Commit | Line | Data |
---|---|---|
780e87c2 JB |
1 | /****************************************************************************** |
2 | * | |
3 | * This file is provided under a dual BSD/GPLv2 license. When using or | |
4 | * redistributing this file, you may do so under either license. | |
5 | * | |
6 | * GPL LICENSE SUMMARY | |
7 | * | |
8 | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | |
9 | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | |
e29cc6b9 | 10 | * Copyright(c) 2015 - 2016 Intel Deutschland GmbH |
780e87c2 JB |
11 | * |
12 | * This program is free software; you can redistribute it and/or modify | |
13 | * it under the terms of version 2 of the GNU General Public License as | |
14 | * published by the Free Software Foundation. | |
15 | * | |
16 | * This program is distributed in the hope that it will be useful, but | |
17 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
18 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
19 | * General Public License for more details. | |
20 | * | |
21 | * The full GNU General Public License is included in this distribution | |
22 | * in the file called COPYING. | |
23 | * | |
24 | * Contact Information: | |
25 | * Intel Linux Wireless <ilw@linux.intel.com> | |
26 | * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 | |
27 | * | |
28 | * BSD LICENSE | |
29 | * | |
30 | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | |
31 | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | |
e29cc6b9 | 32 | * Copyright(c) 2015 - 2016 Intel Deutschland GmbH |
780e87c2 JB |
33 | * All rights reserved. |
34 | * | |
35 | * Redistribution and use in source and binary forms, with or without | |
36 | * modification, are permitted provided that the following conditions | |
37 | * are met: | |
38 | * | |
39 | * * Redistributions of source code must retain the above copyright | |
40 | * notice, this list of conditions and the following disclaimer. | |
41 | * * Redistributions in binary form must reproduce the above copyright | |
42 | * notice, this list of conditions and the following disclaimer in | |
43 | * the documentation and/or other materials provided with the | |
44 | * distribution. | |
45 | * * Neither the name Intel Corporation nor the names of its | |
46 | * contributors may be used to endorse or promote products derived | |
47 | * from this software without specific prior written permission. | |
48 | * | |
49 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
50 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | |
51 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | |
52 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | |
53 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
54 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
55 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
56 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
57 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
58 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
59 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
60 | *****************************************************************************/ | |
61 | #include <linux/etherdevice.h> | |
62 | #include <linux/skbuff.h> | |
63 | #include "iwl-trans.h" | |
64 | #include "mvm.h" | |
65 | #include "fw-api.h" | |
66 | #include "fw-dbg.h" | |
67 | ||
f5e28eac JB |
68 | static inline int iwl_mvm_check_pn(struct iwl_mvm *mvm, struct sk_buff *skb, |
69 | int queue, struct ieee80211_sta *sta) | |
70 | { | |
71 | struct iwl_mvm_sta *mvmsta; | |
72 | struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; | |
73 | struct ieee80211_rx_status *stats = IEEE80211_SKB_RXCB(skb); | |
74 | struct iwl_mvm_key_pn *ptk_pn; | |
75 | u8 tid, keyidx; | |
76 | u8 pn[IEEE80211_CCMP_PN_LEN]; | |
77 | u8 *extiv; | |
78 | ||
79 | /* do PN checking */ | |
80 | ||
81 | /* multicast and non-data only arrives on default queue */ | |
82 | if (!ieee80211_is_data(hdr->frame_control) || | |
83 | is_multicast_ether_addr(hdr->addr1)) | |
84 | return 0; | |
85 | ||
86 | /* do not check PN for open AP */ | |
87 | if (!(stats->flag & RX_FLAG_DECRYPTED)) | |
88 | return 0; | |
89 | ||
90 | /* | |
91 | * avoid checking for default queue - we don't want to replicate | |
92 | * all the logic that's necessary for checking the PN on fragmented | |
93 | * frames, leave that to mac80211 | |
94 | */ | |
95 | if (queue == 0) | |
96 | return 0; | |
97 | ||
98 | /* if we are here - this for sure is either CCMP or GCMP */ | |
99 | if (IS_ERR_OR_NULL(sta)) { | |
100 | IWL_ERR(mvm, | |
101 | "expected hw-decrypted unicast frame for station\n"); | |
102 | return -1; | |
103 | } | |
104 | ||
105 | mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
106 | ||
107 | extiv = (u8 *)hdr + ieee80211_hdrlen(hdr->frame_control); | |
108 | keyidx = extiv[3] >> 6; | |
109 | ||
110 | ptk_pn = rcu_dereference(mvmsta->ptk_pn[keyidx]); | |
111 | if (!ptk_pn) | |
112 | return -1; | |
113 | ||
