drivers/staging/rtl8192u/ieee80211/rtl819x_BAProc.c

   1 /********************************************************************************************************************************
   2  * This file is created to process BA Action Frame. According to 802.11 spec, there are 3 BA action types at all. And as BA is
   3  * related to TS, this part need some structure defined in QOS side code. Also TX RX is going to be resturctured, so how to send
   4  * ADDBAREQ ADDBARSP and DELBA packet is still on consideration. Temporarily use MANAGE QUEUE instead of Normal Queue.
   5  * WB 2008-05-27
   6  * *****************************************************************************************************************************/
   7 #include "ieee80211.h"
   8 #include "rtl819x_BA.h"
   9
  10 /********************************************************************************************************************
  11  *function:  Activate BA entry. And if Time is nozero, start timer.
  12  *   input:  PBA_RECORD                 pBA  //BA entry to be enabled
  13  *           u16                        Time //indicate time delay.
  14  *  output:  none
  15 ********************************************************************************************************************/
  16 void ActivateBAEntry(struct ieee80211_device *ieee, PBA_RECORD pBA, u16 Time)
  17 {
  18         pBA->bValid = true;
  19         if(Time != 0)
  20                 mod_timer(&pBA->Timer, jiffies + MSECS(Time));
  21 }
  22
  23 /********************************************************************************************************************
  24  *function:  deactivate BA entry, including its timer.
  25  *   input:  PBA_RECORD                 pBA  //BA entry to be disabled
  26  *  output:  none
  27 ********************************************************************************************************************/
  28 void DeActivateBAEntry( struct ieee80211_device *ieee, PBA_RECORD pBA)
  29 {
  30         pBA->bValid = false;
  31         del_timer_sync(&pBA->Timer);
  32 }
  33 /********************************************************************************************************************
  34  *function: deactivete BA entry in Tx Ts, and send DELBA.
  35  *   input:
  36  *           PTX_TS_RECORD              pTxTs //Tx Ts which is to deactivate BA entry.
  37  *  output:  none
  38  *  notice:  As PTX_TS_RECORD structure will be defined in QOS, so wait to be merged. //FIXME
  39 ********************************************************************************************************************/
  40 u8 TxTsDeleteBA( struct ieee80211_device *ieee, PTX_TS_RECORD   pTxTs)
  41 {
  42         PBA_RECORD              pAdmittedBa = &pTxTs->TxAdmittedBARecord;  //These two BA entries must exist in TS structure
  43         PBA_RECORD              pPendingBa = &pTxTs->TxPendingBARecord;
  44         u8                      bSendDELBA = false;
  45
  46         // Delete pending BA
  47         if(pPendingBa->bValid)
  48         {
  49                 DeActivateBAEntry(ieee, pPendingBa);
  50                 bSendDELBA = true;
  51         }
  52
  53         // Delete admitted BA
  54         if(pAdmittedBa->bValid)
  55         {
  56                 DeActivateBAEntry(ieee, pAdmittedBa);
  57                 bSendDELBA = true;
  58         }
  59
  60         return bSendDELBA;
  61 }
  62
  63 /********************************************************************************************************************
  64  *function: deactivete BA entry in Tx Ts, and send DELBA.
  65  *   input:
  66  *           PRX_TS_RECORD              pRxTs //Rx Ts which is to deactivate BA entry.
  67  *  output:  none
  68  *  notice:  As PRX_TS_RECORD structure will be defined in QOS, so wait to be merged. //FIXME, same with above
  69 ********************************************************************************************************************/
  70 u8 RxTsDeleteBA( struct ieee80211_device *ieee, PRX_TS_RECORD   pRxTs)
  71 {
  72         PBA_RECORD              pBa = &pRxTs->RxAdmittedBARecord;
  73         u8                      bSendDELBA = false;
  74
  75         if(pBa->bValid)
  76         {
  77                 DeActivateBAEntry(ieee, pBa);
  78                 bSendDELBA = true;
  79         }
  80
  81         return bSendDELBA;
  82 }
  83
  84 /********************************************************************************************************************
  85  *function: reset BA entry
  86  *   input:
  87  *           PBA_RECORD         pBA //entry to be reset
  88  *  output:  none
  89 ********************************************************************************************************************/
  90 void ResetBaEntry( PBA_RECORD pBA)
  91 {
  92         pBA->bValid                     = false;
  93         pBA->BaParamSet.shortData       = 0;
  94         pBA->BaTimeoutValue             = 0;
  95         pBA->DialogToken                = 0;
  96         pBA->BaStartSeqCtrl.ShortData   = 0;
  97 }
  98 //These functions need porting here or not?
  99 /*******************************************************************************************************************************
 100  *function:  construct ADDBAREQ and ADDBARSP frame here together.
