On 2014/09/09 12:38, Fabian Raetz wrote:
> Hi,
> 
> below is a patch for iwn(4) which hopefully fixes a problem where iwn(4)
> does not return from a scan, if the interface is up. 

This works nicely for me, same device as one of your previous testers I think:

iwn0 at pci2 dev 0 function 0 "Intel Centrino Advanced-N 6205" rev 0x34: msi, 
MIMO 2T2R, MoW, address 8c:70:5a:62:b7:f8

I have tested both 2.4GHz and 5GHz.

> I kept all comments to reduce the diff to FreeBSD's iwn(4).

IMO this is a correct decision, this code is being more actively developed
there so I think it makes sense to make it easy to diff.

> More tests are much appreciated :)

I'm OK with this going in, if there are no objections I'd like to see
this committed soon to get better testing coverage, I can keep an eye
out for regressions mentioned on the lists and revert if necessary.

> Inter WiFi Link 5100          (Marcin Piotr Pawlowski)
> Intel Centrino Advanced-N 6205        (Mike Burns, who also reported the 
> problem on misc@, thanks!)
> Intel Centrino Wireless-N 2230        (Fabian Raetz)

> Index: if_iwn.c
> ===================================================================
> RCS file: /cvs/src/sys/dev/pci/if_iwn.c,v
> retrieving revision 1.133
> diff -u -p -r1.133 if_iwn.c
> --- if_iwn.c  22 Jul 2014 13:12:11 -0000      1.133
> +++ if_iwn.c  9 Sep 2014 09:47:48 -0000
> @@ -220,6 +220,9 @@ int               iwn_send_btcoex(struct iwn_softc *)
>  int          iwn_send_advanced_btcoex(struct iwn_softc *);
>  int          iwn5000_runtime_calib(struct iwn_softc *);
>  int          iwn_config(struct iwn_softc *);
> +uint16_t     iwn_get_active_dwell_time(struct iwn_softc *, uint16_t, 
> uint8_t);
> +uint16_t     iwn_limit_dwell(struct iwn_softc *, uint16_t);
> +uint16_t     iwn_get_passive_dwell_time(struct iwn_softc *, uint16_t);
>  int          iwn_scan(struct iwn_softc *, uint16_t);
>  int          iwn_auth(struct iwn_softc *);
>  int          iwn_run(struct iwn_softc *);
> @@ -4424,6 +4427,66 @@ iwn_config(struct iwn_softc *sc)
>       return 0;
>  }
>  
> +uint16_t
> +iwn_get_active_dwell_time(struct iwn_softc *sc,
> +    uint16_t flags, uint8_t n_probes)
> +{
> +     /* No channel? Default to 2GHz settings */
> +     if (flags & IEEE80211_CHAN_2GHZ) {
> +             return (IWN_ACTIVE_DWELL_TIME_2GHZ +
> +             IWN_ACTIVE_DWELL_FACTOR_2GHZ * (n_probes + 1));
> +     }
> +
> +     /* 5GHz dwell time */
> +     return (IWN_ACTIVE_DWELL_TIME_5GHZ +
> +         IWN_ACTIVE_DWELL_FACTOR_5GHZ * (n_probes + 1));
> +}
> +
> +/*
> + * Limit the total dwell time to 85% of the beacon interval.
> + *
> + * Returns the dwell time in milliseconds.
> + */
> +uint16_t
> +iwn_limit_dwell(struct iwn_softc *sc, uint16_t dwell_time)
> +{
> +     struct ieee80211com *ic = &sc->sc_ic;
> +     struct ieee80211_node *ni = ic->ic_bss;
> +     int bintval = 0;
> +
> +     /* bintval is in TU (1.024mS) */
> +     if (ni != NULL)
> +             bintval = ni->ni_intval;
> +
> +     /*
> +      * If it's non-zero, we should calculate the minimum of
> +      * it and the DWELL_BASE.
> +      *
> +      * XXX Yes, the math should take into account that bintval
> +      * is 1.024mS, not 1mS..
> +      */
> +     if (bintval > 0) {
> +             return (MIN(IWN_PASSIVE_DWELL_BASE, ((bintval * 85) / 100)));
> +     }
> +
> +     /* No association context? Default */
> +     return (IWN_PASSIVE_DWELL_BASE);
> +}
> +
> +uint16_t
> +iwn_get_passive_dwell_time(struct iwn_softc *sc, uint16_t flags)
> +{
> +     uint16_t passive;
> +     if (flags & IEEE80211_CHAN_2GHZ) {
