mac80211.c

   1// SPDX-License-Identifier: GPL-2.0-only
   2/******************************************************************************
   3 *
   4 * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
   5 * Copyright(C) 2018 - 2019, 2022 - 2025 Intel Corporation
   6 *
   7 * Portions of this file are derived from the ipw3945 project, as well
   8 * as portions of the ieee80211 subsystem header files.
   9 *****************************************************************************/
  10#include <linux/kernel.h>
  11#include <linux/module.h>
  12#include <linux/slab.h>
  13#include <linux/dma-mapping.h>
  14#include <linux/delay.h>
  15#include <linux/sched.h>
  16#include <linux/skbuff.h>
  17#include <linux/netdevice.h>
  18#include <linux/etherdevice.h>
  19#include <linux/if_arp.h>
  20
  21#include <net/ieee80211_radiotap.h>
  22#include <net/mac80211.h>
  23
  24#include <asm/div64.h>
  25
  26#include "iwl-io.h"
  27#include "iwl-trans.h"
  28#include "iwl-op-mode.h"
  29#include "iwl-modparams.h"
  30
  31#include "dev.h"
  32#include "calib.h"
  33#include "agn.h"
  34
  35/*****************************************************************************
  36 *
  37 * mac80211 entry point functions
  38 *
  39 *****************************************************************************/
  40
  41static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
  42	{
  43		.max = 1,
  44		.types = BIT(NL80211_IFTYPE_STATION),
  45	},
  46	{
  47		.max = 1,
  48		.types = BIT(NL80211_IFTYPE_AP),
  49	},
  50};
  51
  52static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
  53	{
  54		.max = 2,
  55		.types = BIT(NL80211_IFTYPE_STATION),
  56	},
  57};
  58
  59static const struct ieee80211_iface_combination
  60iwlagn_iface_combinations_dualmode[] = {
  61	{ .num_different_channels = 1,
  62	  .max_interfaces = 2,
  63	  .beacon_int_infra_match = true,
  64	  .limits = iwlagn_sta_ap_limits,
  65	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
  66	},
  67	{ .num_different_channels = 1,
  68	  .max_interfaces = 2,
  69	  .limits = iwlagn_2sta_limits,
  70	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
  71	},
  72};
  73
  74/*
  75 * Not a mac80211 entry point function, but it fits in with all the
  76 * other mac80211 functions grouped here.
  77 */
  78int iwlagn_mac_setup_register(struct iwl_priv *priv,
  79			      const struct iwl_ucode_capabilities *capa)
  80{
  81	int ret;
  82	struct ieee80211_hw *hw = priv->hw;
  83	struct iwl_rxon_context *ctx;
  84
  85	hw->rate_control_algorithm = "iwl-agn-rs";
  86
  87	/* Tell mac80211 our characteristics */
  88	ieee80211_hw_set(hw, SIGNAL_DBM);
  89	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
  90	ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
  91	ieee80211_hw_set(hw, SPECTRUM_MGMT);
  92	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
  93	ieee80211_hw_set(hw, QUEUE_CONTROL);
  94	ieee80211_hw_set(hw, SUPPORTS_PS);
  95	ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
  96	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
  97	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
  98
  99	if (priv->trans->info.max_skb_frags)
 100		hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
 101
 102	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
 103	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
 104
 105	/*
 106	 * Including the following line will crash some AP's.  This
 107	 * workaround removes the stimulus which causes the crash until
 108	 * the AP software can be fixed.
 109	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
 110	 */
 111
 112	if (priv->nvm_data->sku_cap_11n_enable)
 113		hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
 114				       NL80211_FEATURE_STATIC_SMPS;
 115
 116	/*
 117	 * Enable 11w if advertised by firmware and software crypto
 118	 * is not enabled (as the firmware will interpret some mgmt
 119	 * packets, so enabling it with software crypto isn't safe)
 120	 */
 121	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
 122	    !iwlwifi_mod_params.swcrypto)
 123		ieee80211_hw_set(hw, MFP_CAPABLE);
 124
 125	hw->sta_data_size = sizeof(struct iwl_station_priv);
 126	hw->vif_data_size = sizeof(struct iwl_vif_priv);
 127
 128	for_each_context(priv, ctx) {
 129		hw->wiphy->interface_modes |= ctx->interface_modes;
 130		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
 131	}
 132
 133	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
 134
 135	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
 136		hw->wiphy->iface_combinations =
 137			iwlagn_iface_combinations_dualmode;
 138		hw->wiphy->n_iface_combinations =
 139			ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
 140	}
 141
 142	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
 143	hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
 144				       REGULATORY_DISABLE_BEACON_HINTS;
 145
 146#ifdef CONFIG_PM_SLEEP
 147	if (priv->fw->img[IWL_UCODE_WOWLAN].num_sec &&
 148	    device_can_wakeup(priv->trans->dev)) {
 149		priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
 150					     WIPHY_WOWLAN_DISCONNECT |
 151					     WIPHY_WOWLAN_EAP_IDENTITY_REQ |
 152					     WIPHY_WOWLAN_RFKILL_RELEASE;
 153		if (!iwlwifi_mod_params.swcrypto)
 154			priv->wowlan_support.flags |=
 155				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
 156				WIPHY_WOWLAN_GTK_REKEY_FAILURE;
 157
 158		priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
 159		priv->wowlan_support.pattern_min_len =
 160					IWLAGN_WOWLAN_MIN_PATTERN_LEN;
 161		priv->wowlan_support.pattern_max_len =
 162					IWLAGN_WOWLAN_MAX_PATTERN_LEN;
 163		hw->wiphy->wowlan = &priv->wowlan_support;
 164	}
 165#endif
 166
 167	if (iwlwifi_mod_params.power_save)
 168		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
 169	else
 170		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
 171
 172	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
 173	/* we create the 802.11 header and a max-length SSID element */
 174	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
 175
 176	/*
 177	 * We don't use all queues: 4 and 9 are unused and any
 178	 * aggregation queue gets mapped down to the AC queue.
