projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: 802.11w - Drop unprotected robust management frames if MFP is used
[deliverable/linux.git] / net / mac80211 / mlme.c
CommitLineData
f0706e82
JB		 1/*
2 * BSS client mode implementation
5394af4d 3 * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
f0706e82
JB		 4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
12 */
13
5b323edb 14#include <linux/delay.h>
f0706e82
JB		 15#include <linux/if_ether.h>
16#include <linux/skbuff.h>
f0706e82
JB		 17#include <linux/if_arp.h>
18#include <linux/wireless.h>
19#include <linux/random.h>
20#include <linux/etherdevice.h>
d0709a65 21#include <linux/rtnetlink.h>
f0706e82 22#include <net/iw_handler.h>
f0706e82 23#include <net/mac80211.h>
472dbc45 24#include <asm/unaligned.h>
60f8b39c 25
f0706e82 26#include "ieee80211_i.h"
2c8dccc7
JB		 27#include "rate.h"
28#include "led.h"
f0706e82 29
6042a3e3 30#define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
f0706e82
JB		 31#define IEEE80211_AUTH_TIMEOUT (HZ / 5)
32#define IEEE80211_AUTH_MAX_TRIES 3
33#define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
34#define IEEE80211_ASSOC_MAX_TRIES 3
35#define IEEE80211_MONITORING_INTERVAL (2 * HZ)
36#define IEEE80211_PROBE_INTERVAL (60 * HZ)
37#define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
38#define IEEE80211_SCAN_INTERVAL (2 * HZ)
39#define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
872ba533 40#define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
f0706e82 41
f0706e82
JB		 42#define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
43#define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
44
45#define IEEE80211_IBSS_MAX_STA_ENTRIES 128
46
47
5484e237
JB		 48/* utils */
49static int ecw2cw(int ecw)
60f8b39c 50{
5484e237 51 return (1 << ecw) - 1;
60f8b39c
JB		 52}
53
c2b13452 54static u8 *ieee80211_bss_get_ie(struct ieee80211_bss *bss, u8 ie)
43ac2ca3
JM		 55{
56 u8 *end, *pos;
57
58 pos = bss->ies;
59 if (pos == NULL)
60 return NULL;
61 end = pos + bss->ies_len;
62
63 while (pos + 1 < end) {
64 if (pos + 2 + pos[1] > end)
65 break;
66 if (pos[0] == ie)
67 return pos;
68 pos += 2 + pos[1];
69 }
70
71 return NULL;
72}
73
c2b13452 74static int ieee80211_compatible_rates(struct ieee80211_bss *bss,
9ac19a90
JB		 75 struct ieee80211_supported_band *sband,
76 u64 *rates)
77{
78 int i, j, count;
79 *rates = 0;
80 count = 0;
81 for (i = 0; i < bss->supp_rates_len; i++) {
82 int rate = (bss->supp_rates[i] & 0x7F) * 5;
83
84 for (j = 0; j < sband->n_bitrates; j++)
85 if (sband->bitrates[j].bitrate == rate) {
86 *rates |= BIT(j);
87 count++;
88 break;
89 }
90 }
91
92 return count;
93}
94
9c6bd790
JB		 95/* also used by mesh code */
96u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
97 struct ieee802_11_elems *elems,
98 enum ieee80211_band band)
60f8b39c 99{
9c6bd790
JB		 100 struct ieee80211_supported_band *sband;
101 struct ieee80211_rate *bitrates;
102 size_t num_rates;
103 u64 supp_rates;
104 int i, j;
105 sband = local->hw.wiphy->bands[band];
60f8b39c 106
9c6bd790
JB		 107 if (!sband) {
108 WARN_ON(1);
109 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
60f8b39c 110 }
60f8b39c 111
9c6bd790
JB		 112 bitrates = sband->bitrates;
113 num_rates = sband->n_bitrates;
114 supp_rates = 0;
115 for (i = 0; i < elems->supp_rates_len +
116 elems->ext_supp_rates_len; i++) {
117 u8 rate = 0;
118 int own_rate;
119 if (i < elems->supp_rates_len)
120 rate = elems->supp_rates[i];
121 else if (elems->ext_supp_rates)
122 rate = elems->ext_supp_rates
123 [i - elems->supp_rates_len];
124 own_rate = 5 * (rate & 0x7f);
125 for (j = 0; j < num_rates; j++)
126 if (bitrates[j].bitrate == own_rate)
127 supp_rates |= BIT(j);
128 }
129 return supp_rates;
60f8b39c
JB		 130}
131
9c6bd790
JB		 132/* frame sending functions */
133
134/* also used by scanning code */
0a51b27e
JB		 135void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
136 u8 *ssid, size_t ssid_len)
60f8b39c
JB		 137{
138 struct ieee80211_local *local = sdata->local;
139 struct ieee80211_supported_band *sband;
140 struct sk_buff *skb;
141 struct ieee80211_mgmt *mgmt;
142 u8 *pos, *supp_rates, *esupp_rates = NULL;
143 int i;
144
145 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
146 if (!skb) {
147 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
148 "request\n", sdata->dev->name);
149 return;
150 }
151 skb_reserve(skb, local->hw.extra_tx_headroom);
152
153 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
154 memset(mgmt, 0, 24);
155 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
156 IEEE80211_STYPE_PROBE_REQ);
157 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
158 if (dst) {
159 memcpy(mgmt->da, dst, ETH_ALEN);
160 memcpy(mgmt->bssid, dst, ETH_ALEN);
161 } else {
162 memset(mgmt->da, 0xff, ETH_ALEN);
163 memset(mgmt->bssid, 0xff, ETH_ALEN);
164 }
165 pos = skb_put(skb, 2 + ssid_len);
166 *pos++ = WLAN_EID_SSID;
167 *pos++ = ssid_len;
168 memcpy(pos, ssid, ssid_len);
169
170 supp_rates = skb_put(skb, 2);
171 supp_rates[0] = WLAN_EID_SUPP_RATES;
172 supp_rates[1] = 0;
173 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
174
175 for (i = 0; i < sband->n_bitrates; i++) {
176 struct ieee80211_rate *rate = &sband->bitrates[i];
177 if (esupp_rates) {
178 pos = skb_put(skb, 1);
179 esupp_rates[1]++;
180 } else if (supp_rates[1] == 8) {
181 esupp_rates = skb_put(skb, 3);
182 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
183 esupp_rates[1] = 1;
184 pos = &esupp_rates[2];
185 } else {
186 pos = skb_put(skb, 1);
187 supp_rates[1]++;
188 }
189 *pos = rate->bitrate / 5;
190 }
191
e50db65c 192 ieee80211_tx_skb(sdata, skb, 0);
60f8b39c
JB		 193}
194
9c6bd790
JB		 195static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
196 struct ieee80211_if_sta *ifsta,
197 int transaction, u8 *extra, size_t extra_len,
198 int encrypt)
199{
200 struct ieee80211_local *local = sdata->local;
201 struct sk_buff *skb;
202 struct ieee80211_mgmt *mgmt;
203
204 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
205 sizeof(*mgmt) + 6 + extra_len);
206 if (!skb) {
207 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
208 "frame\n", sdata->dev->name);
209 return;
210 }
211 skb_reserve(skb, local->hw.extra_tx_headroom);
212
213 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
214 memset(mgmt, 0, 24 + 6);
215 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
216 IEEE80211_STYPE_AUTH);
217 if (encrypt)
218 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
219 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
220 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
221 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
222 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
223 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
224 ifsta->auth_transaction = transaction + 1;
225 mgmt->u.auth.status_code = cpu_to_le16(0);
226 if (extra)
227 memcpy(skb_put(skb, extra_len), extra, extra_len);
228
229 ieee80211_tx_skb(sdata, skb, encrypt);
230}
231
9ac19a90
JB		 232static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
233 struct ieee80211_if_sta *ifsta)
234{
235 struct ieee80211_local *local = sdata->local;
236 struct sk_buff *skb;
237 struct ieee80211_mgmt *mgmt;
d9fe60de 238 u8 *pos, *ies, *ht_ie;
9ac19a90
JB		 239 int i, len, count, rates_len, supp_rates_len;
240 u16 capab;
c2b13452 241 struct ieee80211_bss *bss;
9ac19a90
JB		 242 int wmm = 0;
243 struct ieee80211_supported_band *sband;
244 u64 rates = 0;
245
246 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
247 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
248 ifsta->ssid_len);
249 if (!skb) {
250 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
251 "frame\n", sdata->dev->name);
252 return;
253 }
254 skb_reserve(skb, local->hw.extra_tx_headroom);
255
256 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
257
258 capab = ifsta->capab;
259
260 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
261 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
262 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
263 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
264 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
265 }
266
267 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
268 local->hw.conf.channel->center_freq,
269 ifsta->ssid, ifsta->ssid_len);
270 if (bss) {
271 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
272 capab |= WLAN_CAPABILITY_PRIVACY;
273 if (bss->wmm_used)
274 wmm = 1;
275
276 /* get all rates supported by the device and the AP as
277 * some APs don't like getting a superset of their rates
278 * in the association request (e.g. D-Link DAP 1353 in
279 * b-only mode) */
280 rates_len = ieee80211_compatible_rates(bss, sband, &rates);
281
282 if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
283 (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
284 capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
285
286 ieee80211_rx_bss_put(local, bss);
287 } else {
288 rates = ~0;
289 rates_len = sband->n_bitrates;
290 }
291
292 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
293 memset(mgmt, 0, 24);
294 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
295 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
296 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
297
298 if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
299 skb_put(skb, 10);
300 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
301 IEEE80211_STYPE_REASSOC_REQ);
302 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
303 mgmt->u.reassoc_req.listen_interval =
304 cpu_to_le16(local->hw.conf.listen_interval);
305 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
306 ETH_ALEN);
307 } else {
308 skb_put(skb, 4);
309 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
310 IEEE80211_STYPE_ASSOC_REQ);
311 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
13554121 312 mgmt->u.assoc_req.listen_interval =
9ac19a90
JB		 313 cpu_to_le16(local->hw.conf.listen_interval);
314 }
315
316 /* SSID */
317 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
318 *pos++ = WLAN_EID_SSID;
319 *pos++ = ifsta->ssid_len;
320 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
321
322 /* add all rates which were marked to be used above */
323 supp_rates_len = rates_len;
324 if (supp_rates_len > 8)
325 supp_rates_len = 8;
326
327 len = sband->n_bitrates;
328 pos = skb_put(skb, supp_rates_len + 2);
329 *pos++ = WLAN_EID_SUPP_RATES;
330 *pos++ = supp_rates_len;
331
332 count = 0;
333 for (i = 0; i < sband->n_bitrates; i++) {
334 if (BIT(i) & rates) {
335 int rate = sband->bitrates[i].bitrate;
336 *pos++ = (u8) (rate / 5);
337 if (++count == 8)
338 break;
339 }
340 }
341
342 if (rates_len > count) {
343 pos = skb_put(skb, rates_len - count + 2);
344 *pos++ = WLAN_EID_EXT_SUPP_RATES;
345 *pos++ = rates_len - count;
346
347 for (i++; i < sband->n_bitrates; i++) {
348 if (BIT(i) & rates) {
349 int rate = sband->bitrates[i].bitrate;
350 *pos++ = (u8) (rate / 5);
351 }
352 }
353 }
354
355 if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
356 /* 1. power capabilities */
357 pos = skb_put(skb, 4);
358 *pos++ = WLAN_EID_PWR_CAPABILITY;
359 *pos++ = 2;
360 *pos++ = 0; /* min tx power */
361 *pos++ = local->hw.conf.channel->max_power; /* max tx power */
362
363 /* 2. supported channels */
364 /* TODO: get this in reg domain format */
365 pos = skb_put(skb, 2 * sband->n_channels + 2);
366 *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
367 *pos++ = 2 * sband->n_channels;
368 for (i = 0; i < sband->n_channels; i++) {
369 *pos++ = ieee80211_frequency_to_channel(
370 sband->channels[i].center_freq);
371 *pos++ = 1; /* one channel in the subband*/
372 }
373 }
374
375 if (ifsta->extra_ie) {
376 pos = skb_put(skb, ifsta->extra_ie_len);
377 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
378 }
379
380 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
381 pos = skb_put(skb, 9);
382 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
383 *pos++ = 7; /* len */
384 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
385 *pos++ = 0x50;
386 *pos++ = 0xf2;
387 *pos++ = 2; /* WME */
388 *pos++ = 0; /* WME info */
389 *pos++ = 1; /* WME ver */
390 *pos++ = 0;
391 }
392
393 /* wmm support is a must to HT */
eb46936b
VT		 394 /*
395 * IEEE802.11n does not allow TKIP/WEP as pairwise
396 * ciphers in HT mode. We still associate in non-ht
397 * mode (11a/b/g) if any one of these ciphers is
398 * configured as pairwise.
