add extra safety for the packet mangling in the mvswitch driver
[openwrt.git] / package / libertas / src / rx.c
1 /**
2 * This file contains the handling of RX in wlan driver.
3 */
4 #include <linux/etherdevice.h>
5 #include <linux/types.h>
6
7 #include "hostcmd.h"
8 #include "radiotap.h"
9 #include "decl.h"
10 #include "dev.h"
11 #include "wext.h"
12
13 struct eth803hdr {
14 u8 dest_addr[6];
15 u8 src_addr[6];
16 u16 h803_len;
17 } __attribute__ ((packed));
18
19 struct rfc1042hdr {
20 u8 llc_dsap;
21 u8 llc_ssap;
22 u8 llc_ctrl;
23 u8 snap_oui[3];
24 u16 snap_type;
25 } __attribute__ ((packed));
26
27 struct rxpackethdr {
28 struct rxpd rx_pd;
29 struct eth803hdr eth803_hdr;
30 struct rfc1042hdr rfc1042_hdr;
31 } __attribute__ ((packed));
32
33 struct rx80211packethdr {
34 struct rxpd rx_pd;
35 void *eth80211_hdr;
36 } __attribute__ ((packed));
37
38 static int process_rxed_802_11_packet(struct lbs_private *priv,
39 struct sk_buff *skb);
40
41 /**
42 * @brief This function computes the avgSNR .
43 *
44 * @param priv A pointer to struct lbs_private structure
45 * @return avgSNR
46 */
47 static u8 lbs_getavgsnr(struct lbs_private *priv)
48 {
49 u8 i;
50 u16 temp = 0;
51 if (priv->numSNRNF == 0)
52 return 0;
53 for (i = 0; i < priv->numSNRNF; i++)
54 temp += priv->rawSNR[i];
55 return (u8) (temp / priv->numSNRNF);
56
57 }
58
59 /**
60 * @brief This function computes the AvgNF
61 *
62 * @param priv A pointer to struct lbs_private structure
63 * @return AvgNF
64 */
65 static u8 lbs_getavgnf(struct lbs_private *priv)
66 {
67 u8 i;
68 u16 temp = 0;
69 if (priv->numSNRNF == 0)
70 return 0;
71 for (i = 0; i < priv->numSNRNF; i++)
72 temp += priv->rawNF[i];
73 return (u8) (temp / priv->numSNRNF);
74
75 }
76
77 /**
78 * @brief This function save the raw SNR/NF to our internel buffer
79 *
80 * @param priv A pointer to struct lbs_private structure
81 * @param prxpd A pointer to rxpd structure of received packet
82 * @return n/a
83 */
84 static void lbs_save_rawSNRNF(struct lbs_private *priv, struct rxpd *p_rx_pd)
85 {
86 if (priv->numSNRNF < DEFAULT_DATA_AVG_FACTOR)
87 priv->numSNRNF++;
88 priv->rawSNR[priv->nextSNRNF] = p_rx_pd->snr;
89 priv->rawNF[priv->nextSNRNF] = p_rx_pd->nf;
90 priv->nextSNRNF++;
91 if (priv->nextSNRNF >= DEFAULT_DATA_AVG_FACTOR)
92 priv->nextSNRNF = 0;
93 return;
94 }
95
96 /**
97 * @brief This function computes the RSSI in received packet.