114 | if (ieee80211_is_data_qos(hdr->frame_control)) | |
115 | tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK; | |
116 | else | |
117 | tid = 0; | |
118 | ||
119 | /* we don't use HCCA/802.11 QoS TSPECs, so drop such frames */ | |
120 | if (tid >= IWL_MAX_TID_COUNT) | |
121 | return -1; | |
122 | ||
123 | /* load pn */ | |
124 | pn[0] = extiv[7]; | |
125 | pn[1] = extiv[6]; | |
126 | pn[2] = extiv[5]; | |
127 | pn[3] = extiv[4]; | |
128 | pn[4] = extiv[1]; | |
129 | pn[5] = extiv[0]; | |
130 | ||
131 | if (memcmp(pn, ptk_pn->q[queue].pn[tid], | |
132 | IEEE80211_CCMP_PN_LEN) <= 0) | |
133 | return -1; | |
134 | ||
f1ae02b1 SS |
135 | if (!(stats->flag & RX_FLAG_AMSDU_MORE)) |
136 | memcpy(ptk_pn->q[queue].pn[tid], pn, IEEE80211_CCMP_PN_LEN); | |
f5e28eac JB |
137 | stats->flag |= RX_FLAG_PN_VALIDATED; |
138 | ||
139 | return 0; | |
140 | } | |
141 | ||
142 | /* iwl_mvm_create_skb Adds the rxb to a new skb */ | |
143 | static void iwl_mvm_create_skb(struct sk_buff *skb, struct ieee80211_hdr *hdr, | |
144 | u16 len, u8 crypt_len, | |
145 | struct iwl_rx_cmd_buffer *rxb) | |
780e87c2 | 146 | { |
e29cc6b9 SS |
147 | struct iwl_rx_packet *pkt = rxb_addr(rxb); |
148 | struct iwl_rx_mpdu_desc *desc = (void *)pkt->data; | |
149 | unsigned int headlen, fraglen, pad_len = 0; | |
150 | unsigned int hdrlen = ieee80211_hdrlen(hdr->frame_control); | |
151 | ||
152 | if (desc->mac_flags2 & IWL_RX_MPDU_MFLG2_PAD) | |
153 | pad_len = 2; | |
154 | len -= pad_len; | |
780e87c2 JB |
155 | |
156 | /* If frame is small enough to fit in skb->head, pull it completely. | |
157 | * If not, only pull ieee80211_hdr (including crypto if present, and | |
158 | * an additional 8 bytes for SNAP/ethertype, see below) so that | |
159 | * splice() or TCP coalesce are more efficient. | |
160 | * | |
161 | * Since, in addition, ieee80211_data_to_8023() always pull in at | |
162 | * least 8 bytes (possibly more for mesh) we can do the same here | |
163 | * to save the cost of doing it later. That still doesn't pull in | |
164 | * the actual IP header since the typical case has a SNAP header. | |
165 | * If the latter changes (there are efforts in the standards group | |
166 | * to do so) we should revisit this and ieee80211_data_to_8023(). | |
167 | */ | |
e29cc6b9 SS |
168 | headlen = (len <= skb_tailroom(skb)) ? len : |
169 | hdrlen + crypt_len + 8; | |
780e87c2 | 170 | |
e29cc6b9 SS |
171 | /* The firmware may align the packet to DWORD. |
172 | * The padding is inserted after the IV. | |
173 | * After copying the header + IV skip the padding if | |
174 | * present before copying packet data. | |
175 | */ | |
176 | hdrlen += crypt_len; | |
780e87c2 | 177 | memcpy(skb_put(skb, hdrlen), hdr, hdrlen); |
e29cc6b9 SS |
178 | memcpy(skb_put(skb, headlen - hdrlen), (u8 *)hdr + hdrlen + pad_len, |
179 | headlen - hdrlen); | |
180 | ||
181 | fraglen = len - headlen; | |
780e87c2 JB |
182 | |
183 | if (fraglen) { | |
e29cc6b9 | 184 | int offset = (void *)hdr + headlen + pad_len - |
780e87c2 JB |
185 | rxb_addr(rxb) + rxb_offset(rxb); |
186 | ||
187 | skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset, | |
188 | fraglen, rxb->truesize); | |
189 | } | |
f5e28eac | 190 | } |
780e87c2 | 191 | |
f5e28eac JB |
192 | /* iwl_mvm_pass_packet_to_mac80211 - passes the packet for mac80211 */ |
193 | static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm, | |
194 | struct napi_struct *napi, | |
195 | struct sk_buff *skb, int queue, | |
196 | struct ieee80211_sta *sta) | |
197 | { | |
198 | if (iwl_mvm_check_pn(mvm, skb, queue, sta)) | |
199 | kfree_skb(skb); | |
200 | else | |
43ec72b7 | 201 | ieee80211_rx_napi(mvm->hw, sta, skb, napi); |
780e87c2 JB |
202 | } |
203 | ||
204 | static void iwl_mvm_get_signal_strength(struct iwl_mvm *mvm, | |
205 | struct iwl_rx_mpdu_desc *desc, | |
206 | struct ieee80211_rx_status *rx_status) | |
207 | { | |
d56a7801 | 208 | int energy_a, energy_b, max_energy; |
780e87c2 JB |
209 | |
210 | energy_a = desc->energy_a; | |
211 | energy_a = energy_a ? -energy_a : S8_MIN; | |
212 | energy_b = desc->energy_b; | |
213 | energy_b = energy_b ? -energy_b : S8_MIN; | |
780e87c2 | 214 | max_energy = max(energy_a, energy_b); |
780e87c2 | 215 | |
d56a7801 SS |
216 | IWL_DEBUG_STATS(mvm, "energy In A %d B %d, and max %d\n", |
217 | energy_a, energy_b, max_energy); | |
780e87c2 JB |
218 | |
219 | rx_status->signal = max_energy; | |
220 | rx_status->chains = 0; /* TODO: phy info */ | |
221 | rx_status->chain_signal[0] = energy_a; | |
222 | rx_status->chain_signal[1] = energy_b; | |
d56a7801 | 223 | rx_status->chain_signal[2] = S8_MIN; |
780e87c2 JB |
224 | } |
225 | ||
f5e28eac | 226 | static int iwl_mvm_rx_crypto(struct iwl_mvm *mvm, struct ieee80211_hdr *hdr, |
780e87c2 JB |
227 | struct ieee80211_rx_status *stats, |
228 | struct iwl_rx_mpdu_desc *desc, int queue, | |
229 | u8 *crypt_len) | |
230 | { | |
231 | u16 status = le16_to_cpu(desc->status); | |
232 | ||
233 | if (!ieee80211_has_protected(hdr->frame_control) || | |
