status.c 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679
  1. /*
  2. * Copyright 2002-2005, Instant802 Networks, Inc.
  3. * Copyright 2005-2006, Devicescape Software, Inc.
  4. * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
  5. * Copyright 2008-2010 Johannes Berg <johannes@sipsolutions.net>
  6. *
  7. * This program is free software; you can redistribute it and/or modify
  8. * it under the terms of the GNU General Public License version 2 as
  9. * published by the Free Software Foundation.
  10. */
  11. #include <linux/export.h>
  12. #include <linux/etherdevice.h>
  13. #include <net/mac80211.h>
  14. #include <asm/unaligned.h>
  15. #include "ieee80211_i.h"
  16. #include "rate.h"
  17. #include "mesh.h"
  18. #include "led.h"
  19. #include "wme.h"
  20. void ieee80211_tx_status_irqsafe(struct ieee80211_hw *hw,
  21. struct sk_buff *skb)
  22. {
  23. struct ieee80211_local *local = hw_to_local(hw);
  24. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  25. int tmp;
  26. skb->pkt_type = IEEE80211_TX_STATUS_MSG;
  27. skb_queue_tail(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS ?
  28. &local->skb_queue : &local->skb_queue_unreliable, skb);
  29. tmp = skb_queue_len(&local->skb_queue) +
  30. skb_queue_len(&local->skb_queue_unreliable);
  31. while (tmp > IEEE80211_IRQSAFE_QUEUE_LIMIT &&
  32. (skb = skb_dequeue(&local->skb_queue_unreliable))) {
  33. dev_kfree_skb_irq(skb);
  34. tmp--;
  35. I802_DEBUG_INC(local->tx_status_drop);
  36. }
  37. tasklet_schedule(&local->tasklet);
  38. }
  39. EXPORT_SYMBOL(ieee80211_tx_status_irqsafe);
  40. static void ieee80211_handle_filtered_frame(struct ieee80211_local *local,
  41. struct sta_info *sta,
  42. struct sk_buff *skb)
  43. {
  44. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  45. struct ieee80211_hdr *hdr = (void *)skb->data;
  46. int ac;
  47. /*
  48. * This skb 'survived' a round-trip through the driver, and
  49. * hopefully the driver didn't mangle it too badly. However,
  50. * we can definitely not rely on the control information
  51. * being correct. Clear it so we don't get junk there, and
  52. * indicate that it needs new processing, but must not be
  53. * modified/encrypted again.
  54. */
  55. memset(&info->control, 0, sizeof(info->control));
  56. info->control.jiffies = jiffies;
  57. info->control.vif = &sta->sdata->vif;
  58. info->flags |= IEEE80211_TX_INTFL_NEED_TXPROCESSING |
  59. IEEE80211_TX_INTFL_RETRANSMISSION;
  60. info->flags &= ~IEEE80211_TX_TEMPORARY_FLAGS;
  61. sta->tx_filtered_count++;
  62. /*
  63. * Clear more-data bit on filtered frames, it might be set
  64. * but later frames might time out so it might have to be
  65. * clear again ... It's all rather unlikely (this frame
  66. * should time out first, right?) but let's not confuse
  67. * peers unnecessarily.
  68. */
  69. if (hdr->frame_control & cpu_to_le16(IEEE80211_FCTL_MOREDATA))
  70. hdr->frame_control &= ~cpu_to_le16(IEEE80211_FCTL_MOREDATA);
  71. if (ieee80211_is_data_qos(hdr->frame_control)) {
  72. u8 *p = ieee80211_get_qos_ctl(hdr);
  73. int tid = *p & IEEE80211_QOS_CTL_TID_MASK;
  74. /*
  75. * Clear EOSP if set, this could happen e.g.
  76. * if an absence period (us being a P2P GO)
  77. * shortens the SP.
