Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: GPL-2.0-only
0002 /******************************************************************************
0003  *
0004  * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
0005  * Copyright (C) 2018 - 2019, 2022 Intel Corporation
0006  *
0007  * Portions of this file are derived from the ipw3945 project, as well
0008  * as portions of the ieee80211 subsystem header files.
0009  *****************************************************************************/
0010 #include <linux/kernel.h>
0011 #include <linux/module.h>
0012 #include <linux/slab.h>
0013 #include <linux/dma-mapping.h>
0014 #include <linux/delay.h>
0015 #include <linux/sched.h>
0016 #include <linux/skbuff.h>
0017 #include <linux/netdevice.h>
0018 #include <linux/etherdevice.h>
0019 #include <linux/if_arp.h>
0020 
0021 #include <net/ieee80211_radiotap.h>
0022 #include <net/mac80211.h>
0023 
0024 #include <asm/div64.h>
0025 
0026 #include "iwl-io.h"
0027 #include "iwl-trans.h"
0028 #include "iwl-op-mode.h"
0029 #include "iwl-modparams.h"
0030 
0031 #include "dev.h"
0032 #include "calib.h"
0033 #include "agn.h"
0034 
0035 /*****************************************************************************
0036  *
0037  * mac80211 entry point functions
0038  *
0039  *****************************************************************************/
0040 
0041 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
0042     {
0043         .max = 1,
0044         .types = BIT(NL80211_IFTYPE_STATION),
0045     },
0046     {
0047         .max = 1,
0048         .types = BIT(NL80211_IFTYPE_AP),
0049     },
0050 };
0051 
0052 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
0053     {
0054         .max = 2,
0055         .types = BIT(NL80211_IFTYPE_STATION),
0056     },
0057 };
0058 
0059 static const struct ieee80211_iface_combination
0060 iwlagn_iface_combinations_dualmode[] = {
0061     { .num_different_channels = 1,
0062       .max_interfaces = 2,
0063       .beacon_int_infra_match = true,
0064       .limits = iwlagn_sta_ap_limits,
0065       .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
0066     },
0067     { .num_different_channels = 1,
0068       .max_interfaces = 2,
0069       .limits = iwlagn_2sta_limits,
0070       .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
0071     },
0072 };
0073 
0074 /*
0075  * Not a mac80211 entry point function, but it fits in with all the
0076  * other mac80211 functions grouped here.
0077  */
0078 int iwlagn_mac_setup_register(struct iwl_priv *priv,
0079                   const struct iwl_ucode_capabilities *capa)
0080 {
0081     int ret;
0082     struct ieee80211_hw *hw = priv->hw;
0083     struct iwl_rxon_context *ctx;
0084 
0085     hw->rate_control_algorithm = "iwl-agn-rs";
0086 
0087     /* Tell mac80211 our characteristics */
0088     ieee80211_hw_set(hw, SIGNAL_DBM);
0089     ieee80211_hw_set(hw, AMPDU_AGGREGATION);
0090     ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
0091     ieee80211_hw_set(hw, SPECTRUM_MGMT);
0092     ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
0093     ieee80211_hw_set(hw, QUEUE_CONTROL);
0094     ieee80211_hw_set(hw, SUPPORTS_PS);
0095     ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
0096     ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
0097     ieee80211_hw_set(hw, WANT_MONITOR_VIF);
0098 
0099     if (priv->trans->max_skb_frags)
0100         hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
0101 
0102     hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
0103     hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
0104 
0105     /*
0106      * Including the following line will crash some AP's.  This
0107      * workaround removes the stimulus which causes the crash until
0108      * the AP software can be fixed.
0109     hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
0110      */
0111 
0112     if (priv->nvm_data->sku_cap_11n_enable)
0113         hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
0114                        NL80211_FEATURE_STATIC_SMPS;
0115 
0116     /*
0117      * Enable 11w if advertised by firmware and software crypto
0118      * is not enabled (as the firmware will interpret some mgmt
0119      * packets, so enabling it with software crypto isn't safe)
0120      */
0121     if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
0122         !iwlwifi_mod_params.swcrypto)
0123         ieee80211_hw_set(hw, MFP_CAPABLE);
0124 
0125     hw->sta_data_size = sizeof(struct iwl_station_priv);
0126     hw->vif_data_size = sizeof(struct iwl_vif_priv);
0127 
0128     for_each_context(priv, ctx) {
0129         hw->wiphy->interface_modes |= ctx->interface_modes;
0130         hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
0131     }
0132 
0133     BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
0134 
0135     if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
0136         hw->wiphy->iface_combinations =
0137             iwlagn_iface_combinations_dualmode;
0138         hw->wiphy->n_iface_combinations =
0139             ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
0140     }
0141 
0142     hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
0143     hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
0144                        REGULATORY_DISABLE_BEACON_HINTS;
0145 
0146 #ifdef CONFIG_PM_SLEEP
0147     if (priv->fw->img[IWL_UCODE_WOWLAN].num_sec &&
0148         priv->trans->ops->d3_suspend &&
0149         priv->trans->ops->d3_resume &&
0150         device_can_wakeup(priv->trans->dev)) {
0151         priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
0152                          WIPHY_WOWLAN_DISCONNECT |
0153                          WIPHY_WOWLAN_EAP_IDENTITY_REQ |
0154                          WIPHY_WOWLAN_RFKILL_RELEASE;
0155         if (!iwlwifi_mod_params.swcrypto)
0156             priv->wowlan_support.flags |=
0157                 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
0158                 WIPHY_WOWLAN_GTK_REKEY_FAILURE;
0159 
0160         priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
0161         priv->wowlan_support.pattern_min_len =
0162                     IWLAGN_WOWLAN_MIN_PATTERN_LEN;
0163         priv->wowlan_support.pattern_max_len =
0164                     IWLAGN_WOWLAN_MAX_PATTERN_LEN;
0165         hw->wiphy->wowlan = &priv->wowlan_support;
0166     }
0167 #endif
0168 
0169     if (iwlwifi_mod_params.power_save)
0170         hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
0171     else
0172         hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
0173 
0174     hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
0175     /* we create the 802.11 header and a max-length SSID element */
0176     hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
0177 
0178     /*
0179      * We don't use all queues: 4 and 9 are unused and any
0180      * aggregation queue gets mapped down to the AC queue.
