Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * BSS client mode implementation | |
3 | * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> | |
4 | * Copyright 2004, Instant802 Networks, Inc. | |
5 | * Copyright 2005, Devicescape Software, Inc. | |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License version 2 as | |
11 | * published by the Free Software Foundation. | |
12 | */ | |
13 | ||
14 | /* TODO: | |
f0706e82 JB |
15 | * order BSS list by RSSI(?) ("quality of AP") |
16 | * scan result table filtering (by capability (privacy, IBSS/BSS, WPA/RSN IE, | |
17 | * SSID) | |
18 | */ | |
5b323edb | 19 | #include <linux/delay.h> |
f0706e82 JB |
20 | #include <linux/if_ether.h> |
21 | #include <linux/skbuff.h> | |
22 | #include <linux/netdevice.h> | |
23 | #include <linux/if_arp.h> | |
24 | #include <linux/wireless.h> | |
25 | #include <linux/random.h> | |
26 | #include <linux/etherdevice.h> | |
d0709a65 | 27 | #include <linux/rtnetlink.h> |
f0706e82 JB |
28 | #include <net/iw_handler.h> |
29 | #include <asm/types.h> | |
f0706e82 JB |
30 | |
31 | #include <net/mac80211.h> | |
32 | #include "ieee80211_i.h" | |
2c8dccc7 JB |
33 | #include "rate.h" |
34 | #include "led.h" | |
f709fc69 | 35 | #include "mesh.h" |
f0706e82 JB |
36 | |
37 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
38 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
39 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
40 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
41 | #define IEEE80211_MONITORING_INTERVAL (2 * HZ) | |
f709fc69 | 42 | #define IEEE80211_MESH_HOUSEKEEPING_INTERVAL (60 * HZ) |
f0706e82 JB |
43 | #define IEEE80211_PROBE_INTERVAL (60 * HZ) |
44 | #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ) | |
45 | #define IEEE80211_SCAN_INTERVAL (2 * HZ) | |
46 | #define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ) | |
47 | #define IEEE80211_IBSS_JOIN_TIMEOUT (20 * HZ) | |
48 | ||
49 | #define IEEE80211_PROBE_DELAY (HZ / 33) | |
50 | #define IEEE80211_CHANNEL_TIME (HZ / 33) | |
51 | #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 5) | |
52 | #define IEEE80211_SCAN_RESULT_EXPIRE (10 * HZ) | |
53 | #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ) | |
54 | #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ) | |
f709fc69 | 55 | #define IEEE80211_MESH_PEER_INACTIVITY_LIMIT (1800 * HZ) |
f0706e82 JB |
56 | |
57 | #define IEEE80211_IBSS_MAX_STA_ENTRIES 128 | |
58 | ||
59 | ||
f0706e82 JB |
60 | #define ERP_INFO_USE_PROTECTION BIT(1) |
61 | ||
9f985b0e RR |
62 | /* mgmt header + 1 byte action code */ |
63 | #define IEEE80211_MIN_ACTION_SIZE (24 + 1) | |
64 | ||
65 | #define IEEE80211_ADDBA_PARAM_POLICY_MASK 0x0002 | |
66 | #define IEEE80211_ADDBA_PARAM_TID_MASK 0x003C | |
67 | #define IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK 0xFFA0 | |
688b88a4 RR |
68 | #define IEEE80211_DELBA_PARAM_TID_MASK 0xF000 |
69 | #define IEEE80211_DELBA_PARAM_INITIATOR_MASK 0x0800 | |
9f985b0e | 70 | |
07db2183 RR |
71 | /* next values represent the buffer size for A-MPDU frame. |
72 | * According to IEEE802.11n spec size varies from 8K to 64K (in powers of 2) */ | |
73 | #define IEEE80211_MIN_AMPDU_BUF 0x8 | |
74 | #define IEEE80211_MAX_AMPDU_BUF 0x40 | |
75 | ||
f0706e82 JB |
76 | static void ieee80211_send_probe_req(struct net_device *dev, u8 *dst, |
77 | u8 *ssid, size_t ssid_len); | |
78 | static struct ieee80211_sta_bss * | |
8318d78a | 79 | ieee80211_rx_bss_get(struct net_device *dev, u8 *bssid, int freq, |
cffdd30d | 80 | u8 *ssid, u8 ssid_len); |
f0706e82 JB |
81 | static void ieee80211_rx_bss_put(struct net_device *dev, |
82 | struct ieee80211_sta_bss *bss); | |
83 | static int ieee80211_sta_find_ibss(struct net_device *dev, | |
84 | struct ieee80211_if_sta *ifsta); | |
85 | static int ieee80211_sta_wep_configured(struct net_device *dev); | |
86 | static int ieee80211_sta_start_scan(struct net_device *dev, | |
87 | u8 *ssid, size_t ssid_len); | |
88 | static int ieee80211_sta_config_auth(struct net_device *dev, | |
89 | struct ieee80211_if_sta *ifsta); | |
712590de | 90 | static void sta_rx_agg_session_timer_expired(unsigned long data); |
f0706e82 JB |
91 | |
92 | ||
ee385855 LCC |
93 | void ieee802_11_parse_elems(u8 *start, size_t len, |
94 | struct ieee802_11_elems *elems) | |
f0706e82 JB |
95 | { |
96 | size_t left = len; | |
97 | u8 *pos = start; | |
f0706e82 JB |
98 | |
99 | memset(elems, 0, sizeof(*elems)); | |
100 | ||
101 | while (left >= 2) { | |
102 | u8 id, elen; | |
103 | ||
104 | id = *pos++; | |
105 | elen = *pos++; | |
106 | left -= 2; | |
107 | ||
67a4cce4 JL |
108 | if (elen > left) |
109 | return; | |
f0706e82 JB |
110 | |
111 | switch (id) { | |
112 | case WLAN_EID_SSID: | |
113 | elems->ssid = pos; | |
114 | elems->ssid_len = elen; | |
115 | break; | |
116 | case WLAN_EID_SUPP_RATES: | |
117 | elems->supp_rates = pos; | |
118 | elems->supp_rates_len = elen; | |
119 | break; | |
120 | case WLAN_EID_FH_PARAMS: | |
121 | elems->fh_params = pos; | |
122 | elems->fh_params_len = elen; | |
123 | break; | |
124 | case WLAN_EID_DS_PARAMS: | |
125 | elems->ds_params = pos; | |
126 | elems->ds_params_len = elen; | |
127 | break; | |
128 | case WLAN_EID_CF_PARAMS: | |
129 | elems->cf_params = pos; | |
130 | elems->cf_params_len = elen; | |
131 | break; | |
132 | case WLAN_EID_TIM: | |
133 | elems->tim = pos; | |
134 | elems->tim_len = elen; | |
135 | break; | |
136 | case WLAN_EID_IBSS_PARAMS: | |
137 | elems->ibss_params = pos; | |
138 | elems->ibss_params_len = elen; | |
139 | break; | |
140 | case WLAN_EID_CHALLENGE: | |
141 | elems->challenge = pos; | |
142 | elems->challenge_len = elen; | |
143 | break; | |
144 | case WLAN_EID_WPA: | |
145 | if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 && | |
146 | pos[2] == 0xf2) { | |
147 | /* Microsoft OUI (00:50:F2) */ | |
148 | if (pos[3] == 1) { | |
149 | /* OUI Type 1 - WPA IE */ | |
150 | elems->wpa = pos; | |
151 | elems->wpa_len = elen; | |
152 | } else if (elen >= 5 && pos[3] == 2) { | |
153 | if (pos[4] == 0) { | |
154 | elems->wmm_info = pos; | |
155 | elems->wmm_info_len = elen; | |
156 | } else if (pos[4] == 1) { | |
157 | elems->wmm_param = pos; | |
158 | elems->wmm_param_len = elen; | |
159 | } | |
160 | } | |
161 | } | |
162 | break; | |
163 | case WLAN_EID_RSN: | |
164 | elems->rsn = pos; | |
165 | elems->rsn_len = elen; | |
166 | break; | |
167 | case WLAN_EID_ERP_INFO: | |
168 | elems->erp_info = pos; | |
169 | elems->erp_info_len = elen; | |
170 | break; | |
171 | case WLAN_EID_EXT_SUPP_RATES: | |
172 | elems->ext_supp_rates = pos; | |
173 | elems->ext_supp_rates_len = elen; | |
174 | break; | |
c7153508 RR |
175 | case WLAN_EID_HT_CAPABILITY: |
176 | elems->ht_cap_elem = pos; | |
177 | elems->ht_cap_elem_len = elen; | |
178 | break; | |
179 | case WLAN_EID_HT_EXTRA_INFO: | |
180 | elems->ht_info_elem = pos; | |
181 | elems->ht_info_elem_len = elen; | |
182 | break; | |
ee385855 LCC |
183 | case WLAN_EID_MESH_ID: |
184 | elems->mesh_id = pos; | |
185 | elems->mesh_id_len = elen; | |
186 | break; | |
187 | case WLAN_EID_MESH_CONFIG: | |
188 | elems->mesh_config = pos; | |
189 | elems->mesh_config_len = elen; | |
190 | break; | |
191 | case WLAN_EID_PEER_LINK: | |
192 | elems->peer_link = pos; | |
193 | elems->peer_link_len = elen; | |
194 | break; | |
195 | case WLAN_EID_PREQ: | |
196 | elems->preq = pos; | |
197 | elems->preq_len = elen; | |
198 | break; | |
199 | case WLAN_EID_PREP: | |
200 | elems->prep = pos; | |
201 | elems->prep_len = elen; | |
202 | break; | |
203 | case WLAN_EID_PERR: | |
204 | elems->perr = pos; | |
205 | elems->perr_len = elen; | |
206 | break; | |
f0706e82 | 207 | default: |
f0706e82 JB |
208 | break; |
209 | } | |
210 | ||
211 | left -= elen; | |
212 | pos += elen; | |
213 | } | |
f0706e82 JB |
214 | } |
215 | ||
216 | ||
f0706e82 JB |
217 | static int ecw2cw(int ecw) |
218 | { | |
ac2bf324 | 219 | return (1 << ecw) - 1; |
f0706e82 JB |
220 | } |
221 | ||
e2839d8f VK |
222 | |
223 | static void ieee80211_sta_def_wmm_params(struct net_device *dev, | |
224 | struct ieee80211_sta_bss *bss, | |
225 | int ibss) | |
226 | { | |
227 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
228 | struct ieee80211_local *local = sdata->local; | |
229 | int i, have_higher_than_11mbit = 0; | |
230 | ||
231 | ||
232 | /* cf. IEEE 802.11 9.2.12 */ | |
233 | for (i = 0; i < bss->supp_rates_len; i++) | |
234 | if ((bss->supp_rates[i] & 0x7f) * 5 > 110) | |
235 | have_higher_than_11mbit = 1; | |
236 | ||
237 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
238 | have_higher_than_11mbit) | |
239 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
240 | else | |
241 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
242 | ||
243 | ||
244 | if (local->ops->conf_tx) { | |
245 | struct ieee80211_tx_queue_params qparam; | |
e2839d8f VK |
246 | |
247 | memset(&qparam, 0, sizeof(qparam)); | |
248 | ||
249 | qparam.aifs = 2; | |
250 | ||
251 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
252 | !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)) | |
253 | qparam.cw_min = 31; | |
254 | else | |
255 | qparam.cw_min = 15; | |
256 | ||
257 | qparam.cw_max = 1023; | |
258 | qparam.txop = 0; | |
259 | ||
e100bb64 JB |
260 | for (i = 0; i < local_to_hw(local)->queues; i++) |
261 | local->ops->conf_tx(local_to_hw(local), i, &qparam); | |
e2839d8f VK |
262 | } |
263 | } | |
264 | ||
f0706e82 JB |
265 | static void ieee80211_sta_wmm_params(struct net_device *dev, |
266 | struct ieee80211_if_sta *ifsta, | |
267 | u8 *wmm_param, size_t wmm_param_len) | |
268 | { | |
269 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
270 | struct ieee80211_tx_queue_params params; | |
271 | size_t left; | |
272 | int count; | |
273 | u8 *pos; | |
274 | ||
3434fbd3 JB |
275 | if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED)) |
276 | return; | |
277 | ||
278 | if (!wmm_param) | |
279 | return; | |
280 | ||
f0706e82 JB |
281 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
282 | return; | |
283 | count = wmm_param[6] & 0x0f; | |
284 | if (count == ifsta->wmm_last_param_set) | |
285 | return; | |
286 | ifsta->wmm_last_param_set = count; | |
287 | ||
288 | pos = wmm_param + 8; | |
289 | left = wmm_param_len - 8; | |
290 | ||
291 | memset(¶ms, 0, sizeof(params)); | |
292 | ||
293 | if (!local->ops->conf_tx) | |
294 | return; | |
295 | ||
296 | local->wmm_acm = 0; | |
297 | for (; left >= 4; left -= 4, pos += 4) { | |
298 | int aci = (pos[0] >> 5) & 0x03; | |
299 | int acm = (pos[0] >> 4) & 0x01; | |
300 | int queue; | |
301 | ||
302 | switch (aci) { | |
303 | case 1: | |
e100bb64 | 304 | queue = 3; |
988c0f72 | 305 | if (acm) |
f0706e82 | 306 | local->wmm_acm |= BIT(0) | BIT(3); |
f0706e82 JB |
307 | break; |
308 | case 2: | |
e100bb64 | 309 | queue = 1; |
988c0f72 | 310 | if (acm) |
f0706e82 | 311 | local->wmm_acm |= BIT(4) | BIT(5); |
f0706e82 JB |
312 | break; |
313 | case 3: | |
e100bb64 | 314 | queue = 0; |
988c0f72 | 315 | if (acm) |
f0706e82 | 316 | local->wmm_acm |= BIT(6) | BIT(7); |
f0706e82 JB |
317 | break; |
318 | case 0: | |
319 | default: | |
e100bb64 | 320 | queue = 2; |
988c0f72 | 321 | if (acm) |
f0706e82 | 322 | local->wmm_acm |= BIT(1) | BIT(2); |
f0706e82 JB |
323 | break; |
324 | } | |
325 | ||
326 | params.aifs = pos[0] & 0x0f; | |
327 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); | |
328 | params.cw_min = ecw2cw(pos[1] & 0x0f); | |
3330d7be JB |
329 | params.txop = pos[2] | (pos[3] << 8); |
330 | #ifdef CONFIG_MAC80211_DEBUG | |
f0706e82 | 331 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
3330d7be | 332 | "cWmin=%d cWmax=%d txop=%d\n", |
f0706e82 | 333 | dev->name, queue, aci, acm, params.aifs, params.cw_min, |
3330d7be JB |
334 | params.cw_max, params.txop); |
335 | #endif | |
f0706e82 JB |
336 | /* TODO: handle ACM (block TX, fallback to next lowest allowed |
337 | * AC for now) */ | |
338 | if (local->ops->conf_tx(local_to_hw(local), queue, ¶ms)) { | |
339 | printk(KERN_DEBUG "%s: failed to set TX queue " | |
340 | "parameters for queue %d\n", dev->name, queue); | |
341 | } | |
342 | } | |
343 | } | |
344 | ||
50c4afb9 JL |
345 | static u32 ieee80211_handle_protect_preamb(struct ieee80211_sub_if_data *sdata, |
346 | bool use_protection, | |
347 | bool use_short_preamble) | |
5628221c | 348 | { |
471b3efd | 349 | struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf; |
5628221c | 350 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; |
0795af57 | 351 | DECLARE_MAC_BUF(mac); |
471b3efd | 352 | u32 changed = 0; |
5628221c | 353 | |
471b3efd | 354 | if (use_protection != bss_conf->use_cts_prot) { |
5628221c DD |
355 | if (net_ratelimit()) { |
356 | printk(KERN_DEBUG "%s: CTS protection %s (BSSID=" | |
0795af57 | 357 | "%s)\n", |
471b3efd | 358 | sdata->dev->name, |
5628221c | 359 | use_protection ? "enabled" : "disabled", |
0795af57 | 360 | print_mac(mac, ifsta->bssid)); |
5628221c | 361 | } |
471b3efd JB |
362 | bss_conf->use_cts_prot = use_protection; |
363 | changed |= BSS_CHANGED_ERP_CTS_PROT; | |
5628221c | 364 | } |
7e9ed188 | 365 | |
d43c7b37 | 366 | if (use_short_preamble != bss_conf->use_short_preamble) { |
7e9ed188 DD |
367 | if (net_ratelimit()) { |
368 | printk(KERN_DEBUG "%s: switched to %s barker preamble" | |
0795af57 | 369 | " (BSSID=%s)\n", |
471b3efd | 370 | sdata->dev->name, |
d43c7b37 | 371 | use_short_preamble ? "short" : "long", |
0795af57 | 372 | print_mac(mac, ifsta->bssid)); |
7e9ed188 | 373 | } |
d43c7b37 | 374 | bss_conf->use_short_preamble = use_short_preamble; |
471b3efd | 375 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
7e9ed188 | 376 | } |
d9430a32 | 377 | |
471b3efd | 378 | return changed; |
5628221c DD |
379 | } |
380 | ||
50c4afb9 JL |
381 | static u32 ieee80211_handle_erp_ie(struct ieee80211_sub_if_data *sdata, |
382 | u8 erp_value) | |
383 | { | |
384 | bool use_protection = (erp_value & WLAN_ERP_USE_PROTECTION) != 0; | |
385 | bool use_short_preamble = (erp_value & WLAN_ERP_BARKER_PREAMBLE) == 0; | |
386 | ||
387 | return ieee80211_handle_protect_preamb(sdata, | |
388 | use_protection, use_short_preamble); | |
389 | } | |
390 | ||
391 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, | |
392 | struct ieee80211_sta_bss *bss) | |
393 | { | |
394 | u32 changed = 0; | |
395 | ||
396 | if (bss->has_erp_value) | |
397 | changed |= ieee80211_handle_erp_ie(sdata, bss->erp_value); | |
398 | else { | |
399 | u16 capab = bss->capability; | |
400 | changed |= ieee80211_handle_protect_preamb(sdata, false, | |
401 | (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0); | |
402 | } | |
403 | ||
404 | return changed; | |
405 | } | |
406 | ||
c7153508 RR |
407 | int ieee80211_ht_cap_ie_to_ht_info(struct ieee80211_ht_cap *ht_cap_ie, |
408 | struct ieee80211_ht_info *ht_info) | |
409 | { | |
410 | ||
411 | if (ht_info == NULL) | |
412 | return -EINVAL; | |
413 | ||
414 | memset(ht_info, 0, sizeof(*ht_info)); | |
415 | ||
416 | if (ht_cap_ie) { | |
417 | u8 ampdu_info = ht_cap_ie->ampdu_params_info; | |
418 | ||
419 | ht_info->ht_supported = 1; | |
420 | ht_info->cap = le16_to_cpu(ht_cap_ie->cap_info); | |
421 | ht_info->ampdu_factor = | |
422 | ampdu_info & IEEE80211_HT_CAP_AMPDU_FACTOR; | |
423 | ht_info->ampdu_density = | |
424 | (ampdu_info & IEEE80211_HT_CAP_AMPDU_DENSITY) >> 2; | |
425 | memcpy(ht_info->supp_mcs_set, ht_cap_ie->supp_mcs_set, 16); | |
426 | } else | |
427 | ht_info->ht_supported = 0; | |
428 | ||
429 | return 0; | |
430 | } | |
431 | ||
432 | int ieee80211_ht_addt_info_ie_to_ht_bss_info( | |
433 | struct ieee80211_ht_addt_info *ht_add_info_ie, | |
434 | struct ieee80211_ht_bss_info *bss_info) | |
435 | { | |
436 | if (bss_info == NULL) | |
437 | return -EINVAL; | |
438 | ||
439 | memset(bss_info, 0, sizeof(*bss_info)); | |
440 | ||
441 | if (ht_add_info_ie) { | |
442 | u16 op_mode; | |
443 | op_mode = le16_to_cpu(ht_add_info_ie->operation_mode); | |
444 | ||
445 | bss_info->primary_channel = ht_add_info_ie->control_chan; | |
446 | bss_info->bss_cap = ht_add_info_ie->ht_param; | |
447 | bss_info->bss_op_mode = (u8)(op_mode & 0xff); | |
448 | } | |
449 | ||
450 | return 0; | |
451 | } | |
5628221c | 452 | |
f0706e82 JB |
453 | static void ieee80211_sta_send_associnfo(struct net_device *dev, |
454 | struct ieee80211_if_sta *ifsta) | |
455 | { | |
456 | char *buf; | |
457 | size_t len; | |
458 | int i; | |
459 | union iwreq_data wrqu; | |
460 | ||
461 | if (!ifsta->assocreq_ies && !ifsta->assocresp_ies) | |
462 | return; | |
463 | ||
464 | buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len + | |
0ec0b7ac | 465 | ifsta->assocresp_ies_len), GFP_KERNEL); |
f0706e82 JB |
466 | if (!buf) |
467 | return; | |
468 | ||
469 | len = sprintf(buf, "ASSOCINFO("); | |
470 | if (ifsta->assocreq_ies) { | |
471 | len += sprintf(buf + len, "ReqIEs="); | |
472 | for (i = 0; i < ifsta->assocreq_ies_len; i++) { | |
473 | len += sprintf(buf + len, "%02x", | |
474 | ifsta->assocreq_ies[i]); | |
475 | } | |
476 | } | |
477 | if (ifsta->assocresp_ies) { | |
478 | if (ifsta->assocreq_ies) | |
479 | len += sprintf(buf + len, " "); | |
480 | len += sprintf(buf + len, "RespIEs="); | |
481 | for (i = 0; i < ifsta->assocresp_ies_len; i++) { | |
482 | len += sprintf(buf + len, "%02x", | |
483 | ifsta->assocresp_ies[i]); | |
484 | } | |
485 | } | |
486 | len += sprintf(buf + len, ")"); | |
487 | ||
488 | if (len > IW_CUSTOM_MAX) { | |
489 | len = sprintf(buf, "ASSOCRESPIE="); | |
490 | for (i = 0; i < ifsta->assocresp_ies_len; i++) { | |
491 | len += sprintf(buf + len, "%02x", | |
492 | ifsta->assocresp_ies[i]); | |
493 | } | |
494 | } | |
495 | ||
496 | memset(&wrqu, 0, sizeof(wrqu)); | |
497 | wrqu.data.length = len; | |
498 | wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf); | |
499 | ||
500 | kfree(buf); | |
501 | } | |
502 | ||
503 | ||
504 | static void ieee80211_set_associated(struct net_device *dev, | |
d6f2da5b | 505 | struct ieee80211_if_sta *ifsta, |
47f0c502 | 506 | bool assoc) |
f0706e82 | 507 | { |
471b3efd JB |
508 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
509 | struct ieee80211_local *local = sdata->local; | |
38668c05 | 510 | struct ieee80211_conf *conf = &local_to_hw(local)->conf; |
f0706e82 | 511 | union iwreq_data wrqu; |
471b3efd | 512 | u32 changed = BSS_CHANGED_ASSOC; |
f0706e82 | 513 | |
f0706e82 | 514 | if (assoc) { |
5628221c | 515 | struct ieee80211_sta_bss *bss; |
d6f2da5b JS |
516 | |
517 | ifsta->flags |= IEEE80211_STA_ASSOCIATED; | |
518 | ||
51fb61e7 | 519 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA) |
f0706e82 | 520 | return; |
5628221c | 521 | |
65c107ab | 522 | bss = ieee80211_rx_bss_get(dev, ifsta->bssid, |
38668c05 | 523 | conf->channel->center_freq, |
cffdd30d | 524 | ifsta->ssid, ifsta->ssid_len); |
5628221c | 525 | if (bss) { |
21c0cbe7 TW |
526 | /* set timing information */ |
527 | sdata->bss_conf.beacon_int = bss->beacon_int; | |
528 | sdata->bss_conf.timestamp = bss->timestamp; | |
529 | ||
50c4afb9 | 530 | changed |= ieee80211_handle_bss_capability(sdata, bss); |
21c0cbe7 | 531 | |
5628221c DD |
532 | ieee80211_rx_bss_put(dev, bss); |
533 | } | |
534 | ||
38668c05 TW |
535 | if (conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) { |
536 | changed |= BSS_CHANGED_HT; | |
537 | sdata->bss_conf.assoc_ht = 1; | |
538 | sdata->bss_conf.ht_conf = &conf->ht_conf; | |
539 | sdata->bss_conf.ht_bss_conf = &conf->ht_bss_conf; | |
540 | } | |
541 | ||
f0706e82 | 542 | netif_carrier_on(dev); |
d6f2da5b | 543 | ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET; |
f0706e82 JB |
544 | memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN); |
545 | memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN); | |
546 | ieee80211_sta_send_associnfo(dev, ifsta); | |
547 | } else { | |
85249e5f | 548 | ieee80211_sta_tear_down_BA_sessions(dev, ifsta->bssid); |
d6f2da5b | 549 | ifsta->flags &= ~IEEE80211_STA_ASSOCIATED; |
f0706e82 | 550 | netif_carrier_off(dev); |
d9430a32 | 551 | ieee80211_reset_erp_info(dev); |
38668c05 TW |
552 | |
553 | sdata->bss_conf.assoc_ht = 0; | |
554 | sdata->bss_conf.ht_conf = NULL; | |
555 | sdata->bss_conf.ht_bss_conf = NULL; | |
556 | ||
f0706e82 JB |
557 | memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN); |
558 | } | |
f0706e82 | 559 | ifsta->last_probe = jiffies; |
47f0c502 | 560 | ieee80211_led_assoc(local, assoc); |
471b3efd | 561 | |
b2205256 | 562 | sdata->bss_conf.assoc = assoc; |
471b3efd | 563 | ieee80211_bss_info_change_notify(sdata, changed); |
41a7be48 RC |
564 | wrqu.ap_addr.sa_family = ARPHRD_ETHER; |
565 | wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); | |
f0706e82 JB |
566 | } |
567 | ||
568 | static void ieee80211_set_disassoc(struct net_device *dev, | |
569 | struct ieee80211_if_sta *ifsta, int deauth) | |
570 | { | |
571 | if (deauth) | |
572 | ifsta->auth_tries = 0; | |
573 | ifsta->assoc_tries = 0; | |
574 | ieee80211_set_associated(dev, ifsta, 0); | |
575 | } | |
576 | ||
ee385855 LCC |
577 | void ieee80211_sta_tx(struct net_device *dev, struct sk_buff *skb, |
578 | int encrypt) | |
f0706e82 JB |
579 | { |
580 | struct ieee80211_sub_if_data *sdata; | |
581 | struct ieee80211_tx_packet_data *pkt_data; | |
582 | ||
583 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
584 | skb->dev = sdata->local->mdev; | |
585 | skb_set_mac_header(skb, 0); | |
586 | skb_set_network_header(skb, 0); | |
587 | skb_set_transport_header(skb, 0); | |
588 | ||
589 | pkt_data = (struct ieee80211_tx_packet_data *) skb->cb; | |
590 | memset(pkt_data, 0, sizeof(struct ieee80211_tx_packet_data)); | |
591 | pkt_data->ifindex = sdata->dev->ifindex; | |
e8bf9649 JS |
592 | if (!encrypt) |