234 | (status & IWL_RX_MPDU_STATUS_SEC_MASK) == | |
235 | IWL_RX_MPDU_STATUS_SEC_NONE) | |
236 | return 0; | |
237 | ||
238 | /* TODO: handle packets encrypted with unknown alg */ | |
239 | ||
240 | switch (status & IWL_RX_MPDU_STATUS_SEC_MASK) { | |
241 | case IWL_RX_MPDU_STATUS_SEC_CCM: | |
242 | case IWL_RX_MPDU_STATUS_SEC_GCM: | |
f5e28eac | 243 | BUILD_BUG_ON(IEEE80211_CCMP_PN_LEN != IEEE80211_GCMP_PN_LEN); |
780e87c2 JB |
244 | /* alg is CCM: check MIC only */ |
245 | if (!(status & IWL_RX_MPDU_STATUS_MIC_OK)) | |
246 | return -1; | |
247 | ||
248 | stats->flag |= RX_FLAG_DECRYPTED; | |
249 | *crypt_len = IEEE80211_CCMP_HDR_LEN; | |
250 | return 0; | |
251 | case IWL_RX_MPDU_STATUS_SEC_TKIP: | |
252 | /* Don't drop the frame and decrypt it in SW */ | |
253 | if (!(status & IWL_RX_MPDU_RES_STATUS_TTAK_OK)) | |
254 | return 0; | |
255 | ||
256 | *crypt_len = IEEE80211_TKIP_IV_LEN; | |
257 | /* fall through if TTAK OK */ | |
258 | case IWL_RX_MPDU_STATUS_SEC_WEP: | |
259 | if (!(status & IWL_RX_MPDU_STATUS_ICV_OK)) | |
260 | return -1; | |
261 | ||
262 | stats->flag |= RX_FLAG_DECRYPTED; | |
263 | if ((status & IWL_RX_MPDU_STATUS_SEC_MASK) == | |
264 | IWL_RX_MPDU_STATUS_SEC_WEP) | |
265 | *crypt_len = IEEE80211_WEP_IV_LEN; | |
266 | return 0; | |
267 | case IWL_RX_MPDU_STATUS_SEC_EXT_ENC: | |
268 | if (!(status & IWL_RX_MPDU_STATUS_MIC_OK)) | |
269 | return -1; | |
270 | stats->flag |= RX_FLAG_DECRYPTED; | |
271 | return 0; | |
272 | default: | |
273 | IWL_ERR(mvm, "Unhandled alg: 0x%x\n", status); | |
274 | } | |
275 | ||
276 | return 0; | |
277 | } | |
278 | ||
279 | static void iwl_mvm_rx_csum(struct ieee80211_sta *sta, | |
280 | struct sk_buff *skb, | |
281 | struct iwl_rx_mpdu_desc *desc) | |
282 | { | |
283 | struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
284 | struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif); | |
b238be07 SS |
285 | u16 flags = le16_to_cpu(desc->l3l4_flags); |
286 | u8 l3_prot = (u8)((flags & IWL_RX_L3L4_L3_PROTO_MASK) >> | |
287 | IWL_RX_L3_PROTO_POS); | |
780e87c2 JB |
288 | |
289 | if (mvmvif->features & NETIF_F_RXCSUM && | |
b238be07 SS |
290 | flags & IWL_RX_L3L4_TCP_UDP_CSUM_OK && |
291 | (flags & IWL_RX_L3L4_IP_HDR_CSUM_OK || | |
292 | l3_prot == IWL_RX_L3_TYPE_IPV6 || | |
293 | l3_prot == IWL_RX_L3_TYPE_IPV6_FRAG)) | |
780e87c2 JB |
294 | skb->ip_summed = CHECKSUM_UNNECESSARY; |
295 | } | |
296 | ||
a571f5f6 SS |
297 | /* |
298 | * returns true if a packet outside BA session is a duplicate and | |
299 | * should be dropped | |
300 | */ | |
301 | static bool iwl_mvm_is_nonagg_dup(struct ieee80211_sta *sta, int queue, | |
302 | struct ieee80211_rx_status *rx_status, | |
303 | struct ieee80211_hdr *hdr, | |
304 | struct iwl_rx_mpdu_desc *desc) | |
305 | { | |
306 | struct iwl_mvm_sta *mvm_sta; | |
307 | struct iwl_mvm_rxq_dup_data *dup_data; | |
308 | u8 baid, tid, sub_frame_idx; | |
309 | ||
310 | if (WARN_ON(IS_ERR_OR_NULL(sta))) | |
311 | return false; | |
312 | ||
313 | baid = (le32_to_cpu(desc->reorder_data) & | |
314 | IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
315 | IWL_RX_MPDU_REORDER_BAID_SHIFT; | |
316 | ||
317 | if (baid != IWL_RX_REORDER_DATA_INVALID_BAID) | |
318 | return false; | |
319 | ||
320 | mvm_sta = iwl_mvm_sta_from_mac80211(sta); | |
321 | dup_data = &mvm_sta->dup_data[queue]; | |
322 | ||
323 | /* | |
324 | * Drop duplicate 802.11 retransmissions | |
325 | * (IEEE 802.11-2012: 9.3.2.10 "Duplicate detection and recovery") | |
326 | */ | |
327 | if (ieee80211_is_ctl(hdr->frame_control) || | |
328 | ieee80211_is_qos_nullfunc(hdr->frame_control) || | |
329 | is_multicast_ether_addr(hdr->addr1)) { | |
330 | rx_status->flag |= RX_FLAG_DUP_VALIDATED; | |
331 | return false; | |
332 | } | |
333 | ||
334 | if (ieee80211_is_data_qos(hdr->frame_control)) | |
335 | /* frame has qos control */ | |
336 | tid = *ieee80211_get_qos_ctl(hdr) & | |
337 | IEEE80211_QOS_CTL_TID_MASK; | |
338 | else | |
339 | tid = IWL_MAX_TID_COUNT; | |
340 | ||
341 | /* If this wasn't a part of an A-MSDU the sub-frame index will be 0 */ | |
342 | sub_frame_idx = desc->amsdu_info & IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK; | |
343 | ||
344 | if (unlikely(ieee80211_has_retry(hdr->frame_control) && | |
345 | dup_data->last_seq[tid] == hdr->seq_ctrl && | |
346 | dup_data->last_sub_frame[tid] >= sub_frame_idx)) | |
347 | return true; | |
348 | ||
349 | dup_data->last_seq[tid] = hdr->seq_ctrl; | |
350 | dup_data->last_sub_frame[tid] = sub_frame_idx; | |
351 | ||
352 | rx_status->flag |= RX_FLAG_DUP_VALIDATED; | |
353 | ||
354 | return false; | |
355 | } | |
356 | ||
94bb4481 SS |
357 | int iwl_mvm_notify_rx_queue(struct iwl_mvm *mvm, u32 rxq_mask, |
358 | const u8 *data, u32 count) | |
359 | { | |
360 | struct iwl_rxq_sync_cmd *cmd; | |
361 | u32 data_size = sizeof(*cmd) + count; | |
362 | int ret; | |
363 | ||
364 | /* should be DWORD aligned */ | |
