drivers/net/wireless/iwlwifi/iwl-agn-sta.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2012 Intel Corporation. All rights reserved.
   4  *
   5  * Portions of this file are derived from the ipw3945 project, as well
   6  * as portions of the ieee80211 subsystem header files.
   7  *
   8  * This program is free software; you can redistribute it and/or modify it
   9  * under the terms of version 2 of the GNU General Public License as
  10  * published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but WITHOUT
  13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  15  * more details.
  16  *
  17  * You should have received a copy of the GNU General Public License along with
  18  * this program; if not, write to the Free Software Foundation, Inc.,
  19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  20  *
  21  * The full GNU General Public License is included in this distribution in the
  22  * file called LICENSE.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/etherdevice.h>
  30 #include <net/mac80211.h>
  31
  32 #include "iwl-dev.h"
  33 #include "iwl-core.h"
  34 #include "iwl-agn.h"
  35 #include "iwl-trans.h"
  36
  37 static int iwl_sta_ucode_activate(struct iwl_priv *priv, u8 sta_id)
  38 {
  39         lockdep_assert_held(&priv->sta_lock);
  40
  41         if (sta_id >= IWLAGN_STATION_COUNT) {
  42                 IWL_ERR(priv, "invalid sta_id %u", sta_id);
  43                 return -EINVAL;
  44         }
  45         if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE))
  46                 IWL_ERR(priv, "ACTIVATE a non DRIVER active station id %u "
  47                         "addr %pM\n",
  48                         sta_id, priv->stations[sta_id].sta.sta.addr);
  49
  50         if (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) {
  51                 IWL_DEBUG_ASSOC(priv,
  52                                 "STA id %u addr %pM already present in uCode "
  53                                 "(according to driver)\n",
  54                                 sta_id, priv->stations[sta_id].sta.sta.addr);
  55         } else {
  56                 priv->stations[sta_id].used |= IWL_STA_UCODE_ACTIVE;
  57                 IWL_DEBUG_ASSOC(priv, "Added STA id %u addr %pM to uCode\n",
  58                                 sta_id, priv->stations[sta_id].sta.sta.addr);
  59         }
  60         return 0;
  61 }
  62
  63 static int iwl_process_add_sta_resp(struct iwl_priv *priv,
  64                                     struct iwl_addsta_cmd *addsta,
  65                                     struct iwl_rx_packet *pkt)
  66 {
  67         struct iwl_add_sta_resp *add_sta_resp = (void *)pkt->data;
  68         u8 sta_id = addsta->sta.sta_id;
  69         int ret = -EIO;
  70
  71         if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) {
  72                 IWL_ERR(priv, "Bad return from REPLY_ADD_STA (0x%08X)\n",
  73                         pkt->hdr.flags);
  74                 return ret;
  75         }
  76
  77         IWL_DEBUG_INFO(priv, "Processing response for adding station %u\n",
  78                        sta_id);
  79
  80         spin_lock(&priv->sta_lock);
  81
  82         switch (add_sta_resp->status) {
  83         case ADD_STA_SUCCESS_MSK:
  84                 IWL_DEBUG_INFO(priv, "REPLY_ADD_STA PASSED\n");
  85                 ret = iwl_sta_ucode_activate(priv, sta_id);
  86                 break;
  87         case ADD_STA_NO_ROOM_IN_TABLE:
  88                 IWL_ERR(priv, "Adding station %d failed, no room in table.\n",
  89                         sta_id);
  90                 break;
  91         case ADD_STA_NO_BLOCK_ACK_RESOURCE:
  92                 IWL_ERR(priv, "Adding station %d failed, no block ack "
  93                         "resource.\n", sta_id);
  94                 break;
  95         case ADD_STA_MODIFY_NON_EXIST_STA:
  96                 IWL_ERR(priv, "Attempting to modify non-existing station %d\n",
  97                         sta_id);
  98                 break;
  99         default:
 100                 IWL_DEBUG_ASSOC(priv, "Received REPLY_ADD_STA:(0x%08X)\n",
 101                                 add_sta_resp->status);
 102                 break;
 103         }
 104
 105         IWL_DEBUG_INFO(priv, "%s station id %u addr %pM\n",
 106                        priv->stations[sta_id].sta.mode ==
 107                        STA_CONTROL_MODIFY_MSK ?  "Modified" : "Added",
 108                        sta_id, priv->stations[sta_id].sta.sta.addr);
 109
 110         /*
 111          * XXX: The MAC address in the command buffer is often changed from
 112          * the original sent to the device. That is, the MAC address
 113          * written to the command buffer often is not the same MAC address
 114          * read from the command buffer when the command returns. This
 115          * issue has not yet been resolved and this debugging is left to
 116          * observe the problem.
 117          */
 118         IWL_DEBUG_INFO(priv, "%s station according to cmd buffer %pM\n",
 119                        priv->stations[sta_id].sta.mode ==
 120                        STA_CONTROL_MODIFY_MSK ? "Modified" : "Added",
 121                        addsta->sta.addr);
 122         spin_unlock(&priv->sta_lock);
 123
 124         return ret;
 125 }
 126
 127 int iwl_add_sta_callback(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb,
 128                                struct iwl_device_cmd *cmd)
 129 {
 130         struct iwl_rx_packet *pkt = rxb_addr(rxb);
 131         struct iwl_addsta_cmd *addsta =
 132                 (struct iwl_addsta_cmd *) cmd->payload;
 133
 134         return iwl_process_add_sta_resp(priv, addsta, pkt);
 135 }
 136
 137 int iwl_send_add_sta(struct iwl_priv *priv,
 138                      struct iwl_addsta_cmd *sta, u8 flags)
 139 {
 140         int ret = 0;
 141         struct iwl_host_cmd cmd = {
 142                 .id = REPLY_ADD_STA,
 143                 .flags = flags,
 144                 .data = { sta, },
 145                 .len = { sizeof(*sta), },
 146         };
 147         u8 sta_id __maybe_unused = sta->sta.sta_id;
 148
 149         IWL_DEBUG_INFO(priv, "Adding sta %u (%pM) %ssynchronously\n",
 150                        sta_id, sta->sta.addr, flags & CMD_ASYNC ?  "a" : "");
 151
 152         if (!(flags & CMD_ASYNC)) {
 153                 cmd.flags |= CMD_WANT_SKB;
 154                 might_sleep();
 155         }
 156
 157         ret = iwl_dvm_send_cmd(priv, &cmd);
 158
 159         if (ret || (flags & CMD_ASYNC))
 160                 return ret;
 161         /*else the command was successfully sent in SYNC mode, need to free
 162          * the reply page */
 163
 164         iwl_free_resp(&cmd);
 165
 166         if (cmd.handler_status)
 167                 IWL_ERR(priv, "%s - error in the CMD response %d", __func__,
 168                         cmd.handler_status);
 169
 170         return cmd.handler_status;
 171 }
 172
 173 static void iwl_sta_calc_ht_flags(struct iwl_priv *priv,
 174                                   struct ieee80211_sta *sta,
 175                                   struct iwl_rxon_context *ctx,
 176                                   __le32 *flags, __le32 *mask)
 177 {
 178         struct ieee80211_sta_ht_cap *sta_ht_inf = &sta->ht_cap;
 179         u8 mimo_ps_mode;
 180
 181         *mask = STA_FLG_RTS_MIMO_PROT_MSK |
 182                 STA_FLG_MIMO_DIS_MSK |
 183                 STA_FLG_HT40_EN_MSK |
 184                 STA_FLG_MAX_AGG_SIZE_MSK |
 185                 STA_FLG_AGG_MPDU_DENSITY_MSK;
 186         *flags = 0;
 187
 188         if (!sta || !sta_ht_inf->ht_supported)
 189                 return;
 190
 191         mimo_ps_mode = (sta_ht_inf->cap & IEEE80211_HT_CAP_SM_PS) >> 2;
 192
 193         IWL_DEBUG_INFO(priv, "STA %pM SM PS mode: %s\n",
 194                         (mimo_ps_mode == WLAN_HT_CAP_SM_PS_STATIC) ?
