[deliverable/linux.git] / drivers / net / wireless / intel / iwlwifi / mvm / rxmq.c

/******************************************************************************
 *
 * This file is provided under a dual BSD/GPLv2 license.  When using or
 * redistributing this file, you may do so under either license.
 *
 * GPL LICENSE SUMMARY
 *
 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
 * Copyright(c) 2015 - 2016 Intel Deutschland GmbH
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * The full GNU General Public License is included in this distribution
 * in the file called COPYING.
 *
 * Contact Information:
 *  Intel Linux Wireless <ilw@linux.intel.com>
 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
 *
 * BSD LICENSE
 *
 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
 * Copyright(c) 2015 - 2016 Intel Deutschland GmbH
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 *  * Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *  * Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *  * Neither the name Intel Corporation nor the names of its
 *    contributors may be used to endorse or promote products derived
 *    from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *****************************************************************************/
#include <linux/etherdevice.h>
#include <linux/skbuff.h>
#include "iwl-trans.h"
#include "mvm.h"
#include "fw-api.h"
#include "fw-dbg.h"

void iwl_mvm_rx_phy_cmd_mq(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
{
	mvm->ampdu_ref++;

#ifdef CONFIG_IWLWIFI_DEBUGFS
	if (mvm->last_phy_info.phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_AGG)) {
		spin_lock(&mvm->drv_stats_lock);
		mvm->drv_rx_stats.ampdu_count++;
		spin_unlock(&mvm->drv_stats_lock);
	}
#endif
}

static inline int iwl_mvm_check_pn(struct iwl_mvm *mvm, struct sk_buff *skb,
				   int queue, struct ieee80211_sta *sta)
{
	struct iwl_mvm_sta *mvmsta;
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
	struct ieee80211_rx_status *stats = IEEE80211_SKB_RXCB(skb);
	struct iwl_mvm_key_pn *ptk_pn;
	u8 tid, keyidx;
	u8 pn[IEEE80211_CCMP_PN_LEN];
	u8 *extiv;

	/* do PN checking */

	/* multicast and non-data only arrives on default queue */
	if (!ieee80211_is_data(hdr->frame_control) ||
	    is_multicast_ether_addr(hdr->addr1))
		return 0;

	/* do not check PN for open AP */
	if (!(stats->flag & RX_FLAG_DECRYPTED))
		return 0;

	/*
	 * avoid checking for default queue - we don't want to replicate
	 * all the logic that's necessary for checking the PN on fragmented
	 * frames, leave that to mac80211
	 */
	if (queue == 0)
		return 0;

	/* if we are here - this for sure is either CCMP or GCMP */
	if (IS_ERR_OR_NULL(sta)) {
		IWL_ERR(mvm,
			"expected hw-decrypted unicast frame for station\n");
		return -1;
	}

	mvmsta = iwl_mvm_sta_from_mac80211(sta);

	extiv = (u8 *)hdr + ieee80211_hdrlen(hdr->frame_control);
	keyidx = extiv[3] >> 6;

	ptk_pn = rcu_dereference(mvmsta->ptk_pn[keyidx]);
	if (!ptk_pn)
		return -1;

	if (ieee80211_is_data_qos(hdr->frame_control))
		tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
	else
		tid = 0;

	/* we don't use HCCA/802.11 QoS TSPECs, so drop such frames */
	if (tid >= IWL_MAX_TID_COUNT)
		return -1;

	/* load pn */
	pn[0] = extiv[7];
	pn[1] = extiv[6];
	pn[2] = extiv[5];
	pn[3] = extiv[4];
	pn[4] = extiv[1];
	pn[5] = extiv[0];

	if (memcmp(pn, ptk_pn->q[queue].pn[tid],
		   IEEE80211_CCMP_PN_LEN) <= 0)
		return -1;

	memcpy(ptk_pn->q[queue].pn[tid], pn, IEEE80211_CCMP_PN_LEN);
	stats->flag |= RX_FLAG_PN_VALIDATED;

	return 0;
}

/* iwl_mvm_create_skb Adds the rxb to a new skb */
static void iwl_mvm_create_skb(struct sk_buff *skb, struct ieee80211_hdr *hdr,
			       u16 len, u8 crypt_len,
			       struct iwl_rx_cmd_buffer *rxb)
{
	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	struct iwl_rx_mpdu_desc *desc = (void *)pkt->data;
	unsigned int headlen, fraglen, pad_len = 0;
	unsigned int hdrlen = ieee80211_hdrlen(hdr->frame_control);

	if (desc->mac_flags2 & IWL_RX_MPDU_MFLG2_PAD)
		pad_len = 2;
	len -= pad_len;

	/* If frame is small enough to fit in skb->head, pull it completely.
	 * If not, only pull ieee80211_hdr (including crypto if present, and
	 * an additional 8 bytes for SNAP/ethertype, see below) so that
	 * splice() or TCP coalesce are more efficient.
	 *
	 * Since, in addition, ieee80211_data_to_8023() always pull in at
	 * least 8 bytes (possibly more for mesh) we can do the same here
	 * to save the cost of doing it later. That still doesn't pull in
	 * the actual IP header since the typical case has a SNAP header.
	 * If the latter changes (there are efforts in the standards group
	 * to do so) we should revisit this and ieee80211_data_to_8023().
	 */
	headlen = (len <= skb_tailroom(skb)) ? len :
					       hdrlen + crypt_len + 8;

	/* The firmware may align the packet to DWORD.
	 * The padding is inserted after the IV.
	 * After copying the header + IV skip the padding if
	 * present before copying packet data.
	 */
	hdrlen += crypt_len;
	memcpy(skb_put(skb, hdrlen), hdr, hdrlen);
	memcpy(skb_put(skb, headlen - hdrlen), (u8 *)hdr + hdrlen + pad_len,
	       headlen - hdrlen);

	fraglen = len - headlen;

	if (fraglen) {
		int offset = (void *)hdr + headlen + pad_len -
			     rxb_addr(rxb) + rxb_offset(rxb);

		skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset,
				fraglen, rxb->truesize);
	}
}

