blob: c8be8eff70daa5595b823c8648a1261153fe71b1 [file] [log] [blame]
Johannes Bergb8695a82009-02-10 21:25:46 +01001/*
2 * HT handling
3 *
4 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
Johannes Bergcfcdbde2010-06-10 10:21:48 +02009 * Copyright 2007-2010, Intel Corporation
Johannes Bergb8695a82009-02-10 21:25:46 +010010 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2 as
13 * published by the Free Software Foundation.
14 */
15
16#include <linux/ieee80211.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +090017#include <linux/slab.h>
Johannes Bergb8695a82009-02-10 21:25:46 +010018#include <net/mac80211.h>
19#include "ieee80211_i.h"
Johannes Berg24487982009-04-23 18:52:52 +020020#include "driver-ops.h"
Johannes Bergb8695a82009-02-10 21:25:46 +010021#include "wme.h"
22
Johannes Berg86ab6c52009-02-10 21:25:49 +010023/**
Johannes Berg73a72a82010-06-10 10:21:50 +020024 * DOC: TX A-MPDU aggregation
Johannes Berg86ab6c52009-02-10 21:25:49 +010025 *
26 * Aggregation on the TX side requires setting the hardware flag
Johannes Berg73a72a82010-06-10 10:21:50 +020027 * %IEEE80211_HW_AMPDU_AGGREGATION. The driver will then be handed
28 * packets with a flag indicating A-MPDU aggregation. The driver
29 * or device is responsible for actually aggregating the frames,
30 * as well as deciding how many and which to aggregate.
Johannes Berg86ab6c52009-02-10 21:25:49 +010031 *
Johannes Berg73a72a82010-06-10 10:21:50 +020032 * When TX aggregation is started by some subsystem (usually the rate
33 * control algorithm would be appropriate) by calling the
34 * ieee80211_start_tx_ba_session() function, the driver will be
35 * notified via its @ampdu_action function, with the
36 * %IEEE80211_AMPDU_TX_START action.
Johannes Berg86ab6c52009-02-10 21:25:49 +010037 *
38 * In response to that, the driver is later required to call the
Johannes Berg73a72a82010-06-10 10:21:50 +020039 * ieee80211_start_tx_ba_cb_irqsafe() function, which will really
40 * start the aggregation session after the peer has also responded.
41 * If the peer responds negatively, the session will be stopped
42 * again right away. Note that it is possible for the aggregation
43 * session to be stopped before the driver has indicated that it
44 * is done setting it up, in which case it must not indicate the
45 * setup completion.
Johannes Berg86ab6c52009-02-10 21:25:49 +010046 *
Johannes Berg73a72a82010-06-10 10:21:50 +020047 * Also note that, since we also need to wait for a response from
48 * the peer, the driver is notified of the completion of the
49 * handshake by the %IEEE80211_AMPDU_TX_OPERATIONAL action to the
50 * @ampdu_action callback.
51 *
52 * Similarly, when the aggregation session is stopped by the peer
53 * or something calling ieee80211_stop_tx_ba_session(), the driver's
54 * @ampdu_action function will be called with the action
55 * %IEEE80211_AMPDU_TX_STOP. In this case, the call must not fail,
56 * and the driver must later call ieee80211_stop_tx_ba_cb_irqsafe().
Johannes Berg86ab6c52009-02-10 21:25:49 +010057 */
58
Johannes Bergb8695a82009-02-10 21:25:46 +010059static void ieee80211_send_addba_request(struct ieee80211_sub_if_data *sdata,
60 const u8 *da, u16 tid,
61 u8 dialog_token, u16 start_seq_num,
62 u16 agg_size, u16 timeout)
63{
64 struct ieee80211_local *local = sdata->local;
Johannes Bergb8695a82009-02-10 21:25:46 +010065 struct sk_buff *skb;
66 struct ieee80211_mgmt *mgmt;
67 u16 capab;
68
69 skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
70
71 if (!skb) {
72 printk(KERN_ERR "%s: failed to allocate buffer "
Johannes Berg47846c92009-11-25 17:46:19 +010073 "for addba request frame\n", sdata->name);
Johannes Bergb8695a82009-02-10 21:25:46 +010074 return;
75 }
76 skb_reserve(skb, local->hw.extra_tx_headroom);
77 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
78 memset(mgmt, 0, 24);
79 memcpy(mgmt->da, da, ETH_ALEN);
Johannes Berg47846c92009-11-25 17:46:19 +010080 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
Johannes Berg8abd3f92009-02-10 21:25:47 +010081 if (sdata->vif.type == NL80211_IFTYPE_AP ||
82 sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
Johannes Berg47846c92009-11-25 17:46:19 +010083 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
Johannes Berg46900292009-02-15 12:44:28 +010084 else if (sdata->vif.type == NL80211_IFTYPE_STATION)
85 memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
Johannes Bergb8695a82009-02-10 21:25:46 +010086
87 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
88 IEEE80211_STYPE_ACTION);
89
90 skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_req));
91
92 mgmt->u.action.category = WLAN_CATEGORY_BACK;
93 mgmt->u.action.u.addba_req.action_code = WLAN_ACTION_ADDBA_REQ;
94
95 mgmt->u.action.u.addba_req.dialog_token = dialog_token;
96 capab = (u16)(1 << 1); /* bit 1 aggregation policy */
97 capab |= (u16)(tid << 2); /* bit 5:2 TID number */
98 capab |= (u16)(agg_size << 6); /* bit 15:6 max size of aggergation */
99
100 mgmt->u.action.u.addba_req.capab = cpu_to_le16(capab);
101
102 mgmt->u.action.u.addba_req.timeout = cpu_to_le16(timeout);
103 mgmt->u.action.u.addba_req.start_seq_num =
104 cpu_to_le16(start_seq_num << 4);
105
Johannes Berg62ae67b2009-11-18 18:42:05 +0100106 ieee80211_tx_skb(sdata, skb);
