1 | // SPDX-License-Identifier: GPL-2.0-only |
2 | /* |
3 | * spectrum management |
4 | * |
5 | * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> |
6 | * Copyright 2002-2005, Instant802 Networks, Inc. |
7 | * Copyright 2005-2006, Devicescape Software, Inc. |
8 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> |
9 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> |
10 | * Copyright 2007-2008, Intel Corporation |
11 | * Copyright 2008, Johannes Berg <johannes@sipsolutions.net> |
12 | * Copyright (C) 2018, 2020, 2022-2023 Intel Corporation |
13 | */ |
14 | |
15 | #include <linux/ieee80211.h> |
16 | #include <net/cfg80211.h> |
17 | #include <net/mac80211.h> |
18 | #include "ieee80211_i.h" |
19 | #include "sta_info.h" |
20 | #include "wme.h" |
21 | |
22 | static bool |
23 | wbcs_elem_to_chandef(const struct ieee80211_wide_bw_chansw_ie *wbcs_elem, |
24 | struct cfg80211_chan_def *chandef) |
25 | { |
26 | u8 ccfs0 = wbcs_elem->new_center_freq_seg0; |
27 | u8 ccfs1 = wbcs_elem->new_center_freq_seg1; |
28 | u32 cf0 = ieee80211_channel_to_frequency(chan: ccfs0, band: chandef->chan->band); |
29 | u32 cf1 = ieee80211_channel_to_frequency(chan: ccfs1, band: chandef->chan->band); |
30 | |
31 | switch (wbcs_elem->new_channel_width) { |
32 | case IEEE80211_VHT_CHANWIDTH_160MHZ: |
33 | /* deprecated encoding */ |
34 | chandef->width = NL80211_CHAN_WIDTH_160; |
35 | chandef->center_freq1 = cf0; |
36 | break; |
37 | case IEEE80211_VHT_CHANWIDTH_80P80MHZ: |
38 | /* deprecated encoding */ |
39 | chandef->width = NL80211_CHAN_WIDTH_80P80; |
40 | chandef->center_freq1 = cf0; |
41 | chandef->center_freq2 = cf1; |
42 | break; |
43 | case IEEE80211_VHT_CHANWIDTH_80MHZ: |
44 | chandef->width = NL80211_CHAN_WIDTH_80; |
45 | chandef->center_freq1 = cf0; |
46 | |
47 | if (ccfs1) { |
48 | u8 diff = abs(ccfs0 - ccfs1); |
49 | |
50 | if (diff == 8) { |
51 | chandef->width = NL80211_CHAN_WIDTH_160; |
52 | chandef->center_freq1 = cf1; |
53 | } else if (diff > 8) { |
54 | chandef->width = NL80211_CHAN_WIDTH_80P80; |
55 | chandef->center_freq2 = cf1; |
56 | } |
57 | } |
58 | break; |
59 | case IEEE80211_VHT_CHANWIDTH_USE_HT: |
60 | default: |
61 | /* If the WBCS Element is present, new channel bandwidth is |
62 | * at least 40 MHz. |
63 | */ |
64 | chandef->width = NL80211_CHAN_WIDTH_40; |
65 | chandef->center_freq1 = cf0; |
66 | break; |
67 | } |
68 | |
69 | return cfg80211_chandef_valid(chandef); |
70 | } |
71 | |
72 | static void |
73 | validate_chandef_by_ht_vht_oper(struct ieee80211_sub_if_data *sdata, |
74 | struct ieee80211_conn_settings *conn, |
75 | u32 vht_cap_info, |
76 | struct cfg80211_chan_def *chandef) |
77 | { |
78 | u32 control_freq, center_freq1, center_freq2; |
79 | enum nl80211_chan_width chan_width; |
80 | struct ieee80211_ht_operation ht_oper; |
81 | struct ieee80211_vht_operation vht_oper; |
82 | |
83 | if (conn->mode < IEEE80211_CONN_MODE_HT || |
