Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6

10 files changed, 421 insertions, 81 deletions

diff --git a/net/mac80211/cfg.c b/net/mac80211/cfg.c
index 7912eb14eca0..9d4e4d846ec1 100644
--- a/net/mac80211/cfg.c
+++ b/net/mac80211/cfg.c
@@ -310,12 +310,35 @@ static void sta_set_sinfo(struct sta_info *sta, struct station_info *sinfo)
 
         sinfo->filled = STATION_INFO_INACTIVE_TIME |
                         STATION_INFO_RX_BYTES |
-                        STATION_INFO_TX_BYTES;
+                        STATION_INFO_TX_BYTES |
+                        STATION_INFO_TX_BITRATE;
 
         sinfo->inactive_time = jiffies_to_msecs(jiffies - sta->last_rx);
         sinfo->rx_bytes = sta->rx_bytes;
         sinfo->tx_bytes = sta->tx_bytes;
 
+        if (sta->local->hw.flags & IEEE80211_HW_SIGNAL_DBM) {
+                sinfo->filled |= STATION_INFO_SIGNAL;
+                sinfo->signal = (s8)sta->last_signal;
+        }
+
+        sinfo->txrate.flags = 0;
+        if (sta->last_tx_rate.flags & IEEE80211_TX_RC_MCS)
+                sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
+        if (sta->last_tx_rate.flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
+                sinfo->txrate.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
+        if (sta->last_tx_rate.flags & IEEE80211_TX_RC_SHORT_GI)
+                sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
+
+        if (!(sta->last_tx_rate.flags & IEEE80211_TX_RC_MCS)) {
+                struct ieee80211_supported_band *sband;
+                sband = sta->local->hw.wiphy->bands[
+                                sta->local->hw.conf.channel->band];
+                sinfo->txrate.legacy =
+                        sband->bitrates[sta->last_tx_rate.idx].bitrate;
+        } else
+                sinfo->txrate.mcs = sta->last_tx_rate.idx;
+
         if (ieee80211_vif_is_mesh(&sdata->vif)) {
 #ifdef CONFIG_MAC80211_MESH
                 sinfo->filled |= STATION_INFO_LLID |
@@ -663,6 +686,7 @@ static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
         struct sta_info *sta;
         struct ieee80211_sub_if_data *sdata;
         int err;
+        int layer2_update;
 
         /* Prevent a race with changing the rate control algorithm */
         if (!netif_running(dev))
@@ -693,17 +717,25 @@ static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
 
         rate_control_rate_init(sta);
 
+        layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
+                sdata->vif.type == NL80211_IFTYPE_AP;
+
         rcu_read_lock();
 
         err = sta_info_insert(sta);
         if (err) {
                 /* STA has been freed */
+                if (err == -EEXIST && layer2_update) {
+                        /* Need to update layer 2 devices on reassociation */
+                        sta = sta_info_get(local, mac);
+                        if (sta)
+                                ieee80211_send_layer2_update(sta);
+                }
                 rcu_read_unlock();
                 return err;
         }
 
-        if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
-            sdata->vif.type == NL80211_IFTYPE_AP)
+        if (layer2_update)
                 ieee80211_send_layer2_update(sta);
 
         rcu_read_unlock();
@@ -1099,12 +1131,12 @@ static int ieee80211_set_txq_params(struct wiphy *wiphy,
 
 static int ieee80211_set_channel(struct wiphy *wiphy,
                                  struct ieee80211_channel *chan,
-                                 enum nl80211_sec_chan_offset sec_chan_offset)
+                                 enum nl80211_channel_type channel_type)
 {
         struct ieee80211_local *local = wiphy_priv(wiphy);
 
         local->oper_channel = chan;
-        local->oper_sec_chan_offset = sec_chan_offset;
+        local->oper_channel_type = channel_type;
 
         return ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL);
 }
diff --git a/net/mac80211/ht.c b/net/mac80211/ht.c
index a1eed7032c9b..5f510a13b9f0 100644
--- a/net/mac80211/ht.c
+++ b/net/mac80211/ht.c
@@ -98,6 +98,7 @@ u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata,
         struct ieee80211_bss_ht_conf ht;
         u32 changed = 0;
         bool enable_ht = true, ht_changed;
+        enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
 
         sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
 
@@ -112,24 +113,36 @@ u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata,
             ieee80211_channel_to_frequency(hti->control_chan))
                 enable_ht = false;
 
