieee80211_vif *vif, size_t frame_len,
e039fa4a 159 const struct ieee80211_tx_info *frame_txctl)
c2d1560a
JB
160{
161 struct ieee80211_local *local = hw_to_local(hw);
162 struct ieee80211_rate *rate;
25d834e1 163 struct ieee80211_sub_if_data *sdata;
471b3efd 164 bool short_preamble;
2103dec1 165 int erp, shift = 0, bitrate;
c2d1560a 166 u16 dur;
2e92e6f2
JB
167 struct ieee80211_supported_band *sband;
168
4ee73f33 169 sband = local->hw.wiphy->bands[frame_txctl->band];
c2d1560a 170
25d834e1 171 short_preamble = false;
7e9ed188 172
e039fa4a 173 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
8318d78a
JB
174
175 erp = 0;
25d834e1
JB
176 if (vif) {
177 sdata = vif_to_sdata(vif);
bda3933a 178 short_preamble = sdata->vif.bss_conf.use_short_preamble;
25d834e1
JB
179 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
180 erp = rate->flags & IEEE80211_RATE_ERP_G;
438b61b7 181 shift = ieee80211_vif_get_shift(vif);
25d834e1 182 }
c2d1560a 183
2103dec1
SW
184 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
185
c2d1560a 186 /* CTS duration */
2103dec1 187 dur = ieee80211_frame_duration(sband->band, 10, bitrate,
438b61b7 188 erp, short_preamble, shift);
c2d1560a 189 /* Data frame duration */
2103dec1 190 dur += ieee80211_frame_duration(sband->band, frame_len, bitrate,
438b61b7 191 erp, short_preamble, shift);
c2d1560a 192 /* ACK duration */
2103dec1 193 dur += ieee80211_frame_duration(sband->band, 10, bitrate,
438b61b7 194 erp, short_preamble, shift);
c2d1560a
JB
195
196 return cpu_to_le16(dur);
197}
198EXPORT_SYMBOL(ieee80211_rts_duration);
199
32bfd35d
JB
200__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
201 struct ieee80211_vif *vif,
c2d1560a 202 size_t frame_len,
e039fa4a 203 const struct ieee80211_tx_info *frame_txctl)
c2d1560a
JB
204{
205 struct ieee80211_local *local = hw_to_local(hw);
206 struct ieee80211_rate *rate;
25d834e1 207 struct ieee80211_sub_if_data *sdata;
471b3efd 208 bool short_preamble;
2103dec1 209 int erp, shift = 0, bitrate;
c2d1560a 210 u16 dur;
2e92e6f2
JB
211 struct ieee80211_supported_band *sband;
212
4ee73f33 213 sband = local->hw.wiphy->bands[frame_txctl->band];
c2d1560a 214
25d834e1 215 short_preamble = false;
7e9ed188 216
e039fa4a 217 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
8318d78a 218 erp = 0;
25d834e1
JB
219 if (vif) {
220 sdata = vif_to_sdata(vif);
bda3933a 221 short_preamble = sdata->vif.bss_conf.use_short_preamble;
25d834e1
JB
222 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
223 erp = rate->flags & IEEE80211_RATE_ERP_G;
438b61b7 224 shift = ieee80211_vif_get_shift(vif);
25d834e1 225 }
c2d1560a 226
2103dec1
SW
227 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
228
c2d1560a 229 /* Data frame duration */
2103dec1 230 dur = ieee80211_frame_duration(sband->band, frame_len, bitrate,
438b61b7 231 erp, short_preamble, shift);
e039fa4a 232 if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
c2d1560a 233 /* ACK duration */
2103dec1 234 dur += ieee80211_frame_duration(sband->band, 10, bitrate,
438b61b7 235 erp, short_preamble, shift);
c2d1560a
JB
236 }
237
238 return cpu_to_le16(dur);
239}
240EXPORT_SYMBOL(ieee80211_ctstoself_duration);
241
3a25a8c8
JB
242void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
243{
244 struct ieee80211_sub_if_data *sdata;
a6f38ac3
JB
245 int n_acs = IEEE80211_NUM_ACS;
246
247 if (local->hw.queues < IEEE80211_NUM_ACS)
248 n_acs = 1;
3a25a8c8
JB
249
250 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
251 int ac;
252
f142c6b9
JB
253 if (!sdata->dev)
254 continue;
255
3a25a8c8
JB
256 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
257 local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
258 continue;
259
a6f38ac3 260 for (ac = 0; ac < n_acs; ac++) {
3a25a8c8
JB
261 int ac_queue = sdata->vif.hw_queue[ac];
262
ba8c3d6f
FF
263 if (local->ops->wake_tx_queue &&
264 (atomic_read(&sdata->txqs_len[ac]) >
265 local->hw.txq_ac_max_pending))
266 continue;
267
3a25a8c8
JB
268 if (ac_queue == queue ||
269 (sdata->vif.cab_queue == queue &&
270 local->queue_stop_reasons[ac_queue] == 0 &&
271 skb_queue_empty(&local->pending[ac_queue])))
272 netif_wake_subqueue(sdata->dev, ac);
273 }
274 }
275}
276
ce7c9111 277static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
cca07b00
LC
278 enum queue_stop_reason reason,
279 bool refcounted)
c2d1560a
JB
280{
281 struct ieee80211_local *local = hw_to_local(hw);
282
b5878a2d
JB
283 trace_wake_queue(local, queue, reason);
284
e4e72fb4
JB
285 if (WARN_ON(queue >= hw->queues))
286 return;
ce7c9111 287
ada15125
JB
288 if (!test_bit(reason, &local->queue_stop_reasons[queue]))
289 return;
290
cca07b00
LC
291 if (!refcounted)
292 local->q_stop_reasons[queue][reason] = 0;
293 else
294 local->q_stop_reasons[queue][reason]--;
295
296 if (local->q_stop_reasons[queue][reason] == 0)
297 __clear_bit(reason, &local->queue_stop_reasons[queue]);
96f5e66e
JB
298
299 if (local->queue_stop_reasons[queue] != 0)
300 /* someone still has this queue stopped */
301 return;
302
7236fe29
JB
303 if (skb_queue_empty(&local->pending[queue])) {
304 rcu_read_lock();
3a25a8c8 305 ieee80211_propagate_queue_wake(local, queue);
7236fe29
JB
306 rcu_read_unlock();
307 } else
3b8d81e0 308 tasklet_schedule(&local->tx_pending_tasklet);
c2d1560a 309}
ce7c9111 310
96f5e66e 311void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
cca07b00
LC
312 enum queue_stop_reason reason,
313 bool refcounted)
ce7c9111
KV
314{
315 struct ieee80211_local *local = hw_to_local(hw);
316 unsigned long flags;
317
318 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
cca07b00 319 __ieee80211_wake_queue(hw, queue, reason, refcounted);
ce7c9111
KV
320 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
321}
322
323void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
324{
325 ieee80211_wake_queue_by_reason(hw, queue,
cca07b00
LC
326 IEEE80211_QUEUE_STOP_REASON_DRIVER,
327 false);
ce7c9111 328}
c2d1560a
JB
329EXPORT_SYMBOL(ieee80211_wake_queue);
330
ce7c9111 331static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
cca07b00
LC
332 enum queue_stop_reason reason,
333 bool refcounted)
c2d1560a
JB
334{
335 struct ieee80211_local *local = hw_to_local(hw);
cf0277e7 336 struct ieee80211_sub_if_data *sdata;
a6f38ac3 337 int n_acs = IEEE80211_NUM_ACS;
c2d1560a 338
b5878a2d
JB
339 trace_stop_queue(local, queue, reason);
340
e4e72fb4
JB
341 if (WARN_ON(queue >= hw->queues))
342 return;
96f5e66e 343
cca07b00
LC
344 if (!refcounted)
345 local->q_stop_reasons[queue][reason] = 1;
346 else
347 local->q_stop_reasons[queue][reason]++;
ada15125 348
cca07b00
LC
349 if (__test_and_set_bit(reason, &local->queue_stop_reasons[queue]))
350 return;
cf0277e7 351
a6f38ac3
JB
352 if (local->hw.queues < IEEE80211_NUM_ACS)
353 n_acs = 1;
354
cf0277e7 355 rcu_read_lock();
3a25a8c8
JB
356 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
357 int ac;
358
f142c6b9
JB
359 if (!sdata->dev)
360 continue;
361
a6f38ac3 362 for (ac = 0; ac < n_acs; ac++) {
3a25a8c8
JB
363 if (sdata->vif.hw_queue[ac] == queue ||
364 sdata->vif.cab_queue == queue)
365 netif_stop_subqueue(sdata->dev, ac);
366 }
367 }
cf0277e7 368 rcu_read_unlock();
c2d1560a 369}
ce7c9111 370
96f5e66e 371void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
cca07b00
LC
372 enum queue_stop_reason reason,
373 bool refcounted)
ce7c9111
KV
374{
375 struct ieee80211_local *local = hw_to_local(hw);
376 unsigned long flags;
377
378 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
cca07b00 379 __ieee80211_stop_queue(hw, queue, reason, refcounted);
ce7c9111
KV
380 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
381}
382
383void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
384{
385 ieee80211_stop_queue_by_reason(hw, queue,
cca07b00
LC
386 IEEE80211_QUEUE_STOP_REASON_DRIVER,
387 false);
ce7c9111 388}
c2d1560a
JB
389EXPORT_SYMBOL(ieee80211_stop_queue);
390
8f77f384
JB
391void ieee80211_add_pending_skb(struct ieee80211_local *local,
392 struct sk_buff *skb)
393{
394 struct ieee80211_hw *hw = &local->hw;
395 unsigned long flags;
a7bc376c 396 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
3a25a8c8 397 int queue = info->hw_queue;
a7bc376c
JB
398
399 if (WARN_ON(!info->control.vif)) {
d4fa14cd 400 ieee80211_free_txskb(&local->hw, skb);
a7bc376c
JB
401 return;
402 }
8f77f384
JB
403
404 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
cca07b00
LC
405 __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
406 false);
3b8d81e0 407 __skb_queue_tail(&local->pending[queue], skb);
cca07b00
LC
408 __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
409 false);
8f77f384
JB
410 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
411}
412
e3685e03
JB
413void ieee80211_add_pending_skbs(struct ieee80211_local *local,
414 struct sk_buff_head *skbs)
8f77f384
JB
415{
416 struct ieee80211_hw *hw = &local->hw;
417 struct sk_buff *skb;
418 unsigned long flags;
b0b97a8a 419 int queue, i;
8f77f384
JB
420
421 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
8f77f384 422 while ((skb = skb_dequeue(skbs))) {
a7bc376c
JB
423 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
424
425 if (WARN_ON(!info->control.vif)) {
d4fa14cd 426 ieee80211_free_txskb(&local->hw, skb);
a7bc376c
JB
427 continue;
428 }
429
3a25a8c8 430 queue = info->hw_queue;
4644ae89
JB
431
432 __ieee80211_stop_queue(hw, queue,
cca07b00
LC
433 IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
434 false);
4644ae89 435
3b8d81e0 436 __skb_queue_tail(&local->pending[queue], skb);
8f77f384
JB
437 }
438
3b8d81e0 439 for (i = 0; i < hw->queues; i++)
8f77f384 440 __ieee80211_wake_queue(hw, i,
cca07b00
LC
441 IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
442 false);
8f77f384 443 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
8f77f384
JB
444}
445
ce7c9111 446void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
445ea4e8 447 unsigned long queues,
cca07b00
LC
448 enum queue_stop_reason reason,
449 bool refcounted)
c2d1560a 450{
ce7c9111
KV
451 struct ieee80211_local *local = hw_to_local(hw);
452 unsigned long flags;
c2d1560a
JB
453 int i;
454
ce7c9111
KV
455 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
456
445ea4e8 457 for_each_set_bit(i, &queues, hw->queues)
cca07b00 458 __ieee80211_stop_queue(hw, i, reason, refcounted);
ce7c9111
KV
459
460 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
461}
462
463void ieee80211_stop_queues(struct ieee80211_hw *hw)
464{
445ea4e8 465 ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
cca07b00
LC
466 IEEE80211_QUEUE_STOP_REASON_DRIVER,
467 false);
c2d1560a
JB
468}
469EXPORT_SYMBOL(ieee80211_stop_queues);
470
92ab8535
TW
471int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
472{
473 struct ieee80211_local *local = hw_to_local(hw);
3b8d81e0
JB
474 unsigned long flags;
475 int ret;
96f5e66e 476
e4e72fb4
JB
477 if (WARN_ON(queue >= hw->queues))
478 return true;
96f5e66e 479
3b8d81e0 480 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
2419ea14
TP
481 ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER,
482 &local->queue_stop_reasons[queue]);
3b8d81e0
JB
483 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
484 return ret;
92ab8535
TW
485}
486EXPORT_SYMBOL(ieee80211_queue_stopped);
487
ce7c9111 488void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
445ea4e8 489 unsigned long queues,
cca07b00
LC
490 enum queue_stop_reason reason,
491 bool refcounted)
c2d1560a 492{
ce7c9111
KV
493 struct ieee80211_local *local = hw_to_local(hw);
494 unsigned long flags;
c2d1560a
JB
495 int i;
496
ce7c9111
KV
497 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
498
445ea4e8 499 for_each_set_bit(i, &queues, hw->queues)
cca07b00 500 __ieee80211_wake_queue(hw, i, reason, refcounted);
ce7c9111
KV
501
502 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
503}
504
505void ieee80211_wake_queues(struct ieee80211_hw *hw)
506{
445ea4e8 507 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
cca07b00
LC
508 IEEE80211_QUEUE_STOP_REASON_DRIVER,
509 false);
c2d1560a
JB
510}
511EXPORT_SYMBOL(ieee80211_wake_queues);
dabeb344 512
26da23b6
LC
513static unsigned int
514ieee80211_get_vif_queues(struct ieee80211_local *local,
515 struct ieee80211_sub_if_data *sdata)
39ecc01d 516{
26da23b6 517 unsigned int queues;
39ecc01d 518
30686bf7 519 if (sdata && ieee80211_hw_check(&local->hw, QUEUE_CONTROL)) {
39ecc01d
JB
520 int ac;
521
522 queues = 0;
523
524 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
525 queues |= BIT(sdata->vif.hw_queue[ac]);
526 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
527 queues |= BIT(sdata->vif.cab_queue);
528 } else {
529 /* all queues */
530 queues = BIT(local->hw.queues) - 1;
531 }
532
26da23b6
LC
533 return queues;
534}
535
4f9610d5
LK
536void __ieee80211_flush_queues(struct ieee80211_local *local,
537 struct ieee80211_sub_if_data *sdata,
3b24f4c6 538 unsigned int queues, bool drop)
26da23b6 539{
26da23b6
LC
540 if (!local->ops->flush)
541 return;
542
4f9610d5
LK
543 /*
544 * If no queue was set, or if the HW doesn't support
545 * IEEE80211_HW_QUEUE_CONTROL - flush all queues
546 */
30686bf7 547 if (!queues || !ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
4f9610d5 548 queues = ieee80211_get_vif_queues(local, sdata);
26da23b6 549
59f48fe2 550 ieee80211_stop_queues_by_reason(&local->hw, queues,
cca07b00
LC
551 IEEE80211_QUEUE_STOP_REASON_FLUSH,
552 false);
445ea4e8 553
3b24f4c6 554 drv_flush(local, sdata, queues, drop);
445ea4e8 555
59f48fe2 556 ieee80211_wake_queues_by_reason(&local->hw, queues,
cca07b00
LC
557 IEEE80211_QUEUE_STOP_REASON_FLUSH,
558 false);
39ecc01d
JB
559}
560
4f9610d5 561void ieee80211_flush_queues(struct ieee80211_local *local,
3b24f4c6 562 struct ieee80211_sub_if_data *sdata, bool drop)
4f9610d5 563{
3b24f4c6 564 __ieee80211_flush_queues(local, sdata, 0, drop);
4f9610d5
LK
565}
566
26da23b6
LC
567void ieee80211_stop_vif_queues(struct ieee80211_local *local,
568 struct ieee80211_sub_if_data *sdata,
569 enum queue_stop_reason reason)
570{