0181      */
0182     hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
0183 
0184     hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
0185 
0186     if (priv->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
0187         priv->hw->wiphy->bands[NL80211_BAND_2GHZ] =
0188             &priv->nvm_data->bands[NL80211_BAND_2GHZ];
0189     if (priv->nvm_data->bands[NL80211_BAND_5GHZ].n_channels)
0190         priv->hw->wiphy->bands[NL80211_BAND_5GHZ] =
0191             &priv->nvm_data->bands[NL80211_BAND_5GHZ];
0192 
0193     hw->wiphy->hw_version = priv->trans->hw_id;
0194 
0195     iwl_leds_init(priv);
0196 
0197     wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
0198     wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_EXT_KEY_ID);
0199 
0200     ret = ieee80211_register_hw(priv->hw);
0201     if (ret) {
0202         IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
0203         iwl_leds_exit(priv);
0204         return ret;
0205     }
0206     priv->mac80211_registered = 1;
0207 
0208     return 0;
0209 }
0210 
0211 void iwlagn_mac_unregister(struct iwl_priv *priv)
0212 {
0213     if (!priv->mac80211_registered)
0214         return;
0215     iwl_leds_exit(priv);
0216     ieee80211_unregister_hw(priv->hw);
0217     priv->mac80211_registered = 0;
0218 }
0219 
0220 static int __iwl_up(struct iwl_priv *priv)
0221 {
0222     struct iwl_rxon_context *ctx;
0223     int ret;
0224 
0225     lockdep_assert_held(&priv->mutex);
0226 
0227     if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
0228         IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
0229         return -EIO;
0230     }
0231 
0232     for_each_context(priv, ctx) {
0233         ret = iwlagn_alloc_bcast_station(priv, ctx);
0234         if (ret) {
0235             iwl_dealloc_bcast_stations(priv);
0236             return ret;
0237         }
0238     }
0239 
0240     ret = iwl_trans_start_hw(priv->trans);
0241     if (ret) {
0242         IWL_ERR(priv, "Failed to start HW: %d\n", ret);
0243         goto error;
0244     }
0245 
0246     ret = iwl_run_init_ucode(priv);
0247     if (ret) {
0248         IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
0249         goto error;
0250     }
0251 
0252     ret = iwl_trans_start_hw(priv->trans);
0253     if (ret) {
0254         IWL_ERR(priv, "Failed to start HW: %d\n", ret);
0255         goto error;
0256     }
0257 
0258     ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
0259     if (ret) {
0260         IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
0261         goto error;
0262     }
0263 
0264     ret = iwl_alive_start(priv);
0265     if (ret)
0266         goto error;
0267     return 0;
0268 
0269  error:
0270     set_bit(STATUS_EXIT_PENDING, &priv->status);
0271     iwl_down(priv);
0272     clear_bit(STATUS_EXIT_PENDING, &priv->status);
0273 
0274     IWL_ERR(priv, "Unable to initialize device.\n");
0275     return ret;
0276 }
0277 
0278 static int iwlagn_mac_start(struct ieee80211_hw *hw)
0279 {
0280     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0281     int ret;
0282 
0283     IWL_DEBUG_MAC80211(priv, "enter\n");
0284 
0285     /* we should be verifying the device is ready to be opened */
0286     mutex_lock(&priv->mutex);
0287     ret = __iwl_up(priv);
0288     mutex_unlock(&priv->mutex);
0289     if (ret)
0290         return ret;
0291 
0292     IWL_DEBUG_INFO(priv, "Start UP work done.\n");
0293 
0294     /* Now we should be done, and the READY bit should be set. */
0295     if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
0296         ret = -EIO;
0297 
0298     iwlagn_led_enable(priv);
0299 
0300     priv->is_open = 1;
0301     IWL_DEBUG_MAC80211(priv, "leave\n");
0302     return ret;
0303 }
0304 
0305 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
0306 {
0307     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0308 
0309     IWL_DEBUG_MAC80211(priv, "enter\n");
0310 
0311     if (!priv->is_open)
0312         return;
0313 
0314     priv->is_open = 0;
0315 
0316     mutex_lock(&priv->mutex);
0317     iwl_down(priv);
0318     mutex_unlock(&priv->mutex);
0319 
0320     iwl_cancel_deferred_work(priv);
0321 
0322     flush_workqueue(priv->workqueue);
0323 
0324     IWL_DEBUG_MAC80211(priv, "leave\n");
0325 }
0326 
0327 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
0328                       struct ieee80211_vif *vif,
0329                       struct cfg80211_gtk_rekey_data *data)
0330 {
0331     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0332 
0333     if (iwlwifi_mod_params.swcrypto)
0334         return;
0335 
0336     IWL_DEBUG_MAC80211(priv, "enter\n");
0337     mutex_lock(&priv->mutex);
0338 
0339     if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
0340         goto out;
0341 
0342     memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
0343     memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
0344     priv->replay_ctr =
0345         cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
0346     priv->have_rekey_data = true;
0347 
0348  out:
0349     mutex_unlock(&priv->mutex);
0350     IWL_DEBUG_MAC80211(priv, "leave\n");
0351 }
0352 
0353 #ifdef CONFIG_PM_SLEEP
0354 
0355 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
0356                   struct cfg80211_wowlan *wowlan)
0357 {
0358     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0359     struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
0360     int ret;
0361 
0362     if (WARN_ON(!wowlan))
0363         return -EINVAL;
0364 
0365     IWL_DEBUG_MAC80211(priv, "enter\n");
0366     mutex_lock(&priv->mutex);
0367 
0368     /* Don't attempt WoWLAN when not associated, tear down instead. */
0369     if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
0370         !iwl_is_associated_ctx(ctx)) {
0371         ret = 1;
0372         goto out;
0373     }
0374 
0375     ret = iwlagn_suspend(priv, wowlan);
0376     if (ret)
0377         goto error;
0378 
0379     /* let the ucode operate on its own */
0380     iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
0381             CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
0382 
0383     iwl_trans_d3_suspend(priv->trans, false, true);
0384 
0385     goto out;
0386 
0387  error:
0388     priv->wowlan = false;
0389     iwlagn_prepare_restart(priv);
0390     ieee80211_restart_hw(priv->hw);
0391  out:
0392     mutex_unlock(&priv->mutex);
0393     IWL_DEBUG_MAC80211(priv, "leave\n");
0394 
0395     return ret;
0396 }
0397 
0398 struct iwl_resume_data {
0399     struct iwl_priv *priv;
0400     struct iwlagn_wowlan_status *cmd;
0401     bool valid;
0402 };
0403 
0404 static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
0405                  struct iwl_rx_packet *pkt, void *data)
0406 {
0407     struct iwl_resume_data *resume_data = data;
0408     struct iwl_priv *priv = resume_data->priv;
0409 
0410     if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
0411         IWL_ERR(priv, "rx wrong size data\n");
0412         return true;
0413     }
0414     memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
0415     resume_data->valid = true;
0416 
0417     return true;
0418 }
0419 
0420 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
0421 {
0422     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0423     struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
0424     struct ieee80211_vif *vif;
0425     u32 base;
0426     int ret;
0427     enum iwl_d3_status d3_status;
0428     struct error_table_start {
