]>
Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * Copyright 2002-2005, Instant802 Networks, Inc. | |
3 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
4 | * | |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of the GNU General Public License version 2 as | |
7 | * published by the Free Software Foundation. | |
8 | */ | |
9 | ||
10 | #include <linux/module.h> | |
11 | #include <linux/init.h> | |
12 | #include <linux/netdevice.h> | |
13 | #include <linux/types.h> | |
14 | #include <linux/slab.h> | |
15 | #include <linux/skbuff.h> | |
16 | #include <linux/if_arp.h> | |
0d174406 | 17 | #include <linux/timer.h> |
d0709a65 | 18 | #include <linux/rtnetlink.h> |
f0706e82 JB |
19 | |
20 | #include <net/mac80211.h> | |
21 | #include "ieee80211_i.h" | |
24487981 | 22 | #include "driver-ops.h" |
2c8dccc7 | 23 | #include "rate.h" |
f0706e82 | 24 | #include "sta_info.h" |
e9f207f0 | 25 | #include "debugfs_sta.h" |
ee385855 | 26 | #include "mesh.h" |
f0706e82 | 27 | |
d0709a65 JB |
28 | /** |
29 | * DOC: STA information lifetime rules | |
30 | * | |
31 | * STA info structures (&struct sta_info) are managed in a hash table | |
32 | * for faster lookup and a list for iteration. They are managed using | |
33 | * RCU, i.e. access to the list and hash table is protected by RCU. | |
34 | * | |
03e4497e JB |
35 | * Upon allocating a STA info structure with sta_info_alloc(), the caller owns |
36 | * that structure. It must then either destroy it using sta_info_destroy() | |
37 | * (which is pretty useless) or insert it into the hash table using | |
38 | * sta_info_insert() which demotes the reference from ownership to a regular | |
39 | * RCU-protected reference; if the function is called without protection by an | |
93e5deb1 JB |
40 | * RCU critical section the reference is instantly invalidated. Note that the |
41 | * caller may not do much with the STA info before inserting it, in particular, | |
42 | * it may not start any mesh peer link management or add encryption keys. | |
43 | * | |
44 | * When the insertion fails (sta_info_insert()) returns non-zero), the | |
45 | * structure will have been freed by sta_info_insert()! | |
d0709a65 JB |
46 | * |
47 | * Because there are debugfs entries for each station, and adding those | |
48 | * must be able to sleep, it is also possible to "pin" a station entry, | |
49 | * that means it can be removed from the hash table but not be freed. | |
93e5deb1 JB |
50 | * See the comment in __sta_info_unlink() for more information, this is |
51 | * an internal capability only. | |
d0709a65 JB |
52 | * |
53 | * In order to remove a STA info structure, the caller needs to first | |
dbbea671 | 54 | * unlink it (sta_info_unlink()) from the list and hash tables and |
3b96766f JB |
55 | * then destroy it; sta_info_destroy() will wait for an RCU grace period |
56 | * to elapse before actually freeing it. Due to the pinning and the | |
57 | * possibility of multiple callers trying to remove the same STA info at | |
58 | * the same time, sta_info_unlink() can clear the STA info pointer it is | |
59 | * passed to indicate that the STA info is owned by somebody else now. | |
d0709a65 | 60 | * |
dbbea671 | 61 | * If sta_info_unlink() did not clear the pointer then the caller owns |
d0709a65 | 62 | * the STA info structure now and is responsible of destroying it with |
3b96766f | 63 | * a call to sta_info_destroy(). |
d0709a65 JB |
64 | * |
65 | * In all other cases, there is no concept of ownership on a STA entry, | |
66 | * each structure is owned by the global hash table/list until it is | |
67 | * removed. All users of the structure need to be RCU protected so that | |
68 | * the structure won't be freed before they are done using it. | |
69 | */ | |
f0706e82 JB |
70 | |
71 | /* Caller must hold local->sta_lock */ | |
be8755e1 MW |
72 | static int sta_info_hash_del(struct ieee80211_local *local, |
73 | struct sta_info *sta) | |
f0706e82 JB |