571 ieee80211_stop_queues_by_reason(&local->hw,
572 ieee80211_get_vif_queues(local, sdata),
573 reason, true);
574}
575
576void ieee80211_wake_vif_queues(struct ieee80211_local *local,
577 struct ieee80211_sub_if_data *sdata,
578 enum queue_stop_reason reason)
579{
580 ieee80211_wake_queues_by_reason(&local->hw,
581 ieee80211_get_vif_queues(local, sdata),
582 reason, true);
583}
584
3384d757
AN
585static void __iterate_interfaces(struct ieee80211_local *local,
586 u32 iter_flags,
587 void (*iterator)(void *data, u8 *mac,
588 struct ieee80211_vif *vif),
589 void *data)
dabeb344 590{
dabeb344 591 struct ieee80211_sub_if_data *sdata;
3384d757 592 bool active_only = iter_flags & IEEE80211_IFACE_ITER_ACTIVE;
dabeb344 593
c7c71066 594 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
2f561feb 595 switch (sdata->vif.type) {
05c914fe 596 case NL80211_IFTYPE_MONITOR:
31eba5bc
FF
597 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
598 continue;
599 break;
05c914fe 600 case NL80211_IFTYPE_AP_VLAN:
2f561feb 601 continue;
2ca27bcf 602 default:
2f561feb
ID
603 break;
604 }
8b2c9824 605 if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
3384d757 606 active_only && !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
8b2c9824 607 continue;
3384d757 608 if (ieee80211_sdata_running(sdata) || !active_only)
47846c9b 609 iterator(data, sdata->vif.addr,
2f561feb
ID
610 &sdata->vif);
611 }
612
c7c71066
JB
613 sdata = rcu_dereference_check(local->monitor_sdata,
614 lockdep_is_held(&local->iflist_mtx) ||
615 lockdep_rtnl_is_held());
8b2c9824 616 if (sdata &&
3384d757 617 (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL || !active_only ||
8b2c9824 618 sdata->flags & IEEE80211_SDATA_IN_DRIVER))
685fb72b 619 iterator(data, sdata->vif.addr, &sdata->vif);
c7c71066 620}
685fb72b 621
3384d757 622void ieee80211_iterate_interfaces(
c7c71066
JB
623 struct ieee80211_hw *hw, u32 iter_flags,
624 void (*iterator)(void *data, u8 *mac,
625 struct ieee80211_vif *vif),
626 void *data)
627{
628 struct ieee80211_local *local = hw_to_local(hw);
629
630 mutex_lock(&local->iflist_mtx);
3384d757 631 __iterate_interfaces(local, iter_flags, iterator, data);
c771c9d8 632 mutex_unlock(&local->iflist_mtx);
2f561feb 633}
3384d757 634EXPORT_SYMBOL_GPL(ieee80211_iterate_interfaces);
2f561feb
ID
635
636void ieee80211_iterate_active_interfaces_atomic(
8b2c9824 637 struct ieee80211_hw *hw, u32 iter_flags,
2f561feb
ID
638 void (*iterator)(void *data, u8 *mac,
639 struct ieee80211_vif *vif),
640 void *data)
641{
642 struct ieee80211_local *local = hw_to_local(hw);
2f561feb 643
e38bad47 644 rcu_read_lock();
3384d757
AN
645 __iterate_interfaces(local, iter_flags | IEEE80211_IFACE_ITER_ACTIVE,
646 iterator, data);
c7c71066
JB
647 rcu_read_unlock();
648}
649EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
dabeb344 650
c7c71066
JB
651void ieee80211_iterate_active_interfaces_rtnl(
652 struct ieee80211_hw *hw, u32 iter_flags,
653 void (*iterator)(void *data, u8 *mac,
654 struct ieee80211_vif *vif),
655 void *data)
656{
657 struct ieee80211_local *local = hw_to_local(hw);
e38bad47 658
c7c71066 659 ASSERT_RTNL();
685fb72b 660
3384d757
AN
661 __iterate_interfaces(local, iter_flags | IEEE80211_IFACE_ITER_ACTIVE,
662 iterator, data);
dabeb344 663}
c7c71066 664EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl);
37ffc8da 665
0fc1e049
AN
666static void __iterate_stations(struct ieee80211_local *local,
667 void (*iterator)(void *data,
668 struct ieee80211_sta *sta),
669 void *data)
670{
671 struct sta_info *sta;
672
673 list_for_each_entry_rcu(sta, &local->sta_list, list) {
674 if (!sta->uploaded)
675 continue;
676
677 iterator(data, &sta->sta);
678 }
679}
680
681void ieee80211_iterate_stations_atomic(struct ieee80211_hw *hw,
682 void (*iterator)(void *data,
683 struct ieee80211_sta *sta),
684 void *data)
685{
686 struct ieee80211_local *local = hw_to_local(hw);
687
688 rcu_read_lock();
689 __iterate_stations(local, iterator, data);
690 rcu_read_unlock();
691}
692EXPORT_SYMBOL_GPL(ieee80211_iterate_stations_atomic);
693
ad7e718c
JB
694struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev)
695{
696 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
697
698 if (!ieee80211_sdata_running(sdata) ||
699 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
700 return NULL;
701 return &sdata->vif;
702}
703EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif);
704
dc5a1ad7
EG
705struct wireless_dev *ieee80211_vif_to_wdev(struct ieee80211_vif *vif)
706{
6513e98e
JB
707 struct ieee80211_sub_if_data *sdata;
708
709 if (!vif)
710 return NULL;
711
712 sdata = vif_to_sdata(vif);
dc5a1ad7
EG
713
714 if (!ieee80211_sdata_running(sdata) ||
715 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
716 return NULL;
717
718 return &sdata->wdev;
719}
720EXPORT_SYMBOL_GPL(ieee80211_vif_to_wdev);
721
42935eca
LR
722/*
723 * Nothing should have been stuffed into the workqueue during
4afaff17
EG
724 * the suspend->resume cycle. Since we can't check each caller
725 * of this function if we are already quiescing / suspended,
726 * check here and don't WARN since this can actually happen when
727 * the rx path (for example) is racing against __ieee80211_suspend
728 * and suspending / quiescing was set after the rx path checked
729 * them.
42935eca
LR
730 */
731static bool ieee80211_can_queue_work(struct ieee80211_local *local)
732{
4afaff17
EG
733 if (local->quiescing || (local->suspended && !local->resuming)) {
734 pr_warn("queueing ieee80211 work while going to suspend\n");
ceb99fe0 735 return false;
4afaff17 736 }
42935eca
LR
737
738 return true;
739}
740
741void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
742{
743 struct ieee80211_local *local = hw_to_local(hw);
744
745 if (!ieee80211_can_queue_work(local))
746 return;
747
748 queue_work(local->workqueue, work);
749}
750EXPORT_SYMBOL(ieee80211_queue_work);
751
752void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
753 struct delayed_work *dwork,
754 unsigned long delay)
755{
756 struct ieee80211_local *local = hw_to_local(hw);
757
758 if (!ieee80211_can_queue_work(local))
759 return;
760
761 queue_delayed_work(local->workqueue, dwork, delay);
762}
763EXPORT_SYMBOL(ieee80211_queue_delayed_work);
764
35d865af 765u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action,
dd76986b
JB
766 struct ieee802_11_elems *elems,
767 u64 filter, u32 crc)
768{
769 size_t left = len;
35d865af 770 const u8 *pos = start;
dd76986b 771 bool calc_crc = filter != 0;
fcff4f10 772 DECLARE_BITMAP(seen_elems, 256);
b2e506bf 773 const u8 *ie;
dd76986b 774
fcff4f10 775 bitmap_zero(seen_elems, 256);
dd76986b
JB
776 memset(elems, 0, sizeof(*elems));
777 elems->ie_start = start;
778 elems->total_len = len;
779
780 while (left >= 2) {
781 u8 id, elen;
fcff4f10 782 bool elem_parse_failed;
dd76986b
JB
783
784 id = *pos++;
785 elen = *pos++;
786 left -= 2;
787
fcff4f10
PS
788 if (elen > left) {
789 elems->parse_error = true;
dd76986b 790 break;
fcff4f10
PS
791 }
792
9690fb16
JB
793 switch (id) {
794 case WLAN_EID_SSID:
795 case WLAN_EID_SUPP_RATES:
796 case WLAN_EID_FH_PARAMS:
797 case WLAN_EID_DS_PARAMS:
798 case WLAN_EID_CF_PARAMS:
799 case WLAN_EID_TIM:
800 case WLAN_EID_IBSS_PARAMS:
801 case WLAN_EID_CHALLENGE:
802 case WLAN_EID_RSN:
803 case WLAN_EID_ERP_INFO:
804 case WLAN_EID_EXT_SUPP_RATES:
805 case WLAN_EID_HT_CAPABILITY:
806 case WLAN_EID_HT_OPERATION:
807 case WLAN_EID_VHT_CAPABILITY:
808 case WLAN_EID_VHT_OPERATION:
809 case WLAN_EID_MESH_ID:
810 case WLAN_EID_MESH_CONFIG:
811 case WLAN_EID_PEER_MGMT:
812 case WLAN_EID_PREQ:
813 case WLAN_EID_PREP:
814 case WLAN_EID_PERR:
815 case WLAN_EID_RANN:
816 case WLAN_EID_CHANNEL_SWITCH:
817 case WLAN_EID_EXT_CHANSWITCH_ANN:
818 case WLAN_EID_COUNTRY:
819 case WLAN_EID_PWR_CONSTRAINT:
820 case WLAN_EID_TIMEOUT_INTERVAL:
85220d71 821 case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
b2e506bf 822 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
8f2535b9 823 case WLAN_EID_CHAN_SWITCH_PARAM:
9041c1fa 824 case WLAN_EID_EXT_CAPABILITY:
53837584
AN
825 case WLAN_EID_CHAN_SWITCH_TIMING:
826 case WLAN_EID_LINK_ID:
b2e506bf
JB
827 /*
828 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible
829 * that if the content gets bigger it might be needed more than once
830 */
9690fb16
JB
831 if (test_bit(id, seen_elems)) {
832 elems->parse_error = true;
833 left -= elen;
834 pos += elen;
835 continue;
836 }
837 break;
fcff4f10 838 }
dd76986b
JB
839
840 if (calc_crc && id < 64 && (filter & (1ULL << id)))
841 crc = crc32_be(crc, pos - 2, elen + 2);
842
fcff4f10
PS
843 elem_parse_failed = false;
844
dd76986b 845 switch (id) {
53837584
AN
846 case WLAN_EID_LINK_ID:
847 if (elen + 2 != sizeof(struct ieee80211_tdls_lnkie)) {
848 elem_parse_failed = true;
849 break;
850 }
851 elems->lnk_id = (void *)(pos - 2);
852 break;
853 case WLAN_EID_CHAN_SWITCH_TIMING:
854 if (elen != sizeof(struct ieee80211_ch_switch_timing)) {
855 elem_parse_failed = true;
856 break;
857 }
858 elems->ch_sw_timing = (void *)pos;
859 break;
9041c1fa
AN
860 case WLAN_EID_EXT_CAPABILITY:
861 elems->ext_capab = pos;
862 elems->ext_capab_len = elen;
863 break;
dd76986b
JB
864 case WLAN_EID_SSID:
865 elems->ssid = pos;
866 elems->ssid_len = elen;
867 break;
868 case WLAN_EID_SUPP_RATES:
869 elems->supp_rates = pos;
870 elems->supp_rates_len = elen;
871 break;
dd76986b 872 case WLAN_EID_DS_PARAMS:
1cd8e88e
JB
873 if (elen >= 1)
874 elems->ds_params = pos;
875 else
876 elem_parse_failed = true;
dd76986b 877 break;
dd76986b
JB
878 case WLAN_EID_TIM:
879 if (elen >= sizeof(struct ieee80211_tim_ie)) {
880 elems->tim = (void *)pos;
881 elems->tim_len = elen;
fcff4f10
PS
882 } else
883 elem_parse_failed = true;
dd76986b 884 break;
dd76986b
JB
885 case WLAN_EID_CHALLENGE:
886 elems->challenge = pos;
887 elems->challenge_len = elen;
888 break;
889 case WLAN_EID_VENDOR_SPECIFIC:
890 if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
891 pos[2] == 0xf2) {
892 /* Microsoft OUI (00:50:F2) */
893
894 if (calc_crc)
895 crc = crc32_be(crc, pos - 2, elen + 2);
896
441a33ba 897 if (elen >= 5 && pos[3] == 2) {
dd76986b
JB
898 /* OUI Type 2 - WMM IE */
899 if (pos[4] == 0) {
900 elems->wmm_info = pos;
901 elems->wmm_info_len = elen;
902 } else if (pos[4] == 1) {
903 elems->wmm_param = pos;
904 elems->wmm_param_len = elen;
905 }
906 }
907 }
908 break;
909 case WLAN_EID_RSN:
910 elems->rsn = pos;
911 elems->rsn_len = elen;
912 break;
913 case WLAN_EID_ERP_INFO:
1946bed9
JB
914 if (elen >= 1)
915 elems->erp_info = pos;
916 else
917 elem_parse_failed = true;
dd76986b
JB
918 break;
919 case WLAN_EID_EXT_SUPP_RATES:
920 elems->ext_supp_rates = pos;
921 elems->ext_supp_rates_len = elen;
922 break;
923 case WLAN_EID_HT_CAPABILITY:
924 if (elen >= sizeof(struct ieee80211_ht_cap))
925 elems->ht_cap_elem = (void *)pos;
fcff4f10
PS
926 else
927 elem_parse_failed = true;
dd76986b 928 break;
074d46d1
JB
929 case WLAN_EID_HT_OPERATION:
930 if (elen >= sizeof(struct ieee80211_ht_operation))
931 elems->ht_operation = (void *)pos;
fcff4f10
PS
932 else
933 elem_parse_failed = true;
dd76986b 934 break;
818255ea
MP
935 case WLAN_EID_VHT_CAPABILITY:
936 if (elen >= sizeof(struct ieee80211_vht_cap))
937 elems->vht_cap_elem = (void *)pos;
938 else
939 elem_parse_failed = true;
940 break;
941 case WLAN_EID_VHT_OPERATION:
942 if (elen >= sizeof(struct ieee80211_vht_operation))
943 elems->vht_operation = (void *)pos;
944 else
945 elem_parse_failed = true;
946 break;
bee7f586
JB
947 case WLAN_EID_OPMODE_NOTIF:
948 if (elen > 0)
949 elems->opmode_notif = pos;
950 else
951 elem_parse_failed = true;
952 break;
dd76986b
JB
953 case WLAN_EID_MESH_ID:
954 elems->mesh_id = pos;
955 elems->mesh_id_len = elen;
956 break;
957 case WLAN_EID_MESH_CONFIG:
958 if (elen >= sizeof(struct ieee80211_meshconf_ie))
959 elems->mesh_config = (void *)pos;
fcff4f10
PS
960 else
961 elem_parse_failed = true;
dd76986b
JB
962 break;
963 case WLAN_EID_PEER_MGMT:
964 elems->peering = pos;
965 elems->peering_len = elen;
966 break;
3f52b7e3
MP
967 case WLAN_EID_MESH_AWAKE_WINDOW:
968 if (elen >= 2)
969 elems->awake_window = (void *)pos;
970 break;
dd76986b
JB
971 case WLAN_EID_PREQ:
972 elems->preq = pos;
973 elems->preq_len = elen;
974 break;
975 case WLAN_EID_PREP:
976 elems->prep = pos;
977 elems->prep_len = elen;
978 break;
979 case WLAN_EID_PERR:
980 elems->perr = pos;
981 elems->perr_len = elen;
982 break;
983 case WLAN_EID_RANN:
984 if (elen >= sizeof(struct ieee80211_rann_ie))
985 elems->rann = (void *)pos;
fcff4f10
PS
986 else
987 elem_parse_failed = true;
dd76986b
JB
988 break;
989 case WLAN_EID_CHANNEL_SWITCH:
5bc1420b
JB
990 if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
991 elem_parse_failed = true;
992 break;
993 }
994 elems->ch_switch_ie = (void *)pos;
dd76986b 995 break;
b4f286a1
JB
996 case WLAN_EID_EXT_CHANSWITCH_ANN:
997 if (elen != sizeof(struct ieee80211_ext_chansw_ie)) {
998 elem_parse_failed = true;
999 break;
1000 }
1001 elems->ext_chansw_ie = (void *)pos;
1002 break;
85220d71
JB
1003 case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
1004 if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) {
1005 elem_parse_failed = true;
1006 break;
1007 }
1008 elems->sec_chan_offs = (void *)pos;
1009 break;
8f2535b9
CYY
1010 case WLAN_EID_CHAN_SWITCH_PARAM:
1011 if (elen !=
1012 sizeof(*elems->mesh_chansw_params_ie)) {
1013 elem_parse_failed = true;
1014 break;
1015 }
1016 elems->mesh_chansw_params_ie = (void *)pos;
1017 break;
b2e506bf
JB
1018 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
1019 if (!action ||
1020 elen != sizeof(*elems->wide_bw_chansw_ie)) {
1021 elem_parse_failed = true;
1022 break;
1023 }
1024 elems->wide_bw_chansw_ie = (void *)pos;
1025 break;
1026 case WLAN_EID_CHANNEL_SWITCH_WRAPPER:
1027 if (action) {
1028 elem_parse_failed = true;
1029 break;
1030 }
1031 /*
1032 * This is a bit tricky, but as we only care about
1033 * the wide bandwidth channel switch element, so
1034 * just parse it out manually.
