Commit | Line | Data |
---|---|---|
44d414db JB |
1 | /* |
2 | * HT handling | |
3 | * | |
4 | * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> | |
bacac545 JB |
5 | * Copyright 2002-2005, Instant802 Networks, Inc. |
6 | * Copyright 2005-2006, Devicescape Software, Inc. | |
44d414db JB |
7 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> |
8 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
9 | * Copyright 2007-2008, Intel Corporation | |
10 | * | |
11 | * This program is free software; you can redistribute it and/or modify | |
12 | * it under the terms of the GNU General Public License version 2 as | |
13 | * published by the Free Software Foundation. | |
14 | */ | |
15 | ||
16 | #include <linux/ieee80211.h> | |
17 | #include <net/wireless.h> | |
18 | #include <net/mac80211.h> | |
19 | #include "ieee80211_i.h" | |
20 | #include "sta_info.h" | |
bacac545 | 21 | #include "wme.h" |
44d414db | 22 | |
ae5eb026 JB |
23 | void ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_supported_band *sband, |
24 | struct ieee80211_ht_cap *ht_cap_ie, | |
d9fe60de | 25 | struct ieee80211_sta_ht_cap *ht_cap) |
44d414db | 26 | { |
ae5eb026 JB |
27 | u8 ampdu_info, tx_mcs_set_cap; |
28 | int i, max_tx_streams; | |
44d414db | 29 | |
d9fe60de | 30 | BUG_ON(!ht_cap); |
44d414db | 31 | |
d9fe60de | 32 | memset(ht_cap, 0, sizeof(*ht_cap)); |
44d414db | 33 | |
ae5eb026 JB |
34 | if (!ht_cap_ie) |
35 | return; | |
d9fe60de | 36 | |
ae5eb026 | 37 | ht_cap->ht_supported = true; |
d9fe60de | 38 | |
f16f33df | 39 | ht_cap->cap = le16_to_cpu(ht_cap_ie->cap_info) & sband->ht_cap.cap; |
ae5eb026 JB |
40 | ht_cap->cap &= ~IEEE80211_HT_CAP_SM_PS; |
41 | ht_cap->cap |= sband->ht_cap.cap & IEEE80211_HT_CAP_SM_PS; | |
d9fe60de | 42 | |
ae5eb026 JB |
43 | ampdu_info = ht_cap_ie->ampdu_params_info; |
44 | ht_cap->ampdu_factor = | |
45 | ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR; | |
46 | ht_cap->ampdu_density = | |
47 | (ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2; | |
44d414db | 48 | |
d9fe60de JB |
49 | /* own MCS TX capabilities */ |
50 | tx_mcs_set_cap = sband->ht_cap.mcs.tx_params; | |
51 | ||
d9fe60de JB |
52 | /* can we TX with MCS rates? */ |
53 | if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED)) | |
ae5eb026 | 54 | return; |
d9fe60de JB |
55 | |
56 | /* Counting from 0, therefore +1 */ | |
57 | if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF) | |
58 | max_tx_streams = | |
59 | ((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK) | |
60 | >> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1; | |
61 | else | |
62 | max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS; | |
63 | ||
64 | /* | |
65 | * 802.11n D5.0 20.3.5 / 20.6 says: | |
66 | * - indices 0 to 7 and 32 are single spatial stream | |
67 | * - 8 to 31 are multiple spatial streams using equal modulation | |
68 | * [8..15 for two streams, 16..23 for three and 24..31 for four] | |
69 | * - remainder are multiple spatial streams using unequal modulation | |
70 | */ | |
71 | for (i = 0; i < max_tx_streams; i++) | |
ae5eb026 JB |
72 | ht_cap->mcs.rx_mask[i] = |
73 | sband->ht_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i]; | |
d9fe60de JB |
74 | |
75 | if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION) | |
76 | for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE; | |
77 | i < IEEE80211_HT_MCS_MASK_LEN; i++) | |
ae5eb026 | 78 | ht_cap->mcs.rx_mask[i] = |
d9fe60de | 79 | sband->ht_cap.mcs.rx_mask[i] & |
ae5eb026 | 80 | ht_cap_ie->mcs.rx_mask[i]; |
d9fe60de JB |
81 | |
82 | /* handle MCS rate 32 too */ | |
ae5eb026 JB |
83 | if (sband->ht_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1) |
84 | ht_cap->mcs.rx_mask[32/8] |= 1; | |
85 | } | |
86 | ||
87 | /* | |
88 | * ieee80211_enable_ht should be called only after the operating band | |
89 | * has been determined as ht configuration depends on the hw's | |
90 | * HT abilities for a specific band. | |
91 | */ | |
92 | u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, | |
93 | struct ieee80211_ht_info *hti, | |
94 | u16 ap_ht_cap_flags) | |
95 | { | |
96 | struct ieee80211_local *local = sdata->local; | |
97 | struct ieee80211_supported_band *sband; | |
98 | struct ieee80211_bss_ht_conf ht; | |
99 | u32 changed = 0; | |
100 | bool enable_ht = true, ht_changed; | |
094d05dc | 101 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; |
ae5eb026 JB |
102 | |
103 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
104 | ||
105 | memset(&ht, 0, sizeof(ht)); | |
106 | ||
107 | /* HT is not supported */ | |
108 | if (!sband->ht_cap.ht_supported) | |
109 | enable_ht = false; | |
110 | ||
111 | /* check that channel matches the right operating channel */ | |
112 | if (local->hw.conf.channel->center_freq != | |
113 | ieee80211_channel_to_frequency(hti->control_chan)) | |
114 | enable_ht = false; | |
115 | ||
094d05dc S |
116 | if (enable_ht) { |
117 | channel_type = NL80211_CHAN_HT20; | |
118 | ||
119 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && | |
120 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && | |
121 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
122 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
123 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
124 | channel_type = NL80211_CHAN_HT40PLUS; | |
125 | break; | |
126 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
127 | channel_type = NL80211_CHAN_HT40MINUS; | |
128 | break; | |
129 | } | |
130 | } | |
131 | } | |
132 | ||