593 | pkt_data->flags |= IEEE80211_TXPD_DO_NOT_ENCRYPT; | |
f0706e82 JB |
594 | |
595 | dev_queue_xmit(skb); | |
596 | } | |
597 | ||
598 | ||
599 | static void ieee80211_send_auth(struct net_device *dev, | |
600 | struct ieee80211_if_sta *ifsta, | |
601 | int transaction, u8 *extra, size_t extra_len, | |
602 | int encrypt) | |
603 | { | |
604 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
605 | struct sk_buff *skb; | |
606 | struct ieee80211_mgmt *mgmt; | |
607 | ||
608 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
609 | sizeof(*mgmt) + 6 + extra_len); | |
610 | if (!skb) { | |
611 | printk(KERN_DEBUG "%s: failed to allocate buffer for auth " | |
612 | "frame\n", dev->name); | |
613 | return; | |
614 | } | |
615 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
616 | ||
617 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6); | |
618 | memset(mgmt, 0, 24 + 6); | |
619 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
620 | IEEE80211_STYPE_AUTH); | |
621 | if (encrypt) | |
622 | mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); | |
623 | memcpy(mgmt->da, ifsta->bssid, ETH_ALEN); | |
624 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
625 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
626 | mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg); | |
627 | mgmt->u.auth.auth_transaction = cpu_to_le16(transaction); | |
628 | ifsta->auth_transaction = transaction + 1; | |
629 | mgmt->u.auth.status_code = cpu_to_le16(0); | |
630 | if (extra) | |
631 | memcpy(skb_put(skb, extra_len), extra, extra_len); | |
632 | ||
633 | ieee80211_sta_tx(dev, skb, encrypt); | |
634 | } | |
635 | ||
636 | ||
637 | static void ieee80211_authenticate(struct net_device *dev, | |
638 | struct ieee80211_if_sta *ifsta) | |
639 | { | |
0795af57 JP |
640 | DECLARE_MAC_BUF(mac); |
641 | ||
f0706e82 JB |
642 | ifsta->auth_tries++; |
643 | if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) { | |
0795af57 | 644 | printk(KERN_DEBUG "%s: authentication with AP %s" |
f0706e82 | 645 | " timed out\n", |
0795af57 | 646 | dev->name, print_mac(mac, ifsta->bssid)); |
f0706e82 JB |
647 | ifsta->state = IEEE80211_DISABLED; |
648 | return; | |
649 | } | |
650 | ||
651 | ifsta->state = IEEE80211_AUTHENTICATE; | |
0795af57 JP |
652 | printk(KERN_DEBUG "%s: authenticate with AP %s\n", |
653 | dev->name, print_mac(mac, ifsta->bssid)); | |
f0706e82 JB |
654 | |
655 | ieee80211_send_auth(dev, ifsta, 1, NULL, 0, 0); | |
656 | ||
657 | mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT); | |
658 | } | |
659 | ||
36d16ae7 HS |
660 | static int ieee80211_compatible_rates(struct ieee80211_sta_bss *bss, |
661 | struct ieee80211_supported_band *sband, | |
662 | u64 *rates) | |
663 | { | |
664 | int i, j, count; | |
665 | *rates = 0; | |
666 | count = 0; | |
667 | for (i = 0; i < bss->supp_rates_len; i++) { | |
668 | int rate = (bss->supp_rates[i] & 0x7F) * 5; | |
669 | ||
670 | for (j = 0; j < sband->n_bitrates; j++) | |
671 | if (sband->bitrates[j].bitrate == rate) { | |
672 | *rates |= BIT(j); | |
673 | count++; | |
674 | break; | |
675 | } | |
676 | } | |
677 | ||
678 | return count; | |
679 | } | |
f0706e82 JB |
680 | |
681 | static void ieee80211_send_assoc(struct net_device *dev, | |
682 | struct ieee80211_if_sta *ifsta) | |
683 | { | |
684 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
f0706e82 JB |
685 | struct sk_buff *skb; |
686 | struct ieee80211_mgmt *mgmt; | |
687 | u8 *pos, *ies; | |
36d16ae7 | 688 | int i, len, count, rates_len, supp_rates_len; |
f0706e82 JB |
689 | u16 capab; |
690 | struct ieee80211_sta_bss *bss; | |
691 | int wmm = 0; | |
8318d78a | 692 | struct ieee80211_supported_band *sband; |
36d16ae7 | 693 | u64 rates = 0; |
f0706e82 JB |
694 | |
695 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
696 | sizeof(*mgmt) + 200 + ifsta->extra_ie_len + | |
697 | ifsta->ssid_len); | |
698 | if (!skb) { | |
699 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
700 | "frame\n", dev->name); | |
701 | return; | |
702 | } | |
703 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
704 | ||
8318d78a JB |
705 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
706 | ||
f0706e82 | 707 | capab = ifsta->capab; |
8318d78a JB |
708 | |
709 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { | |
710 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
711 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
712 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
713 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
f0706e82 | 714 | } |
8318d78a JB |
715 | |
716 | bss = ieee80211_rx_bss_get(dev, ifsta->bssid, | |
717 | local->hw.conf.channel->center_freq, | |
cffdd30d | 718 | ifsta->ssid, ifsta->ssid_len); |
f0706e82 JB |
719 | if (bss) { |
720 | if (bss->capability & WLAN_CAPABILITY_PRIVACY) | |
721 | capab |= WLAN_CAPABILITY_PRIVACY; | |
988c0f72 | 722 | if (bss->wmm_ie) |
f0706e82 | 723 | wmm = 1; |
f0706e82 JB |
724 | ieee80211_rx_bss_put(dev, bss); |
725 | } | |
726 | ||
727 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
728 | memset(mgmt, 0, 24); | |
729 | memcpy(mgmt->da, ifsta->bssid, ETH_ALEN); | |
730 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
731 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
732 | ||
d6f2da5b | 733 | if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) { |
f0706e82 JB |
734 | skb_put(skb, 10); |
735 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
736 | IEEE80211_STYPE_REASSOC_REQ); | |
737 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
738 | mgmt->u.reassoc_req.listen_interval = cpu_to_le16(1); | |
739 | memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid, | |
740 | ETH_ALEN); | |
741 | } else { | |
742 | skb_put(skb, 4); | |
743 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
744 | IEEE80211_STYPE_ASSOC_REQ); | |
745 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
746 | mgmt->u.assoc_req.listen_interval = cpu_to_le16(1); | |
747 | } | |
748 | ||
749 | /* SSID */ | |
750 | ies = pos = skb_put(skb, 2 + ifsta->ssid_len); | |
751 | *pos++ = WLAN_EID_SSID; | |
752 | *pos++ = ifsta->ssid_len; | |
753 | memcpy(pos, ifsta->ssid, ifsta->ssid_len); | |
754 | ||
36d16ae7 HS |
755 | /* all supported rates should be added here but some APs |
756 | * (e.g. D-Link DAP 1353 in b-only mode) don't like that | |
757 | * Therefore only add rates the AP supports */ | |
758 | rates_len = ieee80211_compatible_rates(bss, sband, &rates); | |
759 | supp_rates_len = rates_len; | |
760 | if (supp_rates_len > 8) | |
761 | supp_rates_len = 8; | |
762 | ||
8318d78a | 763 | len = sband->n_bitrates; |
36d16ae7 | 764 | pos = skb_put(skb, supp_rates_len + 2); |
f0706e82 | 765 | *pos++ = WLAN_EID_SUPP_RATES; |
36d16ae7 | 766 | *pos++ = supp_rates_len; |
f0706e82 | 767 | |
36d16ae7 HS |
768 | count = 0; |
769 | for (i = 0; i < sband->n_bitrates; i++) { | |
770 | if (BIT(i) & rates) { | |
8318d78a | 771 | int rate = sband->bitrates[i].bitrate; |
f0706e82 | 772 | *pos++ = (u8) (rate / 5); |
36d16ae7 HS |
773 | if (++count == 8) |
774 | break; | |
775 | } | |
776 | } | |
777 | ||
778 | if (count == 8) { | |
779 | pos = skb_put(skb, rates_len - count + 2); | |
780 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
781 | *pos++ = rates_len - count; | |
782 | ||
783 | for (i++; i < sband->n_bitrates; i++) { | |
784 | if (BIT(i) & rates) { | |
785 | int rate = sband->bitrates[i].bitrate; | |
786 | *pos++ = (u8) (rate / 5); | |
787 | } | |
f0706e82 JB |
788 | } |
789 | } | |
790 | ||
791 | if (ifsta->extra_ie) { | |
792 | pos = skb_put(skb, ifsta->extra_ie_len); | |
793 | memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len); | |
794 | } | |
795 | ||
d6f2da5b | 796 | if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) { |
f0706e82 JB |
797 | pos = skb_put(skb, 9); |
798 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
799 | *pos++ = 7; /* len */ | |
800 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
801 | *pos++ = 0x50; | |
802 | *pos++ = 0xf2; | |
803 | *pos++ = 2; /* WME */ | |
804 | *pos++ = 0; /* WME info */ | |
805 | *pos++ = 1; /* WME ver */ | |
806 | *pos++ = 0; | |
807 | } | |
3434fbd3 | 808 | |
c7153508 | 809 | /* wmm support is a must to HT */ |
3434fbd3 JB |
810 | if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) && |
811 | sband->ht_info.ht_supported) { | |
8318d78a | 812 | __le16 tmp = cpu_to_le16(sband->ht_info.cap); |
c7153508 RR |
813 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2); |
814 | *pos++ = WLAN_EID_HT_CAPABILITY; | |
815 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
816 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
817 | memcpy(pos, &tmp, sizeof(u16)); | |
818 | pos += sizeof(u16); | |
8318d78a JB |
819 | /* TODO: needs a define here for << 2 */ |
820 | *pos++ = sband->ht_info.ampdu_factor | | |
821 | (sband->ht_info.ampdu_density << 2); | |
822 | memcpy(pos, sband->ht_info.supp_mcs_set, 16); | |
c7153508 | 823 | } |
f0706e82 JB |
824 | |
825 | kfree(ifsta->assocreq_ies); | |
826 | ifsta->assocreq_ies_len = (skb->data + skb->len) - ies; | |
0ec0b7ac | 827 | ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL); |
f0706e82 JB |
828 | if (ifsta->assocreq_ies) |
829 | memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len); | |
830 | ||
831 | ieee80211_sta_tx(dev, skb, 0); | |
832 | } | |
833 | ||
834 | ||
835 | static void ieee80211_send_deauth(struct net_device *dev, | |
836 | struct ieee80211_if_sta *ifsta, u16 reason) | |
837 | { | |
838 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
839 | struct sk_buff *skb; | |
840 | struct ieee80211_mgmt *mgmt; | |
841 | ||
842 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); | |
843 | if (!skb) { | |
844 | printk(KERN_DEBUG "%s: failed to allocate buffer for deauth " | |
845 | "frame\n", dev->name); | |
846 | return; | |
847 | } | |
848 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
849 | ||
850 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
851 | memset(mgmt, 0, 24); | |
852 | memcpy(mgmt->da, ifsta->bssid, ETH_ALEN); | |
853 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
854 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
855 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
856 | IEEE80211_STYPE_DEAUTH); | |
857 | skb_put(skb, 2); | |
858 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); | |
859 | ||
860 | ieee80211_sta_tx(dev, skb, 0); | |
861 | } | |
862 | ||
863 | ||
864 | static void ieee80211_send_disassoc(struct net_device *dev, | |
865 | struct ieee80211_if_sta *ifsta, u16 reason) | |
866 | { | |
867 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
868 | struct sk_buff *skb; | |
869 | struct ieee80211_mgmt *mgmt; | |
870 | ||
871 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); | |
872 | if (!skb) { | |
873 | printk(KERN_DEBUG "%s: failed to allocate buffer for disassoc " | |
874 | "frame\n", dev->name); | |
875 | return; | |
876 | } | |
877 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
878 | ||
879 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
880 | memset(mgmt, 0, 24); | |
881 | memcpy(mgmt->da, ifsta->bssid, ETH_ALEN); | |
882 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
883 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
884 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
885 | IEEE80211_STYPE_DISASSOC); | |
886 | skb_put(skb, 2); | |
887 | mgmt->u.disassoc.reason_code = cpu_to_le16(reason); | |
888 | ||
889 | ieee80211_sta_tx(dev, skb, 0); | |
890 | } | |
891 | ||
892 | ||
893 | static int ieee80211_privacy_mismatch(struct net_device *dev, | |
894 | struct ieee80211_if_sta *ifsta) | |
895 | { | |
65c107ab | 896 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); |
f0706e82 | 897 | struct ieee80211_sta_bss *bss; |
5b98b1f7 JB |
898 | int bss_privacy; |
899 | int wep_privacy; | |
900 | int privacy_invoked; | |
f0706e82 | 901 | |
5b98b1f7 | 902 | if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL)) |
f0706e82 JB |
903 | return 0; |
904 | ||
8318d78a JB |
905 | bss = ieee80211_rx_bss_get(dev, ifsta->bssid, |
906 | local->hw.conf.channel->center_freq, | |
cffdd30d | 907 | ifsta->ssid, ifsta->ssid_len); |
f0706e82 JB |
908 | if (!bss) |
909 | return 0; | |
910 | ||
5b98b1f7 JB |
911 | bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY); |
912 | wep_privacy = !!ieee80211_sta_wep_configured(dev); | |
913 | privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED); | |
f0706e82 JB |
914 | |
915 | ieee80211_rx_bss_put(dev, bss); | |
916 | ||
5b98b1f7 JB |
917 | if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked)) |
918 | return 0; | |
919 | ||
920 | return 1; | |
f0706e82 JB |
921 | } |
922 | ||
923 | ||
924 | static void ieee80211_associate(struct net_device *dev, | |
925 | struct ieee80211_if_sta *ifsta) | |
926 | { | |
0795af57 JP |
927 | DECLARE_MAC_BUF(mac); |
928 | ||
f0706e82 JB |
929 | ifsta->assoc_tries++; |
930 | if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) { | |
0795af57 | 931 | printk(KERN_DEBUG "%s: association with AP %s" |
f0706e82 | 932 | " timed out\n", |
0795af57 | 933 | dev->name, print_mac(mac, ifsta->bssid)); |
f0706e82 JB |
934 | ifsta->state = IEEE80211_DISABLED; |
935 | return; | |
936 | } | |
937 | ||
938 | ifsta->state = IEEE80211_ASSOCIATE; | |
0795af57 JP |
939 | printk(KERN_DEBUG "%s: associate with AP %s\n", |
940 | dev->name, print_mac(mac, ifsta->bssid)); | |
f0706e82 JB |
941 | if (ieee80211_privacy_mismatch(dev, ifsta)) { |
942 | printk(KERN_DEBUG "%s: mismatch in privacy configuration and " | |
943 | "mixed-cell disabled - abort association\n", dev->name); | |
944 | ifsta->state = IEEE80211_DISABLED; | |
945 | return; | |
946 | } | |
947 | ||
948 | ieee80211_send_assoc(dev, ifsta); | |
949 | ||
950 | mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT); | |
951 | } | |
952 | ||
953 | ||
954 | static void ieee80211_associated(struct net_device *dev, | |
955 | struct ieee80211_if_sta *ifsta) | |
956 | { | |
957 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
958 | struct sta_info *sta; | |
959 | int disassoc; | |
0795af57 | 960 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
961 | |
962 | /* TODO: start monitoring current AP signal quality and number of | |
963 | * missed beacons. Scan other channels every now and then and search | |
964 | * for better APs. */ | |
965 | /* TODO: remove expired BSSes */ | |
966 | ||
967 | ifsta->state = IEEE80211_ASSOCIATED; | |
968 | ||
d0709a65 JB |
969 | rcu_read_lock(); |
970 | ||
f0706e82 JB |
971 | sta = sta_info_get(local, ifsta->bssid); |
972 | if (!sta) { | |
0795af57 JP |
973 | printk(KERN_DEBUG "%s: No STA entry for own AP %s\n", |
974 | dev->name, print_mac(mac, ifsta->bssid)); | |
f0706e82 JB |
975 | disassoc = 1; |
976 | } else { | |
977 | disassoc = 0; | |
978 | if (time_after(jiffies, | |
979 | sta->last_rx + IEEE80211_MONITORING_INTERVAL)) { | |
d6f2da5b | 980 | if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) { |
f0706e82 | 981 | printk(KERN_DEBUG "%s: No ProbeResp from " |
0795af57 | 982 | "current AP %s - assume out of " |
f0706e82 | 983 | "range\n", |
0795af57 | 984 | dev->name, print_mac(mac, ifsta->bssid)); |
f0706e82 | 985 | disassoc = 1; |
d0709a65 | 986 | sta_info_unlink(&sta); |
d6f2da5b | 987 | } else |
f0706e82 JB |
988 | ieee80211_send_probe_req(dev, ifsta->bssid, |
989 | local->scan_ssid, | |
990 | local->scan_ssid_len); | |
d6f2da5b | 991 | ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL; |
f0706e82 | 992 | } else { |
d6f2da5b | 993 | ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL; |
f0706e82 JB |
994 | if (time_after(jiffies, ifsta->last_probe + |
995 | IEEE80211_PROBE_INTERVAL)) { | |
996 | ifsta->last_probe = jiffies; | |
997 | ieee80211_send_probe_req(dev, ifsta->bssid, | |
998 | ifsta->ssid, | |
999 | ifsta->ssid_len); | |
1000 | } | |
1001 | } | |
f0706e82 | 1002 | } |
d0709a65 JB |
1003 | |
1004 | rcu_read_unlock(); | |
1005 | ||
3b96766f | 1006 | if (disassoc && sta) |
d0709a65 | 1007 | sta_info_destroy(sta); |
d0709a65 | 1008 | |
f0706e82 | 1009 | if (disassoc) { |
2d192d95 MW |
1010 | ifsta->state = IEEE80211_DISABLED; |
1011 | ieee80211_set_associated(dev, ifsta, 0); | |
f0706e82 JB |
1012 | } else { |
1013 | mod_timer(&ifsta->timer, jiffies + | |
1014 | IEEE80211_MONITORING_INTERVAL); | |
1015 | } | |
1016 | } | |
1017 | ||
1018 | ||
1019 | static void ieee80211_send_probe_req(struct net_device *dev, u8 *dst, | |
1020 | u8 *ssid, size_t ssid_len) | |
1021 | { | |
1022 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
8318d78a | 1023 | struct ieee80211_supported_band *sband; |
f0706e82 JB |
1024 | struct sk_buff *skb; |
1025 | struct ieee80211_mgmt *mgmt; | |
1026 | u8 *pos, *supp_rates, *esupp_rates = NULL; | |
1027 | int i; | |
1028 | ||
1029 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200); | |
1030 | if (!skb) { | |
1031 | printk(KERN_DEBUG "%s: failed to allocate buffer for probe " | |
1032 | "request\n", dev->name); | |
1033 | return; | |
1034 | } | |
1035 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
1036 | ||
1037 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
1038 | memset(mgmt, 0, 24); | |
1039 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
1040 | IEEE80211_STYPE_PROBE_REQ); | |
1041 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
1042 | if (dst) { | |
1043 | memcpy(mgmt->da, dst, ETH_ALEN); | |
1044 | memcpy(mgmt->bssid, dst, ETH_ALEN); | |
1045 | } else { | |
1046 | memset(mgmt->da, 0xff, ETH_ALEN); | |
1047 | memset(mgmt->bssid, 0xff, ETH_ALEN); | |
1048 | } | |
1049 | pos = skb_put(skb, 2 + ssid_len); | |
1050 | *pos++ = WLAN_EID_SSID; | |
1051 | *pos++ = ssid_len; | |
1052 | memcpy(pos, ssid, ssid_len); | |
1053 | ||
1054 | supp_rates = skb_put(skb, 2); | |
1055 | supp_rates[0] = WLAN_EID_SUPP_RATES; | |
1056 | supp_rates[1] = 0; | |
8318d78a JB |
1057 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
1058 | ||
1059 | for (i = 0; i < sband->n_bitrates; i++) { | |
1060 | struct ieee80211_rate *rate = &sband->bitrates[i]; | |
f0706e82 JB |
1061 | if (esupp_rates) { |
1062 | pos = skb_put(skb, 1); | |
1063 | esupp_rates[1]++; | |
1064 | } else if (supp_rates[1] == 8) { | |
1065 | esupp_rates = skb_put(skb, 3); | |
1066 | esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES; | |
1067 | esupp_rates[1] = 1; | |
1068 | pos = &esupp_rates[2]; | |
1069 | } else { | |
1070 | pos = skb_put(skb, 1); | |
1071 | supp_rates[1]++; | |
1072 | } | |
8318d78a | 1073 | *pos = rate->bitrate / 5; |
f0706e82 JB |
1074 | } |
1075 | ||
1076 | ieee80211_sta_tx(dev, skb, 0); | |
1077 | } | |
1078 | ||
1079 | ||
1080 | static int ieee80211_sta_wep_configured(struct net_device *dev) | |
1081 | { | |
1082 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1083 | if (!sdata || !sdata->default_key || | |
8f20fc24 | 1084 | sdata->default_key->conf.alg != ALG_WEP) |
f0706e82 JB |
1085 | return 0; |
1086 | return 1; | |
1087 | } | |
1088 | ||
1089 | ||
1090 | static void ieee80211_auth_completed(struct net_device *dev, | |
1091 | struct ieee80211_if_sta *ifsta) | |
1092 | { | |
1093 | printk(KERN_DEBUG "%s: authenticated\n", dev->name); | |
d6f2da5b | 1094 | ifsta->flags |= IEEE80211_STA_AUTHENTICATED; |
f0706e82 JB |
1095 | ieee80211_associate(dev, ifsta); |
1096 | } | |
1097 | ||
1098 | ||
1099 | static void ieee80211_auth_challenge(struct net_device *dev, | |
1100 | struct ieee80211_if_sta *ifsta, | |
1101 | struct ieee80211_mgmt *mgmt, | |
1102 | size_t len) | |
1103 | { | |
1104 | u8 *pos; | |
1105 | struct ieee802_11_elems elems; | |
1106 | ||
1107 | printk(KERN_DEBUG "%s: replying to auth challenge\n", dev->name); | |
1108 | pos = mgmt->u.auth.variable; | |
67a4cce4 | 1109 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f0706e82 JB |
1110 | if (!elems.challenge) { |
1111 | printk(KERN_DEBUG "%s: no challenge IE in shared key auth " | |
1112 | "frame\n", dev->name); | |
1113 | return; | |
1114 | } | |
1115 | ieee80211_send_auth(dev, ifsta, 3, elems.challenge - 2, | |
1116 | elems.challenge_len + 2, 1); | |
1117 | } | |
1118 | ||
9f985b0e RR |
1119 | static void ieee80211_send_addba_resp(struct net_device *dev, u8 *da, u16 tid, |
1120 | u8 dialog_token, u16 status, u16 policy, | |
1121 | u16 buf_size, u16 timeout) | |
1122 | { | |
1123 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1124 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
1125 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1126 | struct sk_buff *skb; | |
1127 | struct ieee80211_mgmt *mgmt; | |
1128 | u16 capab; | |
1129 | ||
3acea5b6 EK |
1130 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); |
1131 | ||
9f985b0e RR |
1132 | if (!skb) { |
1133 | printk(KERN_DEBUG "%s: failed to allocate buffer " | |
1134 | "for addba resp frame\n", dev->name); | |
1135 | return; | |
1136 | } | |
1137 | ||
1138 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
1139 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
1140 | memset(mgmt, 0, 24); | |
1141 | memcpy(mgmt->da, da, ETH_ALEN); | |
1142 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
51fb61e7 | 1143 | if (sdata->vif.type == IEEE80211_IF_TYPE_AP) |
9f985b0e RR |
1144 | memcpy(mgmt->bssid, dev->dev_addr, ETH_ALEN); |
1145 | else | |
1146 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
1147 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
1148 | IEEE80211_STYPE_ACTION); | |
1149 | ||
1150 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_resp)); | |
1151 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
1152 | mgmt->u.action.u.addba_resp.action_code = WLAN_ACTION_ADDBA_RESP; | |
1153 | mgmt->u.action.u.addba_resp.dialog_token = dialog_token; | |