0429         /* cf. struct iwl_error_event_table */
0430         u32 valid;
0431         u32 error_id;
0432     } err_info;
0433     struct iwl_notification_wait status_wait;
0434     static const u16 status_cmd[] = {
0435         REPLY_WOWLAN_GET_STATUS,
0436     };
0437     struct iwlagn_wowlan_status status_data = {};
0438     struct iwl_resume_data resume_data = {
0439         .priv = priv,
0440         .cmd = &status_data,
0441         .valid = false,
0442     };
0443     struct cfg80211_wowlan_wakeup wakeup = {
0444         .pattern_idx = -1,
0445     };
0446 #ifdef CONFIG_IWLWIFI_DEBUGFS
0447     const struct fw_img *img;
0448 #endif
0449 
0450     IWL_DEBUG_MAC80211(priv, "enter\n");
0451     mutex_lock(&priv->mutex);
0452 
0453     /* we'll clear ctx->vif during iwlagn_prepare_restart() */
0454     vif = ctx->vif;
0455 
0456     ret = iwl_trans_d3_resume(priv->trans, &d3_status, false, true);
0457     if (ret)
0458         goto out_unlock;
0459 
0460     if (d3_status != IWL_D3_STATUS_ALIVE) {
0461         IWL_INFO(priv, "Device was reset during suspend\n");
0462         goto out_unlock;
0463     }
0464 
0465     /* uCode is no longer operating by itself */
0466     iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
0467             CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
0468 
0469     base = priv->device_pointers.error_event_table;
0470     if (!iwlagn_hw_valid_rtc_data_addr(base)) {
0471         IWL_WARN(priv, "Invalid error table during resume!\n");
0472         goto out_unlock;
0473     }
0474 
0475     iwl_trans_read_mem_bytes(priv->trans, base,
0476                  &err_info, sizeof(err_info));
0477 
0478     if (err_info.valid) {
0479         IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
0480              err_info.valid, err_info.error_id);
0481         if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
0482             wakeup.rfkill_release = true;
0483             ieee80211_report_wowlan_wakeup(vif, &wakeup,
0484                                GFP_KERNEL);
0485         }
0486         goto out_unlock;
0487     }
0488 
0489 #ifdef CONFIG_IWLWIFI_DEBUGFS
0490     img = &priv->fw->img[IWL_UCODE_WOWLAN];
0491     if (!priv->wowlan_sram)
0492         priv->wowlan_sram =
0493             kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
0494                 GFP_KERNEL);
0495 
0496     if (priv->wowlan_sram)
0497         iwl_trans_read_mem(priv->trans, 0x800000,
0498                    priv->wowlan_sram,
0499                    img->sec[IWL_UCODE_SECTION_DATA].len / 4);
0500 #endif
0501 
0502     /*
0503      * This is very strange. The GET_STATUS command is sent but the device
0504      * doesn't reply properly, it seems it doesn't close the RBD so one is
0505      * always left open ... As a result, we need to send another command
0506      * and have to reset the driver afterwards. As we need to switch to
0507      * runtime firmware again that'll happen.
0508      */
0509 
0510     iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
0511                    ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
0512                    &resume_data);
0513 
0514     iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
0515     iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
0516     /* an RBD is left open in the firmware now! */
0517 
0518     ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
0519     if (ret)
0520         goto out_unlock;
0521 
0522     if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
0523         u32 reasons = le32_to_cpu(status_data.wakeup_reason);
0524         struct cfg80211_wowlan_wakeup *wakeup_report;
0525 
0526         IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
0527 
0528         if (reasons) {
0529             if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
0530                 wakeup.magic_pkt = true;
0531             if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
0532                 wakeup.pattern_idx = status_data.pattern_number;
0533             if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
0534                        IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
0535                 wakeup.disconnect = true;
0536             if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
0537                 wakeup.gtk_rekey_failure = true;
0538             if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
0539                 wakeup.eap_identity_req = true;
0540             if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
0541                 wakeup.four_way_handshake = true;
0542             wakeup_report = &wakeup;
0543         } else {
0544             wakeup_report = NULL;
0545         }
0546 
0547         ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
0548     }
0549 
0550     priv->wowlan = false;
0551 
0552     iwlagn_prepare_restart(priv);
0553 
0554     memset((void *)&ctx->active, 0, sizeof(ctx->active));
0555     iwl_connection_init_rx_config(priv, ctx);
0556     iwlagn_set_rxon_chain(priv, ctx);
0557 
0558  out_unlock:
0559     mutex_unlock(&priv->mutex);
0560     IWL_DEBUG_MAC80211(priv, "leave\n");
0561 
0562     ieee80211_resume_disconnect(vif);
0563 
0564     return 1;
0565 }
0566 
0567 static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
0568 {
0569     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0570 
0571     device_set_wakeup_enable(priv->trans->dev, enabled);
0572 }
0573 #endif
0574 
0575 static void iwlagn_mac_tx(struct ieee80211_hw *hw,
0576               struct ieee80211_tx_control *control,
0577               struct sk_buff *skb)
0578 {
0579     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0580 
0581     if (iwlagn_tx_skb(priv, control->sta, skb))
0582         ieee80211_free_txskb(hw, skb);
0583 }
0584 
0585 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
0586                        struct ieee80211_vif *vif,
0587                        struct ieee80211_key_conf *keyconf,
0588                        struct ieee80211_sta *sta,
0589                        u32 iv32, u16 *phase1key)
0590 {
0591     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0592 
0593     iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
0594 }
0595 
0596 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
0597                   struct ieee80211_vif *vif,
0598                   struct ieee80211_sta *sta,
0599                   struct ieee80211_key_conf *key)
0600 {
0601     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0602     struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
0603     struct iwl_rxon_context *ctx = vif_priv->ctx;
0604     int ret;
0605     bool is_default_wep_key = false;
0606 
0607     IWL_DEBUG_MAC80211(priv, "enter\n");
0608 
0609     if (iwlwifi_mod_params.swcrypto) {
0610         IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
0611         return -EOPNOTSUPP;
0612     }
0613 
0614     switch (key->cipher) {
0615     case WLAN_CIPHER_SUITE_TKIP:
0616         key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
0617         fallthrough;
0618     case WLAN_CIPHER_SUITE_CCMP:
0619         key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
0620         break;
0621     default:
0622         break;
0623     }
0624 
0625     /*
0626      * We could program these keys into the hardware as well, but we
0627      * don't expect much multicast traffic in IBSS and having keys
0628      * for more stations is probably more useful.
