| /** @file mlan_sta_rx.c |
| * |
| * @brief This file contains the handling of RX in MLAN |
| * module. |
| * |
| * |
| * Copyright 2008-2022, 2024 NXP |
| * |
| * NXP CONFIDENTIAL |
| * The source code contained or described herein and all documents related to |
| * the source code (Materials) are owned by NXP, its |
| * suppliers and/or its licensors. Title to the Materials remains with NXP, |
| * its suppliers and/or its licensors. The Materials contain |
| * trade secrets and proprietary and confidential information of NXP, its |
| * suppliers and/or its licensors. The Materials are protected by worldwide |
| * copyright and trade secret laws and treaty provisions. No part of the |
| * Materials may be used, copied, reproduced, modified, published, uploaded, |
| * posted, transmitted, distributed, or disclosed in any way without NXP's |
| * prior express written permission. |
| * |
| * No license under any patent, copyright, trade secret or other intellectual |
| * property right is granted to or conferred upon you by disclosure or delivery |
| * of the Materials, either expressly, by implication, inducement, estoppel or |
| * otherwise. Any license under such intellectual property rights must be |
| * express and approved by NXP in writing. |
| * |
| * Alternatively, this software may be distributed under the terms of GPL v2. |
| * SPDX-License-Identifier: GPL-2.0 |
| * |
| * |
| */ |
| |
| /******************************************************** |
| Change log: |
| 10/27/2008: initial version |
| ********************************************************/ |
| |
| #include "mlan.h" |
| #include "mlan_join.h" |
| #include "mlan_util.h" |
| #include "mlan_fw.h" |
| #include "mlan_main.h" |
| #include "mlan_11n_aggr.h" |
| #include "mlan_11n_rxreorder.h" |
| #include "mlan_11ax.h" |
| |
| /******************************************************** |
| Local Variables |
| ********************************************************/ |
| |
| /******************************************************** |
| Global functions |
| ********************************************************/ |
| /** |
| * @brief This function check and discard IPv4 and IPv6 gratuitous broadcast |
| * packets |
| * |
| * @param prx_pkt A pointer to RxPacketHdr_t structure of received packet |
| * @param pmadapter A pointer to pmlan_adapter structure |
| * @return TRUE if found such type of packets, FALSE not found |
| */ |
| static t_u8 discard_gratuitous_ARP_msg(RxPacketHdr_t *prx_pkt, |
| pmlan_adapter pmadapter) |
| { |
| t_u8 proto_ARP_type[] = {0x08, 0x06}; |
| t_u8 proto_ARP_type_v6[] = {0x86, 0xDD}; |
| IPv4_ARP_t *parp_hdr; |
| IPv6_Nadv_t *pNadv_hdr; |
| t_u8 ret = MFALSE; |
| |
| /* IPV4 pkt check |
| * A gratuitous ARP is an ARP packet |
| * where the source and destination IP are both set to |
| * the IP of the machine issuing the packet. |
| */ |
| if (memcmp(pmadapter, proto_ARP_type, &prx_pkt->eth803_hdr.h803_len, |
| sizeof(proto_ARP_type)) == 0) { |
| parp_hdr = (IPv4_ARP_t *)(&prx_pkt->rfc1042_hdr); |
| /* Graguitous ARP can be ARP request or ARP reply*/ |
| if ((parp_hdr->op_code == mlan_htons(0x01)) || |
| (parp_hdr->op_code == mlan_htons(0x02))) |
| if (memcmp(pmadapter, parp_hdr->sender_ip, |
| parp_hdr->target_ip, 4) == 0) |
| ret = MTRUE; |
| } |
| |
| /* IPV6 pkt check |
| * An unsolicited Neighbor Advertisement pkt is |
| * marked by a cleared Solicited Flag |
| */ |
| if (memcmp(pmadapter, proto_ARP_type_v6, &prx_pkt->eth803_hdr.h803_len, |
| sizeof(proto_ARP_type_v6)) == 0) { |
| pNadv_hdr = (IPv6_Nadv_t *)(&prx_pkt->rfc1042_hdr); |
| /* Check Nadv type: next header is ICMPv6 and |
| * icmp type is Nadv */ |
| if (pNadv_hdr->next_hdr == 0x3A && pNadv_hdr->icmp_type == 0x88) |
| if ((pNadv_hdr->flags & mlan_htonl(0x40000000)) == 0) |
| ret = MTRUE; |
| } |
| |
| return ret; |
| } |
| |
| /** |
| * @brief This function process tdls action frame |
| * |
| * @param priv A pointer to mlan_private structure |
