status.c 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662
  1. /*
  2. * Copyright 2002-2005, Instant802 Networks, Inc.
  3. * Copyright 2005-2006, Devicescape Software, Inc.
  4. * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
  5. * Copyright 2008-2010 Johannes Berg <johannes@sipsolutions.net>
  6. *
  7. * This program is free software; you can redistribute it and/or modify
  8. * it under the terms of the GNU General Public License version 2 as
  9. * published by the Free Software Foundation.
  10. */
  11. #include <linux/export.h>
  12. #include <linux/etherdevice.h>
  13. #include <net/mac80211.h>
  14. #include <asm/unaligned.h>
  15. #include "ieee80211_i.h"
  16. #include "rate.h"
  17. #include "mesh.h"
  18. #include "led.h"
  19. #include "wme.h"
  20. void ieee80211_tx_status_irqsafe(struct ieee80211_hw *hw,
  21. struct sk_buff *skb)
  22. {
  23. struct ieee80211_local *local = hw_to_local(hw);
  24. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  25. int tmp;
  26. skb->pkt_type = IEEE80211_TX_STATUS_MSG;
  27. skb_queue_tail(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS ?
  28. &local->skb_queue : &local->skb_queue_unreliable, skb);
  29. tmp = skb_queue_len(&local->skb_queue) +
  30. skb_queue_len(&local->skb_queue_unreliable);
  31. while (tmp > IEEE80211_IRQSAFE_QUEUE_LIMIT &&
  32. (skb = skb_dequeue(&local->skb_queue_unreliable))) {
  33. dev_kfree_skb_irq(skb);
  34. tmp--;
  35. I802_DEBUG_INC(local->tx_status_drop);
  36. }
  37. tasklet_schedule(&local->tasklet);
  38. }
  39. EXPORT_SYMBOL(ieee80211_tx_status_irqsafe);
  40. static void ieee80211_handle_filtered_frame(struct ieee80211_local *local,
  41. struct sta_info *sta,
  42. struct sk_buff *skb)
  43. {
  44. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  45. struct ieee80211_hdr *hdr = (void *)skb->data;
  46. int ac;
  47. /*
  48. * This skb 'survived' a round-trip through the driver, and
  49. * hopefully the driver didn't mangle it too badly. However,
  50. * we can definitely not rely on the control information
  51. * being correct. Clear it so we don't get junk there, and
  52. * indicate that it needs new processing, but must not be
  53. * modified/encrypted again.
  54. */
  55. memset(&info->control, 0, sizeof(info->control));
  56. info->control.jiffies = jiffies;
  57. info->control.vif = &sta->sdata->vif;
  58. info->flags |= IEEE80211_TX_INTFL_NEED_TXPROCESSING |
  59. IEEE80211_TX_INTFL_RETRANSMISSION;
  60. info->flags &= ~IEEE80211_TX_TEMPORARY_FLAGS;
  61. sta->tx_filtered_count++;
  62. /*
  63. * Clear more-data bit on filtered frames, it might be set
  64. * but later frames might time out so it might have to be
  65. * clear again ... It's all rather unlikely (this frame
  66. * should time out first, right?) but let's not confuse
  67. * peers unnecessarily.
  68. */
  69. if (hdr->frame_control & cpu_to_le16(IEEE80211_FCTL_MOREDATA))
  70. hdr->frame_control &= ~cpu_to_le16(IEEE80211_FCTL_MOREDATA);
  71. if (ieee80211_is_data_qos(hdr->frame_control)) {
  72. u8 *p = ieee80211_get_qos_ctl(hdr);
  73. int tid = *p & IEEE80211_QOS_CTL_TID_MASK;
  74. /*
  75. * Clear EOSP if set, this could happen e.g.
  76. * if an absence period (us being a P2P GO)
  77. * shortens the SP.
