qcacld-3.0: add critical update feature

Add critical update feature code. If BSS parameters change
count (BPCC) is changed, the value of cu_flag returns from
function lim_check_cu_happens is true. It can try to update
the critical update IEs code logic per cu_flag.

Change-Id: I39445a75e747e6e00a29be726fd447b9fbc7fb17
CRs-Fixed: 3296181

Kbuild

@@ -1382,6 +1382,7 @@ ifeq ($(CONFIG_WLAN_FEATURE_11BE_MLO), y)
 UMAC_MLO_MGR_OBJS := $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_main.o \
 			  $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_cmn.o \
 			  $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_sta.o \
+			  $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_op.o \
 			  $(UMAC_MLO_MGR_CMN_DIR)/src/utils_mlo.o \
 			  $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_ap.o \
 			  $(UMAC_MLO_MGR_CMN_DIR)/src/wlan_mlo_mgr_peer_list.o \

components/umac/mlme/connection_mgr/core/src/wlan_cm_roam_fw_sync.c

@@ -973,6 +973,7 @@ cm_fw_roam_sync_propagation(struct wlan_objmgr_psoc *psoc, uint8_t vdev_id,
 		policy_mgr_move_vdev_from_disabled_to_connection_tbl(psoc,
 								     vdev_id);
 	mlo_roam_copy_partner_info(connect_rsp, roam_synch_data);
+	mlo_roam_init_cu_bpcc(vdev, roam_synch_data);
 	mlo_roam_set_link_id(vdev, roam_synch_data);
 
 	/**

components/umac/mlme/mlo_mgr/inc/wlan_mlo_mgr_roam.h

@@ -159,6 +159,18 @@ QDF_STATUS mlo_enable_rso(struct wlan_objmgr_pdev *pdev,
 void mlo_roam_copy_partner_info(struct wlan_cm_connect_resp *connect_rsp,
 				struct roam_offload_synch_ind *sync_ind);
 
+/**
+ * mlo_roam_init_cu_bpcc() - init cu bpcc per roam sync data
+ * @vdev: vdev object
+ * @sync_ind: roam sync ind pointer
+ *
+ * This api will be called to init cu bpcc from connect response.
+ *
+ * Return: none
+ */
+void mlo_roam_init_cu_bpcc(struct wlan_objmgr_vdev *vdev,
+			   struct roam_offload_synch_ind *sync_ind);
+
 /**
  * mlo_roam_update_connected_links - update connected links bitmap after roaming
  *
@@ -413,6 +425,11 @@ mlo_roam_copy_partner_info(struct wlan_cm_connect_resp *connect_rsp,
 			   struct roam_offload_synch_ind *sync_ind)
 {}
 
+static inline
+void mlo_roam_init_cu_bpcc(struct wlan_objmgr_vdev *vdev,
+			   struct roam_offload_synch_ind *sync_ind)
+{}
+
 static inline void
 mlo_roam_update_connected_links(struct wlan_objmgr_vdev *vdev,
 				struct wlan_cm_connect_resp *connect_rsp)

components/umac/mlme/mlo_mgr/src/wlan_mlo_mgr_roam.c

@@ -528,6 +528,30 @@ mlo_roam_copy_partner_info(struct wlan_cm_connect_resp *connect_rsp,
 	mlo_debug("num_setup_links %d", sync_ind->num_setup_links);
 }
 
+void mlo_roam_init_cu_bpcc(struct wlan_objmgr_vdev *vdev,
+			   struct roam_offload_synch_ind *sync_ind)
+{
+	uint8_t i;
+	struct wlan_mlo_dev_context *mlo_dev_ctx;
+
+	if (!vdev) {
+		mlo_err("vdev is NULL");
+		return;
+	}
+
+	mlo_dev_ctx = vdev->mlo_dev_ctx;
+	if (!mlo_dev_ctx) {
+		mlo_err("ML dev ctx is NULL");
+		return;
+	}
+
+	mlo_clear_cu_bpcc(vdev);
+	for (i = 0; i < sync_ind->num_setup_links; i++)
+		mlo_init_cu_bpcc(mlo_dev_ctx, sync_ind->ml_link[i].vdev_id);
+
+	mlo_debug("update cu info from roam sync");
+}
+
 void
 mlo_roam_update_connected_links(struct wlan_objmgr_vdev *vdev,
 				struct wlan_cm_connect_resp *connect_rsp)

core/mac/src/pe/include/lim_api.h

@@ -1,6 +1,6 @@
 /*
  * Copyright (c) 2011-2021 The Linux Foundation. All rights reserved.
- * Copyright (c) 2021-2022 Qualcomm Innovation Center, Inc. All rights reserved.
+ * Copyright (c) 2021-2023 Qualcomm Innovation Center, Inc. All rights reserved.
  *
  * Permission to use, copy, modify, and/or distribute this software for
  * any purpose with or without fee is hereby granted, provided that the
@@ -623,6 +623,24 @@ lim_gen_link_specific_probe_rsp(struct mac_context *mac_ctx,
  */
 QDF_STATUS lim_check_for_ml_probe_req(struct pe_session *session);
 
