drivers/net/wireless/marvell/mwifiex/tdls.c

   1 /* Marvell Wireless LAN device driver: TDLS handling
   2  *
   3  * Copyright (C) 2014, Marvell International Ltd.
   4  *
   5  * This software file (the "File") is distributed by Marvell International
   6  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   7  * (the "License").  You may use, redistribute and/or modify this File in
   8  * accordance with the terms and conditions of the License, a copy of which
   9  * is available on the worldwide web at
  10  * http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  11  *
  12  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  13  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  14  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  15  * this warranty disclaimer.
  16  */
  17
  18 #include "main.h"
  19 #include "wmm.h"
  20 #include "11n.h"
  21 #include "11n_rxreorder.h"
  22 #include "11ac.h"
  23
  24 #define TDLS_REQ_FIX_LEN      6
  25 #define TDLS_RESP_FIX_LEN     8
  26 #define TDLS_CONFIRM_FIX_LEN  6
  27 #define MWIFIEX_TDLS_WMM_INFO_SIZE 7
  28
  29 static void mwifiex_restore_tdls_packets(struct mwifiex_private *priv,
  30                                          const u8 *mac, u8 status)
  31 {
  32         struct mwifiex_ra_list_tbl *ra_list;
  33         struct list_head *tid_list;
  34         struct sk_buff *skb, *tmp;
  35         struct mwifiex_txinfo *tx_info;
  36         unsigned long flags;
  37         u32 tid;
  38         u8 tid_down;
  39
  40         mwifiex_dbg(priv->adapter, DATA, "%s: %pM\n", __func__, mac);
  41         spin_lock_irqsave(&priv->wmm.ra_list_spinlock, flags);
  42
  43         skb_queue_walk_safe(&priv->tdls_txq, skb, tmp) {
  44                 if (!ether_addr_equal(mac, skb->data))
  45                         continue;
  46
  47                 __skb_unlink(skb, &priv->tdls_txq);
  48                 tx_info = MWIFIEX_SKB_TXCB(skb);
  49                 tid = skb->priority;
  50                 tid_down = mwifiex_wmm_downgrade_tid(priv, tid);
  51
  52                 if (mwifiex_is_tdls_link_setup(status)) {
  53                         ra_list = mwifiex_wmm_get_queue_raptr(priv, tid, mac);
  54                         ra_list->tdls_link = true;
  55                         tx_info->flags |= MWIFIEX_BUF_FLAG_TDLS_PKT;
  56                 } else {
  57                         tid_list = &priv->wmm.tid_tbl_ptr[tid_down].ra_list;
  58                         ra_list = list_first_entry_or_null(tid_list,
  59                                         struct mwifiex_ra_list_tbl, list);
  60                         tx_info->flags &= ~MWIFIEX_BUF_FLAG_TDLS_PKT;
  61                 }
  62
  63                 if (!ra_list) {
  64                         mwifiex_write_data_complete(priv->adapter, skb, 0, -1);
  65                         continue;
  66                 }
  67
  68                 skb_queue_tail(&ra_list->skb_head, skb);
  69
  70                 ra_list->ba_pkt_count++;
  71                 ra_list->total_pkt_count++;
  72
  73                 if (atomic_read(&priv->wmm.highest_queued_prio) <
  74                                                        tos_to_tid_inv[tid_down])
  75                         atomic_set(&priv->wmm.highest_queued_prio,
  76                                    tos_to_tid_inv[tid_down]);
  77
  78                 atomic_inc(&priv->wmm.tx_pkts_queued);
  79         }
  80
  81         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock, flags);
  82         return;
  83 }
  84
  85 static void mwifiex_hold_tdls_packets(struct mwifiex_private *priv,
  86                                       const u8 *mac)
  87 {
  88         struct mwifiex_ra_list_tbl *ra_list;
  89         struct list_head *ra_list_head;
  90         struct sk_buff *skb, *tmp;
  91         unsigned long flags;
  92         int i;
  93
  94         mwifiex_dbg(priv->adapter, DATA, "%s: %pM\n", __func__, mac);
  95         spin_lock_irqsave(&priv->wmm.ra_list_spinlock, flags);
  96
  97         for (i = 0; i < MAX_NUM_TID; i++) {
  98                 if (!list_empty(&priv->wmm.tid_tbl_ptr[i].ra_list)) {
  99                         ra_list_head = &priv->wmm.tid_tbl_ptr[i].ra_list;
 100                         list_for_each_entry(ra_list, ra_list_head, list) {
 101                                 skb_queue_walk_safe(&ra_list->skb_head, skb,
 102                                                     tmp) {
 103                                         if (!ether_addr_equal(mac, skb->data))
 104                                                 continue;
 105                                         __skb_unlink(skb, &ra_list->skb_head);
 106                                         atomic_dec(&priv->wmm.tx_pkts_queued);
 107                                         ra_list->total_pkt_count--;
 108                                         skb_queue_tail(&priv->tdls_txq, skb);
 109                                 }
 110                         }
 111                 }
 112         }
 113
 114         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock, flags);
 115         return;
 116 }
 117
 118 /* This function appends rate TLV to scan config command. */
 119 static int
 120 mwifiex_tdls_append_rates_ie(struct mwifiex_private *priv,
 121                              struct sk_buff *skb)
 122 {
 123         u8 rates[MWIFIEX_SUPPORTED_RATES], *pos;
 124         u16 rates_size, supp_rates_size, ext_rates_size;
 125
 126         memset(rates, 0, sizeof(rates));
 127         rates_size = mwifiex_get_supported_rates(priv, rates);
 128
 129         supp_rates_size = min_t(u16, rates_size, MWIFIEX_TDLS_SUPPORTED_RATES);
 130
 131         if (skb_tailroom(skb) < rates_size + 4) {
 132                 mwifiex_dbg(priv->adapter, ERROR,
 133                             "Insufficient space while adding rates\n");
 134                 return -ENOMEM;
 135         }
 136
 137         pos = skb_put(skb, supp_rates_size + 2);
 138         *pos++ = WLAN_EID_SUPP_RATES;
 139         *pos++ = supp_rates_size;
 140         memcpy(pos, rates, supp_rates_size);
 141
 142         if (rates_size > MWIFIEX_TDLS_SUPPORTED_RATES) {
 143                 ext_rates_size = rates_size - MWIFIEX_TDLS_SUPPORTED_RATES;
 144                 pos = skb_put(skb, ext_rates_size + 2);
 145                 *pos++ = WLAN_EID_EXT_SUPP_RATES;
 146                 *pos++ = ext_rates_size;
 147                 memcpy(pos, rates + MWIFIEX_TDLS_SUPPORTED_RATES,
 148                        ext_rates_size);
 149         }
 150
 151         return 0;
 152 }
 153
 154 static void mwifiex_tdls_add_aid(struct mwifiex_private *priv,
 155                                 struct sk_buff *skb)
 156 {
 157         struct ieee_types_assoc_rsp *assoc_rsp;
 158         u8 *pos;
 159
 160         assoc_rsp = (struct ieee_types_assoc_rsp *)&priv->assoc_rsp_buf;
 161         pos = skb_put(skb, 4);
 162         *pos++ = WLAN_EID_AID;
 163         *pos++ = 2;
 164         memcpy(pos, &assoc_rsp->a_id, sizeof(assoc_rsp->a_id));
 165
 166         return;
 167 }
 168
 169 static int mwifiex_tdls_add_vht_capab(struct mwifiex_private *priv,
 170                                       struct sk_buff *skb)
 171 {
 172         struct ieee80211_vht_cap vht_cap;
 173         u8 *pos;
 174
 175         pos = skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2);
 176         *pos++ = WLAN_EID_VHT_CAPABILITY;
 177         *pos++ = sizeof(struct ieee80211_vht_cap);
 178
 179         memset(&vht_cap, 0, sizeof(struct ieee80211_vht_cap));
 180
 181         mwifiex_fill_vht_cap_tlv(priv, &vht_cap, priv->curr_bss_params.band);
 182         memcpy(pos, &vht_cap, sizeof(vht_cap));
 183
 184         return 0;
 185 }
 186
 187 static int
 188 mwifiex_tdls_add_ht_oper(struct mwifiex_private *priv, const u8 *mac,
 189                          u8 vht_enabled, struct sk_buff *skb)
 190 {
 191         struct ieee80211_ht_operation *ht_oper;
 192         struct mwifiex_sta_node *sta_ptr;
 193         struct mwifiex_bssdescriptor *bss_desc =
 194                                         &priv->curr_bss_params.bss_descriptor;
 195         u8 *pos;
 196
 197         sta_ptr = mwifiex_get_sta_entry(priv, mac);
 198         if (unlikely(!sta_ptr)) {
 199                 mwifiex_dbg(priv->adapter, ERROR,
 200                             "TDLS peer station not found in list\n");
 201                 return -1;
 202         }
 203
 204         if (!(le16_to_cpu(sta_ptr->tdls_cap.ht_capb.cap_info))) {
 205                 mwifiex_dbg(priv->adapter, WARN,
 206                             "TDLS peer doesn't support ht capabilities\n");
 207                 return 0;
 208         }
 209
 210         pos = skb_put(skb, sizeof(struct ieee80211_ht_operation) + 2);
 211         *pos++ = WLAN_EID_HT_OPERATION;
 212         *pos++ = sizeof(struct ieee80211_ht_operation);
