2 * Copyright 2002-2005, Instant802 Networks, Inc.
3 * Copyright 2005-2006, Devicescape Software, Inc.
4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <net/mac80211.h>
12 #include <net/ieee80211_radiotap.h>
13 #include <linux/module.h>
14 #include <linux/init.h>
15 #include <linux/netdevice.h>
16 #include <linux/types.h>
17 #include <linux/slab.h>
18 #include <linux/skbuff.h>
19 #include <linux/etherdevice.h>
20 #include <linux/if_arp.h>
21 #include <linux/wireless.h>
22 #include <linux/rtnetlink.h>
23 #include <linux/bitmap.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
27 #include "ieee80211_i.h"
36 #include "debugfs_netdev.h"
39 * For seeing transmitted packets on monitor interfaces
40 * we have a radiotap header too.
42 struct ieee80211_tx_status_rtap_hdr
{
43 struct ieee80211_radiotap_header hdr
;
46 } __attribute__ ((packed
));
48 /* common interface routines */
50 static int header_parse_80211(const struct sk_buff
*skb
, unsigned char *haddr
)
52 memcpy(haddr
, skb_mac_header(skb
) + 10, ETH_ALEN
); /* addr2 */
56 /* must be called under mdev tx lock */
57 static void ieee80211_configure_filter(struct ieee80211_local
*local
)
59 unsigned int changed_flags
;
60 unsigned int new_flags
= 0;
62 if (atomic_read(&local
->iff_promiscs
))
63 new_flags
|= FIF_PROMISC_IN_BSS
;
65 if (atomic_read(&local
->iff_allmultis
))
66 new_flags
|= FIF_ALLMULTI
;
69 new_flags
|= FIF_BCN_PRBRESP_PROMISC
;
71 if (local
->fif_fcsfail
)
72 new_flags
|= FIF_FCSFAIL
;
74 if (local
->fif_plcpfail
)
75 new_flags
|= FIF_PLCPFAIL
;
77 if (local
->fif_control
)
78 new_flags
|= FIF_CONTROL
;
80 if (local
->fif_other_bss
)
81 new_flags
|= FIF_OTHER_BSS
;
83 changed_flags
= local
->filter_flags
^ new_flags
;
88 local
->ops
->configure_filter(local_to_hw(local
),
89 changed_flags
, &new_flags
,
90 local
->mdev
->mc_count
,
91 local
->mdev
->mc_list
);
93 WARN_ON(new_flags
& (1<<31));
95 local
->filter_flags
= new_flags
& ~(1<<31);
98 /* master interface */
100 static int ieee80211_master_open(struct net_device
*dev
)
102 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
103 struct ieee80211_sub_if_data
*sdata
;
104 int res
= -EOPNOTSUPP
;
106 /* we hold the RTNL here so can safely walk the list */
107 list_for_each_entry(sdata
, &local
->interfaces
, list
) {
108 if (netif_running(sdata
->dev
)) {
117 netif_tx_start_all_queues(local
->mdev
);
122 static int ieee80211_master_stop(struct net_device
*dev
)
124 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
125 struct ieee80211_sub_if_data
*sdata
;
127 /* we hold the RTNL here so can safely walk the list */
128 list_for_each_entry(sdata
, &local
->interfaces
, list
)
129 if (netif_running(sdata
->dev
))
130 dev_close(sdata
->dev
);
135 static void ieee80211_master_set_multicast_list(struct net_device
*dev
)
137 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
139 ieee80211_configure_filter(local
);
142 /* regular interfaces */
144 static int ieee80211_change_mtu(struct net_device
*dev
, int new_mtu
)
147 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
149 meshhdrlen
= (sdata
->vif
.type
== IEEE80211_IF_TYPE_MESH_POINT
) ? 5 : 0;
151 /* FIX: what would be proper limits for MTU?
152 * This interface uses 802.3 frames. */
154 new_mtu
> IEEE80211_MAX_DATA_LEN
- 24 - 6 - meshhdrlen
) {
158 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
159 printk(KERN_DEBUG
"%s: setting MTU %d\n", dev
->name
, new_mtu
);
160 #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
165 static inline int identical_mac_addr_allowed(int type1
, int type2
)
167 return (type1
== IEEE80211_IF_TYPE_MNTR
||
168 type2
== IEEE80211_IF_TYPE_MNTR
||
169 (type1
== IEEE80211_IF_TYPE_AP
&&
170 type2
== IEEE80211_IF_TYPE_WDS
) ||
171 (type1
== IEEE80211_IF_TYPE_WDS
&&
172 (type2
== IEEE80211_IF_TYPE_WDS
||
173 type2
== IEEE80211_IF_TYPE_AP
)) ||
174 (type1
== IEEE80211_IF_TYPE_AP
&&
175 type2
== IEEE80211_IF_TYPE_VLAN
) ||
176 (type1
== IEEE80211_IF_TYPE_VLAN
&&
177 (type2
== IEEE80211_IF_TYPE_AP
||
178 type2
== IEEE80211_IF_TYPE_VLAN
)));
181 static int ieee80211_open(struct net_device
*dev
)
183 struct ieee80211_sub_if_data
*sdata
, *nsdata
;
184 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
185 struct sta_info
*sta
;
186 struct ieee80211_if_init_conf conf
;
189 bool need_hw_reconfig
= 0;
190 u8 null_addr
[ETH_ALEN
] = {0};
192 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
194 /* fail early if user set an invalid address */
195 if (compare_ether_addr(dev
->dev_addr
, null_addr
) &&
196 !is_valid_ether_addr(dev
->dev_addr
))
197 return -EADDRNOTAVAIL
;
199 /* we hold the RTNL here so can safely walk the list */
200 list_for_each_entry(nsdata
, &local
->interfaces
, list
) {
201 struct net_device
*ndev
= nsdata
->dev
;
203 if (ndev
!= dev
&& netif_running(ndev
)) {
205 * Allow only a single IBSS interface to be up at any
206 * time. This is restricted because beacon distribution
207 * cannot work properly if both are in the same IBSS.
209 * To remove this restriction we'd have to disallow them
210 * from setting the same SSID on different IBSS interfaces
211 * belonging to the same hardware. Then, however, we're
212 * faced with having to adopt two different TSF timers...
214 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
&&
215 nsdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
)
219 * The remaining checks are only performed for interfaces
220 * with the same MAC address.
222 if (compare_ether_addr(dev
->dev_addr
, ndev
->dev_addr
))
226 * check whether it may have the same address
228 if (!identical_mac_addr_allowed(sdata
->vif
.type
,
233 * can only add VLANs to enabled APs
235 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_VLAN
&&
236 nsdata
->vif
.type
== IEEE80211_IF_TYPE_AP
)
237 sdata
->bss
= &nsdata
->u
.ap
;
241 switch (sdata
->vif
.type
) {
242 case IEEE80211_IF_TYPE_WDS
:
243 if (!is_valid_ether_addr(sdata
->u
.wds
.remote_addr
))
246 case IEEE80211_IF_TYPE_VLAN
:
249 list_add(&sdata
->u
.vlan
.list
, &sdata
->bss
->vlans
);
251 case IEEE80211_IF_TYPE_AP
:
252 sdata
->bss
= &sdata
->u
.ap
;
254 case IEEE80211_IF_TYPE_MESH_POINT
:
255 /* mesh ifaces must set allmulti to forward mcast traffic */
256 atomic_inc(&local
->iff_allmultis
);
258 case IEEE80211_IF_TYPE_STA
:
259 case IEEE80211_IF_TYPE_MNTR
:
260 case IEEE80211_IF_TYPE_IBSS
:
261 /* no special treatment */
263 case IEEE80211_IF_TYPE_INVALID
:
269 if (local
->open_count
== 0) {
271 if (local
->ops
->start
)
272 res
= local
->ops
->start(local_to_hw(local
));
275 need_hw_reconfig
= 1;
276 ieee80211_led_radio(local
, local
->hw
.conf
.radio_enabled
);
280 * Check all interfaces and copy the hopefully now-present
281 * MAC address to those that have the special null one.