+/**
+ * lim_process_cu_for_probe_rsp() - process critical update for probe response
+ * @mac_ctx: Pointer to mac context
+ * @session: pe session
+ * @probe_rsp: ptr to probe response
+ * @probe_rsp_len: length of probe response
+ *
+ * This api will generate link specific probe response and invoke function
+ * to process critical update IEs
+ *
+ * Return: qdf status
+ */
+QDF_STATUS
+lim_process_cu_for_probe_rsp(struct mac_context *mac_ctx,
+			     struct pe_session *session,
+			     uint8_t *probe_rsp,
+			     uint32_t probe_rsp_len);
+
 /**
  * lim_gen_link_probe_rsp_roam() - Generate link prb rsp from assoc link prb rsp
  * @mac_ctx: Pointer to mac context
@@ -660,6 +678,15 @@ lim_gen_link_probe_rsp_roam(struct mac_context *mac_ctx,
 {
 	return QDF_STATUS_E_NOSUPPORT;
 }
+
+static inline QDF_STATUS
+lim_process_cu_for_probe_rsp(struct mac_context *mac_ctx,
+			     struct pe_session *session,
+			     uint8_t *probe_rsp,
+			     uint32_t probe_rsp_len)
+{
+	return QDF_STATUS_SUCCESS;
+}
 #endif
 
 #ifdef WLAN_FEATURE_SR

core/mac/src/pe/lim/lim_api.c

@@ -4063,6 +4063,124 @@ end:
 	qdf_mem_free(probe_rsp);
 	return status;
 }
+
+QDF_STATUS
+lim_process_cu_for_probe_rsp(struct mac_context *mac_ctx,
+			     struct pe_session *session,
+			     uint8_t *probe_rsp,
+			     uint32_t probe_rsp_len)
+{
+	struct element_info link_probe_rsp;
+	struct qdf_mac_addr sta_link_addr;
+	struct wlan_objmgr_vdev *vdev;
+	struct wlan_objmgr_vdev *partner_vdev;
+	uint8_t *ml_ie = NULL;
+	qdf_size_t ml_ie_total_len = 0;
+	struct mlo_partner_info partner_info;
+	uint8_t i, link_id, vdev_id;
+	uint8_t bpcc, aui;
+	bool cu_flag = false;
+	const uint8_t *rnr;
+	QDF_STATUS status = QDF_STATUS_E_INVAL;
+
+	vdev = session->vdev;
+	if (!vdev || !wlan_vdev_mlme_is_mlo_vdev(vdev))
+		return status;
+
+	rnr = wlan_get_ie_ptr_from_eid(WLAN_ELEMID_REDUCED_NEIGHBOR_REPORT,
+				   probe_rsp + WLAN_PROBE_RESP_IES_OFFSET,
+				   probe_rsp_len - WLAN_PROBE_RESP_IES_OFFSET);
+	if (!rnr)
+		return status;
+
+	status = util_find_mlie(probe_rsp + WLAN_PROBE_RESP_IES_OFFSET,
+				probe_rsp_len - WLAN_PROBE_RESP_IES_OFFSET,
+				&ml_ie, &ml_ie_total_len);
+	if (QDF_IS_STATUS_ERROR(status)) {
+		pe_err("Mlo ie not found in Probe response");
+		return status;
+	}
+
+	status = util_get_bvmlie_persta_partner_info(ml_ie,
+						     ml_ie_total_len,
+						     &partner_info);
+	if (QDF_IS_STATUS_ERROR(status)) {
+		pe_err("Per STA profile parsing failed");
+		return status;
+	}
+
+	link_probe_rsp.ptr = qdf_mem_malloc(probe_rsp_len);
+	if (!link_probe_rsp.ptr)
+		return QDF_STATUS_E_NOMEM;
+
+	for (i = 0; i < partner_info.num_partner_links; i++) {
+		link_id = partner_info.partner_link_info[i].link_id;
+		partner_vdev = mlo_get_vdev_by_link_id(vdev, link_id);
+		if (!partner_vdev) {
+			pe_debug("No partner vdev for link id %d", link_id);
+			continue;
+		}
+
+		status = lim_cu_info_from_rnr_per_link_id(rnr, link_id,
+							  &bpcc, &aui);
+		if (QDF_IS_STATUS_ERROR(status)) {
+			wlan_objmgr_vdev_release_ref(partner_vdev,
+						     WLAN_MLO_MGR_ID);
+			pe_debug("no cu info in rnr for link id %d", link_id);
+			continue;
+		}
+
+		cu_flag = lim_check_cu_happens(partner_vdev, bpcc);
+		if (!cu_flag) {
+			wlan_objmgr_vdev_release_ref(partner_vdev,
+						     WLAN_MLO_MGR_ID);
+			continue;
+		}
+
+		vdev_id = wlan_vdev_get_id(partner_vdev);
+		session = pe_find_session_by_vdev_id(mac_ctx, vdev_id);
+		if (!session) {
+			wlan_objmgr_vdev_release_ref(partner_vdev,
+						     WLAN_MLO_MGR_ID);
+			pe_debug("session is null for vdev id %d", vdev_id);
+			continue;
+		}
+
+		qdf_mem_copy(&sta_link_addr, session->self_mac_addr,
+			     QDF_MAC_ADDR_SIZE);
+
+		link_probe_rsp.len = probe_rsp_len;
+		/* Todo:
+		 * it needs to use link_id as parameter to generate
+		 * specific probe rsp frame when api util_gen_link_probe_rsp
+		 * updated.
+		 */
+		status =
+		     util_gen_link_probe_rsp(probe_rsp, probe_rsp_len,
+					     sta_link_addr, link_probe_rsp.ptr,
+					     probe_rsp_len,
+					     (qdf_size_t *)&link_probe_rsp.len);
+		if (QDF_IS_STATUS_ERROR(status)) {
+			pe_err("MLO: Link probe response generation failed %d",
+			       status);
+			wlan_objmgr_vdev_release_ref(partner_vdev,
+						     WLAN_MLO_MGR_ID);
+			continue;
+		}
+
+		lim_process_gen_probe_rsp_frame(mac_ctx, session,
+						link_probe_rsp.ptr,
+						link_probe_rsp.len);
+
+		wlan_objmgr_vdev_release_ref(partner_vdev,
+					     WLAN_MLO_MGR_ID);
+	}
+
+	qdf_mem_free(link_probe_rsp.ptr);
+	link_probe_rsp.ptr = NULL;
+	link_probe_rsp.len = 0;
+	return status;
+}
 #endif
 