 213         ht_oper = (void *)pos;
 214
 215         ht_oper->primary_chan = bss_desc->channel;
 216
 217         /* follow AP's channel bandwidth */
 218         if (ISSUPP_CHANWIDTH40(priv->adapter->hw_dot_11n_dev_cap) &&
 219             bss_desc->bcn_ht_cap &&
 220             ISALLOWED_CHANWIDTH40(bss_desc->bcn_ht_oper->ht_param))
 221                 ht_oper->ht_param = bss_desc->bcn_ht_oper->ht_param;
 222
 223         if (vht_enabled) {
 224                 ht_oper->ht_param =
 225                           mwifiex_get_sec_chan_offset(bss_desc->channel);
 226                 ht_oper->ht_param |= BIT(2);
 227         }
 228
 229         memcpy(&sta_ptr->tdls_cap.ht_oper, ht_oper,
 230                sizeof(struct ieee80211_ht_operation));
 231
 232         return 0;
 233 }
 234
 235 static int mwifiex_tdls_add_vht_oper(struct mwifiex_private *priv,
 236                                      const u8 *mac, struct sk_buff *skb)
 237 {
 238         struct mwifiex_bssdescriptor *bss_desc;
 239         struct ieee80211_vht_operation *vht_oper;
 240         struct ieee80211_vht_cap *vht_cap, *ap_vht_cap = NULL;
 241         struct mwifiex_sta_node *sta_ptr;
 242         struct mwifiex_adapter *adapter = priv->adapter;
 243         u8 supp_chwd_set, peer_supp_chwd_set;
 244         u8 *pos, ap_supp_chwd_set, chan_bw;
 245         u16 mcs_map_user, mcs_map_resp, mcs_map_result;
 246         u16 mcs_user, mcs_resp, nss;
 247         u32 usr_vht_cap_info;
 248
 249         bss_desc = &priv->curr_bss_params.bss_descriptor;
 250
 251         sta_ptr = mwifiex_get_sta_entry(priv, mac);
 252         if (unlikely(!sta_ptr)) {
 253                 mwifiex_dbg(adapter, ERROR,
 254                             "TDLS peer station not found in list\n");
 255                 return -1;
 256         }
 257
 258         if (!(le32_to_cpu(sta_ptr->tdls_cap.vhtcap.vht_cap_info))) {
 259                 mwifiex_dbg(adapter, WARN,
 260                             "TDLS peer doesn't support vht capabilities\n");
 261                 return 0;
 262         }
 263
 264         if (!mwifiex_is_bss_in_11ac_mode(priv)) {
 265                 if (sta_ptr->tdls_cap.extcap.ext_capab[7] &
 266                    WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED) {
 267                         mwifiex_dbg(adapter, WARN,
 268                                     "TDLS peer doesn't support wider bandwidth\n");
 269                         return 0;
 270                 }
 271         } else {
 272                 ap_vht_cap = bss_desc->bcn_vht_cap;
 273         }
 274
 275         pos = skb_put(skb, sizeof(struct ieee80211_vht_operation) + 2);
 276         *pos++ = WLAN_EID_VHT_OPERATION;
 277         *pos++ = sizeof(struct ieee80211_vht_operation);
 278         vht_oper = (struct ieee80211_vht_operation *)pos;
 279
 280         if (bss_desc->bss_band & BAND_A)
 281                 usr_vht_cap_info = adapter->usr_dot_11ac_dev_cap_a;
 282         else
 283                 usr_vht_cap_info = adapter->usr_dot_11ac_dev_cap_bg;
 284
 285         /* find the minimum bandwidth between AP/TDLS peers */
 286         vht_cap = &sta_ptr->tdls_cap.vhtcap;
 287         supp_chwd_set = GET_VHTCAP_CHWDSET(usr_vht_cap_info);
 288         peer_supp_chwd_set =
 289                          GET_VHTCAP_CHWDSET(le32_to_cpu(vht_cap->vht_cap_info));
 290         supp_chwd_set = min_t(u8, supp_chwd_set, peer_supp_chwd_set);
 291
 292         /* We need check AP's bandwidth when TDLS_WIDER_BANDWIDTH is off */
 293
 294         if (ap_vht_cap && sta_ptr->tdls_cap.extcap.ext_capab[7] &
 295             WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED) {
 296                 ap_supp_chwd_set =
 297                       GET_VHTCAP_CHWDSET(le32_to_cpu(ap_vht_cap->vht_cap_info));
 298                 supp_chwd_set = min_t(u8, supp_chwd_set, ap_supp_chwd_set);
 299         }
 300
 301         switch (supp_chwd_set) {
 302         case IEEE80211_VHT_CHANWIDTH_80MHZ:
 303                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ;
 304                 break;
 305         case IEEE80211_VHT_CHANWIDTH_160MHZ:
 306                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_160MHZ;
 307                 break;
 308         case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
 309                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80P80MHZ;
 310                 break;
 311         default:
 312                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_USE_HT;
 313                 break;
 314         }
 315
 316         mcs_map_user = GET_DEVRXMCSMAP(adapter->usr_dot_11ac_mcs_support);
 317         mcs_map_resp = le16_to_cpu(vht_cap->supp_mcs.rx_mcs_map);
 318         mcs_map_result = 0;
 319
 320         for (nss = 1; nss <= 8; nss++) {
 321                 mcs_user = GET_VHTNSSMCS(mcs_map_user, nss);
 322                 mcs_resp = GET_VHTNSSMCS(mcs_map_resp, nss);
 323
 324                 if ((mcs_user == IEEE80211_VHT_MCS_NOT_SUPPORTED) ||
 325                     (mcs_resp == IEEE80211_VHT_MCS_NOT_SUPPORTED))
 326                         SET_VHTNSSMCS(mcs_map_result, nss,
 327                                       IEEE80211_VHT_MCS_NOT_SUPPORTED);
 328                 else
 329                         SET_VHTNSSMCS(mcs_map_result, nss,
 330                                       min_t(u16, mcs_user, mcs_resp));
 331         }
 332
 333         vht_oper->basic_mcs_set = cpu_to_le16(mcs_map_result);
 334
 335         switch (vht_oper->chan_width) {
 336         case IEEE80211_VHT_CHANWIDTH_80MHZ:
 337                 chan_bw = IEEE80211_VHT_CHANWIDTH_80MHZ;
 338                 break;
 339         case IEEE80211_VHT_CHANWIDTH_160MHZ:
 340                 chan_bw = IEEE80211_VHT_CHANWIDTH_160MHZ;
 341                 break;
 342         case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
 343                 chan_bw = IEEE80211_VHT_CHANWIDTH_80MHZ;
 344                 break;
 345         default:
 346                 chan_bw = IEEE80211_VHT_CHANWIDTH_USE_HT;
 347                 break;
 348         }
 349         vht_oper->center_freq_seg0_idx =
 350                         mwifiex_get_center_freq_index(priv, BAND_AAC,
 351                                                       bss_desc->channel,
 352                                                       chan_bw);
 353
 354         return 0;
 355 }
 356
 357 static void mwifiex_tdls_add_ext_capab(struct mwifiex_private *priv,
 358                                        struct sk_buff *skb)
 359 {
 360         struct ieee_types_extcap *extcap;
 361
 362         extcap = skb_put(skb, sizeof(struct ieee_types_extcap));
 363         extcap->ieee_hdr.element_id = WLAN_EID_EXT_CAPABILITY;
 364         extcap->ieee_hdr.len = 8;
 365         memset(extcap->ext_capab, 0, 8);
 366         extcap->ext_capab[4] |= WLAN_EXT_CAPA5_TDLS_ENABLED;
 367         extcap->ext_capab[3] |= WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH;
 368
 369         if (priv->adapter->is_hw_11ac_capable)
 370                 extcap->ext_capab[7] |= WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED;
 371 }
 372
 373 static void mwifiex_tdls_add_qos_capab(struct sk_buff *skb)
 374 {
 375         u8 *pos = skb_put(skb, 3);
 376
 377         *pos++ = WLAN_EID_QOS_CAPA;
 378         *pos++ = 1;
 379         *pos++ = MWIFIEX_TDLS_DEF_QOS_CAPAB;
 380 }
 381
 382 static void
 383 mwifiex_tdls_add_wmm_param_ie(struct mwifiex_private *priv, struct sk_buff *skb)
 384 {
 385         struct ieee80211_wmm_param_ie *wmm;
 386         u8 ac_vi[] = {0x42, 0x43, 0x5e, 0x00};
 387         u8 ac_vo[] = {0x62, 0x32, 0x2f, 0x00};
 388         u8 ac_be[] = {0x03, 0xa4, 0x00, 0x00};
 389         u8 ac_bk[] = {0x27, 0xa4, 0x00, 0x00};
 390
 391         wmm = skb_put_zero(skb, sizeof(*wmm));
 392
 393         wmm->element_id = WLAN_EID_VENDOR_SPECIFIC;
 394         wmm->len = sizeof(*wmm) - 2;
 395         wmm->oui[0] = 0x00; /* Microsoft OUI 00:50:F2 */
 396         wmm->oui[1] = 0x50;
 397         wmm->oui[2] = 0xf2;
 398         wmm->oui_type = 2; /* WME */
 399         wmm->oui_subtype = 1; /* WME param */
 400         wmm->version = 1; /* WME ver */
 401         wmm->qos_info = 0; /* U-APSD not in use */
 402
 403         /* use default WMM AC parameters for TDLS link*/
 404         memcpy(&wmm->ac[0], ac_be, sizeof(ac_be));
 405         memcpy(&wmm->ac[1], ac_bk, sizeof(ac_bk));
 406         memcpy(&wmm->ac[2], ac_vi, sizeof(ac_vi));
 407         memcpy(&wmm->ac[3], ac_vo, sizeof(ac_vo));
 408 }
 409
 410 static void
 411 mwifiex_add_wmm_info_ie(struct mwifiex_private *priv, struct sk_buff *skb,
 412                         u8 qosinfo)
 413 {
 414         u8 *buf;
 415
 416         buf = skb_put(skb,
 417                       MWIFIEX_TDLS_WMM_INFO_SIZE + sizeof(struct ieee_types_header));
 418
 419         *buf++ = WLAN_EID_VENDOR_SPECIFIC;
