ieee80211_ht.c revision 183247
1170530Ssam/*- 2178354Ssam * Copyright (c) 2007-2008 Sam Leffler, Errno Consulting 3170530Ssam * All rights reserved. 4170530Ssam * 5170530Ssam * Redistribution and use in source and binary forms, with or without 6170530Ssam * modification, are permitted provided that the following conditions 7170530Ssam * are met: 8170530Ssam * 1. Redistributions of source code must retain the above copyright 9170530Ssam * notice, this list of conditions and the following disclaimer. 10170530Ssam * 2. Redistributions in binary form must reproduce the above copyright 11170530Ssam * notice, this list of conditions and the following disclaimer in the 12170530Ssam * documentation and/or other materials provided with the distribution. 13170530Ssam * 14170530Ssam * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 15170530Ssam * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 16170530Ssam * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 17170530Ssam * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 18170530Ssam * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 19170530Ssam * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 20170530Ssam * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 21170530Ssam * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22170530Ssam * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 23170530Ssam * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24170530Ssam */ 25170530Ssam 26170530Ssam#include <sys/cdefs.h> 27170530Ssam#ifdef __FreeBSD__ 28170530Ssam__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_ht.c 183247 2008-09-21 23:00:19Z sam $"); 29170530Ssam#endif 30170530Ssam 31170530Ssam/* 32170530Ssam * IEEE 802.11n protocol support. 33170530Ssam */ 34170530Ssam 35170530Ssam#include "opt_inet.h" 36178354Ssam#include "opt_wlan.h" 37170530Ssam 38170530Ssam#include <sys/param.h> 39170530Ssam#include <sys/kernel.h> 40170530Ssam#include <sys/systm.h> 41170530Ssam#include <sys/endian.h> 42170530Ssam 43170530Ssam#include <sys/socket.h> 44170530Ssam 45170530Ssam#include <net/if.h> 46170530Ssam#include <net/if_media.h> 47170530Ssam#include <net/ethernet.h> 48170530Ssam 49170530Ssam#include <net80211/ieee80211_var.h> 50178354Ssam#include <net80211/ieee80211_input.h> 51170530Ssam 52170530Ssam/* define here, used throughout file */ 53170530Ssam#define MS(_v, _f) (((_v) & _f) >> _f##_S) 54170530Ssam#define SM(_v, _f) (((_v) << _f##_S) & _f) 55170530Ssam 56178354Ssamconst struct ieee80211_mcs_rates ieee80211_htrates[16] = { 57178354Ssam { 13, 14, 27, 30 }, /* MCS 0 */ 58178354Ssam { 26, 29, 54, 60 }, /* MCS 1 */ 59178354Ssam { 39, 43, 81, 90 }, /* MCS 2 */ 60178354Ssam { 52, 58, 108, 120 }, /* MCS 3 */ 61178354Ssam { 78, 87, 162, 180 }, /* MCS 4 */ 62178354Ssam { 104, 116, 216, 240 }, /* MCS 5 */ 63178354Ssam { 117, 130, 243, 270 }, /* MCS 6 */ 64178354Ssam { 130, 144, 270, 300 }, /* MCS 7 */ 65178354Ssam { 26, 29, 54, 60 }, /* MCS 8 */ 66178354Ssam { 52, 58, 108, 120 }, /* MCS 9 */ 67178354Ssam { 78, 87, 162, 180 }, /* MCS 10 */ 68178354Ssam { 104, 116, 216, 240 }, /* MCS 11 */ 69178354Ssam { 156, 173, 324, 360 }, /* MCS 12 */ 70178354Ssam { 208, 231, 432, 480 }, /* MCS 13 */ 71178354Ssam { 234, 260, 486, 540 }, /* MCS 14 */ 72178354Ssam { 260, 289, 540, 600 } /* MCS 15 */ 73170530Ssam}; 74170530Ssam 75170530Ssamstatic const struct ieee80211_htrateset ieee80211_rateset_11n = 76170530Ssam { 16, { 77170530Ssam 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 78170530Ssam 10, 11, 12, 13, 14, 15 } 79170530Ssam }; 80170530Ssam 81173273Ssam#ifdef IEEE80211_AMPDU_AGE 82173273Ssam/* XXX public for sysctl hookup */ 83173273Ssamint ieee80211_ampdu_age = -1; /* threshold for ampdu reorder q (ms) */ 84173273Ssam#endif 85173273Ssamint ieee80211_recv_bar_ena = 1; 86178354Ssamint ieee80211_addba_timeout = -1; /* timeout waiting for ADDBA response */ 87178354Ssamint ieee80211_addba_backoff = -1; /* backoff after max ADDBA requests */ 88178354Ssamint ieee80211_addba_maxtries = 3; /* max ADDBA requests before backoff */ 89173273Ssam 90178354Ssam/* 91178354Ssam * Setup HT parameters that depends on the clock frequency. 92178354Ssam */ 93178354Ssamstatic void 94178354Ssamieee80211_ht_setup(void) 95178354Ssam{ 96178354Ssam#ifdef IEEE80211_AMPDU_AGE 97178354Ssam ieee80211_ampdu_age = msecs_to_ticks(500); 98178354Ssam#endif 99178354Ssam ieee80211_addba_timeout = msecs_to_ticks(250); 100178354Ssam ieee80211_addba_backoff = msecs_to_ticks(10*1000); 101178354Ssam} 102178354SsamSYSINIT(wlan_ht, SI_SUB_DRIVERS, SI_ORDER_FIRST, ieee80211_ht_setup, NULL); 103170530Ssam 104178354Ssamstatic int ieee80211_ampdu_enable(struct ieee80211_node *ni, 105178354Ssam struct ieee80211_tx_ampdu *tap); 106170530Ssamstatic int ieee80211_addba_request(struct ieee80211_node *ni, 107170530Ssam struct ieee80211_tx_ampdu *tap, 108170530Ssam int dialogtoken, int baparamset, int batimeout); 109170530Ssamstatic int ieee80211_addba_response(struct ieee80211_node *ni, 110170530Ssam struct ieee80211_tx_ampdu *tap, 111170530Ssam int code, int baparamset, int batimeout); 112170530Ssamstatic void ieee80211_addba_stop(struct ieee80211_node *ni, 113170530Ssam struct ieee80211_tx_ampdu *tap); 114170530Ssamstatic void ieee80211_aggr_recv_action(struct ieee80211_node *ni, 115170530Ssam const uint8_t *frm, const uint8_t *efrm); 116170530Ssam 117170530Ssamvoid 118170530Ssamieee80211_ht_attach(struct ieee80211com *ic) 119170530Ssam{ 120170530Ssam /* setup default aggregation policy */ 121170530Ssam ic->ic_recv_action = ieee80211_aggr_recv_action; 122170530Ssam ic->ic_send_action = ieee80211_send_action; 123178354Ssam ic->ic_ampdu_enable = ieee80211_ampdu_enable; 124170530Ssam ic->ic_addba_request = ieee80211_addba_request; 125170530Ssam ic->ic_addba_response = ieee80211_addba_response; 126170530Ssam ic->ic_addba_stop = ieee80211_addba_stop; 127170530Ssam 128173273Ssam ic->ic_htprotmode = IEEE80211_PROT_RTSCTS; 129173273Ssam ic->ic_curhtprotmode = IEEE80211_HTINFO_OPMODE_PURE; 130178354Ssam} 131173273Ssam 132178354Ssamvoid 133178354Ssamieee80211_ht_detach(struct ieee80211com *ic) 134178354Ssam{ 135178354Ssam} 136173273Ssam 137178354Ssamvoid 138178354Ssamieee80211_ht_vattach(struct ieee80211vap *vap) 139178354Ssam{ 140178354Ssam 141178354Ssam /* driver can override defaults */ 142178354Ssam vap->iv_ampdu_rxmax = IEEE80211_HTCAP_MAXRXAMPDU_8K; 143178354Ssam vap->iv_ampdu_density = IEEE80211_HTCAP_MPDUDENSITY_NA; 144178354Ssam vap->iv_ampdu_limit = vap->iv_ampdu_rxmax; 145178354Ssam vap->iv_amsdu_limit = vap->iv_htcaps & IEEE80211_HTCAP_MAXAMSDU; 146178354Ssam /* tx aggregation traffic thresholds */ 147178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BK] = 128; 148178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BE] = 64; 149178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VO] = 32; 150178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VI] = 32; 151178354Ssam 152178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_HT) { 153170530Ssam /* 154173273Ssam * Device is HT capable; enable all HT-related 155173273Ssam * facilities by default. 156170530Ssam * XXX these choices may be too aggressive. 157170530Ssam */ 158178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_HT 159178354Ssam | IEEE80211_FEXT_HTCOMPAT 160178354Ssam ; 161178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI20) 162178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI20; 163173273Ssam /* XXX infer from channel list? */ 164178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_CHWIDTH40) { 165178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_USEHT40; 166178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI40) 167178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI40; 168170530Ssam } 169170530Ssam /* NB: A-MPDU and A-MSDU rx are mandated, these are tx only */ 170178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_RX; 171178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMPDU) 172178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_TX; 173178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_RX; 174178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMSDU) 175178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_TX; 176170530Ssam } 177178354Ssam /* NB: disable default legacy WDS, too many issues right now */ 178178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_WDSLEGACY) 179178354Ssam vap->iv_flags_ext &= ~IEEE80211_FEXT_HT; 180170530Ssam} 181170530Ssam 182170530Ssamvoid 183178354Ssamieee80211_ht_vdetach(struct ieee80211vap *vap) 184170530Ssam{ 185170530Ssam} 186170530Ssam 187170530Ssamstatic void 188170530Ssamht_announce(struct ieee80211com *ic, int mode, 189170530Ssam const struct ieee80211_htrateset *rs) 190170530Ssam{ 191170530Ssam struct ifnet *ifp = ic->ic_ifp; 192170530Ssam int i, rate, mword; 193170530Ssam 194170530Ssam if_printf(ifp, "%s MCS: ", ieee80211_phymode_name[mode]); 195170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 196172226Ssam mword = ieee80211_rate2media(ic, 197172226Ssam rs->rs_rates[i] | IEEE80211_RATE_MCS, mode); 198170530Ssam if (IFM_SUBTYPE(mword) != IFM_IEEE80211_MCS) 199170530Ssam continue; 200178354Ssam rate = ieee80211_htrates[rs->rs_rates[i]].ht40_rate_400ns; 201170530Ssam printf("%s%d%sMbps", (i != 0 ? " " : ""), 202170530Ssam rate / 2, ((rate & 0x1) != 0 ? ".5" : "")); 203170530Ssam } 204170530Ssam printf("\n"); 205170530Ssam} 206170530Ssam 207170530Ssamvoid 208170530Ssamieee80211_ht_announce(struct ieee80211com *ic) 209170530Ssam{ 210170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NA)) 211170530Ssam ht_announce(ic, IEEE80211_MODE_11NA, &ieee80211_rateset_11n); 212170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NG)) 213170530Ssam ht_announce(ic, IEEE80211_MODE_11NG, &ieee80211_rateset_11n); 214170530Ssam} 215170530Ssam 216170530Ssamconst struct ieee80211_htrateset * 217170530Ssamieee80211_get_suphtrates(struct ieee80211com *ic, 218170530Ssam const struct ieee80211_channel *c) 219170530Ssam{ 220173273Ssam return &ieee80211_rateset_11n; 221170530Ssam} 222170530Ssam 223170530Ssam/* 224170530Ssam * Receive processing. 225170530Ssam */ 226170530Ssam 227170530Ssam/* 228170530Ssam * Decap the encapsulated A-MSDU frames and dispatch all but 229170530Ssam * the last for delivery. The last frame is returned for 230170530Ssam * delivery via the normal path. 231170530Ssam */ 232170530Ssamstruct mbuf * 233170530Ssamieee80211_decap_amsdu(struct ieee80211_node *ni, struct mbuf *m) 234170530Ssam{ 235178354Ssam struct ieee80211vap *vap = ni->ni_vap; 236173462Ssam int framelen; 237170530Ssam struct mbuf *n; 238170530Ssam 239170530Ssam /* discard 802.3 header inserted by ieee80211_decap */ 240170530Ssam m_adj(m, sizeof(struct ether_header)); 241170530Ssam 242178354Ssam vap->iv_stats.is_amsdu_decap++; 243170530Ssam 244170530Ssam for (;;) { 245170530Ssam /* 246170530Ssam * Decap the first frame, bust it apart from the 247170530Ssam * remainder and deliver. We leave the last frame 248170530Ssam * delivery to the caller (for consistency with other 249170530Ssam * code paths, could also do it here). 