1 /*-
2 * Copyright (c) 2002-2009 Sam Leffler, Errno Consulting
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 *
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
15 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
18 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 */
25
26 #include <sys/cdefs.h>
27 __FBSDID("$FreeBSD$");
28
29 #include "opt_wlan.h"
30
31 #ifdef IEEE80211_SUPPORT_SUPERG
32
33 #include <sys/param.h>
34 #include <sys/systm.h>
35 #include <sys/malloc.h>
36 #include <sys/mbuf.h>
37 #include <sys/kernel.h>
38 #include <sys/endian.h>
39
40 #include <sys/socket.h>
41
42 #include <net/if.h>
43 #include <net/if_var.h>
44 #include <net/if_llc.h>
45 #include <net/if_media.h>
46 #include <net/bpf.h>
47 #include <net/ethernet.h>
48
49 #include <netproto/802_11/ieee80211_var.h>
50 #include <netproto/802_11/ieee80211_input.h>
51 #include <netproto/802_11/ieee80211_phy.h>
52 #include <netproto/802_11/ieee80211_superg.h>
53
54 /*
55 * Atheros fast-frame encapsulation format.
56 * FF max payload:
57 * 802.2 + FFHDR + HPAD + 802.3 + 802.2 + 1500 + SPAD + 802.3 + 802.2 + 1500:
58 * 8 + 4 + 4 + 14 + 8 + 1500 + 6 + 14 + 8 + 1500
59 * = 3066
60 */
61 /* fast frame header is 32-bits */
62 #define ATH_FF_PROTO 0x0000003f /* protocol */
63 #define ATH_FF_PROTO_S 0
64 #define ATH_FF_FTYPE 0x000000c0 /* frame type */
65 #define ATH_FF_FTYPE_S 6
66 #define ATH_FF_HLEN32 0x00000300 /* optional hdr length */
67 #define ATH_FF_HLEN32_S 8
68 #define ATH_FF_SEQNUM 0x001ffc00 /* sequence number */
69 #define ATH_FF_SEQNUM_S 10
70 #define ATH_FF_OFFSET 0xffe00000 /* offset to 2nd payload */
71 #define ATH_FF_OFFSET_S 21
72
73 #define ATH_FF_MAX_HDR_PAD 4
74 #define ATH_FF_MAX_SEP_PAD 6
75 #define ATH_FF_MAX_HDR 30
76
77 #define ATH_FF_PROTO_L2TUNNEL 0 /* L2 tunnel protocol */
78 #define ATH_FF_ETH_TYPE 0x88bd /* Ether type for encapsulated frames */
79 #define ATH_FF_SNAP_ORGCODE_0 0x00
80 #define ATH_FF_SNAP_ORGCODE_1 0x03
81 #define ATH_FF_SNAP_ORGCODE_2 0x7f
82
83 #define ATH_FF_TXQMIN 2 /* min txq depth for staging */
84 #define ATH_FF_TXQMAX 50 /* maximum # of queued frames allowed */
85 #define ATH_FF_STAGEMAX 5 /* max waiting period for staged frame*/
86
87 #define ETHER_HEADER_COPY(dst, src) \
88 memcpy(dst, src, sizeof(struct ether_header))
89
90 static int ieee80211_ffppsmin = 2; /* pps threshold for ff aggregation */
91 SYSCTL_INT(_net_wlan, OID_AUTO, ffppsmin, CTLFLAG_RW,
92 &ieee80211_ffppsmin, 0, "min packet rate before fast-frame staging");
93 static int ieee80211_ffagemax = -1; /* max time frames held on stage q */
94 SYSCTL_PROC(_net_wlan, OID_AUTO, ffagemax, CTLTYPE_INT | CTLFLAG_RW,
95 &ieee80211_ffagemax, 0, ieee80211_sysctl_msecs_ticks, "I",
96 "max hold time for fast-frame staging (ms)");
97
98 void
ieee80211_superg_attach(struct ieee80211com * ic)99 ieee80211_superg_attach(struct ieee80211com *ic)
100 {
101 struct ieee80211_superg *sg;
102
103 #if defined(__DragonFly__)
104 sg = (struct ieee80211_superg *) kmalloc(
105 sizeof(struct ieee80211_superg), M_80211_VAP,
106 M_INTWAIT | M_ZERO);
107 #else
108 sg = (struct ieee80211_superg *) IEEE80211_MALLOC(
109 sizeof(struct ieee80211_superg), M_80211_VAP,
110 IEEE80211_M_NOWAIT | IEEE80211_M_ZERO);
111 #endif
112 if (sg == NULL) {
113 kprintf("%s: cannot allocate SuperG state block\n",
114 __func__);
115 return;
116 }
117 ic->ic_superg = sg;
118
119 /*
120 * Default to not being so aggressive for FF/AMSDU
121 * aging, otherwise we may hold a frame around
122 * for way too long before we expire it out.
