if_iwm_scan.c revision 305762
1/* $OpenBSD: if_iwm.c,v 1.39 2015/03/23 00:35:19 jsg Exp $ */ 2 3/* 4 * Copyright (c) 2014 genua mbh <info@genua.de> 5 * Copyright (c) 2014 Fixup Software Ltd. 6 * 7 * Permission to use, copy, modify, and distribute this software for any 8 * purpose with or without fee is hereby granted, provided that the above 9 * copyright notice and this permission notice appear in all copies. 10 * 11 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 12 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 13 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 14 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 15 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 16 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 17 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 18 */ 19 20/*- 21 * Based on BSD-licensed source modules in the Linux iwlwifi driver, 22 * which were used as the reference documentation for this implementation. 23 * 24 * Driver version we are currently based off of is 25 * Linux 3.14.3 (tag id a2df521e42b1d9a23f620ac79dbfe8655a8391dd) 26 * 27 *********************************************************************** 28 * 29 * This file is provided under a dual BSD/GPLv2 license. When using or 30 * redistributing this file, you may do so under either license. 31 * 32 * GPL LICENSE SUMMARY 33 * 34 * Copyright(c) 2007 - 2013 Intel Corporation. All rights reserved. 35 * 36 * This program is free software; you can redistribute it and/or modify 37 * it under the terms of version 2 of the GNU General Public License as 38 * published by the Free Software Foundation. 39 * 40 * This program is distributed in the hope that it will be useful, but 41 * WITHOUT ANY WARRANTY; without even the implied warranty of 42 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 43 * General Public License for more details. 44 * 45 * You should have received a copy of the GNU General Public License 46 * along with this program; if not, write to the Free Software 47 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, 48 * USA 49 * 50 * The full GNU General Public License is included in this distribution 51 * in the file called COPYING. 52 * 53 * Contact Information: 54 * Intel Linux Wireless <ilw@linux.intel.com> 55 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 56 * 57 * 58 * BSD LICENSE 59 * 60 * Copyright(c) 2005 - 2013 Intel Corporation. All rights reserved. 61 * All rights reserved. 62 * 63 * Redistribution and use in source and binary forms, with or without 64 * modification, are permitted provided that the following conditions 65 * are met: 66 * 67 * * Redistributions of source code must retain the above copyright 68 * notice, this list of conditions and the following disclaimer. 69 * * Redistributions in binary form must reproduce the above copyright 70 * notice, this list of conditions and the following disclaimer in 71 * the documentation and/or other materials provided with the 72 * distribution. 