/* iwl_mvm_pass_packet_to_mac80211 - passes the packet for mac80211 */
static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm,
					    struct napi_struct *napi,
					    struct sk_buff *skb, int queue,
					    struct ieee80211_sta *sta)
{
	if (iwl_mvm_check_pn(mvm, skb, queue, sta))
		kfree_skb(skb);
	else
		ieee80211_rx_napi(mvm->hw, NULL, skb, napi);
}

static void iwl_mvm_get_signal_strength(struct iwl_mvm *mvm,
					struct iwl_rx_mpdu_desc *desc,
					struct ieee80211_rx_status *rx_status)
{
	int energy_a, energy_b, max_energy;

	energy_a = desc->energy_a;
	energy_a = energy_a ? -energy_a : S8_MIN;
	energy_b = desc->energy_b;
	energy_b = energy_b ? -energy_b : S8_MIN;
	max_energy = max(energy_a, energy_b);

	IWL_DEBUG_STATS(mvm, "energy In A %d B %d, and max %d\n",
			energy_a, energy_b, max_energy);

	rx_status->signal = max_energy;
	rx_status->chains = 0; /* TODO: phy info */
	rx_status->chain_signal[0] = energy_a;
	rx_status->chain_signal[1] = energy_b;
	rx_status->chain_signal[2] = S8_MIN;
}

static int iwl_mvm_rx_crypto(struct iwl_mvm *mvm, struct ieee80211_hdr *hdr,
			     struct ieee80211_rx_status *stats,
			     struct iwl_rx_mpdu_desc *desc, int queue,
			     u8 *crypt_len)
{
	u16 status = le16_to_cpu(desc->status);

	if (!ieee80211_has_protected(hdr->frame_control) ||
	    (status & IWL_RX_MPDU_STATUS_SEC_MASK) ==
	    IWL_RX_MPDU_STATUS_SEC_NONE)
		return 0;

	/* TODO: handle packets encrypted with unknown alg */

	switch (status & IWL_RX_MPDU_STATUS_SEC_MASK) {
	case IWL_RX_MPDU_STATUS_SEC_CCM:
	case IWL_RX_MPDU_STATUS_SEC_GCM:
		BUILD_BUG_ON(IEEE80211_CCMP_PN_LEN != IEEE80211_GCMP_PN_LEN);
		/* alg is CCM: check MIC only */
		if (!(status & IWL_RX_MPDU_STATUS_MIC_OK))
			return -1;

		stats->flag |= RX_FLAG_DECRYPTED;
		*crypt_len = IEEE80211_CCMP_HDR_LEN;
		return 0;
	case IWL_RX_MPDU_STATUS_SEC_TKIP:
		/* Don't drop the frame and decrypt it in SW */
		if (!(status & IWL_RX_MPDU_RES_STATUS_TTAK_OK))
			return 0;

		*crypt_len = IEEE80211_TKIP_IV_LEN;
		/* fall through if TTAK OK */
	case IWL_RX_MPDU_STATUS_SEC_WEP:
		if (!(status & IWL_RX_MPDU_STATUS_ICV_OK))
			return -1;

		stats->flag |= RX_FLAG_DECRYPTED;
		if ((status & IWL_RX_MPDU_STATUS_SEC_MASK) ==
				IWL_RX_MPDU_STATUS_SEC_WEP)
			*crypt_len = IEEE80211_WEP_IV_LEN;
		return 0;
	case IWL_RX_MPDU_STATUS_SEC_EXT_ENC:
		if (!(status & IWL_RX_MPDU_STATUS_MIC_OK))
			return -1;
		stats->flag |= RX_FLAG_DECRYPTED;
		return 0;
	default:
		IWL_ERR(mvm, "Unhandled alg: 0x%x\n", status);
	}

	return 0;
}

static void iwl_mvm_rx_csum(struct ieee80211_sta *sta,
			    struct sk_buff *skb,
			    struct iwl_rx_mpdu_desc *desc)
{
	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif);
	u16 flags = le16_to_cpu(desc->l3l4_flags);
	u8 l3_prot = (u8)((flags & IWL_RX_L3L4_L3_PROTO_MASK) >>
			  IWL_RX_L3_PROTO_POS);

	if (mvmvif->features & NETIF_F_RXCSUM &&
	    flags & IWL_RX_L3L4_TCP_UDP_CSUM_OK &&
	    (flags & IWL_RX_L3L4_IP_HDR_CSUM_OK ||
	     l3_prot == IWL_RX_L3_TYPE_IPV6 ||
	     l3_prot == IWL_RX_L3_TYPE_IPV6_FRAG))
		skb->ip_summed = CHECKSUM_UNNECESSARY;
}

/*
 * returns true if a packet outside BA session is a duplicate and
 * should be dropped
 */
static bool iwl_mvm_is_nonagg_dup(struct ieee80211_sta *sta, int queue,
				  struct ieee80211_rx_status *rx_status,
				  struct ieee80211_hdr *hdr,
				  struct iwl_rx_mpdu_desc *desc)
{
	struct iwl_mvm_sta *mvm_sta;
	struct iwl_mvm_rxq_dup_data *dup_data;
	u8 baid, tid, sub_frame_idx;

	if (WARN_ON(IS_ERR_OR_NULL(sta)))
		return false;

	baid = (le32_to_cpu(desc->reorder_data) &
		IWL_RX_MPDU_REORDER_BAID_MASK) >>
		IWL_RX_MPDU_REORDER_BAID_SHIFT;

	if (baid != IWL_RX_REORDER_DATA_INVALID_BAID)
		return false;

	mvm_sta = iwl_mvm_sta_from_mac80211(sta);
	dup_data = &mvm_sta->dup_data[queue];

	/*
	 * Drop duplicate 802.11 retransmissions
	 * (IEEE 802.11-2012: 9.3.2.10 "Duplicate detection and recovery")
	 */
	if (ieee80211_is_ctl(hdr->frame_control) ||
	    ieee80211_is_qos_nullfunc(hdr->frame_control) ||
	    is_multicast_ether_addr(hdr->addr1)) {
		rx_status->flag |= RX_FLAG_DUP_VALIDATED;
		return false;
	}

	if (ieee80211_is_data_qos(hdr->frame_control))
		/* frame has qos control */
		tid = *ieee80211_get_qos_ctl(hdr) &
			IEEE80211_QOS_CTL_TID_MASK;
	else
		tid = IWL_MAX_TID_COUNT;

