Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * BSS client mode implementation | |
5394af4d | 3 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> |
f0706e82 JB |
4 | * Copyright 2004, Instant802 Networks, Inc. |
5 | * Copyright 2005, Devicescape Software, Inc. | |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License version 2 as | |
11 | * published by the Free Software Foundation. | |
12 | */ | |
13 | ||
5b323edb | 14 | #include <linux/delay.h> |
f0706e82 JB |
15 | #include <linux/if_ether.h> |
16 | #include <linux/skbuff.h> | |
f0706e82 | 17 | #include <linux/if_arp.h> |
f0706e82 | 18 | #include <linux/etherdevice.h> |
d0709a65 | 19 | #include <linux/rtnetlink.h> |
10f644a4 | 20 | #include <linux/pm_qos_params.h> |
d91f36db | 21 | #include <linux/crc32.h> |
f0706e82 | 22 | #include <net/mac80211.h> |
472dbc45 | 23 | #include <asm/unaligned.h> |
60f8b39c | 24 | |
f0706e82 | 25 | #include "ieee80211_i.h" |
24487981 | 26 | #include "driver-ops.h" |
2c8dccc7 JB |
27 | #include "rate.h" |
28 | #include "led.h" | |
f0706e82 JB |
29 | |
30 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
31 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
32 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
33 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
a43abf29 | 34 | #define IEEE80211_MAX_PROBE_TRIES 5 |
b291ba11 JB |
35 | |
36 | /* | |
37 | * beacon loss detection timeout | |
38 | * XXX: should depend on beacon interval | |
39 | */ | |
40 | #define IEEE80211_BEACON_LOSS_TIME (2 * HZ) | |
41 | /* | |
42 | * Time the connection can be idle before we probe | |
43 | * it to see if we can still talk to the AP. | |
44 | */ | |
d1c5091f | 45 | #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ) |
b291ba11 JB |
46 | /* |
47 | * Time we wait for a probe response after sending | |
48 | * a probe request because of beacon loss or for | |
49 | * checking the connection still works. | |
50 | */ | |
d1c5091f | 51 | #define IEEE80211_PROBE_WAIT (HZ / 2) |
f0706e82 | 52 | |
5bb644a0 JB |
53 | #define TMR_RUNNING_TIMER 0 |
54 | #define TMR_RUNNING_CHANSW 1 | |
55 | ||
77fdaa12 JB |
56 | /* |
57 | * All cfg80211 functions have to be called outside a locked | |
58 | * section so that they can acquire a lock themselves... This | |
59 | * is much simpler than queuing up things in cfg80211, but we | |
60 | * do need some indirection for that here. | |
61 | */ | |
62 | enum rx_mgmt_action { | |
63 | /* no action required */ | |
64 | RX_MGMT_NONE, | |
65 | ||
66 | /* caller must call cfg80211_send_rx_auth() */ | |
67 | RX_MGMT_CFG80211_AUTH, | |
68 | ||
69 | /* caller must call cfg80211_send_rx_assoc() */ | |
70 | RX_MGMT_CFG80211_ASSOC, | |
71 | ||
72 | /* caller must call cfg80211_send_deauth() */ | |
73 | RX_MGMT_CFG80211_DEAUTH, | |
74 | ||
75 | /* caller must call cfg80211_send_disassoc() */ | |
76 | RX_MGMT_CFG80211_DISASSOC, | |
77 | ||
78 | /* caller must call cfg80211_auth_timeout() & free work */ | |
79 | RX_MGMT_CFG80211_AUTH_TO, | |
80 | ||
81 | /* caller must call cfg80211_assoc_timeout() & free work */ | |
82 | RX_MGMT_CFG80211_ASSOC_TO, | |
83 | }; | |
84 | ||
5484e237 | 85 | /* utils */ |
77fdaa12 JB |
86 | static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd) |
87 | { | |
88 | WARN_ON(!mutex_is_locked(&ifmgd->mtx)); | |
89 | } | |
90 | ||
ca386f31 JB |
91 | /* |
92 | * We can have multiple work items (and connection probing) | |
93 | * scheduling this timer, but we need to take care to only | |
94 | * reschedule it when it should fire _earlier_ than it was | |
95 | * asked for before, or if it's not pending right now. This | |
96 | * function ensures that. Note that it then is required to | |
97 | * run this function for all timeouts after the first one | |
98 | * has happened -- the work that runs from this timer will | |
99 | * do that. | |
100 | */ | |
101 | static void run_again(struct ieee80211_if_managed *ifmgd, | |
102 | unsigned long timeout) | |
103 | { | |
104 | ASSERT_MGD_MTX(ifmgd); | |
105 | ||
106 | if (!timer_pending(&ifmgd->timer) || | |
107 | time_before(timeout, ifmgd->timer.expires)) | |
108 | mod_timer(&ifmgd->timer, timeout); | |
109 | } | |
110 | ||
b291ba11 JB |
111 | static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata) |
112 | { | |
113 | if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER) | |
114 | return; | |
115 | ||
116 | mod_timer(&sdata->u.mgd.bcn_mon_timer, | |
117 | round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME)); | |
118 | } | |
119 | ||
5484e237 | 120 | static int ecw2cw(int ecw) |
60f8b39c | 121 | { |
5484e237 | 122 | return (1 << ecw) - 1; |
60f8b39c JB |
123 | } |
124 | ||
c2b13452 | 125 | static int ieee80211_compatible_rates(struct ieee80211_bss *bss, |
9ac19a90 | 126 | struct ieee80211_supported_band *sband, |
881d948c | 127 | u32 *rates) |
9ac19a90 JB |
128 | { |
129 | int i, j, count; | |
130 | *rates = 0; | |
131 | count = 0; | |
132 | for (i = 0; i < bss->supp_rates_len; i++) { | |
133 | int rate = (bss->supp_rates[i] & 0x7F) * 5; | |
134 | ||
135 | for (j = 0; j < sband->n_bitrates; j++) | |
136 | if (sband->bitrates[j].bitrate == rate) { | |
137 | *rates |= BIT(j); | |
138 | count++; | |
139 | break; | |
140 | } | |
141 | } | |
142 | ||
143 | return count; | |
144 | } | |
145 | ||
d5522e03 JB |
146 | /* |
147 | * ieee80211_enable_ht should be called only after the operating band | |
148 | * has been determined as ht configuration depends on the hw's | |
149 | * HT abilities for a specific band. | |
150 | */ | |
151 | static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, | |
152 | struct ieee80211_ht_info *hti, | |
77fdaa12 | 153 | const u8 *bssid, u16 ap_ht_cap_flags) |
d5522e03 JB |
154 | { |
155 | struct ieee80211_local *local = sdata->local; | |
156 | struct ieee80211_supported_band *sband; | |
d5522e03 JB |
157 | struct sta_info *sta; |
158 | u32 changed = 0; | |
9ed6bcce | 159 | u16 ht_opmode; |
d5522e03 JB |
160 | bool enable_ht = true, ht_changed; |
161 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; | |
162 | ||
163 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
164 | ||
d5522e03 JB |
165 | /* HT is not supported */ |
166 | if (!sband->ht_cap.ht_supported) | |
167 | enable_ht = false; | |
168 | ||
169 | /* check that channel matches the right operating channel */ | |
170 | if (local->hw.conf.channel->center_freq != | |
171 | ieee80211_channel_to_frequency(hti->control_chan)) | |
172 | enable_ht = false; | |
173 | ||
174 | if (enable_ht) { | |
175 | channel_type = NL80211_CHAN_HT20; | |
176 | ||
177 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && | |
178 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && | |
179 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
180 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
181 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
768777ea LR |
182 | if (!(local->hw.conf.channel->flags & |
183 | IEEE80211_CHAN_NO_HT40PLUS)) | |
184 | channel_type = NL80211_CHAN_HT40PLUS; | |
d5522e03 JB |
185 | break; |
186 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
768777ea LR |
187 | if (!(local->hw.conf.channel->flags & |
188 | IEEE80211_CHAN_NO_HT40MINUS)) | |
189 | channel_type = NL80211_CHAN_HT40MINUS; | |
d5522e03 JB |
190 | break; |
191 | } | |
192 | } | |
193 | } | |
194 | ||
195 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || | |
196 | channel_type != local->hw.conf.channel_type; | |
197 | ||
198 | local->oper_channel_type = channel_type; | |
199 | ||
200 | if (ht_changed) { | |
201 | /* channel_type change automatically detected */ | |
202 | ieee80211_hw_config(local, 0); | |
203 | ||
204 | rcu_read_lock(); | |
77fdaa12 | 205 | sta = sta_info_get(local, bssid); |
d5522e03 JB |
206 | if (sta) |
207 | rate_control_rate_update(local, sband, sta, | |
208 | IEEE80211_RC_HT_CHANGED); | |
d5522e03 | 209 | rcu_read_unlock(); |
d5522e03 JB |
210 | } |
211 | ||
212 | /* disable HT */ | |
213 | if (!enable_ht) | |
214 | return 0; | |
215 | ||
9ed6bcce | 216 | ht_opmode = le16_to_cpu(hti->operation_mode); |
d5522e03 JB |
217 | |
218 | /* if bss configuration changed store the new one */ | |
413ad50a JB |
219 | if (!sdata->ht_opmode_valid || |
220 | sdata->vif.bss_conf.ht_operation_mode != ht_opmode) { | |
d5522e03 | 221 | changed |= BSS_CHANGED_HT; |
9ed6bcce | 222 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; |
413ad50a | 223 | sdata->ht_opmode_valid = true; |
d5522e03 JB |
224 | } |
225 | ||
226 | return changed; | |
227 | } | |
228 | ||
9c6bd790 JB |
229 | /* frame sending functions */ |
230 | ||
77fdaa12 JB |
231 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
232 | struct ieee80211_mgd_work *wk) | |
9ac19a90 | 233 | { |
46900298 | 234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
235 | struct ieee80211_local *local = sdata->local; |
236 | struct sk_buff *skb; | |
237 | struct ieee80211_mgmt *mgmt; | |
517357c6 JB |
238 | u8 *pos; |
239 | const u8 *ies, *ht_ie; | |
9ac19a90 JB |
240 | int i, len, count, rates_len, supp_rates_len; |
241 | u16 capab; | |
9ac19a90 JB |
242 | int wmm = 0; |
243 | struct ieee80211_supported_band *sband; | |
881d948c | 244 | u32 rates = 0; |
9ac19a90 JB |
245 | |
246 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
77fdaa12 JB |
247 | sizeof(*mgmt) + 200 + wk->ie_len + |
248 | wk->ssid_len); | |
9ac19a90 JB |
249 | if (!skb) { |
250 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
251 | "frame\n", sdata->dev->name); | |
252 | return; | |
253 | } | |
254 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
255 | ||
256 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
257 | ||
46900298 | 258 | capab = ifmgd->capab; |
9ac19a90 JB |
259 | |
260 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { | |
261 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
262 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
263 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
264 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
265 | } | |
266 | ||
77fdaa12 JB |
267 | if (wk->bss->cbss.capability & WLAN_CAPABILITY_PRIVACY) |
268 | capab |= WLAN_CAPABILITY_PRIVACY; | |
269 | if (wk->bss->wmm_used) | |
270 | wmm = 1; | |
9ac19a90 | 271 | |
77fdaa12 JB |
272 | /* get all rates supported by the device and the AP as |
273 | * some APs don't like getting a superset of their rates | |
274 | * in the association request (e.g. D-Link DAP 1353 in | |
275 | * b-only mode) */ | |
276 | rates_len = ieee80211_compatible_rates(wk->bss, sband, &rates); | |
9ac19a90 | 277 | |
77fdaa12 JB |
278 | if ((wk->bss->cbss.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
279 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) | |
280 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; | |
9ac19a90 JB |
281 | |
282 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
283 | memset(mgmt, 0, 24); | |
77fdaa12 | 284 | memcpy(mgmt->da, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 285 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 286 | memcpy(mgmt->bssid, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 287 | |
77fdaa12 | 288 | if (!is_zero_ether_addr(wk->prev_bssid)) { |
9ac19a90 JB |
289 | skb_put(skb, 10); |
290 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
291 | IEEE80211_STYPE_REASSOC_REQ); | |
292 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
293 | mgmt->u.reassoc_req.listen_interval = | |
294 | cpu_to_le16(local->hw.conf.listen_interval); | |
77fdaa12 | 295 | memcpy(mgmt->u.reassoc_req.current_ap, wk->prev_bssid, |
9ac19a90 JB |
296 | ETH_ALEN); |
297 | } else { | |
298 | skb_put(skb, 4); | |
299 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
300 | IEEE80211_STYPE_ASSOC_REQ); | |
301 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
13554121 | 302 | mgmt->u.assoc_req.listen_interval = |
9ac19a90 JB |
303 | cpu_to_le16(local->hw.conf.listen_interval); |
304 | } | |
305 | ||
306 | /* SSID */ | |
77fdaa12 | 307 | ies = pos = skb_put(skb, 2 + wk->ssid_len); |
9ac19a90 | 308 | *pos++ = WLAN_EID_SSID; |
77fdaa12 JB |
309 | *pos++ = wk->ssid_len; |
310 | memcpy(pos, wk->ssid, wk->ssid_len); | |
9ac19a90 JB |
311 | |
312 | /* add all rates which were marked to be used above */ | |
313 | supp_rates_len = rates_len; | |
314 | if (supp_rates_len > 8) | |
315 | supp_rates_len = 8; | |
316 | ||
317 | len = sband->n_bitrates; | |
318 | pos = skb_put(skb, supp_rates_len + 2); | |
319 | *pos++ = WLAN_EID_SUPP_RATES; | |
320 | *pos++ = supp_rates_len; | |
321 | ||
322 | count = 0; | |
323 | for (i = 0; i < sband->n_bitrates; i++) { | |
324 | if (BIT(i) & rates) { | |
325 | int rate = sband->bitrates[i].bitrate; | |
326 | *pos++ = (u8) (rate / 5); | |
327 | if (++count == 8) | |
