drm: Fix authentication kernel crash
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / net / mac80211 / util.c
blobd5230ecc784d2702feb580da4d80e9ef1d3ec0bd
1 /*
2 * Copyright 2002-2005, Instant802 Networks, Inc.
3 * Copyright 2005-2006, Devicescape Software, Inc.
4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
11 * utilities for mac80211
14 #include <net/mac80211.h>
15 #include <linux/netdevice.h>
16 #include <linux/export.h>
17 #include <linux/types.h>
18 #include <linux/slab.h>
19 #include <linux/skbuff.h>
20 #include <linux/etherdevice.h>
21 #include <linux/if_arp.h>
22 #include <linux/bitmap.h>
23 #include <net/net_namespace.h>
24 #include <net/cfg80211.h>
25 #include <net/rtnetlink.h>
27 #include "ieee80211_i.h"
28 #include "driver-ops.h"
29 #include "rate.h"
30 #include "mesh.h"
31 #include "wme.h"
32 #include "led.h"
33 #include "wep.h"
35 /* privid for wiphys to determine whether they belong to us or not */
36 void *mac80211_wiphy_privid = &mac80211_wiphy_privid;
38 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
40 struct ieee80211_local *local;
41 BUG_ON(!wiphy);
43 local = wiphy_priv(wiphy);
44 return &local->hw;
46 EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
48 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
49 enum nl80211_iftype type)
51 __le16 fc = hdr->frame_control;
53 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
54 if (len < 16)
55 return NULL;
57 if (ieee80211_is_data(fc)) {
58 if (len < 24) /* drop incorrect hdr len (data) */
59 return NULL;
61 if (ieee80211_has_a4(fc))
62 return NULL;
63 if (ieee80211_has_tods(fc))
64 return hdr->addr1;
65 if (ieee80211_has_fromds(fc))
66 return hdr->addr2;
68 return hdr->addr3;
71 if (ieee80211_is_mgmt(fc)) {
72 if (len < 24) /* drop incorrect hdr len (mgmt) */
73 return NULL;
74 return hdr->addr3;
77 if (ieee80211_is_ctl(fc)) {
78 if(ieee80211_is_pspoll(fc))
79 return hdr->addr1;
81 if (ieee80211_is_back_req(fc)) {
82 switch (type) {
83 case NL80211_IFTYPE_STATION:
84 return hdr->addr2;
85 case NL80211_IFTYPE_AP:
86 case NL80211_IFTYPE_AP_VLAN:
87 return hdr->addr1;
88 default:
89 break; /* fall through to the return */
94 return NULL;
97 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
99 struct sk_buff *skb = tx->skb;
100 struct ieee80211_hdr *hdr;
102 do {
103 hdr = (struct ieee80211_hdr *) skb->data;
104 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
105 } while ((skb = skb->next));
108 int ieee80211_frame_duration(struct ieee80211_local *local, size_t len,
109 int rate, int erp, int short_preamble)
111 int dur;
113 /* calculate duration (in microseconds, rounded up to next higher
114 * integer if it includes a fractional microsecond) to send frame of
115 * len bytes (does not include FCS) at the given rate. Duration will
116 * also include SIFS.
118 * rate is in 100 kbps, so divident is multiplied by 10 in the
119 * DIV_ROUND_UP() operations.
122 if (local->hw.conf.channel->band == IEEE80211_BAND_5GHZ || erp) {
124 * OFDM:
126 * N_DBPS = DATARATE x 4
127 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
128 * (16 = SIGNAL time, 6 = tail bits)
129 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
131 * T_SYM = 4 usec
132 * 802.11a - 17.5.2: aSIFSTime = 16 usec
133 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
134 * signal ext = 6 usec
136 dur = 16; /* SIFS + signal ext */
137 dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
138 dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
139 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
140 4 * rate); /* T_SYM x N_SYM */
141 } else {
143 * 802.11b or 802.11g with 802.11b compatibility:
144 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
145 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
147 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
148 * aSIFSTime = 10 usec
149 * aPreambleLength = 144 usec or 72 usec with short preamble
150 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
152 dur = 10; /* aSIFSTime = 10 usec */
153 dur += short_preamble ? (72 + 24) : (144 + 48);
155 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
158 return dur;
161 /* Exported duration function for driver use */
162 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
163 struct ieee80211_vif *vif,
164 size_t frame_len,
165 struct ieee80211_rate *rate)
167 struct ieee80211_local *local = hw_to_local(hw);
168 struct ieee80211_sub_if_data *sdata;
169 u16 dur;
170 int erp;
171 bool short_preamble = false;
173 erp = 0;
174 if (vif) {
175 sdata = vif_to_sdata(vif);
176 short_preamble = sdata->vif.bss_conf.use_short_preamble;
177 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
178 erp = rate->flags & IEEE80211_RATE_ERP_G;
181 dur = ieee80211_frame_duration(local, frame_len, rate->bitrate, erp,