	/* If this wasn't a part of an A-MSDU the sub-frame index will be 0 */
	sub_frame_idx = desc->amsdu_info & IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK;

	if (unlikely(ieee80211_has_retry(hdr->frame_control) &&
		     dup_data->last_seq[tid] == hdr->seq_ctrl &&
		     dup_data->last_sub_frame[tid] >= sub_frame_idx))
		return true;

	dup_data->last_seq[tid] = hdr->seq_ctrl;
	dup_data->last_sub_frame[tid] = sub_frame_idx;

	rx_status->flag |= RX_FLAG_DUP_VALIDATED;

	return false;
}

int iwl_mvm_notify_rx_queue(struct iwl_mvm *mvm, u32 rxq_mask,
			    const u8 *data, u32 count)
{
	struct iwl_rxq_sync_cmd *cmd;
	u32 data_size = sizeof(*cmd) + count;
	int ret;

	/* should be DWORD aligned */
	if (WARN_ON(count & 3 || count > IWL_MULTI_QUEUE_SYNC_MSG_MAX_SIZE))
		return -EINVAL;

	cmd = kzalloc(data_size, GFP_KERNEL);
	if (!cmd)
		return -ENOMEM;

	cmd->rxq_mask = cpu_to_le32(rxq_mask);
	cmd->count =  cpu_to_le32(count);
	cmd->flags = 0;
	memcpy(cmd->payload, data, count);

	ret = iwl_mvm_send_cmd_pdu(mvm,
				   WIDE_ID(DATA_PATH_GROUP,
					   TRIGGER_RX_QUEUES_NOTIF_CMD),
				   0, data_size, cmd);

	kfree(cmd);
	return ret;
}

void iwl_mvm_rx_queue_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb,
			    int queue)
{
	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	struct iwl_rxq_sync_notification *notif;
	struct iwl_mvm_internal_rxq_notif *internal_notif;

	notif = (void *)pkt->data;
	internal_notif = (void *)notif->payload;

	switch (internal_notif->type) {
	case IWL_MVM_RXQ_NOTIF_DEL_BA:
		/* TODO */
		break;
	default:
		WARN_ONCE(1, "Invalid identifier %d", internal_notif->type);
	}
}

void iwl_mvm_rx_mpdu_mq(struct iwl_mvm *mvm, struct napi_struct *napi,
			struct iwl_rx_cmd_buffer *rxb, int queue)
{
	struct ieee80211_rx_status *rx_status;
	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	struct iwl_rx_mpdu_desc *desc = (void *)pkt->data;
	struct ieee80211_hdr *hdr = (void *)(pkt->data + sizeof(*desc));
	u32 len = le16_to_cpu(desc->mpdu_len);
	u32 rate_n_flags = le32_to_cpu(desc->rate_n_flags);
	struct ieee80211_sta *sta = NULL;
	struct sk_buff *skb;
	u8 crypt_len = 0;

	/* Dont use dev_alloc_skb(), we'll have enough headroom once
	 * ieee80211_hdr pulled.
	 */
	skb = alloc_skb(128, GFP_ATOMIC);
	if (!skb) {
		IWL_ERR(mvm, "alloc_skb failed\n");
		return;
	}

	rx_status = IEEE80211_SKB_RXCB(skb);

	if (iwl_mvm_rx_crypto(mvm, hdr, rx_status, desc, queue, &crypt_len)) {
		kfree_skb(skb);
		return;
	}

	/*
	 * Keep packets with CRC errors (and with overrun) for monitor mode
	 * (otherwise the firmware discards them) but mark them as bad.
	 */
	if (!(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_CRC_OK)) ||
	    !(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_OVERRUN_OK))) {
		IWL_DEBUG_RX(mvm, "Bad CRC or FIFO: 0x%08X.\n",
			     le16_to_cpu(desc->status));
		rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
	}

	rx_status->mactime = le64_to_cpu(desc->tsf_on_air_rise);
	rx_status->device_timestamp = le32_to_cpu(desc->gp2_on_air_rise);
	rx_status->band = desc->channel > 14 ? IEEE80211_BAND_5GHZ :
					       IEEE80211_BAND_2GHZ;
	rx_status->freq = ieee80211_channel_to_frequency(desc->channel,
							 rx_status->band);
	iwl_mvm_get_signal_strength(mvm, desc, rx_status);
	/* TSF as indicated by the firmware is at INA time */
	rx_status->flag |= RX_FLAG_MACTIME_PLCP_START;

	rcu_read_lock();

	if (le16_to_cpu(desc->status) & IWL_RX_MPDU_STATUS_SRC_STA_FOUND) {
		u8 id = desc->sta_id_flags & IWL_RX_MPDU_SIF_STA_ID_MASK;

		if (!WARN_ON_ONCE(id >= IWL_MVM_STATION_COUNT)) {
			sta = rcu_dereference(mvm->fw_id_to_mac_id[id]);
			if (IS_ERR(sta))
				sta = NULL;
		}
	} else if (!is_multicast_ether_addr(hdr->addr2)) {
		/*
		 * This is fine since we prevent two stations with the same
		 * address from being added.
		 */
		sta = ieee80211_find_sta_by_ifaddr(mvm->hw, hdr->addr2, NULL);
	}

	if (sta) {
		struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);

		/*
		 * We have tx blocked stations (with CS bit). If we heard
		 * frames from a blocked station on a new channel we can
		 * TX to it again.
		 */
		if (unlikely(mvm->csa_tx_block_bcn_timeout))
			iwl_mvm_sta_modify_disable_tx_ap(mvm, sta, false);

		rs_update_last_rssi(mvm, &mvmsta->lq_sta, rx_status);

		if (iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_RSSI) &&
		    ieee80211_is_beacon(hdr->frame_control)) {
			struct iwl_fw_dbg_trigger_tlv *trig;
			struct iwl_fw_dbg_trigger_low_rssi *rssi_trig;
			bool trig_check;
			s32 rssi;

			trig = iwl_fw_dbg_get_trigger(mvm->fw,
						      FW_DBG_TRIGGER_RSSI);
			rssi_trig = (void *)trig->data;
			rssi = le32_to_cpu(rssi_trig->rssi);

			trig_check =
				iwl_fw_dbg_trigger_check_stop(mvm, mvmsta->vif,
							      trig);
			if (trig_check && rx_status->signal < rssi)
				iwl_mvm_fw_dbg_collect_trig(mvm, trig, NULL);
		}

