mac80211.c revision 49464ae502680e362be519ac024a0f5998faaa7e
1/******************************************************************************
2 *
3 * Copyright(c) 2003 - 2013 Intel Corporation. All rights reserved.
4 *
5 * Portions of this file are derived from the ipw3945 project, as well
6 * as portions of the ieee80211 subsystem header files.
7 *
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms of version 2 of the GNU General Public License as
10 * published by the Free Software Foundation.
11 *
12 * This program is distributed in the hope that it will be useful, but WITHOUT
13 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
14 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
15 * more details.
16 *
17 * You should have received a copy of the GNU General Public License along with
18 * this program; if not, write to the Free Software Foundation, Inc.,
19 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
20 *
21 * The full GNU General Public License is included in this distribution in the
22 * file called LICENSE.
23 *
24 * Contact Information:
25 *  Intel Linux Wireless <ilw@linux.intel.com>
26 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
27 *
28 *****************************************************************************/
29#include <linux/kernel.h>
30#include <linux/module.h>
31#include <linux/init.h>
32#include <linux/slab.h>
33#include <linux/dma-mapping.h>
34#include <linux/delay.h>
35#include <linux/sched.h>
36#include <linux/skbuff.h>
37#include <linux/netdevice.h>
38#include <linux/etherdevice.h>
39#include <linux/if_arp.h>
40
41#include <net/ieee80211_radiotap.h>
42#include <net/mac80211.h>
43
44#include <asm/div64.h>
45
46#include "iwl-io.h"
47#include "iwl-trans.h"
48#include "iwl-op-mode.h"
49#include "iwl-modparams.h"
50
51#include "dev.h"
52#include "calib.h"
53#include "agn.h"
54
55/*****************************************************************************
56 *
57 * mac80211 entry point functions
58 *
59 *****************************************************************************/
60
61static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
62	{
63		.max = 1,
64		.types = BIT(NL80211_IFTYPE_STATION),
65	},
66	{
67		.max = 1,
68		.types = BIT(NL80211_IFTYPE_AP),
69	},
70};
71
72static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
73	{
74		.max = 2,
75		.types = BIT(NL80211_IFTYPE_STATION),
76	},
77};
78
79static const struct ieee80211_iface_limit iwlagn_p2p_sta_go_limits[] = {
80	{
81		.max = 1,
82		.types = BIT(NL80211_IFTYPE_STATION),
83	},
84	{
85		.max = 1,
86		.types = BIT(NL80211_IFTYPE_P2P_GO) |
87			 BIT(NL80211_IFTYPE_AP),
88	},
89};
90
91static const struct ieee80211_iface_limit iwlagn_p2p_2sta_limits[] = {
92	{
93		.max = 2,
94		.types = BIT(NL80211_IFTYPE_STATION),
95	},
96	{
97		.max = 1,
98		.types = BIT(NL80211_IFTYPE_P2P_CLIENT),
99	},
100};
101
102static const struct ieee80211_iface_combination
103iwlagn_iface_combinations_dualmode[] = {
104	{ .num_different_channels = 1,
105	  .max_interfaces = 2,
106	  .beacon_int_infra_match = true,
107	  .limits = iwlagn_sta_ap_limits,
108	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
109	},
110	{ .num_different_channels = 1,
111	  .max_interfaces = 2,
112	  .limits = iwlagn_2sta_limits,
113	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
114	},
115};
116
117static const struct ieee80211_iface_combination
118iwlagn_iface_combinations_p2p[] = {
119	{ .num_different_channels = 1,
120	  .max_interfaces = 2,
121	  .beacon_int_infra_match = true,
122	  .limits = iwlagn_p2p_sta_go_limits,
123	  .n_limits = ARRAY_SIZE(iwlagn_p2p_sta_go_limits),
124	},
125	{ .num_different_channels = 1,
126	  .max_interfaces = 2,
127	  .limits = iwlagn_p2p_2sta_limits,
128	  .n_limits = ARRAY_SIZE(iwlagn_p2p_2sta_limits),
129	},
130};
131
132/*
133 * Not a mac80211 entry point function, but it fits in with all the
134 * other mac80211 functions grouped here.
135 */
136int iwlagn_mac_setup_register(struct iwl_priv *priv,
137			      const struct iwl_ucode_capabilities *capa)
138{
139	int ret;
140	struct ieee80211_hw *hw = priv->hw;
141	struct iwl_rxon_context *ctx;
142
143	hw->rate_control_algorithm = "iwl-agn-rs";
144
145	/* Tell mac80211 our characteristics */
146	hw->flags = IEEE80211_HW_SIGNAL_DBM |
147		    IEEE80211_HW_AMPDU_AGGREGATION |
148		    IEEE80211_HW_NEED_DTIM_BEFORE_ASSOC |
149		    IEEE80211_HW_SPECTRUM_MGMT |
150		    IEEE80211_HW_REPORTS_TX_ACK_STATUS |
151		    IEEE80211_HW_QUEUE_CONTROL |
152		    IEEE80211_HW_SUPPORTS_PS |
153		    IEEE80211_HW_SUPPORTS_DYNAMIC_PS |
154		    IEEE80211_HW_WANT_MONITOR_VIF;
155
156	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
157	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
158
159	/*
160	 * Including the following line will crash some AP's.  This
161	 * workaround removes the stimulus which causes the crash until
162	 * the AP software can be fixed.
163	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
164	 */
165
166	if (priv->nvm_data->sku_cap_11n_enable)
167		hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS |
168			     IEEE80211_HW_SUPPORTS_STATIC_SMPS;
169
170	/*
171	 * Enable 11w if advertised by firmware and software crypto
172	 * is not enabled (as the firmware will interpret some mgmt
173	 * packets, so enabling it with software crypto isn't safe)
174	 */
175	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
176	    !iwlwifi_mod_params.sw_crypto)
177		hw->flags |= IEEE80211_HW_MFP_CAPABLE;
178
179	hw->sta_data_size = sizeof(struct iwl_station_priv);
180	hw->vif_data_size = sizeof(struct iwl_vif_priv);
181
182	for_each_context(priv, ctx) {
183		hw->wiphy->interface_modes |= ctx->interface_modes;
184		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
185	}
186
187	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
188
189	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)) {
190		hw->wiphy->iface_combinations = iwlagn_iface_combinations_p2p;
191		hw->wiphy->n_iface_combinations =
192			ARRAY_SIZE(iwlagn_iface_combinations_p2p);
193	} else if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
194		hw->wiphy->iface_combinations =
195			iwlagn_iface_combinations_dualmode;
196		hw->wiphy->n_iface_combinations =
197			ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
198	}
199
200	hw->wiphy->max_remain_on_channel_duration = 500;
201
202	hw->wiphy->flags |= WIPHY_FLAG_CUSTOM_REGULATORY |
203			    WIPHY_FLAG_DISABLE_BEACON_HINTS |
204			    WIPHY_FLAG_IBSS_RSN;
205
206#ifdef CONFIG_PM_SLEEP
207	if (priv->fw->img[IWL_UCODE_WOWLAN].sec[0].len &&
208	    priv->trans->ops->d3_suspend &&
209	    priv->trans->ops->d3_resume &&
210	    device_can_wakeup(priv->trans->dev)) {
211		hw->wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
212					  WIPHY_WOWLAN_DISCONNECT |
213					  WIPHY_WOWLAN_EAP_IDENTITY_REQ |
214					  WIPHY_WOWLAN_RFKILL_RELEASE;
215		if (!iwlwifi_mod_params.sw_crypto)
216			hw->wiphy->wowlan.flags |=
217				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
218				WIPHY_WOWLAN_GTK_REKEY_FAILURE;
219
220		hw->wiphy->wowlan.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
221		hw->wiphy->wowlan.pattern_min_len =
222					IWLAGN_WOWLAN_MIN_PATTERN_LEN;
223		hw->wiphy->wowlan.pattern_max_len =
224					IWLAGN_WOWLAN_MAX_PATTERN_LEN;
225	}
226#endif
227
228	if (iwlwifi_mod_params.power_save)
229		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
230	else
231		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
232
233	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
234	/* we create the 802.11 header and a max-length SSID element */
235	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
236
237	/*
238	 * We don't use all queues: 4 and 9 are unused and any
239	 * aggregation queue gets mapped down to the AC queue.
