drivers/net/wireless/marvell/mwifiex/tdls.c

   1 /* Marvell Wireless LAN device driver: TDLS handling
   2  *
   3  * Copyright (C) 2014, Marvell International Ltd.
   4  *
   5  * This software file (the "File") is distributed by Marvell International
   6  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   7  * (the "License").  You may use, redistribute and/or modify this File in
   8  * accordance with the terms and conditions of the License, a copy of which
   9  * is available on the worldwide web at
  10  * http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  11  *
  12  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  13  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  14  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  15  * this warranty disclaimer.
  16  */
  17
  18 #include "main.h"
  19 #include "wmm.h"
  20 #include "11n.h"
  21 #include "11n_rxreorder.h"
  22 #include "11ac.h"
  23
  24 #define TDLS_REQ_FIX_LEN      6
  25 #define TDLS_RESP_FIX_LEN     8
  26 #define TDLS_CONFIRM_FIX_LEN  6
  27 #define MWIFIEX_TDLS_WMM_INFO_SIZE 7
  28
  29 static void mwifiex_restore_tdls_packets(struct mwifiex_private *priv,
  30                                          const u8 *mac, u8 status)
  31 {
  32         struct mwifiex_ra_list_tbl *ra_list;
  33         struct list_head *tid_list;
  34         struct sk_buff *skb, *tmp;
  35         struct mwifiex_txinfo *tx_info;
  36         unsigned long flags;
  37         u32 tid;
  38         u8 tid_down;
  39
  40         mwifiex_dbg(priv->adapter, DATA, "%s: %pM\n", __func__, mac);
  41         spin_lock_irqsave(&priv->wmm.ra_list_spinlock, flags);
  42
  43         skb_queue_walk_safe(&priv->tdls_txq, skb, tmp) {
  44                 if (!ether_addr_equal(mac, skb->data))
  45                         continue;
  46
  47                 __skb_unlink(skb, &priv->tdls_txq);
  48                 tx_info = MWIFIEX_SKB_TXCB(skb);
  49                 tid = skb->priority;
  50                 tid_down = mwifiex_wmm_downgrade_tid(priv, tid);
  51
  52                 if (mwifiex_is_tdls_link_setup(status)) {
  53                         ra_list = mwifiex_wmm_get_queue_raptr(priv, tid, mac);
  54                         ra_list->tdls_link = true;
  55                         tx_info->flags |= MWIFIEX_BUF_FLAG_TDLS_PKT;
  56                 } else {
  57                         tid_list = &priv->wmm.tid_tbl_ptr[tid_down].ra_list;
  58                         if (!list_empty(tid_list))
  59                                 ra_list = list_first_entry(tid_list,
  60                                               struct mwifiex_ra_list_tbl, list);
  61                         else
  62                                 ra_list = NULL;
  63                         tx_info->flags &= ~MWIFIEX_BUF_FLAG_TDLS_PKT;
  64                 }
  65
  66                 if (!ra_list) {
  67                         mwifiex_write_data_complete(priv->adapter, skb, 0, -1);
  68                         continue;
  69                 }
  70
  71                 skb_queue_tail(&ra_list->skb_head, skb);
  72
  73                 ra_list->ba_pkt_count++;
  74                 ra_list->total_pkt_count++;
  75
  76                 if (atomic_read(&priv->wmm.highest_queued_prio) <
  77                                                        tos_to_tid_inv[tid_down])
  78                         atomic_set(&priv->wmm.highest_queued_prio,
  79                                    tos_to_tid_inv[tid_down]);
  80
  81                 atomic_inc(&priv->wmm.tx_pkts_queued);
  82         }
  83
  84         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock, flags);
  85         return;
  86 }
  87
  88 static void mwifiex_hold_tdls_packets(struct mwifiex_private *priv,
  89                                       const u8 *mac)
  90 {
  91         struct mwifiex_ra_list_tbl *ra_list;
  92         struct list_head *ra_list_head;
  93         struct sk_buff *skb, *tmp;
  94         unsigned long flags;
  95         int i;
  96
  97         mwifiex_dbg(priv->adapter, DATA, "%s: %pM\n", __func__, mac);
  98         spin_lock_irqsave(&priv->wmm.ra_list_spinlock, flags);
  99
 100         for (i = 0; i < MAX_NUM_TID; i++) {
 101                 if (!list_empty(&priv->wmm.tid_tbl_ptr[i].ra_list)) {
 102                         ra_list_head = &priv->wmm.tid_tbl_ptr[i].ra_list;
 103                         list_for_each_entry(ra_list, ra_list_head, list) {
 104                                 skb_queue_walk_safe(&ra_list->skb_head, skb,
 105                                                     tmp) {
 106                                         if (!ether_addr_equal(mac, skb->data))
 107                                                 continue;
 108                                         __skb_unlink(skb, &ra_list->skb_head);
 109                                         atomic_dec(&priv->wmm.tx_pkts_queued);
 110                                         ra_list->total_pkt_count--;
 111                                         skb_queue_tail(&priv->tdls_txq, skb);
 112                                 }
 113                         }
 114                 }
 115         }
 116
 117         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock, flags);
 118         return;
 119 }
 120
 121 /* This function appends rate TLV to scan config command. */
 122 static int
 123 mwifiex_tdls_append_rates_ie(struct mwifiex_private *priv,
 124                              struct sk_buff *skb)
 125 {
 126         u8 rates[MWIFIEX_SUPPORTED_RATES], *pos;
 127         u16 rates_size, supp_rates_size, ext_rates_size;
 128
 129         memset(rates, 0, sizeof(rates));
 130         rates_size = mwifiex_get_supported_rates(priv, rates);
 131
 132         supp_rates_size = min_t(u16, rates_size, MWIFIEX_TDLS_SUPPORTED_RATES);
 133
 134         if (skb_tailroom(skb) < rates_size + 4) {
 135                 mwifiex_dbg(priv->adapter, ERROR,
 136                             "Insuffient space while adding rates\n");
 137                 return -ENOMEM;
 138         }
 139
 140         pos = skb_put(skb, supp_rates_size + 2);
 141         *pos++ = WLAN_EID_SUPP_RATES;
 142         *pos++ = supp_rates_size;
 143         memcpy(pos, rates, supp_rates_size);
 144
 145         if (rates_size > MWIFIEX_TDLS_SUPPORTED_RATES) {
 146                 ext_rates_size = rates_size - MWIFIEX_TDLS_SUPPORTED_RATES;
 147                 pos = skb_put(skb, ext_rates_size + 2);
 148                 *pos++ = WLAN_EID_EXT_SUPP_RATES;
 149                 *pos++ = ext_rates_size;
 150                 memcpy(pos, rates + MWIFIEX_TDLS_SUPPORTED_RATES,
 151                        ext_rates_size);
 152         }
 153
 154         return 0;
 155 }
 156
 157 static void mwifiex_tdls_add_aid(struct mwifiex_private *priv,
 158                                 struct sk_buff *skb)
 159 {
 160         struct ieee_types_assoc_rsp *assoc_rsp;
 161         u8 *pos;
 162
 163         assoc_rsp = (struct ieee_types_assoc_rsp *)&priv->assoc_rsp_buf;
 164         pos = (void *)skb_put(skb, 4);
 165         *pos++ = WLAN_EID_AID;
 166         *pos++ = 2;
 167         memcpy(pos, &assoc_rsp->a_id, sizeof(assoc_rsp->a_id));
 168
 169         return;
 170 }
 171
 172 static int mwifiex_tdls_add_vht_capab(struct mwifiex_private *priv,
 173                                       struct sk_buff *skb)
 174 {
 175         struct ieee80211_vht_cap vht_cap;
 176         u8 *pos;
 177
 178         pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2);
 179         *pos++ = WLAN_EID_VHT_CAPABILITY;
 180         *pos++ = sizeof(struct ieee80211_vht_cap);
 181
 182         memset(&vht_cap, 0, sizeof(struct ieee80211_vht_cap));
 183
 184         mwifiex_fill_vht_cap_tlv(priv, &vht_cap, priv->curr_bss_params.band);
 185         memcpy(pos, &vht_cap, sizeof(vht_cap));
 186
 187         return 0;
 188 }
 189
 190 static int
 191 mwifiex_tdls_add_ht_oper(struct mwifiex_private *priv, const u8 *mac,
 192                          u8 vht_enabled, struct sk_buff *skb)
 193 {
 194         struct ieee80211_ht_operation *ht_oper;
 195         struct mwifiex_sta_node *sta_ptr;
 196         struct mwifiex_bssdescriptor *bss_desc =
 197                                         &priv->curr_bss_params.bss_descriptor;
 198         u8 *pos;
 199
 200         sta_ptr = mwifiex_get_sta_entry(priv, mac);
 201         if (unlikely(!sta_ptr)) {
 202                 mwifiex_dbg(priv->adapter, ERROR,
 203                             "TDLS peer station not found in list\n");
 204                 return -1;
 205         }
 206
 207         if (!(le16_to_cpu(sta_ptr->tdls_cap.ht_capb.cap_info))) {
 208                 mwifiex_dbg(priv->adapter, WARN,
 209                             "TDLS peer doesn't support ht capabilities\n");
