Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * BSS client mode implementation | |
5394af4d | 3 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> |
f0706e82 JB |
4 | * Copyright 2004, Instant802 Networks, Inc. |
5 | * Copyright 2005, Devicescape Software, Inc. | |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License version 2 as | |
11 | * published by the Free Software Foundation. | |
12 | */ | |
13 | ||
5b323edb | 14 | #include <linux/delay.h> |
f0706e82 JB |
15 | #include <linux/if_ether.h> |
16 | #include <linux/skbuff.h> | |
f0706e82 | 17 | #include <linux/if_arp.h> |
f0706e82 | 18 | #include <linux/etherdevice.h> |
d0709a65 | 19 | #include <linux/rtnetlink.h> |
10f644a4 | 20 | #include <linux/pm_qos_params.h> |
d91f36db | 21 | #include <linux/crc32.h> |
f0706e82 | 22 | #include <net/mac80211.h> |
472dbc45 | 23 | #include <asm/unaligned.h> |
60f8b39c | 24 | |
f0706e82 | 25 | #include "ieee80211_i.h" |
24487981 | 26 | #include "driver-ops.h" |
2c8dccc7 JB |
27 | #include "rate.h" |
28 | #include "led.h" | |
f0706e82 JB |
29 | |
30 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
31 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
32 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
33 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
a43abf29 | 34 | #define IEEE80211_MAX_PROBE_TRIES 5 |
b291ba11 JB |
35 | |
36 | /* | |
37 | * beacon loss detection timeout | |
38 | * XXX: should depend on beacon interval | |
39 | */ | |
40 | #define IEEE80211_BEACON_LOSS_TIME (2 * HZ) | |
41 | /* | |
42 | * Time the connection can be idle before we probe | |
43 | * it to see if we can still talk to the AP. | |
44 | */ | |
d1c5091f | 45 | #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ) |
b291ba11 JB |
46 | /* |
47 | * Time we wait for a probe response after sending | |
48 | * a probe request because of beacon loss or for | |
49 | * checking the connection still works. | |
50 | */ | |
d1c5091f | 51 | #define IEEE80211_PROBE_WAIT (HZ / 2) |
f0706e82 | 52 | |
5bb644a0 JB |
53 | #define TMR_RUNNING_TIMER 0 |
54 | #define TMR_RUNNING_CHANSW 1 | |
55 | ||
77fdaa12 JB |
56 | /* |
57 | * All cfg80211 functions have to be called outside a locked | |
58 | * section so that they can acquire a lock themselves... This | |
59 | * is much simpler than queuing up things in cfg80211, but we | |
60 | * do need some indirection for that here. | |
61 | */ | |
62 | enum rx_mgmt_action { | |
63 | /* no action required */ | |
64 | RX_MGMT_NONE, | |
65 | ||
66 | /* caller must call cfg80211_send_rx_auth() */ | |
67 | RX_MGMT_CFG80211_AUTH, | |
68 | ||
69 | /* caller must call cfg80211_send_rx_assoc() */ | |
70 | RX_MGMT_CFG80211_ASSOC, | |
71 | ||
72 | /* caller must call cfg80211_send_deauth() */ | |
73 | RX_MGMT_CFG80211_DEAUTH, | |
74 | ||
75 | /* caller must call cfg80211_send_disassoc() */ | |
76 | RX_MGMT_CFG80211_DISASSOC, | |
77 | ||
78 | /* caller must call cfg80211_auth_timeout() & free work */ | |
79 | RX_MGMT_CFG80211_AUTH_TO, | |
80 | ||
81 | /* caller must call cfg80211_assoc_timeout() & free work */ | |
82 | RX_MGMT_CFG80211_ASSOC_TO, | |
83 | }; | |
84 | ||
5484e237 | 85 | /* utils */ |
77fdaa12 JB |
86 | static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd) |
87 | { | |
88 | WARN_ON(!mutex_is_locked(&ifmgd->mtx)); | |
89 | } | |
90 | ||
ca386f31 JB |
91 | /* |
92 | * We can have multiple work items (and connection probing) | |
93 | * scheduling this timer, but we need to take care to only | |
94 | * reschedule it when it should fire _earlier_ than it was | |
95 | * asked for before, or if it's not pending right now. This | |
96 | * function ensures that. Note that it then is required to | |
97 | * run this function for all timeouts after the first one | |
98 | * has happened -- the work that runs from this timer will | |
99 | * do that. | |
100 | */ | |
101 | static void run_again(struct ieee80211_if_managed *ifmgd, | |
102 | unsigned long timeout) | |
103 | { | |
104 | ASSERT_MGD_MTX(ifmgd); | |
105 | ||
106 | if (!timer_pending(&ifmgd->timer) || | |
107 | time_before(timeout, ifmgd->timer.expires)) | |
108 | mod_timer(&ifmgd->timer, timeout); | |
109 | } | |
110 | ||
b291ba11 JB |
111 | static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata) |
112 | { | |
113 | if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER) | |
114 | return; | |
115 | ||
116 | mod_timer(&sdata->u.mgd.bcn_mon_timer, | |
117 | round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME)); | |
118 | } | |
119 | ||
5484e237 | 120 | static int ecw2cw(int ecw) |
60f8b39c | 121 | { |
5484e237 | 122 | return (1 << ecw) - 1; |
60f8b39c JB |
123 | } |
124 | ||
c2b13452 | 125 | static int ieee80211_compatible_rates(struct ieee80211_bss *bss, |
9ac19a90 | 126 | struct ieee80211_supported_band *sband, |
881d948c | 127 | u32 *rates) |
9ac19a90 JB |
128 | { |
129 | int i, j, count; | |
130 | *rates = 0; | |
131 | count = 0; | |
132 | for (i = 0; i < bss->supp_rates_len; i++) { | |
133 | int rate = (bss->supp_rates[i] & 0x7F) * 5; | |
134 | ||
135 | for (j = 0; j < sband->n_bitrates; j++) | |
136 | if (sband->bitrates[j].bitrate == rate) { | |
137 | *rates |= BIT(j); | |
138 | count++; | |
139 | break; | |
140 | } | |
141 | } | |
142 | ||
143 | return count; | |
144 | } | |
145 | ||
d5522e03 JB |
146 | /* |
147 | * ieee80211_enable_ht should be called only after the operating band | |
148 | * has been determined as ht configuration depends on the hw's | |
149 | * HT abilities for a specific band. | |
150 | */ | |
151 | static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, | |
152 | struct ieee80211_ht_info *hti, | |
77fdaa12 | 153 | const u8 *bssid, u16 ap_ht_cap_flags) |
d5522e03 JB |
154 | { |
155 | struct ieee80211_local *local = sdata->local; | |
156 | struct ieee80211_supported_band *sband; | |
d5522e03 JB |
157 | struct sta_info *sta; |
158 | u32 changed = 0; | |
9ed6bcce | 159 | u16 ht_opmode; |
d5522e03 JB |
160 | bool enable_ht = true, ht_changed; |
161 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; | |
162 | ||
163 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
164 | ||
d5522e03 JB |
165 | /* HT is not supported */ |
166 | if (!sband->ht_cap.ht_supported) | |
167 | enable_ht = false; | |
168 | ||
169 | /* check that channel matches the right operating channel */ | |
170 | if (local->hw.conf.channel->center_freq != | |
171 | ieee80211_channel_to_frequency(hti->control_chan)) | |
172 | enable_ht = false; | |
173 | ||
174 | if (enable_ht) { | |
175 | channel_type = NL80211_CHAN_HT20; | |
176 | ||
177 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && | |
178 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && | |
179 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
180 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
181 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
768777ea LR |
182 | if (!(local->hw.conf.channel->flags & |
183 | IEEE80211_CHAN_NO_HT40PLUS)) | |
184 | channel_type = NL80211_CHAN_HT40PLUS; | |
d5522e03 JB |
185 | break; |
186 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
768777ea LR |
187 | if (!(local->hw.conf.channel->flags & |
188 | IEEE80211_CHAN_NO_HT40MINUS)) | |
189 | channel_type = NL80211_CHAN_HT40MINUS; | |
d5522e03 JB |
190 | break; |
191 | } | |
192 | } | |
193 | } | |
194 | ||
195 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || | |
196 | channel_type != local->hw.conf.channel_type; | |
197 | ||
198 | local->oper_channel_type = channel_type; | |
199 | ||
200 | if (ht_changed) { | |
201 | /* channel_type change automatically detected */ | |
202 | ieee80211_hw_config(local, 0); | |
203 | ||
204 | rcu_read_lock(); | |
77fdaa12 | 205 | sta = sta_info_get(local, bssid); |
d5522e03 JB |
206 | if (sta) |
207 | rate_control_rate_update(local, sband, sta, | |
208 | IEEE80211_RC_HT_CHANGED); | |
d5522e03 | 209 | rcu_read_unlock(); |
d5522e03 JB |
210 | } |
211 | ||
212 | /* disable HT */ | |
213 | if (!enable_ht) | |
214 | return 0; | |
215 | ||
9ed6bcce | 216 | ht_opmode = le16_to_cpu(hti->operation_mode); |
d5522e03 JB |
217 | |
218 | /* if bss configuration changed store the new one */ | |
413ad50a JB |
219 | if (!sdata->ht_opmode_valid || |
220 | sdata->vif.bss_conf.ht_operation_mode != ht_opmode) { | |
d5522e03 | 221 | changed |= BSS_CHANGED_HT; |
9ed6bcce | 222 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; |
413ad50a | 223 | sdata->ht_opmode_valid = true; |
d5522e03 JB |
224 | } |
225 | ||
226 | return changed; | |
227 | } | |
228 | ||
9c6bd790 JB |
229 | /* frame sending functions */ |
230 | ||
77fdaa12 JB |
231 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
232 | struct ieee80211_mgd_work *wk) | |
9ac19a90 | 233 | { |
46900298 | 234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
235 | struct ieee80211_local *local = sdata->local; |
236 | struct sk_buff *skb; | |
237 | struct ieee80211_mgmt *mgmt; | |
517357c6 JB |
238 | u8 *pos; |
239 | const u8 *ies, *ht_ie; | |
9ac19a90 JB |
240 | int i, len, count, rates_len, supp_rates_len; |
241 | u16 capab; | |
9ac19a90 JB |
242 | int wmm = 0; |
243 | struct ieee80211_supported_band *sband; | |
881d948c | 244 | u32 rates = 0; |
9ac19a90 JB |
245 | |
246 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
77fdaa12 JB |
247 | sizeof(*mgmt) + 200 + wk->ie_len + |
248 | wk->ssid_len); | |
9ac19a90 JB |
249 | if (!skb) { |
250 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
251 | "frame\n", sdata->dev->name); | |
252 | return; | |
253 | } | |
254 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
255 | ||
256 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
257 | ||
46900298 | 258 | capab = ifmgd->capab; |
9ac19a90 JB |
259 | |
260 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { | |
261 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
262 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
263 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
264 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
265 | } | |
266 | ||
77fdaa12 JB |
267 | if (wk->bss->cbss.capability & WLAN_CAPABILITY_PRIVACY) |
268 | capab |= WLAN_CAPABILITY_PRIVACY; | |
269 | if (wk->bss->wmm_used) | |
270 | wmm = 1; | |
9ac19a90 | 271 | |
77fdaa12 JB |
272 | /* get all rates supported by the device and the AP as |
273 | * some APs don't like getting a superset of their rates | |
274 | * in the association request (e.g. D-Link DAP 1353 in | |
275 | * b-only mode) */ | |
276 | rates_len = ieee80211_compatible_rates(wk->bss, sband, &rates); | |
9ac19a90 | 277 | |
77fdaa12 JB |
278 | if ((wk->bss->cbss.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
279 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) | |
280 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; | |
9ac19a90 JB |
281 | |
282 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
283 | memset(mgmt, 0, 24); | |
77fdaa12 | 284 | memcpy(mgmt->da, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 285 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 286 | memcpy(mgmt->bssid, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 287 | |
77fdaa12 | 288 | if (!is_zero_ether_addr(wk->prev_bssid)) { |
9ac19a90 JB |
289 | skb_put(skb, 10); |
290 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
291 | IEEE80211_STYPE_REASSOC_REQ); | |
292 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
293 | mgmt->u.reassoc_req.listen_interval = | |
294 | cpu_to_le16(local->hw.conf.listen_interval); | |
77fdaa12 | 295 | memcpy(mgmt->u.reassoc_req.current_ap, wk->prev_bssid, |
9ac19a90 JB |
296 | ETH_ALEN); |
297 | } else { | |
298 | skb_put(skb, 4); | |
299 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
300 | IEEE80211_STYPE_ASSOC_REQ); | |
301 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
13554121 | 302 | mgmt->u.assoc_req.listen_interval = |
9ac19a90 JB |
303 | cpu_to_le16(local->hw.conf.listen_interval); |
304 | } | |
305 | ||
306 | /* SSID */ | |
77fdaa12 | 307 | ies = pos = skb_put(skb, 2 + wk->ssid_len); |
9ac19a90 | 308 | *pos++ = WLAN_EID_SSID; |
77fdaa12 JB |
309 | *pos++ = wk->ssid_len; |
310 | memcpy(pos, wk->ssid, wk->ssid_len); | |
9ac19a90 JB |
311 | |
312 | /* add all rates which were marked to be used above */ | |
313 | supp_rates_len = rates_len; | |
314 | if (supp_rates_len > 8) | |
315 | supp_rates_len = 8; | |
316 | ||
317 | len = sband->n_bitrates; | |
318 | pos = skb_put(skb, supp_rates_len + 2); | |
319 | *pos++ = WLAN_EID_SUPP_RATES; | |
320 | *pos++ = supp_rates_len; | |
321 | ||
322 | count = 0; | |
323 | for (i = 0; i < sband->n_bitrates; i++) { | |
324 | if (BIT(i) & rates) { | |
325 | int rate = sband->bitrates[i].bitrate; | |
326 | *pos++ = (u8) (rate / 5); | |
327 | if (++count == 8) | |
328 | break; | |
329 | } | |
330 | } | |
331 | ||
332 | if (rates_len > count) { | |
333 | pos = skb_put(skb, rates_len - count + 2); | |
334 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
