4 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * Copyright 2007-2010, Intel Corporation
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2 as
13 * published by the Free Software Foundation.
16 #include <linux/ieee80211.h>
17 #include <linux/export.h>
18 #include <net/mac80211.h>
19 #include "ieee80211_i.h"
22 static void __check_htcap_disable(struct ieee80211_ht_cap
*ht_capa
,
23 struct ieee80211_ht_cap
*ht_capa_mask
,
24 struct ieee80211_sta_ht_cap
*ht_cap
,
27 __le16 le_flag
= cpu_to_le16(flag
);
28 if (ht_capa_mask
->cap_info
& le_flag
) {
29 if (!(ht_capa
->cap_info
& le_flag
))
34 static void __check_htcap_enable(struct ieee80211_ht_cap
*ht_capa
,
35 struct ieee80211_ht_cap
*ht_capa_mask
,
36 struct ieee80211_sta_ht_cap
*ht_cap
,
39 __le16 le_flag
= cpu_to_le16(flag
);
41 if ((ht_capa_mask
->cap_info
& le_flag
) &&
42 (ht_capa
->cap_info
& le_flag
))
46 void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data
*sdata
,
47 struct ieee80211_sta_ht_cap
*ht_cap
)
49 struct ieee80211_ht_cap
*ht_capa
, *ht_capa_mask
;
53 if (!ht_cap
->ht_supported
)
56 switch (sdata
->vif
.type
) {
57 case NL80211_IFTYPE_STATION
:
58 ht_capa
= &sdata
->u
.mgd
.ht_capa
;
59 ht_capa_mask
= &sdata
->u
.mgd
.ht_capa_mask
;
61 case NL80211_IFTYPE_ADHOC
:
62 ht_capa
= &sdata
->u
.ibss
.ht_capa
;
63 ht_capa_mask
= &sdata
->u
.ibss
.ht_capa_mask
;
70 scaps
= (u8
*)(&ht_capa
->mcs
.rx_mask
);
71 smask
= (u8
*)(&ht_capa_mask
->mcs
.rx_mask
);
73 /* NOTE: If you add more over-rides here, update register_hw
74 * ht_capa_mod_mask logic in main.c as well.
75 * And, if this method can ever change ht_cap.ht_supported, fix
76 * the check in ieee80211_add_ht_ie.
79 /* check for HT over-rides, MCS rates first. */
80 for (i
= 0; i
< IEEE80211_HT_MCS_MASK_LEN
; i
++) {
82 ht_cap
->mcs
.rx_mask
[i
] &= ~m
; /* turn off all masked bits */
83 /* Add back rates that are supported */
84 ht_cap
->mcs
.rx_mask
[i
] |= (m
& scaps
[i
]);
87 /* Force removal of HT-40 capabilities? */
88 __check_htcap_disable(ht_capa
, ht_capa_mask
, ht_cap
,
89 IEEE80211_HT_CAP_SUP_WIDTH_20_40
);
90 __check_htcap_disable(ht_capa
, ht_capa_mask
, ht_cap
,
91 IEEE80211_HT_CAP_SGI_40
);
93 /* Allow user to disable SGI-20 (SGI-40 is handled above) */
94 __check_htcap_disable(ht_capa
, ht_capa_mask
, ht_cap
,
95 IEEE80211_HT_CAP_SGI_20
);
97 /* Allow user to disable the max-AMSDU bit. */
98 __check_htcap_disable(ht_capa
, ht_capa_mask
, ht_cap
,
99 IEEE80211_HT_CAP_MAX_AMSDU
);
101 /* Allow user to disable LDPC */
102 __check_htcap_disable(ht_capa
, ht_capa_mask
, ht_cap
,
103 IEEE80211_HT_CAP_LDPC_CODING
);
105 /* Allow user to enable 40 MHz intolerant bit. */
106 __check_htcap_enable(ht_capa
, ht_capa_mask
, ht_cap
,
107 IEEE80211_HT_CAP_40MHZ_INTOLERANT
);
109 /* Allow user to decrease AMPDU factor */
110 if (ht_capa_mask
->ampdu_params_info
&
111 IEEE80211_HT_AMPDU_PARM_FACTOR
) {
112 u8 n
= ht_capa
->ampdu_params_info
&
113 IEEE80211_HT_AMPDU_PARM_FACTOR
;
114 if (n
< ht_cap
->ampdu_factor
)
115 ht_cap
->ampdu_factor
= n
;
118 /* Allow the user to increase AMPDU density. */
119 if (ht_capa_mask
->ampdu_params_info
&
120 IEEE80211_HT_AMPDU_PARM_DENSITY
) {
121 u8 n
= (ht_capa
->ampdu_params_info
&
122 IEEE80211_HT_AMPDU_PARM_DENSITY
)
123 >> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT
;
124 if (n
> ht_cap
->ampdu_density
)
125 ht_cap
->ampdu_density
= n
;
130 bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data
*sdata
,
131 struct ieee80211_supported_band
*sband
,
132 const struct ieee80211_ht_cap
*ht_cap_ie
,
133 struct sta_info
*sta
)
135 struct ieee80211_sta_ht_cap ht_cap
, own_cap
;
136 u8 ampdu_info
, tx_mcs_set_cap
;
137 int i
, max_tx_streams
;
139 enum ieee80211_sta_rx_bandwidth bw
;
140 enum ieee80211_smps_mode smps_mode
;
142 memset(&ht_cap
, 0, sizeof(ht_cap
));
144 if (!ht_cap_ie
|| !sband
->ht_cap
.ht_supported
)
147 ht_cap
.ht_supported
= true;
149 own_cap
= sband
->ht_cap
;
152 * If user has specified capability over-rides, take care
153 * of that if the station we're setting up is the AP or TDLS peer that
154 * we advertised a restricted capability set to. Override
155 * our own capabilities and then use those below.
