]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Merge tag 'mmc-v4.15-2' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc
[mirror_ubuntu-bionic-kernel.git] / drivers / net / wireless / broadcom / brcm80211 / brcmfmac / cfg80211.c
CommitLineData
5b435de0
AS		 1/*
2 * Copyright (c) 2010 Broadcom Corporation
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17/* Toplevel file. Relies on dhd_linux.c to send commands to the dongle. */
18
19#include <linux/kernel.h>
5b435de0 20#include <linux/etherdevice.h>
68ca395f 21#include <linux/module.h>
1bacb048 22#include <linux/vmalloc.h>
5b435de0 23#include <net/cfg80211.h>
cbaa177d 24#include <net/netlink.h>
5b435de0
AS		 25
26#include <brcmu_utils.h>
27#include <defs.h>
28#include <brcmu_wifi.h>
122d3d04 29#include "core.h"
a8e8ed34 30#include "debug.h"
40c1c249 31#include "tracepoint.h"
7a5c1f64 32#include "fwil_types.h"
9f440b7b 33#include "p2p.h"
61730d4d 34#include "btcoex.h"
ac55136f 35#include "pno.h"
bfe81975 36#include "cfg80211.h"
c08437b4 37#include "feature.h"
81f5dcb8 38#include "fwil.h"
8851cce0 39#include "proto.h"
1bacb048 40#include "vendor.h"
d14f78b9 41#include "bus.h"
6b89dcb3 42#include "common.h"
5b435de0 43
e5806072 44#define BRCMF_SCAN_IE_LEN_MAX 2048
e5806072 45
1a873342
HM		 46#define WPA_OUI "\x00\x50\xF2" /* WPA OUI */
47#define WPA_OUI_TYPE 1
48#define RSN_OUI "\x00\x0F\xAC" /* RSN OUI */
49#define WME_OUI_TYPE 2
89286dc9 50#define WPS_OUI_TYPE 4
1a873342
HM		 51
52#define VS_IE_FIXED_HDR_LEN 6
53#define WPA_IE_VERSION_LEN 2
54#define WPA_IE_MIN_OUI_LEN 4
55#define WPA_IE_SUITE_COUNT_LEN 2
56
57#define WPA_CIPHER_NONE 0 /* None */
58#define WPA_CIPHER_WEP_40 1 /* WEP (40-bit) */
59#define WPA_CIPHER_TKIP 2 /* TKIP: default for WPA */
60#define WPA_CIPHER_AES_CCM 4 /* AES (CCM) */
61#define WPA_CIPHER_WEP_104 5 /* WEP (104-bit) */
62
63#define RSN_AKM_NONE 0 /* None (IBSS) */
64#define RSN_AKM_UNSPECIFIED 1 /* Over 802.1x */
65#define RSN_AKM_PSK 2 /* Pre-shared Key */
240d61a9
HM		 66#define RSN_AKM_SHA256_1X 5 /* SHA256, 802.1X */
67#define RSN_AKM_SHA256_PSK 6 /* SHA256, Pre-shared Key */
1a873342 68#define RSN_CAP_LEN 2 /* Length of RSN capabilities */
240d61a9
HM		 69#define RSN_CAP_PTK_REPLAY_CNTR_MASK (BIT(2) | BIT(3))
70#define RSN_CAP_MFPR_MASK BIT(6)
71#define RSN_CAP_MFPC_MASK BIT(7)
72#define RSN_PMKID_COUNT_LEN 2
1a873342
HM		 73
74#define VNDR_IE_CMD_LEN 4 /* length of the set command
75 * string :"add", "del" (+ NUL)
76 */
77#define VNDR_IE_COUNT_OFFSET 4
78#define VNDR_IE_PKTFLAG_OFFSET 8
79#define VNDR_IE_VSIE_OFFSET 12
80#define VNDR_IE_HDR_SIZE 12
9f440b7b 81#define VNDR_IE_PARSE_LIMIT 5
1a873342
HM		 82
83#define DOT11_MGMT_HDR_LEN 24 /* d11 management header len */
84#define DOT11_BCN_PRB_FIXED_LEN 12 /* beacon/probe fixed length */
04012895 85
89286dc9
HM		 86#define BRCMF_SCAN_JOIN_ACTIVE_DWELL_TIME_MS 320
87#define BRCMF_SCAN_JOIN_PASSIVE_DWELL_TIME_MS 400
88#define BRCMF_SCAN_JOIN_PROBE_INTERVAL_MS 20
89
1678ba8e
HM		 90#define BRCMF_SCAN_CHANNEL_TIME 40
91#define BRCMF_SCAN_UNASSOC_TIME 40
92#define BRCMF_SCAN_PASSIVE_TIME 120
93
3021ad9a
HM		 94#define BRCMF_ND_INFO_TIMEOUT msecs_to_jiffies(2000)
95
5b435de0
AS		 96#define BRCMF_ASSOC_PARAMS_FIXED_SIZE \
97 (sizeof(struct brcmf_assoc_params_le) - sizeof(u16))
98
ce81e317 99static bool check_vif_up(struct brcmf_cfg80211_vif *vif)
5b435de0 100{
c1179033 101 if (!test_bit(BRCMF_VIF_STATUS_READY, &vif->sme_state)) {
647c9ae0
AS		 102 brcmf_dbg(INFO, "device is not ready : status (%lu)\n",
103 vif->sme_state);
5b435de0
AS		 104 return false;
105 }
106 return true;
107}
108
5b435de0
AS		 109#define RATE_TO_BASE100KBPS(rate) (((rate) * 10) / 2)
110#define RATETAB_ENT(_rateid, _flags) \
111 { \
112 .bitrate = RATE_TO_BASE100KBPS(_rateid), \
113 .hw_value = (_rateid), \
114 .flags = (_flags), \
115 }
116
117static struct ieee80211_rate __wl_rates[] = {
118 RATETAB_ENT(BRCM_RATE_1M, 0),
119 RATETAB_ENT(BRCM_RATE_2M, IEEE80211_RATE_SHORT_PREAMBLE),
120 RATETAB_ENT(BRCM_RATE_5M5, IEEE80211_RATE_SHORT_PREAMBLE),
121 RATETAB_ENT(BRCM_RATE_11M, IEEE80211_RATE_SHORT_PREAMBLE),
122 RATETAB_ENT(BRCM_RATE_6M, 0),
123 RATETAB_ENT(BRCM_RATE_9M, 0),
124 RATETAB_ENT(BRCM_RATE_12M, 0),
125 RATETAB_ENT(BRCM_RATE_18M, 0),
126 RATETAB_ENT(BRCM_RATE_24M, 0),
127 RATETAB_ENT(BRCM_RATE_36M, 0),
128 RATETAB_ENT(BRCM_RATE_48M, 0),
129 RATETAB_ENT(BRCM_RATE_54M, 0),
130};
131
5b435de0 132#define wl_g_rates (__wl_rates + 0)
58de92d2
AS		 133#define wl_g_rates_size ARRAY_SIZE(__wl_rates)
134#define wl_a_rates (__wl_rates + 4)
135#define wl_a_rates_size (wl_g_rates_size - 4)
136
137#define CHAN2G(_channel, _freq) { \
57fbcce3 138 .band = NL80211_BAND_2GHZ, \
58de92d2
AS		 139 .center_freq = (_freq), \
140 .hw_value = (_channel), \
58de92d2
AS		 141 .max_antenna_gain = 0, \
142 .max_power = 30, \
143}
144
145#define CHAN5G(_channel) { \
57fbcce3 146 .band = NL80211_BAND_5GHZ, \
58de92d2
AS		 147 .center_freq = 5000 + (5 * (_channel)), \
148 .hw_value = (_channel), \
58de92d2
AS		 149 .max_antenna_gain = 0, \
150 .max_power = 30, \
151}
152
153static struct ieee80211_channel __wl_2ghz_channels[] = {
154 CHAN2G(1, 2412), CHAN2G(2, 2417), CHAN2G(3, 2422), CHAN2G(4, 2427),
155 CHAN2G(5, 2432), CHAN2G(6, 2437), CHAN2G(7, 2442), CHAN2G(8, 2447),
156 CHAN2G(9, 2452), CHAN2G(10, 2457), CHAN2G(11, 2462), CHAN2G(12, 2467),
157 CHAN2G(13, 2472), CHAN2G(14, 2484)
158};
159
160static struct ieee80211_channel __wl_5ghz_channels[] = {
161 CHAN5G(34), CHAN5G(36), CHAN5G(38), CHAN5G(40), CHAN5G(42),
162 CHAN5G(44), CHAN5G(46), CHAN5G(48), CHAN5G(52), CHAN5G(56),
163 CHAN5G(60), CHAN5G(64), CHAN5G(100), CHAN5G(104), CHAN5G(108),
164 CHAN5G(112), CHAN5G(116), CHAN5G(120), CHAN5G(124), CHAN5G(128),
165 CHAN5G(132), CHAN5G(136), CHAN5G(140), CHAN5G(144), CHAN5G(149),
166 CHAN5G(153), CHAN5G(157), CHAN5G(161), CHAN5G(165)
167};
5b435de0 168
b48d8916 169/* Band templates duplicated per wiphy. The channel info
58de92d2 170 * above is added to the band during setup.
b48d8916
AS		 171 */
172static const struct ieee80211_supported_band __wl_band_2ghz = {
57fbcce3 173 .band = NL80211_BAND_2GHZ,
5b435de0
AS		 174 .bitrates = wl_g_rates,
175 .n_bitrates = wl_g_rates_size,
176};
177
58de92d2 178static const struct ieee80211_supported_band __wl_band_5ghz = {
57fbcce3 179 .band = NL80211_BAND_5GHZ,
5b435de0
AS		 180 .bitrates = wl_a_rates,
181 .n_bitrates = wl_a_rates_size,
182};
183
d48200ba
HM		 184/* This is to override regulatory domains defined in cfg80211 module (reg.c)
185 * By default world regulatory domain defined in reg.c puts the flags
8fe02e16
LR		 186 * NL80211_RRF_NO_IR for 5GHz channels (for * 36..48 and 149..165).
187 * With respect to these flags, wpa_supplicant doesn't * start p2p
188 * operations on 5GHz channels. All the changes in world regulatory
d48200ba
HM		 189 * domain are to be done here.
190 */
191static const struct ieee80211_regdomain brcmf_regdom = {
192 .n_reg_rules = 4,
193 .alpha2 = "99",
194 .reg_rules = {
195 /* IEEE 802.11b/g, channels 1..11 */
196 REG_RULE(2412-10, 2472+10, 40, 6, 20, 0),
197 /* If any */
198 /* IEEE 802.11 channel 14 - Only JP enables
199 * this and for 802.11b only
200 */
201 REG_RULE(2484-10, 2484+10, 20, 6, 20, 0),
202 /* IEEE 802.11a, channel 36..64 */
c555ecde 203 REG_RULE(5150-10, 5350+10, 80, 6, 20, 0),
d48200ba 204 /* IEEE 802.11a, channel 100..165 */
c555ecde 205 REG_RULE(5470-10, 5850+10, 80, 6, 20, 0), }
5b435de0
AS		 206};
207
240d61a9
HM		 208/* Note: brcmf_cipher_suites is an array of int defining which cipher suites
209 * are supported. A pointer to this array and the number of entries is passed
210 * on to upper layers. AES_CMAC defines whether or not the driver supports MFP.
211 * So the cipher suite AES_CMAC has to be the last one in the array, and when
212 * device does not support MFP then the number of suites will be decreased by 1
213 */
214static const u32 brcmf_cipher_suites[] = {
5b435de0
AS		 215 WLAN_CIPHER_SUITE_WEP40,
216 WLAN_CIPHER_SUITE_WEP104,
217 WLAN_CIPHER_SUITE_TKIP,
218 WLAN_CIPHER_SUITE_CCMP,
240d61a9
HM		 219 /* Keep as last entry: */
220 WLAN_CIPHER_SUITE_AES_CMAC
5b435de0
AS		 221};
222
1a873342
HM		 223/* Vendor specific ie. id = 221, oui and type defines exact ie */
224struct brcmf_vs_tlv {
225 u8 id;
226 u8 len;
227 u8 oui[3];
228 u8 oui_type;
229};
230
231struct parsed_vndr_ie_info {
232 u8 *ie_ptr;
233 u32 ie_len; /* total length including id & length field */
234 struct brcmf_vs_tlv vndrie;
235};
236
237struct parsed_vndr_ies {
238 u32 count;
9f440b7b 239 struct parsed_vndr_ie_info ie_info[VNDR_IE_PARSE_LIMIT];
1a873342
HM		 240};
241
7705ba6f
AS		 242static u8 nl80211_band_to_fwil(enum nl80211_band band)
243{
244 switch (band) {
245 case NL80211_BAND_2GHZ:
246 return WLC_BAND_2G;
247 case NL80211_BAND_5GHZ:
248 return WLC_BAND_5G;
249 default:
250 WARN_ON(1);
251 break;
252 }
253 return 0;
254}
255
5a394eba
AS		 256static u16 chandef_to_chanspec(struct brcmu_d11inf *d11inf,
257 struct cfg80211_chan_def *ch)
600a897d
AS		 258{
259 struct brcmu_chan ch_inf;
260 s32 primary_offset;
261
262 brcmf_dbg(TRACE, "chandef: control %d center %d width %d\n",
263 ch->chan->center_freq, ch->center_freq1, ch->width);
264 ch_inf.chnum = ieee80211_frequency_to_channel(ch->center_freq1);
36e8072e 265 primary_offset = ch->chan->center_freq - ch->center_freq1;
600a897d
AS		 266 switch (ch->width) {
267 case NL80211_CHAN_WIDTH_20:
0cd75b19 268 case NL80211_CHAN_WIDTH_20_NOHT:
600a897d
AS		 269 ch_inf.bw = BRCMU_CHAN_BW_20;
270 WARN_ON(primary_offset != 0);
271 break;
272 case NL80211_CHAN_WIDTH_40:
273 ch_inf.bw = BRCMU_CHAN_BW_40;
36e8072e 274 if (primary_offset > 0)
600a897d
AS		 275 ch_inf.sb = BRCMU_CHAN_SB_U;
276 else
277 ch_inf.sb = BRCMU_CHAN_SB_L;
278 break;
279 case NL80211_CHAN_WIDTH_80:
280 ch_inf.bw = BRCMU_CHAN_BW_80;
36e8072e
RM		 281 if (primary_offset == -30)
282 ch_inf.sb = BRCMU_CHAN_SB_LL;
283 else if (primary_offset == -10)
284 ch_inf.sb = BRCMU_CHAN_SB_LU;
285 else if (primary_offset == 10)
286 ch_inf.sb = BRCMU_CHAN_SB_UL;
287 else
288 ch_inf.sb = BRCMU_CHAN_SB_UU;
600a897d 289 break;
0cd75b19
AS		 290 case NL80211_CHAN_WIDTH_80P80:
291 case NL80211_CHAN_WIDTH_160:
292 case NL80211_CHAN_WIDTH_5:
293 case NL80211_CHAN_WIDTH_10:
600a897d
AS		 294 default:
295 WARN_ON_ONCE(1);
296 }
297 switch (ch->chan->band) {
57fbcce3 298 case NL80211_BAND_2GHZ:
600a897d
AS		 299 ch_inf.band = BRCMU_CHAN_BAND_2G;
300 break;
57fbcce3 301 case NL80211_BAND_5GHZ:
600a897d
AS		 302 ch_inf.band = BRCMU_CHAN_BAND_5G;
303 break;
57fbcce3 304 case NL80211_BAND_60GHZ:
600a897d
AS		 305 default:
306 WARN_ON_ONCE(1);
307 }
308 d11inf->encchspec(&ch_inf);
309
310 return ch_inf.chspec;
311}
312
83cf17aa
FL		 313u16 channel_to_chanspec(struct brcmu_d11inf *d11inf,
314 struct ieee80211_channel *ch)
6e186166 315{
83cf17aa 316 struct brcmu_chan ch_inf;
6e186166 317
83cf17aa
FL		 318 ch_inf.chnum = ieee80211_frequency_to_channel(ch->center_freq);
319 ch_inf.bw = BRCMU_CHAN_BW_20;
320 d11inf->encchspec(&ch_inf);
6e186166 321
83cf17aa 322 return ch_inf.chspec;
6e186166
AS		 323}
324
89286dc9
HM		 325/* Traverse a string of 1-byte tag/1-byte length/variable-length value
326 * triples, returning a pointer to the substring whose first element
327 * matches tag
328 */
c8d87079 329static const struct brcmf_tlv *
4b5800fe 330brcmf_parse_tlvs(const void *buf, int buflen, uint key)
89286dc9 331{
4b5800fe
JB		 332 const struct brcmf_tlv *elt = buf;
333 int totlen = buflen;
89286dc9
HM		 334
335 /* find tagged parameter */
336 while (totlen >= TLV_HDR_LEN) {
337 int len = elt->len;
338
339 /* validate remaining totlen */
340 if ((elt->id == key) && (totlen >= (len + TLV_HDR_LEN)))
341 return elt;
342
343 elt = (struct brcmf_tlv *)((u8 *)elt + (len + TLV_HDR_LEN));
344 totlen -= (len + TLV_HDR_LEN);
345 }
346
347 return NULL;
348}
349
350/* Is any of the tlvs the expected entry? If
351 * not update the tlvs buffer pointer/length.
352 */
353static bool
4b5800fe
JB		 354brcmf_tlv_has_ie(const u8 *ie, const u8 **tlvs, u32 *tlvs_len,
355 const u8 *oui, u32 oui_len, u8 type)
89286dc9
HM		 356{
357 /* If the contents match the OUI and the type */
358 if (ie[TLV_LEN_OFF] >= oui_len + 1 &&
359 !memcmp(&ie[TLV_BODY_OFF], oui, oui_len) &&
360 type == ie[TLV_BODY_OFF + oui_len]) {
361 return true;
362 }
363
364 if (tlvs == NULL)
365 return false;
366 /* point to the next ie */
367 ie += ie[TLV_LEN_OFF] + TLV_HDR_LEN;
368 /* calculate the length of the rest of the buffer */
369 *tlvs_len -= (int)(ie - *tlvs);
370 /* update the pointer to the start of the buffer */
371 *tlvs = ie;
372
373 return false;
374}
375
376static struct brcmf_vs_tlv *
4b5800fe 377brcmf_find_wpaie(const u8 *parse, u32 len)
89286dc9 378{
4b5800fe 379 const struct brcmf_tlv *ie;
89286dc9
HM		 380
381 while ((ie = brcmf_parse_tlvs(parse, len, WLAN_EID_VENDOR_SPECIFIC))) {
4b5800fe 382 if (brcmf_tlv_has_ie((const u8 *)ie, &parse, &len,
89286dc9
HM		 383 WPA_OUI, TLV_OUI_LEN, WPA_OUI_TYPE))
384 return (struct brcmf_vs_tlv *)ie;
385 }
386 return NULL;
387}
388
389static struct brcmf_vs_tlv *
4b5800fe 390brcmf_find_wpsie(const u8 *parse, u32 len)
89286dc9 391{
4b5800fe 392 const struct brcmf_tlv *ie;
89286dc9
HM		 393
394 while ((ie = brcmf_parse_tlvs(parse, len, WLAN_EID_VENDOR_SPECIFIC))) {
395 if (brcmf_tlv_has_ie((u8 *)ie, &parse, &len,
396 WPA_OUI, TLV_OUI_LEN, WPS_OUI_TYPE))
397 return (struct brcmf_vs_tlv *)ie;
398 }
399 return NULL;
400}
401
39504a2d
AS		 402static int brcmf_vif_change_validate(struct brcmf_cfg80211_info *cfg,
403 struct brcmf_cfg80211_vif *vif,
404 enum nl80211_iftype new_type)
405{
39504a2d 406 struct brcmf_cfg80211_vif *pos;
353c46ac
AS		 407 bool check_combos = false;
408 int ret = 0;
e227300c
PK		 409 struct iface_combination_params params = {
410 .num_different_channels = 1,
411 };
39504a2d 412
39504a2d 413 list_for_each_entry(pos, &cfg->vif_list, list)
353c46ac 414 if (pos == vif) {
e227300c 415 params.iftype_num[new_type]++;
353c46ac
AS		 416 } else {
417 /* concurrent interfaces so need check combinations */
418 check_combos = true;
e227300c 419 params.iftype_num[pos->wdev.iftype]++;
353c46ac
AS		 420 }
421
422 if (check_combos)
e227300c 423 ret = cfg80211_check_combinations(cfg->wiphy, &params);
39504a2d 424
353c46ac 425 return ret;
39504a2d
AS		 426}
427
428static int brcmf_vif_add_validate(struct brcmf_cfg80211_info *cfg,
429 enum nl80211_iftype new_type)
430{
39504a2d 431 struct brcmf_cfg80211_vif *pos;
e227300c
PK		 432 struct iface_combination_params params = {
433 .num_different_channels = 1,
434 };
39504a2d 435
39504a2d 436 list_for_each_entry(pos, &cfg->vif_list, list)
e227300c 437 params.iftype_num[pos->wdev.iftype]++;
39504a2d 438
e227300c
PK		 439 params.iftype_num[new_type]++;
440 return cfg80211_check_combinations(cfg->wiphy, &params);
39504a2d 441}
89286dc9 442
5b435de0
AS		 443static void convert_key_from_CPU(struct brcmf_wsec_key *key,
444 struct brcmf_wsec_key_le *key_le)
445{
446 key_le->index = cpu_to_le32(key->index);
447 key_le->len = cpu_to_le32(key->len);
448 key_le->algo = cpu_to_le32(key->algo);
449 key_le->flags = cpu_to_le32(key->flags);
450 key_le->rxiv.hi = cpu_to_le32(key->rxiv.hi);
451 key_le->rxiv.lo = cpu_to_le16(key->rxiv.lo);
452 key_le->iv_initialized = cpu_to_le32(key->iv_initialized);
453 memcpy(key_le->data, key->data, sizeof(key->data));
454 memcpy(key_le->ea, key->ea, sizeof(key->ea));
455}
456
f09d0c02 457static int
118eb304 458send_key_to_dongle(struct brcmf_if *ifp, struct brcmf_wsec_key *key)
5b435de0
AS		 459{
460 int err;
461 struct brcmf_wsec_key_le key_le;
462
463 convert_key_from_CPU(key, &key_le);
f09d0c02 464
118eb304 465 brcmf_netdev_wait_pend8021x(ifp);
81f5dcb8 466
118eb304 467 err = brcmf_fil_bsscfg_data_set(ifp, "wsec_key", &key_le,
81f5dcb8 468 sizeof(key_le));
f09d0c02 469
5b435de0 470 if (err)
57d6e91a 471 brcmf_err("wsec_key error (%d)\n", err);
5b435de0
AS		 472 return err;
473}
474
8851cce0
HM		 475static void
476brcmf_cfg80211_update_proto_addr_mode(struct wireless_dev *wdev)
477{
8f2b4597
AS		 478 struct brcmf_cfg80211_vif *vif;
479 struct brcmf_if *ifp;
480
481 vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
482 ifp = vif->ifp;
8851cce0
HM		 483
484 if ((wdev->iftype == NL80211_IFTYPE_ADHOC) ||
485 (wdev->iftype == NL80211_IFTYPE_AP) ||
486 (wdev->iftype == NL80211_IFTYPE_P2P_GO))
487 brcmf_proto_configure_addr_mode(ifp->drvr, ifp->ifidx,
488 ADDR_DIRECT);
489 else
490 brcmf_proto_configure_addr_mode(ifp->drvr, ifp->ifidx,
491 ADDR_INDIRECT);
492}
493
d02fb8f1
RM		 494static int brcmf_get_first_free_bsscfgidx(struct brcmf_pub *drvr)
495{
496 int bsscfgidx;
497
498 for (bsscfgidx = 0; bsscfgidx < BRCMF_MAX_IFS; bsscfgidx++) {
499 /* bsscfgidx 1 is reserved for legacy P2P */
500 if (bsscfgidx == 1)
501 continue;
502 if (!drvr->iflist[bsscfgidx])
503 return bsscfgidx;
504 }
505
506 return -ENOMEM;
507}
508
a44aa400
HM		 509static int brcmf_cfg80211_request_ap_if(struct brcmf_if *ifp)
510{
511 struct brcmf_mbss_ssid_le mbss_ssid_le;
512 int bsscfgidx;
513 int err;
514
515 memset(&mbss_ssid_le, 0, sizeof(mbss_ssid_le));
d02fb8f1 516 bsscfgidx = brcmf_get_first_free_bsscfgidx(ifp->drvr);
a44aa400
HM		 517 if (bsscfgidx < 0)
518 return bsscfgidx;
519
520 mbss_ssid_le.bsscfgidx = cpu_to_le32(bsscfgidx);
521 mbss_ssid_le.SSID_len = cpu_to_le32(5);
522 sprintf(mbss_ssid_le.SSID, "ssid%d" , bsscfgidx);
523
524 err = brcmf_fil_bsscfg_data_set(ifp, "bsscfg:ssid", &mbss_ssid_le,
525 sizeof(mbss_ssid_le));
526 if (err < 0)
527 brcmf_err("setting ssid failed %d\n", err);
528
529 return err;
530}
531
532/**
533 * brcmf_ap_add_vif() - create a new AP virtual interface for multiple BSS
534 *
535 * @wiphy: wiphy device of new interface.
536 * @name: name of the new interface.
a44aa400
HM		 537 * @params: contains mac address for AP device.
538 */
539static
540struct wireless_dev *brcmf_ap_add_vif(struct wiphy *wiphy, const char *name,
818a986e 541 struct vif_params *params)
a44aa400
HM		 542{
543 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
544 struct brcmf_if *ifp = netdev_priv(cfg_to_ndev(cfg));
545 struct brcmf_cfg80211_vif *vif;
546 int err;
547
548 if (brcmf_cfg80211_vif_event_armed(cfg))
549 return ERR_PTR(-EBUSY);
550
551 brcmf_dbg(INFO, "Adding vif \"%s\"\n", name);
552
26072330 553 vif = brcmf_alloc_vif(cfg, NL80211_IFTYPE_AP);
a44aa400
HM		 554 if (IS_ERR(vif))
555 return (struct wireless_dev *)vif;
556
557 brcmf_cfg80211_arm_vif_event(cfg, vif);
558
559 err = brcmf_cfg80211_request_ap_if(ifp);
560 if (err) {
561 brcmf_cfg80211_arm_vif_event(cfg, NULL);
562 goto fail;
563 }
564
565 /* wait for firmware event */
a9eb0c4b
AS		 566 err = brcmf_cfg80211_wait_vif_event(cfg, BRCMF_E_IF_ADD,
567 BRCMF_VIF_EVENT_TIMEOUT);
a44aa400
HM		 568 brcmf_cfg80211_arm_vif_event(cfg, NULL);
569 if (!err) {
570 brcmf_err("timeout occurred\n");
571 err = -EIO;
572 goto fail;
573 }
574
575 /* interface created in firmware */
576 ifp = vif->ifp;
577 if (!ifp) {
578 brcmf_err("no if pointer provided\n");
579 err = -ENOENT;
580 goto fail;
581 }
582
583 strncpy(ifp->ndev->name, name, sizeof(ifp->ndev->name) - 1);
584 err = brcmf_net_attach(ifp, true);
585 if (err) {
586 brcmf_err("Registering netdevice failed\n");
dca2307e 587 free_netdev(ifp->ndev);
a44aa400
HM		 588 goto fail;
589 }
590
591 return &ifp->vif->wdev;
592
593fail:
594 brcmf_free_vif(vif);
595 return ERR_PTR(err);
596}
597
967fe2c8
AS		 598static bool brcmf_is_apmode(struct brcmf_cfg80211_vif *vif)
599{
600 enum nl80211_iftype iftype;
601
602 iftype = vif->wdev.iftype;
603 return iftype == NL80211_IFTYPE_AP || iftype == NL80211_IFTYPE_P2P_GO;
604}
605
606static bool brcmf_is_ibssmode(struct brcmf_cfg80211_vif *vif)
607{
608 return vif->wdev.iftype == NL80211_IFTYPE_ADHOC;
609}
610
9f440b7b
AS		 611static struct wireless_dev *brcmf_cfg80211_add_iface(struct wiphy *wiphy,
612 const char *name,
6bab2e19 613 unsigned char name_assign_type,
9f440b7b 614 enum nl80211_iftype type,
9f440b7b
AS		 615 struct vif_params *params)
616{
8851cce0 617 struct wireless_dev *wdev;
39504a2d 618 int err;
8851cce0 619
9f440b7b 620 brcmf_dbg(TRACE, "enter: %s type %d\n", name, type);
39504a2d
AS		 621 err = brcmf_vif_add_validate(wiphy_to_cfg(wiphy), type);
622 if (err) {
623 brcmf_err("iface validation failed: err=%d\n", err);
624 return ERR_PTR(err);
625 }
9f440b7b
AS		 626 switch (type) {
627 case NL80211_IFTYPE_ADHOC:
628 case NL80211_IFTYPE_STATION:
9f440b7b
AS		 629 case NL80211_IFTYPE_AP_VLAN:
630 case NL80211_IFTYPE_WDS:
631 case NL80211_IFTYPE_MONITOR:
632 case NL80211_IFTYPE_MESH_POINT:
633 return ERR_PTR(-EOPNOTSUPP);
a44aa400 634 case NL80211_IFTYPE_AP:
818a986e 635 wdev = brcmf_ap_add_vif(wiphy, name, params);
0cd33c20 636 break;
9f440b7b
AS		 637 case NL80211_IFTYPE_P2P_CLIENT:
638 case NL80211_IFTYPE_P2P_GO:
27f10e38 639 case NL80211_IFTYPE_P2P_DEVICE:
818a986e 640 wdev = brcmf_p2p_add_vif(wiphy, name, name_assign_type, type, params);
0cd33c20 641 break;
9f440b7b 642 case NL80211_IFTYPE_UNSPECIFIED:
9f440b7b
AS		 643 default:
644 return ERR_PTR(-EINVAL);
645 }
0cd33c20
RM		 646
647 if (IS_ERR(wdev))
648 brcmf_err("add iface %s type %d failed: err=%d\n",
649 name, type, (int)PTR_ERR(wdev));
650 else
651 brcmf_cfg80211_update_proto_addr_mode(wdev);
652
653 return wdev;
9f440b7b
AS		 654}
655
5e787f75
DK		 656static void brcmf_scan_config_mpc(struct brcmf_if *ifp, int mpc)
657{
c08437b4 658 if (brcmf_feat_is_quirk_enabled(ifp, BRCMF_FEAT_QUIRK_NEED_MPC))
5e787f75
DK		 659 brcmf_set_mpc(ifp, mpc);
660}
661
f96aa07e 662void brcmf_set_mpc(struct brcmf_if *ifp, int mpc)
5f4f9f11 663{
5f4f9f11
AS		 664 s32 err = 0;
665
666 if (check_vif_up(ifp->vif)) {
667 err = brcmf_fil_iovar_int_set(ifp, "mpc", mpc);
668 if (err) {
669 brcmf_err("fail to set mpc\n");
670 return;
671 }
672 brcmf_dbg(INFO, "MPC : %d\n", mpc);
673 }
674}
675
a0f472ac
AS		 676s32 brcmf_notify_escan_complete(struct brcmf_cfg80211_info *cfg,
677 struct brcmf_if *ifp, bool aborted,
678 bool fw_abort)
5f4f9f11
AS		 679{
680 struct brcmf_scan_params_le params_le;
681 struct cfg80211_scan_request *scan_request;
efc2c1fa
AVS		 682 u64 reqid;
683 u32 bucket;
5f4f9f11
AS		 684 s32 err = 0;
685
686 brcmf_dbg(SCAN, "Enter\n");
687
688 /* clear scan request, because the FW abort can cause a second call */
689 /* to this functon and might cause a double cfg80211_scan_done */
690 scan_request = cfg->scan_request;
691 cfg->scan_request = NULL;
692
693 if (timer_pending(&cfg->escan_timeout))
694 del_timer_sync(&cfg->escan_timeout);
695
696 if (fw_abort) {
697 /* Do a scan abort to stop the driver's scan engine */
698 brcmf_dbg(SCAN, "ABORT scan in firmware\n");
699 memset(&params_le, 0, sizeof(params_le));
93803b33 700 eth_broadcast_addr(params_le.bssid);
5f4f9f11
AS		 701 params_le.bss_type = DOT11_BSSTYPE_ANY;
702 params_le.scan_type = 0;
703 params_le.channel_num = cpu_to_le32(1);
704 params_le.nprobes = cpu_to_le32(1);
705 params_le.active_time = cpu_to_le32(-1);
706 params_le.passive_time = cpu_to_le32(-1);
707 params_le.home_time = cpu_to_le32(-1);
708 /* Scan is aborted by setting channel_list[0] to -1 */
709 params_le.channel_list[0] = cpu_to_le16(-1);
710 /* E-Scan (or anyother type) can be aborted by SCAN */
f96aa07e 711 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SCAN,
5f4f9f11
AS		 712 &params_le, sizeof(params_le));
713 if (err)
efc2c1fa 714 brcmf_err("Scan abort failed\n");
5f4f9f11 715 }
0f0fe990 716
5e787f75 717 brcmf_scan_config_mpc(ifp, 1);
0f0fe990 718
5f4f9f11 719 /*
fa85b30a 720 * e-scan can be initiated internally
5f4f9f11
AS		 721 * which takes precedence.
722 */
efc2c1fa
AVS		 723 if (cfg->int_escan_map) {
724 brcmf_dbg(SCAN, "scheduled scan completed (%x)\n",
725 cfg->int_escan_map);
726 while (cfg->int_escan_map) {
727 bucket = __ffs(cfg->int_escan_map);
728 cfg->int_escan_map &= ~BIT(bucket);
729 reqid = brcmf_pno_find_reqid_by_bucket(cfg->pno,
730 bucket);
731 if (!aborted) {
732 brcmf_dbg(SCAN, "report results: reqid=%llu\n",
733 reqid);
734 cfg80211_sched_scan_results(cfg_to_wiphy(cfg),
735 reqid);
736 }
737 }
5f4f9f11 738 } else if (scan_request) {
1d76250b
AS		 739 struct cfg80211_scan_info info = {
740 .aborted = aborted,
741 };
742
5f4f9f11
AS		 743 brcmf_dbg(SCAN, "ESCAN Completed scan: %s\n",
744 aborted ? "Aborted" : "Done");
1d76250b 745 cfg80211_scan_done(scan_request, &info);
5f4f9f11 746 }
6eda4e2c
HM		 747 if (!test_and_clear_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status))
748 brcmf_dbg(SCAN, "Scan complete, probably P2P scan\n");
5f4f9f11
AS		 749
750 return err;
751}
752
dba8fbc6
RM		 753static int brcmf_cfg80211_del_ap_iface(struct wiphy *wiphy,
754 struct wireless_dev *wdev)
755{
756 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
757 struct net_device *ndev = wdev->netdev;
758 struct brcmf_if *ifp = netdev_priv(ndev);
759 int ret;
760 int err;
761
762 brcmf_cfg80211_arm_vif_event(cfg, ifp->vif);
763
764 err = brcmf_fil_bsscfg_data_set(ifp, "interface_remove", NULL, 0);
765 if (err) {
766 brcmf_err("interface_remove failed %d\n", err);
767 goto err_unarm;
768 }
769
770 /* wait for firmware event */
771 ret = brcmf_cfg80211_wait_vif_event(cfg, BRCMF_E_IF_DEL,
772 BRCMF_VIF_EVENT_TIMEOUT);
773 if (!ret) {
774 brcmf_err("timeout occurred\n");
775 err = -EIO;
776 goto err_unarm;
777 }
778
779 brcmf_remove_interface(ifp, true);
780
781err_unarm:
782 brcmf_cfg80211_arm_vif_event(cfg, NULL);
783 return err;
784}
785
9f440b7b
AS		 786static
787int brcmf_cfg80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
788{
5f4f9f11
AS		 789 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
790 struct net_device *ndev = wdev->netdev;
791
dba8fbc6
RM		 792 if (ndev && ndev == cfg_to_ndev(cfg))
793 return -ENOTSUPP;
794
5f4f9f11
AS		 795 /* vif event pending in firmware */
796 if (brcmf_cfg80211_vif_event_armed(cfg))
797 return -EBUSY;
798
799 if (ndev) {
800 if (test_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status) &&
a0f472ac
AS		 801 cfg->escan_info.ifp == netdev_priv(ndev))
802 brcmf_notify_escan_complete(cfg, netdev_priv(ndev),
803 true, true);
5f4f9f11
AS		 804
805 brcmf_fil_iovar_int_set(netdev_priv(ndev), "mpc", 1);
806 }
807
9f440b7b
AS		 808 switch (wdev->iftype) {
809 case NL80211_IFTYPE_ADHOC:
810 case NL80211_IFTYPE_STATION:
9f440b7b
AS		 811 case NL80211_IFTYPE_AP_VLAN:
812 case NL80211_IFTYPE_WDS:
813 case NL80211_IFTYPE_MONITOR:
814 case NL80211_IFTYPE_MESH_POINT:
815 return -EOPNOTSUPP;
dba8fbc6
RM		 816 case NL80211_IFTYPE_AP:
817 return brcmf_cfg80211_del_ap_iface(wiphy, wdev);
9f440b7b
AS		 818 case NL80211_IFTYPE_P2P_CLIENT:
819 case NL80211_IFTYPE_P2P_GO:
27f10e38 820 case NL80211_IFTYPE_P2P_DEVICE:
9f440b7b
AS		 821 return brcmf_p2p_del_vif(wiphy, wdev);
822 case NL80211_IFTYPE_UNSPECIFIED:
9f440b7b
AS		 823 default:
824 return -EINVAL;
825 }
826 return -EOPNOTSUPP;
827}
828
5b435de0
AS		 829static s32
830brcmf_cfg80211_change_iface(struct wiphy *wiphy, struct net_device *ndev,
818a986e 831 enum nl80211_iftype type,
5b435de0
AS		 832 struct vif_params *params)
833{
7a5c1f64 834 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
c1179033 835 struct brcmf_if *ifp = netdev_priv(ndev);
128ce3b6 836 struct brcmf_cfg80211_vif *vif = ifp->vif;
5b435de0 837 s32 infra = 0;
1a873342 838 s32 ap = 0;
5b435de0
AS		 839 s32 err = 0;
840
37a869ec
HM		 841 brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, type=%d\n", ifp->bsscfgidx,
842 type);
178e9ef9
HM		 843
844 /* WAR: There are a number of p2p interface related problems which
845 * need to be handled initially (before doing the validate).
846 * wpa_supplicant tends to do iface changes on p2p device/client/go
847 * which are not always possible/allowed. However we need to return
848 * OK otherwise the wpa_supplicant wont start. The situation differs
849 * on configuration and setup (p2pon=1 module param). The first check
850 * is to see if the request is a change to station for p2p iface.
851 */
852 if ((type == NL80211_IFTYPE_STATION) &&
853 ((vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT) ||
854 (vif->wdev.iftype == NL80211_IFTYPE_P2P_GO) ||
855 (vif->wdev.iftype == NL80211_IFTYPE_P2P_DEVICE))) {
856 brcmf_dbg(TRACE, "Ignoring cmd for p2p if\n");
857 /* Now depending on whether module param p2pon=1 was used the
858 * response needs to be either 0 or EOPNOTSUPP. The reason is
859 * that if p2pon=1 is used, but a newer supplicant is used then
860 * we should return an error, as this combination wont work.
861 * In other situations 0 is returned and supplicant will start
862 * normally. It will give a trace in cfg80211, but it is the
863 * only way to get it working. Unfortunately this will result
864 * in situation where we wont support new supplicant in
865 * combination with module param p2pon=1, but that is the way
866 * it is. If the user tries this then unloading of driver might
867 * fail/lock.
868 */
869 if (cfg->p2p.p2pdev_dynamically)
870 return -EOPNOTSUPP;
871 else
872 return 0;
873 }
39504a2d
AS		 874 err = brcmf_vif_change_validate(wiphy_to_cfg(wiphy), vif, type);
875 if (err) {
876 brcmf_err("iface validation failed: err=%d\n", err);
877 return err;
878 }
5b435de0
AS		 879 switch (type) {
880 case NL80211_IFTYPE_MONITOR:
881 case NL80211_IFTYPE_WDS:
57d6e91a
AS		 882 brcmf_err("type (%d) : currently we do not support this type\n",
883 type);
5b435de0
AS		 884 return -EOPNOTSUPP;
885 case NL80211_IFTYPE_ADHOC:
5b435de0
AS		 886 infra = 0;
887 break;
888 case NL80211_IFTYPE_STATION:
5b435de0
AS		 889 infra = 1;
890 break;
1a873342 891 case NL80211_IFTYPE_AP:
7a5c1f64 892 case NL80211_IFTYPE_P2P_GO:
1a873342
HM		 893 ap = 1;
894 break;
5b435de0
AS		 895 default:
896 err = -EINVAL;
897 goto done;
898 }
899
1a873342 900 if (ap) {
7a5c1f64
HM		 901 if (type == NL80211_IFTYPE_P2P_GO) {
902 brcmf_dbg(INFO, "IF Type = P2P GO\n");
903 err = brcmf_p2p_ifchange(cfg, BRCMF_FIL_P2P_IF_GO);
904 }
905 if (!err) {
7a5c1f64
HM		 906 brcmf_dbg(INFO, "IF Type = AP\n");
907 }
5b435de0 908 } else {
128ce3b6 909 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_INFRA, infra);
1a873342 910 if (err) {
57d6e91a 911 brcmf_err("WLC_SET_INFRA error (%d)\n", err);
1a873342
HM		 912 err = -EAGAIN;
913 goto done;
914 }
967fe2c8 915 brcmf_dbg(INFO, "IF Type = %s\n", brcmf_is_ibssmode(vif) ?