335 | *pos++ = rates_len - count; | |
336 | ||
337 | for (i++; i < sband->n_bitrates; i++) { | |
338 | if (BIT(i) & rates) { | |
339 | int rate = sband->bitrates[i].bitrate; | |
340 | *pos++ = (u8) (rate / 5); | |
341 | } | |
342 | } | |
343 | } | |
344 | ||
345 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { | |
346 | /* 1. power capabilities */ | |
347 | pos = skb_put(skb, 4); | |
348 | *pos++ = WLAN_EID_PWR_CAPABILITY; | |
349 | *pos++ = 2; | |
350 | *pos++ = 0; /* min tx power */ | |
351 | *pos++ = local->hw.conf.channel->max_power; /* max tx power */ | |
352 | ||
353 | /* 2. supported channels */ | |
354 | /* TODO: get this in reg domain format */ | |
355 | pos = skb_put(skb, 2 * sband->n_channels + 2); | |
356 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
357 | *pos++ = 2 * sband->n_channels; | |
358 | for (i = 0; i < sband->n_channels; i++) { | |
359 | *pos++ = ieee80211_frequency_to_channel( | |
360 | sband->channels[i].center_freq); | |
361 | *pos++ = 1; /* one channel in the subband*/ | |
362 | } | |
363 | } | |
364 | ||
77fdaa12 JB |
365 | if (wk->ie_len && wk->ie) { |
366 | pos = skb_put(skb, wk->ie_len); | |
367 | memcpy(pos, wk->ie, wk->ie_len); | |
9ac19a90 JB |
368 | } |
369 | ||
46900298 | 370 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) { |
9ac19a90 JB |
371 | pos = skb_put(skb, 9); |
372 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
373 | *pos++ = 7; /* len */ | |
374 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
375 | *pos++ = 0x50; | |
376 | *pos++ = 0xf2; | |
377 | *pos++ = 2; /* WME */ | |
378 | *pos++ = 0; /* WME info */ | |
379 | *pos++ = 1; /* WME ver */ | |
380 | *pos++ = 0; | |
381 | } | |
382 | ||
383 | /* wmm support is a must to HT */ | |
eb46936b VT |
384 | /* |
385 | * IEEE802.11n does not allow TKIP/WEP as pairwise | |
386 | * ciphers in HT mode. We still associate in non-ht | |
387 | * mode (11a/b/g) if any one of these ciphers is | |
388 | * configured as pairwise. | |
389 | */ | |
46900298 | 390 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
d9fe60de | 391 | sband->ht_cap.ht_supported && |
77fdaa12 | 392 | (ht_ie = ieee80211_bss_get_ie(&wk->bss->cbss, WLAN_EID_HT_INFORMATION)) && |
eb46936b | 393 | ht_ie[1] >= sizeof(struct ieee80211_ht_info) && |
ab1faead | 394 | (!(ifmgd->flags & IEEE80211_STA_DISABLE_11N))) { |
d9fe60de JB |
395 | struct ieee80211_ht_info *ht_info = |
396 | (struct ieee80211_ht_info *)(ht_ie + 2); | |
397 | u16 cap = sband->ht_cap.cap; | |
9ac19a90 JB |
398 | __le16 tmp; |
399 | u32 flags = local->hw.conf.channel->flags; | |
400 | ||
d9fe60de JB |
401 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
402 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
689da1b3 | 403 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { |
d9fe60de | 404 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
405 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
406 | } | |
407 | break; | |
d9fe60de | 408 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
689da1b3 | 409 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { |
d9fe60de | 410 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
411 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
412 | } | |
413 | break; | |
414 | } | |
415 | ||
416 | tmp = cpu_to_le16(cap); | |
417 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2); | |
418 | *pos++ = WLAN_EID_HT_CAPABILITY; | |
419 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
420 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
421 | memcpy(pos, &tmp, sizeof(u16)); | |
422 | pos += sizeof(u16); | |
423 | /* TODO: needs a define here for << 2 */ | |
d9fe60de JB |
424 | *pos++ = sband->ht_cap.ampdu_factor | |
425 | (sband->ht_cap.ampdu_density << 2); | |
426 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); | |
9ac19a90 JB |
427 | } |
428 | ||
62ae67be JB |
429 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
430 | ieee80211_tx_skb(sdata, skb); | |
9ac19a90 JB |
431 | } |
432 | ||
433 | ||
ef422bc0 | 434 | static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
435 | const u8 *bssid, u16 stype, u16 reason, |
436 | void *cookie) | |
9ac19a90 JB |
437 | { |
438 | struct ieee80211_local *local = sdata->local; | |
46900298 | 439 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
440 | struct sk_buff *skb; |
441 | struct ieee80211_mgmt *mgmt; | |
9aed3cc1 | 442 | |
65fc73ac | 443 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); |
9ac19a90 | 444 | if (!skb) { |
ef422bc0 JB |
445 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
446 | "deauth/disassoc frame\n", sdata->dev->name); | |
9ac19a90 JB |
447 | return; |
448 | } | |
449 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
450 | ||
451 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
452 | memset(mgmt, 0, 24); | |
77fdaa12 | 453 | memcpy(mgmt->da, bssid, ETH_ALEN); |
9ac19a90 | 454 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 455 | memcpy(mgmt->bssid, bssid, ETH_ALEN); |
ef422bc0 | 456 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); |
9ac19a90 | 457 | skb_put(skb, 2); |
ef422bc0 | 458 | /* u.deauth.reason_code == u.disassoc.reason_code */ |
9ac19a90 JB |
459 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); |
460 | ||
53b46b84 | 461 | if (stype == IEEE80211_STYPE_DEAUTH) |
ce470613 HS |
462 | if (cookie) |
463 | __cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
464 | else | |
465 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
53b46b84 | 466 | else |
ce470613 HS |
467 | if (cookie) |
468 | __cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
469 | else | |
470 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
62ae67be JB |
471 | if (!(ifmgd->flags & IEEE80211_STA_MFP_ENABLED)) |
472 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; | |
473 | ieee80211_tx_skb(sdata, skb); | |
9ac19a90 JB |
474 | } |
475 | ||
572e0012 KV |
476 | void ieee80211_send_pspoll(struct ieee80211_local *local, |
477 | struct ieee80211_sub_if_data *sdata) | |
478 | { | |
46900298 | 479 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
572e0012 KV |
480 | struct ieee80211_pspoll *pspoll; |
481 | struct sk_buff *skb; | |
482 | u16 fc; | |
483 | ||
484 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*pspoll)); | |
485 | if (!skb) { | |
486 | printk(KERN_DEBUG "%s: failed to allocate buffer for " | |
487 | "pspoll frame\n", sdata->dev->name); | |
488 | return; | |
489 | } | |
490 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
491 | ||
492 | pspoll = (struct ieee80211_pspoll *) skb_put(skb, sizeof(*pspoll)); | |
493 | memset(pspoll, 0, sizeof(*pspoll)); | |
494 | fc = IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL | IEEE80211_FCTL_PM; | |
495 | pspoll->frame_control = cpu_to_le16(fc); | |
46900298 | 496 | pspoll->aid = cpu_to_le16(ifmgd->aid); |
572e0012 KV |
497 | |
498 | /* aid in PS-Poll has its two MSBs each set to 1 */ | |
499 | pspoll->aid |= cpu_to_le16(1 << 15 | 1 << 14); | |
500 | ||
46900298 | 501 | memcpy(pspoll->bssid, ifmgd->bssid, ETH_ALEN); |
572e0012 KV |
502 | memcpy(pspoll->ta, sdata->dev->dev_addr, ETH_ALEN); |
503 | ||
62ae67be JB |
504 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
505 | ieee80211_tx_skb(sdata, skb); | |
572e0012 KV |
506 | } |
507 | ||
965bedad JB |
508 | void ieee80211_send_nullfunc(struct ieee80211_local *local, |
509 | struct ieee80211_sub_if_data *sdata, | |
510 | int powersave) | |
511 | { | |
512 | struct sk_buff *skb; | |
513 | struct ieee80211_hdr *nullfunc; | |
514 | __le16 fc; | |
515 | ||
516 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) | |
517 | return; | |
518 | ||
519 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); | |
520 | if (!skb) { | |
521 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " | |
522 | "frame\n", sdata->dev->name); | |
523 | return; | |
524 | } | |
525 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
526 | ||
527 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); | |
528 | memset(nullfunc, 0, 24); | |
529 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | | |
530 | IEEE80211_FCTL_TODS); | |
531 | if (powersave) | |
532 | fc |= cpu_to_le16(IEEE80211_FCTL_PM); | |
533 | nullfunc->frame_control = fc; | |
534 | memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN); | |
535 | memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN); | |
536 | memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN); | |
537 | ||
62ae67be JB |
538 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
539 | ieee80211_tx_skb(sdata, skb); | |
965bedad JB |
540 | } |
541 | ||
cc32abd4 JB |
542 | /* spectrum management related things */ |
543 | static void ieee80211_chswitch_work(struct work_struct *work) | |
544 | { | |
545 | struct ieee80211_sub_if_data *sdata = | |
546 | container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work); | |
cc32abd4 JB |
547 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
548 | ||
549 | if (!netif_running(sdata->dev)) | |
550 | return; | |
551 | ||
77fdaa12 JB |
552 | mutex_lock(&ifmgd->mtx); |
553 | if (!ifmgd->associated) | |
554 | goto out; | |
cc32abd4 JB |
555 | |
556 | sdata->local->oper_channel = sdata->local->csa_channel; | |
77fdaa12 JB |
557 | ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL); |
558 | ||
cc32abd4 | 559 | /* XXX: shouldn't really modify cfg80211-owned data! */ |
77fdaa12 | 560 | ifmgd->associated->cbss.channel = sdata->local->oper_channel; |
cc32abd4 | 561 | |
cc32abd4 JB |
562 | ieee80211_wake_queues_by_reason(&sdata->local->hw, |
563 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
77fdaa12 JB |
564 | out: |
565 | ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED; | |
566 | mutex_unlock(&ifmgd->mtx); | |
cc32abd4 JB |
567 | } |
568 | ||
569 | static void ieee80211_chswitch_timer(unsigned long data) | |
570 | { | |
571 | struct ieee80211_sub_if_data *sdata = | |
572 | (struct ieee80211_sub_if_data *) data; | |
573 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
574 | ||
5bb644a0 JB |
575 | if (sdata->local->quiescing) { |
576 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
577 | return; | |
578 | } | |
579 | ||
42935eca | 580 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
581 | } |
582 | ||
583 | void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata, | |
584 | struct ieee80211_channel_sw_ie *sw_elem, | |
585 | struct ieee80211_bss *bss) | |
586 | { | |
587 | struct ieee80211_channel *new_ch; | |
588 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
589 | int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num); | |
590 | ||
77fdaa12 JB |
591 | ASSERT_MGD_MTX(ifmgd); |
592 | ||
593 | if (!ifmgd->associated) | |
cc32abd4 JB |
594 | return; |
595 | ||
fbe9c429 | 596 | if (sdata->local->scanning) |
cc32abd4 JB |
597 | return; |
598 | ||
599 | /* Disregard subsequent beacons if we are already running a timer | |
600 | processing a CSA */ | |
601 | ||
602 | if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED) | |
603 | return; | |
604 | ||
605 | new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq); | |
606 | if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED) | |
607 | return; | |
608 | ||
609 | sdata->local->csa_channel = new_ch; | |
610 | ||
611 | if (sw_elem->count <= 1) { | |
42935eca | 612 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
613 | } else { |
614 | ieee80211_stop_queues_by_reason(&sdata->local->hw, | |
615 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
616 | ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED; | |
617 | mod_timer(&ifmgd->chswitch_timer, | |
618 | jiffies + | |
619 | msecs_to_jiffies(sw_elem->count * | |
620 | bss->cbss.beacon_interval)); | |
621 | } | |
622 | } | |
623 | ||
624 | static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata, | |
625 | u16 capab_info, u8 *pwr_constr_elem, | |
626 | u8 pwr_constr_elem_len) | |
627 | { | |
628 | struct ieee80211_conf *conf = &sdata->local->hw.conf; | |
629 | ||
630 | if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT)) | |
631 | return; | |
632 | ||
633 | /* Power constraint IE length should be 1 octet */ | |
634 | if (pwr_constr_elem_len != 1) | |
635 | return; | |
636 | ||
637 | if ((*pwr_constr_elem <= conf->channel->max_power) && | |
638 | (*pwr_constr_elem != sdata->local->power_constr_level)) { | |
639 | sdata->local->power_constr_level = *pwr_constr_elem; | |
640 | ieee80211_hw_config(sdata->local, 0); | |
641 | } | |
642 | } | |
643 | ||
965bedad JB |
644 | /* powersave */ |
645 | static void ieee80211_enable_ps(struct ieee80211_local *local, | |
646 | struct ieee80211_sub_if_data *sdata) | |
647 | { | |
648 | struct ieee80211_conf *conf = &local->hw.conf; | |
649 | ||
d5edaedc JB |
650 | /* |
651 | * If we are scanning right now then the parameters will | |
652 | * take effect when scan finishes. | |
653 | */ | |
fbe9c429 | 654 | if (local->scanning) |