1154 | ||
1155 | capab = (u16)(policy << 1); /* bit 1 aggregation policy */ | |
1156 | capab |= (u16)(tid << 2); /* bit 5:2 TID number */ | |
1157 | capab |= (u16)(buf_size << 6); /* bit 15:6 max size of aggregation */ | |
1158 | ||
1159 | mgmt->u.action.u.addba_resp.capab = cpu_to_le16(capab); | |
1160 | mgmt->u.action.u.addba_resp.timeout = cpu_to_le16(timeout); | |
1161 | mgmt->u.action.u.addba_resp.status = cpu_to_le16(status); | |
1162 | ||
1163 | ieee80211_sta_tx(dev, skb, 0); | |
1164 | ||
1165 | return; | |
1166 | } | |
1167 | ||
eadc8d9e RR |
1168 | void ieee80211_send_addba_request(struct net_device *dev, const u8 *da, |
1169 | u16 tid, u8 dialog_token, u16 start_seq_num, | |
1170 | u16 agg_size, u16 timeout) | |
1171 | { | |
1172 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1173 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1174 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
1175 | struct sk_buff *skb; | |
1176 | struct ieee80211_mgmt *mgmt; | |
1177 | u16 capab; | |
1178 | ||
3acea5b6 | 1179 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); |
eadc8d9e RR |
1180 | |
1181 | if (!skb) { | |
1182 | printk(KERN_ERR "%s: failed to allocate buffer " | |
1183 | "for addba request frame\n", dev->name); | |
1184 | return; | |
1185 | } | |
1186 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
1187 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
1188 | memset(mgmt, 0, 24); | |
1189 | memcpy(mgmt->da, da, ETH_ALEN); | |
1190 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
1191 | if (sdata->vif.type == IEEE80211_IF_TYPE_AP) | |
1192 | memcpy(mgmt->bssid, dev->dev_addr, ETH_ALEN); | |
1193 | else | |
1194 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
1195 | ||
1196 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
1197 | IEEE80211_STYPE_ACTION); | |
1198 | ||
1199 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_req)); | |
1200 | ||
1201 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
1202 | mgmt->u.action.u.addba_req.action_code = WLAN_ACTION_ADDBA_REQ; | |
1203 | ||
1204 | mgmt->u.action.u.addba_req.dialog_token = dialog_token; | |
1205 | capab = (u16)(1 << 1); /* bit 1 aggregation policy */ | |
1206 | capab |= (u16)(tid << 2); /* bit 5:2 TID number */ | |
1207 | capab |= (u16)(agg_size << 6); /* bit 15:6 max size of aggergation */ | |
1208 | ||
1209 | mgmt->u.action.u.addba_req.capab = cpu_to_le16(capab); | |
1210 | ||
1211 | mgmt->u.action.u.addba_req.timeout = cpu_to_le16(timeout); | |
1212 | mgmt->u.action.u.addba_req.start_seq_num = | |
1213 | cpu_to_le16(start_seq_num << 4); | |
1214 | ||
1215 | ieee80211_sta_tx(dev, skb, 0); | |
1216 | } | |
1217 | ||
9f985b0e RR |
1218 | static void ieee80211_sta_process_addba_request(struct net_device *dev, |
1219 | struct ieee80211_mgmt *mgmt, | |
1220 | size_t len) | |
1221 | { | |
1222 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
07db2183 RR |
1223 | struct ieee80211_hw *hw = &local->hw; |
1224 | struct ieee80211_conf *conf = &hw->conf; | |
9f985b0e | 1225 | struct sta_info *sta; |
07db2183 RR |
1226 | struct tid_ampdu_rx *tid_agg_rx; |
1227 | u16 capab, tid, timeout, ba_policy, buf_size, start_seq_num, status; | |
9f985b0e | 1228 | u8 dialog_token; |
07db2183 RR |
1229 | int ret = -EOPNOTSUPP; |
1230 | DECLARE_MAC_BUF(mac); | |
9f985b0e | 1231 | |
d0709a65 JB |
1232 | rcu_read_lock(); |
1233 | ||
9f985b0e | 1234 | sta = sta_info_get(local, mgmt->sa); |
d0709a65 JB |
1235 | if (!sta) { |
1236 | rcu_read_unlock(); | |
9f985b0e | 1237 | return; |
d0709a65 | 1238 | } |
9f985b0e RR |
1239 | |
1240 | /* extract session parameters from addba request frame */ | |
1241 | dialog_token = mgmt->u.action.u.addba_req.dialog_token; | |
1242 | timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout); | |
07db2183 RR |
1243 | start_seq_num = |
1244 | le16_to_cpu(mgmt->u.action.u.addba_req.start_seq_num) >> 4; | |
9f985b0e RR |
1245 | |
1246 | capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab); | |
1247 | ba_policy = (capab & IEEE80211_ADDBA_PARAM_POLICY_MASK) >> 1; | |
1248 | tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2; | |
1249 | buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6; | |
1250 | ||
9f985b0e RR |
1251 | status = WLAN_STATUS_REQUEST_DECLINED; |
1252 | ||
07db2183 RR |
1253 | /* sanity check for incoming parameters: |
1254 | * check if configuration can support the BA policy | |
1255 | * and if buffer size does not exceeds max value */ | |
1256 | if (((ba_policy != 1) | |
1257 | && (!(conf->ht_conf.cap & IEEE80211_HT_CAP_DELAY_BA))) | |
1258 | || (buf_size > IEEE80211_MAX_AMPDU_BUF)) { | |
1259 | status = WLAN_STATUS_INVALID_QOS_PARAM; | |
1260 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1261 | if (net_ratelimit()) | |
7b9d44cd | 1262 | printk(KERN_DEBUG "AddBA Req with bad params from " |
07db2183 RR |
1263 | "%s on tid %u. policy %d, buffer size %d\n", |
1264 | print_mac(mac, mgmt->sa), tid, ba_policy, | |
1265 | buf_size); | |
1266 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1267 | goto end_no_lock; | |
1268 | } | |
1269 | /* determine default buffer size */ | |
1270 | if (buf_size == 0) { | |
8318d78a JB |
1271 | struct ieee80211_supported_band *sband; |
1272 | ||
1273 | sband = local->hw.wiphy->bands[conf->channel->band]; | |
07db2183 | 1274 | buf_size = IEEE80211_MIN_AMPDU_BUF; |
8318d78a | 1275 | buf_size = buf_size << sband->ht_info.ampdu_factor; |
07db2183 RR |
1276 | } |
1277 | ||
07db2183 RR |
1278 | |
1279 | /* examine state machine */ | |
07346f81 | 1280 | spin_lock_bh(&sta->lock); |
07db2183 | 1281 | |
cee24a3e | 1282 | if (sta->ampdu_mlme.tid_state_rx[tid] != HT_AGG_STATE_IDLE) { |
07db2183 RR |
1283 | #ifdef CONFIG_MAC80211_HT_DEBUG |
1284 | if (net_ratelimit()) | |
7b9d44cd | 1285 | printk(KERN_DEBUG "unexpected AddBA Req from " |
07db2183 RR |
1286 | "%s on tid %u\n", |
1287 | print_mac(mac, mgmt->sa), tid); | |
1288 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1289 | goto end; | |
1290 | } | |
1291 | ||
cee24a3e RR |
1292 | /* prepare A-MPDU MLME for Rx aggregation */ |
1293 | sta->ampdu_mlme.tid_rx[tid] = | |
1294 | kmalloc(sizeof(struct tid_ampdu_rx), GFP_ATOMIC); | |
1295 | if (!sta->ampdu_mlme.tid_rx[tid]) { | |
1296 | if (net_ratelimit()) | |
1297 | printk(KERN_ERR "allocate rx mlme to tid %d failed\n", | |
1298 | tid); | |
1299 | goto end; | |
1300 | } | |
1301 | /* rx timer */ | |
1302 | sta->ampdu_mlme.tid_rx[tid]->session_timer.function = | |
1303 | sta_rx_agg_session_timer_expired; | |
1304 | sta->ampdu_mlme.tid_rx[tid]->session_timer.data = | |
1305 | (unsigned long)&sta->timer_to_tid[tid]; | |
1306 | init_timer(&sta->ampdu_mlme.tid_rx[tid]->session_timer); | |
1307 | ||
1308 | tid_agg_rx = sta->ampdu_mlme.tid_rx[tid]; | |
1309 | ||
07db2183 RR |
1310 | /* prepare reordering buffer */ |
1311 | tid_agg_rx->reorder_buf = | |
1312 | kmalloc(buf_size * sizeof(struct sk_buf *), GFP_ATOMIC); | |
03147dfc JB |
1313 | if (!tid_agg_rx->reorder_buf) { |
1314 | if (net_ratelimit()) | |
1315 | printk(KERN_ERR "can not allocate reordering buffer " | |
1316 | "to tid %d\n", tid); | |
cee24a3e | 1317 | kfree(sta->ampdu_mlme.tid_rx[tid]); |
07db2183 RR |
1318 | goto end; |
1319 | } | |
1320 | memset(tid_agg_rx->reorder_buf, 0, | |
1321 | buf_size * sizeof(struct sk_buf *)); | |
1322 | ||
1323 | if (local->ops->ampdu_action) | |
1324 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_START, | |
0df3ef45 | 1325 | sta->addr, tid, &start_seq_num); |
07db2183 | 1326 | #ifdef CONFIG_MAC80211_HT_DEBUG |
513a1025 | 1327 | printk(KERN_DEBUG "Rx A-MPDU request on tid %d result %d\n", tid, ret); |
07db2183 RR |
1328 | #endif /* CONFIG_MAC80211_HT_DEBUG */ |
1329 | ||
1330 | if (ret) { | |
1331 | kfree(tid_agg_rx->reorder_buf); | |
cee24a3e RR |
1332 | kfree(tid_agg_rx); |
1333 | sta->ampdu_mlme.tid_rx[tid] = NULL; | |
07db2183 RR |
1334 | goto end; |
1335 | } | |
1336 | ||
1337 | /* change state and send addba resp */ | |
cee24a3e | 1338 | sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_OPERATIONAL; |
07db2183 RR |
1339 | tid_agg_rx->dialog_token = dialog_token; |
1340 | tid_agg_rx->ssn = start_seq_num; | |
1341 | tid_agg_rx->head_seq_num = start_seq_num; | |
1342 | tid_agg_rx->buf_size = buf_size; | |
1343 | tid_agg_rx->timeout = timeout; | |
1344 | tid_agg_rx->stored_mpdu_num = 0; | |
1345 | status = WLAN_STATUS_SUCCESS; | |
1346 | end: | |
07346f81 | 1347 | spin_unlock_bh(&sta->lock); |
07db2183 RR |
1348 | |
1349 | end_no_lock: | |
d0709a65 JB |
1350 | ieee80211_send_addba_resp(sta->sdata->dev, sta->addr, tid, |
1351 | dialog_token, status, 1, buf_size, timeout); | |
1352 | rcu_read_unlock(); | |
9f985b0e | 1353 | } |
f0706e82 | 1354 | |
eadc8d9e RR |
1355 | static void ieee80211_sta_process_addba_resp(struct net_device *dev, |
1356 | struct ieee80211_mgmt *mgmt, | |
1357 | size_t len) | |
1358 | { | |
1359 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1360 | struct ieee80211_hw *hw = &local->hw; | |
1361 | struct sta_info *sta; | |
1362 | u16 capab; | |
1363 | u16 tid; | |
1364 | u8 *state; | |
1365 | ||
d0709a65 JB |
1366 | rcu_read_lock(); |
1367 | ||
eadc8d9e | 1368 | sta = sta_info_get(local, mgmt->sa); |
d0709a65 JB |
1369 | if (!sta) { |
1370 | rcu_read_unlock(); | |
eadc8d9e | 1371 | return; |
d0709a65 | 1372 | } |
eadc8d9e RR |
1373 | |
1374 | capab = le16_to_cpu(mgmt->u.action.u.addba_resp.capab); | |
1375 | tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2; | |
1376 | ||
cee24a3e | 1377 | state = &sta->ampdu_mlme.tid_state_tx[tid]; |
eadc8d9e | 1378 | |
07346f81 | 1379 | spin_lock_bh(&sta->lock); |
eadc8d9e | 1380 | |
cee24a3e | 1381 | if (!(*state & HT_ADDBA_REQUESTED_MSK)) { |
07346f81 | 1382 | spin_unlock_bh(&sta->lock); |
cee24a3e RR |
1383 | printk(KERN_DEBUG "state not HT_ADDBA_REQUESTED_MSK:" |
1384 | "%d\n", *state); | |
1385 | goto addba_resp_exit; | |
1386 | } | |
1387 | ||
eadc8d9e | 1388 | if (mgmt->u.action.u.addba_resp.dialog_token != |
cee24a3e | 1389 | sta->ampdu_mlme.tid_tx[tid]->dialog_token) { |
07346f81 | 1390 | spin_unlock_bh(&sta->lock); |
eadc8d9e RR |
1391 | #ifdef CONFIG_MAC80211_HT_DEBUG |
1392 | printk(KERN_DEBUG "wrong addBA response token, tid %d\n", tid); | |
1393 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
cee24a3e | 1394 | goto addba_resp_exit; |
eadc8d9e RR |
1395 | } |
1396 | ||
cee24a3e | 1397 | del_timer_sync(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer); |
eadc8d9e RR |
1398 | #ifdef CONFIG_MAC80211_HT_DEBUG |
1399 | printk(KERN_DEBUG "switched off addBA timer for tid %d \n", tid); | |
1400 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1401 | if (le16_to_cpu(mgmt->u.action.u.addba_resp.status) | |
1402 | == WLAN_STATUS_SUCCESS) { | |
eadc8d9e RR |
1403 | if (*state & HT_ADDBA_RECEIVED_MSK) |
1404 | printk(KERN_DEBUG "double addBA response\n"); | |
1405 | ||
1406 | *state |= HT_ADDBA_RECEIVED_MSK; | |
cee24a3e | 1407 | sta->ampdu_mlme.addba_req_num[tid] = 0; |
eadc8d9e RR |
1408 | |
1409 | if (*state == HT_AGG_STATE_OPERATIONAL) { | |
1410 | printk(KERN_DEBUG "Aggregation on for tid %d \n", tid); | |
1411 | ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]); | |
1412 | } | |
1413 | ||
07346f81 | 1414 | spin_unlock_bh(&sta->lock); |
eadc8d9e RR |
1415 | printk(KERN_DEBUG "recipient accepted agg: tid %d \n", tid); |
1416 | } else { | |
1417 | printk(KERN_DEBUG "recipient rejected agg: tid %d \n", tid); | |
1418 | ||
cee24a3e | 1419 | sta->ampdu_mlme.addba_req_num[tid]++; |
eadc8d9e RR |
1420 | /* this will allow the state check in stop_BA_session */ |
1421 | *state = HT_AGG_STATE_OPERATIONAL; | |
07346f81 | 1422 | spin_unlock_bh(&sta->lock); |
eadc8d9e RR |
1423 | ieee80211_stop_tx_ba_session(hw, sta->addr, tid, |
1424 | WLAN_BACK_INITIATOR); | |
1425 | } | |
cee24a3e RR |
1426 | |
1427 | addba_resp_exit: | |
d0709a65 | 1428 | rcu_read_unlock(); |
eadc8d9e RR |
1429 | } |
1430 | ||
1431 | void ieee80211_send_delba(struct net_device *dev, const u8 *da, u16 tid, | |
1432 | u16 initiator, u16 reason_code) | |
07db2183 RR |
1433 | { |
1434 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1435 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1436 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
1437 | struct sk_buff *skb; | |
1438 | struct ieee80211_mgmt *mgmt; | |
1439 | u16 params; | |
1440 | ||
3acea5b6 | 1441 | skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); |
07db2183 RR |
1442 | |
1443 | if (!skb) { | |
1444 | printk(KERN_ERR "%s: failed to allocate buffer " | |
1445 | "for delba frame\n", dev->name); | |
1446 | return; | |
1447 | } | |
1448 | ||
1449 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
1450 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
1451 | memset(mgmt, 0, 24); | |
1452 | memcpy(mgmt->da, da, ETH_ALEN); | |
1453 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
51fb61e7 | 1454 | if (sdata->vif.type == IEEE80211_IF_TYPE_AP) |
07db2183 RR |
1455 | memcpy(mgmt->bssid, dev->dev_addr, ETH_ALEN); |
1456 | else | |
1457 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
1458 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
1459 | IEEE80211_STYPE_ACTION); | |
1460 | ||
1461 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba)); | |
1462 | ||
1463 | mgmt->u.action.category = WLAN_CATEGORY_BACK; | |
1464 | mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA; | |
1465 | params = (u16)(initiator << 11); /* bit 11 initiator */ | |
1466 | params |= (u16)(tid << 12); /* bit 15:12 TID number */ | |
1467 | ||
1468 | mgmt->u.action.u.delba.params = cpu_to_le16(params); | |
1469 | mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code); | |
1470 | ||
1471 | ieee80211_sta_tx(dev, skb, 0); | |
1472 | } | |
1473 | ||
1474 | void ieee80211_sta_stop_rx_ba_session(struct net_device *dev, u8 *ra, u16 tid, | |
1475 | u16 initiator, u16 reason) | |
1476 | { | |
1477 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1478 | struct ieee80211_hw *hw = &local->hw; | |
1479 | struct sta_info *sta; | |
b580781e | 1480 | int ret, i; |
513a1025 | 1481 | DECLARE_MAC_BUF(mac); |
07db2183 | 1482 | |
d0709a65 JB |
1483 | rcu_read_lock(); |
1484 | ||
07db2183 | 1485 | sta = sta_info_get(local, ra); |
d0709a65 JB |
1486 | if (!sta) { |
1487 | rcu_read_unlock(); | |
07db2183 | 1488 | return; |
d0709a65 | 1489 | } |
07db2183 RR |
1490 | |
1491 | /* check if TID is in operational state */ | |
07346f81 | 1492 | spin_lock_bh(&sta->lock); |
cee24a3e | 1493 | if (sta->ampdu_mlme.tid_state_rx[tid] |
07db2183 | 1494 | != HT_AGG_STATE_OPERATIONAL) { |
07346f81 | 1495 | spin_unlock_bh(&sta->lock); |
d0709a65 | 1496 | rcu_read_unlock(); |
07db2183 RR |
1497 | return; |
1498 | } | |
cee24a3e | 1499 | sta->ampdu_mlme.tid_state_rx[tid] = |
07db2183 RR |
1500 | HT_AGG_STATE_REQ_STOP_BA_MSK | |
1501 | (initiator << HT_AGG_STATE_INITIATOR_SHIFT); | |
07346f81 | 1502 | spin_unlock_bh(&sta->lock); |
07db2183 RR |
1503 | |
1504 | /* stop HW Rx aggregation. ampdu_action existence | |
1505 | * already verified in session init so we add the BUG_ON */ | |
1506 | BUG_ON(!local->ops->ampdu_action); | |
1507 | ||
513a1025 RR |
1508 | #ifdef CONFIG_MAC80211_HT_DEBUG |
1509 | printk(KERN_DEBUG "Rx BA session stop requested for %s tid %u\n", | |
1510 | print_mac(mac, ra), tid); | |
1511 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1512 | ||
07db2183 | 1513 | ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_STOP, |
0df3ef45 | 1514 | ra, tid, NULL); |
07db2183 RR |
1515 | if (ret) |
1516 | printk(KERN_DEBUG "HW problem - can not stop rx " | |
1517 | "aggergation for tid %d\n", tid); | |
1518 | ||
1519 | /* shutdown timer has not expired */ | |
1520 | if (initiator != WLAN_BACK_TIMER) | |
cee24a3e | 1521 | del_timer_sync(&sta->ampdu_mlme.tid_rx[tid]->session_timer); |
07db2183 RR |
1522 | |
1523 | /* check if this is a self generated aggregation halt */ | |
1524 | if (initiator == WLAN_BACK_RECIPIENT || initiator == WLAN_BACK_TIMER) | |
1525 | ieee80211_send_delba(dev, ra, tid, 0, reason); | |
1526 | ||
1527 | /* free the reordering buffer */ | |
cee24a3e RR |
1528 | for (i = 0; i < sta->ampdu_mlme.tid_rx[tid]->buf_size; i++) { |
1529 | if (sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i]) { | |
b580781e | 1530 | /* release the reordered frames */ |
cee24a3e RR |
1531 | dev_kfree_skb(sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i]); |
1532 | sta->ampdu_mlme.tid_rx[tid]->stored_mpdu_num--; | |
1533 | sta->ampdu_mlme.tid_rx[tid]->reorder_buf[i] = NULL; | |
b580781e RR |
1534 | } |
1535 | } | |
cee24a3e RR |
1536 | /* free resources */ |
1537 | kfree(sta->ampdu_mlme.tid_rx[tid]->reorder_buf); | |
1538 | kfree(sta->ampdu_mlme.tid_rx[tid]); | |
1539 | sta->ampdu_mlme.tid_rx[tid] = NULL; | |
1540 | sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_IDLE; | |
07db2183 | 1541 | |
d0709a65 | 1542 | rcu_read_unlock(); |
07db2183 RR |
1543 | } |
1544 | ||
eadc8d9e | 1545 | |
688b88a4 RR |
1546 | static void ieee80211_sta_process_delba(struct net_device *dev, |
1547 | struct ieee80211_mgmt *mgmt, size_t len) | |
1548 | { | |
1549 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1550 | struct sta_info *sta; | |
1551 | u16 tid, params; | |
1552 | u16 initiator; | |
1553 | DECLARE_MAC_BUF(mac); | |
1554 | ||
d0709a65 JB |
1555 | rcu_read_lock(); |
1556 | ||
688b88a4 | 1557 | sta = sta_info_get(local, mgmt->sa); |
d0709a65 JB |
1558 | if (!sta) { |
1559 | rcu_read_unlock(); | |
688b88a4 | 1560 | return; |
d0709a65 | 1561 | } |
688b88a4 RR |
1562 | |
1563 | params = le16_to_cpu(mgmt->u.action.u.delba.params); | |
1564 | tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12; | |
1565 | initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11; | |
1566 | ||
1567 | #ifdef CONFIG_MAC80211_HT_DEBUG | |
1568 | if (net_ratelimit()) | |
d92684e6 RR |
1569 | printk(KERN_DEBUG "delba from %s (%s) tid %d reason code %d\n", |
1570 | print_mac(mac, mgmt->sa), | |
2e354ed7 | 1571 | initiator ? "initiator" : "recipient", tid, |
688b88a4 RR |
1572 | mgmt->u.action.u.delba.reason_code); |
1573 | #endif /* CONFIG_MAC80211_HT_DEBUG */ | |
1574 | ||
1575 | if (initiator == WLAN_BACK_INITIATOR) | |
1576 | ieee80211_sta_stop_rx_ba_session(dev, sta->addr, tid, | |
1577 | WLAN_BACK_INITIATOR, 0); | |
d92684e6 | 1578 | else { /* WLAN_BACK_RECIPIENT */ |
07346f81 | 1579 | spin_lock_bh(&sta->lock); |
cee24a3e | 1580 | sta->ampdu_mlme.tid_state_tx[tid] = |
d92684e6 | 1581 | HT_AGG_STATE_OPERATIONAL; |
07346f81 | 1582 | spin_unlock_bh(&sta->lock); |
d92684e6 RR |
1583 | ieee80211_stop_tx_ba_session(&local->hw, sta->addr, tid, |
1584 | WLAN_BACK_RECIPIENT); | |
1585 | } | |
d0709a65 | 1586 | rcu_read_unlock(); |
688b88a4 RR |
1587 | } |
1588 | ||
eadc8d9e RR |
1589 | /* |
1590 | * After sending add Block Ack request we activated a timer until | |
1591 | * add Block Ack response will arrive from the recipient. | |
1592 | * If this timer expires sta_addba_resp_timer_expired will be executed. | |
1593 | */ | |
1594 | void sta_addba_resp_timer_expired(unsigned long data) | |
1595 | { | |
1596 | /* not an elegant detour, but there is no choice as the timer passes | |
1597 | * only one argument, and both sta_info and TID are needed, so init | |
73651ee6 | 1598 | * flow in sta_info_create gives the TID as data, while the timer_to_id |
eadc8d9e RR |
1599 | * array gives the sta through container_of */ |
1600 | u16 tid = *(int *)data; | |
1601 | struct sta_info *temp_sta = container_of((void *)data, | |
1602 | struct sta_info, timer_to_tid[tid]); | |
1603 | ||
1604 | struct ieee80211_local *local = temp_sta->local; | |
1605 | struct ieee80211_hw *hw = &local->hw; | |
1606 | struct sta_info *sta; | |
1607 | u8 *state; | |
1608 | ||
d0709a65 JB |
1609 | rcu_read_lock(); |
1610 | ||
eadc8d9e | 1611 | sta = sta_info_get(local, temp_sta->addr); |
d0709a65 JB |
1612 | if (!sta) { |
1613 | rcu_read_unlock(); | |
eadc8d9e | 1614 | return; |
d0709a65 | 1615 | } |
eadc8d9e | 1616 | |
cee24a3e | 1617 | state = &sta->ampdu_mlme.tid_state_tx[tid]; |
eadc8d9e | 1618 | /* check if the TID waits for addBA response */ |
07346f81 | 1619 | spin_lock_bh(&sta->lock); |
eadc8d9e | 1620 | if (!(*state & HT_ADDBA_REQUESTED_MSK)) { |
07346f81 | 1621 | spin_unlock_bh(&sta->lock); |
eadc8d9e RR |
1622 | *state = HT_AGG_STATE_IDLE; |
1623 | printk(KERN_DEBUG "timer expired on tid %d but we are not " | |
1624 | "expecting addBA response there", tid); | |
1625 | goto timer_expired_exit; | |
1626 | } | |
1627 | ||
1628 | printk(KERN_DEBUG "addBA response timer expired on tid %d\n", tid); | |
1629 | ||
1630 | /* go through the state check in stop_BA_session */ | |
1631 | *state = HT_AGG_STATE_OPERATIONAL; | |
07346f81 | 1632 | spin_unlock_bh(&sta->lock); |
eadc8d9e RR |
1633 | ieee80211_stop_tx_ba_session(hw, temp_sta->addr, tid, |
1634 | WLAN_BACK_INITIATOR); | |
1635 | ||
1636 | timer_expired_exit: | |
d0709a65 | 1637 | rcu_read_unlock(); |
eadc8d9e RR |
1638 | } |
1639 | ||
07db2183 | 1640 | /* |
7b9d44cd RR |
1641 | * After accepting the AddBA Request we activated a timer, |
1642 | * resetting it after each frame that arrives from the originator. | |
07db2183 RR |
1643 | * if this timer expires ieee80211_sta_stop_rx_ba_session will be executed. |
1644 | */ | |
712590de | 1645 | static void sta_rx_agg_session_timer_expired(unsigned long data) |
07db2183 RR |
1646 | { |
1647 | /* not an elegant detour, but there is no choice as the timer passes | |
1648 | * only one argument, and verious sta_info are needed here, so init | |
73651ee6 | 1649 | * flow in sta_info_create gives the TID as data, while the timer_to_id |
07db2183 RR |
