1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  * rtl871x_recv.c
4  *
5  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
6  * Linux device driver for RTL8192SU
7  *
8  * Modifications for inclusion into the Linux staging tree are
9  * Copyright(c) 2010 Larry Finger. All rights reserved.
10  *
11  * Contact information:
12  * WLAN FAE <wlanfae@realtek.com>
13  * Larry Finger <Larry.Finger@lwfinger.net>
14  *
15  ******************************************************************************/
16 
17 #define _RTL871X_RECV_C_
18 
19 #include <linux/ip.h>
20 #include <linux/if_ether.h>
21 #include <linux/etherdevice.h>
22 #include <linux/ieee80211.h>
23 #include <net/cfg80211.h>
24 
25 #include "osdep_service.h"
26 #include "drv_types.h"
27 #include "recv_osdep.h"
28 #include "mlme_osdep.h"
29 #include "ethernet.h"
30 #include "usb_ops.h"
31 #include "wifi.h"
32 
33 static const u8 SNAP_ETH_TYPE_IPX[2] = {0x81, 0x37};
34 
35 /* Datagram Delivery Protocol */
36 static const u8 SNAP_ETH_TYPE_APPLETALK_AARP[2] = {0x80, 0xf3};
37 
_r8712_init_sta_recv_priv(struct sta_recv_priv * psta_recvpriv)38 void _r8712_init_sta_recv_priv(struct sta_recv_priv *psta_recvpriv)
39 {
40 	memset((u8 *)psta_recvpriv, 0, sizeof(struct sta_recv_priv));
41 	spin_lock_init(&psta_recvpriv->lock);
42 	_init_queue(&psta_recvpriv->defrag_q);
43 }
44 
_r8712_init_recv_priv(struct recv_priv * precvpriv,struct _adapter * padapter)45 int _r8712_init_recv_priv(struct recv_priv *precvpriv,
46 			  struct _adapter *padapter)
47 {
48 	int ret;
49 	sint i;
50 	union recv_frame *precvframe;
51 
52 	memset((unsigned char *)precvpriv, 0, sizeof(struct  recv_priv));
53 	spin_lock_init(&precvpriv->lock);
54 	_init_queue(&precvpriv->free_recv_queue);
55 	_init_queue(&precvpriv->recv_pending_queue);
56 	precvpriv->adapter = padapter;
57 	precvpriv->free_recvframe_cnt = NR_RECVFRAME;
58 	precvpriv->pallocated_frame_buf = kzalloc(NR_RECVFRAME *
59 				sizeof(union recv_frame) + RXFRAME_ALIGN_SZ,
60 				GFP_ATOMIC);
61 	if (!precvpriv->pallocated_frame_buf)
62 		return -ENOMEM;
63 	precvpriv->precv_frame_buf = precvpriv->pallocated_frame_buf +
64 				    RXFRAME_ALIGN_SZ -
65 				    ((addr_t)(precvpriv->pallocated_frame_buf) &
66 				    (RXFRAME_ALIGN_SZ - 1));
67 	precvframe = (union recv_frame *)precvpriv->precv_frame_buf;
68 	for (i = 0; i < NR_RECVFRAME; i++) {
69 		INIT_LIST_HEAD(&(precvframe->u.list));
70 		list_add_tail(&(precvframe->u.list),
71 			      &(precvpriv->free_recv_queue.queue));
72 		r8712_os_recv_resource_alloc(padapter, precvframe);
73 		precvframe->u.hdr.adapter = padapter;
74 		precvframe++;
75 	}
76 	precvpriv->rx_pending_cnt = 1;
77 	ret = r8712_init_recv_priv(precvpriv, padapter);
78 	if (ret)
79 		kfree(precvpriv->pallocated_frame_buf);
80 
81 	return ret;
82 }
83 
_r8712_free_recv_priv(struct recv_priv * precvpriv)84 void _r8712_free_recv_priv(struct recv_priv *precvpriv)
85 {
86 	kfree(precvpriv->pallocated_frame_buf);