> +             passive = IWN_PASSIVE_DWELL_BASE + IWN_PASSIVE_DWELL_TIME_2GHZ;
> +     } else {
> +             passive = IWN_PASSIVE_DWELL_BASE + IWN_PASSIVE_DWELL_TIME_5GHZ;
> +     }
> +
> +     /* Clamp to the beacon interval if we're associated */
> +     return (iwn_limit_dwell(sc, passive));
> +}
> +
>  int
>  iwn_scan(struct iwn_softc *sc, uint16_t flags)
>  {
> @@ -4436,9 +4499,10 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>       struct ieee80211_rateset *rs;
>       struct ieee80211_channel *c;
>       uint8_t *buf, *frm;
> -     uint16_t rxchain;
> +     uint32_t scan_service_time;
> +     uint16_t rxchain, dwell_active, dwell_passive;
>       uint8_t txant;
> -     int buflen, error;
> +     int buflen, error, is_active;
>  
>       buf = malloc(IWN_SCAN_MAXSZ, M_DEVBUF, M_NOWAIT | M_ZERO);
>       if (buf == NULL) {
> @@ -4453,6 +4517,21 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>        */
>       hdr->quiet_time = htole16(10);          /* timeout in milliseconds */
>       hdr->quiet_threshold = htole16(1);      /* min # of packets */
> +     /*
> +      * Max needs to be greater than active and passive and quiet!
> +      * It's also in microseconds!
> +      */
> +     hdr->max_svc =  htole32(250 * 1024);
> +
> +
> +     /*
> +      * Reset scan: interval=100
> +      * Normal scan: interval=beacon interval
> +      * suspend_time: 100 (TU)
> +      *
> +      */
> +     scan_service_time = (4 << 22) | (100 * 1024);   /* Hardcode for now! */
> +     hdr->pause_svc = htole32(scan_service_time);
>  
>       /* Select antennas for scanning. */
>       rxchain =
> @@ -4474,7 +4553,6 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>       tx->lifetime = htole32(IWN_LIFETIME_INFINITE);
>  
>       if (flags & IEEE80211_CHAN_5GHZ) {
> -             hdr->crc_threshold = 0xffff;
>               /* Send probe requests at 6Mbps. */
>               tx->plcp = iwn_rates[IWN_RIDX_OFDM6].plcp;
>               rs = &ic->ic_sup_rates[IEEE80211_MODE_11A];
> @@ -4488,12 +4566,23 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>       /* Use the first valid TX antenna. */
>       txant = IWN_LSB(sc->txchainmask);
>       tx->rflags |= IWN_RFLAG_ANT(txant);
> +     
> +     /*
> +      * Only do active scanning if we're announcing a probe request
> +      * for a given SSID (or more, if we ever add it to the driver.)
> +      */
> +     is_active = 0;
>  
> +     /*
> +      * If we're scanning for a specific SSID, add it to the command.
> +      */
>       essid = (struct iwn_scan_essid *)(tx + 1);
>       if (ic->ic_des_esslen != 0) {
>               essid[0].id = IEEE80211_ELEMID_SSID;
>               essid[0].len = ic->ic_des_esslen;
>               memcpy(essid[0].data, ic->ic_des_essid, ic->ic_des_esslen);
> +
> +             is_active = 1;
>       }
>       /*
>        * Build a probe request frame.  Most of the following code is a
> @@ -4522,6 +4611,41 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>       /* Set length of probe request. */
>       tx->len = htole16(frm - (uint8_t *)wh);
>  
> +     /*
> +      * If active scanning is requested but a certain channel is
> +      * marked passive, we can do active scanning if we detect
> +      * transmissions.
> +      *
> +      * There is an issue with some firmware versions that triggers
> +      * a sysassert on a "good CRC threshold" of zero (== disabled),
> +      * on a radar channel even though this means that we should NOT
> +      * send probes.
> +      *
> +      * The "good CRC threshold" is the number of frames that we
