1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65#include <net/mac80211.h>
66
67#include "mvm.h"
68#include "sta.h"
69#include "rs.h"
70
71static int iwl_mvm_find_free_sta_id(struct iwl_mvm *mvm,
72 enum nl80211_iftype iftype)
73{
74 int sta_id;
75 u32 reserved_ids = 0;
76
77 BUILD_BUG_ON(IWL_MVM_STATION_COUNT > 32);
78 WARN_ON_ONCE(test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status));
79
80 lockdep_assert_held(&mvm->mutex);
81
82
83 if (iftype != NL80211_IFTYPE_STATION)
84 reserved_ids = BIT(0);
85
86
87 for (sta_id = 0; sta_id < IWL_MVM_STATION_COUNT; sta_id++) {
88 if (BIT(sta_id) & reserved_ids)
89 continue;
90
91 if (!rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
92 lockdep_is_held(&mvm->mutex)))
93 return sta_id;
94 }
95 return IWL_MVM_STATION_COUNT;
96}
97
98
99int iwl_mvm_sta_send_to_fw(struct iwl_mvm *mvm, struct ieee80211_sta *sta,
100 bool update)
101{
102 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
103 struct iwl_mvm_add_sta_cmd add_sta_cmd = {
104 .sta_id = mvm_sta->sta_id,
105 .mac_id_n_color = cpu_to_le32(mvm_sta->mac_id_n_color),
106 .add_modify = update ? 1 : 0,
107 .station_flags_msk = cpu_to_le32(STA_FLG_FAT_EN_MSK |
108 STA_FLG_MIMO_EN_MSK),
109 };
110 int ret;
111 u32 status;
112 u32 agg_size = 0, mpdu_dens = 0;
113
114 if (!update) {
115 add_sta_cmd.tfd_queue_msk = cpu_to_le32(mvm_sta->tfd_queue_msk);
116 memcpy(&add_sta_cmd.addr, sta->addr, ETH_ALEN);
117 }
118
119 switch (sta->bandwidth) {
120 case IEEE80211_STA_RX_BW_160:
121 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_FAT_EN_160MHZ);
122
123 case IEEE80211_STA_RX_BW_80:
124 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_FAT_EN_80MHZ);
125
126 case IEEE80211_STA_RX_BW_40:
127 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_FAT_EN_40MHZ);
128
129 case IEEE80211_STA_RX_BW_20:
130 if (sta->ht_cap.ht_supported)
131 add_sta_cmd.station_flags |=
132 cpu_to_le32(STA_FLG_FAT_EN_20MHZ);
133 break;
134 }
135
136 switch (sta->rx_nss) {
137 case 1:
138 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_MIMO_EN_SISO);
139 break;
140 case 2:
141 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_MIMO_EN_MIMO2);
142 break;
143 case 3 ... 8:
144 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_MIMO_EN_MIMO3);
145 break;
146 }
147
148 switch (sta->smps_mode) {
149 case IEEE80211_SMPS_AUTOMATIC:
150 case IEEE80211_SMPS_NUM_MODES:
151 WARN_ON(1);
152 break;
153 case IEEE80211_SMPS_STATIC:
154
155 add_sta_cmd.station_flags &= ~cpu_to_le32(STA_FLG_MIMO_EN_MSK);
156 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_MIMO_EN_SISO);
157 break;
158 case IEEE80211_SMPS_DYNAMIC:
159 add_sta_cmd.station_flags |= cpu_to_le32(STA_FLG_RTS_MIMO_PROT);
160 break;
161 case IEEE80211_SMPS_OFF:
162
163 break;
164 }
165
166 if (sta->ht_cap.ht_supported) {
167 add_sta_cmd.station_flags_msk |=
168 cpu_to_le32(STA_FLG_MAX_AGG_SIZE_MSK |
169 STA_FLG_AGG_MPDU_DENS_MSK);
170
171 mpdu_dens = sta->ht_cap.ampdu_density;
172 }
173
174 if (sta->vht_cap.vht_supported) {
175 agg_size = sta->vht_cap.cap &
176 IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK;
177 agg_size >>=
178 IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_SHIFT;
179 } else if (sta->ht_cap.ht_supported) {
180 agg_size = sta->ht_cap.ampdu_factor;
181 }
182
183 add_sta_cmd.station_flags |=
184 cpu_to_le32(agg_size << STA_FLG_MAX_AGG_SIZE_SHIFT);
185 add_sta_cmd.station_flags |=
186 cpu_to_le32(mpdu_dens << STA_FLG_AGG_MPDU_DENS_SHIFT);
187
188 status = ADD_STA_SUCCESS;
189 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA, sizeof(add_sta_cmd),
190 &add_sta_cmd, &status);
191 if (ret)
192 return ret;
193
194 switch (status) {
195 case ADD_STA_SUCCESS:
196 IWL_DEBUG_ASSOC(mvm, "ADD_STA PASSED\n");
197 break;
198 default:
199 ret = -EIO;
200 IWL_ERR(mvm, "ADD_STA failed\n");
201 break;
202 }
203
204 return ret;
205}
206
207static int iwl_mvm_tdls_sta_init(struct iwl_mvm *mvm,
208 struct ieee80211_sta *sta)
209{
210 unsigned long used_hw_queues;
211 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
212 u32 ac;
213
214 lockdep_assert_held(&mvm->mutex);
215
216 used_hw_queues = iwl_mvm_get_used_hw_queues(mvm, NULL);
217
218
219 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
220 u8 queue = find_first_zero_bit(&used_hw_queues,
221 mvm->first_agg_queue);
222
223 if (queue >= mvm->first_agg_queue) {
224 IWL_ERR(mvm, "Failed to allocate STA queue\n");
225 return -EBUSY;
226 }
227
228 __set_bit(queue, &used_hw_queues);
229 mvmsta->hw_queue[ac] = queue;
230 }
231
232
233 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
234 iwl_mvm_enable_ac_txq(mvm, mvmsta->hw_queue[ac],
235 iwl_mvm_ac_to_tx_fifo[ac]);
236 mvmsta->tfd_queue_msk |= BIT(mvmsta->hw_queue[ac]);
237 }
238
239 return 0;
240}
241
242static void iwl_mvm_tdls_sta_deinit(struct iwl_mvm *mvm,
243 struct ieee80211_sta *sta)
244{
245 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
246 unsigned long sta_msk;
247 int i;
248
249 lockdep_assert_held(&mvm->mutex);
250
251
252 sta_msk = mvmsta->tfd_queue_msk;
253 for_each_set_bit(i, &sta_msk, sizeof(sta_msk))
254 iwl_mvm_disable_txq(mvm, i);
255}
256
257int iwl_mvm_add_sta(struct iwl_mvm *mvm,
258 struct ieee80211_vif *vif,
259 struct ieee80211_sta *sta)
260{
261 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
262 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
263 int i, ret, sta_id;
264
265 lockdep_assert_held(&mvm->mutex);
266