87 	r8712_free_recv_priv(precvpriv);
88 }
89 
r8712_alloc_recvframe(struct __queue * pfree_recv_queue)90 union recv_frame *r8712_alloc_recvframe(struct __queue *pfree_recv_queue)
91 {
92 	unsigned long irqL;
93 	union recv_frame  *precvframe;
94 	struct _adapter *padapter;
95 	struct recv_priv *precvpriv;
96 
97 	spin_lock_irqsave(&pfree_recv_queue->lock, irqL);
98 	precvframe = list_first_entry_or_null(&pfree_recv_queue->queue,
99 					      union recv_frame, u.hdr.list);
100 	if (precvframe) {
101 		list_del_init(&precvframe->u.hdr.list);
102 		padapter = precvframe->u.hdr.adapter;
103 		if (padapter) {
104 			precvpriv = &padapter->recvpriv;
105 			if (pfree_recv_queue == &precvpriv->free_recv_queue)
106 				precvpriv->free_recvframe_cnt--;
107 		}
108 	}
109 	spin_unlock_irqrestore(&pfree_recv_queue->lock, irqL);
110 	return precvframe;
111 }
112 
113 /*
114  * caller : defrag; recvframe_chk_defrag in recv_thread  (passive)
115  * pframequeue: defrag_queue : will be accessed in recv_thread  (passive)
116  * using spin_lock to protect
117  */
r8712_free_recvframe_queue(struct __queue * pframequeue,struct __queue * pfree_recv_queue)118 void r8712_free_recvframe_queue(struct  __queue *pframequeue,
119 				struct  __queue *pfree_recv_queue)
120 {
121 	union	recv_frame *precvframe;
122 	struct list_head *plist, *phead;
123 
124 	spin_lock(&pframequeue->lock);
125 	phead = &pframequeue->queue;
126 	plist = phead->next;
127 	while (!end_of_queue_search(phead, plist)) {
128 		precvframe = container_of(plist, union recv_frame, u.list);
129 		plist = plist->next;
130 		r8712_free_recvframe(precvframe, pfree_recv_queue);
131 	}
132 	spin_unlock(&pframequeue->lock);
133 }
134 
r8712_recvframe_chkmic(struct _adapter * adapter,union recv_frame * precvframe)135 sint r8712_recvframe_chkmic(struct _adapter *adapter,
136 			    union recv_frame *precvframe)
137 {
138 	sint i, res = _SUCCESS;
139 	u32	datalen;
140 	u8 miccode[8];
141 	u8 bmic_err = false;
142 	u8 *pframe, *payload, *pframemic;
143 	u8   *mickey, idx, *iv;
144 	struct	sta_info *stainfo;
145 	struct	rx_pkt_attrib *prxattrib = &precvframe->u.hdr.attrib;
146 	struct	security_priv *psecuritypriv = &adapter->securitypriv;
147 
148 	stainfo = r8712_get_stainfo(&adapter->stapriv, &prxattrib->ta[0]);
149 	if (prxattrib->encrypt == _TKIP_) {
150 		/* calculate mic code */
151 		if (stainfo) {
152 			if (is_multicast_ether_addr(prxattrib->ra)) {
153 				iv = precvframe->u.hdr.rx_data +
154 				     prxattrib->hdrlen;
155 				idx = iv[3];
156 				mickey = &psecuritypriv->XGrprxmickey[(((idx >>
157 					 6) & 0x3)) - 1].skey[0];
158 				if (!psecuritypriv->binstallGrpkey)
159 					return _FAIL;
160 			} else {
161 				mickey = &stainfo->tkiprxmickey.skey[0];
162 			}
163 			/*icv_len included the mic code*/
164 			datalen = precvframe->u.hdr.len - prxattrib->hdrlen -
165 				  prxattrib->iv_len - prxattrib->icv_len - 8;
166 			pframe = precvframe->u.hdr.rx_data;
167 			payload = pframe + prxattrib->hdrlen +