 101  *   input:  u8*                Dst     //ADDBA frame's destination
 102  *           PBA_RECORD         pBA     //BA_RECORD entry which stores the necessary information for BA.
 103  *           u16                StatusCode  //status code in RSP and I will use it to indicate whether it's RSP or REQ(will I?)
 104  *           u8                 type    //indicate whether it's RSP(ACT_ADDBARSP) ow REQ(ACT_ADDBAREQ)
 105  *  output:  none
 106  *  return:  sk_buff*           skb     //return constructed skb to xmit
 107 *******************************************************************************************************************************/
 108 static struct sk_buff *ieee80211_ADDBA(struct ieee80211_device *ieee, u8 *Dst, PBA_RECORD pBA, u16 StatusCode, u8 type)
 109 {
 110         struct sk_buff *skb = NULL;
 111          struct ieee80211_hdr_3addr *BAReq = NULL;
 112         u8 *tag = NULL;
 113         u16 tmp = 0;
 114         u16 len = ieee->tx_headroom + 9;
 115         //category(1) + action field(1) + Dialog Token(1) + BA Parameter Set(2) +  BA Timeout Value(2) +  BA Start SeqCtrl(2)(or StatusCode(2))
 116         IEEE80211_DEBUG(IEEE80211_DL_TRACE | IEEE80211_DL_BA, "========>%s(), frame(%d) sentd to:%pM, ieee->dev:%p\n", __FUNCTION__, type, Dst, ieee->dev);
 117         if (pBA == NULL||ieee == NULL)
 118         {
 119                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "pBA(%p) is NULL or ieee(%p) is NULL\n", pBA, ieee);
 120                 return NULL;
 121         }
 122         skb = dev_alloc_skb(len + sizeof( struct ieee80211_hdr_3addr)); //need to add something others? FIXME
 123         if (skb == NULL)
 124         {
 125                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "can't alloc skb for ADDBA_REQ\n");
 126                 return NULL;
 127         }
 128
 129         memset(skb->data, 0, sizeof( struct ieee80211_hdr_3addr));      //I wonder whether it's necessary. Apparently kernel will not do it when alloc a skb.
 130         skb_reserve(skb, ieee->tx_headroom);
 131
 132         BAReq = ( struct ieee80211_hdr_3addr *) skb_put(skb,sizeof( struct ieee80211_hdr_3addr));
 133
 134         memcpy(BAReq->addr1, Dst, ETH_ALEN);
 135         memcpy(BAReq->addr2, ieee->dev->dev_addr, ETH_ALEN);
 136
 137         memcpy(BAReq->addr3, ieee->current_network.bssid, ETH_ALEN);
 138
 139         BAReq->frame_ctl = cpu_to_le16(IEEE80211_STYPE_MANAGE_ACT); //action frame
 140
 141         //tag += sizeof( struct ieee80211_hdr_3addr); //move to action field
 142         tag = (u8 *)skb_put(skb, 9);
 143         *tag ++= ACT_CAT_BA;
 144         *tag ++= type;
 145         // Dialog Token
 146         *tag ++= pBA->DialogToken;
 147
 148         if (ACT_ADDBARSP == type)
 149         {
 150                 // Status Code
 151                 printk("=====>to send ADDBARSP\n");
 152                 tmp = cpu_to_le16(StatusCode);
 153                 memcpy(tag, (u8 *)&tmp, 2);
 154                 tag += 2;
 155         }
 156         // BA Parameter Set
 157         tmp = cpu_to_le16(pBA->BaParamSet.shortData);
 158         memcpy(tag, (u8 *)&tmp, 2);
 159         tag += 2;
 160         // BA Timeout Value
 161         tmp = cpu_to_le16(pBA->BaTimeoutValue);
 162         memcpy(tag, (u8 *)&tmp, 2);
 163         tag += 2;
 164
 165         if (ACT_ADDBAREQ == type)
 166         {
 167         // BA Start SeqCtrl
 168                 memcpy(tag,(u8 *)&(pBA->BaStartSeqCtrl), 2);
 169                 tag += 2;
 170         }
 171
 172         IEEE80211_DEBUG_DATA(IEEE80211_DL_DATA|IEEE80211_DL_BA, skb->data, skb->len);
 173         return skb;
 174         //return NULL;
 175 }
 176
 177
 178 /********************************************************************************************************************
 179  *function:  construct DELBA frame
 180  *   input:  u8*                dst     //DELBA frame's destination
 181  *           PBA_RECORD         pBA     //BA_RECORD entry which stores the necessary information for BA
 182  *           TR_SELECT          TxRxSelect  //TX RX direction
 183  *           u16                ReasonCode  //status code.