| * @param pbuf A pointer to tdls action frame buffer |
| * @param len len of tdls action frame buffer |
| * @return N/A |
| */ |
| void wlan_process_tdls_action_frame(pmlan_private priv, t_u8 *pbuf, t_u32 len) |
| { |
| sta_node *sta_ptr = MNULL; |
| IEEEtypes_VendorHeader_t *pvendor_ie = MNULL; |
| const t_u8 wmm_oui[] = {0x00, 0x50, 0xf2, 0x02}; |
| t_u8 *peer; |
| t_u8 *pos, *end; |
| t_u8 action; |
| int ie_len = 0; |
| t_u8 i; |
| int rate_len; |
| IEEEtypes_Extension_t *ext_ie; |
| |
| #define TDLS_PAYLOAD_TYPE 2 |
| #define TDLS_CATEGORY 0x0c |
| #define TDLS_REQ_FIX_LEN 6 |
| #define TDLS_RESP_FIX_LEN 8 |
| #define TDLS_CONFIRM_FIX_LEN 6 |
| if (len < (sizeof(EthII_Hdr_t) + 3)) |
| return; |
| if (*(t_u8 *)(pbuf + sizeof(EthII_Hdr_t)) != TDLS_PAYLOAD_TYPE) |
| /*TDLS payload type = 2*/ |
| return; |
| if (*(t_u8 *)(pbuf + sizeof(EthII_Hdr_t) + 1) != TDLS_CATEGORY) |
| /*TDLS category = 0xc */ |
| return; |
| peer = pbuf + MLAN_MAC_ADDR_LENGTH; |
| |
| action = *(t_u8 *)(pbuf + sizeof(EthII_Hdr_t) + 2); |
| /*2= payload type + category*/ |
| |
| if (action > TDLS_SETUP_CONFIRM) { |
| /*just handle TDLS setup request/response/confirm */ |
| PRINTM(MMSG, "Recv TDLS Action: peer=" MACSTR ", action=%d\n", |
| MAC2STR(peer), action); |
| return; |
| } |
| |
| sta_ptr = wlan_add_station_entry(priv, peer); |
| if (!sta_ptr) |
| return; |
| if (action == TDLS_SETUP_REQUEST) { /*setup request*/ |
| sta_ptr->status = TDLS_NOT_SETUP; |
| PRINTM(MMSG, "Recv TDLS SETUP Request: peer=" MACSTR "\n", |
| MAC2STR(peer)); |
| wlan_hold_tdls_packets(priv, peer); |
| if (len < (sizeof(EthII_Hdr_t) + TDLS_REQ_FIX_LEN)) |
| return; |
| pos = pbuf + sizeof(EthII_Hdr_t) + 4; |
| /*payload 1+ category 1 + action 1 +dialog 1*/ |
| sta_ptr->capability = mlan_ntohs(*(t_u16 *)pos); |
| ie_len = len - sizeof(EthII_Hdr_t) - TDLS_REQ_FIX_LEN; |
| pos += 2; |
| } else if (action == 1) { /*setup respons*/ |
| PRINTM(MMSG, "Recv TDLS SETUP Response: peer=" MACSTR "\n", |
| MAC2STR(peer)); |
| if (len < (sizeof(EthII_Hdr_t) + TDLS_RESP_FIX_LEN)) |
| return; |
| pos = pbuf + sizeof(EthII_Hdr_t) + 6; |
| /*payload 1+ category 1 + action 1 +dialog 1 +status 2*/ |
| sta_ptr->capability = mlan_ntohs(*(t_u16 *)pos); |
| ie_len = len - sizeof(EthII_Hdr_t) - TDLS_RESP_FIX_LEN; |
| pos += 2; |
| } else { /*setup confirm*/ |
| PRINTM(MMSG, "Recv TDLS SETUP Confirm: peer=" MACSTR "\n", |
| MAC2STR(peer)); |
| if (len < (sizeof(EthII_Hdr_t) + TDLS_CONFIRM_FIX_LEN)) |
| return; |
| pos = pbuf + sizeof(EthII_Hdr_t) + TDLS_CONFIRM_FIX_LEN; |
| /*payload 1+ category 1 + action 1 +dialog 1 + status 2*/ |
| ie_len = len - sizeof(EthII_Hdr_t) - TDLS_CONFIRM_FIX_LEN; |
| } |
| for (end = pos + ie_len; pos + 1 < end; pos += 2 + pos[1]) { |
| if (pos + 2 + pos[1] > end) |
| break; |
| switch (*pos) { |
| case SUPPORTED_RATES: |
| sta_ptr->rate_len = |
| MIN(pos[1], sizeof(sta_ptr->support_rate)); |
| for (i = 0; i < sta_ptr->rate_len; i++) |
| sta_ptr->support_rate[i] = pos[2 + i]; |
| break; |
| case EXTENDED_SUPPORTED_RATES: |
| rate_len = MIN(pos[1], sizeof(sta_ptr->support_rate) - |
| sta_ptr->rate_len); |
| for (i = 0; i < rate_len; i++) |
| sta_ptr->support_rate[sta_ptr->rate_len + i] = |
| pos[2 + i]; |
| sta_ptr->rate_len += rate_len; |
| break; |
| case HT_CAPABILITY: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->HTcap, pos, |
| sizeof(IEEEtypes_HTCap_t), |
| sizeof(IEEEtypes_HTCap_t)); |
| sta_ptr->is_11n_enabled = 1; |
| DBG_HEXDUMP(MDAT_D, "TDLS HT capability", |
| (t_u8 *)(&sta_ptr->HTcap), |
| MIN(sizeof(IEEEtypes_HTCap_t), |
| MAX_DATA_DUMP_LEN)); |
| break; |
| case HT_OPERATION: |
| memcpy_ext(priv->adapter, &sta_ptr->HTInfo, pos, |
| sizeof(IEEEtypes_HTInfo_t), |
| sizeof(IEEEtypes_HTInfo_t)); |
| DBG_HEXDUMP(MDAT_D, "TDLS HT info", |
| (t_u8 *)(&sta_ptr->HTInfo), |
| MIN(sizeof(IEEEtypes_HTInfo_t), |
| MAX_DATA_DUMP_LEN)); |
| break; |