399 */
9ac19a90 400 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
d9fe60de
JB		 401 sband->ht_cap.ht_supported &&
402 (ht_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_INFORMATION)) &&
eb46936b
VT		 403 ht_ie[1] >= sizeof(struct ieee80211_ht_info) &&
404 (!(ifsta->flags & IEEE80211_STA_TKIP_WEP_USED))) {
d9fe60de
JB		 405 struct ieee80211_ht_info *ht_info =
406 (struct ieee80211_ht_info *)(ht_ie + 2);
407 u16 cap = sband->ht_cap.cap;
9ac19a90
JB		 408 __le16 tmp;
409 u32 flags = local->hw.conf.channel->flags;
410
d9fe60de
JB		 411 switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
412 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
9ac19a90 413 if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
d9fe60de 414 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB		 415 cap &= ~IEEE80211_HT_CAP_SGI_40;
416 }
417 break;
d9fe60de 418 case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
9ac19a90 419 if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
d9fe60de 420 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB		 421 cap &= ~IEEE80211_HT_CAP_SGI_40;
422 }
423 break;
424 }
425
426 tmp = cpu_to_le16(cap);
427 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
428 *pos++ = WLAN_EID_HT_CAPABILITY;
429 *pos++ = sizeof(struct ieee80211_ht_cap);
430 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
431 memcpy(pos, &tmp, sizeof(u16));
432 pos += sizeof(u16);
433 /* TODO: needs a define here for << 2 */
d9fe60de
JB		 434 *pos++ = sband->ht_cap.ampdu_factor |
435 (sband->ht_cap.ampdu_density << 2);
436 memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs));
9ac19a90
JB		 437 }
438
439 kfree(ifsta->assocreq_ies);
440 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
441 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
442 if (ifsta->assocreq_ies)
443 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
444
e50db65c 445 ieee80211_tx_skb(sdata, skb, 0);
9ac19a90
JB		 446}
447
448
ef422bc0
JB		 449static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
450 u16 stype, u16 reason)
9ac19a90
JB		 451{
452 struct ieee80211_local *local = sdata->local;
ef422bc0 453 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
9ac19a90
JB		 454 struct sk_buff *skb;
455 struct ieee80211_mgmt *mgmt;
456
457 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
458 if (!skb) {
ef422bc0
JB		 459 printk(KERN_DEBUG "%s: failed to allocate buffer for "
460 "deauth/disassoc frame\n", sdata->dev->name);
9ac19a90
JB		 461 return;
462 }
463 skb_reserve(skb, local->hw.extra_tx_headroom);
464
465 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
466 memset(mgmt, 0, 24);
467 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
468 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
469 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
ef422bc0 470 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
9ac19a90 471 skb_put(skb, 2);
ef422bc0 472 /* u.deauth.reason_code == u.disassoc.reason_code */
9ac19a90
JB		 473 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
474
5394af4d 475 ieee80211_tx_skb(sdata, skb, ifsta->flags & IEEE80211_STA_MFP_ENABLED);
9ac19a90
JB		 476}
477
60f8b39c 478/* MLME */
f698d856 479static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
c2b13452 480 struct ieee80211_bss *bss)
e2839d8f 481{
e2839d8f
VK		 482 struct ieee80211_local *local = sdata->local;
483 int i, have_higher_than_11mbit = 0;
484
e2839d8f
VK		 485 /* cf. IEEE 802.11 9.2.12 */
486 for (i = 0; i < bss->supp_rates_len; i++)
487 if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
488 have_higher_than_11mbit = 1;
489
490 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
491 have_higher_than_11mbit)
492 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
493 else
494 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
495
3d35f7c6 496 ieee80211_set_wmm_default(sdata);
e2839d8f
VK		 497}
498
f698d856 499static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
f0706e82
JB		 500 struct ieee80211_if_sta *ifsta,
501 u8 *wmm_param, size_t wmm_param_len)
502{
f0706e82
JB		 503 struct ieee80211_tx_queue_params params;
504 size_t left;
505 int count;
506 u8 *pos;
507
3434fbd3
JB		 508 if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
509 return;
510
511 if (!wmm_param)
512 return;
513
f0706e82
JB		 514 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
515 return;
516 count = wmm_param[6] & 0x0f;
517 if (count == ifsta->wmm_last_param_set)
518 return;
519 ifsta->wmm_last_param_set = count;
520
521 pos = wmm_param + 8;
522 left = wmm_param_len - 8;
523
524 memset(&params, 0, sizeof(params));
525
526 if (!local->ops->conf_tx)
527 return;
528
529 local->wmm_acm = 0;
530 for (; left >= 4; left -= 4, pos += 4) {
531 int aci = (pos[0] >> 5) & 0x03;
532 int acm = (pos[0] >> 4) & 0x01;
533 int queue;
534
535 switch (aci) {
536 case 1:
e100bb64 537 queue = 3;
988c0f72 538 if (acm)
f0706e82 539 local->wmm_acm |= BIT(0) | BIT(3);
f0706e82
JB		 540 break;
541 case 2:
e100bb64 542 queue = 1;
988c0f72 543 if (acm)
f0706e82 544 local->wmm_acm |= BIT(4) | BIT(5);
f0706e82
JB		 545 break;
546 case 3:
e100bb64 547 queue = 0;
988c0f72 548 if (acm)
f0706e82 549 local->wmm_acm |= BIT(6) | BIT(7);
f0706e82
JB		 550 break;
551 case 0:
552 default:
e100bb64 553 queue = 2;
988c0f72 554 if (acm)
f0706e82 555 local->wmm_acm |= BIT(1) | BIT(2);
f0706e82
JB		 556 break;
557 }
558
559 params.aifs = pos[0] & 0x0f;
560 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
561 params.cw_min = ecw2cw(pos[1] & 0x0f);
f434b2d1 562 params.txop = get_unaligned_le16(pos + 2);
f4ea83dd 563#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
f0706e82 564 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
3330d7be 565 "cWmin=%d cWmax=%d txop=%d\n",
f698d856 566 local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
3330d7be
JB		 567 params.cw_max, params.txop);
568#endif
f0706e82
JB		 569 /* TODO: handle ACM (block TX, fallback to next lowest allowed
570 * AC for now) */
571 if (local->ops->conf_tx(local_to_hw(local), queue, &params)) {
572 printk(KERN_DEBUG "%s: failed to set TX queue "
f698d856 573 "parameters for queue %d\n", local->mdev->name, queue);
f0706e82
JB		 574 }
575 }
576}
577
a97b77b9
VN		 578static bool check_tim(struct ieee802_11_elems *elems, u16 aid, bool *is_mc)
579{
580 u8 mask;
581 u8 index, indexn1, indexn2;
582 struct ieee80211_tim_ie *tim = (struct ieee80211_tim_ie *) elems->tim;
583
584 aid &= 0x3fff;
585 index = aid / 8;
586 mask = 1 << (aid & 7);
587
588 if (tim->bitmap_ctrl & 0x01)
589 *is_mc = true;
590
591 indexn1 = tim->bitmap_ctrl & 0xfe;
592 indexn2 = elems->tim_len + indexn1 - 4;
593
594 if (index < indexn1 || index > indexn2)
595 return false;
596
597 index -= indexn1;
598
599 return !!(tim->virtual_map[index] & mask);
600}
601
7a5158ef
JB		 602static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
603 u16 capab, bool erp_valid, u8 erp)
5628221c 604{
bda3933a 605 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
ebd74487 606#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 607 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ebd74487 608#endif
471b3efd 609 u32 changed = 0;
7a5158ef
JB		 610 bool use_protection;
611 bool use_short_preamble;
612 bool use_short_slot;
613
614 if (erp_valid) {
615 use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0;
616 use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0;
617 } else {
618 use_protection = false;
619 use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE);
620 }
621
622 use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME);
5628221c 623
471b3efd 624 if (use_protection != bss_conf->use_cts_prot) {
f4ea83dd 625#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 626 if (net_ratelimit()) {
0c68ae26 627 printk(KERN_DEBUG "%s: CTS protection %s (BSSID=%pM)\n",
471b3efd 628 sdata->dev->name,
5628221c 629 use_protection ? "enabled" : "disabled",
0c68ae26 630 ifsta->bssid);
5628221c 631 }
f4ea83dd 632#endif
471b3efd
JB		 633 bss_conf->use_cts_prot = use_protection;
634 changed |= BSS_CHANGED_ERP_CTS_PROT;
5628221c 635 }
7e9ed188 636
d43c7b37 637 if (use_short_preamble != bss_conf->use_short_preamble) {
f4ea83dd 638#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
7e9ed188
DD		 639 if (net_ratelimit()) {
640 printk(KERN_DEBUG "%s: switched to %s barker preamble"
0c68ae26 641 " (BSSID=%pM)\n",
471b3efd 642 sdata->dev->name,
d43c7b37 643 use_short_preamble ? "short" : "long",
0c68ae26 644 ifsta->bssid);
7e9ed188 645 }
f4ea83dd 646#endif
d43c7b37 647 bss_conf->use_short_preamble = use_short_preamble;
471b3efd 648 changed |= BSS_CHANGED_ERP_PREAMBLE;
7e9ed188 649 }
d9430a32 650
7a5158ef
JB		 651 if (use_short_slot != bss_conf->use_short_slot) {
652#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
653 if (net_ratelimit()) {
391429c1
CL		 654 printk(KERN_DEBUG "%s: switched to %s slot time"
655 " (BSSID=%pM)\n",
7a5158ef
JB		 656 sdata->dev->name,
657 use_short_slot ? "short" : "long",
658 ifsta->bssid);
659 }
660#endif
661 bss_conf->use_short_slot = use_short_slot;
662 changed |= BSS_CHANGED_ERP_SLOT;
50c4afb9
JL		 663 }
664
665 return changed;
666}
667
f5e5bf25
TW		 668static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
669 struct ieee80211_if_sta *ifsta)
670{
671 union iwreq_data wrqu;
672 memset(&wrqu, 0, sizeof(wrqu));
673 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
674 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
675 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
676 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
677}
678
f698d856 679static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 680 struct ieee80211_if_sta *ifsta)
681{
74af0250
LT		 682 char *buf;
683 size_t len;
684 int i;
f0706e82
JB		 685 union iwreq_data wrqu;
686
74af0250
LT		 687 if (!ifsta->assocreq_ies && !ifsta->assocresp_ies)
688 return;
689
690 buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len +
691 ifsta->assocresp_ies_len), GFP_KERNEL);
692 if (!buf)
693 return;
694
695 len = sprintf(buf, "ASSOCINFO(");
f0706e82 696 if (ifsta->assocreq_ies) {
74af0250
LT		 697 len += sprintf(buf + len, "ReqIEs=");
698 for (i = 0; i < ifsta->assocreq_ies_len; i++) {
699 len += sprintf(buf + len, "%02x",
700 ifsta->assocreq_ies[i]);
701 }
f0706e82 702 }
087d833e 703 if (ifsta->assocresp_ies) {
74af0250
LT		 704 if (ifsta->assocreq_ies)
705 len += sprintf(buf + len, " ");
706 len += sprintf(buf + len, "RespIEs=");
707 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
708 len += sprintf(buf + len, "%02x",
709 ifsta->assocresp_ies[i]);
710 }
f0706e82 711 }
74af0250
LT		 712 len += sprintf(buf + len, ")");
713
714 if (len > IW_CUSTOM_MAX) {
715 len = sprintf(buf, "ASSOCRESPIE=");
716 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
717 len += sprintf(buf + len, "%02x",
718 ifsta->assocresp_ies[i]);
719 }
720 }
721
ad788b5e
JL		 722 if (len <= IW_CUSTOM_MAX) {
723 memset(&wrqu, 0, sizeof(wrqu));
724 wrqu.data.length = len;
725 wireless_send_event(sdata->dev, IWEVCUSTOM, &wrqu, buf);
726 }
74af0250
LT		 727
728 kfree(buf);
f0706e82
JB		 729}
730
731
f698d856 732static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
ae5eb026
JB		 733 struct ieee80211_if_sta *ifsta,
734 u32 bss_info_changed)
f0706e82 735{
471b3efd 736 struct ieee80211_local *local = sdata->local;
38668c05 737 struct ieee80211_conf *conf = &local_to_hw(local)->conf;
f0706e82 738
c2b13452 739 struct ieee80211_bss *bss;
d6f2da5b 740
ae5eb026 741 bss_info_changed |= BSS_CHANGED_ASSOC;
f5e5bf25 742 ifsta->flags |= IEEE80211_STA_ASSOCIATED;
5628221c 743
05c914fe 744 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f5e5bf25 745 return;
21c0cbe7 746
f5e5bf25
TW		 747 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
748 conf->channel->center_freq,
749 ifsta->ssid, ifsta->ssid_len);
750 if (bss) {
751 /* set timing information */
bda3933a
JB		 752 sdata->vif.bss_conf.beacon_int = bss->beacon_int;
753 sdata->vif.bss_conf.timestamp = bss->timestamp;
754 sdata->vif.bss_conf.dtim_period = bss->dtim_period;
21c0cbe7 755
ae5eb026 756 bss_info_changed |= ieee80211_handle_bss_capability(sdata,
7a5158ef 757 bss->capability, bss->has_erp_value, bss->erp_value);
9ac19a90
JB		 758
759 ieee80211_rx_bss_put(local, bss);
f0706e82
JB		 760 }
761
9ac19a90
JB		 762 ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
763 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
764 ieee80211_sta_send_associnfo(sdata, ifsta);
9306102e 765
9ac19a90
JB		 766 ifsta->last_probe = jiffies;
767 ieee80211_led_assoc(local, 1);
9306102e 768
bda3933a 769 sdata->vif.bss_conf.assoc = 1;
96dd22ac
JB		 770 /*
771 * For now just always ask the driver to update the basic rateset
772 * when we have associated, we aren't checking whether it actually
773 * changed or not.