328 | break; | |
329 | } | |
330 | } | |
331 | ||
332 | if (rates_len > count) { | |
333 | pos = skb_put(skb, rates_len - count + 2); | |
334 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
335 | *pos++ = rates_len - count; | |
336 | ||
337 | for (i++; i < sband->n_bitrates; i++) { | |
338 | if (BIT(i) & rates) { | |
339 | int rate = sband->bitrates[i].bitrate; | |
340 | *pos++ = (u8) (rate / 5); | |
341 | } | |
342 | } | |
343 | } | |
344 | ||
345 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { | |
346 | /* 1. power capabilities */ | |
347 | pos = skb_put(skb, 4); | |
348 | *pos++ = WLAN_EID_PWR_CAPABILITY; | |
349 | *pos++ = 2; | |
350 | *pos++ = 0; /* min tx power */ | |
351 | *pos++ = local->hw.conf.channel->max_power; /* max tx power */ | |
352 | ||
353 | /* 2. supported channels */ | |
354 | /* TODO: get this in reg domain format */ | |
355 | pos = skb_put(skb, 2 * sband->n_channels + 2); | |
356 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
357 | *pos++ = 2 * sband->n_channels; | |
358 | for (i = 0; i < sband->n_channels; i++) { | |
359 | *pos++ = ieee80211_frequency_to_channel( | |
360 | sband->channels[i].center_freq); | |
361 | *pos++ = 1; /* one channel in the subband*/ | |
362 | } | |
363 | } | |
364 | ||
77fdaa12 JB |
365 | if (wk->ie_len && wk->ie) { |
366 | pos = skb_put(skb, wk->ie_len); | |
367 | memcpy(pos, wk->ie, wk->ie_len); | |
9ac19a90 JB |
368 | } |
369 | ||
46900298 | 370 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) { |
9ac19a90 JB |
371 | pos = skb_put(skb, 9); |
372 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
373 | *pos++ = 7; /* len */ | |
374 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
375 | *pos++ = 0x50; | |
376 | *pos++ = 0xf2; | |
377 | *pos++ = 2; /* WME */ | |
378 | *pos++ = 0; /* WME info */ | |
379 | *pos++ = 1; /* WME ver */ | |
380 | *pos++ = 0; | |
381 | } | |
382 | ||
383 | /* wmm support is a must to HT */ | |
eb46936b VT |
384 | /* |
385 | * IEEE802.11n does not allow TKIP/WEP as pairwise | |
386 | * ciphers in HT mode. We still associate in non-ht | |
387 | * mode (11a/b/g) if any one of these ciphers is | |
388 | * configured as pairwise. | |
389 | */ | |
46900298 | 390 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
d9fe60de | 391 | sband->ht_cap.ht_supported && |
77fdaa12 | 392 | (ht_ie = ieee80211_bss_get_ie(&wk->bss->cbss, WLAN_EID_HT_INFORMATION)) && |
eb46936b | 393 | ht_ie[1] >= sizeof(struct ieee80211_ht_info) && |
ab1faead | 394 | (!(ifmgd->flags & IEEE80211_STA_DISABLE_11N))) { |
d9fe60de JB |
395 | struct ieee80211_ht_info *ht_info = |
396 | (struct ieee80211_ht_info *)(ht_ie + 2); | |
397 | u16 cap = sband->ht_cap.cap; | |
9ac19a90 JB |
398 | __le16 tmp; |
399 | u32 flags = local->hw.conf.channel->flags; | |
400 | ||
d9fe60de JB |
401 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
402 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
689da1b3 | 403 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { |
d9fe60de | 404 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
405 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
406 | } | |
407 | break; | |
d9fe60de | 408 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
689da1b3 | 409 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { |
d9fe60de | 410 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
411 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
412 | } | |
413 | break; | |
414 | } | |
415 | ||
416 | tmp = cpu_to_le16(cap); | |
417 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2); | |
418 | *pos++ = WLAN_EID_HT_CAPABILITY; | |
419 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
420 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
421 | memcpy(pos, &tmp, sizeof(u16)); | |
422 | pos += sizeof(u16); | |
423 | /* TODO: needs a define here for << 2 */ | |
d9fe60de JB |
424 | *pos++ = sband->ht_cap.ampdu_factor | |
425 | (sband->ht_cap.ampdu_density << 2); | |
426 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); | |
9ac19a90 JB |
427 | } |
428 | ||
e50db65c | 429 | ieee80211_tx_skb(sdata, skb, 0); |
9ac19a90 JB |
430 | } |
431 | ||
432 | ||
ef422bc0 | 433 | static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
434 | const u8 *bssid, u16 stype, u16 reason, |
435 | void *cookie) | |
9ac19a90 JB |
436 | { |
437 | struct ieee80211_local *local = sdata->local; | |
46900298 | 438 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
439 | struct sk_buff *skb; |
440 | struct ieee80211_mgmt *mgmt; | |
9aed3cc1 | 441 | |
65fc73ac | 442 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); |
9ac19a90 | 443 | if (!skb) { |
ef422bc0 JB |
444 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
445 | "deauth/disassoc frame\n", sdata->dev->name); | |
9ac19a90 JB |
446 | return; |
447 | } | |
448 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
449 | ||
450 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
451 | memset(mgmt, 0, 24); | |
77fdaa12 | 452 | memcpy(mgmt->da, bssid, ETH_ALEN); |
9ac19a90 | 453 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 454 | memcpy(mgmt->bssid, bssid, ETH_ALEN); |
ef422bc0 | 455 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); |
9ac19a90 | 456 | skb_put(skb, 2); |
ef422bc0 | 457 | /* u.deauth.reason_code == u.disassoc.reason_code */ |
9ac19a90 JB |
458 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); |
459 | ||
53b46b84 | 460 | if (stype == IEEE80211_STYPE_DEAUTH) |
ce470613 HS |
461 | if (cookie) |
462 | __cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
463 | else | |
464 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
53b46b84 | 465 | else |
ce470613 HS |
466 | if (cookie) |
467 | __cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
468 | else | |
469 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
46900298 | 470 | ieee80211_tx_skb(sdata, skb, ifmgd->flags & IEEE80211_STA_MFP_ENABLED); |
9ac19a90 JB |
471 | } |
472 | ||
572e0012 KV |
473 | void ieee80211_send_pspoll(struct ieee80211_local *local, |
474 | struct ieee80211_sub_if_data *sdata) | |
475 | { | |
46900298 | 476 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
572e0012 KV |
477 | struct ieee80211_pspoll *pspoll; |
478 | struct sk_buff *skb; | |
479 | u16 fc; | |
480 | ||
481 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*pspoll)); | |
482 | if (!skb) { | |
483 | printk(KERN_DEBUG "%s: failed to allocate buffer for " | |
484 | "pspoll frame\n", sdata->dev->name); | |
485 | return; | |
486 | } | |
487 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
488 | ||
489 | pspoll = (struct ieee80211_pspoll *) skb_put(skb, sizeof(*pspoll)); | |
490 | memset(pspoll, 0, sizeof(*pspoll)); | |
491 | fc = IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL | IEEE80211_FCTL_PM; | |
492 | pspoll->frame_control = cpu_to_le16(fc); | |
46900298 | 493 | pspoll->aid = cpu_to_le16(ifmgd->aid); |
572e0012 KV |
494 | |
495 | /* aid in PS-Poll has its two MSBs each set to 1 */ | |
496 | pspoll->aid |= cpu_to_le16(1 << 15 | 1 << 14); | |
497 | ||
46900298 | 498 | memcpy(pspoll->bssid, ifmgd->bssid, ETH_ALEN); |
572e0012 KV |
499 | memcpy(pspoll->ta, sdata->dev->dev_addr, ETH_ALEN); |
500 | ||
501 | ieee80211_tx_skb(sdata, skb, 0); | |
572e0012 KV |
502 | } |
503 | ||
965bedad JB |
504 | void ieee80211_send_nullfunc(struct ieee80211_local *local, |
505 | struct ieee80211_sub_if_data *sdata, | |
506 | int powersave) | |
507 | { | |
508 | struct sk_buff *skb; | |
509 | struct ieee80211_hdr *nullfunc; | |
510 | __le16 fc; | |
511 | ||
512 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) | |
513 | return; | |
514 | ||
515 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); | |
516 | if (!skb) { | |
517 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " | |
518 | "frame\n", sdata->dev->name); | |
519 | return; | |
520 | } | |
521 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
522 | ||
523 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); | |
524 | memset(nullfunc, 0, 24); | |
525 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | | |
526 | IEEE80211_FCTL_TODS); | |
527 | if (powersave) | |
528 | fc |= cpu_to_le16(IEEE80211_FCTL_PM); | |
529 | nullfunc->frame_control = fc; | |
530 | memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN); | |
531 | memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN); | |
532 | memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN); | |
533 | ||
534 | ieee80211_tx_skb(sdata, skb, 0); | |
535 | } | |
536 | ||
cc32abd4 JB |
537 | /* spectrum management related things */ |
538 | static void ieee80211_chswitch_work(struct work_struct *work) | |
539 | { | |
540 | struct ieee80211_sub_if_data *sdata = | |
541 | container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work); | |
cc32abd4 JB |
542 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
543 | ||
544 | if (!netif_running(sdata->dev)) | |
545 | return; | |
546 | ||
77fdaa12 JB |
547 | mutex_lock(&ifmgd->mtx); |
548 | if (!ifmgd->associated) | |
549 | goto out; | |
cc32abd4 JB |
550 | |
551 | sdata->local->oper_channel = sdata->local->csa_channel; | |
77fdaa12 JB |
552 | ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL); |
553 | ||
cc32abd4 | 554 | /* XXX: shouldn't really modify cfg80211-owned data! */ |
77fdaa12 | 555 | ifmgd->associated->cbss.channel = sdata->local->oper_channel; |
cc32abd4 | 556 | |
cc32abd4 JB |
557 | ieee80211_wake_queues_by_reason(&sdata->local->hw, |
558 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
77fdaa12 JB |
559 | out: |
560 | ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED; | |
561 | mutex_unlock(&ifmgd->mtx); | |
cc32abd4 JB |
562 | } |
563 | ||
564 | static void ieee80211_chswitch_timer(unsigned long data) | |
565 | { | |
566 | struct ieee80211_sub_if_data *sdata = | |
567 | (struct ieee80211_sub_if_data *) data; | |
568 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
569 | ||
5bb644a0 JB |
570 | if (sdata->local->quiescing) { |
571 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
572 | return; | |
573 | } | |
574 | ||
42935eca | 575 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
576 | } |
577 | ||
578 | void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata, | |
579 | struct ieee80211_channel_sw_ie *sw_elem, | |
580 | struct ieee80211_bss *bss) | |
581 | { | |
582 | struct ieee80211_channel *new_ch; | |
583 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
584 | int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num); | |
585 | ||
77fdaa12 JB |
586 | ASSERT_MGD_MTX(ifmgd); |
587 | ||
588 | if (!ifmgd->associated) | |
cc32abd4 JB |
589 | return; |
590 | ||
fbe9c429 | 591 | if (sdata->local->scanning) |
cc32abd4 JB |
592 | return; |
593 | ||
594 | /* Disregard subsequent beacons if we are already running a timer | |
595 | processing a CSA */ | |
596 | ||
597 | if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED) | |
598 | return; | |
599 | ||
600 | new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq); | |
601 | if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED) | |
602 | return; | |
603 | ||
604 | sdata->local->csa_channel = new_ch; | |
605 | ||
606 | if (sw_elem->count <= 1) { | |
42935eca | 607 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
608 | } else { |
609 | ieee80211_stop_queues_by_reason(&sdata->local->hw, | |
610 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
611 | ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED; | |
612 | mod_timer(&ifmgd->chswitch_timer, | |
613 | jiffies + | |
614 | msecs_to_jiffies(sw_elem->count * | |
615 | bss->cbss.beacon_interval)); | |
616 | } | |
617 | } | |
618 | ||
619 | static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata, | |
620 | u16 capab_info, u8 *pwr_constr_elem, | |
621 | u8 pwr_constr_elem_len) | |
622 | { | |
623 | struct ieee80211_conf *conf = &sdata->local->hw.conf; | |
624 | ||
625 | if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT)) | |
626 | return; | |
627 | ||
628 | /* Power constraint IE length should be 1 octet */ | |
629 | if (pwr_constr_elem_len != 1) | |
630 | return; | |
631 | ||
632 | if ((*pwr_constr_elem <= conf->channel->max_power) && | |
633 | (*pwr_constr_elem != sdata->local->power_constr_level)) { | |
634 | sdata->local->power_constr_level = *pwr_constr_elem; | |
635 | ieee80211_hw_config(sdata->local, 0); | |
636 | } | |
637 | } | |
638 | ||
965bedad JB |
639 | /* powersave */ |
640 | static void ieee80211_enable_ps(struct ieee80211_local *local, | |
641 | struct ieee80211_sub_if_data *sdata) | |
642 | { | |
643 | struct ieee80211_conf *conf = &local->hw.conf; | |
644 | ||
d5edaedc JB |
645 | /* |
646 | * If we are scanning right now then the parameters will | |
