iwlegacy: rename priv to il
[deliverable/linux.git] / drivers / net / wireless / iwlegacy / iwl-scan.c
1 /******************************************************************************
2 *
3 * GPL LICENSE SUMMARY
4 *
5 * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of version 2 of the GNU General Public License as
9 * published by the Free Software Foundation.
10 *
11 * This program is distributed in the hope that it will be useful, but
12 * WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
19 * USA
20 *
21 * The full GNU General Public License is included in this distribution
22 * in the file called LICENSE.GPL.
23 *
24 * Contact Information:
25 * Intel Linux Wireless <ilw@linux.intel.com>
26 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
27 *****************************************************************************/
28 #include <linux/slab.h>
29 #include <linux/types.h>
30 #include <linux/etherdevice.h>
31 #include <net/mac80211.h>
32
33 #include "iwl-eeprom.h"
34 #include "iwl-dev.h"
35 #include "iwl-core.h"
36 #include "iwl-sta.h"
37 #include "iwl-io.h"
38 #include "iwl-helpers.h"
39
40 /* For active scan, listen ACTIVE_DWELL_TIME (msec) on each channel after
41 * sending probe req. This should be set long enough to hear probe responses
42 * from more than one AP. */
43 #define IL_ACTIVE_DWELL_TIME_24 (30) /* all times in msec */
44 #define IL_ACTIVE_DWELL_TIME_52 (20)
45
46 #define IL_ACTIVE_DWELL_FACTOR_24GHZ (3)
47 #define IL_ACTIVE_DWELL_FACTOR_52GHZ (2)
48
49 /* For passive scan, listen PASSIVE_DWELL_TIME (msec) on each channel.
50 * Must be set longer than active dwell time.
51 * For the most reliable scan, set > AP beacon interval (typically 100msec). */
52 #define IL_PASSIVE_DWELL_TIME_24 (20) /* all times in msec */
53 #define IL_PASSIVE_DWELL_TIME_52 (10)
54 #define IL_PASSIVE_DWELL_BASE (100)
55 #define IL_CHANNEL_TUNE_TIME 5
56
57 static int il_send_scan_abort(struct il_priv *il)
58 {
59 int ret;
60 struct il_rx_packet *pkt;
61 struct il_host_cmd cmd = {
62 .id = REPLY_SCAN_ABORT_CMD,
63 .flags = CMD_WANT_SKB,
64 };
65
66 /* Exit instantly with error when device is not ready
67 * to receive scan abort command or it does not perform
68 * hardware scan currently */
69 if (!test_bit(STATUS_READY, &il->status) ||
70 !test_bit(STATUS_GEO_CONFIGURED, &il->status) ||
71 !test_bit(STATUS_SCAN_HW, &il->status) ||
72 test_bit(STATUS_FW_ERROR, &il->status) ||
73 test_bit(STATUS_EXIT_PENDING, &il->status))
74 return -EIO;
75
76 ret = il_send_cmd_sync(il, &cmd);
77 if (ret)
78 return ret;
79
80 pkt = (struct il_rx_packet *)cmd.reply_page;
81 if (pkt->u.status != CAN_ABORT_STATUS) {
82 /* The scan abort will return 1 for success or
83 * 2 for "failure". A failure condition can be
84 * due to simply not being in an active scan which
85 * can occur if we send the scan abort before we
86 * the microcode has notified us that a scan is
87 * completed. */
88 IL_DEBUG_SCAN(il, "SCAN_ABORT ret %d.\n", pkt->u.status);