774 */
ae5eb026
JB		 775 bss_info_changed |= BSS_CHANGED_BASIC_RATES;
776 ieee80211_bss_info_change_notify(sdata, bss_info_changed);
f0706e82 777
4be8c387
JB		 778 if (local->powersave) {
779 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS) &&
780 local->hw.conf.dynamic_ps_timeout > 0) {
520eb820 781 mod_timer(&local->dynamic_ps_timer, jiffies +
46f2c4bd
JB		 782 msecs_to_jiffies(
783 local->hw.conf.dynamic_ps_timeout));
4be8c387
JB		 784 } else {
785 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
786 ieee80211_send_nullfunc(local, sdata, 1);
520eb820 787 conf->flags |= IEEE80211_CONF_PS;
4be8c387 788 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
520eb820 789 }
e0cb686f
KV		 790 }
791
9ac19a90
JB		 792 netif_tx_start_all_queues(sdata->dev);
793 netif_carrier_on(sdata->dev);
f0706e82 794
9ac19a90 795 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 796}
797
9ac19a90
JB		 798static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
799 struct ieee80211_if_sta *ifsta)
f0706e82 800{
9ac19a90
JB		 801 ifsta->direct_probe_tries++;
802 if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26
JB		 803 printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n",
804 sdata->dev->name, ifsta->bssid);
9ac19a90 805 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 806 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 807 return;
808 }
f0706e82 809
0c68ae26
JB		 810 printk(KERN_DEBUG "%s: direct probe to AP %pM try %d\n",
811 sdata->dev->name, ifsta->bssid,
9ac19a90 812 ifsta->direct_probe_tries);
f0706e82 813
9ac19a90 814 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82 815
9ac19a90
JB		 816 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
817
818 /* Direct probe is sent to broadcast address as some APs
819 * will not answer to direct packet in unassociated state.
820 */
821 ieee80211_send_probe_req(sdata, NULL,
822 ifsta->ssid, ifsta->ssid_len);
823
824 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
60f8b39c 825}
f0706e82 826
9ac19a90
JB		 827
828static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
829 struct ieee80211_if_sta *ifsta)
f0706e82 830{
9ac19a90
JB		 831 ifsta->auth_tries++;
832 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26 833 printk(KERN_DEBUG "%s: authentication with AP %pM"
9ac19a90 834 " timed out\n",
0c68ae26 835 sdata->dev->name, ifsta->bssid);
9ac19a90 836 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 837 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 838 return;
839 }
f0706e82 840
9ac19a90 841 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
0c68ae26
JB		 842 printk(KERN_DEBUG "%s: authenticate with AP %pM\n",
843 sdata->dev->name, ifsta->bssid);
f0706e82 844
9ac19a90
JB		 845 ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
846
847 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
f0706e82
JB		 848}
849
5925d976
VN		 850/*
851 * The disassoc 'reason' argument can be either our own reason
852 * if self disconnected or a reason code from the AP.
853 */
aa458d17
TW		 854static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
855 struct ieee80211_if_sta *ifsta, bool deauth,
856 bool self_disconnected, u16 reason)
857{
858 struct ieee80211_local *local = sdata->local;
859 struct sta_info *sta;
e0cb686f 860 u32 changed = 0, config_changed = 0;
aa458d17
TW		 861
862 rcu_read_lock();
863
864 sta = sta_info_get(local, ifsta->bssid);
865 if (!sta) {
866 rcu_read_unlock();
867 return;
868 }
869
870 if (deauth) {
871 ifsta->direct_probe_tries = 0;
872 ifsta->auth_tries = 0;
873 }
874 ifsta->assoc_scan_tries = 0;
875 ifsta->assoc_tries = 0;
876
24e64622 877 netif_tx_stop_all_queues(sdata->dev);
aa458d17
TW		 878 netif_carrier_off(sdata->dev);
879
17741cdc 880 ieee80211_sta_tear_down_BA_sessions(sdata, sta->sta.addr);
aa458d17
TW		 881
882 if (self_disconnected) {
883 if (deauth)
ef422bc0
JB		 884 ieee80211_send_deauth_disassoc(sdata,
885 IEEE80211_STYPE_DEAUTH, reason);
aa458d17 886 else
ef422bc0
JB		 887 ieee80211_send_deauth_disassoc(sdata,
888 IEEE80211_STYPE_DISASSOC, reason);
aa458d17
TW		 889 }
890
f5e5bf25
TW		 891 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
892 changed |= ieee80211_reset_erp_info(sdata);
893
f5e5bf25 894 ieee80211_led_assoc(local, 0);
ae5eb026
JB		 895 changed |= BSS_CHANGED_ASSOC;
896 sdata->vif.bss_conf.assoc = false;
f5e5bf25
TW		 897
898 ieee80211_sta_send_apinfo(sdata, ifsta);
aa458d17 899
5925d976 900 if (self_disconnected || reason == WLAN_REASON_DISASSOC_STA_HAS_LEFT)
aa458d17
TW		 901 ifsta->state = IEEE80211_STA_MLME_DISABLED;
902
aa458d17
TW		 903 rcu_read_unlock();
904
4797938c 905 /* channel(_type) changes are handled by ieee80211_hw_config */
094d05dc 906 local->oper_channel_type = NL80211_CHAN_NO_HT;
e0cb686f 907
520eb820
KV		 908 del_timer_sync(&local->dynamic_ps_timer);
909 cancel_work_sync(&local->dynamic_ps_enable_work);
910
e0cb686f
KV		 911 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
912 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
913 config_changed |= IEEE80211_CONF_CHANGE_PS;
914 }
ae5eb026 915
e0cb686f 916 ieee80211_hw_config(local, config_changed);
ae5eb026 917 ieee80211_bss_info_change_notify(sdata, changed);
8e268e47
TW		 918
919 rcu_read_lock();
920
921 sta = sta_info_get(local, ifsta->bssid);
922 if (!sta) {
923 rcu_read_unlock();
924 return;
925 }
926
927 sta_info_unlink(&sta);
928
929 rcu_read_unlock();
930
931 sta_info_destroy(sta);
aa458d17 932}
f0706e82 933
9ac19a90
JB		 934static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
935{
936 if (!sdata || !sdata->default_key ||
937 sdata->default_key->conf.alg != ALG_WEP)
938 return 0;
939 return 1;
940}
941
f698d856 942static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 943 struct ieee80211_if_sta *ifsta)
944{
f698d856 945 struct ieee80211_local *local = sdata->local;
c2b13452 946 struct ieee80211_bss *bss;
5b98b1f7
JB		 947 int bss_privacy;
948 int wep_privacy;
949 int privacy_invoked;
f0706e82 950
5b98b1f7 951 if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
f0706e82
JB		 952 return 0;
953
f698d856 954 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
8318d78a 955 local->hw.conf.channel->center_freq,
cffdd30d 956 ifsta->ssid, ifsta->ssid_len);
f0706e82
JB		 957 if (!bss)
958 return 0;
959
5b98b1f7 960 bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
f698d856 961 wep_privacy = !!ieee80211_sta_wep_configured(sdata);
5b98b1f7 962 privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
f0706e82 963
3e122be0 964 ieee80211_rx_bss_put(local, bss);
f0706e82 965
5b98b1f7
JB		 966 if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
967 return 0;
968
969 return 1;
f0706e82
JB		 970}
971
f698d856 972static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 973 struct ieee80211_if_sta *ifsta)
974{
975 ifsta->assoc_tries++;
976 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
0c68ae26 977 printk(KERN_DEBUG "%s: association with AP %pM"
f0706e82 978 " timed out\n",
0c68ae26 979 sdata->dev->name, ifsta->bssid);
48c2fc59 980 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 981 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 982 return;
983 }
984
48c2fc59 985 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
0c68ae26
JB		 986 printk(KERN_DEBUG "%s: associate with AP %pM\n",
987 sdata->dev->name, ifsta->bssid);
f698d856 988 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
f0706e82 989 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
f698d856 990 "mixed-cell disabled - abort association\n", sdata->dev->name);
48c2fc59 991 ifsta->state = IEEE80211_STA_MLME_DISABLED;
f0706e82
JB		 992 return;
993 }
994
f698d856 995 ieee80211_send_assoc(sdata, ifsta);
f0706e82
JB		 996
997 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
998}
999
1000
f698d856 1001static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1002 struct ieee80211_if_sta *ifsta)
1003{
f698d856 1004 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1005 struct sta_info *sta;
1006 int disassoc;
1007
1008 /* TODO: start monitoring current AP signal quality and number of
1009 * missed beacons. Scan other channels every now and then and search
1010 * for better APs. */
1011 /* TODO: remove expired BSSes */
1012
48c2fc59 1013 ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
f0706e82 1014
d0709a65
JB		 1015 rcu_read_lock();
1016
f0706e82
JB		 1017 sta = sta_info_get(local, ifsta->bssid);
1018 if (!sta) {
0c68ae26
JB		 1019 printk(KERN_DEBUG "%s: No STA entry for own AP %pM\n",
1020 sdata->dev->name, ifsta->bssid);
f0706e82
JB		 1021 disassoc = 1;
1022 } else {
1023 disassoc = 0;
1024 if (time_after(jiffies,
1025 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
d6f2da5b 1026 if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
f0706e82 1027 printk(KERN_DEBUG "%s: No ProbeResp from "
0c68ae26 1028 "current AP %pM - assume out of "
f0706e82 1029 "range\n",
0c68ae26 1030 sdata->dev->name, ifsta->bssid);
f0706e82 1031 disassoc = 1;
d6f2da5b 1032 } else
f698d856 1033 ieee80211_send_probe_req(sdata, ifsta->bssid,
4dfe51e1
JB		 1034 ifsta->ssid,
1035 ifsta->ssid_len);
d6f2da5b 1036 ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
f0706e82 1037 } else {
d6f2da5b 1038 ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
f0706e82
JB		 1039 if (time_after(jiffies, ifsta->last_probe +
1040 IEEE80211_PROBE_INTERVAL)) {
1041 ifsta->last_probe = jiffies;
f698d856 1042 ieee80211_send_probe_req(sdata, ifsta->bssid,
f0706e82
JB		 1043 ifsta->ssid,
1044 ifsta->ssid_len);
1045 }
1046 }
f0706e82 1047 }
d0709a65
JB		 1048
1049 rcu_read_unlock();
1050
60f8b39c
JB		 1051 if (disassoc)
1052 ieee80211_set_disassoc(sdata, ifsta, true, true,
1053 WLAN_REASON_PREV_AUTH_NOT_VALID);
1054 else
1055 mod_timer(&ifsta->timer, jiffies +
1056 IEEE80211_MONITORING_INTERVAL);
f0706e82
JB		 1057}
1058
1059
f698d856 1060static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1061 struct ieee80211_if_sta *ifsta)
1062{
f698d856 1063 printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
d6f2da5b 1064 ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
f698d856 1065 ieee80211_associate(sdata, ifsta);
f0706e82
JB		 1066}
1067
1068
f698d856 1069static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1070 struct ieee80211_if_sta *ifsta,
1071 struct ieee80211_mgmt *mgmt,
1072 size_t len)
1073{
1074 u8 *pos;
1075 struct ieee802_11_elems elems;
1076
f0706e82 1077 pos = mgmt->u.auth.variable;
67a4cce4 1078 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
f4ea83dd 1079 if (!elems.challenge)
f0706e82 1080 return;
f698d856 1081 ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
f0706e82
JB		 1082 elems.challenge_len + 2, 1);
1083}
1084
f698d856 1085static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1086 struct ieee80211_if_sta *ifsta,
1087 struct ieee80211_mgmt *mgmt,
1088 size_t len)
1089{
f0706e82
JB		 1090 u16 auth_alg, auth_transaction, status_code;
1091
48c2fc59 1092 if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
05c914fe 1093 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82 1094 return;
f0706e82 1095
f4ea83dd 1096 if (len < 24 + 6)
f0706e82 1097 return;
f0706e82 1098
05c914fe 1099 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1100 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1101 return;
f0706e82 1102
05c914fe 1103 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1104 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
f0706e82 1105 return;
f0706e82
JB		 1106
1107 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1108 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1109 status_code = le16_to_cpu(mgmt->u.auth.status_code);
1110
05c914fe 1111 if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
135a2110
JB		 1112 /*
1113 * IEEE 802.11 standard does not require authentication in IBSS
f0706e82
JB		 1114 * networks and most implementations do not seem to use it.