| case BSSCO_2040: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->BSSCO_20_40, |
| pos, sizeof(IEEEtypes_2040BSSCo_t), |
| sizeof(IEEEtypes_2040BSSCo_t)); |
| break; |
| case EXT_CAPABILITY: |
| sta_ptr->ExtCap.ieee_hdr.len = |
| MIN(pos[1], sizeof(ExtCap_t)); |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->ExtCap, pos, |
| sta_ptr->ExtCap.ieee_hdr.len + |
| sizeof(IEEEtypes_Header_t), |
| sizeof(IEEEtypes_ExtCap_t)); |
| DBG_HEXDUMP(MDAT_D, "TDLS Extended capability", |
| (t_u8 *)(&sta_ptr->ExtCap), |
| sta_ptr->ExtCap.ieee_hdr.len + 2); |
| break; |
| case RSN_IE: |
| sta_ptr->rsn_ie.ieee_hdr.len = |
| MIN(pos[1], IEEE_MAX_IE_SIZE - |
| sizeof(IEEEtypes_Header_t)); |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->rsn_ie, pos, |
| sta_ptr->rsn_ie.ieee_hdr.len + |
| sizeof(IEEEtypes_Header_t), |
| sizeof(IEEEtypes_Generic_t)); |
| DBG_HEXDUMP(MDAT_D, "TDLS Rsn ie ", |
| (t_u8 *)(&sta_ptr->rsn_ie), |
| sta_ptr->rsn_ie.ieee_hdr.len + |
| sizeof(IEEEtypes_Header_t)); |
| break; |
| case QOS_INFO: |
| sta_ptr->qos_info = pos[2]; |
| sta_ptr->is_wmm_enabled = MTRUE; |
| PRINTM(MDAT_D, "TDLS qos info %x\n", sta_ptr->qos_info); |
| break; |
| case VENDOR_SPECIFIC_221: |
| pvendor_ie = (IEEEtypes_VendorHeader_t *)pos; |
| if (!memcmp(priv->adapter, pvendor_ie->oui, wmm_oui, |
| sizeof(wmm_oui))) { |
| sta_ptr->is_wmm_enabled = MTRUE; |
| sta_ptr->qos_info = pos[8]; /** qos info in wmm |
| parameters in |
| response and |
| confirm */ |
| PRINTM(MDAT_D, "TDLS qos info %x\n", |
| sta_ptr->qos_info); |
| } |
| break; |
| case LINK_ID: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->link_ie, |
| pos, sizeof(IEEEtypes_LinkIDElement_t), |
| sizeof(IEEEtypes_LinkIDElement_t)); |
| break; |
| |
| case VHT_CAPABILITY: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->vht_cap, |
| pos, sizeof(IEEEtypes_VHTCap_t), |
| sizeof(IEEEtypes_VHTCap_t)); |
| sta_ptr->is_11ac_enabled = 1; |
| DBG_HEXDUMP(MCMD_D, "Rx TDLS VHT capability", |
| (t_u8 *)(&sta_ptr->vht_cap), |
| MIN(sizeof(IEEEtypes_VHTCap_t), |
| MAX_DATA_DUMP_LEN)); |
| break; |
| case VHT_OPERATION: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->vht_oprat, |
| pos, sizeof(IEEEtypes_VHTOprat_t), |
| sizeof(IEEEtypes_VHTOprat_t)); |
| DBG_HEXDUMP(MCMD_D, "Rx TDLS VHT Operation", |
| (t_u8 *)(&sta_ptr->vht_oprat), |
| MIN(sizeof(IEEEtypes_VHTOprat_t), |
| MAX_DATA_DUMP_LEN)); |
| break; |
| case AID_INFO: |
| memcpy_ext(priv->adapter, (t_u8 *)&sta_ptr->aid_info, |
| pos, sizeof(IEEEtypes_AID_t), |
| sizeof(IEEEtypes_AID_t)); |
| DBG_HEXDUMP(MCMD_D, "Rx TDLS AID Info", |
| (t_u8 *)(&sta_ptr->aid_info), |
| MIN(sizeof(IEEEtypes_AID_t), |
| MAX_DATA_DUMP_LEN)); |
| break; |
| case EXTENSION: |
| ext_ie = (IEEEtypes_Extension_t *)pos; |
| if (ext_ie->ext_id == HE_CAPABILITY) { |
| memcpy_ext(priv->adapter, |
| (t_u8 *)&sta_ptr->tdls_he_cap, pos, |
| ext_ie->ieee_hdr.len + |
| sizeof(IEEEtypes_Header_t), |
| sizeof(IEEEtypes_HECap_t)); |
| sta_ptr->tdls_he_cap.ieee_hdr.len = |
| MIN(ext_ie->ieee_hdr.len, |
| sizeof(IEEEtypes_HECap_t) - |
| sizeof(IEEEtypes_Header_t)); |
| sta_ptr->is_11ax_enabled = 1; |
| DBG_HEXDUMP(MCMD_D, "Rx TDLS HE Capability", |
| (t_u8 *)(&sta_ptr->tdls_he_cap), |
| MIN(sizeof(IEEEtypes_Header_t) + |
| sta_ptr->tdls_he_cap |
| .ieee_hdr.len, |
| sizeof(IEEEtypes_HECap_t))); |
| } else if (ext_ie->ext_id == HE_OPERATION) { |
| memcpy_ext(priv->adapter, |
| (t_u8 *)&sta_ptr->he_op, pos, |
| ext_ie->ieee_hdr.len + |
| sizeof(IEEEtypes_Header_t), |
| sizeof(IEEEtypes_HeOp_t)); |
| ext_ie->ieee_hdr.len = |
| MIN(ext_ie->ieee_hdr.len, |
| sizeof(IEEEtypes_HeOp_t) - |
| sizeof(IEEEtypes_Header_t)); |
| DBG_HEXDUMP(MCMD_D, "Rx TDLS HE Operation", |
| (t_u8 *)(&sta_ptr->he_op), |
| MIN(sizeof(IEEEtypes_Header_t) + |
| ext_ie->ieee_hdr.len, |
| MAX_DATA_DUMP_LEN)); |
| } |
| break; |
| default: |
| break; |
| } |
| } |
| return; |
| } |
| |
| /** |
| * @brief This function get pxpd info for radiotap info |
| * |