 179	 */
 180	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
 181
 182	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
 183
 184	if (priv->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
 185		priv->hw->wiphy->bands[NL80211_BAND_2GHZ] =
 186			&priv->nvm_data->bands[NL80211_BAND_2GHZ];
 187	if (priv->nvm_data->bands[NL80211_BAND_5GHZ].n_channels)
 188		priv->hw->wiphy->bands[NL80211_BAND_5GHZ] =
 189			&priv->nvm_data->bands[NL80211_BAND_5GHZ];
 190
 191	hw->wiphy->hw_version = priv->trans->info.hw_id;
 192
 193	iwl_leds_init(priv);
 194
 195	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
 196	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_EXT_KEY_ID);
 197
 198	ret = ieee80211_register_hw(priv->hw);
 199	if (ret) {
 200		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
 201		iwl_leds_exit(priv);
 202		return ret;
 203	}
 204	priv->mac80211_registered = 1;
 205
 206	return 0;
 207}
 208
 209void iwlagn_mac_unregister(struct iwl_priv *priv)
 210{
 211	if (!priv->mac80211_registered)
 212		return;
 213	iwl_leds_exit(priv);
 214	ieee80211_unregister_hw(priv->hw);
 215	priv->mac80211_registered = 0;
 216}
 217
 218static int __iwl_up(struct iwl_priv *priv)
 219{
 220	struct iwl_rxon_context *ctx;
 221	int ret;
 222
 223	lockdep_assert_held(&priv->mutex);
 224
 225	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
 226		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
 227		return -EIO;
 228	}
 229
 230	for_each_context(priv, ctx) {
 231		ret = iwlagn_alloc_bcast_station(priv, ctx);
 232		if (ret) {
 233			iwl_dealloc_bcast_stations(priv);
 234			return ret;
 235		}
 236	}
 237
 238	ret = iwl_trans_start_hw(priv->trans);
 239	if (ret) {
 240		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
 241		goto error;
 242	}
 243
 244	ret = iwl_run_init_ucode(priv);
 245	if (ret) {
 246		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
 247		goto error;
 248	}
 249
 250	ret = iwl_trans_start_hw(priv->trans);
 251	if (ret) {
 252		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
 253		goto error;
 254	}
 255
 256	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
 257	if (ret) {
 258		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
 259		goto error;
 260	}
 261
 262	ret = iwl_alive_start(priv);
 263	if (ret)
 264		goto error;
 265	return 0;
 266
 267 error:
 268	set_bit(STATUS_EXIT_PENDING, &priv->status);
 269	iwl_down(priv);
 270	clear_bit(STATUS_EXIT_PENDING, &priv->status);
 271
 272	IWL_ERR(priv, "Unable to initialize device.\n");
 273	return ret;
 274}
 275
 276static int iwlagn_mac_start(struct ieee80211_hw *hw)
 277{
 278	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 279	int ret;
 280
 281	IWL_DEBUG_MAC80211(priv, "enter\n");
 282
 283	/* we should be verifying the device is ready to be opened */
 284	mutex_lock(&priv->mutex);
 285	ret = __iwl_up(priv);
 286	mutex_unlock(&priv->mutex);
 287	if (ret)
 288		return ret;
 289
 290	IWL_DEBUG_INFO(priv, "Start UP work done.\n");
 291
 292	/* Now we should be done, and the READY bit should be set. */
 293	if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
 294		ret = -EIO;
 295
 296	iwlagn_led_enable(priv);
 297
 298	priv->is_open = 1;
 299	IWL_DEBUG_MAC80211(priv, "leave\n");
 300	return ret;
 301}
 302
 303static void iwlagn_mac_stop(struct ieee80211_hw *hw, bool suspend)
 304{
 305	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 306
 307	IWL_DEBUG_MAC80211(priv, "enter\n");
 308
 309	if (!priv->is_open)
 310		return;
 311
 312	priv->is_open = 0;
 313
 314	mutex_lock(&priv->mutex);
 315	iwl_down(priv);
 316	mutex_unlock(&priv->mutex);
 317
 318	iwl_cancel_deferred_work(priv);
 319
 320	flush_workqueue(priv->workqueue);
 321
 322	IWL_DEBUG_MAC80211(priv, "leave\n");
 323}
 324
 325static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
 326				      struct ieee80211_vif *vif,
 327				      struct cfg80211_gtk_rekey_data *data)
 328{
 329	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 330
 331	if (iwlwifi_mod_params.swcrypto)
 332		return;
 333
 334	IWL_DEBUG_MAC80211(priv, "enter\n");
 335	mutex_lock(&priv->mutex);
 336
 337	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
 338		goto out;
 339
 340	memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
 341	memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
 342	priv->replay_ctr =
 343		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
 344	priv->have_rekey_data = true;
 345
 346 out:
 347	mutex_unlock(&priv->mutex);
 348	IWL_DEBUG_MAC80211(priv, "leave\n");
 349}
 350
 351#ifdef CONFIG_PM_SLEEP
 352
 353static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
 354			      struct cfg80211_wowlan *wowlan)
 355{
 356	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 357	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
 358	int ret;
 359
 360	if (WARN_ON(!wowlan))
 361		return -EINVAL;
 362
 363	IWL_DEBUG_MAC80211(priv, "enter\n");
 364	mutex_lock(&priv->mutex);
 365
 366	/* Don't attempt WoWLAN when not associated, tear down instead. */
 367	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
 368	    !iwl_is_associated_ctx(ctx)) {
 369		ret = 1;
 370		goto out;
 371	}
 372
 373	ret = iwlagn_suspend(priv, wowlan);
 374	if (ret)
 375		goto error;
 376
 377	/* let the ucode operate on its own */
 378	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
 379		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
 380
 381	iwl_trans_d3_suspend(priv->trans, true);
 382
 383	goto out;
 384
 385 error:
 386	priv->wowlan = false;
 387	iwlagn_prepare_restart(priv);
 388	ieee80211_restart_hw(priv->hw);
 389 out:
 390	mutex_unlock(&priv->mutex);
 391	IWL_DEBUG_MAC80211(priv, "leave\n");
 392
 393	return ret;
 394}
 395
 396struct iwl_resume_data {
 397	struct iwl_priv *priv;
 398	struct iwlagn_wowlan_status *cmd;
 399	bool valid;
 400};
 401
 402static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
 403				 struct iwl_rx_packet *pkt, void *data)
 404{
 405	struct iwl_resume_data *resume_data = data;
 406	struct iwl_priv *priv = resume_data->priv;
 407
 408	if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
 409		IWL_ERR(priv, "rx wrong size data\n");
 410		return true;
 411	}
 412	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
 413	resume_data->valid = true;
 414
 415	return true;
 416}
 417
 418static int iwlagn_mac_resume(struct ieee80211_hw *hw)
 419{
 420	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 421	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