1035 */
1036 ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH,
1037 pos, elen);
1038 if (ie) {
1039 if (ie[1] == sizeof(*elems->wide_bw_chansw_ie))
1040 elems->wide_bw_chansw_ie =
1041 (void *)(ie + 2);
1042 else
1043 elem_parse_failed = true;
1044 }
1045 break;
dd76986b
JB
1046 case WLAN_EID_COUNTRY:
1047 elems->country_elem = pos;
1048 elems->country_elem_len = elen;
1049 break;
1050 case WLAN_EID_PWR_CONSTRAINT:
761a48d2
JB
1051 if (elen != 1) {
1052 elem_parse_failed = true;
1053 break;
1054 }
dd76986b 1055 elems->pwr_constr_elem = pos;
dd76986b 1056 break;
c8d65917
SG
1057 case WLAN_EID_CISCO_VENDOR_SPECIFIC:
1058 /* Lots of different options exist, but we only care
1059 * about the Dynamic Transmit Power Control element.
1060 * First check for the Cisco OUI, then for the DTPC
1061 * tag (0x00).
1062 */
1063 if (elen < 4) {
1064 elem_parse_failed = true;
1065 break;
1066 }
1067
1068 if (pos[0] != 0x00 || pos[1] != 0x40 ||
1069 pos[2] != 0x96 || pos[3] != 0x00)
1070 break;
1071
1072 if (elen != 6) {
1073 elem_parse_failed = true;
1074 break;
1075 }
1076
1077 if (calc_crc)
1078 crc = crc32_be(crc, pos - 2, elen + 2);
1079
1080 elems->cisco_dtpc_elem = pos;
1081 break;
dd76986b 1082 case WLAN_EID_TIMEOUT_INTERVAL:
79ba1d89
JB
1083 if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
1084 elems->timeout_int = (void *)pos;
1085 else
1086 elem_parse_failed = true;
dd76986b
JB
1087 break;
1088 default:
1089 break;
1090 }
1091
fcff4f10
PS
1092 if (elem_parse_failed)
1093 elems->parse_error = true;
1094 else
5df45690 1095 __set_bit(id, seen_elems);
fcff4f10 1096
dd76986b
JB
1097 left -= elen;
1098 pos += elen;
1099 }
1100
fcff4f10
PS
1101 if (left != 0)
1102 elems->parse_error = true;
1103
dd76986b
JB
1104 return crc;
1105}
1106
3abead59 1107void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
cec66283 1108 bool bss_notify, bool enable_qos)
5825fe10
JB
1109{
1110 struct ieee80211_local *local = sdata->local;
1111 struct ieee80211_tx_queue_params qparam;
55de908a 1112 struct ieee80211_chanctx_conf *chanctx_conf;
54bcbc69 1113 int ac;
cec66283 1114 bool use_11b;
239281f8 1115 bool is_ocb; /* Use another EDCA parameters if dot11OCBActivated=true */
aa837e1d 1116 int aCWmin, aCWmax;
5825fe10
JB
1117
1118 if (!local->ops->conf_tx)
1119 return;
1120
54bcbc69
JB
1121 if (local->hw.queues < IEEE80211_NUM_ACS)
1122 return;
1123
5825fe10
JB
1124 memset(&qparam, 0, sizeof(qparam));
1125
55de908a
JB
1126 rcu_read_lock();
1127 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
1128 use_11b = (chanctx_conf &&
4bf88530 1129 chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
aa837e1d 1130 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
55de908a 1131 rcu_read_unlock();
5825fe10 1132
239281f8
RL
1133 is_ocb = (sdata->vif.type == NL80211_IFTYPE_OCB);
1134
1f4ffde8
FZ
1135 /* Set defaults according to 802.11-2007 Table 7-37 */
1136 aCWmax = 1023;
1137 if (use_11b)
1138 aCWmin = 31;
1139 else
1140 aCWmin = 15;
1141
1142 /* Confiure old 802.11b/g medium access rules. */
1143 qparam.cw_max = aCWmax;
1144 qparam.cw_min = aCWmin;
1145 qparam.txop = 0;
1146 qparam.aifs = 2;
aa837e1d 1147
1f4ffde8
FZ
1148 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
1149 /* Update if QoS is enabled. */
a8ce8544
SG
1150 if (enable_qos) {
1151 switch (ac) {
1152 case IEEE80211_AC_BK:
1153 qparam.cw_max = aCWmax;
1154 qparam.cw_min = aCWmin;
1155 qparam.txop = 0;
239281f8
RL
1156 if (is_ocb)
1157 qparam.aifs = 9;
1158 else
1159 qparam.aifs = 7;
a8ce8544
SG
1160 break;
1161 /* never happens but let's not leave undefined */
1162 default:
1163 case IEEE80211_AC_BE:
1164 qparam.cw_max = aCWmax;
1165 qparam.cw_min = aCWmin;
1166 qparam.txop = 0;
239281f8
RL
1167 if (is_ocb)
1168 qparam.aifs = 6;
1169 else
1170 qparam.aifs = 3;
a8ce8544
SG
1171 break;
1172 case IEEE80211_AC_VI:
1173 qparam.cw_max = aCWmin;
1174 qparam.cw_min = (aCWmin + 1) / 2 - 1;
239281f8
RL
1175 if (is_ocb)
1176 qparam.txop = 0;
1177 else if (use_11b)
a8ce8544
SG
1178 qparam.txop = 6016/32;
1179 else
1180 qparam.txop = 3008/32;
239281f8
RL
1181
1182 if (is_ocb)
1183 qparam.aifs = 3;
1184 else
1185 qparam.aifs = 2;
a8ce8544
SG
1186 break;
1187 case IEEE80211_AC_VO:
1188 qparam.cw_max = (aCWmin + 1) / 2 - 1;
1189 qparam.cw_min = (aCWmin + 1) / 4 - 1;
239281f8
RL
1190 if (is_ocb)
1191 qparam.txop = 0;
1192 else if (use_11b)
a8ce8544
SG
1193 qparam.txop = 3264/32;
1194 else
1195 qparam.txop = 1504/32;
1196 qparam.aifs = 2;
1197 break;
1198 }
aa837e1d 1199 }
5825fe10 1200
ab13315a
KV
1201 qparam.uapsd = false;
1202
54bcbc69
JB
1203 sdata->tx_conf[ac] = qparam;
1204 drv_conf_tx(local, sdata, ac, &qparam);
aa837e1d 1205 }
e1b3ec1a 1206
f142c6b9
JB
1207 if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1208 sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
a8ce8544 1209 sdata->vif.bss_conf.qos = enable_qos;
3abead59
JB
1210 if (bss_notify)
1211 ieee80211_bss_info_change_notify(sdata,
1212 BSS_CHANGED_QOS);
d9734979 1213 }
5825fe10 1214}
e50db65c 1215
46900298 1216void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
700e8ea6 1217 u16 transaction, u16 auth_alg, u16 status,
4a3cb702 1218 const u8 *extra, size_t extra_len, const u8 *da,
1672c0e3
JB
1219 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
1220 u32 tx_flags)
46900298
JB
1221{
1222 struct ieee80211_local *local = sdata->local;
1223 struct sk_buff *skb;
1224 struct ieee80211_mgmt *mgmt;
fffd0934 1225 int err;
46900298 1226
15e230ab 1227 /* 24 + 6 = header + auth_algo + auth_transaction + status_code */
744462a9
MS
1228 skb = dev_alloc_skb(local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN +
1229 24 + 6 + extra_len + IEEE80211_WEP_ICV_LEN);
d15b8459 1230 if (!skb)
46900298 1231 return;
d15b8459 1232
744462a9 1233 skb_reserve(skb, local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN);
46900298
JB
1234
1235 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
1236 memset(mgmt, 0, 24 + 6);
1237 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1238 IEEE80211_STYPE_AUTH);
efa6a09d 1239 memcpy(mgmt->da, da, ETH_ALEN);
47846c9b 1240 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
46900298
JB
1241 memcpy(mgmt->bssid, bssid, ETH_ALEN);
1242 mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
1243 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
700e8ea6 1244 mgmt->u.auth.status_code = cpu_to_le16(status);
46900298
JB
1245 if (extra)
1246 memcpy(skb_put(skb, extra_len), extra, extra_len);
46900298 1247
fffd0934
JB
1248 if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
1249 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
1250 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
1251 WARN_ON(err);
1252 }
1253
1672c0e3
JB
1254 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
1255 tx_flags;
62ae67be 1256 ieee80211_tx_skb(sdata, skb);
46900298
JB
1257}
1258
6ae16775
AQ
1259void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
1260 const u8 *bssid, u16 stype, u16 reason,
1261 bool send_frame, u8 *frame_buf)
1262{
1263 struct ieee80211_local *local = sdata->local;
1264 struct sk_buff *skb;
1265 struct ieee80211_mgmt *mgmt = (void *)frame_buf;
1266
1267 /* build frame */
1268 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
1269 mgmt->duration = 0; /* initialize only */
1270 mgmt->seq_ctrl = 0; /* initialize only */
1271 memcpy(mgmt->da, bssid, ETH_ALEN);
1272 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1273 memcpy(mgmt->bssid, bssid, ETH_ALEN);
1274 /* u.deauth.reason_code == u.disassoc.reason_code */
1275 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
1276
1277 if (send_frame) {
1278 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1279 IEEE80211_DEAUTH_FRAME_LEN);
1280 if (!skb)
1281 return;
1282
1283 skb_reserve(skb, local->hw.extra_tx_headroom);
1284
1285 /* copy in frame */
1286 memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
1287 mgmt, IEEE80211_DEAUTH_FRAME_LEN);
1288
1289 if (sdata->vif.type != NL80211_IFTYPE_STATION ||
1290 !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
1291 IEEE80211_SKB_CB(skb)->flags |=
1292 IEEE80211_TX_INTFL_DONT_ENCRYPT;
1293
1294 ieee80211_tx_skb(sdata, skb);
1295 }
1296}
1297
c56ef672
DS
1298static int ieee80211_build_preq_ies_band(struct ieee80211_local *local,
1299 u8 *buffer, size_t buffer_len,
1300 const u8 *ie, size_t ie_len,
1301 enum ieee80211_band band,
1302 u32 rate_mask,
1303 struct cfg80211_chan_def *chandef,
1304 size_t *offset)
de95a54b
JB
1305{
1306 struct ieee80211_supported_band *sband;
c604b9f2 1307 u8 *pos = buffer, *end = buffer + buffer_len;
c56ef672 1308 size_t noffset;
8e664fb3 1309 int supp_rates_len, i;
8dcb2003
JM
1310 u8 rates[32];
1311 int num_rates;
1312 int ext_rates_len;
2103dec1
SW
1313 int shift;
1314 u32 rate_flags;
40a11ca8 1315 bool have_80mhz = false;
de95a54b 1316
c56ef672
DS
1317 *offset = 0;
1318
4d36ec58 1319 sband = local->hw.wiphy->bands[band];
d811b3d5
AN
1320 if (WARN_ON_ONCE(!sband))
1321 return 0;
de95a54b 1322
2103dec1
SW
1323 rate_flags = ieee80211_chandef_rate_flags(chandef);
1324 shift = ieee80211_chandef_get_shift(chandef);
1325
8dcb2003
JM
1326 num_rates = 0;
1327 for (i = 0; i < sband->n_bitrates; i++) {
1328 if ((BIT(i) & rate_mask) == 0)
1329 continue; /* skip rate */
2103dec1
SW
1330 if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
1331 continue;
1332
1333 rates[num_rates++] =
1334 (u8) DIV_ROUND_UP(sband->bitrates[i].bitrate,
1335 (1 << shift) * 5);
8dcb2003
JM
1336 }
1337
1338 supp_rates_len = min_t(int, num_rates, 8);
8e664fb3 1339
c604b9f2
JB
1340 if (end - pos < 2 + supp_rates_len)
1341 goto out_err;
de95a54b 1342 *pos++ = WLAN_EID_SUPP_RATES;
8e664fb3 1343 *pos++ = supp_rates_len;
8dcb2003
JM
1344 memcpy(pos, rates, supp_rates_len);
1345 pos += supp_rates_len;
8e664fb3
JB
1346
1347 /* insert "request information" if in custom IEs */
1348 if (ie && ie_len) {
1349 static const u8 before_extrates[] = {
1350 WLAN_EID_SSID,
1351 WLAN_EID_SUPP_RATES,
1352 WLAN_EID_REQUEST,
1353 };
1354 noffset = ieee80211_ie_split(ie, ie_len,
1355 before_extrates,
1356 ARRAY_SIZE(before_extrates),
c56ef672
DS
1357 *offset);
1358 if (end - pos < noffset - *offset)
c604b9f2 1359 goto out_err;
c56ef672
DS
1360 memcpy(pos, ie + *offset, noffset - *offset);
1361 pos += noffset - *offset;
1362 *offset = noffset;
8e664fb3
JB
1363 }
1364
8dcb2003
JM
1365 ext_rates_len = num_rates - supp_rates_len;
1366 if (ext_rates_len > 0) {
c604b9f2
JB
1367 if (end - pos < 2 + ext_rates_len)
1368 goto out_err;
8e664fb3 1369 *pos++ = WLAN_EID_EXT_SUPP_RATES;
8dcb2003
JM
1370 *pos++ = ext_rates_len;
1371 memcpy(pos, rates + supp_rates_len, ext_rates_len);
1372 pos += ext_rates_len;
8e664fb3
JB
1373 }
1374
2103dec1 1375 if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) {
c604b9f2
JB
1376 if (end - pos < 3)
1377 goto out_err;
651b5225
JM
1378 *pos++ = WLAN_EID_DS_PARAMS;
1379 *pos++ = 1;
2103dec1
SW
1380 *pos++ = ieee80211_frequency_to_channel(
1381 chandef->chan->center_freq);
651b5225
JM
1382 }
1383
8e664fb3
JB
1384 /* insert custom IEs that go before HT */
1385 if (ie && ie_len) {
1386 static const u8 before_ht[] = {
1387 WLAN_EID_SSID,
1388 WLAN_EID_SUPP_RATES,
1389 WLAN_EID_REQUEST,
1390 WLAN_EID_EXT_SUPP_RATES,
1391 WLAN_EID_DS_PARAMS,
1392 WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1393 };
1394 noffset = ieee80211_ie_split(ie, ie_len,
1395 before_ht, ARRAY_SIZE(before_ht),
c56ef672
DS
1396 *offset);
1397 if (end - pos < noffset - *offset)
c604b9f2 1398 goto out_err;
c56ef672
DS
1399 memcpy(pos, ie + *offset, noffset - *offset);
1400 pos += noffset - *offset;
1401 *offset = noffset;
de95a54b
JB
1402 }
1403
c604b9f2
JB
1404 if (sband->ht_cap.ht_supported) {
1405 if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
1406 goto out_err;
ef96a842
BG
1407 pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
1408 sband->ht_cap.cap);
c604b9f2 1409 }
5ef2d41a 1410
de95a54b
JB
1411 /*
1412 * If adding more here, adjust code in main.c
1413 * that calculates local->scan_ies_len.