		/* TODO: multi queue TCM */

		if (ieee80211_is_data(hdr->frame_control))
			iwl_mvm_rx_csum(sta, skb, desc);

		if (iwl_mvm_is_nonagg_dup(sta, queue, rx_status, hdr, desc)) {
			kfree_skb(skb);
			rcu_read_unlock();
			return;
		}

		/*
		 * Our hardware de-aggregates AMSDUs but copies the mac header
		 * as it to the de-aggregated MPDUs. We need to turn off the
		 * AMSDU bit in the QoS control ourselves.
		 */
		if ((desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU) &&
		    !WARN_ON(!ieee80211_is_data_qos(hdr->frame_control))) {
			u8 *qc = ieee80211_get_qos_ctl(hdr);

			*qc &= ~IEEE80211_QOS_CTL_A_MSDU_PRESENT;
		}
	}

	/*
	 * TODO: PHY info.
	 * Verify we don't have the information in the MPDU descriptor and
	 * that it is not needed.
	 * Make sure for monitor mode that we are on default queue, update
	 * ampdu_ref and the rest of phy info then
	 */

	/* Set up the HT phy flags */
	switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) {
	case RATE_MCS_CHAN_WIDTH_20:
		break;
	case RATE_MCS_CHAN_WIDTH_40:
		rx_status->flag |= RX_FLAG_40MHZ;
		break;
	case RATE_MCS_CHAN_WIDTH_80:
		rx_status->vht_flag |= RX_VHT_FLAG_80MHZ;
		break;
	case RATE_MCS_CHAN_WIDTH_160:
		rx_status->vht_flag |= RX_VHT_FLAG_160MHZ;
		break;
	}
	if (rate_n_flags & RATE_MCS_SGI_MSK)
		rx_status->flag |= RX_FLAG_SHORT_GI;
	if (rate_n_flags & RATE_HT_MCS_GF_MSK)
		rx_status->flag |= RX_FLAG_HT_GF;
	if (rate_n_flags & RATE_MCS_LDPC_MSK)
		rx_status->flag |= RX_FLAG_LDPC;
	if (rate_n_flags & RATE_MCS_HT_MSK) {
		u8 stbc = (rate_n_flags & RATE_MCS_HT_STBC_MSK) >>
				RATE_MCS_STBC_POS;
		rx_status->flag |= RX_FLAG_HT;
		rx_status->rate_idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK;
		rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT;
	} else if (rate_n_flags & RATE_MCS_VHT_MSK) {
		u8 stbc = (rate_n_flags & RATE_MCS_VHT_STBC_MSK) >>
				RATE_MCS_STBC_POS;
		rx_status->vht_nss =
			((rate_n_flags & RATE_VHT_MCS_NSS_MSK) >>
						RATE_VHT_MCS_NSS_POS) + 1;
		rx_status->rate_idx = rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK;
		rx_status->flag |= RX_FLAG_VHT;
		rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT;
		if (rate_n_flags & RATE_MCS_BF_MSK)
			rx_status->vht_flag |= RX_VHT_FLAG_BF;
	} else {
		rx_status->rate_idx =
			iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags,
							    rx_status->band);
	}

	/* TODO: PHY info - update ampdu queue statistics (for debugfs) */
	/* TODO: PHY info - gscan */

	iwl_mvm_create_skb(skb, hdr, len, crypt_len, rxb);
	iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, queue, sta);
	rcu_read_unlock();
}