647 | * take effect when scan finishes. | |
648 | */ | |
fbe9c429 | 649 | if (local->scanning) |
d5edaedc JB |
650 | return; |
651 | ||
965bedad JB |
652 | if (conf->dynamic_ps_timeout > 0 && |
653 | !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) { | |
654 | mod_timer(&local->dynamic_ps_timer, jiffies + | |
655 | msecs_to_jiffies(conf->dynamic_ps_timeout)); | |
656 | } else { | |
657 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
658 | ieee80211_send_nullfunc(local, sdata, 1); | |
659 | conf->flags |= IEEE80211_CONF_PS; | |
660 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
661 | } | |
662 | } | |
663 | ||
664 | static void ieee80211_change_ps(struct ieee80211_local *local) | |
665 | { | |
666 | struct ieee80211_conf *conf = &local->hw.conf; | |
667 | ||
668 | if (local->ps_sdata) { | |
965bedad JB |
669 | ieee80211_enable_ps(local, local->ps_sdata); |
670 | } else if (conf->flags & IEEE80211_CONF_PS) { | |
671 | conf->flags &= ~IEEE80211_CONF_PS; | |
672 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
673 | del_timer_sync(&local->dynamic_ps_timer); | |
674 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
675 | } | |
676 | } | |
677 | ||
678 | /* need to hold RTNL or interface lock */ | |
10f644a4 | 679 | void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency) |
965bedad JB |
680 | { |
681 | struct ieee80211_sub_if_data *sdata, *found = NULL; | |
682 | int count = 0; | |
683 | ||
684 | if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) { | |
685 | local->ps_sdata = NULL; | |
686 | return; | |
687 | } | |
688 | ||
689 | list_for_each_entry(sdata, &local->interfaces, list) { | |
690 | if (!netif_running(sdata->dev)) | |
691 | continue; | |
692 | if (sdata->vif.type != NL80211_IFTYPE_STATION) | |
693 | continue; | |
694 | found = sdata; | |
695 | count++; | |
696 | } | |
697 | ||
43f78531 | 698 | if (count == 1 && found->u.mgd.powersave && |
77fdaa12 | 699 | found->u.mgd.associated && list_empty(&found->u.mgd.work_list) && |
b291ba11 JB |
700 | !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL | |
701 | IEEE80211_STA_CONNECTION_POLL))) { | |
10f644a4 JB |
702 | s32 beaconint_us; |
703 | ||
704 | if (latency < 0) | |
705 | latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY); | |
706 | ||
707 | beaconint_us = ieee80211_tu_to_usec( | |
708 | found->vif.bss_conf.beacon_int); | |
709 | ||
04fe2037 | 710 | if (beaconint_us > latency) { |
10f644a4 | 711 | local->ps_sdata = NULL; |
04fe2037 JB |
712 | } else { |
713 | u8 dtimper = found->vif.bss_conf.dtim_period; | |
714 | int maxslp = 1; | |
715 | ||
716 | if (dtimper > 1) | |
717 | maxslp = min_t(int, dtimper, | |
718 | latency / beaconint_us); | |
719 | ||
9ccebe61 | 720 | local->hw.conf.max_sleep_period = maxslp; |
10f644a4 | 721 | local->ps_sdata = found; |
04fe2037 | 722 | } |
10f644a4 | 723 | } else { |
965bedad | 724 | local->ps_sdata = NULL; |
10f644a4 | 725 | } |
965bedad JB |
726 | |
727 | ieee80211_change_ps(local); | |
728 | } | |
729 | ||
730 | void ieee80211_dynamic_ps_disable_work(struct work_struct *work) | |
731 | { | |
732 | struct ieee80211_local *local = | |
733 | container_of(work, struct ieee80211_local, | |
734 | dynamic_ps_disable_work); | |
735 | ||
736 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { | |
737 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
738 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
739 | } | |
740 | ||
741 | ieee80211_wake_queues_by_reason(&local->hw, | |
742 | IEEE80211_QUEUE_STOP_REASON_PS); | |
743 | } | |
744 | ||
745 | void ieee80211_dynamic_ps_enable_work(struct work_struct *work) | |
746 | { | |
747 | struct ieee80211_local *local = | |
748 | container_of(work, struct ieee80211_local, | |
749 | dynamic_ps_enable_work); | |
750 | struct ieee80211_sub_if_data *sdata = local->ps_sdata; | |
751 | ||
752 | /* can only happen when PS was just disabled anyway */ | |
753 | if (!sdata) | |
754 | return; | |
755 | ||
756 | if (local->hw.conf.flags & IEEE80211_CONF_PS) | |
757 | return; | |
758 | ||
759 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
760 | ieee80211_send_nullfunc(local, sdata, 1); | |
761 | ||
762 | local->hw.conf.flags |= IEEE80211_CONF_PS; | |
763 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
764 | } | |
765 | ||
766 | void ieee80211_dynamic_ps_timer(unsigned long data) | |
767 | { | |
768 | struct ieee80211_local *local = (void *) data; | |
769 | ||
78f1a8b7 | 770 | if (local->quiescing || local->suspended) |
5bb644a0 JB |
771 | return; |
772 | ||
42935eca | 773 | ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work); |
965bedad JB |
774 | } |
775 | ||
60f8b39c | 776 | /* MLME */ |
f698d856 | 777 | static void ieee80211_sta_wmm_params(struct ieee80211_local *local, |
46900298 | 778 | struct ieee80211_if_managed *ifmgd, |
f0706e82 JB |
779 | u8 *wmm_param, size_t wmm_param_len) |
780 | { | |
f0706e82 JB |
781 | struct ieee80211_tx_queue_params params; |
782 | size_t left; | |
783 | int count; | |
784 | u8 *pos; | |
785 | ||
46900298 | 786 | if (!(ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) |
3434fbd3 JB |
787 | return; |
788 | ||
789 | if (!wmm_param) | |
790 | return; | |
791 | ||
f0706e82 JB |
792 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
793 | return; | |
794 | count = wmm_param[6] & 0x0f; | |
46900298 | 795 | if (count == ifmgd->wmm_last_param_set) |
f0706e82 | 796 | return; |
46900298 | 797 | ifmgd->wmm_last_param_set = count; |
f0706e82 JB |
798 | |
799 | pos = wmm_param + 8; | |
800 | left = wmm_param_len - 8; | |
801 | ||
802 | memset(¶ms, 0, sizeof(params)); | |
803 | ||
f0706e82 JB |
804 | local->wmm_acm = 0; |
805 | for (; left >= 4; left -= 4, pos += 4) { | |
806 | int aci = (pos[0] >> 5) & 0x03; | |
807 | int acm = (pos[0] >> 4) & 0x01; | |
808 | int queue; | |
809 | ||
810 | switch (aci) { | |
0eeb59fe | 811 | case 1: /* AC_BK */ |
e100bb64 | 812 | queue = 3; |
988c0f72 | 813 | if (acm) |
0eeb59fe | 814 | local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */ |
f0706e82 | 815 | break; |
0eeb59fe | 816 | case 2: /* AC_VI */ |
e100bb64 | 817 | queue = 1; |
988c0f72 | 818 | if (acm) |
0eeb59fe | 819 | local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */ |
f0706e82 | 820 | break; |
0eeb59fe | 821 | case 3: /* AC_VO */ |
e100bb64 | 822 | queue = 0; |
988c0f72 | 823 | if (acm) |
0eeb59fe | 824 | local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */ |
f0706e82 | 825 | break; |
0eeb59fe | 826 | case 0: /* AC_BE */ |
f0706e82 | 827 | default: |
e100bb64 | 828 | queue = 2; |
988c0f72 | 829 | if (acm) |
0eeb59fe | 830 | local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */ |
f0706e82 JB |
831 | break; |
832 | } | |
833 | ||
834 | params.aifs = pos[0] & 0x0f; | |
835 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); | |
836 | params.cw_min = ecw2cw(pos[1] & 0x0f); | |
f434b2d1 | 837 | params.txop = get_unaligned_le16(pos + 2); |
f4ea83dd | 838 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
f0706e82 | 839 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
3330d7be | 840 | "cWmin=%d cWmax=%d txop=%d\n", |
0bffe40f JB |
841 | wiphy_name(local->hw.wiphy), queue, aci, acm, |
842 | params.aifs, params.cw_min, params.cw_max, params.txop); | |
3330d7be | 843 | #endif |
24487981 | 844 | if (drv_conf_tx(local, queue, ¶ms) && local->ops->conf_tx) |
f0706e82 | 845 | printk(KERN_DEBUG "%s: failed to set TX queue " |
0bffe40f JB |
846 | "parameters for queue %d\n", |
847 | wiphy_name(local->hw.wiphy), queue); | |
f0706e82 JB |
848 | } |
849 | } | |
850 | ||
7a5158ef JB |
851 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, |
852 | u16 capab, bool erp_valid, u8 erp) | |
5628221c | 853 | { |
bda3933a | 854 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
471b3efd | 855 | u32 changed = 0; |
7a5158ef JB |
856 | bool use_protection; |
857 | bool use_short_preamble; | |
858 | bool use_short_slot; | |
859 | ||
860 | if (erp_valid) { | |
861 | use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0; | |
862 | use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0; | |
863 | } else { | |
864 | use_protection = false; | |
865 | use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE); | |
866 | } | |
867 | ||
868 | use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME); | |
5628221c | 869 | |
471b3efd | 870 | if (use_protection != bss_conf->use_cts_prot) { |
471b3efd JB |
871 | bss_conf->use_cts_prot = use_protection; |
872 | changed |= BSS_CHANGED_ERP_CTS_PROT; | |
5628221c | 873 | } |
7e9ed188 | 874 | |
d43c7b37 | 875 | if (use_short_preamble != bss_conf->use_short_preamble) { |
d43c7b37 | 876 | bss_conf->use_short_preamble = use_short_preamble; |
471b3efd | 877 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
7e9ed188 | 878 | } |
d9430a32 | 879 | |
7a5158ef | 880 | if (use_short_slot != bss_conf->use_short_slot) { |
7a5158ef JB |
881 | bss_conf->use_short_slot = use_short_slot; |
882 | changed |= BSS_CHANGED_ERP_SLOT; | |
50c4afb9 JL |
883 | } |
884 | ||
885 | return changed; | |
886 | } | |
887 | ||
f698d856 | 888 | static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata, |
e21546a2 | 889 | struct ieee80211_mgd_work *wk, |
ae5eb026 | 890 | u32 bss_info_changed) |
f0706e82 | 891 | { |
471b3efd | 892 | struct ieee80211_local *local = sdata->local; |
e21546a2 | 893 | struct ieee80211_bss *bss = wk->bss; |
d6f2da5b | 894 | |
ae5eb026 | 895 | bss_info_changed |= BSS_CHANGED_ASSOC; |
77fdaa12 JB |
896 | /* set timing information */ |
897 | sdata->vif.bss_conf.beacon_int = bss->cbss.beacon_interval; | |
898 | sdata->vif.bss_conf.timestamp = bss->cbss.tsf; | |
899 | sdata->vif.bss_conf.dtim_period = bss->dtim_period; | |
5628221c | 900 | |
77fdaa12 JB |
901 | bss_info_changed |= BSS_CHANGED_BEACON_INT; |
902 | bss_info_changed |= ieee80211_handle_bss_capability(sdata, | |
903 | bss->cbss.capability, bss->has_erp_value, bss->erp_value); | |
21c0cbe7 | 904 | |
77fdaa12 | 905 | sdata->u.mgd.associated = bss; |
e21546a2 | 906 | sdata->u.mgd.old_associate_work = wk; |
77fdaa12 | 907 | memcpy(sdata->u.mgd.bssid, bss->cbss.bssid, ETH_ALEN); |
f0706e82 | 908 | |
b291ba11 JB |
909 | /* just to be sure */ |
910 | sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
911 | IEEE80211_STA_BEACON_POLL); | |
912 | ||
9ac19a90 | 913 | ieee80211_led_assoc(local, 1); |
9306102e | 914 | |
bda3933a | 915 | sdata->vif.bss_conf.assoc = 1; |
96dd22ac JB |
916 | /* |
917 | * For now just always ask the driver to update the basic rateset | |
918 | * when we have associated, we aren't checking whether it actually | |
919 | * changed or not. | |
920 | */ | |
ae5eb026 | 921 | bss_info_changed |= BSS_CHANGED_BASIC_RATES; |
9cef8737 JB |
922 | |
923 | /* And the BSSID changed - we're associated now */ | |
924 | bss_info_changed |= BSS_CHANGED_BSSID; | |
925 | ||
ae5eb026 | 926 | ieee80211_bss_info_change_notify(sdata, bss_info_changed); |
f0706e82 | 927 | |
056508dc JB |
928 | mutex_lock(&local->iflist_mtx); |
929 | ieee80211_recalc_ps(local, -1); | |
930 | mutex_unlock(&local->iflist_mtx); | |
e0cb686f | 931 | |
53623f1a | 932 | netif_start_queue(sdata->dev); |
9ac19a90 | 933 | netif_carrier_on(sdata->dev); |
f0706e82 JB |
934 | } |
935 | ||
77fdaa12 JB |
936 | static enum rx_mgmt_action __must_check |
937 | ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata, | |
938 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 939 | { |
46900298 | 940 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 941 | struct ieee80211_local *local = sdata->local; |
46900298 | 942 | |
77fdaa12 JB |
943 | wk->tries++; |
944 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 945 | printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n", |
77fdaa12 | 946 | sdata->dev->name, wk->bss->cbss.bssid); |
7a947080 VT |
947 | |
948 | /* | |
949 | * Most likely AP is not in the range so remove the | |
77fdaa12 | 950 | * bss struct for that AP. |
7a947080 | 951 | */ |
77fdaa12 | 952 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
11432379 HS |
953 | |
954 | /* | |
955 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
956 | * due to work needing to be done. Hence, queue the STAs work |
957 | * again for that. | |
11432379 | 958 | */ |
42935eca | 959 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 960 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 961 | } |
f0706e82 | 962 | |
77fdaa12 JB |
963 | printk(KERN_DEBUG "%s: direct probe to AP %pM (try %d)\n", |
964 | sdata->dev->name, wk->bss->cbss.bssid, | |
965 | wk->tries); | |
f0706e82 | 966 | |
77fdaa12 JB |
967 | /* |
968 | * Direct probe is sent to broadcast address as some APs | |
9ac19a90 JB |
