Root/
1 | /* |
2 | * Copyright 2002-2005, Instant802 Networks, Inc. |
3 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> |
4 | * |
5 | * This program is free software; you can redistribute it and/or modify |
6 | * it under the terms of the GNU General Public License version 2 as |
7 | * published by the Free Software Foundation. |
8 | */ |
9 | |
10 | #include <linux/module.h> |
11 | #include <linux/init.h> |
12 | #include <linux/netdevice.h> |
13 | #include <linux/types.h> |
14 | #include <linux/slab.h> |
15 | #include <linux/skbuff.h> |
16 | #include <linux/if_arp.h> |
17 | #include <linux/timer.h> |
18 | #include <linux/rtnetlink.h> |
19 | |
20 | #include <net/mac80211.h> |
21 | #include "ieee80211_i.h" |
22 | #include "driver-ops.h" |
23 | #include "rate.h" |
24 | #include "sta_info.h" |
25 | #include "debugfs_sta.h" |
26 | #include "mesh.h" |
27 | |
28 | /** |
29 | * DOC: STA information lifetime rules |
30 | * |
31 | * STA info structures (&struct sta_info) are managed in a hash table |
32 | * for faster lookup and a list for iteration. They are managed using |
33 | * RCU, i.e. access to the list and hash table is protected by RCU. |
34 | * |
35 | * Upon allocating a STA info structure with sta_info_alloc(), the caller |
36 | * owns that structure. It must then insert it into the hash table using |
37 | * either sta_info_insert() or sta_info_insert_rcu(); only in the latter |
38 | * case (which acquires an rcu read section but must not be called from |
39 | * within one) will the pointer still be valid after the call. Note that |
40 | * the caller may not do much with the STA info before inserting it, in |
41 | * particular, it may not start any mesh peer link management or add |
42 | * encryption keys. |
43 | * |
44 | * When the insertion fails (sta_info_insert()) returns non-zero), the |
45 | * structure will have been freed by sta_info_insert()! |
46 | * |
47 | * Station entries are added by mac80211 when you establish a link with a |
48 | * peer. This means different things for the different type of interfaces |
49 | * we support. For a regular station this mean we add the AP sta when we |
50 | * receive an assocation response from the AP. For IBSS this occurs when |
51 | * get to know about a peer on the same IBSS. For WDS we add the sta for |
52 | * the peer imediately upon device open. When using AP mode we add stations |
53 | * for each respective station upon request from userspace through nl80211. |
54 | * |
55 | * In order to remove a STA info structure, various sta_info_destroy_*() |
56 | * calls are available. |
57 | * |
58 | * There is no concept of ownership on a STA entry, each structure is |
59 | * owned by the global hash table/list until it is removed. All users of |
60 | * the structure need to be RCU protected so that the structure won't be |
61 | * freed before they are done using it. |
62 | */ |
63 | |
64 | /* Caller must hold local->sta_lock */ |
65 | static int sta_info_hash_del(struct ieee80211_local *local, |
66 | struct sta_info *sta) |
67 | { |
68 | struct sta_info *s; |
69 | |
70 | s = local->sta_hash[STA_HASH(sta->sta.addr)]; |
71 | if (!s) |
72 | return -ENOENT; |
73 | if (s == sta) { |
74 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], |
75 | s->hnext); |
76 | return 0; |
77 | } |
78 | |
79 | while (s->hnext && s->hnext != sta) |
80 | s = s->hnext; |
81 | if (s->hnext) { |
82 | rcu_assign_pointer(s->hnext, sta->hnext); |
83 | return 0; |
84 | } |
85 | |
86 | return -ENOENT; |
87 | } |
88 | |
89 | /* protected by RCU */ |
90 | struct sta_info *sta_info_get(struct ieee80211_sub_if_data *sdata, |
91 | const u8 *addr) |
92 | { |
93 | struct ieee80211_local *local = sdata->local; |
94 | struct sta_info *sta; |
95 | |
96 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
97 | rcu_read_lock_held() || |
98 | lockdep_is_held(&local->sta_lock) || |
99 | lockdep_is_held(&local->sta_mtx)); |
100 | while (sta) { |
101 | if (sta->sdata == sdata && |
102 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) |
103 | break; |
104 | sta = rcu_dereference_check(sta->hnext, |
105 | rcu_read_lock_held() || |
106 | lockdep_is_held(&local->sta_lock) || |