0629      *
0630      * Mark key TX-only and return 0.
0631      */
0632     if (vif->type == NL80211_IFTYPE_ADHOC &&
0633         !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
0634         key->hw_key_idx = WEP_INVALID_OFFSET;
0635         return 0;
0636     }
0637 
0638     /* If they key was TX-only, accept deletion */
0639     if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
0640         return 0;
0641 
0642     mutex_lock(&priv->mutex);
0643     iwl_scan_cancel_timeout(priv, 100);
0644 
0645     BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
0646 
0647     /*
0648      * If we are getting WEP group key and we didn't receive any key mapping
0649      * so far, we are in legacy wep mode (group key only), otherwise we are
0650      * in 1X mode.
0651      * In legacy wep mode, we use another host command to the uCode.
0652      */
0653     if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
0654          key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
0655         if (cmd == SET_KEY)
0656             is_default_wep_key = !ctx->key_mapping_keys;
0657         else
0658             is_default_wep_key =
0659                 key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
0660     }
0661 
0662 
0663     switch (cmd) {
0664     case SET_KEY:
0665         if (is_default_wep_key) {
0666             ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
0667             break;
0668         }
0669         ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
0670         if (ret) {
0671             /*
0672              * can't add key for RX, but we don't need it
0673              * in the device for TX so still return 0
0674              */
0675             ret = 0;
0676             key->hw_key_idx = WEP_INVALID_OFFSET;
0677         }
0678 
0679         IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
0680         break;
0681     case DISABLE_KEY:
0682         if (is_default_wep_key)
0683             ret = iwl_remove_default_wep_key(priv, ctx, key);
0684         else
0685             ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
0686 
0687         IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
0688         break;
0689     default:
0690         ret = -EINVAL;
0691     }
0692 
0693     mutex_unlock(&priv->mutex);
0694     IWL_DEBUG_MAC80211(priv, "leave\n");
0695 
0696     return ret;
0697 }
0698 
0699 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
0700                    struct ieee80211_vif *vif,
0701                    struct ieee80211_ampdu_params *params)
0702 {
0703     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0704     int ret = -EINVAL;
0705     struct ieee80211_sta *sta = params->sta;
0706     enum ieee80211_ampdu_mlme_action action = params->action;
0707     u16 tid = params->tid;
0708     u16 *ssn = &params->ssn;
0709     u8 buf_size = params->buf_size;
0710     struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
0711 
0712     IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
0713              sta->addr, tid);
0714 
0715     if (!(priv->nvm_data->sku_cap_11n_enable))
0716         return -EACCES;
0717 
0718     IWL_DEBUG_MAC80211(priv, "enter\n");
0719     mutex_lock(&priv->mutex);
0720 
0721     switch (action) {
0722     case IEEE80211_AMPDU_RX_START:
0723         if (!iwl_enable_rx_ampdu())
0724             break;
0725         IWL_DEBUG_HT(priv, "start Rx\n");
0726         ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
0727         break;
0728     case IEEE80211_AMPDU_RX_STOP:
0729         IWL_DEBUG_HT(priv, "stop Rx\n");
0730         ret = iwl_sta_rx_agg_stop(priv, sta, tid);
0731         break;
0732     case IEEE80211_AMPDU_TX_START:
0733         if (!priv->trans->ops->txq_enable)
0734             break;
0735         if (!iwl_enable_tx_ampdu())
0736             break;
0737         IWL_DEBUG_HT(priv, "start Tx\n");
0738         ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
0739         break;
0740     case IEEE80211_AMPDU_TX_STOP_FLUSH:
0741     case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
0742         IWL_DEBUG_HT(priv, "Flush Tx\n");
0743         ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
0744         break;
0745     case IEEE80211_AMPDU_TX_STOP_CONT:
0746         IWL_DEBUG_HT(priv, "stop Tx\n");
0747         ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
0748         if ((ret == 0) && (priv->agg_tids_count > 0)) {
0749             priv->agg_tids_count--;
0750             IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
0751                      priv->agg_tids_count);
0752         }
0753         if (!priv->agg_tids_count &&
0754             priv->hw_params.use_rts_for_aggregation) {
0755             /*
0756              * switch off RTS/CTS if it was previously enabled
0757              */
0758             sta_priv->lq_sta.lq.general_params.flags &=
0759                 ~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
0760             iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
0761                     &sta_priv->lq_sta.lq, CMD_ASYNC, false);
0762         }
0763         break;
0764     case IEEE80211_AMPDU_TX_OPERATIONAL:
0765         ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
0766         break;
0767     }
0768     mutex_unlock(&priv->mutex);
0769     IWL_DEBUG_MAC80211(priv, "leave\n");
0770     return ret;
0771 }
0772 
0773 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
0774                   struct ieee80211_vif *vif,
0775                   struct ieee80211_sta *sta)
0776 {
0777     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0778     struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
0779     struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
0780     bool is_ap = vif->type == NL80211_IFTYPE_STATION;
0781     int ret;
0782     u8 sta_id;
0783 
0784     IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
0785             sta->addr);
0786     sta_priv->sta_id = IWL_INVALID_STATION;
0787 
0788     atomic_set(&sta_priv->pending_frames, 0);
0789     if (vif->type == NL80211_IFTYPE_AP)
0790         sta_priv->client = true;
0791 
0792     ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
0793                      is_ap, sta, &sta_id);
0794     if (ret) {
0795         IWL_ERR(priv, "Unable to add station %pM (%d)\n",
0796             sta->addr, ret);
0797         /* Should we return success if return code is EEXIST ? */
0798         return ret;
0799     }
0800 
0801     sta_priv->sta_id = sta_id;
0802 
0803     return 0;
0804 }
0805 
0806 static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
0807                  struct ieee80211_vif *vif,
0808                  struct ieee80211_sta *sta)
0809 {
0810     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0811     struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
0812     int ret;
0813 
0814     IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
0815 
0816     if (vif->type == NL80211_IFTYPE_STATION) {
0817         /*
0818          * Station will be removed from device when the RXON
0819          * is set to unassociated -- just deactivate it here
0820          * to avoid re-programming it.