1414 */
1415
4d952300 1416 /* insert custom IEs that go before VHT */
8e664fb3 1417 if (ie && ie_len) {
4d952300
JB
1418 static const u8 before_vht[] = {
1419 WLAN_EID_SSID,
1420 WLAN_EID_SUPP_RATES,
1421 WLAN_EID_REQUEST,
1422 WLAN_EID_EXT_SUPP_RATES,
1423 WLAN_EID_DS_PARAMS,
1424 WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1425 WLAN_EID_HT_CAPABILITY,
1426 WLAN_EID_BSS_COEX_2040,
1427 WLAN_EID_EXT_CAPABILITY,
1428 WLAN_EID_SSID_LIST,
1429 WLAN_EID_CHANNEL_USAGE,
1430 WLAN_EID_INTERWORKING,
1431 /* mesh ID can't happen here */
1432 /* 60 GHz can't happen here right now */
1433 };
1434 noffset = ieee80211_ie_split(ie, ie_len,
1435 before_vht, ARRAY_SIZE(before_vht),
c56ef672
DS
1436 *offset);
1437 if (end - pos < noffset - *offset)
c604b9f2 1438 goto out_err;
c56ef672
DS
1439 memcpy(pos, ie + *offset, noffset - *offset);
1440 pos += noffset - *offset;
1441 *offset = noffset;
de95a54b
JB
1442 }
1443
40a11ca8
JB
1444 /* Check if any channel in this sband supports at least 80 MHz */
1445 for (i = 0; i < sband->n_channels; i++) {
fa44b988
AN
1446 if (sband->channels[i].flags & (IEEE80211_CHAN_DISABLED |
1447 IEEE80211_CHAN_NO_80MHZ))
1448 continue;
1449
1450 have_80mhz = true;
1451 break;
40a11ca8
JB
1452 }
1453
1454 if (sband->vht_cap.vht_supported && have_80mhz) {
c604b9f2
JB
1455 if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
1456 goto out_err;
ba0afa2f
MP
1457 pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
1458 sband->vht_cap.cap);
c604b9f2 1459 }
ba0afa2f 1460
c604b9f2
JB
1461 return pos - buffer;
1462 out_err:
1463 WARN_ONCE(1, "not enough space for preq IEs\n");
de95a54b
JB
1464 return pos - buffer;
1465}
1466
c56ef672
DS
1467int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1468 size_t buffer_len,
1469 struct ieee80211_scan_ies *ie_desc,
1470 const u8 *ie, size_t ie_len,
1471 u8 bands_used, u32 *rate_masks,
1472 struct cfg80211_chan_def *chandef)
1473{
1474 size_t pos = 0, old_pos = 0, custom_ie_offset = 0;
1475 int i;
1476
1477 memset(ie_desc, 0, sizeof(*ie_desc));
1478
1479 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1480 if (bands_used & BIT(i)) {
1481 pos += ieee80211_build_preq_ies_band(local,
1482 buffer + pos,
1483 buffer_len - pos,
1484 ie, ie_len, i,
1485 rate_masks[i],
1486 chandef,
1487 &custom_ie_offset);
1488 ie_desc->ies[i] = buffer + old_pos;
1489 ie_desc->len[i] = pos - old_pos;
1490 old_pos = pos;
1491 }
1492 }
1493
1494 /* add any remaining custom IEs */
1495 if (ie && ie_len) {
1496 if (WARN_ONCE(buffer_len - pos < ie_len - custom_ie_offset,
1497 "not enough space for preq custom IEs\n"))
1498 return pos;
1499 memcpy(buffer + pos, ie + custom_ie_offset,
1500 ie_len - custom_ie_offset);
1501 ie_desc->common_ies = buffer + pos;
1502 ie_desc->common_ie_len = ie_len - custom_ie_offset;
1503 pos += ie_len - custom_ie_offset;
1504 }
1505
1506 return pos;
1507};
1508
a619a4c0 1509struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
a344d677
JB
1510 const u8 *src, const u8 *dst,
1511 u32 ratemask,
6b77863b 1512 struct ieee80211_channel *chan,
a619a4c0 1513 const u8 *ssid, size_t ssid_len,
a806c558
PS
1514 const u8 *ie, size_t ie_len,
1515 bool directed)
46900298
JB
1516{
1517 struct ieee80211_local *local = sdata->local;
2103dec1 1518 struct cfg80211_chan_def chandef;
46900298
JB
1519 struct sk_buff *skb;
1520 struct ieee80211_mgmt *mgmt;
b9a9ada1 1521 int ies_len;
c56ef672
DS
1522 u32 rate_masks[IEEE80211_NUM_BANDS] = {};
1523 struct ieee80211_scan_ies dummy_ie_desc;
46900298 1524
a806c558
PS
1525 /*
1526 * Do not send DS Channel parameter for directed probe requests
1527 * in order to maximize the chance that we get a response. Some
1528 * badly-behaved APs don't respond when this parameter is included.
1529 */
2103dec1 1530 chandef.width = sdata->vif.bss_conf.chandef.width;
a806c558 1531 if (directed)
2103dec1 1532 chandef.chan = NULL;
a806c558 1533 else
2103dec1 1534 chandef.chan = chan;
651b5225 1535
a344d677
JB
1536 skb = ieee80211_probereq_get(&local->hw, src, ssid, ssid_len,
1537 100 + ie_len);
5b2bbf75 1538 if (!skb)
b9a9ada1
JB
1539 return NULL;
1540
c56ef672 1541 rate_masks[chan->band] = ratemask;
b9a9ada1 1542 ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
c56ef672
DS
1543 skb_tailroom(skb), &dummy_ie_desc,
1544 ie, ie_len, BIT(chan->band),
1545 rate_masks, &chandef);
b9a9ada1 1546 skb_put(skb, ies_len);
7c12ce8b 1547
46900298 1548 if (dst) {
7c12ce8b 1549 mgmt = (struct ieee80211_mgmt *) skb->data;
46900298
JB
1550 memcpy(mgmt->da, dst, ETH_ALEN);
1551 memcpy(mgmt->bssid, dst, ETH_ALEN);
46900298 1552 }
46900298 1553
62ae67be 1554 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
5b2bbf75 1555
a619a4c0
JO
1556 return skb;
1557}
1558
a344d677
JB
1559void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata,
1560 const u8 *src, const u8 *dst,
a619a4c0 1561 const u8 *ssid, size_t ssid_len,
a806c558 1562 const u8 *ie, size_t ie_len,
1672c0e3 1563 u32 ratemask, bool directed, u32 tx_flags,
55de908a 1564 struct ieee80211_channel *channel, bool scan)
a619a4c0
JO
1565{
1566 struct sk_buff *skb;
1567
a344d677 1568 skb = ieee80211_build_probe_req(sdata, src, dst, ratemask, channel,
6b77863b 1569 ssid, ssid_len,
85a237fe 1570 ie, ie_len, directed);
aad14ceb 1571 if (skb) {
1672c0e3 1572 IEEE80211_SKB_CB(skb)->flags |= tx_flags;
55de908a
JB
1573 if (scan)
1574 ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
1575 else
1576 ieee80211_tx_skb(sdata, skb);
aad14ceb 1577 }
46900298
JB
1578}
1579
2103dec1 1580u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata,
46900298 1581 struct ieee802_11_elems *elems,
9ebb61a2 1582 enum ieee80211_band band, u32 *basic_rates)
46900298
JB
1583{
1584 struct ieee80211_supported_band *sband;
46900298 1585 size_t num_rates;
2103dec1
SW
1586 u32 supp_rates, rate_flags;
1587 int i, j, shift;
1588 sband = sdata->local->hw.wiphy->bands[band];
1589
1590 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
1591 shift = ieee80211_vif_get_shift(&sdata->vif);
46900298 1592
4ee73f33
MK
1593 if (WARN_ON(!sband))
1594 return 1;
46900298 1595
46900298
JB
1596 num_rates = sband->n_bitrates;
1597 supp_rates = 0;
1598 for (i = 0; i < elems->supp_rates_len +
1599 elems->ext_supp_rates_len; i++) {
1600 u8 rate = 0;
1601 int own_rate;
9ebb61a2 1602 bool is_basic;
46900298
JB
1603 if (i < elems->supp_rates_len)
1604 rate = elems->supp_rates[i];
1605 else if (elems->ext_supp_rates)
1606 rate = elems->ext_supp_rates
1607 [i - elems->supp_rates_len];
1608 own_rate = 5 * (rate & 0x7f);
9ebb61a2
AN
1609 is_basic = !!(rate & 0x80);
1610
1611 if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
1612 continue;
1613
1614 for (j = 0; j < num_rates; j++) {
2103dec1
SW
1615 int brate;
1616 if ((rate_flags & sband->bitrates[j].flags)
1617 != rate_flags)
1618 continue;
1619
1620 brate = DIV_ROUND_UP(sband->bitrates[j].bitrate,
1621 1 << shift);
1622
1623 if (brate == own_rate) {
46900298 1624 supp_rates |= BIT(j);
9ebb61a2
AN
1625 if (basic_rates && is_basic)
1626 *basic_rates |= BIT(j);
1627 }
1628 }
46900298
JB
1629 }
1630 return supp_rates;
1631}
f2753ddb 1632
84f6a01c
JB
1633void ieee80211_stop_device(struct ieee80211_local *local)
1634{
1635 ieee80211_led_radio(local, false);
67408c8c 1636 ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
84f6a01c
JB
1637
1638 cancel_work_sync(&local->reconfig_filter);
84f6a01c
JB
1639
1640 flush_workqueue(local->workqueue);
678f415f 1641 drv_stop(local);
84f6a01c
JB
1642}
1643
f6837ba8
JB
1644static void ieee80211_handle_reconfig_failure(struct ieee80211_local *local)
1645{
1646 struct ieee80211_sub_if_data *sdata;
1647 struct ieee80211_chanctx *ctx;
1648
1649 /*
1650 * We get here if during resume the device can't be restarted properly.
1651 * We might also get here if this happens during HW reset, which is a
1652 * slightly different situation and we need to drop all connections in
1653 * the latter case.
1654 *
1655 * Ask cfg80211 to turn off all interfaces, this will result in more
1656 * warnings but at least we'll then get into a clean stopped state.
1657 */
1658
1659 local->resuming = false;
1660 local->suspended = false;
7584f88f 1661 local->in_reconfig = false;
f6837ba8
JB
1662
1663 /* scheduled scan clearly can't be running any more, but tell
1664 * cfg80211 and clear local state
1665 */
1666 ieee80211_sched_scan_end(local);
1667
1668 list_for_each_entry(sdata, &local->interfaces, list)
1669 sdata->flags &= ~IEEE80211_SDATA_IN_DRIVER;
1670
1671 /* Mark channel contexts as not being in the driver any more to avoid
1672 * removing them from the driver during the shutdown process...
1673 */
1674 mutex_lock(&local->chanctx_mtx);
1675 list_for_each_entry(ctx, &local->chanctx_list, list)
1676 ctx->driver_present = false;
1677 mutex_unlock(&local->chanctx_mtx);
1678
1679 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
1680}
1681
153a5fc4
SG
1682static void ieee80211_assign_chanctx(struct ieee80211_local *local,
1683 struct ieee80211_sub_if_data *sdata)
1684{
1685 struct ieee80211_chanctx_conf *conf;
1686 struct ieee80211_chanctx *ctx;
1687
1688 if (!local->use_chanctx)
1689 return;
1690
1691 mutex_lock(&local->chanctx_mtx);
1692 conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1693 lockdep_is_held(&local->chanctx_mtx));
1694 if (conf) {
1695 ctx = container_of(conf, struct ieee80211_chanctx, conf);
1696 drv_assign_vif_chanctx(local, sdata, ctx);
1697 }
1698 mutex_unlock(&local->chanctx_mtx);
1699}
1700
f2753ddb
JB
1701int ieee80211_reconfig(struct ieee80211_local *local)
1702{
1703 struct ieee80211_hw *hw = &local->hw;
1704 struct ieee80211_sub_if_data *sdata;
55de908a 1705 struct ieee80211_chanctx *ctx;
f2753ddb 1706 struct sta_info *sta;
2683d65b 1707 int res, i;
d888130a 1708 bool reconfig_due_to_wowlan = false;
d43c6b6e 1709 struct ieee80211_sub_if_data *sched_scan_sdata;
6ea0a69c 1710 struct cfg80211_sched_scan_request *sched_scan_req;
d43c6b6e 1711 bool sched_scan_stopped = false;
b0485e9f 1712 bool suspended = local->suspended;
d888130a 1713
0f8b8245
EP
1714 /* nothing to do if HW shouldn't run */
1715 if (!local->open_count)
1716 goto wake_up;
1717
8f21b0ad 1718#ifdef CONFIG_PM
b0485e9f 1719 if (suspended)
ceb99fe0 1720 local->resuming = true;
f2753ddb 1721
eecc4800 1722 if (local->wowlan) {
b0485e9f
EP
1723 /*
1724 * In the wowlan case, both mac80211 and the device
1725 * are functional when the resume op is called, so
1726 * clear local->suspended so the device could operate
1727 * normally (e.g. pass rx frames).