 422	struct ieee80211_vif *vif;
 423	u32 base;
 424	int ret;
 425	struct error_table_start {
 426		/* cf. struct iwl_error_event_table */
 427		u32 valid;
 428		u32 error_id;
 429	} err_info;
 430	struct iwl_notification_wait status_wait;
 431	static const u16 status_cmd[] = {
 432		REPLY_WOWLAN_GET_STATUS,
 433	};
 434	struct iwlagn_wowlan_status status_data = {};
 435	struct iwl_resume_data resume_data = {
 436		.priv = priv,
 437		.cmd = &status_data,
 438		.valid = false,
 439	};
 440	struct cfg80211_wowlan_wakeup wakeup = {
 441		.pattern_idx = -1,
 442	};
 443#ifdef CONFIG_IWLWIFI_DEBUGFS
 444	const struct fw_img *img;
 445#endif
 446
 447	IWL_DEBUG_MAC80211(priv, "enter\n");
 448	mutex_lock(&priv->mutex);
 449
 450	/* we'll clear ctx->vif during iwlagn_prepare_restart() */
 451	vif = ctx->vif;
 452
 453	ret = iwl_trans_d3_resume(priv->trans, true);
 454	if (ret)
 455		goto out_unlock;
 456
 457	/* uCode is no longer operating by itself */
 458	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
 459		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
 460
 461	base = priv->device_pointers.error_event_table;
 462	if (!iwlagn_hw_valid_rtc_data_addr(base)) {
 463		IWL_WARN(priv, "Invalid error table during resume!\n");
 464		goto out_unlock;
 465	}
 466
 467	iwl_trans_read_mem_bytes(priv->trans, base,
 468				 &err_info, sizeof(err_info));
 469
 470	if (err_info.valid) {
 471		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
 472			 err_info.valid, err_info.error_id);
 473		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
 474			wakeup.rfkill_release = true;
 475			ieee80211_report_wowlan_wakeup(vif, &wakeup,
 476						       GFP_KERNEL);
 477		}
 478		goto out_unlock;
 479	}
 480
 481#ifdef CONFIG_IWLWIFI_DEBUGFS
 482	img = &priv->fw->img[IWL_UCODE_WOWLAN];
 483	if (!priv->wowlan_sram)
 484		priv->wowlan_sram =
 485			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
 486				GFP_KERNEL);
 487
 488	if (priv->wowlan_sram)
 489		iwl_trans_read_mem(priv->trans, 0x800000,
 490				   priv->wowlan_sram,
 491				   img->sec[IWL_UCODE_SECTION_DATA].len / 4);
 492#endif
 493
 494	/*
 495	 * This is very strange. The GET_STATUS command is sent but the device
 496	 * doesn't reply properly, it seems it doesn't close the RBD so one is
 497	 * always left open ... As a result, we need to send another command
 498	 * and have to reset the driver afterwards. As we need to switch to
 499	 * runtime firmware again that'll happen.
 500	 */
 501
 502	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
 503				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
 504				   &resume_data);
 505
 506	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
 507	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
 508	/* an RBD is left open in the firmware now! */
 509
 510	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
 511	if (ret)
 512		goto out_unlock;
 513
 514	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
 515		u32 reasons = le32_to_cpu(status_data.wakeup_reason);
 516		struct cfg80211_wowlan_wakeup *wakeup_report;
 517
 518		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
 519
 520		if (reasons) {
 521			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
 522				wakeup.magic_pkt = true;
 523			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
 524				wakeup.pattern_idx = status_data.pattern_number;
 525			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
 526				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
 527				wakeup.disconnect = true;
 528			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
 529				wakeup.gtk_rekey_failure = true;
 530			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
 531				wakeup.eap_identity_req = true;
 532			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
 533				wakeup.four_way_handshake = true;
 534			wakeup_report = &wakeup;
 535		} else {
 536			wakeup_report = NULL;
 537		}
 538
 539		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
 540	}
 541
 542	priv->wowlan = false;
 543
 544	iwlagn_prepare_restart(priv);
 545
 546	memset((void *)(uintptr_t)&ctx->active, 0, sizeof(ctx->active));
 547	iwl_connection_init_rx_config(priv, ctx);
 548	iwlagn_set_rxon_chain(priv, ctx);
 549
 550 out_unlock:
 551	mutex_unlock(&priv->mutex);
 552	IWL_DEBUG_MAC80211(priv, "leave\n");
 553
 554	ieee80211_resume_disconnect(vif);
 555
 556	return 1;
 557}
 558
 559static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
 560{
 561	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 562
 563	device_set_wakeup_enable(priv->trans->dev, enabled);
 564}
 565#endif
 566
 567static void iwlagn_mac_tx(struct ieee80211_hw *hw,
 568			  struct ieee80211_tx_control *control,
 569			  struct sk_buff *skb)
 570{
 571	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 572
 573	if (iwlagn_tx_skb(priv, control->sta, skb))
 574		ieee80211_free_txskb(hw, skb);
 575}
 576
 577static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
 578				       struct ieee80211_vif *vif,
 579				       struct ieee80211_key_conf *keyconf,
 580				       struct ieee80211_sta *sta,
 581				       u32 iv32, u16 *phase1key)
 582{
 583	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 584
 585	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
 586}
 587
 588static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
 589			      struct ieee80211_vif *vif,
 590			      struct ieee80211_sta *sta,
 591			      struct ieee80211_key_conf *key)
 592{
 593	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 594	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
 595	struct iwl_rxon_context *ctx = vif_priv->ctx;
 596	int ret;
 597	bool is_default_wep_key = false;
 598
 599	IWL_DEBUG_MAC80211(priv, "enter\n");
 600
 601	if (iwlwifi_mod_params.swcrypto) {
 602		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
 603		return -EOPNOTSUPP;
 604	}
 605
 606	switch (key->cipher) {
 607	case WLAN_CIPHER_SUITE_TKIP:
 608		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
 609		fallthrough;
 610	case WLAN_CIPHER_SUITE_CCMP:
 611		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
 612		break;
 613	default:
 614		break;
 615	}
 616
 617	/*
 618	 * We could program these keys into the hardware as well, but we
 619	 * don't expect much multicast traffic in IBSS and having keys
 620	 * for more stations is probably more useful.