969 | * will not answer to direct packet in unassociated state. |
970 | */ | |
77fdaa12 JB |
971 | ieee80211_send_probe_req(sdata, NULL, wk->ssid, wk->ssid_len, NULL, 0); |
972 | ||
973 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
ca386f31 | 974 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 975 | |
77fdaa12 | 976 | return RX_MGMT_NONE; |
60f8b39c | 977 | } |
f0706e82 | 978 | |
9ac19a90 | 979 | |
77fdaa12 JB |
980 | static enum rx_mgmt_action __must_check |
981 | ieee80211_authenticate(struct ieee80211_sub_if_data *sdata, | |
982 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 983 | { |
46900298 | 984 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 985 | struct ieee80211_local *local = sdata->local; |
46900298 | 986 | |
77fdaa12 JB |
987 | wk->tries++; |
988 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 989 | printk(KERN_DEBUG "%s: authentication with AP %pM" |
9ac19a90 | 990 | " timed out\n", |
77fdaa12 JB |
991 | sdata->dev->name, wk->bss->cbss.bssid); |
992 | ||
993 | /* | |
994 | * Most likely AP is not in the range so remove the | |
995 | * bss struct for that AP. | |
996 | */ | |
997 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
11432379 HS |
998 | |
999 | /* | |
1000 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1001 | * due to work needing to be done. Hence, queue the STAs work |
1002 | * again for that. | |
11432379 | 1003 | */ |
42935eca | 1004 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1005 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 1006 | } |
f0706e82 | 1007 | |
77fdaa12 JB |
1008 | printk(KERN_DEBUG "%s: authenticate with AP %pM (try %d)\n", |
1009 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1010 | ||
1011 | ieee80211_send_auth(sdata, 1, wk->auth_alg, wk->ie, wk->ie_len, | |
fffd0934 | 1012 | wk->bss->cbss.bssid, NULL, 0, 0); |
77fdaa12 | 1013 | wk->auth_transaction = 2; |
f0706e82 | 1014 | |
77fdaa12 | 1015 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
ca386f31 | 1016 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 1017 | |
77fdaa12 | 1018 | return RX_MGMT_NONE; |
f0706e82 JB |
1019 | } |
1020 | ||
e21546a2 JB |
1021 | static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata, |
1022 | bool deauth) | |
aa458d17 | 1023 | { |
46900298 | 1024 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
aa458d17 TW |
1025 | struct ieee80211_local *local = sdata->local; |
1026 | struct sta_info *sta; | |
e0cb686f | 1027 | u32 changed = 0, config_changed = 0; |
b291ba11 | 1028 | u8 bssid[ETH_ALEN]; |
aa458d17 | 1029 | |
77fdaa12 JB |
1030 | ASSERT_MGD_MTX(ifmgd); |
1031 | ||
b291ba11 JB |
1032 | if (WARN_ON(!ifmgd->associated)) |
1033 | return; | |
1034 | ||
1035 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
1036 | ||
77fdaa12 JB |
1037 | ifmgd->associated = NULL; |
1038 | memset(ifmgd->bssid, 0, ETH_ALEN); | |
1039 | ||
e21546a2 JB |
1040 | if (deauth) { |
1041 | kfree(ifmgd->old_associate_work); | |
1042 | ifmgd->old_associate_work = NULL; | |
1043 | } else { | |
1044 | struct ieee80211_mgd_work *wk = ifmgd->old_associate_work; | |
1045 | ||
1046 | wk->state = IEEE80211_MGD_STATE_IDLE; | |
1047 | list_add(&wk->list, &ifmgd->work_list); | |
1048 | } | |
1049 | ||
77fdaa12 JB |
1050 | /* |
1051 | * we need to commit the associated = NULL change because the | |
1052 | * scan code uses that to determine whether this iface should | |
1053 | * go to/wake up from powersave or not -- and could otherwise | |
1054 | * wake the queues erroneously. | |
1055 | */ | |
1056 | smp_mb(); | |
1057 | ||
1058 | /* | |
1059 | * Thus, we can only afterwards stop the queues -- to account | |
1060 | * for the case where another CPU is finishing a scan at this | |
1061 | * time -- we don't want the scan code to enable queues. | |
1062 | */ | |
aa458d17 | 1063 | |
53623f1a | 1064 | netif_stop_queue(sdata->dev); |
aa458d17 TW |
1065 | netif_carrier_off(sdata->dev); |
1066 | ||
1fa6f4af | 1067 | rcu_read_lock(); |
77fdaa12 | 1068 | sta = sta_info_get(local, bssid); |
1fa6f4af JB |
1069 | if (sta) |
1070 | ieee80211_sta_tear_down_BA_sessions(sta); | |
1071 | rcu_read_unlock(); | |
aa458d17 | 1072 | |
f5e5bf25 TW |
1073 | changed |= ieee80211_reset_erp_info(sdata); |
1074 | ||
f5e5bf25 | 1075 | ieee80211_led_assoc(local, 0); |
ae5eb026 JB |
1076 | changed |= BSS_CHANGED_ASSOC; |
1077 | sdata->vif.bss_conf.assoc = false; | |
f5e5bf25 | 1078 | |
aa837e1d JB |
1079 | ieee80211_set_wmm_default(sdata); |
1080 | ||
5cff20e6 JB |
1081 | ieee80211_recalc_idle(local); |
1082 | ||
4797938c | 1083 | /* channel(_type) changes are handled by ieee80211_hw_config */ |
094d05dc | 1084 | local->oper_channel_type = NL80211_CHAN_NO_HT; |
e0cb686f | 1085 | |
413ad50a JB |
1086 | /* on the next assoc, re-program HT parameters */ |
1087 | sdata->ht_opmode_valid = false; | |
1088 | ||
a8302de9 VT |
1089 | local->power_constr_level = 0; |
1090 | ||
520eb820 KV |
1091 | del_timer_sync(&local->dynamic_ps_timer); |
1092 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
1093 | ||
e0cb686f KV |
1094 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
1095 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1096 | config_changed |= IEEE80211_CONF_CHANGE_PS; | |
1097 | } | |
ae5eb026 | 1098 | |
e0cb686f | 1099 | ieee80211_hw_config(local, config_changed); |
9cef8737 JB |
1100 | |
1101 | /* And the BSSID changed -- not very interesting here */ | |
1102 | changed |= BSS_CHANGED_BSSID; | |
ae5eb026 | 1103 | ieee80211_bss_info_change_notify(sdata, changed); |
8e268e47 TW |
1104 | |
1105 | rcu_read_lock(); | |
1106 | ||
77fdaa12 | 1107 | sta = sta_info_get(local, bssid); |
8e268e47 TW |
1108 | if (!sta) { |
1109 | rcu_read_unlock(); | |
1110 | return; | |
1111 | } | |
1112 | ||
1113 | sta_info_unlink(&sta); | |
1114 | ||
1115 | rcu_read_unlock(); | |
1116 | ||
1117 | sta_info_destroy(sta); | |
aa458d17 | 1118 | } |
f0706e82 | 1119 | |
77fdaa12 JB |
1120 | static enum rx_mgmt_action __must_check |
1121 | ieee80211_associate(struct ieee80211_sub_if_data *sdata, | |
1122 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1123 | { |
46900298 | 1124 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1125 | struct ieee80211_local *local = sdata->local; |
46900298 | 1126 | |
77fdaa12 JB |
1127 | wk->tries++; |
1128 | if (wk->tries > IEEE80211_ASSOC_MAX_TRIES) { | |
0c68ae26 | 1129 | printk(KERN_DEBUG "%s: association with AP %pM" |
f0706e82 | 1130 | " timed out\n", |
77fdaa12 JB |
1131 | sdata->dev->name, wk->bss->cbss.bssid); |
1132 | ||
1133 | /* | |
1134 | * Most likely AP is not in the range so remove the | |
1135 | * bss struct for that AP. | |
1136 | */ | |
1137 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
1138 | ||
11432379 HS |
1139 | /* |
1140 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1141 | * due to work needing to be done. Hence, queue the STAs work |
1142 | * again for that. | |
11432379 | 1143 | */ |
42935eca | 1144 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1145 | return RX_MGMT_CFG80211_ASSOC_TO; |
f0706e82 JB |
1146 | } |
1147 | ||
77fdaa12 JB |
1148 | printk(KERN_DEBUG "%s: associate with AP %pM (try %d)\n", |
1149 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1150 | ieee80211_send_assoc(sdata, wk); | |
1151 | ||
1152 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; | |
ca386f31 | 1153 | run_again(ifmgd, wk->timeout); |
f0706e82 | 1154 | |
77fdaa12 | 1155 | return RX_MGMT_NONE; |
f0706e82 JB |
1156 | } |
1157 | ||
3cf335d5 KV |
1158 | void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata, |
1159 | struct ieee80211_hdr *hdr) | |
1160 | { | |
1161 | /* | |
1162 | * We can postpone the mgd.timer whenever receiving unicast frames | |
1163 | * from AP because we know that the connection is working both ways | |
1164 | * at that time. But multicast frames (and hence also beacons) must | |
1165 | * be ignored here, because we need to trigger the timer during | |
b291ba11 JB |
1166 | * data idle periods for sending the periodic probe request to the |
1167 | * AP we're connected to. | |
3cf335d5 | 1168 | */ |
b291ba11 JB |
1169 | if (is_multicast_ether_addr(hdr->addr1)) |
1170 | return; | |
1171 | ||
1172 | mod_timer(&sdata->u.mgd.conn_mon_timer, | |
1173 | round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME)); | |
3cf335d5 | 1174 | } |
f0706e82 | 1175 | |
a43abf29 ML |
1176 | static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata) |
1177 | { | |
1178 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
1179 | const u8 *ssid; | |
1180 | ||
1181 | ssid = ieee80211_bss_get_ie(&ifmgd->associated->cbss, WLAN_EID_SSID); | |
1182 | ieee80211_send_probe_req(sdata, ifmgd->associated->cbss.bssid, | |
1183 | ssid + 2, ssid[1], NULL, 0); | |
1184 | ||
1185 | ifmgd->probe_send_count++; | |
1186 | ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT; | |
1187 | run_again(ifmgd, ifmgd->probe_timeout); | |
1188 | } | |
1189 | ||
b291ba11 JB |
1190 | static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata, |
1191 | bool beacon) | |
04de8381 | 1192 | { |
04de8381 | 1193 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
b291ba11 | 1194 | bool already = false; |
34bfc411 | 1195 | |
0e2b6286 JB |
1196 | if (!netif_running(sdata->dev)) |
1197 | return; | |
1198 | ||
91a3bd76 LR |
1199 | if (sdata->local->scanning) |
1200 | return; | |
1201 | ||
77fdaa12 JB |
1202 | mutex_lock(&ifmgd->mtx); |
1203 | ||
1204 | if (!ifmgd->associated) | |
1205 | goto out; | |
1206 | ||
a860402d | 1207 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
b291ba11 JB |
1208 | if (beacon && net_ratelimit()) |
1209 | printk(KERN_DEBUG "%s: detected beacon loss from AP " | |
77fdaa12 | 1210 | "- sending probe request\n", sdata->dev->name); |
a860402d | 1211 | #endif |
04de8381 | 1212 | |
b291ba11 JB |
1213 | /* |
1214 | * The driver/our work has already reported this event or the | |
1215 | * connection monitoring has kicked in and we have already sent | |
1216 | * a probe request. Or maybe the AP died and the driver keeps | |
1217 | * reporting until we disassociate... | |
1218 | * | |
1219 | * In either case we have to ignore the current call to this | |
1220 | * function (except for setting the correct probe reason bit) | |
1221 | * because otherwise we would reset the timer every time and | |
1222 | * never check whether we received a probe response! | |
1223 | */ | |
1224 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | | |
1225 | IEEE80211_STA_CONNECTION_POLL)) | |
1226 | already = true; | |
1227 | ||
1228 | if (beacon) | |
1229 | ifmgd->flags |= IEEE80211_STA_BEACON_POLL; | |
1230 | else | |
1231 | ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL; | |
1232 | ||
1233 | if (already) | |
1234 | goto out; | |
1235 | ||
4e751843 JB |
1236 | mutex_lock(&sdata->local->iflist_mtx); |
1237 | ieee80211_recalc_ps(sdata->local, -1); | |
1238 | mutex_unlock(&sdata->local->iflist_mtx); | |
1239 | ||
a43abf29 ML |
1240 | ifmgd->probe_send_count = 0; |
1241 | ieee80211_mgd_probe_ap_send(sdata); | |
77fdaa12 JB |
1242 | out: |
1243 | mutex_unlock(&ifmgd->mtx); | |
04de8381 KV |
1244 | } |
1245 | ||
b291ba11 JB |
1246 | void ieee80211_beacon_loss_work(struct work_struct *work) |
1247 | { | |
1248 | struct ieee80211_sub_if_data *sdata = | |
1249 | container_of(work, struct ieee80211_sub_if_data, | |
1250 | u.mgd.beacon_loss_work); | |
1251 | ||
1252 | ieee80211_mgd_probe_ap(sdata, true); | |
1253 | } | |
1254 | ||
04de8381 KV |
1255 | void ieee80211_beacon_loss(struct ieee80211_vif *vif) |
1256 | { | |
1257 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
1258 | ||
42935eca | 1259 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
04de8381 KV |
1260 | } |
1261 | EXPORT_SYMBOL(ieee80211_beacon_loss); | |
1262 | ||
77fdaa12 JB |
1263 | static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata, |
1264 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1265 | { |
77fdaa12 | 1266 | wk->state = IEEE80211_MGD_STATE_IDLE; |
f698d856 | 1267 | printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name); |
f0706e82 JB |
1268 | } |
1269 | ||
1270 | ||
f698d856 | 1271 | static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata, |
77fdaa12 | 1272 | struct ieee80211_mgd_work *wk, |
f0706e82 JB |
1273 | struct ieee80211_mgmt *mgmt, |
1274 | size_t len) | |
1275 | { | |
1276 | u8 *pos; | |
1277 | struct ieee802_11_elems elems; | |
1278 | ||
f0706e82 | 1279 | pos = mgmt->u.auth.variable; |
67a4cce4 | 1280 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f4ea83dd | 1281 | if (!elems.challenge) |
f0706e82 | 1282 | return; |
77fdaa12 | 1283 | ieee80211_send_auth(sdata, 3, wk->auth_alg, |
46900298 | 1284 | elems.challenge - 2, elems.challenge_len + 2, |
fffd0934 JB |
