drivers/net/wireless/iwlwifi/dvm/sta.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2013 Intel Corporation. All rights reserved.
   4  *
   5  * Portions of this file are derived from the ipw3945 project, as well
   6  * as portions of the ieee80211 subsystem header files.
   7  *
   8  * This program is free software; you can redistribute it and/or modify it
   9  * under the terms of version 2 of the GNU General Public License as
  10  * published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but WITHOUT
  13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  15  * more details.
  16  *
  17  * You should have received a copy of the GNU General Public License along with
  18  * this program; if not, write to the Free Software Foundation, Inc.,
  19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  20  *
  21  * The full GNU General Public License is included in this distribution in the
  22  * file called LICENSE.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/etherdevice.h>
  30 #include <net/mac80211.h>
  31 #include "iwl-trans.h"
  32 #include "dev.h"
  33 #include "agn.h"
  34
  35 const u8 iwl_bcast_addr[ETH_ALEN] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
  36
  37 static int iwl_sta_ucode_activate(struct iwl_priv *priv, u8 sta_id)
  38 {
  39         lockdep_assert_held(&priv->sta_lock);
  40
  41         if (sta_id >= IWLAGN_STATION_COUNT) {
  42                 IWL_ERR(priv, "invalid sta_id %u", sta_id);
  43                 return -EINVAL;
  44         }
  45         if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE))
  46                 IWL_ERR(priv, "ACTIVATE a non DRIVER active station id %u "
  47                         "addr %pM\n",
  48                         sta_id, priv->stations[sta_id].sta.sta.addr);
  49
  50         if (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) {
  51                 IWL_DEBUG_ASSOC(priv,
  52                                 "STA id %u addr %pM already present in uCode "
  53                                 "(according to driver)\n",
  54                                 sta_id, priv->stations[sta_id].sta.sta.addr);
  55         } else {
  56                 priv->stations[sta_id].used |= IWL_STA_UCODE_ACTIVE;
  57                 IWL_DEBUG_ASSOC(priv, "Added STA id %u addr %pM to uCode\n",
  58                                 sta_id, priv->stations[sta_id].sta.sta.addr);
  59         }
  60         return 0;
  61 }
  62
  63 static int iwl_process_add_sta_resp(struct iwl_priv *priv,
  64                                     struct iwl_addsta_cmd *addsta,
  65                                     struct iwl_rx_packet *pkt)
  66 {
  67         struct iwl_add_sta_resp *add_sta_resp = (void *)pkt->data;
  68         u8 sta_id = addsta->sta.sta_id;
  69         int ret = -EIO;
  70
  71         if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) {
  72                 IWL_ERR(priv, "Bad return from REPLY_ADD_STA (0x%08X)\n",
  73                         pkt->hdr.flags);
  74                 return ret;
  75         }
  76
  77         IWL_DEBUG_INFO(priv, "Processing response for adding station %u\n",
  78                        sta_id);
  79
  80         spin_lock_bh(&priv->sta_lock);
  81
  82         switch (add_sta_resp->status) {
  83         case ADD_STA_SUCCESS_MSK:
  84                 IWL_DEBUG_INFO(priv, "REPLY_ADD_STA PASSED\n");
  85                 ret = iwl_sta_ucode_activate(priv, sta_id);
  86                 break;
  87         case ADD_STA_NO_ROOM_IN_TABLE:
  88                 IWL_ERR(priv, "Adding station %d failed, no room in table.\n",
  89                         sta_id);
  90                 break;
  91         case ADD_STA_NO_BLOCK_ACK_RESOURCE:
  92                 IWL_ERR(priv, "Adding station %d failed, no block ack "
  93                         "resource.\n", sta_id);
  94                 break;
  95         case ADD_STA_MODIFY_NON_EXIST_STA:
  96                 IWL_ERR(priv, "Attempting to modify non-existing station %d\n",
  97                         sta_id);
  98                 break;
  99         default:
 100                 IWL_DEBUG_ASSOC(priv, "Received REPLY_ADD_STA:(0x%08X)\n",
 101                                 add_sta_resp->status);
 102                 break;
 103         }
 104
 105         IWL_DEBUG_INFO(priv, "%s station id %u addr %pM\n",
 106                        priv->stations[sta_id].sta.mode ==
 107                        STA_CONTROL_MODIFY_MSK ?  "Modified" : "Added",
 108                        sta_id, priv->stations[sta_id].sta.sta.addr);
 109
 110         /*
 111          * XXX: The MAC address in the command buffer is often changed from
 112          * the original sent to the device. That is, the MAC address
 113          * written to the command buffer often is not the same MAC address
 114          * read from the command buffer when the command returns. This
 115          * issue has not yet been resolved and this debugging is left to
 116          * observe the problem.
 117          */
 118         IWL_DEBUG_INFO(priv, "%s station according to cmd buffer %pM\n",
 119                        priv->stations[sta_id].sta.mode ==
 120                        STA_CONTROL_MODIFY_MSK ? "Modified" : "Added",
 121                        addsta->sta.addr);
 122         spin_unlock_bh(&priv->sta_lock);
 123
 124         return ret;
 125 }
 126
 127 int iwl_add_sta_callback(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb,
 128                                struct iwl_device_cmd *cmd)
 129 {
 130         struct iwl_rx_packet *pkt = rxb_addr(rxb);
 131
 132         if (!cmd)
 133                 return 0;
 134
 135         return iwl_process_add_sta_resp(priv, (void *)cmd->payload, pkt);
 136 }
 137
 138 int iwl_send_add_sta(struct iwl_priv *priv,
 139                      struct iwl_addsta_cmd *sta, u8 flags)
 140 {
 141         int ret = 0;
 142         struct iwl_host_cmd cmd = {
 143                 .id = REPLY_ADD_STA,
 144                 .flags = flags,
 145                 .data = { sta, },
 146                 .len = { sizeof(*sta), },
 147         };
 148         u8 sta_id __maybe_unused = sta->sta.sta_id;
 149
 150         IWL_DEBUG_INFO(priv, "Adding sta %u (%pM) %ssynchronously\n",
 151                        sta_id, sta->sta.addr, flags & CMD_ASYNC ?  "a" : "");
 152
 153         if (!(flags & CMD_ASYNC)) {
 154                 cmd.flags |= CMD_WANT_SKB;
 155                 might_sleep();
 156         }
 157
 158         ret = iwl_dvm_send_cmd(priv, &cmd);
 159
 160         if (ret || (flags & CMD_ASYNC))
 161                 return ret;
 162         /*else the command was successfully sent in SYNC mode, need to free
 163          * the reply page */
 164
 165         iwl_free_resp(&cmd);
 166
 167         if (cmd.handler_status)
 168                 IWL_ERR(priv, "%s - error in the CMD response %d", __func__,
 169                         cmd.handler_status);
 170
 171         return cmd.handler_status;
 172 }
 173
 174 bool iwl_is_ht40_tx_allowed(struct iwl_priv *priv,
 175                             struct iwl_rxon_context *ctx,
 176                             struct ieee80211_sta *sta)
 177 {
 178         if (!ctx->ht.enabled || !ctx->ht.is_40mhz)
 179                 return false;
 180
 181 #ifdef CONFIG_IWLWIFI_DEBUGFS
 182         if (priv->disable_ht40)
 183                 return false;
 184 #endif
 185
 186         /* special case for RXON */
 187         if (!sta)
 188                 return true;
 189
 190         return sta->bandwidth >= IEEE80211_STA_RX_BW_40;
 191 }
 192
 193 static void iwl_sta_calc_ht_flags(struct iwl_priv *priv,
 194                                   struct ieee80211_sta *sta,
 195                                   struct iwl_rxon_context *ctx,
 196                                   __le32 *flags, __le32 *mask)
 197 {
 198         struct ieee80211_sta_ht_cap *sta_ht_inf = &sta->ht_cap;
 199
 200         *mask = STA_FLG_RTS_MIMO_PROT_MSK |
 201                 STA_FLG_MIMO_DIS_MSK |
 202                 STA_FLG_HT40_EN_MSK |
 203                 STA_FLG_MAX_AGG_SIZE_MSK |
 204                 STA_FLG_AGG_MPDU_DENSITY_MSK;
 205         *flags = 0;
 206
 207         if (!sta || !sta_ht_inf->ht_supported)
 208                 return;
 209
 210         IWL_DEBUG_INFO(priv, "STA %pM SM PS mode: %s\n",
 211                         sta->addr,
 212                         (sta->smps_mode == IEEE80211_SMPS_STATIC) ?