283 list_for_each_entry(nsdata
, &local
->interfaces
, list
) {
284 struct net_device
*ndev
= nsdata
->dev
;
287 * No need to check netif_running since we do not allow
288 * it to start up with this invalid address.
290 if (compare_ether_addr(null_addr
, ndev
->dev_addr
) == 0)
291 memcpy(ndev
->dev_addr
,
292 local
->hw
.wiphy
->perm_addr
,
296 if (compare_ether_addr(null_addr
, local
->mdev
->dev_addr
) == 0)
297 memcpy(local
->mdev
->dev_addr
, local
->hw
.wiphy
->perm_addr
,
301 * Validate the MAC address for this device.
303 if (!is_valid_ether_addr(dev
->dev_addr
)) {
304 if (!local
->open_count
&& local
->ops
->stop
)
305 local
->ops
->stop(local_to_hw(local
));
306 return -EADDRNOTAVAIL
;
309 switch (sdata
->vif
.type
) {
310 case IEEE80211_IF_TYPE_VLAN
:
311 /* no need to tell driver */
313 case IEEE80211_IF_TYPE_MNTR
:
314 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_COOK_FRAMES
) {
315 local
->cooked_mntrs
++;
319 /* must be before the call to ieee80211_configure_filter */
321 if (local
->monitors
== 1)
322 local
->hw
.conf
.flags
|= IEEE80211_CONF_RADIOTAP
;
324 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_FCSFAIL
)
325 local
->fif_fcsfail
++;
326 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_PLCPFAIL
)
327 local
->fif_plcpfail
++;
328 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_CONTROL
)
329 local
->fif_control
++;
330 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_OTHER_BSS
)
331 local
->fif_other_bss
++;
333 netif_addr_lock_bh(local
->mdev
);
334 ieee80211_configure_filter(local
);
335 netif_addr_unlock_bh(local
->mdev
);
337 case IEEE80211_IF_TYPE_STA
:
338 case IEEE80211_IF_TYPE_IBSS
:
339 sdata
->u
.sta
.flags
&= ~IEEE80211_STA_PREV_BSSID_SET
;
342 conf
.vif
= &sdata
->vif
;
343 conf
.type
= sdata
->vif
.type
;
344 conf
.mac_addr
= dev
->dev_addr
;
345 res
= local
->ops
->add_interface(local_to_hw(local
), &conf
);
349 if (ieee80211_vif_is_mesh(&sdata
->vif
))
350 ieee80211_start_mesh(sdata
);
351 changed
|= ieee80211_reset_erp_info(sdata
);
352 ieee80211_bss_info_change_notify(sdata
, changed
);
353 ieee80211_enable_keys(sdata
);
355 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
&&
356 !(sdata
->flags
& IEEE80211_SDATA_USERSPACE_MLME
))
357 netif_carrier_off(dev
);
359 netif_carrier_on(dev
);
362 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_WDS
) {
363 /* Create STA entry for the WDS peer */
364 sta
= sta_info_alloc(sdata
, sdata
->u
.wds
.remote_addr
,
368 goto err_del_interface
;
371 /* no locking required since STA is not live yet */
372 sta
->flags
|= WLAN_STA_AUTHORIZED
;
374 res
= sta_info_insert(sta
);
376 /* STA has been freed */
377 goto err_del_interface
;
381 if (local
->open_count
== 0) {
382 res
= dev_open(local
->mdev
);
385 goto err_del_interface
;
386 tasklet_enable(&local
->tx_pending_tasklet
);
387 tasklet_enable(&local
->tasklet
);
391 * set_multicast_list will be invoked by the networking core
392 * which will check whether any increments here were done in
393 * error and sync them down to the hardware as filter flags.
395 if (sdata
->flags
& IEEE80211_SDATA_ALLMULTI
)
396 atomic_inc(&local
->iff_allmultis
);
398 if (sdata
->flags
& IEEE80211_SDATA_PROMISC
)
399 atomic_inc(&local
->iff_promiscs
);
402 if (need_hw_reconfig
)
403 ieee80211_hw_config(local
);
406 * ieee80211_sta_work is disabled while network interface
407 * is down. Therefore, some configuration changes may not
408 * yet be effective. Trigger execution of ieee80211_sta_work
411 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
||
412 sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
) {
413 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
414 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
417 netif_tx_start_all_queues(dev
);
421 local
->ops
->remove_interface(local_to_hw(local
), &conf
);
423 if (!local
->open_count
&& local
->ops
->stop
)
424 local
->ops
->stop(local_to_hw(local
));
427 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_VLAN
)
428 list_del(&sdata
->u
.vlan
.list
);
432 static int ieee80211_stop(struct net_device
*dev
)
434 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
435 struct ieee80211_local
*local
= sdata
->local
;
436 struct ieee80211_if_init_conf conf
;
437 struct sta_info
*sta
;
440 * Stop TX on this interface first.
442 netif_tx_stop_all_queues(dev
);
445 * Now delete all active aggregation sessions.
449 list_for_each_entry_rcu(sta
, &local
->sta_list
, list
) {
450 if (sta
->sdata
== sdata
)
451 ieee80211_sta_tear_down_BA_sessions(sdata
, sta
->addr
);
457 * Remove all stations associated with this interface.
459 * This must be done before calling ops->remove_interface()
460 * because otherwise we can later invoke ops->sta_notify()
461 * whenever the STAs are removed, and that invalidates driver
462 * assumptions about always getting a vif pointer that is valid
463 * (because if we remove a STA after ops->remove_interface()
464 * the driver will have removed the vif info already!)
466 * We could relax this and only unlink the stations from the
467 * hash table and list but keep them on a per-sdata list that
468 * will be inserted back again when the interface is brought
469 * up again, but I don't currently see a use case for that,
470 * except with WDS which gets a STA entry created when it is
473 sta_info_flush(local
, sdata
);
476 * Don't count this interface for promisc/allmulti while it
477 * is down. dev_mc_unsync() will invoke set_multicast_list
478 * on the master interface which will sync these down to the
479 * hardware as filter flags.
481 if (sdata
->flags
& IEEE80211_SDATA_ALLMULTI
)
482 atomic_dec(&local
->iff_allmultis
);
484 if (sdata
->flags
& IEEE80211_SDATA_PROMISC
)
485 atomic_dec(&local
->iff_promiscs
);
487 dev_mc_unsync(local
->mdev
, dev
);
489 /* APs need special treatment */
490 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_AP
) {
491 struct ieee80211_sub_if_data
*vlan
, *tmp
;
492 struct beacon_data
*old_beacon
= sdata
->u
.ap
.beacon
;
495 rcu_assign_pointer(sdata
->u
.ap
.beacon
, NULL
);
499 /* down all dependent devices, that is VLANs */
500 list_for_each_entry_safe(vlan
, tmp
, &sdata
->u
.ap
.vlans
,
502 dev_close(vlan
->dev
);
503 WARN_ON(!list_empty(&sdata
->u
.ap
.vlans
));
508 switch (sdata
->vif
.type
) {
509 case IEEE80211_IF_TYPE_VLAN
:
510 list_del(&sdata
->u
.vlan
.list
);
511 /* no need to tell driver */
513 case IEEE80211_IF_TYPE_MNTR
:
514 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_COOK_FRAMES
) {
515 local
->cooked_mntrs
--;
520 if (local
->monitors
== 0)
521 local
->hw
.conf
.flags
&= ~IEEE80211_CONF_RADIOTAP
;
523 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_FCSFAIL
)
524 local
->fif_fcsfail
--;
525 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_PLCPFAIL
)
526 local
->fif_plcpfail
--;
527 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_CONTROL
)
528 local
->fif_control
--;
529 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_OTHER_BSS
)
530 local
->fif_other_bss
--;
532 netif_addr_lock_bh(local
->mdev
);
533 ieee80211_configure_filter(local
);
534 netif_addr_unlock_bh(local
->mdev
);
536 case IEEE80211_IF_TYPE_MESH_POINT
:
537 /* allmulti is always set on mesh ifaces */
538 atomic_dec(&local
->iff_allmultis
);
540 case IEEE80211_IF_TYPE_STA
:
541 case IEEE80211_IF_TYPE_IBSS
:
542 sdata
->u
.sta
.state
= IEEE80211_DISABLED
;
543 memset(sdata
->u
.sta
.bssid
, 0, ETH_ALEN
);
544 del_timer_sync(&sdata
->u
.sta
.timer
);
546 * When we get here, the interface is marked down.