73 * * Neither the name Intel Corporation nor the names of its 74 * contributors may be used to endorse or promote products derived 75 * from this software without specific prior written permission. 76 * 77 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 78 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 79 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 80 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 81 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 82 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 83 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 84 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 85 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 86 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 87 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 88 */ 89 90/*- 91 * Copyright (c) 2007-2010 Damien Bergamini <damien.bergamini@free.fr> 92 * 93 * Permission to use, copy, modify, and distribute this software for any 94 * purpose with or without fee is hereby granted, provided that the above 95 * copyright notice and this permission notice appear in all copies. 96 * 97 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 98 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 99 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 100 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 101 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 102 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 103 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 104 */ 105#include <sys/cdefs.h> 106__FBSDID("$FreeBSD: stable/11/sys/dev/iwm/if_iwm_scan.c 305762 2016-09-13 05:47:59Z avos $"); 107 108#include "opt_wlan.h" 109 110#include <sys/param.h> 111#include <sys/bus.h> 112#include <sys/conf.h> 113#include <sys/endian.h> 114#include <sys/firmware.h> 115#include <sys/kernel.h> 116#include <sys/malloc.h> 117#include <sys/mbuf.h> 118#include <sys/mutex.h> 119#include <sys/module.h> 120#include <sys/proc.h> 121#include <sys/rman.h> 122#include <sys/socket.h> 123#include <sys/sockio.h> 124#include <sys/sysctl.h> 125#include <sys/linker.h> 126 127#include <machine/bus.h> 128#include <machine/endian.h> 129#include <machine/resource.h> 130 131#include <dev/pci/pcivar.h> 132#include <dev/pci/pcireg.h> 133 134#include <net/bpf.h> 135 136#include <net/if.h> 137#include <net/if_var.h> 138#include <net/if_arp.h> 139#include <net/if_dl.h> 140#include <net/if_media.h> 141#include <net/if_types.h> 142 143#include <netinet/in.h> 144#include <netinet/in_systm.h> 145#include <netinet/if_ether.h> 146#include <netinet/ip.h> 147 148#include <net80211/ieee80211_var.h> 149#include <net80211/ieee80211_regdomain.h> 150#include <net80211/ieee80211_ratectl.h> 151#include <net80211/ieee80211_radiotap.h> 152 153#include <dev/iwm/if_iwmreg.h> 154#include <dev/iwm/if_iwmvar.h> 155#include <dev/iwm/if_iwm_debug.h> 156#include <dev/iwm/if_iwm_util.h> 157#include <dev/iwm/if_iwm_scan.h> 158 159/* 160 * BEGIN mvm/scan.c 161 */ 162 163#define IWM_PLCP_QUIET_THRESH 1 164#define IWM_ACTIVE_QUIET_TIME 10 165#define LONG_OUT_TIME_PERIOD (600 * IEEE80211_DUR_TU) 166#define SHORT_OUT_TIME_PERIOD (200 * IEEE80211_DUR_TU) 167#define SUSPEND_TIME_PERIOD (100 * IEEE80211_DUR_TU) 168 169static uint16_t 170iwm_mvm_scan_rx_chain(struct iwm_softc *sc) 171{ 172 uint16_t rx_chain; 173 uint8_t rx_ant; 174 175 rx_ant = iwm_fw_valid_rx_ant(sc); 176 rx_chain = rx_ant << IWM_PHY_RX_CHAIN_VALID_POS; 177 rx_chain |= rx_ant << IWM_PHY_RX_CHAIN_FORCE_MIMO_SEL_POS; 178 rx_chain |= rx_ant << IWM_PHY_RX_CHAIN_FORCE_SEL_POS; 179 rx_chain |= 0x1 << IWM_PHY_RX_CHAIN_DRIVER_FORCE_POS; 180 return htole16(rx_chain); 181} 182 183#if 0 184static uint32_t 185iwm_mvm_scan_max_out_time(struct iwm_softc *sc, uint32_t flags, int is_assoc) 186{ 187 if (!is_assoc) 188 return 0; 189 if (flags & 0x1) 190 return htole32(SHORT_OUT_TIME_PERIOD); 191 return htole32(LONG_OUT_TIME_PERIOD); 192} 193 194static uint32_t 195iwm_mvm_scan_suspend_time(struct iwm_softc *sc, int is_assoc) 196{ 197 if (!is_assoc) 198 return 0; 199 return htole32(SUSPEND_TIME_PERIOD); 200} 201#endif 202 203static uint32_t 204iwm_mvm_scan_rate_n_flags(struct iwm_softc *sc, int flags, int no_cck) 205{ 206 uint32_t tx_ant; 207 int i, ind; 208 209 for (i = 0, ind = sc->sc_scan_last_antenna; 210 i < IWM_RATE_MCS_ANT_NUM; i++) { 211 ind = (ind + 1) % IWM_RATE_MCS_ANT_NUM; 212 if (iwm_fw_valid_tx_ant(sc) & (1 << ind)) { 213 sc->sc_scan_last_antenna = ind; 214 break; 215 } 216 } 217 tx_ant = (1 << sc->sc_scan_last_antenna) << IWM_RATE_MCS_ANT_POS; 218 219 if ((flags & IEEE80211_CHAN_2GHZ) && !no_cck) 220 return htole32(IWM_RATE_1M_PLCP | IWM_RATE_MCS_CCK_MSK | 221 tx_ant); 222 else 223 return htole32(IWM_RATE_6M_PLCP | tx_ant); 224} 225 226#if 0 227/* 228 * If req->n_ssids > 0, it means we should do an active scan. 229 * In case of active scan w/o directed scan, we receive a zero-length SSID 230 * just to notify that this scan is active and not passive. 231 * In order to notify the FW of the number of SSIDs we wish to scan (including 232 * the zero-length one), we need to set the corresponding bits in chan->type, 233 * one for each SSID, and set the active bit (first). If the first SSID is 234 * already included in the probe template, so we need to set only 235 * req->n_ssids - 1 bits in addition to the first bit. 236 */ 237static uint16_t 238iwm_mvm_get_active_dwell(struct iwm_softc *sc, int flags, int n_ssids) 239{ 240 if (flags & IEEE80211_CHAN_2GHZ) 241 return 30 + 3 * (n_ssids + 1); 242 return 20 + 2 * (n_ssids + 1); 243} 244 245static uint16_t 246iwm_mvm_get_passive_dwell(struct iwm_softc *sc, int flags) 247{ 248 return (flags & IEEE80211_CHAN_2GHZ) ? 100 + 20 : 100 + 10; 249} 250#endif 251 252static int 253iwm_mvm_scan_skip_channel(struct ieee80211_channel *c) 254{ 255 if (IEEE80211_IS_CHAN_2GHZ(c) && IEEE80211_IS_CHAN_B(c)) 256 return 0; 257 else if (IEEE80211_IS_CHAN_5GHZ(c) && IEEE80211_IS_CHAN_A(c)) 258 return 0; 259 else 260 return 1; 261} 262 263static uint8_t 264iwm_mvm_lmac_scan_fill_channels(struct iwm_softc *sc, 265 struct iwm_scan_channel_cfg_lmac *chan, int n_ssids) 266{ 267 struct ieee80211com *ic = &sc->sc_ic; 268 struct ieee80211_scan_state *ss = ic->ic_scan; 269 struct ieee80211_channel *c; 270 uint8_t nchan; 271 int j; 272 273 for (nchan = j = 0; 274 j < ic->ic_nchans && nchan < sc->sc_capa_n_scan_channels; j++) { 275 c = &ic->ic_channels[j]; 276 /* For 2GHz, only populate 11b channels */ 277 /* For 5GHz, only populate 11a channels */ 278 /* 279 * Catch other channels, in case we have 900MHz channels or 280 * something in the chanlist. 