285256a5 | 133 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || |
4797938c | 134 | channel_type != local->hw.conf.channel_type; |
094d05dc S |
135 | |
136 | local->oper_channel_type = channel_type; | |
094d05dc | 137 | |
4797938c JB |
138 | if (ht_changed) { |
139 | /* channel_type change automatically detected */ | |
140 | ieee80211_hw_config(local, 0); | |
141 | } | |
ae5eb026 JB |
142 | |
143 | /* disable HT */ | |
144 | if (!enable_ht) | |
145 | return 0; | |
094d05dc | 146 | |
ae5eb026 | 147 | ht.operation_mode = le16_to_cpu(hti->operation_mode); |
d9fe60de | 148 | |
d9fe60de | 149 | /* if bss configuration changed store the new one */ |
ae5eb026 | 150 | if (memcmp(&sdata->vif.bss_conf.ht, &ht, sizeof(ht))) { |
d9fe60de | 151 | changed |= BSS_CHANGED_HT; |
ae5eb026 | 152 | sdata->vif.bss_conf.ht = ht; |
d9fe60de JB |
153 | } |
154 | ||
155 | return changed; | |
44d414db JB |
156 | } |
157 | ||
de1ede7a JB |
158 | static void ieee80211_send_addba_request(struct ieee80211_sub_if_data *sdata, |
159 | const u8 *da, u16 tid, | |
160 | u8 dialog_token, u16 start_seq_num, | |
161 | u16 agg_size, u16 timeout) | |
44d414db JB |
162 | { |
163 | struct ieee80211_local *local = sdata->local; | |
164 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
165 | struct sk_buff *skb; | |
166 | struct ieee80211_mgmt *mgmt; | |
167 | u16 capab; | |
168 | ||
169 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); | |
170 | ||
171 | if (!skb) { | |
172 | printk(KERN_ERR "%s: failed to allocate buffer " | |
173 | "for addba request frame\n", sdata->dev->name); | |
174 | return; | |
175 | } | |
176 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
177 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
178 | memset(mgmt, 0, 24); | |
179 | memcpy(mgmt->da, da, ETH_ALEN); | |
180 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); | |
05c914fe | 181 | if (sdata->vif.type == NL80211_IFTYPE_AP) |
44d414db JB |
182 | memcpy(mgmt->bssid, sdata->dev->dev_addr, ETH_ALEN); |
183 | else | |
184 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
185 | ||
186 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
187 | IEEE80211_STYPE_ACTION); | |
188 | ||
189 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_req)); | |
190 | ||
191 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
192 | mgmt->u.action.u.addba_req.action_code = WLAN_ACTION_ADDBA_REQ; | |
193 | ||
194 | mgmt->u.action.u.addba_req.dialog_token = dialog_token; | |
195 | capab = (u16)(1 << 1); /* bit 1 aggregation policy */ | |
196 | capab |= (u16)(tid << 2); /* bit 5:2 TID number */ | |
197 | capab |= (u16)(agg_size << 6); /* bit 15:6 max size of aggergation */ | |
198 | ||
199 | mgmt->u.action.u.addba_req.capab = cpu_to_le16(capab); | |
200 | ||
201 | mgmt->u.action.u.addba_req.timeout = cpu_to_le16(timeout); | |
202 | mgmt->u.action.u.addba_req.start_seq_num = | |
203 | cpu_to_le16(start_seq_num << 4); | |
204 | ||
e50db65c | 205 | ieee80211_tx_skb(sdata, skb, 0); |
44d414db JB |
206 | } |
207 | ||
de1ede7a JB |
208 | static void ieee80211_send_addba_resp(struct ieee80211_sub_if_data *sdata, u8 *da, u16 tid, |
209 | u8 dialog_token, u16 status, u16 policy, | |
210 | u16 buf_size, u16 timeout) | |
211 | { | |
212 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
213 | struct ieee80211_local *local = sdata->local; | |
214 | struct sk_buff *skb; | |
215 | struct ieee80211_mgmt *mgmt; | |
216 | u16 capab; | |
217 | ||
218 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); | |
219 | ||
220 | if (!skb) { | |
221 | printk(KERN_DEBUG "%s: failed to allocate buffer " | |
222 | "for addba resp frame\n", sdata->dev->name); | |
223 | return; | |
224 | } | |
225 | ||
226 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
227 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
228 | memset(mgmt, 0, 24); | |
229 | memcpy(mgmt->da, da, ETH_ALEN); | |
230 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); | |
05c914fe | 231 | if (sdata->vif.type == NL80211_IFTYPE_AP) |
de1ede7a JB |
232 | memcpy(mgmt->bssid, sdata->dev->dev_addr, ETH_ALEN); |
233 | else | |
234 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
235 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
236 | IEEE80211_STYPE_ACTION); | |
237 | ||
238 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_resp)); | |
239 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
240 | mgmt->u.action.u.addba_resp.action_code = WLAN_ACTION_ADDBA_RESP; | |
241 | mgmt->u.action.u.addba_resp.dialog_token = dialog_token; | |
242 | ||
243 | capab = (u16)(policy << 1); /* bit 1 aggregation policy */ | |
244 | capab |= (u16)(tid << 2); /* bit 5:2 TID number */ | |
245 | capab |= (u16)(buf_size << 6); /* bit 15:6 max size of aggregation */ | |
246 | ||
247 | mgmt->u.action.u.addba_resp.capab = cpu_to_le16(capab); | |
248 | mgmt->u.action.u.addba_resp.timeout = cpu_to_le16(timeout); | |
249 | mgmt->u.action.u.addba_resp.status = cpu_to_le16(status); | |
250 | ||
e50db65c | 251 | ieee80211_tx_skb(sdata, skb, 0); |
de1ede7a JB |
252 | } |
253 | ||
254 | static void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata, | |
255 | const u8 *da, u16 tid, | |
256 | u16 initiator, u16 reason_code) | |
44d414db JB |
257 | { |
258 | struct ieee80211_local *local = sdata->local; | |
259 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
260 | struct sk_buff *skb; | |
261 | struct ieee80211_mgmt *mgmt; | |
262 | u16 params; | |
263 | ||
264 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); | |