84 | conn->bw_limit < IEEE80211_CONN_BW_LIMIT_40) { |
85 | chandef->chan = NULL; |
86 | return; |
87 | } |
88 | |
89 | control_freq = chandef->chan->center_freq; |
90 | center_freq1 = chandef->center_freq1; |
91 | center_freq2 = chandef->center_freq2; |
92 | chan_width = chandef->width; |
93 | |
94 | ht_oper.primary_chan = ieee80211_frequency_to_channel(freq: control_freq); |
95 | if (control_freq != center_freq1) |
96 | ht_oper.ht_param = control_freq > center_freq1 ? |
97 | IEEE80211_HT_PARAM_CHA_SEC_BELOW : |
98 | IEEE80211_HT_PARAM_CHA_SEC_ABOVE; |
99 | else |
100 | ht_oper.ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE; |
101 | |
102 | ieee80211_chandef_ht_oper(ht_oper: &ht_oper, chandef); |
103 | |
104 | if (conn->mode < IEEE80211_CONN_MODE_VHT) |
105 | return; |
106 | |
107 | vht_oper.center_freq_seg0_idx = |
108 | ieee80211_frequency_to_channel(freq: center_freq1); |
109 | vht_oper.center_freq_seg1_idx = center_freq2 ? |
110 | ieee80211_frequency_to_channel(freq: center_freq2) : 0; |
111 | |
112 | switch (chan_width) { |
113 | case NL80211_CHAN_WIDTH_320: |
114 | WARN_ON(1); |
115 | break; |
116 | case NL80211_CHAN_WIDTH_160: |
117 | vht_oper.chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ; |
118 | vht_oper.center_freq_seg1_idx = vht_oper.center_freq_seg0_idx; |
119 | vht_oper.center_freq_seg0_idx += |
120 | control_freq < center_freq1 ? -8 : 8; |
121 | break; |
122 | case NL80211_CHAN_WIDTH_80P80: |
123 | vht_oper.chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ; |
124 | break; |
125 | case NL80211_CHAN_WIDTH_80: |
126 | vht_oper.chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ; |
127 | break; |
128 | default: |
129 | vht_oper.chan_width = IEEE80211_VHT_CHANWIDTH_USE_HT; |
130 | break; |
131 | } |
132 | |
133 | ht_oper.operation_mode = |
134 | le16_encode_bits(v: vht_oper.center_freq_seg1_idx, |
135 | IEEE80211_HT_OP_MODE_CCFS2_MASK); |
136 | |
137 | if (!ieee80211_chandef_vht_oper(hw: &sdata->local->hw, vht_cap_info, |
138 | oper: &vht_oper, htop: &ht_oper, chandef)) |
139 | chandef->chan = NULL; |
140 | } |
141 | |
142 | static void |
143 | validate_chandef_by_6ghz_he_eht_oper(struct ieee80211_sub_if_data *sdata, |
144 | struct ieee80211_conn_settings *conn, |
145 | struct cfg80211_chan_def *chandef) |
146 | { |
147 | struct ieee80211_local *local = sdata->local; |
148 | u32 control_freq, center_freq1, center_freq2; |
149 | enum nl80211_chan_width chan_width; |
150 | struct { |
151 | struct ieee80211_he_operation _oper; |
152 | struct ieee80211_he_6ghz_oper _6ghz_oper; |
153 | } __packed he; |
154 | struct { |
155 | struct ieee80211_eht_operation _oper; |
156 | struct ieee80211_eht_operation_info _oper_info; |
157 | } __packed eht; |
158 | |
159 | if (conn->mode < IEEE80211_CONN_MODE_HE) { |
160 | chandef->chan = NULL; |
161 | return; |
162 | } |
163 | |
164 | control_freq = chandef->chan->center_freq; |