 621	 *
 622	 * Mark key TX-only and return 0.
 623	 */
 624	if (vif->type == NL80211_IFTYPE_ADHOC &&
 625	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
 626		key->hw_key_idx = WEP_INVALID_OFFSET;
 627		return 0;
 628	}
 629
 630	/* If they key was TX-only, accept deletion */
 631	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
 632		return 0;
 633
 634	mutex_lock(&priv->mutex);
 635	iwl_scan_cancel_timeout(priv, 100);
 636
 637	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
 638
 639	/*
 640	 * If we are getting WEP group key and we didn't receive any key mapping
 641	 * so far, we are in legacy wep mode (group key only), otherwise we are
 642	 * in 1X mode.
 643	 * In legacy wep mode, we use another host command to the uCode.
 644	 */
 645	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
 646	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
 647		if (cmd == SET_KEY)
 648			is_default_wep_key = !ctx->key_mapping_keys;
 649		else
 650			is_default_wep_key =
 651				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
 652	}
 653
 654
 655	switch (cmd) {
 656	case SET_KEY:
 657		if (is_default_wep_key) {
 658			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
 659			break;
 660		}
 661		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
 662		if (ret) {
 663			/*
 664			 * can't add key for RX, but we don't need it
 665			 * in the device for TX so still return 0
 666			 */
 667			ret = 0;
 668			key->hw_key_idx = WEP_INVALID_OFFSET;
 669		}
 670
 671		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
 672		break;
 673	case DISABLE_KEY:
 674		if (is_default_wep_key)
 675			ret = iwl_remove_default_wep_key(priv, ctx, key);
 676		else
 677			ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
 678
 679		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
 680		break;
 681	default:
 682		ret = -EINVAL;
 683	}
 684
 685	mutex_unlock(&priv->mutex);
 686	IWL_DEBUG_MAC80211(priv, "leave\n");
 687
 688	return ret;
 689}
 690
 691static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
 692				   struct ieee80211_vif *vif,
 693				   struct ieee80211_ampdu_params *params)
 694{
 695	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 696	int ret = -EINVAL;
 697	struct ieee80211_sta *sta = params->sta;
 698	enum ieee80211_ampdu_mlme_action action = params->action;
 699	u16 tid = params->tid;
 700	u16 *ssn = &params->ssn;
 701	u8 buf_size = params->buf_size;
 702	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
 703
 704	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
 705		     sta->addr, tid);
 706
 707	if (!(priv->nvm_data->sku_cap_11n_enable))
 708		return -EACCES;
 709
 710	IWL_DEBUG_MAC80211(priv, "enter\n");
 711	mutex_lock(&priv->mutex);
 712
 713	switch (action) {
 714	case IEEE80211_AMPDU_RX_START:
 715		if (!iwl_enable_rx_ampdu())
 716			break;
 717		IWL_DEBUG_HT(priv, "start Rx\n");
 718		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
 719		break;
 720	case IEEE80211_AMPDU_RX_STOP:
 721		IWL_DEBUG_HT(priv, "stop Rx\n");
 722		ret = iwl_sta_rx_agg_stop(priv, sta, tid);
 723		break;
 724	case IEEE80211_AMPDU_TX_START:
 725		if (!iwl_enable_tx_ampdu())
 726			break;
 727		IWL_DEBUG_HT(priv, "start Tx\n");
 728		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
 729		break;
 730	case IEEE80211_AMPDU_TX_STOP_FLUSH:
 731	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
 732		IWL_DEBUG_HT(priv, "Flush Tx\n");
 733		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
 734		break;
 735	case IEEE80211_AMPDU_TX_STOP_CONT:
 736		IWL_DEBUG_HT(priv, "stop Tx\n");
 737		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
 738		if ((ret == 0) && (priv->agg_tids_count > 0)) {
 739			priv->agg_tids_count--;
 740			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
 741				     priv->agg_tids_count);
 742		}
 743		if (!priv->agg_tids_count &&
 744		    priv->hw_params.use_rts_for_aggregation) {
 745			/*
 746			 * switch off RTS/CTS if it was previously enabled
 747			 */
 748			sta_priv->lq_sta.lq.general_params.flags &=
 749				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
 750			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
 751					&sta_priv->lq_sta.lq, CMD_ASYNC, false);
 752		}
 753		break;
 754	case IEEE80211_AMPDU_TX_OPERATIONAL:
 755		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
 756		break;
 757	}
 758	mutex_unlock(&priv->mutex);
 759	IWL_DEBUG_MAC80211(priv, "leave\n");
 760	return ret;
 761}
 762
 763static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
 764			      struct ieee80211_vif *vif,
 765			      struct ieee80211_sta *sta)
 766{
 767	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 768	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
 769	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
 770	bool is_ap = vif->type == NL80211_IFTYPE_STATION;
 771	int ret;
 772	u8 sta_id;
 773
 774	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
 775			sta->addr);
 776	sta_priv->sta_id = IWL_INVALID_STATION;
 777
 778	atomic_set(&sta_priv->pending_frames, 0);
 779	if (vif->type == NL80211_IFTYPE_AP)
 780		sta_priv->client = true;
 781
 782	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
 783				     is_ap, sta, &sta_id);
 784	if (ret) {
 785		IWL_ERR(priv, "Unable to add station %pM (%d)\n",
 786			sta->addr, ret);
 787		/* Should we return success if return code is EEXIST ? */
 788		return ret;
 789	}
 790
 791	sta_priv->sta_id = sta_id;
 792
 793	return 0;
 794}
 795
 796static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
 797				 struct ieee80211_vif *vif,
 798				 struct ieee80211_sta *sta)
 799{
 800	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 801	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
 802	int ret;
 803
 804	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
 805
 806	if (vif->type == NL80211_IFTYPE_STATION) {
 807		/*
 808		 * Station will be removed from device when the RXON
 809		 * is set to unassociated -- just deactivate it here
 810		 * to avoid re-programming it.
