LXR linux/drivers/net/wireless/intersil/hostap/hostap

   1// SPDX-License-Identifier: GPL-2.0
   2/* Host AP driver Info Frame processing (part of hostap.o module) */
   3
   4#include <linux/if_arp.h>
   5#include <linux/sched.h>
   6#include <linux/slab.h>
   7#include <linux/export.h>
   8#include <linux/etherdevice.h>
   9#include "hostap_wlan.h"
  10#include "hostap.h"
  11#include "hostap_ap.h"
  12
  13/* Called only as a tasklet (software IRQ) */
  14static void prism2_info_commtallies16(local_info_t *local, unsigned char *buf,
  15                                      int left)
  16{
  17        struct hfa384x_comm_tallies *tallies;
  18
  19        if (left < sizeof(struct hfa384x_comm_tallies)) {
  20                printk(KERN_DEBUG "%s: too short (len=%d) commtallies "
  21                       "info frame\n", local->dev->name, left);
  22                return;
  23        }
  24
  25        tallies = (struct hfa384x_comm_tallies *) buf;
  26#define ADD_COMM_TALLIES(name) \
  27local->comm_tallies.name += le16_to_cpu(tallies->name)
  28        ADD_COMM_TALLIES(tx_unicast_frames);
  29        ADD_COMM_TALLIES(tx_multicast_frames);
  30        ADD_COMM_TALLIES(tx_fragments);
  31        ADD_COMM_TALLIES(tx_unicast_octets);
  32        ADD_COMM_TALLIES(tx_multicast_octets);
  33        ADD_COMM_TALLIES(tx_deferred_transmissions);
  34        ADD_COMM_TALLIES(tx_single_retry_frames);
  35        ADD_COMM_TALLIES(tx_multiple_retry_frames);
  36        ADD_COMM_TALLIES(tx_retry_limit_exceeded);
  37        ADD_COMM_TALLIES(tx_discards);
  38        ADD_COMM_TALLIES(rx_unicast_frames);
  39        ADD_COMM_TALLIES(rx_multicast_frames);
  40        ADD_COMM_TALLIES(rx_fragments);
  41        ADD_COMM_TALLIES(rx_unicast_octets);
  42        ADD_COMM_TALLIES(rx_multicast_octets);
  43        ADD_COMM_TALLIES(rx_fcs_errors);
  44        ADD_COMM_TALLIES(rx_discards_no_buffer);
  45        ADD_COMM_TALLIES(tx_discards_wrong_sa);
  46        ADD_COMM_TALLIES(rx_discards_wep_undecryptable);
  47        ADD_COMM_TALLIES(rx_message_in_msg_fragments);
  48        ADD_COMM_TALLIES(rx_message_in_bad_msg_fragments);
  49#undef ADD_COMM_TALLIES
  50}
  51
  52
  53/* Called only as a tasklet (software IRQ) */
  54static void prism2_info_commtallies32(local_info_t *local, unsigned char *buf,
  55                                      int left)
  56{
  57        struct hfa384x_comm_tallies32 *tallies;
  58
  59        if (left < sizeof(struct hfa384x_comm_tallies32)) {
  60                printk(KERN_DEBUG "%s: too short (len=%d) commtallies32 "
  61                       "info frame\n", local->dev->name, left);
  62                return;
  63        }
  64
  65        tallies = (struct hfa384x_comm_tallies32 *) buf;
  66#define ADD_COMM_TALLIES(name) \
  67local->comm_tallies.name += le32_to_cpu(tallies->name)
  68        ADD_COMM_TALLIES(tx_unicast_frames);
  69        ADD_COMM_TALLIES(tx_multicast_frames);
  70        ADD_COMM_TALLIES(tx_fragments);
  71        ADD_COMM_TALLIES(tx_unicast_octets);
  72        ADD_COMM_TALLIES(tx_multicast_octets);
  73        ADD_COMM_TALLIES(tx_deferred_transmissions);
  74        ADD_COMM_TALLIES(tx_single_retry_frames);
  75        ADD_COMM_TALLIES(tx_multiple_retry_frames);
  76        ADD_COMM_TALLIES(tx_retry_limit_exceeded);
  77        ADD_COMM_TALLIES(tx_discards);
  78        ADD_COMM_TALLIES(rx_unicast_frames);
  79        ADD_COMM_TALLIES(rx_multicast_frames);
  80        ADD_COMM_TALLIES(rx_fragments);
  81        ADD_COMM_TALLIES(rx_unicast_octets);
  82        ADD_COMM_TALLIES(rx_multicast_octets);
  83        ADD_COMM_TALLIES(rx_fcs_errors);
  84        ADD_COMM_TALLIES(rx_discards_no_buffer);
  85        ADD_COMM_TALLIES(tx_discards_wrong_sa);