107 | lockdep_is_held(&local->sta_mtx)); |
108 | } |
109 | return sta; |
110 | } |
111 | |
112 | /* |
113 | * Get sta info either from the specified interface |
114 | * or from one of its vlans |
115 | */ |
116 | struct sta_info *sta_info_get_bss(struct ieee80211_sub_if_data *sdata, |
117 | const u8 *addr) |
118 | { |
119 | struct ieee80211_local *local = sdata->local; |
120 | struct sta_info *sta; |
121 | |
122 | sta = rcu_dereference_check(local->sta_hash[STA_HASH(addr)], |
123 | rcu_read_lock_held() || |
124 | lockdep_is_held(&local->sta_lock) || |
125 | lockdep_is_held(&local->sta_mtx)); |
126 | while (sta) { |
127 | if ((sta->sdata == sdata || |
128 | sta->sdata->bss == sdata->bss) && |
129 | memcmp(sta->sta.addr, addr, ETH_ALEN) == 0) |
130 | break; |
131 | sta = rcu_dereference_check(sta->hnext, |
132 | rcu_read_lock_held() || |
133 | lockdep_is_held(&local->sta_lock) || |
134 | lockdep_is_held(&local->sta_mtx)); |
135 | } |
136 | return sta; |
137 | } |
138 | |
139 | struct sta_info *sta_info_get_by_idx(struct ieee80211_sub_if_data *sdata, |
140 | int idx) |
141 | { |
142 | struct ieee80211_local *local = sdata->local; |
143 | struct sta_info *sta; |
144 | int i = 0; |
145 | |
146 | list_for_each_entry_rcu(sta, &local->sta_list, list) { |
147 | if (sdata != sta->sdata) |
148 | continue; |
149 | if (i < idx) { |
150 | ++i; |
151 | continue; |
152 | } |
153 | return sta; |
154 | } |
155 | |
156 | return NULL; |
157 | } |
158 | |
159 | /** |
160 | * __sta_info_free - internal STA free helper |
161 | * |
162 | * @local: pointer to the global information |
163 | * @sta: STA info to free |
164 | * |
165 | * This function must undo everything done by sta_info_alloc() |
166 | * that may happen before sta_info_insert(). |
167 | */ |
168 | static void __sta_info_free(struct ieee80211_local *local, |
169 | struct sta_info *sta) |
170 | { |
171 | if (sta->rate_ctrl) { |
172 | rate_control_free_sta(sta); |
173 | rate_control_put(sta->rate_ctrl); |
174 | } |
175 | |
176 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
177 | printk(KERN_DEBUG "%s: Destroyed STA %pM\n", |
178 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
179 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
180 | |
181 | kfree(sta); |
182 | } |
183 | |
184 | /* Caller must hold local->sta_lock */ |
185 | static void sta_info_hash_add(struct ieee80211_local *local, |
186 | struct sta_info *sta) |
187 | { |
188 | sta->hnext = local->sta_hash[STA_HASH(sta->sta.addr)]; |
189 | rcu_assign_pointer(local->sta_hash[STA_HASH(sta->sta.addr)], sta); |
190 | } |
191 | |
192 | static void sta_unblock(struct work_struct *wk) |
193 | { |
194 | struct sta_info *sta; |
195 | |
196 | sta = container_of(wk, struct sta_info, drv_unblock_wk); |
197 | |
198 | if (sta->dead) |
199 | return; |
200 | |
201 | if (!test_sta_flags(sta, WLAN_STA_PS_STA)) |
202 | ieee80211_sta_ps_deliver_wakeup(sta); |
203 | else if (test_and_clear_sta_flags(sta, WLAN_STA_PSPOLL)) |
204 | ieee80211_sta_ps_deliver_poll_response(sta); |
205 | } |
206 | |
207 | static int sta_prepare_rate_control(struct ieee80211_local *local, |
208 | struct sta_info *sta, gfp_t gfp) |
209 | { |
210 | if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) |
211 | return 0; |
212 | |
213 | sta->rate_ctrl = rate_control_get(local->rate_ctrl); |
214 | sta->rate_ctrl_priv = rate_control_alloc_sta(sta->rate_ctrl, |
215 | &sta->sta, gfp); |
216 | if (!sta->rate_ctrl_priv) { |
217 | rate_control_put(sta->rate_ctrl); |
218 | return -ENOMEM; |
219 | } |
220 | |
221 | return 0; |
222 | } |
223 | |
224 | struct sta_info *sta_info_alloc(struct ieee80211_sub_if_data *sdata, |
225 | u8 *addr, gfp_t gfp) |
226 | { |
227 | struct ieee80211_local *local = sdata->local; |
228 | struct sta_info *sta; |
229 | int i; |
230 | |
231 | sta = kzalloc(sizeof(*sta) + local->hw.sta_data_size, gfp); |
232 | if (!sta) |
233 | return NULL; |
234 | |
235 | spin_lock_init(&sta->lock); |
236 | spin_lock_init(&sta->flaglock); |
237 | INIT_WORK(&sta->drv_unblock_wk, sta_unblock); |
238 | |
239 | memcpy(sta->sta.addr, addr, ETH_ALEN); |
240 | sta->local = local; |
241 | sta->sdata = sdata; |
242 | |
243 | if (sta_prepare_rate_control(local, sta, gfp)) { |
