[deliverable/linux.git] / drivers / net / wireless / mwifiex / ie.c

/*
 * Marvell Wireless LAN device driver: management IE handling- setting and
 * deleting IE.
 *
 * Copyright (C) 2012-2014, Marvell International Ltd.
 *
 * This software file (the "File") is distributed by Marvell International
 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
 * (the "License").  You may use, redistribute and/or modify this File in
 * accordance with the terms and conditions of the License, a copy of which
 * is available by writing to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
 *
 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
 * this warranty disclaimer.
 */

#include "main.h"

/* This function checks if current IE index is used by any on other interface.
 * Return: -1: yes, current IE index is used by someone else.
 *          0: no, current IE index is NOT used by other interface.
 */
static int
mwifiex_ie_index_used_by_other_intf(struct mwifiex_private *priv, u16 idx)
{
	int i;
	struct mwifiex_adapter *adapter = priv->adapter;
	struct mwifiex_ie *ie;

	for (i = 0; i < adapter->priv_num; i++) {
		if (adapter->priv[i] != priv) {
			ie = &adapter->priv[i]->mgmt_ie[idx];
			if (ie->mgmt_subtype_mask && ie->ie_length)
				return -1;
		}
	}

	return 0;
}

/* Get unused IE index. This index will be used for setting new IE */
static int
mwifiex_ie_get_autoidx(struct mwifiex_private *priv, u16 subtype_mask,
		       struct mwifiex_ie *ie, u16 *index)
{
	u16 mask, len, i;

	for (i = 0; i < priv->adapter->max_mgmt_ie_index; i++) {
		mask = le16_to_cpu(priv->mgmt_ie[i].mgmt_subtype_mask);
		len = le16_to_cpu(ie->ie_length);

		if (mask == MWIFIEX_AUTO_IDX_MASK)
			continue;

		if (mask == subtype_mask) {
			if (len > IEEE_MAX_IE_SIZE)
				continue;

			*index = i;
			return 0;
		}

		if (!priv->mgmt_ie[i].ie_length) {
			if (mwifiex_ie_index_used_by_other_intf(priv, i))
				continue;

			*index = i;
			return 0;
		}
	}

	return -1;
}

/* This function prepares IE data buffer for command to be sent to FW */
static int
mwifiex_update_autoindex_ies(struct mwifiex_private *priv,
			     struct mwifiex_ie_list *ie_list)
{
	u16 travel_len, index, mask;
	s16 input_len, tlv_len;
	struct mwifiex_ie *ie;
	u8 *tmp;

	input_len = le16_to_cpu(ie_list->len);
	travel_len = sizeof(struct mwifiex_ie_types_header);

	ie_list->len = 0;

	while (input_len >= sizeof(struct mwifiex_ie_types_header)) {
		ie = (struct mwifiex_ie *)(((u8 *)ie_list) + travel_len);
		tlv_len = le16_to_cpu(ie->ie_length);
		travel_len += tlv_len + MWIFIEX_IE_HDR_SIZE;

		if (input_len < tlv_len + MWIFIEX_IE_HDR_SIZE)
			return -1;
		index = le16_to_cpu(ie->ie_index);
		mask = le16_to_cpu(ie->mgmt_subtype_mask);

		if (index == MWIFIEX_AUTO_IDX_MASK) {
			/* automatic addition */
			if (mwifiex_ie_get_autoidx(priv, mask, ie, &index))
				return -1;
			if (index == MWIFIEX_AUTO_IDX_MASK)
				return -1;

			tmp = (u8 *)&priv->mgmt_ie[index].ie_buffer;
			memcpy(tmp, &ie->ie_buffer, le16_to_cpu(ie->ie_length));
			priv->mgmt_ie[index].ie_length = ie->ie_length;
			priv->mgmt_ie[index].ie_index = cpu_to_le16(index);
			priv->mgmt_ie[index].mgmt_subtype_mask =
							cpu_to_le16(mask);

			ie->ie_index = cpu_to_le16(index);
		} else {
			if (mask != MWIFIEX_DELETE_MASK)
				return -1;
			/*
			 * Check if this index is being used on any
			 * other interface.
			 */
			if (mwifiex_ie_index_used_by_other_intf(priv, index))
				return -1;

			ie->ie_length = 0;
			memcpy(&priv->mgmt_ie[index], ie,
			       sizeof(struct mwifiex_ie));
		}

		le16_add_cpu(&ie_list->len,
			     le16_to_cpu(priv->mgmt_ie[index].ie_length) +
			     MWIFIEX_IE_HDR_SIZE);
		input_len -= tlv_len + MWIFIEX_IE_HDR_SIZE;
	}

	if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP)
		return mwifiex_send_cmd(priv, HostCmd_CMD_UAP_SYS_CONFIG,
					HostCmd_ACT_GEN_SET,
					UAP_CUSTOM_IE_I, ie_list, false);

	return 0;
}

/* Copy individual custom IEs for beacon, probe response and assoc response
 * and prepare single structure for IE setting.
 * This function also updates allocated IE indices from driver.
 */
static int
mwifiex_update_uap_custom_ie(struct mwifiex_private *priv,
			     struct mwifiex_ie *beacon_ie, u16 *beacon_idx,
			     struct mwifiex_ie *pr_ie, u16 *probe_idx,
			     struct mwifiex_ie *ar_ie, u16 *assoc_idx)
{
	struct mwifiex_ie_list *ap_custom_ie;
	u8 *pos;
	u16 len;
	int ret;