98 *
99 * @param priv A pointer to struct lbs_private structure
100 * @param prxpd A pointer to rxpd structure of received packet
101 * @return n/a
102 */
103 static void lbs_compute_rssi(struct lbs_private *priv, struct rxpd *p_rx_pd)
104 {
105
106 lbs_deb_enter(LBS_DEB_RX);
107
108 lbs_deb_rx("rxpd: SNR %d, NF %d\n", p_rx_pd->snr, p_rx_pd->nf);
109 lbs_deb_rx("before computing SNR: SNR-avg = %d, NF-avg = %d\n",
110 priv->SNR[TYPE_RXPD][TYPE_AVG] / AVG_SCALE,
111 priv->NF[TYPE_RXPD][TYPE_AVG] / AVG_SCALE);
112
113 priv->SNR[TYPE_RXPD][TYPE_NOAVG] = p_rx_pd->snr;
114 priv->NF[TYPE_RXPD][TYPE_NOAVG] = p_rx_pd->nf;
115 lbs_save_rawSNRNF(priv, p_rx_pd);
116
117 priv->SNR[TYPE_RXPD][TYPE_AVG] = lbs_getavgsnr(priv) * AVG_SCALE;
118 priv->NF[TYPE_RXPD][TYPE_AVG] = lbs_getavgnf(priv) * AVG_SCALE;
119 lbs_deb_rx("after computing SNR: SNR-avg = %d, NF-avg = %d\n",
120 priv->SNR[TYPE_RXPD][TYPE_AVG] / AVG_SCALE,
121 priv->NF[TYPE_RXPD][TYPE_AVG] / AVG_SCALE);
122
123 priv->RSSI[TYPE_RXPD][TYPE_NOAVG] =
124 CAL_RSSI(priv->SNR[TYPE_RXPD][TYPE_NOAVG],
125 priv->NF[TYPE_RXPD][TYPE_NOAVG]);
126
127 priv->RSSI[TYPE_RXPD][TYPE_AVG] =
128 CAL_RSSI(priv->SNR[TYPE_RXPD][TYPE_AVG] / AVG_SCALE,
129 priv->NF[TYPE_RXPD][TYPE_AVG] / AVG_SCALE);
130
131 lbs_deb_leave(LBS_DEB_RX);
132 }
133
134 /**
135 * @brief This function processes received packet and forwards it
136 * to kernel/upper layer
137 *
138 * @param priv A pointer to struct lbs_private
139 * @param skb A pointer to skb which includes the received packet
140 * @return 0 or -1
141 */
142 int lbs_process_rxed_packet(struct lbs_private *priv, struct sk_buff *skb)
143 {
144 int ret = 0;
145 struct net_device *dev = priv->dev;
146 struct rxpackethdr *p_rx_pkt;
147 struct rxpd *p_rx_pd;
148
149 int hdrchop;
150 struct ethhdr *p_ethhdr;
151
152 const u8 rfc1042_eth_hdr[] = { 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
153
154 lbs_deb_enter(LBS_DEB_RX);
155
156 skb->ip_summed = CHECKSUM_NONE;
157
158 if (priv->monitormode != LBS_MONITOR_OFF)
159 return process_rxed_802_11_packet(priv, skb);
160
161 p_rx_pkt = (struct rxpackethdr *) skb->data;
162 p_rx_pd = &p_rx_pkt->rx_pd;
163 if (priv->mesh_dev && (p_rx_pd->rx_control & RxPD_MESH_FRAME))
164 dev = priv->mesh_dev;
165
166 lbs_deb_hex(LBS_DEB_RX, "RX Data: Before chop rxpd", skb->data,
167 min_t(unsigned int, skb->len, 100));
168
169 if (skb->len < (ETH_HLEN + 8 + sizeof(struct rxpd))) {
170 lbs_deb_rx("rx err: frame received with bad length\n");
171 priv->stats.rx_length_errors++;
172 ret = 0;
173 goto done;
174 }
175
176 /*
177 * Check rxpd status and update 802.3 stat,
178 */
179 if (!(p_rx_pd->status & cpu_to_le16(MRVDRV_RXPD_STATUS_OK))) {
180 lbs_deb_rx("rx err: frame received with bad status\n");
181 lbs_pr_alert("rxpd not ok\n");
182 priv->stats.rx_errors++;
183 ret = 0;
184 goto done;
185 }
186
187 lbs_deb_rx("rx data: skb->len-sizeof(RxPd) = %d-%zd = %zd\n",
188 skb->len, sizeof(struct rxpd), skb->len - sizeof(struct rxpd));
189
190 lbs_deb_hex(LBS_DEB_RX, "RX Data: Dest", p_rx_pkt->eth803_hdr.dest_addr,
191 sizeof(p_rx_pkt->eth803_hdr.dest_addr));
192 lbs_deb_hex(LBS_DEB_RX, "RX Data: Src", p_rx_pkt->eth803_hdr.src_addr,
193 sizeof(p_rx_pkt->eth803_hdr.src_addr));
194
195 if (memcmp(&p_rx_pkt->rfc1042_hdr,
196 rfc1042_eth_hdr, sizeof(rfc1042_eth_hdr)) == 0) {
197 /*
198 * Replace the 803 header and rfc1042 header (llc/snap) with an
199 * EthernetII header, keep the src/dst and snap_type (ethertype)
200 *
201 * The firmware only passes up SNAP frames converting
202 * all RX Data from 802.11 to 802.2/LLC/SNAP frames.