74 | { |
75 | struct sta_info *s; | |
76 | ||
17741cdc | 77 | s = local->sta_hash[STA_HASH(sta->sta.addr)]; |
f0706e82 | 78 | if (!s) |
be8755e1 MW |
79 | return -ENOENT; |
80 | if (s == sta) { | |
17741cdc | 81 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], |
d0709a65 | 82 | s->hnext); |
be8755e1 | 83 | return 0; |
f0706e82 JB |
84 | } |
85 | ||
be8755e1 | 86 | while (s->hnext && s->hnext != sta) |
f0706e82 | 87 | s = s->hnext; |
be8755e1 | 88 | if (s->hnext) { |
d0709a65 | 89 | rcu_assign_pointer(s->hnext, sta->hnext); |
be8755e1 MW |
90 | return 0; |
91 | } | |
f0706e82 | 92 | |
be8755e1 | 93 | return -ENOENT; |
f0706e82 JB |
94 | } |
95 | ||
d0709a65 | 96 | /* protected by RCU */ |
4b7679a5 | 97 | struct sta_info *sta_info_get(struct ieee80211_local *local, const u8 *addr) |
f0706e82 JB |
98 | { |
99 | struct sta_info *sta; | |
100 | ||
d0709a65 | 101 | sta = rcu_dereference(local->sta_hash[STA_HASH(addr)]); |
f0706e82 | 102 | while (sta) { |
5cf12e8d | 103 | if (memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) |
f0706e82 | 104 | break; |
d0709a65 | 105 | sta = rcu_dereference(sta->hnext); |
f0706e82 | 106 | } |
43ba7e95 JB |
107 | return sta; |
108 | } | |
109 | ||
ee385855 LCC |
110 | struct sta_info *sta_info_get_by_idx(struct ieee80211_local *local, int idx, |
111 | struct net_device *dev) | |
112 | { | |
113 | struct sta_info *sta; | |
114 | int i = 0; | |
115 | ||
d0709a65 | 116 | list_for_each_entry_rcu(sta, &local->sta_list, list) { |
2a8ca29a LCC |
117 | if (dev && dev != sta->sdata->dev) |
118 | continue; | |
ee385855 LCC |
119 | if (i < idx) { |
120 | ++i; | |
121 | continue; | |
ee385855 | 122 | } |
2a8ca29a | 123 | return sta; |
ee385855 | 124 | } |
ee385855 LCC |
125 | |
126 | return NULL; | |
127 | } | |
f0706e82 | 128 | |
93e5deb1 JB |
129 | /** |
130 | * __sta_info_free - internal STA free helper | |
131 | * | |
6ef307bc | 132 | * @local: pointer to the global information |
93e5deb1 JB |
133 | * @sta: STA info to free |
134 | * | |
135 | * This function must undo everything done by sta_info_alloc() | |
136 | * that may happen before sta_info_insert(). | |
137 | */ | |
138 | static void __sta_info_free(struct ieee80211_local *local, | |
139 | struct sta_info *sta) | |
140 | { | |
4b7679a5 | 141 | rate_control_free_sta(sta); |
93e5deb1 JB |
142 | rate_control_put(sta->rate_ctrl); |
143 | ||
144 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
0c68ae26 JB |
145 | printk(KERN_DEBUG "%s: Destroyed STA %pM\n", |
146 | wiphy_name(local->hw.wiphy), sta->sta.addr); | |
93e5deb1 JB |
147 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
148 | ||
149 | kfree(sta); | |
150 | } | |
151 | ||
d0709a65 | 152 | void sta_info_destroy(struct sta_info *sta) |
f0706e82 | 153 | { |
97bff8ec | 154 | struct ieee80211_local *local; |
f0706e82 | 155 | struct sk_buff *skb; |
07db2183 | 156 | int i; |
73651ee6 | 157 | |
97bff8ec JB |
158 | might_sleep(); |
159 | ||
73651ee6 JB |
160 | if (!sta) |
161 | return; | |
f0706e82 | 162 | |
97bff8ec | 163 | local = sta->local; |
d0709a65 JB |
164 | |
165 | rate_control_remove_sta_debugfs(sta); | |
166 | ieee80211_sta_debugfs_remove(sta); | |
167 | ||
168 | #ifdef CONFIG_MAC80211_MESH | |
169 | if (ieee80211_vif_is_mesh(&sta->sdata->vif)) | |
170 | mesh_plink_deactivate(sta); | |
171 | #endif | |
172 | ||
3b96766f JB |
173 | /* |
174 | * We have only unlinked the key, and actually destroying it | |
175 | * may mean it is removed from hardware which requires that | |
176 | * the key->sta pointer is still valid, so flush the key todo | |
177 | * list here. | |
178 | * | |
179 | * ieee80211_key_todo() will synchronize_rcu() so after this | |
180 | * nothing can reference this sta struct any more. | |
181 | */ | |
182 | ieee80211_key_todo(); | |
d0709a65 JB |
183 | |
184 | #ifdef CONFIG_MAC80211_MESH | |
185 | if (ieee80211_vif_is_mesh(&sta->sdata->vif)) | |
186 | del_timer_sync(&sta->plink_timer); | |
187 | #endif | |