168 				  prxattrib->iv_len;
169 			seccalctkipmic(mickey, pframe, payload, datalen,
170 				       &miccode[0],
171 				       (unsigned char)prxattrib->priority);
172 			pframemic = payload + datalen;
173 			bmic_err = false;
174 			for (i = 0; i < 8; i++) {
175 				if (miccode[i] != *(pframemic + i))
176 					bmic_err = true;
177 			}
178 			if (bmic_err) {
179 				if (prxattrib->bdecrypted)
180 					r8712_handle_tkip_mic_err(adapter,
181 								  (u8)is_multicast_ether_addr(prxattrib->ra));
182 				res = _FAIL;
183 			} else {
184 				/* mic checked ok */
185 				if (!psecuritypriv->bcheck_grpkey &&
186 				    is_multicast_ether_addr(prxattrib->ra))
187 					psecuritypriv->bcheck_grpkey = true;
188 			}
189 			recvframe_pull_tail(precvframe, 8);
190 		}
191 	}
192 	return res;
193 }
194 
195 /* decrypt and set the ivlen,icvlen of the recv_frame */
r8712_decryptor(struct _adapter * padapter,union recv_frame * precv_frame)196 union recv_frame *r8712_decryptor(struct _adapter *padapter,
197 				  union recv_frame *precv_frame)
198 {
199 	struct rx_pkt_attrib *prxattrib = &precv_frame->u.hdr.attrib;
200 	struct security_priv *psecuritypriv = &padapter->securitypriv;
201 	union recv_frame *return_packet = precv_frame;
202 
203 	if ((prxattrib->encrypt > 0) && ((prxattrib->bdecrypted == 0) ||
204 					 psecuritypriv->sw_decrypt)) {
205 		psecuritypriv->hw_decrypted = false;
206 		switch (prxattrib->encrypt) {
207 		case _WEP40_:
208 		case _WEP104_:
209 			r8712_wep_decrypt(padapter, (u8 *)precv_frame);
210 			break;
211 		case _TKIP_:
212 			r8712_tkip_decrypt(padapter, (u8 *)precv_frame);
213 			break;
214 		case _AES_:
215 			r8712_aes_decrypt(padapter, (u8 *)precv_frame);
216 			break;
217 		default:
218 				break;
219 		}
220 	} else if (prxattrib->bdecrypted == 1) {
221 		psecuritypriv->hw_decrypted = true;
222 	}
223 	return return_packet;
224 }
225 
226 /*###set the security information in the recv_frame */
r8712_portctrl(struct _adapter * adapter,union recv_frame * precv_frame)227 union recv_frame *r8712_portctrl(struct _adapter *adapter,
228 				 union recv_frame *precv_frame)
229 {
230 	u8 *psta_addr, *ptr;
231 	uint auth_alg;
232 	struct recv_frame_hdr *pfhdr;
233 	struct sta_info *psta;
234 	struct	sta_priv *pstapriv;
235 	union recv_frame *prtnframe;
236 	u16 ether_type;
237 
238 	pstapriv = &adapter->stapriv;
239 	ptr = precv_frame->u.hdr.rx_data;
240 	pfhdr = &precv_frame->u.hdr;
241 	psta_addr = pfhdr->attrib.ta;
242 	psta = r8712_get_stainfo(pstapriv, psta_addr);
243 	auth_alg = adapter->securitypriv.AuthAlgrthm;
244 	if (auth_alg == 2) {
245 		/* get ether_type */
246 		ptr = ptr + pfhdr->attrib.hdrlen + LLC_HEADER_SIZE;
247 		ether_type = get_unaligned_be16(ptr);
248 
249 		if (psta && psta->ieee8021x_blocked) {
250 			/* blocked
251 			 * only accept EAPOL frame
252 			 */
253 			if (ether_type == 0x888e) {
254 				prtnframe = precv_frame;
255 			} else {
256 				/*free this frame*/