240	 */
241	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
242
243	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
244
245	if (priv->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels)
246		priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
247			&priv->nvm_data->bands[IEEE80211_BAND_2GHZ];
248	if (priv->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels)
249		priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
250			&priv->nvm_data->bands[IEEE80211_BAND_5GHZ];
251
252	hw->wiphy->hw_version = priv->trans->hw_id;
253
254	iwl_leds_init(priv);
255
256	ret = ieee80211_register_hw(priv->hw);
257	if (ret) {
258		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
259		iwl_leds_exit(priv);
260		return ret;
261	}
262	priv->mac80211_registered = 1;
263
264	return 0;
265}
266
267void iwlagn_mac_unregister(struct iwl_priv *priv)
268{
269	if (!priv->mac80211_registered)
270		return;
271	iwl_leds_exit(priv);
272	ieee80211_unregister_hw(priv->hw);
273	priv->mac80211_registered = 0;
274}
275
276static int __iwl_up(struct iwl_priv *priv)
277{
278	struct iwl_rxon_context *ctx;
279	int ret;
280
281	lockdep_assert_held(&priv->mutex);
282
283	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
284		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
285		return -EIO;
286	}
287
288	for_each_context(priv, ctx) {
289		ret = iwlagn_alloc_bcast_station(priv, ctx);
290		if (ret) {
291			iwl_dealloc_bcast_stations(priv);
292			return ret;
293		}
294	}
295
296	ret = iwl_run_init_ucode(priv);
297	if (ret) {
298		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
299		goto error;
300	}
301
302	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
303	if (ret) {
304		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
305		goto error;
306	}
307
308	ret = iwl_alive_start(priv);
309	if (ret)
310		goto error;
311	return 0;
312
313 error:
314	set_bit(STATUS_EXIT_PENDING, &priv->status);
315	iwl_down(priv);
316	clear_bit(STATUS_EXIT_PENDING, &priv->status);
317
318	IWL_ERR(priv, "Unable to initialize device.\n");
319	return ret;
320}
321
322static int iwlagn_mac_start(struct ieee80211_hw *hw)
323{
324	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
325	int ret;
326
327	IWL_DEBUG_MAC80211(priv, "enter\n");
328
329	/* we should be verifying the device is ready to be opened */
330	mutex_lock(&priv->mutex);
331	ret = __iwl_up(priv);
332	mutex_unlock(&priv->mutex);
333	if (ret)
334		return ret;
335
336	IWL_DEBUG_INFO(priv, "Start UP work done.\n");
337
338	/* Now we should be done, and the READY bit should be set. */
339	if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
340		ret = -EIO;
341
342	iwlagn_led_enable(priv);
343
344	priv->is_open = 1;
345	IWL_DEBUG_MAC80211(priv, "leave\n");
346	return 0;
347}
348
349static void iwlagn_mac_stop(struct ieee80211_hw *hw)
350{
351	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
352
353	IWL_DEBUG_MAC80211(priv, "enter\n");
354
355	if (!priv->is_open)
356		return;
357
358	priv->is_open = 0;
359
360	mutex_lock(&priv->mutex);
361	iwl_down(priv);
362	mutex_unlock(&priv->mutex);
363
364	iwl_cancel_deferred_work(priv);
365
366	flush_workqueue(priv->workqueue);
367
368	/* User space software may expect getting rfkill changes
369	 * even if interface is down, trans->down will leave the RF
370	 * kill interrupt enabled
371	 */
372	iwl_trans_stop_hw(priv->trans, false);
373
374	IWL_DEBUG_MAC80211(priv, "leave\n");
375}
376
377static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
378				      struct ieee80211_vif *vif,
379				      struct cfg80211_gtk_rekey_data *data)
380{
381	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
382
383	if (iwlwifi_mod_params.sw_crypto)
384		return;
385
386	IWL_DEBUG_MAC80211(priv, "enter\n");
387	mutex_lock(&priv->mutex);
388
389	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
390		goto out;
391
392	memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
393	memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
394	priv->replay_ctr =
395		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
396	priv->have_rekey_data = true;
397
398 out:
399	mutex_unlock(&priv->mutex);
400	IWL_DEBUG_MAC80211(priv, "leave\n");
401}
402
403#ifdef CONFIG_PM_SLEEP
404
405static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
406			      struct cfg80211_wowlan *wowlan)
407{
408	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
409	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
410	int ret;
411
412	if (WARN_ON(!wowlan))
413		return -EINVAL;
414
415	IWL_DEBUG_MAC80211(priv, "enter\n");
416	mutex_lock(&priv->mutex);
417
418	/* Don't attempt WoWLAN when not associated, tear down instead. */
419	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
420	    !iwl_is_associated_ctx(ctx)) {
421		ret = 1;
422		goto out;
423	}
424
425	ret = iwlagn_suspend(priv, wowlan);
426	if (ret)
427		goto error;
428
429	/* let the ucode operate on its own */
430	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
431		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
432
433	iwl_trans_d3_suspend(priv->trans, false);
434
435	goto out;
436
437 error:
438	priv->wowlan = false;
439	iwlagn_prepare_restart(priv);
440	ieee80211_restart_hw(priv->hw);
441 out:
442	mutex_unlock(&priv->mutex);
443	IWL_DEBUG_MAC80211(priv, "leave\n");
444
445	return ret;
446}
447
448struct iwl_resume_data {
449	struct iwl_priv *priv;
450	struct iwlagn_wowlan_status *cmd;
451	bool valid;
452};
453
454static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
455				 struct iwl_rx_packet *pkt, void *data)
456{
457	struct iwl_resume_data *resume_data = data;
458	struct iwl_priv *priv = resume_data->priv;
459	u32 len = le32_to_cpu(pkt->len_n_flags) & FH_RSCSR_FRAME_SIZE_MSK;
460
461	if (len - 4 != sizeof(*resume_data->cmd)) {
462		IWL_ERR(priv, "rx wrong size data\n");
463		return true;
464	}
465	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
466	resume_data->valid = true;
467
468	return true;
469}
470
471static int iwlagn_mac_resume(struct ieee80211_hw *hw)
472{
473	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
474	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
475	struct ieee80211_vif *vif;
476	u32 base;
477	int ret;
478	enum iwl_d3_status d3_status;
479	struct error_table_start {
480		/* cf. struct iwl_error_event_table */
481		u32 valid;
482		u32 error_id;
483	} err_info;
484	struct iwl_notification_wait status_wait;
485	static const u8 status_cmd[] = {
486		REPLY_WOWLAN_GET_STATUS,
487	};
488	struct iwlagn_wowlan_status status_data = {};
489	struct iwl_resume_data resume_data = {
490		.priv = priv,
