iot_sim/core/iot_sim_common.c

/*
 * Copyright (c) 2020-2021, The Linux Foundation. All rights reserved.
 * Copyright (c) 2023 Qualcomm Innovation Center, Inc. All rights reserved.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include "iot_sim_cmn_api_i.h"
#include "iot_sim_defs_i.h"
#include "wlan_iot_sim_tgt_api.h"
#include <qdf_mem.h>
#include <qdf_types.h>
#include <qdf_util.h>
#include <qdf_str.h>
#include <qdf_delayed_work.h>
#include <wmi_unified_param.h>
#include <wlan_iot_sim_utils_api.h>
#include <wlan_lmac_if_api.h>
#include <wlan_objmgr_peer_obj.h>

/*
 * iot_sim_oper_to_str - function to return iot sim operation string
 * @oper: iot sim operation
 *
 * Return: string pointer
 */
uint8_t *
iot_sim_oper_to_str(enum iot_sim_operations oper)
{
	switch (oper) {
	case CONTENT_CHANGE:
		return "content change";
	case DELAY:
		return "delay";
	case DROP:
		return "drop";
	default:
		return "invalid";
	}
}

/*
 * iot_sim_convert_offset_to_hex_str - function to convert offset into binary
 * @offset: user provided offset value while action frame rule deletion
 * @hex: buffer to store converted value
 * @count: size of hex buffer
 *
 * Return: string pointer
 */
QDF_STATUS
iot_sim_convert_offset_to_hex_str(uint16_t offset, uint8_t *hex, int8_t count)
{
	uint8_t temp[5];
	int ret;

	snprintf(temp, sizeof(temp), "%04u", offset);

	ret = qdf_hex_str_to_binary(hex, temp, count);
	if (ret == -1) {
		iot_sim_err("offset to hex conversion failed");
		return QDF_STATUS_E_FAILURE;
	}

	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_parse_action_frame - function to parse action frame to decode
 *                              category and action code
 *
 * @length: length for content provided by user
 * @offset: offset provided by user
 * @content: user provided content
 * @category: buffer to store iot specific category code
 * @action: buffer to store iot specific action code
 *
 * Return: QDF_STATUS_SUCCESS on success otherwise failure
 */
QDF_STATUS
iot_sim_parse_action_frame(uint16_t length, uint16_t offset, uint8_t *content,
			   uint8_t *category, uint8_t *action)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	uint8_t hex[2], *ptr = NULL;

	if (!length) {
		status = iot_sim_convert_offset_to_hex_str(offset, hex,
							   sizeof(hex));
		if (QDF_IS_STATUS_ERROR(status))
			return status;

		/* Offset represet category type and action type */
		status = iot_sim_get_index_for_action_frm(hex, category,
							  action, false);
		if (status == QDF_STATUS_E_FAULT) {
			iot_sim_err("Get indices for action failed");
			return status;
		}
	} else if (length && content) {
		/* if offset is zero, move ptr post header */
		if (offset == 0) {
			ptr = content + sizeof(struct ieee80211_frame);
		} else if (offset == sizeof(struct ieee80211_frame)) {
			ptr = content;
		} else {
			iot_sim_err("wrong offset for action frame content");
			return QDF_STATUS_E_FAILURE;
		}
		status = iot_sim_get_index_for_action_frm(ptr, category,
							  action, false);
	}
	return status;
}

/*
 * iot_sim_find_peer_from_mac - function to find the iot sim peer data
 *                                    based on the mac address provided
 *
 * @isc: iot_sim pdev private object
 * @mac: mac address of the peer
 *
 * Return: iot_sim_rule_per_peer reference if exists else NULL
 */
struct iot_sim_rule_per_peer *
iot_sim_find_peer_from_mac(struct iot_sim_context *isc,
			   struct qdf_mac_addr *mac)
{
	struct iot_sim_rule_per_peer *peer_rule = NULL;
	qdf_list_node_t *node = NULL, *next_node = NULL;

	if (qdf_is_macaddr_zero(mac) || qdf_is_macaddr_broadcast(mac))
		return &isc->bcast_peer;
	else {
		if (qdf_list_empty(&isc->peer_list)) {
			iot_sim_debug("peer_list empty");
			return NULL;
		}

		qdf_spin_lock_bh(&isc->iot_sim_lock);
		if (QDF_STATUS_SUCCESS !=
		    qdf_list_peek_front(&isc->peer_list, &next_node)) {
			qdf_spin_unlock_bh(&isc->iot_sim_lock);
			iot_sim_err("Failed to get peer rule from peer_list");
			return NULL;
		}

		do {
			node = next_node;
			peer_rule =
				qdf_container_of(node,
						 struct iot_sim_rule_per_peer,
						 node);
			if (qdf_is_macaddr_equal(&peer_rule->addr, mac)) {
				qdf_spin_unlock_bh(&isc->iot_sim_lock);
				return peer_rule;
			}
		} while (QDF_STATUS_SUCCESS ==
			 qdf_list_peek_next(&isc->peer_list, node, &next_node));

		qdf_spin_unlock_bh(&isc->iot_sim_lock);
		iot_sim_debug("Failed to find peer");
	}

	return NULL;
}

/*
 * iot_sim_add_peer - function to add the iot sim peer data
 *
 * @isc: iot_sim pdev private object
 * @mac: mac address of the peer
 *
 * Return: iot_sim_rule_per_peer reference
 */
struct iot_sim_rule_per_peer *
iot_sim_add_peer(struct iot_sim_context *isc, struct qdf_mac_addr *mac)
{
	struct iot_sim_rule_per_peer *peer_rule = NULL;
	QDF_STATUS status;

	if (qdf_is_macaddr_zero(mac) || qdf_is_macaddr_broadcast(mac)) {
		iot_sim_err("called iot_sim_add_peer for broadcast address");
		return &isc->bcast_peer;
	}

	qdf_spin_lock_bh(&isc->iot_sim_lock);
	if (qdf_list_size(&isc->peer_list) < MAX_PEER_COUNT) {
		peer_rule = qdf_mem_malloc(sizeof
					   (struct iot_sim_rule_per_peer));
		if (!peer_rule) {
			iot_sim_err("Memory alloc failed for peer: "
				    QDF_MAC_ADDR_FMT,
				    QDF_MAC_ADDR_REF(mac->bytes));
			goto rel_lock;
		}

		qdf_copy_macaddr(&peer_rule->addr, mac);
		status = qdf_list_insert_back(&isc->peer_list,
					      &peer_rule->node);
		if (QDF_IS_STATUS_ERROR(status)) {
			iot_sim_err("peer_list enqueue failed for peer "
				    QDF_MAC_ADDR_FMT,
				    QDF_MAC_ADDR_REF(mac->bytes));
			qdf_mem_free(peer_rule);
			peer_rule = NULL;
		}
	} else {
		iot_sim_err("peer_list  already reached max limit");
	}

rel_lock:
	qdf_spin_unlock_bh(&isc->iot_sim_lock);
	return peer_rule;
}

/*
 * iot_sim_remove_peer - function to remove the iot sim peer data
 *
 * @isc: iot_sim pdev private object
 * @mac: mac address of the peer
 *
 * Return: void
 */
void iot_sim_remove_peer(struct iot_sim_context *isc,
			 struct iot_sim_rule_per_peer *peer_rule)
{
	qdf_spin_lock_bh(&isc->iot_sim_lock);
	qdf_list_remove_node(&isc->peer_list, &peer_rule->node);
	qdf_spin_unlock_bh(&isc->iot_sim_lock);
}

/*
 * iot_sim_validate_content - function to validate frame content. User provided
 *			      content must be either full frame or full frame
 *			      body or valid TLV formatted data.
 * @buf: pointer to frame content in binary format
 * @total_len: length of content
 * @offset: offset provided by user
 *
 * Return: QDF_STATUS_SUCCESS on success
 *	   QDF_STATUS_E_FAULT on failure
 */
static QDF_STATUS
iot_sim_validate_content(uint8_t *buf,
			 uint16_t total_len,
			 uint16_t offset)
{
	char *ie = buf;
	uint32_t len = 0, i = 0;
	uint32_t fb = sizeof(struct ieee80211_frame);

	if (offset == 0 || offset == fb) {
		/* Replace the entire content set by user */
		return QDF_STATUS_SUCCESS;
	}