0821          */
0822         ret = 0;
0823         iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
0824     } else {
0825         ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
0826         if (ret)
0827             IWL_DEBUG_QUIET_RFKILL(priv,
0828                 "Error removing station %pM\n", sta->addr);
0829     }
0830     return ret;
0831 }
0832 
0833 static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
0834                 struct ieee80211_vif *vif,
0835                 struct ieee80211_sta *sta,
0836                 enum ieee80211_sta_state old_state,
0837                 enum ieee80211_sta_state new_state)
0838 {
0839     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0840     struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
0841     enum {
0842         NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
0843     } op = NONE;
0844     int ret;
0845 
0846     IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
0847                sta->addr, old_state, new_state);
0848 
0849     mutex_lock(&priv->mutex);
0850     if (vif->type == NL80211_IFTYPE_STATION) {
0851         if (old_state == IEEE80211_STA_NOTEXIST &&
0852             new_state == IEEE80211_STA_NONE)
0853             op = ADD;
0854         else if (old_state == IEEE80211_STA_NONE &&
0855              new_state == IEEE80211_STA_NOTEXIST)
0856             op = REMOVE;
0857         else if (old_state == IEEE80211_STA_AUTH &&
0858              new_state == IEEE80211_STA_ASSOC)
0859             op = HT_RATE_INIT;
0860     } else {
0861         if (old_state == IEEE80211_STA_AUTH &&
0862             new_state == IEEE80211_STA_ASSOC)
0863             op = ADD_RATE_INIT;
0864         else if (old_state == IEEE80211_STA_ASSOC &&
0865              new_state == IEEE80211_STA_AUTH)
0866             op = REMOVE;
0867     }
0868 
0869     switch (op) {
0870     case ADD:
0871         ret = iwlagn_mac_sta_add(hw, vif, sta);
0872         if (ret)
0873             break;
0874         /*
0875          * Clear the in-progress flag, the AP station entry was added
0876          * but we'll initialize LQ only when we've associated (which
0877          * would also clear the in-progress flag). This is necessary
0878          * in case we never initialize LQ because association fails.
0879          */
0880         spin_lock_bh(&priv->sta_lock);
0881         priv->stations[iwl_sta_id(sta)].used &=
0882             ~IWL_STA_UCODE_INPROGRESS;
0883         spin_unlock_bh(&priv->sta_lock);
0884         break;
0885     case REMOVE:
0886         ret = iwlagn_mac_sta_remove(hw, vif, sta);
0887         break;
0888     case ADD_RATE_INIT:
0889         ret = iwlagn_mac_sta_add(hw, vif, sta);
0890         if (ret)
0891             break;
0892         /* Initialize rate scaling */
0893         IWL_DEBUG_INFO(priv,
0894                    "Initializing rate scaling for station %pM\n",
0895                    sta->addr);
0896         iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
0897         ret = 0;
0898         break;
0899     case HT_RATE_INIT:
0900         /* Initialize rate scaling */
0901         ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
0902         if (ret)
0903             break;
0904         IWL_DEBUG_INFO(priv,
0905                    "Initializing rate scaling for station %pM\n",
0906                    sta->addr);
0907         iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
0908         ret = 0;
0909         break;
0910     default:
0911         ret = 0;
0912         break;
0913     }
0914 
0915     /*
0916      * mac80211 might WARN if we fail, but due the way we
0917      * (badly) handle hard rfkill, we might fail here
0918      */
0919     if (iwl_is_rfkill(priv))
0920         ret = 0;
0921 
0922     mutex_unlock(&priv->mutex);
0923     IWL_DEBUG_MAC80211(priv, "leave\n");
0924 
0925     return ret;
0926 }
0927 
0928 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
0929                       struct ieee80211_vif *vif,
0930                       struct ieee80211_channel_switch *ch_switch)
0931 {
0932     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
0933     struct ieee80211_conf *conf = &hw->conf;
0934     struct ieee80211_channel *channel = ch_switch->chandef.chan;
0935     struct iwl_ht_config *ht_conf = &priv->current_ht_config;
0936     /*
0937      * MULTI-FIXME
0938      * When we add support for multiple interfaces, we need to
0939      * revisit this. The channel switch command in the device
0940      * only affects the BSS context, but what does that really
0941      * mean? And what if we get a CSA on the second interface?
0942      * This needs a lot of work.
0943      */
0944     struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
0945     u16 ch;
0946 
0947     IWL_DEBUG_MAC80211(priv, "enter\n");
0948 
0949     mutex_lock(&priv->mutex);
0950 
0951     if (iwl_is_rfkill(priv))
0952         goto out;
0953 
0954     if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
0955         test_bit(STATUS_SCANNING, &priv->status) ||
0956         test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
0957         goto out;
0958 
0959     if (!iwl_is_associated_ctx(ctx))
0960         goto out;
0961 
0962     if (!priv->lib->set_channel_switch)
0963         goto out;
0964 
0965     ch = channel->hw_value;
0966     if (le16_to_cpu(ctx->active.channel) == ch)
0967         goto out;
0968 
0969     priv->current_ht_config.smps = conf->smps_mode;
0970 
0971     /* Configure HT40 channels */
0972     switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
0973     case NL80211_CHAN_NO_HT:
0974     case NL80211_CHAN_HT20:
0975         ctx->ht.is_40mhz = false;
0976         ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
0977         break;
0978     case NL80211_CHAN_HT40MINUS:
0979         ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
0980         ctx->ht.is_40mhz = true;
0981         break;
0982     case NL80211_CHAN_HT40PLUS:
0983         ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
0984         ctx->ht.is_40mhz = true;
0985         break;
0986     }
0987 
0988     if ((le16_to_cpu(ctx->staging.channel) != ch))
0989         ctx->staging.flags = 0;
0990 
0991     iwl_set_rxon_channel(priv, channel, ctx);
0992     iwl_set_rxon_ht(priv, ht_conf);
0993     iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
0994 
0995     /*
0996      * at this point, staging_rxon has the
0997      * configuration for channel switch
0998      */
0999     set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1000     priv->switch_channel = cpu_to_le16(ch);
1001     if (priv->lib->set_channel_switch(priv, ch_switch)) {
1002         clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1003         priv->switch_channel = 0;
1004         ieee80211_chswitch_done(ctx->vif, false);
1005     }
1006 
1007 out:
1008     mutex_unlock(&priv->mutex);
1009     IWL_DEBUG_MAC80211(priv, "leave\n");
1010 }
1011 
1012 void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1013 {
1014     /*
1015      * MULTI-FIXME
1016      * See iwlagn_mac_channel_switch.