165 | center_freq1 = chandef->center_freq1; |
166 | center_freq2 = chandef->center_freq2; |
167 | chan_width = chandef->width; |
168 | |
169 | he._oper.he_oper_params = |
170 | le32_encode_bits(v: 1, IEEE80211_HE_OPERATION_6GHZ_OP_INFO); |
171 | he._6ghz_oper.primary = |
172 | ieee80211_frequency_to_channel(freq: control_freq); |
173 | he._6ghz_oper.ccfs0 = ieee80211_frequency_to_channel(freq: center_freq1); |
174 | he._6ghz_oper.ccfs1 = center_freq2 ? |
175 | ieee80211_frequency_to_channel(freq: center_freq2) : 0; |
176 | |
177 | switch (chan_width) { |
178 | case NL80211_CHAN_WIDTH_320: |
179 | he._6ghz_oper.ccfs1 = he._6ghz_oper.ccfs0; |
180 | he._6ghz_oper.ccfs0 += control_freq < center_freq1 ? -16 : 16; |
181 | he._6ghz_oper.control = IEEE80211_EHT_OPER_CHAN_WIDTH_320MHZ; |
182 | break; |
183 | case NL80211_CHAN_WIDTH_160: |
184 | he._6ghz_oper.ccfs1 = he._6ghz_oper.ccfs0; |
185 | he._6ghz_oper.ccfs0 += control_freq < center_freq1 ? -8 : 8; |
186 | fallthrough; |
187 | case NL80211_CHAN_WIDTH_80P80: |
188 | he._6ghz_oper.control = |
189 | IEEE80211_HE_6GHZ_OPER_CTRL_CHANWIDTH_160MHZ; |
190 | break; |
191 | case NL80211_CHAN_WIDTH_80: |
192 | he._6ghz_oper.control = |
193 | IEEE80211_HE_6GHZ_OPER_CTRL_CHANWIDTH_80MHZ; |
194 | break; |
195 | case NL80211_CHAN_WIDTH_40: |
196 | he._6ghz_oper.control = |
197 | IEEE80211_HE_6GHZ_OPER_CTRL_CHANWIDTH_40MHZ; |
198 | break; |
199 | default: |
200 | he._6ghz_oper.control = |
201 | IEEE80211_HE_6GHZ_OPER_CTRL_CHANWIDTH_20MHZ; |
202 | break; |
203 | } |
204 | |
205 | if (conn->mode < IEEE80211_CONN_MODE_EHT) { |
206 | if (!ieee80211_chandef_he_6ghz_oper(local, he_oper: &he._oper, |
207 | NULL, chandef)) |
208 | chandef->chan = NULL; |
209 | } else { |
210 | eht._oper.params = IEEE80211_EHT_OPER_INFO_PRESENT; |
211 | eht._oper_info.control = he._6ghz_oper.control; |
212 | eht._oper_info.ccfs0 = he._6ghz_oper.ccfs0; |
213 | eht._oper_info.ccfs1 = he._6ghz_oper.ccfs1; |
214 | |
215 | if (!ieee80211_chandef_he_6ghz_oper(local, he_oper: &he._oper, |
216 | eht_oper: &eht._oper, chandef)) |
217 | chandef->chan = NULL; |
218 | } |
219 | } |
220 | |
221 | int ieee80211_parse_ch_switch_ie(struct ieee80211_sub_if_data *sdata, |
222 | struct ieee802_11_elems *elems, |
223 | enum nl80211_band current_band, |
224 | u32 vht_cap_info, |
225 | struct ieee80211_conn_settings *conn, |
226 | u8 *bssid, |
227 | struct ieee80211_csa_ie *csa_ie) |
228 | { |
229 | enum nl80211_band new_band = current_band; |
230 | int new_freq; |
231 | u8 new_chan_no = 0, new_op_class = 0; |
232 | struct ieee80211_channel *new_chan; |
233 | struct cfg80211_chan_def new_chandef = {}; |
234 | const struct ieee80211_sec_chan_offs_ie *sec_chan_offs; |
235 | const struct ieee80211_wide_bw_chansw_ie *wide_bw_chansw_ie; |
236 | const struct ieee80211_bandwidth_indication *bwi; |
237 | const struct ieee80211_ext_chansw_ie *ext_chansw_elem; |