250170530Ssam */ 251170530Ssam m = ieee80211_decap1(m, &framelen); 252170530Ssam if (m == NULL) { 253178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 254173462Ssam ni->ni_macaddr, "a-msdu", "%s", "decap failed"); 255178354Ssam vap->iv_stats.is_amsdu_tooshort++; 256170530Ssam return NULL; 257170530Ssam } 258173462Ssam if (m->m_pkthdr.len == framelen) 259170530Ssam break; 260170530Ssam n = m_split(m, framelen, M_NOWAIT); 261170530Ssam if (n == NULL) { 262178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 263170530Ssam ni->ni_macaddr, "a-msdu", 264170530Ssam "%s", "unable to split encapsulated frames"); 265178354Ssam vap->iv_stats.is_amsdu_split++; 266170530Ssam m_freem(m); /* NB: must reclaim */ 267170530Ssam return NULL; 268170530Ssam } 269178354Ssam vap->iv_deliver_data(vap, ni, m); 270170530Ssam 271170530Ssam /* 272170530Ssam * Remove frame contents; each intermediate frame 273170530Ssam * is required to be aligned to a 4-byte boundary. 274170530Ssam */ 275170530Ssam m = n; 276170530Ssam m_adj(m, roundup2(framelen, 4) - framelen); /* padding */ 277170530Ssam } 278170530Ssam return m; /* last delivered by caller */ 279170530Ssam} 280170530Ssam 281170530Ssam/* 282170530Ssam * Purge all frames in the A-MPDU re-order queue. 283170530Ssam */ 284170530Ssamstatic void 285170530Ssamampdu_rx_purge(struct ieee80211_rx_ampdu *rap) 286170530Ssam{ 287170530Ssam struct mbuf *m; 288170530Ssam int i; 289170530Ssam 290170530Ssam for (i = 0; i < rap->rxa_wnd; i++) { 291170530Ssam m = rap->rxa_m[i]; 292170530Ssam if (m != NULL) { 293170530Ssam rap->rxa_m[i] = NULL; 294170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 295170530Ssam m_freem(m); 296170530Ssam if (--rap->rxa_qframes == 0) 297170530Ssam break; 298170530Ssam } 299170530Ssam } 300170530Ssam KASSERT(rap->rxa_qbytes == 0 && rap->rxa_qframes == 0, 301170530Ssam ("lost %u data, %u frames on ampdu rx q", 302170530Ssam rap->rxa_qbytes, rap->rxa_qframes)); 303170530Ssam} 304170530Ssam 305170530Ssam/* 306178354Ssam * Start A-MPDU rx/re-order processing for the specified TID. 307178354Ssam */ 308178354Ssamstatic void 309178354Ssamampdu_rx_start(struct ieee80211_rx_ampdu *rap, int bufsiz, int start) 310178354Ssam{ 311178354Ssam if (rap->rxa_flags & IEEE80211_AGGR_RUNNING) { 312178354Ssam /* 313178354Ssam * AMPDU previously setup and not terminated with a DELBA, 314178354Ssam * flush the reorder q's in case anything remains. 315178354Ssam */ 316178354Ssam ampdu_rx_purge(rap); 317178354Ssam } 318178354Ssam memset(rap, 0, sizeof(*rap)); 319178354Ssam rap->rxa_wnd = (bufsiz == 0) ? 320178354Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 321178354Ssam rap->rxa_start = start; 322178354Ssam rap->rxa_flags |= IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND; 323178354Ssam} 324178354Ssam 325178354Ssam/* 326170530Ssam * Stop A-MPDU rx processing for the specified TID. 327170530Ssam */ 328170530Ssamstatic void 329170530Ssamampdu_rx_stop(struct ieee80211_rx_ampdu *rap) 330170530Ssam{ 331170530Ssam ampdu_rx_purge(rap); 332178354Ssam rap->rxa_flags &= ~(IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND); 333170530Ssam} 334170530Ssam 335170530Ssam/* 336170530Ssam * Dispatch a frame from the A-MPDU reorder queue. The 337170530Ssam * frame is fed back into ieee80211_input marked with an 338183247Ssam * M_AMPDU_MPDU flag so it doesn't come back to us (it also 339170530Ssam * permits ieee80211_input to optimize re-processing). 340170530Ssam */ 341170530Ssamstatic __inline void 342170530Ssamampdu_dispatch(struct ieee80211_node *ni, struct mbuf *m) 343170530Ssam{ 344183247Ssam m->m_flags |= M_AMPDU_MPDU; /* bypass normal processing */ 345183247Ssam /* NB: rssi, noise, and rstamp are ignored w/ M_AMPDU_MPDU set */ 346178354Ssam (void) ieee80211_input(ni, m, 0, 0, 0); 347170530Ssam} 348170530Ssam 349170530Ssam/* 350170530Ssam * Dispatch as many frames as possible from the re-order queue. 351170530Ssam * Frames will always be "at the front"; we process all frames 352170530Ssam * up to the first empty slot in the window. On completion we 353170530Ssam * cleanup state if there are still pending frames in the current 354170530Ssam * BA window. We assume the frame at slot 0 is already handled 355170530Ssam * by the caller; we always start at slot 1. 356170530Ssam */ 357170530Ssamstatic void 358170530Ssamampdu_rx_dispatch(struct ieee80211_rx_ampdu *rap, struct ieee80211_node *ni) 359170530Ssam{ 360178354Ssam struct ieee80211vap *vap = ni->ni_vap; 361170530Ssam struct mbuf *m; 362170530Ssam int i; 363170530Ssam 364170530Ssam /* flush run of frames */ 365170530Ssam for (i = 1; i < rap->rxa_wnd; i++) { 366170530Ssam m = rap->rxa_m[i]; 367170530Ssam if (m == NULL) 368170530Ssam break; 369170530Ssam rap->rxa_m[i] = NULL; 370170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 371170530Ssam rap->rxa_qframes--; 372170530Ssam 373170530Ssam ampdu_dispatch(ni, m); 374170530Ssam } 375170530Ssam /* 376170530Ssam * If frames remain, copy the mbuf pointers down so 377170530Ssam * they correspond to the offsets in the new window. 378170530Ssam */ 379170530Ssam if (rap->rxa_qframes != 0) { 380170530Ssam int n = rap->rxa_qframes, j; 381170530Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 382170530Ssam if (rap->rxa_m[j] != NULL) { 383170530Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 384170530Ssam rap->rxa_m[j] = NULL; 385170530Ssam if (--n == 0) 386170530Ssam break; 387170530Ssam } 388170530Ssam } 389170530Ssam KASSERT(n == 0, ("lost %d frames", n)); 390178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 391170530Ssam } 392173273Ssam /* 393173273Ssam * Adjust the start of the BA window to 394173273Ssam * reflect the frames just dispatched. 395173273Ssam */ 396173273Ssam rap->rxa_start = IEEE80211_SEQ_ADD(rap->rxa_start, i); 397178354Ssam vap->iv_stats.is_ampdu_rx_oor += i; 398170530Ssam} 399170530Ssam 400173273Ssam#ifdef IEEE80211_AMPDU_AGE 401170530Ssam/* 402173273Ssam * Dispatch all frames in the A-MPDU re-order queue. 403170530Ssam */ 404170530Ssamstatic void 405173273Ssamampdu_rx_flush(struct ieee80211_node *ni, struct ieee80211_rx_ampdu *rap) 406170530Ssam{ 407178354Ssam struct ieee80211vap *vap = ni->ni_vap; 408170530Ssam struct mbuf *m; 409170530Ssam int i; 410170530Ssam 411173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 412170530Ssam m = rap->rxa_m[i]; 413170530Ssam if (m == NULL) 414170530Ssam continue; 415170530Ssam rap->rxa_m[i] = NULL; 416170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 417173273Ssam rap->rxa_qframes--; 418178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 419173273Ssam 420170530Ssam ampdu_dispatch(ni, m); 421173273Ssam if (rap->rxa_qframes == 0) 422170530Ssam break; 423170530Ssam } 424170530Ssam} 425173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 426170530Ssam 427170530Ssam/* 428173273Ssam * Dispatch all frames in the A-MPDU re-order queue 429173273Ssam * preceding the specified sequence number. This logic 430173273Ssam * handles window moves due to a received MSDU or BAR. 431173273Ssam */ 432173273Ssamstatic void 433173273Ssamampdu_rx_flush_upto(struct ieee80211_node *ni, 434173273Ssam struct ieee80211_rx_ampdu *rap, ieee80211_seq winstart) 435173273Ssam{ 436178354Ssam struct ieee80211vap *vap = ni->ni_vap; 437173273Ssam struct mbuf *m; 438173273Ssam ieee80211_seq seqno; 439173273Ssam int i; 440173273Ssam 441173273Ssam /* 442173273Ssam * Flush any complete MSDU's with a sequence number lower 443173273Ssam * than winstart. Gaps may exist. Note that we may actually 444173273Ssam * dispatch frames past winstart if a run continues; this is 445173273Ssam * an optimization that avoids having to do a separate pass 446173273Ssam * to dispatch frames after moving the BA window start. 447173273Ssam */ 448173273Ssam seqno = rap->rxa_start; 449173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 450173273Ssam m = rap->rxa_m[i]; 451173273Ssam if (m != NULL) { 452173273Ssam rap->rxa_m[i] = NULL; 453173273Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 454173273Ssam rap->rxa_qframes--; 455178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 456173273Ssam 457173273Ssam ampdu_dispatch(ni, m); 458173273Ssam } else { 459173273Ssam if (!IEEE80211_SEQ_BA_BEFORE(seqno, winstart)) 460173273Ssam break; 461173273Ssam } 462173273Ssam seqno = IEEE80211_SEQ_INC(seqno); 463173273Ssam } 464173273Ssam /* 465173273Ssam * If frames remain, copy the mbuf pointers down so 466173273Ssam * they correspond to the offsets in the new window. 467173273Ssam */ 468173273Ssam if (rap->rxa_qframes != 0) { 469173273Ssam int n = rap->rxa_qframes, j; 470178354Ssam 471178354Ssam /* NB: this loop assumes i > 0 and/or rxa_m[0] is NULL */ 472178354Ssam KASSERT(rap->rxa_m[0] == NULL, 473178354Ssam ("%s: BA window slot 0 occupied", __func__)); 474173273Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 475173273Ssam if (rap->rxa_m[j] != NULL) { 476173273Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 477173273Ssam rap->rxa_m[j] = NULL; 478173273Ssam if (--n == 0) 479173273Ssam break; 480173273Ssam } 481173273Ssam } 482173273Ssam KASSERT(n == 0, ("%s: lost %d frames, qframes %d off %d " 483173273Ssam "BA win <%d:%d> winstart %d", 484173273Ssam __func__, n, rap->rxa_qframes, i, rap->rxa_start, 485173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 486173273Ssam winstart)); 487178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 488173273Ssam } 489173273Ssam /* 490173273Ssam * Move the start of the BA window; we use the 491173273Ssam * sequence number of the last MSDU that was 492173273Ssam * passed up the stack+1 or winstart if stopped on 493173273Ssam * a gap in the reorder buffer. 494173273Ssam */ 495173273Ssam rap->rxa_start = seqno; 496173273Ssam} 497173273Ssam 498173273Ssam/* 499170530Ssam * Process a received QoS data frame for an HT station. Handle 500170530Ssam * A-MPDU reordering: if this frame is received out of order 501170530Ssam * and falls within the BA window hold onto it. Otherwise if 502173273Ssam * this frame completes a run, flush any pending frames. We 503170530Ssam * return 1 if the frame is consumed. A 0 is returned if 504170530Ssam * the frame should be processed normally by the caller. 505170530Ssam */ 506170530Ssamint 507170530Ssamieee80211_ampdu_reorder(struct ieee80211_node *ni, struct mbuf *m) 508170530Ssam{ 509170530Ssam#define IEEE80211_FC0_QOSDATA \ 510170530Ssam (IEEE80211_FC0_TYPE_DATA|IEEE80211_FC0_SUBTYPE_QOS|IEEE80211_FC0_VERSION_0) 511173273Ssam#define PROCESS 0 /* caller should process frame */ 512173273Ssam#define CONSUMED 1 /* frame consumed, caller does nothing */ 513178354Ssam struct ieee80211vap *vap = ni->ni_vap; 514170530Ssam struct ieee80211_qosframe *wh; 515170530Ssam struct ieee80211_rx_ampdu *rap; 516170530Ssam ieee80211_seq rxseq; 517170530Ssam uint8_t tid; 518170530Ssam int off; 519170530Ssam 520183247Ssam KASSERT((m->m_flags & (M_AMPDU | M_AMPDU_MPDU)) == M_AMPDU, 521183247Ssam ("!a-mpdu or already re-ordered, flags 0x%x", m->m_flags)); 522170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 523170530Ssam 524170530Ssam /* NB: m_len known to be sufficient */ 525170530Ssam wh = mtod(m, struct ieee80211_qosframe *); 526183247Ssam if (wh->i_fc[0] != IEEE80211_FC0_QOSDATA) { 527183247Ssam /* 528183247Ssam * Not QoS data, shouldn't get here but just 529183247Ssam * return it to the caller for processing. 530183247Ssam */ 531183247Ssam return PROCESS; 532183247Ssam } 533170530Ssam 534173273Ssam if ((wh->i_fc[1] & IEEE80211_FC1_DIR_MASK) == IEEE80211_FC1_DIR_DSTODS) 535173273Ssam tid = ((struct ieee80211_qosframe_addr4 *)wh)->i_qos[0]; 536173273Ssam else 537173273Ssam tid = wh->i_qos[0]; 538173273Ssam tid &= IEEE80211_QOS_TID; 539170530Ssam rap = &ni->ni_rx_ampdu[tid]; 540170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 541170530Ssam /* 542170530Ssam * No ADDBA request yet, don't touch. 