547 * Call synchronize_rcu() to wait for the RX path
548 * should it be using the interface and enqueuing
549 * frames at this very time on another CPU.
552 skb_queue_purge(&sdata
->u
.sta
.skb_queue
);
554 if (local
->scan_dev
== sdata
->dev
) {
555 if (!local
->ops
->hw_scan
) {
556 local
->sta_sw_scanning
= 0;
557 cancel_delayed_work(&local
->scan_work
);
559 local
->sta_hw_scanning
= 0;
562 sdata
->u
.sta
.flags
&= ~IEEE80211_STA_PRIVACY_INVOKED
;
563 kfree(sdata
->u
.sta
.extra_ie
);
564 sdata
->u
.sta
.extra_ie
= NULL
;
565 sdata
->u
.sta
.extra_ie_len
= 0;
568 conf
.vif
= &sdata
->vif
;
569 conf
.type
= sdata
->vif
.type
;
570 conf
.mac_addr
= dev
->dev_addr
;
571 /* disable all keys for as long as this netdev is down */
572 ieee80211_disable_keys(sdata
);
573 local
->ops
->remove_interface(local_to_hw(local
), &conf
);
578 if (local
->open_count
== 0) {
579 if (netif_running(local
->mdev
))
580 dev_close(local
->mdev
);
582 if (local
->ops
->stop
)
583 local
->ops
->stop(local_to_hw(local
));
585 ieee80211_led_radio(local
, 0);
587 flush_workqueue(local
->hw
.workqueue
);
589 tasklet_disable(&local
->tx_pending_tasklet
);
590 tasklet_disable(&local
->tasklet
);
596 int ieee80211_start_tx_ba_session(struct ieee80211_hw
*hw
, u8
*ra
, u16 tid
)
598 struct ieee80211_local
*local
= hw_to_local(hw
);
599 struct sta_info
*sta
;
600 struct ieee80211_sub_if_data
*sdata
;
601 u16 start_seq_num
= 0;
604 DECLARE_MAC_BUF(mac
);
606 if (tid
>= STA_TID_NUM
)
609 #ifdef CONFIG_MAC80211_HT_DEBUG
610 printk(KERN_DEBUG
"Open BA session requested for %s tid %u\n",
611 print_mac(mac
, ra
), tid
);
612 #endif /* CONFIG_MAC80211_HT_DEBUG */
616 sta
= sta_info_get(local
, ra
);
618 #ifdef CONFIG_MAC80211_HT_DEBUG
619 printk(KERN_DEBUG
"Could not find the station\n");
625 spin_lock_bh(&sta
->lock
);
627 /* we have tried too many times, receiver does not want A-MPDU */
628 if (sta
->ampdu_mlme
.addba_req_num
[tid
] > HT_AGG_MAX_RETRIES
) {
633 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
634 /* check if the TID is not in aggregation flow already */
635 if (*state
!= HT_AGG_STATE_IDLE
) {
636 #ifdef CONFIG_MAC80211_HT_DEBUG
637 printk(KERN_DEBUG
"BA request denied - session is not "
638 "idle on tid %u\n", tid
);
639 #endif /* CONFIG_MAC80211_HT_DEBUG */
644 /* prepare A-MPDU MLME for Tx aggregation */
645 sta
->ampdu_mlme
.tid_tx
[tid
] =
646 kmalloc(sizeof(struct tid_ampdu_tx
), GFP_ATOMIC
);
647 if (!sta
->ampdu_mlme
.tid_tx
[tid
]) {
648 #ifdef CONFIG_MAC80211_HT_DEBUG
650 printk(KERN_ERR
"allocate tx mlme to tid %d failed\n",
657 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.function
=
658 sta_addba_resp_timer_expired
;
659 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.data
=
660 (unsigned long)&sta
->timer_to_tid
[tid
];
661 init_timer(&sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
);
663 /* create a new queue for this aggregation */
664 ret
= ieee80211_ht_agg_queue_add(local
, sta
, tid
);
666 /* case no queue is available to aggregation
667 * don't switch to aggregation */
669 #ifdef CONFIG_MAC80211_HT_DEBUG
670 printk(KERN_DEBUG
"BA request denied - queue unavailable for"
672 #endif /* CONFIG_MAC80211_HT_DEBUG */
673 goto err_unlock_queue
;
677 /* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
678 * call back right away, it must see that the flow has begun */
679 *state
|= HT_ADDBA_REQUESTED_MSK
;
681 if (local
->ops
->ampdu_action
)
682 ret
= local
->ops
->ampdu_action(hw
, IEEE80211_AMPDU_TX_START
,
683 ra
, tid
, &start_seq_num
);
686 /* No need to requeue the packets in the agg queue, since we
687 * held the tx lock: no packet could be enqueued to the newly
689 ieee80211_ht_agg_queue_remove(local
, sta
, tid
, 0);
690 #ifdef CONFIG_MAC80211_HT_DEBUG
691 printk(KERN_DEBUG
"BA request denied - HW unavailable for"
693 #endif /* CONFIG_MAC80211_HT_DEBUG */
694 *state
= HT_AGG_STATE_IDLE
;
695 goto err_unlock_queue
;
698 /* Will put all the packets in the new SW queue */
699 ieee80211_requeue(local
, ieee802_1d_to_ac
[tid
]);
700 spin_unlock_bh(&sta
->lock
);
702 /* send an addBA request */
703 sta
->ampdu_mlme
.dialog_token_allocator
++;
704 sta
->ampdu_mlme
.tid_tx
[tid
]->dialog_token
=
705 sta
->ampdu_mlme
.dialog_token_allocator
;
706 sta
->ampdu_mlme
.tid_tx
[tid
]->ssn
= start_seq_num
;
709 ieee80211_send_addba_request(sta
->sdata
, ra
, tid
,
710 sta
->ampdu_mlme
.tid_tx
[tid
]->dialog_token
,
711 sta
->ampdu_mlme
.tid_tx
[tid
]->ssn
,
713 /* activate the timer for the recipient's addBA response */
714 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.expires
=
715 jiffies
+ ADDBA_RESP_INTERVAL
;
716 add_timer(&sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
);
717 #ifdef CONFIG_MAC80211_HT_DEBUG
718 printk(KERN_DEBUG
"activated addBA response timer on tid %d\n", tid
);
723 kfree(sta
->ampdu_mlme
.tid_tx
[tid
]);
724 sta
->ampdu_mlme
.tid_tx
[tid
] = NULL
;
727 spin_unlock_bh(&sta
->lock
);
732 EXPORT_SYMBOL(ieee80211_start_tx_ba_session
);
734 int ieee80211_stop_tx_ba_session(struct ieee80211_hw
*hw
,
736 enum ieee80211_back_parties initiator
)
738 struct ieee80211_local
*local
= hw_to_local(hw
);
739 struct sta_info
*sta
;
742 DECLARE_MAC_BUF(mac
);
744 if (tid
>= STA_TID_NUM
)
748 sta
= sta_info_get(local
, ra
);
754 /* check if the TID is in aggregation */
755 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
756 spin_lock_bh(&sta
->lock
);
758 if (*state
!= HT_AGG_STATE_OPERATIONAL
) {
763 #ifdef CONFIG_MAC80211_HT_DEBUG
764 printk(KERN_DEBUG
"Tx BA session stop requested for %s tid %u\n",
765 print_mac(mac
, ra
), tid
);
766 #endif /* CONFIG_MAC80211_HT_DEBUG */
768 ieee80211_stop_queue(hw
, sta
->tid_to_tx_q
[tid
]);
770 *state
= HT_AGG_STATE_REQ_STOP_BA_MSK
|
771 (initiator
<< HT_AGG_STATE_INITIATOR_SHIFT
);
773 if (local
->ops
->ampdu_action
)
774 ret
= local
->ops
->ampdu_action(hw
, IEEE80211_AMPDU_TX_STOP
,
777 /* case HW denied going back to legacy */
779 WARN_ON(ret
!= -EBUSY
);
780 *state
= HT_AGG_STATE_OPERATIONAL