238 | int secondary_channel_offset = -1; |
239 | |
240 | memset(csa_ie, 0, sizeof(*csa_ie)); |
241 | |
242 | sec_chan_offs = elems->sec_chan_offs; |
243 | wide_bw_chansw_ie = elems->wide_bw_chansw_ie; |
244 | bwi = elems->bandwidth_indication; |
245 | ext_chansw_elem = elems->ext_chansw_ie; |
246 | |
247 | if (conn->mode < IEEE80211_CONN_MODE_HT || |
248 | conn->bw_limit < IEEE80211_CONN_BW_LIMIT_40) { |
249 | sec_chan_offs = NULL; |
250 | wide_bw_chansw_ie = NULL; |
251 | } |
252 | |
253 | if (conn->mode < IEEE80211_CONN_MODE_VHT) |
254 | wide_bw_chansw_ie = NULL; |
255 | |
256 | if (ext_chansw_elem) { |
257 | new_op_class = ext_chansw_elem->new_operating_class; |
258 | |
259 | if (!ieee80211_operating_class_to_band(operating_class: new_op_class, band: &new_band)) { |
260 | new_op_class = 0; |
261 | sdata_info(sdata, "cannot understand ECSA IE operating class, %d, ignoring\n" , |
262 | ext_chansw_elem->new_operating_class); |
263 | } else { |
264 | new_chan_no = ext_chansw_elem->new_ch_num; |
265 | csa_ie->count = ext_chansw_elem->count; |
266 | csa_ie->mode = ext_chansw_elem->mode; |
267 | } |
268 | } |
269 | |
270 | if (!new_op_class && elems->ch_switch_ie) { |
271 | new_chan_no = elems->ch_switch_ie->new_ch_num; |
272 | csa_ie->count = elems->ch_switch_ie->count; |
273 | csa_ie->mode = elems->ch_switch_ie->mode; |
274 | } |
275 | |
276 | /* nothing here we understand */ |
277 | if (!new_chan_no) |
278 | return 1; |
279 | |
280 | /* Mesh Channel Switch Parameters Element */ |
281 | if (elems->mesh_chansw_params_ie) { |
282 | csa_ie->ttl = elems->mesh_chansw_params_ie->mesh_ttl; |
283 | csa_ie->mode = elems->mesh_chansw_params_ie->mesh_flags; |
284 | csa_ie->pre_value = le16_to_cpu( |
285 | elems->mesh_chansw_params_ie->mesh_pre_value); |
286 | |
287 | if (elems->mesh_chansw_params_ie->mesh_flags & |
288 | WLAN_EID_CHAN_SWITCH_PARAM_REASON) |
289 | csa_ie->reason_code = le16_to_cpu( |
290 | elems->mesh_chansw_params_ie->mesh_reason); |
291 | } |
292 | |
293 | new_freq = ieee80211_channel_to_frequency(chan: new_chan_no, band: new_band); |
294 | new_chan = ieee80211_get_channel(wiphy: sdata->local->hw.wiphy, freq: new_freq); |
295 | if (!new_chan || new_chan->flags & IEEE80211_CHAN_DISABLED) { |
296 | sdata_info(sdata, |
297 | "BSS %pM switches to unsupported channel (%d MHz), disconnecting\n" , |
298 | bssid, new_freq); |
299 | return -EINVAL; |
300 | } |
301 | |
302 | if (sec_chan_offs) { |
303 | secondary_channel_offset = sec_chan_offs->sec_chan_offs; |
304 | } else if (conn->mode >= IEEE80211_CONN_MODE_HT) { |
305 | /* If the secondary channel offset IE is not present, |
306 | * we can't know what's the post-CSA offset, so the |
307 | * best we can do is use 20MHz. |
308 | */ |
309 | secondary_channel_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE; |
310 | } |
311 | |
312 | switch (secondary_channel_offset) { |
313 | default: |