1115 * However, try to reply to authentication attempts if someone
1116 * has actually implemented this.
135a2110 1117 */
f4ea83dd 1118 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
f0706e82 1119 return;
f698d856 1120 ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
f0706e82
JB		 1121 }
1122
1123 if (auth_alg != ifsta->auth_alg ||
f4ea83dd 1124 auth_transaction != ifsta->auth_transaction)
f0706e82 1125 return;
f0706e82
JB		 1126
1127 if (status_code != WLAN_STATUS_SUCCESS) {
f0706e82
JB		 1128 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1129 u8 algs[3];
1130 const int num_algs = ARRAY_SIZE(algs);
1131 int i, pos;
1132 algs[0] = algs[1] = algs[2] = 0xff;
1133 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1134 algs[0] = WLAN_AUTH_OPEN;
1135 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1136 algs[1] = WLAN_AUTH_SHARED_KEY;
1137 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1138 algs[2] = WLAN_AUTH_LEAP;
1139 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1140 pos = 0;
1141 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1142 pos = 1;
1143 else
1144 pos = 2;
1145 for (i = 0; i < num_algs; i++) {
1146 pos++;
1147 if (pos >= num_algs)
1148 pos = 0;
1149 if (algs[pos] == ifsta->auth_alg ||
1150 algs[pos] == 0xff)
1151 continue;
1152 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
f698d856 1153 !ieee80211_sta_wep_configured(sdata))
f0706e82
JB		 1154 continue;
1155 ifsta->auth_alg = algs[pos];
f0706e82
JB		 1156 break;
1157 }
1158 }
1159 return;
1160 }
1161
1162 switch (ifsta->auth_alg) {
1163 case WLAN_AUTH_OPEN:
1164 case WLAN_AUTH_LEAP:
f698d856 1165 ieee80211_auth_completed(sdata, ifsta);
f0706e82
JB		 1166 break;
1167 case WLAN_AUTH_SHARED_KEY:
1168 if (ifsta->auth_transaction == 4)
f698d856 1169 ieee80211_auth_completed(sdata, ifsta);
f0706e82 1170 else
f698d856 1171 ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
f0706e82
JB		 1172 break;
1173 }
1174}
1175
1176
f698d856 1177static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1178 struct ieee80211_if_sta *ifsta,
1179 struct ieee80211_mgmt *mgmt,
1180 size_t len)
1181{
1182 u16 reason_code;
1183
f4ea83dd 1184 if (len < 24 + 2)
f0706e82 1185 return;
f0706e82 1186
f4ea83dd 1187 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1188 return;
f0706e82
JB		 1189
1190 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1191
988c0f72 1192 if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
97c8b013
ZY		 1193 printk(KERN_DEBUG "%s: deauthenticated (Reason: %u)\n",
1194 sdata->dev->name, reason_code);
f0706e82 1195
48c2fc59
TW		 1196 if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1197 ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1198 ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
9859b81e 1199 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82
JB		 1200 mod_timer(&ifsta->timer, jiffies +
1201 IEEE80211_RETRY_AUTH_INTERVAL);
1202 }
1203
aa458d17 1204 ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
d6f2da5b 1205 ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
f0706e82
JB		 1206}
1207
1208
f698d856 1209static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1210 struct ieee80211_if_sta *ifsta,
1211 struct ieee80211_mgmt *mgmt,
1212 size_t len)
1213{
1214 u16 reason_code;
1215
f4ea83dd 1216 if (len < 24 + 2)
f0706e82 1217 return;
f0706e82 1218
f4ea83dd 1219 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1220 return;
f0706e82
JB		 1221
1222 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1223
d6f2da5b 1224 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
97c8b013
ZY		 1225 printk(KERN_DEBUG "%s: disassociated (Reason: %u)\n",
1226 sdata->dev->name, reason_code);
f0706e82 1227
48c2fc59
TW		 1228 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1229 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
f0706e82
JB		 1230 mod_timer(&ifsta->timer, jiffies +
1231 IEEE80211_RETRY_AUTH_INTERVAL);
1232 }
1233
5925d976 1234 ieee80211_set_disassoc(sdata, ifsta, false, false, reason_code);
f0706e82
JB		 1235}
1236
1237
471b3efd 1238static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1239 struct ieee80211_if_sta *ifsta,
1240 struct ieee80211_mgmt *mgmt,
1241 size_t len,
1242 int reassoc)
1243{
471b3efd 1244 struct ieee80211_local *local = sdata->local;
8318d78a 1245 struct ieee80211_supported_band *sband;
f0706e82 1246 struct sta_info *sta;
8318d78a 1247 u64 rates, basic_rates;
f0706e82
JB		 1248 u16 capab_info, status_code, aid;
1249 struct ieee802_11_elems elems;
bda3933a 1250 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
f0706e82 1251 u8 *pos;
ae5eb026 1252 u32 changed = 0;
f0706e82 1253 int i, j;
ddf4ac53 1254 bool have_higher_than_11mbit = false, newsta = false;
ae5eb026 1255 u16 ap_ht_cap_flags;
f0706e82
JB		 1256
1257 /* AssocResp and ReassocResp have identical structure, so process both
1258 * of them in this function. */
1259
48c2fc59 1260 if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
f0706e82 1261 return;
f0706e82 1262
f4ea83dd 1263 if (len < 24 + 6)
f0706e82 1264 return;
f0706e82 1265
f4ea83dd 1266 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1267 return;
f0706e82
JB		 1268
1269 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1270 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1271 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
f0706e82 1272
0c68ae26 1273 printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x "
f0706e82 1274 "status=%d aid=%d)\n",
0c68ae26 1275 sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa,
ddd68587 1276 capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
f0706e82
JB		 1277
1278 if (status_code != WLAN_STATUS_SUCCESS) {
1279 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
f698d856 1280 sdata->dev->name, status_code);
8a69aa93
DD		 1281 /* if this was a reassociation, ensure we try a "full"
1282 * association next time. This works around some broken APs
1283 * which do not correctly reject reassociation requests. */
d6f2da5b 1284 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
f0706e82
JB		 1285 return;
1286 }
1287
1dd84aa2
JB		 1288 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1289 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
f698d856 1290 "set\n", sdata->dev->name, aid);
1dd84aa2
JB		 1291 aid &= ~(BIT(15) | BIT(14));
1292
f0706e82 1293 pos = mgmt->u.assoc_resp.variable;
67a4cce4 1294 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
f0706e82
JB		 1295
1296 if (!elems.supp_rates) {
1297 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
f698d856 1298 sdata->dev->name);
f0706e82
JB		 1299 return;
1300 }
1301
f698d856 1302 printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
f0706e82
JB		 1303 ifsta->aid = aid;
1304 ifsta->ap_capab = capab_info;
1305
1306 kfree(ifsta->assocresp_ies);
1307 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
0ec0b7ac 1308 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
f0706e82
JB		 1309 if (ifsta->assocresp_ies)
1310 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1311
d0709a65
JB		 1312 rcu_read_lock();
1313
f0706e82
JB		 1314 /* Add STA entry for the AP */
1315 sta = sta_info_get(local, ifsta->bssid);
1316 if (!sta) {
c2b13452 1317 struct ieee80211_bss *bss;
ddf4ac53
JB		 1318
1319 newsta = true;
d0709a65 1320
73651ee6
JB		 1321 sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1322 if (!sta) {
1323 printk(KERN_DEBUG "%s: failed to alloc STA entry for"
f698d856 1324 " the AP\n", sdata->dev->name);
d0709a65 1325 rcu_read_unlock();
f0706e82
JB		 1326 return;
1327 }
60f8b39c
JB		 1328 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1329 local->hw.conf.channel->center_freq,
1330 ifsta->ssid, ifsta->ssid_len);
1331 if (bss) {
1332 sta->last_signal = bss->signal;
1333 sta->last_qual = bss->qual;
1334 sta->last_noise = bss->noise;
1335 ieee80211_rx_bss_put(local, bss);
1336 }
f709fc69 1337
60f8b39c
JB		 1338 /* update new sta with its last rx activity */
1339 sta->last_rx = jiffies;
f709fc69 1340 }
f709fc69 1341
60f8b39c
JB		 1342 /*
1343 * FIXME: Do we really need to update the sta_info's information here?
1344 * We already know about the AP (we found it in our list) so it
1345 * should already be filled with the right info, no?
1346 * As is stands, all this is racy because typically we assume
1347 * the information that is filled in here (except flags) doesn't
1348 * change while a STA structure is alive. As such, it should move
1349 * to between the sta_info_alloc() and sta_info_insert() above.