1650 | * array gives the sta through container_of */ |
1651 | u8 *ptid = (u8 *)data; | |
1652 | u8 *timer_to_id = ptid - *ptid; | |
1653 | struct sta_info *sta = container_of(timer_to_id, struct sta_info, | |
1654 | timer_to_tid[0]); | |
1655 | ||
1656 | printk(KERN_DEBUG "rx session timer expired on tid %d\n", (u16)*ptid); | |
d0709a65 JB |
1657 | ieee80211_sta_stop_rx_ba_session(sta->sdata->dev, sta->addr, |
1658 | (u16)*ptid, WLAN_BACK_TIMER, | |
07db2183 RR |
1659 | WLAN_REASON_QSTA_TIMEOUT); |
1660 | } | |
1661 | ||
85249e5f RR |
1662 | void ieee80211_sta_tear_down_BA_sessions(struct net_device *dev, u8 *addr) |
1663 | { | |
1664 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1665 | int i; | |
1666 | ||
1667 | for (i = 0; i < STA_TID_NUM; i++) { | |
1668 | ieee80211_stop_tx_ba_session(&local->hw, addr, i, | |
1669 | WLAN_BACK_INITIATOR); | |
1670 | ieee80211_sta_stop_rx_ba_session(dev, addr, i, | |
1671 | WLAN_BACK_RECIPIENT, | |
1672 | WLAN_REASON_QSTA_LEAVE_QBSS); | |
1673 | } | |
1674 | } | |
07db2183 | 1675 | |
f0706e82 JB |
1676 | static void ieee80211_rx_mgmt_auth(struct net_device *dev, |
1677 | struct ieee80211_if_sta *ifsta, | |
1678 | struct ieee80211_mgmt *mgmt, | |
1679 | size_t len) | |
1680 | { | |
1681 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1682 | u16 auth_alg, auth_transaction, status_code; | |
0795af57 | 1683 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
1684 | |
1685 | if (ifsta->state != IEEE80211_AUTHENTICATE && | |
51fb61e7 | 1686 | sdata->vif.type != IEEE80211_IF_TYPE_IBSS) { |
f0706e82 | 1687 | printk(KERN_DEBUG "%s: authentication frame received from " |
0795af57 JP |
1688 | "%s, but not in authenticate state - ignored\n", |
1689 | dev->name, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1690 | return; |
1691 | } | |
1692 | ||
1693 | if (len < 24 + 6) { | |
1694 | printk(KERN_DEBUG "%s: too short (%zd) authentication frame " | |
0795af57 JP |
1695 | "received from %s - ignored\n", |
1696 | dev->name, len, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1697 | return; |
1698 | } | |
1699 | ||
51fb61e7 | 1700 | if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS && |
f0706e82 JB |
1701 | memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) { |
1702 | printk(KERN_DEBUG "%s: authentication frame received from " | |
0795af57 JP |
1703 | "unknown AP (SA=%s BSSID=%s) - " |
1704 | "ignored\n", dev->name, print_mac(mac, mgmt->sa), | |
1705 | print_mac(mac, mgmt->bssid)); | |
f0706e82 JB |
1706 | return; |
1707 | } | |
1708 | ||
51fb61e7 | 1709 | if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS && |
f0706e82 JB |
1710 | memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0) { |
1711 | printk(KERN_DEBUG "%s: authentication frame received from " | |
0795af57 JP |
1712 | "unknown BSSID (SA=%s BSSID=%s) - " |
1713 | "ignored\n", dev->name, print_mac(mac, mgmt->sa), | |
1714 | print_mac(mac, mgmt->bssid)); | |
f0706e82 JB |
1715 | return; |
1716 | } | |
1717 | ||
1718 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
1719 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
1720 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
1721 | ||
0795af57 | 1722 | printk(KERN_DEBUG "%s: RX authentication from %s (alg=%d " |
f0706e82 | 1723 | "transaction=%d status=%d)\n", |
0795af57 | 1724 | dev->name, print_mac(mac, mgmt->sa), auth_alg, |
f0706e82 JB |
1725 | auth_transaction, status_code); |
1726 | ||
51fb61e7 | 1727 | if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) { |
f0706e82 JB |
1728 | /* IEEE 802.11 standard does not require authentication in IBSS |
1729 | * networks and most implementations do not seem to use it. | |
1730 | * However, try to reply to authentication attempts if someone | |
1731 | * has actually implemented this. | |
1732 | * TODO: Could implement shared key authentication. */ | |
1733 | if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1) { | |
1734 | printk(KERN_DEBUG "%s: unexpected IBSS authentication " | |
1735 | "frame (alg=%d transaction=%d)\n", | |
1736 | dev->name, auth_alg, auth_transaction); | |
1737 | return; | |
1738 | } | |
1739 | ieee80211_send_auth(dev, ifsta, 2, NULL, 0, 0); | |
1740 | } | |
1741 | ||
1742 | if (auth_alg != ifsta->auth_alg || | |
1743 | auth_transaction != ifsta->auth_transaction) { | |
1744 | printk(KERN_DEBUG "%s: unexpected authentication frame " | |
1745 | "(alg=%d transaction=%d)\n", | |
1746 | dev->name, auth_alg, auth_transaction); | |
1747 | return; | |
1748 | } | |
1749 | ||
1750 | if (status_code != WLAN_STATUS_SUCCESS) { | |
1751 | printk(KERN_DEBUG "%s: AP denied authentication (auth_alg=%d " | |
1752 | "code=%d)\n", dev->name, ifsta->auth_alg, status_code); | |
1753 | if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) { | |
1754 | u8 algs[3]; | |
1755 | const int num_algs = ARRAY_SIZE(algs); | |
1756 | int i, pos; | |
1757 | algs[0] = algs[1] = algs[2] = 0xff; | |
1758 | if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN) | |
1759 | algs[0] = WLAN_AUTH_OPEN; | |
1760 | if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY) | |
1761 | algs[1] = WLAN_AUTH_SHARED_KEY; | |
1762 | if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP) | |
1763 | algs[2] = WLAN_AUTH_LEAP; | |
1764 | if (ifsta->auth_alg == WLAN_AUTH_OPEN) | |
1765 | pos = 0; | |
1766 | else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY) | |
1767 | pos = 1; | |
1768 | else | |
1769 | pos = 2; | |
1770 | for (i = 0; i < num_algs; i++) { | |
1771 | pos++; | |
1772 | if (pos >= num_algs) | |
1773 | pos = 0; | |
1774 | if (algs[pos] == ifsta->auth_alg || | |
1775 | algs[pos] == 0xff) | |
1776 | continue; | |
1777 | if (algs[pos] == WLAN_AUTH_SHARED_KEY && | |
1778 | !ieee80211_sta_wep_configured(dev)) | |
1779 | continue; | |
1780 | ifsta->auth_alg = algs[pos]; | |
1781 | printk(KERN_DEBUG "%s: set auth_alg=%d for " | |
1782 | "next try\n", | |
1783 | dev->name, ifsta->auth_alg); | |
1784 | break; | |
1785 | } | |
1786 | } | |
1787 | return; | |
1788 | } | |
1789 | ||
1790 | switch (ifsta->auth_alg) { | |
1791 | case WLAN_AUTH_OPEN: | |
1792 | case WLAN_AUTH_LEAP: | |
1793 | ieee80211_auth_completed(dev, ifsta); | |
1794 | break; | |
1795 | case WLAN_AUTH_SHARED_KEY: | |
1796 | if (ifsta->auth_transaction == 4) | |
1797 | ieee80211_auth_completed(dev, ifsta); | |
1798 | else | |
1799 | ieee80211_auth_challenge(dev, ifsta, mgmt, len); | |
1800 | break; | |
1801 | } | |
1802 | } | |
1803 | ||
1804 | ||
1805 | static void ieee80211_rx_mgmt_deauth(struct net_device *dev, | |
1806 | struct ieee80211_if_sta *ifsta, | |
1807 | struct ieee80211_mgmt *mgmt, | |
1808 | size_t len) | |
1809 | { | |
1810 | u16 reason_code; | |
0795af57 | 1811 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
1812 | |
1813 | if (len < 24 + 2) { | |
1814 | printk(KERN_DEBUG "%s: too short (%zd) deauthentication frame " | |
0795af57 JP |
1815 | "received from %s - ignored\n", |
1816 | dev->name, len, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1817 | return; |
1818 | } | |
1819 | ||
1820 | if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) { | |
1821 | printk(KERN_DEBUG "%s: deauthentication frame received from " | |
0795af57 JP |
1822 | "unknown AP (SA=%s BSSID=%s) - " |
1823 | "ignored\n", dev->name, print_mac(mac, mgmt->sa), | |
1824 | print_mac(mac, mgmt->bssid)); | |
f0706e82 JB |
1825 | return; |
1826 | } | |
1827 | ||
1828 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
1829 | ||
0795af57 | 1830 | printk(KERN_DEBUG "%s: RX deauthentication from %s" |
f0706e82 | 1831 | " (reason=%d)\n", |
0795af57 | 1832 | dev->name, print_mac(mac, mgmt->sa), reason_code); |
f0706e82 | 1833 | |
988c0f72 | 1834 | if (ifsta->flags & IEEE80211_STA_AUTHENTICATED) |
f0706e82 | 1835 | printk(KERN_DEBUG "%s: deauthenticated\n", dev->name); |
f0706e82 JB |
1836 | |
1837 | if (ifsta->state == IEEE80211_AUTHENTICATE || | |
1838 | ifsta->state == IEEE80211_ASSOCIATE || | |
1839 | ifsta->state == IEEE80211_ASSOCIATED) { | |
1840 | ifsta->state = IEEE80211_AUTHENTICATE; | |
1841 | mod_timer(&ifsta->timer, jiffies + | |
1842 | IEEE80211_RETRY_AUTH_INTERVAL); | |
1843 | } | |
1844 | ||
1845 | ieee80211_set_disassoc(dev, ifsta, 1); | |
d6f2da5b | 1846 | ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED; |
f0706e82 JB |
1847 | } |
1848 | ||
1849 | ||
1850 | static void ieee80211_rx_mgmt_disassoc(struct net_device *dev, | |
1851 | struct ieee80211_if_sta *ifsta, | |
1852 | struct ieee80211_mgmt *mgmt, | |
1853 | size_t len) | |
1854 | { | |
1855 | u16 reason_code; | |
0795af57 | 1856 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
1857 | |
1858 | if (len < 24 + 2) { | |
1859 | printk(KERN_DEBUG "%s: too short (%zd) disassociation frame " | |
0795af57 JP |
1860 | "received from %s - ignored\n", |
1861 | dev->name, len, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1862 | return; |
1863 | } | |
1864 | ||
1865 | if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) { | |
1866 | printk(KERN_DEBUG "%s: disassociation frame received from " | |
0795af57 JP |
1867 | "unknown AP (SA=%s BSSID=%s) - " |
1868 | "ignored\n", dev->name, print_mac(mac, mgmt->sa), | |
1869 | print_mac(mac, mgmt->bssid)); | |
f0706e82 JB |
1870 | return; |
1871 | } | |
1872 | ||
1873 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); | |
1874 | ||
0795af57 | 1875 | printk(KERN_DEBUG "%s: RX disassociation from %s" |
f0706e82 | 1876 | " (reason=%d)\n", |
0795af57 | 1877 | dev->name, print_mac(mac, mgmt->sa), reason_code); |
f0706e82 | 1878 | |
d6f2da5b | 1879 | if (ifsta->flags & IEEE80211_STA_ASSOCIATED) |
f0706e82 JB |
1880 | printk(KERN_DEBUG "%s: disassociated\n", dev->name); |
1881 | ||
1882 | if (ifsta->state == IEEE80211_ASSOCIATED) { | |
1883 | ifsta->state = IEEE80211_ASSOCIATE; | |
1884 | mod_timer(&ifsta->timer, jiffies + | |
1885 | IEEE80211_RETRY_AUTH_INTERVAL); | |
1886 | } | |
1887 | ||
1888 | ieee80211_set_disassoc(dev, ifsta, 0); | |
1889 | } | |
1890 | ||
1891 | ||
471b3efd | 1892 | static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1893 | struct ieee80211_if_sta *ifsta, |
1894 | struct ieee80211_mgmt *mgmt, | |
1895 | size_t len, | |
1896 | int reassoc) | |
1897 | { | |
471b3efd JB |
1898 | struct ieee80211_local *local = sdata->local; |
1899 | struct net_device *dev = sdata->dev; | |
8318d78a | 1900 | struct ieee80211_supported_band *sband; |
f0706e82 | 1901 | struct sta_info *sta; |
8318d78a | 1902 | u64 rates, basic_rates; |
f0706e82 JB |
1903 | u16 capab_info, status_code, aid; |
1904 | struct ieee802_11_elems elems; | |
471b3efd | 1905 | struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf; |
f0706e82 JB |
1906 | u8 *pos; |
1907 | int i, j; | |
0795af57 | 1908 | DECLARE_MAC_BUF(mac); |
8318d78a | 1909 | bool have_higher_than_11mbit = false; |
f0706e82 JB |
1910 | |
1911 | /* AssocResp and ReassocResp have identical structure, so process both | |
1912 | * of them in this function. */ | |
1913 | ||
1914 | if (ifsta->state != IEEE80211_ASSOCIATE) { | |
1915 | printk(KERN_DEBUG "%s: association frame received from " | |
0795af57 JP |
1916 | "%s, but not in associate state - ignored\n", |
1917 | dev->name, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1918 | return; |
1919 | } | |
1920 | ||
1921 | if (len < 24 + 6) { | |
1922 | printk(KERN_DEBUG "%s: too short (%zd) association frame " | |
0795af57 JP |
1923 | "received from %s - ignored\n", |
1924 | dev->name, len, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
1925 | return; |
1926 | } | |
1927 | ||
1928 | if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) { | |
1929 | printk(KERN_DEBUG "%s: association frame received from " | |
0795af57 JP |
1930 | "unknown AP (SA=%s BSSID=%s) - " |
1931 | "ignored\n", dev->name, print_mac(mac, mgmt->sa), | |
1932 | print_mac(mac, mgmt->bssid)); | |
f0706e82 JB |
1933 | return; |
1934 | } | |
1935 | ||
1936 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
1937 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
1938 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
f0706e82 | 1939 | |
0795af57 | 1940 | printk(KERN_DEBUG "%s: RX %sssocResp from %s (capab=0x%x " |
f0706e82 | 1941 | "status=%d aid=%d)\n", |
0795af57 | 1942 | dev->name, reassoc ? "Rea" : "A", print_mac(mac, mgmt->sa), |
ddd68587 | 1943 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
f0706e82 JB |
1944 | |
1945 | if (status_code != WLAN_STATUS_SUCCESS) { | |
1946 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", | |
1947 | dev->name, status_code); | |
8a69aa93 DD |
1948 | /* if this was a reassociation, ensure we try a "full" |
1949 | * association next time. This works around some broken APs | |
1950 | * which do not correctly reject reassociation requests. */ | |
d6f2da5b | 1951 | ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET; |
f0706e82 JB |
1952 | return; |
1953 | } | |
1954 | ||
1dd84aa2 JB |
1955 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1956 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " | |
1957 | "set\n", dev->name, aid); | |
1958 | aid &= ~(BIT(15) | BIT(14)); | |
1959 | ||
f0706e82 | 1960 | pos = mgmt->u.assoc_resp.variable; |
67a4cce4 | 1961 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f0706e82 JB |
1962 | |
1963 | if (!elems.supp_rates) { | |
1964 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", | |
1965 | dev->name); | |
1966 | return; | |
1967 | } | |
1968 | ||
1969 | printk(KERN_DEBUG "%s: associated\n", dev->name); | |
1970 | ifsta->aid = aid; | |
1971 | ifsta->ap_capab = capab_info; | |
1972 | ||
1973 | kfree(ifsta->assocresp_ies); | |
1974 | ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt); | |
0ec0b7ac | 1975 | ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL); |
f0706e82 JB |
1976 | if (ifsta->assocresp_ies) |
1977 | memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len); | |
1978 | ||
d0709a65 JB |
1979 | rcu_read_lock(); |
1980 | ||
f0706e82 JB |
1981 | /* Add STA entry for the AP */ |
1982 | sta = sta_info_get(local, ifsta->bssid); | |
1983 | if (!sta) { | |
1984 | struct ieee80211_sta_bss *bss; | |
73651ee6 | 1985 | int err; |
d0709a65 | 1986 | |
73651ee6 JB |
1987 | sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC); |
1988 | if (!sta) { | |
1989 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" | |
1990 | " the AP\n", dev->name); | |
d0709a65 | 1991 | rcu_read_unlock(); |
f0706e82 JB |
1992 | return; |
1993 | } | |
65c107ab | 1994 | bss = ieee80211_rx_bss_get(dev, ifsta->bssid, |
8318d78a | 1995 | local->hw.conf.channel->center_freq, |
cffdd30d | 1996 | ifsta->ssid, ifsta->ssid_len); |
f0706e82 | 1997 | if (bss) { |
f0706e82 | 1998 | sta->last_signal = bss->signal; |
566bfe5a | 1999 | sta->last_qual = bss->qual; |
f0706e82 JB |
2000 | sta->last_noise = bss->noise; |
2001 | ieee80211_rx_bss_put(dev, bss); | |
2002 | } | |
73651ee6 JB |
2003 | |
2004 | err = sta_info_insert(sta); | |
2005 | if (err) { | |
2006 | printk(KERN_DEBUG "%s: failed to insert STA entry for" | |
2007 | " the AP (error %d)\n", dev->name, err); | |
73651ee6 JB |
2008 | rcu_read_unlock(); |
2009 | return; | |
2010 | } | |
f0706e82 JB |
2011 | } |
2012 | ||
73651ee6 JB |
2013 | /* |
2014 | * FIXME: Do we really need to update the sta_info's information here? | |
2015 | * We already know about the AP (we found it in our list) so it | |
2016 | * should already be filled with the right info, no? | |
2017 | * As is stands, all this is racy because typically we assume | |
2018 | * the information that is filled in here (except flags) doesn't | |
2019 | * change while a STA structure is alive. As such, it should move | |
2020 | * to between the sta_info_alloc() and sta_info_insert() above. | |
2021 | */ | |
2022 | ||
07346f81 JB |
2023 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP | |
2024 | WLAN_STA_AUTHORIZED); | |
f0706e82 JB |
2025 | |
2026 | rates = 0; | |
8318d78a JB |
2027 | basic_rates = 0; |
2028 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
2029 | ||
f0706e82 JB |
2030 | for (i = 0; i < elems.supp_rates_len; i++) { |
2031 | int rate = (elems.supp_rates[i] & 0x7f) * 5; | |
8318d78a JB |
2032 | |
2033 | if (rate > 110) | |
2034 | have_higher_than_11mbit = true; | |
2035 | ||
2036 | for (j = 0; j < sband->n_bitrates; j++) { | |
2037 | if (sband->bitrates[j].bitrate == rate) | |
f0706e82 | 2038 | rates |= BIT(j); |
8318d78a JB |
2039 | if (elems.supp_rates[i] & 0x80) |
2040 | basic_rates |= BIT(j); | |
2041 | } | |
f0706e82 | 2042 | } |
8318d78a | 2043 | |
f0706e82 JB |
2044 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
2045 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; | |
8318d78a JB |
2046 | |
2047 | if (rate > 110) | |
2048 | have_higher_than_11mbit = true; | |
2049 | ||
2050 | for (j = 0; j < sband->n_bitrates; j++) { | |
2051 | if (sband->bitrates[j].bitrate == rate) | |
f0706e82 | 2052 | rates |= BIT(j); |
8318d78a JB |
2053 | if (elems.ext_supp_rates[i] & 0x80) |
2054 | basic_rates |= BIT(j); | |
2055 | } | |
f0706e82 | 2056 | } |
8318d78a JB |
2057 | |
2058 | sta->supp_rates[local->hw.conf.channel->band] = rates; | |
2059 | sdata->basic_rates = basic_rates; | |
2060 | ||
2061 | /* cf. IEEE 802.11 9.2.12 */ | |
2062 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
2063 | have_higher_than_11mbit) | |
2064 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
2065 | else | |
2066 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
f0706e82 | 2067 | |
3434fbd3 JB |
2068 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
2069 | (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) { | |
d3c990fb | 2070 | struct ieee80211_ht_bss_info bss_info; |
d3c990fb RR |
2071 | ieee80211_ht_cap_ie_to_ht_info( |
2072 | (struct ieee80211_ht_cap *) | |
2073 | elems.ht_cap_elem, &sta->ht_info); | |
2074 | ieee80211_ht_addt_info_ie_to_ht_bss_info( | |
2075 | (struct ieee80211_ht_addt_info *) | |
2076 | elems.ht_info_elem, &bss_info); | |
38668c05 | 2077 | ieee80211_handle_ht(local, 1, &sta->ht_info, &bss_info); |
d3c990fb RR |
2078 | } |
2079 | ||
f0706e82 JB |
2080 | rate_control_rate_init(sta, local); |
2081 | ||
3434fbd3 | 2082 | if (elems.wmm_param) { |
07346f81 | 2083 | set_sta_flags(sta, WLAN_STA_WME); |
e5f98f2d | 2084 | rcu_read_unlock(); |
f0706e82 JB |
2085 | ieee80211_sta_wmm_params(dev, ifsta, elems.wmm_param, |
2086 | elems.wmm_param_len); | |
e5f98f2d JB |
2087 | } else |
2088 | rcu_read_unlock(); | |
f0706e82 | 2089 | |
21c0cbe7 TW |
2090 | /* set AID and assoc capability, |
2091 | * ieee80211_set_associated() will tell the driver */ | |
8318d78a | 2092 | bss_conf->aid = aid; |
21c0cbe7 | 2093 | bss_conf->assoc_capability = capab_info; |
8318d78a | 2094 | ieee80211_set_associated(dev, ifsta, 1); |
f0706e82 | 2095 | |
f0706e82 JB |
2096 | ieee80211_associated(dev, ifsta); |
2097 | } | |
2098 | ||
2099 | ||
2100 | /* Caller must hold local->sta_bss_lock */ | |
2101 | static void __ieee80211_rx_bss_hash_add(struct net_device *dev, | |
2102 | struct ieee80211_sta_bss *bss) | |
2103 | { | |
2104 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
f709fc69 | 2105 | u8 hash_idx; |
902acc78 JB |
2106 | |
2107 | if (bss_mesh_cfg(bss)) | |
2108 | hash_idx = mesh_id_hash(bss_mesh_id(bss), | |
2109 | bss_mesh_id_len(bss)); | |
f709fc69 | 2110 | else |
f709fc69 | 2111 | hash_idx = STA_HASH(bss->bssid); |
902acc78 | 2112 | |
f709fc69 LCC |
2113 | bss->hnext = local->sta_bss_hash[hash_idx]; |
2114 | local->sta_bss_hash[hash_idx] = bss; | |
f0706e82 JB |
2115 | } |
2116 | ||
2117 | ||
2118 | /* Caller must hold local->sta_bss_lock */ | |
2119 | static void __ieee80211_rx_bss_hash_del(struct net_device *dev, | |
2120 | struct ieee80211_sta_bss *bss) | |
2121 | { | |
2122 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2123 | struct ieee80211_sta_bss *b, *prev = NULL; | |
2124 | b = local->sta_bss_hash[STA_HASH(bss->bssid)]; | |
2125 | while (b) { | |
2126 | if (b == bss) { | |
2127 | if (!prev) | |
2128 | local->sta_bss_hash[STA_HASH(bss->bssid)] = | |
2129 | bss->hnext; | |
2130 | else | |
2131 | prev->hnext = bss->hnext; | |
2132 | break; | |
2133 | } | |
2134 | prev = b; | |
2135 | b = b->hnext; | |
2136 | } | |
2137 | } | |
2138 | ||
2139 | ||
2140 | static struct ieee80211_sta_bss * | |
8318d78a | 2141 | ieee80211_rx_bss_add(struct net_device *dev, u8 *bssid, int freq, |
cffdd30d | 2142 | u8 *ssid, u8 ssid_len) |
f0706e82 JB |
2143 | { |
2144 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2145 | struct ieee80211_sta_bss *bss; | |
2146 | ||
dd00cc48 | 2147 | bss = kzalloc(sizeof(*bss), GFP_ATOMIC); |
f0706e82 JB |
2148 | if (!bss) |
2149 | return NULL; | |
f0706e82 JB |
2150 | atomic_inc(&bss->users); |
2151 | atomic_inc(&bss->users); | |
2152 | memcpy(bss->bssid, bssid, ETH_ALEN); | |
8318d78a | 2153 | bss->freq = freq; |
cffdd30d JL |
2154 | if (ssid && ssid_len <= IEEE80211_MAX_SSID_LEN) { |
2155 | memcpy(bss->ssid, ssid, ssid_len); | |
2156 | bss->ssid_len = ssid_len; | |
2157 | } | |
f0706e82 JB |
2158 | |
2159 | spin_lock_bh(&local->sta_bss_lock); | |
2160 | /* TODO: order by RSSI? */ | |
2161 | list_add_tail(&bss->list, &local->sta_bss_list); | |
2162 | __ieee80211_rx_bss_hash_add(dev, bss); | |
2163 | spin_unlock_bh(&local->sta_bss_lock); | |
2164 | return bss; | |
2165 | } | |
2166 | ||
f0706e82 | 2167 | static struct ieee80211_sta_bss * |
8318d78a | 2168 | ieee80211_rx_bss_get(struct net_device *dev, u8 *bssid, int freq, |
cffdd30d | 2169 | u8 *ssid, u8 ssid_len) |
f0706e82 JB |
2170 | { |
2171 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2172 | struct ieee80211_sta_bss *bss; | |
2173 | ||
2174 | spin_lock_bh(&local->sta_bss_lock); | |
2175 | bss = local->sta_bss_hash[STA_HASH(bssid)]; | |