1728 */
1729 local->suspended = false;
eecc4800 1730 res = drv_resume(local);
27b3eb9c 1731 local->wowlan = false;
eecc4800
JB
1732 if (res < 0) {
1733 local->resuming = false;
1734 return res;
1735 }
1736 if (res == 0)
1737 goto wake_up;
1738 WARN_ON(res > 1);
1739 /*
1740 * res is 1, which means the driver requested
1741 * to go through a regular reset on wakeup.
b0485e9f 1742 * restore local->suspended in this case.
eecc4800 1743 */
d888130a 1744 reconfig_due_to_wowlan = true;
b0485e9f 1745 local->suspended = true;
eecc4800
JB
1746 }
1747#endif
f2753ddb 1748
43d6df00
EP
1749 /*
1750 * In case of hw_restart during suspend (without wowlan),
1751 * cancel restart work, as we are reconfiguring the device
1752 * anyway.
1753 * Note that restart_work is scheduled on a frozen workqueue,
1754 * so we can't deadlock in this case.
1755 */
1756 if (suspended && local->in_reconfig && !reconfig_due_to_wowlan)
1757 cancel_work_sync(&local->restart_work);
1758
968a76ce
EP
1759 local->started = false;
1760
94f9b97b
JB
1761 /*
1762 * Upon resume hardware can sometimes be goofy due to
1763 * various platform / driver / bus issues, so restarting
1764 * the device may at times not work immediately. Propagate
1765 * the error.
1766 */
1767 res = drv_start(local);
1768 if (res) {
b0485e9f 1769 if (suspended)
f6837ba8
JB
1770 WARN(1, "Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue.\n");
1771 else
1772 WARN(1, "Hardware became unavailable during restart.\n");
1773 ieee80211_handle_reconfig_failure(local);
94f9b97b 1774 return res;
f2753ddb
JB
1775 }
1776
7f281975
YAP
1777 /* setup fragmentation threshold */
1778 drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
1779
1780 /* setup RTS threshold */
1781 drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
1782
1783 /* reset coverage class */
1784 drv_set_coverage_class(local, hw->wiphy->coverage_class);
1785
94f9b97b
JB
1786 ieee80211_led_radio(local, true);
1787 ieee80211_mod_tpt_led_trig(local,
1788 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1789
f2753ddb 1790 /* add interfaces */
4b6f1dd6
JB
1791 sdata = rtnl_dereference(local->monitor_sdata);
1792 if (sdata) {
3c3e21e7
JB
1793 /* in HW restart it exists already */
1794 WARN_ON(local->resuming);
4b6f1dd6
JB
1795 res = drv_add_interface(local, sdata);
1796 if (WARN_ON(res)) {
0c2bef46 1797 RCU_INIT_POINTER(local->monitor_sdata, NULL);
4b6f1dd6
JB
1798 synchronize_net();
1799 kfree(sdata);
1800 }
1801 }
1802
f2753ddb
JB
1803 list_for_each_entry(sdata, &local->interfaces, list) {
1804 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1805 sdata->vif.type != NL80211_IFTYPE_MONITOR &&
c8fff3dc 1806 ieee80211_sdata_running(sdata)) {
7b7eab6f 1807 res = drv_add_interface(local, sdata);
c8fff3dc
LC
1808 if (WARN_ON(res))
1809 break;
1810 }
1811 }
1812
1813 /* If adding any of the interfaces failed above, roll back and
1814 * report failure.
1815 */
1816 if (res) {
1817 list_for_each_entry_continue_reverse(sdata, &local->interfaces,
1818 list)
1819 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1820 sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1821 ieee80211_sdata_running(sdata))
1822 drv_remove_interface(local, sdata);
1823 ieee80211_handle_reconfig_failure(local);
1824 return res;
f2753ddb
JB
1825 }
1826
55de908a 1827 /* add channel contexts */
f0dea9c7
AS
1828 if (local->use_chanctx) {
1829 mutex_lock(&local->chanctx_mtx);
1830 list_for_each_entry(ctx, &local->chanctx_list, list)
5bcae31d
MK
1831 if (ctx->replace_state !=
1832 IEEE80211_CHANCTX_REPLACES_OTHER)
1833 WARN_ON(drv_add_chanctx(local, ctx));
f0dea9c7 1834 mutex_unlock(&local->chanctx_mtx);
55de908a 1835
7df180f7
ZG
1836 list_for_each_entry(sdata, &local->interfaces, list) {
1837 if (!ieee80211_sdata_running(sdata))
1838 continue;
1839 ieee80211_assign_chanctx(local, sdata);
1840 }
6352c87f 1841
7df180f7
ZG
1842 sdata = rtnl_dereference(local->monitor_sdata);
1843 if (sdata && ieee80211_sdata_running(sdata))
1844 ieee80211_assign_chanctx(local, sdata);
1845 }
fe5f2559 1846
f2753ddb 1847 /* add STAs back */
34e89507
JB
1848 mutex_lock(&local->sta_mtx);
1849 list_for_each_entry(sta, &local->sta_list, list) {
2e8d397e 1850 enum ieee80211_sta_state state;
f09603a2 1851
2e8d397e
AN
1852 if (!sta->uploaded)
1853 continue;
1854
1855 /* AP-mode stations will be added later */
1856 if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
1857 continue;
1858
1859 for (state = IEEE80211_STA_NOTEXIST;
1860 state < sta->sta_state; state++)
1861 WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1862 state + 1));
f2753ddb 1863 }
34e89507 1864 mutex_unlock(&local->sta_mtx);
f2753ddb 1865
2683d65b 1866 /* reconfigure tx conf */
54bcbc69
JB
1867 if (hw->queues >= IEEE80211_NUM_ACS) {
1868 list_for_each_entry(sdata, &local->interfaces, list) {
1869 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1870 sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1871 !ieee80211_sdata_running(sdata))
1872 continue;
f6f3def3 1873
54bcbc69
JB
1874 for (i = 0; i < IEEE80211_NUM_ACS; i++)
1875 drv_conf_tx(local, sdata, i,
1876 &sdata->tx_conf[i]);
1877 }
f6f3def3 1878 }
2683d65b 1879
f2753ddb
JB
1880 /* reconfigure hardware */
1881 ieee80211_hw_config(local, ~0);
1882
f2753ddb 1883 ieee80211_configure_filter(local);
f2753ddb
JB
1884
1885 /* Finally also reconfigure all the BSS information */
1886 list_for_each_entry(sdata, &local->interfaces, list) {
ac8dd506
JB
1887 u32 changed;
1888
9607e6b6 1889 if (!ieee80211_sdata_running(sdata))
f2753ddb 1890 continue;
ac8dd506
JB
1891
1892 /* common change flags for all interface types */
1893 changed = BSS_CHANGED_ERP_CTS_PROT |
1894 BSS_CHANGED_ERP_PREAMBLE |
1895 BSS_CHANGED_ERP_SLOT |
1896 BSS_CHANGED_HT |
1897 BSS_CHANGED_BASIC_RATES |
1898 BSS_CHANGED_BEACON_INT |
1899 BSS_CHANGED_BSSID |
4ced3f74 1900 BSS_CHANGED_CQM |
55de47f6 1901 BSS_CHANGED_QOS |
1ea6f9c0
JB
1902 BSS_CHANGED_IDLE |
1903 BSS_CHANGED_TXPOWER;
ac8dd506 1904
f2753ddb
JB
1905 switch (sdata->vif.type) {
1906 case NL80211_IFTYPE_STATION:
0d392e93 1907 changed |= BSS_CHANGED_ASSOC |
ab095877
EP
1908 BSS_CHANGED_ARP_FILTER |
1909 BSS_CHANGED_PS;
c65dd147 1910
989c6505
AB
1911 /* Re-send beacon info report to the driver */
1912 if (sdata->u.mgd.have_beacon)
1913 changed |= BSS_CHANGED_BEACON_INFO;
c65dd147 1914
8d61ffa5 1915 sdata_lock(sdata);
ac8dd506 1916 ieee80211_bss_info_change_notify(sdata, changed);
8d61ffa5 1917 sdata_unlock(sdata);
ac8dd506 1918 break;
6e0bd6c3 1919 case NL80211_IFTYPE_OCB:
239281f8
RL
1920 changed |= BSS_CHANGED_OCB;
1921 ieee80211_bss_info_change_notify(sdata, changed);
6e0bd6c3 1922 break;
f2753ddb 1923 case NL80211_IFTYPE_ADHOC:
ac8dd506
JB
1924 changed |= BSS_CHANGED_IBSS;
1925 /* fall through */
f2753ddb 1926 case NL80211_IFTYPE_AP:
339afbf4 1927 changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
e7979ac7 1928
1041638f 1929 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e7979ac7
AN
1930 changed |= BSS_CHANGED_AP_PROBE_RESP;
1931
1041638f
JB
1932 if (rcu_access_pointer(sdata->u.ap.beacon))
1933 drv_start_ap(local, sdata);
1934 }
1935
7827493b 1936 /* fall through */
f2753ddb 1937 case NL80211_IFTYPE_MESH_POINT:
8da34932
JB
1938 if (sdata->vif.bss_conf.enable_beacon) {
1939 changed |= BSS_CHANGED_BEACON |
1940 BSS_CHANGED_BEACON_ENABLED;
1941 ieee80211_bss_info_change_notify(sdata, changed);
1942 }
f2753ddb
JB
1943 break;
1944 case NL80211_IFTYPE_WDS:
f2753ddb
JB
1945 case NL80211_IFTYPE_AP_VLAN:
1946 case NL80211_IFTYPE_MONITOR:
98104fde 1947 case NL80211_IFTYPE_P2P_DEVICE:
b205786e 1948 /* nothing to do */
f142c6b9 1949 break;
f2753ddb 1950 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 1951 case NUM_NL80211_IFTYPES:
2ca27bcf
JB
1952 case NL80211_IFTYPE_P2P_CLIENT:
1953 case NL80211_IFTYPE_P2P_GO:
f2753ddb
JB
1954 WARN_ON(1);
1955 break;
1956 }
1957 }
1958
4a733ef1 1959 ieee80211_recalc_ps(local);
8e1b23b9 1960
6e1b1b24
EP
1961 /*
1962 * The sta might be in psm against the ap (e.g. because
1963 * this was the state before a hw restart), so we
1964 * explicitly send a null packet in order to make sure
1965 * it'll sync against the ap (and get out of psm).
1966 */
1967 if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
1968 list_for_each_entry(sdata, &local->interfaces, list) {
1969 if (sdata->vif.type != NL80211_IFTYPE_STATION)
1970 continue;
20f544ee
JB
1971 if (!sdata->u.mgd.associated)
1972 continue;
6e1b1b24 1973
076cdcb1 1974 ieee80211_send_nullfunc(local, sdata, false);
6e1b1b24
EP
1975 }
1976 }
1977
2e8d397e
AN
1978 /* APs are now beaconing, add back stations */
1979 mutex_lock(&local->sta_mtx);
1980 list_for_each_entry(sta, &local->sta_list, list) {
1981 enum ieee80211_sta_state state;
1982
1983 if (!sta->uploaded)
1984 continue;
1985
1986 if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
1987 continue;
1988
1989 for (state = IEEE80211_STA_NOTEXIST;
1990 state < sta->sta_state; state++)
1991 WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1992 state + 1));
1993 }
1994 mutex_unlock(&local->sta_mtx);
1995
7b21aea0 1996 /* add back keys */
f9dca80b
MK
1997 list_for_each_entry(sdata, &local->interfaces, list)
1998 ieee80211_reset_crypto_tx_tailroom(sdata);
1999
7b21aea0
ES
2000 list_for_each_entry(sdata, &local->interfaces, list)
2001 if (ieee80211_sdata_running(sdata))
2002 ieee80211_enable_keys(sdata);
2003
0d440ea2
EP
2004 /* Reconfigure sched scan if it was interrupted by FW restart */
2005 mutex_lock(&local->mtx);
2006 sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata,
2007 lockdep_is_held(&local->mtx));
2008 sched_scan_req = rcu_dereference_protected(local->sched_scan_req,
2009 lockdep_is_held(&local->mtx));
2010 if (sched_scan_sdata && sched_scan_req)
2011 /*
2012 * Sched scan stopped, but we don't want to report it. Instead,
2013 * we're trying to reschedule. However, if more than one scan
2014 * plan was set, we cannot reschedule since we don't know which
2015 * scan plan was currently running (and some scan plans may have
2016 * already finished).
2017 */
2018 if (sched_scan_req->n_scan_plans > 1 ||
2019 __ieee80211_request_sched_scan_start(sched_scan_sdata,
2020 sched_scan_req))
2021 sched_scan_stopped = true;
2022 mutex_unlock(&local->mtx);
2023
2024 if (sched_scan_stopped)
2025 cfg80211_sched_scan_stopped_rtnl(local->hw.wiphy);
2026
c6209488 2027 wake_up:
04800ada
AN
2028 local->in_reconfig = false;
2029 barrier();
2030
3c3e21e7
JB
2031 if (local->monitors == local->open_count && local->monitors > 0)
2032 ieee80211_add_virtual_monitor(local);
2033
2a419056
JB
2034 /*
2035 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
2036 * sessions can be established after a resume.
2037 *
2038 * Also tear down aggregation sessions since reconfiguring
2039 * them in a hardware restart scenario is not easily done
2040 * right now, and the hardware will have lost information
2041 * about the sessions, but we and the AP still think they
2042 * are active. This is really a workaround though.
2043 */
30686bf7 2044 if (ieee80211_hw_check(hw, AMPDU_AGGREGATION)) {
2a419056
JB
2045 mutex_lock(&local->sta_mtx);
2046
2047 list_for_each_entry(sta, &local->sta_list, list) {
27392719
EP
2048 if (!local->resuming)
2049 ieee80211_sta_tear_down_BA_sessions(
2050 sta, AGG_STOP_LOCAL_REQUEST);
c2c98fde 2051 clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
74e2bd1f 2052 }
2a419056
JB
2053
2054 mutex_unlock(&local->sta_mtx);
74e2bd1f 2055 }
74e2bd1f 2056
445ea4e8 2057 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
cca07b00
LC
2058 IEEE80211_QUEUE_STOP_REASON_SUSPEND,
2059 false);
f2753ddb 2060
5bb644a0
JB
2061 /*
2062 * If this is for hw restart things are still running.
