2 * Copyright 2002-2005, Instant802 Networks, Inc.
3 * Copyright 2005-2006, Devicescape Software, Inc.
4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <net/mac80211.h>
12 #include <net/ieee80211_radiotap.h>
13 #include <linux/module.h>
14 #include <linux/init.h>
15 #include <linux/netdevice.h>
16 #include <linux/types.h>
17 #include <linux/slab.h>
18 #include <linux/skbuff.h>
19 #include <linux/etherdevice.h>
20 #include <linux/if_arp.h>
21 #include <linux/wireless.h>
22 #include <linux/rtnetlink.h>
23 #include <linux/bitmap.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
27 #include "ieee80211_i.h"
36 #include "debugfs_netdev.h"
39 * For seeing transmitted packets on monitor interfaces
40 * we have a radiotap header too.
42 struct ieee80211_tx_status_rtap_hdr
{
43 struct ieee80211_radiotap_header hdr
;
46 } __attribute__ ((packed
));
48 /* common interface routines */
50 static int header_parse_80211(const struct sk_buff
*skb
, unsigned char *haddr
)
52 memcpy(haddr
, skb_mac_header(skb
) + 10, ETH_ALEN
); /* addr2 */
56 /* must be called under mdev tx lock */
57 static void ieee80211_configure_filter(struct ieee80211_local
*local
)
59 unsigned int changed_flags
;
60 unsigned int new_flags
= 0;
62 if (atomic_read(&local
->iff_promiscs
))
63 new_flags
|= FIF_PROMISC_IN_BSS
;
65 if (atomic_read(&local
->iff_allmultis
))
66 new_flags
|= FIF_ALLMULTI
;
69 new_flags
|= FIF_BCN_PRBRESP_PROMISC
;
71 if (local
->fif_fcsfail
)
72 new_flags
|= FIF_FCSFAIL
;
74 if (local
->fif_plcpfail
)
75 new_flags
|= FIF_PLCPFAIL
;
77 if (local
->fif_control
)
78 new_flags
|= FIF_CONTROL
;
80 if (local
->fif_other_bss
)
81 new_flags
|= FIF_OTHER_BSS
;
83 changed_flags
= local
->filter_flags
^ new_flags
;
88 local
->ops
->configure_filter(local_to_hw(local
),
89 changed_flags
, &new_flags
,
90 local
->mdev
->mc_count
,
91 local
->mdev
->mc_list
);
93 WARN_ON(new_flags
& (1<<31));
95 local
->filter_flags
= new_flags
& ~(1<<31);
98 /* master interface */
100 static int ieee80211_master_open(struct net_device
*dev
)
102 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
103 struct ieee80211_sub_if_data
*sdata
;
104 int res
= -EOPNOTSUPP
;
106 /* we hold the RTNL here so can safely walk the list */
107 list_for_each_entry(sdata
, &local
->interfaces
, list
) {
108 if (netif_running(sdata
->dev
)) {
117 netif_tx_start_all_queues(local
->mdev
);
122 static int ieee80211_master_stop(struct net_device
*dev
)
124 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
125 struct ieee80211_sub_if_data
*sdata
;
127 /* we hold the RTNL here so can safely walk the list */
128 list_for_each_entry(sdata
, &local
->interfaces
, list
)
129 if (netif_running(sdata
->dev
))
130 dev_close(sdata
->dev
);
135 static void ieee80211_master_set_multicast_list(struct net_device
*dev
)
137 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
139 ieee80211_configure_filter(local
);
142 /* regular interfaces */
144 static int ieee80211_change_mtu(struct net_device
*dev
, int new_mtu
)
147 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
149 meshhdrlen
= (sdata
->vif
.type
== IEEE80211_IF_TYPE_MESH_POINT
) ? 5 : 0;
151 /* FIX: what would be proper limits for MTU?
152 * This interface uses 802.3 frames. */
154 new_mtu
> IEEE80211_MAX_DATA_LEN
- 24 - 6 - meshhdrlen
) {
158 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
159 printk(KERN_DEBUG
"%s: setting MTU %d\n", dev
->name
, new_mtu
);
160 #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
165 static inline int identical_mac_addr_allowed(int type1
, int type2
)
167 return (type1
== IEEE80211_IF_TYPE_MNTR
||
168 type2
== IEEE80211_IF_TYPE_MNTR
||
169 (type1
== IEEE80211_IF_TYPE_AP
&&
170 type2
== IEEE80211_IF_TYPE_WDS
) ||
171 (type1
== IEEE80211_IF_TYPE_WDS
&&
172 (type2
== IEEE80211_IF_TYPE_WDS
||
173 type2
== IEEE80211_IF_TYPE_AP
)) ||
174 (type1
== IEEE80211_IF_TYPE_AP
&&
175 type2
== IEEE80211_IF_TYPE_VLAN
) ||
176 (type1
== IEEE80211_IF_TYPE_VLAN
&&
177 (type2
== IEEE80211_IF_TYPE_AP
||
178 type2
== IEEE80211_IF_TYPE_VLAN
)));
181 static int ieee80211_open(struct net_device
*dev
)
183 struct ieee80211_sub_if_data
*sdata
, *nsdata
;
184 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
185 struct sta_info
*sta
;
186 struct ieee80211_if_init_conf conf
;
189 bool need_hw_reconfig
= 0;
190 u8 null_addr
[ETH_ALEN
] = {0};
192 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
194 /* fail early if user set an invalid address */
195 if (compare_ether_addr(dev
->dev_addr
, null_addr
) &&
196 !is_valid_ether_addr(dev
->dev_addr
))
197 return -EADDRNOTAVAIL
;
199 /* we hold the RTNL here so can safely walk the list */
200 list_for_each_entry(nsdata
, &local
->interfaces
, list
) {
201 struct net_device
*ndev
= nsdata
->dev
;
203 if (ndev
!= dev
&& netif_running(ndev
)) {
205 * Allow only a single IBSS interface to be up at any
206 * time. This is restricted because beacon distribution
207 * cannot work properly if both are in the same IBSS.
209 * To remove this restriction we'd have to disallow them
210 * from setting the same SSID on different IBSS interfaces
211 * belonging to the same hardware. Then, however, we're
212 * faced with having to adopt two different TSF timers...
214 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
&&
215 nsdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
)
219 * The remaining checks are only performed for interfaces
220 * with the same MAC address.
222 if (compare_ether_addr(dev
->dev_addr
, ndev
->dev_addr
))
226 * check whether it may have the same address
228 if (!identical_mac_addr_allowed(sdata
->vif
.type
,
233 * can only add VLANs to enabled APs
235 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_VLAN
&&
236 nsdata
->vif
.type
== IEEE80211_IF_TYPE_AP
)
237 sdata
->bss
= &nsdata
->u
.ap
;
241 switch (sdata
->vif
.type
) {
242 case IEEE80211_IF_TYPE_WDS
:
243 if (!is_valid_ether_addr(sdata
->u
.wds
.remote_addr
))
246 case IEEE80211_IF_TYPE_VLAN
:
249 list_add(&sdata
->u
.vlan
.list
, &sdata
->bss
->vlans
);
251 case IEEE80211_IF_TYPE_AP
:
252 sdata
->bss
= &sdata
->u
.ap
;
254 case IEEE80211_IF_TYPE_MESH_POINT
:
255 /* mesh ifaces must set allmulti to forward mcast traffic */
256 atomic_inc(&local
->iff_allmultis
);
258 case IEEE80211_IF_TYPE_STA
:
259 case IEEE80211_IF_TYPE_MNTR
:
260 case IEEE80211_IF_TYPE_IBSS
:
261 /* no special treatment */
263 case IEEE80211_IF_TYPE_INVALID
:
269 if (local
->open_count
== 0) {
271 if (local
->ops
->start
)
272 res
= local
->ops
->start(local_to_hw(local
));
275 need_hw_reconfig
= 1;
276 ieee80211_led_radio(local
, local
->hw
.conf
.radio_enabled
);
280 * Check all interfaces and copy the hopefully now-present
281 * MAC address to those that have the special null one.
283 list_for_each_entry(nsdata
, &local
->interfaces
, list
) {
284 struct net_device
*ndev
= nsdata
->dev
;
287 * No need to check netif_running since we do not allow
288 * it to start up with this invalid address.