365 | if (WARN_ON(count & 3 || count > IWL_MULTI_QUEUE_SYNC_MSG_MAX_SIZE)) | |
366 | return -EINVAL; | |
367 | ||
368 | cmd = kzalloc(data_size, GFP_KERNEL); | |
369 | if (!cmd) | |
370 | return -ENOMEM; | |
371 | ||
372 | cmd->rxq_mask = cpu_to_le32(rxq_mask); | |
373 | cmd->count = cpu_to_le32(count); | |
374 | cmd->flags = 0; | |
375 | memcpy(cmd->payload, data, count); | |
376 | ||
377 | ret = iwl_mvm_send_cmd_pdu(mvm, | |
378 | WIDE_ID(DATA_PATH_GROUP, | |
379 | TRIGGER_RX_QUEUES_NOTIF_CMD), | |
380 | 0, data_size, cmd); | |
381 | ||
382 | kfree(cmd); | |
383 | return ret; | |
384 | } | |
385 | ||
74dd1764 SS |
386 | /* |
387 | * Returns true if sn2 - buffer_size < sn1 < sn2. | |
388 | * To be used only in order to compare reorder buffer head with NSSN. | |
389 | * We fully trust NSSN unless it is behind us due to reorder timeout. | |
390 | * Reorder timeout can only bring us up to buffer_size SNs ahead of NSSN. | |
391 | */ | |
392 | static bool iwl_mvm_is_sn_less(u16 sn1, u16 sn2, u16 buffer_size) | |
393 | { | |
394 | return ieee80211_sn_less(sn1, sn2) && | |
395 | !ieee80211_sn_less(sn1, sn2 - buffer_size); | |
396 | } | |
397 | ||
0690405f SS |
398 | #define RX_REORDER_BUF_TIMEOUT_MQ (HZ / 10) |
399 | ||
b915c101 SS |
400 | static void iwl_mvm_release_frames(struct iwl_mvm *mvm, |
401 | struct ieee80211_sta *sta, | |
402 | struct napi_struct *napi, | |
403 | struct iwl_mvm_reorder_buffer *reorder_buf, | |
404 | u16 nssn) | |
405 | { | |
406 | u16 ssn = reorder_buf->head_sn; | |
407 | ||
0690405f SS |
408 | lockdep_assert_held(&reorder_buf->lock); |
409 | ||
410 | /* ignore nssn smaller than head sn - this can happen due to timeout */ | |
74dd1764 | 411 | if (iwl_mvm_is_sn_less(nssn, ssn, reorder_buf->buf_size)) |
0690405f SS |
412 | return; |
413 | ||
74dd1764 | 414 | while (iwl_mvm_is_sn_less(ssn, nssn, reorder_buf->buf_size)) { |
b915c101 SS |
415 | int index = ssn % reorder_buf->buf_size; |
416 | struct sk_buff_head *skb_list = &reorder_buf->entries[index]; | |
417 | struct sk_buff *skb; | |
418 | ||
419 | ssn = ieee80211_sn_inc(ssn); | |
420 | ||
421 | /* holes are valid since nssn indicates frames were received. */ | |
422 | if (skb_queue_empty(skb_list) || !skb_peek_tail(skb_list)) | |
423 | continue; | |
424 | /* Empty the list. Will have more than one frame for A-MSDU */ | |
425 | while ((skb = __skb_dequeue(skb_list))) { | |
426 | iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, | |
427 | reorder_buf->queue, | |
428 | sta); | |
429 | reorder_buf->num_stored--; | |
430 | } | |
431 | } | |
432 | reorder_buf->head_sn = nssn; | |
0690405f SS |
433 | |
434 | if (reorder_buf->num_stored && !reorder_buf->removed) { | |
435 | u16 index = reorder_buf->head_sn % reorder_buf->buf_size; | |
436 | ||
437 | while (!skb_peek_tail(&reorder_buf->entries[index])) | |
438 | index = (index + 1) % reorder_buf->buf_size; | |
439 | /* modify timer to match next frame's expiration time */ | |
440 | mod_timer(&reorder_buf->reorder_timer, | |
441 | reorder_buf->reorder_time[index] + 1 + | |
442 | RX_REORDER_BUF_TIMEOUT_MQ); | |
443 | } else { | |
444 | del_timer(&reorder_buf->reorder_timer); | |
445 | } | |
446 | } | |
447 | ||
448 | void iwl_mvm_reorder_timer_expired(unsigned long data) | |
449 | { | |
450 | struct iwl_mvm_reorder_buffer *buf = (void *)data; | |
451 | int i; | |
452 | u16 sn = 0, index = 0; | |
453 | bool expired = false; | |
454 | ||
455 | spin_lock_bh(&buf->lock); | |
456 | ||
457 | if (!buf->num_stored || buf->removed) { | |
458 | spin_unlock_bh(&buf->lock); | |
459 | return; | |
460 | } | |
461 | ||
462 | for (i = 0; i < buf->buf_size ; i++) { | |
463 | index = (buf->head_sn + i) % buf->buf_size; | |
464 | ||
465 | if (!skb_peek_tail(&buf->entries[index])) | |
466 | continue; | |
467 | if (!time_after(jiffies, buf->reorder_time[index] + | |
468 | RX_REORDER_BUF_TIMEOUT_MQ)) | |
469 | break; | |
470 | expired = true; | |
471 | sn = ieee80211_sn_add(buf->head_sn, i + 1); | |
472 | } | |
473 | ||
474 | if (expired) { | |
475 | struct ieee80211_sta *sta; | |
476 | ||
477 | rcu_read_lock(); | |
478 | sta = rcu_dereference(buf->mvm->fw_id_to_mac_id[buf->sta_id]); | |
479 | /* SN is set to the last expired frame + 1 */ | |
35263a03 SS |
480 | IWL_DEBUG_HT(buf->mvm, |
481 | "Releasing expired frames for sta %u, sn %d\n", | |
482 | buf->sta_id, sn); | |
0690405f SS |
483 | iwl_mvm_release_frames(buf->mvm, sta, NULL, buf, sn); |
484 | rcu_read_unlock(); | |
485 | } else if (buf->num_stored) { | |
486 | /* | |
487 | * If no frame expired and there are stored frames, index is now | |
488 | * pointing to the first unexpired frame - modify timer | |
489 | * accordingly to this frame. | |
490 | */ | |
491 | mod_timer(&buf->reorder_timer, | |
492 | buf->reorder_time[index] + | |
493 | 1 + RX_REORDER_BUF_TIMEOUT_MQ); | |
494 | } | |
495 | spin_unlock_bh(&buf->lock); | |
b915c101 SS |
496 | } |
497 | ||
498 | static void iwl_mvm_del_ba(struct iwl_mvm *mvm, int queue, | |
499 | struct iwl_mvm_delba_data *data) | |