 213                         "static" :
 214                         (sta->smps_mode == IEEE80211_SMPS_DYNAMIC) ?
 215                         "dynamic" : "disabled");
 216
 217         switch (sta->smps_mode) {
 218         case IEEE80211_SMPS_STATIC:
 219                 *flags |= STA_FLG_MIMO_DIS_MSK;
 220                 break;
 221         case IEEE80211_SMPS_DYNAMIC:
 222                 *flags |= STA_FLG_RTS_MIMO_PROT_MSK;
 223                 break;
 224         case IEEE80211_SMPS_OFF:
 225                 break;
 226         default:
 227                 IWL_WARN(priv, "Invalid MIMO PS mode %d\n", sta->smps_mode);
 228                 break;
 229         }
 230
 231         *flags |= cpu_to_le32(
 232                 (u32)sta_ht_inf->ampdu_factor << STA_FLG_MAX_AGG_SIZE_POS);
 233
 234         *flags |= cpu_to_le32(
 235                 (u32)sta_ht_inf->ampdu_density << STA_FLG_AGG_MPDU_DENSITY_POS);
 236
 237         if (iwl_is_ht40_tx_allowed(priv, ctx, sta))
 238                 *flags |= STA_FLG_HT40_EN_MSK;
 239 }
 240
 241 int iwl_sta_update_ht(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 242                       struct ieee80211_sta *sta)
 243 {
 244         u8 sta_id = iwl_sta_id(sta);
 245         __le32 flags, mask;
 246         struct iwl_addsta_cmd cmd;
 247
 248         if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION))
 249                 return -EINVAL;
 250
 251         iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask);
 252
 253         spin_lock_bh(&priv->sta_lock);
 254         priv->stations[sta_id].sta.station_flags &= ~mask;
 255         priv->stations[sta_id].sta.station_flags |= flags;
 256         spin_unlock_bh(&priv->sta_lock);
 257
 258         memset(&cmd, 0, sizeof(cmd));
 259         cmd.mode = STA_CONTROL_MODIFY_MSK;
 260         cmd.station_flags_msk = mask;
 261         cmd.station_flags = flags;
 262         cmd.sta.sta_id = sta_id;
 263
 264         return iwl_send_add_sta(priv, &cmd, CMD_SYNC);
 265 }
 266
 267 static void iwl_set_ht_add_station(struct iwl_priv *priv, u8 index,
 268                                    struct ieee80211_sta *sta,
 269                                    struct iwl_rxon_context *ctx)
 270 {
 271         __le32 flags, mask;
 272
 273         iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask);
 274
 275         lockdep_assert_held(&priv->sta_lock);
 276         priv->stations[index].sta.station_flags &= ~mask;
 277         priv->stations[index].sta.station_flags |= flags;
 278 }
 279
 280 /**
 281  * iwl_prep_station - Prepare station information for addition
 282  *
 283  * should be called with sta_lock held
 284  */
 285 u8 iwl_prep_station(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 286                     const u8 *addr, bool is_ap, struct ieee80211_sta *sta)
 287 {
 288         struct iwl_station_entry *station;
 289         int i;
 290         u8 sta_id = IWL_INVALID_STATION;
 291
 292         if (is_ap)
 293                 sta_id = ctx->ap_sta_id;
 294         else if (is_broadcast_ether_addr(addr))
 295                 sta_id = ctx->bcast_sta_id;
 296         else
 297                 for (i = IWL_STA_ID; i < IWLAGN_STATION_COUNT; i++) {
 298                         if (ether_addr_equal(priv->stations[i].sta.sta.addr,
 299                                              addr)) {
 300                                 sta_id = i;
 301                                 break;
 302                         }
 303
 304                         if (!priv->stations[i].used &&
 305                             sta_id == IWL_INVALID_STATION)
 306                                 sta_id = i;
 307                 }
 308
 309         /*
 310          * These two conditions have the same outcome, but keep them
 311          * separate
 312          */
 313         if (unlikely(sta_id == IWL_INVALID_STATION))
 314                 return sta_id;
 315
 316         /*
 317          * uCode is not able to deal with multiple requests to add a
 318          * station. Keep track if one is in progress so that we do not send
 319          * another.
 320          */
 321         if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
 322                 IWL_DEBUG_INFO(priv, "STA %d already in process of being "
 323                                "added.\n", sta_id);
 324                 return sta_id;
 325         }
 326
 327         if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
 328             (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) &&
 329             ether_addr_equal(priv->stations[sta_id].sta.sta.addr, addr)) {
 330                 IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not "
 331                                 "adding again.\n", sta_id, addr);
 332                 return sta_id;
 333         }
 334
 335         station = &priv->stations[sta_id];
 336         station->used = IWL_STA_DRIVER_ACTIVE;
 337         IWL_DEBUG_ASSOC(priv, "Add STA to driver ID %d: %pM\n",
 338                         sta_id, addr);
 339         priv->num_stations++;
 340
 341         /* Set up the REPLY_ADD_STA command to send to device */
 342         memset(&station->sta, 0, sizeof(struct iwl_addsta_cmd));
 343         memcpy(station->sta.sta.addr, addr, ETH_ALEN);
 344         station->sta.mode = 0;
 345         station->sta.sta.sta_id = sta_id;
 346         station->sta.station_flags = ctx->station_flags;
 347         station->ctxid = ctx->ctxid;
 348
 349         if (sta) {
 350                 struct iwl_station_priv *sta_priv;
 351
 352                 sta_priv = (void *)sta->drv_priv;
 353                 sta_priv->ctx = ctx;
 354         }
 355
 356         /*
 357          * OK to call unconditionally, since local stations (IBSS BSSID
 358          * STA and broadcast STA) pass in a NULL sta, and mac80211
 359          * doesn't allow HT IBSS.