2176 | while (bss) { | |
902acc78 JB |
2177 | if (!bss_mesh_cfg(bss) && |
2178 | !memcmp(bss->bssid, bssid, ETH_ALEN) && | |
8318d78a | 2179 | bss->freq == freq && |
cffdd30d JL |
2180 | bss->ssid_len == ssid_len && |
2181 | (ssid_len == 0 || !memcmp(bss->ssid, ssid, ssid_len))) { | |
f0706e82 JB |
2182 | atomic_inc(&bss->users); |
2183 | break; | |
2184 | } | |
2185 | bss = bss->hnext; | |
2186 | } | |
2187 | spin_unlock_bh(&local->sta_bss_lock); | |
2188 | return bss; | |
2189 | } | |
2190 | ||
f709fc69 LCC |
2191 | #ifdef CONFIG_MAC80211_MESH |
2192 | static struct ieee80211_sta_bss * | |
2193 | ieee80211_rx_mesh_bss_get(struct net_device *dev, u8 *mesh_id, int mesh_id_len, | |
2194 | u8 *mesh_cfg, int freq) | |
2195 | { | |
2196 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2197 | struct ieee80211_sta_bss *bss; | |
2198 | ||
2199 | spin_lock_bh(&local->sta_bss_lock); | |
2200 | bss = local->sta_bss_hash[mesh_id_hash(mesh_id, mesh_id_len)]; | |
2201 | while (bss) { | |
902acc78 JB |
2202 | if (bss_mesh_cfg(bss) && |
2203 | !memcmp(bss_mesh_cfg(bss), mesh_cfg, MESH_CFG_CMP_LEN) && | |
f709fc69 LCC |
2204 | bss->freq == freq && |
2205 | mesh_id_len == bss->mesh_id_len && | |
2206 | (mesh_id_len == 0 || !memcmp(bss->mesh_id, mesh_id, | |
2207 | mesh_id_len))) { | |
2208 | atomic_inc(&bss->users); | |
2209 | break; | |
2210 | } | |
2211 | bss = bss->hnext; | |
2212 | } | |
2213 | spin_unlock_bh(&local->sta_bss_lock); | |
2214 | return bss; | |
2215 | } | |
2216 | ||
2217 | static struct ieee80211_sta_bss * | |
2218 | ieee80211_rx_mesh_bss_add(struct net_device *dev, u8 *mesh_id, int mesh_id_len, | |
05e5e883 | 2219 | u8 *mesh_cfg, int mesh_config_len, int freq) |
f709fc69 LCC |
2220 | { |
2221 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2222 | struct ieee80211_sta_bss *bss; | |
2223 | ||
05e5e883 LCC |
2224 | if (mesh_config_len != MESH_CFG_LEN) |
2225 | return NULL; | |
2226 | ||
f709fc69 LCC |
2227 | bss = kzalloc(sizeof(*bss), GFP_ATOMIC); |
2228 | if (!bss) | |
2229 | return NULL; | |
2230 | ||
24736701 | 2231 | bss->mesh_cfg = kmalloc(MESH_CFG_CMP_LEN, GFP_ATOMIC); |
f709fc69 LCC |
2232 | if (!bss->mesh_cfg) { |
2233 | kfree(bss); | |
2234 | return NULL; | |
2235 | } | |
2236 | ||
2237 | if (mesh_id_len && mesh_id_len <= IEEE80211_MAX_MESH_ID_LEN) { | |
2238 | bss->mesh_id = kmalloc(mesh_id_len, GFP_ATOMIC); | |
2239 | if (!bss->mesh_id) { | |
2240 | kfree(bss->mesh_cfg); | |
2241 | kfree(bss); | |
2242 | return NULL; | |
2243 | } | |
2244 | memcpy(bss->mesh_id, mesh_id, mesh_id_len); | |
2245 | } | |
2246 | ||
2247 | atomic_inc(&bss->users); | |
2248 | atomic_inc(&bss->users); | |
24736701 | 2249 | memcpy(bss->mesh_cfg, mesh_cfg, MESH_CFG_CMP_LEN); |
f709fc69 LCC |
2250 | bss->mesh_id_len = mesh_id_len; |
2251 | bss->freq = freq; | |
2252 | spin_lock_bh(&local->sta_bss_lock); | |
2253 | /* TODO: order by RSSI? */ | |
2254 | list_add_tail(&bss->list, &local->sta_bss_list); | |
2255 | __ieee80211_rx_bss_hash_add(dev, bss); | |
2256 | spin_unlock_bh(&local->sta_bss_lock); | |
2257 | return bss; | |
2258 | } | |
2259 | #endif | |
f0706e82 JB |
2260 | |
2261 | static void ieee80211_rx_bss_free(struct ieee80211_sta_bss *bss) | |
2262 | { | |
2263 | kfree(bss->wpa_ie); | |
2264 | kfree(bss->rsn_ie); | |
2265 | kfree(bss->wmm_ie); | |
c7153508 | 2266 | kfree(bss->ht_ie); |
902acc78 JB |
2267 | kfree(bss_mesh_id(bss)); |
2268 | kfree(bss_mesh_cfg(bss)); | |
f0706e82 JB |
2269 | kfree(bss); |
2270 | } | |
2271 | ||
2272 | ||
2273 | static void ieee80211_rx_bss_put(struct net_device *dev, | |
2274 | struct ieee80211_sta_bss *bss) | |
2275 | { | |
2276 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
1ebebea8 PE |
2277 | |
2278 | local_bh_disable(); | |
2279 | if (!atomic_dec_and_lock(&bss->users, &local->sta_bss_lock)) { | |
2280 | local_bh_enable(); | |
f0706e82 | 2281 | return; |
1ebebea8 | 2282 | } |
f0706e82 | 2283 | |
f0706e82 JB |
2284 | __ieee80211_rx_bss_hash_del(dev, bss); |
2285 | list_del(&bss->list); | |
2286 | spin_unlock_bh(&local->sta_bss_lock); | |
2287 | ieee80211_rx_bss_free(bss); | |
2288 | } | |
2289 | ||
2290 | ||
2291 | void ieee80211_rx_bss_list_init(struct net_device *dev) | |
2292 | { | |
2293 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2294 | spin_lock_init(&local->sta_bss_lock); | |
2295 | INIT_LIST_HEAD(&local->sta_bss_list); | |
2296 | } | |
2297 | ||
2298 | ||
2299 | void ieee80211_rx_bss_list_deinit(struct net_device *dev) | |
2300 | { | |
2301 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2302 | struct ieee80211_sta_bss *bss, *tmp; | |
2303 | ||
2304 | list_for_each_entry_safe(bss, tmp, &local->sta_bss_list, list) | |
2305 | ieee80211_rx_bss_put(dev, bss); | |
2306 | } | |
2307 | ||
2308 | ||
a607268a BR |
2309 | static int ieee80211_sta_join_ibss(struct net_device *dev, |
2310 | struct ieee80211_if_sta *ifsta, | |
2311 | struct ieee80211_sta_bss *bss) | |
2312 | { | |
2313 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2314 | int res, rates, i, j; | |
2315 | struct sk_buff *skb; | |
2316 | struct ieee80211_mgmt *mgmt; | |
2317 | struct ieee80211_tx_control control; | |
2318 | struct rate_selection ratesel; | |
2319 | u8 *pos; | |
2320 | struct ieee80211_sub_if_data *sdata; | |
2321 | struct ieee80211_supported_band *sband; | |
2322 | ||
2323 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
2324 | ||
9dd6aed0 JB |
2325 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
2326 | ||
a607268a | 2327 | /* Remove possible STA entries from other IBSS networks. */ |
dc6676b7 | 2328 | sta_info_flush_delayed(sdata); |
a607268a BR |
2329 | |
2330 | if (local->ops->reset_tsf) { | |
2331 | /* Reset own TSF to allow time synchronization work. */ | |
2332 | local->ops->reset_tsf(local_to_hw(local)); | |
2333 | } | |
2334 | memcpy(ifsta->bssid, bss->bssid, ETH_ALEN); | |
2335 | res = ieee80211_if_config(dev); | |
2336 | if (res) | |
2337 | return res; | |
2338 | ||
2339 | local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10; | |
2340 | ||
a607268a BR |
2341 | sdata->drop_unencrypted = bss->capability & |
2342 | WLAN_CAPABILITY_PRIVACY ? 1 : 0; | |
2343 | ||
2344 | res = ieee80211_set_freq(local, bss->freq); | |
2345 | ||
2346 | if (local->oper_channel->flags & IEEE80211_CHAN_NO_IBSS) { | |
2347 | printk(KERN_DEBUG "%s: IBSS not allowed on frequency " | |
2348 | "%d MHz\n", dev->name, local->oper_channel->center_freq); | |
2349 | return -1; | |
2350 | } | |
2351 | ||
2352 | /* Set beacon template */ | |
2353 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400); | |
2354 | do { | |
2355 | if (!skb) | |
2356 | break; | |
2357 | ||
2358 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
2359 | ||
2360 | mgmt = (struct ieee80211_mgmt *) | |
2361 | skb_put(skb, 24 + sizeof(mgmt->u.beacon)); | |
2362 | memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon)); | |
2363 | mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
2364 | IEEE80211_STYPE_BEACON); | |
2365 | memset(mgmt->da, 0xff, ETH_ALEN); | |
2366 | memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN); | |
2367 | memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN); | |
2368 | mgmt->u.beacon.beacon_int = | |
2369 | cpu_to_le16(local->hw.conf.beacon_int); | |
2370 | mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability); | |
2371 | ||
2372 | pos = skb_put(skb, 2 + ifsta->ssid_len); | |
2373 | *pos++ = WLAN_EID_SSID; | |
2374 | *pos++ = ifsta->ssid_len; | |
2375 | memcpy(pos, ifsta->ssid, ifsta->ssid_len); | |
2376 | ||
2377 | rates = bss->supp_rates_len; | |
2378 | if (rates > 8) | |
2379 | rates = 8; | |
2380 | pos = skb_put(skb, 2 + rates); | |
2381 | *pos++ = WLAN_EID_SUPP_RATES; | |
2382 | *pos++ = rates; | |
2383 | memcpy(pos, bss->supp_rates, rates); | |
2384 | ||
2385 | if (bss->band == IEEE80211_BAND_2GHZ) { | |
2386 | pos = skb_put(skb, 2 + 1); | |
2387 | *pos++ = WLAN_EID_DS_PARAMS; | |
2388 | *pos++ = 1; | |
2389 | *pos++ = ieee80211_frequency_to_channel(bss->freq); | |
2390 | } | |
2391 | ||
2392 | pos = skb_put(skb, 2 + 2); | |
2393 | *pos++ = WLAN_EID_IBSS_PARAMS; | |
2394 | *pos++ = 2; | |
2395 | /* FIX: set ATIM window based on scan results */ | |
2396 | *pos++ = 0; | |
2397 | *pos++ = 0; | |
2398 | ||
2399 | if (bss->supp_rates_len > 8) { | |
2400 | rates = bss->supp_rates_len - 8; | |
2401 | pos = skb_put(skb, 2 + rates); | |
2402 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
2403 | *pos++ = rates; | |
2404 | memcpy(pos, &bss->supp_rates[8], rates); | |
2405 | } | |
2406 | ||
2407 | memset(&control, 0, sizeof(control)); | |
2408 | rate_control_get_rate(dev, sband, skb, &ratesel); | |
2e92e6f2 | 2409 | if (ratesel.rate_idx < 0) { |
a607268a BR |
2410 | printk(KERN_DEBUG "%s: Failed to determine TX rate " |
2411 | "for IBSS beacon\n", dev->name); | |
2412 | break; | |
2413 | } | |
2414 | control.vif = &sdata->vif; | |
2e92e6f2 | 2415 | control.tx_rate_idx = ratesel.rate_idx; |
a607268a | 2416 | if (sdata->bss_conf.use_short_preamble && |
2e92e6f2 | 2417 | sband->bitrates[ratesel.rate_idx].flags & IEEE80211_RATE_SHORT_PREAMBLE) |
a607268a BR |
2418 | control.flags |= IEEE80211_TXCTL_SHORT_PREAMBLE; |
2419 | control.antenna_sel_tx = local->hw.conf.antenna_sel_tx; | |
2420 | control.flags |= IEEE80211_TXCTL_NO_ACK; | |
2421 | control.retry_limit = 1; | |
2422 | ||
2423 | ifsta->probe_resp = skb_copy(skb, GFP_ATOMIC); | |
2424 | if (ifsta->probe_resp) { | |
2425 | mgmt = (struct ieee80211_mgmt *) | |
2426 | ifsta->probe_resp->data; | |
2427 | mgmt->frame_control = | |
2428 | IEEE80211_FC(IEEE80211_FTYPE_MGMT, | |
2429 | IEEE80211_STYPE_PROBE_RESP); | |
2430 | } else { | |
2431 | printk(KERN_DEBUG "%s: Could not allocate ProbeResp " | |
2432 | "template for IBSS\n", dev->name); | |
2433 | } | |
2434 | ||
2435 | if (local->ops->beacon_update && | |
2436 | local->ops->beacon_update(local_to_hw(local), | |
2437 | skb, &control) == 0) { | |
2438 | printk(KERN_DEBUG "%s: Configured IBSS beacon " | |
2439 | "template\n", dev->name); | |
2440 | skb = NULL; | |
2441 | } | |
2442 | ||
2443 | rates = 0; | |
2444 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
2445 | for (i = 0; i < bss->supp_rates_len; i++) { | |
2446 | int bitrate = (bss->supp_rates[i] & 0x7f) * 5; | |
2447 | for (j = 0; j < sband->n_bitrates; j++) | |
2448 | if (sband->bitrates[j].bitrate == bitrate) | |
2449 | rates |= BIT(j); | |
2450 | } | |
2451 | ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates; | |
e2839d8f VK |
2452 | |
2453 | ieee80211_sta_def_wmm_params(dev, bss, 1); | |
a607268a BR |
2454 | } while (0); |
2455 | ||
2456 | if (skb) { | |
2457 | printk(KERN_DEBUG "%s: Failed to configure IBSS beacon " | |
2458 | "template\n", dev->name); | |
2459 | dev_kfree_skb(skb); | |
2460 | } | |
2461 | ||
2462 | ifsta->state = IEEE80211_IBSS_JOINED; | |
2463 | mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL); | |
2464 | ||
2465 | ieee80211_rx_bss_put(dev, bss); | |
2466 | ||
2467 | return res; | |
2468 | } | |
2469 | ||
f709fc69 LCC |
2470 | u64 ieee80211_sta_get_rates(struct ieee80211_local *local, |
2471 | struct ieee802_11_elems *elems, | |
2472 | enum ieee80211_band band) | |
2473 | { | |
2474 | struct ieee80211_supported_band *sband; | |
2475 | struct ieee80211_rate *bitrates; | |
2476 | size_t num_rates; | |
2477 | u64 supp_rates; | |
2478 | int i, j; | |
2479 | sband = local->hw.wiphy->bands[band]; | |
2480 | ||
2481 | if (!sband) { | |
2482 | WARN_ON(1); | |
2483 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
2484 | } | |
2485 | ||
2486 | bitrates = sband->bitrates; | |
2487 | num_rates = sband->n_bitrates; | |
2488 | supp_rates = 0; | |
2489 | for (i = 0; i < elems->supp_rates_len + | |
2490 | elems->ext_supp_rates_len; i++) { | |
2491 | u8 rate = 0; | |
2492 | int own_rate; | |
2493 | if (i < elems->supp_rates_len) | |
2494 | rate = elems->supp_rates[i]; | |
2495 | else if (elems->ext_supp_rates) | |
2496 | rate = elems->ext_supp_rates | |
2497 | [i - elems->supp_rates_len]; | |
2498 | own_rate = 5 * (rate & 0x7f); | |
2499 | for (j = 0; j < num_rates; j++) | |
2500 | if (bitrates[j].bitrate == own_rate) | |
2501 | supp_rates |= BIT(j); | |
2502 | } | |
2503 | return supp_rates; | |
2504 | } | |
2505 | ||
a607268a | 2506 | |
f0706e82 JB |
2507 | static void ieee80211_rx_bss_info(struct net_device *dev, |
2508 | struct ieee80211_mgmt *mgmt, | |
2509 | size_t len, | |
2510 | struct ieee80211_rx_status *rx_status, | |
2511 | int beacon) | |
2512 | { | |
2513 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2514 | struct ieee802_11_elems elems; | |
2515 | size_t baselen; | |
8318d78a | 2516 | int freq, clen; |
f0706e82 JB |
2517 | struct ieee80211_sta_bss *bss; |
2518 | struct sta_info *sta; | |
2519 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
9d9bf77d | 2520 | u64 beacon_timestamp, rx_timestamp; |
fab7d4a2 | 2521 | struct ieee80211_channel *channel; |
0795af57 JP |
2522 | DECLARE_MAC_BUF(mac); |
2523 | DECLARE_MAC_BUF(mac2); | |
f0706e82 JB |
2524 | |
2525 | if (!beacon && memcmp(mgmt->da, dev->dev_addr, ETH_ALEN)) | |
2526 | return; /* ignore ProbeResp to foreign address */ | |
2527 | ||
2528 | #if 0 | |
0795af57 | 2529 | printk(KERN_DEBUG "%s: RX %s from %s to %s\n", |
f0706e82 | 2530 | dev->name, beacon ? "Beacon" : "Probe Response", |
0795af57 | 2531 | print_mac(mac, mgmt->sa), print_mac(mac2, mgmt->da)); |
f0706e82 JB |
2532 | #endif |
2533 | ||
2534 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
2535 | if (baselen > len) | |
2536 | return; | |
2537 | ||
9d9bf77d | 2538 | beacon_timestamp = le64_to_cpu(mgmt->u.beacon.timestamp); |
67a4cce4 | 2539 | ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems); |
f0706e82 | 2540 | |
902acc78 JB |
2541 | if (ieee80211_vif_is_mesh(&sdata->vif) && elems.mesh_id && |
2542 | elems.mesh_config && mesh_matches_local(&elems, dev)) { | |
2543 | u64 rates = ieee80211_sta_get_rates(local, &elems, | |
2544 | rx_status->band); | |
2545 | ||
2546 | mesh_neighbour_update(mgmt->sa, rates, dev, | |
2547 | mesh_peer_accepts_plinks(&elems, dev)); | |
2548 | } | |
f709fc69 | 2549 | |
d0709a65 JB |
2550 | rcu_read_lock(); |
2551 | ||
51fb61e7 | 2552 | if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && elems.supp_rates && |
f0706e82 JB |
2553 | memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0 && |
2554 | (sta = sta_info_get(local, mgmt->sa))) { | |
f709fc69 LCC |
2555 | u64 prev_rates; |
2556 | u64 supp_rates = ieee80211_sta_get_rates(local, &elems, | |
2557 | rx_status->band); | |
f0706e82 | 2558 | |
8318d78a JB |
2559 | prev_rates = sta->supp_rates[rx_status->band]; |
2560 | sta->supp_rates[rx_status->band] &= supp_rates; | |
2561 | if (sta->supp_rates[rx_status->band] == 0) { | |
f0706e82 JB |
2562 | /* No matching rates - this should not really happen. |
2563 | * Make sure that at least one rate is marked | |
2564 | * supported to avoid issues with TX rate ctrl. */ | |
8318d78a JB |
2565 | sta->supp_rates[rx_status->band] = |
2566 | sdata->u.sta.supp_rates_bits[rx_status->band]; | |
f0706e82 | 2567 | } |
8318d78a | 2568 | if (sta->supp_rates[rx_status->band] != prev_rates) { |
f0706e82 | 2569 | printk(KERN_DEBUG "%s: updated supp_rates set for " |
8318d78a JB |
2570 | "%s based on beacon info (0x%llx & 0x%llx -> " |
2571 | "0x%llx)\n", | |
2572 | dev->name, print_mac(mac, sta->addr), | |
2573 | (unsigned long long) prev_rates, | |
2574 | (unsigned long long) supp_rates, | |
2575 | (unsigned long long) sta->supp_rates[rx_status->band]); | |
f0706e82 | 2576 | } |
f0706e82 JB |
2577 | } |
2578 | ||
d0709a65 JB |
2579 | rcu_read_unlock(); |
2580 | ||
f0706e82 | 2581 | if (elems.ds_params && elems.ds_params_len == 1) |
8318d78a | 2582 | freq = ieee80211_channel_to_frequency(elems.ds_params[0]); |
f0706e82 | 2583 | else |
8318d78a | 2584 | freq = rx_status->freq; |
f0706e82 | 2585 | |
fab7d4a2 JB |
2586 | channel = ieee80211_get_channel(local->hw.wiphy, freq); |
2587 | ||
2588 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) | |
2589 | return; | |
2590 | ||
f709fc69 LCC |
2591 | #ifdef CONFIG_MAC80211_MESH |
2592 | if (elems.mesh_config) | |
2593 | bss = ieee80211_rx_mesh_bss_get(dev, elems.mesh_id, | |
2594 | elems.mesh_id_len, elems.mesh_config, freq); | |
2595 | else | |
2596 | #endif | |
2597 | bss = ieee80211_rx_bss_get(dev, mgmt->bssid, freq, | |
cffdd30d | 2598 | elems.ssid, elems.ssid_len); |
f709fc69 LCC |
2599 | if (!bss) { |
2600 | #ifdef CONFIG_MAC80211_MESH | |
2601 | if (elems.mesh_config) | |
2602 | bss = ieee80211_rx_mesh_bss_add(dev, elems.mesh_id, | |
05e5e883 LCC |
2603 | elems.mesh_id_len, elems.mesh_config, |
2604 | elems.mesh_config_len, freq); | |
f709fc69 LCC |
2605 | else |
2606 | #endif | |
2607 | bss = ieee80211_rx_bss_add(dev, mgmt->bssid, freq, | |
2608 | elems.ssid, elems.ssid_len); | |
f0706e82 JB |
2609 | if (!bss) |
2610 | return; | |
2611 | } else { | |
2612 | #if 0 | |
2613 | /* TODO: order by RSSI? */ | |
2614 | spin_lock_bh(&local->sta_bss_lock); | |
2615 | list_move_tail(&bss->list, &local->sta_bss_list); | |
2616 | spin_unlock_bh(&local->sta_bss_lock); | |
2617 | #endif | |
2618 | } | |
2619 | ||
5628221c DD |
2620 | /* save the ERP value so that it is available at association time */ |
2621 | if (elems.erp_info && elems.erp_info_len >= 1) { | |
2622 | bss->erp_value = elems.erp_info[0]; | |
2623 | bss->has_erp_value = 1; | |
2624 | } | |
2625 | ||
30b89b0f JB |
2626 | if (elems.ht_cap_elem && |
2627 | (!bss->ht_ie || bss->ht_ie_len != elems.ht_cap_elem_len || | |
2628 | memcmp(bss->ht_ie, elems.ht_cap_elem, elems.ht_cap_elem_len))) { | |
2629 | kfree(bss->ht_ie); | |
2630 | bss->ht_ie = kmalloc(elems.ht_cap_elem_len + 2, GFP_ATOMIC); | |
2631 | if (bss->ht_ie) { | |
2632 | memcpy(bss->ht_ie, elems.ht_cap_elem - 2, | |
2633 | elems.ht_cap_elem_len + 2); | |
2634 | bss->ht_ie_len = elems.ht_cap_elem_len + 2; | |
2635 | } else | |
2636 | bss->ht_ie_len = 0; | |
2637 | } else if (!elems.ht_cap_elem && bss->ht_ie) { | |
2638 | kfree(bss->ht_ie); | |
2639 | bss->ht_ie = NULL; | |
2640 | bss->ht_ie_len = 0; | |
2641 | } | |
2642 | ||
f0706e82 JB |
2643 | bss->beacon_int = le16_to_cpu(mgmt->u.beacon.beacon_int); |
2644 | bss->capability = le16_to_cpu(mgmt->u.beacon.capab_info); | |
f0706e82 JB |
2645 | |
2646 | bss->supp_rates_len = 0; | |
2647 | if (elems.supp_rates) { | |
2648 | clen = IEEE80211_MAX_SUPP_RATES - bss->supp_rates_len; | |
2649 | if (clen > elems.supp_rates_len) | |
2650 | clen = elems.supp_rates_len; | |
2651 | memcpy(&bss->supp_rates[bss->supp_rates_len], elems.supp_rates, | |
2652 | clen); | |
2653 | bss->supp_rates_len += clen; | |
2654 | } | |
2655 | if (elems.ext_supp_rates) { | |
2656 | clen = IEEE80211_MAX_SUPP_RATES - bss->supp_rates_len; | |
2657 | if (clen > elems.ext_supp_rates_len) | |
2658 | clen = elems.ext_supp_rates_len; | |
2659 | memcpy(&bss->supp_rates[bss->supp_rates_len], | |
2660 | elems.ext_supp_rates, clen); | |
2661 | bss->supp_rates_len += clen; | |
2662 | } | |
2663 | ||
30b89b0f JB |
2664 | bss->band = rx_status->band; |
2665 | ||
2666 | bss->timestamp = beacon_timestamp; | |
2667 | bss->last_update = jiffies; | |
30b89b0f JB |
2668 | bss->signal = rx_status->signal; |
2669 | bss->noise = rx_status->noise; | |
566bfe5a | 2670 | bss->qual = rx_status->qual; |
30b89b0f JB |
2671 | if (!beacon && !bss->probe_resp) |
2672 | bss->probe_resp = true; | |
2673 | ||
2674 | /* | |
2675 | * In STA mode, the remaining parameters should not be overridden | |
2676 | * by beacons because they're not necessarily accurate there. | |
2677 | */ | |
2678 | if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS && | |
2679 | bss->probe_resp && beacon) { | |
2680 | ieee80211_rx_bss_put(dev, bss); | |
2681 | return; | |
2682 | } | |
2683 | ||
f0706e82 JB |
2684 | if (elems.wpa && |
2685 | (!bss->wpa_ie || bss->wpa_ie_len != elems.wpa_len || | |
2686 | memcmp(bss->wpa_ie, elems.wpa, elems.wpa_len))) { | |
2687 | kfree(bss->wpa_ie); | |
2688 | bss->wpa_ie = kmalloc(elems.wpa_len + 2, GFP_ATOMIC); | |
2689 | if (bss->wpa_ie) { | |
2690 | memcpy(bss->wpa_ie, elems.wpa - 2, elems.wpa_len + 2); | |
2691 | bss->wpa_ie_len = elems.wpa_len + 2; | |
2692 | } else | |
2693 | bss->wpa_ie_len = 0; | |
2694 | } else if (!elems.wpa && bss->wpa_ie) { | |
2695 | kfree(bss->wpa_ie); | |
2696 | bss->wpa_ie = NULL; | |
2697 | bss->wpa_ie_len = 0; | |
2698 | } | |
2699 | ||
2700 | if (elems.rsn && | |
2701 | (!bss->rsn_ie || bss->rsn_ie_len != elems.rsn_len || | |
2702 | memcmp(bss->rsn_ie, elems.rsn, elems.rsn_len))) { | |
2703 | kfree(bss->rsn_ie); | |
2704 | bss->rsn_ie = kmalloc(elems.rsn_len + 2, GFP_ATOMIC); | |
2705 | if (bss->rsn_ie) { | |
2706 | memcpy(bss->rsn_ie, elems.rsn - 2, elems.rsn_len + 2); | |
2707 | bss->rsn_ie_len = elems.rsn_len + 2; | |
2708 | } else | |
2709 | bss->rsn_ie_len = 0; | |
2710 | } else if (!elems.rsn && bss->rsn_ie) { | |
2711 | kfree(bss->rsn_ie); | |
2712 | bss->rsn_ie = NULL; | |
2713 | bss->rsn_ie_len = 0; | |
2714 | } | |
2715 | ||
30b89b0f JB |
2716 | /* |
2717 | * Cf. | |
2718 | * http://www.wipo.int/pctdb/en/wo.jsp?wo=2007047181&IA=WO2007047181&DISPLAY=DESC | |
2719 | * | |
2720 | * quoting: | |
2721 | * | |
2722 | * In particular, "Wi-Fi CERTIFIED for WMM - Support for Multimedia | |
2723 | * Applications with Quality of Service in Wi-Fi Networks," Wi- Fi | |
2724 | * Alliance (September 1, 2004) is incorporated by reference herein. | |
2725 | * The inclusion of the WMM Parameters in probe responses and | |
2726 | * association responses is mandatory for WMM enabled networks. The | |
2727 | * inclusion of the WMM Parameters in beacons, however, is optional. | |
2728 | */ | |