  78. */
  79. if (*p & IEEE80211_QOS_CTL_EOSP)
  80. *p &= ~IEEE80211_QOS_CTL_EOSP;
  81. ac = ieee802_1d_to_ac[tid & 7];
  82. } else {
  83. ac = IEEE80211_AC_BE;
  84. }
  85. /*
  86. * Clear the TX filter mask for this STA when sending the next
  87. * packet. If the STA went to power save mode, this will happen
  88. * when it wakes up for the next time.
  89. */
  90. set_sta_flag(sta, WLAN_STA_CLEAR_PS_FILT);
  91. /*
  92. * This code races in the following way:
  93. *
  94. * (1) STA sends frame indicating it will go to sleep and does so
  95. * (2) hardware/firmware adds STA to filter list, passes frame up
  96. * (3) hardware/firmware processes TX fifo and suppresses a frame
  97. * (4) we get TX status before having processed the frame and
  98. * knowing that the STA has gone to sleep.
  99. *
  100. * This is actually quite unlikely even when both those events are
  101. * processed from interrupts coming in quickly after one another or
  102. * even at the same time because we queue both TX status events and
  103. * RX frames to be processed by a tasklet and process them in the
  104. * same order that they were received or TX status last. Hence, there
  105. * is no race as long as the frame RX is processed before the next TX
  106. * status, which drivers can ensure, see below.
  107. *
  108. * Note that this can only happen if the hardware or firmware can
  109. * actually add STAs to the filter list, if this is done by the
  110. * driver in response to set_tim() (which will only reduce the race
  111. * this whole filtering tries to solve, not completely solve it)
  112. * this situation cannot happen.
  113. *
  114. * To completely solve this race drivers need to make sure that they
  115. * (a) don't mix the irq-safe/not irq-safe TX status/RX processing
  116. * functions and
  117. * (b) always process RX events before TX status events if ordering
  118. * can be unknown, for example with different interrupt status
  119. * bits.
  120. * (c) if PS mode transitions are manual (i.e. the flag
  121. * %IEEE80211_HW_AP_LINK_PS is set), always process PS state
  122. * changes before calling TX status events if ordering can be
  123. * unknown.
  124. */
  125. if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
  126. skb_queue_len(&sta->tx_filtered[ac]) < STA_MAX_TX_BUFFER) {
  127. skb_queue_tail(&sta->tx_filtered[ac], skb);
  128. sta_info_recalc_tim(sta);
  129. if (!timer_pending(&local->sta_cleanup))
  130. mod_timer(&local->sta_cleanup,
  131. round_jiffies(jiffies +
  132. STA_INFO_CLEANUP_INTERVAL));
  133. return;
  134. }
  135. if (!test_sta_flag(sta, WLAN_STA_PS_STA) &&
  136. !(info->flags & IEEE80211_TX_INTFL_RETRIED)) {
  137. /* Software retry the packet once */
  138. info->flags |= IEEE80211_TX_INTFL_RETRIED;
  139. ieee80211_add_pending_skb(local, skb);
  140. return;
  141. }
  142. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  143. if (net_ratelimit())
  144. wiphy_debug(local->hw.wiphy,
  145. "dropped TX filtered frame, queue_len=%d PS=%d @%lu\n",
  146. skb_queue_len(&sta->tx_filtered[ac]),
  147. !!test_sta_flag(sta, WLAN_STA_PS_STA), jiffies);
  148. #endif
  149. dev_kfree_skb(skb);
  150. }
  151. static void ieee80211_check_pending_bar(struct sta_info *sta, u8 *addr, u8 tid)
  152. {
  153. struct tid_ampdu_tx *tid_tx;
  154. tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);
  155. if (!tid_tx || !tid_tx->bar_pending)
  156. return;
  157. tid_tx->bar_pending = false;
  158. ieee80211_send_bar(&sta->sdata->vif, addr, tid, tid_tx->failed_bar_ssn);
  159. }
  160. static void ieee80211_frame_acked(struct sta_info *sta, struct sk_buff *skb)
  161. {
  162. struct ieee80211_mgmt *mgmt = (void *) skb->data;
  163. struct ieee80211_local *local = sta->local;
  164. struct ieee80211_sub_if_data *sdata = sta->sdata;
  165. if (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS)
  166. sta->last_rx = jiffies;
  167. if (ieee80211_is_data_qos(mgmt->frame_control)) {
  168. struct ieee80211_hdr *hdr = (void *) skb->data;
  169. u8 *qc = ieee80211_get_qos_ctl(hdr);
  170. u16 tid = qc[0] & 0xf;
  171. ieee80211_check_pending_bar(sta, hdr->addr1, tid);
  172. }
  173. if (ieee80211_is_action(mgmt->frame_control) &&
  174. sdata->vif.type == NL80211_IFTYPE_STATION &&
  175. mgmt->u.action.category == WLAN_CATEGORY_HT &&
  176. mgmt->u.action.u.ht_smps.action == WLAN_HT_ACTION_SMPS) {
  177. /*
  178. * This update looks racy, but isn't -- if we come
  179. * here we've definitely got a station that we're
  180. * talking to, and on a managed interface that can
  181. * only be the AP. And the only other place updating
  182. * this variable is before we're associated.