d5edaedc JB |
655 | return; |
656 | ||
965bedad JB |
657 | if (conf->dynamic_ps_timeout > 0 && |
658 | !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) { | |
659 | mod_timer(&local->dynamic_ps_timer, jiffies + | |
660 | msecs_to_jiffies(conf->dynamic_ps_timeout)); | |
661 | } else { | |
662 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
663 | ieee80211_send_nullfunc(local, sdata, 1); | |
664 | conf->flags |= IEEE80211_CONF_PS; | |
665 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
666 | } | |
667 | } | |
668 | ||
669 | static void ieee80211_change_ps(struct ieee80211_local *local) | |
670 | { | |
671 | struct ieee80211_conf *conf = &local->hw.conf; | |
672 | ||
673 | if (local->ps_sdata) { | |
965bedad JB |
674 | ieee80211_enable_ps(local, local->ps_sdata); |
675 | } else if (conf->flags & IEEE80211_CONF_PS) { | |
676 | conf->flags &= ~IEEE80211_CONF_PS; | |
677 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
678 | del_timer_sync(&local->dynamic_ps_timer); | |
679 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
680 | } | |
681 | } | |
682 | ||
683 | /* need to hold RTNL or interface lock */ | |
10f644a4 | 684 | void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency) |
965bedad JB |
685 | { |
686 | struct ieee80211_sub_if_data *sdata, *found = NULL; | |
687 | int count = 0; | |
688 | ||
689 | if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) { | |
690 | local->ps_sdata = NULL; | |
691 | return; | |
692 | } | |
693 | ||
694 | list_for_each_entry(sdata, &local->interfaces, list) { | |
695 | if (!netif_running(sdata->dev)) | |
696 | continue; | |
697 | if (sdata->vif.type != NL80211_IFTYPE_STATION) | |
698 | continue; | |
699 | found = sdata; | |
700 | count++; | |
701 | } | |
702 | ||
43f78531 | 703 | if (count == 1 && found->u.mgd.powersave && |
77fdaa12 | 704 | found->u.mgd.associated && list_empty(&found->u.mgd.work_list) && |
b291ba11 JB |
705 | !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL | |
706 | IEEE80211_STA_CONNECTION_POLL))) { | |
10f644a4 JB |
707 | s32 beaconint_us; |
708 | ||
709 | if (latency < 0) | |
710 | latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY); | |
711 | ||
712 | beaconint_us = ieee80211_tu_to_usec( | |
713 | found->vif.bss_conf.beacon_int); | |
714 | ||
04fe2037 | 715 | if (beaconint_us > latency) { |
10f644a4 | 716 | local->ps_sdata = NULL; |
04fe2037 JB |
717 | } else { |
718 | u8 dtimper = found->vif.bss_conf.dtim_period; | |
719 | int maxslp = 1; | |
720 | ||
721 | if (dtimper > 1) | |
722 | maxslp = min_t(int, dtimper, | |
723 | latency / beaconint_us); | |
724 | ||
9ccebe61 | 725 | local->hw.conf.max_sleep_period = maxslp; |
10f644a4 | 726 | local->ps_sdata = found; |
04fe2037 | 727 | } |
10f644a4 | 728 | } else { |
965bedad | 729 | local->ps_sdata = NULL; |
10f644a4 | 730 | } |
965bedad JB |
731 | |
732 | ieee80211_change_ps(local); | |
733 | } | |
734 | ||
735 | void ieee80211_dynamic_ps_disable_work(struct work_struct *work) | |
736 | { | |
737 | struct ieee80211_local *local = | |
738 | container_of(work, struct ieee80211_local, | |
739 | dynamic_ps_disable_work); | |
740 | ||
741 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { | |
742 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
743 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
744 | } | |
745 | ||
746 | ieee80211_wake_queues_by_reason(&local->hw, | |
747 | IEEE80211_QUEUE_STOP_REASON_PS); | |
748 | } | |
749 | ||
750 | void ieee80211_dynamic_ps_enable_work(struct work_struct *work) | |
751 | { | |
752 | struct ieee80211_local *local = | |
753 | container_of(work, struct ieee80211_local, | |
754 | dynamic_ps_enable_work); | |
755 | struct ieee80211_sub_if_data *sdata = local->ps_sdata; | |
756 | ||
757 | /* can only happen when PS was just disabled anyway */ | |
758 | if (!sdata) | |
759 | return; | |
760 | ||
761 | if (local->hw.conf.flags & IEEE80211_CONF_PS) | |
762 | return; | |
763 | ||
764 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
765 | ieee80211_send_nullfunc(local, sdata, 1); | |
766 | ||
767 | local->hw.conf.flags |= IEEE80211_CONF_PS; | |
768 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
769 | } | |
770 | ||
771 | void ieee80211_dynamic_ps_timer(unsigned long data) | |
772 | { | |
773 | struct ieee80211_local *local = (void *) data; | |
774 | ||
78f1a8b7 | 775 | if (local->quiescing || local->suspended) |
5bb644a0 JB |
776 | return; |
777 | ||
42935eca | 778 | ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work); |
965bedad JB |
779 | } |
780 | ||
60f8b39c | 781 | /* MLME */ |
f698d856 | 782 | static void ieee80211_sta_wmm_params(struct ieee80211_local *local, |
46900298 | 783 | struct ieee80211_if_managed *ifmgd, |
f0706e82 JB |
784 | u8 *wmm_param, size_t wmm_param_len) |
785 | { | |
f0706e82 JB |
786 | struct ieee80211_tx_queue_params params; |
787 | size_t left; | |
788 | int count; | |
789 | u8 *pos; | |
790 | ||
46900298 | 791 | if (!(ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) |
3434fbd3 JB |
792 | return; |
793 | ||
794 | if (!wmm_param) | |
795 | return; | |
796 | ||
f0706e82 JB |
797 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
798 | return; | |
799 | count = wmm_param[6] & 0x0f; | |
46900298 | 800 | if (count == ifmgd->wmm_last_param_set) |
f0706e82 | 801 | return; |
46900298 | 802 | ifmgd->wmm_last_param_set = count; |
f0706e82 JB |
803 | |
804 | pos = wmm_param + 8; | |
805 | left = wmm_param_len - 8; | |
806 | ||
807 | memset(¶ms, 0, sizeof(params)); | |
808 | ||
f0706e82 JB |
809 | local->wmm_acm = 0; |
810 | for (; left >= 4; left -= 4, pos += 4) { | |
811 | int aci = (pos[0] >> 5) & 0x03; | |
812 | int acm = (pos[0] >> 4) & 0x01; | |
813 | int queue; | |
814 | ||
815 | switch (aci) { | |
0eeb59fe | 816 | case 1: /* AC_BK */ |
e100bb64 | 817 | queue = 3; |
988c0f72 | 818 | if (acm) |
0eeb59fe | 819 | local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */ |
f0706e82 | 820 | break; |
0eeb59fe | 821 | case 2: /* AC_VI */ |
e100bb64 | 822 | queue = 1; |
988c0f72 | 823 | if (acm) |
0eeb59fe | 824 | local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */ |
f0706e82 | 825 | break; |
0eeb59fe | 826 | case 3: /* AC_VO */ |
e100bb64 | 827 | queue = 0; |
988c0f72 | 828 | if (acm) |
0eeb59fe | 829 | local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */ |
f0706e82 | 830 | break; |
0eeb59fe | 831 | case 0: /* AC_BE */ |
f0706e82 | 832 | default: |
e100bb64 | 833 | queue = 2; |
988c0f72 | 834 | if (acm) |
0eeb59fe | 835 | local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */ |
f0706e82 JB |
836 | break; |
837 | } | |
838 | ||
839 | params.aifs = pos[0] & 0x0f; | |
840 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); | |
841 | params.cw_min = ecw2cw(pos[1] & 0x0f); | |
f434b2d1 | 842 | params.txop = get_unaligned_le16(pos + 2); |
f4ea83dd | 843 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
f0706e82 | 844 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
3330d7be | 845 | "cWmin=%d cWmax=%d txop=%d\n", |
0bffe40f JB |
846 | wiphy_name(local->hw.wiphy), queue, aci, acm, |
847 | params.aifs, params.cw_min, params.cw_max, params.txop); | |
3330d7be | 848 | #endif |
24487981 | 849 | if (drv_conf_tx(local, queue, ¶ms) && local->ops->conf_tx) |
f0706e82 | 850 | printk(KERN_DEBUG "%s: failed to set TX queue " |
0bffe40f JB |
851 | "parameters for queue %d\n", |
852 | wiphy_name(local->hw.wiphy), queue); | |
f0706e82 JB |
853 | } |
854 | } | |
855 | ||
7a5158ef JB |
856 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, |
857 | u16 capab, bool erp_valid, u8 erp) | |
5628221c | 858 | { |
bda3933a | 859 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
471b3efd | 860 | u32 changed = 0; |
7a5158ef JB |
861 | bool use_protection; |
862 | bool use_short_preamble; | |
863 | bool use_short_slot; | |
864 | ||
865 | if (erp_valid) { | |
866 | use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0; | |
867 | use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0; | |
868 | } else { | |
869 | use_protection = false; | |
870 | use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE); | |
871 | } | |
872 | ||
873 | use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME); | |
5628221c | 874 | |
471b3efd | 875 | if (use_protection != bss_conf->use_cts_prot) { |
471b3efd JB |
876 | bss_conf->use_cts_prot = use_protection; |
877 | changed |= BSS_CHANGED_ERP_CTS_PROT; | |
5628221c | 878 | } |
7e9ed188 | 879 | |
d43c7b37 | 880 | if (use_short_preamble != bss_conf->use_short_preamble) { |
d43c7b37 | 881 | bss_conf->use_short_preamble = use_short_preamble; |
471b3efd | 882 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
7e9ed188 | 883 | } |
d9430a32 | 884 | |
7a5158ef | 885 | if (use_short_slot != bss_conf->use_short_slot) { |
7a5158ef JB |
886 | bss_conf->use_short_slot = use_short_slot; |
887 | changed |= BSS_CHANGED_ERP_SLOT; | |
50c4afb9 JL |
888 | } |
889 | ||
890 | return changed; | |
891 | } | |
892 | ||
f698d856 | 893 | static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata, |
e21546a2 | 894 | struct ieee80211_mgd_work *wk, |
ae5eb026 | 895 | u32 bss_info_changed) |
f0706e82 | 896 | { |
471b3efd | 897 | struct ieee80211_local *local = sdata->local; |
e21546a2 | 898 | struct ieee80211_bss *bss = wk->bss; |
d6f2da5b | 899 | |
ae5eb026 | 900 | bss_info_changed |= BSS_CHANGED_ASSOC; |
77fdaa12 JB |
901 | /* set timing information */ |
902 | sdata->vif.bss_conf.beacon_int = bss->cbss.beacon_interval; | |
903 | sdata->vif.bss_conf.timestamp = bss->cbss.tsf; | |
904 | sdata->vif.bss_conf.dtim_period = bss->dtim_period; | |
5628221c | 905 | |
77fdaa12 JB |
906 | bss_info_changed |= BSS_CHANGED_BEACON_INT; |
907 | bss_info_changed |= ieee80211_handle_bss_capability(sdata, | |
908 | bss->cbss.capability, bss->has_erp_value, bss->erp_value); | |
21c0cbe7 | 909 | |
77fdaa12 | 910 | sdata->u.mgd.associated = bss; |
e21546a2 | 911 | sdata->u.mgd.old_associate_work = wk; |
77fdaa12 | 912 | memcpy(sdata->u.mgd.bssid, bss->cbss.bssid, ETH_ALEN); |
f0706e82 | 913 | |
b291ba11 JB |
914 | /* just to be sure */ |
915 | sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
916 | IEEE80211_STA_BEACON_POLL); | |
917 | ||
0183826b JB |
918 | /* |
919 | * Always handle WMM once after association regardless | |
920 | * of the first value the AP uses. Setting -1 here has | |
921 | * that effect because the AP values is an unsigned | |
922 | * 4-bit value. | |
923 | */ | |
924 | sdata->u.mgd.wmm_last_param_set = -1; | |
925 | ||
9ac19a90 | 926 | ieee80211_led_assoc(local, 1); |
9306102e | 927 | |
bda3933a | 928 | sdata->vif.bss_conf.assoc = 1; |
96dd22ac JB |
929 | /* |
930 | * For now just always ask the driver to update the basic rateset | |
931 | * when we have associated, we aren't checking whether it actually | |
932 | * changed or not. | |
933 | */ | |
ae5eb026 | 934 | bss_info_changed |= BSS_CHANGED_BASIC_RATES; |
9cef8737 JB |
935 | |
936 | /* And the BSSID changed - we're associated now */ | |
937 | bss_info_changed |= BSS_CHANGED_BSSID; | |
938 | ||
ae5eb026 | 939 | ieee80211_bss_info_change_notify(sdata, bss_info_changed); |
f0706e82 | 940 | |
056508dc JB |
941 | mutex_lock(&local->iflist_mtx); |
942 | ieee80211_recalc_ps(local, -1); | |
943 | mutex_unlock(&local->iflist_mtx); | |
e0cb686f | 944 | |
53623f1a | 945 | netif_start_queue(sdata->dev); |
9ac19a90 | 946 | netif_carrier_on(sdata->dev); |
f0706e82 JB |
947 | } |
948 | ||
77fdaa12 JB |
949 | static enum rx_mgmt_action __must_check |
950 | ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata, | |
951 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 952 | { |
46900298 | 953 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 954 | struct ieee80211_local *local = sdata->local; |
46900298 | 955 | |
77fdaa12 JB |
956 | wk->tries++; |
957 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 958 | printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n", |
77fdaa12 | 959 | sdata->dev->name, wk->bss->cbss.bssid); |
7a947080 VT |
960 | |
961 | /* | |
962 | * Most likely AP is not in the range so remove the | |
77fdaa12 | 963 | * bss struct for that AP. |
7a947080 | 964 | */ |
77fdaa12 | 965 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
11432379 HS |
966 | |
967 | /* | |
968 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
969 | * due to work needing to be done. Hence, queue the STAs work |
970 | * again for that. | |
11432379 | 971 | */ |
42935eca | 972 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 973 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 974 | } |
f0706e82 | 975 | |
77fdaa12 JB |
976 | printk(KERN_DEBUG "%s: direct probe to AP %pM (try %d)\n", |
977 | sdata->dev->name, wk->bss->cbss.bssid, | |
978 | wk->tries); | |
f0706e82 | 979 | |
77fdaa12 JB |
980 | /* |
981 | * Direct probe is sent to broadcast address as some APs | |
9ac19a90 JB |