182 short_preamble);
184 return cpu_to_le16(dur);
186 EXPORT_SYMBOL(ieee80211_generic_frame_duration);
188 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
189 struct ieee80211_vif *vif, size_t frame_len,
190 const struct ieee80211_tx_info *frame_txctl)
192 struct ieee80211_local *local = hw_to_local(hw);
193 struct ieee80211_rate *rate;
194 struct ieee80211_sub_if_data *sdata;
195 bool short_preamble;
196 int erp;
197 u16 dur;
198 struct ieee80211_supported_band *sband;
200 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
202 short_preamble = false;
204 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
206 erp = 0;
207 if (vif) {
208 sdata = vif_to_sdata(vif);
209 short_preamble = sdata->vif.bss_conf.use_short_preamble;
210 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
211 erp = rate->flags & IEEE80211_RATE_ERP_G;
214 /* CTS duration */
215 dur = ieee80211_frame_duration(local, 10, rate->bitrate,
216 erp, short_preamble);
217 /* Data frame duration */
218 dur += ieee80211_frame_duration(local, frame_len, rate->bitrate,
219 erp, short_preamble);
220 /* ACK duration */
221 dur += ieee80211_frame_duration(local, 10, rate->bitrate,
222 erp, short_preamble);
224 return cpu_to_le16(dur);
226 EXPORT_SYMBOL(ieee80211_rts_duration);
228 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
229 struct ieee80211_vif *vif,
230 size_t frame_len,
231 const struct ieee80211_tx_info *frame_txctl)
233 struct ieee80211_local *local = hw_to_local(hw);
234 struct ieee80211_rate *rate;
235 struct ieee80211_sub_if_data *sdata;
236 bool short_preamble;
237 int erp;
238 u16 dur;
239 struct ieee80211_supported_band *sband;
241 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
243 short_preamble = false;
245 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
246 erp = 0;
247 if (vif) {
248 sdata = vif_to_sdata(vif);
249 short_preamble = sdata->vif.bss_conf.use_short_preamble;
250 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
251 erp = rate->flags & IEEE80211_RATE_ERP_G;
254 /* Data frame duration */
255 dur = ieee80211_frame_duration(local, frame_len, rate->bitrate,
256 erp, short_preamble);
257 if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
258 /* ACK duration */
259 dur += ieee80211_frame_duration(local, 10, rate->bitrate,
260 erp, short_preamble);
263 return cpu_to_le16(dur);
265 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
267 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
268 enum queue_stop_reason reason)
270 struct ieee80211_local *local = hw_to_local(hw);
271 struct ieee80211_sub_if_data *sdata;
273 trace_wake_queue(local, queue, reason);
275 if (WARN_ON(queue >= hw->queues))
276 return;
278 __clear_bit(reason, &local->queue_stop_reasons[queue]);
280 if (local->queue_stop_reasons[queue] != 0)
281 /* someone still has this queue stopped */
282 return;
284 if (skb_queue_empty(&local->pending[queue])) {
285 rcu_read_lock();
286 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
287 if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
288 continue;
289 netif_wake_subqueue(sdata->dev, queue);
291 rcu_read_unlock();
292 } else
293 tasklet_schedule(&local->tx_pending_tasklet);
296 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
297 enum queue_stop_reason reason)
299 struct ieee80211_local *local = hw_to_local(hw);
300 unsigned long flags;
302 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
303 __ieee80211_wake_queue(hw, queue, reason);
304 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
307 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
309 ieee80211_wake_queue_by_reason(hw, queue,
310 IEEE80211_QUEUE_STOP_REASON_DRIVER);
312 EXPORT_SYMBOL(ieee80211_wake_queue);
314 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
315 enum queue_stop_reason reason)
317 struct ieee80211_local *local = hw_to_local(hw);
318 struct ieee80211_sub_if_data *sdata;
320 trace_stop_queue(local, queue, reason);
322 if (WARN_ON(queue >= hw->queues))
323 return;
325 __set_bit(reason, &local->queue_stop_reasons[queue]);
327 rcu_read_lock();
328 list_for_each_entry_rcu(sdata, &local->interfaces, list)
329 netif_stop_subqueue(sdata->dev, queue);
330 rcu_read_unlock();
333 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
334 enum queue_stop_reason reason)
336 struct ieee80211_local *local = hw_to_local(hw);
337 unsigned long flags;
339 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
340 __ieee80211_stop_queue(hw, queue, reason);
341 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
344 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
346 ieee80211_stop_queue_by_reason(hw, queue,
347 IEEE80211_QUEUE_STOP_REASON_DRIVER);
349 EXPORT_SYMBOL(ieee80211_stop_queue);
351 void ieee80211_add_pending_skb(struct ieee80211_local *local,