 210                 return 0;
 211         }
 212
 213         pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_operation) + 2);
 214         *pos++ = WLAN_EID_HT_OPERATION;
 215         *pos++ = sizeof(struct ieee80211_ht_operation);
 216         ht_oper = (void *)pos;
 217
 218         ht_oper->primary_chan = bss_desc->channel;
 219
 220         /* follow AP's channel bandwidth */
 221         if (ISSUPP_CHANWIDTH40(priv->adapter->hw_dot_11n_dev_cap) &&
 222             bss_desc->bcn_ht_cap &&
 223             ISALLOWED_CHANWIDTH40(bss_desc->bcn_ht_oper->ht_param))
 224                 ht_oper->ht_param = bss_desc->bcn_ht_oper->ht_param;
 225
 226         if (vht_enabled) {
 227                 ht_oper->ht_param =
 228                           mwifiex_get_sec_chan_offset(bss_desc->channel);
 229                 ht_oper->ht_param |= BIT(2);
 230         }
 231
 232         memcpy(&sta_ptr->tdls_cap.ht_oper, ht_oper,
 233                sizeof(struct ieee80211_ht_operation));
 234
 235         return 0;
 236 }
 237
 238 static int mwifiex_tdls_add_vht_oper(struct mwifiex_private *priv,
 239                                      const u8 *mac, struct sk_buff *skb)
 240 {
 241         struct mwifiex_bssdescriptor *bss_desc;
 242         struct ieee80211_vht_operation *vht_oper;
 243         struct ieee80211_vht_cap *vht_cap, *ap_vht_cap = NULL;
 244         struct mwifiex_sta_node *sta_ptr;
 245         struct mwifiex_adapter *adapter = priv->adapter;
 246         u8 supp_chwd_set, peer_supp_chwd_set;
 247         u8 *pos, ap_supp_chwd_set, chan_bw;
 248         u16 mcs_map_user, mcs_map_resp, mcs_map_result;
 249         u16 mcs_user, mcs_resp, nss;
 250         u32 usr_vht_cap_info;
 251
 252         bss_desc = &priv->curr_bss_params.bss_descriptor;
 253
 254         sta_ptr = mwifiex_get_sta_entry(priv, mac);
 255         if (unlikely(!sta_ptr)) {
 256                 mwifiex_dbg(adapter, ERROR,
 257                             "TDLS peer station not found in list\n");
 258                 return -1;
 259         }
 260
 261         if (!(le32_to_cpu(sta_ptr->tdls_cap.vhtcap.vht_cap_info))) {
 262                 mwifiex_dbg(adapter, WARN,
 263                             "TDLS peer doesn't support vht capabilities\n");
 264                 return 0;
 265         }
 266
 267         if (!mwifiex_is_bss_in_11ac_mode(priv)) {
 268                 if (sta_ptr->tdls_cap.extcap.ext_capab[7] &
 269                    WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED) {
 270                         mwifiex_dbg(adapter, WARN,
 271                                     "TDLS peer doesn't support wider bandwidth\n");
 272                         return 0;
 273                 }
 274         } else {
 275                 ap_vht_cap = bss_desc->bcn_vht_cap;
 276         }
 277
 278         pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_operation) + 2);
 279         *pos++ = WLAN_EID_VHT_OPERATION;
 280         *pos++ = sizeof(struct ieee80211_vht_operation);
 281         vht_oper = (struct ieee80211_vht_operation *)pos;
 282
 283         if (bss_desc->bss_band & BAND_A)
 284                 usr_vht_cap_info = adapter->usr_dot_11ac_dev_cap_a;
 285         else
 286                 usr_vht_cap_info = adapter->usr_dot_11ac_dev_cap_bg;
 287
 288         /* find the minimum bandwidth between AP/TDLS peers */
 289         vht_cap = &sta_ptr->tdls_cap.vhtcap;
 290         supp_chwd_set = GET_VHTCAP_CHWDSET(usr_vht_cap_info);
 291         peer_supp_chwd_set =
 292                          GET_VHTCAP_CHWDSET(le32_to_cpu(vht_cap->vht_cap_info));
 293         supp_chwd_set = min_t(u8, supp_chwd_set, peer_supp_chwd_set);
 294
 295         /* We need check AP's bandwidth when TDLS_WIDER_BANDWIDTH is off */
 296
 297         if (ap_vht_cap && sta_ptr->tdls_cap.extcap.ext_capab[7] &
 298             WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED) {
 299                 ap_supp_chwd_set =
 300                       GET_VHTCAP_CHWDSET(le32_to_cpu(ap_vht_cap->vht_cap_info));
 301                 supp_chwd_set = min_t(u8, supp_chwd_set, ap_supp_chwd_set);
 302         }
 303
 304         switch (supp_chwd_set) {
 305         case IEEE80211_VHT_CHANWIDTH_80MHZ:
 306                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ;
 307                 break;
 308         case IEEE80211_VHT_CHANWIDTH_160MHZ:
 309                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_160MHZ;
 310                 break;
 311         case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
 312                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80P80MHZ;
 313                 break;
 314         default:
 315                 vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_USE_HT;
 316                 break;
 317         }
 318
 319         mcs_map_user = GET_DEVRXMCSMAP(adapter->usr_dot_11ac_mcs_support);
 320         mcs_map_resp = le16_to_cpu(vht_cap->supp_mcs.rx_mcs_map);
 321         mcs_map_result = 0;
 322
 323         for (nss = 1; nss <= 8; nss++) {
 324                 mcs_user = GET_VHTNSSMCS(mcs_map_user, nss);
 325                 mcs_resp = GET_VHTNSSMCS(mcs_map_resp, nss);
 326
 327                 if ((mcs_user == IEEE80211_VHT_MCS_NOT_SUPPORTED) ||
 328                     (mcs_resp == IEEE80211_VHT_MCS_NOT_SUPPORTED))
 329                         SET_VHTNSSMCS(mcs_map_result, nss,
 330                                       IEEE80211_VHT_MCS_NOT_SUPPORTED);
 331                 else
 332                         SET_VHTNSSMCS(mcs_map_result, nss,
 333                                       min_t(u16, mcs_user, mcs_resp));
 334         }
 335
 336         vht_oper->basic_mcs_set = cpu_to_le16(mcs_map_result);
 337
 338         switch (vht_oper->chan_width) {
 339         case IEEE80211_VHT_CHANWIDTH_80MHZ:
 340                 chan_bw = IEEE80211_VHT_CHANWIDTH_80MHZ;
 341                 break;
 342         case IEEE80211_VHT_CHANWIDTH_160MHZ:
 343                 chan_bw = IEEE80211_VHT_CHANWIDTH_160MHZ;
 344                 break;
 345         case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
 346                 chan_bw = IEEE80211_VHT_CHANWIDTH_80MHZ;
 347                 break;
 348         default:
 349                 chan_bw = IEEE80211_VHT_CHANWIDTH_USE_HT;
 350                 break;
 351         }
 352         vht_oper->center_freq_seg1_idx =
 353                         mwifiex_get_center_freq_index(priv, BAND_AAC,
 354                                                       bss_desc->channel,
 355                                                       chan_bw);
 356
 357         return 0;
 358 }
 359
 360 static void mwifiex_tdls_add_ext_capab(struct mwifiex_private *priv,
 361                                        struct sk_buff *skb)
 362 {
 363         struct ieee_types_extcap *extcap;
 364
 365         extcap = (void *)skb_put(skb, sizeof(struct ieee_types_extcap));
 366         extcap->ieee_hdr.element_id = WLAN_EID_EXT_CAPABILITY;
 367         extcap->ieee_hdr.len = 8;
 368         memset(extcap->ext_capab, 0, 8);
 369         extcap->ext_capab[4] |= WLAN_EXT_CAPA5_TDLS_ENABLED;
 370         extcap->ext_capab[3] |= WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH;
 371
 372         if (priv->adapter->is_hw_11ac_capable)
 373                 extcap->ext_capab[7] |= WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED;
 374 }
 375
 376 static void mwifiex_tdls_add_qos_capab(struct sk_buff *skb)
 377 {
 378         u8 *pos = (void *)skb_put(skb, 3);
 379
 380         *pos++ = WLAN_EID_QOS_CAPA;
 381         *pos++ = 1;
 382         *pos++ = MWIFIEX_TDLS_DEF_QOS_CAPAB;
 383 }
 384
 385 static void
 386 mwifiex_tdls_add_wmm_param_ie(struct mwifiex_private *priv, struct sk_buff *skb)
 387 {
 388         struct ieee80211_wmm_param_ie *wmm;
 389         u8 ac_vi[] = {0x42, 0x43, 0x5e, 0x00};
 390         u8 ac_vo[] = {0x62, 0x32, 0x2f, 0x00};
 391         u8 ac_be[] = {0x03, 0xa4, 0x00, 0x00};
 392         u8 ac_bk[] = {0x27, 0xa4, 0x00, 0x00};
 393
 394         wmm = (void *)skb_put(skb, sizeof(*wmm));
 395         memset(wmm, 0, sizeof(*wmm));
 396
 397         wmm->element_id = WLAN_EID_VENDOR_SPECIFIC;
 398         wmm->len = sizeof(*wmm) - 2;
 399         wmm->oui[0] = 0x00; /* Microsoft OUI 00:50:F2 */
 400         wmm->oui[1] = 0x50;
 401         wmm->oui[2] = 0xf2;
 402         wmm->oui_type = 2; /* WME */
 403         wmm->oui_subtype = 1; /* WME param */
 404         wmm->version = 1; /* WME ver */
 405         wmm->qos_info = 0; /* U-APSD not in use */
 406
 407         /* use default WMM AC parameters for TDLS link*/
 408         memcpy(&wmm->ac[0], ac_be, sizeof(ac_be));
 409         memcpy(&wmm->ac[1], ac_bk, sizeof(ac_bk));
 410         memcpy(&wmm->ac[2], ac_vi, sizeof(ac_vi));