  78. */
  79. if (*p & IEEE80211_QOS_CTL_EOSP)
  80. *p &= ~IEEE80211_QOS_CTL_EOSP;
  81. ac = ieee802_1d_to_ac[tid & 7];
  82. } else {
  83. ac = IEEE80211_AC_BE;
  84. }
  85. /*
  86. * Clear the TX filter mask for this STA when sending the next
  87. * packet. If the STA went to power save mode, this will happen
  88. * when it wakes up for the next time.
  89. */
  90. set_sta_flag(sta, WLAN_STA_CLEAR_PS_FILT);
  91. /*
  92. * This code races in the following way:
  93. *
  94. * (1) STA sends frame indicating it will go to sleep and does so
  95. * (2) hardware/firmware adds STA to filter list, passes frame up
  96. * (3) hardware/firmware processes TX fifo and suppresses a frame
  97. * (4) we get TX status before having processed the frame and
  98. * knowing that the STA has gone to sleep.
  99. *
  100. * This is actually quite unlikely even when both those events are
  101. * processed from interrupts coming in quickly after one another or
  102. * even at the same time because we queue both TX status events and
  103. * RX frames to be processed by a tasklet and process them in the
  104. * same order that they were received or TX status last. Hence, there
  105. * is no race as long as the frame RX is processed before the next TX
  106. * status, which drivers can ensure, see below.
  107. *
  108. * Note that this can only happen if the hardware or firmware can
  109. * actually add STAs to the filter list, if this is done by the
  110. * driver in response to set_tim() (which will only reduce the race
  111. * this whole filtering tries to solve, not completely solve it)
  112. * this situation cannot happen.
  113. *
  114. * To completely solve this race drivers need to make sure that they
  115. * (a) don't mix the irq-safe/not irq-safe TX status/RX processing
  116. * functions and
  117. * (b) always process RX events before TX status events if ordering
  118. * can be unknown, for example with different interrupt status
  119. * bits.
  120. * (c) if PS mode transitions are manual (i.e. the flag
  121. * %IEEE80211_HW_AP_LINK_PS is set), always process PS state
  122. * changes before calling TX status events if ordering can be
  123. * unknown.
  124. */
  125. if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
  126. skb_queue_len(&sta->tx_filtered[ac]) < STA_MAX_TX_BUFFER) {
  127. skb_queue_tail(&sta->tx_filtered[ac], skb);
  128. sta_info_recalc_tim(sta);
  129. if (!timer_pending(&local->sta_cleanup))
  130. mod_timer(&local->sta_cleanup,
  131. round_jiffies(jiffies +
  132. STA_INFO_CLEANUP_INTERVAL));
  133. return;
  134. }
  135. if (!test_sta_flag(sta, WLAN_STA_PS_STA) &&
  136. !(info->flags & IEEE80211_TX_INTFL_RETRIED)) {
  137. /* Software retry the packet once */
  138. info->flags |= IEEE80211_TX_INTFL_RETRIED;
  139. ieee80211_add_pending_skb(local, skb);
  140. return;
  141. }
  142. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  143. if (net_ratelimit())
  144. wiphy_debug(local->hw.wiphy,
  145. "dropped TX filtered frame, queue_len=%d PS=%d @%lu\n",
  146. skb_queue_len(&sta->tx_filtered[ac]),
  147. !!test_sta_flag(sta, WLAN_STA_PS_STA), jiffies);
  148. #endif
  149. dev_kfree_skb(skb);
  150. }
  151. static void ieee80211_check_pending_bar(struct sta_info *sta, u8 *addr, u8 tid)
  152. {
  153. struct tid_ampdu_tx *tid_tx;
  154. tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);
  155. if (!tid_tx || !tid_tx->bar_pending)
  156. return;
  157. tid_tx->bar_pending = false;
  158. ieee80211_send_bar(&sta->sdata->vif, addr, tid, tid_tx->failed_bar_ssn);
  159. }
  160. static void ieee80211_frame_acked(struct sta_info *sta, struct sk_buff *skb)
  161. {
  162. struct ieee80211_mgmt *mgmt = (void *) skb->data;
  163. struct ieee80211_local *local = sta->local;
  164. struct ieee80211_sub_if_data *sdata = sta->sdata;
  165. if (ieee80211_is_data_qos(mgmt->frame_control)) {
  166. struct ieee80211_hdr *hdr = (void *) skb->data;
  167. u8 *qc = ieee80211_get_qos_ctl(hdr);
  168. u16 tid = qc[0] & 0xf;
  169. ieee80211_check_pending_bar(sta, hdr->addr1, tid);
  170. }
  171. if (ieee80211_is_action(mgmt->frame_control) &&
  172. sdata->vif.type == NL80211_IFTYPE_STATION &&
  173. mgmt->u.action.category == WLAN_CATEGORY_HT &&
  174. mgmt->u.action.u.ht_smps.action == WLAN_HT_ACTION_SMPS) {
  175. /*
  176. * This update looks racy, but isn't -- if we come
  177. * here we've definitely got a station that we're
  178. * talking to, and on a managed interface that can
  179. * only be the AP. And the only other place updating
  180. * this variable is before we're associated.