290 if (compare_ether_addr(null_addr
, ndev
->dev_addr
) == 0)
291 memcpy(ndev
->dev_addr
,
292 local
->hw
.wiphy
->perm_addr
,
296 if (compare_ether_addr(null_addr
, local
->mdev
->dev_addr
) == 0)
297 memcpy(local
->mdev
->dev_addr
, local
->hw
.wiphy
->perm_addr
,
301 * Validate the MAC address for this device.
303 if (!is_valid_ether_addr(dev
->dev_addr
)) {
304 if (!local
->open_count
&& local
->ops
->stop
)
305 local
->ops
->stop(local_to_hw(local
));
306 return -EADDRNOTAVAIL
;
309 switch (sdata
->vif
.type
) {
310 case IEEE80211_IF_TYPE_VLAN
:
311 /* no need to tell driver */
313 case IEEE80211_IF_TYPE_MNTR
:
314 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_COOK_FRAMES
) {
315 local
->cooked_mntrs
++;
319 /* must be before the call to ieee80211_configure_filter */
321 if (local
->monitors
== 1)
322 local
->hw
.conf
.flags
|= IEEE80211_CONF_RADIOTAP
;
324 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_FCSFAIL
)
325 local
->fif_fcsfail
++;
326 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_PLCPFAIL
)
327 local
->fif_plcpfail
++;
328 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_CONTROL
)
329 local
->fif_control
++;
330 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_OTHER_BSS
)
331 local
->fif_other_bss
++;
333 netif_addr_lock_bh(local
->mdev
);
334 ieee80211_configure_filter(local
);
335 netif_addr_unlock_bh(local
->mdev
);
337 case IEEE80211_IF_TYPE_STA
:
338 case IEEE80211_IF_TYPE_IBSS
:
339 sdata
->u
.sta
.flags
&= ~IEEE80211_STA_PREV_BSSID_SET
;
342 conf
.vif
= &sdata
->vif
;
343 conf
.type
= sdata
->vif
.type
;
344 conf
.mac_addr
= dev
->dev_addr
;
345 res
= local
->ops
->add_interface(local_to_hw(local
), &conf
);
349 if (ieee80211_vif_is_mesh(&sdata
->vif
))
350 ieee80211_start_mesh(sdata
);
351 changed
|= ieee80211_reset_erp_info(sdata
);
352 ieee80211_bss_info_change_notify(sdata
, changed
);
353 ieee80211_enable_keys(sdata
);
355 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
&&
356 !(sdata
->flags
& IEEE80211_SDATA_USERSPACE_MLME
))
357 netif_carrier_off(dev
);
359 netif_carrier_on(dev
);
362 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_WDS
) {
363 /* Create STA entry for the WDS peer */
364 sta
= sta_info_alloc(sdata
, sdata
->u
.wds
.remote_addr
,
368 goto err_del_interface
;
371 /* no locking required since STA is not live yet */
372 sta
->flags
|= WLAN_STA_AUTHORIZED
;
374 res
= sta_info_insert(sta
);
376 /* STA has been freed */
377 goto err_del_interface
;
381 if (local
->open_count
== 0) {
382 res
= dev_open(local
->mdev
);
385 goto err_del_interface
;
386 tasklet_enable(&local
->tx_pending_tasklet
);
387 tasklet_enable(&local
->tasklet
);
391 * set_multicast_list will be invoked by the networking core
392 * which will check whether any increments here were done in
393 * error and sync them down to the hardware as filter flags.
395 if (sdata
->flags
& IEEE80211_SDATA_ALLMULTI
)
396 atomic_inc(&local
->iff_allmultis
);
398 if (sdata
->flags
& IEEE80211_SDATA_PROMISC
)
399 atomic_inc(&local
->iff_promiscs
);
402 if (need_hw_reconfig
)
403 ieee80211_hw_config(local
);
406 * ieee80211_sta_work is disabled while network interface
407 * is down. Therefore, some configuration changes may not
408 * yet be effective. Trigger execution of ieee80211_sta_work
411 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
||
412 sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
) {
413 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
414 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
417 netif_tx_start_all_queues(dev
);
421 local
->ops
->remove_interface(local_to_hw(local
), &conf
);
423 if (!local
->open_count
&& local
->ops
->stop
)
424 local
->ops
->stop(local_to_hw(local
));
427 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_VLAN
)
428 list_del(&sdata
->u
.vlan
.list
);
432 static int ieee80211_stop(struct net_device
*dev
)
434 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
435 struct ieee80211_local
*local
= sdata
->local
;
436 struct ieee80211_if_init_conf conf
;
437 struct sta_info
*sta
;
440 * Stop TX on this interface first.
442 netif_tx_stop_all_queues(dev
);
445 * Now delete all active aggregation sessions.
449 list_for_each_entry_rcu(sta
, &local
->sta_list
, list
) {
450 if (sta
->sdata
== sdata
)
451 ieee80211_sta_tear_down_BA_sessions(sdata
, sta
->addr
);
457 * Remove all stations associated with this interface.
459 * This must be done before calling ops->remove_interface()
460 * because otherwise we can later invoke ops->sta_notify()
461 * whenever the STAs are removed, and that invalidates driver
462 * assumptions about always getting a vif pointer that is valid
463 * (because if we remove a STA after ops->remove_interface()
464 * the driver will have removed the vif info already!)
466 * We could relax this and only unlink the stations from the
467 * hash table and list but keep them on a per-sdata list that
468 * will be inserted back again when the interface is brought
469 * up again, but I don't currently see a use case for that,
470 * except with WDS which gets a STA entry created when it is
473 sta_info_flush(local
, sdata
);
476 * Don't count this interface for promisc/allmulti while it
477 * is down. dev_mc_unsync() will invoke set_multicast_list
478 * on the master interface which will sync these down to the
479 * hardware as filter flags.
481 if (sdata
->flags
& IEEE80211_SDATA_ALLMULTI
)
482 atomic_dec(&local
->iff_allmultis
);
484 if (sdata
->flags
& IEEE80211_SDATA_PROMISC
)
485 atomic_dec(&local
->iff_promiscs
);
487 dev_mc_unsync(local
->mdev
, dev
);
489 /* APs need special treatment */
490 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_AP
) {
491 struct ieee80211_sub_if_data
*vlan
, *tmp
;
492 struct beacon_data
*old_beacon
= sdata
->u
.ap
.beacon
;
495 rcu_assign_pointer(sdata
->u
.ap
.beacon
, NULL
);
499 /* down all dependent devices, that is VLANs */
500 list_for_each_entry_safe(vlan
, tmp
, &sdata
->u
.ap
.vlans
,
502 dev_close(vlan
->dev
);
503 WARN_ON(!list_empty(&sdata
->u
.ap
.vlans
));
508 switch (sdata
->vif
.type
) {
509 case IEEE80211_IF_TYPE_VLAN
:
510 list_del(&sdata
->u
.vlan
.list
);
511 /* no need to tell driver */
513 case IEEE80211_IF_TYPE_MNTR
:
514 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_COOK_FRAMES
) {
515 local
->cooked_mntrs
--;
520 if (local
->monitors
== 0)
521 local
->hw
.conf
.flags
&= ~IEEE80211_CONF_RADIOTAP
;
523 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_FCSFAIL
)
524 local
->fif_fcsfail
--;
525 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_PLCPFAIL
)
526 local
->fif_plcpfail
--;
527 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_CONTROL
)
528 local
->fif_control
--;
529 if (sdata
->u
.mntr_flags
& MONITOR_FLAG_OTHER_BSS
)
530 local
->fif_other_bss
--;
532 netif_addr_lock_bh(local
->mdev
);
533 ieee80211_configure_filter(local
);
534 netif_addr_unlock_bh(local
->mdev
);
536 case IEEE80211_IF_TYPE_MESH_POINT
:
537 /* allmulti is always set on mesh ifaces */
538 atomic_dec(&local
->iff_allmultis
);
540 case IEEE80211_IF_TYPE_STA
:
541 case IEEE80211_IF_TYPE_IBSS
:
542 sdata
->u
.sta
.state
= IEEE80211_STA_MLME_DISABLED
;
543 memset(sdata
->u
.sta
.bssid
, 0, ETH_ALEN
);
544 del_timer_sync(&sdata
->u
.sta
.timer
);
546 * When we get here, the interface is marked down.
