net/mac80211/util.c

   1 /*
   2  * Copyright 2002-2005, Instant802 Networks, Inc.
   3  * Copyright 2005-2006, Devicescape Software, Inc.
   4  * Copyright 2006-2007  Jiri Benc <jbenc@suse.cz>
   5  * Copyright 2007       Johannes Berg <johannes@sipsolutions.net>
   6  *
   7  * This program is free software; you can redistribute it and/or modify
   8  * it under the terms of the GNU General Public License version 2 as
   9  * published by the Free Software Foundation.
  10  *
  11  * utilities for mac80211
  12  */
  13
  14 #include <net/mac80211.h>
  15 #include <linux/netdevice.h>
  16 #include <linux/export.h>
  17 #include <linux/types.h>
  18 #include <linux/slab.h>
  19 #include <linux/skbuff.h>
  20 #include <linux/etherdevice.h>
  21 #include <linux/if_arp.h>
  22 #include <linux/bitmap.h>
  23 #include <linux/crc32.h>
  24 #include <net/net_namespace.h>
  25 #include <net/cfg80211.h>
  26 #include <net/rtnetlink.h>
  27
  28 #include "ieee80211_i.h"
  29 #include "driver-ops.h"
  30 #include "rate.h"
  31 #include "mesh.h"
  32 #include "wme.h"
  33 #include "led.h"
  34 #include "wep.h"
  35
  36 /* privid for wiphys to determine whether they belong to us or not */
  37 void *mac80211_wiphy_privid = &mac80211_wiphy_privid;
  38
  39 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
  40 {
  41         struct ieee80211_local *local;
  42         BUG_ON(!wiphy);
  43
  44         local = wiphy_priv(wiphy);
  45         return &local->hw;
  46 }
  47 EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
  48
  49 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
  50                         enum nl80211_iftype type)
  51 {
  52         __le16 fc = hdr->frame_control;
  53
  54          /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
  55         if (len < 16)
  56                 return NULL;
  57
  58         if (ieee80211_is_data(fc)) {
  59                 if (len < 24) /* drop incorrect hdr len (data) */
  60                         return NULL;
  61
  62                 if (ieee80211_has_a4(fc))
  63                         return NULL;
  64                 if (ieee80211_has_tods(fc))
  65                         return hdr->addr1;
  66                 if (ieee80211_has_fromds(fc))
  67                         return hdr->addr2;
  68
  69                 return hdr->addr3;
  70         }
  71
  72         if (ieee80211_is_mgmt(fc)) {
  73                 if (len < 24) /* drop incorrect hdr len (mgmt) */
  74                         return NULL;
  75                 return hdr->addr3;
  76         }
  77
  78         if (ieee80211_is_ctl(fc)) {
  79                 if(ieee80211_is_pspoll(fc))
  80                         return hdr->addr1;
  81
  82                 if (ieee80211_is_back_req(fc)) {
  83                         switch (type) {
  84                         case NL80211_IFTYPE_STATION:
  85                                 return hdr->addr2;
  86                         case NL80211_IFTYPE_AP:
  87                         case NL80211_IFTYPE_AP_VLAN:
  88                                 return hdr->addr1;
  89                         default:
  90                                 break; /* fall through to the return */
  91                         }
  92                 }
  93         }
  94
  95         return NULL;
  96 }
  97
  98 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
  99 {
 100         struct sk_buff *skb;
 101         struct ieee80211_hdr *hdr;
 102
 103         skb_queue_walk(&tx->skbs, skb) {
 104                 hdr = (struct ieee80211_hdr *) skb->data;
 105                 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
 106         }
 107 }
 108
 109 int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
 110                              int rate, int erp, int short_preamble)
 111 {
 112         int dur;
 113
 114         /* calculate duration (in microseconds, rounded up to next higher
 115          * integer if it includes a fractional microsecond) to send frame of
 116          * len bytes (does not include FCS) at the given rate. Duration will
 117          * also include SIFS.
 118          *
 119          * rate is in 100 kbps, so divident is multiplied by 10 in the
 120          * DIV_ROUND_UP() operations.
 121          */
 122
 123         if (band == IEEE80211_BAND_5GHZ || erp) {
 124                 /*
 125                  * OFDM:
 126                  *
 127                  * N_DBPS = DATARATE x 4
 128                  * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
 129                  *      (16 = SIGNAL time, 6 = tail bits)
 130                  * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
 131                  *
 132                  * T_SYM = 4 usec
 133                  * 802.11a - 17.5.2: aSIFSTime = 16 usec
 134                  * 802.11g - 19.8.4: aSIFSTime = 10 usec +
 135                  *      signal ext = 6 usec
 136                  */
 137                 dur = 16; /* SIFS + signal ext */
 138                 dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
 139                 dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
 140                 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
 141                                         4 * rate); /* T_SYM x N_SYM */
 142         } else {
 143                 /*
 144                  * 802.11b or 802.11g with 802.11b compatibility:
 145                  * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
 146                  * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
 147                  *
 148                  * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
 149                  * aSIFSTime = 10 usec
 150                  * aPreambleLength = 144 usec or 72 usec with short preamble
 151                  * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
 152                  */
 153                 dur = 10; /* aSIFSTime = 10 usec */
 154                 dur += short_preamble ? (72 + 24) : (144 + 48);
 155
 156                 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
 157         }
 158
 159         return dur;
 160 }
 161
 162 /* Exported duration function for driver use */
 163 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
 164                                         struct ieee80211_vif *vif,
 165                                         enum ieee80211_band band,
 166                                         size_t frame_len,
 167                                         struct ieee80211_rate *rate)
 168 {
 169         struct ieee80211_sub_if_data *sdata;
 170         u16 dur;
 171         int erp;
 172         bool short_preamble = false;
 173
 174         erp = 0;
 175         if (vif) {
 176                 sdata = vif_to_sdata(vif);
 177                 short_preamble = sdata->vif.bss_conf.use_short_preamble;
 178                 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
 179                         erp = rate->flags & IEEE80211_RATE_ERP_G;
 180         }
 181
 182         dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
 183                                        short_preamble);
 184
 185         return cpu_to_le16(dur);
 186 }
 187 EXPORT_SYMBOL(ieee80211_generic_frame_duration);
 188
 189 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
 190                               struct ieee80211_vif *vif, size_t frame_len,
 191                               const struct ieee80211_tx_info *frame_txctl)
 192 {
 193         struct ieee80211_local *local = hw_to_local(hw);
 194         struct ieee80211_rate *rate;
 195         struct ieee80211_sub_if_data *sdata;
 196         bool short_preamble;
 197         int erp;
 198         u16 dur;
 199         struct ieee80211_supported_band *sband;
 200
 201         sband = local->hw.wiphy->bands[frame_txctl->band];
 202
 203         short_preamble = false;
 204
 205         rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
 206
 207         erp = 0;
 208         if (vif) {
 209                 sdata = vif_to_sdata(vif);
 210                 short_preamble = sdata->vif.bss_conf.use_short_preamble;
 211                 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
 212                         erp = rate->flags & IEEE80211_RATE_ERP_G;
 213         }
 214
 215         /* CTS duration */
 216         dur = ieee80211_frame_duration(sband->band, 10, rate->bitrate,
 217                                        erp, short_preamble);
 218         /* Data frame duration */
 219         dur += ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
 220                                         erp, short_preamble);
 221         /* ACK duration */
 222         dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
 223                                         erp, short_preamble);
 224
 225         return cpu_to_le16(dur);
 226 }
 227 EXPORT_SYMBOL(ieee80211_rts_duration);
 228