void iwl_mvm_rx_frame_release(struct iwl_mvm *mvm,
			      struct iwl_rx_cmd_buffer *rxb, int queue)
{
	/* TODO */
}
Commit	Line	Data
780e87c2 JB	1	/******************************************************************************
	2	*
	3	* This file is provided under a dual BSD/GPLv2 license. When using or
	4	* redistributing this file, you may do so under either license.
	5	*
	6	* GPL LICENSE SUMMARY
	7	*
	8	* Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
	9	* Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
e29cc6b9	10	* Copyright(c) 2015 - 2016 Intel Deutschland GmbH
780e87c2 JB	11	*
	12	* This program is free software; you can redistribute it and/or modify
	13	* it under the terms of version 2 of the GNU General Public License as
	14	* published by the Free Software Foundation.
	15	*
	16	* This program is distributed in the hope that it will be useful, but
	17	* WITHOUT ANY WARRANTY; without even the implied warranty of
	18	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	19	* General Public License for more details.
	20	*
	21	* The full GNU General Public License is included in this distribution
	22	* in the file called COPYING.
	23	*
	24	* Contact Information:
	25	* Intel Linux Wireless <ilw@linux.intel.com>
	26	* Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
	27	*
	28	* BSD LICENSE
	29	*
	30	* Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
	31	* Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
e29cc6b9	32	* Copyright(c) 2015 - 2016 Intel Deutschland GmbH
780e87c2 JB	33	* All rights reserved.
	34	*
	35	* Redistribution and use in source and binary forms, with or without
	36	* modification, are permitted provided that the following conditions
	37	* are met:
	38	*
	39	* * Redistributions of source code must retain the above copyright
	40	* notice, this list of conditions and the following disclaimer.
	41	* * Redistributions in binary form must reproduce the above copyright
	42	* notice, this list of conditions and the following disclaimer in
	43	* the documentation and/or other materials provided with the
	44	* distribution.
	45	* * Neither the name Intel Corporation nor the names of its
	46	* contributors may be used to endorse or promote products derived
	47	* from this software without specific prior written permission.
	48	*
	49	* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
	50	* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
	51	* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
	52	* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
	53	* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	54	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
	55	* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	56	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	57	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	58	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	59	* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	60	*****************************************************************************/
	61	#include <linux/etherdevice.h>
	62	#include <linux/skbuff.h>
	63	#include "iwl-trans.h"
	64	#include "mvm.h"
	65	#include "fw-api.h"
	66	#include "fw-dbg.h"
	67
	68	void iwl_mvm_rx_phy_cmd_mq(struct iwl_mvm mvm, struct iwl_rx_cmd_buffer rxb)
	69	{
	70	mvm->ampdu_ref++;
	71
	72	#ifdef CONFIG_IWLWIFI_DEBUGFS
	73	if (mvm->last_phy_info.phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_AGG)) {
	74	spin_lock(&mvm->drv_stats_lock);
	75	mvm->drv_rx_stats.ampdu_count++;
	76	spin_unlock(&mvm->drv_stats_lock);
	77	}
	78	#endif
	79	}
	80
f5e28eac JB	81	static inline int iwl_mvm_check_pn(struct iwl_mvm mvm, struct sk_buff skb,
	82	int queue, struct ieee80211_sta *sta)
	83	{
	84	struct iwl_mvm_sta *mvmsta;
	85	struct ieee80211_hdr hdr = (struct ieee80211_hdr )skb->data;
	86	struct ieee80211_rx_status *stats = IEEE80211_SKB_RXCB(skb);
	87	struct iwl_mvm_key_pn *ptk_pn;
	88	u8 tid, keyidx;
	89	u8 pn[IEEE80211_CCMP_PN_LEN];
	90	u8 *extiv;
	91
	92	/* do PN checking */
	93
	94	/* multicast and non-data only arrives on default queue */
	95	if (!ieee80211_is_data(hdr->frame_control) \|\|
	96	is_multicast_ether_addr(hdr->addr1))
	97	return 0;
	98
	99	/* do not check PN for open AP */
	100	if (!(stats->flag & RX_FLAG_DECRYPTED))
	101	return 0;
	102
	103	/*
	104	* avoid checking for default queue - we don't want to replicate
	105	* all the logic that's necessary for checking the PN on fragmented
	106	* frames, leave that to mac80211
	107	*/
	108	if (queue == 0)
	109	return 0;
	110
	111	/* if we are here - this for sure is either CCMP or GCMP */
	112	if (IS_ERR_OR_NULL(sta)) {
	113	IWL_ERR(mvm,
	114	"expected hw-decrypted unicast frame for station\n");
	115	return -1;
	116	}
	117
	118	mvmsta = iwl_mvm_sta_from_mac80211(sta);
	119
	120	extiv = (u8 *)hdr + ieee80211_hdrlen(hdr->frame_control);
	121	keyidx = extiv[3] >> 6;
	122
	123	ptk_pn = rcu_dereference(mvmsta->ptk_pn[keyidx]);
	124	if (!ptk_pn)
	125	return -1;
	126
	127	if (ieee80211_is_data_qos(hdr->frame_control))
	128	tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
	129	else
	130	tid = 0;
	131
	132	/* we don't use HCCA/802.11 QoS TSPECs, so drop such frames */
	133	if (tid >= IWL_MAX_TID_COUNT)
	134	return -1;
	135
	136	/* load pn */
	137	pn[0] = extiv[7];
	138	pn[1] = extiv[6];
	139	pn[2] = extiv[5];