 #ifdef WLAN_FEATURE_SR

core/mac/src/pe/lim/lim_mlo.c

@@ -1,6 +1,6 @@
 /*
  * Copyright (c) 2021, The Linux Foundation. All rights reserved.
- * Copyright (c) 2021-2022 Qualcomm Innovation Center, Inc. All rights reserved.
+ * Copyright (c) 2021-2023 Qualcomm Innovation Center, Inc. All rights reserved.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
  * purpose with or without fee is hereby granted, provided that the above
@@ -27,14 +27,122 @@
 #include "sch_api.h"
 #include "lim_types.h"
 #include "wlan_mlo_mgr_ap.h"
+#include "wlan_mlo_mgr_op.h"
 #include <wlan_mlo_mgr_peer.h>
 #include <lim_assoc_utils.h>
 #include <wlan_mlo_mgr_peer.h>
 #include <lim_utils.h>
 #include <utils_mlo.h>
 
+QDF_STATUS lim_cu_info_from_rnr_per_link_id(const uint8_t *rnr,
+					    uint8_t linkid, uint8_t *bpcc,
+					    uint8_t *aui)
+{
+	const uint8_t *data, *rnr_end;
+	struct neighbor_ap_info_field *neighbor_ap_info;
+	uint8_t tbtt_type, tbtt_len, tbtt_count;
+	uint8_t mld_pos, mld_id, link_id;
+	struct rnr_mld_info *mld_param;
+	int32_t i, len;
+	uint8_t nbr_ap_info_len = sizeof(struct neighbor_ap_info_field);
+
+	if (!rnr)
+		return QDF_STATUS_E_INVAL;
+
+	rnr_end = rnr + rnr[TAG_LEN_POS] + MIN_IE_LEN;
+	data = rnr + PAYLOAD_START_POS;
+	while (data < rnr_end) {
+		neighbor_ap_info = (struct neighbor_ap_info_field *)data;
+		tbtt_count = neighbor_ap_info->tbtt_header.tbtt_info_count;
+		tbtt_len = neighbor_ap_info->tbtt_header.tbtt_info_length;
+		tbtt_type = neighbor_ap_info->tbtt_header.tbbt_info_fieldtype;
+		len = tbtt_len * (tbtt_count + 1) + nbr_ap_info_len;
+		if (data + len > rnr_end)
+			return QDF_STATUS_E_INVAL;
+
+		if (tbtt_len >=
+		    TBTT_NEIGHBOR_AP_BSSID_S_SSID_BSS_PARAM_20MHZ_PSD_MLD_PARAM)
+			mld_pos =
+			      TBTT_NEIGHBOR_AP_BSSID_S_SSID_BSS_PARAM_20MHZ_PSD;
+		else
+			mld_pos = 0;
+
+		if (mld_pos == 0 || tbtt_type != 0) {
+			data += len;
+			continue;
+		}
+
+		data += nbr_ap_info_len;
+		for (i = 0; i < tbtt_count + 1; i++) {
+			mld_param = (struct rnr_mld_info *)&data[mld_pos];
+			mld_id = mld_param->mld_id;
+			if (mld_id == 0) {
+				link_id = mld_param->link_id;
+				if (linkid == link_id) {
+					*bpcc = mld_param->bss_param_change_cnt;
+					*aui = mld_param->all_updates_included;
+					pe_debug("rnr bpcc %d, aui %d, linkid %d",
+						 *bpcc, *aui, linkid);
+					return QDF_STATUS_SUCCESS;
+				}
+			}
+			data += tbtt_len;
+		}
+	}
+
+	return QDF_STATUS_E_INVAL;
+}
+
+QDF_STATUS lim_get_bpcc_from_mlo_ie(tSchBeaconStruct *bcn, uint8_t *bpcc)
+{
+	struct sir_multi_link_ie *mlo_ie;
+	QDF_STATUS status = QDF_STATUS_E_INVAL;
+
+	if (!bcn)
+		return status;
+
+	mlo_ie = &bcn->mlo_ie;
+	if (mlo_ie->mlo_ie_present &&
+	    mlo_ie->mlo_ie.bss_param_change_cnt_present) {
+		*bpcc = mlo_ie->mlo_ie.bss_param_change_count;
+		status = QDF_STATUS_SUCCESS;
+	} else {
+		*bpcc = 0;
+	}
+
+	return status;
+}
+
+bool lim_check_cu_happens(struct wlan_objmgr_vdev *vdev, uint8_t new_bpcc)
+{
+	uint8_t bpcc;
+	uint8_t vdev_id;
+	QDF_STATUS status;
+
+	if (!vdev || !wlan_vdev_mlme_is_mlo_vdev(vdev))
+		return false;
+
+	vdev_id = wlan_vdev_get_id(vdev);
+
+	status = wlan_mlo_get_cu_bpcc(vdev, &bpcc);
+	if (QDF_IS_STATUS_ERROR(status))
+		return false;
+
+	if (new_bpcc == 0 && bpcc == 0)
+		return false;
+
+	pe_debug("new bpcc %d, old bpcc %d, vdev id %d",
+		 new_bpcc, bpcc, vdev_id);
+	if (new_bpcc && new_bpcc < bpcc)
+		return false;
+
+	wlan_mlo_set_cu_bpcc(vdev, new_bpcc);
+
+	return true;
+}
+
 /**
- * lim_send_mlo_ie_update - mlo ie is changed, populate new beacon template
+ * lim_send_mlo_ie_update() - mlo ie is changed, populate new beacon template
  * @session: pe session
  *
  * Return: void
@@ -903,8 +1011,8 @@ QDF_STATUS lim_fill_complete_mlo_ie(struct pe_session *session,
 	mlo_ie_total_len = pbuf - buf - MIN_IE_LEN;
 