 195                         "static" :
 196                         (mimo_ps_mode == WLAN_HT_CAP_SM_PS_DYNAMIC) ?
 197                         "dynamic" : "disabled");
 198
 199         switch (mimo_ps_mode) {
 200         case WLAN_HT_CAP_SM_PS_STATIC:
 201                 *flags |= STA_FLG_MIMO_DIS_MSK;
 202                 break;
 203         case WLAN_HT_CAP_SM_PS_DYNAMIC:
 204                 *flags |= STA_FLG_RTS_MIMO_PROT_MSK;
 205                 break;
 206         case WLAN_HT_CAP_SM_PS_DISABLED:
 207                 break;
 208         default:
 209                 IWL_WARN(priv, "Invalid MIMO PS mode %d\n", mimo_ps_mode);
 210                 break;
 211         }
 212
 213         *flags |= cpu_to_le32(
 214                 (u32)sta_ht_inf->ampdu_factor << STA_FLG_MAX_AGG_SIZE_POS);
 215
 216         *flags |= cpu_to_le32(
 217                 (u32)sta_ht_inf->ampdu_density << STA_FLG_AGG_MPDU_DENSITY_POS);
 218
 219         if (iwl_is_ht40_tx_allowed(priv, ctx, &sta->ht_cap))
 220                 *flags |= STA_FLG_HT40_EN_MSK;
 221 }
 222
 223 int iwl_sta_update_ht(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 224                       struct ieee80211_sta *sta)
 225 {
 226         u8 sta_id = iwl_sta_id(sta);
 227         __le32 flags, mask;
 228         struct iwl_addsta_cmd cmd;
 229
 230         if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION))
 231                 return -EINVAL;
 232
 233         iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask);
 234
 235         spin_lock_bh(&priv->sta_lock);
 236         priv->stations[sta_id].sta.station_flags &= ~mask;
 237         priv->stations[sta_id].sta.station_flags |= flags;
 238         spin_unlock_bh(&priv->sta_lock);
 239
 240         memset(&cmd, 0, sizeof(cmd));
 241         cmd.mode = STA_CONTROL_MODIFY_MSK;
 242         cmd.station_flags_msk = mask;
 243         cmd.station_flags = flags;
 244         cmd.sta.sta_id = sta_id;
 245
 246         return iwl_send_add_sta(priv, &cmd, CMD_SYNC);
 247 }
 248
 249 static void iwl_set_ht_add_station(struct iwl_priv *priv, u8 index,
 250                                    struct ieee80211_sta *sta,
 251                                    struct iwl_rxon_context *ctx)
 252 {
 253         __le32 flags, mask;
 254
 255         iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask);
 256
 257         lockdep_assert_held(&priv->sta_lock);
 258         priv->stations[index].sta.station_flags &= ~mask;
 259         priv->stations[index].sta.station_flags |= flags;
 260 }
 261
 262 /**
 263  * iwl_prep_station - Prepare station information for addition
 264  *
 265  * should be called with sta_lock held
 266  */
 267 u8 iwl_prep_station(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 268                     const u8 *addr, bool is_ap, struct ieee80211_sta *sta)
 269 {
 270         struct iwl_station_entry *station;
 271         int i;
 272         u8 sta_id = IWL_INVALID_STATION;
 273
 274         if (is_ap)
 275                 sta_id = ctx->ap_sta_id;
 276         else if (is_broadcast_ether_addr(addr))
 277                 sta_id = ctx->bcast_sta_id;
 278         else
 279                 for (i = IWL_STA_ID; i < IWLAGN_STATION_COUNT; i++) {
 280                         if (!compare_ether_addr(priv->stations[i].sta.sta.addr,
 281                                                 addr)) {
 282                                 sta_id = i;
 283                                 break;
 284                         }
 285
 286                         if (!priv->stations[i].used &&
 287                             sta_id == IWL_INVALID_STATION)
 288                                 sta_id = i;
 289                 }
 290
 291         /*
 292          * These two conditions have the same outcome, but keep them
 293          * separate
 294          */
 295         if (unlikely(sta_id == IWL_INVALID_STATION))
 296                 return sta_id;
 297
 298         /*
 299          * uCode is not able to deal with multiple requests to add a
 300          * station. Keep track if one is in progress so that we do not send
 301          * another.
 302          */
 303         if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
 304                 IWL_DEBUG_INFO(priv, "STA %d already in process of being "
 305                                "added.\n", sta_id);
 306                 return sta_id;
 307         }
 308
 309         if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
 310             (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) &&
 311             !compare_ether_addr(priv->stations[sta_id].sta.sta.addr, addr)) {
 312                 IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not "
 313                                 "adding again.\n", sta_id, addr);
 314                 return sta_id;
 315         }
 316
 317         station = &priv->stations[sta_id];
 318         station->used = IWL_STA_DRIVER_ACTIVE;
 319         IWL_DEBUG_ASSOC(priv, "Add STA to driver ID %d: %pM\n",
 320                         sta_id, addr);
 321         priv->num_stations++;
 322
 323         /* Set up the REPLY_ADD_STA command to send to device */
 324         memset(&station->sta, 0, sizeof(struct iwl_addsta_cmd));
 325         memcpy(station->sta.sta.addr, addr, ETH_ALEN);
 326         station->sta.mode = 0;
 327         station->sta.sta.sta_id = sta_id;
 328         station->sta.station_flags = ctx->station_flags;
 329         station->ctxid = ctx->ctxid;
 330
 331         if (sta) {
 332                 struct iwl_station_priv *sta_priv;
 333
 334                 sta_priv = (void *)sta->drv_priv;
 335                 sta_priv->ctx = ctx;
 336         }
 337
 338         /*
 339          * OK to call unconditionally, since local stations (IBSS BSSID
 340          * STA and broadcast STA) pass in a NULL sta, and mac80211
 341          * doesn't allow HT IBSS.
 342          */
 343         iwl_set_ht_add_station(priv, sta_id, sta, ctx);
 344
 345         return sta_id;
 346
 347 }
 348
 349 #define STA_WAIT_TIMEOUT (HZ/2)
 350
 351 /**
 352  * iwl_add_station_common -
 353  */
 354 int iwl_add_station_common(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 355                            const u8 *addr, bool is_ap,
 356                            struct ieee80211_sta *sta, u8 *sta_id_r)
 357 {
 358         int ret = 0;
 359         u8 sta_id;
 360         struct iwl_addsta_cmd sta_cmd;
 361
 362         *sta_id_r = 0;
 363         spin_lock_bh(&priv->sta_lock);
 364         sta_id = iwl_prep_station(priv, ctx, addr, is_ap, sta);
 365         if (sta_id == IWL_INVALID_STATION) {
 366                 IWL_ERR(priv, "Unable to prepare station %pM for addition\n",
 367                         addr);
 368                 spin_unlock_bh(&priv->sta_lock);
 369                 return -EINVAL;
 370         }
 371
 372         /*
 373          * uCode is not able to deal with multiple requests to add a
 374          * station. Keep track if one is in progress so that we do not send
 375          * another.