 811		 */
 812		ret = 0;
 813		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
 814	} else {
 815		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
 816		if (ret)
 817			IWL_DEBUG_QUIET_RFKILL(priv,
 818				"Error removing station %pM\n", sta->addr);
 819	}
 820	return ret;
 821}
 822
 823static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
 824				struct ieee80211_vif *vif,
 825				struct ieee80211_sta *sta,
 826				enum ieee80211_sta_state old_state,
 827				enum ieee80211_sta_state new_state)
 828{
 829	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 830	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
 831	enum {
 832		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
 833	} op = NONE;
 834	int ret;
 835
 836	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
 837			   sta->addr, old_state, new_state);
 838
 839	mutex_lock(&priv->mutex);
 840	if (vif->type == NL80211_IFTYPE_STATION) {
 841		if (old_state == IEEE80211_STA_NOTEXIST &&
 842		    new_state == IEEE80211_STA_NONE)
 843			op = ADD;
 844		else if (old_state == IEEE80211_STA_NONE &&
 845			 new_state == IEEE80211_STA_NOTEXIST)
 846			op = REMOVE;
 847		else if (old_state == IEEE80211_STA_AUTH &&
 848			 new_state == IEEE80211_STA_ASSOC)
 849			op = HT_RATE_INIT;
 850	} else {
 851		if (old_state == IEEE80211_STA_AUTH &&
 852		    new_state == IEEE80211_STA_ASSOC)
 853			op = ADD_RATE_INIT;
 854		else if (old_state == IEEE80211_STA_ASSOC &&
 855			 new_state == IEEE80211_STA_AUTH)
 856			op = REMOVE;
 857	}
 858
 859	switch (op) {
 860	case ADD:
 861		ret = iwlagn_mac_sta_add(hw, vif, sta);
 862		if (ret)
 863			break;
 864		/*
 865		 * Clear the in-progress flag, the AP station entry was added
 866		 * but we'll initialize LQ only when we've associated (which
 867		 * would also clear the in-progress flag). This is necessary
 868		 * in case we never initialize LQ because association fails.
 869		 */
 870		spin_lock_bh(&priv->sta_lock);
 871		priv->stations[iwl_sta_id(sta)].used &=
 872			~IWL_STA_UCODE_INPROGRESS;
 873		spin_unlock_bh(&priv->sta_lock);
 874		break;
 875	case REMOVE:
 876		ret = iwlagn_mac_sta_remove(hw, vif, sta);
 877		break;
 878	case ADD_RATE_INIT:
 879		ret = iwlagn_mac_sta_add(hw, vif, sta);
 880		if (ret)
 881			break;
 882		/* Initialize rate scaling */
 883		IWL_DEBUG_INFO(priv,
 884			       "Initializing rate scaling for station %pM\n",
 885			       sta->addr);
 886		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
 887		ret = 0;
 888		break;
 889	case HT_RATE_INIT:
 890		/* Initialize rate scaling */
 891		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
 892		if (ret)
 893			break;
 894		IWL_DEBUG_INFO(priv,
 895			       "Initializing rate scaling for station %pM\n",
 896			       sta->addr);
 897		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
 898		ret = 0;
 899		break;
 900	default:
 901		ret = 0;
 902		break;
 903	}
 904
 905	/*
 906	 * mac80211 might WARN if we fail, but due the way we
 907	 * (badly) handle hard rfkill, we might fail here
 908	 */
 909	if (iwl_is_rfkill(priv))
 910		ret = 0;
 911
 912	mutex_unlock(&priv->mutex);
 913	IWL_DEBUG_MAC80211(priv, "leave\n");
 914
 915	return ret;
 916}
 917
 918static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
 919				      struct ieee80211_vif *vif,
 920				      struct ieee80211_channel_switch *ch_switch)
 921{
 922	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 923	struct ieee80211_conf *conf = &hw->conf;
 924	struct ieee80211_channel *channel = ch_switch->chandef.chan;
 925	struct iwl_ht_config *ht_conf = &priv->current_ht_config;
 926	/*
 927	 * MULTI-FIXME
 928	 * When we add support for multiple interfaces, we need to
 929	 * revisit this. The channel switch command in the device
 930	 * only affects the BSS context, but what does that really
 931	 * mean? And what if we get a CSA on the second interface?
 932	 * This needs a lot of work.
 933	 */
 934	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
 935	u16 ch;
 936
 937	IWL_DEBUG_MAC80211(priv, "enter\n");
 938
 939	mutex_lock(&priv->mutex);
 940
 941	if (iwl_is_rfkill(priv))
 942		goto out;
 943
 944	if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
 945	    test_bit(STATUS_SCANNING, &priv->status) ||
 946	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
 947		goto out;
 948
 949	if (!iwl_is_associated_ctx(ctx))
 950		goto out;
 951
 952	if (!priv->lib->set_channel_switch)
 953		goto out;
 954
 955	ch = channel->hw_value;
 956	if (le16_to_cpu(ctx->active.channel) == ch)
 957		goto out;
 958
 959	priv->current_ht_config.smps = conf->smps_mode;
 960
 961	/* Configure HT40 channels */
 962	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
 963	case NL80211_CHAN_NO_HT:
 964	case NL80211_CHAN_HT20:
 965		ctx->ht.is_40mhz = false;
 966		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
 967		break;
 968	case NL80211_CHAN_HT40MINUS:
 969		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
 970		ctx->ht.is_40mhz = true;
 971		break;
 972	case NL80211_CHAN_HT40PLUS:
 973		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
 974		ctx->ht.is_40mhz = true;
 975		break;
 976	}
 977
 978	if ((le16_to_cpu(ctx->staging.channel) != ch))
 979		ctx->staging.flags = 0;
 980
 981	iwl_set_rxon_channel(priv, channel, ctx);
 982	iwl_set_rxon_ht(priv, ht_conf);
 983	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
 984
 985	/*
 986	 * at this point, staging_rxon has the
 987	 * configuration for channel switch
 988	 */
 989	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
 990	priv->switch_channel = cpu_to_le16(ch);
 991	if (priv->lib->set_channel_switch(priv, ch_switch)) {
 992		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
 993		priv->switch_channel = 0;
 994		ieee80211_chswitch_done(ctx->vif, false, 0);
 995	}
 996
 997out:
 998	mutex_unlock(&priv->mutex);
 999	IWL_DEBUG_MAC80211(priv, "leave\n");
1000}
1001
1002void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1003{
1004	/*
1005	 * MULTI-FIXME
1006	 * See iwlagn_mac_channel_switch.