352 struct sk_buff *skb)
354 struct ieee80211_hw *hw = &local->hw;
355 unsigned long flags;
356 int queue = skb_get_queue_mapping(skb);
357 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
359 if (WARN_ON(!info->control.vif)) {
360 kfree_skb(skb);
361 return;
364 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
365 __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
366 __skb_queue_tail(&local->pending[queue], skb);
367 __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
368 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
371 void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
372 struct sk_buff_head *skbs,
373 void (*fn)(void *data), void *data)
375 struct ieee80211_hw *hw = &local->hw;
376 struct sk_buff *skb;
377 unsigned long flags;
378 int queue, i;
380 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
381 for (i = 0; i < hw->queues; i++)
382 __ieee80211_stop_queue(hw, i,
383 IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
385 while ((skb = skb_dequeue(skbs))) {
386 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
388 if (WARN_ON(!info->control.vif)) {
389 kfree_skb(skb);
390 continue;
393 queue = skb_get_queue_mapping(skb);
394 __skb_queue_tail(&local->pending[queue], skb);
397 if (fn)
398 fn(data);
400 for (i = 0; i < hw->queues; i++)
401 __ieee80211_wake_queue(hw, i,
402 IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
403 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
406 void ieee80211_add_pending_skbs(struct ieee80211_local *local,
407 struct sk_buff_head *skbs)
409 ieee80211_add_pending_skbs_fn(local, skbs, NULL, NULL);
412 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
413 enum queue_stop_reason reason)
415 struct ieee80211_local *local = hw_to_local(hw);
416 unsigned long flags;
417 int i;
419 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
421 for (i = 0; i < hw->queues; i++)
422 __ieee80211_stop_queue(hw, i, reason);
424 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
427 void ieee80211_stop_queues(struct ieee80211_hw *hw)
429 ieee80211_stop_queues_by_reason(hw,
430 IEEE80211_QUEUE_STOP_REASON_DRIVER);
432 EXPORT_SYMBOL(ieee80211_stop_queues);
434 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
436 struct ieee80211_local *local = hw_to_local(hw);
437 unsigned long flags;
438 int ret;
440 if (WARN_ON(queue >= hw->queues))
441 return true;
443 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
444 ret = !!local->queue_stop_reasons[queue];
445 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
446 return ret;
448 EXPORT_SYMBOL(ieee80211_queue_stopped);
450 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
451 enum queue_stop_reason reason)
453 struct ieee80211_local *local = hw_to_local(hw);
454 unsigned long flags;
455 int i;
457 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
459 for (i = 0; i < hw->queues; i++)
460 __ieee80211_wake_queue(hw, i, reason);
462 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
465 void ieee80211_wake_queues(struct ieee80211_hw *hw)
467 ieee80211_wake_queues_by_reason(hw, IEEE80211_QUEUE_STOP_REASON_DRIVER);
469 EXPORT_SYMBOL(ieee80211_wake_queues);
471 void ieee80211_iterate_active_interfaces(
472 struct ieee80211_hw *hw,
473 void (*iterator)(void *data, u8 *mac,
474 struct ieee80211_vif *vif),
475 void *data)
477 struct ieee80211_local *local = hw_to_local(hw);
478 struct ieee80211_sub_if_data *sdata;
480 mutex_lock(&local->iflist_mtx);
482 list_for_each_entry(sdata, &local->interfaces, list) {
483 switch (sdata->vif.type) {
484 case NL80211_IFTYPE_MONITOR:
485 case NL80211_IFTYPE_AP_VLAN:
486 continue;
487 default:
488 break;
490 if (ieee80211_sdata_running(sdata))
491 iterator(data, sdata->vif.addr,
492 &sdata->vif);
495 mutex_unlock(&local->iflist_mtx);
497 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);
499 void ieee80211_iterate_active_interfaces_atomic(
500 struct ieee80211_hw *hw,
501 void (*iterator)(void *data, u8 *mac,
502 struct ieee80211_vif *vif),
503 void *data)
505 struct ieee80211_local *local = hw_to_local(hw);
506 struct ieee80211_sub_if_data *sdata;
508 rcu_read_lock();
510 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
511 switch (sdata->vif.type) {
512 case NL80211_IFTYPE_MONITOR:
513 case NL80211_IFTYPE_AP_VLAN:
514 continue;
515 default:
516 break;
518 if (ieee80211_sdata_running(sdata))
519 iterator(data, sdata->vif.addr,
520 &sdata->vif);
523 rcu_read_unlock();
525 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
528 * Nothing should have been stuffed into the workqueue during
529 * the suspend->resume cycle. If this WARN is seen then there
530 * is a bug with either the driver suspend or something in
531 * mac80211 stuffing into the workqueue which we haven't yet
532 * cleared during mac80211's suspend cycle.