257 				r8712_free_recvframe(precv_frame,
258 						     &adapter->recvpriv.free_recv_queue);
259 				prtnframe = NULL;
260 			}
261 		} else {
262 			/* allowed
263 			 * check decryption status, and decrypt the
264 			 * frame if needed
265 			 */
266 			prtnframe = precv_frame;
267 			/* check is the EAPOL frame or not (Rekey) */
268 			if (ether_type == 0x888e) {
269 				/* check Rekey */
270 				prtnframe = precv_frame;
271 			}
272 		}
273 	} else {
274 		prtnframe = precv_frame;
275 	}
276 	return prtnframe;
277 }
278 
recv_decache(union recv_frame * precv_frame,u8 bretry,struct stainfo_rxcache * prxcache)279 static sint recv_decache(union recv_frame *precv_frame, u8 bretry,
280 			 struct stainfo_rxcache *prxcache)
281 {
282 	sint tid = precv_frame->u.hdr.attrib.priority;
283 	u16 seq_ctrl = ((precv_frame->u.hdr.attrib.seq_num & 0xffff) << 4) |
284 			(precv_frame->u.hdr.attrib.frag_num & 0xf);
285 
286 	if (tid > 15)
287 		return _FAIL;
288 	if (seq_ctrl == prxcache->tid_rxseq[tid])
289 		return _FAIL;
290 	prxcache->tid_rxseq[tid] = seq_ctrl;
291 	return _SUCCESS;
292 }
293 
sta2sta_data_frame(struct _adapter * adapter,union recv_frame * precv_frame,struct sta_info ** psta)294 static sint sta2sta_data_frame(struct _adapter *adapter,
295 			       union recv_frame *precv_frame,
296 			       struct sta_info **psta)
297 {
298 	u8 *ptr = precv_frame->u.hdr.rx_data;
299 	sint ret = _SUCCESS;
300 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
301 	struct	sta_priv *pstapriv = &adapter->stapriv;
302 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
303 	u8 *mybssid  = get_bssid(pmlmepriv);
304 	u8 *myhwaddr = myid(&adapter->eeprompriv);
305 	u8 *sta_addr = NULL;
306 	bool bmcast = is_multicast_ether_addr(pattrib->dst);
307 
308 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
309 	    check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
310 		/* filter packets that SA is myself or multicast or broadcast */
311 		if (!memcmp(myhwaddr, pattrib->src, ETH_ALEN))
312 			return _FAIL;
313 		if ((memcmp(myhwaddr, pattrib->dst, ETH_ALEN)) && (!bmcast))
314 			return _FAIL;
315 		if (is_zero_ether_addr(pattrib->bssid) ||
316 		    is_zero_ether_addr(mybssid) ||
317 		    (memcmp(pattrib->bssid, mybssid, ETH_ALEN)))
318 			return _FAIL;
319 		sta_addr = pattrib->src;
320 	} else if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
321 		/* For Station mode, sa and bssid should always be BSSID,
322 		 * and DA is my mac-address
323 		 */
324 		if (memcmp(pattrib->bssid, pattrib->src, ETH_ALEN))
325 			return _FAIL;
326 		sta_addr = pattrib->bssid;
327 	} else if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
328 		if (bmcast) {
329 			/* For AP mode, if DA == MCAST, then BSSID should
330 			 * be also MCAST
331 			 */
332 			if (!is_multicast_ether_addr(pattrib->bssid))
333 				return _FAIL;
334 		} else { /* not mc-frame */
335 			/* For AP mode, if DA is non-MCAST, then it must be