244 | kfree(sta); |
245 | return NULL; |
246 | } |
247 | |
248 | for (i = 0; i < STA_TID_NUM; i++) { |
249 | /* timer_to_tid must be initialized with identity mapping to |
250 | * enable session_timer's data differentiation. refer to |
251 | * sta_rx_agg_session_timer_expired for useage */ |
252 | sta->timer_to_tid[i] = i; |
253 | /* rx */ |
254 | sta->ampdu_mlme.tid_state_rx[i] = HT_AGG_STATE_IDLE; |
255 | sta->ampdu_mlme.tid_rx[i] = NULL; |
256 | /* tx */ |
257 | sta->ampdu_mlme.tid_state_tx[i] = HT_AGG_STATE_IDLE; |
258 | sta->ampdu_mlme.tid_tx[i] = NULL; |
259 | sta->ampdu_mlme.addba_req_num[i] = 0; |
260 | } |
261 | skb_queue_head_init(&sta->ps_tx_buf); |
262 | skb_queue_head_init(&sta->tx_filtered); |
263 | |
264 | for (i = 0; i < NUM_RX_DATA_QUEUES; i++) |
265 | sta->last_seq_ctrl[i] = cpu_to_le16(USHORT_MAX); |
266 | |
267 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
268 | printk(KERN_DEBUG "%s: Allocated STA %pM\n", |
269 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
270 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
271 | |
272 | #ifdef CONFIG_MAC80211_MESH |
273 | sta->plink_state = PLINK_LISTEN; |
274 | init_timer(&sta->plink_timer); |
275 | #endif |
276 | |
277 | return sta; |
278 | } |
279 | |
280 | static int sta_info_finish_insert(struct sta_info *sta, bool async) |
281 | { |
282 | struct ieee80211_local *local = sta->local; |
283 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
284 | struct station_info sinfo; |
285 | unsigned long flags; |
286 | int err = 0; |
287 | |
288 | WARN_ON(!mutex_is_locked(&local->sta_mtx)); |
289 | |
290 | /* notify driver */ |
291 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
292 | sdata = container_of(sdata->bss, |
293 | struct ieee80211_sub_if_data, |
294 | u.ap); |
295 | err = drv_sta_add(local, sdata, &sta->sta); |
296 | if (err) { |
297 | if (!async) |
298 | return err; |
299 | printk(KERN_DEBUG "%s: failed to add IBSS STA %pM to driver (%d)" |
300 | " - keeping it anyway.\n", |
301 | sdata->name, sta->sta.addr, err); |
302 | } else { |
303 | sta->uploaded = true; |
304 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
305 | if (async) |
306 | printk(KERN_DEBUG "%s: Finished adding IBSS STA %pM\n", |
307 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
308 | #endif |
309 | } |
310 | |
311 | sdata = sta->sdata; |
312 | |
313 | if (!async) { |
314 | local->num_sta++; |
315 | local->sta_generation++; |
316 | smp_mb(); |
317 | |
318 | /* make the station visible */ |
319 | spin_lock_irqsave(&local->sta_lock, flags); |
320 | sta_info_hash_add(local, sta); |
321 | spin_unlock_irqrestore(&local->sta_lock, flags); |
322 | } |
323 | |
324 | list_add(&sta->list, &local->sta_list); |
325 | |
326 | ieee80211_sta_debugfs_add(sta); |
327 | rate_control_add_sta_debugfs(sta); |
328 | |
329 | sinfo.filled = 0; |
330 | sinfo.generation = local->sta_generation; |
331 | cfg80211_new_sta(sdata->dev, sta->sta.addr, &sinfo, GFP_KERNEL); |
332 | |
333 | |
334 | return 0; |
335 | } |
336 | |
337 | static void sta_info_finish_pending(struct ieee80211_local *local) |
338 | { |
339 | struct sta_info *sta; |
340 | unsigned long flags; |
341 | |
342 | spin_lock_irqsave(&local->sta_lock, flags); |
343 | while (!list_empty(&local->sta_pending_list)) { |
344 | sta = list_first_entry(&local->sta_pending_list, |
345 | struct sta_info, list); |
346 | list_del(&sta->list); |
347 | spin_unlock_irqrestore(&local->sta_lock, flags); |
348 | |
349 | sta_info_finish_insert(sta, true); |
350 | |
351 | spin_lock_irqsave(&local->sta_lock, flags); |
352 | } |
353 | spin_unlock_irqrestore(&local->sta_lock, flags); |
354 | } |
355 | |
356 | static void sta_info_finish_work(struct work_struct *work) |
357 | { |
358 | struct ieee80211_local *local = |
359 | container_of(work, struct ieee80211_local, sta_finish_work); |
360 | |
361 | mutex_lock(&local->sta_mtx); |
362 | sta_info_finish_pending(local); |
363 | mutex_unlock(&local->sta_mtx); |
364 | } |
365 | |
366 | int sta_info_insert_rcu(struct sta_info *sta) __acquires(RCU) |
367 | { |
368 | struct ieee80211_local *local = sta->local; |
369 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