  181. */
  182. switch (mgmt->u.action.u.ht_smps.smps_control) {
  183. case WLAN_HT_SMPS_CONTROL_DYNAMIC:
  184. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_DYNAMIC;
  185. break;
  186. case WLAN_HT_SMPS_CONTROL_STATIC:
  187. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_STATIC;
  188. break;
  189. case WLAN_HT_SMPS_CONTROL_DISABLED:
  190. default: /* shouldn't happen since we don't send that */
  191. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_OFF;
  192. break;
  193. }
  194. ieee80211_queue_work(&local->hw, &local->recalc_smps);
  195. }
  196. }
  197. static void ieee80211_set_bar_pending(struct sta_info *sta, u8 tid, u16 ssn)
  198. {
  199. struct tid_ampdu_tx *tid_tx;
  200. tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);
  201. if (!tid_tx)
  202. return;
  203. tid_tx->failed_bar_ssn = ssn;
  204. tid_tx->bar_pending = true;
  205. }
  206. static int ieee80211_tx_radiotap_len(struct ieee80211_tx_info *info)
  207. {
  208. int len = sizeof(struct ieee80211_radiotap_header);
  209. /* IEEE80211_RADIOTAP_RATE rate */
  210. if (info->status.rates[0].idx >= 0 &&
  211. !(info->status.rates[0].flags & IEEE80211_TX_RC_MCS))
  212. len += 2;
  213. /* IEEE80211_RADIOTAP_TX_FLAGS */
  214. len += 2;
  215. /* IEEE80211_RADIOTAP_DATA_RETRIES */
  216. len += 1;
  217. /* IEEE80211_TX_RC_MCS */
  218. if (info->status.rates[0].idx >= 0 &&
  219. info->status.rates[0].flags & IEEE80211_TX_RC_MCS)
  220. len += 3;
  221. return len;
  222. }
  223. static void ieee80211_add_tx_radiotap_header(struct ieee80211_supported_band
  224. *sband, struct sk_buff *skb,
  225. int retry_count, int rtap_len)
  226. {
  227. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  228. struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
  229. struct ieee80211_radiotap_header *rthdr;
  230. unsigned char *pos;
  231. u16 txflags;
  232. rthdr = (struct ieee80211_radiotap_header *) skb_push(skb, rtap_len);
  233. memset(rthdr, 0, rtap_len);
  234. rthdr->it_len = cpu_to_le16(rtap_len);
  235. rthdr->it_present =
  236. cpu_to_le32((1 << IEEE80211_RADIOTAP_TX_FLAGS) |
  237. (1 << IEEE80211_RADIOTAP_DATA_RETRIES));
  238. pos = (unsigned char *)(rthdr + 1);
  239. /*
  240. * XXX: Once radiotap gets the bitmap reset thing the vendor
  241. * extensions proposal contains, we can actually report
  242. * the whole set of tries we did.