543170530Ssam */ 544173273Ssam return PROCESS; 545170530Ssam } 546182827Ssam rxseq = le16toh(*(uint16_t *)wh->i_seq); 547182827Ssam if ((rxseq & IEEE80211_SEQ_FRAG_MASK) != 0) { 548182827Ssam /* 549182827Ssam * Fragments are not allowed; toss. 550182827Ssam */ 551182827Ssam IEEE80211_DISCARD_MAC(vap, 552182827Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 553182827Ssam "A-MPDU", "fragment, rxseq 0x%x tid %u%s", rxseq, tid, 554182827Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 555182827Ssam vap->iv_stats.is_ampdu_rx_drop++; 556182827Ssam IEEE80211_NODE_STAT(ni, rx_drop); 557182827Ssam m_freem(m); 558182827Ssam return CONSUMED; 559182827Ssam } 560182827Ssam rxseq >>= IEEE80211_SEQ_SEQ_SHIFT; 561173273Ssam rap->rxa_nframes++; 562173273Ssamagain: 563170530Ssam if (rxseq == rap->rxa_start) { 564170530Ssam /* 565170530Ssam * First frame in window. 566170530Ssam */ 567170530Ssam if (rap->rxa_qframes != 0) { 568170530Ssam /* 569170530Ssam * Dispatch as many packets as we can. 570170530Ssam */ 571170530Ssam KASSERT(rap->rxa_m[0] == NULL, ("unexpected dup")); 572170530Ssam ampdu_dispatch(ni, m); 573170530Ssam ampdu_rx_dispatch(rap, ni); 574173273Ssam return CONSUMED; 575170530Ssam } else { 576170530Ssam /* 577170530Ssam * In order; advance window and notify 578170530Ssam * caller to dispatch directly. 579170530Ssam */ 580170530Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 581173273Ssam return PROCESS; 582170530Ssam } 583170530Ssam } 584170530Ssam /* 585173273Ssam * Frame is out of order; store if in the BA window. 586170530Ssam */ 587170530Ssam /* calculate offset in BA window */ 588170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 589173273Ssam if (off < rap->rxa_wnd) { 590170530Ssam /* 591173273Ssam * Common case (hopefully): in the BA window. 592173273Ssam * Sec 9.10.7.6 a) (D2.04 p.118 line 47) 593173273Ssam */ 594173273Ssam#ifdef IEEE80211_AMPDU_AGE 595173273Ssam /* 596173273Ssam * Check for frames sitting too long in the reorder queue. 597173273Ssam * This should only ever happen if frames are not delivered 598173273Ssam * without the sender otherwise notifying us (e.g. with a 599173273Ssam * BAR to move the window). Typically this happens because 600173273Ssam * of vendor bugs that cause the sequence number to jump. 601173273Ssam * When this happens we get a gap in the reorder queue that 602173273Ssam * leaves frame sitting on the queue until they get pushed 603173273Ssam * out due to window moves. When the vendor does not send 604173273Ssam * BAR this move only happens due to explicit packet sends 605170530Ssam * 606173273Ssam * NB: we only track the time of the oldest frame in the 607173273Ssam * reorder q; this means that if we flush we might push 608173273Ssam * frames that still "new"; if this happens then subsequent 609173273Ssam * frames will result in BA window moves which cost something 610173273Ssam * but is still better than a big throughput dip. 611170530Ssam */ 612173273Ssam if (rap->rxa_qframes != 0) { 613173273Ssam /* XXX honor batimeout? */ 614173273Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 615173273Ssam /* 616173273Ssam * Too long since we received the first 617173273Ssam * frame; flush the reorder buffer. 618173273Ssam */ 619173273Ssam if (rap->rxa_qframes != 0) { 620178354Ssam vap->iv_stats.is_ampdu_rx_age += 621173273Ssam rap->rxa_qframes; 622173273Ssam ampdu_rx_flush(ni, rap); 623173273Ssam } 624173273Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 625173273Ssam return PROCESS; 626173273Ssam } 627173273Ssam } else { 628173273Ssam /* 629173273Ssam * First frame, start aging timer. 630173273Ssam */ 631173273Ssam rap->rxa_age = ticks; 632173273Ssam } 633173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 634173273Ssam /* save packet */ 635173273Ssam if (rap->rxa_m[off] == NULL) { 636173273Ssam rap->rxa_m[off] = m; 637173273Ssam rap->rxa_qframes++; 638173273Ssam rap->rxa_qbytes += m->m_pkthdr.len; 639178354Ssam vap->iv_stats.is_ampdu_rx_reorder++; 640173273Ssam } else { 641178354Ssam IEEE80211_DISCARD_MAC(vap, 642173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 643173273Ssam ni->ni_macaddr, "a-mpdu duplicate", 644173273Ssam "seqno %u tid %u BA win <%u:%u>", 645173273Ssam rxseq, tid, rap->rxa_start, 646173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1)); 647178354Ssam vap->iv_stats.is_rx_dup++; 648173273Ssam IEEE80211_NODE_STAT(ni, rx_dup); 649173273Ssam m_freem(m); 650173273Ssam } 651173273Ssam return CONSUMED; 652173273Ssam } 653173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 654173273Ssam /* 655173273Ssam * Outside the BA window, but within range; 656173273Ssam * flush the reorder q and move the window. 657173273Ssam * Sec 9.10.7.6 b) (D2.04 p.118 line 60) 658173273Ssam */ 659178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 660173273Ssam "move BA win <%u:%u> (%u frames) rxseq %u tid %u", 661170530Ssam rap->rxa_start, 662173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 663170530Ssam rap->rxa_qframes, rxseq, tid); 664178354Ssam vap->iv_stats.is_ampdu_rx_move++; 665170530Ssam 666173273Ssam /* 667173273Ssam * The spec says to flush frames up to but not including: 668173273Ssam * WinStart_B = rxseq - rap->rxa_wnd + 1 669173273Ssam * Then insert the frame or notify the caller to process 670173273Ssam * it immediately. We can safely do this by just starting 671173273Ssam * over again because we know the frame will now be within 672173273Ssam * the BA window. 673173273Ssam */ 674173273Ssam /* NB: rxa_wnd known to be >0 */ 675173273Ssam ampdu_rx_flush_upto(ni, rap, 676173273Ssam IEEE80211_SEQ_SUB(rxseq, rap->rxa_wnd-1)); 677173273Ssam goto again; 678170530Ssam } else { 679170530Ssam /* 680173273Ssam * Outside the BA window and out of range; toss. 681173273Ssam * Sec 9.10.7.6 c) (D2.04 p.119 line 16) 682170530Ssam */ 683178354Ssam IEEE80211_DISCARD_MAC(vap, 684173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 685178354Ssam "MPDU", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 686173273Ssam rap->rxa_start, 687173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 688173273Ssam rap->rxa_qframes, rxseq, tid, 689173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 690178354Ssam vap->iv_stats.is_ampdu_rx_drop++; 691173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 692170530Ssam m_freem(m); 693173273Ssam return CONSUMED; 694170530Ssam } 695173273Ssam#undef CONSUMED 696173273Ssam#undef PROCESS 697170530Ssam#undef IEEE80211_FC0_QOSDATA 698170530Ssam} 699170530Ssam 700170530Ssam/* 701170530Ssam * Process a BAR ctl frame. Dispatch all frames up to 702170530Ssam * the sequence number of the frame. If this frame is 703173273Ssam * out of range it's discarded. 704170530Ssam */ 705170530Ssamvoid 706170530Ssamieee80211_recv_bar(struct ieee80211_node *ni, struct mbuf *m0) 707170530Ssam{ 708178354Ssam struct ieee80211vap *vap = ni->ni_vap; 709170530Ssam struct ieee80211_frame_bar *wh; 710170530Ssam struct ieee80211_rx_ampdu *rap; 711170530Ssam ieee80211_seq rxseq; 712170530Ssam int tid, off; 713170530Ssam 714173273Ssam if (!ieee80211_recv_bar_ena) { 715173273Ssam#if 0 716178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_11N, 717173273Ssam ni->ni_macaddr, "BAR", "%s", "processing disabled"); 718173273Ssam#endif 719178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 720173273Ssam return; 721173273Ssam } 722170530Ssam wh = mtod(m0, struct ieee80211_frame_bar *); 723170530Ssam /* XXX check basic BAR */ 724170530Ssam tid = MS(le16toh(wh->i_ctl), IEEE80211_BAR_TID); 725170530Ssam rap = &ni->ni_rx_ampdu[tid]; 726170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 727170530Ssam /* 728170530Ssam * No ADDBA request yet, don't touch. 729170530Ssam */ 730178354Ssam IEEE80211_DISCARD_MAC(vap, 731170530Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 732170530Ssam ni->ni_macaddr, "BAR", "no BA stream, tid %u", tid); 733178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 734170530Ssam return; 735170530Ssam } 736178354Ssam vap->iv_stats.is_ampdu_bar_rx++; 737170530Ssam rxseq = le16toh(wh->i_seq) >> IEEE80211_SEQ_SEQ_SHIFT; 738173273Ssam if (rxseq == rap->rxa_start) 739173273Ssam return; 740170530Ssam /* calculate offset in BA window */ 741170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 742173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 743170530Ssam /* 744173273Ssam * Flush the reorder q up to rxseq and move the window. 745173273Ssam * Sec 9.10.7.6 a) (D2.04 p.119 line 22) 746170530Ssam */ 747178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 748173273Ssam "BAR moves BA win <%u:%u> (%u frames) rxseq %u tid %u", 749170530Ssam rap->rxa_start, 750173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 751173273Ssam rap->rxa_qframes, rxseq, tid); 752178354Ssam vap->iv_stats.is_ampdu_bar_move++; 753173273Ssam 754173273Ssam ampdu_rx_flush_upto(ni, rap, rxseq); 755173273Ssam if (off >= rap->rxa_wnd) { 756173273Ssam /* 757173273Ssam * BAR specifies a window start to the right of BA 758173273Ssam * window; we must move it explicitly since 759173273Ssam * ampdu_rx_flush_upto will not. 760173273Ssam */ 761173273Ssam rap->rxa_start = rxseq; 762170530Ssam } 763173273Ssam } else { 764170530Ssam /* 765173273Ssam * Out of range; toss. 766173273Ssam * Sec 9.10.7.6 b) (D2.04 p.119 line 41) 767170530Ssam */ 768178354Ssam IEEE80211_DISCARD_MAC(vap, 769173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 770173273Ssam "BAR", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 771173273Ssam rap->rxa_start, 772173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 773173273Ssam rap->rxa_qframes, rxseq, tid, 774173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 775178354Ssam vap->iv_stats.is_ampdu_bar_oow++; 776173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 777170530Ssam } 778170530Ssam} 779170530Ssam 780170530Ssam/* 781170530Ssam * Setup HT-specific state in a node. Called only 782170530Ssam * when HT use is negotiated so we don't do extra 783170530Ssam * work for temporary and/or legacy sta's. 784170530Ssam */ 785170530Ssamvoid 786170530Ssamieee80211_ht_node_init(struct ieee80211_node *ni, const uint8_t *htcap) 787170530Ssam{ 788170530Ssam struct ieee80211_tx_ampdu *tap; 789170530Ssam int ac; 790170530Ssam 791173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 792173273Ssam /* 793173273Ssam * Clean AMPDU state on re-associate. This handles the case 794173273Ssam * where a station leaves w/o notifying us and then returns 795173273Ssam * before node is reaped for inactivity. 796173273Ssam */ 797173273Ssam ieee80211_ht_node_cleanup(ni); 798173273Ssam } 799170530Ssam ieee80211_parse_htcap(ni, htcap); 800170530Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 801170530Ssam tap = &ni->ni_tx_ampdu[ac]; 802170530Ssam tap->txa_ac = ac; 803173273Ssam /* NB: further initialization deferred */ 804170530Ssam } 805173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 806170530Ssam} 807170530Ssam 808170530Ssam/* 809170530Ssam * Cleanup HT-specific state in a node. Called only 810170530Ssam * when HT use has been marked. 811170530Ssam */ 812170530Ssamvoid 813170530Ssamieee80211_ht_node_cleanup(struct ieee80211_node *ni) 814170530Ssam{ 815170530Ssam struct ieee80211com *ic = ni->ni_ic; 816170530Ssam int i; 817170530Ssam 818170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT node")); 819170530Ssam 820170530Ssam /* XXX optimize this */ 821170530Ssam for (i = 0; i < WME_NUM_AC; i++) { 822170530Ssam struct ieee80211_tx_ampdu *tap = &ni->ni_tx_ampdu[i]; 823173273Ssam if (tap->txa_flags & IEEE80211_AGGR_SETUP) { 824173273Ssam /* 825173273Ssam * Stop BA stream if setup so driver has a chance 826173273Ssam * to reclaim any resources it might have allocated. 