157 if (sdata
->vif
.type
== NL80211_IFTYPE_STATION
||
158 sdata
->vif
.type
== NL80211_IFTYPE_ADHOC
)
159 ieee80211_apply_htcap_overrides(sdata
, &own_cap
);
162 * The bits listed in this expression should be
163 * the same for the peer and us, if the station
164 * advertises more then we can't use those thus
167 ht_cap
.cap
= le16_to_cpu(ht_cap_ie
->cap_info
) &
168 (own_cap
.cap
| ~(IEEE80211_HT_CAP_LDPC_CODING
|
169 IEEE80211_HT_CAP_SUP_WIDTH_20_40
|
170 IEEE80211_HT_CAP_GRN_FLD
|
171 IEEE80211_HT_CAP_SGI_20
|
172 IEEE80211_HT_CAP_SGI_40
|
173 IEEE80211_HT_CAP_DSSSCCK40
));
176 * The STBC bits are asymmetric -- if we don't have
177 * TX then mask out the peer's RX and vice versa.
179 if (!(own_cap
.cap
& IEEE80211_HT_CAP_TX_STBC
))
180 ht_cap
.cap
&= ~IEEE80211_HT_CAP_RX_STBC
;
181 if (!(own_cap
.cap
& IEEE80211_HT_CAP_RX_STBC
))
182 ht_cap
.cap
&= ~IEEE80211_HT_CAP_TX_STBC
;
184 ampdu_info
= ht_cap_ie
->ampdu_params_info
;
185 ht_cap
.ampdu_factor
=
186 ampdu_info
& IEEE80211_HT_AMPDU_PARM_FACTOR
;
187 ht_cap
.ampdu_density
=
188 (ampdu_info
& IEEE80211_HT_AMPDU_PARM_DENSITY
) >> 2;
190 /* own MCS TX capabilities */
191 tx_mcs_set_cap
= own_cap
.mcs
.tx_params
;
193 /* Copy peer MCS TX capabilities, the driver might need them. */
194 ht_cap
.mcs
.tx_params
= ht_cap_ie
->mcs
.tx_params
;
196 /* can we TX with MCS rates? */
197 if (!(tx_mcs_set_cap
& IEEE80211_HT_MCS_TX_DEFINED
))
200 /* Counting from 0, therefore +1 */
201 if (tx_mcs_set_cap
& IEEE80211_HT_MCS_TX_RX_DIFF
)
203 ((tx_mcs_set_cap
& IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK
)
204 >> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT
) + 1;
206 max_tx_streams
= IEEE80211_HT_MCS_TX_MAX_STREAMS
;
209 * 802.11n-2009 20.3.5 / 20.6 says:
210 * - indices 0 to 7 and 32 are single spatial stream
211 * - 8 to 31 are multiple spatial streams using equal modulation
212 * [8..15 for two streams, 16..23 for three and 24..31 for four]
213 * - remainder are multiple spatial streams using unequal modulation
215 for (i
= 0; i
< max_tx_streams
; i
++)
216 ht_cap
.mcs
.rx_mask
[i
] =
217 own_cap
.mcs
.rx_mask
[i
] & ht_cap_ie
->mcs
.rx_mask
[i
];
219 if (tx_mcs_set_cap
& IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION
)
220 for (i
= IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE
;
221 i
< IEEE80211_HT_MCS_MASK_LEN
; i
++)
222 ht_cap
.mcs
.rx_mask
[i
] =
223 own_cap
.mcs
.rx_mask
[i
] &
224 ht_cap_ie
->mcs
.rx_mask
[i
];
226 /* handle MCS rate 32 too */
227 if (own_cap
.mcs
.rx_mask
[32/8] & ht_cap_ie
->mcs
.rx_mask
[32/8] & 1)
228 ht_cap
.mcs
.rx_mask
[32/8] |= 1;
230 /* set Rx highest rate */
231 ht_cap
.mcs
.rx_highest
= ht_cap_ie
->mcs
.rx_highest
;
233 if (ht_cap
.cap
& IEEE80211_HT_CAP_MAX_AMSDU
)