982 | * will not answer to direct packet in unassociated state. |
983 | */ | |
77fdaa12 JB |
984 | ieee80211_send_probe_req(sdata, NULL, wk->ssid, wk->ssid_len, NULL, 0); |
985 | ||
986 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
ca386f31 | 987 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 988 | |
77fdaa12 | 989 | return RX_MGMT_NONE; |
60f8b39c | 990 | } |
f0706e82 | 991 | |
9ac19a90 | 992 | |
77fdaa12 JB |
993 | static enum rx_mgmt_action __must_check |
994 | ieee80211_authenticate(struct ieee80211_sub_if_data *sdata, | |
995 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 996 | { |
46900298 | 997 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 998 | struct ieee80211_local *local = sdata->local; |
46900298 | 999 | |
77fdaa12 JB |
1000 | wk->tries++; |
1001 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 1002 | printk(KERN_DEBUG "%s: authentication with AP %pM" |
9ac19a90 | 1003 | " timed out\n", |
77fdaa12 JB |
1004 | sdata->dev->name, wk->bss->cbss.bssid); |
1005 | ||
1006 | /* | |
1007 | * Most likely AP is not in the range so remove the | |
1008 | * bss struct for that AP. | |
1009 | */ | |
1010 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
11432379 HS |
1011 | |
1012 | /* | |
1013 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1014 | * due to work needing to be done. Hence, queue the STAs work |
1015 | * again for that. | |
11432379 | 1016 | */ |
42935eca | 1017 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1018 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 1019 | } |
f0706e82 | 1020 | |
77fdaa12 JB |
1021 | printk(KERN_DEBUG "%s: authenticate with AP %pM (try %d)\n", |
1022 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1023 | ||
1024 | ieee80211_send_auth(sdata, 1, wk->auth_alg, wk->ie, wk->ie_len, | |
fffd0934 | 1025 | wk->bss->cbss.bssid, NULL, 0, 0); |
77fdaa12 | 1026 | wk->auth_transaction = 2; |
f0706e82 | 1027 | |
77fdaa12 | 1028 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
ca386f31 | 1029 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 1030 | |
77fdaa12 | 1031 | return RX_MGMT_NONE; |
f0706e82 JB |
1032 | } |
1033 | ||
e21546a2 JB |
1034 | static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata, |
1035 | bool deauth) | |
aa458d17 | 1036 | { |
46900298 | 1037 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
aa458d17 TW |
1038 | struct ieee80211_local *local = sdata->local; |
1039 | struct sta_info *sta; | |
e0cb686f | 1040 | u32 changed = 0, config_changed = 0; |
b291ba11 | 1041 | u8 bssid[ETH_ALEN]; |
aa458d17 | 1042 | |
77fdaa12 JB |
1043 | ASSERT_MGD_MTX(ifmgd); |
1044 | ||
b291ba11 JB |
1045 | if (WARN_ON(!ifmgd->associated)) |
1046 | return; | |
1047 | ||
1048 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
1049 | ||
77fdaa12 JB |
1050 | ifmgd->associated = NULL; |
1051 | memset(ifmgd->bssid, 0, ETH_ALEN); | |
1052 | ||
e21546a2 JB |
1053 | if (deauth) { |
1054 | kfree(ifmgd->old_associate_work); | |
1055 | ifmgd->old_associate_work = NULL; | |
1056 | } else { | |
1057 | struct ieee80211_mgd_work *wk = ifmgd->old_associate_work; | |
1058 | ||
1059 | wk->state = IEEE80211_MGD_STATE_IDLE; | |
1060 | list_add(&wk->list, &ifmgd->work_list); | |
1061 | } | |
1062 | ||
77fdaa12 JB |
1063 | /* |
1064 | * we need to commit the associated = NULL change because the | |
1065 | * scan code uses that to determine whether this iface should | |
1066 | * go to/wake up from powersave or not -- and could otherwise | |
1067 | * wake the queues erroneously. | |
1068 | */ | |
1069 | smp_mb(); | |
1070 | ||
1071 | /* | |
1072 | * Thus, we can only afterwards stop the queues -- to account | |
1073 | * for the case where another CPU is finishing a scan at this | |
1074 | * time -- we don't want the scan code to enable queues. | |
1075 | */ | |
aa458d17 | 1076 | |
53623f1a | 1077 | netif_stop_queue(sdata->dev); |
aa458d17 TW |
1078 | netif_carrier_off(sdata->dev); |
1079 | ||
1fa6f4af | 1080 | rcu_read_lock(); |
77fdaa12 | 1081 | sta = sta_info_get(local, bssid); |
1fa6f4af JB |
1082 | if (sta) |
1083 | ieee80211_sta_tear_down_BA_sessions(sta); | |
1084 | rcu_read_unlock(); | |
aa458d17 | 1085 | |
f5e5bf25 TW |
1086 | changed |= ieee80211_reset_erp_info(sdata); |
1087 | ||
f5e5bf25 | 1088 | ieee80211_led_assoc(local, 0); |
ae5eb026 JB |
1089 | changed |= BSS_CHANGED_ASSOC; |
1090 | sdata->vif.bss_conf.assoc = false; | |
f5e5bf25 | 1091 | |
aa837e1d JB |
1092 | ieee80211_set_wmm_default(sdata); |
1093 | ||
4797938c | 1094 | /* channel(_type) changes are handled by ieee80211_hw_config */ |
094d05dc | 1095 | local->oper_channel_type = NL80211_CHAN_NO_HT; |
e0cb686f | 1096 | |
413ad50a JB |
1097 | /* on the next assoc, re-program HT parameters */ |
1098 | sdata->ht_opmode_valid = false; | |
1099 | ||
a8302de9 VT |
1100 | local->power_constr_level = 0; |
1101 | ||
520eb820 KV |
1102 | del_timer_sync(&local->dynamic_ps_timer); |
1103 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
1104 | ||
e0cb686f KV |
1105 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
1106 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1107 | config_changed |= IEEE80211_CONF_CHANGE_PS; | |
1108 | } | |
ae5eb026 | 1109 | |
e0cb686f | 1110 | ieee80211_hw_config(local, config_changed); |
9cef8737 JB |
1111 | |
1112 | /* And the BSSID changed -- not very interesting here */ | |
1113 | changed |= BSS_CHANGED_BSSID; | |
ae5eb026 | 1114 | ieee80211_bss_info_change_notify(sdata, changed); |
8e268e47 TW |
1115 | |
1116 | rcu_read_lock(); | |
1117 | ||
77fdaa12 | 1118 | sta = sta_info_get(local, bssid); |
8e268e47 TW |
1119 | if (!sta) { |
1120 | rcu_read_unlock(); | |
1121 | return; | |
1122 | } | |
1123 | ||
1124 | sta_info_unlink(&sta); | |
1125 | ||
1126 | rcu_read_unlock(); | |
1127 | ||
1128 | sta_info_destroy(sta); | |
aa458d17 | 1129 | } |
f0706e82 | 1130 | |
77fdaa12 JB |
1131 | static enum rx_mgmt_action __must_check |
1132 | ieee80211_associate(struct ieee80211_sub_if_data *sdata, | |
1133 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1134 | { |
46900298 | 1135 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1136 | struct ieee80211_local *local = sdata->local; |
46900298 | 1137 | |
77fdaa12 JB |
1138 | wk->tries++; |
1139 | if (wk->tries > IEEE80211_ASSOC_MAX_TRIES) { | |
0c68ae26 | 1140 | printk(KERN_DEBUG "%s: association with AP %pM" |
f0706e82 | 1141 | " timed out\n", |
77fdaa12 JB |
1142 | sdata->dev->name, wk->bss->cbss.bssid); |
1143 | ||
1144 | /* | |
1145 | * Most likely AP is not in the range so remove the | |
1146 | * bss struct for that AP. | |
1147 | */ | |
1148 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
1149 | ||
11432379 HS |
1150 | /* |
1151 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1152 | * due to work needing to be done. Hence, queue the STAs work |
1153 | * again for that. | |
11432379 | 1154 | */ |
42935eca | 1155 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1156 | return RX_MGMT_CFG80211_ASSOC_TO; |
f0706e82 JB |
1157 | } |
1158 | ||
77fdaa12 JB |
1159 | printk(KERN_DEBUG "%s: associate with AP %pM (try %d)\n", |
1160 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1161 | ieee80211_send_assoc(sdata, wk); | |
1162 | ||
1163 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; | |
ca386f31 | 1164 | run_again(ifmgd, wk->timeout); |
f0706e82 | 1165 | |
77fdaa12 | 1166 | return RX_MGMT_NONE; |
f0706e82 JB |
1167 | } |
1168 | ||
3cf335d5 KV |
1169 | void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata, |
1170 | struct ieee80211_hdr *hdr) | |
1171 | { | |
1172 | /* | |
1173 | * We can postpone the mgd.timer whenever receiving unicast frames | |
1174 | * from AP because we know that the connection is working both ways | |
1175 | * at that time. But multicast frames (and hence also beacons) must | |
1176 | * be ignored here, because we need to trigger the timer during | |
b291ba11 JB |
1177 | * data idle periods for sending the periodic probe request to the |
1178 | * AP we're connected to. | |
3cf335d5 | 1179 | */ |
b291ba11 JB |
1180 | if (is_multicast_ether_addr(hdr->addr1)) |
1181 | return; | |
1182 | ||
1183 | mod_timer(&sdata->u.mgd.conn_mon_timer, | |
1184 | round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME)); | |
3cf335d5 | 1185 | } |
f0706e82 | 1186 | |
a43abf29 ML |
1187 | static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata) |
1188 | { | |
1189 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
1190 | const u8 *ssid; | |
1191 | ||
1192 | ssid = ieee80211_bss_get_ie(&ifmgd->associated->cbss, WLAN_EID_SSID); | |
1193 | ieee80211_send_probe_req(sdata, ifmgd->associated->cbss.bssid, | |
1194 | ssid + 2, ssid[1], NULL, 0); | |
1195 | ||
1196 | ifmgd->probe_send_count++; | |
1197 | ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT; | |
1198 | run_again(ifmgd, ifmgd->probe_timeout); | |
1199 | } | |
1200 | ||
b291ba11 JB |
1201 | static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata, |
1202 | bool beacon) | |
04de8381 | 1203 | { |
04de8381 | 1204 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
b291ba11 | 1205 | bool already = false; |
34bfc411 | 1206 | |
0e2b6286 JB |
1207 | if (!netif_running(sdata->dev)) |
1208 | return; | |
1209 | ||
91a3bd76 LR |
1210 | if (sdata->local->scanning) |
1211 | return; | |
1212 | ||
77fdaa12 JB |
1213 | mutex_lock(&ifmgd->mtx); |
1214 | ||
1215 | if (!ifmgd->associated) | |
1216 | goto out; | |
1217 | ||
a860402d | 1218 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
b291ba11 JB |
1219 | if (beacon && net_ratelimit()) |
1220 | printk(KERN_DEBUG "%s: detected beacon loss from AP " | |
77fdaa12 | 1221 | "- sending probe request\n", sdata->dev->name); |
a860402d | 1222 | #endif |
04de8381 | 1223 | |
b291ba11 JB |
1224 | /* |
1225 | * The driver/our work has already reported this event or the | |
1226 | * connection monitoring has kicked in and we have already sent | |
1227 | * a probe request. Or maybe the AP died and the driver keeps | |
1228 | * reporting until we disassociate... | |
1229 | * | |
1230 | * In either case we have to ignore the current call to this | |
1231 | * function (except for setting the correct probe reason bit) | |
1232 | * because otherwise we would reset the timer every time and | |
1233 | * never check whether we received a probe response! | |
1234 | */ | |
1235 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | | |
1236 | IEEE80211_STA_CONNECTION_POLL)) | |
1237 | already = true; | |
1238 | ||
1239 | if (beacon) | |
1240 | ifmgd->flags |= IEEE80211_STA_BEACON_POLL; | |
1241 | else | |
1242 | ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL; | |
1243 | ||
1244 | if (already) | |
1245 | goto out; | |
1246 | ||
4e751843 JB |
1247 | mutex_lock(&sdata->local->iflist_mtx); |
1248 | ieee80211_recalc_ps(sdata->local, -1); | |
1249 | mutex_unlock(&sdata->local->iflist_mtx); | |
1250 | ||
a43abf29 ML |
1251 | ifmgd->probe_send_count = 0; |
1252 | ieee80211_mgd_probe_ap_send(sdata); | |
77fdaa12 JB |
1253 | out: |
1254 | mutex_unlock(&ifmgd->mtx); | |
04de8381 KV |
1255 | } |
1256 | ||
b291ba11 JB |
1257 | void ieee80211_beacon_loss_work(struct work_struct *work) |
1258 | { | |
1259 | struct ieee80211_sub_if_data *sdata = | |
1260 | container_of(work, struct ieee80211_sub_if_data, | |
1261 | u.mgd.beacon_loss_work); | |
1262 | ||
1263 | ieee80211_mgd_probe_ap(sdata, true); | |
1264 | } | |
1265 | ||
04de8381 KV |
1266 | void ieee80211_beacon_loss(struct ieee80211_vif *vif) |
1267 | { | |
1268 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
1269 | ||
42935eca | 1270 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
04de8381 KV |
1271 | } |
1272 | EXPORT_SYMBOL(ieee80211_beacon_loss); | |
1273 | ||
77fdaa12 JB |
1274 | static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata, |
1275 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1276 | { |
77fdaa12 | 1277 | wk->state = IEEE80211_MGD_STATE_IDLE; |
f698d856 | 1278 | printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name); |
f0706e82 JB |
1279 | } |
1280 | ||
1281 | ||
f698d856 | 1282 | static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata, |
77fdaa12 | 1283 | struct ieee80211_mgd_work *wk, |
f0706e82 JB |
1284 | struct ieee80211_mgmt *mgmt, |
1285 | size_t len) | |
1286 | { | |
1287 | u8 *pos; | |
1288 | struct ieee802_11_elems elems; | |
1289 | ||
f0706e82 | 1290 | pos = mgmt->u.auth.variable; |
67a4cce4 | 1291 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f4ea83dd | 1292 | if (!elems.challenge) |
f0706e82 | 1293 | return; |
77fdaa12 | 1294 | ieee80211_send_auth(sdata, 3, wk->auth_alg, |
46900298 | 1295 | elems.challenge - 2, elems.challenge_len + 2, |
fffd0934 JB |
1296 | wk->bss->cbss.bssid, |
1297 | wk->key, wk->key_len, wk->key_idx); | |
77fdaa12 | 1298 | wk->auth_transaction = 4; |
fe3d2c3f JB |
1299 | } |
1300 | ||
77fdaa12 JB |
1301 | static enum rx_mgmt_action __must_check |