336 			 * BSSID, and bssid == BSSID
337 			 */
338 			if (memcmp(pattrib->bssid, pattrib->dst, ETH_ALEN))
339 				return _FAIL;
340 			sta_addr = pattrib->src;
341 		}
342 	} else if (check_fwstate(pmlmepriv, WIFI_MP_STATE)) {
343 		memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
344 		memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
345 		memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
346 		memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
347 		memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
348 		sta_addr = mybssid;
349 	} else {
350 		ret  = _FAIL;
351 	}
352 	if (bmcast)
353 		*psta = r8712_get_bcmc_stainfo(adapter);
354 	else
355 		*psta = r8712_get_stainfo(pstapriv, sta_addr); /* get ap_info */
356 	if (!*psta) {
357 		if (check_fwstate(pmlmepriv, WIFI_MP_STATE))
358 			adapter->mppriv.rx_pktloss++;
359 		return _FAIL;
360 	}
361 	return ret;
362 }
363 
ap2sta_data_frame(struct _adapter * adapter,union recv_frame * precv_frame,struct sta_info ** psta)364 static sint ap2sta_data_frame(struct _adapter *adapter,
365 			      union recv_frame *precv_frame,
366 			      struct sta_info **psta)
367 {
368 	u8 *ptr = precv_frame->u.hdr.rx_data;
369 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
370 	struct	sta_priv *pstapriv = &adapter->stapriv;
371 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
372 	u8 *mybssid  = get_bssid(pmlmepriv);
373 	u8 *myhwaddr = myid(&adapter->eeprompriv);
374 	bool bmcast = is_multicast_ether_addr(pattrib->dst);
375 
376 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) &&
377 	    check_fwstate(pmlmepriv, _FW_LINKED)) {
378 		/* if NULL-frame, drop packet */
379 		if ((GetFrameSubType(ptr)) == (IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC))
380 			return _FAIL;
381 		/* drop QoS-SubType Data, including QoS NULL,
382 		 * excluding QoS-Data
383 		 */
384 		if ((GetFrameSubType(ptr) & WIFI_QOS_DATA_TYPE) ==
385 		     WIFI_QOS_DATA_TYPE) {
386 			if (GetFrameSubType(ptr) & (BIT(4) | BIT(5) | BIT(6)))
387 				return _FAIL;
388 		}
389 
390 		/* filter packets that SA is myself or multicast or broadcast */
391 		if (!memcmp(myhwaddr, pattrib->src, ETH_ALEN))
392 			return _FAIL;
393 
394 		/* da should be for me */
395 		if ((memcmp(myhwaddr, pattrib->dst, ETH_ALEN)) && (!bmcast))
396 			return _FAIL;
397 		/* check BSSID */
398 		if (is_zero_ether_addr(pattrib->bssid) ||
399 		    is_zero_ether_addr(mybssid) ||
400 		     (memcmp(pattrib->bssid, mybssid, ETH_ALEN)))
401 			return _FAIL;
402 		if (bmcast)
403 			*psta = r8712_get_bcmc_stainfo(adapter);
404 		else
405 			*psta = r8712_get_stainfo(pstapriv, pattrib->bssid);
406 		if (!*psta)
407 			return _FAIL;
408 	} else if (check_fwstate(pmlmepriv, WIFI_MP_STATE) &&
409 		   check_fwstate(pmlmepriv, _FW_LINKED)) {
410 		memcpy(pattrib->dst, GetAddr1Ptr(ptr), ETH_ALEN);
411 		memcpy(pattrib->src, GetAddr2Ptr(ptr), ETH_ALEN);
412 		memcpy(pattrib->bssid, GetAddr3Ptr(ptr), ETH_ALEN);
