ieee80211_ht.c revision 183253
1170530Ssam/*- 2178354Ssam * Copyright (c) 2007-2008 Sam Leffler, Errno Consulting 3170530Ssam * All rights reserved. 4170530Ssam * 5170530Ssam * Redistribution and use in source and binary forms, with or without 6170530Ssam * modification, are permitted provided that the following conditions 7170530Ssam * are met: 8170530Ssam * 1. Redistributions of source code must retain the above copyright 9170530Ssam * notice, this list of conditions and the following disclaimer. 10170530Ssam * 2. Redistributions in binary form must reproduce the above copyright 11170530Ssam * notice, this list of conditions and the following disclaimer in the 12170530Ssam * documentation and/or other materials provided with the distribution. 13170530Ssam * 14170530Ssam * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 15170530Ssam * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 16170530Ssam * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 17170530Ssam * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 18170530Ssam * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 19170530Ssam * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 20170530Ssam * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 21170530Ssam * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22170530Ssam * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 23170530Ssam * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24170530Ssam */ 25170530Ssam 26170530Ssam#include <sys/cdefs.h> 27170530Ssam#ifdef __FreeBSD__ 28170530Ssam__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_ht.c 183253 2008-09-21 23:32:48Z sam $"); 29170530Ssam#endif 30170530Ssam 31170530Ssam/* 32170530Ssam * IEEE 802.11n protocol support. 33170530Ssam */ 34170530Ssam 35170530Ssam#include "opt_inet.h" 36178354Ssam#include "opt_wlan.h" 37170530Ssam 38170530Ssam#include <sys/param.h> 39170530Ssam#include <sys/kernel.h> 40170530Ssam#include <sys/systm.h> 41170530Ssam#include <sys/endian.h> 42170530Ssam 43170530Ssam#include <sys/socket.h> 44170530Ssam 45170530Ssam#include <net/if.h> 46170530Ssam#include <net/if_media.h> 47170530Ssam#include <net/ethernet.h> 48170530Ssam 49170530Ssam#include <net80211/ieee80211_var.h> 50178354Ssam#include <net80211/ieee80211_input.h> 51170530Ssam 52170530Ssam/* define here, used throughout file */ 53170530Ssam#define MS(_v, _f) (((_v) & _f) >> _f##_S) 54170530Ssam#define SM(_v, _f) (((_v) << _f##_S) & _f) 55170530Ssam 56178354Ssamconst struct ieee80211_mcs_rates ieee80211_htrates[16] = { 57178354Ssam { 13, 14, 27, 30 }, /* MCS 0 */ 58178354Ssam { 26, 29, 54, 60 }, /* MCS 1 */ 59178354Ssam { 39, 43, 81, 90 }, /* MCS 2 */ 60178354Ssam { 52, 58, 108, 120 }, /* MCS 3 */ 61178354Ssam { 78, 87, 162, 180 }, /* MCS 4 */ 62178354Ssam { 104, 116, 216, 240 }, /* MCS 5 */ 63178354Ssam { 117, 130, 243, 270 }, /* MCS 6 */ 64178354Ssam { 130, 144, 270, 300 }, /* MCS 7 */ 65178354Ssam { 26, 29, 54, 60 }, /* MCS 8 */ 66178354Ssam { 52, 58, 108, 120 }, /* MCS 9 */ 67178354Ssam { 78, 87, 162, 180 }, /* MCS 10 */ 68178354Ssam { 104, 116, 216, 240 }, /* MCS 11 */ 69178354Ssam { 156, 173, 324, 360 }, /* MCS 12 */ 70178354Ssam { 208, 231, 432, 480 }, /* MCS 13 */ 71178354Ssam { 234, 260, 486, 540 }, /* MCS 14 */ 72178354Ssam { 260, 289, 540, 600 } /* MCS 15 */ 73170530Ssam}; 74170530Ssam 75170530Ssamstatic const struct ieee80211_htrateset ieee80211_rateset_11n = 76170530Ssam { 16, { 77170530Ssam 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 78170530Ssam 10, 11, 12, 13, 14, 15 } 79170530Ssam }; 80170530Ssam 81173273Ssam#ifdef IEEE80211_AMPDU_AGE 82173273Ssam/* XXX public for sysctl hookup */ 83173273Ssamint ieee80211_ampdu_age = -1; /* threshold for ampdu reorder q (ms) */ 84173273Ssam#endif 85173273Ssamint ieee80211_recv_bar_ena = 1; 86178354Ssamint ieee80211_addba_timeout = -1; /* timeout waiting for ADDBA response */ 87178354Ssamint ieee80211_addba_backoff = -1; /* backoff after max ADDBA requests */ 88178354Ssamint ieee80211_addba_maxtries = 3; /* max ADDBA requests before backoff */ 89173273Ssam 90178354Ssam/* 91178354Ssam * Setup HT parameters that depends on the clock frequency. 92178354Ssam */ 93178354Ssamstatic void 94178354Ssamieee80211_ht_setup(void) 95178354Ssam{ 96178354Ssam#ifdef IEEE80211_AMPDU_AGE 97178354Ssam ieee80211_ampdu_age = msecs_to_ticks(500); 98178354Ssam#endif 99178354Ssam ieee80211_addba_timeout = msecs_to_ticks(250); 100178354Ssam ieee80211_addba_backoff = msecs_to_ticks(10*1000); 101178354Ssam} 102178354SsamSYSINIT(wlan_ht, SI_SUB_DRIVERS, SI_ORDER_FIRST, ieee80211_ht_setup, NULL); 103170530Ssam 104178354Ssamstatic int ieee80211_ampdu_enable(struct ieee80211_node *ni, 105178354Ssam struct ieee80211_tx_ampdu *tap); 106170530Ssamstatic int ieee80211_addba_request(struct ieee80211_node *ni, 107170530Ssam struct ieee80211_tx_ampdu *tap, 108170530Ssam int dialogtoken, int baparamset, int batimeout); 109170530Ssamstatic int ieee80211_addba_response(struct ieee80211_node *ni, 110170530Ssam struct ieee80211_tx_ampdu *tap, 111170530Ssam int code, int baparamset, int batimeout); 112170530Ssamstatic void ieee80211_addba_stop(struct ieee80211_node *ni, 113170530Ssam struct ieee80211_tx_ampdu *tap); 114170530Ssamstatic void ieee80211_aggr_recv_action(struct ieee80211_node *ni, 115170530Ssam const uint8_t *frm, const uint8_t *efrm); 116170530Ssam 117170530Ssamvoid 118170530Ssamieee80211_ht_attach(struct ieee80211com *ic) 119170530Ssam{ 120170530Ssam /* setup default aggregation policy */ 121170530Ssam ic->ic_recv_action = ieee80211_aggr_recv_action; 122170530Ssam ic->ic_send_action = ieee80211_send_action; 123178354Ssam ic->ic_ampdu_enable = ieee80211_ampdu_enable; 124170530Ssam ic->ic_addba_request = ieee80211_addba_request; 125170530Ssam ic->ic_addba_response = ieee80211_addba_response; 126170530Ssam ic->ic_addba_stop = ieee80211_addba_stop; 127170530Ssam 128173273Ssam ic->ic_htprotmode = IEEE80211_PROT_RTSCTS; 129173273Ssam ic->ic_curhtprotmode = IEEE80211_HTINFO_OPMODE_PURE; 130178354Ssam} 131173273Ssam 132178354Ssamvoid 133178354Ssamieee80211_ht_detach(struct ieee80211com *ic) 134178354Ssam{ 135178354Ssam} 136173273Ssam 137178354Ssamvoid 138178354Ssamieee80211_ht_vattach(struct ieee80211vap *vap) 139178354Ssam{ 140178354Ssam 141178354Ssam /* driver can override defaults */ 142178354Ssam vap->iv_ampdu_rxmax = IEEE80211_HTCAP_MAXRXAMPDU_8K; 143178354Ssam vap->iv_ampdu_density = IEEE80211_HTCAP_MPDUDENSITY_NA; 144178354Ssam vap->iv_ampdu_limit = vap->iv_ampdu_rxmax; 145178354Ssam vap->iv_amsdu_limit = vap->iv_htcaps & IEEE80211_HTCAP_MAXAMSDU; 146178354Ssam /* tx aggregation traffic thresholds */ 147178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BK] = 128; 148178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BE] = 64; 149178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VO] = 32; 150178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VI] = 32; 151178354Ssam 152178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_HT) { 153170530Ssam /* 154173273Ssam * Device is HT capable; enable all HT-related 155173273Ssam * facilities by default. 156170530Ssam * XXX these choices may be too aggressive. 157170530Ssam */ 158178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_HT 159178354Ssam | IEEE80211_FEXT_HTCOMPAT 160178354Ssam ; 161178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI20) 162178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI20; 163173273Ssam /* XXX infer from channel list? */ 164178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_CHWIDTH40) { 165178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_USEHT40; 166178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI40) 167178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI40; 168170530Ssam } 169170530Ssam /* NB: A-MPDU and A-MSDU rx are mandated, these are tx only */ 170178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_RX; 171178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMPDU) 172178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_TX; 173178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_RX; 174178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMSDU) 175178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_TX; 176170530Ssam } 177178354Ssam /* NB: disable default legacy WDS, too many issues right now */ 178178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_WDSLEGACY) 179178354Ssam vap->iv_flags_ext &= ~IEEE80211_FEXT_HT; 180170530Ssam} 181170530Ssam 182170530Ssamvoid 183178354Ssamieee80211_ht_vdetach(struct ieee80211vap *vap) 184170530Ssam{ 185170530Ssam} 186170530Ssam 187170530Ssamstatic void 188170530Ssamht_announce(struct ieee80211com *ic, int mode, 189170530Ssam const struct ieee80211_htrateset *rs) 190170530Ssam{ 191170530Ssam struct ifnet *ifp = ic->ic_ifp; 192170530Ssam int i, rate, mword; 193170530Ssam 194170530Ssam if_printf(ifp, "%s MCS: ", ieee80211_phymode_name[mode]); 195170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 196172226Ssam mword = ieee80211_rate2media(ic, 197172226Ssam rs->rs_rates[i] | IEEE80211_RATE_MCS, mode); 198170530Ssam if (IFM_SUBTYPE(mword) != IFM_IEEE80211_MCS) 199170530Ssam continue; 200178354Ssam rate = ieee80211_htrates[rs->rs_rates[i]].ht40_rate_400ns; 201170530Ssam printf("%s%d%sMbps", (i != 0 ? " " : ""), 202170530Ssam rate / 2, ((rate & 0x1) != 0 ? ".5" : "")); 203170530Ssam } 204170530Ssam printf("\n"); 205170530Ssam} 206170530Ssam 207170530Ssamvoid 208170530Ssamieee80211_ht_announce(struct ieee80211com *ic) 209170530Ssam{ 210170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NA)) 211170530Ssam ht_announce(ic, IEEE80211_MODE_11NA, &ieee80211_rateset_11n); 212170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NG)) 213170530Ssam ht_announce(ic, IEEE80211_MODE_11NG, &ieee80211_rateset_11n); 214170530Ssam} 215170530Ssam 216170530Ssamconst struct ieee80211_htrateset * 217170530Ssamieee80211_get_suphtrates(struct ieee80211com *ic, 218170530Ssam const struct ieee80211_channel *c) 219170530Ssam{ 220173273Ssam return &ieee80211_rateset_11n; 221170530Ssam} 222170530Ssam 223170530Ssam/* 224170530Ssam * Receive processing. 225170530Ssam */ 226170530Ssam 227170530Ssam/* 228170530Ssam * Decap the encapsulated A-MSDU frames and dispatch all but 229170530Ssam * the last for delivery. The last frame is returned for 230170530Ssam * delivery via the normal path. 231170530Ssam */ 232170530Ssamstruct mbuf * 233170530Ssamieee80211_decap_amsdu(struct ieee80211_node *ni, struct mbuf *m) 234170530Ssam{ 235178354Ssam struct ieee80211vap *vap = ni->ni_vap; 236173462Ssam int framelen; 237170530Ssam struct mbuf *n; 238170530Ssam 239170530Ssam /* discard 802.3 header inserted by ieee80211_decap */ 240170530Ssam m_adj(m, sizeof(struct ether_header)); 241170530Ssam 242178354Ssam vap->iv_stats.is_amsdu_decap++; 243170530Ssam 244170530Ssam for (;;) { 245170530Ssam /* 246170530Ssam * Decap the first frame, bust it apart from the 247170530Ssam * remainder and deliver. We leave the last frame 248170530Ssam * delivery to the caller (for consistency with other 249170530Ssam * code paths, could also do it here). 