Johannes Bergb8695a82009-02-10 21:25:46 +0100107}
108
109void ieee80211_send_bar(struct ieee80211_sub_if_data *sdata, u8 *ra, u16 tid, u16 ssn)
110{
111 struct ieee80211_local *local = sdata->local;
112 struct sk_buff *skb;
113 struct ieee80211_bar *bar;
114 u16 bar_control = 0;
115
116 skb = dev_alloc_skb(sizeof(*bar) + local->hw.extra_tx_headroom);
117 if (!skb) {
118 printk(KERN_ERR "%s: failed to allocate buffer for "
Johannes Berg47846c92009-11-25 17:46:19 +0100119 "bar frame\n", sdata->name);
Johannes Bergb8695a82009-02-10 21:25:46 +0100120 return;
121 }
122 skb_reserve(skb, local->hw.extra_tx_headroom);
123 bar = (struct ieee80211_bar *)skb_put(skb, sizeof(*bar));
124 memset(bar, 0, sizeof(*bar));
125 bar->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL |
126 IEEE80211_STYPE_BACK_REQ);
127 memcpy(bar->ra, ra, ETH_ALEN);
Johannes Berg47846c92009-11-25 17:46:19 +0100128 memcpy(bar->ta, sdata->vif.addr, ETH_ALEN);
Johannes Bergb8695a82009-02-10 21:25:46 +0100129 bar_control |= (u16)IEEE80211_BAR_CTRL_ACK_POLICY_NORMAL;
130 bar_control |= (u16)IEEE80211_BAR_CTRL_CBMTID_COMPRESSED_BA;
131 bar_control |= (u16)(tid << 12);
132 bar->control = cpu_to_le16(bar_control);
133 bar->start_seq_num = cpu_to_le16(ssn);
134
Johannes Berg62ae67b2009-11-18 18:42:05 +0100135 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
136 ieee80211_tx_skb(sdata, skb);
Johannes Bergb8695a82009-02-10 21:25:46 +0100137}
138
Johannes Bergec034b22011-05-13 13:35:40 +0200139void ieee80211_assign_tid_tx(struct sta_info *sta, int tid,
140 struct tid_ampdu_tx *tid_tx)
141{
142 lockdep_assert_held(&sta->ampdu_mlme.mtx);
143 lockdep_assert_held(&sta->lock);
144 rcu_assign_pointer(sta->ampdu_mlme.tid_tx[tid], tid_tx);
145}
146
Johannes Berg67c282c2010-06-10 10:21:43 +0200147int ___ieee80211_stop_tx_ba_session(struct sta_info *sta, u16 tid,
Johannes Berg53f73c02010-10-05 19:37:40 +0200148 enum ieee80211_back_parties initiator,
149 bool tx)
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100150{
Johannes Berg849b7962009-02-10 21:25:54 +0100151 struct ieee80211_local *local = sta->local;
Johannes Berg40b275b2011-05-13 14:15:49 +0200152 struct tid_ampdu_tx *tid_tx;
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100153 int ret;
Johannes Berga622ab72010-06-10 10:21:39 +0200154
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200155 lockdep_assert_held(&sta->ampdu_mlme.mtx);
Johannes Berga622ab72010-06-10 10:21:39 +0200156
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200157 spin_lock_bh(&sta->lock);
158
Johannes Berg40b275b2011-05-13 14:15:49 +0200159 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
160 if (!tid_tx) {
161 spin_unlock_bh(&sta->lock);
162 return -ENOENT;
163 }
164
Johannes Berg0ab33702010-06-10 10:21:42 +0200165 if (test_bit(HT_AGG_STATE_WANT_START, &tid_tx->state)) {
166 /* not even started yet! */
Johannes Bergec034b22011-05-13 13:35:40 +0200167 ieee80211_assign_tid_tx(sta, tid, NULL);
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200168 spin_unlock_bh(&sta->lock);
Lai Jiangshan07443712011-03-15 18:02:42 +0800169 kfree_rcu(tid_tx, rcu_head);
Johannes Berg0ab33702010-06-10 10:21:42 +0200170 return 0;
171 }
172
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200173 spin_unlock_bh(&sta->lock);
174
Johannes Berg827d42c2009-11-22 12:28:41 +0100175#ifdef CONFIG_MAC80211_HT_DEBUG
176 printk(KERN_DEBUG "Tx BA session stop requested for %pM tid %u\n",
177 sta->sta.addr, tid);
178#endif /* CONFIG_MAC80211_HT_DEBUG */
179
Johannes Berga622ab72010-06-10 10:21:39 +0200180 set_bit(HT_AGG_STATE_STOPPING, &tid_tx->state);
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100181
Johannes Berg442714882010-10-05 21:40:33 +0200182 del_timer_sync(&tid_tx->addba_resp_timer);
183
Johannes Berga622ab72010-06-10 10:21:39 +0200184 /*
185 * After this packets are no longer handed right through
186 * to the driver but are put onto tid_tx->pending instead,
187 * with locking to ensure proper access.
188 */
189 clear_bit(HT_AGG_STATE_OPERATIONAL, &tid_tx->state);
Vasanthakumar Thiagarajan736708b2009-06-09 14:11:46 +0530190
Johannes Berga622ab72010-06-10 10:21:39 +0200191 tid_tx->stop_initiator = initiator;
Johannes Berg53f73c02010-10-05 19:37:40 +0200192 tid_tx->tx_stop = tx;
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100193
Johannes Berg12375ef2009-11-25 20:30:31 +0100194 ret = drv_ampdu_action(local, sta->sdata,
Johannes Bergc951ad32009-11-16 12:00:38 +0100195 IEEE80211_AMPDU_TX_STOP,
Johannes Berg0b01f032011-01-18 13:51:05 +0100196 &sta->sta, tid, NULL, 0);
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100197
198 /* HW shall not deny going back to legacy */
199 if (WARN_ON(ret)) {
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100200 /*
201 * We may have pending packets get stuck in this case...
202 * Not bothering with a workaround for now.
203 */
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100204 }
205
206 return ret;
207}
208
Johannes Bergb8695a82009-02-10 21:25:46 +0100209/*
210 * After sending add Block Ack request we activated a timer until
211 * add Block Ack response will arrive from the recipient.
212 * If this timer expires sta_addba_resp_timer_expired will be executed.
