cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

11h.c (9987B)


      1/*
      2 * NXP Wireless LAN device driver: 802.11h
      3 *
      4 * Copyright 2011-2020 NXP
      5 *
      6 * This software file (the "File") is distributed by NXP
      7 * under the terms of the GNU General Public License Version 2, June 1991
      8 * (the "License").  You may use, redistribute and/or modify this File in
      9 * accordance with the terms and conditions of the License, a copy of which
     10 * is available by writing to the Free Software Foundation, Inc.,
     11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
     12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
     13 *
     14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
     15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
     16 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
     17 * this warranty disclaimer.
     18 */
     19
     20#include "main.h"
     21#include "fw.h"
     22
     23
     24void mwifiex_init_11h_params(struct mwifiex_private *priv)
     25{
     26	priv->state_11h.is_11h_enabled = true;
     27	priv->state_11h.is_11h_active = false;
     28}
     29
     30inline int mwifiex_is_11h_active(struct mwifiex_private *priv)
     31{
     32	return priv->state_11h.is_11h_active;
     33}
     34/* This function appends 11h info to a buffer while joining an
     35 * infrastructure BSS
     36 */
     37static void
     38mwifiex_11h_process_infra_join(struct mwifiex_private *priv, u8 **buffer,
     39			       struct mwifiex_bssdescriptor *bss_desc)
     40{
     41	struct mwifiex_ie_types_header *ie_header;
     42	struct mwifiex_ie_types_pwr_capability *cap;
     43	struct mwifiex_ie_types_local_pwr_constraint *constraint;
     44	struct ieee80211_supported_band *sband;
     45	u8 radio_type;
     46	int i;
     47
     48	if (!buffer || !(*buffer))
     49		return;
     50
     51	radio_type = mwifiex_band_to_radio_type((u8) bss_desc->bss_band);
     52	sband = priv->wdev.wiphy->bands[radio_type];
     53
     54	cap = (struct mwifiex_ie_types_pwr_capability *)*buffer;
     55	cap->header.type = cpu_to_le16(WLAN_EID_PWR_CAPABILITY);
     56	cap->header.len = cpu_to_le16(2);
     57	cap->min_pwr = 0;
     58	cap->max_pwr = 0;
     59	*buffer += sizeof(*cap);
     60
     61	constraint = (struct mwifiex_ie_types_local_pwr_constraint *)*buffer;
     62	constraint->header.type = cpu_to_le16(WLAN_EID_PWR_CONSTRAINT);
     63	constraint->header.len = cpu_to_le16(2);
     64	constraint->chan = bss_desc->channel;
     65	constraint->constraint = bss_desc->local_constraint;
     66	*buffer += sizeof(*constraint);
     67
     68	ie_header = (struct mwifiex_ie_types_header *)*buffer;
     69	ie_header->type = cpu_to_le16(TLV_TYPE_PASSTHROUGH);
     70	ie_header->len  = cpu_to_le16(2 * sband->n_channels + 2);
     71	*buffer += sizeof(*ie_header);
     72	*(*buffer)++ = WLAN_EID_SUPPORTED_CHANNELS;
     73	*(*buffer)++ = 2 * sband->n_channels;
     74	for (i = 0; i < sband->n_channels; i++) {
     75		*(*buffer)++ = ieee80211_frequency_to_channel(
     76					sband->channels[i].center_freq);
     77		*(*buffer)++ = 1; /* one channel in the subband */
     78	}
     79}
     80
     81/* Enable or disable the 11h extensions in the firmware */
     82int mwifiex_11h_activate(struct mwifiex_private *priv, bool flag)
     83{
     84	u32 enable = flag;
     85
     86	/* enable master mode radar detection on AP interface */
     87	if ((GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) && enable)
     88		enable |= MWIFIEX_MASTER_RADAR_DET_MASK;
     89
     90	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
     91				HostCmd_ACT_GEN_SET, DOT11H_I, &enable, true);
     92}
     93
     94/* This functions processes TLV buffer for a pending BSS Join command.
     95 *
     96 * Activate 11h functionality in the firmware if the spectrum management
     97 * capability bit is found in the network we are joining. Also, necessary
     98 * TLVs are set based on requested network's 11h capability.