491		.cmd = &status_data,
492		.valid = false,
493	};
494	struct cfg80211_wowlan_wakeup wakeup = {
495		.pattern_idx = -1,
496	};
497#ifdef CONFIG_IWLWIFI_DEBUGFS
498	const struct fw_img *img;
499#endif
500
501	IWL_DEBUG_MAC80211(priv, "enter\n");
502	mutex_lock(&priv->mutex);
503
504	/* we'll clear ctx->vif during iwlagn_prepare_restart() */
505	vif = ctx->vif;
506
507	ret = iwl_trans_d3_resume(priv->trans, &d3_status, false);
508	if (ret)
509		goto out_unlock;
510
511	if (d3_status != IWL_D3_STATUS_ALIVE) {
512		IWL_INFO(priv, "Device was reset during suspend\n");
513		goto out_unlock;
514	}
515
516	/* uCode is no longer operating by itself */
517	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
518		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
519
520	base = priv->device_pointers.error_event_table;
521	if (!iwlagn_hw_valid_rtc_data_addr(base)) {
522		IWL_WARN(priv, "Invalid error table during resume!\n");
523		goto out_unlock;
524	}
525
526	iwl_trans_read_mem_bytes(priv->trans, base,
527				 &err_info, sizeof(err_info));
528
529	if (err_info.valid) {
530		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
531			 err_info.valid, err_info.error_id);
532		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
533			wakeup.rfkill_release = true;
534			ieee80211_report_wowlan_wakeup(vif, &wakeup,
535						       GFP_KERNEL);
536		}
537		goto out_unlock;
538	}
539
540#ifdef CONFIG_IWLWIFI_DEBUGFS
541	img = &priv->fw->img[IWL_UCODE_WOWLAN];
542	if (!priv->wowlan_sram)
543		priv->wowlan_sram =
544			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
545				GFP_KERNEL);
546
547	if (priv->wowlan_sram)
548		iwl_trans_read_mem(priv->trans, 0x800000,
549				   priv->wowlan_sram,
550				   img->sec[IWL_UCODE_SECTION_DATA].len / 4);
551#endif
552
553	/*
554	 * This is very strange. The GET_STATUS command is sent but the device
555	 * doesn't reply properly, it seems it doesn't close the RBD so one is
556	 * always left open ... As a result, we need to send another command
557	 * and have to reset the driver afterwards. As we need to switch to
558	 * runtime firmware again that'll happen.
559	 */
560
561	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
562				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
563				   &resume_data);
564
565	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
566	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
567	/* an RBD is left open in the firmware now! */
568
569	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
570	if (ret)
571		goto out_unlock;
572
573	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
574		u32 reasons = le32_to_cpu(status_data.wakeup_reason);
575		struct cfg80211_wowlan_wakeup *wakeup_report;
576
577		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
578
579		if (reasons) {
580			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
581				wakeup.magic_pkt = true;
582			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
583				wakeup.pattern_idx = status_data.pattern_number;
584			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
585				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
586				wakeup.disconnect = true;
587			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
588				wakeup.gtk_rekey_failure = true;
589			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
590				wakeup.eap_identity_req = true;
591			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
592				wakeup.four_way_handshake = true;
593			wakeup_report = &wakeup;
594		} else {
595			wakeup_report = NULL;
596		}
597
598		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
599	}
600
601	priv->wowlan = false;
602
603	iwlagn_prepare_restart(priv);
604
605	memset((void *)&ctx->active, 0, sizeof(ctx->active));
606	iwl_connection_init_rx_config(priv, ctx);
607	iwlagn_set_rxon_chain(priv, ctx);
608
609 out_unlock:
610	mutex_unlock(&priv->mutex);
611	IWL_DEBUG_MAC80211(priv, "leave\n");
612
613	ieee80211_resume_disconnect(vif);
614
615	return 1;
616}
617
618static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
619{
620	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
621
622	device_set_wakeup_enable(priv->trans->dev, enabled);
623}
624#endif
625
626static void iwlagn_mac_tx(struct ieee80211_hw *hw,
627			  struct ieee80211_tx_control *control,
628			  struct sk_buff *skb)
629{
630	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
631
632	if (iwlagn_tx_skb(priv, control->sta, skb))
633		ieee80211_free_txskb(hw, skb);
634}
635
636static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
637				       struct ieee80211_vif *vif,
638				       struct ieee80211_key_conf *keyconf,
639				       struct ieee80211_sta *sta,
640				       u32 iv32, u16 *phase1key)
641{
642	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
643
644	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
645}
646
647static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
648			      struct ieee80211_vif *vif,
649			      struct ieee80211_sta *sta,
650			      struct ieee80211_key_conf *key)
651{
652	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
653	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
654	struct iwl_rxon_context *ctx = vif_priv->ctx;
655	int ret;
656	bool is_default_wep_key = false;
657
658	IWL_DEBUG_MAC80211(priv, "enter\n");
659
660	if (iwlwifi_mod_params.sw_crypto) {
661		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
662		return -EOPNOTSUPP;
663	}
664
665	switch (key->cipher) {
666	case WLAN_CIPHER_SUITE_TKIP:
667		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
668		/* fall through */
669	case WLAN_CIPHER_SUITE_CCMP:
670		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
671		break;
672	default:
673		break;
674	}
675
676	/*
677	 * We could program these keys into the hardware as well, but we
678	 * don't expect much multicast traffic in IBSS and having keys
679	 * for more stations is probably more useful.
680	 *
681	 * Mark key TX-only and return 0.
682	 */
683	if (vif->type == NL80211_IFTYPE_ADHOC &&
684	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
685		key->hw_key_idx = WEP_INVALID_OFFSET;
686		return 0;
687	}
688
689	/* If they key was TX-only, accept deletion */
690	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
691		return 0;
692
693	mutex_lock(&priv->mutex);
694	iwl_scan_cancel_timeout(priv, 100);
695
696	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
697
698	/*
699	 * If we are getting WEP group key and we didn't receive any key mapping
700	 * so far, we are in legacy wep mode (group key only), otherwise we are
701	 * in 1X mode.