500 | { | |
501 | struct iwl_mvm_baid_data *ba_data; | |
502 | struct ieee80211_sta *sta; | |
503 | struct iwl_mvm_reorder_buffer *reorder_buf; | |
504 | u8 baid = data->baid; | |
505 | ||
506 | if (WARN_ON_ONCE(baid >= IWL_RX_REORDER_DATA_INVALID_BAID)) | |
507 | return; | |
508 | ||
509 | rcu_read_lock(); | |
510 | ||
511 | ba_data = rcu_dereference(mvm->baid_map[baid]); | |
512 | if (WARN_ON_ONCE(!ba_data)) | |
513 | goto out; | |
514 | ||
515 | sta = rcu_dereference(mvm->fw_id_to_mac_id[ba_data->sta_id]); | |
516 | if (WARN_ON_ONCE(IS_ERR_OR_NULL(sta))) | |
517 | goto out; | |
518 | ||
519 | reorder_buf = &ba_data->reorder_buf[queue]; | |
520 | ||
521 | /* release all frames that are in the reorder buffer to the stack */ | |
0690405f | 522 | spin_lock_bh(&reorder_buf->lock); |
b915c101 SS |
523 | iwl_mvm_release_frames(mvm, sta, NULL, reorder_buf, |
524 | ieee80211_sn_add(reorder_buf->head_sn, | |
525 | reorder_buf->buf_size)); | |
0690405f SS |
526 | spin_unlock_bh(&reorder_buf->lock); |
527 | del_timer_sync(&reorder_buf->reorder_timer); | |
b915c101 SS |
528 | |
529 | out: | |
530 | rcu_read_unlock(); | |
531 | } | |
532 | ||
94bb4481 SS |
533 | void iwl_mvm_rx_queue_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb, |
534 | int queue) | |
535 | { | |
536 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
537 | struct iwl_rxq_sync_notification *notif; | |
538 | struct iwl_mvm_internal_rxq_notif *internal_notif; | |
539 | ||
540 | notif = (void *)pkt->data; | |
541 | internal_notif = (void *)notif->payload; | |
542 | ||
d0ff5d22 SS |
543 | if (internal_notif->sync) { |
544 | if (mvm->queue_sync_cookie != internal_notif->cookie) { | |
0636b938 SS |
545 | WARN_ONCE(1, |
546 | "Received expired RX queue sync message\n"); | |
d0ff5d22 SS |
547 | return; |
548 | } | |
549 | atomic_dec(&mvm->queue_sync_counter); | |
550 | } | |
551 | ||
552 | switch (internal_notif->type) { | |
553 | case IWL_MVM_RXQ_EMPTY: | |
0636b938 | 554 | break; |
94bb4481 | 555 | case IWL_MVM_RXQ_NOTIF_DEL_BA: |
b915c101 | 556 | iwl_mvm_del_ba(mvm, queue, (void *)internal_notif->data); |
94bb4481 SS |
557 | break; |
558 | default: | |
559 | WARN_ONCE(1, "Invalid identifier %d", internal_notif->type); | |
560 | } | |
561 | } | |
562 | ||
b915c101 SS |
563 | /* |
564 | * Returns true if the MPDU was buffered\dropped, false if it should be passed | |
565 | * to upper layer. | |
566 | */ | |
567 | static bool iwl_mvm_reorder(struct iwl_mvm *mvm, | |
568 | struct napi_struct *napi, | |
569 | int queue, | |
570 | struct ieee80211_sta *sta, | |
571 | struct sk_buff *skb, | |
572 | struct iwl_rx_mpdu_desc *desc) | |
573 | { | |
574 | struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; | |
1f9788f3 | 575 | struct iwl_mvm_sta *mvm_sta; |
b915c101 SS |
576 | struct iwl_mvm_baid_data *baid_data; |
577 | struct iwl_mvm_reorder_buffer *buffer; | |
578 | struct sk_buff *tail; | |
579 | u32 reorder = le32_to_cpu(desc->reorder_data); | |
580 | bool amsdu = desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU; | |
e7e14089 SS |
581 | bool last_subframe = |
582 | desc->amsdu_info & IWL_RX_MPDU_AMSDU_LAST_SUBFRAME; | |
b915c101 SS |
583 | u8 tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK; |
584 | u8 sub_frame_idx = desc->amsdu_info & | |
585 | IWL_RX_MPDU_AMSDU_SUBFRAME_IDX_MASK; | |
586 | int index; | |
587 | u16 nssn, sn; | |
588 | u8 baid; | |
589 | ||
590 | baid = (reorder & IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
591 | IWL_RX_MPDU_REORDER_BAID_SHIFT; | |
592 | ||
593 | if (baid == IWL_RX_REORDER_DATA_INVALID_BAID) | |
594 | return false; | |
595 | ||
596 | /* no sta yet */ | |
597 | if (WARN_ON(IS_ERR_OR_NULL(sta))) | |
598 | return false; | |
599 | ||
1f9788f3 LC |
600 | mvm_sta = iwl_mvm_sta_from_mac80211(sta); |
601 | ||
b915c101 SS |
602 | /* not a data packet */ |
603 | if (!ieee80211_is_data_qos(hdr->frame_control) || | |
604 | is_multicast_ether_addr(hdr->addr1)) | |
605 | return false; | |
606 | ||
607 | if (unlikely(!ieee80211_is_data_present(hdr->frame_control))) | |
608 | return false; | |
609 | ||
610 | baid_data = rcu_dereference(mvm->baid_map[baid]); | |
611 | if (WARN(!baid_data, | |
612 | "Received baid %d, but no data exists for this BAID\n", baid)) | |
613 | return false; | |
614 | if (WARN(tid != baid_data->tid || mvm_sta->sta_id != baid_data->sta_id, | |
615 | "baid 0x%x is mapped to sta:%d tid:%d, but was received for sta:%d tid:%d\n", | |
616 | baid, baid_data->sta_id, baid_data->tid, mvm_sta->sta_id, | |
617 | tid)) | |
618 | return false; | |
619 | ||
620 | nssn = reorder & IWL_RX_MPDU_REORDER_NSSN_MASK; | |
621 | sn = (reorder & IWL_RX_MPDU_REORDER_SN_MASK) >> | |
622 | IWL_RX_MPDU_REORDER_SN_SHIFT; | |
623 | ||
624 | buffer = &baid_data->reorder_buf[queue]; | |
625 | ||
0690405f SS |
626 | spin_lock_bh(&buffer->lock); |
627 | ||
b915c101 SS |
628 | /* |
629 | * If there was a significant jump in the nssn - adjust. | |