 411         memcpy(&wmm->ac[3], ac_vo, sizeof(ac_vo));
 412 }
 413
 414 static void
 415 mwifiex_add_wmm_info_ie(struct mwifiex_private *priv, struct sk_buff *skb,
 416                         u8 qosinfo)
 417 {
 418         u8 *buf;
 419
 420         buf = (void *)skb_put(skb, MWIFIEX_TDLS_WMM_INFO_SIZE +
 421                               sizeof(struct ieee_types_header));
 422
 423         *buf++ = WLAN_EID_VENDOR_SPECIFIC;
 424         *buf++ = 7; /* len */
 425         *buf++ = 0x00; /* Microsoft OUI 00:50:F2 */
 426         *buf++ = 0x50;
 427         *buf++ = 0xf2;
 428         *buf++ = 2; /* WME */
 429         *buf++ = 0; /* WME info */
 430         *buf++ = 1; /* WME ver */
 431         *buf++ = qosinfo; /* U-APSD no in use */
 432 }
 433
 434 static int mwifiex_prep_tdls_encap_data(struct mwifiex_private *priv,
 435                                         const u8 *peer, u8 action_code,
 436                                         u8 dialog_token,
 437                                         u16 status_code, struct sk_buff *skb)
 438 {
 439         struct ieee80211_tdls_data *tf;
 440         int ret;
 441         u16 capab;
 442         struct ieee80211_ht_cap *ht_cap;
 443         u8 radio, *pos;
 444
 445         capab = priv->curr_bss_params.bss_descriptor.cap_info_bitmap;
 446
 447         tf = (void *)skb_put(skb, offsetof(struct ieee80211_tdls_data, u));
 448         memcpy(tf->da, peer, ETH_ALEN);
 449         memcpy(tf->sa, priv->curr_addr, ETH_ALEN);
 450         tf->ether_type = cpu_to_be16(ETH_P_TDLS);
 451         tf->payload_type = WLAN_TDLS_SNAP_RFTYPE;
 452
 453         switch (action_code) {
 454         case WLAN_TDLS_SETUP_REQUEST:
 455                 tf->category = WLAN_CATEGORY_TDLS;
 456                 tf->action_code = WLAN_TDLS_SETUP_REQUEST;
 457                 skb_put(skb, sizeof(tf->u.setup_req));
 458                 tf->u.setup_req.dialog_token = dialog_token;
 459                 tf->u.setup_req.capability = cpu_to_le16(capab);
 460                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 461                 if (ret) {
 462                         dev_kfree_skb_any(skb);
 463                         return ret;
 464                 }
 465
 466                 pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 467                 *pos++ = WLAN_EID_HT_CAPABILITY;
 468                 *pos++ = sizeof(struct ieee80211_ht_cap);
 469                 ht_cap = (void *)pos;
 470                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 471                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 472                 if (ret) {
 473                         dev_kfree_skb_any(skb);
 474                         return ret;
 475                 }
 476
 477                 if (priv->adapter->is_hw_11ac_capable) {
 478                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 479                         if (ret) {
 480                                 dev_kfree_skb_any(skb);
 481                                 return ret;
 482                         }
 483                         mwifiex_tdls_add_aid(priv, skb);
 484                 }
 485
 486                 mwifiex_tdls_add_ext_capab(priv, skb);
 487                 mwifiex_tdls_add_qos_capab(skb);
 488                 mwifiex_add_wmm_info_ie(priv, skb, 0);
 489                 break;
 490
 491         case WLAN_TDLS_SETUP_RESPONSE:
 492                 tf->category = WLAN_CATEGORY_TDLS;
 493                 tf->action_code = WLAN_TDLS_SETUP_RESPONSE;
 494                 skb_put(skb, sizeof(tf->u.setup_resp));
 495                 tf->u.setup_resp.status_code = cpu_to_le16(status_code);
 496                 tf->u.setup_resp.dialog_token = dialog_token;
 497                 tf->u.setup_resp.capability = cpu_to_le16(capab);
 498                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 499                 if (ret) {
 500                         dev_kfree_skb_any(skb);
 501                         return ret;
 502                 }
 503
 504                 pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 505                 *pos++ = WLAN_EID_HT_CAPABILITY;
 506                 *pos++ = sizeof(struct ieee80211_ht_cap);
 507                 ht_cap = (void *)pos;
 508                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 509                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 510                 if (ret) {
 511                         dev_kfree_skb_any(skb);
 512                         return ret;
 513                 }
 514
 515                 if (priv->adapter->is_hw_11ac_capable) {
 516                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 517                         if (ret) {
 518                                 dev_kfree_skb_any(skb);
 519                                 return ret;
 520                         }
 521                         mwifiex_tdls_add_aid(priv, skb);
 522                 }
 523
 524                 mwifiex_tdls_add_ext_capab(priv, skb);
 525                 mwifiex_tdls_add_qos_capab(skb);
 526                 mwifiex_add_wmm_info_ie(priv, skb, 0);
 527                 break;
 528
 529         case WLAN_TDLS_SETUP_CONFIRM:
 530                 tf->category = WLAN_CATEGORY_TDLS;
 531                 tf->action_code = WLAN_TDLS_SETUP_CONFIRM;
 532                 skb_put(skb, sizeof(tf->u.setup_cfm));
 533                 tf->u.setup_cfm.status_code = cpu_to_le16(status_code);
 534                 tf->u.setup_cfm.dialog_token = dialog_token;
 535
 536                 mwifiex_tdls_add_wmm_param_ie(priv, skb);
 537                 if (priv->adapter->is_hw_11ac_capable) {
 538                         ret = mwifiex_tdls_add_vht_oper(priv, peer, skb);
 539                         if (ret) {
 540                                 dev_kfree_skb_any(skb);
 541                                 return ret;
 542                         }
 543                         ret = mwifiex_tdls_add_ht_oper(priv, peer, 1, skb);
 544                         if (ret) {
 545                                 dev_kfree_skb_any(skb);
 546                                 return ret;
 547                         }
 548                 } else {
 549                         ret = mwifiex_tdls_add_ht_oper(priv, peer, 0, skb);
 550                         if (ret) {
 551                                 dev_kfree_skb_any(skb);
 552                                 return ret;
 553                         }
 554                 }
 555                 break;
 556
 557         case WLAN_TDLS_TEARDOWN:
 558                 tf->category = WLAN_CATEGORY_TDLS;
 559                 tf->action_code = WLAN_TDLS_TEARDOWN;
 560                 skb_put(skb, sizeof(tf->u.teardown));
 561                 tf->u.teardown.reason_code = cpu_to_le16(status_code);
 562                 break;
 563
 564         case WLAN_TDLS_DISCOVERY_REQUEST:
 565                 tf->category = WLAN_CATEGORY_TDLS;
 566                 tf->action_code = WLAN_TDLS_DISCOVERY_REQUEST;
 567                 skb_put(skb, sizeof(tf->u.discover_req));
 568                 tf->u.discover_req.dialog_token = dialog_token;
 569                 break;
 570         default:
 571                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS frame type.\n");
 572                 return -EINVAL;
 573         }
 574
 575         return 0;
 576 }
 577
 578 static void
 579 mwifiex_tdls_add_link_ie(struct sk_buff *skb, const u8 *src_addr,
 580                          const u8 *peer, const u8 *bssid)
 581 {
 582         struct ieee80211_tdls_lnkie *lnkid;
 583
 584         lnkid = (void *)skb_put(skb, sizeof(struct ieee80211_tdls_lnkie));
 585         lnkid->ie_type = WLAN_EID_LINK_ID;
 586         lnkid->ie_len = sizeof(struct ieee80211_tdls_lnkie) -
 587                         sizeof(struct ieee_types_header);
 588
 589         memcpy(lnkid->bssid, bssid, ETH_ALEN);
 590         memcpy(lnkid->init_sta, src_addr, ETH_ALEN);
 591         memcpy(lnkid->resp_sta, peer, ETH_ALEN);
 592 }
 593
 594 int mwifiex_send_tdls_data_frame(struct mwifiex_private *priv, const u8 *peer,
 595                                  u8 action_code, u8 dialog_token,
 596                                  u16 status_code, const u8 *extra_ies,
 597                                  size_t extra_ies_len)
 598 {
 599         struct sk_buff *skb;
 600         struct mwifiex_txinfo *tx_info;
 601         int ret;
 602         u16 skb_len;
 603
 604         skb_len = MWIFIEX_MIN_DATA_HEADER_LEN +
 605                   max(sizeof(struct ieee80211_mgmt),
 606                       sizeof(struct ieee80211_tdls_data)) +
 607                   MWIFIEX_MGMT_FRAME_HEADER_SIZE +
 608                   MWIFIEX_SUPPORTED_RATES +
 609                   3 + /* Qos Info */