281 */ 282 if (iwm_mvm_scan_skip_channel(c)) { 283 IWM_DPRINTF(sc, IWM_DEBUG_RESET | IWM_DEBUG_EEPROM, 284 "%s: skipping channel (freq=%d, ieee=%d, flags=0x%08x)\n", 285 __func__, c->ic_freq, c->ic_ieee, c->ic_flags); 286 continue; 287 } 288 289 IWM_DPRINTF(sc, IWM_DEBUG_RESET | IWM_DEBUG_EEPROM, 290 "Adding channel %d (%d Mhz) to the list\n", 291 nchan, c->ic_freq); 292 chan->channel_num = htole16(ieee80211_mhz2ieee(c->ic_freq, 0)); 293 chan->iter_count = htole16(1); 294 chan->iter_interval = htole32(0); 295 chan->flags = htole32(IWM_UNIFIED_SCAN_CHANNEL_PARTIAL); 296 chan->flags |= htole32(IWM_SCAN_CHANNEL_NSSIDS(n_ssids)); 297 /* XXX IEEE80211_SCAN_NOBCAST flag is never set. */ 298 if (!IEEE80211_IS_CHAN_PASSIVE(c) && 299 (!(ss->ss_flags & IEEE80211_SCAN_NOBCAST) || n_ssids != 0)) 300 chan->flags |= htole32(IWM_SCAN_CHANNEL_TYPE_ACTIVE); 301 chan++; 302 nchan++; 303 } 304 305 return nchan; 306} 307 308static uint8_t 309iwm_mvm_umac_scan_fill_channels(struct iwm_softc *sc, 310 struct iwm_scan_channel_cfg_umac *chan, int n_ssids) 311{ 312 struct ieee80211com *ic = &sc->sc_ic; 313 struct ieee80211_channel *c; 314 uint8_t nchan; 315 int j; 316 317 for (nchan = j = 0; 318 j < ic->ic_nchans && nchan < sc->sc_capa_n_scan_channels; j++) { 319 c = &ic->ic_channels[j]; 320 /* For 2GHz, only populate 11b channels */ 321 /* For 5GHz, only populate 11a channels */ 322 /* 323 * Catch other channels, in case we have 900MHz channels or 324 * something in the chanlist. 325 */ 326 if (iwm_mvm_scan_skip_channel(c)) { 327 IWM_DPRINTF(sc, IWM_DEBUG_RESET | IWM_DEBUG_EEPROM, 328 "%s: skipping channel (freq=%d, ieee=%d, flags=0x%08x)\n", 329 __func__, c->ic_freq, c->ic_ieee, c->ic_flags); 330 continue; 331 } 332 333 IWM_DPRINTF(sc, IWM_DEBUG_RESET | IWM_DEBUG_EEPROM, 334 "Adding channel %d (%d Mhz) to the list\n", 335 nchan, c->ic_freq); 336 chan->channel_num = ieee80211_mhz2ieee(c->ic_freq, 0); 337 chan->iter_count = 1; 338 chan->iter_interval = htole16(0); 339 chan->flags = htole32(IWM_SCAN_CHANNEL_UMAC_NSSIDS(n_ssids)); 340 chan++; 341 nchan++; 342 } 343 344 return nchan; 345} 346 347static int 348iwm_mvm_fill_probe_req(struct iwm_softc *sc, struct iwm_scan_probe_req *preq) 349{ 350 struct ieee80211com *ic = &sc->sc_ic; 351 struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 352 struct ieee80211_frame *wh = (struct ieee80211_frame *)preq->buf; 353 struct ieee80211_rateset *rs; 354 size_t remain = sizeof(preq->buf); 355 uint8_t *frm, *pos; 356 357 memset(preq, 0, sizeof(*preq)); 358 359 /* Ensure enough space for header and SSID IE. */ 360 if (remain < sizeof(*wh) + 2) 361 return ENOBUFS; 362 363 /* 364 * Build a probe request frame. Most of the following code is a 365 * copy & paste of what is done in net80211. 