534 static bool ieee80211_can_queue_work(struct ieee80211_local *local)
536 if (WARN(local->suspended && !local->resuming,
537 "queueing ieee80211 work while going to suspend\n"))
538 return false;
540 return true;
543 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
545 struct ieee80211_local *local = hw_to_local(hw);
547 if (!ieee80211_can_queue_work(local))
548 return;
550 queue_work(local->workqueue, work);
552 EXPORT_SYMBOL(ieee80211_queue_work);
554 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
555 struct delayed_work *dwork,
556 unsigned long delay)
558 struct ieee80211_local *local = hw_to_local(hw);
560 if (!ieee80211_can_queue_work(local))
561 return;
563 queue_delayed_work(local->workqueue, dwork, delay);
565 EXPORT_SYMBOL(ieee80211_queue_delayed_work);
567 void ieee802_11_parse_elems(u8 *start, size_t len,
568 struct ieee802_11_elems *elems)
570 ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
573 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata)
575 struct ieee80211_local *local = sdata->local;
576 struct ieee80211_tx_queue_params qparam;
577 int queue;
578 bool use_11b;
579 int aCWmin, aCWmax;
581 if (!local->ops->conf_tx)
582 return;
584 memset(&qparam, 0, sizeof(qparam));
586 use_11b = (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) &&
587 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
589 for (queue = 0; queue < local_to_hw(local)->queues; queue++) {
590 /* Set defaults according to 802.11-2007 Table 7-37 */
591 aCWmax = 1023;
592 if (use_11b)
593 aCWmin = 31;
594 else
595 aCWmin = 15;
597 switch (queue) {
598 case 3: /* AC_BK */
599 qparam.cw_max = aCWmax;
600 qparam.cw_min = aCWmin;
601 qparam.txop = 0;
602 qparam.aifs = 7;
603 break;
604 default: /* never happens but let's not leave undefined */
605 case 2: /* AC_BE */
606 qparam.cw_max = aCWmax;
607 qparam.cw_min = aCWmin;
608 qparam.txop = 0;
609 qparam.aifs = 3;
610 break;
611 case 1: /* AC_VI */
612 qparam.cw_max = aCWmin;
613 qparam.cw_min = (aCWmin + 1) / 2 - 1;
614 if (use_11b)
615 qparam.txop = 6016/32;
616 else
617 qparam.txop = 3008/32;
618 qparam.aifs = 2;
619 break;
620 case 0: /* AC_VO */
621 qparam.cw_max = (aCWmin + 1) / 2 - 1;
622 qparam.cw_min = (aCWmin + 1) / 4 - 1;
623 if (use_11b)
624 qparam.txop = 3264/32;
625 else
626 qparam.txop = 1504/32;
627 qparam.aifs = 2;
628 break;
631 qparam.uapsd = false;
633 sdata->tx_conf[queue] = qparam;
634 drv_conf_tx(local, sdata, queue, &qparam);
637 /* after reinitialize QoS TX queues setting to default,
638 * disable QoS at all */
640 if (sdata->vif.type != NL80211_IFTYPE_MONITOR) {
641 sdata->vif.bss_conf.qos =
642 sdata->vif.type != NL80211_IFTYPE_STATION;
643 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
647 void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
648 const size_t supp_rates_len,
649 const u8 *supp_rates)
651 struct ieee80211_local *local = sdata->local;
652 int i, have_higher_than_11mbit = 0;
654 /* cf. IEEE 802.11 9.2.12 */
655 for (i = 0; i < supp_rates_len; i++)
656 if ((supp_rates[i] & 0x7f) * 5 > 110)
657 have_higher_than_11mbit = 1;
659 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
660 have_higher_than_11mbit)
661 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
662 else
663 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
665 ieee80211_set_wmm_default(sdata);
668 u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
669 enum ieee80211_band band)
671 struct ieee80211_supported_band *sband;
672 struct ieee80211_rate *bitrates;
673 u32 mandatory_rates;
674 enum ieee80211_rate_flags mandatory_flag;
675 int i;
677 sband = local->hw.wiphy->bands[band];
678 if (!sband) {
679 WARN_ON(1);
680 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
683 if (band == IEEE80211_BAND_2GHZ)
684 mandatory_flag = IEEE80211_RATE_MANDATORY_B;
685 else
686 mandatory_flag = IEEE80211_RATE_MANDATORY_A;
688 bitrates = sband->bitrates;
689 mandatory_rates = 0;
690 for (i = 0; i < sband->n_bitrates; i++)
691 if (bitrates[i].flags & mandatory_flag)
692 mandatory_rates |= BIT(i);
693 return mandatory_rates;
696 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
697 u16 transaction, u16 auth_alg,
698 u8 *extra, size_t extra_len, const u8 *bssid,
699 const u8 *key, u8 key_len, u8 key_idx)
701 struct ieee80211_local *local = sdata->local;
702 struct sk_buff *skb;
703 struct ieee80211_mgmt *mgmt;
704 int err;
706 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