 610                   sizeof(struct ieee_types_extcap) +
 611                   sizeof(struct ieee80211_ht_cap) +
 612                   sizeof(struct ieee_types_bss_co_2040) +
 613                   sizeof(struct ieee80211_ht_operation) +
 614                   sizeof(struct ieee80211_tdls_lnkie) +
 615                   sizeof(struct ieee80211_wmm_param_ie) +
 616                   extra_ies_len;
 617
 618         if (priv->adapter->is_hw_11ac_capable)
 619                 skb_len += sizeof(struct ieee_types_vht_cap) +
 620                            sizeof(struct ieee_types_vht_oper) +
 621                            sizeof(struct ieee_types_aid);
 622
 623         skb = dev_alloc_skb(skb_len);
 624         if (!skb) {
 625                 mwifiex_dbg(priv->adapter, ERROR,
 626                             "allocate skb failed for management frame\n");
 627                 return -ENOMEM;
 628         }
 629         skb_reserve(skb, MWIFIEX_MIN_DATA_HEADER_LEN);
 630
 631         switch (action_code) {
 632         case WLAN_TDLS_SETUP_REQUEST:
 633         case WLAN_TDLS_SETUP_CONFIRM:
 634         case WLAN_TDLS_TEARDOWN:
 635         case WLAN_TDLS_DISCOVERY_REQUEST:
 636                 ret = mwifiex_prep_tdls_encap_data(priv, peer, action_code,
 637                                                    dialog_token, status_code,
 638                                                    skb);
 639                 if (ret) {
 640                         dev_kfree_skb_any(skb);
 641                         return ret;
 642                 }
 643                 if (extra_ies_len)
 644                         memcpy(skb_put(skb, extra_ies_len), extra_ies,
 645                                extra_ies_len);
 646                 mwifiex_tdls_add_link_ie(skb, priv->curr_addr, peer,
 647                                          priv->cfg_bssid);
 648                 break;
 649         case WLAN_TDLS_SETUP_RESPONSE:
 650                 ret = mwifiex_prep_tdls_encap_data(priv, peer, action_code,
 651                                                    dialog_token, status_code,
 652                                                    skb);
 653                 if (ret) {
 654                         dev_kfree_skb_any(skb);
 655                         return ret;
 656                 }
 657                 if (extra_ies_len)
 658                         memcpy(skb_put(skb, extra_ies_len), extra_ies,
 659                                extra_ies_len);
 660                 mwifiex_tdls_add_link_ie(skb, peer, priv->curr_addr,
 661                                          priv->cfg_bssid);
 662                 break;
 663         }
 664
 665         switch (action_code) {
 666         case WLAN_TDLS_SETUP_REQUEST:
 667         case WLAN_TDLS_SETUP_RESPONSE:
 668                 skb->priority = MWIFIEX_PRIO_BK;
 669                 break;
 670         default:
 671                 skb->priority = MWIFIEX_PRIO_VI;
 672                 break;
 673         }
 674
 675         tx_info = MWIFIEX_SKB_TXCB(skb);
 676         memset(tx_info, 0, sizeof(*tx_info));
 677         tx_info->bss_num = priv->bss_num;
 678         tx_info->bss_type = priv->bss_type;
 679
 680         __net_timestamp(skb);
 681         mwifiex_queue_tx_pkt(priv, skb);
 682
 683         /* Delay 10ms to make sure tdls setup confirm/teardown frame
 684          * is received by peer
 685         */
 686         if (action_code == WLAN_TDLS_SETUP_CONFIRM ||
 687             action_code == WLAN_TDLS_TEARDOWN)
 688                 msleep_interruptible(10);
 689
 690         return 0;
 691 }
 692
 693 static int
 694 mwifiex_construct_tdls_action_frame(struct mwifiex_private *priv,
 695                                     const u8 *peer,
 696                                     u8 action_code, u8 dialog_token,
 697                                     u16 status_code, struct sk_buff *skb)
 698 {
 699         struct ieee80211_mgmt *mgmt;
 700         u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
 701         int ret;
 702         u16 capab;
 703         struct ieee80211_ht_cap *ht_cap;
 704         u8 radio, *pos;
 705
 706         capab = priv->curr_bss_params.bss_descriptor.cap_info_bitmap;
 707
 708         mgmt = (void *)skb_put(skb, offsetof(struct ieee80211_mgmt, u));
 709
 710         memset(mgmt, 0, 24);
 711         memcpy(mgmt->da, peer, ETH_ALEN);
 712         memcpy(mgmt->sa, priv->curr_addr, ETH_ALEN);
 713         memcpy(mgmt->bssid, priv->cfg_bssid, ETH_ALEN);
 714         mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 715                                           IEEE80211_STYPE_ACTION);
 716
 717         /* add address 4 */
 718         pos = skb_put(skb, ETH_ALEN);
 719
 720         switch (action_code) {
 721         case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
 722                 skb_put(skb, sizeof(mgmt->u.action.u.tdls_discover_resp) + 1);
 723                 mgmt->u.action.category = WLAN_CATEGORY_PUBLIC;
 724                 mgmt->u.action.u.tdls_discover_resp.action_code =
 725                                               WLAN_PUB_ACTION_TDLS_DISCOVER_RES;
 726                 mgmt->u.action.u.tdls_discover_resp.dialog_token =
 727                                                                    dialog_token;
 728                 mgmt->u.action.u.tdls_discover_resp.capability =
 729                                                              cpu_to_le16(capab);
 730                 /* move back for addr4 */
 731                 memmove(pos + ETH_ALEN, &mgmt->u.action.category,
 732                         sizeof(mgmt->u.action.u.tdls_discover_resp));
 733                 /* init address 4 */
 734                 memcpy(pos, bc_addr, ETH_ALEN);
 735
 736                 ret = mwifiex_tdls_append_rates_ie(priv, skb);
 737                 if (ret) {
 738                         dev_kfree_skb_any(skb);
 739                         return ret;
 740                 }
 741
 742                 pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);
 743                 *pos++ = WLAN_EID_HT_CAPABILITY;
 744                 *pos++ = sizeof(struct ieee80211_ht_cap);
 745                 ht_cap = (void *)pos;
 746                 radio = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
 747                 ret = mwifiex_fill_cap_info(priv, radio, ht_cap);
 748                 if (ret) {
 749                         dev_kfree_skb_any(skb);
 750                         return ret;
 751                 }
 752
 753                 if (priv->adapter->is_hw_11ac_capable) {
 754                         ret = mwifiex_tdls_add_vht_capab(priv, skb);
 755                         if (ret) {
 756                                 dev_kfree_skb_any(skb);
 757                                 return ret;
 758                         }
 759                         mwifiex_tdls_add_aid(priv, skb);
 760                 }
 761
 762                 mwifiex_tdls_add_ext_capab(priv, skb);
 763                 mwifiex_tdls_add_qos_capab(skb);
 764                 break;
 765         default:
 766                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS action frame type\n");
 767                 return -EINVAL;
 768         }
 769
 770         return 0;
 771 }
 772
 773 int mwifiex_send_tdls_action_frame(struct mwifiex_private *priv, const u8 *peer,
 774                                    u8 action_code, u8 dialog_token,
 775                                    u16 status_code, const u8 *extra_ies,
 776                                    size_t extra_ies_len)
 777 {
 778         struct sk_buff *skb;
 779         struct mwifiex_txinfo *tx_info;
 780         u8 *pos;
 781         u32 pkt_type, tx_control;
 782         u16 pkt_len, skb_len;
 783
 784         skb_len = MWIFIEX_MIN_DATA_HEADER_LEN +
 785                   max(sizeof(struct ieee80211_mgmt),
 786                       sizeof(struct ieee80211_tdls_data)) +
 787                   MWIFIEX_MGMT_FRAME_HEADER_SIZE +
 788                   MWIFIEX_SUPPORTED_RATES +
 789                   sizeof(struct ieee_types_extcap) +
 790                   sizeof(struct ieee80211_ht_cap) +
 791                   sizeof(struct ieee_types_bss_co_2040) +
 792                   sizeof(struct ieee80211_ht_operation) +
 793                   sizeof(struct ieee80211_tdls_lnkie) +
 794                   extra_ies_len +
 795                   3 + /* Qos Info */
 796                   ETH_ALEN; /* Address4 */
 797
 798         if (priv->adapter->is_hw_11ac_capable)
 799                 skb_len += sizeof(struct ieee_types_vht_cap) +
 800                            sizeof(struct ieee_types_vht_oper) +
 801                            sizeof(struct ieee_types_aid);
 802
 803         skb = dev_alloc_skb(skb_len);
 804         if (!skb) {