366 */ 367 wh->i_fc[0] = IEEE80211_FC0_VERSION_0 | IEEE80211_FC0_TYPE_MGT | 368 IEEE80211_FC0_SUBTYPE_PROBE_REQ; 369 wh->i_fc[1] = IEEE80211_FC1_DIR_NODS; 370 IEEE80211_ADDR_COPY(wh->i_addr1, ieee80211broadcastaddr); 371 IEEE80211_ADDR_COPY(wh->i_addr2, vap ? vap->iv_myaddr : ic->ic_macaddr); 372 IEEE80211_ADDR_COPY(wh->i_addr3, ieee80211broadcastaddr); 373 *(uint16_t *)&wh->i_dur[0] = 0; /* filled by HW */ 374 *(uint16_t *)&wh->i_seq[0] = 0; /* filled by HW */ 375 376 frm = (uint8_t *)(wh + 1); 377 frm = ieee80211_add_ssid(frm, NULL, 0); 378 379 /* Tell the firmware where the MAC header is. */ 380 preq->mac_header.offset = 0; 381 preq->mac_header.len = htole16(frm - (uint8_t *)wh); 382 remain -= frm - (uint8_t *)wh; 383 384 /* Fill in 2GHz IEs and tell firmware where they are. */ 385 rs = &ic->ic_sup_rates[IEEE80211_MODE_11G]; 386 if (rs->rs_nrates > IEEE80211_RATE_SIZE) { 387 if (remain < 4 + rs->rs_nrates) 388 return ENOBUFS; 389 } else if (remain < 2 + rs->rs_nrates) { 390 return ENOBUFS; 391 } 392 preq->band_data[0].offset = htole16(frm - (uint8_t *)wh); 393 pos = frm; 394 frm = ieee80211_add_rates(frm, rs); 395 if (rs->rs_nrates > IEEE80211_RATE_SIZE) 396 frm = ieee80211_add_xrates(frm, rs); 397 preq->band_data[0].len = htole16(frm - pos); 398 remain -= frm - pos; 399 400 if (isset(sc->sc_enabled_capa, 401 IWM_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) { 402 if (remain < 3) 403 return ENOBUFS; 404 *frm++ = IEEE80211_ELEMID_DSPARMS; 405 *frm++ = 1; 406 *frm++ = 0; 407 remain -= 3; 408 } 409 410 if (sc->sc_nvm.sku_cap_band_52GHz_enable) { 411 /* Fill in 5GHz IEs. */ 412 rs = &ic->ic_sup_rates[IEEE80211_MODE_11A]; 413 if (rs->rs_nrates > IEEE80211_RATE_SIZE) { 414 if (remain < 4 + rs->rs_nrates) 415 return ENOBUFS; 416 } else if (remain < 2 + rs->rs_nrates) { 417 return ENOBUFS; 418 } 419 preq->band_data[1].offset = htole16(frm - (uint8_t *)wh); 420 pos = frm; 421 frm = ieee80211_add_rates(frm, rs); 422 if (rs->rs_nrates > IEEE80211_RATE_SIZE) 423 frm = ieee80211_add_xrates(frm, rs); 424 preq->band_data[1].len = htole16(frm - pos); 425 remain -= frm - pos; 426 } 427 428 /* Send 11n IEs on both 2GHz and 5GHz bands. */ 429 preq->common_data.offset = htole16(frm - (uint8_t *)wh); 430 pos = frm; 431#if 0 432 if (ic->ic_flags & IEEE80211_F_HTON) { 433 if (remain < 28) 434 return ENOBUFS; 435 frm = ieee80211_add_htcaps(frm, ic); 436 /* XXX add WME info? */ 437 } 438#endif 439 preq->common_data.len = htole16(frm - pos); 440 441 return 0; 442} 443 444int 445iwm_mvm_config_umac_scan(struct iwm_softc *sc) 446{ 447 struct ieee80211com *ic = &sc->sc_ic; 448 struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 449 450 struct iwm_scan_config *scan_config; 451 int ret, j, nchan; 452 size_t cmd_size; 453 struct ieee80211_channel *c; 454 struct iwm_host_cmd hcmd = { 455 .id = iwm_cmd_id(IWM_SCAN_CFG_CMD, IWM_ALWAYS_LONG_GROUP, 0), 456 .flags = IWM_CMD_SYNC, 457 }; 458 static const uint32_t rates = (IWM_SCAN_CONFIG_RATE_1M | 459 IWM_SCAN_CONFIG_RATE_2M | IWM_SCAN_CONFIG_RATE_5M | 460 