707 sizeof(*mgmt) + 6 + extra_len);
708 if (!skb)
709 return;
711 skb_reserve(skb, local->hw.extra_tx_headroom);
713 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
714 memset(mgmt, 0, 24 + 6);
715 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
716 IEEE80211_STYPE_AUTH);
717 memcpy(mgmt->da, bssid, ETH_ALEN);
718 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
719 memcpy(mgmt->bssid, bssid, ETH_ALEN);
720 mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
721 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
722 mgmt->u.auth.status_code = cpu_to_le16(0);
723 if (extra)
724 memcpy(skb_put(skb, extra_len), extra, extra_len);
726 if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
727 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
728 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
729 WARN_ON(err);
732 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
733 ieee80211_tx_skb(sdata, skb);
736 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
737 const u8 *ie, size_t ie_len,
738 enum ieee80211_band band, u32 rate_mask,
739 u8 channel)
741 struct ieee80211_supported_band *sband;
742 u8 *pos;
743 size_t offset = 0, noffset;
744 int supp_rates_len, i;
745 u8 rates[32];
746 int num_rates;
747 int ext_rates_len;
749 sband = local->hw.wiphy->bands[band];
751 pos = buffer;
753 num_rates = 0;
754 for (i = 0; i < sband->n_bitrates; i++) {
755 if ((BIT(i) & rate_mask) == 0)
756 continue; /* skip rate */
757 rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
760 supp_rates_len = min_t(int, num_rates, 8);
762 *pos++ = WLAN_EID_SUPP_RATES;
763 *pos++ = supp_rates_len;
764 memcpy(pos, rates, supp_rates_len);
765 pos += supp_rates_len;
767 /* insert "request information" if in custom IEs */
768 if (ie && ie_len) {
769 static const u8 before_extrates[] = {
770 WLAN_EID_SSID,
771 WLAN_EID_SUPP_RATES,
772 WLAN_EID_REQUEST,
774 noffset = ieee80211_ie_split(ie, ie_len,
775 before_extrates,
776 ARRAY_SIZE(before_extrates),
777 offset);
778 memcpy(pos, ie + offset, noffset - offset);
779 pos += noffset - offset;
780 offset = noffset;
783 ext_rates_len = num_rates - supp_rates_len;
784 if (ext_rates_len > 0) {
785 *pos++ = WLAN_EID_EXT_SUPP_RATES;
786 *pos++ = ext_rates_len;
787 memcpy(pos, rates + supp_rates_len, ext_rates_len);
788 pos += ext_rates_len;
791 if (channel && sband->band == IEEE80211_BAND_2GHZ) {
792 *pos++ = WLAN_EID_DS_PARAMS;
793 *pos++ = 1;
794 *pos++ = channel;
797 /* insert custom IEs that go before HT */
798 if (ie && ie_len) {
799 static const u8 before_ht[] = {
800 WLAN_EID_SSID,
801 WLAN_EID_SUPP_RATES,
802 WLAN_EID_REQUEST,
803 WLAN_EID_EXT_SUPP_RATES,
804 WLAN_EID_DS_PARAMS,
805 WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
807 noffset = ieee80211_ie_split(ie, ie_len,
808 before_ht, ARRAY_SIZE(before_ht),
809 offset);
810 memcpy(pos, ie + offset, noffset - offset);
811 pos += noffset - offset;
812 offset = noffset;
815 if (sband->ht_cap.ht_supported) {
816 u16 cap = sband->ht_cap.cap;
817 __le16 tmp;
819 *pos++ = WLAN_EID_HT_CAPABILITY;
820 *pos++ = sizeof(struct ieee80211_ht_cap);
821 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
822 tmp = cpu_to_le16(cap);
823 memcpy(pos, &tmp, sizeof(u16));
824 pos += sizeof(u16);
825 *pos++ = sband->ht_cap.ampdu_factor |
826 (sband->ht_cap.ampdu_density <<
827 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
828 memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs));
829 pos += sizeof(sband->ht_cap.mcs);
830 pos += 2 + 4 + 1; /* ext info, BF cap, antsel */
834 * If adding more here, adjust code in main.c
835 * that calculates local->scan_ies_len.
838 /* add any remaining custom IEs */
839 if (ie && ie_len) {
840 noffset = ie_len;
841 memcpy(pos, ie + offset, noffset - offset);
842 pos += noffset - offset;
845 return pos - buffer;
848 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
849 u8 *dst, u32 ratemask,
850 const u8 *ssid, size_t ssid_len,
851 const u8 *ie, size_t ie_len,
852 bool directed)
854 struct ieee80211_local *local = sdata->local;
855 struct sk_buff *skb;
856 struct ieee80211_mgmt *mgmt;
857 size_t buf_len;
858 u8 *buf;
859 u8 chan;
861 /* FIXME: come up with a proper value */
862 buf = kmalloc(200 + ie_len, GFP_KERNEL);
863 if (!buf)
864 return NULL;
867 * Do not send DS Channel parameter for directed probe requests
868 * in order to maximize the chance that we get a response. Some
869 * badly-behaved APs don't respond when this parameter is included.