827173273Ssam */ 828170530Ssam ic->ic_addba_stop(ni, &ni->ni_tx_ampdu[i]); 829178354Ssam tap->txa_lastsample = 0; 830178354Ssam tap->txa_avgpps = 0; 831173273Ssam /* NB: clearing NAK means we may re-send ADDBA */ 832173273Ssam tap->txa_flags &= 833173273Ssam ~(IEEE80211_AGGR_SETUP | IEEE80211_AGGR_NAK); 834173273Ssam } 835170530Ssam } 836170530Ssam for (i = 0; i < WME_NUM_TID; i++) 837170530Ssam ampdu_rx_stop(&ni->ni_rx_ampdu[i]); 838170530Ssam 839170530Ssam ni->ni_htcap = 0; 840182828Ssam ni->ni_flags &= ~IEEE80211_NODE_HT_ALL; 841170530Ssam} 842170530Ssam 843178354Ssam/* 844178354Ssam * Age out HT resources for a station. 845178354Ssam */ 846178354Ssamvoid 847178354Ssamieee80211_ht_node_age(struct ieee80211_node *ni) 848178354Ssam{ 849178354Ssam#ifdef IEEE80211_AMPDU_AGE 850178354Ssam struct ieee80211vap *vap = ni->ni_vap; 851178354Ssam uint8_t tid; 852178354Ssam#endif 853178354Ssam 854178354Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 855178354Ssam 856178354Ssam#ifdef IEEE80211_AMPDU_AGE 857178354Ssam for (tid = 0; tid < WME_NUM_TID; tid++) { 858178354Ssam struct ieee80211_rx_ampdu *rap; 859178354Ssam 860178354Ssam rap = &ni->ni_rx_ampdu[tid]; 861178354Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) 862178354Ssam continue; 863178354Ssam if (rap->rxa_qframes == 0) 864178354Ssam continue; 865178354Ssam /* 866178354Ssam * Check for frames sitting too long in the reorder queue. 867178354Ssam * See above for more details on what's happening here. 868178354Ssam */ 869178354Ssam /* XXX honor batimeout? */ 870178354Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 871178354Ssam /* 872178354Ssam * Too long since we received the first 873178354Ssam * frame; flush the reorder buffer. 874178354Ssam */ 875178354Ssam vap->iv_stats.is_ampdu_rx_age += rap->rxa_qframes; 876178354Ssam ampdu_rx_flush(ni, rap); 877178354Ssam } 878178354Ssam } 879178354Ssam#endif /* IEEE80211_AMPDU_AGE */ 880178354Ssam} 881178354Ssam 882173273Ssamstatic struct ieee80211_channel * 883173273Ssamfindhtchan(struct ieee80211com *ic, struct ieee80211_channel *c, int htflags) 884173273Ssam{ 885173273Ssam return ieee80211_find_channel(ic, c->ic_freq, 886173273Ssam (c->ic_flags &~ IEEE80211_CHAN_HT) | htflags); 887173273Ssam} 888173273Ssam 889173273Ssam/* 890173273Ssam * Adjust a channel to be HT/non-HT according to the vap's configuration. 891173273Ssam */ 892173273Ssamstruct ieee80211_channel * 893173273Ssamieee80211_ht_adjust_channel(struct ieee80211com *ic, 894173273Ssam struct ieee80211_channel *chan, int flags) 895173273Ssam{ 896173273Ssam struct ieee80211_channel *c; 897173273Ssam 898173273Ssam if (flags & IEEE80211_FEXT_HT) { 899173273Ssam /* promote to HT if possible */ 900173273Ssam if (flags & IEEE80211_FEXT_USEHT40) { 901173273Ssam if (!IEEE80211_IS_CHAN_HT40(chan)) { 902173273Ssam /* NB: arbitrarily pick ht40+ over ht40- */ 903173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT40U); 904173273Ssam if (c == NULL) 905173273Ssam c = findhtchan(ic, chan, 906173273Ssam IEEE80211_CHAN_HT40D); 907173273Ssam if (c == NULL) 908173273Ssam c = findhtchan(ic, chan, 909173273Ssam IEEE80211_CHAN_HT20); 910173273Ssam if (c != NULL) 911173273Ssam chan = c; 912173273Ssam } 913173273Ssam } else if (!IEEE80211_IS_CHAN_HT20(chan)) { 914173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT20); 915173273Ssam if (c != NULL) 916173273Ssam chan = c; 917173273Ssam } 918173273Ssam } else if (IEEE80211_IS_CHAN_HT(chan)) { 919173273Ssam /* demote to legacy, HT use is disabled */ 920173273Ssam c = ieee80211_find_channel(ic, chan->ic_freq, 921173273Ssam chan->ic_flags &~ IEEE80211_CHAN_HT); 922173273Ssam if (c != NULL) 923173273Ssam chan = c; 924173273Ssam } 925173273Ssam return chan; 926173273Ssam} 927173273Ssam 928173273Ssam/* 929173273Ssam * Setup HT-specific state for a legacy WDS peer. 930173273Ssam */ 931173273Ssamvoid 932173273Ssamieee80211_ht_wds_init(struct ieee80211_node *ni) 933173273Ssam{ 934178354Ssam struct ieee80211vap *vap = ni->ni_vap; 935173273Ssam struct ieee80211_tx_ampdu *tap; 936173273Ssam int ac; 937173273Ssam 938178354Ssam KASSERT(vap->iv_flags_ext & IEEE80211_FEXT_HT, ("no HT requested")); 939173273Ssam 940173273Ssam /* XXX check scan cache in case peer has an ap and we have info */ 941173273Ssam /* 942173273Ssam * If setup with a legacy channel; locate an HT channel. 943173273Ssam * Otherwise if the inherited channel (from a companion 944173273Ssam * AP) is suitable use it so we use the same location 945173273Ssam * for the extension channel). 946173273Ssam */ 947178354Ssam ni->ni_chan = ieee80211_ht_adjust_channel(ni->ni_ic, 948178354Ssam ni->ni_chan, ieee80211_htchanflags(ni->ni_chan)); 949173273Ssam 950173273Ssam ni->ni_htcap = 0; 951178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) 952173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI20; 953173273Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) { 954173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_CHWIDTH40; 955173273Ssam ni->ni_chw = 40; 956173273Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 957173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_ABOVE; 958173273Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 959173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_BELOW; 960178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) 961173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI40; 962173273Ssam } else { 963173273Ssam ni->ni_chw = 20; 964173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_NONE; 965173273Ssam } 966173273Ssam ni->ni_htctlchan = ni->ni_chan->ic_ieee; 967173273Ssam 968173273Ssam ni->ni_htopmode = 0; /* XXX need protection state */ 969173273Ssam ni->ni_htstbc = 0; /* XXX need info */ 970173273Ssam 971173273Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 972173273Ssam tap = &ni->ni_tx_ampdu[ac]; 973173273Ssam tap->txa_ac = ac; 974173273Ssam } 975173273Ssam /* NB: AMPDU tx/rx governed by IEEE80211_FEXT_AMPDU_{TX,RX} */ 976173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 977173273Ssam} 978173273Ssam 979173273Ssam/* 980173273Ssam * Notify hostap vaps of a change in the HTINFO ie. 981173273Ssam */ 982173273Ssamstatic void 983173273Ssamhtinfo_notify(struct ieee80211com *ic) 984173273Ssam{ 985178354Ssam struct ieee80211vap *vap; 986178354Ssam int first = 1; 987178354Ssam 988178354Ssam IEEE80211_LOCK_ASSERT(ic); 989178354Ssam 990178354Ssam TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 991178354Ssam if (vap->iv_opmode != IEEE80211_M_HOSTAP) 992178354Ssam continue; 993178354Ssam if (first) { 994178354Ssam IEEE80211_NOTE(vap, 995178354Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, 996178354Ssam vap->iv_bss, 997178354Ssam "HT bss occupancy change: %d sta, %d ht, " 998178354Ssam "%d ht40%s, HT protmode now 0x%x" 999178354Ssam , ic->ic_sta_assoc 1000178354Ssam , ic->ic_ht_sta_assoc 1001178354Ssam , ic->ic_ht40_sta_assoc 1002178354Ssam , (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) ? 1003178354Ssam ", non-HT sta present" : "" 1004178354Ssam , ic->ic_curhtprotmode); 1005178354Ssam first = 0; 1006178354Ssam } 1007178354Ssam ieee80211_beacon_notify(vap, IEEE80211_BEACON_HTINFO); 1008178354Ssam } 1009173273Ssam} 1010173273Ssam 1011173273Ssam/* 1012173273Ssam * Calculate HT protection mode from current 1013173273Ssam * state and handle updates. 1014173273Ssam */ 1015173273Ssamstatic void 1016173273Ssamhtinfo_update(struct ieee80211com *ic) 1017173273Ssam{ 1018173273Ssam uint8_t protmode; 1019173273Ssam 1020178354Ssam if (ic->ic_sta_assoc != ic->ic_ht_sta_assoc) { 1021178354Ssam protmode = IEEE80211_HTINFO_OPMODE_MIXED 1022178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1023178354Ssam } else if (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) { 1024173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PROTOPT 1025178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1026178354Ssam } else if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 1027178354Ssam IEEE80211_IS_CHAN_HT40(ic->ic_bsschan) && 1028173273Ssam ic->ic_sta_assoc != ic->ic_ht40_sta_assoc) { 1029173273Ssam protmode = IEEE80211_HTINFO_OPMODE_HT20PR; 1030173273Ssam } else { 1031173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PURE; 1032173273Ssam } 1033173273Ssam if (protmode != ic->ic_curhtprotmode) { 1034173273Ssam ic->ic_curhtprotmode = protmode; 1035173273Ssam htinfo_notify(ic); 1036173273Ssam } 1037173273Ssam} 1038173273Ssam 1039173273Ssam/* 1040173273Ssam * Handle an HT station joining a BSS. 1041173273Ssam */ 1042173273Ssamvoid 1043173273Ssamieee80211_ht_node_join(struct ieee80211_node *ni) 1044173273Ssam{ 1045173273Ssam struct ieee80211com *ic = ni->ni_ic; 1046173273Ssam 1047173273Ssam IEEE80211_LOCK_ASSERT(ic); 1048173273Ssam 1049173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1050173273Ssam ic->ic_ht_sta_assoc++; 1051173273Ssam if (ni->ni_chw == 40) 1052173273Ssam ic->ic_ht40_sta_assoc++; 1053173273Ssam } 1054173273Ssam htinfo_update(ic); 1055173273Ssam} 1056173273Ssam 1057173273Ssam/* 1058173273Ssam * Handle an HT station leaving a BSS. 1059173273Ssam */ 1060173273Ssamvoid 1061173273Ssamieee80211_ht_node_leave(struct ieee80211_node *ni) 1062173273Ssam{ 1063173273Ssam struct ieee80211com *ic = ni->ni_ic; 1064173273Ssam 1065173273Ssam IEEE80211_LOCK_ASSERT(ic); 1066173273Ssam 1067173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1068173273Ssam ic->ic_ht_sta_assoc--; 1069173273Ssam if (ni->ni_chw == 40) 1070173273Ssam ic->ic_ht40_sta_assoc--; 1071173273Ssam } 1072173273Ssam htinfo_update(ic); 1073173273Ssam} 1074173273Ssam 1075173273Ssam/* 1076173273Ssam * Public version of htinfo_update; used for processing 1077178354Ssam * beacon frames from overlapping bss. 1078178354Ssam * 1079178354Ssam * Caller can specify either IEEE80211_HTINFO_OPMODE_MIXED 1080178354Ssam * (on receipt of a beacon that advertises MIXED) or 1081178354Ssam * IEEE80211_HTINFO_OPMODE_PROTOPT (on receipt of a beacon 1082178354Ssam * from an overlapping legacy bss). We treat MIXED with 1083178354Ssam * a higher precedence than PROTOPT (i.e. we will not change 1084178354Ssam * change PROTOPT -> MIXED; only MIXED -> PROTOPT). This 1085178354Ssam * corresponds to how we handle things in htinfo_update. 1086173273Ssam */ 1087173273Ssamvoid 1088178354Ssamieee80211_htprot_update(struct ieee80211com *ic, int protmode) 1089173273Ssam{ 1090178354Ssam#define OPMODE(x) SM(x, IEEE80211_HTINFO_OPMODE) 1091183246Ssam IEEE80211_LOCK(ic); 1092178354Ssam 1093178354Ssam /* track non-HT station presence */ 1094178354Ssam KASSERT(protmode & IEEE80211_HTINFO_NONHT_PRESENT, 1095183246Ssam ("protmode 0x%x", protmode)); 1096178354Ssam ic->ic_flags_ext |= IEEE80211_FEXT_NONHT_PR; 1097178354Ssam ic->ic_lastnonht = ticks; 1098178354Ssam 1099183246Ssam if (protmode != ic->ic_curhtprotmode && 1100183246Ssam (OPMODE(ic->ic_curhtprotmode) != IEEE80211_HTINFO_OPMODE_MIXED || 1101183246Ssam OPMODE(protmode) == IEEE80211_HTINFO_OPMODE_PROTOPT)) { 1102183246Ssam /* push beacon update */ 1103183246Ssam ic->ic_curhtprotmode = protmode; 1104183246Ssam htinfo_notify(ic); 1105183246Ssam } 1106181197Ssam IEEE80211_UNLOCK(ic); 1107178354Ssam#undef OPMODE 1108173273Ssam} 1109173273Ssam 1110173273Ssam/* 1111173273Ssam * Time out presence of an overlapping bss with non-HT 1112173273Ssam * stations. When operating in hostap mode we listen for 1113173273Ssam * beacons from other stations and if we identify a non-HT 1114173273Ssam * station is present we update the opmode field of the 1115173273Ssam * HTINFO ie. To identify when all non-HT stations are 1116173273Ssam * gone we time out this condition. 