  86        ADD_COMM_TALLIES(rx_discards_wep_undecryptable);
  87        ADD_COMM_TALLIES(rx_message_in_msg_fragments);
  88        ADD_COMM_TALLIES(rx_message_in_bad_msg_fragments);
  89#undef ADD_COMM_TALLIES
  90}
  91
  92
  93/* Called only as a tasklet (software IRQ) */
  94static void prism2_info_commtallies(local_info_t *local, unsigned char *buf,
  95                                    int left)
  96{
  97        if (local->tallies32)
  98                prism2_info_commtallies32(local, buf, left);
  99        else
 100                prism2_info_commtallies16(local, buf, left);
 101}
 102
 103
 104#ifndef PRISM2_NO_STATION_MODES
 105#ifndef PRISM2_NO_DEBUG
 106static const char* hfa384x_linkstatus_str(u16 linkstatus)
 107{
 108        switch (linkstatus) {
 109        case HFA384X_LINKSTATUS_CONNECTED:
 110                return "Connected";
 111        case HFA384X_LINKSTATUS_DISCONNECTED:
 112                return "Disconnected";
 113        case HFA384X_LINKSTATUS_AP_CHANGE:
 114                return "Access point change";
 115        case HFA384X_LINKSTATUS_AP_OUT_OF_RANGE:
 116                return "Access point out of range";
 117        case HFA384X_LINKSTATUS_AP_IN_RANGE:
 118                return "Access point in range";
 119        case HFA384X_LINKSTATUS_ASSOC_FAILED:
 120                return "Association failed";
 121        default:
 122                return "Unknown";
 123        }
 124}
 125#endif /* PRISM2_NO_DEBUG */
 126
 127
 128/* Called only as a tasklet (software IRQ) */
 129static void prism2_info_linkstatus(local_info_t *local, unsigned char *buf,
 130                                    int left)
 131{
 132        u16 val;
 133        int non_sta_mode;
 134
 135        /* Alloc new JoinRequests to occur since LinkStatus for the previous
 136         * has been received */
 137        local->last_join_time = 0;
 138
 139        if (left != 2) {
 140                printk(KERN_DEBUG "%s: invalid linkstatus info frame "
 141                       "length %d\n", local->dev->name, left);
 142                return;
 143        }
 144
 145        non_sta_mode = local->iw_mode == IW_MODE_MASTER ||
 146                local->iw_mode == IW_MODE_REPEAT ||
 147                local->iw_mode == IW_MODE_MONITOR;
 148
 149        val = buf[0] | (buf[1] << 8);
 150        if (!non_sta_mode || val != HFA384X_LINKSTATUS_DISCONNECTED) {
 151                PDEBUG(DEBUG_EXTRA, "%s: LinkStatus=%d (%s)\n",
 152                       local->dev->name, val, hfa384x_linkstatus_str(val));
 153        }
 154
 155        if (non_sta_mode) {
 156                netif_carrier_on(local->dev);
 157                netif_carrier_on(local->ddev);
 158                return;
 159        }
 160
 161        /* Get current BSSID later in scheduled task */
 162        set_bit(PRISM2_INFO_PENDING_LINKSTATUS, &local->pending_info);
 163        local->prev_link_status = val;
 164        schedule_work(&local->info_queue);
 165}
 166
 167
 168static void prism2_host_roaming(local_info_t *local)
 169{
 170        struct hfa384x_join_request req;
 171        struct net_device *dev = local->dev;
 172        struct hfa384x_hostscan_result *selected, *entry;
 173        int i;
 174        unsigned long flags;
 175
 176        if (local->last_join_time &&
 177            time_before(jiffies, local->last_join_time + 10 * HZ)) {
 178                PDEBUG(DEBUG_EXTRA, "%s: last join request has not yet been "
 179                       "completed - waiting for it before issuing new one\n",
 180                       dev->name);
 181                return;
 182        }
 183
 184        /* ScanResults are sorted: first ESS results in decreasing signal
 185         * quality then IBSS results in similar order.