	ap_custom_ie = kzalloc(sizeof(*ap_custom_ie), GFP_KERNEL);
	if (!ap_custom_ie)
		return -ENOMEM;

	ap_custom_ie->type = cpu_to_le16(TLV_TYPE_MGMT_IE);
	pos = (u8 *)ap_custom_ie->ie_list;

	if (beacon_ie) {
		len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
		      le16_to_cpu(beacon_ie->ie_length);
		memcpy(pos, beacon_ie, len);
		pos += len;
		le16_add_cpu(&ap_custom_ie->len, len);
	}
	if (pr_ie) {
		len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
		      le16_to_cpu(pr_ie->ie_length);
		memcpy(pos, pr_ie, len);
		pos += len;
		le16_add_cpu(&ap_custom_ie->len, len);
	}
	if (ar_ie) {
		len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
		      le16_to_cpu(ar_ie->ie_length);
		memcpy(pos, ar_ie, len);
		pos += len;
		le16_add_cpu(&ap_custom_ie->len, len);
	}

	ret = mwifiex_update_autoindex_ies(priv, ap_custom_ie);

	pos = (u8 *)(&ap_custom_ie->ie_list[0].ie_index);
	if (beacon_ie && *beacon_idx == MWIFIEX_AUTO_IDX_MASK) {
		/* save beacon ie index after auto-indexing */
		*beacon_idx = le16_to_cpu(ap_custom_ie->ie_list[0].ie_index);
		len = sizeof(*beacon_ie) - IEEE_MAX_IE_SIZE +
		      le16_to_cpu(beacon_ie->ie_length);
		pos += len;
	}
	if (pr_ie && le16_to_cpu(pr_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK) {
		/* save probe resp ie index after auto-indexing */
		*probe_idx = *((u16 *)pos);
		len = sizeof(*pr_ie) - IEEE_MAX_IE_SIZE +
		      le16_to_cpu(pr_ie->ie_length);
		pos += len;
	}
	if (ar_ie && le16_to_cpu(ar_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK)
		/* save assoc resp ie index after auto-indexing */
		*assoc_idx = *((u16 *)pos);

	kfree(ap_custom_ie);
	return ret;
}

/* This function checks if the vendor specified IE is present in passed buffer
 * and copies it to mwifiex_ie structure.
 * Function takes pointer to struct mwifiex_ie pointer as argument.
 * If the vendor specified IE is present then memory is allocated for
 * mwifiex_ie pointer and filled in with IE. Caller should take care of freeing
 * this memory.
 */
static int mwifiex_update_vs_ie(const u8 *ies, int ies_len,
				struct mwifiex_ie **ie_ptr, u16 mask,
				unsigned int oui, u8 oui_type)
{
	struct ieee_types_header *vs_ie;
	struct mwifiex_ie *ie = *ie_ptr;
	const u8 *vendor_ie;

	vendor_ie = cfg80211_find_vendor_ie(oui, oui_type, ies, ies_len);
	if (vendor_ie) {
		if (!*ie_ptr) {
			*ie_ptr = kzalloc(sizeof(struct mwifiex_ie),
					  GFP_KERNEL);
			if (!*ie_ptr)
				return -ENOMEM;
			ie = *ie_ptr;
		}

		vs_ie = (struct ieee_types_header *)vendor_ie;
		memcpy(ie->ie_buffer + le16_to_cpu(ie->ie_length),
		       vs_ie, vs_ie->len + 2);
		le16_add_cpu(&ie->ie_length, vs_ie->len + 2);
		ie->mgmt_subtype_mask = cpu_to_le16(mask);
		ie->ie_index = cpu_to_le16(MWIFIEX_AUTO_IDX_MASK);
	}

	*ie_ptr = ie;
	return 0;
}

/* This function parses beacon IEs, probe response IEs, association response IEs
 * from cfg80211_ap_settings->beacon and sets these IE to FW.
 */
static int mwifiex_set_mgmt_beacon_data_ies(struct mwifiex_private *priv,
					    struct cfg80211_beacon_data *data)
{
	struct mwifiex_ie *beacon_ie = NULL, *pr_ie = NULL, *ar_ie = NULL;
	u16 beacon_idx = MWIFIEX_AUTO_IDX_MASK, pr_idx = MWIFIEX_AUTO_IDX_MASK;
	u16 ar_idx = MWIFIEX_AUTO_IDX_MASK;
	int ret = 0;

	if (data->beacon_ies && data->beacon_ies_len) {
		mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len,
				     &beacon_ie, MGMT_MASK_BEACON,
				     WLAN_OUI_MICROSOFT,
				     WLAN_OUI_TYPE_MICROSOFT_WPS);
		mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len,
				     &beacon_ie, MGMT_MASK_BEACON,
				     WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P);
	}