547 * Call synchronize_rcu() to wait for the RX path
548 * should it be using the interface and enqueuing
549 * frames at this very time on another CPU.
552 skb_queue_purge(&sdata
->u
.sta
.skb_queue
);
554 if (local
->scan_dev
== sdata
->dev
) {
555 if (!local
->ops
->hw_scan
) {
556 local
->sta_sw_scanning
= 0;
557 cancel_delayed_work(&local
->scan_work
);
559 local
->sta_hw_scanning
= 0;
562 sdata
->u
.sta
.flags
&= ~IEEE80211_STA_PRIVACY_INVOKED
;
563 kfree(sdata
->u
.sta
.extra_ie
);
564 sdata
->u
.sta
.extra_ie
= NULL
;
565 sdata
->u
.sta
.extra_ie_len
= 0;
568 conf
.vif
= &sdata
->vif
;
569 conf
.type
= sdata
->vif
.type
;
570 conf
.mac_addr
= dev
->dev_addr
;
571 /* disable all keys for as long as this netdev is down */
572 ieee80211_disable_keys(sdata
);
573 local
->ops
->remove_interface(local_to_hw(local
), &conf
);
578 if (local
->open_count
== 0) {
579 if (netif_running(local
->mdev
))
580 dev_close(local
->mdev
);
582 if (local
->ops
->stop
)
583 local
->ops
->stop(local_to_hw(local
));
585 ieee80211_led_radio(local
, 0);
587 flush_workqueue(local
->hw
.workqueue
);
589 tasklet_disable(&local
->tx_pending_tasklet
);
590 tasklet_disable(&local
->tasklet
);
596 int ieee80211_start_tx_ba_session(struct ieee80211_hw
*hw
, u8
*ra
, u16 tid
)
598 struct ieee80211_local
*local
= hw_to_local(hw
);
599 struct sta_info
*sta
;
600 struct ieee80211_sub_if_data
*sdata
;
604 DECLARE_MAC_BUF(mac
);
606 if (tid
>= STA_TID_NUM
)
609 #ifdef CONFIG_MAC80211_HT_DEBUG
610 printk(KERN_DEBUG
"Open BA session requested for %s tid %u\n",
611 print_mac(mac
, ra
), tid
);
612 #endif /* CONFIG_MAC80211_HT_DEBUG */
616 sta
= sta_info_get(local
, ra
);
618 #ifdef CONFIG_MAC80211_HT_DEBUG
619 printk(KERN_DEBUG
"Could not find the station\n");
625 spin_lock_bh(&sta
->lock
);
627 /* we have tried too many times, receiver does not want A-MPDU */
628 if (sta
->ampdu_mlme
.addba_req_num
[tid
] > HT_AGG_MAX_RETRIES
) {
633 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
634 /* check if the TID is not in aggregation flow already */
635 if (*state
!= HT_AGG_STATE_IDLE
) {
636 #ifdef CONFIG_MAC80211_HT_DEBUG
637 printk(KERN_DEBUG
"BA request denied - session is not "
638 "idle on tid %u\n", tid
);
639 #endif /* CONFIG_MAC80211_HT_DEBUG */
644 /* prepare A-MPDU MLME for Tx aggregation */
645 sta
->ampdu_mlme
.tid_tx
[tid
] =
646 kmalloc(sizeof(struct tid_ampdu_tx
), GFP_ATOMIC
);
647 if (!sta
->ampdu_mlme
.tid_tx
[tid
]) {
648 #ifdef CONFIG_MAC80211_HT_DEBUG
650 printk(KERN_ERR
"allocate tx mlme to tid %d failed\n",
657 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.function
=
658 sta_addba_resp_timer_expired
;
659 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.data
=
660 (unsigned long)&sta
->timer_to_tid
[tid
];
661 init_timer(&sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
);
663 /* create a new queue for this aggregation */
664 ret
= ieee80211_ht_agg_queue_add(local
, sta
, tid
);
666 /* case no queue is available to aggregation
667 * don't switch to aggregation */
669 #ifdef CONFIG_MAC80211_HT_DEBUG
670 printk(KERN_DEBUG
"BA request denied - queue unavailable for"
672 #endif /* CONFIG_MAC80211_HT_DEBUG */
673 goto err_unlock_queue
;
677 /* Ok, the Addba frame hasn't been sent yet, but if the driver calls the
678 * call back right away, it must see that the flow has begun */
679 *state
|= HT_ADDBA_REQUESTED_MSK
;
681 /* This is slightly racy because the queue isn't stopped */
682 start_seq_num
= sta
->tid_seq
[tid
];
684 if (local
->ops
->ampdu_action
)
685 ret
= local
->ops
->ampdu_action(hw
, IEEE80211_AMPDU_TX_START
,
686 ra
, tid
, &start_seq_num
);
689 /* No need to requeue the packets in the agg queue, since we
690 * held the tx lock: no packet could be enqueued to the newly
692 ieee80211_ht_agg_queue_remove(local
, sta
, tid
, 0);
693 #ifdef CONFIG_MAC80211_HT_DEBUG
694 printk(KERN_DEBUG
"BA request denied - HW unavailable for"
696 #endif /* CONFIG_MAC80211_HT_DEBUG */
697 *state
= HT_AGG_STATE_IDLE
;
698 goto err_unlock_queue
;
701 /* Will put all the packets in the new SW queue */
702 ieee80211_requeue(local
, ieee802_1d_to_ac
[tid
]);
703 spin_unlock_bh(&sta
->lock
);
705 /* send an addBA request */
706 sta
->ampdu_mlme
.dialog_token_allocator
++;
707 sta
->ampdu_mlme
.tid_tx
[tid
]->dialog_token
=
708 sta
->ampdu_mlme
.dialog_token_allocator
;
709 sta
->ampdu_mlme
.tid_tx
[tid
]->ssn
= start_seq_num
;
712 ieee80211_send_addba_request(sta
->sdata
, ra
, tid
,
713 sta
->ampdu_mlme
.tid_tx
[tid
]->dialog_token
,
714 sta
->ampdu_mlme
.tid_tx
[tid
]->ssn
,
716 /* activate the timer for the recipient's addBA response */
717 sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
.expires
=
718 jiffies
+ ADDBA_RESP_INTERVAL
;
719 add_timer(&sta
->ampdu_mlme
.tid_tx
[tid
]->addba_resp_timer
);
720 #ifdef CONFIG_MAC80211_HT_DEBUG
721 printk(KERN_DEBUG
"activated addBA response timer on tid %d\n", tid
);
726 kfree(sta
->ampdu_mlme
.tid_tx
[tid
]);
727 sta
->ampdu_mlme
.tid_tx
[tid
] = NULL
;
730 spin_unlock_bh(&sta
->lock
);
735 EXPORT_SYMBOL(ieee80211_start_tx_ba_session
);
737 int ieee80211_stop_tx_ba_session(struct ieee80211_hw
*hw
,
739 enum ieee80211_back_parties initiator
)
741 struct ieee80211_local
*local
= hw_to_local(hw
);
742 struct sta_info
*sta
;
745 DECLARE_MAC_BUF(mac
);
747 if (tid
>= STA_TID_NUM
)
751 sta
= sta_info_get(local
, ra
);
757 /* check if the TID is in aggregation */
758 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
759 spin_lock_bh(&sta
->lock
);
761 if (*state
!= HT_AGG_STATE_OPERATIONAL
) {
766 #ifdef CONFIG_MAC80211_HT_DEBUG
767 printk(KERN_DEBUG
"Tx BA session stop requested for %s tid %u\n",
768 print_mac(mac
, ra
), tid
);
769 #endif /* CONFIG_MAC80211_HT_DEBUG */
771 ieee80211_stop_queue(hw
, sta
->tid_to_tx_q
[tid
]);
773 *state
= HT_AGG_STATE_REQ_STOP_BA_MSK
|
774 (initiator
<< HT_AGG_STATE_INITIATOR_SHIFT
);
776 if (local
->ops
->ampdu_action
)
777 ret
= local
->ops
->ampdu_action(hw
, IEEE80211_AMPDU_TX_STOP
,
780 /* case HW denied going back to legacy */