630 | * If the SN is smaller than the NSSN it might need to first go into | |
631 | * the reorder buffer, in which case we just release up to it and the | |
632 | * rest of the function will take of storing it and releasing up to the | |
633 | * nssn | |
634 | */ | |
74dd1764 SS |
635 | if (!iwl_mvm_is_sn_less(nssn, buffer->head_sn + buffer->buf_size, |
636 | buffer->buf_size)) { | |
b915c101 SS |
637 | u16 min_sn = ieee80211_sn_less(sn, nssn) ? sn : nssn; |
638 | ||
639 | iwl_mvm_release_frames(mvm, sta, napi, buffer, min_sn); | |
640 | } | |
641 | ||
642 | /* drop any oudated packets */ | |
643 | if (ieee80211_sn_less(sn, buffer->head_sn)) | |
644 | goto drop; | |
645 | ||
646 | /* release immediately if allowed by nssn and no stored frames */ | |
647 | if (!buffer->num_stored && ieee80211_sn_less(sn, nssn)) { | |
74dd1764 | 648 | if (iwl_mvm_is_sn_less(buffer->head_sn, nssn, |
e7e14089 SS |
649 | buffer->buf_size) && |
650 | (!amsdu || last_subframe)) | |
0690405f | 651 | buffer->head_sn = nssn; |
b915c101 | 652 | /* No need to update AMSDU last SN - we are moving the head */ |
0690405f | 653 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
654 | return false; |
655 | } | |
656 | ||
657 | index = sn % buffer->buf_size; | |
658 | ||
659 | /* | |
660 | * Check if we already stored this frame | |
661 | * As AMSDU is either received or not as whole, logic is simple: | |
662 | * If we have frames in that position in the buffer and the last frame | |
663 | * originated from AMSDU had a different SN then it is a retransmission. | |
664 | * If it is the same SN then if the subframe index is incrementing it | |
665 | * is the same AMSDU - otherwise it is a retransmission. | |
666 | */ | |
667 | tail = skb_peek_tail(&buffer->entries[index]); | |
668 | if (tail && !amsdu) | |
669 | goto drop; | |
670 | else if (tail && (sn != buffer->last_amsdu || | |
671 | buffer->last_sub_index >= sub_frame_idx)) | |
672 | goto drop; | |
673 | ||
674 | /* put in reorder buffer */ | |
675 | __skb_queue_tail(&buffer->entries[index], skb); | |
676 | buffer->num_stored++; | |
0690405f SS |
677 | buffer->reorder_time[index] = jiffies; |
678 | ||
b915c101 SS |
679 | if (amsdu) { |
680 | buffer->last_amsdu = sn; | |
681 | buffer->last_sub_index = sub_frame_idx; | |
682 | } | |
683 | ||
e7e14089 SS |
684 | /* |
685 | * We cannot trust NSSN for AMSDU sub-frames that are not the last. | |
686 | * The reason is that NSSN advances on the first sub-frame, and may | |
687 | * cause the reorder buffer to advance before all the sub-frames arrive. | |
688 | * Example: reorder buffer contains SN 0 & 2, and we receive AMSDU with | |
689 | * SN 1. NSSN for first sub frame will be 3 with the result of driver | |
690 | * releasing SN 0,1, 2. When sub-frame 1 arrives - reorder buffer is | |
691 | * already ahead and it will be dropped. | |
692 | * If the last sub-frame is not on this queue - we will get frame | |
693 | * release notification with up to date NSSN. | |
694 | */ | |
695 | if (!amsdu || last_subframe) | |
696 | iwl_mvm_release_frames(mvm, sta, napi, buffer, nssn); | |
697 | ||
0690405f | 698 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
699 | return true; |
700 | ||
701 | drop: | |
702 | kfree_skb(skb); | |
0690405f | 703 | spin_unlock_bh(&buffer->lock); |
b915c101 SS |
704 | return true; |
705 | } | |
706 | ||
10b2b201 SS |
707 | static void iwl_mvm_agg_rx_received(struct iwl_mvm *mvm, u8 baid) |
708 | { | |
709 | unsigned long now = jiffies; | |
710 | unsigned long timeout; | |
711 | struct iwl_mvm_baid_data *data; | |
712 | ||
713 | rcu_read_lock(); | |
714 | ||
715 | data = rcu_dereference(mvm->baid_map[baid]); | |
716 | if (WARN_ON(!data)) | |
717 | goto out; | |
718 | ||
719 | if (!data->timeout) | |
720 | goto out; | |
721 | ||
722 | timeout = data->timeout; | |
723 | /* | |
724 | * Do not update last rx all the time to avoid cache bouncing | |
725 | * between the rx queues. | |
726 | * Update it every timeout. Worst case is the session will | |
727 | * expire after ~ 2 * timeout, which doesn't matter that much. | |
728 | */ | |
729 | if (time_before(data->last_rx + TU_TO_JIFFIES(timeout), now)) | |
730 | /* Update is atomic */ | |
731 | data->last_rx = now; | |
732 | ||
733 | out: | |
734 | rcu_read_unlock(); | |
735 | } | |
736 | ||
780e87c2 JB |
737 | void iwl_mvm_rx_mpdu_mq(struct iwl_mvm *mvm, struct napi_struct *napi, |
738 | struct iwl_rx_cmd_buffer *rxb, int queue) | |
739 | { | |
740 | struct ieee80211_rx_status *rx_status; | |
741 | struct iwl_rx_packet *pkt = rxb_addr(rxb); | |
742 | struct iwl_rx_mpdu_desc *desc = (void *)pkt->data; | |
0c1c6e37 | 743 | struct ieee80211_hdr *hdr = (void *)(pkt->data + sizeof(*desc)); |
780e87c2 JB |
744 | u32 len = le16_to_cpu(desc->mpdu_len); |
745 | u32 rate_n_flags = le32_to_cpu(desc->rate_n_flags); | |
fbe41127 | 746 | u16 phy_info = le16_to_cpu(desc->phy_info); |
780e87c2 JB |
747 | struct ieee80211_sta *sta = NULL; |
748 | struct sk_buff *skb; | |
780e87c2 JB |