370 | unsigned long flags; |
371 | int err = 0; |
372 | |
373 | /* |
374 | * Can't be a WARN_ON because it can be triggered through a race: |
375 | * something inserts a STA (on one CPU) without holding the RTNL |
376 | * and another CPU turns off the net device. |
377 | */ |
378 | if (unlikely(!ieee80211_sdata_running(sdata))) { |
379 | err = -ENETDOWN; |
380 | rcu_read_lock(); |
381 | goto out_free; |
382 | } |
383 | |
384 | if (WARN_ON(compare_ether_addr(sta->sta.addr, sdata->vif.addr) == 0 || |
385 | is_multicast_ether_addr(sta->sta.addr))) { |
386 | err = -EINVAL; |
387 | rcu_read_lock(); |
388 | goto out_free; |
389 | } |
390 | |
391 | /* |
392 | * In ad-hoc mode, we sometimes need to insert stations |
393 | * from tasklet context from the RX path. To avoid races, |
394 | * always do so in that case -- see the comment below. |
395 | */ |
396 | if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { |
397 | spin_lock_irqsave(&local->sta_lock, flags); |
398 | /* check if STA exists already */ |
399 | if (sta_info_get_bss(sdata, sta->sta.addr)) { |
400 | spin_unlock_irqrestore(&local->sta_lock, flags); |
401 | rcu_read_lock(); |
402 | err = -EEXIST; |
403 | goto out_free; |
404 | } |
405 | |
406 | local->num_sta++; |
407 | local->sta_generation++; |
408 | smp_mb(); |
409 | sta_info_hash_add(local, sta); |
410 | |
411 | list_add_tail(&sta->list, &local->sta_pending_list); |
412 | |
413 | rcu_read_lock(); |
414 | spin_unlock_irqrestore(&local->sta_lock, flags); |
415 | |
416 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
417 | printk(KERN_DEBUG "%s: Added IBSS STA %pM\n", |
418 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
419 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
420 | |
421 | ieee80211_queue_work(&local->hw, &local->sta_finish_work); |
422 | |
423 | return 0; |
424 | } |
425 | |
426 | /* |
427 | * On first glance, this will look racy, because the code |
428 | * below this point, which inserts a station with sleeping, |
429 | * unlocks the sta_lock between checking existence in the |
430 | * hash table and inserting into it. |
431 | * |
432 | * However, it is not racy against itself because it keeps |
433 | * the mutex locked. It still seems to race against the |
434 | * above code that atomically inserts the station... That, |
435 | * however, is not true because the above code can only |
436 | * be invoked for IBSS interfaces, and the below code will |
437 | * not be -- and the two do not race against each other as |
438 | * the hash table also keys off the interface. |
439 | */ |
440 | |
441 | might_sleep(); |
442 | |
443 | mutex_lock(&local->sta_mtx); |
444 | |
445 | spin_lock_irqsave(&local->sta_lock, flags); |
446 | /* check if STA exists already */ |
447 | if (sta_info_get_bss(sdata, sta->sta.addr)) { |
448 | spin_unlock_irqrestore(&local->sta_lock, flags); |
449 | mutex_unlock(&local->sta_mtx); |
450 | rcu_read_lock(); |
451 | err = -EEXIST; |
452 | goto out_free; |
453 | } |
454 | |
455 | spin_unlock_irqrestore(&local->sta_lock, flags); |
456 | |
457 | err = sta_info_finish_insert(sta, false); |
458 | if (err) { |
459 | mutex_unlock(&local->sta_mtx); |
460 | rcu_read_lock(); |
461 | goto out_free; |
462 | } |
463 | |
464 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
465 | printk(KERN_DEBUG "%s: Inserted STA %pM\n", |
466 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
467 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
468 | |
469 | /* move reference to rcu-protected */ |
470 | rcu_read_lock(); |
471 | mutex_unlock(&local->sta_mtx); |
472 | |
473 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
474 | mesh_accept_plinks_update(sdata); |
475 | |
476 | return 0; |
477 | out_free: |
478 | BUG_ON(!err); |
479 | __sta_info_free(local, sta); |
480 | return err; |
481 | } |
482 | |
483 | int sta_info_insert(struct sta_info *sta) |
484 | { |
485 | int err = sta_info_insert_rcu(sta); |
486 | |
487 | rcu_read_unlock(); |
488 | |
489 | return err; |
490 | } |
491 | |
492 | static inline void __bss_tim_set(struct ieee80211_if_ap *bss, u16 aid) |
493 | { |
494 | /* |
495 | * This format has been mandated by the IEEE specifications, |