 229 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
 230                                     struct ieee80211_vif *vif,
 231                                     size_t frame_len,
 232                                     const struct ieee80211_tx_info *frame_txctl)
 233 {
 234         struct ieee80211_local *local = hw_to_local(hw);
 235         struct ieee80211_rate *rate;
 236         struct ieee80211_sub_if_data *sdata;
 237         bool short_preamble;
 238         int erp;
 239         u16 dur;
 240         struct ieee80211_supported_band *sband;
 241
 242         sband = local->hw.wiphy->bands[frame_txctl->band];
 243
 244         short_preamble = false;
 245
 246         rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
 247         erp = 0;
 248         if (vif) {
 249                 sdata = vif_to_sdata(vif);
 250                 short_preamble = sdata->vif.bss_conf.use_short_preamble;
 251                 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
 252                         erp = rate->flags & IEEE80211_RATE_ERP_G;
 253         }
 254
 255         /* Data frame duration */
 256         dur = ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
 257                                        erp, short_preamble);
 258         if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
 259                 /* ACK duration */
 260                 dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
 261                                                 erp, short_preamble);
 262         }
 263
 264         return cpu_to_le16(dur);
 265 }
 266 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
 267
 268 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
 269 {
 270         struct ieee80211_sub_if_data *sdata;
 271
 272         list_for_each_entry_rcu(sdata, &local->interfaces, list) {
 273                 int ac;
 274
 275                 if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
 276                         continue;
 277
 278                 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
 279                     local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
 280                         continue;
 281
 282                 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
 283                         int ac_queue = sdata->vif.hw_queue[ac];
 284
 285                         if (ac_queue == queue ||
 286                             (sdata->vif.cab_queue == queue &&
 287                              local->queue_stop_reasons[ac_queue] == 0 &&
 288                              skb_queue_empty(&local->pending[ac_queue])))
 289                                 netif_wake_subqueue(sdata->dev, ac);
 290                 }
 291         }
 292 }
 293
 294 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
 295                                    enum queue_stop_reason reason)
 296 {
 297         struct ieee80211_local *local = hw_to_local(hw);
 298
 299         trace_wake_queue(local, queue, reason);
 300
 301         if (WARN_ON(queue >= hw->queues))
 302                 return;
 303
 304         if (!test_bit(reason, &local->queue_stop_reasons[queue]))
 305                 return;
 306
 307         __clear_bit(reason, &local->queue_stop_reasons[queue]);
 308
 309         if (local->queue_stop_reasons[queue] != 0)
 310                 /* someone still has this queue stopped */
 311                 return;
 312
 313         if (skb_queue_empty(&local->pending[queue])) {
 314                 rcu_read_lock();
 315                 ieee80211_propagate_queue_wake(local, queue);
 316                 rcu_read_unlock();
 317         } else
 318                 tasklet_schedule(&local->tx_pending_tasklet);
 319 }
 320
 321 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
 322                                     enum queue_stop_reason reason)
 323 {
 324         struct ieee80211_local *local = hw_to_local(hw);
 325         unsigned long flags;
 326
 327         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 328         __ieee80211_wake_queue(hw, queue, reason);
 329         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 330 }
 331
 332 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
 333 {
 334         ieee80211_wake_queue_by_reason(hw, queue,
 335                                        IEEE80211_QUEUE_STOP_REASON_DRIVER);
 336 }
 337 EXPORT_SYMBOL(ieee80211_wake_queue);
 338
 339 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
 340                                    enum queue_stop_reason reason)
 341 {
 342         struct ieee80211_local *local = hw_to_local(hw);
 343         struct ieee80211_sub_if_data *sdata;
 344
 345         trace_stop_queue(local, queue, reason);
 346
 347         if (WARN_ON(queue >= hw->queues))
 348                 return;
 349
 350         if (test_bit(reason, &local->queue_stop_reasons[queue]))
 351                 return;
 352
 353         __set_bit(reason, &local->queue_stop_reasons[queue]);
 354
 355         rcu_read_lock();
 356         list_for_each_entry_rcu(sdata, &local->interfaces, list) {
 357                 int ac;
 358
 359                 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
 360                         if (sdata->vif.hw_queue[ac] == queue ||
 361                             sdata->vif.cab_queue == queue)
 362                                 netif_stop_subqueue(sdata->dev, ac);
 363                 }
 364         }
 365         rcu_read_unlock();
 366 }
 367
 368 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
 369                                     enum queue_stop_reason reason)
 370 {
 371         struct ieee80211_local *local = hw_to_local(hw);
 372         unsigned long flags;
 373
 374         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 375         __ieee80211_stop_queue(hw, queue, reason);
 376         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 377 }
 378
 379 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
 380 {
 381         ieee80211_stop_queue_by_reason(hw, queue,
 382                                        IEEE80211_QUEUE_STOP_REASON_DRIVER);
 383 }
 384 EXPORT_SYMBOL(ieee80211_stop_queue);
 385
 386 void ieee80211_add_pending_skb(struct ieee80211_local *local,
 387                                struct sk_buff *skb)
 388 {
 389         struct ieee80211_hw *hw = &local->hw;
 390         unsigned long flags;
 391         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
 392         int queue = info->hw_queue;
 393
 394         if (WARN_ON(!info->control.vif)) {
 395                 kfree_skb(skb);
 396                 return;
 397         }
 398
 399         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 400         __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
 401         __skb_queue_tail(&local->pending[queue], skb);
 402         __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
 403         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 404 }
 405
 406 void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
 407                                    struct sk_buff_head *skbs,
 408                                    void (*fn)(void *data), void *data)
 409 {
 410         struct ieee80211_hw *hw = &local->hw;
 411         struct sk_buff *skb;
 412         unsigned long flags;
 413         int queue, i;
 414
 415         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 416         while ((skb = skb_dequeue(skbs))) {
 417                 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
 418
 419                 if (WARN_ON(!info->control.vif)) {
 420                         kfree_skb(skb);
 421                         continue;
 422                 }
 423
 424                 queue = info->hw_queue;
 425
 426                 __ieee80211_stop_queue(hw, queue,
 427                                 IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
 428
 429                 __skb_queue_tail(&local->pending[queue], skb);
 430         }
 431
 432         if (fn)
 433                 fn(data);
 434
 435         for (i = 0; i < hw->queues; i++)
 436                 __ieee80211_wake_queue(hw, i,
 437                         IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
 438         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 439 }
 440
 441 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
 442                                     enum queue_stop_reason reason)
 443 {
 444         struct ieee80211_local *local = hw_to_local(hw);
 445         unsigned long flags;
 446         int i;
 447
 448         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 449
 450         for (i = 0; i < hw->queues; i++)
 451                 __ieee80211_stop_queue(hw, i, reason);
 452
 453         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 454 }
 455
 456 void ieee80211_stop_queues(struct ieee80211_hw *hw)
 457 {
 458         ieee80211_stop_queues_by_reason(hw,