123 */
124 ieee80211_ffagemax = msecs_to_ticks(2);
125 }
126
127 void
ieee80211_superg_detach(struct ieee80211com * ic)128 ieee80211_superg_detach(struct ieee80211com *ic)
129 {
130 if (ic->ic_superg != NULL) {
131 IEEE80211_FREE(ic->ic_superg, M_80211_VAP);
132 ic->ic_superg = NULL;
133 }
134 }
135
136 void
ieee80211_superg_vattach(struct ieee80211vap * vap)137 ieee80211_superg_vattach(struct ieee80211vap *vap)
138 {
139 struct ieee80211com *ic = vap->iv_ic;
140
141 if (ic->ic_superg == NULL) /* NB: can't do fast-frames w/o state */
142 vap->iv_caps &= ~IEEE80211_C_FF;
143 if (vap->iv_caps & IEEE80211_C_FF)
144 vap->iv_flags |= IEEE80211_F_FF;
145 /* NB: we only implement sta mode */
146 if (vap->iv_opmode == IEEE80211_M_STA &&
147 (vap->iv_caps & IEEE80211_C_TURBOP))
148 vap->iv_flags |= IEEE80211_F_TURBOP;
149 }
150
151 void
ieee80211_superg_vdetach(struct ieee80211vap * vap)152 ieee80211_superg_vdetach(struct ieee80211vap *vap)
153 {
154 }
155
156 #define ATH_OUI_BYTES 0x00, 0x03, 0x7f
157 /*
158 * Add a WME information element to a frame.
159 */
160 uint8_t *
ieee80211_add_ath(uint8_t * frm,uint8_t caps,ieee80211_keyix defkeyix)161 ieee80211_add_ath(uint8_t *frm, uint8_t caps, ieee80211_keyix defkeyix)
162 {
163 static const struct ieee80211_ath_ie info = {
164 .ath_id = IEEE80211_ELEMID_VENDOR,
165 .ath_len = sizeof(struct ieee80211_ath_ie) - 2,
166 .ath_oui = { ATH_OUI_BYTES },
167 .ath_oui_type = ATH_OUI_TYPE,
168 .ath_oui_subtype= ATH_OUI_SUBTYPE,
169 .ath_version = ATH_OUI_VERSION,
170 };
171 struct ieee80211_ath_ie *ath = (struct ieee80211_ath_ie *) frm;
172
173 memcpy(frm, &info, sizeof(info));
174 ath->ath_capability = caps;
175 if (defkeyix != IEEE80211_KEYIX_NONE) {
176 ath->ath_defkeyix[0] = (defkeyix & 0xff);
177 ath->ath_defkeyix[1] = ((defkeyix >> 8) & 0xff);
178 } else {
179 ath->ath_defkeyix[0] = 0xff;
180 ath->ath_defkeyix[1] = 0x7f;
181 }
182 return frm + sizeof(info);
183 }
184 #undef ATH_OUI_BYTES
185
186 uint8_t *
ieee80211_add_athcaps(uint8_t * frm,const struct ieee80211_node * bss)187 ieee80211_add_athcaps(uint8_t *frm, const struct ieee80211_node *bss)
188 {
189 const struct ieee80211vap *vap = bss->ni_vap;
190
191 return ieee80211_add_ath(frm,
192 vap->iv_flags & IEEE80211_F_ATHEROS,
193 ((vap->iv_flags & IEEE80211_F_WPA) == 0 &&
194 bss->ni_authmode != IEEE80211_AUTH_8021X) ?
195 vap->iv_def_txkey : IEEE80211_KEYIX_NONE);
196 }
197
198 void
ieee80211_parse_ath(struct ieee80211_node * ni,uint8_t * ie)199 ieee80211_parse_ath(struct ieee80211_node *ni, uint8_t *ie)
200 {
201 const struct ieee80211_ath_ie *ath =
202 (const struct ieee80211_ath_ie *) ie;
203
204 ni->ni_ath_flags = ath->ath_capability;
205 ni->ni_ath_defkeyix = le16dec(&ath->ath_defkeyix);
206 }
207
208 int
ieee80211_parse_athparams(struct ieee80211_node * ni,uint8_t * frm,const struct ieee80211_frame * wh)209 ieee80211_parse_athparams(struct ieee80211_node *ni, uint8_t *frm,
210 const struct ieee80211_frame *wh)
211 {
212 struct ieee80211vap *vap = ni->ni_vap;
213 const struct ieee80211_ath_ie *ath;
214 u_int len = frm[1];
215 int capschanged;
216 uint16_t defkeyix;
217
218 if (len < sizeof(struct ieee80211_ath_ie)-2) {
219 IEEE80211_DISCARD_IE(vap,
220 IEEE80211_MSG_ELEMID | IEEE80211_MSG_SUPERG,
221 wh, "Atheros", "too short, len %u", len);
222 return -1;
223 }
224 ath = (const struct ieee80211_ath_ie *)frm;
225 capschanged = (ni->ni_ath_flags != ath->ath_capability);
226 defkeyix = le16dec(ath->ath_defkeyix);
227 if (capschanged || defkeyix != ni->ni_ath_defkeyix) {
228 ni->ni_ath_flags = ath->ath_capability;
229 ni->ni_ath_defkeyix = defkeyix;
230 IEEE80211_NOTE(vap, IEEE80211_MSG_SUPERG, ni,
231 "ath ie change: new caps 0x%x defkeyix 0x%x",
232 ni->ni_ath_flags, ni->ni_ath_defkeyix);
233 }
234 if (IEEE80211_ATH_CAP(vap, ni, ATHEROS_CAP_TURBO_PRIME)) {
235 uint16_t curflags, newflags;
236
237 /*
238 * Check for turbo mode switch. Calculate flags
239 * for the new mode and effect the switch.