  183. */
  184. switch (mgmt->u.action.u.ht_smps.smps_control) {
  185. case WLAN_HT_SMPS_CONTROL_DYNAMIC:
  186. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_DYNAMIC;
  187. break;
  188. case WLAN_HT_SMPS_CONTROL_STATIC:
  189. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_STATIC;
  190. break;
  191. case WLAN_HT_SMPS_CONTROL_DISABLED:
  192. default: /* shouldn't happen since we don't send that */
  193. sta->sdata->u.mgd.ap_smps = IEEE80211_SMPS_OFF;
  194. break;
  195. }
  196. ieee80211_queue_work(&local->hw, &local->recalc_smps);
  197. }
  198. }
  199. static void ieee80211_set_bar_pending(struct sta_info *sta, u8 tid, u16 ssn)
  200. {
  201. struct tid_ampdu_tx *tid_tx;
  202. tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);
  203. if (!tid_tx)
  204. return;
  205. tid_tx->failed_bar_ssn = ssn;
  206. tid_tx->bar_pending = true;
  207. }
  208. static int ieee80211_tx_radiotap_len(struct ieee80211_tx_info *info)
  209. {
  210. int len = sizeof(struct ieee80211_radiotap_header);
  211. /* IEEE80211_RADIOTAP_RATE rate */
  212. if (info->status.rates[0].idx >= 0 &&
  213. !(info->status.rates[0].flags & IEEE80211_TX_RC_MCS))
  214. len += 2;
  215. /* IEEE80211_RADIOTAP_TX_FLAGS */
  216. len += 2;
  217. /* IEEE80211_RADIOTAP_DATA_RETRIES */
  218. len += 1;
  219. /* IEEE80211_TX_RC_MCS */
  220. if (info->status.rates[0].idx >= 0 &&
  221. info->status.rates[0].flags & IEEE80211_TX_RC_MCS)
  222. len += 3;
  223. return len;
  224. }
  225. static void ieee80211_add_tx_radiotap_header(struct ieee80211_supported_band
  226. *sband, struct sk_buff *skb,
  227. int retry_count, int rtap_len)
  228. {
  229. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  230. struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
  231. struct ieee80211_radiotap_header *rthdr;
  232. unsigned char *pos;
  233. u16 txflags;
  234. rthdr = (struct ieee80211_radiotap_header *) skb_push(skb, rtap_len);
  235. memset(rthdr, 0, rtap_len);
  236. rthdr->it_len = cpu_to_le16(rtap_len);
  237. rthdr->it_present =
  238. cpu_to_le32((1 << IEEE80211_RADIOTAP_TX_FLAGS) |
  239. (1 << IEEE80211_RADIOTAP_DATA_RETRIES));
  240. pos = (unsigned char *)(rthdr + 1);
  241. /*
  242. * XXX: Once radiotap gets the bitmap reset thing the vendor
  243. * extensions proposal contains, we can actually report
  244. * the whole set of tries we did.