 376          */
 377         if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
 378                 IWL_DEBUG_INFO(priv, "STA %d already in process of being "
 379                                "added.\n", sta_id);
 380                 spin_unlock_bh(&priv->sta_lock);
 381                 return -EEXIST;
 382         }
 383
 384         if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
 385             (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
 386                 IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not "
 387                                 "adding again.\n", sta_id, addr);
 388                 spin_unlock_bh(&priv->sta_lock);
 389                 return -EEXIST;
 390         }
 391
 392         priv->stations[sta_id].used |= IWL_STA_UCODE_INPROGRESS;
 393         memcpy(&sta_cmd, &priv->stations[sta_id].sta,
 394                sizeof(struct iwl_addsta_cmd));
 395         spin_unlock_bh(&priv->sta_lock);
 396
 397         /* Add station to device's station table */
 398         ret = iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
 399         if (ret) {
 400                 spin_lock_bh(&priv->sta_lock);
 401                 IWL_ERR(priv, "Adding station %pM failed.\n",
 402                         priv->stations[sta_id].sta.sta.addr);
 403                 priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 404                 priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
 405                 spin_unlock_bh(&priv->sta_lock);
 406         }
 407         *sta_id_r = sta_id;
 408         return ret;
 409 }
 410
 411 /**
 412  * iwl_sta_ucode_deactivate - deactivate ucode status for a station
 413  */
 414 static void iwl_sta_ucode_deactivate(struct iwl_priv *priv, u8 sta_id)
 415 {
 416         lockdep_assert_held(&priv->sta_lock);
 417
 418         /* Ucode must be active and driver must be non active */
 419         if ((priv->stations[sta_id].used &
 420              (IWL_STA_UCODE_ACTIVE | IWL_STA_DRIVER_ACTIVE)) !=
 421               IWL_STA_UCODE_ACTIVE)
 422                 IWL_ERR(priv, "removed non active STA %u\n", sta_id);
 423
 424         priv->stations[sta_id].used &= ~IWL_STA_UCODE_ACTIVE;
 425
 426         memset(&priv->stations[sta_id], 0, sizeof(struct iwl_station_entry));
 427         IWL_DEBUG_ASSOC(priv, "Removed STA %u\n", sta_id);
 428 }
 429
 430 static int iwl_send_remove_station(struct iwl_priv *priv,
 431                                    const u8 *addr, int sta_id,
 432                                    bool temporary)
 433 {
 434         struct iwl_rx_packet *pkt;
 435         int ret;
 436         struct iwl_rem_sta_cmd rm_sta_cmd;
 437
 438         struct iwl_host_cmd cmd = {
 439                 .id = REPLY_REMOVE_STA,
 440                 .len = { sizeof(struct iwl_rem_sta_cmd), },
 441                 .flags = CMD_SYNC,
 442                 .data = { &rm_sta_cmd, },
 443         };
 444
 445         memset(&rm_sta_cmd, 0, sizeof(rm_sta_cmd));
 446         rm_sta_cmd.num_sta = 1;
 447         memcpy(&rm_sta_cmd.addr, addr, ETH_ALEN);
 448
 449         cmd.flags |= CMD_WANT_SKB;
 450
 451         ret = iwl_dvm_send_cmd(priv, &cmd);
 452
 453         if (ret)
 454                 return ret;
 455
 456         pkt = cmd.resp_pkt;
 457         if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) {
 458                 IWL_ERR(priv, "Bad return from REPLY_REMOVE_STA (0x%08X)\n",
 459                           pkt->hdr.flags);
 460                 ret = -EIO;
 461         }
 462
 463         if (!ret) {
 464                 struct iwl_rem_sta_resp *rem_sta_resp = (void *)pkt->data;
 465                 switch (rem_sta_resp->status) {
 466                 case REM_STA_SUCCESS_MSK:
 467                         if (!temporary) {
 468                                 spin_lock_bh(&priv->sta_lock);
 469                                 iwl_sta_ucode_deactivate(priv, sta_id);
 470                                 spin_unlock_bh(&priv->sta_lock);
 471                         }
 472                         IWL_DEBUG_ASSOC(priv, "REPLY_REMOVE_STA PASSED\n");
 473                         break;
 474                 default:
 475                         ret = -EIO;
 476                         IWL_ERR(priv, "REPLY_REMOVE_STA failed\n");
 477                         break;
 478                 }
 479         }
 480         iwl_free_resp(&cmd);
 481
 482         return ret;
 483 }
 484
 485 /**
 486  * iwl_remove_station - Remove driver's knowledge of station.
 487  */
 488 int iwl_remove_station(struct iwl_priv *priv, const u8 sta_id,
 489                        const u8 *addr)
 490 {
 491         u8 tid;
 492
 493         if (!iwl_is_ready(priv)) {
 494                 IWL_DEBUG_INFO(priv,
 495                         "Unable to remove station %pM, device not ready.\n",
 496                         addr);
 497                 /*
 498                  * It is typical for stations to be removed when we are
 499                  * going down. Return success since device will be down
 500                  * soon anyway
 501                  */
 502                 return 0;
 503         }
 504
 505         IWL_DEBUG_ASSOC(priv, "Removing STA from driver:%d  %pM\n",
 506                         sta_id, addr);
 507
 508         if (WARN_ON(sta_id == IWL_INVALID_STATION))
 509                 return -EINVAL;
 510
 511         spin_lock_bh(&priv->sta_lock);
 512
 513         if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)) {
 514                 IWL_DEBUG_INFO(priv, "Removing %pM but non DRIVER active\n",
 515                                 addr);
 516                 goto out_err;
 517         }
 518
 519         if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
 520                 IWL_DEBUG_INFO(priv, "Removing %pM but non UCODE active\n",
 521                                 addr);
 522                 goto out_err;
 523         }
 524
 525         if (priv->stations[sta_id].used & IWL_STA_LOCAL) {
 526                 kfree(priv->stations[sta_id].lq);
 527                 priv->stations[sta_id].lq = NULL;
 528         }
 529
 530         for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++)
 531                 memset(&priv->tid_data[sta_id][tid], 0,
 532                         sizeof(priv->tid_data[sta_id][tid]));
 533
 534         priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 535
 536         priv->num_stations--;
 537
 538         if (WARN_ON(priv->num_stations < 0))
 539                 priv->num_stations = 0;
 540
 541         spin_unlock_bh(&priv->sta_lock);
 542
 543         return iwl_send_remove_station(priv, addr, sta_id, false);
 544 out_err:
 545         spin_unlock_bh(&priv->sta_lock);
 546         return -EINVAL;
 547 }
 548
 549 void iwl_deactivate_station(struct iwl_priv *priv, const u8 sta_id,
 550                             const u8 *addr)
 551 {
 552         u8 tid;
 553
 554         if (!iwl_is_ready(priv)) {
 555                 IWL_DEBUG_INFO(priv,
 556                         "Unable to remove station %pM, device not ready.\n",
 557                         addr);
 558                 return;
 559         }
 560
 561         IWL_DEBUG_ASSOC(priv, "Deactivating STA: %pM (%d)\n", addr, sta_id);
 562
 563         if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION))
 564                 return;
 565
 566         spin_lock_bh(&priv->sta_lock);
 567
 568         WARN_ON_ONCE(!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE));
 569
 570         for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++)
 571                 memset(&priv->tid_data[sta_id][tid], 0,
 572                         sizeof(priv->tid_data[sta_id][tid]));
 573
 574         priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 575
 576         priv->num_stations--;
 577
 578         if (WARN_ON_ONCE(priv->num_stations < 0))
 579                 priv->num_stations = 0;
 580
 581         spin_unlock_bh(&priv->sta_lock);
 582 }
 583
 584 /**
 585  * iwl_clear_ucode_stations - clear ucode station table bits
 586  *
 587  * This function clears all the bits in the driver indicating
 588  * which stations are active in the ucode. Call when something
 589  * other than explicit station management would cause this in
 590  * the ucode, e.g. unassociated RXON.