1350 */
f709fc69 1351
60f8b39c
JB		 1352 set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1353 WLAN_STA_AUTHORIZED);
05e5e883 1354
60f8b39c
JB		 1355 rates = 0;
1356 basic_rates = 0;
1357 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
f709fc69 1358
60f8b39c
JB		 1359 for (i = 0; i < elems.supp_rates_len; i++) {
1360 int rate = (elems.supp_rates[i] & 0x7f) * 5;
d61272cb 1361 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f709fc69 1362
60f8b39c
JB		 1363 if (rate > 110)
1364 have_higher_than_11mbit = true;
1365
1366 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1367 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1368 rates |= BIT(j);
d61272cb
TW		 1369 if (is_basic)
1370 basic_rates |= BIT(j);
1371 break;
1372 }
f709fc69 1373 }
f709fc69
LCC		 1374 }
1375
60f8b39c
JB		 1376 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1377 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
d61272cb 1378 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f0706e82 1379
60f8b39c
JB		 1380 if (rate > 110)
1381 have_higher_than_11mbit = true;
f0706e82 1382
60f8b39c 1383 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1384 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1385 rates |= BIT(j);
d61272cb
TW		 1386 if (is_basic)
1387 basic_rates |= BIT(j);
1388 break;
1389 }
60f8b39c 1390 }
1ebebea8 1391 }
f0706e82 1392
323ce79a 1393 sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
bda3933a 1394 sdata->vif.bss_conf.basic_rates = basic_rates;
60f8b39c
JB		 1395
1396 /* cf. IEEE 802.11 9.2.12 */
1397 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1398 have_higher_than_11mbit)
1399 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1400 else
1401 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
f0706e82 1402
ae5eb026
JB		 1403 if (elems.ht_cap_elem)
1404 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
d9fe60de 1405 elems.ht_cap_elem, &sta->sta.ht_cap);
ae5eb026
JB		 1406
1407 ap_ht_cap_flags = sta->sta.ht_cap.cap;
f0706e82 1408
4b7679a5 1409 rate_control_rate_init(sta);
f0706e82 1410
5394af4d
JM		 1411 if (ifsta->flags & IEEE80211_STA_MFP_ENABLED)
1412 set_sta_flags(sta, WLAN_STA_MFP);
1413
ddf4ac53 1414 if (elems.wmm_param)
60f8b39c 1415 set_sta_flags(sta, WLAN_STA_WME);
ddf4ac53
JB		 1416
1417 if (newsta) {
1418 int err = sta_info_insert(sta);
1419 if (err) {
1420 printk(KERN_DEBUG "%s: failed to insert STA entry for"
1421 " the AP (error %d)\n", sdata->dev->name, err);
1422 rcu_read_unlock();
1423 return;
1424 }
1425 }
1426
1427 rcu_read_unlock();
1428
1429 if (elems.wmm_param)
60f8b39c
JB		 1430 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1431 elems.wmm_param_len);
f0706e82 1432
ae5eb026
JB		 1433 if (elems.ht_info_elem && elems.wmm_param &&
1434 (ifsta->flags & IEEE80211_STA_WMM_ENABLED))
1435 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1436 ap_ht_cap_flags);
1437
60f8b39c
JB		 1438 /* set AID and assoc capability,
1439 * ieee80211_set_associated() will tell the driver */
1440 bss_conf->aid = aid;
1441 bss_conf->assoc_capability = capab_info;
ae5eb026 1442 ieee80211_set_associated(sdata, ifsta, changed);
f0706e82 1443
60f8b39c 1444 ieee80211_associated(sdata, ifsta);
f0706e82
JB		 1445}
1446
1447
f698d856 1448static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
a607268a 1449 struct ieee80211_if_sta *ifsta,
c2b13452 1450 struct ieee80211_bss *bss)
a607268a 1451{
f698d856 1452 struct ieee80211_local *local = sdata->local;
a607268a
BR		 1453 int res, rates, i, j;
1454 struct sk_buff *skb;
1455 struct ieee80211_mgmt *mgmt;
a607268a 1456 u8 *pos;
a607268a 1457 struct ieee80211_supported_band *sband;
507b06d0 1458 union iwreq_data wrqu;
a607268a 1459
e2ef12d3
RR		 1460 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1461 if (!skb) {
1462 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
1463 "response\n", sdata->dev->name);
1464 return -ENOMEM;
1465 }
1466
a607268a
BR		 1467 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1468
1469 /* Remove possible STA entries from other IBSS networks. */
dc6676b7 1470 sta_info_flush_delayed(sdata);
a607268a
BR		 1471
1472 if (local->ops->reset_tsf) {
1473 /* Reset own TSF to allow time synchronization work. */
1474 local->ops->reset_tsf(local_to_hw(local));
1475 }
1476 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
9d139c81 1477 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
a607268a
BR		 1478 if (res)
1479 return res;
1480
1481 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1482
a607268a
BR		 1483 sdata->drop_unencrypted = bss->capability &
1484 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1485
f698d856 1486 res = ieee80211_set_freq(sdata, bss->freq);
a607268a 1487
be038b37
AK		 1488 if (res)
1489 return res;
a607268a 1490
9d139c81 1491 /* Build IBSS probe response */
a607268a 1492
e2ef12d3 1493 skb_reserve(skb, local->hw.extra_tx_headroom);
a607268a 1494
e2ef12d3
RR		 1495 mgmt = (struct ieee80211_mgmt *)
1496 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1497 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1498 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1499 IEEE80211_STYPE_PROBE_RESP);
1500 memset(mgmt->da, 0xff, ETH_ALEN);
1501 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1502 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1503 mgmt->u.beacon.beacon_int =
1504 cpu_to_le16(local->hw.conf.beacon_int);
1505 mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1506 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
a607268a 1507
e2ef12d3
RR		 1508 pos = skb_put(skb, 2 + ifsta->ssid_len);
1509 *pos++ = WLAN_EID_SSID;
1510 *pos++ = ifsta->ssid_len;
1511 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
a607268a 1512
e2ef12d3
RR		 1513 rates = bss->supp_rates_len;
1514 if (rates > 8)
1515 rates = 8;
1516 pos = skb_put(skb, 2 + rates);
1517 *pos++ = WLAN_EID_SUPP_RATES;
1518 *pos++ = rates;
1519 memcpy(pos, bss->supp_rates, rates);
1520
1521 if (bss->band == IEEE80211_BAND_2GHZ) {
1522 pos = skb_put(skb, 2 + 1);
1523 *pos++ = WLAN_EID_DS_PARAMS;
1524 *pos++ = 1;
1525 *pos++ = ieee80211_frequency_to_channel(bss->freq);
1526 }
a607268a 1527
e2ef12d3
RR		 1528 pos = skb_put(skb, 2 + 2);
1529 *pos++ = WLAN_EID_IBSS_PARAMS;
1530 *pos++ = 2;
1531 /* FIX: set ATIM window based on scan results */
1532 *pos++ = 0;
1533 *pos++ = 0;
e039fa4a 1534
e2ef12d3
RR		 1535 if (bss->supp_rates_len > 8) {
1536 rates = bss->supp_rates_len - 8;
1537 pos = skb_put(skb, 2 + rates);
1538 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1539 *pos++ = rates;
1540 memcpy(pos, &bss->supp_rates[8], rates);
9d139c81 1541 }
a607268a 1542
e2ef12d3
RR		 1543 ifsta->probe_resp = skb;
1544
1545 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1546
1547
9d139c81
JB		 1548 rates = 0;
1549 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1550 for (i = 0; i < bss->supp_rates_len; i++) {
1551 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1552 for (j = 0; j < sband->n_bitrates; j++)
1553 if (sband->bitrates[j].bitrate == bitrate)
1554 rates |= BIT(j);
a607268a 1555 }
9d139c81
JB		 1556 ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1557
b079ada7 1558 ieee80211_sta_def_wmm_params(sdata, bss);
a607268a 1559
48c2fc59 1560 ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
a607268a
BR		 1561 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1562
4492bea6
EG		 1563 ieee80211_led_assoc(local, true);
1564
507b06d0
DW		 1565 memset(&wrqu, 0, sizeof(wrqu));
1566 memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
f698d856 1567 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
a607268a
BR		 1568
1569 return res;
1570}
1571
98c8fccf
JB		 1572static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1573 struct ieee80211_mgmt *mgmt,
1574 size_t len,
1575 struct ieee80211_rx_status *rx_status,
1576 struct ieee802_11_elems *elems,
1577 bool beacon)
1578{
1579 struct ieee80211_local *local = sdata->local;
1580 int freq;
c2b13452 1581 struct ieee80211_bss *bss;
98c8fccf
JB		 1582 struct sta_info *sta;
1583 struct ieee80211_channel *channel;
1584 u64 beacon_timestamp, rx_timestamp;
1585 u64 supp_rates = 0;
1586 enum ieee80211_band band = rx_status->band;
98c8fccf
JB		 1587
1588 if (elems->ds_params && elems->ds_params_len == 1)
1589 freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1590 else
1591 freq = rx_status->freq;
1592
1593 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1594
1595 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1596 return;
1597
05c914fe 1598 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && elems->supp_rates &&
98c8fccf
JB		 1599 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1600 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1601
1602 rcu_read_lock();
1603
1604 sta = sta_info_get(local, mgmt->sa);
1605 if (sta) {
1606 u64 prev_rates;
1607
323ce79a 1608 prev_rates = sta->sta.supp_rates[band];
98c8fccf 1609 /* make sure mandatory rates are always added */
323ce79a 1610 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 1611 ieee80211_mandatory_rates(local, band);
98c8fccf
JB		 1612
1613#ifdef CONFIG_MAC80211_IBSS_DEBUG
323ce79a 1614 if (sta->sta.supp_rates[band] != prev_rates)
98c8fccf 1615 printk(KERN_DEBUG "%s: updated supp_rates set "
0c68ae26 1616 "for %pM based on beacon info (0x%llx | "
98c8fccf 1617 "0x%llx -> 0x%llx)\n",
17741cdc 1618 sdata->dev->name,
0c68ae26 1619 sta->sta.addr,
98c8fccf
JB		 1620 (unsigned long long) prev_rates,
1621 (unsigned long long) supp_rates,
323ce79a 1622 (unsigned long long) sta->sta.supp_rates[band]);
98c8fccf
JB		 1623#endif
1624 } else {
ab1f5c0b 1625 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
98c8fccf
JB		 1626 }
1627
1628 rcu_read_unlock();
1629 }
1630
1631 bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1632 freq, beacon);
1633 if (!bss)
1634 return;
1635
c481ec97
S		 1636 if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) &&
1637 (memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0)) {
1638 struct ieee80211_channel_sw_ie *sw_elem =
1639 (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem;
1640 ieee80211_process_chanswitch(sdata, sw_elem, bss);
1641 }
1642
98c8fccf
JB		 1643 /* was just updated in ieee80211_bss_info_update */
1644 beacon_timestamp = bss->timestamp;
1645
30b89b0f
JB		 1646 /*
1647 * In STA mode, the remaining parameters should not be overridden
1648 * by beacons because they're not necessarily accurate there.
1649 */
05c914fe 1650 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
9859b81e 1651 bss->last_probe_resp && beacon) {
3e122be0 1652 ieee80211_rx_bss_put(local, bss);
30b89b0f
JB		 1653 return;
1654 }
1655
9d9bf77d 1656 /* check if we need to merge IBSS */
05c914fe 1657 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && beacon &&
65f0e6a3 1658 (!(sdata->u.sta.flags & IEEE80211_STA_BSSID_SET)) &&
fba4a1e6 1659 bss->capability & WLAN_CAPABILITY_IBSS &&
9d9bf77d 1660 bss->freq == local->oper_channel->center_freq &&
ae6a44e3
EK		 1661 elems->ssid_len == sdata->u.sta.ssid_len &&
1662 memcmp(elems->ssid, sdata->u.sta.ssid,
1663 sdata->u.sta.ssid_len) == 0) {
9d9bf77d
BR		 1664 if (rx_status->flag & RX_FLAG_TSFT) {
1665 /* in order for correct IBSS merging we need mactime
1666 *
1667 * since mactime is defined as the time the first data
1668 * symbol of the frame hits the PHY, and the timestamp
1669 * of the beacon is defined as "the time that the data
1670 * symbol containing the first bit of the timestamp is
1671 * transmitted to the PHY plus the transmitting STA’s
1672 * delays through its local PHY from the MAC-PHY
1673 * interface to its interface with the WM"
1674 * (802.11 11.1.2) - equals the time this bit arrives at
1675 * the receiver - we have to take into account the
1676 * offset between the two.
