1/*
2 * Marvell Wireless LAN device driver: 802.11h
3 *
4 * Copyright (C) 2013-2014, Marvell International Ltd.
5 *
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License").  You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13 *
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17 * this warranty disclaimer.
18 */
19
20#include "main.h"
21#include "fw.h"
22
23
24void mwifiex_init_11h_params(struct mwifiex_private *priv)
25{
26	priv->state_11h.is_11h_enabled = true;
27	priv->state_11h.is_11h_active = false;
28}
29
30inline int mwifiex_is_11h_active(struct mwifiex_private *priv)
31{
32	return priv->state_11h.is_11h_active;
33}
34/* This function appends 11h info to a buffer while joining an
35 * infrastructure BSS
36 */
37static void
38mwifiex_11h_process_infra_join(struct mwifiex_private *priv, u8 **buffer,
39			       struct mwifiex_bssdescriptor *bss_desc)
40{
41	struct mwifiex_ie_types_header *ie_header;
42	struct mwifiex_ie_types_pwr_capability *cap;
43	struct mwifiex_ie_types_local_pwr_constraint *constraint;
44	struct ieee80211_supported_band *sband;
45	u8 radio_type;
46	int i;
47
48	if (!buffer || !(*buffer))
49		return;
50
51	radio_type = mwifiex_band_to_radio_type((u8) bss_desc->bss_band);
52	sband = priv->wdev.wiphy->bands[radio_type];
53
54	cap = (struct mwifiex_ie_types_pwr_capability *)*buffer;
55	cap->header.type = cpu_to_le16(WLAN_EID_PWR_CAPABILITY);
56	cap->header.len = cpu_to_le16(2);
57	cap->min_pwr = 0;
58	cap->max_pwr = 0;
59	*buffer += sizeof(*cap);
60
61	constraint = (struct mwifiex_ie_types_local_pwr_constraint *)*buffer;
62	constraint->header.type = cpu_to_le16(WLAN_EID_PWR_CONSTRAINT);
63	constraint->header.len = cpu_to_le16(2);
64	constraint->chan = bss_desc->channel;
65	constraint->constraint = bss_desc->local_constraint;
66	*buffer += sizeof(*constraint);
67
68	ie_header = (struct mwifiex_ie_types_header *)*buffer;
69	ie_header->type = cpu_to_le16(TLV_TYPE_PASSTHROUGH);
70	ie_header->len  = cpu_to_le16(2 * sband->n_channels + 2);
71	*buffer += sizeof(*ie_header);
72	*(*buffer)++ = WLAN_EID_SUPPORTED_CHANNELS;
73	*(*buffer)++ = 2 * sband->n_channels;
74	for (i = 0; i < sband->n_channels; i++) {
75		*(*buffer)++ = ieee80211_frequency_to_channel(
76					sband->channels[i].center_freq);
77		*(*buffer)++ = 1; /* one channel in the subband */
78	}
79}
80
81/* Enable or disable the 11h extensions in the firmware */
82int mwifiex_11h_activate(struct mwifiex_private *priv, bool flag)
83{
84	u32 enable = flag;
85
86	/* enable master mode radar detection on AP interface */
87	if ((GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) && enable)
88		enable |= MWIFIEX_MASTER_RADAR_DET_MASK;
89
90	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
91				HostCmd_ACT_GEN_SET, DOT11H_I, &enable, true);
92}
93
94/* This functions processes TLV buffer for a pending BSS Join command.
95 *
96 * Activate 11h functionality in the firmware if the spectrum management
97 * capability bit is found in the network we are joining. Also, necessary
98 * TLVs are set based on requested network's 11h capability.