 805                 mwifiex_dbg(priv->adapter, ERROR,
 806                             "allocate skb failed for management frame\n");
 807                 return -ENOMEM;
 808         }
 809
 810         skb_reserve(skb, MWIFIEX_MIN_DATA_HEADER_LEN);
 811
 812         pkt_type = PKT_TYPE_MGMT;
 813         tx_control = 0;
 814         pos = skb_put(skb, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));
 815         memset(pos, 0, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));
 816         memcpy(pos, &pkt_type, sizeof(pkt_type));
 817         memcpy(pos + sizeof(pkt_type), &tx_control, sizeof(tx_control));
 818
 819         if (mwifiex_construct_tdls_action_frame(priv, peer, action_code,
 820                                                 dialog_token, status_code,
 821                                                 skb)) {
 822                 dev_kfree_skb_any(skb);
 823                 return -EINVAL;
 824         }
 825
 826         if (extra_ies_len)
 827                 memcpy(skb_put(skb, extra_ies_len), extra_ies, extra_ies_len);
 828
 829         /* the TDLS link IE is always added last we are the responder */
 830
 831         mwifiex_tdls_add_link_ie(skb, peer, priv->curr_addr,
 832                                  priv->cfg_bssid);
 833
 834         skb->priority = MWIFIEX_PRIO_VI;
 835
 836         tx_info = MWIFIEX_SKB_TXCB(skb);
 837         memset(tx_info, 0, sizeof(*tx_info));
 838         tx_info->bss_num = priv->bss_num;
 839         tx_info->bss_type = priv->bss_type;
 840         tx_info->flags |= MWIFIEX_BUF_FLAG_TDLS_PKT;
 841
 842         pkt_len = skb->len - MWIFIEX_MGMT_FRAME_HEADER_SIZE - sizeof(pkt_len);
 843         memcpy(skb->data + MWIFIEX_MGMT_FRAME_HEADER_SIZE, &pkt_len,
 844                sizeof(pkt_len));
 845         __net_timestamp(skb);
 846         mwifiex_queue_tx_pkt(priv, skb);
 847
 848         return 0;
 849 }
 850
 851 /* This function process tdls action frame from peer.
 852  * Peer capabilities are stored into station node structure.
 853  */
 854 void mwifiex_process_tdls_action_frame(struct mwifiex_private *priv,
 855                                        u8 *buf, int len)
 856 {
 857         struct mwifiex_sta_node *sta_ptr;
 858         u8 *peer, *pos, *end;
 859         u8 i, action, basic;
 860         __le16 cap = 0;
 861         int ie_len = 0;
 862
 863         if (len < (sizeof(struct ethhdr) + 3))
 864                 return;
 865         if (*(buf + sizeof(struct ethhdr)) != WLAN_TDLS_SNAP_RFTYPE)
 866                 return;
 867         if (*(buf + sizeof(struct ethhdr) + 1) != WLAN_CATEGORY_TDLS)
 868                 return;
 869
 870         peer = buf + ETH_ALEN;
 871         action = *(buf + sizeof(struct ethhdr) + 2);
 872         mwifiex_dbg(priv->adapter, DATA,
 873                     "rx:tdls action: peer=%pM, action=%d\n", peer, action);
 874
 875         switch (action) {
 876         case WLAN_TDLS_SETUP_REQUEST:
 877                 if (len < (sizeof(struct ethhdr) + TDLS_REQ_FIX_LEN))
 878                         return;
 879
 880                 pos = buf + sizeof(struct ethhdr) + 4;
 881                 /* payload 1+ category 1 + action 1 + dialog 1 */
 882                 cap = cpu_to_le16(*(u16 *)pos);
 883                 ie_len = len - sizeof(struct ethhdr) - TDLS_REQ_FIX_LEN;
 884                 pos += 2;
 885                 break;
 886
 887         case WLAN_TDLS_SETUP_RESPONSE:
 888                 if (len < (sizeof(struct ethhdr) + TDLS_RESP_FIX_LEN))
 889                         return;
 890                 /* payload 1+ category 1 + action 1 + dialog 1 + status code 2*/
 891                 pos = buf + sizeof(struct ethhdr) + 6;
 892                 cap = cpu_to_le16(*(u16 *)pos);
 893                 ie_len = len - sizeof(struct ethhdr) - TDLS_RESP_FIX_LEN;
 894                 pos += 2;
 895                 break;
 896
 897         case WLAN_TDLS_SETUP_CONFIRM:
 898                 if (len < (sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN))
 899                         return;
 900                 pos = buf + sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN;
 901                 ie_len = len - sizeof(struct ethhdr) - TDLS_CONFIRM_FIX_LEN;
 902                 break;
 903         default:
 904                 mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS frame type.\n");
 905                 return;
 906         }
 907
 908         sta_ptr = mwifiex_add_sta_entry(priv, peer);
 909         if (!sta_ptr)
 910                 return;
 911
 912         sta_ptr->tdls_cap.capab = cap;
 913
 914         for (end = pos + ie_len; pos + 1 < end; pos += 2 + pos[1]) {
 915                 if (pos + 2 + pos[1] > end)
 916                         break;
 917
 918                 switch (*pos) {
 919                 case WLAN_EID_SUPP_RATES:
 920                         if (pos[1] > 32)
 921                                 return;
 922                         sta_ptr->tdls_cap.rates_len = pos[1];
 923                         for (i = 0; i < pos[1]; i++)
 924                                 sta_ptr->tdls_cap.rates[i] = pos[i + 2];
 925                         break;
 926
 927                 case WLAN_EID_EXT_SUPP_RATES:
 928                         if (pos[1] > 32)
 929                                 return;
 930                         basic = sta_ptr->tdls_cap.rates_len;
 931                         if (pos[1] > 32 - basic)
 932                                 return;
 933                         for (i = 0; i < pos[1]; i++)
 934                                 sta_ptr->tdls_cap.rates[basic + i] = pos[i + 2];
 935                         sta_ptr->tdls_cap.rates_len += pos[1];
 936                         break;
 937                 case WLAN_EID_HT_CAPABILITY:
 938                         if (pos > end - sizeof(struct ieee80211_ht_cap) - 2)
 939                                 return;
 940                         if (pos[1] != sizeof(struct ieee80211_ht_cap))
 941                                 return;
 942                         /* copy the ie's value into ht_capb*/
 943                         memcpy((u8 *)&sta_ptr->tdls_cap.ht_capb, pos + 2,
 944                                sizeof(struct ieee80211_ht_cap));
 945                         sta_ptr->is_11n_enabled = 1;
 946                         break;
 947                 case WLAN_EID_HT_OPERATION:
 948                         if (pos > end -
 949                             sizeof(struct ieee80211_ht_operation) - 2)
 950                                 return;
 951                         if (pos[1] != sizeof(struct ieee80211_ht_operation))
 952                                 return;
 953                         /* copy the ie's value into ht_oper*/
 954                         memcpy(&sta_ptr->tdls_cap.ht_oper, pos + 2,
 955                                sizeof(struct ieee80211_ht_operation));
 956                         break;
 957                 case WLAN_EID_BSS_COEX_2040:
 958                         if (pos > end - 3)
 959                                 return;
 960                         if (pos[1] != 1)
 961                                 return;
 962                         sta_ptr->tdls_cap.coex_2040 = pos[2];
 963                         break;
 964                 case WLAN_EID_EXT_CAPABILITY:
 965                         if (pos > end - sizeof(struct ieee_types_header))
 966                                 return;
 967                         if (pos[1] < sizeof(struct ieee_types_header))
 968                                 return;
 969                         if (pos[1] > 8)
 970                                 return;
 971                         memcpy((u8 *)&sta_ptr->tdls_cap.extcap, pos,
 972                                sizeof(struct ieee_types_header) +
 973                                min_t(u8, pos[1], 8));
 974                         break;
 975                 case WLAN_EID_RSN:
 976                         if (pos > end - sizeof(struct ieee_types_header))
 977                                 return;
 978                         if (pos[1] < sizeof(struct ieee_types_header))
 979                                 return;
 980                         if (pos[1] > IEEE_MAX_IE_SIZE -
 981                             sizeof(struct ieee_types_header))
 982                                 return;
 983                         memcpy((u8 *)&sta_ptr->tdls_cap.rsn_ie, pos,
 984                                sizeof(struct ieee_types_header) +
 985                                min_t(u8, pos[1], IEEE_MAX_IE_SIZE -
 986                                      sizeof(struct ieee_types_header)));
 987                         break;
 988                 case WLAN_EID_QOS_CAPA:
 989                         if (pos > end - 3)