 459                                         IEEE80211_QUEUE_STOP_REASON_DRIVER);
 460 }
 461 EXPORT_SYMBOL(ieee80211_stop_queues);
 462
 463 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
 464 {
 465         struct ieee80211_local *local = hw_to_local(hw);
 466         unsigned long flags;
 467         int ret;
 468
 469         if (WARN_ON(queue >= hw->queues))
 470                 return true;
 471
 472         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 473         ret = !!local->queue_stop_reasons[queue];
 474         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 475         return ret;
 476 }
 477 EXPORT_SYMBOL(ieee80211_queue_stopped);
 478
 479 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
 480                                      enum queue_stop_reason reason)
 481 {
 482         struct ieee80211_local *local = hw_to_local(hw);
 483         unsigned long flags;
 484         int i;
 485
 486         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 487
 488         for (i = 0; i < hw->queues; i++)
 489                 __ieee80211_wake_queue(hw, i, reason);
 490
 491         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 492 }
 493
 494 void ieee80211_wake_queues(struct ieee80211_hw *hw)
 495 {
 496         ieee80211_wake_queues_by_reason(hw, IEEE80211_QUEUE_STOP_REASON_DRIVER);
 497 }
 498 EXPORT_SYMBOL(ieee80211_wake_queues);
 499
 500 void ieee80211_iterate_active_interfaces(
 501         struct ieee80211_hw *hw,
 502         void (*iterator)(void *data, u8 *mac,
 503                          struct ieee80211_vif *vif),
 504         void *data)
 505 {
 506         struct ieee80211_local *local = hw_to_local(hw);
 507         struct ieee80211_sub_if_data *sdata;
 508
 509         mutex_lock(&local->iflist_mtx);
 510
 511         list_for_each_entry(sdata, &local->interfaces, list) {
 512                 switch (sdata->vif.type) {
 513                 case NL80211_IFTYPE_MONITOR:
 514                 case NL80211_IFTYPE_AP_VLAN:
 515                         continue;
 516                 default:
 517                         break;
 518                 }
 519                 if (ieee80211_sdata_running(sdata))
 520                         iterator(data, sdata->vif.addr,
 521                                  &sdata->vif);
 522         }
 523
 524         mutex_unlock(&local->iflist_mtx);
 525 }
 526 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);
 527
 528 void ieee80211_iterate_active_interfaces_atomic(
 529         struct ieee80211_hw *hw,
 530         void (*iterator)(void *data, u8 *mac,
 531                          struct ieee80211_vif *vif),
 532         void *data)
 533 {
 534         struct ieee80211_local *local = hw_to_local(hw);
 535         struct ieee80211_sub_if_data *sdata;
 536
 537         rcu_read_lock();
 538
 539         list_for_each_entry_rcu(sdata, &local->interfaces, list) {
 540                 switch (sdata->vif.type) {
 541                 case NL80211_IFTYPE_MONITOR:
 542                 case NL80211_IFTYPE_AP_VLAN:
 543                         continue;
 544                 default:
 545                         break;
 546                 }
 547                 if (ieee80211_sdata_running(sdata))
 548                         iterator(data, sdata->vif.addr,
 549                                  &sdata->vif);
 550         }
 551
 552         rcu_read_unlock();
 553 }
 554 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
 555
 556 /*
 557  * Nothing should have been stuffed into the workqueue during
 558  * the suspend->resume cycle. If this WARN is seen then there
 559  * is a bug with either the driver suspend or something in
 560  * mac80211 stuffing into the workqueue which we haven't yet
 561  * cleared during mac80211's suspend cycle.
 562  */
 563 static bool ieee80211_can_queue_work(struct ieee80211_local *local)
 564 {
 565         if (WARN(local->suspended && !local->resuming,
 566                  "queueing ieee80211 work while going to suspend\n"))
 567                 return false;
 568
 569         return true;
 570 }
 571
 572 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
 573 {
 574         struct ieee80211_local *local = hw_to_local(hw);
 575
 576         if (!ieee80211_can_queue_work(local))
 577                 return;
 578
 579         queue_work(local->workqueue, work);
 580 }
 581 EXPORT_SYMBOL(ieee80211_queue_work);
 582
 583 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
 584                                   struct delayed_work *dwork,
 585                                   unsigned long delay)
 586 {
 587         struct ieee80211_local *local = hw_to_local(hw);
 588
 589         if (!ieee80211_can_queue_work(local))
 590                 return;
 591
 592         queue_delayed_work(local->workqueue, dwork, delay);
 593 }
 594 EXPORT_SYMBOL(ieee80211_queue_delayed_work);
 595
 596 u32 ieee802_11_parse_elems_crc(u8 *start, size_t len,
 597                                struct ieee802_11_elems *elems,
 598                                u64 filter, u32 crc)
 599 {
 600         size_t left = len;
 601         u8 *pos = start;
 602         bool calc_crc = filter != 0;
 603         DECLARE_BITMAP(seen_elems, 256);
 604
 605         bitmap_zero(seen_elems, 256);
 606         memset(elems, 0, sizeof(*elems));
 607         elems->ie_start = start;
 608         elems->total_len = len;
 609
 610         while (left >= 2) {
 611                 u8 id, elen;
 612                 bool elem_parse_failed;
 613
 614                 id = *pos++;
 615                 elen = *pos++;
 616                 left -= 2;
 617
 618                 if (elen > left) {
 619                         elems->parse_error = true;
 620                         break;
 621                 }
 622
 623                 if (id != WLAN_EID_VENDOR_SPECIFIC &&
 624                     id != WLAN_EID_QUIET &&
 625                     test_bit(id, seen_elems)) {
 626                         elems->parse_error = true;
 627                         left -= elen;
 628                         pos += elen;
 629                         continue;
 630                 }
 631
 632                 if (calc_crc && id < 64 && (filter & (1ULL << id)))
 633                         crc = crc32_be(crc, pos - 2, elen + 2);
 634
 635                 elem_parse_failed = false;
 636
 637                 switch (id) {
 638                 case WLAN_EID_SSID:
 639                         elems->ssid = pos;
 640                         elems->ssid_len = elen;
 641                         break;
 642                 case WLAN_EID_SUPP_RATES:
 643                         elems->supp_rates = pos;
 644                         elems->supp_rates_len = elen;
 645                         break;
 646                 case WLAN_EID_FH_PARAMS:
 647                         elems->fh_params = pos;
 648                         elems->fh_params_len = elen;
 649                         break;
 650                 case WLAN_EID_DS_PARAMS:
 651                         elems->ds_params = pos;
 652                         elems->ds_params_len = elen;
 653                         break;
 654                 case WLAN_EID_CF_PARAMS:
 655                         elems->cf_params = pos;
 656                         elems->cf_params_len = elen;
 657                         break;
 658                 case WLAN_EID_TIM:
 659                         if (elen >= sizeof(struct ieee80211_tim_ie)) {
 660                                 elems->tim = (void *)pos;
 661                                 elems->tim_len = elen;
 662                         } else
 663                                 elem_parse_failed = true;
 664                         break;
 665                 case WLAN_EID_IBSS_PARAMS:
 666                         elems->ibss_params = pos;
 667                         elems->ibss_params_len = elen;
 668                         break;
 669                 case WLAN_EID_CHALLENGE:
 670                         elems->challenge = pos;
 671                         elems->challenge_len = elen;
 672                         break;
 673                 case WLAN_EID_VENDOR_SPECIFIC:
 674                         if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
 675                             pos[2] == 0xf2) {
 676                                 /* Microsoft OUI (00:50:F2) */
 677
 678                                 if (calc_crc)
 679                                         crc = crc32_be(crc, pos - 2, elen + 2);
 680
 681                                 if (pos[3] == 1) {
 682                                         /* OUI Type 1 - WPA IE */
 683                                         elems->wpa = pos;
 684                                         elems->wpa_len = elen;
 685                                 } else if (elen >= 5 && pos[3] == 2) {
 686                                         /* OUI Type 2 - WMM IE */
 687                                         if (pos[4] == 0) {