188 | ||
f0706e82 JB |
189 | while ((skb = skb_dequeue(&sta->ps_tx_buf)) != NULL) { |
190 | local->total_ps_buffered--; | |
191 | dev_kfree_skb_any(skb); | |
192 | } | |
d0709a65 JB |
193 | |
194 | while ((skb = skb_dequeue(&sta->tx_filtered)) != NULL) | |
f0706e82 | 195 | dev_kfree_skb_any(skb); |
d0709a65 | 196 | |
fe3bf0f5 | 197 | for (i = 0; i < STA_TID_NUM; i++) { |
55687e38 JB |
198 | struct tid_ampdu_rx *tid_rx; |
199 | struct tid_ampdu_tx *tid_tx; | |
200 | ||
07346f81 | 201 | spin_lock_bh(&sta->lock); |
55687e38 JB |
202 | tid_rx = sta->ampdu_mlme.tid_rx[i]; |
203 | /* Make sure timer won't free the tid_rx struct, see below */ | |
204 | if (tid_rx) | |
205 | tid_rx->shutdown = true; | |
96f5e66e | 206 | |
07346f81 | 207 | spin_unlock_bh(&sta->lock); |
55687e38 JB |
208 | |
209 | /* | |
210 | * Outside spinlock - shutdown is true now so that the timer | |
211 | * won't free tid_rx, we have to do that now. Can't let the | |
212 | * timer do it because we have to sync the timer outside the | |
213 | * lock that it takes itself. | |
214 | */ | |
215 | if (tid_rx) { | |
216 | del_timer_sync(&tid_rx->session_timer); | |
217 | kfree(tid_rx); | |
218 | } | |
219 | ||
220 | /* | |
221 | * No need to do such complications for TX agg sessions, the | |
222 | * path leading to freeing the tid_tx struct goes via a call | |
223 | * from the driver, and thus needs to look up the sta struct | |
224 | * again, which cannot be found when we get here. Hence, we | |
225 | * just need to delete the timer and free the aggregation | |
226 | * info; we won't be telling the peer about it then but that | |
227 | * doesn't matter if we're not talking to it again anyway. | |
228 | */ | |
229 | tid_tx = sta->ampdu_mlme.tid_tx[i]; | |
230 | if (tid_tx) { | |
231 | del_timer_sync(&tid_tx->addba_resp_timer); | |
cd8ffc80 JB |
232 | /* |
233 | * STA removed while aggregation session being | |
234 | * started? Bit odd, but purge frames anyway. | |
235 | */ | |
236 | skb_queue_purge(&tid_tx->pending); | |
55687e38 JB |
237 | kfree(tid_tx); |
238 | } | |
fe3bf0f5 | 239 | } |
cee24a3e | 240 | |
93e5deb1 | 241 | __sta_info_free(local, sta); |
f0706e82 JB |
242 | } |
243 | ||
244 | ||
d0709a65 JB |
245 | /* Caller must hold local->sta_lock */ |
246 | static void sta_info_hash_add(struct ieee80211_local *local, | |
247 | struct sta_info *sta) | |
f0706e82 | 248 | { |
17741cdc JB |
249 | sta->hnext = local->sta_hash[STA_HASH(sta->sta.addr)]; |
250 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], sta); | |
f0706e82 | 251 | } |
f0706e82 | 252 | |
73651ee6 JB |
253 | struct sta_info *sta_info_alloc(struct ieee80211_sub_if_data *sdata, |
254 | u8 *addr, gfp_t gfp) | |
f0706e82 | 255 | { |
d0709a65 | 256 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 257 | struct sta_info *sta; |
16c5f15c | 258 | int i; |
f0706e82 | 259 | |
17741cdc | 260 | sta = kzalloc(sizeof(*sta) + local->hw.sta_data_size, gfp); |
f0706e82 | 261 | if (!sta) |
73651ee6 | 262 | return NULL; |
f0706e82 | 263 | |
07346f81 | 264 | spin_lock_init(&sta->lock); |
5a9f7b04 | 265 | spin_lock_init(&sta->flaglock); |
07346f81 | 266 | |
17741cdc | 267 | memcpy(sta->sta.addr, addr, ETH_ALEN); |
d0709a65 JB |
268 | sta->local = local; |
269 | sta->sdata = sdata; | |
f0706e82 JB |
270 | |
271 | sta->rate_ctrl = rate_control_get(local->rate_ctrl); | |
d0709a65 | 272 | sta->rate_ctrl_priv = rate_control_alloc_sta(sta->rate_ctrl, |
4b7679a5 | 273 | &sta->sta, gfp); |
f0706e82 JB |
274 | if (!sta->rate_ctrl_priv) { |
275 | rate_control_put(sta->rate_ctrl); | |
f0706e82 | 276 | kfree(sta); |
73651ee6 | 277 | return NULL; |
f0706e82 JB |
278 | } |
279 | ||
16c5f15c RR |
280 | for (i = 0; i < STA_TID_NUM; i++) { |
281 | /* timer_to_tid must be initialized with identity mapping to | |
282 | * enable session_timer's data differentiation. refer to | |
283 | * sta_rx_agg_session_timer_expired for useage */ | |
284 | sta->timer_to_tid[i] = i; | |