 360          */
 361         iwl_set_ht_add_station(priv, sta_id, sta, ctx);
 362
 363         return sta_id;
 364
 365 }
 366
 367 #define STA_WAIT_TIMEOUT (HZ/2)
 368
 369 /**
 370  * iwl_add_station_common -
 371  */
 372 int iwl_add_station_common(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 373                            const u8 *addr, bool is_ap,
 374                            struct ieee80211_sta *sta, u8 *sta_id_r)
 375 {
 376         int ret = 0;
 377         u8 sta_id;
 378         struct iwl_addsta_cmd sta_cmd;
 379
 380         *sta_id_r = 0;
 381         spin_lock_bh(&priv->sta_lock);
 382         sta_id = iwl_prep_station(priv, ctx, addr, is_ap, sta);
 383         if (sta_id == IWL_INVALID_STATION) {
 384                 IWL_ERR(priv, "Unable to prepare station %pM for addition\n",
 385                         addr);
 386                 spin_unlock_bh(&priv->sta_lock);
 387                 return -EINVAL;
 388         }
 389
 390         /*
 391          * uCode is not able to deal with multiple requests to add a
 392          * station. Keep track if one is in progress so that we do not send
 393          * another.
 394          */
 395         if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
 396                 IWL_DEBUG_INFO(priv, "STA %d already in process of being "
 397                                "added.\n", sta_id);
 398                 spin_unlock_bh(&priv->sta_lock);
 399                 return -EEXIST;
 400         }
 401
 402         if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
 403             (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
 404                 IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not "
 405                                 "adding again.\n", sta_id, addr);
 406                 spin_unlock_bh(&priv->sta_lock);
 407                 return -EEXIST;
 408         }
 409
 410         priv->stations[sta_id].used |= IWL_STA_UCODE_INPROGRESS;
 411         memcpy(&sta_cmd, &priv->stations[sta_id].sta,
 412                sizeof(struct iwl_addsta_cmd));
 413         spin_unlock_bh(&priv->sta_lock);
 414
 415         /* Add station to device's station table */
 416         ret = iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
 417         if (ret) {
 418                 spin_lock_bh(&priv->sta_lock);
 419                 IWL_ERR(priv, "Adding station %pM failed.\n",
 420                         priv->stations[sta_id].sta.sta.addr);
 421                 priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 422                 priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
 423                 spin_unlock_bh(&priv->sta_lock);
 424         }
 425         *sta_id_r = sta_id;
 426         return ret;
 427 }
 428
 429 /**
 430  * iwl_sta_ucode_deactivate - deactivate ucode status for a station
 431  */
 432 static void iwl_sta_ucode_deactivate(struct iwl_priv *priv, u8 sta_id)
 433 {
 434         lockdep_assert_held(&priv->sta_lock);
 435
 436         /* Ucode must be active and driver must be non active */
 437         if ((priv->stations[sta_id].used &
 438              (IWL_STA_UCODE_ACTIVE | IWL_STA_DRIVER_ACTIVE)) !=
 439               IWL_STA_UCODE_ACTIVE)
 440                 IWL_ERR(priv, "removed non active STA %u\n", sta_id);
 441
 442         priv->stations[sta_id].used &= ~IWL_STA_UCODE_ACTIVE;
 443
 444         memset(&priv->stations[sta_id], 0, sizeof(struct iwl_station_entry));
 445         IWL_DEBUG_ASSOC(priv, "Removed STA %u\n", sta_id);
 446 }
 447
 448 static int iwl_send_remove_station(struct iwl_priv *priv,
 449                                    const u8 *addr, int sta_id,
 450                                    bool temporary)
 451 {
 452         struct iwl_rx_packet *pkt;
 453         int ret;
 454         struct iwl_rem_sta_cmd rm_sta_cmd;
 455
 456         struct iwl_host_cmd cmd = {
 457                 .id = REPLY_REMOVE_STA,
 458                 .len = { sizeof(struct iwl_rem_sta_cmd), },
 459                 .flags = CMD_SYNC,
 460                 .data = { &rm_sta_cmd, },
 461         };
 462
 463         memset(&rm_sta_cmd, 0, sizeof(rm_sta_cmd));
 464         rm_sta_cmd.num_sta = 1;
 465         memcpy(&rm_sta_cmd.addr, addr, ETH_ALEN);
 466
 467         cmd.flags |= CMD_WANT_SKB;
 468
 469         ret = iwl_dvm_send_cmd(priv, &cmd);
 470
 471         if (ret)
 472                 return ret;
 473
 474         pkt = cmd.resp_pkt;
 475         if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) {
 476                 IWL_ERR(priv, "Bad return from REPLY_REMOVE_STA (0x%08X)\n",
 477                           pkt->hdr.flags);
 478                 ret = -EIO;
 479         }
 480
 481         if (!ret) {
 482                 struct iwl_rem_sta_resp *rem_sta_resp = (void *)pkt->data;
 483                 switch (rem_sta_resp->status) {
 484                 case REM_STA_SUCCESS_MSK:
 485                         if (!temporary) {
 486                                 spin_lock_bh(&priv->sta_lock);
 487                                 iwl_sta_ucode_deactivate(priv, sta_id);
 488                                 spin_unlock_bh(&priv->sta_lock);
 489                         }
 490                         IWL_DEBUG_ASSOC(priv, "REPLY_REMOVE_STA PASSED\n");
 491                         break;
 492                 default:
 493                         ret = -EIO;
 494                         IWL_ERR(priv, "REPLY_REMOVE_STA failed\n");
 495                         break;
 496                 }
 497         }
 498         iwl_free_resp(&cmd);
 499
 500         return ret;
 501 }
 502
 503 /**
 504  * iwl_remove_station - Remove driver's knowledge of station.