250170530Ssam */ 251170530Ssam m = ieee80211_decap1(m, &framelen); 252170530Ssam if (m == NULL) { 253178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 254173462Ssam ni->ni_macaddr, "a-msdu", "%s", "decap failed"); 255178354Ssam vap->iv_stats.is_amsdu_tooshort++; 256170530Ssam return NULL; 257170530Ssam } 258173462Ssam if (m->m_pkthdr.len == framelen) 259170530Ssam break; 260170530Ssam n = m_split(m, framelen, M_NOWAIT); 261170530Ssam if (n == NULL) { 262178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 263170530Ssam ni->ni_macaddr, "a-msdu", 264170530Ssam "%s", "unable to split encapsulated frames"); 265178354Ssam vap->iv_stats.is_amsdu_split++; 266170530Ssam m_freem(m); /* NB: must reclaim */ 267170530Ssam return NULL; 268170530Ssam } 269178354Ssam vap->iv_deliver_data(vap, ni, m); 270170530Ssam 271170530Ssam /* 272170530Ssam * Remove frame contents; each intermediate frame 273170530Ssam * is required to be aligned to a 4-byte boundary. 274170530Ssam */ 275170530Ssam m = n; 276170530Ssam m_adj(m, roundup2(framelen, 4) - framelen); /* padding */ 277170530Ssam } 278170530Ssam return m; /* last delivered by caller */ 279170530Ssam} 280170530Ssam 281170530Ssam/* 282170530Ssam * Purge all frames in the A-MPDU re-order queue. 283170530Ssam */ 284170530Ssamstatic void 285170530Ssamampdu_rx_purge(struct ieee80211_rx_ampdu *rap) 286170530Ssam{ 287170530Ssam struct mbuf *m; 288170530Ssam int i; 289170530Ssam 290170530Ssam for (i = 0; i < rap->rxa_wnd; i++) { 291170530Ssam m = rap->rxa_m[i]; 292170530Ssam if (m != NULL) { 293170530Ssam rap->rxa_m[i] = NULL; 294170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 295170530Ssam m_freem(m); 296170530Ssam if (--rap->rxa_qframes == 0) 297170530Ssam break; 298170530Ssam } 299170530Ssam } 300170530Ssam KASSERT(rap->rxa_qbytes == 0 && rap->rxa_qframes == 0, 301170530Ssam ("lost %u data, %u frames on ampdu rx q", 302170530Ssam rap->rxa_qbytes, rap->rxa_qframes)); 303170530Ssam} 304170530Ssam 305170530Ssam/* 306178354Ssam * Start A-MPDU rx/re-order processing for the specified TID. 307178354Ssam */ 308178354Ssamstatic void 309178354Ssamampdu_rx_start(struct ieee80211_rx_ampdu *rap, int bufsiz, int start) 310178354Ssam{ 311178354Ssam if (rap->rxa_flags & IEEE80211_AGGR_RUNNING) { 312178354Ssam /* 313178354Ssam * AMPDU previously setup and not terminated with a DELBA, 314178354Ssam * flush the reorder q's in case anything remains. 315178354Ssam */ 316178354Ssam ampdu_rx_purge(rap); 317178354Ssam } 318178354Ssam memset(rap, 0, sizeof(*rap)); 319178354Ssam rap->rxa_wnd = (bufsiz == 0) ? 320178354Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 321178354Ssam rap->rxa_start = start; 322178354Ssam rap->rxa_flags |= IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND; 323178354Ssam} 324178354Ssam 325178354Ssam/* 326170530Ssam * Stop A-MPDU rx processing for the specified TID. 327170530Ssam */ 328170530Ssamstatic void 329170530Ssamampdu_rx_stop(struct ieee80211_rx_ampdu *rap) 330170530Ssam{ 331170530Ssam ampdu_rx_purge(rap); 332178354Ssam rap->rxa_flags &= ~(IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND); 333170530Ssam} 334170530Ssam 335170530Ssam/* 336170530Ssam * Dispatch a frame from the A-MPDU reorder queue. The 337170530Ssam * frame is fed back into ieee80211_input marked with an 338183247Ssam * M_AMPDU_MPDU flag so it doesn't come back to us (it also 339170530Ssam * permits ieee80211_input to optimize re-processing). 340170530Ssam */ 341170530Ssamstatic __inline void 342170530Ssamampdu_dispatch(struct ieee80211_node *ni, struct mbuf *m) 343170530Ssam{ 344183247Ssam m->m_flags |= M_AMPDU_MPDU; /* bypass normal processing */ 345183247Ssam /* NB: rssi, noise, and rstamp are ignored w/ M_AMPDU_MPDU set */ 346178354Ssam (void) ieee80211_input(ni, m, 0, 0, 0); 347170530Ssam} 348170530Ssam 349170530Ssam/* 350170530Ssam * Dispatch as many frames as possible from the re-order queue. 351170530Ssam * Frames will always be "at the front"; we process all frames 352170530Ssam * up to the first empty slot in the window. On completion we 353170530Ssam * cleanup state if there are still pending frames in the current 354170530Ssam * BA window. We assume the frame at slot 0 is already handled 355170530Ssam * by the caller; we always start at slot 1. 356170530Ssam */ 357170530Ssamstatic void 358170530Ssamampdu_rx_dispatch(struct ieee80211_rx_ampdu *rap, struct ieee80211_node *ni) 359170530Ssam{ 360178354Ssam struct ieee80211vap *vap = ni->ni_vap; 361170530Ssam struct mbuf *m; 362170530Ssam int i; 363170530Ssam 364170530Ssam /* flush run of frames */ 365170530Ssam for (i = 1; i < rap->rxa_wnd; i++) { 366170530Ssam m = rap->rxa_m[i]; 367170530Ssam if (m == NULL) 368170530Ssam break; 369170530Ssam rap->rxa_m[i] = NULL; 370170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 371170530Ssam rap->rxa_qframes--; 372170530Ssam 373170530Ssam ampdu_dispatch(ni, m); 374170530Ssam } 375170530Ssam /* 376170530Ssam * If frames remain, copy the mbuf pointers down so 377170530Ssam * they correspond to the offsets in the new window. 378170530Ssam */ 379170530Ssam if (rap->rxa_qframes != 0) { 380170530Ssam int n = rap->rxa_qframes, j; 381170530Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 382170530Ssam if (rap->rxa_m[j] != NULL) { 383170530Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 384170530Ssam rap->rxa_m[j] = NULL; 385170530Ssam if (--n == 0) 386170530Ssam break; 387170530Ssam } 388170530Ssam } 389170530Ssam KASSERT(n == 0, ("lost %d frames", n)); 390178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 391170530Ssam } 392173273Ssam /* 393173273Ssam * Adjust the start of the BA window to 394173273Ssam * reflect the frames just dispatched. 395173273Ssam */ 396173273Ssam rap->rxa_start = IEEE80211_SEQ_ADD(rap->rxa_start, i); 397178354Ssam vap->iv_stats.is_ampdu_rx_oor += i; 398170530Ssam} 399170530Ssam 400173273Ssam#ifdef IEEE80211_AMPDU_AGE 401170530Ssam/* 402173273Ssam * Dispatch all frames in the A-MPDU re-order queue. 403170530Ssam */ 404170530Ssamstatic void 405173273Ssamampdu_rx_flush(struct ieee80211_node *ni, struct ieee80211_rx_ampdu *rap) 406170530Ssam{ 407178354Ssam struct ieee80211vap *vap = ni->ni_vap; 408170530Ssam struct mbuf *m; 409170530Ssam int i; 410170530Ssam 411173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 412170530Ssam m = rap->rxa_m[i]; 413170530Ssam if (m == NULL) 414170530Ssam continue; 415170530Ssam rap->rxa_m[i] = NULL; 416170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 417173273Ssam rap->rxa_qframes--; 418178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 419173273Ssam 420170530Ssam ampdu_dispatch(ni, m); 421173273Ssam if (rap->rxa_qframes == 0) 422170530Ssam break; 423170530Ssam } 424170530Ssam} 425173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 426170530Ssam 427170530Ssam/* 428173273Ssam * Dispatch all frames in the A-MPDU re-order queue 429173273Ssam * preceding the specified sequence number. This logic 430173273Ssam * handles window moves due to a received MSDU or BAR. 431173273Ssam */ 432173273Ssamstatic void 433173273Ssamampdu_rx_flush_upto(struct ieee80211_node *ni, 434173273Ssam struct ieee80211_rx_ampdu *rap, ieee80211_seq winstart) 435173273Ssam{ 436178354Ssam struct ieee80211vap *vap = ni->ni_vap; 437173273Ssam struct mbuf *m; 438173273Ssam ieee80211_seq seqno; 439173273Ssam int i; 440173273Ssam 441173273Ssam /* 442173273Ssam * Flush any complete MSDU's with a sequence number lower 443173273Ssam * than winstart. Gaps may exist. Note that we may actually 444173273Ssam * dispatch frames past winstart if a run continues; this is 445173273Ssam * an optimization that avoids having to do a separate pass 446173273Ssam * to dispatch frames after moving the BA window start. 447173273Ssam */ 448173273Ssam seqno = rap->rxa_start; 449173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 450173273Ssam m = rap->rxa_m[i]; 451173273Ssam if (m != NULL) { 452173273Ssam rap->rxa_m[i] = NULL; 453173273Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 454173273Ssam rap->rxa_qframes--; 455178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 456173273Ssam 457173273Ssam ampdu_dispatch(ni, m); 458173273Ssam } else { 459173273Ssam if (!IEEE80211_SEQ_BA_BEFORE(seqno, winstart)) 460173273Ssam break; 461173273Ssam } 462173273Ssam seqno = IEEE80211_SEQ_INC(seqno); 463173273Ssam } 464173273Ssam /* 465173273Ssam * If frames remain, copy the mbuf pointers down so 466173273Ssam * they correspond to the offsets in the new window. 467173273Ssam */ 468173273Ssam if (rap->rxa_qframes != 0) { 469173273Ssam int n = rap->rxa_qframes, j; 470178354Ssam 471178354Ssam /* NB: this loop assumes i > 0 and/or rxa_m[0] is NULL */ 472178354Ssam KASSERT(rap->rxa_m[0] == NULL, 473178354Ssam ("%s: BA window slot 0 occupied", __func__)); 474173273Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 475173273Ssam if (rap->rxa_m[j] != NULL) { 476173273Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 477173273Ssam rap->rxa_m[j] = NULL; 478173273Ssam if (--n == 0) 479173273Ssam break; 480173273Ssam } 481173273Ssam } 482173273Ssam KASSERT(n == 0, ("%s: lost %d frames, qframes %d off %d " 483173273Ssam "BA win <%d:%d> winstart %d", 484173273Ssam __func__, n, rap->rxa_qframes, i, rap->rxa_start, 485173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 486173273Ssam winstart)); 487178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 488173273Ssam } 489173273Ssam /* 490173273Ssam * Move the start of the BA window; we use the 491173273Ssam * sequence number of the last MSDU that was 492173273Ssam * passed up the stack+1 or winstart if stopped on 493173273Ssam * a gap in the reorder buffer. 494173273Ssam */ 495173273Ssam rap->rxa_start = seqno; 496173273Ssam} 497173273Ssam 498173273Ssam/* 499170530Ssam * Process a received QoS data frame for an HT station. Handle 500170530Ssam * A-MPDU reordering: if this frame is received out of order 501170530Ssam * and falls within the BA window hold onto it. Otherwise if 502173273Ssam * this frame completes a run, flush any pending frames. We 503170530Ssam * return 1 if the frame is consumed. A 0 is returned if 504170530Ssam * the frame should be processed normally by the caller. 505170530Ssam */ 506170530Ssamint 507170530Ssamieee80211_ampdu_reorder(struct ieee80211_node *ni, struct mbuf *m) 508170530Ssam{ 509170530Ssam#define IEEE80211_FC0_QOSDATA \ 510170530Ssam (IEEE80211_FC0_TYPE_DATA|IEEE80211_FC0_SUBTYPE_QOS|IEEE80211_FC0_VERSION_0) 511173273Ssam#define PROCESS 0 /* caller should process frame */ 512173273Ssam#define CONSUMED 1 /* frame consumed, caller does nothing */ 513178354Ssam struct ieee80211vap *vap = ni->ni_vap; 514170530Ssam struct ieee80211_qosframe *wh; 515170530Ssam struct ieee80211_rx_ampdu *rap; 516170530Ssam ieee80211_seq rxseq; 517170530Ssam uint8_t tid; 518170530Ssam int off; 519170530Ssam 520183247Ssam KASSERT((m->m_flags & (M_AMPDU | M_AMPDU_MPDU)) == M_AMPDU, 521183247Ssam ("!a-mpdu or already re-ordered, flags 0x%x", m->m_flags)); 522170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 523170530Ssam 524170530Ssam /* NB: m_len known to be sufficient */ 525170530Ssam wh = mtod(m, struct ieee80211_qosframe *); 526183247Ssam if (wh->i_fc[0] != IEEE80211_FC0_QOSDATA) { 527183247Ssam /* 528183247Ssam * Not QoS data, shouldn't get here but just 529183247Ssam * return it to the caller for processing. 530183247Ssam */ 531183247Ssam return PROCESS; 532183247Ssam } 533170530Ssam 534173273Ssam if ((wh->i_fc[1] & IEEE80211_FC1_DIR_MASK) == IEEE80211_FC1_DIR_DSTODS) 535173273Ssam tid = ((struct ieee80211_qosframe_addr4 *)wh)->i_qos[0]; 536173273Ssam else 537173273Ssam tid = wh->i_qos[0]; 538173273Ssam tid &= IEEE80211_QOS_TID; 539170530Ssam rap = &ni->ni_rx_ampdu[tid]; 540170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 541170530Ssam /* 542170530Ssam * No ADDBA request yet, don't touch. 