 420         *buf++ = 7; /* len */
 421         *buf++ = 0x00; /* Microsoft OUI 00:50:F2 */
 422         *buf++ = 0x50;
 423         *buf++ = 0xf2;
 424         *buf++ = 2; /* WME */
 425         *buf++ = 0; /* WME info */
 426         *buf++ = 1; /* WME ver */
 427         *buf++ = qosinfo; /* U-APSD no in use */
 428 }
 429
 430 static void mwifiex_tdls_add_bss_co_2040(struct sk_buff *skb)
 431 {
 432         struct ieee_types_bss_co_2040 *bssco;
 433
 434         bssco = skb_put(skb, sizeof(struct ieee_types_bss_co_2040));
 435         bssco->ieee_hdr.element_id = WLAN_EID_BSS_COEX_2040;
 436         bssco->ieee_hdr.len = sizeof(struct ieee_types_bss_co_2040) -
 437                               sizeof(struct ieee_types_header);
 438         bssco->bss_2040co = 0x01;
 439 }
 440
 441 static void mwifiex_tdls_add_supported_chan(struct sk_buff *skb)
 442 {
 443         struct ieee_types_generic *supp_chan;
 444         u8 chan_supp[] = {1, 11};
 445
 446         supp_chan = skb_put(skb,
 447                             (sizeof(struct ieee_types_header) + sizeof(chan_supp)));
 448         supp_chan->ieee_hdr.element_id = WLAN_EID_SUPPORTED_CHANNELS;
 449         supp_chan->ieee_hdr.len = sizeof(chan_supp);
 450         memcpy(supp_chan->data, chan_supp, sizeof(chan_supp));
 451 }
 452
 453 static void mwifiex_tdls_add_oper_class(struct sk_buff *skb)
 454 {
 455         struct ieee_types_generic *reg_class;
 456         u8 rc_list[] = {1,
 457                 1, 2, 3, 4, 12, 22, 23, 24, 25, 27, 28, 29, 30, 32, 33};
 458         reg_class = skb_put(skb,
 459                             (sizeof(struct ieee_types_header) + sizeof(rc_list)));
 460         reg_class->ieee_hdr.element_id = WLAN_EID_SUPPORTED_REGULATORY_CLASSES;
 461         reg_class->ieee_hdr.len = sizeof(rc_list);
 462         memcpy(reg_class->data, rc_list, sizeof(rc_list));
 463 }
 464
 465 static int mwifiex_prep_tdls_encap_data(struct mwifiex_private *priv,
 466                                         const u8 *peer, u8 action_code,
 467                                         u8 dialog_token,
 468                                         u16 status_code, struct sk_buff *skb)
 469 {
 470         struct ieee80211_tdls_data *tf;
 471         int ret;
 472         u16 capab;
 473         struct ieee80211_ht_cap *ht_cap;
 474         u8 radio, *pos;
 475
 476         capab = priv->curr_bss_params.bss_descriptor.cap_info_bitmap;
 477
 478         tf = skb_put(skb, offsetof(struct ieee80211_tdls_data, u));
 479         memcpy(tf->da, peer, ETH_ALEN);
 480         memcpy(tf->sa, priv->curr_addr, ETH_ALEN);
 481         tf->ether_type = cpu_to_be16(ETH_P_TDLS);
 482         tf->payload_type = WLAN_TDLS_SNAP_RFTYPE;
 483
 484         switch (action_code) {
 485         case WLAN_TDLS_SETUP_REQUEST:
 486                 tf->category = WLAN_CATEGORY_TDLS;
 487                 tf->action_code = WLAN_TDLS_SETUP_REQUEST;
 488                 skb_put(skb, sizeof(tf->u.setup_req));
 489                 tf->u.setup_req.dialog_token = dialog_token;
 490                 tf->u.setup_req.capability = cpu_to_le16(capab);
 491                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 492                 if (ret) {
 493                         dev_kfree_skb_any(skb);
 494                         return ret;
 495                 }
 496
 497                 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 498                 *pos++ = WLAN_EID_HT_CAPABILITY;
 499                 *pos++ = sizeof(struct ieee80211_ht_cap);
 500                 ht_cap = (void *)pos;
 501                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 502                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 503                 if (ret) {
 504                         dev_kfree_skb_any(skb);
 505                         return ret;
 506                 }
 507
 508                 if (priv->adapter->is_hw_11ac_capable) {
 509                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 510                         if (ret) {
 511                                 dev_kfree_skb_any(skb);
 512                                 return ret;
 513                         }
 514                         mwifiex_tdls_add_aid(priv, skb);
 515                 }
 516
 517                 mwifiex_tdls_add_ext_capab(priv, skb);
 518                 mwifiex_tdls_add_bss_co_2040(skb);
 519                 mwifiex_tdls_add_supported_chan(skb);
 520                 mwifiex_tdls_add_oper_class(skb);
 521                 mwifiex_add_wmm_info_ie(priv, skb, 0);
 522                 break;
 523
 524         case WLAN_TDLS_SETUP_RESPONSE:
 525                 tf->category = WLAN_CATEGORY_TDLS;
 526                 tf->action_code = WLAN_TDLS_SETUP_RESPONSE;
 527                 skb_put(skb, sizeof(tf->u.setup_resp));
 528                 tf->u.setup_resp.status_code = cpu_to_le16(status_code);
 529                 tf->u.setup_resp.dialog_token = dialog_token;
 530                 tf->u.setup_resp.capability = cpu_to_le16(capab);
 531                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 532                 if (ret) {
 533                         dev_kfree_skb_any(skb);
 534                         return ret;
 535                 }
 536
 537                 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 538                 *pos++ = WLAN_EID_HT_CAPABILITY;
 539                 *pos++ = sizeof(struct ieee80211_ht_cap);
 540                 ht_cap = (void *)pos;
 541                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 542                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 543                 if (ret) {
 544                         dev_kfree_skb_any(skb);
 545                         return ret;
 546                 }
 547
 548                 if (priv->adapter->is_hw_11ac_capable) {
 549                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 550                         if (ret) {
 551                                 dev_kfree_skb_any(skb);
 552                                 return ret;
 553                         }
 554                         mwifiex_tdls_add_aid(priv, skb);
 555                 }
 556
 557                 mwifiex_tdls_add_ext_capab(priv, skb);
 558                 mwifiex_tdls_add_bss_co_2040(skb);
 559                 mwifiex_tdls_add_supported_chan(skb);
 560                 mwifiex_tdls_add_oper_class(skb);
 561                 mwifiex_add_wmm_info_ie(priv, skb, 0);
 562                 break;
 563
 564         case WLAN_TDLS_SETUP_CONFIRM:
 565                 tf->category = WLAN_CATEGORY_TDLS;
 566                 tf->action_code = WLAN_TDLS_SETUP_CONFIRM;
 567                 skb_put(skb, sizeof(tf->u.setup_cfm));
 568                 tf->u.setup_cfm.status_code = cpu_to_le16(status_code);
 569                 tf->u.setup_cfm.dialog_token = dialog_token;
 570
 571                 mwifiex_tdls_add_wmm_param_ie(priv, skb);
 572                 if (priv->adapter->is_hw_11ac_capable) {
 573                         ret = mwifiex_tdls_add_vht_oper(priv, peer, skb);
 574                         if (ret) {
 575                                 dev_kfree_skb_any(skb);
 576                                 return ret;
 577                         }
 578                         ret = mwifiex_tdls_add_ht_oper(priv, peer, 1, skb);
 579                         if (ret) {
 580                                 dev_kfree_skb_any(skb);
 581                                 return ret;
 582                         }
 583                 } else {
 584                         ret = mwifiex_tdls_add_ht_oper(priv, peer, 0, skb);
 585                         if (ret) {
 586                                 dev_kfree_skb_any(skb);
 587                                 return ret;
 588                         }
 589                 }
 590                 break;
 591
 592         case WLAN_TDLS_TEARDOWN:
 593                 tf->category = WLAN_CATEGORY_TDLS;
 594                 tf->action_code = WLAN_TDLS_TEARDOWN;
 595                 skb_put(skb, sizeof(tf->u.teardown));
 596                 tf->u.teardown.reason_code = cpu_to_le16(status_code);
 597                 break;
 598
 599         case WLAN_TDLS_DISCOVERY_REQUEST:
 600                 tf->category = WLAN_CATEGORY_TDLS;
 601                 tf->action_code = WLAN_TDLS_DISCOVERY_REQUEST;
 602                 skb_put(skb, sizeof(tf->u.discover_req));
 603                 tf->u.discover_req.dialog_token = dialog_token;
 604                 break;
 605         default:
 606                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS frame type.\n");
 607                 return -EINVAL;
 608         }
 609
 610         return 0;
 611 }
 612
 613 static void
 614 mwifiex_tdls_add_link_ie(struct sk_buff *skb, const u8 *src_addr,
 615                          const u8 *peer, const u8 *bssid)