213 */
214static void sta_addba_resp_timer_expired(unsigned long data)
215{
216 /* not an elegant detour, but there is no choice as the timer passes
217 * only one argument, and both sta_info and TID are needed, so init
218 * flow in sta_info_create gives the TID as data, while the timer_to_id
219 * array gives the sta through container_of */
220 u16 tid = *(u8 *)data;
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100221 struct sta_info *sta = container_of((void *)data,
Johannes Bergb8695a82009-02-10 21:25:46 +0100222 struct sta_info, timer_to_tid[tid]);
Johannes Berga622ab72010-06-10 10:21:39 +0200223 struct tid_ampdu_tx *tid_tx;
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100224
Johannes Bergb8695a82009-02-10 21:25:46 +0100225 /* check if the TID waits for addBA response */
Johannes Berg83a5cbf2010-06-10 10:21:47 +0200226 rcu_read_lock();
227 tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);
Johannes Berga622ab72010-06-10 10:21:39 +0200228 if (!tid_tx ||
229 test_bit(HT_AGG_STATE_RESPONSE_RECEIVED, &tid_tx->state)) {
Johannes Berg83a5cbf2010-06-10 10:21:47 +0200230 rcu_read_unlock();
Johannes Bergb8695a82009-02-10 21:25:46 +0100231#ifdef CONFIG_MAC80211_HT_DEBUG
232 printk(KERN_DEBUG "timer expired on tid %d but we are not "
Johannes Berg67e0f392010-04-19 11:03:13 +0200233 "(or no longer) expecting addBA response there\n",
Johannes Berg8ade0082009-11-18 17:15:06 +0100234 tid);
Johannes Bergb8695a82009-02-10 21:25:46 +0100235#endif
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100236 return;
Johannes Bergb8695a82009-02-10 21:25:46 +0100237 }
238
239#ifdef CONFIG_MAC80211_HT_DEBUG
240 printk(KERN_DEBUG "addBA response timer expired on tid %d\n", tid);
241#endif
242
Johannes Berg83a5cbf2010-06-10 10:21:47 +0200243 ieee80211_stop_tx_ba_session(&sta->sta, tid);
244 rcu_read_unlock();
Johannes Bergb8695a82009-02-10 21:25:46 +0100245}
246
Johannes Berg96f5e662009-02-12 00:51:53 +0100247static inline int ieee80211_ac_from_tid(int tid)
248{
249 return ieee802_1d_to_ac[tid & 7];
250}
251
Johannes Berga6a67db2010-06-10 10:21:41 +0200252/*
253 * When multiple aggregation sessions on multiple stations
254 * are being created/destroyed simultaneously, we need to
255 * refcount the global queue stop caused by that in order
256 * to not get into a situation where one of the aggregation
257 * setup or teardown re-enables queues before the other is
258 * ready to handle that.
259 *
260 * These two functions take care of this issue by keeping
261 * a global "agg_queue_stop" refcount.
262 */
263static void __acquires(agg_queue)
264ieee80211_stop_queue_agg(struct ieee80211_local *local, int tid)
265{
266 int queue = ieee80211_ac_from_tid(tid);
267
268 if (atomic_inc_return(&local->agg_queue_stop[queue]) == 1)
269 ieee80211_stop_queue_by_reason(
270 &local->hw, queue,
271 IEEE80211_QUEUE_STOP_REASON_AGGREGATION);
272 __acquire(agg_queue);
273}
274
275static void __releases(agg_queue)
276ieee80211_wake_queue_agg(struct ieee80211_local *local, int tid)
277{
278 int queue = ieee80211_ac_from_tid(tid);
279
280 if (atomic_dec_return(&local->agg_queue_stop[queue]) == 0)
281 ieee80211_wake_queue_by_reason(
282 &local->hw, queue,
283 IEEE80211_QUEUE_STOP_REASON_AGGREGATION);
284 __release(agg_queue);
285}
286
Johannes Berg67c282c2010-06-10 10:21:43 +0200287void ieee80211_tx_ba_session_handle_start(struct sta_info *sta, int tid)
Johannes Berg0ab33702010-06-10 10:21:42 +0200288{
Johannes Berg40b275b2011-05-13 14:15:49 +0200289 struct tid_ampdu_tx *tid_tx;
Johannes Berg0ab33702010-06-10 10:21:42 +0200290 struct ieee80211_local *local = sta->local;
291 struct ieee80211_sub_if_data *sdata = sta->sdata;
292 u16 start_seq_num;
293 int ret;
294
Johannes Berg40b275b2011-05-13 14:15:49 +0200295 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200296
Johannes Berg0ab33702010-06-10 10:21:42 +0200297 /*
298 * While we're asking the driver about the aggregation,
299 * stop the AC queue so that we don't have to worry
300 * about frames that came in while we were doing that,
301 * which would require us to put them to the AC pending
302 * afterwards which just makes the code more complex.
303 */
304 ieee80211_stop_queue_agg(local, tid);
305
306 clear_bit(HT_AGG_STATE_WANT_START, &tid_tx->state);
307
308 /*
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200309 * make sure no packets are being processed to get
310 * valid starting sequence number
Johannes Berg0ab33702010-06-10 10:21:42 +0200311 */
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200312 synchronize_net();
313
Johannes Berg0ab33702010-06-10 10:21:42 +0200314 start_seq_num = sta->tid_seq[tid] >> 4;
315
316 ret = drv_ampdu_action(local, sdata, IEEE80211_AMPDU_TX_START,
Johannes Berg0b01f032011-01-18 13:51:05 +0100317 &sta->sta, tid, &start_seq_num, 0);
Johannes Berg0ab33702010-06-10 10:21:42 +0200318 if (ret) {
319#ifdef CONFIG_MAC80211_HT_DEBUG
320 printk(KERN_DEBUG "BA request denied - HW unavailable for"
321 " tid %d\n", tid);
322#endif
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200323 spin_lock_bh(&sta->lock);
Johannes Bergec034b22011-05-13 13:35:40 +0200324 ieee80211_assign_tid_tx(sta, tid, NULL);
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200325 spin_unlock_bh(&sta->lock);
326
Johannes Berg0ab33702010-06-10 10:21:42 +0200327 ieee80211_wake_queue_agg(local, tid);
Lai Jiangshan07443712011-03-15 18:02:42 +0800328 kfree_rcu(tid_tx, rcu_head);
Johannes Berg0ab33702010-06-10 10:21:42 +0200329 return;
330 }
331
332 /* we can take packets again now */
333 ieee80211_wake_queue_agg(local, tid);
334
335 /* activate the timer for the recipient's addBA response */