1285 | wk->bss->cbss.bssid, |
1286 | wk->key, wk->key_len, wk->key_idx); | |
77fdaa12 | 1287 | wk->auth_transaction = 4; |
fe3d2c3f JB |
1288 | } |
1289 | ||
77fdaa12 JB |
1290 | static enum rx_mgmt_action __must_check |
1291 | ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata, | |
1292 | struct ieee80211_mgd_work *wk, | |
1293 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1294 | { |
f0706e82 JB |
1295 | u16 auth_alg, auth_transaction, status_code; |
1296 | ||
77fdaa12 JB |
1297 | if (wk->state != IEEE80211_MGD_STATE_AUTH) |
1298 | return RX_MGMT_NONE; | |
f0706e82 | 1299 | |
f4ea83dd | 1300 | if (len < 24 + 6) |
77fdaa12 | 1301 | return RX_MGMT_NONE; |
f0706e82 | 1302 | |
77fdaa12 JB |
1303 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1304 | return RX_MGMT_NONE; | |
f0706e82 | 1305 | |
77fdaa12 JB |
1306 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1307 | return RX_MGMT_NONE; | |
f0706e82 JB |
1308 | |
1309 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
1310 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
1311 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
1312 | ||
77fdaa12 JB |
1313 | if (auth_alg != wk->auth_alg || |
1314 | auth_transaction != wk->auth_transaction) | |
1315 | return RX_MGMT_NONE; | |
f0706e82 JB |
1316 | |
1317 | if (status_code != WLAN_STATUS_SUCCESS) { | |
77fdaa12 JB |
1318 | list_del(&wk->list); |
1319 | kfree(wk); | |
1320 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 JB |
1321 | } |
1322 | ||
77fdaa12 | 1323 | switch (wk->auth_alg) { |
f0706e82 JB |
1324 | case WLAN_AUTH_OPEN: |
1325 | case WLAN_AUTH_LEAP: | |
636a5d36 | 1326 | case WLAN_AUTH_FT: |
77fdaa12 JB |
1327 | ieee80211_auth_completed(sdata, wk); |
1328 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 | 1329 | case WLAN_AUTH_SHARED_KEY: |
77fdaa12 JB |
1330 | if (wk->auth_transaction == 4) { |
1331 | ieee80211_auth_completed(sdata, wk); | |
1332 | return RX_MGMT_CFG80211_AUTH; | |
6039f6d2 | 1333 | } else |
77fdaa12 | 1334 | ieee80211_auth_challenge(sdata, wk, mgmt, len); |
f0706e82 JB |
1335 | break; |
1336 | } | |
77fdaa12 JB |
1337 | |
1338 | return RX_MGMT_NONE; | |
f0706e82 JB |
1339 | } |
1340 | ||
1341 | ||
77fdaa12 JB |
1342 | static enum rx_mgmt_action __must_check |
1343 | ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata, | |
1344 | struct ieee80211_mgd_work *wk, | |
1345 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1346 | { |
46900298 | 1347 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 | 1348 | const u8 *bssid = NULL; |
f0706e82 JB |
1349 | u16 reason_code; |
1350 | ||
f4ea83dd | 1351 | if (len < 24 + 2) |
77fdaa12 | 1352 | return RX_MGMT_NONE; |
f0706e82 | 1353 | |
77fdaa12 JB |
1354 | ASSERT_MGD_MTX(ifmgd); |
1355 | ||
1356 | if (wk) | |
1357 | bssid = wk->bss->cbss.bssid; | |
1358 | else | |
1359 | bssid = ifmgd->associated->cbss.bssid; | |
f0706e82 JB |
1360 | |
1361 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
1362 | ||
77fdaa12 JB |
1363 | printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n", |
1364 | sdata->dev->name, bssid, reason_code); | |
1365 | ||
1366 | if (!wk) { | |
e21546a2 | 1367 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
1368 | } else { |
1369 | list_del(&wk->list); | |
1370 | kfree(wk); | |
1371 | } | |
f0706e82 | 1372 | |
77fdaa12 | 1373 | return RX_MGMT_CFG80211_DEAUTH; |
f0706e82 JB |
1374 | } |
1375 | ||
1376 | ||
77fdaa12 JB |
1377 | static enum rx_mgmt_action __must_check |
1378 | ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata, | |
1379 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1380 | { |
46900298 | 1381 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1382 | u16 reason_code; |
1383 | ||
f4ea83dd | 1384 | if (len < 24 + 2) |
77fdaa12 | 1385 | return RX_MGMT_NONE; |
f0706e82 | 1386 | |
77fdaa12 JB |
1387 | ASSERT_MGD_MTX(ifmgd); |
1388 | ||
1389 | if (WARN_ON(!ifmgd->associated)) | |
1390 | return RX_MGMT_NONE; | |
1391 | ||
1392 | if (WARN_ON(memcmp(ifmgd->associated->cbss.bssid, mgmt->sa, ETH_ALEN))) | |
1393 | return RX_MGMT_NONE; | |
f0706e82 JB |
1394 | |
1395 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); | |
1396 | ||
0ff71613 JB |
1397 | printk(KERN_DEBUG "%s: disassociated from %pM (Reason: %u)\n", |
1398 | sdata->dev->name, mgmt->sa, reason_code); | |
f0706e82 | 1399 | |
e21546a2 | 1400 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 | 1401 | return RX_MGMT_CFG80211_DISASSOC; |
f0706e82 JB |
1402 | } |
1403 | ||
1404 | ||
77fdaa12 JB |
1405 | static enum rx_mgmt_action __must_check |
1406 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, | |
1407 | struct ieee80211_mgd_work *wk, | |
1408 | struct ieee80211_mgmt *mgmt, size_t len, | |
1409 | bool reassoc) | |
f0706e82 | 1410 | { |
46900298 | 1411 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
471b3efd | 1412 | struct ieee80211_local *local = sdata->local; |
8318d78a | 1413 | struct ieee80211_supported_band *sband; |
f0706e82 | 1414 | struct sta_info *sta; |
881d948c | 1415 | u32 rates, basic_rates; |
f0706e82 JB |
1416 | u16 capab_info, status_code, aid; |
1417 | struct ieee802_11_elems elems; | |
bda3933a | 1418 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
f0706e82 | 1419 | u8 *pos; |
ae5eb026 | 1420 | u32 changed = 0; |
f0706e82 | 1421 | int i, j; |
ddf4ac53 | 1422 | bool have_higher_than_11mbit = false, newsta = false; |
ae5eb026 | 1423 | u16 ap_ht_cap_flags; |
f0706e82 | 1424 | |
77fdaa12 JB |
1425 | /* |
1426 | * AssocResp and ReassocResp have identical structure, so process both | |
1427 | * of them in this function. | |
1428 | */ | |
f0706e82 | 1429 | |
f4ea83dd | 1430 | if (len < 24 + 6) |
77fdaa12 | 1431 | return RX_MGMT_NONE; |
f0706e82 | 1432 | |
77fdaa12 JB |
1433 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1434 | return RX_MGMT_NONE; | |
f0706e82 JB |
1435 | |
1436 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
1437 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
1438 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
f0706e82 | 1439 | |
0c68ae26 | 1440 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " |
f0706e82 | 1441 | "status=%d aid=%d)\n", |
0c68ae26 | 1442 | sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa, |
ddd68587 | 1443 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
f0706e82 | 1444 | |
63a5ab82 JM |
1445 | pos = mgmt->u.assoc_resp.variable; |
1446 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
1447 | ||
1448 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && | |
f797eb7e JM |
1449 | elems.timeout_int && elems.timeout_int_len == 5 && |
1450 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { | |
63a5ab82 | 1451 | u32 tu, ms; |
f797eb7e | 1452 | tu = get_unaligned_le32(elems.timeout_int + 1); |
63a5ab82 JM |
1453 | ms = tu * 1024 / 1000; |
1454 | printk(KERN_DEBUG "%s: AP rejected association temporarily; " | |
1455 | "comeback duration %u TU (%u ms)\n", | |
1456 | sdata->dev->name, tu, ms); | |
77fdaa12 | 1457 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
63a5ab82 | 1458 | if (ms > IEEE80211_ASSOC_TIMEOUT) |
ca386f31 | 1459 | run_again(ifmgd, jiffies + msecs_to_jiffies(ms)); |
77fdaa12 | 1460 | return RX_MGMT_NONE; |
63a5ab82 JM |
1461 | } |
1462 | ||
f0706e82 JB |
1463 | if (status_code != WLAN_STATUS_SUCCESS) { |
1464 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", | |
f698d856 | 1465 | sdata->dev->name, status_code); |
2ef6e444 | 1466 | wk->state = IEEE80211_MGD_STATE_IDLE; |
77fdaa12 | 1467 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1468 | } |
1469 | ||
1dd84aa2 JB |
1470 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1471 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " | |
f698d856 | 1472 | "set\n", sdata->dev->name, aid); |
1dd84aa2 JB |
1473 | aid &= ~(BIT(15) | BIT(14)); |
1474 | ||
f0706e82 JB |
1475 | if (!elems.supp_rates) { |
1476 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", | |
f698d856 | 1477 | sdata->dev->name); |
77fdaa12 | 1478 | return RX_MGMT_NONE; |
f0706e82 JB |
1479 | } |
1480 | ||
f698d856 | 1481 | printk(KERN_DEBUG "%s: associated\n", sdata->dev->name); |
46900298 | 1482 | ifmgd->aid = aid; |
f0706e82 | 1483 | |
d0709a65 JB |
1484 | rcu_read_lock(); |
1485 | ||
f0706e82 | 1486 | /* Add STA entry for the AP */ |
77fdaa12 | 1487 | sta = sta_info_get(local, wk->bss->cbss.bssid); |
f0706e82 | 1488 | if (!sta) { |
ddf4ac53 | 1489 | newsta = true; |
d0709a65 | 1490 | |
77fdaa12 JB |
1491 | rcu_read_unlock(); |
1492 | ||
1493 | sta = sta_info_alloc(sdata, wk->bss->cbss.bssid, GFP_KERNEL); | |
73651ee6 JB |
1494 | if (!sta) { |
1495 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" | |
f698d856 | 1496 | " the AP\n", sdata->dev->name); |
77fdaa12 | 1497 | return RX_MGMT_NONE; |
f0706e82 | 1498 | } |
f709fc69 | 1499 | |
77fdaa12 JB |
1500 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | |
1501 | WLAN_STA_ASSOC_AP); | |
1502 | if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT)) | |
1503 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); | |
f709fc69 | 1504 | |
77fdaa12 JB |
1505 | rcu_read_lock(); |
1506 | } | |
05e5e883 | 1507 | |
60f8b39c JB |
1508 | rates = 0; |
1509 | basic_rates = 0; | |
1510 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
f709fc69 | 1511 | |
60f8b39c JB |
1512 | for (i = 0; i < elems.supp_rates_len; i++) { |
1513 | int rate = (elems.supp_rates[i] & 0x7f) * 5; | |
d61272cb | 1514 | bool is_basic = !!(elems.supp_rates[i] & 0x80); |
f709fc69 | 1515 | |
60f8b39c JB |
1516 | if (rate > 110) |
1517 | have_higher_than_11mbit = true; | |
1518 | ||
1519 | for (j = 0; j < sband->n_bitrates; j++) { | |
d61272cb | 1520 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1521 | rates |= BIT(j); |
d61272cb TW |
1522 | if (is_basic) |
1523 | basic_rates |= BIT(j); | |
1524 | break; | |
1525 | } | |
f709fc69 | 1526 | } |
f709fc69 LCC |
1527 | } |
1528 | ||
60f8b39c JB |
1529 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
1530 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; | |
7e0986c1 | 1531 | bool is_basic = !!(elems.ext_supp_rates[i] & 0x80); |
f0706e82 | 1532 | |
60f8b39c JB |
1533 | if (rate > 110) |
1534 | have_higher_than_11mbit = true; | |
f0706e82 | 1535 | |
60f8b39c | 1536 | for (j = 0; j < sband->n_bitrates; j++) { |
d61272cb | 1537 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1538 | rates |= BIT(j); |
d61272cb TW |
1539 | if (is_basic) |
1540 | basic_rates |= BIT(j); | |
1541 | break; | |
1542 | } | |
60f8b39c | 1543 | } |
1ebebea8 | 1544 | } |
f0706e82 | 1545 | |
323ce79a | 1546 | sta->sta.supp_rates[local->hw.conf.channel->band] = rates; |
bda3933a | 1547 | sdata->vif.bss_conf.basic_rates = basic_rates; |
60f8b39c JB |
1548 | |
1549 | /* cf. IEEE 802.11 9.2.12 */ | |
1550 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
1551 | have_higher_than_11mbit) | |
1552 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
1553 | else | |
1554 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
f0706e82 | 1555 | |
ab1faead | 1556 | if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1557 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
d9fe60de | 1558 | elems.ht_cap_elem, &sta->sta.ht_cap); |
ae5eb026 JB |
1559 | |
1560 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
f0706e82 | 1561 | |
4b7679a5 | 1562 | rate_control_rate_init(sta); |
f0706e82 | 1563 | |
46900298 | 1564 | if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) |
5394af4d JM |
1565 | set_sta_flags(sta, WLAN_STA_MFP); |
1566 | ||
ddf4ac53 | 1567 | if (elems.wmm_param) |
60f8b39c | 1568 | set_sta_flags(sta, WLAN_STA_WME); |
ddf4ac53 JB |
1569 | |
1570 | if (newsta) { | |
1571 | int err = sta_info_insert(sta); | |
1572 | if (err) { | |
1573 | printk(KERN_DEBUG "%s: failed to insert STA entry for" | |
1574 | " the AP (error %d)\n", sdata->dev->name, err); | |
1575 | rcu_read_unlock(); | |
77fdaa12 | 1576 | return RX_MGMT_NONE; |
ddf4ac53 JB |
1577 | } |
1578 | } | |
1579 | ||
1580 | rcu_read_unlock(); | |
1581 | ||
1582 | if (elems.wmm_param) | |
46900298 | 1583 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
60f8b39c | 1584 | elems.wmm_param_len); |
aa837e1d JB |
1585 | else |
1586 | ieee80211_set_wmm_default(sdata); | |
f0706e82 | 1587 | |
ae5eb026 | 1588 | if (elems.ht_info_elem && elems.wmm_param && |
46900298 | 1589 | (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
ab1faead | 1590 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1591 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
77fdaa12 | 1592 | wk->bss->cbss.bssid, |
ae5eb026 JB |
1593 | ap_ht_cap_flags); |
1594 | ||
056508dc JB |
1595 | /* delete work item -- must be before set_associated for PS */ |
1596 | list_del(&wk->list); | |