1302 | ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata, | |
1303 | struct ieee80211_mgd_work *wk, | |
1304 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1305 | { |
f0706e82 JB |
1306 | u16 auth_alg, auth_transaction, status_code; |
1307 | ||
77fdaa12 JB |
1308 | if (wk->state != IEEE80211_MGD_STATE_AUTH) |
1309 | return RX_MGMT_NONE; | |
f0706e82 | 1310 | |
f4ea83dd | 1311 | if (len < 24 + 6) |
77fdaa12 | 1312 | return RX_MGMT_NONE; |
f0706e82 | 1313 | |
77fdaa12 JB |
1314 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1315 | return RX_MGMT_NONE; | |
f0706e82 | 1316 | |
77fdaa12 JB |
1317 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1318 | return RX_MGMT_NONE; | |
f0706e82 JB |
1319 | |
1320 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
1321 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
1322 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
1323 | ||
77fdaa12 JB |
1324 | if (auth_alg != wk->auth_alg || |
1325 | auth_transaction != wk->auth_transaction) | |
1326 | return RX_MGMT_NONE; | |
f0706e82 JB |
1327 | |
1328 | if (status_code != WLAN_STATUS_SUCCESS) { | |
77fdaa12 JB |
1329 | list_del(&wk->list); |
1330 | kfree(wk); | |
1331 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 JB |
1332 | } |
1333 | ||
77fdaa12 | 1334 | switch (wk->auth_alg) { |
f0706e82 JB |
1335 | case WLAN_AUTH_OPEN: |
1336 | case WLAN_AUTH_LEAP: | |
636a5d36 | 1337 | case WLAN_AUTH_FT: |
77fdaa12 JB |
1338 | ieee80211_auth_completed(sdata, wk); |
1339 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 | 1340 | case WLAN_AUTH_SHARED_KEY: |
77fdaa12 JB |
1341 | if (wk->auth_transaction == 4) { |
1342 | ieee80211_auth_completed(sdata, wk); | |
1343 | return RX_MGMT_CFG80211_AUTH; | |
6039f6d2 | 1344 | } else |
77fdaa12 | 1345 | ieee80211_auth_challenge(sdata, wk, mgmt, len); |
f0706e82 JB |
1346 | break; |
1347 | } | |
77fdaa12 JB |
1348 | |
1349 | return RX_MGMT_NONE; | |
f0706e82 JB |
1350 | } |
1351 | ||
1352 | ||
77fdaa12 JB |
1353 | static enum rx_mgmt_action __must_check |
1354 | ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata, | |
1355 | struct ieee80211_mgd_work *wk, | |
1356 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1357 | { |
46900298 | 1358 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 | 1359 | const u8 *bssid = NULL; |
f0706e82 JB |
1360 | u16 reason_code; |
1361 | ||
f4ea83dd | 1362 | if (len < 24 + 2) |
77fdaa12 | 1363 | return RX_MGMT_NONE; |
f0706e82 | 1364 | |
77fdaa12 JB |
1365 | ASSERT_MGD_MTX(ifmgd); |
1366 | ||
1367 | if (wk) | |
1368 | bssid = wk->bss->cbss.bssid; | |
1369 | else | |
1370 | bssid = ifmgd->associated->cbss.bssid; | |
f0706e82 JB |
1371 | |
1372 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
1373 | ||
77fdaa12 JB |
1374 | printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n", |
1375 | sdata->dev->name, bssid, reason_code); | |
1376 | ||
1377 | if (!wk) { | |
e21546a2 | 1378 | ieee80211_set_disassoc(sdata, true); |
bc83b681 | 1379 | ieee80211_recalc_idle(sdata->local); |
77fdaa12 JB |
1380 | } else { |
1381 | list_del(&wk->list); | |
1382 | kfree(wk); | |
1383 | } | |
f0706e82 | 1384 | |
77fdaa12 | 1385 | return RX_MGMT_CFG80211_DEAUTH; |
f0706e82 JB |
1386 | } |
1387 | ||
1388 | ||
77fdaa12 JB |
1389 | static enum rx_mgmt_action __must_check |
1390 | ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata, | |
1391 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1392 | { |
46900298 | 1393 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1394 | u16 reason_code; |
1395 | ||
f4ea83dd | 1396 | if (len < 24 + 2) |
77fdaa12 | 1397 | return RX_MGMT_NONE; |
f0706e82 | 1398 | |
77fdaa12 JB |
1399 | ASSERT_MGD_MTX(ifmgd); |
1400 | ||
1401 | if (WARN_ON(!ifmgd->associated)) | |
1402 | return RX_MGMT_NONE; | |
1403 | ||
1404 | if (WARN_ON(memcmp(ifmgd->associated->cbss.bssid, mgmt->sa, ETH_ALEN))) | |
1405 | return RX_MGMT_NONE; | |
f0706e82 JB |
1406 | |
1407 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); | |
1408 | ||
0ff71613 JB |
1409 | printk(KERN_DEBUG "%s: disassociated from %pM (Reason: %u)\n", |
1410 | sdata->dev->name, mgmt->sa, reason_code); | |
f0706e82 | 1411 | |
e21546a2 | 1412 | ieee80211_set_disassoc(sdata, false); |
bc83b681 | 1413 | ieee80211_recalc_idle(sdata->local); |
77fdaa12 | 1414 | return RX_MGMT_CFG80211_DISASSOC; |
f0706e82 JB |
1415 | } |
1416 | ||
1417 | ||
77fdaa12 JB |
1418 | static enum rx_mgmt_action __must_check |
1419 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, | |
1420 | struct ieee80211_mgd_work *wk, | |
1421 | struct ieee80211_mgmt *mgmt, size_t len, | |
1422 | bool reassoc) | |
f0706e82 | 1423 | { |
46900298 | 1424 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
471b3efd | 1425 | struct ieee80211_local *local = sdata->local; |
8318d78a | 1426 | struct ieee80211_supported_band *sband; |
f0706e82 | 1427 | struct sta_info *sta; |
881d948c | 1428 | u32 rates, basic_rates; |
f0706e82 JB |
1429 | u16 capab_info, status_code, aid; |
1430 | struct ieee802_11_elems elems; | |
bda3933a | 1431 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
f0706e82 | 1432 | u8 *pos; |
ae5eb026 | 1433 | u32 changed = 0; |
f0706e82 | 1434 | int i, j; |
ddf4ac53 | 1435 | bool have_higher_than_11mbit = false, newsta = false; |
ae5eb026 | 1436 | u16 ap_ht_cap_flags; |
f0706e82 | 1437 | |
77fdaa12 JB |
1438 | /* |
1439 | * AssocResp and ReassocResp have identical structure, so process both | |
1440 | * of them in this function. | |
1441 | */ | |
f0706e82 | 1442 | |
f4ea83dd | 1443 | if (len < 24 + 6) |
77fdaa12 | 1444 | return RX_MGMT_NONE; |
f0706e82 | 1445 | |
77fdaa12 JB |
1446 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1447 | return RX_MGMT_NONE; | |
f0706e82 JB |
1448 | |
1449 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
1450 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
1451 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
f0706e82 | 1452 | |
0c68ae26 | 1453 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " |
f0706e82 | 1454 | "status=%d aid=%d)\n", |
0c68ae26 | 1455 | sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa, |
ddd68587 | 1456 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
f0706e82 | 1457 | |
63a5ab82 JM |
1458 | pos = mgmt->u.assoc_resp.variable; |
1459 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
1460 | ||
1461 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && | |
f797eb7e JM |
1462 | elems.timeout_int && elems.timeout_int_len == 5 && |
1463 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { | |
63a5ab82 | 1464 | u32 tu, ms; |
f797eb7e | 1465 | tu = get_unaligned_le32(elems.timeout_int + 1); |
63a5ab82 JM |
1466 | ms = tu * 1024 / 1000; |
1467 | printk(KERN_DEBUG "%s: AP rejected association temporarily; " | |
1468 | "comeback duration %u TU (%u ms)\n", | |
1469 | sdata->dev->name, tu, ms); | |
77fdaa12 | 1470 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
63a5ab82 | 1471 | if (ms > IEEE80211_ASSOC_TIMEOUT) |
ca386f31 | 1472 | run_again(ifmgd, jiffies + msecs_to_jiffies(ms)); |
77fdaa12 | 1473 | return RX_MGMT_NONE; |
63a5ab82 JM |
1474 | } |
1475 | ||
f0706e82 JB |
1476 | if (status_code != WLAN_STATUS_SUCCESS) { |
1477 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", | |
f698d856 | 1478 | sdata->dev->name, status_code); |
2ef6e444 | 1479 | wk->state = IEEE80211_MGD_STATE_IDLE; |
77fdaa12 | 1480 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1481 | } |
1482 | ||
1dd84aa2 JB |
1483 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1484 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " | |
f698d856 | 1485 | "set\n", sdata->dev->name, aid); |
1dd84aa2 JB |
1486 | aid &= ~(BIT(15) | BIT(14)); |
1487 | ||
f0706e82 JB |
1488 | if (!elems.supp_rates) { |
1489 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", | |
f698d856 | 1490 | sdata->dev->name); |
77fdaa12 | 1491 | return RX_MGMT_NONE; |
f0706e82 JB |
1492 | } |
1493 | ||
f698d856 | 1494 | printk(KERN_DEBUG "%s: associated\n", sdata->dev->name); |
46900298 | 1495 | ifmgd->aid = aid; |
f0706e82 | 1496 | |
d0709a65 JB |
1497 | rcu_read_lock(); |
1498 | ||
f0706e82 | 1499 | /* Add STA entry for the AP */ |
77fdaa12 | 1500 | sta = sta_info_get(local, wk->bss->cbss.bssid); |
f0706e82 | 1501 | if (!sta) { |
ddf4ac53 | 1502 | newsta = true; |
d0709a65 | 1503 | |
77fdaa12 JB |
1504 | rcu_read_unlock(); |
1505 | ||
1506 | sta = sta_info_alloc(sdata, wk->bss->cbss.bssid, GFP_KERNEL); | |
73651ee6 JB |
1507 | if (!sta) { |
1508 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" | |
f698d856 | 1509 | " the AP\n", sdata->dev->name); |
77fdaa12 | 1510 | return RX_MGMT_NONE; |
f0706e82 | 1511 | } |
f709fc69 | 1512 | |
77fdaa12 JB |
1513 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | |
1514 | WLAN_STA_ASSOC_AP); | |
1515 | if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT)) | |
1516 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); | |
f709fc69 | 1517 | |
77fdaa12 JB |
1518 | rcu_read_lock(); |
1519 | } | |
05e5e883 | 1520 | |
60f8b39c JB |
1521 | rates = 0; |
1522 | basic_rates = 0; | |
1523 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
f709fc69 | 1524 | |
60f8b39c JB |
1525 | for (i = 0; i < elems.supp_rates_len; i++) { |
1526 | int rate = (elems.supp_rates[i] & 0x7f) * 5; | |
d61272cb | 1527 | bool is_basic = !!(elems.supp_rates[i] & 0x80); |
f709fc69 | 1528 | |
60f8b39c JB |
1529 | if (rate > 110) |
1530 | have_higher_than_11mbit = true; | |
1531 | ||
1532 | for (j = 0; j < sband->n_bitrates; j++) { | |
d61272cb | 1533 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1534 | rates |= BIT(j); |
d61272cb TW |
1535 | if (is_basic) |
1536 | basic_rates |= BIT(j); | |
1537 | break; | |
1538 | } | |
f709fc69 | 1539 | } |
f709fc69 LCC |
1540 | } |
1541 | ||
60f8b39c JB |
1542 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
1543 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; | |
7e0986c1 | 1544 | bool is_basic = !!(elems.ext_supp_rates[i] & 0x80); |
f0706e82 | 1545 | |
60f8b39c JB |
1546 | if (rate > 110) |
1547 | have_higher_than_11mbit = true; | |
f0706e82 | 1548 | |
60f8b39c | 1549 | for (j = 0; j < sband->n_bitrates; j++) { |
d61272cb | 1550 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1551 | rates |= BIT(j); |
d61272cb TW |
1552 | if (is_basic) |
1553 | basic_rates |= BIT(j); | |
1554 | break; | |
1555 | } | |
60f8b39c | 1556 | } |
1ebebea8 | 1557 | } |
f0706e82 | 1558 | |
323ce79a | 1559 | sta->sta.supp_rates[local->hw.conf.channel->band] = rates; |
bda3933a | 1560 | sdata->vif.bss_conf.basic_rates = basic_rates; |
60f8b39c JB |
1561 | |
1562 | /* cf. IEEE 802.11 9.2.12 */ | |
1563 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
1564 | have_higher_than_11mbit) | |
1565 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
1566 | else | |
1567 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
f0706e82 | 1568 | |
ab1faead | 1569 | if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1570 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
d9fe60de | 1571 | elems.ht_cap_elem, &sta->sta.ht_cap); |
ae5eb026 JB |
1572 | |
1573 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
f0706e82 | 1574 | |
4b7679a5 | 1575 | rate_control_rate_init(sta); |
f0706e82 | 1576 | |
46900298 | 1577 | if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) |
5394af4d JM |
1578 | set_sta_flags(sta, WLAN_STA_MFP); |
1579 | ||
ddf4ac53 | 1580 | if (elems.wmm_param) |
60f8b39c | 1581 | set_sta_flags(sta, WLAN_STA_WME); |
ddf4ac53 JB |
1582 | |
1583 | if (newsta) { | |
1584 | int err = sta_info_insert(sta); | |
1585 | if (err) { | |
1586 | printk(KERN_DEBUG "%s: failed to insert STA entry for" | |
1587 | " the AP (error %d)\n", sdata->dev->name, err); | |
1588 | rcu_read_unlock(); | |
77fdaa12 | 1589 | return RX_MGMT_NONE; |
ddf4ac53 JB |
1590 | } |
1591 | } | |
1592 | ||
1593 | rcu_read_unlock(); | |
1594 | ||
1595 | if (elems.wmm_param) | |
46900298 | 1596 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
60f8b39c | 1597 | elems.wmm_param_len); |
aa837e1d JB |
1598 | else |
1599 | ieee80211_set_wmm_default(sdata); | |
f0706e82 | 1600 | |
ae5eb026 | 1601 | if (elems.ht_info_elem && elems.wmm_param && |
46900298 | 1602 | (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
ab1faead | 1603 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1604 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
77fdaa12 | 1605 | wk->bss->cbss.bssid, |
ae5eb026 JB |
1606 | ap_ht_cap_flags); |
1607 | ||
056508dc JB |
1608 | /* delete work item -- must be before set_associated for PS */ |
1609 | list_del(&wk->list); | |
1610 | ||
60f8b39c JB |
1611 | /* set AID and assoc capability, |
1612 | * ieee80211_set_associated() will tell the driver */ | |
1613 | bss_conf->aid = aid; | |
1614 | bss_conf->assoc_capability = capab_info; | |
e21546a2 JB |
1615 | /* this will take ownership of wk */ |
1616 | ieee80211_set_associated(sdata, wk, changed); | |