265 | ||
266 | if (!skb) { | |
267 | printk(KERN_ERR "%s: failed to allocate buffer " | |
268 | "for delba frame\n", sdata->dev->name); | |
269 | return; | |
270 | } | |
271 | ||
272 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
273 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
274 | memset(mgmt, 0, 24); | |
275 | memcpy(mgmt->da, da, ETH_ALEN); | |
276 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); | |
05c914fe | 277 | if (sdata->vif.type == NL80211_IFTYPE_AP) |
44d414db JB |
278 | memcpy(mgmt->bssid, sdata->dev->dev_addr, ETH_ALEN); |
279 | else | |
280 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
281 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
282 | IEEE80211_STYPE_ACTION); | |
283 | ||
284 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba)); | |
285 | ||
286 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
287 | mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA; | |
288 | params = (u16)(initiator << 11); /* bit 11 initiator */ | |
289 | params |= (u16)(tid << 12); /* bit 15:12 TID number */ | |
290 | ||
291 | mgmt->u.action.u.delba.params = cpu_to_le16(params); | |
292 | mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code); | |
293 | ||
e50db65c | 294 | ieee80211_tx_skb(sdata, skb, 0); |
44d414db JB |
295 | } |
296 | ||
297 | void ieee80211_send_bar(struct ieee80211_sub_if_data *sdata, u8 *ra, u16 tid, u16 ssn) | |
298 | { | |
299 | struct ieee80211_local *local = sdata->local; | |
300 | struct sk_buff *skb; | |
301 | struct ieee80211_bar *bar; | |
302 | u16 bar_control = 0; | |
303 | ||
304 | skb = dev_alloc_skb(sizeof(*bar) + local->hw.extra_tx_headroom); | |
305 | if (!skb) { | |
306 | printk(KERN_ERR "%s: failed to allocate buffer for " | |
307 | "bar frame\n", sdata->dev->name); | |
308 | return; | |
309 | } | |
310 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
311 | bar = (struct ieee80211_bar *)skb_put(skb, sizeof(*bar)); | |
312 | memset(bar, 0, sizeof(*bar)); | |
313 | bar->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL | | |
314 | IEEE80211_STYPE_BACK_REQ); | |
315 | memcpy(bar->ra, ra, ETH_ALEN); | |
316 | memcpy(bar->ta, sdata->dev->dev_addr, ETH_ALEN); | |
317 | bar_control |= (u16)IEEE80211_BAR_CTRL_ACK_POLICY_NORMAL; | |
318 | bar_control |= (u16)IEEE80211_BAR_CTRL_CBMTID_COMPRESSED_BA; | |
319 | bar_control |= (u16)(tid << 12); | |
320 | bar->control = cpu_to_le16(bar_control); | |
321 | bar->start_seq_num = cpu_to_le16(ssn); | |
322 | ||
e50db65c | 323 | ieee80211_tx_skb(sdata, skb, 0); |
44d414db JB |
324 | } |
325 | ||
326 | void ieee80211_sta_stop_rx_ba_session(struct ieee80211_sub_if_data *sdata, u8 *ra, u16 tid, | |
327 | u16 initiator, u16 reason) | |
328 | { | |
329 | struct ieee80211_local *local = sdata->local; | |
330 | struct ieee80211_hw *hw = &local->hw; | |
331 | struct sta_info *sta; | |
332 | int ret, i; | |
44d414db JB |
333 | |
334 | rcu_read_lock(); | |
335 | ||
336 | sta = sta_info_get(local, ra); | |
337 | if (!sta) { | |
338 | rcu_read_unlock(); | |
339 | return; | |
340 | } | |
341 | ||
342 | /* check if TID is in operational state */ | |
343 | spin_lock_bh(&sta->lock); | |
344 | if (sta->ampdu_mlme.tid_state_rx[tid] | |
345 | != HT_AGG_STATE_OPERATIONAL) { | |
346 | spin_unlock_bh(&sta->lock); | |
347 | rcu_read_unlock(); | |
348 | return; | |
349 | } | |
350 | sta->ampdu_mlme.tid_state_rx[tid] = | |
351 | HT_AGG_STATE_REQ_STOP_BA_MSK | | |
352 | (initiator << HT_AGG_STATE_INITIATOR_SHIFT); | |
353 | spin_unlock_bh(&sta->lock); | |
354 | ||
355 | /* stop HW Rx aggregation. ampdu_action existence | |
356 | * already verified in session init so we add the BUG_ON */ | |
357 | BUG_ON(!local->ops->ampdu_action); | |
358 | ||
359 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 JB |
360 | printk(KERN_DEBUG "Rx BA session stop requested for %pM tid %u\n", |
361 | ra, tid); | |
44d414db JB |
362 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
363 | ||
364 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_STOP, | |
17741cdc | 365 | &sta->sta, tid, NULL); |
44d414db JB |
366 | if (ret) |
367 | printk(KERN_DEBUG "HW problem - can not stop rx " | |
368 | "aggregation for tid %d\n", tid); | |
369 | ||
370 | /* shutdown timer has not expired */ | |
371 | if (initiator != WLAN_BACK_TIMER) | |
372 | del_timer_sync(&sta->ampdu_mlme.tid_rx[tid]->session_timer); | |
373 | ||
374 | /* check if this is a self generated aggregation halt */ | |
375 | if (initiator == WLAN_BACK_RECIPIENT || initiator == WLAN_BACK_TIMER) | |
376 | ieee80211_send_delba(sdata, ra, tid, 0, reason); | |
377 | ||
378 | /* free the reordering buffer */ | |
379 | for (i = 0; i < sta->ampdu_mlme.tid_rx[tid]->buf_size; i++) { | |
380 | if (sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i]) { | |
381 | /* release the reordered frames */ | |
382 | dev_kfree_skb(sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i]); | |
383 | sta->ampdu_mlme.tid_rx[tid]->stored_mpdu_num--; | |
384 | sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i] = NULL; | |
385 | } | |
386 | } | |
387 | /* free resources */ | |
388 | kfree(sta->ampdu_mlme.tid_rx[tid]->reorder_buf); | |
389 | kfree(sta->ampdu_mlme.tid_rx[tid]); | |
390 | sta->ampdu_mlme.tid_rx[tid] = NULL; | |
391 | sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_IDLE; | |
392 | ||
393 | rcu_read_unlock(); | |
394 | } | |
395 | ||
396 | ||
397 | /* | |
398 | * After sending add Block Ack request we activated a timer until | |