cee24a3e RR |
285 | /* rx */ |
286 | sta->ampdu_mlme.tid_state_rx[i] = HT_AGG_STATE_IDLE; | |
287 | sta->ampdu_mlme.tid_rx[i] = NULL; | |
288 | /* tx */ | |
289 | sta->ampdu_mlme.tid_state_tx[i] = HT_AGG_STATE_IDLE; | |
290 | sta->ampdu_mlme.tid_tx[i] = NULL; | |
291 | sta->ampdu_mlme.addba_req_num[i] = 0; | |
16c5f15c | 292 | } |
f0706e82 JB |
293 | skb_queue_head_init(&sta->ps_tx_buf); |
294 | skb_queue_head_init(&sta->tx_filtered); | |
73651ee6 JB |
295 | |
296 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
0c68ae26 JB |
297 | printk(KERN_DEBUG "%s: Allocated STA %pM\n", |
298 | wiphy_name(local->hw.wiphy), sta->sta.addr); | |
73651ee6 JB |
299 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
300 | ||
03e4497e | 301 | #ifdef CONFIG_MAC80211_MESH |
b4e08ea1 | 302 | sta->plink_state = PLINK_LISTEN; |
03e4497e JB |
303 | init_timer(&sta->plink_timer); |
304 | #endif | |
305 | ||
73651ee6 JB |
306 | return sta; |
307 | } | |
308 | ||
309 | int sta_info_insert(struct sta_info *sta) | |
310 | { | |
311 | struct ieee80211_local *local = sta->local; | |
312 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
313 | unsigned long flags; | |
93e5deb1 | 314 | int err = 0; |
73651ee6 | 315 | |
03e4497e JB |
316 | /* |
317 | * Can't be a WARN_ON because it can be triggered through a race: | |
318 | * something inserts a STA (on one CPU) without holding the RTNL | |
319 | * and another CPU turns off the net device. | |
320 | */ | |
93e5deb1 JB |
321 | if (unlikely(!netif_running(sdata->dev))) { |
322 | err = -ENETDOWN; | |
323 | goto out_free; | |
324 | } | |
03e4497e | 325 | |
17741cdc | 326 | if (WARN_ON(compare_ether_addr(sta->sta.addr, sdata->dev->dev_addr) == 0 || |
c6a1fa12 | 327 | is_multicast_ether_addr(sta->sta.addr))) { |
93e5deb1 JB |
328 | err = -EINVAL; |
329 | goto out_free; | |
330 | } | |
44213b5e | 331 | |
d0709a65 | 332 | spin_lock_irqsave(&local->sta_lock, flags); |
43ba7e95 | 333 | /* check if STA exists already */ |
4b7679a5 | 334 | if (sta_info_get(local, sta->sta.addr)) { |
d0709a65 | 335 | spin_unlock_irqrestore(&local->sta_lock, flags); |
93e5deb1 JB |
336 | err = -EEXIST; |
337 | goto out_free; | |
43ba7e95 | 338 | } |
f0706e82 JB |
339 | list_add(&sta->list, &local->sta_list); |
340 | local->num_sta++; | |
341 | sta_info_hash_add(local, sta); | |
32bfd35d | 342 | |
d0709a65 JB |
343 | /* notify driver */ |
344 | if (local->ops->sta_notify) { | |
05c914fe | 345 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
3e122be0 JB |
346 | sdata = container_of(sdata->bss, |
347 | struct ieee80211_sub_if_data, | |
348 | u.ap); | |
32bfd35d | 349 | |
24487981 | 350 | drv_sta_notify(local, &sdata->vif, STA_NOTIFY_ADD, &sta->sta); |
32bfd35d | 351 | } |
d0709a65 | 352 | |
f0706e82 | 353 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
0c68ae26 JB |
354 | printk(KERN_DEBUG "%s: Inserted STA %pM\n", |
355 | wiphy_name(local->hw.wiphy), sta->sta.addr); | |
f0706e82 JB |
356 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
357 | ||
73651ee6 JB |
358 | spin_unlock_irqrestore(&local->sta_lock, flags); |
359 | ||
e9f207f0 | 360 | #ifdef CONFIG_MAC80211_DEBUGFS |
93e5deb1 JB |
361 | /* |
362 | * Debugfs entry adding might sleep, so schedule process | |
be8755e1 | 363 | * context task for adding entry for STAs that do not yet |
93e5deb1 JB |
364 | * have one. |
365 | * NOTE: due to auto-freeing semantics this may only be done | |
366 | * if the insertion is successful! | |
367 | */ | |
49ec6fa2 | 368 | schedule_work(&local->sta_debugfs_add); |
e9f207f0 JB |
369 | #endif |
370 | ||
73651ee6 JB |
371 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
372 | mesh_accept_plinks_update(sdata); | |
373 | ||
374 | return 0; | |
93e5deb1 JB |
375 | out_free: |
376 | BUG_ON(!err); | |
377 | __sta_info_free(local, sta); | |
378 | return err; | |
f0706e82 JB |
379 | } |
380 | ||
004c872e JB |
381 | static inline void __bss_tim_set(struct ieee80211_if_ap *bss, u16 aid) |