	if (data->proberesp_ies && data->proberesp_ies_len) {
		mwifiex_update_vs_ie(data->proberesp_ies,
				     data->proberesp_ies_len, &pr_ie,
				     MGMT_MASK_PROBE_RESP, WLAN_OUI_MICROSOFT,
				     WLAN_OUI_TYPE_MICROSOFT_WPS);
		mwifiex_update_vs_ie(data->proberesp_ies,
				     data->proberesp_ies_len, &pr_ie,
				     MGMT_MASK_PROBE_RESP,
				     WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P);
	}

	if (data->assocresp_ies && data->assocresp_ies_len) {
		mwifiex_update_vs_ie(data->assocresp_ies,
				     data->assocresp_ies_len, &ar_ie,
				     MGMT_MASK_ASSOC_RESP |
				     MGMT_MASK_REASSOC_RESP,
				     WLAN_OUI_MICROSOFT,
				     WLAN_OUI_TYPE_MICROSOFT_WPS);
		mwifiex_update_vs_ie(data->assocresp_ies,
				     data->assocresp_ies_len, &ar_ie,
				     MGMT_MASK_ASSOC_RESP |
				     MGMT_MASK_REASSOC_RESP, WLAN_OUI_WFA,
				     WLAN_OUI_TYPE_WFA_P2P);
	}

	if (beacon_ie || pr_ie || ar_ie) {
		ret = mwifiex_update_uap_custom_ie(priv, beacon_ie,
						   &beacon_idx, pr_ie,
						   &pr_idx, ar_ie, &ar_idx);
		if (ret)
			goto done;
	}

	priv->beacon_idx = beacon_idx;
	priv->proberesp_idx = pr_idx;
	priv->assocresp_idx = ar_idx;

done:
	kfree(beacon_ie);
	kfree(pr_ie);
	kfree(ar_ie);

	return ret;
}

/* This function parses  head and tail IEs, from cfg80211_beacon_data and sets
 * these IE to FW.
 */
static int mwifiex_uap_parse_tail_ies(struct mwifiex_private *priv,
				      struct cfg80211_beacon_data *info)
{
	struct mwifiex_ie *gen_ie;
	struct ieee_types_header *hdr;
	struct ieee80211_vendor_ie *vendorhdr;
	u16 gen_idx = MWIFIEX_AUTO_IDX_MASK, ie_len = 0;
	int left_len, parsed_len = 0;

	if (!info->tail || !info->tail_len)
		return 0;

	gen_ie = kzalloc(sizeof(*gen_ie), GFP_KERNEL);
	if (!gen_ie)
		return -ENOMEM;

	left_len = info->tail_len;

	/* Many IEs are generated in FW by parsing bss configuration.
	 * Let's not add them here; else we may end up duplicating these IEs
	 */
	while (left_len > sizeof(struct ieee_types_header)) {
		hdr = (void *)(info->tail + parsed_len);
		switch (hdr->element_id) {
		case WLAN_EID_SSID:
		case WLAN_EID_SUPP_RATES:
		case WLAN_EID_COUNTRY:
		case WLAN_EID_PWR_CONSTRAINT:
		case WLAN_EID_EXT_SUPP_RATES:
		case WLAN_EID_HT_CAPABILITY:
		case WLAN_EID_HT_OPERATION:
		case WLAN_EID_VHT_CAPABILITY:
		case WLAN_EID_VHT_OPERATION:
		case WLAN_EID_VENDOR_SPECIFIC:
			break;
		default:
			memcpy(gen_ie->ie_buffer + ie_len, hdr,
			       hdr->len + sizeof(struct ieee_types_header));
			ie_len += hdr->len + sizeof(struct ieee_types_header);
			break;
		}
		left_len -= hdr->len + sizeof(struct ieee_types_header);
		parsed_len += hdr->len + sizeof(struct ieee_types_header);
	}

	/* parse only WPA vendor IE from tail, WMM IE is configured by
	 * bss_config command
	 */
	vendorhdr = (void *)cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
						    WLAN_OUI_TYPE_MICROSOFT_WPA,
						    info->tail, info->tail_len);
	if (vendorhdr) {
		memcpy(gen_ie->ie_buffer + ie_len, vendorhdr,
		       vendorhdr->len + sizeof(struct ieee_types_header));
		ie_len += vendorhdr->len + sizeof(struct ieee_types_header);
	}

	if (!ie_len) {
		kfree(gen_ie);
		return 0;
	}

	gen_ie->ie_index = cpu_to_le16(gen_idx);
	gen_ie->mgmt_subtype_mask = cpu_to_le16(MGMT_MASK_BEACON |
						MGMT_MASK_PROBE_RESP |
						MGMT_MASK_ASSOC_RESP);
	gen_ie->ie_length = cpu_to_le16(ie_len);

	if (mwifiex_update_uap_custom_ie(priv, gen_ie, &gen_idx, NULL, NULL,
					 NULL, NULL)) {
		kfree(gen_ie);
		return -1;
	}

	priv->gen_idx = gen_idx;
	kfree(gen_ie);
	return 0;
}

/* This function parses different IEs-head & tail IEs, beacon IEs,
 * probe response IEs, association response IEs from cfg80211_ap_settings
 * function and sets these IE to FW.
 */
int mwifiex_set_mgmt_ies(struct mwifiex_private *priv,
			 struct cfg80211_beacon_data *info)
{
	int ret;