 990                                 return;
 991                         if (pos[1] != 1)
 992                                 return;
 993                         sta_ptr->tdls_cap.qos_info = pos[2];
 994                         break;
 995                 case WLAN_EID_VHT_OPERATION:
 996                         if (priv->adapter->is_hw_11ac_capable) {
 997                                 if (pos > end -
 998                                     sizeof(struct ieee80211_vht_operation) - 2)
 999                                         return;
1000                                 if (pos[1] !=
1001                                     sizeof(struct ieee80211_vht_operation))
1002                                         return;
1003                                 /* copy the ie's value into vhtoper*/
1004                                 memcpy(&sta_ptr->tdls_cap.vhtoper, pos + 2,
1005                                        sizeof(struct ieee80211_vht_operation));
1006                         }
1007                         break;
1008                 case WLAN_EID_VHT_CAPABILITY:
1009                         if (priv->adapter->is_hw_11ac_capable) {
1010                                 if (pos > end -
1011                                     sizeof(struct ieee80211_vht_cap) - 2)
1012                                         return;
1013                                 if (pos[1] != sizeof(struct ieee80211_vht_cap))
1014                                         return;
1015                                 /* copy the ie's value into vhtcap*/
1016                                 memcpy((u8 *)&sta_ptr->tdls_cap.vhtcap, pos + 2,
1017                                        sizeof(struct ieee80211_vht_cap));
1018                                 sta_ptr->is_11ac_enabled = 1;
1019                         }
1020                         break;
1021                 case WLAN_EID_AID:
1022                         if (priv->adapter->is_hw_11ac_capable) {
1023                                 if (pos > end - 4)
1024                                         return;
1025                                 if (pos[1] != 2)
1026                                         return;
1027                                 sta_ptr->tdls_cap.aid =
1028                                               le16_to_cpu(*(__le16 *)(pos + 2));
1029                         }
1030                         break;
1031                 default:
1032                         break;
1033                 }
1034         }
1035
1036         return;
1037 }
1038
1039 static int
1040 mwifiex_tdls_process_config_link(struct mwifiex_private *priv, const u8 *peer)
1041 {
1042         struct mwifiex_sta_node *sta_ptr;
1043         struct mwifiex_ds_tdls_oper tdls_oper;
1044
1045         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1046         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1047
1048         if (!sta_ptr || sta_ptr->tdls_status == TDLS_SETUP_FAILURE) {
1049                 mwifiex_dbg(priv->adapter, ERROR,
1050                             "link absent for peer %pM; cannot config\n", peer);
1051                 return -EINVAL;
1052         }
1053
1054         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1055         tdls_oper.tdls_action = MWIFIEX_TDLS_CONFIG_LINK;
1056         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1057                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1058 }
1059
1060 static int
1061 mwifiex_tdls_process_create_link(struct mwifiex_private *priv, const u8 *peer)
1062 {
1063         struct mwifiex_sta_node *sta_ptr;
1064         struct mwifiex_ds_tdls_oper tdls_oper;
1065
1066         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1067         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1068
1069         if (sta_ptr && sta_ptr->tdls_status == TDLS_SETUP_INPROGRESS) {
1070                 mwifiex_dbg(priv->adapter, WARN,
1071                             "Setup already in progress for peer %pM\n", peer);
1072                 return 0;
1073         }
1074
1075         sta_ptr = mwifiex_add_sta_entry(priv, peer);
1076         if (!sta_ptr)
1077                 return -ENOMEM;
1078
1079         sta_ptr->tdls_status = TDLS_SETUP_INPROGRESS;
1080         mwifiex_hold_tdls_packets(priv, peer);
1081         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1082         tdls_oper.tdls_action = MWIFIEX_TDLS_CREATE_LINK;
1083         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1084                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1085 }
1086
1087 static int
1088 mwifiex_tdls_process_disable_link(struct mwifiex_private *priv, const u8 *peer)
1089 {
1090         struct mwifiex_sta_node *sta_ptr;
1091         struct mwifiex_ds_tdls_oper tdls_oper;
1092         unsigned long flags;
1093
1094         memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1095         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1096
1097         if (sta_ptr) {
1098                 if (sta_ptr->is_11n_enabled) {
1099                         mwifiex_11n_cleanup_reorder_tbl(priv);
1100                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1101                                           flags);
1102                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1103                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1104                                                flags);
1105                 }
1106                 mwifiex_del_sta_entry(priv, peer);
1107         }
1108
1109         mwifiex_restore_tdls_packets(priv, peer, TDLS_LINK_TEARDOWN);
1110         mwifiex_auto_tdls_update_peer_status(priv, peer, TDLS_NOT_SETUP);
1111         memcpy(&tdls_oper.peer_mac, peer, ETH_ALEN);
1112         tdls_oper.tdls_action = MWIFIEX_TDLS_DISABLE_LINK;
1113         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1114                                 HostCmd_ACT_GEN_SET, 0, &tdls_oper, true);
1115 }
1116
1117 static int
1118 mwifiex_tdls_process_enable_link(struct mwifiex_private *priv, const u8 *peer)
1119 {
1120         struct mwifiex_sta_node *sta_ptr;
1121         struct ieee80211_mcs_info mcs;
1122         unsigned long flags;
1123         int i;
1124
1125         sta_ptr = mwifiex_get_sta_entry(priv, peer);
1126
1127         if (sta_ptr && (sta_ptr->tdls_status != TDLS_SETUP_FAILURE)) {
1128                 mwifiex_dbg(priv->adapter, MSG,
1129                             "tdls: enable link %pM success\n", peer);
1130
1131                 sta_ptr->tdls_status = TDLS_SETUP_COMPLETE;
1132
1133                 mcs = sta_ptr->tdls_cap.ht_capb.mcs;
1134                 if (mcs.rx_mask[0] != 0xff)
1135                         sta_ptr->is_11n_enabled = true;
1136                 if (sta_ptr->is_11n_enabled) {
1137                         if (le16_to_cpu(sta_ptr->tdls_cap.ht_capb.cap_info) &
1138                             IEEE80211_HT_CAP_MAX_AMSDU)
1139                                 sta_ptr->max_amsdu =
1140                                         MWIFIEX_TX_DATA_BUF_SIZE_8K;
1141                         else
1142                                 sta_ptr->max_amsdu =
1143                                         MWIFIEX_TX_DATA_BUF_SIZE_4K;
1144
1145                         for (i = 0; i < MAX_NUM_TID; i++)
1146                                 sta_ptr->ampdu_sta[i] =
1147                                               priv->aggr_prio_tbl[i].ampdu_user;
1148                 } else {
1149                         for (i = 0; i < MAX_NUM_TID; i++)
1150                                 sta_ptr->ampdu_sta[i] = BA_STREAM_NOT_ALLOWED;
1151                 }
1152                 if (sta_ptr->tdls_cap.extcap.ext_capab[3] &
1153                     WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH) {
1154                         mwifiex_config_tdls_enable(priv);
1155                         mwifiex_config_tdls_cs_params(priv);
1156                 }
1157
1158                 memset(sta_ptr->rx_seq, 0xff, sizeof(sta_ptr->rx_seq));
1159                 mwifiex_restore_tdls_packets(priv, peer, TDLS_SETUP_COMPLETE);
1160                 mwifiex_auto_tdls_update_peer_status(priv, peer,
1161                                                      TDLS_SETUP_COMPLETE);
1162         } else {
1163                 mwifiex_dbg(priv->adapter, ERROR,
1164                             "tdls: enable link %pM failed\n", peer);
1165                 if (sta_ptr) {
1166                         mwifiex_11n_cleanup_reorder_tbl(priv);
1167                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1168                                           flags);
1169                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1170                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1171                                                flags);