702	 * In legacy wep mode, we use another host command to the uCode.
703	 */
704	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
705	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
706		if (cmd == SET_KEY)
707			is_default_wep_key = !ctx->key_mapping_keys;
708		else
709			is_default_wep_key =
710				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
711	}
712
713
714	switch (cmd) {
715	case SET_KEY:
716		if (is_default_wep_key) {
717			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
718			break;
719		}
720		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
721		if (ret) {
722			/*
723			 * can't add key for RX, but we don't need it
724			 * in the device for TX so still return 0
725			 */
726			ret = 0;
727			key->hw_key_idx = WEP_INVALID_OFFSET;
728		}
729
730		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
731		break;
732	case DISABLE_KEY:
733		if (is_default_wep_key)
734			ret = iwl_remove_default_wep_key(priv, ctx, key);
735		else
736			ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
737
738		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
739		break;
740	default:
741		ret = -EINVAL;
742	}
743
744	mutex_unlock(&priv->mutex);
745	IWL_DEBUG_MAC80211(priv, "leave\n");
746
747	return ret;
748}
749
750static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
751				   struct ieee80211_vif *vif,
752				   enum ieee80211_ampdu_mlme_action action,
753				   struct ieee80211_sta *sta, u16 tid, u16 *ssn,
754				   u8 buf_size)
755{
756	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
757	int ret = -EINVAL;
758	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
759
760	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
761		     sta->addr, tid);
762
763	if (!(priv->nvm_data->sku_cap_11n_enable))
764		return -EACCES;
765
766	IWL_DEBUG_MAC80211(priv, "enter\n");
767	mutex_lock(&priv->mutex);
768
769	switch (action) {
770	case IEEE80211_AMPDU_RX_START:
771		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
772			break;
773		IWL_DEBUG_HT(priv, "start Rx\n");
774		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
775		break;
776	case IEEE80211_AMPDU_RX_STOP:
777		IWL_DEBUG_HT(priv, "stop Rx\n");
778		ret = iwl_sta_rx_agg_stop(priv, sta, tid);
779		break;
780	case IEEE80211_AMPDU_TX_START:
781		if (!priv->trans->ops->txq_enable)
782			break;
783		if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
784			break;
785		IWL_DEBUG_HT(priv, "start Tx\n");
786		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
787		break;
788	case IEEE80211_AMPDU_TX_STOP_FLUSH:
789	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
790		IWL_DEBUG_HT(priv, "Flush Tx\n");
791		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
792		break;
793	case IEEE80211_AMPDU_TX_STOP_CONT:
794		IWL_DEBUG_HT(priv, "stop Tx\n");
795		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
796		if ((ret == 0) && (priv->agg_tids_count > 0)) {
797			priv->agg_tids_count--;
798			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
799				     priv->agg_tids_count);
800		}
801		if (!priv->agg_tids_count &&
802		    priv->hw_params.use_rts_for_aggregation) {
803			/*
804			 * switch off RTS/CTS if it was previously enabled
805			 */
806			sta_priv->lq_sta.lq.general_params.flags &=
807				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
808			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
809					&sta_priv->lq_sta.lq, CMD_ASYNC, false);
810		}
811		break;
812	case IEEE80211_AMPDU_TX_OPERATIONAL:
813		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
814		break;
815	}
816	mutex_unlock(&priv->mutex);
817	IWL_DEBUG_MAC80211(priv, "leave\n");
818	return ret;
819}
820
821static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
822			      struct ieee80211_vif *vif,
823			      struct ieee80211_sta *sta)
824{
825	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
826	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
827	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
828	bool is_ap = vif->type == NL80211_IFTYPE_STATION;
829	int ret;
830	u8 sta_id;
831
832	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
833			sta->addr);
834	sta_priv->sta_id = IWL_INVALID_STATION;
835
836	atomic_set(&sta_priv->pending_frames, 0);
837	if (vif->type == NL80211_IFTYPE_AP)
838		sta_priv->client = true;
839
840	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
841				     is_ap, sta, &sta_id);
842	if (ret) {
843		IWL_ERR(priv, "Unable to add station %pM (%d)\n",
844			sta->addr, ret);
845		/* Should we return success if return code is EEXIST ? */
846		return ret;
847	}
848
849	sta_priv->sta_id = sta_id;
850
851	return 0;
852}
853
854static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
855				 struct ieee80211_vif *vif,
856				 struct ieee80211_sta *sta)
857{
858	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
859	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
860	int ret;
861
862	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
863
864	if (vif->type == NL80211_IFTYPE_STATION) {
865		/*
866		 * Station will be removed from device when the RXON
867		 * is set to unassociated -- just deactivate it here
868		 * to avoid re-programming it.
869		 */
870		ret = 0;
871		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
872	} else {
873		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
874		if (ret)
875			IWL_DEBUG_QUIET_RFKILL(priv,
876				"Error removing station %pM\n", sta->addr);
877	}
878	return ret;
879}
880
881static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
882				struct ieee80211_vif *vif,
883				struct ieee80211_sta *sta,
884				enum ieee80211_sta_state old_state,
885				enum ieee80211_sta_state new_state)
886{
887	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
888	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
889	enum {
890		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
891	} op = NONE;
892	int ret;
893
894	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
895			   sta->addr, old_state, new_state);
896
897	mutex_lock(&priv->mutex);
898	if (vif->type == NL80211_IFTYPE_STATION) {
899		if (old_state == IEEE80211_STA_NOTEXIST &&
900		    new_state == IEEE80211_STA_NONE)
901			op = ADD;
902		else if (old_state == IEEE80211_STA_NONE &&
903			 new_state == IEEE80211_STA_NOTEXIST)
904			op = REMOVE;
905		else if (old_state == IEEE80211_STA_AUTH &&
906			 new_state == IEEE80211_STA_ASSOC)
907			op = HT_RATE_INIT;
908	} else {
909		if (old_state == IEEE80211_STA_AUTH &&
910		    new_state == IEEE80211_STA_ASSOC)
911			op = ADD_RATE_INIT;
912		else if (old_state == IEEE80211_STA_ASSOC &&
913			 new_state == IEEE80211_STA_AUTH)
914			op = REMOVE;
915	}
916
917	switch (op) {
918	case ADD:
919		ret = iwlagn_mac_sta_add(hw, vif, sta);
920		if (ret)
921			break;
922		/*
923		 * Clear the in-progress flag, the AP station entry was added
924		 * but we'll initialize LQ only when we've associated (which
925		 * would also clear the in-progress flag). This is necessary
926		 * in case we never initialize LQ because association fails.