99 */
100void mwifiex_11h_process_join(struct mwifiex_private *priv, u8 **buffer,
101			      struct mwifiex_bssdescriptor *bss_desc)
102{
103	if (bss_desc->sensed_11h) {
104		/* Activate 11h functions in firmware, turns on capability
105		 * bit
106		 */
107		mwifiex_11h_activate(priv, true);
108		priv->state_11h.is_11h_active = true;
109		bss_desc->cap_info_bitmap |= WLAN_CAPABILITY_SPECTRUM_MGMT;
110		mwifiex_11h_process_infra_join(priv, buffer, bss_desc);
111	} else {
112		/* Deactivate 11h functions in the firmware */
113		mwifiex_11h_activate(priv, false);
114		priv->state_11h.is_11h_active = false;
115		bss_desc->cap_info_bitmap &= ~WLAN_CAPABILITY_SPECTRUM_MGMT;
116	}
117}
118
119/* This is DFS CAC work queue function.
120 * This delayed work emits CAC finished event for cfg80211 if
121 * CAC was started earlier.
122 */
123void mwifiex_dfs_cac_work_queue(struct work_struct *work)
124{
125	struct cfg80211_chan_def chandef;
126	struct delayed_work *delayed_work =
127			container_of(work, struct delayed_work, work);
128	struct mwifiex_private *priv =
129			container_of(delayed_work, struct mwifiex_private,
130				     dfs_cac_work);
131
132	if (WARN_ON(!priv))
133		return;
134
135	chandef = priv->dfs_chandef;
136	if (priv->wdev.cac_started) {
137		dev_dbg(priv->adapter->dev,
138			"CAC timer finished; No radar detected\n");
139		cfg80211_cac_event(priv->netdev, &chandef,
140				   NL80211_RADAR_CAC_FINISHED,
141				   GFP_KERNEL);
142	}
143}
144
145/* This function prepares channel report request command to FW for
146 * starting radar detection.
147 */
148int mwifiex_cmd_issue_chan_report_request(struct mwifiex_private *priv,
149					  struct host_cmd_ds_command *cmd,
150					  void *data_buf)
151{
152	struct host_cmd_ds_chan_rpt_req *cr_req = &cmd->params.chan_rpt_req;
153	struct mwifiex_radar_params *radar_params = (void *)data_buf;
154
155	cmd->command = cpu_to_le16(HostCmd_CMD_CHAN_REPORT_REQUEST);
156	cmd->size = cpu_to_le16(S_DS_GEN);
157	le16_add_cpu(&cmd->size, sizeof(struct host_cmd_ds_chan_rpt_req));
158
159	cr_req->chan_desc.start_freq = cpu_to_le16(MWIFIEX_A_BAND_START_FREQ);
160	cr_req->chan_desc.chan_num = radar_params->chandef->chan->hw_value;
161	cr_req->chan_desc.chan_width = radar_params->chandef->width;
162	cr_req->msec_dwell_time = cpu_to_le32(radar_params->cac_time_ms);
163
164	dev_dbg(priv->adapter->dev,
165		"11h: issuing DFS Radar check for channel=%d\n",
166		radar_params->chandef->chan->hw_value);
167
168	return 0;
169}
170
171/* This function is to abort ongoing CAC upon stopping AP operations
172 * or during unload.
173 */
174void mwifiex_abort_cac(struct mwifiex_private *priv)
175{
176	if (priv->wdev.cac_started) {
177		dev_dbg(priv->adapter->dev,
178			"Aborting delayed work for CAC.\n");
179		cancel_delayed_work_sync(&priv->dfs_cac_work);
180		cfg80211_cac_event(priv->netdev, &priv->dfs_chandef,
181				   NL80211_RADAR_CAC_ABORTED, GFP_KERNEL);
182	}
183}
184
185/* This function handles channel report event from FW during CAC period.
186 * If radar is detected during CAC, driver indicates the same to cfg80211
187 * and also cancels ongoing delayed work.