267 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
268 sta_id = iwl_mvm_find_free_sta_id(mvm,
269 ieee80211_vif_type_p2p(vif));
270 else
271 sta_id = mvm_sta->sta_id;
272
273 if (WARN_ON_ONCE(sta_id == IWL_MVM_STATION_COUNT))
274 return -ENOSPC;
275
276 spin_lock_init(&mvm_sta->lock);
277
278 mvm_sta->sta_id = sta_id;
279 mvm_sta->mac_id_n_color = FW_CMD_ID_AND_COLOR(mvmvif->id,
280 mvmvif->color);
281 mvm_sta->vif = vif;
282 mvm_sta->max_agg_bufsize = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
283 mvm_sta->tx_protection = 0;
284 mvm_sta->tt_tx_protection = false;
285
286
287 atomic_set(&mvm->pending_frames[sta_id], 0);
288 mvm_sta->tid_disable_agg = 0;
289 mvm_sta->tfd_queue_msk = 0;
290
291
292 if (sta->tdls) {
293 ret = iwl_mvm_tdls_sta_init(mvm, sta);
294 if (ret)
295 return ret;
296 } else {
297 for (i = 0; i < IEEE80211_NUM_ACS; i++)
298 if (vif->hw_queue[i] != IEEE80211_INVAL_HW_QUEUE)
299 mvm_sta->tfd_queue_msk |= BIT(vif->hw_queue[i]);
300 }
301
302
303 for (i = 0; i < IWL_MAX_TID_COUNT; i++) {
304 u16 seq = mvm_sta->tid_data[i].seq_number;
305 memset(&mvm_sta->tid_data[i], 0, sizeof(mvm_sta->tid_data[i]));
306 mvm_sta->tid_data[i].seq_number = seq;
307 }
308 mvm_sta->agg_tids = 0;
309
310 ret = iwl_mvm_sta_send_to_fw(mvm, sta, false);
311 if (ret)
312 goto err;
313
314 if (vif->type == NL80211_IFTYPE_STATION) {
315 if (!sta->tdls) {
316 WARN_ON(mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT);
317 mvmvif->ap_sta_id = sta_id;
318 } else {
319 WARN_ON(mvmvif->ap_sta_id == IWL_MVM_STATION_COUNT);
320 }
321 }
322
323 rcu_assign_pointer(mvm->fw_id_to_mac_id[sta_id], sta);
324
325 return 0;
326
327err:
328 iwl_mvm_tdls_sta_deinit(mvm, sta);
329 return ret;
330}
331
332int iwl_mvm_update_sta(struct iwl_mvm *mvm,
333 struct ieee80211_vif *vif,
334 struct ieee80211_sta *sta)
335{
336 return iwl_mvm_sta_send_to_fw(mvm, sta, true);
337}
338
339int iwl_mvm_drain_sta(struct iwl_mvm *mvm, struct iwl_mvm_sta *mvmsta,
340 bool drain)
341{
342 struct iwl_mvm_add_sta_cmd cmd = {};
343 int ret;
344 u32 status;
345
346 lockdep_assert_held(&mvm->mutex);
347
348 cmd.mac_id_n_color = cpu_to_le32(mvmsta->mac_id_n_color);
349 cmd.sta_id = mvmsta->sta_id;
350 cmd.add_modify = STA_MODE_MODIFY;
351 cmd.station_flags = drain ? cpu_to_le32(STA_FLG_DRAIN_FLOW) : 0;
352 cmd.station_flags_msk = cpu_to_le32(STA_FLG_DRAIN_FLOW);
353
354 status = ADD_STA_SUCCESS;
355 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA, sizeof(cmd),
356 &cmd, &status);
357 if (ret)
358 return ret;
359
360 switch (status) {
361 case ADD_STA_SUCCESS:
362 IWL_DEBUG_INFO(mvm, "Frames for staid %d will drained in fw\n",
363 mvmsta->sta_id);
364 break;
365 default:
366 ret = -EIO;
367 IWL_ERR(mvm, "Couldn't drain frames for staid %d\n",
368 mvmsta->sta_id);
369 break;
370 }
371
372 return ret;
373}
374
375
376
377
378
379
380static int iwl_mvm_rm_sta_common(struct iwl_mvm *mvm, u8 sta_id)
381{
382 struct ieee80211_sta *sta;
383 struct iwl_mvm_rm_sta_cmd rm_sta_cmd = {
384 .sta_id = sta_id,
385 };
386 int ret;
387
388 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
389 lockdep_is_held(&mvm->mutex));
390
391
392 if (!sta) {
393 IWL_ERR(mvm, "Invalid station id\n");
394 return -EINVAL;
395 }
396
397 ret = iwl_mvm_send_cmd_pdu(mvm, REMOVE_STA, 0,
398 sizeof(rm_sta_cmd), &rm_sta_cmd);
399 if (ret) {
400 IWL_ERR(mvm, "Failed to remove station. Id=%d\n", sta_id);
401 return ret;
402 }
403
404 return 0;
405}
406
407void iwl_mvm_sta_drained_wk(struct work_struct *wk)
408{
409 struct iwl_mvm *mvm = container_of(wk, struct iwl_mvm, sta_drained_wk);
410 u8 sta_id;
411
412
413
414
415
416
417
418
419 mutex_lock(&mvm->mutex);
420
421 for_each_set_bit(sta_id, mvm->sta_drained, IWL_MVM_STATION_COUNT) {
422 int ret;
423 struct ieee80211_sta *sta =
424 rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
425 lockdep_is_held(&mvm->mutex));
426
427
428
429
430
431
432
433
434
435 if (!IS_ERR(sta) || PTR_ERR(sta) == -ENOENT)
436 continue;
437
438 if (PTR_ERR(sta) == -EINVAL) {
439 IWL_ERR(mvm, "Drained sta %d, but it is internal?\n",
440 sta_id);
441 continue;
442 }
443
444 if (!sta) {
445 IWL_ERR(mvm, "Drained sta %d, but it was NULL?\n",
446 sta_id);
447 continue;
448 }
449
450 WARN_ON(PTR_ERR(sta) != -EBUSY);
451
452
453
454 ret = iwl_mvm_rm_sta_common(mvm, sta_id);
455 if (ret) {
456 IWL_ERR(mvm,
457 "Couldn't remove sta %d after it was drained\n",
458 sta_id);
459 continue;
460 }
461 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[sta_id], NULL);
462 clear_bit(sta_id, mvm->sta_drained);
463
464 if (mvm->tfd_drained[sta_id]) {
465 unsigned long i, msk = mvm->tfd_drained[sta_id];
466
467 for_each_set_bit(i, &msk, sizeof(msk))
468 iwl_mvm_disable_txq(mvm, i);
469
470 mvm->tfd_drained[sta_id] = 0;
471 IWL_DEBUG_TDLS(mvm, "Drained sta %d, with queues %ld\n",
472 sta_id, msk);
473 }
474 }
475
476 mutex_unlock(&mvm->mutex);
477}
478
479int iwl_mvm_rm_sta(struct iwl_mvm *mvm,
480 struct ieee80211_vif *vif,
481 struct ieee80211_sta *sta)
482{
483 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
484 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
485 int ret;
486
487 lockdep_assert_held(&mvm->mutex);
488
489 if (vif->type == NL80211_IFTYPE_STATION &&
490 mvmvif->ap_sta_id == mvm_sta->sta_id) {
491
492 ret = iwl_mvm_flush_tx_path(mvm, mvm_sta->tfd_queue_msk, true);
493
494
495 if (vif->bss_conf.assoc)
496 return ret;
497
498
499 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