1007	 */
1008	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1009
1010	if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1011		return;
1012
1013	if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1014		return;
1015
1016	if (ctx->vif)
1017		ieee80211_chswitch_done(ctx->vif, is_success, 0);
1018}
1019
1020static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1021				    unsigned int changed_flags,
1022				    unsigned int *total_flags,
1023				    u64 multicast)
1024{
1025	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1026	__le32 filter_or = 0, filter_nand = 0;
1027	struct iwl_rxon_context *ctx;
1028
1029#define CHK(test, flag)	do { \
1030	if (*total_flags & (test))		\
1031		filter_or |= (flag);		\
1032	else					\
1033		filter_nand |= (flag);		\
1034	} while (0)
1035
1036	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1037			changed_flags, *total_flags);
1038
1039	CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1040	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1041	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1042	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1043
1044#undef CHK
1045
1046	mutex_lock(&priv->mutex);
1047
1048	for_each_context(priv, ctx) {
1049		ctx->staging.filter_flags &= ~filter_nand;
1050		ctx->staging.filter_flags |= filter_or;
1051
1052		/*
1053		 * Not committing directly because hardware can perform a scan,
1054		 * but we'll eventually commit the filter flags change anyway.
1055		 */
1056	}
1057
1058	mutex_unlock(&priv->mutex);
1059
1060	/*
1061	 * Receiving all multicast frames is always enabled by the
1062	 * default flags setup in iwl_connection_init_rx_config()
1063	 * since we currently do not support programming multicast
1064	 * filters into the device.
1065	 */
1066	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1067			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1068}
1069
1070static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1071			     u32 queues, bool drop)
1072{
1073	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1074	u32 scd_queues;
1075
1076	mutex_lock(&priv->mutex);
1077	IWL_DEBUG_MAC80211(priv, "enter\n");
1078
1079	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1080		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1081		goto done;
1082	}
1083	if (iwl_is_rfkill(priv)) {
1084		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1085		goto done;
1086	}
1087
1088	scd_queues = BIT(priv->trans->mac_cfg->base->num_of_queues) - 1;
1089	scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1090			BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1091
1092	if (drop) {
1093		IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1094				    scd_queues);
1095		if (iwlagn_txfifo_flush(priv, scd_queues)) {
1096			IWL_ERR(priv, "flush request fail\n");
1097			goto done;
1098		}
1099	}
1100
1101	IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1102	iwl_trans_wait_tx_queues_empty(priv->trans, scd_queues);
1103done:
1104	mutex_unlock(&priv->mutex);
1105	IWL_DEBUG_MAC80211(priv, "leave\n");
1106}
1107
1108static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1109				      struct ieee80211_vif *vif,
1110				      const struct ieee80211_event *event)
1111{
1112	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1113
1114	if (event->type != RSSI_EVENT)
1115		return;
1116
1117	IWL_DEBUG_MAC80211(priv, "enter\n");
1118
1119	if (priv->lib->bt_params &&
1120	    priv->lib->bt_params->advanced_bt_coexist) {
1121		if (event->u.rssi.data == RSSI_EVENT_LOW)
1122			priv->bt_enable_pspoll = true;
1123		else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1124			priv->bt_enable_pspoll = false;
1125
1126		queue_work(priv->workqueue, &priv->bt_runtime_config);
1127	} else {
1128		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1129				"ignoring RSSI callback\n");
1130	}
1131
1132	IWL_DEBUG_MAC80211(priv, "leave\n");
1133}
1134
1135static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1136			      struct ieee80211_sta *sta, bool set)
1137{
1138	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1139
1140	queue_work(priv->workqueue, &priv->beacon_update);
1141
1142	return 0;
1143}
1144
1145static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1146			      struct ieee80211_vif *vif,
1147			      unsigned int link_id, u16 queue,
1148			      const struct ieee80211_tx_queue_params *params)
1149{
1150	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1151	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1152	struct iwl_rxon_context *ctx = vif_priv->ctx;
1153	int q;
1154
1155	if (WARN_ON(!ctx))
1156		return -EINVAL;
1157
1158	IWL_DEBUG_MAC80211(priv, "enter\n");
1159
1160	if (!iwl_is_ready_rf(priv)) {
1161		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1162		return -EIO;
1163	}
1164
1165	if (queue >= AC_NUM) {
1166		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1167		return 0;
1168	}
1169
1170	q = AC_NUM - 1 - queue;
1171
1172	mutex_lock(&priv->mutex);
1173
1174	ctx->qos_data.def_qos_parm.ac[q].cw_min =
1175		cpu_to_le16(params->cw_min);
1176	ctx->qos_data.def_qos_parm.ac[q].cw_max =
1177		cpu_to_le16(params->cw_max);
1178	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1179	ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1180			cpu_to_le16((params->txop * 32));
1181
1182	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1183
1184	mutex_unlock(&priv->mutex);
1185
1186	IWL_DEBUG_MAC80211(priv, "leave\n");
1187	return 0;
1188}
1189
1190static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1191{
1192	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1193
1194	return priv->ibss_manager == IWL_IBSS_MANAGER;
1195}
1196
1197static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1198{
1199	iwl_connection_init_rx_config(priv, ctx);
1200
1201	iwlagn_set_rxon_chain(priv, ctx);
1202
1203	return iwlagn_commit_rxon(priv, ctx);
1204}
1205
1206static int iwl_setup_interface(struct iwl_priv *priv,
1207			       struct iwl_rxon_context *ctx)
1208{
1209	struct ieee80211_vif *vif = ctx->vif;
1210	int err, ac;
1211
1212	lockdep_assert_held(&priv->mutex);
1213
1214	/*
1215	 * This variable will be correct only when there's just
1216	 * a single context, but all code using it is for hardware
1217	 * that supports only one context.
1218	 */
1219	priv->iw_mode = vif->type;
1220
1221	ctx->is_active = true;
1222
1223	err = iwl_set_mode(priv, ctx);
1224	if (err) {
1225		if (!ctx->always_active)
1226			ctx->is_active = false;
1227		return err;
1228	}
1229
1230	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1231	    vif->type == NL80211_IFTYPE_ADHOC) {
1232		/*
1233		 * pretend to have high BT traffic as long as we
1234		 * are operating in IBSS mode, as this will cause
1235		 * the rate scaling etc. to behave as intended.