399 | * add Block Ack response will arrive from the recipient. | |
400 | * If this timer expires sta_addba_resp_timer_expired will be executed. | |
401 | */ | |
de1ede7a | 402 | static void sta_addba_resp_timer_expired(unsigned long data) |
44d414db JB |
403 | { |
404 | /* not an elegant detour, but there is no choice as the timer passes | |
405 | * only one argument, and both sta_info and TID are needed, so init | |
406 | * flow in sta_info_create gives the TID as data, while the timer_to_id | |
407 | * array gives the sta through container_of */ | |
408 | u16 tid = *(u8 *)data; | |
409 | struct sta_info *temp_sta = container_of((void *)data, | |
410 | struct sta_info, timer_to_tid[tid]); | |
411 | ||
412 | struct ieee80211_local *local = temp_sta->local; | |
413 | struct ieee80211_hw *hw = &local->hw; | |
414 | struct sta_info *sta; | |
415 | u8 *state; | |
416 | ||
417 | rcu_read_lock(); | |
418 | ||
17741cdc | 419 | sta = sta_info_get(local, temp_sta->sta.addr); |
44d414db JB |
420 | if (!sta) { |
421 | rcu_read_unlock(); | |
422 | return; | |
423 | } | |
424 | ||
425 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
426 | /* check if the TID waits for addBA response */ | |
427 | spin_lock_bh(&sta->lock); | |
428 | if (!(*state & HT_ADDBA_REQUESTED_MSK)) { | |
429 | spin_unlock_bh(&sta->lock); | |
430 | *state = HT_AGG_STATE_IDLE; | |
431 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
432 | printk(KERN_DEBUG "timer expired on tid %d but we are not " | |
433 | "expecting addBA response there", tid); | |
434 | #endif | |
435 | goto timer_expired_exit; | |
436 | } | |
437 | ||
438 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
439 | printk(KERN_DEBUG "addBA response timer expired on tid %d\n", tid); | |
440 | #endif | |
441 | ||
442 | /* go through the state check in stop_BA_session */ | |
443 | *state = HT_AGG_STATE_OPERATIONAL; | |
444 | spin_unlock_bh(&sta->lock); | |
17741cdc | 445 | ieee80211_stop_tx_ba_session(hw, temp_sta->sta.addr, tid, |
44d414db JB |
446 | WLAN_BACK_INITIATOR); |
447 | ||
448 | timer_expired_exit: | |
449 | rcu_read_unlock(); | |
450 | } | |
451 | ||
452 | void ieee80211_sta_tear_down_BA_sessions(struct ieee80211_sub_if_data *sdata, u8 *addr) | |
453 | { | |
454 | struct ieee80211_local *local = sdata->local; | |
455 | int i; | |
456 | ||
457 | for (i = 0; i < STA_TID_NUM; i++) { | |
458 | ieee80211_stop_tx_ba_session(&local->hw, addr, i, | |
459 | WLAN_BACK_INITIATOR); | |
460 | ieee80211_sta_stop_rx_ba_session(sdata, addr, i, | |
461 | WLAN_BACK_RECIPIENT, | |
462 | WLAN_REASON_QSTA_LEAVE_QBSS); | |
463 | } | |
464 | } | |
465 | ||
bacac545 JB |
466 | int ieee80211_start_tx_ba_session(struct ieee80211_hw *hw, u8 *ra, u16 tid) |
467 | { | |
468 | struct ieee80211_local *local = hw_to_local(hw); | |
469 | struct sta_info *sta; | |
470 | struct ieee80211_sub_if_data *sdata; | |
471 | u16 start_seq_num; | |
472 | u8 *state; | |
85b9e4fe | 473 | int ret = 0; |
bacac545 | 474 | |
8b30b1fe | 475 | if ((tid >= STA_TID_NUM) || !(hw->flags & IEEE80211_HW_AMPDU_AGGREGATION)) |
bacac545 JB |
476 | return -EINVAL; |
477 | ||
478 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 JB |
479 | printk(KERN_DEBUG "Open BA session requested for %pM tid %u\n", |
480 | ra, tid); | |
bacac545 JB |
481 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
482 | ||
483 | rcu_read_lock(); | |
484 | ||
485 | sta = sta_info_get(local, ra); | |
486 | if (!sta) { | |
487 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
488 | printk(KERN_DEBUG "Could not find the station\n"); | |
489 | #endif | |
490 | ret = -ENOENT; | |
491 | goto exit; | |
492 | } | |
493 | ||
494 | spin_lock_bh(&sta->lock); | |
495 | ||
496 | /* we have tried too many times, receiver does not want A-MPDU */ | |
497 | if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) { | |
498 | ret = -EBUSY; | |
499 | goto err_unlock_sta; | |
500 | } | |
501 | ||
502 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
503 | /* check if the TID is not in aggregation flow already */ | |
504 | if (*state != HT_AGG_STATE_IDLE) { | |
505 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
506 | printk(KERN_DEBUG "BA request denied - session is not " | |
507 | "idle on tid %u\n", tid); | |
508 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
509 | ret = -EAGAIN; | |
510 | goto err_unlock_sta; | |
511 | } | |
512 | ||
513 | /* prepare A-MPDU MLME for Tx aggregation */ | |
514 | sta->ampdu_mlme.tid_tx[tid] = | |
515 | kmalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC); | |
516 | if (!sta->ampdu_mlme.tid_tx[tid]) { | |
517 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
518 | if (net_ratelimit()) | |
519 | printk(KERN_ERR "allocate tx mlme to tid %d failed\n", | |
520 | tid); | |
521 | #endif | |
522 | ret = -ENOMEM; | |
523 | goto err_unlock_sta; | |
524 | } | |
525 | /* Tx timer */ | |
526 | sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.function = | |
527 | sta_addba_resp_timer_expired; | |
528 | sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.data = | |
529 | (unsigned long)&sta->timer_to_tid[tid]; | |
530 | init_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer); | |
531 | ||
8b30b1fe S |
532 | if (hw->ampdu_queues) { |
533 | /* create a new queue for this aggregation */ | |
534 | ret = ieee80211_ht_agg_queue_add(local, sta, tid); | |
bacac545 | 535 | |
8b30b1fe S |
536 | /* case no queue is available to aggregation |
537 | * don't switch to aggregation */ | |