-        /*
-         * XXX: This is totally incorrect when there are multiple virtual
-         *      interfaces, needs to be fixed later.
-         */
-        ht_changed = local->hw.conf.ht.enabled != enable_ht;
+        if (enable_ht) {
+                channel_type = NL80211_CHAN_HT20;
+
+                if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) &&
+                    (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) &&
+                    (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) {
+                        switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
+                        case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
+                                channel_type = NL80211_CHAN_HT40PLUS;
+                                break;
+                        case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
+                                channel_type = NL80211_CHAN_HT40MINUS;
+                                break;
+                        }
+                }
+        }
+
+        ht_changed = local->hw.conf.ht.enabled != enable_ht ||
+                     channel_type != local->hw.conf.ht.channel_type;
+
+        local->oper_channel_type = channel_type;
         local->hw.conf.ht.enabled = enable_ht;
+
         if (ht_changed)
                 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_HT);
 
         /* disable HT */
         if (!enable_ht)
                 return 0;
-        ht.secondary_channel_offset =
-                hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET;
-        ht.width_40_ok =
-                !(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) &&
-                (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) &&
-                (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY);
+
         ht.operation_mode = le16_to_cpu(hti->operation_mode);
 
         /* if bss configuration changed store the new one */
diff --git a/net/mac80211/ieee80211_i.h b/net/mac80211/ieee80211_i.h
index 6f59e11d7b33..f3eec989662b 100644
--- a/net/mac80211/ieee80211_i.h
+++ b/net/mac80211/ieee80211_i.h
@@ -538,6 +538,11 @@ enum {
         IEEE80211_ADDBA_MSG     = 4,
 };
 
+enum queue_stop_reason {
+        IEEE80211_QUEUE_STOP_REASON_DRIVER,
+        IEEE80211_QUEUE_STOP_REASON_PS,
+};
+
 /* maximum number of hardware queues we support. */
 #define QD_MAX_QUEUES (IEEE80211_MAX_AMPDU_QUEUES + IEEE80211_MAX_QUEUES)
 
@@ -554,7 +559,8 @@ struct ieee80211_local {
         const struct ieee80211_ops *ops;
 
         unsigned long queue_pool[BITS_TO_LONGS(QD_MAX_QUEUES)];
-
+        unsigned long queue_stop_reasons[IEEE80211_MAX_QUEUES];
+        spinlock_t queue_stop_reason_lock;
         struct net_device *mdev; /* wmaster# - "master" 802.11 device */
         int open_count;
         int monitors, cooked_mntrs;
@@ -625,7 +631,7 @@ struct ieee80211_local {
         struct delayed_work scan_work;
         struct ieee80211_sub_if_data *scan_sdata;
         struct ieee80211_channel *oper_channel, *scan_channel;
-        enum nl80211_sec_chan_offset oper_sec_chan_offset;
+        enum nl80211_channel_type oper_channel_type;
         u8 scan_ssid[IEEE80211_MAX_SSID_LEN];
         size_t scan_ssid_len;
         struct list_head bss_list;
@@ -689,6 +695,12 @@ struct ieee80211_local {
         int wifi_wme_noack_test;
         unsigned int wmm_acm; /* bit field of ACM bits (BIT(802.1D tag)) */
 
+        bool powersave;
+        int dynamic_ps_timeout;
+        struct work_struct dynamic_ps_enable_work;
+        struct work_struct dynamic_ps_disable_work;
+        struct timer_list dynamic_ps_timer;
+
 #ifdef CONFIG_MAC80211_DEBUGFS
         struct local_debugfsdentries {
                 struct dentry *rcdir;
@@ -971,6 +983,15 @@ int ieee80211_set_freq(struct ieee80211_sub_if_data *sdata, int freq);
 u64 ieee80211_mandatory_rates(struct ieee80211_local *local,
                               enum ieee80211_band band);
 
+void ieee80211_dynamic_ps_enable_work(struct work_struct *work);
+void ieee80211_dynamic_ps_disable_work(struct work_struct *work);
+void ieee80211_dynamic_ps_timer(unsigned long data);
+
+void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
+                                     enum queue_stop_reason reason);
+void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
+                                     enum queue_stop_reason reason);
+
 #ifdef CONFIG_MAC80211_NOINLINE
 #define debug_noinline noinline
 #else
diff --git a/net/mac80211/main.c b/net/mac80211/main.c
index 6d8710327d14..24b14363d6e7 100644
--- a/net/mac80211/main.c
+++ b/net/mac80211/main.c
@@ -195,37 +195,30 @@ int ieee80211_hw_config(struct ieee80211_local *local, u32 changed)
         struct ieee80211_channel *chan;
         int ret = 0;
         int power;
-        enum nl80211_sec_chan_offset sec_chan_offset;
+        enum nl80211_channel_type channel_type;
 