782 WARN_ON(ret
!= -EBUSY
);
783 *state
= HT_AGG_STATE_OPERATIONAL
;
784 ieee80211_wake_queue(hw
, sta
->tid_to_tx_q
[tid
]);
789 spin_unlock_bh(&sta
->lock
);
793 EXPORT_SYMBOL(ieee80211_stop_tx_ba_session
);
795 void ieee80211_start_tx_ba_cb(struct ieee80211_hw
*hw
, u8
*ra
, u16 tid
)
797 struct ieee80211_local
*local
= hw_to_local(hw
);
798 struct sta_info
*sta
;
800 DECLARE_MAC_BUF(mac
);
802 if (tid
>= STA_TID_NUM
) {
803 #ifdef CONFIG_MAC80211_HT_DEBUG
804 printk(KERN_DEBUG
"Bad TID value: tid = %d (>= %d)\n",
811 sta
= sta_info_get(local
, ra
);
814 #ifdef CONFIG_MAC80211_HT_DEBUG
815 printk(KERN_DEBUG
"Could not find station: %s\n",
821 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
822 spin_lock_bh(&sta
->lock
);
824 if (!(*state
& HT_ADDBA_REQUESTED_MSK
)) {
825 #ifdef CONFIG_MAC80211_HT_DEBUG
826 printk(KERN_DEBUG
"addBA was not requested yet, state is %d\n",
829 spin_unlock_bh(&sta
->lock
);
834 WARN_ON_ONCE(*state
& HT_ADDBA_DRV_READY_MSK
);
836 *state
|= HT_ADDBA_DRV_READY_MSK
;
838 if (*state
== HT_AGG_STATE_OPERATIONAL
) {
839 #ifdef CONFIG_MAC80211_HT_DEBUG
840 printk(KERN_DEBUG
"Aggregation is on for tid %d \n", tid
);
842 ieee80211_wake_queue(hw
, sta
->tid_to_tx_q
[tid
]);
844 spin_unlock_bh(&sta
->lock
);
847 EXPORT_SYMBOL(ieee80211_start_tx_ba_cb
);
849 void ieee80211_stop_tx_ba_cb(struct ieee80211_hw
*hw
, u8
*ra
, u8 tid
)
851 struct ieee80211_local
*local
= hw_to_local(hw
);
852 struct sta_info
*sta
;
855 DECLARE_MAC_BUF(mac
);
857 if (tid
>= STA_TID_NUM
) {
858 #ifdef CONFIG_MAC80211_HT_DEBUG
859 printk(KERN_DEBUG
"Bad TID value: tid = %d (>= %d)\n",
865 #ifdef CONFIG_MAC80211_HT_DEBUG
866 printk(KERN_DEBUG
"Stopping Tx BA session for %s tid %d\n",
867 print_mac(mac
, ra
), tid
);
868 #endif /* CONFIG_MAC80211_HT_DEBUG */
871 sta
= sta_info_get(local
, ra
);
873 #ifdef CONFIG_MAC80211_HT_DEBUG
874 printk(KERN_DEBUG
"Could not find station: %s\n",
880 state
= &sta
->ampdu_mlme
.tid_state_tx
[tid
];
882 /* NOTE: no need to use sta->lock in this state check, as
883 * ieee80211_stop_tx_ba_session will let only one stop call to
884 * pass through per sta/tid
886 if ((*state
& HT_AGG_STATE_REQ_STOP_BA_MSK
) == 0) {
887 #ifdef CONFIG_MAC80211_HT_DEBUG
888 printk(KERN_DEBUG
"unexpected callback to A-MPDU stop\n");
894 if (*state
& HT_AGG_STATE_INITIATOR_MSK
)
895 ieee80211_send_delba(sta
->sdata
, ra
, tid
,
896 WLAN_BACK_INITIATOR
, WLAN_REASON_QSTA_NOT_USE
);
898 agg_queue
= sta
->tid_to_tx_q
[tid
];
900 ieee80211_ht_agg_queue_remove(local
, sta
, tid
, 1);
902 /* We just requeued the all the frames that were in the
903 * removed queue, and since we might miss a softirq we do
904 * netif_schedule_queue. ieee80211_wake_queue is not used
905 * here as this queue is not necessarily stopped
907 netif_schedule_queue(netdev_get_tx_queue(local
->mdev
, agg_queue
));
908 spin_lock_bh(&sta
->lock
);
909 *state
= HT_AGG_STATE_IDLE
;
910 sta
->ampdu_mlme
.addba_req_num
[tid
] = 0;
911 kfree(sta
->ampdu_mlme
.tid_tx
[tid
]);
912 sta
->ampdu_mlme
.tid_tx
[tid
] = NULL
;
913 spin_unlock_bh(&sta
->lock
);
917 EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb
);
919 void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw
*hw
,
920 const u8
*ra
, u16 tid
)
922 struct ieee80211_local
*local
= hw_to_local(hw
);
923 struct ieee80211_ra_tid
*ra_tid
;
924 struct sk_buff
*skb
= dev_alloc_skb(0);
926 if (unlikely(!skb
)) {
927 #ifdef CONFIG_MAC80211_HT_DEBUG
929 printk(KERN_WARNING
"%s: Not enough memory, "
930 "dropping start BA session", skb
->dev
->name
);
934 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
935 memcpy(&ra_tid
->ra
, ra
, ETH_ALEN
);
938 skb
->pkt_type
= IEEE80211_ADDBA_MSG
;
939 skb_queue_tail(&local
->skb_queue
, skb
);
940 tasklet_schedule(&local
->tasklet
);
942 EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe
);
944 void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw
*hw
,
945 const u8
*ra
, u16 tid
)
947 struct ieee80211_local
*local
= hw_to_local(hw
);
948 struct ieee80211_ra_tid
*ra_tid
;
949 struct sk_buff
*skb
= dev_alloc_skb(0);
951 if (unlikely(!skb
)) {
952 #ifdef CONFIG_MAC80211_HT_DEBUG
954 printk(KERN_WARNING
"%s: Not enough memory, "
955 "dropping stop BA session", skb
->dev
->name
);
959 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
960 memcpy(&ra_tid
->ra
, ra
, ETH_ALEN
);
963 skb
->pkt_type
= IEEE80211_DELBA_MSG
;
964 skb_queue_tail(&local
->skb_queue
, skb
);
965 tasklet_schedule(&local
->tasklet
);
967 EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe
);
969 static void ieee80211_set_multicast_list(struct net_device
*dev
)
971 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
972 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
973 int allmulti
, promisc
, sdata_allmulti
, sdata_promisc
;
975 allmulti
= !!(dev
->flags
& IFF_ALLMULTI
);
976 promisc
= !!(dev
->flags
& IFF_PROMISC
);
977 sdata_allmulti
= !!(sdata
->flags
& IEEE80211_SDATA_ALLMULTI
);
978 sdata_promisc
= !!(sdata
->flags
& IEEE80211_SDATA_PROMISC
);
980 if (allmulti
!= sdata_allmulti
) {
981 if (dev
->flags
& IFF_ALLMULTI
)
982 atomic_inc(&local
->iff_allmultis
);
984 atomic_dec(&local
->iff_allmultis
);
985 sdata
->flags
^= IEEE80211_SDATA_ALLMULTI
;
988 if (promisc
!= sdata_promisc
) {
989 if (dev
->flags
& IFF_PROMISC
)
990 atomic_inc(&local
->iff_promiscs
);
992 atomic_dec(&local
->iff_promiscs
);
993 sdata
->flags
^= IEEE80211_SDATA_PROMISC
;
996 dev_mc_sync(local
->mdev
, dev
);
999 static const struct header_ops ieee80211_header_ops
= {
1000 .create
= eth_header
,
1001 .parse
= header_parse_80211
,
1002 .rebuild
= eth_rebuild_header
,
1003 .cache
= eth_header_cache
,
1004 .cache_update
= eth_header_cache_update
,
1007 void ieee80211_if_setup(struct net_device
*dev
)
1010 dev
->hard_start_xmit
= ieee80211_subif_start_xmit
;
1011 dev
->wireless_handlers
= &ieee80211_iw_handler_def
;
1012 dev
->set_multicast_list
= ieee80211_set_multicast_list
;
1013 dev
->change_mtu
= ieee80211_change_mtu
;
1014 dev
->open
= ieee80211_open