1017      */
1018     struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1019 
1020     if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1021         return;
1022 
1023     if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1024         return;
1025 
1026     if (ctx->vif)
1027         ieee80211_chswitch_done(ctx->vif, is_success);
1028 }
1029 
1030 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1031                     unsigned int changed_flags,
1032                     unsigned int *total_flags,
1033                     u64 multicast)
1034 {
1035     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1036     __le32 filter_or = 0, filter_nand = 0;
1037     struct iwl_rxon_context *ctx;
1038 
1039 #define CHK(test, flag) do { \
1040     if (*total_flags & (test))      \
1041         filter_or |= (flag);        \
1042     else                    \
1043         filter_nand |= (flag);      \
1044     } while (0)
1045 
1046     IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1047             changed_flags, *total_flags);
1048 
1049     CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1050     /* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1051     CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1052     CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1053 
1054 #undef CHK
1055 
1056     mutex_lock(&priv->mutex);
1057 
1058     for_each_context(priv, ctx) {
1059         ctx->staging.filter_flags &= ~filter_nand;
1060         ctx->staging.filter_flags |= filter_or;
1061 
1062         /*
1063          * Not committing directly because hardware can perform a scan,
1064          * but we'll eventually commit the filter flags change anyway.
1065          */
1066     }
1067 
1068     mutex_unlock(&priv->mutex);
1069 
1070     /*
1071      * Receiving all multicast frames is always enabled by the
1072      * default flags setup in iwl_connection_init_rx_config()
1073      * since we currently do not support programming multicast
1074      * filters into the device.
1075      */
1076     *total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1077             FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1078 }
1079 
1080 static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1081                  u32 queues, bool drop)
1082 {
1083     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1084     u32 scd_queues;
1085 
1086     mutex_lock(&priv->mutex);
1087     IWL_DEBUG_MAC80211(priv, "enter\n");
1088 
1089     if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1090         IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1091         goto done;
1092     }
1093     if (iwl_is_rfkill(priv)) {
1094         IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1095         goto done;
1096     }
1097 
1098     scd_queues = BIT(priv->trans->trans_cfg->base_params->num_of_queues) - 1;
1099     scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1100             BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1101 
1102     if (drop) {
1103         IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1104                     scd_queues);
1105         if (iwlagn_txfifo_flush(priv, scd_queues)) {
1106             IWL_ERR(priv, "flush request fail\n");
1107             goto done;
1108         }
1109     }
1110 
1111     IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1112     iwl_trans_wait_tx_queues_empty(priv->trans, scd_queues);
1113 done:
1114     mutex_unlock(&priv->mutex);
1115     IWL_DEBUG_MAC80211(priv, "leave\n");
1116 }
1117 
1118 static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1119                       struct ieee80211_vif *vif,
1120                       const struct ieee80211_event *event)
1121 {
1122     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1123 
1124     if (event->type != RSSI_EVENT)
1125         return;
1126 
1127     IWL_DEBUG_MAC80211(priv, "enter\n");
1128 
1129     if (priv->lib->bt_params &&
1130         priv->lib->bt_params->advanced_bt_coexist) {
1131         if (event->u.rssi.data == RSSI_EVENT_LOW)
1132             priv->bt_enable_pspoll = true;
1133         else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1134             priv->bt_enable_pspoll = false;
1135 
1136         queue_work(priv->workqueue, &priv->bt_runtime_config);
1137     } else {
1138         IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1139                 "ignoring RSSI callback\n");
1140     }
1141 
1142     IWL_DEBUG_MAC80211(priv, "leave\n");
1143 }
1144 
1145 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1146                   struct ieee80211_sta *sta, bool set)
1147 {
1148     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1149 
1150     queue_work(priv->workqueue, &priv->beacon_update);
1151 
1152     return 0;
1153 }
1154 
1155 static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1156                   struct ieee80211_vif *vif,
1157                   unsigned int link_id, u16 queue,
1158                   const struct ieee80211_tx_queue_params *params)
1159 {
1160     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1161     struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1162     struct iwl_rxon_context *ctx = vif_priv->ctx;
1163     int q;
1164 
1165     if (WARN_ON(!ctx))
1166         return -EINVAL;
1167 
1168     IWL_DEBUG_MAC80211(priv, "enter\n");
1169 
1170     if (!iwl_is_ready_rf(priv)) {
1171         IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1172         return -EIO;
1173     }
1174 
1175     if (queue >= AC_NUM) {
1176         IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1177         return 0;
1178     }
1179 
1180     q = AC_NUM - 1 - queue;
1181 
1182     mutex_lock(&priv->mutex);
1183 
1184     ctx->qos_data.def_qos_parm.ac[q].cw_min =
1185         cpu_to_le16(params->cw_min);
1186     ctx->qos_data.def_qos_parm.ac[q].cw_max =
1187         cpu_to_le16(params->cw_max);
1188     ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1189     ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1190             cpu_to_le16((params->txop * 32));
1191 
1192     ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1193 
1194     mutex_unlock(&priv->mutex);
1195 
1196     IWL_DEBUG_MAC80211(priv, "leave\n");
1197     return 0;
1198 }
1199 
1200 static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1201 {
1202     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1203 
1204     return priv->ibss_manager == IWL_IBSS_MANAGER;
1205 }
1206 
1207 static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1208 {
1209     iwl_connection_init_rx_config(priv, ctx);
1210 
1211     iwlagn_set_rxon_chain(priv, ctx);
1212 
1213     return iwlagn_commit_rxon(priv, ctx);
1214 }
1215 
1216 static int iwl_setup_interface(struct iwl_priv *priv,
1217                    struct iwl_rxon_context *ctx)
1218 {
1219     struct ieee80211_vif *vif = ctx->vif;
1220     int err, ac;
1221 
1222     lockdep_assert_held(&priv->mutex);
1223 
1224     /*
1225      * This variable will be correct only when there's just
1226      * a single context, but all code using it is for hardware
1227      * that supports only one context.