336 mod_timer(&tid_tx->addba_resp_timer, jiffies + ADDBA_RESP_INTERVAL);
337#ifdef CONFIG_MAC80211_HT_DEBUG
338 printk(KERN_DEBUG "activated addBA response timer on tid %d\n", tid);
339#endif
340
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200341 spin_lock_bh(&sta->lock);
Johannes Berg0ab33702010-06-10 10:21:42 +0200342 sta->ampdu_mlme.addba_req_num[tid]++;
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200343 spin_unlock_bh(&sta->lock);
Johannes Berg0ab33702010-06-10 10:21:42 +0200344
345 /* send AddBA request */
346 ieee80211_send_addba_request(sdata, sta->sta.addr, tid,
347 tid_tx->dialog_token, start_seq_num,
Johannes Berg5dd36bc2011-01-18 13:52:23 +0100348 local->hw.max_tx_aggregation_subframes,
349 tid_tx->timeout);
Johannes Berg0ab33702010-06-10 10:21:42 +0200350}
351
Sujith Manoharanbd2ce6e2010-12-15 07:47:10 +0530352int ieee80211_start_tx_ba_session(struct ieee80211_sta *pubsta, u16 tid,
353 u16 timeout)
Johannes Bergb8695a82009-02-10 21:25:46 +0100354{
Johannes Bergc951ad32009-11-16 12:00:38 +0100355 struct sta_info *sta = container_of(pubsta, struct sta_info, sta);
356 struct ieee80211_sub_if_data *sdata = sta->sdata;
357 struct ieee80211_local *local = sdata->local;
Johannes Berga622ab72010-06-10 10:21:39 +0200358 struct tid_ampdu_tx *tid_tx;
Johannes Berge4e72fb2009-03-23 17:28:42 +0100359 int ret = 0;
Johannes Bergb8695a82009-02-10 21:25:46 +0100360
Johannes Bergb5878a22010-04-07 16:48:40 +0200361 trace_api_start_tx_ba_session(pubsta, tid);
362
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100363 if (WARN_ON(!local->ops->ampdu_action))
364 return -EINVAL;
365
Johannes Bergc951ad32009-11-16 12:00:38 +0100366 if ((tid >= STA_TID_NUM) ||
367 !(local->hw.flags & IEEE80211_HW_AMPDU_AGGREGATION))
Johannes Bergb8695a82009-02-10 21:25:46 +0100368 return -EINVAL;
369
370#ifdef CONFIG_MAC80211_HT_DEBUG
371 printk(KERN_DEBUG "Open BA session requested for %pM tid %u\n",
Johannes Bergc951ad32009-11-16 12:00:38 +0100372 pubsta->addr, tid);
Johannes Bergb8695a82009-02-10 21:25:46 +0100373#endif /* CONFIG_MAC80211_HT_DEBUG */
374
Johannes Berg8abd3f92009-02-10 21:25:47 +0100375 /*
376 * The aggregation code is not prepared to handle
377 * anything but STA/AP due to the BSSID handling.
378 * IBSS could work in the code but isn't supported
379 * by drivers or the standard.
380 */
Johannes Bergc951ad32009-11-16 12:00:38 +0100381 if (sdata->vif.type != NL80211_IFTYPE_STATION &&
382 sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
383 sdata->vif.type != NL80211_IFTYPE_AP)
384 return -EINVAL;
Johannes Berg8abd3f92009-02-10 21:25:47 +0100385
Johannes Berg618f3562010-04-06 11:18:46 +0200386 if (test_sta_flags(sta, WLAN_STA_BLOCK_BA)) {
Sujith722f0692009-03-17 08:50:06 +0530387#ifdef CONFIG_MAC80211_HT_DEBUG
Johannes Berg2a419052010-06-10 10:21:29 +0200388 printk(KERN_DEBUG "BA sessions blocked. "
Sujith722f0692009-03-17 08:50:06 +0530389 "Denying BA session request\n");
390#endif
Johannes Bergc951ad32009-11-16 12:00:38 +0100391 return -EINVAL;
Sujith722f0692009-03-17 08:50:06 +0530392 }
393
Johannes Bergb8695a82009-02-10 21:25:46 +0100394 spin_lock_bh(&sta->lock);
395
396 /* we have tried too many times, receiver does not want A-MPDU */
397 if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {
398 ret = -EBUSY;
399 goto err_unlock_sta;
400 }
401
Johannes Berg40b275b2011-05-13 14:15:49 +0200402 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Bergb8695a82009-02-10 21:25:46 +0100403 /* check if the TID is not in aggregation flow already */
Johannes Bergec034b22011-05-13 13:35:40 +0200404 if (tid_tx || sta->ampdu_mlme.tid_start_tx[tid]) {
Johannes Bergb8695a82009-02-10 21:25:46 +0100405#ifdef CONFIG_MAC80211_HT_DEBUG
406 printk(KERN_DEBUG "BA request denied - session is not "
407 "idle on tid %u\n", tid);
408#endif /* CONFIG_MAC80211_HT_DEBUG */
409 ret = -EAGAIN;
410 goto err_unlock_sta;
411 }
412
413 /* prepare A-MPDU MLME for Tx aggregation */
Johannes Berga622ab72010-06-10 10:21:39 +0200414 tid_tx = kzalloc(sizeof(struct tid_ampdu_tx), GFP_ATOMIC);
415 if (!tid_tx) {
Johannes Bergb8695a82009-02-10 21:25:46 +0100416#ifdef CONFIG_MAC80211_HT_DEBUG
417 if (net_ratelimit())
418 printk(KERN_ERR "allocate tx mlme to tid %d failed\n",
419 tid);
420#endif
421 ret = -ENOMEM;
Johannes Berg0ab33702010-06-10 10:21:42 +0200422 goto err_unlock_sta;
Johannes Bergb8695a82009-02-10 21:25:46 +0100423 }
Johannes Berg96f5e662009-02-12 00:51:53 +0100424
Johannes Berga622ab72010-06-10 10:21:39 +0200425 skb_queue_head_init(&tid_tx->pending);
Johannes Berg0ab33702010-06-10 10:21:42 +0200426 __set_bit(HT_AGG_STATE_WANT_START, &tid_tx->state);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100427
Sujith Manoharanbd2ce6e2010-12-15 07:47:10 +0530428 tid_tx->timeout = timeout;
429
Johannes Bergb8695a82009-02-10 21:25:46 +0100430 /* Tx timer */
Johannes Berga622ab72010-06-10 10:21:39 +0200431 tid_tx->addba_resp_timer.function = sta_addba_resp_timer_expired;
432 tid_tx->addba_resp_timer.data = (unsigned long)&sta->timer_to_tid[tid];
433 init_timer(&tid_tx->addba_resp_timer);
Johannes Bergb8695a82009-02-10 21:25:46 +0100434
Johannes Berg0ab33702010-06-10 10:21:42 +0200435 /* assign a dialog token */
Johannes Bergb8695a82009-02-10 21:25:46 +0100436 sta->ampdu_mlme.dialog_token_allocator++;
Johannes Berga622ab72010-06-10 10:21:39 +0200437 tid_tx->dialog_token = sta->ampdu_mlme.dialog_token_allocator;
Johannes Berga622ab72010-06-10 10:21:39 +0200438
Johannes Bergec034b22011-05-13 13:35:40 +0200439 /*
440 * Finally, assign it to the start array; the work item will
441 * collect it and move it to the normal array.
