status.c 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456
  1. /*
  2. * Copyright 2002-2005, Instant802 Networks, Inc.
  3. * Copyright 2005-2006, Devicescape Software, Inc.
  4. * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
  5. * Copyright 2008-2010 Johannes Berg <johannes@sipsolutions.net>
  6. *
  7. * This program is free software; you can redistribute it and/or modify
  8. * it under the terms of the GNU General Public License version 2 as
  9. * published by the Free Software Foundation.
  10. */
  11. #include <net/mac80211.h>
  12. #include "ieee80211_i.h"
  13. #include "rate.h"
  14. #include "mesh.h"
  15. #include "led.h"
  16. void ieee80211_tx_status_irqsafe(struct ieee80211_hw *hw,
  17. struct sk_buff *skb)
  18. {
  19. struct ieee80211_local *local = hw_to_local(hw);
  20. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  21. int tmp;
  22. skb->pkt_type = IEEE80211_TX_STATUS_MSG;
  23. skb_queue_tail(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS ?
  24. &local->skb_queue : &local->skb_queue_unreliable, skb);
  25. tmp = skb_queue_len(&local->skb_queue) +
  26. skb_queue_len(&local->skb_queue_unreliable);
  27. while (tmp > IEEE80211_IRQSAFE_QUEUE_LIMIT &&
  28. (skb = skb_dequeue(&local->skb_queue_unreliable))) {
  29. dev_kfree_skb_irq(skb);
  30. tmp--;
  31. I802_DEBUG_INC(local->tx_status_drop);
  32. }
  33. tasklet_schedule(&local->tasklet);
  34. }
  35. EXPORT_SYMBOL(ieee80211_tx_status_irqsafe);
  36. static void ieee80211_handle_filtered_frame(struct ieee80211_local *local,
  37. struct sta_info *sta,
  38. struct sk_buff *skb)
  39. {
  40. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  41. /*
  42. * This skb 'survived' a round-trip through the driver, and
  43. * hopefully the driver didn't mangle it too badly. However,
  44. * we can definitely not rely on the control information
  45. * being correct. Clear it so we don't get junk there, and
  46. * indicate that it needs new processing, but must not be
  47. * modified/encrypted again.
  48. */
  49. memset(&info->control, 0, sizeof(info->control));
  50. info->control.jiffies = jiffies;
  51. info->control.vif = &sta->sdata->vif;
  52. info->flags |= IEEE80211_TX_INTFL_NEED_TXPROCESSING |
  53. IEEE80211_TX_INTFL_RETRANSMISSION;
  54. info->flags &= ~IEEE80211_TX_TEMPORARY_FLAGS;
  55. sta->tx_filtered_count++;
  56. /*
  57. * Clear the TX filter mask for this STA when sending the next
  58. * packet. If the STA went to power save mode, this will happen
  59. * when it wakes up for the next time.
  60. */
  61. set_sta_flags(sta, WLAN_STA_CLEAR_PS_FILT);
  62. /*
  63. * This code races in the following way:
  64. *
  65. * (1) STA sends frame indicating it will go to sleep and does so
  66. * (2) hardware/firmware adds STA to filter list, passes frame up
  67. * (3) hardware/firmware processes TX fifo and suppresses a frame
  68. * (4) we get TX status before having processed the frame and
  69. * knowing that the STA has gone to sleep.
  70. *
  71. * This is actually quite unlikely even when both those events are
  72. * processed from interrupts coming in quickly after one another or
  73. * even at the same time because we queue both TX status events and
  74. * RX frames to be processed by a tasklet and process them in the
  75. * same order that they were received or TX status last. Hence, there
  76. * is no race as long as the frame RX is processed before the next TX
  77. * status, which drivers can ensure, see below.
  78. *
  79. * Note that this can only happen if the hardware or firmware can
  80. * actually add STAs to the filter list, if this is done by the
  81. * driver in response to set_tim() (which will only reduce the race
  82. * this whole filtering tries to solve, not completely solve it)
  83. * this situation cannot happen.
  84. *
  85. * To completely solve this race drivers need to make sure that they
  86. * (a) don't mix the irq-safe/not irq-safe TX status/RX processing
  87. * functions and
  88. * (b) always process RX events before TX status events if ordering
  89. * can be unknown, for example with different interrupt status
  90. * bits.
  91. * (c) if PS mode transitions are manual (i.e. the flag
  92. * %IEEE80211_HW_AP_LINK_PS is set), always process PS state
  93. * changes before calling TX status events if ordering can be
  94. * unknown.