f0706e82 | 1617 | |
15b7b062 | 1618 | /* |
b291ba11 JB |
1619 | * Start timer to probe the connection to the AP now. |
1620 | * Also start the timer that will detect beacon loss. | |
15b7b062 | 1621 | */ |
b291ba11 JB |
1622 | ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt); |
1623 | mod_beacon_timer(sdata); | |
15b7b062 | 1624 | |
77fdaa12 | 1625 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1626 | } |
1627 | ||
1628 | ||
98c8fccf JB |
1629 | static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata, |
1630 | struct ieee80211_mgmt *mgmt, | |
1631 | size_t len, | |
1632 | struct ieee80211_rx_status *rx_status, | |
1633 | struct ieee802_11_elems *elems, | |
1634 | bool beacon) | |
1635 | { | |
1636 | struct ieee80211_local *local = sdata->local; | |
1637 | int freq; | |
c2b13452 | 1638 | struct ieee80211_bss *bss; |
98c8fccf | 1639 | struct ieee80211_channel *channel; |
98c8fccf JB |
1640 | |
1641 | if (elems->ds_params && elems->ds_params_len == 1) | |
1642 | freq = ieee80211_channel_to_frequency(elems->ds_params[0]); | |
1643 | else | |
1644 | freq = rx_status->freq; | |
1645 | ||
1646 | channel = ieee80211_get_channel(local->hw.wiphy, freq); | |
1647 | ||
1648 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) | |
1649 | return; | |
1650 | ||
98c8fccf | 1651 | bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems, |
2a519311 | 1652 | channel, beacon); |
77fdaa12 JB |
1653 | if (bss) |
1654 | ieee80211_rx_bss_put(local, bss); | |
1655 | ||
1656 | if (!sdata->u.mgd.associated) | |
98c8fccf JB |
1657 | return; |
1658 | ||
c481ec97 | 1659 | if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) && |
77fdaa12 JB |
1660 | (memcmp(mgmt->bssid, sdata->u.mgd.associated->cbss.bssid, |
1661 | ETH_ALEN) == 0)) { | |
c481ec97 S |
1662 | struct ieee80211_channel_sw_ie *sw_elem = |
1663 | (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem; | |
cc32abd4 | 1664 | ieee80211_sta_process_chanswitch(sdata, sw_elem, bss); |
c481ec97 | 1665 | } |
f0706e82 JB |
1666 | } |
1667 | ||
1668 | ||
f698d856 | 1669 | static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata, |
77fdaa12 JB |
1670 | struct ieee80211_mgd_work *wk, |
1671 | struct ieee80211_mgmt *mgmt, size_t len, | |
f0706e82 JB |
1672 | struct ieee80211_rx_status *rx_status) |
1673 | { | |
15b7b062 | 1674 | struct ieee80211_if_managed *ifmgd; |
ae6a44e3 EK |
1675 | size_t baselen; |
1676 | struct ieee802_11_elems elems; | |
1677 | ||
15b7b062 KV |
1678 | ifmgd = &sdata->u.mgd; |
1679 | ||
77fdaa12 JB |
1680 | ASSERT_MGD_MTX(ifmgd); |
1681 | ||
8e7cdbb6 TW |
1682 | if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN)) |
1683 | return; /* ignore ProbeResp to foreign address */ | |
1684 | ||
ae6a44e3 EK |
1685 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; |
1686 | if (baselen > len) | |
1687 | return; | |
1688 | ||
1689 | ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen, | |
1690 | &elems); | |
1691 | ||
98c8fccf | 1692 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false); |
9859b81e RR |
1693 | |
1694 | /* direct probe may be part of the association flow */ | |
77fdaa12 | 1695 | if (wk && wk->state == IEEE80211_MGD_STATE_PROBE) { |
0ff71613 | 1696 | printk(KERN_DEBUG "%s: direct probe responded\n", |
9859b81e | 1697 | sdata->dev->name); |
77fdaa12 JB |
1698 | wk->tries = 0; |
1699 | wk->state = IEEE80211_MGD_STATE_AUTH; | |
1700 | WARN_ON(ieee80211_authenticate(sdata, wk) != RX_MGMT_NONE); | |
9859b81e | 1701 | } |
15b7b062 | 1702 | |
77fdaa12 JB |
1703 | if (ifmgd->associated && |
1704 | memcmp(mgmt->bssid, ifmgd->associated->cbss.bssid, ETH_ALEN) == 0 && | |
b291ba11 JB |
1705 | ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1706 | IEEE80211_STA_CONNECTION_POLL)) { | |
1707 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
1708 | IEEE80211_STA_BEACON_POLL); | |
4e751843 JB |
1709 | mutex_lock(&sdata->local->iflist_mtx); |
1710 | ieee80211_recalc_ps(sdata->local, -1); | |
1711 | mutex_unlock(&sdata->local->iflist_mtx); | |
b291ba11 JB |
1712 | /* |
1713 | * We've received a probe response, but are not sure whether | |
1714 | * we have or will be receiving any beacons or data, so let's | |
1715 | * schedule the timers again, just in case. | |
1716 | */ | |
1717 | mod_beacon_timer(sdata); | |
1718 | mod_timer(&ifmgd->conn_mon_timer, | |
1719 | round_jiffies_up(jiffies + | |
1720 | IEEE80211_CONNECTION_IDLE_TIME)); | |
4e751843 | 1721 | } |
f0706e82 JB |
1722 | } |
1723 | ||
d91f36db JB |
1724 | /* |
1725 | * This is the canonical list of information elements we care about, | |
1726 | * the filter code also gives us all changes to the Microsoft OUI | |
1727 | * (00:50:F2) vendor IE which is used for WMM which we need to track. | |
1728 | * | |
1729 | * We implement beacon filtering in software since that means we can | |
1730 | * avoid processing the frame here and in cfg80211, and userspace | |
1731 | * will not be able to tell whether the hardware supports it or not. | |
1732 | * | |
1733 | * XXX: This list needs to be dynamic -- userspace needs to be able to | |
1734 | * add items it requires. It also needs to be able to tell us to | |
1735 | * look out for other vendor IEs. | |
1736 | */ | |
1737 | static const u64 care_about_ies = | |
1d4df3a5 JB |
1738 | (1ULL << WLAN_EID_COUNTRY) | |
1739 | (1ULL << WLAN_EID_ERP_INFO) | | |
1740 | (1ULL << WLAN_EID_CHANNEL_SWITCH) | | |
1741 | (1ULL << WLAN_EID_PWR_CONSTRAINT) | | |
1742 | (1ULL << WLAN_EID_HT_CAPABILITY) | | |
1743 | (1ULL << WLAN_EID_HT_INFORMATION); | |
d91f36db | 1744 | |
f698d856 | 1745 | static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1746 | struct ieee80211_mgmt *mgmt, |
1747 | size_t len, | |
1748 | struct ieee80211_rx_status *rx_status) | |
1749 | { | |
d91f36db | 1750 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1751 | size_t baselen; |
1752 | struct ieee802_11_elems elems; | |
f698d856 | 1753 | struct ieee80211_local *local = sdata->local; |
471b3efd | 1754 | u32 changed = 0; |
d91f36db | 1755 | bool erp_valid, directed_tim = false; |
7a5158ef | 1756 | u8 erp_value = 0; |
d91f36db | 1757 | u32 ncrc; |
77fdaa12 JB |
1758 | u8 *bssid; |
1759 | ||
1760 | ASSERT_MGD_MTX(ifmgd); | |
f0706e82 | 1761 | |
ae6a44e3 EK |
1762 | /* Process beacon from the current BSS */ |
1763 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
1764 | if (baselen > len) | |
1765 | return; | |
1766 | ||
d91f36db | 1767 | if (rx_status->freq != local->hw.conf.channel->center_freq) |
f0706e82 | 1768 | return; |
f0706e82 | 1769 | |
b291ba11 JB |
1770 | /* |
1771 | * We might have received a number of frames, among them a | |
1772 | * disassoc frame and a beacon... | |
1773 | */ | |
1774 | if (!ifmgd->associated) | |
77fdaa12 JB |
1775 | return; |
1776 | ||
1777 | bssid = ifmgd->associated->cbss.bssid; | |
1778 | ||
b291ba11 JB |
1779 | /* |
1780 | * And in theory even frames from a different AP we were just | |
1781 | * associated to a split-second ago! | |
1782 | */ | |
1783 | if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0) | |
f0706e82 JB |
1784 | return; |
1785 | ||
b291ba11 | 1786 | if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) { |
92778180 JM |
1787 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1788 | if (net_ratelimit()) { | |
1789 | printk(KERN_DEBUG "%s: cancelling probereq poll due " | |
1790 | "to a received beacon\n", sdata->dev->name); | |
1791 | } | |
1792 | #endif | |
b291ba11 | 1793 | ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL; |
4e751843 JB |
1794 | mutex_lock(&local->iflist_mtx); |
1795 | ieee80211_recalc_ps(local, -1); | |
1796 | mutex_unlock(&local->iflist_mtx); | |
92778180 JM |
1797 | } |
1798 | ||
b291ba11 JB |
1799 | /* |
1800 | * Push the beacon loss detection into the future since | |
1801 | * we are processing a beacon from the AP just now. | |
1802 | */ | |
1803 | mod_beacon_timer(sdata); | |
1804 | ||
d91f36db JB |
1805 | ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4); |
1806 | ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable, | |
1807 | len - baselen, &elems, | |
1808 | care_about_ies, ncrc); | |
1809 | ||
1810 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
e7ec86f5 JB |
1811 | directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len, |
1812 | ifmgd->aid); | |
d91f36db | 1813 | |
30196673 JM |
1814 | if (ncrc != ifmgd->beacon_crc) { |
1815 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, | |
1816 | true); | |
d91f36db | 1817 | |
30196673 JM |
1818 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1819 | elems.wmm_param_len); | |
1820 | } | |
fe3fa827 | 1821 | |
25c9c875 | 1822 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) { |
1fb3606b | 1823 | if (directed_tim) { |
572e0012 KV |
1824 | if (local->hw.conf.dynamic_ps_timeout > 0) { |
1825 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1826 | ieee80211_hw_config(local, | |
1827 | IEEE80211_CONF_CHANGE_PS); | |
1828 | ieee80211_send_nullfunc(local, sdata, 0); | |
1829 | } else { | |
1830 | local->pspolling = true; | |
1831 | ||
1832 | /* | |
1833 | * Here is assumed that the driver will be | |
1834 | * able to send ps-poll frame and receive a | |
1835 | * response even though power save mode is | |
1836 | * enabled, but some drivers might require | |
1837 | * to disable power save here. This needs | |
1838 | * to be investigated. | |
1839 | */ | |
1840 | ieee80211_send_pspoll(local, sdata); | |
1841 | } | |
a97b77b9 VN |
1842 | } |
1843 | } | |
7a5158ef | 1844 | |
30196673 JM |
1845 | if (ncrc == ifmgd->beacon_crc) |
1846 | return; | |
1847 | ifmgd->beacon_crc = ncrc; | |
1848 | ||
7a5158ef JB |
1849 | if (elems.erp_info && elems.erp_info_len >= 1) { |
1850 | erp_valid = true; | |
1851 | erp_value = elems.erp_info[0]; | |
1852 | } else { | |
1853 | erp_valid = false; | |
50c4afb9 | 1854 | } |
7a5158ef JB |
1855 | changed |= ieee80211_handle_bss_capability(sdata, |
1856 | le16_to_cpu(mgmt->u.beacon.capab_info), | |
1857 | erp_valid, erp_value); | |
f0706e82 | 1858 | |
d3c990fb | 1859 | |
53d6f81c | 1860 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
ab1faead | 1861 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) { |
ae5eb026 JB |
1862 | struct sta_info *sta; |
1863 | struct ieee80211_supported_band *sband; | |
1864 | u16 ap_ht_cap_flags; | |
1865 | ||
1866 | rcu_read_lock(); | |
1867 | ||
77fdaa12 JB |
1868 | sta = sta_info_get(local, bssid); |
1869 | if (WARN_ON(!sta)) { | |
ae5eb026 JB |
1870 | rcu_read_unlock(); |
1871 | return; | |
1872 | } | |
1873 | ||
1874 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
1875 | ||
1876 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, | |
1877 | elems.ht_cap_elem, &sta->sta.ht_cap); | |
1878 | ||
1879 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
1880 | ||
1881 | rcu_read_unlock(); | |
1882 | ||
1883 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, | |
77fdaa12 | 1884 | bssid, ap_ht_cap_flags); |
d3c990fb RR |
1885 | } |
1886 | ||
8b19e6ca | 1887 | /* Note: country IE parsing is done for us by cfg80211 */ |
3f2355cb | 1888 | if (elems.country_elem) { |
a8302de9 VT |
1889 | /* TODO: IBSS also needs this */ |
1890 | if (elems.pwr_constr_elem) | |
1891 | ieee80211_handle_pwr_constr(sdata, | |
1892 | le16_to_cpu(mgmt->u.probe_resp.capab_info), | |
1893 | elems.pwr_constr_elem, | |
1894 | elems.pwr_constr_elem_len); | |
3f2355cb LR |
1895 | } |
1896 | ||
471b3efd | 1897 | ieee80211_bss_info_change_notify(sdata, changed); |
f0706e82 JB |
1898 | } |
1899 | ||
46900298 | 1900 | ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, |
f1d58c25 | 1901 | struct sk_buff *skb) |
f0706e82 | 1902 | { |
f698d856 | 1903 | struct ieee80211_local *local = sdata->local; |
f0706e82 JB |
1904 | struct ieee80211_mgmt *mgmt; |
1905 | u16 fc; | |
1906 | ||
1907 | if (skb->len < 24) | |
46900298 | 1908 | return RX_DROP_MONITOR; |
f0706e82 JB |
1909 | |
1910 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1911 | fc = le16_to_cpu(mgmt->frame_control); | |
1912 | ||
1913 | switch (fc & IEEE80211_FCTL_STYPE) { | |
f0706e82 JB |
1914 | case IEEE80211_STYPE_PROBE_RESP: |
1915 | case IEEE80211_STYPE_BEACON: | |
f0706e82 JB |
1916 | case IEEE80211_STYPE_AUTH: |
1917 | case IEEE80211_STYPE_ASSOC_RESP: | |
1918 | case IEEE80211_STYPE_REASSOC_RESP: | |
1919 | case IEEE80211_STYPE_DEAUTH: | |
1920 | case IEEE80211_STYPE_DISASSOC: | |
77fdaa12 | 1921 | case IEEE80211_STYPE_ACTION: |
46900298 | 1922 | skb_queue_tail(&sdata->u.mgd.skb_queue, skb); |
42935eca | 1923 | ieee80211_queue_work(&local->hw, &sdata->u.mgd.work); |
46900298 | 1924 | return RX_QUEUED; |
f0706e82 JB |
1925 | } |
1926 | ||
46900298 | 1927 | return RX_DROP_MONITOR; |
f0706e82 JB |
1928 | } |
1929 | ||
f698d856 | 1930 | static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1931 | struct sk_buff *skb) |
1932 | { | |
77fdaa12 | 1933 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 | 1934 | struct ieee80211_rx_status *rx_status; |