442 */
443 sta->ampdu_mlme.tid_start_tx[tid] = tid_tx;
Johannes Bergb8695a82009-02-10 21:25:46 +0100444
Johannes Berg0ab33702010-06-10 10:21:42 +0200445 ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);
Johannes Berg51a0d382010-05-31 12:00:12 +0200446
Johannes Berg0ab33702010-06-10 10:21:42 +0200447 /* this flow continues off the work */
Johannes Berg96f5e662009-02-12 00:51:53 +0100448 err_unlock_sta:
Johannes Bergb8695a82009-02-10 21:25:46 +0100449 spin_unlock_bh(&sta->lock);
Johannes Bergb8695a82009-02-10 21:25:46 +0100450 return ret;
451}
452EXPORT_SYMBOL(ieee80211_start_tx_ba_session);
453
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100454/*
455 * splice packets from the STA's pending to the local pending,
Johannes Berga6a67db2010-06-10 10:21:41 +0200456 * requires a call to ieee80211_agg_splice_finish later
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100457 */
Johannes Berga6a67db2010-06-10 10:21:41 +0200458static void __acquires(agg_queue)
459ieee80211_agg_splice_packets(struct ieee80211_local *local,
460 struct tid_ampdu_tx *tid_tx, u16 tid)
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100461{
Johannes Berga6a67db2010-06-10 10:21:41 +0200462 int queue = ieee80211_ac_from_tid(tid);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100463 unsigned long flags;
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100464
Johannes Berga6a67db2010-06-10 10:21:41 +0200465 ieee80211_stop_queue_agg(local, tid);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100466
Johannes Berga622ab72010-06-10 10:21:39 +0200467 if (WARN(!tid_tx, "TID %d gone but expected when splicing aggregates"
468 " from the pending queue\n", tid))
Luis R. Rodriguez416fbdf2009-08-11 13:10:33 -0700469 return;
470
Johannes Berga622ab72010-06-10 10:21:39 +0200471 if (!skb_queue_empty(&tid_tx->pending)) {
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100472 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100473 /* copy over remaining packets */
Johannes Berga622ab72010-06-10 10:21:39 +0200474 skb_queue_splice_tail_init(&tid_tx->pending,
475 &local->pending[queue]);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100476 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
477 }
478}
479
Johannes Berga6a67db2010-06-10 10:21:41 +0200480static void __releases(agg_queue)
481ieee80211_agg_splice_finish(struct ieee80211_local *local, u16 tid)
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100482{
Johannes Berga6a67db2010-06-10 10:21:41 +0200483 ieee80211_wake_queue_agg(local, tid);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100484}
485
Johannes Bergb1720232009-03-23 17:28:39 +0100486static void ieee80211_agg_tx_operational(struct ieee80211_local *local,
487 struct sta_info *sta, u16 tid)
488{
Johannes Berg40b275b2011-05-13 14:15:49 +0200489 struct tid_ampdu_tx *tid_tx;
490
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200491 lockdep_assert_held(&sta->ampdu_mlme.mtx);
Johannes Berga622ab72010-06-10 10:21:39 +0200492
Johannes Berg40b275b2011-05-13 14:15:49 +0200493 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
494
Johannes Bergb1720232009-03-23 17:28:39 +0100495#ifdef CONFIG_MAC80211_HT_DEBUG
Frans Pop55f98932010-03-24 19:46:29 +0100496 printk(KERN_DEBUG "Aggregation is on for tid %d\n", tid);
Johannes Bergb1720232009-03-23 17:28:39 +0100497#endif
498
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200499 drv_ampdu_action(local, sta->sdata,
500 IEEE80211_AMPDU_TX_OPERATIONAL,
Johannes Berg40b275b2011-05-13 14:15:49 +0200501 &sta->sta, tid, NULL, tid_tx->buf_size);
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200502
503 /*
504 * synchronize with TX path, while splicing the TX path
505 * should block so it won't put more packets onto pending.
506 */
507 spin_lock_bh(&sta->lock);
508
Johannes Berg40b275b2011-05-13 14:15:49 +0200509 ieee80211_agg_splice_packets(local, tid_tx, tid);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100510 /*
Johannes Berga622ab72010-06-10 10:21:39 +0200511 * Now mark as operational. This will be visible
512 * in the TX path, and lets it go lock-free in
513 * the common case.