     99 */
    100void mwifiex_11h_process_join(struct mwifiex_private *priv, u8 **buffer,
    101			      struct mwifiex_bssdescriptor *bss_desc)
    102{
    103	if (bss_desc->sensed_11h) {
    104		/* Activate 11h functions in firmware, turns on capability
    105		 * bit
    106		 */
    107		mwifiex_11h_activate(priv, true);
    108		priv->state_11h.is_11h_active = true;
    109		bss_desc->cap_info_bitmap |= WLAN_CAPABILITY_SPECTRUM_MGMT;
    110		mwifiex_11h_process_infra_join(priv, buffer, bss_desc);
    111	} else {
    112		/* Deactivate 11h functions in the firmware */
    113		mwifiex_11h_activate(priv, false);
    114		priv->state_11h.is_11h_active = false;
    115		bss_desc->cap_info_bitmap &= ~WLAN_CAPABILITY_SPECTRUM_MGMT;
    116	}
    117}
    118
    119/* This is DFS CAC work queue function.
    120 * This delayed work emits CAC finished event for cfg80211 if
    121 * CAC was started earlier.
    122 */
    123void mwifiex_dfs_cac_work_queue(struct work_struct *work)
    124{
    125	struct cfg80211_chan_def chandef;
    126	struct delayed_work *delayed_work = to_delayed_work(work);
    127	struct mwifiex_private *priv =
    128			container_of(delayed_work, struct mwifiex_private,
    129				     dfs_cac_work);
    130
    131	chandef = priv->dfs_chandef;
    132	if (priv->wdev.cac_started) {
    133		mwifiex_dbg(priv->adapter, MSG,
    134			    "CAC timer finished; No radar detected\n");
    135		cfg80211_cac_event(priv->netdev, &chandef,
    136				   NL80211_RADAR_CAC_FINISHED,
    137				   GFP_KERNEL);
    138	}
    139}
    140
    141/* This function prepares channel report request command to FW for
    142 * starting radar detection.
    143 */
    144int mwifiex_cmd_issue_chan_report_request(struct mwifiex_private *priv,
    145					  struct host_cmd_ds_command *cmd,
    146					  void *data_buf)
    147{
    148	struct host_cmd_ds_chan_rpt_req *cr_req = &cmd->params.chan_rpt_req;
    149	struct mwifiex_radar_params *radar_params = (void *)data_buf;
    150
    151	cmd->command = cpu_to_le16(HostCmd_CMD_CHAN_REPORT_REQUEST);
    152	cmd->size = cpu_to_le16(S_DS_GEN);
    153	le16_unaligned_add_cpu(&cmd->size,
    154			       sizeof(struct host_cmd_ds_chan_rpt_req));
    155
    156	cr_req->chan_desc.start_freq = cpu_to_le16(MWIFIEX_A_BAND_START_FREQ);
    157	cr_req->chan_desc.chan_num = radar_params->chandef->chan->hw_value;
    158	cr_req->chan_desc.chan_width = radar_params->chandef->width;
    159	cr_req->msec_dwell_time = cpu_to_le32(radar_params->cac_time_ms);
    160
    161	if (radar_params->cac_time_ms)
    162		mwifiex_dbg(priv->adapter, MSG,
    163			    "11h: issuing DFS Radar check for channel=%d\n",
    164			    radar_params->chandef->chan->hw_value);
    165	else
    166		mwifiex_dbg(priv->adapter, MSG, "cancelling CAC\n");
    167
    168	return 0;
    169}
    170
    171int mwifiex_stop_radar_detection(struct mwifiex_private *priv,
    172				 struct cfg80211_chan_def *chandef)
    173{
    174	struct mwifiex_radar_params radar_params;
    175
    176	memset(&radar_params, 0, sizeof(struct mwifiex_radar_params));
    177	radar_params.chandef = chandef;
    178	radar_params.cac_time_ms = 0;
    179
    180	return mwifiex_send_cmd(priv, HostCmd_CMD_CHAN_REPORT_REQUEST,
    181				HostCmd_ACT_GEN_SET, 0, &radar_params, true);
    182}
    183
    184/* This function is to abort ongoing CAC upon stopping AP operations
    185 * or during unload.
    186 */
    187void mwifiex_abort_cac(struct mwifiex_private *priv)
    188{
    189	if (priv->wdev.cac_started) {
    190		if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
    191			mwifiex_dbg(priv->adapter, ERROR,
    192				    "failed to stop CAC in FW\n");
    193		mwifiex_dbg(priv->adapter, MSG,
    194			    "Aborting delayed work for CAC.\n");
    195		cancel_delayed_work_sync(&priv->dfs_cac_work);
    196		cfg80211_cac_event(priv->netdev, &priv->dfs_chandef,
    197				   NL80211_RADAR_CAC_ABORTED, GFP_KERNEL);
    198	}
    199}
    200
    201/* This function handles channel report event from FW during CAC period.
    202 * If radar is detected during CAC, driver indicates the same to cfg80211
    203 * and also cancels ongoing delayed work.