871 if (directed)
872 chan = 0;
873 else
874 chan = ieee80211_frequency_to_channel(
875 local->hw.conf.channel->center_freq);
877 buf_len = ieee80211_build_preq_ies(local, buf, ie, ie_len,
878 local->hw.conf.channel->band,
879 ratemask, chan);
881 skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
882 ssid, ssid_len,
883 buf, buf_len);
884 if (!skb)
885 goto out;
887 if (dst) {
888 mgmt = (struct ieee80211_mgmt *) skb->data;
889 memcpy(mgmt->da, dst, ETH_ALEN);
890 memcpy(mgmt->bssid, dst, ETH_ALEN);
893 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
895 out:
896 kfree(buf);
898 return skb;
901 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
902 const u8 *ssid, size_t ssid_len,
903 const u8 *ie, size_t ie_len,
904 u32 ratemask, bool directed, bool no_cck)
906 struct sk_buff *skb;
908 skb = ieee80211_build_probe_req(sdata, dst, ratemask, ssid, ssid_len,
909 ie, ie_len, directed);
910 if (skb) {
911 if (no_cck)
912 IEEE80211_SKB_CB(skb)->flags |=
913 IEEE80211_TX_CTL_NO_CCK_RATE;
914 ieee80211_tx_skb(sdata, skb);
918 u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
919 struct ieee802_11_elems *elems,
920 enum ieee80211_band band)
922 struct ieee80211_supported_band *sband;
923 struct ieee80211_rate *bitrates;
924 size_t num_rates;
925 u32 supp_rates;
926 int i, j;
927 sband = local->hw.wiphy->bands[band];
929 if (!sband) {
930 WARN_ON(1);
931 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
934 bitrates = sband->bitrates;
935 num_rates = sband->n_bitrates;
936 supp_rates = 0;
937 for (i = 0; i < elems->supp_rates_len +
938 elems->ext_supp_rates_len; i++) {
939 u8 rate = 0;
940 int own_rate;
941 if (i < elems->supp_rates_len)
942 rate = elems->supp_rates[i];
943 else if (elems->ext_supp_rates)
944 rate = elems->ext_supp_rates
945 [i - elems->supp_rates_len];
946 own_rate = 5 * (rate & 0x7f);
947 for (j = 0; j < num_rates; j++)
948 if (bitrates[j].bitrate == own_rate)
949 supp_rates |= BIT(j);
951 return supp_rates;
954 void ieee80211_stop_device(struct ieee80211_local *local)
956 ieee80211_led_radio(local, false);
957 ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
959 cancel_work_sync(&local->reconfig_filter);
961 flush_workqueue(local->workqueue);
962 drv_stop(local);
965 int ieee80211_reconfig(struct ieee80211_local *local)
967 struct ieee80211_hw *hw = &local->hw;
968 struct ieee80211_sub_if_data *sdata;
969 struct sta_info *sta;
970 int res, i;
972 #ifdef CONFIG_PM
973 if (local->suspended)
974 local->resuming = true;
976 if (local->wowlan) {
977 local->wowlan = false;
978 res = drv_resume(local);
979 if (res < 0) {
980 local->resuming = false;
981 return res;
983 if (res == 0)
984 goto wake_up;
985 WARN_ON(res > 1);
987 * res is 1, which means the driver requested
988 * to go through a regular reset on wakeup.
991 #endif
993 /* setup fragmentation threshold */
994 drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
996 /* setup RTS threshold */
997 drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
999 /* reset coverage class */
1000 drv_set_coverage_class(local, hw->wiphy->coverage_class);
1002 /* everything else happens only if HW was up & running */
1003 if (!local->open_count)
1004 goto wake_up;
1007 * Upon resume hardware can sometimes be goofy due to
1008 * various platform / driver / bus issues, so restarting
1009 * the device may at times not work immediately. Propagate
1010 * the error.
1012 res = drv_start(local);
1013 if (res) {
1014 WARN(local->suspended, "Hardware became unavailable "
1015 "upon resume. This could be a software issue "
1016 "prior to suspend or a hardware issue.\n");
1017 return res;
1020 ieee80211_led_radio(local, true);
1021 ieee80211_mod_tpt_led_trig(local,
1022 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1024 /* add interfaces */
1025 list_for_each_entry(sdata, &local->interfaces, list) {
1026 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1027 sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1028 ieee80211_sdata_running(sdata))
1029 res = drv_add_interface(local, &sdata->vif);
1032 /* add STAs back */
1033 mutex_lock(&local->sta_mtx);
1034 list_for_each_entry(sta, &local->sta_list, list) {
1035 if (sta->uploaded) {
1036 sdata = sta->sdata;
1037 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1038 sdata = container_of(sdata->bss,
1039 struct ieee80211_sub_if_data,
1040 u.ap);
1042 WARN_ON(drv_sta_add(local, sdata, &sta->sta));
1045 mutex_unlock(&local->sta_mtx);
1047 /* reconfigure tx conf */
1048 list_for_each_entry(sdata, &local->interfaces, list) {
1049 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1050 sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1051 !ieee80211_sdata_running(sdata))
1052 continue;
1054 for (i = 0; i < hw->queues; i++)
1055 drv_conf_tx(local, sdata, i, &sdata->tx_conf[i]);
1058 /* reconfigure hardware */
1059 ieee80211_hw_config(local, ~0);
1061 ieee80211_configure_filter(local);
1063 /* Finally also reconfigure all the BSS information */