234 sta
->sta
.max_amsdu_len
= IEEE80211_MAX_MPDU_LEN_HT_7935
;
236 sta
->sta
.max_amsdu_len
= IEEE80211_MAX_MPDU_LEN_HT_3839
;
239 changed
= memcmp(&sta
->sta
.ht_cap
, &ht_cap
, sizeof(ht_cap
));
241 memcpy(&sta
->sta
.ht_cap
, &ht_cap
, sizeof(ht_cap
));
243 switch (sdata
->vif
.bss_conf
.chandef
.width
) {
247 case NL80211_CHAN_WIDTH_20_NOHT
:
248 case NL80211_CHAN_WIDTH_20
:
249 bw
= IEEE80211_STA_RX_BW_20
;
251 case NL80211_CHAN_WIDTH_40
:
252 case NL80211_CHAN_WIDTH_80
:
253 case NL80211_CHAN_WIDTH_80P80
:
254 case NL80211_CHAN_WIDTH_160
:
255 bw
= ht_cap
.cap
& IEEE80211_HT_CAP_SUP_WIDTH_20_40
?
256 IEEE80211_STA_RX_BW_40
: IEEE80211_STA_RX_BW_20
;
260 sta
->sta
.bandwidth
= bw
;
262 sta
->cur_max_bandwidth
=
263 ht_cap
.cap
& IEEE80211_HT_CAP_SUP_WIDTH_20_40
?
264 IEEE80211_STA_RX_BW_40
: IEEE80211_STA_RX_BW_20
;
266 switch ((ht_cap
.cap
& IEEE80211_HT_CAP_SM_PS
)
267 >> IEEE80211_HT_CAP_SM_PS_SHIFT
) {
268 case WLAN_HT_CAP_SM_PS_INVALID
:
269 case WLAN_HT_CAP_SM_PS_STATIC
:
270 smps_mode
= IEEE80211_SMPS_STATIC
;
272 case WLAN_HT_CAP_SM_PS_DYNAMIC
:
273 smps_mode
= IEEE80211_SMPS_DYNAMIC
;
275 case WLAN_HT_CAP_SM_PS_DISABLED
:
276 smps_mode
= IEEE80211_SMPS_OFF
;
280 if (smps_mode
!= sta
->sta
.smps_mode
)
282 sta
->sta
.smps_mode
= smps_mode
;
287 void ieee80211_sta_tear_down_BA_sessions(struct sta_info
*sta
,
288 enum ieee80211_agg_stop_reason reason
)
292 cancel_work_sync(&sta
->ampdu_mlme
.work
);
294 for (i
= 0; i
< IEEE80211_NUM_TIDS
; i
++) {
295 __ieee80211_stop_tx_ba_session(sta
, i
, reason
);
296 __ieee80211_stop_rx_ba_session(sta
, i
, WLAN_BACK_RECIPIENT
,
297 WLAN_REASON_QSTA_LEAVE_QBSS
,
298 reason
!= AGG_STOP_DESTROY_STA
&&
299 reason
!= AGG_STOP_PEER_REQUEST
);
303 void ieee80211_ba_session_work(struct work_struct
*work
)
305 struct sta_info
*sta
=
306 container_of(work
, struct sta_info
, ampdu_mlme
.work
);
307 struct tid_ampdu_tx
*tid_tx
;
311 * When this flag is set, new sessions should be
312 * blocked, and existing sessions will be torn
313 * down by the code that set the flag, so this
316 if (test_sta_flag(sta
, WLAN_STA_BLOCK_BA
))
319 mutex_lock(&sta
->ampdu_mlme
.mtx
);
320 for (tid
= 0; tid
< IEEE80211_NUM_TIDS
; tid
++) {
321 if (test_and_clear_bit(tid
, sta
->ampdu_mlme
.tid_rx_timer_expired
))
322 ___ieee80211_stop_rx_ba_session(
323 sta
, tid
, WLAN_BACK_RECIPIENT
,
324 WLAN_REASON_QSTA_TIMEOUT
, true);
326 if (test_and_clear_bit(tid
,
327 sta
->ampdu_mlme
.tid_rx_stop_requested
))
328 ___ieee80211_stop_rx_ba_session(
329 sta
, tid
, WLAN_BACK_RECIPIENT
,
330 WLAN_REASON_UNSPECIFIED
, true);
332 spin_lock_bh(&sta
->lock
);
334 tid_tx
= sta
->ampdu_mlme
.tid_start_tx
[tid
];
337 * Assign it over to the normal tid_tx array
338 * where it "goes live".