	ret = mwifiex_uap_parse_tail_ies(priv, info);

	if (ret)
		return ret;

	return mwifiex_set_mgmt_beacon_data_ies(priv, info);
}

/* This function removes management IE set */
int mwifiex_del_mgmt_ies(struct mwifiex_private *priv)
{
	struct mwifiex_ie *beacon_ie = NULL, *pr_ie = NULL;
	struct mwifiex_ie *ar_ie = NULL, *gen_ie = NULL;
	int ret = 0;

	if (priv->gen_idx != MWIFIEX_AUTO_IDX_MASK) {
		gen_ie = kmalloc(sizeof(*gen_ie), GFP_KERNEL);
		if (!gen_ie)
			return -ENOMEM;

		gen_ie->ie_index = cpu_to_le16(priv->gen_idx);
		gen_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
		gen_ie->ie_length = 0;
		if (mwifiex_update_uap_custom_ie(priv, gen_ie, &priv->gen_idx,
						 NULL, &priv->proberesp_idx,
						 NULL, &priv->assocresp_idx)) {
			ret = -1;
			goto done;
		}

		priv->gen_idx = MWIFIEX_AUTO_IDX_MASK;
	}

	if (priv->beacon_idx != MWIFIEX_AUTO_IDX_MASK) {
		beacon_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
		if (!beacon_ie) {
			ret = -ENOMEM;
			goto done;
		}
		beacon_ie->ie_index = cpu_to_le16(priv->beacon_idx);
		beacon_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
		beacon_ie->ie_length = 0;
	}
	if (priv->proberesp_idx != MWIFIEX_AUTO_IDX_MASK) {
		pr_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
		if (!pr_ie) {
			ret = -ENOMEM;
			goto done;
		}
		pr_ie->ie_index = cpu_to_le16(priv->proberesp_idx);
		pr_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
		pr_ie->ie_length = 0;
	}
	if (priv->assocresp_idx != MWIFIEX_AUTO_IDX_MASK) {
		ar_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
		if (!ar_ie) {
			ret = -ENOMEM;
			goto done;
		}
		ar_ie->ie_index = cpu_to_le16(priv->assocresp_idx);
		ar_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
		ar_ie->ie_length = 0;
	}

	if (beacon_ie || pr_ie || ar_ie)
		ret = mwifiex_update_uap_custom_ie(priv,
						   beacon_ie, &priv->beacon_idx,
						   pr_ie, &priv->proberesp_idx,
						   ar_ie, &priv->assocresp_idx);

done:
	kfree(gen_ie);
	kfree(beacon_ie);
	kfree(pr_ie);
	kfree(ar_ie);