  245. */
  246. /* IEEE80211_RADIOTAP_RATE */
  247. if (info->status.rates[0].idx >= 0 &&
  248. !(info->status.rates[0].flags & IEEE80211_TX_RC_MCS)) {
  249. rthdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_RATE);
  250. *pos = sband->bitrates[info->status.rates[0].idx].bitrate / 5;
  251. /* padding for tx flags */
  252. pos += 2;
  253. }
  254. /* IEEE80211_RADIOTAP_TX_FLAGS */
  255. txflags = 0;
  256. if (!(info->flags & IEEE80211_TX_STAT_ACK) &&
  257. !is_multicast_ether_addr(hdr->addr1))
  258. txflags |= IEEE80211_RADIOTAP_F_TX_FAIL;
  259. if ((info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
  260. (info->status.rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT))
  261. txflags |= IEEE80211_RADIOTAP_F_TX_CTS;
  262. else if (info->status.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS)
  263. txflags |= IEEE80211_RADIOTAP_F_TX_RTS;
  264. put_unaligned_le16(txflags, pos);
  265. pos += 2;
  266. /* IEEE80211_RADIOTAP_DATA_RETRIES */
  267. /* for now report the total retry_count */
  268. *pos = retry_count;
  269. pos++;
  270. /* IEEE80211_TX_RC_MCS */
  271. if (info->status.rates[0].idx >= 0 &&
  272. info->status.rates[0].flags & IEEE80211_TX_RC_MCS) {
  273. rthdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_MCS);
  274. pos[0] = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
  275. IEEE80211_RADIOTAP_MCS_HAVE_GI |
  276. IEEE80211_RADIOTAP_MCS_HAVE_BW;
  277. if (info->status.rates[0].flags & IEEE80211_TX_RC_SHORT_GI)
  278. pos[1] |= IEEE80211_RADIOTAP_MCS_SGI;
  279. if (info->status.rates[0].flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
  280. pos[1] |= IEEE80211_RADIOTAP_MCS_BW_40;
  281. if (info->status.rates[0].flags & IEEE80211_TX_RC_GREEN_FIELD)
  282. pos[1] |= IEEE80211_RADIOTAP_MCS_FMT_GF;
  283. pos[2] = info->status.rates[0].idx;
  284. pos += 3;
  285. }
  286. }
  287. /*
  288. * Use a static threshold for now, best value to be determined
  289. * by testing ...
  290. * Should it depend on:
  291. * - on # of retransmissions
  292. * - current throughput (higher value for higher tpt)?
  293. */
  294. #define STA_LOST_PKT_THRESHOLD 50
  295. void ieee80211_tx_status(struct ieee80211_hw *hw, struct sk_buff *skb)
  296. {
  297. struct sk_buff *skb2;
  298. struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
  299. struct ieee80211_local *local = hw_to_local(hw);
  300. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  301. __le16 fc;
  302. struct ieee80211_supported_band *sband;
  303. struct ieee80211_sub_if_data *sdata;
  304. struct net_device *prev_dev = NULL;
  305. struct sta_info *sta, *tmp;
  306. int retry_count = -1, i;
  307. int rates_idx = -1;
  308. bool send_to_cooked;
  309. bool acked;
  310. struct ieee80211_bar *bar;
  311. int rtap_len;
  312. for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
  313. if (info->status.rates[i].idx < 0) {
  314. break;
  315. } else if (i >= hw->max_report_rates) {
  316. /* the HW cannot have attempted that rate */
  317. info->status.rates[i].idx = -1;
  318. info->status.rates[i].count = 0;
  319. break;
  320. }
  321. retry_count += info->status.rates[i].count;
  322. }
  323. rates_idx = i - 1;
  324. if (retry_count < 0)
  325. retry_count = 0;
  326. rcu_read_lock();
  327. sband = local->hw.wiphy->bands[info->band];
  328. fc = hdr->frame_control;
  329. for_each_sta_info(local, hdr->addr1, sta, tmp) {
  330. /* skip wrong virtual interface */
  331. if (compare_ether_addr(hdr->addr2, sta->sdata->vif.addr))
  332. continue;
  333. if (info->flags & IEEE80211_TX_STATUS_EOSP)
  334. clear_sta_flag(sta, WLAN_STA_SP);
  335. acked = !!(info->flags & IEEE80211_TX_STAT_ACK);
  336. if (!acked && test_sta_flag(sta, WLAN_STA_PS_STA)) {
  337. /*
  338. * The STA is in power save mode, so assume
  339. * that this TX packet failed because of that.