 591  */
 592 void iwl_clear_ucode_stations(struct iwl_priv *priv,
 593                               struct iwl_rxon_context *ctx)
 594 {
 595         int i;
 596         bool cleared = false;
 597
 598         IWL_DEBUG_INFO(priv, "Clearing ucode stations in driver\n");
 599
 600         spin_lock_bh(&priv->sta_lock);
 601         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 602                 if (ctx && ctx->ctxid != priv->stations[i].ctxid)
 603                         continue;
 604
 605                 if (priv->stations[i].used & IWL_STA_UCODE_ACTIVE) {
 606                         IWL_DEBUG_INFO(priv,
 607                                 "Clearing ucode active for station %d\n", i);
 608                         priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE;
 609                         cleared = true;
 610                 }
 611         }
 612         spin_unlock_bh(&priv->sta_lock);
 613
 614         if (!cleared)
 615                 IWL_DEBUG_INFO(priv,
 616                                "No active stations found to be cleared\n");
 617 }
 618
 619 /**
 620  * iwl_restore_stations() - Restore driver known stations to device
 621  *
 622  * All stations considered active by driver, but not present in ucode, is
 623  * restored.
 624  *
 625  * Function sleeps.
 626  */
 627 void iwl_restore_stations(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
 628 {
 629         struct iwl_addsta_cmd sta_cmd;
 630         struct iwl_link_quality_cmd lq;
 631         int i;
 632         bool found = false;
 633         int ret;
 634         bool send_lq;
 635
 636         if (!iwl_is_ready(priv)) {
 637                 IWL_DEBUG_INFO(priv,
 638                                "Not ready yet, not restoring any stations.\n");
 639                 return;
 640         }
 641
 642         IWL_DEBUG_ASSOC(priv, "Restoring all known stations ... start.\n");
 643         spin_lock_bh(&priv->sta_lock);
 644         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 645                 if (ctx->ctxid != priv->stations[i].ctxid)
 646                         continue;
 647                 if ((priv->stations[i].used & IWL_STA_DRIVER_ACTIVE) &&
 648                             !(priv->stations[i].used & IWL_STA_UCODE_ACTIVE)) {
 649                         IWL_DEBUG_ASSOC(priv, "Restoring sta %pM\n",
 650                                         priv->stations[i].sta.sta.addr);
 651                         priv->stations[i].sta.mode = 0;
 652                         priv->stations[i].used |= IWL_STA_UCODE_INPROGRESS;
 653                         found = true;
 654                 }
 655         }
 656
 657         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 658                 if ((priv->stations[i].used & IWL_STA_UCODE_INPROGRESS)) {
 659                         memcpy(&sta_cmd, &priv->stations[i].sta,
 660                                sizeof(struct iwl_addsta_cmd));
 661                         send_lq = false;
 662                         if (priv->stations[i].lq) {
 663                                 if (priv->wowlan)
 664                                         iwl_sta_fill_lq(priv, ctx, i, &lq);
 665                                 else
 666                                         memcpy(&lq, priv->stations[i].lq,
 667                                                sizeof(struct iwl_link_quality_cmd));
 668                                 send_lq = true;
 669                         }
 670                         spin_unlock_bh(&priv->sta_lock);
 671                         ret = iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
 672                         if (ret) {
 673                                 spin_lock_bh(&priv->sta_lock);
 674                                 IWL_ERR(priv, "Adding station %pM failed.\n",
 675                                         priv->stations[i].sta.sta.addr);
 676                                 priv->stations[i].used &=
 677                                                 ~IWL_STA_DRIVER_ACTIVE;
 678                                 priv->stations[i].used &=
 679                                                 ~IWL_STA_UCODE_INPROGRESS;
 680                                 spin_unlock_bh(&priv->sta_lock);
 681                         }
 682                         /*
 683                          * Rate scaling has already been initialized, send
 684                          * current LQ command
 685                          */
 686                         if (send_lq)
 687                                 iwl_send_lq_cmd(priv, ctx, &lq,
 688                                                 CMD_SYNC, true);
 689                         spin_lock_bh(&priv->sta_lock);
 690                         priv->stations[i].used &= ~IWL_STA_UCODE_INPROGRESS;
 691                 }
 692         }
 693
 694         spin_unlock_bh(&priv->sta_lock);
 695         if (!found)
 696                 IWL_DEBUG_INFO(priv, "Restoring all known stations .... "
 697                         "no stations to be restored.\n");
 698         else
 699                 IWL_DEBUG_INFO(priv, "Restoring all known stations .... "
 700                         "complete.\n");
 701 }
 702
 703 int iwl_get_free_ucode_key_offset(struct iwl_priv *priv)
 704 {
 705         int i;
 706
 707         for (i = 0; i < priv->sta_key_max_num; i++)
 708                 if (!test_and_set_bit(i, &priv->ucode_key_table))
 709                         return i;
 710
 711         return WEP_INVALID_OFFSET;
 712 }
 713
 714 void iwl_dealloc_bcast_stations(struct iwl_priv *priv)
 715 {
 716         int i;
 717
 718         spin_lock_bh(&priv->sta_lock);
 719         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 720                 if (!(priv->stations[i].used & IWL_STA_BCAST))
 721                         continue;
 722
 723                 priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE;
 724                 priv->num_stations--;
 725                 if (WARN_ON(priv->num_stations < 0))
 726                         priv->num_stations = 0;
 727                 kfree(priv->stations[i].lq);
 728                 priv->stations[i].lq = NULL;
 729         }
 730         spin_unlock_bh(&priv->sta_lock);
 731 }
 732
 733 #ifdef CONFIG_IWLWIFI_DEBUG
 734 static void iwl_dump_lq_cmd(struct iwl_priv *priv,
 735                            struct iwl_link_quality_cmd *lq)
 736 {
 737         int i;
 738         IWL_DEBUG_RATE(priv, "lq station id 0x%x\n", lq->sta_id);
 739         IWL_DEBUG_RATE(priv, "lq ant 0x%X 0x%X\n",
 740                        lq->general_params.single_stream_ant_msk,
 741                        lq->general_params.dual_stream_ant_msk);
 742
 743         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++)
 744                 IWL_DEBUG_RATE(priv, "lq index %d 0x%X\n",
 745                                i, lq->rs_table[i].rate_n_flags);
 746 }
 747 #else
 748 static inline void iwl_dump_lq_cmd(struct iwl_priv *priv,
 749                                    struct iwl_link_quality_cmd *lq)
 750 {
 751 }
 752 #endif
 753
 754 /**
 755  * is_lq_table_valid() - Test one aspect of LQ cmd for validity
 756  *
 757  * It sometimes happens when a HT rate has been in use and we
 758  * loose connectivity with AP then mac80211 will first tell us that the
 759  * current channel is not HT anymore before removing the station. In such a
 760  * scenario the RXON flags will be updated to indicate we are not
 761  * communicating HT anymore, but the LQ command may still contain HT rates.