647c9ae0 916 "Adhoc" : "Infra");
5b435de0 917 }
1a873342 918 ndev->ieee80211_ptr->iftype = type;
5b435de0 919
8851cce0
HM		 920 brcmf_cfg80211_update_proto_addr_mode(&vif->wdev);
921
5b435de0 922done:
d96b801f 923 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 924
925 return err;
926}
927
83cf17aa
FL		 928static void brcmf_escan_prep(struct brcmf_cfg80211_info *cfg,
929 struct brcmf_scan_params_le *params_le,
e756af5b
HM		 930 struct cfg80211_scan_request *request)
931{
932 u32 n_ssids;
933 u32 n_channels;
934 s32 i;
935 s32 offset;
029591f3 936 u16 chanspec;
e756af5b 937 char *ptr;
029591f3 938 struct brcmf_ssid_le ssid_le;
e756af5b 939
93803b33 940 eth_broadcast_addr(params_le->bssid);
e756af5b 941 params_le->bss_type = DOT11_BSSTYPE_ANY;
35f62727 942 params_le->scan_type = BRCMF_SCANTYPE_ACTIVE;
e756af5b
HM		 943 params_le->channel_num = 0;
944 params_le->nprobes = cpu_to_le32(-1);
945 params_le->active_time = cpu_to_le32(-1);
946 params_le->passive_time = cpu_to_le32(-1);
947 params_le->home_time = cpu_to_le32(-1);
948 memset(&params_le->ssid_le, 0, sizeof(params_le->ssid_le));
949
e756af5b
HM		 950 n_ssids = request->n_ssids;
951 n_channels = request->n_channels;
35f62727 952
e756af5b 953 /* Copy channel array if applicable */
4e8a008e
AS		 954 brcmf_dbg(SCAN, "### List of channelspecs to scan ### %d\n",
955 n_channels);
e756af5b
HM		 956 if (n_channels > 0) {
957 for (i = 0; i < n_channels; i++) {
83cf17aa
FL		 958 chanspec = channel_to_chanspec(&cfg->d11inf,
959 request->channels[i]);
4e8a008e
AS		 960 brcmf_dbg(SCAN, "Chan : %d, Channel spec: %x\n",
961 request->channels[i]->hw_value, chanspec);
029591f3 962 params_le->channel_list[i] = cpu_to_le16(chanspec);
e756af5b
HM		 963 }
964 } else {
4e8a008e 965 brcmf_dbg(SCAN, "Scanning all channels\n");
e756af5b
HM		 966 }
967 /* Copy ssid array if applicable */
4e8a008e 968 brcmf_dbg(SCAN, "### List of SSIDs to scan ### %d\n", n_ssids);
e756af5b
HM		 969 if (n_ssids > 0) {
970 offset = offsetof(struct brcmf_scan_params_le, channel_list) +
971 n_channels * sizeof(u16);
972 offset = roundup(offset, sizeof(u32));
973 ptr = (char *)params_le + offset;
974 for (i = 0; i < n_ssids; i++) {
029591f3
AS		 975 memset(&ssid_le, 0, sizeof(ssid_le));
976 ssid_le.SSID_len =
977 cpu_to_le32(request->ssids[i].ssid_len);
978 memcpy(ssid_le.SSID, request->ssids[i].ssid,
979 request->ssids[i].ssid_len);
980 if (!ssid_le.SSID_len)
4e8a008e 981 brcmf_dbg(SCAN, "%d: Broadcast scan\n", i);
e756af5b 982 else
efc2c1fa 983 brcmf_dbg(SCAN, "%d: scan for %.32s size=%d\n",
4e8a008e 984 i, ssid_le.SSID, ssid_le.SSID_len);
029591f3
AS		 985 memcpy(ptr, &ssid_le, sizeof(ssid_le));
986 ptr += sizeof(ssid_le);
e756af5b
HM		 987 }
988 } else {
35f62727
AVS		 989 brcmf_dbg(SCAN, "Performing passive scan\n");
990 params_le->scan_type = BRCMF_SCANTYPE_PASSIVE;
e756af5b
HM		 991 }
992 /* Adding mask to channel numbers */
993 params_le->channel_num =
994 cpu_to_le32((n_ssids << BRCMF_SCAN_PARAMS_NSSID_SHIFT) |
995 (n_channels & BRCMF_SCAN_PARAMS_COUNT_MASK));
996}
997
e756af5b 998static s32
a0f472ac 999brcmf_run_escan(struct brcmf_cfg80211_info *cfg, struct brcmf_if *ifp,
c4958106 1000 struct cfg80211_scan_request *request)
e756af5b
HM		 1001{
1002 s32 params_size = BRCMF_SCAN_PARAMS_FIXED_SIZE +
1003 offsetof(struct brcmf_escan_params_le, params_le);
1004 struct brcmf_escan_params_le *params;
1005 s32 err = 0;
1006
4e8a008e 1007 brcmf_dbg(SCAN, "E-SCAN START\n");
e756af5b
HM		 1008
1009 if (request != NULL) {
1010 /* Allocate space for populating ssids in struct */
1011 params_size += sizeof(u32) * ((request->n_channels + 1) / 2);
1012
1013 /* Allocate space for populating ssids in struct */
e9a6ca82 1014 params_size += sizeof(struct brcmf_ssid_le) * request->n_ssids;
e756af5b
HM		 1015 }
1016
1017 params = kzalloc(params_size, GFP_KERNEL);
1018 if (!params) {
1019 err = -ENOMEM;
1020 goto exit;
1021 }
1022 BUG_ON(params_size + sizeof("escan") >= BRCMF_DCMD_MEDLEN);
83cf17aa 1023 brcmf_escan_prep(cfg, &params->params_le, request);
e756af5b 1024 params->version = cpu_to_le32(BRCMF_ESCAN_REQ_VERSION);
c4958106 1025 params->action = cpu_to_le16(WL_ESCAN_ACTION_START);
e756af5b
HM		 1026 params->sync_id = cpu_to_le16(0x1234);
1027
a0f472ac 1028 err = brcmf_fil_iovar_data_set(ifp, "escan", params, params_size);
e756af5b
HM		 1029 if (err) {
1030 if (err == -EBUSY)
647c9ae0 1031 brcmf_dbg(INFO, "system busy : escan canceled\n");
e756af5b 1032 else
57d6e91a 1033 brcmf_err("error (%d)\n", err);
e756af5b
HM		 1034 }
1035
1036 kfree(params);
1037exit:
1038 return err;
1039}
1040
1041static s32
ab5981c8 1042brcmf_do_escan(struct brcmf_if *ifp, struct cfg80211_scan_request *request)
e756af5b 1043{
ab5981c8 1044 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
e756af5b 1045 s32 err;
e756af5b 1046 struct brcmf_scan_results *results;
9f440b7b 1047 struct escan_info *escan = &cfg->escan_info;
e756af5b 1048
4e8a008e 1049 brcmf_dbg(SCAN, "Enter\n");
a0f472ac 1050 escan->ifp = ifp;
ab5981c8 1051 escan->wiphy = cfg->wiphy;
9f440b7b 1052 escan->escan_state = WL_ESCAN_STATE_SCANNING;
bbf35414 1053
5e787f75 1054 brcmf_scan_config_mpc(ifp, 0);
27a68fe3 1055 results = (struct brcmf_scan_results *)cfg->escan_info.escan_buf;
e756af5b
HM		 1056 results->version = 0;
1057 results->count = 0;
1058 results->buflen = WL_ESCAN_RESULTS_FIXED_SIZE;
1059
c4958106 1060 err = escan->run(cfg, ifp, request);
e756af5b 1061 if (err)
5e787f75 1062 brcmf_scan_config_mpc(ifp, 1);
e756af5b
HM		 1063 return err;
1064}
1065
1066static s32
588378f1 1067brcmf_cfg80211_scan(struct wiphy *wiphy, struct cfg80211_scan_request *request)
e756af5b 1068{
a0f472ac 1069 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
588378f1
AVS		 1070 struct brcmf_cfg80211_vif *vif;
1071 s32 err = 0;
e756af5b 1072
588378f1
AVS		 1073 brcmf_dbg(TRACE, "Enter\n");
1074 vif = container_of(request->wdev, struct brcmf_cfg80211_vif, wdev);
1075 if (!check_vif_up(vif))
1076 return -EIO;
e756af5b 1077
c1179033 1078 if (test_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status)) {
57d6e91a 1079 brcmf_err("Scanning already: status (%lu)\n", cfg->scan_status);
e756af5b
HM		 1080 return -EAGAIN;
1081 }
c1179033 1082 if (test_bit(BRCMF_SCAN_STATUS_ABORT, &cfg->scan_status)) {
57d6e91a
AS		 1083 brcmf_err("Scanning being aborted: status (%lu)\n",
1084 cfg->scan_status);
e756af5b
HM		 1085 return -EAGAIN;
1086 }
1687eee2
AS		 1087 if (test_bit(BRCMF_SCAN_STATUS_SUPPRESS, &cfg->scan_status)) {
1088 brcmf_err("Scanning suppressed: status (%lu)\n",
1089 cfg->scan_status);
1090 return -EAGAIN;
1091 }
8c6efda2
AVS		 1092 if (test_bit(BRCMF_VIF_STATUS_CONNECTING, &vif->sme_state)) {
1093 brcmf_err("Connecting: status (%lu)\n", vif->sme_state);
e756af5b
HM		 1094 return -EAGAIN;
1095 }
1096
0f8ffe17 1097 /* If scan req comes for p2p0, send it over primary I/F */
a0f472ac
AS		 1098 if (vif == cfg->p2p.bss_idx[P2PAPI_BSSCFG_DEVICE].vif)
1099 vif = cfg->p2p.bss_idx[P2PAPI_BSSCFG_PRIMARY].vif;
0f8ffe17 1100
588378f1
AVS		 1101 brcmf_dbg(SCAN, "START ESCAN\n");
1102
27a68fe3 1103 cfg->scan_request = request;
c1179033 1104 set_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status);
9f440b7b 1105
8c6efda2
AVS		 1106 cfg->escan_info.run = brcmf_run_escan;
1107 err = brcmf_p2p_scan_prep(wiphy, request, vif);
1108 if (err)
1109 goto scan_out;
e756af5b 1110
bd99a301
AVS		 1111 err = brcmf_vif_set_mgmt_ie(vif, BRCMF_VNDR_IE_PRBREQ_FLAG,
1112 request->ie, request->ie_len);
1113 if (err)
1114 goto scan_out;
1115
8c6efda2
AVS		 1116 err = brcmf_do_escan(vif->ifp, request);
1117 if (err)
1118 goto scan_out;
e756af5b 1119
661fa95d 1120 /* Arm scan timeout timer */
df2d8388
AVS		 1121 mod_timer(&cfg->escan_timeout,
1122 jiffies + msecs_to_jiffies(BRCMF_ESCAN_TIMER_INTERVAL_MS));
661fa95d 1123
e756af5b
HM		 1124 return 0;
1125
1126scan_out:
588378f1 1127 brcmf_err("scan error (%d)\n", err);
c1179033 1128 clear_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status);
27a68fe3 1129 cfg->scan_request = NULL;
e756af5b
HM		 1130 return err;
1131}
1132
5b435de0
AS		 1133static s32 brcmf_set_rts(struct net_device *ndev, u32 rts_threshold)
1134{
1135 s32 err = 0;
1136
ac24be6f
AS		 1137 err = brcmf_fil_iovar_int_set(netdev_priv(ndev), "rtsthresh",
1138 rts_threshold);
5b435de0 1139 if (err)
57d6e91a 1140 brcmf_err("Error (%d)\n", err);
5b435de0
AS		 1141
1142 return err;
1143}
1144
1145static s32 brcmf_set_frag(struct net_device *ndev, u32 frag_threshold)
1146{
1147 s32 err = 0;
1148
ac24be6f
AS		 1149 err = brcmf_fil_iovar_int_set(netdev_priv(ndev), "fragthresh",
1150 frag_threshold);
5b435de0 1151 if (err)
57d6e91a 1152 brcmf_err("Error (%d)\n", err);
5b435de0
AS		 1153
1154 return err;
1155}
1156
1157static s32 brcmf_set_retry(struct net_device *ndev, u32 retry, bool l)
1158{
1159 s32 err = 0;
b87e2c48 1160 u32 cmd = (l ? BRCMF_C_SET_LRL : BRCMF_C_SET_SRL);
5b435de0 1161
ac24be6f 1162 err = brcmf_fil_cmd_int_set(netdev_priv(ndev), cmd, retry);
5b435de0 1163 if (err) {
57d6e91a 1164 brcmf_err("cmd (%d) , error (%d)\n", cmd, err);
5b435de0
AS		 1165 return err;
1166 }
1167 return err;
1168}
1169
1170static s32 brcmf_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1171{
27a68fe3
AS		 1172 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
1173 struct net_device *ndev = cfg_to_ndev(cfg);
0abb5f21 1174 struct brcmf_if *ifp = netdev_priv(ndev);
5b435de0
AS		 1175 s32 err = 0;
1176
d96b801f 1177 brcmf_dbg(TRACE, "Enter\n");
ce81e317 1178 if (!check_vif_up(ifp->vif))
5b435de0
AS		 1179 return -EIO;
1180
1181 if (changed & WIPHY_PARAM_RTS_THRESHOLD &&
27a68fe3
AS		 1182 (cfg->conf->rts_threshold != wiphy->rts_threshold)) {
1183 cfg->conf->rts_threshold = wiphy->rts_threshold;
1184 err = brcmf_set_rts(ndev, cfg->conf->rts_threshold);
5b435de0
AS		 1185 if (!err)
1186 goto done;
1187 }
1188 if (changed & WIPHY_PARAM_FRAG_THRESHOLD &&
27a68fe3
AS		 1189 (cfg->conf->frag_threshold != wiphy->frag_threshold)) {
1190 cfg->conf->frag_threshold = wiphy->frag_threshold;
1191 err = brcmf_set_frag(ndev, cfg->conf->frag_threshold);
5b435de0
AS		 1192 if (!err)
1193 goto done;
1194 }
1195 if (changed & WIPHY_PARAM_RETRY_LONG
27a68fe3
AS		 1196 && (cfg->conf->retry_long != wiphy->retry_long)) {
1197 cfg->conf->retry_long = wiphy->retry_long;
1198 err = brcmf_set_retry(ndev, cfg->conf->retry_long, true);
5b435de0
AS		 1199 if (!err)
1200 goto done;
1201 }
1202 if (changed & WIPHY_PARAM_RETRY_SHORT
27a68fe3
AS		 1203 && (cfg->conf->retry_short != wiphy->retry_short)) {
1204 cfg->conf->retry_short = wiphy->retry_short;
1205 err = brcmf_set_retry(ndev, cfg->conf->retry_short, false);
5b435de0
AS		 1206 if (!err)
1207 goto done;
1208 }
1209
1210done:
d96b801f 1211 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 1212 return err;
1213}
1214
5b435de0
AS		 1215static void brcmf_init_prof(struct brcmf_cfg80211_profile *prof)
1216{
1217 memset(prof, 0, sizeof(*prof));
1218}
1219
9b7a0ddc
AS		 1220static u16 brcmf_map_fw_linkdown_reason(const struct brcmf_event_msg *e)
1221{
1222 u16 reason;
1223
1224 switch (e->event_code) {
1225 case BRCMF_E_DEAUTH:
1226 case BRCMF_E_DEAUTH_IND:
1227 case BRCMF_E_DISASSOC_IND:
1228 reason = e->reason;
1229 break;
1230 case BRCMF_E_LINK:
1231 default:
1232 reason = 0;
1233 break;
1234 }
1235 return reason;
1236}
1237
b8a64f0e
AS		 1238static int brcmf_set_pmk(struct brcmf_if *ifp, const u8 *pmk_data, u16 pmk_len)
1239{
1240 struct brcmf_wsec_pmk_le pmk;
1241 int i, err;
1242
1243 /* convert to firmware key format */
1244 pmk.key_len = cpu_to_le16(pmk_len << 1);
1245 pmk.flags = cpu_to_le16(BRCMF_WSEC_PASSPHRASE);
1246 for (i = 0; i < pmk_len; i++)
1247 snprintf(&pmk.key[2 * i], 3, "%02x", pmk_data[i]);
1248
1249 /* store psk in firmware */
1250 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_WSEC_PMK,
1251 &pmk, sizeof(pmk));
1252 if (err < 0)
1253 brcmf_err("failed to change PSK in firmware (len=%u)\n",
1254 pmk_len);
1255
1256 return err;
1257}
1258
9b7a0ddc 1259static void brcmf_link_down(struct brcmf_cfg80211_vif *vif, u16 reason)
5b435de0 1260{
61730d4d 1261 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(vif->wdev.wiphy);
5b435de0
AS		 1262 s32 err = 0;
1263
d96b801f 1264 brcmf_dbg(TRACE, "Enter\n");
5b435de0 1265
b0a79088 1266 if (test_and_clear_bit(BRCMF_VIF_STATUS_CONNECTED, &vif->sme_state)) {
647c9ae0 1267 brcmf_dbg(INFO, "Call WLC_DISASSOC to stop excess roaming\n ");
903e0eee 1268 err = brcmf_fil_cmd_data_set(vif->ifp,
ac24be6f 1269 BRCMF_C_DISASSOC, NULL, 0);
a538ae31 1270 if (err) {
57d6e91a 1271 brcmf_err("WLC_DISASSOC failed (%d)\n", err);
a538ae31 1272 }
b0a79088
HM		 1273 if ((vif->wdev.iftype == NL80211_IFTYPE_STATION) ||
1274 (vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT))
1275 cfg80211_disconnected(vif->wdev.netdev, reason, NULL, 0,
1276 true, GFP_KERNEL);
5b435de0 1277 }
903e0eee 1278 clear_bit(BRCMF_VIF_STATUS_CONNECTING, &vif->sme_state);
61730d4d
PH		 1279 clear_bit(BRCMF_SCAN_STATUS_SUPPRESS, &cfg->scan_status);
1280 brcmf_btcoex_set_mode(vif, BRCMF_BTCOEX_ENABLED, 0);
b8a64f0e
AS		 1281 if (vif->profile.use_fwsup != BRCMF_PROFILE_FWSUP_NONE) {
1282 brcmf_set_pmk(vif->ifp, NULL, 0);
1283 vif->profile.use_fwsup = BRCMF_PROFILE_FWSUP_NONE;
1284 }
d96b801f 1285 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 1286}
1287
1288static s32
1289brcmf_cfg80211_join_ibss(struct wiphy *wiphy, struct net_device *ndev,
1290 struct cfg80211_ibss_params *params)
1291{
27a68fe3 1292 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
0abb5f21
AS		 1293 struct brcmf_if *ifp = netdev_priv(ndev);
1294 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
5b435de0
AS		 1295 struct brcmf_join_params join_params;
1296 size_t join_params_size = 0;
1297 s32 err = 0;
1298 s32 wsec = 0;
1299 s32 bcnprd;
1701261d 1300 u16 chanspec;
e9a6ca82 1301 u32 ssid_len;
5b435de0 1302
d96b801f 1303 brcmf_dbg(TRACE, "Enter\n");
ce81e317 1304 if (!check_vif_up(ifp->vif))
5b435de0
AS		 1305 return -EIO;
1306
1307 if (params->ssid)
16886735 1308 brcmf_dbg(CONN, "SSID: %s\n", params->ssid);
5b435de0 1309 else {
16886735 1310 brcmf_dbg(CONN, "SSID: NULL, Not supported\n");
5b435de0
AS		 1311 return -EOPNOTSUPP;
1312 }
1313
c1179033 1314 set_bit(BRCMF_VIF_STATUS_CONNECTING, &ifp->vif->sme_state);
5b435de0
AS		 1315
1316 if (params->bssid)
16886735 1317 brcmf_dbg(CONN, "BSSID: %pM\n", params->bssid);
5b435de0 1318 else
16886735 1319 brcmf_dbg(CONN, "No BSSID specified\n");
5b435de0 1320
683b6d3b 1321 if (params->chandef.chan)
16886735
AS		 1322 brcmf_dbg(CONN, "channel: %d\n",
1323 params->chandef.chan->center_freq);
5b435de0 1324 else
16886735 1325 brcmf_dbg(CONN, "no channel specified\n");
5b435de0
AS		 1326
1327 if (params->channel_fixed)
16886735 1328 brcmf_dbg(CONN, "fixed channel required\n");
5b435de0 1329 else
16886735 1330 brcmf_dbg(CONN, "no fixed channel required\n");
5b435de0
AS		 1331
1332 if (params->ie && params->ie_len)
16886735 1333 brcmf_dbg(CONN, "ie len: %d\n", params->ie_len);
5b435de0 1334 else
16886735 1335 brcmf_dbg(CONN, "no ie specified\n");
5b435de0
AS		 1336
1337 if (params->beacon_interval)
16886735
AS		 1338 brcmf_dbg(CONN, "beacon interval: %d\n",
1339 params->beacon_interval);
5b435de0 1340 else
16886735 1341 brcmf_dbg(CONN, "no beacon interval specified\n");
5b435de0
AS		 1342
1343 if (params->basic_rates)
16886735 1344 brcmf_dbg(CONN, "basic rates: %08X\n", params->basic_rates);
5b435de0 1345 else
16886735 1346 brcmf_dbg(CONN, "no basic rates specified\n");
5b435de0
AS		 1347
1348 if (params->privacy)
16886735 1349 brcmf_dbg(CONN, "privacy required\n");
5b435de0 1350 else
16886735 1351 brcmf_dbg(CONN, "no privacy required\n");
5b435de0
AS		 1352
1353 /* Configure Privacy for starter */
1354 if (params->privacy)
1355 wsec |= WEP_ENABLED;
1356
c1179033 1357 err = brcmf_fil_iovar_int_set(ifp, "wsec", wsec);
5b435de0 1358 if (err) {
57d6e91a 1359 brcmf_err("wsec failed (%d)\n", err);
5b435de0
AS		 1360 goto done;
1361 }
1362
1363 /* Configure Beacon Interval for starter */
1364 if (params->beacon_interval)
1365 bcnprd = params->beacon_interval;
1366 else
1367 bcnprd = 100;
1368
b87e2c48 1369 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_BCNPRD, bcnprd);
5b435de0 1370 if (err) {
57d6e91a 1371 brcmf_err("WLC_SET_BCNPRD failed (%d)\n", err);
5b435de0
AS		 1372 goto done;
1373 }
1374
1375 /* Configure required join parameter */
1376 memset(&join_params, 0, sizeof(struct brcmf_join_params));
1377
1378 /* SSID */
e9a6ca82
HM		 1379 ssid_len = min_t(u32, params->ssid_len, IEEE80211_MAX_SSID_LEN);
1380 memcpy(join_params.ssid_le.SSID, params->ssid, ssid_len);
1381 join_params.ssid_le.SSID_len = cpu_to_le32(ssid_len);
5b435de0 1382 join_params_size = sizeof(join_params.ssid_le);
5b435de0
AS		 1383
1384 /* BSSID */
1385 if (params->bssid) {
1386 memcpy(join_params.params_le.bssid, params->bssid, ETH_ALEN);
e9a6ca82 1387 join_params_size += BRCMF_ASSOC_PARAMS_FIXED_SIZE;
6c8c4f72 1388 memcpy(profile->bssid, params->bssid, ETH_ALEN);
5b435de0 1389 } else {
93803b33
JP		 1390 eth_broadcast_addr(join_params.params_le.bssid);
1391 eth_zero_addr(profile->bssid);
5b435de0
AS		 1392 }
1393
5b435de0 1394 /* Channel */
683b6d3b 1395 if (params->chandef.chan) {
5b435de0
AS		 1396 u32 target_channel;
1397
27a68fe3 1398 cfg->channel =
5b435de0 1399 ieee80211_frequency_to_channel(
683b6d3b 1400 params->chandef.chan->center_freq);
5b435de0
AS		 1401 if (params->channel_fixed) {
1402 /* adding chanspec */
600a897d
AS		 1403 chanspec = chandef_to_chanspec(&cfg->d11inf,
1404 &params->chandef);
1701261d
HM		 1405 join_params.params_le.chanspec_list[0] =
1406 cpu_to_le16(chanspec);
1407 join_params.params_le.chanspec_num = cpu_to_le32(1);
1408 join_params_size += sizeof(join_params.params_le);
5b435de0
AS		 1409 }
1410
1411 /* set channel for starter */
27a68fe3 1412 target_channel = cfg->channel;
b87e2c48 1413 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_CHANNEL,
81f5dcb8 1414 target_channel);
5b435de0 1415 if (err) {
57d6e91a 1416 brcmf_err("WLC_SET_CHANNEL failed (%d)\n", err);
5b435de0
AS		 1417 goto done;
1418 }
1419 } else
27a68fe3 1420 cfg->channel = 0;
5b435de0 1421
27a68fe3 1422 cfg->ibss_starter = false;
5b435de0
AS		 1423
1424
c1179033 1425 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SSID,
81f5dcb8 1426 &join_params, join_params_size);
5b435de0 1427 if (err) {
57d6e91a 1428 brcmf_err("WLC_SET_SSID failed (%d)\n", err);
5b435de0
AS		 1429 goto done;
1430 }
1431
1432done:
1433 if (err)
c1179033 1434 clear_bit(BRCMF_VIF_STATUS_CONNECTING, &ifp->vif->sme_state);
d96b801f 1435 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 1436 return err;
1437}
1438
1439static s32
1440brcmf_cfg80211_leave_ibss(struct wiphy *wiphy, struct net_device *ndev)
1441{
0abb5f21 1442 struct brcmf_if *ifp = netdev_priv(ndev);
5b435de0 1443
d96b801f 1444 brcmf_dbg(TRACE, "Enter\n");
6a98d64a
HM		 1445 if (!check_vif_up(ifp->vif)) {
1446 /* When driver is being unloaded, it can end up here. If an
1447 * error is returned then later on a debug trace in the wireless
1448 * core module will be printed. To avoid this 0 is returned.
1449 */
1450 return 0;
1451 }
5b435de0 1452
9b7a0ddc 1453 brcmf_link_down(ifp->vif, WLAN_REASON_DEAUTH_LEAVING);
42e0ed0d 1454 brcmf_net_setcarrier(ifp, false);
5b435de0 1455
d96b801f 1456 brcmf_dbg(TRACE, "Exit\n");
5b435de0 1457
12f32370 1458 return 0;
5b435de0
AS		 1459}
1460
1461static s32 brcmf_set_wpa_version(struct net_device *ndev,
1462 struct cfg80211_connect_params *sme)
1463{
6ac4f4ed 1464 struct brcmf_cfg80211_profile *profile = ndev_to_prof(ndev);
5b435de0
AS		 1465 struct brcmf_cfg80211_security *sec;
1466 s32 val = 0;
1467 s32 err = 0;
1468
1469 if (sme->crypto.wpa_versions & NL80211_WPA_VERSION_1)
1470 val = WPA_AUTH_PSK | WPA_AUTH_UNSPECIFIED;
1471 else if (sme->crypto.wpa_versions & NL80211_WPA_VERSION_2)
1472 val = WPA2_AUTH_PSK | WPA2_AUTH_UNSPECIFIED;
1473 else
1474 val = WPA_AUTH_DISABLED;
16886735 1475 brcmf_dbg(CONN, "setting wpa_auth to 0x%0x\n", val);
89286dc9 1476 err = brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "wpa_auth", val);
5b435de0 1477 if (err) {
57d6e91a 1478 brcmf_err("set wpa_auth failed (%d)\n", err);
5b435de0
AS		 1479 return err;
1480 }
06bb123e 1481 sec = &profile->sec;
5b435de0
AS		 1482 sec->wpa_versions = sme->crypto.wpa_versions;
1483 return err;
1484}
1485
1486static s32 brcmf_set_auth_type(struct net_device *ndev,
1487 struct cfg80211_connect_params *sme)
1488{
6ac4f4ed 1489 struct brcmf_cfg80211_profile *profile = ndev_to_prof(ndev);
5b435de0
AS		 1490 struct brcmf_cfg80211_security *sec;
1491 s32 val = 0;
1492 s32 err = 0;
1493
1494 switch (sme->auth_type) {
1495 case NL80211_AUTHTYPE_OPEN_SYSTEM:
1496 val = 0;
16886735 1497 brcmf_dbg(CONN, "open system\n");
5b435de0
AS		 1498 break;
1499 case NL80211_AUTHTYPE_SHARED_KEY:
1500 val = 1;
16886735 1501 brcmf_dbg(CONN, "shared key\n");
5b435de0 1502 break;
5b435de0
AS		 1503 default:
1504 val = 2;
92c31360 1505 brcmf_dbg(CONN, "automatic, auth type (%d)\n", sme->auth_type);
5b435de0
AS		 1506 break;
1507 }
1508
89286dc9 1509 err = brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "auth", val);
5b435de0 1510 if (err) {
57d6e91a 1511 brcmf_err("set auth failed (%d)\n", err);
5b435de0
AS		 1512 return err;
1513 }
06bb123e 1514 sec = &profile->sec;
5b435de0
AS		 1515 sec->auth_type = sme->auth_type;
1516 return err;
1517}
1518
1519static s32
87b7e9e2 1520brcmf_set_wsec_mode(struct net_device *ndev,
240d61a9 1521 struct cfg80211_connect_params *sme)
5b435de0 1522{
6ac4f4ed 1523 struct brcmf_cfg80211_profile *profile = ndev_to_prof(ndev);
5b435de0
AS		 1524 struct brcmf_cfg80211_security *sec;
1525 s32 pval = 0;
1526 s32 gval = 0;
87b7e9e2 1527 s32 wsec;
5b435de0
AS		 1528 s32 err = 0;
1529
1530 if (sme->crypto.n_ciphers_pairwise) {
1531 switch (sme->crypto.ciphers_pairwise[0]) {
1532 case WLAN_CIPHER_SUITE_WEP40:
1533 case WLAN_CIPHER_SUITE_WEP104:
1534 pval = WEP_ENABLED;
1535 break;
1536 case WLAN_CIPHER_SUITE_TKIP:
1537 pval = TKIP_ENABLED;
1538 break;
1539 case WLAN_CIPHER_SUITE_CCMP:
1540 pval = AES_ENABLED;
1541 break;
1542 case WLAN_CIPHER_SUITE_AES_CMAC:
1543 pval = AES_ENABLED;
1544 break;
1545 default:
57d6e91a
AS		 1546 brcmf_err("invalid cipher pairwise (%d)\n",
1547 sme->crypto.ciphers_pairwise[0]);
5b435de0
AS		 1548 return -EINVAL;
1549 }
1550 }
1551 if (sme->crypto.cipher_group) {
1552 switch (sme->crypto.cipher_group) {
1553 case WLAN_CIPHER_SUITE_WEP40:
1554 case WLAN_CIPHER_SUITE_WEP104:
1555 gval = WEP_ENABLED;
1556 break;
1557 case WLAN_CIPHER_SUITE_TKIP:
1558 gval = TKIP_ENABLED;
1559 break;
1560 case WLAN_CIPHER_SUITE_CCMP:
1561 gval = AES_ENABLED;
1562 break;
1563 case WLAN_CIPHER_SUITE_AES_CMAC:
1564 gval = AES_ENABLED;
1565 break;
1566 default:
57d6e91a
AS		 1567 brcmf_err("invalid cipher group (%d)\n",
1568 sme->crypto.cipher_group);
5b435de0
AS		 1569 return -EINVAL;
1570 }
1571 }
1572
16886735 1573 brcmf_dbg(CONN, "pval (%d) gval (%d)\n", pval, gval);
89286dc9
HM		 1574 /* In case of privacy, but no security and WPS then simulate */
1575 /* setting AES. WPS-2.0 allows no security */
1576 if (brcmf_find_wpsie(sme->ie, sme->ie_len) && !pval && !gval &&
1577 sme->privacy)
1578 pval = AES_ENABLED;
87b7e9e2 1579
240d61a9 1580 wsec = pval | gval;
87b7e9e2 1581 err = brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "wsec", wsec);
5b435de0 1582 if (err) {
57d6e91a 1583 brcmf_err("error (%d)\n", err);
5b435de0
AS		 1584 return err;
1585 }
1586
06bb123e 1587 sec = &profile->sec;
5b435de0
AS		 1588 sec->cipher_pairwise = sme->crypto.ciphers_pairwise[0];
1589 sec->cipher_group = sme->crypto.cipher_group;
1590
1591 return err;
1592}
1593
1594static s32
1595brcmf_set_key_mgmt(struct net_device *ndev, struct cfg80211_connect_params *sme)
1596{
240d61a9 1597 struct brcmf_if *ifp = netdev_priv(ndev);
2526ff21 1598 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
240d61a9
HM		 1599 s32 val;
1600 s32 err;
1601 const struct brcmf_tlv *rsn_ie;
1602 const u8 *ie;
1603 u32 ie_len;
1604 u32 offset;
1605 u16 rsn_cap;
1606 u32 mfp;
1607 u16 count;
5b435de0 1608
2526ff21
AS		 1609 profile->use_fwsup = BRCMF_PROFILE_FWSUP_NONE;
1610
240d61a9
HM		 1611 if (!sme->crypto.n_akm_suites)
1612 return 0;
1613
1614 err = brcmf_fil_bsscfg_int_get(netdev_priv(ndev), "wpa_auth", &val);
1615 if (err) {
1616 brcmf_err("could not get wpa_auth (%d)\n", err);
1617 return err;
1618 }
1619 if (val & (WPA_AUTH_PSK | WPA_AUTH_UNSPECIFIED)) {
1620 switch (sme->crypto.akm_suites[0]) {
1621 case WLAN_AKM_SUITE_8021X:
1622 val = WPA_AUTH_UNSPECIFIED;
2526ff21
AS		 1623 if (sme->want_1x)
1624 profile->use_fwsup = BRCMF_PROFILE_FWSUP_1X;
240d61a9
HM		 1625 break;
1626 case WLAN_AKM_SUITE_PSK:
1627 val = WPA_AUTH_PSK;
1628 break;
1629 default:
1630 brcmf_err("invalid cipher group (%d)\n",
1631 sme->crypto.cipher_group);
1632 return -EINVAL;
5b435de0 1633 }
240d61a9
HM		 1634 } else if (val & (WPA2_AUTH_PSK | WPA2_AUTH_UNSPECIFIED)) {
1635 switch (sme->crypto.akm_suites[0]) {
1636 case WLAN_AKM_SUITE_8021X:
1637 val = WPA2_AUTH_UNSPECIFIED;
2526ff21
AS		 1638 if (sme->want_1x)
1639 profile->use_fwsup = BRCMF_PROFILE_FWSUP_1X;
240d61a9
HM		 1640 break;
1641 case WLAN_AKM_SUITE_8021X_SHA256:
1642 val = WPA2_AUTH_1X_SHA256;
2526ff21
AS		 1643 if (sme->want_1x)
1644 profile->use_fwsup = BRCMF_PROFILE_FWSUP_1X;
240d61a9
HM		 1645 break;
1646 case WLAN_AKM_SUITE_PSK_SHA256:
1647 val = WPA2_AUTH_PSK_SHA256;
1648 break;
1649 case WLAN_AKM_SUITE_PSK:
1650 val = WPA2_AUTH_PSK;
1651 break;
1652 default:
1653 brcmf_err("invalid cipher group (%d)\n",
1654 sme->crypto.cipher_group);
1655 return -EINVAL;
5b435de0 1656 }
240d61a9 1657 }
5b435de0 1658
2526ff21
AS		 1659 if (profile->use_fwsup == BRCMF_PROFILE_FWSUP_1X)
1660 brcmf_dbg(INFO, "using 1X offload\n");
1661
240d61a9
HM		 1662 if (!brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MFP))
1663 goto skip_mfp_config;
1664 /* The MFP mode (1 or 2) needs to be determined, parse IEs. The
1665 * IE will not be verified, just a quick search for MFP config
1666 */
1667 rsn_ie = brcmf_parse_tlvs((const u8 *)sme->ie, sme->ie_len,
1668 WLAN_EID_RSN);
1669 if (!rsn_ie)
1670 goto skip_mfp_config;
1671 ie = (const u8 *)rsn_ie;
1672 ie_len = rsn_ie->len + TLV_HDR_LEN;
1673 /* Skip unicast suite */
1674 offset = TLV_HDR_LEN + WPA_IE_VERSION_LEN + WPA_IE_MIN_OUI_LEN;
1675 if (offset + WPA_IE_SUITE_COUNT_LEN >= ie_len)
1676 goto skip_mfp_config;
1677 /* Skip multicast suite */
1678 count = ie[offset] + (ie[offset + 1] << 8);
1679 offset += WPA_IE_SUITE_COUNT_LEN + (count * WPA_IE_MIN_OUI_LEN);
1680 if (offset + WPA_IE_SUITE_COUNT_LEN >= ie_len)
1681 goto skip_mfp_config;
1682 /* Skip auth key management suite(s) */
1683 count = ie[offset] + (ie[offset + 1] << 8);
1684 offset += WPA_IE_SUITE_COUNT_LEN + (count * WPA_IE_MIN_OUI_LEN);
1685 if (offset + WPA_IE_SUITE_COUNT_LEN > ie_len)
1686 goto skip_mfp_config;
1687 /* Ready to read capabilities */
1688 mfp = BRCMF_MFP_NONE;
1689 rsn_cap = ie[offset] + (ie[offset + 1] << 8);
1690 if (rsn_cap & RSN_CAP_MFPR_MASK)
1691 mfp = BRCMF_MFP_REQUIRED;
1692 else if (rsn_cap & RSN_CAP_MFPC_MASK)
1693 mfp = BRCMF_MFP_CAPABLE;
1694 brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "mfp", mfp);
1695
1696skip_mfp_config:
1697 brcmf_dbg(CONN, "setting wpa_auth to %d\n", val);
1698 err = brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "wpa_auth", val);
1699 if (err) {
1700 brcmf_err("could not set wpa_auth (%d)\n", err);
1701 return err;
5b435de0 1702 }
5b435de0
AS		 1703
1704 return err;
1705}
1706
1707static s32
f09d0c02
HM		 1708brcmf_set_sharedkey(struct net_device *ndev,
1709 struct cfg80211_connect_params *sme)
5b435de0 1710{
6ac4f4ed 1711 struct brcmf_cfg80211_profile *profile = ndev_to_prof(ndev);
5b435de0
AS		 1712 struct brcmf_cfg80211_security *sec;
1713 struct brcmf_wsec_key key;
1714 s32 val;
1715 s32 err = 0;
1716
16886735 1717 brcmf_dbg(CONN, "key len (%d)\n", sme->key_len);
5b435de0 1718
a718e2fe
RV		 1719 if (sme->key_len == 0)
1720 return 0;
1721
06bb123e 1722 sec = &profile->sec;
16886735
AS		 1723 brcmf_dbg(CONN, "wpa_versions 0x%x cipher_pairwise 0x%x\n",
1724 sec->wpa_versions, sec->cipher_pairwise);
a718e2fe
RV		 1725
1726 if (sec->wpa_versions & (NL80211_WPA_VERSION_1 | NL80211_WPA_VERSION_2))
1727 return 0;
1728
f09d0c02
HM		 1729 if (!(sec->cipher_pairwise &
1730 (WLAN_CIPHER_SUITE_WEP40 | WLAN_CIPHER_SUITE_WEP104)))
1731 return 0;
a718e2fe 1732
f09d0c02
HM		 1733 memset(&key, 0, sizeof(key));
1734 key.len = (u32) sme->key_len;
1735 key.index = (u32) sme->key_idx;
1736 if (key.len > sizeof(key.data)) {
57d6e91a 1737 brcmf_err("Too long key length (%u)\n", key.len);
f09d0c02
HM		 1738 return -EINVAL;
1739 }
1740 memcpy(key.data, sme->key, key.len);
1741 key.flags = BRCMF_PRIMARY_KEY;
1742 switch (sec->cipher_pairwise) {
1743 case WLAN_CIPHER_SUITE_WEP40:
1744 key.algo = CRYPTO_ALGO_WEP1;
1745 break;
1746 case WLAN_CIPHER_SUITE_WEP104:
1747 key.algo = CRYPTO_ALGO_WEP128;
1748 break;
1749 default:
57d6e91a
AS		 1750 brcmf_err("Invalid algorithm (%d)\n",
1751 sme->crypto.ciphers_pairwise[0]);
f09d0c02
HM		 1752 return -EINVAL;
1753 }
1754 /* Set the new key/index */
16886735
AS		 1755 brcmf_dbg(CONN, "key length (%d) key index (%d) algo (%d)\n",
1756 key.len, key.index, key.algo);
1757 brcmf_dbg(CONN, "key \"%s\"\n", key.data);
118eb304 1758 err = send_key_to_dongle(netdev_priv(ndev), &key);
f09d0c02
HM		 1759 if (err)
1760 return err;
1761
1762 if (sec->auth_type == NL80211_AUTHTYPE_SHARED_KEY) {
16886735 1763 brcmf_dbg(CONN, "set auth_type to shared key\n");
f09d0c02 1764 val = WL_AUTH_SHARED_KEY; /* shared key */
ac24be6f 1765 err = brcmf_fil_bsscfg_int_set(netdev_priv(ndev), "auth", val);
f09d0c02 1766 if (err)
57d6e91a 1767 brcmf_err("set auth failed (%d)\n", err);
5b435de0
AS		 1768 }
1769 return err;
1770}
1771
cbb1ec94
AS		 1772static
1773enum nl80211_auth_type brcmf_war_auth_type(struct brcmf_if *ifp,
1774 enum nl80211_auth_type type)
1775{
c08437b4
AS		 1776 if (type == NL80211_AUTHTYPE_AUTOMATIC &&
1777 brcmf_feat_is_quirk_enabled(ifp, BRCMF_FEAT_QUIRK_AUTO_AUTH)) {
1778 brcmf_dbg(CONN, "WAR: use OPEN instead of AUTO\n");
1779 type = NL80211_AUTHTYPE_OPEN_SYSTEM;
cbb1ec94
AS		 1780 }
1781 return type;
1782}
1783
7705ba6f
AS		 1784static void brcmf_set_join_pref(struct brcmf_if *ifp,
1785 struct cfg80211_bss_selection *bss_select)
1786{
1787 struct brcmf_join_pref_params join_pref_params[2];
1788 enum nl80211_band band;
1789 int err, i = 0;
1790
1791 join_pref_params[i].len = 2;
1792 join_pref_params[i].rssi_gain = 0;
1793
1794 if (bss_select->behaviour != NL80211_BSS_SELECT_ATTR_BAND_PREF)
1795 brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_ASSOC_PREFER, WLC_BAND_AUTO);
1796
1797 switch (bss_select->behaviour) {
1798 case __NL80211_BSS_SELECT_ATTR_INVALID:
1799 brcmf_c_set_joinpref_default(ifp);
1800 return;
1801 case NL80211_BSS_SELECT_ATTR_BAND_PREF:
1802 join_pref_params[i].type = BRCMF_JOIN_PREF_BAND;
1803 band = bss_select->param.band_pref;
1804 join_pref_params[i].band = nl80211_band_to_fwil(band);
1805 i++;
1806 break;
1807 case NL80211_BSS_SELECT_ATTR_RSSI_ADJUST:
1808 join_pref_params[i].type = BRCMF_JOIN_PREF_RSSI_DELTA;
1809 band = bss_select->param.adjust.band;
1810 join_pref_params[i].band = nl80211_band_to_fwil(band);
1811 join_pref_params[i].rssi_gain = bss_select->param.adjust.delta;
1812 i++;
1813 break;
1814 case NL80211_BSS_SELECT_ATTR_RSSI:
1815 default:
1816 break;
1817 }
1818 join_pref_params[i].type = BRCMF_JOIN_PREF_RSSI;
1819 join_pref_params[i].len = 2;
1820 join_pref_params[i].rssi_gain = 0;
1821 join_pref_params[i].band = 0;
1822 err = brcmf_fil_iovar_data_set(ifp, "join_pref", join_pref_params,
1823 sizeof(join_pref_params));
1824 if (err)
1825 brcmf_err("Set join_pref error (%d)\n", err);
1826}
1827
5b435de0
AS		 1828static s32
1829brcmf_cfg80211_connect(struct wiphy *wiphy, struct net_device *ndev,
cbb1ec94 1830 struct cfg80211_connect_params *sme)
5b435de0 1831{
27a68fe3 1832 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
0abb5f21 1833 struct brcmf_if *ifp = netdev_priv(ndev);
2526ff21 1834 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
5b435de0
AS		 1835 struct ieee80211_channel *chan = sme->channel;
1836 struct brcmf_join_params join_params;
1837 size_t join_params_size;
4b5800fe
JB		 1838 const struct brcmf_tlv *rsn_ie;
1839 const struct brcmf_vs_tlv *wpa_ie;
1840 const void *ie;
89286dc9
HM		 1841 u32 ie_len;
1842 struct brcmf_ext_join_params_le *ext_join_params;
1701261d 1843 u16 chanspec;
5b435de0 1844 s32 err = 0;
e9a6ca82 1845 u32 ssid_len;
5b435de0 1846
d96b801f 1847 brcmf_dbg(TRACE, "Enter\n");
ce81e317 1848 if (!check_vif_up(ifp->vif))
5b435de0
AS		 1849 return -EIO;
1850
1851 if (!sme->ssid) {
57d6e91a 1852 brcmf_err("Invalid ssid\n");
5b435de0
AS		 1853 return -EOPNOTSUPP;
1854 }
1855
89286dc9
HM		 1856 if (ifp->vif == cfg->p2p.bss_idx[P2PAPI_BSSCFG_PRIMARY].vif) {
1857 /* A normal (non P2P) connection request setup. */
1858 ie = NULL;
1859 ie_len = 0;
1860 /* find the WPA_IE */
1861 wpa_ie = brcmf_find_wpaie((u8 *)sme->ie, sme->ie_len);
1862 if (wpa_ie) {
1863 ie = wpa_ie;
1864 ie_len = wpa_ie->len + TLV_HDR_LEN;
1865 } else {
1866 /* find the RSN_IE */
4b5800fe
JB		 1867 rsn_ie = brcmf_parse_tlvs((const u8 *)sme->ie,
1868 sme->ie_len,
89286dc9
HM		 1869 WLAN_EID_RSN);
1870 if (rsn_ie) {
1871 ie = rsn_ie;
1872 ie_len = rsn_ie->len + TLV_HDR_LEN;
1873 }
1874 }
1875 brcmf_fil_iovar_data_set(ifp, "wpaie", ie, ie_len);
1876 }
1877
1878 err = brcmf_vif_set_mgmt_ie(ifp->vif, BRCMF_VNDR_IE_ASSOCREQ_FLAG,
1879 sme->ie, sme->ie_len);
1880 if (err)
1881 brcmf_err("Set Assoc REQ IE Failed\n");
1882 else
1883 brcmf_dbg(TRACE, "Applied Vndr IEs for Assoc request\n");
1884
c1179033 1885 set_bit(BRCMF_VIF_STATUS_CONNECTING, &ifp->vif->sme_state);
5b435de0
AS		 1886
1887 if (chan) {
27a68fe3 1888 cfg->channel =
5b435de0 1889 ieee80211_frequency_to_channel(chan->center_freq);
83cf17aa 1890 chanspec = channel_to_chanspec(&cfg->d11inf, chan);
1701261d
HM		 1891 brcmf_dbg(CONN, "channel=%d, center_req=%d, chanspec=0x%04x\n",
1892 cfg->channel, chan->center_freq, chanspec);
1893 } else {
27a68fe3 1894 cfg->channel = 0;
1701261d
HM		 1895 chanspec = 0;
1896 }
5b435de0 1897
647c9ae0 1898 brcmf_dbg(INFO, "ie (%p), ie_len (%zd)\n", sme->ie, sme->ie_len);
5b435de0
AS		 1899
1900 err = brcmf_set_wpa_version(ndev, sme);
1901 if (err) {
57d6e91a 1902 brcmf_err("wl_set_wpa_version failed (%d)\n", err);
5b435de0
AS		 1903 goto done;
1904 }
1905
cbb1ec94 1906 sme->auth_type = brcmf_war_auth_type(ifp, sme->auth_type);
5b435de0
AS		 1907 err = brcmf_set_auth_type(ndev, sme);
1908 if (err) {
57d6e91a 1909 brcmf_err("wl_set_auth_type failed (%d)\n", err);
5b435de0
AS		 1910 goto done;
1911 }
1912
240d61a9 1913 err = brcmf_set_wsec_mode(ndev, sme);
5b435de0 1914 if (err) {
57d6e91a 1915 brcmf_err("wl_set_set_cipher failed (%d)\n", err);
5b435de0
AS		 1916 goto done;
1917 }
1918
1919 err = brcmf_set_key_mgmt(ndev, sme);
1920 if (err) {
57d6e91a 1921 brcmf_err("wl_set_key_mgmt failed (%d)\n", err);
5b435de0
AS		 1922 goto done;
1923 }
1924
f09d0c02 1925 err = brcmf_set_sharedkey(ndev, sme);
5b435de0 1926 if (err) {
57d6e91a 1927 brcmf_err("brcmf_set_sharedkey failed (%d)\n", err);
5b435de0
AS		 1928 goto done;
1929 }
1930
b8a64f0e 1931 if (sme->crypto.psk) {
2526ff21
AS		 1932 if (WARN_ON(profile->use_fwsup != BRCMF_PROFILE_FWSUP_NONE)) {
1933 err = -EINVAL;
1934 goto done;
1935 }
b8a64f0e 1936 brcmf_dbg(INFO, "using PSK offload\n");
2526ff21
AS		 1937 profile->use_fwsup = BRCMF_PROFILE_FWSUP_PSK;
1938 }
b8a64f0e 1939
2526ff21 1940 if (profile->use_fwsup != BRCMF_PROFILE_FWSUP_NONE) {
b8a64f0e
AS		 1941 /* enable firmware supplicant for this interface */
1942 err = brcmf_fil_iovar_int_set(ifp, "sup_wpa", 1);
1943 if (err < 0) {
1944 brcmf_err("failed to enable fw supplicant\n");
1945 goto done;
1946 }
2526ff21 1947 }
b8a64f0e 1948
2526ff21 1949 if (profile->use_fwsup == BRCMF_PROFILE_FWSUP_PSK) {
b8a64f0e
AS		 1950 err = brcmf_set_pmk(ifp, sme->crypto.psk,
1951 BRCMF_WSEC_MAX_PSK_LEN);
1952 if (err)
1953 goto done;
1954 }
1955
89286dc9
HM		 1956 /* Join with specific BSSID and cached SSID
1957 * If SSID is zero join based on BSSID only
1958 */
1959 join_params_size = offsetof(struct brcmf_ext_join_params_le, assoc_le) +
1960 offsetof(struct brcmf_assoc_params_le, chanspec_list);
1961 if (cfg->channel)
1962 join_params_size += sizeof(u16);
1963 ext_join_params = kzalloc(join_params_size, GFP_KERNEL);
1964 if (ext_join_params == NULL) {
1965 err = -ENOMEM;
1966 goto done;
1967 }
e9a6ca82
HM		 1968 ssid_len = min_t(u32, sme->ssid_len, IEEE80211_MAX_SSID_LEN);
1969 ext_join_params->ssid_le.SSID_len = cpu_to_le32(ssid_len);
1970 memcpy(&ext_join_params->ssid_le.SSID, sme->ssid, ssid_len);
1971 if (ssid_len < IEEE80211_MAX_SSID_LEN)
1972 brcmf_dbg(CONN, "SSID \"%s\", len (%d)\n",
1973 ext_join_params->ssid_le.SSID, ssid_len);
63dd99e6 1974
89286dc9
HM		 1975 /* Set up join scan parameters */
1976 ext_join_params->scan_le.scan_type = -1;
89286dc9
HM		 1977 ext_join_params->scan_le.home_time = cpu_to_le32(-1);
1978
1979 if (sme->bssid)
1980 memcpy(&ext_join_params->assoc_le.bssid, sme->bssid, ETH_ALEN);
1981 else
93803b33 1982 eth_broadcast_addr(ext_join_params->assoc_le.bssid);
89286dc9
HM		 1983
1984 if (cfg->channel) {
1985 ext_join_params->assoc_le.chanspec_num = cpu_to_le32(1);
1986
1987 ext_join_params->assoc_le.chanspec_list[0] =
1988 cpu_to_le16(chanspec);
63dd99e6
HM		 1989 /* Increase dwell time to receive probe response or detect
1990 * beacon from target AP at a noisy air only during connect
1991 * command.