 184  *  output:  none
 185  *  return:  sk_buff*           skb     //return constructed skb to xmit
 186 ********************************************************************************************************************/
 187 static struct sk_buff *ieee80211_DELBA(
 188         struct ieee80211_device  *ieee,
 189         u8                       *dst,
 190         PBA_RECORD               pBA,
 191         TR_SELECT                TxRxSelect,
 192         u16                      ReasonCode
 193         )
 194 {
 195         DELBA_PARAM_SET DelbaParamSet;
 196         struct sk_buff *skb = NULL;
 197          struct ieee80211_hdr_3addr *Delba = NULL;
 198         u8 *tag = NULL;
 199         u16 tmp = 0;
 200         //len = head len + DELBA Parameter Set(2) + Reason Code(2)
 201         u16 len = 6 + ieee->tx_headroom;
 202
 203         if (net_ratelimit())
 204         IEEE80211_DEBUG(IEEE80211_DL_TRACE | IEEE80211_DL_BA, "========>%s(), ReasonCode(%d) sentd to:%pM\n", __FUNCTION__, ReasonCode, dst);
 205
 206         memset(&DelbaParamSet, 0, 2);
 207
 208         DelbaParamSet.field.Initiator   = (TxRxSelect==TX_DIR)?1:0;
 209         DelbaParamSet.field.TID = pBA->BaParamSet.field.TID;
 210
 211         skb = dev_alloc_skb(len + sizeof( struct ieee80211_hdr_3addr)); //need to add something others? FIXME
 212         if (skb == NULL)
 213         {
 214                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "can't alloc skb for ADDBA_REQ\n");
 215                 return NULL;
 216         }
 217 //      memset(skb->data, 0, len+sizeof( struct ieee80211_hdr_3addr));
 218         skb_reserve(skb, ieee->tx_headroom);
 219
 220         Delba = ( struct ieee80211_hdr_3addr *) skb_put(skb,sizeof( struct ieee80211_hdr_3addr));
 221
 222         memcpy(Delba->addr1, dst, ETH_ALEN);
 223         memcpy(Delba->addr2, ieee->dev->dev_addr, ETH_ALEN);
 224         memcpy(Delba->addr3, ieee->current_network.bssid, ETH_ALEN);
 225         Delba->frame_ctl = cpu_to_le16(IEEE80211_STYPE_MANAGE_ACT); //action frame
 226
 227         tag = (u8 *)skb_put(skb, 6);
 228
 229         *tag ++= ACT_CAT_BA;
 230         *tag ++= ACT_DELBA;
 231
 232         // DELBA Parameter Set
 233         tmp = cpu_to_le16(DelbaParamSet.shortData);
 234         memcpy(tag, (u8 *)&tmp, 2);
 235         tag += 2;
 236         // Reason Code
 237         tmp = cpu_to_le16(ReasonCode);
 238         memcpy(tag, (u8 *)&tmp, 2);
 239         tag += 2;
 240
 241         IEEE80211_DEBUG_DATA(IEEE80211_DL_DATA|IEEE80211_DL_BA, skb->data, skb->len);
 242         if (net_ratelimit())
 243         IEEE80211_DEBUG(IEEE80211_DL_TRACE | IEEE80211_DL_BA, "<=====%s()\n", __FUNCTION__);
 244         return skb;
 245 }
 246
 247 /********************************************************************************************************************
 248  *function: send ADDBAReq frame out
 249  *   input:  u8*                dst     //ADDBAReq frame's destination
 250  *           PBA_RECORD         pBA     //BA_RECORD entry which stores the necessary information for BA
 251  *  output:  none
 252  *  notice: If any possible, please hide pBA in ieee. And temporarily use Manage Queue as softmac_mgmt_xmit() usually does
 253 ********************************************************************************************************************/
 254 static void ieee80211_send_ADDBAReq(struct ieee80211_device *ieee,
 255                                     u8 *dst, PBA_RECORD pBA)
 256 {
 257         struct sk_buff *skb = NULL;
 258         skb = ieee80211_ADDBA(ieee, dst, pBA, 0, ACT_ADDBAREQ); //construct ACT_ADDBAREQ frames so set statuscode zero.
 259
 260         if (skb)
 261         {
 262                 softmac_mgmt_xmit(skb, ieee);
 263                 //add statistic needed here.