500
501
502 if (mvm->d0i3_ap_sta_id == mvm_sta->sta_id)
503 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
504 }
505
506
507
508
509
510 if (WARN_ON_ONCE(mvm->tdls_cs.peer.sta_id == mvm_sta->sta_id)) {
511 mvm->tdls_cs.peer.sta_id = IWL_MVM_STATION_COUNT;
512 cancel_delayed_work(&mvm->tdls_cs.dwork);
513 }
514
515
516
517
518
519 spin_lock_bh(&mvm_sta->lock);
520
521
522
523
524 if (atomic_read(&mvm->pending_frames[mvm_sta->sta_id])) {
525 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id],
526 ERR_PTR(-EBUSY));
527 spin_unlock_bh(&mvm_sta->lock);
528
529
530 if (sta->tdls) {
531 mvm->tfd_drained[mvm_sta->sta_id] =
532 mvm_sta->tfd_queue_msk;
533 IWL_DEBUG_TDLS(mvm, "Draining TDLS sta %d\n",
534 mvm_sta->sta_id);
535 }
536
537 ret = iwl_mvm_drain_sta(mvm, mvm_sta, true);
538 } else {
539 spin_unlock_bh(&mvm_sta->lock);
540
541 if (sta->tdls)
542 iwl_mvm_tdls_sta_deinit(mvm, sta);
543
544 ret = iwl_mvm_rm_sta_common(mvm, mvm_sta->sta_id);
545 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[mvm_sta->sta_id], NULL);
546 }
547
548 return ret;
549}
550
551int iwl_mvm_rm_sta_id(struct iwl_mvm *mvm,
552 struct ieee80211_vif *vif,
553 u8 sta_id)
554{
555 int ret = iwl_mvm_rm_sta_common(mvm, sta_id);
556
557 lockdep_assert_held(&mvm->mutex);
558
559 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[sta_id], NULL);
560 return ret;
561}
562
563static int iwl_mvm_allocate_int_sta(struct iwl_mvm *mvm,
564 struct iwl_mvm_int_sta *sta,
565 u32 qmask, enum nl80211_iftype iftype)
566{
567 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
568 sta->sta_id = iwl_mvm_find_free_sta_id(mvm, iftype);
569 if (WARN_ON_ONCE(sta->sta_id == IWL_MVM_STATION_COUNT))
570 return -ENOSPC;
571 }
572
573 sta->tfd_queue_msk = qmask;
574
575
576 rcu_assign_pointer(mvm->fw_id_to_mac_id[sta->sta_id], ERR_PTR(-EINVAL));
577 return 0;
578}
579
580static void iwl_mvm_dealloc_int_sta(struct iwl_mvm *mvm,
581 struct iwl_mvm_int_sta *sta)
582{
583 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[sta->sta_id], NULL);
584 memset(sta, 0, sizeof(struct iwl_mvm_int_sta));
585 sta->sta_id = IWL_MVM_STATION_COUNT;
586}
587
588static int iwl_mvm_add_int_sta_common(struct iwl_mvm *mvm,
589 struct iwl_mvm_int_sta *sta,
590 const u8 *addr,
591 u16 mac_id, u16 color)
592{
593 struct iwl_mvm_add_sta_cmd cmd;
594 int ret;
595 u32 status;
596
597 lockdep_assert_held(&mvm->mutex);
598
599 memset(&cmd, 0, sizeof(cmd));
600 cmd.sta_id = sta->sta_id;
601 cmd.mac_id_n_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mac_id,
602 color));
603
604 cmd.tfd_queue_msk = cpu_to_le32(sta->tfd_queue_msk);
605
606 if (addr)
607 memcpy(cmd.addr, addr, ETH_ALEN);
608
609 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA, sizeof(cmd),
610 &cmd, &status);
611 if (ret)
612 return ret;
613
614 switch (status) {
615 case ADD_STA_SUCCESS:
616 IWL_DEBUG_INFO(mvm, "Internal station added.\n");
617 return 0;
618 default:
619 ret = -EIO;
620 IWL_ERR(mvm, "Add internal station failed, status=0x%x\n",
621 status);
622 break;
623 }
624 return ret;
625}
626
627int iwl_mvm_add_aux_sta(struct iwl_mvm *mvm)
628{
629 int ret;
630
631 lockdep_assert_held(&mvm->mutex);
632
633
634 iwl_mvm_enable_ac_txq(mvm, mvm->aux_queue,
635 IWL_MVM_TX_FIFO_MCAST);
636
637
638 ret = iwl_mvm_allocate_int_sta(mvm, &mvm->aux_sta, BIT(mvm->aux_queue),
639 NL80211_IFTYPE_UNSPECIFIED);
640 if (ret)
641 return ret;
642
643 ret = iwl_mvm_add_int_sta_common(mvm, &mvm->aux_sta, NULL,
644 MAC_INDEX_AUX, 0);
645
646 if (ret)
647 iwl_mvm_dealloc_int_sta(mvm, &mvm->aux_sta);
648 return ret;
649}
650
651void iwl_mvm_del_aux_sta(struct iwl_mvm *mvm)
652{
653 lockdep_assert_held(&mvm->mutex);
654
655 iwl_mvm_dealloc_int_sta(mvm, &mvm->aux_sta);
656}
657
658
659
660
661
662
663
664
665
666int iwl_mvm_send_add_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
667{
668 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
669 struct iwl_mvm_int_sta *bsta = &mvmvif->bcast_sta;
670 static const u8 _baddr[] = {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF};
671 const u8 *baddr = _baddr;
672
673 lockdep_assert_held(&mvm->mutex);
674
675 if (vif->type == NL80211_IFTYPE_ADHOC)
676 baddr = vif->bss_conf.bssid;
677
678 if (WARN_ON_ONCE(bsta->sta_id == IWL_MVM_STATION_COUNT))
679 return -ENOSPC;
680
681 return iwl_mvm_add_int_sta_common(mvm, bsta, baddr,
682 mvmvif->id, mvmvif->color);
683}
684
685
686
687int iwl_mvm_send_rm_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
688{
689 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
690 int ret;
691
692 lockdep_assert_held(&mvm->mutex);
693
694 ret = iwl_mvm_rm_sta_common(mvm, mvmvif->bcast_sta.sta_id);
695 if (ret)
696 IWL_WARN(mvm, "Failed sending remove station\n");
697 return ret;
698}
699
700int iwl_mvm_alloc_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
701{
702 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
703 u32 qmask;
704
705 lockdep_assert_held(&mvm->mutex);
706
707 qmask = iwl_mvm_mac_get_queues_mask(vif);
708
709
710
711
712
713
714 if (vif->type == NL80211_IFTYPE_AP)
715 qmask &= ~BIT(vif->cab_queue);
716
717 return iwl_mvm_allocate_int_sta(mvm, &mvmvif->bcast_sta, qmask,
718 ieee80211_vif_type_p2p(vif));
719}
720
721
722
723
724
725
726
727
728int iwl_mvm_add_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
729{
730 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
731 struct iwl_mvm_int_sta *bsta = &mvmvif->bcast_sta;