240 */
241 newflags = curflags = vap->iv_ic->ic_bsschan->ic_flags;
242 /* NB: BOOST is not in ic_flags, so get it from the ie */
243 if (ath->ath_capability & ATHEROS_CAP_BOOST)
244 newflags |= IEEE80211_CHAN_TURBO;
245 else
246 newflags &= ~IEEE80211_CHAN_TURBO;
247 if (newflags != curflags)
248 ieee80211_dturbo_switch(vap, newflags);
249 }
250 return capschanged;
251 }
252
253 /*
254 * Decap the encapsulated frame pair and dispatch the first
255 * for delivery. The second frame is returned for delivery
256 * via the normal path.
257 */
258 struct mbuf *
ieee80211_ff_decap(struct ieee80211_node * ni,struct mbuf * m)259 ieee80211_ff_decap(struct ieee80211_node *ni, struct mbuf *m)
260 {
261 #define FF_LLC_SIZE (sizeof(struct ether_header) + sizeof(struct llc))
262 #define MS(x,f) (((x) & f) >> f##_S)
263 struct ieee80211vap *vap = ni->ni_vap;
264 struct llc *llc;
265 uint32_t ath;
266 struct mbuf *n;
267 int framelen;
268
269 /* NB: we assume caller does this check for us */
270 KASSERT(IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_FF),
271 ("ff not negotiated"));
272 /*
273 * Check for fast-frame tunnel encapsulation.
274 */
275 if (m->m_pkthdr.len < 3*FF_LLC_SIZE)
276 return m;
277 if (m->m_len < FF_LLC_SIZE &&
278 (m = m_pullup(m, FF_LLC_SIZE)) == NULL) {
279 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY,
280 ni->ni_macaddr, "fast-frame",
281 "%s", "m_pullup(llc) failed");
282 vap->iv_stats.is_rx_tooshort++;
283 return NULL;
284 }
285 llc = (struct llc *)(mtod(m, uint8_t *) +
286 sizeof(struct ether_header));
287 if (llc->llc_snap.ether_type != htons(ATH_FF_ETH_TYPE))
288 return m;
289 m_adj(m, FF_LLC_SIZE);
290 m_copydata(m, 0, sizeof(uint32_t), &ath);
291 if (MS(ath, ATH_FF_PROTO) != ATH_FF_PROTO_L2TUNNEL) {
292 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY,
293 ni->ni_macaddr, "fast-frame",
294 "unsupport tunnel protocol, header 0x%x", ath);
295 vap->iv_stats.is_ff_badhdr++;
296 m_freem(m);
297 return NULL;
298 }
299 /* NB: skip header and alignment padding */
300 m_adj(m, roundup(sizeof(uint32_t) - 2, 4) + 2);
301
302 vap->iv_stats.is_ff_decap++;
303
304 /*
305 * Decap the first frame, bust it apart from the
306 * second and deliver; then decap the second frame
307 * and return it to the caller for normal delivery.
308 */
309 m = ieee80211_decap1(m, &framelen);
310 if (m == NULL) {
311 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY,
312 ni->ni_macaddr, "fast-frame", "%s", "first decap failed");
313 vap->iv_stats.is_ff_tooshort++;
314 return NULL;
315 }
316 n = m_split(m, framelen, M_NOWAIT);
317 if (n == NULL) {
318 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY,
319 ni->ni_macaddr, "fast-frame",
320 "%s", "unable to split encapsulated frames");
321 vap->iv_stats.is_ff_split++;
322 m_freem(m); /* NB: must reclaim */
323 return NULL;
324 }
325 /* XXX not right for WDS */
326 vap->iv_deliver_data(vap, ni, m); /* 1st of pair */
327
328 /*
329 * Decap second frame.
330 */
331 m_adj(n, roundup2(framelen, 4) - framelen); /* padding */
332 n = ieee80211_decap1(n, &framelen);
333 if (n == NULL) {
334 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY,
335 ni->ni_macaddr, "fast-frame", "%s", "second decap failed");
336 vap->iv_stats.is_ff_tooshort++;
337 }
338 /* XXX verify framelen against mbuf contents */
339 return n; /* 2nd delivered by caller */
340 #undef MS
341 #undef FF_LLC_SIZE
342 }
343
344 /*
345 * Fast frame encapsulation. There must be two packets
346 * chained with m_nextpkt. We do header adjustment for
347 * each, add the tunnel encapsulation, and then concatenate
348 * the mbuf chains to form a single frame for transmission.
349 */
350 struct mbuf *
ieee80211_ff_encap(struct ieee80211vap * vap,struct mbuf * m1,int hdrspace,struct ieee80211_key * key)351 ieee80211_ff_encap(struct ieee80211vap *vap, struct mbuf *m1, int hdrspace,
352 struct ieee80211_key *key)
353 {
354 struct mbuf *m2;
355 struct ether_header eh1, eh2;
356 struct llc *llc;
357 struct mbuf *m;
358 int pad;
359
360 m2 = m1->m_nextpkt;
361 if (m2 == NULL) {
362 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
363 "%s: only one frame\n", __func__);
364 goto bad;
365 }
366 m1->m_nextpkt = NULL;
367
368 /*
369 * Adjust to include 802.11 header requirement.
370 */
371 KASSERT(m1->m_len >= sizeof(eh1), ("no ethernet header!"));
372 ETHER_HEADER_COPY(&eh1, mtod(m1, caddr_t));
373 m1 = ieee80211_mbuf_adjust(vap, hdrspace, key, m1);
374 if (m1 == NULL) {
375 kprintf("%s: failed initial mbuf_adjust\n", __func__);
376 /* NB: ieee80211_mbuf_adjust handles msgs+statistics */
377 m_freem(m2);
378 goto bad;
379 }
380
381 /*
382 * Copy second frame's Ethernet header out of line
383 * and adjust for possible padding in case there isn't room
384 * at the end of first frame.
