1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Ultra Wide Band
4  * Information Element Handling
5  *
6  * Copyright (C) 2005-2006 Intel Corporation
7  * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
8  * Reinette Chatre <reinette.chatre@intel.com>
9  *
10  * FIXME: docs
11  */
12 
13 #include <linux/slab.h>
14 #include <linux/export.h>
15 #include "uwb-internal.h"
16 
17 /**
18  * uwb_ie_next - get the next IE in a buffer
19  * @ptr: start of the buffer containing the IE data
20  * @len: length of the buffer
21  *
22  * Both @ptr and @len are updated so subsequent calls to uwb_ie_next()
23  * will get the next IE.
24  *
25  * NULL is returned (and @ptr and @len will not be updated) if there
26  * are no more IEs in the buffer or the buffer is too short.
27  */
uwb_ie_next(void ** ptr,size_t * len)28 struct uwb_ie_hdr *uwb_ie_next(void **ptr, size_t *len)
29 {
30 	struct uwb_ie_hdr *hdr;
31 	size_t ie_len;
32 
33 	if (*len < sizeof(struct uwb_ie_hdr))
34 		return NULL;
35 
36 	hdr = *ptr;
37 	ie_len = sizeof(struct uwb_ie_hdr) + hdr->length;
38 
39 	if (*len < ie_len)
40 		return NULL;
41 
42 	*ptr += ie_len;
43 	*len -= ie_len;
44 
45 	return hdr;
46 }
47 EXPORT_SYMBOL_GPL(uwb_ie_next);
48 
49 /**
50  * uwb_ie_dump_hex - print IEs to a character buffer
51  * @ies: the IEs to print.
52  * @len: length of all the IEs.
53  * @buf: the destination buffer.
54  * @size: size of @buf.
55  *
56  * Returns the number of characters written.
57  */
uwb_ie_dump_hex(const struct uwb_ie_hdr * ies,size_t len,char * buf,size_t size)58 int uwb_ie_dump_hex(const struct uwb_ie_hdr *ies, size_t len,
59 		    char *buf, size_t size)
60 {
61 	void *ptr;
62 	const struct uwb_ie_hdr *ie;
63 	int r = 0;
64 	u8 *d;
65 
66 	ptr = (void *)ies;
67 	for (;;) {
68 		ie = uwb_ie_next(&ptr, &len);
69 		if (!ie)
70 			break;
71 
72 		r += scnprintf(buf + r, size - r, "%02x %02x",
73 			       (unsigned)ie->element_id,
74 			       (unsigned)ie->length);
75 		d = (uint8_t *)ie + sizeof(struct uwb_ie_hdr);
76 		while (d != ptr && r < size)
77 			r += scnprintf(buf + r, size - r, " %02x", (unsigned)*d++);
78 		if (r < size)
79 			buf[r++] = '\n';
80 	};
81 
82 	return r;
83 }
84 
85 /**
86  * Get the IEs that a radio controller is sending in its beacon
87  *
88  * @uwb_rc:  UWB Radio Controller
89  * @returns: Size read from the system
90  *
91  * We don't need to lock the uwb_rc's mutex because we don't modify
92  * anything. Once done with the iedata buffer, call
93  * uwb_rc_ie_release(iedata). Don't call kfree on it.
94  */
95 static
uwb_rc_get_ie(struct uwb_rc * uwb_rc,struct uwb_rc_evt_get_ie ** pget_ie)96 ssize_t uwb_rc_get_ie(struct uwb_rc *uwb_rc, struct uwb_rc_evt_get_ie **pget_ie)
97 {
98 	ssize_t result;
99 	struct device *dev = &uwb_rc->uwb_dev.dev;
100 	struct uwb_rccb *cmd = NULL;
101 	struct uwb_rceb *reply = NULL;
102 	struct uwb_rc_evt_get_ie *get_ie;
103 
104 	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
105 	if (cmd == NULL)
106 		return -ENOMEM;
107 
108 	cmd->bCommandType = UWB_RC_CET_GENERAL;
109 	cmd->wCommand = cpu_to_le16(UWB_RC_CMD_GET_IE);
110 	result = uwb_rc_vcmd(uwb_rc, "GET_IE", cmd, sizeof(*cmd),
111 			     UWB_RC_CET_GENERAL, UWB_RC_CMD_GET_IE,
112 			     &reply);
113 	kfree(cmd);
114 	if (result < 0)
115 		return result;
116 
117 	get_ie = container_of(reply, struct uwb_rc_evt_get_ie, rceb);
118 	if (result < sizeof(*get_ie)) {
119 		dev_err(dev, "not enough data returned for decoding GET IE "
120 			"(%zu bytes received vs %zu needed)\n",
121 			result, sizeof(*get_ie));
122 		return -EINVAL;
123 	} else if (result < sizeof(*get_ie) + le16_to_cpu(get_ie->wIELength)) {
124 		dev_err(dev, "not enough data returned for decoding GET IE "
125 			"payload (%zu bytes received vs %zu needed)\n", result,
126 			sizeof(*get_ie) + le16_to_cpu(get_ie->wIELength));
127 		return -EINVAL;
128 	}
129 
130 	*pget_ie = get_ie;