927		 */
928		spin_lock_bh(&priv->sta_lock);
929		priv->stations[iwl_sta_id(sta)].used &=
930			~IWL_STA_UCODE_INPROGRESS;
931		spin_unlock_bh(&priv->sta_lock);
932		break;
933	case REMOVE:
934		ret = iwlagn_mac_sta_remove(hw, vif, sta);
935		break;
936	case ADD_RATE_INIT:
937		ret = iwlagn_mac_sta_add(hw, vif, sta);
938		if (ret)
939			break;
940		/* Initialize rate scaling */
941		IWL_DEBUG_INFO(priv,
942			       "Initializing rate scaling for station %pM\n",
943			       sta->addr);
944		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
945		ret = 0;
946		break;
947	case HT_RATE_INIT:
948		/* Initialize rate scaling */
949		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
950		if (ret)
951			break;
952		IWL_DEBUG_INFO(priv,
953			       "Initializing rate scaling for station %pM\n",
954			       sta->addr);
955		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
956		ret = 0;
957		break;
958	default:
959		ret = 0;
960		break;
961	}
962
963	/*
964	 * mac80211 might WARN if we fail, but due the way we
965	 * (badly) handle hard rfkill, we might fail here
966	 */
967	if (iwl_is_rfkill(priv))
968		ret = 0;
969
970	mutex_unlock(&priv->mutex);
971	IWL_DEBUG_MAC80211(priv, "leave\n");
972
973	return ret;
974}
975
976static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
977				      struct ieee80211_channel_switch *ch_switch)
978{
979	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
980	struct ieee80211_conf *conf = &hw->conf;
981	struct ieee80211_channel *channel = ch_switch->chandef.chan;
982	struct iwl_ht_config *ht_conf = &priv->current_ht_config;
983	/*
984	 * MULTI-FIXME
985	 * When we add support for multiple interfaces, we need to
986	 * revisit this. The channel switch command in the device
987	 * only affects the BSS context, but what does that really
988	 * mean? And what if we get a CSA on the second interface?
989	 * This needs a lot of work.
990	 */
991	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
992	u16 ch;
993
994	IWL_DEBUG_MAC80211(priv, "enter\n");
995
996	mutex_lock(&priv->mutex);
997
998	if (iwl_is_rfkill(priv))
999		goto out;
1000
1001	if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
1002	    test_bit(STATUS_SCANNING, &priv->status) ||
1003	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1004		goto out;
1005
1006	if (!iwl_is_associated_ctx(ctx))
1007		goto out;
1008
1009	if (!priv->lib->set_channel_switch)
1010		goto out;
1011
1012	ch = channel->hw_value;
1013	if (le16_to_cpu(ctx->active.channel) == ch)
1014		goto out;
1015
1016	priv->current_ht_config.smps = conf->smps_mode;
1017
1018	/* Configure HT40 channels */
1019	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
1020	case NL80211_CHAN_NO_HT:
1021	case NL80211_CHAN_HT20:
1022		ctx->ht.is_40mhz = false;
1023		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1024		break;
1025	case NL80211_CHAN_HT40MINUS:
1026		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1027		ctx->ht.is_40mhz = true;
1028		break;
1029	case NL80211_CHAN_HT40PLUS:
1030		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
1031		ctx->ht.is_40mhz = true;
1032		break;
1033	}
1034
1035	if ((le16_to_cpu(ctx->staging.channel) != ch))
1036		ctx->staging.flags = 0;
1037
1038	iwl_set_rxon_channel(priv, channel, ctx);
1039	iwl_set_rxon_ht(priv, ht_conf);
1040	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
1041
1042	/*
1043	 * at this point, staging_rxon has the
1044	 * configuration for channel switch
1045	 */
1046	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1047	priv->switch_channel = cpu_to_le16(ch);
1048	if (priv->lib->set_channel_switch(priv, ch_switch)) {
1049		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1050		priv->switch_channel = 0;
1051		ieee80211_chswitch_done(ctx->vif, false);
1052	}
1053
1054out:
1055	mutex_unlock(&priv->mutex);
1056	IWL_DEBUG_MAC80211(priv, "leave\n");
1057}
1058
1059void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1060{
1061	/*
1062	 * MULTI-FIXME
1063	 * See iwlagn_mac_channel_switch.
1064	 */
1065	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1066
1067	if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1068		return;
1069
1070	if (test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1071		ieee80211_chswitch_done(ctx->vif, is_success);
1072}
1073
1074static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1075				    unsigned int changed_flags,
1076				    unsigned int *total_flags,
1077				    u64 multicast)
1078{
1079	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1080	__le32 filter_or = 0, filter_nand = 0;
1081	struct iwl_rxon_context *ctx;
1082
1083#define CHK(test, flag)	do { \
1084	if (*total_flags & (test))		\
1085		filter_or |= (flag);		\
1086	else					\
1087		filter_nand |= (flag);		\
1088	} while (0)
1089
1090	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1091			changed_flags, *total_flags);
1092
1093	CHK(FIF_OTHER_BSS | FIF_PROMISC_IN_BSS, RXON_FILTER_PROMISC_MSK);
1094	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1095	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1096	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1097
1098#undef CHK
1099
1100	mutex_lock(&priv->mutex);
1101
1102	for_each_context(priv, ctx) {
1103		ctx->staging.filter_flags &= ~filter_nand;
1104		ctx->staging.filter_flags |= filter_or;
1105
1106		/*
1107		 * Not committing directly because hardware can perform a scan,
1108		 * but we'll eventually commit the filter flags change anyway.
1109		 */
1110	}
1111
1112	mutex_unlock(&priv->mutex);
1113
1114	/*
1115	 * Receiving all multicast frames is always enabled by the
1116	 * default flags setup in iwl_connection_init_rx_config()
1117	 * since we currently do not support programming multicast
1118	 * filters into the device.