89 ret = -EIO;
90 }
91
92 il_free_pages(il, cmd.reply_page);
93 return ret;
94 }
95
96 static void il_complete_scan(struct il_priv *il, bool aborted)
97 {
98 /* check if scan was requested from mac80211 */
99 if (il->scan_request) {
100 IL_DEBUG_SCAN(il, "Complete scan in mac80211\n");
101 ieee80211_scan_completed(il->hw, aborted);
102 }
103
104 il->scan_vif = NULL;
105 il->scan_request = NULL;
106 }
107
108 void il_force_scan_end(struct il_priv *il)
109 {
110 lockdep_assert_held(&il->mutex);
111
112 if (!test_bit(STATUS_SCANNING, &il->status)) {
113 IL_DEBUG_SCAN(il, "Forcing scan end while not scanning\n");
114 return;
115 }
116
117 IL_DEBUG_SCAN(il, "Forcing scan end\n");
118 clear_bit(STATUS_SCANNING, &il->status);
119 clear_bit(STATUS_SCAN_HW, &il->status);
120 clear_bit(STATUS_SCAN_ABORTING, &il->status);
121 il_complete_scan(il, true);
122 }
123
124 static void il_do_scan_abort(struct il_priv *il)
125 {
126 int ret;
127
128 lockdep_assert_held(&il->mutex);
129
130 if (!test_bit(STATUS_SCANNING, &il->status)) {
131 IL_DEBUG_SCAN(il, "Not performing scan to abort\n");
132 return;
133 }
134
135 if (test_and_set_bit(STATUS_SCAN_ABORTING, &il->status)) {
136 IL_DEBUG_SCAN(il, "Scan abort in progress\n");
137 return;
138 }
139
140 ret = il_send_scan_abort(il);
141 if (ret) {
142 IL_DEBUG_SCAN(il, "Send scan abort failed %d\n", ret);
143 il_force_scan_end(il);
144 } else
145 IL_DEBUG_SCAN(il, "Successfully send scan abort\n");
146 }
147
148 /**
149 * il_scan_cancel - Cancel any currently executing HW scan
150 */
151 int il_scan_cancel(struct il_priv *il)
152 {
153 IL_DEBUG_SCAN(il, "Queuing abort scan\n");
154 queue_work(il->workqueue, &il->abort_scan);
155 return 0;
156 }
157 EXPORT_SYMBOL(il_scan_cancel);
158
159 /**
160 * il_scan_cancel_timeout - Cancel any currently executing HW scan
161 * @ms: amount of time to wait (in milliseconds) for scan to abort
162 *
163 */
164 int il_scan_cancel_timeout(struct il_priv *il, unsigned long ms)
165 {
166 unsigned long timeout = jiffies + msecs_to_jiffies(ms);
167
168 lockdep_assert_held(&il->mutex);
169
170 IL_DEBUG_SCAN(il, "Scan cancel timeout\n");
171
172 il_do_scan_abort(il);
173
174 while (time_before_eq(jiffies, timeout)) {
175 if (!test_bit(STATUS_SCAN_HW, &il->status))
176 break;
177 msleep(20);
178 }
179
180 return test_bit(STATUS_SCAN_HW, &il->status);
181 }
182 EXPORT_SYMBOL(il_scan_cancel_timeout);
183
184 /* Service response to REPLY_SCAN_CMD (0x80) */
185 static void il_rx_reply_scan(struct il_priv *il,
186 struct il_rx_mem_buffer *rxb)
187 {
188 #ifdef CONFIG_IWLWIFI_LEGACY_DEBUG
189 struct il_rx_packet *pkt = rxb_addr(rxb);
190 struct il_scanreq_notification *notif =
191 (struct il_scanreq_notification *)pkt->u.raw;
192
193 IL_DEBUG_SCAN(il, "Scan request status = 0x%x\n", notif->status);
194 #endif
195 }
196
197 /* Service SCAN_START_NOTIFICATION (0x82) */
198 static void il_rx_scan_start_notif(struct il_priv *il,
199 struct il_rx_mem_buffer *rxb)
200 {
201 struct il_rx_packet *pkt = rxb_addr(rxb);