 688                                                 elems->wmm_info = pos;
 689                                                 elems->wmm_info_len = elen;
 690                                         } else if (pos[4] == 1) {
 691                                                 elems->wmm_param = pos;
 692                                                 elems->wmm_param_len = elen;
 693                                         }
 694                                 }
 695                         }
 696                         break;
 697                 case WLAN_EID_RSN:
 698                         elems->rsn = pos;
 699                         elems->rsn_len = elen;
 700                         break;
 701                 case WLAN_EID_ERP_INFO:
 702                         elems->erp_info = pos;
 703                         elems->erp_info_len = elen;
 704                         break;
 705                 case WLAN_EID_EXT_SUPP_RATES:
 706                         elems->ext_supp_rates = pos;
 707                         elems->ext_supp_rates_len = elen;
 708                         break;
 709                 case WLAN_EID_HT_CAPABILITY:
 710                         if (elen >= sizeof(struct ieee80211_ht_cap))
 711                                 elems->ht_cap_elem = (void *)pos;
 712                         else
 713                                 elem_parse_failed = true;
 714                         break;
 715                 case WLAN_EID_HT_OPERATION:
 716                         if (elen >= sizeof(struct ieee80211_ht_operation))
 717                                 elems->ht_operation = (void *)pos;
 718                         else
 719                                 elem_parse_failed = true;
 720                         break;
 721                 case WLAN_EID_MESH_ID:
 722                         elems->mesh_id = pos;
 723                         elems->mesh_id_len = elen;
 724                         break;
 725                 case WLAN_EID_MESH_CONFIG:
 726                         if (elen >= sizeof(struct ieee80211_meshconf_ie))
 727                                 elems->mesh_config = (void *)pos;
 728                         else
 729                                 elem_parse_failed = true;
 730                         break;
 731                 case WLAN_EID_PEER_MGMT:
 732                         elems->peering = pos;
 733                         elems->peering_len = elen;
 734                         break;
 735                 case WLAN_EID_PREQ:
 736                         elems->preq = pos;
 737                         elems->preq_len = elen;
 738                         break;
 739                 case WLAN_EID_PREP:
 740                         elems->prep = pos;
 741                         elems->prep_len = elen;
 742                         break;
 743                 case WLAN_EID_PERR:
 744                         elems->perr = pos;
 745                         elems->perr_len = elen;
 746                         break;
 747                 case WLAN_EID_RANN:
 748                         if (elen >= sizeof(struct ieee80211_rann_ie))
 749                                 elems->rann = (void *)pos;
 750                         else
 751                                 elem_parse_failed = true;
 752                         break;
 753                 case WLAN_EID_CHANNEL_SWITCH:
 754                         elems->ch_switch_elem = pos;
 755                         elems->ch_switch_elem_len = elen;
 756                         break;
 757                 case WLAN_EID_QUIET:
 758                         if (!elems->quiet_elem) {
 759                                 elems->quiet_elem = pos;
 760                                 elems->quiet_elem_len = elen;
 761                         }
 762                         elems->num_of_quiet_elem++;
 763                         break;
 764                 case WLAN_EID_COUNTRY:
 765                         elems->country_elem = pos;
 766                         elems->country_elem_len = elen;
 767                         break;
 768                 case WLAN_EID_PWR_CONSTRAINT:
 769                         elems->pwr_constr_elem = pos;
 770                         elems->pwr_constr_elem_len = elen;
 771                         break;
 772                 case WLAN_EID_TIMEOUT_INTERVAL:
 773                         elems->timeout_int = pos;
 774                         elems->timeout_int_len = elen;
 775                         break;
 776                 default:
 777                         break;
 778                 }
 779
 780                 if (elem_parse_failed)
 781                         elems->parse_error = true;
 782                 else
 783                         set_bit(id, seen_elems);
 784
 785                 left -= elen;
 786                 pos += elen;
 787         }
 788
 789         if (left != 0)
 790                 elems->parse_error = true;
 791
 792         return crc;
 793 }
 794
 795 void ieee802_11_parse_elems(u8 *start, size_t len,
 796                             struct ieee802_11_elems *elems)
 797 {
 798         ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
 799 }
 800
 801 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
 802                                bool bss_notify)
 803 {
 804         struct ieee80211_local *local = sdata->local;
 805         struct ieee80211_tx_queue_params qparam;
 806         int ac;
 807         bool use_11b, enable_qos;
 808         int aCWmin, aCWmax;
 809
 810         if (!local->ops->conf_tx)
 811                 return;
 812
 813         if (local->hw.queues < IEEE80211_NUM_ACS)
 814                 return;
 815
 816         memset(&qparam, 0, sizeof(qparam));
 817
 818         use_11b = (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) &&
 819                  !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
 820
 821         /*
 822          * By default disable QoS in STA mode for old access points, which do
 823          * not support 802.11e. New APs will provide proper queue parameters,
 824          * that we will configure later.
 825          */
 826         enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);
 827
 828         for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
 829                 /* Set defaults according to 802.11-2007 Table 7-37 */
 830                 aCWmax = 1023;
 831                 if (use_11b)
 832                         aCWmin = 31;
 833                 else
 834                         aCWmin = 15;
 835
 836                 if (enable_qos) {
 837                         switch (ac) {
 838                         case IEEE80211_AC_BK:
 839                                 qparam.cw_max = aCWmax;
 840                                 qparam.cw_min = aCWmin;
 841                                 qparam.txop = 0;
 842                                 qparam.aifs = 7;
 843                                 break;
 844                         /* never happens but let's not leave undefined */
 845                         default:
 846                         case IEEE80211_AC_BE:
 847                                 qparam.cw_max = aCWmax;
 848                                 qparam.cw_min = aCWmin;
 849                                 qparam.txop = 0;
 850                                 qparam.aifs = 3;
 851                                 break;
 852                         case IEEE80211_AC_VI:
 853                                 qparam.cw_max = aCWmin;
 854                                 qparam.cw_min = (aCWmin + 1) / 2 - 1;
 855                                 if (use_11b)
 856                                         qparam.txop = 6016/32;
 857                                 else
 858                                         qparam.txop = 3008/32;
 859                                 qparam.aifs = 2;
 860                                 break;
 861                         case IEEE80211_AC_VO:
 862                                 qparam.cw_max = (aCWmin + 1) / 2 - 1;
 863                                 qparam.cw_min = (aCWmin + 1) / 4 - 1;
 864                                 if (use_11b)
 865                                         qparam.txop = 3264/32;
 866                                 else
 867                                         qparam.txop = 1504/32;
 868                                 qparam.aifs = 2;
 869                                 break;
 870                         }
 871                 } else {
 872                         /* Confiure old 802.11b/g medium access rules. */
 873                         qparam.cw_max = aCWmax;
 874                         qparam.cw_min = aCWmin;
 875                         qparam.txop = 0;
 876                         qparam.aifs = 2;
 877                 }
 878
 879                 qparam.uapsd = false;
 880
 881                 sdata->tx_conf[ac] = qparam;