  243. */
  244. /* IEEE80211_RADIOTAP_RATE */
  245. if (info->status.rates[0].idx >= 0 &&
  246. !(info->status.rates[0].flags & IEEE80211_TX_RC_MCS)) {
  247. rthdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_RATE);
  248. *pos = sband->bitrates[info->status.rates[0].idx].bitrate / 5;
  249. /* padding for tx flags */
  250. pos += 2;
  251. }
  252. /* IEEE80211_RADIOTAP_TX_FLAGS */
  253. txflags = 0;
  254. if (!(info->flags & IEEE80211_TX_STAT_ACK) &&
  255. !is_multicast_ether_addr(hdr->addr1))
  256. txflags |= IEEE80211_RADIOTAP_F_TX_FAIL;
  257. if ((info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
  258. (info->status.rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT))
  259. txflags |= IEEE80211_RADIOTAP_F_TX_CTS;
  260. else if (info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS)
  261. txflags |= IEEE80211_RADIOTAP_F_TX_RTS;
  262. put_unaligned_le16(txflags, pos);
  263. pos += 2;
  264. /* IEEE80211_RADIOTAP_DATA_RETRIES */
  265. /* for now report the total retry_count */
  266. *pos = retry_count;
  267. pos++;
  268. /* IEEE80211_TX_RC_MCS */
  269. if (info->status.rates[0].idx >= 0 &&
  270. info->status.rates[0].flags & IEEE80211_TX_RC_MCS) {
  271. rthdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_MCS);
  272. pos[0] = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
  273. IEEE80211_RADIOTAP_MCS_HAVE_GI |
  274. IEEE80211_RADIOTAP_MCS_HAVE_BW;
  275. if (info->status.rates[0].flags & IEEE80211_TX_RC_SHORT_GI)
  276. pos[1] |= IEEE80211_RADIOTAP_MCS_SGI;
  277. if (info->status.rates[0].flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
  278. pos[1] |= IEEE80211_RADIOTAP_MCS_BW_40;
  279. if (info->status.rates[0].flags & IEEE80211_TX_RC_GREEN_FIELD)
  280. pos[1] |= IEEE80211_RADIOTAP_MCS_FMT_GF;
  281. pos[2] = info->status.rates[0].idx;
  282. pos += 3;
  283. }
  284. }
  285. /*
  286. * Use a static threshold for now, best value to be determined
  287. * by testing ...
  288. * Should it depend on:
  289. * - on # of retransmissions
  290. * - current throughput (higher value for higher tpt)?
  291. */
  292. #define STA_LOST_PKT_THRESHOLD 50
  293. void ieee80211_tx_status(struct ieee80211_hw *hw, struct sk_buff *skb)
  294. {
  295. struct sk_buff *skb2;
  296. struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
  297. struct ieee80211_local *local = hw_to_local(hw);
  298. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  299. __le16 fc;
  300. struct ieee80211_supported_band *sband;
  301. struct ieee80211_sub_if_data *sdata;
  302. struct net_device *prev_dev = NULL;
  303. struct sta_info *sta, *tmp;
  304. int retry_count = -1, i;
  305. int rates_idx = -1;
  306. bool send_to_cooked;
  307. bool acked;
  308. struct ieee80211_bar *bar;
  309. int rtap_len;
  310. for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
  311. if (info->status.rates[i].idx < 0) {
  312. break;
  313. } else if (i >= hw->max_report_rates) {
  314. /* the HW cannot have attempted that rate */
  315. info->status.rates[i].idx = -1;
  316. info->status.rates[i].count = 0;
  317. break;
  318. }
  319. retry_count += info->status.rates[i].count;
  320. }
  321. rates_idx = i - 1;
  322. if (retry_count < 0)
  323. retry_count = 0;
  324. rcu_read_lock();
  325. sband = local->hw.wiphy->bands[info->band];
  326. fc = hdr->frame_control;
  327. for_each_sta_info(local, hdr->addr1, sta, tmp) {
  328. /* skip wrong virtual interface */
  329. if (compare_ether_addr(hdr->addr2, sta->sdata->vif.addr))
  330. continue;
  331. if (info->flags & IEEE80211_TX_STATUS_EOSP)
  332. clear_sta_flag(sta, WLAN_STA_SP);
  333. acked = !!(info->flags & IEEE80211_TX_STAT_ACK);
  334. if (!acked && test_sta_flag(sta, WLAN_STA_PS_STA)) {
  335. /*
  336. * The STA is in power save mode, so assume
  337. * that this TX packet failed because of that.