543170530Ssam */ 544173273Ssam return PROCESS; 545170530Ssam } 546182827Ssam rxseq = le16toh(*(uint16_t *)wh->i_seq); 547182827Ssam if ((rxseq & IEEE80211_SEQ_FRAG_MASK) != 0) { 548182827Ssam /* 549182827Ssam * Fragments are not allowed; toss. 550182827Ssam */ 551182827Ssam IEEE80211_DISCARD_MAC(vap, 552182827Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 553182827Ssam "A-MPDU", "fragment, rxseq 0x%x tid %u%s", rxseq, tid, 554182827Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 555182827Ssam vap->iv_stats.is_ampdu_rx_drop++; 556182827Ssam IEEE80211_NODE_STAT(ni, rx_drop); 557182827Ssam m_freem(m); 558182827Ssam return CONSUMED; 559182827Ssam } 560182827Ssam rxseq >>= IEEE80211_SEQ_SEQ_SHIFT; 561173273Ssam rap->rxa_nframes++; 562173273Ssamagain: 563170530Ssam if (rxseq == rap->rxa_start) { 564170530Ssam /* 565170530Ssam * First frame in window. 566170530Ssam */ 567170530Ssam if (rap->rxa_qframes != 0) { 568170530Ssam /* 569170530Ssam * Dispatch as many packets as we can. 570170530Ssam */ 571170530Ssam KASSERT(rap->rxa_m[0] == NULL, ("unexpected dup")); 572170530Ssam ampdu_dispatch(ni, m); 573170530Ssam ampdu_rx_dispatch(rap, ni); 574173273Ssam return CONSUMED; 575170530Ssam } else { 576170530Ssam /* 577170530Ssam * In order; advance window and notify 578170530Ssam * caller to dispatch directly. 579170530Ssam */ 580170530Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 581173273Ssam return PROCESS; 582170530Ssam } 583170530Ssam } 584170530Ssam /* 585173273Ssam * Frame is out of order; store if in the BA window. 586170530Ssam */ 587170530Ssam /* calculate offset in BA window */ 588170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 589173273Ssam if (off < rap->rxa_wnd) { 590170530Ssam /* 591173273Ssam * Common case (hopefully): in the BA window. 592173273Ssam * Sec 9.10.7.6 a) (D2.04 p.118 line 47) 593173273Ssam */ 594173273Ssam#ifdef IEEE80211_AMPDU_AGE 595173273Ssam /* 596173273Ssam * Check for frames sitting too long in the reorder queue. 597173273Ssam * This should only ever happen if frames are not delivered 598173273Ssam * without the sender otherwise notifying us (e.g. with a 599173273Ssam * BAR to move the window). Typically this happens because 600173273Ssam * of vendor bugs that cause the sequence number to jump. 601173273Ssam * When this happens we get a gap in the reorder queue that 602173273Ssam * leaves frame sitting on the queue until they get pushed 603173273Ssam * out due to window moves. When the vendor does not send 604173273Ssam * BAR this move only happens due to explicit packet sends 605170530Ssam * 606173273Ssam * NB: we only track the time of the oldest frame in the 607173273Ssam * reorder q; this means that if we flush we might push 608173273Ssam * frames that still "new"; if this happens then subsequent 609173273Ssam * frames will result in BA window moves which cost something 610173273Ssam * but is still better than a big throughput dip. 611170530Ssam */ 612173273Ssam if (rap->rxa_qframes != 0) { 613173273Ssam /* XXX honor batimeout? */ 614173273Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 615173273Ssam /* 616173273Ssam * Too long since we received the first 617173273Ssam * frame; flush the reorder buffer. 618173273Ssam */ 619173273Ssam if (rap->rxa_qframes != 0) { 620178354Ssam vap->iv_stats.is_ampdu_rx_age += 621173273Ssam rap->rxa_qframes; 622173273Ssam ampdu_rx_flush(ni, rap); 623173273Ssam } 624173273Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 625173273Ssam return PROCESS; 626173273Ssam } 627173273Ssam } else { 628173273Ssam /* 629173273Ssam * First frame, start aging timer. 630173273Ssam */ 631173273Ssam rap->rxa_age = ticks; 632173273Ssam } 633173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 634173273Ssam /* save packet */ 635173273Ssam if (rap->rxa_m[off] == NULL) { 636173273Ssam rap->rxa_m[off] = m; 637173273Ssam rap->rxa_qframes++; 638173273Ssam rap->rxa_qbytes += m->m_pkthdr.len; 639178354Ssam vap->iv_stats.is_ampdu_rx_reorder++; 640173273Ssam } else { 641178354Ssam IEEE80211_DISCARD_MAC(vap, 642173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 643173273Ssam ni->ni_macaddr, "a-mpdu duplicate", 644173273Ssam "seqno %u tid %u BA win <%u:%u>", 645173273Ssam rxseq, tid, rap->rxa_start, 646173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1)); 647178354Ssam vap->iv_stats.is_rx_dup++; 648173273Ssam IEEE80211_NODE_STAT(ni, rx_dup); 649173273Ssam m_freem(m); 650173273Ssam } 651173273Ssam return CONSUMED; 652173273Ssam } 653173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 654173273Ssam /* 655173273Ssam * Outside the BA window, but within range; 656173273Ssam * flush the reorder q and move the window. 657173273Ssam * Sec 9.10.7.6 b) (D2.04 p.118 line 60) 658173273Ssam */ 659178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 660173273Ssam "move BA win <%u:%u> (%u frames) rxseq %u tid %u", 661170530Ssam rap->rxa_start, 662173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 663170530Ssam rap->rxa_qframes, rxseq, tid); 664178354Ssam vap->iv_stats.is_ampdu_rx_move++; 665170530Ssam 666173273Ssam /* 667173273Ssam * The spec says to flush frames up to but not including: 668173273Ssam * WinStart_B = rxseq - rap->rxa_wnd + 1 669173273Ssam * Then insert the frame or notify the caller to process 670173273Ssam * it immediately. We can safely do this by just starting 671173273Ssam * over again because we know the frame will now be within 672173273Ssam * the BA window. 673173273Ssam */ 674173273Ssam /* NB: rxa_wnd known to be >0 */ 675173273Ssam ampdu_rx_flush_upto(ni, rap, 676173273Ssam IEEE80211_SEQ_SUB(rxseq, rap->rxa_wnd-1)); 677173273Ssam goto again; 678170530Ssam } else { 679170530Ssam /* 680173273Ssam * Outside the BA window and out of range; toss. 681173273Ssam * Sec 9.10.7.6 c) (D2.04 p.119 line 16) 682170530Ssam */ 683178354Ssam IEEE80211_DISCARD_MAC(vap, 684173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 685178354Ssam "MPDU", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 686173273Ssam rap->rxa_start, 687173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 688173273Ssam rap->rxa_qframes, rxseq, tid, 689173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 690178354Ssam vap->iv_stats.is_ampdu_rx_drop++; 691173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 692170530Ssam m_freem(m); 693173273Ssam return CONSUMED; 694170530Ssam } 695173273Ssam#undef CONSUMED 696173273Ssam#undef PROCESS 697170530Ssam#undef IEEE80211_FC0_QOSDATA 698170530Ssam} 699170530Ssam 700170530Ssam/* 701170530Ssam * Process a BAR ctl frame. Dispatch all frames up to 702170530Ssam * the sequence number of the frame. If this frame is 703173273Ssam * out of range it's discarded. 704170530Ssam */ 705170530Ssamvoid 706170530Ssamieee80211_recv_bar(struct ieee80211_node *ni, struct mbuf *m0) 707170530Ssam{ 708178354Ssam struct ieee80211vap *vap = ni->ni_vap; 709170530Ssam struct ieee80211_frame_bar *wh; 710170530Ssam struct ieee80211_rx_ampdu *rap; 711170530Ssam ieee80211_seq rxseq; 712170530Ssam int tid, off; 713170530Ssam 714173273Ssam if (!ieee80211_recv_bar_ena) { 715173273Ssam#if 0 716178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_11N, 717173273Ssam ni->ni_macaddr, "BAR", "%s", "processing disabled"); 718173273Ssam#endif 719178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 720173273Ssam return; 721173273Ssam } 722170530Ssam wh = mtod(m0, struct ieee80211_frame_bar *); 723170530Ssam /* XXX check basic BAR */ 724170530Ssam tid = MS(le16toh(wh->i_ctl), IEEE80211_BAR_TID); 725170530Ssam rap = &ni->ni_rx_ampdu[tid]; 726170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 727170530Ssam /* 728170530Ssam * No ADDBA request yet, don't touch. 729170530Ssam */ 730178354Ssam IEEE80211_DISCARD_MAC(vap, 731170530Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 732170530Ssam ni->ni_macaddr, "BAR", "no BA stream, tid %u", tid); 733178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 734170530Ssam return; 735170530Ssam } 736178354Ssam vap->iv_stats.is_ampdu_bar_rx++; 737170530Ssam rxseq = le16toh(wh->i_seq) >> IEEE80211_SEQ_SEQ_SHIFT; 738173273Ssam if (rxseq == rap->rxa_start) 739173273Ssam return; 740170530Ssam /* calculate offset in BA window */ 741170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 742173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 743170530Ssam /* 744173273Ssam * Flush the reorder q up to rxseq and move the window. 745173273Ssam * Sec 9.10.7.6 a) (D2.04 p.119 line 22) 746170530Ssam */ 747178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 748173273Ssam "BAR moves BA win <%u:%u> (%u frames) rxseq %u tid %u", 749170530Ssam rap->rxa_start, 750173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 751173273Ssam rap->rxa_qframes, rxseq, tid); 752178354Ssam vap->iv_stats.is_ampdu_bar_move++; 753173273Ssam 754173273Ssam ampdu_rx_flush_upto(ni, rap, rxseq); 755173273Ssam if (off >= rap->rxa_wnd) { 756173273Ssam /* 757173273Ssam * BAR specifies a window start to the right of BA 758173273Ssam * window; we must move it explicitly since 759173273Ssam * ampdu_rx_flush_upto will not. 760173273Ssam */ 761173273Ssam rap->rxa_start = rxseq; 762170530Ssam } 763173273Ssam } else { 764170530Ssam /* 765173273Ssam * Out of range; toss. 766173273Ssam * Sec 9.10.7.6 b) (D2.04 p.119 line 41) 767170530Ssam */ 768178354Ssam IEEE80211_DISCARD_MAC(vap, 769173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 770173273Ssam "BAR", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 771173273Ssam rap->rxa_start, 772173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 773173273Ssam rap->rxa_qframes, rxseq, tid, 774173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 775178354Ssam vap->iv_stats.is_ampdu_bar_oow++; 776173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 777170530Ssam } 778170530Ssam} 779170530Ssam 780170530Ssam/* 781170530Ssam * Setup HT-specific state in a node. Called only 782170530Ssam * when HT use is negotiated so we don't do extra 783170530Ssam * work for temporary and/or legacy sta's. 784170530Ssam */ 785170530Ssamvoid 786170530Ssamieee80211_ht_node_init(struct ieee80211_node *ni, const uint8_t *htcap) 787170530Ssam{ 788170530Ssam struct ieee80211_tx_ampdu *tap; 789170530Ssam int ac; 790170530Ssam 791173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 792173273Ssam /* 793173273Ssam * Clean AMPDU state on re-associate. This handles the case 794173273Ssam * where a station leaves w/o notifying us and then returns 795173273Ssam * before node is reaped for inactivity. 796173273Ssam */ 797173273Ssam ieee80211_ht_node_cleanup(ni); 798173273Ssam } 799170530Ssam ieee80211_parse_htcap(ni, htcap); 800170530Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 801170530Ssam tap = &ni->ni_tx_ampdu[ac]; 802170530Ssam tap->txa_ac = ac; 803173273Ssam /* NB: further initialization deferred */ 804170530Ssam } 805173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 806170530Ssam} 807170530Ssam 808170530Ssam/* 809170530Ssam * Cleanup HT-specific state in a node. Called only 810170530Ssam * when HT use has been marked. 811170530Ssam */ 812170530Ssamvoid 813170530Ssamieee80211_ht_node_cleanup(struct ieee80211_node *ni) 814170530Ssam{ 815170530Ssam struct ieee80211com *ic = ni->ni_ic; 816170530Ssam int i; 817170530Ssam 818170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT node")); 819170530Ssam 820170530Ssam /* XXX optimize this */ 821170530Ssam for (i = 0; i < WME_NUM_AC; i++) { 822170530Ssam struct ieee80211_tx_ampdu *tap = &ni->ni_tx_ampdu[i]; 823173273Ssam if (tap->txa_flags & IEEE80211_AGGR_SETUP) { 824173273Ssam /* 825173273Ssam * Stop BA stream if setup so driver has a chance 826173273Ssam * to reclaim any resources it might have allocated. 