1677 * e.g: at 1 MBit that means mactime is 192 usec earlier
1678 * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
1679 */
0fb8ca45
JM		 1680 int rate;
1681 if (rx_status->flag & RX_FLAG_HT) {
1682 rate = 65; /* TODO: HT rates */
1683 } else {
1684 rate = local->hw.wiphy->bands[band]->
9d9bf77d 1685 bitrates[rx_status->rate_idx].bitrate;
0fb8ca45 1686 }
9d9bf77d
BR		 1687 rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
1688 } else if (local && local->ops && local->ops->get_tsf)
1689 /* second best option: get current TSF */
1690 rx_timestamp = local->ops->get_tsf(local_to_hw(local));
1691 else
1692 /* can't merge without knowing the TSF */
1693 rx_timestamp = -1LLU;
1694#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1695 printk(KERN_DEBUG "RX beacon SA=%pM BSSID="
1696 "%pM TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
1697 mgmt->sa, mgmt->bssid,
9d9bf77d
BR		 1698 (unsigned long long)rx_timestamp,
1699 (unsigned long long)beacon_timestamp,
1700 (unsigned long long)(rx_timestamp - beacon_timestamp),
1701 jiffies);
1702#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1703 if (beacon_timestamp > rx_timestamp) {
576fdeae 1704#ifdef CONFIG_MAC80211_IBSS_DEBUG
f4ea83dd 1705 printk(KERN_DEBUG "%s: beacon TSF higher than "
0c68ae26
JB		 1706 "local TSF - IBSS merge with BSSID %pM\n",
1707 sdata->dev->name, mgmt->bssid);
fba4a1e6 1708#endif
f698d856 1709 ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
ab1f5c0b 1710 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
9d9bf77d
BR		 1711 }
1712 }
1713
3e122be0 1714 ieee80211_rx_bss_put(local, bss);
f0706e82
JB		 1715}
1716
1717
f698d856 1718static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1719 struct ieee80211_mgmt *mgmt,
1720 size_t len,
1721 struct ieee80211_rx_status *rx_status)
1722{
ae6a44e3
EK		 1723 size_t baselen;
1724 struct ieee802_11_elems elems;
9859b81e 1725 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ae6a44e3 1726
8e7cdbb6
TW		 1727 if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
1728 return; /* ignore ProbeResp to foreign address */
1729
ae6a44e3
EK		 1730 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1731 if (baselen > len)
1732 return;
1733
1734 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1735 &elems);
1736
98c8fccf 1737 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
9859b81e
RR		 1738
1739 /* direct probe may be part of the association flow */
1740 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
1741 &ifsta->request)) {
1742 printk(KERN_DEBUG "%s direct probe responded\n",
1743 sdata->dev->name);
1744 ieee80211_authenticate(sdata, ifsta);
1745 }
f0706e82
JB		 1746}
1747
1748
f698d856 1749static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1750 struct ieee80211_mgmt *mgmt,
1751 size_t len,
1752 struct ieee80211_rx_status *rx_status)
1753{
f0706e82 1754 struct ieee80211_if_sta *ifsta;
f0706e82
JB		 1755 size_t baselen;
1756 struct ieee802_11_elems elems;
f698d856 1757 struct ieee80211_local *local = sdata->local;
471b3efd 1758 u32 changed = 0;
a97b77b9 1759 bool erp_valid, directed_tim, is_mc = false;
7a5158ef 1760 u8 erp_value = 0;
f0706e82 1761
ae6a44e3
EK		 1762 /* Process beacon from the current BSS */
1763 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1764 if (baselen > len)
1765 return;
1766
1767 ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
1768
98c8fccf 1769 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
f0706e82 1770
05c914fe 1771 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB		 1772 return;
1773 ifsta = &sdata->u.sta;
1774
d6f2da5b 1775 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
f0706e82
JB		 1776 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1777 return;
1778
c481ec97
S		 1779 if (rx_status->freq != local->hw.conf.channel->center_freq)
1780 return;
1781
fe3fa827
JB		 1782 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1783 elems.wmm_param_len);
1784
4be8c387
JB		 1785 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK &&
1786 local->hw.conf.flags & IEEE80211_CONF_PS) {
a97b77b9
VN		 1787 directed_tim = check_tim(&elems, ifsta->aid, &is_mc);
1788
1789 if (directed_tim || is_mc) {
4be8c387
JB		 1790 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
1791 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
1792 ieee80211_send_nullfunc(local, sdata, 0);
a97b77b9
VN		 1793 }
1794 }
7a5158ef
JB		 1795
1796 if (elems.erp_info && elems.erp_info_len >= 1) {
1797 erp_valid = true;
1798 erp_value = elems.erp_info[0];
1799 } else {
1800 erp_valid = false;
50c4afb9 1801 }
7a5158ef
JB		 1802 changed |= ieee80211_handle_bss_capability(sdata,
1803 le16_to_cpu(mgmt->u.beacon.capab_info),
1804 erp_valid, erp_value);
f0706e82 1805
d3c990fb 1806
ae5eb026
JB		 1807 if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param) {
1808 struct sta_info *sta;
1809 struct ieee80211_supported_band *sband;
1810 u16 ap_ht_cap_flags;
1811
1812 rcu_read_lock();
1813
1814 sta = sta_info_get(local, ifsta->bssid);
1815 if (!sta) {
1816 rcu_read_unlock();
1817 return;
1818 }
1819
1820 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1821
1822 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
1823 elems.ht_cap_elem, &sta->sta.ht_cap);
1824
1825 ap_ht_cap_flags = sta->sta.ht_cap.cap;
1826
1827 rcu_read_unlock();
1828
1829 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1830 ap_ht_cap_flags);
d3c990fb
RR		 1831 }
1832
3f2355cb
LR		 1833 if (elems.country_elem) {
1834 /* Note we are only reviewing this on beacons
1835 * for the BSSID we are associated to */
1836 regulatory_hint_11d(local->hw.wiphy,
1837 elems.country_elem, elems.country_elem_len);
1838 }
1839
471b3efd 1840 ieee80211_bss_info_change_notify(sdata, changed);
f0706e82
JB		 1841}
1842
1843
f698d856 1844static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1845 struct ieee80211_if_sta *ifsta,
1846 struct ieee80211_mgmt *mgmt,
504a71e4 1847 size_t len)
f0706e82 1848{
f698d856 1849 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1850 int tx_last_beacon;
1851 struct sk_buff *skb;
1852 struct ieee80211_mgmt *resp;
1853 u8 *pos, *end;
1854
05c914fe 1855 if (sdata->vif.type != NL80211_IFTYPE_ADHOC ||
48c2fc59 1856 ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
f0706e82
JB		 1857 len < 24 + 2 || !ifsta->probe_resp)
1858 return;
1859
1860 if (local->ops->tx_last_beacon)
1861 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
1862 else
1863 tx_last_beacon = 1;
1864
1865#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1866 printk(KERN_DEBUG "%s: RX ProbeReq SA=%pM DA=%pM BSSID=%pM"
1867 " (tx_last_beacon=%d)\n",
1868 sdata->dev->name, mgmt->sa, mgmt->da,
1869 mgmt->bssid, tx_last_beacon);
f0706e82
JB		 1870#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1871
1872 if (!tx_last_beacon)
1873 return;
1874
1875 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
1876 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
1877 return;
1878
1879 end = ((u8 *) mgmt) + len;
1880 pos = mgmt->u.probe_req.variable;
1881 if (pos[0] != WLAN_EID_SSID ||
1882 pos + 2 + pos[1] > end) {
f4ea83dd
JB		 1883#ifdef CONFIG_MAC80211_IBSS_DEBUG
1884 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
0c68ae26
JB		 1885 "from %pM\n",
1886 sdata->dev->name, mgmt->sa);
f4ea83dd 1887#endif
f0706e82
JB		 1888 return;
1889 }
1890 if (pos[1] != 0 &&
1891 (pos[1] != ifsta->ssid_len ||
1892 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
1893 /* Ignore ProbeReq for foreign SSID */
1894 return;
1895 }
1896
1897 /* Reply with ProbeResp */
0ec0b7ac 1898 skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
f0706e82
JB		 1899 if (!skb)
1900 return;
1901
1902 resp = (struct ieee80211_mgmt *) skb->data;
1903 memcpy(resp->da, mgmt->sa, ETH_ALEN);
1904#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1905 printk(KERN_DEBUG "%s: Sending ProbeResp to %pM\n",
1906 sdata->dev->name, resp->da);
f0706e82 1907#endif /* CONFIG_MAC80211_IBSS_DEBUG */
e50db65c 1908 ieee80211_tx_skb(sdata, skb, 0);
f0706e82
JB		 1909}
1910
f698d856 1911void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
f0706e82
JB		 1912 struct ieee80211_rx_status *rx_status)
1913{
f698d856 1914 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1915 struct ieee80211_if_sta *ifsta;
1916 struct ieee80211_mgmt *mgmt;
1917 u16 fc;
1918
1919 if (skb->len < 24)
1920 goto fail;
1921
f0706e82
JB		 1922 ifsta = &sdata->u.sta;
1923
1924 mgmt = (struct ieee80211_mgmt *) skb->data;
1925 fc = le16_to_cpu(mgmt->frame_control);
1926
1927 switch (fc & IEEE80211_FCTL_STYPE) {
1928 case IEEE80211_STYPE_PROBE_REQ:
1929 case IEEE80211_STYPE_PROBE_RESP:
1930 case IEEE80211_STYPE_BEACON:
1931 memcpy(skb->cb, rx_status, sizeof(*rx_status));
1932 case IEEE80211_STYPE_AUTH:
1933 case IEEE80211_STYPE_ASSOC_RESP:
1934 case IEEE80211_STYPE_REASSOC_RESP:
1935 case IEEE80211_STYPE_DEAUTH:
1936 case IEEE80211_STYPE_DISASSOC:
1937 skb_queue_tail(&ifsta->skb_queue, skb);
1938 queue_work(local->hw.workqueue, &ifsta->work);
1939 return;
f0706e82
JB		 1940 }
1941
1942 fail:
1943 kfree_skb(skb);
1944}
1945
f698d856 1946static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1947 struct sk_buff *skb)
1948{
1949 struct ieee80211_rx_status *rx_status;
f0706e82
JB		 1950 struct ieee80211_if_sta *ifsta;
1951 struct ieee80211_mgmt *mgmt;
1952 u16 fc;
1953
f0706e82
JB		 1954 ifsta = &sdata->u.sta;
1955
1956 rx_status = (struct ieee80211_rx_status *) skb->cb;
1957 mgmt = (struct ieee80211_mgmt *) skb->data;
1958 fc = le16_to_cpu(mgmt->frame_control);
1959
1960 switch (fc & IEEE80211_FCTL_STYPE) {
1961 case IEEE80211_STYPE_PROBE_REQ:
504a71e4 1962 ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1963 break;
1964 case IEEE80211_STYPE_PROBE_RESP:
f698d856 1965 ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
f0706e82
JB		 1966 break;
1967 case IEEE80211_STYPE_BEACON:
f698d856 1968 ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
f0706e82
JB		 1969 break;
1970 case IEEE80211_STYPE_AUTH:
f698d856 1971 ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1972 break;
1973 case IEEE80211_STYPE_ASSOC_RESP:
471b3efd 1974 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
f0706e82
JB		 1975 break;
1976 case IEEE80211_STYPE_REASSOC_RESP:
471b3efd 1977 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
f0706e82
JB		 1978 break;
1979 case IEEE80211_STYPE_DEAUTH:
f698d856 1980 ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1981 break;
1982 case IEEE80211_STYPE_DISASSOC:
f698d856 1983 ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1984 break;
1985 }
1986
1987 kfree_skb(skb);
1988}
1989
1990
f698d856 1991static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
f0706e82 1992{
f698d856 1993 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1994 int active = 0;
1995 struct sta_info *sta;
1996
d0709a65
JB		 1997 rcu_read_lock();
1998
1999 list_for_each_entry_rcu(sta, &local->sta_list, list) {
2000 if (sta->sdata == sdata &&
f0706e82
JB		 2001 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
2002 jiffies)) {
2003 active++;
2004 break;
2005 }
2006 }
d0709a65
JB		 2007
2008 rcu_read_unlock();
f0706e82
JB		 2009
2010 return active;
2011}
2012
2013
f698d856 2014static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2015 struct ieee80211_if_sta *ifsta)
2016{
2017 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2018
f698d856
JBG		 2019 ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
2020 if (ieee80211_sta_active_ibss(sdata))
f0706e82
JB		 2021 return;
2022
137f9f46
AF		 2023 if ((sdata->u.sta.flags & IEEE80211_STA_BSSID_SET) &&
2024 (!(sdata->u.sta.flags & IEEE80211_STA_AUTO_CHANNEL_SEL)))
2025 return;
2026
f0706e82 2027 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
f698d856 2028 "IBSS networks with same SSID (merge)\n", sdata->dev->name);
c2b13452 2029 ieee80211_request_scan(sdata, ifsta->ssid, ifsta->ssid_len);
f0706e82
JB		 2030}
2031
2032
9c6bd790 2033static void ieee80211_sta_timer(unsigned long data)
f0706e82 2034{
60f8b39c
JB		 2035 struct ieee80211_sub_if_data *sdata =