382 | { | |
383 | /* | |
384 | * This format has been mandated by the IEEE specifications, | |
385 | * so this line may not be changed to use the __set_bit() format. | |
386 | */ | |
387 | bss->tim[aid / 8] |= (1 << (aid % 8)); | |
388 | } | |
389 | ||
390 | static inline void __bss_tim_clear(struct ieee80211_if_ap *bss, u16 aid) | |
391 | { | |
392 | /* | |
393 | * This format has been mandated by the IEEE specifications, | |
394 | * so this line may not be changed to use the __clear_bit() format. | |
395 | */ | |
396 | bss->tim[aid / 8] &= ~(1 << (aid % 8)); | |
397 | } | |
398 | ||
399 | static void __sta_info_set_tim_bit(struct ieee80211_if_ap *bss, | |
400 | struct sta_info *sta) | |
401 | { | |
3e122be0 JB |
402 | BUG_ON(!bss); |
403 | ||
17741cdc | 404 | __bss_tim_set(bss, sta->sta.aid); |
3e122be0 | 405 | |
d0709a65 JB |
406 | if (sta->local->ops->set_tim) { |
407 | sta->local->tim_in_locked_section = true; | |
24487981 | 408 | drv_set_tim(sta->local, &sta->sta, true); |
d0709a65 JB |
409 | sta->local->tim_in_locked_section = false; |
410 | } | |
004c872e JB |
411 | } |
412 | ||
413 | void sta_info_set_tim_bit(struct sta_info *sta) | |
414 | { | |
d0709a65 | 415 | unsigned long flags; |
004c872e | 416 | |
3e122be0 JB |
417 | BUG_ON(!sta->sdata->bss); |
418 | ||
d0709a65 JB |
419 | spin_lock_irqsave(&sta->local->sta_lock, flags); |
420 | __sta_info_set_tim_bit(sta->sdata->bss, sta); | |
421 | spin_unlock_irqrestore(&sta->local->sta_lock, flags); | |
004c872e JB |
422 | } |
423 | ||
424 | static void __sta_info_clear_tim_bit(struct ieee80211_if_ap *bss, | |
425 | struct sta_info *sta) | |
426 | { | |
3e122be0 JB |
427 | BUG_ON(!bss); |
428 | ||
17741cdc | 429 | __bss_tim_clear(bss, sta->sta.aid); |
3e122be0 | 430 | |
d0709a65 JB |
431 | if (sta->local->ops->set_tim) { |
432 | sta->local->tim_in_locked_section = true; | |
24487981 | 433 | drv_set_tim(sta->local, &sta->sta, false); |
d0709a65 JB |
434 | sta->local->tim_in_locked_section = false; |
435 | } | |
004c872e JB |
436 | } |
437 | ||
438 | void sta_info_clear_tim_bit(struct sta_info *sta) | |
439 | { | |
d0709a65 | 440 | unsigned long flags; |
004c872e | 441 | |
3e122be0 JB |
442 | BUG_ON(!sta->sdata->bss); |
443 | ||
d0709a65 JB |
444 | spin_lock_irqsave(&sta->local->sta_lock, flags); |
445 | __sta_info_clear_tim_bit(sta->sdata->bss, sta); | |
446 | spin_unlock_irqrestore(&sta->local->sta_lock, flags); | |
004c872e JB |
447 | } |
448 | ||
24723d1b | 449 | static void __sta_info_unlink(struct sta_info **sta) |
f0706e82 | 450 | { |
d0709a65 JB |
451 | struct ieee80211_local *local = (*sta)->local; |
452 | struct ieee80211_sub_if_data *sdata = (*sta)->sdata; | |
d0709a65 JB |
453 | /* |
454 | * pull caller's reference if we're already gone. | |
455 | */ | |
456 | if (sta_info_hash_del(local, *sta)) { | |
457 | *sta = NULL; | |
458 | return; | |
459 | } | |
be8755e1 | 460 | |
3b96766f JB |
461 | if ((*sta)->key) { |
462 | ieee80211_key_free((*sta)->key); | |
463 | WARN_ON((*sta)->key); | |
464 | } | |
465 | ||
7d1559f1 JB |
466 | list_del(&(*sta)->list); |
467 | ||
07346f81 | 468 | if (test_and_clear_sta_flags(*sta, WLAN_STA_PS)) { |
3e122be0 JB |
469 | BUG_ON(!sdata->bss); |
470 | ||
471 | atomic_dec(&sdata->bss->num_sta_ps); | |
7d1559f1 JB |
472 | __sta_info_clear_tim_bit(sdata->bss, *sta); |
473 | } | |
474 | ||
475 | local->num_sta--; | |
476 | ||
477 | if (local->ops->sta_notify) { | |
05c914fe | 478 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
3e122be0 JB |
479 | sdata = container_of(sdata->bss, |
480 | struct ieee80211_sub_if_data, | |
481 | u.ap); | |
7d1559f1 | 482 | |
24487981 JB |
483 | drv_sta_notify(local, &sdata->vif, STA_NOTIFY_REMOVE, |
484 | &(*sta)->sta); | |
7d1559f1 JB |
485 | } |
486 | ||
487 | if (ieee80211_vif_is_mesh(&sdata->vif)) { | |
488 | mesh_accept_plinks_update(sdata); | |
489 | #ifdef CONFIG_MAC80211_MESH | |
490 | del_timer(&(*sta)->plink_timer); | |