| * @param priv A pointer to pmlan_private |
| * @param prx_pd A pointer to RxPD |
| * @param prt_info A pointer to radiotap_info |
| * |
| * @return N/A |
| */ |
| void wlan_rxpdinfo_to_radiotapinfo(pmlan_private priv, RxPD *prx_pd, |
| radiotap_info *prt_info) |
| { |
| radiotap_info rt_info_tmp; |
| t_u8 rx_rate_info = 0; |
| t_u8 mcs_index = 0; |
| t_u8 format = 0; |
| t_u8 bw = 0; |
| t_u8 gi = 0; |
| t_u8 ldpc = 0; |
| t_u8 ext_rate_info = 0; |
| t_u8 nss = 0; |
| t_u8 dcm = 0; |
| |
| memset(priv->adapter, &rt_info_tmp, 0x00, sizeof(rt_info_tmp)); |
| rt_info_tmp.snr = prx_pd->snr; |
| rt_info_tmp.nf = prx_pd->nf; |
| rt_info_tmp.band_config = (prx_pd->rx_info & 0xf); |
| rt_info_tmp.chan_num = (prx_pd->rx_info & RXPD_CHAN_MASK) >> 5; |
| ext_rate_info = (t_u8)(prx_pd->rx_info >> 16); |
| |
| rt_info_tmp.antenna = prx_pd->antenna; |
| rx_rate_info = prx_pd->rate_info; |
| if ((rx_rate_info & 0x3) == MLAN_RATE_FORMAT_HE) { |
| t_u8 gi_he = 0; |
| /* HE rate */ |
| format = MLAN_RATE_FORMAT_HE; |
| mcs_index = MIN(prx_pd->rx_rate & 0xF, 0xb); |
| nss = ((prx_pd->rx_rate & 0xF0) >> 4); |
| nss = MIN(nss + 1, 2); |
| /* 20M: bw=0, 40M: bw=1, 80M: bw=2, 160M: bw=3 */ |
| bw = (rx_rate_info & 0xC) >> 2; |
| gi = (rx_rate_info & 0x10) >> 4; |
| gi_he = (rx_rate_info & 0x80) >> 7; |
| gi = gi | gi_he; |
| dcm = (prx_pd->rx_info & RXPD_DCM_MASK) >> 16; |
| } else if ((rx_rate_info & 0x3) == MLAN_RATE_FORMAT_VHT) { |
| /* VHT rate */ |
| format = MLAN_RATE_FORMAT_VHT; |
| mcs_index = MIN(prx_pd->rx_rate & 0xF, 9); |
| nss = ((prx_pd->rx_rate & 0xF0) >> 4); |
| nss = MIN(nss + 1, 2); |
| /* 20M: bw=0, 40M: bw=1, 80M: bw=2, 160M: bw=3 */ |
| bw = (rx_rate_info & 0xC) >> 2; |
| /* LGI: gi =0, SGI: gi = 1 */ |
| gi = (rx_rate_info & 0x10) >> 4; |
| } else if ((rx_rate_info & 0x3) == MLAN_RATE_FORMAT_HT) { |
| /* HT rate */ |
| format = MLAN_RATE_FORMAT_HT; |
| mcs_index = prx_pd->rx_rate; |
| /* 20M: bw=0, 40M: bw=1 */ |
| bw = (rx_rate_info & 0xC) >> 2; |
| /* LGI: gi =0, SGI: gi = 1 */ |
| gi = (rx_rate_info & 0x10) >> 4; |
| } else { |
| /* LG rate */ |
| format = MLAN_RATE_FORMAT_LG; |
| mcs_index = (prx_pd->rx_rate > MLAN_RATE_INDEX_OFDM0) ? |
| prx_pd->rx_rate - 1 : |
| prx_pd->rx_rate; |
| } |
| ldpc = rx_rate_info & 0x40; |
| |
| rt_info_tmp.rate_info.mcs_index = mcs_index; |
| rt_info_tmp.rate_info.nss_index = nss; |
| rt_info_tmp.rate_info.dcm = dcm; |
| if (format == MLAN_RATE_FORMAT_HE) { |
| rt_info_tmp.rate_info.rate_info = |
| (ldpc << 5) | (format << 3) | (bw << 1) | (gi << 6); |
| } else |
| rt_info_tmp.rate_info.rate_info = |
| (ldpc << 5) | (format << 3) | (bw << 1) | gi; |
| rt_info_tmp.rate_info.bitrate = |
| wlan_index_to_data_rate(priv->adapter, prx_pd->rx_rate, |
| prx_pd->rate_info, ext_rate_info); |
| |
| if (prx_pd->flags & RXPD_FLAG_EXTRA_HEADER) |
| memcpy_ext(priv->adapter, &rt_info_tmp.extra_info, |
| (t_u8 *)prx_pd + sizeof(*prx_pd), |
| sizeof(rt_info_tmp.extra_info), |
| sizeof(rt_info_tmp.extra_info)); |
| |
| memset(priv->adapter, prt_info, 0x00, sizeof(radiotap_info)); |
| memcpy_ext(priv->adapter, prt_info, &rt_info_tmp, sizeof(rt_info_tmp), |
| sizeof(radiotap_info)); |
| |
| return; |
| } |
| |
| /** |
| * @brief This function processes received packet and forwards it |
| * to kernel/upper layer |
| * |
| * @param pmadapter A pointer to mlan_adapter |
| * @param pmbuf A pointer to mlan_buffer which includes the received packet |
| * |
| * @return MLAN_STATUS_SUCCESS or MLAN_STATUS_FAILURE |
| */ |
| mlan_status wlan_process_rx_packet(pmlan_adapter pmadapter, pmlan_buffer pmbuf) |
| { |
| mlan_status ret = MLAN_STATUS_SUCCESS; |
| pmlan_private priv = pmadapter->priv[pmbuf->bss_index]; |
| RxPacketHdr_t *prx_pkt; |
| RxPD *prx_pd; |
| int hdr_chop; |
| EthII_Hdr_t *peth_hdr; |
| t_u8 rfc1042_eth_hdr[MLAN_MAC_ADDR_LENGTH] = {0xaa, 0xaa, 0x03, |
| 0x00, 0x00, 0x00}; |
| t_u8 snap_oui_802_h[MLAN_MAC_ADDR_LENGTH] = {0xaa, 0xaa, 0x03, |
| 0x00, 0x00, 0xf8}; |