 882                 drv_conf_tx(local, sdata, ac, &qparam);
 883         }
 884
 885         if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
 886                 sdata->vif.bss_conf.qos = enable_qos;
 887                 if (bss_notify)
 888                         ieee80211_bss_info_change_notify(sdata,
 889                                                          BSS_CHANGED_QOS);
 890         }
 891 }
 892
 893 void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
 894                                   const size_t supp_rates_len,
 895                                   const u8 *supp_rates)
 896 {
 897         struct ieee80211_local *local = sdata->local;
 898         int i, have_higher_than_11mbit = 0;
 899
 900         /* cf. IEEE 802.11 9.2.12 */
 901         for (i = 0; i < supp_rates_len; i++)
 902                 if ((supp_rates[i] & 0x7f) * 5 > 110)
 903                         have_higher_than_11mbit = 1;
 904
 905         if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
 906             have_higher_than_11mbit)
 907                 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
 908         else
 909                 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
 910
 911         ieee80211_set_wmm_default(sdata, true);
 912 }
 913
 914 u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
 915                               enum ieee80211_band band)
 916 {
 917         struct ieee80211_supported_band *sband;
 918         struct ieee80211_rate *bitrates;
 919         u32 mandatory_rates;
 920         enum ieee80211_rate_flags mandatory_flag;
 921         int i;
 922
 923         sband = local->hw.wiphy->bands[band];
 924         if (WARN_ON(!sband))
 925                 return 1;
 926
 927         if (band == IEEE80211_BAND_2GHZ)
 928                 mandatory_flag = IEEE80211_RATE_MANDATORY_B;
 929         else
 930                 mandatory_flag = IEEE80211_RATE_MANDATORY_A;
 931
 932         bitrates = sband->bitrates;
 933         mandatory_rates = 0;
 934         for (i = 0; i < sband->n_bitrates; i++)
 935                 if (bitrates[i].flags & mandatory_flag)
 936                         mandatory_rates |= BIT(i);
 937         return mandatory_rates;
 938 }
 939
 940 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
 941                          u16 transaction, u16 auth_alg,
 942                          u8 *extra, size_t extra_len, const u8 *da,
 943                          const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx)
 944 {
 945         struct ieee80211_local *local = sdata->local;
 946         struct sk_buff *skb;
 947         struct ieee80211_mgmt *mgmt;
 948         int err;
 949
 950         skb = dev_alloc_skb(local->hw.extra_tx_headroom +
 951                             sizeof(*mgmt) + 6 + extra_len);
 952         if (!skb)
 953                 return;
 954
 955         skb_reserve(skb, local->hw.extra_tx_headroom);
 956
 957         mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
 958         memset(mgmt, 0, 24 + 6);
 959         mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 960                                           IEEE80211_STYPE_AUTH);
 961         memcpy(mgmt->da, da, ETH_ALEN);
 962         memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
 963         memcpy(mgmt->bssid, bssid, ETH_ALEN);
 964         mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
 965         mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
 966         mgmt->u.auth.status_code = cpu_to_le16(0);
 967         if (extra)
 968                 memcpy(skb_put(skb, extra_len), extra, extra_len);
 969
 970         if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
 971                 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
 972                 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
 973                 WARN_ON(err);
 974         }
 975
 976         IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
 977         ieee80211_tx_skb(sdata, skb);
 978 }
 979
 980 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
 981                              const u8 *ie, size_t ie_len,
 982                              enum ieee80211_band band, u32 rate_mask,
 983                              u8 channel)
 984 {
 985         struct ieee80211_supported_band *sband;
 986         u8 *pos;
 987         size_t offset = 0, noffset;
 988         int supp_rates_len, i;
 989         u8 rates[32];
 990         int num_rates;
 991         int ext_rates_len;
 992
 993         sband = local->hw.wiphy->bands[band];
 994
 995         pos = buffer;
 996
 997         num_rates = 0;
 998         for (i = 0; i < sband->n_bitrates; i++) {
 999                 if ((BIT(i) & rate_mask) == 0)
1000                         continue; /* skip rate */
1001                 rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
1002         }
1003
1004         supp_rates_len = min_t(int, num_rates, 8);
1005
1006         *pos++ = WLAN_EID_SUPP_RATES;
1007         *pos++ = supp_rates_len;
1008         memcpy(pos, rates, supp_rates_len);
1009         pos += supp_rates_len;
1010
1011         /* insert "request information" if in custom IEs */
1012         if (ie && ie_len) {
1013                 static const u8 before_extrates[] = {
1014                         WLAN_EID_SSID,
1015                         WLAN_EID_SUPP_RATES,
1016                         WLAN_EID_REQUEST,
1017                 };
1018                 noffset = ieee80211_ie_split(ie, ie_len,
1019                                              before_extrates,
1020                                              ARRAY_SIZE(before_extrates),
1021                                              offset);
1022                 memcpy(pos, ie + offset, noffset - offset);
1023                 pos += noffset - offset;
1024                 offset = noffset;
1025         }
1026
1027         ext_rates_len = num_rates - supp_rates_len;
1028         if (ext_rates_len > 0) {
1029                 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1030                 *pos++ = ext_rates_len;
1031                 memcpy(pos, rates + supp_rates_len, ext_rates_len);
1032                 pos += ext_rates_len;
1033         }
1034
1035         if (channel && sband->band == IEEE80211_BAND_2GHZ) {
1036                 *pos++ = WLAN_EID_DS_PARAMS;
1037                 *pos++ = 1;
1038                 *pos++ = channel;
1039         }
1040
1041         /* insert custom IEs that go before HT */
1042         if (ie && ie_len) {
1043                 static const u8 before_ht[] = {
1044                         WLAN_EID_SSID,
1045                         WLAN_EID_SUPP_RATES,
1046                         WLAN_EID_REQUEST,
1047                         WLAN_EID_EXT_SUPP_RATES,
1048                         WLAN_EID_DS_PARAMS,
1049                         WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1050                 };
1051                 noffset = ieee80211_ie_split(ie, ie_len,
1052                                              before_ht, ARRAY_SIZE(before_ht),
1053                                              offset);
1054                 memcpy(pos, ie + offset, noffset - offset);
1055                 pos += noffset - offset;
1056                 offset = noffset;
1057         }
1058
1059         if (sband->ht_cap.ht_supported)
1060                 pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
1061                                                 sband->ht_cap.cap);
1062
1063         /*
1064          * If adding more here, adjust code in main.c
1065          * that calculates local->scan_ies_len.
1066          */
1067
1068         /* add any remaining custom IEs */
1069         if (ie && ie_len) {
1070                 noffset = ie_len;
1071                 memcpy(pos, ie + offset, noffset - offset);
1072                 pos += noffset - offset;
1073         }
1074
1075         return pos - buffer;
1076 }
1077
1078 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1079                                           u8 *dst, u32 ratemask,
1080                                           const u8 *ssid, size_t ssid_len,
1081                                           const u8 *ie, size_t ie_len,
1082                                           bool directed)
1083 {
1084         struct ieee80211_local *local = sdata->local;
1085         struct sk_buff *skb;
1086         struct ieee80211_mgmt *mgmt;
1087         size_t buf_len;
1088         u8 *buf;
1089         u8 chan;
1090
1091         /* FIXME: come up with a proper value */
1092         buf = kmalloc(200 + ie_len, GFP_KERNEL);
1093         if (!buf)
1094                 return NULL;
1095
1096         /*
1097          * Do not send DS Channel parameter for directed probe requests
1098          * in order to maximize the chance that we get a response.  Some
1099          * badly-behaved APs don't respond when this parameter is included.