> +      * need to receive during our dwell time on a channel before
> +      * sending out probes -- setting this to a huge value will
> +      * mean we never reach it, but at the same time work around
> +      * the aforementioned issue. Thus use IWL_GOOD_CRC_TH_NEVER
> +      * here instead of IWL_GOOD_CRC_TH_DISABLED.
> +      *
> +      * This was fixed in later versions along with some other
> +      * scan changes, and the threshold behaves as a flag in those
> +      * versions.
> +      */
> +
> +     /*
> +      * If we're doing active scanning, set the crc_threshold
> +      * to a suitable value.  This is different to active veruss
> +      * passive scanning depending upon the channel flags; the
> +      * firmware will obey that particular check for us.
> +      */
> +     if (sc->tlv_feature_flags & IWN_UCODE_TLV_FLAGS_NEWSCAN)
> +             hdr->crc_threshold = is_active ?
> +                 IWN_GOOD_CRC_TH_DEFAULT : IWN_GOOD_CRC_TH_DISABLED;
> +     else
> +             hdr->crc_threshold = is_active ?
> +                 IWN_GOOD_CRC_TH_DEFAULT : IWN_GOOD_CRC_TH_NEVER;
> +
>       chan = (struct iwn_scan_chan *)frm;
>       for (c  = &ic->ic_channels[1];
>            c <= &ic->ic_channels[IEEE80211_CHAN_MAX]; c++) {
> @@ -4531,19 +4655,33 @@ iwn_scan(struct iwn_softc *sc, uint16_t 
>               chan->chan = htole16(ieee80211_chan2ieee(ic, c));
>               DPRINTFN(2, ("adding channel %d\n", chan->chan));
>               chan->flags = 0;
> -             if (!(c->ic_flags & IEEE80211_CHAN_PASSIVE))
> -                     chan->flags |= htole32(IWN_CHAN_ACTIVE);
>               if (ic->ic_des_esslen != 0)
>                       chan->flags |= htole32(IWN_CHAN_NPBREQS(1));
> +
> +             if (c->ic_flags & IEEE80211_CHAN_PASSIVE)
> +                     chan->flags |= htole32(IWN_CHAN_PASSIVE);
> +             else
> +                     chan->flags |= htole32(IWN_CHAN_ACTIVE);
> +
> +             /*
> +              * Calculate the active/passive dwell times.
> +              */
> +
> +             dwell_active = iwn_get_active_dwell_time(sc, flags, is_active);
> +             dwell_passive = iwn_get_passive_dwell_time(sc, flags);
> +
> +             /* Make sure they're valid */
> +             if (dwell_passive <= dwell_active)
> +                     dwell_passive = dwell_active + 1;
> +
> +             chan->active = htole16(dwell_active);
> +             chan->passive = htole16(dwell_passive);
> +
>               chan->dsp_gain = 0x6e;
>               if (IEEE80211_IS_CHAN_5GHZ(c)) {
>                       chan->rf_gain = 0x3b;
> -                     chan->active  = htole16(24);
> -                     chan->passive = htole16(110);
>               } else {
>                       chan->rf_gain = 0x28;
> -                     chan->active  = htole16(36);
> -                     chan->passive = htole16(120);
>               }
>               hdr->nchan++;
>               chan++;
> @@ -5580,6 +5718,14 @@ iwn_read_firmware_tlv(struct iwn_softc *
>                               sc->reset_noise_gain = letoh32(*ptr);
>                               sc->noise_gain = letoh32(*ptr) + 1;
>                       }
> +                     break;
> +             case IWN_FW_TLV_FLAGS:
> +                     if (len < sizeof(uint32_t))
> +                             break;
> +                     if (len % sizeof(uint32_t))
> +                             break;
> +                     sc->tlv_feature_flags = letoh32(*ptr);
> +                     DPRINTF(("feature: 0x%08x\n", sc->tlv_feature_flags));