1992 */
1993 ext_join_params->scan_le.active_time =
1994 cpu_to_le32(BRCMF_SCAN_JOIN_ACTIVE_DWELL_TIME_MS);
1995 ext_join_params->scan_le.passive_time =
1996 cpu_to_le32(BRCMF_SCAN_JOIN_PASSIVE_DWELL_TIME_MS);
1997 /* To sync with presence period of VSDB GO send probe request
1998 * more frequently. Probe request will be stopped when it gets
1999 * probe response from target AP/GO.
2000 */
2001 ext_join_params->scan_le.nprobes =
2002 cpu_to_le32(BRCMF_SCAN_JOIN_ACTIVE_DWELL_TIME_MS /
2003 BRCMF_SCAN_JOIN_PROBE_INTERVAL_MS);
2004 } else {
2005 ext_join_params->scan_le.active_time = cpu_to_le32(-1);
2006 ext_join_params->scan_le.passive_time = cpu_to_le32(-1);
2007 ext_join_params->scan_le.nprobes = cpu_to_le32(-1);
89286dc9
HM		 2008 }
2009
7705ba6f
AS		 2010 brcmf_set_join_pref(ifp, &sme->bss_select);
2011
89286dc9
HM		 2012 err = brcmf_fil_bsscfg_data_set(ifp, "join", ext_join_params,
2013 join_params_size);
2014 kfree(ext_join_params);
2015 if (!err)
2016 /* This is it. join command worked, we are done */
2017 goto done;
2018
2019 /* join command failed, fallback to set ssid */
5b435de0
AS		 2020 memset(&join_params, 0, sizeof(join_params));
2021 join_params_size = sizeof(join_params.ssid_le);
2022
e9a6ca82
HM		 2023 memcpy(&join_params.ssid_le.SSID, sme->ssid, ssid_len);
2024 join_params.ssid_le.SSID_len = cpu_to_le32(ssid_len);
5b435de0 2025
89286dc9
HM		 2026 if (sme->bssid)
2027 memcpy(join_params.params_le.bssid, sme->bssid, ETH_ALEN);
2028 else
93803b33 2029 eth_broadcast_addr(join_params.params_le.bssid);
5b435de0 2030
1701261d
HM		 2031 if (cfg->channel) {
2032 join_params.params_le.chanspec_list[0] = cpu_to_le16(chanspec);
2033 join_params.params_le.chanspec_num = cpu_to_le32(1);
2034 join_params_size += sizeof(join_params.params_le);
2035 }
c1179033 2036 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SSID,
81f5dcb8 2037 &join_params, join_params_size);
5b435de0 2038 if (err)
89286dc9 2039 brcmf_err("BRCMF_C_SET_SSID failed (%d)\n", err);
5b435de0
AS		 2040
2041done:
2042 if (err)
c1179033 2043 clear_bit(BRCMF_VIF_STATUS_CONNECTING, &ifp->vif->sme_state);
d96b801f 2044 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2045 return err;
2046}
2047
2048static s32
2049brcmf_cfg80211_disconnect(struct wiphy *wiphy, struct net_device *ndev,
2050 u16 reason_code)
2051{
0abb5f21
AS		 2052 struct brcmf_if *ifp = netdev_priv(ndev);
2053 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
5b435de0
AS		 2054 struct brcmf_scb_val_le scbval;
2055 s32 err = 0;
2056
d96b801f 2057 brcmf_dbg(TRACE, "Enter. Reason code = %d\n", reason_code);
ce81e317 2058 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2059 return -EIO;
2060
c1179033 2061 clear_bit(BRCMF_VIF_STATUS_CONNECTED, &ifp->vif->sme_state);
4f3fff14 2062 clear_bit(BRCMF_VIF_STATUS_CONNECTING, &ifp->vif->sme_state);
80279fb7 2063 cfg80211_disconnected(ndev, reason_code, NULL, 0, true, GFP_KERNEL);
5b435de0 2064
06bb123e 2065 memcpy(&scbval.ea, &profile->bssid, ETH_ALEN);
5b435de0 2066 scbval.val = cpu_to_le32(reason_code);
c1179033 2067 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_DISASSOC,
ac24be6f 2068 &scbval, sizeof(scbval));
5b435de0 2069 if (err)
57d6e91a 2070 brcmf_err("error (%d)\n", err);
5b435de0 2071
d96b801f 2072 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2073 return err;
2074}
2075
2076static s32
c8442118 2077brcmf_cfg80211_set_tx_power(struct wiphy *wiphy, struct wireless_dev *wdev,
d3f31134 2078 enum nl80211_tx_power_setting type, s32 mbm)
5b435de0 2079{
27a68fe3 2080 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
0abb5f21
AS		 2081 struct net_device *ndev = cfg_to_ndev(cfg);
2082 struct brcmf_if *ifp = netdev_priv(ndev);
60dc35ef
HM		 2083 s32 err;
2084 s32 disable;
2085 u32 qdbm = 127;
5b435de0 2086
60dc35ef 2087 brcmf_dbg(TRACE, "Enter %d %d\n", type, mbm);
ce81e317 2088 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2089 return -EIO;
2090
2091 switch (type) {
2092 case NL80211_TX_POWER_AUTOMATIC:
2093 break;
2094 case NL80211_TX_POWER_LIMITED:
5b435de0 2095 case NL80211_TX_POWER_FIXED:
60dc35ef 2096 if (mbm < 0) {
57d6e91a 2097 brcmf_err("TX_POWER_FIXED - dbm is negative\n");
5b435de0
AS		 2098 err = -EINVAL;
2099 goto done;
2100 }
60dc35ef
HM		 2101 qdbm = MBM_TO_DBM(4 * mbm);
2102 if (qdbm > 127)
2103 qdbm = 127;
2104 qdbm |= WL_TXPWR_OVERRIDE;
5b435de0 2105 break;
60dc35ef
HM		 2106 default:
2107 brcmf_err("Unsupported type %d\n", type);
2108 err = -EINVAL;
2109 goto done;
5b435de0
AS		 2110 }
2111 /* Make sure radio is off or on as far as software is concerned */
2112 disable = WL_RADIO_SW_DISABLE << 16;
ac24be6f 2113 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_RADIO, disable);
5b435de0 2114 if (err)
57d6e91a 2115 brcmf_err("WLC_SET_RADIO error (%d)\n", err);
5b435de0 2116
60dc35ef 2117 err = brcmf_fil_iovar_int_set(ifp, "qtxpower", qdbm);
5b435de0 2118 if (err)
57d6e91a 2119 brcmf_err("qtxpower error (%d)\n", err);
5b435de0
AS		 2120
2121done:
60dc35ef 2122 brcmf_dbg(TRACE, "Exit %d (qdbm)\n", qdbm & ~WL_TXPWR_OVERRIDE);
5b435de0
AS		 2123 return err;
2124}
2125
60dc35ef
HM		 2126static s32
2127brcmf_cfg80211_get_tx_power(struct wiphy *wiphy, struct wireless_dev *wdev,
2128 s32 *dbm)
5b435de0 2129{
27a68fe3 2130 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
60dc35ef
HM		 2131 struct net_device *ndev = cfg_to_ndev(cfg);
2132 struct brcmf_if *ifp = netdev_priv(ndev);
2133 s32 qdbm = 0;
2134 s32 err;
5b435de0 2135
d96b801f 2136 brcmf_dbg(TRACE, "Enter\n");
ce81e317 2137 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2138 return -EIO;
2139
60dc35ef 2140 err = brcmf_fil_iovar_int_get(ifp, "qtxpower", &qdbm);
5b435de0 2141 if (err) {
57d6e91a 2142 brcmf_err("error (%d)\n", err);
5b435de0
AS		 2143 goto done;
2144 }
60dc35ef 2145 *dbm = (qdbm & ~WL_TXPWR_OVERRIDE) / 4;
5b435de0
AS		 2146
2147done:
60dc35ef 2148 brcmf_dbg(TRACE, "Exit (0x%x %d)\n", qdbm, *dbm);
5b435de0
AS		 2149 return err;
2150}
2151
2152static s32
2153brcmf_cfg80211_config_default_key(struct wiphy *wiphy, struct net_device *ndev,
60dc35ef 2154 u8 key_idx, bool unicast, bool multicast)
5b435de0 2155{
0abb5f21 2156 struct brcmf_if *ifp = netdev_priv(ndev);
5b435de0
AS		 2157 u32 index;
2158 u32 wsec;
2159 s32 err = 0;
2160
d96b801f 2161 brcmf_dbg(TRACE, "Enter\n");
16886735 2162 brcmf_dbg(CONN, "key index (%d)\n", key_idx);
ce81e317 2163 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2164 return -EIO;
2165
0abb5f21 2166 err = brcmf_fil_bsscfg_int_get(ifp, "wsec", &wsec);
5b435de0 2167 if (err) {
57d6e91a 2168 brcmf_err("WLC_GET_WSEC error (%d)\n", err);
5b435de0
AS		 2169 goto done;
2170 }
2171
2172 if (wsec & WEP_ENABLED) {
2173 /* Just select a new current key */
2174 index = key_idx;
0abb5f21 2175 err = brcmf_fil_cmd_int_set(ifp,
ac24be6f 2176 BRCMF_C_SET_KEY_PRIMARY, index);
5b435de0 2177 if (err)
57d6e91a 2178 brcmf_err("error (%d)\n", err);
5b435de0
AS		 2179 }
2180done:
d96b801f 2181 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2182 return err;
2183}
2184
2185static s32
219e0f74
HM		 2186brcmf_cfg80211_del_key(struct wiphy *wiphy, struct net_device *ndev,
2187 u8 key_idx, bool pairwise, const u8 *mac_addr)
5b435de0 2188{
992f6068 2189 struct brcmf_if *ifp = netdev_priv(ndev);
240d61a9
HM		 2190 struct brcmf_wsec_key *key;
2191 s32 err;
219e0f74
HM		 2192
2193 brcmf_dbg(TRACE, "Enter\n");
240d61a9
HM		 2194 brcmf_dbg(CONN, "key index (%d)\n", key_idx);
2195
219e0f74
HM		 2196 if (!check_vif_up(ifp->vif))
2197 return -EIO;
2198
2199 if (key_idx >= BRCMF_MAX_DEFAULT_KEYS) {
2200 /* we ignore this key index in this case */
2201 return -EINVAL;
2202 }
5b435de0 2203
240d61a9 2204 key = &ifp->vif->profile.key[key_idx];
5b435de0 2205
240d61a9
HM		 2206 if (key->algo == CRYPTO_ALGO_OFF) {
2207 brcmf_dbg(CONN, "Ignore clearing of (never configured) key\n");
2208 return -EINVAL;
2209 }
5b435de0 2210
240d61a9
HM		 2211 memset(key, 0, sizeof(*key));
2212 key->index = (u32)key_idx;
2213 key->flags = BRCMF_PRIMARY_KEY;
5b435de0 2214
240d61a9
HM		 2215 /* Clear the key/index */
2216 err = send_key_to_dongle(ifp, key);
5b435de0 2217
219e0f74 2218 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2219 return err;
2220}
2221
2222static s32
2223brcmf_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
240d61a9
HM		 2224 u8 key_idx, bool pairwise, const u8 *mac_addr,
2225 struct key_params *params)
5b435de0 2226{
0abb5f21 2227 struct brcmf_if *ifp = netdev_priv(ndev);
118eb304 2228 struct brcmf_wsec_key *key;
5b435de0
AS		 2229 s32 val;
2230 s32 wsec;
219e0f74 2231 s32 err;
5b435de0 2232 u8 keybuf[8];
219e0f74 2233 bool ext_key;
5b435de0 2234
d96b801f 2235 brcmf_dbg(TRACE, "Enter\n");
16886735 2236 brcmf_dbg(CONN, "key index (%d)\n", key_idx);
ce81e317 2237 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2238 return -EIO;
2239
118eb304
HM		 2240 if (key_idx >= BRCMF_MAX_DEFAULT_KEYS) {
2241 /* we ignore this key index in this case */
2242 brcmf_err("invalid key index (%d)\n", key_idx);
2243 return -EINVAL;
2244 }
2245
219e0f74
HM		 2246 if (params->key_len == 0)
2247 return brcmf_cfg80211_del_key(wiphy, ndev, key_idx, pairwise,
2248 mac_addr);
5b435de0 2249
118eb304
HM		 2250 if (params->key_len > sizeof(key->data)) {
2251 brcmf_err("Too long key length (%u)\n", params->key_len);
219e0f74 2252 return -EINVAL;
5b435de0 2253 }
219e0f74
HM		 2254
2255 ext_key = false;
2256 if (mac_addr && (params->cipher != WLAN_CIPHER_SUITE_WEP40) &&
2257 (params->cipher != WLAN_CIPHER_SUITE_WEP104)) {
2258 brcmf_dbg(TRACE, "Ext key, mac %pM", mac_addr);
2259 ext_key = true;
2260 }
2261
2262 key = &ifp->vif->profile.key[key_idx];
2263 memset(key, 0, sizeof(*key));
2264 if ((ext_key) && (!is_multicast_ether_addr(mac_addr)))
2265 memcpy((char *)&key->ea, (void *)mac_addr, ETH_ALEN);
118eb304
HM		 2266 key->len = params->key_len;
2267 key->index = key_idx;
118eb304 2268 memcpy(key->data, params->key, key->len);
219e0f74
HM		 2269 if (!ext_key)
2270 key->flags = BRCMF_PRIMARY_KEY;
118eb304 2271
5b435de0
AS		 2272 switch (params->cipher) {
2273 case WLAN_CIPHER_SUITE_WEP40:
118eb304 2274 key->algo = CRYPTO_ALGO_WEP1;
f09d0c02 2275 val = WEP_ENABLED;
16886735 2276 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_WEP40\n");
5b435de0
AS		 2277 break;
2278 case WLAN_CIPHER_SUITE_WEP104:
118eb304 2279 key->algo = CRYPTO_ALGO_WEP128;
f09d0c02 2280 val = WEP_ENABLED;
16886735 2281 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_WEP104\n");
5b435de0
AS		 2282 break;
2283 case WLAN_CIPHER_SUITE_TKIP:
967fe2c8 2284 if (!brcmf_is_apmode(ifp->vif)) {
992f6068 2285 brcmf_dbg(CONN, "Swapping RX/TX MIC key\n");
118eb304
HM		 2286 memcpy(keybuf, &key->data[24], sizeof(keybuf));
2287 memcpy(&key->data[24], &key->data[16], sizeof(keybuf));
2288 memcpy(&key->data[16], keybuf, sizeof(keybuf));
1a873342 2289 }
118eb304 2290 key->algo = CRYPTO_ALGO_TKIP;
f09d0c02 2291 val = TKIP_ENABLED;
16886735 2292 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_TKIP\n");
5b435de0
AS		 2293 break;
2294 case WLAN_CIPHER_SUITE_AES_CMAC:
118eb304 2295 key->algo = CRYPTO_ALGO_AES_CCM;
f09d0c02 2296 val = AES_ENABLED;
16886735 2297 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_AES_CMAC\n");
5b435de0
AS		 2298 break;
2299 case WLAN_CIPHER_SUITE_CCMP:
118eb304 2300 key->algo = CRYPTO_ALGO_AES_CCM;
f09d0c02 2301 val = AES_ENABLED;
16886735 2302 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_CCMP\n");
5b435de0
AS		 2303 break;
2304 default:
57d6e91a 2305 brcmf_err("Invalid cipher (0x%x)\n", params->cipher);
5b435de0
AS		 2306 err = -EINVAL;
2307 goto done;
2308 }
2309
118eb304 2310 err = send_key_to_dongle(ifp, key);
219e0f74 2311 if (ext_key || err)
5b435de0
AS		 2312 goto done;
2313
0abb5f21 2314 err = brcmf_fil_bsscfg_int_get(ifp, "wsec", &wsec);
5b435de0 2315 if (err) {
57d6e91a 2316 brcmf_err("get wsec error (%d)\n", err);
5b435de0
AS		 2317 goto done;
2318 }
5b435de0 2319 wsec |= val;
0abb5f21 2320 err = brcmf_fil_bsscfg_int_set(ifp, "wsec", wsec);
5b435de0 2321 if (err) {
57d6e91a 2322 brcmf_err("set wsec error (%d)\n", err);
5b435de0
AS		 2323 goto done;
2324 }
2325
5b435de0 2326done:
d96b801f 2327 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2328 return err;
2329}
2330
5b435de0 2331static s32
240d61a9
HM		 2332brcmf_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev, u8 key_idx,
2333 bool pairwise, const u8 *mac_addr, void *cookie,
2334 void (*callback)(void *cookie,
2335 struct key_params *params))
5b435de0
AS		 2336{
2337 struct key_params params;
0abb5f21
AS		 2338 struct brcmf_if *ifp = netdev_priv(ndev);
2339 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
5b435de0
AS		 2340 struct brcmf_cfg80211_security *sec;
2341 s32 wsec;
2342 s32 err = 0;
2343
d96b801f 2344 brcmf_dbg(TRACE, "Enter\n");
16886735 2345 brcmf_dbg(CONN, "key index (%d)\n", key_idx);
ce81e317 2346 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2347 return -EIO;
2348
2349 memset(&params, 0, sizeof(params));
2350
0abb5f21 2351 err = brcmf_fil_bsscfg_int_get(ifp, "wsec", &wsec);
5b435de0 2352 if (err) {
57d6e91a 2353 brcmf_err("WLC_GET_WSEC error (%d)\n", err);
5b435de0
AS		 2354 /* Ignore this error, may happen during DISASSOC */
2355 err = -EAGAIN;
2356 goto done;
2357 }
c5bf53a8 2358 if (wsec & WEP_ENABLED) {
06bb123e 2359 sec = &profile->sec;
5b435de0
AS		 2360 if (sec->cipher_pairwise & WLAN_CIPHER_SUITE_WEP40) {
2361 params.cipher = WLAN_CIPHER_SUITE_WEP40;
16886735 2362 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_WEP40\n");
5b435de0
AS		 2363 } else if (sec->cipher_pairwise & WLAN_CIPHER_SUITE_WEP104) {
2364 params.cipher = WLAN_CIPHER_SUITE_WEP104;
16886735 2365 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_WEP104\n");
5b435de0 2366 }
c5bf53a8 2367 } else if (wsec & TKIP_ENABLED) {
5b435de0 2368 params.cipher = WLAN_CIPHER_SUITE_TKIP;
16886735 2369 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_TKIP\n");
c5bf53a8 2370 } else if (wsec & AES_ENABLED) {
5b435de0 2371 params.cipher = WLAN_CIPHER_SUITE_AES_CMAC;
16886735 2372 brcmf_dbg(CONN, "WLAN_CIPHER_SUITE_AES_CMAC\n");
c5bf53a8 2373 } else {
57d6e91a 2374 brcmf_err("Invalid algo (0x%x)\n", wsec);
5b435de0
AS		 2375 err = -EINVAL;
2376 goto done;
2377 }
2378 callback(cookie, &params);
2379
2380done:
d96b801f 2381 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2382 return err;
2383}
2384
2385static s32
2386brcmf_cfg80211_config_default_mgmt_key(struct wiphy *wiphy,
240d61a9 2387 struct net_device *ndev, u8 key_idx)
5b435de0 2388{
240d61a9
HM		 2389 struct brcmf_if *ifp = netdev_priv(ndev);
2390
2391 brcmf_dbg(TRACE, "Enter key_idx %d\n", key_idx);
2392
2393 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MFP))
2394 return 0;
2395
647c9ae0 2396 brcmf_dbg(INFO, "Not supported\n");
5b435de0
AS		 2397
2398 return -EOPNOTSUPP;
2399}
2400
118eb304
HM		 2401static void
2402brcmf_cfg80211_reconfigure_wep(struct brcmf_if *ifp)
2403{
2404 s32 err;
2405 u8 key_idx;
2406 struct brcmf_wsec_key *key;
2407 s32 wsec;
2408
2409 for (key_idx = 0; key_idx < BRCMF_MAX_DEFAULT_KEYS; key_idx++) {
2410 key = &ifp->vif->profile.key[key_idx];
2411 if ((key->algo == CRYPTO_ALGO_WEP1) ||
2412 (key->algo == CRYPTO_ALGO_WEP128))
2413 break;
2414 }
2415 if (key_idx == BRCMF_MAX_DEFAULT_KEYS)
2416 return;
2417
2418 err = send_key_to_dongle(ifp, key);
2419 if (err) {
2420 brcmf_err("Setting WEP key failed (%d)\n", err);
2421 return;
2422 }
2423 err = brcmf_fil_bsscfg_int_get(ifp, "wsec", &wsec);
2424 if (err) {
2425 brcmf_err("get wsec error (%d)\n", err);
2426 return;
2427 }
2428 wsec |= WEP_ENABLED;
2429 err = brcmf_fil_bsscfg_int_set(ifp, "wsec", wsec);
2430 if (err)
2431 brcmf_err("set wsec error (%d)\n", err);
2432}
2433
1f0dc59a
AS		 2434static void brcmf_convert_sta_flags(u32 fw_sta_flags, struct station_info *si)
2435{
2436 struct nl80211_sta_flag_update *sfu;
2437
2438 brcmf_dbg(TRACE, "flags %08x\n", fw_sta_flags);
2439 si->filled |= BIT(NL80211_STA_INFO_STA_FLAGS);
2440 sfu = &si->sta_flags;
2441 sfu->mask = BIT(NL80211_STA_FLAG_WME) |
2442 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
2443 BIT(NL80211_STA_FLAG_ASSOCIATED) |
2444 BIT(NL80211_STA_FLAG_AUTHORIZED);
2445 if (fw_sta_flags & BRCMF_STA_WME)
2446 sfu->set |= BIT(NL80211_STA_FLAG_WME);
2447 if (fw_sta_flags & BRCMF_STA_AUTHE)
2448 sfu->set |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
2449 if (fw_sta_flags & BRCMF_STA_ASSOC)
2450 sfu->set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
2451 if (fw_sta_flags & BRCMF_STA_AUTHO)
2452 sfu->set |= BIT(NL80211_STA_FLAG_AUTHORIZED);
2453}
2454
2455static void brcmf_fill_bss_param(struct brcmf_if *ifp, struct station_info *si)
2456{
2457 struct {
2458 __le32 len;
2459 struct brcmf_bss_info_le bss_le;
2460 } *buf;
2461 u16 capability;
2462 int err;
2463
2464 buf = kzalloc(WL_BSS_INFO_MAX, GFP_KERNEL);
2465 if (!buf)
2466 return;
2467
2468 buf->len = cpu_to_le32(WL_BSS_INFO_MAX);
2469 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_BSS_INFO, buf,
2470 WL_BSS_INFO_MAX);
2471 if (err) {
2472 brcmf_err("Failed to get bss info (%d)\n", err);
23e9c128 2473 goto out_kfree;
1f0dc59a
AS		 2474 }
2475 si->filled |= BIT(NL80211_STA_INFO_BSS_PARAM);
2476 si->bss_param.beacon_interval = le16_to_cpu(buf->bss_le.beacon_period);
2477 si->bss_param.dtim_period = buf->bss_le.dtim_period;
2478 capability = le16_to_cpu(buf->bss_le.capability);
2479 if (capability & IEEE80211_HT_STBC_PARAM_DUAL_CTS_PROT)
2480 si->bss_param.flags |= BSS_PARAM_FLAGS_CTS_PROT;
2481 if (capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
2482 si->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_PREAMBLE;
2483 if (capability & WLAN_CAPABILITY_SHORT_SLOT_TIME)
2484 si->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_SLOT_TIME;
23e9c128
RM		 2485
2486out_kfree:
2487 kfree(buf);
1f0dc59a
AS		 2488}
2489
3f5893d1
HM		 2490static s32
2491brcmf_cfg80211_get_station_ibss(struct brcmf_if *ifp,
2492 struct station_info *sinfo)
2493{
2494 struct brcmf_scb_val_le scbval;
2495 struct brcmf_pktcnt_le pktcnt;
2496 s32 err;
2497 u32 rate;
2498 u32 rssi;
2499
2500 /* Get the current tx rate */
2501 err = brcmf_fil_cmd_int_get(ifp, BRCMF_C_GET_RATE, &rate);
2502 if (err < 0) {
2503 brcmf_err("BRCMF_C_GET_RATE error (%d)\n", err);
2504 return err;
2505 }
2506 sinfo->filled |= BIT(NL80211_STA_INFO_TX_BITRATE);
2507 sinfo->txrate.legacy = rate * 5;
2508
2509 memset(&scbval, 0, sizeof(scbval));
2510 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_RSSI, &scbval,
2511 sizeof(scbval));
2512 if (err) {
2513 brcmf_err("BRCMF_C_GET_RSSI error (%d)\n", err);
2514 return err;
2515 }
2516 rssi = le32_to_cpu(scbval.val);
2517 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL);
2518 sinfo->signal = rssi;
2519
2520 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_GET_PKTCNTS, &pktcnt,
2521 sizeof(pktcnt));
2522 if (err) {
2523 brcmf_err("BRCMF_C_GET_GET_PKTCNTS error (%d)\n", err);
2524 return err;
2525 }
2526 sinfo->filled |= BIT(NL80211_STA_INFO_RX_PACKETS) |
2527 BIT(NL80211_STA_INFO_RX_DROP_MISC) |
2528 BIT(NL80211_STA_INFO_TX_PACKETS) |
2529 BIT(NL80211_STA_INFO_TX_FAILED);
2530 sinfo->rx_packets = le32_to_cpu(pktcnt.rx_good_pkt);
2531 sinfo->rx_dropped_misc = le32_to_cpu(pktcnt.rx_bad_pkt);
2532 sinfo->tx_packets = le32_to_cpu(pktcnt.tx_good_pkt);
2533 sinfo->tx_failed = le32_to_cpu(pktcnt.tx_bad_pkt);
2534
2535 return 0;
2536}
2537
5b435de0
AS		 2538static s32
2539brcmf_cfg80211_get_station(struct wiphy *wiphy, struct net_device *ndev,
3b3a0162 2540 const u8 *mac, struct station_info *sinfo)
5b435de0 2541{
0abb5f21 2542 struct brcmf_if *ifp = netdev_priv(ndev);
94abd778 2543 struct brcmf_scb_val_le scb_val;
5b435de0 2544 s32 err = 0;
81f5dcb8 2545 struct brcmf_sta_info_le sta_info_le;
1f0dc59a
AS		 2546 u32 sta_flags;
2547 u32 is_tdls_peer;
cae355dc
HM		 2548 s32 total_rssi;
2549 s32 count_rssi;
94abd778 2550 int rssi;
cae355dc 2551 u32 i;
5b435de0 2552
d96b801f 2553 brcmf_dbg(TRACE, "Enter, MAC %pM\n", mac);
ce81e317 2554 if (!check_vif_up(ifp->vif))
5b435de0
AS		 2555 return -EIO;
2556
3f5893d1
HM		 2557 if (brcmf_is_ibssmode(ifp->vif))
2558 return brcmf_cfg80211_get_station_ibss(ifp, sinfo);
2559
1f0dc59a
AS		 2560 memset(&sta_info_le, 0, sizeof(sta_info_le));
2561 memcpy(&sta_info_le, mac, ETH_ALEN);
2562 err = brcmf_fil_iovar_data_get(ifp, "tdls_sta_info",
2563 &sta_info_le,
2564 sizeof(sta_info_le));
2565 is_tdls_peer = !err;
2566 if (err) {
0abb5f21 2567 err = brcmf_fil_iovar_data_get(ifp, "sta_info",
ac24be6f 2568 &sta_info_le,
81f5dcb8 2569 sizeof(sta_info_le));
1a873342 2570 if (err < 0) {
57d6e91a 2571 brcmf_err("GET STA INFO failed, %d\n", err);
1a873342
HM		 2572 goto done;
2573 }
1f0dc59a
AS		 2574 }
2575 brcmf_dbg(TRACE, "version %d\n", le16_to_cpu(sta_info_le.ver));
2576 sinfo->filled = BIT(NL80211_STA_INFO_INACTIVE_TIME);
2577 sinfo->inactive_time = le32_to_cpu(sta_info_le.idle) * 1000;
2578 sta_flags = le32_to_cpu(sta_info_le.flags);
2579 brcmf_convert_sta_flags(sta_flags, sinfo);
2580 sinfo->sta_flags.mask |= BIT(NL80211_STA_FLAG_TDLS_PEER);
2581 if (is_tdls_peer)
2582 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_TDLS_PEER);
2583 else
2584 sinfo->sta_flags.set &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
2585 if (sta_flags & BRCMF_STA_ASSOC) {
2586 sinfo->filled |= BIT(NL80211_STA_INFO_CONNECTED_TIME);
2587 sinfo->connected_time = le32_to_cpu(sta_info_le.in);
2588 brcmf_fill_bss_param(ifp, sinfo);
2589 }
2590 if (sta_flags & BRCMF_STA_SCBSTATS) {
2591 sinfo->filled |= BIT(NL80211_STA_INFO_TX_FAILED);
2592 sinfo->tx_failed = le32_to_cpu(sta_info_le.tx_failures);
2593 sinfo->filled |= BIT(NL80211_STA_INFO_TX_PACKETS);
2594 sinfo->tx_packets = le32_to_cpu(sta_info_le.tx_pkts);
2595 sinfo->tx_packets += le32_to_cpu(sta_info_le.tx_mcast_pkts);
2596 sinfo->filled |= BIT(NL80211_STA_INFO_RX_PACKETS);
2597 sinfo->rx_packets = le32_to_cpu(sta_info_le.rx_ucast_pkts);
2598 sinfo->rx_packets += le32_to_cpu(sta_info_le.rx_mcast_pkts);
2599 if (sinfo->tx_packets) {
319090bf 2600 sinfo->filled |= BIT(NL80211_STA_INFO_TX_BITRATE);
124d5172
HM		 2601 sinfo->txrate.legacy =
2602 le32_to_cpu(sta_info_le.tx_rate) / 100;
7f6c562d 2603 }
1f0dc59a
AS		 2604 if (sinfo->rx_packets) {
2605 sinfo->filled |= BIT(NL80211_STA_INFO_RX_BITRATE);
124d5172
HM		 2606 sinfo->rxrate.legacy =
2607 le32_to_cpu(sta_info_le.rx_rate) / 100;
1a873342 2608 }
1f0dc59a
AS		 2609 if (le16_to_cpu(sta_info_le.ver) >= 4) {
2610 sinfo->filled |= BIT(NL80211_STA_INFO_TX_BYTES);
2611 sinfo->tx_bytes = le64_to_cpu(sta_info_le.tx_tot_bytes);
2612 sinfo->filled |= BIT(NL80211_STA_INFO_RX_BYTES);
2613 sinfo->rx_bytes = le64_to_cpu(sta_info_le.rx_tot_bytes);
2614 }
cae355dc
HM		 2615 total_rssi = 0;
2616 count_rssi = 0;
2617 for (i = 0; i < BRCMF_ANT_MAX; i++) {
2618 if (sta_info_le.rssi[i]) {
2619 sinfo->chain_signal_avg[count_rssi] =
2620 sta_info_le.rssi[i];
2621 sinfo->chain_signal[count_rssi] =
2622 sta_info_le.rssi[i];
2623 total_rssi += sta_info_le.rssi[i];
2624 count_rssi++;
2625 }
2626 }
2627 if (count_rssi) {
2628 sinfo->filled |= BIT(NL80211_STA_INFO_CHAIN_SIGNAL);
2629 sinfo->chains = count_rssi;
2630
2631 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL);
2632 total_rssi /= count_rssi;
2633 sinfo->signal = total_rssi;
94abd778
JJM		 2634 } else if (test_bit(BRCMF_VIF_STATUS_CONNECTED,
2635 &ifp->vif->sme_state)) {
2636 memset(&scb_val, 0, sizeof(scb_val));
2637 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_RSSI,
2638 &scb_val, sizeof(scb_val));
2639 if (err) {
2640 brcmf_err("Could not get rssi (%d)\n", err);
2641 goto done;
2642 } else {
2643 rssi = le32_to_cpu(scb_val.val);
2644 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL);
2645 sinfo->signal = rssi;
2646 brcmf_dbg(CONN, "RSSI %d dBm\n", rssi);
2647 }
cae355dc 2648 }
1f0dc59a 2649 }
5b435de0 2650done:
d96b801f 2651 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2652 return err;
2653}
2654
bf2a7e04
HM		 2655static int
2656brcmf_cfg80211_dump_station(struct wiphy *wiphy, struct net_device *ndev,
2657 int idx, u8 *mac, struct station_info *sinfo)
2658{
2659 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
2660 struct brcmf_if *ifp = netdev_priv(ndev);
2661 s32 err;
2662
2663 brcmf_dbg(TRACE, "Enter, idx %d\n", idx);
2664
2665 if (idx == 0) {
2666 cfg->assoclist.count = cpu_to_le32(BRCMF_MAX_ASSOCLIST);
2667 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_ASSOCLIST,
2668 &cfg->assoclist,
2669 sizeof(cfg->assoclist));
2670 if (err) {
2671 brcmf_err("BRCMF_C_GET_ASSOCLIST unsupported, err=%d\n",
2672 err);
2673 cfg->assoclist.count = 0;
2674 return -EOPNOTSUPP;
2675 }
2676 }
2677 if (idx < le32_to_cpu(cfg->assoclist.count)) {
2678 memcpy(mac, cfg->assoclist.mac[idx], ETH_ALEN);
2679 return brcmf_cfg80211_get_station(wiphy, ndev, mac, sinfo);
2680 }
2681 return -ENOENT;
2682}
2683
5b435de0
AS		 2684static s32
2685brcmf_cfg80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *ndev,
2686 bool enabled, s32 timeout)
2687{
2688 s32 pm;
2689 s32 err = 0;
27a68fe3 2690 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
c1179033 2691 struct brcmf_if *ifp = netdev_priv(ndev);
5b435de0 2692
d96b801f 2693 brcmf_dbg(TRACE, "Enter\n");
5b435de0
AS		 2694
2695 /*
2696 * Powersave enable/disable request is coming from the
2697 * cfg80211 even before the interface is up. In that
2698 * scenario, driver will be storing the power save
27a68fe3 2699 * preference in cfg struct to apply this to
5b435de0
AS		 2700 * FW later while initializing the dongle
2701 */
27a68fe3 2702 cfg->pwr_save = enabled;
ce81e317 2703 if (!check_vif_up(ifp->vif)) {
5b435de0 2704
647c9ae0 2705 brcmf_dbg(INFO, "Device is not ready, storing the value in cfg_info struct\n");
5b435de0
AS		 2706 goto done;
2707 }
2708
2709 pm = enabled ? PM_FAST : PM_OFF;
102fd0d6
HM		 2710 /* Do not enable the power save after assoc if it is a p2p interface */
2711 if (ifp->vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT) {
2712 brcmf_dbg(INFO, "Do not enable power save for P2P clients\n");
2713 pm = PM_OFF;
2714 }
647c9ae0 2715 brcmf_dbg(INFO, "power save %s\n", (pm ? "enabled" : "disabled"));
5b435de0 2716
c1179033 2717 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PM, pm);
5b435de0
AS		 2718 if (err) {
2719 if (err == -ENODEV)
57d6e91a 2720 brcmf_err("net_device is not ready yet\n");
5b435de0 2721 else
57d6e91a 2722 brcmf_err("error (%d)\n", err);
5b435de0
AS		 2723 }
2724done:
d96b801f 2725 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2726 return err;
2727}
2728
27a68fe3 2729static s32 brcmf_inform_single_bss(struct brcmf_cfg80211_info *cfg,
d34bf64f 2730 struct brcmf_bss_info_le *bi)
5b435de0 2731{
27a68fe3 2732 struct wiphy *wiphy = cfg_to_wiphy(cfg);
5b435de0
AS		 2733 struct ieee80211_channel *notify_channel;
2734 struct cfg80211_bss *bss;
2735 struct ieee80211_supported_band *band;
83cf17aa 2736 struct brcmu_chan ch;
5b435de0
AS		 2737 u16 channel;
2738 u32 freq;
5b435de0
AS		 2739 u16 notify_capability;
2740 u16 notify_interval;
2741 u8 *notify_ie;
2742 size_t notify_ielen;
2743 s32 notify_signal;
2744
2745 if (le32_to_cpu(bi->length) > WL_BSS_INFO_MAX) {
57d6e91a 2746 brcmf_err("Bss info is larger than buffer. Discarding\n");
5b435de0
AS		 2747 return 0;
2748 }
2749
83cf17aa
FL		 2750 if (!bi->ctl_ch) {
2751 ch.chspec = le16_to_cpu(bi->chanspec);
2752 cfg->d11inf.decchspec(&ch);
4712d88a 2753 bi->ctl_ch = ch.control_ch_num;
83cf17aa
FL		 2754 }
2755 channel = bi->ctl_ch;
5b435de0
AS		 2756
2757 if (channel <= CH_MAX_2G_CHANNEL)
57fbcce3 2758 band = wiphy->bands[NL80211_BAND_2GHZ];
5b435de0 2759 else
57fbcce3 2760 band = wiphy->bands[NL80211_BAND_5GHZ];
5b435de0
AS		 2761
2762 freq = ieee80211_channel_to_frequency(channel, band->band);
2763 notify_channel = ieee80211_get_channel(wiphy, freq);
2764
5b435de0
AS		 2765 notify_capability = le16_to_cpu(bi->capability);
2766 notify_interval = le16_to_cpu(bi->beacon_period);
2767 notify_ie = (u8 *)bi + le16_to_cpu(bi->ie_offset);
2768 notify_ielen = le32_to_cpu(bi->ie_length);
2769 notify_signal = (s16)le16_to_cpu(bi->RSSI) * 100;
2770
16886735
AS		 2771 brcmf_dbg(CONN, "bssid: %pM\n", bi->BSSID);
2772 brcmf_dbg(CONN, "Channel: %d(%d)\n", channel, freq);
2773 brcmf_dbg(CONN, "Capability: %X\n", notify_capability);
2774 brcmf_dbg(CONN, "Beacon interval: %d\n", notify_interval);
2775 brcmf_dbg(CONN, "Signal: %d\n", notify_signal);
5b435de0 2776
5bc8c1f2
JB		 2777 bss = cfg80211_inform_bss(wiphy, notify_channel,
2778 CFG80211_BSS_FTYPE_UNKNOWN,
2779 (const u8 *)bi->BSSID,
2780 0, notify_capability,
2781 notify_interval, notify_ie,
2782 notify_ielen, notify_signal,
2783 GFP_KERNEL);
5b435de0 2784
e78946e1
FL		 2785 if (!bss)
2786 return -ENOMEM;
2787
5b112d3d 2788 cfg80211_put_bss(wiphy, bss);
5b435de0 2789
12f32370 2790 return 0;
5b435de0
AS		 2791}
2792
6f09be0a
RV		 2793static struct brcmf_bss_info_le *
2794next_bss_le(struct brcmf_scan_results *list, struct brcmf_bss_info_le *bss)
2795{
2796 if (bss == NULL)
2797 return list->bss_info_le;
2798 return (struct brcmf_bss_info_le *)((unsigned long)bss +
2799 le32_to_cpu(bss->length));
2800}
2801
27a68fe3 2802static s32 brcmf_inform_bss(struct brcmf_cfg80211_info *cfg)
5b435de0
AS		 2803{
2804 struct brcmf_scan_results *bss_list;
d34bf64f 2805 struct brcmf_bss_info_le *bi = NULL; /* must be initialized */
5b435de0
AS		 2806 s32 err = 0;
2807 int i;
2808
ef8596e1 2809 bss_list = (struct brcmf_scan_results *)cfg->escan_info.escan_buf;
0ecd8164
AS		 2810 if (bss_list->count != 0 &&
2811 bss_list->version != BRCMF_BSS_INFO_VERSION) {
57d6e91a
AS		 2812 brcmf_err("Version %d != WL_BSS_INFO_VERSION\n",
2813 bss_list->version);
5b435de0
AS		 2814 return -EOPNOTSUPP;
2815 }
4e8a008e 2816 brcmf_dbg(SCAN, "scanned AP count (%d)\n", bss_list->count);
f0799895 2817 for (i = 0; i < bss_list->count; i++) {
6f09be0a 2818 bi = next_bss_le(bss_list, bi);
27a68fe3 2819 err = brcmf_inform_single_bss(cfg, bi);
5b435de0
AS		 2820 if (err)
2821 break;
2822 }
2823 return err;
2824}
2825
b0a79088
HM		 2826static s32 brcmf_inform_ibss(struct brcmf_cfg80211_info *cfg,
2827 struct net_device *ndev, const u8 *bssid)
5b435de0 2828{
27a68fe3 2829 struct wiphy *wiphy = cfg_to_wiphy(cfg);
5b435de0 2830 struct ieee80211_channel *notify_channel;
d34bf64f 2831 struct brcmf_bss_info_le *bi = NULL;
5b435de0 2832 struct ieee80211_supported_band *band;
e78946e1 2833 struct cfg80211_bss *bss;
83cf17aa 2834 struct brcmu_chan ch;
5b435de0
AS		 2835 u8 *buf = NULL;
2836 s32 err = 0;
5b435de0 2837 u32 freq;
5b435de0
AS		 2838 u16 notify_capability;
2839 u16 notify_interval;
2840 u8 *notify_ie;
2841 size_t notify_ielen;
2842 s32 notify_signal;
2843
d96b801f 2844 brcmf_dbg(TRACE, "Enter\n");
5b435de0
AS		 2845
2846 buf = kzalloc(WL_BSS_INFO_MAX, GFP_KERNEL);
2847 if (buf == NULL) {
2848 err = -ENOMEM;
2849 goto CleanUp;
2850 }
2851
2852 *(__le32 *)buf = cpu_to_le32(WL_BSS_INFO_MAX);
2853
ac24be6f
AS		 2854 err = brcmf_fil_cmd_data_get(netdev_priv(ndev), BRCMF_C_GET_BSS_INFO,
2855 buf, WL_BSS_INFO_MAX);
5b435de0 2856 if (err) {
57d6e91a 2857 brcmf_err("WLC_GET_BSS_INFO failed: %d\n", err);
5b435de0
AS		 2858 goto CleanUp;
2859 }
2860
d34bf64f 2861 bi = (struct brcmf_bss_info_le *)(buf + 4);
5b435de0 2862
83cf17aa
FL		 2863 ch.chspec = le16_to_cpu(bi->chanspec);
2864 cfg->d11inf.decchspec(&ch);
5b435de0 2865
83cf17aa 2866 if (ch.band == BRCMU_CHAN_BAND_2G)
57fbcce3 2867 band = wiphy->bands[NL80211_BAND_2GHZ];
5b435de0 2868 else
57fbcce3 2869 band = wiphy->bands[NL80211_BAND_5GHZ];
5b435de0 2870
4712d88a 2871 freq = ieee80211_channel_to_frequency(ch.control_ch_num, band->band);
b0a79088 2872 cfg->channel = freq;
5b435de0
AS		 2873 notify_channel = ieee80211_get_channel(wiphy, freq);
2874
5b435de0
AS		 2875 notify_capability = le16_to_cpu(bi->capability);
2876 notify_interval = le16_to_cpu(bi->beacon_period);
2877 notify_ie = (u8 *)bi + le16_to_cpu(bi->ie_offset);
2878 notify_ielen = le32_to_cpu(bi->ie_length);
2879 notify_signal = (s16)le16_to_cpu(bi->RSSI) * 100;
2880
4712d88a 2881 brcmf_dbg(CONN, "channel: %d(%d)\n", ch.control_ch_num, freq);
16886735
AS		 2882 brcmf_dbg(CONN, "capability: %X\n", notify_capability);
2883 brcmf_dbg(CONN, "beacon interval: %d\n", notify_interval);
2884 brcmf_dbg(CONN, "signal: %d\n", notify_signal);
5b435de0 2885
5bc8c1f2
JB		 2886 bss = cfg80211_inform_bss(wiphy, notify_channel,
2887 CFG80211_BSS_FTYPE_UNKNOWN, bssid, 0,
2888 notify_capability, notify_interval,
2889 notify_ie, notify_ielen, notify_signal,
2890 GFP_KERNEL);
5b435de0 2891
e78946e1
FL		 2892 if (!bss) {
2893 err = -ENOMEM;
2894 goto CleanUp;
2895 }
2896
5b112d3d 2897 cfg80211_put_bss(wiphy, bss);
e78946e1 2898
5b435de0
AS		 2899CleanUp:
2900
2901 kfree(buf);
2902
d96b801f 2903 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 2904
2905 return err;
2906}
2907
89286dc9
HM		 2908static s32 brcmf_update_bss_info(struct brcmf_cfg80211_info *cfg,
2909 struct brcmf_if *ifp)
1a873342 2910{
d34bf64f 2911 struct brcmf_bss_info_le *bi;
4b5800fe 2912 const struct brcmf_tlv *tim;
5b435de0
AS		 2913 u16 beacon_interval;
2914 u8 dtim_period;
2915 size_t ie_len;
2916 u8 *ie;
2917 s32 err = 0;
2918
d96b801f 2919 brcmf_dbg(TRACE, "Enter\n");
128ce3b6 2920 if (brcmf_is_ibssmode(ifp->vif))
5b435de0
AS		 2921 return err;
2922
27a68fe3 2923 *(__le32 *)cfg->extra_buf = cpu_to_le32(WL_EXTRA_BUF_MAX);
ac24be6f 2924 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_BSS_INFO,
81f5dcb8 2925 cfg->extra_buf, WL_EXTRA_BUF_MAX);
5b435de0 2926 if (err) {
57d6e91a 2927 brcmf_err("Could not get bss info %d\n", err);
5b435de0
AS		 2928 goto update_bss_info_out;
2929 }
2930
27a68fe3
AS		 2931 bi = (struct brcmf_bss_info_le *)(cfg->extra_buf + 4);
2932 err = brcmf_inform_single_bss(cfg, bi);
5b435de0
AS		 2933 if (err)
2934 goto update_bss_info_out;
2935
2936 ie = ((u8 *)bi) + le16_to_cpu(bi->ie_offset);
2937 ie_len = le32_to_cpu(bi->ie_length);
2938 beacon_interval = le16_to_cpu(bi->beacon_period);
2939
f8e4b412 2940 tim = brcmf_parse_tlvs(ie, ie_len, WLAN_EID_TIM);
5b435de0
AS		 2941 if (tim)
2942 dtim_period = tim->data[1];
2943 else {
2944 /*
2945 * active scan was done so we could not get dtim
2946 * information out of probe response.