385 */
386 KASSERT(m2->m_len >= sizeof(eh2), ("no ethernet header!"));
387 ETHER_HEADER_COPY(&eh2, mtod(m2, caddr_t));
388 m2 = ieee80211_mbuf_adjust(vap, 4, NULL, m2);
389 if (m2 == NULL) {
390 /* NB: ieee80211_mbuf_adjust handles msgs+statistics */
391 kprintf("%s: failed second \n", __func__);
392 goto bad;
393 }
394
395 /*
396 * Now do tunnel encapsulation. First, each
397 * frame gets a standard encapsulation.
398 */
399 m1 = ieee80211_ff_encap1(vap, m1, &eh1);
400 if (m1 == NULL)
401 goto bad;
402 m2 = ieee80211_ff_encap1(vap, m2, &eh2);
403 if (m2 == NULL)
404 goto bad;
405
406 /*
407 * Pad leading frame to a 4-byte boundary. If there
408 * is space at the end of the first frame, put it
409 * there; otherwise prepend to the front of the second
410 * frame. We know doing the second will always work
411 * because we reserve space above. We prefer appending
412 * as this typically has better DMA alignment properties.
413 */
414 for (m = m1; m->m_next != NULL; m = m->m_next)
415 ;
416 pad = roundup2(m1->m_pkthdr.len, 4) - m1->m_pkthdr.len;
417 if (pad) {
418 if (M_TRAILINGSPACE(m) < pad) { /* prepend to second */
419 m2->m_data -= pad;
420 m2->m_len += pad;
421 m2->m_pkthdr.len += pad;
422 } else { /* append to first */
423 m->m_len += pad;
424 m1->m_pkthdr.len += pad;
425 }
426 }
427
428 /*
429 * A-MSDU's are just appended; the "I'm A-MSDU!" bit is in the
430 * QoS header.
431 *
432 * XXX optimize by prepending together
433 */
434 m->m_next = m2; /* NB: last mbuf from above */
435 m1->m_pkthdr.len += m2->m_pkthdr.len;
436 M_PREPEND(m1, sizeof(uint32_t)+2, M_NOWAIT);
437 if (m1 == NULL) { /* XXX cannot happen */
438 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
439 "%s: no space for tunnel header\n", __func__);
440 vap->iv_stats.is_tx_nobuf++;
441 return NULL;
442 }
443 memset(mtod(m1, void *), 0, sizeof(uint32_t)+2);
444
445 M_PREPEND(m1, sizeof(struct llc), M_NOWAIT);
446 if (m1 == NULL) { /* XXX cannot happen */
447 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
448 "%s: no space for llc header\n", __func__);
449 vap->iv_stats.is_tx_nobuf++;
450 return NULL;
451 }
452 llc = mtod(m1, struct llc *);
453 llc->llc_dsap = llc->llc_ssap = LLC_SNAP_LSAP;
454 llc->llc_control = LLC_UI;
455 llc->llc_snap.org_code[0] = ATH_FF_SNAP_ORGCODE_0;
456 llc->llc_snap.org_code[1] = ATH_FF_SNAP_ORGCODE_1;
457 llc->llc_snap.org_code[2] = ATH_FF_SNAP_ORGCODE_2;
458 llc->llc_snap.ether_type = htons(ATH_FF_ETH_TYPE);
459
460 vap->iv_stats.is_ff_encap++;
461
462 return m1;
463 bad:
464 vap->iv_stats.is_ff_encapfail++;
465 if (m1 != NULL)
466 m_freem(m1);
467 if (m2 != NULL)
468 m_freem(m2);
469 return NULL;
470 }
471
472 /*
473 * A-MSDU encapsulation.
474 *
475 * This assumes just two frames for now, since we're borrowing the
476 * same queuing code and infrastructure as fast-frames.
477 *
478 * There must be two packets chained with m_nextpkt.
479 * We do header adjustment for each, and then concatenate the mbuf chains
480 * to form a single frame for transmission.
481 */
482 struct mbuf *
ieee80211_amsdu_encap(struct ieee80211vap * vap,struct mbuf * m1,int hdrspace,struct ieee80211_key * key)483 ieee80211_amsdu_encap(struct ieee80211vap *vap, struct mbuf *m1, int hdrspace,
484 struct ieee80211_key *key)
485 {
486 struct mbuf *m2;
487 struct ether_header eh1, eh2;
488 struct mbuf *m;
489 int pad;
490
491 m2 = m1->m_nextpkt;
492 if (m2 == NULL) {
493 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
494 "%s: only one frame\n", __func__);
495 goto bad;
496 }
497 m1->m_nextpkt = NULL;
498
499 /*
500 * Include A-MSDU header in adjusting header layout.
501 */
502 KASSERT(m1->m_len >= sizeof(eh1), ("no ethernet header!"));
503 ETHER_HEADER_COPY(&eh1, mtod(m1, caddr_t));
504 m1 = ieee80211_mbuf_adjust(vap,
505 hdrspace + sizeof(struct llc) + sizeof(uint32_t) +
506 sizeof(struct ether_header),
507 key, m1);
508 if (m1 == NULL) {
509 /* NB: ieee80211_mbuf_adjust handles msgs+statistics */
510 m_freem(m2);
511 goto bad;
512 }
513
514 /*
515 * Copy second frame's Ethernet header out of line
516 * and adjust for encapsulation headers. Note that
517 * we make room for padding in case there isn't room
518 * at the end of first frame.