1064 list_for_each_entry(sdata, &local->interfaces, list) {
1065 u32 changed;
1067 if (!ieee80211_sdata_running(sdata))
1068 continue;
1070 /* common change flags for all interface types */
1071 changed = BSS_CHANGED_ERP_CTS_PROT |
1072 BSS_CHANGED_ERP_PREAMBLE |
1073 BSS_CHANGED_ERP_SLOT |
1074 BSS_CHANGED_HT |
1075 BSS_CHANGED_BASIC_RATES |
1076 BSS_CHANGED_BEACON_INT |
1077 BSS_CHANGED_BSSID |
1078 BSS_CHANGED_CQM |
1079 BSS_CHANGED_QOS;
1081 switch (sdata->vif.type) {
1082 case NL80211_IFTYPE_STATION:
1083 changed |= BSS_CHANGED_ASSOC;
1084 mutex_lock(&sdata->u.mgd.mtx);
1085 ieee80211_bss_info_change_notify(sdata, changed);
1086 mutex_unlock(&sdata->u.mgd.mtx);
1087 break;
1088 case NL80211_IFTYPE_ADHOC:
1089 changed |= BSS_CHANGED_IBSS;
1090 /* fall through */
1091 case NL80211_IFTYPE_AP:
1092 changed |= BSS_CHANGED_SSID;
1093 /* fall through */
1094 case NL80211_IFTYPE_MESH_POINT:
1095 changed |= BSS_CHANGED_BEACON |
1096 BSS_CHANGED_BEACON_ENABLED;
1097 ieee80211_bss_info_change_notify(sdata, changed);
1098 break;
1099 case NL80211_IFTYPE_WDS:
1100 break;
1101 case NL80211_IFTYPE_AP_VLAN:
1102 case NL80211_IFTYPE_MONITOR:
1103 /* ignore virtual */
1104 break;
1105 case NL80211_IFTYPE_UNSPECIFIED:
1106 case NUM_NL80211_IFTYPES:
1107 case NL80211_IFTYPE_P2P_CLIENT:
1108 case NL80211_IFTYPE_P2P_GO:
1109 WARN_ON(1);
1110 break;
1115 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
1116 * sessions can be established after a resume.
1118 * Also tear down aggregation sessions since reconfiguring
1119 * them in a hardware restart scenario is not easily done
1120 * right now, and the hardware will have lost information
1121 * about the sessions, but we and the AP still think they
1122 * are active. This is really a workaround though.
1124 if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1125 mutex_lock(&local->sta_mtx);
1127 list_for_each_entry(sta, &local->sta_list, list) {
1128 ieee80211_sta_tear_down_BA_sessions(sta, true);
1129 clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1132 mutex_unlock(&local->sta_mtx);
1135 /* add back keys */
1136 list_for_each_entry(sdata, &local->interfaces, list)
1137 if (ieee80211_sdata_running(sdata))
1138 ieee80211_enable_keys(sdata);
1140 wake_up:
1141 ieee80211_wake_queues_by_reason(hw,
1142 IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1145 * If this is for hw restart things are still running.
1146 * We may want to change that later, however.
1148 if (!local->suspended)
1149 return 0;
1151 #ifdef CONFIG_PM
1152 /* first set suspended false, then resuming */
1153 local->suspended = false;
1154 mb();
1155 local->resuming = false;
1157 list_for_each_entry(sdata, &local->interfaces, list) {
1158 switch(sdata->vif.type) {
1159 case NL80211_IFTYPE_STATION:
1160 ieee80211_sta_restart(sdata);
1161 break;
1162 case NL80211_IFTYPE_ADHOC:
1163 ieee80211_ibss_restart(sdata);
1164 break;
1165 case NL80211_IFTYPE_MESH_POINT:
1166 ieee80211_mesh_restart(sdata);
1167 break;
1168 default:
1169 break;
1173 mod_timer(&local->sta_cleanup, jiffies + 1);
1175 mutex_lock(&local->sta_mtx);
1176 list_for_each_entry(sta, &local->sta_list, list)
1177 mesh_plink_restart(sta);
1178 mutex_unlock(&local->sta_mtx);
1179 #else
1180 WARN_ON(1);
1181 #endif
1182 return 0;
1185 void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
1187 struct ieee80211_sub_if_data *sdata;
1188 struct ieee80211_local *local;
1189 struct ieee80211_key *key;
1191 if (WARN_ON(!vif))
1192 return;
1194 sdata = vif_to_sdata(vif);
1195 local = sdata->local;
1197 if (WARN_ON(!local->resuming))
1198 return;
1200 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
1201 return;
1203 sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
1205 mutex_lock(&local->key_mtx);
1206 list_for_each_entry(key, &sdata->key_list, list)
1207 key->flags |= KEY_FLAG_TAINTED;
1208 mutex_unlock(&local->key_mtx);
1210 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
1212 static int check_mgd_smps(struct ieee80211_if_managed *ifmgd,
1213 enum ieee80211_smps_mode *smps_mode)
1215 if (ifmgd->associated) {
1216 *smps_mode = ifmgd->ap_smps;
1218 if (*smps_mode == IEEE80211_SMPS_AUTOMATIC) {
1219 if (ifmgd->powersave)
1220 *smps_mode = IEEE80211_SMPS_DYNAMIC;
1221 else
1222 *smps_mode = IEEE80211_SMPS_OFF;
1225 return 1;
1228 return 0;
1231 /* must hold iflist_mtx */
1232 void ieee80211_recalc_smps(struct ieee80211_local *local)
1234 struct ieee80211_sub_if_data *sdata;
1235 enum ieee80211_smps_mode smps_mode = IEEE80211_SMPS_OFF;
1236 int count = 0;
1238 lockdep_assert_held(&local->iflist_mtx);
1241 * This function could be improved to handle multiple
1242 * interfaces better, but right now it makes any
1243 * non-station interfaces force SM PS to be turned
1244 * off. If there are multiple station interfaces it
1245 * could also use the best possible mode, e.g. if
1246 * one is in static and the other in dynamic then
1247 * dynamic is ok.