 	for (i = 0; i < mlo_ie_total_len; i++) {
-		if (i && i % WLAN_MAX_IE_LEN == 0) {
-			/* add flagmentation IE and length */
+		if (i && (i % WLAN_MAX_IE_LEN) == 0) {
+			/* add fragmentation IE and length */
 			target[consumed++] = WLAN_ELEMID_FRAGMENT;
 			if ((mlo_ie_total_len - i) > WLAN_MAX_IE_LEN)
 				target[consumed++] = WLAN_MAX_IE_LEN;
@@ -952,7 +1060,7 @@ QDF_STATUS lim_store_mlo_ie_raw_info(uint8_t *ie, uint8_t *sta_prof_ie,
 				     uint32_t total_len,
 				     struct wlan_mlo_ie *mlo_ie)
 {
-	uint8_t i, frag_num = 0, sta_index;
+	uint32_t i, frag_num = 0, sta_index;
 	/* ml_ie_len = total_len - 2 * frag_num, does not include
 	 * WLAN_ELEMID_FRAGMENT IE and LEN
 	 */
@@ -990,6 +1098,9 @@ QDF_STATUS lim_store_mlo_ie_raw_info(uint8_t *ie, uint8_t *sta_prof_ie,
 	}
 	ml_ie_len = total_len - frag_num * MIN_IE_LEN;
 
+	pe_debug("ml_ie_len: %d, total_len: %d, frag_num: %d", ml_ie_len,
+		 total_len, frag_num);
+
 	buf = qdf_mem_malloc(total_len);
 	if (!buf)
 		return QDF_STATUS_E_NOMEM;
@@ -1001,20 +1112,20 @@ QDF_STATUS lim_store_mlo_ie_raw_info(uint8_t *ie, uint8_t *sta_prof_ie,
 	buf[index++] = ie[copied++];
 	for (i = 0; i < ml_ie_len - MIN_IE_LEN; i++) {
 		/* skip the frag IE */
-		if (i && i % WLAN_MAX_IE_LEN == 0)
+		if (i && (i % WLAN_MAX_IE_LEN) == 0)
 			copied += MIN_IE_LEN;
 		buf[index++] = ie[copied++];
 	}
 
 	/* copy sta profile from buf, it has copied the common info */
-	index = 0;
 	sta_index = 0;
 	copied = mlo_ie->num_data;
 	pfrm = buf + copied;
 	while (copied < ml_ie_len && sta_index < WLAN_MLO_MAX_VDEVS &&
 	       pfrm[ID_POS] == WLAN_ML_LINFO_SUBELEMID_PERSTAPROFILE) {
-		sta_prof = &mlo_ie->sta_profile[sta_index++];
+		sta_prof = &mlo_ie->sta_profile[sta_index];
 		sta_data = sta_prof->data;
+		index = 0;
 
 		sta_data[index++] = buf[copied++];
 		sta_data[index++] = buf[copied++];
@@ -1042,6 +1153,9 @@ QDF_STATUS lim_store_mlo_ie_raw_info(uint8_t *ie, uint8_t *sta_prof_ie,
 			}
 			pfrm += pfrm[TAG_LEN_POS] + MIN_IE_LEN;
 		} while (frag);
+		pe_debug("sta index: %d, sta_data len: %d, copied: %d",
+			 sta_index, index, copied);
+		sta_index++;
 	}
 
 	mlo_ie->num_sta_profile = sta_index;
@@ -1080,7 +1194,7 @@ QDF_STATUS lim_add_frag_ie_for_sta_profile(uint8_t *data, uint16_t *len)
 	data[consumed++] = buf[index++];
 	for (i = 0; i < (*len - MIN_IE_LEN); i++) {
 		data[consumed++] = buf[index++];
-		if (i && i % WLAN_MAX_IE_LEN == 0) {
+		if (i && (i % WLAN_MAX_IE_LEN) == 0) {
 			data[consumed++] = WLAN_ML_LINFO_SUBELEMID_FRAGMENT;
 			if ((*len - MIN_IE_LEN - i) > WLAN_MAX_IE_LEN)
 				data[consumed++] = WLAN_MAX_IE_LEN;