 505  */
 506 int iwl_remove_station(struct iwl_priv *priv, const u8 sta_id,
 507                        const u8 *addr)
 508 {
 509         u8 tid;
 510
 511         if (!iwl_is_ready(priv)) {
 512                 IWL_DEBUG_INFO(priv,
 513                         "Unable to remove station %pM, device not ready.\n",
 514                         addr);
 515                 /*
 516                  * It is typical for stations to be removed when we are
 517                  * going down. Return success since device will be down
 518                  * soon anyway
 519                  */
 520                 return 0;
 521         }
 522
 523         IWL_DEBUG_ASSOC(priv, "Removing STA from driver:%d  %pM\n",
 524                         sta_id, addr);
 525
 526         if (WARN_ON(sta_id == IWL_INVALID_STATION))
 527                 return -EINVAL;
 528
 529         spin_lock_bh(&priv->sta_lock);
 530
 531         if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)) {
 532                 IWL_DEBUG_INFO(priv, "Removing %pM but non DRIVER active\n",
 533                                 addr);
 534                 goto out_err;
 535         }
 536
 537         if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
 538                 IWL_DEBUG_INFO(priv, "Removing %pM but non UCODE active\n",
 539                                 addr);
 540                 goto out_err;
 541         }
 542
 543         if (priv->stations[sta_id].used & IWL_STA_LOCAL) {
 544                 kfree(priv->stations[sta_id].lq);
 545                 priv->stations[sta_id].lq = NULL;
 546         }
 547
 548         for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++)
 549                 memset(&priv->tid_data[sta_id][tid], 0,
 550                         sizeof(priv->tid_data[sta_id][tid]));
 551
 552         priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 553
 554         priv->num_stations--;
 555
 556         if (WARN_ON(priv->num_stations < 0))
 557                 priv->num_stations = 0;
 558
 559         spin_unlock_bh(&priv->sta_lock);
 560
 561         return iwl_send_remove_station(priv, addr, sta_id, false);
 562 out_err:
 563         spin_unlock_bh(&priv->sta_lock);
 564         return -EINVAL;
 565 }
 566
 567 void iwl_deactivate_station(struct iwl_priv *priv, const u8 sta_id,
 568                             const u8 *addr)
 569 {
 570         u8 tid;
 571
 572         if (!iwl_is_ready(priv)) {
 573                 IWL_DEBUG_INFO(priv,
 574                         "Unable to remove station %pM, device not ready.\n",
 575                         addr);
 576                 return;
 577         }
 578
 579         IWL_DEBUG_ASSOC(priv, "Deactivating STA: %pM (%d)\n", addr, sta_id);
 580
 581         if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION))
 582                 return;
 583
 584         spin_lock_bh(&priv->sta_lock);
 585
 586         WARN_ON_ONCE(!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE));
 587
 588         for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++)
 589                 memset(&priv->tid_data[sta_id][tid], 0,
 590                         sizeof(priv->tid_data[sta_id][tid]));
 591
 592         priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
 593
 594         priv->num_stations--;
 595
 596         if (WARN_ON_ONCE(priv->num_stations < 0))
 597                 priv->num_stations = 0;
 598
 599         spin_unlock_bh(&priv->sta_lock);
 600 }
 601
 602 static void iwl_sta_fill_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 603                             u8 sta_id, struct iwl_link_quality_cmd *link_cmd)
 604 {
 605         int i, r;
 606         u32 rate_flags = 0;
 607         __le32 rate_n_flags;
 608
 609         lockdep_assert_held(&priv->mutex);
 610
 611         memset(link_cmd, 0, sizeof(*link_cmd));
 612
 613         /* Set up the rate scaling to start at selected rate, fall back
 614          * all the way down to 1M in IEEE order, and then spin on 1M */
 615         if (priv->band == IEEE80211_BAND_5GHZ)
 616                 r = IWL_RATE_6M_INDEX;
 617         else if (ctx && ctx->vif && ctx->vif->p2p)
 618                 r = IWL_RATE_6M_INDEX;
 619         else
 620                 r = IWL_RATE_1M_INDEX;
 621
 622         if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE)
 623                 rate_flags |= RATE_MCS_CCK_MSK;
 624
 625         rate_flags |= first_antenna(priv->nvm_data->valid_tx_ant) <<
 626                                 RATE_MCS_ANT_POS;
 627         rate_n_flags = iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags);
 628         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++)
 629                 link_cmd->rs_table[i].rate_n_flags = rate_n_flags;
 630
 631         link_cmd->general_params.single_stream_ant_msk =
 632                         first_antenna(priv->nvm_data->valid_tx_ant);
 633
 634         link_cmd->general_params.dual_stream_ant_msk =
 635                 priv->nvm_data->valid_tx_ant &
 636                 ~first_antenna(priv->nvm_data->valid_tx_ant);
 637         if (!link_cmd->general_params.dual_stream_ant_msk) {
 638                 link_cmd->general_params.dual_stream_ant_msk = ANT_AB;
 639         } else if (num_of_ant(priv->nvm_data->valid_tx_ant) == 2) {
 640                 link_cmd->general_params.dual_stream_ant_msk =
 641                         priv->nvm_data->valid_tx_ant;
 642         }
 643
 644         link_cmd->agg_params.agg_dis_start_th =
 645                 LINK_QUAL_AGG_DISABLE_START_DEF;
 646         link_cmd->agg_params.agg_time_limit =
 647                 cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF);
 648
 649         link_cmd->sta_id = sta_id;
 650 }
 651
 652 /**
 653  * iwl_clear_ucode_stations - clear ucode station table bits
 654  *
 655  * This function clears all the bits in the driver indicating
 656  * which stations are active in the ucode. Call when something
 657  * other than explicit station management would cause this in
 658  * the ucode, e.g. unassociated RXON.
 659  */
 660 void iwl_clear_ucode_stations(struct iwl_priv *priv,
 661                               struct iwl_rxon_context *ctx)
 662 {
 663         int i;
 664         bool cleared = false;
 665
 666         IWL_DEBUG_INFO(priv, "Clearing ucode stations in driver\n");
 667
 668         spin_lock_bh(&priv->sta_lock);
 669         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 670                 if (ctx && ctx->ctxid != priv->stations[i].ctxid)
 671                         continue;
 672
 673                 if (priv->stations[i].used & IWL_STA_UCODE_ACTIVE) {
 674                         IWL_DEBUG_INFO(priv,
 675                                 "Clearing ucode active for station %d\n", i);
 676                         priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE;
 677                         cleared = true;
 678                 }
 679         }
 680         spin_unlock_bh(&priv->sta_lock);
 681
 682         if (!cleared)
 683                 IWL_DEBUG_INFO(priv,
 684                                "No active stations found to be cleared\n");
 685 }
 686
 687 /**
 688  * iwl_restore_stations() - Restore driver known stations to device
 689  *
 690  * All stations considered active by driver, but not present in ucode, is
 691  * restored.
 692  *
 693  * Function sleeps.
 694  */
 695 void iwl_restore_stations(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
 696 {
 697         struct iwl_addsta_cmd sta_cmd;
 698         static const struct iwl_link_quality_cmd zero_lq = {};
 699         struct iwl_link_quality_cmd lq;
 700         int i;
 701         bool found = false;
 702         int ret;
 703         bool send_lq;
 704
 705         if (!iwl_is_ready(priv)) {
 706                 IWL_DEBUG_INFO(priv,
 707                                "Not ready yet, not restoring any stations.\n");
 708                 return;
 709         }
 710
 711         IWL_DEBUG_ASSOC(priv, "Restoring all known stations ... start.\n");
 712         spin_lock_bh(&priv->sta_lock);
 713         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 714                 if (ctx->ctxid != priv->stations[i].ctxid)
 715                         continue;
 716                 if ((priv->stations[i].used & IWL_STA_DRIVER_ACTIVE) &&
 717                             !(priv->stations[i].used & IWL_STA_UCODE_ACTIVE)) {
 718                         IWL_DEBUG_ASSOC(priv, "Restoring sta %pM\n",
 719                                         priv->stations[i].sta.sta.addr);
 720                         priv->stations[i].sta.mode = 0;
 721                         priv->stations[i].used |= IWL_STA_UCODE_INPROGRESS;
 722                         found = true;
 723                 }
 724         }
 725