1119	 */
1120	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI | FIF_PROMISC_IN_BSS |
1121			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1122}
1123
1124static void iwlagn_mac_flush(struct ieee80211_hw *hw, u32 queues, bool drop)
1125{
1126	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1127
1128	mutex_lock(&priv->mutex);
1129	IWL_DEBUG_MAC80211(priv, "enter\n");
1130
1131	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1132		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1133		goto done;
1134	}
1135	if (iwl_is_rfkill(priv)) {
1136		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1137		goto done;
1138	}
1139
1140	/*
1141	 * mac80211 will not push any more frames for transmit
1142	 * until the flush is completed
1143	 */
1144	if (drop) {
1145		IWL_DEBUG_MAC80211(priv, "send flush command\n");
1146		if (iwlagn_txfifo_flush(priv, 0)) {
1147			IWL_ERR(priv, "flush request fail\n");
1148			goto done;
1149		}
1150	}
1151	IWL_DEBUG_MAC80211(priv, "wait transmit/flush all frames\n");
1152	iwl_trans_wait_tx_queue_empty(priv->trans);
1153done:
1154	mutex_unlock(&priv->mutex);
1155	IWL_DEBUG_MAC80211(priv, "leave\n");
1156}
1157
1158static int iwlagn_mac_remain_on_channel(struct ieee80211_hw *hw,
1159				     struct ieee80211_vif *vif,
1160				     struct ieee80211_channel *channel,
1161				     int duration,
1162				     enum ieee80211_roc_type type)
1163{
1164	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1165	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
1166	int err = 0;
1167
1168	if (!(priv->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
1169		return -EOPNOTSUPP;
1170
1171	if (!(ctx->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)))
1172		return -EOPNOTSUPP;
1173
1174	IWL_DEBUG_MAC80211(priv, "enter\n");
1175	mutex_lock(&priv->mutex);
1176
1177	if (test_bit(STATUS_SCAN_HW, &priv->status)) {
1178		/* mac80211 should not scan while ROC or ROC while scanning */
1179		if (WARN_ON_ONCE(priv->scan_type != IWL_SCAN_RADIO_RESET)) {
1180			err = -EBUSY;
1181			goto out;
1182		}
1183
1184		iwl_scan_cancel_timeout(priv, 100);
1185
1186		if (test_bit(STATUS_SCAN_HW, &priv->status)) {
1187			err = -EBUSY;
1188			goto out;
1189		}
1190	}
1191
1192	priv->hw_roc_channel = channel;
1193	/* convert from ms to TU */
1194	priv->hw_roc_duration = DIV_ROUND_UP(1000 * duration, 1024);
1195	priv->hw_roc_start_notified = false;
1196	cancel_delayed_work(&priv->hw_roc_disable_work);
1197
1198	if (!ctx->is_active) {
1199		static const struct iwl_qos_info default_qos_data = {
1200			.def_qos_parm = {
1201				.ac[0] = {
1202					.cw_min = cpu_to_le16(3),
1203					.cw_max = cpu_to_le16(7),
1204					.aifsn = 2,
1205					.edca_txop = cpu_to_le16(1504),
1206				},
1207				.ac[1] = {
1208					.cw_min = cpu_to_le16(7),
1209					.cw_max = cpu_to_le16(15),
1210					.aifsn = 2,
1211					.edca_txop = cpu_to_le16(3008),
1212				},
1213				.ac[2] = {
1214					.cw_min = cpu_to_le16(15),
1215					.cw_max = cpu_to_le16(1023),
1216					.aifsn = 3,
1217				},
1218				.ac[3] = {
1219					.cw_min = cpu_to_le16(15),
1220					.cw_max = cpu_to_le16(1023),
1221					.aifsn = 7,
1222				},
1223			},
1224		};
1225
1226		ctx->is_active = true;
1227		ctx->qos_data = default_qos_data;
1228		ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
1229		memcpy(ctx->staging.node_addr,
1230		       priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
1231		       ETH_ALEN);
1232		memcpy(ctx->staging.bssid_addr,
1233		       priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
1234		       ETH_ALEN);
1235		err = iwlagn_commit_rxon(priv, ctx);
1236		if (err)
1237			goto out;
1238		ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK |
1239					     RXON_FILTER_PROMISC_MSK |
1240					     RXON_FILTER_CTL2HOST_MSK;
1241
1242		err = iwlagn_commit_rxon(priv, ctx);
1243		if (err) {
1244			iwlagn_disable_roc(priv);
1245			goto out;
1246		}
1247		priv->hw_roc_setup = true;
1248	}
1249
1250	err = iwl_scan_initiate(priv, ctx->vif, IWL_SCAN_ROC, channel->band);
1251	if (err)
1252		iwlagn_disable_roc(priv);
1253
1254 out:
1255	mutex_unlock(&priv->mutex);
1256	IWL_DEBUG_MAC80211(priv, "leave\n");
1257
1258	return err;
1259}
1260
1261static int iwlagn_mac_cancel_remain_on_channel(struct ieee80211_hw *hw)
1262{
1263	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1264
1265	if (!(priv->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
1266		return -EOPNOTSUPP;
1267
1268	IWL_DEBUG_MAC80211(priv, "enter\n");
1269	mutex_lock(&priv->mutex);
1270	iwl_scan_cancel_timeout(priv, priv->hw_roc_duration);
1271	iwlagn_disable_roc(priv);
1272	mutex_unlock(&priv->mutex);
1273	IWL_DEBUG_MAC80211(priv, "leave\n");
1274
1275	return 0;
1276}
1277
1278static void iwlagn_mac_rssi_callback(struct ieee80211_hw *hw,
1279				     struct ieee80211_vif *vif,
1280				     enum ieee80211_rssi_event rssi_event)
1281{
1282	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1283
1284	IWL_DEBUG_MAC80211(priv, "enter\n");
1285	mutex_lock(&priv->mutex);
1286
1287	if (priv->lib->bt_params &&
1288	    priv->lib->bt_params->advanced_bt_coexist) {
1289		if (rssi_event == RSSI_EVENT_LOW)
1290			priv->bt_enable_pspoll = true;
1291		else if (rssi_event == RSSI_EVENT_HIGH)
1292			priv->bt_enable_pspoll = false;
1293
1294		iwlagn_send_advance_bt_config(priv);
1295	} else {
1296		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1297				"ignoring RSSI callback\n");
1298	}
1299
1300	mutex_unlock(&priv->mutex);
1301	IWL_DEBUG_MAC80211(priv, "leave\n");
1302}
1303
1304static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1305			      struct ieee80211_sta *sta, bool set)
1306{
1307	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1308
1309	queue_work(priv->workqueue, &priv->beacon_update);
1310
1311	return 0;
1312}
1313
1314static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1315			      struct ieee80211_vif *vif, u16 queue,
1316			      const struct ieee80211_tx_queue_params *params)
1317{
1318	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1319	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1320	struct iwl_rxon_context *ctx = vif_priv->ctx;
1321	int q;
1322
1323	if (WARN_ON(!ctx))
1324		return -EINVAL;
1325
1326	IWL_DEBUG_MAC80211(priv, "enter\n");
1327
1328	if (!iwl_is_ready_rf(priv)) {
1329		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1330		return -EIO;
1331	}
1332
1333	if (queue >= AC_NUM) {
1334		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1335		return 0;
1336	}
1337
1338	q = AC_NUM - 1 - queue;
1339
1340	mutex_lock(&priv->mutex);
1341
1342	ctx->qos_data.def_qos_parm.ac[q].cw_min =
1343		cpu_to_le16(params->cw_min);
1344	ctx->qos_data.def_qos_parm.ac[q].cw_max =
1345		cpu_to_le16(params->cw_max);
1346	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1347	ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1348			cpu_to_le16((params->txop * 32));
1349
1350	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1351
1352	mutex_unlock(&priv->mutex);
1353
1354	IWL_DEBUG_MAC80211(priv, "leave\n");
1355	return 0;
1356}
1357
1358static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1359{
1360	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1361
1362	return priv->ibss_manager == IWL_IBSS_MANAGER;
1363}
1364
1365static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1366{
1367	iwl_connection_init_rx_config(priv, ctx);
1368
1369	iwlagn_set_rxon_chain(priv, ctx);
1370
1371	return iwlagn_commit_rxon(priv, ctx);
1372}
1373
1374static int iwl_setup_interface(struct iwl_priv *priv,
1375			       struct iwl_rxon_context *ctx)
1376{
1377	struct ieee80211_vif *vif = ctx->vif;
1378	int err, ac;
1379
1380	lockdep_assert_held(&priv->mutex);
1381
1382	/*
1383	 * This variable will be correct only when there's just
1384	 * a single context, but all code using it is for hardware
1385	 * that supports only one context.