202 struct il_scanstart_notification *notif =
203 (struct il_scanstart_notification *)pkt->u.raw;
204 il->scan_start_tsf = le32_to_cpu(notif->tsf_low);
205 IL_DEBUG_SCAN(il, "Scan start: "
206 "%d [802.11%s] "
207 "(TSF: 0x%08X:%08X) - %d (beacon timer %u)\n",
208 notif->channel,
209 notif->band ? "bg" : "a",
210 le32_to_cpu(notif->tsf_high),
211 le32_to_cpu(notif->tsf_low),
212 notif->status, notif->beacon_timer);
213 }
214
215 /* Service SCAN_RESULTS_NOTIFICATION (0x83) */
216 static void il_rx_scan_results_notif(struct il_priv *il,
217 struct il_rx_mem_buffer *rxb)
218 {
219 #ifdef CONFIG_IWLWIFI_LEGACY_DEBUG
220 struct il_rx_packet *pkt = rxb_addr(rxb);
221 struct il_scanresults_notification *notif =
222 (struct il_scanresults_notification *)pkt->u.raw;
223
224 IL_DEBUG_SCAN(il, "Scan ch.res: "
225 "%d [802.11%s] "
226 "(TSF: 0x%08X:%08X) - %d "
227 "elapsed=%lu usec\n",
228 notif->channel,
229 notif->band ? "bg" : "a",
230 le32_to_cpu(notif->tsf_high),
231 le32_to_cpu(notif->tsf_low),
232 le32_to_cpu(notif->statistics[0]),
233 le32_to_cpu(notif->tsf_low) - il->scan_start_tsf);
234 #endif
235 }
236
237 /* Service SCAN_COMPLETE_NOTIFICATION (0x84) */
238 static void il_rx_scan_complete_notif(struct il_priv *il,
239 struct il_rx_mem_buffer *rxb)
240 {
241
242 #ifdef CONFIG_IWLWIFI_LEGACY_DEBUG
243 struct il_rx_packet *pkt = rxb_addr(rxb);
244 struct il_scancomplete_notification *scan_notif = (void *)pkt->u.raw;
245 #endif
246
247 IL_DEBUG_SCAN(il,
248 "Scan complete: %d channels (TSF 0x%08X:%08X) - %d\n",
249 scan_notif->scanned_channels,
250 scan_notif->tsf_low,
251 scan_notif->tsf_high, scan_notif->status);
252
253 /* The HW is no longer scanning */
254 clear_bit(STATUS_SCAN_HW, &il->status);
255
256 IL_DEBUG_SCAN(il, "Scan on %sGHz took %dms\n",
257 (il->scan_band == IEEE80211_BAND_2GHZ) ? "2.4" : "5.2",
258 jiffies_to_msecs(jiffies - il->scan_start));
259
260 queue_work(il->workqueue, &il->scan_completed);
261 }
262
263 void il_setup_rx_scan_handlers(struct il_priv *il)
264 {
265 /* scan handlers */
266 il->rx_handlers[REPLY_SCAN_CMD] = il_rx_reply_scan;
267 il->rx_handlers[SCAN_START_NOTIFICATION] =
268 il_rx_scan_start_notif;
269 il->rx_handlers[SCAN_RESULTS_NOTIFICATION] =
270 il_rx_scan_results_notif;
271 il->rx_handlers[SCAN_COMPLETE_NOTIFICATION] =
272 il_rx_scan_complete_notif;
273 }
274 EXPORT_SYMBOL(il_setup_rx_scan_handlers);
275
276 inline u16 il_get_active_dwell_time(struct il_priv *il,
277 enum ieee80211_band band,
278 u8 n_probes)
279 {
280 if (band == IEEE80211_BAND_5GHZ)
281 return IL_ACTIVE_DWELL_TIME_52 +
282 IL_ACTIVE_DWELL_FACTOR_52GHZ * (n_probes + 1);
283 else
284 return IL_ACTIVE_DWELL_TIME_24 +
285 IL_ACTIVE_DWELL_FACTOR_24GHZ * (n_probes + 1);
286 }
287 EXPORT_SYMBOL(il_get_active_dwell_time);
288
289 u16 il_get_passive_dwell_time(struct il_priv *il,
290 enum ieee80211_band band,
291 struct ieee80211_vif *vif)
292 {
293 struct il_rxon_context *ctx;
294 u16 passive = (band == IEEE80211_BAND_2GHZ) ?