| t_u8 appletalk_aarp_type[2] = {0x80, 0xf3}; |
| t_u8 ipx_snap_type[2] = {0x81, 0x37}; |
| t_u8 tdls_action_type[2] = {0x89, 0x0d}; |
| t_u8 ext_rate_info = 0; |
| |
| ENTER(); |
| |
| prx_pd = (RxPD *)(pmbuf->pbuf + pmbuf->data_offset); |
| prx_pkt = (RxPacketHdr_t *)((t_u8 *)prx_pd + prx_pd->rx_pkt_offset); |
| |
| /** Small debug type */ |
| #define DBG_TYPE_SMALL 2 |
| /** Size of debugging structure */ |
| #define SIZE_OF_DBG_STRUCT 4 |
| if (prx_pd->rx_pkt_type == PKT_TYPE_DEBUG) { |
| t_u8 dbg_type; |
| dbg_type = *(t_u8 *)&prx_pkt->eth803_hdr; |
| if (dbg_type == DBG_TYPE_SMALL) { |
| PRINTM(MFW_D, "\n"); |
| DBG_HEXDUMP(MFW_D, "FWDBG", |
| (char *)((t_u8 *)&prx_pkt->eth803_hdr + |
| SIZE_OF_DBG_STRUCT), |
| prx_pd->rx_pkt_length); |
| PRINTM(MFW_D, "FWDBG::\n"); |
| } |
| goto done; |
| } |
| |
| PRINTM(MINFO, |
| "RX Data: data_len - prx_pd->rx_pkt_offset = %d - %d = %d\n", |
| pmbuf->data_len, prx_pd->rx_pkt_offset, |
| pmbuf->data_len - prx_pd->rx_pkt_offset); |
| |
| HEXDUMP("RX Data: Dest", prx_pkt->eth803_hdr.dest_addr, |
| sizeof(prx_pkt->eth803_hdr.dest_addr)); |
| HEXDUMP("RX Data: Src", prx_pkt->eth803_hdr.src_addr, |
| sizeof(prx_pkt->eth803_hdr.src_addr)); |
| |
| if ((memcmp(pmadapter, &prx_pkt->rfc1042_hdr, snap_oui_802_h, |
| sizeof(snap_oui_802_h)) == 0) || |
| ((memcmp(pmadapter, &prx_pkt->rfc1042_hdr, rfc1042_eth_hdr, |
| sizeof(rfc1042_eth_hdr)) == 0) && |
| memcmp(pmadapter, &prx_pkt->rfc1042_hdr.snap_type, |
| appletalk_aarp_type, sizeof(appletalk_aarp_type)) && |
| memcmp(pmadapter, &prx_pkt->rfc1042_hdr.snap_type, ipx_snap_type, |
| sizeof(ipx_snap_type)))) { |
| /* |
| * Replace the 803 header and rfc1042 header (llc/snap) with an |
| * EthernetII header, keep the src/dst and snap_type |
| * (ethertype). The firmware only passes up SNAP frames |
| * converting all RX Data from 802.11 to 802.2/LLC/SNAP frames. |
| * To create the Ethernet II, just move the src, dst address |
| * right before the snap_type. |
| */ |
| peth_hdr = |
| (EthII_Hdr_t *)((t_u8 *)&prx_pkt->eth803_hdr + |
| sizeof(prx_pkt->eth803_hdr) + |
| sizeof(prx_pkt->rfc1042_hdr) - |
| sizeof(prx_pkt->eth803_hdr.dest_addr) - |
| sizeof(prx_pkt->eth803_hdr.src_addr) - |
| sizeof(prx_pkt->rfc1042_hdr.snap_type)); |
| |
| memcpy_ext(pmadapter, peth_hdr->src_addr, |
| prx_pkt->eth803_hdr.src_addr, |
| sizeof(peth_hdr->src_addr), |
| sizeof(peth_hdr->src_addr)); |
| memcpy_ext(pmadapter, peth_hdr->dest_addr, |
| prx_pkt->eth803_hdr.dest_addr, |
| sizeof(peth_hdr->dest_addr), |
| sizeof(peth_hdr->dest_addr)); |
| |
| /* Chop off the RxPD + the excess memory from the 802.2/llc/snap |
| * header that was removed. |
| */ |
| hdr_chop = (t_u32)((t_ptr)peth_hdr - (t_ptr)prx_pd); |
| } else { |
| HEXDUMP("RX Data: LLC/SNAP", (t_u8 *)&prx_pkt->rfc1042_hdr, |
| sizeof(prx_pkt->rfc1042_hdr)); |
| if ((priv->hotspot_cfg & HOTSPOT_ENABLED) && |
| discard_gratuitous_ARP_msg(prx_pkt, pmadapter)) { |
| ret = MLAN_STATUS_SUCCESS; |
| PRINTM(MDATA, |
| "Bypass sending Gratuitous ARP frame to Kernel.\n"); |
| goto done; |
| } |
| if (!memcmp(pmadapter, &prx_pkt->eth803_hdr.h803_len, |
| tdls_action_type, sizeof(tdls_action_type))) { |
| wlan_process_tdls_action_frame( |
| priv, ((t_u8 *)prx_pd + prx_pd->rx_pkt_offset), |
| prx_pd->rx_pkt_length); |
| } |
| /* Chop off the RxPD */ |
| hdr_chop = (t_u32)((t_ptr)&prx_pkt->eth803_hdr - (t_ptr)prx_pd); |
| } |
| |
| /* Chop off the leading header bytes so the it points to the start of |
| * either the reconstructed EthII frame or the 802.2/llc/snap frame |
| */ |
| pmbuf->data_len -= hdr_chop; |
| pmbuf->data_offset += hdr_chop; |
| pmbuf->pparent = MNULL; |
| DBG_HEXDUMP(MDAT_D, "RxPD", (t_u8 *)prx_pd, |
| MIN(sizeof(RxPD), MAX_DATA_DUMP_LEN)); |
| DBG_HEXDUMP(MDAT_D, "Rx Payload", |
| ((t_u8 *)prx_pd + prx_pd->rx_pkt_offset), |
| MIN(prx_pd->rx_pkt_length, MAX_DATA_DUMP_LEN)); |
| |
| priv->rxpd_rate = prx_pd->rx_rate; |
| pmadapter->callbacks.moal_get_system_time(pmadapter->pmoal_handle, |