         might_sleep();
 
         if (local->sw_scanning) {
                 chan = local->scan_channel;
-                sec_chan_offset = NL80211_SEC_CHAN_NO_HT;
+                channel_type = NL80211_CHAN_NO_HT;
         } else {
                 chan = local->oper_channel;
-                sec_chan_offset = local->oper_sec_chan_offset;
+                channel_type = local->oper_channel_type;
         }
 
         if (chan != local->hw.conf.channel ||
-            sec_chan_offset != local->hw.conf.ht.sec_chan_offset) {
+            channel_type != local->hw.conf.ht.channel_type) {
                 local->hw.conf.channel = chan;
-                switch (sec_chan_offset) {
-                case NL80211_SEC_CHAN_NO_HT:
+                local->hw.conf.ht.channel_type = channel_type;
+                switch (channel_type) {
+                case NL80211_CHAN_NO_HT:
                         local->hw.conf.ht.enabled = false;
-                        local->hw.conf.ht.sec_chan_offset = 0;
                         break;
-                case NL80211_SEC_CHAN_DISABLED:
+                case NL80211_CHAN_HT20:
+                case NL80211_CHAN_HT40MINUS:
+                case NL80211_CHAN_HT40PLUS:
                         local->hw.conf.ht.enabled = true;
-                        local->hw.conf.ht.sec_chan_offset = 0;
-                        break;
-                case NL80211_SEC_CHAN_BELOW:
-                        local->hw.conf.ht.enabled = true;
-                        local->hw.conf.ht.sec_chan_offset = -1;
-                        break;
-                case NL80211_SEC_CHAN_ABOVE:
-                        local->hw.conf.ht.enabled = true;
-                        local->hw.conf.ht.sec_chan_offset = 1;
                         break;
                 }
                 changed |= IEEE80211_CONF_CHANGE_CHANNEL;
@@ -348,7 +341,8 @@ static void ieee80211_tasklet_handler(unsigned long data)
                         dev_kfree_skb(skb);
                         break ;
                 default:
-                        WARN_ON(1);
+                        WARN(1, "mac80211: Packet is of unknown type %d\n",
+                             skb->pkt_type);
                         dev_kfree_skb(skb);
                         break;
                 }
@@ -731,8 +725,17 @@ struct ieee80211_hw *ieee80211_alloc_hw(size_t priv_data_len,
 
         spin_lock_init(&local->key_lock);
 
+        spin_lock_init(&local->queue_stop_reason_lock);
+
         INIT_DELAYED_WORK(&local->scan_work, ieee80211_scan_work);
 
+        INIT_WORK(&local->dynamic_ps_enable_work,
+                  ieee80211_dynamic_ps_enable_work);
+        INIT_WORK(&local->dynamic_ps_disable_work,
+                  ieee80211_dynamic_ps_disable_work);
+        setup_timer(&local->dynamic_ps_timer,
+                    ieee80211_dynamic_ps_timer, (unsigned long) local);
+
         sta_info_init(local);
 
         tasklet_init(&local->tx_pending_tasklet, ieee80211_tx_pending,
diff --git a/net/mac80211/mlme.c b/net/mac80211/mlme.c
index 290b0017ef2e..5ba721b6a399 100644
--- a/net/mac80211/mlme.c
+++ b/net/mac80211/mlme.c
@@ -309,7 +309,7 @@ static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
                 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
                                                   IEEE80211_STYPE_ASSOC_REQ);
                 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
-                mgmt->u.reassoc_req.listen_interval =
+                mgmt->u.assoc_req.listen_interval =
                                 cpu_to_le16(local->hw.conf.listen_interval);
         }
 
@@ -744,6 +744,17 @@ static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
         bss_info_changed |= BSS_CHANGED_BASIC_RATES;
         ieee80211_bss_info_change_notify(sdata, bss_info_changed);
 
+        if (local->powersave) {
+                if (local->dynamic_ps_timeout > 0)
+                        mod_timer(&local->dynamic_ps_timer, jiffies +
+                                  msecs_to_jiffies(local->dynamic_ps_timeout));
+                else {
+                        conf->flags |= IEEE80211_CONF_PS;
+                        ieee80211_hw_config(local,
+                                            IEEE80211_CONF_CHANGE_PS);
+                }
+        }
+
         netif_tx_start_all_queues(sdata->dev);
         netif_carrier_on(sdata->dev);
 