538 | if (ret) { | |
bacac545 | 539 | #ifdef CONFIG_MAC80211_HT_DEBUG |
8b30b1fe S |
540 | printk(KERN_DEBUG "BA request denied - " |
541 | "queue unavailable for tid %d\n", tid); | |
bacac545 | 542 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
8b30b1fe S |
543 | goto err_unlock_queue; |
544 | } | |
bacac545 JB |
545 | } |
546 | sdata = sta->sdata; | |
547 | ||
548 | /* Ok, the Addba frame hasn't been sent yet, but if the driver calls the | |
549 | * call back right away, it must see that the flow has begun */ | |
550 | *state |= HT_ADDBA_REQUESTED_MSK; | |
551 | ||
552 | /* This is slightly racy because the queue isn't stopped */ | |
553 | start_seq_num = sta->tid_seq[tid]; | |
554 | ||
555 | if (local->ops->ampdu_action) | |
556 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_START, | |
17741cdc | 557 | &sta->sta, tid, &start_seq_num); |
bacac545 JB |
558 | |
559 | if (ret) { | |
560 | /* No need to requeue the packets in the agg queue, since we | |
561 | * held the tx lock: no packet could be enqueued to the newly | |
562 | * allocated queue */ | |
8b30b1fe S |
563 | if (hw->ampdu_queues) |
564 | ieee80211_ht_agg_queue_remove(local, sta, tid, 0); | |
bacac545 JB |
565 | #ifdef CONFIG_MAC80211_HT_DEBUG |
566 | printk(KERN_DEBUG "BA request denied - HW unavailable for" | |
567 | " tid %d\n", tid); | |
568 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
569 | *state = HT_AGG_STATE_IDLE; | |
570 | goto err_unlock_queue; | |
571 | } | |
572 | ||
573 | /* Will put all the packets in the new SW queue */ | |
8b30b1fe S |
574 | if (hw->ampdu_queues) |
575 | ieee80211_requeue(local, ieee802_1d_to_ac[tid]); | |
bacac545 JB |
576 | spin_unlock_bh(&sta->lock); |
577 | ||
578 | /* send an addBA request */ | |
579 | sta->ampdu_mlme.dialog_token_allocator++; | |
580 | sta->ampdu_mlme.tid_tx[tid]->dialog_token = | |
581 | sta->ampdu_mlme.dialog_token_allocator; | |
582 | sta->ampdu_mlme.tid_tx[tid]->ssn = start_seq_num; | |
583 | ||
584 | ||
585 | ieee80211_send_addba_request(sta->sdata, ra, tid, | |
586 | sta->ampdu_mlme.tid_tx[tid]->dialog_token, | |
587 | sta->ampdu_mlme.tid_tx[tid]->ssn, | |
588 | 0x40, 5000); | |
589 | /* activate the timer for the recipient's addBA response */ | |
590 | sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer.expires = | |
591 | jiffies + ADDBA_RESP_INTERVAL; | |
592 | add_timer(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer); | |
593 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
594 | printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid); | |
595 | #endif | |
596 | goto exit; | |
597 | ||
598 | err_unlock_queue: | |
599 | kfree(sta->ampdu_mlme.tid_tx[tid]); | |
600 | sta->ampdu_mlme.tid_tx[tid] = NULL; | |
601 | ret = -EBUSY; | |
602 | err_unlock_sta: | |
603 | spin_unlock_bh(&sta->lock); | |
604 | exit: | |
605 | rcu_read_unlock(); | |
606 | return ret; | |
607 | } | |
608 | EXPORT_SYMBOL(ieee80211_start_tx_ba_session); | |
609 | ||
610 | int ieee80211_stop_tx_ba_session(struct ieee80211_hw *hw, | |
611 | u8 *ra, u16 tid, | |
612 | enum ieee80211_back_parties initiator) | |
613 | { | |
614 | struct ieee80211_local *local = hw_to_local(hw); | |
615 | struct sta_info *sta; | |
616 | u8 *state; | |
617 | int ret = 0; | |
bacac545 JB |
618 | |
619 | if (tid >= STA_TID_NUM) | |
620 | return -EINVAL; | |
621 | ||
622 | rcu_read_lock(); | |
623 | sta = sta_info_get(local, ra); | |
624 | if (!sta) { | |
625 | rcu_read_unlock(); | |
626 | return -ENOENT; | |
627 | } | |
628 | ||
629 | /* check if the TID is in aggregation */ | |
630 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
631 | spin_lock_bh(&sta->lock); | |
632 | ||
633 | if (*state != HT_AGG_STATE_OPERATIONAL) { | |
634 | ret = -ENOENT; | |
635 | goto stop_BA_exit; | |
636 | } | |
637 | ||
638 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 JB |
639 | printk(KERN_DEBUG "Tx BA session stop requested for %pM tid %u\n", |
640 | ra, tid); | |
bacac545 JB |
641 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
642 | ||
8b30b1fe S |
643 | if (hw->ampdu_queues) |
644 | ieee80211_stop_queue(hw, sta->tid_to_tx_q[tid]); | |
bacac545 JB |
645 | |
646 | *state = HT_AGG_STATE_REQ_STOP_BA_MSK | | |
647 | (initiator << HT_AGG_STATE_INITIATOR_SHIFT); | |
648 | ||
649 | if (local->ops->ampdu_action) | |
650 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_TX_STOP, | |
17741cdc | 651 | &sta->sta, tid, NULL); |
bacac545 JB |
652 | |
653 | /* case HW denied going back to legacy */ | |
654 | if (ret) { | |
655 | WARN_ON(ret != -EBUSY); | |
656 | *state = HT_AGG_STATE_OPERATIONAL; | |
8b30b1fe S |
657 | if (hw->ampdu_queues) |
658 | ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]); | |
bacac545 JB |
659 | goto stop_BA_exit; |
660 | } | |
661 | ||
662 | stop_BA_exit: | |
663 | spin_unlock_bh(&sta->lock); | |
664 | rcu_read_unlock(); | |
665 | return ret; | |
666 | } | |
667 | EXPORT_SYMBOL(ieee80211_stop_tx_ba_session); | |
668 | ||
669 | void ieee80211_start_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u16 tid) | |
670 | { | |
671 | struct ieee80211_local *local = hw_to_local(hw); | |
672 | struct sta_info *sta; | |
673 | u8 *state; | |
bacac545 JB |
674 | |
675 | if (tid >= STA_TID_NUM) { | |
676 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
677 | printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n", | |
678 | tid, STA_TID_NUM); | |
679 | #endif | |
680 | return; | |
681 | } | |
682 | ||
683 | rcu_read_lock(); | |