295 IL_PASSIVE_DWELL_BASE + IL_PASSIVE_DWELL_TIME_24 :
296 IL_PASSIVE_DWELL_BASE + IL_PASSIVE_DWELL_TIME_52;
297
298 if (il_is_any_associated(il)) {
299 /*
300 * If we're associated, we clamp the maximum passive
301 * dwell time to be 98% of the smallest beacon interval
302 * (minus 2 * channel tune time)
303 */
304 for_each_context(il, ctx) {
305 u16 value;
306
307 if (!il_is_associated_ctx(ctx))
308 continue;
309 value = ctx->vif ? ctx->vif->bss_conf.beacon_int : 0;
310 if ((value > IL_PASSIVE_DWELL_BASE) || !value)
311 value = IL_PASSIVE_DWELL_BASE;
312 value = (value * 98) / 100 - IL_CHANNEL_TUNE_TIME * 2;
313 passive = min(value, passive);
314 }
315 }
316
317 return passive;
318 }
319 EXPORT_SYMBOL(il_get_passive_dwell_time);
320
321 void il_init_scan_params(struct il_priv *il)
322 {
323 u8 ant_idx = fls(il->hw_params.valid_tx_ant) - 1;
324 if (!il->scan_tx_ant[IEEE80211_BAND_5GHZ])
325 il->scan_tx_ant[IEEE80211_BAND_5GHZ] = ant_idx;
326 if (!il->scan_tx_ant[IEEE80211_BAND_2GHZ])
327 il->scan_tx_ant[IEEE80211_BAND_2GHZ] = ant_idx;
328 }
329 EXPORT_SYMBOL(il_init_scan_params);
330
331 static int il_scan_initiate(struct il_priv *il,
332 struct ieee80211_vif *vif)
333 {
334 int ret;
335
336 lockdep_assert_held(&il->mutex);
337
338 if (WARN_ON(!il->cfg->ops->utils->request_scan))
339 return -EOPNOTSUPP;
340
341 cancel_delayed_work(&il->scan_check);
342
343 if (!il_is_ready_rf(il)) {
344 IL_WARN(il, "Request scan called when driver not ready.\n");
345 return -EIO;
346 }
347
348 if (test_bit(STATUS_SCAN_HW, &il->status)) {
349 IL_DEBUG_SCAN(il,
350 "Multiple concurrent scan requests in parallel.\n");
351 return -EBUSY;
352 }
353
354 if (test_bit(STATUS_SCAN_ABORTING, &il->status)) {
355 IL_DEBUG_SCAN(il, "Scan request while abort pending.\n");
356 return -EBUSY;
357 }
358
359 IL_DEBUG_SCAN(il, "Starting scan...\n");
360
361 set_bit(STATUS_SCANNING, &il->status);
362 il->scan_start = jiffies;
363
364 ret = il->cfg->ops->utils->request_scan(il, vif);
365 if (ret) {
366 clear_bit(STATUS_SCANNING, &il->status);
367 return ret;
368 }
369
370 queue_delayed_work(il->workqueue, &il->scan_check,
371 IL_SCAN_CHECK_WATCHDOG);
372
373 return 0;
374 }
375
376 int il_mac_hw_scan(struct ieee80211_hw *hw,
377 struct ieee80211_vif *vif,
378 struct cfg80211_scan_request *req)
379 {
380 struct il_priv *il = hw->priv;
381 int ret;
382
383 IL_DEBUG_MAC80211(il, "enter\n");
384
385 if (req->n_channels == 0)
386 return -EINVAL;
387
388 mutex_lock(&il->mutex);
389
390 if (test_bit(STATUS_SCANNING, &il->status)) {
391 IL_DEBUG_SCAN(il, "Scan already in progress.\n");
392 ret = -EAGAIN;
393 goto out_unlock;
394 }
395
396 /* mac80211 will only ask for one band at a time */
397 il->scan_request = req;
398 il->scan_vif = vif;
399 il->scan_band = req->channels[0]->band;
400
401 ret = il_scan_initiate(il, vif);
402
403 IL_DEBUG_MAC80211(il, "leave\n");
404
405 out_unlock:
406 mutex_unlock(&il->mutex);
407
408 return ret;
409 }
410 EXPORT_SYMBOL(il_mac_hw_scan);
411
412 static void il_bg_scan_check(struct work_struct *data)
413 {
414 struct il_priv *il =
415 container_of(data, struct il_priv, scan_check.work);
416
417 IL_DEBUG_SCAN(il, "Scan check work\n");
418
419 /* Since we are here firmware does not finish scan and
420 * most likely is in bad shape, so we don't bother to
421 * send abort command, just force scan complete to mac80211 */
422 mutex_lock(&il->mutex);