413 		memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
414 		memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
415 		memcpy(pattrib->bssid,  mybssid, ETH_ALEN);
416 		*psta = r8712_get_stainfo(pstapriv, pattrib->bssid);
417 		if (!*psta)
418 			return _FAIL;
419 	} else {
420 		return _FAIL;
421 	}
422 	return _SUCCESS;
423 }
424 
sta2ap_data_frame(struct _adapter * adapter,union recv_frame * precv_frame,struct sta_info ** psta)425 static sint sta2ap_data_frame(struct _adapter *adapter,
426 			      union recv_frame *precv_frame,
427 			      struct sta_info **psta)
428 {
429 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
430 	struct	sta_priv *pstapriv = &adapter->stapriv;
431 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
432 	unsigned char *mybssid  = get_bssid(pmlmepriv);
433 
434 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
435 		/* For AP mode, if DA is non-MCAST, then it must be BSSID,
436 		 * and bssid == BSSID
437 		 * For AP mode, RA=BSSID, TX=STA(SRC_ADDR), A3=DST_ADDR
438 		 */
439 		if (memcmp(pattrib->bssid, mybssid, ETH_ALEN))
440 			return _FAIL;
441 		*psta = r8712_get_stainfo(pstapriv, pattrib->src);
442 		if (!*psta)
443 			return _FAIL;
444 	}
445 	return _SUCCESS;
446 }
447 
validate_recv_ctrl_frame(struct _adapter * adapter,union recv_frame * precv_frame)448 static sint validate_recv_ctrl_frame(struct _adapter *adapter,
449 				     union recv_frame *precv_frame)
450 {
451 	return _FAIL;
452 }
453 
validate_recv_mgnt_frame(struct _adapter * adapter,union recv_frame * precv_frame)454 static sint validate_recv_mgnt_frame(struct _adapter *adapter,
455 				     union recv_frame *precv_frame)
456 {
457 	return _FAIL;
458 }
459 
validate_recv_data_frame(struct _adapter * adapter,union recv_frame * precv_frame)460 static sint validate_recv_data_frame(struct _adapter *adapter,
461 				     union recv_frame *precv_frame)
462 {
463 	int res;
464 	u8 bretry;
465 	u8 *psa, *pda, *pbssid;
466 	struct sta_info *psta = NULL;
467 	u8 *ptr = precv_frame->u.hdr.rx_data;
468 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
469 	struct security_priv *psecuritypriv = &adapter->securitypriv;
470 
471 	bretry = GetRetry(ptr);
472 	pda = ieee80211_get_DA((struct ieee80211_hdr *)ptr);
473 	psa = ieee80211_get_SA((struct ieee80211_hdr *)ptr);
474 	pbssid = get_hdr_bssid(ptr);
475 	if (!pbssid)
476 		return _FAIL;
477 	memcpy(pattrib->dst, pda, ETH_ALEN);
478 	memcpy(pattrib->src, psa, ETH_ALEN);
479 	memcpy(pattrib->bssid, pbssid, ETH_ALEN);
480 	switch (pattrib->to_fr_ds) {
481 	case 0:
482 		memcpy(pattrib->ra, pda, ETH_ALEN);
483 		memcpy(pattrib->ta, psa, ETH_ALEN);
484 		res = sta2sta_data_frame(adapter, precv_frame, &psta);
485 		break;
486 	case 1:
487 		memcpy(pattrib->ra, pda, ETH_ALEN);
488 		memcpy(pattrib->ta, pbssid, ETH_ALEN);
489 		res = ap2sta_data_frame(adapter, precv_frame, &psta);
490 		break;
491 	case 2:
492 		memcpy(pattrib->ra, pbssid, ETH_ALEN);