2947 * so we speficially query dtim information to dongle.
2948 */
2949 u32 var;
ac24be6f 2950 err = brcmf_fil_iovar_int_get(ifp, "dtim_assoc", &var);
5b435de0 2951 if (err) {
57d6e91a 2952 brcmf_err("wl dtim_assoc failed (%d)\n", err);
5b435de0
AS		 2953 goto update_bss_info_out;
2954 }
2955 dtim_period = (u8)var;
2956 }
2957
5b435de0 2958update_bss_info_out:
d96b801f 2959 brcmf_dbg(TRACE, "Exit");
5b435de0
AS		 2960 return err;
2961}
2962
18e2f61d 2963void brcmf_abort_scanning(struct brcmf_cfg80211_info *cfg)
5b435de0 2964{
27a68fe3 2965 struct escan_info *escan = &cfg->escan_info;
5b435de0 2966
c1179033 2967 set_bit(BRCMF_SCAN_STATUS_ABORT, &cfg->scan_status);
efc2c1fa 2968 if (cfg->int_escan_map || cfg->scan_request) {
108a4bee 2969 escan->escan_state = WL_ESCAN_STATE_IDLE;
a0f472ac 2970 brcmf_notify_escan_complete(cfg, escan->ifp, true, true);
5b435de0 2971 }
c1179033
AS		 2972 clear_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status);
2973 clear_bit(BRCMF_SCAN_STATUS_ABORT, &cfg->scan_status);
5b435de0
AS		 2974}
2975
e756af5b
HM		 2976static void brcmf_cfg80211_escan_timeout_worker(struct work_struct *work)
2977{
27a68fe3
AS		 2978 struct brcmf_cfg80211_info *cfg =
2979 container_of(work, struct brcmf_cfg80211_info,
e756af5b
HM		 2980 escan_timeout_work);
2981
ef8596e1 2982 brcmf_inform_bss(cfg);
a0f472ac 2983 brcmf_notify_escan_complete(cfg, cfg->escan_info.ifp, true, true);
e756af5b
HM		 2984}
2985
e99e88a9 2986static void brcmf_escan_timeout(struct timer_list *t)
e756af5b 2987{
27a68fe3 2988 struct brcmf_cfg80211_info *cfg =
e99e88a9 2989 from_timer(cfg, t, escan_timeout);
e756af5b 2990
efc2c1fa 2991 if (cfg->int_escan_map || cfg->scan_request) {
57d6e91a 2992 brcmf_err("timer expired\n");
f0799895 2993 schedule_work(&cfg->escan_timeout_work);
e756af5b
HM		 2994 }
2995}
2996
2997static s32
83cf17aa
FL		 2998brcmf_compare_update_same_bss(struct brcmf_cfg80211_info *cfg,
2999 struct brcmf_bss_info_le *bss,
e756af5b
HM		 3000 struct brcmf_bss_info_le *bss_info_le)
3001{
83cf17aa
FL		 3002 struct brcmu_chan ch_bss, ch_bss_info_le;
3003
3004 ch_bss.chspec = le16_to_cpu(bss->chanspec);
3005 cfg->d11inf.decchspec(&ch_bss);
3006 ch_bss_info_le.chspec = le16_to_cpu(bss_info_le->chanspec);
3007 cfg->d11inf.decchspec(&ch_bss_info_le);
3008
e756af5b 3009 if (!memcmp(&bss_info_le->BSSID, &bss->BSSID, ETH_ALEN) &&
83cf17aa 3010 ch_bss.band == ch_bss_info_le.band &&
e756af5b
HM		 3011 bss_info_le->SSID_len == bss->SSID_len &&
3012 !memcmp(bss_info_le->SSID, bss->SSID, bss_info_le->SSID_len)) {
6f5838a4
AS		 3013 if ((bss->flags & BRCMF_BSS_RSSI_ON_CHANNEL) ==
3014 (bss_info_le->flags & BRCMF_BSS_RSSI_ON_CHANNEL)) {
029591f3
AS		 3015 s16 bss_rssi = le16_to_cpu(bss->RSSI);
3016 s16 bss_info_rssi = le16_to_cpu(bss_info_le->RSSI);
3017
e756af5b
HM		 3018 /* preserve max RSSI if the measurements are
3019 * both on-channel or both off-channel
3020 */
029591f3 3021 if (bss_info_rssi > bss_rssi)
e756af5b 3022 bss->RSSI = bss_info_le->RSSI;
6f5838a4
AS		 3023 } else if ((bss->flags & BRCMF_BSS_RSSI_ON_CHANNEL) &&
3024 (bss_info_le->flags & BRCMF_BSS_RSSI_ON_CHANNEL) == 0) {
e756af5b
HM		 3025 /* preserve the on-channel rssi measurement
3026 * if the new measurement is off channel
3027 */
3028 bss->RSSI = bss_info_le->RSSI;
6f5838a4 3029 bss->flags |= BRCMF_BSS_RSSI_ON_CHANNEL;
e756af5b
HM		 3030 }
3031 return 1;
3032 }
3033 return 0;
3034}
3035
3036static s32
1993732e 3037brcmf_cfg80211_escan_handler(struct brcmf_if *ifp,
e756af5b
HM		 3038 const struct brcmf_event_msg *e, void *data)
3039{
1993732e 3040 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
e756af5b 3041 s32 status;
e756af5b 3042 struct brcmf_escan_result_le *escan_result_le;
17df6453 3043 u32 escan_buflen;
e756af5b
HM		 3044 struct brcmf_bss_info_le *bss_info_le;
3045 struct brcmf_bss_info_le *bss = NULL;
3046 u32 bi_length;
3047 struct brcmf_scan_results *list;
3048 u32 i;
97ed15c7 3049 bool aborted;
e756af5b 3050
5c36b99a 3051 status = e->status;
e756af5b 3052
b9472a2e
HG		 3053 if (status == BRCMF_E_STATUS_ABORT)
3054 goto exit;
3055
a0f472ac 3056 if (!test_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status)) {
37a869ec 3057 brcmf_err("scan not ready, bsscfgidx=%d\n", ifp->bsscfgidx);
e756af5b
HM		 3058 return -EPERM;
3059 }
3060
3061 if (status == BRCMF_E_STATUS_PARTIAL) {
4e8a008e 3062 brcmf_dbg(SCAN, "ESCAN Partial result\n");
17df6453
AVS		 3063 if (e->datalen < sizeof(*escan_result_le)) {
3064 brcmf_err("invalid event data length\n");
3065 goto exit;
3066 }
e756af5b
HM		 3067 escan_result_le = (struct brcmf_escan_result_le *) data;
3068 if (!escan_result_le) {
57d6e91a 3069 brcmf_err("Invalid escan result (NULL pointer)\n");
e756af5b
HM		 3070 goto exit;
3071 }
17df6453
AVS		 3072 escan_buflen = le32_to_cpu(escan_result_le->buflen);
3073 if (escan_buflen > BRCMF_ESCAN_BUF_SIZE ||
3074 escan_buflen > e->datalen ||
3075 escan_buflen < sizeof(*escan_result_le)) {
3076 brcmf_err("Invalid escan buffer length: %d\n",
3077 escan_buflen);
3078 goto exit;
3079 }
e756af5b 3080 if (le16_to_cpu(escan_result_le->bss_count) != 1) {
57d6e91a
AS		 3081 brcmf_err("Invalid bss_count %d: ignoring\n",
3082 escan_result_le->bss_count);
e756af5b
HM		 3083 goto exit;
3084 }
3085 bss_info_le = &escan_result_le->bss_info_le;
3086
6eda4e2c
HM		 3087 if (brcmf_p2p_scan_finding_common_channel(cfg, bss_info_le))
3088 goto exit;
3089
efc2c1fa 3090 if (!cfg->int_escan_map && !cfg->scan_request) {
6eda4e2c
HM		 3091 brcmf_dbg(SCAN, "result without cfg80211 request\n");
3092 goto exit;
3093 }
3094
e756af5b 3095 bi_length = le32_to_cpu(bss_info_le->length);
17df6453
AVS		 3096 if (bi_length != escan_buflen - WL_ESCAN_RESULTS_FIXED_SIZE) {
3097 brcmf_err("Ignoring invalid bss_info length: %d\n",
57d6e91a 3098 bi_length);
e756af5b
HM		 3099 goto exit;
3100 }
3101
27a68fe3 3102 if (!(cfg_to_wiphy(cfg)->interface_modes &
e756af5b
HM		 3103 BIT(NL80211_IFTYPE_ADHOC))) {
3104 if (le16_to_cpu(bss_info_le->capability) &
3105 WLAN_CAPABILITY_IBSS) {
57d6e91a 3106 brcmf_err("Ignoring IBSS result\n");
e756af5b
HM		 3107 goto exit;
3108 }
3109 }
3110
3111 list = (struct brcmf_scan_results *)
27a68fe3 3112 cfg->escan_info.escan_buf;
d5367334 3113 if (bi_length > BRCMF_ESCAN_BUF_SIZE - list->buflen) {
57d6e91a 3114 brcmf_err("Buffer is too small: ignoring\n");
e756af5b
HM		 3115 goto exit;
3116 }
3117
3118 for (i = 0; i < list->count; i++) {
3119 bss = bss ? (struct brcmf_bss_info_le *)
3120 ((unsigned char *)bss +
3121 le32_to_cpu(bss->length)) : list->bss_info_le;
83cf17aa
FL		 3122 if (brcmf_compare_update_same_bss(cfg, bss,
3123 bss_info_le))
e756af5b
HM		 3124 goto exit;
3125 }
d5367334
HM		 3126 memcpy(&cfg->escan_info.escan_buf[list->buflen], bss_info_le,
3127 bi_length);
e756af5b
HM		 3128 list->version = le32_to_cpu(bss_info_le->version);
3129 list->buflen += bi_length;
3130 list->count++;
3131 } else {
27a68fe3 3132 cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
6eda4e2c
HM		 3133 if (brcmf_p2p_scan_finding_common_channel(cfg, NULL))
3134 goto exit;
efc2c1fa 3135 if (cfg->int_escan_map || cfg->scan_request) {
27a68fe3 3136 brcmf_inform_bss(cfg);
97ed15c7 3137 aborted = status != BRCMF_E_STATUS_SUCCESS;
ef8596e1 3138 brcmf_notify_escan_complete(cfg, ifp, aborted, false);
e756af5b 3139 } else
6eda4e2c
HM		 3140 brcmf_dbg(SCAN, "Ignored scan complete result 0x%x\n",
3141 status);
e756af5b
HM		 3142 }
3143exit:
12f32370 3144 return 0;
e756af5b
HM		 3145}
3146
27a68fe3 3147static void brcmf_init_escan(struct brcmf_cfg80211_info *cfg)
e756af5b 3148{
5c36b99a
AS		 3149 brcmf_fweh_register(cfg->pub, BRCMF_E_ESCAN_RESULT,
3150 brcmf_cfg80211_escan_handler);
f0799895
HM		 3151 cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
3152 /* Init scan_timeout timer */
e99e88a9 3153 timer_setup(&cfg->escan_timeout, brcmf_escan_timeout, 0);
f0799895
HM		 3154 INIT_WORK(&cfg->escan_timeout_work,
3155 brcmf_cfg80211_escan_timeout_worker);
e756af5b
HM		 3156}
3157
fa85b30a
AVS		 3158static struct cfg80211_scan_request *
3159brcmf_alloc_internal_escan_request(struct wiphy *wiphy, u32 n_netinfo) {
3160 struct cfg80211_scan_request *req;
3161 size_t req_size;
3162
3163 req_size = sizeof(*req) +
3164 n_netinfo * sizeof(req->channels[0]) +
3165 n_netinfo * sizeof(*req->ssids);
3166
3167 req = kzalloc(req_size, GFP_KERNEL);
3168 if (req) {
3169 req->wiphy = wiphy;
3170 req->ssids = (void *)(&req->channels[0]) +
3171 n_netinfo * sizeof(req->channels[0]);
3172 }
3173 return req;
3174}
3175
3176static int brcmf_internal_escan_add_info(struct cfg80211_scan_request *req,
3177 u8 *ssid, u8 ssid_len, u8 channel)
3178{
3179 struct ieee80211_channel *chan;
3180 enum nl80211_band band;
6ea51fc7 3181 int freq, i;
fa85b30a
AVS		 3182
3183 if (channel <= CH_MAX_2G_CHANNEL)
3184 band = NL80211_BAND_2GHZ;
3185 else
3186 band = NL80211_BAND_5GHZ;
3187
3188 freq = ieee80211_channel_to_frequency(channel, band);
3189 if (!freq)
3190 return -EINVAL;
3191
3192 chan = ieee80211_get_channel(req->wiphy, freq);
3193 if (!chan)
3194 return -EINVAL;
3195
6ea51fc7
AVS		 3196 for (i = 0; i < req->n_channels; i++) {
3197 if (req->channels[i] == chan)
3198 break;
3199 }
3200 if (i == req->n_channels)
3201 req->channels[req->n_channels++] = chan;
fa85b30a 3202
6ea51fc7
AVS		 3203 for (i = 0; i < req->n_ssids; i++) {
3204 if (req->ssids[i].ssid_len == ssid_len &&
3205 !memcmp(req->ssids[i].ssid, ssid, ssid_len))
3206 break;
3207 }
3208 if (i == req->n_ssids) {
3209 memcpy(req->ssids[req->n_ssids].ssid, ssid, ssid_len);
3210 req->ssids[req->n_ssids++].ssid_len = ssid_len;
3211 }
fa85b30a
AVS		 3212 return 0;
3213}
3214
efc2c1fa 3215static int brcmf_start_internal_escan(struct brcmf_if *ifp, u32 fwmap,
fa85b30a
AVS		 3216 struct cfg80211_scan_request *request)
3217{
3218 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
3219 int err;
3220
3221 if (test_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status)) {
efc2c1fa
AVS		 3222 if (cfg->int_escan_map)
3223 brcmf_dbg(SCAN, "aborting internal scan: map=%u\n",
3224 cfg->int_escan_map);
fa85b30a
AVS		 3225 /* Abort any on-going scan */
3226 brcmf_abort_scanning(cfg);
3227 }
3228
efc2c1fa 3229 brcmf_dbg(SCAN, "start internal scan: map=%u\n", fwmap);
fa85b30a
AVS		 3230 set_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status);
3231 cfg->escan_info.run = brcmf_run_escan;
3232 err = brcmf_do_escan(ifp, request);
3233 if (err) {
3234 clear_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status);
3235 return err;
3236 }
efc2c1fa 3237 cfg->int_escan_map = fwmap;
fa85b30a
AVS		 3238 return 0;
3239}
3240
53e3a80d
AVS		 3241static struct brcmf_pno_net_info_le *
3242brcmf_get_netinfo_array(struct brcmf_pno_scanresults_le *pfn_v1)
3243{
3244 struct brcmf_pno_scanresults_v2_le *pfn_v2;
3245 struct brcmf_pno_net_info_le *netinfo;
3246
3247 switch (pfn_v1->version) {
3248 default:
3249 WARN_ON(1);
3250 /* fall-thru */
3251 case cpu_to_le32(1):
3252 netinfo = (struct brcmf_pno_net_info_le *)(pfn_v1 + 1);
3253 break;
3254 case cpu_to_le32(2):
3255 pfn_v2 = (struct brcmf_pno_scanresults_v2_le *)pfn_v1;
3256 netinfo = (struct brcmf_pno_net_info_le *)(pfn_v2 + 1);
3257 break;
3258 }
3259
3260 return netinfo;
3261}
3262
5419f7f1
HM		 3263/* PFN result doesn't have all the info which are required by the supplicant
3264 * (For e.g IEs) Do a target Escan so that sched scan results are reported
3265 * via wl_inform_single_bss in the required format. Escan does require the
3266 * scan request in the form of cfg80211_scan_request. For timebeing, create
3267 * cfg80211_scan_request one out of the received PNO event.
3268 */
3021ad9a 3269static s32
5419f7f1
HM		 3270brcmf_notify_sched_scan_results(struct brcmf_if *ifp,
3271 const struct brcmf_event_msg *e, void *data)
3021ad9a
HM		 3272{
3273 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5419f7f1
HM		 3274 struct brcmf_pno_net_info_le *netinfo, *netinfo_start;
3275 struct cfg80211_scan_request *request = NULL;
5419f7f1 3276 struct wiphy *wiphy = cfg_to_wiphy(cfg);
fa85b30a 3277 int i, err = 0;
3021ad9a 3278 struct brcmf_pno_scanresults_le *pfn_result;
efc2c1fa 3279 u32 bucket_map;
5419f7f1
HM		 3280 u32 result_count;
3281 u32 status;
4835f37e 3282 u32 datalen;
3021ad9a
HM		 3283
3284 brcmf_dbg(SCAN, "Enter\n");
3285
0aedbcaf
HM		 3286 if (e->datalen < (sizeof(*pfn_result) + sizeof(*netinfo))) {
3287 brcmf_dbg(SCAN, "Event data to small. Ignore\n");
3288 return 0;
3289 }
3290
3021ad9a 3291 if (e->event_code == BRCMF_E_PFN_NET_LOST) {
5419f7f1 3292 brcmf_dbg(SCAN, "PFN NET LOST event. Do Nothing\n");
3021ad9a
HM		 3293 return 0;
3294 }
3295
5419f7f1
HM		 3296 pfn_result = (struct brcmf_pno_scanresults_le *)data;
3297 result_count = le32_to_cpu(pfn_result->count);
3298 status = le32_to_cpu(pfn_result->status);
3021ad9a 3299
5419f7f1
HM		 3300 /* PFN event is limited to fit 512 bytes so we may get
3301 * multiple NET_FOUND events. For now place a warning here.
3302 */
3303 WARN_ON(status != BRCMF_PNO_SCAN_COMPLETE);
3304 brcmf_dbg(SCAN, "PFN NET FOUND event. count: %d\n", result_count);
fa85b30a 3305 if (!result_count) {
5419f7f1
HM		 3306 brcmf_err("FALSE PNO Event. (pfn_count == 0)\n");
3307 goto out_err;
aeb64225 3308 }
4835f37e
AVS		 3309
3310 netinfo_start = brcmf_get_netinfo_array(pfn_result);
3311 datalen = e->datalen - ((void *)netinfo_start - (void *)pfn_result);
3312 if (datalen < result_count * sizeof(*netinfo)) {
3313 brcmf_err("insufficient event data\n");
3314 goto out_err;
3315 }
3316
fa85b30a
AVS		 3317 request = brcmf_alloc_internal_escan_request(wiphy,
3318 result_count);
3319 if (!request) {
3320 err = -ENOMEM;
3321 goto out_err;
5419f7f1
HM		 3322 }
3323
efc2c1fa 3324 bucket_map = 0;
fa85b30a
AVS		 3325 for (i = 0; i < result_count; i++) {
3326 netinfo = &netinfo_start[i];
5419f7f1 3327
4835f37e
AVS		 3328 if (netinfo->SSID_len > IEEE80211_MAX_SSID_LEN)
3329 netinfo->SSID_len = IEEE80211_MAX_SSID_LEN;
fa85b30a
AVS		 3330 brcmf_dbg(SCAN, "SSID:%.32s Channel:%d\n",
3331 netinfo->SSID, netinfo->channel);
efc2c1fa 3332 bucket_map |= brcmf_pno_get_bucket_map(cfg->pno, netinfo);
fa85b30a
AVS		 3333 err = brcmf_internal_escan_add_info(request,
3334 netinfo->SSID,
3335 netinfo->SSID_len,
3336 netinfo->channel);
3337 if (err)
5419f7f1 3338 goto out_err;
5419f7f1 3339 }
5419f7f1 3340
efc2c1fa
AVS		 3341 if (!bucket_map)
3342 goto free_req;
3343
3344 err = brcmf_start_internal_escan(ifp, bucket_map, request);
fa85b30a
AVS		 3345 if (!err)
3346 goto free_req;
5419f7f1 3347
5419f7f1 3348out_err:
b34939b9 3349 cfg80211_sched_scan_stopped(wiphy, 0);
fa85b30a
AVS		 3350free_req:
3351 kfree(request);
5419f7f1
HM		 3352 return err;
3353}
3354
3355static int
3356brcmf_cfg80211_sched_scan_start(struct wiphy *wiphy,
3357 struct net_device *ndev,
3e2e86ab 3358 struct cfg80211_sched_scan_request *req)
5419f7f1
HM		 3359{
3360 struct brcmf_if *ifp = netdev_priv(ndev);
3361 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
5419f7f1 3362
efc2c1fa 3363 brcmf_dbg(SCAN, "Enter: n_match_sets=%d n_ssids=%d\n",
3e2e86ab 3364 req->n_match_sets, req->n_ssids);
dfe5b0d5 3365
5419f7f1 3366 if (test_bit(BRCMF_SCAN_STATUS_SUPPRESS, &cfg->scan_status)) {
efc2c1fa 3367 brcmf_err("Scanning suppressed: status=%lu\n",
5419f7f1
HM		 3368 cfg->scan_status);
3369 return -EAGAIN;
3370 }
3371
3e2e86ab
AVS		 3372 if (req->n_match_sets <= 0) {
3373 brcmf_dbg(SCAN, "invalid number of matchsets specified: %d\n",
3374 req->n_match_sets);
5419f7f1
HM		 3375 return -EINVAL;
3376 }
3377
3e48611d 3378 return brcmf_pno_start_sched_scan(ifp, req);
5419f7f1
HM		 3379}
3380
3381static int brcmf_cfg80211_sched_scan_stop(struct wiphy *wiphy,
3a3ecf1d 3382 struct net_device *ndev, u64 reqid)
5419f7f1
HM		 3383{
3384 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
ac55136f 3385 struct brcmf_if *ifp = netdev_priv(ndev);
5419f7f1
HM		 3386
3387 brcmf_dbg(SCAN, "enter\n");
efc2c1fa
AVS		 3388 brcmf_pno_stop_sched_scan(ifp, reqid);
3389 if (cfg->int_escan_map)
ac55136f 3390 brcmf_notify_escan_complete(cfg, ifp, true, true);
5419f7f1
HM		 3391 return 0;
3392}
3393
3394static __always_inline void brcmf_delay(u32 ms)
3395{
3396 if (ms < 1000 / HZ) {
3397 cond_resched();
3398 mdelay(ms);
3399 } else {
3400 msleep(ms);
3401 }
3402}
3403
3404static s32 brcmf_config_wowl_pattern(struct brcmf_if *ifp, u8 cmd[4],
3405 u8 *pattern, u32 patternsize, u8 *mask,
3406 u32 packet_offset)
3407{
3408 struct brcmf_fil_wowl_pattern_le *filter;
3409 u32 masksize;
3410 u32 patternoffset;
3411 u8 *buf;
3412 u32 bufsize;
3413 s32 ret;
3414
3415 masksize = (patternsize + 7) / 8;
3416 patternoffset = sizeof(*filter) - sizeof(filter->cmd) + masksize;
3417
3418 bufsize = sizeof(*filter) + patternsize + masksize;
3419 buf = kzalloc(bufsize, GFP_KERNEL);
3420 if (!buf)
3421 return -ENOMEM;
3422 filter = (struct brcmf_fil_wowl_pattern_le *)buf;
3423
3424 memcpy(filter->cmd, cmd, 4);
3425 filter->masksize = cpu_to_le32(masksize);
3426 filter->offset = cpu_to_le32(packet_offset);
3427 filter->patternoffset = cpu_to_le32(patternoffset);
3428 filter->patternsize = cpu_to_le32(patternsize);
3429 filter->type = cpu_to_le32(BRCMF_WOWL_PATTERN_TYPE_BITMAP);
3430
3431 if ((mask) && (masksize))
3432 memcpy(buf + sizeof(*filter), mask, masksize);
3433 if ((pattern) && (patternsize))
3434 memcpy(buf + sizeof(*filter) + masksize, pattern, patternsize);
3435
3436 ret = brcmf_fil_iovar_data_set(ifp, "wowl_pattern", buf, bufsize);
3437
3438 kfree(buf);
3439 return ret;
3440}
3441
3442static s32
3443brcmf_wowl_nd_results(struct brcmf_if *ifp, const struct brcmf_event_msg *e,
3444 void *data)
3445{
3446 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
3447 struct brcmf_pno_scanresults_le *pfn_result;
3448 struct brcmf_pno_net_info_le *netinfo;
3449
3450 brcmf_dbg(SCAN, "Enter\n");
3451
0aedbcaf
HM		 3452 if (e->datalen < (sizeof(*pfn_result) + sizeof(*netinfo))) {
3453 brcmf_dbg(SCAN, "Event data to small. Ignore\n");
3454 return 0;
3455 }
3456
5419f7f1
HM		 3457 pfn_result = (struct brcmf_pno_scanresults_le *)data;
3458
3459 if (e->event_code == BRCMF_E_PFN_NET_LOST) {
3460 brcmf_dbg(SCAN, "PFN NET LOST event. Ignore\n");
3461 return 0;
3462 }
3463
3464 if (le32_to_cpu(pfn_result->count) < 1) {
3465 brcmf_err("Invalid result count, expected 1 (%d)\n",
3466 le32_to_cpu(pfn_result->count));
3467 return -EINVAL;
3468 }
3469
d29afe91 3470 netinfo = brcmf_get_netinfo_array(pfn_result);
5419f7f1
HM		 3471 memcpy(cfg->wowl.nd->ssid.ssid, netinfo->SSID, netinfo->SSID_len);
3472 cfg->wowl.nd->ssid.ssid_len = netinfo->SSID_len;
3473 cfg->wowl.nd->n_channels = 1;
3474 cfg->wowl.nd->channels[0] =
3475 ieee80211_channel_to_frequency(netinfo->channel,
3476 netinfo->channel <= CH_MAX_2G_CHANNEL ?
3477 NL80211_BAND_2GHZ : NL80211_BAND_5GHZ);
3478 cfg->wowl.nd_info->n_matches = 1;
3479 cfg->wowl.nd_info->matches[0] = cfg->wowl.nd;
3480
3481 /* Inform (the resume task) that the net detect information was recvd */
3482 cfg->wowl.nd_data_completed = true;
3483 wake_up(&cfg->wowl.nd_data_wait);
3484
3485 return 0;
3486}
3487
3488#ifdef CONFIG_PM
3489
3490static void brcmf_report_wowl_wakeind(struct wiphy *wiphy, struct brcmf_if *ifp)
3491{
3492 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
3493 struct brcmf_wowl_wakeind_le wake_ind_le;
3494 struct cfg80211_wowlan_wakeup wakeup_data;
3495 struct cfg80211_wowlan_wakeup *wakeup;
3496 u32 wakeind;
3497 s32 err;
3498 int timeout;
3499
3500 err = brcmf_fil_iovar_data_get(ifp, "wowl_wakeind", &wake_ind_le,
3501 sizeof(wake_ind_le));
3502 if (err) {
3503 brcmf_err("Get wowl_wakeind failed, err = %d\n", err);
3504 return;
3505 }
3506
3507 wakeind = le32_to_cpu(wake_ind_le.ucode_wakeind);
3508 if (wakeind & (BRCMF_WOWL_MAGIC | BRCMF_WOWL_DIS | BRCMF_WOWL_BCN |
3509 BRCMF_WOWL_RETR | BRCMF_WOWL_NET |
3510 BRCMF_WOWL_PFN_FOUND)) {
3511 wakeup = &wakeup_data;
3512 memset(&wakeup_data, 0, sizeof(wakeup_data));
3513 wakeup_data.pattern_idx = -1;
3514
3515 if (wakeind & BRCMF_WOWL_MAGIC) {
3516 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_MAGIC\n");
3517 wakeup_data.magic_pkt = true;
3518 }
3519 if (wakeind & BRCMF_WOWL_DIS) {
3520 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_DIS\n");
3521 wakeup_data.disconnect = true;
3522 }
3523 if (wakeind & BRCMF_WOWL_BCN) {
3524 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_BCN\n");
3525 wakeup_data.disconnect = true;
3526 }
3527 if (wakeind & BRCMF_WOWL_RETR) {
3528 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_RETR\n");
3529 wakeup_data.disconnect = true;
3530 }
3531 if (wakeind & BRCMF_WOWL_NET) {
3532 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_NET\n");
3533 /* For now always map to pattern 0, no API to get
3534 * correct information available at the moment.