188 */
189int mwifiex_11h_handle_chanrpt_ready(struct mwifiex_private *priv,
190				     struct sk_buff *skb)
191{
192	struct host_cmd_ds_chan_rpt_event *rpt_event;
193	struct mwifiex_ie_types_chan_rpt_data *rpt;
194	u8 *evt_buf;
195	u16 event_len, tlv_len;
196
197	rpt_event = (void *)(skb->data + sizeof(u32));
198	event_len = skb->len - (sizeof(struct host_cmd_ds_chan_rpt_event)+
199				sizeof(u32));
200
201	if (le32_to_cpu(rpt_event->result) != HostCmd_RESULT_OK) {
202		dev_err(priv->adapter->dev, "Error in channel report event\n");
203		return -1;
204	}
205
206	evt_buf = (void *)&rpt_event->tlvbuf;
207
208	while (event_len >= sizeof(struct mwifiex_ie_types_header)) {
209		rpt = (void *)&rpt_event->tlvbuf;
210		tlv_len = le16_to_cpu(rpt->header.len);
211
212		switch (le16_to_cpu(rpt->header.type)) {
213		case TLV_TYPE_CHANRPT_11H_BASIC:
214			if (rpt->map.radar) {
215				dev_notice(priv->adapter->dev,
216					   "RADAR Detected on channel %d!\n",
217					    priv->dfs_chandef.chan->hw_value);
218				cancel_delayed_work_sync(&priv->dfs_cac_work);
219				cfg80211_cac_event(priv->netdev,
220						   &priv->dfs_chandef,
221						   NL80211_RADAR_DETECTED,
222						   GFP_KERNEL);
223			}
224			break;
225		default:
226			break;
227		}
228
229		evt_buf += (tlv_len + sizeof(rpt->header));
230		event_len -= (tlv_len + sizeof(rpt->header));
231	}
232
233	return 0;
234}
235
236/* Handler for radar detected event from FW.*/
237int mwifiex_11h_handle_radar_detected(struct mwifiex_private *priv,
238				      struct sk_buff *skb)
239{
240	struct mwifiex_radar_det_event *rdr_event;
241
242	rdr_event = (void *)(skb->data + sizeof(u32));
243
244	if (le32_to_cpu(rdr_event->passed)) {
245		dev_notice(priv->adapter->dev,
246			   "radar detected; indicating kernel\n");
247		cfg80211_radar_event(priv->adapter->wiphy, &priv->dfs_chandef,
248				     GFP_KERNEL);
249		dev_dbg(priv->adapter->dev, "regdomain: %d\n",
250			rdr_event->reg_domain);
251		dev_dbg(priv->adapter->dev, "radar detection type: %d\n",
252			rdr_event->det_type);
253	} else {
254		dev_dbg(priv->adapter->dev, "false radar detection event!\n");
255	}
256
257	return 0;
258}
259
260/* This is work queue function for channel switch handling.
261 * This function takes care of updating new channel definitin to
262 * bss config structure, restart AP and indicate channel switch success
263 * to cfg80211.
264 */
265void mwifiex_dfs_chan_sw_work_queue(struct work_struct *work)
266{
267	struct mwifiex_uap_bss_param *bss_cfg;
268	struct delayed_work *delayed_work =
269			container_of(work, struct delayed_work, work);
270	struct mwifiex_private *priv =
271			container_of(delayed_work, struct mwifiex_private,
272				     dfs_chan_sw_work);
273
274	if (WARN_ON(!priv))
275		return;
276
277	bss_cfg = &priv->bss_cfg;
278	if (!bss_cfg->beacon_period) {
279		dev_err(priv->adapter->dev,
280			"channel switch: AP already stopped\n");
281		return;
282	}
283
284	mwifiex_uap_set_channel(bss_cfg, priv->dfs_chandef);
285
286	if (mwifiex_config_start_uap(priv, bss_cfg)) {
287		dev_dbg(priv->adapter->dev,
288			"Failed to start AP after channel switch\n");
289		return;
290	}
291
292	dev_notice(priv->adapter->dev,
293		   "indicating channel switch completion to kernel\n");
294	cfg80211_ch_switch_notify(priv->netdev, &priv->dfs_chandef);
295}
296