1228      */
1229     priv->iw_mode = vif->type;
1230 
1231     ctx->is_active = true;
1232 
1233     err = iwl_set_mode(priv, ctx);
1234     if (err) {
1235         if (!ctx->always_active)
1236             ctx->is_active = false;
1237         return err;
1238     }
1239 
1240     if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1241         vif->type == NL80211_IFTYPE_ADHOC) {
1242         /*
1243          * pretend to have high BT traffic as long as we
1244          * are operating in IBSS mode, as this will cause
1245          * the rate scaling etc. to behave as intended.
1246          */
1247         priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1248     }
1249 
1250     /* set up queue mappings */
1251     for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1252         vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1253 
1254     if (vif->type == NL80211_IFTYPE_AP)
1255         vif->cab_queue = ctx->mcast_queue;
1256     else
1257         vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1258 
1259     return 0;
1260 }
1261 
1262 static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1263                     struct ieee80211_vif *vif)
1264 {
1265     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1266     struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1267     struct iwl_rxon_context *tmp, *ctx = NULL;
1268     int err;
1269     enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1270     bool reset = false;
1271 
1272     IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1273                viftype, vif->addr);
1274 
1275     mutex_lock(&priv->mutex);
1276 
1277     if (!iwl_is_ready_rf(priv)) {
1278         IWL_WARN(priv, "Try to add interface when device not ready\n");
1279         err = -EINVAL;
1280         goto out;
1281     }
1282 
1283     for_each_context(priv, tmp) {
1284         u32 possible_modes =
1285             tmp->interface_modes | tmp->exclusive_interface_modes;
1286 
1287         if (tmp->vif) {
1288             /* On reset we need to add the same interface again */
1289             if (tmp->vif == vif) {
1290                 reset = true;
1291                 ctx = tmp;
1292                 break;
1293             }
1294 
1295             /* check if this busy context is exclusive */
1296             if (tmp->exclusive_interface_modes &
1297                         BIT(tmp->vif->type)) {
1298                 err = -EINVAL;
1299                 goto out;
1300             }
1301             continue;
1302         }
1303 
1304         if (!(possible_modes & BIT(viftype)))
1305             continue;
1306 
1307         /* have maybe usable context w/o interface */
1308         ctx = tmp;
1309         break;
1310     }
1311 
1312     if (!ctx) {
1313         err = -EOPNOTSUPP;
1314         goto out;
1315     }
1316 
1317     vif_priv->ctx = ctx;
1318     ctx->vif = vif;
1319 
1320     /*
1321      * In SNIFFER device type, the firmware reports the FCS to
1322      * the host, rather than snipping it off. Unfortunately,
1323      * mac80211 doesn't (yet) provide a per-packet flag for
1324      * this, so that we have to set the hardware flag based
1325      * on the interfaces added. As the monitor interface can
1326      * only be present by itself, and will be removed before
1327      * other interfaces are added, this is safe.
1328      */
1329     if (vif->type == NL80211_IFTYPE_MONITOR)
1330         ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1331     else
1332         __clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1333 
1334     err = iwl_setup_interface(priv, ctx);
1335     if (!err || reset)
1336         goto out;
1337 
1338     ctx->vif = NULL;
1339     priv->iw_mode = NL80211_IFTYPE_STATION;
1340  out:
1341     mutex_unlock(&priv->mutex);
1342 
1343     IWL_DEBUG_MAC80211(priv, "leave\n");
1344     return err;
1345 }
1346 
1347 static void iwl_teardown_interface(struct iwl_priv *priv,
1348                    struct ieee80211_vif *vif,
1349                    bool mode_change)
1350 {
1351     struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1352 
1353     lockdep_assert_held(&priv->mutex);
1354 
1355     if (priv->scan_vif == vif) {
1356         iwl_scan_cancel_timeout(priv, 200);
1357         iwl_force_scan_end(priv);
1358     }
1359 
1360     if (!mode_change) {
1361         iwl_set_mode(priv, ctx);
1362         if (!ctx->always_active)
1363             ctx->is_active = false;
1364     }
1365 
1366     /*
1367      * When removing the IBSS interface, overwrite the
1368      * BT traffic load with the stored one from the last
1369      * notification, if any. If this is a device that
1370      * doesn't implement this, this has no effect since
1371      * both values are the same and zero.
1372      */
1373     if (vif->type == NL80211_IFTYPE_ADHOC)
1374         priv->bt_traffic_load = priv->last_bt_traffic_load;
1375 }
1376 
1377 static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1378                   struct ieee80211_vif *vif)
1379 {
1380     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1381     struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1382 
1383     IWL_DEBUG_MAC80211(priv, "enter\n");
1384 
1385     mutex_lock(&priv->mutex);
1386 
1387     WARN_ON(ctx->vif != vif);
1388     ctx->vif = NULL;
1389 
1390     iwl_teardown_interface(priv, vif, false);
1391 
1392     mutex_unlock(&priv->mutex);
1393 
1394     IWL_DEBUG_MAC80211(priv, "leave\n");
1395 
1396 }
1397 
1398 static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1399                        struct ieee80211_vif *vif,
1400                        enum nl80211_iftype newtype, bool newp2p)
1401 {
1402     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1403     struct iwl_rxon_context *ctx, *tmp;
1404     enum nl80211_iftype newviftype = newtype;
1405     u32 interface_modes;
1406     int err;
1407 
1408     IWL_DEBUG_MAC80211(priv, "enter\n");
1409 
1410     newtype = ieee80211_iftype_p2p(newtype, newp2p);
1411 
1412     mutex_lock(&priv->mutex);
1413 
1414     ctx = iwl_rxon_ctx_from_vif(vif);
1415 
1416     /*
1417      * To simplify this code, only support changes on the
1418      * BSS context. The PAN context is usually reassigned
1419      * by creating/removing P2P interfaces anyway.
1420      */
1421     if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1422         err = -EBUSY;
1423         goto out;
1424     }
1425 
1426     if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1427         /*
1428          * Huh? But wait ... this can maybe happen when
1429          * we're in the middle of a firmware restart!