1386	 */
1387	priv->iw_mode = vif->type;
1388
1389	ctx->is_active = true;
1390
1391	err = iwl_set_mode(priv, ctx);
1392	if (err) {
1393		if (!ctx->always_active)
1394			ctx->is_active = false;
1395		return err;
1396	}
1397
1398	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1399	    vif->type == NL80211_IFTYPE_ADHOC) {
1400		/*
1401		 * pretend to have high BT traffic as long as we
1402		 * are operating in IBSS mode, as this will cause
1403		 * the rate scaling etc. to behave as intended.
1404		 */
1405		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1406	}
1407
1408	/* set up queue mappings */
1409	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1410		vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1411
1412	if (vif->type == NL80211_IFTYPE_AP)
1413		vif->cab_queue = ctx->mcast_queue;
1414	else
1415		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1416
1417	return 0;
1418}
1419
1420static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1421				    struct ieee80211_vif *vif)
1422{
1423	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1424	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1425	struct iwl_rxon_context *tmp, *ctx = NULL;
1426	int err;
1427	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1428	bool reset = false;
1429
1430	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1431			   viftype, vif->addr);
1432
1433	cancel_delayed_work_sync(&priv->hw_roc_disable_work);
1434
1435	mutex_lock(&priv->mutex);
1436
1437	iwlagn_disable_roc(priv);
1438
1439	if (!iwl_is_ready_rf(priv)) {
1440		IWL_WARN(priv, "Try to add interface when device not ready\n");
1441		err = -EINVAL;
1442		goto out;
1443	}
1444
1445	for_each_context(priv, tmp) {
1446		u32 possible_modes =
1447			tmp->interface_modes | tmp->exclusive_interface_modes;
1448
1449		if (tmp->vif) {
1450			/* On reset we need to add the same interface again */
1451			if (tmp->vif == vif) {
1452				reset = true;
1453				ctx = tmp;
1454				break;
1455			}
1456
1457			/* check if this busy context is exclusive */
1458			if (tmp->exclusive_interface_modes &
1459						BIT(tmp->vif->type)) {
1460				err = -EINVAL;
1461				goto out;
1462			}
1463			continue;
1464		}
1465
1466		if (!(possible_modes & BIT(viftype)))
1467			continue;
1468
1469		/* have maybe usable context w/o interface */
1470		ctx = tmp;
1471		break;
1472	}
1473
1474	if (!ctx) {
1475		err = -EOPNOTSUPP;
1476		goto out;
1477	}
1478
1479	vif_priv->ctx = ctx;
1480	ctx->vif = vif;
1481
1482	/*
1483	 * In SNIFFER device type, the firmware reports the FCS to
1484	 * the host, rather than snipping it off. Unfortunately,
1485	 * mac80211 doesn't (yet) provide a per-packet flag for
1486	 * this, so that we have to set the hardware flag based
1487	 * on the interfaces added. As the monitor interface can
1488	 * only be present by itself, and will be removed before
1489	 * other interfaces are added, this is safe.
1490	 */
1491	if (vif->type == NL80211_IFTYPE_MONITOR)
1492		priv->hw->flags |= IEEE80211_HW_RX_INCLUDES_FCS;
1493	else
1494		priv->hw->flags &= ~IEEE80211_HW_RX_INCLUDES_FCS;
1495
1496	err = iwl_setup_interface(priv, ctx);
1497	if (!err || reset)
1498		goto out;
1499
1500	ctx->vif = NULL;
1501	priv->iw_mode = NL80211_IFTYPE_STATION;
1502 out:
1503	mutex_unlock(&priv->mutex);
1504
1505	IWL_DEBUG_MAC80211(priv, "leave\n");
1506	return err;
1507}
1508
1509static void iwl_teardown_interface(struct iwl_priv *priv,
1510				   struct ieee80211_vif *vif,
1511				   bool mode_change)
1512{
1513	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1514
1515	lockdep_assert_held(&priv->mutex);
1516
1517	if (priv->scan_vif == vif) {
1518		iwl_scan_cancel_timeout(priv, 200);
1519		iwl_force_scan_end(priv);
1520	}
1521
1522	if (!mode_change) {
1523		iwl_set_mode(priv, ctx);
1524		if (!ctx->always_active)
1525			ctx->is_active = false;
1526	}
1527
1528	/*
1529	 * When removing the IBSS interface, overwrite the
1530	 * BT traffic load with the stored one from the last
1531	 * notification, if any. If this is a device that
1532	 * doesn't implement this, this has no effect since
1533	 * both values are the same and zero.
1534	 */
1535	if (vif->type == NL80211_IFTYPE_ADHOC)
1536		priv->bt_traffic_load = priv->last_bt_traffic_load;
1537}
1538
1539static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1540			      struct ieee80211_vif *vif)
1541{
1542	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1543	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1544
1545	IWL_DEBUG_MAC80211(priv, "enter\n");
1546
1547	mutex_lock(&priv->mutex);
1548
1549	if (WARN_ON(ctx->vif != vif)) {
1550		struct iwl_rxon_context *tmp;
1551		IWL_ERR(priv, "ctx->vif = %p, vif = %p\n", ctx->vif, vif);
1552		for_each_context(priv, tmp)
1553			IWL_ERR(priv, "\tID = %d:\tctx = %p\tctx->vif = %p\n",
1554				tmp->ctxid, tmp, tmp->vif);
1555	}
1556	ctx->vif = NULL;
1557
1558	iwl_teardown_interface(priv, vif, false);
1559
1560	mutex_unlock(&priv->mutex);
1561
1562	IWL_DEBUG_MAC80211(priv, "leave\n");
1563
1564}
1565
1566static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1567				       struct ieee80211_vif *vif,
1568				       enum nl80211_iftype newtype, bool newp2p)
1569{
1570	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1571	struct iwl_rxon_context *ctx, *tmp;
1572	enum nl80211_iftype newviftype = newtype;
1573	u32 interface_modes;
1574	int err;
1575
1576	IWL_DEBUG_MAC80211(priv, "enter\n");
1577
1578	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1579
1580	mutex_lock(&priv->mutex);
1581
1582	ctx = iwl_rxon_ctx_from_vif(vif);
1583
1584	/*
1585	 * To simplify this code, only support changes on the
1586	 * BSS context. The PAN context is usually reassigned
1587	 * by creating/removing P2P interfaces anyway.