core/mac/src/pe/lim/lim_mlo.h

@@ -1,6 +1,6 @@
 /*
  * Copyright (c) 2021, The Linux Foundation. All rights reserved.
- * Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
+ * Copyright (c) 2022-2023 Qualcomm Innovation Center, Inc. All rights reserved.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
  * purpose with or without fee is hereby granted, provided that the above
@@ -337,6 +337,39 @@ bool lim_is_ml_peer_state_disconn(struct mac_context *mac_ctx,
 				  uint8_t *mac_addr);
 
 bool lim_is_emlsr_band_supported(struct pe_session *session);
+
+/**
+ * lim_cu_info_from_rnr_per_link_id() - get the cu info from rnr per link id
+ * @rnr: rnr element
+ * @linkid: link id
+ * @bpcc: pointer to save BSS parameters change count
+ * @aui: pointer to save all updates included flag
+ *
+ * Return: QDF_STATUS
+ */
+QDF_STATUS lim_cu_info_from_rnr_per_link_id(const uint8_t *rnr,
+					    uint8_t linkid, uint8_t *bpcc,
+					    uint8_t *aui);
+
+/**
+ * lim_get_bpcc_from_mlo_ie() - get the bpcc from mlo_ie info
+ * @bcn: the pointer to tSchBeaconStruct
+ * @bpcc: pbcc pointer to save the fetched value
+ *
+ * Return: QDF_STATUS
+ */
+QDF_STATUS lim_get_bpcc_from_mlo_ie(tSchBeaconStruct *bcn,
+				    uint8_t *bpcc);
+
+/**
+ * lim_check_cu_happens() - check whether cu happens
+ * @vdev: vdev object
+ * @new_bpcc: the new bpcc
+ *
+ * Return: bool
+ */
+bool lim_check_cu_happens(struct wlan_objmgr_vdev *vdev, uint8_t new_bpcc);
+
 #else
 static inline void lim_mlo_notify_peer_disconn(struct pe_session *pe_session,
 					       tpDphHashNode sta_ds)
@@ -462,5 +495,25 @@ bool lim_is_emlsr_band_supported(struct pe_session *session)
 {
 	return false;
 }
+
+static inline
+QDF_STATUS lim_cu_info_from_rnr_per_link_id(const uint8_t *rnr, uint8_t linkid,
+					    uint8_t *bpcc, uint8_t *aui)
+{
+	return QDF_STATUS_E_INVAL;
+}
+
+static inline
+QDF_STATUS lim_get_bpcc_from_mlo_ie(tSchBeaconStruct *bcn,
+				    uint8_t *bpcc)
+{
+	return QDF_STATUS_E_INVAL;
+}
+
+static inline
+bool lim_check_cu_happens(struct wlan_objmgr_vdev *vdev, uint8_t nbpcc)
+{
+	return true;
+}
 #endif
 #endif

core/mac/src/pe/lim/lim_process_beacon_frame.c

@@ -40,8 +40,9 @@
 #include "lim_ser_des_utils.h"
 #include "wlan_mlo_t2lm.h"
 #include "wlan_mlo_mgr_roam.h"
+#include "lim_mlo.h"
+#include "wlan_mlo_mgr_sta.h"
 #ifdef WLAN_FEATURE_11BE_MLO
-#include <wlan_mlo_mgr_sta.h>
 #include <cds_ieee80211_common.h>
 #endif
 
@@ -132,6 +133,7 @@ void lim_process_beacon_mlo(struct mac_context *mac_ctx,
 			    stacontrol,
 			    WLAN_ML_BV_LINFO_PERSTAPROF_STACTRL_LINKID_IDX,
 			    WLAN_ML_BV_LINFO_PERSTAPROF_STACTRL_LINKID_BITS);
+
 		if (!mlo_is_sta_csa_synced(mlo_ctx, link_id)) {
 			csa_ie = (struct ieee80211_channelswitch_ie *)
 					wlan_get_ie_ptr_from_eid(
@@ -378,6 +380,9 @@ lim_process_beacon_frame(struct mac_context *mac_ctx, uint8_t *rx_pkt_info,
 	uint8_t *frame;
 	const uint8_t *owe_transition_ie;
 	uint16_t frame_len;
+	uint8_t bpcc;
+	bool cu_flag = true;
+	QDF_STATUS status;
 
 	mac_ctx->lim.gLimNumBeaconsRcvd++;
 
@@ -423,6 +428,13 @@ lim_process_beacon_frame(struct mac_context *mac_ctx, uint8_t *rx_pkt_info,
 		return;
 	}
 
+	if (mlo_is_mld_sta(session->vdev)) {
+		cu_flag = false;
+		status = lim_get_bpcc_from_mlo_ie(bcn_ptr, &bpcc);
+		if (QDF_IS_STATUS_SUCCESS(status))
+			cu_flag = lim_check_cu_happens(session->vdev, bpcc);
+	}
+
 	lim_process_bcn_prb_rsp_t2lm(mac_ctx, session, bcn_ptr);
 	if (QDF_IS_STATUS_SUCCESS(lim_check_for_ml_probe_req(session)))
 		goto end;
@@ -483,6 +495,9 @@ lim_process_beacon_frame(struct mac_context *mac_ctx, uint8_t *rx_pkt_info,
 		lim_check_and_announce_join_success(mac_ctx, bcn_ptr,
 				mac_hdr, session);
 	}
+
+	if (cu_flag)
+		lim_process_beacon_eht(mac_ctx, session, bcn_ptr);
 end:
 	qdf_mem_free(bcn_ptr);
 	return;

core/mac/src/pe/lim/lim_process_probe_rsp_frame.c

@@ -1,6 +1,6 @@
 /*
  * Copyright (c) 2011-2021 The Linux Foundation. All rights reserved.
- * Copyright (c) 2021-2022 Qualcomm Innovation Center, Inc. All rights reserved.
+ * Copyright (c) 2021-2023 Qualcomm Innovation Center, Inc. All rights reserved.
  *
  * Permission to use, copy, modify, and/or distribute this software for
  * any purpose with or without fee is hereby granted, provided that the
@@ -41,7 +41,8 @@
 #include "lim_prop_exts_utils.h"
 #include "lim_ser_des_utils.h"
 #include "lim_send_messages.h"
-
+#include "lim_mlo.h"
+#include "wlan_mlo_mgr_sta.h"
 #include "parser_api.h"
 