>                       break;
>               default:
>                       DPRINTF(("TLV type %d not handled\n",
> Index: if_iwnreg.h
> ===================================================================
> RCS file: /cvs/src/sys/dev/pci/if_iwnreg.h,v
> retrieving revision 1.47
> diff -u -p -r1.47 if_iwnreg.h
> --- if_iwnreg.h       11 Feb 2014 19:30:10 -0000      1.47
> +++ if_iwnreg.h       9 Sep 2014 09:47:48 -0000
> @@ -799,6 +799,7 @@ struct iwn_scan_hdr {
>  
>  struct iwn_scan_chan {
>       uint32_t        flags;
> +#define      IWN_CHAN_PASSIVE        (0 << 0)
>  #define IWN_CHAN_ACTIVE              (1 << 0)
>  #define IWN_CHAN_NPBREQS(x)  (((1 << (x)) - 1) << 1)
>  
> @@ -812,6 +813,51 @@ struct iwn_scan_chan {
>  /* Maximum size of a scan command. */
>  #define IWN_SCAN_MAXSZ       (MCLBYTES - 4)
>  
> +/*
> + * For active scan, listen ACTIVE_DWELL_TIME (msec) on each channel after
> + * sending probe req.  This should be set long enough to hear probe responses
> + * from more than one AP.
> + */
> +#define      IWN_ACTIVE_DWELL_TIME_2GHZ      (30)    /* all times in msec */
> +#define      IWN_ACTIVE_DWELL_TIME_5GHZ      (20)
> +#define      IWN_ACTIVE_DWELL_FACTOR_2GHZ    (3)
> +#define      IWN_ACTIVE_DWELL_FACTOR_5GHZ    (2)
> +
> +/*
> + * For passive scan, listen PASSIVE_DWELL_TIME (msec) on each channel.
> + * Must be set longer than active dwell time.
> + * For the most reliable scan, set > AP beacon interval (typically 100msec).
> + */
> +#define      IWN_PASSIVE_DWELL_TIME_2GHZ     (20)    /* all times in msec */
> +#define      IWN_PASSIVE_DWELL_TIME_5GHZ     (10)
> +#define      IWN_PASSIVE_DWELL_BASE          (100)
> +#define      IWN_CHANNEL_TUNE_TIME           (5)
> +
> +/*
> + * If active scanning is requested but a certain channel is
> + * marked passive, we can do active scanning if we detect
> + * transmissions.
> + *
> + * There is an issue with some firmware versions that triggers
> + * a sysassert on a "good CRC threshold" of zero (== disabled),
> + * on a radar channel even though this means that we should NOT
> + * send probes.
> + *
> + * The "good CRC threshold" is the number of frames that we
> + * need to receive during our dwell time on a channel before
> + * sending out probes -- setting this to a huge value will
> + * mean we never reach it, but at the same time work around
> + * the aforementioned issue. Thus use IWL_GOOD_CRC_TH_NEVER
> + * here instead of IWL_GOOD_CRC_TH_DISABLED.
> + *
> + * This was fixed in later versions along with some other
> + * scan changes, and the threshold behaves as a flag in those
> + * versions.
> + */
> +#define      IWN_GOOD_CRC_TH_DISABLED        0
> +#define      IWN_GOOD_CRC_TH_DEFAULT         htole16(1)
> +#define      IWN_GOOD_CRC_TH_NEVER           htole16(0xffff)
> +
>  /* Structure for command IWN_CMD_TXPOWER (4965AGN only.) */
>  #define IWN_RIDX_MAX 32
>  struct iwn4965_cmd_txpower {
> @@ -1407,6 +1453,7 @@ struct iwn_fw_tlv {
>  #define IWN_FW_TLV_PBREQ_MAXLEN              6
>  #define IWN_FW_TLV_ENH_SENS          14
>  #define IWN_FW_TLV_PHY_CALIB         15
> +#define      IWN_FW_TLV_FLAGS                18
>  
>       uint16_t        alt;
>       uint32_t        len;
> @@ -1419,6 +1466,60 @@ struct iwn_fw_tlv {
>  #define IWN_FW_BOOT_TEXT_MAXSZ       1024
>  #define IWN4965_FWSZ         (IWN4965_FW_TEXT_MAXSZ + IWN4965_FW_DATA_MAXSZ)
>  #define IWN5000_FWSZ         IWN5000_FW_TEXT_MAXSZ
> +
> +/*
> + * Microcode flags TLV (18.)
> + */
> +
> +/**
> + * enum iwn_ucode_tlv_flag - ucode API flags