1597 | ||
60f8b39c JB |
1598 | /* set AID and assoc capability, |
1599 | * ieee80211_set_associated() will tell the driver */ | |
1600 | bss_conf->aid = aid; | |
1601 | bss_conf->assoc_capability = capab_info; | |
e21546a2 JB |
1602 | /* this will take ownership of wk */ |
1603 | ieee80211_set_associated(sdata, wk, changed); | |
f0706e82 | 1604 | |
15b7b062 | 1605 | /* |
b291ba11 JB |
1606 | * Start timer to probe the connection to the AP now. |
1607 | * Also start the timer that will detect beacon loss. | |
15b7b062 | 1608 | */ |
b291ba11 JB |
1609 | ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt); |
1610 | mod_beacon_timer(sdata); | |
15b7b062 | 1611 | |
77fdaa12 | 1612 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1613 | } |
1614 | ||
1615 | ||
98c8fccf JB |
1616 | static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata, |
1617 | struct ieee80211_mgmt *mgmt, | |
1618 | size_t len, | |
1619 | struct ieee80211_rx_status *rx_status, | |
1620 | struct ieee802_11_elems *elems, | |
1621 | bool beacon) | |
1622 | { | |
1623 | struct ieee80211_local *local = sdata->local; | |
1624 | int freq; | |
c2b13452 | 1625 | struct ieee80211_bss *bss; |
98c8fccf | 1626 | struct ieee80211_channel *channel; |
98c8fccf JB |
1627 | |
1628 | if (elems->ds_params && elems->ds_params_len == 1) | |
1629 | freq = ieee80211_channel_to_frequency(elems->ds_params[0]); | |
1630 | else | |
1631 | freq = rx_status->freq; | |
1632 | ||
1633 | channel = ieee80211_get_channel(local->hw.wiphy, freq); | |
1634 | ||
1635 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) | |
1636 | return; | |
1637 | ||
98c8fccf | 1638 | bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems, |
2a519311 | 1639 | channel, beacon); |
77fdaa12 JB |
1640 | if (bss) |
1641 | ieee80211_rx_bss_put(local, bss); | |
1642 | ||
1643 | if (!sdata->u.mgd.associated) | |
98c8fccf JB |
1644 | return; |
1645 | ||
c481ec97 | 1646 | if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) && |
77fdaa12 JB |
1647 | (memcmp(mgmt->bssid, sdata->u.mgd.associated->cbss.bssid, |
1648 | ETH_ALEN) == 0)) { | |
c481ec97 S |
1649 | struct ieee80211_channel_sw_ie *sw_elem = |
1650 | (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem; | |
cc32abd4 | 1651 | ieee80211_sta_process_chanswitch(sdata, sw_elem, bss); |
c481ec97 | 1652 | } |
f0706e82 JB |
1653 | } |
1654 | ||
1655 | ||
f698d856 | 1656 | static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata, |
77fdaa12 JB |
1657 | struct ieee80211_mgd_work *wk, |
1658 | struct ieee80211_mgmt *mgmt, size_t len, | |
f0706e82 JB |
1659 | struct ieee80211_rx_status *rx_status) |
1660 | { | |
15b7b062 | 1661 | struct ieee80211_if_managed *ifmgd; |
ae6a44e3 EK |
1662 | size_t baselen; |
1663 | struct ieee802_11_elems elems; | |
1664 | ||
15b7b062 KV |
1665 | ifmgd = &sdata->u.mgd; |
1666 | ||
77fdaa12 JB |
1667 | ASSERT_MGD_MTX(ifmgd); |
1668 | ||
8e7cdbb6 TW |
1669 | if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN)) |
1670 | return; /* ignore ProbeResp to foreign address */ | |
1671 | ||
ae6a44e3 EK |
1672 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; |
1673 | if (baselen > len) | |
1674 | return; | |
1675 | ||
1676 | ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen, | |
1677 | &elems); | |
1678 | ||
98c8fccf | 1679 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false); |
9859b81e RR |
1680 | |
1681 | /* direct probe may be part of the association flow */ | |
77fdaa12 | 1682 | if (wk && wk->state == IEEE80211_MGD_STATE_PROBE) { |
0ff71613 | 1683 | printk(KERN_DEBUG "%s: direct probe responded\n", |
9859b81e | 1684 | sdata->dev->name); |
77fdaa12 JB |
1685 | wk->tries = 0; |
1686 | wk->state = IEEE80211_MGD_STATE_AUTH; | |
1687 | WARN_ON(ieee80211_authenticate(sdata, wk) != RX_MGMT_NONE); | |
9859b81e | 1688 | } |
15b7b062 | 1689 | |
77fdaa12 JB |
1690 | if (ifmgd->associated && |
1691 | memcmp(mgmt->bssid, ifmgd->associated->cbss.bssid, ETH_ALEN) == 0 && | |
b291ba11 JB |
1692 | ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1693 | IEEE80211_STA_CONNECTION_POLL)) { | |
1694 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
1695 | IEEE80211_STA_BEACON_POLL); | |
4e751843 JB |
1696 | mutex_lock(&sdata->local->iflist_mtx); |
1697 | ieee80211_recalc_ps(sdata->local, -1); | |
1698 | mutex_unlock(&sdata->local->iflist_mtx); | |
b291ba11 JB |
1699 | /* |
1700 | * We've received a probe response, but are not sure whether | |
1701 | * we have or will be receiving any beacons or data, so let's | |
1702 | * schedule the timers again, just in case. | |
1703 | */ | |
1704 | mod_beacon_timer(sdata); | |
1705 | mod_timer(&ifmgd->conn_mon_timer, | |
1706 | round_jiffies_up(jiffies + | |
1707 | IEEE80211_CONNECTION_IDLE_TIME)); | |
4e751843 | 1708 | } |
f0706e82 JB |
1709 | } |
1710 | ||
d91f36db JB |
1711 | /* |
1712 | * This is the canonical list of information elements we care about, | |
1713 | * the filter code also gives us all changes to the Microsoft OUI | |
1714 | * (00:50:F2) vendor IE which is used for WMM which we need to track. | |
1715 | * | |
1716 | * We implement beacon filtering in software since that means we can | |
1717 | * avoid processing the frame here and in cfg80211, and userspace | |
1718 | * will not be able to tell whether the hardware supports it or not. | |
1719 | * | |
1720 | * XXX: This list needs to be dynamic -- userspace needs to be able to | |
1721 | * add items it requires. It also needs to be able to tell us to | |
1722 | * look out for other vendor IEs. | |
1723 | */ | |
1724 | static const u64 care_about_ies = | |
1d4df3a5 JB |
1725 | (1ULL << WLAN_EID_COUNTRY) | |
1726 | (1ULL << WLAN_EID_ERP_INFO) | | |
1727 | (1ULL << WLAN_EID_CHANNEL_SWITCH) | | |
1728 | (1ULL << WLAN_EID_PWR_CONSTRAINT) | | |
1729 | (1ULL << WLAN_EID_HT_CAPABILITY) | | |
1730 | (1ULL << WLAN_EID_HT_INFORMATION); | |
d91f36db | 1731 | |
f698d856 | 1732 | static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1733 | struct ieee80211_mgmt *mgmt, |
1734 | size_t len, | |
1735 | struct ieee80211_rx_status *rx_status) | |
1736 | { | |
d91f36db | 1737 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1738 | size_t baselen; |
1739 | struct ieee802_11_elems elems; | |
f698d856 | 1740 | struct ieee80211_local *local = sdata->local; |
471b3efd | 1741 | u32 changed = 0; |
d91f36db | 1742 | bool erp_valid, directed_tim = false; |
7a5158ef | 1743 | u8 erp_value = 0; |
d91f36db | 1744 | u32 ncrc; |
77fdaa12 JB |
1745 | u8 *bssid; |
1746 | ||
1747 | ASSERT_MGD_MTX(ifmgd); | |
f0706e82 | 1748 | |
ae6a44e3 EK |
1749 | /* Process beacon from the current BSS */ |
1750 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
1751 | if (baselen > len) | |
1752 | return; | |
1753 | ||
d91f36db | 1754 | if (rx_status->freq != local->hw.conf.channel->center_freq) |
f0706e82 | 1755 | return; |
f0706e82 | 1756 | |
b291ba11 JB |
1757 | /* |
1758 | * We might have received a number of frames, among them a | |
1759 | * disassoc frame and a beacon... | |
1760 | */ | |
1761 | if (!ifmgd->associated) | |
77fdaa12 JB |
1762 | return; |
1763 | ||
1764 | bssid = ifmgd->associated->cbss.bssid; | |
1765 | ||
b291ba11 JB |
1766 | /* |
1767 | * And in theory even frames from a different AP we were just | |
1768 | * associated to a split-second ago! | |
1769 | */ | |
1770 | if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0) | |
f0706e82 JB |
1771 | return; |
1772 | ||
b291ba11 | 1773 | if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) { |
92778180 JM |
1774 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1775 | if (net_ratelimit()) { | |
1776 | printk(KERN_DEBUG "%s: cancelling probereq poll due " | |
1777 | "to a received beacon\n", sdata->dev->name); | |
1778 | } | |
1779 | #endif | |
b291ba11 | 1780 | ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL; |
4e751843 JB |
1781 | mutex_lock(&local->iflist_mtx); |
1782 | ieee80211_recalc_ps(local, -1); | |
1783 | mutex_unlock(&local->iflist_mtx); | |
92778180 JM |
1784 | } |
1785 | ||
b291ba11 JB |
1786 | /* |
1787 | * Push the beacon loss detection into the future since | |
1788 | * we are processing a beacon from the AP just now. | |
1789 | */ | |
1790 | mod_beacon_timer(sdata); | |
1791 | ||
d91f36db JB |
1792 | ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4); |
1793 | ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable, | |
1794 | len - baselen, &elems, | |
1795 | care_about_ies, ncrc); | |
1796 | ||
1797 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
e7ec86f5 JB |
1798 | directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len, |
1799 | ifmgd->aid); | |
d91f36db | 1800 | |
30196673 JM |
1801 | if (ncrc != ifmgd->beacon_crc) { |
1802 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, | |
1803 | true); | |
d91f36db | 1804 | |
30196673 JM |
1805 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1806 | elems.wmm_param_len); | |
1807 | } | |
fe3fa827 | 1808 | |
25c9c875 | 1809 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) { |
1fb3606b | 1810 | if (directed_tim) { |
572e0012 KV |
1811 | if (local->hw.conf.dynamic_ps_timeout > 0) { |
1812 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1813 | ieee80211_hw_config(local, | |
1814 | IEEE80211_CONF_CHANGE_PS); | |
1815 | ieee80211_send_nullfunc(local, sdata, 0); | |
1816 | } else { | |
1817 | local->pspolling = true; | |
1818 | ||
1819 | /* | |
1820 | * Here is assumed that the driver will be | |
1821 | * able to send ps-poll frame and receive a | |
1822 | * response even though power save mode is | |
1823 | * enabled, but some drivers might require | |
1824 | * to disable power save here. This needs | |
1825 | * to be investigated. | |
1826 | */ | |
1827 | ieee80211_send_pspoll(local, sdata); | |
1828 | } | |
a97b77b9 VN |
1829 | } |
1830 | } | |
7a5158ef | 1831 | |
30196673 JM |
1832 | if (ncrc == ifmgd->beacon_crc) |
1833 | return; | |
1834 | ifmgd->beacon_crc = ncrc; | |
1835 | ||
7a5158ef JB |
1836 | if (elems.erp_info && elems.erp_info_len >= 1) { |
1837 | erp_valid = true; | |
1838 | erp_value = elems.erp_info[0]; | |
1839 | } else { | |
1840 | erp_valid = false; | |
50c4afb9 | 1841 | } |
7a5158ef JB |
1842 | changed |= ieee80211_handle_bss_capability(sdata, |
1843 | le16_to_cpu(mgmt->u.beacon.capab_info), | |
1844 | erp_valid, erp_value); | |
f0706e82 | 1845 | |
d3c990fb | 1846 | |
53d6f81c | 1847 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
ab1faead | 1848 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) { |
ae5eb026 JB |
1849 | struct sta_info *sta; |
1850 | struct ieee80211_supported_band *sband; | |
1851 | u16 ap_ht_cap_flags; | |
1852 | ||
1853 | rcu_read_lock(); | |
1854 | ||
77fdaa12 JB |
1855 | sta = sta_info_get(local, bssid); |
1856 | if (WARN_ON(!sta)) { | |
ae5eb026 JB |
1857 | rcu_read_unlock(); |
1858 | return; | |
1859 | } | |
1860 | ||
1861 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
1862 | ||
1863 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, | |
1864 | elems.ht_cap_elem, &sta->sta.ht_cap); | |
1865 | ||
1866 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
1867 | ||
1868 | rcu_read_unlock(); | |
1869 | ||
1870 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, | |
77fdaa12 | 1871 | bssid, ap_ht_cap_flags); |
d3c990fb RR |
1872 | } |
1873 | ||
8b19e6ca | 1874 | /* Note: country IE parsing is done for us by cfg80211 */ |
3f2355cb | 1875 | if (elems.country_elem) { |
a8302de9 VT |
1876 | /* TODO: IBSS also needs this */ |
1877 | if (elems.pwr_constr_elem) | |
1878 | ieee80211_handle_pwr_constr(sdata, | |
1879 | le16_to_cpu(mgmt->u.probe_resp.capab_info), | |
1880 | elems.pwr_constr_elem, | |
1881 | elems.pwr_constr_elem_len); | |
3f2355cb LR |
1882 | } |
1883 | ||
471b3efd | 1884 | ieee80211_bss_info_change_notify(sdata, changed); |
f0706e82 JB |
1885 | } |
1886 | ||
46900298 | 1887 | ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, |
f1d58c25 | 1888 | struct sk_buff *skb) |
f0706e82 | 1889 | { |
f698d856 | 1890 | struct ieee80211_local *local = sdata->local; |
f0706e82 JB |
1891 | struct ieee80211_mgmt *mgmt; |
1892 | u16 fc; | |
1893 | ||
1894 | if (skb->len < 24) | |
46900298 | 1895 | return RX_DROP_MONITOR; |
f0706e82 JB |
1896 | |
1897 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1898 | fc = le16_to_cpu(mgmt->frame_control); | |
1899 | ||
1900 | switch (fc & IEEE80211_FCTL_STYPE) { | |
f0706e82 JB |
1901 | case IEEE80211_STYPE_PROBE_RESP: |
1902 | case IEEE80211_STYPE_BEACON: | |
f0706e82 JB |
1903 | case IEEE80211_STYPE_AUTH: |
1904 | case IEEE80211_STYPE_ASSOC_RESP: | |
1905 | case IEEE80211_STYPE_REASSOC_RESP: | |
1906 | case IEEE80211_STYPE_DEAUTH: | |
1907 | case IEEE80211_STYPE_DISASSOC: | |