 762  * Test for this to prevent driver from sending LQ command between the time
 763  * RXON flags are updated and when LQ command is updated.
 764  */
 765 static bool is_lq_table_valid(struct iwl_priv *priv,
 766                               struct iwl_rxon_context *ctx,
 767                               struct iwl_link_quality_cmd *lq)
 768 {
 769         int i;
 770
 771         if (ctx->ht.enabled)
 772                 return true;
 773
 774         IWL_DEBUG_INFO(priv, "Channel %u is not an HT channel\n",
 775                        ctx->active.channel);
 776         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) {
 777                 if (le32_to_cpu(lq->rs_table[i].rate_n_flags) &
 778                     RATE_MCS_HT_MSK) {
 779                         IWL_DEBUG_INFO(priv,
 780                                        "index %d of LQ expects HT channel\n",
 781                                        i);
 782                         return false;
 783                 }
 784         }
 785         return true;
 786 }
 787
 788 /**
 789  * iwl_send_lq_cmd() - Send link quality command
 790  * @init: This command is sent as part of station initialization right
 791  *        after station has been added.
 792  *
 793  * The link quality command is sent as the last step of station creation.
 794  * This is the special case in which init is set and we call a callback in
 795  * this case to clear the state indicating that station creation is in
 796  * progress.
 797  */
 798 int iwl_send_lq_cmd(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 799                     struct iwl_link_quality_cmd *lq, u8 flags, bool init)
 800 {
 801         int ret = 0;
 802         struct iwl_host_cmd cmd = {
 803                 .id = REPLY_TX_LINK_QUALITY_CMD,
 804                 .len = { sizeof(struct iwl_link_quality_cmd), },
 805                 .flags = flags,
 806                 .data = { lq, },
 807         };
 808
 809         if (WARN_ON(lq->sta_id == IWL_INVALID_STATION))
 810                 return -EINVAL;
 811
 812
 813         spin_lock_bh(&priv->sta_lock);
 814         if (!(priv->stations[lq->sta_id].used & IWL_STA_DRIVER_ACTIVE)) {
 815                 spin_unlock_bh(&priv->sta_lock);
 816                 return -EINVAL;
 817         }
 818         spin_unlock_bh(&priv->sta_lock);
 819
 820         iwl_dump_lq_cmd(priv, lq);
 821         if (WARN_ON(init && (cmd.flags & CMD_ASYNC)))
 822                 return -EINVAL;
 823
 824         if (is_lq_table_valid(priv, ctx, lq))
 825                 ret = iwl_dvm_send_cmd(priv, &cmd);
 826         else
 827                 ret = -EINVAL;
 828
 829         if (cmd.flags & CMD_ASYNC)
 830                 return ret;
 831
 832         if (init) {
 833                 IWL_DEBUG_INFO(priv, "init LQ command complete, "
 834                                "clearing sta addition status for sta %d\n",
 835                                lq->sta_id);
 836                 spin_lock_bh(&priv->sta_lock);
 837                 priv->stations[lq->sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
 838                 spin_unlock_bh(&priv->sta_lock);
 839         }
 840         return ret;
 841 }
 842
 843
 844 void iwl_sta_fill_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 845                      u8 sta_id, struct iwl_link_quality_cmd *link_cmd)
 846 {
 847         int i, r;
 848         u32 rate_flags = 0;
 849         __le32 rate_n_flags;
 850
 851         lockdep_assert_held(&priv->mutex);
 852
 853         memset(link_cmd, 0, sizeof(*link_cmd));
 854
 855         /* Set up the rate scaling to start at selected rate, fall back
 856          * all the way down to 1M in IEEE order, and then spin on 1M */
 857         if (priv->band == IEEE80211_BAND_5GHZ)
 858                 r = IWL_RATE_6M_INDEX;
 859         else if (ctx && ctx->vif && ctx->vif->p2p)
 860                 r = IWL_RATE_6M_INDEX;
 861         else
 862                 r = IWL_RATE_1M_INDEX;
 863
 864         if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE)
 865                 rate_flags |= RATE_MCS_CCK_MSK;
 866
 867         rate_flags |= first_antenna(hw_params(priv).valid_tx_ant) <<
 868                                 RATE_MCS_ANT_POS;
 869         rate_n_flags = iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags);
 870         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++)
 871                 link_cmd->rs_table[i].rate_n_flags = rate_n_flags;
 872
 873         link_cmd->general_params.single_stream_ant_msk =
 874                         first_antenna(hw_params(priv).valid_tx_ant);
 875
 876         link_cmd->general_params.dual_stream_ant_msk =
 877                 hw_params(priv).valid_tx_ant &
 878                 ~first_antenna(hw_params(priv).valid_tx_ant);
 879         if (!link_cmd->general_params.dual_stream_ant_msk) {
 880                 link_cmd->general_params.dual_stream_ant_msk = ANT_AB;
 881         } else if (num_of_ant(hw_params(priv).valid_tx_ant) == 2) {
 882                 link_cmd->general_params.dual_stream_ant_msk =
 883                         hw_params(priv).valid_tx_ant;
 884         }
 885
 886         link_cmd->agg_params.agg_dis_start_th =
 887                 LINK_QUAL_AGG_DISABLE_START_DEF;
 888         link_cmd->agg_params.agg_time_limit =
 889                 cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF);
 890
 891         link_cmd->sta_id = sta_id;
 892 }
 893
 894 static struct iwl_link_quality_cmd *
 895 iwl_sta_alloc_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 896                  u8 sta_id)
 897 {
 898         struct iwl_link_quality_cmd *link_cmd;
 899
 900         link_cmd = kzalloc(sizeof(struct iwl_link_quality_cmd), GFP_KERNEL);
 901         if (!link_cmd) {
 902                 IWL_ERR(priv, "Unable to allocate memory for LQ cmd.\n");
 903                 return NULL;
 904         }
 905
 906         iwl_sta_fill_lq(priv, ctx, sta_id, link_cmd);
 907
 908         return link_cmd;
 909 }
 910
 911 /*
 912  * iwlagn_add_bssid_station - Add the special IBSS BSSID station
 913  *
 914  * Function sleeps.