131 	return result;
132 }
133 
134 
135 /**
136  * Replace all IEs currently being transmitted by a device
137  *
138  * @cmd:    pointer to the SET-IE command with the IEs to set
139  * @size:   size of @buf
140  */
uwb_rc_set_ie(struct uwb_rc * rc,struct uwb_rc_cmd_set_ie * cmd)141 int uwb_rc_set_ie(struct uwb_rc *rc, struct uwb_rc_cmd_set_ie *cmd)
142 {
143 	int result;
144 	struct device *dev = &rc->uwb_dev.dev;
145 	struct uwb_rc_evt_set_ie reply;
146 
147 	reply.rceb.bEventType = UWB_RC_CET_GENERAL;
148 	reply.rceb.wEvent = UWB_RC_CMD_SET_IE;
149 	result = uwb_rc_cmd(rc, "SET-IE", &cmd->rccb,
150 			    sizeof(*cmd) + le16_to_cpu(cmd->wIELength),
151 			    &reply.rceb, sizeof(reply));
152 	if (result < 0)
153 		goto error_cmd;
154 	else if (result != sizeof(reply)) {
155 		dev_err(dev, "SET-IE: not enough data to decode reply "
156 			"(%d bytes received vs %zu needed)\n",
157 			result, sizeof(reply));
158 		result = -EIO;
159 	} else if (reply.bResultCode != UWB_RC_RES_SUCCESS) {
160 		dev_err(dev, "SET-IE: command execution failed: %s (%d)\n",
161 			uwb_rc_strerror(reply.bResultCode), reply.bResultCode);
162 		result = -EIO;
163 	} else
164 		result = 0;
165 error_cmd:
166 	return result;
167 }
168 
169 /* Cleanup the whole IE management subsystem */
uwb_rc_ie_init(struct uwb_rc * uwb_rc)170 void uwb_rc_ie_init(struct uwb_rc *uwb_rc)
171 {
172 	mutex_init(&uwb_rc->ies_mutex);
173 }
174 
175 
176 /**
177  * uwb_rc_ie_setup - setup a radio controller's IE manager
178  * @uwb_rc: the radio controller.
179  *
180  * The current set of IEs are obtained from the hardware with a GET-IE
181  * command (since the radio controller is not yet beaconing this will
182  * be just the hardware's MAC and PHY Capability IEs).
183  *
184  * Returns 0 on success; -ve on an error.
185  */
uwb_rc_ie_setup(struct uwb_rc * uwb_rc)186 int uwb_rc_ie_setup(struct uwb_rc *uwb_rc)
187 {
188 	struct uwb_rc_evt_get_ie *ie_info = NULL;
189 	int capacity;
190 
191 	capacity = uwb_rc_get_ie(uwb_rc, &ie_info);
192 	if (capacity < 0)
193 		return capacity;
194 
195 	mutex_lock(&uwb_rc->ies_mutex);
196 
197 	uwb_rc->ies = (struct uwb_rc_cmd_set_ie *)ie_info;
198 	uwb_rc->ies->rccb.bCommandType = UWB_RC_CET_GENERAL;
199 	uwb_rc->ies->rccb.wCommand = cpu_to_le16(UWB_RC_CMD_SET_IE);
200 	uwb_rc->ies_capacity = capacity;
201 
202 	mutex_unlock(&uwb_rc->ies_mutex);
203 
204 	return 0;
205 }
206 
207 
208 /* Cleanup the whole IE management subsystem */
uwb_rc_ie_release(struct uwb_rc * uwb_rc)209 void uwb_rc_ie_release(struct uwb_rc *uwb_rc)
210 {
211 	kfree(uwb_rc->ies);
212 	uwb_rc->ies = NULL;
213 	uwb_rc->ies_capacity = 0;
214 }
215 
216 
uwb_rc_ie_add_one(struct uwb_rc * rc,const struct uwb_ie_hdr * new_ie)217 static int uwb_rc_ie_add_one(struct uwb_rc *rc, const struct uwb_ie_hdr *new_ie)
218 {
219 	struct uwb_rc_cmd_set_ie *new_ies;
220 	void *ptr, *prev_ie;
221 	struct uwb_ie_hdr *ie;
222 	size_t length, new_ie_len, new_capacity, size, prev_size;
223 
224 	length = le16_to_cpu(rc->ies->wIELength);
225 	new_ie_len = sizeof(struct uwb_ie_hdr) + new_ie->length;
226 	new_capacity = sizeof(struct uwb_rc_cmd_set_ie) + length + new_ie_len;
227 
228 	if (new_capacity > rc->ies_capacity) {
229 		new_ies = krealloc(rc->ies, new_capacity, GFP_KERNEL);
230 		if (!new_ies)
231 			return -ENOMEM;
232 		rc->ies = new_ies;
233 	}
234 
235 	ptr = rc->ies->IEData;
236 	size = length;
237 	for (;;) {
238 		prev_ie = ptr;
239 		prev_size = size;
240 		ie = uwb_ie_next(&ptr, &size);
241 		if (!ie || ie->element_id > new_ie->element_id)
242 			break;
243 	}
244 
245 	memmove(prev_ie + new_ie_len, prev_ie, prev_size);
246 	memcpy(prev_ie, new_ie, new_ie_len);
247 	rc->ies->wIELength = cpu_to_le16(length + new_ie_len);
248 
249 	return 0;
250 }
251 
252 /**
253  * uwb_rc_ie_add - add new IEs to the radio controller's beacon
254  * @uwb_rc: the radio controller.