749 | u8 crypt_len = 0; |
750 | ||
751 | /* Dont use dev_alloc_skb(), we'll have enough headroom once | |
752 | * ieee80211_hdr pulled. | |
753 | */ | |
754 | skb = alloc_skb(128, GFP_ATOMIC); | |
755 | if (!skb) { | |
756 | IWL_ERR(mvm, "alloc_skb failed\n"); | |
757 | return; | |
758 | } | |
759 | ||
760 | rx_status = IEEE80211_SKB_RXCB(skb); | |
761 | ||
762 | if (iwl_mvm_rx_crypto(mvm, hdr, rx_status, desc, queue, &crypt_len)) { | |
763 | kfree_skb(skb); | |
764 | return; | |
765 | } | |
766 | ||
767 | /* | |
768 | * Keep packets with CRC errors (and with overrun) for monitor mode | |
769 | * (otherwise the firmware discards them) but mark them as bad. | |
770 | */ | |
771 | if (!(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_CRC_OK)) || | |
772 | !(desc->status & cpu_to_le16(IWL_RX_MPDU_STATUS_OVERRUN_OK))) { | |
773 | IWL_DEBUG_RX(mvm, "Bad CRC or FIFO: 0x%08X.\n", | |
774 | le16_to_cpu(desc->status)); | |
775 | rx_status->flag |= RX_FLAG_FAILED_FCS_CRC; | |
776 | } | |
fbe41127 SS |
777 | /* set the preamble flag if appropriate */ |
778 | if (phy_info & IWL_RX_MPDU_PHY_SHORT_PREAMBLE) | |
779 | rx_status->flag |= RX_FLAG_SHORTPRE; | |
780 | ||
781 | if (likely(!(phy_info & IWL_RX_MPDU_PHY_TSF_OVERLOAD))) { | |
782 | rx_status->mactime = le64_to_cpu(desc->tsf_on_air_rise); | |
783 | /* TSF as indicated by the firmware is at INA time */ | |
784 | rx_status->flag |= RX_FLAG_MACTIME_PLCP_START; | |
785 | } | |
780e87c2 | 786 | rx_status->device_timestamp = le32_to_cpu(desc->gp2_on_air_rise); |
57fbcce3 JB |
787 | rx_status->band = desc->channel > 14 ? NL80211_BAND_5GHZ : |
788 | NL80211_BAND_2GHZ; | |
780e87c2 JB |
789 | rx_status->freq = ieee80211_channel_to_frequency(desc->channel, |
790 | rx_status->band); | |
791 | iwl_mvm_get_signal_strength(mvm, desc, rx_status); | |
fbe41127 SS |
792 | |
793 | /* update aggregation data for monitor sake on default queue */ | |
794 | if (!queue && (phy_info & IWL_RX_MPDU_PHY_AMPDU)) { | |
795 | bool toggle_bit = phy_info & IWL_RX_MPDU_PHY_AMPDU_TOGGLE; | |
796 | ||
797 | rx_status->flag |= RX_FLAG_AMPDU_DETAILS; | |
798 | rx_status->ampdu_reference = mvm->ampdu_ref; | |
799 | /* toggle is switched whenever new aggregation starts */ | |
800 | if (toggle_bit != mvm->ampdu_toggle) { | |
801 | mvm->ampdu_ref++; | |
802 | mvm->ampdu_toggle = toggle_bit; | |
803 | } | |
804 | } | |
780e87c2 JB |
805 | |
806 | rcu_read_lock(); | |
807 | ||
808 | if (le16_to_cpu(desc->status) & IWL_RX_MPDU_STATUS_SRC_STA_FOUND) { | |
809 | u8 id = desc->sta_id_flags & IWL_RX_MPDU_SIF_STA_ID_MASK; | |
810 | ||
811 | if (!WARN_ON_ONCE(id >= IWL_MVM_STATION_COUNT)) { | |
812 | sta = rcu_dereference(mvm->fw_id_to_mac_id[id]); | |
813 | if (IS_ERR(sta)) | |
814 | sta = NULL; | |
815 | } | |
816 | } else if (!is_multicast_ether_addr(hdr->addr2)) { | |
817 | /* | |
818 | * This is fine since we prevent two stations with the same | |
819 | * address from being added. | |
820 | */ | |
821 | sta = ieee80211_find_sta_by_ifaddr(mvm->hw, hdr->addr2, NULL); | |
822 | } | |
823 | ||
824 | if (sta) { | |
825 | struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); | |
d3a108a4 AO |
826 | struct ieee80211_vif *tx_blocked_vif = |
827 | rcu_dereference(mvm->csa_tx_blocked_vif); | |
10b2b201 SS |
828 | u8 baid = (u8)((le32_to_cpu(desc->reorder_data) & |
829 | IWL_RX_MPDU_REORDER_BAID_MASK) >> | |
830 | IWL_RX_MPDU_REORDER_BAID_SHIFT); | |
780e87c2 JB |
831 | |
832 | /* | |
833 | * We have tx blocked stations (with CS bit). If we heard | |
834 | * frames from a blocked station on a new channel we can | |
835 | * TX to it again. | |
836 | */ | |
d3a108a4 AO |
837 | if (unlikely(tx_blocked_vif) && |
838 | tx_blocked_vif == mvmsta->vif) { | |
839 | struct iwl_mvm_vif *mvmvif = | |
840 | iwl_mvm_vif_from_mac80211(tx_blocked_vif); | |
841 | ||
842 | if (mvmvif->csa_target_freq == rx_status->freq) | |
843 | iwl_mvm_sta_modify_disable_tx_ap(mvm, sta, | |
844 | false); | |
845 | } | |
780e87c2 JB |
846 | |
847 | rs_update_last_rssi(mvm, &mvmsta->lq_sta, rx_status); | |
848 | ||
849 | if (iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_RSSI) && | |
850 | ieee80211_is_beacon(hdr->frame_control)) { | |
851 | struct iwl_fw_dbg_trigger_tlv *trig; | |
852 | struct iwl_fw_dbg_trigger_low_rssi *rssi_trig; | |
853 | bool trig_check; | |
854 | s32 rssi; | |
855 | ||
856 | trig = iwl_fw_dbg_get_trigger(mvm->fw, | |
857 | FW_DBG_TRIGGER_RSSI); | |
858 | rssi_trig = (void *)trig->data; | |
859 | rssi = le32_to_cpu(rssi_trig->rssi); | |
860 | ||
861 | trig_check = | |
862 | iwl_fw_dbg_trigger_check_stop(mvm, mvmsta->vif, | |
863 | trig); | |
864 | if (trig_check && rx_status->signal < rssi) | |
865 | iwl_mvm_fw_dbg_collect_trig(mvm, trig, NULL); | |
866 | } | |
867 | ||
780e87c2 JB |
868 | if (ieee80211_is_data(hdr->frame_control)) |
869 | iwl_mvm_rx_csum(sta, skb, desc); | |
a571f5f6 SS |
870 | |
871 | if (iwl_mvm_is_nonagg_dup(sta, queue, rx_status, hdr, desc)) { | |