f0706e82 | 1935 | struct ieee80211_mgmt *mgmt; |
77fdaa12 JB |
1936 | struct ieee80211_mgd_work *wk; |
1937 | enum rx_mgmt_action rma = RX_MGMT_NONE; | |
f0706e82 JB |
1938 | u16 fc; |
1939 | ||
f0706e82 JB |
1940 | rx_status = (struct ieee80211_rx_status *) skb->cb; |
1941 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1942 | fc = le16_to_cpu(mgmt->frame_control); | |
1943 | ||
77fdaa12 JB |
1944 | mutex_lock(&ifmgd->mtx); |
1945 | ||
1946 | if (ifmgd->associated && | |
1947 | memcmp(ifmgd->associated->cbss.bssid, mgmt->bssid, | |
1948 | ETH_ALEN) == 0) { | |
1949 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1950 | case IEEE80211_STYPE_BEACON: | |
1951 | ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, | |
1952 | rx_status); | |
1953 | break; | |
1954 | case IEEE80211_STYPE_PROBE_RESP: | |
1955 | ieee80211_rx_mgmt_probe_resp(sdata, NULL, mgmt, | |
1956 | skb->len, rx_status); | |
1957 | break; | |
1958 | case IEEE80211_STYPE_DEAUTH: | |
1959 | rma = ieee80211_rx_mgmt_deauth(sdata, NULL, | |
1960 | mgmt, skb->len); | |
1961 | break; | |
1962 | case IEEE80211_STYPE_DISASSOC: | |
1963 | rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); | |
1964 | break; | |
1965 | case IEEE80211_STYPE_ACTION: | |
1966 | /* XXX: differentiate, can only happen for CSA now! */ | |
1967 | ieee80211_sta_process_chanswitch(sdata, | |
1968 | &mgmt->u.action.u.chan_switch.sw_elem, | |
1969 | ifmgd->associated); | |
1970 | break; | |
1971 | } | |
1972 | mutex_unlock(&ifmgd->mtx); | |
1973 | ||
1974 | switch (rma) { | |
1975 | case RX_MGMT_NONE: | |
1976 | /* no action */ | |
1977 | break; | |
1978 | case RX_MGMT_CFG80211_DEAUTH: | |
ce470613 | 1979 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
1980 | break; |
1981 | case RX_MGMT_CFG80211_DISASSOC: | |
ce470613 | 1982 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
1983 | break; |
1984 | default: | |
1985 | WARN(1, "unexpected: %d", rma); | |
1986 | } | |
1987 | goto out; | |
1988 | } | |
1989 | ||
1990 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
1991 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) | |
1992 | continue; | |
1993 | ||
1994 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1995 | case IEEE80211_STYPE_PROBE_RESP: | |
1996 | ieee80211_rx_mgmt_probe_resp(sdata, wk, mgmt, skb->len, | |
1997 | rx_status); | |
1998 | break; | |
1999 | case IEEE80211_STYPE_AUTH: | |
2000 | rma = ieee80211_rx_mgmt_auth(sdata, wk, mgmt, skb->len); | |
2001 | break; | |
2002 | case IEEE80211_STYPE_ASSOC_RESP: | |
2003 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
2004 | skb->len, false); | |
2005 | break; | |
2006 | case IEEE80211_STYPE_REASSOC_RESP: | |
2007 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
2008 | skb->len, true); | |
2009 | break; | |
2010 | case IEEE80211_STYPE_DEAUTH: | |
2011 | rma = ieee80211_rx_mgmt_deauth(sdata, wk, mgmt, | |
2012 | skb->len); | |
2013 | break; | |
2014 | } | |
2015 | /* | |
2016 | * We've processed this frame for that work, so it can't | |
2017 | * belong to another work struct. | |
2018 | * NB: this is also required for correctness because the | |
2019 | * called functions can free 'wk', and for 'rma'! | |
2020 | */ | |
46900298 | 2021 | break; |
77fdaa12 JB |
2022 | } |
2023 | ||
2024 | mutex_unlock(&ifmgd->mtx); | |
2025 | ||
2026 | switch (rma) { | |
2027 | case RX_MGMT_NONE: | |
2028 | /* no action */ | |
46900298 | 2029 | break; |
77fdaa12 | 2030 | case RX_MGMT_CFG80211_AUTH: |
cb0b4beb | 2031 | cfg80211_send_rx_auth(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2032 | break; |
77fdaa12 | 2033 | case RX_MGMT_CFG80211_ASSOC: |
cb0b4beb | 2034 | cfg80211_send_rx_assoc(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2035 | break; |
8d8b261a | 2036 | case RX_MGMT_CFG80211_DEAUTH: |
ce470613 | 2037 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
8d8b261a | 2038 | break; |
77fdaa12 JB |
2039 | default: |
2040 | WARN(1, "unexpected: %d", rma); | |
f0706e82 JB |
2041 | } |
2042 | ||
77fdaa12 | 2043 | out: |
f0706e82 JB |
2044 | kfree_skb(skb); |
2045 | } | |
2046 | ||
9c6bd790 | 2047 | static void ieee80211_sta_timer(unsigned long data) |
f0706e82 | 2048 | { |
60f8b39c JB |
2049 | struct ieee80211_sub_if_data *sdata = |
2050 | (struct ieee80211_sub_if_data *) data; | |
46900298 | 2051 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
60f8b39c | 2052 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 2053 | |
5bb644a0 JB |
2054 | if (local->quiescing) { |
2055 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2056 | return; | |
2057 | } | |
2058 | ||
42935eca | 2059 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
f0706e82 JB |
2060 | } |
2061 | ||
9c6bd790 JB |
2062 | static void ieee80211_sta_work(struct work_struct *work) |
2063 | { | |
2064 | struct ieee80211_sub_if_data *sdata = | |
46900298 | 2065 | container_of(work, struct ieee80211_sub_if_data, u.mgd.work); |
9c6bd790 | 2066 | struct ieee80211_local *local = sdata->local; |
46900298 | 2067 | struct ieee80211_if_managed *ifmgd; |
9c6bd790 | 2068 | struct sk_buff *skb; |
77fdaa12 JB |
2069 | struct ieee80211_mgd_work *wk, *tmp; |
2070 | LIST_HEAD(free_work); | |
2071 | enum rx_mgmt_action rma; | |
2072 | bool anybusy = false; | |
9c6bd790 JB |
2073 | |
2074 | if (!netif_running(sdata->dev)) | |
2075 | return; | |
2076 | ||
fbe9c429 | 2077 | if (local->scanning) |
9c6bd790 JB |
2078 | return; |
2079 | ||
46900298 | 2080 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
9c6bd790 | 2081 | return; |
5bb644a0 JB |
2082 | |
2083 | /* | |
42935eca LR |
2084 | * ieee80211_queue_work() should have picked up most cases, |
2085 | * here we'll pick the the rest. | |
5bb644a0 | 2086 | */ |
42935eca LR |
2087 | if (WARN(local->suspended, "STA MLME work scheduled while " |
2088 | "going to suspend\n")) | |
5bb644a0 JB |
2089 | return; |
2090 | ||
46900298 | 2091 | ifmgd = &sdata->u.mgd; |
f0706e82 | 2092 | |
77fdaa12 | 2093 | /* first process frames to avoid timing out while a frame is pending */ |
46900298 | 2094 | while ((skb = skb_dequeue(&ifmgd->skb_queue))) |
9c6bd790 JB |
2095 | ieee80211_sta_rx_queued_mgmt(sdata, skb); |
2096 | ||
77fdaa12 JB |
2097 | /* then process the rest of the work */ |
2098 | mutex_lock(&ifmgd->mtx); | |
2099 | ||
b291ba11 JB |
2100 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
2101 | IEEE80211_STA_CONNECTION_POLL) && | |
2102 | ifmgd->associated) { | |
a43abf29 ML |
2103 | u8 bssid[ETH_ALEN]; |
2104 | ||
2105 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
b291ba11 JB |
2106 | if (time_is_after_jiffies(ifmgd->probe_timeout)) |
2107 | run_again(ifmgd, ifmgd->probe_timeout); | |
a43abf29 ML |
2108 | |
2109 | else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) { | |
2110 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
2111 | printk(KERN_DEBUG "No probe response from AP %pM" | |
2112 | " after %dms, try %d\n", bssid, | |
2113 | (1000 * IEEE80211_PROBE_WAIT)/HZ, | |
2114 | ifmgd->probe_send_count); | |
2115 | #endif | |
2116 | ieee80211_mgd_probe_ap_send(sdata); | |
2117 | } else { | |
b291ba11 JB |
2118 | /* |
2119 | * We actually lost the connection ... or did we? | |
2120 | * Let's make sure! | |
2121 | */ | |
2122 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
2123 | IEEE80211_STA_BEACON_POLL); | |
b291ba11 JB |
2124 | printk(KERN_DEBUG "No probe response from AP %pM" |
2125 | " after %dms, disconnecting.\n", | |
2126 | bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ); | |
e21546a2 | 2127 | ieee80211_set_disassoc(sdata, true); |
bc83b681 | 2128 | ieee80211_recalc_idle(local); |
b291ba11 JB |
2129 | mutex_unlock(&ifmgd->mtx); |
2130 | /* | |
2131 | * must be outside lock due to cfg80211, | |
2132 | * but that's not a problem. | |
2133 | */ | |
2134 | ieee80211_send_deauth_disassoc(sdata, bssid, | |
2135 | IEEE80211_STYPE_DEAUTH, | |
2136 | WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY, | |
2137 | NULL); | |
2138 | mutex_lock(&ifmgd->mtx); | |
2139 | } | |
2140 | } | |
2141 | ||
f0706e82 | 2142 | |
77fdaa12 JB |
2143 | ieee80211_recalc_idle(local); |
2144 | ||
77fdaa12 | 2145 | list_for_each_entry_safe(wk, tmp, &ifmgd->work_list, list) { |
ca386f31 JB |
2146 | if (time_is_after_jiffies(wk->timeout)) { |
2147 | /* | |
2148 | * This work item isn't supposed to be worked on | |
2149 | * right now, but take care to adjust the timer | |
2150 | * properly. | |
2151 | */ | |
2152 | run_again(ifmgd, wk->timeout); | |
77fdaa12 | 2153 | continue; |
ca386f31 | 2154 | } |
5cff20e6 | 2155 | |
77fdaa12 JB |
2156 | switch (wk->state) { |
2157 | default: | |
2158 | WARN_ON(1); | |
2159 | /* fall through */ | |
2160 | case IEEE80211_MGD_STATE_IDLE: | |
2161 | /* nothing */ | |
2162 | rma = RX_MGMT_NONE; | |
2163 | break; | |
2164 | case IEEE80211_MGD_STATE_PROBE: | |
2165 | rma = ieee80211_direct_probe(sdata, wk); | |
2166 | break; | |
2167 | case IEEE80211_MGD_STATE_AUTH: | |
2168 | rma = ieee80211_authenticate(sdata, wk); | |
2169 | break; | |
2170 | case IEEE80211_MGD_STATE_ASSOC: | |
2171 | rma = ieee80211_associate(sdata, wk); | |
2172 | break; | |
2173 | } | |
2174 | ||
2175 | switch (rma) { | |
2176 | case RX_MGMT_NONE: | |
2177 | /* no action required */ | |
2178 | break; | |
2179 | case RX_MGMT_CFG80211_AUTH_TO: | |
2180 | case RX_MGMT_CFG80211_ASSOC_TO: | |
2181 | list_del(&wk->list); | |
2182 | list_add(&wk->list, &free_work); | |
2183 | wk->tries = rma; /* small abuse but only local */ | |
2184 | break; | |
2185 | default: | |
2186 | WARN(1, "unexpected: %d", rma); | |
2187 | } | |
2188 | } | |
2189 | ||
5bf6fcc2 JM |
2190 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2191 | if (wk->state != IEEE80211_MGD_STATE_IDLE) { | |
2192 | anybusy = true; | |
2193 | break; | |
2194 | } | |
2195 | } | |
2196 | if (!anybusy && | |
2197 | test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifmgd->request)) | |
2198 | ieee80211_queue_delayed_work(&local->hw, | |
2199 | &local->scan_work, | |
2200 | round_jiffies_relative(0)); | |
2201 | ||
77fdaa12 JB |
2202 | mutex_unlock(&ifmgd->mtx); |
2203 | ||
2204 | list_for_each_entry_safe(wk, tmp, &free_work, list) { | |
2205 | switch (wk->tries) { | |
2206 | case RX_MGMT_CFG80211_AUTH_TO: | |
2207 | cfg80211_send_auth_timeout(sdata->dev, | |
cb0b4beb | 2208 | wk->bss->cbss.bssid); |
77fdaa12 JB |
2209 | break; |
2210 | case RX_MGMT_CFG80211_ASSOC_TO: | |
cb0b4beb JB |
2211 | cfg80211_send_assoc_timeout(sdata->dev, |
2212 | wk->bss->cbss.bssid); | |
77fdaa12 JB |
2213 | break; |
2214 | default: | |
2215 | WARN(1, "unexpected: %d", wk->tries); | |
2216 | } | |
2217 | ||
2218 | list_del(&wk->list); | |
2219 | kfree(wk); | |
9c6bd790 | 2220 | } |
77fdaa12 JB |
2221 | |
2222 | ieee80211_recalc_idle(local); | |
f0706e82 JB |
2223 | } |
2224 | ||
b291ba11 JB |
2225 | static void ieee80211_sta_bcn_mon_timer(unsigned long data) |
2226 | { | |
2227 | struct ieee80211_sub_if_data *sdata = | |
2228 | (struct ieee80211_sub_if_data *) data; | |
2229 | struct ieee80211_local *local = sdata->local; | |
2230 | ||
2231 | if (local->quiescing) | |
2232 | return; | |
2233 | ||
42935eca | 2234 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
b291ba11 JB |
2235 | } |
2236 | ||
2237 | static void ieee80211_sta_conn_mon_timer(unsigned long data) | |
2238 | { | |
2239 | struct ieee80211_sub_if_data *sdata = | |
2240 | (struct ieee80211_sub_if_data *) data; | |
2241 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2242 | struct ieee80211_local *local = sdata->local; | |
2243 | ||
2244 | if (local->quiescing) | |
2245 | return; | |
2246 | ||
42935eca | 2247 | ieee80211_queue_work(&local->hw, &ifmgd->monitor_work); |
b291ba11 JB |
2248 | } |
2249 | ||
2250 | static void ieee80211_sta_monitor_work(struct work_struct *work) | |
2251 | { | |
2252 | struct ieee80211_sub_if_data *sdata = | |
2253 | container_of(work, struct ieee80211_sub_if_data, | |
2254 | u.mgd.monitor_work); | |
2255 | ||
2256 | ieee80211_mgd_probe_ap(sdata, false); | |
2257 | } | |
2258 | ||
9c6bd790 JB |
2259 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
2260 | { | |
ad935687 | 2261 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
b291ba11 JB |
2262 | sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL | |
2263 | IEEE80211_STA_CONNECTION_POLL); | |
ad935687 | 2264 | |
b291ba11 | 2265 | /* let's probe the connection once */ |
42935eca | 2266 | ieee80211_queue_work(&sdata->local->hw, |
b291ba11 JB |
2267 | &sdata->u.mgd.monitor_work); |
2268 | /* and do all the other regular work too */ | |
42935eca | 2269 | ieee80211_queue_work(&sdata->local->hw, |
46900298 | 2270 | &sdata->u.mgd.work); |
ad935687 | 2271 | } |
9c6bd790 | 2272 | } |
f0706e82 | 2273 | |
5bb644a0 JB |
2274 | #ifdef CONFIG_PM |
2275 | void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata) | |
2276 | { | |
2277 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2278 | ||