  340. */
  341. ieee80211_handle_filtered_frame(local, sta, skb);
  342. rcu_read_unlock();
  343. return;
  344. }
  345. if ((local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) &&
  346. (rates_idx != -1))
  347. sta->last_tx_rate = info->status.rates[rates_idx];
  348. if ((info->flags & IEEE80211_TX_STAT_AMPDU_NO_BACK) &&
  349. (ieee80211_is_data_qos(fc))) {
  350. u16 tid, ssn;
  351. u8 *qc;
  352. qc = ieee80211_get_qos_ctl(hdr);
  353. tid = qc[0] & 0xf;
  354. ssn = ((le16_to_cpu(hdr->seq_ctrl) + 0x10)
  355. & IEEE80211_SCTL_SEQ);
  356. ieee80211_send_bar(&sta->sdata->vif, hdr->addr1,
  357. tid, ssn);
  358. }
  359. if (!acked && ieee80211_is_back_req(fc)) {
  360. u16 tid, control;
  361. /*
  362. * BAR failed, store the last SSN and retry sending
  363. * the BAR when the next unicast transmission on the
  364. * same TID succeeds.
  365. */
  366. bar = (struct ieee80211_bar *) skb->data;
  367. control = le16_to_cpu(bar->control);
  368. if (!(control & IEEE80211_BAR_CTRL_MULTI_TID)) {
  369. u16 ssn = le16_to_cpu(bar->start_seq_num);
  370. tid = (control &
  371. IEEE80211_BAR_CTRL_TID_INFO_MASK) >>
  372. IEEE80211_BAR_CTRL_TID_INFO_SHIFT;
  373. if (local->hw.flags &
  374. IEEE80211_HW_TEARDOWN_AGGR_ON_BAR_FAIL)
  375. ieee80211_stop_tx_ba_session(&sta->sta, tid);
  376. else
  377. ieee80211_set_bar_pending(sta, tid, ssn);
  378. }
  379. }
  380. if (info->flags & IEEE80211_TX_STAT_TX_FILTERED) {
  381. ieee80211_handle_filtered_frame(local, sta, skb);
  382. rcu_read_unlock();
  383. return;
  384. } else {
  385. if (!acked)
  386. sta->tx_retry_failed++;
  387. sta->tx_retry_count += retry_count;
  388. }
  389. rate_control_tx_status(local, sband, sta, skb);
  390. if (ieee80211_vif_is_mesh(&sta->sdata->vif))
  391. ieee80211s_update_metric(local, sta, skb);
  392. if (!(info->flags & IEEE80211_TX_CTL_INJECTED) && acked)
  393. ieee80211_frame_acked(sta, skb);
  394. if ((sta->sdata->vif.type == NL80211_IFTYPE_STATION) &&
  395. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS))
  396. ieee80211_sta_tx_notify(sta->sdata, (void *) skb->data, acked);
  397. if (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) {
  398. if (info->flags & IEEE80211_TX_STAT_ACK) {
  399. if (sta->lost_packets)
  400. sta->lost_packets = 0;
  401. } else if (++sta->lost_packets >= STA_LOST_PKT_THRESHOLD) {
  402. cfg80211_cqm_pktloss_notify(sta->sdata->dev,
  403. sta->sta.addr,
  404. sta->lost_packets,
  405. GFP_ATOMIC);
  406. sta->lost_packets = 0;
  407. }
  408. }
  409. }
  410. rcu_read_unlock();
  411. ieee80211_led_tx(local, 0);
  412. /* SNMP counters
  413. * Fragments are passed to low-level drivers as separate skbs, so these
  414. * are actually fragments, not frames. Update frame counters only for
  415. * the first fragment of the frame. */
  416. if (info->flags & IEEE80211_TX_STAT_ACK) {
  417. if (ieee80211_is_first_frag(hdr->seq_ctrl)) {
  418. local->dot11TransmittedFrameCount++;
  419. if (is_multicast_ether_addr(hdr->addr1))