1236		 */
1237		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1238	}
1239
1240	/* set up queue mappings */
1241	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1242		vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1243
1244	if (vif->type == NL80211_IFTYPE_AP)
1245		vif->cab_queue = ctx->mcast_queue;
1246	else
1247		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1248
1249	return 0;
1250}
1251
1252static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1253				    struct ieee80211_vif *vif)
1254{
1255	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1256	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1257	struct iwl_rxon_context *tmp, *ctx = NULL;
1258	int err;
1259	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1260	bool reset = false;
1261
1262	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1263			   viftype, vif->addr);
1264
1265	mutex_lock(&priv->mutex);
1266
1267	if (!iwl_is_ready_rf(priv)) {
1268		IWL_WARN(priv, "Try to add interface when device not ready\n");
1269		err = -EINVAL;
1270		goto out;
1271	}
1272
1273	for_each_context(priv, tmp) {
1274		u32 possible_modes =
1275			tmp->interface_modes | tmp->exclusive_interface_modes;
1276
1277		if (tmp->vif) {
1278			/* On reset we need to add the same interface again */
1279			if (tmp->vif == vif) {
1280				reset = true;
1281				ctx = tmp;
1282				break;
1283			}
1284
1285			/* check if this busy context is exclusive */
1286			if (tmp->exclusive_interface_modes &
1287						BIT(tmp->vif->type)) {
1288				err = -EINVAL;
1289				goto out;
1290			}
1291			continue;
1292		}
1293
1294		if (!(possible_modes & BIT(viftype)))
1295			continue;
1296
1297		/* have maybe usable context w/o interface */
1298		ctx = tmp;
1299		break;
1300	}
1301
1302	if (!ctx) {
1303		err = -EOPNOTSUPP;
1304		goto out;
1305	}
1306
1307	vif_priv->ctx = ctx;
1308	ctx->vif = vif;
1309
1310	/*
1311	 * In SNIFFER device type, the firmware reports the FCS to
1312	 * the host, rather than snipping it off. Unfortunately,
1313	 * mac80211 doesn't (yet) provide a per-packet flag for
1314	 * this, so that we have to set the hardware flag based
1315	 * on the interfaces added. As the monitor interface can
1316	 * only be present by itself, and will be removed before
1317	 * other interfaces are added, this is safe.
1318	 */
1319	if (vif->type == NL80211_IFTYPE_MONITOR)
1320		ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1321	else
1322		__clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1323
1324	err = iwl_setup_interface(priv, ctx);
1325	if (!err || reset)
1326		goto out;
1327
1328	ctx->vif = NULL;
1329	priv->iw_mode = NL80211_IFTYPE_STATION;
1330 out:
1331	mutex_unlock(&priv->mutex);
1332
1333	IWL_DEBUG_MAC80211(priv, "leave\n");
1334	return err;
1335}
1336
1337static void iwl_teardown_interface(struct iwl_priv *priv,
1338				   struct ieee80211_vif *vif,
1339				   bool mode_change)
1340{
1341	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1342
1343	lockdep_assert_held(&priv->mutex);
1344
1345	if (priv->scan_vif == vif) {
1346		iwl_scan_cancel_timeout(priv, 200);
1347		iwl_force_scan_end(priv);
1348	}
1349
1350	if (!mode_change) {
1351		iwl_set_mode(priv, ctx);
1352		if (!ctx->always_active)
1353			ctx->is_active = false;
1354	}
1355
1356	/*
1357	 * When removing the IBSS interface, overwrite the
1358	 * BT traffic load with the stored one from the last
1359	 * notification, if any. If this is a device that
1360	 * doesn't implement this, this has no effect since
1361	 * both values are the same and zero.
1362	 */
1363	if (vif->type == NL80211_IFTYPE_ADHOC)
1364		priv->bt_traffic_load = priv->last_bt_traffic_load;
1365}
1366
1367static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1368			      struct ieee80211_vif *vif)
1369{
1370	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1371	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1372
1373	IWL_DEBUG_MAC80211(priv, "enter\n");
1374
1375	mutex_lock(&priv->mutex);
1376
1377	WARN_ON(ctx->vif != vif);
1378	ctx->vif = NULL;
1379
1380	iwl_teardown_interface(priv, vif, false);
1381
1382	mutex_unlock(&priv->mutex);
1383
1384	IWL_DEBUG_MAC80211(priv, "leave\n");
1385
1386}
1387
1388static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1389				       struct ieee80211_vif *vif,
1390				       enum nl80211_iftype newtype, bool newp2p)
1391{
1392	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1393	struct iwl_rxon_context *ctx, *tmp;
1394	enum nl80211_iftype newviftype = newtype;
1395	u32 interface_modes;
1396	int err;
1397
1398	IWL_DEBUG_MAC80211(priv, "enter\n");
1399
1400	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1401
1402	mutex_lock(&priv->mutex);
1403
1404	ctx = iwl_rxon_ctx_from_vif(vif);
1405
1406	/*
1407	 * To simplify this code, only support changes on the
1408	 * BSS context. The PAN context is usually reassigned
1409	 * by creating/removing P2P interfaces anyway.
1410	 */
1411	if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1412		err = -EBUSY;
1413		goto out;
1414	}
1415
1416	if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1417		/*
1418		 * Huh? But wait ... this can maybe happen when
1419		 * we're in the middle of a firmware restart!
1420		 */
1421		err = -EBUSY;
1422		goto out;
1423	}
1424
1425	/* Check if the switch is supported in the same context */
1426	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1427	if (!(interface_modes & BIT(newtype))) {
1428		err = -EBUSY;
1429		goto out;
1430	}
1431
1432	if (ctx->exclusive_interface_modes & BIT(newtype)) {
1433		for_each_context(priv, tmp) {
1434			if (ctx == tmp)
1435				continue;
1436
1437			if (!tmp->is_active)
1438				continue;
1439
1440			/*
1441			 * The current mode switch would be exclusive, but
1442			 * another context is active ... refuse the switch.
1443			 */
1444			err = -EBUSY;
1445			goto out;
1446		}
1447	}
1448
1449	/* success */
1450	iwl_teardown_interface(priv, vif, true);
1451	vif->type = newviftype;
1452	vif->p2p = newp2p;
1453	err = iwl_setup_interface(priv, ctx);
1454	WARN_ON(err);
1455	/*
1456	 * We've switched internally, but submitting to the
1457	 * device may have failed for some reason. Mask this
1458	 * error, because otherwise mac80211 will not switch
1459	 * (and set the interface type back) and we'll be
1460	 * out of sync with it.
