4 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * Copyright 2007-2010, Intel Corporation
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2 as
13 * published by the Free Software Foundation.
16 #include <linux/ieee80211.h>
17 #include <linux/export.h>
18 #include <net/mac80211.h>
19 #include "ieee80211_i.h"
22 static void __check_htcap_disable(struct ieee80211_sub_if_data *sdata,
23 struct ieee80211_sta_ht_cap *ht_cap,
26 __le16 le_flag = cpu_to_le16(flag);
27 if (sdata->u.mgd.ht_capa_mask.cap_info & le_flag) {
28 if (!(sdata->u.mgd.ht_capa.cap_info & le_flag))
33 void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data *sdata,
34 struct ieee80211_sta_ht_cap *ht_cap)
36 u8 *scaps = (u8 *)(&sdata->u.mgd.ht_capa.mcs.rx_mask);
37 u8 *smask = (u8 *)(&sdata->u.mgd.ht_capa_mask.mcs.rx_mask);
40 if (!ht_cap->ht_supported)
43 /* NOTE: If you add more over-rides here, update register_hw
44 * ht_capa_mod_msk logic in main.c as well.
45 * And, if this method can ever change ht_cap.ht_supported, fix
46 * the check in ieee80211_add_ht_ie.
49 /* check for HT over-rides, MCS rates first. */
50 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
52 ht_cap->mcs.rx_mask[i] &= ~m; /* turn off all masked bits */
53 /* Add back rates that are supported */
54 ht_cap->mcs.rx_mask[i] |= (m & scaps[i]);
57 /* Force removal of HT-40 capabilities? */
58 __check_htcap_disable(sdata, ht_cap, IEEE80211_HT_CAP_SUP_WIDTH_20_40);
59 __check_htcap_disable(sdata, ht_cap, IEEE80211_HT_CAP_SGI_40);
61 /* Allow user to disable SGI-20 (SGI-40 is handled above) */
62 __check_htcap_disable(sdata, ht_cap, IEEE80211_HT_CAP_SGI_20);
64 /* Allow user to disable the max-AMSDU bit. */
65 __check_htcap_disable(sdata, ht_cap, IEEE80211_HT_CAP_MAX_AMSDU);
67 /* Allow user to decrease AMPDU factor */
68 if (sdata->u.mgd.ht_capa_mask.ampdu_params_info &
69 IEEE80211_HT_AMPDU_PARM_FACTOR) {
70 u8 n = sdata->u.mgd.ht_capa.ampdu_params_info
71 & IEEE80211_HT_AMPDU_PARM_FACTOR;
72 if (n < ht_cap->ampdu_factor)
73 ht_cap->ampdu_factor = n;
76 /* Allow the user to increase AMPDU density. */
77 if (sdata->u.mgd.ht_capa_mask.ampdu_params_info &
78 IEEE80211_HT_AMPDU_PARM_DENSITY) {
79 u8 n = (sdata->u.mgd.ht_capa.ampdu_params_info &
80 IEEE80211_HT_AMPDU_PARM_DENSITY)
81 >> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
82 if (n > ht_cap->ampdu_density)
83 ht_cap->ampdu_density = n;
88 bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data *sdata,
89 struct ieee80211_supported_band *sband,
90 const struct ieee80211_ht_cap *ht_cap_ie,
93 struct ieee80211_sta_ht_cap ht_cap;
94 u8 ampdu_info, tx_mcs_set_cap;
95 int i, max_tx_streams;
97 enum ieee80211_sta_rx_bandwidth bw;
98 enum ieee80211_smps_mode smps_mode;
100 memset(&ht_cap, 0, sizeof(ht_cap));
102 if (!ht_cap_ie || !sband->ht_cap.ht_supported)
105 ht_cap.ht_supported = true;
108 * The bits listed in this expression should be
109 * the same for the peer and us, if the station
110 * advertises more then we can't use those thus
113 ht_cap.cap = le16_to_cpu(ht_cap_ie->cap_info) &
115 ~(IEEE80211_HT_CAP_LDPC_CODING |
116 IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
117 IEEE80211_HT_CAP_GRN_FLD |
118 IEEE80211_HT_CAP_SGI_20 |
119 IEEE80211_HT_CAP_SGI_40 |
120 IEEE80211_HT_CAP_DSSSCCK40));
123 * The STBC bits are asymmetric -- if we don't have
124 * TX then mask out the peer's RX and vice versa.