1117173273Ssam */ 1118173273Ssamvoid 1119173273Ssamieee80211_ht_timeout(struct ieee80211com *ic) 1120173273Ssam{ 1121173273Ssam IEEE80211_LOCK_ASSERT(ic); 1122173273Ssam 1123173273Ssam if ((ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) && 1124173273Ssam time_after(ticks, ic->ic_lastnonht + IEEE80211_NONHT_PRESENT_AGE)) { 1125173273Ssam#if 0 1126178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1127173273Ssam "%s", "time out non-HT STA present on channel"); 1128173273Ssam#endif 1129173273Ssam ic->ic_flags_ext &= ~IEEE80211_FEXT_NONHT_PR; 1130173273Ssam htinfo_update(ic); 1131173273Ssam } 1132173273Ssam} 1133173273Ssam 1134170530Ssam/* unalligned little endian access */ 1135170530Ssam#define LE_READ_2(p) \ 1136170530Ssam ((uint16_t) \ 1137170530Ssam ((((const uint8_t *)(p))[0] ) | \ 1138170530Ssam (((const uint8_t *)(p))[1] << 8))) 1139170530Ssam 1140170530Ssam/* 1141170530Ssam * Process an 802.11n HT capabilities ie. 1142170530Ssam */ 1143170530Ssamvoid 1144170530Ssamieee80211_parse_htcap(struct ieee80211_node *ni, const uint8_t *ie) 1145170530Ssam{ 1146178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1147170530Ssam 1148170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) { 1149170530Ssam /* 1150170530Ssam * Station used Vendor OUI ie to associate; 1151170530Ssam * mark the node so when we respond we'll use 1152170530Ssam * the Vendor OUI's and not the standard ie's. 1153170530Ssam */ 1154170530Ssam ni->ni_flags |= IEEE80211_NODE_HTCOMPAT; 1155170530Ssam ie += 4; 1156170530Ssam } else 1157170530Ssam ni->ni_flags &= ~IEEE80211_NODE_HTCOMPAT; 1158170530Ssam 1159170530Ssam ni->ni_htcap = LE_READ_2(ie + 1160170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_cap)); 1161170530Ssam ni->ni_htparam = ie[__offsetof(struct ieee80211_ie_htcap, hc_param)]; 1162173273Ssam /* XXX needed or will ieee80211_parse_htinfo always be called? */ 1163173273Ssam ni->ni_chw = (ni->ni_htcap & IEEE80211_HTCAP_CHWIDTH40) && 1164178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) ? 40 : 20; 1165170530Ssam} 1166170530Ssam 1167170530Ssam/* 1168173273Ssam * Process an 802.11n HT info ie and update the node state. 1169173273Ssam * Note that we handle use this information to identify the 1170173273Ssam * correct channel (HT20, HT40+, HT40-, legacy). The caller 1171173273Ssam * is responsible for insuring any required channel change is 1172173273Ssam * done (e.g. in sta mode when parsing the contents of a 1173173273Ssam * beacon frame). 1174170530Ssam */ 1175170530Ssamvoid 1176170530Ssamieee80211_parse_htinfo(struct ieee80211_node *ni, const uint8_t *ie) 1177170530Ssam{ 1178173273Ssam struct ieee80211com *ic = ni->ni_ic; 1179178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1180170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1181173273Ssam struct ieee80211_channel *c; 1182170530Ssam uint16_t w; 1183173273Ssam int htflags, chanflags; 1184170530Ssam 1185170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1186170530Ssam ie += 4; 1187170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1188170530Ssam ni->ni_htctlchan = htinfo->hi_ctrlchannel; 1189170530Ssam ni->ni_ht2ndchan = SM(htinfo->hi_byte1, IEEE80211_HTINFO_2NDCHAN); 1190172055Ssam w = LE_READ_2(&htinfo->hi_byte2); 1191170530Ssam ni->ni_htopmode = SM(w, IEEE80211_HTINFO_OPMODE); 1192170530Ssam w = LE_READ_2(&htinfo->hi_byte45); 1193170530Ssam ni->ni_htstbc = SM(w, IEEE80211_HTINFO_BASIC_STBCMCS); 1194173273Ssam /* 1195173273Ssam * Handle 11n channel switch. Use the received HT ie's to 1196173273Ssam * identify the right channel to use. If we cannot locate it 1197173273Ssam * in the channel table then fallback to legacy operation. 1198173273Ssam */ 1199178354Ssam /* NB: honor operating mode constraint */ 1200178354Ssam htflags = (vap->iv_flags_ext & IEEE80211_FEXT_HT) ? 1201173273Ssam IEEE80211_CHAN_HT20 : 0; 1202173273Ssam if ((htinfo->hi_byte1 & IEEE80211_HTINFO_TXWIDTH_2040) && 1203178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40)) { 1204173273Ssam if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_ABOVE) 1205173273Ssam htflags = IEEE80211_CHAN_HT40U; 1206173273Ssam else if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_BELOW) 1207173273Ssam htflags = IEEE80211_CHAN_HT40D; 1208170530Ssam } 1209173273Ssam chanflags = (ni->ni_chan->ic_flags &~ IEEE80211_CHAN_HT) | htflags; 1210173273Ssam if (chanflags != ni->ni_chan->ic_flags) { 1211173273Ssam c = ieee80211_find_channel(ic, ni->ni_chan->ic_freq, chanflags); 1212178354Ssam if (c == NULL && (htflags & IEEE80211_CHAN_HT40)) { 1213173273Ssam /* 1214173273Ssam * No HT40 channel entry in our table; fall back 1215173273Ssam * to HT20 operation. This should not happen. 1216173273Ssam */ 1217173273Ssam c = findhtchan(ic, ni->ni_chan, IEEE80211_CHAN_HT20); 1218178354Ssam IEEE80211_NOTE(vap, 1219173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1220173273Ssam "no HT40 channel (freq %u), falling back to HT20", 1221173273Ssam ni->ni_chan->ic_freq); 1222173273Ssam /* XXX stat */ 1223173273Ssam } 1224173273Ssam if (c != NULL && c != ni->ni_chan) { 1225178354Ssam IEEE80211_NOTE(vap, 1226173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1227173273Ssam "switch station to HT%d channel %u/0x%x", 1228173273Ssam IEEE80211_IS_CHAN_HT40(c) ? 40 : 20, 1229173273Ssam c->ic_freq, c->ic_flags); 1230173273Ssam ni->ni_chan = c; 1231173273Ssam } 1232173273Ssam /* NB: caller responsible for forcing any channel change */ 1233173273Ssam } 1234173273Ssam /* update node's tx channel width */ 1235173273Ssam ni->ni_chw = IEEE80211_IS_CHAN_HT40(ni->ni_chan)? 40 : 20; 1236170530Ssam} 1237170530Ssam 1238170530Ssam/* 1239170530Ssam * Install received HT rate set by parsing the HT cap ie. 1240170530Ssam */ 1241170530Ssamint 1242170530Ssamieee80211_setup_htrates(struct ieee80211_node *ni, const uint8_t *ie, int flags) 1243170530Ssam{ 1244178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1245170530Ssam const struct ieee80211_ie_htcap *htcap; 1246170530Ssam struct ieee80211_htrateset *rs; 1247170530Ssam int i; 1248170530Ssam 1249170530Ssam rs = &ni->ni_htrates; 1250170530Ssam memset(rs, 0, sizeof(*rs)); 1251170530Ssam if (ie != NULL) { 1252170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1253170530Ssam ie += 4; 1254170530Ssam htcap = (const struct ieee80211_ie_htcap *) ie; 1255170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1256170530Ssam if (isclr(htcap->hc_mcsset, i)) 1257170530Ssam continue; 1258170530Ssam if (rs->rs_nrates == IEEE80211_HTRATE_MAXSIZE) { 1259178354Ssam IEEE80211_NOTE(vap, 1260170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1261170530Ssam "WARNING, HT rate set too large; only " 1262170530Ssam "using %u rates", IEEE80211_HTRATE_MAXSIZE); 1263178354Ssam vap->iv_stats.is_rx_rstoobig++; 1264170530Ssam break; 1265170530Ssam } 1266170530Ssam rs->rs_rates[rs->rs_nrates++] = i; 1267170530Ssam } 1268170530Ssam } 1269170530Ssam return ieee80211_fix_rate(ni, (struct ieee80211_rateset *) rs, flags); 1270170530Ssam} 1271170530Ssam 1272170530Ssam/* 1273170530Ssam * Mark rates in a node's HT rate set as basic according 1274170530Ssam * to the information in the supplied HT info ie. 1275170530Ssam */ 1276170530Ssamvoid 1277170530Ssamieee80211_setup_basic_htrates(struct ieee80211_node *ni, const uint8_t *ie) 1278170530Ssam{ 1279170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1280170530Ssam struct ieee80211_htrateset *rs; 1281170530Ssam int i, j; 1282170530Ssam 1283170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1284170530Ssam ie += 4; 1285170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1286170530Ssam rs = &ni->ni_htrates; 1287170530Ssam if (rs->rs_nrates == 0) { 1288178354Ssam IEEE80211_NOTE(ni->ni_vap, 1289170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1290170530Ssam "%s", "WARNING, empty HT rate set"); 1291170530Ssam return; 1292170530Ssam } 1293170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1294170530Ssam if (isclr(htinfo->hi_basicmcsset, i)) 1295170530Ssam continue; 1296170530Ssam for (j = 0; j < rs->rs_nrates; j++) 1297170530Ssam if ((rs->rs_rates[j] & IEEE80211_RATE_VAL) == i) 1298170530Ssam rs->rs_rates[j] |= IEEE80211_RATE_BASIC; 1299170530Ssam } 1300170530Ssam} 1301170530Ssam 1302170530Ssamstatic void 1303170530Ssamaddba_timeout(void *arg) 1304170530Ssam{ 1305170530Ssam struct ieee80211_tx_ampdu *tap = arg; 1306170530Ssam 1307170530Ssam /* XXX ? */ 1308170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1309170530Ssam tap->txa_attempts++; 1310170530Ssam} 1311170530Ssam 1312170530Ssamstatic void 1313170530Ssamaddba_start_timeout(struct ieee80211_tx_ampdu *tap) 1314170530Ssam{ 1315170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1316178354Ssam callout_reset(&tap->txa_timer, ieee80211_addba_timeout, 1317170530Ssam addba_timeout, tap); 1318170530Ssam tap->txa_flags |= IEEE80211_AGGR_XCHGPEND; 1319178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_timeout; 1320170530Ssam} 1321170530Ssam 1322170530Ssamstatic void 1323170530Ssamaddba_stop_timeout(struct ieee80211_tx_ampdu *tap) 1324170530Ssam{ 1325170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1326170530Ssam if (tap->txa_flags & IEEE80211_AGGR_XCHGPEND) { 1327170530Ssam callout_stop(&tap->txa_timer); 1328170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1329170530Ssam } 1330170530Ssam} 1331170530Ssam 1332170530Ssam/* 1333170530Ssam * Default method for requesting A-MPDU tx aggregation. 1334170530Ssam * We setup the specified state block and start a timer 1335170530Ssam * to wait for an ADDBA response frame. 1336170530Ssam */ 1337170530Ssamstatic int 1338170530Ssamieee80211_addba_request(struct ieee80211_node *ni, 1339170530Ssam struct ieee80211_tx_ampdu *tap, 1340170530Ssam int dialogtoken, int baparamset, int batimeout) 1341170530Ssam{ 1342170530Ssam int bufsiz; 1343170530Ssam 1344170530Ssam /* XXX locking */ 1345170530Ssam tap->txa_token = dialogtoken; 1346170530Ssam tap->txa_flags |= IEEE80211_AGGR_IMMEDIATE; 1347183245Ssam tap->txa_start = 0; 1348170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1349170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1350170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1351170530Ssam addba_start_timeout(tap); 1352170530Ssam return 1; 1353170530Ssam} 1354170530Ssam 1355170530Ssam/* 1356170530Ssam * Default method for processing an A-MPDU tx aggregation 1357170530Ssam * response. We shutdown any pending timer and update the 1358170530Ssam * state block according to the reply. 1359170530Ssam */ 1360170530Ssamstatic int 1361170530Ssamieee80211_addba_response(struct ieee80211_node *ni, 1362170530Ssam struct ieee80211_tx_ampdu *tap, 1363170530Ssam int status, int baparamset, int batimeout) 1364170530Ssam{ 1365170530Ssam int bufsiz; 1366170530Ssam 1367170530Ssam /* XXX locking */ 1368170530Ssam addba_stop_timeout(tap); 1369170530Ssam if (status == IEEE80211_STATUS_SUCCESS) { 1370170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1371170530Ssam /* XXX override our request? */ 1372170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1373170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1374170530Ssam tap->txa_flags |= IEEE80211_AGGR_RUNNING; 1375173273Ssam } else { 1376173273Ssam /* mark tid so we don't try again */ 1377173273Ssam tap->txa_flags |= IEEE80211_AGGR_NAK; 1378170530Ssam } 1379170530Ssam return 1; 1380170530Ssam} 1381170530Ssam 1382170530Ssam/* 1383170530Ssam * Default method for stopping A-MPDU tx aggregation. 