255  * @ies: the buffer containing the new IE or IEs to be added to
256  *       the device's beacon.
257  * @size: length of all the IEs.
258  *
259  * According to WHCI 0.95 [4.13.6] the driver will only receive the RCEB
260  * after the device sent the first beacon that includes the IEs specified
261  * in the SET IE command. We thus cannot send this command if the device is
262  * not beaconing. Instead, a SET IE command will be sent later right after
263  * we start beaconing.
264  *
265  * Setting an IE on the device will overwrite all current IEs in device. So
266  * we take the current IEs being transmitted by the device, insert the
267  * new one, and call SET IE with all the IEs needed.
268  *
269  * Returns 0 on success; or -ENOMEM.
270  */
uwb_rc_ie_add(struct uwb_rc * uwb_rc,const struct uwb_ie_hdr * ies,size_t size)271 int uwb_rc_ie_add(struct uwb_rc *uwb_rc,
272 		  const struct uwb_ie_hdr *ies, size_t size)
273 {
274 	int result = 0;
275 	void *ptr;
276 	const struct uwb_ie_hdr *ie;
277 
278 	mutex_lock(&uwb_rc->ies_mutex);
279 
280 	ptr = (void *)ies;
281 	for (;;) {
282 		ie = uwb_ie_next(&ptr, &size);
283 		if (!ie)
284 			break;
285 
286 		result = uwb_rc_ie_add_one(uwb_rc, ie);
287 		if (result < 0)
288 			break;
289 	}
290 	if (result >= 0) {
291 		if (size == 0) {
292 			if (uwb_rc->beaconing != -1)
293 				result = uwb_rc_set_ie(uwb_rc, uwb_rc->ies);
294 		} else
295 			result = -EINVAL;
296 	}
297 
298 	mutex_unlock(&uwb_rc->ies_mutex);
299 
300 	return result;
301 }
302 EXPORT_SYMBOL_GPL(uwb_rc_ie_add);
303 
304 
305 /*
306  * Remove an IE from internal cache
307  *
308  * We are dealing with our internal IE cache so no need to verify that the
309  * IEs are valid (it has been done already).
310  *
311  * Should be called with ies_mutex held
312  *
313  * We do not break out once an IE is found in the cache. It is currently
314  * possible to have more than one IE with the same ID included in the
315  * beacon. We don't reallocate, we just mark the size smaller.
316  */
317 static
uwb_rc_ie_cache_rm(struct uwb_rc * uwb_rc,enum uwb_ie to_remove)318 void uwb_rc_ie_cache_rm(struct uwb_rc *uwb_rc, enum uwb_ie to_remove)
319 {
320 	struct uwb_ie_hdr *ie;
321 	size_t len = le16_to_cpu(uwb_rc->ies->wIELength);
322 	void *ptr;
323 	size_t size;
324 
325 	ptr = uwb_rc->ies->IEData;
326 	size = len;
327 	for (;;) {
328 		ie = uwb_ie_next(&ptr, &size);
329 		if (!ie)
330 			break;
331 		if (ie->element_id == to_remove) {
332 			len -= sizeof(struct uwb_ie_hdr) + ie->length;
333 			memmove(ie, ptr, size);
334 			ptr = ie;
335 		}
336 	}
337 	uwb_rc->ies->wIELength = cpu_to_le16(len);
338 }
339 
340 
341 /**
342  * uwb_rc_ie_rm - remove an IE from the radio controller's beacon
343  * @uwb_rc: the radio controller.
344  * @element_id: the element ID of the IE to remove.
345  *
346  * Only IEs previously added with uwb_rc_ie_add() may be removed.
347  *
348  * Returns 0 on success; or -ve the SET-IE command to the radio
349  * controller failed.
350  */
uwb_rc_ie_rm(struct uwb_rc * uwb_rc,enum uwb_ie element_id)351 int uwb_rc_ie_rm(struct uwb_rc *uwb_rc, enum uwb_ie element_id)
352 {
353 	int result = 0;
354 
355 	mutex_lock(&uwb_rc->ies_mutex);
356 
357 	uwb_rc_ie_cache_rm(uwb_rc, element_id);
358 
359 	if (uwb_rc->beaconing != -1)
360 		result = uwb_rc_set_ie(uwb_rc, uwb_rc->ies);
361 
362 	mutex_unlock(&uwb_rc->ies_mutex);
363 
364 	return result;
365 }
366 EXPORT_SYMBOL_GPL(uwb_rc_ie_rm);
367