@@ -812,7 +823,7 @@ static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
 {
         struct ieee80211_local *local = sdata->local;
         struct sta_info *sta;
-        u32 changed = 0;
+        u32 changed = 0, config_changed = 0;
 
         rcu_read_lock();
 
@@ -858,8 +869,18 @@ static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
         rcu_read_unlock();
 
         local->hw.conf.ht.enabled = false;
-        ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_HT);
+        local->oper_channel_type = NL80211_CHAN_NO_HT;
+        config_changed |= IEEE80211_CONF_CHANGE_HT;
+
+        del_timer_sync(&local->dynamic_ps_timer);
+        cancel_work_sync(&local->dynamic_ps_enable_work);
 
+        if (local->hw.conf.flags & IEEE80211_CONF_PS) {
+                local->hw.conf.flags &= ~IEEE80211_CONF_PS;
+                config_changed |= IEEE80211_CONF_CHANGE_PS;
+        }
+
+        ieee80211_hw_config(local, config_changed);
         ieee80211_bss_info_change_notify(sdata, changed);
 
         rcu_read_lock();
@@ -1612,8 +1633,13 @@ static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
                          * e.g: at 1 MBit that means mactime is 192 usec earlier
                          * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
                          */
-                        int rate = local->hw.wiphy->bands[band]->
+                        int rate;
+                        if (rx_status->flag & RX_FLAG_HT) {
+                                rate = 65; /* TODO: HT rates */
+                        } else {
+                                rate = local->hw.wiphy->bands[band]->
                                         bitrates[rx_status->rate_idx].bitrate;
+                        }
                         rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
                 } else if (local && local->ops && local->ops->get_tsf)
                         /* second best option: get current TSF */
@@ -2576,3 +2602,39 @@ void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
                 ieee80211_restart_sta_timer(sdata);
         rcu_read_unlock();
 }
+
+void ieee80211_dynamic_ps_disable_work(struct work_struct *work)
+{
+        struct ieee80211_local *local =
+                container_of(work, struct ieee80211_local,
+                             dynamic_ps_disable_work);
+
+        if (local->hw.conf.flags & IEEE80211_CONF_PS) {
+                local->hw.conf.flags &= ~IEEE80211_CONF_PS;
+                ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
+        }
+
+        ieee80211_wake_queues_by_reason(&local->hw,
+                                        IEEE80211_QUEUE_STOP_REASON_PS);
+}
+
+void ieee80211_dynamic_ps_enable_work(struct work_struct *work)
+{
+        struct ieee80211_local *local =
+                container_of(work, struct ieee80211_local,
+                             dynamic_ps_enable_work);
+
+        if (local->hw.conf.flags & IEEE80211_CONF_PS)
+                return;
+
+        local->hw.conf.flags |= IEEE80211_CONF_PS;
+
+        ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
+}
+
+void ieee80211_dynamic_ps_timer(unsigned long data)
+{
+        struct ieee80211_local *local = (void *) data;
+
+        queue_work(local->hw.workqueue, &local->dynamic_ps_enable_work);
+}
diff --git a/net/mac80211/rx.c b/net/mac80211/rx.c
index 73cf126cef49..7175ae80c36a 100644
--- a/net/mac80211/rx.c
+++ b/net/mac80211/rx.c
@@ -123,7 +123,6 @@ ieee80211_add_rx_radiotap_header(struct ieee80211_local *local,
         /* radiotap header, set always present flags */
         rthdr->it_present =
                 cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) |
-                            (1 << IEEE80211_RADIOTAP_RATE) |
                             (1 << IEEE80211_RADIOTAP_CHANNEL) |
                             (1 << IEEE80211_RADIOTAP_ANTENNA) |
                             (1 << IEEE80211_RADIOTAP_RX_FLAGS));
@@ -149,7 +148,19 @@ ieee80211_add_rx_radiotap_header(struct ieee80211_local *local,
         pos++;
 
         /* IEEE80211_RADIOTAP_RATE */
-        *pos = rate->bitrate / 5;
+        if (status->flag & RX_FLAG_HT) {
+                /*
+                 * TODO: add following information into radiotap header once
+                 * suitable fields are defined for it:
+                 * - MCS index (status->rate_idx)
+                 * - HT40 (status->flag & RX_FLAG_40MHZ)
+                 * - short-GI (status->flag & RX_FLAG_SHORT_GI)
+                 */
+                *pos = 0;
+        } else {
+                rthdr->it_present |= (1 << IEEE80211_RADIOTAP_RATE);
+                *pos = rate->bitrate / 5;
+        }
         pos++;
 