2063 * We may want to change that later, however.
2064 */
b0485e9f 2065 if (local->open_count && (!suspended || reconfig_due_to_wowlan))
cf2c92d8 2066 drv_reconfig_complete(local, IEEE80211_RECONFIG_TYPE_RESTART);
8f21b0ad 2067
b0485e9f 2068 if (!suspended)
5bb644a0
JB
2069 return 0;
2070
2071#ifdef CONFIG_PM
ceb99fe0 2072 /* first set suspended false, then resuming */
5bb644a0 2073 local->suspended = false;
ceb99fe0
JB
2074 mb();
2075 local->resuming = false;
5bb644a0 2076
9120d94e
LC
2077 /* It's possible that we don't handle the scan completion in
2078 * time during suspend, so if it's still marked as completed
2079 * here, queue the work and flush it to clean things up.
2080 * Instead of calling the worker function directly here, we
2081 * really queue it to avoid potential races with other flows
2082 * scheduling the same work.
2083 */
2084 if (test_bit(SCAN_COMPLETED, &local->scanning)) {
2085 ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 0);
2086 flush_delayed_work(&local->scan_work);
2087 }
2088
0f8b8245 2089 if (local->open_count && !reconfig_due_to_wowlan)
cf2c92d8
EP
2090 drv_reconfig_complete(local, IEEE80211_RECONFIG_TYPE_SUSPEND);
2091
b8360ab8
JB
2092 list_for_each_entry(sdata, &local->interfaces, list) {
2093 if (!ieee80211_sdata_running(sdata))
2094 continue;
2095 if (sdata->vif.type == NL80211_IFTYPE_STATION)
2096 ieee80211_sta_restart(sdata);
2097 }
2098
26d59535 2099 mod_timer(&local->sta_cleanup, jiffies + 1);
5bb644a0
JB
2100#else
2101 WARN_ON(1);
2102#endif
d43c6b6e 2103
f2753ddb
JB
2104 return 0;
2105}
42935eca 2106
95acac61
JB
2107void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
2108{
2109 struct ieee80211_sub_if_data *sdata;
2110 struct ieee80211_local *local;
2111 struct ieee80211_key *key;
2112
2113 if (WARN_ON(!vif))
2114 return;
2115
2116 sdata = vif_to_sdata(vif);
2117 local = sdata->local;
2118
2119 if (WARN_ON(!local->resuming))
2120 return;
2121
2122 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
2123 return;
2124
2125 sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
2126
2127 mutex_lock(&local->key_mtx);
2128 list_for_each_entry(key, &sdata->key_list, list)
2129 key->flags |= KEY_FLAG_TAINTED;
2130 mutex_unlock(&local->key_mtx);
2131}
2132EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
2133
04ecd257 2134void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
0f78231b 2135{
04ecd257
JB
2136 struct ieee80211_local *local = sdata->local;
2137 struct ieee80211_chanctx_conf *chanctx_conf;
2138 struct ieee80211_chanctx *chanctx;
025e6be2 2139
04ecd257 2140 mutex_lock(&local->chanctx_mtx);
0f78231b 2141
04ecd257
JB
2142 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
2143 lockdep_is_held(&local->chanctx_mtx));
0f78231b 2144
c189a685
AO
2145 /*
2146 * This function can be called from a work, thus it may be possible
2147 * that the chanctx_conf is removed (due to a disconnection, for
2148 * example).
2149 * So nothing should be done in such case.
2150 */
2151 if (!chanctx_conf)
5d8e4237 2152 goto unlock;
0f78231b 2153
04ecd257
JB
2154 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
2155 ieee80211_recalc_smps_chanctx(local, chanctx);
5d8e4237 2156 unlock:
04ecd257 2157 mutex_unlock(&local->chanctx_mtx);
0f78231b 2158}
8e664fb3 2159
21f659bf
EP
2160void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata)
2161{
2162 struct ieee80211_local *local = sdata->local;
2163 struct ieee80211_chanctx_conf *chanctx_conf;
2164 struct ieee80211_chanctx *chanctx;
2165
2166 mutex_lock(&local->chanctx_mtx);
2167
2168 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
2169 lockdep_is_held(&local->chanctx_mtx));
2170
2171 if (WARN_ON_ONCE(!chanctx_conf))
2172 goto unlock;
2173
2174 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
2175 ieee80211_recalc_chanctx_min_def(local, chanctx);
2176 unlock:
2177 mutex_unlock(&local->chanctx_mtx);
2178}
2179
8e664fb3
JB
2180size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
2181{
2182 size_t pos = offset;
2183
2184 while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
2185 pos += 2 + ies[pos + 1];
2186
2187 return pos;
2188}
615f7b9b
MV
2189
2190static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
2191 int rssi_min_thold,
2192 int rssi_max_thold)
2193{
2194 trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
2195
2196 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
2197 return;
2198
2199 /*
2200 * Scale up threshold values before storing it, as the RSSI averaging
2201 * algorithm uses a scaled up value as well. Change this scaling
2202 * factor if the RSSI averaging algorithm changes.
2203 */
2204 sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
2205 sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
2206}
2207
2208void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
2209 int rssi_min_thold,
2210 int rssi_max_thold)
2211{
2212 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2213
2214 WARN_ON(rssi_min_thold == rssi_max_thold ||
2215 rssi_min_thold > rssi_max_thold);
2216
2217 _ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
2218 rssi_max_thold);
2219}
2220EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
2221
2222void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
2223{
2224 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2225
2226 _ieee80211_enable_rssi_reports(sdata, 0, 0);
2227}
2228EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
768db343 2229
ef96a842 2230u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
42e7aa77
AS
2231 u16 cap)
2232{
2233 __le16 tmp;
2234
2235 *pos++ = WLAN_EID_HT_CAPABILITY;
2236 *pos++ = sizeof(struct ieee80211_ht_cap);
2237 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
2238
2239 /* capability flags */
2240 tmp = cpu_to_le16(cap);
2241 memcpy(pos, &tmp, sizeof(u16));
2242 pos += sizeof(u16);
2243
2244 /* AMPDU parameters */
ef96a842
BG
2245 *pos++ = ht_cap->ampdu_factor |
2246 (ht_cap->ampdu_density <<
42e7aa77
AS
2247 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
2248
2249 /* MCS set */
ef96a842
BG
2250 memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
2251 pos += sizeof(ht_cap->mcs);
42e7aa77
AS
2252
2253 /* extended capabilities */
2254 pos += sizeof(__le16);
2255
2256 /* BF capabilities */
2257 pos += sizeof(__le32);
2258
2259 /* antenna selection */
2260 pos += sizeof(u8);
2261
2262 return pos;
2263}
2264
ba0afa2f 2265u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
cc3983d8 2266 u32 cap)
ba0afa2f
MP
2267{
2268 __le32 tmp;
2269
2270 *pos++ = WLAN_EID_VHT_CAPABILITY;
d4950281
MP
2271 *pos++ = sizeof(struct ieee80211_vht_cap);
2272 memset(pos, 0, sizeof(struct ieee80211_vht_cap));
ba0afa2f
MP
2273
2274 /* capability flags */
2275 tmp = cpu_to_le32(cap);
2276 memcpy(pos, &tmp, sizeof(u32));
2277 pos += sizeof(u32);
2278
2279 /* VHT MCS set */
2280 memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
2281 pos += sizeof(vht_cap->vht_mcs);
2282
2283 return pos;
2284}
2285
074d46d1 2286u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
4bf88530 2287 const struct cfg80211_chan_def *chandef,
57f255f5 2288 u16 prot_mode, bool rifs_mode)
42e7aa77 2289{
074d46d1 2290 struct ieee80211_ht_operation *ht_oper;
42e7aa77 2291 /* Build HT Information */
074d46d1
JB
2292 *pos++ = WLAN_EID_HT_OPERATION;
2293 *pos++ = sizeof(struct ieee80211_ht_operation);
2294 ht_oper = (struct ieee80211_ht_operation *)pos;
4bf88530
JB
2295 ht_oper->primary_chan = ieee80211_frequency_to_channel(
2296 chandef->chan->center_freq);
2297 switch (chandef->width) {
2298 case NL80211_CHAN_WIDTH_160:
2299 case NL80211_CHAN_WIDTH_80P80:
2300 case NL80211_CHAN_WIDTH_80:
2301 case NL80211_CHAN_WIDTH_40:
2302 if (chandef->center_freq1 > chandef->chan->center_freq)
2303 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2304 else
2305 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
42e7aa77 2306 break;
42e7aa77 2307 default:
074d46d1 2308 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
42e7aa77
AS
2309 break;
2310 }
aee286c2 2311 if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
4bf88530
JB
2312 chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
2313 chandef->width != NL80211_CHAN_WIDTH_20)
074d46d1 2314 ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
ff3cc5f4 2315
57f255f5
AN
2316 if (rifs_mode)
2317 ht_oper->ht_param |= IEEE80211_HT_PARAM_RIFS_MODE;
2318
431e3154 2319 ht_oper->operation_mode = cpu_to_le16(prot_mode);
074d46d1 2320 ht_oper->stbc_param = 0x0000;
42e7aa77
AS
2321
2322 /* It seems that Basic MCS set and Supported MCS set
2323 are identical for the first 10 bytes */
074d46d1
JB
2324 memset(&ht_oper->basic_set, 0, 16);
2325 memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
42e7aa77 2326
074d46d1 2327 return pos + sizeof(struct ieee80211_ht_operation);
42e7aa77
AS
2328}
2329
fb28ec0c
AN
2330u8 *ieee80211_ie_build_vht_oper(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
2331 const struct cfg80211_chan_def *chandef)
2332{
2333 struct ieee80211_vht_operation *vht_oper;
2334
2335 *pos++ = WLAN_EID_VHT_OPERATION;
2336 *pos++ = sizeof(struct ieee80211_vht_operation);
2337 vht_oper = (struct ieee80211_vht_operation *)pos;
2338 vht_oper->center_freq_seg1_idx = ieee80211_frequency_to_channel(
2339 chandef->center_freq1);
2340 if (chandef->center_freq2)
2341 vht_oper->center_freq_seg2_idx =
2342 ieee80211_frequency_to_channel(chandef->center_freq2);
f020ae40
CYY
2343 else
2344 vht_oper->center_freq_seg2_idx = 0x00;
fb28ec0c
AN
2345
2346 switch (chandef->width) {
2347 case NL80211_CHAN_WIDTH_160:
2348 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_160MHZ;
2349 break;
2350 case NL80211_CHAN_WIDTH_80P80:
2351 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80P80MHZ;
2352 break;
2353 case NL80211_CHAN_WIDTH_80:
2354 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ;
2355 break;
2356 default:
2357 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_USE_HT;
2358 break;
2359 }
2360
2361 /* don't require special VHT peer rates */
2362 vht_oper->basic_mcs_set = cpu_to_le16(0xffff);
2363
2364 return pos + sizeof(struct ieee80211_vht_operation);
2365}
2366
4bf88530 2367void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
4a3cb702 2368 const struct ieee80211_ht_operation *ht_oper,
4bf88530 2369 struct cfg80211_chan_def *chandef)
42e7aa77
AS
2370{
2371 enum nl80211_channel_type channel_type;
2372
4bf88530
JB
2373 if (!ht_oper) {
2374 cfg80211_chandef_create(chandef, control_chan,
2375 NL80211_CHAN_NO_HT);
2376 return;
2377 }
42e7aa77 2378
074d46d1 2379 switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
42e7aa77
AS
2380 case IEEE80211_HT_PARAM_CHA_SEC_NONE:
2381 channel_type = NL80211_CHAN_HT20;
2382 break;
2383 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
2384 channel_type = NL80211_CHAN_HT40PLUS;
2385 break;
2386 case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
2387 channel_type = NL80211_CHAN_HT40MINUS;
2388 break;
2389 default:
2390 channel_type = NL80211_CHAN_NO_HT;
2391 }
2392
4bf88530 2393 cfg80211_chandef_create(chandef, control_chan, channel_type);
42e7aa77
AS
2394}
2395
abcff6ef
JD
2396void ieee80211_vht_oper_to_chandef(struct ieee80211_channel *control_chan,
2397 const struct ieee80211_vht_operation *oper,
2398 struct cfg80211_chan_def *chandef)
2399{
2400 if (!oper)
2401 return;
2402
2403 chandef->chan = control_chan;
2404
2405 switch (oper->chan_width) {
2406 case IEEE80211_VHT_CHANWIDTH_USE_HT:
2407 break;
2408 case IEEE80211_VHT_CHANWIDTH_80MHZ:
2409 chandef->width = NL80211_CHAN_WIDTH_80;
2410 break;
2411 case IEEE80211_VHT_CHANWIDTH_160MHZ:
2412 chandef->width = NL80211_CHAN_WIDTH_160;
2413 break;
2414 case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
2415 chandef->width = NL80211_CHAN_WIDTH_80P80;
2416 break;
2417 default:
2418 break;
2419 }
2420
2421 chandef->center_freq1 =
2422 ieee80211_channel_to_frequency(oper->center_freq_seg1_idx,
2423 control_chan->band);
2424 chandef->center_freq2 =
2425 ieee80211_channel_to_frequency(oper->center_freq_seg2_idx,
2426 control_chan->band);
2427}
2428
2103dec1
SW
2429int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef,
2430 const struct ieee80211_supported_band *sband,
2431 const u8 *srates, int srates_len, u32 *rates)
2432{
2433 u32 rate_flags = ieee80211_chandef_rate_flags(chandef);
2434 int shift = ieee80211_chandef_get_shift(chandef);
2435 struct ieee80211_rate *br;
2436 int brate, rate, i, j, count = 0;
2437
2438 *rates = 0;
2439
2440 for (i = 0; i < srates_len; i++) {
2441 rate = srates[i] & 0x7f;
2442
2443 for (j = 0; j < sband->n_bitrates; j++) {
2444 br = &sband->bitrates[j];
2445 if ((rate_flags & br->flags) != rate_flags)
2446 continue;
2447
2448 brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5);
2449 if (brate == rate) {
2450 *rates |= BIT(j);
2451 count++;
2452 break;
2453 }
2454 }
2455 }
2456 return count;
2457}
2458
fc8a7321 2459int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
6b77863b
JB
2460 struct sk_buff *skb, bool need_basic,
2461 enum ieee80211_band band)
768db343 2462{
768db343
AN
2463 struct ieee80211_local *local = sdata->local;
2464 struct ieee80211_supported_band *sband;
2103dec1 2465 int rate, shift;
768db343 2466 u8 i, rates, *pos;
fc8a7321 2467 u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2103dec1 2468 u32 rate_flags;
768db343 2469
2103dec1
SW
2470 shift = ieee80211_vif_get_shift(&sdata->vif);
2471 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
6b77863b 2472 sband = local->hw.wiphy->bands[band];
2103dec1
SW
2473 rates = 0;
2474 for (i = 0; i < sband->n_bitrates; i++) {
2475 if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2476 continue;
2477 rates++;
2478 }
768db343
AN
2479 if (rates > 8)
2480 rates = 8;
2481
2482 if (skb_tailroom(skb) < rates + 2)
2483 return -ENOMEM;
2484
2485 pos = skb_put(skb, rates + 2);
2486 *pos++ = WLAN_EID_SUPP_RATES;
2487 *pos++ = rates;
2488 for (i = 0; i < rates; i++) {
657c3e0c 2489 u8 basic = 0;
2103dec1
SW
2490 if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2491 continue;
2492
657c3e0c
AN
2493 if (need_basic && basic_rates & BIT(i))
2494 basic = 0x80;
768db343 2495 rate = sband->bitrates[i].bitrate;
2103dec1
SW
2496 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2497 5 * (1 << shift));
2498 *pos++ = basic | (u8) rate;
768db343
AN
2499 }
2500
2501 return 0;
2502}
2503
fc8a7321 2504int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
6b77863b
JB
2505 struct sk_buff *skb, bool need_basic,
2506 enum ieee80211_band band)
768db343 2507{
768db343
AN
2508 struct ieee80211_local *local = sdata->local;
2509 struct ieee80211_supported_band *sband;
cc63ec76 2510 int rate, shift;
768db343 2511 u8 i, exrates, *pos;
fc8a7321 2512 u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2103dec1
SW
2513 u32 rate_flags;
2514
2515 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2516 shift = ieee80211_vif_get_shift(&sdata->vif);
768db343 2517
6b77863b 2518 sband = local->hw.wiphy->bands[band];
2103dec1
SW
2519 exrates = 0;
2520 for (i = 0; i < sband->n_bitrates; i++) {
2521 if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2522 continue;
2523 exrates++;
2524 }
2525
768db343
AN
2526 if (exrates > 8)
2527 exrates -= 8;
2528 else
2529 exrates = 0;
2530
2531 if (skb_tailroom(skb) < exrates + 2)
2532 return -ENOMEM;
2533
2534 if (exrates) {
2535 pos = skb_put(skb, exrates + 2);
2536 *pos++ = WLAN_EID_EXT_SUPP_RATES;
2537 *pos++ = exrates;
2538 for (i = 8; i < sband->n_bitrates; i++) {
657c3e0c 2539 u8 basic = 0;
2103dec1
SW
2540 if ((rate_flags & sband->bitrates[i].flags)
2541 != rate_flags)
2542 continue;
657c3e0c
AN
2543 if (need_basic && basic_rates & BIT(i))
2544 basic = 0x80;
2103dec1
SW
2545 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2546 5 * (1 << shift));
2547 *pos++ = basic | (u8) rate;
768db343
AN
2548 }
2549 }
2550 return 0;
2551}
1dae27f8
WYG
2552
2553int ieee80211_ave_rssi(struct ieee80211_vif *vif)
2554{
2555 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2556 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
2557
be6bcabc
WYG
2558 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
2559 /* non-managed type inferfaces */
2560 return 0;
2561 }
338c17ae 2562 return -ewma_beacon_signal_read(&ifmgd->ave_beacon_signal);
1dae27f8 2563}
0d8a0a17 2564EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
04ecd257
JB
2565
2566u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
2567{
2568 if (!mcs)
2569 return 1;
2570
2571 /* TODO: consider rx_highest */
2572
2573 if (mcs->rx_mask[3])
2574 return 4;
2575 if (mcs->rx_mask[2])
2576 return 3;
2577 if (mcs->rx_mask[1])
2578 return 2;
2579 return 1;
2580}
f4bda337
TP
2581
2582/**
2583 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
2584 * @local: mac80211 hw info struct
2585 * @status: RX status
2586 * @mpdu_len: total MPDU length (including FCS)
2587 * @mpdu_offset: offset into MPDU to calculate timestamp at
2588 *
2589 * This function calculates the RX timestamp at the given MPDU offset, taking
2590 * into account what the RX timestamp was. An offset of 0 will just normalize
2591 * the timestamp to TSF at beginning of MPDU reception.