	/* Check for malformed IEs and proper IE
	 * boundaries in user content
	 */
	for (i = 0; i < total_len;) {
		/* TLV: T(1) + L(1) + V(L)*/
		len = (1 + 1 + ie[1]);
		i += len;
		ie += len;
	}

	if (i == total_len)
		return QDF_STATUS_SUCCESS;

	iot_sim_err("iot_sim: cnt(bin) len:%u IE Parsed len:%u",
		    total_len,
		    i);

	return QDF_STATUS_E_INVAL;
}

/*
 * iot_sim_handle_frame_content - function to process frame content provided
 *				  by user. This function will convert the ascii
 *				  string into binary string and validate the
 *				  content.
 * @isc: iot sim context
 * @pos: position to the frame content in the user buffer
 * @storage: storage to store frame content after processing
 * @offset: user provided offset
 * @len: length of the user provided content in bytes
 *
 * Return: QDF_STATUS_SUCCESS on success
 *	   QDF_STATUS_E_FAULT on hex str to binary conversion failure
 *	   QDF_STATUS_E_NOMEM on memory allocation failure
 */
QDF_STATUS
iot_sim_handle_frame_content(struct iot_sim_context *isc,
			     const char *pos,
			     uint8_t **storage,
			     uint16_t offset,
			     uint16_t len)
{
	QDF_STATUS status = QDF_STATUS_E_FAILURE;
	int ret;

	*storage = qdf_mem_malloc(len);
	if (!*storage) {
		iot_sim_err("iot_sim:storage allocation failed");
		return QDF_STATUS_E_NOMEM;
	}

	ret = qdf_hex_str_to_binary(*storage, pos, len);
	if (ret == -1) {
		iot_sim_err("iot_sim:hex2bin conversion failed");
		status = QDF_STATUS_E_FAULT;
		goto error;
	}

	status = iot_sim_validate_content(*storage, len, offset);
	if (QDF_IS_STATUS_ERROR(status)) {
		iot_sim_err("iot_sim:User Content Invalid");
		goto error;
	}

	return QDF_STATUS_SUCCESS;

error:
	qdf_mem_free(*storage);
	*storage = NULL;
	return status;
}

/*
 * iot_sim_parse_user_input_content_change - function to parse user input into
 *					     predefined format for content
 *					     change operation. All arguments
 *					     passed will be filled upon success
 * @isc: iot sim context
 * @userbuf: local copy of user input
 * @count: length of userbuf
 * @t_st: address of type variable
 * @seq: address of seq variable
 * @offset: address of offset variable
 * @length: address of length variable
 * @content: double pointer to storage to store frame content after processing
 * @addr: pointer to mac address
 *
 * @storage: storage to store frame content after processing
 * @offset: user provided offset
 * @len: length of the user provided content in bytes
 *
 * Return: QDF_STATUS_SUCCESS on success
 *	   QDF_STATUS_E_FAILURE otherwise
 */
QDF_STATUS
iot_sim_parse_user_input_content_change(struct iot_sim_context *isc,
					char *userbuf, ssize_t count,
					uint8_t *t_st, uint16_t *seq,
					uint16_t *offset, uint16_t *length,
					uint8_t **content,
					struct qdf_mac_addr *addr)
{
	QDF_STATUS status = QDF_STATUS_E_FAILURE;
	char *argv[6], *delim = " ", *substr;
	int argc = -1, ret = 0;

	qdf_mem_zero(argv, sizeof(argv));
	userbuf = qdf_str_trim(userbuf);

	while ((substr = qdf_str_sep(&userbuf, delim)) != NULL) {
		if (!isspace(*substr) && *substr != '\0')
			argv[++argc] = substr;
		if (argc >= 5)
			break;
	}

	if (argc < 3) {
		iot_sim_err("Invalid argument count %d", (argc + 1));
		return status;
	}

	if (!argv[0] || !argv[1] || !argv[2] || !argv[3]) {
		iot_sim_err("One or more arguments are null");
		return status;
	}

	ret = kstrtou8(argv[0], 16, t_st);
	if (ret)
		goto err;
	ret = kstrtou16(argv[1], 10, seq);
	if (ret)
		goto err;
	ret = kstrtou16(argv[2], 10, offset);
	if (ret)
		goto err;
	ret = kstrtou16(argv[3], 10, length);
	if (ret)
		goto err;
	/*
	 * User can send content change data in following format:
	 * 1. Add rule for specific peer
	 *	<t_st> <seq> <offset> <length> <content> <MAC>
	 * 2. Add rule for broadcast peer
	 *	<t_st> <seq> <offset> <length> <content>
	 * 3. Remove rule for specific peer
	 *	<t_st> <seq> <offset> <length> <MAC>
	 * 4. Remove rule for broadcast peer
	 *	<t_st> <seq> <offset> <length>
	 */

	/*
	 * If length is 0, this implies remove the rule
	 */
	if (!*length) {
		/*
		 * 1. Ignore the frame content
		 * 2. argv[4] is not null, then it must be a valid mac
		 *    If argv[4] is null, then set 'addr' as null
		 */
		*content = NULL;
		if (argv[4]) {
			status = qdf_mac_parse(argv[4], addr);
			if (QDF_IS_STATUS_ERROR(status))
				iot_sim_err("iot_sim: argv4 is invalid mac for 0 len");
		} else {
			qdf_mem_zero(addr, QDF_MAC_ADDR_SIZE);
			status = QDF_STATUS_SUCCESS;
		}
		/*
		 * No need to parse further just return.
		 */
		return status;
	}

	/*
	 * If argv[4] is valid, this implies frame content
	 */
	if (argv[4]) {
		status = iot_sim_handle_frame_content(isc, argv[4],
						      content, *offset,
						      *length);
		if (QDF_IS_STATUS_ERROR(status))
			return status;
	}

	/*
	 * If argv[5] is valid, this must be mac address
	 */
	if (argv[5]) {
		status = qdf_mac_parse(argv[5], addr);
		if (QDF_IS_STATUS_ERROR(status))
			qdf_mem_free(content);
	}

	return status;
err:
	iot_sim_err("kstrtoXX failed: %d", ret);
	return status;
}

/*
 * iot_sim_get_index_for_action_frm - function to convert 802.11 action frame
 *				      category and action code into iot sim
 *				      specific code.
 *
 * @frm: buf containing 802.11 action/category codes
 * @cat_type: buf to hold converted category code
 * @act_type: buf to hold converted action code
 * @rx: TRUE if its getting called in the rx path
 *
 * Return: QDF_STATUS_SUCCESS on success, failure otherwise
 */
QDF_STATUS
iot_sim_get_index_for_action_frm(uint8_t *frm, uint8_t *cat_type,
				 uint8_t *act_type, bool rx)
{
	uint8_t category, action;

	category = ((struct ieee80211_action *)(frm))->ia_category;
	action = ((struct ieee80211_action *)(frm))->ia_action;

	iot_sim_info("category %x action %x", category, action);

	switch (category) {
	case IEEE80211_ACTION_CAT_BA:
		switch (action) {
		case IEEE80211_ACTION_BA_ADDBA_REQUEST:
			if (rx) {
				*cat_type = CAT_BA;
				*act_type = action;

			} else {
				*cat_type = category;
				*act_type = action;
			}
			break;
		case IEEE80211_ACTION_BA_ADDBA_RESPONSE:
		case IEEE80211_ACTION_BA_DELBA:
			*cat_type = CAT_BA;
			*act_type = action;
			break;
		default:
			return QDF_STATUS_E_FAULT;
		}
		break;
	case IEEE80211_ACTION_CAT_SA_QUERY:
		switch (action) {
		case IEEE80211_ACTION_SA_QUERY_REQUEST:
		case IEEE80211_ACTION_SA_QUERY_RESPONSE:
			*cat_type = CAT_SA_QUERY;
			*act_type = action;
			break;
		default:
			return QDF_STATUS_E_FAULT;
		}
		break;
	case IEEE80211_ACTION_CAT_RADIO:
		*cat_type = CAT_RADIO;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_FAST_BSS_TRNST:
		*cat_type = CAT_FAST_BSS_TRNST;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_SPECTRUM:
		*cat_type = CAT_SPECTRUM;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_QOS:
		*cat_type = CAT_QOS;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_DLS:
		*cat_type = CAT_DLS;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_HT:
		*cat_type = CAT_HT;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_WNM:
		*cat_type = CAT_WNM;
		*act_type = action;
		break;
	case IEEE80211_ACTION_CAT_VHT:
		*cat_type = CAT_VHT;
		*act_type = action;
		break;
	default:
		return QDF_STATUS_E_FAULT;
	}