203 *
204 * To create the Ethernet II, just move the src, dst address right
205 * before the snap_type.
206 */
207 p_ethhdr = (struct ethhdr *)
208 ((u8 *) & p_rx_pkt->eth803_hdr
209 + sizeof(p_rx_pkt->eth803_hdr) + sizeof(p_rx_pkt->rfc1042_hdr)
210 - sizeof(p_rx_pkt->eth803_hdr.dest_addr)
211 - sizeof(p_rx_pkt->eth803_hdr.src_addr)
212 - sizeof(p_rx_pkt->rfc1042_hdr.snap_type));
213
214 memcpy(p_ethhdr->h_source, p_rx_pkt->eth803_hdr.src_addr,
215 sizeof(p_ethhdr->h_source));
216 memcpy(p_ethhdr->h_dest, p_rx_pkt->eth803_hdr.dest_addr,
217 sizeof(p_ethhdr->h_dest));
218
219 /* Chop off the rxpd + the excess memory from the 802.2/llc/snap header
220 * that was removed
221 */
222 hdrchop = (u8 *) p_ethhdr - (u8 *) p_rx_pkt;
223 } else {
224 lbs_deb_hex(LBS_DEB_RX, "RX Data: LLC/SNAP",
225 (u8 *) & p_rx_pkt->rfc1042_hdr,
226 sizeof(p_rx_pkt->rfc1042_hdr));
227
228 /* Chop off the rxpd */
229 hdrchop = (u8 *) & p_rx_pkt->eth803_hdr - (u8 *) p_rx_pkt;
230 }
231
232 /* Chop off the leading header bytes so the skb points to the start of
233 * either the reconstructed EthII frame or the 802.2/llc/snap frame
234 */
235 skb_pull(skb, hdrchop);
236
237 /* Take the data rate from the rxpd structure
238 * only if the rate is auto
239 */
240 if (priv->auto_rate)
241 priv->cur_rate = lbs_fw_index_to_data_rate(p_rx_pd->rx_rate);
242
243 lbs_compute_rssi(priv, p_rx_pd);
244
245 lbs_deb_rx("rx data: size of actual packet %d\n", skb->len);
246 priv->stats.rx_bytes += skb->len;
247 priv->stats.rx_packets++;
248
249 skb->protocol = eth_type_trans(skb, dev);
250 netif_rx(skb);
251
252 ret = 0;
253 done:
254 lbs_deb_leave_args(LBS_DEB_RX, "ret %d", ret);
255 return ret;
256 }
257 EXPORT_SYMBOL_GPL(lbs_process_rxed_packet);
258
259 /**
260 * @brief This function converts Tx/Rx rates from the Marvell WLAN format
261 * (see Table 2 in Section 3.1) to IEEE80211_RADIOTAP_RATE units (500 Kb/s)
262 *
263 * @param rate Input rate
264 * @return Output Rate (0 if invalid)
265 */
266 static u8 convert_mv_rate_to_radiotap(u8 rate)
267 {
268 switch (rate) {
269 case 0: /* 1 Mbps */
270 return 2;
271 case 1: /* 2 Mbps */
272 return 4;
273 case 2: /* 5.5 Mbps */
274 return 11;
275 case 3: /* 11 Mbps */
276 return 22;
277 /* case 4: reserved */
278 case 5: /* 6 Mbps */
279 return 12;
280 case 6: /* 9 Mbps */
281 return 18;
282 case 7: /* 12 Mbps */
283 return 24;
284 case 8: /* 18 Mbps */
285 return 36;
286 case 9: /* 24 Mbps */
287 return 48;
288 case 10: /* 36 Mbps */
289 return 72;
290 case 11: /* 48 Mbps */
291 return 96;
292 case 12: /* 54 Mbps */
293 return 108;
294 }
295 lbs_pr_alert("Invalid Marvell WLAN rate %i\n", rate);
296 return 0;
297 }
298
299 /**
300 * @brief This function processes a received 802.11 packet and forwards it
301 * to kernel/upper layer
302 *
303 * @param priv A pointer to struct lbs_private
304 * @param skb A pointer to skb which includes the received packet
305 * @return 0 or -1
306 */
307 static int process_rxed_802_11_packet(struct lbs_private *priv,
308 struct sk_buff *skb)