1100          */
1101         if (directed)
1102                 chan = 0;
1103         else
1104                 chan = ieee80211_frequency_to_channel(
1105                         local->hw.conf.channel->center_freq);
1106
1107         buf_len = ieee80211_build_preq_ies(local, buf, ie, ie_len,
1108                                            local->hw.conf.channel->band,
1109                                            ratemask, chan);
1110
1111         skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1112                                      ssid, ssid_len,
1113                                      buf, buf_len);
1114         if (!skb)
1115                 goto out;
1116
1117         if (dst) {
1118                 mgmt = (struct ieee80211_mgmt *) skb->data;
1119                 memcpy(mgmt->da, dst, ETH_ALEN);
1120                 memcpy(mgmt->bssid, dst, ETH_ALEN);
1121         }
1122
1123         IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1124
1125  out:
1126         kfree(buf);
1127
1128         return skb;
1129 }
1130
1131 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
1132                               const u8 *ssid, size_t ssid_len,
1133                               const u8 *ie, size_t ie_len,
1134                               u32 ratemask, bool directed, bool no_cck)
1135 {
1136         struct sk_buff *skb;
1137
1138         skb = ieee80211_build_probe_req(sdata, dst, ratemask, ssid, ssid_len,
1139                                         ie, ie_len, directed);
1140         if (skb) {
1141                 if (no_cck)
1142                         IEEE80211_SKB_CB(skb)->flags |=
1143                                 IEEE80211_TX_CTL_NO_CCK_RATE;
1144                 ieee80211_tx_skb(sdata, skb);
1145         }
1146 }
1147
1148 u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
1149                             struct ieee802_11_elems *elems,
1150                             enum ieee80211_band band, u32 *basic_rates)
1151 {
1152         struct ieee80211_supported_band *sband;
1153         struct ieee80211_rate *bitrates;
1154         size_t num_rates;
1155         u32 supp_rates;
1156         int i, j;
1157         sband = local->hw.wiphy->bands[band];
1158
1159         if (WARN_ON(!sband))
1160                 return 1;
1161
1162         bitrates = sband->bitrates;
1163         num_rates = sband->n_bitrates;
1164         supp_rates = 0;
1165         for (i = 0; i < elems->supp_rates_len +
1166                      elems->ext_supp_rates_len; i++) {
1167                 u8 rate = 0;
1168                 int own_rate;
1169                 bool is_basic;
1170                 if (i < elems->supp_rates_len)
1171                         rate = elems->supp_rates[i];
1172                 else if (elems->ext_supp_rates)
1173                         rate = elems->ext_supp_rates
1174                                 [i - elems->supp_rates_len];
1175                 own_rate = 5 * (rate & 0x7f);
1176                 is_basic = !!(rate & 0x80);
1177
1178                 if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
1179                         continue;
1180
1181                 for (j = 0; j < num_rates; j++) {
1182                         if (bitrates[j].bitrate == own_rate) {
1183                                 supp_rates |= BIT(j);
1184                                 if (basic_rates && is_basic)
1185                                         *basic_rates |= BIT(j);
1186                         }
1187                 }
1188         }
1189         return supp_rates;
1190 }
1191
1192 void ieee80211_stop_device(struct ieee80211_local *local)
1193 {
1194         ieee80211_led_radio(local, false);
1195         ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1196
1197         cancel_work_sync(&local->reconfig_filter);
1198
1199         flush_workqueue(local->workqueue);
1200         drv_stop(local);
1201 }
1202
1203 int ieee80211_reconfig(struct ieee80211_local *local)
1204 {
1205         struct ieee80211_hw *hw = &local->hw;
1206         struct ieee80211_sub_if_data *sdata;
1207         struct sta_info *sta;
1208         int res, i;
1209
1210 #ifdef CONFIG_PM
1211         if (local->suspended)
1212                 local->resuming = true;
1213
1214         if (local->wowlan) {
1215                 local->wowlan = false;
1216                 res = drv_resume(local);
1217                 if (res < 0) {
1218                         local->resuming = false;
1219                         return res;
1220                 }
1221                 if (res == 0)
1222                         goto wake_up;
1223                 WARN_ON(res > 1);
1224                 /*
1225                  * res is 1, which means the driver requested
1226                  * to go through a regular reset on wakeup.
1227                  */
1228         }
1229 #endif
1230         /* everything else happens only if HW was up & running */
1231         if (!local->open_count)
1232                 goto wake_up;
1233
1234         /*
1235          * Upon resume hardware can sometimes be goofy due to
1236          * various platform / driver / bus issues, so restarting
1237          * the device may at times not work immediately. Propagate
1238          * the error.
1239          */
1240         res = drv_start(local);
1241         if (res) {
1242                 WARN(local->suspended, "Hardware became unavailable "
1243                      "upon resume. This could be a software issue "
1244                      "prior to suspend or a hardware issue.\n");
1245                 return res;
1246         }
1247
1248         /* setup fragmentation threshold */
1249         drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
1250
1251         /* setup RTS threshold */
1252         drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
1253
1254         /* reset coverage class */
1255         drv_set_coverage_class(local, hw->wiphy->coverage_class);
1256
1257         ieee80211_led_radio(local, true);
1258         ieee80211_mod_tpt_led_trig(local,
1259                                    IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1260
1261         /* add interfaces */
1262         sdata = rtnl_dereference(local->monitor_sdata);
1263         if (sdata) {
1264                 res = drv_add_interface(local, sdata);
1265                 if (WARN_ON(res)) {
1266                         rcu_assign_pointer(local->monitor_sdata, NULL);
1267                         synchronize_net();
1268                         kfree(sdata);
1269                 }
1270         }
1271
1272         list_for_each_entry(sdata, &local->interfaces, list) {
1273                 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1274                     sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1275                     ieee80211_sdata_running(sdata))
1276                         res = drv_add_interface(local, sdata);
1277         }
1278
1279         /* add STAs back */
1280         mutex_lock(&local->sta_mtx);
1281         list_for_each_entry(sta, &local->sta_list, list) {
1282                 enum ieee80211_sta_state state;
1283
1284                 if (!sta->uploaded)
1285                         continue;
1286
1287                 /* AP-mode stations will be added later */
1288                 if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
1289                         continue;
1290
1291                 for (state = IEEE80211_STA_NOTEXIST;
1292                      state < sta->sta_state; state++)
1293                         WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1294                                               state + 1));
1295         }
1296         mutex_unlock(&local->sta_mtx);
1297
1298         /* reconfigure tx conf */
1299         if (hw->queues >= IEEE80211_NUM_ACS) {
1300                 list_for_each_entry(sdata, &local->interfaces, list) {
1301                         if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1302                             sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1303                             !ieee80211_sdata_running(sdata))
1304                                 continue;
1305
1306                         for (i = 0; i < IEEE80211_NUM_ACS; i++)
1307                                 drv_conf_tx(local, sdata, i,
1308                                             &sdata->tx_conf[i]);
1309                 }
1310         }
1311
1312         /* reconfigure hardware */
1313         ieee80211_hw_config(local, ~0);
1314
1315         ieee80211_configure_filter(local);
1316
1317         /* Finally also reconfigure all the BSS information */
1318         list_for_each_entry(sdata, &local->interfaces, list) {
1319                 u32 changed;
1320
1321                 if (!ieee80211_sdata_running(sdata))
1322                         continue;
1323
1324                 /* common change flags for all interface types */
1325                 changed = BSS_CHANGED_ERP_CTS_PROT |
1326                           BSS_CHANGED_ERP_PREAMBLE |
1327                           BSS_CHANGED_ERP_SLOT |
1328                           BSS_CHANGED_HT |
1329                           BSS_CHANGED_BASIC_RATES |
1330                           BSS_CHANGED_BEACON_INT |
1331                           BSS_CHANGED_BSSID |
1332                           BSS_CHANGED_CQM |
1333                           BSS_CHANGED_QOS |
1334                           BSS_CHANGED_IDLE;
1335
1336                 switch (sdata->vif.type) {
1337                 case NL80211_IFTYPE_STATION:
1338                         changed |= BSS_CHANGED_ASSOC |
1339                                    BSS_CHANGED_ARP_FILTER;
1340                         mutex_lock(&sdata->u.mgd.mtx);
1341                         ieee80211_bss_info_change_notify(sdata, changed);
1342                         mutex_unlock(&sdata->u.mgd.mtx);
1343                         break;
1344                 case NL80211_IFTYPE_ADHOC:
1345                         changed |= BSS_CHANGED_IBSS;
1346                         /* fall through */
1347                 case NL80211_IFTYPE_AP:
1348                         changed |= BSS_CHANGED_SSID;
1349
1350                         if (sdata->vif.type == NL80211_IFTYPE_AP)
1351                                 changed |= BSS_CHANGED_AP_PROBE_RESP;
1352
1353                         /* fall through */
1354                 case NL80211_IFTYPE_MESH_POINT:
1355                         changed |= BSS_CHANGED_BEACON |
1356                                    BSS_CHANGED_BEACON_ENABLED;
1357                         ieee80211_bss_info_change_notify(sdata, changed);
1358                         break;
1359                 case NL80211_IFTYPE_WDS:
1360                         break;
1361                 case NL80211_IFTYPE_AP_VLAN:
1362                 case NL80211_IFTYPE_MONITOR:
1363                         /* ignore virtual */
1364                         break;
1365                 case NL80211_IFTYPE_UNSPECIFIED:
1366                 case NUM_NL80211_IFTYPES:
1367                 case NL80211_IFTYPE_P2P_CLIENT:
1368                 case NL80211_IFTYPE_P2P_GO:
1369                         WARN_ON(1);
1370                         break;
1371                 }
1372         }
1373
1374         ieee80211_recalc_ps(local, -1);
1375
1376         /*
1377          * The sta might be in psm against the ap (e.g. because
1378          * this was the state before a hw restart), so we
1379          * explicitly send a null packet in order to make sure
1380          * it'll sync against the ap (and get out of psm).