	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_action_frame_supported_by_fw - function to find if action frame is
 *					  supported by fw or not
 * @category: iot_sim specific category code
 * @action: iot_sim specific action code
 *
 * Return: true if supported else false
 */
bool
iot_sim_action_frame_supported_by_fw(uint8_t category, uint8_t action)
{
	switch (category) {
	case IEEE80211_ACTION_CAT_BA:
		switch (action) {
		case IEEE80211_ACTION_BA_ADDBA_REQUEST:
			return true;
		default:
			return false;
		}
	default:
		return false;
	}
}

/*
 * iot_sim_frame_supported_by_fw - function to find if frame is supported by fw
 * @type: 802.11 frame type
 * @subtype: 802.11 frame subtype
 *
 * Return: true if supported else false
 */
bool
iot_sim_frame_supported_by_fw(uint8_t type, uint8_t subtype, bool action)
{
	if (action)
		return iot_sim_action_frame_supported_by_fw(type, subtype);

	switch (type << IEEE80211_FC0_TYPE_SHIFT) {
	case IEEE80211_FC0_TYPE_MGT:
		switch (subtype << IEEE80211_FC0_SUBTYPE_SHIFT) {
		case IEEE80211_FC0_SUBTYPE_BEACON:
				return true;
		default:
				return false;
		}
	case IEEE80211_FC0_TYPE_CTL:
		switch (subtype << IEEE80211_FC0_SUBTYPE_SHIFT) {
		case IEEE80211_FC0_SUBTYPE_TRIGGER:
		case IEEE80211_FC0_SUBTYPE_BAR:
		case IEEE80211_FC0_SUBTYPE_CTS:
		case IEEE80211_FC0_SUBTYPE_ACK:
		case IEEE80211_FC0_SUBTYPE_NDPA:
			return true;
		default:
			return false;
		}
	case IEEE80211_FC0_TYPE_DATA:
		switch (subtype << IEEE80211_FC0_SUBTYPE_SHIFT) {
		default:
			return true;
		}
	default:
		return false;
	}
}

/*
 * iot_sim_remap_type_subtype - function to convert rules for response
 *				type frame into request type. This is
 *				used for drop/delay operation. This function
 *				will update the passed type and subtype value.
 *
 * @type: 802.11 frame type
 * @subtype: 802.11 frame subtype
 * @seq: authentication sequence number, mostly 0 for non-authentication frame
 * @action: flag to indicate action frame
 *
 * Return: QDF_STATUS_SUCCESS
 */
QDF_STATUS
iot_sim_remap_type_subtype(uint8_t *type, uint8_t *subtype,
			   uint16_t *seq, bool action)
{
	if (action) {
		switch (*type) {
		case CAT_BA:
			switch (*subtype) {
			case IEEE80211_ACTION_BA_ADDBA_RESPONSE:
				*subtype = IEEE80211_ACTION_BA_ADDBA_REQUEST;
				break;
			default:
				break;
			}
			break;
		default:
			break;
		}
		return QDF_STATUS_SUCCESS;
	}

	switch (*type << IEEE80211_FC0_TYPE_SHIFT) {
	case IEEE80211_FC0_TYPE_MGT:
		switch (*subtype << IEEE80211_FC0_SUBTYPE_SHIFT) {
		case IEEE80211_FC0_SUBTYPE_ASSOC_RESP:
			*subtype = IEEE80211_FC0_SUBTYPE_ASSOC_REQ;
			*subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;
			break;
		case IEEE80211_FC0_SUBTYPE_REASSOC_RESP:
			*subtype = IEEE80211_FC0_SUBTYPE_REASSOC_REQ;
			*subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;
			break;
		case IEEE80211_FC0_SUBTYPE_PROBE_RESP:
			*subtype = IEEE80211_FC0_SUBTYPE_PROBE_REQ;
			*subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;
			break;
		case IEEE80211_FC0_SUBTYPE_AUTH:
			*subtype = IEEE80211_FC0_SUBTYPE_AUTH;
			*subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;
			/* If auth response (auth seq num 2) is marked as
			 * drop, then drop the auth request (auth seq num 1)
			 */
			if (*seq == IEEE80211_AUTH_OPEN_RESPONSE)
				*seq = IEEE80211_AUTH_OPEN_REQUEST;
			break;
		default:
			break;
		}
	default:
		break;
	}

	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_send_rule_to_fw - function to send iot_sim rule to fw
 *
 * @isc: iot sim context
 * @oper: iot sim operation
 * @mac: peer mac address
 * @type: 802.11 frame type
 * @subtype: 802.11 frame subtype
 * @seq: authentication sequence number, mostly 0 for non-authentication frame
 * @offset: user provided offset
 * @frm: user provided frame content
 * @length: length of frm
 * @action: flag to indicate action frame
 * @drop: flag to indicate set drop rule
 * @clear: flag to indicate set rule or clear
 *
 * Return: QDF_STATUS_SUCCESS
 */
QDF_STATUS
iot_sim_send_rule_to_fw(struct iot_sim_context *isc,
			enum iot_sim_operations oper,
			struct qdf_mac_addr *mac,
			uint8_t type, uint8_t subtype,
			uint16_t seq, uint16_t offset,
			uint8_t *frm, uint16_t len,
			bool action, bool clear)
{
	struct simulation_test_params param;

	if (oper != DELAY && FRAME_TYPE_IS_BEACON(type, subtype) && offset) {
		iot_sim_info("Beacon update from offset:%d", offset);
		return QDF_STATUS_E_NOSUPPORT;
	}

	if (iot_sim_frame_supported_by_fw(type, subtype, action)) {
		qdf_mem_zero(&param, sizeof(struct simulation_test_params));
		param.pdev_id = wlan_objmgr_pdev_get_pdev_id(isc->pdev_obj);
		qdf_mem_copy(param.peer_mac, mac, QDF_MAC_ADDR_SIZE);
		param.test_cmd_type = oper;
		/* subtype_cmd: Set subcmd based on action and clear flag */
		if (action) {
			if (clear)
				param.test_subcmd_type = DEL_RULE_ACTION;
			else
				param.test_subcmd_type = ADD_RULE_ACTION;
		} else {
			if (clear)
				param.test_subcmd_type = DEL_RULE;
			else
				param.test_subcmd_type = ADD_RULE;
		}
		param.frame_type = type;
		param.frame_subtype = subtype;
		param.seq = seq;
		param.offset = offset;
		param.frame_length = len;
		param.buf_len = len;
		param.bufp = frm;
		if (QDF_IS_STATUS_ERROR(tgt_send_simulation_cmd(isc->pdev_obj,
								&param)))
			iot_sim_err("Sending del rule to fw failed!");

		if (FRAME_TYPE_IS_BEACON(type, subtype) && clear)
			return QDF_STATUS_E_NOSUPPORT;