3535 */
3536 wakeup_data.pattern_idx = 0;
3537 }
3538 if (wakeind & BRCMF_WOWL_PFN_FOUND) {
3539 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_PFN_FOUND\n");
3540 timeout = wait_event_timeout(cfg->wowl.nd_data_wait,
3541 cfg->wowl.nd_data_completed,
3542 BRCMF_ND_INFO_TIMEOUT);
3543 if (!timeout)
3544 brcmf_err("No result for wowl net detect\n");
3545 else
3546 wakeup_data.net_detect = cfg->wowl.nd_info;
3547 }
5c22fb85
HM		 3548 if (wakeind & BRCMF_WOWL_GTK_FAILURE) {
3549 brcmf_dbg(INFO, "WOWL Wake indicator: BRCMF_WOWL_GTK_FAILURE\n");
3550 wakeup_data.gtk_rekey_failure = true;
3551 }
5419f7f1
HM		 3552 } else {
3553 wakeup = NULL;
3554 }
3555 cfg80211_report_wowlan_wakeup(&ifp->vif->wdev, wakeup, GFP_KERNEL);
3556}
3557
3558#else
3559
3560static void brcmf_report_wowl_wakeind(struct wiphy *wiphy, struct brcmf_if *ifp)
3561{
3562}
3563
3564#endif /* CONFIG_PM */
3565
3566static s32 brcmf_cfg80211_resume(struct wiphy *wiphy)
3567{
3568 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
3569 struct net_device *ndev = cfg_to_ndev(cfg);
3570 struct brcmf_if *ifp = netdev_priv(ndev);
3571
3572 brcmf_dbg(TRACE, "Enter\n");
3573
3574 if (cfg->wowl.active) {
3575 brcmf_report_wowl_wakeind(wiphy, ifp);
3576 brcmf_fil_iovar_int_set(ifp, "wowl_clear", 0);
3577 brcmf_config_wowl_pattern(ifp, "clr", NULL, 0, NULL, 0);
73ef9e64
HM		 3578 if (!brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL_ARP_ND))
3579 brcmf_configure_arp_nd_offload(ifp, true);
4eb3af7c 3580 brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PM,
3021ad9a
HM		 3581 cfg->wowl.pre_pmmode);
3582 cfg->wowl.active = false;
3583 if (cfg->wowl.nd_enabled) {
3a3ecf1d 3584 brcmf_cfg80211_sched_scan_stop(cfg->wiphy, ifp->ndev, 0);
3021ad9a
HM		 3585 brcmf_fweh_unregister(cfg->pub, BRCMF_E_PFN_NET_FOUND);
3586 brcmf_fweh_register(cfg->pub, BRCMF_E_PFN_NET_FOUND,
3587 brcmf_notify_sched_scan_results);
3588 cfg->wowl.nd_enabled = false;
3589 }
4eb3af7c 3590 }
5b435de0
AS		 3591 return 0;
3592}
3593
4eb3af7c
HM		 3594static void brcmf_configure_wowl(struct brcmf_cfg80211_info *cfg,
3595 struct brcmf_if *ifp,
3596 struct cfg80211_wowlan *wowl)
3597{
3598 u32 wowl_config;
a7ed7828 3599 struct brcmf_wowl_wakeind_le wowl_wakeind;
b9a82f89 3600 u32 i;
4eb3af7c
HM		 3601
3602 brcmf_dbg(TRACE, "Suspend, wowl config.\n");
3603
73ef9e64
HM		 3604 if (!brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL_ARP_ND))
3605 brcmf_configure_arp_nd_offload(ifp, false);
3021ad9a 3606 brcmf_fil_cmd_int_get(ifp, BRCMF_C_GET_PM, &cfg->wowl.pre_pmmode);
4eb3af7c
HM		 3607 brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PM, PM_MAX);
3608
3609 wowl_config = 0;
3610 if (wowl->disconnect)
b9a82f89 3611 wowl_config = BRCMF_WOWL_DIS | BRCMF_WOWL_BCN | BRCMF_WOWL_RETR;
4eb3af7c 3612 if (wowl->magic_pkt)
b9a82f89
HM		 3613 wowl_config |= BRCMF_WOWL_MAGIC;
3614 if ((wowl->patterns) && (wowl->n_patterns)) {
3615 wowl_config |= BRCMF_WOWL_NET;
3616 for (i = 0; i < wowl->n_patterns; i++) {
3617 brcmf_config_wowl_pattern(ifp, "add",
3618 (u8 *)wowl->patterns[i].pattern,
3619 wowl->patterns[i].pattern_len,
3620 (u8 *)wowl->patterns[i].mask,
3621 wowl->patterns[i].pkt_offset);
3622 }
3623 }
3021ad9a
HM		 3624 if (wowl->nd_config) {
3625 brcmf_cfg80211_sched_scan_start(cfg->wiphy, ifp->ndev,
3626 wowl->nd_config);
3627 wowl_config |= BRCMF_WOWL_PFN_FOUND;
3628
3629 cfg->wowl.nd_data_completed = false;
3630 cfg->wowl.nd_enabled = true;
3631 /* Now reroute the event for PFN to the wowl function. */
3632 brcmf_fweh_unregister(cfg->pub, BRCMF_E_PFN_NET_FOUND);
3633 brcmf_fweh_register(cfg->pub, BRCMF_E_PFN_NET_FOUND,
3634 brcmf_wowl_nd_results);
3635 }
5c22fb85
HM		 3636 if (wowl->gtk_rekey_failure)
3637 wowl_config |= BRCMF_WOWL_GTK_FAILURE;
3021ad9a
HM		 3638 if (!test_bit(BRCMF_VIF_STATUS_CONNECTED, &ifp->vif->sme_state))
3639 wowl_config |= BRCMF_WOWL_UNASSOC;
3640
a7ed7828
HM		 3641 memcpy(&wowl_wakeind, "clear", 6);
3642 brcmf_fil_iovar_data_set(ifp, "wowl_wakeind", &wowl_wakeind,
3643 sizeof(wowl_wakeind));
4eb3af7c
HM		 3644 brcmf_fil_iovar_int_set(ifp, "wowl", wowl_config);
3645 brcmf_fil_iovar_int_set(ifp, "wowl_activate", 1);
3646 brcmf_bus_wowl_config(cfg->pub->bus_if, true);
3021ad9a 3647 cfg->wowl.active = true;
4eb3af7c
HM		 3648}
3649
5b435de0 3650static s32 brcmf_cfg80211_suspend(struct wiphy *wiphy,
4eb3af7c 3651 struct cfg80211_wowlan *wowl)
5b435de0 3652{
27a68fe3
AS		 3653 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
3654 struct net_device *ndev = cfg_to_ndev(cfg);
4eb3af7c 3655 struct brcmf_if *ifp = netdev_priv(ndev);
7d641072 3656 struct brcmf_cfg80211_vif *vif;
5b435de0 3657
d96b801f 3658 brcmf_dbg(TRACE, "Enter\n");
5b435de0 3659
4eb3af7c 3660 /* if the primary net_device is not READY there is nothing
7d641072 3661 * we can do but pray resume goes smoothly.
5b435de0 3662 */
4eb3af7c 3663 if (!check_vif_up(ifp->vif))
7d641072 3664 goto exit;
5b435de0 3665
3021ad9a
HM		 3666 /* Stop scheduled scan */
3667 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_PNO))
3a3ecf1d 3668 brcmf_cfg80211_sched_scan_stop(wiphy, ndev, 0);
3021ad9a 3669
7d641072
AS		 3670 /* end any scanning */
3671 if (test_bit(BRCMF_SCAN_STATUS_BUSY, &cfg->scan_status))
27a68fe3 3672 brcmf_abort_scanning(cfg);
5b435de0 3673
4eb3af7c
HM		 3674 if (wowl == NULL) {
3675 brcmf_bus_wowl_config(cfg->pub->bus_if, false);
3676 list_for_each_entry(vif, &cfg->vif_list, list) {
3677 if (!test_bit(BRCMF_VIF_STATUS_READY, &vif->sme_state))
3678 continue;
3679 /* While going to suspend if associated with AP
3680 * disassociate from AP to save power while system is
3681 * in suspended state
3682 */
9b7a0ddc 3683 brcmf_link_down(vif, WLAN_REASON_UNSPECIFIED);
4eb3af7c
HM		 3684 /* Make sure WPA_Supplicant receives all the event
3685 * generated due to DISASSOC call to the fw to keep
5419f7f1
HM		 3686 * the state fw and WPA_Supplicant state consistent
3687 */
3688 brcmf_delay(500);
e5806072 3689 }
5419f7f1
HM		 3690 /* Configure MPC */
3691 brcmf_set_mpc(ifp, 1);
e5806072 3692
e5806072 3693 } else {
5419f7f1
HM		 3694 /* Configure WOWL paramaters */
3695 brcmf_configure_wowl(cfg, ifp, wowl);
e5806072
AS		 3696 }
3697
5419f7f1
HM		 3698exit:
3699 brcmf_dbg(TRACE, "Exit\n");
3700 /* clear any scanning activity */
3701 cfg->scan_status = 0;
e5806072 3702 return 0;
e5806072
AS		 3703}
3704
5419f7f1
HM		 3705static __used s32
3706brcmf_update_pmklist(struct brcmf_cfg80211_info *cfg, struct brcmf_if *ifp)
e5806072 3707{
5419f7f1 3708 struct brcmf_pmk_list_le *pmk_list;
48ed16e8 3709 int i;
5419f7f1
HM		 3710 u32 npmk;
3711 s32 err;
e5806072 3712
5419f7f1
HM		 3713 pmk_list = &cfg->pmk_list;
3714 npmk = le32_to_cpu(pmk_list->npmk);
48ed16e8 3715
5419f7f1
HM		 3716 brcmf_dbg(CONN, "No of elements %d\n", npmk);
3717 for (i = 0; i < npmk; i++)
3718 brcmf_dbg(CONN, "PMK[%d]: %pM\n", i, &pmk_list->pmk[i].bssid);
48ed16e8 3719
5419f7f1
HM		 3720 err = brcmf_fil_iovar_data_set(ifp, "pmkid_info", pmk_list,
3721 sizeof(*pmk_list));
48ed16e8
HM		 3722
3723 return err;
e5806072
AS		 3724}
3725
5419f7f1
HM		 3726static s32
3727brcmf_cfg80211_set_pmksa(struct wiphy *wiphy, struct net_device *ndev,
3728 struct cfg80211_pmksa *pmksa)
e5806072 3729{
5419f7f1 3730 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
c1179033 3731 struct brcmf_if *ifp = netdev_priv(ndev);
5419f7f1
HM		 3732 struct brcmf_pmksa *pmk = &cfg->pmk_list.pmk[0];
3733 s32 err;
3734 u32 npmk, i;
e5806072 3735
5419f7f1
HM		 3736 brcmf_dbg(TRACE, "Enter\n");
3737 if (!check_vif_up(ifp->vif))
3738 return -EIO;
e5806072 3739
5419f7f1
HM		 3740 npmk = le32_to_cpu(cfg->pmk_list.npmk);
3741 for (i = 0; i < npmk; i++)
3742 if (!memcmp(pmksa->bssid, pmk[i].bssid, ETH_ALEN))
3743 break;
3744 if (i < BRCMF_MAXPMKID) {
3745 memcpy(pmk[i].bssid, pmksa->bssid, ETH_ALEN);
3746 memcpy(pmk[i].pmkid, pmksa->pmkid, WLAN_PMKID_LEN);
3747 if (i == npmk) {
3748 npmk++;
3749 cfg->pmk_list.npmk = cpu_to_le32(npmk);
3750 }
3751 } else {
3752 brcmf_err("Too many PMKSA entries cached %d\n", npmk);
e5806072
AS		 3753 return -EINVAL;
3754 }
3755
5419f7f1
HM		 3756 brcmf_dbg(CONN, "set_pmksa - PMK bssid: %pM =\n", pmk[npmk].bssid);
3757 for (i = 0; i < WLAN_PMKID_LEN; i += 4)
3758 brcmf_dbg(CONN, "%02x %02x %02x %02x\n", pmk[npmk].pmkid[i],
3759 pmk[npmk].pmkid[i + 1], pmk[npmk].pmkid[i + 2],
3760 pmk[npmk].pmkid[i + 3]);
e5806072 3761
5419f7f1 3762 err = brcmf_update_pmklist(cfg, ifp);
e5806072 3763
5419f7f1
HM		 3764 brcmf_dbg(TRACE, "Exit\n");
3765 return err;
3766}
e5806072 3767
5419f7f1
HM		 3768static s32
3769brcmf_cfg80211_del_pmksa(struct wiphy *wiphy, struct net_device *ndev,
3770 struct cfg80211_pmksa *pmksa)
3771{
3772 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
3773 struct brcmf_if *ifp = netdev_priv(ndev);
3774 struct brcmf_pmksa *pmk = &cfg->pmk_list.pmk[0];
3775 s32 err;
3776 u32 npmk, i;
e5806072 3777
5419f7f1
HM		 3778 brcmf_dbg(TRACE, "Enter\n");
3779 if (!check_vif_up(ifp->vif))
3780 return -EIO;
e5806072 3781
7703773e 3782 brcmf_dbg(CONN, "del_pmksa - PMK bssid = %pM\n", pmksa->bssid);
e5806072 3783
5419f7f1
HM		 3784 npmk = le32_to_cpu(cfg->pmk_list.npmk);
3785 for (i = 0; i < npmk; i++)
7703773e 3786 if (!memcmp(pmksa->bssid, pmk[i].bssid, ETH_ALEN))
5419f7f1
HM		 3787 break;
3788
3789 if ((npmk > 0) && (i < npmk)) {
3790 for (; i < (npmk - 1); i++) {
3791 memcpy(&pmk[i].bssid, &pmk[i + 1].bssid, ETH_ALEN);
3792 memcpy(&pmk[i].pmkid, &pmk[i + 1].pmkid,
3793 WLAN_PMKID_LEN);
e5806072 3794 }
5419f7f1
HM		 3795 memset(&pmk[i], 0, sizeof(*pmk));
3796 cfg->pmk_list.npmk = cpu_to_le32(npmk - 1);
e5806072 3797 } else {
5419f7f1 3798 brcmf_err("Cache entry not found\n");
e5806072
AS		 3799 return -EINVAL;
3800 }
3801
5419f7f1
HM		 3802 err = brcmf_update_pmklist(cfg, ifp);
3803
3804 brcmf_dbg(TRACE, "Exit\n");
3805 return err;
3806
e5806072
AS		 3807}
3808
5419f7f1
HM		 3809static s32
3810brcmf_cfg80211_flush_pmksa(struct wiphy *wiphy, struct net_device *ndev)
e5806072 3811{
27a68fe3 3812 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
5419f7f1
HM		 3813 struct brcmf_if *ifp = netdev_priv(ndev);
3814 s32 err;
3815
3816 brcmf_dbg(TRACE, "Enter\n");
3817 if (!check_vif_up(ifp->vif))
3818 return -EIO;
3819
3820 memset(&cfg->pmk_list, 0, sizeof(cfg->pmk_list));
3821 err = brcmf_update_pmklist(cfg, ifp);
3822
3823 brcmf_dbg(TRACE, "Exit\n");
3824 return err;
e5806072 3825
e5806072 3826}
e5806072 3827
1f170110 3828static s32 brcmf_configure_opensecurity(struct brcmf_if *ifp)
1a873342
HM		 3829{
3830 s32 err;
fdfb0f94 3831 s32 wpa_val;
1a873342
HM		 3832
3833 /* set auth */
ac24be6f 3834 err = brcmf_fil_bsscfg_int_set(ifp, "auth", 0);
1a873342 3835 if (err < 0) {
57d6e91a 3836 brcmf_err("auth error %d\n", err);
1a873342
HM		 3837 return err;
3838 }
3839 /* set wsec */
ac24be6f 3840 err = brcmf_fil_bsscfg_int_set(ifp, "wsec", 0);
1a873342 3841 if (err < 0) {
57d6e91a 3842 brcmf_err("wsec error %d\n", err);
1a873342
HM		 3843 return err;
3844 }
3845 /* set upper-layer auth */
fdfb0f94
WF		 3846 if (brcmf_is_ibssmode(ifp->vif))
3847 wpa_val = WPA_AUTH_NONE;
3848 else
3849 wpa_val = WPA_AUTH_DISABLED;
3850 err = brcmf_fil_bsscfg_int_set(ifp, "wpa_auth", wpa_val);
1a873342 3851 if (err < 0) {
57d6e91a 3852 brcmf_err("wpa_auth error %d\n", err);
1a873342
HM		 3853 return err;
3854 }
3855
3856 return 0;
3857}
3858
3859static bool brcmf_valid_wpa_oui(u8 *oui, bool is_rsn_ie)
3860{
3861 if (is_rsn_ie)
3862 return (memcmp(oui, RSN_OUI, TLV_OUI_LEN) == 0);
3863
3864 return (memcmp(oui, WPA_OUI, TLV_OUI_LEN) == 0);
3865}
3866
3867static s32
a44aa400 3868brcmf_configure_wpaie(struct brcmf_if *ifp,
4b5800fe
JB		 3869 const struct brcmf_vs_tlv *wpa_ie,
3870 bool is_rsn_ie)
1a873342
HM		 3871{
3872 u32 auth = 0; /* d11 open authentication */
3873 u16 count;
3874 s32 err = 0;
240d61a9 3875 s32 len;
1a873342
HM		 3876 u32 i;
3877 u32 wsec;
3878 u32 pval = 0;
3879 u32 gval = 0;
3880 u32 wpa_auth = 0;
3881 u32 offset;
3882 u8 *data;
3883 u16 rsn_cap;
3884 u32 wme_bss_disable;
240d61a9 3885 u32 mfp;
1a873342 3886
d96b801f 3887 brcmf_dbg(TRACE, "Enter\n");
1a873342
HM		 3888 if (wpa_ie == NULL)
3889 goto exit;
3890
3891 len = wpa_ie->len + TLV_HDR_LEN;
3892 data = (u8 *)wpa_ie;
619c5a9a 3893 offset = TLV_HDR_LEN;
1a873342
HM		 3894 if (!is_rsn_ie)
3895 offset += VS_IE_FIXED_HDR_LEN;
619c5a9a
HM		 3896 else
3897 offset += WPA_IE_VERSION_LEN;
1a873342
HM		 3898
3899 /* check for multicast cipher suite */
3900 if (offset + WPA_IE_MIN_OUI_LEN > len) {
3901 err = -EINVAL;
57d6e91a 3902 brcmf_err("no multicast cipher suite\n");
1a873342
HM		 3903 goto exit;
3904 }
3905
3906 if (!brcmf_valid_wpa_oui(&data[offset], is_rsn_ie)) {
3907 err = -EINVAL;
57d6e91a 3908 brcmf_err("ivalid OUI\n");
1a873342
HM		 3909 goto exit;
3910 }
3911 offset += TLV_OUI_LEN;
3912
3913 /* pick up multicast cipher */
3914 switch (data[offset]) {
3915 case WPA_CIPHER_NONE:
3916 gval = 0;
3917 break;
3918 case WPA_CIPHER_WEP_40:
3919 case WPA_CIPHER_WEP_104:
3920 gval = WEP_ENABLED;
3921 break;
3922 case WPA_CIPHER_TKIP:
3923 gval = TKIP_ENABLED;
3924 break;
3925 case WPA_CIPHER_AES_CCM:
3926 gval = AES_ENABLED;
3927 break;
3928 default:
3929 err = -EINVAL;
57d6e91a 3930 brcmf_err("Invalid multi cast cipher info\n");
1a873342
HM		 3931 goto exit;
3932 }
3933
3934 offset++;
3935 /* walk thru unicast cipher list and pick up what we recognize */
3936 count = data[offset] + (data[offset + 1] << 8);
3937 offset += WPA_IE_SUITE_COUNT_LEN;
3938 /* Check for unicast suite(s) */
3939 if (offset + (WPA_IE_MIN_OUI_LEN * count) > len) {
3940 err = -EINVAL;
57d6e91a 3941 brcmf_err("no unicast cipher suite\n");
1a873342
HM		 3942 goto exit;
3943 }
3944 for (i = 0; i < count; i++) {
3945 if (!brcmf_valid_wpa_oui(&data[offset], is_rsn_ie)) {
3946 err = -EINVAL;
57d6e91a 3947 brcmf_err("ivalid OUI\n");
1a873342
HM		 3948 goto exit;
3949 }
3950 offset += TLV_OUI_LEN;
3951 switch (data[offset]) {
3952 case WPA_CIPHER_NONE:
3953 break;
3954 case WPA_CIPHER_WEP_40:
3955 case WPA_CIPHER_WEP_104:
3956 pval |= WEP_ENABLED;
3957 break;
3958 case WPA_CIPHER_TKIP:
3959 pval |= TKIP_ENABLED;
3960 break;
3961 case WPA_CIPHER_AES_CCM:
3962 pval |= AES_ENABLED;
3963 break;
3964 default:
ad334bbb 3965 brcmf_err("Invalid unicast security info\n");
1a873342
HM		 3966 }
3967 offset++;
3968 }
3969 /* walk thru auth management suite list and pick up what we recognize */
3970 count = data[offset] + (data[offset + 1] << 8);
3971 offset += WPA_IE_SUITE_COUNT_LEN;
3972 /* Check for auth key management suite(s) */
3973 if (offset + (WPA_IE_MIN_OUI_LEN * count) > len) {
3974 err = -EINVAL;
57d6e91a 3975 brcmf_err("no auth key mgmt suite\n");
1a873342
HM		 3976 goto exit;
3977 }
3978 for (i = 0; i < count; i++) {
3979 if (!brcmf_valid_wpa_oui(&data[offset], is_rsn_ie)) {
3980 err = -EINVAL;
57d6e91a 3981 brcmf_err("ivalid OUI\n");
1a873342
HM		 3982 goto exit;
3983 }
3984 offset += TLV_OUI_LEN;
3985 switch (data[offset]) {
3986 case RSN_AKM_NONE:
d96b801f 3987 brcmf_dbg(TRACE, "RSN_AKM_NONE\n");
1a873342
HM		 3988 wpa_auth |= WPA_AUTH_NONE;
3989 break;
3990 case RSN_AKM_UNSPECIFIED:
d96b801f 3991 brcmf_dbg(TRACE, "RSN_AKM_UNSPECIFIED\n");
1a873342
HM		 3992 is_rsn_ie ? (wpa_auth |= WPA2_AUTH_UNSPECIFIED) :
3993 (wpa_auth |= WPA_AUTH_UNSPECIFIED);
3994 break;
3995 case RSN_AKM_PSK:
d96b801f 3996 brcmf_dbg(TRACE, "RSN_AKM_PSK\n");
1a873342
HM		 3997 is_rsn_ie ? (wpa_auth |= WPA2_AUTH_PSK) :
3998 (wpa_auth |= WPA_AUTH_PSK);
3999 break;
240d61a9
HM		 4000 case RSN_AKM_SHA256_PSK:
4001 brcmf_dbg(TRACE, "RSN_AKM_MFP_PSK\n");
4002 wpa_auth |= WPA2_AUTH_PSK_SHA256;
4003 break;
4004 case RSN_AKM_SHA256_1X:
4005 brcmf_dbg(TRACE, "RSN_AKM_MFP_1X\n");
4006 wpa_auth |= WPA2_AUTH_1X_SHA256;
4007 break;
1a873342 4008 default:
ad334bbb 4009 brcmf_err("Invalid key mgmt info\n");
1a873342
HM		 4010 }
4011 offset++;
4012 }
4013
240d61a9 4014 mfp = BRCMF_MFP_NONE;
1a873342
HM		 4015 if (is_rsn_ie) {
4016 wme_bss_disable = 1;
4017 if ((offset + RSN_CAP_LEN) <= len) {
4018 rsn_cap = data[offset] + (data[offset + 1] << 8);
4019 if (rsn_cap & RSN_CAP_PTK_REPLAY_CNTR_MASK)
4020 wme_bss_disable = 0;
240d61a9
HM		 4021 if (rsn_cap & RSN_CAP_MFPR_MASK) {
4022 brcmf_dbg(TRACE, "MFP Required\n");
4023 mfp = BRCMF_MFP_REQUIRED;
4024 /* Firmware only supports mfp required in
4025 * combination with WPA2_AUTH_PSK_SHA256 or
4026 * WPA2_AUTH_1X_SHA256.
4027 */
4028 if (!(wpa_auth & (WPA2_AUTH_PSK_SHA256 |
4029 WPA2_AUTH_1X_SHA256))) {
4030 err = -EINVAL;
4031 goto exit;
4032 }
4033 /* Firmware has requirement that WPA2_AUTH_PSK/
4034 * WPA2_AUTH_UNSPECIFIED be set, if SHA256 OUI
4035 * is to be included in the rsn ie.
4036 */
4037 if (wpa_auth & WPA2_AUTH_PSK_SHA256)
4038 wpa_auth |= WPA2_AUTH_PSK;
4039 else if (wpa_auth & WPA2_AUTH_1X_SHA256)
4040 wpa_auth |= WPA2_AUTH_UNSPECIFIED;
4041 } else if (rsn_cap & RSN_CAP_MFPC_MASK) {
4042 brcmf_dbg(TRACE, "MFP Capable\n");
4043 mfp = BRCMF_MFP_CAPABLE;
4044 }
1a873342 4045 }
240d61a9 4046 offset += RSN_CAP_LEN;
1a873342 4047 /* set wme_bss_disable to sync RSN Capabilities */
ac24be6f 4048 err = brcmf_fil_bsscfg_int_set(ifp, "wme_bss_disable",
81f5dcb8 4049 wme_bss_disable);
1a873342 4050 if (err < 0) {
57d6e91a 4051 brcmf_err("wme_bss_disable error %d\n", err);
1a873342
HM		 4052 goto exit;
4053 }
240d61a9
HM		 4054
4055 /* Skip PMKID cnt as it is know to be 0 for AP. */
4056 offset += RSN_PMKID_COUNT_LEN;
4057
4058 /* See if there is BIP wpa suite left for MFP */
4059 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MFP) &&
4060 ((offset + WPA_IE_MIN_OUI_LEN) <= len)) {
4061 err = brcmf_fil_bsscfg_data_set(ifp, "bip",
4062 &data[offset],
4063 WPA_IE_MIN_OUI_LEN);
4064 if (err < 0) {
4065 brcmf_err("bip error %d\n", err);
4066 goto exit;
4067 }
4068 }
1a873342
HM		 4069 }
4070 /* FOR WPS , set SES_OW_ENABLED */
4071 wsec = (pval | gval | SES_OW_ENABLED);
4072
4073 /* set auth */
ac24be6f 4074 err = brcmf_fil_bsscfg_int_set(ifp, "auth", auth);
1a873342 4075 if (err < 0) {
57d6e91a 4076 brcmf_err("auth error %d\n", err);
1a873342
HM		 4077 goto exit;
4078 }
4079 /* set wsec */
ac24be6f 4080 err = brcmf_fil_bsscfg_int_set(ifp, "wsec", wsec);
1a873342 4081 if (err < 0) {
57d6e91a 4082 brcmf_err("wsec error %d\n", err);
1a873342
HM		 4083 goto exit;
4084 }
240d61a9
HM		 4085 /* Configure MFP, this needs to go after wsec otherwise the wsec command
4086 * will overwrite the values set by MFP
4087 */
4088 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MFP)) {
4089 err = brcmf_fil_bsscfg_int_set(ifp, "mfp", mfp);
4090 if (err < 0) {
4091 brcmf_err("mfp error %d\n", err);
4092 goto exit;
4093 }
4094 }
1a873342 4095 /* set upper-layer auth */
ac24be6f 4096 err = brcmf_fil_bsscfg_int_set(ifp, "wpa_auth", wpa_auth);
1a873342 4097 if (err < 0) {
57d6e91a 4098 brcmf_err("wpa_auth error %d\n", err);
1a873342
HM		 4099 goto exit;
4100 }
4101
4102exit:
4103 return err;
4104}
4105
4106static s32
3082b9be 4107brcmf_parse_vndr_ies(const u8 *vndr_ie_buf, u32 vndr_ie_len,
1a873342
HM		 4108 struct parsed_vndr_ies *vndr_ies)
4109{
1a873342
HM		 4110 struct brcmf_vs_tlv *vndrie;
4111 struct brcmf_tlv *ie;
4112 struct parsed_vndr_ie_info *parsed_info;
4113 s32 remaining_len;
4114
4115 remaining_len = (s32)vndr_ie_len;
4116 memset(vndr_ies, 0, sizeof(*vndr_ies));
4117
4118 ie = (struct brcmf_tlv *)vndr_ie_buf;
4119 while (ie) {
4120 if (ie->id != WLAN_EID_VENDOR_SPECIFIC)
4121 goto next;
4122 vndrie = (struct brcmf_vs_tlv *)ie;
4123 /* len should be bigger than OUI length + one */
4124 if (vndrie->len < (VS_IE_FIXED_HDR_LEN - TLV_HDR_LEN + 1)) {
57d6e91a
AS		 4125 brcmf_err("invalid vndr ie. length is too small %d\n",
4126 vndrie->len);
1a873342
HM		 4127 goto next;
4128 }
4129 /* if wpa or wme ie, do not add ie */
4130 if (!memcmp(vndrie->oui, (u8 *)WPA_OUI, TLV_OUI_LEN) &&
4131 ((vndrie->oui_type == WPA_OUI_TYPE) ||
4132 (vndrie->oui_type == WME_OUI_TYPE))) {
d96b801f 4133 brcmf_dbg(TRACE, "Found WPA/WME oui. Do not add it\n");
1a873342
HM		 4134 goto next;
4135 }
4136
4137 parsed_info = &vndr_ies->ie_info[vndr_ies->count];
4138
4139 /* save vndr ie information */
4140 parsed_info->ie_ptr = (char *)vndrie;
4141 parsed_info->ie_len = vndrie->len + TLV_HDR_LEN;
4142 memcpy(&parsed_info->vndrie, vndrie, sizeof(*vndrie));
4143
4144 vndr_ies->count++;
4145
d96b801f
AS		 4146 brcmf_dbg(TRACE, "** OUI %02x %02x %02x, type 0x%02x\n",
4147 parsed_info->vndrie.oui[0],
4148 parsed_info->vndrie.oui[1],
4149 parsed_info->vndrie.oui[2],
4150 parsed_info->vndrie.oui_type);
1a873342 4151
9f440b7b 4152 if (vndr_ies->count >= VNDR_IE_PARSE_LIMIT)
1a873342
HM		 4153 break;
4154next:
b41fc3d7
HM		 4155 remaining_len -= (ie->len + TLV_HDR_LEN);
4156 if (remaining_len <= TLV_HDR_LEN)
1a873342
HM		 4157 ie = NULL;
4158 else
b41fc3d7
HM		 4159 ie = (struct brcmf_tlv *)(((u8 *)ie) + ie->len +
4160 TLV_HDR_LEN);
1a873342 4161 }
12f32370 4162 return 0;
1a873342
HM		 4163}
4164
4165static u32
4166brcmf_vndr_ie(u8 *iebuf, s32 pktflag, u8 *ie_ptr, u32 ie_len, s8 *add_del_cmd)
4167{
4168
1a873342
HM		 4169 strncpy(iebuf, add_del_cmd, VNDR_IE_CMD_LEN - 1);
4170 iebuf[VNDR_IE_CMD_LEN - 1] = '\0';
4171
362126cd 4172 put_unaligned_le32(1, &iebuf[VNDR_IE_COUNT_OFFSET]);
1a873342 4173
362126cd 4174 put_unaligned_le32(pktflag, &iebuf[VNDR_IE_PKTFLAG_OFFSET]);
1a873342
HM		 4175
4176 memcpy(&iebuf[VNDR_IE_VSIE_OFFSET], ie_ptr, ie_len);
4177
4178 return ie_len + VNDR_IE_HDR_SIZE;
4179}
4180
1332e26e
AS		 4181s32 brcmf_vif_set_mgmt_ie(struct brcmf_cfg80211_vif *vif, s32 pktflag,
4182 const u8 *vndr_ie_buf, u32 vndr_ie_len)
1a873342 4183{
1332e26e
AS		 4184 struct brcmf_if *ifp;
4185 struct vif_saved_ie *saved_ie;
1a873342
HM		 4186 s32 err = 0;
4187 u8 *iovar_ie_buf;
4188 u8 *curr_ie_buf;
4189 u8 *mgmt_ie_buf = NULL;
3e4f319d 4190 int mgmt_ie_buf_len;
81118d16 4191 u32 *mgmt_ie_len;
1a873342
HM		 4192 u32 del_add_ie_buf_len = 0;
4193 u32 total_ie_buf_len = 0;
4194 u32 parsed_ie_buf_len = 0;
4195 struct parsed_vndr_ies old_vndr_ies;
4196 struct parsed_vndr_ies new_vndr_ies;
4197 struct parsed_vndr_ie_info *vndrie_info;
4198 s32 i;
4199 u8 *ptr;
3e4f319d 4200 int remained_buf_len;
1a873342 4201
1332e26e
AS		 4202 if (!vif)
4203 return -ENODEV;
4204 ifp = vif->ifp;
4205 saved_ie = &vif->saved_ie;
4206
37a869ec
HM		 4207 brcmf_dbg(TRACE, "bsscfgidx %d, pktflag : 0x%02X\n", ifp->bsscfgidx,
4208 pktflag);
1a873342
HM		 4209 iovar_ie_buf = kzalloc(WL_EXTRA_BUF_MAX, GFP_KERNEL);
4210 if (!iovar_ie_buf)
4211 return -ENOMEM;
4212 curr_ie_buf = iovar_ie_buf;
89286dc9
HM		 4213 switch (pktflag) {
4214 case BRCMF_VNDR_IE_PRBREQ_FLAG:
4215 mgmt_ie_buf = saved_ie->probe_req_ie;
4216 mgmt_ie_len = &saved_ie->probe_req_ie_len;
4217 mgmt_ie_buf_len = sizeof(saved_ie->probe_req_ie);
4218 break;
4219 case BRCMF_VNDR_IE_PRBRSP_FLAG:
4220 mgmt_ie_buf = saved_ie->probe_res_ie;
4221 mgmt_ie_len = &saved_ie->probe_res_ie_len;
4222 mgmt_ie_buf_len = sizeof(saved_ie->probe_res_ie);
4223 break;
4224 case BRCMF_VNDR_IE_BEACON_FLAG:
4225 mgmt_ie_buf = saved_ie->beacon_ie;
4226 mgmt_ie_len = &saved_ie->beacon_ie_len;
4227 mgmt_ie_buf_len = sizeof(saved_ie->beacon_ie);
4228 break;
4229 case BRCMF_VNDR_IE_ASSOCREQ_FLAG:
4230 mgmt_ie_buf = saved_ie->assoc_req_ie;
4231 mgmt_ie_len = &saved_ie->assoc_req_ie_len;
4232 mgmt_ie_buf_len = sizeof(saved_ie->assoc_req_ie);
4233 break;
4234 default:
4235 err = -EPERM;
4236 brcmf_err("not suitable type\n");
4237 goto exit;
1a873342
HM		 4238 }
4239
4240 if (vndr_ie_len > mgmt_ie_buf_len) {
4241 err = -ENOMEM;
57d6e91a 4242 brcmf_err("extra IE size too big\n");
1a873342
HM		 4243 goto exit;
4244 }
4245
4246 /* parse and save new vndr_ie in curr_ie_buff before comparing it */
4247 if (vndr_ie_buf && vndr_ie_len && curr_ie_buf) {
4248 ptr = curr_ie_buf;
4249 brcmf_parse_vndr_ies(vndr_ie_buf, vndr_ie_len, &new_vndr_ies);
4250 for (i = 0; i < new_vndr_ies.count; i++) {
4251 vndrie_info = &new_vndr_ies.ie_info[i];
4252 memcpy(ptr + parsed_ie_buf_len, vndrie_info->ie_ptr,
4253 vndrie_info->ie_len);
4254 parsed_ie_buf_len += vndrie_info->ie_len;
4255 }
4256 }
4257
b41fc3d7 4258 if (mgmt_ie_buf && *mgmt_ie_len) {
1a873342
HM		 4259 if (parsed_ie_buf_len && (parsed_ie_buf_len == *mgmt_ie_len) &&
4260 (memcmp(mgmt_ie_buf, curr_ie_buf,
4261 parsed_ie_buf_len) == 0)) {
d96b801f 4262 brcmf_dbg(TRACE, "Previous mgmt IE equals to current IE\n");
1a873342
HM		 4263 goto exit;
4264 }
4265
4266 /* parse old vndr_ie */
4267 brcmf_parse_vndr_ies(mgmt_ie_buf, *mgmt_ie_len, &old_vndr_ies);
4268
4269 /* make a command to delete old ie */
4270 for (i = 0; i < old_vndr_ies.count; i++) {
4271 vndrie_info = &old_vndr_ies.ie_info[i];
4272
d96b801f
AS		 4273 brcmf_dbg(TRACE, "DEL ID : %d, Len: %d , OUI:%02x:%02x:%02x\n",
4274 vndrie_info->vndrie.id,
4275 vndrie_info->vndrie.len,
4276 vndrie_info->vndrie.oui[0],
4277 vndrie_info->vndrie.oui[1],
4278 vndrie_info->vndrie.oui[2]);
1a873342
HM		 4279
4280 del_add_ie_buf_len = brcmf_vndr_ie(curr_ie_buf, pktflag,
4281 vndrie_info->ie_ptr,
4282 vndrie_info->ie_len,
4283 "del");
4284 curr_ie_buf += del_add_ie_buf_len;
4285 total_ie_buf_len += del_add_ie_buf_len;
4286 }
4287 }
4288
4289 *mgmt_ie_len = 0;
4290 /* Add if there is any extra IE */
4291 if (mgmt_ie_buf && parsed_ie_buf_len) {
4292 ptr = mgmt_ie_buf;
4293
4294 remained_buf_len = mgmt_ie_buf_len;
4295
4296 /* make a command to add new ie */
4297 for (i = 0; i < new_vndr_ies.count; i++) {
4298 vndrie_info = &new_vndr_ies.ie_info[i];
4299
b41fc3d7
HM		 4300 /* verify remained buf size before copy data */
4301 if (remained_buf_len < (vndrie_info->vndrie.len +
4302 VNDR_IE_VSIE_OFFSET)) {
57d6e91a
AS		 4303 brcmf_err("no space in mgmt_ie_buf: len left %d",
4304 remained_buf_len);
b41fc3d7
HM		 4305 break;
4306 }
4307 remained_buf_len -= (vndrie_info->ie_len +
4308 VNDR_IE_VSIE_OFFSET);
4309
d96b801f
AS		 4310 brcmf_dbg(TRACE, "ADDED ID : %d, Len: %d, OUI:%02x:%02x:%02x\n",
4311 vndrie_info->vndrie.id,
4312 vndrie_info->vndrie.len,
4313 vndrie_info->vndrie.oui[0],
4314 vndrie_info->vndrie.oui[1],
4315 vndrie_info->vndrie.oui[2]);
1a873342
HM		 4316
4317 del_add_ie_buf_len = brcmf_vndr_ie(curr_ie_buf, pktflag,
4318 vndrie_info->ie_ptr,
4319 vndrie_info->ie_len,
4320 "add");
1a873342
HM		 4321
4322 /* save the parsed IE in wl struct */
4323 memcpy(ptr + (*mgmt_ie_len), vndrie_info->ie_ptr,
4324 vndrie_info->ie_len);
4325 *mgmt_ie_len += vndrie_info->ie_len;
4326
4327 curr_ie_buf += del_add_ie_buf_len;
4328 total_ie_buf_len += del_add_ie_buf_len;
4329 }
4330 }
4331 if (total_ie_buf_len) {
c1179033 4332 err = brcmf_fil_bsscfg_data_set(ifp, "vndr_ie", iovar_ie_buf,
81f5dcb8 4333 total_ie_buf_len);
1a873342 4334 if (err)
57d6e91a 4335 brcmf_err("vndr ie set error : %d\n", err);
1a873342
HM		 4336 }
4337
4338exit:
4339 kfree(iovar_ie_buf);
4340 return err;
4341}
4342
5f4f9f11
AS		 4343s32 brcmf_vif_clear_mgmt_ies(struct brcmf_cfg80211_vif *vif)
4344{
4345 s32 pktflags[] = {
4346 BRCMF_VNDR_IE_PRBREQ_FLAG,
4347 BRCMF_VNDR_IE_PRBRSP_FLAG,
4348 BRCMF_VNDR_IE_BEACON_FLAG
4349 };
4350 int i;
4351
4352 for (i = 0; i < ARRAY_SIZE(pktflags); i++)
4353 brcmf_vif_set_mgmt_ie(vif, pktflags[i], NULL, 0);
4354
4355 memset(&vif->saved_ie, 0, sizeof(vif->saved_ie));
4356 return 0;
4357}
4358
a0f07959
HM		 4359static s32
4360brcmf_config_ap_mgmt_ie(struct brcmf_cfg80211_vif *vif,
4361 struct cfg80211_beacon_data *beacon)
4362{
4363 s32 err;
4364
4365 /* Set Beacon IEs to FW */
4366 err = brcmf_vif_set_mgmt_ie(vif, BRCMF_VNDR_IE_BEACON_FLAG,
4367 beacon->tail, beacon->tail_len);
4368 if (err) {
4369 brcmf_err("Set Beacon IE Failed\n");
4370 return err;
4371 }
4372 brcmf_dbg(TRACE, "Applied Vndr IEs for Beacon\n");
4373
4374 /* Set Probe Response IEs to FW */
4375 err = brcmf_vif_set_mgmt_ie(vif, BRCMF_VNDR_IE_PRBRSP_FLAG,
4376 beacon->proberesp_ies,
4377 beacon->proberesp_ies_len);
4378 if (err)
4379 brcmf_err("Set Probe Resp IE Failed\n");
4380 else
4381 brcmf_dbg(TRACE, "Applied Vndr IEs for Probe Resp\n");
4382
4383 return err;
4384}
4385
1a873342
HM		 4386static s32
4387brcmf_cfg80211_start_ap(struct wiphy *wiphy, struct net_device *ndev,
4388 struct cfg80211_ap_settings *settings)
4389{
4390 s32 ie_offset;
1c9d30cf 4391 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
ac24be6f 4392 struct brcmf_if *ifp = netdev_priv(ndev);
4b5800fe 4393 const struct brcmf_tlv *ssid_ie;
98027769 4394 const struct brcmf_tlv *country_ie;
1a873342 4395 struct brcmf_ssid_le ssid_le;
1a873342 4396 s32 err = -EPERM;
4b5800fe
JB		 4397 const struct brcmf_tlv *rsn_ie;
4398 const struct brcmf_vs_tlv *wpa_ie;
1a873342 4399 struct brcmf_join_params join_params;
a0f07959
HM		 4400 enum nl80211_iftype dev_role;
4401 struct brcmf_fil_bss_enable_le bss_enable;
8707e08d 4402 u16 chanspec = chandef_to_chanspec(&cfg->d11inf, &settings->chandef);
a44aa400 4403 bool mbss;
98027769 4404 int is_11d;
b3589dfe 4405 bool supports_11d;
1a873342 4406
06c01585
AS		 4407 brcmf_dbg(TRACE, "ctrlchn=%d, center=%d, bw=%d, beacon_interval=%d, dtim_period=%d,\n",
4408 settings->chandef.chan->hw_value,
4409 settings->chandef.center_freq1, settings->chandef.width,
a9a56878 4410 settings->beacon_interval, settings->dtim_period);
d96b801f
AS		 4411 brcmf_dbg(TRACE, "ssid=%s(%zu), auth_type=%d, inactivity_timeout=%d\n",
4412 settings->ssid, settings->ssid_len, settings->auth_type,
4413 settings->inactivity_timeout);
426d0a56 4414 dev_role = ifp->vif->wdev.iftype;
a44aa400 4415 mbss = ifp->vif->mbss;
1a873342 4416
98027769 4417 /* store current 11d setting */
b3589dfe
HM		 4418 if (brcmf_fil_cmd_int_get(ifp, BRCMF_C_GET_REGULATORY,
4419 &ifp->vif->is_11d)) {
d3532ea6 4420 is_11d = supports_11d = false;
b3589dfe
HM		 4421 } else {
4422 country_ie = brcmf_parse_tlvs((u8 *)settings->beacon.tail,
4423 settings->beacon.tail_len,
4424 WLAN_EID_COUNTRY);
4425 is_11d = country_ie ? 1 : 0;
4426 supports_11d = true;
4427 }
98027769 4428
1a873342
HM		 4429 memset(&ssid_le, 0, sizeof(ssid_le));
4430 if (settings->ssid == NULL || settings->ssid_len == 0) {
4431 ie_offset = DOT11_MGMT_HDR_LEN + DOT11_BCN_PRB_FIXED_LEN;
4432 ssid_ie = brcmf_parse_tlvs(
4433 (u8 *)&settings->beacon.head[ie_offset],
4434 settings->beacon.head_len - ie_offset,
4435 WLAN_EID_SSID);
ded89912 4436 if (!ssid_ie || ssid_ie->len > IEEE80211_MAX_SSID_LEN)
1a873342
HM		 4437 return -EINVAL;
4438
4439 memcpy(ssid_le.SSID, ssid_ie->data, ssid_ie->len);
4440 ssid_le.SSID_len = cpu_to_le32(ssid_ie->len);
d96b801f 4441 brcmf_dbg(TRACE, "SSID is (%s) in Head\n", ssid_le.SSID);
1a873342
HM		 4442 } else {
4443 memcpy(ssid_le.SSID, settings->ssid, settings->ssid_len);
4444 ssid_le.SSID_len = cpu_to_le32((u32)settings->ssid_len);
4445 }
4446
a44aa400
HM		 4447 if (!mbss) {
4448 brcmf_set_mpc(ifp, 0);
52f22fb2 4449 brcmf_configure_arp_nd_offload(ifp, false);
a44aa400 4450 }
1a873342
HM		 4451
4452 /* find the RSN_IE */
4453 rsn_ie = brcmf_parse_tlvs((u8 *)settings->beacon.tail,
4454 settings->beacon.tail_len, WLAN_EID_RSN);
4455
4456 /* find the WPA_IE */
4457 wpa_ie = brcmf_find_wpaie((u8 *)settings->beacon.tail,
4458 settings->beacon.tail_len);
4459
1a873342 4460 if ((wpa_ie != NULL || rsn_ie != NULL)) {
d96b801f 4461 brcmf_dbg(TRACE, "WPA(2) IE is found\n");
1a873342
HM		 4462 if (wpa_ie != NULL) {
4463 /* WPA IE */
a44aa400 4464 err = brcmf_configure_wpaie(ifp, wpa_ie, false);
1a873342
HM		 4465 if (err < 0)
4466 goto exit;
1a873342 4467 } else {
a44aa400
HM		 4468 struct brcmf_vs_tlv *tmp_ie;
4469
4470 tmp_ie = (struct brcmf_vs_tlv *)rsn_ie;
4471
1a873342 4472 /* RSN IE */
a44aa400 4473 err = brcmf_configure_wpaie(ifp, tmp_ie, true);
1a873342
HM		 4474 if (err < 0)
4475 goto exit;
1a873342 4476 }
1a873342 4477 } else {
d96b801f 4478 brcmf_dbg(TRACE, "No WPA(2) IEs found\n");
1f170110 4479 brcmf_configure_opensecurity(ifp);
1a873342 4480 }
1a873342 4481
8707e08d 4482 /* Parameters shared by all radio interfaces */
a44aa400 4483 if (!mbss) {
b3589dfe 4484 if ((supports_11d) && (is_11d != ifp->vif->is_11d)) {
98027769
AS		 4485 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_REGULATORY,
4486 is_11d);
4487 if (err < 0) {
4488 brcmf_err("Regulatory Set Error, %d\n", err);
4489 goto exit;
4490 }
4491 }
a44aa400
HM		 4492 if (settings->beacon_interval) {
4493 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_BCNPRD,
4494 settings->beacon_interval);
4495 if (err < 0) {
4496 brcmf_err("Beacon Interval Set Error, %d\n",
4497 err);
4498 goto exit;
4499 }
4500 }
4501 if (settings->dtim_period) {
4502 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_DTIMPRD,
4503 settings->dtim_period);
4504 if (err < 0) {
4505 brcmf_err("DTIM Interval Set Error, %d\n", err);
4506 goto exit;
4507 }
1a873342 4508 }
a0f07959 4509
8abffd81
HM		 4510 if ((dev_role == NL80211_IFTYPE_AP) &&
4511 ((ifp->ifidx == 0) ||
4512 !brcmf_feat_is_enabled(ifp, BRCMF_FEAT_RSDB))) {
a44aa400
HM		 4513 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_DOWN, 1);
4514 if (err < 0) {
4515 brcmf_err("BRCMF_C_DOWN error %d\n", err);
4516 goto exit;
4517 }
4518 brcmf_fil_iovar_int_set(ifp, "apsta", 0);
4519 }
4520
4521 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_INFRA, 1);
a0f07959 4522 if (err < 0) {
a44aa400 4523 brcmf_err("SET INFRA error %d\n", err);
a0f07959
HM		 4524 goto exit;
4525 }
b3589dfe 4526 } else if (WARN_ON(supports_11d && (is_11d != ifp->vif->is_11d))) {
98027769
AS		 4527 /* Multiple-BSS should use same 11d configuration */
4528 err = -EINVAL;
4529 goto exit;
1a873342 4530 }
8707e08d
RM		 4531
4532 /* Interface specific setup */
a0f07959 4533 if (dev_role == NL80211_IFTYPE_AP) {
a44aa400
HM		 4534 if ((brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MBSS)) && (!mbss))
4535 brcmf_fil_iovar_int_set(ifp, "mbss", 1);
4536
a0f07959
HM		 4537 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_AP, 1);
4538 if (err < 0) {
4539 brcmf_err("setting AP mode failed %d\n", err);
4540 goto exit;
4541 }
8707e08d
RM		 4542 if (!mbss) {
4543 /* Firmware 10.x requires setting channel after enabling
4544 * AP and before bringing interface up.