77fdaa12 | 1908 | case IEEE80211_STYPE_ACTION: |
46900298 | 1909 | skb_queue_tail(&sdata->u.mgd.skb_queue, skb); |
42935eca | 1910 | ieee80211_queue_work(&local->hw, &sdata->u.mgd.work); |
46900298 | 1911 | return RX_QUEUED; |
f0706e82 JB |
1912 | } |
1913 | ||
46900298 | 1914 | return RX_DROP_MONITOR; |
f0706e82 JB |
1915 | } |
1916 | ||
f698d856 | 1917 | static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1918 | struct sk_buff *skb) |
1919 | { | |
77fdaa12 | 1920 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 | 1921 | struct ieee80211_rx_status *rx_status; |
f0706e82 | 1922 | struct ieee80211_mgmt *mgmt; |
77fdaa12 JB |
1923 | struct ieee80211_mgd_work *wk; |
1924 | enum rx_mgmt_action rma = RX_MGMT_NONE; | |
f0706e82 JB |
1925 | u16 fc; |
1926 | ||
f0706e82 JB |
1927 | rx_status = (struct ieee80211_rx_status *) skb->cb; |
1928 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1929 | fc = le16_to_cpu(mgmt->frame_control); | |
1930 | ||
77fdaa12 JB |
1931 | mutex_lock(&ifmgd->mtx); |
1932 | ||
1933 | if (ifmgd->associated && | |
1934 | memcmp(ifmgd->associated->cbss.bssid, mgmt->bssid, | |
1935 | ETH_ALEN) == 0) { | |
1936 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1937 | case IEEE80211_STYPE_BEACON: | |
1938 | ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, | |
1939 | rx_status); | |
1940 | break; | |
1941 | case IEEE80211_STYPE_PROBE_RESP: | |
1942 | ieee80211_rx_mgmt_probe_resp(sdata, NULL, mgmt, | |
1943 | skb->len, rx_status); | |
1944 | break; | |
1945 | case IEEE80211_STYPE_DEAUTH: | |
1946 | rma = ieee80211_rx_mgmt_deauth(sdata, NULL, | |
1947 | mgmt, skb->len); | |
1948 | break; | |
1949 | case IEEE80211_STYPE_DISASSOC: | |
1950 | rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); | |
1951 | break; | |
1952 | case IEEE80211_STYPE_ACTION: | |
1953 | /* XXX: differentiate, can only happen for CSA now! */ | |
1954 | ieee80211_sta_process_chanswitch(sdata, | |
1955 | &mgmt->u.action.u.chan_switch.sw_elem, | |
1956 | ifmgd->associated); | |
1957 | break; | |
1958 | } | |
1959 | mutex_unlock(&ifmgd->mtx); | |
1960 | ||
1961 | switch (rma) { | |
1962 | case RX_MGMT_NONE: | |
1963 | /* no action */ | |
1964 | break; | |
1965 | case RX_MGMT_CFG80211_DEAUTH: | |
ce470613 | 1966 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
1967 | break; |
1968 | case RX_MGMT_CFG80211_DISASSOC: | |
ce470613 | 1969 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
1970 | break; |
1971 | default: | |
1972 | WARN(1, "unexpected: %d", rma); | |
1973 | } | |
1974 | goto out; | |
1975 | } | |
1976 | ||
1977 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
1978 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) | |
1979 | continue; | |
1980 | ||
1981 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1982 | case IEEE80211_STYPE_PROBE_RESP: | |
1983 | ieee80211_rx_mgmt_probe_resp(sdata, wk, mgmt, skb->len, | |
1984 | rx_status); | |
1985 | break; | |
1986 | case IEEE80211_STYPE_AUTH: | |
1987 | rma = ieee80211_rx_mgmt_auth(sdata, wk, mgmt, skb->len); | |
1988 | break; | |
1989 | case IEEE80211_STYPE_ASSOC_RESP: | |
1990 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
1991 | skb->len, false); | |
1992 | break; | |
1993 | case IEEE80211_STYPE_REASSOC_RESP: | |
1994 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
1995 | skb->len, true); | |
1996 | break; | |
1997 | case IEEE80211_STYPE_DEAUTH: | |
1998 | rma = ieee80211_rx_mgmt_deauth(sdata, wk, mgmt, | |
1999 | skb->len); | |
2000 | break; | |
2001 | } | |
2002 | /* | |
2003 | * We've processed this frame for that work, so it can't | |
2004 | * belong to another work struct. | |
2005 | * NB: this is also required for correctness because the | |
2006 | * called functions can free 'wk', and for 'rma'! | |
2007 | */ | |
46900298 | 2008 | break; |
77fdaa12 JB |
2009 | } |
2010 | ||
2011 | mutex_unlock(&ifmgd->mtx); | |
2012 | ||
2013 | switch (rma) { | |
2014 | case RX_MGMT_NONE: | |
2015 | /* no action */ | |
46900298 | 2016 | break; |
77fdaa12 | 2017 | case RX_MGMT_CFG80211_AUTH: |
cb0b4beb | 2018 | cfg80211_send_rx_auth(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2019 | break; |
77fdaa12 | 2020 | case RX_MGMT_CFG80211_ASSOC: |
cb0b4beb | 2021 | cfg80211_send_rx_assoc(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2022 | break; |
8d8b261a | 2023 | case RX_MGMT_CFG80211_DEAUTH: |
ce470613 | 2024 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
8d8b261a | 2025 | break; |
77fdaa12 JB |
2026 | default: |
2027 | WARN(1, "unexpected: %d", rma); | |
f0706e82 JB |
2028 | } |
2029 | ||
77fdaa12 | 2030 | out: |
f0706e82 JB |
2031 | kfree_skb(skb); |
2032 | } | |
2033 | ||
9c6bd790 | 2034 | static void ieee80211_sta_timer(unsigned long data) |
f0706e82 | 2035 | { |
60f8b39c JB |
2036 | struct ieee80211_sub_if_data *sdata = |
2037 | (struct ieee80211_sub_if_data *) data; | |
46900298 | 2038 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
60f8b39c | 2039 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 2040 | |
5bb644a0 JB |
2041 | if (local->quiescing) { |
2042 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2043 | return; | |
2044 | } | |
2045 | ||
42935eca | 2046 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
f0706e82 JB |
2047 | } |
2048 | ||
9c6bd790 JB |
2049 | static void ieee80211_sta_work(struct work_struct *work) |
2050 | { | |
2051 | struct ieee80211_sub_if_data *sdata = | |
46900298 | 2052 | container_of(work, struct ieee80211_sub_if_data, u.mgd.work); |
9c6bd790 | 2053 | struct ieee80211_local *local = sdata->local; |
46900298 | 2054 | struct ieee80211_if_managed *ifmgd; |
9c6bd790 | 2055 | struct sk_buff *skb; |
77fdaa12 JB |
2056 | struct ieee80211_mgd_work *wk, *tmp; |
2057 | LIST_HEAD(free_work); | |
2058 | enum rx_mgmt_action rma; | |
2059 | bool anybusy = false; | |
9c6bd790 JB |
2060 | |
2061 | if (!netif_running(sdata->dev)) | |
2062 | return; | |
2063 | ||
fbe9c429 | 2064 | if (local->scanning) |
9c6bd790 JB |
2065 | return; |
2066 | ||
46900298 | 2067 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
9c6bd790 | 2068 | return; |
5bb644a0 JB |
2069 | |
2070 | /* | |
42935eca LR |
2071 | * ieee80211_queue_work() should have picked up most cases, |
2072 | * here we'll pick the the rest. | |
5bb644a0 | 2073 | */ |
42935eca LR |
2074 | if (WARN(local->suspended, "STA MLME work scheduled while " |
2075 | "going to suspend\n")) | |
5bb644a0 JB |
2076 | return; |
2077 | ||
46900298 | 2078 | ifmgd = &sdata->u.mgd; |
f0706e82 | 2079 | |
77fdaa12 | 2080 | /* first process frames to avoid timing out while a frame is pending */ |
46900298 | 2081 | while ((skb = skb_dequeue(&ifmgd->skb_queue))) |
9c6bd790 JB |
2082 | ieee80211_sta_rx_queued_mgmt(sdata, skb); |
2083 | ||
77fdaa12 JB |
2084 | /* then process the rest of the work */ |
2085 | mutex_lock(&ifmgd->mtx); | |
2086 | ||
b291ba11 JB |
2087 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
2088 | IEEE80211_STA_CONNECTION_POLL) && | |
2089 | ifmgd->associated) { | |
a43abf29 ML |
2090 | u8 bssid[ETH_ALEN]; |
2091 | ||
2092 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
b291ba11 JB |
2093 | if (time_is_after_jiffies(ifmgd->probe_timeout)) |
2094 | run_again(ifmgd, ifmgd->probe_timeout); | |
a43abf29 ML |
2095 | |
2096 | else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) { | |
2097 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
2098 | printk(KERN_DEBUG "No probe response from AP %pM" | |
2099 | " after %dms, try %d\n", bssid, | |
2100 | (1000 * IEEE80211_PROBE_WAIT)/HZ, | |
2101 | ifmgd->probe_send_count); | |
2102 | #endif | |
2103 | ieee80211_mgd_probe_ap_send(sdata); | |
2104 | } else { | |
b291ba11 JB |
2105 | /* |
2106 | * We actually lost the connection ... or did we? | |
2107 | * Let's make sure! | |
2108 | */ | |
2109 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
2110 | IEEE80211_STA_BEACON_POLL); | |
b291ba11 JB |
2111 | printk(KERN_DEBUG "No probe response from AP %pM" |
2112 | " after %dms, disconnecting.\n", | |
2113 | bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ); | |
e21546a2 | 2114 | ieee80211_set_disassoc(sdata, true); |
b291ba11 JB |
2115 | mutex_unlock(&ifmgd->mtx); |
2116 | /* | |
2117 | * must be outside lock due to cfg80211, | |
2118 | * but that's not a problem. | |
2119 | */ | |
2120 | ieee80211_send_deauth_disassoc(sdata, bssid, | |
2121 | IEEE80211_STYPE_DEAUTH, | |
2122 | WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY, | |
2123 | NULL); | |
2124 | mutex_lock(&ifmgd->mtx); | |
2125 | } | |
2126 | } | |
2127 | ||
f0706e82 | 2128 | |
77fdaa12 JB |
2129 | ieee80211_recalc_idle(local); |
2130 | ||
77fdaa12 | 2131 | list_for_each_entry_safe(wk, tmp, &ifmgd->work_list, list) { |
ca386f31 JB |
2132 | if (time_is_after_jiffies(wk->timeout)) { |
2133 | /* | |
2134 | * This work item isn't supposed to be worked on | |
2135 | * right now, but take care to adjust the timer | |
2136 | * properly. | |
2137 | */ | |
2138 | run_again(ifmgd, wk->timeout); | |
77fdaa12 | 2139 | continue; |
ca386f31 | 2140 | } |
5cff20e6 | 2141 | |
77fdaa12 JB |
2142 | switch (wk->state) { |
2143 | default: | |
2144 | WARN_ON(1); | |
2145 | /* fall through */ | |
2146 | case IEEE80211_MGD_STATE_IDLE: | |
2147 | /* nothing */ | |
2148 | rma = RX_MGMT_NONE; | |
2149 | break; | |
2150 | case IEEE80211_MGD_STATE_PROBE: | |
2151 | rma = ieee80211_direct_probe(sdata, wk); | |
2152 | break; | |
2153 | case IEEE80211_MGD_STATE_AUTH: | |
2154 | rma = ieee80211_authenticate(sdata, wk); | |
2155 | break; | |
2156 | case IEEE80211_MGD_STATE_ASSOC: | |
2157 | rma = ieee80211_associate(sdata, wk); | |
2158 | break; | |
2159 | } | |
2160 | ||
2161 | switch (rma) { | |
2162 | case RX_MGMT_NONE: | |
2163 | /* no action required */ | |
2164 | break; | |
2165 | case RX_MGMT_CFG80211_AUTH_TO: | |
2166 | case RX_MGMT_CFG80211_ASSOC_TO: | |
2167 | list_del(&wk->list); | |
2168 | list_add(&wk->list, &free_work); | |
2169 | wk->tries = rma; /* small abuse but only local */ | |
2170 | break; | |
2171 | default: | |
2172 | WARN(1, "unexpected: %d", rma); | |
2173 | } | |
2174 | } | |
2175 | ||
5bf6fcc2 JM |
2176 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2177 | if (wk->state != IEEE80211_MGD_STATE_IDLE) { | |
2178 | anybusy = true; | |
2179 | break; | |
2180 | } | |
2181 | } | |
2182 | if (!anybusy && | |
2183 | test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifmgd->request)) | |
2184 | ieee80211_queue_delayed_work(&local->hw, | |
2185 | &local->scan_work, | |
2186 | round_jiffies_relative(0)); | |
2187 | ||
77fdaa12 JB |
2188 | mutex_unlock(&ifmgd->mtx); |
2189 | ||
2190 | list_for_each_entry_safe(wk, tmp, &free_work, list) { | |
2191 | switch (wk->tries) { | |
2192 | case RX_MGMT_CFG80211_AUTH_TO: | |
2193 | cfg80211_send_auth_timeout(sdata->dev, | |
cb0b4beb | 2194 | wk->bss->cbss.bssid); |
77fdaa12 JB |
2195 | break; |
2196 | case RX_MGMT_CFG80211_ASSOC_TO: | |
cb0b4beb JB |
2197 | cfg80211_send_assoc_timeout(sdata->dev, |
2198 | wk->bss->cbss.bssid); | |
77fdaa12 JB |
2199 | break; |
2200 | default: | |
2201 | WARN(1, "unexpected: %d", wk->tries); | |
2202 | } | |
2203 | ||
2204 | list_del(&wk->list); | |
2205 | kfree(wk); | |
9c6bd790 | 2206 | } |
77fdaa12 JB |
2207 | |
2208 | ieee80211_recalc_idle(local); | |
f0706e82 JB |
2209 | } |
2210 | ||
b291ba11 JB |
2211 | static void ieee80211_sta_bcn_mon_timer(unsigned long data) |
2212 | { | |
2213 | struct ieee80211_sub_if_data *sdata = | |
2214 | (struct ieee80211_sub_if_data *) data; | |
2215 | struct ieee80211_local *local = sdata->local; | |
2216 | ||
2217 | if (local->quiescing) | |
2218 | return; | |
2219 | ||
42935eca | 2220 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
b291ba11 JB |
2221 | } |
2222 | ||
2223 | static void ieee80211_sta_conn_mon_timer(unsigned long data) | |
2224 | { | |
2225 | struct ieee80211_sub_if_data *sdata = | |
2226 | (struct ieee80211_sub_if_data *) data; | |
2227 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2228 | struct ieee80211_local *local = sdata->local; | |
2229 | ||
2230 | if (local->quiescing) | |
2231 | return; | |
2232 | ||
42935eca | 2233 | ieee80211_queue_work(&local->hw, &ifmgd->monitor_work); |
b291ba11 JB |
2234 | } |
2235 | ||
2236 | static void ieee80211_sta_monitor_work(struct work_struct *work) | |
2237 | { | |
2238 | struct ieee80211_sub_if_data *sdata = | |
2239 | container_of(work, struct ieee80211_sub_if_data, | |
2240 | u.mgd.monitor_work); | |
2241 | ||
2242 | ieee80211_mgd_probe_ap(sdata, false); | |
2243 | } | |
2244 | ||
9c6bd790 JB |
2245 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
2246 | { | |
ad935687 | 2247 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
b291ba11 JB |