         /* IEEE80211_RADIOTAP_CHANNEL */
@@ -1849,9 +1860,15 @@ static int prepare_for_handlers(struct ieee80211_sub_if_data *sdata,
                         if (!(sdata->dev->flags & IFF_PROMISC))
                                 return 0;
                         rx->flags &= ~IEEE80211_RX_RA_MATCH;
-                } else if (!rx->sta)
+                } else if (!rx->sta) {
+                        int rate_idx;
+                        if (rx->status->flag & RX_FLAG_HT)
+                                rate_idx = 0; /* TODO: HT rates */
+                        else
+                                rate_idx = rx->status->rate_idx;
                         rx->sta = ieee80211_ibss_add_sta(sdata, bssid, hdr->addr2,
-                                BIT(rx->status->rate_idx));
+                                BIT(rate_idx));
+                }
                 break;
         case NL80211_IFTYPE_MESH_POINT:
                 if (!multicast &&
@@ -2057,7 +2074,13 @@ static u8 ieee80211_sta_manage_reorder_buf(struct ieee80211_hw *hw,
                                         tid_agg_rx->reorder_buf[index]->cb,
                                         sizeof(status));
                                 sband = local->hw.wiphy->bands[status.band];
-                                rate = &sband->bitrates[status.rate_idx];
+                                if (status.flag & RX_FLAG_HT) {
+                                        /* TODO: HT rates */
+                                        rate = sband->bitrates;
+                                } else {
+                                        rate = &sband->bitrates
+                                                [status.rate_idx];
+                                }
                                 __ieee80211_rx_handle_packet(hw,
                                         tid_agg_rx->reorder_buf[index],
                                         &status, rate);
@@ -2101,7 +2124,10 @@ static u8 ieee80211_sta_manage_reorder_buf(struct ieee80211_hw *hw,
                 memcpy(&status, tid_agg_rx->reorder_buf[index]->cb,
                         sizeof(status));
                 sband = local->hw.wiphy->bands[status.band];
-                rate = &sband->bitrates[status.rate_idx];
+                if (status.flag & RX_FLAG_HT)
+                        rate = sband->bitrates; /* TODO: HT rates */
+                else
+                        rate = &sband->bitrates[status.rate_idx];
                 __ieee80211_rx_handle_packet(hw, tid_agg_rx->reorder_buf[index],
                                              &status, rate);
                 tid_agg_rx->stored_mpdu_num--;
@@ -2189,15 +2215,26 @@ void __ieee80211_rx(struct ieee80211_hw *hw, struct sk_buff *skb,
         }
 
         sband = local->hw.wiphy->bands[status->band];
-
-        if (!sband ||
-            status->rate_idx < 0 ||
-            status->rate_idx >= sband->n_bitrates) {
+        if (!sband) {
                 WARN_ON(1);
                 return;
         }
 
-        rate = &sband->bitrates[status->rate_idx];
+        if (status->flag & RX_FLAG_HT) {
+                /* rate_idx is MCS index */
+                if (WARN_ON(status->rate_idx < 0 ||
+                            status->rate_idx >= 76))
+                        return;
+                /* HT rates are not in the table - use the highest legacy rate
+                 * for now since other parts of mac80211 may not yet be fully
+                 * MCS aware. */
+                rate = &sband->bitrates[sband->n_bitrates - 1];
+        } else {
+                if (WARN_ON(status->rate_idx < 0 ||
+                            status->rate_idx >= sband->n_bitrates))
+                        return;
+                rate = &sband->bitrates[status->rate_idx];
+        }
 
         /*
          * key references and virtual interfaces are protected using RCU
diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c
index b098c58d216f..a4af3a124cce 100644
--- a/net/mac80211/tx.c
+++ b/net/mac80211/tx.c
@@ -1473,6 +1473,19 @@ int ieee80211_subif_start_xmit(struct sk_buff *skb,
                 goto fail;
         }
 