  420. local->dot11MulticastTransmittedFrameCount++;
  421. if (retry_count > 0)
  422. local->dot11RetryCount++;
  423. if (retry_count > 1)
  424. local->dot11MultipleRetryCount++;
  425. }
  426. /* This counter shall be incremented for an acknowledged MPDU
  427. * with an individual address in the address 1 field or an MPDU
  428. * with a multicast address in the address 1 field of type Data
  429. * or Management. */
  430. if (!is_multicast_ether_addr(hdr->addr1) ||
  431. ieee80211_is_data(fc) ||
  432. ieee80211_is_mgmt(fc))
  433. local->dot11TransmittedFragmentCount++;
  434. } else {
  435. if (ieee80211_is_first_frag(hdr->seq_ctrl))
  436. local->dot11FailedCount++;
  437. }
  438. if (ieee80211_is_nullfunc(fc) && ieee80211_has_pm(fc) &&
  439. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) &&
  440. !(info->flags & IEEE80211_TX_CTL_INJECTED) &&
  441. local->ps_sdata && !(local->scanning)) {
  442. if (info->flags & IEEE80211_TX_STAT_ACK) {
  443. local->ps_sdata->u.mgd.flags |=
  444. IEEE80211_STA_NULLFUNC_ACKED;
  445. } else
  446. mod_timer(&local->dynamic_ps_timer, jiffies +
  447. msecs_to_jiffies(10));
  448. }
  449. if (info->flags & IEEE80211_TX_INTFL_NL80211_FRAME_TX) {
  450. u64 cookie = (unsigned long)skb;
  451. if (ieee80211_is_nullfunc(hdr->frame_control) ||
  452. ieee80211_is_qos_nullfunc(hdr->frame_control)) {
  453. acked = info->flags & IEEE80211_TX_STAT_ACK;
  454. cfg80211_probe_status(skb->dev, hdr->addr1,
  455. cookie, acked, GFP_ATOMIC);
  456. } else {
  457. struct ieee80211_work *wk;
  458. rcu_read_lock();
  459. list_for_each_entry_rcu(wk, &local->work_list, list) {
  460. if (wk->type != IEEE80211_WORK_OFFCHANNEL_TX)
  461. continue;
  462. if (wk->offchan_tx.frame != skb)
  463. continue;
  464. wk->offchan_tx.status = true;
  465. break;
  466. }
  467. rcu_read_unlock();
  468. if (local->hw_roc_skb_for_status == skb) {
  469. cookie = local->hw_roc_cookie ^ 2;
  470. local->hw_roc_skb_for_status = NULL;
  471. }
  472. cfg80211_mgmt_tx_status(
  473. skb->dev, cookie, skb->data, skb->len,
  474. !!(info->flags & IEEE80211_TX_STAT_ACK),
  475. GFP_ATOMIC);
  476. }
  477. }
  478. if (unlikely(info->ack_frame_id)) {
  479. struct sk_buff *ack_skb;
  480. unsigned long flags;
  481. spin_lock_irqsave(&local->ack_status_lock, flags);
  482. ack_skb = idr_find(&local->ack_status_frames,
  483. info->ack_frame_id);
  484. if (ack_skb)
  485. idr_remove(&local->ack_status_frames,
  486. info->ack_frame_id);
  487. spin_unlock_irqrestore(&local->ack_status_lock, flags);
  488. /* consumes ack_skb */
  489. if (ack_skb)
  490. skb_complete_wifi_ack(ack_skb,
  491. info->flags & IEEE80211_TX_STAT_ACK);
  492. }
  493. /* this was a transmitted frame, but now we want to reuse it */
  494. skb_orphan(skb);
  495. /* Need to make a copy before skb->cb gets cleared */
  496. send_to_cooked = !!(info->flags & IEEE80211_TX_CTL_INJECTED) ||
  497. !(ieee80211_is_data(fc));
  498. /*
  499. * This is a bit racy but we can avoid a lot of work
  500. * with this test...