	return ret;
}
Commit	Line	Data
ede98bfa AP	1	/*
	2	* Marvell Wireless LAN device driver: management IE handling- setting and
	3	* deleting IE.
	4	*
65da33f5	5	* Copyright (C) 2012-2014, Marvell International Ltd.
ede98bfa AP	6	*
	7	* This software file (the "File") is distributed by Marvell International
	8	* Ltd. under the terms of the GNU General Public License Version 2, June 1991
	9	* (the "License"). You may use, redistribute and/or modify this File in
	10	* accordance with the terms and conditions of the License, a copy of which
	11	* is available by writing to the Free Software Foundation, Inc.,
	12	* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
	13	* worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
	14	*
	15	* THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
	16	* IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
	17	* ARE EXPRESSLY DISCLAIMED. The License provides additional details about
	18	* this warranty disclaimer.
	19	*/
	20
	21	#include "main.h"
	22
	23	/* This function checks if current IE index is used by any on other interface.
	24	* Return: -1: yes, current IE index is used by someone else.
	25	* 0: no, current IE index is NOT used by other interface.
	26	*/
	27	static int
	28	mwifiex_ie_index_used_by_other_intf(struct mwifiex_private *priv, u16 idx)
	29	{
	30	int i;
	31	struct mwifiex_adapter *adapter = priv->adapter;
	32	struct mwifiex_ie *ie;
	33
	34	for (i = 0; i < adapter->priv_num; i++) {
	35	if (adapter->priv[i] != priv) {
	36	ie = &adapter->priv[i]->mgmt_ie[idx];
	37	if (ie->mgmt_subtype_mask && ie->ie_length)
	38	return -1;
	39	}
	40	}
	41
	42	return 0;
	43	}
	44
	45	/* Get unused IE index. This index will be used for setting new IE */
	46	static int
	47	mwifiex_ie_get_autoidx(struct mwifiex_private *priv, u16 subtype_mask,
	48	struct mwifiex_ie ie, u16 index)
	49	{
	50	u16 mask, len, i;
	51
	52	for (i = 0; i < priv->adapter->max_mgmt_ie_index; i++) {
	53	mask = le16_to_cpu(priv->mgmt_ie[i].mgmt_subtype_mask);
bd6aa030	54	len = le16_to_cpu(ie->ie_length);
ede98bfa AP	55
	56	if (mask == MWIFIEX_AUTO_IDX_MASK)
	57	continue;
	58
	59	if (mask == subtype_mask) {
	60	if (len > IEEE_MAX_IE_SIZE)
	61	continue;
	62
	63	*index = i;
	64	return 0;
	65	}
	66
	67	if (!priv->mgmt_ie[i].ie_length) {
	68	if (mwifiex_ie_index_used_by_other_intf(priv, i))
	69	continue;
	70
	71	*index = i;
	72	return 0;
	73	}
	74	}
	75
	76	return -1;
	77	}
	78
	79	/* This function prepares IE data buffer for command to be sent to FW */
	80	static int
	81	mwifiex_update_autoindex_ies(struct mwifiex_private *priv,
	82	struct mwifiex_ie_list *ie_list)
	83	{
	84	u16 travel_len, index, mask;
01c85adf	85	s16 input_len, tlv_len;
ede98bfa AP	86	struct mwifiex_ie *ie;
	87	u8 *tmp;
	88
	89	input_len = le16_to_cpu(ie_list->len);
6b21a69f	90	travel_len = sizeof(struct mwifiex_ie_types_header);
ede98bfa AP	91
	92	ie_list->len = 0;
	93
01c85adf	94	while (input_len >= sizeof(struct mwifiex_ie_types_header)) {
ede98bfa	95	ie = (struct mwifiex_ie )(((u8 )ie_list) + travel_len);
01c85adf AK	96	tlv_len = le16_to_cpu(ie->ie_length);
01c85adf AK	97	travel_len += tlv_len + MWIFIEX_IE_HDR_SIZE;
ede98bfa	98
01c85adf AK	99	if (input_len < tlv_len + MWIFIEX_IE_HDR_SIZE)
01c85adf AK	100	return -1;
ede98bfa AP	101	index = le16_to_cpu(ie->ie_index);
	102	mask = le16_to_cpu(ie->mgmt_subtype_mask);
	103
	104	if (index == MWIFIEX_AUTO_IDX_MASK) {
	105	/* automatic addition */
	106	if (mwifiex_ie_get_autoidx(priv, mask, ie, &index))
	107	return -1;
	108	if (index == MWIFIEX_AUTO_IDX_MASK)
	109	return -1;
	110
	111	tmp = (u8 *)&priv->mgmt_ie[index].ie_buffer;
ede98bfa	112	memcpy(tmp, &ie->ie_buffer, le16_to_cpu(ie->ie_length));
bd6aa030	113	priv->mgmt_ie[index].ie_length = ie->ie_length;
ede98bfa AP	114	priv->mgmt_ie[index].ie_index = cpu_to_le16(index);
	115	priv->mgmt_ie[index].mgmt_subtype_mask =
	116	cpu_to_le16(mask);
	117
	118	ie->ie_index = cpu_to_le16(index);
ede98bfa AP	119	} else {
	120	if (mask != MWIFIEX_DELETE_MASK)
	121	return -1;
	122	/*
	123	* Check if this index is being used on any
	124	* other interface.
	125	*/
	126	if (mwifiex_ie_index_used_by_other_intf(priv, index))