1384170530Ssam * Any timer is cleared and we drain any pending frames. 1385170530Ssam */ 1386170530Ssamstatic void 1387170530Ssamieee80211_addba_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 1388170530Ssam{ 1389170530Ssam /* XXX locking */ 1390170530Ssam addba_stop_timeout(tap); 1391170530Ssam if (tap->txa_flags & IEEE80211_AGGR_RUNNING) { 1392182830Ssam /* XXX clear aggregation queue */ 1393170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_RUNNING; 1394170530Ssam } 1395170530Ssam tap->txa_attempts = 0; 1396170530Ssam} 1397170530Ssam 1398170530Ssam/* 1399170530Ssam * Process a received action frame using the default aggregation 1400170530Ssam * policy. We intercept ADDBA-related frames and use them to 1401170530Ssam * update our aggregation state. All other frames are passed up 1402170530Ssam * for processing by ieee80211_recv_action. 1403170530Ssam */ 1404170530Ssamstatic void 1405170530Ssamieee80211_aggr_recv_action(struct ieee80211_node *ni, 1406170530Ssam const uint8_t *frm, const uint8_t *efrm) 1407170530Ssam{ 1408170530Ssam struct ieee80211com *ic = ni->ni_ic; 1409178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1410170530Ssam const struct ieee80211_action *ia; 1411170530Ssam struct ieee80211_rx_ampdu *rap; 1412170530Ssam struct ieee80211_tx_ampdu *tap; 1413182829Ssam uint8_t dialogtoken, policy; 1414170530Ssam uint16_t baparamset, batimeout, baseqctl, code; 1415170530Ssam uint16_t args[4]; 1416170530Ssam int tid, ac, bufsiz; 1417170530Ssam 1418170530Ssam ia = (const struct ieee80211_action *) frm; 1419170530Ssam switch (ia->ia_category) { 1420170530Ssam case IEEE80211_ACTION_CAT_BA: 1421170530Ssam switch (ia->ia_action) { 1422170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1423170530Ssam dialogtoken = frm[2]; 1424170530Ssam baparamset = LE_READ_2(frm+3); 1425170530Ssam batimeout = LE_READ_2(frm+5); 1426170530Ssam baseqctl = LE_READ_2(frm+7); 1427170530Ssam 1428170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1429170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1430170530Ssam 1431178354Ssam IEEE80211_NOTE(vap, 1432170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1433170530Ssam "recv ADDBA request: dialogtoken %u " 1434170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d " 1435173273Ssam "baseqctl %d:%d", 1436173273Ssam dialogtoken, baparamset, tid, bufsiz, batimeout, 1437173273Ssam MS(baseqctl, IEEE80211_BASEQ_START), 1438173273Ssam MS(baseqctl, IEEE80211_BASEQ_FRAG)); 1439170530Ssam 1440170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1441170530Ssam 1442170530Ssam /* Send ADDBA response */ 1443170530Ssam args[0] = dialogtoken; 1444173273Ssam /* 1445173273Ssam * NB: We ack only if the sta associated with HT and 1446173273Ssam * the ap is configured to do AMPDU rx (the latter 1447173273Ssam * violates the 11n spec and is mostly for testing). 1448173273Ssam */ 1449173273Ssam if ((ni->ni_flags & IEEE80211_NODE_AMPDU_RX) && 1450178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_AMPDU_RX)) { 1451170530Ssam ampdu_rx_start(rap, bufsiz, 1452170530Ssam MS(baseqctl, IEEE80211_BASEQ_START)); 1453170530Ssam 1454170530Ssam args[1] = IEEE80211_STATUS_SUCCESS; 1455173273Ssam } else { 1456178354Ssam IEEE80211_NOTE(vap, 1457173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1458173273Ssam ni, "reject ADDBA request: %s", 1459173273Ssam ni->ni_flags & IEEE80211_NODE_AMPDU_RX ? 1460173273Ssam "administratively disabled" : 1461173273Ssam "not negotiated for station"); 1462178354Ssam vap->iv_stats.is_addba_reject++; 1463170530Ssam args[1] = IEEE80211_STATUS_UNSPECIFIED; 1464173273Ssam } 1465170530Ssam /* XXX honor rap flags? */ 1466170530Ssam args[2] = IEEE80211_BAPS_POLICY_IMMEDIATE 1467170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1468170530Ssam | SM(rap->rxa_wnd, IEEE80211_BAPS_BUFSIZ) 1469170530Ssam ; 1470170530Ssam args[3] = 0; 1471170530Ssam ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1472170530Ssam IEEE80211_ACTION_BA_ADDBA_RESPONSE, args); 1473170530Ssam return; 1474170530Ssam 1475170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1476170530Ssam dialogtoken = frm[2]; 1477170530Ssam code = LE_READ_2(frm+3); 1478170530Ssam baparamset = LE_READ_2(frm+5); 1479170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1480170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1481182829Ssam policy = MS(baparamset, IEEE80211_BAPS_POLICY); 1482170530Ssam batimeout = LE_READ_2(frm+7); 1483170530Ssam 1484173273Ssam ac = TID_TO_WME_AC(tid); 1485173273Ssam tap = &ni->ni_tx_ampdu[ac]; 1486175877Ssam if ((tap->txa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 1487178354Ssam IEEE80211_DISCARD_MAC(vap, 1488173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1489173273Ssam ni->ni_macaddr, "ADDBA response", 1490173273Ssam "no pending ADDBA, tid %d dialogtoken %u " 1491173273Ssam "code %d", tid, dialogtoken, code); 1492178354Ssam vap->iv_stats.is_addba_norequest++; 1493173273Ssam return; 1494173273Ssam } 1495173273Ssam if (dialogtoken != tap->txa_token) { 1496178354Ssam IEEE80211_DISCARD_MAC(vap, 1497173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1498173273Ssam ni->ni_macaddr, "ADDBA response", 1499173273Ssam "dialogtoken mismatch: waiting for %d, " 1500173273Ssam "received %d, tid %d code %d", 1501173273Ssam tap->txa_token, dialogtoken, tid, code); 1502178354Ssam vap->iv_stats.is_addba_badtoken++; 1503173273Ssam return; 1504173273Ssam } 1505182829Ssam /* NB: assumes IEEE80211_AGGR_IMMEDIATE is 1 */ 1506182829Ssam if (policy != (tap->txa_flags & IEEE80211_AGGR_IMMEDIATE)) { 1507182829Ssam IEEE80211_DISCARD_MAC(vap, 1508182829Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1509182829Ssam ni->ni_macaddr, "ADDBA response", 1510182829Ssam "policy mismatch: expecting %s, " 1511182829Ssam "received %s, tid %d code %d", 1512182829Ssam tap->txa_flags & IEEE80211_AGGR_IMMEDIATE, 1513182829Ssam policy, tid, code); 1514182829Ssam vap->iv_stats.is_addba_badpolicy++; 1515182829Ssam return; 1516182829Ssam } 1517182829Ssam#if 0 1518182829Ssam /* XXX we take MIN in ieee80211_addba_response */ 1519182829Ssam if (bufsiz > IEEE80211_AGGR_BAWMAX) { 1520182829Ssam IEEE80211_DISCARD_MAC(vap, 1521182829Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1522182829Ssam ni->ni_macaddr, "ADDBA response", 1523182829Ssam "BA window too large: max %d, " 1524182829Ssam "received %d, tid %d code %d", 1525182829Ssam bufsiz, IEEE80211_AGGR_BAWMAX, tid, code); 1526182829Ssam vap->iv_stats.is_addba_badbawinsize++; 1527182829Ssam return; 1528182829Ssam } 1529182829Ssam#endif 1530173273Ssam 1531178354Ssam IEEE80211_NOTE(vap, 1532170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1533170530Ssam "recv ADDBA response: dialogtoken %u code %d " 1534170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d", 1535170530Ssam dialogtoken, code, baparamset, tid, bufsiz, 1536170530Ssam batimeout); 1537170530Ssam ic->ic_addba_response(ni, tap, 1538170530Ssam code, baparamset, batimeout); 1539170530Ssam return; 1540170530Ssam 1541170530Ssam case IEEE80211_ACTION_BA_DELBA: 1542170530Ssam baparamset = LE_READ_2(frm+2); 1543170530Ssam code = LE_READ_2(frm+4); 1544170530Ssam 1545170530Ssam tid = MS(baparamset, IEEE80211_DELBAPS_TID); 1546170530Ssam 1547178354Ssam IEEE80211_NOTE(vap, 1548170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1549170530Ssam "recv DELBA: baparamset 0x%x (tid %d initiator %d) " 1550170530Ssam "code %d", baparamset, tid, 1551170530Ssam MS(baparamset, IEEE80211_DELBAPS_INIT), code); 1552170530Ssam 1553170530Ssam if ((baparamset & IEEE80211_DELBAPS_INIT) == 0) { 1554170530Ssam ac = TID_TO_WME_AC(tid); 1555170530Ssam tap = &ni->ni_tx_ampdu[ac]; 1556170530Ssam ic->ic_addba_stop(ni, tap); 1557170530Ssam } else { 1558170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1559170530Ssam ampdu_rx_stop(rap); 1560170530Ssam } 1561170530Ssam return; 1562170530Ssam } 1563170530Ssam break; 1564170530Ssam } 1565173273Ssam ieee80211_recv_action(ni, frm, efrm); 1566170530Ssam} 1567170530Ssam 1568170530Ssam/* 1569170530Ssam * Process a received 802.11n action frame. 1570170530Ssam * Aggregation-related frames are assumed to be handled 1571170530Ssam * already; we handle any other frames we can, otherwise 1572170530Ssam * complain about being unsupported (with debugging). 1573170530Ssam */ 1574170530Ssamvoid 1575170530Ssamieee80211_recv_action(struct ieee80211_node *ni, 1576170530Ssam const uint8_t *frm, const uint8_t *efrm) 1577170530Ssam{ 1578178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1579170530Ssam const struct ieee80211_action *ia; 1580170530Ssam int chw; 1581170530Ssam 1582170530Ssam ia = (const struct ieee80211_action *) frm; 1583170530Ssam switch (ia->ia_category) { 1584170530Ssam case IEEE80211_ACTION_CAT_BA: 1585178354Ssam IEEE80211_NOTE(vap, 1586170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1587170530Ssam "%s: BA action %d not implemented", __func__, 1588170530Ssam ia->ia_action); 1589178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1590170530Ssam break; 1591170530Ssam case IEEE80211_ACTION_CAT_HT: 1592170530Ssam switch (ia->ia_action) { 1593170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1594170530Ssam chw = frm[2] == IEEE80211_A_HT_TXCHWIDTH_2040 ? 40 : 20; 1595182831Ssam IEEE80211_NOTE(vap, 1596182831Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1597182831Ssam "%s: HT txchwidth, width %d%s", 1598182831Ssam __func__, chw, ni->ni_chw != chw ? "*" : ""); 1599170530Ssam if (chw != ni->ni_chw) { 1600170530Ssam ni->ni_chw = chw; 1601182831Ssam /* XXX notify on change */ 1602170530Ssam } 1603170530Ssam break; 1604173273Ssam case IEEE80211_ACTION_HT_MIMOPWRSAVE: 1605178354Ssam IEEE80211_NOTE(vap, 1606173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1607173273Ssam "%s: HT MIMO PS", __func__); 1608173273Ssam break; 1609170530Ssam default: 1610178354Ssam IEEE80211_NOTE(vap, 1611170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1612170530Ssam "%s: HT action %d not implemented", __func__, 1613170530Ssam ia->ia_action); 1614178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1615170530Ssam break; 1616170530Ssam } 1617170530Ssam break; 1618170530Ssam default: 1619178354Ssam IEEE80211_NOTE(vap, 1620170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1621170530Ssam "%s: category %d not implemented", __func__, 1622170530Ssam ia->ia_category); 1623178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1624170530Ssam break; 1625170530Ssam } 1626170530Ssam} 1627170530Ssam 1628170530Ssam/* 1629170530Ssam * Transmit processing. 1630170530Ssam */ 1631170530Ssam 1632170530Ssam/* 1633178354Ssam * Check if A-MPDU should be requested/enabled for a stream. 1634178354Ssam * We require a traffic rate above a per-AC threshold and we 1635178354Ssam * also handle backoff from previous failed attempts. 1636178354Ssam * 1637178354Ssam * Drivers may override this method to bring in information 1638178354Ssam * such as link state conditions in making the decision. 