2279 | /* | |
2280 | * we need to use atomic bitops for the running bits | |
2281 | * only because both timers might fire at the same | |
2282 | * time -- the code here is properly synchronised. | |
2283 | */ | |
2284 | ||
2285 | cancel_work_sync(&ifmgd->work); | |
2286 | cancel_work_sync(&ifmgd->beacon_loss_work); | |
2287 | if (del_timer_sync(&ifmgd->timer)) | |
2288 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2289 | ||
2290 | cancel_work_sync(&ifmgd->chswitch_work); | |
2291 | if (del_timer_sync(&ifmgd->chswitch_timer)) | |
2292 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
b291ba11 JB |
2293 | |
2294 | cancel_work_sync(&ifmgd->monitor_work); | |
2295 | /* these will just be re-established on connection */ | |
2296 | del_timer_sync(&ifmgd->conn_mon_timer); | |
2297 | del_timer_sync(&ifmgd->bcn_mon_timer); | |
5bb644a0 JB |
2298 | } |
2299 | ||
2300 | void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata) | |
2301 | { | |
2302 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2303 | ||
2304 | if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running)) | |
2305 | add_timer(&ifmgd->timer); | |
2306 | if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running)) | |
2307 | add_timer(&ifmgd->chswitch_timer); | |
2308 | } | |
2309 | #endif | |
2310 | ||
9c6bd790 JB |
2311 | /* interface setup */ |
2312 | void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata) | |
f0706e82 | 2313 | { |
46900298 | 2314 | struct ieee80211_if_managed *ifmgd; |
988c0f72 | 2315 | |
46900298 JB |
2316 | ifmgd = &sdata->u.mgd; |
2317 | INIT_WORK(&ifmgd->work, ieee80211_sta_work); | |
b291ba11 | 2318 | INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work); |
46900298 | 2319 | INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work); |
04de8381 | 2320 | INIT_WORK(&ifmgd->beacon_loss_work, ieee80211_beacon_loss_work); |
46900298 | 2321 | setup_timer(&ifmgd->timer, ieee80211_sta_timer, |
c481ec97 | 2322 | (unsigned long) sdata); |
b291ba11 JB |
2323 | setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer, |
2324 | (unsigned long) sdata); | |
2325 | setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer, | |
2326 | (unsigned long) sdata); | |
46900298 | 2327 | setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer, |
9c6bd790 | 2328 | (unsigned long) sdata); |
46900298 | 2329 | skb_queue_head_init(&ifmgd->skb_queue); |
9c6bd790 | 2330 | |
77fdaa12 JB |
2331 | INIT_LIST_HEAD(&ifmgd->work_list); |
2332 | ||
46900298 | 2333 | ifmgd->capab = WLAN_CAPABILITY_ESS; |
ab1faead | 2334 | ifmgd->flags = 0; |
176be728 | 2335 | if (sdata->local->hw.queues >= 4) |
46900298 | 2336 | ifmgd->flags |= IEEE80211_STA_WMM_ENABLED; |
bbbdff9e | 2337 | |
77fdaa12 | 2338 | mutex_init(&ifmgd->mtx); |
f0706e82 JB |
2339 | } |
2340 | ||
77fdaa12 JB |
2341 | /* scan finished notification */ |
2342 | void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local) | |
60f8b39c | 2343 | { |
77fdaa12 | 2344 | struct ieee80211_sub_if_data *sdata = local->scan_sdata; |
60f8b39c | 2345 | |
77fdaa12 JB |
2346 | /* Restart STA timers */ |
2347 | rcu_read_lock(); | |
2348 | list_for_each_entry_rcu(sdata, &local->interfaces, list) | |
2349 | ieee80211_restart_sta_timer(sdata); | |
2350 | rcu_read_unlock(); | |
2351 | } | |
60f8b39c | 2352 | |
77fdaa12 JB |
2353 | int ieee80211_max_network_latency(struct notifier_block *nb, |
2354 | unsigned long data, void *dummy) | |
2355 | { | |
2356 | s32 latency_usec = (s32) data; | |
2357 | struct ieee80211_local *local = | |
2358 | container_of(nb, struct ieee80211_local, | |
2359 | network_latency_notifier); | |
1fa6f4af | 2360 | |
77fdaa12 JB |
2361 | mutex_lock(&local->iflist_mtx); |
2362 | ieee80211_recalc_ps(local, latency_usec); | |
2363 | mutex_unlock(&local->iflist_mtx); | |
dfe67012 | 2364 | |
77fdaa12 | 2365 | return 0; |
9c6bd790 JB |
2366 | } |
2367 | ||
77fdaa12 JB |
2368 | /* config hooks */ |
2369 | int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata, | |
2370 | struct cfg80211_auth_request *req) | |
9c6bd790 | 2371 | { |
46900298 | 2372 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2373 | const u8 *ssid; |
2374 | struct ieee80211_mgd_work *wk; | |
2375 | u16 auth_alg; | |
9c6bd790 | 2376 | |
77fdaa12 JB |
2377 | switch (req->auth_type) { |
2378 | case NL80211_AUTHTYPE_OPEN_SYSTEM: | |
2379 | auth_alg = WLAN_AUTH_OPEN; | |
2380 | break; | |
2381 | case NL80211_AUTHTYPE_SHARED_KEY: | |
2382 | auth_alg = WLAN_AUTH_SHARED_KEY; | |
2383 | break; | |
2384 | case NL80211_AUTHTYPE_FT: | |
2385 | auth_alg = WLAN_AUTH_FT; | |
2386 | break; | |
2387 | case NL80211_AUTHTYPE_NETWORK_EAP: | |
2388 | auth_alg = WLAN_AUTH_LEAP; | |
2389 | break; | |
2390 | default: | |
2391 | return -EOPNOTSUPP; | |
60f8b39c | 2392 | } |
77fdaa12 JB |
2393 | |
2394 | wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2395 | if (!wk) | |
9c6bd790 | 2396 | return -ENOMEM; |
77fdaa12 JB |
2397 | |
2398 | wk->bss = (void *)req->bss; | |
2399 | ||
2400 | if (req->ie && req->ie_len) { | |
2401 | memcpy(wk->ie, req->ie, req->ie_len); | |
2402 | wk->ie_len = req->ie_len; | |
9c6bd790 | 2403 | } |
77fdaa12 | 2404 | |
fffd0934 JB |
2405 | if (req->key && req->key_len) { |
2406 | wk->key_len = req->key_len; | |
2407 | wk->key_idx = req->key_idx; | |
2408 | memcpy(wk->key, req->key, req->key_len); | |
2409 | } | |
2410 | ||
77fdaa12 JB |
2411 | ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID); |
2412 | memcpy(wk->ssid, ssid + 2, ssid[1]); | |
2413 | wk->ssid_len = ssid[1]; | |
2414 | ||
2415 | wk->state = IEEE80211_MGD_STATE_PROBE; | |
2416 | wk->auth_alg = auth_alg; | |
48531847 | 2417 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2418 | |
2419 | /* | |
2420 | * XXX: if still associated need to tell AP that we're going | |
2421 | * to sleep and then change channel etc. | |
2422 | */ | |
2423 | sdata->local->oper_channel = req->bss->channel; | |
2424 | ieee80211_hw_config(sdata->local, 0); | |
2425 | ||
2426 | mutex_lock(&ifmgd->mtx); | |
2427 | list_add(&wk->list, &sdata->u.mgd.work_list); | |
2428 | mutex_unlock(&ifmgd->mtx); | |
2429 | ||
42935eca | 2430 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
9c6bd790 | 2431 | return 0; |
60f8b39c JB |
2432 | } |
2433 | ||
77fdaa12 JB |
2434 | int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata, |
2435 | struct cfg80211_assoc_request *req) | |
f0706e82 | 2436 | { |
77fdaa12 JB |
2437 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2438 | struct ieee80211_mgd_work *wk, *found = NULL; | |
2439 | int i, err; | |
f0706e82 | 2440 | |
77fdaa12 JB |
2441 | mutex_lock(&ifmgd->mtx); |
2442 | ||
2443 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
2444 | if (&wk->bss->cbss == req->bss && | |
2445 | wk->state == IEEE80211_MGD_STATE_IDLE) { | |
2446 | found = wk; | |
2447 | break; | |
2448 | } | |
2449 | } | |
2450 | ||
2451 | if (!found) { | |
2452 | err = -ENOLINK; | |
2453 | goto out; | |
2454 | } | |
2455 | ||
2456 | list_del(&found->list); | |
2457 | ||
2458 | wk = krealloc(found, sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2459 | if (!wk) { | |
2460 | list_add(&found->list, &ifmgd->work_list); | |
2461 | err = -ENOMEM; | |
2462 | goto out; | |
2463 | } | |
2464 | ||
2465 | list_add(&wk->list, &ifmgd->work_list); | |
2466 | ||
2467 | ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N; | |
2468 | ||
2469 | for (i = 0; i < req->crypto.n_ciphers_pairwise; i++) | |
2470 | if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 || | |
2471 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP || | |
2472 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104) | |
2473 | ifmgd->flags |= IEEE80211_STA_DISABLE_11N; | |
2474 | ||
2475 | sdata->local->oper_channel = req->bss->channel; | |
2476 | ieee80211_hw_config(sdata->local, 0); | |
2477 | ||
2478 | if (req->ie && req->ie_len) { | |
2479 | memcpy(wk->ie, req->ie, req->ie_len); | |
2480 | wk->ie_len = req->ie_len; | |
2481 | } else | |
2482 | wk->ie_len = 0; | |
2483 | ||
2484 | if (req->prev_bssid) | |
2485 | memcpy(wk->prev_bssid, req->prev_bssid, ETH_ALEN); | |
2486 | ||
2487 | wk->state = IEEE80211_MGD_STATE_ASSOC; | |
2488 | wk->tries = 0; | |
48531847 | 2489 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2490 | |
2491 | if (req->use_mfp) { | |
2492 | ifmgd->mfp = IEEE80211_MFP_REQUIRED; | |
2493 | ifmgd->flags |= IEEE80211_STA_MFP_ENABLED; | |
2494 | } else { | |
2495 | ifmgd->mfp = IEEE80211_MFP_DISABLED; | |
2496 | ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED; | |
2497 | } | |
2498 | ||
2499 | if (req->crypto.control_port) | |
2500 | ifmgd->flags |= IEEE80211_STA_CONTROL_PORT; | |
2501 | else | |
2502 | ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT; | |
2503 | ||
42935eca | 2504 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
77fdaa12 JB |
2505 | |
2506 | err = 0; | |
2507 | ||
2508 | out: | |
2509 | mutex_unlock(&ifmgd->mtx); | |
2510 | return err; | |
f0706e82 JB |
2511 | } |
2512 | ||
77fdaa12 | 2513 | int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2514 | struct cfg80211_deauth_request *req, |
2515 | void *cookie) | |
f0706e82 | 2516 | { |
46900298 | 2517 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2518 | struct ieee80211_mgd_work *wk; |
2519 | const u8 *bssid = NULL; | |
a58ce43f | 2520 | bool not_auth_yet = false; |
f0706e82 | 2521 | |
77fdaa12 JB |
2522 | mutex_lock(&ifmgd->mtx); |
2523 | ||
2524 | if (ifmgd->associated && &ifmgd->associated->cbss == req->bss) { | |
2525 | bssid = req->bss->bssid; | |
e21546a2 | 2526 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
2527 | } else list_for_each_entry(wk, &ifmgd->work_list, list) { |
2528 | if (&wk->bss->cbss == req->bss) { | |
2529 | bssid = req->bss->bssid; | |
a58ce43f JB |
2530 | if (wk->state == IEEE80211_MGD_STATE_PROBE) |
2531 | not_auth_yet = true; | |
77fdaa12 JB |
2532 | list_del(&wk->list); |
2533 | kfree(wk); | |
2534 | break; | |
2535 | } | |
2536 | } | |
f0706e82 | 2537 | |
a58ce43f JB |
2538 | /* |
2539 | * If somebody requests authentication and we haven't | |
2540 | * sent out an auth frame yet there's no need to send | |
2541 | * out a deauth frame either. If the state was PROBE, | |
2542 | * then this is the case. If it's AUTH we have sent a | |
2543 | * frame, and if it's IDLE we have completed the auth | |
2544 | * process already. | |
2545 | */ | |
2546 | if (not_auth_yet) { | |
2547 | mutex_unlock(&ifmgd->mtx); | |
2548 | __cfg80211_auth_canceled(sdata->dev, bssid); | |
2549 | return 0; | |
2550 | } | |
2551 | ||
8d8b261a JB |
2552 | /* |
2553 | * cfg80211 should catch this ... but it's racy since | |
2554 | * we can receive a deauth frame, process it, hand it | |
2555 | * to cfg80211 while that's in a locked section already | |
2556 | * trying to tell us that the user wants to disconnect. | |
2557 | */ | |
2558 | if (!bssid) { | |
77fdaa12 | 2559 | mutex_unlock(&ifmgd->mtx); |
46900298 | 2560 | return -ENOLINK; |
77fdaa12 JB |
2561 | } |
2562 | ||
2563 | mutex_unlock(&ifmgd->mtx); | |
2564 | ||
0ff71613 JB |
2565 | printk(KERN_DEBUG "%s: deauthenticating from %pM by local choice (reason=%d)\n", |
2566 | sdata->dev->name, bssid, req->reason_code); | |
2567 | ||
77fdaa12 | 2568 | ieee80211_send_deauth_disassoc(sdata, bssid, |
667503dd JB |
2569 | IEEE80211_STYPE_DEAUTH, req->reason_code, |
2570 | cookie); | |
f0706e82 | 2571 | |
bc83b681 JB |
2572 | ieee80211_recalc_idle(sdata->local); |
2573 | ||
f0706e82 JB |
2574 | return 0; |
2575 | } | |
84363e6e | 2576 | |
77fdaa12 | 2577 | int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2578 | struct cfg80211_disassoc_request *req, |
2579 | void *cookie) | |
9c6bd790 | 2580 | { |
77fdaa12 | 2581 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9c6bd790 | 2582 | |
77fdaa12 | 2583 | mutex_lock(&ifmgd->mtx); |
10f644a4 | 2584 | |
8d8b261a JB |
2585 | /* |
2586 | * cfg80211 should catch this ... but it's racy since | |
2587 | * we can receive a disassoc frame, process it, hand it | |
2588 | * to cfg80211 while that's in a locked section already | |
2589 | * trying to tell us that the user wants to disconnect. | |
2590 | */ | |
2591 | if (&ifmgd->associated->cbss != req->bss) { | |
77fdaa12 JB |
2592 | mutex_unlock(&ifmgd->mtx); |
2593 | return -ENOLINK; | |
2594 | } | |
2595 | ||
0ff71613 JB |
2596 | printk(KERN_DEBUG "%s: disassociating from %pM by local choice (reason=%d)\n", |
2597 | sdata->dev->name, req->bss->bssid, req->reason_code); | |
2598 | ||
e21546a2 | 2599 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 JB |
2600 | |
2601 | mutex_unlock(&ifmgd->mtx); | |
10f644a4 | 2602 | |
77fdaa12 | 2603 | ieee80211_send_deauth_disassoc(sdata, req->bss->bssid, |
667503dd JB |
2604 | IEEE80211_STYPE_DISASSOC, req->reason_code, |
2605 | cookie); | |
bc83b681 JB |
2606 | |
2607 | ieee80211_recalc_idle(sdata->local); | |
2608 | ||
10f644a4 JB |
2609 | return 0; |
2610 | } |