| &pmbuf->out_ts_sec, |
| &pmbuf->out_ts_usec); |
| PRINTM_NETINTF(MDATA, priv); |
| PRINTM(MDATA, "%lu.%06lu : Data => kernel seq_num=%d tid=%d\n", |
| pmbuf->out_ts_sec, pmbuf->out_ts_usec, prx_pd->seq_num, |
| prx_pd->priority); |
| if (pmadapter->enable_net_mon) { |
| if (prx_pd->rx_pkt_type == PKT_TYPE_802DOT11) { |
| pmbuf->flags |= MLAN_BUF_FLAG_NET_MONITOR; |
| goto mon_process; |
| } |
| } |
| |
| mon_process: |
| if (pmbuf->flags & MLAN_BUF_FLAG_NET_MONITOR) { |
| // Use some rxpd space to save rxpd info for radiotap header |
| // We should insure radiotap_info is not bigger than RxPD |
| wlan_rxpdinfo_to_radiotapinfo( |
| priv, prx_pd, |
| (radiotap_info *)(pmbuf->pbuf + pmbuf->data_offset - |
| sizeof(radiotap_info))); |
| } |
| |
| if (MFALSE || priv->rx_pkt_info) { |
| ext_rate_info = (t_u8)(prx_pd->rx_info >> 16); |
| pmbuf->u.rx_info.data_rate = |
| wlan_index_to_data_rate(priv->adapter, prx_pd->rx_rate, |
| prx_pd->rate_info, |
| ext_rate_info); |
| |
| pmbuf->u.rx_info.channel = |
| (prx_pd->rx_info & RXPD_CHAN_MASK) >> 5; |
| pmbuf->u.rx_info.antenna = prx_pd->antenna; |
| pmbuf->u.rx_info.rssi = prx_pd->snr - prx_pd->nf; |
| } |
| ret = pmadapter->callbacks.moal_recv_packet(pmadapter->pmoal_handle, |
| pmbuf); |
| if (ret == MLAN_STATUS_FAILURE) { |
| pmbuf->status_code = MLAN_ERROR_PKT_INVALID; |
| PRINTM(MERROR, |
| "STA Rx Error: moal_recv_packet returned error\n"); |
| } |
| done: |
| if (ret != MLAN_STATUS_PENDING) |
| pmadapter->ops.data_complete(pmadapter, pmbuf, ret); |
| #ifdef USB |
| else if (IS_USB(pmadapter->card_type)) |
| pmadapter->callbacks.moal_recv_complete(pmadapter->pmoal_handle, |
| MNULL, |
| pmadapter->rx_data_ep, |
| MLAN_STATUS_SUCCESS); |
| #endif |
| LEAVE(); |
| |
| return ret; |
| } |
| |
| /** |
| * @brief This function processes the received buffer |
| * |
| * @param adapter A pointer to mlan_adapter |
| * @param pmbuf A pointer to the received buffer |
| * |
| * @return MLAN_STATUS_SUCCESS or MLAN_STATUS_FAILURE |
| */ |
| mlan_status wlan_ops_sta_process_rx_packet(t_void *adapter, pmlan_buffer pmbuf) |
| { |
| pmlan_adapter pmadapter = (pmlan_adapter)adapter; |
| mlan_status ret = MLAN_STATUS_SUCCESS; |
| RxPD *prx_pd; |
| RxPacketHdr_t *prx_pkt; |
| RxPD *prx_pd2; |
| EthII_Hdr_t *peth_hdr2; |
| wlan_802_11_header *pwlan_hdr; |
| IEEEtypes_FrameCtl_t *frmctl; |
| pmlan_buffer pmbuf2 = MNULL; |
| mlan_802_11_mac_addr dest_addr = {0x00}; |
| mlan_802_11_mac_addr src_addr = {0x00}; |
| t_u16 hdr_len; |
| t_u8 snap_eth_hdr[5] = {0xaa, 0xaa, 0x03, 0x00, 0x00}; |
| pmlan_private priv = pmadapter->priv[pmbuf->bss_index]; |
| t_u8 ta[MLAN_MAC_ADDR_LENGTH]; |
| t_u16 rx_pkt_type = 0; |
| wlan_mgmt_pkt *pmgmt_pkt_hdr = MNULL; |
| |
| sta_node *sta_ptr = MNULL; |
| t_u16 adj_rx_rate = 0; |
| t_u8 antenna = 0; |
| ENTER(); |
| |
| prx_pd = (RxPD *)(pmbuf->pbuf + pmbuf->data_offset); |
| /* Endian conversion */ |
| endian_convert_RxPD(prx_pd); |
| if (prx_pd->flags & RXPD_FLAG_EXTRA_HEADER) { |
| endian_convert_RxPD_extra_header( |
| (rxpd_extra_info *)((t_u8 *)prx_pd + sizeof(*prx_pd))); |
| } |
| if (priv->adapter->pcard_info->v14_fw_api) { |
| t_u8 rxpd_rate_info_orig = prx_pd->rate_info; |
| prx_pd->rate_info = wlan_convert_v14_rx_rate_info( |
| priv, rxpd_rate_info_orig); |
| PRINTM(MINFO, |
| "STA RX: v14_fw_api=%d rx_rate =%d rxpd_rate_info=0x%x->0x%x\n", |
| priv->adapter->pcard_info->v14_fw_api, prx_pd->rx_rate, |
| rxpd_rate_info_orig, prx_pd->rate_info); |
| } |
| rx_pkt_type = prx_pd->rx_pkt_type; |
| if (prx_pd->flags & RXPD_FLAG_PKT_EASYMESH) { |
| PRINTM_NETINTF(MDAT_D, priv); |
| PRINTM(MDAT_D, "Easymesh flags : 0x%x\n", prx_pd->flags); |
| ret = wlan_check_easymesh_pkt(priv, pmbuf, prx_pd); |
| if (ret != MLAN_STATUS_SUCCESS) |
| goto done; |
| } |
| prx_pkt = (RxPacketHdr_t *)((t_u8 *)prx_pd + prx_pd->rx_pkt_offset); |
| |
| if ((prx_pd->rx_pkt_offset + prx_pd->rx_pkt_length) != |