 616 {
 617         struct ieee80211_tdls_lnkie *lnkid;
 618
 619         lnkid = skb_put(skb, sizeof(struct ieee80211_tdls_lnkie));
 620         lnkid->ie_type = WLAN_EID_LINK_ID;
 621         lnkid->ie_len = sizeof(struct ieee80211_tdls_lnkie) -
 622                         sizeof(struct ieee_types_header);
 623
 624         memcpy(lnkid->bssid, bssid, ETH_ALEN);
 625         memcpy(lnkid->init_sta, src_addr, ETH_ALEN);
 626         memcpy(lnkid->resp_sta, peer, ETH_ALEN);
 627 }
 628
 629 int mwifiex_send_tdls_data_frame(struct mwifiex_private *priv, const u8 *peer,
 630                                  u8 action_code, u8 dialog_token,
 631                                  u16 status_code, const u8 *extra_ies,
 632                                  size_t extra_ies_len)
 633 {
 634         struct sk_buff *skb;
 635         struct mwifiex_txinfo *tx_info;
 636         int ret;
 637         u16 skb_len;
 638
 639         skb_len = MWIFIEX_MIN_DATA_HEADER_LEN +
 640                   max(sizeof(struct ieee80211_mgmt),
 641                       sizeof(struct ieee80211_tdls_data)) +
 642                   MWIFIEX_MGMT_FRAME_HEADER_SIZE +
 643                   MWIFIEX_SUPPORTED_RATES +
 644                   3 + /* Qos Info */
 645                   sizeof(struct ieee_types_extcap) +
 646                   sizeof(struct ieee80211_ht_cap) +
 647                   sizeof(struct ieee_types_bss_co_2040) +
 648                   sizeof(struct ieee80211_ht_operation) +
 649                   sizeof(struct ieee80211_tdls_lnkie) +
 650                   (2 * (sizeof(struct ieee_types_header))) +
 651                    MWIFIEX_SUPPORTED_CHANNELS +
 652                    MWIFIEX_OPERATING_CLASSES +
 653                   sizeof(struct ieee80211_wmm_param_ie) +
 654                   extra_ies_len;
 655
 656         if (priv->adapter->is_hw_11ac_capable)
 657                 skb_len += sizeof(struct ieee_types_vht_cap) +
 658                            sizeof(struct ieee_types_vht_oper) +
 659                            sizeof(struct ieee_types_aid);
 660
 661         skb = dev_alloc_skb(skb_len);
 662         if (!skb) {
 663                 mwifiex_dbg(priv->adapter, ERROR,
 664                             "allocate skb failed for management frame\n");
 665                 return -ENOMEM;
 666         }
 667         skb_reserve(skb, MWIFIEX_MIN_DATA_HEADER_LEN);
 668
 669         switch (action_code) {
 670         case WLAN_TDLS_SETUP_REQUEST:
 671         case WLAN_TDLS_SETUP_CONFIRM:
 672         case WLAN_TDLS_TEARDOWN:
 673         case WLAN_TDLS_DISCOVERY_REQUEST:
 674                 ret = mwifiex_prep_tdls_encap_data(priv, peer, action_code,
 675                                                    dialog_token, status_code,
 676                                                    skb);
 677                 if (ret) {
 678                         dev_kfree_skb_any(skb);
 679                         return ret;
 680                 }
 681                 if (extra_ies_len)
 682                         skb_put_data(skb, extra_ies, extra_ies_len);
 683                 mwifiex_tdls_add_link_ie(skb, priv->curr_addr, peer,
 684                                          priv->cfg_bssid);
 685                 break;
 686         case WLAN_TDLS_SETUP_RESPONSE:
 687                 ret = mwifiex_prep_tdls_encap_data(priv, peer, action_code,
 688                                                    dialog_token, status_code,
 689                                                    skb);
 690                 if (ret) {
 691                         dev_kfree_skb_any(skb);
 692                         return ret;
 693                 }
 694                 if (extra_ies_len)
 695                         skb_put_data(skb, extra_ies, extra_ies_len);
 696                 mwifiex_tdls_add_link_ie(skb, peer, priv->curr_addr,
 697                                          priv->cfg_bssid);
 698                 break;
 699         }
 700
 701         switch (action_code) {
 702         case WLAN_TDLS_SETUP_REQUEST:
 703         case WLAN_TDLS_SETUP_RESPONSE:
 704                 skb->priority = MWIFIEX_PRIO_BK;
 705                 break;
 706         default:
 707                 skb->priority = MWIFIEX_PRIO_VI;
 708                 break;
 709         }
 710
 711         tx_info = MWIFIEX_SKB_TXCB(skb);
 712         memset(tx_info, 0, sizeof(*tx_info));
 713         tx_info->bss_num = priv->bss_num;
 714         tx_info->bss_type = priv->bss_type;
 715
 716         __net_timestamp(skb);
 717         mwifiex_queue_tx_pkt(priv, skb);
 718
 719         /* Delay 10ms to make sure tdls setup confirm/teardown frame
 720          * is received by peer
 721         */
 722         if (action_code == WLAN_TDLS_SETUP_CONFIRM ||
 723             action_code == WLAN_TDLS_TEARDOWN)
 724                 msleep_interruptible(10);
 725
 726         return 0;
 727 }
 728
 729 static int
 730 mwifiex_construct_tdls_action_frame(struct mwifiex_private *priv,
 731                                     const u8 *peer,
 732                                     u8 action_code, u8 dialog_token,
 733                                     u16 status_code, struct sk_buff *skb)
 734 {
 735         struct ieee80211_mgmt *mgmt;
 736         u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
 737         int ret;
 738         u16 capab;
 739         struct ieee80211_ht_cap *ht_cap;
 740         unsigned int extra;
 741         u8 radio, *pos;
 742
 743         capab = priv->curr_bss_params.bss_descriptor.cap_info_bitmap;
 744
 745         mgmt = skb_put(skb, offsetof(struct ieee80211_mgmt, u));
 746
 747         memset(mgmt, 0, 24);
 748         memcpy(mgmt->da, peer, ETH_ALEN);
 749         memcpy(mgmt->sa, priv->curr_addr, ETH_ALEN);
 750         memcpy(mgmt->bssid, priv->cfg_bssid, ETH_ALEN);
 751         mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 752                                           IEEE80211_STYPE_ACTION);
 753
 754         /* add address 4 */
 755         pos = skb_put(skb, ETH_ALEN);
 756
 757         switch (action_code) {
 758         case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
 759                 /* See the layout of 'struct ieee80211_mgmt'. */
 760                 extra = sizeof(mgmt->u.action.u.tdls_discover_resp) +
 761                         sizeof(mgmt->u.action.category);
 762                 skb_put(skb, extra);
 763                 mgmt->u.action.category = WLAN_CATEGORY_PUBLIC;
 764                 mgmt->u.action.u.tdls_discover_resp.action_code =
 765                                               WLAN_PUB_ACTION_TDLS_DISCOVER_RES;
 766                 mgmt->u.action.u.tdls_discover_resp.dialog_token =
 767                                                                    dialog_token;
 768                 mgmt->u.action.u.tdls_discover_resp.capability =
 769                                                              cpu_to_le16(capab);
 770                 /* move back for addr4 */
 771                 memmove(pos + ETH_ALEN, &mgmt->u.action, extra);
 772                 /* init address 4 */
 773                 memcpy(pos, bc_addr, ETH_ALEN);
 774
 775                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 776                 if (ret) {
 777                         dev_kfree_skb_any(skb);
 778                         return ret;
 779                 }
 780
 781                 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 782                 *pos++ = WLAN_EID_HT_CAPABILITY;
 783                 *pos++ = sizeof(struct ieee80211_ht_cap);
 784                 ht_cap = (void *)pos;
 785                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 786                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 787                 if (ret) {
 788                         dev_kfree_skb_any(skb);
 789                         return ret;
 790                 }
 791
 792                 if (priv->adapter->is_hw_11ac_capable) {
 793                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 794                         if (ret) {
 795                                 dev_kfree_skb_any(skb);
 796                                 return ret;
 797                         }
 798                         mwifiex_tdls_add_aid(priv, skb);
 799                 }
 800
 801                 mwifiex_tdls_add_ext_capab(priv, skb);
 802                 mwifiex_tdls_add_bss_co_2040(skb);
 803                 mwifiex_tdls_add_supported_chan(skb);
 804                 mwifiex_tdls_add_qos_capab(skb);
 805                 mwifiex_tdls_add_oper_class(skb);
 806                 break;
 807         default:
 808                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS action frame type\n");
 809                 return -EINVAL;
 810         }
 811
 812         return 0;
 813 }
 814