  95. */
  96. if (test_sta_flags(sta, WLAN_STA_PS_STA) &&
  97. skb_queue_len(&sta->tx_filtered) < STA_MAX_TX_BUFFER) {
  98. skb_queue_tail(&sta->tx_filtered, skb);
  99. return;
  100. }
  101. if (!test_sta_flags(sta, WLAN_STA_PS_STA) &&
  102. !(info->flags & IEEE80211_TX_INTFL_RETRIED)) {
  103. /* Software retry the packet once */
  104. info->flags |= IEEE80211_TX_INTFL_RETRIED;
  105. ieee80211_add_pending_skb(local, skb);
  106. return;
  107. }
  108. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  109. if (net_ratelimit())
  110. wiphy_debug(local->hw.wiphy,
  111. "dropped TX filtered frame, queue_len=%d PS=%d @%lu\n",
  112. skb_queue_len(&sta->tx_filtered),
  113. !!test_sta_flags(sta, WLAN_STA_PS_STA), jiffies);
  114. #endif
  115. dev_kfree_skb(skb);
  116. }
  117. static void ieee80211_frame_acked(struct sta_info *sta, struct sk_buff *skb)
  118. {
  119. struct ieee80211_mgmt *mgmt = (void *) skb->data;
  120. struct ieee80211_local *local = sta->local;
  121. struct ieee80211_sub_if_data *sdata = sta->sdata;
  122. if (ieee80211_is_action(mgmt->frame_control) &&
  123. sdata->vif.type == NL80211_IFTYPE_STATION &&
  124. mgmt->u.action.category == WLAN_CATEGORY_HT &&
  125. mgmt->u.action.u.ht_smps.action == WLAN_HT_ACTION_SMPS) {
  126. /*
  127. * This update looks racy, but isn't -- if we come
  128. * here we've definitely got a station that we're
  129. * talking to, and on a managed interface that can
  130. * only be the AP. And the only other place updating
  131. * this variable is before we're associated.
  132. */
  133. switch (mgmt->u.action.u.ht_smps.smps_control) {
  134. case WLAN_HT_SMPS_CONTROL_DYNAMIC:
  135. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_DYNAMIC;
  136. break;
  137. case WLAN_HT_SMPS_CONTROL_STATIC:
  138. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_STATIC;
  139. break;
  140. case WLAN_HT_SMPS_CONTROL_DISABLED:
  141. default: /* shouldn't happen since we don't send that */
  142. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_OFF;
  143. break;
  144. }
  145. ieee80211_queue_work(&local->hw, &local->recalc_smps);
  146. }
  147. }
  148. /*
  149. * Use a static threshold for now, best value to be determined
  150. * by testing ...
  151. * Should it depend on:
  152. * - on # of retransmissions
  153. * - current throughput (higher value for higher tpt)?
  154. */
  155. #define STA_LOST_PKT_THRESHOLD 50
  156. void ieee80211_tx_status(struct ieee80211_hw *hw, struct sk_buff *skb)
  157. {
  158. struct sk_buff *skb2;
  159. struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
  160. struct ieee80211_local *local = hw_to_local(hw);
  161. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  162. u16 frag, type;
  163. __le16 fc;
  164. struct ieee80211_supported_band *sband;
  165. struct ieee80211_tx_status_rtap_hdr *rthdr;
  166. struct ieee80211_sub_if_data *sdata;
  167. struct net_device *prev_dev = NULL;
  168. struct sta_info *sta, *tmp;
  169. int retry_count = -1, i;
  170. int rates_idx = -1;
  171. bool send_to_cooked;
  172. bool acked;
  173. for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
  174. if (info->status.rates[i].idx < 0) {
  175. break;
  176. } else if (i >= hw->max_report_rates) {
  177. /* the HW cannot have attempted that rate */
  178. info->status.rates[i].idx = -1;
  179. info->status.rates[i].count = 0;
  180. break;
  181. }
  182. retry_count += info->status.rates[i].count;
  183. }
  184. rates_idx = i - 1;
  185. if (retry_count < 0)
  186. retry_count = 0;
  187. rcu_read_lock();
  188. sband = local->hw.wiphy->bands[info->band];
  189. fc = hdr->frame_control;
  190. for_each_sta_info(local, hdr->addr1, sta, tmp) {
  191. /* skip wrong virtual interface */
  192. if (memcmp(hdr->addr2, sta->sdata->vif.addr, ETH_ALEN))
  193. continue;
  194. acked = !!(info->flags & IEEE80211_TX_STAT_ACK);
  195. if (!acked && test_sta_flags(sta, WLAN_STA_PS_STA)) {
  196. /*
  197. * The STA is in power save mode, so assume
  198. * that this TX packet failed because of that.