;
1015 dev
->stop
= ieee80211_stop
;
1016 dev
->destructor
= free_netdev
;
1017 /* we will validate the address ourselves in ->open */
1018 dev
->validate_addr
= NULL
;
1021 /* everything else */
1023 int ieee80211_if_config(struct ieee80211_sub_if_data
*sdata
, u32 changed
)
1025 struct ieee80211_local
*local
= sdata
->local
;
1026 struct ieee80211_if_conf conf
;
1028 if (WARN_ON(!netif_running(sdata
->dev
)))
1031 if (!local
->ops
->config_interface
)
1034 memset(&conf
, 0, sizeof(conf
));
1035 conf
.changed
= changed
;
1037 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
||
1038 sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
) {
1039 conf
.bssid
= sdata
->u
.sta
.bssid
;
1040 conf
.ssid
= sdata
->u
.sta
.ssid
;
1041 conf
.ssid_len
= sdata
->u
.sta
.ssid_len
;
1042 } else if (sdata
->vif
.type
== IEEE80211_IF_TYPE_AP
) {
1043 conf
.bssid
= sdata
->dev
->dev_addr
;
1044 conf
.ssid
= sdata
->u
.ap
.ssid
;
1045 conf
.ssid_len
= sdata
->u
.ap
.ssid_len
;
1046 } else if (ieee80211_vif_is_mesh(&sdata
->vif
)) {
1047 u8 zero
[ETH_ALEN
] = { 0 };
1056 if (WARN_ON(!conf
.bssid
&& (changed
& IEEE80211_IFCC_BSSID
)))
1059 if (WARN_ON(!conf
.ssid
&& (changed
& IEEE80211_IFCC_SSID
)))
1062 return local
->ops
->config_interface(local_to_hw(local
),
1063 &sdata
->vif
, &conf
);
1066 int ieee80211_hw_config(struct ieee80211_local
*local
)
1068 struct ieee80211_channel
*chan
;
1071 if (local
->sta_sw_scanning
)
1072 chan
= local
->scan_channel
;
1074 chan
= local
->oper_channel
;
1076 local
->hw
.conf
.channel
= chan
;
1078 if (!local
->hw
.conf
.power_level
)
1079 local
->hw
.conf
.power_level
= chan
->max_power
;
1081 local
->hw
.conf
.power_level
= min(chan
->max_power
,
1082 local
->hw
.conf
.power_level
);
1084 local
->hw
.conf
.max_antenna_gain
= chan
->max_antenna_gain
;
1086 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1087 printk(KERN_DEBUG
"%s: HW CONFIG: freq=%d\n",
1088 wiphy_name(local
->hw
.wiphy
), chan
->center_freq
);
1091 if (local
->open_count
)
1092 ret
= local
->ops
->config(local_to_hw(local
), &local
->hw
.conf
);
1098 * ieee80211_handle_ht should be used only after legacy configuration
1099 * has been determined namely band, as ht configuration depends upon
1100 * the hardware's HT abilities for a _specific_ band.
1102 u32
ieee80211_handle_ht(struct ieee80211_local
*local
, int enable_ht
,
1103 struct ieee80211_ht_info
*req_ht_cap
,
1104 struct ieee80211_ht_bss_info
*req_bss_cap
)
1106 struct ieee80211_conf
*conf
= &local
->hw
.conf
;
1107 struct ieee80211_supported_band
*sband
;
1108 struct ieee80211_ht_info ht_conf
;
1109 struct ieee80211_ht_bss_info ht_bss_conf
;
1112 u8 max_tx_streams
= IEEE80211_HT_CAP_MAX_STREAMS
;
1115 sband
= local
->hw
.wiphy
->bands
[conf
->channel
->band
];
1117 memset(&ht_conf
, 0, sizeof(struct ieee80211_ht_info
));
1118 memset(&ht_bss_conf
, 0, sizeof(struct ieee80211_ht_bss_info
));
1120 /* HT is not supported */
1121 if (!sband
->ht_info
.ht_supported
) {
1122 conf
->flags
&= ~IEEE80211_CONF_SUPPORT_HT_MODE
;
1128 if (conf
->flags
& IEEE80211_CONF_SUPPORT_HT_MODE
)
1129 changed
|= BSS_CHANGED_HT
;
1130 conf
->flags
&= ~IEEE80211_CONF_SUPPORT_HT_MODE
;
1131 conf
->ht_conf
.ht_supported
= 0;
1136 if (!(conf
->flags
& IEEE80211_CONF_SUPPORT_HT_MODE
))
1137 changed
|= BSS_CHANGED_HT
;
1139 conf
->flags
|= IEEE80211_CONF_SUPPORT_HT_MODE
;
1140 ht_conf
.ht_supported
= 1;
1142 ht_conf
.cap
= req_ht_cap
->cap
& sband
->ht_info
.cap
;
1143 ht_conf
.cap
&= ~(IEEE80211_HT_CAP_MIMO_PS
);
1144 ht_conf
.cap
|= sband
->ht_info
.cap
& IEEE80211_HT_CAP_MIMO_PS
;
1145 ht_bss_conf
.primary_channel
= req_bss_cap
->primary_channel
;
1146 ht_bss_conf
.bss_cap
= req_bss_cap
->bss_cap
;
1147 ht_bss_conf
.bss_op_mode
= req_bss_cap
->bss_op_mode
;
1149 ht_conf
.ampdu_factor
= req_ht_cap
->ampdu_factor
;
1150 ht_conf
.ampdu_density
= req_ht_cap
->ampdu_density
;
1153 tx_mcs_set_cap
= sband
->ht_info
.supp_mcs_set
[12];
1155 /* configure suppoerted Tx MCS according to requested MCS
1156 * (based in most cases on Rx capabilities of peer) and self
1157 * Tx MCS capabilities (as defined by low level driver HW
1158 * Tx capabilities) */
1159 if (!(tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_DEFINED
))
1162 /* Counting from 0 therfore + 1 */
1163 if (tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_RX_DIFF
)
1164 max_tx_streams
= ((tx_mcs_set_cap
&
1165 IEEE80211_HT_CAP_MCS_TX_STREAMS
) >> 2) + 1;
1167 for (i
= 0; i
< max_tx_streams
; i
++)
1168 ht_conf
.supp_mcs_set
[i
] =
1169 sband
->ht_info
.supp_mcs_set
[i
] &
1170 req_ht_cap
->supp_mcs_set
[i
];
1172 if (tx_mcs_set_cap
& IEEE80211_HT_CAP_MCS_TX_UEQM
)
1173 for (i
= IEEE80211_SUPP_MCS_SET_UEQM
;
1174 i
< IEEE80211_SUPP_MCS_SET_LEN
; i
++)
1175 ht_conf
.supp_mcs_set
[i
] =
1176 sband
->ht_info
.supp_mcs_set
[i
] &
1177 req_ht_cap
->supp_mcs_set
[i
];
1180 /* if bss configuration changed store the new one */
1181 if (memcmp(&conf
->ht_conf
, &ht_conf
, sizeof(ht_conf
)) ||
1182 memcmp(&conf
->ht_bss_conf
, &ht_bss_conf
, sizeof(ht_bss_conf
))) {
1183 changed
|= BSS_CHANGED_HT
;
1184 memcpy(&conf
->ht_conf
, &ht_conf
, sizeof(ht_conf
));
1185 memcpy(&conf
->ht_bss_conf
, &ht_bss_conf
, sizeof(ht_bss_conf
));
1191 void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data
*sdata
,
1194 struct ieee80211_local
*local
= sdata
->local
;
1199 if (local
->ops
->bss_info_changed
)
1200 local
->ops
->bss_info_changed(local_to_hw(local
),
1206 u32
ieee80211_reset_erp_info(struct ieee80211_sub_if_data
*sdata
)
1208 sdata
->bss_conf
.use_cts_prot
= 0;
1209 sdata
->bss_conf
.use_short_preamble
= 0;
1210 return BSS_CHANGED_ERP_CTS_PROT
| BSS_CHANGED_ERP_PREAMBLE
;
1213 void ieee80211_tx_status_irqsafe(struct ieee80211_hw
*hw
,
1214 struct sk_buff
*skb
)
1216 struct ieee80211_local
*local
= hw_to_local(hw
);
1217 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1220 skb
->dev
= local
->mdev
;
1221 skb
->pkt_type
= IEEE80211_TX_STATUS_MSG
;
1222 skb_queue_tail(info
->flags
& IEEE80211_TX_CTL_REQ_TX_STATUS
?