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100514 */
Johannes Berg40b275b2011-05-13 14:15:49 +0200515 set_bit(HT_AGG_STATE_OPERATIONAL, &tid_tx->state);
Johannes Berga622ab72010-06-10 10:21:39 +0200516 ieee80211_agg_splice_finish(local, tid);
Johannes Bergb1720232009-03-23 17:28:39 +0100517
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200518 spin_unlock_bh(&sta->lock);
Johannes Bergb1720232009-03-23 17:28:39 +0100519}
520
Johannes Bergc951ad32009-11-16 12:00:38 +0100521void ieee80211_start_tx_ba_cb(struct ieee80211_vif *vif, u8 *ra, u16 tid)
Johannes Bergb8695a82009-02-10 21:25:46 +0100522{
Johannes Bergc951ad32009-11-16 12:00:38 +0100523 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
524 struct ieee80211_local *local = sdata->local;
Johannes Bergb8695a82009-02-10 21:25:46 +0100525 struct sta_info *sta;
Johannes Berga622ab72010-06-10 10:21:39 +0200526 struct tid_ampdu_tx *tid_tx;
Johannes Bergb8695a82009-02-10 21:25:46 +0100527
Johannes Bergb5878a22010-04-07 16:48:40 +0200528 trace_api_start_tx_ba_cb(sdata, ra, tid);
529
Johannes Bergb8695a82009-02-10 21:25:46 +0100530 if (tid >= STA_TID_NUM) {
531#ifdef CONFIG_MAC80211_HT_DEBUG
532 printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
533 tid, STA_TID_NUM);
534#endif
535 return;
536 }
537
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200538 mutex_lock(&local->sta_mtx);
Johannes Bergabe60632009-11-25 17:46:18 +0100539 sta = sta_info_get(sdata, ra);
Johannes Bergb8695a82009-02-10 21:25:46 +0100540 if (!sta) {
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200541 mutex_unlock(&local->sta_mtx);
Johannes Bergb8695a82009-02-10 21:25:46 +0100542#ifdef CONFIG_MAC80211_HT_DEBUG
543 printk(KERN_DEBUG "Could not find station: %pM\n", ra);
544#endif
545 return;
546 }
547
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200548 mutex_lock(&sta->ampdu_mlme.mtx);
Johannes Berg40b275b2011-05-13 14:15:49 +0200549 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Bergb8695a82009-02-10 21:25:46 +0100550
Johannes Berga622ab72010-06-10 10:21:39 +0200551 if (WARN_ON(!tid_tx)) {
Johannes Bergb8695a82009-02-10 21:25:46 +0100552#ifdef CONFIG_MAC80211_HT_DEBUG
Johannes Berga622ab72010-06-10 10:21:39 +0200553 printk(KERN_DEBUG "addBA was not requested!\n");
Johannes Bergb8695a82009-02-10 21:25:46 +0100554#endif
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200555 goto unlock;
Johannes Bergb8695a82009-02-10 21:25:46 +0100556 }
557
Johannes Berga622ab72010-06-10 10:21:39 +0200558 if (WARN_ON(test_and_set_bit(HT_AGG_STATE_DRV_READY, &tid_tx->state)))
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200559 goto unlock;
Johannes Bergb8695a82009-02-10 21:25:46 +0100560
Johannes Berga622ab72010-06-10 10:21:39 +0200561 if (test_bit(HT_AGG_STATE_RESPONSE_RECEIVED, &tid_tx->state))
Johannes Bergb1720232009-03-23 17:28:39 +0100562 ieee80211_agg_tx_operational(local, sta, tid);
Johannes Berg96f5e662009-02-12 00:51:53 +0100563
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200564 unlock:
565 mutex_unlock(&sta->ampdu_mlme.mtx);
566 mutex_unlock(&local->sta_mtx);
Johannes Bergb8695a82009-02-10 21:25:46 +0100567}
Johannes Bergb8695a82009-02-10 21:25:46 +0100568
Johannes Bergc951ad32009-11-16 12:00:38 +0100569void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_vif *vif,
Johannes Berg86ab6c52009-02-10 21:25:49 +0100570 const u8 *ra, u16 tid)
571{
Johannes Bergc951ad32009-11-16 12:00:38 +0100572 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
573 struct ieee80211_local *local = sdata->local;
Johannes Berg86ab6c52009-02-10 21:25:49 +0100574 struct ieee80211_ra_tid *ra_tid;
575 struct sk_buff *skb = dev_alloc_skb(0);
576
577 if (unlikely(!skb)) {
578#ifdef CONFIG_MAC80211_HT_DEBUG
579 if (net_ratelimit())
580 printk(KERN_WARNING "%s: Not enough memory, "
Johannes Berg47846c92009-11-25 17:46:19 +0100581 "dropping start BA session", sdata->name);
Johannes Berg86ab6c52009-02-10 21:25:49 +0100582#endif
583 return;
584 }
585 ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
586 memcpy(&ra_tid->ra, ra, ETH_ALEN);
587 ra_tid->tid = tid;
588
Johannes Bergc1475ca2010-06-10 10:21:37 +0200589 skb->pkt_type = IEEE80211_SDATA_QUEUE_AGG_START;
590 skb_queue_tail(&sdata->skb_queue, skb);
591 ieee80211_queue_work(&local->hw, &sdata->work);
Johannes Berg86ab6c52009-02-10 21:25:49 +0100592}
593EXPORT_SYMBOL(ieee80211_start_tx_ba_cb_irqsafe);
594
Johannes Berg849b7962009-02-10 21:25:54 +0100595int __ieee80211_stop_tx_ba_session(struct sta_info *sta, u16 tid,
Johannes Berg53f73c02010-10-05 19:37:40 +0200596 enum ieee80211_back_parties initiator,
597 bool tx)
Johannes Berg849b7962009-02-10 21:25:54 +0100598{
Johannes Berg849b7962009-02-10 21:25:54 +0100599 int ret;
600
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200601 mutex_lock(&sta->ampdu_mlme.mtx);
Johannes Berg849b7962009-02-10 21:25:54 +0100602