| (t_u16)pmbuf->data_len) { |
| PRINTM(MERROR, |
| "Wrong rx packet: len=%d,rx_pkt_offset=%d," |
| " rx_pkt_length=%d\n", |
| pmbuf->data_len, prx_pd->rx_pkt_offset, |
| prx_pd->rx_pkt_length); |
| pmbuf->status_code = MLAN_ERROR_PKT_SIZE_INVALID; |
| ret = MLAN_STATUS_FAILURE; |
| pmadapter->ops.data_complete(pmadapter, pmbuf, ret); |
| goto done; |
| } |
| pmbuf->data_len = prx_pd->rx_pkt_offset + prx_pd->rx_pkt_length; |
| |
| if (pmadapter->priv[pmbuf->bss_index]->mgmt_frame_passthru_mask && |
| prx_pd->rx_pkt_type == PKT_TYPE_MGMT_FRAME) { |
| /* Check if this is mgmt packet and needs to |
| * forwarded to app as an event |
| */ |
| pmgmt_pkt_hdr = (wlan_mgmt_pkt *)((t_u8 *)prx_pd + |
| prx_pd->rx_pkt_offset); |
| pmgmt_pkt_hdr->frm_len = |
| wlan_le16_to_cpu(pmgmt_pkt_hdr->frm_len); |
| |
| if ((pmgmt_pkt_hdr->wlan_header.frm_ctl & |
| IEEE80211_FC_MGMT_FRAME_TYPE_MASK) == 0) |
| wlan_process_802dot11_mgmt_pkt( |
| pmadapter->priv[pmbuf->bss_index], |
| (t_u8 *)&pmgmt_pkt_hdr->wlan_header, |
| pmgmt_pkt_hdr->frm_len + sizeof(wlan_mgmt_pkt) - |
| sizeof(pmgmt_pkt_hdr->frm_len), |
| prx_pd); |
| pmadapter->ops.data_complete(pmadapter, pmbuf, ret); |
| goto done; |
| } |
| if (rx_pkt_type != PKT_TYPE_BAR) { |
| priv->rxpd_rate_info = prx_pd->rate_info; |
| priv->rxpd_rate = prx_pd->rx_rate; |
| priv->rxpd_rx_info = (t_u8)(prx_pd->rx_info >> 16); |
| if (priv->bss_type == MLAN_BSS_TYPE_STA) { |
| antenna = wlan_adjust_antenna(priv, prx_pd); |
| adj_rx_rate = wlan_adjust_data_rate( |
| priv, priv->rxpd_rate, priv->rxpd_rate_info); |
| pmadapter->callbacks.moal_hist_data_add( |
| pmadapter->pmoal_handle, pmbuf->bss_index, |
| adj_rx_rate, prx_pd->snr, prx_pd->nf, antenna); |
| } |
| } |
| |
| if (pmadapter->enable_net_mon && |
| (prx_pd->flags & RXPD_FLAG_UCAST_PKT)) { |
| pwlan_hdr = (wlan_802_11_header *)((t_u8 *)prx_pd + |
| prx_pd->rx_pkt_offset); |
| frmctl = (IEEEtypes_FrameCtl_t *)pwlan_hdr; |
| if (frmctl->type == 0x02) { |
| /* This is a valid unicast destined data packet, with |
| * 802.11 and rtap headers attached. Duplicate this |
| * packet and process this copy as a sniffed packet, |
| * meant for monitor iface |
| */ |
| pmbuf2 = wlan_alloc_mlan_buffer(pmadapter, |
| pmbuf->data_len, |
| MLAN_RX_HEADER_LEN, |
| MOAL_ALLOC_MLAN_BUFFER); |
| if (!pmbuf2) { |
| PRINTM(MERROR, |
| "Unable to allocate mlan_buffer for Rx"); |
| PRINTM(MERROR, "sniffed packet\n"); |
| } else { |
| pmbuf2->bss_index = pmbuf->bss_index; |
| pmbuf2->buf_type = pmbuf->buf_type; |
| pmbuf2->priority = pmbuf->priority; |
| pmbuf2->in_ts_sec = pmbuf->in_ts_sec; |
| pmbuf2->in_ts_usec = pmbuf->in_ts_usec; |
| pmbuf2->data_len = pmbuf->data_len; |
| memcpy(pmadapter, |
| pmbuf2->pbuf + pmbuf2->data_offset, |
| pmbuf->pbuf + pmbuf->data_offset, |
| pmbuf->data_len); |
| |
| prx_pd2 = (RxPD *)(pmbuf2->pbuf + |
| pmbuf2->data_offset); |
| /* set pkt type of duplicated pkt to 802.11 */ |
| prx_pd2->rx_pkt_type = PKT_TYPE_802DOT11; |
| wlan_process_rx_packet(pmadapter, pmbuf2); |
| } |
| |
| /* Now, process this pkt as a normal data packet. |
| * rx_pkt_offset points to the 802.11 hdr. Construct |
| * 802.3 header from 802.11 hdr fields and attach it |
| * just before the payload. |
| */ |
| memcpy(pmadapter, (t_u8 *)&dest_addr, pwlan_hdr->addr1, |
| sizeof(pwlan_hdr->addr1)); |
| memcpy(pmadapter, (t_u8 *)&src_addr, pwlan_hdr->addr2, |
| sizeof(pwlan_hdr->addr2)); |
| |
| hdr_len = sizeof(wlan_802_11_header); |
| |
| /* subtract mac addr field size for 3 address mac80211 |
| * header */ |
| if (!(frmctl->from_ds && frmctl->to_ds)) |
| hdr_len -= sizeof(mlan_802_11_mac_addr); |
| |
| /* add 2 bytes of qos ctrl flags */ |
| if (frmctl->sub_type & QOS_DATA) |
| hdr_len += 2; |
| |
| if (prx_pd->rx_pkt_type == PKT_TYPE_AMSDU) { |
| /* no need to generate 802.3 hdr, update pkt |
| * offset */ |
| prx_pd->rx_pkt_offset += hdr_len; |
| prx_pd->rx_pkt_length -= hdr_len; |
| } else { |
| /* skip 6-byte snap and 2-byte type */ |