1639178354Ssam */ 1640178354Ssamstatic int 1641178354Ssamieee80211_ampdu_enable(struct ieee80211_node *ni, 1642178354Ssam struct ieee80211_tx_ampdu *tap) 1643178354Ssam{ 1644178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1645178354Ssam 1646178354Ssam if (tap->txa_avgpps < vap->iv_ampdu_mintraffic[tap->txa_ac]) 1647178354Ssam return 0; 1648178354Ssam /* XXX check rssi? */ 1649178354Ssam if (tap->txa_attempts >= ieee80211_addba_maxtries && 1650178354Ssam ticks < tap->txa_nextrequest) { 1651178354Ssam /* 1652178354Ssam * Don't retry too often; txa_nextrequest is set 1653178354Ssam * to the minimum interval we'll retry after 1654178354Ssam * ieee80211_addba_maxtries failed attempts are made. 1655178354Ssam */ 1656178354Ssam return 0; 1657178354Ssam } 1658178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1659178354Ssam "%s: enable AMPDU on %s, avgpps %d pkts %d", 1660178354Ssam __func__, ieee80211_wme_acnames[tap->txa_ac], 1661178354Ssam tap->txa_avgpps, tap->txa_pkts); 1662178354Ssam return 1; 1663178354Ssam} 1664178354Ssam 1665178354Ssam/* 1666170530Ssam * Request A-MPDU tx aggregation. Setup local state and 1667170530Ssam * issue an ADDBA request. BA use will only happen after 1668170530Ssam * the other end replies with ADDBA response. 1669170530Ssam */ 1670170530Ssamint 1671170530Ssamieee80211_ampdu_request(struct ieee80211_node *ni, 1672170530Ssam struct ieee80211_tx_ampdu *tap) 1673170530Ssam{ 1674170530Ssam struct ieee80211com *ic = ni->ni_ic; 1675170530Ssam uint16_t args[4]; 1676170530Ssam int tid, dialogtoken; 1677170530Ssam static int tokens = 0; /* XXX */ 1678170530Ssam 1679170530Ssam /* XXX locking */ 1680170530Ssam if ((tap->txa_flags & IEEE80211_AGGR_SETUP) == 0) { 1681170530Ssam /* do deferred setup of state */ 1682170530Ssam callout_init(&tap->txa_timer, CALLOUT_MPSAFE); 1683170530Ssam tap->txa_flags |= IEEE80211_AGGR_SETUP; 1684170530Ssam } 1685173273Ssam /* XXX hack for not doing proper locking */ 1686173273Ssam tap->txa_flags &= ~IEEE80211_AGGR_NAK; 1687173273Ssam 1688170530Ssam dialogtoken = (tokens+1) % 63; /* XXX */ 1689183245Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1690183245Ssam tap->txa_start = ni->ni_txseqs[tid]; 1691170530Ssam 1692170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1693170530Ssam args[0] = dialogtoken; 1694170530Ssam args[1] = IEEE80211_BAPS_POLICY_IMMEDIATE 1695170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1696170530Ssam | SM(IEEE80211_AGGR_BAWMAX, IEEE80211_BAPS_BUFSIZ) 1697170530Ssam ; 1698170530Ssam args[2] = 0; /* batimeout */ 1699170530Ssam /* NB: do first so there's no race against reply */ 1700170530Ssam if (!ic->ic_addba_request(ni, tap, dialogtoken, args[1], args[2])) { 1701170530Ssam /* unable to setup state, don't make request */ 1702178354Ssam IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_11N, 1703173273Ssam ni, "%s: could not setup BA stream for AC %d", 1704173273Ssam __func__, tap->txa_ac); 1705173273Ssam /* defer next try so we don't slam the driver with requests */ 1706178354Ssam tap->txa_attempts = ieee80211_addba_maxtries; 1707178354Ssam /* NB: check in case driver wants to override */ 1708178354Ssam if (tap->txa_nextrequest <= ticks) 1709178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_backoff; 1710170530Ssam return 0; 1711170530Ssam } 1712170530Ssam tokens = dialogtoken; /* allocate token */ 1713183245Ssam /* NB: after calling ic_addba_request so driver can set txa_start */ 1714183245Ssam args[3] = SM(tap->txa_start, IEEE80211_BASEQ_START) 1715178953Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1716178953Ssam ; 1717170530Ssam return ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1718170530Ssam IEEE80211_ACTION_BA_ADDBA_REQUEST, args); 1719170530Ssam} 1720170530Ssam 1721170530Ssam/* 1722173273Ssam * Terminate an AMPDU tx stream. State is reclaimed 1723173273Ssam * and the peer notified with a DelBA Action frame. 1724173273Ssam */ 1725173273Ssamvoid 1726173273Ssamieee80211_ampdu_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 1727173273Ssam{ 1728173273Ssam struct ieee80211com *ic = ni->ni_ic; 1729178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1730173273Ssam uint16_t args[4]; 1731173273Ssam 1732173273Ssam /* XXX locking */ 1733173273Ssam if (IEEE80211_AMPDU_RUNNING(tap)) { 1734178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1735173273Ssam ni, "%s: stop BA stream for AC %d", __func__, tap->txa_ac); 1736178354Ssam vap->iv_stats.is_ampdu_stop++; 1737173273Ssam 1738173273Ssam ic->ic_addba_stop(ni, tap); 1739173273Ssam args[0] = WME_AC_TO_TID(tap->txa_ac); 1740173273Ssam args[1] = IEEE80211_DELBAPS_INIT; 1741173273Ssam args[2] = 1; /* XXX reason code */ 1742173273Ssam ieee80211_send_action(ni, IEEE80211_ACTION_CAT_BA, 1743173273Ssam IEEE80211_ACTION_BA_DELBA, args); 1744173273Ssam } else { 1745178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1746173273Ssam ni, "%s: BA stream for AC %d not running", 1747173273Ssam __func__, tap->txa_ac); 1748178354Ssam vap->iv_stats.is_ampdu_stop_failed++; 1749173273Ssam } 1750173273Ssam} 1751173273Ssam 1752173273Ssam/* 1753170530Ssam * Transmit a BAR frame to the specified node. The 1754170530Ssam * BAR contents are drawn from the supplied aggregation 1755170530Ssam * state associated with the node. 1756170530Ssam */ 1757170530Ssamint 1758170530Ssamieee80211_send_bar(struct ieee80211_node *ni, 1759170530Ssam const struct ieee80211_tx_ampdu *tap) 1760170530Ssam{ 1761178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1762170530Ssam#define ADDSHORT(frm, v) do { \ 1763170530Ssam frm[0] = (v) & 0xff; \ 1764170530Ssam frm[1] = (v) >> 8; \ 1765170530Ssam frm += 2; \ 1766170530Ssam} while (0) 1767178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1768170530Ssam struct ieee80211com *ic = ni->ni_ic; 1769170530Ssam struct ieee80211_frame_min *wh; 1770170530Ssam struct mbuf *m; 1771170530Ssam uint8_t *frm; 1772170530Ssam uint16_t barctl, barseqctl; 1773170530Ssam int tid, ret; 1774170530Ssam 1775170530Ssam ieee80211_ref_node(ni); 1776170530Ssam 1777170530Ssam m = ieee80211_getmgtframe(&frm, 1778170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame_min), 1779170530Ssam sizeof(struct ieee80211_ba_request) 1780170530Ssam ); 1781170530Ssam if (m == NULL) 1782170530Ssam senderr(ENOMEM, is_tx_nobuf); 1783170530Ssam 1784170530Ssam wh = mtod(m, struct ieee80211_frame_min *); 1785170530Ssam wh->i_fc[0] = IEEE80211_FC0_VERSION_0 | 1786170530Ssam IEEE80211_FC0_TYPE_CTL | IEEE80211_FC0_SUBTYPE_BAR; 1787170530Ssam wh->i_fc[1] = 0; 1788170530Ssam IEEE80211_ADDR_COPY(wh->i_addr1, ni->ni_macaddr); 1789178354Ssam IEEE80211_ADDR_COPY(wh->i_addr2, vap->iv_myaddr); 1790170530Ssam 1791170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1792170530Ssam barctl = (tap->txa_flags & IEEE80211_AGGR_IMMEDIATE ? 1793170530Ssam IEEE80211_BAPS_POLICY_IMMEDIATE : 1794170530Ssam IEEE80211_BAPS_POLICY_DELAYED) 1795170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1796170530Ssam | SM(tap->txa_wnd, IEEE80211_BAPS_BUFSIZ) 1797170530Ssam ; 1798170530Ssam barseqctl = SM(tap->txa_start, IEEE80211_BASEQ_START) 1799170530Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1800170530Ssam ; 1801170530Ssam ADDSHORT(frm, barctl); 1802170530Ssam ADDSHORT(frm, barseqctl); 1803170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1804170530Ssam 1805178354Ssam M_WME_SETAC(m, WME_AC_VO); 1806178354Ssam 1807170530Ssam IEEE80211_NODE_STAT(ni, tx_mgmt); /* XXX tx_ctl? */ 1808170530Ssam 1809178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_DEBUG | IEEE80211_MSG_DUMPPKTS, 1810173273Ssam ni, "send bar frame (tid %u start %u) on channel %u", 1811173273Ssam tid, tap->txa_start, ieee80211_chan2ieee(ic, ic->ic_curchan)); 1812170530Ssam 1813178354Ssam return ic->ic_raw_xmit(ni, m, NULL); 1814170530Ssambad: 1815170530Ssam ieee80211_free_node(ni); 1816170530Ssam return ret; 1817170530Ssam#undef ADDSHORT 1818170530Ssam#undef senderr 1819170530Ssam} 1820170530Ssam 1821170530Ssam/* 1822170530Ssam * Send an action management frame. The arguments are stuff 1823170530Ssam * into a frame without inspection; the caller is assumed to 1824170530Ssam * prepare them carefully (e.g. based on the aggregation state). 1825170530Ssam */ 1826170530Ssamint 1827170530Ssamieee80211_send_action(struct ieee80211_node *ni, 1828170530Ssam int category, int action, uint16_t args[4]) 1829170530Ssam{ 1830178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1831170530Ssam#define ADDSHORT(frm, v) do { \ 1832170530Ssam frm[0] = (v) & 0xff; \ 1833170530Ssam frm[1] = (v) >> 8; \ 1834170530Ssam frm += 2; \ 1835170530Ssam} while (0) 1836178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1837170530Ssam struct ieee80211com *ic = ni->ni_ic; 1838170530Ssam struct mbuf *m; 1839170530Ssam uint8_t *frm; 1840170530Ssam uint16_t baparamset; 1841170530Ssam int ret; 1842170530Ssam 1843170530Ssam KASSERT(ni != NULL, ("null node")); 1844170530Ssam 1845170530Ssam /* 1846170530Ssam * Hold a reference on the node so it doesn't go away until after 1847170530Ssam * the xmit is complete all the way in the driver. On error we 1848170530Ssam * will remove our reference. 1849170530Ssam */ 1850178354Ssam IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1851170530Ssam "ieee80211_ref_node (%s:%u) %p<%s> refcnt %d\n", 1852170530Ssam __func__, __LINE__, 1853170530Ssam ni, ether_sprintf(ni->ni_macaddr), 1854170530Ssam ieee80211_node_refcnt(ni)+1); 1855170530Ssam ieee80211_ref_node(ni); 1856170530Ssam 1857170530Ssam m = ieee80211_getmgtframe(&frm, 1858170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame), 1859170530Ssam sizeof(uint16_t) /* action+category */ 1860170530Ssam /* XXX may action payload */ 1861170530Ssam + sizeof(struct ieee80211_action_ba_addbaresponse) 1862170530Ssam ); 1863170530Ssam if (m == NULL) 1864170530Ssam senderr(ENOMEM, is_tx_nobuf); 1865170530Ssam 1866170530Ssam *frm++ = category; 1867170530Ssam *frm++ = action; 1868170530Ssam switch (category) { 1869170530Ssam case IEEE80211_ACTION_CAT_BA: 1870170530Ssam switch (action) { 1871170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1872178354Ssam IEEE80211_NOTE(vap, 1873170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1874173273Ssam "send ADDBA request: dialogtoken %d " 1875173273Ssam "baparamset 0x%x (tid %d) batimeout 0x%x baseqctl 0x%x", 1876173273Ssam args[0], args[1], MS(args[1], IEEE80211_BAPS_TID), 1877173273Ssam args[2], args[3]); 1878170530Ssam 1879170530Ssam *frm++ = args[0]; /* dialog token */ 1880170530Ssam ADDSHORT(frm, args[1]); /* baparamset */ 1881170530Ssam ADDSHORT(frm, args[2]); /* batimeout */ 1882170530Ssam ADDSHORT(frm, args[3]); /* baseqctl */ 1883170530Ssam break; 1884170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1885178354Ssam IEEE80211_NOTE(vap, 1886170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1887170530Ssam "send ADDBA response: dialogtoken %d status %d " 1888170530Ssam "baparamset 0x%x (tid %d) batimeout %d", 1889170530Ssam args[0], args[1], args[2], 1890170530Ssam MS(args[2], IEEE80211_BAPS_TID), args[3]); 1891170530Ssam 1892170530Ssam *frm++ = args[0]; /* dialog token */ 1893170530Ssam ADDSHORT(frm, args[1]); /* statuscode */ 1894170530Ssam ADDSHORT(frm, args[2]); /* baparamset */ 1895170530Ssam ADDSHORT(frm, args[3]); /* batimeout */ 1896170530Ssam break; 1897170530Ssam case IEEE80211_ACTION_BA_DELBA: 1898170530Ssam /* XXX */ 1899170530Ssam baparamset = SM(args[0], IEEE80211_DELBAPS_TID) 1900180309Ssam | args[1] 1901170530Ssam ; 1902170530Ssam ADDSHORT(frm, baparamset); 1903170530Ssam ADDSHORT(frm, args[2]); /* reason code */ 1904170530Ssam 1905178354Ssam IEEE80211_NOTE(vap, 1906170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1907170530Ssam "send DELBA action: tid %d, initiator %d reason %d", 1908170530Ssam args[0], args[1], args[2]); 1909170530Ssam break; 1910170530Ssam default: 1911170530Ssam goto badaction; 1912170530Ssam } 1913170530Ssam break; 1914170530Ssam case IEEE80211_ACTION_CAT_HT: 1915170530Ssam switch (action) { 1916170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1917178354Ssam IEEE80211_NOTE(vap, 1918170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1919170530Ssam ni, "send HT txchwidth: width %d", 1920178354Ssam IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 40 : 20 1921170530Ssam ); 1922178354Ssam *frm++ = IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 1923170530Ssam IEEE80211_A_HT_TXCHWIDTH_2040 : 1924170530Ssam IEEE80211_A_HT_TXCHWIDTH_20; 1925170530Ssam break; 1926170530Ssam default: 1927170530Ssam goto badaction; 1928170530Ssam } 1929170530Ssam break; 1930170530Ssam default: 1931170530Ssam badaction: 1932178354Ssam IEEE80211_NOTE(vap, 1933170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1934170530Ssam "%s: unsupported category %d action %d", __func__, 1935170530Ssam category, action); 1936170530Ssam senderr(EINVAL, is_tx_unknownmgt); 1937170530Ssam /* NOTREACHED */ 1938170530Ssam } 1939170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1940170530Ssam 1941178354Ssam return ieee80211_mgmt_output(ni, m, IEEE80211_FC0_SUBTYPE_ACTION); 1942170530Ssambad: 1943170530Ssam ieee80211_free_node(ni); 1944178354Ssam if (m != NULL) 1945178354Ssam m_freem(m); 1946170530Ssam return ret; 1947170530Ssam#undef ADDSHORT 1948170530Ssam#undef senderr 1949170530Ssam} 1950170530Ssam 1951170530Ssam/* 1952170530Ssam * Construct the MCS bit mask for inclusion 1953170530Ssam * in an HT information element. 