1172                         mwifiex_del_sta_entry(priv, peer);
1173                 }
1174                 mwifiex_restore_tdls_packets(priv, peer, TDLS_LINK_TEARDOWN);
1175                 mwifiex_auto_tdls_update_peer_status(priv, peer,
1176                                                      TDLS_NOT_SETUP);
1177
1178                 return -1;
1179         }
1180
1181         return 0;
1182 }
1183
1184 int mwifiex_tdls_oper(struct mwifiex_private *priv, const u8 *peer, u8 action)
1185 {
1186         switch (action) {
1187         case MWIFIEX_TDLS_ENABLE_LINK:
1188                 return mwifiex_tdls_process_enable_link(priv, peer);
1189         case MWIFIEX_TDLS_DISABLE_LINK:
1190                 return mwifiex_tdls_process_disable_link(priv, peer);
1191         case MWIFIEX_TDLS_CREATE_LINK:
1192                 return mwifiex_tdls_process_create_link(priv, peer);
1193         case MWIFIEX_TDLS_CONFIG_LINK:
1194                 return mwifiex_tdls_process_config_link(priv, peer);
1195         }
1196         return 0;
1197 }
1198
1199 int mwifiex_get_tdls_link_status(struct mwifiex_private *priv, const u8 *mac)
1200 {
1201         struct mwifiex_sta_node *sta_ptr;
1202
1203         sta_ptr = mwifiex_get_sta_entry(priv, mac);
1204         if (sta_ptr)
1205                 return sta_ptr->tdls_status;
1206
1207         return TDLS_NOT_SETUP;
1208 }
1209
1210 int mwifiex_get_tdls_list(struct mwifiex_private *priv,
1211                           struct tdls_peer_info *buf)
1212 {
1213         struct mwifiex_sta_node *sta_ptr;
1214         struct tdls_peer_info *peer = buf;
1215         int count = 0;
1216         unsigned long flags;
1217
1218         if (!ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info))
1219                 return 0;
1220
1221         /* make sure we are in station mode and connected */
1222         if (!(priv->bss_type == MWIFIEX_BSS_TYPE_STA && priv->media_connected))
1223                 return 0;
1224
1225         spin_lock_irqsave(&priv->sta_list_spinlock, flags);
1226         list_for_each_entry(sta_ptr, &priv->sta_list, list) {
1227                 if (mwifiex_is_tdls_link_setup(sta_ptr->tdls_status)) {
1228                         ether_addr_copy(peer->peer_addr, sta_ptr->mac_addr);
1229                         peer++;
1230                         count++;
1231                         if (count >= MWIFIEX_MAX_TDLS_PEER_SUPPORTED)
1232                                 break;
1233                 }
1234         }
1235         spin_unlock_irqrestore(&priv->sta_list_spinlock, flags);
1236
1237         return count;
1238 }
1239
1240 void mwifiex_disable_all_tdls_links(struct mwifiex_private *priv)
1241 {
1242         struct mwifiex_sta_node *sta_ptr;
1243         struct mwifiex_ds_tdls_oper tdls_oper;
1244         unsigned long flags;
1245
1246         if (list_empty(&priv->sta_list))
1247                 return;
1248
1249         list_for_each_entry(sta_ptr, &priv->sta_list, list) {
1250                 memset(&tdls_oper, 0, sizeof(struct mwifiex_ds_tdls_oper));
1251
1252                 if (sta_ptr->is_11n_enabled) {
1253                         mwifiex_11n_cleanup_reorder_tbl(priv);
1254                         spin_lock_irqsave(&priv->wmm.ra_list_spinlock,
1255                                           flags);
1256                         mwifiex_11n_delete_all_tx_ba_stream_tbl(priv);
1257                         spin_unlock_irqrestore(&priv->wmm.ra_list_spinlock,
1258                                                flags);
1259                 }
1260
1261                 mwifiex_restore_tdls_packets(priv, sta_ptr->mac_addr,
1262                                              TDLS_LINK_TEARDOWN);
1263                 memcpy(&tdls_oper.peer_mac, sta_ptr->mac_addr, ETH_ALEN);
1264                 tdls_oper.tdls_action = MWIFIEX_TDLS_DISABLE_LINK;
1265                 if (mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_OPER,
1266                                      HostCmd_ACT_GEN_SET, 0, &tdls_oper, false))
1267                         mwifiex_dbg(priv->adapter, ERROR,
1268                                     "Disable link failed for TDLS peer %pM",
1269                                     sta_ptr->mac_addr);
1270         }
1271
1272         mwifiex_del_all_sta_list(priv);
1273 }
1274
1275 int mwifiex_tdls_check_tx(struct mwifiex_private *priv, struct sk_buff *skb)
1276 {
1277         struct mwifiex_auto_tdls_peer *peer;
1278         unsigned long flags;
1279         u8 mac[ETH_ALEN];
1280
1281         ether_addr_copy(mac, skb->data);
1282
1283         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1284         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1285                 if (!memcmp(mac, peer->mac_addr, ETH_ALEN)) {
1286                         if (peer->rssi <= MWIFIEX_TDLS_RSSI_HIGH &&
1287                             peer->tdls_status == TDLS_NOT_SETUP &&
1288                             (peer->failure_count <
1289                              MWIFIEX_TDLS_MAX_FAIL_COUNT)) {
1290                                 peer->tdls_status = TDLS_SETUP_INPROGRESS;
1291                                 mwifiex_dbg(priv->adapter, INFO,
1292                                             "setup TDLS link, peer=%pM rssi=%d\n",
1293                                             peer->mac_addr, peer->rssi);
1294
1295                                 cfg80211_tdls_oper_request(priv->netdev,
1296                                                            peer->mac_addr,
1297                                                            NL80211_TDLS_SETUP,
1298                                                            0, GFP_ATOMIC);
1299                                 peer->do_setup = false;
1300                                 priv->check_tdls_tx = false;
1301                         } else if (peer->failure_count <
1302                                    MWIFIEX_TDLS_MAX_FAIL_COUNT &&
1303                                    peer->do_discover) {
1304                                 mwifiex_send_tdls_data_frame(priv,
1305                                                              peer->mac_addr,
1306                                                     WLAN_TDLS_DISCOVERY_REQUEST,
1307                                                              1, 0, NULL, 0);
1308                                 peer->do_discover = false;
1309                         }
1310                 }
1311         }
1312         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1313
1314         return 0;
1315 }
1316
1317 void mwifiex_flush_auto_tdls_list(struct mwifiex_private *priv)
1318 {
1319         struct mwifiex_auto_tdls_peer *peer, *tmp_node;
1320         unsigned long flags;
1321
1322         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1323         list_for_each_entry_safe(peer, tmp_node, &priv->auto_tdls_list, list) {
1324                 list_del(&peer->list);
1325                 kfree(peer);
1326         }
1327
1328         INIT_LIST_HEAD(&priv->auto_tdls_list);
1329         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1330         priv->check_tdls_tx = false;
1331 }
1332
1333 void mwifiex_add_auto_tdls_peer(struct mwifiex_private *priv, const u8 *mac)
1334 {
1335         struct mwifiex_auto_tdls_peer *tdls_peer;
1336         unsigned long flags;
1337
1338         if (!priv->adapter->auto_tdls)
1339                 return;
1340
1341         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1342         list_for_each_entry(tdls_peer, &priv->auto_tdls_list, list) {
1343                 if (!memcmp(tdls_peer->mac_addr, mac, ETH_ALEN)) {
1344                         tdls_peer->tdls_status = TDLS_SETUP_INPROGRESS;
1345                         tdls_peer->rssi_jiffies = jiffies;
1346                         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1347                         return;
1348                 }
1349         }
1350
1351         /* create new TDLS peer */
1352         tdls_peer = kzalloc(sizeof(*tdls_peer), GFP_ATOMIC);
1353         if (tdls_peer) {
1354                 ether_addr_copy(tdls_peer->mac_addr, mac);
1355                 tdls_peer->tdls_status = TDLS_SETUP_INPROGRESS;
1356                 tdls_peer->rssi_jiffies = jiffies;
1357                 INIT_LIST_HEAD(&tdls_peer->list);
1358                 list_add_tail(&tdls_peer->list, &priv->auto_tdls_list);
1359                 mwifiex_dbg(priv->adapter, INFO,
1360                             "Add auto TDLS peer= %pM to list\n", mac);
1361         }
1362
1363         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1364 }
1365
1366 void mwifiex_auto_tdls_update_peer_status(struct mwifiex_private *priv,
1367                                           const u8 *mac, u8 link_status)
1368 {
1369         struct mwifiex_auto_tdls_peer *peer;