827173273Ssam */ 828170530Ssam ic->ic_addba_stop(ni, &ni->ni_tx_ampdu[i]); 829178354Ssam tap->txa_lastsample = 0; 830178354Ssam tap->txa_avgpps = 0; 831173273Ssam /* NB: clearing NAK means we may re-send ADDBA */ 832173273Ssam tap->txa_flags &= 833173273Ssam ~(IEEE80211_AGGR_SETUP | IEEE80211_AGGR_NAK); 834173273Ssam } 835170530Ssam } 836170530Ssam for (i = 0; i < WME_NUM_TID; i++) 837170530Ssam ampdu_rx_stop(&ni->ni_rx_ampdu[i]); 838170530Ssam 839170530Ssam ni->ni_htcap = 0; 840182828Ssam ni->ni_flags &= ~IEEE80211_NODE_HT_ALL; 841170530Ssam} 842170530Ssam 843178354Ssam/* 844178354Ssam * Age out HT resources for a station. 845178354Ssam */ 846178354Ssamvoid 847178354Ssamieee80211_ht_node_age(struct ieee80211_node *ni) 848178354Ssam{ 849178354Ssam#ifdef IEEE80211_AMPDU_AGE 850178354Ssam struct ieee80211vap *vap = ni->ni_vap; 851178354Ssam uint8_t tid; 852178354Ssam#endif 853178354Ssam 854178354Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 855178354Ssam 856178354Ssam#ifdef IEEE80211_AMPDU_AGE 857178354Ssam for (tid = 0; tid < WME_NUM_TID; tid++) { 858178354Ssam struct ieee80211_rx_ampdu *rap; 859178354Ssam 860178354Ssam rap = &ni->ni_rx_ampdu[tid]; 861178354Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) 862178354Ssam continue; 863178354Ssam if (rap->rxa_qframes == 0) 864178354Ssam continue; 865178354Ssam /* 866178354Ssam * Check for frames sitting too long in the reorder queue. 867178354Ssam * See above for more details on what's happening here. 868178354Ssam */ 869178354Ssam /* XXX honor batimeout? */ 870178354Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 871178354Ssam /* 872178354Ssam * Too long since we received the first 873178354Ssam * frame; flush the reorder buffer. 874178354Ssam */ 875178354Ssam vap->iv_stats.is_ampdu_rx_age += rap->rxa_qframes; 876178354Ssam ampdu_rx_flush(ni, rap); 877178354Ssam } 878178354Ssam } 879178354Ssam#endif /* IEEE80211_AMPDU_AGE */ 880178354Ssam} 881178354Ssam 882173273Ssamstatic struct ieee80211_channel * 883173273Ssamfindhtchan(struct ieee80211com *ic, struct ieee80211_channel *c, int htflags) 884173273Ssam{ 885173273Ssam return ieee80211_find_channel(ic, c->ic_freq, 886173273Ssam (c->ic_flags &~ IEEE80211_CHAN_HT) | htflags); 887173273Ssam} 888173273Ssam 889173273Ssam/* 890173273Ssam * Adjust a channel to be HT/non-HT according to the vap's configuration. 891173273Ssam */ 892173273Ssamstruct ieee80211_channel * 893173273Ssamieee80211_ht_adjust_channel(struct ieee80211com *ic, 894173273Ssam struct ieee80211_channel *chan, int flags) 895173273Ssam{ 896173273Ssam struct ieee80211_channel *c; 897173273Ssam 898173273Ssam if (flags & IEEE80211_FEXT_HT) { 899173273Ssam /* promote to HT if possible */ 900173273Ssam if (flags & IEEE80211_FEXT_USEHT40) { 901173273Ssam if (!IEEE80211_IS_CHAN_HT40(chan)) { 902173273Ssam /* NB: arbitrarily pick ht40+ over ht40- */ 903173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT40U); 904173273Ssam if (c == NULL) 905173273Ssam c = findhtchan(ic, chan, 906173273Ssam IEEE80211_CHAN_HT40D); 907173273Ssam if (c == NULL) 908173273Ssam c = findhtchan(ic, chan, 909173273Ssam IEEE80211_CHAN_HT20); 910173273Ssam if (c != NULL) 911173273Ssam chan = c; 912173273Ssam } 913173273Ssam } else if (!IEEE80211_IS_CHAN_HT20(chan)) { 914173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT20); 915173273Ssam if (c != NULL) 916173273Ssam chan = c; 917173273Ssam } 918173273Ssam } else if (IEEE80211_IS_CHAN_HT(chan)) { 919173273Ssam /* demote to legacy, HT use is disabled */ 920173273Ssam c = ieee80211_find_channel(ic, chan->ic_freq, 921173273Ssam chan->ic_flags &~ IEEE80211_CHAN_HT); 922173273Ssam if (c != NULL) 923173273Ssam chan = c; 924173273Ssam } 925173273Ssam return chan; 926173273Ssam} 927173273Ssam 928173273Ssam/* 929173273Ssam * Setup HT-specific state for a legacy WDS peer. 930173273Ssam */ 931173273Ssamvoid 932173273Ssamieee80211_ht_wds_init(struct ieee80211_node *ni) 933173273Ssam{ 934178354Ssam struct ieee80211vap *vap = ni->ni_vap; 935173273Ssam struct ieee80211_tx_ampdu *tap; 936173273Ssam int ac; 937173273Ssam 938178354Ssam KASSERT(vap->iv_flags_ext & IEEE80211_FEXT_HT, ("no HT requested")); 939173273Ssam 940173273Ssam /* XXX check scan cache in case peer has an ap and we have info */ 941173273Ssam /* 942173273Ssam * If setup with a legacy channel; locate an HT channel. 943173273Ssam * Otherwise if the inherited channel (from a companion 944173273Ssam * AP) is suitable use it so we use the same location 945173273Ssam * for the extension channel). 946173273Ssam */ 947178354Ssam ni->ni_chan = ieee80211_ht_adjust_channel(ni->ni_ic, 948178354Ssam ni->ni_chan, ieee80211_htchanflags(ni->ni_chan)); 949173273Ssam 950173273Ssam ni->ni_htcap = 0; 951178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) 952173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI20; 953173273Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) { 954173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_CHWIDTH40; 955173273Ssam ni->ni_chw = 40; 956173273Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 957173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_ABOVE; 958173273Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 959173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_BELOW; 960178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) 961173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI40; 962173273Ssam } else { 963173273Ssam ni->ni_chw = 20; 964173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_NONE; 965173273Ssam } 966173273Ssam ni->ni_htctlchan = ni->ni_chan->ic_ieee; 967173273Ssam 968173273Ssam ni->ni_htopmode = 0; /* XXX need protection state */ 969173273Ssam ni->ni_htstbc = 0; /* XXX need info */ 970173273Ssam 971173273Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 972173273Ssam tap = &ni->ni_tx_ampdu[ac]; 973173273Ssam tap->txa_ac = ac; 974173273Ssam } 975173273Ssam /* NB: AMPDU tx/rx governed by IEEE80211_FEXT_AMPDU_{TX,RX} */ 976173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 977173273Ssam} 978173273Ssam 979173273Ssam/* 980173273Ssam * Notify hostap vaps of a change in the HTINFO ie. 981173273Ssam */ 982173273Ssamstatic void 983173273Ssamhtinfo_notify(struct ieee80211com *ic) 984173273Ssam{ 985178354Ssam struct ieee80211vap *vap; 986178354Ssam int first = 1; 987178354Ssam 988178354Ssam IEEE80211_LOCK_ASSERT(ic); 989178354Ssam 990178354Ssam TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 991178354Ssam if (vap->iv_opmode != IEEE80211_M_HOSTAP) 992178354Ssam continue; 993183253Ssam if (vap->iv_state != IEEE80211_S_RUN || 994183253Ssam !IEEE80211_IS_CHAN_HT(vap->iv_bss->ni_chan)) 995183253Ssam continue; 996178354Ssam if (first) { 997178354Ssam IEEE80211_NOTE(vap, 998178354Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, 999178354Ssam vap->iv_bss, 1000178354Ssam "HT bss occupancy change: %d sta, %d ht, " 1001178354Ssam "%d ht40%s, HT protmode now 0x%x" 1002178354Ssam , ic->ic_sta_assoc 1003178354Ssam , ic->ic_ht_sta_assoc 1004178354Ssam , ic->ic_ht40_sta_assoc 1005178354Ssam , (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) ? 1006178354Ssam ", non-HT sta present" : "" 1007178354Ssam , ic->ic_curhtprotmode); 1008178354Ssam first = 0; 1009178354Ssam } 1010178354Ssam ieee80211_beacon_notify(vap, IEEE80211_BEACON_HTINFO); 1011178354Ssam } 1012173273Ssam} 1013173273Ssam 1014173273Ssam/* 1015173273Ssam * Calculate HT protection mode from current 1016173273Ssam * state and handle updates. 1017173273Ssam */ 1018173273Ssamstatic void 1019173273Ssamhtinfo_update(struct ieee80211com *ic) 1020173273Ssam{ 1021173273Ssam uint8_t protmode; 1022173273Ssam 1023178354Ssam if (ic->ic_sta_assoc != ic->ic_ht_sta_assoc) { 1024178354Ssam protmode = IEEE80211_HTINFO_OPMODE_MIXED 1025178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1026178354Ssam } else if (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) { 1027173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PROTOPT 1028178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1029178354Ssam } else if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 1030178354Ssam IEEE80211_IS_CHAN_HT40(ic->ic_bsschan) && 1031173273Ssam ic->ic_sta_assoc != ic->ic_ht40_sta_assoc) { 1032173273Ssam protmode = IEEE80211_HTINFO_OPMODE_HT20PR; 1033173273Ssam } else { 1034173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PURE; 1035173273Ssam } 1036173273Ssam if (protmode != ic->ic_curhtprotmode) { 1037173273Ssam ic->ic_curhtprotmode = protmode; 1038173273Ssam htinfo_notify(ic); 1039173273Ssam } 1040173273Ssam} 1041173273Ssam 1042173273Ssam/* 1043173273Ssam * Handle an HT station joining a BSS. 1044173273Ssam */ 1045173273Ssamvoid 1046173273Ssamieee80211_ht_node_join(struct ieee80211_node *ni) 1047173273Ssam{ 1048173273Ssam struct ieee80211com *ic = ni->ni_ic; 1049173273Ssam 1050173273Ssam IEEE80211_LOCK_ASSERT(ic); 1051173273Ssam 1052173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1053173273Ssam ic->ic_ht_sta_assoc++; 1054173273Ssam if (ni->ni_chw == 40) 1055173273Ssam ic->ic_ht40_sta_assoc++; 1056173273Ssam } 1057173273Ssam htinfo_update(ic); 1058173273Ssam} 1059173273Ssam 1060173273Ssam/* 1061173273Ssam * Handle an HT station leaving a BSS. 1062173273Ssam */ 1063173273Ssamvoid 1064173273Ssamieee80211_ht_node_leave(struct ieee80211_node *ni) 1065173273Ssam{ 1066173273Ssam struct ieee80211com *ic = ni->ni_ic; 1067173273Ssam 1068173273Ssam IEEE80211_LOCK_ASSERT(ic); 1069173273Ssam 1070173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1071173273Ssam ic->ic_ht_sta_assoc--; 1072173273Ssam if (ni->ni_chw == 40) 1073173273Ssam ic->ic_ht40_sta_assoc--; 1074173273Ssam } 1075173273Ssam htinfo_update(ic); 1076173273Ssam} 1077173273Ssam 1078173273Ssam/* 1079173273Ssam * Public version of htinfo_update; used for processing 1080178354Ssam * beacon frames from overlapping bss. 1081178354Ssam * 1082178354Ssam * Caller can specify either IEEE80211_HTINFO_OPMODE_MIXED 1083178354Ssam * (on receipt of a beacon that advertises MIXED) or 1084178354Ssam * IEEE80211_HTINFO_OPMODE_PROTOPT (on receipt of a beacon 1085178354Ssam * from an overlapping legacy bss). We treat MIXED with 1086178354Ssam * a higher precedence than PROTOPT (i.e. we will not change 1087178354Ssam * change PROTOPT -> MIXED; only MIXED -> PROTOPT). This 1088178354Ssam * corresponds to how we handle things in htinfo_update. 1089173273Ssam */ 1090173273Ssamvoid 1091178354Ssamieee80211_htprot_update(struct ieee80211com *ic, int protmode) 1092173273Ssam{ 1093178354Ssam#define OPMODE(x) SM(x, IEEE80211_HTINFO_OPMODE) 1094183246Ssam IEEE80211_LOCK(ic); 1095178354Ssam 1096178354Ssam /* track non-HT station presence */ 1097178354Ssam KASSERT(protmode & IEEE80211_HTINFO_NONHT_PRESENT, 1098183246Ssam ("protmode 0x%x", protmode)); 1099178354Ssam ic->ic_flags_ext |= IEEE80211_FEXT_NONHT_PR; 1100178354Ssam ic->ic_lastnonht = ticks; 1101178354Ssam 1102183246Ssam if (protmode != ic->ic_curhtprotmode && 1103183246Ssam (OPMODE(ic->ic_curhtprotmode) != IEEE80211_HTINFO_OPMODE_MIXED || 1104183246Ssam OPMODE(protmode) == IEEE80211_HTINFO_OPMODE_PROTOPT)) { 1105183246Ssam /* push beacon update */ 1106183246Ssam ic->ic_curhtprotmode = protmode; 1107183246Ssam htinfo_notify(ic); 1108183246Ssam } 1109181197Ssam IEEE80211_UNLOCK(ic); 1110178354Ssam#undef OPMODE 1111173273Ssam} 1112173273Ssam 1113173273Ssam/* 1114173273Ssam * Time out presence of an overlapping bss with non-HT 1115173273Ssam * stations. When operating in hostap mode we listen for 1116173273Ssam * beacons from other stations and if we identify a non-HT 1117173273Ssam * station is present we update the opmode field of the 1118173273Ssam * HTINFO ie. To identify when all non-HT stations are 1119173273Ssam * gone we time out this condition. 