 915  */
 916 int iwlagn_add_bssid_station(struct iwl_priv *priv,
 917                              struct iwl_rxon_context *ctx,
 918                              const u8 *addr, u8 *sta_id_r)
 919 {
 920         int ret;
 921         u8 sta_id;
 922         struct iwl_link_quality_cmd *link_cmd;
 923
 924         if (sta_id_r)
 925                 *sta_id_r = IWL_INVALID_STATION;
 926
 927         ret = iwl_add_station_common(priv, ctx, addr, 0, NULL, &sta_id);
 928         if (ret) {
 929                 IWL_ERR(priv, "Unable to add station %pM\n", addr);
 930                 return ret;
 931         }
 932
 933         if (sta_id_r)
 934                 *sta_id_r = sta_id;
 935
 936         spin_lock_bh(&priv->sta_lock);
 937         priv->stations[sta_id].used |= IWL_STA_LOCAL;
 938         spin_unlock_bh(&priv->sta_lock);
 939
 940         /* Set up default rate scaling table in device's station table */
 941         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
 942         if (!link_cmd) {
 943                 IWL_ERR(priv,
 944                         "Unable to initialize rate scaling for station %pM.\n",
 945                         addr);
 946                 return -ENOMEM;
 947         }
 948
 949         ret = iwl_send_lq_cmd(priv, ctx, link_cmd, CMD_SYNC, true);
 950         if (ret)
 951                 IWL_ERR(priv, "Link quality command failed (%d)\n", ret);
 952
 953         spin_lock_bh(&priv->sta_lock);
 954         priv->stations[sta_id].lq = link_cmd;
 955         spin_unlock_bh(&priv->sta_lock);
 956
 957         return 0;
 958 }
 959
 960 /*
 961  * static WEP keys
 962  *
 963  * For each context, the device has a table of 4 static WEP keys
 964  * (one for each key index) that is updated with the following
 965  * commands.
 966  */
 967
 968 static int iwl_send_static_wepkey_cmd(struct iwl_priv *priv,
 969                                       struct iwl_rxon_context *ctx,
 970                                       bool send_if_empty)
 971 {
 972         int i, not_empty = 0;
 973         u8 buff[sizeof(struct iwl_wep_cmd) +
 974                 sizeof(struct iwl_wep_key) * WEP_KEYS_MAX];
 975         struct iwl_wep_cmd *wep_cmd = (struct iwl_wep_cmd *)buff;
 976         size_t cmd_size  = sizeof(struct iwl_wep_cmd);
 977         struct iwl_host_cmd cmd = {
 978                 .id = ctx->wep_key_cmd,
 979                 .data = { wep_cmd, },
 980                 .flags = CMD_SYNC,
 981         };
 982
 983         might_sleep();
 984
 985         memset(wep_cmd, 0, cmd_size +
 986                         (sizeof(struct iwl_wep_key) * WEP_KEYS_MAX));
 987
 988         for (i = 0; i < WEP_KEYS_MAX ; i++) {
 989                 wep_cmd->key[i].key_index = i;
 990                 if (ctx->wep_keys[i].key_size) {
 991                         wep_cmd->key[i].key_offset = i;
 992                         not_empty = 1;
 993                 } else {
 994                         wep_cmd->key[i].key_offset = WEP_INVALID_OFFSET;
 995                 }
 996
 997                 wep_cmd->key[i].key_size = ctx->wep_keys[i].key_size;
 998                 memcpy(&wep_cmd->key[i].key[3], ctx->wep_keys[i].key,
 999                                 ctx->wep_keys[i].key_size);
1000         }
1001
1002         wep_cmd->global_key_type = WEP_KEY_WEP_TYPE;
1003         wep_cmd->num_keys = WEP_KEYS_MAX;
1004
1005         cmd_size += sizeof(struct iwl_wep_key) * WEP_KEYS_MAX;
1006
1007         cmd.len[0] = cmd_size;
1008
1009         if (not_empty || send_if_empty)
1010                 return iwl_dvm_send_cmd(priv, &cmd);
1011         else
1012                 return 0;
1013 }
1014
1015 int iwl_restore_default_wep_keys(struct iwl_priv *priv,
1016                                  struct iwl_rxon_context *ctx)
1017 {
1018         lockdep_assert_held(&priv->mutex);
1019
1020         return iwl_send_static_wepkey_cmd(priv, ctx, false);
1021 }
1022
1023 int iwl_remove_default_wep_key(struct iwl_priv *priv,
1024                                struct iwl_rxon_context *ctx,
1025                                struct ieee80211_key_conf *keyconf)
1026 {
1027         int ret;
1028
1029         lockdep_assert_held(&priv->mutex);
1030
1031         IWL_DEBUG_WEP(priv, "Removing default WEP key: idx=%d\n",
1032                       keyconf->keyidx);
1033
1034         memset(&ctx->wep_keys[keyconf->keyidx], 0, sizeof(ctx->wep_keys[0]));
1035         if (iwl_is_rfkill(priv)) {
1036                 IWL_DEBUG_WEP(priv,
1037                         "Not sending REPLY_WEPKEY command due to RFKILL.\n");
1038                 /* but keys in device are clear anyway so return success */
1039                 return 0;
1040         }
1041         ret = iwl_send_static_wepkey_cmd(priv, ctx, 1);
1042         IWL_DEBUG_WEP(priv, "Remove default WEP key: idx=%d ret=%d\n",
1043                       keyconf->keyidx, ret);
1044
1045         return ret;
1046 }
1047
1048 int iwl_set_default_wep_key(struct iwl_priv *priv,
1049                             struct iwl_rxon_context *ctx,
1050                             struct ieee80211_key_conf *keyconf)
1051 {
1052         int ret;
1053
1054         lockdep_assert_held(&priv->mutex);
1055
1056         if (keyconf->keylen != WEP_KEY_LEN_128 &&
1057             keyconf->keylen != WEP_KEY_LEN_64) {
1058                 IWL_DEBUG_WEP(priv,
1059                               "Bad WEP key length %d\n", keyconf->keylen);
1060                 return -EINVAL;
1061         }
1062
1063         keyconf->hw_key_idx = IWLAGN_HW_KEY_DEFAULT;
1064
1065         ctx->wep_keys[keyconf->keyidx].key_size = keyconf->keylen;
1066         memcpy(&ctx->wep_keys[keyconf->keyidx].key, &keyconf->key,
1067                                                         keyconf->keylen);
1068
1069         ret = iwl_send_static_wepkey_cmd(priv, ctx, false);
1070         IWL_DEBUG_WEP(priv, "Set default WEP key: len=%d idx=%d ret=%d\n",
1071                 keyconf->keylen, keyconf->keyidx, ret);
1072
1073         return ret;
1074 }
1075
1076 /*
1077  * dynamic (per-station) keys
1078  *
1079  * The dynamic keys are a little more complicated. The device has
1080  * a key cache of up to STA_KEY_MAX_NUM/STA_KEY_MAX_NUM_PAN keys.
1081  * These are linked to stations by a table that contains an index
1082  * into the key table for each station/key index/{mcast,unicast},
1083  * i.e. it's basically an array of pointers like this:
1084  *      key_offset_t key_mapping[NUM_STATIONS][4][2];
1085  * (it really works differently, but you can think of it as such)
1086  *
1087  * The key uploading and linking happens in the same command, the
1088  * add station command with STA_MODIFY_KEY_MASK.