496 | * so this line may not be changed to use the __set_bit() format. |
497 | */ |
498 | bss->tim[aid / 8] |= (1 << (aid % 8)); |
499 | } |
500 | |
501 | static inline void __bss_tim_clear(struct ieee80211_if_ap *bss, u16 aid) |
502 | { |
503 | /* |
504 | * This format has been mandated by the IEEE specifications, |
505 | * so this line may not be changed to use the __clear_bit() format. |
506 | */ |
507 | bss->tim[aid / 8] &= ~(1 << (aid % 8)); |
508 | } |
509 | |
510 | static void __sta_info_set_tim_bit(struct ieee80211_if_ap *bss, |
511 | struct sta_info *sta) |
512 | { |
513 | BUG_ON(!bss); |
514 | |
515 | __bss_tim_set(bss, sta->sta.aid); |
516 | |
517 | if (sta->local->ops->set_tim) { |
518 | sta->local->tim_in_locked_section = true; |
519 | drv_set_tim(sta->local, &sta->sta, true); |
520 | sta->local->tim_in_locked_section = false; |
521 | } |
522 | } |
523 | |
524 | void sta_info_set_tim_bit(struct sta_info *sta) |
525 | { |
526 | unsigned long flags; |
527 | |
528 | BUG_ON(!sta->sdata->bss); |
529 | |
530 | spin_lock_irqsave(&sta->local->sta_lock, flags); |
531 | __sta_info_set_tim_bit(sta->sdata->bss, sta); |
532 | spin_unlock_irqrestore(&sta->local->sta_lock, flags); |
533 | } |
534 | |
535 | static void __sta_info_clear_tim_bit(struct ieee80211_if_ap *bss, |
536 | struct sta_info *sta) |
537 | { |
538 | BUG_ON(!bss); |
539 | |
540 | __bss_tim_clear(bss, sta->sta.aid); |
541 | |
542 | if (sta->local->ops->set_tim) { |
543 | sta->local->tim_in_locked_section = true; |
544 | drv_set_tim(sta->local, &sta->sta, false); |
545 | sta->local->tim_in_locked_section = false; |
546 | } |
547 | } |
548 | |
549 | void sta_info_clear_tim_bit(struct sta_info *sta) |
550 | { |
551 | unsigned long flags; |
552 | |
553 | BUG_ON(!sta->sdata->bss); |
554 | |
555 | spin_lock_irqsave(&sta->local->sta_lock, flags); |
556 | __sta_info_clear_tim_bit(sta->sdata->bss, sta); |
557 | spin_unlock_irqrestore(&sta->local->sta_lock, flags); |
558 | } |
559 | |
560 | static int sta_info_buffer_expired(struct sta_info *sta, |
561 | struct sk_buff *skb) |
562 | { |
563 | struct ieee80211_tx_info *info; |
564 | int timeout; |
565 | |
566 | if (!skb) |
567 | return 0; |
568 | |
569 | info = IEEE80211_SKB_CB(skb); |
570 | |
571 | /* Timeout: (2 * listen_interval * beacon_int * 1024 / 1000000) sec */ |
572 | timeout = (sta->listen_interval * |
573 | sta->sdata->vif.bss_conf.beacon_int * |
574 | 32 / 15625) * HZ; |
575 | if (timeout < STA_TX_BUFFER_EXPIRE) |
576 | timeout = STA_TX_BUFFER_EXPIRE; |
577 | return time_after(jiffies, info->control.jiffies + timeout); |
578 | } |
579 | |
580 | |
581 | static void sta_info_cleanup_expire_buffered(struct ieee80211_local *local, |
582 | struct sta_info *sta) |
583 | { |
584 | unsigned long flags; |
585 | struct sk_buff *skb; |
586 | struct ieee80211_sub_if_data *sdata; |
587 | |
588 | if (skb_queue_empty(&sta->ps_tx_buf)) |
589 | return; |
590 | |
591 | for (;;) { |
592 | spin_lock_irqsave(&sta->ps_tx_buf.lock, flags); |
593 | skb = skb_peek(&sta->ps_tx_buf); |
594 | if (sta_info_buffer_expired(sta, skb)) |
595 | skb = __skb_dequeue(&sta->ps_tx_buf); |
596 | else |
597 | skb = NULL; |
598 | spin_unlock_irqrestore(&sta->ps_tx_buf.lock, flags); |
599 | |
600 | if (!skb) |
601 | break; |
602 | |
603 | sdata = sta->sdata; |
604 | local->total_ps_buffered--; |
605 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
606 | printk(KERN_DEBUG "Buffered frame expired (STA %pM)\n", |
607 | sta->sta.addr); |
608 | #endif |
609 | dev_kfree_skb(skb); |
610 | |
611 | if (skb_queue_empty(&sta->ps_tx_buf)) |
612 | sta_info_clear_tim_bit(sta); |
613 | } |
614 | } |
615 | |
616 | static int __must_check __sta_info_destroy(struct sta_info *sta) |
617 | { |
618 | struct ieee80211_local *local; |
619 | struct ieee80211_sub_if_data *sdata; |
620 | struct sk_buff *skb; |
621 | unsigned long flags; |
622 | int ret, i; |
623 | |
624 | might_sleep(); |
625 | |
626 | if (!sta) |
627 | return -ENOENT; |
628 | |
629 | local = sta->local; |
630 | sdata = sta->sdata; |
631 | |
632 | spin_lock_irqsave(&local->sta_lock, flags); |
633 | ret = sta_info_hash_del(local, sta); |
634 | /* this might still be the pending list ... which is fine */ |
635 | if (!ret) |