  199. */
  200. ieee80211_handle_filtered_frame(local, sta, skb);
  201. rcu_read_unlock();
  202. return;
  203. }
  204. if ((local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) &&
  205. (rates_idx != -1))
  206. sta->last_tx_rate = info->status.rates[rates_idx];
  207. if ((info->flags & IEEE80211_TX_STAT_AMPDU_NO_BACK) &&
  208. (ieee80211_is_data_qos(fc))) {
  209. u16 tid, ssn;
  210. u8 *qc;
  211. qc = ieee80211_get_qos_ctl(hdr);
  212. tid = qc[0] & 0xf;
  213. ssn = ((le16_to_cpu(hdr->seq_ctrl) + 0x10)
  214. & IEEE80211_SCTL_SEQ);
  215. ieee80211_send_bar(sta->sdata, hdr->addr1,
  216. tid, ssn);
  217. }
  218. if (info->flags & IEEE80211_TX_STAT_TX_FILTERED) {
  219. ieee80211_handle_filtered_frame(local, sta, skb);
  220. rcu_read_unlock();
  221. return;
  222. } else {
  223. if (!acked)
  224. sta->tx_retry_failed++;
  225. sta->tx_retry_count += retry_count;
  226. }
  227. rate_control_tx_status(local, sband, sta, skb);
  228. if (ieee80211_vif_is_mesh(&sta->sdata->vif))
  229. ieee80211s_update_metric(local, sta, skb);
  230. if (!(info->flags & IEEE80211_TX_CTL_INJECTED) && acked)
  231. ieee80211_frame_acked(sta, skb);
  232. if ((sta->sdata->vif.type == NL80211_IFTYPE_STATION) &&
  233. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS))
  234. ieee80211_sta_tx_notify(sta->sdata, (void *) skb->data, acked);
  235. if (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) {
  236. if (info->flags & IEEE80211_TX_STAT_ACK) {
  237. if (sta->lost_packets)
  238. sta->lost_packets = 0;
  239. } else if (++sta->lost_packets >= STA_LOST_PKT_THRESHOLD) {
  240. cfg80211_cqm_pktloss_notify(sta->sdata->dev,
  241. sta->sta.addr,
  242. sta->lost_packets,
  243. GFP_ATOMIC);
  244. sta->lost_packets = 0;
  245. }
  246. }
  247. }
  248. rcu_read_unlock();
  249. ieee80211_led_tx(local, 0);
  250. /* SNMP counters
  251. * Fragments are passed to low-level drivers as separate skbs, so these
  252. * are actually fragments, not frames. Update frame counters only for
  253. * the first fragment of the frame. */
  254. frag = le16_to_cpu(hdr->seq_ctrl) & IEEE80211_SCTL_FRAG;
  255. type = le16_to_cpu(hdr->frame_control) & IEEE80211_FCTL_FTYPE;
  256. if (info->flags & IEEE80211_TX_STAT_ACK) {
  257. if (frag == 0) {
  258. local->dot11TransmittedFrameCount++;
  259. if (is_multicast_ether_addr(hdr->addr1))
  260. local->dot11MulticastTransmittedFrameCount++;
  261. if (retry_count > 0)
  262. local->dot11RetryCount++;
  263. if (retry_count > 1)
  264. local->dot11MultipleRetryCount++;
  265. }
  266. /* This counter shall be incremented for an acknowledged MPDU
  267. * with an individual address in the address 1 field or an MPDU
  268. * with a multicast address in the address 1 field of type Data
  269. * or Management. */
  270. if (!is_multicast_ether_addr(hdr->addr1) ||
  271. type == IEEE80211_FTYPE_DATA ||
  272. type == IEEE80211_FTYPE_MGMT)
  273. local->dot11TransmittedFragmentCount++;
  274. } else {
  275. if (frag == 0)
  276. local->dot11FailedCount++;
  277. }
  278. if (ieee80211_is_nullfunc(fc) && ieee80211_has_pm(fc) &&
  279. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) &&
  280. !(info->flags & IEEE80211_TX_CTL_INJECTED) &&
  281. local->ps_sdata && !(local->scanning)) {
  282. if (info->flags & IEEE80211_TX_STAT_ACK) {
  283. local->ps_sdata->u.mgd.flags |=
  284. IEEE80211_STA_NULLFUNC_ACKED;
  285. } else
  286. mod_timer(&local->dynamic_ps_timer, jiffies +
  287. msecs_to_jiffies(10));
  288. }
  289. if (info->flags & IEEE80211_TX_INTFL_NL80211_FRAME_TX) {
  290. struct ieee80211_work *wk;
  291. u64 cookie = (unsigned long)skb;
  292. rcu_read_lock();
  293. list_for_each_entry_rcu(wk, &local->work_list, list) {
  294. if (wk->type != IEEE80211_WORK_OFFCHANNEL_TX)
  295. continue;
  296. if (wk->offchan_tx.frame != skb)
  297. continue;
  298. wk->offchan_tx.frame = NULL;
  299. break;
  300. }
  301. rcu_read_unlock();
  302. if (local->hw_roc_skb_for_status == skb) {
  303. cookie = local->hw_roc_cookie ^ 2;
  304. local->hw_roc_skb_for_status = NULL;
  305. }
  306. if (cookie == local->hw_offchan_tx_cookie)
  307. local->hw_offchan_tx_cookie = 0;
  308. cfg80211_mgmt_tx_status(
  309. skb->dev, cookie, skb->data, skb->len,
  310. !!(info->flags & IEEE80211_TX_STAT_ACK), GFP_ATOMIC);
  311. }
  312. /* this was a transmitted frame, but now we want to reuse it */
  313. skb_orphan(skb);
  314. /* Need to make a copy before skb->cb gets cleared */
  315. send_to_cooked = !!(info->flags & IEEE80211_TX_CTL_INJECTED) ||
  316. (type != IEEE80211_FTYPE_DATA);
  317. /*
  318. * This is a bit racy but we can avoid a lot of work
  319. * with this test...