1120173273Ssam */ 1121173273Ssamvoid 1122173273Ssamieee80211_ht_timeout(struct ieee80211com *ic) 1123173273Ssam{ 1124173273Ssam IEEE80211_LOCK_ASSERT(ic); 1125173273Ssam 1126173273Ssam if ((ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) && 1127173273Ssam time_after(ticks, ic->ic_lastnonht + IEEE80211_NONHT_PRESENT_AGE)) { 1128173273Ssam#if 0 1129178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1130173273Ssam "%s", "time out non-HT STA present on channel"); 1131173273Ssam#endif 1132173273Ssam ic->ic_flags_ext &= ~IEEE80211_FEXT_NONHT_PR; 1133173273Ssam htinfo_update(ic); 1134173273Ssam } 1135173273Ssam} 1136173273Ssam 1137170530Ssam/* unalligned little endian access */ 1138170530Ssam#define LE_READ_2(p) \ 1139170530Ssam ((uint16_t) \ 1140170530Ssam ((((const uint8_t *)(p))[0] ) | \ 1141170530Ssam (((const uint8_t *)(p))[1] << 8))) 1142170530Ssam 1143170530Ssam/* 1144170530Ssam * Process an 802.11n HT capabilities ie. 1145170530Ssam */ 1146170530Ssamvoid 1147170530Ssamieee80211_parse_htcap(struct ieee80211_node *ni, const uint8_t *ie) 1148170530Ssam{ 1149178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1150170530Ssam 1151170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) { 1152170530Ssam /* 1153170530Ssam * Station used Vendor OUI ie to associate; 1154170530Ssam * mark the node so when we respond we'll use 1155170530Ssam * the Vendor OUI's and not the standard ie's. 1156170530Ssam */ 1157170530Ssam ni->ni_flags |= IEEE80211_NODE_HTCOMPAT; 1158170530Ssam ie += 4; 1159170530Ssam } else 1160170530Ssam ni->ni_flags &= ~IEEE80211_NODE_HTCOMPAT; 1161170530Ssam 1162170530Ssam ni->ni_htcap = LE_READ_2(ie + 1163170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_cap)); 1164170530Ssam ni->ni_htparam = ie[__offsetof(struct ieee80211_ie_htcap, hc_param)]; 1165173273Ssam /* XXX needed or will ieee80211_parse_htinfo always be called? */ 1166173273Ssam ni->ni_chw = (ni->ni_htcap & IEEE80211_HTCAP_CHWIDTH40) && 1167178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) ? 40 : 20; 1168170530Ssam} 1169170530Ssam 1170170530Ssam/* 1171173273Ssam * Process an 802.11n HT info ie and update the node state. 1172173273Ssam * Note that we handle use this information to identify the 1173173273Ssam * correct channel (HT20, HT40+, HT40-, legacy). The caller 1174173273Ssam * is responsible for insuring any required channel change is 1175173273Ssam * done (e.g. in sta mode when parsing the contents of a 1176173273Ssam * beacon frame). 1177170530Ssam */ 1178170530Ssamvoid 1179170530Ssamieee80211_parse_htinfo(struct ieee80211_node *ni, const uint8_t *ie) 1180170530Ssam{ 1181173273Ssam struct ieee80211com *ic = ni->ni_ic; 1182178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1183170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1184173273Ssam struct ieee80211_channel *c; 1185170530Ssam uint16_t w; 1186173273Ssam int htflags, chanflags; 1187170530Ssam 1188170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1189170530Ssam ie += 4; 1190170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1191170530Ssam ni->ni_htctlchan = htinfo->hi_ctrlchannel; 1192170530Ssam ni->ni_ht2ndchan = SM(htinfo->hi_byte1, IEEE80211_HTINFO_2NDCHAN); 1193172055Ssam w = LE_READ_2(&htinfo->hi_byte2); 1194170530Ssam ni->ni_htopmode = SM(w, IEEE80211_HTINFO_OPMODE); 1195170530Ssam w = LE_READ_2(&htinfo->hi_byte45); 1196170530Ssam ni->ni_htstbc = SM(w, IEEE80211_HTINFO_BASIC_STBCMCS); 1197173273Ssam /* 1198173273Ssam * Handle 11n channel switch. Use the received HT ie's to 1199173273Ssam * identify the right channel to use. If we cannot locate it 1200173273Ssam * in the channel table then fallback to legacy operation. 1201173273Ssam */ 1202178354Ssam /* NB: honor operating mode constraint */ 1203178354Ssam htflags = (vap->iv_flags_ext & IEEE80211_FEXT_HT) ? 1204173273Ssam IEEE80211_CHAN_HT20 : 0; 1205173273Ssam if ((htinfo->hi_byte1 & IEEE80211_HTINFO_TXWIDTH_2040) && 1206178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40)) { 1207173273Ssam if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_ABOVE) 1208173273Ssam htflags = IEEE80211_CHAN_HT40U; 1209173273Ssam else if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_BELOW) 1210173273Ssam htflags = IEEE80211_CHAN_HT40D; 1211170530Ssam } 1212173273Ssam chanflags = (ni->ni_chan->ic_flags &~ IEEE80211_CHAN_HT) | htflags; 1213173273Ssam if (chanflags != ni->ni_chan->ic_flags) { 1214173273Ssam c = ieee80211_find_channel(ic, ni->ni_chan->ic_freq, chanflags); 1215178354Ssam if (c == NULL && (htflags & IEEE80211_CHAN_HT40)) { 1216173273Ssam /* 1217173273Ssam * No HT40 channel entry in our table; fall back 1218173273Ssam * to HT20 operation. This should not happen. 1219173273Ssam */ 1220173273Ssam c = findhtchan(ic, ni->ni_chan, IEEE80211_CHAN_HT20); 1221178354Ssam IEEE80211_NOTE(vap, 1222173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1223173273Ssam "no HT40 channel (freq %u), falling back to HT20", 1224173273Ssam ni->ni_chan->ic_freq); 1225173273Ssam /* XXX stat */ 1226173273Ssam } 1227173273Ssam if (c != NULL && c != ni->ni_chan) { 1228178354Ssam IEEE80211_NOTE(vap, 1229173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1230173273Ssam "switch station to HT%d channel %u/0x%x", 1231173273Ssam IEEE80211_IS_CHAN_HT40(c) ? 40 : 20, 1232173273Ssam c->ic_freq, c->ic_flags); 1233173273Ssam ni->ni_chan = c; 1234173273Ssam } 1235173273Ssam /* NB: caller responsible for forcing any channel change */ 1236173273Ssam } 1237173273Ssam /* update node's tx channel width */ 1238173273Ssam ni->ni_chw = IEEE80211_IS_CHAN_HT40(ni->ni_chan)? 40 : 20; 1239170530Ssam} 1240170530Ssam 1241170530Ssam/* 1242170530Ssam * Install received HT rate set by parsing the HT cap ie. 1243170530Ssam */ 1244170530Ssamint 1245170530Ssamieee80211_setup_htrates(struct ieee80211_node *ni, const uint8_t *ie, int flags) 1246170530Ssam{ 1247178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1248170530Ssam const struct ieee80211_ie_htcap *htcap; 1249170530Ssam struct ieee80211_htrateset *rs; 1250170530Ssam int i; 1251170530Ssam 1252170530Ssam rs = &ni->ni_htrates; 1253170530Ssam memset(rs, 0, sizeof(*rs)); 1254170530Ssam if (ie != NULL) { 1255170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1256170530Ssam ie += 4; 1257170530Ssam htcap = (const struct ieee80211_ie_htcap *) ie; 1258170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1259170530Ssam if (isclr(htcap->hc_mcsset, i)) 1260170530Ssam continue; 1261170530Ssam if (rs->rs_nrates == IEEE80211_HTRATE_MAXSIZE) { 1262178354Ssam IEEE80211_NOTE(vap, 1263170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1264170530Ssam "WARNING, HT rate set too large; only " 1265170530Ssam "using %u rates", IEEE80211_HTRATE_MAXSIZE); 1266178354Ssam vap->iv_stats.is_rx_rstoobig++; 1267170530Ssam break; 1268170530Ssam } 1269170530Ssam rs->rs_rates[rs->rs_nrates++] = i; 1270170530Ssam } 1271170530Ssam } 1272170530Ssam return ieee80211_fix_rate(ni, (struct ieee80211_rateset *) rs, flags); 1273170530Ssam} 1274170530Ssam 1275170530Ssam/* 1276170530Ssam * Mark rates in a node's HT rate set as basic according 1277170530Ssam * to the information in the supplied HT info ie. 1278170530Ssam */ 1279170530Ssamvoid 1280170530Ssamieee80211_setup_basic_htrates(struct ieee80211_node *ni, const uint8_t *ie) 1281170530Ssam{ 1282170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1283170530Ssam struct ieee80211_htrateset *rs; 1284170530Ssam int i, j; 1285170530Ssam 1286170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1287170530Ssam ie += 4; 1288170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1289170530Ssam rs = &ni->ni_htrates; 1290170530Ssam if (rs->rs_nrates == 0) { 1291178354Ssam IEEE80211_NOTE(ni->ni_vap, 1292170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1293170530Ssam "%s", "WARNING, empty HT rate set"); 1294170530Ssam return; 1295170530Ssam } 1296170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1297170530Ssam if (isclr(htinfo->hi_basicmcsset, i)) 1298170530Ssam continue; 1299170530Ssam for (j = 0; j < rs->rs_nrates; j++) 1300170530Ssam if ((rs->rs_rates[j] & IEEE80211_RATE_VAL) == i) 1301170530Ssam rs->rs_rates[j] |= IEEE80211_RATE_BASIC; 1302170530Ssam } 1303170530Ssam} 1304170530Ssam 1305170530Ssamstatic void 1306170530Ssamaddba_timeout(void *arg) 1307170530Ssam{ 1308170530Ssam struct ieee80211_tx_ampdu *tap = arg; 1309170530Ssam 1310170530Ssam /* XXX ? */ 1311170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1312170530Ssam tap->txa_attempts++; 1313170530Ssam} 1314170530Ssam 1315170530Ssamstatic void 1316170530Ssamaddba_start_timeout(struct ieee80211_tx_ampdu *tap) 1317170530Ssam{ 1318170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1319178354Ssam callout_reset(&tap->txa_timer, ieee80211_addba_timeout, 1320170530Ssam addba_timeout, tap); 1321170530Ssam tap->txa_flags |= IEEE80211_AGGR_XCHGPEND; 1322178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_timeout; 1323170530Ssam} 1324170530Ssam 1325170530Ssamstatic void 1326170530Ssamaddba_stop_timeout(struct ieee80211_tx_ampdu *tap) 1327170530Ssam{ 1328170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1329170530Ssam if (tap->txa_flags & IEEE80211_AGGR_XCHGPEND) { 1330170530Ssam callout_stop(&tap->txa_timer); 1331170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1332170530Ssam } 1333170530Ssam} 1334170530Ssam 1335170530Ssam/* 1336170530Ssam * Default method for requesting A-MPDU tx aggregation. 1337170530Ssam * We setup the specified state block and start a timer 1338170530Ssam * to wait for an ADDBA response frame. 1339170530Ssam */ 1340170530Ssamstatic int 1341170530Ssamieee80211_addba_request(struct ieee80211_node *ni, 1342170530Ssam struct ieee80211_tx_ampdu *tap, 1343170530Ssam int dialogtoken, int baparamset, int batimeout) 1344170530Ssam{ 1345170530Ssam int bufsiz; 1346170530Ssam 1347170530Ssam /* XXX locking */ 1348170530Ssam tap->txa_token = dialogtoken; 1349170530Ssam tap->txa_flags |= IEEE80211_AGGR_IMMEDIATE; 1350183245Ssam tap->txa_start = 0; 1351170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1352170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1353170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1354170530Ssam addba_start_timeout(tap); 1355170530Ssam return 1; 1356170530Ssam} 1357170530Ssam 1358170530Ssam/* 1359170530Ssam * Default method for processing an A-MPDU tx aggregation 1360170530Ssam * response. We shutdown any pending timer and update the 1361170530Ssam * state block according to the reply. 1362170530Ssam */ 1363170530Ssamstatic int 1364170530Ssamieee80211_addba_response(struct ieee80211_node *ni, 1365170530Ssam struct ieee80211_tx_ampdu *tap, 1366170530Ssam int status, int baparamset, int batimeout) 1367170530Ssam{ 1368170530Ssam int bufsiz; 1369170530Ssam 1370170530Ssam /* XXX locking */ 1371170530Ssam addba_stop_timeout(tap); 1372170530Ssam if (status == IEEE80211_STATUS_SUCCESS) { 1373170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1374170530Ssam /* XXX override our request? */ 1375170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1376170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1377170530Ssam tap->txa_flags |= IEEE80211_AGGR_RUNNING; 1378173273Ssam } else { 1379173273Ssam /* mark tid so we don't try again */ 1380173273Ssam tap->txa_flags |= IEEE80211_AGGR_NAK; 1381170530Ssam } 1382170530Ssam return 1; 1383170530Ssam} 1384170530Ssam 1385170530Ssam/* 1386170530Ssam * Default method for stopping A-MPDU tx aggregation. 