423 il_force_scan_end(il);
424 mutex_unlock(&il->mutex);
425 }
426
427 /**
428 * il_fill_probe_req - fill in all required fields and IE for probe request
429 */
430
431 u16
432 il_fill_probe_req(struct il_priv *il, struct ieee80211_mgmt *frame,
433 const u8 *ta, const u8 *ies, int ie_len, int left)
434 {
435 int len = 0;
436 u8 *pos = NULL;
437
438 /* Make sure there is enough space for the probe request,
439 * two mandatory IEs and the data */
440 left -= 24;
441 if (left < 0)
442 return 0;
443
444 frame->frame_control = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ);
445 memcpy(frame->da, iwlegacy_bcast_addr, ETH_ALEN);
446 memcpy(frame->sa, ta, ETH_ALEN);
447 memcpy(frame->bssid, iwlegacy_bcast_addr, ETH_ALEN);
448 frame->seq_ctrl = 0;
449
450 len += 24;
451
452 /* ...next IE... */
453 pos = &frame->u.probe_req.variable[0];
454
455 /* fill in our indirect SSID IE */
456 left -= 2;
457 if (left < 0)
458 return 0;
459 *pos++ = WLAN_EID_SSID;
460 *pos++ = 0;
461
462 len += 2;
463
464 if (WARN_ON(left < ie_len))
465 return len;
466
467 if (ies && ie_len) {
468 memcpy(pos, ies, ie_len);
469 len += ie_len;
470 }
471
472 return (u16)len;
473 }
474 EXPORT_SYMBOL(il_fill_probe_req);
475
476 static void il_bg_abort_scan(struct work_struct *work)
477 {
478 struct il_priv *il = container_of(work, struct il_priv, abort_scan);
479
480 IL_DEBUG_SCAN(il, "Abort scan work\n");
481
482 /* We keep scan_check work queued in case when firmware will not
483 * report back scan completed notification */
484 mutex_lock(&il->mutex);
485 il_scan_cancel_timeout(il, 200);
486 mutex_unlock(&il->mutex);
487 }
488
489 static void il_bg_scan_completed(struct work_struct *work)
490 {
491 struct il_priv *il =
492 container_of(work, struct il_priv, scan_completed);
493 bool aborted;
494
495 IL_DEBUG_SCAN(il, "Completed scan.\n");
496
497 cancel_delayed_work(&il->scan_check);
498
499 mutex_lock(&il->mutex);
500
501 aborted = test_and_clear_bit(STATUS_SCAN_ABORTING, &il->status);
502 if (aborted)
503 IL_DEBUG_SCAN(il, "Aborted scan completed.\n");
504
505 if (!test_and_clear_bit(STATUS_SCANNING, &il->status)) {
506 IL_DEBUG_SCAN(il, "Scan already completed.\n");
507 goto out_settings;
508 }
509
510 il_complete_scan(il, aborted);
511
512 out_settings:
513 /* Can we still talk to firmware ? */
514 if (!il_is_ready_rf(il))
515 goto out;
516
517 /*
518 * We do not commit power settings while scan is pending,
519 * do it now if the settings changed.
520 */
521 il_power_set_mode(il, &il->power_data.sleep_cmd_next, false);
522 il_set_tx_power(il, il->tx_power_next, false);
523
524 il->cfg->ops->utils->post_scan(il);
525
526 out:
527 mutex_unlock(&il->mutex);
528 }
529
530 void il_setup_scan_deferred_work(struct il_priv *il)
531 {
532 INIT_WORK(&il->scan_completed, il_bg_scan_completed);
533 INIT_WORK(&il->abort_scan, il_bg_abort_scan);
534 INIT_DELAYED_WORK(&il->scan_check, il_bg_scan_check);
535 }
536 EXPORT_SYMBOL(il_setup_scan_deferred_work);
537
538 void il_cancel_scan_deferred_work(struct il_priv *il)
539 {
540 cancel_work_sync(&il->abort_scan);
541 cancel_work_sync(&il->scan_completed);
542
543 if (cancel_delayed_work_sync(&il->scan_check)) {
544 mutex_lock(&il->mutex);
545 il_force_scan_end(il);
546 mutex_unlock(&il->mutex);
547 }
548 }
549 EXPORT_SYMBOL(il_cancel_scan_deferred_work);
This page took 0.076398 seconds and 5 git commands to generate.