 264                 //and skb will be freed in softmac_mgmt_xmit(), so omit all dev_kfree_skb_any() outside softmac_mgmt_xmit()
 265                 //WB
 266         }
 267         else
 268         {
 269                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "alloc skb error in function %s()\n", __FUNCTION__);
 270         }
 271         return;
 272 }
 273
 274 /********************************************************************************************************************
 275  *function: send ADDBARSP frame out
 276  *   input:  u8*                dst     //DELBA frame's destination
 277  *           PBA_RECORD         pBA     //BA_RECORD entry which stores the necessary information for BA
 278  *           u16                StatusCode //RSP StatusCode
 279  *  output:  none
 280  *  notice: If any possible, please hide pBA in ieee. And temporarily use Manage Queue as softmac_mgmt_xmit() usually does
 281 ********************************************************************************************************************/
 282 static void ieee80211_send_ADDBARsp(struct ieee80211_device *ieee, u8 *dst,
 283                                     PBA_RECORD pBA, u16 StatusCode)
 284 {
 285         struct sk_buff *skb = NULL;
 286         skb = ieee80211_ADDBA(ieee, dst, pBA, StatusCode, ACT_ADDBARSP); //construct ACT_ADDBARSP frames
 287         if (skb)
 288         {
 289                 softmac_mgmt_xmit(skb, ieee);
 290                 //same above
 291         }
 292         else
 293         {
 294                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "alloc skb error in function %s()\n", __FUNCTION__);
 295         }
 296
 297         return;
 298
 299 }
 300 /********************************************************************************************************************
 301  *function: send ADDBARSP frame out
 302  *   input:  u8*                dst     //DELBA frame's destination
 303  *           PBA_RECORD         pBA     //BA_RECORD entry which stores the necessary information for BA
 304  *           TR_SELECT          TxRxSelect //TX or RX
 305  *           u16                ReasonCode //DEL ReasonCode
 306  *  output:  none
 307  *  notice: If any possible, please hide pBA in ieee. And temporarily use Manage Queue as softmac_mgmt_xmit() usually does
 308 ********************************************************************************************************************/
 309
 310 void ieee80211_send_DELBA(struct ieee80211_device *ieee, u8 *dst, PBA_RECORD pBA, TR_SELECT TxRxSelect, u16 ReasonCode)
 311 {
 312         struct sk_buff *skb = NULL;
 313         skb = ieee80211_DELBA(ieee, dst, pBA, TxRxSelect, ReasonCode); //construct ACT_ADDBARSP frames
 314         if (skb)
 315         {
 316                 softmac_mgmt_xmit(skb, ieee);
 317                 //same above
 318         }
 319         else
 320         {
 321                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "alloc skb error in function %s()\n", __FUNCTION__);
 322         }
 323         return ;
 324 }
 325
 326 /********************************************************************************************************************
 327  *function: RX ADDBAReq
 328  *   input:  struct sk_buff *   skb     //incoming ADDBAReq skb.
 329  *  return:  0(pass), other(fail)
 330  *  notice:  As this function need support of QOS, I comment some code out. And when qos is ready, this code need to be support.
 331 ********************************************************************************************************************/
 332 int ieee80211_rx_ADDBAReq( struct ieee80211_device *ieee, struct sk_buff *skb)
 333 {
 334          struct ieee80211_hdr_3addr *req = NULL;
 335         u16 rc = 0;
 336         u8 *dst = NULL, *pDialogToken = NULL, *tag = NULL;
 337         PBA_RECORD pBA = NULL;
 338         PBA_PARAM_SET   pBaParamSet = NULL;
 339         u16 *pBaTimeoutVal = NULL;
 340         PSEQUENCE_CONTROL pBaStartSeqCtrl = NULL;
 341         PRX_TS_RECORD   pTS = NULL;
 342
 343         if (skb->len < sizeof( struct ieee80211_hdr_3addr) + 9)
 344         {
 345                 IEEE80211_DEBUG(IEEE80211_DL_ERR, " Invalid skb len in BAREQ(%d / %zu)\n", skb->len,    (sizeof( struct ieee80211_hdr_3addr) + 9));
 346                 return -1;
 347         }
 348
 349         IEEE80211_DEBUG_DATA(IEEE80211_DL_DATA|IEEE80211_DL_BA, skb->data, skb->len);
 350
 351         req = ( struct ieee80211_hdr_3addr *) skb->data;
 352         tag = (u8 *)req;
 353         dst = (u8 *)(&req->addr2[0]);
 354         tag += sizeof( struct ieee80211_hdr_3addr);
 355         pDialogToken = tag + 2;  //category+action
 356         pBaParamSet = (PBA_PARAM_SET)(tag + 3);   //+DialogToken
 357         pBaTimeoutVal = (u16 *)(tag + 5);
 358         pBaStartSeqCtrl = (PSEQUENCE_CONTROL)(req + 7);
 359
 360         printk("====================>rx ADDBAREQ from :%pM\n", dst);
 361 //some other capability is not ready now.