314 | /* secondary_channel_offset was present but is invalid */ |
315 | case IEEE80211_HT_PARAM_CHA_SEC_NONE: |
316 | cfg80211_chandef_create(chandef: &csa_ie->chanreq.oper, channel: new_chan, |
317 | chantype: NL80211_CHAN_HT20); |
318 | break; |
319 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: |
320 | cfg80211_chandef_create(chandef: &csa_ie->chanreq.oper, channel: new_chan, |
321 | chantype: NL80211_CHAN_HT40PLUS); |
322 | break; |
323 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
324 | cfg80211_chandef_create(chandef: &csa_ie->chanreq.oper, channel: new_chan, |
325 | chantype: NL80211_CHAN_HT40MINUS); |
326 | break; |
327 | case -1: |
328 | cfg80211_chandef_create(chandef: &csa_ie->chanreq.oper, channel: new_chan, |
329 | chantype: NL80211_CHAN_NO_HT); |
330 | /* keep width for 5/10 MHz channels */ |
331 | switch (sdata->vif.bss_conf.chanreq.oper.width) { |
332 | case NL80211_CHAN_WIDTH_5: |
333 | case NL80211_CHAN_WIDTH_10: |
334 | csa_ie->chanreq.oper.width = |
335 | sdata->vif.bss_conf.chanreq.oper.width; |
336 | break; |
337 | default: |
338 | break; |
339 | } |
340 | break; |
341 | } |
342 | |
343 | /* parse one of the Elements to build a new chandef */ |
344 | memset(&new_chandef, 0, sizeof(new_chandef)); |
345 | new_chandef.chan = new_chan; |
346 | if (bwi) { |
347 | /* start with the CSA one */ |
348 | new_chandef = csa_ie->chanreq.oper; |
349 | /* and update the width accordingly */ |
350 | ieee80211_chandef_eht_oper(info: &bwi->info, chandef: &new_chandef); |
351 | } else if (!wide_bw_chansw_ie || !wbcs_elem_to_chandef(wbcs_elem: wide_bw_chansw_ie, |
352 | chandef: &new_chandef)) { |
353 | if (!ieee80211_operating_class_to_chandef(operating_class: new_op_class, chan: new_chan, |
354 | chandef: &new_chandef)) |
355 | new_chandef = csa_ie->chanreq.oper; |
356 | } |
357 | |
358 | /* check if the new chandef fits the capabilities */ |
359 | if (new_band == NL80211_BAND_6GHZ) |
360 | validate_chandef_by_6ghz_he_eht_oper(sdata, conn, chandef: &new_chandef); |
361 | else |
362 | validate_chandef_by_ht_vht_oper(sdata, conn, vht_cap_info, |
363 | chandef: &new_chandef); |
364 | |
365 | /* if data is there validate the bandwidth & use it */ |
366 | if (new_chandef.chan) { |
367 | if (conn->bw_limit < IEEE80211_CONN_BW_LIMIT_320 && |
368 | new_chandef.width == NL80211_CHAN_WIDTH_320) |
369 | ieee80211_chandef_downgrade(chandef: &new_chandef, NULL); |
370 | |
371 | if (conn->bw_limit < IEEE80211_CONN_BW_LIMIT_160 && |
372 | (new_chandef.width == NL80211_CHAN_WIDTH_80P80 || |
373 | new_chandef.width == NL80211_CHAN_WIDTH_160)) |
374 | ieee80211_chandef_downgrade(chandef: &new_chandef, NULL); |
375 | |
376 | if (!cfg80211_chandef_compatible(chandef1: &new_chandef, |
377 | chandef2: &csa_ie->chanreq.oper)) { |
378 | sdata_info(sdata, |
379 | "BSS %pM: CSA has inconsistent channel data, disconnecting\n" , |
380 | bssid); |
381 | return -EINVAL; |