309 {
310 int ret = 0;
311
312 struct rx80211packethdr *p_rx_pkt;
313 struct rxpd *prxpd;
314 struct rx_radiotap_hdr radiotap_hdr;
315 struct rx_radiotap_hdr *pradiotap_hdr;
316
317 lbs_deb_enter(LBS_DEB_RX);
318
319 p_rx_pkt = (struct rx80211packethdr *) skb->data;
320 prxpd = &p_rx_pkt->rx_pd;
321
322 // lbs_deb_hex(LBS_DEB_RX, "RX Data: Before chop rxpd", skb->data, min(skb->len, 100));
323
324 if (skb->len < (ETH_HLEN + 8 + sizeof(struct rxpd))) {
325 lbs_deb_rx("rx err: frame received with bad length\n");
326 priv->stats.rx_length_errors++;
327 ret = -EINVAL;
328 kfree(skb);
329 goto done;
330 }
331
332 /*
333 * Check rxpd status and update 802.3 stat,
334 */
335 if (!(prxpd->status & cpu_to_le16(MRVDRV_RXPD_STATUS_OK))) {
336 //lbs_deb_rx("rx err: frame received with bad status\n");
337 priv->stats.rx_errors++;
338 }
339
340 lbs_deb_rx("rx data: skb->len-sizeof(RxPd) = %d-%zd = %zd\n",
341 skb->len, sizeof(struct rxpd), skb->len - sizeof(struct rxpd));
342
343 /* create the exported radio header */
344
345 /* radiotap header */
346 radiotap_hdr.hdr.it_version = 0;
347 /* XXX must check this value for pad */
348 radiotap_hdr.hdr.it_pad = 0;
349 radiotap_hdr.hdr.it_len = cpu_to_le16 (sizeof(struct rx_radiotap_hdr));
350 radiotap_hdr.hdr.it_present = cpu_to_le32 (RX_RADIOTAP_PRESENT);
351 /* unknown values */
352 radiotap_hdr.flags = 0;
353 radiotap_hdr.chan_freq = 0;
354 radiotap_hdr.chan_flags = 0;
355 radiotap_hdr.antenna = 0;
356 /* known values */
357 radiotap_hdr.rate = convert_mv_rate_to_radiotap(prxpd->rx_rate);
358 /* XXX must check no carryout */
359 radiotap_hdr.antsignal = prxpd->snr + prxpd->nf;
360 radiotap_hdr.rx_flags = 0;
361 if (!(prxpd->status & cpu_to_le16(MRVDRV_RXPD_STATUS_OK)))
362 radiotap_hdr.rx_flags |= IEEE80211_RADIOTAP_F_RX_BADFCS;
363 //memset(radiotap_hdr.pad, 0x11, IEEE80211_RADIOTAP_HDRLEN - 18);
364
365 /* chop the rxpd */
366 skb_pull(skb, sizeof(struct rxpd));
367
368 /* add space for the new radio header */
369 if ((skb_headroom(skb) < sizeof(struct rx_radiotap_hdr)) &&
370 pskb_expand_head(skb, sizeof(struct rx_radiotap_hdr), 0, GFP_ATOMIC)) {
371 lbs_pr_alert("%s: couldn't pskb_expand_head\n", __func__);
372 ret = -ENOMEM;
373 kfree_skb(skb);
374 goto done;
375 }
376
377 pradiotap_hdr = (void *)skb_push(skb, sizeof(struct rx_radiotap_hdr));
378 memcpy(pradiotap_hdr, &radiotap_hdr, sizeof(struct rx_radiotap_hdr));
379
380 /* Take the data rate from the rxpd structure
381 * only if the rate is auto
382 */
383 if (priv->auto_rate)
384 priv->cur_rate = lbs_fw_index_to_data_rate(prxpd->rx_rate);
385
386 lbs_compute_rssi(priv, prxpd);
387
388 lbs_deb_rx("rx data: size of actual packet %d\n", skb->len);
389 priv->stats.rx_bytes += skb->len;
390 priv->stats.rx_packets++;
391
392 skb->protocol = eth_type_trans(skb, priv->rtap_net_dev);
393 netif_rx(skb);
394
395 ret = 0;
396
397 done:
398 lbs_deb_leave_args(LBS_DEB_RX, "ret %d", ret);
399 return ret;
400 }
This page took 0.057573 seconds and 5 git commands to generate.