;
781 ieee80211_wake_queue(hw
, sta
->tid_to_tx_q
[tid
]);
786 spin_unlock_bh(&sta
->lock
);
790 EXPORT_SYMBOL(ieee80211_stop_tx_ba_session
);
792 void ieee80211_start_tx_ba_cb(struct ieee80211_hw
*hw
, u8
*ra
, u16 tid
)
794 struct ieee80211_local
*local
= hw_to_local(hw
);
795 struct sta_info
*sta
;
797 DECLARE_MAC_BUF(mac
);
799 if (tid
>= STA_TID_NUM
) {
800 #ifdef CONFIG_MAC80211_HT_DEBUG
801 printk(KERN_DEBUG
"Bad TID value: tid = %d (>= %d)\n",
808 sta
= sta_info_get(local
, ra
);
811 #ifdef CONFIG_MAC80211_HT_DEBUG
812 printk(KERN_DEBUG
"Could not find station: %s\n",
818 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
819 spin_lock_bh(&sta
->lock
);
821 if (!(*state
& HT_ADDBA_REQUESTED_MSK
)) {
822 #ifdef CONFIG_MAC80211_HT_DEBUG
823 printk(KERN_DEBUG
"addBA was not requested yet, state is %d\n",
826 spin_unlock_bh(&sta
->lock
);
831 WARN_ON_ONCE(*state
& HT_ADDBA_DRV_READY_MSK
);
833 *state
|= HT_ADDBA_DRV_READY_MSK
;
835 if (*state
== HT_AGG_STATE_OPERATIONAL
) {
836 #ifdef CONFIG_MAC80211_HT_DEBUG
837 printk(KERN_DEBUG
"Aggregation is on for tid %d \n", tid
);
839 ieee80211_wake_queue(hw
, sta
->tid_to_tx_q
[tid
]);
841 spin_unlock_bh(&sta
->lock
);
844 EXPORT_SYMBOL(ieee80211_start_tx_ba_cb
);
846 void ieee80211_stop_tx_ba_cb(struct ieee80211_hw
*hw
, u8
*ra
, u8 tid
)
848 struct ieee80211_local
*local
= hw_to_local(hw
);
849 struct sta_info
*sta
;
852 DECLARE_MAC_BUF(mac
);
854 if (tid
>= STA_TID_NUM
) {
855 #ifdef CONFIG_MAC80211_HT_DEBUG
856 printk(KERN_DEBUG
"Bad TID value: tid = %d (>= %d)\n",
862 #ifdef CONFIG_MAC80211_HT_DEBUG
863 printk(KERN_DEBUG
"Stopping Tx BA session for %s tid %d\n",
864 print_mac(mac
, ra
), tid
);
865 #endif /* CONFIG_MAC80211_HT_DEBUG */
868 sta
= sta_info_get(local
, ra
);
870 #ifdef CONFIG_MAC80211_HT_DEBUG
871 printk(KERN_DEBUG
"Could not find station: %s\n",
877 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
879 /* NOTE: no need to use sta->lock in this state check, as
880 * ieee80211_stop_tx_ba_session will let only one stop call to
881 * pass through per sta/tid
883 if ((*state
& HT_AGG_STATE_REQ_STOP_BA_MSK
) == 0) {
884 #ifdef CONFIG_MAC80211_HT_DEBUG
885 printk(KERN_DEBUG
"unexpected callback to A-MPDU stop\n");
891 if (*state
& HT_AGG_STATE_INITIATOR_MSK
)
892 ieee80211_send_delba(sta
->sdata
, ra
, tid
,
893 WLAN_BACK_INITIATOR
, WLAN_REASON_QSTA_NOT_USE
);
895 agg_queue
= sta
->tid_to_tx_q
[tid
];
897 ieee80211_ht_agg_queue_remove(local
, sta
, tid
, 1);
899 /* We just requeued the all the frames that were in the
900 * removed queue, and since we might miss a softirq we do
901 * netif_schedule_queue. ieee80211_wake_queue is not used
902 * here as this queue is not necessarily stopped
904 netif_schedule_queue(netdev_get_tx_queue(local
->mdev
, agg_queue
));
905 spin_lock_bh(&sta
->lock
);
906 *state
= HT_AGG_STATE_IDLE
;
907 sta
->ampdu_mlme
.addba_req_num
[tid
] = 0;
908 kfree(sta
->ampdu_mlme
.tid_tx
[tid
]);
909 sta
->ampdu_mlme
.tid_tx
[tid
] = NULL
;
910 spin_unlock_bh(&sta
->lock
);
914 EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb
);
916 void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw
*hw
,
917 const u8
*ra
, u16 tid
)
919 struct ieee80211_local
*local
= hw_to_local(hw
);
920 struct ieee80211_ra_tid
*ra_tid
;
921 struct sk_buff
*skb
= dev_alloc_skb(0);
923 if (unlikely(!skb
)) {
924 #ifdef CONFIG_MAC80211_HT_DEBUG
926 printk(KERN_WARNING
"%s: Not enough memory, "
927 "dropping start BA session", skb
->dev
->name
);
931 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
932 memcpy(&ra_tid
->ra
, ra
, ETH_ALEN
);
935 skb
->pkt_type
= IEEE80211_ADDBA_MSG
;
936 skb_queue_tail(&local
->skb_queue
, skb
);
937 tasklet_schedule(&local
->tasklet
);
939 EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe
);
941 void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw
*hw
,
942 const u8
*ra
, u16 tid
)
944 struct ieee80211_local
*local
= hw_to_local(hw
);
945 struct ieee80211_ra_tid
*ra_tid
;
946 struct sk_buff
*skb
= dev_alloc_skb(0);
948 if (unlikely(!skb
)) {
949 #ifdef CONFIG_MAC80211_HT_DEBUG
951 printk(KERN_WARNING
"%s: Not enough memory, "
952 "dropping stop BA session", skb
->dev
->name
);
956 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
957 memcpy(&ra_tid
->ra
, ra
, ETH_ALEN
);
960 skb
->pkt_type
= IEEE80211_DELBA_MSG
;
961 skb_queue_tail(&local
->skb_queue
, skb
);
962 tasklet_schedule(&local
->tasklet
);
964 EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe
);
966 static void ieee80211_set_multicast_list(struct net_device
*dev
)
968 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
969 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
970 int allmulti
, promisc
, sdata_allmulti
, sdata_promisc
;
972 allmulti
= !!(dev
->flags
& IFF_ALLMULTI
);
973 promisc
= !!(dev
->flags
& IFF_PROMISC
);
974 sdata_allmulti
= !!(sdata
->flags
& IEEE80211_SDATA_ALLMULTI
);
975 sdata_promisc
= !!(sdata
->flags
& IEEE80211_SDATA_PROMISC
);
977 if (allmulti
!= sdata_allmulti
) {
978 if (dev
->flags
& IFF_ALLMULTI
)
979 atomic_inc(&local
->iff_allmultis
);
981 atomic_dec(&local
->iff_allmultis
);
982 sdata
->flags
^= IEEE80211_SDATA_ALLMULTI
;
985 if (promisc
!= sdata_promisc
) {
986 if (dev
->flags
& IFF_PROMISC
)
987 atomic_inc(&local
->iff_promiscs
);
989 atomic_dec(&local
->iff_promiscs
);
990 sdata
->flags
^= IEEE80211_SDATA_PROMISC
;
993 dev_mc_sync(local
->mdev
, dev
);
996 static const struct header_ops ieee80211_header_ops
= {
997 .create
= eth_header
,
998 .parse
= header_parse_80211
,
999 .rebuild
= eth_rebuild_header
,
1000 .cache
= eth_header_cache
,
1001 .cache_update
= eth_header_cache_update
,
1004 void ieee80211_if_setup(struct net_device
*dev
)
1007 dev
->hard_start_xmit
= ieee80211_subif_start_xmit
;
1008 dev
->wireless_handlers
= &ieee80211_iw_handler_def
;
1009 dev
->set_multicast_list
= ieee80211_set_multicast_list
;
1010 dev
->change_mtu
= ieee80211_change_mtu
;
1011 dev
->open
= ieee80211_open
;
1012 dev
->stop
= ieee80211_stop
;