	127	return -1;
	128
	129	ie->ie_length = 0;
	130	memcpy(&priv->mgmt_ie[index], ie,
	131	sizeof(struct mwifiex_ie));
	132	}
	133
	134	le16_add_cpu(&ie_list->len,
	135	le16_to_cpu(priv->mgmt_ie[index].ie_length) +
	136	MWIFIEX_IE_HDR_SIZE);
01c85adf	137	input_len -= tlv_len + MWIFIEX_IE_HDR_SIZE;
ede98bfa AP	138	}
	139
	140	if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP)
fa0ecbb9 BZ	141	return mwifiex_send_cmd(priv, HostCmd_CMD_UAP_SYS_CONFIG,
	142	HostCmd_ACT_GEN_SET,
	143	UAP_CUSTOM_IE_I, ie_list, false);
ede98bfa AP	144
	145	return 0;
	146	}
f31acabe AP	147
	148	/* Copy individual custom IEs for beacon, probe response and assoc response
	149	* and prepare single structure for IE setting.
	150	* This function also updates allocated IE indices from driver.
	151	*/
	152	static int
	153	mwifiex_update_uap_custom_ie(struct mwifiex_private *priv,
	154	struct mwifiex_ie beacon_ie, u16 beacon_idx,
	155	struct mwifiex_ie pr_ie, u16 probe_idx,
	156	struct mwifiex_ie ar_ie, u16 assoc_idx)
	157	{
	158	struct mwifiex_ie_list *ap_custom_ie;
	159	u8 *pos;
	160	u16 len;
	161	int ret;
	162
fd0fc521	163	ap_custom_ie = kzalloc(sizeof(*ap_custom_ie), GFP_KERNEL);
f31acabe AP	164	if (!ap_custom_ie)
	165	return -ENOMEM;
	166
	167	ap_custom_ie->type = cpu_to_le16(TLV_TYPE_MGMT_IE);
	168	pos = (u8 *)ap_custom_ie->ie_list;
	169
	170	if (beacon_ie) {
	171	len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
	172	le16_to_cpu(beacon_ie->ie_length);
	173	memcpy(pos, beacon_ie, len);
	174	pos += len;
	175	le16_add_cpu(&ap_custom_ie->len, len);
	176	}
	177	if (pr_ie) {
	178	len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
	179	le16_to_cpu(pr_ie->ie_length);
	180	memcpy(pos, pr_ie, len);
	181	pos += len;
	182	le16_add_cpu(&ap_custom_ie->len, len);
	183	}
	184	if (ar_ie) {
	185	len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE +
	186	le16_to_cpu(ar_ie->ie_length);
	187	memcpy(pos, ar_ie, len);
	188	pos += len;
	189	le16_add_cpu(&ap_custom_ie->len, len);
	190	}
	191
	192	ret = mwifiex_update_autoindex_ies(priv, ap_custom_ie);
	193
	194	pos = (u8 *)(&ap_custom_ie->ie_list[0].ie_index);
	195	if (beacon_ie && *beacon_idx == MWIFIEX_AUTO_IDX_MASK) {
	196	/* save beacon ie index after auto-indexing */
	197	*beacon_idx = le16_to_cpu(ap_custom_ie->ie_list[0].ie_index);
	198	len = sizeof(*beacon_ie) - IEEE_MAX_IE_SIZE +
	199	le16_to_cpu(beacon_ie->ie_length);
	200	pos += len;
	201	}
	202	if (pr_ie && le16_to_cpu(pr_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK) {
	203	/* save probe resp ie index after auto-indexing */
	204	probe_idx = ((u16 *)pos);
	205	len = sizeof(*pr_ie) - IEEE_MAX_IE_SIZE +
	206	le16_to_cpu(pr_ie->ie_length);
	207	pos += len;
	208	}
	209	if (ar_ie && le16_to_cpu(ar_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK)
	210	/* save assoc resp ie index after auto-indexing */
	211	assoc_idx = ((u16 *)pos);
	212
c9015b24	213	kfree(ap_custom_ie);
f31acabe AP	214	return ret;
	215	}
	216
8a6e2317 SP	217	/* This function checks if the vendor specified IE is present in passed buffer
8a6e2317 SP	218	* and copies it to mwifiex_ie structure.
2152fe9c	219	* Function takes pointer to struct mwifiex_ie pointer as argument.
8a6e2317 SP	220	* If the vendor specified IE is present then memory is allocated for
	221	* mwifiex_ie pointer and filled in with IE. Caller should take care of freeing
	222	* this memory.
2152fe9c	223	*/
8a6e2317 SP	224	static int mwifiex_update_vs_ie(const u8 *ies, int ies_len,
	225	struct mwifiex_ie **ie_ptr, u16 mask,
	226	unsigned int oui, u8 oui_type)
2152fe9c	227	{
8a6e2317 SP	228	struct ieee_types_header *vs_ie;
8a6e2317 SP	229	struct mwifiex_ie ie = ie_ptr;
2152fe9c AP	230	const u8 *vendor_ie;
2152fe9c AP	231
8a6e2317	232	vendor_ie = cfg80211_find_vendor_ie(oui, oui_type, ies, ies_len);
2152fe9c	233	if (vendor_ie) {
8a6e2317 SP	234	if (!*ie_ptr) {
	235	*ie_ptr = kzalloc(sizeof(struct mwifiex_ie),
	236	GFP_KERNEL);
	237	if (!*ie_ptr)
	238	return -ENOMEM;
	239	ie = *ie_ptr;
	240	}
2152fe9c	241
8a6e2317 SP	242	vs_ie = (struct ieee_types_header *)vendor_ie;
	243	memcpy(ie->ie_buffer + le16_to_cpu(ie->ie_length),