+        if (!(local->hw.flags & IEEE80211_HW_NO_STACK_DYNAMIC_PS) &&
+            local->dynamic_ps_timeout > 0) {
+                if (local->hw.conf.flags & IEEE80211_CONF_PS) {
+                        ieee80211_stop_queues_by_reason(&local->hw,
+                                                        IEEE80211_QUEUE_STOP_REASON_PS);
+                        queue_work(local->hw.workqueue,
+                                   &local->dynamic_ps_disable_work);
+                }
+
+                mod_timer(&local->dynamic_ps_timer, jiffies +
+                          msecs_to_jiffies(local->dynamic_ps_timeout));
+        }
+
         nh_pos = skb_network_header(skb) - skb->data;
         h_pos = skb_transport_header(skb) - skb->data;
 
diff --git a/net/mac80211/util.c b/net/mac80211/util.c
index 505d68f344ce..fb89e1d0aa03 100644
--- a/net/mac80211/util.c
+++ b/net/mac80211/util.c
@@ -330,10 +330,20 @@ __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
 }
 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
 
-void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
+static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
+                                   enum queue_stop_reason reason)
 {
         struct ieee80211_local *local = hw_to_local(hw);
 
+        /* we don't need to track ampdu queues */
+        if (queue < ieee80211_num_regular_queues(hw)) {
+                __clear_bit(reason, &local->queue_stop_reasons[queue]);
+
+                if (local->queue_stop_reasons[queue] != 0)
+                        /* someone still has this queue stopped */
+                        return;
+        }
+
         if (test_bit(queue, local->queues_pending)) {
                 set_bit(queue, local->queues_pending_run);
                 tasklet_schedule(&local->tx_pending_tasklet);
@@ -341,22 +351,74 @@ void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
                 netif_wake_subqueue(local->mdev, queue);
         }
 }
+
+void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
+                                    enum queue_stop_reason reason)
+{
+        struct ieee80211_local *local = hw_to_local(hw);
+        unsigned long flags;
+
+        spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
+        __ieee80211_wake_queue(hw, queue, reason);
+        spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
+}
+
+void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
+{
+        ieee80211_wake_queue_by_reason(hw, queue,
+                                       IEEE80211_QUEUE_STOP_REASON_DRIVER);
+}
 EXPORT_SYMBOL(ieee80211_wake_queue);
 
-void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
+static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
+                                   enum queue_stop_reason reason)
 {
         struct ieee80211_local *local = hw_to_local(hw);
 
+        /* we don't need to track ampdu queues */
+        if (queue < ieee80211_num_regular_queues(hw))
+                __set_bit(reason, &local->queue_stop_reasons[queue]);
+
         netif_stop_subqueue(local->mdev, queue);
 }
+
+void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
+                                    enum queue_stop_reason reason)
+{
+        struct ieee80211_local *local = hw_to_local(hw);
+        unsigned long flags;
+
+        spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
+        __ieee80211_stop_queue(hw, queue, reason);
+        spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
+}
+
+void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
+{
+        ieee80211_stop_queue_by_reason(hw, queue,
+                                       IEEE80211_QUEUE_STOP_REASON_DRIVER);
+}
 EXPORT_SYMBOL(ieee80211_stop_queue);
 
-void ieee80211_stop_queues(struct ieee80211_hw *hw)
+void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
+                                    enum queue_stop_reason reason)
 {
+        struct ieee80211_local *local = hw_to_local(hw);
+        unsigned long flags;
         int i;
 
+        spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
+
         for (i = 0; i < ieee80211_num_queues(hw); i++)
-                ieee80211_stop_queue(hw, i);
+                __ieee80211_stop_queue(hw, i, reason);
+
+        spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
+}
+
+void ieee80211_stop_queues(struct ieee80211_hw *hw)
+{
+        ieee80211_stop_queues_by_reason(hw,
+                                        IEEE80211_QUEUE_STOP_REASON_DRIVER);
 }
 EXPORT_SYMBOL(ieee80211_stop_queues);
 
@@ -367,12 +429,24 @@ int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
 }
 EXPORT_SYMBOL(ieee80211_queue_stopped);
 
-void ieee80211_wake_queues(struct ieee80211_hw *hw)
+void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
+                                     enum queue_stop_reason reason)
 {
+        struct ieee80211_local *local = hw_to_local(hw);
+        unsigned long flags;
         int i;
 
+        spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
+
         for (i = 0; i < hw->queues + hw->ampdu_queues; i++)
-                ieee80211_wake_queue(hw, i);
+                __ieee80211_wake_queue(hw, i, reason);
+
+        spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
+}
+
+void ieee80211_wake_queues(struct ieee80211_hw *hw)
+{
+        ieee80211_wake_queues_by_reason(hw, IEEE80211_QUEUE_STOP_REASON_DRIVER);
 }
 EXPORT_SYMBOL(ieee80211_wake_queues);
 