1013 dev
->destructor
= free_netdev
;
1014 /* we will validate the address ourselves in ->open */
1015 dev
->validate_addr
= NULL
;
1018 /* everything else */
1020 int ieee80211_if_config(struct ieee80211_sub_if_data
*sdata
, u32 changed
)
1022 struct ieee80211_local
*local
= sdata
->local
;
1023 struct ieee80211_if_conf conf
;
1025 if (WARN_ON(!netif_running(sdata
->dev
)))
1028 if (!local
->ops
->config_interface
)
1031 memset(&conf
, 0, sizeof(conf
));
1032 conf
.changed
= changed
;
1034 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
||
1035 sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
) {
1036 conf
.bssid
= sdata
->u
.sta
.bssid
;
1037 conf
.ssid
= sdata
->u
.sta
.ssid
;
1038 conf
.ssid_len
= sdata
->u
.sta
.ssid_len
;
1039 } else if (sdata
->vif
.type
== IEEE80211_IF_TYPE_AP
) {
1040 conf
.bssid
= sdata
->dev
->dev_addr
;
1041 conf
.ssid
= sdata
->u
.ap
.ssid
;
1042 conf
.ssid_len
= sdata
->u
.ap
.ssid_len
;
1043 } else if (ieee80211_vif_is_mesh(&sdata
->vif
)) {
1044 u8 zero
[ETH_ALEN
] = { 0 };
1053 if (WARN_ON(!conf
.bssid
&& (changed
& IEEE80211_IFCC_BSSID
)))
1056 if (WARN_ON(!conf
.ssid
&& (changed
& IEEE80211_IFCC_SSID
)))
1059 return local
->ops
->config_interface(local_to_hw(local
),
1060 &sdata
->vif
, &conf
);
1063 int ieee80211_hw_config(struct ieee80211_local
*local
)
1065 struct ieee80211_channel
*chan
;
1068 if (local
->sta_sw_scanning
)
1069 chan
= local
->scan_channel
;
1071 chan
= local
->oper_channel
;
1073 local
->hw
.conf
.channel
= chan
;
1075 if (!local
->hw
.conf
.power_level
)
1076 local
->hw
.conf
.power_level
= chan
->max_power
;
1078 local
->hw
.conf
.power_level
= min(chan
->max_power
,
1079 local
->hw
.conf
.power_level
);
1081 local
->hw
.conf
.max_antenna_gain
= chan
->max_antenna_gain
;
1083 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1084 printk(KERN_DEBUG
"%s: HW CONFIG: freq=%d\n",
1085 wiphy_name(local
->hw
.wiphy
), chan
->center_freq
);
1088 if (local
->open_count
)
1089 ret
= local
->ops
->config(local_to_hw(local
), &local
->hw
.conf
);
1095 * ieee80211_handle_ht should be used only after legacy configuration
1096 * has been determined namely band, as ht configuration depends upon
1097 * the hardware's HT abilities for a _specific_ band.
1099 u32
ieee80211_handle_ht(struct ieee80211_local
*local
, int enable_ht
,
1100 struct ieee80211_ht_info
*req_ht_cap
,
1101 struct ieee80211_ht_bss_info
*req_bss_cap
)
1103 struct ieee80211_conf
*conf
= &local
->hw
.conf
;
1104 struct ieee80211_supported_band
*sband
;
1105 struct ieee80211_ht_info ht_conf
;
1106 struct ieee80211_ht_bss_info ht_bss_conf
;
1109 u8 max_tx_streams
= IEEE80211_HT_CAP_MAX_STREAMS
;
1112 sband
= local
->hw
.wiphy
->bands
[conf
->channel
->band
];
1114 memset(&ht_conf
, 0, sizeof(struct ieee80211_ht_info
));
1115 memset(&ht_bss_conf
, 0, sizeof(struct ieee80211_ht_bss_info
));
1117 /* HT is not supported */
1118 if (!sband
->ht_info
.ht_supported
) {
1119 conf
->flags
&= ~IEEE80211_CONF_SUPPORT_HT_MODE
;
1125 if (conf
->flags
& IEEE80211_CONF_SUPPORT_HT_MODE
)
1126 changed
|= BSS_CHANGED_HT
;
1127 conf
->flags
&= ~IEEE80211_CONF_SUPPORT_HT_MODE
;
1128 conf
->ht_conf
.ht_supported
= 0;
1133 if (!(conf
->flags
& IEEE80211_CONF_SUPPORT_HT_MODE
))
1134 changed
|= BSS_CHANGED_HT
;
1136 conf
->flags
|= IEEE80211_CONF_SUPPORT_HT_MODE
;
1137 ht_conf
.ht_supported
= 1;
1139 ht_conf
.cap
= req_ht_cap
->cap
& sband
->ht_info
.cap
;
1140 ht_conf
.cap
&= ~(IEEE80211_HT_CAP_MIMO_PS
);
1141 ht_conf
.cap
|= sband
->ht_info
.cap
& IEEE80211_HT_CAP_MIMO_PS
;
1142 ht_bss_conf
.primary_channel
= req_bss_cap
->primary_channel
;
1143 ht_bss_conf
.bss_cap
= req_bss_cap
->bss_cap
;
1144 ht_bss_conf
.bss_op_mode
= req_bss_cap
->bss_op_mode
;
1146 ht_conf
.ampdu_factor
= req_ht_cap
->ampdu_factor
;
1147 ht_conf
.ampdu_density
= req_ht_cap
->ampdu_density
;
1150 tx_mcs_set_cap
= sband
->ht_info
.supp_mcs_set
[12];
1152 /* configure suppoerted Tx MCS according to requested MCS
1153 * (based in most cases on Rx capabilities of peer) and self
1154 * Tx MCS capabilities (as defined by low level driver HW
1155 * Tx capabilities) */
1156 if (!(tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_DEFINED
))
1159 /* Counting from 0 therfore + 1 */
1160 if (tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_RX_DIFF
)
1161 max_tx_streams
= ((tx_mcs_set_cap
&
1162 IEEE80211_HT_CAP_MCS_TX_STREAMS
) >> 2) + 1;
1164 for (i
= 0; i
< max_tx_streams
; i
++)
1165 ht_conf
.supp_mcs_set
[i
] =
1166 sband
->ht_info
.supp_mcs_set
[i
] &
1167 req_ht_cap
->supp_mcs_set
[i
];
1169 if (tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_UEQM
)
1170 for (i
= IEEE80211_SUPP_MCS_SET_UEQM
;
1171 i
< IEEE80211_SUPP_MCS_SET_LEN
; i
++)
1172 ht_conf
.supp_mcs_set
[i
] =
1173 sband
->ht_info
.supp_mcs_set
[i
] &
1174 req_ht_cap
->supp_mcs_set
[i
];
1177 /* if bss configuration changed store the new one */
1178 if (memcmp(&conf
->ht_conf
, &ht_conf
, sizeof(ht_conf
)) ||
1179 memcmp(&conf
->ht_bss_conf
, &ht_bss_conf
, sizeof(ht_bss_conf
))) {
1180 changed
|= BSS_CHANGED_HT
;
1181 memcpy(&conf
->ht_conf
, &ht_conf
, sizeof(ht_conf
));
1182 memcpy(&conf
->ht_bss_conf
, &ht_bss_conf
, sizeof(ht_bss_conf
));
1188 void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data
*sdata
,
1191 struct ieee80211_local
*local
= sdata
->local
;
1196 if (local
->ops
->bss_info_changed
)
1197 local
->ops
->bss_info_changed(local_to_hw(local
),
1203 u32
ieee80211_reset_erp_info(struct ieee80211_sub_if_data
*sdata
)
1205 sdata
->bss_conf
.use_cts_prot
= 0;
1206 sdata
->bss_conf
.use_short_preamble
= 0;
1207 return BSS_CHANGED_ERP_CTS_PROT
| BSS_CHANGED_ERP_PREAMBLE
;
1210 void ieee80211_tx_status_irqsafe(struct ieee80211_hw
*hw
,
1211 struct sk_buff
*skb
)
1213 struct ieee80211_local
*local
= hw_to_local(hw
);
1214 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1217 skb
->dev
= local
->mdev
;
1218 skb
->pkt_type
= IEEE80211_TX_STATUS_MSG
;
1219 skb_queue_tail(info
->flags
& IEEE80211_TX_CTL_REQ_TX_STATUS
?