126 if (!(sband->ht_cap.cap & IEEE80211_HT_CAP_TX_STBC))
127 ht_cap.cap &= ~IEEE80211_HT_CAP_RX_STBC;
128 if (!(sband->ht_cap.cap & IEEE80211_HT_CAP_RX_STBC))
129 ht_cap.cap &= ~IEEE80211_HT_CAP_TX_STBC;
131 ampdu_info = ht_cap_ie->ampdu_params_info;
132 ht_cap.ampdu_factor =
133 ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
134 ht_cap.ampdu_density =
135 (ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2;
137 /* own MCS TX capabilities */
138 tx_mcs_set_cap = sband->ht_cap.mcs.tx_params;
140 /* Copy peer MCS TX capabilities, the driver might need them. */
141 ht_cap.mcs.tx_params = ht_cap_ie->mcs.tx_params;
143 /* can we TX with MCS rates? */
144 if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED))
147 /* Counting from 0, therefore +1 */
148 if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF)
150 ((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK)
151 >> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1;
153 max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS;
156 * 802.11n-2009 20.3.5 / 20.6 says:
157 * - indices 0 to 7 and 32 are single spatial stream
158 * - 8 to 31 are multiple spatial streams using equal modulation
159 * [8..15 for two streams, 16..23 for three and 24..31 for four]
160 * - remainder are multiple spatial streams using unequal modulation
162 for (i = 0; i < max_tx_streams; i++)
163 ht_cap.mcs.rx_mask[i] =
164 sband->ht_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i];
166 if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION)
167 for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE;
168 i < IEEE80211_HT_MCS_MASK_LEN; i++)
169 ht_cap.mcs.rx_mask[i] =
170 sband->ht_cap.mcs.rx_mask[i] &
171 ht_cap_ie->mcs.rx_mask[i];
173 /* handle MCS rate 32 too */
174 if (sband->ht_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1)
175 ht_cap.mcs.rx_mask[32/8] |= 1;
179 * If user has specified capability over-rides, take care
180 * of that if the station we're setting up is the AP that
181 * we advertised a restricted capability set to.
183 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
184 !test_sta_flag(sta, WLAN_STA_TDLS_PEER))
185 ieee80211_apply_htcap_overrides(sdata, &ht_cap);
187 changed = memcmp(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));
189 memcpy(&sta->sta.ht_cap, &ht_cap, sizeof(ht_cap));
191 switch (sdata->vif.bss_conf.chandef.width) {
195 case NL80211_CHAN_WIDTH_20_NOHT:
196 case NL80211_CHAN_WIDTH_20:
197 bw = IEEE80211_STA_RX_BW_20;
199 case NL80211_CHAN_WIDTH_40:
200 case NL80211_CHAN_WIDTH_80:
201 case NL80211_CHAN_WIDTH_80P80:
202 case NL80211_CHAN_WIDTH_160:
203 bw = ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
204 IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
208 if (bw != sta->sta.bandwidth)
210 sta->sta.bandwidth = bw;
212 sta->cur_max_bandwidth =
213 ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
214 IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
216 switch ((ht_cap.cap & IEEE80211_HT_CAP_SM_PS)
217 >> IEEE80211_HT_CAP_SM_PS_SHIFT) {
218 case WLAN_HT_CAP_SM_PS_INVALID:
219 case WLAN_HT_CAP_SM_PS_STATIC:
220 smps_mode = IEEE80211_SMPS_STATIC;
222 case WLAN_HT_CAP_SM_PS_DYNAMIC:
223 smps_mode = IEEE80211_SMPS_DYNAMIC;
225 case WLAN_HT_CAP_SM_PS_DISABLED:
226 smps_mode = IEEE80211_SMPS_OFF;
230 if (smps_mode != sta->sta.smps_mode)
232 sta->sta.smps_mode = smps_mode;
237 void ieee80211_sta_tear_down_BA_sessions(struct sta_info *sta,
238 enum ieee80211_agg_stop_reason reason)
242 cancel_work_sync(&sta->ampdu_mlme.work);
244 for (i = 0; i < IEEE80211_NUM_TIDS; i++) {
245 __ieee80211_stop_tx_ba_session(sta, i, reason);
246 __ieee80211_stop_rx_ba_session(sta, i, WLAN_BACK_RECIPIENT,
247 WLAN_REASON_QSTA_LEAVE_QBSS,
248 reason != AGG_STOP_DESTROY_STA &&
249 reason != AGG_STOP_PEER_REQUEST);
253 void ieee80211_ba_session_work(struct work_struct *work)
255 struct sta_info *sta =
256 container_of(work, struct sta_info, ampdu_mlme.work);
257 struct tid_ampdu_tx *tid_tx;
261 * When this flag is set, new sessions should be
262 * blocked, and existing sessions will be torn
263 * down by the code that set the flag, so this
266 if (test_sta_flag(sta, WLAN_STA_BLOCK_BA))
269 mutex_lock(&sta->ampdu_mlme.mtx);
270 for (tid = 0; tid < IEEE80211_NUM_TIDS; tid++) {
271 if (test_and_clear_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired))
272 ___ieee80211_stop_rx_ba_session(
273 sta, tid, WLAN_BACK_RECIPIENT,
274 WLAN_REASON_QSTA_TIMEOUT, true);
276 if (test_and_clear_bit(tid,
277 sta->ampdu_mlme.tid_rx_stop_requested))
278 ___ieee80211_stop_rx_ba_session(
279 sta, tid, WLAN_BACK_RECIPIENT,
280 WLAN_REASON_UNSPECIFIED, true);
282 tid_tx = sta->ampdu_mlme.tid_start_tx[tid];
285 * Assign it over to the normal tid_tx array
286 * where it "goes live".
288 spin_lock_bh(&sta->lock);
290 sta->ampdu_mlme.tid_start_tx[tid] = NULL;
291 /* could there be a race? */
292 if (sta->ampdu_mlme.tid_tx[tid])
295 ieee80211_assign_tid_tx(sta, tid, tid_tx);
296 spin_unlock_bh(&sta->lock);
298 ieee80211_tx_ba_session_handle_start(sta, tid);
302 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
303 if (tid_tx && test_and_clear_bit(HT_AGG_STATE_WANT_STOP,
305 ___ieee80211_stop_tx_ba_session(sta, tid,
306 AGG_STOP_LOCAL_REQUEST);
308 mutex_unlock(&sta->ampdu_mlme.mtx);
311 void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata,
312 const u8 *da, u16 tid,
313 u16 initiator, u16 reason_code)
315 struct ieee80211_local *local = sdata->local;
317 struct ieee80211_mgmt *mgmt;
320 skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
324 skb_reserve(skb, local->hw.extra_tx_headroom);
325 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
327 memcpy(mgmt->da, da, ETH_ALEN);
328 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
329 if (sdata->vif.type == NL80211_IFTYPE_AP ||
330 sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
331 sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
332 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
333 else if (sdata->vif.type == NL80211_IFTYPE_STATION)
334 memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
335 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
336 memcpy(mgmt->bssid, sdata->u.ibss.bssid, ETH_ALEN);
338 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
339 IEEE80211_STYPE_ACTION);
341 skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba));
343 mgmt->u.action.category = WLAN_CATEGORY_BACK;
344 mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA;