 362         if(     (ieee->current_network.qos_data.active == 0) ||
 363                 (ieee->pHTInfo->bCurrentHTSupport == false)) //||
 364         //      (ieee->pStaQos->bEnableRxImmBA == false)        )
 365         {
 366                 rc = ADDBA_STATUS_REFUSED;
 367                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "Failed to reply on ADDBA_REQ as some capability is not ready(%d, %d)\n", ieee->current_network.qos_data.active, ieee->pHTInfo->bCurrentHTSupport);
 368                 goto OnADDBAReq_Fail;
 369         }
 370         // Search for related traffic stream.
 371         // If there is no matched TS, reject the ADDBA request.
 372         if(     !GetTs(
 373                         ieee,
 374                         (PTS_COMMON_INFO *)(&pTS),
 375                         dst,
 376                         (u8)(pBaParamSet->field.TID),
 377                         RX_DIR,
 378                         true)   )
 379         {
 380                 rc = ADDBA_STATUS_REFUSED;
 381                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "can't get TS in %s()\n", __FUNCTION__);
 382                 goto OnADDBAReq_Fail;
 383         }
 384         pBA = &pTS->RxAdmittedBARecord;
 385         // To Determine the ADDBA Req content
 386         // We can do much more check here, including BufferSize, AMSDU_Support, Policy, StartSeqCtrl...
 387         // I want to check StartSeqCtrl to make sure when we start aggregation!!!
 388         //
 389         if(pBaParamSet->field.BAPolicy == BA_POLICY_DELAYED)
 390         {
 391                 rc = ADDBA_STATUS_INVALID_PARAM;
 392                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "BA Policy is not correct in %s()\n", __FUNCTION__);
 393                 goto OnADDBAReq_Fail;
 394         }
 395                 // Admit the ADDBA Request
 396         //
 397         DeActivateBAEntry(ieee, pBA);
 398         pBA->DialogToken = *pDialogToken;
 399         pBA->BaParamSet = *pBaParamSet;
 400         pBA->BaTimeoutValue = *pBaTimeoutVal;
 401         pBA->BaStartSeqCtrl = *pBaStartSeqCtrl;
 402         //for half N mode we only aggregate 1 frame
 403         if (ieee->GetHalfNmodeSupportByAPsHandler(ieee->dev))
 404         pBA->BaParamSet.field.BufferSize = 1;
 405         else
 406         pBA->BaParamSet.field.BufferSize = 32;
 407         ActivateBAEntry(ieee, pBA, pBA->BaTimeoutValue);
 408         ieee80211_send_ADDBARsp(ieee, dst, pBA, ADDBA_STATUS_SUCCESS);
 409
 410         // End of procedure.
 411         return 0;
 412
 413 OnADDBAReq_Fail:
 414         {
 415                 BA_RECORD       BA;
 416                 BA.BaParamSet = *pBaParamSet;
 417                 BA.BaTimeoutValue = *pBaTimeoutVal;
 418                 BA.DialogToken = *pDialogToken;
 419                 BA.BaParamSet.field.BAPolicy = BA_POLICY_IMMEDIATE;
 420                 ieee80211_send_ADDBARsp(ieee, dst, &BA, rc);
 421                 return 0; //we send RSP out.
 422         }
 423
 424 }
 425
 426 /********************************************************************************************************************
 427  *function: RX ADDBARSP
 428  *   input:  struct sk_buff *   skb     //incoming ADDBAReq skb.
 429  *  return:  0(pass), other(fail)
 430  *  notice:  As this function need support of QOS, I comment some code out. And when qos is ready, this code need to be support.
 431 ********************************************************************************************************************/
 432 int ieee80211_rx_ADDBARsp( struct ieee80211_device *ieee, struct sk_buff *skb)
 433 {
 434          struct ieee80211_hdr_3addr *rsp = NULL;
 435         PBA_RECORD              pPendingBA, pAdmittedBA;
 436         PTX_TS_RECORD           pTS = NULL;
 437         u8 *dst = NULL, *pDialogToken = NULL, *tag = NULL;
 438         u16 *pStatusCode = NULL, *pBaTimeoutVal = NULL;
 439         PBA_PARAM_SET           pBaParamSet = NULL;
 440         u16                     ReasonCode;
 441
 442         if (skb->len < sizeof( struct ieee80211_hdr_3addr) + 9)
 443         {
 444                 IEEE80211_DEBUG(IEEE80211_DL_ERR, " Invalid skb len in BARSP(%d / %zu)\n", skb->len,    (sizeof( struct ieee80211_hdr_3addr) + 9));
 445                 return -1;
 446         }
 447         rsp = ( struct ieee80211_hdr_3addr *)skb->data;
 448         tag = (u8 *)rsp;
 449         dst = (u8 *)(&rsp->addr2[0]);
 450         tag += sizeof( struct ieee80211_hdr_3addr);
 451         pDialogToken = tag + 2;
 452         pStatusCode = (u16 *)(tag + 3);
 453         pBaParamSet = (PBA_PARAM_SET)(tag + 5);
 454         pBaTimeoutVal = (u16 *)(tag + 7);
 455
 456         // Check the capability
 457         // Since we can always receive A-MPDU, we just check if it is under HT mode.