Johannes Berg53f73c02010-10-05 19:37:40 +0200603 ret = ___ieee80211_stop_tx_ba_session(sta, tid, initiator, tx);
Johannes Berg849b7962009-02-10 21:25:54 +0100604
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200605 mutex_unlock(&sta->ampdu_mlme.mtx);
606
Johannes Berg849b7962009-02-10 21:25:54 +0100607 return ret;
608}
Johannes Bergb8695a82009-02-10 21:25:46 +0100609
Johannes Berg6a8579d2010-05-27 14:41:07 +0200610int ieee80211_stop_tx_ba_session(struct ieee80211_sta *pubsta, u16 tid)
Johannes Bergb8695a82009-02-10 21:25:46 +0100611{
Johannes Bergc951ad32009-11-16 12:00:38 +0100612 struct sta_info *sta = container_of(pubsta, struct sta_info, sta);
613 struct ieee80211_sub_if_data *sdata = sta->sdata;
614 struct ieee80211_local *local = sdata->local;
Johannes Berg0ab33702010-06-10 10:21:42 +0200615 struct tid_ampdu_tx *tid_tx;
616 int ret = 0;
Johannes Bergb8695a82009-02-10 21:25:46 +0100617
Johannes Berg6a8579d2010-05-27 14:41:07 +0200618 trace_api_stop_tx_ba_session(pubsta, tid);
Johannes Bergb5878a22010-04-07 16:48:40 +0200619
Johannes Berg42531192009-11-20 09:15:51 +0100620 if (!local->ops->ampdu_action)
Johannes Berg23e6a7e2009-02-10 21:25:50 +0100621 return -EINVAL;
622
Johannes Bergb8695a82009-02-10 21:25:46 +0100623 if (tid >= STA_TID_NUM)
624 return -EINVAL;
625
Johannes Berg0ab33702010-06-10 10:21:42 +0200626 spin_lock_bh(&sta->lock);
Johannes Berg40b275b2011-05-13 14:15:49 +0200627 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Berg0ab33702010-06-10 10:21:42 +0200628
629 if (!tid_tx) {
630 ret = -ENOENT;
631 goto unlock;
632 }
633
634 if (test_bit(HT_AGG_STATE_STOPPING, &tid_tx->state)) {
635 /* already in progress stopping it */
636 ret = 0;
637 goto unlock;
638 }
639
640 set_bit(HT_AGG_STATE_WANT_STOP, &tid_tx->state);
641 ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);
642
643 unlock:
644 spin_unlock_bh(&sta->lock);
645 return ret;
Johannes Bergb8695a82009-02-10 21:25:46 +0100646}
647EXPORT_SYMBOL(ieee80211_stop_tx_ba_session);
648
Johannes Bergc951ad32009-11-16 12:00:38 +0100649void ieee80211_stop_tx_ba_cb(struct ieee80211_vif *vif, u8 *ra, u8 tid)
Johannes Bergb8695a82009-02-10 21:25:46 +0100650{
Johannes Bergc951ad32009-11-16 12:00:38 +0100651 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
652 struct ieee80211_local *local = sdata->local;
Johannes Bergb8695a82009-02-10 21:25:46 +0100653 struct sta_info *sta;
Johannes Berga622ab72010-06-10 10:21:39 +0200654 struct tid_ampdu_tx *tid_tx;
Johannes Bergb8695a82009-02-10 21:25:46 +0100655
Johannes Bergb5878a22010-04-07 16:48:40 +0200656 trace_api_stop_tx_ba_cb(sdata, ra, tid);
657
Johannes Bergb8695a82009-02-10 21:25:46 +0100658 if (tid >= STA_TID_NUM) {
659#ifdef CONFIG_MAC80211_HT_DEBUG
660 printk(KERN_DEBUG "Bad TID value: tid = %d (>= %d)\n",
661 tid, STA_TID_NUM);
662#endif
663 return;
664 }
665
666#ifdef CONFIG_MAC80211_HT_DEBUG
667 printk(KERN_DEBUG "Stopping Tx BA session for %pM tid %d\n",
668 ra, tid);
669#endif /* CONFIG_MAC80211_HT_DEBUG */
670
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200671 mutex_lock(&local->sta_mtx);
672
Johannes Bergabe60632009-11-25 17:46:18 +0100673 sta = sta_info_get(sdata, ra);
Johannes Bergb8695a82009-02-10 21:25:46 +0100674 if (!sta) {
675#ifdef CONFIG_MAC80211_HT_DEBUG
676 printk(KERN_DEBUG "Could not find station: %pM\n", ra);
677#endif
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200678 goto unlock;
Johannes Bergb8695a82009-02-10 21:25:46 +0100679 }
Johannes Bergb8695a82009-02-10 21:25:46 +0100680
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200681 mutex_lock(&sta->ampdu_mlme.mtx);
Johannes Berga622ab72010-06-10 10:21:39 +0200682 spin_lock_bh(&sta->lock);
Johannes Berg40b275b2011-05-13 14:15:49 +0200683 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Berga622ab72010-06-10 10:21:39 +0200684
685 if (!tid_tx || !test_bit(HT_AGG_STATE_STOPPING, &tid_tx->state)) {
Johannes Bergb8695a82009-02-10 21:25:46 +0100686#ifdef CONFIG_MAC80211_HT_DEBUG
687 printk(KERN_DEBUG "unexpected callback to A-MPDU stop\n");
688#endif
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200689 goto unlock_sta;
Johannes Bergb8695a82009-02-10 21:25:46 +0100690 }
691
Johannes Berg53f73c02010-10-05 19:37:40 +0200692 if (tid_tx->stop_initiator == WLAN_BACK_INITIATOR && tid_tx->tx_stop)
Johannes Bergb8695a82009-02-10 21:25:46 +0100693 ieee80211_send_delba(sta->sdata, ra, tid,
694 WLAN_BACK_INITIATOR, WLAN_REASON_QSTA_NOT_USE);
695
Johannes Berga622ab72010-06-10 10:21:39 +0200696 /*
697 * When we get here, the TX path will not be lockless any more wrt.
698 * aggregation, since the OPERATIONAL bit has long been cleared.
699 * Thus it will block on getting the lock, if it occurs. So if we
700 * stop the queue now, we will not get any more packets, and any
701 * that might be being processed will wait for us here, thereby
702 * guaranteeing that no packets go to the tid_tx pending queue any
703 * more.