1220 &local
->skb_queue
: &local
->skb_queue_unreliable
, skb
);
1221 tmp
= skb_queue_len(&local
->skb_queue
) +
1222 skb_queue_len(&local
->skb_queue_unreliable
);
1223 while (tmp
> IEEE80211_IRQSAFE_QUEUE_LIMIT
&&
1224 (skb
= skb_dequeue(&local
->skb_queue_unreliable
))) {
1225 dev_kfree_skb_irq(skb
);
1227 I802_DEBUG_INC(local
->tx_status_drop
);
1229 tasklet_schedule(&local
->tasklet
);
1231 EXPORT_SYMBOL(ieee80211_tx_status_irqsafe
);
1233 static void ieee80211_tasklet_handler(unsigned long data
)
1235 struct ieee80211_local
*local
= (struct ieee80211_local
*) data
;
1236 struct sk_buff
*skb
;
1237 struct ieee80211_rx_status rx_status
;
1238 struct ieee80211_ra_tid
*ra_tid
;
1240 while ((skb
= skb_dequeue(&local
->skb_queue
)) ||
1241 (skb
= skb_dequeue(&local
->skb_queue_unreliable
))) {
1242 switch (skb
->pkt_type
) {
1243 case IEEE80211_RX_MSG
:
1244 /* status is in skb->cb */
1245 memcpy(&rx_status
, skb
->cb
, sizeof(rx_status
));
1246 /* Clear skb->pkt_type in order to not confuse kernel
1249 __ieee80211_rx(local_to_hw(local
), skb
, &rx_status
);
1251 case IEEE80211_TX_STATUS_MSG
:
1253 ieee80211_tx_status(local_to_hw(local
), skb
);
1255 case IEEE80211_DELBA_MSG
:
1256 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
1257 ieee80211_stop_tx_ba_cb(local_to_hw(local
),
1258 ra_tid
->ra
, ra_tid
->tid
);
1261 case IEEE80211_ADDBA_MSG
:
1262 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
1263 ieee80211_start_tx_ba_cb(local_to_hw(local
),
1264 ra_tid
->ra
, ra_tid
->tid
);
1275 /* Remove added headers (e.g., QoS control), encryption header/MIC, etc. to
1276 * make a prepared TX frame (one that has been given to hw) to look like brand
1277 * new IEEE 802.11 frame that is ready to go through TX processing again.
1279 static void ieee80211_remove_tx_extra(struct ieee80211_local
*local
,
1280 struct ieee80211_key
*key
,
1281 struct sk_buff
*skb
)
1283 unsigned int hdrlen
, iv_len
, mic_len
;
1284 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*)skb
->data
;
1286 hdrlen
= ieee80211_hdrlen(hdr
->frame_control
);
1291 switch (key
->conf
.alg
) {
1293 iv_len
= WEP_IV_LEN
;
1294 mic_len
= WEP_ICV_LEN
;
1297 iv_len
= TKIP_IV_LEN
;
1298 mic_len
= TKIP_ICV_LEN
;
1301 iv_len
= CCMP_HDR_LEN
;
1302 mic_len
= CCMP_MIC_LEN
;
1308 if (skb
->len
>= hdrlen
+ mic_len
&&
1309 !(key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
))
1310 skb_trim(skb
, skb
->len
- mic_len
);
1311 if (skb
->len
>= hdrlen
+ iv_len
) {
1312 memmove(skb
->data
+ iv_len
, skb
->data
, hdrlen
);
1313 hdr
= (struct ieee80211_hdr
*)skb_pull(skb
, iv_len
);
1317 if (ieee80211_is_data_qos(hdr
->frame_control
)) {
1318 hdr
->frame_control
&= ~cpu_to_le16(IEEE80211_STYPE_QOS_DATA
);
1319 memmove(skb
->data
+ IEEE80211_QOS_CTL_LEN
, skb
->data
,
1320 hdrlen
- IEEE80211_QOS_CTL_LEN
);
1321 skb_pull(skb
, IEEE80211_QOS_CTL_LEN
);
1325 static void ieee80211_handle_filtered_frame(struct ieee80211_local
*local
,
1326 struct sta_info
*sta
,
1327 struct sk_buff
*skb
)
1329 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1331 sta
->tx_filtered_count
++;
1334 * Clear the TX filter mask for this STA when sending the next
1335 * packet. If the STA went to power save mode, this will happen
1336 * when it wakes up for the next time.
1338 set_sta_flags(sta
, WLAN_STA_CLEAR_PS_FILT
);
1341 * This code races in the following way:
1343 * (1) STA sends frame indicating it will go to sleep and does so
1344 * (2) hardware/firmware adds STA to filter list, passes frame up
1345 * (3) hardware/firmware processes TX fifo and suppresses a frame
1346 * (4) we get TX status before having processed the frame and
1347 * knowing that the STA has gone to sleep.
1349 * This is actually quite unlikely even when both those events are
1350 * processed from interrupts coming in quickly after one another or
1351 * even at the same time because we queue both TX status events and
1352 * RX frames to be processed by a tasklet and process them in the
1353 * same order that they were received or TX status last. Hence, there
1354 * is no race as long as the frame RX is processed before the next TX
1355 * status, which drivers can ensure, see below.
1357 * Note that this can only happen if the hardware or firmware can
1358 * actually add STAs to the filter list, if this is done by the
1359 * driver in response to set_tim() (which will only reduce the race
1360 * this whole filtering tries to solve, not completely solve it)
1361 * this situation cannot happen.
1363 * To completely solve this race drivers need to make sure that they
1364 * (a) don't mix the irq-safe/not irq-safe TX status/RX processing
1366 * (b) always process RX events before TX status events if ordering
1367 * can be unknown, for example with different interrupt status
1370 if (test_sta_flags(sta
, WLAN_STA_PS
) &&
1371 skb_queue_len(&sta
->tx_filtered
) < STA_MAX_TX_BUFFER
) {
1372 ieee80211_remove_tx_extra(local
, sta
->key
, skb
);
1373 skb_queue_tail(&sta
->tx_filtered
, skb
);
1377 if (!test_sta_flags(sta
, WLAN_STA_PS
) &&
1378 !(info
->flags
& IEEE80211_TX_CTL_REQUEUE
)) {
1379 /* Software retry the packet once */
1380 info
->flags
|= IEEE80211_TX_CTL_REQUEUE
;
1381 ieee80211_remove_tx_extra(local
, sta
->key
, skb
);
1382 dev_queue_xmit(skb
);
1386 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1387 if (net_ratelimit())
1388 printk(KERN_DEBUG
"%s: dropped TX filtered frame, "
1389 "queue_len=%d PS=%d @%lu\n",
1390 wiphy_name(local
->hw
.wiphy
),
1391 skb_queue_len(&sta
->tx_filtered
),
1392 !!test_sta_flags(sta
, WLAN_STA_PS
), jiffies
);
1397 void ieee80211_tx_status(struct ieee80211_hw
*hw
, struct sk_buff
*skb
)
1399 struct sk_buff
*skb2
;
1400 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) skb
->data
;
1401 struct ieee80211_local
*local
= hw_to_local(hw
);
1402 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1405 struct ieee80211_tx_status_rtap_hdr
*rthdr
;
1406 struct ieee80211_sub_if_data
*sdata
;
1407 struct net_device
*prev_dev
= NULL
;
1408 struct sta_info
*sta
;
1412 if (info
->status
.excessive_retries
) {
1413 sta
= sta_info_get(local
, hdr
->addr1
);
1415 if (test_sta_flags(sta
, WLAN_STA_PS
)) {
1417 * The STA is in power save mode, so assume
1418 * that this TX packet failed because of that.