2592 */
2593u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
2594 struct ieee80211_rx_status *status,
2595 unsigned int mpdu_len,
2596 unsigned int mpdu_offset)
2597{
2598 u64 ts = status->mactime;
2599 struct rate_info ri;
2600 u16 rate;
2601
2602 if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
2603 return 0;
2604
2605 memset(&ri, 0, sizeof(ri));
2606
2607 /* Fill cfg80211 rate info */
2608 if (status->flag & RX_FLAG_HT) {
2609 ri.mcs = status->rate_idx;
2610 ri.flags |= RATE_INFO_FLAGS_MCS;
2611 if (status->flag & RX_FLAG_40MHZ)
b51f3bee
JB
2612 ri.bw = RATE_INFO_BW_40;
2613 else
2614 ri.bw = RATE_INFO_BW_20;
f4bda337
TP
2615 if (status->flag & RX_FLAG_SHORT_GI)
2616 ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
5614618e
JB
2617 } else if (status->flag & RX_FLAG_VHT) {
2618 ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
2619 ri.mcs = status->rate_idx;
2620 ri.nss = status->vht_nss;
2621 if (status->flag & RX_FLAG_40MHZ)
b51f3bee
JB
2622 ri.bw = RATE_INFO_BW_40;
2623 else if (status->vht_flag & RX_VHT_FLAG_80MHZ)
2624 ri.bw = RATE_INFO_BW_80;
2625 else if (status->vht_flag & RX_VHT_FLAG_160MHZ)
2626 ri.bw = RATE_INFO_BW_160;
2627 else
2628 ri.bw = RATE_INFO_BW_20;
5614618e
JB
2629 if (status->flag & RX_FLAG_SHORT_GI)
2630 ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
f4bda337
TP
2631 } else {
2632 struct ieee80211_supported_band *sband;
2103dec1
SW
2633 int shift = 0;
2634 int bitrate;
2635
b51f3bee 2636 if (status->flag & RX_FLAG_10MHZ) {
2103dec1 2637 shift = 1;
b51f3bee
JB
2638 ri.bw = RATE_INFO_BW_10;
2639 } else if (status->flag & RX_FLAG_5MHZ) {
2103dec1 2640 shift = 2;
b51f3bee
JB
2641 ri.bw = RATE_INFO_BW_5;
2642 } else {
2643 ri.bw = RATE_INFO_BW_20;
2644 }
f4bda337
TP
2645
2646 sband = local->hw.wiphy->bands[status->band];
2103dec1
SW
2647 bitrate = sband->bitrates[status->rate_idx].bitrate;
2648 ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift));
f4bda337
TP
2649 }
2650
2651 rate = cfg80211_calculate_bitrate(&ri);
d86aa4f8
JB
2652 if (WARN_ONCE(!rate,
2653 "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n",
2654 status->flag, status->rate_idx, status->vht_nss))
2655 return 0;
f4bda337
TP
2656
2657 /* rewind from end of MPDU */
2658 if (status->flag & RX_FLAG_MACTIME_END)
2659 ts -= mpdu_len * 8 * 10 / rate;
2660
2661 ts += mpdu_offset * 8 * 10 / rate;
2662
2663 return ts;
2664}
164eb02d
SW
2665
2666void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
2667{
2668 struct ieee80211_sub_if_data *sdata;
d2859df5 2669 struct cfg80211_chan_def chandef;
164eb02d 2670
34a3740d 2671 mutex_lock(&local->mtx);
164eb02d
SW
2672 mutex_lock(&local->iflist_mtx);
2673 list_for_each_entry(sdata, &local->interfaces, list) {
34a3740d
JB
2674 /* it might be waiting for the local->mtx, but then
2675 * by the time it gets it, sdata->wdev.cac_started
2676 * will no longer be true
2677 */
2678 cancel_delayed_work(&sdata->dfs_cac_timer_work);
164eb02d
SW
2679
2680 if (sdata->wdev.cac_started) {
d2859df5 2681 chandef = sdata->vif.bss_conf.chandef;
164eb02d
SW
2682 ieee80211_vif_release_channel(sdata);
2683 cfg80211_cac_event(sdata->dev,
d2859df5 2684 &chandef,
164eb02d
SW
2685 NL80211_RADAR_CAC_ABORTED,
2686 GFP_KERNEL);
2687 }
2688 }
2689 mutex_unlock(&local->iflist_mtx);
34a3740d 2690 mutex_unlock(&local->mtx);
164eb02d
SW
2691}
2692
2693void ieee80211_dfs_radar_detected_work(struct work_struct *work)
2694{
2695 struct ieee80211_local *local =
2696 container_of(work, struct ieee80211_local, radar_detected_work);
84a3d1c9 2697 struct cfg80211_chan_def chandef = local->hw.conf.chandef;
486cf4c0
MK
2698 struct ieee80211_chanctx *ctx;
2699 int num_chanctx = 0;
2700
2701 mutex_lock(&local->chanctx_mtx);
2702 list_for_each_entry(ctx, &local->chanctx_list, list) {
2703 if (ctx->replace_state == IEEE80211_CHANCTX_REPLACES_OTHER)
2704 continue;
2705
2706 num_chanctx++;
2707 chandef = ctx->conf.def;
2708 }
2709 mutex_unlock(&local->chanctx_mtx);
164eb02d
SW
2710
2711 ieee80211_dfs_cac_cancel(local);
2712
486cf4c0
MK
2713 if (num_chanctx > 1)
2714 /* XXX: multi-channel is not supported yet */
164eb02d 2715 WARN_ON(1);
84a3d1c9 2716 else
164eb02d 2717 cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
164eb02d
SW
2718}
2719
2720void ieee80211_radar_detected(struct ieee80211_hw *hw)
2721{
2722 struct ieee80211_local *local = hw_to_local(hw);
2723
2724 trace_api_radar_detected(local);
2725
2726 ieee80211_queue_work(hw, &local->radar_detected_work);
2727}
2728EXPORT_SYMBOL(ieee80211_radar_detected);
e6b7cde4
SW
2729
2730u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c)
2731{
2732 u32 ret;
2733 int tmp;
2734
2735 switch (c->width) {
2736 case NL80211_CHAN_WIDTH_20:
2737 c->width = NL80211_CHAN_WIDTH_20_NOHT;
2738 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2739 break;
2740 case NL80211_CHAN_WIDTH_40:
2741 c->width = NL80211_CHAN_WIDTH_20;
2742 c->center_freq1 = c->chan->center_freq;
2743 ret = IEEE80211_STA_DISABLE_40MHZ |
2744 IEEE80211_STA_DISABLE_VHT;
2745 break;
2746 case NL80211_CHAN_WIDTH_80:
2747 tmp = (30 + c->chan->center_freq - c->center_freq1)/20;
2748 /* n_P40 */
2749 tmp /= 2;
2750 /* freq_P40 */
2751 c->center_freq1 = c->center_freq1 - 20 + 40 * tmp;
2752 c->width = NL80211_CHAN_WIDTH_40;
2753 ret = IEEE80211_STA_DISABLE_VHT;
2754 break;
2755 case NL80211_CHAN_WIDTH_80P80:
2756 c->center_freq2 = 0;
2757 c->width = NL80211_CHAN_WIDTH_80;
2758 ret = IEEE80211_STA_DISABLE_80P80MHZ |
2759 IEEE80211_STA_DISABLE_160MHZ;
2760 break;
2761 case NL80211_CHAN_WIDTH_160:
2762 /* n_P20 */
2763 tmp = (70 + c->chan->center_freq - c->center_freq1)/20;
2764 /* n_P80 */
2765 tmp /= 4;
2766 c->center_freq1 = c->center_freq1 - 40 + 80 * tmp;
2767 c->width = NL80211_CHAN_WIDTH_80;
2768 ret = IEEE80211_STA_DISABLE_80P80MHZ |
2769 IEEE80211_STA_DISABLE_160MHZ;
2770 break;
2771 default:
2772 case NL80211_CHAN_WIDTH_20_NOHT:
2773 WARN_ON_ONCE(1);
2774 c->width = NL80211_CHAN_WIDTH_20_NOHT;
2775 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2776 break;
2777 case NL80211_CHAN_WIDTH_5:
2778 case NL80211_CHAN_WIDTH_10:
2779 WARN_ON_ONCE(1);
2780 /* keep c->width */
2781 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2782 break;
2783 }
2784
2785 WARN_ON_ONCE(!cfg80211_chandef_valid(c));
2786
2787 return ret;
2788}
687da132
EG
2789
2790/*
2791 * Returns true if smps_mode_new is strictly more restrictive than
2792 * smps_mode_old.
2793 */
2794bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old,
2795 enum ieee80211_smps_mode smps_mode_new)
2796{
2797 if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC ||
2798 smps_mode_new == IEEE80211_SMPS_AUTOMATIC))
2799 return false;
2800
2801 switch (smps_mode_old) {
2802 case IEEE80211_SMPS_STATIC:
2803 return false;
2804 case IEEE80211_SMPS_DYNAMIC:
2805 return smps_mode_new == IEEE80211_SMPS_STATIC;
2806 case IEEE80211_SMPS_OFF:
2807 return smps_mode_new != IEEE80211_SMPS_OFF;
2808 default:
2809 WARN_ON(1);
2810 }
2811
2812 return false;
2813}
c6da674a
CYY
2814
2815int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata,
2816 struct cfg80211_csa_settings *csa_settings)
2817{
2818 struct sk_buff *skb;
2819 struct ieee80211_mgmt *mgmt;
2820 struct ieee80211_local *local = sdata->local;
2821 int freq;
2822 int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) +
2823 sizeof(mgmt->u.action.u.chan_switch);
2824 u8 *pos;
2825
2826 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
2827 sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
2828 return -EOPNOTSUPP;
2829
2830 skb = dev_alloc_skb(local->tx_headroom + hdr_len +
2831 5 + /* channel switch announcement element */
2832 3 + /* secondary channel offset element */
2833 8); /* mesh channel switch parameters element */
2834 if (!skb)
2835 return -ENOMEM;
2836
2837 skb_reserve(skb, local->tx_headroom);
2838 mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len);
2839 memset(mgmt, 0, hdr_len);
2840 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
2841 IEEE80211_STYPE_ACTION);
2842
2843 eth_broadcast_addr(mgmt->da);
2844 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
2845 if (ieee80211_vif_is_mesh(&sdata->vif)) {
2846 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
2847 } else {
2848 struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
2849 memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN);
2850 }
2851 mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
2852 mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH;
2853 pos = skb_put(skb, 5);
2854 *pos++ = WLAN_EID_CHANNEL_SWITCH; /* EID */
2855 *pos++ = 3; /* IE length */
2856 *pos++ = csa_settings->block_tx ? 1 : 0; /* CSA mode */
2857 freq = csa_settings->chandef.chan->center_freq;
2858 *pos++ = ieee80211_frequency_to_channel(freq); /* channel */
2859 *pos++ = csa_settings->count; /* count */
2860
2861 if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) {
2862 enum nl80211_channel_type ch_type;
2863
2864 skb_put(skb, 3);
2865 *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */
2866 *pos++ = 1; /* IE length */
2867 ch_type = cfg80211_get_chandef_type(&csa_settings->chandef);
2868 if (ch_type == NL80211_CHAN_HT40PLUS)
2869 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2870 else
2871 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2872 }
2873
2874 if (ieee80211_vif_is_mesh(&sdata->vif)) {
2875 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
c6da674a
CYY
2876
2877 skb_put(skb, 8);
2878 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM; /* EID */
2879 *pos++ = 6; /* IE length */
2880 *pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL; /* Mesh TTL */
2881 *pos = 0x00; /* Mesh Flag: Tx Restrict, Initiator, Reason */
2882 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
2883 *pos++ |= csa_settings->block_tx ?