341 sta
->ampdu_mlme
.tid_start_tx
[tid
] = NULL
;
342 /* could there be a race? */
343 if (sta
->ampdu_mlme
.tid_tx
[tid
])
346 ieee80211_assign_tid_tx(sta
, tid
, tid_tx
);
347 spin_unlock_bh(&sta
->lock
);
349 ieee80211_tx_ba_session_handle_start(sta
, tid
);
352 spin_unlock_bh(&sta
->lock
);
354 tid_tx
= rcu_dereference_protected_tid_tx(sta
, tid
);
355 if (tid_tx
&& test_and_clear_bit(HT_AGG_STATE_WANT_STOP
,
357 ___ieee80211_stop_tx_ba_session(sta
, tid
,
358 AGG_STOP_LOCAL_REQUEST
);
360 mutex_unlock(&sta
->ampdu_mlme
.mtx
);
363 void ieee80211_send_delba(struct ieee80211_sub_if_data
*sdata
,
364 const u8
*da
, u16 tid
,
365 u16 initiator
, u16 reason_code
)
367 struct ieee80211_local
*local
= sdata
->local
;
369 struct ieee80211_mgmt
*mgmt
;
372 skb
= dev_alloc_skb(sizeof(*mgmt
) + local
->hw
.extra_tx_headroom
);
376 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
377 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
379 memcpy(mgmt
->da
, da
, ETH_ALEN
);
380 memcpy(mgmt
->sa
, sdata
->vif
.addr
, ETH_ALEN
);
381 if (sdata
->vif
.type
== NL80211_IFTYPE_AP
||
382 sdata
->vif
.type
== NL80211_IFTYPE_AP_VLAN
||
383 sdata
->vif
.type
== NL80211_IFTYPE_MESH_POINT
)
384 memcpy(mgmt
->bssid
, sdata
->vif
.addr
, ETH_ALEN
);
385 else if (sdata
->vif
.type
== NL80211_IFTYPE_STATION
)
386 memcpy(mgmt
->bssid
, sdata
->u
.mgd
.bssid
, ETH_ALEN
);
387 else if (sdata
->vif
.type
== NL80211_IFTYPE_ADHOC
)
388 memcpy(mgmt
->bssid
, sdata
->u
.ibss
.bssid
, ETH_ALEN
);
390 mgmt
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
391 IEEE80211_STYPE_ACTION
);
393 skb_put(skb
, 1 + sizeof(mgmt
->u
.action
.u
.delba
));
395 mgmt
->u
.action
.category
= WLAN_CATEGORY_BACK
;
396 mgmt
->u
.action
.u
.delba
.action_code
= WLAN_ACTION_DELBA
;
397 params
= (u16
)(initiator
<< 11); /* bit 11 initiator */
398 params
|= (u16
)(tid
<< 12); /* bit 15:12 TID number */
400 mgmt
->u
.action
.u
.delba
.params
= cpu_to_le16(params
);
401 mgmt
->u
.action
.u
.delba
.reason_code
= cpu_to_le16(reason_code
);
403 ieee80211_tx_skb(sdata
, skb
);
406 void ieee80211_process_delba(struct ieee80211_sub_if_data
*sdata
,
407 struct sta_info
*sta
,
408 struct ieee80211_mgmt
*mgmt
, size_t len
)
413 params
= le16_to_cpu(mgmt
->u
.action
.u
.delba
.params
);
414 tid
= (params
& IEEE80211_DELBA_PARAM_TID_MASK
) >> 12;
415 initiator
= (params
& IEEE80211_DELBA_PARAM_INITIATOR_MASK
) >> 11;
417 ht_dbg_ratelimited(sdata
, "delba from %pM (%s) tid %d reason code %d\n",
418 mgmt
->sa
, initiator
? "initiator" : "recipient",
420 le16_to_cpu(mgmt
->u
.action
.u
.delba
.reason_code
));
422 if (initiator
== WLAN_BACK_INITIATOR
)
423 __ieee80211_stop_rx_ba_session(sta
, tid
, WLAN_BACK_INITIATOR
, 0,
426 __ieee80211_stop_tx_ba_session(sta
, tid
, AGG_STOP_PEER_REQUEST
);
429 int ieee80211_send_smps_action(struct ieee80211_sub_if_data
*sdata
,
430 enum ieee80211_smps_mode smps