491 | #endif | |
492 | } | |
493 | ||
494 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
0c68ae26 JB |
495 | printk(KERN_DEBUG "%s: Removed STA %pM\n", |
496 | wiphy_name(local->hw.wiphy), (*sta)->sta.addr); | |
7d1559f1 JB |
497 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
498 | ||
d0709a65 | 499 | /* |
7d1559f1 | 500 | * Finally, pull caller's reference if the STA is pinned by the |
d0709a65 JB |
501 | * task that is adding the debugfs entries. In that case, we |
502 | * leave the STA "to be freed". | |
503 | * | |
504 | * The rules are not trivial, but not too complex either: | |
505 | * (1) pin_status is only modified under the sta_lock | |
49ec6fa2 JB |
506 | * (2) STAs may only be pinned under the RTNL so that |
507 | * sta_info_flush() is guaranteed to actually destroy | |
508 | * all STAs that are active for a given interface, this | |
509 | * is required for correctness because otherwise we | |
510 | * could notify a driver that an interface is going | |
511 | * away and only after that (!) notify it about a STA | |
512 | * on that interface going away. | |
513 | * (3) sta_info_debugfs_add_work() will set the status | |
d0709a65 JB |
514 | * to PINNED when it found an item that needs a new |
515 | * debugfs directory created. In that case, that item | |
516 | * must not be freed although all *RCU* users are done | |
517 | * with it. Hence, we tell the caller of _unlink() | |
518 | * that the item is already gone (as can happen when | |
519 | * two tasks try to unlink/destroy at the same time) | |
49ec6fa2 | 520 | * (4) We set the pin_status to DESTROY here when we |
d0709a65 | 521 | * find such an item. |
49ec6fa2 | 522 | * (5) sta_info_debugfs_add_work() will reset the pin_status |
d0709a65 JB |
523 | * from PINNED to NORMAL when it is done with the item, |
524 | * but will check for DESTROY before resetting it in | |
525 | * which case it will free the item. | |
526 | */ | |
527 | if ((*sta)->pin_status == STA_INFO_PIN_STAT_PINNED) { | |
528 | (*sta)->pin_status = STA_INFO_PIN_STAT_DESTROY; | |
529 | *sta = NULL; | |
530 | return; | |
531 | } | |
f0706e82 JB |
532 | } |
533 | ||
d0709a65 JB |
534 | void sta_info_unlink(struct sta_info **sta) |
535 | { | |
536 | struct ieee80211_local *local = (*sta)->local; | |
537 | unsigned long flags; | |
538 | ||
539 | spin_lock_irqsave(&local->sta_lock, flags); | |
540 | __sta_info_unlink(sta); | |
541 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
542 | } | |
f0706e82 | 543 | |
57c4d7b4 JB |
544 | static int sta_info_buffer_expired(struct sta_info *sta, |
545 | struct sk_buff *skb) | |
f0706e82 | 546 | { |
e039fa4a | 547 | struct ieee80211_tx_info *info; |
f0706e82 JB |
548 | int timeout; |
549 | ||
550 | if (!skb) | |
551 | return 0; | |
552 | ||
e039fa4a | 553 | info = IEEE80211_SKB_CB(skb); |
f0706e82 JB |
554 | |
555 | /* Timeout: (2 * listen_interval * beacon_int * 1024 / 1000000) sec */ | |
57c4d7b4 JB |
556 | timeout = (sta->listen_interval * |
557 | sta->sdata->vif.bss_conf.beacon_int * | |
558 | 32 / 15625) * HZ; | |
f0706e82 JB |
559 | if (timeout < STA_TX_BUFFER_EXPIRE) |
560 | timeout = STA_TX_BUFFER_EXPIRE; | |
e039fa4a | 561 | return time_after(jiffies, info->control.jiffies + timeout); |
f0706e82 JB |
562 | } |
563 | ||
564 | ||
565 | static void sta_info_cleanup_expire_buffered(struct ieee80211_local *local, | |
566 | struct sta_info *sta) | |
567 | { | |
568 | unsigned long flags; | |
569 | struct sk_buff *skb; | |
836341a7 | 570 | struct ieee80211_sub_if_data *sdata; |
f0706e82 JB |
571 | |
572 | if (skb_queue_empty(&sta->ps_tx_buf)) | |
573 | return; | |
574 | ||
575 | for (;;) { | |
576 | spin_lock_irqsave(&sta->ps_tx_buf.lock, flags); | |
577 | skb = skb_peek(&sta->ps_tx_buf); | |
57c4d7b4 | 578 | if (sta_info_buffer_expired(sta, skb)) |
f0706e82 | 579 | skb = __skb_dequeue(&sta->ps_tx_buf); |
836341a7 | 580 | else |
f0706e82 JB |
581 | skb = NULL; |