 186         * Trivial roaming policy: just select the first entry.
 187         * This could probably be improved by adding hysteresis to limit
 188         * number of handoffs, etc.
 189         *
 190         * Could do periodic RID_SCANREQUEST or Inquire F101 to get new
 191         * ScanResults */
 192        spin_lock_irqsave(&local->lock, flags);
 193        if (local->last_scan_results == NULL ||
 194            local->last_scan_results_count == 0) {
 195                spin_unlock_irqrestore(&local->lock, flags);
 196                PDEBUG(DEBUG_EXTRA, "%s: no scan results for host roaming\n",
 197                       dev->name);
 198                return;
 199        }
 200
 201        selected = &local->last_scan_results[0];
 202
 203        if (local->preferred_ap[0] || local->preferred_ap[1] ||
 204            local->preferred_ap[2] || local->preferred_ap[3] ||
 205            local->preferred_ap[4] || local->preferred_ap[5]) {
 206                /* Try to find preferred AP */
 207                PDEBUG(DEBUG_EXTRA, "%s: Preferred AP BSSID %pM\n",
 208                       dev->name, local->preferred_ap);
 209                for (i = 0; i < local->last_scan_results_count; i++) {
 210                        entry = &local->last_scan_results[i];
 211                        if (memcmp(local->preferred_ap, entry->bssid, 6) == 0)
 212                        {
 213                                PDEBUG(DEBUG_EXTRA, "%s: using preferred AP "
 214                                       "selection\n", dev->name);
 215                                selected = entry;
 216                                break;
 217                        }
 218                }
 219        }
 220
 221        memcpy(req.bssid, selected->bssid, ETH_ALEN);
 222        req.channel = selected->chid;
 223        spin_unlock_irqrestore(&local->lock, flags);
 224
 225        PDEBUG(DEBUG_EXTRA, "%s: JoinRequest: BSSID=%pM"
 226               " channel=%d\n",
 227               dev->name, req.bssid, le16_to_cpu(req.channel));
 228        if (local->func->set_rid(dev, HFA384X_RID_JOINREQUEST, &req,
 229                                 sizeof(req))) {
 230                printk(KERN_DEBUG "%s: JoinRequest failed\n", dev->name);
 231        }
 232        local->last_join_time = jiffies;
 233}
 234
 235
 236static void hostap_report_scan_complete(local_info_t *local)
 237{
 238        union iwreq_data wrqu;
 239
 240        /* Inform user space about new scan results (just empty event,
 241         * SIOCGIWSCAN can be used to fetch data */
 242        wrqu.data.length = 0;
 243        wrqu.data.flags = 0;
 244        wireless_send_event(local->dev, SIOCGIWSCAN, &wrqu, NULL);
 245
 246        /* Allow SIOCGIWSCAN handling to occur since we have received
 247         * scanning result */
 248        local->scan_timestamp = 0;
 249}
 250
 251
 252/* Called only as a tasklet (software IRQ) */
 253static void prism2_info_scanresults(local_info_t *local, unsigned char *buf,
 254                                    int left)
 255{
 256        u16 *pos;
 257        int new_count, i;
 258        unsigned long flags;
 259        struct hfa384x_scan_result *res;
 260        struct hfa384x_hostscan_result *results, *prev;
 261
 262        if (left < 4) {
 263                printk(KERN_DEBUG "%s: invalid scanresult info frame "
 264                       "length %d\n", local->dev->name, left);
 265                return;
 266        }
 267
 268        pos = (u16 *) buf;
 269        pos++;
 270        pos++;
 271        left -= 4;
 272
 273        new_count = left / sizeof(struct hfa384x_scan_result);
 274        results = kmalloc(new_count * sizeof(struct hfa384x_hostscan_result),
 275                          GFP_ATOMIC);
 276        if (results == NULL)
 277                return;
 278
 279        /* Convert to hostscan result format. */
 280        res = (struct hfa384x_scan_result *) pos;
 281        for (i = 0; i < new_count; i++) {
 282                memcpy(&results[i], &res[i],
 283                       sizeof(struct hfa384x_scan_result));
 284                results[i].atim = 0;
 285        }
 286
 287        spin_lock_irqsave(&local->lock, flags);
 288        local->last_scan_type = PRISM2_SCAN;