IWM_SCAN_CONFIG_RATE_11M | IWM_SCAN_CONFIG_RATE_6M | 461 IWM_SCAN_CONFIG_RATE_9M | IWM_SCAN_CONFIG_RATE_12M | 462 IWM_SCAN_CONFIG_RATE_18M | IWM_SCAN_CONFIG_RATE_24M | 463 IWM_SCAN_CONFIG_RATE_36M | IWM_SCAN_CONFIG_RATE_48M | 464 IWM_SCAN_CONFIG_RATE_54M); 465 466 cmd_size = sizeof(*scan_config) + sc->sc_capa_n_scan_channels; 467 468 scan_config = malloc(cmd_size, M_DEVBUF, M_NOWAIT | M_ZERO); 469 if (scan_config == NULL) 470 return ENOMEM; 471 472 scan_config->tx_chains = htole32(iwm_fw_valid_tx_ant(sc)); 473 scan_config->rx_chains = htole32(iwm_fw_valid_rx_ant(sc)); 474 scan_config->legacy_rates = htole32(rates | 475 IWM_SCAN_CONFIG_SUPPORTED_RATE(rates)); 476 477 /* These timings correspond to iwlwifi's UNASSOC scan. */ 478 scan_config->dwell_active = 10; 479 scan_config->dwell_passive = 110; 480 scan_config->dwell_fragmented = 44; 481 scan_config->dwell_extended = 90; 482 scan_config->out_of_channel_time = htole32(0); 483 scan_config->suspend_time = htole32(0); 484 485 IEEE80211_ADDR_COPY(scan_config->mac_addr, 486 vap ? vap->iv_myaddr : ic->ic_macaddr); 487 488 scan_config->bcast_sta_id = sc->sc_aux_sta.sta_id; 489 scan_config->channel_flags = IWM_CHANNEL_FLAG_EBS | 490 IWM_CHANNEL_FLAG_ACCURATE_EBS | IWM_CHANNEL_FLAG_EBS_ADD | 491 IWM_CHANNEL_FLAG_PRE_SCAN_PASSIVE2ACTIVE; 492 493 for (nchan = j = 0; 494 j < ic->ic_nchans && nchan < sc->sc_capa_n_scan_channels; j++) { 495 c = &ic->ic_channels[j]; 496 /* For 2GHz, only populate 11b channels */ 497 /* For 5GHz, only populate 11a channels */ 498 /* 499 * Catch other channels, in case we have 900MHz channels or 500 * something in the chanlist. 501 */ 502 if (iwm_mvm_scan_skip_channel(c)) 503 continue; 504 scan_config->channel_array[nchan++] = 505 ieee80211_mhz2ieee(c->ic_freq, 0); 506 } 507 508 scan_config->flags = htole32(IWM_SCAN_CONFIG_FLAG_ACTIVATE | 509 IWM_SCAN_CONFIG_FLAG_ALLOW_CHUB_REQS | 510 IWM_SCAN_CONFIG_FLAG_SET_TX_CHAINS | 511 IWM_SCAN_CONFIG_FLAG_SET_RX_CHAINS | 512 IWM_SCAN_CONFIG_FLAG_SET_AUX_STA_ID | 513 IWM_SCAN_CONFIG_FLAG_SET_ALL_TIMES | 514 IWM_SCAN_CONFIG_FLAG_SET_LEGACY_RATES | 515 IWM_SCAN_CONFIG_FLAG_SET_MAC_ADDR | 516 IWM_SCAN_CONFIG_FLAG_SET_CHANNEL_FLAGS| 517 IWM_SCAN_CONFIG_N_CHANNELS(nchan) | 518 IWM_SCAN_CONFIG_FLAG_CLEAR_FRAGMENTED); 519 520 hcmd.data[0] = scan_config; 521 hcmd.len[0] = cmd_size; 522 523 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, "Sending UMAC scan config\n"); 524 525 ret = iwm_send_cmd(sc, &hcmd); 526 if (!ret) 527 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, 528 "UMAC scan config was sent successfully\n"); 529 530 free(scan_config, M_DEVBUF); 531 return ret; 532} 533 534int 535iwm_mvm_umac_scan(struct iwm_softc *sc) 536{ 537 struct iwm_host_cmd hcmd = { 538 .id = iwm_cmd_id(IWM_SCAN_REQ_UMAC, IWM_ALWAYS_LONG_GROUP, 0), 539 .len = { 0, }, 540 .data = { NULL, }, 541 .flags = IWM_CMD_SYNC, 542 }; 543 struct ieee80211_scan_state *ss = sc->sc_ic.ic_scan; 544 struct iwm_scan_req_umac *req; 545 struct iwm_scan_req_umac_tail *tail; 546 size_t req_len; 547 uint8_t i, nssid; 548 int ret; 549 550 req_len = sizeof(struct