519 */
520 KASSERT(m2->m_len >= sizeof(eh2), ("no ethernet header!"));
521 ETHER_HEADER_COPY(&eh2, mtod(m2, caddr_t));
522 m2 = ieee80211_mbuf_adjust(vap, 4, NULL, m2);
523 if (m2 == NULL) {
524 /* NB: ieee80211_mbuf_adjust handles msgs+statistics */
525 goto bad;
526 }
527
528 /*
529 * Now do tunnel encapsulation. First, each
530 * frame gets a standard encapsulation.
531 */
532 m1 = ieee80211_ff_encap1(vap, m1, &eh1);
533 if (m1 == NULL)
534 goto bad;
535 m2 = ieee80211_ff_encap1(vap, m2, &eh2);
536 if (m2 == NULL)
537 goto bad;
538
539 /*
540 * Pad leading frame to a 4-byte boundary. If there
541 * is space at the end of the first frame, put it
542 * there; otherwise prepend to the front of the second
543 * frame. We know doing the second will always work
544 * because we reserve space above. We prefer appending
545 * as this typically has better DMA alignment properties.
546 */
547 for (m = m1; m->m_next != NULL; m = m->m_next)
548 ;
549 pad = roundup2(m1->m_pkthdr.len, 4) - m1->m_pkthdr.len;
550 if (pad) {
551 if (M_TRAILINGSPACE(m) < pad) { /* prepend to second */
552 m2->m_data -= pad;
553 m2->m_len += pad;
554 m2->m_pkthdr.len += pad;
555 } else { /* append to first */
556 m->m_len += pad;
557 m1->m_pkthdr.len += pad;
558 }
559 }
560
561 /*
562 * Now, stick 'em together.
563 */
564 m->m_next = m2; /* NB: last mbuf from above */
565 m1->m_pkthdr.len += m2->m_pkthdr.len;
566
567 vap->iv_stats.is_amsdu_encap++;
568
569 return m1;
570 bad:
571 vap->iv_stats.is_amsdu_encapfail++;
572 if (m1 != NULL)
573 m_freem(m1);
574 if (m2 != NULL)
575 m_freem(m2);
576 return NULL;
577 }
578
579
580 static void
ff_transmit(struct ieee80211_node * ni,struct mbuf * m)581 ff_transmit(struct ieee80211_node *ni, struct mbuf *m)
582 {
583 struct ieee80211vap *vap = ni->ni_vap;
584 struct ieee80211com *ic = ni->ni_ic;
585 int error;
586
587 IEEE80211_TX_LOCK_ASSERT(vap->iv_ic);
588
589 /* encap and xmit */
590 m = ieee80211_encap(vap, ni, m);
591 if (m != NULL) {
592 struct ifnet *ifp = vap->iv_ifp;
593
594 error = ieee80211_parent_xmitpkt(ic, m);
595 if (!error)
596 if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
597 } else
598 ieee80211_free_node(ni);
599 }
600
601 /*
602 * Flush frames to device; note we re-use the linked list
603 * the frames were stored on and use the sentinel (unchanged)
604 * which may be non-NULL.
605 */
606 static void
ff_flush(struct mbuf * head,struct mbuf * last)607 ff_flush(struct mbuf *head, struct mbuf *last)
608 {
609 struct mbuf *m, *next;
610 struct ieee80211_node *ni;
611 struct ieee80211vap *vap;
612
613 for (m = head; m != last; m = next) {
614 next = m->m_nextpkt;
615 m->m_nextpkt = NULL;
616
617 ni = (struct ieee80211_node *) m->m_pkthdr.rcvif;
618 vap = ni->ni_vap;
619
620 IEEE80211_NOTE(vap, IEEE80211_MSG_SUPERG, ni,
621 "%s: flush frame, age %u", __func__, M_AGE_GET(m));
622 vap->iv_stats.is_ff_flush++;
623
624 ff_transmit(ni, m);
625 }
626 }
627
628 /*
629 * Age frames on the staging queue.
630 *
631 * This is called without the comlock held, but it does all its work
632 * behind the comlock. Because of this, it's possible that the
633 * staging queue will be serviced between the function which called
634 * it and now; thus simply checking that the queue has work in it
635 * may fail.
636 *
637 * See PR kern/174283 for more details.