 289        prev = local->last_scan_results;
 290        local->last_scan_results = results;
 291        local->last_scan_results_count = new_count;
 292        spin_unlock_irqrestore(&local->lock, flags);
 293        kfree(prev);
 294
 295        hostap_report_scan_complete(local);
 296
 297        /* Perform rest of ScanResults handling later in scheduled task */
 298        set_bit(PRISM2_INFO_PENDING_SCANRESULTS, &local->pending_info);
 299        schedule_work(&local->info_queue);
 300}
 301
 302
 303/* Called only as a tasklet (software IRQ) */
 304static void prism2_info_hostscanresults(local_info_t *local,
 305                                        unsigned char *buf, int left)
 306{
 307        int i, result_size, copy_len, new_count;
 308        struct hfa384x_hostscan_result *results, *prev;
 309        unsigned long flags;
 310        __le16 *pos;
 311        u8 *ptr;
 312
 313        wake_up_interruptible(&local->hostscan_wq);
 314
 315        if (left < 4) {
 316                printk(KERN_DEBUG "%s: invalid hostscanresult info frame "
 317                       "length %d\n", local->dev->name, left);
 318                return;
 319        }
 320
 321        pos = (__le16 *) buf;
 322        copy_len = result_size = le16_to_cpu(*pos);
 323        if (result_size == 0) {
 324                printk(KERN_DEBUG "%s: invalid result_size (0) in "
 325                       "hostscanresults\n", local->dev->name);
 326                return;
 327        }
 328        if (copy_len > sizeof(struct hfa384x_hostscan_result))
 329                copy_len = sizeof(struct hfa384x_hostscan_result);
 330
 331        pos++;
 332        pos++;
 333        left -= 4;
 334        ptr = (u8 *) pos;
 335
 336        new_count = left / result_size;
 337        results = kcalloc(new_count, sizeof(struct hfa384x_hostscan_result),
 338                          GFP_ATOMIC);
 339        if (results == NULL)
 340                return;
 341
 342        for (i = 0; i < new_count; i++) {
 343                memcpy(&results[i], ptr, copy_len);
 344                ptr += result_size;
 345                left -= result_size;
 346        }
 347
 348        if (left) {
 349                printk(KERN_DEBUG "%s: short HostScan result entry (%d/%d)\n",
 350                       local->dev->name, left, result_size);
 351        }
 352
 353        spin_lock_irqsave(&local->lock, flags);
 354        local->last_scan_type = PRISM2_HOSTSCAN;
 355        prev = local->last_scan_results;
 356        local->last_scan_results = results;
 357        local->last_scan_results_count = new_count;
 358        spin_unlock_irqrestore(&local->lock, flags);
 359        kfree(prev);
 360
 361        hostap_report_scan_complete(local);
 362}
 363#endif /* PRISM2_NO_STATION_MODES */
 364
 365
 366/* Called only as a tasklet (software IRQ) */
 367void hostap_info_process(local_info_t *local, struct sk_buff *skb)
 368{
 369        struct hfa384x_info_frame *info;
 370        unsigned char *buf;
 371        int left;
 372#ifndef PRISM2_NO_DEBUG
 373        int i;
 374#endif /* PRISM2_NO_DEBUG */
 375
 376        info = (struct hfa384x_info_frame *) skb->data;
 377        buf = skb->data + sizeof(*info);
 378        left = skb->len - sizeof(*info);
 379
 380        switch (le16_to_cpu(info->type)) {
 381        case HFA384X_INFO_COMMTALLIES:
 382                prism2_info_commtallies(local, buf, left);
 383                break;
 384
 385#ifndef PRISM2_NO_STATION_MODES
 386        case HFA384X_INFO_LINKSTATUS:
 387                prism2_info_linkstatus(local, buf, left);
 388                break;
 389
 390        case HFA384X_INFO_SCANRESULTS:
 391                prism2_info_scanresults(local, buf, left);
 392                break;
 393
 394        case HFA384X_INFO_HOSTSCANRESULTS:
 395                prism2_info_hostscanresults(local, buf, left);
 396                break;
 397#endif /* PRISM2_NO_STATION_MODES */
 398
 399#ifndef PRISM2_NO_DEBUG
 400        default:
 401                PDEBUG(DEBUG_EXTRA, "%s: INFO - len=%d type=0x%04x\n",
 402                       local->dev->name, le16_to_cpu(info->len),
 403                       le16_to_cpu(info->type));
 404                PDEBUG(DEBUG_EXTRA, "Unknown info frame:");