732 int ret;
733
734 lockdep_assert_held(&mvm->mutex);
735
736 ret = iwl_mvm_alloc_bcast_sta(mvm, vif);
737 if (ret)
738 return ret;
739
740 ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
741
742 if (ret)
743 iwl_mvm_dealloc_int_sta(mvm, bsta);
744
745 return ret;
746}
747
748void iwl_mvm_dealloc_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
749{
750 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
751
752 iwl_mvm_dealloc_int_sta(mvm, &mvmvif->bcast_sta);
753}
754
755
756
757
758
759int iwl_mvm_rm_bcast_sta(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
760{
761 int ret;
762
763 lockdep_assert_held(&mvm->mutex);
764
765 ret = iwl_mvm_send_rm_bcast_sta(mvm, vif);
766
767 iwl_mvm_dealloc_bcast_sta(mvm, vif);
768
769 return ret;
770}
771
772#define IWL_MAX_RX_BA_SESSIONS 16
773
774int iwl_mvm_sta_rx_agg(struct iwl_mvm *mvm, struct ieee80211_sta *sta,
775 int tid, u16 ssn, bool start)
776{
777 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
778 struct iwl_mvm_add_sta_cmd cmd = {};
779 int ret;
780 u32 status;
781
782 lockdep_assert_held(&mvm->mutex);
783
784 if (start && mvm->rx_ba_sessions >= IWL_MAX_RX_BA_SESSIONS) {
785 IWL_WARN(mvm, "Not enough RX BA SESSIONS\n");
786 return -ENOSPC;
787 }
788
789 cmd.mac_id_n_color = cpu_to_le32(mvm_sta->mac_id_n_color);
790 cmd.sta_id = mvm_sta->sta_id;
791 cmd.add_modify = STA_MODE_MODIFY;
792 if (start) {
793 cmd.add_immediate_ba_tid = (u8) tid;
794 cmd.add_immediate_ba_ssn = cpu_to_le16(ssn);
795 } else {
796 cmd.remove_immediate_ba_tid = (u8) tid;
797 }
798 cmd.modify_mask = start ? STA_MODIFY_ADD_BA_TID :
799 STA_MODIFY_REMOVE_BA_TID;
800
801 status = ADD_STA_SUCCESS;
802 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA, sizeof(cmd),
803 &cmd, &status);
804 if (ret)
805 return ret;
806
807 switch (status) {
808 case ADD_STA_SUCCESS:
809 IWL_DEBUG_INFO(mvm, "RX BA Session %sed in fw\n",
810 start ? "start" : "stopp");
811 break;
812 case ADD_STA_IMMEDIATE_BA_FAILURE:
813 IWL_WARN(mvm, "RX BA Session refused by fw\n");
814 ret = -ENOSPC;
815 break;
816 default:
817 ret = -EIO;
818 IWL_ERR(mvm, "RX BA Session failed %sing, status 0x%x\n",
819 start ? "start" : "stopp", status);
820 break;
821 }
822
823 if (!ret) {
824 if (start)
825 mvm->rx_ba_sessions++;
826 else if (mvm->rx_ba_sessions > 0)
827
828 mvm->rx_ba_sessions--;
829 }
830
831 return ret;
832}
833
834static int iwl_mvm_sta_tx_agg(struct iwl_mvm *mvm, struct ieee80211_sta *sta,
835 int tid, u8 queue, bool start)
836{
837 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
838 struct iwl_mvm_add_sta_cmd cmd = {};
839 int ret;
840 u32 status;
841
842 lockdep_assert_held(&mvm->mutex);
843
844 if (start) {
845 mvm_sta->tfd_queue_msk |= BIT(queue);
846 mvm_sta->tid_disable_agg &= ~BIT(tid);
847 } else {
848 mvm_sta->tfd_queue_msk &= ~BIT(queue);
849 mvm_sta->tid_disable_agg |= BIT(tid);
850 }
851
852 cmd.mac_id_n_color = cpu_to_le32(mvm_sta->mac_id_n_color);
853 cmd.sta_id = mvm_sta->sta_id;
854 cmd.add_modify = STA_MODE_MODIFY;
855 cmd.modify_mask = STA_MODIFY_QUEUES | STA_MODIFY_TID_DISABLE_TX;
856 cmd.tfd_queue_msk = cpu_to_le32(mvm_sta->tfd_queue_msk);
857 cmd.tid_disable_tx = cpu_to_le16(mvm_sta->tid_disable_agg);
858
859 status = ADD_STA_SUCCESS;
860 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA, sizeof(cmd),
861 &cmd, &status);
862 if (ret)
863 return ret;
864
865 switch (status) {
866 case ADD_STA_SUCCESS:
867 break;
868 default:
869 ret = -EIO;
870 IWL_ERR(mvm, "TX BA Session failed %sing, status 0x%x\n",
871 start ? "start" : "stopp", status);
872 break;
873 }
874
875 return ret;
876}
877
878const u8 tid_to_mac80211_ac[] = {
879 IEEE80211_AC_BE,
880 IEEE80211_AC_BK,
881 IEEE80211_AC_BK,
882 IEEE80211_AC_BE,
883 IEEE80211_AC_VI,
884 IEEE80211_AC_VI,
885 IEEE80211_AC_VO,
886 IEEE80211_AC_VO,
887};
888
889static const u8 tid_to_ucode_ac[] = {
890 AC_BE,
891 AC_BK,
892 AC_BK,
893 AC_BE,
894 AC_VI,
895 AC_VI,
896 AC_VO,
897 AC_VO,
898};
899
900int iwl_mvm_sta_tx_agg_start(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
901 struct ieee80211_sta *sta, u16 tid, u16 *ssn)
902{
903 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
904 struct iwl_mvm_tid_data *tid_data;
905 int txq_id;
906
907 if (WARN_ON_ONCE(tid >= IWL_MAX_TID_COUNT))
908 return -EINVAL;
909
910 if (mvmsta->tid_data[tid].state != IWL_AGG_OFF) {
911 IWL_ERR(mvm, "Start AGG when state is not IWL_AGG_OFF %d!\n",
912 mvmsta->tid_data[tid].state);
913 return -ENXIO;
914 }
915
916 lockdep_assert_held(&mvm->mutex);
917
918 for (txq_id = mvm->first_agg_queue;
919 txq_id <= mvm->last_agg_queue; txq_id++)
920 if (mvm->queue_to_mac80211[txq_id] ==
921 IWL_INVALID_MAC80211_QUEUE)
922 break;
923
924 if (txq_id > mvm->last_agg_queue) {
925 IWL_ERR(mvm, "Failed to allocate agg queue\n");
926 return -EIO;
927 }
928
929 spin_lock_bh(&mvmsta->lock);
930
931
932 if (test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)) {
933 spin_unlock_bh(&mvmsta->lock);
934 IWL_ERR(mvm, "Entered D0i3 while starting Tx agg\n");
935 return -EIO;
936 }
937
938
939 mvm->queue_to_mac80211[txq_id] = vif->hw_queue[tid_to_mac80211_ac[tid]];
940
941 tid_data = &mvmsta->tid_data[tid];
942 tid_data->ssn = IEEE80211_SEQ_TO_SN(tid_data->seq_number);
943 tid_data->txq_id = txq_id;
944 *ssn = tid_data->ssn;
945
946 IWL_DEBUG_TX_QUEUES(mvm,
947 "Start AGG: sta %d tid %d queue %d - ssn = %d, next_recl = %d\n",
948 mvmsta->sta_id, tid, txq_id, tid_data->ssn,