	140	pn[3] = extiv[4];
	141	pn[4] = extiv[1];
	142	pn[5] = extiv[0];
	143
	144	if (memcmp(pn, ptk_pn->q[queue].pn[tid],
145	IEEE80211_CCMP_PN_LEN) <= 0)
146	return -1;
147
148	memcpy(ptk_pn->q[queue].pn[tid], pn, IEEE80211_CCMP_PN_LEN);
149	stats->flag \|= RX_FLAG_PN_VALIDATED;
150
151	return 0;
152	}
153
154	/* iwl_mvm_create_skb Adds the rxb to a new skb */
155	static void iwl_mvm_create_skb(struct sk_buff skb, struct ieee80211_hdr hdr,
156	u16 len, u8 crypt_len,
157	struct iwl_rx_cmd_buffer *rxb)
780e87c2	158	{
e29cc6b9 SS	159	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	160	struct iwl_rx_mpdu_desc desc = (void )pkt->data;
	161	unsigned int headlen, fraglen, pad_len = 0;
	162	unsigned int hdrlen = ieee80211_hdrlen(hdr->frame_control);
	163
	164	if (desc->mac_flags2 & IWL_RX_MPDU_MFLG2_PAD)
	165	pad_len = 2;
	166	len -= pad_len;
780e87c2 JB	167
	168	/* If frame is small enough to fit in skb->head, pull it completely.
	169	* If not, only pull ieee80211_hdr (including crypto if present, and
	170	* an additional 8 bytes for SNAP/ethertype, see below) so that
	171	* splice() or TCP coalesce are more efficient.
	172	*
	173	* Since, in addition, ieee80211_data_to_8023() always pull in at
	174	* least 8 bytes (possibly more for mesh) we can do the same here
	175	* to save the cost of doing it later. That still doesn't pull in
	176	* the actual IP header since the typical case has a SNAP header.
	177	* If the latter changes (there are efforts in the standards group
	178	* to do so) we should revisit this and ieee80211_data_to_8023().
	179	*/
e29cc6b9 SS	180	headlen = (len <= skb_tailroom(skb)) ? len :
e29cc6b9 SS	181	hdrlen + crypt_len + 8;
780e87c2	182
e29cc6b9 SS	183	/* The firmware may align the packet to DWORD.
	184	* The padding is inserted after the IV.
	185	* After copying the header + IV skip the padding if
	186	* present before copying packet data.
	187	*/
	188	hdrlen += crypt_len;
780e87c2	189	memcpy(skb_put(skb, hdrlen), hdr, hdrlen);
e29cc6b9 SS	190	memcpy(skb_put(skb, headlen - hdrlen), (u8 *)hdr + hdrlen + pad_len,
	191	headlen - hdrlen);
	192
	193	fraglen = len - headlen;
780e87c2 JB	194
780e87c2 JB	195	if (fraglen) {
e29cc6b9	196	int offset = (void *)hdr + headlen + pad_len -
780e87c2 JB	197	rxb_addr(rxb) + rxb_offset(rxb);
	198
	199	skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset,
	200	fraglen, rxb->truesize);
	201	}
f5e28eac	202	}
780e87c2	203
f5e28eac JB	204	/* iwl_mvm_pass_packet_to_mac80211 - passes the packet for mac80211 */
	205	static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm,
	206	struct napi_struct *napi,
	207	struct sk_buff *skb, int queue,
	208	struct ieee80211_sta *sta)
	209	{
	210	if (iwl_mvm_check_pn(mvm, skb, queue, sta))
	211	kfree_skb(skb);
	212	else
d63b548f	213	ieee80211_rx_napi(mvm->hw, NULL, skb, napi);
780e87c2 JB	214	}
	215
	216	static void iwl_mvm_get_signal_strength(struct iwl_mvm *mvm,
	217	struct iwl_rx_mpdu_desc *desc,
	218	struct ieee80211_rx_status *rx_status)
	219	{
d56a7801	220	int energy_a, energy_b, max_energy;
780e87c2 JB	221
	222	energy_a = desc->energy_a;
	223	energy_a = energy_a ? -energy_a : S8_MIN;
	224	energy_b = desc->energy_b;
	225	energy_b = energy_b ? -energy_b : S8_MIN;
780e87c2	226	max_energy = max(energy_a, energy_b);
780e87c2	227
d56a7801 SS	228	IWL_DEBUG_STATS(mvm, "energy In A %d B %d, and max %d\n",
d56a7801 SS	229	energy_a, energy_b, max_energy);
780e87c2 JB	230
	231	rx_status->signal = max_energy;
	232	rx_status->chains = 0; /* TODO: phy info */
	233	rx_status->chain_signal[0] = energy_a;
	234	rx_status->chain_signal[1] = energy_b;
d56a7801	235	rx_status->chain_signal[2] = S8_MIN;
780e87c2 JB	236	}
780e87c2 JB	237
f5e28eac	238	static int iwl_mvm_rx_crypto(struct iwl_mvm mvm, struct ieee80211_hdr hdr,
780e87c2 JB	239	struct ieee80211_rx_status *stats,
	240	struct iwl_rx_mpdu_desc *desc, int queue,
	241	u8 *crypt_len)
	242	{
	243	u16 status = le16_to_cpu(desc->status);
	244
	245	if (!ieee80211_has_protected(hdr->frame_control) \|\|
	246	(status & IWL_RX_MPDU_STATUS_SEC_MASK) ==
	247	IWL_RX_MPDU_STATUS_SEC_NONE)
	248	return 0;
	249
	250	/* TODO: handle packets encrypted with unknown alg */
	251
	252	switch (status & IWL_RX_MPDU_STATUS_SEC_MASK) {
	253	case IWL_RX_MPDU_STATUS_SEC_CCM:
	254	case IWL_RX_MPDU_STATUS_SEC_GCM:
f5e28eac	255	BUILD_BUG_ON(IEEE80211_CCMP_PN_LEN != IEEE80211_GCMP_PN_LEN);
780e87c2 JB	256	/* alg is CCM: check MIC only */
	257	if (!(status & IWL_RX_MPDU_STATUS_MIC_OK))
	258	return -1;
	259
	260	stats->flag \|= RX_FLAG_DECRYPTED;
	261	*crypt_len = IEEE80211_CCMP_HDR_LEN;
	262	return 0;
	263	case IWL_RX_MPDU_STATUS_SEC_TKIP:
	264	/* Don't drop the frame and decrypt it in SW */
	265	if (!(status & IWL_RX_MPDU_RES_STATUS_TTAK_OK))
	266	return 0;
	267
	268	*crypt_len = IEEE80211_TKIP_IV_LEN;
	269	/* fall through if TTAK OK */
	270	case IWL_RX_MPDU_STATUS_SEC_WEP:
	271	if (!(status & IWL_RX_MPDU_STATUS_ICV_OK))
	272	return -1;
	273
	274	stats->flag \|= RX_FLAG_DECRYPTED;
	275	if ((status & IWL_RX_MPDU_STATUS_SEC_MASK) ==
	276	IWL_RX_MPDU_STATUS_SEC_WEP)
	277	*crypt_len = IEEE80211_WEP_IV_LEN;
	278	return 0;
	279	case IWL_RX_MPDU_STATUS_SEC_EXT_ENC:
	280	if (!(status & IWL_RX_MPDU_STATUS_MIC_OK))
	281	return -1;
	282	stats->flag \|= RX_FLAG_DECRYPTED;
	283	return 0;
	284	default:
	285	IWL_ERR(mvm, "Unhandled alg: 0x%x\n", status);