 405                for (i = 0; i < (left < 100 ? left : 100); i++)
 406                        PDEBUG2(DEBUG_EXTRA, " %02x", buf[i]);
 407                PDEBUG2(DEBUG_EXTRA, "\n");
 408                break;
 409#endif /* PRISM2_NO_DEBUG */
 410        }
 411}
 412
 413
 414#ifndef PRISM2_NO_STATION_MODES
 415static void handle_info_queue_linkstatus(local_info_t *local)
 416{
 417        int val = local->prev_link_status;
 418        int connected;
 419        union iwreq_data wrqu;
 420
 421        connected =
 422                val == HFA384X_LINKSTATUS_CONNECTED ||
 423                val == HFA384X_LINKSTATUS_AP_CHANGE ||
 424                val == HFA384X_LINKSTATUS_AP_IN_RANGE;
 425
 426        if (local->func->get_rid(local->dev, HFA384X_RID_CURRENTBSSID,
 427                                 local->bssid, ETH_ALEN, 1) < 0) {
 428                printk(KERN_DEBUG "%s: could not read CURRENTBSSID after "
 429                       "LinkStatus event\n", local->dev->name);
 430        } else {
 431                PDEBUG(DEBUG_EXTRA, "%s: LinkStatus: BSSID=%pM\n",
 432                       local->dev->name,
 433                       (unsigned char *) local->bssid);
 434                if (local->wds_type & HOSTAP_WDS_AP_CLIENT)
 435                        hostap_add_sta(local->ap, local->bssid);
 436        }
 437
 438        /* Get BSSID if we have a valid AP address */
 439        if (connected) {
 440                netif_carrier_on(local->dev);
 441                netif_carrier_on(local->ddev);
 442                memcpy(wrqu.ap_addr.sa_data, local->bssid, ETH_ALEN);
 443        } else {
 444                netif_carrier_off(local->dev);
 445                netif_carrier_off(local->ddev);
 446                eth_zero_addr(wrqu.ap_addr.sa_data);
 447        }
 448        wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 449
 450        /*
 451         * Filter out sequential disconnect events in order not to cause a
 452         * flood of SIOCGIWAP events that have a race condition with EAPOL
 453         * frames and can confuse wpa_supplicant about the current association
 454         * status.
 455         */
 456        if (connected || local->prev_linkstatus_connected)
 457                wireless_send_event(local->dev, SIOCGIWAP, &wrqu, NULL);
 458        local->prev_linkstatus_connected = connected;
 459}
 460
 461
 462static void handle_info_queue_scanresults(local_info_t *local)
 463{
 464        if (local->host_roaming == 1 && local->iw_mode == IW_MODE_INFRA)
 465                prism2_host_roaming(local);
 466
 467        if (local->host_roaming == 2 && local->iw_mode == IW_MODE_INFRA &&
 468            !is_zero_ether_addr(local->preferred_ap)) {
 469                /*
 470                 * Firmware seems to be getting into odd state in host_roaming
 471                 * mode 2 when hostscan is used without join command, so try
 472                 * to fix this by re-joining the current AP. This does not
 473                 * actually trigger a new association if the current AP is
 474                 * still in the scan results.
 475                 */
 476                prism2_host_roaming(local);
 477        }
 478}
 479
 480
 481/* Called only as scheduled task after receiving info frames (used to avoid
 482 * pending too much time in HW IRQ handler). */
 483static void handle_info_queue(struct work_struct *work)
 484{
 485        local_info_t *local = container_of(work, local_info_t, info_queue);
 486
 487        if (test_and_clear_bit(PRISM2_INFO_PENDING_LINKSTATUS,
 488                               &local->pending_info))
 489                handle_info_queue_linkstatus(local);
 490
 491        if (test_and_clear_bit(PRISM2_INFO_PENDING_SCANRESULTS,
 492                               &local->pending_info))
 493                handle_info_queue_scanresults(local);
 494}
 495#endif /* PRISM2_NO_STATION_MODES */
 496
 497
 498void hostap_info_init(local_info_t *local)
 499{
 500        skb_queue_head_init(&local->info_list);
 501#ifndef PRISM2_NO_STATION_MODES
 502        INIT_WORK(&local->info_queue, handle_info_queue);
 503#endif /* PRISM2_NO_STATION_MODES */
 504}
 505
 506
 507EXPORT_SYMBOL(hostap_info_init);
 508EXPORT_SYMBOL(hostap_info_process);
 509