684 | sta = sta_info_get(local, ra); | |
685 | if (!sta) { | |
686 | rcu_read_unlock(); | |
687 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 | 688 | printk(KERN_DEBUG "Could not find station: %pM\n", ra); |
bacac545 JB |
689 | #endif |
690 | return; | |
691 | } | |
692 | ||
693 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
694 | spin_lock_bh(&sta->lock); | |
695 | ||
696 | if (!(*state & HT_ADDBA_REQUESTED_MSK)) { | |
697 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
698 | printk(KERN_DEBUG "addBA was not requested yet, state is %d\n", | |
699 | *state); | |
700 | #endif | |
701 | spin_unlock_bh(&sta->lock); | |
702 | rcu_read_unlock(); | |
703 | return; | |
704 | } | |
705 | ||
706 | WARN_ON_ONCE(*state & HT_ADDBA_DRV_READY_MSK); | |
707 | ||
708 | *state |= HT_ADDBA_DRV_READY_MSK; | |
709 | ||
710 | if (*state == HT_AGG_STATE_OPERATIONAL) { | |
711 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
712 | printk(KERN_DEBUG "Aggregation is on for tid %d \n", tid); | |
713 | #endif | |
8b30b1fe S |
714 | if (hw->ampdu_queues) |
715 | ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]); | |
bacac545 JB |
716 | } |
717 | spin_unlock_bh(&sta->lock); | |
718 | rcu_read_unlock(); | |
719 | } | |
720 | EXPORT_SYMBOL(ieee80211_start_tx_ba_cb); | |
721 | ||
722 | void ieee80211_stop_tx_ba_cb(struct ieee80211_hw *hw, u8 *ra, u8 tid) | |
723 | { | |
724 | struct ieee80211_local *local = hw_to_local(hw); | |
725 | struct sta_info *sta; | |
726 | u8 *state; | |
727 | int agg_queue; | |
bacac545 JB |
728 | |
729 | if (tid >= STA_TID_NUM) { | |
730 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
731 | printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n", | |
732 | tid, STA_TID_NUM); | |
733 | #endif | |
734 | return; | |
735 | } | |
736 | ||
737 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 JB |
738 | printk(KERN_DEBUG "Stopping Tx BA session for %pM tid %d\n", |
739 | ra, tid); | |
bacac545 JB |
740 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
741 | ||
742 | rcu_read_lock(); | |
743 | sta = sta_info_get(local, ra); | |
744 | if (!sta) { | |
745 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
0c68ae26 | 746 | printk(KERN_DEBUG "Could not find station: %pM\n", ra); |
bacac545 JB |
747 | #endif |
748 | rcu_read_unlock(); | |
749 | return; | |
750 | } | |
751 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
752 | ||
753 | /* NOTE: no need to use sta->lock in this state check, as | |
754 | * ieee80211_stop_tx_ba_session will let only one stop call to | |
755 | * pass through per sta/tid | |
756 | */ | |
757 | if ((*state & HT_AGG_STATE_REQ_STOP_BA_MSK) == 0) { | |
758 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
759 | printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n"); | |
760 | #endif | |
761 | rcu_read_unlock(); | |
762 | return; | |
763 | } | |
764 | ||
765 | if (*state & HT_AGG_STATE_INITIATOR_MSK) | |
766 | ieee80211_send_delba(sta->sdata, ra, tid, | |
767 | WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE); | |
768 | ||
8b30b1fe S |
769 | if (hw->ampdu_queues) { |
770 | agg_queue = sta->tid_to_tx_q[tid]; | |
771 | ieee80211_ht_agg_queue_remove(local, sta, tid, 1); | |
772 | ||
773 | /* We just requeued the all the frames that were in the | |
774 | * removed queue, and since we might miss a softirq we do | |
775 | * netif_schedule_queue. ieee80211_wake_queue is not used | |
776 | * here as this queue is not necessarily stopped | |
777 | */ | |
778 | netif_schedule_queue(netdev_get_tx_queue(local->mdev, | |
779 | agg_queue)); | |
780 | } | |
bacac545 JB |
781 | spin_lock_bh(&sta->lock); |
782 | *state = HT_AGG_STATE_IDLE; | |
783 | sta->ampdu_mlme.addba_req_num[tid] = 0; | |
784 | kfree(sta->ampdu_mlme.tid_tx[tid]); | |
785 | sta->ampdu_mlme.tid_tx[tid] = NULL; | |
786 | spin_unlock_bh(&sta->lock); | |
787 | ||
788 | rcu_read_unlock(); | |
789 | } | |
790 | EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb); | |
791 | ||
792 | void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_hw *hw, | |
793 | const u8 *ra, u16 tid) | |
794 | { | |
795 | struct ieee80211_local *local = hw_to_local(hw); | |
796 | struct ieee80211_ra_tid *ra_tid; | |
797 | struct sk_buff *skb = dev_alloc_skb(0); | |
798 | ||
799 | if (unlikely(!skb)) { | |
800 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
801 | if (net_ratelimit()) | |
802 | printk(KERN_WARNING "%s: Not enough memory, " | |
803 | "dropping start BA session", skb->dev->name); | |
804 | #endif | |
805 | return; | |
806 | } | |
807 | ra_tid = (struct ieee80211_ra_tid *) &skb->cb; | |
808 | memcpy(&ra_tid->ra, ra, ETH_ALEN); | |
809 | ra_tid->tid = tid; | |
810 | ||
811 | skb->pkt_type = IEEE80211_ADDBA_MSG; | |
812 | skb_queue_tail(&local->skb_queue, skb); | |
813 | tasklet_schedule(&local->tasklet); | |
814 | } | |
815 | EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe); | |
816 | ||
817 | void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_hw *hw, | |
818 | const u8 *ra, u16 tid) | |
819 | { | |
820 | struct ieee80211_local *local = hw_to_local(hw); | |
821 | struct ieee80211_ra_tid *ra_tid; | |
822 | struct sk_buff *skb = dev_alloc_skb(0); | |
823 | ||
824 | if (unlikely(!skb)) { | |
825 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
826 | if (net_ratelimit()) | |
827 | printk(KERN_WARNING "%s: Not enough memory, " | |
828 | "dropping stop BA session", skb->dev->name); | |
829 | #endif | |
830 | return; | |
831 | } | |
832 | ra_tid = (struct ieee80211_ra_tid *) &skb->cb; | |