2729 | ||
f0706e82 JB |
2730 | if (elems.wmm_param && |
2731 | (!bss->wmm_ie || bss->wmm_ie_len != elems.wmm_param_len || | |
2732 | memcmp(bss->wmm_ie, elems.wmm_param, elems.wmm_param_len))) { | |
2733 | kfree(bss->wmm_ie); | |
2734 | bss->wmm_ie = kmalloc(elems.wmm_param_len + 2, GFP_ATOMIC); | |
2735 | if (bss->wmm_ie) { | |
2736 | memcpy(bss->wmm_ie, elems.wmm_param - 2, | |
2737 | elems.wmm_param_len + 2); | |
2738 | bss->wmm_ie_len = elems.wmm_param_len + 2; | |
2739 | } else | |
2740 | bss->wmm_ie_len = 0; | |
a46f025d AK |
2741 | } else if (elems.wmm_info && |
2742 | (!bss->wmm_ie || bss->wmm_ie_len != elems.wmm_info_len || | |
2743 | memcmp(bss->wmm_ie, elems.wmm_info, elems.wmm_info_len))) { | |
2744 | /* As for certain AP's Fifth bit is not set in WMM IE in | |
2745 | * beacon frames.So while parsing the beacon frame the | |
2746 | * wmm_info structure is used instead of wmm_param. | |
2747 | * wmm_info structure was never used to set bss->wmm_ie. | |
2748 | * This code fixes this problem by copying the WME | |
2749 | * information from wmm_info to bss->wmm_ie and enabling | |
2750 | * n-band association. | |
2751 | */ | |
2752 | kfree(bss->wmm_ie); | |
2753 | bss->wmm_ie = kmalloc(elems.wmm_info_len + 2, GFP_ATOMIC); | |
2754 | if (bss->wmm_ie) { | |
2755 | memcpy(bss->wmm_ie, elems.wmm_info - 2, | |
2756 | elems.wmm_info_len + 2); | |
2757 | bss->wmm_ie_len = elems.wmm_info_len + 2; | |
2758 | } else | |
2759 | bss->wmm_ie_len = 0; | |
2760 | } else if (!elems.wmm_param && !elems.wmm_info && bss->wmm_ie) { | |
f0706e82 JB |
2761 | kfree(bss->wmm_ie); |
2762 | bss->wmm_ie = NULL; | |
2763 | bss->wmm_ie_len = 0; | |
2764 | } | |
9d9bf77d BR |
2765 | |
2766 | /* check if we need to merge IBSS */ | |
2767 | if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && beacon && | |
2768 | !local->sta_sw_scanning && !local->sta_hw_scanning && | |
fba4a1e6 | 2769 | bss->capability & WLAN_CAPABILITY_IBSS && |
9d9bf77d BR |
2770 | bss->freq == local->oper_channel->center_freq && |
2771 | elems.ssid_len == sdata->u.sta.ssid_len && | |
2772 | memcmp(elems.ssid, sdata->u.sta.ssid, sdata->u.sta.ssid_len) == 0) { | |
2773 | if (rx_status->flag & RX_FLAG_TSFT) { | |
2774 | /* in order for correct IBSS merging we need mactime | |
2775 | * | |
2776 | * since mactime is defined as the time the first data | |
2777 | * symbol of the frame hits the PHY, and the timestamp | |
2778 | * of the beacon is defined as "the time that the data | |
2779 | * symbol containing the first bit of the timestamp is | |
2780 | * transmitted to the PHY plus the transmitting STA’s | |
2781 | * delays through its local PHY from the MAC-PHY | |
2782 | * interface to its interface with the WM" | |
2783 | * (802.11 11.1.2) - equals the time this bit arrives at | |
2784 | * the receiver - we have to take into account the | |
2785 | * offset between the two. | |
2786 | * e.g: at 1 MBit that means mactime is 192 usec earlier | |
2787 | * (=24 bytes * 8 usecs/byte) than the beacon timestamp. | |
2788 | */ | |
2789 | int rate = local->hw.wiphy->bands[rx_status->band]-> | |
2790 | bitrates[rx_status->rate_idx].bitrate; | |
2791 | rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate); | |
2792 | } else if (local && local->ops && local->ops->get_tsf) | |
2793 | /* second best option: get current TSF */ | |
2794 | rx_timestamp = local->ops->get_tsf(local_to_hw(local)); | |
2795 | else | |
2796 | /* can't merge without knowing the TSF */ | |
2797 | rx_timestamp = -1LLU; | |
2798 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
2799 | printk(KERN_DEBUG "RX beacon SA=%s BSSID=" | |
2800 | "%s TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n", | |
2801 | print_mac(mac, mgmt->sa), | |
2802 | print_mac(mac2, mgmt->bssid), | |
2803 | (unsigned long long)rx_timestamp, | |
2804 | (unsigned long long)beacon_timestamp, | |
2805 | (unsigned long long)(rx_timestamp - beacon_timestamp), | |
2806 | jiffies); | |
2807 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ | |
2808 | if (beacon_timestamp > rx_timestamp) { | |
fba4a1e6 | 2809 | #ifndef CONFIG_MAC80211_IBSS_DEBUG |
d97cf015 | 2810 | if (net_ratelimit()) |
fba4a1e6 | 2811 | #endif |
9d9bf77d BR |
2812 | printk(KERN_DEBUG "%s: beacon TSF higher than " |
2813 | "local TSF - IBSS merge with BSSID %s\n", | |
2814 | dev->name, print_mac(mac, mgmt->bssid)); | |
2815 | ieee80211_sta_join_ibss(dev, &sdata->u.sta, bss); | |
2816 | ieee80211_ibss_add_sta(dev, NULL, | |
2817 | mgmt->bssid, mgmt->sa); | |
2818 | } | |
2819 | } | |
2820 | ||
f0706e82 JB |
2821 | ieee80211_rx_bss_put(dev, bss); |
2822 | } | |
2823 | ||
2824 | ||
2825 | static void ieee80211_rx_mgmt_probe_resp(struct net_device *dev, | |
2826 | struct ieee80211_mgmt *mgmt, | |
2827 | size_t len, | |
2828 | struct ieee80211_rx_status *rx_status) | |
2829 | { | |
2830 | ieee80211_rx_bss_info(dev, mgmt, len, rx_status, 0); | |
2831 | } | |
2832 | ||
2833 | ||
2834 | static void ieee80211_rx_mgmt_beacon(struct net_device *dev, | |
2835 | struct ieee80211_mgmt *mgmt, | |
2836 | size_t len, | |
2837 | struct ieee80211_rx_status *rx_status) | |
2838 | { | |
f0706e82 JB |
2839 | struct ieee80211_sub_if_data *sdata; |
2840 | struct ieee80211_if_sta *ifsta; | |
f0706e82 JB |
2841 | size_t baselen; |
2842 | struct ieee802_11_elems elems; | |
d3c990fb RR |
2843 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); |
2844 | struct ieee80211_conf *conf = &local->hw.conf; | |
471b3efd | 2845 | u32 changed = 0; |
f0706e82 JB |
2846 | |
2847 | ieee80211_rx_bss_info(dev, mgmt, len, rx_status, 1); | |
2848 | ||
2849 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
51fb61e7 | 2850 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA) |
f0706e82 JB |
2851 | return; |
2852 | ifsta = &sdata->u.sta; | |
2853 | ||
d6f2da5b | 2854 | if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) || |
f0706e82 JB |
2855 | memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0) |
2856 | return; | |
2857 | ||
2858 | /* Process beacon from the current BSS */ | |
2859 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
2860 | if (baselen > len) | |
2861 | return; | |
2862 | ||
67a4cce4 | 2863 | ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems); |
f0706e82 | 2864 | |
3434fbd3 JB |
2865 | ieee80211_sta_wmm_params(dev, ifsta, elems.wmm_param, |
2866 | elems.wmm_param_len); | |
d18ef29f RC |
2867 | |
2868 | /* Do not send changes to driver if we are scanning. This removes | |
2869 | * requirement that driver's bss_info_changed function needs to be | |
2870 | * atomic. */ | |
2871 | if (local->sta_sw_scanning || local->sta_hw_scanning) | |
2872 | return; | |
2873 | ||
5628221c | 2874 | if (elems.erp_info && elems.erp_info_len >= 1) |
471b3efd | 2875 | changed |= ieee80211_handle_erp_ie(sdata, elems.erp_info[0]); |
50c4afb9 JL |
2876 | else { |
2877 | u16 capab = le16_to_cpu(mgmt->u.beacon.capab_info); | |
2878 | changed |= ieee80211_handle_protect_preamb(sdata, false, | |
2879 | (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0); | |
2880 | } | |
f0706e82 | 2881 | |
d3c990fb | 2882 | if (elems.ht_cap_elem && elems.ht_info_elem && |
38668c05 | 2883 | elems.wmm_param && conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) { |
d3c990fb RR |
2884 | struct ieee80211_ht_bss_info bss_info; |
2885 | ||
2886 | ieee80211_ht_addt_info_ie_to_ht_bss_info( | |
2887 | (struct ieee80211_ht_addt_info *) | |
2888 | elems.ht_info_elem, &bss_info); | |
38668c05 TW |
2889 | changed |= ieee80211_handle_ht(local, 1, &conf->ht_conf, |
2890 | &bss_info); | |
d3c990fb RR |
2891 | } |
2892 | ||
471b3efd | 2893 | ieee80211_bss_info_change_notify(sdata, changed); |
f0706e82 JB |
2894 | } |
2895 | ||
2896 | ||
2897 | static void ieee80211_rx_mgmt_probe_req(struct net_device *dev, | |
2898 | struct ieee80211_if_sta *ifsta, | |
2899 | struct ieee80211_mgmt *mgmt, | |
2900 | size_t len, | |
2901 | struct ieee80211_rx_status *rx_status) | |
2902 | { | |
2903 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
2904 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
2905 | int tx_last_beacon; | |
2906 | struct sk_buff *skb; | |
2907 | struct ieee80211_mgmt *resp; | |
2908 | u8 *pos, *end; | |
0795af57 JP |
2909 | DECLARE_MAC_BUF(mac); |
2910 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
2911 | DECLARE_MAC_BUF(mac2); | |
2912 | DECLARE_MAC_BUF(mac3); | |
2913 | #endif | |
f0706e82 | 2914 | |
51fb61e7 | 2915 | if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS || |
f0706e82 JB |
2916 | ifsta->state != IEEE80211_IBSS_JOINED || |
2917 | len < 24 + 2 || !ifsta->probe_resp) | |
2918 | return; | |
2919 | ||
2920 | if (local->ops->tx_last_beacon) | |
2921 | tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local)); | |
2922 | else | |
2923 | tx_last_beacon = 1; | |
2924 | ||
2925 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0795af57 JP |
2926 | printk(KERN_DEBUG "%s: RX ProbeReq SA=%s DA=%s BSSID=" |
2927 | "%s (tx_last_beacon=%d)\n", | |
2928 | dev->name, print_mac(mac, mgmt->sa), print_mac(mac2, mgmt->da), | |
2929 | print_mac(mac3, mgmt->bssid), tx_last_beacon); | |
f0706e82 JB |
2930 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ |
2931 | ||
2932 | if (!tx_last_beacon) | |
2933 | return; | |
2934 | ||
2935 | if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 && | |
2936 | memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0) | |
2937 | return; | |
2938 | ||
2939 | end = ((u8 *) mgmt) + len; | |
2940 | pos = mgmt->u.probe_req.variable; | |
2941 | if (pos[0] != WLAN_EID_SSID || | |
2942 | pos + 2 + pos[1] > end) { | |
2943 | if (net_ratelimit()) { | |
2944 | printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq " | |
0795af57 JP |
2945 | "from %s\n", |
2946 | dev->name, print_mac(mac, mgmt->sa)); | |
f0706e82 JB |
2947 | } |
2948 | return; | |
2949 | } | |
2950 | if (pos[1] != 0 && | |
2951 | (pos[1] != ifsta->ssid_len || | |
2952 | memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) { | |
2953 | /* Ignore ProbeReq for foreign SSID */ | |
2954 | return; | |
2955 | } | |
2956 | ||
2957 | /* Reply with ProbeResp */ | |
0ec0b7ac | 2958 | skb = skb_copy(ifsta->probe_resp, GFP_KERNEL); |
f0706e82 JB |
2959 | if (!skb) |
2960 | return; | |
2961 | ||
2962 | resp = (struct ieee80211_mgmt *) skb->data; | |
2963 | memcpy(resp->da, mgmt->sa, ETH_ALEN); | |
2964 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0795af57 JP |
2965 | printk(KERN_DEBUG "%s: Sending ProbeResp to %s\n", |
2966 | dev->name, print_mac(mac, resp->da)); | |
f0706e82 JB |
2967 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ |
2968 | ieee80211_sta_tx(dev, skb, 0); | |
2969 | } | |
2970 | ||
4e20cb29 JB |
2971 | static void ieee80211_rx_mgmt_action(struct net_device *dev, |
2972 | struct ieee80211_if_sta *ifsta, | |
2973 | struct ieee80211_mgmt *mgmt, | |
f709fc69 LCC |
2974 | size_t len, |
2975 | struct ieee80211_rx_status *rx_status) | |
9f985b0e | 2976 | { |
f709fc69 | 2977 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
f709fc69 | 2978 | |
9f985b0e RR |
2979 | if (len < IEEE80211_MIN_ACTION_SIZE) |
2980 | return; | |
2981 | ||
2982 | switch (mgmt->u.action.category) { | |
2983 | case WLAN_CATEGORY_BACK: | |
2984 | switch (mgmt->u.action.u.addba_req.action_code) { | |
2985 | case WLAN_ACTION_ADDBA_REQ: | |
2986 | if (len < (IEEE80211_MIN_ACTION_SIZE + | |
2987 | sizeof(mgmt->u.action.u.addba_req))) | |
2988 | break; | |
2989 | ieee80211_sta_process_addba_request(dev, mgmt, len); | |
2990 | break; | |
eadc8d9e RR |
2991 | case WLAN_ACTION_ADDBA_RESP: |
2992 | if (len < (IEEE80211_MIN_ACTION_SIZE + | |
2993 | sizeof(mgmt->u.action.u.addba_resp))) | |
2994 | break; | |
2995 | ieee80211_sta_process_addba_resp(dev, mgmt, len); | |
2996 | break; | |
688b88a4 RR |
2997 | case WLAN_ACTION_DELBA: |
2998 | if (len < (IEEE80211_MIN_ACTION_SIZE + | |
2999 | sizeof(mgmt->u.action.u.delba))) | |
3000 | break; | |
3001 | ieee80211_sta_process_delba(dev, mgmt, len); | |
3002 | break; | |
9f985b0e RR |
3003 | default: |
3004 | if (net_ratelimit()) | |
688b88a4 | 3005 | printk(KERN_DEBUG "%s: Rx unknown A-MPDU action\n", |
9f985b0e RR |
3006 | dev->name); |
3007 | break; | |
3008 | } | |
3009 | break; | |
f709fc69 | 3010 | case PLINK_CATEGORY: |
902acc78 | 3011 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
f709fc69 LCC |
3012 | mesh_rx_plink_frame(dev, mgmt, len, rx_status); |
3013 | break; | |
f709fc69 | 3014 | case MESH_PATH_SEL_CATEGORY: |
902acc78 | 3015 | if (ieee80211_vif_is_mesh(&sdata->vif)) |
f709fc69 LCC |
3016 | mesh_rx_path_sel_frame(dev, mgmt, len); |
3017 | break; | |
9f985b0e | 3018 | default: |
f709fc69 LCC |
3019 | if (net_ratelimit()) |
3020 | printk(KERN_DEBUG "%s: Rx unknown action frame - " | |
3021 | "category=%d\n", dev->name, mgmt->u.action.category); | |
9f985b0e RR |
3022 | break; |
3023 | } | |
3024 | } | |
f0706e82 JB |
3025 | |
3026 | void ieee80211_sta_rx_mgmt(struct net_device *dev, struct sk_buff *skb, | |
3027 | struct ieee80211_rx_status *rx_status) | |
3028 | { | |
3029 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3030 | struct ieee80211_sub_if_data *sdata; | |
3031 | struct ieee80211_if_sta *ifsta; | |
3032 | struct ieee80211_mgmt *mgmt; | |
3033 | u16 fc; | |
3034 | ||
3035 | if (skb->len < 24) | |
3036 | goto fail; | |
3037 | ||
3038 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3039 | ifsta = &sdata->u.sta; | |
3040 | ||
3041 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
3042 | fc = le16_to_cpu(mgmt->frame_control); | |
3043 | ||
3044 | switch (fc & IEEE80211_FCTL_STYPE) { | |
3045 | case IEEE80211_STYPE_PROBE_REQ: | |
3046 | case IEEE80211_STYPE_PROBE_RESP: | |
3047 | case IEEE80211_STYPE_BEACON: | |
f709fc69 | 3048 | case IEEE80211_STYPE_ACTION: |
f0706e82 JB |
3049 | memcpy(skb->cb, rx_status, sizeof(*rx_status)); |
3050 | case IEEE80211_STYPE_AUTH: | |
3051 | case IEEE80211_STYPE_ASSOC_RESP: | |
3052 | case IEEE80211_STYPE_REASSOC_RESP: | |
3053 | case IEEE80211_STYPE_DEAUTH: | |
3054 | case IEEE80211_STYPE_DISASSOC: | |
3055 | skb_queue_tail(&ifsta->skb_queue, skb); | |
3056 | queue_work(local->hw.workqueue, &ifsta->work); | |
3057 | return; | |
3058 | default: | |
3059 | printk(KERN_DEBUG "%s: received unknown management frame - " | |
3060 | "stype=%d\n", dev->name, | |
3061 | (fc & IEEE80211_FCTL_STYPE) >> 4); | |
3062 | break; | |
3063 | } | |
3064 | ||
3065 | fail: | |
3066 | kfree_skb(skb); | |
3067 | } | |
3068 | ||
3069 | ||
3070 | static void ieee80211_sta_rx_queued_mgmt(struct net_device *dev, | |
3071 | struct sk_buff *skb) | |
3072 | { | |
3073 | struct ieee80211_rx_status *rx_status; | |
3074 | struct ieee80211_sub_if_data *sdata; | |
3075 | struct ieee80211_if_sta *ifsta; | |
3076 | struct ieee80211_mgmt *mgmt; | |
3077 | u16 fc; | |
3078 | ||
3079 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3080 | ifsta = &sdata->u.sta; | |
3081 | ||
3082 | rx_status = (struct ieee80211_rx_status *) skb->cb; | |
3083 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
3084 | fc = le16_to_cpu(mgmt->frame_control); | |
3085 | ||
3086 | switch (fc & IEEE80211_FCTL_STYPE) { | |
3087 | case IEEE80211_STYPE_PROBE_REQ: | |
3088 | ieee80211_rx_mgmt_probe_req(dev, ifsta, mgmt, skb->len, | |
3089 | rx_status); | |
3090 | break; | |
3091 | case IEEE80211_STYPE_PROBE_RESP: | |
3092 | ieee80211_rx_mgmt_probe_resp(dev, mgmt, skb->len, rx_status); | |
3093 | break; | |
3094 | case IEEE80211_STYPE_BEACON: | |
3095 | ieee80211_rx_mgmt_beacon(dev, mgmt, skb->len, rx_status); | |
3096 | break; | |
3097 | case IEEE80211_STYPE_AUTH: | |
3098 | ieee80211_rx_mgmt_auth(dev, ifsta, mgmt, skb->len); | |
3099 | break; | |
3100 | case IEEE80211_STYPE_ASSOC_RESP: | |
471b3efd | 3101 | ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0); |
f0706e82 JB |
3102 | break; |
3103 | case IEEE80211_STYPE_REASSOC_RESP: | |
471b3efd | 3104 | ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1); |
f0706e82 JB |
3105 | break; |
3106 | case IEEE80211_STYPE_DEAUTH: | |
3107 | ieee80211_rx_mgmt_deauth(dev, ifsta, mgmt, skb->len); | |
3108 | break; | |
3109 | case IEEE80211_STYPE_DISASSOC: | |
3110 | ieee80211_rx_mgmt_disassoc(dev, ifsta, mgmt, skb->len); | |
3111 | break; | |
9f985b0e | 3112 | case IEEE80211_STYPE_ACTION: |
f709fc69 | 3113 | ieee80211_rx_mgmt_action(dev, ifsta, mgmt, skb->len, rx_status); |
9f985b0e | 3114 | break; |
f0706e82 JB |
3115 | } |
3116 | ||
3117 | kfree_skb(skb); | |
3118 | } | |
3119 | ||
3120 | ||
9ae54c84 | 3121 | ieee80211_rx_result |
ece8eddd ZY |
3122 | ieee80211_sta_rx_scan(struct net_device *dev, struct sk_buff *skb, |
3123 | struct ieee80211_rx_status *rx_status) | |
f0706e82 JB |
3124 | { |
3125 | struct ieee80211_mgmt *mgmt; | |
3126 | u16 fc; | |
3127 | ||
ece8eddd | 3128 | if (skb->len < 2) |
e4c26add | 3129 | return RX_DROP_UNUSABLE; |
f0706e82 JB |
3130 | |
3131 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
3132 | fc = le16_to_cpu(mgmt->frame_control); | |
3133 | ||
ece8eddd | 3134 | if ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL) |
9ae54c84 | 3135 | return RX_CONTINUE; |
ece8eddd ZY |
3136 | |
3137 | if (skb->len < 24) | |
e4c26add | 3138 | return RX_DROP_MONITOR; |
ece8eddd | 3139 | |
f0706e82 JB |
3140 | if ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT) { |
3141 | if ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP) { | |
3142 | ieee80211_rx_mgmt_probe_resp(dev, mgmt, | |
3143 | skb->len, rx_status); | |
ece8eddd | 3144 | dev_kfree_skb(skb); |
9ae54c84 | 3145 | return RX_QUEUED; |
f0706e82 JB |
3146 | } else if ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_BEACON) { |
3147 | ieee80211_rx_mgmt_beacon(dev, mgmt, skb->len, | |
3148 | rx_status); | |
ece8eddd | 3149 | dev_kfree_skb(skb); |
9ae54c84 | 3150 | return RX_QUEUED; |
f0706e82 JB |
3151 | } |
3152 | } | |
9ae54c84 | 3153 | return RX_CONTINUE; |
f0706e82 JB |
3154 | } |
3155 | ||
3156 | ||
3157 | static int ieee80211_sta_active_ibss(struct net_device *dev) | |
3158 | { | |
3159 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3160 | int active = 0; | |
3161 | struct sta_info *sta; | |
d0709a65 | 3162 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
f0706e82 | 3163 | |
d0709a65 JB |
3164 | rcu_read_lock(); |
3165 | ||
3166 | list_for_each_entry_rcu(sta, &local->sta_list, list) { | |
3167 | if (sta->sdata == sdata && | |
f0706e82 JB |
3168 | time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL, |
3169 | jiffies)) { | |
3170 | active++; | |
3171 | break; | |
3172 | } | |
3173 | } | |
d0709a65 JB |
3174 | |
3175 | rcu_read_unlock(); | |
f0706e82 JB |
3176 | |
3177 | return active; | |
3178 | } | |
3179 | ||
3180 | ||
f709fc69 | 3181 | static void ieee80211_sta_expire(struct net_device *dev, unsigned long exp_time) |
f0706e82 JB |
3182 | { |
3183 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3184 | struct sta_info *sta, *tmp; | |
be8755e1 | 3185 | LIST_HEAD(tmp_list); |
0795af57 | 3186 | DECLARE_MAC_BUF(mac); |
d0709a65 | 3187 | unsigned long flags; |
f0706e82 | 3188 | |
d0709a65 | 3189 | spin_lock_irqsave(&local->sta_lock, flags); |
f0706e82 | 3190 | list_for_each_entry_safe(sta, tmp, &local->sta_list, list) |
f709fc69 | 3191 | if (time_after(jiffies, sta->last_rx + exp_time)) { |
0795af57 JP |
3192 | printk(KERN_DEBUG "%s: expiring inactive STA %s\n", |
3193 | dev->name, print_mac(mac, sta->addr)); | |
cb585bcc | 3194 | __sta_info_unlink(&sta); |
d0709a65 JB |
3195 | if (sta) |
3196 | list_add(&sta->list, &tmp_list); | |
f0706e82 | 3197 | } |
d0709a65 | 3198 | spin_unlock_irqrestore(&local->sta_lock, flags); |
be8755e1 | 3199 | |
d0709a65 JB |
3200 | list_for_each_entry_safe(sta, tmp, &tmp_list, list) |
3201 | sta_info_destroy(sta); | |
f0706e82 JB |
3202 | } |
3203 | ||
3204 | ||
3205 | static void ieee80211_sta_merge_ibss(struct net_device *dev, | |
3206 | struct ieee80211_if_sta *ifsta) | |
3207 | { | |
3208 | mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL); | |
3209 | ||
f709fc69 | 3210 | ieee80211_sta_expire(dev, IEEE80211_IBSS_INACTIVITY_LIMIT); |
f0706e82 JB |
3211 | if (ieee80211_sta_active_ibss(dev)) |
3212 | return; | |
3213 | ||
3214 | printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other " | |
3215 | "IBSS networks with same SSID (merge)\n", dev->name); | |
3216 | ieee80211_sta_req_scan(dev, ifsta->ssid, ifsta->ssid_len); | |
3217 | } | |
3218 | ||
3219 | ||
f709fc69 LCC |
3220 | #ifdef CONFIG_MAC80211_MESH |
3221 | static void ieee80211_mesh_housekeeping(struct net_device *dev, | |
3222 | struct ieee80211_if_sta *ifsta) | |
3223 | { | |
3224 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3225 | bool free_plinks; | |
3226 | ||
3227 | ieee80211_sta_expire(dev, IEEE80211_MESH_PEER_INACTIVITY_LIMIT); | |
3228 | mesh_path_expire(dev); | |
3229 | ||
3230 | free_plinks = mesh_plink_availables(sdata); | |
3231 | if (free_plinks != sdata->u.sta.accepting_plinks) | |
3232 | ieee80211_if_config_beacon(dev); | |
3233 | ||
3234 | mod_timer(&ifsta->timer, jiffies + | |
3235 | IEEE80211_MESH_HOUSEKEEPING_INTERVAL); | |
3236 | } | |
3237 | ||
3238 | ||
3239 | void ieee80211_start_mesh(struct net_device *dev) | |
3240 | { | |
3241 | struct ieee80211_if_sta *ifsta; | |
3242 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3243 | ifsta = &sdata->u.sta; | |
3244 | ifsta->state = IEEE80211_MESH_UP; | |
3245 | ieee80211_sta_timer((unsigned long)sdata); | |
3246 | } | |
3247 | #endif | |
3248 | ||
3249 | ||
f0706e82 JB |
3250 | void ieee80211_sta_timer(unsigned long data) |
3251 | { | |
3252 | struct ieee80211_sub_if_data *sdata = | |
3253 | (struct ieee80211_sub_if_data *) data; | |
3254 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