949 tid_data->next_reclaimed);
950
951 if (tid_data->ssn == tid_data->next_reclaimed) {
952 tid_data->state = IWL_AGG_STARTING;
953 ieee80211_start_tx_ba_cb_irqsafe(vif, sta->addr, tid);
954 } else {
955 tid_data->state = IWL_EMPTYING_HW_QUEUE_ADDBA;
956 }
957
958 spin_unlock_bh(&mvmsta->lock);
959
960 return 0;
961}
962
963int iwl_mvm_sta_tx_agg_oper(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
964 struct ieee80211_sta *sta, u16 tid, u8 buf_size)
965{
966 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
967 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
968 int queue, fifo, ret;
969 u16 ssn;
970
971 BUILD_BUG_ON((sizeof(mvmsta->agg_tids) * BITS_PER_BYTE)
972 != IWL_MAX_TID_COUNT);
973
974 buf_size = min_t(int, buf_size, LINK_QUAL_AGG_FRAME_LIMIT_DEF);
975
976 spin_lock_bh(&mvmsta->lock);
977 ssn = tid_data->ssn;
978 queue = tid_data->txq_id;
979 tid_data->state = IWL_AGG_ON;
980 mvmsta->agg_tids |= BIT(tid);
981 tid_data->ssn = 0xffff;
982 spin_unlock_bh(&mvmsta->lock);
983
984 fifo = iwl_mvm_ac_to_tx_fifo[tid_to_mac80211_ac[tid]];
985
986 ret = iwl_mvm_sta_tx_agg(mvm, sta, tid, queue, true);
987 if (ret)
988 return -EIO;
989
990 iwl_mvm_enable_agg_txq(mvm, queue, fifo, mvmsta->sta_id, tid,
991 buf_size, ssn);
992
993
994
995
996
997
998
999
1000 mvmsta->max_agg_bufsize =
1001 min(mvmsta->max_agg_bufsize, buf_size);
1002 mvmsta->lq_sta.lq.agg_frame_cnt_limit = mvmsta->max_agg_bufsize;
1003
1004 IWL_DEBUG_HT(mvm, "Tx aggregation enabled on ra = %pM tid = %d\n",
1005 sta->addr, tid);
1006
1007 return iwl_mvm_send_lq_cmd(mvm, &mvmsta->lq_sta.lq, false);
1008}
1009
1010int iwl_mvm_sta_tx_agg_stop(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1011 struct ieee80211_sta *sta, u16 tid)
1012{
1013 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1014 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
1015 u16 txq_id;
1016 int err;
1017
1018
1019
1020
1021
1022
1023 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1024 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
1025 return 0;
1026 }
1027
1028 spin_lock_bh(&mvmsta->lock);
1029
1030 txq_id = tid_data->txq_id;
1031
1032 IWL_DEBUG_TX_QUEUES(mvm, "Stop AGG: sta %d tid %d q %d state %d\n",
1033 mvmsta->sta_id, tid, txq_id, tid_data->state);
1034
1035 mvmsta->agg_tids &= ~BIT(tid);
1036
1037 switch (tid_data->state) {
1038 case IWL_AGG_ON:
1039 tid_data->ssn = IEEE80211_SEQ_TO_SN(tid_data->seq_number);
1040
1041 IWL_DEBUG_TX_QUEUES(mvm,
1042 "ssn = %d, next_recl = %d\n",
1043 tid_data->ssn, tid_data->next_reclaimed);
1044
1045
1046 if (tid_data->ssn != tid_data->next_reclaimed) {
1047 tid_data->state = IWL_EMPTYING_HW_QUEUE_DELBA;
1048 err = 0;
1049 break;
1050 }
1051
1052 tid_data->ssn = 0xffff;
1053 tid_data->state = IWL_AGG_OFF;
1054 mvm->queue_to_mac80211[txq_id] = IWL_INVALID_MAC80211_QUEUE;
1055 spin_unlock_bh(&mvmsta->lock);
1056
1057 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
1058
1059 iwl_mvm_sta_tx_agg(mvm, sta, tid, txq_id, false);
1060
1061 iwl_mvm_disable_txq(mvm, txq_id);
1062 return 0;
1063 case IWL_AGG_STARTING:
1064 case IWL_EMPTYING_HW_QUEUE_ADDBA:
1065
1066
1067
1068
1069
1070
1071 lockdep_assert_held(&mvm->mutex);
1072 mvm->queue_to_mac80211[txq_id] = IWL_INVALID_MAC80211_QUEUE;
1073
1074 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
1075 tid_data->state = IWL_AGG_OFF;
1076 err = 0;
1077 break;
1078 default:
1079 IWL_ERR(mvm,
1080 "Stopping AGG while state not ON or starting for %d on %d (%d)\n",
1081 mvmsta->sta_id, tid, tid_data->state);
1082 IWL_ERR(mvm,
1083 "\ttid_data->txq_id = %d\n", tid_data->txq_id);
1084 err = -EINVAL;
1085 }
1086
1087 spin_unlock_bh(&mvmsta->lock);
1088
1089 return err;
1090}
1091
1092int iwl_mvm_sta_tx_agg_flush(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1093 struct ieee80211_sta *sta, u16 tid)
1094{
1095 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1096 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
1097 u16 txq_id;
1098 enum iwl_mvm_agg_state old_state;
1099
1100
1101
1102
1103
1104 spin_lock_bh(&mvmsta->lock);
1105 txq_id = tid_data->txq_id;
1106 IWL_DEBUG_TX_QUEUES(mvm, "Flush AGG: sta %d tid %d q %d state %d\n",
1107 mvmsta->sta_id, tid, txq_id, tid_data->state);
1108 old_state = tid_data->state;
1109 tid_data->state = IWL_AGG_OFF;
1110 mvmsta->agg_tids &= ~BIT(tid);
1111 spin_unlock_bh(&mvmsta->lock);
1112
1113 if (old_state >= IWL_AGG_ON) {
1114 if (iwl_mvm_flush_tx_path(mvm, BIT(txq_id), true))
1115 IWL_ERR(mvm, "Couldn't flush the AGG queue\n");
1116
1117 iwl_mvm_sta_tx_agg(mvm, sta, tid, txq_id, false);
1118
1119 iwl_mvm_disable_txq(mvm, tid_data->txq_id);
1120 }
1121
1122 mvm->queue_to_mac80211[tid_data->txq_id] =
1123 IWL_INVALID_MAC80211_QUEUE;
1124
1125 return 0;
1126}
1127
1128static int iwl_mvm_set_fw_key_idx(struct iwl_mvm *mvm)
1129{
1130 int i;
1131
1132 lockdep_assert_held(&mvm->mutex);
1133
1134 i = find_first_zero_bit(mvm->fw_key_table, STA_KEY_MAX_NUM);
1135
1136 if (i == STA_KEY_MAX_NUM)
1137 return STA_KEY_IDX_INVALID;
1138
1139 __set_bit(i, mvm->fw_key_table);
1140
1141 return i;
1142}
1143
1144static u8 iwl_mvm_get_key_sta_id(struct ieee80211_vif *vif,
1145 struct ieee80211_sta *sta)
1146{
1147 struct iwl_mvm_vif *mvmvif = (void *)vif->drv_priv;
1148
1149 if (sta) {
1150 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
1151
1152 return mvm_sta->sta_id;
1153 }
1154
1155
1156
1157
1158
1159