	286	}
	287
	288	return 0;
	289	}
	290
	291	static void iwl_mvm_rx_csum(struct ieee80211_sta *sta,
	292	struct sk_buff *skb,
	293	struct iwl_rx_mpdu_desc *desc)
	294	{
	295	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
	296	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif);
b238be07 SS	297	u16 flags = le16_to_cpu(desc->l3l4_flags);
	298	u8 l3_prot = (u8)((flags & IWL_RX_L3L4_L3_PROTO_MASK) >>
	299	IWL_RX_L3_PROTO_POS);
780e87c2 JB	300
780e87c2 JB	301	if (mvmvif->features & NETIF_F_RXCSUM &&
b238be07 SS	302	flags & IWL_RX_L3L4_TCP_UDP_CSUM_OK &&
	303	(flags & IWL_RX_L3L4_IP_HDR_CSUM_OK \|\|
	304	l3_prot == IWL_RX_L3_TYPE_IPV6 \|\|
	305	l3_prot == IWL_RX_L3_TYPE_IPV6_FRAG))
780e87c2 JB	306	skb->ip_summed = CHECKSUM_UNNECESSARY;
	307	}
	308
a571f5f6 SS	309	/*
	310	* returns true if a packet outside BA session is a duplicate and
	311	* should be dropped
	312	*/
	313	static bool iwl_mvm_is_nonagg_dup(struct ieee80211_sta *sta, int queue,
	314	struct ieee80211_rx_status *rx_status,
	315	struct ieee80211_hdr *hdr,
	316	struct iwl_rx_mpdu_desc *desc)
	317	{
	318	struct iwl_mvm_sta *mvm_sta;
	319	struct iwl_mvm_rxq_dup_data *dup_data;
	320	u8 baid, tid, sub_frame_idx;
	321
	322	if (WARN_ON(IS_ERR_OR_NULL(sta)))
	323	return false;
	324
	325	baid = (le32_to_cpu(desc->reorder_data) &
	326	IWL_RX_MPDU_REORDER_BAID_MASK) >>
	327	IWL_RX_MPDU_REORDER_BAID_SHIFT;
	328
	329	if (baid != IWL_RX_REORDER_DATA_INVALID_BAID)
	330	return false;
	331
	332	mvm_sta = iwl_mvm_sta_from_mac80211(sta);
	333	dup_data = &mvm_sta->dup_data[queue];
	334
	335	/*
	336	* Drop duplicate 802.11 retransmissions
	337	* (IEEE 802.11-2012: 9.3.2.10 "Duplicate detection and recovery")
	338	*/
	339	if (ieee80211_is_ctl(hdr->frame_control) \|\|
	340	ieee80211_is_qos_nullfunc(hdr->frame_control) \|\|
	341	is_multicast_ether_addr(hdr->addr1)) {
	342	rx_status->flag \|= RX_FLAG_DUP_VALIDATED;
	343	return false;
	344	}
	345
	346	if (ieee80211_is_data_qos(hdr->frame_control))
	347	/* frame has qos control */
	348	tid = *ieee80211_get_qos_ctl(hdr) &
	349	IEEE80211_QOS_CTL_TID_MASK;
	350	else
	351	tid = IWL_MAX_TID_COUNT;
	352
	353	/* If this wasn't a part of an A-MSDU the sub-frame index will be 0 */
	354	sub_frame_idx = desc->amsdu_info & IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK;
	355
	356	if (unlikely(ieee80211_has_retry(hdr->frame_control) &&
	357	dup_data->last_seq[tid] == hdr->seq_ctrl &&
	358	dup_data->last_sub_frame[tid] >= sub_frame_idx))
	359	return true;
	360
	361	dup_data->last_seq[tid] = hdr->seq_ctrl;
	362	dup_data->last_sub_frame[tid] = sub_frame_idx;
	363
	364	rx_status->flag \|= RX_FLAG_DUP_VALIDATED;
	365
	366	return false;
	367	}
	368
94bb4481 SS	369	int iwl_mvm_notify_rx_queue(struct iwl_mvm *mvm, u32 rxq_mask,
	370	const u8 *data, u32 count)
	371	{
	372	struct iwl_rxq_sync_cmd *cmd;
	373	u32 data_size = sizeof(*cmd) + count;
	374	int ret;
	375
	376	/* should be DWORD aligned */
	377	if (WARN_ON(count & 3 \|\| count > IWL_MULTI_QUEUE_SYNC_MSG_MAX_SIZE))
	378	return -EINVAL;
	379
	380	cmd = kzalloc(data_size, GFP_KERNEL);
	381	if (!cmd)
	382	return -ENOMEM;
	383
	384	cmd->rxq_mask = cpu_to_le32(rxq_mask);
	385	cmd->count = cpu_to_le32(count);
	386	cmd->flags = 0;
	387	memcpy(cmd->payload, data, count);
	388
	389	ret = iwl_mvm_send_cmd_pdu(mvm,
	390	WIDE_ID(DATA_PATH_GROUP,
	391	TRIGGER_RX_QUEUES_NOTIF_CMD),
	392	0, data_size, cmd);
	393
	394	kfree(cmd);
	395	return ret;
	396	}
	397
	398	void iwl_mvm_rx_queue_notif(struct iwl_mvm mvm, struct iwl_rx_cmd_buffer rxb,
	399	int queue)
	400	{
	401	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	402	struct iwl_rxq_sync_notification *notif;
	403	struct iwl_mvm_internal_rxq_notif *internal_notif;
	404
	405	notif = (void *)pkt->data;
	406	internal_notif = (void *)notif->payload;
	407
	408	switch (internal_notif->type) {
	409	case IWL_MVM_RXQ_NOTIF_DEL_BA:
	410	/* TODO */
	411	break;
	412	default:
	413	WARN_ONCE(1, "Invalid identifier %d", internal_notif->type);
	414	}
	415	}
	416
780e87c2 JB	417	void iwl_mvm_rx_mpdu_mq(struct iwl_mvm mvm, struct napi_struct napi,
	418	struct iwl_rx_cmd_buffer *rxb, int queue)
	419	{
	420	struct ieee80211_rx_status *rx_status;
	421	struct iwl_rx_packet *pkt = rxb_addr(rxb);
	422	struct iwl_rx_mpdu_desc desc = (void )pkt->data;
0c1c6e37	423	struct ieee80211_hdr hdr = (void )(pkt->data + sizeof(*desc));
780e87c2 JB	424	u32 len = le16_to_cpu(desc->mpdu_len);
	425	u32 rate_n_flags = le32_to_cpu(desc->rate_n_flags);
	426	struct ieee80211_sta *sta = NULL;
	427	struct sk_buff *skb;
780e87c2 JB	428	u8 crypt_len = 0;
	429
	430	/* Dont use dev_alloc_skb(), we'll have enough headroom once
	431	* ieee80211_hdr pulled.
	432	*/
	433	skb = alloc_skb(128, GFP_ATOMIC);
	434	if (!skb) {
	435	IWL_ERR(mvm, "alloc_skb failed\n");
	436	return;
	437	}
	438
	439	rx_status = IEEE80211_SKB_RXCB(skb);
	440
	441	if (iwl_mvm_rx_crypto(mvm, hdr, rx_status, desc, queue, &crypt_len)) {
	442	kfree_skb(skb);
	443	return;
	444	}
	445
	446	/*
	447	* Keep packets with CRC errors (and with overrun) for monitor mode
	448	* (otherwise the firmware discards them) but mark them as bad.
	449	*/
	450	if (!(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_CRC_OK)) \|\|
	451	!(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_OVERRUN_OK))) {