3255 | struct ieee80211_local *local = wdev_priv(&sdata->wdev); | |
3256 | ||
3257 | set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request); | |
3258 | queue_work(local->hw.workqueue, &ifsta->work); | |
3259 | } | |
3260 | ||
f0706e82 JB |
3261 | void ieee80211_sta_work(struct work_struct *work) |
3262 | { | |
3263 | struct ieee80211_sub_if_data *sdata = | |
3264 | container_of(work, struct ieee80211_sub_if_data, u.sta.work); | |
3265 | struct net_device *dev = sdata->dev; | |
3266 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3267 | struct ieee80211_if_sta *ifsta; | |
3268 | struct sk_buff *skb; | |
3269 | ||
3270 | if (!netif_running(dev)) | |
3271 | return; | |
3272 | ||
ece8eddd | 3273 | if (local->sta_sw_scanning || local->sta_hw_scanning) |
f0706e82 JB |
3274 | return; |
3275 | ||
51fb61e7 | 3276 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA && |
f709fc69 LCC |
3277 | sdata->vif.type != IEEE80211_IF_TYPE_IBSS && |
3278 | sdata->vif.type != IEEE80211_IF_TYPE_MESH_POINT) { | |
f0706e82 | 3279 | printk(KERN_DEBUG "%s: ieee80211_sta_work: non-STA interface " |
51fb61e7 | 3280 | "(type=%d)\n", dev->name, sdata->vif.type); |
f0706e82 JB |
3281 | return; |
3282 | } | |
3283 | ifsta = &sdata->u.sta; | |
3284 | ||
3285 | while ((skb = skb_dequeue(&ifsta->skb_queue))) | |
3286 | ieee80211_sta_rx_queued_mgmt(dev, skb); | |
3287 | ||
f709fc69 | 3288 | #ifdef CONFIG_MAC80211_MESH |
902acc78 JB |
3289 | if (ifsta->preq_queue_len && |
3290 | time_after(jiffies, | |
3291 | ifsta->last_preq + msecs_to_jiffies(ifsta->mshcfg.dot11MeshHWMPpreqMinInterval))) | |
f709fc69 LCC |
3292 | mesh_path_start_discovery(dev); |
3293 | #endif | |
3294 | ||
f0706e82 JB |
3295 | if (ifsta->state != IEEE80211_AUTHENTICATE && |
3296 | ifsta->state != IEEE80211_ASSOCIATE && | |
3297 | test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) { | |
a0af5f14 HS |
3298 | if (ifsta->scan_ssid_len) |
3299 | ieee80211_sta_start_scan(dev, ifsta->scan_ssid, ifsta->scan_ssid_len); | |
3300 | else | |
3301 | ieee80211_sta_start_scan(dev, NULL, 0); | |
f0706e82 JB |
3302 | return; |
3303 | } | |
3304 | ||
3305 | if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) { | |
3306 | if (ieee80211_sta_config_auth(dev, ifsta)) | |
3307 | return; | |
3308 | clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request); | |
3309 | } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request)) | |
3310 | return; | |
3311 | ||
3312 | switch (ifsta->state) { | |
3313 | case IEEE80211_DISABLED: | |
3314 | break; | |
3315 | case IEEE80211_AUTHENTICATE: | |
3316 | ieee80211_authenticate(dev, ifsta); | |
3317 | break; | |
3318 | case IEEE80211_ASSOCIATE: | |
3319 | ieee80211_associate(dev, ifsta); | |
3320 | break; | |
3321 | case IEEE80211_ASSOCIATED: | |
3322 | ieee80211_associated(dev, ifsta); | |
3323 | break; | |
3324 | case IEEE80211_IBSS_SEARCH: | |
3325 | ieee80211_sta_find_ibss(dev, ifsta); | |
3326 | break; | |
3327 | case IEEE80211_IBSS_JOINED: | |
3328 | ieee80211_sta_merge_ibss(dev, ifsta); | |
3329 | break; | |
f709fc69 LCC |
3330 | #ifdef CONFIG_MAC80211_MESH |
3331 | case IEEE80211_MESH_UP: | |
3332 | ieee80211_mesh_housekeeping(dev, ifsta); | |
3333 | break; | |
3334 | #endif | |
f0706e82 JB |
3335 | default: |
3336 | printk(KERN_DEBUG "ieee80211_sta_work: Unknown state %d\n", | |
3337 | ifsta->state); | |
3338 | break; | |
3339 | } | |
3340 | ||
3341 | if (ieee80211_privacy_mismatch(dev, ifsta)) { | |
3342 | printk(KERN_DEBUG "%s: privacy configuration mismatch and " | |
3343 | "mixed-cell disabled - disassociate\n", dev->name); | |
3344 | ||
3345 | ieee80211_send_disassoc(dev, ifsta, WLAN_REASON_UNSPECIFIED); | |
3346 | ieee80211_set_disassoc(dev, ifsta, 0); | |
3347 | } | |
3348 | } | |
3349 | ||
3350 | ||
3351 | static void ieee80211_sta_reset_auth(struct net_device *dev, | |
3352 | struct ieee80211_if_sta *ifsta) | |
3353 | { | |
3354 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3355 | ||
3356 | if (local->ops->reset_tsf) { | |
3357 | /* Reset own TSF to allow time synchronization work. */ | |
3358 | local->ops->reset_tsf(local_to_hw(local)); | |
3359 | } | |
3360 | ||
3361 | ifsta->wmm_last_param_set = -1; /* allow any WMM update */ | |
3362 | ||
3363 | ||
3364 | if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN) | |
3365 | ifsta->auth_alg = WLAN_AUTH_OPEN; | |
3366 | else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY) | |
3367 | ifsta->auth_alg = WLAN_AUTH_SHARED_KEY; | |
3368 | else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP) | |
3369 | ifsta->auth_alg = WLAN_AUTH_LEAP; | |
3370 | else | |
3371 | ifsta->auth_alg = WLAN_AUTH_OPEN; | |
3372 | printk(KERN_DEBUG "%s: Initial auth_alg=%d\n", dev->name, | |
3373 | ifsta->auth_alg); | |
3374 | ifsta->auth_transaction = -1; | |
d6f2da5b JS |
3375 | ifsta->flags &= ~IEEE80211_STA_ASSOCIATED; |
3376 | ifsta->auth_tries = ifsta->assoc_tries = 0; | |
f0706e82 JB |
3377 | netif_carrier_off(dev); |
3378 | } | |
3379 | ||
3380 | ||
3381 | void ieee80211_sta_req_auth(struct net_device *dev, | |
3382 | struct ieee80211_if_sta *ifsta) | |
3383 | { | |
3384 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3385 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3386 | ||
51fb61e7 | 3387 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA) |
f0706e82 JB |
3388 | return; |
3389 | ||
d6f2da5b JS |
3390 | if ((ifsta->flags & (IEEE80211_STA_BSSID_SET | |
3391 | IEEE80211_STA_AUTO_BSSID_SEL)) && | |
3392 | (ifsta->flags & (IEEE80211_STA_SSID_SET | | |
3393 | IEEE80211_STA_AUTO_SSID_SEL))) { | |
f0706e82 JB |
3394 | set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request); |
3395 | queue_work(local->hw.workqueue, &ifsta->work); | |
3396 | } | |
3397 | } | |
3398 | ||
3399 | static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta, | |
3400 | const char *ssid, int ssid_len) | |
3401 | { | |
3402 | int tmp, hidden_ssid; | |
3403 | ||
48225709 MW |
3404 | if (ssid_len == ifsta->ssid_len && |
3405 | !memcmp(ifsta->ssid, ssid, ssid_len)) | |
f0706e82 JB |
3406 | return 1; |
3407 | ||
d6f2da5b | 3408 | if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) |
f0706e82 JB |
3409 | return 0; |
3410 | ||
3411 | hidden_ssid = 1; | |
3412 | tmp = ssid_len; | |
3413 | while (tmp--) { | |
3414 | if (ssid[tmp] != '\0') { | |
3415 | hidden_ssid = 0; | |
3416 | break; | |
3417 | } | |
3418 | } | |
3419 | ||
3420 | if (hidden_ssid && ifsta->ssid_len == ssid_len) | |
3421 | return 1; | |
3422 | ||
3423 | if (ssid_len == 1 && ssid[0] == ' ') | |
3424 | return 1; | |
3425 | ||
3426 | return 0; | |
3427 | } | |
3428 | ||
3429 | static int ieee80211_sta_config_auth(struct net_device *dev, | |
3430 | struct ieee80211_if_sta *ifsta) | |
3431 | { | |
3432 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3433 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3434 | struct ieee80211_sta_bss *bss, *selected = NULL; | |
3435 | int top_rssi = 0, freq; | |
3436 | ||
d6f2da5b JS |
3437 | if (!(ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL | |
3438 | IEEE80211_STA_AUTO_BSSID_SEL | IEEE80211_STA_AUTO_CHANNEL_SEL))) { | |
f0706e82 | 3439 | ifsta->state = IEEE80211_AUTHENTICATE; |
f0706e82 JB |
3440 | ieee80211_sta_reset_auth(dev, ifsta); |
3441 | return 0; | |
3442 | } | |
3443 | ||
3444 | spin_lock_bh(&local->sta_bss_lock); | |
8318d78a | 3445 | freq = local->oper_channel->center_freq; |
f0706e82 JB |
3446 | list_for_each_entry(bss, &local->sta_bss_list, list) { |
3447 | if (!(bss->capability & WLAN_CAPABILITY_ESS)) | |
3448 | continue; | |
3449 | ||
3450 | if (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^ | |
3451 | !!sdata->default_key) | |
3452 | continue; | |
3453 | ||
d6f2da5b JS |
3454 | if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) && |
3455 | bss->freq != freq) | |
f0706e82 JB |
3456 | continue; |
3457 | ||
d6f2da5b | 3458 | if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) && |
f0706e82 JB |
3459 | memcmp(bss->bssid, ifsta->bssid, ETH_ALEN)) |
3460 | continue; | |
3461 | ||
d6f2da5b | 3462 | if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) && |
f0706e82 JB |
3463 | !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len)) |
3464 | continue; | |
3465 | ||
566bfe5a | 3466 | if (!selected || top_rssi < bss->signal) { |
f0706e82 | 3467 | selected = bss; |
566bfe5a | 3468 | top_rssi = bss->signal; |
f0706e82 JB |
3469 | } |
3470 | } | |
3471 | if (selected) | |
3472 | atomic_inc(&selected->users); | |
3473 | spin_unlock_bh(&local->sta_bss_lock); | |
3474 | ||
3475 | if (selected) { | |
8318d78a | 3476 | ieee80211_set_freq(local, selected->freq); |
d6f2da5b | 3477 | if (!(ifsta->flags & IEEE80211_STA_SSID_SET)) |
f0706e82 JB |
3478 | ieee80211_sta_set_ssid(dev, selected->ssid, |
3479 | selected->ssid_len); | |
3480 | ieee80211_sta_set_bssid(dev, selected->bssid); | |
e2839d8f | 3481 | ieee80211_sta_def_wmm_params(dev, selected, 0); |
f0706e82 JB |
3482 | ieee80211_rx_bss_put(dev, selected); |
3483 | ifsta->state = IEEE80211_AUTHENTICATE; | |
f0706e82 JB |
3484 | ieee80211_sta_reset_auth(dev, ifsta); |
3485 | return 0; | |
3486 | } else { | |
3487 | if (ifsta->state != IEEE80211_AUTHENTICATE) { | |
d6f2da5b | 3488 | if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) |
b9bf1e60 JL |
3489 | ieee80211_sta_start_scan(dev, NULL, 0); |
3490 | else | |
3491 | ieee80211_sta_start_scan(dev, ifsta->ssid, | |
3492 | ifsta->ssid_len); | |
f0706e82 JB |
3493 | ifsta->state = IEEE80211_AUTHENTICATE; |
3494 | set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request); | |
3495 | } else | |
3496 | ifsta->state = IEEE80211_DISABLED; | |
3497 | } | |
f0706e82 JB |
3498 | return -1; |
3499 | } | |
3500 | ||
f0706e82 JB |
3501 | |
3502 | static int ieee80211_sta_create_ibss(struct net_device *dev, | |
3503 | struct ieee80211_if_sta *ifsta) | |
3504 | { | |
3505 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3506 | struct ieee80211_sta_bss *bss; | |
cffdd30d | 3507 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
8318d78a | 3508 | struct ieee80211_supported_band *sband; |
f0706e82 JB |
3509 | u8 bssid[ETH_ALEN], *pos; |
3510 | int i; | |
0795af57 | 3511 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
3512 | |
3513 | #if 0 | |
3514 | /* Easier testing, use fixed BSSID. */ | |
3515 | memset(bssid, 0xfe, ETH_ALEN); | |
3516 | #else | |
3517 | /* Generate random, not broadcast, locally administered BSSID. Mix in | |
3518 | * own MAC address to make sure that devices that do not have proper | |
3519 | * random number generator get different BSSID. */ | |
3520 | get_random_bytes(bssid, ETH_ALEN); | |
3521 | for (i = 0; i < ETH_ALEN; i++) | |
3522 | bssid[i] ^= dev->dev_addr[i]; | |
3523 | bssid[0] &= ~0x01; | |
3524 | bssid[0] |= 0x02; | |
3525 | #endif | |
3526 | ||
0795af57 JP |
3527 | printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %s\n", |
3528 | dev->name, print_mac(mac, bssid)); | |
f0706e82 | 3529 | |
8318d78a JB |
3530 | bss = ieee80211_rx_bss_add(dev, bssid, |
3531 | local->hw.conf.channel->center_freq, | |
cffdd30d | 3532 | sdata->u.sta.ssid, sdata->u.sta.ssid_len); |
f0706e82 JB |
3533 | if (!bss) |
3534 | return -ENOMEM; | |
3535 | ||
8318d78a JB |
3536 | bss->band = local->hw.conf.channel->band; |
3537 | sband = local->hw.wiphy->bands[bss->band]; | |
f0706e82 JB |
3538 | |
3539 | if (local->hw.conf.beacon_int == 0) | |
f709fc69 | 3540 | local->hw.conf.beacon_int = 10000; |
f0706e82 | 3541 | bss->beacon_int = local->hw.conf.beacon_int; |
f0706e82 JB |
3542 | bss->last_update = jiffies; |
3543 | bss->capability = WLAN_CAPABILITY_IBSS; | |
988c0f72 JB |
3544 | |
3545 | if (sdata->default_key) | |
f0706e82 | 3546 | bss->capability |= WLAN_CAPABILITY_PRIVACY; |
988c0f72 | 3547 | else |
f0706e82 | 3548 | sdata->drop_unencrypted = 0; |
988c0f72 | 3549 | |
8318d78a | 3550 | bss->supp_rates_len = sband->n_bitrates; |
f0706e82 | 3551 | pos = bss->supp_rates; |
8318d78a JB |
3552 | for (i = 0; i < sband->n_bitrates; i++) { |
3553 | int rate = sband->bitrates[i].bitrate; | |
f0706e82 JB |
3554 | *pos++ = (u8) (rate / 5); |
3555 | } | |
3556 | ||
3557 | return ieee80211_sta_join_ibss(dev, ifsta, bss); | |
3558 | } | |
3559 | ||
3560 | ||
3561 | static int ieee80211_sta_find_ibss(struct net_device *dev, | |
3562 | struct ieee80211_if_sta *ifsta) | |
3563 | { | |
3564 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3565 | struct ieee80211_sta_bss *bss; | |
3566 | int found = 0; | |
3567 | u8 bssid[ETH_ALEN]; | |
3568 | int active_ibss; | |
0795af57 JP |
3569 | DECLARE_MAC_BUF(mac); |
3570 | DECLARE_MAC_BUF(mac2); | |
f0706e82 JB |
3571 | |
3572 | if (ifsta->ssid_len == 0) | |
3573 | return -EINVAL; | |
3574 | ||
3575 | active_ibss = ieee80211_sta_active_ibss(dev); | |
3576 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
3577 | printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n", | |
3578 | dev->name, active_ibss); | |
3579 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ | |
3580 | spin_lock_bh(&local->sta_bss_lock); | |
3581 | list_for_each_entry(bss, &local->sta_bss_list, list) { | |
3582 | if (ifsta->ssid_len != bss->ssid_len || | |
3583 | memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0 | |
3584 | || !(bss->capability & WLAN_CAPABILITY_IBSS)) | |
3585 | continue; | |
3586 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0795af57 JP |
3587 | printk(KERN_DEBUG " bssid=%s found\n", |
3588 | print_mac(mac, bss->bssid)); | |
f0706e82 JB |
3589 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ |
3590 | memcpy(bssid, bss->bssid, ETH_ALEN); | |
3591 | found = 1; | |
3592 | if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0) | |
3593 | break; | |
3594 | } | |
3595 | spin_unlock_bh(&local->sta_bss_lock); | |
3596 | ||
3597 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
0795af57 JP |
3598 | printk(KERN_DEBUG " sta_find_ibss: selected %s current " |
3599 | "%s\n", print_mac(mac, bssid), print_mac(mac2, ifsta->bssid)); | |
f0706e82 JB |
3600 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ |
3601 | if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0 && | |
8318d78a JB |
3602 | (bss = ieee80211_rx_bss_get(dev, bssid, |
3603 | local->hw.conf.channel->center_freq, | |
cffdd30d | 3604 | ifsta->ssid, ifsta->ssid_len))) { |
0795af57 | 3605 | printk(KERN_DEBUG "%s: Selected IBSS BSSID %s" |
f0706e82 | 3606 | " based on configured SSID\n", |
0795af57 | 3607 | dev->name, print_mac(mac, bssid)); |
f0706e82 JB |
3608 | return ieee80211_sta_join_ibss(dev, ifsta, bss); |
3609 | } | |
3610 | #ifdef CONFIG_MAC80211_IBSS_DEBUG | |
3611 | printk(KERN_DEBUG " did not try to join ibss\n"); | |
3612 | #endif /* CONFIG_MAC80211_IBSS_DEBUG */ | |
3613 | ||
3614 | /* Selected IBSS not found in current scan results - try to scan */ | |
3615 | if (ifsta->state == IEEE80211_IBSS_JOINED && | |
3616 | !ieee80211_sta_active_ibss(dev)) { | |
3617 | mod_timer(&ifsta->timer, jiffies + | |
3618 | IEEE80211_IBSS_MERGE_INTERVAL); | |
3619 | } else if (time_after(jiffies, local->last_scan_completed + | |
3620 | IEEE80211_SCAN_INTERVAL)) { | |
3621 | printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to " | |
3622 | "join\n", dev->name); | |
3623 | return ieee80211_sta_req_scan(dev, ifsta->ssid, | |
3624 | ifsta->ssid_len); | |
3625 | } else if (ifsta->state != IEEE80211_IBSS_JOINED) { | |
3626 | int interval = IEEE80211_SCAN_INTERVAL; | |
3627 | ||
3628 | if (time_after(jiffies, ifsta->ibss_join_req + | |
3629 | IEEE80211_IBSS_JOIN_TIMEOUT)) { | |
d6f2da5b | 3630 | if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) && |
8318d78a JB |
3631 | (!(local->oper_channel->flags & |
3632 | IEEE80211_CHAN_NO_IBSS))) | |
f0706e82 | 3633 | return ieee80211_sta_create_ibss(dev, ifsta); |
d6f2da5b | 3634 | if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) { |
8318d78a JB |
3635 | printk(KERN_DEBUG "%s: IBSS not allowed on" |
3636 | " %d MHz\n", dev->name, | |
3637 | local->hw.conf.channel->center_freq); | |
f0706e82 JB |
3638 | } |
3639 | ||
3640 | /* No IBSS found - decrease scan interval and continue | |
3641 | * scanning. */ | |
3642 | interval = IEEE80211_SCAN_INTERVAL_SLOW; | |
3643 | } | |
3644 | ||
3645 | ifsta->state = IEEE80211_IBSS_SEARCH; | |
3646 | mod_timer(&ifsta->timer, jiffies + interval); | |
3647 | return 0; | |
3648 | } | |
3649 | ||
3650 | return 0; | |
3651 | } | |
3652 | ||
3653 | ||
3654 | int ieee80211_sta_set_ssid(struct net_device *dev, char *ssid, size_t len) | |
3655 | { | |
8318d78a | 3656 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
f0706e82 | 3657 | struct ieee80211_if_sta *ifsta; |
f0706e82 JB |
3658 | |
3659 | if (len > IEEE80211_MAX_SSID_LEN) | |
3660 | return -EINVAL; | |
3661 | ||
f0706e82 JB |
3662 | ifsta = &sdata->u.sta; |
3663 | ||
3664 | if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) | |
d6f2da5b | 3665 | ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET; |
f0706e82 JB |
3666 | memcpy(ifsta->ssid, ssid, len); |
3667 | memset(ifsta->ssid + len, 0, IEEE80211_MAX_SSID_LEN - len); | |
3668 | ifsta->ssid_len = len; | |
3669 | ||
d6f2da5b JS |
3670 | if (len) |
3671 | ifsta->flags |= IEEE80211_STA_SSID_SET; | |
3672 | else | |
3673 | ifsta->flags &= ~IEEE80211_STA_SSID_SET; | |
51fb61e7 | 3674 | if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && |
d6f2da5b | 3675 | !(ifsta->flags & IEEE80211_STA_BSSID_SET)) { |
f0706e82 JB |
3676 | ifsta->ibss_join_req = jiffies; |
3677 | ifsta->state = IEEE80211_IBSS_SEARCH; | |
3678 | return ieee80211_sta_find_ibss(dev, ifsta); | |
3679 | } | |
3680 | return 0; | |
3681 | } | |
3682 | ||
3683 | ||
3684 | int ieee80211_sta_get_ssid(struct net_device *dev, char *ssid, size_t *len) | |
3685 | { | |
3686 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3687 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
3688 | memcpy(ssid, ifsta->ssid, ifsta->ssid_len); | |
3689 | *len = ifsta->ssid_len; | |
3690 | return 0; | |
3691 | } | |
3692 | ||
3693 | ||
3694 | int ieee80211_sta_set_bssid(struct net_device *dev, u8 *bssid) | |
3695 | { | |
3696 | struct ieee80211_sub_if_data *sdata; | |
3697 | struct ieee80211_if_sta *ifsta; | |
3698 | int res; | |
3699 | ||
3700 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
3701 | ifsta = &sdata->u.sta; | |
3702 | ||
3703 | if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) { | |
3704 | memcpy(ifsta->bssid, bssid, ETH_ALEN); | |
3705 | res = ieee80211_if_config(dev); | |
3706 | if (res) { | |
3707 | printk(KERN_DEBUG "%s: Failed to config new BSSID to " | |
3708 | "the low-level driver\n", dev->name); | |
3709 | return res; | |
3710 | } | |
3711 | } | |
3712 | ||
d6f2da5b JS |
3713 | if (is_valid_ether_addr(bssid)) |
3714 | ifsta->flags |= IEEE80211_STA_BSSID_SET; | |
f0706e82 | 3715 | else |
d6f2da5b JS |
3716 | ifsta->flags &= ~IEEE80211_STA_BSSID_SET; |
3717 | ||
f0706e82 JB |
3718 | return 0; |
3719 | } | |
3720 | ||
3721 | ||
3722 | static void ieee80211_send_nullfunc(struct ieee80211_local *local, | |
3723 | struct ieee80211_sub_if_data *sdata, | |
3724 | int powersave) | |
3725 | { | |
3726 | struct sk_buff *skb; | |
3727 | struct ieee80211_hdr *nullfunc; | |
3728 | u16 fc; | |
3729 | ||
3730 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); | |
3731 | if (!skb) { | |
3732 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " | |
3733 | "frame\n", sdata->dev->name); | |
3734 | return; | |
3735 | } | |
3736 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
3737 | ||
3738 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); | |
3739 | memset(nullfunc, 0, 24); | |
3740 | fc = IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | | |
3741 | IEEE80211_FCTL_TODS; | |
3742 | if (powersave) | |
3743 | fc |= IEEE80211_FCTL_PM; | |
3744 | nullfunc->frame_control = cpu_to_le16(fc); | |
3745 | memcpy(nullfunc->addr1, sdata->u.sta.bssid, ETH_ALEN); | |
3746 | memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN); | |
3747 | memcpy(nullfunc->addr3, sdata->u.sta.bssid, ETH_ALEN); | |
3748 | ||
3749 | ieee80211_sta_tx(sdata->dev, skb, 0); | |
3750 | } | |
3751 | ||
3752 | ||
69d3b6f4 JB |
3753 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
3754 | { | |
3755 | if (sdata->vif.type == IEEE80211_IF_TYPE_STA || | |
3756 | ieee80211_vif_is_mesh(&sdata->vif)) | |
3757 | ieee80211_sta_timer((unsigned long)sdata); | |
3758 | } | |
3759 | ||
f0706e82 JB |
3760 | void ieee80211_scan_completed(struct ieee80211_hw *hw) |
3761 | { | |
3762 | struct ieee80211_local *local = hw_to_local(hw); | |
3763 | struct net_device *dev = local->scan_dev; | |
3764 | struct ieee80211_sub_if_data *sdata; | |
3765 | union iwreq_data wrqu; | |
3766 | ||
3767 | local->last_scan_completed = jiffies; | |
ece8eddd ZY |
3768 | memset(&wrqu, 0, sizeof(wrqu)); |
3769 | wireless_send_event(dev, SIOCGIWSCAN, &wrqu, NULL); | |
f0706e82 | 3770 | |
ece8eddd ZY |
3771 | if (local->sta_hw_scanning) { |
3772 | local->sta_hw_scanning = 0; | |
675ef586 MA |
3773 | if (ieee80211_hw_config(local)) |
3774 | printk(KERN_DEBUG "%s: failed to restore operational " | |
3775 | "channel after scan\n", dev->name); | |
69d3b6f4 JB |
3776 | /* Restart STA timer for HW scan case */ |
3777 | rcu_read_lock(); | |
3778 | list_for_each_entry_rcu(sdata, &local->interfaces, list) | |
3779 | ieee80211_restart_sta_timer(sdata); | |
3780 | rcu_read_unlock(); | |
3781 | ||
ece8eddd ZY |
3782 | goto done; |
3783 | } | |
3784 | ||
3785 | local->sta_sw_scanning = 0; | |
f0706e82 | 3786 | if (ieee80211_hw_config(local)) |
4b50e388 | 3787 | printk(KERN_DEBUG "%s: failed to restore operational " |
f0706e82 JB |
3788 | "channel after scan\n", dev->name); |
3789 | ||
4150c572 JB |