582 | spin_unlock_irqrestore(&sta->ps_tx_buf.lock, flags); | |
583 | ||
836341a7 | 584 | if (!skb) |
f0706e82 | 585 | break; |
836341a7 | 586 | |
d0709a65 | 587 | sdata = sta->sdata; |
836341a7 | 588 | local->total_ps_buffered--; |
f4ea83dd | 589 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
0c68ae26 JB |
590 | printk(KERN_DEBUG "Buffered frame expired (STA %pM)\n", |
591 | sta->sta.addr); | |
f4ea83dd | 592 | #endif |
836341a7 JB |
593 | dev_kfree_skb(skb); |
594 | ||
004c872e JB |
595 | if (skb_queue_empty(&sta->ps_tx_buf)) |
596 | sta_info_clear_tim_bit(sta); | |
f0706e82 JB |
597 | } |
598 | } | |
599 | ||
600 | ||
601 | static void sta_info_cleanup(unsigned long data) | |
602 | { | |
603 | struct ieee80211_local *local = (struct ieee80211_local *) data; | |
604 | struct sta_info *sta; | |
605 | ||
d0709a65 JB |
606 | rcu_read_lock(); |
607 | list_for_each_entry_rcu(sta, &local->sta_list, list) | |
f0706e82 | 608 | sta_info_cleanup_expire_buffered(local, sta); |
d0709a65 | 609 | rcu_read_unlock(); |
f0706e82 | 610 | |
0d174406 JB |
611 | local->sta_cleanup.expires = |
612 | round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL); | |
f0706e82 JB |
613 | add_timer(&local->sta_cleanup); |
614 | } | |
615 | ||
e9f207f0 | 616 | #ifdef CONFIG_MAC80211_DEBUGFS |
4d6141c3 JS |
617 | /* |
618 | * See comment in __sta_info_unlink, | |
619 | * caller must hold local->sta_lock. | |
620 | */ | |
621 | static void __sta_info_pin(struct sta_info *sta) | |
622 | { | |
623 | WARN_ON(sta->pin_status != STA_INFO_PIN_STAT_NORMAL); | |
624 | sta->pin_status = STA_INFO_PIN_STAT_PINNED; | |
625 | } | |
626 | ||
627 | /* | |
628 | * See comment in __sta_info_unlink, returns sta if it | |
629 | * needs to be destroyed. | |
630 | */ | |
631 | static struct sta_info *__sta_info_unpin(struct sta_info *sta) | |
632 | { | |
633 | struct sta_info *ret = NULL; | |
634 | unsigned long flags; | |
635 | ||
636 | spin_lock_irqsave(&sta->local->sta_lock, flags); | |
637 | WARN_ON(sta->pin_status != STA_INFO_PIN_STAT_DESTROY && | |
638 | sta->pin_status != STA_INFO_PIN_STAT_PINNED); | |
639 | if (sta->pin_status == STA_INFO_PIN_STAT_DESTROY) | |
640 | ret = sta; | |
641 | sta->pin_status = STA_INFO_PIN_STAT_NORMAL; | |
642 | spin_unlock_irqrestore(&sta->local->sta_lock, flags); | |
643 | ||
644 | return ret; | |
645 | } | |
646 | ||
d0709a65 | 647 | static void sta_info_debugfs_add_work(struct work_struct *work) |
e9f207f0 JB |
648 | { |
649 | struct ieee80211_local *local = | |
650 | container_of(work, struct ieee80211_local, sta_debugfs_add); | |
651 | struct sta_info *sta, *tmp; | |
d0709a65 | 652 | unsigned long flags; |
e9f207f0 | 653 | |
49ec6fa2 JB |
654 | /* We need to keep the RTNL across the whole pinned status. */ |
655 | rtnl_lock(); | |
e9f207f0 JB |
656 | while (1) { |
657 | sta = NULL; | |
d0709a65 JB |
658 | |
659 | spin_lock_irqsave(&local->sta_lock, flags); | |
e9f207f0 | 660 | list_for_each_entry(tmp, &local->sta_list, list) { |
63044e9f JB |
661 | /* |
662 | * debugfs.add_has_run will be set by | |
663 | * ieee80211_sta_debugfs_add regardless | |
664 | * of what else it does. | |
665 | */ | |
666 | if (!tmp->debugfs.add_has_run) { | |
e9f207f0 | 667 | sta = tmp; |
d0709a65 | 668 | __sta_info_pin(sta); |
e9f207f0 JB |
669 | break; |
670 | } | |
671 | } | |
d0709a65 | 672 | spin_unlock_irqrestore(&local->sta_lock, flags); |
e9f207f0 JB |
673 | |
674 | if (!sta) | |
675 | break; | |
676 | ||
e9f207f0 JB |
677 | ieee80211_sta_debugfs_add(sta); |
678 | rate_control_add_sta_debugfs(sta); | |
d0709a65 JB |
679 | |
680 | sta = __sta_info_unpin(sta); | |
4f6fab47 | 681 | sta_info_destroy(sta); |
e9f207f0 | 682 | } |
49ec6fa2 | 683 | rtnl_unlock(); |
e9f207f0 JB |
684 | } |
685 | #endif | |
686 | ||
f0706e82 JB |
687 | void sta_info_init(struct ieee80211_local *local) |
688 | { | |
d0709a65 | 689 | spin_lock_init(&local->sta_lock); |
f0706e82 | 690 | INIT_LIST_HEAD(&local->sta_list); |