1588	 */
1589	if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1590		err = -EBUSY;
1591		goto out;
1592	}
1593
1594	if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1595		/*
1596		 * Huh? But wait ... this can maybe happen when
1597		 * we're in the middle of a firmware restart!
1598		 */
1599		err = -EBUSY;
1600		goto out;
1601	}
1602
1603	/* Check if the switch is supported in the same context */
1604	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1605	if (!(interface_modes & BIT(newtype))) {
1606		err = -EBUSY;
1607		goto out;
1608	}
1609
1610	if (ctx->exclusive_interface_modes & BIT(newtype)) {
1611		for_each_context(priv, tmp) {
1612			if (ctx == tmp)
1613				continue;
1614
1615			if (!tmp->is_active)
1616				continue;
1617
1618			/*
1619			 * The current mode switch would be exclusive, but
1620			 * another context is active ... refuse the switch.
1621			 */
1622			err = -EBUSY;
1623			goto out;
1624		}
1625	}
1626
1627	/* success */
1628	iwl_teardown_interface(priv, vif, true);
1629	vif->type = newviftype;
1630	vif->p2p = newp2p;
1631	err = iwl_setup_interface(priv, ctx);
1632	WARN_ON(err);
1633	/*
1634	 * We've switched internally, but submitting to the
1635	 * device may have failed for some reason. Mask this
1636	 * error, because otherwise mac80211 will not switch
1637	 * (and set the interface type back) and we'll be
1638	 * out of sync with it.
1639	 */
1640	err = 0;
1641
1642 out:
1643	mutex_unlock(&priv->mutex);
1644	IWL_DEBUG_MAC80211(priv, "leave\n");
1645
1646	return err;
1647}
1648
1649static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1650			      struct ieee80211_vif *vif,
1651			      struct cfg80211_scan_request *req)
1652{
1653	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1654	int ret;
1655
1656	IWL_DEBUG_MAC80211(priv, "enter\n");
1657
1658	if (req->n_channels == 0)
1659		return -EINVAL;
1660
1661	mutex_lock(&priv->mutex);
1662
1663	/*
1664	 * If an internal scan is in progress, just set
1665	 * up the scan_request as per above.
1666	 */
1667	if (priv->scan_type != IWL_SCAN_NORMAL) {
1668		IWL_DEBUG_SCAN(priv,
1669			       "SCAN request during internal scan - defer\n");
1670		priv->scan_request = req;
1671		priv->scan_vif = vif;
1672		ret = 0;
1673	} else {
1674		priv->scan_request = req;
1675		priv->scan_vif = vif;
1676		/*
1677		 * mac80211 will only ask for one band at a time
1678		 * so using channels[0] here is ok
1679		 */
1680		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1681					req->channels[0]->band);
1682		if (ret) {
1683			priv->scan_request = NULL;
1684			priv->scan_vif = NULL;
1685		}
1686	}
1687
1688	IWL_DEBUG_MAC80211(priv, "leave\n");
1689
1690	mutex_unlock(&priv->mutex);
1691
1692	return ret;
1693}
1694
1695static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1696{
1697	struct iwl_addsta_cmd cmd = {
1698		.mode = STA_CONTROL_MODIFY_MSK,
1699		.station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1700		.sta.sta_id = sta_id,
1701	};
1702
1703	iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1704}
1705
1706static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1707				  struct ieee80211_vif *vif,
1708				  enum sta_notify_cmd cmd,
1709				  struct ieee80211_sta *sta)
1710{
1711	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1712	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1713	int sta_id;
1714
1715	IWL_DEBUG_MAC80211(priv, "enter\n");
1716
1717	switch (cmd) {
1718	case STA_NOTIFY_SLEEP:
1719		WARN_ON(!sta_priv->client);
1720		sta_priv->asleep = true;
1721		if (atomic_read(&sta_priv->pending_frames) > 0)
1722			ieee80211_sta_block_awake(hw, sta, true);
1723		break;
1724	case STA_NOTIFY_AWAKE:
1725		WARN_ON(!sta_priv->client);
1726		if (!sta_priv->asleep)
1727			break;
1728		sta_priv->asleep = false;
1729		sta_id = iwl_sta_id(sta);
1730		if (sta_id != IWL_INVALID_STATION)
1731			iwl_sta_modify_ps_wake(priv, sta_id);
1732		break;
1733	default:
1734		break;
1735	}
1736	IWL_DEBUG_MAC80211(priv, "leave\n");
1737}
1738
1739struct ieee80211_ops iwlagn_hw_ops = {
1740	.tx = iwlagn_mac_tx,
1741	.start = iwlagn_mac_start,
1742	.stop = iwlagn_mac_stop,
1743#ifdef CONFIG_PM_SLEEP
1744	.suspend = iwlagn_mac_suspend,
1745	.resume = iwlagn_mac_resume,
1746	.set_wakeup = iwlagn_mac_set_wakeup,
1747#endif
1748	.add_interface = iwlagn_mac_add_interface,
1749	.remove_interface = iwlagn_mac_remove_interface,
1750	.change_interface = iwlagn_mac_change_interface,
1751	.config = iwlagn_mac_config,
1752	.configure_filter = iwlagn_configure_filter,
1753	.set_key = iwlagn_mac_set_key,
1754	.update_tkip_key = iwlagn_mac_update_tkip_key,
1755	.set_rekey_data = iwlagn_mac_set_rekey_data,
1756	.conf_tx = iwlagn_mac_conf_tx,
1757	.bss_info_changed = iwlagn_bss_info_changed,
1758	.ampdu_action = iwlagn_mac_ampdu_action,
1759	.hw_scan = iwlagn_mac_hw_scan,
1760	.sta_notify = iwlagn_mac_sta_notify,
1761	.sta_state = iwlagn_mac_sta_state,
1762	.channel_switch = iwlagn_mac_channel_switch,
1763	.flush = iwlagn_mac_flush,
1764	.tx_last_beacon = iwlagn_mac_tx_last_beacon,
1765	.remain_on_channel = iwlagn_mac_remain_on_channel,
1766	.cancel_remain_on_channel = iwlagn_mac_cancel_remain_on_channel,
1767	.rssi_callback = iwlagn_mac_rssi_callback,
1768	.set_tim = iwlagn_mac_set_tim,
1769};
1770
1771/* This function both allocates and initializes hw and priv. */
1772struct ieee80211_hw *iwl_alloc_all(void)
1773{
1774	struct iwl_priv *priv;
1775	struct iwl_op_mode *op_mode;
1776	/* mac80211 allocates memory for this device instance, including
1777	 *   space for this driver's private structure */
1778	struct ieee80211_hw *hw;
1779
1780	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1781				sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1782	if (!hw)
1783		goto out;
1784
1785	op_mode = hw->priv;
1786	priv = IWL_OP_MODE_GET_DVM(op_mode);
1787	priv->hw = hw;
1788
1789out:
1790	return hw;
1791}
1792