 815 int mwifiex_send_tdls_action_frame(struct mwifiex_private *priv, const u8 *peer,
 816                                    u8 action_code, u8 dialog_token,
 817                                    u16 status_code, const u8 *extra_ies,
 818                                    size_t extra_ies_len)
 819 {
 820         struct sk_buff *skb;
 821         struct mwifiex_txinfo *tx_info;
 822         u8 *pos;
 823         u32 pkt_type, tx_control;
 824         u16 pkt_len, skb_len;
 825
 826         skb_len = MWIFIEX_MIN_DATA_HEADER_LEN +
 827                   max(sizeof(struct ieee80211_mgmt),
 828                       sizeof(struct ieee80211_tdls_data)) +
 829                   MWIFIEX_MGMT_FRAME_HEADER_SIZE +
 830                   MWIFIEX_SUPPORTED_RATES +
 831                   sizeof(struct ieee_types_extcap) +
 832                   sizeof(struct ieee80211_ht_cap) +
 833                   sizeof(struct ieee_types_bss_co_2040) +
 834                   sizeof(struct ieee80211_ht_operation) +
 835                   sizeof(struct ieee80211_tdls_lnkie) +
 836                   extra_ies_len +
 837                   3 + /* Qos Info */
 838                   ETH_ALEN; /* Address4 */
 839
 840         if (priv->adapter->is_hw_11ac_capable)
 841                 skb_len += sizeof(struct ieee_types_vht_cap) +
 842                            sizeof(struct ieee_types_vht_oper) +
 843                            sizeof(struct ieee_types_aid);
 844
 845         skb = dev_alloc_skb(skb_len);
 846         if (!skb) {
 847                 mwifiex_dbg(priv->adapter, ERROR,
 848                             "allocate skb failed for management frame\n");
 849                 return -ENOMEM;
 850         }
 851
 852         skb_reserve(skb, MWIFIEX_MIN_DATA_HEADER_LEN);
 853
 854         pkt_type = PKT_TYPE_MGMT;
 855         tx_control = 0;
 856         pos = skb_put_zero(skb,
 857                            MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));
 858         memcpy(pos, &pkt_type, sizeof(pkt_type));
 859         memcpy(pos + sizeof(pkt_type), &tx_control, sizeof(tx_control));
 860
 861         if (mwifiex_construct_tdls_action_frame(priv, peer, action_code,
 862                                                 dialog_token, status_code,
 863                                                 skb)) {
 864                 dev_kfree_skb_any(skb);
 865                 return -EINVAL;
 866         }
 867
 868         if (extra_ies_len)
 869                 skb_put_data(skb, extra_ies, extra_ies_len);
 870
 871         /* the TDLS link IE is always added last we are the responder */
 872
 873         mwifiex_tdls_add_link_ie(skb, peer, priv->curr_addr,
 874                                  priv->cfg_bssid);
 875
 876         skb->priority = MWIFIEX_PRIO_VI;
 877
 878         tx_info = MWIFIEX_SKB_TXCB(skb);
 879         memset(tx_info, 0, sizeof(*tx_info));
 880         tx_info->bss_num = priv->bss_num;
 881         tx_info->bss_type = priv->bss_type;
 882         tx_info->flags |= MWIFIEX_BUF_FLAG_TDLS_PKT;
 883
 884         pkt_len = skb->len - MWIFIEX_MGMT_FRAME_HEADER_SIZE - sizeof(pkt_len);
 885         memcpy(skb->data + MWIFIEX_MGMT_FRAME_HEADER_SIZE, &pkt_len,
 886                sizeof(pkt_len));
 887         __net_timestamp(skb);
 888         mwifiex_queue_tx_pkt(priv, skb);
 889
 890         return 0;
 891 }
 892
 893 /* This function process tdls action frame from peer.
 894  * Peer capabilities are stored into station node structure.
 895  */
 896 void mwifiex_process_tdls_action_frame(struct mwifiex_private *priv,
 897                                        u8 *buf, int len)
 898 {
 899         struct mwifiex_sta_node *sta_ptr;
 900         u8 *peer, *pos, *end;
 901         u8 i, action, basic;
 902         u16 cap = 0;
 903         int ies_len = 0;
 904
 905         if (len < (sizeof(struct ethhdr) + 3))
 906                 return;
 907         if (*(buf + sizeof(struct ethhdr)) != WLAN_TDLS_SNAP_RFTYPE)
 908                 return;
 909         if (*(buf + sizeof(struct ethhdr) + 1) != WLAN_CATEGORY_TDLS)
 910                 return;
 911
 912         peer = buf + ETH_ALEN;
 913         action = *(buf + sizeof(struct ethhdr) + 2);
 914         mwifiex_dbg(priv->adapter, DATA,
 915                     "rx:tdls action: peer=%pM, action=%d\n", peer, action);
 916
 917         switch (action) {
 918         case WLAN_TDLS_SETUP_REQUEST:
 919                 if (len < (sizeof(struct ethhdr) + TDLS_REQ_FIX_LEN))
 920                         return;
 921
 922                 pos = buf + sizeof(struct ethhdr) + 4;
 923                 /* payload 1+ category 1 + action 1 + dialog 1 */
 924                 cap = get_unaligned_le16(pos);
 925                 ies_len = len - sizeof(struct ethhdr) - TDLS_REQ_FIX_LEN;
 926                 pos += 2;
 927                 break;
 928
 929         case WLAN_TDLS_SETUP_RESPONSE:
 930                 if (len < (sizeof(struct ethhdr) + TDLS_RESP_FIX_LEN))
 931                         return;
 932                 /* payload 1+ category 1 + action 1 + dialog 1 + status code 2*/
 933                 pos = buf + sizeof(struct ethhdr) + 6;
 934                 cap = get_unaligned_le16(pos);
 935                 ies_len = len - sizeof(struct ethhdr) - TDLS_RESP_FIX_LEN;
 936                 pos += 2;
 937                 break;
 938
 939         case WLAN_TDLS_SETUP_CONFIRM:
 940                 if (len < (sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN))
 941                         return;
 942                 pos = buf + sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN;
 943                 ies_len = len - sizeof(struct ethhdr) - TDLS_CONFIRM_FIX_LEN;
 944                 break;
 945         default:
 946                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS frame type.\n");
 947                 return;
 948         }
 949
 950         sta_ptr = mwifiex_add_sta_entry(priv, peer);
 951         if (!sta_ptr)
 952                 return;
 953
 954         sta_ptr->tdls_cap.capab = cpu_to_le16(cap);
 955
 956         for (end = pos + ies_len; pos + 1 < end; pos += 2 + pos[1]) {
 957                 u8 ie_len = pos[1];
 958
 959                 if (pos + 2 + ie_len > end)
 960                         break;
 961
 962                 switch (*pos) {
 963                 case WLAN_EID_SUPP_RATES:
 964                         if (ie_len > sizeof(sta_ptr->tdls_cap.rates))
 965                                 return;
 966                         sta_ptr->tdls_cap.rates_len = ie_len;
 967                         for (i = 0; i < ie_len; i++)
 968                                 sta_ptr->tdls_cap.rates[i] = pos[i + 2];
 969                         break;
 970
 971                 case WLAN_EID_EXT_SUPP_RATES:
 972                         if (ie_len > sizeof(sta_ptr->tdls_cap.rates))
 973                                 return;
 974                         basic = sta_ptr->tdls_cap.rates_len;
 975                         if (ie_len > sizeof(sta_ptr->tdls_cap.rates) - basic)
 976                                 return;
 977                         for (i = 0; i < ie_len; i++)
 978                                 sta_ptr->tdls_cap.rates[basic + i] = pos[i + 2];
 979                         sta_ptr->tdls_cap.rates_len += ie_len;
 980                         break;
 981                 case WLAN_EID_HT_CAPABILITY:
 982                         if (ie_len != sizeof(struct ieee80211_ht_cap))
 983                                 return;
 984                         /* copy the ie's value into ht_capb*/
 985                         memcpy((u8 *)&sta_ptr->tdls_cap.ht_capb, pos + 2,
 986                                sizeof(struct ieee80211_ht_cap));
 987                         sta_ptr->is_11n_enabled = 1;
 988                         break;
 989                 case WLAN_EID_HT_OPERATION:
 990                         if (ie_len != sizeof(struct ieee80211_ht_operation))
 991                                 return;
 992                         /* copy the ie's value into ht_oper*/
 993                         memcpy(&sta_ptr->tdls_cap.ht_oper, pos + 2,
 994                                sizeof(struct ieee80211_ht_operation));
 995                         break;
 996                 case WLAN_EID_BSS_COEX_2040:
 997                         if (ie_len != sizeof(pos[2]))
 998                                 return;
 999                         sta_ptr->tdls_cap.coex_2040 = pos[2];
1000                         break;
1001                 case WLAN_EID_EXT_CAPABILITY:
1002                         if (ie_len < sizeof(struct ieee_types_header))
1003                                 return;
1004                         if (ie_len > 8)
1005                                 return;
1006                         memcpy((u8 *)&sta_ptr->tdls_cap.extcap, pos,
1007                                sizeof(struct ieee_types_header) +