638 */
639 void
ieee80211_ff_age(struct ieee80211com * ic,struct ieee80211_stageq * sq,int quanta)640 ieee80211_ff_age(struct ieee80211com *ic, struct ieee80211_stageq *sq,
641 int quanta)
642 {
643 struct mbuf *m, *head;
644 struct ieee80211_node *ni;
645
646 #if 0
647 KASSERT(sq->head != NULL, ("stageq empty"));
648 #endif
649
650 IEEE80211_LOCK(ic);
651 head = sq->head;
652 while ((m = sq->head) != NULL && M_AGE_GET(m) < quanta) {
653 int tid = WME_AC_TO_TID(M_WME_GETAC(m));
654
655 /* clear staging ref to frame */
656 ni = (struct ieee80211_node *) m->m_pkthdr.rcvif;
657 KASSERT(ni->ni_tx_superg[tid] == m, ("staging queue empty"));
658 ni->ni_tx_superg[tid] = NULL;
659
660 sq->head = m->m_nextpkt;
661 sq->depth--;
662 }
663 if (m == NULL)
664 sq->tail = NULL;
665 else
666 M_AGE_SUB(m, quanta);
667 IEEE80211_UNLOCK(ic);
668
669 IEEE80211_TX_LOCK(ic);
670 ff_flush(head, m);
671 IEEE80211_TX_UNLOCK(ic);
672 }
673
674 static void
stageq_add(struct ieee80211com * ic,struct ieee80211_stageq * sq,struct mbuf * m)675 stageq_add(struct ieee80211com *ic, struct ieee80211_stageq *sq, struct mbuf *m)
676 {
677 int age = ieee80211_ffagemax;
678
679 IEEE80211_LOCK_ASSERT(ic);
680
681 if (sq->tail != NULL) {
682 sq->tail->m_nextpkt = m;
683 age -= M_AGE_GET(sq->head);
684 } else
685 sq->head = m;
686 KASSERT(age >= 0, ("age %d", age));
687 M_AGE_SET(m, age);
688 m->m_nextpkt = NULL;
689 sq->tail = m;
690 sq->depth++;
691 }
692
693 static void
stageq_remove(struct ieee80211com * ic,struct ieee80211_stageq * sq,struct mbuf * mstaged)694 stageq_remove(struct ieee80211com *ic, struct ieee80211_stageq *sq, struct mbuf *mstaged)
695 {
696 struct mbuf *m, *mprev;
697
698 IEEE80211_LOCK_ASSERT(ic);
699
700 mprev = NULL;
701 for (m = sq->head; m != NULL; m = m->m_nextpkt) {
702 if (m == mstaged) {
703 if (mprev == NULL)
704 sq->head = m->m_nextpkt;
705 else
706 mprev->m_nextpkt = m->m_nextpkt;
707 if (sq->tail == m)
708 sq->tail = mprev;
709 sq->depth--;
710 return;
711 }
712 mprev = m;
713 }
714 kprintf("%s: packet not found\n", __func__);
715 }
716
717 static uint32_t
ff_approx_txtime(struct ieee80211_node * ni,const struct mbuf * m1,const struct mbuf * m2)718 ff_approx_txtime(struct ieee80211_node *ni,
719 const struct mbuf *m1, const struct mbuf *m2)
720 {
721 struct ieee80211com *ic = ni->ni_ic;
722 struct ieee80211vap *vap = ni->ni_vap;
723 uint32_t framelen;
724 uint32_t frame_time;
725
726 /*
727 * Approximate the frame length to be transmitted. A swag to add
728 * the following maximal values to the skb payload:
729 * - 32: 802.11 encap + CRC
730 * - 24: encryption overhead (if wep bit)
731 * - 4 + 6: fast-frame header and padding
732 * - 16: 2 LLC FF tunnel headers
733 * - 14: 1 802.3 FF tunnel header (mbuf already accounts for 2nd)
734 */
735 framelen = m1->m_pkthdr.len + 32 +
736 ATH_FF_MAX_HDR_PAD + ATH_FF_MAX_SEP_PAD + ATH_FF_MAX_HDR;
737 if (vap->iv_flags & IEEE80211_F_PRIVACY)
738 framelen += 24;
739 if (m2 != NULL)
740 framelen += m2->m_pkthdr.len;
741
742 /*
743 * For now, we assume non-shortgi, 20MHz, just because I want to
744 * at least test 802.11n.
745 */
746 if (ni->ni_txrate & IEEE80211_RATE_MCS)
747 frame_time = ieee80211_compute_duration_ht(framelen,
748 ni->ni_txrate,
749 IEEE80211_HT_RC_2_STREAMS(ni->ni_txrate),
750 0, /* isht40 */
751 0); /* isshortgi */
752 else
753 frame_time = ieee80211_compute_duration(ic->ic_rt, framelen,
754 ni->ni_txrate, 0);
755 return (frame_time);
756 }
757
758 /*
759 * Check if the supplied frame can be partnered with an existing
760 * or pending frame. Return a reference to any frame that should be
761 * sent on return; otherwise return NULL.
762 */
763 struct mbuf *
ieee80211_ff_check(struct ieee80211_node * ni,struct mbuf * m)764 ieee80211_ff_check(struct ieee80211_node *ni, struct mbuf *m)
765 {
766 struct ieee80211vap *vap = ni->ni_vap;
767 struct ieee80211com *ic = ni->ni_ic;
768 struct ieee80211_superg *sg = ic->ic_superg;
769 const int pri = M_WME_GETAC(m);
770 struct ieee80211_stageq *sq;
771 struct ieee80211_tx_ampdu *tap;
772 struct mbuf *mstaged;
773 uint32_t txtime, limit;
774
775 IEEE80211_TX_UNLOCK_ASSERT(ic);
776
777 /*
778 * Check if the supplied frame can be aggregated.
779 *
780 * NB: we allow EAPOL frames to be aggregated with other ucast traffic.
781 * Do 802.1x EAPOL frames proceed in the clear? Then they couldn't
782 * be aggregated with other types of frames when encryption is on?
783 */
784 IEEE80211_LOCK(ic);
785 tap = &ni->ni_tx_ampdu[WME_AC_TO_TID(pri)];
786 mstaged = ni->ni_tx_superg[WME_AC_TO_TID(pri)];
787 /* XXX NOTE: reusing packet counter state from A-MPDU */
788 /*
789 * XXX NOTE: this means we're double-counting; it should just
790 * be done in ieee80211_output.c once for both superg and A-MPDU.
791 */
792 ieee80211_txampdu_count_packet(tap);
793
794 /*
795 * When not in station mode never aggregate a multicast
796 * frame; this insures, for example, that a combined frame
797 * does not require multiple encryption keys.