 726         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 727                 if ((priv->stations[i].used & IWL_STA_UCODE_INPROGRESS)) {
 728                         memcpy(&sta_cmd, &priv->stations[i].sta,
 729                                sizeof(struct iwl_addsta_cmd));
 730                         send_lq = false;
 731                         if (priv->stations[i].lq) {
 732                                 if (priv->wowlan)
 733                                         iwl_sta_fill_lq(priv, ctx, i, &lq);
 734                                 else
 735                                         memcpy(&lq, priv->stations[i].lq,
 736                                                sizeof(struct iwl_link_quality_cmd));
 737
 738                                 if (!memcmp(&lq, &zero_lq, sizeof(lq)))
 739                                         send_lq = true;
 740                         }
 741                         spin_unlock_bh(&priv->sta_lock);
 742                         ret = iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
 743                         if (ret) {
 744                                 spin_lock_bh(&priv->sta_lock);
 745                                 IWL_ERR(priv, "Adding station %pM failed.\n",
 746                                         priv->stations[i].sta.sta.addr);
 747                                 priv->stations[i].used &=
 748                                                 ~IWL_STA_DRIVER_ACTIVE;
 749                                 priv->stations[i].used &=
 750                                                 ~IWL_STA_UCODE_INPROGRESS;
 751                                 continue;
 752                         }
 753                         /*
 754                          * Rate scaling has already been initialized, send
 755                          * current LQ command
 756                          */
 757                         if (send_lq)
 758                                 iwl_send_lq_cmd(priv, ctx, &lq,
 759                                                 CMD_SYNC, true);
 760                         spin_lock_bh(&priv->sta_lock);
 761                         priv->stations[i].used &= ~IWL_STA_UCODE_INPROGRESS;
 762                 }
 763         }
 764
 765         spin_unlock_bh(&priv->sta_lock);
 766         if (!found)
 767                 IWL_DEBUG_INFO(priv, "Restoring all known stations .... "
 768                         "no stations to be restored.\n");
 769         else
 770                 IWL_DEBUG_INFO(priv, "Restoring all known stations .... "
 771                         "complete.\n");
 772 }
 773
 774 int iwl_get_free_ucode_key_offset(struct iwl_priv *priv)
 775 {
 776         int i;
 777
 778         for (i = 0; i < priv->sta_key_max_num; i++)
 779                 if (!test_and_set_bit(i, &priv->ucode_key_table))
 780                         return i;
 781
 782         return WEP_INVALID_OFFSET;
 783 }
 784
 785 void iwl_dealloc_bcast_stations(struct iwl_priv *priv)
 786 {
 787         int i;
 788
 789         spin_lock_bh(&priv->sta_lock);
 790         for (i = 0; i < IWLAGN_STATION_COUNT; i++) {
 791                 if (!(priv->stations[i].used & IWL_STA_BCAST))
 792                         continue;
 793
 794                 priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE;
 795                 priv->num_stations--;
 796                 if (WARN_ON(priv->num_stations < 0))
 797                         priv->num_stations = 0;
 798                 kfree(priv->stations[i].lq);
 799                 priv->stations[i].lq = NULL;
 800         }
 801         spin_unlock_bh(&priv->sta_lock);
 802 }
 803
 804 #ifdef CONFIG_IWLWIFI_DEBUG
 805 static void iwl_dump_lq_cmd(struct iwl_priv *priv,
 806                            struct iwl_link_quality_cmd *lq)
 807 {
 808         int i;
 809         IWL_DEBUG_RATE(priv, "lq station id 0x%x\n", lq->sta_id);
 810         IWL_DEBUG_RATE(priv, "lq ant 0x%X 0x%X\n",
 811                        lq->general_params.single_stream_ant_msk,
 812                        lq->general_params.dual_stream_ant_msk);
 813
 814         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++)
 815                 IWL_DEBUG_RATE(priv, "lq index %d 0x%X\n",
 816                                i, lq->rs_table[i].rate_n_flags);
 817 }
 818 #else
 819 static inline void iwl_dump_lq_cmd(struct iwl_priv *priv,
 820                                    struct iwl_link_quality_cmd *lq)
 821 {
 822 }
 823 #endif
 824
 825 /**
 826  * is_lq_table_valid() - Test one aspect of LQ cmd for validity
 827  *
 828  * It sometimes happens when a HT rate has been in use and we
 829  * loose connectivity with AP then mac80211 will first tell us that the
 830  * current channel is not HT anymore before removing the station. In such a
 831  * scenario the RXON flags will be updated to indicate we are not
 832  * communicating HT anymore, but the LQ command may still contain HT rates.
 833  * Test for this to prevent driver from sending LQ command between the time
 834  * RXON flags are updated and when LQ command is updated.
 835  */
 836 static bool is_lq_table_valid(struct iwl_priv *priv,
 837                               struct iwl_rxon_context *ctx,
 838                               struct iwl_link_quality_cmd *lq)
 839 {
 840         int i;
 841
 842         if (ctx->ht.enabled)
 843                 return true;
 844
 845         IWL_DEBUG_INFO(priv, "Channel %u is not an HT channel\n",
 846                        ctx->active.channel);
 847         for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) {
 848                 if (le32_to_cpu(lq->rs_table[i].rate_n_flags) &
 849                     RATE_MCS_HT_MSK) {
 850                         IWL_DEBUG_INFO(priv,
 851                                        "index %d of LQ expects HT channel\n",
 852                                        i);
 853                         return false;
 854                 }
 855         }
 856         return true;
 857 }
 858
 859 /**
 860  * iwl_send_lq_cmd() - Send link quality command
 861  * @init: This command is sent as part of station initialization right
 862  *        after station has been added.
 863  *
 864  * The link quality command is sent as the last step of station creation.
 865  * This is the special case in which init is set and we call a callback in
 866  * this case to clear the state indicating that station creation is in
 867  * progress.
 868  */
 869 int iwl_send_lq_cmd(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 870                     struct iwl_link_quality_cmd *lq, u8 flags, bool init)
 871 {
 872         int ret = 0;
 873         struct iwl_host_cmd cmd = {
 874                 .id = REPLY_TX_LINK_QUALITY_CMD,
 875                 .len = { sizeof(struct iwl_link_quality_cmd), },
 876                 .flags = flags,
 877                 .data = { lq, },
 878         };
 879
 880         if (WARN_ON(lq->sta_id == IWL_INVALID_STATION))
 881                 return -EINVAL;
 882
 883
 884         spin_lock_bh(&priv->sta_lock);
 885         if (!(priv->stations[lq->sta_id].used & IWL_STA_DRIVER_ACTIVE)) {
 886                 spin_unlock_bh(&priv->sta_lock);
 887                 return -EINVAL;
 888         }
 889         spin_unlock_bh(&priv->sta_lock);
 890
 891         iwl_dump_lq_cmd(priv, lq);
 892         if (WARN_ON(init && (cmd.flags & CMD_ASYNC)))
 893                 return -EINVAL;
 894
 895         if (is_lq_table_valid(priv, ctx, lq))
 896                 ret = iwl_dvm_send_cmd(priv, &cmd);
 897         else
 898                 ret = -EINVAL;
 899
 900         if (cmd.flags & CMD_ASYNC)
 901                 return ret;
 902
 903         if (init) {
 904                 IWL_DEBUG_INFO(priv, "init LQ command complete, "
 905                                "clearing sta addition status for sta %d\n",
 906                                lq->sta_id);
 907                 spin_lock_bh(&priv->sta_lock);
 908                 priv->stations[lq->sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
 909                 spin_unlock_bh(&priv->sta_lock);
 910         }
 911         return ret;
 912 }
 913
 914
 915 static struct iwl_link_quality_cmd *
 916 iwl_sta_alloc_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx,
 917                  u8 sta_id)
 918 {
 919         struct iwl_link_quality_cmd *link_cmd;
 920
 921         link_cmd = kzalloc(sizeof(struct iwl_link_quality_cmd), GFP_KERNEL);
 922         if (!link_cmd) {
 923                 IWL_ERR(priv, "Unable to allocate memory for LQ cmd.\n");
 924                 return NULL;
 925         }
 926
 927         iwl_sta_fill_lq(priv, ctx, sta_id, link_cmd);
 928
 929         return link_cmd;
 930 }
 931
 932 /*
 933  * iwlagn_add_bssid_station - Add the special IBSS BSSID station
 934  *
 935  * Function sleeps.