f0706e82 | 691 | |
b24b8a24 PE |
692 | setup_timer(&local->sta_cleanup, sta_info_cleanup, |
693 | (unsigned long)local); | |
0d174406 JB |
694 | local->sta_cleanup.expires = |
695 | round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL); | |
e9f207f0 JB |
696 | |
697 | #ifdef CONFIG_MAC80211_DEBUGFS | |
d0709a65 | 698 | INIT_WORK(&local->sta_debugfs_add, sta_info_debugfs_add_work); |
e9f207f0 | 699 | #endif |
f0706e82 JB |
700 | } |
701 | ||
702 | int sta_info_start(struct ieee80211_local *local) | |
703 | { | |
704 | add_timer(&local->sta_cleanup); | |
705 | return 0; | |
706 | } | |
707 | ||
708 | void sta_info_stop(struct ieee80211_local *local) | |
709 | { | |
f0706e82 | 710 | del_timer(&local->sta_cleanup); |
49ec6fa2 JB |
711 | #ifdef CONFIG_MAC80211_DEBUGFS |
712 | /* | |
713 | * Make sure the debugfs adding work isn't pending after this | |
714 | * because we're about to be destroyed. It doesn't matter | |
715 | * whether it ran or not since we're going to flush all STAs | |
716 | * anyway. | |
717 | */ | |
718 | cancel_work_sync(&local->sta_debugfs_add); | |
719 | #endif | |
dc6676b7 | 720 | |
be8755e1 | 721 | sta_info_flush(local, NULL); |
f0706e82 JB |
722 | } |
723 | ||
f0706e82 JB |
724 | /** |
725 | * sta_info_flush - flush matching STA entries from the STA table | |
44213b5e JB |
726 | * |
727 | * Returns the number of removed STA entries. | |
728 | * | |
f0706e82 | 729 | * @local: local interface data |
d0709a65 | 730 | * @sdata: matching rule for the net device (sta->dev) or %NULL to match all STAs |
f0706e82 | 731 | */ |
44213b5e | 732 | int sta_info_flush(struct ieee80211_local *local, |
af8cdcd8 | 733 | struct ieee80211_sub_if_data *sdata) |
f0706e82 JB |
734 | { |
735 | struct sta_info *sta, *tmp; | |
be8755e1 | 736 | LIST_HEAD(tmp_list); |
44213b5e | 737 | int ret = 0; |
d0709a65 | 738 | unsigned long flags; |
f0706e82 | 739 | |
d0709a65 | 740 | might_sleep(); |
be8755e1 | 741 | |
d0709a65 JB |
742 | spin_lock_irqsave(&local->sta_lock, flags); |
743 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) { | |
744 | if (!sdata || sdata == sta->sdata) { | |
745 | __sta_info_unlink(&sta); | |
44213b5e | 746 | if (sta) { |
d0709a65 | 747 | list_add_tail(&sta->list, &tmp_list); |
44213b5e JB |
748 | ret++; |
749 | } | |
d0709a65 | 750 | } |
be8755e1 | 751 | } |
d0709a65 JB |
752 | spin_unlock_irqrestore(&local->sta_lock, flags); |
753 | ||
d0709a65 JB |
754 | list_for_each_entry_safe(sta, tmp, &tmp_list, list) |
755 | sta_info_destroy(sta); | |
44213b5e JB |
756 | |
757 | return ret; | |
f0706e82 | 758 | } |
dc6676b7 | 759 | |
24723d1b JB |
760 | void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, |
761 | unsigned long exp_time) | |
762 | { | |
763 | struct ieee80211_local *local = sdata->local; | |
764 | struct sta_info *sta, *tmp; | |
765 | LIST_HEAD(tmp_list); | |
24723d1b JB |
766 | unsigned long flags; |
767 | ||
768 | spin_lock_irqsave(&local->sta_lock, flags); | |
769 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) | |
770 | if (time_after(jiffies, sta->last_rx + exp_time)) { | |
771 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0c68ae26 JB |
772 | printk(KERN_DEBUG "%s: expiring inactive STA %pM\n", |
773 | sdata->dev->name, sta->sta.addr); | |
24723d1b JB |
774 | #endif |
775 | __sta_info_unlink(&sta); | |
776 | if (sta) | |
777 | list_add(&sta->list, &tmp_list); | |
778 | } | |
779 | spin_unlock_irqrestore(&local->sta_lock, flags); | |
780 | ||
781 | list_for_each_entry_safe(sta, tmp, &tmp_list, list) | |
782 | sta_info_destroy(sta); | |
783 | } | |
17741cdc JB |
784 | |
785 | struct ieee80211_sta *ieee80211_find_sta(struct ieee80211_hw *hw, | |
c6a1fa12 | 786 | const u8 *addr) |
17741cdc | 787 | { |
4b7679a5 | 788 | struct sta_info *sta = sta_info_get(hw_to_local(hw), addr); |
17741cdc JB |
789 | |
790 | if (!sta) | |
791 | return NULL; | |
792 | return &sta->sta; | |
793 | } | |
794 | EXPORT_SYMBOL(ieee80211_find_sta); |