    204 */
    205int mwifiex_11h_handle_chanrpt_ready(struct mwifiex_private *priv,
    206				     struct sk_buff *skb)
    207{
    208	struct host_cmd_ds_chan_rpt_event *rpt_event;
    209	struct mwifiex_ie_types_chan_rpt_data *rpt;
    210	u8 *evt_buf;
    211	u16 event_len, tlv_len;
    212
    213	rpt_event = (void *)(skb->data + sizeof(u32));
    214	event_len = skb->len - (sizeof(struct host_cmd_ds_chan_rpt_event)+
    215				sizeof(u32));
    216
    217	if (le32_to_cpu(rpt_event->result) != HostCmd_RESULT_OK) {
    218		mwifiex_dbg(priv->adapter, ERROR,
    219			    "Error in channel report event\n");
    220		return -1;
    221	}
    222
    223	evt_buf = (void *)&rpt_event->tlvbuf;
    224
    225	while (event_len >= sizeof(struct mwifiex_ie_types_header)) {
    226		rpt = (void *)&rpt_event->tlvbuf;
    227		tlv_len = le16_to_cpu(rpt->header.len);
    228
    229		switch (le16_to_cpu(rpt->header.type)) {
    230		case TLV_TYPE_CHANRPT_11H_BASIC:
    231			if (rpt->map.radar) {
    232				mwifiex_dbg(priv->adapter, MSG,
    233					    "RADAR Detected on channel %d!\n",
    234					    priv->dfs_chandef.chan->hw_value);
    235				cancel_delayed_work_sync(&priv->dfs_cac_work);
    236				cfg80211_cac_event(priv->netdev,
    237						   &priv->dfs_chandef,
    238						   NL80211_RADAR_DETECTED,
    239						   GFP_KERNEL);
    240			}
    241			break;
    242		default:
    243			break;
    244		}
    245
    246		evt_buf += (tlv_len + sizeof(rpt->header));
    247		event_len -= (tlv_len + sizeof(rpt->header));
    248	}
    249
    250	return 0;
    251}
    252
    253/* Handler for radar detected event from FW.*/
    254int mwifiex_11h_handle_radar_detected(struct mwifiex_private *priv,
    255				      struct sk_buff *skb)
    256{
    257	struct mwifiex_radar_det_event *rdr_event;
    258
    259	rdr_event = (void *)(skb->data + sizeof(u32));
    260
    261	mwifiex_dbg(priv->adapter, MSG,
    262		    "radar detected; indicating kernel\n");
    263	if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
    264		mwifiex_dbg(priv->adapter, ERROR,
    265			    "Failed to stop CAC in FW\n");
    266	cfg80211_radar_event(priv->adapter->wiphy, &priv->dfs_chandef,
    267			     GFP_KERNEL);
    268	mwifiex_dbg(priv->adapter, MSG, "regdomain: %d\n",
    269		    rdr_event->reg_domain);
    270	mwifiex_dbg(priv->adapter, MSG, "radar detection type: %d\n",
    271		    rdr_event->det_type);
    272
    273	return 0;
    274}
    275
    276/* This is work queue function for channel switch handling.
    277 * This function takes care of updating new channel definitin to
    278 * bss config structure, restart AP and indicate channel switch success
    279 * to cfg80211.
    280 */
    281void mwifiex_dfs_chan_sw_work_queue(struct work_struct *work)
    282{
    283	struct mwifiex_uap_bss_param *bss_cfg;
    284	struct delayed_work *delayed_work = to_delayed_work(work);
    285	struct mwifiex_private *priv =
    286			container_of(delayed_work, struct mwifiex_private,
    287				     dfs_chan_sw_work);
    288
    289	bss_cfg = &priv->bss_cfg;
    290	if (!bss_cfg->beacon_period) {
    291		mwifiex_dbg(priv->adapter, ERROR,
    292			    "channel switch: AP already stopped\n");
    293		return;
    294	}
    295
    296	mwifiex_uap_set_channel(priv, bss_cfg, priv->dfs_chandef);
    297
    298	if (mwifiex_config_start_uap(priv, bss_cfg)) {
    299		mwifiex_dbg(priv->adapter, ERROR,
    300			    "Failed to start AP after channel switch\n");
    301		return;
    302	}
    303
    304	mwifiex_dbg(priv->adapter, MSG,
    305		    "indicating channel switch completion to kernel\n");
    306	mutex_lock(&priv->wdev.mtx);
    307	cfg80211_ch_switch_notify(priv->netdev, &priv->dfs_chandef);
    308	mutex_unlock(&priv->wdev.mtx);
    309}