2884 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
2885 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */
2886 pos += 2;
ca91dc97 2887 put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */
c6da674a 2888 pos += 2;
c6da674a
CYY
2889 }
2890
2891 ieee80211_tx_skb(sdata, skb);
2892 return 0;
2893}
2475b1cc
MS
2894
2895bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs)
2896{
2897 return !(cs == NULL || cs->cipher == 0 ||
2898 cs->hdr_len < cs->pn_len + cs->pn_off ||
2899 cs->hdr_len <= cs->key_idx_off ||
2900 cs->key_idx_shift > 7 ||
2901 cs->key_idx_mask == 0);
2902}
2903
2904bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n)
2905{
2906 int i;
2907
2908 /* Ensure we have enough iftype bitmap space for all iftype values */
2909 WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype));
2910
2911 for (i = 0; i < n; i++)
2912 if (!ieee80211_cs_valid(&cs[i]))
2913 return false;
2914
2915 return true;
2916}
2917
2918const struct ieee80211_cipher_scheme *
2919ieee80211_cs_get(struct ieee80211_local *local, u32 cipher,
2920 enum nl80211_iftype iftype)
2921{
2922 const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes;
2923 int n = local->hw.n_cipher_schemes;
2924 int i;
2925 const struct ieee80211_cipher_scheme *cs = NULL;
2926
2927 for (i = 0; i < n; i++) {
2928 if (l[i].cipher == cipher) {
2929 cs = &l[i];
2930 break;
2931 }
2932 }
2933
2934 if (!cs || !(cs->iftype & BIT(iftype)))
2935 return NULL;
2936
2937 return cs;
2938}
2939
2940int ieee80211_cs_headroom(struct ieee80211_local *local,
2941 struct cfg80211_crypto_settings *crypto,
2942 enum nl80211_iftype iftype)
2943{
2944 const struct ieee80211_cipher_scheme *cs;
2945 int headroom = IEEE80211_ENCRYPT_HEADROOM;
2946 int i;
2947
2948 for (i = 0; i < crypto->n_ciphers_pairwise; i++) {
2949 cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i],
2950 iftype);
2951
2952 if (cs && headroom < cs->hdr_len)
2953 headroom = cs->hdr_len;
2954 }
2955
2956 cs = ieee80211_cs_get(local, crypto->cipher_group, iftype);
2957 if (cs && headroom < cs->hdr_len)
2958 headroom = cs->hdr_len;
2959
2960 return headroom;
2961}
a7022e65
FF
2962
2963static bool
2964ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i)
2965{
2966 s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1);
2967 int skip;
2968
2969 if (end > 0)
2970 return false;
2971
519ee691
JD
2972 /* One shot NOA */
2973 if (data->count[i] == 1)
2974 return false;
2975
2976 if (data->desc[i].interval == 0)
2977 return false;
2978
a7022e65
FF
2979 /* End time is in the past, check for repetitions */
2980 skip = DIV_ROUND_UP(-end, data->desc[i].interval);
2981 if (data->count[i] < 255) {
2982 if (data->count[i] <= skip) {
2983 data->count[i] = 0;
2984 return false;
2985 }
2986
2987 data->count[i] -= skip;
2988 }
2989
2990 data->desc[i].start += skip * data->desc[i].interval;
2991
2992 return true;
2993}
2994
2995static bool
2996ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf,
2997 s32 *offset)
2998{
2999 bool ret = false;
3000 int i;
3001
3002 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
3003 s32 cur;
3004
3005 if (!data->count[i])
3006 continue;
3007
3008 if (ieee80211_extend_noa_desc(data, tsf + *offset, i))
3009 ret = true;
3010
3011 cur = data->desc[i].start - tsf;
3012 if (cur > *offset)
3013 continue;
3014
3015 cur = data->desc[i].start + data->desc[i].duration - tsf;
3016 if (cur > *offset)
3017 *offset = cur;
3018 }
3019
3020 return ret;
3021}
3022
3023static u32
3024ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf)
3025{
3026 s32 offset = 0;
3027 int tries = 0;
3028 /*
3029 * arbitrary limit, used to avoid infinite loops when combined NoA
3030 * descriptors cover the full time period.
3031 */
3032 int max_tries = 5;
3033
3034 ieee80211_extend_absent_time(data, tsf, &offset);
3035 do {
3036 if (!ieee80211_extend_absent_time(data, tsf, &offset))
3037 break;
3038
3039 tries++;
3040 } while (tries < max_tries);
3041
3042 return offset;
3043}
3044
3045void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf)
3046{
3047 u32 next_offset = BIT(31) - 1;
3048 int i;
3049
3050 data->absent = 0;
3051 data->has_next_tsf = false;
3052 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
3053 s32 start;
3054
3055 if (!data->count[i])
3056 continue;
3057
3058 ieee80211_extend_noa_desc(data, tsf, i);
3059 start = data->desc[i].start - tsf;
3060 if (start <= 0)
3061 data->absent |= BIT(i);
3062
3063 if (next_offset > start)
3064 next_offset = start;
3065
3066 data->has_next_tsf = true;
3067 }
3068
3069 if (data->absent)
3070 next_offset = ieee80211_get_noa_absent_time(data, tsf);
3071
3072 data->next_tsf = tsf + next_offset;
3073}
3074EXPORT_SYMBOL(ieee80211_update_p2p_noa);
3075
3076int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr,
3077 struct ieee80211_noa_data *data, u32 tsf)
3078{
3079 int ret = 0;
3080 int i;
3081
3082 memset(data, 0, sizeof(*data));
3083
3084 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
3085 const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i];
3086
3087 if (!desc->count || !desc->duration)
3088 continue;
3089
3090 data->count[i] = desc->count;
3091 data->desc[i].start = le32_to_cpu(desc->start_time);
3092 data->desc[i].duration = le32_to_cpu(desc->duration);
3093 data->desc[i].interval = le32_to_cpu(desc->interval);
3094
3095 if (data->count[i] > 1 &&
3096 data->desc[i].interval < data->desc[i].duration)
3097 continue;
3098
3099 ieee80211_extend_noa_desc(data, tsf, i);
3100 ret++;
3101 }
3102
3103 if (ret)
3104 ieee80211_update_p2p_noa(data, tsf);
3105
3106 return ret;
3107}
3108EXPORT_SYMBOL(ieee80211_parse_p2p_noa);
057d5f4b
TP
3109
3110void ieee80211_recalc_dtim(struct ieee80211_local *local,
3111 struct ieee80211_sub_if_data *sdata)
3112{
3113 u64 tsf = drv_get_tsf(local, sdata);
3114 u64 dtim_count = 0;
3115 u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024;
3116 u8 dtim_period = sdata->vif.bss_conf.dtim_period;
3117 struct ps_data *ps;
3118 u8 bcns_from_dtim;
3119
3120 if (tsf == -1ULL || !beacon_int || !dtim_period)
3121 return;
3122
3123 if (sdata->vif.type == NL80211_IFTYPE_AP ||
3124 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
3125 if (!sdata->bss)
3126 return;
3127
3128 ps = &sdata->bss->ps;
3129 } else if (ieee80211_vif_is_mesh(&sdata->vif)) {
3130 ps = &sdata->u.mesh.ps;
3131 } else {
3132 return;
3133 }
3134
3135 /*
3136 * actually finds last dtim_count, mac80211 will update in
3137 * __beacon_add_tim().
3138 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period
3139 */
3140 do_div(tsf, beacon_int);
3141 bcns_from_dtim = do_div(tsf, dtim_period);
3142 /* just had a DTIM */
3143 if (!bcns_from_dtim)
3144 dtim_count = 0;
3145 else
3146 dtim_count = dtim_period - bcns_from_dtim;
3147
3148 ps->dtim_count = dtim_count;
3149}
73de86a3 3150
71e6195e
MK
3151static u8 ieee80211_chanctx_radar_detect(struct ieee80211_local *local,
3152 struct ieee80211_chanctx *ctx)
3153{
3154 struct ieee80211_sub_if_data *sdata;
3155 u8 radar_detect = 0;
3156
3157 lockdep_assert_held(&local->chanctx_mtx);
3158
3159 if (WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED))
3160 return 0;
3161
3162 list_for_each_entry(sdata, &ctx->reserved_vifs, reserved_chanctx_list)
3163 if (sdata->reserved_radar_required)
3164 radar_detect |= BIT(sdata->reserved_chandef.width);
3165
3166 /*
3167 * An in-place reservation context should not have any assigned vifs
3168 * until it replaces the other context.
3169 */
3170 WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_REPLACES_OTHER &&
3171 !list_empty(&ctx->assigned_vifs));
3172
3173 list_for_each_entry(sdata, &ctx->assigned_vifs, assigned_chanctx_list)
3174 if (sdata->radar_required)
3175 radar_detect |= BIT(sdata->vif.bss_conf.chandef.width);
3176
3177 return radar_detect;
3178}
3179
73de86a3
LC
3180int ieee80211_check_combinations(struct ieee80211_sub_if_data *sdata,
3181 const struct cfg80211_chan_def *chandef,
3182 enum ieee80211_chanctx_mode chanmode,
3183 u8 radar_detect)
3184{
3185 struct ieee80211_local *local = sdata->local;
3186 struct ieee80211_sub_if_data *sdata_iter;
3187 enum nl80211_iftype iftype = sdata->wdev.iftype;
3188 int num[NUM_NL80211_IFTYPES];
3189 struct ieee80211_chanctx *ctx;
b6a55015 3190 int num_different_channels = 0;
73de86a3
LC
3191 int total = 1;
3192
3193 lockdep_assert_held(&local->chanctx_mtx);
3194
3195 if (WARN_ON(hweight32(radar_detect) > 1))
3196 return -EINVAL;
3197
b6a55015
LC
3198 if (WARN_ON(chandef && chanmode == IEEE80211_CHANCTX_SHARED &&
3199 !chandef->chan))
73de86a3
LC
3200 return -EINVAL;
3201
b6a55015
LC
3202 if (chandef)
3203 num_different_channels = 1;
3204
73de86a3
LC
3205 if (WARN_ON(iftype >= NUM_NL80211_IFTYPES))
3206 return -EINVAL;
3207
3208 /* Always allow software iftypes */
3209 if (local->hw.wiphy->software_iftypes & BIT(iftype)) {
3210 if (radar_detect)
3211 return -EINVAL;
3212 return 0;
3213 }
3214
3215 memset(num, 0, sizeof(num));
3216
3217 if (iftype != NL80211_IFTYPE_UNSPECIFIED)
3218 num[iftype] = 1;
3219
3220 list_for_each_entry(ctx, &local->chanctx_list, list) {
5bcae31d
MK
3221 if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED)
3222 continue;
71e6195e 3223 radar_detect |= ieee80211_chanctx_radar_detect(local, ctx);
73de86a3
LC
3224 if (ctx->mode == IEEE80211_CHANCTX_EXCLUSIVE) {
3225 num_different_channels++;
3226 continue;
3227 }
b6a55015 3228 if (chandef && chanmode == IEEE80211_CHANCTX_SHARED &&
73de86a3
LC
3229 cfg80211_chandef_compatible(chandef,
3230 &ctx->conf.def))
3231 continue;
3232 num_different_channels++;
3233 }
3234
3235 list_for_each_entry_rcu(sdata_iter, &local->interfaces, list) {
3236 struct wireless_dev *wdev_iter;
3237
3238 wdev_iter = &sdata_iter->wdev;
3239
3240 if (sdata_iter == sdata ||
0f611d28 3241 !ieee80211_sdata_running(sdata_iter) ||
73de86a3
LC
3242 local->hw.wiphy->software_iftypes & BIT(wdev_iter->iftype))
3243 continue;
3244
3245 num[wdev_iter->iftype]++;
3246 total++;
3247 }
3248
3249 if (total == 1 && !radar_detect)
3250 return 0;
3251
3252 return cfg80211_check_combinations(local->hw.wiphy,
3253 num_different_channels,
3254 radar_detect, num);
3255}
6fa001bc
MK
3256
3257static void
3258ieee80211_iter_max_chans(const struct ieee80211_iface_combination *c,
3259 void *data)
3260{
3261 u32 *max_num_different_channels = data;
3262
3263 *max_num_different_channels = max(*max_num_different_channels,
3264 c->num_different_channels);
3265}
3266
3267int ieee80211_max_num_channels(struct ieee80211_local *local)
3268{
3269 struct ieee80211_sub_if_data *sdata;
3270 int num[NUM_NL80211_IFTYPES] = {};
3271 struct ieee80211_chanctx *ctx;
3272 int num_different_channels = 0;
3273 u8 radar_detect = 0;
3274 u32 max_num_different_channels = 1;
3275 int err;
3276
3277 lockdep_assert_held(&local->chanctx_mtx);
3278
3279 list_for_each_entry(ctx, &local->chanctx_list, list) {
5bcae31d
MK
3280 if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED)
3281 continue;
3282
6fa001bc
MK
3283 num_different_channels++;
3284
71e6195e 3285 radar_detect |= ieee80211_chanctx_radar_detect(local, ctx);
6fa001bc
MK
3286 }
3287
3288 list_for_each_entry_rcu(sdata, &local->interfaces, list)
3289 num[sdata->wdev.iftype]++;
3290
3291 err = cfg80211_iter_combinations(local->hw.wiphy,
3292 num_different_channels, radar_detect,
3293 num, ieee80211_iter_max_chans,
3294 &max_num_different_channels);
3295 if (err < 0)
3296 return err;
3297
3298 return max_num_different_channels;
3299}
40b861a0
AN
3300
3301u8 *ieee80211_add_wmm_info_ie(u8 *buf, u8 qosinfo)
3302{
3303 *buf++ = WLAN_EID_VENDOR_SPECIFIC;
3304 *buf++ = 7; /* len */
3305 *buf++ = 0x00; /* Microsoft OUI 00:50:F2 */
3306 *buf++ = 0x50;
3307 *buf++ = 0xf2;
3308 *buf++ = 2; /* WME */
3309 *buf++ = 0; /* WME info */
3310 *buf++ = 1; /* WME ver */
3311 *buf++ = qosinfo; /* U-APSD no in use */
3312
3313 return buf;
3314}
ba8c3d6f
FF
3315
3316void ieee80211_init_tx_queue(struct ieee80211_sub_if_data *sdata,
3317 struct sta_info *sta,
3318 struct txq_info *txqi, int tid)
3319{
3320 skb_queue_head_init(&txqi->queue);
3321 txqi->txq.vif = &sdata->vif;
3322
3323 if (sta) {
3324 txqi->txq.sta = &sta->sta;
3325 sta->sta.txq[tid] = &txqi->txq;
4d57c678 3326 txqi->txq.tid = tid;
ba8c3d6f
FF
3327 txqi->txq.ac = ieee802_1d_to_ac[tid & 7];
3328 } else {
3329 sdata->vif.txq = &txqi->txq;
4d57c678 3330 txqi->txq.tid = 0;
ba8c3d6f
FF
3331 txqi->txq.ac = IEEE80211_AC_BE;
3332 }
3333}