1420 ieee80211_handle_filtered_frame(local
, sta
, skb
);
1427 fc
= hdr
->frame_control
;
1429 if ((info
->flags
& IEEE80211_TX_STAT_AMPDU_NO_BACK
) &&
1430 (ieee80211_is_data_qos(fc
))) {
1433 sta
= sta_info_get(local
, hdr
->addr1
);
1435 qc
= ieee80211_get_qos_ctl(hdr
);
1437 ssn
= ((le16_to_cpu(hdr
->seq_ctrl
) + 0x10)
1438 & IEEE80211_SCTL_SEQ
);
1439 ieee80211_send_bar(sta
->sdata
, hdr
->addr1
,
1444 if (info
->flags
& IEEE80211_TX_STAT_TX_FILTERED
) {
1445 sta
= sta_info_get(local
, hdr
->addr1
);
1447 ieee80211_handle_filtered_frame(local
, sta
, skb
);
1452 rate_control_tx_status(local
->mdev
, skb
);
1456 ieee80211_led_tx(local
, 0);
1459 * Fragments are passed to low-level drivers as separate skbs, so these
1460 * are actually fragments, not frames. Update frame counters only for
1461 * the first fragment of the frame. */
1463 frag
= le16_to_cpu(hdr
->seq_ctrl
) & IEEE80211_SCTL_FRAG
;
1464 type
= le16_to_cpu(hdr
->frame_control
) & IEEE80211_FCTL_FTYPE
;
1466 if (info
->flags
& IEEE80211_TX_STAT_ACK
) {
1468 local
->dot11TransmittedFrameCount
++;
1469 if (is_multicast_ether_addr(hdr
->addr1
))
1470 local
->dot11MulticastTransmittedFrameCount
++;
1471 if (info
->status
.retry_count
> 0)
1472 local
->dot11RetryCount
++;
1473 if (info
->status
.retry_count
> 1)
1474 local
->dot11MultipleRetryCount
++;
1477 /* This counter shall be incremented for an acknowledged MPDU
1478 * with an individual address in the address 1 field or an MPDU
1479 * with a multicast address in the address 1 field of type Data
1481 if (!is_multicast_ether_addr(hdr
->addr1
) ||
1482 type
== IEEE80211_FTYPE_DATA
||
1483 type
== IEEE80211_FTYPE_MGMT
)
1484 local
->dot11TransmittedFragmentCount
++;
1487 local
->dot11FailedCount
++;
1490 /* this was a transmitted frame, but now we want to reuse it */
1494 * This is a bit racy but we can avoid a lot of work
1497 if (!local
->monitors
&& !local
->cooked_mntrs
) {
1502 /* send frame to monitor interfaces now */
1504 if (skb_headroom(skb
) < sizeof(*rthdr
)) {
1505 printk(KERN_ERR
"ieee80211_tx_status: headroom too small\n");
1510 rthdr
= (struct ieee80211_tx_status_rtap_hdr
*)
1511 skb_push(skb
, sizeof(*rthdr
));
1513 memset(rthdr
, 0, sizeof(*rthdr
));
1514 rthdr
->hdr
.it_len
= cpu_to_le16(sizeof(*rthdr
));
1515 rthdr
->hdr
.it_present
=
1516 cpu_to_le32((1 << IEEE80211_RADIOTAP_TX_FLAGS
) |
1517 (1 << IEEE80211_RADIOTAP_DATA_RETRIES
));
1519 if (!(info
->flags
& IEEE80211_TX_STAT_ACK
) &&
1520 !is_multicast_ether_addr(hdr
->addr1
))
1521 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_FAIL
);
1523 if ((info
->flags
& IEEE80211_TX_CTL_USE_RTS_CTS
) &&
1524 (info
->flags
& IEEE80211_TX_CTL_USE_CTS_PROTECT
))
1525 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_CTS
);
1526 else if (info
->flags
& IEEE80211_TX_CTL_USE_RTS_CTS
)
1527 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_RTS
);
1529 rthdr
->data_retries
= info
->status
.retry_count
;
1531 /* XXX: is this sufficient for BPF? */
1532 skb_set_mac_header(skb
, 0);
1533 skb
->ip_summed
= CHECKSUM_UNNECESSARY
;
1534 skb
->pkt_type
= PACKET_OTHERHOST
;
1535 skb
->protocol
= htons(ETH_P_802_2
);
1536 memset(skb
->cb
, 0, sizeof(skb
->cb
));
1539 list_for_each_entry_rcu(sdata
, &local
->interfaces
, list
) {
1540 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_MNTR
) {
1541 if (!netif_running(sdata
->dev
))
1545 skb2
= skb_clone(skb
, GFP_ATOMIC
);
1547 skb2
->dev
= prev_dev
;
1552 prev_dev
= sdata
->dev
;
1556 skb
->dev
= prev_dev
;
1563 EXPORT_SYMBOL(ieee80211_tx_status
);
1565 struct ieee80211_hw
*ieee80211_alloc_hw(size_t priv_data_len
,
1566 const struct ieee80211_ops
*ops
)
1568 struct ieee80211_local
*local
;
1570 struct wiphy
*wiphy
;
1572 /* Ensure 32-byte alignment of our private data and hw private data.
1573 * We use the wiphy priv data for both our ieee80211_local and for
1574 * the driver's private data
1576 * In memory it'll be like this:
1578 * +-------------------------+
1580 * +-------------------------+
1581 * | struct ieee80211_local |
1582 * +-------------------------+
1583 * | driver's private data |
1584 * +-------------------------+
1587 priv_size
= ((sizeof(struct ieee80211_local
) +
1588 NETDEV_ALIGN_CONST
) & ~NETDEV_ALIGN_CONST
) +
1591 wiphy
= wiphy_new(&mac80211_config_ops
, priv_size
);
1596 wiphy
->privid
= mac80211_wiphy_privid
;
1598 local
= wiphy_priv(wiphy
);
1599 local
->hw
.wiphy
= wiphy
;
1601 local
->hw
.priv
= (char *)local
+
1602 ((sizeof(struct ieee80211_local
) +
1603 NETDEV_ALIGN_CONST
) & ~NETDEV_ALIGN_CONST
);
1606 BUG_ON(!ops
->start
);
1608 BUG_ON(!ops
->config
);
1609 BUG_ON(!ops
->add_interface
);
1610 BUG_ON(!ops
->remove_interface
);
1611 BUG_ON(!ops
->configure_filter
);
1614 local
->hw
.queues
= 1; /* default */
1616 local
->bridge_packets
= 1;
1618 local
->rts_threshold
= IEEE80211_MAX_RTS_THRESHOLD
;
1619 local
->fragmentation_threshold
= IEEE80211_MAX_FRAG_THRESHOLD
;
1620 local
->short_retry_limit
= 7;
1621 local
->long_retry_limit
= 4;
1622 local
->hw
.conf
.radio_enabled
= 1;
1624 INIT_LIST_HEAD(&local
->interfaces
);
1626 spin_lock_init(&local
->key_lock
);
1628 INIT_DELAYED_WORK(&local
->scan_work
, ieee80211_sta_scan_work
);
1630 sta_info_init(local
);
1632 tasklet_init(&local
->tx_pending_tasklet
, ieee80211_tx_pending
,
1633 (unsigned long)local
);
1634 tasklet_disable(&local
->tx_pending_tasklet
);
1636 tasklet_init(&local
->tasklet
,
1637 ieee80211_tasklet_handler
,
1638 (unsigned long) local
);
1639 tasklet_disable(&local
->tasklet
);
1641 skb_queue_head_init(&local
->skb_queue
);
1642 skb_queue_head_init(&local
->skb_queue_unreliable
);
1644 return local_to_hw(local
);
1646 EXPORT_SYMBOL(ieee80211_alloc_hw
);
1648 int ieee80211_register_hw(struct ieee80211_hw
*hw
)
1650 struct ieee80211_local
*local
= hw_to_local(hw
);
1653 enum ieee80211_band band
;
1654 struct net_device
*mdev
;
1655 struct wireless_dev
*mwdev
;
1658 * generic code guarantees at least one band,
1659 * set this very early because much code assumes
1660 * that hw.conf.channel is assigned
1662 for (band
= 0; band
< IEEE80211_NUM_BANDS
; band
++) {
1663 struct ieee80211_supported_band
*sband
;
1665 sband
= local
->hw
.wiphy
->bands
[band
];
1667 /* init channel we're on */
1668 local
->hw
.conf
.channel
=
1669 local
->oper_channel
=
1670 local
->scan_channel
= &sband
->channels
[0];
1675 result
= wiphy_register(local
->hw
.wiphy
);
1680 * We use the number of queues for feature tests (QoS, HT) internally
1681 * so restrict them appropriately.