  501. */
  502. if (!local->monitors && (!send_to_cooked || !local->cooked_mntrs)) {
  503. dev_kfree_skb(skb);
  504. return;
  505. }
  506. /* send frame to monitor interfaces now */
  507. rtap_len = ieee80211_tx_radiotap_len(info);
  508. if (WARN_ON_ONCE(skb_headroom(skb) < rtap_len)) {
  509. printk(KERN_ERR "ieee80211_tx_status: headroom too small\n");
  510. dev_kfree_skb(skb);
  511. return;
  512. }
  513. ieee80211_add_tx_radiotap_header(sband, skb, retry_count, rtap_len);
  514. /* XXX: is this sufficient for BPF? */
  515. skb_set_mac_header(skb, 0);
  516. skb->ip_summed = CHECKSUM_UNNECESSARY;
  517. skb->pkt_type = PACKET_OTHERHOST;
  518. skb->protocol = htons(ETH_P_802_2);
  519. memset(skb->cb, 0, sizeof(skb->cb));
  520. rcu_read_lock();
  521. list_for_each_entry_rcu(sdata, &local->interfaces, list) {
  522. if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
  523. if (!ieee80211_sdata_running(sdata))
  524. continue;
  525. if ((sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) &&
  526. !send_to_cooked)
  527. continue;
  528. if (prev_dev) {
  529. skb2 = skb_clone(skb, GFP_ATOMIC);
  530. if (skb2) {
  531. skb2->dev = prev_dev;
  532. netif_rx(skb2);
  533. }
  534. }
  535. prev_dev = sdata->dev;
  536. }
  537. }
  538. if (prev_dev) {
  539. skb->dev = prev_dev;
  540. netif_rx(skb);
  541. skb = NULL;
  542. }
  543. rcu_read_unlock();
  544. dev_kfree_skb(skb);
  545. }
  546. EXPORT_SYMBOL(ieee80211_tx_status);
  547. void ieee80211_report_low_ack(struct ieee80211_sta *pubsta, u32 num_packets)
  548. {
  549. struct sta_info *sta = container_of(pubsta, struct sta_info, sta);
  550. cfg80211_cqm_pktloss_notify(sta->sdata->dev, sta->sta.addr,
  551. num_packets, GFP_ATOMIC);
  552. }
  553. EXPORT_SYMBOL(ieee80211_report_low_ack);
  554. void ieee80211_free_txskb(struct ieee80211_hw *hw, struct sk_buff *skb)
  555. {
  556. struct ieee80211_local *local = hw_to_local(hw);
  557. struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
  558. if (unlikely(info->ack_frame_id)) {
  559. struct sk_buff *ack_skb;
  560. unsigned long flags;
  561. spin_lock_irqsave(&local->ack_status_lock, flags);
  562. ack_skb = idr_find(&local->ack_status_frames,
  563. info->ack_frame_id);
  564. if (ack_skb)
  565. idr_remove(&local->ack_status_frames,
  566. info->ack_frame_id);
  567. spin_unlock_irqrestore(&local->ack_status_lock, flags);
  568. /* consumes ack_skb */
  569. if (ack_skb)
  570. dev_kfree_skb_any(ack_skb);
  571. }
  572. dev_kfree_skb_any(skb);
  573. }
  574. EXPORT_SYMBOL(ieee80211_free_txskb);
  575. void ieee80211_purge_tx_queue(struct ieee80211_hw *hw,
  576. struct sk_buff_head *skbs)
  577. {
  578. struct sk_buff *skb;
  579. while ((skb = __skb_dequeue(skbs)))
  580. ieee80211_free_txskb(hw, skb);
  581. }