1381          */
1382         if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
1383                 list_for_each_entry(sdata, &local->interfaces, list) {
1384                         if (sdata->vif.type != NL80211_IFTYPE_STATION)
1385                                 continue;
1386
1387                         ieee80211_send_nullfunc(local, sdata, 0);
1388                 }
1389         }
1390
1391         /* APs are now beaconing, add back stations */
1392         mutex_lock(&local->sta_mtx);
1393         list_for_each_entry(sta, &local->sta_list, list) {
1394                 enum ieee80211_sta_state state;
1395
1396                 if (!sta->uploaded)
1397                         continue;
1398
1399                 if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
1400                         continue;
1401
1402                 for (state = IEEE80211_STA_NOTEXIST;
1403                      state < sta->sta_state; state++)
1404                         WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1405                                               state + 1));
1406         }
1407         mutex_unlock(&local->sta_mtx);
1408
1409         /* add back keys */
1410         list_for_each_entry(sdata, &local->interfaces, list)
1411                 if (ieee80211_sdata_running(sdata))
1412                         ieee80211_enable_keys(sdata);
1413
1414  wake_up:
1415         /*
1416          * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
1417          * sessions can be established after a resume.
1418          *
1419          * Also tear down aggregation sessions since reconfiguring
1420          * them in a hardware restart scenario is not easily done
1421          * right now, and the hardware will have lost information
1422          * about the sessions, but we and the AP still think they
1423          * are active. This is really a workaround though.
1424          */
1425         if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1426                 mutex_lock(&local->sta_mtx);
1427
1428                 list_for_each_entry(sta, &local->sta_list, list) {
1429                         ieee80211_sta_tear_down_BA_sessions(sta, true);
1430                         clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1431                 }
1432
1433                 mutex_unlock(&local->sta_mtx);
1434         }
1435
1436         ieee80211_wake_queues_by_reason(hw,
1437                         IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1438
1439         /*
1440          * If this is for hw restart things are still running.
1441          * We may want to change that later, however.
1442          */
1443         if (!local->suspended)
1444                 return 0;
1445
1446 #ifdef CONFIG_PM
1447         /* first set suspended false, then resuming */
1448         local->suspended = false;
1449         mb();
1450         local->resuming = false;
1451
1452         list_for_each_entry(sdata, &local->interfaces, list) {
1453                 switch(sdata->vif.type) {
1454                 case NL80211_IFTYPE_STATION:
1455                         ieee80211_sta_restart(sdata);
1456                         break;
1457                 case NL80211_IFTYPE_ADHOC:
1458                         ieee80211_ibss_restart(sdata);
1459                         break;
1460                 case NL80211_IFTYPE_MESH_POINT:
1461                         ieee80211_mesh_restart(sdata);
1462                         break;
1463                 default:
1464                         break;
1465                 }
1466         }
1467
1468         mod_timer(&local->sta_cleanup, jiffies + 1);
1469
1470         mutex_lock(&local->sta_mtx);
1471         list_for_each_entry(sta, &local->sta_list, list)
1472                 mesh_plink_restart(sta);
1473         mutex_unlock(&local->sta_mtx);
1474 #else
1475         WARN_ON(1);
1476 #endif
1477         return 0;
1478 }
1479
1480 void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
1481 {
1482         struct ieee80211_sub_if_data *sdata;
1483         struct ieee80211_local *local;
1484         struct ieee80211_key *key;
1485
1486         if (WARN_ON(!vif))
1487                 return;
1488
1489         sdata = vif_to_sdata(vif);
1490         local = sdata->local;
1491
1492         if (WARN_ON(!local->resuming))
1493                 return;
1494
1495         if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
1496                 return;
1497
1498         sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
1499
1500         mutex_lock(&local->key_mtx);
1501         list_for_each_entry(key, &sdata->key_list, list)
1502                 key->flags |= KEY_FLAG_TAINTED;
1503         mutex_unlock(&local->key_mtx);
1504 }
1505 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
1506
1507 static int check_mgd_smps(struct ieee80211_if_managed *ifmgd,
1508                           enum ieee80211_smps_mode *smps_mode)
1509 {
1510         if (ifmgd->associated) {
1511                 *smps_mode = ifmgd->ap_smps;
1512
1513                 if (*smps_mode == IEEE80211_SMPS_AUTOMATIC) {
1514                         if (ifmgd->powersave)
1515                                 *smps_mode = IEEE80211_SMPS_DYNAMIC;
1516                         else
1517                                 *smps_mode = IEEE80211_SMPS_OFF;
1518                 }
1519
1520                 return 1;
1521         }
1522
1523         return 0;
1524 }
1525
1526 /* must hold iflist_mtx */
1527 void ieee80211_recalc_smps(struct ieee80211_local *local)
1528 {
1529         struct ieee80211_sub_if_data *sdata;
1530         enum ieee80211_smps_mode smps_mode = IEEE80211_SMPS_OFF;
1531         int count = 0;
1532
1533         lockdep_assert_held(&local->iflist_mtx);
1534
1535         /*
1536          * This function could be improved to handle multiple
1537          * interfaces better, but right now it makes any
1538          * non-station interfaces force SM PS to be turned
1539          * off. If there are multiple station interfaces it
1540          * could also use the best possible mode, e.g. if
1541          * one is in static and the other in dynamic then
1542          * dynamic is ok.
1543          */
1544
1545         list_for_each_entry(sdata, &local->interfaces, list) {
1546                 if (!ieee80211_sdata_running(sdata))
1547                         continue;
1548                 if (sdata->vif.type != NL80211_IFTYPE_STATION)
1549                         goto set;
1550
1551                 count += check_mgd_smps(&sdata->u.mgd, &smps_mode);
1552
1553                 if (count > 1) {
1554                         smps_mode = IEEE80211_SMPS_OFF;
1555                         break;
1556                 }
1557         }
1558
1559         if (smps_mode == local->smps_mode)
1560                 return;
1561
1562  set:
1563         local->smps_mode = smps_mode;
1564         /* changed flag is auto-detected for this */
1565         ieee80211_hw_config(local, 0);
1566 }
1567
1568 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
1569 {
1570         int i;
1571
1572         for (i = 0; i < n_ids; i++)
1573                 if (ids[i] == id)
1574                         return true;
1575         return false;
1576 }
1577
1578 /**
1579  * ieee80211_ie_split - split an IE buffer according to ordering
1580  *
1581  * @ies: the IE buffer
1582  * @ielen: the length of the IE buffer
1583  * @ids: an array with element IDs that are allowed before
1584  *      the split
1585  * @n_ids: the size of the element ID array
1586  * @offset: offset where to start splitting in the buffer
1587  *
1588  * This function splits an IE buffer by updating the @offset
1589  * variable to point to the location where the buffer should be
1590  * split.
1591  *
1592  * It assumes that the given IE buffer is well-formed, this
1593  * has to be guaranteed by the caller!