1008                                min_t(u8, ie_len, 8));
1009                         break;
1010                 case WLAN_EID_RSN:
1011                         if (ie_len < sizeof(struct ieee_types_header))
1012                                 return;
1013                         if (ie_len > IEEE_MAX_IE_SIZE -
1014                             sizeof(struct ieee_types_header))
1015                                 return;
1016                         memcpy((u8 *)&sta_ptr->tdls_cap.rsn_ie, pos,
1017                                sizeof(struct ieee_types_header) +
1018                                min_t(u8, ie_len, IEEE_MAX_IE_SIZE -
1019                                      sizeof(struct ieee_types_header)));
1020                         break;
1021                 case WLAN_EID_QOS_CAPA:
1022                         if (ie_len != sizeof(pos[2]))
1023                                 return;
1024                         sta_ptr->tdls_cap.qos_info = pos[2];
1025                         break;
1026                 case WLAN_EID_VHT_OPERATION:
1027                         if (priv->adapter->is_hw_11ac_capable) {
1028                                 if (ie_len !=
1029                                     sizeof(struct ieee80211_vht_operation))
1030                                         return;
1031                                 /* copy the ie's value into vhtoper*/
1032                                 memcpy(&sta_ptr->tdls_cap.vhtoper, pos + 2,
1033                                        sizeof(struct ieee80211_vht_operation));
1034                         }
1035                         break;
1036                 case WLAN_EID_VHT_CAPABILITY:
1037                         if (priv->adapter->is_hw_11ac_capable) {
1038                                 if (ie_len != sizeof(struct ieee80211_vht_cap))
1039                                         return;
1040                                 /* copy the ie's value into vhtcap*/
1041                                 memcpy((u8 *)&sta_ptr->tdls_cap.vhtcap, pos + 2,
1042                                        sizeof(struct ieee80211_vht_cap));
1043                                 sta_ptr->is_11ac_enabled = 1;
1044                         }
1045                         break;
1046                 case WLAN_EID_AID:
1047                         if (priv->adapter->is_hw_11ac_capable) {
1048                                 if (ie_len != sizeof(u16))
1049                                         return;
1050                                 sta_ptr->tdls_cap.aid =
1051                                         get_unaligned_le16((pos + 2));
1052                         }
1053                         break;
1054                 default:
1055                         break;
1056                 }
1057         }
1058
1059         return;
1060 }
1061
1062 static int
1063 mwifiex_tdls_process_config_link(struct mwifiex_private *priv, const u8 *peer)
1064 {
1065         struct mwifiex_sta_node *sta_ptr;
1066         struct mwifiex_ds_tdls_oper tdls_oper;
1067
1068         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1069         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1070
1071         if (!sta_ptr || sta_ptr->tdls_status == TDLS_SETUP_FAILURE) {
1072                 mwifiex_dbg(priv->adapter, ERROR,
1073                             "link absent for peer %pM; cannot config\n", peer);
1074                 return -EINVAL;
1075         }
1076
1077         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1078         tdls_oper.tdls_action = MWIFIEX_TDLS_CONFIG_LINK;
1079         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1080                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1081 }
1082
1083 static int
1084 mwifiex_tdls_process_create_link(struct mwifiex_private *priv, const u8 *peer)
1085 {
1086         struct mwifiex_sta_node *sta_ptr;
1087         struct mwifiex_ds_tdls_oper tdls_oper;
1088
1089         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1090         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1091
1092         if (sta_ptr && sta_ptr->tdls_status == TDLS_SETUP_INPROGRESS) {
1093                 mwifiex_dbg(priv->adapter, WARN,
1094                             "Setup already in progress for peer %pM\n", peer);
1095                 return 0;
1096         }
1097
1098         sta_ptr = mwifiex_add_sta_entry(priv, peer);
1099         if (!sta_ptr)
1100                 return -ENOMEM;
1101
1102         sta_ptr->tdls_status = TDLS_SETUP_INPROGRESS;
1103         mwifiex_hold_tdls_packets(priv, peer);
1104         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1105         tdls_oper.tdls_action = MWIFIEX_TDLS_CREATE_LINK;
1106         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1107                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1108 }
1109
1110 static int
1111 mwifiex_tdls_process_disable_link(struct mwifiex_private *priv, const u8 *peer)
1112 {
1113         struct mwifiex_sta_node *sta_ptr;
1114         struct mwifiex_ds_tdls_oper tdls_oper;
1115         unsigned long flags;
1116
1117         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1118         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1119
1120         if (sta_ptr) {
1121                 if (sta_ptr->is_11n_enabled) {
1122                         mwifiex_11n_cleanup_reorder_tbl(priv);
1123                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1124                                           flags);
1125                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1126                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1127                                                flags);
1128                 }
1129                 mwifiex_del_sta_entry(priv, peer);
1130         }
1131
1132         mwifiex_restore_tdls_packets(priv, peer, TDLS_LINK_TEARDOWN);
1133         mwifiex_auto_tdls_update_peer_status(priv, peer, TDLS_NOT_SETUP);
1134         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1135         tdls_oper.tdls_action = MWIFIEX_TDLS_DISABLE_LINK;
1136         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1137                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1138 }
1139
1140 static int
1141 mwifiex_tdls_process_enable_link(struct mwifiex_private *priv, const u8 *peer)
1142 {
1143         struct mwifiex_sta_node *sta_ptr;
1144         struct ieee80211_mcs_info mcs;
1145         unsigned long flags;
1146         int i;
1147
1148         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1149
1150         if (sta_ptr && (sta_ptr->tdls_status != TDLS_SETUP_FAILURE)) {
1151                 mwifiex_dbg(priv->adapter, MSG,
1152                             "tdls: enable link %pM success\n", peer);
1153
1154                 sta_ptr->tdls_status = TDLS_SETUP_COMPLETE;
1155
1156                 mcs = sta_ptr->tdls_cap.ht_capb.mcs;
1157                 if (mcs.rx_mask[0] != 0xff)
1158                         sta_ptr->is_11n_enabled = true;
1159                 if (sta_ptr->is_11n_enabled) {
1160                         if (le16_to_cpu(sta_ptr->tdls_cap.ht_capb.cap_info) &
1161                             IEEE80211_HT_CAP_MAX_AMSDU)
1162                                 sta_ptr->max_amsdu =
1163                                         MWIFIEX_TX_DATA_BUF_SIZE_8K;
1164                         else
1165                                 sta_ptr->max_amsdu =
1166                                         MWIFIEX_TX_DATA_BUF_SIZE_4K;
1167
1168                         for (i = 0; i < MAX_NUM_TID; i++)
1169                                 sta_ptr->ampdu_sta[i] =
1170                                               priv->aggr_prio_tbl[i].ampdu_user;
1171                 } else {
1172                         for (i = 0; i < MAX_NUM_TID; i++)
1173                                 sta_ptr->ampdu_sta[i] = BA_STREAM_NOT_ALLOWED;
1174                 }
1175                 if (sta_ptr->tdls_cap.extcap.ext_capab[3] &
1176                     WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH) {
1177                         mwifiex_config_tdls_enable(priv);
1178                         mwifiex_config_tdls_cs_params(priv);
1179                 }
1180
1181                 memset(sta_ptr->rx_seq, 0xff, sizeof(sta_ptr->rx_seq));
1182                 mwifiex_restore_tdls_packets(priv, peer, TDLS_SETUP_COMPLETE);
1183                 mwifiex_auto_tdls_update_peer_status(priv, peer,
1184                                                      TDLS_SETUP_COMPLETE);
1185         } else {
1186                 mwifiex_dbg(priv->adapter, ERROR,
1187                             "tdls: enable link %pM failed\n", peer);
1188                 if (sta_ptr) {
1189                         mwifiex_11n_cleanup_reorder_tbl(priv);
1190                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1191                                           flags);