1387170530Ssam * Any timer is cleared and we drain any pending frames. 1388170530Ssam */ 1389170530Ssamstatic void 1390170530Ssamieee80211_addba_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 1391170530Ssam{ 1392170530Ssam /* XXX locking */ 1393170530Ssam addba_stop_timeout(tap); 1394170530Ssam if (tap->txa_flags & IEEE80211_AGGR_RUNNING) { 1395182830Ssam /* XXX clear aggregation queue */ 1396170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_RUNNING; 1397170530Ssam } 1398170530Ssam tap->txa_attempts = 0; 1399170530Ssam} 1400170530Ssam 1401170530Ssam/* 1402170530Ssam * Process a received action frame using the default aggregation 1403170530Ssam * policy. We intercept ADDBA-related frames and use them to 1404170530Ssam * update our aggregation state. All other frames are passed up 1405170530Ssam * for processing by ieee80211_recv_action. 1406170530Ssam */ 1407170530Ssamstatic void 1408170530Ssamieee80211_aggr_recv_action(struct ieee80211_node *ni, 1409170530Ssam const uint8_t *frm, const uint8_t *efrm) 1410170530Ssam{ 1411170530Ssam struct ieee80211com *ic = ni->ni_ic; 1412178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1413170530Ssam const struct ieee80211_action *ia; 1414170530Ssam struct ieee80211_rx_ampdu *rap; 1415170530Ssam struct ieee80211_tx_ampdu *tap; 1416182829Ssam uint8_t dialogtoken, policy; 1417170530Ssam uint16_t baparamset, batimeout, baseqctl, code; 1418170530Ssam uint16_t args[4]; 1419170530Ssam int tid, ac, bufsiz; 1420170530Ssam 1421170530Ssam ia = (const struct ieee80211_action *) frm; 1422170530Ssam switch (ia->ia_category) { 1423170530Ssam case IEEE80211_ACTION_CAT_BA: 1424170530Ssam switch (ia->ia_action) { 1425170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1426170530Ssam dialogtoken = frm[2]; 1427170530Ssam baparamset = LE_READ_2(frm+3); 1428170530Ssam batimeout = LE_READ_2(frm+5); 1429170530Ssam baseqctl = LE_READ_2(frm+7); 1430170530Ssam 1431170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1432170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1433170530Ssam 1434178354Ssam IEEE80211_NOTE(vap, 1435170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1436170530Ssam "recv ADDBA request: dialogtoken %u " 1437170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d " 1438173273Ssam "baseqctl %d:%d", 1439173273Ssam dialogtoken, baparamset, tid, bufsiz, batimeout, 1440173273Ssam MS(baseqctl, IEEE80211_BASEQ_START), 1441173273Ssam MS(baseqctl, IEEE80211_BASEQ_FRAG)); 1442170530Ssam 1443170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1444170530Ssam 1445170530Ssam /* Send ADDBA response */ 1446170530Ssam args[0] = dialogtoken; 1447173273Ssam /* 1448173273Ssam * NB: We ack only if the sta associated with HT and 1449173273Ssam * the ap is configured to do AMPDU rx (the latter 1450173273Ssam * violates the 11n spec and is mostly for testing). 1451173273Ssam */ 1452173273Ssam if ((ni->ni_flags & IEEE80211_NODE_AMPDU_RX) && 1453178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_AMPDU_RX)) { 1454170530Ssam ampdu_rx_start(rap, bufsiz, 1455170530Ssam MS(baseqctl, IEEE80211_BASEQ_START)); 1456170530Ssam 1457170530Ssam args[1] = IEEE80211_STATUS_SUCCESS; 1458173273Ssam } else { 1459178354Ssam IEEE80211_NOTE(vap, 1460173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1461173273Ssam ni, "reject ADDBA request: %s", 1462173273Ssam ni->ni_flags & IEEE80211_NODE_AMPDU_RX ? 1463173273Ssam "administratively disabled" : 1464173273Ssam "not negotiated for station"); 1465178354Ssam vap->iv_stats.is_addba_reject++; 1466170530Ssam args[1] = IEEE80211_STATUS_UNSPECIFIED; 1467173273Ssam } 1468170530Ssam /* XXX honor rap flags? */ 1469170530Ssam args[2] = IEEE80211_BAPS_POLICY_IMMEDIATE 1470170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1471170530Ssam | SM(rap->rxa_wnd, IEEE80211_BAPS_BUFSIZ) 1472170530Ssam ; 1473170530Ssam args[3] = 0; 1474170530Ssam ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1475170530Ssam IEEE80211_ACTION_BA_ADDBA_RESPONSE, args); 1476170530Ssam return; 1477170530Ssam 1478170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1479170530Ssam dialogtoken = frm[2]; 1480170530Ssam code = LE_READ_2(frm+3); 1481170530Ssam baparamset = LE_READ_2(frm+5); 1482170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1483170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1484182829Ssam policy = MS(baparamset, IEEE80211_BAPS_POLICY); 1485170530Ssam batimeout = LE_READ_2(frm+7); 1486170530Ssam 1487173273Ssam ac = TID_TO_WME_AC(tid); 1488173273Ssam tap = &ni->ni_tx_ampdu[ac]; 1489175877Ssam if ((tap->txa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 1490178354Ssam IEEE80211_DISCARD_MAC(vap, 1491173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1492173273Ssam ni->ni_macaddr, "ADDBA response", 1493173273Ssam "no pending ADDBA, tid %d dialogtoken %u " 1494173273Ssam "code %d", tid, dialogtoken, code); 1495178354Ssam vap->iv_stats.is_addba_norequest++; 1496173273Ssam return; 1497173273Ssam } 1498173273Ssam if (dialogtoken != tap->txa_token) { 1499178354Ssam IEEE80211_DISCARD_MAC(vap, 1500173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1501173273Ssam ni->ni_macaddr, "ADDBA response", 1502173273Ssam "dialogtoken mismatch: waiting for %d, " 1503173273Ssam "received %d, tid %d code %d", 1504173273Ssam tap->txa_token, dialogtoken, tid, code); 1505178354Ssam vap->iv_stats.is_addba_badtoken++; 1506173273Ssam return; 1507173273Ssam } 1508182829Ssam /* NB: assumes IEEE80211_AGGR_IMMEDIATE is 1 */ 1509182829Ssam if (policy != (tap->txa_flags & IEEE80211_AGGR_IMMEDIATE)) { 1510182829Ssam IEEE80211_DISCARD_MAC(vap, 1511182829Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1512182829Ssam ni->ni_macaddr, "ADDBA response", 1513182829Ssam "policy mismatch: expecting %s, " 1514182829Ssam "received %s, tid %d code %d", 1515182829Ssam tap->txa_flags & IEEE80211_AGGR_IMMEDIATE, 1516182829Ssam policy, tid, code); 1517182829Ssam vap->iv_stats.is_addba_badpolicy++; 1518182829Ssam return; 1519182829Ssam } 1520182829Ssam#if 0 1521182829Ssam /* XXX we take MIN in ieee80211_addba_response */ 1522182829Ssam if (bufsiz > IEEE80211_AGGR_BAWMAX) { 1523182829Ssam IEEE80211_DISCARD_MAC(vap, 1524182829Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1525182829Ssam ni->ni_macaddr, "ADDBA response", 1526182829Ssam "BA window too large: max %d, " 1527182829Ssam "received %d, tid %d code %d", 1528182829Ssam bufsiz, IEEE80211_AGGR_BAWMAX, tid, code); 1529182829Ssam vap->iv_stats.is_addba_badbawinsize++; 1530182829Ssam return; 1531182829Ssam } 1532182829Ssam#endif 1533173273Ssam 1534178354Ssam IEEE80211_NOTE(vap, 1535170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1536170530Ssam "recv ADDBA response: dialogtoken %u code %d " 1537170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d", 1538170530Ssam dialogtoken, code, baparamset, tid, bufsiz, 1539170530Ssam batimeout); 1540170530Ssam ic->ic_addba_response(ni, tap, 1541170530Ssam code, baparamset, batimeout); 1542170530Ssam return; 1543170530Ssam 1544170530Ssam case IEEE80211_ACTION_BA_DELBA: 1545170530Ssam baparamset = LE_READ_2(frm+2); 1546170530Ssam code = LE_READ_2(frm+4); 1547170530Ssam 1548170530Ssam tid = MS(baparamset, IEEE80211_DELBAPS_TID); 1549170530Ssam 1550178354Ssam IEEE80211_NOTE(vap, 1551170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1552170530Ssam "recv DELBA: baparamset 0x%x (tid %d initiator %d) " 1553170530Ssam "code %d", baparamset, tid, 1554170530Ssam MS(baparamset, IEEE80211_DELBAPS_INIT), code); 1555170530Ssam 1556170530Ssam if ((baparamset & IEEE80211_DELBAPS_INIT) == 0) { 1557170530Ssam ac = TID_TO_WME_AC(tid); 1558170530Ssam tap = &ni->ni_tx_ampdu[ac]; 1559170530Ssam ic->ic_addba_stop(ni, tap); 1560170530Ssam } else { 1561170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1562170530Ssam ampdu_rx_stop(rap); 1563170530Ssam } 1564170530Ssam return; 1565170530Ssam } 1566170530Ssam break; 1567170530Ssam } 1568173273Ssam ieee80211_recv_action(ni, frm, efrm); 1569170530Ssam} 1570170530Ssam 1571170530Ssam/* 1572170530Ssam * Process a received 802.11n action frame. 1573170530Ssam * Aggregation-related frames are assumed to be handled 1574170530Ssam * already; we handle any other frames we can, otherwise 1575170530Ssam * complain about being unsupported (with debugging). 1576170530Ssam */ 1577170530Ssamvoid 1578170530Ssamieee80211_recv_action(struct ieee80211_node *ni, 1579170530Ssam const uint8_t *frm, const uint8_t *efrm) 1580170530Ssam{ 1581178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1582170530Ssam const struct ieee80211_action *ia; 1583170530Ssam int chw; 1584170530Ssam 1585170530Ssam ia = (const struct ieee80211_action *) frm; 1586170530Ssam switch (ia->ia_category) { 1587170530Ssam case IEEE80211_ACTION_CAT_BA: 1588178354Ssam IEEE80211_NOTE(vap, 1589170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1590170530Ssam "%s: BA action %d not implemented", __func__, 1591170530Ssam ia->ia_action); 1592178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1593170530Ssam break; 1594170530Ssam case IEEE80211_ACTION_CAT_HT: 1595170530Ssam switch (ia->ia_action) { 1596170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1597170530Ssam chw = frm[2] == IEEE80211_A_HT_TXCHWIDTH_2040 ? 40 : 20; 1598182831Ssam IEEE80211_NOTE(vap, 1599182831Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1600182831Ssam "%s: HT txchwidth, width %d%s", 1601182831Ssam __func__, chw, ni->ni_chw != chw ? "*" : ""); 1602170530Ssam if (chw != ni->ni_chw) { 1603170530Ssam ni->ni_chw = chw; 1604182831Ssam /* XXX notify on change */ 1605170530Ssam } 1606170530Ssam break; 1607173273Ssam case IEEE80211_ACTION_HT_MIMOPWRSAVE: 1608178354Ssam IEEE80211_NOTE(vap, 1609173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1610173273Ssam "%s: HT MIMO PS", __func__); 1611173273Ssam break; 1612170530Ssam default: 1613178354Ssam IEEE80211_NOTE(vap, 1614170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1615170530Ssam "%s: HT action %d not implemented", __func__, 1616170530Ssam ia->ia_action); 1617178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1618170530Ssam break; 1619170530Ssam } 1620170530Ssam break; 1621170530Ssam default: 1622178354Ssam IEEE80211_NOTE(vap, 1623170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1624170530Ssam "%s: category %d not implemented", __func__, 1625170530Ssam ia->ia_category); 1626178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1627170530Ssam break; 1628170530Ssam } 1629170530Ssam} 1630170530Ssam 1631170530Ssam/* 1632170530Ssam * Transmit processing. 1633170530Ssam */ 1634170530Ssam 1635170530Ssam/* 1636178354Ssam * Check if A-MPDU should be requested/enabled for a stream. 1637178354Ssam * We require a traffic rate above a per-AC threshold and we 1638178354Ssam * also handle backoff from previous failed attempts. 1639178354Ssam * 1640178354Ssam * Drivers may override this method to bring in information 1641178354Ssam * such as link state conditions in making the decision. 