493 		memcpy(pattrib->ta, psa, ETH_ALEN);
494 		res = sta2ap_data_frame(adapter, precv_frame, &psta);
495 		break;
496 	case 3:
497 		memcpy(pattrib->ra, GetAddr1Ptr(ptr), ETH_ALEN);
498 		memcpy(pattrib->ta, GetAddr2Ptr(ptr), ETH_ALEN);
499 		return _FAIL;
500 	default:
501 		return _FAIL;
502 	}
503 	if (res == _FAIL)
504 		return _FAIL;
505 	if (!psta)
506 		return _FAIL;
507 	precv_frame->u.hdr.psta = psta;
508 	pattrib->amsdu = 0;
509 	/* parsing QC field */
510 	if (pattrib->qos == 1) {
511 		pattrib->priority = GetPriority((ptr + 24));
512 		pattrib->ack_policy = GetAckpolicy((ptr + 24));
513 		pattrib->amsdu = GetAMsdu((ptr + 24));
514 		pattrib->hdrlen = pattrib->to_fr_ds == 3 ? 32 : 26;
515 	} else {
516 		pattrib->priority = 0;
517 		pattrib->hdrlen = (pattrib->to_fr_ds == 3) ? 30 : 24;
518 	}
519 
520 	if (pattrib->order)/*HT-CTRL 11n*/
521 		pattrib->hdrlen += 4;
522 	precv_frame->u.hdr.preorder_ctrl =
523 			 &psta->recvreorder_ctrl[pattrib->priority];
524 
525 	/* decache, drop duplicate recv packets */
526 	if (recv_decache(precv_frame, bretry, &psta->sta_recvpriv.rxcache) ==
527 	    _FAIL)
528 		return _FAIL;
529 
530 	if (pattrib->privacy) {
531 		GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt,
532 			       is_multicast_ether_addr(pattrib->ra));
533 		SET_ICE_IV_LEN(pattrib->iv_len, pattrib->icv_len,
534 			       pattrib->encrypt);
535 	} else {
536 		pattrib->encrypt = 0;
537 		pattrib->iv_len = pattrib->icv_len = 0;
538 	}
539 	return _SUCCESS;
540 }
541 
r8712_validate_recv_frame(struct _adapter * adapter,union recv_frame * precv_frame)542 sint r8712_validate_recv_frame(struct _adapter *adapter,
543 			       union recv_frame *precv_frame)
544 {
545 	/*shall check frame subtype, to / from ds, da, bssid */
546 	/*then call check if rx seq/frag. duplicated.*/
547 
548 	u8 type;
549 	u8 subtype;
550 	sint retval = _SUCCESS;
551 	struct rx_pkt_attrib *pattrib = &precv_frame->u.hdr.attrib;
552 
553 	u8 *ptr = precv_frame->u.hdr.rx_data;
554 	u8  ver = (unsigned char)(*ptr) & 0x3;
555 
556 	/*add version chk*/
557 	if (ver != 0)
558 		return _FAIL;
559 	type =  GetFrameType(ptr);
560 	subtype = GetFrameSubType(ptr); /*bit(7)~bit(2)*/
561 	pattrib->to_fr_ds = get_tofr_ds(ptr);
562 	pattrib->frag_num = GetFragNum(ptr);
563 	pattrib->seq_num = GetSequence(ptr);
564 	pattrib->pw_save = GetPwrMgt(ptr);
565 	pattrib->mfrag = GetMFrag(ptr);
566 	pattrib->mdata = GetMData(ptr);
567 	pattrib->privacy =  GetPrivacy(ptr);
568 	pattrib->order = GetOrder(ptr);
569 	switch (type) {
570 	case IEEE80211_FTYPE_MGMT:
571 		retval = validate_recv_mgnt_frame(adapter, precv_frame);
572 		break;
573 	case IEEE80211_FTYPE_CTL:
574 		retval = validate_recv_ctrl_frame(adapter, precv_frame);
575 		break;
576 	case IEEE80211_FTYPE_DATA:
577 		pattrib->qos = (subtype & BIT(7)) ? 1 : 0;
578 		retval = validate_recv_data_frame(adapter, precv_frame);
579 		break;
580 	default:
581 		return _FAIL;
582 	}
583 	return retval;
584 }