833 | memcpy(&ra_tid->ra, ra, ETH_ALEN); | |
834 | ra_tid->tid = tid; | |
835 | ||
836 | skb->pkt_type = IEEE80211_DELBA_MSG; | |
837 | skb_queue_tail(&local->skb_queue, skb); | |
838 | tasklet_schedule(&local->tasklet); | |
839 | } | |
840 | EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe); | |
de1ede7a JB |
841 | |
842 | /* | |
843 | * After accepting the AddBA Request we activated a timer, | |
844 | * resetting it after each frame that arrives from the originator. | |
845 | * if this timer expires ieee80211_sta_stop_rx_ba_session will be executed. | |
846 | */ | |
847 | static void sta_rx_agg_session_timer_expired(unsigned long data) | |
848 | { | |
849 | /* not an elegant detour, but there is no choice as the timer passes | |
850 | * only one argument, and various sta_info are needed here, so init | |
851 | * flow in sta_info_create gives the TID as data, while the timer_to_id | |
852 | * array gives the sta through container_of */ | |
853 | u8 *ptid = (u8 *)data; | |
854 | u8 *timer_to_id = ptid - *ptid; | |
855 | struct sta_info *sta = container_of(timer_to_id, struct sta_info, | |
856 | timer_to_tid[0]); | |
857 | ||
858 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
859 | printk(KERN_DEBUG "rx session timer expired on tid %d\n", (u16)*ptid); | |
860 | #endif | |
17741cdc | 861 | ieee80211_sta_stop_rx_ba_session(sta->sdata, sta->sta.addr, |
de1ede7a JB |
862 | (u16)*ptid, WLAN_BACK_TIMER, |
863 | WLAN_REASON_QSTA_TIMEOUT); | |
864 | } | |
865 | ||
866 | void ieee80211_process_addba_request(struct ieee80211_local *local, | |
867 | struct sta_info *sta, | |
868 | struct ieee80211_mgmt *mgmt, | |
869 | size_t len) | |
870 | { | |
871 | struct ieee80211_hw *hw = &local->hw; | |
872 | struct ieee80211_conf *conf = &hw->conf; | |
873 | struct tid_ampdu_rx *tid_agg_rx; | |
874 | u16 capab, tid, timeout, ba_policy, buf_size, start_seq_num, status; | |
875 | u8 dialog_token; | |
876 | int ret = -EOPNOTSUPP; | |
de1ede7a JB |
877 | |
878 | /* extract session parameters from addba request frame */ | |
879 | dialog_token = mgmt->u.action.u.addba_req.dialog_token; | |
880 | timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout); | |
881 | start_seq_num = | |
882 | le16_to_cpu(mgmt->u.action.u.addba_req.start_seq_num) >> 4; | |
883 | ||
884 | capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab); | |
885 | ba_policy = (capab & IEEE80211_ADDBA_PARAM_POLICY_MASK) >> 1; | |
886 | tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2; | |
887 | buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6; | |
888 | ||
889 | status = WLAN_STATUS_REQUEST_DECLINED; | |
890 | ||
891 | /* sanity check for incoming parameters: | |
892 | * check if configuration can support the BA policy | |
893 | * and if buffer size does not exceeds max value */ | |
ae5eb026 | 894 | /* XXX: check own ht delayed BA capability?? */ |
de1ede7a | 895 | if (((ba_policy != 1) |
ae5eb026 | 896 | && (!(sta->sta.ht_cap.cap & IEEE80211_HT_CAP_DELAY_BA))) |
de1ede7a JB |
897 | || (buf_size > IEEE80211_MAX_AMPDU_BUF)) { |
898 | status = WLAN_STATUS_INVALID_QOS_PARAM; | |
899 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
900 | if (net_ratelimit()) | |
901 | printk(KERN_DEBUG "AddBA Req with bad params from " | |
0c68ae26 JB |
902 | "%pM on tid %u. policy %d, buffer size %d\n", |
903 | mgmt->sa, tid, ba_policy, | |
de1ede7a JB |
904 | buf_size); |
905 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
906 | goto end_no_lock; | |
907 | } | |
908 | /* determine default buffer size */ | |
909 | if (buf_size == 0) { | |
910 | struct ieee80211_supported_band *sband; | |
911 | ||
912 | sband = local->hw.wiphy->bands[conf->channel->band]; | |
913 | buf_size = IEEE80211_MIN_AMPDU_BUF; | |
d9fe60de | 914 | buf_size = buf_size << sband->ht_cap.ampdu_factor; |
de1ede7a JB |
915 | } |
916 | ||
917 | ||
918 | /* examine state machine */ | |
919 | spin_lock_bh(&sta->lock); | |
920 | ||
921 | if (sta->ampdu_mlme.tid_state_rx[tid] != HT_AGG_STATE_IDLE) { | |
922 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
923 | if (net_ratelimit()) | |
924 | printk(KERN_DEBUG "unexpected AddBA Req from " | |
0c68ae26 JB |
925 | "%pM on tid %u\n", |
926 | mgmt->sa, tid); | |
de1ede7a JB |
927 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
928 | goto end; | |
929 | } | |
930 | ||
931 | /* prepare A-MPDU MLME for Rx aggregation */ | |
932 | sta->ampdu_mlme.tid_rx[tid] = | |
933 | kmalloc(sizeof(struct tid_ampdu_rx), GFP_ATOMIC); | |
934 | if (!sta->ampdu_mlme.tid_rx[tid]) { | |
935 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
936 | if (net_ratelimit()) | |
937 | printk(KERN_ERR "allocate rx mlme to tid %d failed\n", | |
938 | tid); | |
939 | #endif | |
940 | goto end; | |
941 | } | |
942 | /* rx timer */ | |
943 | sta->ampdu_mlme.tid_rx[tid]->session_timer.function = | |
944 | sta_rx_agg_session_timer_expired; | |
945 | sta->ampdu_mlme.tid_rx[tid]->session_timer.data = | |
946 | (unsigned long)&sta->timer_to_tid[tid]; | |
947 | init_timer(&sta->ampdu_mlme.tid_rx[tid]->session_timer); | |
948 | ||
949 | tid_agg_rx = sta->ampdu_mlme.tid_rx[tid]; | |
950 | ||
951 | /* prepare reordering buffer */ | |
952 | tid_agg_rx->reorder_buf = | |
953 | kmalloc(buf_size * sizeof(struct sk_buff *), GFP_ATOMIC); | |
954 | if (!tid_agg_rx->reorder_buf) { | |
955 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
956 | if (net_ratelimit()) | |
957 | printk(KERN_ERR "can not allocate reordering buffer " | |