		return QDF_STATUS_SUCCESS;
	}

	return QDF_STATUS_E_NOSUPPORT;
}

/*
 * iot_sim_del_rule - function to delete iot_sim rule
 *
 * @s_e: address of seq for which rule to be removed
 * @f_e: address of the rule present in s_e to be removed
 * @oper: iot sim operation
 *
 * Return: QDF_STATUS_SUCCESS
 */
QDF_STATUS
iot_sim_del_rule(struct iot_sim_rule_per_seq **s_e,
		 struct iot_sim_rule **f_e,
		 enum iot_sim_operations oper,
		 struct iot_sim_context *isc)
{
	if (oper == CONTENT_CHANGE) {
		qdf_mem_free((*f_e)->frm_content);
		(*f_e)->frm_content = NULL;
	} else if (oper == DROP) {
		(*f_e)->drop = false;
	} else if (oper == DELAY) {
		if (!qdf_delayed_work_stop((*f_e)->dwork)) {
			iot_sim_err("delayed work is in running state");
			/* iot_sim_lock need to be released for the delay */
			/* work callback to complete execution */
			/* Hence releasing the lock */
			qdf_spin_unlock_bh(&isc->iot_sim_lock);
			/* iot_sim_delay_lock will be freed only after delay */
			/* work callback execution completion */
			qdf_spin_lock_bh(&(*f_e)->iot_sim_delay_lock);
			qdf_spin_lock_bh(&isc->iot_sim_lock);
			qdf_delayed_work_stop_sync((*f_e)->dwork);
			qdf_spin_unlock_bh(&(*f_e)->iot_sim_delay_lock);
		}

		qdf_delayed_work_destroy((*f_e)->dwork);
		qdf_spinlock_destroy(&(*f_e)->iot_sim_delay_lock);
		qdf_mem_free((*f_e)->dwork->context);
		qdf_mem_free((*f_e)->dwork);
		qdf_nbuf_free((*f_e)->nbuf_list[0]);
		(*f_e)->nbuf_list[0] = NULL;
		if ((*f_e)->peer) {
			wlan_objmgr_peer_release_ref((*f_e)->peer,
						     WLAN_IOT_SIM_ID);
			(*f_e)->peer = NULL;
		}
		qdf_nbuf_free((*f_e)->nbuf_list[1]);
		(*f_e)->nbuf_list[1] = NULL;
		(*f_e)->sec_buf = NULL;
		qdf_mem_free((*f_e)->rx_param);
		(*f_e)->rx_param = NULL;
	}

	if (qdf_test_bit(oper, (unsigned long *)
			       &(*f_e)->rule_bitmap)) {
		(*s_e)->use_count--;
		qdf_clear_bit(oper, (unsigned long *)
				    &(*f_e)->rule_bitmap);
	}

	if (!(*f_e)->rule_bitmap) {
		qdf_mem_free(*f_e);
		*f_e = NULL;
	}
	if ((*s_e)->use_count == 0) {
		qdf_mem_free(*s_e);
		*s_e = NULL;
	}
	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_delete_rule_for_mac - function to delete content change rule
 *                               for given peer mac
 * @isc: iot sim context
 * @oper: iot sim operation
 * @seq: authentication sequence number, mostly 0 for non-authentication frame
 * @type: 802.11 frame type
 * @subtype: 802.11 frame subtype
 * @mac: peer mac address
 * @action: action frame or not
 *
 * Return: QDF_STATUS_SUCCESS on success, QDF_STATUS_E_FAILURE otherwise
 */
QDF_STATUS
iot_sim_delete_rule_for_mac(struct iot_sim_context *isc,
			    enum iot_sim_operations oper,
			    uint16_t seq, uint8_t type,
			    uint8_t subtype,
			    struct qdf_mac_addr *mac,
			    bool action)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	struct iot_sim_rule_per_seq **s_e;
	struct iot_sim_rule **f_e;
	struct iot_sim_rule_per_peer *peer;
	bool peer_remove = 1, broadcast_peer = 0;
	uint8_t i;

	if (qdf_is_macaddr_zero(mac))
		iot_sim_info("Rule deletion for all peers");
	else
		iot_sim_info("Rule deletion for " QDF_MAC_ADDR_FMT,
			     QDF_MAC_ADDR_REF(mac->bytes));

	iot_sim_debug("oper:%s seq: %hu %s:%hu/%hu",
		      iot_sim_oper_to_str(oper), seq,
		      action ? "category/action code" : "type/subtype",
		      type, subtype);

	if (!isc) {
		iot_sim_err("iot_sim: isc is null");
		return QDF_STATUS_E_FAILURE;
	}

	if (oper == DROP || oper == DELAY)
		iot_sim_remap_type_subtype(&type, &subtype, &seq, action);

	if (qdf_is_macaddr_zero(mac) || qdf_is_macaddr_broadcast(mac)) {
		peer = &isc->bcast_peer;
		broadcast_peer = 1;
	} else
		peer = iot_sim_find_peer_from_mac(isc, mac);
	if (peer) {
		qdf_spin_lock_bh(&isc->iot_sim_lock);
		s_e = &peer->rule_per_seq[seq];
		if (!*s_e) {
			qdf_spin_unlock_bh(&isc->iot_sim_lock);
			return QDF_STATUS_SUCCESS;
		}

		if (action)
			f_e = &((*s_e)->rule_per_action_frm[type][subtype]);
		else
			f_e = &((*s_e)->rule_per_type[type][subtype]);

		if (*f_e)
			status = iot_sim_del_rule(s_e, f_e, oper, isc);

		for (i = 0; i < MAX_SEQ; i++)
			if (peer->rule_per_seq[i])
				peer_remove = 0;
		qdf_spin_unlock_bh(&isc->iot_sim_lock);
		if (!broadcast_peer && peer_remove) {
			iot_sim_remove_peer(isc, peer);
			qdf_mem_free(peer);
		}
	}

	return status;
}

/*
 * iot_sim_delay_cb - Delayed work callback function
 *                    to process delayed frames
 *
 * @context: Delayed work callback context
 *
 * Return: void
 */
static void iot_sim_delay_cb(void *ctxt)
{
	struct wlan_objmgr_psoc *psoc = NULL;
	struct iot_sim_cb_context *context = ctxt;
	uint8_t *buf;
	struct ieee80211_frame *wh;
	struct qdf_mac_addr *mac_addr;
	struct mgmt_rx_event_params *param = context->piot_sim_rule->rx_param;
	struct wlan_objmgr_peer **peer = &context->piot_sim_rule->peer;

	qdf_spin_lock_bh(&context->piot_sim_rule->iot_sim_delay_lock);
	qdf_spin_lock_bh(&context->isc->iot_sim_lock);
	psoc = wlan_pdev_get_psoc(context->isc->pdev_obj);
	context->piot_sim_rule->sec_buf = context->piot_sim_rule->nbuf_list[0];
	qdf_spin_unlock_bh(&context->isc->iot_sim_lock);
	mgmt_txrx_rx_handler(psoc, context->piot_sim_rule->sec_buf,
			     context->piot_sim_rule->rx_param);
	qdf_spin_lock_bh(&context->isc->iot_sim_lock);
	if (*peer) {
		wlan_objmgr_peer_release_ref(*peer, WLAN_IOT_SIM_ID);
		*peer = NULL;
	}
	if (context->piot_sim_rule->nbuf_list[1]) {
		context->piot_sim_rule->nbuf_list[0] =
					context->piot_sim_rule->nbuf_list[1];
		buf = qdf_nbuf_data(context->piot_sim_rule->nbuf_list[0]);
		wh = (struct ieee80211_frame *)buf;
		mac_addr = (struct qdf_mac_addr *)wh->i_addr2;
		*peer = wlan_objmgr_get_peer(psoc, param->pdev_id,
					     (uint8_t *)mac_addr,
					     WLAN_IOT_SIM_ID);

		if (!qdf_delayed_work_start(context->piot_sim_rule->dwork,
					    context->
					    piot_sim_rule->delay_dur)) {
			iot_sim_err("delayed_work_start failed");
			qdf_nbuf_free(context->piot_sim_rule->nbuf_list[0]);
			if (*peer) {
				wlan_objmgr_peer_release_ref(*peer,
							     WLAN_IOT_SIM_ID);
				*peer = NULL;
			}
			qdf_mem_free(context->piot_sim_rule->
				     rx_param->rx_params);
			qdf_mem_free(context->piot_sim_rule->rx_param);
			context->piot_sim_rule->nbuf_list[0] = NULL;
			context->piot_sim_rule->rx_param = NULL;
		}
		context->piot_sim_rule->nbuf_list[1] = NULL;
	} else {
		context->piot_sim_rule->nbuf_list[0] = NULL;
		qdf_mem_free(context->piot_sim_rule->rx_param->rx_params);
		qdf_mem_free(context->piot_sim_rule->rx_param);
		context->piot_sim_rule->rx_param = NULL;
	}

	qdf_spin_unlock_bh(&context->isc->iot_sim_lock);
	qdf_spin_unlock_bh(&context->piot_sim_rule->iot_sim_delay_lock);
}