704 */
705
Johannes Berga622ab72010-06-10 10:21:39 +0200706 ieee80211_agg_splice_packets(local, tid_tx, tid);
Johannes Berg96f5e662009-02-12 00:51:53 +0100707
Johannes Berga622ab72010-06-10 10:21:39 +0200708 /* future packets must not find the tid_tx struct any more */
Johannes Bergec034b22011-05-13 13:35:40 +0200709 ieee80211_assign_tid_tx(sta, tid, NULL);
Johannes Berg96f5e662009-02-12 00:51:53 +0100710
Johannes Berga622ab72010-06-10 10:21:39 +0200711 ieee80211_agg_splice_finish(local, tid);
Johannes Bergcd8ffc82009-03-23 17:28:41 +0100712
Lai Jiangshan07443712011-03-15 18:02:42 +0800713 kfree_rcu(tid_tx, rcu_head);
Johannes Bergb8695a82009-02-10 21:25:46 +0100714
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200715 unlock_sta:
Johannes Berga622ab72010-06-10 10:21:39 +0200716 spin_unlock_bh(&sta->lock);
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200717 mutex_unlock(&sta->ampdu_mlme.mtx);
718 unlock:
719 mutex_unlock(&local->sta_mtx);
Johannes Bergb8695a82009-02-10 21:25:46 +0100720}
Johannes Bergb8695a82009-02-10 21:25:46 +0100721
Johannes Bergc951ad32009-11-16 12:00:38 +0100722void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_vif *vif,
Johannes Bergb8695a82009-02-10 21:25:46 +0100723 const u8 *ra, u16 tid)
724{
Johannes Bergc951ad32009-11-16 12:00:38 +0100725 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
726 struct ieee80211_local *local = sdata->local;
Johannes Bergb8695a82009-02-10 21:25:46 +0100727 struct ieee80211_ra_tid *ra_tid;
728 struct sk_buff *skb = dev_alloc_skb(0);
729
730 if (unlikely(!skb)) {
731#ifdef CONFIG_MAC80211_HT_DEBUG
732 if (net_ratelimit())
733 printk(KERN_WARNING "%s: Not enough memory, "
Johannes Berg47846c92009-11-25 17:46:19 +0100734 "dropping stop BA session", sdata->name);
Johannes Bergb8695a82009-02-10 21:25:46 +0100735#endif
736 return;
737 }
738 ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
739 memcpy(&ra_tid->ra, ra, ETH_ALEN);
740 ra_tid->tid = tid;
741
Johannes Bergc1475ca2010-06-10 10:21:37 +0200742 skb->pkt_type = IEEE80211_SDATA_QUEUE_AGG_STOP;
743 skb_queue_tail(&sdata->skb_queue, skb);
744 ieee80211_queue_work(&local->hw, &sdata->work);
Johannes Bergb8695a82009-02-10 21:25:46 +0100745}
746EXPORT_SYMBOL(ieee80211_stop_tx_ba_cb_irqsafe);
747
Johannes Berg86ab6c52009-02-10 21:25:49 +0100748
Johannes Bergb8695a82009-02-10 21:25:46 +0100749void ieee80211_process_addba_resp(struct ieee80211_local *local,
750 struct sta_info *sta,
751 struct ieee80211_mgmt *mgmt,
752 size_t len)
753{
Johannes Berga622ab72010-06-10 10:21:39 +0200754 struct tid_ampdu_tx *tid_tx;
Johannes Bergb1720232009-03-23 17:28:39 +0100755 u16 capab, tid;
Johannes Berg0b01f032011-01-18 13:51:05 +0100756 u8 buf_size;
Johannes Bergb8695a82009-02-10 21:25:46 +0100757
758 capab = le16_to_cpu(mgmt->u.action.u.addba_resp.capab);
759 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
Johannes Berg0b01f032011-01-18 13:51:05 +0100760 buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6;
Johannes Bergb8695a82009-02-10 21:25:46 +0100761
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200762 mutex_lock(&sta->ampdu_mlme.mtx);
Johannes Bergb8695a82009-02-10 21:25:46 +0100763
Johannes Berg40b275b2011-05-13 14:15:49 +0200764 tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
Johannes Berga622ab72010-06-10 10:21:39 +0200765 if (!tid_tx)
Johannes Berg8ade0082009-11-18 17:15:06 +0100766 goto out;
Johannes Bergb8695a82009-02-10 21:25:46 +0100767
Johannes Berga622ab72010-06-10 10:21:39 +0200768 if (mgmt->u.action.u.addba_resp.dialog_token != tid_tx->dialog_token) {
Johannes Bergb8695a82009-02-10 21:25:46 +0100769#ifdef CONFIG_MAC80211_HT_DEBUG
770 printk(KERN_DEBUG "wrong addBA response token, tid %d\n", tid);
Johannes Berga622ab72010-06-10 10:21:39 +0200771#endif
Johannes Berg8ade0082009-11-18 17:15:06 +0100772 goto out;
Johannes Bergb8695a82009-02-10 21:25:46 +0100773 }
774
Johannes Berga622ab72010-06-10 10:21:39 +0200775 del_timer(&tid_tx->addba_resp_timer);
Johannes Berg8ade0082009-11-18 17:15:06 +0100776
Johannes Bergb8695a82009-02-10 21:25:46 +0100777#ifdef CONFIG_MAC80211_HT_DEBUG
Frans Pop55f98932010-03-24 19:46:29 +0100778 printk(KERN_DEBUG "switched off addBA timer for tid %d\n", tid);
Johannes Berga622ab72010-06-10 10:21:39 +0200779#endif
Johannes Berg2171abc2009-10-29 08:34:00 +0100780
Johannes Bergb8695a82009-02-10 21:25:46 +0100781 if (le16_to_cpu(mgmt->u.action.u.addba_resp.status)
782 == WLAN_STATUS_SUCCESS) {
Johannes Berg0b01f032011-01-18 13:51:05 +0100783 /*
784 * IEEE 802.11-2007 7.3.1.14:
785 * In an ADDBA Response frame, when the Status Code field
786 * is set to 0, the Buffer Size subfield is set to a value
787 * of at least 1.
788 */
789 if (!buf_size)
790 goto out;
791
Johannes Berga622ab72010-06-10 10:21:39 +0200792 if (test_and_set_bit(HT_AGG_STATE_RESPONSE_RECEIVED,
793 &tid_tx->state)) {
794 /* ignore duplicate response */
795 goto out;
796 }
Johannes Bergb8695a82009-02-10 21:25:46 +0100797
Johannes Berg0b01f032011-01-18 13:51:05 +0100798 tid_tx->buf_size = buf_size;
799
Johannes Berga622ab72010-06-10 10:21:39 +0200800 if (test_bit(HT_AGG_STATE_DRV_READY, &tid_tx->state))
Johannes Bergb1720232009-03-23 17:28:39 +0100801 ieee80211_agg_tx_operational(local, sta, tid);
Johannes Bergb8695a82009-02-10 21:25:46 +0100802
Johannes Bergb1720232009-03-23 17:28:39 +0100803 sta->ampdu_mlme.addba_req_num[tid] = 0;
Johannes Bergb8695a82009-02-10 21:25:46 +0100804 } else {
Johannes Berg53f73c02010-10-05 19:37:40 +0200805 ___ieee80211_stop_tx_ba_session(sta, tid, WLAN_BACK_INITIATOR,
806 true);
Johannes Bergb8695a82009-02-10 21:25:46 +0100807 }
Johannes Berg2171abc2009-10-29 08:34:00 +0100808
Johannes Berg2171abc2009-10-29 08:34:00 +0100809 out:
Johannes Bergcfcdbde2010-06-10 10:21:48 +0200810 mutex_unlock(&sta->ampdu_mlme.mtx);
Johannes Bergb8695a82009-02-10 21:25:46 +0100811}