 936  */
 937 int iwlagn_add_bssid_station(struct iwl_priv *priv,
 938                              struct iwl_rxon_context *ctx,
 939                              const u8 *addr, u8 *sta_id_r)
 940 {
 941         int ret;
 942         u8 sta_id;
 943         struct iwl_link_quality_cmd *link_cmd;
 944
 945         if (sta_id_r)
 946                 *sta_id_r = IWL_INVALID_STATION;
 947
 948         ret = iwl_add_station_common(priv, ctx, addr, 0, NULL, &sta_id);
 949         if (ret) {
 950                 IWL_ERR(priv, "Unable to add station %pM\n", addr);
 951                 return ret;
 952         }
 953
 954         if (sta_id_r)
 955                 *sta_id_r = sta_id;
 956
 957         spin_lock_bh(&priv->sta_lock);
 958         priv->stations[sta_id].used |= IWL_STA_LOCAL;
 959         spin_unlock_bh(&priv->sta_lock);
 960
 961         /* Set up default rate scaling table in device's station table */
 962         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
 963         if (!link_cmd) {
 964                 IWL_ERR(priv,
 965                         "Unable to initialize rate scaling for station %pM.\n",
 966                         addr);
 967                 return -ENOMEM;
 968         }
 969
 970         ret = iwl_send_lq_cmd(priv, ctx, link_cmd, CMD_SYNC, true);
 971         if (ret)
 972                 IWL_ERR(priv, "Link quality command failed (%d)\n", ret);
 973
 974         spin_lock_bh(&priv->sta_lock);
 975         priv->stations[sta_id].lq = link_cmd;
 976         spin_unlock_bh(&priv->sta_lock);
 977
 978         return 0;
 979 }
 980
 981 /*
 982  * static WEP keys
 983  *
 984  * For each context, the device has a table of 4 static WEP keys
 985  * (one for each key index) that is updated with the following
 986  * commands.
 987  */
 988
 989 static int iwl_send_static_wepkey_cmd(struct iwl_priv *priv,
 990                                       struct iwl_rxon_context *ctx,
 991                                       bool send_if_empty)
 992 {
 993         int i, not_empty = 0;
 994         u8 buff[sizeof(struct iwl_wep_cmd) +
 995                 sizeof(struct iwl_wep_key) * WEP_KEYS_MAX];
 996         struct iwl_wep_cmd *wep_cmd = (struct iwl_wep_cmd *)buff;
 997         size_t cmd_size  = sizeof(struct iwl_wep_cmd);
 998         struct iwl_host_cmd cmd = {
 999                 .id = ctx->wep_key_cmd,
1000                 .data = { wep_cmd, },
1001                 .flags = CMD_SYNC,
1002         };
1003
1004         might_sleep();
1005
1006         memset(wep_cmd, 0, cmd_size +
1007                         (sizeof(struct iwl_wep_key) * WEP_KEYS_MAX));
1008
1009         for (i = 0; i < WEP_KEYS_MAX ; i++) {
1010                 wep_cmd->key[i].key_index = i;
1011                 if (ctx->wep_keys[i].key_size) {
1012                         wep_cmd->key[i].key_offset = i;
1013                         not_empty = 1;
1014                 } else {
1015                         wep_cmd->key[i].key_offset = WEP_INVALID_OFFSET;
1016                 }
1017
1018                 wep_cmd->key[i].key_size = ctx->wep_keys[i].key_size;
1019                 memcpy(&wep_cmd->key[i].key[3], ctx->wep_keys[i].key,
1020                                 ctx->wep_keys[i].key_size);
1021         }
1022
1023         wep_cmd->global_key_type = WEP_KEY_WEP_TYPE;
1024         wep_cmd->num_keys = WEP_KEYS_MAX;
1025
1026         cmd_size += sizeof(struct iwl_wep_key) * WEP_KEYS_MAX;
1027
1028         cmd.len[0] = cmd_size;
1029
1030         if (not_empty || send_if_empty)
1031                 return iwl_dvm_send_cmd(priv, &cmd);
1032         else
1033                 return 0;
1034 }
1035
1036 int iwl_restore_default_wep_keys(struct iwl_priv *priv,
1037                                  struct iwl_rxon_context *ctx)
1038 {
1039         lockdep_assert_held(&priv->mutex);
1040
1041         return iwl_send_static_wepkey_cmd(priv, ctx, false);
1042 }
1043
1044 int iwl_remove_default_wep_key(struct iwl_priv *priv,
1045                                struct iwl_rxon_context *ctx,
1046                                struct ieee80211_key_conf *keyconf)
1047 {
1048         int ret;
1049
1050         lockdep_assert_held(&priv->mutex);
1051
1052         IWL_DEBUG_WEP(priv, "Removing default WEP key: idx=%d\n",
1053                       keyconf->keyidx);
1054
1055         memset(&ctx->wep_keys[keyconf->keyidx], 0, sizeof(ctx->wep_keys[0]));
1056         if (iwl_is_rfkill(priv)) {
1057                 IWL_DEBUG_WEP(priv,
1058                         "Not sending REPLY_WEPKEY command due to RFKILL.\n");
1059                 /* but keys in device are clear anyway so return success */
1060                 return 0;
1061         }
1062         ret = iwl_send_static_wepkey_cmd(priv, ctx, 1);
1063         IWL_DEBUG_WEP(priv, "Remove default WEP key: idx=%d ret=%d\n",
1064                       keyconf->keyidx, ret);
1065
1066         return ret;
1067 }
1068
1069 int iwl_set_default_wep_key(struct iwl_priv *priv,
1070                             struct iwl_rxon_context *ctx,
1071                             struct ieee80211_key_conf *keyconf)
1072 {
1073         int ret;
1074
1075         lockdep_assert_held(&priv->mutex);
1076
1077         if (keyconf->keylen != WEP_KEY_LEN_128 &&
1078             keyconf->keylen != WEP_KEY_LEN_64) {
1079                 IWL_DEBUG_WEP(priv,
1080                               "Bad WEP key length %d\n", keyconf->keylen);
1081                 return -EINVAL;
1082         }
1083
1084         keyconf->hw_key_idx = IWLAGN_HW_KEY_DEFAULT;
1085
1086         ctx->wep_keys[keyconf->keyidx].key_size = keyconf->keylen;
1087         memcpy(&ctx->wep_keys[keyconf->keyidx].key, &keyconf->key,
1088                                                         keyconf->keylen);
1089
1090         ret = iwl_send_static_wepkey_cmd(priv, ctx, false);
1091         IWL_DEBUG_WEP(priv, "Set default WEP key: len=%d idx=%d ret=%d\n",
1092                 keyconf->keylen, keyconf->keyidx, ret);
1093
1094         return ret;
1095 }
1096
1097 /*
1098  * dynamic (per-station) keys
1099  *
1100  * The dynamic keys are a little more complicated. The device has
1101  * a key cache of up to STA_KEY_MAX_NUM/STA_KEY_MAX_NUM_PAN keys.
1102  * These are linked to stations by a table that contains an index
1103  * into the key table for each station/key index/{mcast,unicast},
1104  * i.e. it's basically an array of pointers like this:
1105  *      key_offset_t key_mapping[NUM_STATIONS][4][2];
1106  * (it really works differently, but you can think of it as such)
1107  *
1108  * The key uploading and linking happens in the same command, the
1109  * add station command with STA_MODIFY_KEY_MASK.