1461	 */
1462	err = 0;
1463
1464 out:
1465	mutex_unlock(&priv->mutex);
1466	IWL_DEBUG_MAC80211(priv, "leave\n");
1467
1468	return err;
1469}
1470
1471static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1472			      struct ieee80211_vif *vif,
1473			      struct ieee80211_scan_request *hw_req)
1474{
1475	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1476	struct cfg80211_scan_request *req = &hw_req->req;
1477	int ret;
1478
1479	IWL_DEBUG_MAC80211(priv, "enter\n");
1480
1481	if (req->n_channels == 0)
1482		return -EINVAL;
1483
1484	mutex_lock(&priv->mutex);
1485
1486	/*
1487	 * If an internal scan is in progress, just set
1488	 * up the scan_request as per above.
1489	 */
1490	if (priv->scan_type != IWL_SCAN_NORMAL) {
1491		IWL_DEBUG_SCAN(priv,
1492			       "SCAN request during internal scan - defer\n");
1493		priv->scan_request = req;
1494		priv->scan_vif = vif;
1495		ret = 0;
1496	} else {
1497		priv->scan_request = req;
1498		priv->scan_vif = vif;
1499		/*
1500		 * mac80211 will only ask for one band at a time
1501		 * so using channels[0] here is ok
1502		 */
1503		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1504					req->channels[0]->band);
1505		if (ret) {
1506			priv->scan_request = NULL;
1507			priv->scan_vif = NULL;
1508		}
1509	}
1510
1511	IWL_DEBUG_MAC80211(priv, "leave\n");
1512
1513	mutex_unlock(&priv->mutex);
1514
1515	return ret;
1516}
1517
1518static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1519{
1520	struct iwl_addsta_cmd cmd = {
1521		.mode = STA_CONTROL_MODIFY_MSK,
1522		.station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1523		.sta.sta_id = sta_id,
1524	};
1525
1526	iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1527}
1528
1529static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1530				  struct ieee80211_vif *vif,
1531				  enum sta_notify_cmd cmd,
1532				  struct ieee80211_sta *sta)
1533{
1534	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1535	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1536	int sta_id;
1537
1538	IWL_DEBUG_MAC80211(priv, "enter\n");
1539
1540	switch (cmd) {
1541	case STA_NOTIFY_SLEEP:
1542		WARN_ON(!sta_priv->client);
1543		sta_priv->asleep = true;
1544		if (atomic_read(&sta_priv->pending_frames) > 0)
1545			ieee80211_sta_block_awake(hw, sta, true);
1546		break;
1547	case STA_NOTIFY_AWAKE:
1548		WARN_ON(!sta_priv->client);
1549		if (!sta_priv->asleep)
1550			break;
1551		sta_priv->asleep = false;
1552		sta_id = iwl_sta_id(sta);
1553		if (sta_id != IWL_INVALID_STATION)
1554			iwl_sta_modify_ps_wake(priv, sta_id);
1555		break;
1556	default:
1557		break;
1558	}
1559	IWL_DEBUG_MAC80211(priv, "leave\n");
1560}
1561
1562static void
1563iwlagn_mac_reconfig_complete(struct ieee80211_hw *hw,
1564			     enum ieee80211_reconfig_type reconfig_type)
1565{
1566	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1567
1568	if (reconfig_type == IEEE80211_RECONFIG_TYPE_RESTART)
1569		iwl_trans_finish_sw_reset(priv->trans);
1570}
1571
1572const struct ieee80211_ops iwlagn_hw_ops = {
1573	.add_chanctx = ieee80211_emulate_add_chanctx,
1574	.remove_chanctx = ieee80211_emulate_remove_chanctx,
1575	.change_chanctx = ieee80211_emulate_change_chanctx,
1576	.switch_vif_chanctx = ieee80211_emulate_switch_vif_chanctx,
1577	.tx = iwlagn_mac_tx,
1578	.wake_tx_queue = ieee80211_handle_wake_tx_queue,
1579	.start = iwlagn_mac_start,
1580	.stop = iwlagn_mac_stop,
1581#ifdef CONFIG_PM_SLEEP
1582	.suspend = iwlagn_mac_suspend,
1583	.resume = iwlagn_mac_resume,
1584	.set_wakeup = iwlagn_mac_set_wakeup,
1585#endif
1586	.add_interface = iwlagn_mac_add_interface,
1587	.remove_interface = iwlagn_mac_remove_interface,
1588	.change_interface = iwlagn_mac_change_interface,
1589	.config = iwlagn_mac_config,
1590	.configure_filter = iwlagn_configure_filter,
1591	.set_key = iwlagn_mac_set_key,
1592	.update_tkip_key = iwlagn_mac_update_tkip_key,
1593	.set_rekey_data = iwlagn_mac_set_rekey_data,
1594	.conf_tx = iwlagn_mac_conf_tx,
1595	.bss_info_changed = iwlagn_bss_info_changed,
1596	.ampdu_action = iwlagn_mac_ampdu_action,
1597	.hw_scan = iwlagn_mac_hw_scan,
1598	.sta_notify = iwlagn_mac_sta_notify,
1599	.sta_state = iwlagn_mac_sta_state,
1600	.channel_switch = iwlagn_mac_channel_switch,
1601	.flush = iwlagn_mac_flush,
1602	.tx_last_beacon = iwlagn_mac_tx_last_beacon,
1603	.event_callback = iwlagn_mac_event_callback,
1604	.set_tim = iwlagn_mac_set_tim,
1605	.reconfig_complete = iwlagn_mac_reconfig_complete,
1606};
1607
1608/* This function both allocates and initializes hw and priv. */
1609struct ieee80211_hw *iwl_alloc_all(void)
1610{
1611	struct iwl_priv *priv;
1612	struct iwl_op_mode *op_mode;
1613	/* mac80211 allocates memory for this device instance, including
1614	 *   space for this driver's private structure */
1615	struct ieee80211_hw *hw;
1616
1617	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1618				sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1619	if (!hw)
1620		goto out;
1621
1622	op_mode = hw->priv;
1623	priv = IWL_OP_MODE_GET_DVM(op_mode);
1624	priv->hw = hw;
1625
1626out:
1627	return hw;
1628}