 458         if(     ieee->current_network.qos_data.active == 0  ||
 459                 ieee->pHTInfo->bCurrentHTSupport == false ||
 460                 ieee->pHTInfo->bCurrentAMPDUEnable == false )
 461         {
 462                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "reject to ADDBA_RSP as some capability is not ready(%d, %d, %d)\n",ieee->current_network.qos_data.active, ieee->pHTInfo->bCurrentHTSupport, ieee->pHTInfo->bCurrentAMPDUEnable);
 463                 ReasonCode = DELBA_REASON_UNKNOWN_BA;
 464                 goto OnADDBARsp_Reject;
 465         }
 466
 467
 468         //
 469         // Search for related TS.
 470         // If there is no TS found, we wil reject ADDBA Rsp by sending DELBA frame.
 471         //
 472         if (!GetTs(
 473                         ieee,
 474                         (PTS_COMMON_INFO *)(&pTS),
 475                         dst,
 476                         (u8)(pBaParamSet->field.TID),
 477                         TX_DIR,
 478                         false)  )
 479         {
 480                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "can't get TS in %s()\n", __FUNCTION__);
 481                 ReasonCode = DELBA_REASON_UNKNOWN_BA;
 482                 goto OnADDBARsp_Reject;
 483         }
 484
 485         pTS->bAddBaReqInProgress = false;
 486         pPendingBA = &pTS->TxPendingBARecord;
 487         pAdmittedBA = &pTS->TxAdmittedBARecord;
 488
 489
 490         //
 491         // Check if related BA is waiting for setup.
 492         // If not, reject by sending DELBA frame.
 493         //
 494         if((pAdmittedBA->bValid==true))
 495         {
 496                 // Since BA is already setup, we ignore all other ADDBA Response.
 497                 IEEE80211_DEBUG(IEEE80211_DL_BA, "OnADDBARsp(): Recv ADDBA Rsp. Drop because already admit it! \n");
 498                 return -1;
 499         }
 500         else if((pPendingBA->bValid == false) ||(*pDialogToken != pPendingBA->DialogToken))
 501         {
 502                 IEEE80211_DEBUG(IEEE80211_DL_ERR,  "OnADDBARsp(): Recv ADDBA Rsp. BA invalid, DELBA! \n");
 503                 ReasonCode = DELBA_REASON_UNKNOWN_BA;
 504                 goto OnADDBARsp_Reject;
 505         }
 506         else
 507         {
 508                 IEEE80211_DEBUG(IEEE80211_DL_BA, "OnADDBARsp(): Recv ADDBA Rsp. BA is admitted! Status code:%X\n", *pStatusCode);
 509                 DeActivateBAEntry(ieee, pPendingBA);
 510         }
 511
 512
 513         if(*pStatusCode == ADDBA_STATUS_SUCCESS)
 514         {
 515                 //
 516                 // Determine ADDBA Rsp content here.
 517                 // We can compare the value of BA parameter set that Peer returned and Self sent.
 518                 // If it is OK, then admitted. Or we can send DELBA to cancel BA mechanism.
 519                 //
 520                 if(pBaParamSet->field.BAPolicy == BA_POLICY_DELAYED)
 521                 {
 522                         // Since this is a kind of ADDBA failed, we delay next ADDBA process.
 523                         pTS->bAddBaReqDelayed = true;
 524                         DeActivateBAEntry(ieee, pAdmittedBA);
 525                         ReasonCode = DELBA_REASON_END_BA;
 526                         goto OnADDBARsp_Reject;
 527                 }
 528
 529
 530                 //
 531                 // Admitted condition
 532                 //
 533                 pAdmittedBA->DialogToken = *pDialogToken;
 534                 pAdmittedBA->BaTimeoutValue = *pBaTimeoutVal;
 535                 pAdmittedBA->BaStartSeqCtrl = pPendingBA->BaStartSeqCtrl;
 536                 pAdmittedBA->BaParamSet = *pBaParamSet;
 537                 DeActivateBAEntry(ieee, pAdmittedBA);
 538                 ActivateBAEntry(ieee, pAdmittedBA, *pBaTimeoutVal);
 539         }
 540         else
 541         {
 542                 // Delay next ADDBA process.