1370         unsigned long flags;
1371
1372         if (!priv->adapter->auto_tdls)
1373                 return;
1374
1375         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1376         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1377                 if (!memcmp(peer->mac_addr, mac, ETH_ALEN)) {
1378                         if ((link_status == TDLS_NOT_SETUP) &&
1379                             (peer->tdls_status == TDLS_SETUP_INPROGRESS))
1380                                 peer->failure_count++;
1381                         else if (mwifiex_is_tdls_link_setup(link_status))
1382                                 peer->failure_count = 0;
1383
1384                         peer->tdls_status = link_status;
1385                         break;
1386                 }
1387         }
1388         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1389 }
1390
1391 void mwifiex_auto_tdls_update_peer_signal(struct mwifiex_private *priv,
1392                                           u8 *mac, s8 snr, s8 nflr)
1393 {
1394         struct mwifiex_auto_tdls_peer *peer;
1395         unsigned long flags;
1396
1397         if (!priv->adapter->auto_tdls)
1398                 return;
1399
1400         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1401         list_for_each_entry(peer, &priv->auto_tdls_list, list) {
1402                 if (!memcmp(peer->mac_addr, mac, ETH_ALEN)) {
1403                         peer->rssi = nflr - snr;
1404                         peer->rssi_jiffies = jiffies;
1405                         break;
1406                 }
1407         }
1408         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1409 }
1410
1411 void mwifiex_check_auto_tdls(unsigned long context)
1412 {
1413         struct mwifiex_private *priv = (struct mwifiex_private *)context;
1414         struct mwifiex_auto_tdls_peer *tdls_peer;
1415         unsigned long flags;
1416         u16 reason = WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED;
1417
1418         if (WARN_ON_ONCE(!priv || !priv->adapter)) {
1419                 pr_err("mwifiex: %s: adapter or private structure is NULL\n",
1420                        __func__);
1421                 return;
1422         }
1423
1424         if (unlikely(!priv->adapter->auto_tdls))
1425                 return;
1426
1427         if (!priv->auto_tdls_timer_active) {
1428                 mwifiex_dbg(priv->adapter, INFO,
1429                             "auto TDLS timer inactive; return");
1430                 return;
1431         }
1432
1433         priv->check_tdls_tx = false;
1434
1435         if (list_empty(&priv->auto_tdls_list)) {
1436                 mod_timer(&priv->auto_tdls_timer,
1437                           jiffies +
1438                           msecs_to_jiffies(MWIFIEX_TIMER_10S));
1439                 return;
1440         }
1441
1442         spin_lock_irqsave(&priv->auto_tdls_lock, flags);
1443         list_for_each_entry(tdls_peer, &priv->auto_tdls_list, list) {
1444                 if ((jiffies - tdls_peer->rssi_jiffies) >
1445                     (MWIFIEX_AUTO_TDLS_IDLE_TIME * HZ)) {
1446                         tdls_peer->rssi = 0;
1447                         tdls_peer->do_discover = true;
1448                         priv->check_tdls_tx = true;
1449                 }
1450
1451                 if (((tdls_peer->rssi >= MWIFIEX_TDLS_RSSI_LOW) ||
1452                      !tdls_peer->rssi) &&
1453                     mwifiex_is_tdls_link_setup(tdls_peer->tdls_status)) {
1454                         tdls_peer->tdls_status = TDLS_LINK_TEARDOWN;
1455                         mwifiex_dbg(priv->adapter, MSG,
1456                                     "teardown TDLS link,peer=%pM rssi=%d\n",
1457                                     tdls_peer->mac_addr, -tdls_peer->rssi);
1458                         tdls_peer->do_discover = true;
1459                         priv->check_tdls_tx = true;
1460                         cfg80211_tdls_oper_request(priv->netdev,
1461                                                    tdls_peer->mac_addr,
1462                                                    NL80211_TDLS_TEARDOWN,
1463                                                    reason, GFP_ATOMIC);
1464                 } else if (tdls_peer->rssi &&
1465                            tdls_peer->rssi <= MWIFIEX_TDLS_RSSI_HIGH &&
1466                            tdls_peer->tdls_status == TDLS_NOT_SETUP &&
1467                            tdls_peer->failure_count <
1468                            MWIFIEX_TDLS_MAX_FAIL_COUNT) {
1469                                 priv->check_tdls_tx = true;
1470                                 tdls_peer->do_setup = true;
1471                                 mwifiex_dbg(priv->adapter, INFO,
1472                                             "check TDLS with peer=%pM\t"
1473                                             "rssi=%d\n", tdls_peer->mac_addr,
1474                                             tdls_peer->rssi);
1475                 }
1476         }
1477         spin_unlock_irqrestore(&priv->auto_tdls_lock, flags);
1478
1479         mod_timer(&priv->auto_tdls_timer,
1480                   jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
1481 }
1482
1483 void mwifiex_setup_auto_tdls_timer(struct mwifiex_private *priv)
1484 {
1485         setup_timer(&priv->auto_tdls_timer, mwifiex_check_auto_tdls,
1486                     (unsigned long)priv);
1487         priv->auto_tdls_timer_active = true;
1488         mod_timer(&priv->auto_tdls_timer,
1489                   jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
1490 }
1491
1492 void mwifiex_clean_auto_tdls(struct mwifiex_private *priv)
1493 {
1494         if (ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info) &&
1495             priv->adapter->auto_tdls &&
1496             priv->bss_type == MWIFIEX_BSS_TYPE_STA) {
1497                 priv->auto_tdls_timer_active = false;
1498                 del_timer(&priv->auto_tdls_timer);
1499                 mwifiex_flush_auto_tdls_list(priv);
1500         }
1501 }
1502
1503 static int mwifiex_config_tdls(struct mwifiex_private *priv, u8 enable)
1504 {
1505         struct mwifiex_tdls_config config;
1506
1507         config.enable = cpu_to_le16(enable);
1508         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1509                                 ACT_TDLS_CS_ENABLE_CONFIG, 0, &config, true);
1510 }
1511
1512 int mwifiex_config_tdls_enable(struct mwifiex_private *priv)
1513 {
1514         return mwifiex_config_tdls(priv, true);
1515 }
1516
1517 int mwifiex_config_tdls_disable(struct mwifiex_private *priv)
1518 {
1519         return mwifiex_config_tdls(priv, false);
1520 }
1521
1522 int mwifiex_config_tdls_cs_params(struct mwifiex_private *priv)
1523 {
1524         struct mwifiex_tdls_config_cs_params config_tdls_cs_params;
1525
1526         config_tdls_cs_params.unit_time = MWIFIEX_DEF_CS_UNIT_TIME;
1527         config_tdls_cs_params.thr_otherlink = MWIFIEX_DEF_CS_THR_OTHERLINK;
1528         config_tdls_cs_params.thr_directlink = MWIFIEX_DEF_THR_DIRECTLINK;
1529
1530         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1531                                 ACT_TDLS_CS_PARAMS, 0,
1532                                 &config_tdls_cs_params, true);
1533 }
1534
1535 int mwifiex_stop_tdls_cs(struct mwifiex_private *priv, const u8 *peer_mac)
1536 {
1537         struct mwifiex_tdls_stop_cs_params stop_tdls_cs_params;
1538
1539         ether_addr_copy(stop_tdls_cs_params.peer_mac, peer_mac);
1540
1541         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1542                                 ACT_TDLS_CS_STOP, 0,
1543                                 &stop_tdls_cs_params, true);
1544 }
1545
1546 int mwifiex_start_tdls_cs(struct mwifiex_private *priv, const u8 *peer_mac,
1547                           u8 primary_chan, u8 second_chan_offset, u8 band)
1548 {
1549         struct mwifiex_tdls_init_cs_params start_tdls_cs_params;
1550
1551         ether_addr_copy(start_tdls_cs_params.peer_mac, peer_mac);
1552         start_tdls_cs_params.primary_chan = primary_chan;
1553         start_tdls_cs_params.second_chan_offset = second_chan_offset;
1554         start_tdls_cs_params.band = band;
1555
1556         start_tdls_cs_params.switch_time = cpu_to_le16(MWIFIEX_DEF_CS_TIME);
1557         start_tdls_cs_params.switch_timeout =
1558                                         cpu_to_le16(MWIFIEX_DEF_CS_TIMEOUT);
1559         start_tdls_cs_params.reg_class = MWIFIEX_DEF_CS_REG_CLASS;
1560         start_tdls_cs_params.periodicity = MWIFIEX_DEF_CS_PERIODICITY;
1561
1562         return mwifiex_send_cmd(priv, HostCmd_CMD_TDLS_CONFIG,
1563                                 ACT_TDLS_CS_INIT, 0,
1564                                 &start_tdls_cs_params, true);
1565 }