1110  */
1111
1112 static u8 iwlagn_key_sta_id(struct iwl_priv *priv,
1113                             struct ieee80211_vif *vif,
1114                             struct ieee80211_sta *sta)
1115 {
1116         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1117
1118         if (sta)
1119                 return iwl_sta_id(sta);
1120
1121         /*
1122          * The device expects GTKs for station interfaces to be
1123          * installed as GTKs for the AP station. If we have no
1124          * station ID, then use the ap_sta_id in that case.
1125          */
1126         if (vif->type == NL80211_IFTYPE_STATION && vif_priv->ctx)
1127                 return vif_priv->ctx->ap_sta_id;
1128
1129         return IWL_INVALID_STATION;
1130 }
1131
1132 static int iwlagn_send_sta_key(struct iwl_priv *priv,
1133                                struct ieee80211_key_conf *keyconf,
1134                                u8 sta_id, u32 tkip_iv32, u16 *tkip_p1k,
1135                                u32 cmd_flags)
1136 {
1137         __le16 key_flags;
1138         struct iwl_addsta_cmd sta_cmd;
1139         int i;
1140
1141         spin_lock_bh(&priv->sta_lock);
1142         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd));
1143         spin_unlock_bh(&priv->sta_lock);
1144
1145         key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS);
1146         key_flags |= STA_KEY_FLG_MAP_KEY_MSK;
1147
1148         switch (keyconf->cipher) {
1149         case WLAN_CIPHER_SUITE_CCMP:
1150                 key_flags |= STA_KEY_FLG_CCMP;
1151                 memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen);
1152                 break;
1153         case WLAN_CIPHER_SUITE_TKIP:
1154                 key_flags |= STA_KEY_FLG_TKIP;
1155                 sta_cmd.key.tkip_rx_tsc_byte2 = tkip_iv32;
1156                 for (i = 0; i < 5; i++)
1157                         sta_cmd.key.tkip_rx_ttak[i] = cpu_to_le16(tkip_p1k[i]);
1158                 memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen);
1159                 break;
1160         case WLAN_CIPHER_SUITE_WEP104:
1161                 key_flags |= STA_KEY_FLG_KEY_SIZE_MSK;
1162                 /* fall through */
1163         case WLAN_CIPHER_SUITE_WEP40:
1164                 key_flags |= STA_KEY_FLG_WEP;
1165                 memcpy(&sta_cmd.key.key[3], keyconf->key, keyconf->keylen);
1166                 break;
1167         default:
1168                 WARN_ON(1);
1169                 return -EINVAL;
1170         }
1171
1172         if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE))
1173                 key_flags |= STA_KEY_MULTICAST_MSK;
1174
1175         /* key pointer (offset) */
1176         sta_cmd.key.key_offset = keyconf->hw_key_idx;
1177
1178         sta_cmd.key.key_flags = key_flags;
1179         sta_cmd.mode = STA_CONTROL_MODIFY_MSK;
1180         sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK;
1181
1182         return iwl_send_add_sta(priv, &sta_cmd, cmd_flags);
1183 }
1184
1185 void iwl_update_tkip_key(struct iwl_priv *priv,
1186                          struct ieee80211_vif *vif,
1187                          struct ieee80211_key_conf *keyconf,
1188                          struct ieee80211_sta *sta, u32 iv32, u16 *phase1key)
1189 {
1190         u8 sta_id = iwlagn_key_sta_id(priv, vif, sta);
1191
1192         if (sta_id == IWL_INVALID_STATION)
1193                 return;
1194
1195         if (iwl_scan_cancel(priv)) {
1196                 /* cancel scan failed, just live w/ bad key and rely
1197                    briefly on SW decryption */
1198                 return;
1199         }
1200
1201         iwlagn_send_sta_key(priv, keyconf, sta_id,
1202                             iv32, phase1key, CMD_ASYNC);
1203 }
1204
1205 int iwl_remove_dynamic_key(struct iwl_priv *priv,
1206                            struct iwl_rxon_context *ctx,
1207                            struct ieee80211_key_conf *keyconf,
1208                            struct ieee80211_sta *sta)
1209 {
1210         struct iwl_addsta_cmd sta_cmd;
1211         u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta);
1212         __le16 key_flags;
1213
1214         /* if station isn't there, neither is the key */
1215         if (sta_id == IWL_INVALID_STATION)
1216                 return -ENOENT;
1217
1218         spin_lock_bh(&priv->sta_lock);
1219         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd));
1220         if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE))
1221                 sta_id = IWL_INVALID_STATION;
1222         spin_unlock_bh(&priv->sta_lock);
1223
1224         if (sta_id == IWL_INVALID_STATION)
1225                 return 0;
1226
1227         lockdep_assert_held(&priv->mutex);
1228
1229         ctx->key_mapping_keys--;
1230
1231         IWL_DEBUG_WEP(priv, "Remove dynamic key: idx=%d sta=%d\n",
1232                       keyconf->keyidx, sta_id);
1233
1234         if (!test_and_clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table))
1235                 IWL_ERR(priv, "offset %d not used in uCode key table.\n",
1236                         keyconf->hw_key_idx);
1237
1238         key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS);
1239         key_flags |= STA_KEY_FLG_MAP_KEY_MSK | STA_KEY_FLG_NO_ENC |
1240                      STA_KEY_FLG_INVALID;
1241
1242         if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE))
1243                 key_flags |= STA_KEY_MULTICAST_MSK;
1244
1245         sta_cmd.key.key_flags = key_flags;
1246         sta_cmd.key.key_offset = keyconf->hw_key_idx;
1247         sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK;
1248         sta_cmd.mode = STA_CONTROL_MODIFY_MSK;
1249
1250         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1251 }
1252
1253 int iwl_set_dynamic_key(struct iwl_priv *priv,
1254                         struct iwl_rxon_context *ctx,
1255                         struct ieee80211_key_conf *keyconf,
1256                         struct ieee80211_sta *sta)
1257 {
1258         struct ieee80211_key_seq seq;
1259         u16 p1k[5];
1260         int ret;
1261         u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta);
1262         const u8 *addr;
1263
1264         if (sta_id == IWL_INVALID_STATION)
1265                 return -EINVAL;
1266
1267         lockdep_assert_held(&priv->mutex);
1268
1269         keyconf->hw_key_idx = iwl_get_free_ucode_key_offset(priv);
1270         if (keyconf->hw_key_idx == WEP_INVALID_OFFSET)
1271                 return -ENOSPC;
1272
1273         ctx->key_mapping_keys++;
1274
1275         switch (keyconf->cipher) {
1276         case WLAN_CIPHER_SUITE_TKIP:
1277                 if (sta)
1278                         addr = sta->addr;
1279                 else /* station mode case only */
1280                         addr = ctx->active.bssid_addr;
1281
1282                 /* pre-fill phase 1 key into device cache */
1283                 ieee80211_get_key_rx_seq(keyconf, 0, &seq);
1284                 ieee80211_get_tkip_rx_p1k(keyconf, addr, seq.tkip.iv32, p1k);
1285                 ret = iwlagn_send_sta_key(priv, keyconf, sta_id,
1286                                           seq.tkip.iv32, p1k, CMD_SYNC);
1287                 break;
1288         case WLAN_CIPHER_SUITE_CCMP:
1289         case WLAN_CIPHER_SUITE_WEP40:
1290         case WLAN_CIPHER_SUITE_WEP104:
1291                 ret = iwlagn_send_sta_key(priv, keyconf, sta_id,
1292                                           0, NULL, CMD_SYNC);
1293                 break;
1294         default:
1295                 IWL_ERR(priv, "Unknown cipher %x\n", keyconf->cipher);
1296                 ret = -EINVAL;
1297         }
1298
1299         if (ret) {
1300                 ctx->key_mapping_keys--;
1301                 clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table);
1302         }
1303
1304         IWL_DEBUG_WEP(priv, "Set dynamic key: cipher=%x len=%d idx=%d sta=%pM ret=%d\n",
1305                       keyconf->cipher, keyconf->keylen, keyconf->keyidx,
1306                       sta ? sta->addr : NULL, ret);
1307
1308         return ret;
1309 }
1310
1311 /**
1312  * iwlagn_alloc_bcast_station - add broadcast station into driver's station table.