/*
 * iot_sim_add_rule - function to add iot_sim rule
 *
 * @s_e: address of seq for which rule to be added
 * @f_e: address of the rule present in s_e to be added
 * @oper: iot sim operation
 * @frm: user provided frame content
 * @offset: user provided offset
 * @len: length of the user provided frame content
 * @isc: iot sim context
 *
 * Return: QDF_STATUS_SUCCESS
 */
QDF_STATUS
iot_sim_add_rule(struct iot_sim_rule_per_seq **s_e,
		 struct iot_sim_rule **f_e,
		 enum iot_sim_operations oper,
		 uint8_t *frm, uint16_t offset, uint16_t len,
		 struct iot_sim_context *isc)
{
	struct iot_sim_cb_context *cb_context;

	if (!*f_e) {
		*f_e = qdf_mem_malloc(sizeof(struct iot_sim_rule));
		if (!*f_e) {
			iot_sim_err("can't allocate f_e");
			return QDF_STATUS_E_NOMEM;
		}
	}

	if (oper == CONTENT_CHANGE) {
		(*f_e)->frm_content = qdf_mem_malloc(len);
		if (!((*f_e)->frm_content))
			return QDF_STATUS_E_NOMEM;
		qdf_mem_copy((*f_e)->frm_content, frm, len);
		(*f_e)->len = len;
		(*f_e)->offset = offset;
	} else if (oper == DROP) {
		(*f_e)->drop = true;
	} else if (oper == DELAY) {
		(*f_e)->delay_dur = offset;
		(*f_e)->dwork = qdf_mem_malloc(sizeof(struct qdf_delayed_work));
		if (!(*f_e)->dwork) {
			iot_sim_err("can't allocate dwork");
			return QDF_STATUS_E_NOMEM;
		}

		cb_context = qdf_mem_malloc(sizeof(struct iot_sim_cb_context));
		if (!cb_context) {
			iot_sim_err("can't allocate cb_context");
			qdf_mem_free((*f_e)->dwork);
			return QDF_STATUS_E_NOMEM;
		}

		cb_context->isc = isc;
		cb_context->piot_sim_rule = *f_e;
		if (QDF_STATUS_SUCCESS !=
		    qdf_delayed_work_create((*f_e)->dwork, iot_sim_delay_cb,
					    cb_context)) {
			iot_sim_err("delayed_work_create failed");
			qdf_mem_free(cb_context);
			qdf_mem_free((*f_e)->dwork);
			return QDF_STATUS_E_NOMEM;
		}

		(*f_e)->nbuf_list[0] = NULL;
		(*f_e)->nbuf_list[1] = NULL;
		(*f_e)->peer = NULL;
		iot_sim_err("delayed_work_created");
		qdf_spinlock_create(&((*f_e)->iot_sim_delay_lock));
	}

	(*s_e)->use_count++;
	qdf_set_bit(oper, (unsigned long *)
			  &(*f_e)->rule_bitmap);

	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_add_rule_for_mac - function to add content change rule
 *			      for given peer mac
 * @isc: iot sim context
 * @oper: iot sim operation
 * @mac: peer mac address
 * @type: 802.11 frame type
 * @subtype: 802.11 frame subtype
 * @seq: authentication sequence number, mostly 0 for non-authentication frame
 * @offset: user provided offset
 * @frm: user provided frame content
 * @len: length of frm
 * @action: boolean to indicate action frame
 *
 * Return: QDF_STATUS_SUCCESS on success, QDF_STATUS_E_FAILURE otherwise
 */
QDF_STATUS
iot_sim_add_rule_for_mac(struct iot_sim_context *isc,
			 enum iot_sim_operations oper,
			 struct qdf_mac_addr *mac,
			 uint8_t type, uint8_t subtype,
			 uint16_t seq, uint16_t offset,
			 uint8_t *frm, uint16_t len,
			 uint16_t drop, bool action)
{
	QDF_STATUS status = QDF_STATUS_E_FAILURE;
	struct iot_sim_rule_per_peer *peer;
	struct iot_sim_rule_per_seq **s_e = NULL;
	struct iot_sim_rule **f_e = NULL;

	if (!isc) {
		iot_sim_err("iot_sim: isc is null");
		return status;
	}

	status = iot_sim_delete_rule_for_mac(isc, oper, seq,
					     type, subtype, mac,
					     action);
	if (status == QDF_STATUS_E_FAILURE) {
		iot_sim_err("iot_sim: Rule removed - Fail");
		return status;
	}

	if (oper == DROP || oper == DELAY)
		iot_sim_remap_type_subtype(&type, &subtype, &seq, action);

	peer = iot_sim_find_peer_from_mac(isc, mac);
	if (!peer)
		peer = iot_sim_add_peer(isc, mac);
	if (peer) {
		qdf_spin_lock_bh(&isc->iot_sim_lock);
		s_e = &peer->rule_per_seq[seq];
		if (!*s_e) {
			*s_e = qdf_mem_malloc(sizeof(struct
					      iot_sim_rule_per_seq));
			if (!*s_e) {
				iot_sim_err("can't allocate s_e");
				qdf_spin_unlock_bh(&isc->iot_sim_lock);
				return QDF_STATUS_E_NOMEM;
			}
		}

		if (action)
			f_e = &((*s_e)->rule_per_action_frm[type][subtype]);
		else
			f_e = &((*s_e)->rule_per_type[type][subtype]);

		if (qdf_is_macaddr_zero(mac))
			iot_sim_info("Rule addition for all peers");
		else
			iot_sim_info("Rule addition for " QDF_MAC_ADDR_FMT,
				     QDF_MAC_ADDR_REF(mac->bytes));

		iot_sim_info("oper:%s seq: %hu %s:%hu/%hu delay:%hu",
			     iot_sim_oper_to_str(oper), seq,
			     action ? "category/action code" : "type/subtype",
			     type, subtype, drop);

		if (oper == DELAY)
			offset = drop;

		status = iot_sim_add_rule(s_e, f_e, oper, frm,
					  offset, len, isc);
		qdf_spin_unlock_bh(&isc->iot_sim_lock);
	} else {
		/* TBD: clear the rules for peer with address 'mac'*/
	}

	return status;
}

/*
 *                   IOT SIM User Command Format
 *
 * ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 * | FrmType/subtype |  Seq  | Offset | Length | content | Mac Addr |
 * ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 * |     1Byte       | 2Byte | 2Bytes | 2Bytes | Length  | 6 Bytes  |
 *
 */

/*
 * iot_sim_debug_content_change_write - Write Handler for content change
 *					operation
 * @file: debugfs file pointer
 * @buf: buf of user input
 * @count: buf count
 * @ppos: offset on file
 *
 * Return: character read on success, failure otherwise
 */
static ssize_t
iot_sim_debug_content_change_write(struct file *file,
				   const char __user *buf,
				   size_t count, loff_t *ppos)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	unsigned char t_st, type, subtype, *content = NULL;
	uint16_t offset = 0, length = 0, seq = 0;
	char *locbuf = NULL;
	enum iot_sim_operations oper = CONTENT_CHANGE;
	struct qdf_mac_addr mac_addr = QDF_MAC_ADDR_BCAST_INIT;
	struct iot_sim_context *isc =
			((struct seq_file *)file->private_data)->private;
	uint8_t action = 0, category = 0;
	bool is_action = 0, clear = false;
	mlme_pdev_ext_t *ext = NULL;

	if ((!buf) || (count > USER_BUF_LEN) || (count < 7))
		return -EFAULT;

	locbuf = qdf_mem_malloc(USER_BUF_LEN + 1);
	if (!locbuf)
		return -ENOMEM;

	if (copy_from_user(locbuf, buf, count)) {
		qdf_mem_free(locbuf);
		return -EFAULT;
	}

	status = iot_sim_parse_user_input_content_change(isc, locbuf, count,
							 &t_st, &seq, &offset,
							 &length, &content,
							 &mac_addr);
	if (QDF_IS_STATUS_ERROR(status))
		goto free;

	type = (t_st & IEEE80211_FC0_TYPE_MASK) >> IEEE80211_FC0_TYPE_SHIFT;
	subtype = (t_st & IEEE80211_FC0_SUBTYPE_MASK);
	subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;

	if (type > N_FRAME_TYPE || subtype > N_FRAME_SUBTYPE || seq > MAX_SEQ)
		goto free;

	if (FRAME_TYPE_IS_ACTION(type, subtype)) {
		status = iot_sim_parse_action_frame(length, offset, content,
						    &category, &action);
		if (QDF_IS_STATUS_ERROR(status))
			goto free;

		is_action = 1;
		type = category;
		subtype = action;
	}

	clear = length ? false : true;
	status = iot_sim_send_rule_to_fw(isc, oper, &mac_addr, type, subtype,
					 seq, offset, content, length,
					 is_action, clear);
	if (QDF_IS_STATUS_SUCCESS(status))
		goto free;