 /**
@@ -84,6 +85,121 @@ lim_validate_ie_information_in_probe_rsp_frame(struct mac_context *mac_ctx,
 	return status;
 }
 
+/**
+ * lim_process_updated_ies_in_probe_rsp() -  process IEs of probe rsp frame
+ * @mac_ctx: pointer to global mac context
+ * @session_entry: pointer to pe session
+ * @probe_rsp: pointer to structure tSirProbeRespBeacon
+ *
+ * Return: void
+ */
+static void
+lim_process_updated_ies_in_probe_rsp(struct mac_context *mac_ctx,
+				     struct pe_session *session_entry,
+				     tSirProbeRespBeacon *probe_rsp)
+{
+	bool qos_enabled;
+	bool wme_enabled;
+	tpDphHashNode sta_ds;
+	QDF_STATUS status;
+
+	if (session_entry->limMlmState == eLIM_MLM_LINK_ESTABLISHED_STATE) {
+		/*
+		 * Now Process EDCA Parameters, if EDCAParamSet
+		 * count is different.
+		 * -- While processing beacons in link established
+		 * state if it is determined that
+		 * QoS Info IE has a different count for EDCA Params,
+		 * and EDCA IE is not present in beacon,
+		 * then probe req is sent out to get the EDCA params.
+		 */
+		sta_ds = dph_get_hash_entry(mac_ctx, DPH_STA_HASH_INDEX_PEER,
+					    &session_entry->dph.dphHashTable);
+
+		limGetQosMode(session_entry, &qos_enabled);
+		limGetWmeMode(session_entry, &wme_enabled);
+		pe_debug("wmeEdcaPresent: %d wme_enabled: %d edcaPresent: %d, qos_enabled: %d edcaParams.qosInfo.count: %d schObject.gLimEdcaParamSetCount: %d",
+			 probe_rsp->wmeEdcaPresent, wme_enabled,
+			 probe_rsp->edcaPresent, qos_enabled,
+			 probe_rsp->edcaParams.qosInfo.count,
+			 session_entry->gLimEdcaParamSetCount);
+
+		if (((probe_rsp->wmeEdcaPresent && wme_enabled) ||
+		     (probe_rsp->edcaPresent && qos_enabled)) &&
+		    (probe_rsp->edcaParams.qosInfo.count !=
+		     session_entry->gLimEdcaParamSetCount)) {
+			status = sch_beacon_edca_process(mac_ctx,
+						    &probe_rsp->edcaParams,
+						    session_entry);
+			if (QDF_IS_STATUS_ERROR(status)) {
+				pe_err("EDCA param process error");
+			} else if (sta_ds) {
+				qdf_mem_copy(&sta_ds->qos.peer_edca_params,
+					     &probe_rsp->edcaParams,
+					     sizeof(probe_rsp->edcaParams));
+				/*
+				 * If needed, downgrade the
+				 * EDCA parameters
+				 */
+				lim_set_active_edca_params(mac_ctx,
+						session_entry->gLimEdcaParams,
+						session_entry);
+				lim_send_edca_params(mac_ctx,
+					session_entry->gLimEdcaParamsActive,
+					session_entry->vdev_id, false);
+				sch_qos_concurrency_update();
+			} else {
+				pe_err("SelfEntry missing in Hash");
+			}
+		}
+		if (session_entry->fWaitForProbeRsp) {
+			pe_warn("Check probe resp for caps change");
+			lim_detect_change_in_ap_capabilities(mac_ctx, probe_rsp,
+							     session_entry);
+		}
+	}
+}
+
+void lim_process_gen_probe_rsp_frame(struct mac_context *mac_ctx,
+				     struct pe_session *session_entry,
+				     uint8_t *bcn_probe, uint32_t len)
+{
+	tSirProbeRespBeacon *probe_rsp;
+	tpSirMacMgmtHdr header;
+	QDF_STATUS status;
+
+	if (!bcn_probe || !len) {
+		pe_err("bcn_probe is null or invalid len %d", len);
+		return;
+	}
+
+	if (!session_entry) {
+		pe_err("session_entry is NULL");
+		return;
+	}
+
+	probe_rsp = qdf_mem_malloc(sizeof(tSirProbeRespBeacon));
+	if (!probe_rsp) {
+		pe_err("Unable to allocate memory");
+		return;
+	}
+
+	header = (tpSirMacMgmtHdr)(bcn_probe);
+	pe_debug("Generate Probe Resp(len %d): " QDF_MAC_ADDR_FMT,
+		 len, QDF_MAC_ADDR_REF(header->bssId));
+
+	status = sir_convert_probe_frame2_struct(mac_ctx,
+						 bcn_probe, len, probe_rsp);
+	if (QDF_IS_STATUS_ERROR(status) || !probe_rsp->ssidPresent) {
+		pe_err("Parse error ProbeResponse, length=%d", len);
+		qdf_mem_free(probe_rsp);
+		return;
+	}
+
+	lim_process_updated_ies_in_probe_rsp(mac_ctx, session_entry, probe_rsp);
+	qdf_mem_free(probe_rsp);
+}
+
 /**
  * lim_process_probe_rsp_frame() - processes received Probe Response frame
  * @mac_ctx: Pointer to Global MAC structure
@@ -107,9 +223,10 @@ lim_process_probe_rsp_frame(struct mac_context *mac_ctx, uint8_t *rx_Packet_info
 	tSirMacAddr current_bssid;
 	tpSirMacMgmtHdr header;
 	tSirProbeRespBeacon *probe_rsp;
-	uint8_t qos_enabled = false;
-	uint8_t wme_enabled = false;
 	uint32_t chan_freq = 0;
+	uint8_t bpcc;
+	bool cu_flag = true;
+	QDF_STATUS status;
 