1594  *
1595  * It also assumes that the IEs in the buffer are ordered
1596  * correctly, if not the result of using this function will not
1597  * be ordered correctly either, i.e. it does no reordering.
1598  *
1599  * The function returns the offset where the next part of the
1600  * buffer starts, which may be @ielen if the entire (remainder)
1601  * of the buffer should be used.
1602  */
1603 size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
1604                           const u8 *ids, int n_ids, size_t offset)
1605 {
1606         size_t pos = offset;
1607
1608         while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
1609                 pos += 2 + ies[pos + 1];
1610
1611         return pos;
1612 }
1613
1614 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
1615 {
1616         size_t pos = offset;
1617
1618         while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
1619                 pos += 2 + ies[pos + 1];
1620
1621         return pos;
1622 }
1623
1624 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
1625                                             int rssi_min_thold,
1626                                             int rssi_max_thold)
1627 {
1628         trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
1629
1630         if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
1631                 return;
1632
1633         /*
1634          * Scale up threshold values before storing it, as the RSSI averaging
1635          * algorithm uses a scaled up value as well. Change this scaling
1636          * factor if the RSSI averaging algorithm changes.
1637          */
1638         sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
1639         sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
1640 }
1641
1642 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
1643                                     int rssi_min_thold,
1644                                     int rssi_max_thold)
1645 {
1646         struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1647
1648         WARN_ON(rssi_min_thold == rssi_max_thold ||
1649                 rssi_min_thold > rssi_max_thold);
1650
1651         _ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
1652                                        rssi_max_thold);
1653 }
1654 EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
1655
1656 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
1657 {
1658         struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1659
1660         _ieee80211_enable_rssi_reports(sdata, 0, 0);
1661 }
1662 EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1663
1664 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1665                               u16 cap)
1666 {
1667         __le16 tmp;
1668
1669         *pos++ = WLAN_EID_HT_CAPABILITY;
1670         *pos++ = sizeof(struct ieee80211_ht_cap);
1671         memset(pos, 0, sizeof(struct ieee80211_ht_cap));
1672
1673         /* capability flags */
1674         tmp = cpu_to_le16(cap);
1675         memcpy(pos, &tmp, sizeof(u16));
1676         pos += sizeof(u16);
1677
1678         /* AMPDU parameters */
1679         *pos++ = ht_cap->ampdu_factor |
1680                  (ht_cap->ampdu_density <<
1681                         IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
1682
1683         /* MCS set */
1684         memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
1685         pos += sizeof(ht_cap->mcs);
1686
1687         /* extended capabilities */
1688         pos += sizeof(__le16);
1689
1690         /* BF capabilities */
1691         pos += sizeof(__le32);
1692
1693         /* antenna selection */
1694         pos += sizeof(u8);
1695
1696         return pos;
1697 }
1698
1699 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1700                                struct ieee80211_channel *channel,
1701                                enum nl80211_channel_type channel_type,
1702                                u16 prot_mode)
1703 {
1704         struct ieee80211_ht_operation *ht_oper;
1705         /* Build HT Information */
1706         *pos++ = WLAN_EID_HT_OPERATION;
1707         *pos++ = sizeof(struct ieee80211_ht_operation);
1708         ht_oper = (struct ieee80211_ht_operation *)pos;
1709         ht_oper->primary_chan =
1710                         ieee80211_frequency_to_channel(channel->center_freq);
1711         switch (channel_type) {
1712         case NL80211_CHAN_HT40MINUS:
1713                 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1714                 break;
1715         case NL80211_CHAN_HT40PLUS:
1716                 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
1717                 break;
1718         case NL80211_CHAN_HT20:
1719         default:
1720                 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1721                 break;
1722         }
1723         if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
1724             channel_type != NL80211_CHAN_NO_HT &&
1725             channel_type != NL80211_CHAN_HT20)
1726                 ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
1727
1728         ht_oper->operation_mode = cpu_to_le16(prot_mode);
1729         ht_oper->stbc_param = 0x0000;
1730
1731         /* It seems that Basic MCS set and Supported MCS set
1732            are identical for the first 10 bytes */
1733         memset(&ht_oper->basic_set, 0, 16);
1734         memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
1735
1736         return pos + sizeof(struct ieee80211_ht_operation);
1737 }
1738
1739 enum nl80211_channel_type
1740 ieee80211_ht_oper_to_channel_type(struct ieee80211_ht_operation *ht_oper)
1741 {
1742         enum nl80211_channel_type channel_type;
1743
1744         if (!ht_oper)
1745                 return NL80211_CHAN_NO_HT;
1746
1747         switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
1748         case IEEE80211_HT_PARAM_CHA_SEC_NONE:
1749                 channel_type = NL80211_CHAN_HT20;
1750                 break;
1751         case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
1752                 channel_type = NL80211_CHAN_HT40PLUS;
1753                 break;
1754         case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
1755                 channel_type = NL80211_CHAN_HT40MINUS;
1756                 break;
1757         default:
1758                 channel_type = NL80211_CHAN_NO_HT;
1759         }
1760
1761         return channel_type;
1762 }
1763
1764 int ieee80211_add_srates_ie(struct ieee80211_vif *vif,
1765                             struct sk_buff *skb, bool need_basic)
1766 {
1767         struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1768         struct ieee80211_local *local = sdata->local;
1769         struct ieee80211_supported_band *sband;
1770         int rate;
1771         u8 i, rates, *pos;
1772         u32 basic_rates = vif->bss_conf.basic_rates;
1773
1774         sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1775         rates = sband->n_bitrates;
1776         if (rates > 8)
1777                 rates = 8;
1778
1779         if (skb_tailroom(skb) < rates + 2)
1780                 return -ENOMEM;
1781
1782         pos = skb_put(skb, rates + 2);
1783         *pos++ = WLAN_EID_SUPP_RATES;
1784         *pos++ = rates;
1785         for (i = 0; i < rates; i++) {
1786                 u8 basic = 0;
1787                 if (need_basic && basic_rates & BIT(i))
1788                         basic = 0x80;
1789                 rate = sband->bitrates[i].bitrate;
1790                 *pos++ = basic | (u8) (rate / 5);
1791         }
1792
1793         return 0;
1794 }
1795
1796 int ieee80211_add_ext_srates_ie(struct ieee80211_vif *vif,
1797                                 struct sk_buff *skb, bool need_basic)
1798 {
1799         struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1800         struct ieee80211_local *local = sdata->local;
1801         struct ieee80211_supported_band *sband;
1802         int rate;
1803         u8 i, exrates, *pos;
1804         u32 basic_rates = vif->bss_conf.basic_rates;
1805
1806         sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1807         exrates = sband->n_bitrates;
1808         if (exrates > 8)
1809                 exrates -= 8;
1810         else
1811                 exrates = 0;
1812
1813         if (skb_tailroom(skb) < exrates + 2)
1814                 return -ENOMEM;
1815
1816         if (exrates) {
1817                 pos = skb_put(skb, exrates + 2);
1818                 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1819                 *pos++ = exrates;
1820                 for (i = 8; i < sband->n_bitrates; i++) {
1821                         u8 basic = 0;
1822                         if (need_basic && basic_rates & BIT(i))
1823                                 basic = 0x80;
1824                         rate = sband->bitrates[i].bitrate;
1825                         *pos++ = basic | (u8) (rate / 5);
1826                 }
1827         }
1828         return 0;
1829 }
1830
1831 int ieee80211_ave_rssi(struct ieee80211_vif *vif)
1832 {
1833         struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1834         struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
1835
1836         if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
1837                 /* non-managed type inferfaces */
1838                 return 0;
1839         }
1840         return ifmgd->ave_beacon_signal;
1841 }
1842 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);