1954170530Ssam */ 1955170530Ssamstatic void 1956170530Ssamieee80211_set_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 1957170530Ssam{ 1958170530Ssam int i; 1959170530Ssam 1960170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 1961170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 1962170530Ssam if (r < IEEE80211_HTRATE_MAXSIZE) { /* XXX? */ 1963170530Ssam /* NB: this assumes a particular implementation */ 1964170530Ssam setbit(frm, r); 1965170530Ssam } 1966170530Ssam } 1967170530Ssam} 1968170530Ssam 1969170530Ssam/* 1970170530Ssam * Add body of an HTCAP information element. 1971170530Ssam */ 1972170530Ssamstatic uint8_t * 1973170530Ssamieee80211_add_htcap_body(uint8_t *frm, struct ieee80211_node *ni) 1974170530Ssam{ 1975170530Ssam#define ADDSHORT(frm, v) do { \ 1976170530Ssam frm[0] = (v) & 0xff; \ 1977170530Ssam frm[1] = (v) >> 8; \ 1978170530Ssam frm += 2; \ 1979170530Ssam} while (0) 1980178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1981170530Ssam uint16_t caps; 1982173865Ssam int rxmax, density; 1983170530Ssam 1984170530Ssam /* HT capabilities */ 1985178354Ssam caps = vap->iv_htcaps & 0xffff; 1986173273Ssam /* 1987173273Ssam * Note channel width depends on whether we are operating as 1988173273Ssam * a sta or not. When operating as a sta we are generating 1989173273Ssam * a request based on our desired configuration. Otherwise 1990173273Ssam * we are operational and the channel attributes identify 1991173273Ssam * how we've been setup (which might be different if a fixed 1992173273Ssam * channel is specified). 1993173273Ssam */ 1994178354Ssam if (vap->iv_opmode == IEEE80211_M_STA) { 1995173273Ssam /* override 20/40 use based on config */ 1996178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) 1997173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 1998173273Ssam else 1999173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 2000173865Ssam /* use advertised setting (XXX locally constraint) */ 2001173865Ssam rxmax = MS(ni->ni_htparam, IEEE80211_HTCAP_MAXRXAMPDU); 2002173865Ssam density = MS(ni->ni_htparam, IEEE80211_HTCAP_MPDUDENSITY); 2003173273Ssam } else { 2004173273Ssam /* override 20/40 use based on current channel */ 2005178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 2006173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 2007173273Ssam else 2008173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 2009178354Ssam rxmax = vap->iv_ampdu_rxmax; 2010178354Ssam density = vap->iv_ampdu_density; 2011173273Ssam } 2012170530Ssam /* adjust short GI based on channel and config */ 2013178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) == 0) 2014170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI20; 2015178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) == 0 || 2016170530Ssam (caps & IEEE80211_HTCAP_CHWIDTH40) == 0) 2017170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI40; 2018170530Ssam ADDSHORT(frm, caps); 2019170530Ssam 2020170530Ssam /* HT parameters */ 2021173865Ssam *frm = SM(rxmax, IEEE80211_HTCAP_MAXRXAMPDU) 2022173865Ssam | SM(density, IEEE80211_HTCAP_MPDUDENSITY) 2023173273Ssam ; 2024170530Ssam frm++; 2025170530Ssam 2026170530Ssam /* pre-zero remainder of ie */ 2027170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htcap) - 2028170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset)); 2029170530Ssam 2030170530Ssam /* supported MCS set */ 2031173273Ssam /* 2032173273Ssam * XXX it would better to get the rate set from ni_htrates 2033173273Ssam * so we can restrict it but for sta mode ni_htrates isn't 2034173273Ssam * setup when we're called to form an AssocReq frame so for 2035173273Ssam * now we're restricted to the default HT rate set. 2036173273Ssam */ 2037173273Ssam ieee80211_set_htrates(frm, &ieee80211_rateset_11n); 2038170530Ssam 2039170530Ssam frm += sizeof(struct ieee80211_ie_htcap) - 2040170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset); 2041170530Ssam return frm; 2042170530Ssam#undef ADDSHORT 2043170530Ssam} 2044170530Ssam 2045170530Ssam/* 2046170530Ssam * Add 802.11n HT capabilities information element 2047170530Ssam */ 2048170530Ssamuint8_t * 2049170530Ssamieee80211_add_htcap(uint8_t *frm, struct ieee80211_node *ni) 2050170530Ssam{ 2051170530Ssam frm[0] = IEEE80211_ELEMID_HTCAP; 2052170530Ssam frm[1] = sizeof(struct ieee80211_ie_htcap) - 2; 2053170530Ssam return ieee80211_add_htcap_body(frm + 2, ni); 2054170530Ssam} 2055170530Ssam 2056170530Ssam/* 2057170530Ssam * Add Broadcom OUI wrapped standard HTCAP ie; this is 2058170530Ssam * used for compatibility w/ pre-draft implementations. 2059170530Ssam */ 2060170530Ssamuint8_t * 2061170530Ssamieee80211_add_htcap_vendor(uint8_t *frm, struct ieee80211_node *ni) 2062170530Ssam{ 2063170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2064170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htcap) - 2; 2065170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2066170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2067170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2068170530Ssam frm[5] = BCM_OUI_HTCAP; 2069170530Ssam return ieee80211_add_htcap_body(frm + 6, ni); 2070170530Ssam} 2071170530Ssam 2072170530Ssam/* 2073170530Ssam * Construct the MCS bit mask of basic rates 2074170530Ssam * for inclusion in an HT information element. 2075170530Ssam */ 2076170530Ssamstatic void 2077170530Ssamieee80211_set_basic_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 2078170530Ssam{ 2079170530Ssam int i; 2080170530Ssam 2081170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 2082170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 2083170530Ssam if ((rs->rs_rates[i] & IEEE80211_RATE_BASIC) && 2084170530Ssam r < IEEE80211_HTRATE_MAXSIZE) { 2085170530Ssam /* NB: this assumes a particular implementation */ 2086170530Ssam setbit(frm, r); 2087170530Ssam } 2088170530Ssam } 2089170530Ssam} 2090170530Ssam 2091170530Ssam/* 2092172211Ssam * Update the HTINFO ie for a beacon frame. 2093172211Ssam */ 2094172211Ssamvoid 2095178354Ssamieee80211_ht_update_beacon(struct ieee80211vap *vap, 2096172211Ssam struct ieee80211_beacon_offsets *bo) 2097172211Ssam{ 2098172211Ssam#define PROTMODE (IEEE80211_HTINFO_OPMODE|IEEE80211_HTINFO_NONHT_PRESENT) 2099178354Ssam const struct ieee80211_channel *bsschan = vap->iv_bss->ni_chan; 2100178354Ssam struct ieee80211com *ic = vap->iv_ic; 2101172211Ssam struct ieee80211_ie_htinfo *ht = 2102172211Ssam (struct ieee80211_ie_htinfo *) bo->bo_htinfo; 2103172211Ssam 2104172211Ssam /* XXX only update on channel change */ 2105178354Ssam ht->hi_ctrlchannel = ieee80211_chan2ieee(ic, bsschan); 2106172211Ssam ht->hi_byte1 = IEEE80211_HTINFO_RIFSMODE_PROH; 2107178354Ssam if (IEEE80211_IS_CHAN_HT40U(bsschan)) 2108172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2109178354Ssam else if (IEEE80211_IS_CHAN_HT40D(bsschan)) 2110172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2111172211Ssam else 2112172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_NONE; 2113178354Ssam if (IEEE80211_IS_CHAN_HT40(bsschan)) 2114172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_TXWIDTH_2040; 2115172211Ssam 2116172211Ssam /* protection mode */ 2117172211Ssam ht->hi_byte2 = (ht->hi_byte2 &~ PROTMODE) | ic->ic_curhtprotmode; 2118172211Ssam 2119172211Ssam /* XXX propagate to vendor ie's */ 2120172211Ssam#undef PROTMODE 2121172211Ssam} 2122172211Ssam 2123172211Ssam/* 2124170530Ssam * Add body of an HTINFO information element. 2125173273Ssam * 2126173273Ssam * NB: We don't use struct ieee80211_ie_htinfo because we can 2127173273Ssam * be called to fillin both a standard ie and a compat ie that 2128173273Ssam * has a vendor OUI at the front. 2129170530Ssam */ 2130170530Ssamstatic uint8_t * 2131170530Ssamieee80211_add_htinfo_body(uint8_t *frm, struct ieee80211_node *ni) 2132170530Ssam{ 2133170530Ssam struct ieee80211com *ic = ni->ni_ic; 2134170530Ssam 2135170530Ssam /* pre-zero remainder of ie */ 2136170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htinfo) - 2); 2137170530Ssam 2138170530Ssam /* primary/control channel center */ 2139178354Ssam *frm++ = ieee80211_chan2ieee(ic, ni->ni_chan); 2140170530Ssam 2141170530Ssam frm[0] = IEEE80211_HTINFO_RIFSMODE_PROH; 2142178354Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 2143170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2144178354Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 2145170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2146170530Ssam else 2147170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_NONE; 2148178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 2149170530Ssam frm[0] |= IEEE80211_HTINFO_TXWIDTH_2040; 2150170530Ssam 2151172211Ssam frm[1] = ic->ic_curhtprotmode; 2152170530Ssam 2153170530Ssam frm += 5; 2154170530Ssam 2155170530Ssam /* basic MCS set */ 2156170530Ssam ieee80211_set_basic_htrates(frm, &ni->ni_htrates); 2157170530Ssam frm += sizeof(struct ieee80211_ie_htinfo) - 2158170530Ssam __offsetof(struct ieee80211_ie_htinfo, hi_basicmcsset); 2159170530Ssam return frm; 2160170530Ssam} 2161170530Ssam 2162170530Ssam/* 2163170530Ssam * Add 802.11n HT information information element. 2164170530Ssam */ 2165170530Ssamuint8_t * 2166170530Ssamieee80211_add_htinfo(uint8_t *frm, struct ieee80211_node *ni) 2167170530Ssam{ 2168170530Ssam frm[0] = IEEE80211_ELEMID_HTINFO; 2169170530Ssam frm[1] = sizeof(struct ieee80211_ie_htinfo) - 2; 2170170530Ssam return ieee80211_add_htinfo_body(frm + 2, ni); 2171170530Ssam} 2172170530Ssam 2173170530Ssam/* 2174170530Ssam * Add Broadcom OUI wrapped standard HTINFO ie; this is 2175170530Ssam * used for compatibility w/ pre-draft implementations. 2176170530Ssam */ 2177170530Ssamuint8_t * 2178170530Ssamieee80211_add_htinfo_vendor(uint8_t *frm, struct ieee80211_node *ni) 2179170530Ssam{ 2180170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2181170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htinfo) - 2; 2182170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2183170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2184170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2185170530Ssam frm[5] = BCM_OUI_HTINFO; 2186170530Ssam return ieee80211_add_htinfo_body(frm + 6, ni); 2187170530Ssam} 2188