  338. */
  339. ieee80211_handle_filtered_frame(local, sta, skb);
  340. rcu_read_unlock();
  341. return;
  342. }
  343. if ((local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) &&
  344. (rates_idx != -1))
  345. sta->last_tx_rate = info->status.rates[rates_idx];
  346. if ((info->flags & IEEE80211_TX_STAT_AMPDU_NO_BACK) &&
  347. (ieee80211_is_data_qos(fc))) {
  348. u16 tid, ssn;
  349. u8 *qc;
  350. qc = ieee80211_get_qos_ctl(hdr);
  351. tid = qc[0] & 0xf;
  352. ssn = ((le16_to_cpu(hdr->seq_ctrl) + 0x10)
  353. & IEEE80211_SCTL_SEQ);
  354. ieee80211_send_bar(&sta->sdata->vif, hdr->addr1,
  355. tid, ssn);
  356. }
  357. if (!acked && ieee80211_is_back_req(fc)) {
  358. u16 tid, control;
  359. /*
  360. * BAR failed, store the last SSN and retry sending
  361. * the BAR when the next unicast transmission on the
  362. * same TID succeeds.
  363. */
  364. bar = (struct ieee80211_bar *) skb->data;
  365. control = le16_to_cpu(bar->control);
  366. if (!(control & IEEE80211_BAR_CTRL_MULTI_TID)) {
  367. u16 ssn = le16_to_cpu(bar->start_seq_num);
  368. tid = (control &
  369. IEEE80211_BAR_CTRL_TID_INFO_MASK) >>
  370. IEEE80211_BAR_CTRL_TID_INFO_SHIFT;
  371. ieee80211_set_bar_pending(sta, tid, ssn);
  372. }
  373. }
  374. if (info->flags & IEEE80211_TX_STAT_TX_FILTERED) {
  375. ieee80211_handle_filtered_frame(local, sta, skb);
  376. rcu_read_unlock();
  377. return;
  378. } else {
  379. if (!acked)
  380. sta->tx_retry_failed++;
  381. sta->tx_retry_count += retry_count;
  382. }
  383. rate_control_tx_status(local, sband, sta, skb);
  384. if (ieee80211_vif_is_mesh(&sta->sdata->vif))
  385. ieee80211s_update_metric(local, sta, skb);
  386. if (!(info->flags & IEEE80211_TX_CTL_INJECTED) && acked)
  387. ieee80211_frame_acked(sta, skb);
  388. if ((sta->sdata->vif.type == NL80211_IFTYPE_STATION) &&
  389. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS))
  390. ieee80211_sta_tx_notify(sta->sdata, (void *) skb->data, acked);
  391. if (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) {
  392. if (info->flags & IEEE80211_TX_STAT_ACK) {
  393. if (sta->lost_packets)
  394. sta->lost_packets = 0;
  395. } else if (++sta->lost_packets >= STA_LOST_PKT_THRESHOLD) {
  396. cfg80211_cqm_pktloss_notify(sta->sdata->dev,
  397. sta->sta.addr,
  398. sta->lost_packets,
  399. GFP_ATOMIC);
  400. sta->lost_packets = 0;
  401. }
  402. }
  403. }
  404. rcu_read_unlock();
  405. ieee80211_led_tx(local, 0);
  406. /* SNMP counters
  407. * Fragments are passed to low-level drivers as separate skbs, so these
  408. * are actually fragments, not frames. Update frame counters only for
  409. * the first fragment of the frame. */
  410. if (info->flags & IEEE80211_TX_STAT_ACK) {
  411. if (ieee80211_is_first_frag(hdr->seq_ctrl)) {
  412. local->dot11TransmittedFrameCount++;
  413. if (is_multicast_ether_addr(hdr->addr1))
  414. local->dot11MulticastTransmittedFrameCount++;
  415. if (retry_count > 0)