2036 (struct ieee80211_sub_if_data *) data;
2037 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2038 struct ieee80211_local *local = sdata->local;
f0706e82 2039
60f8b39c
JB		 2040 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2041 queue_work(local->hw.workqueue, &ifsta->work);
f0706e82
JB		 2042}
2043
f698d856 2044static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2045 struct ieee80211_if_sta *ifsta)
2046{
f698d856 2047 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 2048
2049 if (local->ops->reset_tsf) {
2050 /* Reset own TSF to allow time synchronization work. */
2051 local->ops->reset_tsf(local_to_hw(local));
2052 }
2053
2054 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2055
2056
2057 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2058 ifsta->auth_alg = WLAN_AUTH_OPEN;
2059 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2060 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2061 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2062 ifsta->auth_alg = WLAN_AUTH_LEAP;
2063 else
2064 ifsta->auth_alg = WLAN_AUTH_OPEN;
f0706e82 2065 ifsta->auth_transaction = -1;
d6f2da5b 2066 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
6042a3e3 2067 ifsta->assoc_scan_tries = 0;
9859b81e 2068 ifsta->direct_probe_tries = 0;
6042a3e3
RR		 2069 ifsta->auth_tries = 0;
2070 ifsta->assoc_tries = 0;
24e64622 2071 netif_tx_stop_all_queues(sdata->dev);
f698d856 2072 netif_carrier_off(sdata->dev);
f0706e82
JB		 2073}
2074
2075
f0706e82
JB		 2076static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2077 const char *ssid, int ssid_len)
2078{
2079 int tmp, hidden_ssid;
2080
48225709
MW		 2081 if (ssid_len == ifsta->ssid_len &&
2082 !memcmp(ifsta->ssid, ssid, ssid_len))
f0706e82
JB		 2083 return 1;
2084
d6f2da5b 2085 if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
f0706e82
JB		 2086 return 0;
2087
2088 hidden_ssid = 1;
2089 tmp = ssid_len;
2090 while (tmp--) {
2091 if (ssid[tmp] != '\0') {
2092 hidden_ssid = 0;
2093 break;
2094 }
2095 }
2096
cb3da8cc 2097 if (hidden_ssid && (ifsta->ssid_len == ssid_len || ssid_len == 0))
f0706e82
JB		 2098 return 1;
2099
2100 if (ssid_len == 1 && ssid[0] == ' ')
2101 return 1;
2102
2103 return 0;
2104}
2105
f698d856 2106static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2107 struct ieee80211_if_sta *ifsta)
2108{
f698d856 2109 struct ieee80211_local *local = sdata->local;
c2b13452 2110 struct ieee80211_bss *bss;
8318d78a 2111 struct ieee80211_supported_band *sband;
f0706e82
JB		 2112 u8 bssid[ETH_ALEN], *pos;
2113 int i;
167ad6f7 2114 int ret;
f0706e82
JB		 2115
2116#if 0
2117 /* Easier testing, use fixed BSSID. */
2118 memset(bssid, 0xfe, ETH_ALEN);
2119#else
2120 /* Generate random, not broadcast, locally administered BSSID. Mix in
2121 * own MAC address to make sure that devices that do not have proper
2122 * random number generator get different BSSID. */
2123 get_random_bytes(bssid, ETH_ALEN);
2124 for (i = 0; i < ETH_ALEN; i++)
f698d856 2125 bssid[i] ^= sdata->dev->dev_addr[i];
f0706e82
JB		 2126 bssid[0] &= ~0x01;
2127 bssid[0] |= 0x02;
2128#endif
2129
0c68ae26
JB		 2130 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %pM\n",
2131 sdata->dev->name, bssid);
f0706e82 2132
98c8fccf 2133 bss = ieee80211_rx_bss_add(local, bssid,
8318d78a 2134 local->hw.conf.channel->center_freq,
cffdd30d 2135 sdata->u.sta.ssid, sdata->u.sta.ssid_len);
f0706e82
JB		 2136 if (!bss)
2137 return -ENOMEM;
2138
8318d78a
JB		 2139 bss->band = local->hw.conf.channel->band;
2140 sband = local->hw.wiphy->bands[bss->band];
f0706e82
JB		 2141
2142 if (local->hw.conf.beacon_int == 0)
dc0ae30c 2143 local->hw.conf.beacon_int = 100;
f0706e82 2144 bss->beacon_int = local->hw.conf.beacon_int;
f0706e82
JB		 2145 bss->last_update = jiffies;
2146 bss->capability = WLAN_CAPABILITY_IBSS;
988c0f72
JB		 2147
2148 if (sdata->default_key)
f0706e82 2149 bss->capability |= WLAN_CAPABILITY_PRIVACY;
988c0f72 2150 else
f0706e82 2151 sdata->drop_unencrypted = 0;
988c0f72 2152
8318d78a 2153 bss->supp_rates_len = sband->n_bitrates;
f0706e82 2154 pos = bss->supp_rates;
8318d78a
JB		 2155 for (i = 0; i < sband->n_bitrates; i++) {
2156 int rate = sband->bitrates[i].bitrate;
f0706e82
JB		 2157 *pos++ = (u8) (rate / 5);
2158 }
2159
f698d856 2160 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2161 ieee80211_rx_bss_put(local, bss);
167ad6f7 2162 return ret;
f0706e82
JB		 2163}
2164
2165
f698d856 2166static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2167 struct ieee80211_if_sta *ifsta)
2168{
f698d856 2169 struct ieee80211_local *local = sdata->local;
c2b13452 2170 struct ieee80211_bss *bss;
f0706e82
JB		 2171 int found = 0;
2172 u8 bssid[ETH_ALEN];
2173 int active_ibss;
2174
2175 if (ifsta->ssid_len == 0)
2176 return -EINVAL;
2177
f698d856 2178 active_ibss = ieee80211_sta_active_ibss(sdata);
f0706e82
JB		 2179#ifdef CONFIG_MAC80211_IBSS_DEBUG
2180 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
f698d856 2181 sdata->dev->name, active_ibss);
f0706e82 2182#endif /* CONFIG_MAC80211_IBSS_DEBUG */
c2b13452
JB		 2183 spin_lock_bh(&local->bss_lock);
2184 list_for_each_entry(bss, &local->bss_list, list) {
f0706e82
JB		 2185 if (ifsta->ssid_len != bss->ssid_len ||
2186 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2187 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2188 continue;
2189#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26 2190 printk(KERN_DEBUG " bssid=%pM found\n", bss->bssid);
f0706e82
JB		 2191#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2192 memcpy(bssid, bss->bssid, ETH_ALEN);
2193 found = 1;
2194 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2195 break;
2196 }
c2b13452 2197 spin_unlock_bh(&local->bss_lock);
f0706e82
JB		 2198
2199#ifdef CONFIG_MAC80211_IBSS_DEBUG
6e43829b 2200 if (found)
0c68ae26
JB		 2201 printk(KERN_DEBUG " sta_find_ibss: selected %pM current "
2202 "%pM\n", bssid, ifsta->bssid);
f0706e82 2203#endif /* CONFIG_MAC80211_IBSS_DEBUG */
80693ceb
DD		 2204
2205 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
167ad6f7 2206 int ret;
80693ceb
DD		 2207 int search_freq;
2208
2209 if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2210 search_freq = bss->freq;
2211 else
2212 search_freq = local->hw.conf.channel->center_freq;
2213
f698d856 2214 bss = ieee80211_rx_bss_get(local, bssid, search_freq,
80693ceb
DD		 2215 ifsta->ssid, ifsta->ssid_len);
2216 if (!bss)
2217 goto dont_join;
2218
0c68ae26 2219 printk(KERN_DEBUG "%s: Selected IBSS BSSID %pM"
f0706e82 2220 " based on configured SSID\n",
0c68ae26 2221 sdata->dev->name, bssid);
f698d856 2222 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2223 ieee80211_rx_bss_put(local, bss);
167ad6f7 2224 return ret;
f0706e82 2225 }
80693ceb
DD		 2226
2227dont_join:
f0706e82
JB		 2228#ifdef CONFIG_MAC80211_IBSS_DEBUG
2229 printk(KERN_DEBUG " did not try to join ibss\n");
2230#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2231
2232 /* Selected IBSS not found in current scan results - try to scan */
48c2fc59 2233 if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
f698d856 2234 !ieee80211_sta_active_ibss(sdata)) {
f0706e82
JB		 2235 mod_timer(&ifsta->timer, jiffies +
2236 IEEE80211_IBSS_MERGE_INTERVAL);
2237 } else if (time_after(jiffies, local->last_scan_completed +
2238 IEEE80211_SCAN_INTERVAL)) {
2239 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
f698d856 2240 "join\n", sdata->dev->name);
c2b13452 2241 return ieee80211_request_scan(sdata, ifsta->ssid,
f0706e82 2242 ifsta->ssid_len);
48c2fc59 2243 } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
f0706e82
JB		 2244 int interval = IEEE80211_SCAN_INTERVAL;
2245
2246 if (time_after(jiffies, ifsta->ibss_join_req +
2247 IEEE80211_IBSS_JOIN_TIMEOUT)) {
d6f2da5b 2248 if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
8318d78a
JB		 2249 (!(local->oper_channel->flags &
2250 IEEE80211_CHAN_NO_IBSS)))
f698d856 2251 return ieee80211_sta_create_ibss(sdata, ifsta);
d6f2da5b 2252 if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
8318d78a 2253 printk(KERN_DEBUG "%s: IBSS not allowed on"
f698d856 2254 " %d MHz\n", sdata->dev->name,
8318d78a 2255 local->hw.conf.channel->center_freq);
f0706e82
JB		 2256 }
2257
2258 /* No IBSS found - decrease scan interval and continue
2259 * scanning. */
2260 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2261 }
2262
48c2fc59 2263 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
f0706e82
JB		 2264 mod_timer(&ifsta->timer, jiffies + interval);
2265 return 0;
2266 }
2267
2268 return 0;
2269}
2270
2271
9c6bd790
JB		 2272static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2273 struct ieee80211_if_sta *ifsta)
f0706e82 2274{
9c6bd790 2275 struct ieee80211_local *local = sdata->local;
c2b13452 2276 struct ieee80211_bss *bss, *selected = NULL;
9c6bd790 2277 int top_rssi = 0, freq;
f0706e82 2278
c2b13452 2279 spin_lock_bh(&local->bss_lock);
9c6bd790 2280 freq = local->oper_channel->center_freq;
c2b13452 2281 list_for_each_entry(bss, &local->bss_list, list) {
9c6bd790
JB		 2282 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2283 continue;
f0706e82 2284
9c6bd790
JB		 2285 if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2286 IEEE80211_STA_AUTO_BSSID_SEL |
2287 IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2288 (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2289 !!sdata->default_key))
2290 continue;
f0706e82 2291
9c6bd790
JB		 2292 if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2293 bss->freq != freq)
2294 continue;
9d139c81 2295
9c6bd790
JB		 2296 if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2297 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2298 continue;
f0706e82 2299
9c6bd790
JB		 2300 if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2301 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2302 continue;
9d139c81 2303
9c6bd790
JB		 2304 if (!selected || top_rssi < bss->signal) {
2305 selected = bss;
2306 top_rssi = bss->signal;
2307 }
f0706e82 2308 }
9c6bd790
JB		 2309 if (selected)
2310 atomic_inc(&selected->users);
c2b13452 2311 spin_unlock_bh(&local->bss_lock);
9d139c81 2312
9c6bd790
JB		 2313 if (selected) {
2314 ieee80211_set_freq(sdata, selected->freq);
2315 if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2316 ieee80211_sta_set_ssid(sdata, selected->ssid,
2317 selected->ssid_len);
2318 ieee80211_sta_set_bssid(sdata, selected->bssid);
2319 ieee80211_sta_def_wmm_params(sdata, selected);
fdfacf0a
JM		 2320 if (sdata->u.sta.mfp == IEEE80211_MFP_REQUIRED)
2321 sdata->u.sta.flags |= IEEE80211_STA_MFP_ENABLED;
2322 else
2323 sdata->u.sta.flags &= ~IEEE80211_STA_MFP_ENABLED;
f0706e82 2324
9c6bd790
JB		 2325 /* Send out direct probe if no probe resp was received or
2326 * the one we have is outdated
2327 */
2328 if (!selected->last_probe_resp ||
2329 time_after(jiffies, selected->last_probe_resp
2330 + IEEE80211_SCAN_RESULT_EXPIRE))
2331 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2332 else
2333 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
f0706e82 2334
9c6bd790
JB		 2335 ieee80211_rx_bss_put(local, selected);
2336 ieee80211_sta_reset_auth(sdata, ifsta);
2337 return 0;
2338 } else {
2339 if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2340 ifsta->assoc_scan_tries++;
2341 if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
c2b13452 2342 ieee80211_start_scan(sdata, NULL, 0);
9c6bd790 2343 else
c2b13452 2344 ieee80211_start_scan(sdata, ifsta->ssid,
9c6bd790
JB		 2345 ifsta->ssid_len);
2346 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2347 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2348 } else
2349 ifsta->state = IEEE80211_STA_MLME_DISABLED;
2350 }
2351 return -1;
2352}
2353
2354
2355static void ieee80211_sta_work(struct work_struct *work)
2356{
2357 struct ieee80211_sub_if_data *sdata =
2358 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
2359 struct ieee80211_local *local = sdata->local;
2360 struct ieee80211_if_sta *ifsta;
2361 struct sk_buff *skb;
2362
2363 if (!netif_running(sdata->dev))
2364 return;
2365