	244	vs_ie, vs_ie->len + 2);
	245	le16_add_cpu(&ie->ie_length, vs_ie->len + 2);
2152fe9c AP	246	ie->mgmt_subtype_mask = cpu_to_le16(mask);
	247	ie->ie_index = cpu_to_le16(MWIFIEX_AUTO_IDX_MASK);
	248	}
	249
	250	*ie_ptr = ie;
	251	return 0;
	252	}
	253
ea4c12f0 AP	254	/* This function parses beacon IEs, probe response IEs, association response IEs
ea4c12f0 AP	255	* from cfg80211_ap_settings->beacon and sets these IE to FW.
f31acabe	256	*/
ea4c12f0 AP	257	static int mwifiex_set_mgmt_beacon_data_ies(struct mwifiex_private *priv,
ea4c12f0 AP	258	struct cfg80211_beacon_data *data)
f31acabe	259	{
ea4c12f0	260	struct mwifiex_ie beacon_ie = NULL, pr_ie = NULL, *ar_ie = NULL;
f31acabe	261	u16 beacon_idx = MWIFIEX_AUTO_IDX_MASK, pr_idx = MWIFIEX_AUTO_IDX_MASK;
ea4c12f0	262	u16 ar_idx = MWIFIEX_AUTO_IDX_MASK;
f31acabe AP	263	int ret = 0;
f31acabe AP	264
8a6e2317 SP	265	if (data->beacon_ies && data->beacon_ies_len) {
	266	mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len,
	267	&beacon_ie, MGMT_MASK_BEACON,
	268	WLAN_OUI_MICROSOFT,
	269	WLAN_OUI_TYPE_MICROSOFT_WPS);
	270	mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len,
	271	&beacon_ie, MGMT_MASK_BEACON,
	272	WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P);
	273	}
f31acabe	274
8a6e2317 SP	275	if (data->proberesp_ies && data->proberesp_ies_len) {
	276	mwifiex_update_vs_ie(data->proberesp_ies,
	277	data->proberesp_ies_len, &pr_ie,
	278	MGMT_MASK_PROBE_RESP, WLAN_OUI_MICROSOFT,
	279	WLAN_OUI_TYPE_MICROSOFT_WPS);
	280	mwifiex_update_vs_ie(data->proberesp_ies,
	281	data->proberesp_ies_len, &pr_ie,
	282	MGMT_MASK_PROBE_RESP,
	283	WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P);
	284	}
f31acabe	285
8a6e2317 SP	286	if (data->assocresp_ies && data->assocresp_ies_len) {
	287	mwifiex_update_vs_ie(data->assocresp_ies,
	288	data->assocresp_ies_len, &ar_ie,
	289	MGMT_MASK_ASSOC_RESP \|
	290	MGMT_MASK_REASSOC_RESP,
	291	WLAN_OUI_MICROSOFT,
	292	WLAN_OUI_TYPE_MICROSOFT_WPS);
	293	mwifiex_update_vs_ie(data->assocresp_ies,
	294	data->assocresp_ies_len, &ar_ie,
	295	MGMT_MASK_ASSOC_RESP \|
	296	MGMT_MASK_REASSOC_RESP, WLAN_OUI_WFA,
	297	WLAN_OUI_TYPE_WFA_P2P);
	298	}
f31acabe AP	299
	300	if (beacon_ie \|\| pr_ie \|\| ar_ie) {
	301	ret = mwifiex_update_uap_custom_ie(priv, beacon_ie,
	302	&beacon_idx, pr_ie,
	303	&pr_idx, ar_ie, &ar_idx);
	304	if (ret)
	305	goto done;
	306	}
	307
	308	priv->beacon_idx = beacon_idx;
	309	priv->proberesp_idx = pr_idx;
	310	priv->assocresp_idx = ar_idx;
	311
	312	done:
	313	kfree(beacon_ie);
	314	kfree(pr_ie);
	315	kfree(ar_ie);
f31acabe AP	316
	317	return ret;
	318	}
40bbc21a	319
2ade5667 AP	320	/* This function parses head and tail IEs, from cfg80211_beacon_data and sets
2ade5667 AP	321	* these IE to FW.
ea4c12f0	322	*/
e4f59aca AP	323	static int mwifiex_uap_parse_tail_ies(struct mwifiex_private *priv,
e4f59aca AP	324	struct cfg80211_beacon_data *info)
ea4c12f0 AP	325	{
ea4c12f0 AP	326	struct mwifiex_ie *gen_ie;
e4f59aca AP	327	struct ieee_types_header *hdr;
e4f59aca AP	328	struct ieee80211_vendor_ie *vendorhdr;
2ade5667	329	u16 gen_idx = MWIFIEX_AUTO_IDX_MASK, ie_len = 0;
e4f59aca AP	330	int left_len, parsed_len = 0;
	331
	332	if (!info->tail \|\| !info->tail_len)
	333	return 0;
ea4c12f0	334
2ade5667 AP	335	gen_ie = kzalloc(sizeof(*gen_ie), GFP_KERNEL);
	336	if (!gen_ie)
	337	return -ENOMEM;
ea4c12f0	338
e4f59aca AP	339	left_len = info->tail_len;
	340
	341	/* Many IEs are generated in FW by parsing bss configuration.
	342	* Let's not add them here; else we may end up duplicating these IEs
	343	*/
	344	while (left_len > sizeof(struct ieee_types_header)) {
	345	hdr = (void *)(info->tail + parsed_len);
	346	switch (hdr->element_id) {
	347	case WLAN_EID_SSID:
	348	case WLAN_EID_SUPP_RATES:
	349	case WLAN_EID_COUNTRY:
	350	case WLAN_EID_PWR_CONSTRAINT:
	351	case WLAN_EID_EXT_SUPP_RATES:
	352	case WLAN_EID_HT_CAPABILITY:
	353	case WLAN_EID_HT_OPERATION:
	354	case WLAN_EID_VHT_CAPABILITY:
	355	case WLAN_EID_VHT_OPERATION:
	356	case WLAN_EID_VENDOR_SPECIFIC:
	357	break;
	358	default:
	359	memcpy(gen_ie->ie_buffer + ie_len, hdr,
	360	hdr->len + sizeof(struct ieee_types_header));