4545 */
4546 err = brcmf_fil_iovar_int_set(ifp, "chanspec", chanspec);
4547 if (err < 0) {
4548 brcmf_err("Set Channel failed: chspec=%d, %d\n",
4549 chanspec, err);
4550 goto exit;
4551 }
4552 }
a0f07959
HM		 4553 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_UP, 1);
4554 if (err < 0) {
4555 brcmf_err("BRCMF_C_UP error (%d)\n", err);
4556 goto exit;
4557 }
118eb304
HM		 4558 /* On DOWN the firmware removes the WEP keys, reconfigure
4559 * them if they were set.
4560 */
4561 brcmf_cfg80211_reconfigure_wep(ifp);
a0f07959
HM		 4562
4563 memset(&join_params, 0, sizeof(join_params));
4564 /* join parameters starts with ssid */
4565 memcpy(&join_params.ssid_le, &ssid_le, sizeof(ssid_le));
4566 /* create softap */
4567 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SSID,
4568 &join_params, sizeof(join_params));
4569 if (err < 0) {
4570 brcmf_err("SET SSID error (%d)\n", err);
4571 goto exit;
4572 }
c940de10
RM		 4573
4574 if (settings->hidden_ssid) {
4575 err = brcmf_fil_iovar_int_set(ifp, "closednet", 1);
4576 if (err) {
4577 brcmf_err("closednet error (%d)\n", err);
4578 goto exit;
4579 }
4580 }
4581
a0f07959 4582 brcmf_dbg(TRACE, "AP mode configuration complete\n");
8707e08d
RM		 4583 } else if (dev_role == NL80211_IFTYPE_P2P_GO) {
4584 err = brcmf_fil_iovar_int_set(ifp, "chanspec", chanspec);
4585 if (err < 0) {
4586 brcmf_err("Set Channel failed: chspec=%d, %d\n",
4587 chanspec, err);
4588 goto exit;
4589 }
a0f07959
HM		 4590 err = brcmf_fil_bsscfg_data_set(ifp, "ssid", &ssid_le,
4591 sizeof(ssid_le));
4592 if (err < 0) {
4593 brcmf_err("setting ssid failed %d\n", err);
4594 goto exit;
4595 }
37a869ec 4596 bss_enable.bsscfgidx = cpu_to_le32(ifp->bsscfgidx);
a0f07959
HM		 4597 bss_enable.enable = cpu_to_le32(1);
4598 err = brcmf_fil_iovar_data_set(ifp, "bss", &bss_enable,
4599 sizeof(bss_enable));
4600 if (err < 0) {
4601 brcmf_err("bss_enable config failed %d\n", err);
4602 goto exit;
4603 }
4604
4605 brcmf_dbg(TRACE, "GO mode configuration complete\n");
8707e08d
RM		 4606 } else {
4607 WARN_ON(1);
a0f07959 4608 }
8707e08d 4609
f25ba69c 4610 brcmf_config_ap_mgmt_ie(ifp->vif, &settings->beacon);
c1179033 4611 set_bit(BRCMF_VIF_STATUS_AP_CREATED, &ifp->vif->sme_state);
92121e69 4612 brcmf_net_setcarrier(ifp, true);
1a873342
HM		 4613
4614exit:
a44aa400 4615 if ((err) && (!mbss)) {
f96aa07e 4616 brcmf_set_mpc(ifp, 1);
52f22fb2 4617 brcmf_configure_arp_nd_offload(ifp, true);
b3657453 4618 }
1a873342
HM		 4619 return err;
4620}
4621
4622static int brcmf_cfg80211_stop_ap(struct wiphy *wiphy, struct net_device *ndev)
4623{
c1179033 4624 struct brcmf_if *ifp = netdev_priv(ndev);
5c33a942 4625 s32 err;
426d0a56 4626 struct brcmf_fil_bss_enable_le bss_enable;
5c33a942 4627 struct brcmf_join_params join_params;
1a873342 4628
d96b801f 4629 brcmf_dbg(TRACE, "Enter\n");
1a873342 4630
426d0a56 4631 if (ifp->vif->wdev.iftype == NL80211_IFTYPE_AP) {
1a873342
HM		 4632 /* Due to most likely deauths outstanding we sleep */
4633 /* first to make sure they get processed by fw. */
4634 msleep(400);
5c33a942 4635
a44aa400
HM		 4636 if (ifp->vif->mbss) {
4637 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_DOWN, 1);
4638 return err;
4639 }
4640
c940de10
RM		 4641 /* First BSS doesn't get a full reset */
4642 if (ifp->bsscfgidx == 0)
4643 brcmf_fil_iovar_int_set(ifp, "closednet", 0);
4644
5c33a942
HM		 4645 memset(&join_params, 0, sizeof(join_params));
4646 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SSID,
4647 &join_params, sizeof(join_params));
4648 if (err < 0)
4649 brcmf_err("SET SSID error (%d)\n", err);
a44aa400 4650 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_DOWN, 1);
5c33a942 4651 if (err < 0)
a44aa400 4652 brcmf_err("BRCMF_C_DOWN error %d\n", err);
5c33a942
HM		 4653 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_AP, 0);
4654 if (err < 0)
4655 brcmf_err("setting AP mode failed %d\n", err);
a44aa400
HM		 4656 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MBSS))
4657 brcmf_fil_iovar_int_set(ifp, "mbss", 0);
b3589dfe
HM		 4658 brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_REGULATORY,
4659 ifp->vif->is_11d);
a44aa400
HM		 4660 /* Bring device back up so it can be used again */
4661 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_UP, 1);
4662 if (err < 0)
4663 brcmf_err("BRCMF_C_UP error %d\n", err);
f25ba69c
WF		 4664
4665 brcmf_vif_clear_mgmt_ies(ifp->vif);
426d0a56 4666 } else {
37a869ec 4667 bss_enable.bsscfgidx = cpu_to_le32(ifp->bsscfgidx);
426d0a56
HM		 4668 bss_enable.enable = cpu_to_le32(0);
4669 err = brcmf_fil_iovar_data_set(ifp, "bss", &bss_enable,
4670 sizeof(bss_enable));
4671 if (err < 0)
4672 brcmf_err("bss_enable config failed %d\n", err);
1a873342 4673 }
f96aa07e 4674 brcmf_set_mpc(ifp, 1);
52f22fb2 4675 brcmf_configure_arp_nd_offload(ifp, true);
426d0a56 4676 clear_bit(BRCMF_VIF_STATUS_AP_CREATED, &ifp->vif->sme_state);
92121e69 4677 brcmf_net_setcarrier(ifp, false);
426d0a56 4678
1a873342
HM		 4679 return err;
4680}
4681
a0f07959
HM		 4682static s32
4683brcmf_cfg80211_change_beacon(struct wiphy *wiphy, struct net_device *ndev,
4684 struct cfg80211_beacon_data *info)
4685{
a0f07959
HM		 4686 struct brcmf_if *ifp = netdev_priv(ndev);
4687 s32 err;
4688
4689 brcmf_dbg(TRACE, "Enter\n");
4690
a0f07959
HM		 4691 err = brcmf_config_ap_mgmt_ie(ifp->vif, info);
4692
4693 return err;
4694}
4695
1a873342
HM		 4696static int
4697brcmf_cfg80211_del_station(struct wiphy *wiphy, struct net_device *ndev,
89c771e5 4698 struct station_del_parameters *params)
1a873342 4699{
a0f07959 4700 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
1a873342 4701 struct brcmf_scb_val_le scbval;
0abb5f21 4702 struct brcmf_if *ifp = netdev_priv(ndev);
1a873342
HM		 4703 s32 err;
4704
89c771e5 4705 if (!params->mac)
1a873342
HM		 4706 return -EFAULT;
4707
89c771e5 4708 brcmf_dbg(TRACE, "Enter %pM\n", params->mac);
1a873342 4709
a0f07959
HM		 4710 if (ifp->vif == cfg->p2p.bss_idx[P2PAPI_BSSCFG_DEVICE].vif)
4711 ifp = cfg->p2p.bss_idx[P2PAPI_BSSCFG_PRIMARY].vif->ifp;
ce81e317 4712 if (!check_vif_up(ifp->vif))
1a873342
HM		 4713 return -EIO;
4714
89c771e5 4715 memcpy(&scbval.ea, params->mac, ETH_ALEN);
ba8b6ae6 4716 scbval.val = cpu_to_le32(params->reason_code);
0abb5f21 4717 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SCB_DEAUTHENTICATE_FOR_REASON,
81f5dcb8 4718 &scbval, sizeof(scbval));
1a873342 4719 if (err)
57d6e91a 4720 brcmf_err("SCB_DEAUTHENTICATE_FOR_REASON failed %d\n", err);
7ab6acd0 4721
d96b801f 4722 brcmf_dbg(TRACE, "Exit\n");
1a873342
HM		 4723 return err;
4724}
4725
6b89dcb3
HM		 4726static int
4727brcmf_cfg80211_change_station(struct wiphy *wiphy, struct net_device *ndev,
4728 const u8 *mac, struct station_parameters *params)
4729{
4730 struct brcmf_if *ifp = netdev_priv(ndev);
4731 s32 err;
4732
4733 brcmf_dbg(TRACE, "Enter, MAC %pM, mask 0x%04x set 0x%04x\n", mac,
4734 params->sta_flags_mask, params->sta_flags_set);
4735
4736 /* Ignore all 00 MAC */
4737 if (is_zero_ether_addr(mac))
4738 return 0;
4739
4740 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
4741 return 0;
4742
4743 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))
4744 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SCB_AUTHORIZE,
4745 (void *)mac, ETH_ALEN);
4746 else
4747 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_SCB_DEAUTHORIZE,
4748 (void *)mac, ETH_ALEN);
4749 if (err < 0)
4750 brcmf_err("Setting SCB (de-)authorize failed, %d\n", err);
4751
4752 return err;
4753}
0de8aace
HM		 4754
4755static void
4756brcmf_cfg80211_mgmt_frame_register(struct wiphy *wiphy,
4757 struct wireless_dev *wdev,
4758 u16 frame_type, bool reg)
4759{
7fa2e352 4760 struct brcmf_cfg80211_vif *vif;
0de8aace
HM		 4761 u16 mgmt_type;
4762
4763 brcmf_dbg(TRACE, "Enter, frame_type %04x, reg=%d\n", frame_type, reg);
4764
4765 mgmt_type = (frame_type & IEEE80211_FCTL_STYPE) >> 4;
7fa2e352 4766 vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
0de8aace
HM		 4767 if (reg)
4768 vif->mgmt_rx_reg |= BIT(mgmt_type);
4769 else
318a64ce 4770 vif->mgmt_rx_reg &= ~BIT(mgmt_type);
0de8aace
HM		 4771}
4772
4773
4774static int
4775brcmf_cfg80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
b176e629 4776 struct cfg80211_mgmt_tx_params *params, u64 *cookie)
0de8aace
HM		 4777{
4778 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
b176e629
AO		 4779 struct ieee80211_channel *chan = params->chan;
4780 const u8 *buf = params->buf;
4781 size_t len = params->len;
0de8aace
HM		 4782 const struct ieee80211_mgmt *mgmt;
4783 struct brcmf_cfg80211_vif *vif;
4784 s32 err = 0;
4785 s32 ie_offset;
4786 s32 ie_len;
18e2f61d
HM		 4787 struct brcmf_fil_action_frame_le *action_frame;
4788 struct brcmf_fil_af_params_le *af_params;
4789 bool ack;
4790 s32 chan_nr;
c2ff8cad 4791 u32 freq;
0de8aace
HM		 4792
4793 brcmf_dbg(TRACE, "Enter\n");
4794
4795 *cookie = 0;
4796
4797 mgmt = (const struct ieee80211_mgmt *)buf;
4798
a0f07959
HM		 4799 if (!ieee80211_is_mgmt(mgmt->frame_control)) {
4800 brcmf_err("Driver only allows MGMT packet type\n");
4801 return -EPERM;
4802 }
0de8aace 4803
c2ff8cad
AQ		 4804 vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
4805
a0f07959
HM		 4806 if (ieee80211_is_probe_resp(mgmt->frame_control)) {
4807 /* Right now the only reason to get a probe response */
4808 /* is for p2p listen response or for p2p GO from */
4809 /* wpa_supplicant. Unfortunately the probe is send */
4810 /* on primary ndev, while dongle wants it on the p2p */
4811 /* vif. Since this is only reason for a probe */
4812 /* response to be sent, the vif is taken from cfg. */
4813 /* If ever desired to send proberesp for non p2p */
4814 /* response then data should be checked for */
4815 /* "DIRECT-". Note in future supplicant will take */
4816 /* dedicated p2p wdev to do this and then this 'hack'*/
4817 /* is not needed anymore. */
4818 ie_offset = DOT11_MGMT_HDR_LEN +
4819 DOT11_BCN_PRB_FIXED_LEN;
4820 ie_len = len - ie_offset;
a0f07959 4821 if (vif == cfg->p2p.bss_idx[P2PAPI_BSSCFG_PRIMARY].vif)
0de8aace 4822 vif = cfg->p2p.bss_idx[P2PAPI_BSSCFG_DEVICE].vif;
a0f07959
HM		 4823 err = brcmf_vif_set_mgmt_ie(vif,
4824 BRCMF_VNDR_IE_PRBRSP_FLAG,
4825 &buf[ie_offset],
4826 ie_len);
4827 cfg80211_mgmt_tx_status(wdev, *cookie, buf, len, true,
4828 GFP_KERNEL);
18e2f61d 4829 } else if (ieee80211_is_action(mgmt->frame_control)) {
8f44c9a4
AS		 4830 if (len > BRCMF_FIL_ACTION_FRAME_SIZE + DOT11_MGMT_HDR_LEN) {
4831 brcmf_err("invalid action frame length\n");
4832 err = -EINVAL;
4833 goto exit;
4834 }
18e2f61d
HM		 4835 af_params = kzalloc(sizeof(*af_params), GFP_KERNEL);
4836 if (af_params == NULL) {
4837 brcmf_err("unable to allocate frame\n");
4838 err = -ENOMEM;
4839 goto exit;
4840 }
4841 action_frame = &af_params->action_frame;
4842 /* Add the packet Id */
4843 action_frame->packet_id = cpu_to_le32(*cookie);
4844 /* Add BSSID */
4845 memcpy(&action_frame->da[0], &mgmt->da[0], ETH_ALEN);
4846 memcpy(&af_params->bssid[0], &mgmt->bssid[0], ETH_ALEN);
4847 /* Add the length exepted for 802.11 header */
4848 action_frame->len = cpu_to_le16(len - DOT11_MGMT_HDR_LEN);
c2ff8cad
AQ		 4849 /* Add the channel. Use the one specified as parameter if any or
4850 * the current one (got from the firmware) otherwise
4851 */
4852 if (chan)
4853 freq = chan->center_freq;
4854 else
4855 brcmf_fil_cmd_int_get(vif->ifp, BRCMF_C_GET_CHANNEL,
4856 &freq);
4857 chan_nr = ieee80211_frequency_to_channel(freq);
18e2f61d
HM		 4858 af_params->channel = cpu_to_le32(chan_nr);
4859
4860 memcpy(action_frame->data, &buf[DOT11_MGMT_HDR_LEN],
4861 le16_to_cpu(action_frame->len));
4862
4863 brcmf_dbg(TRACE, "Action frame, cookie=%lld, len=%d, freq=%d\n",
86a9c4a2 4864 *cookie, le16_to_cpu(action_frame->len), freq);
18e2f61d 4865
7fa2e352 4866 ack = brcmf_p2p_send_action_frame(cfg, cfg_to_ndev(cfg),
18e2f61d
HM		 4867 af_params);
4868
4869 cfg80211_mgmt_tx_status(wdev, *cookie, buf, len, ack,
4870 GFP_KERNEL);
4871 kfree(af_params);
a0f07959
HM		 4872 } else {
4873 brcmf_dbg(TRACE, "Unhandled, fc=%04x!!\n", mgmt->frame_control);
5b5e0928 4874 brcmf_dbg_hex_dump(true, buf, len, "payload, len=%zu\n", len);
0de8aace 4875 }
a0f07959 4876
18e2f61d 4877exit:
0de8aace
HM		 4878 return err;
4879}
4880
4881
4882static int
4883brcmf_cfg80211_cancel_remain_on_channel(struct wiphy *wiphy,
4884 struct wireless_dev *wdev,
4885 u64 cookie)
4886{
4887 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
4888 struct brcmf_cfg80211_vif *vif;
4889 int err = 0;
4890
4891 brcmf_dbg(TRACE, "Enter p2p listen cancel\n");
4892
4893 vif = cfg->p2p.bss_idx[P2PAPI_BSSCFG_DEVICE].vif;
4894 if (vif == NULL) {
4895 brcmf_err("No p2p device available for probe response\n");
4896 err = -ENODEV;
4897 goto exit;
4898 }
4899 brcmf_p2p_cancel_remain_on_channel(vif->ifp);
4900exit:
4901 return err;
4902}
4903
ee6e7aa3
RM		 4904static int brcmf_cfg80211_get_channel(struct wiphy *wiphy,
4905 struct wireless_dev *wdev,
4906 struct cfg80211_chan_def *chandef)
4907{
4908 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
4909 struct net_device *ndev = wdev->netdev;
4910 struct brcmf_if *ifp;
4911 struct brcmu_chan ch;
4912 enum nl80211_band band = 0;
4913 enum nl80211_chan_width width = 0;
4914 u32 chanspec;
4915 int freq, err;
4916
4917 if (!ndev)
4918 return -ENODEV;
4919 ifp = netdev_priv(ndev);
4920
4921 err = brcmf_fil_iovar_int_get(ifp, "chanspec", &chanspec);
4922 if (err) {
4923 brcmf_err("chanspec failed (%d)\n", err);
4924 return err;
4925 }
4926
4927 ch.chspec = chanspec;
4928 cfg->d11inf.decchspec(&ch);
4929
4930 switch (ch.band) {
4931 case BRCMU_CHAN_BAND_2G:
4932 band = NL80211_BAND_2GHZ;
4933 break;
4934 case BRCMU_CHAN_BAND_5G:
4935 band = NL80211_BAND_5GHZ;
4936 break;
4937 }
4938
4939 switch (ch.bw) {
4940 case BRCMU_CHAN_BW_80:
4941 width = NL80211_CHAN_WIDTH_80;
4942 break;
4943 case BRCMU_CHAN_BW_40:
4944 width = NL80211_CHAN_WIDTH_40;
4945 break;
4946 case BRCMU_CHAN_BW_20:
4947 width = NL80211_CHAN_WIDTH_20;
4948 break;
4949 case BRCMU_CHAN_BW_80P80:
4950 width = NL80211_CHAN_WIDTH_80P80;
4951 break;
4952 case BRCMU_CHAN_BW_160:
4953 width = NL80211_CHAN_WIDTH_160;
4954 break;
4955 }
4956
4957 freq = ieee80211_channel_to_frequency(ch.control_ch_num, band);
4958 chandef->chan = ieee80211_get_channel(wiphy, freq);
4959 chandef->width = width;
4960 chandef->center_freq1 = ieee80211_channel_to_frequency(ch.chnum, band);
4961 chandef->center_freq2 = 0;
4962
4963 return 0;
4964}
4965
61730d4d
PH		 4966static int brcmf_cfg80211_crit_proto_start(struct wiphy *wiphy,
4967 struct wireless_dev *wdev,
4968 enum nl80211_crit_proto_id proto,
4969 u16 duration)
4970{
4971 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
4972 struct brcmf_cfg80211_vif *vif;
4973
4974 vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
4975
4976 /* only DHCP support for now */
4977 if (proto != NL80211_CRIT_PROTO_DHCP)
4978 return -EINVAL;
4979
4980 /* suppress and abort scanning */
4981 set_bit(BRCMF_SCAN_STATUS_SUPPRESS, &cfg->scan_status);
4982 brcmf_abort_scanning(cfg);
4983
4984 return brcmf_btcoex_set_mode(vif, BRCMF_BTCOEX_DISABLED, duration);
4985}
4986
4987static void brcmf_cfg80211_crit_proto_stop(struct wiphy *wiphy,
4988 struct wireless_dev *wdev)
4989{
4990 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
4991 struct brcmf_cfg80211_vif *vif;
4992
4993 vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
4994
4995 brcmf_btcoex_set_mode(vif, BRCMF_BTCOEX_ENABLED, 0);
4996 clear_bit(BRCMF_SCAN_STATUS_SUPPRESS, &cfg->scan_status);
4997}
4998
70b7d94b
HM		 4999static s32
5000brcmf_notify_tdls_peer_event(struct brcmf_if *ifp,
5001 const struct brcmf_event_msg *e, void *data)
5002{
5003 switch (e->reason) {
5004 case BRCMF_E_REASON_TDLS_PEER_DISCOVERED:
5005 brcmf_dbg(TRACE, "TDLS Peer Discovered\n");
5006 break;
5007 case BRCMF_E_REASON_TDLS_PEER_CONNECTED:
5008 brcmf_dbg(TRACE, "TDLS Peer Connected\n");
5009 brcmf_proto_add_tdls_peer(ifp->drvr, ifp->ifidx, (u8 *)e->addr);
5010 break;
5011 case BRCMF_E_REASON_TDLS_PEER_DISCONNECTED:
5012 brcmf_dbg(TRACE, "TDLS Peer Disconnected\n");
5013 brcmf_proto_delete_peer(ifp->drvr, ifp->ifidx, (u8 *)e->addr);
5014 break;
5015 }
5016
5017 return 0;
5018}
5019
89c2f382
AS		 5020static int brcmf_convert_nl80211_tdls_oper(enum nl80211_tdls_operation oper)
5021{
5022 int ret;
5023
5024 switch (oper) {
5025 case NL80211_TDLS_DISCOVERY_REQ:
5026 ret = BRCMF_TDLS_MANUAL_EP_DISCOVERY;
5027 break;
5028 case NL80211_TDLS_SETUP:
5029 ret = BRCMF_TDLS_MANUAL_EP_CREATE;
5030 break;
5031 case NL80211_TDLS_TEARDOWN:
5032 ret = BRCMF_TDLS_MANUAL_EP_DELETE;
5033 break;
5034 default:
5035 brcmf_err("unsupported operation: %d\n", oper);
5036 ret = -EOPNOTSUPP;
5037 }
5038 return ret;
5039}
5040
5041static int brcmf_cfg80211_tdls_oper(struct wiphy *wiphy,
3b3a0162 5042 struct net_device *ndev, const u8 *peer,
89c2f382
AS		 5043 enum nl80211_tdls_operation oper)
5044{
5045 struct brcmf_if *ifp;
5046 struct brcmf_tdls_iovar_le info;
5047 int ret = 0;
5048
5049 ret = brcmf_convert_nl80211_tdls_oper(oper);
5050 if (ret < 0)
5051 return ret;
5052
5053 ifp = netdev_priv(ndev);
5054 memset(&info, 0, sizeof(info));
5055 info.mode = (u8)ret;
5056 if (peer)
5057 memcpy(info.ea, peer, ETH_ALEN);
5058
5059 ret = brcmf_fil_iovar_data_set(ifp, "tdls_endpoint",
5060 &info, sizeof(info));
5061 if (ret < 0)
5062 brcmf_err("tdls_endpoint iovar failed: ret=%d\n", ret);
5063
5064 return ret;
5065}
5066
2a2a5d18
AVS		 5067static int
5068brcmf_cfg80211_update_conn_params(struct wiphy *wiphy,
5069 struct net_device *ndev,
5070 struct cfg80211_connect_params *sme,
5071 u32 changed)
5072{
5073 struct brcmf_if *ifp;
5074 int err;
5075
5076 if (!(changed & UPDATE_ASSOC_IES))
5077 return 0;
5078
5079 ifp = netdev_priv(ndev);
5080 err = brcmf_vif_set_mgmt_ie(ifp->vif, BRCMF_VNDR_IE_ASSOCREQ_FLAG,
5081 sme->ie, sme->ie_len);
5082 if (err)
5083 brcmf_err("Set Assoc REQ IE Failed\n");
5084 else
5085 brcmf_dbg(TRACE, "Applied Vndr IEs for Assoc request\n");
5086
5087 return err;
5088}
5089
5c22fb85
HM		 5090#ifdef CONFIG_PM
5091static int
5092brcmf_cfg80211_set_rekey_data(struct wiphy *wiphy, struct net_device *ndev,
5093 struct cfg80211_gtk_rekey_data *gtk)
5094{
5095 struct brcmf_if *ifp = netdev_priv(ndev);
5096 struct brcmf_gtk_keyinfo_le gtk_le;
5097 int ret;
5098
5099 brcmf_dbg(TRACE, "Enter, bssidx=%d\n", ifp->bsscfgidx);
5100
5101 memcpy(gtk_le.kck, gtk->kck, sizeof(gtk_le.kck));
5102 memcpy(gtk_le.kek, gtk->kek, sizeof(gtk_le.kek));
5103 memcpy(gtk_le.replay_counter, gtk->replay_ctr,
5104 sizeof(gtk_le.replay_counter));
5105
5106 ret = brcmf_fil_iovar_data_set(ifp, "gtk_key_info", &gtk_le,
5107 sizeof(gtk_le));
5108 if (ret < 0)
5109 brcmf_err("gtk_key_info iovar failed: ret=%d\n", ret);
5110
5111 return ret;
5112}
5113#endif
5114
2526ff21
AS		 5115static int brcmf_cfg80211_set_pmk(struct wiphy *wiphy, struct net_device *dev,
5116 const struct cfg80211_pmk_conf *conf)
5117{
5118 struct brcmf_if *ifp;
5119
5120 brcmf_dbg(TRACE, "enter\n");
5121
5122 /* expect using firmware supplicant for 1X */
5123 ifp = netdev_priv(dev);
5124 if (WARN_ON(ifp->vif->profile.use_fwsup != BRCMF_PROFILE_FWSUP_1X))
5125 return -EINVAL;
5126
5127 return brcmf_set_pmk(ifp, conf->pmk, conf->pmk_len);
5128}
5129
5130static int brcmf_cfg80211_del_pmk(struct wiphy *wiphy, struct net_device *dev,
5131 const u8 *aa)
5132{
5133 struct brcmf_if *ifp;
5134
5135 brcmf_dbg(TRACE, "enter\n");
5136 ifp = netdev_priv(dev);
5137 if (WARN_ON(ifp->vif->profile.use_fwsup != BRCMF_PROFILE_FWSUP_1X))
5138 return -EINVAL;
5139
5140 return brcmf_set_pmk(ifp, NULL, 0);
5141}
5142
5c22fb85 5143static struct cfg80211_ops brcmf_cfg80211_ops = {
9f440b7b
AS		 5144 .add_virtual_intf = brcmf_cfg80211_add_iface,
5145 .del_virtual_intf = brcmf_cfg80211_del_iface,
5b435de0
AS		 5146 .change_virtual_intf = brcmf_cfg80211_change_iface,
5147 .scan = brcmf_cfg80211_scan,
5148 .set_wiphy_params = brcmf_cfg80211_set_wiphy_params,
5149 .join_ibss = brcmf_cfg80211_join_ibss,
5150 .leave_ibss = brcmf_cfg80211_leave_ibss,
5151 .get_station = brcmf_cfg80211_get_station,
bf2a7e04 5152 .dump_station = brcmf_cfg80211_dump_station,
5b435de0
AS		 5153 .set_tx_power = brcmf_cfg80211_set_tx_power,
5154 .get_tx_power = brcmf_cfg80211_get_tx_power,
5155 .add_key = brcmf_cfg80211_add_key,
5156 .del_key = brcmf_cfg80211_del_key,
5157 .get_key = brcmf_cfg80211_get_key,
5158 .set_default_key = brcmf_cfg80211_config_default_key,
5159 .set_default_mgmt_key = brcmf_cfg80211_config_default_mgmt_key,
5160 .set_power_mgmt = brcmf_cfg80211_set_power_mgmt,
5b435de0
AS		 5161 .connect = brcmf_cfg80211_connect,
5162 .disconnect = brcmf_cfg80211_disconnect,
5163 .suspend = brcmf_cfg80211_suspend,
5164 .resume = brcmf_cfg80211_resume,
5165 .set_pmksa = brcmf_cfg80211_set_pmksa,
5166 .del_pmksa = brcmf_cfg80211_del_pmksa,
cbaa177d 5167 .flush_pmksa = brcmf_cfg80211_flush_pmksa,
1a873342
HM		 5168 .start_ap = brcmf_cfg80211_start_ap,
5169 .stop_ap = brcmf_cfg80211_stop_ap,
a0f07959 5170 .change_beacon = brcmf_cfg80211_change_beacon,
1a873342 5171 .del_station = brcmf_cfg80211_del_station,
6b89dcb3 5172 .change_station = brcmf_cfg80211_change_station,
e5806072
AS		 5173 .sched_scan_start = brcmf_cfg80211_sched_scan_start,
5174 .sched_scan_stop = brcmf_cfg80211_sched_scan_stop,
0de8aace
HM		 5175 .mgmt_frame_register = brcmf_cfg80211_mgmt_frame_register,
5176 .mgmt_tx = brcmf_cfg80211_mgmt_tx,
5177 .remain_on_channel = brcmf_p2p_remain_on_channel,
5178 .cancel_remain_on_channel = brcmf_cfg80211_cancel_remain_on_channel,
ee6e7aa3 5179 .get_channel = brcmf_cfg80211_get_channel,
27f10e38
AS		 5180 .start_p2p_device = brcmf_p2p_start_device,
5181 .stop_p2p_device = brcmf_p2p_stop_device,
61730d4d
PH		 5182 .crit_proto_start = brcmf_cfg80211_crit_proto_start,
5183 .crit_proto_stop = brcmf_cfg80211_crit_proto_stop,
89c2f382 5184 .tdls_oper = brcmf_cfg80211_tdls_oper,
2a2a5d18 5185 .update_connect_params = brcmf_cfg80211_update_conn_params,
2526ff21
AS		 5186 .set_pmk = brcmf_cfg80211_set_pmk,
5187 .del_pmk = brcmf_cfg80211_del_pmk,
5b435de0
AS		 5188};
5189
3eacf866 5190struct brcmf_cfg80211_vif *brcmf_alloc_vif(struct brcmf_cfg80211_info *cfg,
26072330 5191 enum nl80211_iftype type)
3eacf866 5192{
a44aa400 5193 struct brcmf_cfg80211_vif *vif_walk;
3eacf866 5194 struct brcmf_cfg80211_vif *vif;
a44aa400 5195 bool mbss;
5b435de0 5196
33a6b157 5197 brcmf_dbg(TRACE, "allocating virtual interface (size=%zu)\n",
9f440b7b 5198 sizeof(*vif));
3eacf866
AS		 5199 vif = kzalloc(sizeof(*vif), GFP_KERNEL);
5200 if (!vif)
5201 return ERR_PTR(-ENOMEM);
5202
5203 vif->wdev.wiphy = cfg->wiphy;
9f440b7b 5204 vif->wdev.iftype = type;
5b435de0 5205
6ac4f4ed
AS		 5206 brcmf_init_prof(&vif->profile);
5207
a44aa400
HM		 5208 if (type == NL80211_IFTYPE_AP) {
5209 mbss = false;
5210 list_for_each_entry(vif_walk, &cfg->vif_list, list) {
5211 if (vif_walk->wdev.iftype == NL80211_IFTYPE_AP) {
5212 mbss = true;
5213 break;
5214 }
5215 }
5216 vif->mbss = mbss;
5217 }
5218
3eacf866 5219 list_add_tail(&vif->list, &cfg->vif_list);
3eacf866 5220 return vif;
5b435de0
AS		 5221}
5222
427dec5f 5223void brcmf_free_vif(struct brcmf_cfg80211_vif *vif)
5b435de0 5224{
3eacf866 5225 list_del(&vif->list);
3eacf866 5226 kfree(vif);
5b435de0
AS		 5227}
5228
9df4d542
AS		 5229void brcmf_cfg80211_free_netdev(struct net_device *ndev)
5230{
5231 struct brcmf_cfg80211_vif *vif;
5232 struct brcmf_if *ifp;
5233
5234 ifp = netdev_priv(ndev);
5235 vif = ifp->vif;
5236
95ef1239
AS		 5237 if (vif)
5238 brcmf_free_vif(vif);
9df4d542
AS		 5239}
5240
b8a64f0e
AS		 5241static bool brcmf_is_linkup(struct brcmf_cfg80211_vif *vif,
5242 const struct brcmf_event_msg *e)
5b435de0 5243{
5c36b99a
AS		 5244 u32 event = e->event_code;
5245 u32 status = e->status;
5b435de0 5246
2526ff21
AS		 5247 if (vif->profile.use_fwsup == BRCMF_PROFILE_FWSUP_PSK &&
5248 event == BRCMF_E_PSK_SUP &&
b8a64f0e
AS		 5249 status == BRCMF_E_STATUS_FWSUP_COMPLETED)
5250 set_bit(BRCMF_VIF_STATUS_EAP_SUCCESS, &vif->sme_state);
5b435de0 5251 if (event == BRCMF_E_SET_SSID && status == BRCMF_E_STATUS_SUCCESS) {
16886735 5252 brcmf_dbg(CONN, "Processing set ssid\n");
b8a64f0e
AS		 5253 memcpy(vif->profile.bssid, e->addr, ETH_ALEN);
5254 if (vif->profile.use_fwsup != BRCMF_PROFILE_FWSUP_PSK)
5255 return true;
5256
5257 set_bit(BRCMF_VIF_STATUS_ASSOC_SUCCESS, &vif->sme_state);
5b435de0
AS		 5258 }
5259
b8a64f0e
AS		 5260 if (test_bit(BRCMF_VIF_STATUS_EAP_SUCCESS, &vif->sme_state) &&
5261 test_bit(BRCMF_VIF_STATUS_ASSOC_SUCCESS, &vif->sme_state)) {
5262 clear_bit(BRCMF_VIF_STATUS_EAP_SUCCESS, &vif->sme_state);
5263 clear_bit(BRCMF_VIF_STATUS_ASSOC_SUCCESS, &vif->sme_state);
5264 return true;
5265 }
5b435de0
AS		 5266 return false;
5267}
5268
903e0eee 5269static bool brcmf_is_linkdown(const struct brcmf_event_msg *e)
5b435de0 5270{
5c36b99a
AS		 5271 u32 event = e->event_code;
5272 u16 flags = e->flags;
5b435de0 5273
68ca395f
HM		 5274 if ((event == BRCMF_E_DEAUTH) || (event == BRCMF_E_DEAUTH_IND) ||
5275 (event == BRCMF_E_DISASSOC_IND) ||
5276 ((event == BRCMF_E_LINK) && (!(flags & BRCMF_EVENT_MSG_LINK)))) {
16886735 5277 brcmf_dbg(CONN, "Processing link down\n");
5b435de0
AS		 5278 return true;
5279 }
5280 return false;
5281}
5282
27a68fe3 5283static bool brcmf_is_nonetwork(struct brcmf_cfg80211_info *cfg,
5b435de0
AS		 5284 const struct brcmf_event_msg *e)
5285{
5c36b99a
AS		 5286 u32 event = e->event_code;
5287 u32 status = e->status;
5b435de0
AS		 5288
5289 if (event == BRCMF_E_LINK && status == BRCMF_E_STATUS_NO_NETWORKS) {
16886735
AS		 5290 brcmf_dbg(CONN, "Processing Link %s & no network found\n",
5291 e->flags & BRCMF_EVENT_MSG_LINK ? "up" : "down");
5b435de0
AS		 5292 return true;
5293 }
5294
5295 if (event == BRCMF_E_SET_SSID && status != BRCMF_E_STATUS_SUCCESS) {
16886735 5296 brcmf_dbg(CONN, "Processing connecting & no network found\n");
5b435de0
AS		 5297 return true;
5298 }
5299
b8a64f0e
AS		 5300 if (event == BRCMF_E_PSK_SUP &&
5301 status != BRCMF_E_STATUS_FWSUP_COMPLETED) {
5302 brcmf_dbg(CONN, "Processing failed supplicant state: %u\n",
5303 status);
5304 return true;
5305 }
5306
5b435de0
AS		 5307 return false;
5308}
5309
27a68fe3 5310static void brcmf_clear_assoc_ies(struct brcmf_cfg80211_info *cfg)
5b435de0 5311{
27a68fe3 5312 struct brcmf_cfg80211_connect_info *conn_info = cfg_to_conn(cfg);
5b435de0
AS		 5313
5314 kfree(conn_info->req_ie);
5315 conn_info->req_ie = NULL;
5316 conn_info->req_ie_len = 0;
5317 kfree(conn_info->resp_ie);
5318 conn_info->resp_ie = NULL;
5319 conn_info->resp_ie_len = 0;
5320}
5321
89286dc9
HM		 5322static s32 brcmf_get_assoc_ies(struct brcmf_cfg80211_info *cfg,
5323 struct brcmf_if *ifp)
5b435de0 5324{
c4e382d2 5325 struct brcmf_cfg80211_assoc_ielen_le *assoc_info;
27a68fe3 5326 struct brcmf_cfg80211_connect_info *conn_info = cfg_to_conn(cfg);
5b435de0
AS		 5327 u32 req_len;
5328 u32 resp_len;
5329 s32 err = 0;
5330
27a68fe3 5331 brcmf_clear_assoc_ies(cfg);
5b435de0 5332
ac24be6f
AS		 5333 err = brcmf_fil_iovar_data_get(ifp, "assoc_info",
5334 cfg->extra_buf, WL_ASSOC_INFO_MAX);
5b435de0 5335 if (err) {
57d6e91a 5336 brcmf_err("could not get assoc info (%d)\n", err);
5b435de0
AS		 5337 return err;
5338 }
c4e382d2 5339 assoc_info =
27a68fe3 5340 (struct brcmf_cfg80211_assoc_ielen_le *)cfg->extra_buf;
c4e382d2
AS		 5341 req_len = le32_to_cpu(assoc_info->req_len);
5342 resp_len = le32_to_cpu(assoc_info->resp_len);
5b435de0 5343 if (req_len) {
ac24be6f 5344 err = brcmf_fil_iovar_data_get(ifp, "assoc_req_ies",
81f5dcb8
HM		 5345 cfg->extra_buf,
5346 WL_ASSOC_INFO_MAX);
5b435de0 5347 if (err) {
57d6e91a 5348 brcmf_err("could not get assoc req (%d)\n", err);
5b435de0
AS		 5349 return err;
5350 }
5351 conn_info->req_ie_len = req_len;
5352 conn_info->req_ie =
27a68fe3 5353 kmemdup(cfg->extra_buf, conn_info->req_ie_len,
5b435de0
AS		 5354 GFP_KERNEL);
5355 } else {
5356 conn_info->req_ie_len = 0;
5357 conn_info->req_ie = NULL;
5358 }
5359 if (resp_len) {
ac24be6f 5360 err = brcmf_fil_iovar_data_get(ifp, "assoc_resp_ies",
81f5dcb8
HM		 5361 cfg->extra_buf,
5362 WL_ASSOC_INFO_MAX);
5b435de0 5363 if (err) {
57d6e91a 5364 brcmf_err("could not get assoc resp (%d)\n", err);
5b435de0
AS		 5365 return err;
5366 }
5367 conn_info->resp_ie_len = resp_len;
5368 conn_info->resp_ie =
27a68fe3 5369 kmemdup(cfg->extra_buf, conn_info->resp_ie_len,
5b435de0
AS		 5370 GFP_KERNEL);
5371 } else {
5372 conn_info->resp_ie_len = 0;
5373 conn_info->resp_ie = NULL;
5374 }
16886735
AS		 5375 brcmf_dbg(CONN, "req len (%d) resp len (%d)\n",
5376 conn_info->req_ie_len, conn_info->resp_ie_len);
5b435de0
AS		 5377
5378 return err;
5379}
5380
5381static s32
27a68fe3 5382brcmf_bss_roaming_done(struct brcmf_cfg80211_info *cfg,
5b435de0
AS		 5383 struct net_device *ndev,
5384 const struct brcmf_event_msg *e)
5385{
c1179033
AS		 5386 struct brcmf_if *ifp = netdev_priv(ndev);
5387 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
27a68fe3
AS		 5388 struct brcmf_cfg80211_connect_info *conn_info = cfg_to_conn(cfg);
5389 struct wiphy *wiphy = cfg_to_wiphy(cfg);
a180b83b 5390 struct ieee80211_channel *notify_channel = NULL;
5b435de0 5391 struct ieee80211_supported_band *band;
a180b83b 5392 struct brcmf_bss_info_le *bi;
83cf17aa 5393 struct brcmu_chan ch;
29ce6ecb 5394 struct cfg80211_roam_info roam_info = {};
5b435de0
AS		 5395 u32 freq;
5396 s32 err = 0;
a180b83b 5397 u8 *buf;
5b435de0 5398
d96b801f 5399 brcmf_dbg(TRACE, "Enter\n");
5b435de0 5400
89286dc9 5401 brcmf_get_assoc_ies(cfg, ifp);
6c8c4f72 5402 memcpy(profile->bssid, e->addr, ETH_ALEN);
89286dc9 5403 brcmf_update_bss_info(cfg, ifp);
5b435de0 5404
a180b83b
FL		 5405 buf = kzalloc(WL_BSS_INFO_MAX, GFP_KERNEL);
5406 if (buf == NULL) {
5407 err = -ENOMEM;
5408 goto done;
5409 }
5410
5411 /* data sent to dongle has to be little endian */
5412 *(__le32 *)buf = cpu_to_le32(WL_BSS_INFO_MAX);
c1179033 5413 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_BSS_INFO,
ac24be6f 5414 buf, WL_BSS_INFO_MAX);
a180b83b
FL		 5415
5416 if (err)
5417 goto done;
5b435de0 5418
a180b83b 5419 bi = (struct brcmf_bss_info_le *)(buf + 4);
83cf17aa
FL		 5420 ch.chspec = le16_to_cpu(bi->chanspec);
5421 cfg->d11inf.decchspec(&ch);
5b435de0 5422
83cf17aa 5423 if (ch.band == BRCMU_CHAN_BAND_2G)
57fbcce3 5424 band = wiphy->bands[NL80211_BAND_2GHZ];
5b435de0 5425 else
57fbcce3 5426 band = wiphy->bands[NL80211_BAND_5GHZ];
5b435de0 5427
4712d88a 5428 freq = ieee80211_channel_to_frequency(ch.control_ch_num, band->band);
5b435de0
AS		 5429 notify_channel = ieee80211_get_channel(wiphy, freq);
5430
a180b83b
FL		 5431done:
5432 kfree(buf);
29ce6ecb
AS		 5433
5434 roam_info.channel = notify_channel;
5435 roam_info.bssid = profile->bssid;
5436 roam_info.req_ie = conn_info->req_ie;
5437 roam_info.req_ie_len = conn_info->req_ie_len;
5438 roam_info.resp_ie = conn_info->resp_ie;
5439 roam_info.resp_ie_len = conn_info->resp_ie_len;
5440
5441 cfg80211_roamed(ndev, &roam_info, GFP_KERNEL);