636 | list_del(&sta->list); |
637 | spin_unlock_irqrestore(&local->sta_lock, flags); |
638 | if (ret) |
639 | return ret; |
640 | |
641 | if (sta->key) { |
642 | ieee80211_key_free(sta->key); |
643 | /* |
644 | * We have only unlinked the key, and actually destroying it |
645 | * may mean it is removed from hardware which requires that |
646 | * the key->sta pointer is still valid, so flush the key todo |
647 | * list here. |
648 | * |
649 | * ieee80211_key_todo() will synchronize_rcu() so after this |
650 | * nothing can reference this sta struct any more. |
651 | */ |
652 | ieee80211_key_todo(); |
653 | |
654 | WARN_ON(sta->key); |
655 | } |
656 | |
657 | sta->dead = true; |
658 | |
659 | if (test_and_clear_sta_flags(sta, |
660 | WLAN_STA_PS_STA | WLAN_STA_PS_DRIVER)) { |
661 | BUG_ON(!sdata->bss); |
662 | |
663 | atomic_dec(&sdata->bss->num_sta_ps); |
664 | __sta_info_clear_tim_bit(sdata->bss, sta); |
665 | } |
666 | |
667 | local->num_sta--; |
668 | local->sta_generation++; |
669 | |
670 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
671 | rcu_assign_pointer(sdata->u.vlan.sta, NULL); |
672 | |
673 | if (sta->uploaded) { |
674 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
675 | sdata = container_of(sdata->bss, |
676 | struct ieee80211_sub_if_data, |
677 | u.ap); |
678 | drv_sta_remove(local, sdata, &sta->sta); |
679 | sdata = sta->sdata; |
680 | } |
681 | |
682 | #ifdef CONFIG_MAC80211_MESH |
683 | if (ieee80211_vif_is_mesh(&sdata->vif)) { |
684 | mesh_accept_plinks_update(sdata); |
685 | del_timer(&sta->plink_timer); |
686 | } |
687 | #endif |
688 | |
689 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
690 | printk(KERN_DEBUG "%s: Removed STA %pM\n", |
691 | wiphy_name(local->hw.wiphy), sta->sta.addr); |
692 | #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */ |
693 | cancel_work_sync(&sta->drv_unblock_wk); |
694 | |
695 | rate_control_remove_sta_debugfs(sta); |
696 | ieee80211_sta_debugfs_remove(sta); |
697 | |
698 | #ifdef CONFIG_MAC80211_MESH |
699 | if (ieee80211_vif_is_mesh(&sta->sdata->vif)) { |
700 | mesh_plink_deactivate(sta); |
701 | del_timer_sync(&sta->plink_timer); |
702 | } |
703 | #endif |
704 | |
705 | while ((skb = skb_dequeue(&sta->ps_tx_buf)) != NULL) { |
706 | local->total_ps_buffered--; |
707 | dev_kfree_skb_any(skb); |
708 | } |
709 | |
710 | while ((skb = skb_dequeue(&sta->tx_filtered)) != NULL) |
711 | dev_kfree_skb_any(skb); |
712 | |
713 | for (i = 0; i < STA_TID_NUM; i++) { |
714 | struct tid_ampdu_rx *tid_rx; |
715 | struct tid_ampdu_tx *tid_tx; |
716 | |
717 | spin_lock_bh(&sta->lock); |
718 | tid_rx = sta->ampdu_mlme.tid_rx[i]; |
719 | /* Make sure timer won't free the tid_rx struct, see below */ |
720 | if (tid_rx) |
721 | tid_rx->shutdown = true; |
722 | |
723 | spin_unlock_bh(&sta->lock); |
724 | |
725 | /* |
726 | * Outside spinlock - shutdown is true now so that the timer |
727 | * won't free tid_rx, we have to do that now. Can't let the |
728 | * timer do it because we have to sync the timer outside the |
729 | * lock that it takes itself. |
730 | */ |
731 | if (tid_rx) { |
732 | del_timer_sync(&tid_rx->session_timer); |
733 | kfree(tid_rx); |
734 | } |
735 | |
736 | /* |
737 | * No need to do such complications for TX agg sessions, the |
738 | * path leading to freeing the tid_tx struct goes via a call |
739 | * from the driver, and thus needs to look up the sta struct |
740 | * again, which cannot be found when we get here. Hence, we |
741 | * just need to delete the timer and free the aggregation |
742 | * info; we won't be telling the peer about it then but that |
743 | * doesn't matter if we're not talking to it again anyway. |
744 | */ |
745 | tid_tx = sta->ampdu_mlme.tid_tx[i]; |
746 | if (tid_tx) { |
747 | del_timer_sync(&tid_tx->addba_resp_timer); |
748 | /* |
749 | * STA removed while aggregation session being |
750 | * started? Bit odd, but purge frames anyway. |
751 | */ |
752 | skb_queue_purge(&tid_tx->pending); |
753 | kfree(tid_tx); |
754 | } |
755 | } |
756 | |
757 | __sta_info_free(local, sta); |
758 | |
759 | return 0; |
760 | } |
761 | |
762 | int sta_info_destroy_addr(struct ieee80211_sub_if_data *sdata, const u8 *addr) |
