1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
|
/*
* IE/TLV fragmentation/defragmentation support for
* Broadcom 802.11bang Networking Device Driver
*
* Copyright (C) 2021, Broadcom.
*
* Unless you and Broadcom execute a separate written software license
* agreement governing use of this software, this software is licensed to you
* under the terms of the GNU General Public License version 2 (the "GPL"),
* available at http://www.broadcom.com/licenses/GPLv2.php, with the
* following added to such license:
*
* As a special exception, the copyright holders of this software give you
* permission to link this software with independent modules, and to copy and
* distribute the resulting executable under terms of your choice, provided that
* you also meet, for each linked independent module, the terms and conditions of
* the license of that module. An independent module is a module which is not
* derived from this software. The special exception does not apply to any
* modifications of the software.
*
*
* <<Broadcom-WL-IPTag/Dual:>>
*/
#include <bcmutils.h>
#include <frag.h>
#include <802.11.h>
#include <bcmstdlib_s.h>
/* defrag a fragmented dot11 ie/tlv. if space does not permit, return the needed
* ie length to contain all the fragments with status BCME_BUFTOOSHORT.
* out_len is in/out parameter, max length on input, used/required length on output
* data_len is out parameter, it has the length of de-fragmented data.
*/
int
bcm_tlv_dot11_defrag(const void *buf, uint buf_len, uint8 id, bool id_ext,
uint8 *out, uint *out_len, uint *data_len)
{
int err = BCME_OK;
const bcm_tlv_t *ie;
uint tot_len = 0;
uint tot_data_len = 0;
uint out_left;
/* find the ie; includes validation */
ie = bcm_parse_tlvs_dot11(buf, buf_len, id, id_ext);
if (!ie) {
err = BCME_IE_NOTFOUND;
goto done;
}
out_left = (out && out_len) ? *out_len : 0;
/* first fragment */
tot_len = id_ext ? ie->len - 1u : ie->len;
tot_data_len = tot_len;
/* copy out if output space permits */
if (out_left < tot_len) {
err = BCME_BUFTOOSHORT;
out_left = 0; /* prevent further copy */
} else {
if ((err = memcpy_s(out, out_left, &ie->data[id_ext ? 1u : 0], tot_len))
!= BCME_OK) {
goto fail;
}
out += tot_len;
out_left -= tot_len;
}
/* if not fragmened or not fragmentable per 802.11 table 9-77 11md0.1 bail
* we can introduce the latter check later
*/
if (ie->len != BCM_TLV_MAX_DATA_SIZE) {
goto done;
}
/* adjust buf_len to length after ie including it */
buf_len -= (uint)(((const uint8 *)ie - (const uint8 *)buf));
/* update length from fragments, okay if no next ie */
while ((ie = bcm_next_tlv(ie, &buf_len)) &&
(ie->id == DOT11_MNG_FRAGMENT_ID)) {
/* note: buf_len starts at next ie and last frag may be partial */
if (out_left < ie->len) {
err = BCME_BUFTOOSHORT;
out_left = 0;
} else {
if ((err = memcpy_s(out, out_left, &ie->data[0], ie->len)) != BCME_OK) {
goto fail;
}
out += ie->len;
out_left -= ie->len;
}
tot_data_len += ie->len;
tot_len += ie->len + BCM_TLV_HDR_SIZE;
/* all but last should be of max size */
if (ie->len < BCM_TLV_MAX_DATA_SIZE) {
break;
}
}
done:
if (out_len) {
*out_len = tot_len;
}
if (data_len) {
*data_len = tot_data_len;
}
fail:
return err;
}
int
bcm_tlv_dot11_frag_tot_len(const void *buf, uint buf_len,
uint8 id, bool id_ext, uint *ie_len)
{
return bcm_tlv_dot11_defrag(buf, buf_len, id, id_ext, NULL, ie_len, NULL);
}
int
bcm_tlv_dot11_frag_tot_data_len(const void *buf, uint buf_len,
uint8 id, bool id_ext, uint *ie_len, uint *data_len)
{
return bcm_tlv_dot11_defrag(buf, buf_len, id, id_ext, NULL, ie_len, data_len);
}
/* To support IE fragmentation.
* data will be fit into a series of elements consisting of one leading element
* followed by Fragment elements if needed.
* data_len is in/out parameter, it has the length of all the elements, including
* the leading element header size.
* Caller can get elements length by passing dst as NULL.
*/
int
bcm_tlv_dot11_frag(uint8 id, bool id_ext, const void *data, uint data_len,
uint8 *buf, uint *buf_len)
{
uint8 id_ext_len = id_ext ? 1u : 0;
bool is_write = (buf != NULL);
uint8 *ie_data = NULL;
uint ie_len = 0;
uint8 num_frags = 0, last_frag_size = 0;
int err = BCME_OK;
if ((data_len + id_ext_len) >
BCM_TLV_MAX_DATA_SIZE) {
last_frag_size = (data_len + id_ext_len) % BCM_TLV_MAX_DATA_SIZE;
num_frags = CEIL(data_len + id_ext_len, BCM_TLV_MAX_DATA_SIZE);
} else {
last_frag_size = data_len + id_ext_len;
num_frags = 1u;
}
ie_len = data_len + id_ext_len + num_frags * BCM_TLV_HDR_SIZE;
if (is_write) {
uint len_to_copy = (num_frags > 1u) ? (uint)(BCM_TLV_MAX_DATA_SIZE - id_ext_len) :
data_len;
uint copied_len = 0;
if (ie_len > *buf_len) {
err = BCME_BUFTOOSHORT;
goto done;
}
if (id_ext) {
ie_data = bcm_write_tlv_ext(DOT11_MNG_ID_EXT_ID, id,
data, len_to_copy, buf);
} else {
ie_data = bcm_write_tlv(id, data, len_to_copy, buf);
}
while (num_frags > 1u) {
copied_len += len_to_copy;
len_to_copy = (num_frags > 2u) ? BCM_TLV_MAX_DATA_SIZE : last_frag_size;
ie_data = bcm_write_tlv(DOT11_MNG_FRAGMENT_ID,
(const uint8 *)data + copied_len,
len_to_copy, ie_data);
num_frags --;
};
}
done:
*buf_len = ie_len;
return err;
}
|