 543                 pTS->bAddBaReqDelayed = true;
 544         }
 545
 546         // End of procedure
 547         return 0;
 548
 549 OnADDBARsp_Reject:
 550         {
 551                 BA_RECORD       BA;
 552                 BA.BaParamSet = *pBaParamSet;
 553                 ieee80211_send_DELBA(ieee, dst, &BA, TX_DIR, ReasonCode);
 554                 return 0;
 555         }
 556
 557 }
 558
 559 /********************************************************************************************************************
 560  *function: RX DELBA
 561  *   input:  struct sk_buff *   skb     //incoming ADDBAReq skb.
 562  *  return:  0(pass), other(fail)
 563  *  notice:  As this function need support of QOS, I comment some code out. And when qos is ready, this code need to be support.
 564 ********************************************************************************************************************/
 565 int ieee80211_rx_DELBA(struct ieee80211_device *ieee,struct sk_buff *skb)
 566 {
 567          struct ieee80211_hdr_3addr *delba = NULL;
 568         PDELBA_PARAM_SET        pDelBaParamSet = NULL;
 569         u16                     *pReasonCode = NULL;
 570         u8                      *dst = NULL;
 571
 572         if (skb->len < sizeof( struct ieee80211_hdr_3addr) + 6)
 573         {
 574                 IEEE80211_DEBUG(IEEE80211_DL_ERR, " Invalid skb len in DELBA(%d / %zu)\n", skb->len,    (sizeof( struct ieee80211_hdr_3addr) + 6));
 575                 return -1;
 576         }
 577
 578         if(ieee->current_network.qos_data.active == 0 ||
 579                 ieee->pHTInfo->bCurrentHTSupport == false )
 580         {
 581                 IEEE80211_DEBUG(IEEE80211_DL_ERR, "received DELBA while QOS or HT is not supported(%d, %d)\n",ieee->current_network.qos_data.active, ieee->pHTInfo->bCurrentHTSupport);
 582                 return -1;
 583         }
 584
 585         IEEE80211_DEBUG_DATA(IEEE80211_DL_DATA|IEEE80211_DL_BA, skb->data, skb->len);
 586         delba = ( struct ieee80211_hdr_3addr *)skb->data;
 587         dst = (u8 *)(&delba->addr2[0]);
 588         delba += sizeof( struct ieee80211_hdr_3addr);
 589         pDelBaParamSet = (PDELBA_PARAM_SET)(delba+2);
 590         pReasonCode = (u16 *)(delba+4);
 591
 592         if(pDelBaParamSet->field.Initiator == 1)
 593         {
 594                 PRX_TS_RECORD   pRxTs;
 595
 596                 if( !GetTs(
 597                                 ieee,
 598                                 (PTS_COMMON_INFO *)&pRxTs,
 599                                 dst,
 600                                 (u8)pDelBaParamSet->field.TID,
 601                                 RX_DIR,
 602                                 false)  )
 603                 {
 604                         IEEE80211_DEBUG(IEEE80211_DL_ERR,  "can't get TS for RXTS in %s()\n", __FUNCTION__);
 605                         return -1;
 606                 }
 607
 608                 RxTsDeleteBA(ieee, pRxTs);
 609         }
 610         else
 611         {
 612                 PTX_TS_RECORD   pTxTs;
 613
 614                 if(!GetTs(
 615                         ieee,
 616                         (PTS_COMMON_INFO *)&pTxTs,
 617                         dst,
 618                         (u8)pDelBaParamSet->field.TID,
 619                         TX_DIR,
 620                         false)  )
 621                 {
 622                         IEEE80211_DEBUG(IEEE80211_DL_ERR,  "can't get TS for TXTS in %s()\n", __FUNCTION__);
 623                         return -1;
 624                 }
 625
 626                 pTxTs->bUsingBa = false;
 627                 pTxTs->bAddBaReqInProgress = false;
 628                 pTxTs->bAddBaReqDelayed = false;
 629                 del_timer_sync(&pTxTs->TsAddBaTimer);
 630                 //PlatformCancelTimer(Adapter, &pTxTs->TsAddBaTimer);
 631                 TxTsDeleteBA(ieee, pTxTs);
 632         }
 633         return 0;
 634 }
 635
 636 //
 637 // ADDBA initiate. This can only be called by TX side.
 638 //
 639 void
 640 TsInitAddBA(
 641         struct ieee80211_device *ieee,
 642         PTX_TS_RECORD   pTS,
 643         u8              Policy,
 644         u8              bOverwritePending
 645         )
 646 {
 647         PBA_RECORD                      pBA = &pTS->TxPendingBARecord;
 648
 649         if(pBA->bValid==true && bOverwritePending==false)
 650                 return;
 651
 652         // Set parameters to "Pending" variable set
 653         DeActivateBAEntry(ieee, pBA);
 654
 655         pBA->DialogToken++;                                             // DialogToken: Only keep the latest dialog token
 656         pBA->BaParamSet.field.AMSDU_Support = 0;        // Do not support A-MSDU with A-MPDU now!!