iwm_scan_req_umac) + 551 (sizeof(struct iwm_scan_channel_cfg_umac) * 552 sc->sc_capa_n_scan_channels) + 553 sizeof(struct iwm_scan_req_umac_tail); 554 if (req_len > IWM_MAX_CMD_PAYLOAD_SIZE) 555 return ENOMEM; 556 req = malloc(req_len, M_DEVBUF, M_NOWAIT | M_ZERO); 557 if (req == NULL) 558 return ENOMEM; 559 560 hcmd.len[0] = (uint16_t)req_len; 561 hcmd.data[0] = (void *)req; 562 563 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, "Handling ieee80211 scan request\n"); 564 565 /* These timings correspond to iwlwifi's UNASSOC scan. */ 566 req->active_dwell = 10; 567 req->passive_dwell = 110; 568 req->fragmented_dwell = 44; 569 req->extended_dwell = 90; 570 req->max_out_time = 0; 571 req->suspend_time = 0; 572 573 req->scan_priority = htole32(IWM_SCAN_PRIORITY_HIGH); 574 req->ooc_priority = htole32(IWM_SCAN_PRIORITY_HIGH); 575 576 nssid = MIN(ss->ss_nssid, IWM_PROBE_OPTION_MAX); 577 req->n_channels = iwm_mvm_umac_scan_fill_channels(sc, 578 (struct iwm_scan_channel_cfg_umac *)req->data, nssid); 579 580 req->general_flags = htole32(IWM_UMAC_SCAN_GEN_FLAGS_PASS_ALL | 581 IWM_UMAC_SCAN_GEN_FLAGS_ITER_COMPLETE | 582 IWM_UMAC_SCAN_GEN_FLAGS_EXTENDED_DWELL); 583 584 tail = (void *)((char *)&req->data + 585 sizeof(struct iwm_scan_channel_cfg_umac) * 586 sc->sc_capa_n_scan_channels); 587 588 /* Check if we're doing an active directed scan. */ 589 for (i = 0; i < nssid; i++) { 590 tail->direct_scan[i].id = IEEE80211_ELEMID_SSID; 591 tail->direct_scan[i].len = MIN(ss->ss_ssid[i].len, 592 IEEE80211_NWID_LEN); 593 memcpy(tail->direct_scan[i].ssid, ss->ss_ssid[i].ssid, 594 tail->direct_scan[i].len); 595 /* XXX debug */ 596 } 597 if (nssid != 0) { 598 req->general_flags |= 599 htole32(IWM_UMAC_SCAN_GEN_FLAGS_PRE_CONNECT); 600 } else 601 req->general_flags |= htole32(IWM_UMAC_SCAN_GEN_FLAGS_PASSIVE); 602 603 if (isset(sc->sc_enabled_capa, 604 IWM_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 605 req->general_flags |= 606 htole32(IWM_UMAC_SCAN_GEN_FLAGS_RRM_ENABLED); 607 608 ret = iwm_mvm_fill_probe_req(sc, &tail->preq); 609 if (ret) { 610 free(req, M_DEVBUF); 611 return ret; 612 } 613 614 /* Specify the scan plan: We'll do one iteration. */ 615 tail->schedule[0].interval = 0; 616 tail->schedule[0].iter_count = 1; 617 618 ret = iwm_send_cmd(sc, &hcmd); 619 if (!ret) 620 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, 621 "Scan request was sent successfully\n"); 622 free(req, M_DEVBUF); 623 return ret; 624} 625 626int 627iwm_mvm_lmac_scan(struct iwm_softc *sc) 628{ 629 struct iwm_host_cmd hcmd = { 630 .id = IWM_SCAN_OFFLOAD_REQUEST_CMD, 631 .len = { 0, }, 632 .data = { NULL, }, 633 .flags = IWM_CMD_SYNC, 634 }; 635 struct ieee80211_scan_state *ss = sc->sc_ic.ic_scan; 636 struct iwm_scan_req_lmac *req; 637 size_t req_len; 638 uint8_t i, nssid; 639 int ret; 640 641 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, 642 "Handling ieee80211 scan request\n"); 643 644 req_len = sizeof(struct iwm_scan_req_lmac) + 645 (sizeof(struct iwm_scan_channel_cfg_lmac) * 646 sc->sc_capa_n_scan_channels) + sizeof(struct iwm_scan_probe_req); 647 