798 */
799 if (vap->iv_opmode != IEEE80211_M_STA &&
800 ETHER_IS_MULTICAST(mtod(m, struct ether_header *)->ether_dhost)) {
801 /* XXX flush staged frame? */
802 IEEE80211_UNLOCK(ic);
803 return m;
804 }
805 /*
806 * If there is no frame to combine with and the pps is
807 * too low; then do not attempt to aggregate this frame.
808 */
809 if (mstaged == NULL &&
810 ieee80211_txampdu_getpps(tap) < ieee80211_ffppsmin) {
811 IEEE80211_UNLOCK(ic);
812 return m;
813 }
814 sq = &sg->ff_stageq[pri];
815 /*
816 * Check the txop limit to insure the aggregate fits.
817 */
818 limit = IEEE80211_TXOP_TO_US(
819 ic->ic_wme.wme_chanParams.cap_wmeParams[pri].wmep_txopLimit);
820 if (limit != 0 &&
821 (txtime = ff_approx_txtime(ni, m, mstaged)) > limit) {
822 /*
823 * Aggregate too long, return to the caller for direct
824 * transmission. In addition, flush any pending frame
825 * before sending this one.
826 */
827 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
828 "%s: txtime %u exceeds txop limit %u\n",
829 __func__, txtime, limit);
830
831 ni->ni_tx_superg[WME_AC_TO_TID(pri)] = NULL;
832 if (mstaged != NULL)
833 stageq_remove(ic, sq, mstaged);
834 IEEE80211_UNLOCK(ic);
835
836 if (mstaged != NULL) {
837 IEEE80211_TX_LOCK(ic);
838 IEEE80211_NOTE(vap, IEEE80211_MSG_SUPERG, ni,
839 "%s: flush staged frame", __func__);
840 /* encap and xmit */
841 ff_transmit(ni, mstaged);
842 IEEE80211_TX_UNLOCK(ic);
843 }
844 return m; /* NB: original frame */
845 }
846 /*
847 * An aggregation candidate. If there's a frame to partner
848 * with then combine and return for processing. Otherwise
849 * save this frame and wait for a partner to show up (or
850 * the frame to be flushed). Note that staged frames also
851 * hold their node reference.
852 */
853 if (mstaged != NULL) {
854 ni->ni_tx_superg[WME_AC_TO_TID(pri)] = NULL;
855 stageq_remove(ic, sq, mstaged);
856 IEEE80211_UNLOCK(ic);
857
858 IEEE80211_NOTE(vap, IEEE80211_MSG_SUPERG, ni,
859 "%s: aggregate fast-frame", __func__);
860 /*
861 * Release the node reference; we only need
862 * the one already in mstaged.
863 */
864 KASSERT(mstaged->m_pkthdr.rcvif == (void *)ni,
865 ("rcvif %p ni %p", mstaged->m_pkthdr.rcvif, ni));
866 ieee80211_free_node(ni);
867
868 m->m_nextpkt = NULL;
869 mstaged->m_nextpkt = m;
870 mstaged->m_flags |= M_FF; /* NB: mark for encap work */
871 } else {
872 KASSERT(ni->ni_tx_superg[WME_AC_TO_TID(pri)]== NULL,
873 ("ni_tx_superg[]: %p",
874 ni->ni_tx_superg[WME_AC_TO_TID(pri)]));
875 ni->ni_tx_superg[WME_AC_TO_TID(pri)] = m;
876
877 stageq_add(ic, sq, m);
878 IEEE80211_UNLOCK(ic);
879
880 IEEE80211_NOTE(vap, IEEE80211_MSG_SUPERG, ni,
881 "%s: stage frame, %u queued", __func__, sq->depth);
882 /* NB: mstaged is NULL */
883 }
884 return mstaged;
885 }
886
887 struct mbuf *
ieee80211_amsdu_check(struct ieee80211_node * ni,struct mbuf * m)888 ieee80211_amsdu_check(struct ieee80211_node *ni, struct mbuf *m)
889 {
890 /*
891 * XXX TODO: actually enforce the node support
892 * and HTCAP requirements for the maximum A-MSDU
893 * size.
894 */
895
896 /* First: software A-MSDU transmit? */
897 if (! ieee80211_amsdu_tx_ok(ni))
898 return (m);
899
900 /* Next - EAPOL? Nope, don't aggregate; we don't QoS encap them */
901 if (m->m_flags & (M_EAPOL | M_MCAST | M_BCAST))
902 return (m);
903
904 /* Next - needs to be a data frame, non-broadcast, etc */
905 if (ETHER_IS_MULTICAST(mtod(m, struct ether_header *)->ether_dhost))
906 return (m);
907
908 return (ieee80211_ff_check(ni, m));
909 }
910
911 void
ieee80211_ff_node_init(struct ieee80211_node * ni)912 ieee80211_ff_node_init(struct ieee80211_node *ni)
913 {
914 /*
915 * Clean FF state on re-associate. This handles the case
916 * where a station leaves w/o notifying us and then returns
917 * before node is reaped for inactivity.
918 */
919 ieee80211_ff_node_cleanup(ni);
920 }
921
922 void
ieee80211_ff_node_cleanup(struct ieee80211_node * ni)923 ieee80211_ff_node_cleanup(struct ieee80211_node *ni)
924 {
925 struct ieee80211com *ic = ni->ni_ic;
926 struct ieee80211_superg *sg = ic->ic_superg;
927 struct mbuf *m, *next_m, *head;
928 int tid;
929
930 IEEE80211_LOCK(ic);
931 head = NULL;
932 for (tid = 0; tid < WME_NUM_TID; tid++) {
933 int ac = TID_TO_WME_AC(tid);
934 /*
935 * XXX Initialise the packet counter.