872 | kfree_skb(skb); | |
873 | rcu_read_unlock(); | |
874 | return; | |
875 | } | |
62d23403 SS |
876 | |
877 | /* | |
878 | * Our hardware de-aggregates AMSDUs but copies the mac header | |
879 | * as it to the de-aggregated MPDUs. We need to turn off the | |
880 | * AMSDU bit in the QoS control ourselves. | |
881 | */ | |
882 | if ((desc->mac_flags2 & IWL_RX_MPDU_MFLG2_AMSDU) && | |
883 | !WARN_ON(!ieee80211_is_data_qos(hdr->frame_control))) { | |
884 | u8 *qc = ieee80211_get_qos_ctl(hdr); | |
885 | ||
886 | *qc &= ~IEEE80211_QOS_CTL_A_MSDU_PRESENT; | |
f1ae02b1 SS |
887 | if (!(desc->amsdu_info & |
888 | IWL_RX_MPDU_AMSDU_LAST_SUBFRAME)) | |
889 | rx_status->flag |= RX_FLAG_AMSDU_MORE; | |
62d23403 | 890 | } |
10b2b201 SS |
891 | if (baid != IWL_RX_REORDER_DATA_INVALID_BAID) |
892 | iwl_mvm_agg_rx_received(mvm, baid); | |
780e87c2 JB |
893 | } |
894 | ||
780e87c2 JB |
895 | /* Set up the HT phy flags */ |
896 | switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) { | |
897 | case RATE_MCS_CHAN_WIDTH_20: | |
898 | break; | |
899 | case RATE_MCS_CHAN_WIDTH_40: | |
900 | rx_status->flag |= RX_FLAG_40MHZ; | |
901 | break; | |
902 | case RATE_MCS_CHAN_WIDTH_80: | |
903 | rx_status->vht_flag |= RX_VHT_FLAG_80MHZ; | |
904 | break; | |
905 | case RATE_MCS_CHAN_WIDTH_160: | |
906 | rx_status->vht_flag |= RX_VHT_FLAG_160MHZ; | |
907 | break; | |
908 | } | |
909 | if (rate_n_flags & RATE_MCS_SGI_MSK) | |
910 | rx_status->flag |= RX_FLAG_SHORT_GI; | |
911 | if (rate_n_flags & RATE_HT_MCS_GF_MSK) | |
912 | rx_status->flag |= RX_FLAG_HT_GF; | |
913 | if (rate_n_flags & RATE_MCS_LDPC_MSK) | |
914 | rx_status->flag |= RX_FLAG_LDPC; | |
915 | if (rate_n_flags & RATE_MCS_HT_MSK) { | |
916 | u8 stbc = (rate_n_flags & RATE_MCS_HT_STBC_MSK) >> | |
917 | RATE_MCS_STBC_POS; | |
918 | rx_status->flag |= RX_FLAG_HT; | |
919 | rx_status->rate_idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK; | |
920 | rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT; | |
921 | } else if (rate_n_flags & RATE_MCS_VHT_MSK) { | |
922 | u8 stbc = (rate_n_flags & RATE_MCS_VHT_STBC_MSK) >> | |
923 | RATE_MCS_STBC_POS; | |
924 | rx_status->vht_nss = | |
925 | ((rate_n_flags & RATE_VHT_MCS_NSS_MSK) >> | |
926 | RATE_VHT_MCS_NSS_POS) + 1; | |
927 | rx_status->rate_idx = rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK; | |
928 | rx_status->flag |= RX_FLAG_VHT; | |
929 | rx_status->flag |= stbc << RX_FLAG_STBC_SHIFT; | |
930 | if (rate_n_flags & RATE_MCS_BF_MSK) | |
931 | rx_status->vht_flag |= RX_VHT_FLAG_BF; | |
932 | } else { | |
933 | rx_status->rate_idx = | |
934 | iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags, | |
935 | rx_status->band); | |
936 | } | |
937 | ||
fbe41127 SS |
938 | /* management stuff on default queue */ |
939 | if (!queue) { | |
940 | if (unlikely((ieee80211_is_beacon(hdr->frame_control) || | |
941 | ieee80211_is_probe_resp(hdr->frame_control)) && | |
942 | mvm->sched_scan_pass_all == | |
943 | SCHED_SCAN_PASS_ALL_ENABLED)) | |
944 | mvm->sched_scan_pass_all = SCHED_SCAN_PASS_ALL_FOUND; | |
945 | ||
946 | if (unlikely(ieee80211_is_beacon(hdr->frame_control) || | |
947 | ieee80211_is_probe_resp(hdr->frame_control))) | |
948 | rx_status->boottime_ns = ktime_get_boot_ns(); | |
949 | } | |
780e87c2 | 950 | |
f5e28eac | 951 | iwl_mvm_create_skb(skb, hdr, len, crypt_len, rxb); |
b915c101 SS |
952 | if (!iwl_mvm_reorder(mvm, napi, queue, sta, skb, desc)) |
953 | iwl_mvm_pass_packet_to_mac80211(mvm, napi, skb, queue, sta); | |
f5e28eac | 954 | rcu_read_unlock(); |
780e87c2 | 955 | } |
585a6fcc | 956 | |
a338384b | 957 | void iwl_mvm_rx_frame_release(struct iwl_mvm *mvm, struct napi_struct *napi, |
585a6fcc SS |
958 | struct iwl_rx_cmd_buffer *rxb, int queue) |
959 | { | |
a338384b SS |
960 | struct iwl_rx_packet *pkt = rxb_addr(rxb); |
961 | struct iwl_frame_release *release = (void *)pkt->data; | |
962 | struct ieee80211_sta *sta; | |
963 | struct iwl_mvm_reorder_buffer *reorder_buf; | |
964 | struct iwl_mvm_baid_data *ba_data; | |
965 | ||
966 | int baid = release->baid; | |
967 | ||
35263a03 SS |
968 | IWL_DEBUG_HT(mvm, "Frame release notification for BAID %u, NSSN %d\n", |
969 | release->baid, le16_to_cpu(release->nssn)); | |
970 | ||
a338384b SS |
971 | if (WARN_ON_ONCE(baid == IWL_RX_REORDER_DATA_INVALID_BAID)) |
972 | return; | |
973 | ||
974 | rcu_read_lock(); | |
975 | ||
976 | ba_data = rcu_dereference(mvm->baid_map[baid]); | |
977 | if (WARN_ON_ONCE(!ba_data)) | |
978 | goto out; | |
979 | ||
980 | sta = rcu_dereference(mvm->fw_id_to_mac_id[ba_data->sta_id]); | |
981 | if (WARN_ON_ONCE(IS_ERR_OR_NULL(sta))) | |
982 | goto out; | |
983 | ||
984 | reorder_buf = &ba_data->reorder_buf[queue]; | |
985 | ||
986 | spin_lock_bh(&reorder_buf->lock); | |
987 | iwl_mvm_release_frames(mvm, sta, napi, reorder_buf, | |
988 | le16_to_cpu(release->nssn)); | |
989 | spin_unlock_bh(&reorder_buf->lock); | |
990 | ||
991 | out: | |
992 | rcu_read_unlock(); | |
585a6fcc | 993 | } |