1160 if (vif->type == NL80211_IFTYPE_STATION &&
1161 mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT)
1162 return mvmvif->ap_sta_id;
1163
1164 return IWL_MVM_STATION_COUNT;
1165}
1166
1167static int iwl_mvm_send_sta_key(struct iwl_mvm *mvm,
1168 struct iwl_mvm_sta *mvm_sta,
1169 struct ieee80211_key_conf *keyconf, bool mcast,
1170 u32 tkip_iv32, u16 *tkip_p1k, u32 cmd_flags)
1171{
1172 struct iwl_mvm_add_sta_key_cmd cmd = {};
1173 __le16 key_flags;
1174 int ret;
1175 u32 status;
1176 u16 keyidx;
1177 int i;
1178 u8 sta_id = mvm_sta->sta_id;
1179
1180 keyidx = (keyconf->keyidx << STA_KEY_FLG_KEYID_POS) &
1181 STA_KEY_FLG_KEYID_MSK;
1182 key_flags = cpu_to_le16(keyidx);
1183 key_flags |= cpu_to_le16(STA_KEY_FLG_WEP_KEY_MAP);
1184
1185 switch (keyconf->cipher) {
1186 case WLAN_CIPHER_SUITE_TKIP:
1187 key_flags |= cpu_to_le16(STA_KEY_FLG_TKIP);
1188 cmd.tkip_rx_tsc_byte2 = tkip_iv32;
1189 for (i = 0; i < 5; i++)
1190 cmd.tkip_rx_ttak[i] = cpu_to_le16(tkip_p1k[i]);
1191 memcpy(cmd.key, keyconf->key, keyconf->keylen);
1192 break;
1193 case WLAN_CIPHER_SUITE_CCMP:
1194 key_flags |= cpu_to_le16(STA_KEY_FLG_CCM);
1195 memcpy(cmd.key, keyconf->key, keyconf->keylen);
1196 break;
1197 case WLAN_CIPHER_SUITE_WEP104:
1198 key_flags |= cpu_to_le16(STA_KEY_FLG_WEP_13BYTES);
1199 case WLAN_CIPHER_SUITE_WEP40:
1200 key_flags |= cpu_to_le16(STA_KEY_FLG_WEP);
1201 memcpy(cmd.key + 3, keyconf->key, keyconf->keylen);
1202 break;
1203 default:
1204 key_flags |= cpu_to_le16(STA_KEY_FLG_EXT);
1205 memcpy(cmd.key, keyconf->key, keyconf->keylen);
1206 }
1207
1208 if (mcast)
1209 key_flags |= cpu_to_le16(STA_KEY_MULTICAST);
1210
1211 cmd.key_offset = keyconf->hw_key_idx;
1212 cmd.key_flags = key_flags;
1213 cmd.sta_id = sta_id;
1214
1215 status = ADD_STA_SUCCESS;
1216 if (cmd_flags & CMD_ASYNC)
1217 ret = iwl_mvm_send_cmd_pdu(mvm, ADD_STA_KEY, CMD_ASYNC,
1218 sizeof(cmd), &cmd);
1219 else
1220 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA_KEY, sizeof(cmd),
1221 &cmd, &status);
1222
1223 switch (status) {
1224 case ADD_STA_SUCCESS:
1225 IWL_DEBUG_WEP(mvm, "MODIFY_STA: set dynamic key passed\n");
1226 break;
1227 default:
1228 ret = -EIO;
1229 IWL_ERR(mvm, "MODIFY_STA: set dynamic key failed\n");
1230 break;
1231 }
1232
1233 return ret;
1234}
1235
1236static int iwl_mvm_send_sta_igtk(struct iwl_mvm *mvm,
1237 struct ieee80211_key_conf *keyconf,
1238 u8 sta_id, bool remove_key)
1239{
1240 struct iwl_mvm_mgmt_mcast_key_cmd igtk_cmd = {};
1241
1242
1243 if (WARN_ON((keyconf->cipher != WLAN_CIPHER_SUITE_AES_CMAC) ||
1244 (keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE) ||
1245 (keyconf->keyidx != 4 && keyconf->keyidx != 5)))
1246 return -EINVAL;
1247
1248 igtk_cmd.key_id = cpu_to_le32(keyconf->keyidx);
1249 igtk_cmd.sta_id = cpu_to_le32(sta_id);
1250
1251 if (remove_key) {
1252 igtk_cmd.ctrl_flags |= cpu_to_le32(STA_KEY_NOT_VALID);
1253 } else {
1254 struct ieee80211_key_seq seq;
1255 const u8 *pn;
1256
1257 memcpy(igtk_cmd.IGTK, keyconf->key, keyconf->keylen);
1258 ieee80211_aes_cmac_calculate_k1_k2(keyconf,
1259 igtk_cmd.K1, igtk_cmd.K2);
1260 ieee80211_get_key_rx_seq(keyconf, 0, &seq);
1261 pn = seq.aes_cmac.pn;
1262 igtk_cmd.receive_seq_cnt = cpu_to_le64(((u64) pn[5] << 0) |
1263 ((u64) pn[4] << 8) |
1264 ((u64) pn[3] << 16) |
1265 ((u64) pn[2] << 24) |
1266 ((u64) pn[1] << 32) |
1267 ((u64) pn[0] << 40));
1268 }
1269
1270 IWL_DEBUG_INFO(mvm, "%s igtk for sta %u\n",
1271 remove_key ? "removing" : "installing",
1272 igtk_cmd.sta_id);
1273
1274 return iwl_mvm_send_cmd_pdu(mvm, MGMT_MCAST_KEY, 0,
1275 sizeof(igtk_cmd), &igtk_cmd);
1276}
1277
1278
1279static inline u8 *iwl_mvm_get_mac_addr(struct iwl_mvm *mvm,
1280 struct ieee80211_vif *vif,
1281 struct ieee80211_sta *sta)
1282{
1283 struct iwl_mvm_vif *mvmvif = (void *)vif->drv_priv;
1284
1285 if (sta)
1286 return sta->addr;
1287
1288 if (vif->type == NL80211_IFTYPE_STATION &&
1289 mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT) {
1290 u8 sta_id = mvmvif->ap_sta_id;
1291 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
1292 lockdep_is_held(&mvm->mutex));
1293 return sta->addr;
1294 }
1295
1296
1297 return NULL;
1298}
1299
1300static int __iwl_mvm_set_sta_key(struct iwl_mvm *mvm,
1301 struct ieee80211_vif *vif,
1302 struct ieee80211_sta *sta,
1303 struct ieee80211_key_conf *keyconf,
1304 bool mcast)
1305{
1306 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1307 int ret;
1308 const u8 *addr;
1309 struct ieee80211_key_seq seq;
1310 u16 p1k[5];
1311
1312 switch (keyconf->cipher) {
1313 case WLAN_CIPHER_SUITE_TKIP:
1314 addr = iwl_mvm_get_mac_addr(mvm, vif, sta);
1315
1316 ieee80211_get_key_rx_seq(keyconf, 0, &seq);
1317 ieee80211_get_tkip_rx_p1k(keyconf, addr, seq.tkip.iv32, p1k);
1318 ret = iwl_mvm_send_sta_key(mvm, mvm_sta, keyconf, mcast,
1319 seq.tkip.iv32, p1k, 0);
1320 break;
1321 case WLAN_CIPHER_SUITE_CCMP:
1322 case WLAN_CIPHER_SUITE_WEP40:
1323 case WLAN_CIPHER_SUITE_WEP104:
1324 ret = iwl_mvm_send_sta_key(mvm, mvm_sta, keyconf, mcast,
1325 0, NULL, 0);
1326 break;
1327 default:
1328 ret = iwl_mvm_send_sta_key(mvm, mvm_sta, keyconf, mcast,
1329 0, NULL, 0);
1330 }
1331
1332 return ret;
1333}
1334
1335static int __iwl_mvm_remove_sta_key(struct iwl_mvm *mvm, u8 sta_id,
1336 struct ieee80211_key_conf *keyconf,
1337 bool mcast)
1338{
1339 struct iwl_mvm_add_sta_key_cmd cmd = {};
1340 __le16 key_flags;
1341 int ret;
1342 u32 status;
1343
1344 key_flags = cpu_to_le16((keyconf->keyidx << STA_KEY_FLG_KEYID_POS) &