	452	IWL_DEBUG_RX(mvm, "Bad CRC or FIFO: 0x%08X.\n",
	453	le16_to_cpu(desc->status));
	454	rx_status->flag \|= RX_FLAG_FAILED_FCS_CRC;
	455	}
	456
	457	rx_status->mactime = le64_to_cpu(desc->tsf_on_air_rise);
	458	rx_status->device_timestamp = le32_to_cpu(desc->gp2_on_air_rise);
	459	rx_status->band = desc->channel > 14 ? IEEE80211_BAND_5GHZ :
	460	IEEE80211_BAND_2GHZ;
	461	rx_status->freq = ieee80211_channel_to_frequency(desc->channel,
	462	rx_status->band);
	463	iwl_mvm_get_signal_strength(mvm, desc, rx_status);
77fe7395 SS	464	/* TSF as indicated by the firmware is at INA time */
77fe7395 SS	465	rx_status->flag \|= RX_FLAG_MACTIME_PLCP_START;
780e87c2 JB	466
	467	rcu_read_lock();
	468
	469	if (le16_to_cpu(desc->status) & IWL_RX_MPDU_STATUS_SRC_STA_FOUND) {
	470	u8 id = desc->sta_id_flags & IWL_RX_MPDU_SIF_STA_ID_MASK;
	471
	472	if (!WARN_ON_ONCE(id >= IWL_MVM_STATION_COUNT)) {
	473	sta = rcu_dereference(mvm->fw_id_to_mac_id[id]);
	474	if (IS_ERR(sta))
	475	sta = NULL;
	476	}
	477	} else if (!is_multicast_ether_addr(hdr->addr2)) {
	478	/*
	479	* This is fine since we prevent two stations with the same
	480	* address from being added.
	481	*/
	482	sta = ieee80211_find_sta_by_ifaddr(mvm->hw, hdr->addr2, NULL);
	483	}
	484
	485	if (sta) {
	486	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
	487
	488	/*
	489	* We have tx blocked stations (with CS bit). If we heard
	490	* frames from a blocked station on a new channel we can
	491	* TX to it again.
	492	*/
	493	if (unlikely(mvm->csa_tx_block_bcn_timeout))
	494	iwl_mvm_sta_modify_disable_tx_ap(mvm, sta, false);
	495
	496	rs_update_last_rssi(mvm, &mvmsta->lq_sta, rx_status);
	497
	498	if (iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_RSSI) &&
	499	ieee80211_is_beacon(hdr->frame_control)) {
	500	struct iwl_fw_dbg_trigger_tlv *trig;
	501	struct iwl_fw_dbg_trigger_low_rssi *rssi_trig;
	502	bool trig_check;
	503	s32 rssi;
	504
	505	trig = iwl_fw_dbg_get_trigger(mvm->fw,
	506	FW_DBG_TRIGGER_RSSI);
	507	rssi_trig = (void *)trig->data;
	508	rssi = le32_to_cpu(rssi_trig->rssi);
	509
	510	trig_check =
	511	iwl_fw_dbg_trigger_check_stop(mvm, mvmsta->vif,
	512	trig);
	513	if (trig_check && rx_status->signal < rssi)
	514	iwl_mvm_fw_dbg_collect_trig(mvm, trig, NULL);
	515	}
	516
	517	/* TODO: multi queue TCM */
	518
	519	if (ieee80211_is_data(hdr->frame_control))
	520	iwl_mvm_rx_csum(sta, skb, desc);
a571f5f6 SS	521
	522	if (iwl_mvm_is_nonagg_dup(sta, queue, rx_status, hdr, desc)) {
	523	kfree_skb(skb);
	524	rcu_read_unlock();
	525	return;
	526	}
62d23403 SS	527
	528	/*
	529	* Our hardware de-aggregates AMSDUs but copies the mac header
	530	* as it to the de-aggregated MPDUs. We need to turn off the
	531	* AMSDU bit in the QoS control ourselves.
	532	*/
	533	if ((desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU) &&
	534	!WARN_ON(!ieee80211_is_data_qos(hdr->frame_control))) {
	535	u8 *qc = ieee80211_get_qos_ctl(hdr);
	536
	537	*qc &= ~IEEE80211_QOS_CTL_A_MSDU_PRESENT;
	538	}
780e87c2 JB	539	}
780e87c2 JB	540
780e87c2 JB	541	/*
	542	* TODO: PHY info.
	543	* Verify we don't have the information in the MPDU descriptor and
	544	* that it is not needed.
	545	* Make sure for monitor mode that we are on default queue, update
	546	* ampdu_ref and the rest of phy info then
	547	*/
	548
	549	/* Set up the HT phy flags */
	550	switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) {
	551	case RATE_MCS_CHAN_WIDTH_20:
	552	break;
	553	case RATE_MCS_CHAN_WIDTH_40:
	554	rx_status->flag \|= RX_FLAG_40MHZ;
	555	break;
	556	case RATE_MCS_CHAN_WIDTH_80:
	557	rx_status->vht_flag \|= RX_VHT_FLAG_80MHZ;
	558	break;
	559	case RATE_MCS_CHAN_WIDTH_160:
	560	rx_status->vht_flag \|= RX_VHT_FLAG_160MHZ;
	561	break;
	562	}
	563	if (rate_n_flags & RATE_MCS_SGI_MSK)
	564	rx_status->flag \|= RX_FLAG_SHORT_GI;
	565	if (rate_n_flags & RATE_HT_MCS_GF_MSK)
	566	rx_status->flag \|= RX_FLAG_HT_GF;
	567	if (rate_n_flags & RATE_MCS_LDPC_MSK)
	568	rx_status->flag \|= RX_FLAG_LDPC;
	569	if (rate_n_flags & RATE_MCS_HT_MSK) {
	570	u8 stbc = (rate_n_flags & RATE_MCS_HT_STBC_MSK) >>
	571	RATE_MCS_STBC_POS;
	572	rx_status->flag \|= RX_FLAG_HT;
	573	rx_status->rate_idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK;
	574	rx_status->flag \|= stbc << RX_FLAG_STBC_SHIFT;
	575	} else if (rate_n_flags & RATE_MCS_VHT_MSK) {
	576	u8 stbc = (rate_n_flags & RATE_MCS_VHT_STBC_MSK) >>
	577	RATE_MCS_STBC_POS;
	578	rx_status->vht_nss =
	579	((rate_n_flags & RATE_VHT_MCS_NSS_MSK) >>
	580	RATE_VHT_MCS_NSS_POS) + 1;
	581	rx_status->rate_idx = rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK;
	582	rx_status->flag \|= RX_FLAG_VHT;
	583	rx_status->flag \|= stbc << RX_FLAG_STBC_SHIFT;
	584	if (rate_n_flags & RATE_MCS_BF_MSK)
	585	rx_status->vht_flag \|= RX_VHT_FLAG_BF;
	586	} else {
	587	rx_status->rate_idx =
	588	iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags,
	589	rx_status->band);
	590	}
	591
	592	/* TODO: PHY info - update ampdu queue statistics (for debugfs) */
	593	/* TODO: PHY info - gscan */
	594
f5e28eac JB	595	iwl_mvm_create_skb(skb, hdr, len, crypt_len, rxb);
	596	iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, queue, sta);
	597	rcu_read_unlock();
780e87c2	598	}
585a6fcc SS	599
	600	void iwl_mvm_rx_frame_release(struct iwl_mvm *mvm,
	601	struct iwl_rx_cmd_buffer *rxb, int queue)
	602	{
	603	/* TODO */
	604	}