345 params = (u16)(initiator << 11); /* bit 11 initiator */
346 params |= (u16)(tid << 12); /* bit 15:12 TID number */
348 mgmt->u.action.u.delba.params = cpu_to_le16(params);
349 mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code);
351 ieee80211_tx_skb_tid(sdata, skb, tid);
354 void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata,
355 struct sta_info *sta,
356 struct ieee80211_mgmt *mgmt, size_t len)
361 params = le16_to_cpu(mgmt->u.action.u.delba.params);
362 tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
363 initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;
365 ht_dbg_ratelimited(sdata, "delba from %pM (%s) tid %d reason code %d\n",
366 mgmt->sa, initiator ? "initiator" : "recipient",
368 le16_to_cpu(mgmt->u.action.u.delba.reason_code));
370 if (initiator == WLAN_BACK_INITIATOR)
371 __ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_INITIATOR, 0,
374 __ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_PEER_REQUEST);
377 int ieee80211_send_smps_action(struct ieee80211_sub_if_data *sdata,
378 enum ieee80211_smps_mode smps, const u8 *da,
381 struct ieee80211_local *local = sdata->local;
383 struct ieee80211_mgmt *action_frame;
385 /* 27 = header + category + action + smps mode */
386 skb = dev_alloc_skb(27 + local->hw.extra_tx_headroom);
390 skb_reserve(skb, local->hw.extra_tx_headroom);
391 action_frame = (void *)skb_put(skb, 27);
392 memcpy(action_frame->da, da, ETH_ALEN);
393 memcpy(action_frame->sa, sdata->dev->dev_addr, ETH_ALEN);
394 memcpy(action_frame->bssid, bssid, ETH_ALEN);
395 action_frame->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
396 IEEE80211_STYPE_ACTION);
397 action_frame->u.action.category = WLAN_CATEGORY_HT;
398 action_frame->u.action.u.ht_smps.action = WLAN_HT_ACTION_SMPS;
400 case IEEE80211_SMPS_AUTOMATIC:
401 case IEEE80211_SMPS_NUM_MODES:
403 case IEEE80211_SMPS_OFF:
404 action_frame->u.action.u.ht_smps.smps_control =
405 WLAN_HT_SMPS_CONTROL_DISABLED;
407 case IEEE80211_SMPS_STATIC:
408 action_frame->u.action.u.ht_smps.smps_control =
409 WLAN_HT_SMPS_CONTROL_STATIC;
411 case IEEE80211_SMPS_DYNAMIC:
412 action_frame->u.action.u.ht_smps.smps_control =
413 WLAN_HT_SMPS_CONTROL_DYNAMIC;
417 /* we'll do more on status of this frame */
418 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS;
419 ieee80211_tx_skb(sdata, skb);
424 void ieee80211_request_smps_work(struct work_struct *work)
426 struct ieee80211_sub_if_data *sdata =
427 container_of(work, struct ieee80211_sub_if_data,
428 u.mgd.request_smps_work);
430 mutex_lock(&sdata->u.mgd.mtx);
431 __ieee80211_request_smps(sdata, sdata->u.mgd.driver_smps_mode);
432 mutex_unlock(&sdata->u.mgd.mtx);
435 void ieee80211_request_smps(struct ieee80211_vif *vif,
436 enum ieee80211_smps_mode smps_mode)
438 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
440 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
443 if (WARN_ON(smps_mode == IEEE80211_SMPS_OFF))
444 smps_mode = IEEE80211_SMPS_AUTOMATIC;
446 if (sdata->u.mgd.driver_smps_mode == smps_mode)
449 sdata->u.mgd.driver_smps_mode = smps_mode;
451 ieee80211_queue_work(&sdata->local->hw,
452 &sdata->u.mgd.request_smps_work);
454 /* this might change ... don't want non-open drivers using it */
455 EXPORT_SYMBOL_GPL(ieee80211_request_smps);