1345 STA_KEY_FLG_KEYID_MSK);
1346 key_flags |= cpu_to_le16(STA_KEY_FLG_NO_ENC | STA_KEY_FLG_WEP_KEY_MAP);
1347 key_flags |= cpu_to_le16(STA_KEY_NOT_VALID);
1348
1349 if (mcast)
1350 key_flags |= cpu_to_le16(STA_KEY_MULTICAST);
1351
1352 cmd.key_flags = key_flags;
1353 cmd.key_offset = keyconf->hw_key_idx;
1354 cmd.sta_id = sta_id;
1355
1356 status = ADD_STA_SUCCESS;
1357 ret = iwl_mvm_send_cmd_pdu_status(mvm, ADD_STA_KEY, sizeof(cmd),
1358 &cmd, &status);
1359
1360 switch (status) {
1361 case ADD_STA_SUCCESS:
1362 IWL_DEBUG_WEP(mvm, "MODIFY_STA: remove sta key passed\n");
1363 break;
1364 default:
1365 ret = -EIO;
1366 IWL_ERR(mvm, "MODIFY_STA: remove sta key failed\n");
1367 break;
1368 }
1369
1370 return ret;
1371}
1372
1373int iwl_mvm_set_sta_key(struct iwl_mvm *mvm,
1374 struct ieee80211_vif *vif,
1375 struct ieee80211_sta *sta,
1376 struct ieee80211_key_conf *keyconf,
1377 bool have_key_offset)
1378{
1379 bool mcast = !(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE);
1380 u8 sta_id;
1381 int ret;
1382
1383 lockdep_assert_held(&mvm->mutex);
1384
1385
1386 sta_id = iwl_mvm_get_key_sta_id(vif, sta);
1387 if (sta_id == IWL_MVM_STATION_COUNT) {
1388 IWL_ERR(mvm, "Failed to find station id\n");
1389 return -EINVAL;
1390 }
1391
1392 if (keyconf->cipher == WLAN_CIPHER_SUITE_AES_CMAC) {
1393 ret = iwl_mvm_send_sta_igtk(mvm, keyconf, sta_id, false);
1394 goto end;
1395 }
1396
1397
1398
1399
1400
1401 if (!sta) {
1402 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
1403 lockdep_is_held(&mvm->mutex));
1404 if (IS_ERR_OR_NULL(sta)) {
1405 IWL_ERR(mvm, "Invalid station id\n");
1406 return -EINVAL;
1407 }
1408 }
1409
1410 if (WARN_ON_ONCE(iwl_mvm_sta_from_mac80211(sta)->vif != vif))
1411 return -EINVAL;
1412
1413 if (!have_key_offset) {
1414
1415
1416
1417
1418
1419 keyconf->hw_key_idx = iwl_mvm_set_fw_key_idx(mvm);
1420 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID)
1421 return -ENOSPC;
1422 }
1423
1424 ret = __iwl_mvm_set_sta_key(mvm, vif, sta, keyconf, mcast);
1425 if (ret) {
1426 __clear_bit(keyconf->hw_key_idx, mvm->fw_key_table);
1427 goto end;
1428 }
1429
1430
1431
1432
1433
1434
1435
1436 if (keyconf->cipher == WLAN_CIPHER_SUITE_WEP40 ||
1437 keyconf->cipher == WLAN_CIPHER_SUITE_WEP104) {
1438 ret = __iwl_mvm_set_sta_key(mvm, vif, sta, keyconf, !mcast);
1439 if (ret) {
1440 __clear_bit(keyconf->hw_key_idx, mvm->fw_key_table);
1441 __iwl_mvm_remove_sta_key(mvm, sta_id, keyconf, mcast);
1442 }
1443 }
1444
1445end:
1446 IWL_DEBUG_WEP(mvm, "key: cipher=%x len=%d idx=%d sta=%pM ret=%d\n",
1447 keyconf->cipher, keyconf->keylen, keyconf->keyidx,
1448 sta->addr, ret);
1449 return ret;
1450}
1451
1452int iwl_mvm_remove_sta_key(struct iwl_mvm *mvm,
1453 struct ieee80211_vif *vif,
1454 struct ieee80211_sta *sta,
1455 struct ieee80211_key_conf *keyconf)
1456{
1457 bool mcast = !(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE);
1458 u8 sta_id;
1459 int ret;
1460
1461 lockdep_assert_held(&mvm->mutex);
1462
1463
1464 sta_id = iwl_mvm_get_key_sta_id(vif, sta);
1465
1466 IWL_DEBUG_WEP(mvm, "mvm remove dynamic key: idx=%d sta=%d\n",
1467 keyconf->keyidx, sta_id);
1468
1469 if (keyconf->cipher == WLAN_CIPHER_SUITE_AES_CMAC)
1470 return iwl_mvm_send_sta_igtk(mvm, keyconf, sta_id, true);
1471
1472 if (!__test_and_clear_bit(keyconf->hw_key_idx, mvm->fw_key_table)) {
1473 IWL_ERR(mvm, "offset %d not used in fw key table.\n",
1474 keyconf->hw_key_idx);
1475 return -ENOENT;
1476 }
1477
1478 if (sta_id == IWL_MVM_STATION_COUNT) {
1479 IWL_DEBUG_WEP(mvm, "station non-existent, early return.\n");
1480 return 0;
1481 }
1482
1483
1484
1485
1486
1487
1488
1489 if (!sta) {
1490 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[sta_id],
1491 lockdep_is_held(&mvm->mutex));
1492 if (!sta) {
1493 IWL_ERR(mvm, "Invalid station id\n");
1494 return -EINVAL;
1495 }
1496 }
1497
1498 if (WARN_ON_ONCE(iwl_mvm_sta_from_mac80211(sta)->vif != vif))
1499 return -EINVAL;
1500
1501 ret = __iwl_mvm_remove_sta_key(mvm, sta_id, keyconf, mcast);
1502 if (ret)
1503 return ret;
1504
1505
1506 if (keyconf->cipher == WLAN_CIPHER_SUITE_WEP40 ||
1507 keyconf->cipher == WLAN_CIPHER_SUITE_WEP104)
1508 ret = __iwl_mvm_remove_sta_key(mvm, sta_id, keyconf, !mcast);
1509
1510 return ret;
1511}
1512
1513void iwl_mvm_update_tkip_key(struct iwl_mvm *mvm,
1514 struct ieee80211_vif *vif,
1515 struct ieee80211_key_conf *keyconf,
1516 struct ieee80211_sta *sta, u32 iv32,
1517 u16 *phase1key)
1518{
1519 struct iwl_mvm_sta *mvm_sta;
1520 u8 sta_id = iwl_mvm_get_key_sta_id(vif, sta);
1521 bool mcast = !(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE);
1522
1523 if (WARN_ON_ONCE(sta_id == IWL_MVM_STATION_COUNT))
1524 return;
1525
1526 rcu_read_lock();
1527
1528 if (!sta) {
1529 sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_id]);
1530 if (WARN_ON(IS_ERR_OR_NULL(sta))) {
1531 rcu_read_unlock();
1532 return;
1533 }
1534 }
1535
1536 mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1537 iwl_mvm_send_sta_key(mvm, mvm_sta, keyconf, mcast,
1538 iv32, phase1key, CMD_ASYNC);
1539 rcu_read_unlock();
1540}
1541
1542void iwl_mvm_sta_modify_ps_wake(struct iwl_mvm *mvm,
1543 struct ieee80211_sta *sta)
1544{
1545 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1546 struct iwl_mvm_add_sta_cmd cmd = {
1547 .add_modify = STA_MODE_MODIFY,
1548 .sta_id = mvmsta->sta_id,
1549 .station_flags_msk = cpu_to_le32(STA_FLG_PS),
1550 .mac_id_n_color = cpu_to_le32(mvmsta->mac_id_n_color),