2248 | sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL | |
2249 | IEEE80211_STA_CONNECTION_POLL); | |
ad935687 | 2250 | |
b291ba11 | 2251 | /* let's probe the connection once */ |
42935eca | 2252 | ieee80211_queue_work(&sdata->local->hw, |
b291ba11 JB |
2253 | &sdata->u.mgd.monitor_work); |
2254 | /* and do all the other regular work too */ | |
42935eca | 2255 | ieee80211_queue_work(&sdata->local->hw, |
46900298 | 2256 | &sdata->u.mgd.work); |
ad935687 | 2257 | } |
9c6bd790 | 2258 | } |
f0706e82 | 2259 | |
5bb644a0 JB |
2260 | #ifdef CONFIG_PM |
2261 | void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata) | |
2262 | { | |
2263 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2264 | ||
2265 | /* | |
2266 | * we need to use atomic bitops for the running bits | |
2267 | * only because both timers might fire at the same | |
2268 | * time -- the code here is properly synchronised. | |
2269 | */ | |
2270 | ||
2271 | cancel_work_sync(&ifmgd->work); | |
2272 | cancel_work_sync(&ifmgd->beacon_loss_work); | |
2273 | if (del_timer_sync(&ifmgd->timer)) | |
2274 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2275 | ||
2276 | cancel_work_sync(&ifmgd->chswitch_work); | |
2277 | if (del_timer_sync(&ifmgd->chswitch_timer)) | |
2278 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
b291ba11 JB |
2279 | |
2280 | cancel_work_sync(&ifmgd->monitor_work); | |
2281 | /* these will just be re-established on connection */ | |
2282 | del_timer_sync(&ifmgd->conn_mon_timer); | |
2283 | del_timer_sync(&ifmgd->bcn_mon_timer); | |
5bb644a0 JB |
2284 | } |
2285 | ||
2286 | void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata) | |
2287 | { | |
2288 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2289 | ||
2290 | if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running)) | |
2291 | add_timer(&ifmgd->timer); | |
2292 | if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running)) | |
2293 | add_timer(&ifmgd->chswitch_timer); | |
2294 | } | |
2295 | #endif | |
2296 | ||
9c6bd790 JB |
2297 | /* interface setup */ |
2298 | void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata) | |
f0706e82 | 2299 | { |
46900298 | 2300 | struct ieee80211_if_managed *ifmgd; |
988c0f72 | 2301 | |
46900298 JB |
2302 | ifmgd = &sdata->u.mgd; |
2303 | INIT_WORK(&ifmgd->work, ieee80211_sta_work); | |
b291ba11 | 2304 | INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work); |
46900298 | 2305 | INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work); |
04de8381 | 2306 | INIT_WORK(&ifmgd->beacon_loss_work, ieee80211_beacon_loss_work); |
46900298 | 2307 | setup_timer(&ifmgd->timer, ieee80211_sta_timer, |
c481ec97 | 2308 | (unsigned long) sdata); |
b291ba11 JB |
2309 | setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer, |
2310 | (unsigned long) sdata); | |
2311 | setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer, | |
2312 | (unsigned long) sdata); | |
46900298 | 2313 | setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer, |
9c6bd790 | 2314 | (unsigned long) sdata); |
46900298 | 2315 | skb_queue_head_init(&ifmgd->skb_queue); |
9c6bd790 | 2316 | |
77fdaa12 JB |
2317 | INIT_LIST_HEAD(&ifmgd->work_list); |
2318 | ||
46900298 | 2319 | ifmgd->capab = WLAN_CAPABILITY_ESS; |
ab1faead | 2320 | ifmgd->flags = 0; |
176be728 | 2321 | if (sdata->local->hw.queues >= 4) |
46900298 | 2322 | ifmgd->flags |= IEEE80211_STA_WMM_ENABLED; |
bbbdff9e | 2323 | |
77fdaa12 | 2324 | mutex_init(&ifmgd->mtx); |
f0706e82 JB |
2325 | } |
2326 | ||
77fdaa12 JB |
2327 | /* scan finished notification */ |
2328 | void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local) | |
60f8b39c | 2329 | { |
77fdaa12 | 2330 | struct ieee80211_sub_if_data *sdata = local->scan_sdata; |
60f8b39c | 2331 | |
77fdaa12 JB |
2332 | /* Restart STA timers */ |
2333 | rcu_read_lock(); | |
2334 | list_for_each_entry_rcu(sdata, &local->interfaces, list) | |
2335 | ieee80211_restart_sta_timer(sdata); | |
2336 | rcu_read_unlock(); | |
2337 | } | |
60f8b39c | 2338 | |
77fdaa12 JB |
2339 | int ieee80211_max_network_latency(struct notifier_block *nb, |
2340 | unsigned long data, void *dummy) | |
2341 | { | |
2342 | s32 latency_usec = (s32) data; | |
2343 | struct ieee80211_local *local = | |
2344 | container_of(nb, struct ieee80211_local, | |
2345 | network_latency_notifier); | |
1fa6f4af | 2346 | |
77fdaa12 JB |
2347 | mutex_lock(&local->iflist_mtx); |
2348 | ieee80211_recalc_ps(local, latency_usec); | |
2349 | mutex_unlock(&local->iflist_mtx); | |
dfe67012 | 2350 | |
77fdaa12 | 2351 | return 0; |
9c6bd790 JB |
2352 | } |
2353 | ||
77fdaa12 JB |
2354 | /* config hooks */ |
2355 | int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata, | |
2356 | struct cfg80211_auth_request *req) | |
9c6bd790 | 2357 | { |
46900298 | 2358 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2359 | const u8 *ssid; |
2360 | struct ieee80211_mgd_work *wk; | |
2361 | u16 auth_alg; | |
9c6bd790 | 2362 | |
77fdaa12 JB |
2363 | switch (req->auth_type) { |
2364 | case NL80211_AUTHTYPE_OPEN_SYSTEM: | |
2365 | auth_alg = WLAN_AUTH_OPEN; | |
2366 | break; | |
2367 | case NL80211_AUTHTYPE_SHARED_KEY: | |
2368 | auth_alg = WLAN_AUTH_SHARED_KEY; | |
2369 | break; | |
2370 | case NL80211_AUTHTYPE_FT: | |
2371 | auth_alg = WLAN_AUTH_FT; | |
2372 | break; | |
2373 | case NL80211_AUTHTYPE_NETWORK_EAP: | |
2374 | auth_alg = WLAN_AUTH_LEAP; | |
2375 | break; | |
2376 | default: | |
2377 | return -EOPNOTSUPP; | |
60f8b39c | 2378 | } |
77fdaa12 JB |
2379 | |
2380 | wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2381 | if (!wk) | |
9c6bd790 | 2382 | return -ENOMEM; |
77fdaa12 JB |
2383 | |
2384 | wk->bss = (void *)req->bss; | |
2385 | ||
2386 | if (req->ie && req->ie_len) { | |
2387 | memcpy(wk->ie, req->ie, req->ie_len); | |
2388 | wk->ie_len = req->ie_len; | |
9c6bd790 | 2389 | } |
77fdaa12 | 2390 | |
fffd0934 JB |
2391 | if (req->key && req->key_len) { |
2392 | wk->key_len = req->key_len; | |
2393 | wk->key_idx = req->key_idx; | |
2394 | memcpy(wk->key, req->key, req->key_len); | |
2395 | } | |
2396 | ||
77fdaa12 JB |
2397 | ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID); |
2398 | memcpy(wk->ssid, ssid + 2, ssid[1]); | |
2399 | wk->ssid_len = ssid[1]; | |
2400 | ||
2401 | wk->state = IEEE80211_MGD_STATE_PROBE; | |
2402 | wk->auth_alg = auth_alg; | |
48531847 | 2403 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2404 | |
2405 | /* | |
2406 | * XXX: if still associated need to tell AP that we're going | |
2407 | * to sleep and then change channel etc. | |
2408 | */ | |
2409 | sdata->local->oper_channel = req->bss->channel; | |
2410 | ieee80211_hw_config(sdata->local, 0); | |
2411 | ||
2412 | mutex_lock(&ifmgd->mtx); | |
2413 | list_add(&wk->list, &sdata->u.mgd.work_list); | |
2414 | mutex_unlock(&ifmgd->mtx); | |
2415 | ||
42935eca | 2416 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
9c6bd790 | 2417 | return 0; |
60f8b39c JB |
2418 | } |
2419 | ||
77fdaa12 JB |
2420 | int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata, |
2421 | struct cfg80211_assoc_request *req) | |
f0706e82 | 2422 | { |
77fdaa12 JB |
2423 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2424 | struct ieee80211_mgd_work *wk, *found = NULL; | |
2425 | int i, err; | |
f0706e82 | 2426 | |
77fdaa12 JB |
2427 | mutex_lock(&ifmgd->mtx); |
2428 | ||
2429 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
2430 | if (&wk->bss->cbss == req->bss && | |
2431 | wk->state == IEEE80211_MGD_STATE_IDLE) { | |
2432 | found = wk; | |
2433 | break; | |
2434 | } | |
2435 | } | |
2436 | ||
2437 | if (!found) { | |
2438 | err = -ENOLINK; | |
2439 | goto out; | |
2440 | } | |
2441 | ||
2442 | list_del(&found->list); | |
2443 | ||
2444 | wk = krealloc(found, sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2445 | if (!wk) { | |
2446 | list_add(&found->list, &ifmgd->work_list); | |
2447 | err = -ENOMEM; | |
2448 | goto out; | |
2449 | } | |
2450 | ||
2451 | list_add(&wk->list, &ifmgd->work_list); | |
2452 | ||
2453 | ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N; | |
2454 | ||
2455 | for (i = 0; i < req->crypto.n_ciphers_pairwise; i++) | |
2456 | if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 || | |
2457 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP || | |
2458 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104) | |
2459 | ifmgd->flags |= IEEE80211_STA_DISABLE_11N; | |
2460 | ||
2461 | sdata->local->oper_channel = req->bss->channel; | |
2462 | ieee80211_hw_config(sdata->local, 0); | |
2463 | ||
2464 | if (req->ie && req->ie_len) { | |
2465 | memcpy(wk->ie, req->ie, req->ie_len); | |
2466 | wk->ie_len = req->ie_len; | |
2467 | } else | |
2468 | wk->ie_len = 0; | |
2469 | ||
2470 | if (req->prev_bssid) | |
2471 | memcpy(wk->prev_bssid, req->prev_bssid, ETH_ALEN); | |
2472 | ||
2473 | wk->state = IEEE80211_MGD_STATE_ASSOC; | |
2474 | wk->tries = 0; | |
48531847 | 2475 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2476 | |
2477 | if (req->use_mfp) { | |
2478 | ifmgd->mfp = IEEE80211_MFP_REQUIRED; | |
2479 | ifmgd->flags |= IEEE80211_STA_MFP_ENABLED; | |
2480 | } else { | |
2481 | ifmgd->mfp = IEEE80211_MFP_DISABLED; | |
2482 | ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED; | |
2483 | } | |
2484 | ||
2485 | if (req->crypto.control_port) | |
2486 | ifmgd->flags |= IEEE80211_STA_CONTROL_PORT; | |
2487 | else | |
2488 | ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT; | |
2489 | ||
42935eca | 2490 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
77fdaa12 JB |
2491 | |
2492 | err = 0; | |
2493 | ||
2494 | out: | |
2495 | mutex_unlock(&ifmgd->mtx); | |
2496 | return err; | |
f0706e82 JB |
2497 | } |
2498 | ||
77fdaa12 | 2499 | int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2500 | struct cfg80211_deauth_request *req, |
2501 | void *cookie) | |
f0706e82 | 2502 | { |
46900298 | 2503 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2504 | struct ieee80211_mgd_work *wk; |
2505 | const u8 *bssid = NULL; | |
f0706e82 | 2506 | |
77fdaa12 JB |
2507 | mutex_lock(&ifmgd->mtx); |
2508 | ||
2509 | if (ifmgd->associated && &ifmgd->associated->cbss == req->bss) { | |
2510 | bssid = req->bss->bssid; | |
e21546a2 | 2511 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
2512 | } else list_for_each_entry(wk, &ifmgd->work_list, list) { |
2513 | if (&wk->bss->cbss == req->bss) { | |
2514 | bssid = req->bss->bssid; | |
2515 | list_del(&wk->list); | |
2516 | kfree(wk); | |
2517 | break; | |
2518 | } | |
2519 | } | |
f0706e82 | 2520 | |
8d8b261a JB |
2521 | /* |
2522 | * cfg80211 should catch this ... but it's racy since | |
2523 | * we can receive a deauth frame, process it, hand it | |
2524 | * to cfg80211 while that's in a locked section already | |
2525 | * trying to tell us that the user wants to disconnect. | |
2526 | */ | |
2527 | if (!bssid) { | |
77fdaa12 | 2528 | mutex_unlock(&ifmgd->mtx); |
46900298 | 2529 | return -ENOLINK; |
77fdaa12 JB |
2530 | } |
2531 | ||
2532 | mutex_unlock(&ifmgd->mtx); | |
2533 | ||
0ff71613 JB |
2534 | printk(KERN_DEBUG "%s: deauthenticating from %pM by local choice (reason=%d)\n", |
2535 | sdata->dev->name, bssid, req->reason_code); | |
2536 | ||
77fdaa12 | 2537 | ieee80211_send_deauth_disassoc(sdata, bssid, |
667503dd JB |
2538 | IEEE80211_STYPE_DEAUTH, req->reason_code, |
2539 | cookie); | |
f0706e82 | 2540 | |
f0706e82 JB |
2541 | return 0; |
2542 | } | |
84363e6e | 2543 | |
77fdaa12 | 2544 | int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2545 | struct cfg80211_disassoc_request *req, |
2546 | void *cookie) | |
9c6bd790 | 2547 | { |
77fdaa12 | 2548 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9c6bd790 | 2549 | |
77fdaa12 | 2550 | mutex_lock(&ifmgd->mtx); |
10f644a4 | 2551 | |
8d8b261a JB |
2552 | /* |
2553 | * cfg80211 should catch this ... but it's racy since | |
2554 | * we can receive a disassoc frame, process it, hand it | |
2555 | * to cfg80211 while that's in a locked section already | |
2556 | * trying to tell us that the user wants to disconnect. | |
2557 | */ | |
2558 | if (&ifmgd->associated->cbss != req->bss) { | |
77fdaa12 JB |
2559 | mutex_unlock(&ifmgd->mtx); |
2560 | return -ENOLINK; | |
2561 | } | |
2562 | ||
0ff71613 JB |
2563 | printk(KERN_DEBUG "%s: disassociating from %pM by local choice (reason=%d)\n", |
2564 | sdata->dev->name, req->bss->bssid, req->reason_code); | |
2565 | ||
e21546a2 | 2566 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 JB |
2567 | |
2568 | mutex_unlock(&ifmgd->mtx); | |
10f644a4 | 2569 | |
77fdaa12 | 2570 | ieee80211_send_deauth_disassoc(sdata, req->bss->bssid, |
667503dd JB |
2571 | IEEE80211_STYPE_DISASSOC, req->reason_code, |
2572 | cookie); | |
10f644a4 JB |
2573 | return 0; |
2574 | } |