@@ -641,7 +715,7 @@ int ieee80211_set_freq(struct ieee80211_sub_if_data *sdata, int freqMHz)
                     chan->flags & IEEE80211_CHAN_NO_IBSS)
                         return ret;
                 local->oper_channel = chan;
-                local->oper_sec_chan_offset = NL80211_SEC_CHAN_NO_HT;
+                local->oper_channel_type = NL80211_CHAN_NO_HT;
 
                 if (local->sw_scanning || local->hw_scanning)
                         ret = 0;
diff --git a/net/mac80211/wext.c b/net/mac80211/wext.c
index 15428048d01a..7162d5816f39 100644
--- a/net/mac80211/wext.c
+++ b/net/mac80211/wext.c
@@ -830,25 +830,56 @@ static int ieee80211_ioctl_siwpower(struct net_device *dev,
                                     struct iw_param *wrq,
                                     char *extra)
 {
+        struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
         struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
         struct ieee80211_conf *conf = &local->hw.conf;
+        int ret = 0, timeout = 0;
+        bool ps;
+
+        if (sdata->vif.type != NL80211_IFTYPE_STATION)
+                return -EINVAL;
 
         if (wrq->disabled) {
-                conf->flags &= ~IEEE80211_CONF_PS;
-                return ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
+                ps = false;
+                timeout = 0;
+                goto set;
         }
 
         switch (wrq->flags & IW_POWER_MODE) {
         case IW_POWER_ON:       /* If not specified */
         case IW_POWER_MODE:     /* If set all mask */
         case IW_POWER_ALL_R:    /* If explicitely state all */
-                conf->flags |= IEEE80211_CONF_PS;
+                ps = true;
+                break;
+        default:                /* Otherwise we ignore */
                 break;
-        default:                /* Otherwise we don't support it */
-                return -EINVAL;
         }
 
-        return ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
+        if (wrq->flags & IW_POWER_TIMEOUT)
+                timeout = wrq->value / 1000;
+
+set:
+        if (ps == local->powersave && timeout == local->dynamic_ps_timeout)
+                return ret;
+
+        local->powersave = ps;
+        local->dynamic_ps_timeout = timeout;
+
+        if (sdata->u.sta.flags & IEEE80211_STA_ASSOCIATED) {
+                if (!(local->hw.flags & IEEE80211_HW_NO_STACK_DYNAMIC_PS) &&
+                    local->dynamic_ps_timeout > 0)
+                        mod_timer(&local->dynamic_ps_timer, jiffies +
+                                  msecs_to_jiffies(local->dynamic_ps_timeout));
+                else {
+                        if (local->powersave)
+                                conf->flags |= IEEE80211_CONF_PS;
+                        else
+                                conf->flags &= ~IEEE80211_CONF_PS;
+                }
+                ret = ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
+        }
+
+        return ret;
 }
 
 static int ieee80211_ioctl_giwpower(struct net_device *dev,
@@ -857,9 +888,8 @@ static int ieee80211_ioctl_giwpower(struct net_device *dev,
                                     char *extra)
 {
         struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
-        struct ieee80211_conf *conf = &local->hw.conf;
 
-        wrqu->power.disabled = !(conf->flags & IEEE80211_CONF_PS);
+        wrqu->power.disabled = !local->powersave;
 
         return 0;
 }
diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
index 4335f76be71f..1e728fff474e 100644
--- a/net/wireless/nl80211.c
+++ b/net/wireless/nl80211.c
@@ -60,7 +60,7 @@ static struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] __read_mostly = {
                                       .len = BUS_ID_SIZE-1 },
         [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
         [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
-        [NL80211_ATTR_WIPHY_SEC_CHAN_OFFSET] = { .type = NLA_U32 },
+        [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
 
         [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
         [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
@@ -362,8 +362,7 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
         }
 
         if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
-                enum nl80211_sec_chan_offset sec_chan_offset =
-                        NL80211_SEC_CHAN_NO_HT;
+                enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
                 struct ieee80211_channel *chan;
                 struct ieee80211_sta_ht_cap *ht_cap;
                 u32 freq, sec_freq;
@@ -375,13 +374,13 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
 
                 result = -EINVAL;
 