  416. local->dot11RetryCount++;
  417. if (retry_count > 1)
  418. local->dot11MultipleRetryCount++;
  419. }
  420. /* This counter shall be incremented for an acknowledged MPDU
  421. * with an individual address in the address 1 field or an MPDU
  422. * with a multicast address in the address 1 field of type Data
  423. * or Management. */
  424. if (!is_multicast_ether_addr(hdr->addr1) ||
  425. ieee80211_is_data(fc) ||
  426. ieee80211_is_mgmt(fc))
  427. local->dot11TransmittedFragmentCount++;
  428. } else {
  429. if (ieee80211_is_first_frag(hdr->seq_ctrl))
  430. local->dot11FailedCount++;
  431. }
  432. if (ieee80211_is_nullfunc(fc) && ieee80211_has_pm(fc) &&
  433. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) &&
  434. !(info->flags & IEEE80211_TX_CTL_INJECTED) &&
  435. local->ps_sdata && !(local->scanning)) {
  436. if (info->flags & IEEE80211_TX_STAT_ACK) {
  437. local->ps_sdata->u.mgd.flags |=
  438. IEEE80211_STA_NULLFUNC_ACKED;
  439. } else
  440. mod_timer(&local->dynamic_ps_timer, jiffies +
  441. msecs_to_jiffies(10));
  442. }
  443. if (info->flags & IEEE80211_TX_INTFL_NL80211_FRAME_TX) {
  444. u64 cookie = (unsigned long)skb;
  445. if (ieee80211_is_nullfunc(hdr->frame_control) ||
  446. ieee80211_is_qos_nullfunc(hdr->frame_control)) {
  447. acked = info->flags & IEEE80211_TX_STAT_ACK;
  448. cfg80211_probe_status(skb->dev, hdr->addr1,
  449. cookie, acked, GFP_ATOMIC);
  450. } else {
  451. struct ieee80211_work *wk;
  452. rcu_read_lock();
  453. list_for_each_entry_rcu(wk, &local->work_list, list) {
  454. if (wk->type != IEEE80211_WORK_OFFCHANNEL_TX)
  455. continue;
  456. if (wk->offchan_tx.frame != skb)
  457. continue;
  458. wk->offchan_tx.status = true;
  459. break;
  460. }
  461. rcu_read_unlock();
  462. if (local->hw_roc_skb_for_status == skb) {
  463. cookie = local->hw_roc_cookie ^ 2;
  464. local->hw_roc_skb_for_status = NULL;
  465. }
  466. cfg80211_mgmt_tx_status(
  467. skb->dev, cookie, skb->data, skb->len,
  468. !!(info->flags & IEEE80211_TX_STAT_ACK),
  469. GFP_ATOMIC);
  470. }
  471. }
  472. if (unlikely(info->ack_frame_id)) {
  473. struct sk_buff *ack_skb;
  474. unsigned long flags;
  475. spin_lock_irqsave(&local->ack_status_lock, flags);
  476. ack_skb = idr_find(&local->ack_status_frames,
  477. info->ack_frame_id);
  478. if (ack_skb)
  479. idr_remove(&local->ack_status_frames,
  480. info->ack_frame_id);
  481. spin_unlock_irqrestore(&local->ack_status_lock, flags);
  482. /* consumes ack_skb */
  483. if (ack_skb)
  484. skb_complete_wifi_ack(ack_skb,
  485. info->flags & IEEE80211_TX_STAT_ACK);
  486. }
  487. /* this was a transmitted frame, but now we want to reuse it */
  488. skb_orphan(skb);
  489. /* Need to make a copy before skb->cb gets cleared */
  490. send_to_cooked = !!(info->flags & IEEE80211_TX_CTL_INJECTED) ||
  491. !(ieee80211_is_data(fc));
  492. /*
  493. * This is a bit racy but we can avoid a lot of work
  494. * with this test...