1192                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1193                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1194                                                flags);
1195                         mwifiex_del_sta_entry(priv, peer);
1196                 }
1197                 mwifiex_restore_tdls_packets(priv, peer, TDLS_LINK_TEARDOWN);
1198                 mwifiex_auto_tdls_update_peer_status(priv, peer,
1199                                                      TDLS_NOT_SETUP);
1200
1201                 return -1;
1202         }
1203
1204         return 0;
1205 }
1206
1207 int mwifiex_tdls_oper(struct mwifiex_private *priv, const u8 *peer, u8 action)
1208 {
1209         switch (action) {
1210         case MWIFIEX_TDLS_ENABLE_LINK:
1211                 return mwifiex_tdls_process_enable_link(priv, peer);
1212         case MWIFIEX_TDLS_DISABLE_LINK:
1213                 return mwifiex_tdls_process_disable_link(priv, peer);
1214         case MWIFIEX_TDLS_CREATE_LINK:
1215                 return mwifiex_tdls_process_create_link(priv, peer);
1216         case MWIFIEX_TDLS_CONFIG_LINK:
1217                 return mwifiex_tdls_process_config_link(priv, peer);
1218         }
1219         return 0;
1220 }
1221
1222 int mwifiex_get_tdls_link_status(struct mwifiex_private *priv, const u8 *mac)
1223 {
1224         struct mwifiex_sta_node *sta_ptr;
1225
1226         sta_ptr = mwifiex_get_sta_entry(priv, mac);
1227         if (sta_ptr)
1228                 return sta_ptr->tdls_status;
1229
1230         return TDLS_NOT_SETUP;
1231 }
1232
1233 int mwifiex_get_tdls_list(struct mwifiex_private *priv,
1234                           struct tdls_peer_info *buf)
1235 {
1236         struct mwifiex_sta_node *sta_ptr;
1237         struct tdls_peer_info *peer = buf;
1238         int count = 0;
1239         unsigned long flags;
1240
1241         if (!ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info))
1242                 return 0;
1243
1244         /* make sure we are in station mode and connected */
1245         if (!(priv->bss_type == MWIFIEX_BSS_TYPE_STA && priv->media_connected))
1246                 return 0;
1247
1248         spin_lock_irqsave(&priv->sta_list_spinlock, flags);
1249         list_for_each_entry(sta_ptr, &priv->sta_list, list) {
1250                 if (mwifiex_is_tdls_link_setup(sta_ptr->tdls_status)) {
1251                         ether_addr_copy(peer->peer_addr, sta_ptr->mac_addr);
1252                         peer++;
1253                         count++;
1254                         if (count >= MWIFIEX_MAX_TDLS_PEER_SUPPORTED)
1255                                 break;
1256                 }
1257         }
1258         spin_unlock_irqrestore(&priv->sta_list_spinlock, flags);
1259
1260         return count;
1261 }
1262
1263 void mwifiex_disable_all_tdls_links(struct mwifiex_private *priv)
1264 {
1265         struct mwifiex_sta_node *sta_ptr;
1266         struct mwifiex_ds_tdls_oper tdls_oper;
1267         unsigned long flags;
1268
1269         if (list_empty(&priv->sta_list))
1270                 return;
1271
1272         list_for_each_entry(sta_ptr, &priv->sta_list, list) {
1273                 memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1274
1275                 if (sta_ptr->is_11n_enabled) {
1276                         mwifiex_11n_cleanup_reorder_tbl(priv);
1277                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1278                                           flags);
1279                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1280                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1281                                                flags);
1282                 }
1283
1284                 mwifiex_restore_tdls_packets(priv, sta_ptr->mac_addr,
1285                                              TDLS_LINK_TEARDOWN);
1286                 memcpy(&tdls_oper.peer_mac, sta_ptr->mac_addr, ETH_ALEN);
1287                 tdls_oper.tdls_action = MWIFIEX_TDLS_DISABLE_LINK;
1288                 if (mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1289                                      HostCmd_ACT_GEN_SET, 0, &tdls_oper, false))
1290                         mwifiex_dbg(priv->adapter, ERROR,
1291                                     "Disable link failed for TDLS peer %pM",
1292                                     sta_ptr->mac_addr);
1293         }
1294
1295         mwifiex_del_all_sta_list(priv);
1296 }
1297
1298 int mwifiex_tdls_check_tx(struct mwifiex_private *priv, struct sk_buff *skb)
1299 {
1300         struct mwifiex_auto_tdls_peer *peer;
1301         unsigned long flags;
1302         u8 mac[ETH_ALEN];
1303
1304         ether_addr_copy(mac, skb->data);
1305
1306         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1307         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1308                 if (!memcmp(mac, peer->mac_addr, ETH_ALEN)) {
1309                         if (peer->rssi <= MWIFIEX_TDLS_RSSI_HIGH &&
1310                             peer->tdls_status == TDLS_NOT_SETUP &&
1311                             (peer->failure_count <
1312                              MWIFIEX_TDLS_MAX_FAIL_COUNT)) {
1313                                 peer->tdls_status = TDLS_SETUP_INPROGRESS;
1314                                 mwifiex_dbg(priv->adapter, INFO,
1315                                             "setup TDLS link, peer=%pM rssi=%d\n",
1316                                             peer->mac_addr, peer->rssi);
1317
1318                                 cfg80211_tdls_oper_request(priv->netdev,
1319                                                            peer->mac_addr,
1320                                                            NL80211_TDLS_SETUP,
1321                                                            0, GFP_ATOMIC);
1322                                 peer->do_setup = false;
1323                                 priv->check_tdls_tx = false;
1324                         } else if (peer->failure_count <
1325                                    MWIFIEX_TDLS_MAX_FAIL_COUNT &&
1326                                    peer->do_discover) {
1327                                 mwifiex_send_tdls_data_frame(priv,
1328                                                              peer->mac_addr,
1329                                                     WLAN_TDLS_DISCOVERY_REQUEST,
1330                                                              1, 0, NULL, 0);
1331                                 peer->do_discover = false;
1332                         }
1333                 }
1334         }
1335         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1336
1337         return 0;
1338 }
1339
1340 void mwifiex_flush_auto_tdls_list(struct mwifiex_private *priv)
1341 {
1342         struct mwifiex_auto_tdls_peer *peer, *tmp_node;
1343         unsigned long flags;
1344
1345         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1346         list_for_each_entry_safe(peer, tmp_node, &priv->auto_tdls_list, list) {
1347                 list_del(&peer->list);
1348                 kfree(peer);
1349         }
1350
1351         INIT_LIST_HEAD(&priv->auto_tdls_list);
1352         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1353         priv->check_tdls_tx = false;
1354 }
1355
1356 void mwifiex_add_auto_tdls_peer(struct mwifiex_private *priv, const u8 *mac)
1357 {
1358         struct mwifiex_auto_tdls_peer *tdls_peer;
1359         unsigned long flags;
1360
1361         if (!priv->adapter->auto_tdls)
1362                 return;
1363
1364         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1365         list_for_each_entry(tdls_peer, &priv->auto_tdls_list, list) {
1366                 if (!memcmp(tdls_peer->mac_addr, mac, ETH_ALEN)) {
1367                         tdls_peer->tdls_status = TDLS_SETUP_INPROGRESS;
1368                         tdls_peer->rssi_jiffies = jiffies;
1369                         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1370                         return;
1371                 }
1372         }
1373
1374         /* create new TDLS peer */
1375         tdls_peer = kzalloc(sizeof(*tdls_peer), GFP_ATOMIC);
1376         if (tdls_peer) {
1377                 ether_addr_copy(tdls_peer->mac_addr, mac);
1378                 tdls_peer->tdls_status = TDLS_SETUP_INPROGRESS;
1379                 tdls_peer->rssi_jiffies = jiffies;
1380                 INIT_LIST_HEAD(&tdls_peer->list);
1381                 list_add_tail(&tdls_peer->list, &priv->auto_tdls_list);
1382                 mwifiex_dbg(priv->adapter, INFO,
1383                             "Add auto TDLS peer= %pM to list\n", mac);
1384         }
1385
1386         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1387 }
1388
1389 void mwifiex_auto_tdls_update_peer_status(struct mwifiex_private *priv,