	361	ie_len += hdr->len + sizeof(struct ieee_types_header);
	362	break;
ea4c12f0	363	}
e4f59aca AP	364	left_len -= hdr->len + sizeof(struct ieee_types_header);
	365	parsed_len += hdr->len + sizeof(struct ieee_types_header);
	366	}
ea4c12f0	367
e4f59aca AP	368	/* parse only WPA vendor IE from tail, WMM IE is configured by
	369	* bss_config command
	370	*/
	371	vendorhdr = (void *)cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
ea4c12f0	372	WLAN_OUI_TYPE_MICROSOFT_WPA,
e4f59aca AP	373	info->tail, info->tail_len);
	374	if (vendorhdr) {
	375	memcpy(gen_ie->ie_buffer + ie_len, vendorhdr,
	376	vendorhdr->len + sizeof(struct ieee_types_header));
	377	ie_len += vendorhdr->len + sizeof(struct ieee_types_header);
	378	}
7d652034	379
e4f59aca AP	380	if (!ie_len) {
	381	kfree(gen_ie);
	382	return 0;
2ade5667	383	}
ea4c12f0	384
e4f59aca AP	385	gen_ie->ie_index = cpu_to_le16(gen_idx);
	386	gen_ie->mgmt_subtype_mask = cpu_to_le16(MGMT_MASK_BEACON \|
	387	MGMT_MASK_PROBE_RESP \|
	388	MGMT_MASK_ASSOC_RESP);
	389	gen_ie->ie_length = cpu_to_le16(ie_len);
	390
	391	if (mwifiex_update_uap_custom_ie(priv, gen_ie, &gen_idx, NULL, NULL,
	392	NULL, NULL)) {
	393	kfree(gen_ie);
	394	return -1;
ea4c12f0 AP	395	}
ea4c12f0 AP	396
e4f59aca	397	priv->gen_idx = gen_idx;
2ade5667 AP	398	kfree(gen_ie);
	399	return 0;
	400	}
	401
	402	/* This function parses different IEs-head & tail IEs, beacon IEs,
	403	* probe response IEs, association response IEs from cfg80211_ap_settings
	404	* function and sets these IE to FW.
	405	*/
	406	int mwifiex_set_mgmt_ies(struct mwifiex_private *priv,
	407	struct cfg80211_beacon_data *info)
	408	{
	409	int ret;
	410
e4f59aca	411	ret = mwifiex_uap_parse_tail_ies(priv, info);
8b2c621c JL	412
8b2c621c JL	413	if (ret)
2ade5667 AP	414	return ret;
2ade5667 AP	415
ea4c12f0 AP	416	return mwifiex_set_mgmt_beacon_data_ies(priv, info);
	417	}
	418
40bbc21a AP	419	/* This function removes management IE set */
	420	int mwifiex_del_mgmt_ies(struct mwifiex_private *priv)
	421	{
	422	struct mwifiex_ie beacon_ie = NULL, pr_ie = NULL;
2ade5667	423	struct mwifiex_ie ar_ie = NULL, gen_ie = NULL;
40bbc21a AP	424	int ret = 0;
40bbc21a AP	425
2ade5667 AP	426	if (priv->gen_idx != MWIFIEX_AUTO_IDX_MASK) {
	427	gen_ie = kmalloc(sizeof(*gen_ie), GFP_KERNEL);
	428	if (!gen_ie)
40bbc21a AP	429	return -ENOMEM;
40bbc21a AP	430
2ade5667 AP	431	gen_ie->ie_index = cpu_to_le16(priv->gen_idx);
	432	gen_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
	433	gen_ie->ie_length = 0;
	434	if (mwifiex_update_uap_custom_ie(priv, gen_ie, &priv->gen_idx,
40bbc21a AP	435	NULL, &priv->proberesp_idx,
	436	NULL, &priv->assocresp_idx)) {
	437	ret = -1;
	438	goto done;
	439	}
	440
2ade5667	441	priv->gen_idx = MWIFIEX_AUTO_IDX_MASK;
40bbc21a AP	442	}
	443
	444	if (priv->beacon_idx != MWIFIEX_AUTO_IDX_MASK) {
	445	beacon_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
	446	if (!beacon_ie) {
	447	ret = -ENOMEM;
	448	goto done;
	449	}
	450	beacon_ie->ie_index = cpu_to_le16(priv->beacon_idx);
	451	beacon_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
	452	beacon_ie->ie_length = 0;
	453	}
	454	if (priv->proberesp_idx != MWIFIEX_AUTO_IDX_MASK) {
	455	pr_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
	456	if (!pr_ie) {
	457	ret = -ENOMEM;
	458	goto done;
	459	}
	460	pr_ie->ie_index = cpu_to_le16(priv->proberesp_idx);
	461	pr_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
	462	pr_ie->ie_length = 0;
	463	}
	464	if (priv->assocresp_idx != MWIFIEX_AUTO_IDX_MASK) {
	465	ar_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL);
	466	if (!ar_ie) {
	467	ret = -ENOMEM;
	468	goto done;
	469	}
	470	ar_ie->ie_index = cpu_to_le16(priv->assocresp_idx);
	471	ar_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK);
	472	ar_ie->ie_length = 0;
	473	}
	474
	475	if (beacon_ie \|\| pr_ie \|\| ar_ie)
	476	ret = mwifiex_update_uap_custom_ie(priv,
	477	beacon_ie, &priv->beacon_idx,
	478	pr_ie, &priv->proberesp_idx,
	479	ar_ie, &priv->assocresp_idx);
	480
	481	done:
b5c103f2	482	kfree(gen_ie);
40bbc21a AP	483	kfree(beacon_ie);
	484	kfree(pr_ie);
	485	kfree(ar_ie);
40bbc21a AP	486
	487	return ret;
	488	}