1089  */
1090
1091 static u8 iwlagn_key_sta_id(struct iwl_priv *priv,
1092                             struct ieee80211_vif *vif,
1093                             struct ieee80211_sta *sta)
1094 {
1095         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1096
1097         if (sta)
1098                 return iwl_sta_id(sta);
1099
1100         /*
1101          * The device expects GTKs for station interfaces to be
1102          * installed as GTKs for the AP station. If we have no
1103          * station ID, then use the ap_sta_id in that case.
1104          */
1105         if (vif->type == NL80211_IFTYPE_STATION && vif_priv->ctx)
1106                 return vif_priv->ctx->ap_sta_id;
1107
1108         return IWL_INVALID_STATION;
1109 }
1110
1111 static int iwlagn_send_sta_key(struct iwl_priv *priv,
1112                                struct ieee80211_key_conf *keyconf,
1113                                u8 sta_id, u32 tkip_iv32, u16 *tkip_p1k,
1114                                u32 cmd_flags)
1115 {
1116         __le16 key_flags;
1117         struct iwl_addsta_cmd sta_cmd;
1118         int i;
1119
1120         spin_lock_bh(&priv->sta_lock);
1121         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd));
1122         spin_unlock_bh(&priv->sta_lock);
1123
1124         key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS);
1125         key_flags |= STA_KEY_FLG_MAP_KEY_MSK;
1126
1127         switch (keyconf->cipher) {
1128         case WLAN_CIPHER_SUITE_CCMP:
1129                 key_flags |= STA_KEY_FLG_CCMP;
1130                 memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen);
1131                 break;
1132         case WLAN_CIPHER_SUITE_TKIP:
1133                 key_flags |= STA_KEY_FLG_TKIP;
1134                 sta_cmd.key.tkip_rx_tsc_byte2 = tkip_iv32;
1135                 for (i = 0; i < 5; i++)
1136                         sta_cmd.key.tkip_rx_ttak[i] = cpu_to_le16(tkip_p1k[i]);
1137                 memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen);
1138                 break;
1139         case WLAN_CIPHER_SUITE_WEP104:
1140                 key_flags |= STA_KEY_FLG_KEY_SIZE_MSK;
1141                 /* fall through */
1142         case WLAN_CIPHER_SUITE_WEP40:
1143                 key_flags |= STA_KEY_FLG_WEP;
1144                 memcpy(&sta_cmd.key.key[3], keyconf->key, keyconf->keylen);
1145                 break;
1146         default:
1147                 WARN_ON(1);
1148                 return -EINVAL;
1149         }
1150
1151         if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE))
1152                 key_flags |= STA_KEY_MULTICAST_MSK;
1153
1154         /* key pointer (offset) */
1155         sta_cmd.key.key_offset = keyconf->hw_key_idx;
1156
1157         sta_cmd.key.key_flags = key_flags;
1158         sta_cmd.mode = STA_CONTROL_MODIFY_MSK;
1159         sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK;
1160
1161         return iwl_send_add_sta(priv, &sta_cmd, cmd_flags);
1162 }
1163
1164 void iwl_update_tkip_key(struct iwl_priv *priv,
1165                          struct ieee80211_vif *vif,
1166                          struct ieee80211_key_conf *keyconf,
1167                          struct ieee80211_sta *sta, u32 iv32, u16 *phase1key)
1168 {
1169         u8 sta_id = iwlagn_key_sta_id(priv, vif, sta);
1170
1171         if (sta_id == IWL_INVALID_STATION)
1172                 return;
1173
1174         if (iwl_scan_cancel(priv)) {
1175                 /* cancel scan failed, just live w/ bad key and rely
1176                    briefly on SW decryption */
1177                 return;
1178         }
1179
1180         iwlagn_send_sta_key(priv, keyconf, sta_id,
1181                             iv32, phase1key, CMD_ASYNC);
1182 }
1183
1184 int iwl_remove_dynamic_key(struct iwl_priv *priv,
1185                            struct iwl_rxon_context *ctx,
1186                            struct ieee80211_key_conf *keyconf,
1187                            struct ieee80211_sta *sta)
1188 {
1189         struct iwl_addsta_cmd sta_cmd;
1190         u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta);
1191         __le16 key_flags;
1192
1193         /* if station isn't there, neither is the key */
1194         if (sta_id == IWL_INVALID_STATION)
1195                 return -ENOENT;
1196
1197         spin_lock_bh(&priv->sta_lock);
1198         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd));
1199         if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE))
1200                 sta_id = IWL_INVALID_STATION;
1201         spin_unlock_bh(&priv->sta_lock);
1202
1203         if (sta_id == IWL_INVALID_STATION)
1204                 return 0;
1205
1206         lockdep_assert_held(&priv->mutex);
1207
1208         ctx->key_mapping_keys--;
1209
1210         IWL_DEBUG_WEP(priv, "Remove dynamic key: idx=%d sta=%d\n",
1211                       keyconf->keyidx, sta_id);
1212
1213         if (!test_and_clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table))
1214                 IWL_ERR(priv, "offset %d not used in uCode key table.\n",
1215                         keyconf->hw_key_idx);
1216
1217         key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS);
1218         key_flags |= STA_KEY_FLG_MAP_KEY_MSK | STA_KEY_FLG_NO_ENC |
1219                      STA_KEY_FLG_INVALID;
1220
1221         if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE))
1222                 key_flags |= STA_KEY_MULTICAST_MSK;
1223
1224         sta_cmd.key.key_flags = key_flags;
1225         sta_cmd.key.key_offset = WEP_INVALID_OFFSET;
1226         sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK;
1227         sta_cmd.mode = STA_CONTROL_MODIFY_MSK;
1228
1229         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1230 }
1231
1232 int iwl_set_dynamic_key(struct iwl_priv *priv,
1233                         struct iwl_rxon_context *ctx,
1234                         struct ieee80211_key_conf *keyconf,
1235                         struct ieee80211_sta *sta)
1236 {
1237         struct ieee80211_key_seq seq;
1238         u16 p1k[5];
1239         int ret;
1240         u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta);
1241         const u8 *addr;
1242
1243         if (sta_id == IWL_INVALID_STATION)
1244                 return -EINVAL;
1245
1246         lockdep_assert_held(&priv->mutex);
1247
1248         keyconf->hw_key_idx = iwl_get_free_ucode_key_offset(priv);
1249         if (keyconf->hw_key_idx == WEP_INVALID_OFFSET)
1250                 return -ENOSPC;
1251
1252         ctx->key_mapping_keys++;
1253
1254         switch (keyconf->cipher) {
1255         case WLAN_CIPHER_SUITE_TKIP:
1256                 if (sta)
1257                         addr = sta->addr;
1258                 else /* station mode case only */
1259                         addr = ctx->active.bssid_addr;
1260
1261                 /* pre-fill phase 1 key into device cache */
1262                 ieee80211_get_key_rx_seq(keyconf, 0, &seq);
1263                 ieee80211_get_tkip_rx_p1k(keyconf, addr, seq.tkip.iv32, p1k);
1264                 ret = iwlagn_send_sta_key(priv, keyconf, sta_id,
1265                                           seq.tkip.iv32, p1k, CMD_SYNC);
1266                 break;
1267         case WLAN_CIPHER_SUITE_CCMP:
1268         case WLAN_CIPHER_SUITE_WEP40:
1269         case WLAN_CIPHER_SUITE_WEP104:
1270                 ret = iwlagn_send_sta_key(priv, keyconf, sta_id,
1271                                           0, NULL, CMD_SYNC);
1272                 break;
1273         default:
1274                 IWL_ERR(priv, "Unknown cipher %x\n", keyconf->cipher);
1275                 ret = -EINVAL;
1276         }
1277
1278         if (ret) {
1279                 ctx->key_mapping_keys--;
1280                 clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table);
1281         }
1282
1283         IWL_DEBUG_WEP(priv, "Set dynamic key: cipher=%x len=%d idx=%d sta=%pM ret=%d\n",
1284                       keyconf->cipher, keyconf->keylen, keyconf->keyidx,
1285                       sta ? sta->addr : NULL, ret);
1286
1287         return ret;
1288 }
1289
1290 /**
1291  * iwlagn_alloc_bcast_station - add broadcast station into driver's station table.