1642178354Ssam */ 1643178354Ssamstatic int 1644178354Ssamieee80211_ampdu_enable(struct ieee80211_node *ni, 1645178354Ssam struct ieee80211_tx_ampdu *tap) 1646178354Ssam{ 1647178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1648178354Ssam 1649178354Ssam if (tap->txa_avgpps < vap->iv_ampdu_mintraffic[tap->txa_ac]) 1650178354Ssam return 0; 1651178354Ssam /* XXX check rssi? */ 1652178354Ssam if (tap->txa_attempts >= ieee80211_addba_maxtries && 1653178354Ssam ticks < tap->txa_nextrequest) { 1654178354Ssam /* 1655178354Ssam * Don't retry too often; txa_nextrequest is set 1656178354Ssam * to the minimum interval we'll retry after 1657178354Ssam * ieee80211_addba_maxtries failed attempts are made. 1658178354Ssam */ 1659178354Ssam return 0; 1660178354Ssam } 1661178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1662183249Ssam "enable AMPDU on %s, avgpps %d pkts %d", 1663183249Ssam ieee80211_wme_acnames[tap->txa_ac], tap->txa_avgpps, tap->txa_pkts); 1664178354Ssam return 1; 1665178354Ssam} 1666178354Ssam 1667178354Ssam/* 1668170530Ssam * Request A-MPDU tx aggregation. Setup local state and 1669170530Ssam * issue an ADDBA request. BA use will only happen after 1670170530Ssam * the other end replies with ADDBA response. 1671170530Ssam */ 1672170530Ssamint 1673170530Ssamieee80211_ampdu_request(struct ieee80211_node *ni, 1674170530Ssam struct ieee80211_tx_ampdu *tap) 1675170530Ssam{ 1676170530Ssam struct ieee80211com *ic = ni->ni_ic; 1677170530Ssam uint16_t args[4]; 1678170530Ssam int tid, dialogtoken; 1679170530Ssam static int tokens = 0; /* XXX */ 1680170530Ssam 1681170530Ssam /* XXX locking */ 1682170530Ssam if ((tap->txa_flags & IEEE80211_AGGR_SETUP) == 0) { 1683170530Ssam /* do deferred setup of state */ 1684170530Ssam callout_init(&tap->txa_timer, CALLOUT_MPSAFE); 1685170530Ssam tap->txa_flags |= IEEE80211_AGGR_SETUP; 1686170530Ssam } 1687173273Ssam /* XXX hack for not doing proper locking */ 1688173273Ssam tap->txa_flags &= ~IEEE80211_AGGR_NAK; 1689173273Ssam 1690170530Ssam dialogtoken = (tokens+1) % 63; /* XXX */ 1691183245Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1692183245Ssam tap->txa_start = ni->ni_txseqs[tid]; 1693170530Ssam 1694170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1695170530Ssam args[0] = dialogtoken; 1696170530Ssam args[1] = IEEE80211_BAPS_POLICY_IMMEDIATE 1697170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1698170530Ssam | SM(IEEE80211_AGGR_BAWMAX, IEEE80211_BAPS_BUFSIZ) 1699170530Ssam ; 1700170530Ssam args[2] = 0; /* batimeout */ 1701170530Ssam /* NB: do first so there's no race against reply */ 1702170530Ssam if (!ic->ic_addba_request(ni, tap, dialogtoken, args[1], args[2])) { 1703170530Ssam /* unable to setup state, don't make request */ 1704178354Ssam IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_11N, 1705173273Ssam ni, "%s: could not setup BA stream for AC %d", 1706173273Ssam __func__, tap->txa_ac); 1707173273Ssam /* defer next try so we don't slam the driver with requests */ 1708178354Ssam tap->txa_attempts = ieee80211_addba_maxtries; 1709178354Ssam /* NB: check in case driver wants to override */ 1710178354Ssam if (tap->txa_nextrequest <= ticks) 1711178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_backoff; 1712170530Ssam return 0; 1713170530Ssam } 1714170530Ssam tokens = dialogtoken; /* allocate token */ 1715183245Ssam /* NB: after calling ic_addba_request so driver can set txa_start */ 1716183245Ssam args[3] = SM(tap->txa_start, IEEE80211_BASEQ_START) 1717178953Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1718178953Ssam ; 1719170530Ssam return ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1720170530Ssam IEEE80211_ACTION_BA_ADDBA_REQUEST, args); 1721170530Ssam} 1722170530Ssam 1723170530Ssam/* 1724173273Ssam * Terminate an AMPDU tx stream. State is reclaimed 1725173273Ssam * and the peer notified with a DelBA Action frame. 1726173273Ssam */ 1727173273Ssamvoid 1728183250Ssamieee80211_ampdu_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap, 1729183250Ssam int reason) 1730173273Ssam{ 1731173273Ssam struct ieee80211com *ic = ni->ni_ic; 1732178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1733173273Ssam uint16_t args[4]; 1734173273Ssam 1735173273Ssam /* XXX locking */ 1736173273Ssam if (IEEE80211_AMPDU_RUNNING(tap)) { 1737178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1738183250Ssam ni, "%s: stop BA stream for AC %d (reason %d)", 1739183250Ssam __func__, tap->txa_ac, reason); 1740178354Ssam vap->iv_stats.is_ampdu_stop++; 1741173273Ssam 1742173273Ssam ic->ic_addba_stop(ni, tap); 1743173273Ssam args[0] = WME_AC_TO_TID(tap->txa_ac); 1744173273Ssam args[1] = IEEE80211_DELBAPS_INIT; 1745183250Ssam args[2] = reason; /* XXX reason code */ 1746173273Ssam ieee80211_send_action(ni, IEEE80211_ACTION_CAT_BA, 1747173273Ssam IEEE80211_ACTION_BA_DELBA, args); 1748173273Ssam } else { 1749178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1750183250Ssam ni, "%s: BA stream for AC %d not running (reason %d)", 1751183250Ssam __func__, tap->txa_ac, reason); 1752178354Ssam vap->iv_stats.is_ampdu_stop_failed++; 1753173273Ssam } 1754173273Ssam} 1755173273Ssam 1756173273Ssam/* 1757170530Ssam * Transmit a BAR frame to the specified node. The 1758170530Ssam * BAR contents are drawn from the supplied aggregation 1759170530Ssam * state associated with the node. 1760170530Ssam */ 1761170530Ssamint 1762170530Ssamieee80211_send_bar(struct ieee80211_node *ni, 1763170530Ssam const struct ieee80211_tx_ampdu *tap) 1764170530Ssam{ 1765178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1766170530Ssam#define ADDSHORT(frm, v) do { \ 1767170530Ssam frm[0] = (v) & 0xff; \ 1768170530Ssam frm[1] = (v) >> 8; \ 1769170530Ssam frm += 2; \ 1770170530Ssam} while (0) 1771178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1772170530Ssam struct ieee80211com *ic = ni->ni_ic; 1773170530Ssam struct ieee80211_frame_min *wh; 1774170530Ssam struct mbuf *m; 1775170530Ssam uint8_t *frm; 1776170530Ssam uint16_t barctl, barseqctl; 1777170530Ssam int tid, ret; 1778170530Ssam 1779170530Ssam ieee80211_ref_node(ni); 1780170530Ssam 1781170530Ssam m = ieee80211_getmgtframe(&frm, 1782170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame_min), 1783170530Ssam sizeof(struct ieee80211_ba_request) 1784170530Ssam ); 1785170530Ssam if (m == NULL) 1786170530Ssam senderr(ENOMEM, is_tx_nobuf); 1787170530Ssam 1788170530Ssam wh = mtod(m, struct ieee80211_frame_min *); 1789170530Ssam wh->i_fc[0] = IEEE80211_FC0_VERSION_0 | 1790170530Ssam IEEE80211_FC0_TYPE_CTL | IEEE80211_FC0_SUBTYPE_BAR; 1791170530Ssam wh->i_fc[1] = 0; 1792170530Ssam IEEE80211_ADDR_COPY(wh->i_addr1, ni->ni_macaddr); 1793178354Ssam IEEE80211_ADDR_COPY(wh->i_addr2, vap->iv_myaddr); 1794170530Ssam 1795170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1796170530Ssam barctl = (tap->txa_flags & IEEE80211_AGGR_IMMEDIATE ? 1797170530Ssam IEEE80211_BAPS_POLICY_IMMEDIATE : 1798170530Ssam IEEE80211_BAPS_POLICY_DELAYED) 1799170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1800170530Ssam | SM(tap->txa_wnd, IEEE80211_BAPS_BUFSIZ) 1801170530Ssam ; 1802170530Ssam barseqctl = SM(tap->txa_start, IEEE80211_BASEQ_START) 1803170530Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1804170530Ssam ; 1805170530Ssam ADDSHORT(frm, barctl); 1806170530Ssam ADDSHORT(frm, barseqctl); 1807170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1808170530Ssam 1809178354Ssam M_WME_SETAC(m, WME_AC_VO); 1810178354Ssam 1811170530Ssam IEEE80211_NODE_STAT(ni, tx_mgmt); /* XXX tx_ctl? */ 1812170530Ssam 1813178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_DEBUG | IEEE80211_MSG_DUMPPKTS, 1814173273Ssam ni, "send bar frame (tid %u start %u) on channel %u", 1815173273Ssam tid, tap->txa_start, ieee80211_chan2ieee(ic, ic->ic_curchan)); 1816170530Ssam 1817178354Ssam return ic->ic_raw_xmit(ni, m, NULL); 1818170530Ssambad: 1819170530Ssam ieee80211_free_node(ni); 1820170530Ssam return ret; 1821170530Ssam#undef ADDSHORT 1822170530Ssam#undef senderr 1823170530Ssam} 1824170530Ssam 1825170530Ssam/* 1826170530Ssam * Send an action management frame. The arguments are stuff 1827170530Ssam * into a frame without inspection; the caller is assumed to 1828170530Ssam * prepare them carefully (e.g. based on the aggregation state). 1829170530Ssam */ 1830170530Ssamint 1831170530Ssamieee80211_send_action(struct ieee80211_node *ni, 1832170530Ssam int category, int action, uint16_t args[4]) 1833170530Ssam{ 1834178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1835170530Ssam#define ADDSHORT(frm, v) do { \ 1836170530Ssam frm[0] = (v) & 0xff; \ 1837170530Ssam frm[1] = (v) >> 8; \ 1838170530Ssam frm += 2; \ 1839170530Ssam} while (0) 1840178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1841170530Ssam struct ieee80211com *ic = ni->ni_ic; 1842170530Ssam struct mbuf *m; 1843170530Ssam uint8_t *frm; 1844170530Ssam uint16_t baparamset; 1845170530Ssam int ret; 1846170530Ssam 1847170530Ssam KASSERT(ni != NULL, ("null node")); 1848170530Ssam 1849170530Ssam /* 1850170530Ssam * Hold a reference on the node so it doesn't go away until after 1851170530Ssam * the xmit is complete all the way in the driver. On error we 1852170530Ssam * will remove our reference. 1853170530Ssam */ 1854178354Ssam IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1855170530Ssam "ieee80211_ref_node (%s:%u) %p<%s> refcnt %d\n", 1856170530Ssam __func__, __LINE__, 1857170530Ssam ni, ether_sprintf(ni->ni_macaddr), 1858170530Ssam ieee80211_node_refcnt(ni)+1); 1859170530Ssam ieee80211_ref_node(ni); 1860170530Ssam 1861170530Ssam m = ieee80211_getmgtframe(&frm, 1862170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame), 1863170530Ssam sizeof(uint16_t) /* action+category */ 1864170530Ssam /* XXX may action payload */ 1865170530Ssam + sizeof(struct ieee80211_action_ba_addbaresponse) 1866170530Ssam ); 1867170530Ssam if (m == NULL) 1868170530Ssam senderr(ENOMEM, is_tx_nobuf); 1869170530Ssam 1870170530Ssam *frm++ = category; 1871170530Ssam *frm++ = action; 1872170530Ssam switch (category) { 1873170530Ssam case IEEE80211_ACTION_CAT_BA: 1874170530Ssam switch (action) { 1875170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1876178354Ssam IEEE80211_NOTE(vap, 1877170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1878173273Ssam "send ADDBA request: dialogtoken %d " 1879173273Ssam "baparamset 0x%x (tid %d) batimeout 0x%x baseqctl 0x%x", 1880173273Ssam args[0], args[1], MS(args[1], IEEE80211_BAPS_TID), 1881173273Ssam args[2], args[3]); 1882170530Ssam 1883170530Ssam *frm++ = args[0]; /* dialog token */ 1884170530Ssam ADDSHORT(frm, args[1]); /* baparamset */ 1885170530Ssam ADDSHORT(frm, args[2]); /* batimeout */ 1886170530Ssam ADDSHORT(frm, args[3]); /* baseqctl */ 1887170530Ssam break; 1888170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1889178354Ssam IEEE80211_NOTE(vap, 1890170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1891170530Ssam "send ADDBA response: dialogtoken %d status %d " 1892170530Ssam "baparamset 0x%x (tid %d) batimeout %d", 1893170530Ssam args[0], args[1], args[2], 1894170530Ssam MS(args[2], IEEE80211_BAPS_TID), args[3]); 1895170530Ssam 1896170530Ssam *frm++ = args[0]; /* dialog token */ 1897170530Ssam ADDSHORT(frm, args[1]); /* statuscode */ 1898170530Ssam ADDSHORT(frm, args[2]); /* baparamset */ 1899170530Ssam ADDSHORT(frm, args[3]); /* batimeout */ 1900170530Ssam break; 1901170530Ssam case IEEE80211_ACTION_BA_DELBA: 1902170530Ssam /* XXX */ 1903170530Ssam baparamset = SM(args[0], IEEE80211_DELBAPS_TID) 1904180309Ssam | args[1] 1905170530Ssam ; 1906170530Ssam ADDSHORT(frm, baparamset); 1907170530Ssam ADDSHORT(frm, args[2]); /* reason code */ 1908170530Ssam 1909178354Ssam IEEE80211_NOTE(vap, 1910170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1911170530Ssam "send DELBA action: tid %d, initiator %d reason %d", 1912170530Ssam args[0], args[1], args[2]); 1913170530Ssam break; 1914170530Ssam default: 1915170530Ssam goto badaction; 1916170530Ssam } 1917170530Ssam break; 1918170530Ssam case IEEE80211_ACTION_CAT_HT: 1919170530Ssam switch (action) { 1920170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1921178354Ssam IEEE80211_NOTE(vap, 1922170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1923170530Ssam ni, "send HT txchwidth: width %d", 1924178354Ssam IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 40 : 20 1925170530Ssam ); 1926178354Ssam *frm++ = IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 1927170530Ssam IEEE80211_A_HT_TXCHWIDTH_2040 : 1928170530Ssam IEEE80211_A_HT_TXCHWIDTH_20; 1929170530Ssam break; 1930170530Ssam default: 1931170530Ssam goto badaction; 1932170530Ssam } 1933170530Ssam break; 1934170530Ssam default: 1935170530Ssam badaction: 1936178354Ssam IEEE80211_NOTE(vap, 1937170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1938170530Ssam "%s: unsupported category %d action %d", __func__, 1939170530Ssam category, action); 1940170530Ssam senderr(EINVAL, is_tx_unknownmgt); 1941170530Ssam /* NOTREACHED */ 1942170530Ssam } 1943170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1944170530Ssam 1945178354Ssam return ieee80211_mgmt_output(ni, m, IEEE80211_FC0_SUBTYPE_ACTION); 1946170530Ssambad: 1947170530Ssam ieee80211_free_node(ni); 1948178354Ssam if (m != NULL) 1949178354Ssam m_freem(m); 1950170530Ssam return ret; 1951170530Ssam#undef ADDSHORT 1952170530Ssam#undef senderr 1953170530Ssam} 1954170530Ssam 1955170530Ssam/* 1956170530Ssam * Construct the MCS bit mask for inclusion 1957170530Ssam * in an HT information element. 