958 | "to tid %d\n", tid); | |
959 | #endif | |
960 | kfree(sta->ampdu_mlme.tid_rx[tid]); | |
961 | goto end; | |
962 | } | |
963 | memset(tid_agg_rx->reorder_buf, 0, | |
964 | buf_size * sizeof(struct sk_buff *)); | |
965 | ||
966 | if (local->ops->ampdu_action) | |
967 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_START, | |
17741cdc | 968 | &sta->sta, tid, &start_seq_num); |
de1ede7a JB |
969 | #ifdef CONFIG_MAC80211_HT_DEBUG |
970 | printk(KERN_DEBUG "Rx A-MPDU request on tid %d result %d\n", tid, ret); | |
971 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
972 | ||
973 | if (ret) { | |
974 | kfree(tid_agg_rx->reorder_buf); | |
975 | kfree(tid_agg_rx); | |
976 | sta->ampdu_mlme.tid_rx[tid] = NULL; | |
977 | goto end; | |
978 | } | |
979 | ||
980 | /* change state and send addba resp */ | |
981 | sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_OPERATIONAL; | |
982 | tid_agg_rx->dialog_token = dialog_token; | |
983 | tid_agg_rx->ssn = start_seq_num; | |
984 | tid_agg_rx->head_seq_num = start_seq_num; | |
985 | tid_agg_rx->buf_size = buf_size; | |
986 | tid_agg_rx->timeout = timeout; | |
987 | tid_agg_rx->stored_mpdu_num = 0; | |
988 | status = WLAN_STATUS_SUCCESS; | |
989 | end: | |
990 | spin_unlock_bh(&sta->lock); | |
991 | ||
992 | end_no_lock: | |
17741cdc | 993 | ieee80211_send_addba_resp(sta->sdata, sta->sta.addr, tid, |
de1ede7a JB |
994 | dialog_token, status, 1, buf_size, timeout); |
995 | } | |
996 | ||
997 | void ieee80211_process_addba_resp(struct ieee80211_local *local, | |
998 | struct sta_info *sta, | |
999 | struct ieee80211_mgmt *mgmt, | |
1000 | size_t len) | |
1001 | { | |
1002 | struct ieee80211_hw *hw = &local->hw; | |
1003 | u16 capab; | |
8469cdef | 1004 | u16 tid, start_seq_num; |
de1ede7a JB |
1005 | u8 *state; |
1006 | ||
1007 | capab = le16_to_cpu(mgmt->u.action.u.addba_resp.capab); | |
1008 | tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2; | |
1009 | ||
1010 | state = &sta->ampdu_mlme.tid_state_tx[tid]; | |
1011 | ||
1012 | spin_lock_bh(&sta->lock); | |
1013 | ||
1014 | if (!(*state & HT_ADDBA_REQUESTED_MSK)) { | |
1015 | spin_unlock_bh(&sta->lock); | |
1016 | return; | |
1017 | } | |
1018 | ||
1019 | if (mgmt->u.action.u.addba_resp.dialog_token != | |
1020 | sta->ampdu_mlme.tid_tx[tid]->dialog_token) { | |
1021 | spin_unlock_bh(&sta->lock); | |
1022 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1023 | printk(KERN_DEBUG "wrong addBA response token, tid %d\n", tid); | |
1024 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1025 | return; | |
1026 | } | |
1027 | ||
1028 | del_timer_sync(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer); | |
1029 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1030 | printk(KERN_DEBUG "switched off addBA timer for tid %d \n", tid); | |
1031 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1032 | if (le16_to_cpu(mgmt->u.action.u.addba_resp.status) | |
1033 | == WLAN_STATUS_SUCCESS) { | |
1034 | *state |= HT_ADDBA_RECEIVED_MSK; | |
1035 | sta->ampdu_mlme.addba_req_num[tid] = 0; | |
1036 | ||
8b30b1fe S |
1037 | if (*state == HT_AGG_STATE_OPERATIONAL && |
1038 | local->hw.ampdu_queues) | |
de1ede7a JB |
1039 | ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]); |
1040 | ||
8469cdef S |
1041 | if (local->ops->ampdu_action) { |
1042 | (void)local->ops->ampdu_action(hw, | |
1043 | IEEE80211_AMPDU_TX_RESUME, | |
1044 | &sta->sta, tid, &start_seq_num); | |
1045 | } | |
1046 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1047 | printk(KERN_DEBUG "Resuming TX aggregation for tid %d\n", tid); | |
1048 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
de1ede7a JB |
1049 | spin_unlock_bh(&sta->lock); |
1050 | } else { | |
1051 | sta->ampdu_mlme.addba_req_num[tid]++; | |
1052 | /* this will allow the state check in stop_BA_session */ | |
1053 | *state = HT_AGG_STATE_OPERATIONAL; | |
1054 | spin_unlock_bh(&sta->lock); | |
17741cdc | 1055 | ieee80211_stop_tx_ba_session(hw, sta->sta.addr, tid, |
de1ede7a JB |
1056 | WLAN_BACK_INITIATOR); |
1057 | } | |
1058 | } | |
1059 | ||
1060 | void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata, | |
1061 | struct sta_info *sta, | |
1062 | struct ieee80211_mgmt *mgmt, size_t len) | |
1063 | { | |
1064 | struct ieee80211_local *local = sdata->local; | |
1065 | u16 tid, params; | |
1066 | u16 initiator; | |
de1ede7a JB |
1067 | |
1068 | params = le16_to_cpu(mgmt->u.action.u.delba.params); | |
1069 | tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12; | |
1070 | initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11; | |
1071 | ||
1072 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1073 | if (net_ratelimit()) | |
0c68ae26 JB |
1074 | printk(KERN_DEBUG "delba from %pM (%s) tid %d reason code %d\n", |
1075 | mgmt->sa, initiator ? "initiator" : "recipient", tid, | |
de1ede7a JB |
1076 | mgmt->u.action.u.delba.reason_code); |
1077 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1078 | ||
1079 | if (initiator == WLAN_BACK_INITIATOR) | |
17741cdc | 1080 | ieee80211_sta_stop_rx_ba_session(sdata, sta->sta.addr, tid, |
de1ede7a JB |
1081 | WLAN_BACK_INITIATOR, 0); |
1082 | else { /* WLAN_BACK_RECIPIENT */ | |
1083 | spin_lock_bh(&sta->lock); | |
1084 | sta->ampdu_mlme.tid_state_tx[tid] = | |
1085 | HT_AGG_STATE_OPERATIONAL; | |
1086 | spin_unlock_bh(&sta->lock); | |
17741cdc | 1087 | ieee80211_stop_tx_ba_session(&local->hw, sta->sta.addr, tid, |
de1ede7a JB |
1088 | WLAN_BACK_RECIPIENT); |
1089 | } | |
1090 | } |