936 *
937 * This may be double-work for 11n stations;
938 * but without it we never setup things.
939 */
940 ieee80211_txampdu_init_pps(&ni->ni_tx_ampdu[tid]);
941 m = ni->ni_tx_superg[tid];
942 if (m != NULL) {
943 ni->ni_tx_superg[tid] = NULL;
944 stageq_remove(ic, &sg->ff_stageq[ac], m);
945 m->m_nextpkt = head;
946 head = m;
947 }
948 }
949 IEEE80211_UNLOCK(ic);
950
951 /*
952 * Free mbufs, taking care to not dereference the mbuf after
953 * we free it (hence grabbing m_nextpkt before we free it.)
954 */
955 m = head;
956 while (m != NULL) {
957 next_m = m->m_nextpkt;
958 m_freem(m);
959 ieee80211_free_node(ni);
960 m = next_m;
961 }
962 }
963
964 /*
965 * Switch between turbo and non-turbo operating modes.
966 * Use the specified channel flags to locate the new
967 * channel, update 802.11 state, and then call back into
968 * the driver to effect the change.
969 */
970 void
ieee80211_dturbo_switch(struct ieee80211vap * vap,int newflags)971 ieee80211_dturbo_switch(struct ieee80211vap *vap, int newflags)
972 {
973 struct ieee80211com *ic = vap->iv_ic;
974 struct ieee80211_channel *chan;
975
976 chan = ieee80211_find_channel(ic, ic->ic_bsschan->ic_freq, newflags);
977 if (chan == NULL) { /* XXX should not happen */
978 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
979 "%s: no channel with freq %u flags 0x%x\n",
980 __func__, ic->ic_bsschan->ic_freq, newflags);
981 return;
982 }
983
984 IEEE80211_DPRINTF(vap, IEEE80211_MSG_SUPERG,
985 "%s: %s -> %s (freq %u flags 0x%x)\n", __func__,
986 ieee80211_phymode_name[ieee80211_chan2mode(ic->ic_bsschan)],
987 ieee80211_phymode_name[ieee80211_chan2mode(chan)],
988 chan->ic_freq, chan->ic_flags);
989
990 ic->ic_bsschan = chan;
991 ic->ic_prevchan = ic->ic_curchan;
992 ic->ic_curchan = chan;
993 ic->ic_rt = ieee80211_get_ratetable(chan);
994 ic->ic_set_channel(ic);
995 ieee80211_radiotap_chan_change(ic);
996 /* NB: do not need to reset ERP state 'cuz we're in sta mode */
997 }
998
999 /*
1000 * Return the current ``state'' of an Atheros capbility.
1001 * If associated in station mode report the negotiated
1002 * setting. Otherwise report the current setting.
1003 */
1004 static int
getathcap(struct ieee80211vap * vap,int cap)1005 getathcap(struct ieee80211vap *vap, int cap)
1006 {
1007 if (vap->iv_opmode == IEEE80211_M_STA &&
1008 vap->iv_state == IEEE80211_S_RUN)
1009 return IEEE80211_ATH_CAP(vap, vap->iv_bss, cap) != 0;
1010 else
1011 return (vap->iv_flags & cap) != 0;
1012 }
1013
1014 static int
superg_ioctl_get80211(struct ieee80211vap * vap,struct ieee80211req * ireq)1015 superg_ioctl_get80211(struct ieee80211vap *vap, struct ieee80211req *ireq)
1016 {
1017 switch (ireq->i_type) {
1018 case IEEE80211_IOC_FF:
1019 ireq->i_val = getathcap(vap, IEEE80211_F_FF);
1020 break;
1021 case IEEE80211_IOC_TURBOP:
1022 ireq->i_val = getathcap(vap, IEEE80211_F_TURBOP);
1023 break;
1024 default:
1025 return ENOSYS;
1026 }
1027 return 0;
1028 }
1029 IEEE80211_IOCTL_GET(superg, superg_ioctl_get80211);
1030
1031 static int
superg_ioctl_set80211(struct ieee80211vap * vap,struct ieee80211req * ireq)1032 superg_ioctl_set80211(struct ieee80211vap *vap, struct ieee80211req *ireq)
1033 {
1034 switch (ireq->i_type) {
1035 case IEEE80211_IOC_FF:
1036 if (ireq->i_val) {
1037 if ((vap->iv_caps & IEEE80211_C_FF) == 0)
1038 return EOPNOTSUPP;
1039 vap->iv_flags |= IEEE80211_F_FF;
1040 } else
1041 vap->iv_flags &= ~IEEE80211_F_FF;
1042 return ENETRESET;
1043 case IEEE80211_IOC_TURBOP:
1044 if (ireq->i_val) {
1045 if ((vap->iv_caps & IEEE80211_C_TURBOP) == 0)
1046 return EOPNOTSUPP;
1047 vap->iv_flags |= IEEE80211_F_TURBOP;
1048 } else
1049 vap->iv_flags &= ~IEEE80211_F_TURBOP;
1050 return ENETRESET;
1051 default:
1052 return ENOSYS;
1053 }
1054 return 0;
1055 }
1056 IEEE80211_IOCTL_SET(superg, superg_ioctl_set80211);
1057
1058 #endif /* IEEE80211_SUPPORT_SUPERG */
1059