-                if (info->attrs[NL80211_ATTR_WIPHY_SEC_CHAN_OFFSET]) {
-                        sec_chan_offset = nla_get_u32(info->attrs[
-                                        NL80211_ATTR_WIPHY_SEC_CHAN_OFFSET]);
-                        if (sec_chan_offset != NL80211_SEC_CHAN_NO_HT &&
-                            sec_chan_offset != NL80211_SEC_CHAN_DISABLED &&
-                            sec_chan_offset != NL80211_SEC_CHAN_BELOW &&
-                            sec_chan_offset != NL80211_SEC_CHAN_ABOVE)
+                if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
+                        channel_type = nla_get_u32(info->attrs[
+                                           NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
+                        if (channel_type != NL80211_CHAN_NO_HT &&
+                            channel_type != NL80211_CHAN_HT20 &&
+                            channel_type != NL80211_CHAN_HT40PLUS &&
+                            channel_type != NL80211_CHAN_HT40MINUS)
                                 goto bad_res;
                 }
 
@@ -392,9 +391,9 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
                 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
                         goto bad_res;
 
-                if (sec_chan_offset == NL80211_SEC_CHAN_BELOW)
+                if (channel_type == NL80211_CHAN_HT40MINUS)
                         sec_freq = freq - 20;
-                else if (sec_chan_offset == NL80211_SEC_CHAN_ABOVE)
+                else if (channel_type == NL80211_CHAN_HT40PLUS)
                         sec_freq = freq + 20;
                 else
                         sec_freq = 0;
@@ -402,7 +401,7 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
                 ht_cap = &rdev->wiphy.bands[chan->band]->ht_cap;
 
                 /* no HT capabilities */
-                if (sec_chan_offset != NL80211_SEC_CHAN_NO_HT &&
+                if (channel_type != NL80211_CHAN_NO_HT &&
                     !ht_cap->ht_supported)
                         goto bad_res;
 
@@ -422,7 +421,7 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
                 }
 
                 result = rdev->ops->set_channel(&rdev->wiphy, chan,
-                                                sec_chan_offset);
+                                                channel_type);
                 if (result)
                         goto bad_res;
         }
@@ -1091,12 +1090,46 @@ static int parse_station_flags(struct nlattr *nla, u32 *staflags)
         return 0;
 }
 
+static u16 nl80211_calculate_bitrate(struct rate_info *rate)
+{
+        int modulation, streams, bitrate;
+
+        if (!(rate->flags & RATE_INFO_FLAGS_MCS))
+                return rate->legacy;
+
+        /* the formula below does only work for MCS values smaller than 32 */
+        if (rate->mcs >= 32)
+                return 0;
+
+        modulation = rate->mcs & 7;
+        streams = (rate->mcs >> 3) + 1;
+
+        bitrate = (rate->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) ?
+                        13500000 : 6500000;
+
+        if (modulation < 4)
+                bitrate *= (modulation + 1);
+        else if (modulation == 4)
+                bitrate *= (modulation + 2);
+        else
+                bitrate *= (modulation + 3);
+
+        bitrate *= streams;
+
+        if (rate->flags & RATE_INFO_FLAGS_SHORT_GI)
+                bitrate = (bitrate / 9) * 10;
+
+        /* do NOT round down here */
+        return (bitrate + 50000) / 100000;
+}
+
 static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
                                 int flags, struct net_device *dev,
                                 u8 *mac_addr, struct station_info *sinfo)
 {
         void *hdr;
-        struct nlattr *sinfoattr;
+        struct nlattr *sinfoattr, *txrate;
+        u16 bitrate;
 
         hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
         if (!hdr)
@@ -1126,7 +1159,29 @@ static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
         if (sinfo->filled & STATION_INFO_PLINK_STATE)
                 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
                             sinfo->plink_state);
+        if (sinfo->filled & STATION_INFO_SIGNAL)
+                NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
+                           sinfo->signal);
+        if (sinfo->filled & STATION_INFO_TX_BITRATE) {
+                txrate = nla_nest_start(msg, NL80211_STA_INFO_TX_BITRATE);
+                if (!txrate)
+                        goto nla_put_failure;
+
+                /* nl80211_calculate_bitrate will return 0 for mcs >= 32 */
+                bitrate = nl80211_calculate_bitrate(&sinfo->txrate);
+                if (bitrate > 0)
+                        NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
 
+                if (sinfo->txrate.flags & RATE_INFO_FLAGS_MCS)
+                        NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS,
+                                    sinfo->txrate.mcs);
+                if (sinfo->txrate.flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
+                        NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
+                if (sinfo->txrate.flags & RATE_INFO_FLAGS_SHORT_GI)
+                        NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
+
+                nla_nest_end(msg, txrate);
+        }
         nla_nest_end(msg, sinfoattr);
 
         return genlmsg_end(msg, hdr);