  495. */
  496. if (!local->monitors && (!send_to_cooked || !local->cooked_mntrs)) {
  497. dev_kfree_skb(skb);
  498. return;
  499. }
  500. /* send frame to monitor interfaces now */
  501. rtap_len = ieee80211_tx_radiotap_len(info);
  502. if (WARN_ON_ONCE(skb_headroom(skb) < rtap_len)) {
  503. printk(KERN_ERR "ieee80211_tx_status: headroom too small\n");
  504. dev_kfree_skb(skb);
  505. return;
  506. }
  507. ieee80211_add_tx_radiotap_header(sband, skb, retry_count, rtap_len);
  508. /* XXX: is this sufficient for BPF? */
  509. skb_set_mac_header(skb, 0);
  510. skb->ip_summed = CHECKSUM_UNNECESSARY;
  511. skb->pkt_type = PACKET_OTHERHOST;
  512. skb->protocol = htons(ETH_P_802_2);
  513. memset(skb->cb, 0, sizeof(skb->cb));
  514. rcu_read_lock();
  515. list_for_each_entry_rcu(sdata, &local->interfaces, list) {
  516. if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
  517. if (!ieee80211_sdata_running(sdata))
  518. continue;
  519. if ((sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) &&
  520. !send_to_cooked)
  521. continue;
  522. if (prev_dev) {
  523. skb2 = skb_clone(skb, GFP_ATOMIC);
  524. if (skb2) {
  525. skb2->dev = prev_dev;
  526. netif_rx(skb2);
  527. }
  528. }
  529. prev_dev = sdata->dev;
  530. }
  531. }
  532. if (prev_dev) {
  533. skb->dev = prev_dev;
  534. netif_rx(skb);
  535. skb = NULL;
  536. }
  537. rcu_read_unlock();
  538. dev_kfree_skb(skb);
  539. }
  540. EXPORT_SYMBOL(ieee80211_tx_status);
  541. void ieee80211_report_low_ack(struct ieee80211_sta *pubsta, u32 num_packets)
  542. {
  543. struct sta_info *sta = container_of(pubsta, struct sta_info, sta);
  544. cfg80211_cqm_pktloss_notify(sta->sdata->dev, sta->sta.addr,
  545. num_packets, GFP_ATOMIC);
  546. }
  547. EXPORT_SYMBOL(ieee80211_report_low_ack);
  548. void ieee80211_free_txskb(struct ieee80211_hw *hw, struct sk_buff *skb)
  549. {
  550. struct ieee80211_local *local = hw_to_local(hw);
  551. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  552. if (unlikely(info->ack_frame_id)) {
  553. struct sk_buff *ack_skb;
  554. unsigned long flags;
  555. spin_lock_irqsave(&local->ack_status_lock, flags);
  556. ack_skb = idr_find(&local->ack_status_frames,
  557. info->ack_frame_id);
  558. if (ack_skb)
  559. idr_remove(&local->ack_status_frames,
  560. info->ack_frame_id);
  561. spin_unlock_irqrestore(&local->ack_status_lock, flags);
  562. /* consumes ack_skb */
  563. if (ack_skb)
  564. dev_kfree_skb_any(ack_skb);
  565. }
  566. dev_kfree_skb_any(skb);
  567. }
  568. EXPORT_SYMBOL(ieee80211_free_txskb);