1250 list_for_each_entry(sdata, &local->interfaces, list) {
1251 if (!ieee80211_sdata_running(sdata))
1252 continue;
1253 if (sdata->vif.type != NL80211_IFTYPE_STATION)
1254 goto set;
1256 count += check_mgd_smps(&sdata->u.mgd, &smps_mode);
1258 if (count > 1) {
1259 smps_mode = IEEE80211_SMPS_OFF;
1260 break;
1264 if (smps_mode == local->smps_mode)
1265 return;
1267 set:
1268 local->smps_mode = smps_mode;
1269 /* changed flag is auto-detected for this */
1270 ieee80211_hw_config(local, 0);
1273 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
1275 int i;
1277 for (i = 0; i < n_ids; i++)
1278 if (ids[i] == id)
1279 return true;
1280 return false;
1284 * ieee80211_ie_split - split an IE buffer according to ordering
1286 * @ies: the IE buffer
1287 * @ielen: the length of the IE buffer
1288 * @ids: an array with element IDs that are allowed before
1289 * the split
1290 * @n_ids: the size of the element ID array
1291 * @offset: offset where to start splitting in the buffer
1293 * This function splits an IE buffer by updating the @offset
1294 * variable to point to the location where the buffer should be
1295 * split.
1297 * It assumes that the given IE buffer is well-formed, this
1298 * has to be guaranteed by the caller!
1300 * It also assumes that the IEs in the buffer are ordered
1301 * correctly, if not the result of using this function will not
1302 * be ordered correctly either, i.e. it does no reordering.
1304 * The function returns the offset where the next part of the
1305 * buffer starts, which may be @ielen if the entire (remainder)
1306 * of the buffer should be used.
1308 size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
1309 const u8 *ids, int n_ids, size_t offset)
1311 size_t pos = offset;
1313 while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
1314 pos += 2 + ies[pos + 1];
1316 return pos;
1319 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
1321 size_t pos = offset;
1323 while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
1324 pos += 2 + ies[pos + 1];
1326 return pos;
1329 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
1330 int rssi_min_thold,
1331 int rssi_max_thold)
1333 trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
1335 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
1336 return;
1339 * Scale up threshold values before storing it, as the RSSI averaging
1340 * algorithm uses a scaled up value as well. Change this scaling
1341 * factor if the RSSI averaging algorithm changes.
1343 sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
1344 sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
1347 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
1348 int rssi_min_thold,
1349 int rssi_max_thold)
1351 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1353 WARN_ON(rssi_min_thold == rssi_max_thold ||
1354 rssi_min_thold > rssi_max_thold);
1356 _ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
1357 rssi_max_thold);
1359 EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
1361 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
1363 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1365 _ieee80211_enable_rssi_reports(sdata, 0, 0);
1367 EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1369 int ieee80211_add_srates_ie(struct ieee80211_vif *vif, struct sk_buff *skb)
1371 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1372 struct ieee80211_local *local = sdata->local;
1373 struct ieee80211_supported_band *sband;
1374 int rate;
1375 u8 i, rates, *pos;
1377 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1378 rates = sband->n_bitrates;
1379 if (rates > 8)
1380 rates = 8;
1382 if (skb_tailroom(skb) < rates + 2)
1383 return -ENOMEM;
1385 pos = skb_put(skb, rates + 2);
1386 *pos++ = WLAN_EID_SUPP_RATES;
1387 *pos++ = rates;
1388 for (i = 0; i < rates; i++) {
1389 rate = sband->bitrates[i].bitrate;
1390 *pos++ = (u8) (rate / 5);
1393 return 0;
1396 int ieee80211_add_ext_srates_ie(struct ieee80211_vif *vif, struct sk_buff *skb)
1398 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1399 struct ieee80211_local *local = sdata->local;
1400 struct ieee80211_supported_band *sband;
1401 int rate;
1402 u8 i, exrates, *pos;
1404 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1405 exrates = sband->n_bitrates;
1406 if (exrates > 8)
1407 exrates -= 8;
1408 else
1409 exrates = 0;
1411 if (skb_tailroom(skb) < exrates + 2)
1412 return -ENOMEM;
1414 if (exrates) {
1415 pos = skb_put(skb, exrates + 2);
1416 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1417 *pos++ = exrates;
1418 for (i = 8; i < sband->n_bitrates; i++) {
1419 rate = sband->bitrates[i].bitrate;
1420 *pos++ = (u8) (rate / 5);
1423 return 0;