| if (memcmp(pmadapter, |
| (t_u8 *)pwlan_hdr + hdr_len, |
| snap_eth_hdr, |
| sizeof(snap_eth_hdr)) == 0) |
| hdr_len += 8; |
| |
| peth_hdr2 = |
| (EthII_Hdr_t *)((t_u8 *)prx_pd + |
| prx_pd->rx_pkt_offset + |
| hdr_len - |
| sizeof(EthII_Hdr_t)); |
| memcpy(pmadapter, peth_hdr2->dest_addr, |
| (t_u8 *)&dest_addr, |
| sizeof(peth_hdr2->dest_addr)); |
| memcpy(pmadapter, peth_hdr2->src_addr, |
| (t_u8 *)&src_addr, |
| sizeof(peth_hdr2->src_addr)); |
| |
| /* Update the rx_pkt_offset to point the 802.3 |
| * hdr */ |
| prx_pd->rx_pkt_offset += |
| (hdr_len - sizeof(EthII_Hdr_t)); |
| prx_pd->rx_pkt_length -= |
| (hdr_len - sizeof(EthII_Hdr_t)); |
| } |
| /* update the prx_pkt pointer */ |
| prx_pkt = (RxPacketHdr_t *)((t_u8 *)prx_pd + |
| prx_pd->rx_pkt_offset); |
| } else { |
| pmbuf->status_code = MLAN_ERROR_PKT_SIZE_INVALID; |
| ret = MLAN_STATUS_FAILURE; |
| PRINTM(MERROR, |
| "Drop invalid unicast sniffer pkt, subType=0x%x, flag=0x%x, pkt_type=%d\n", |
| frmctl->sub_type, prx_pd->flags, |
| prx_pd->rx_pkt_type); |
| wlan_free_mlan_buffer(pmadapter, pmbuf); |
| goto done; |
| } |
| } |
| |
| /* |
| * If the packet is not an unicast packet then send the packet |
| * directly to os. Don't pass thru rx reordering |
| */ |
| if ((!IS_11N_ENABLED(priv) && |
| !(prx_pd->flags & RXPD_FLAG_PKT_DIRECT_LINK)) || |
| (memcmp(priv->adapter, priv->curr_addr, |
| prx_pkt->eth803_hdr.dest_addr, MLAN_MAC_ADDR_LENGTH) && |
| !(prx_pd->flags & RXPD_FLAG_PKT_EASYMESH)) || |
| ((prx_pd->flags & RXPD_FLAG_PKT_EASYMESH) && |
| (is_bcast_addr(prx_pkt->eth803_hdr.dest_addr) || |
| is_mcast_addr(prx_pkt->eth803_hdr.dest_addr)))) { |
| priv->snr = prx_pd->snr; |
| priv->nf = prx_pd->nf; |
| wlan_process_rx_packet(pmadapter, pmbuf); |
| goto done; |
| } |
| |
| if (queuing_ra_based(priv) || |
| (prx_pd->flags & RXPD_FLAG_PKT_DIRECT_LINK)) { |
| memcpy_ext(pmadapter, ta, prx_pkt->eth803_hdr.src_addr, |
| MLAN_MAC_ADDR_LENGTH, MLAN_MAC_ADDR_LENGTH); |
| if (prx_pd->priority < MAX_NUM_TID) { |
| PRINTM(MDATA, "adhoc/tdls packet %p " MACSTR "\n", |
| pmbuf, MAC2STR(ta)); |
| sta_ptr = wlan_get_station_entry(priv, ta); |
| if (sta_ptr) { |
| sta_ptr->rx_seq[prx_pd->priority] = |
| prx_pd->seq_num; |
| sta_ptr->snr = prx_pd->snr; |
| sta_ptr->nf = prx_pd->nf; |
| if (prx_pd->flags & RXPD_FLAG_PKT_DIRECT_LINK) { |
| pmadapter->callbacks |
| .moal_updata_peer_signal( |
| pmadapter->pmoal_handle, |
| pmbuf->bss_index, ta, |
| prx_pd->snr, |
| prx_pd->nf); |
| } |
| } |
| if (!sta_ptr || (!sta_ptr->is_11n_enabled && |
| !sta_ptr->is_11ax_enabled)) { |
| wlan_process_rx_packet(pmadapter, pmbuf); |
| goto done; |
| } |
| } |
| } else { |
| priv->snr = prx_pd->snr; |
| priv->nf = prx_pd->nf; |
| if ((rx_pkt_type != PKT_TYPE_BAR) && |
| (prx_pd->priority < MAX_NUM_TID)) |
| priv->rx_seq[prx_pd->priority] = prx_pd->seq_num; |
| memcpy_ext(pmadapter, ta, |
| priv->curr_bss_params.bss_descriptor.mac_address, |
| MLAN_MAC_ADDR_LENGTH, MLAN_MAC_ADDR_LENGTH); |
| } |
| if ((priv->port_ctrl_mode == MTRUE && priv->port_open == MFALSE) && |
| (rx_pkt_type != PKT_TYPE_BAR)) { |
| if (MLAN_STATUS_SUCCESS != |
| mlan_11n_rxreorder_pkt(priv, prx_pd->seq_num, |
| prx_pd->priority, ta, |
| (t_u8)prx_pd->rx_pkt_type, |
| (t_void *)RX_PKT_DROPPED_IN_FW)) |
| PRINTM(MINFO, "RX pkt reordering failure seq_num:%d\n", |
| prx_pd->seq_num); |
| |
| if (rx_pkt_type == PKT_TYPE_AMSDU) { |
| pmbuf->data_len = prx_pd->rx_pkt_length; |
| pmbuf->data_offset += prx_pd->rx_pkt_offset; |
| wlan_11n_deaggregate_pkt(priv, pmbuf); |
| } else { |
| wlan_process_rx_packet(pmadapter, pmbuf); |
| } |
| goto done; |
| } |
| /* Reorder and send to OS */ |
| ret = mlan_11n_rxreorder_pkt(priv, prx_pd->seq_num, prx_pd->priority, |
| ta, (t_u8)prx_pd->rx_pkt_type, |
| (void *)pmbuf); |
| if (ret || (rx_pkt_type == PKT_TYPE_BAR)) |
| pmadapter->ops.data_complete(pmadapter, pmbuf, ret); |
| |
| done: |
| |
| LEAVE(); |
| return ret; |
| } |