382 | } |
383 | |
384 | csa_ie->chanreq.oper = new_chandef; |
385 | } |
386 | |
387 | if (elems->max_channel_switch_time) |
388 | csa_ie->max_switch_time = |
389 | (elems->max_channel_switch_time[0] << 0) | |
390 | (elems->max_channel_switch_time[1] << 8) | |
391 | (elems->max_channel_switch_time[2] << 16); |
392 | |
393 | return 0; |
394 | } |
395 | |
396 | static void ieee80211_send_refuse_measurement_request(struct ieee80211_sub_if_data *sdata, |
397 | struct ieee80211_msrment_ie *request_ie, |
398 | const u8 *da, const u8 *bssid, |
399 | u8 dialog_token) |
400 | { |
401 | struct ieee80211_local *local = sdata->local; |
402 | struct sk_buff *skb; |
403 | struct ieee80211_mgmt *msr_report; |
404 | |
405 | skb = dev_alloc_skb(length: sizeof(*msr_report) + local->hw.extra_tx_headroom + |
406 | sizeof(struct ieee80211_msrment_ie)); |
407 | if (!skb) |
408 | return; |
409 | |
410 | skb_reserve(skb, len: local->hw.extra_tx_headroom); |
411 | msr_report = skb_put_zero(skb, len: 24); |
412 | memcpy(msr_report->da, da, ETH_ALEN); |
413 | memcpy(msr_report->sa, sdata->vif.addr, ETH_ALEN); |
414 | memcpy(msr_report->bssid, bssid, ETH_ALEN); |
415 | msr_report->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | |
416 | IEEE80211_STYPE_ACTION); |
417 | |
418 | skb_put(skb, len: 1 + sizeof(msr_report->u.action.u.measurement)); |
419 | msr_report->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT; |
420 | msr_report->u.action.u.measurement.action_code = |
421 | WLAN_ACTION_SPCT_MSR_RPRT; |
422 | msr_report->u.action.u.measurement.dialog_token = dialog_token; |
423 | |
424 | msr_report->u.action.u.measurement.element_id = WLAN_EID_MEASURE_REPORT; |
425 | msr_report->u.action.u.measurement.length = |
426 | sizeof(struct ieee80211_msrment_ie); |
427 | |
428 | memset(&msr_report->u.action.u.measurement.msr_elem, 0, |
429 | sizeof(struct ieee80211_msrment_ie)); |
430 | msr_report->u.action.u.measurement.msr_elem.token = request_ie->token; |
431 | msr_report->u.action.u.measurement.msr_elem.mode |= |
432 | IEEE80211_SPCT_MSR_RPRT_MODE_REFUSED; |
433 | msr_report->u.action.u.measurement.msr_elem.type = request_ie->type; |
434 | |
435 | ieee80211_tx_skb(sdata, skb); |
436 | } |
437 | |
438 | void ieee80211_process_measurement_req(struct ieee80211_sub_if_data *sdata, |
439 | struct ieee80211_mgmt *mgmt, |
440 | size_t len) |
441 | { |
442 | /* |
443 | * Ignoring measurement request is spec violation. |
444 | * Mandatory measurements must be reported optional |
445 | * measurements might be refused or reported incapable |
446 | * For now just refuse |
447 | * TODO: Answer basic measurement as unmeasured |
448 | */ |
449 | ieee80211_send_refuse_measurement_request(sdata, |
450 | request_ie: &mgmt->u.action.u.measurement.msr_elem, |
451 | da: mgmt->sa, bssid: mgmt->bssid, |
452 | dialog_token: mgmt->u.action.u.measurement.dialog_token); |
453 | } |
454 | |