1958170530Ssam */ 1959170530Ssamstatic void 1960170530Ssamieee80211_set_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 1961170530Ssam{ 1962170530Ssam int i; 1963170530Ssam 1964170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 1965170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 1966170530Ssam if (r < IEEE80211_HTRATE_MAXSIZE) { /* XXX? */ 1967170530Ssam /* NB: this assumes a particular implementation */ 1968170530Ssam setbit(frm, r); 1969170530Ssam } 1970170530Ssam } 1971170530Ssam} 1972170530Ssam 1973170530Ssam/* 1974170530Ssam * Add body of an HTCAP information element. 1975170530Ssam */ 1976170530Ssamstatic uint8_t * 1977170530Ssamieee80211_add_htcap_body(uint8_t *frm, struct ieee80211_node *ni) 1978170530Ssam{ 1979170530Ssam#define ADDSHORT(frm, v) do { \ 1980170530Ssam frm[0] = (v) & 0xff; \ 1981170530Ssam frm[1] = (v) >> 8; \ 1982170530Ssam frm += 2; \ 1983170530Ssam} while (0) 1984178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1985170530Ssam uint16_t caps; 1986173865Ssam int rxmax, density; 1987170530Ssam 1988170530Ssam /* HT capabilities */ 1989178354Ssam caps = vap->iv_htcaps & 0xffff; 1990173273Ssam /* 1991173273Ssam * Note channel width depends on whether we are operating as 1992173273Ssam * a sta or not. When operating as a sta we are generating 1993173273Ssam * a request based on our desired configuration. Otherwise 1994173273Ssam * we are operational and the channel attributes identify 1995173273Ssam * how we've been setup (which might be different if a fixed 1996173273Ssam * channel is specified). 1997173273Ssam */ 1998178354Ssam if (vap->iv_opmode == IEEE80211_M_STA) { 1999173273Ssam /* override 20/40 use based on config */ 2000178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) 2001173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 2002173273Ssam else 2003173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 2004173865Ssam /* use advertised setting (XXX locally constraint) */ 2005173865Ssam rxmax = MS(ni->ni_htparam, IEEE80211_HTCAP_MAXRXAMPDU); 2006173865Ssam density = MS(ni->ni_htparam, IEEE80211_HTCAP_MPDUDENSITY); 2007173273Ssam } else { 2008173273Ssam /* override 20/40 use based on current channel */ 2009178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 2010173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 2011173273Ssam else 2012173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 2013178354Ssam rxmax = vap->iv_ampdu_rxmax; 2014178354Ssam density = vap->iv_ampdu_density; 2015173273Ssam } 2016170530Ssam /* adjust short GI based on channel and config */ 2017178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) == 0) 2018170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI20; 2019178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) == 0 || 2020170530Ssam (caps & IEEE80211_HTCAP_CHWIDTH40) == 0) 2021170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI40; 2022170530Ssam ADDSHORT(frm, caps); 2023170530Ssam 2024170530Ssam /* HT parameters */ 2025173865Ssam *frm = SM(rxmax, IEEE80211_HTCAP_MAXRXAMPDU) 2026173865Ssam | SM(density, IEEE80211_HTCAP_MPDUDENSITY) 2027173273Ssam ; 2028170530Ssam frm++; 2029170530Ssam 2030170530Ssam /* pre-zero remainder of ie */ 2031170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htcap) - 2032170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset)); 2033170530Ssam 2034170530Ssam /* supported MCS set */ 2035173273Ssam /* 2036173273Ssam * XXX it would better to get the rate set from ni_htrates 2037173273Ssam * so we can restrict it but for sta mode ni_htrates isn't 2038173273Ssam * setup when we're called to form an AssocReq frame so for 2039173273Ssam * now we're restricted to the default HT rate set. 2040173273Ssam */ 2041173273Ssam ieee80211_set_htrates(frm, &ieee80211_rateset_11n); 2042170530Ssam 2043170530Ssam frm += sizeof(struct ieee80211_ie_htcap) - 2044170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset); 2045170530Ssam return frm; 2046170530Ssam#undef ADDSHORT 2047170530Ssam} 2048170530Ssam 2049170530Ssam/* 2050170530Ssam * Add 802.11n HT capabilities information element 2051170530Ssam */ 2052170530Ssamuint8_t * 2053170530Ssamieee80211_add_htcap(uint8_t *frm, struct ieee80211_node *ni) 2054170530Ssam{ 2055170530Ssam frm[0] = IEEE80211_ELEMID_HTCAP; 2056170530Ssam frm[1] = sizeof(struct ieee80211_ie_htcap) - 2; 2057170530Ssam return ieee80211_add_htcap_body(frm + 2, ni); 2058170530Ssam} 2059170530Ssam 2060170530Ssam/* 2061170530Ssam * Add Broadcom OUI wrapped standard HTCAP ie; this is 2062170530Ssam * used for compatibility w/ pre-draft implementations. 2063170530Ssam */ 2064170530Ssamuint8_t * 2065170530Ssamieee80211_add_htcap_vendor(uint8_t *frm, struct ieee80211_node *ni) 2066170530Ssam{ 2067170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2068170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htcap) - 2; 2069170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2070170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2071170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2072170530Ssam frm[5] = BCM_OUI_HTCAP; 2073170530Ssam return ieee80211_add_htcap_body(frm + 6, ni); 2074170530Ssam} 2075170530Ssam 2076170530Ssam/* 2077170530Ssam * Construct the MCS bit mask of basic rates 2078170530Ssam * for inclusion in an HT information element. 2079170530Ssam */ 2080170530Ssamstatic void 2081170530Ssamieee80211_set_basic_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 2082170530Ssam{ 2083170530Ssam int i; 2084170530Ssam 2085170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 2086170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 2087170530Ssam if ((rs->rs_rates[i] & IEEE80211_RATE_BASIC) && 2088170530Ssam r < IEEE80211_HTRATE_MAXSIZE) { 2089170530Ssam /* NB: this assumes a particular implementation */ 2090170530Ssam setbit(frm, r); 2091170530Ssam } 2092170530Ssam } 2093170530Ssam} 2094170530Ssam 2095170530Ssam/* 2096172211Ssam * Update the HTINFO ie for a beacon frame. 2097172211Ssam */ 2098172211Ssamvoid 2099178354Ssamieee80211_ht_update_beacon(struct ieee80211vap *vap, 2100172211Ssam struct ieee80211_beacon_offsets *bo) 2101172211Ssam{ 2102172211Ssam#define PROTMODE (IEEE80211_HTINFO_OPMODE|IEEE80211_HTINFO_NONHT_PRESENT) 2103178354Ssam const struct ieee80211_channel *bsschan = vap->iv_bss->ni_chan; 2104178354Ssam struct ieee80211com *ic = vap->iv_ic; 2105172211Ssam struct ieee80211_ie_htinfo *ht = 2106172211Ssam (struct ieee80211_ie_htinfo *) bo->bo_htinfo; 2107172211Ssam 2108172211Ssam /* XXX only update on channel change */ 2109178354Ssam ht->hi_ctrlchannel = ieee80211_chan2ieee(ic, bsschan); 2110172211Ssam ht->hi_byte1 = IEEE80211_HTINFO_RIFSMODE_PROH; 2111178354Ssam if (IEEE80211_IS_CHAN_HT40U(bsschan)) 2112172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2113178354Ssam else if (IEEE80211_IS_CHAN_HT40D(bsschan)) 2114172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2115172211Ssam else 2116172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_NONE; 2117178354Ssam if (IEEE80211_IS_CHAN_HT40(bsschan)) 2118172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_TXWIDTH_2040; 2119172211Ssam 2120172211Ssam /* protection mode */ 2121172211Ssam ht->hi_byte2 = (ht->hi_byte2 &~ PROTMODE) | ic->ic_curhtprotmode; 2122172211Ssam 2123172211Ssam /* XXX propagate to vendor ie's */ 2124172211Ssam#undef PROTMODE 2125172211Ssam} 2126172211Ssam 2127172211Ssam/* 2128170530Ssam * Add body of an HTINFO information element. 2129173273Ssam * 2130173273Ssam * NB: We don't use struct ieee80211_ie_htinfo because we can 2131173273Ssam * be called to fillin both a standard ie and a compat ie that 2132173273Ssam * has a vendor OUI at the front. 2133170530Ssam */ 2134170530Ssamstatic uint8_t * 2135170530Ssamieee80211_add_htinfo_body(uint8_t *frm, struct ieee80211_node *ni) 2136170530Ssam{ 2137170530Ssam struct ieee80211com *ic = ni->ni_ic; 2138170530Ssam 2139170530Ssam /* pre-zero remainder of ie */ 2140170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htinfo) - 2); 2141170530Ssam 2142170530Ssam /* primary/control channel center */ 2143178354Ssam *frm++ = ieee80211_chan2ieee(ic, ni->ni_chan); 2144170530Ssam 2145170530Ssam frm[0] = IEEE80211_HTINFO_RIFSMODE_PROH; 2146178354Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 2147170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2148178354Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 2149170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2150170530Ssam else 2151170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_NONE; 2152178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 2153170530Ssam frm[0] |= IEEE80211_HTINFO_TXWIDTH_2040; 2154170530Ssam 2155172211Ssam frm[1] = ic->ic_curhtprotmode; 2156170530Ssam 2157170530Ssam frm += 5; 2158170530Ssam 2159170530Ssam /* basic MCS set */ 2160170530Ssam ieee80211_set_basic_htrates(frm, &ni->ni_htrates); 2161170530Ssam frm += sizeof(struct ieee80211_ie_htinfo) - 2162170530Ssam __offsetof(struct ieee80211_ie_htinfo, hi_basicmcsset); 2163170530Ssam return frm; 2164170530Ssam} 2165170530Ssam 2166170530Ssam/* 2167170530Ssam * Add 802.11n HT information information element. 2168170530Ssam */ 2169170530Ssamuint8_t * 2170170530Ssamieee80211_add_htinfo(uint8_t *frm, struct ieee80211_node *ni) 2171170530Ssam{ 2172170530Ssam frm[0] = IEEE80211_ELEMID_HTINFO; 2173170530Ssam frm[1] = sizeof(struct ieee80211_ie_htinfo) - 2; 2174170530Ssam return ieee80211_add_htinfo_body(frm + 2, ni); 2175170530Ssam} 2176170530Ssam 2177170530Ssam/* 2178170530Ssam * Add Broadcom OUI wrapped standard HTINFO ie; this is 2179170530Ssam * used for compatibility w/ pre-draft implementations. 2180170530Ssam */ 2181170530Ssamuint8_t * 2182170530Ssamieee80211_add_htinfo_vendor(uint8_t *frm, struct ieee80211_node *ni) 2183170530Ssam{ 2184170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2185170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htinfo) - 2; 2186170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2187170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2188170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2189170530Ssam frm[5] = BCM_OUI_HTINFO; 2190170530Ssam return ieee80211_add_htinfo_body(frm + 6, ni); 2191170530Ssam} 2192