1430          */
1431         err = -EBUSY;
1432         goto out;
1433     }
1434 
1435     /* Check if the switch is supported in the same context */
1436     interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1437     if (!(interface_modes & BIT(newtype))) {
1438         err = -EBUSY;
1439         goto out;
1440     }
1441 
1442     if (ctx->exclusive_interface_modes & BIT(newtype)) {
1443         for_each_context(priv, tmp) {
1444             if (ctx == tmp)
1445                 continue;
1446 
1447             if (!tmp->is_active)
1448                 continue;
1449 
1450             /*
1451              * The current mode switch would be exclusive, but
1452              * another context is active ... refuse the switch.
1453              */
1454             err = -EBUSY;
1455             goto out;
1456         }
1457     }
1458 
1459     /* success */
1460     iwl_teardown_interface(priv, vif, true);
1461     vif->type = newviftype;
1462     vif->p2p = newp2p;
1463     err = iwl_setup_interface(priv, ctx);
1464     WARN_ON(err);
1465     /*
1466      * We've switched internally, but submitting to the
1467      * device may have failed for some reason. Mask this
1468      * error, because otherwise mac80211 will not switch
1469      * (and set the interface type back) and we'll be
1470      * out of sync with it.
1471      */
1472     err = 0;
1473 
1474  out:
1475     mutex_unlock(&priv->mutex);
1476     IWL_DEBUG_MAC80211(priv, "leave\n");
1477 
1478     return err;
1479 }
1480 
1481 static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1482                   struct ieee80211_vif *vif,
1483                   struct ieee80211_scan_request *hw_req)
1484 {
1485     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1486     struct cfg80211_scan_request *req = &hw_req->req;
1487     int ret;
1488 
1489     IWL_DEBUG_MAC80211(priv, "enter\n");
1490 
1491     if (req->n_channels == 0)
1492         return -EINVAL;
1493 
1494     mutex_lock(&priv->mutex);
1495 
1496     /*
1497      * If an internal scan is in progress, just set
1498      * up the scan_request as per above.
1499      */
1500     if (priv->scan_type != IWL_SCAN_NORMAL) {
1501         IWL_DEBUG_SCAN(priv,
1502                    "SCAN request during internal scan - defer\n");
1503         priv->scan_request = req;
1504         priv->scan_vif = vif;
1505         ret = 0;
1506     } else {
1507         priv->scan_request = req;
1508         priv->scan_vif = vif;
1509         /*
1510          * mac80211 will only ask for one band at a time
1511          * so using channels[0] here is ok
1512          */
1513         ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1514                     req->channels[0]->band);
1515         if (ret) {
1516             priv->scan_request = NULL;
1517             priv->scan_vif = NULL;
1518         }
1519     }
1520 
1521     IWL_DEBUG_MAC80211(priv, "leave\n");
1522 
1523     mutex_unlock(&priv->mutex);
1524 
1525     return ret;
1526 }
1527 
1528 static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1529 {
1530     struct iwl_addsta_cmd cmd = {
1531         .mode = STA_CONTROL_MODIFY_MSK,
1532         .station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1533         .sta.sta_id = sta_id,
1534     };
1535 
1536     iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1537 }
1538 
1539 static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1540                   struct ieee80211_vif *vif,
1541                   enum sta_notify_cmd cmd,
1542                   struct ieee80211_sta *sta)
1543 {
1544     struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1545     struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1546     int sta_id;
1547 
1548     IWL_DEBUG_MAC80211(priv, "enter\n");
1549 
1550     switch (cmd) {
1551     case STA_NOTIFY_SLEEP:
1552         WARN_ON(!sta_priv->client);
1553         sta_priv->asleep = true;
1554         if (atomic_read(&sta_priv->pending_frames) > 0)
1555             ieee80211_sta_block_awake(hw, sta, true);
1556         break;
1557     case STA_NOTIFY_AWAKE:
1558         WARN_ON(!sta_priv->client);
1559         if (!sta_priv->asleep)
1560             break;
1561         sta_priv->asleep = false;
1562         sta_id = iwl_sta_id(sta);
1563         if (sta_id != IWL_INVALID_STATION)
1564             iwl_sta_modify_ps_wake(priv, sta_id);
1565         break;
1566     default:
1567         break;
1568     }
1569     IWL_DEBUG_MAC80211(priv, "leave\n");
1570 }
1571 
1572 const struct ieee80211_ops iwlagn_hw_ops = {
1573     .tx = iwlagn_mac_tx,
1574     .start = iwlagn_mac_start,
1575     .stop = iwlagn_mac_stop,
1576 #ifdef CONFIG_PM_SLEEP
1577     .suspend = iwlagn_mac_suspend,
1578     .resume = iwlagn_mac_resume,
1579     .set_wakeup = iwlagn_mac_set_wakeup,
1580 #endif
1581     .add_interface = iwlagn_mac_add_interface,
1582     .remove_interface = iwlagn_mac_remove_interface,
1583     .change_interface = iwlagn_mac_change_interface,
1584     .config = iwlagn_mac_config,
1585     .configure_filter = iwlagn_configure_filter,
1586     .set_key = iwlagn_mac_set_key,
1587     .update_tkip_key = iwlagn_mac_update_tkip_key,
1588     .set_rekey_data = iwlagn_mac_set_rekey_data,
1589     .conf_tx = iwlagn_mac_conf_tx,
1590     .bss_info_changed = iwlagn_bss_info_changed,
1591     .ampdu_action = iwlagn_mac_ampdu_action,
1592     .hw_scan = iwlagn_mac_hw_scan,
1593     .sta_notify = iwlagn_mac_sta_notify,
1594     .sta_state = iwlagn_mac_sta_state,
1595     .channel_switch = iwlagn_mac_channel_switch,
1596     .flush = iwlagn_mac_flush,
1597     .tx_last_beacon = iwlagn_mac_tx_last_beacon,
1598     .event_callback = iwlagn_mac_event_callback,
1599     .set_tim = iwlagn_mac_set_tim,
1600 };
1601 
1602 /* This function both allocates and initializes hw and priv. */
1603 struct ieee80211_hw *iwl_alloc_all(void)
1604 {
1605     struct iwl_priv *priv;
1606     struct iwl_op_mode *op_mode;
1607     /* mac80211 allocates memory for this device instance, including
1608      *   space for this driver's private structure */
1609     struct ieee80211_hw *hw;
1610 
1611     hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1612                 sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1613     if (!hw)
1614         goto out;
1615 
1616     op_mode = hw->priv;
1617     priv = IWL_OP_MODE_GET_DVM(op_mode);
1618     priv->hw = hw;
1619 
1620 out:
1621     return hw;
1622 }