3790 | |
3791 | netif_tx_lock_bh(local->mdev); | |
3792 | local->filter_flags &= ~FIF_BCN_PRBRESP_PROMISC; | |
3793 | local->ops->configure_filter(local_to_hw(local), | |
3794 | FIF_BCN_PRBRESP_PROMISC, | |
3795 | &local->filter_flags, | |
3796 | local->mdev->mc_count, | |
3797 | local->mdev->mc_list); | |
3798 | ||
3799 | netif_tx_unlock_bh(local->mdev); | |
f0706e82 | 3800 | |
79010420 JB |
3801 | rcu_read_lock(); |
3802 | list_for_each_entry_rcu(sdata, &local->interfaces, list) { | |
14042cbe MN |
3803 | |
3804 | /* No need to wake the master device. */ | |
3805 | if (sdata->dev == local->mdev) | |
3806 | continue; | |
3807 | ||
69d3b6f4 JB |
3808 | /* Tell AP we're back */ |
3809 | if (sdata->vif.type == IEEE80211_IF_TYPE_STA && | |
3810 | sdata->u.sta.flags & IEEE80211_STA_ASSOCIATED) | |
3811 | ieee80211_send_nullfunc(local, sdata, 0); | |
14042cbe | 3812 | |
69d3b6f4 | 3813 | ieee80211_restart_sta_timer(sdata); |
f709fc69 | 3814 | |
f0706e82 JB |
3815 | netif_wake_queue(sdata->dev); |
3816 | } | |
79010420 | 3817 | rcu_read_unlock(); |
f0706e82 | 3818 | |
ece8eddd | 3819 | done: |
f0706e82 | 3820 | sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
51fb61e7 | 3821 | if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) { |
f0706e82 | 3822 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; |
d6f2da5b | 3823 | if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) || |
f0706e82 JB |
3824 | (!ifsta->state == IEEE80211_IBSS_JOINED && |
3825 | !ieee80211_sta_active_ibss(dev))) | |
3826 | ieee80211_sta_find_ibss(dev, ifsta); | |
3827 | } | |
3828 | } | |
3829 | EXPORT_SYMBOL(ieee80211_scan_completed); | |
3830 | ||
3831 | void ieee80211_sta_scan_work(struct work_struct *work) | |
3832 | { | |
3833 | struct ieee80211_local *local = | |
3834 | container_of(work, struct ieee80211_local, scan_work.work); | |
3835 | struct net_device *dev = local->scan_dev; | |
3836 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
8318d78a | 3837 | struct ieee80211_supported_band *sband; |
f0706e82 JB |
3838 | struct ieee80211_channel *chan; |
3839 | int skip; | |
3840 | unsigned long next_delay = 0; | |
3841 | ||
ece8eddd | 3842 | if (!local->sta_sw_scanning) |
f0706e82 JB |
3843 | return; |
3844 | ||
3845 | switch (local->scan_state) { | |
3846 | case SCAN_SET_CHANNEL: | |
69d464d5 JB |
3847 | /* |
3848 | * Get current scan band. scan_band may be IEEE80211_NUM_BANDS | |
3849 | * after we successfully scanned the last channel of the last | |
3850 | * band (and the last band is supported by the hw) | |
3851 | */ | |
8318d78a JB |
3852 | if (local->scan_band < IEEE80211_NUM_BANDS) |
3853 | sband = local->hw.wiphy->bands[local->scan_band]; | |
3854 | else | |
3855 | sband = NULL; | |
3856 | ||
69d464d5 JB |
3857 | /* |
3858 | * If we are at an unsupported band and have more bands | |
3859 | * left to scan, advance to the next supported one. | |
3860 | */ | |
3861 | while (!sband && local->scan_band < IEEE80211_NUM_BANDS - 1) { | |
8318d78a JB |
3862 | local->scan_band++; |
3863 | sband = local->hw.wiphy->bands[local->scan_band]; | |
3864 | local->scan_channel_idx = 0; | |
3865 | } | |
3866 | ||
69d464d5 JB |
3867 | /* if no more bands/channels left, complete scan */ |
3868 | if (!sband || local->scan_channel_idx >= sband->n_channels) { | |
f0706e82 JB |
3869 | ieee80211_scan_completed(local_to_hw(local)); |
3870 | return; | |
3871 | } | |
8318d78a JB |
3872 | skip = 0; |
3873 | chan = &sband->channels[local->scan_channel_idx]; | |
3874 | ||
3875 | if (chan->flags & IEEE80211_CHAN_DISABLED || | |
51fb61e7 | 3876 | (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && |
8318d78a | 3877 | chan->flags & IEEE80211_CHAN_NO_IBSS)) |
f0706e82 JB |
3878 | skip = 1; |
3879 | ||
3880 | if (!skip) { | |
f0706e82 JB |
3881 | local->scan_channel = chan; |
3882 | if (ieee80211_hw_config(local)) { | |
8318d78a JB |
3883 | printk(KERN_DEBUG "%s: failed to set freq to " |
3884 | "%d MHz for scan\n", dev->name, | |
3885 | chan->center_freq); | |
f0706e82 JB |
3886 | skip = 1; |
3887 | } | |
3888 | } | |
3889 | ||
69d464d5 | 3890 | /* advance state machine to next channel/band */ |
f0706e82 | 3891 | local->scan_channel_idx++; |
8318d78a | 3892 | if (local->scan_channel_idx >= sband->n_channels) { |
69d464d5 JB |
3893 | /* |
3894 | * scan_band may end up == IEEE80211_NUM_BANDS, but | |
3895 | * we'll catch that case above and complete the scan | |
3896 | * if that is the case. | |
3897 | */ | |
8318d78a JB |
3898 | local->scan_band++; |
3899 | local->scan_channel_idx = 0; | |
f0706e82 JB |
3900 | } |
3901 | ||
3902 | if (skip) | |
3903 | break; | |
3904 | ||
3905 | next_delay = IEEE80211_PROBE_DELAY + | |
3906 | usecs_to_jiffies(local->hw.channel_change_time); | |
3907 | local->scan_state = SCAN_SEND_PROBE; | |
3908 | break; | |
3909 | case SCAN_SEND_PROBE: | |
8318d78a | 3910 | next_delay = IEEE80211_PASSIVE_CHANNEL_TIME; |
f0706e82 | 3911 | local->scan_state = SCAN_SET_CHANNEL; |
8318d78a JB |
3912 | |
3913 | if (local->scan_channel->flags & IEEE80211_CHAN_PASSIVE_SCAN) | |
3914 | break; | |
3915 | ieee80211_send_probe_req(dev, NULL, local->scan_ssid, | |
3916 | local->scan_ssid_len); | |
3917 | next_delay = IEEE80211_CHANNEL_TIME; | |
f0706e82 JB |
3918 | break; |
3919 | } | |
3920 | ||
ece8eddd | 3921 | if (local->sta_sw_scanning) |
f0706e82 JB |
3922 | queue_delayed_work(local->hw.workqueue, &local->scan_work, |
3923 | next_delay); | |
3924 | } | |
3925 | ||
3926 | ||
3927 | static int ieee80211_sta_start_scan(struct net_device *dev, | |
3928 | u8 *ssid, size_t ssid_len) | |
3929 | { | |
3930 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
3931 | struct ieee80211_sub_if_data *sdata; | |
3932 | ||
3933 | if (ssid_len > IEEE80211_MAX_SSID_LEN) | |
3934 | return -EINVAL; | |
3935 | ||
3936 | /* MLME-SCAN.request (page 118) page 144 (11.1.3.1) | |
3937 | * BSSType: INFRASTRUCTURE, INDEPENDENT, ANY_BSS | |
3938 | * BSSID: MACAddress | |
3939 | * SSID | |
3940 | * ScanType: ACTIVE, PASSIVE | |
3941 | * ProbeDelay: delay (in microseconds) to be used prior to transmitting | |
3942 | * a Probe frame during active scanning | |
3943 | * ChannelList | |
3944 | * MinChannelTime (>= ProbeDelay), in TU | |
3945 | * MaxChannelTime: (>= MinChannelTime), in TU | |
3946 | */ | |
3947 | ||
3948 | /* MLME-SCAN.confirm | |
3949 | * BSSDescriptionSet | |
3950 | * ResultCode: SUCCESS, INVALID_PARAMETERS | |
3951 | */ | |
3952 | ||
ece8eddd | 3953 | if (local->sta_sw_scanning || local->sta_hw_scanning) { |
f0706e82 JB |
3954 | if (local->scan_dev == dev) |
3955 | return 0; | |
3956 | return -EBUSY; | |
3957 | } | |
3958 | ||
3959 | if (local->ops->hw_scan) { | |
3960 | int rc = local->ops->hw_scan(local_to_hw(local), | |
ece8eddd | 3961 | ssid, ssid_len); |
f0706e82 | 3962 | if (!rc) { |
ece8eddd | 3963 | local->sta_hw_scanning = 1; |
f0706e82 JB |
3964 | local->scan_dev = dev; |
3965 | } | |
3966 | return rc; | |
3967 | } | |
3968 | ||
ece8eddd | 3969 | local->sta_sw_scanning = 1; |
f0706e82 | 3970 | |
79010420 JB |
3971 | rcu_read_lock(); |
3972 | list_for_each_entry_rcu(sdata, &local->interfaces, list) { | |
14042cbe MN |
3973 | |
3974 | /* Don't stop the master interface, otherwise we can't transmit | |
3975 | * probes! */ | |
3976 | if (sdata->dev == local->mdev) | |
3977 | continue; | |
3978 | ||
f0706e82 | 3979 | netif_stop_queue(sdata->dev); |
51fb61e7 | 3980 | if (sdata->vif.type == IEEE80211_IF_TYPE_STA && |
d6f2da5b | 3981 | (sdata->u.sta.flags & IEEE80211_STA_ASSOCIATED)) |
f0706e82 JB |
3982 | ieee80211_send_nullfunc(local, sdata, 1); |
3983 | } | |
79010420 | 3984 | rcu_read_unlock(); |
f0706e82 JB |
3985 | |
3986 | if (ssid) { | |
3987 | local->scan_ssid_len = ssid_len; | |
3988 | memcpy(local->scan_ssid, ssid, ssid_len); | |
3989 | } else | |
3990 | local->scan_ssid_len = 0; | |
3991 | local->scan_state = SCAN_SET_CHANNEL; | |
f0706e82 | 3992 | local->scan_channel_idx = 0; |
8318d78a | 3993 | local->scan_band = IEEE80211_BAND_2GHZ; |
f0706e82 JB |
3994 | local->scan_dev = dev; |
3995 | ||
4150c572 JB |
3996 | netif_tx_lock_bh(local->mdev); |
3997 | local->filter_flags |= FIF_BCN_PRBRESP_PROMISC; | |
3998 | local->ops->configure_filter(local_to_hw(local), | |
3999 | FIF_BCN_PRBRESP_PROMISC, | |
4000 | &local->filter_flags, | |
4001 | local->mdev->mc_count, | |
4002 | local->mdev->mc_list); | |
4003 | netif_tx_unlock_bh(local->mdev); | |
f0706e82 JB |
4004 | |
4005 | /* TODO: start scan as soon as all nullfunc frames are ACKed */ | |
4006 | queue_delayed_work(local->hw.workqueue, &local->scan_work, | |
4007 | IEEE80211_CHANNEL_TIME); | |
4008 | ||
4009 | return 0; | |
4010 | } | |
4011 | ||
4012 | ||
4013 | int ieee80211_sta_req_scan(struct net_device *dev, u8 *ssid, size_t ssid_len) | |
4014 | { | |
4015 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
4016 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
4017 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
4018 | ||
51fb61e7 | 4019 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA) |
f0706e82 JB |
4020 | return ieee80211_sta_start_scan(dev, ssid, ssid_len); |
4021 | ||
ece8eddd | 4022 | if (local->sta_sw_scanning || local->sta_hw_scanning) { |
f0706e82 JB |
4023 | if (local->scan_dev == dev) |
4024 | return 0; | |
4025 | return -EBUSY; | |
4026 | } | |
4027 | ||
a0af5f14 HS |
4028 | ifsta->scan_ssid_len = ssid_len; |
4029 | if (ssid_len) | |
4030 | memcpy(ifsta->scan_ssid, ssid, ssid_len); | |
f0706e82 JB |
4031 | set_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request); |
4032 | queue_work(local->hw.workqueue, &ifsta->work); | |
4033 | return 0; | |
4034 | } | |
4035 | ||
4036 | static char * | |
4037 | ieee80211_sta_scan_result(struct net_device *dev, | |
4038 | struct ieee80211_sta_bss *bss, | |
4039 | char *current_ev, char *end_buf) | |
4040 | { | |
4041 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
4042 | struct iw_event iwe; | |
4043 | ||
4044 | if (time_after(jiffies, | |
4045 | bss->last_update + IEEE80211_SCAN_RESULT_EXPIRE)) | |
4046 | return current_ev; | |
4047 | ||
f0706e82 JB |
4048 | memset(&iwe, 0, sizeof(iwe)); |
4049 | iwe.cmd = SIOCGIWAP; | |
4050 | iwe.u.ap_addr.sa_family = ARPHRD_ETHER; | |
4051 | memcpy(iwe.u.ap_addr.sa_data, bss->bssid, ETH_ALEN); | |
4052 | current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, | |
4053 | IW_EV_ADDR_LEN); | |
4054 | ||
4055 | memset(&iwe, 0, sizeof(iwe)); | |
4056 | iwe.cmd = SIOCGIWESSID; | |
902acc78 JB |
4057 | if (bss_mesh_cfg(bss)) { |
4058 | iwe.u.data.length = bss_mesh_id_len(bss); | |
f709fc69 LCC |
4059 | iwe.u.data.flags = 1; |
4060 | current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, | |
902acc78 | 4061 | bss_mesh_id(bss)); |
f709fc69 LCC |
4062 | } else { |
4063 | iwe.u.data.length = bss->ssid_len; | |
4064 | iwe.u.data.flags = 1; | |
4065 | current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, | |
4066 | bss->ssid); | |
4067 | } | |
f0706e82 | 4068 | |
1d1b5359 LCC |
4069 | if (bss->capability & (WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_IBSS) |
4070 | || bss_mesh_cfg(bss)) { | |
f0706e82 JB |
4071 | memset(&iwe, 0, sizeof(iwe)); |
4072 | iwe.cmd = SIOCGIWMODE; | |
902acc78 | 4073 | if (bss_mesh_cfg(bss)) |
f709fc69 LCC |
4074 | iwe.u.mode = IW_MODE_MESH; |
4075 | else if (bss->capability & WLAN_CAPABILITY_ESS) | |
f0706e82 JB |
4076 | iwe.u.mode = IW_MODE_MASTER; |
4077 | else | |
4078 | iwe.u.mode = IW_MODE_ADHOC; | |
4079 | current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, | |
4080 | IW_EV_UINT_LEN); | |
4081 | } | |
4082 | ||
4083 | memset(&iwe, 0, sizeof(iwe)); | |
4084 | iwe.cmd = SIOCGIWFREQ; | |
8318d78a JB |
4085 | iwe.u.freq.m = bss->freq; |
4086 | iwe.u.freq.e = 6; | |
f0706e82 JB |
4087 | current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, |
4088 | IW_EV_FREQ_LEN); | |
8318d78a JB |
4089 | |
4090 | memset(&iwe, 0, sizeof(iwe)); | |
4091 | iwe.cmd = SIOCGIWFREQ; | |
4092 | iwe.u.freq.m = ieee80211_frequency_to_channel(bss->freq); | |
4093 | iwe.u.freq.e = 0; | |
f0706e82 JB |
4094 | current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, |
4095 | IW_EV_FREQ_LEN); | |
4096 | ||
4097 | memset(&iwe, 0, sizeof(iwe)); | |
4098 | iwe.cmd = IWEVQUAL; | |
566bfe5a BR |
4099 | iwe.u.qual.qual = bss->qual; |
4100 | iwe.u.qual.level = bss->signal; | |
f0706e82 JB |
4101 | iwe.u.qual.noise = bss->noise; |
4102 | iwe.u.qual.updated = local->wstats_flags; | |
4103 | current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, | |
4104 | IW_EV_QUAL_LEN); | |
4105 | ||
4106 | memset(&iwe, 0, sizeof(iwe)); | |
4107 | iwe.cmd = SIOCGIWENCODE; | |
4108 | if (bss->capability & WLAN_CAPABILITY_PRIVACY) | |
4109 | iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY; | |
4110 | else | |
4111 | iwe.u.data.flags = IW_ENCODE_DISABLED; | |
4112 | iwe.u.data.length = 0; | |
4113 | current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, ""); | |
4114 | ||
4115 | if (bss && bss->wpa_ie) { | |
4116 | memset(&iwe, 0, sizeof(iwe)); | |
4117 | iwe.cmd = IWEVGENIE; | |
4118 | iwe.u.data.length = bss->wpa_ie_len; | |
4119 | current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, | |
4120 | bss->wpa_ie); | |
4121 | } | |
4122 | ||
4123 | if (bss && bss->rsn_ie) { | |
4124 | memset(&iwe, 0, sizeof(iwe)); | |
4125 | iwe.cmd = IWEVGENIE; | |
4126 | iwe.u.data.length = bss->rsn_ie_len; | |
4127 | current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, | |
4128 | bss->rsn_ie); | |
4129 | } | |
4130 | ||
4131 | if (bss && bss->supp_rates_len > 0) { | |
4132 | /* display all supported rates in readable format */ | |
4133 | char *p = current_ev + IW_EV_LCP_LEN; | |
4134 | int i; | |
4135 | ||
4136 | memset(&iwe, 0, sizeof(iwe)); | |
4137 | iwe.cmd = SIOCGIWRATE; | |
4138 | /* Those two flags are ignored... */ | |
4139 | iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0; | |
4140 | ||
4141 | for (i = 0; i < bss->supp_rates_len; i++) { | |
4142 | iwe.u.bitrate.value = ((bss->supp_rates[i] & | |
4143 | 0x7f) * 500000); | |
4144 | p = iwe_stream_add_value(current_ev, p, | |
4145 | end_buf, &iwe, IW_EV_PARAM_LEN); | |
4146 | } | |
4147 | current_ev = p; | |
4148 | } | |
4149 | ||
4150 | if (bss) { | |
4151 | char *buf; | |
4152 | buf = kmalloc(30, GFP_ATOMIC); | |
4153 | if (buf) { | |
4154 | memset(&iwe, 0, sizeof(iwe)); | |
4155 | iwe.cmd = IWEVCUSTOM; | |
4156 | sprintf(buf, "tsf=%016llx", (unsigned long long)(bss->timestamp)); | |
4157 | iwe.u.data.length = strlen(buf); | |
4158 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4159 | &iwe, buf); | |
4160 | kfree(buf); | |
4161 | } | |
4162 | } | |
4163 | ||
902acc78 | 4164 | if (bss_mesh_cfg(bss)) { |
f709fc69 | 4165 | char *buf; |
24736701 | 4166 | u8 *cfg = bss_mesh_cfg(bss); |
4f5d4c4d | 4167 | buf = kmalloc(50, GFP_ATOMIC); |
f709fc69 LCC |
4168 | if (buf) { |
4169 | memset(&iwe, 0, sizeof(iwe)); | |
4170 | iwe.cmd = IWEVCUSTOM; | |
24736701 | 4171 | sprintf(buf, "Mesh network (version %d)", cfg[0]); |
4f5d4c4d LCC |
4172 | iwe.u.data.length = strlen(buf); |
4173 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4174 | &iwe, buf); | |
4175 | sprintf(buf, "Path Selection Protocol ID: " | |
24736701 JL |
4176 | "0x%02X%02X%02X%02X", cfg[1], cfg[2], cfg[3], |
4177 | cfg[4]); | |
4f5d4c4d LCC |
4178 | iwe.u.data.length = strlen(buf); |
4179 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4180 | &iwe, buf); | |
4181 | sprintf(buf, "Path Selection Metric ID: " | |
24736701 JL |
4182 | "0x%02X%02X%02X%02X", cfg[5], cfg[6], cfg[7], |
4183 | cfg[8]); | |
4f5d4c4d LCC |
4184 | iwe.u.data.length = strlen(buf); |
4185 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4186 | &iwe, buf); | |
4187 | sprintf(buf, "Congestion Control Mode ID: " | |
24736701 JL |
4188 | "0x%02X%02X%02X%02X", cfg[9], cfg[10], |
4189 | cfg[11], cfg[12]); | |
4f5d4c4d LCC |
4190 | iwe.u.data.length = strlen(buf); |
4191 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4192 | &iwe, buf); | |
4193 | sprintf(buf, "Channel Precedence: " | |
24736701 JL |
4194 | "0x%02X%02X%02X%02X", cfg[13], cfg[14], |
4195 | cfg[15], cfg[16]); | |
f709fc69 LCC |
4196 | iwe.u.data.length = strlen(buf); |
4197 | current_ev = iwe_stream_add_point(current_ev, end_buf, | |
4198 | &iwe, buf); | |
4199 | kfree(buf); | |
4200 | } | |
4201 | } | |
4202 | ||
f0706e82 JB |
4203 | return current_ev; |
4204 | } | |
4205 | ||
4206 | ||
4207 | int ieee80211_sta_scan_results(struct net_device *dev, char *buf, size_t len) | |
4208 | { | |
4209 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
4210 | char *current_ev = buf; | |
4211 | char *end_buf = buf + len; | |
4212 | struct ieee80211_sta_bss *bss; | |
4213 | ||
4214 | spin_lock_bh(&local->sta_bss_lock); | |
4215 | list_for_each_entry(bss, &local->sta_bss_list, list) { | |
4216 | if (buf + len - current_ev <= IW_EV_ADDR_LEN) { | |
4217 | spin_unlock_bh(&local->sta_bss_lock); | |
4218 | return -E2BIG; | |
4219 | } | |
4220 | current_ev = ieee80211_sta_scan_result(dev, bss, current_ev, | |
4221 | end_buf); | |
4222 | } | |
4223 | spin_unlock_bh(&local->sta_bss_lock); | |
4224 | return current_ev - buf; | |
4225 | } | |
4226 | ||
4227 | ||
4228 | int ieee80211_sta_set_extra_ie(struct net_device *dev, char *ie, size_t len) | |
4229 | { | |
4230 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
4231 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
988c0f72 | 4232 | |
f0706e82 JB |
4233 | kfree(ifsta->extra_ie); |
4234 | if (len == 0) { | |
4235 | ifsta->extra_ie = NULL; | |
4236 | ifsta->extra_ie_len = 0; | |
4237 | return 0; | |
4238 | } | |
4239 | ifsta->extra_ie = kmalloc(len, GFP_KERNEL); | |
4240 | if (!ifsta->extra_ie) { | |
4241 | ifsta->extra_ie_len = 0; | |
4242 | return -ENOMEM; | |
4243 | } | |
4244 | memcpy(ifsta->extra_ie, ie, len); | |
4245 | ifsta->extra_ie_len = len; | |
4246 | return 0; | |
4247 | } | |
4248 | ||
4249 | ||
988c0f72 JB |
4250 | struct sta_info *ieee80211_ibss_add_sta(struct net_device *dev, |
4251 | struct sk_buff *skb, u8 *bssid, | |
4252 | u8 *addr) | |
f0706e82 JB |
4253 | { |
4254 | struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); | |
4255 | struct sta_info *sta; | |
91fa558b | 4256 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); |
0795af57 | 4257 | DECLARE_MAC_BUF(mac); |
f0706e82 JB |
4258 | |
4259 | /* TODO: Could consider removing the least recently used entry and | |
4260 | * allow new one to be added. */ | |
4261 | if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) { | |
4262 | if (net_ratelimit()) { | |
4263 | printk(KERN_DEBUG "%s: No room for a new IBSS STA " | |
0795af57 | 4264 | "entry %s\n", dev->name, print_mac(mac, addr)); |
f0706e82 JB |
4265 | } |
4266 | return NULL; | |
4267 | } | |
4268 | ||
0795af57 | 4269 | printk(KERN_DEBUG "%s: Adding new IBSS station %s (dev=%s)\n", |
dd1cd4c6 | 4270 | wiphy_name(local->hw.wiphy), print_mac(mac, addr), dev->name); |
f0706e82 | 4271 | |
73651ee6 JB |
4272 | sta = sta_info_alloc(sdata, addr, GFP_ATOMIC); |
4273 | if (!sta) | |
f0706e82 JB |
4274 | return NULL; |
4275 | ||
07346f81 | 4276 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); |
238814fd | 4277 | |
8318d78a JB |
4278 | sta->supp_rates[local->hw.conf.channel->band] = |
4279 | sdata->u.sta.supp_rates_bits[local->hw.conf.channel->band]; | |
f0706e82 JB |
4280 | |
4281 | rate_control_rate_init(sta, local); | |
4282 | ||
93e5deb1 | 4283 | if (sta_info_insert(sta)) |
73651ee6 | 4284 | return NULL; |
73651ee6 | 4285 | |
d0709a65 | 4286 | return sta; |
f0706e82 JB |
4287 | } |
4288 | ||
4289 | ||
4290 | int ieee80211_sta_deauthenticate(struct net_device *dev, u16 reason) | |
4291 | { | |
4292 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
4293 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
4294 | ||
4295 | printk(KERN_DEBUG "%s: deauthenticate(reason=%d)\n", | |
4296 | dev->name, reason); | |
4297 | ||
51fb61e7 JB |
4298 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA && |
4299 | sdata->vif.type != IEEE80211_IF_TYPE_IBSS) | |
f0706e82 JB |
4300 | return -EINVAL; |
4301 | ||
4302 | ieee80211_send_deauth(dev, ifsta, reason); | |
4303 | ieee80211_set_disassoc(dev, ifsta, 1); | |
4304 | return 0; | |
4305 | } | |
4306 | ||
4307 | ||
4308 | int ieee80211_sta_disassociate(struct net_device *dev, u16 reason) | |
4309 | { | |
4310 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
4311 | struct ieee80211_if_sta *ifsta = &sdata->u.sta; | |
4312 | ||
4313 | printk(KERN_DEBUG "%s: disassociate(reason=%d)\n", | |
4314 | dev->name, reason); | |
4315 | ||
51fb61e7 | 4316 | if (sdata->vif.type != IEEE80211_IF_TYPE_STA) |
f0706e82 JB |
4317 | return -EINVAL; |
4318 | ||
d6f2da5b | 4319 | if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED)) |
f0706e82 JB |
4320 | return -1; |
4321 | ||
4322 | ieee80211_send_disassoc(dev, ifsta, reason); | |
4323 | ieee80211_set_disassoc(dev, ifsta, 0); | |
4324 | return 0; | |
4325 | } | |
84363e6e MA |
4326 | |
4327 | void ieee80211_notify_mac(struct ieee80211_hw *hw, | |
4328 | enum ieee80211_notification_types notif_type) | |
4329 | { | |
4330 | struct ieee80211_local *local = hw_to_local(hw); | |
4331 | struct ieee80211_sub_if_data *sdata; | |
4332 | ||
4333 | switch (notif_type) { | |
4334 | case IEEE80211_NOTIFY_RE_ASSOC: | |
4335 | rcu_read_lock(); | |
4336 | list_for_each_entry_rcu(sdata, &local->interfaces, list) { | |
4337 | ||
4338 | if (sdata->vif.type == IEEE80211_IF_TYPE_STA) { | |
4339 | ieee80211_sta_req_auth(sdata->dev, | |
4340 | &sdata->u.sta); | |
4341 | } | |
4342 | ||
4343 | } | |
4344 | rcu_read_unlock(); | |
4345 | break; | |
4346 | } | |
4347 | } | |
4348 | EXPORT_SYMBOL(ieee80211_notify_mac); |