> + * @IWN_UCODE_TLV_FLAGS_PAN: This is PAN capable microcode; this previously
> + *      was a separate TLV but moved here to save space.
> + * @IWN_UCODE_TLV_FLAGS_NEWSCAN: new uCode scan behaviour on hidden SSID,
> + *      treats good CRC threshold as a boolean
> + * @IWN_UCODE_TLV_FLAGS_MFP: This uCode image supports MFP (802.11w).
> + * @IWN_UCODE_TLV_FLAGS_P2P: This uCode image supports P2P.
> + * @IWN_UCODE_TLV_FLAGS_DW_BC_TABLE: The SCD byte count table is in DWORDS
> + * @IWN_UCODE_TLV_FLAGS_UAPSD: This uCode image supports uAPSD
> + * @IWN_UCODE_TLV_FLAGS_SHORT_BL: 16 entries of black list instead of 64 in 
> scan
> + *      offload profile config command.
> + * @IWN_UCODE_TLV_FLAGS_RX_ENERGY_API: supports rx signal strength api
> + * @IWN_UCODE_TLV_FLAGS_TIME_EVENT_API_V2: using the new time event API.
> + * @IWN_UCODE_TLV_FLAGS_D3_6_IPV6_ADDRS: D3 image supports up to six
> + *      (rather than two) IPv6 addresses
> + * @IWN_UCODE_TLV_FLAGS_BF_UPDATED: new beacon filtering API
> + * @IWN_UCODE_TLV_FLAGS_NO_BASIC_SSID: not sending a probe with the SSID 
> element
> + *      from the probe request template.
> + * @IWN_UCODE_TLV_FLAGS_D3_CONTINUITY_API: modified D3 API to allow keeping
> + *      connection when going back to D0
> + * @IWN_UCODE_TLV_FLAGS_NEW_NSOFFL_SMALL: new NS offload (small version)
> + * @IWN_UCODE_TLV_FLAGS_NEW_NSOFFL_LARGE: new NS offload (large version)
> + * @IWN_UCODE_TLV_FLAGS_SCHED_SCAN: this uCode image supports scheduled scan.
> + * @IWN_UCODE_TLV_FLAGS_STA_KEY_CMD: new ADD_STA and ADD_STA_KEY command API
> + * @IWN_UCODE_TLV_FLAGS_DEVICE_PS_CMD: support device wide power command
> + *      containing CAM (Continuous Active Mode) indication.
> + */
> +enum iwn_ucode_tlv_flag {
> +     IWN_UCODE_TLV_FLAGS_PAN                 = (1 << 0),
> +     IWN_UCODE_TLV_FLAGS_NEWSCAN             = (1 << 1),
> +     IWN_UCODE_TLV_FLAGS_MFP                 = (1 << 2),
> +     IWN_UCODE_TLV_FLAGS_P2P                 = (1 << 3),
> +     IWN_UCODE_TLV_FLAGS_DW_BC_TABLE         = (1 << 4),
> +     IWN_UCODE_TLV_FLAGS_NEWBT_COEX          = (1 << 5),
> +     IWN_UCODE_TLV_FLAGS_UAPSD               = (1 << 6),
> +     IWN_UCODE_TLV_FLAGS_SHORT_BL            = (1 << 7),
> +     IWN_UCODE_TLV_FLAGS_RX_ENERGY_API       = (1 << 8),
> +     IWN_UCODE_TLV_FLAGS_TIME_EVENT_API_V2   = (1 << 9),
> +     IWN_UCODE_TLV_FLAGS_D3_6_IPV6_ADDRS     = (1 << 10),
> +     IWN_UCODE_TLV_FLAGS_BF_UPDATED          = (1 << 11),
> +     IWN_UCODE_TLV_FLAGS_NO_BASIC_SSID       = (1 << 12),
> +     IWN_UCODE_TLV_FLAGS_D3_CONTINUITY_API   = (1 << 14),
> +     IWN_UCODE_TLV_FLAGS_NEW_NSOFFL_SMALL    = (1 << 15),
> +     IWN_UCODE_TLV_FLAGS_NEW_NSOFFL_LARGE    = (1 << 16),
> +     IWN_UCODE_TLV_FLAGS_SCHED_SCAN          = (1 << 17),
> +     IWN_UCODE_TLV_FLAGS_STA_KEY_CMD         = (1 << 19),
> +     IWN_UCODE_TLV_FLAGS_DEVICE_PS_CMD       = (1 << 20),
> +};
>  
>  /*
>   * Offsets into EEPROM.
> Index: if_iwnvar.h
> ===================================================================
> RCS file: /cvs/src/sys/dev/pci/if_iwnvar.h,v
> retrieving revision 1.27
> diff -u -p -r1.27 if_iwnvar.h
> --- if_iwnvar.h       10 Feb 2014 19:08:58 -0000      1.27
> +++ if_iwnvar.h       9 Sep 2014 09:47:48 -0000
> @@ -284,6 +284,8 @@ struct iwn_softc {
>       uint8_t                 reset_noise_gain;
>       uint8_t                 noise_gain;
>  
> +     uint32_t                tlv_feature_flags;
> +
>       int32_t                 temp_off;
>       uint32_t                int_mask;
>       uint8_t                 ntxchains;
> 

Reply via email to