 	if (!session_entry) {
 		pe_err("session_entry is NULL");
@@ -164,6 +281,17 @@ lim_process_probe_rsp_frame(struct mac_context *mac_ctx, uint8_t *rx_Packet_info
 					frame_len,
 					mac_ctx->lim.bss_rssi);
 
+	if (mlo_is_mld_sta(session_entry->vdev)) {
+		cu_flag = false;
+		status = lim_get_bpcc_from_mlo_ie(probe_rsp, &bpcc);
+		if (QDF_IS_STATUS_SUCCESS(status)) {
+			cu_flag = lim_check_cu_happens(session_entry->vdev,
+						       bpcc);
+			lim_process_cu_for_probe_rsp(mac_ctx, session_entry,
+						     body, frame_len);
+		}
+	}
+
 	if (session_entry->limMlmState ==
 			eLIM_MLM_WT_JOIN_BEACON_STATE) {
 		/*
@@ -197,7 +325,6 @@ lim_process_probe_rsp_frame(struct mac_context *mac_ctx, uint8_t *rx_Packet_info
 						session_entry);
 	} else if (session_entry->limMlmState ==
 		   eLIM_MLM_LINK_ESTABLISHED_STATE) {
-		tpDphHashNode sta_ds = NULL;
 		/*
 		 * Check if this Probe Response is for
 		 * our Probe Request sent upon reaching
@@ -222,62 +349,14 @@ lim_process_probe_rsp_frame(struct mac_context *mac_ctx, uint8_t *rx_Packet_info
 							probe_rsp->chan_freq,
 							session_entry);
 		}
-		/*
-		 * Now Process EDCA Parameters, if EDCAParamSet
-		 * count is different.
-		 * -- While processing beacons in link established
-		 * state if it is determined that
-		 * QoS Info IE has a different count for EDCA Params,
-		 * and EDCA IE is not present in beacon,
-		 * then probe req is sent out to get the EDCA params.
-		 */
-		sta_ds = dph_get_hash_entry(mac_ctx,
-				DPH_STA_HASH_INDEX_PEER,
-				&session_entry->dph.dphHashTable);
-		limGetQosMode(session_entry, &qos_enabled);
-		limGetWmeMode(session_entry, &wme_enabled);
-		pe_debug("wmeEdcaPresent: %d wme_enabled: %d"
-			"edcaPresent: %d, qos_enabled: %d"
-			"edcaParams.qosInfo.count: %d"
-			"schObject.gLimEdcaParamSetCount: %d",
-			probe_rsp->wmeEdcaPresent, wme_enabled,
-			probe_rsp->edcaPresent, qos_enabled,
-			probe_rsp->edcaParams.qosInfo.count,
-			session_entry->gLimEdcaParamSetCount);
 
-		if (((probe_rsp->wmeEdcaPresent && wme_enabled) ||
-		     (probe_rsp->edcaPresent && qos_enabled)) &&
-		    (probe_rsp->edcaParams.qosInfo.count !=
-		     session_entry->gLimEdcaParamSetCount)) {
-			if (sch_beacon_edca_process(mac_ctx,
-				&probe_rsp->edcaParams,
-				session_entry) != QDF_STATUS_SUCCESS) {
-				pe_err("EDCA param process error");
-			} else if (sta_ds) {
-				qdf_mem_copy(&sta_ds->qos.peer_edca_params,
-					     &probe_rsp->edcaParams,
-					     sizeof(probe_rsp->edcaParams));
-				/*
-				 * If needed, downgrade the
-				 * EDCA parameters
-				 */
-				lim_set_active_edca_params(mac_ctx,
-						session_entry->
-						gLimEdcaParams,
-						session_entry);
-				lim_send_edca_params(mac_ctx,
-					session_entry->gLimEdcaParamsActive,
-					session_entry->vdev_id, false);
-				sch_qos_concurrency_update();
-			} else {
-				pe_err("SelfEntry missing in Hash");
-			}
-		}
-		if (session_entry->fWaitForProbeRsp == true) {
-			pe_warn("Check probe resp for caps change");
-			lim_detect_change_in_ap_capabilities(
-				mac_ctx, probe_rsp, session_entry);
+		if (!cu_flag) {
+			qdf_mem_free(probe_rsp);
+			return;
 		}
+
+		lim_process_updated_ies_in_probe_rsp(mac_ctx, session_entry,
+						     probe_rsp);
 	}
 	qdf_mem_free(probe_rsp);
 

core/mac/src/pe/lim/lim_types.h

@@ -510,6 +510,19 @@ void lim_process_probe_rsp_frame(struct mac_context *, uint8_t *, struct pe_sess
 void lim_process_probe_req_frame_multiple_bss(struct mac_context *, uint8_t *,
 					      struct pe_session *);
 