1223 &local
->skb_queue
: &local
->skb_queue_unreliable
, skb
);
1224 tmp
= skb_queue_len(&local
->skb_queue
) +
1225 skb_queue_len(&local
->skb_queue_unreliable
);
1226 while (tmp
> IEEE80211_IRQSAFE_QUEUE_LIMIT
&&
1227 (skb
= skb_dequeue(&local
->skb_queue_unreliable
))) {
1228 dev_kfree_skb_irq(skb
);
1230 I802_DEBUG_INC(local
->tx_status_drop
);
1232 tasklet_schedule(&local
->tasklet
);
1234 EXPORT_SYMBOL(ieee80211_tx_status_irqsafe
);
1236 static void ieee80211_tasklet_handler(unsigned long data
)
1238 struct ieee80211_local
*local
= (struct ieee80211_local
*) data
;
1239 struct sk_buff
*skb
;
1240 struct ieee80211_rx_status rx_status
;
1241 struct ieee80211_ra_tid
*ra_tid
;
1243 while ((skb
= skb_dequeue(&local
->skb_queue
)) ||
1244 (skb
= skb_dequeue(&local
->skb_queue_unreliable
))) {
1245 switch (skb
->pkt_type
) {
1246 case IEEE80211_RX_MSG
:
1247 /* status is in skb->cb */
1248 memcpy(&rx_status
, skb
->cb
, sizeof(rx_status
));
1249 /* Clear skb->pkt_type in order to not confuse kernel
1252 __ieee80211_rx(local_to_hw(local
), skb
, &rx_status
);
1254 case IEEE80211_TX_STATUS_MSG
:
1256 ieee80211_tx_status(local_to_hw(local
), skb
);
1258 case IEEE80211_DELBA_MSG
:
1259 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
1260 ieee80211_stop_tx_ba_cb(local_to_hw(local
),
1261 ra_tid
->ra
, ra_tid
->tid
);
1264 case IEEE80211_ADDBA_MSG
:
1265 ra_tid
= (struct ieee80211_ra_tid
*) &skb
->cb
;
1266 ieee80211_start_tx_ba_cb(local_to_hw(local
),
1267 ra_tid
->ra
, ra_tid
->tid
);
1278 /* Remove added headers (e.g., QoS control), encryption header/MIC, etc. to
1279 * make a prepared TX frame (one that has been given to hw) to look like brand
1280 * new IEEE 802.11 frame that is ready to go through TX processing again.
1282 static void ieee80211_remove_tx_extra(struct ieee80211_local
*local
,
1283 struct ieee80211_key
*key
,
1284 struct sk_buff
*skb
)
1286 unsigned int hdrlen
, iv_len
, mic_len
;
1287 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*)skb
->data
;
1289 hdrlen
= ieee80211_hdrlen(hdr
->frame_control
);
1294 switch (key
->conf
.alg
) {
1296 iv_len
= WEP_IV_LEN
;
1297 mic_len
= WEP_ICV_LEN
;
1300 iv_len
= TKIP_IV_LEN
;
1301 mic_len
= TKIP_ICV_LEN
;
1304 iv_len
= CCMP_HDR_LEN
;
1305 mic_len
= CCMP_MIC_LEN
;
1311 if (skb
->len
>= hdrlen
+ mic_len
&&
1312 !(key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
))
1313 skb_trim(skb
, skb
->len
- mic_len
);
1314 if (skb
->len
>= hdrlen
+ iv_len
) {
1315 memmove(skb
->data
+ iv_len
, skb
->data
, hdrlen
);
1316 hdr
= (struct ieee80211_hdr
*)skb_pull(skb
, iv_len
);
1320 if (ieee80211_is_data_qos(hdr
->frame_control
)) {
1321 hdr
->frame_control
&= ~cpu_to_le16(IEEE80211_STYPE_QOS_DATA
);
1322 memmove(skb
->data
+ IEEE80211_QOS_CTL_LEN
, skb
->data
,
1323 hdrlen
- IEEE80211_QOS_CTL_LEN
);
1324 skb_pull(skb
, IEEE80211_QOS_CTL_LEN
);
1328 static void ieee80211_handle_filtered_frame(struct ieee80211_local
*local
,
1329 struct sta_info
*sta
,
1330 struct sk_buff
*skb
)
1332 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1334 sta
->tx_filtered_count
++;
1337 * Clear the TX filter mask for this STA when sending the next
1338 * packet. If the STA went to power save mode, this will happen
1339 * when it wakes up for the next time.
1341 set_sta_flags(sta
, WLAN_STA_CLEAR_PS_FILT
);
1344 * This code races in the following way:
1346 * (1) STA sends frame indicating it will go to sleep and does so
1347 * (2) hardware/firmware adds STA to filter list, passes frame up
1348 * (3) hardware/firmware processes TX fifo and suppresses a frame
1349 * (4) we get TX status before having processed the frame and
1350 * knowing that the STA has gone to sleep.
1352 * This is actually quite unlikely even when both those events are
1353 * processed from interrupts coming in quickly after one another or
1354 * even at the same time because we queue both TX status events and
1355 * RX frames to be processed by a tasklet and process them in the
1356 * same order that they were received or TX status last. Hence, there
1357 * is no race as long as the frame RX is processed before the next TX
1358 * status, which drivers can ensure, see below.
1360 * Note that this can only happen if the hardware or firmware can
1361 * actually add STAs to the filter list, if this is done by the
1362 * driver in response to set_tim() (which will only reduce the race
1363 * this whole filtering tries to solve, not completely solve it)
1364 * this situation cannot happen.
1366 * To completely solve this race drivers need to make sure that they
1367 * (a) don't mix the irq-safe/not irq-safe TX status/RX processing
1369 * (b) always process RX events before TX status events if ordering
1370 * can be unknown, for example with different interrupt status
1373 if (test_sta_flags(sta
, WLAN_STA_PS
) &&
1374 skb_queue_len(&sta
->tx_filtered
) < STA_MAX_TX_BUFFER
) {
1375 ieee80211_remove_tx_extra(local
, sta
->key
, skb
);
1376 skb_queue_tail(&sta
->tx_filtered
, skb
);
1380 if (!test_sta_flags(sta
, WLAN_STA_PS
) &&
1381 !(info
->flags
& IEEE80211_TX_CTL_REQUEUE
)) {
1382 /* Software retry the packet once */
1383 info
->flags
|= IEEE80211_TX_CTL_REQUEUE
;
1384 ieee80211_remove_tx_extra(local
, sta
->key
, skb
);
1385 dev_queue_xmit(skb
);
1389 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1390 if (net_ratelimit())
1391 printk(KERN_DEBUG
"%s: dropped TX filtered frame, "
1392 "queue_len=%d PS=%d @%lu\n",
1393 wiphy_name(local
->hw
.wiphy
),
1394 skb_queue_len(&sta
->tx_filtered
),
1395 !!test_sta_flags(sta
, WLAN_STA_PS
), jiffies
);
1400 void ieee80211_tx_status(struct ieee80211_hw
*hw
, struct sk_buff
*skb
)
1402 struct sk_buff
*skb2
;
1403 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) skb
->data
;
1404 struct ieee80211_local
*local
= hw_to_local(hw
);
1405 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
1408 struct ieee80211_tx_status_rtap_hdr
*rthdr
;
1409 struct ieee80211_sub_if_data
*sdata
;
1410 struct net_device
*prev_dev
= NULL
;
1411 struct sta_info
*sta
;
1415 if (info
->status
.excessive_retries
) {
1416 sta
= sta_info_get(local
, hdr
->addr1
);
1418 if (test_sta_flags(sta
, WLAN_STA_PS
)) {
1420 * The STA is in power save mode, so assume
1421 * that this TX packet failed because of that.