763 | { |
764 | struct sta_info *sta; |
765 | int ret; |
766 | |
767 | mutex_lock(&sdata->local->sta_mtx); |
768 | sta = sta_info_get(sdata, addr); |
769 | ret = __sta_info_destroy(sta); |
770 | mutex_unlock(&sdata->local->sta_mtx); |
771 | |
772 | return ret; |
773 | } |
774 | |
775 | int sta_info_destroy_addr_bss(struct ieee80211_sub_if_data *sdata, |
776 | const u8 *addr) |
777 | { |
778 | struct sta_info *sta; |
779 | int ret; |
780 | |
781 | mutex_lock(&sdata->local->sta_mtx); |
782 | sta = sta_info_get_bss(sdata, addr); |
783 | ret = __sta_info_destroy(sta); |
784 | mutex_unlock(&sdata->local->sta_mtx); |
785 | |
786 | return ret; |
787 | } |
788 | |
789 | static void sta_info_cleanup(unsigned long data) |
790 | { |
791 | struct ieee80211_local *local = (struct ieee80211_local *) data; |
792 | struct sta_info *sta; |
793 | |
794 | rcu_read_lock(); |
795 | list_for_each_entry_rcu(sta, &local->sta_list, list) |
796 | sta_info_cleanup_expire_buffered(local, sta); |
797 | rcu_read_unlock(); |
798 | |
799 | if (local->quiescing) |
800 | return; |
801 | |
802 | local->sta_cleanup.expires = |
803 | round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL); |
804 | add_timer(&local->sta_cleanup); |
805 | } |
806 | |
807 | void sta_info_init(struct ieee80211_local *local) |
808 | { |
809 | spin_lock_init(&local->sta_lock); |
810 | mutex_init(&local->sta_mtx); |
811 | INIT_LIST_HEAD(&local->sta_list); |
812 | INIT_LIST_HEAD(&local->sta_pending_list); |
813 | INIT_WORK(&local->sta_finish_work, sta_info_finish_work); |
814 | |
815 | setup_timer(&local->sta_cleanup, sta_info_cleanup, |
816 | (unsigned long)local); |
817 | local->sta_cleanup.expires = |
818 | round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL); |
819 | } |
820 | |
821 | int sta_info_start(struct ieee80211_local *local) |
822 | { |
823 | add_timer(&local->sta_cleanup); |
824 | return 0; |
825 | } |
826 | |
827 | void sta_info_stop(struct ieee80211_local *local) |
828 | { |
829 | del_timer(&local->sta_cleanup); |
830 | sta_info_flush(local, NULL); |
831 | } |
832 | |
833 | /** |
834 | * sta_info_flush - flush matching STA entries from the STA table |
835 | * |
836 | * Returns the number of removed STA entries. |
837 | * |
838 | * @local: local interface data |
839 | * @sdata: matching rule for the net device (sta->dev) or %NULL to match all STAs |
840 | */ |
841 | int sta_info_flush(struct ieee80211_local *local, |
842 | struct ieee80211_sub_if_data *sdata) |
843 | { |
844 | struct sta_info *sta, *tmp; |
845 | int ret = 0; |
846 | |
847 | might_sleep(); |
848 | |
849 | mutex_lock(&local->sta_mtx); |
850 | |
851 | sta_info_finish_pending(local); |
852 | |
853 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) { |
854 | if (!sdata || sdata == sta->sdata) |
855 | WARN_ON(__sta_info_destroy(sta)); |
856 | } |
857 | mutex_unlock(&local->sta_mtx); |
858 | |
859 | return ret; |
860 | } |
861 | |
862 | void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, |
863 | unsigned long exp_time) |
864 | { |
865 | struct ieee80211_local *local = sdata->local; |
866 | struct sta_info *sta, *tmp; |
867 | |
868 | mutex_lock(&local->sta_mtx); |
869 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) |
870 | if (time_after(jiffies, sta->last_rx + exp_time)) { |
871 | #ifdef CONFIG_MAC80211_IBSS_DEBUG |
872 | printk(KERN_DEBUG "%s: expiring inactive STA %pM\n", |
873 | sdata->name, sta->sta.addr); |
874 | #endif |
875 | WARN_ON(__sta_info_destroy(sta)); |
876 | } |
877 | mutex_unlock(&local->sta_mtx); |
878 | } |
879 | |
880 | struct ieee80211_sta *ieee80211_find_sta_by_hw(struct ieee80211_hw *hw, |
881 | const u8 *addr) |
882 | { |
883 | struct sta_info *sta, *nxt; |
884 | |
885 | /* Just return a random station ... first in list ... */ |
886 | for_each_sta_info(hw_to_local(hw), addr, sta, nxt) |
887 | return &sta->sta; |
888 | return NULL; |
889 | } |
890 | EXPORT_SYMBOL_GPL(ieee80211_find_sta_by_hw); |
891 | |
892 | struct ieee80211_sta *ieee80211_find_sta(struct ieee80211_vif *vif, |
893 | const u8 *addr) |
894 | { |
895 | struct ieee80211_sub_if_data *sdata; |
896 | |
897 | if (!vif) |
898 | return NULL; |
899 | |
900 | sdata = vif_to_sdata(vif); |