+/**
+ * lim_process_gen_probe_rsp_frame() - process generate probe rsp frame
+ * @mac_ctx: pointer to global mac context
+ * @session_entry: pointer to pe session
+ * @bcn_probe: pointer to the data frame
+ * @len: the length of data frame
+ *
+ * Return: void
+ */
+void lim_process_gen_probe_rsp_frame(struct mac_context *mac_ctx,
+				     struct pe_session *session_entry,
+				     uint8_t *bcn_probe, uint32_t len);
+
 /* Process Auth frame when we have a session in progress. */
 void lim_process_auth_frame(struct mac_context *, uint8_t *, struct pe_session *);
 

core/mac/src/pe/sch/sch_beacon_process.c

@@ -40,6 +40,7 @@
 #include "lim_utils.h"
 #include "lim_send_messages.h"
 #include "rrm_api.h"
+#include "lim_mlo.h"
 
 #ifdef FEATURE_WLAN_DIAG_SUPPORT
 #include "host_diag_core_log.h"
@@ -49,6 +50,7 @@
 
 #include "wlan_lmac_if_def.h"
 #include "wlan_reg_services_api.h"
+#include "wlan_mlo_mgr_sta.h"
 
 static void
 ap_beacon_process_5_ghz(struct mac_context *mac_ctx, uint8_t *rx_pkt_info,
@@ -616,6 +618,18 @@ static void __sch_beacon_process_for_session(struct mac_context *mac_ctx,
 	uint8_t programmed_country[REG_ALPHA2_LEN + 1];
 	enum reg_6g_ap_type pwr_type_6g = REG_INDOOR_AP;
 	bool ctry_code_match = false;
+	uint8_t bpcc;
+	bool cu_flag = true;
+
+	if (mlo_is_mld_sta(session->vdev)) {
+		cu_flag = false;
+		status = lim_get_bpcc_from_mlo_ie(bcn, &bpcc);
+		if (QDF_IS_STATUS_SUCCESS(status))
+			cu_flag = lim_check_cu_happens(session->vdev, bpcc);
+	}
+
+	if (!cu_flag)
+		return;
 
 	qdf_mem_zero(&beaconParams, sizeof(tUpdateBeaconParams));
 	beaconParams.paramChangeBitmap = 0;
@@ -772,6 +786,7 @@ static void __sch_beacon_process_for_session(struct mac_context *mac_ctx,
 							      session);
 		session->send_p2p_conf_frame = false;
 	}
+
 	lim_process_beacon_eht(mac_ctx, session, bcn);
 }
 

core/mac/src/sys/legacy/src/utils/src/parser_api.c

@@ -5144,6 +5144,8 @@ sir_convert_beacon_frame2_mlo_struct(uint8_t *pframe, uint32_t nframe,
 	uint8_t common_info_len = 0;
 	struct mlo_partner_info partner_info;
 	QDF_STATUS status = QDF_STATUS_SUCCESS;
+	uint8_t bpcc;
+	bool bpcc_found;
 
 	if (bcn_frm->mlo_ie.present) {
 		status = util_find_mlie(pframe + WLAN_BEACON_IES_OFFSET,
@@ -5163,6 +5165,14 @@ sir_convert_beacon_frame2_mlo_struct(uint8_t *pframe, uint32_t nframe,
 			lim_store_mlo_ie_raw_info(ml_ie, sta_prof,
 						  ml_ie_total_len,
 						  &bcn_struct->mlo_ie.mlo_ie);
+
+			util_get_bvmlie_bssparamchangecnt(ml_ie,
+							  ml_ie_total_len,
+							  &bpcc_found, &bpcc);
+			bcn_struct->mlo_ie.mlo_ie.bss_param_change_cnt_present =
+						bpcc_found;
+			bcn_struct->mlo_ie.mlo_ie.bss_param_change_count = bpcc;
+			bcn_struct->mlo_ie.mlo_ie_present = true;
 		}
 	}
 
@@ -10257,6 +10267,7 @@ sir_convert_mlo_probe_rsp_frame2_struct(uint8_t *ml_ie,
 	bool bss_param_change_cnt_found;
 	uint8_t bss_param_change_cnt;
 	struct qdf_mac_addr mld_mac_addr;
+	uint8_t *sta_prof;
 
 	if (!ml_ie)
 		return QDF_STATUS_E_NULL_VALUE;
@@ -10285,6 +10296,10 @@ sir_convert_mlo_probe_rsp_frame2_struct(uint8_t *ml_ie,
 						bss_param_change_cnt_found;
 	mlo_ie_ptr->mlo_ie.bss_param_change_count = bss_param_change_cnt;
 	mlo_ie_ptr->mlo_ie_present = true;
+	sta_prof = ml_ie + sizeof(struct wlan_ie_multilink) +
+		   mlo_ie_ptr->mlo_ie.common_info_length;
+	lim_store_mlo_ie_raw_info(ml_ie, sta_prof,
+				  ml_ie_total_len, &mlo_ie_ptr->mlo_ie);
 
 	return QDF_STATUS_SUCCESS;
 }