c2b13452 2366 if (local->sw_scanning || local->hw_scanning)
9c6bd790
JB		 2367 return;
2368
05c914fe
JB		 2369 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION &&
2370 sdata->vif.type != NL80211_IFTYPE_ADHOC))
9c6bd790 2371 return;
f0706e82
JB		 2372 ifsta = &sdata->u.sta;
2373
9c6bd790
JB		 2374 while ((skb = skb_dequeue(&ifsta->skb_queue)))
2375 ieee80211_sta_rx_queued_mgmt(sdata, skb);
2376
2377 if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
2378 ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
2379 ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
2380 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
c2b13452
JB		 2381 ieee80211_start_scan(sdata, ifsta->scan_ssid,
2382 ifsta->scan_ssid_len);
9c6bd790 2383 return;
f0706e82
JB		 2384 }
2385
9c6bd790
JB		 2386 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
2387 if (ieee80211_sta_config_auth(sdata, ifsta))
2388 return;
2389 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2390 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
2391 return;
d6f2da5b 2392
9c6bd790
JB		 2393 switch (ifsta->state) {
2394 case IEEE80211_STA_MLME_DISABLED:
2395 break;
2396 case IEEE80211_STA_MLME_DIRECT_PROBE:
2397 ieee80211_direct_probe(sdata, ifsta);
2398 break;
2399 case IEEE80211_STA_MLME_AUTHENTICATE:
2400 ieee80211_authenticate(sdata, ifsta);
2401 break;
2402 case IEEE80211_STA_MLME_ASSOCIATE:
2403 ieee80211_associate(sdata, ifsta);
2404 break;
2405 case IEEE80211_STA_MLME_ASSOCIATED:
2406 ieee80211_associated(sdata, ifsta);
2407 break;
2408 case IEEE80211_STA_MLME_IBSS_SEARCH:
2409 ieee80211_sta_find_ibss(sdata, ifsta);
2410 break;
2411 case IEEE80211_STA_MLME_IBSS_JOINED:
2412 ieee80211_sta_merge_ibss(sdata, ifsta);
2413 break;
2414 default:
2415 WARN_ON(1);
2416 break;
2417 }
2418
2419 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
2420 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
2421 "mixed-cell disabled - disassociate\n", sdata->dev->name);
2422
2423 ieee80211_set_disassoc(sdata, ifsta, false, true,
2424 WLAN_REASON_UNSPECIFIED);
2425 }
f0706e82
JB		 2426}
2427
9c6bd790
JB		 2428static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)
2429{
05c914fe 2430 if (sdata->vif.type == NL80211_IFTYPE_STATION)
9c6bd790
JB		 2431 queue_work(sdata->local->hw.workqueue,
2432 &sdata->u.sta.work);
2433}
f0706e82 2434
9c6bd790
JB		 2435/* interface setup */
2436void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82 2437{
9c6bd790 2438 struct ieee80211_if_sta *ifsta;
988c0f72 2439
9c6bd790
JB		 2440 ifsta = &sdata->u.sta;
2441 INIT_WORK(&ifsta->work, ieee80211_sta_work);
c481ec97 2442 INIT_WORK(&ifsta->chswitch_work, ieee80211_chswitch_work);
9c6bd790 2443 setup_timer(&ifsta->timer, ieee80211_sta_timer,
c481ec97
S		 2444 (unsigned long) sdata);
2445 setup_timer(&ifsta->chswitch_timer, ieee80211_chswitch_timer,
9c6bd790
JB		 2446 (unsigned long) sdata);
2447 skb_queue_head_init(&ifsta->skb_queue);
2448
2449 ifsta->capab = WLAN_CAPABILITY_ESS;
2450 ifsta->auth_algs = IEEE80211_AUTH_ALG_OPEN |
2451 IEEE80211_AUTH_ALG_SHARED_KEY;
2452 ifsta->flags |= IEEE80211_STA_CREATE_IBSS |
2453 IEEE80211_STA_AUTO_BSSID_SEL |
2454 IEEE80211_STA_AUTO_CHANNEL_SEL;
2455 if (ieee80211_num_regular_queues(&sdata->local->hw) >= 4)
2456 ifsta->flags |= IEEE80211_STA_WMM_ENABLED;
f0706e82
JB		 2457}
2458
9c6bd790
JB		 2459/*
2460 * Add a new IBSS station, will also be called by the RX code when,
2461 * in IBSS mode, receiving a frame from a yet-unknown station, hence
2462 * must be callable in atomic context.
2463 */
f698d856 2464struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
ab1f5c0b 2465 u8 *bssid,u8 *addr, u64 supp_rates)
f0706e82 2466{
f698d856 2467 struct ieee80211_local *local = sdata->local;
f0706e82 2468 struct sta_info *sta;
87291c02 2469 int band = local->hw.conf.channel->band;
f0706e82
JB		 2470
2471 /* TODO: Could consider removing the least recently used entry and
2472 * allow new one to be added. */
2473 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2474 if (net_ratelimit()) {
2475 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
0c68ae26 2476 "entry %pM\n", sdata->dev->name, addr);
f0706e82
JB		 2477 }
2478 return NULL;
2479 }
2480
1e188637 2481 if (compare_ether_addr(bssid, sdata->u.sta.bssid))
87291c02
VK		 2482 return NULL;
2483
f4ea83dd 2484#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
0c68ae26
JB		 2485 printk(KERN_DEBUG "%s: Adding new IBSS station %pM (dev=%s)\n",
2486 wiphy_name(local->hw.wiphy), addr, sdata->dev->name);
f4ea83dd 2487#endif
f0706e82 2488
73651ee6
JB		 2489 sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2490 if (!sta)
f0706e82
JB		 2491 return NULL;
2492
07346f81 2493 set_sta_flags(sta, WLAN_STA_AUTHORIZED);
238814fd 2494
8e1535d5 2495 /* make sure mandatory rates are always added */
323ce79a 2496 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 2497 ieee80211_mandatory_rates(local, band);
f0706e82 2498
4b7679a5 2499 rate_control_rate_init(sta);
f0706e82 2500
93e5deb1 2501 if (sta_info_insert(sta))
73651ee6 2502 return NULL;
73651ee6 2503
d0709a65 2504 return sta;
f0706e82
JB		 2505}
2506
9c6bd790
JB		 2507/* configuration hooks */
2508void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2509 struct ieee80211_if_sta *ifsta)
60f8b39c
JB		 2510{
2511 struct ieee80211_local *local = sdata->local;
60f8b39c 2512
05c914fe 2513 if (sdata->vif.type != NL80211_IFTYPE_STATION)
9c6bd790 2514 return;
60f8b39c 2515
9c6bd790
JB		 2516 if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2517 IEEE80211_STA_AUTO_BSSID_SEL)) &&
2518 (ifsta->flags & (IEEE80211_STA_SSID_SET |
2519 IEEE80211_STA_AUTO_SSID_SEL))) {
60f8b39c 2520
9c6bd790
JB		 2521 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2522 ieee80211_set_disassoc(sdata, ifsta, true, true,
2523 WLAN_REASON_DEAUTH_LEAVING);
60f8b39c 2524
9c6bd790
JB		 2525 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2526 queue_work(local->hw.workqueue, &ifsta->work);
2527 }
2528}
60f8b39c 2529
9c6bd790
JB		 2530int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2531{
2532 struct ieee80211_if_sta *ifsta;
60f8b39c 2533
9c6bd790
JB		 2534 if (len > IEEE80211_MAX_SSID_LEN)
2535 return -EINVAL;
2536
2537 ifsta = &sdata->u.sta;
2538
2539 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2540 memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2541 memcpy(ifsta->ssid, ssid, len);
2542 ifsta->ssid_len = len;
2543 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
60f8b39c 2544 }
60f8b39c 2545
9c6bd790
JB		 2546 if (len)
2547 ifsta->flags |= IEEE80211_STA_SSID_SET;
2548 else
2549 ifsta->flags &= ~IEEE80211_STA_SSID_SET;
60f8b39c 2550
05c914fe 2551 if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
9c6bd790
JB		 2552 !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2553 ifsta->ibss_join_req = jiffies;
2554 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2555 return ieee80211_sta_find_ibss(sdata, ifsta);
2556 }
2557
2558 return 0;
2559}
2560
2561int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2562{
2563 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2564 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2565 *len = ifsta->ssid_len;
2566 return 0;
2567}
2568
2569int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2570{
2571 struct ieee80211_if_sta *ifsta;
2572 int res;
0efcdfd6 2573 bool valid;
9c6bd790
JB		 2574
2575 ifsta = &sdata->u.sta;
0efcdfd6 2576 valid = is_valid_ether_addr(bssid);
9c6bd790
JB		 2577
2578 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
0efcdfd6
AF		 2579 if(valid)
2580 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2581 else
2582 memset(ifsta->bssid, 0, ETH_ALEN);
9c6bd790
JB		 2583 res = 0;
2584 /*
2585 * Hack! See also ieee80211_sta_set_ssid.
60f8b39c 2586 */
9c6bd790
JB		 2587 if (netif_running(sdata->dev))
2588 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2589 if (res) {
2590 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2591 "the low-level driver\n", sdata->dev->name);
2592 return res;
2593 }
2594 }
60f8b39c 2595
0efcdfd6 2596 if (valid)
9c6bd790
JB		 2597 ifsta->flags |= IEEE80211_STA_BSSID_SET;
2598 else
2599 ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2600
2601 return 0;
2602}
2603
2604int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2605{
2606 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2607
2608 kfree(ifsta->extra_ie);
2609 if (len == 0) {
2610 ifsta->extra_ie = NULL;
2611 ifsta->extra_ie_len = 0;
60f8b39c 2612 return 0;
60f8b39c 2613 }
9c6bd790
JB		 2614 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2615 if (!ifsta->extra_ie) {
2616 ifsta->extra_ie_len = 0;
2617 return -ENOMEM;
2618 }
2619 memcpy(ifsta->extra_ie, ie, len);
2620 ifsta->extra_ie_len = len;
2621 return 0;
60f8b39c
JB		 2622}
2623
f698d856 2624int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2625{
f0706e82
JB		 2626 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2627
f4ea83dd 2628 printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
f698d856 2629 sdata->dev->name, reason);
f0706e82 2630
05c914fe
JB		 2631 if (sdata->vif.type != NL80211_IFTYPE_STATION &&
2632 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82
JB		 2633 return -EINVAL;
2634
aa458d17 2635 ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
f0706e82
JB		 2636 return 0;
2637}
2638
f698d856 2639int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2640{
f0706e82
JB		 2641 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2642
f4ea83dd 2643 printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
f698d856 2644 sdata->dev->name, reason);
f0706e82 2645
05c914fe 2646 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB		 2647 return -EINVAL;
2648
d6f2da5b 2649 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
f0706e82
JB		 2650 return -1;
2651
aa458d17 2652 ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
f0706e82
JB		 2653 return 0;
2654}
84363e6e 2655
9c6bd790
JB		 2656/* scan finished notification */
2657void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
2658{
2659 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
2660 struct ieee80211_if_sta *ifsta;
2661
05c914fe 2662 if (sdata && sdata->vif.type == NL80211_IFTYPE_ADHOC) {
9c6bd790
JB		 2663 ifsta = &sdata->u.sta;
2664 if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
2665 (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
2666 !ieee80211_sta_active_ibss(sdata)))
2667 ieee80211_sta_find_ibss(sdata, ifsta);
2668 }
2669
2670 /* Restart STA timers */
2671 rcu_read_lock();
2672 list_for_each_entry_rcu(sdata, &local->interfaces, list)
2673 ieee80211_restart_sta_timer(sdata);
2674 rcu_read_unlock();
2675}
520eb820
KV		 2676
2677void ieee80211_dynamic_ps_disable_work(struct work_struct *work)
2678{
2679 struct ieee80211_local *local =
2680 container_of(work, struct ieee80211_local,
2681 dynamic_ps_disable_work);
2682
2683 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
2684 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
2685 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2686 }
2687
2688 ieee80211_wake_queues_by_reason(&local->hw,
2689 IEEE80211_QUEUE_STOP_REASON_PS);
2690}
2691
2692void ieee80211_dynamic_ps_enable_work(struct work_struct *work)
2693{
2694 struct ieee80211_local *local =
2695 container_of(work, struct ieee80211_local,
2696 dynamic_ps_enable_work);
a97b77b9 2697 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
520eb820
KV		 2698
2699 if (local->hw.conf.flags & IEEE80211_CONF_PS)
2700 return;
2701
4be8c387
JB		 2702 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
2703 ieee80211_send_nullfunc(local, sdata, 1);
520eb820 2704
4be8c387 2705 local->hw.conf.flags |= IEEE80211_CONF_PS;
520eb820
KV		 2706 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2707}
2708
2709void ieee80211_dynamic_ps_timer(unsigned long data)
2710{
2711 struct ieee80211_local *local = (void *) data;
2712
2713 queue_work(local->hw.workqueue, &local->dynamic_ps_enable_work);
2714}
Linux kernel - Deliverables
This page took 0.499272 seconds and 5 git commands to generate.