, const u8
*da
,
433 struct ieee80211_local
*local
= sdata
->local
;
435 struct ieee80211_mgmt
*action_frame
;
437 /* 27 = header + category + action + smps mode */
438 skb
= dev_alloc_skb(27 + local
->hw
.extra_tx_headroom
);
442 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
443 action_frame
= (void *)skb_put(skb
, 27);
444 memcpy(action_frame
->da
, da
, ETH_ALEN
);
445 memcpy(action_frame
->sa
, sdata
->dev
->dev_addr
, ETH_ALEN
);
446 memcpy(action_frame
->bssid
, bssid
, ETH_ALEN
);
447 action_frame
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
448 IEEE80211_STYPE_ACTION
);
449 action_frame
->u
.action
.category
= WLAN_CATEGORY_HT
;
450 action_frame
->u
.action
.u
.ht_smps
.action
= WLAN_HT_ACTION_SMPS
;
452 case IEEE80211_SMPS_AUTOMATIC
:
453 case IEEE80211_SMPS_NUM_MODES
:
455 case IEEE80211_SMPS_OFF
:
456 action_frame
->u
.action
.u
.ht_smps
.smps_control
=
457 WLAN_HT_SMPS_CONTROL_DISABLED
;
459 case IEEE80211_SMPS_STATIC
:
460 action_frame
->u
.action
.u
.ht_smps
.smps_control
=
461 WLAN_HT_SMPS_CONTROL_STATIC
;
463 case IEEE80211_SMPS_DYNAMIC
:
464 action_frame
->u
.action
.u
.ht_smps
.smps_control
=
465 WLAN_HT_SMPS_CONTROL_DYNAMIC
;
469 /* we'll do more on status of this frame */
470 IEEE80211_SKB_CB(skb
)->flags
|= IEEE80211_TX_CTL_REQ_TX_STATUS
;
471 ieee80211_tx_skb(sdata
, skb
);
476 void ieee80211_request_smps_mgd_work(struct work_struct
*work
)
478 struct ieee80211_sub_if_data
*sdata
=
479 container_of(work
, struct ieee80211_sub_if_data
,
480 u
.mgd
.request_smps_work
);
483 __ieee80211_request_smps_mgd(sdata
, sdata
->u
.mgd
.driver_smps_mode
);
487 void ieee80211_request_smps_ap_work(struct work_struct
*work
)
489 struct ieee80211_sub_if_data
*sdata
=
490 container_of(work
, struct ieee80211_sub_if_data
,
491 u
.ap
.request_smps_work
);
494 if (sdata_dereference(sdata
->u
.ap
.beacon
, sdata
))
495 __ieee80211_request_smps_ap(sdata
,
496 sdata
->u
.ap
.driver_smps_mode
);
500 void ieee80211_request_smps(struct ieee80211_vif
*vif
,
501 enum ieee80211_smps_mode smps_mode
)
503 struct ieee80211_sub_if_data
*sdata
= vif_to_sdata(vif
);
505 if (WARN_ON_ONCE(vif
->type
!= NL80211_IFTYPE_STATION
&&
506 vif
->type
!= NL80211_IFTYPE_AP
))
509 if (vif
->type
== NL80211_IFTYPE_STATION
) {
510 if (sdata
->u
.mgd
.driver_smps_mode
== smps_mode
)
512 sdata
->u
.mgd
.driver_smps_mode
= smps_mode
;
513 ieee80211_queue_work(&sdata
->local
->hw
,
514 &sdata
->u
.mgd
.request_smps_work
);
516 /* AUTOMATIC is meaningless in AP mode */
517 if (WARN_ON_ONCE(smps_mode
== IEEE80211_SMPS_AUTOMATIC
))
519 if (sdata
->u
.ap
.driver_smps_mode
== smps_mode
)
521 sdata
->u
.ap
.driver_smps_mode
= smps_mode
;
522 ieee80211_queue_work(&sdata
->local
->hw
,
523 &sdata
->u
.ap
.request_smps_work
);
526 /* this might change ... don't want non-open drivers using it */
527 EXPORT_SYMBOL_GPL(ieee80211_request_smps
);