  320. */
  321. if (!local->monitors && (!send_to_cooked || !local->cooked_mntrs)) {
  322. dev_kfree_skb(skb);
  323. return;
  324. }
  325. /* send frame to monitor interfaces now */
  326. if (skb_headroom(skb) < sizeof(*rthdr)) {
  327. printk(KERN_ERR "ieee80211_tx_status: headroom too small\n");
  328. dev_kfree_skb(skb);
  329. return;
  330. }
  331. rthdr = (struct ieee80211_tx_status_rtap_hdr *)
  332. skb_push(skb, sizeof(*rthdr));
  333. memset(rthdr, 0, sizeof(*rthdr));
  334. rthdr->hdr.it_len = cpu_to_le16(sizeof(*rthdr));
  335. rthdr->hdr.it_present =
  336. cpu_to_le32((1 << IEEE80211_RADIOTAP_TX_FLAGS) |
  337. (1 << IEEE80211_RADIOTAP_DATA_RETRIES) |
  338. (1 << IEEE80211_RADIOTAP_RATE));
  339. if (!(info->flags & IEEE80211_TX_STAT_ACK) &&
  340. !is_multicast_ether_addr(hdr->addr1))
  341. rthdr->tx_flags |= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_FAIL);
  342. /*
  343. * XXX: Once radiotap gets the bitmap reset thing the vendor
  344. * extensions proposal contains, we can actually report
  345. * the whole set of tries we did.
  346. */
  347. if ((info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
  348. (info->status.rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT))
  349. rthdr->tx_flags |= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_CTS);
  350. else if (info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS)
  351. rthdr->tx_flags |= cpu_to_le16(IEEE80211_RADIOTAP_F_TX_RTS);
  352. if (info->status.rates[0].idx >= 0 &&
  353. !(info->status.rates[0].flags & IEEE80211_TX_RC_MCS))
  354. rthdr->rate = sband->bitrates[
  355. info->status.rates[0].idx].bitrate / 5;
  356. /* for now report the total retry_count */
  357. rthdr->data_retries = retry_count;
  358. /* XXX: is this sufficient for BPF? */
  359. skb_set_mac_header(skb, 0);
  360. skb->ip_summed = CHECKSUM_UNNECESSARY;
  361. skb->pkt_type = PACKET_OTHERHOST;
  362. skb->protocol = htons(ETH_P_802_2);
  363. memset(skb->cb, 0, sizeof(skb->cb));
  364. rcu_read_lock();
  365. list_for_each_entry_rcu(sdata, &local->interfaces, list) {
  366. if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
  367. if (!ieee80211_sdata_running(sdata))
  368. continue;
  369. if ((sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) &&
  370. !send_to_cooked)
  371. continue;
  372. if (prev_dev) {
  373. skb2 = skb_clone(skb, GFP_ATOMIC);
  374. if (skb2) {
  375. skb2->dev = prev_dev;
  376. netif_rx(skb2);
  377. }
  378. }
  379. prev_dev = sdata->dev;
  380. }
  381. }
  382. if (prev_dev) {
  383. skb->dev = prev_dev;
  384. netif_rx(skb);
  385. skb = NULL;
  386. }
  387. rcu_read_unlock();
  388. dev_kfree_skb(skb);
  389. }
  390. EXPORT_SYMBOL(ieee80211_tx_status);
  391. void ieee80211_report_low_ack(struct ieee80211_sta *pubsta, u32 num_packets)
  392. {
  393. struct sta_info *sta = container_of(pubsta, struct sta_info, sta);
  394. cfg80211_cqm_pktloss_notify(sta->sdata->dev, sta->sta.addr,
  395. num_packets, GFP_ATOMIC);
  396. }
  397. EXPORT_SYMBOL(ieee80211_report_low_ack);