	/* check for rule removal */
	if (!length || !content) {
		status = iot_sim_delete_rule_for_mac(isc, oper, seq,
						     type, subtype,
						     &mac_addr,
						     is_action);

	} else {
		status = iot_sim_add_rule_for_mac(isc, oper, &mac_addr,
						  type, subtype, seq, offset,
						  content, length, 0,
						  is_action);
	}
	if (QDF_IS_STATUS_SUCCESS(status)) {
		iot_sim_err("iot_sim: Content Change Operation - success");
		if (FRAME_TYPE_IS_BEACON(type, subtype)) {
			if (isc->bcn_buf && (!length || !content)) {
				qdf_nbuf_free(isc->bcn_buf);
				isc->bcn_buf = NULL;
			}
			ext = wlan_pdev_mlme_get_ext_hdl(isc->pdev_obj);
			if (ext) {
				isc->iot_sim_update_beacon_trigger(ext);
				iot_sim_info("Beacon update triggered");
			} else {
				iot_sim_err("mlme_pdev_ext is null");
			}
		}
	} else {
		iot_sim_err("iot_sim: Content Change Operation - Fail");
	}
free:
	qdf_mem_free(content);
	qdf_mem_free(locbuf);
	return count;
}

/*
 * iot_sim_parse_user_input_delay - function to parse user input into
 *				   predefined format for delay operation.
 *				   All arguments passed will be filled
 *				   upon success
 * @isc: iot sim context
 * @userbuf: local copy of user input
 * @count: length of userbuf
 * @t_st: address of type variable
 * @seq: address of seq variable
 * @cat_type: 802.11 action frame category code
 * @act_type: 802.11 action frame action code
 * @delay: address of delay variable
 * @addr: pointer to mac address
 *
 * Return: QDF_STATUS_SUCCESS on success
 *	   QDF_STATUS_E_FAILURE otherwise
 */
QDF_STATUS
iot_sim_parse_user_input_delay(struct iot_sim_context *isc,
			       char *userbuf, ssize_t count,
			       uint8_t *t_st, uint16_t *seq,
			       uint8_t *cat_type, uint8_t *act_type,
			       uint16_t *delay, struct qdf_mac_addr *addr)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	char *argv[6], *delim = " ", *substr;
	int argc = -1, ret = 0;

	qdf_mem_zero(argv, sizeof(argv));
	userbuf = qdf_str_trim(userbuf);

	while ((substr = qdf_str_sep(&userbuf, delim)) != NULL) {
		if (!isspace(*substr) && *substr != '\0')
			argv[++argc] = substr;
		if (argc >= 5)
			break;
	}

	if (argc < 3) {
		iot_sim_err("Invalid argument count %d", (argc + 1));
		return status;
	}

	if (!argv[0] || !argv[1] || !argv[2] || !argv[3] || !argv[4]) {
		iot_sim_err("One or more arguments are null");
		return status;
	}
	/*
	 * User can send delay data in following format:
	 * 1. Add delay rule for specific peer
	 *	<t_st> <seq> <category_type> <action_type> <delay> <MAC>
	 * 2. Remove delay rule for specific peer
	 *	<t_st> <seq> <category_type> <action_type> <delay> <MAC>
	 */

	ret = kstrtou8(argv[0], 16, t_st);
	if (ret)
		goto err;
	ret = kstrtou16(argv[1], 10, seq);
	if (ret)
		goto err;
	ret = kstrtou8(argv[2], 10, cat_type);
	if (ret)
		goto err;
	ret = kstrtou8(argv[3], 10, act_type);
	if (ret)
		goto err;
	ret = kstrtou16(argv[4], 10, delay);
	if (ret)
		goto err;

	/*
	 * If argv[5] is valid, this must be mac address
	 */
	if (argv[5])
		status = qdf_mac_parse(argv[5], addr);

	iot_sim_err("delay rule mac address " QDF_MAC_ADDR_FMT,
		    QDF_MAC_ADDR_REF(addr->bytes));

	return status;
err:
	iot_sim_err("kstrtoXX failed: %d", ret);
	return QDF_STATUS_E_FAILURE;
}

/*
 * iot_sim_debug_delay_write - Write Handler for delay operation
 * @file: debugfs file pointer
 * @buf: buf of user input
 * @count: buf count
 * @ppos: offset on file
 *
 * Return: character read
 */
static ssize_t
iot_sim_debug_delay_write(struct file *file,
			  const char __user *buf,
			  size_t count, loff_t *ppos)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	unsigned char t_st, type, subtype;
	uint16_t seq = 0;
	char *locbuf = NULL;
	enum iot_sim_operations oper = DELAY;
	struct qdf_mac_addr mac_addr = QDF_MAC_ADDR_BCAST_INIT;
	struct iot_sim_context *isc =
			((struct seq_file *)file->private_data)->private;
	uint8_t action = 0, category = 0, tmp[2];
	bool is_action = false, clear = false;
	uint16_t delay = 0;

	if ((!buf) || (count > USER_BUF_LEN_DELAY) || (count < 6))
		return -EFAULT;

	locbuf = qdf_mem_malloc(USER_BUF_LEN_DELAY + 1);
	if (!locbuf)
		return -ENOMEM;

	if (copy_from_user(locbuf, buf, count)) {
		qdf_mem_free(locbuf);
		return -EFAULT;
	}

	status = iot_sim_parse_user_input_delay(isc, locbuf, count,
						&t_st, &seq, &category,
						&action, &delay, &mac_addr);
	if (QDF_IS_STATUS_ERROR(status)) {
		iot_sim_err("iot_sim_parse_user_input_delay failed");
		goto free;
	}
	iot_sim_err("Delay rule t_st:%d, seq:%hu cat_type:%d, act_type:%d, delay:%hu",
		    t_st, seq, category, action, delay);

	type = (t_st & IEEE80211_FC0_TYPE_MASK) >> IEEE80211_FC0_TYPE_SHIFT;
	subtype = (t_st & IEEE80211_FC0_SUBTYPE_MASK);
	subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;

	if (type > N_FRAME_TYPE || subtype > N_FRAME_SUBTYPE || seq > MAX_SEQ)
		goto free;

	if (FRAME_TYPE_IS_ACTION(type, subtype)) {
		tmp[0] = category;
		tmp[1] = action;
		/*
		 * convert 802.11 category and action code to iot sim codes
		 */
		status = iot_sim_get_index_for_action_frm(tmp, &category,
							  &action, false);
		if (QDF_IS_STATUS_ERROR(status))
			goto free;

		is_action = 1;
		type = category;
		subtype = action;
	}

	clear = delay ? false : true;
	status = iot_sim_send_rule_to_fw(isc, oper, &mac_addr, type, subtype,
					 seq, delay, NULL, 0, is_action, clear);
	if (QDF_IS_STATUS_SUCCESS(status))
		goto free;