1683 if (hw
->queues
> IEEE80211_MAX_QUEUES
)
1684 hw
->queues
= IEEE80211_MAX_QUEUES
;
1685 if (hw
->ampdu_queues
> IEEE80211_MAX_AMPDU_QUEUES
)
1686 hw
->ampdu_queues
= IEEE80211_MAX_AMPDU_QUEUES
;
1688 hw
->ampdu_queues
= 0;
1690 mdev
= alloc_netdev_mq(sizeof(struct wireless_dev
),
1691 "wmaster%d", ether_setup
,
1692 ieee80211_num_queues(hw
));
1694 goto fail_mdev_alloc
;
1696 mwdev
= netdev_priv(mdev
);
1697 mdev
->ieee80211_ptr
= mwdev
;
1698 mwdev
->wiphy
= local
->hw
.wiphy
;
1702 ieee80211_rx_bss_list_init(local
);
1704 mdev
->hard_start_xmit
= ieee80211_master_start_xmit
;
1705 mdev
->open
= ieee80211_master_open
;
1706 mdev
->stop
= ieee80211_master_stop
;
1707 mdev
->type
= ARPHRD_IEEE80211
;
1708 mdev
->header_ops
= &ieee80211_header_ops
;
1709 mdev
->set_multicast_list
= ieee80211_master_set_multicast_list
;
1711 name
= wiphy_dev(local
->hw
.wiphy
)->driver
->name
;
1712 local
->hw
.workqueue
= create_freezeable_workqueue(name
);
1713 if (!local
->hw
.workqueue
) {
1715 goto fail_workqueue
;
1719 * The hardware needs headroom for sending the frame,
1720 * and we need some headroom for passing the frame to monitor
1721 * interfaces, but never both at the same time.
1723 local
->tx_headroom
= max_t(unsigned int , local
->hw
.extra_tx_headroom
,
1724 sizeof(struct ieee80211_tx_status_rtap_hdr
));
1726 debugfs_hw_add(local
);
1728 if (local
->hw
.conf
.beacon_int
< 10)
1729 local
->hw
.conf
.beacon_int
= 100;
1731 if (local
->hw
.max_listen_interval
== 0)
1732 local
->hw
.max_listen_interval
= 1;
1734 local
->hw
.conf
.listen_interval
= local
->hw
.max_listen_interval
;
1736 local
->wstats_flags
|= local
->hw
.flags
& (IEEE80211_HW_SIGNAL_UNSPEC
|
1737 IEEE80211_HW_SIGNAL_DB
|
1738 IEEE80211_HW_SIGNAL_DBM
) ?
1739 IW_QUAL_QUAL_UPDATED
: IW_QUAL_QUAL_INVALID
;
1740 local
->wstats_flags
|= local
->hw
.flags
& IEEE80211_HW_NOISE_DBM
?
1741 IW_QUAL_NOISE_UPDATED
: IW_QUAL_NOISE_INVALID
;
1742 if (local
->hw
.flags
& IEEE80211_HW_SIGNAL_DBM
)
1743 local
->wstats_flags
|= IW_QUAL_DBM
;
1745 result
= sta_info_start(local
);
1750 result
= dev_alloc_name(local
->mdev
, local
->mdev
->name
);
1754 memcpy(local
->mdev
->dev_addr
, local
->hw
.wiphy
->perm_addr
, ETH_ALEN
);
1755 SET_NETDEV_DEV(local
->mdev
, wiphy_dev(local
->hw
.wiphy
));
1757 result
= register_netdevice(local
->mdev
);
1761 result
= ieee80211_init_rate_ctrl_alg(local
,
1762 hw
->rate_control_algorithm
);
1764 printk(KERN_DEBUG
"%s: Failed to initialize rate control "
1765 "algorithm\n", wiphy_name(local
->hw
.wiphy
));
1769 result
= ieee80211_wep_init(local
);
1772 printk(KERN_DEBUG
"%s: Failed to initialize wep: %d\n",
1773 wiphy_name(local
->hw
.wiphy
), result
);
1777 local
->mdev
->select_queue
= ieee80211_select_queue
;
1779 /* add one default STA interface */
1780 result
= ieee80211_if_add(local
, "wlan%d", NULL
,
1781 IEEE80211_IF_TYPE_STA
, NULL
);
1783 printk(KERN_WARNING
"%s: Failed to add default virtual iface\n",
1784 wiphy_name(local
->hw
.wiphy
));
1788 ieee80211_led_init(local
);
1793 rate_control_deinitialize(local
);
1795 unregister_netdevice(local
->mdev
);
1799 sta_info_stop(local
);
1801 debugfs_hw_del(local
);
1802 destroy_workqueue(local
->hw
.workqueue
);
1805 free_netdev(local
->mdev
);
1807 wiphy_unregister(local
->hw
.wiphy
);
1810 EXPORT_SYMBOL(ieee80211_register_hw
);
1812 void ieee80211_unregister_hw(struct ieee80211_hw
*hw
)
1814 struct ieee80211_local
*local
= hw_to_local(hw
);
1816 tasklet_kill(&local
->tx_pending_tasklet
);
1817 tasklet_kill(&local
->tasklet
);
1822 * At this point, interface list manipulations are fine
1823 * because the driver cannot be handing us frames any
1824 * more and the tasklet is killed.
1827 /* First, we remove all virtual interfaces. */
1828 ieee80211_remove_interfaces(local
);
1830 /* then, finally, remove the master interface */
1831 unregister_netdevice(local
->mdev
);
1835 ieee80211_rx_bss_list_deinit(local
);
1836 ieee80211_clear_tx_pending(local
);
1837 sta_info_stop(local
);
1838 rate_control_deinitialize(local
);
1839 debugfs_hw_del(local
);
1841 if (skb_queue_len(&local
->skb_queue
)
1842 || skb_queue_len(&local
->skb_queue_unreliable
))
1843 printk(KERN_WARNING
"%s: skb_queue not empty\n",
1844 wiphy_name(local
->hw
.wiphy
));
1845 skb_queue_purge(&local
->skb_queue
);
1846 skb_queue_purge(&local
->skb_queue_unreliable
);
1848 destroy_workqueue(local
->hw
.workqueue
);
1849 wiphy_unregister(local
->hw
.wiphy
);
1850 ieee80211_wep_free(local
);
1851 ieee80211_led_exit(local
);
1852 free_netdev(local
->mdev
);
1854 EXPORT_SYMBOL(ieee80211_unregister_hw
);
1856 void ieee80211_free_hw(struct ieee80211_hw
*hw
)
1858 struct ieee80211_local
*local
= hw_to_local(hw
);
1860 wiphy_free(local
->hw
.wiphy
);
1862 EXPORT_SYMBOL(ieee80211_free_hw
);
1864 static int __init
ieee80211_init(void)
1866 struct sk_buff
*skb
;
1869 BUILD_BUG_ON(sizeof(struct ieee80211_tx_info
) > sizeof(skb
->cb
));
1870 BUILD_BUG_ON(offsetof(struct ieee80211_tx_info
, driver_data
) +
1871 IEEE80211_TX_INFO_DRIVER_DATA_SIZE
> sizeof(skb
->cb
));
1873 ret
= rc80211_pid_init();
1877 ieee80211_debugfs_netdev_init();
1882 static void __exit
ieee80211_exit(void)
1887 * For key todo, it'll be empty by now but the work
1888 * might still be scheduled.
1890 flush_scheduled_work();
1895 ieee80211_debugfs_netdev_exit();
1899 subsys_initcall(ieee80211_init
);
1900 module_exit(ieee80211_exit
);
1902 MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1903 MODULE_LICENSE("GPL");