1551 };
1552 int ret;
1553
1554 ret = iwl_mvm_send_cmd_pdu(mvm, ADD_STA, CMD_ASYNC, sizeof(cmd), &cmd);
1555 if (ret)
1556 IWL_ERR(mvm, "Failed to send ADD_STA command (%d)\n", ret);
1557}
1558
1559void iwl_mvm_sta_modify_sleep_tx_count(struct iwl_mvm *mvm,
1560 struct ieee80211_sta *sta,
1561 enum ieee80211_frame_release_type reason,
1562 u16 cnt, u16 tids, bool more_data,
1563 bool agg)
1564{
1565 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1566 struct iwl_mvm_add_sta_cmd cmd = {
1567 .add_modify = STA_MODE_MODIFY,
1568 .sta_id = mvmsta->sta_id,
1569 .modify_mask = STA_MODIFY_SLEEPING_STA_TX_COUNT,
1570 .sleep_tx_count = cpu_to_le16(cnt),
1571 .mac_id_n_color = cpu_to_le32(mvmsta->mac_id_n_color),
1572 };
1573 int tid, ret;
1574 unsigned long _tids = tids;
1575
1576
1577
1578
1579
1580 for_each_set_bit(tid, &_tids, IWL_MAX_TID_COUNT)
1581 cmd.awake_acs |= BIT(tid_to_ucode_ac[tid]);
1582
1583
1584
1585
1586
1587
1588
1589
1590 if (agg) {
1591 int remaining = cnt;
1592
1593 spin_lock_bh(&mvmsta->lock);
1594 for_each_set_bit(tid, &_tids, IWL_MAX_TID_COUNT) {
1595 struct iwl_mvm_tid_data *tid_data;
1596 u16 n_queued;
1597
1598 tid_data = &mvmsta->tid_data[tid];
1599 if (WARN(tid_data->state != IWL_AGG_ON &&
1600 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA,
1601 "TID %d state is %d\n",
1602 tid, tid_data->state)) {
1603 spin_unlock_bh(&mvmsta->lock);
1604 ieee80211_sta_eosp(sta);
1605 return;
1606 }
1607
1608 n_queued = iwl_mvm_tid_queued(tid_data);
1609 if (n_queued > remaining) {
1610 more_data = true;
1611 remaining = 0;
1612 break;
1613 }
1614 remaining -= n_queued;
1615 }
1616 spin_unlock_bh(&mvmsta->lock);
1617
1618 cmd.sleep_tx_count = cpu_to_le16(cnt - remaining);
1619 if (WARN_ON(cnt - remaining == 0)) {
1620 ieee80211_sta_eosp(sta);
1621 return;
1622 }
1623 }
1624
1625
1626 if (more_data)
1627 cmd.sleep_state_flags |= cpu_to_le16(STA_SLEEP_STATE_MOREDATA);
1628
1629 if (reason == IEEE80211_FRAME_RELEASE_PSPOLL) {
1630 mvmsta->next_status_eosp = true;
1631 cmd.sleep_state_flags |= cpu_to_le16(STA_SLEEP_STATE_PS_POLL);
1632 } else {
1633 cmd.sleep_state_flags |= cpu_to_le16(STA_SLEEP_STATE_UAPSD);
1634 }
1635
1636 ret = iwl_mvm_send_cmd_pdu(mvm, ADD_STA, CMD_ASYNC, sizeof(cmd), &cmd);
1637 if (ret)
1638 IWL_ERR(mvm, "Failed to send ADD_STA command (%d)\n", ret);
1639}
1640
1641int iwl_mvm_rx_eosp_notif(struct iwl_mvm *mvm,
1642 struct iwl_rx_cmd_buffer *rxb,
1643 struct iwl_device_cmd *cmd)
1644{
1645 struct iwl_rx_packet *pkt = rxb_addr(rxb);
1646 struct iwl_mvm_eosp_notification *notif = (void *)pkt->data;
1647 struct ieee80211_sta *sta;
1648 u32 sta_id = le32_to_cpu(notif->sta_id);
1649
1650 if (WARN_ON_ONCE(sta_id >= IWL_MVM_STATION_COUNT))
1651 return 0;
1652
1653 rcu_read_lock();
1654 sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_id]);
1655 if (!IS_ERR_OR_NULL(sta))
1656 ieee80211_sta_eosp(sta);
1657 rcu_read_unlock();
1658
1659 return 0;
1660}
1661
1662void iwl_mvm_sta_modify_disable_tx(struct iwl_mvm *mvm,
1663 struct iwl_mvm_sta *mvmsta, bool disable)
1664{
1665 struct iwl_mvm_add_sta_cmd cmd = {
1666 .add_modify = STA_MODE_MODIFY,
1667 .sta_id = mvmsta->sta_id,
1668 .station_flags = disable ? cpu_to_le32(STA_FLG_DISABLE_TX) : 0,
1669 .station_flags_msk = cpu_to_le32(STA_FLG_DISABLE_TX),
1670 .mac_id_n_color = cpu_to_le32(mvmsta->mac_id_n_color),
1671 };
1672 int ret;
1673
1674 if (!(mvm->fw->ucode_capa.api[0] & IWL_UCODE_TLV_API_DISABLE_STA_TX))
1675 return;
1676
1677 ret = iwl_mvm_send_cmd_pdu(mvm, ADD_STA, CMD_ASYNC, sizeof(cmd), &cmd);
1678 if (ret)
1679 IWL_ERR(mvm, "Failed to send ADD_STA command (%d)\n", ret);
1680}
1681
1682void iwl_mvm_sta_modify_disable_tx_ap(struct iwl_mvm *mvm,
1683 struct ieee80211_sta *sta,
1684 bool disable)
1685{
1686 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1687
1688 spin_lock_bh(&mvm_sta->lock);
1689
1690 if (mvm_sta->disable_tx == disable) {
1691 spin_unlock_bh(&mvm_sta->lock);
1692 return;
1693 }
1694
1695 mvm_sta->disable_tx = disable;
1696
1697
1698
1699
1700
1701
1702 if (disable || !atomic_read(&mvm->pending_frames[mvm_sta->sta_id]))
1703 ieee80211_sta_block_awake(mvm->hw, sta, disable);
1704
1705 iwl_mvm_sta_modify_disable_tx(mvm, mvm_sta, disable);
1706
1707 spin_unlock_bh(&mvm_sta->lock);
1708}
1709
1710void iwl_mvm_modify_all_sta_disable_tx(struct iwl_mvm *mvm,
1711 struct iwl_mvm_vif *mvmvif,
1712 bool disable)
1713{
1714 struct ieee80211_sta *sta;
1715 struct iwl_mvm_sta *mvm_sta;
1716 int i;
1717
1718 lockdep_assert_held(&mvm->mutex);
1719
1720
1721 for (i = 0; i < IWL_MVM_STATION_COUNT; i++) {
1722 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
1723 lockdep_is_held(&mvm->mutex));
1724 if (IS_ERR_OR_NULL(sta))
1725 continue;
1726
1727 mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1728 if (mvm_sta->mac_id_n_color !=
1729 FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color))
1730 continue;
1731
1732 iwl_mvm_sta_modify_disable_tx_ap(mvm, sta, disable);
1733 }
1734}
1735
1736void iwl_mvm_csa_client_absent(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
1737{
1738 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1739 struct iwl_mvm_sta *mvmsta;
1740
1741 rcu_read_lock();
1742
1743 mvmsta = iwl_mvm_sta_from_staid_rcu(mvm, mvmvif->ap_sta_id);
1744
1745 if (!WARN_ON(!mvmsta))
1746 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, true);
1747
1748 rcu_read_unlock();
1749}
1750