	/* check for rule removal */
	if (!delay) {
		status = iot_sim_delete_rule_for_mac(isc, oper, seq,
						     type, subtype,
						     &mac_addr,
						     is_action);
	} else {
		status = iot_sim_add_rule_for_mac(isc, oper, &mac_addr,
						  type, subtype, seq, 0,
						  NULL, 0, delay, is_action);
	}
	if (QDF_IS_STATUS_SUCCESS(status))
		iot_sim_debug("iot_sim: Rule update Delay Operation - Success");
	else
		iot_sim_err("iot_sim: Rule update Delay Operation - Fail");
free:
	qdf_mem_free(locbuf);
	return count;
}

/*
 * iot_sim_parse_user_input_drop - function to parse user input into
 *				   predefined format for drop operation.
 *				   All arguments passed will be filled
 *				   upon success
 * @isc: iot sim context
 * @userbuf: local copy of user input
 * @count: length of userbuf
 * @t_st: address of type variable
 * @seq: address of seq variable
 * @cat_type: 802.11 action frame category code
 * @act_type: 802.11 action frame action code
 * @drop: address of drop variable to specify drop the frame or not
 * @addr: pointer to mac address
 *
 * Return: QDF_STATUS_SUCCESS on success
 *	   QDF_STATUS_E_FAILURE otherwise
 */
QDF_STATUS
iot_sim_parse_user_input_drop(struct iot_sim_context *isc,
			      char *userbuf, ssize_t count,
			      uint8_t *t_st, uint16_t *seq,
			      uint8_t *cat_type, uint8_t *act_type,
			      uint8_t *drop, struct qdf_mac_addr *addr)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	char *argv[6], *delim = " ", *substr;
	int argc = -1, ret = 0;

	qdf_mem_zero(argv, sizeof(argv));
	userbuf = qdf_str_trim(userbuf);

	while ((substr = qdf_str_sep(&userbuf, delim)) != NULL) {
		if (!isspace(*substr) && *substr != '\0')
			argv[++argc] = substr;
		if (argc >= 5)
			break;
	}

	if (argc < 3) {
		iot_sim_err("Invalid argument count %d", (argc + 1));
		return status;
	}

	if (!argv[0] || !argv[1] || !argv[2] || !argv[3] || !argv[4]) {
		iot_sim_err("One or more arguments are null");
		return status;
	}
	/*
	 * User can send drop data in following format:
	 * 1. Add drop rule for specific peer
	 *	<t_st> <seq> <category_type> <action_type> <drop> <MAC>
	 * 2. Add drop rule for broadcast peer
	 *	<t_st> <seq> <category_type> <action_type> <drop>
	 * 3. Remove drop rule for specific peer
	 *	<t_st> <seq> <category_type> <action_type> <drop> <MAC>
	 * 4. Remove drop rule for broadcast peer
	 *	<t_st> <seq> <category_type> <action_type> <drop> <BCAST_MAC>
	 * 5. Remove drop rule for all peer
	 *	<t_st> <seq> <category_type> <action_type> <drop>
	 */

	ret = kstrtou8(argv[0], 16, t_st);
	if (ret)
		goto err;
	ret = kstrtou16(argv[1], 10, seq);
	if (ret)
		goto err;
	ret = kstrtou8(argv[2], 10, cat_type);
	if (ret)
		goto err;
	ret = kstrtou8(argv[3], 10, act_type);
	if (ret)
		goto err;
	ret = kstrtou8(argv[4], 10, drop);
	if (ret)
		goto err;

	/*
	 * If argv[5] is valid, this must be mac address
	 */
	if (argv[5])
		status = qdf_mac_parse(argv[5], addr);

	iot_sim_err("drop rule mac address " QDF_MAC_ADDR_FMT,
		    QDF_MAC_ADDR_REF(addr->bytes));

	return status;
err:
	iot_sim_err("kstrtoXX failed: %d", ret);
	return QDF_STATUS_E_FAILURE;
}

/*
 * iot_sim_debug_drop_write - Write Handler for drop operation
 * @file: debugfs file pointer
 * @buf: buf of user input
 * @count: buf count
 * @ppos: offset on file
 *
 * Return: character read
 */
static ssize_t
iot_sim_debug_drop_write(struct file *file,
			 const char __user *buf,
			 size_t count, loff_t *ppos)
{
	QDF_STATUS status = QDF_STATUS_SUCCESS;
	unsigned char t_st, type, subtype;
	uint16_t seq = 0;
	char *locbuf = NULL;
	enum iot_sim_operations oper = DROP;
	struct qdf_mac_addr mac_addr = QDF_MAC_ADDR_BCAST_INIT;
	struct iot_sim_context *isc =
			((struct seq_file *)file->private_data)->private;
	uint8_t action = 0, category = 0, tmp[2], drop = 0;
	bool is_action = false, clear = false;

	if ((!buf) || (count > USER_BUF_LEN_DROP) || (count < 6))
		return -EFAULT;

	locbuf = qdf_mem_malloc(USER_BUF_LEN_DROP + 1);
	if (!locbuf)
		return -ENOMEM;

	if (copy_from_user(locbuf, buf, count)) {
		qdf_mem_free(locbuf);
		return -EFAULT;
	}

	status = iot_sim_parse_user_input_drop(isc, locbuf, count,
					       &t_st, &seq, &category,
					       &action, &drop, &mac_addr);
	if (QDF_IS_STATUS_ERROR(status))
		goto free;

	type = (t_st & IEEE80211_FC0_TYPE_MASK) >> IEEE80211_FC0_TYPE_SHIFT;
	subtype = (t_st & IEEE80211_FC0_SUBTYPE_MASK);
	subtype >>= IEEE80211_FC0_SUBTYPE_SHIFT;

	if (type > N_FRAME_TYPE || subtype > N_FRAME_SUBTYPE || seq > MAX_SEQ)
		goto free;

	if (FRAME_TYPE_IS_ACTION(type, subtype)) {
		tmp[0] = category;
		tmp[1] = action;
		/*
		 * convert 802.11 category and action code to iot sim codes
		 */
		status = iot_sim_get_index_for_action_frm(tmp, &category,
							  &action, false);
		if (QDF_IS_STATUS_ERROR(status))
			goto free;

		is_action = 1;
		type = category;
		subtype = action;
	}

	clear = drop ? false : true;
	status = iot_sim_send_rule_to_fw(isc, oper, &mac_addr, type, subtype,
					 seq, 0, NULL, 0, is_action, clear);
	if (QDF_IS_STATUS_SUCCESS(status))
		goto free;

	/* check for rule removal */
	if (!drop) {
		status = iot_sim_delete_rule_for_mac(isc, oper, seq,
						     type, subtype,
						     &mac_addr,
						     is_action);
	} else {
		status = iot_sim_add_rule_for_mac(isc, oper, &mac_addr,
						  type, subtype, seq, 0,
						  NULL, 0, drop, is_action);
	}
	if (QDF_IS_STATUS_SUCCESS(status))
		iot_sim_debug("iot_sim: Rule update Drop Operation - Success");
	else
		iot_sim_err("iot_sim: Rule update Drop Operation - Fail");
free:
	qdf_mem_free(locbuf);
	return count;
}

/*
 * debug_iot_sim_##func_base##_show() - debugfs functions to display content
 *                                      dummy function
 * Return: success
 */
#define GENERATE_IOT_SIM_DEBUG_SHOW_FUNCS(func_base)			\
	static int iot_sim_debug_##func_base##_show(struct seq_file *m,	\
						    void *v)		\
{									\
	return qdf_status_to_os_return(QDF_STATUS_SUCCESS);		\
}

GENERATE_IOT_SIM_DEBUG_SHOW_FUNCS(content_change);
GENERATE_IOT_SIM_DEBUG_SHOW_FUNCS(delay);
GENERATE_IOT_SIM_DEBUG_SHOW_FUNCS(drop);