1292  *
1293  * This adds the broadcast station into the driver's station table
1294  * and marks it driver active, so that it will be restored to the
1295  * device at the next best time.
1296  */
1297 int iwlagn_alloc_bcast_station(struct iwl_priv *priv,
1298                                struct iwl_rxon_context *ctx)
1299 {
1300         struct iwl_link_quality_cmd *link_cmd;
1301         u8 sta_id;
1302
1303         spin_lock_bh(&priv->sta_lock);
1304         sta_id = iwl_prep_station(priv, ctx, iwl_bcast_addr, false, NULL);
1305         if (sta_id == IWL_INVALID_STATION) {
1306                 IWL_ERR(priv, "Unable to prepare broadcast station\n");
1307                 spin_unlock_bh(&priv->sta_lock);
1308
1309                 return -EINVAL;
1310         }
1311
1312         priv->stations[sta_id].used |= IWL_STA_DRIVER_ACTIVE;
1313         priv->stations[sta_id].used |= IWL_STA_BCAST;
1314         spin_unlock_bh(&priv->sta_lock);
1315
1316         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
1317         if (!link_cmd) {
1318                 IWL_ERR(priv,
1319                         "Unable to initialize rate scaling for bcast station.\n");
1320                 return -ENOMEM;
1321         }
1322
1323         spin_lock_bh(&priv->sta_lock);
1324         priv->stations[sta_id].lq = link_cmd;
1325         spin_unlock_bh(&priv->sta_lock);
1326
1327         return 0;
1328 }
1329
1330 /**
1331  * iwl_update_bcast_station - update broadcast station's LQ command
1332  *
1333  * Only used by iwlagn. Placed here to have all bcast station management
1334  * code together.
1335  */
1336 int iwl_update_bcast_station(struct iwl_priv *priv,
1337                              struct iwl_rxon_context *ctx)
1338 {
1339         struct iwl_link_quality_cmd *link_cmd;
1340         u8 sta_id = ctx->bcast_sta_id;
1341
1342         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
1343         if (!link_cmd) {
1344                 IWL_ERR(priv, "Unable to initialize rate scaling for bcast station.\n");
1345                 return -ENOMEM;
1346         }
1347
1348         spin_lock_bh(&priv->sta_lock);
1349         if (priv->stations[sta_id].lq)
1350                 kfree(priv->stations[sta_id].lq);
1351         else
1352                 IWL_DEBUG_INFO(priv, "Bcast station rate scaling has not been initialized yet.\n");
1353         priv->stations[sta_id].lq = link_cmd;
1354         spin_unlock_bh(&priv->sta_lock);
1355
1356         return 0;
1357 }
1358
1359 int iwl_update_bcast_stations(struct iwl_priv *priv)
1360 {
1361         struct iwl_rxon_context *ctx;
1362         int ret = 0;
1363
1364         for_each_context(priv, ctx) {
1365                 ret = iwl_update_bcast_station(priv, ctx);
1366                 if (ret)
1367                         break;
1368         }
1369
1370         return ret;
1371 }
1372
1373 /**
1374  * iwl_sta_tx_modify_enable_tid - Enable Tx for this TID in station table
1375  */
1376 int iwl_sta_tx_modify_enable_tid(struct iwl_priv *priv, int sta_id, int tid)
1377 {
1378         struct iwl_addsta_cmd sta_cmd;
1379
1380         lockdep_assert_held(&priv->mutex);
1381
1382         /* Remove "disable" flag, to enable Tx for this TID */
1383         spin_lock_bh(&priv->sta_lock);
1384         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_TID_DISABLE_TX;
1385         priv->stations[sta_id].sta.tid_disable_tx &= cpu_to_le16(~(1 << tid));
1386         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1387         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1388         spin_unlock_bh(&priv->sta_lock);
1389
1390         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1391 }
1392
1393 int iwl_sta_rx_agg_start(struct iwl_priv *priv, struct ieee80211_sta *sta,
1394                          int tid, u16 ssn)
1395 {
1396         int sta_id;
1397         struct iwl_addsta_cmd sta_cmd;
1398
1399         lockdep_assert_held(&priv->mutex);
1400
1401         sta_id = iwl_sta_id(sta);
1402         if (sta_id == IWL_INVALID_STATION)
1403                 return -ENXIO;
1404
1405         spin_lock_bh(&priv->sta_lock);
1406         priv->stations[sta_id].sta.station_flags_msk = 0;
1407         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_ADDBA_TID_MSK;
1408         priv->stations[sta_id].sta.add_immediate_ba_tid = (u8)tid;
1409         priv->stations[sta_id].sta.add_immediate_ba_ssn = cpu_to_le16(ssn);
1410         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1411         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1412         spin_unlock_bh(&priv->sta_lock);
1413
1414         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1415 }
1416
1417 int iwl_sta_rx_agg_stop(struct iwl_priv *priv, struct ieee80211_sta *sta,
1418                         int tid)
1419 {
1420         int sta_id;
1421         struct iwl_addsta_cmd sta_cmd;
1422
1423         lockdep_assert_held(&priv->mutex);
1424
1425         sta_id = iwl_sta_id(sta);
1426         if (sta_id == IWL_INVALID_STATION) {
1427                 IWL_ERR(priv, "Invalid station for AGG tid %d\n", tid);
1428                 return -ENXIO;
1429         }
1430
1431         spin_lock_bh(&priv->sta_lock);
1432         priv->stations[sta_id].sta.station_flags_msk = 0;
1433         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_DELBA_TID_MSK;
1434         priv->stations[sta_id].sta.remove_immediate_ba_tid = (u8)tid;
1435         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1436         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1437         spin_unlock_bh(&priv->sta_lock);
1438
1439         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1440 }
1441
1442
1443
1444 void iwl_sta_modify_sleep_tx_count(struct iwl_priv *priv, int sta_id, int cnt)
1445 {
1446         struct iwl_addsta_cmd cmd = {
1447                 .mode = STA_CONTROL_MODIFY_MSK,
1448                 .station_flags = STA_FLG_PWR_SAVE_MSK,
1449                 .station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1450                 .sta.sta_id = sta_id,
1451                 .sta.modify_mask = STA_MODIFY_SLEEP_TX_COUNT_MSK,
1452                 .sleep_tx_count = cpu_to_le16(cnt),
1453         };
1454
1455         iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1456 }