1423 ieee80211_handle_filtered_frame(local
, sta
, skb
);
1430 fc
= hdr
->frame_control
;
1432 if ((info
->flags
& IEEE80211_TX_STAT_AMPDU_NO_BACK
) &&
1433 (ieee80211_is_data_qos(fc
))) {
1436 sta
= sta_info_get(local
, hdr
->addr1
);
1438 qc
= ieee80211_get_qos_ctl(hdr
);
1440 ssn
= ((le16_to_cpu(hdr
->seq_ctrl
) + 0x10)
1441 & IEEE80211_SCTL_SEQ
);
1442 ieee80211_send_bar(sta
->sdata
, hdr
->addr1
,
1447 if (info
->flags
& IEEE80211_TX_STAT_TX_FILTERED
) {
1448 sta
= sta_info_get(local
, hdr
->addr1
);
1450 ieee80211_handle_filtered_frame(local
, sta
, skb
);
1455 rate_control_tx_status(local
->mdev
, skb
);
1459 ieee80211_led_tx(local
, 0);
1462 * Fragments are passed to low-level drivers as separate skbs, so these
1463 * are actually fragments, not frames. Update frame counters only for
1464 * the first fragment of the frame. */
1466 frag
= le16_to_cpu(hdr
->seq_ctrl
) & IEEE80211_SCTL_FRAG
;
1467 type
= le16_to_cpu(hdr
->frame_control
) & IEEE80211_FCTL_FTYPE
;
1469 if (info
->flags
& IEEE80211_TX_STAT_ACK
) {
1471 local
->dot11TransmittedFrameCount
++;
1472 if (is_multicast_ether_addr(hdr
->addr1
))
1473 local
->dot11MulticastTransmittedFrameCount
++;
1474 if (info
->status
.retry_count
> 0)
1475 local
->dot11RetryCount
++;
1476 if (info
->status
.retry_count
> 1)
1477 local
->dot11MultipleRetryCount
++;
1480 /* This counter shall be incremented for an acknowledged MPDU
1481 * with an individual address in the address 1 field or an MPDU
1482 * with a multicast address in the address 1 field of type Data
1484 if (!is_multicast_ether_addr(hdr
->addr1
) ||
1485 type
== IEEE80211_FTYPE_DATA
||
1486 type
== IEEE80211_FTYPE_MGMT
)
1487 local
->dot11TransmittedFragmentCount
++;
1490 local
->dot11FailedCount
++;
1493 /* this was a transmitted frame, but now we want to reuse it */
1497 * This is a bit racy but we can avoid a lot of work
1500 if (!local
->monitors
&& !local
->cooked_mntrs
) {
1505 /* send frame to monitor interfaces now */
1507 if (skb_headroom(skb
) < sizeof(*rthdr
)) {
1508 printk(KERN_ERR
"ieee80211_tx_status: headroom too small\n");
1513 rthdr
= (struct ieee80211_tx_status_rtap_hdr
*)
1514 skb_push(skb
, sizeof(*rthdr
));
1516 memset(rthdr
, 0, sizeof(*rthdr
));
1517 rthdr
->hdr
.it_len
= cpu_to_le16(sizeof(*rthdr
));
1518 rthdr
->hdr
.it_present
=
1519 cpu_to_le32((1 << IEEE80211_RADIOTAP_TX_FLAGS
) |
1520 (1 << IEEE80211_RADIOTAP_DATA_RETRIES
));
1522 if (!(info
->flags
& IEEE80211_TX_STAT_ACK
) &&
1523 !is_multicast_ether_addr(hdr
->addr1
))
1524 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_FAIL
);
1526 if ((info
->flags
& IEEE80211_TX_CTL_USE_RTS_CTS
) &&
1527 (info
->flags
& IEEE80211_TX_CTL_USE_CTS_PROTECT
))
1528 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_CTS
);
1529 else if (info
->flags
& IEEE80211_TX_CTL_USE_RTS_CTS
)
1530 rthdr
->tx_flags
|= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_RTS
);
1532 rthdr
->data_retries
= info
->status
.retry_count
;
1534 /* XXX: is this sufficient for BPF? */
1535 skb_set_mac_header(skb
, 0);
1536 skb
->ip_summed
= CHECKSUM_UNNECESSARY
;
1537 skb
->pkt_type
= PACKET_OTHERHOST
;
1538 skb
->protocol
= htons(ETH_P_802_2
);
1539 memset(skb
->cb
, 0, sizeof(skb
->cb
));
1542 list_for_each_entry_rcu(sdata
, &local
->interfaces
, list
) {
1543 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_MNTR
) {
1544 if (!netif_running(sdata
->dev
))
1548 skb2
= skb_clone(skb
, GFP_ATOMIC
);
1550 skb2
->dev
= prev_dev
;
1555 prev_dev
= sdata
->dev
;
1559 skb
->dev
= prev_dev
;
1566 EXPORT_SYMBOL(ieee80211_tx_status
);
1568 struct ieee80211_hw
*ieee80211_alloc_hw(size_t priv_data_len
,
1569 const struct ieee80211_ops
*ops
)
1571 struct ieee80211_local
*local
;
1573 struct wiphy
*wiphy
;
1575 /* Ensure 32-byte alignment of our private data and hw private data.
1576 * We use the wiphy priv data for both our ieee80211_local and for
1577 * the driver's private data
1579 * In memory it'll be like this:
1581 * +-------------------------+
1583 * +-------------------------+
1584 * | struct ieee80211_local |
1585 * +-------------------------+
1586 * | driver's private data |
1587 * +-------------------------+
1590 priv_size
= ((sizeof(struct ieee80211_local
) +
1591 NETDEV_ALIGN_CONST
) & ~NETDEV_ALIGN_CONST
) +
1594 wiphy
= wiphy_new(&mac80211_config_ops
, priv_size
);
1599 wiphy
->privid
= mac80211_wiphy_privid
;
1601 local
= wiphy_priv(wiphy
);
1602 local
->hw
.wiphy
= wiphy
;
1604 local
->hw
.priv
= (char *)local
+
1605 ((sizeof(struct ieee80211_local
) +
1606 NETDEV_ALIGN_CONST
) & ~NETDEV_ALIGN_CONST
);
1609 BUG_ON(!ops
->start
);
1611 BUG_ON(!ops
->config
);
1612 BUG_ON(!ops
->add_interface
);
1613 BUG_ON(!ops
->remove_interface
);
1614 BUG_ON(!ops
->configure_filter
);
1617 local
->hw
.queues
= 1; /* default */
1619 local
->bridge_packets
= 1;
1621 local
->rts_threshold
= IEEE80211_MAX_RTS_THRESHOLD
;
1622 local
->fragmentation_threshold
= IEEE80211_MAX_FRAG_THRESHOLD
;
1623 local
->short_retry_limit
= 7;
1624 local
->long_retry_limit
= 4;
1625 local
->hw
.conf
.radio_enabled
= 1;
1627 INIT_LIST_HEAD(&local
->interfaces
);
1629 spin_lock_init(&local
->key_lock
);
1631 INIT_DELAYED_WORK(&local
->scan_work
, ieee80211_sta_scan_work
);
1633 sta_info_init(local
);
1635 tasklet_init(&local
->tx_pending_tasklet
, ieee80211_tx_pending
,
1636 (unsigned long)local
);
1637 tasklet_disable(&local
->tx_pending_tasklet
);
1639 tasklet_init(&local
->tasklet
,
1640 ieee80211_tasklet_handler
,
1641 (unsigned long) local
);
1642 tasklet_disable(&local
->tasklet
);
1644 skb_queue_head_init(&local
->skb_queue
);
1645 skb_queue_head_init(&local
->skb_queue_unreliable
);
1647 return local_to_hw(local
);
1649 EXPORT_SYMBOL(ieee80211_alloc_hw
);
1651 int ieee80211_register_hw(struct ieee80211_hw
*hw
)
1653 struct ieee80211_local
*local
= hw_to_local(hw
);
1656 enum ieee80211_band band
;
1657 struct net_device
*mdev
;
1658 struct wireless_dev
*mwdev
;
1661 * generic code guarantees at least one band,
1662 * set this very early because much code assumes
1663 * that hw.conf.channel is assigned
1665 for (band
= 0; band
< IEEE80211_NUM_BANDS
; band
++) {
1666 struct ieee80211_supported_band
*sband
;
1668 sband
= local
->hw
.wiphy
->bands
[band
];
1670 /* init channel we're on */
1671 local
->hw
.conf
.channel
=
1672 local
->oper_channel
=
1673 local
->scan_channel
= &sband
->channels
[0];
1678 /* if low-level driver supports AP, we also support VLAN */
1679 if (local
->hw
.wiphy
->interface_modes
& BIT(NL80211_IFTYPE_AP
))
1680 local
->hw
.wiphy
->interface_modes
|= BIT(NL80211_IFTYPE_AP_VLAN
);
1682 /* mac80211 always supports monitor */
1683 local
->hw
.wiphy
->interface_modes
|= BIT(NL80211_IFTYPE_MONITOR
);
1685 result
= wiphy_register(local
->hw
.wiphy
);
1690 * We use the number of queues for feature tests (QoS, HT) internally
1691 * so restrict them appropriately.