16886735 5442 brcmf_dbg(CONN, "Report roaming result\n");
5b435de0 5443
c1179033 5444 set_bit(BRCMF_VIF_STATUS_CONNECTED, &ifp->vif->sme_state);
d96b801f 5445 brcmf_dbg(TRACE, "Exit\n");
5b435de0
AS		 5446 return err;
5447}
5448
5449static s32
27a68fe3 5450brcmf_bss_connect_done(struct brcmf_cfg80211_info *cfg,
5b435de0
AS		 5451 struct net_device *ndev, const struct brcmf_event_msg *e,
5452 bool completed)
5453{
c1179033
AS		 5454 struct brcmf_if *ifp = netdev_priv(ndev);
5455 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
27a68fe3 5456 struct brcmf_cfg80211_connect_info *conn_info = cfg_to_conn(cfg);
123fef3f 5457 struct cfg80211_connect_resp_params conn_params;
5b435de0 5458
d96b801f 5459 brcmf_dbg(TRACE, "Enter\n");
5b435de0 5460
c1179033
AS		 5461 if (test_and_clear_bit(BRCMF_VIF_STATUS_CONNECTING,
5462 &ifp->vif->sme_state)) {
123fef3f 5463 memset(&conn_params, 0, sizeof(conn_params));
5b435de0 5464 if (completed) {
89286dc9 5465 brcmf_get_assoc_ies(cfg, ifp);
89286dc9
HM		 5466 brcmf_update_bss_info(cfg, ifp);
5467 set_bit(BRCMF_VIF_STATUS_CONNECTED,
5468 &ifp->vif->sme_state);
123fef3f
AS		 5469 conn_params.status = WLAN_STATUS_SUCCESS;
5470 } else {
5471 conn_params.status = WLAN_STATUS_AUTH_TIMEOUT;
5b435de0 5472 }
123fef3f
AS		 5473 conn_params.bssid = profile->bssid;
5474 conn_params.req_ie = conn_info->req_ie;
5475 conn_params.req_ie_len = conn_info->req_ie_len;
5476 conn_params.resp_ie = conn_info->resp_ie;
5477 conn_params.resp_ie_len = conn_info->resp_ie_len;
5478 cfg80211_connect_done(ndev, &conn_params, GFP_KERNEL);
16886735
AS		 5479 brcmf_dbg(CONN, "Report connect result - connection %s\n",
5480 completed ? "succeeded" : "failed");
5b435de0 5481 }
d96b801f 5482 brcmf_dbg(TRACE, "Exit\n");
12f32370 5483 return 0;
5b435de0
AS		 5484}
5485
5486static s32
27a68fe3 5487brcmf_notify_connect_status_ap(struct brcmf_cfg80211_info *cfg,
1a873342
HM		 5488 struct net_device *ndev,
5489 const struct brcmf_event_msg *e, void *data)
5490{
7ee29602 5491 static int generation;
5c36b99a
AS		 5492 u32 event = e->event_code;
5493 u32 reason = e->reason;
1a873342
HM		 5494 struct station_info sinfo;
5495
e1c122d5
RM		 5496 brcmf_dbg(CONN, "event %s (%u), reason %d\n",
5497 brcmf_fweh_event_name(event), event, reason);
5f4f9f11
AS		 5498 if (event == BRCMF_E_LINK && reason == BRCMF_E_REASON_LINK_BSSCFG_DIS &&
5499 ndev != cfg_to_ndev(cfg)) {
5500 brcmf_dbg(CONN, "AP mode link down\n");
5501 complete(&cfg->vif_disabled);
5502 return 0;
5503 }
1a873342 5504
1a873342 5505 if (((event == BRCMF_E_ASSOC_IND) || (event == BRCMF_E_REASSOC_IND)) &&
7ee29602
HM		 5506 (reason == BRCMF_E_STATUS_SUCCESS)) {
5507 memset(&sinfo, 0, sizeof(sinfo));
1a873342 5508 if (!data) {
57d6e91a 5509 brcmf_err("No IEs present in ASSOC/REASSOC_IND");
1a873342
HM		 5510 return -EINVAL;
5511 }
5512 sinfo.assoc_req_ies = data;
7ee29602 5513 sinfo.assoc_req_ies_len = e->datalen;
1a873342
HM		 5514 generation++;
5515 sinfo.generation = generation;
7ee29602 5516 cfg80211_new_sta(ndev, e->addr, &sinfo, GFP_KERNEL);
1a873342
HM		 5517 } else if ((event == BRCMF_E_DISASSOC_IND) ||
5518 (event == BRCMF_E_DEAUTH_IND) ||
5519 (event == BRCMF_E_DEAUTH)) {
7ee29602 5520 cfg80211_del_sta(ndev, e->addr, GFP_KERNEL);
1a873342 5521 }
7ee29602 5522 return 0;
1a873342
HM		 5523}
5524
5b435de0 5525static s32
1993732e 5526brcmf_notify_connect_status(struct brcmf_if *ifp,
5b435de0
AS		 5527 const struct brcmf_event_msg *e, void *data)
5528{
1993732e
AS		 5529 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5530 struct net_device *ndev = ifp->ndev;
c1179033 5531 struct brcmf_cfg80211_profile *profile = &ifp->vif->profile;
fe94f3a4 5532 struct ieee80211_channel *chan;
5b435de0
AS		 5533 s32 err = 0;
5534
8851cce0
HM		 5535 if ((e->event_code == BRCMF_E_DEAUTH) ||
5536 (e->event_code == BRCMF_E_DEAUTH_IND) ||
5537 (e->event_code == BRCMF_E_DISASSOC_IND) ||
5538 ((e->event_code == BRCMF_E_LINK) && (!e->flags))) {
5539 brcmf_proto_delete_peer(ifp->drvr, ifp->ifidx, (u8 *)e->addr);
5540 }
5541
967fe2c8 5542 if (brcmf_is_apmode(ifp->vif)) {
27a68fe3 5543 err = brcmf_notify_connect_status_ap(cfg, ndev, e, data);
b8a64f0e 5544 } else if (brcmf_is_linkup(ifp->vif, e)) {
16886735 5545 brcmf_dbg(CONN, "Linkup\n");
128ce3b6 5546 if (brcmf_is_ibssmode(ifp->vif)) {
b0a79088 5547 brcmf_inform_ibss(cfg, ndev, e->addr);
fe94f3a4 5548 chan = ieee80211_get_channel(cfg->wiphy, cfg->channel);
6c8c4f72 5549 memcpy(profile->bssid, e->addr, ETH_ALEN);
fe94f3a4 5550 cfg80211_ibss_joined(ndev, e->addr, chan, GFP_KERNEL);
c1179033
AS		 5551 clear_bit(BRCMF_VIF_STATUS_CONNECTING,
5552 &ifp->vif->sme_state);
5553 set_bit(BRCMF_VIF_STATUS_CONNECTED,
5554 &ifp->vif->sme_state);
5b435de0 5555 } else
27a68fe3 5556 brcmf_bss_connect_done(cfg, ndev, e, true);
92121e69 5557 brcmf_net_setcarrier(ifp, true);
903e0eee 5558 } else if (brcmf_is_linkdown(e)) {
16886735 5559 brcmf_dbg(CONN, "Linkdown\n");
128ce3b6 5560 if (!brcmf_is_ibssmode(ifp->vif)) {
27a68fe3 5561 brcmf_bss_connect_done(cfg, ndev, e, false);
42e0ed0d
HM		 5562 brcmf_link_down(ifp->vif,
5563 brcmf_map_fw_linkdown_reason(e));
5564 brcmf_init_prof(ndev_to_prof(ndev));
5565 if (ndev != cfg_to_ndev(cfg))
5566 complete(&cfg->vif_disabled);
5567 brcmf_net_setcarrier(ifp, false);
5b435de0 5568 }
27a68fe3 5569 } else if (brcmf_is_nonetwork(cfg, e)) {
128ce3b6 5570 if (brcmf_is_ibssmode(ifp->vif))
c1179033
AS		 5571 clear_bit(BRCMF_VIF_STATUS_CONNECTING,
5572 &ifp->vif->sme_state);
5b435de0 5573 else
27a68fe3 5574 brcmf_bss_connect_done(cfg, ndev, e, false);
5b435de0
AS		 5575 }
5576
5577 return err;
5578}
5579
5580static s32
1993732e 5581brcmf_notify_roaming_status(struct brcmf_if *ifp,
5b435de0
AS		 5582 const struct brcmf_event_msg *e, void *data)
5583{
1993732e 5584 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5c36b99a
AS		 5585 u32 event = e->event_code;
5586 u32 status = e->status;
5b435de0
AS		 5587
5588 if (event == BRCMF_E_ROAM && status == BRCMF_E_STATUS_SUCCESS) {
8b943e36
CHH		 5589 if (test_bit(BRCMF_VIF_STATUS_CONNECTED,
5590 &ifp->vif->sme_state)) {
1993732e 5591 brcmf_bss_roaming_done(cfg, ifp->ndev, e);
8b943e36 5592 } else {
1993732e 5593 brcmf_bss_connect_done(cfg, ifp->ndev, e, true);
8b943e36
CHH		 5594 brcmf_net_setcarrier(ifp, true);
5595 }
5b435de0
AS		 5596 }
5597
12f32370 5598 return 0;
5b435de0
AS		 5599}
5600
5601static s32
1993732e 5602brcmf_notify_mic_status(struct brcmf_if *ifp,
5b435de0
AS		 5603 const struct brcmf_event_msg *e, void *data)
5604{
5c36b99a 5605 u16 flags = e->flags;
5b435de0
AS		 5606 enum nl80211_key_type key_type;
5607
5608 if (flags & BRCMF_EVENT_MSG_GROUP)
5609 key_type = NL80211_KEYTYPE_GROUP;
5610 else
5611 key_type = NL80211_KEYTYPE_PAIRWISE;
5612
1993732e 5613 cfg80211_michael_mic_failure(ifp->ndev, (u8 *)&e->addr, key_type, -1,
5b435de0
AS		 5614 NULL, GFP_KERNEL);
5615
5616 return 0;
5617}
5618
d3c0b633
AS		 5619static s32 brcmf_notify_vif_event(struct brcmf_if *ifp,
5620 const struct brcmf_event_msg *e, void *data)
5621{
5622 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5623 struct brcmf_if_event *ifevent = (struct brcmf_if_event *)data;
5624 struct brcmf_cfg80211_vif_event *event = &cfg->vif_event;
5625 struct brcmf_cfg80211_vif *vif;
5626
37a869ec 5627 brcmf_dbg(TRACE, "Enter: action %u flags %u ifidx %u bsscfgidx %u\n",
d3c0b633 5628 ifevent->action, ifevent->flags, ifevent->ifidx,
37a869ec 5629 ifevent->bsscfgidx);
d3c0b633 5630
b64abcb7 5631 spin_lock(&event->vif_event_lock);
d3c0b633
AS		 5632 event->action = ifevent->action;
5633 vif = event->vif;
5634
5635 switch (ifevent->action) {
5636 case BRCMF_E_IF_ADD:
5637 /* waiting process may have timed out */
dc4a787c 5638 if (!cfg->vif_event.vif) {
b64abcb7 5639 spin_unlock(&event->vif_event_lock);
d3c0b633 5640 return -EBADF;
dc4a787c 5641 }
d3c0b633
AS		 5642
5643 ifp->vif = vif;
5644 vif->ifp = ifp;
01b8e7db
AS		 5645 if (ifp->ndev) {
5646 vif->wdev.netdev = ifp->ndev;
5647 ifp->ndev->ieee80211_ptr = &vif->wdev;
5648 SET_NETDEV_DEV(ifp->ndev, wiphy_dev(cfg->wiphy));
5649 }
b64abcb7 5650 spin_unlock(&event->vif_event_lock);
d3c0b633 5651 wake_up(&event->vif_wq);
4b3a89de 5652 return 0;
d3c0b633
AS		 5653
5654 case BRCMF_E_IF_DEL:
b64abcb7 5655 spin_unlock(&event->vif_event_lock);
d3c0b633
AS		 5656 /* event may not be upon user request */
5657 if (brcmf_cfg80211_vif_event_armed(cfg))
5658 wake_up(&event->vif_wq);
5659 return 0;
5660
7a5c1f64 5661 case BRCMF_E_IF_CHANGE:
b64abcb7 5662 spin_unlock(&event->vif_event_lock);
7a5c1f64
HM		 5663 wake_up(&event->vif_wq);
5664 return 0;
5665
d3c0b633 5666 default:
b64abcb7 5667 spin_unlock(&event->vif_event_lock);
d3c0b633
AS		 5668 break;
5669 }
5670 return -EINVAL;
5671}
5672
5b435de0
AS		 5673static void brcmf_init_conf(struct brcmf_cfg80211_conf *conf)
5674{
5b435de0
AS		 5675 conf->frag_threshold = (u32)-1;
5676 conf->rts_threshold = (u32)-1;
5677 conf->retry_short = (u32)-1;
5678 conf->retry_long = (u32)-1;
5b435de0
AS		 5679}
5680
5c36b99a 5681static void brcmf_register_event_handlers(struct brcmf_cfg80211_info *cfg)
5b435de0 5682{
5c36b99a
AS		 5683 brcmf_fweh_register(cfg->pub, BRCMF_E_LINK,
5684 brcmf_notify_connect_status);
5685 brcmf_fweh_register(cfg->pub, BRCMF_E_DEAUTH_IND,
5686 brcmf_notify_connect_status);
5687 brcmf_fweh_register(cfg->pub, BRCMF_E_DEAUTH,
5688 brcmf_notify_connect_status);
5689 brcmf_fweh_register(cfg->pub, BRCMF_E_DISASSOC_IND,
5690 brcmf_notify_connect_status);
5691 brcmf_fweh_register(cfg->pub, BRCMF_E_ASSOC_IND,
5692 brcmf_notify_connect_status);
5693 brcmf_fweh_register(cfg->pub, BRCMF_E_REASSOC_IND,
5694 brcmf_notify_connect_status);
5695 brcmf_fweh_register(cfg->pub, BRCMF_E_ROAM,
5696 brcmf_notify_roaming_status);
5697 brcmf_fweh_register(cfg->pub, BRCMF_E_MIC_ERROR,
5698 brcmf_notify_mic_status);
5699 brcmf_fweh_register(cfg->pub, BRCMF_E_SET_SSID,
5700 brcmf_notify_connect_status);
5701 brcmf_fweh_register(cfg->pub, BRCMF_E_PFN_NET_FOUND,
5702 brcmf_notify_sched_scan_results);
d3c0b633
AS		 5703 brcmf_fweh_register(cfg->pub, BRCMF_E_IF,
5704 brcmf_notify_vif_event);
0de8aace 5705 brcmf_fweh_register(cfg->pub, BRCMF_E_P2P_PROBEREQ_MSG,
6eda4e2c 5706 brcmf_p2p_notify_rx_mgmt_p2p_probereq);
0de8aace
HM		 5707 brcmf_fweh_register(cfg->pub, BRCMF_E_P2P_DISC_LISTEN_COMPLETE,
5708 brcmf_p2p_notify_listen_complete);
e6da3400
HM		 5709 brcmf_fweh_register(cfg->pub, BRCMF_E_ACTION_FRAME_RX,
5710 brcmf_p2p_notify_action_frame_rx);
18e2f61d
HM		 5711 brcmf_fweh_register(cfg->pub, BRCMF_E_ACTION_FRAME_COMPLETE,
5712 brcmf_p2p_notify_action_tx_complete);
6eda4e2c
HM		 5713 brcmf_fweh_register(cfg->pub, BRCMF_E_ACTION_FRAME_OFF_CHAN_COMPLETE,
5714 brcmf_p2p_notify_action_tx_complete);
b8a64f0e
AS		 5715 brcmf_fweh_register(cfg->pub, BRCMF_E_PSK_SUP,
5716 brcmf_notify_connect_status);
5b435de0
AS		 5717}
5718
27a68fe3
AS		 5719static void brcmf_deinit_priv_mem(struct brcmf_cfg80211_info *cfg)
5720{
27a68fe3
AS		 5721 kfree(cfg->conf);
5722 cfg->conf = NULL;
27a68fe3
AS		 5723 kfree(cfg->extra_buf);
5724 cfg->extra_buf = NULL;
3021ad9a
HM		 5725 kfree(cfg->wowl.nd);
5726 cfg->wowl.nd = NULL;
5727 kfree(cfg->wowl.nd_info);
5728 cfg->wowl.nd_info = NULL;
d5367334
HM		 5729 kfree(cfg->escan_info.escan_buf);
5730 cfg->escan_info.escan_buf = NULL;
27a68fe3
AS		 5731}
5732
5733static s32 brcmf_init_priv_mem(struct brcmf_cfg80211_info *cfg)
5734{
27a68fe3
AS		 5735 cfg->conf = kzalloc(sizeof(*cfg->conf), GFP_KERNEL);
5736 if (!cfg->conf)
5b435de0 5737 goto init_priv_mem_out;
27a68fe3
AS		 5738 cfg->extra_buf = kzalloc(WL_EXTRA_BUF_MAX, GFP_KERNEL);
5739 if (!cfg->extra_buf)
5b435de0 5740 goto init_priv_mem_out;
3021ad9a
HM		 5741 cfg->wowl.nd = kzalloc(sizeof(*cfg->wowl.nd) + sizeof(u32), GFP_KERNEL);
5742 if (!cfg->wowl.nd)
5743 goto init_priv_mem_out;
5744 cfg->wowl.nd_info = kzalloc(sizeof(*cfg->wowl.nd_info) +
5745 sizeof(struct cfg80211_wowlan_nd_match *),
5746 GFP_KERNEL);
5747 if (!cfg->wowl.nd_info)
5748 goto init_priv_mem_out;
d5367334
HM		 5749 cfg->escan_info.escan_buf = kzalloc(BRCMF_ESCAN_BUF_SIZE, GFP_KERNEL);
5750 if (!cfg->escan_info.escan_buf)
5751 goto init_priv_mem_out;
5b435de0
AS		 5752
5753 return 0;
5754
5755init_priv_mem_out:
27a68fe3 5756 brcmf_deinit_priv_mem(cfg);
5b435de0
AS		 5757
5758 return -ENOMEM;
5759}
5760
27a68fe3 5761static s32 wl_init_priv(struct brcmf_cfg80211_info *cfg)
5b435de0
AS		 5762{
5763 s32 err = 0;
5764
27a68fe3
AS		 5765 cfg->scan_request = NULL;
5766 cfg->pwr_save = true;
68ca395f 5767 cfg->dongle_up = false; /* dongle is not up yet */
27a68fe3 5768 err = brcmf_init_priv_mem(cfg);
5b435de0
AS		 5769 if (err)
5770 return err;
5c36b99a 5771 brcmf_register_event_handlers(cfg);
27a68fe3 5772 mutex_init(&cfg->usr_sync);
27a68fe3
AS		 5773 brcmf_init_escan(cfg);
5774 brcmf_init_conf(cfg->conf);
5f4f9f11 5775 init_completion(&cfg->vif_disabled);
5b435de0
AS		 5776 return err;
5777}
5778
27a68fe3 5779static void wl_deinit_priv(struct brcmf_cfg80211_info *cfg)
5b435de0 5780{
27a68fe3 5781 cfg->dongle_up = false; /* dongle down */
27a68fe3
AS		 5782 brcmf_abort_scanning(cfg);
5783 brcmf_deinit_priv_mem(cfg);
5b435de0
AS		 5784}
5785
d3c0b633
AS		 5786static void init_vif_event(struct brcmf_cfg80211_vif_event *event)
5787{
5788 init_waitqueue_head(&event->vif_wq);
b64abcb7 5789 spin_lock_init(&event->vif_event_lock);
d3c0b633
AS		 5790}
5791
1119e23e 5792static s32 brcmf_dongle_roam(struct brcmf_if *ifp)
5b435de0 5793{
1119e23e
HM		 5794 s32 err;
5795 u32 bcn_timeout;
f588bc0c
AS		 5796 __le32 roamtrigger[2];
5797 __le32 roam_delta[2];
5b435de0 5798
1119e23e 5799 /* Configure beacon timeout value based upon roaming setting */
7d34b056 5800 if (ifp->drvr->settings->roamoff)
1119e23e
HM		 5801 bcn_timeout = BRCMF_DEFAULT_BCN_TIMEOUT_ROAM_OFF;
5802 else
5803 bcn_timeout = BRCMF_DEFAULT_BCN_TIMEOUT_ROAM_ON;
5804 err = brcmf_fil_iovar_int_set(ifp, "bcn_timeout", bcn_timeout);
5805 if (err) {
5806 brcmf_err("bcn_timeout error (%d)\n", err);
5807 goto roam_setup_done;
5b435de0
AS		 5808 }
5809
1119e23e
HM		 5810 /* Enable/Disable built-in roaming to allow supplicant to take care of
5811 * roaming.
5b435de0 5812 */
68ca395f 5813 brcmf_dbg(INFO, "Internal Roaming = %s\n",
7d34b056
HM		 5814 ifp->drvr->settings->roamoff ? "Off" : "On");
5815 err = brcmf_fil_iovar_int_set(ifp, "roam_off",
5816 ifp->drvr->settings->roamoff);
5b435de0 5817 if (err) {
57d6e91a 5818 brcmf_err("roam_off error (%d)\n", err);
1119e23e 5819 goto roam_setup_done;
5b435de0
AS		 5820 }
5821
f588bc0c
AS		 5822 roamtrigger[0] = cpu_to_le32(WL_ROAM_TRIGGER_LEVEL);
5823 roamtrigger[1] = cpu_to_le32(BRCM_BAND_ALL);
ac24be6f 5824 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_ROAM_TRIGGER,
81f5dcb8 5825 (void *)roamtrigger, sizeof(roamtrigger));
5b435de0 5826 if (err) {
57d6e91a 5827 brcmf_err("WLC_SET_ROAM_TRIGGER error (%d)\n", err);
1119e23e 5828 goto roam_setup_done;
5b435de0
AS		 5829 }
5830
f588bc0c
AS		 5831 roam_delta[0] = cpu_to_le32(WL_ROAM_DELTA);
5832 roam_delta[1] = cpu_to_le32(BRCM_BAND_ALL);
ac24be6f 5833 err = brcmf_fil_cmd_data_set(ifp, BRCMF_C_SET_ROAM_DELTA,
81f5dcb8 5834 (void *)roam_delta, sizeof(roam_delta));
5b435de0 5835 if (err) {
57d6e91a 5836 brcmf_err("WLC_SET_ROAM_DELTA error (%d)\n", err);
1119e23e 5837 goto roam_setup_done;
5b435de0
AS		 5838 }
5839
1119e23e 5840roam_setup_done:
5b435de0
AS		 5841 return err;
5842}
5843
5844static s32
1678ba8e 5845brcmf_dongle_scantime(struct brcmf_if *ifp)
5b435de0
AS		 5846{
5847 s32 err = 0;
5848
ac24be6f 5849 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_SCAN_CHANNEL_TIME,
1678ba8e 5850 BRCMF_SCAN_CHANNEL_TIME);
5b435de0 5851 if (err) {
1678ba8e 5852 brcmf_err("Scan assoc time error (%d)\n", err);
5b435de0
AS		 5853 goto dongle_scantime_out;
5854 }
ac24be6f 5855 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_SCAN_UNASSOC_TIME,
1678ba8e 5856 BRCMF_SCAN_UNASSOC_TIME);
5b435de0 5857 if (err) {
1678ba8e 5858 brcmf_err("Scan unassoc time error (%d)\n", err);
5b435de0
AS		 5859 goto dongle_scantime_out;
5860 }
5861
ac24be6f 5862 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_SCAN_PASSIVE_TIME,
1678ba8e 5863 BRCMF_SCAN_PASSIVE_TIME);
5b435de0 5864 if (err) {
1678ba8e 5865 brcmf_err("Scan passive time error (%d)\n", err);
5b435de0
AS		 5866 goto dongle_scantime_out;
5867 }
5868
5869dongle_scantime_out:
5870 return err;
5871}
5872
b48d8916
AS		 5873static void brcmf_update_bw40_channel_flag(struct ieee80211_channel *channel,
5874 struct brcmu_chan *ch)
5875{
5876 u32 ht40_flag;
d48200ba 5877
b48d8916
AS		 5878 ht40_flag = channel->flags & IEEE80211_CHAN_NO_HT40;
5879 if (ch->sb == BRCMU_CHAN_SB_U) {
5880 if (ht40_flag == IEEE80211_CHAN_NO_HT40)
5881 channel->flags &= ~IEEE80211_CHAN_NO_HT40;
5882 channel->flags |= IEEE80211_CHAN_NO_HT40PLUS;
5883 } else {
5884 /* It should be one of
5885 * IEEE80211_CHAN_NO_HT40 or
5886 * IEEE80211_CHAN_NO_HT40PLUS
5887 */
5888 channel->flags &= ~IEEE80211_CHAN_NO_HT40;
5889 if (ht40_flag == IEEE80211_CHAN_NO_HT40)
5890 channel->flags |= IEEE80211_CHAN_NO_HT40MINUS;
5891 }
5892}
5893
5894static int brcmf_construct_chaninfo(struct brcmf_cfg80211_info *cfg,
5895 u32 bw_cap[])
d48200ba
HM		 5896{
5897 struct brcmf_if *ifp = netdev_priv(cfg_to_ndev(cfg));
b48d8916
AS		 5898 struct ieee80211_supported_band *band;
5899 struct ieee80211_channel *channel;
5900 struct wiphy *wiphy;
d48200ba 5901 struct brcmf_chanspec_list *list;
83cf17aa 5902 struct brcmu_chan ch;
b48d8916 5903 int err;
d48200ba
HM		 5904 u8 *pbuf;
5905 u32 i, j;
5906 u32 total;
b48d8916 5907 u32 chaninfo;
d48200ba
HM		 5908
5909 pbuf = kzalloc(BRCMF_DCMD_MEDLEN, GFP_KERNEL);
5910
5911 if (pbuf == NULL)
5912 return -ENOMEM;
5913
5914 list = (struct brcmf_chanspec_list *)pbuf;
5915
5916 err = brcmf_fil_iovar_data_get(ifp, "chanspecs", pbuf,
5917 BRCMF_DCMD_MEDLEN);
5918 if (err) {
5919 brcmf_err("get chanspecs error (%d)\n", err);
b48d8916 5920 goto fail_pbuf;
d48200ba
HM		 5921 }
5922
b48d8916 5923 wiphy = cfg_to_wiphy(cfg);
57fbcce3 5924 band = wiphy->bands[NL80211_BAND_2GHZ];
58de92d2
AS		 5925 if (band)
5926 for (i = 0; i < band->n_channels; i++)
5927 band->channels[i].flags = IEEE80211_CHAN_DISABLED;
57fbcce3 5928 band = wiphy->bands[NL80211_BAND_5GHZ];
58de92d2
AS		 5929 if (band)
5930 for (i = 0; i < band->n_channels; i++)
5931 band->channels[i].flags = IEEE80211_CHAN_DISABLED;
d48200ba
HM		 5932
5933 total = le32_to_cpu(list->count);
5934 for (i = 0; i < total; i++) {
83cf17aa
FL		 5935 ch.chspec = (u16)le32_to_cpu(list->element[i]);
5936 cfg->d11inf.decchspec(&ch);
d48200ba 5937
83cf17aa 5938 if (ch.band == BRCMU_CHAN_BAND_2G) {
57fbcce3 5939 band = wiphy->bands[NL80211_BAND_2GHZ];
83cf17aa 5940 } else if (ch.band == BRCMU_CHAN_BAND_5G) {
57fbcce3 5941 band = wiphy->bands[NL80211_BAND_5GHZ];
d48200ba 5942 } else {
2375d970 5943 brcmf_err("Invalid channel Spec. 0x%x.\n", ch.chspec);
d48200ba
HM		 5944 continue;
5945 }
58de92d2
AS		 5946 if (!band)
5947 continue;
b48d8916 5948 if (!(bw_cap[band->band] & WLC_BW_40MHZ_BIT) &&
2375d970 5949 ch.bw == BRCMU_CHAN_BW_40)
d48200ba 5950 continue;
b48d8916 5951 if (!(bw_cap[band->band] & WLC_BW_80MHZ_BIT) &&
ee942ecc
AS		 5952 ch.bw == BRCMU_CHAN_BW_80)
5953 continue;
b48d8916 5954
77c0d0cd 5955 channel = NULL;
b48d8916 5956 for (j = 0; j < band->n_channels; j++) {
77c0d0cd
RM		 5957 if (band->channels[j].hw_value == ch.control_ch_num) {
5958 channel = &band->channels[j];
d48200ba
HM		 5959 break;
5960 }
5961 }
77c0d0cd
RM		 5962 if (!channel) {
5963 /* It seems firmware supports some channel we never
5964 * considered. Something new in IEEE standard?
5965 */
5966 brcmf_err("Ignoring unexpected firmware channel %d\n",
5967 ch.control_ch_num);
5968 continue;
5969 }
b48d8916 5970
0f83ff69
RM		 5971 if (channel->orig_flags & IEEE80211_CHAN_DISABLED)
5972 continue;
5973
b48d8916
AS		 5974 /* assuming the chanspecs order is HT20,
5975 * HT40 upper, HT40 lower, and VHT80.
5976 */
5977 if (ch.bw == BRCMU_CHAN_BW_80) {
77c0d0cd 5978 channel->flags &= ~IEEE80211_CHAN_NO_80MHZ;
b48d8916 5979 } else if (ch.bw == BRCMU_CHAN_BW_40) {
77c0d0cd 5980 brcmf_update_bw40_channel_flag(channel, &ch);
b48d8916 5981 } else {
58de92d2
AS		 5982 /* enable the channel and disable other bandwidths
5983 * for now as mentioned order assure they are enabled
5984 * for subsequent chanspecs.
ee942ecc 5985 */
77c0d0cd
RM		 5986 channel->flags = IEEE80211_CHAN_NO_HT40 |
5987 IEEE80211_CHAN_NO_80MHZ;
b48d8916
AS		 5988 ch.bw = BRCMU_CHAN_BW_20;
5989 cfg->d11inf.encchspec(&ch);
5990 chaninfo = ch.chspec;
5991 err = brcmf_fil_bsscfg_int_get(ifp, "per_chan_info",
5992 &chaninfo);
5993 if (!err) {
5994 if (chaninfo & WL_CHAN_RADAR)
77c0d0cd 5995 channel->flags |=
b48d8916
AS		 5996 (IEEE80211_CHAN_RADAR |
5997 IEEE80211_CHAN_NO_IR);
5998 if (chaninfo & WL_CHAN_PASSIVE)
77c0d0cd 5999 channel->flags |=
b48d8916 6000 IEEE80211_CHAN_NO_IR;
d48200ba 6001 }
d48200ba
HM		 6002 }
6003 }
b48d8916 6004
b48d8916 6005fail_pbuf:
d48200ba
HM		 6006 kfree(pbuf);
6007 return err;
6008}
6009
b48d8916 6010static int brcmf_enable_bw40_2g(struct brcmf_cfg80211_info *cfg)
aa70b4fa 6011{
b48d8916
AS		 6012 struct brcmf_if *ifp = netdev_priv(cfg_to_ndev(cfg));
6013 struct ieee80211_supported_band *band;
aa70b4fa 6014 struct brcmf_fil_bwcap_le band_bwcap;
b48d8916
AS		 6015 struct brcmf_chanspec_list *list;
6016 u8 *pbuf;
aa70b4fa
AS		 6017 u32 val;
6018 int err;
b48d8916
AS		 6019 struct brcmu_chan ch;
6020 u32 num_chan;
6021 int i, j;
aa70b4fa
AS		 6022
6023 /* verify support for bw_cap command */
6024 val = WLC_BAND_5G;
6025 err = brcmf_fil_iovar_int_get(ifp, "bw_cap", &val);
6026
6027 if (!err) {
6028 /* only set 2G bandwidth using bw_cap command */
6029 band_bwcap.band = cpu_to_le32(WLC_BAND_2G);
6030 band_bwcap.bw_cap = cpu_to_le32(WLC_BW_CAP_40MHZ);
6031 err = brcmf_fil_iovar_data_set(ifp, "bw_cap", &band_bwcap,
6032 sizeof(band_bwcap));
6033 } else {
6034 brcmf_dbg(INFO, "fallback to mimo_bw_cap\n");
6035 val = WLC_N_BW_40ALL;
6036 err = brcmf_fil_iovar_int_set(ifp, "mimo_bw_cap", val);
6037 }
b48d8916
AS		 6038
6039 if (!err) {
6040 /* update channel info in 2G band */
6041 pbuf = kzalloc(BRCMF_DCMD_MEDLEN, GFP_KERNEL);
6042
6043 if (pbuf == NULL)
6044 return -ENOMEM;
6045
6046 ch.band = BRCMU_CHAN_BAND_2G;
6047 ch.bw = BRCMU_CHAN_BW_40;
fac7d2a3 6048 ch.sb = BRCMU_CHAN_SB_NONE;
b48d8916
AS		 6049 ch.chnum = 0;
6050 cfg->d11inf.encchspec(&ch);
6051
6052 /* pass encoded chanspec in query */
6053 *(__le16 *)pbuf = cpu_to_le16(ch.chspec);
6054
6055 err = brcmf_fil_iovar_data_get(ifp, "chanspecs", pbuf,
6056 BRCMF_DCMD_MEDLEN);
6057 if (err) {
6058 brcmf_err("get chanspecs error (%d)\n", err);
6059 kfree(pbuf);
6060 return err;
6061 }
6062
57fbcce3 6063 band = cfg_to_wiphy(cfg)->bands[NL80211_BAND_2GHZ];
b48d8916
AS		 6064 list = (struct brcmf_chanspec_list *)pbuf;
6065 num_chan = le32_to_cpu(list->count);
6066 for (i = 0; i < num_chan; i++) {
6067 ch.chspec = (u16)le32_to_cpu(list->element[i]);
6068 cfg->d11inf.decchspec(&ch);
6069 if (WARN_ON(ch.band != BRCMU_CHAN_BAND_2G))
6070 continue;
6071 if (WARN_ON(ch.bw != BRCMU_CHAN_BW_40))
6072 continue;
6073 for (j = 0; j < band->n_channels; j++) {
4712d88a 6074 if (band->channels[j].hw_value == ch.control_ch_num)
b48d8916
AS		 6075 break;
6076 }
6077 if (WARN_ON(j == band->n_channels))
6078 continue;
6079
6080 brcmf_update_bw40_channel_flag(&band->channels[j], &ch);
6081 }
fac7d2a3 6082 kfree(pbuf);
b48d8916 6083 }
aa70b4fa
AS		 6084 return err;
6085}
6086
2375d970
AS		 6087static void brcmf_get_bwcap(struct brcmf_if *ifp, u32 bw_cap[])
6088{
6089 u32 band, mimo_bwcap;
6090 int err;
6091
6092 band = WLC_BAND_2G;
6093 err = brcmf_fil_iovar_int_get(ifp, "bw_cap", &band);
6094 if (!err) {
57fbcce3 6095 bw_cap[NL80211_BAND_2GHZ] = band;
2375d970
AS		 6096 band = WLC_BAND_5G;
6097 err = brcmf_fil_iovar_int_get(ifp, "bw_cap", &band);
6098 if (!err) {
57fbcce3 6099 bw_cap[NL80211_BAND_5GHZ] = band;
2375d970
AS		 6100 return;
6101 }
6102 WARN_ON(1);
6103 return;
6104 }
6105 brcmf_dbg(INFO, "fallback to mimo_bw_cap info\n");
6106 mimo_bwcap = 0;
6107 err = brcmf_fil_iovar_int_get(ifp, "mimo_bw_cap", &mimo_bwcap);
6108 if (err)
6109 /* assume 20MHz if firmware does not give a clue */
6110 mimo_bwcap = WLC_N_BW_20ALL;
6111
6112 switch (mimo_bwcap) {
6113 case WLC_N_BW_40ALL:
57fbcce3 6114 bw_cap[NL80211_BAND_2GHZ] |= WLC_BW_40MHZ_BIT;
2375d970
AS		 6115 /* fall-thru */
6116 case WLC_N_BW_20IN2G_40IN5G:
57fbcce3 6117 bw_cap[NL80211_BAND_5GHZ] |= WLC_BW_40MHZ_BIT;
2375d970
AS		 6118 /* fall-thru */
6119 case WLC_N_BW_20ALL:
57fbcce3
JB		 6120 bw_cap[NL80211_BAND_2GHZ] |= WLC_BW_20MHZ_BIT;
6121 bw_cap[NL80211_BAND_5GHZ] |= WLC_BW_20MHZ_BIT;
2375d970
AS		 6122 break;
6123 default:
6124 brcmf_err("invalid mimo_bw_cap value\n");
6125 }
6126}
d48200ba 6127
18d6c535
AS		 6128static void brcmf_update_ht_cap(struct ieee80211_supported_band *band,
6129 u32 bw_cap[2], u32 nchain)
6130{
6131 band->ht_cap.ht_supported = true;
6132 if (bw_cap[band->band] & WLC_BW_40MHZ_BIT) {
6133 band->ht_cap.cap |= IEEE80211_HT_CAP_SGI_40;
6134 band->ht_cap.cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
6135 }
6136 band->ht_cap.cap |= IEEE80211_HT_CAP_SGI_20;
6137 band->ht_cap.cap |= IEEE80211_HT_CAP_DSSSCCK40;
6138 band->ht_cap.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
6139 band->ht_cap.ampdu_density = IEEE80211_HT_MPDU_DENSITY_16;
6140 memset(band->ht_cap.mcs.rx_mask, 0xff, nchain);
6141 band->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
6142}
6143
6144static __le16 brcmf_get_mcs_map(u32 nchain, enum ieee80211_vht_mcs_support supp)
6145{
6146 u16 mcs_map;
6147 int i;
6148
6149 for (i = 0, mcs_map = 0xFFFF; i < nchain; i++)
6150 mcs_map = (mcs_map << 2) | supp;
6151
6152 return cpu_to_le16(mcs_map);
6153}
6154
6155static void brcmf_update_vht_cap(struct ieee80211_supported_band *band,
7bf65aa9
HM		 6156 u32 bw_cap[2], u32 nchain, u32 txstreams,
6157 u32 txbf_bfe_cap, u32 txbf_bfr_cap)
18d6c535
AS		 6158{
6159 __le16 mcs_map;
6160
6161 /* not allowed in 2.4G band */
57fbcce3 6162 if (band->band == NL80211_BAND_2GHZ)
18d6c535
AS		 6163 return;
6164
6165 band->vht_cap.vht_supported = true;
6166 /* 80MHz is mandatory */
6167 band->vht_cap.cap |= IEEE80211_VHT_CAP_SHORT_GI_80;
6168 if (bw_cap[band->band] & WLC_BW_160MHZ_BIT) {
6169 band->vht_cap.cap |= IEEE80211_VHT_CAP_SUPP_CHAN_WIDTH_160MHZ;
6170 band->vht_cap.cap |= IEEE80211_VHT_CAP_SHORT_GI_160;
6171 }
6172 /* all support 256-QAM */
6173 mcs_map = brcmf_get_mcs_map(nchain, IEEE80211_VHT_MCS_SUPPORT_0_9);
6174 band->vht_cap.vht_mcs.rx_mcs_map = mcs_map;
6175 band->vht_cap.vht_mcs.tx_mcs_map = mcs_map;
7bf65aa9
HM		 6176
6177 /* Beamforming support information */
6178 if (txbf_bfe_cap & BRCMF_TXBF_SU_BFE_CAP)
6179 band->vht_cap.cap |= IEEE80211_VHT_CAP_SU_BEAMFORMEE_CAPABLE;
6180 if (txbf_bfe_cap & BRCMF_TXBF_MU_BFE_CAP)
6181 band->vht_cap.cap |= IEEE80211_VHT_CAP_MU_BEAMFORMEE_CAPABLE;
6182 if (txbf_bfr_cap & BRCMF_TXBF_SU_BFR_CAP)
6183 band->vht_cap.cap |= IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE;
6184 if (txbf_bfr_cap & BRCMF_TXBF_MU_BFR_CAP)
6185 band->vht_cap.cap |= IEEE80211_VHT_CAP_MU_BEAMFORMER_CAPABLE;
6186
6187 if ((txbf_bfe_cap || txbf_bfr_cap) && (txstreams > 1)) {
6188 band->vht_cap.cap |=
6189 (2 << IEEE80211_VHT_CAP_BEAMFORMEE_STS_SHIFT);
6190 band->vht_cap.cap |= ((txstreams - 1) <<
6191 IEEE80211_VHT_CAP_SOUNDING_DIMENSIONS_SHIFT);
6192 band->vht_cap.cap |=
6193 IEEE80211_VHT_CAP_VHT_LINK_ADAPTATION_VHT_MRQ_MFB;
6194 }
18d6c535
AS		 6195}
6196
b48d8916 6197static int brcmf_setup_wiphybands(struct wiphy *wiphy)
5b435de0 6198{
b48d8916 6199 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
ac24be6f 6200 struct brcmf_if *ifp = netdev_priv(cfg_to_ndev(cfg));
18d6c535
AS		 6201 u32 nmode = 0;
6202 u32 vhtmode = 0;
b48d8916 6203 u32 bw_cap[2] = { WLC_BW_20MHZ_BIT, WLC_BW_20MHZ_BIT };
4aca7a18
DK		 6204 u32 rxchain;
6205 u32 nchain;
b48d8916 6206 int err;
d48200ba 6207 s32 i;
2375d970 6208 struct ieee80211_supported_band *band;
7bf65aa9
HM		 6209 u32 txstreams = 0;
6210 u32 txbf_bfe_cap = 0;
6211 u32 txbf_bfr_cap = 0;
5b435de0 6212
18d6c535 6213 (void)brcmf_fil_iovar_int_get(ifp, "vhtmode", &vhtmode);
d48200ba
HM		 6214 err = brcmf_fil_iovar_int_get(ifp, "nmode", &nmode);
6215 if (err) {
6216 brcmf_err("nmode error (%d)\n", err);
6217 } else {
2375d970 6218 brcmf_get_bwcap(ifp, bw_cap);
d48200ba 6219 }
18d6c535 6220 brcmf_dbg(INFO, "nmode=%d, vhtmode=%d, bw_cap=(%d, %d)\n",
57fbcce3
JB		 6221 nmode, vhtmode, bw_cap[NL80211_BAND_2GHZ],
6222 bw_cap[NL80211_BAND_5GHZ]);
d48200ba 6223
4aca7a18
DK		 6224 err = brcmf_fil_iovar_int_get(ifp, "rxchain", &rxchain);
6225 if (err) {
6226 brcmf_err("rxchain error (%d)\n", err);
6227 nchain = 1;
6228 } else {
6229 for (nchain = 0; rxchain; nchain++)
6230 rxchain = rxchain & (rxchain - 1);
6231 }
6232 brcmf_dbg(INFO, "nchain=%d\n", nchain);
6233
b48d8916 6234 err = brcmf_construct_chaninfo(cfg, bw_cap);
d48200ba 6235 if (err) {
b48d8916 6236 brcmf_err("brcmf_construct_chaninfo failed (%d)\n", err);
d48200ba
HM		 6237 return err;
6238 }
6239
7bf65aa9
HM		 6240 if (vhtmode) {
6241 (void)brcmf_fil_iovar_int_get(ifp, "txstreams", &txstreams);
6242 (void)brcmf_fil_iovar_int_get(ifp, "txbf_bfe_cap",
6243 &txbf_bfe_cap);
6244 (void)brcmf_fil_iovar_int_get(ifp, "txbf_bfr_cap",
6245 &txbf_bfr_cap);
6246 }
6247
b48d8916
AS		 6248 wiphy = cfg_to_wiphy(cfg);
6249 for (i = 0; i < ARRAY_SIZE(wiphy->bands); i++) {
6250 band = wiphy->bands[i];
6251 if (band == NULL)
2375d970 6252 continue;
d48200ba 6253
18d6c535
AS		 6254 if (nmode)
6255 brcmf_update_ht_cap(band, bw_cap, nchain);
6256 if (vhtmode)
7bf65aa9
HM		 6257 brcmf_update_vht_cap(band, bw_cap, nchain, txstreams,
6258 txbf_bfe_cap, txbf_bfr_cap);
d48200ba
HM		 6259 }
6260
b48d8916 6261 return 0;
5b435de0
AS		 6262}
6263
aa70b4fa
AS		 6264static const struct ieee80211_txrx_stypes
6265brcmf_txrx_stypes[NUM_NL80211_IFTYPES] = {
6266 [NL80211_IFTYPE_STATION] = {
6267 .tx = 0xffff,
6268 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
6269 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
6270 },
6271 [NL80211_IFTYPE_P2P_CLIENT] = {
6272 .tx = 0xffff,
6273 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
6274 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
6275 },
6276 [NL80211_IFTYPE_P2P_GO] = {
6277 .tx = 0xffff,
6278 .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
6279 BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
6280 BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
6281 BIT(IEEE80211_STYPE_DISASSOC >> 4) |
6282 BIT(IEEE80211_STYPE_AUTH >> 4) |
6283 BIT(IEEE80211_STYPE_DEAUTH >> 4) |
6284 BIT(IEEE80211_STYPE_ACTION >> 4)
6285 },
6286 [NL80211_IFTYPE_P2P_DEVICE] = {
6287 .tx = 0xffff,
6288 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
6289 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
6290 }
6291};
6292
0882dda3
AS		 6293/**
6294 * brcmf_setup_ifmodes() - determine interface modes and combinations.