if (req_len > IWM_MAX_CMD_PAYLOAD_SIZE) 648 return ENOMEM; 649 req = malloc(req_len, M_DEVBUF, M_NOWAIT | M_ZERO); 650 if (req == NULL) 651 return ENOMEM; 652 653 hcmd.len[0] = (uint16_t)req_len; 654 hcmd.data[0] = (void *)req; 655 656 /* These timings correspond to iwlwifi's UNASSOC scan. */ 657 req->active_dwell = 10; 658 req->passive_dwell = 110; 659 req->fragmented_dwell = 44; 660 req->extended_dwell = 90; 661 req->max_out_time = 0; 662 req->suspend_time = 0; 663 664 req->scan_prio = htole32(IWM_SCAN_PRIORITY_HIGH); 665 req->rx_chain_select = iwm_mvm_scan_rx_chain(sc); 666 req->iter_num = htole32(1); 667 req->delay = 0; 668 669 req->scan_flags = htole32(IWM_MVM_LMAC_SCAN_FLAG_PASS_ALL | 670 IWM_MVM_LMAC_SCAN_FLAG_ITER_COMPLETE | 671 IWM_MVM_LMAC_SCAN_FLAG_EXTENDED_DWELL); 672 if (isset(sc->sc_enabled_capa, 673 IWM_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 674 req->scan_flags |= htole32(IWM_MVM_LMAC_SCAN_FLAGS_RRM_ENABLED); 675 676 req->flags = htole32(IWM_PHY_BAND_24); 677 if (sc->sc_nvm.sku_cap_band_52GHz_enable) 678 req->flags |= htole32(IWM_PHY_BAND_5); 679 req->filter_flags = 680 htole32(IWM_MAC_FILTER_ACCEPT_GRP | IWM_MAC_FILTER_IN_BEACON); 681 682 /* Tx flags 2 GHz. */ 683 req->tx_cmd[0].tx_flags = htole32(IWM_TX_CMD_FLG_SEQ_CTL | 684 IWM_TX_CMD_FLG_BT_DIS); 685 req->tx_cmd[0].rate_n_flags = 686 iwm_mvm_scan_rate_n_flags(sc, IEEE80211_CHAN_2GHZ, 1/*XXX*/); 687 req->tx_cmd[0].sta_id = sc->sc_aux_sta.sta_id; 688 689 /* Tx flags 5 GHz. */ 690 req->tx_cmd[1].tx_flags = htole32(IWM_TX_CMD_FLG_SEQ_CTL | 691 IWM_TX_CMD_FLG_BT_DIS); 692 req->tx_cmd[1].rate_n_flags = 693 iwm_mvm_scan_rate_n_flags(sc, IEEE80211_CHAN_5GHZ, 1/*XXX*/); 694 req->tx_cmd[1].sta_id = sc->sc_aux_sta.sta_id; 695 696 /* Check if we're doing an active directed scan. */ 697 nssid = MIN(ss->ss_nssid, IWM_PROBE_OPTION_MAX); 698 for (i = 0; i < nssid; i++) { 699 req->direct_scan[i].id = IEEE80211_ELEMID_SSID; 700 req->direct_scan[i].len = MIN(ss->ss_ssid[i].len, 701 IEEE80211_NWID_LEN); 702 memcpy(req->direct_scan[i].ssid, ss->ss_ssid[i].ssid, 703 req->direct_scan[i].len); 704 /* XXX debug */ 705 } 706 if (nssid != 0) { 707 req->scan_flags |= 708 htole32(IWM_MVM_LMAC_SCAN_FLAG_PRE_CONNECTION); 709 } else 710 req->scan_flags |= htole32(IWM_MVM_LMAC_SCAN_FLAG_PASSIVE); 711 712 req->n_channels = iwm_mvm_lmac_scan_fill_channels(sc, 713 (struct iwm_scan_channel_cfg_lmac *)req->data, nssid); 714 715 ret = iwm_mvm_fill_probe_req(sc, 716 (struct iwm_scan_probe_req *)(req->data + 717 (sizeof(struct iwm_scan_channel_cfg_lmac) * 718 sc->sc_capa_n_scan_channels))); 719 if (ret) { 720 free(req, M_DEVBUF); 721 return ret; 722 } 723 724 /* Specify the scan plan: We'll do one iteration. */ 725 req->schedule[0].iterations = 1; 726 req->schedule[0].full_scan_mul = 1; 727 728 /* Disable EBS. */ 729 req->channel_opt[0].non_ebs_ratio = 1; 730 req->channel_opt[1].non_ebs_ratio = 1; 731 732 ret = iwm_send_cmd(sc, &hcmd); 733 if (!ret) { 734 IWM_DPRINTF(sc, IWM_DEBUG_SCAN, 735 "Scan request was sent successfully\n"); 736 } 737 free(req, M_DEVBUF); 738 return ret; 739} 740