585 
r8712_wlanhdr_to_ethhdr(union recv_frame * precvframe)586 int r8712_wlanhdr_to_ethhdr(union recv_frame *precvframe)
587 {
588 	/*remove the wlanhdr and add the eth_hdr*/
589 	sint	rmv_len;
590 	u16	len;
591 	u8	bsnaphdr;
592 	u8	*psnap_type;
593 	struct ieee80211_snap_hdr *psnap;
594 	struct _adapter	*adapter = precvframe->u.hdr.adapter;
595 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
596 
597 	u8 *ptr = precvframe->u.hdr.rx_data; /*point to frame_ctrl field*/
598 	struct rx_pkt_attrib *pattrib = &precvframe->u.hdr.attrib;
599 
600 	if (pattrib->encrypt)
601 		recvframe_pull_tail(precvframe, pattrib->icv_len);
602 	psnap = (struct ieee80211_snap_hdr *)(ptr + pattrib->hdrlen +
603 		 pattrib->iv_len);
604 	psnap_type = ptr + pattrib->hdrlen + pattrib->iv_len + SNAP_SIZE;
605 	/* convert hdr + possible LLC headers into Ethernet header */
606 	if ((!memcmp(psnap, (void *)rfc1042_header, SNAP_SIZE) &&
607 	     (memcmp(psnap_type, (void *)SNAP_ETH_TYPE_IPX, 2)) &&
608 	    (memcmp(psnap_type, (void *)SNAP_ETH_TYPE_APPLETALK_AARP, 2))) ||
609 	     !memcmp(psnap, (void *)bridge_tunnel_header, SNAP_SIZE)) {
610 		/* remove RFC1042 or Bridge-Tunnel encapsulation and
611 		 * replace EtherType
612 		 */
613 		bsnaphdr = true;
614 	} else {
615 		/* Leave Ethernet header part of hdr and full payload */
616 		bsnaphdr = false;
617 	}
618 	rmv_len = pattrib->hdrlen + pattrib->iv_len +
619 		  (bsnaphdr ? SNAP_SIZE : 0);
620 	len = precvframe->u.hdr.len - rmv_len;
621 	if (check_fwstate(pmlmepriv, WIFI_MP_STATE)) {
622 		ptr += rmv_len;
623 		*ptr = 0x87;
624 		*(ptr + 1) = 0x12;
625 		/* append rx status for mp test packets */
626 		ptr = recvframe_pull(precvframe, (rmv_len -
627 		      sizeof(struct ethhdr) + 2) - 24);
628 		if (!ptr)
629 			return -ENOMEM;
630 		memcpy(ptr, get_rxmem(precvframe), 24);
631 		ptr += 24;
632 	} else {
633 		ptr = recvframe_pull(precvframe, (rmv_len -
634 		      sizeof(struct ethhdr) + (bsnaphdr ? 2 : 0)));
635 		if (!ptr)
636 			return -ENOMEM;
637 	}
638 
639 	memcpy(ptr, pattrib->dst, ETH_ALEN);
640 	memcpy(ptr + ETH_ALEN, pattrib->src, ETH_ALEN);
641 	if (!bsnaphdr) {
642 		__be16 be_tmp = htons(len);
643 
644 		memcpy(ptr + 12, &be_tmp, 2);
645 	}
646 	return 0;
647 }
648 
r8712_recv_entry(union recv_frame * precvframe)649 void r8712_recv_entry(union recv_frame *precvframe)
650 {
651 	struct _adapter *padapter;
652 	struct recv_priv *precvpriv;
653 
654 	s32 ret = _SUCCESS;
655 
656 	padapter = precvframe->u.hdr.adapter;
657 	precvpriv = &(padapter->recvpriv);
658 
659 	padapter->ledpriv.LedControlHandler(padapter, LED_CTL_RX);
660 
661 	ret = recv_func(padapter, precvframe);
662 	if (ret == _FAIL)
663 		goto _recv_entry_drop;
664 	precvpriv->rx_pkts++;
665 	precvpriv->rx_bytes += (uint)(precvframe->u.hdr.rx_tail -
666 				precvframe->u.hdr.rx_data);
667 	return;
668 _recv_entry_drop:
669 	precvpriv->rx_drop++;
670 	padapter->mppriv.rx_pktloss = precvpriv->rx_drop;
671 }
672