 657         pBA->BaParamSet.field.BAPolicy = Policy;        // Policy: Delayed or Immediate
 658         pBA->BaParamSet.field.TID = pTS->TsCommonInfo.TSpec.f.TSInfo.field.ucTSID;      // TID
 659         // BufferSize: This need to be set according to A-MPDU vector
 660         pBA->BaParamSet.field.BufferSize = 32;          // BufferSize: This need to be set according to A-MPDU vector
 661         pBA->BaTimeoutValue = 0;                                        // Timeout value: Set 0 to disable Timer
 662         pBA->BaStartSeqCtrl.field.SeqNum = (pTS->TxCurSeq + 3) % 4096;  // Block Ack will start after 3 packets later.
 663
 664         ActivateBAEntry(ieee, pBA, BA_SETUP_TIMEOUT);
 665
 666         ieee80211_send_ADDBAReq(ieee, pTS->TsCommonInfo.Addr, pBA);
 667 }
 668
 669 void
 670 TsInitDelBA( struct ieee80211_device *ieee, PTS_COMMON_INFO pTsCommonInfo, TR_SELECT TxRxSelect)
 671 {
 672
 673         if(TxRxSelect == TX_DIR)
 674         {
 675                 PTX_TS_RECORD   pTxTs = (PTX_TS_RECORD)pTsCommonInfo;
 676
 677                 if(TxTsDeleteBA(ieee, pTxTs))
 678                         ieee80211_send_DELBA(
 679                                 ieee,
 680                                 pTsCommonInfo->Addr,
 681                                 (pTxTs->TxAdmittedBARecord.bValid)?(&pTxTs->TxAdmittedBARecord):(&pTxTs->TxPendingBARecord),
 682                                 TxRxSelect,
 683                                 DELBA_REASON_END_BA);
 684         }
 685         else if(TxRxSelect == RX_DIR)
 686         {
 687                 PRX_TS_RECORD   pRxTs = (PRX_TS_RECORD)pTsCommonInfo;
 688                 if(RxTsDeleteBA(ieee, pRxTs))
 689                         ieee80211_send_DELBA(
 690                                 ieee,
 691                                 pTsCommonInfo->Addr,
 692                                 &pRxTs->RxAdmittedBARecord,
 693                                 TxRxSelect,
 694                                 DELBA_REASON_END_BA     );
 695         }
 696 }
 697 /********************************************************************************************************************
 698  *function:  BA setup timer
 699  *   input:  unsigned long       data           //acturally we send TX_TS_RECORD or RX_TS_RECORD to these timer
 700  *  return:  NULL
 701  *  notice:
 702 ********************************************************************************************************************/
 703 void BaSetupTimeOut(unsigned long data)
 704 {
 705         PTX_TS_RECORD   pTxTs = (PTX_TS_RECORD)data;
 706
 707         pTxTs->bAddBaReqInProgress = false;
 708         pTxTs->bAddBaReqDelayed = true;
 709         pTxTs->TxPendingBARecord.bValid = false;
 710 }
 711
 712 void TxBaInactTimeout(unsigned long data)
 713 {
 714         PTX_TS_RECORD   pTxTs = (PTX_TS_RECORD)data;
 715         struct ieee80211_device *ieee = container_of(pTxTs, struct ieee80211_device, TxTsRecord[pTxTs->num]);
 716         TxTsDeleteBA(ieee, pTxTs);
 717         ieee80211_send_DELBA(
 718                 ieee,
 719                 pTxTs->TsCommonInfo.Addr,
 720                 &pTxTs->TxAdmittedBARecord,
 721                 TX_DIR,
 722                 DELBA_REASON_TIMEOUT);
 723 }
 724
 725 void RxBaInactTimeout(unsigned long data)
 726 {
 727         PRX_TS_RECORD   pRxTs = (PRX_TS_RECORD)data;
 728         struct ieee80211_device *ieee = container_of(pRxTs, struct ieee80211_device, RxTsRecord[pRxTs->num]);
 729
 730         RxTsDeleteBA(ieee, pRxTs);
 731         ieee80211_send_DELBA(
 732                 ieee,
 733                 pRxTs->TsCommonInfo.Addr,
 734                 &pRxTs->RxAdmittedBARecord,
 735                 RX_DIR,
 736                 DELBA_REASON_TIMEOUT);
 737         return ;
 738 }