6295 *
6296 * @wiphy: wiphy object.
6297 * @ifp: interface object needed for feat module api.
6298 *
6299 * The interface modes and combinations are determined dynamically here
6300 * based on firmware functionality.
6301 *
6302 * no p2p and no mbss:
6303 *
6304 * #STA <= 1, #AP <= 1, channels = 1, 2 total
6305 *
6306 * no p2p and mbss:
6307 *
6308 * #STA <= 1, #AP <= 1, channels = 1, 2 total
6309 * #AP <= 4, matching BI, channels = 1, 4 total
6310 *
6311 * p2p, no mchan, and mbss:
6312 *
6313 * #STA <= 1, #P2P-DEV <= 1, #{P2P-CL, P2P-GO} <= 1, channels = 1, 3 total
6314 * #STA <= 1, #P2P-DEV <= 1, #AP <= 1, #P2P-CL <= 1, channels = 1, 4 total
6315 * #AP <= 4, matching BI, channels = 1, 4 total
6316 *
6317 * p2p, mchan, and mbss:
6318 *
6319 * #STA <= 1, #P2P-DEV <= 1, #{P2P-CL, P2P-GO} <= 1, channels = 2, 3 total
6320 * #STA <= 1, #P2P-DEV <= 1, #AP <= 1, #P2P-CL <= 1, channels = 1, 4 total
6321 * #AP <= 4, matching BI, channels = 1, 4 total
6322 */
2e5f66fe
PF		 6323static int brcmf_setup_ifmodes(struct wiphy *wiphy, struct brcmf_if *ifp)
6324{
6325 struct ieee80211_iface_combination *combo = NULL;
0882dda3
AS		 6326 struct ieee80211_iface_limit *c0_limits = NULL;
6327 struct ieee80211_iface_limit *p2p_limits = NULL;
6328 struct ieee80211_iface_limit *mbss_limits = NULL;
6329 bool mbss, p2p;
6330 int i, c, n_combos;
6331
6332 mbss = brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MBSS);
6333 p2p = brcmf_feat_is_enabled(ifp, BRCMF_FEAT_P2P);
2e5f66fe 6334
0882dda3
AS		 6335 n_combos = 1 + !!p2p + !!mbss;
6336 combo = kcalloc(n_combos, sizeof(*combo), GFP_KERNEL);
2e5f66fe
PF		 6337 if (!combo)
6338 goto err;
6339
2e5f66fe
PF		 6340 wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
6341 BIT(NL80211_IFTYPE_ADHOC) |
6342 BIT(NL80211_IFTYPE_AP);
6343
0882dda3
AS		 6344 c = 0;
6345 i = 0;
f568adac
RM		 6346 c0_limits = kcalloc(p2p ? 3 : 2, sizeof(*c0_limits), GFP_KERNEL);
6347 if (!c0_limits)
6348 goto err;
0882dda3
AS		 6349 c0_limits[i].max = 1;
6350 c0_limits[i++].types = BIT(NL80211_IFTYPE_STATION);
6351 if (p2p) {
6352 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MCHAN))
6353 combo[c].num_different_channels = 2;
99976fc0
WF		 6354 else
6355 combo[c].num_different_channels = 1;
2e5f66fe
PF		 6356 wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_CLIENT) |
6357 BIT(NL80211_IFTYPE_P2P_GO) |
6358 BIT(NL80211_IFTYPE_P2P_DEVICE);
0882dda3
AS		 6359 c0_limits[i].max = 1;
6360 c0_limits[i++].types = BIT(NL80211_IFTYPE_P2P_DEVICE);
6361 c0_limits[i].max = 1;
6362 c0_limits[i++].types = BIT(NL80211_IFTYPE_P2P_CLIENT) |
6363 BIT(NL80211_IFTYPE_P2P_GO);
6364 } else {
99976fc0 6365 combo[c].num_different_channels = 1;
0882dda3
AS		 6366 c0_limits[i].max = 1;
6367 c0_limits[i++].types = BIT(NL80211_IFTYPE_AP);
6368 }
6369 combo[c].max_interfaces = i;
6370 combo[c].n_limits = i;
6371 combo[c].limits = c0_limits;
6372
6373 if (p2p) {
6374 c++;
6375 i = 0;
f568adac
RM		 6376 p2p_limits = kcalloc(4, sizeof(*p2p_limits), GFP_KERNEL);
6377 if (!p2p_limits)
6378 goto err;
0882dda3
AS		 6379 p2p_limits[i].max = 1;
6380 p2p_limits[i++].types = BIT(NL80211_IFTYPE_STATION);
6381 p2p_limits[i].max = 1;
6382 p2p_limits[i++].types = BIT(NL80211_IFTYPE_AP);
6383 p2p_limits[i].max = 1;
6384 p2p_limits[i++].types = BIT(NL80211_IFTYPE_P2P_CLIENT);
6385 p2p_limits[i].max = 1;
6386 p2p_limits[i++].types = BIT(NL80211_IFTYPE_P2P_DEVICE);
f568adac 6387 combo[c].num_different_channels = 1;
0882dda3
AS		 6388 combo[c].max_interfaces = i;
6389 combo[c].n_limits = i;
6390 combo[c].limits = p2p_limits;
6391 }
6392
6393 if (mbss) {
6394 c++;
f568adac
RM		 6395 i = 0;
6396 mbss_limits = kcalloc(1, sizeof(*mbss_limits), GFP_KERNEL);
6397 if (!mbss_limits)
6398 goto err;
6399 mbss_limits[i].max = 4;
6400 mbss_limits[i++].types = BIT(NL80211_IFTYPE_AP);
0882dda3
AS		 6401 combo[c].beacon_int_infra_match = true;
6402 combo[c].num_different_channels = 1;
0882dda3 6403 combo[c].max_interfaces = 4;
f568adac 6404 combo[c].n_limits = i;
0882dda3
AS		 6405 combo[c].limits = mbss_limits;
6406 }
f568adac 6407
0882dda3 6408 wiphy->n_iface_combinations = n_combos;
2e5f66fe 6409 wiphy->iface_combinations = combo;
2e5f66fe
PF		 6410 return 0;
6411
6412err:
0882dda3
AS		 6413 kfree(c0_limits);
6414 kfree(p2p_limits);
6415 kfree(mbss_limits);
2e5f66fe
PF		 6416 kfree(combo);
6417 return -ENOMEM;
6418}
6419
4eb3af7c 6420#ifdef CONFIG_PM
0b57010f 6421static const struct wiphy_wowlan_support brcmf_wowlan_support = {
4eb3af7c 6422 .flags = WIPHY_WOWLAN_MAGIC_PKT | WIPHY_WOWLAN_DISCONNECT,
b9a82f89
HM		 6423 .n_patterns = BRCMF_WOWL_MAXPATTERNS,
6424 .pattern_max_len = BRCMF_WOWL_MAXPATTERNSIZE,
6425 .pattern_min_len = 1,
6426 .max_pkt_offset = 1500,
4eb3af7c
HM		 6427};
6428#endif
6429
3021ad9a 6430static void brcmf_wiphy_wowl_params(struct wiphy *wiphy, struct brcmf_if *ifp)
4eb3af7c
HM		 6431{
6432#ifdef CONFIG_PM
3021ad9a 6433 struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy);
0b57010f
AVS		 6434 struct wiphy_wowlan_support *wowl;
6435
6436 wowl = kmemdup(&brcmf_wowlan_support, sizeof(brcmf_wowlan_support),
6437 GFP_KERNEL);
6438 if (!wowl) {
6439 brcmf_err("only support basic wowlan features\n");
6440 wiphy->wowlan = &brcmf_wowlan_support;
6441 return;
6442 }
3021ad9a
HM		 6443
6444 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_PNO)) {
5c22fb85 6445 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL_ND)) {
0b57010f
AVS		 6446 wowl->flags |= WIPHY_WOWLAN_NET_DETECT;
6447 wowl->max_nd_match_sets = BRCMF_PNO_MAX_PFN_COUNT;
5c22fb85 6448 init_waitqueue_head(&cfg->wowl.nd_data_wait);
3021ad9a
HM		 6449 }
6450 }
5c22fb85 6451 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL_GTK)) {
0b57010f
AVS		 6452 wowl->flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY;
6453 wowl->flags |= WIPHY_WOWLAN_GTK_REKEY_FAILURE;
5c22fb85
HM		 6454 }
6455
0b57010f 6456 wiphy->wowlan = wowl;
4eb3af7c
HM		 6457#endif
6458}
6459
b48d8916 6460static int brcmf_setup_wiphy(struct wiphy *wiphy, struct brcmf_if *ifp)
aa70b4fa 6461{
e3faa866 6462 struct brcmf_pub *drvr = ifp->drvr;
50f32e2d 6463 const struct ieee80211_iface_combination *combo;
58de92d2 6464 struct ieee80211_supported_band *band;
50f32e2d 6465 u16 max_interfaces = 0;
94ed6ffb 6466 bool gscan;
58de92d2
AS		 6467 __le32 bandlist[3];
6468 u32 n_bands;
6469 int err, i;
6470
aa70b4fa
AS		 6471 wiphy->max_scan_ssids = WL_NUM_SCAN_MAX;
6472 wiphy->max_scan_ie_len = BRCMF_SCAN_IE_LEN_MAX;
6c404f34 6473 wiphy->max_num_pmkids = BRCMF_MAXPMKID;
2e5f66fe
PF		 6474
6475 err = brcmf_setup_ifmodes(wiphy, ifp);
6476 if (err)
6477 return err;
6478
50f32e2d
RM		 6479 for (i = 0, combo = wiphy->iface_combinations;
6480 i < wiphy->n_iface_combinations; i++, combo++) {
6481 max_interfaces = max(max_interfaces, combo->max_interfaces);
6482 }
6483
6484 for (i = 0; i < max_interfaces && i < ARRAY_SIZE(drvr->addresses);
6485 i++) {
e3faa866
RM		 6486 u8 *addr = drvr->addresses[i].addr;
6487
6488 memcpy(addr, drvr->mac, ETH_ALEN);
6489 if (i) {
6490 addr[0] |= BIT(1);
6491 addr[ETH_ALEN - 1] ^= i;
6492 }
6493 }
6494 wiphy->addresses = drvr->addresses;
6495 wiphy->n_addresses = i;
6496
aa70b4fa 6497 wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
240d61a9
HM		 6498 wiphy->cipher_suites = brcmf_cipher_suites;
6499 wiphy->n_cipher_suites = ARRAY_SIZE(brcmf_cipher_suites);
6500 if (!brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MFP))
6501 wiphy->n_cipher_suites--;
7705ba6f
AS		 6502 wiphy->bss_select_support = BIT(NL80211_BSS_SELECT_ATTR_RSSI) |
6503 BIT(NL80211_BSS_SELECT_ATTR_BAND_PREF) |
6504 BIT(NL80211_BSS_SELECT_ATTR_RSSI_ADJUST);
6505
0cc0236c
AVS		 6506 wiphy->flags |= WIPHY_FLAG_NETNS_OK |
6507 WIPHY_FLAG_PS_ON_BY_DEFAULT |
aa70b4fa 6508 WIPHY_FLAG_OFFCHAN_TX |
a7b82d47
HM		 6509 WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
6510 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_TDLS))
6511 wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
7d34b056 6512 if (!ifp->drvr->settings->roamoff)
aa70b4fa 6513 wiphy->flags |= WIPHY_FLAG_SUPPORTS_FW_ROAM;
2526ff21 6514 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_FWSUP)) {
b8a64f0e
AS		 6515 wiphy_ext_feature_set(wiphy,
6516 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK);
2526ff21
AS		 6517 wiphy_ext_feature_set(wiphy,
6518 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X);
6519 }
aa70b4fa
AS		 6520 wiphy->mgmt_stypes = brcmf_txrx_stypes;
6521 wiphy->max_remain_on_channel_duration = 5000;
94ed6ffb
AVS		 6522 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_PNO)) {
6523 gscan = brcmf_feat_is_enabled(ifp, BRCMF_FEAT_GSCAN);
6524 brcmf_pno_wiphy_params(wiphy, gscan);
6525 }
aa70b4fa
AS		 6526 /* vendor commands/events support */
6527 wiphy->vendor_commands = brcmf_vendor_cmds;
6528 wiphy->n_vendor_commands = BRCMF_VNDR_CMDS_LAST - 1;
6529
4eb3af7c 6530 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL))
3021ad9a 6531 brcmf_wiphy_wowl_params(wiphy, ifp);
58de92d2
AS		 6532 err = brcmf_fil_cmd_data_get(ifp, BRCMF_C_GET_BANDLIST, &bandlist,
6533 sizeof(bandlist));
6534 if (err) {
6535 brcmf_err("could not obtain band info: err=%d\n", err);
6536 return err;
6537 }
6538 /* first entry in bandlist is number of bands */
6539 n_bands = le32_to_cpu(bandlist[0]);
6540 for (i = 1; i <= n_bands && i < ARRAY_SIZE(bandlist); i++) {
6541 if (bandlist[i] == cpu_to_le32(WLC_BAND_2G)) {
6542 band = kmemdup(&__wl_band_2ghz, sizeof(__wl_band_2ghz),
6543 GFP_KERNEL);
6544 if (!band)
6545 return -ENOMEM;
6546
6547 band->channels = kmemdup(&__wl_2ghz_channels,
6548 sizeof(__wl_2ghz_channels),
6549 GFP_KERNEL);
6550 if (!band->channels) {
6551 kfree(band);
6552 return -ENOMEM;
6553 }
6554
6555 band->n_channels = ARRAY_SIZE(__wl_2ghz_channels);
57fbcce3 6556 wiphy->bands[NL80211_BAND_2GHZ] = band;
58de92d2
AS		 6557 }
6558 if (bandlist[i] == cpu_to_le32(WLC_BAND_5G)) {
6559 band = kmemdup(&__wl_band_5ghz, sizeof(__wl_band_5ghz),
6560 GFP_KERNEL);
6561 if (!band)
6562 return -ENOMEM;
6563
6564 band->channels = kmemdup(&__wl_5ghz_channels,
6565 sizeof(__wl_5ghz_channels),
6566 GFP_KERNEL);
6567 if (!band->channels) {
6568 kfree(band);
6569 return -ENOMEM;
6570 }
6571
6572 band->n_channels = ARRAY_SIZE(__wl_5ghz_channels);
57fbcce3 6573 wiphy->bands[NL80211_BAND_5GHZ] = band;
58de92d2
AS		 6574 }
6575 }
0f83ff69
RM		 6576
6577 wiphy_read_of_freq_limits(wiphy);
6578
ab99063f 6579 return 0;
5b435de0
AS		 6580}
6581
27a68fe3 6582static s32 brcmf_config_dongle(struct brcmf_cfg80211_info *cfg)
5b435de0
AS		 6583{
6584 struct net_device *ndev;
6585 struct wireless_dev *wdev;
40a23296 6586 struct brcmf_if *ifp;
5b435de0
AS		 6587 s32 power_mode;
6588 s32 err = 0;
6589
27a68fe3 6590 if (cfg->dongle_up)
5b435de0
AS		 6591 return err;
6592
27a68fe3 6593 ndev = cfg_to_ndev(cfg);
5b435de0 6594 wdev = ndev->ieee80211_ptr;
40a23296
HM		 6595 ifp = netdev_priv(ndev);
6596
6597 /* make sure RF is ready for work */
6598 brcmf_fil_cmd_int_set(ifp, BRCMF_C_UP, 0);
5b435de0 6599
1678ba8e 6600 brcmf_dongle_scantime(ifp);
5b435de0 6601
27a68fe3 6602 power_mode = cfg->pwr_save ? PM_FAST : PM_OFF;
40a23296 6603 err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PM, power_mode);
5b435de0
AS		 6604 if (err)
6605 goto default_conf_out;
647c9ae0
AS		 6606 brcmf_dbg(INFO, "power save set to %s\n",
6607 (power_mode ? "enabled" : "disabled"));
5b435de0 6608
1119e23e 6609 err = brcmf_dongle_roam(ifp);
5b435de0
AS		 6610 if (err)
6611 goto default_conf_out;
5dd161ff 6612 err = brcmf_cfg80211_change_iface(wdev->wiphy, ndev, wdev->iftype,
818a986e 6613 NULL);
40a23296 6614 if (err)
5b435de0 6615 goto default_conf_out;
5b435de0 6616
52f22fb2 6617 brcmf_configure_arp_nd_offload(ifp, true);
b3657453 6618
27a68fe3 6619 cfg->dongle_up = true;
40a23296 6620default_conf_out:
5b435de0
AS		 6621
6622 return err;
6623
6624}
6625
bdf5ff51 6626static s32 __brcmf_cfg80211_up(struct brcmf_if *ifp)
5b435de0 6627{
c1179033 6628 set_bit(BRCMF_VIF_STATUS_READY, &ifp->vif->sme_state);
5b435de0 6629
bdf5ff51 6630 return brcmf_config_dongle(ifp->drvr->config);
5b435de0
AS		 6631}
6632
bdf5ff51 6633static s32 __brcmf_cfg80211_down(struct brcmf_if *ifp)
5b435de0 6634{
bdf5ff51 6635 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
c1179033 6636
5b435de0
AS		 6637 /*
6638 * While going down, if associated with AP disassociate
6639 * from AP to save power
6640 */
903e0eee 6641 if (check_vif_up(ifp->vif)) {
9b7a0ddc 6642 brcmf_link_down(ifp->vif, WLAN_REASON_UNSPECIFIED);
5b435de0
AS		 6643
6644 /* Make sure WPA_Supplicant receives all the event
6645 generated due to DISASSOC call to the fw to keep
6646 the state fw and WPA_Supplicant state consistent
6647 */
6648 brcmf_delay(500);
6649 }
6650
27a68fe3 6651 brcmf_abort_scanning(cfg);
c1179033 6652 clear_bit(BRCMF_VIF_STATUS_READY, &ifp->vif->sme_state);
5b435de0 6653
5b435de0
AS		 6654 return 0;
6655}
6656
bdf5ff51 6657s32 brcmf_cfg80211_up(struct net_device *ndev)
5b435de0 6658{
bdf5ff51
AS		 6659 struct brcmf_if *ifp = netdev_priv(ndev);
6660 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5b435de0
AS		 6661 s32 err = 0;
6662
27a68fe3 6663 mutex_lock(&cfg->usr_sync);
bdf5ff51 6664 err = __brcmf_cfg80211_up(ifp);
27a68fe3 6665 mutex_unlock(&cfg->usr_sync);
5b435de0
AS		 6666
6667 return err;
6668}
6669
bdf5ff51 6670s32 brcmf_cfg80211_down(struct net_device *ndev)
5b435de0 6671{
bdf5ff51
AS		 6672 struct brcmf_if *ifp = netdev_priv(ndev);
6673 struct brcmf_cfg80211_info *cfg = ifp->drvr->config;
5b435de0
AS		 6674 s32 err = 0;
6675
27a68fe3 6676 mutex_lock(&cfg->usr_sync);
bdf5ff51 6677 err = __brcmf_cfg80211_down(ifp);
27a68fe3 6678 mutex_unlock(&cfg->usr_sync);
5b435de0
AS		 6679
6680 return err;
6681}
6682
a7965fbb
AS		 6683enum nl80211_iftype brcmf_cfg80211_get_iftype(struct brcmf_if *ifp)
6684{
6685 struct wireless_dev *wdev = &ifp->vif->wdev;
6686
6687 return wdev->iftype;
6688}
6689
bfe81975
HM		 6690bool brcmf_get_vif_state_any(struct brcmf_cfg80211_info *cfg,
6691 unsigned long state)
9f440b7b
AS		 6692{
6693 struct brcmf_cfg80211_vif *vif;
9f440b7b
AS		 6694
6695 list_for_each_entry(vif, &cfg->vif_list, list) {
6696 if (test_bit(state, &vif->sme_state))
e843bb19 6697 return true;
9f440b7b 6698 }
e843bb19 6699 return false;
9f440b7b 6700}
d3c0b633
AS		 6701
6702static inline bool vif_event_equals(struct brcmf_cfg80211_vif_event *event,
6703 u8 action)
6704{
6705 u8 evt_action;
6706
b64abcb7 6707 spin_lock(&event->vif_event_lock);
d3c0b633 6708 evt_action = event->action;
b64abcb7 6709 spin_unlock(&event->vif_event_lock);
d3c0b633
AS		 6710 return evt_action == action;
6711}
6712
6713void brcmf_cfg80211_arm_vif_event(struct brcmf_cfg80211_info *cfg,
6714 struct brcmf_cfg80211_vif *vif)
6715{
6716 struct brcmf_cfg80211_vif_event *event = &cfg->vif_event;
6717
b64abcb7 6718 spin_lock(&event->vif_event_lock);
d3c0b633
AS		 6719 event->vif = vif;
6720 event->action = 0;
b64abcb7 6721 spin_unlock(&event->vif_event_lock);
d3c0b633
AS		 6722}
6723
6724bool brcmf_cfg80211_vif_event_armed(struct brcmf_cfg80211_info *cfg)
6725{
6726 struct brcmf_cfg80211_vif_event *event = &cfg->vif_event;
6727 bool armed;
6728
b64abcb7 6729 spin_lock(&event->vif_event_lock);
d3c0b633 6730 armed = event->vif != NULL;
b64abcb7 6731 spin_unlock(&event->vif_event_lock);
d3c0b633
AS		 6732
6733 return armed;
6734}
a9eb0c4b
AS		 6735
6736int brcmf_cfg80211_wait_vif_event(struct brcmf_cfg80211_info *cfg,
6737 u8 action, ulong timeout)
d3c0b633
AS		 6738{
6739 struct brcmf_cfg80211_vif_event *event = &cfg->vif_event;
6740
6741 return wait_event_timeout(event->vif_wq,
6742 vif_event_equals(event, action), timeout);
6743}
6744
73345fd2
HM		 6745static s32 brcmf_translate_country_code(struct brcmf_pub *drvr, char alpha2[2],
6746 struct brcmf_fil_country_le *ccreq)
6747{
4d792895
HM		 6748 struct brcmfmac_pd_cc *country_codes;
6749 struct brcmfmac_pd_cc_entry *cc;
73345fd2
HM		 6750 s32 found_index;
6751 int i;
6752
6753 country_codes = drvr->settings->country_codes;
6754 if (!country_codes) {
6755 brcmf_dbg(TRACE, "No country codes configured for device\n");
6756 return -EINVAL;
6757 }
6758
6759 if ((alpha2[0] == ccreq->country_abbrev[0]) &&
6760 (alpha2[1] == ccreq->country_abbrev[1])) {
6761 brcmf_dbg(TRACE, "Country code already set\n");
6762 return -EAGAIN;
6763 }
6764
6765 found_index = -1;
6766 for (i = 0; i < country_codes->table_size; i++) {
6767 cc = &country_codes->table[i];
6768 if ((cc->iso3166[0] == '\0') && (found_index == -1))
6769 found_index = i;
6770 if ((cc->iso3166[0] == alpha2[0]) &&
6771 (cc->iso3166[1] == alpha2[1])) {
6772 found_index = i;
6773 break;
6774 }
6775 }
6776 if (found_index == -1) {
6777 brcmf_dbg(TRACE, "No country code match found\n");
6778 return -EINVAL;
6779 }
6780 memset(ccreq, 0, sizeof(*ccreq));
6781 ccreq->rev = cpu_to_le32(country_codes->table[found_index].rev);
6782 memcpy(ccreq->ccode, country_codes->table[found_index].cc,
6783 BRCMF_COUNTRY_BUF_SZ);
6784 ccreq->country_abbrev[0] = alpha2[0];
6785 ccreq->country_abbrev[1] = alpha2[1];
6786 ccreq->country_abbrev[2] = 0;
6787
6788 return 0;
6789}
6790
63db1a49
AS		 6791static void brcmf_cfg80211_reg_notifier(struct wiphy *wiphy,
6792 struct regulatory_request *req)
6793{
6794 struct brcmf_cfg80211_info *cfg = wiphy_priv(wiphy);
6795 struct brcmf_if *ifp = netdev_priv(cfg_to_ndev(cfg));
6796 struct brcmf_fil_country_le ccreq;
73345fd2 6797 s32 err;
63db1a49
AS		 6798 int i;
6799
26e53788
HG		 6800 /* The country code gets set to "00" by default at boot, ignore */
6801 if (req->alpha2[0] == '0' && req->alpha2[1] == '0')
6802 return;
6803
63db1a49
AS		 6804 /* ignore non-ISO3166 country codes */
6805 for (i = 0; i < sizeof(req->alpha2); i++)
6806 if (req->alpha2[i] < 'A' || req->alpha2[i] > 'Z') {
a9507d5c 6807 brcmf_err("not an ISO3166 code (0x%02x 0x%02x)\n",
73345fd2 6808 req->alpha2[0], req->alpha2[1]);
63db1a49
AS		 6809 return;
6810 }
73345fd2
HM		 6811
6812 brcmf_dbg(TRACE, "Enter: initiator=%d, alpha=%c%c\n", req->initiator,
6813 req->alpha2[0], req->alpha2[1]);
6814
6815 err = brcmf_fil_iovar_data_get(ifp, "country", &ccreq, sizeof(ccreq));
6816 if (err) {
6817 brcmf_err("Country code iovar returned err = %d\n", err);
6818 return;
6819 }
6820
6821 err = brcmf_translate_country_code(ifp->drvr, req->alpha2, &ccreq);
6822 if (err)
6823 return;
6824
6825 err = brcmf_fil_iovar_data_set(ifp, "country", &ccreq, sizeof(ccreq));
6826 if (err) {
6827 brcmf_err("Firmware rejected country setting\n");
8afe0ece
AS		 6828 return;
6829 }
6830 brcmf_setup_wiphybands(wiphy);
63db1a49
AS		 6831}
6832
b48d8916
AS		 6833static void brcmf_free_wiphy(struct wiphy *wiphy)
6834{
0882dda3
AS		 6835 int i;
6836
58de92d2
AS		 6837 if (!wiphy)
6838 return;
6839
0882dda3
AS		 6840 if (wiphy->iface_combinations) {
6841 for (i = 0; i < wiphy->n_iface_combinations; i++)
6842 kfree(wiphy->iface_combinations[i].limits);
6843 }
b48d8916 6844 kfree(wiphy->iface_combinations);
57fbcce3
JB		 6845 if (wiphy->bands[NL80211_BAND_2GHZ]) {
6846 kfree(wiphy->bands[NL80211_BAND_2GHZ]->channels);
6847 kfree(wiphy->bands[NL80211_BAND_2GHZ]);
b48d8916 6848 }
57fbcce3
JB		 6849 if (wiphy->bands[NL80211_BAND_5GHZ]) {
6850 kfree(wiphy->bands[NL80211_BAND_5GHZ]->channels);
6851 kfree(wiphy->bands[NL80211_BAND_5GHZ]);
b48d8916 6852 }
0b57010f
AVS		 6853#if IS_ENABLED(CONFIG_PM)
6854 if (wiphy->wowlan != &brcmf_wowlan_support)
6855 kfree(wiphy->wowlan);
6856#endif
b48d8916
AS		 6857 wiphy_free(wiphy);
6858}
6859
ccfd1e81 6860struct brcmf_cfg80211_info *brcmf_cfg80211_attach(struct brcmf_pub *drvr,
ae7c03f6
HM		 6861 struct device *busdev,
6862 bool p2pdev_forced)
ccfd1e81 6863{
46f3b6ee 6864 struct net_device *ndev = brcmf_get_ifp(drvr, 0)->ndev;
ccfd1e81
AS		 6865 struct brcmf_cfg80211_info *cfg;
6866 struct wiphy *wiphy;
5c22fb85 6867 struct cfg80211_ops *ops;
ccfd1e81
AS		 6868 struct brcmf_cfg80211_vif *vif;
6869 struct brcmf_if *ifp;
6870 s32 err = 0;
6871 s32 io_type;
b48d8916 6872 u16 *cap = NULL;
ccfd1e81
AS		 6873
6874 if (!ndev) {
6875 brcmf_err("ndev is invalid\n");
6876 return NULL;
6877 }
6878
d464fd8b 6879 ops = kmemdup(&brcmf_cfg80211_ops, sizeof(*ops), GFP_KERNEL);
5c22fb85
HM		 6880 if (!ops)
6881 return NULL;
6882
ccfd1e81 6883 ifp = netdev_priv(ndev);
5c22fb85
HM		 6884#ifdef CONFIG_PM
6885 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_WOWL_GTK))
6886 ops->set_rekey_data = brcmf_cfg80211_set_rekey_data;
6887#endif
6888 wiphy = wiphy_new(ops, sizeof(struct brcmf_cfg80211_info));
b48d8916
AS		 6889 if (!wiphy) {
6890 brcmf_err("Could not allocate wiphy device\n");
57c00f2f 6891 goto ops_out;
b48d8916 6892 }
6896f4fb 6893 memcpy(wiphy->perm_addr, drvr->mac, ETH_ALEN);
b48d8916 6894 set_wiphy_dev(wiphy, busdev);
ccfd1e81
AS		 6895
6896 cfg = wiphy_priv(wiphy);
6897 cfg->wiphy = wiphy;
5c22fb85 6898 cfg->ops = ops;
ccfd1e81
AS		 6899 cfg->pub = drvr;
6900 init_vif_event(&cfg->vif_event);
6901 INIT_LIST_HEAD(&cfg->vif_list);
6902
26072330 6903 vif = brcmf_alloc_vif(cfg, NL80211_IFTYPE_STATION);
b48d8916
AS		 6904 if (IS_ERR(vif))
6905 goto wiphy_out;
ccfd1e81
AS		 6906
6907 vif->ifp = ifp;
6908 vif->wdev.netdev = ndev;
6909 ndev->ieee80211_ptr = &vif->wdev;
6910 SET_NETDEV_DEV(ndev, wiphy_dev(cfg->wiphy));
6911
6912 err = wl_init_priv(cfg);
6913 if (err) {
6914 brcmf_err("Failed to init iwm_priv (%d)\n", err);
b48d8916
AS		 6915 brcmf_free_vif(vif);
6916 goto wiphy_out;
ccfd1e81
AS		 6917 }
6918 ifp->vif = vif;
6919
b48d8916
AS		 6920 /* determine d11 io type before wiphy setup */
6921 err = brcmf_fil_cmd_int_get(ifp, BRCMF_C_GET_VERSION, &io_type);
ccfd1e81 6922 if (err) {
b48d8916
AS		 6923 brcmf_err("Failed to get D11 version (%d)\n", err);
6924 goto priv_out;
ccfd1e81 6925 }
b48d8916
AS		 6926 cfg->d11inf.io_type = (u8)io_type;
6927 brcmu_d11_attach(&cfg->d11inf);
6928
6929 err = brcmf_setup_wiphy(wiphy, ifp);
6930 if (err < 0)
6931 goto priv_out;
6932
6933 brcmf_dbg(INFO, "Registering custom regulatory\n");
63db1a49 6934 wiphy->reg_notifier = brcmf_cfg80211_reg_notifier;
b48d8916
AS		 6935 wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG;
6936 wiphy_apply_custom_regulatory(wiphy, &brcmf_regdom);
6937
6938 /* firmware defaults to 40MHz disabled in 2G band. We signal
6939 * cfg80211 here that we do and have it decide we can enable
6940 * it. But first check if device does support 2G operation.
6941 */
57fbcce3
JB		 6942 if (wiphy->bands[NL80211_BAND_2GHZ]) {
6943 cap = &wiphy->bands[NL80211_BAND_2GHZ]->ht_cap.cap;
b48d8916
AS		 6944 *cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
6945 }
6946 err = wiphy_register(wiphy);
6947 if (err < 0) {
6948 brcmf_err("Could not register wiphy device (%d)\n", err);
6949 goto priv_out;
ccfd1e81
AS		 6950 }
6951
ab99063f
RM		 6952 err = brcmf_setup_wiphybands(wiphy);
6953 if (err) {
6954 brcmf_err("Setting wiphy bands failed (%d)\n", err);
6955 goto wiphy_unreg_out;
6956 }
6957
ccfd1e81
AS		 6958 /* If cfg80211 didn't disable 40MHz HT CAP in wiphy_register(),
6959 * setup 40MHz in 2GHz band and enable OBSS scanning.
6960 */
b48d8916
AS		 6961 if (cap && (*cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40)) {
6962 err = brcmf_enable_bw40_2g(cfg);
ccfd1e81
AS		 6963 if (!err)
6964 err = brcmf_fil_iovar_int_set(ifp, "obss_coex",
6965 BRCMF_OBSS_COEX_AUTO);
b48d8916
AS		 6966 else
6967 *cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
ccfd1e81 6968 }
2b76acdb
HM		 6969 /* p2p might require that "if-events" get processed by fweh. So
6970 * activate the already registered event handlers now and activate
6971 * the rest when initialization has completed. drvr->config needs to
6972 * be assigned before activating events.
6973 */
6974 drvr->config = cfg;
6975 err = brcmf_fweh_activate_events(ifp);
6976 if (err) {
6977 brcmf_err("FWEH activation failed (%d)\n", err);
6978 goto wiphy_unreg_out;
6979 }
ccfd1e81 6980
ae7c03f6 6981 err = brcmf_p2p_attach(cfg, p2pdev_forced);
ccfd1e81 6982 if (err) {
cb853da3 6983 brcmf_err("P2P initialisation failed (%d)\n", err);
b48d8916
AS		 6984 goto wiphy_unreg_out;
6985 }
6986 err = brcmf_btcoex_attach(cfg);
6987 if (err) {
6988 brcmf_err("BT-coex initialisation failed (%d)\n", err);
6989 brcmf_p2p_detach(&cfg->p2p);
6990 goto wiphy_unreg_out;
ccfd1e81 6991 }
efc2c1fa
AVS		 6992 err = brcmf_pno_attach(cfg);
6993 if (err) {
6994 brcmf_err("PNO initialisation failed (%d)\n", err);
6995 brcmf_btcoex_detach(cfg);
6996 brcmf_p2p_detach(&cfg->p2p);
6997 goto wiphy_unreg_out;
6998 }
ccfd1e81 6999
a7b82d47
HM		 7000 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_TDLS)) {
7001 err = brcmf_fil_iovar_int_set(ifp, "tdls_enable", 1);
7002 if (err) {
7003 brcmf_dbg(INFO, "TDLS not enabled (%d)\n", err);
7004 wiphy->flags &= ~WIPHY_FLAG_SUPPORTS_TDLS;
7005 } else {
7006 brcmf_fweh_register(cfg->pub, BRCMF_E_TDLS_PEER_EVENT,
7007 brcmf_notify_tdls_peer_event);
7008 }
ccfd1e81 7009 }
ccfd1e81 7010
2b76acdb
HM		 7011 /* (re-) activate FWEH event handling */
7012 err = brcmf_fweh_activate_events(ifp);
7013 if (err) {
7014 brcmf_err("FWEH activation failed (%d)\n", err);
cb853da3 7015 goto detach;
2b76acdb
HM		 7016 }
7017
48ed16e8
HM		 7018 /* Fill in some of the advertised nl80211 supported features */
7019 if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_SCAN_RANDOM_MAC)) {
7020 wiphy->features |= NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR;
7021#ifdef CONFIG_PM
6ea09153
FL		 7022 if (wiphy->wowlan &&
7023 wiphy->wowlan->flags & WIPHY_WOWLAN_NET_DETECT)
48ed16e8
HM		 7024 wiphy->features |= NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
7025#endif
7026 }
7027
ccfd1e81
AS		 7028 return cfg;
7029
cb853da3 7030detach:
efc2c1fa 7031 brcmf_pno_detach(cfg);
cb853da3
AVS		 7032 brcmf_btcoex_detach(cfg);
7033 brcmf_p2p_detach(&cfg->p2p);
b48d8916
AS		 7034wiphy_unreg_out:
7035 wiphy_unregister(cfg->wiphy);
7036priv_out:
ccfd1e81 7037 wl_deinit_priv(cfg);
ccfd1e81 7038 brcmf_free_vif(vif);
2b5d348e 7039 ifp->vif = NULL;
b48d8916
AS		 7040wiphy_out:
7041 brcmf_free_wiphy(wiphy);
57c00f2f 7042ops_out:
5c22fb85 7043 kfree(ops);
ccfd1e81
AS		 7044 return NULL;
7045}
7046
7047void brcmf_cfg80211_detach(struct brcmf_cfg80211_info *cfg)
7048{
7049 if (!cfg)
7050 return;
7051
efc2c1fa 7052 brcmf_pno_detach(cfg);
ccfd1e81 7053 brcmf_btcoex_detach(cfg);
f7a40873 7054 wiphy_unregister(cfg->wiphy);
5c22fb85 7055 kfree(cfg->ops);
ccfd1e81 7056 wl_deinit_priv(cfg);
b48d8916 7057 brcmf_free_wiphy(cfg->wiphy);
ccfd1e81 7058}
ubuntu-bionic-kernel mirror