/*
 * debug_##func_base##_open() - Open debugfs entry for respective command
 * and event buffer.
 *
 * @inode: node for debug dir entry
 * @file: file handler
 *
 * Return: open status
 */
#define GENERATE_DEBUG_IOT_SIM_STRUCTS(func_base)			\
	static int debug_##func_base##_open(struct inode *inode,	\
					    struct file *file)		\
{									\
	return single_open(file, iot_sim_debug_##func_base##_show,	\
			   inode->i_private);				\
}									\
									\
static const struct file_operations debug_##func_base##_ops = {		\
	.open           = debug_##func_base##_open,			\
	.read           = seq_read,					\
	.llseek         = seq_lseek,					\
	.write          = iot_sim_debug_##func_base##_write,		\
	.release        = single_release,				\
}

GENERATE_DEBUG_IOT_SIM_STRUCTS(content_change);
GENERATE_DEBUG_IOT_SIM_STRUCTS(drop);
GENERATE_DEBUG_IOT_SIM_STRUCTS(delay);

/* Structure to maintain debug information */
struct iot_sim_dbgfs_file {
	const char *name;
	const struct file_operations *ops;
};

#define DEBUG_IOT_SIM(func_base) {	.name = #func_base,		\
					.ops = &debug_##func_base##_ops	\
}

struct iot_sim_dbgfs_file iot_sim_dbgfs_files[IOT_SIM_DEBUGFS_FILE_NUM] = {
	DEBUG_IOT_SIM(content_change),
	DEBUG_IOT_SIM(drop),
	DEBUG_IOT_SIM(delay),
};

/**
 * iot_sim_debugfs_deinit() - Deinit functions to remove debugfs directory and
 *			      it's file enteries.
 * @isc: iot_sim context
 *
 * Return: init status
 */
static QDF_STATUS
iot_sim_debugfs_deinit(struct iot_sim_context *isc)
{
	qdf_debugfs_remove_dir_recursive(isc->iot_sim_dbgfs_ctx.iot_sim_dir_de);

	return QDF_STATUS_SUCCESS;
}

/*
 * iot_sim_remove_all_oper_rules - Function to remove all configured rules
 *				   for given operation
 *
 * @isc: iot sim context
 * @oper: iot sim operation
 *
 * Return: void
 */
static void
iot_sim_remove_all_oper_rules(struct iot_sim_context *isc,
			      enum iot_sim_operations oper)
{
	uint16_t seq;
	uint8_t type, subtype, category = 0, action = 0;
	struct qdf_mac_addr zero_mac_addr = QDF_MAC_ADDR_ZERO_INIT;

	for (seq = 0; seq < MAX_SEQ; seq++) {
		/* Remove rules for non-action type frames */
		for (type = 0; type < N_FRAME_TYPE; type++)
			for (subtype = 0; subtype < N_FRAME_SUBTYPE; subtype++)
				iot_sim_delete_rule_for_mac(isc, oper, seq,
							    type, subtype,
							    &zero_mac_addr, 0);
		/* Remove rules for action frames */
		for (category = 0; category < IOT_SIM_MAX_CAT; category++)
			for (action = 0; action < MAX_ACTION; action++)
				iot_sim_delete_rule_for_mac(isc, oper, seq,
							    category, action,
							    &zero_mac_addr, 1);
	}
}

/*
 * iot_sim_remove_all_rules - Function to remove all configured rules
 *
 * @isc: iot sim context
 *
 * Return: void
 */
static void
iot_sim_remove_all_rules(struct iot_sim_context *isc)
{
	enum iot_sim_operations oper;

	if (!isc)
		return;

	for (oper = CONTENT_CHANGE; oper < IOT_SIM_MAX_OPERATION; oper++)
		iot_sim_remove_all_oper_rules(isc, oper);
}

/**
 * iot_sim_debugfs_init() - debugfs functions to create debugfs directory and to
 *			    create debugfs enteries.
 * @isc: iot_sim context
 *
 * Return: init status
 */
static QDF_STATUS
iot_sim_debugfs_init(struct iot_sim_context *isc)
{
	struct dentry *dbgfs_dir = NULL;
	struct dentry *de = NULL;
	uint8_t i, pdev_id;
	char buf[32];

	if (!isc)
		return QDF_STATUS_E_FAILURE;

	pdev_id = wlan_objmgr_pdev_get_pdev_id(isc->pdev_obj);

	qdf_mem_zero(buf, sizeof(buf));
	snprintf(buf, sizeof(buf), "iot_sim_pdev%u", pdev_id);

	dbgfs_dir = qdf_debugfs_create_dir(buf, NULL);
	isc->iot_sim_dbgfs_ctx.iot_sim_dir_de = dbgfs_dir;

	if (!isc->iot_sim_dbgfs_ctx.iot_sim_dir_de) {
		iot_sim_err("dbgfs dir creation failed for pdev%u", pdev_id);
		return QDF_STATUS_E_FAILURE;
	}

	for (i = 0; i < IOT_SIM_DEBUGFS_FILE_NUM; ++i) {
		de = qdf_debugfs_create_entry(iot_sim_dbgfs_files[i].name,
					      IOT_SIM_DBG_FILE_PERM,
					      dbgfs_dir, isc,
					      iot_sim_dbgfs_files[i].ops);

		if (!de) {
			iot_sim_err("dbgfs file creation failed for pdev%u",
				    pdev_id);
			goto out;
		}
		isc->iot_sim_dbgfs_ctx.iot_sim_file_de[i] = de;
	}

	return QDF_STATUS_SUCCESS;

out:
	qdf_debugfs_remove_dir_recursive(dbgfs_dir);
	qdf_mem_set(isc->iot_sim_dbgfs_ctx.iot_sim_file_de,
		    sizeof(isc->iot_sim_dbgfs_ctx.iot_sim_file_de), 0);

	return QDF_STATUS_E_FAILURE;
}

QDF_STATUS
wlan_iot_sim_pdev_obj_create_handler(struct wlan_objmgr_pdev *pdev, void *arg)
{
	struct iot_sim_context *isc = NULL;

	if (!pdev) {
		iot_sim_err("pdev is NULL");
		return QDF_STATUS_E_NULL_VALUE;
	}

	isc = qdf_mem_malloc(sizeof(struct iot_sim_context));
	if (!isc)
		return QDF_STATUS_E_NOMEM;

	isc->pdev_obj = pdev;

	if (QDF_IS_STATUS_ERROR(iot_sim_debugfs_init(isc))) {
		qdf_mem_free(isc);
		iot_sim_info("iot_sim debugfs file creation failed");
		return QDF_STATUS_E_FAILURE;
	}

	qdf_set_macaddr_broadcast(&isc->bcast_peer.addr);
	qdf_spinlock_create(&isc->iot_sim_lock);
	qdf_list_create(&isc->peer_list, 2);
	isc->bcn_buf = NULL;

	wlan_objmgr_pdev_component_obj_attach(pdev, WLAN_IOT_SIM_COMP,
					      (void *)isc, QDF_STATUS_SUCCESS);

	iot_sim_debug("iot_sim component pdev%u object created",
		      wlan_objmgr_pdev_get_pdev_id(isc->pdev_obj));

	return QDF_STATUS_SUCCESS;
}

QDF_STATUS
wlan_iot_sim_pdev_obj_destroy_handler(struct wlan_objmgr_pdev *pdev,
				      void *arg)
{
	struct iot_sim_context *isc = NULL;

	if (!pdev) {
		iot_sim_err("pdev is NULL");
		return QDF_STATUS_E_NULL_VALUE;
	}

	isc = wlan_objmgr_pdev_get_comp_private_obj(pdev,
						    WLAN_IOT_SIM_COMP);
	if (isc) {
		wlan_objmgr_pdev_component_obj_detach(pdev,
						      WLAN_IOT_SIM_COMP,
						      (void *)isc);
		/* Deinitilise function pointers from iot_sim context */
		iot_sim_debugfs_deinit(isc);
		iot_sim_remove_all_rules(isc);
		qdf_list_destroy(&isc->peer_list);
		if (isc->bcn_buf)
			qdf_nbuf_free(isc->bcn_buf);
		qdf_spinlock_destroy(&isc->iot_sim_lock);
		qdf_mem_free(isc);
	}
	iot_sim_debug("iot_sim component pdev%u object destroyed",
		      wlan_objmgr_pdev_get_pdev_id(isc->pdev_obj));

	return QDF_STATUS_SUCCESS;
}