901 | |
902 | return ieee80211_find_sta_by_hw(&sdata->local->hw, addr); |
903 | } |
904 | EXPORT_SYMBOL(ieee80211_find_sta); |
905 | |
906 | /* powersave support code */ |
907 | void ieee80211_sta_ps_deliver_wakeup(struct sta_info *sta) |
908 | { |
909 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
910 | struct ieee80211_local *local = sdata->local; |
911 | int sent, buffered; |
912 | |
913 | drv_sta_notify(local, sdata, STA_NOTIFY_AWAKE, &sta->sta); |
914 | |
915 | if (!skb_queue_empty(&sta->ps_tx_buf)) |
916 | sta_info_clear_tim_bit(sta); |
917 | |
918 | /* Send all buffered frames to the station */ |
919 | sent = ieee80211_add_pending_skbs(local, &sta->tx_filtered); |
920 | buffered = ieee80211_add_pending_skbs(local, &sta->ps_tx_buf); |
921 | sent += buffered; |
922 | local->total_ps_buffered -= buffered; |
923 | |
924 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
925 | printk(KERN_DEBUG "%s: STA %pM aid %d sending %d filtered/%d PS frames " |
926 | "since STA not sleeping anymore\n", sdata->name, |
927 | sta->sta.addr, sta->sta.aid, sent - buffered, buffered); |
928 | #endif /* CONFIG_MAC80211_VERBOSE_PS_DEBUG */ |
929 | } |
930 | |
931 | void ieee80211_sta_ps_deliver_poll_response(struct sta_info *sta) |
932 | { |
933 | struct ieee80211_sub_if_data *sdata = sta->sdata; |
934 | struct ieee80211_local *local = sdata->local; |
935 | struct sk_buff *skb; |
936 | int no_pending_pkts; |
937 | |
938 | skb = skb_dequeue(&sta->tx_filtered); |
939 | if (!skb) { |
940 | skb = skb_dequeue(&sta->ps_tx_buf); |
941 | if (skb) |
942 | local->total_ps_buffered--; |
943 | } |
944 | no_pending_pkts = skb_queue_empty(&sta->tx_filtered) && |
945 | skb_queue_empty(&sta->ps_tx_buf); |
946 | |
947 | if (skb) { |
948 | struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); |
949 | struct ieee80211_hdr *hdr = |
950 | (struct ieee80211_hdr *) skb->data; |
951 | |
952 | /* |
953 | * Tell TX path to send this frame even though the STA may |
954 | * still remain is PS mode after this frame exchange. |
955 | */ |
956 | info->flags |= IEEE80211_TX_CTL_PSPOLL_RESPONSE; |
957 | |
958 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
959 | printk(KERN_DEBUG "STA %pM aid %d: PS Poll (entries after %d)\n", |
960 | sta->sta.addr, sta->sta.aid, |
961 | skb_queue_len(&sta->ps_tx_buf)); |
962 | #endif /* CONFIG_MAC80211_VERBOSE_PS_DEBUG */ |
963 | |
964 | /* Use MoreData flag to indicate whether there are more |
965 | * buffered frames for this STA */ |
966 | if (no_pending_pkts) |
967 | hdr->frame_control &= cpu_to_le16(~IEEE80211_FCTL_MOREDATA); |
968 | else |
969 | hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_MOREDATA); |
970 | |
971 | ieee80211_add_pending_skb(local, skb); |
972 | |
973 | if (no_pending_pkts) |
974 | sta_info_clear_tim_bit(sta); |
975 | #ifdef CONFIG_MAC80211_VERBOSE_PS_DEBUG |
976 | } else { |
977 | /* |
978 | * FIXME: This can be the result of a race condition between |
979 | * us expiring a frame and the station polling for it. |
980 | * Should we send it a null-func frame indicating we |
981 | * have nothing buffered for it? |
982 | */ |
983 | printk(KERN_DEBUG "%s: STA %pM sent PS Poll even " |
984 | "though there are no buffered frames for it\n", |
985 | sdata->name, sta->sta.addr); |
986 | #endif /* CONFIG_MAC80211_VERBOSE_PS_DEBUG */ |
987 | } |
988 | } |
989 | |
990 | void ieee80211_sta_block_awake(struct ieee80211_hw *hw, |
991 | struct ieee80211_sta *pubsta, bool block) |
992 | { |
993 | struct sta_info *sta = container_of(pubsta, struct sta_info, sta); |
994 | |
995 | if (block) |
996 | set_sta_flags(sta, WLAN_STA_PS_DRIVER); |
997 | else |
998 | ieee80211_queue_work(hw, &sta->drv_unblock_wk); |
999 | } |
1000 | EXPORT_SYMBOL(ieee80211_sta_block_awake); |
1001 |
Branches:
ben-wpan
ben-wpan-stefan
javiroman/ks7010
jz-2.6.34
jz-2.6.34-rc5
jz-2.6.34-rc6
jz-2.6.34-rc7
jz-2.6.35
jz-2.6.36
jz-2.6.37
jz-2.6.38
jz-2.6.39
jz-3.0
jz-3.1
jz-3.11
jz-3.12
jz-3.13
jz-3.15
jz-3.16
jz-3.18-dt
jz-3.2
jz-3.3
jz-3.4
jz-3.5
jz-3.6
jz-3.6-rc2-pwm
jz-3.9
jz-3.9-clk
jz-3.9-rc8
jz47xx
jz47xx-2.6.38
master
Tags:
od-2011-09-04
od-2011-09-18
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v3.9