1313  *
1314  * This adds the broadcast station into the driver's station table
1315  * and marks it driver active, so that it will be restored to the
1316  * device at the next best time.
1317  */
1318 int iwlagn_alloc_bcast_station(struct iwl_priv *priv,
1319                                struct iwl_rxon_context *ctx)
1320 {
1321         struct iwl_link_quality_cmd *link_cmd;
1322         u8 sta_id;
1323
1324         spin_lock_bh(&priv->sta_lock);
1325         sta_id = iwl_prep_station(priv, ctx, iwl_bcast_addr, false, NULL);
1326         if (sta_id == IWL_INVALID_STATION) {
1327                 IWL_ERR(priv, "Unable to prepare broadcast station\n");
1328                 spin_unlock_bh(&priv->sta_lock);
1329
1330                 return -EINVAL;
1331         }
1332
1333         priv->stations[sta_id].used |= IWL_STA_DRIVER_ACTIVE;
1334         priv->stations[sta_id].used |= IWL_STA_BCAST;
1335         spin_unlock_bh(&priv->sta_lock);
1336
1337         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
1338         if (!link_cmd) {
1339                 IWL_ERR(priv,
1340                         "Unable to initialize rate scaling for bcast station.\n");
1341                 return -ENOMEM;
1342         }
1343
1344         spin_lock_bh(&priv->sta_lock);
1345         priv->stations[sta_id].lq = link_cmd;
1346         spin_unlock_bh(&priv->sta_lock);
1347
1348         return 0;
1349 }
1350
1351 /**
1352  * iwl_update_bcast_station - update broadcast station's LQ command
1353  *
1354  * Only used by iwlagn. Placed here to have all bcast station management
1355  * code together.
1356  */
1357 int iwl_update_bcast_station(struct iwl_priv *priv,
1358                              struct iwl_rxon_context *ctx)
1359 {
1360         struct iwl_link_quality_cmd *link_cmd;
1361         u8 sta_id = ctx->bcast_sta_id;
1362
1363         link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id);
1364         if (!link_cmd) {
1365                 IWL_ERR(priv, "Unable to initialize rate scaling for bcast station.\n");
1366                 return -ENOMEM;
1367         }
1368
1369         spin_lock_bh(&priv->sta_lock);
1370         if (priv->stations[sta_id].lq)
1371                 kfree(priv->stations[sta_id].lq);
1372         else
1373                 IWL_DEBUG_INFO(priv, "Bcast station rate scaling has not been initialized yet.\n");
1374         priv->stations[sta_id].lq = link_cmd;
1375         spin_unlock_bh(&priv->sta_lock);
1376
1377         return 0;
1378 }
1379
1380 int iwl_update_bcast_stations(struct iwl_priv *priv)
1381 {
1382         struct iwl_rxon_context *ctx;
1383         int ret = 0;
1384
1385         for_each_context(priv, ctx) {
1386                 ret = iwl_update_bcast_station(priv, ctx);
1387                 if (ret)
1388                         break;
1389         }
1390
1391         return ret;
1392 }
1393
1394 /**
1395  * iwl_sta_tx_modify_enable_tid - Enable Tx for this TID in station table
1396  */
1397 int iwl_sta_tx_modify_enable_tid(struct iwl_priv *priv, int sta_id, int tid)
1398 {
1399         struct iwl_addsta_cmd sta_cmd;
1400
1401         lockdep_assert_held(&priv->mutex);
1402
1403         /* Remove "disable" flag, to enable Tx for this TID */
1404         spin_lock_bh(&priv->sta_lock);
1405         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_TID_DISABLE_TX;
1406         priv->stations[sta_id].sta.tid_disable_tx &= cpu_to_le16(~(1 << tid));
1407         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1408         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1409         spin_unlock_bh(&priv->sta_lock);
1410
1411         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1412 }
1413
1414 int iwl_sta_rx_agg_start(struct iwl_priv *priv, struct ieee80211_sta *sta,
1415                          int tid, u16 ssn)
1416 {
1417         int sta_id;
1418         struct iwl_addsta_cmd sta_cmd;
1419
1420         lockdep_assert_held(&priv->mutex);
1421
1422         sta_id = iwl_sta_id(sta);
1423         if (sta_id == IWL_INVALID_STATION)
1424                 return -ENXIO;
1425
1426         spin_lock_bh(&priv->sta_lock);
1427         priv->stations[sta_id].sta.station_flags_msk = 0;
1428         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_ADDBA_TID_MSK;
1429         priv->stations[sta_id].sta.add_immediate_ba_tid = (u8)tid;
1430         priv->stations[sta_id].sta.add_immediate_ba_ssn = cpu_to_le16(ssn);
1431         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1432         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1433         spin_unlock_bh(&priv->sta_lock);
1434
1435         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1436 }
1437
1438 int iwl_sta_rx_agg_stop(struct iwl_priv *priv, struct ieee80211_sta *sta,
1439                         int tid)
1440 {
1441         int sta_id;
1442         struct iwl_addsta_cmd sta_cmd;
1443
1444         lockdep_assert_held(&priv->mutex);
1445
1446         sta_id = iwl_sta_id(sta);
1447         if (sta_id == IWL_INVALID_STATION) {
1448                 IWL_ERR(priv, "Invalid station for AGG tid %d\n", tid);
1449                 return -ENXIO;
1450         }
1451
1452         spin_lock_bh(&priv->sta_lock);
1453         priv->stations[sta_id].sta.station_flags_msk = 0;
1454         priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_DELBA_TID_MSK;
1455         priv->stations[sta_id].sta.remove_immediate_ba_tid = (u8)tid;
1456         priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
1457         memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd));
1458         spin_unlock_bh(&priv->sta_lock);
1459
1460         return iwl_send_add_sta(priv, &sta_cmd, CMD_SYNC);
1461 }
1462
1463
1464
1465 void iwl_sta_modify_sleep_tx_count(struct iwl_priv *priv, int sta_id, int cnt)
1466 {
1467         struct iwl_addsta_cmd cmd = {
1468                 .mode = STA_CONTROL_MODIFY_MSK,
1469                 .station_flags = STA_FLG_PWR_SAVE_MSK,
1470                 .station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1471                 .sta.sta_id = sta_id,
1472                 .sta.modify_mask = STA_MODIFY_SLEEP_TX_COUNT_MSK,
1473                 .sleep_tx_count = cpu_to_le16(cnt),
1474         };
1475
1476         iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1477 }