1693 if (hw
->queues
> IEEE80211_MAX_QUEUES
)
1694 hw
->queues
= IEEE80211_MAX_QUEUES
;
1695 if (hw
->ampdu_queues
> IEEE80211_MAX_AMPDU_QUEUES
)
1696 hw
->ampdu_queues
= IEEE80211_MAX_AMPDU_QUEUES
;
1698 hw
->ampdu_queues
= 0;
1700 mdev
= alloc_netdev_mq(sizeof(struct wireless_dev
),
1701 "wmaster%d", ether_setup
,
1702 ieee80211_num_queues(hw
));
1704 goto fail_mdev_alloc
;
1706 mwdev
= netdev_priv(mdev
);
1707 mdev
->ieee80211_ptr
= mwdev
;
1708 mwdev
->wiphy
= local
->hw
.wiphy
;
1712 ieee80211_rx_bss_list_init(local
);
1714 mdev
->hard_start_xmit
= ieee80211_master_start_xmit
;
1715 mdev
->open
= ieee80211_master_open
;
1716 mdev
->stop
= ieee80211_master_stop
;
1717 mdev
->type
= ARPHRD_IEEE80211
;
1718 mdev
->header_ops
= &ieee80211_header_ops
;
1719 mdev
->set_multicast_list
= ieee80211_master_set_multicast_list
;
1721 name
= wiphy_dev(local
->hw
.wiphy
)->driver
->name
;
1722 local
->hw
.workqueue
= create_freezeable_workqueue(name
);
1723 if (!local
->hw
.workqueue
) {
1725 goto fail_workqueue
;
1729 * The hardware needs headroom for sending the frame,
1730 * and we need some headroom for passing the frame to monitor
1731 * interfaces, but never both at the same time.
1733 local
->tx_headroom
= max_t(unsigned int , local
->hw
.extra_tx_headroom
,
1734 sizeof(struct ieee80211_tx_status_rtap_hdr
));
1736 debugfs_hw_add(local
);
1738 if (local
->hw
.conf
.beacon_int
< 10)
1739 local
->hw
.conf
.beacon_int
= 100;
1741 if (local
->hw
.max_listen_interval
== 0)
1742 local
->hw
.max_listen_interval
= 1;
1744 local
->hw
.conf
.listen_interval
= local
->hw
.max_listen_interval
;
1746 local
->wstats_flags
|= local
->hw
.flags
& (IEEE80211_HW_SIGNAL_UNSPEC
|
1747 IEEE80211_HW_SIGNAL_DB
|
1748 IEEE80211_HW_SIGNAL_DBM
) ?
1749 IW_QUAL_QUAL_UPDATED
: IW_QUAL_QUAL_INVALID
;
1750 local
->wstats_flags
|= local
->hw
.flags
& IEEE80211_HW_NOISE_DBM
?
1751 IW_QUAL_NOISE_UPDATED
: IW_QUAL_NOISE_INVALID
;
1752 if (local
->hw
.flags
& IEEE80211_HW_SIGNAL_DBM
)
1753 local
->wstats_flags
|= IW_QUAL_DBM
;
1755 result
= sta_info_start(local
);
1760 result
= dev_alloc_name(local
->mdev
, local
->mdev
->name
);
1764 memcpy(local
->mdev
->dev_addr
, local
->hw
.wiphy
->perm_addr
, ETH_ALEN
);
1765 SET_NETDEV_DEV(local
->mdev
, wiphy_dev(local
->hw
.wiphy
));
1767 result
= register_netdevice(local
->mdev
);
1771 result
= ieee80211_init_rate_ctrl_alg(local
,
1772 hw
->rate_control_algorithm
);
1774 printk(KERN_DEBUG
"%s: Failed to initialize rate control "
1775 "algorithm\n", wiphy_name(local
->hw
.wiphy
));
1779 result
= ieee80211_wep_init(local
);
1782 printk(KERN_DEBUG
"%s: Failed to initialize wep: %d\n",
1783 wiphy_name(local
->hw
.wiphy
), result
);
1787 local
->mdev
->select_queue
= ieee80211_select_queue
;
1789 /* add one default STA interface */
1790 result
= ieee80211_if_add(local
, "wlan%d", NULL
,
1791 IEEE80211_IF_TYPE_STA
, NULL
);
1793 printk(KERN_WARNING
"%s: Failed to add default virtual iface\n",
1794 wiphy_name(local
->hw
.wiphy
));
1798 ieee80211_led_init(local
);
1803 rate_control_deinitialize(local
);
1805 unregister_netdevice(local
->mdev
);
1809 sta_info_stop(local
);
1811 debugfs_hw_del(local
);
1812 destroy_workqueue(local
->hw
.workqueue
);
1815 free_netdev(local
->mdev
);
1817 wiphy_unregister(local
->hw
.wiphy
);
1820 EXPORT_SYMBOL(ieee80211_register_hw
);
1822 void ieee80211_unregister_hw(struct ieee80211_hw
*hw
)
1824 struct ieee80211_local
*local
= hw_to_local(hw
);
1826 tasklet_kill(&local
->tx_pending_tasklet
);
1827 tasklet_kill(&local
->tasklet
);
1832 * At this point, interface list manipulations are fine
1833 * because the driver cannot be handing us frames any
1834 * more and the tasklet is killed.
1837 /* First, we remove all virtual interfaces. */
1838 ieee80211_remove_interfaces(local
);
1840 /* then, finally, remove the master interface */
1841 unregister_netdevice(local
->mdev
);
1845 ieee80211_rx_bss_list_deinit(local
);
1846 ieee80211_clear_tx_pending(local
);
1847 sta_info_stop(local
);
1848 rate_control_deinitialize(local
);
1849 debugfs_hw_del(local
);
1851 if (skb_queue_len(&local
->skb_queue
)
1852 || skb_queue_len(&local
->skb_queue_unreliable
))
1853 printk(KERN_WARNING
"%s: skb_queue not empty\n",
1854 wiphy_name(local
->hw
.wiphy
));
1855 skb_queue_purge(&local
->skb_queue
);
1856 skb_queue_purge(&local
->skb_queue_unreliable
);
1858 destroy_workqueue(local
->hw
.workqueue
);
1859 wiphy_unregister(local
->hw
.wiphy
);
1860 ieee80211_wep_free(local
);
1861 ieee80211_led_exit(local
);
1862 free_netdev(local
->mdev
);
1864 EXPORT_SYMBOL(ieee80211_unregister_hw
);
1866 void ieee80211_free_hw(struct ieee80211_hw
*hw
)
1868 struct ieee80211_local
*local
= hw_to_local(hw
);
1870 wiphy_free(local
->hw
.wiphy
);
1872 EXPORT_SYMBOL(ieee80211_free_hw
);
1874 static int __init
ieee80211_init(void)
1876 struct sk_buff
*skb
;
1879 BUILD_BUG_ON(sizeof(struct ieee80211_tx_info
) > sizeof(skb
->cb
));
1880 BUILD_BUG_ON(offsetof(struct ieee80211_tx_info
, driver_data
) +
1881 IEEE80211_TX_INFO_DRIVER_DATA_SIZE
> sizeof(skb
->cb
));
1883 ret
= rc80211_pid_init();
1887 ieee80211_debugfs_netdev_init();
1892 static void __exit
ieee80211_exit(void)
1897 * For key todo, it'll be empty by now but the work
1898 * might still be scheduled.
1900 flush_scheduled_work();
1905 ieee80211_debugfs_netdev_exit();
1909 subsys_initcall(ieee80211_init
);
1910 module_exit(ieee80211_exit
);
1912 MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1913 MODULE_LICENSE("GPL");