1390                                           const u8 *mac, u8 link_status)
1391 {
1392         struct mwifiex_auto_tdls_peer *peer;
1393         unsigned long flags;
1394
1395         if (!priv->adapter->auto_tdls)
1396                 return;
1397
1398         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1399         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1400                 if (!memcmp(peer->mac_addr, mac, ETH_ALEN)) {
1401                         if ((link_status == TDLS_NOT_SETUP) &&
1402                             (peer->tdls_status == TDLS_SETUP_INPROGRESS))
1403                                 peer->failure_count++;
1404                         else if (mwifiex_is_tdls_link_setup(link_status))
1405                                 peer->failure_count = 0;
1406
1407                         peer->tdls_status = link_status;
1408                         break;
1409                 }
1410         }
1411         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1412 }
1413
1414 void mwifiex_auto_tdls_update_peer_signal(struct mwifiex_private *priv,
1415                                           u8 *mac, s8 snr, s8 nflr)
1416 {
1417         struct mwifiex_auto_tdls_peer *peer;
1418         unsigned long flags;
1419
1420         if (!priv->adapter->auto_tdls)
1421                 return;
1422
1423         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1424         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1425                 if (!memcmp(peer->mac_addr, mac, ETH_ALEN)) {
1426                         peer->rssi = nflr - snr;
1427                         peer->rssi_jiffies = jiffies;
1428                         break;
1429                 }
1430         }
1431         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1432 }
1433
1434 void mwifiex_check_auto_tdls(unsigned long context)
1435 {
1436         struct mwifiex_private *priv = (struct mwifiex_private *)context;
1437         struct mwifiex_auto_tdls_peer *tdls_peer;
1438         unsigned long flags;
1439         u16 reason = WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED;
1440
1441         if (WARN_ON_ONCE(!priv || !priv->adapter)) {
1442                 pr_err("mwifiex: %s: adapter or private structure is NULL\n",
1443                        __func__);
1444                 return;
1445         }
1446
1447         if (unlikely(!priv->adapter->auto_tdls))
1448                 return;
1449
1450         if (!priv->auto_tdls_timer_active) {
1451                 mwifiex_dbg(priv->adapter, INFO,
1452                             "auto TDLS timer inactive; return");
1453                 return;
1454         }
1455
1456         priv->check_tdls_tx = false;
1457
1458         if (list_empty(&priv->auto_tdls_list)) {
1459                 mod_timer(&priv->auto_tdls_timer,
1460                           jiffies +
1461                           msecs_to_jiffies(MWIFIEX_TIMER_10S));
1462                 return;
1463         }
1464
1465         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1466         list_for_each_entry(tdls_peer, &priv->auto_tdls_list, list) {
1467                 if ((jiffies - tdls_peer->rssi_jiffies) >
1468                     (MWIFIEX_AUTO_TDLS_IDLE_TIME * HZ)) {
1469                         tdls_peer->rssi = 0;
1470                         tdls_peer->do_discover = true;
1471                         priv->check_tdls_tx = true;
1472                 }
1473
1474                 if (((tdls_peer->rssi >= MWIFIEX_TDLS_RSSI_LOW) ||
1475                      !tdls_peer->rssi) &&
1476                     mwifiex_is_tdls_link_setup(tdls_peer->tdls_status)) {
1477                         tdls_peer->tdls_status = TDLS_LINK_TEARDOWN;
1478                         mwifiex_dbg(priv->adapter, MSG,
1479                                     "teardown TDLS link,peer=%pM rssi=%d\n",
1480                                     tdls_peer->mac_addr, -tdls_peer->rssi);
1481                         tdls_peer->do_discover = true;
1482                         priv->check_tdls_tx = true;
1483                         cfg80211_tdls_oper_request(priv->netdev,
1484                                                    tdls_peer->mac_addr,
1485                                                    NL80211_TDLS_TEARDOWN,
1486                                                    reason, GFP_ATOMIC);
1487                 } else if (tdls_peer->rssi &&
1488                            tdls_peer->rssi <= MWIFIEX_TDLS_RSSI_HIGH &&
1489                            tdls_peer->tdls_status == TDLS_NOT_SETUP &&
1490                            tdls_peer->failure_count <
1491                            MWIFIEX_TDLS_MAX_FAIL_COUNT) {
1492                                 priv->check_tdls_tx = true;
1493                                 tdls_peer->do_setup = true;
1494                                 mwifiex_dbg(priv->adapter, INFO,
1495                                             "check TDLS with peer=%pM\t"
1496                                             "rssi=%d\n", tdls_peer->mac_addr,
1497                                             tdls_peer->rssi);
1498                 }
1499         }
1500         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1501
1502         mod_timer(&priv->auto_tdls_timer,
1503                   jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
1504 }
1505
1506 void mwifiex_setup_auto_tdls_timer(struct mwifiex_private *priv)
1507 {
1508         setup_timer(&priv->auto_tdls_timer, mwifiex_check_auto_tdls,
1509                     (unsigned long)priv);
1510         priv->auto_tdls_timer_active = true;
1511         mod_timer(&priv->auto_tdls_timer,
1512                   jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
1513 }
1514
1515 void mwifiex_clean_auto_tdls(struct mwifiex_private *priv)
1516 {
1517         if (ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info) &&
1518             priv->adapter->auto_tdls &&
1519             priv->bss_type == MWIFIEX_BSS_TYPE_STA) {
1520                 priv->auto_tdls_timer_active = false;
1521                 del_timer(&priv->auto_tdls_timer);
1522                 mwifiex_flush_auto_tdls_list(priv);
1523         }
1524 }
1525
1526 static int mwifiex_config_tdls(struct mwifiex_private *priv, u8 enable)
1527 {
1528         struct mwifiex_tdls_config config;
1529
1530         config.enable = cpu_to_le16(enable);
1531         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1532                                 ACT_TDLS_CS_ENABLE_CONFIG, 0, &config, true);
1533 }
1534
1535 int mwifiex_config_tdls_enable(struct mwifiex_private *priv)
1536 {
1537         return mwifiex_config_tdls(priv, true);
1538 }
1539
1540 int mwifiex_config_tdls_disable(struct mwifiex_private *priv)
1541 {
1542         return mwifiex_config_tdls(priv, false);
1543 }
1544
1545 int mwifiex_config_tdls_cs_params(struct mwifiex_private *priv)
1546 {
1547         struct mwifiex_tdls_config_cs_params config_tdls_cs_params;
1548
1549         config_tdls_cs_params.unit_time = MWIFIEX_DEF_CS_UNIT_TIME;
1550         config_tdls_cs_params.thr_otherlink = MWIFIEX_DEF_CS_THR_OTHERLINK;
1551         config_tdls_cs_params.thr_directlink = MWIFIEX_DEF_THR_DIRECTLINK;
1552
1553         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1554                                 ACT_TDLS_CS_PARAMS, 0,
1555                                 &config_tdls_cs_params, true);
1556 }
1557
1558 int mwifiex_stop_tdls_cs(struct mwifiex_private *priv, const u8 *peer_mac)
1559 {
1560         struct mwifiex_tdls_stop_cs_params stop_tdls_cs_params;
1561
1562         ether_addr_copy(stop_tdls_cs_params.peer_mac, peer_mac);
1563
1564         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1565                                 ACT_TDLS_CS_STOP, 0,
1566                                 &stop_tdls_cs_params, true);
1567 }
1568
1569 int mwifiex_start_tdls_cs(struct mwifiex_private *priv, const u8 *peer_mac,
1570                           u8 primary_chan, u8 second_chan_offset, u8 band)
1571 {
1572         struct mwifiex_tdls_init_cs_params start_tdls_cs_params;
1573
1574         ether_addr_copy(start_tdls_cs_params.peer_mac, peer_mac);
1575         start_tdls_cs_params.primary_chan = primary_chan;
1576         start_tdls_cs_params.second_chan_offset = second_chan_offset;
1577         start_tdls_cs_params.band = band;
1578
1579         start_tdls_cs_params.switch_time = cpu_to_le16(MWIFIEX_DEF_CS_TIME);
1580         start_tdls_cs_params.switch_timeout =
1581                                         cpu_to_le16(MWIFIEX_DEF_CS_TIMEOUT);
1582         start_tdls_cs_params.reg_class = MWIFIEX_DEF_CS_REG_CLASS;
1583         start_tdls_cs_params.periodicity = MWIFIEX_DEF_CS_PERIODICITY;
1584
1585         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1586                                 ACT_TDLS_CS_INIT, 0,
1587                                 &start_tdls_cs_params, true);
1588 }