2 * BSS client mode implementation
3 * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
14 #include <linux/delay.h>
15 #include <linux/if_ether.h>
16 #include <linux/skbuff.h>
17 #include <linux/if_arp.h>
18 #include <linux/etherdevice.h>
19 #include <linux/rtnetlink.h>
20 #include <net/mac80211.h>
21 #include <asm/unaligned.h>
23 #include "ieee80211_i.h"
27 #define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
28 #define IEEE80211_AUTH_TIMEOUT (HZ / 5)
29 #define IEEE80211_AUTH_MAX_TRIES 3
30 #define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
31 #define IEEE80211_ASSOC_MAX_TRIES 3
32 #define IEEE80211_MONITORING_INTERVAL (2 * HZ)
33 #define IEEE80211_PROBE_IDLE_TIME (60 * HZ)
34 #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
37 static int ecw2cw(int ecw
)
39 return (1 << ecw
) - 1;
42 static u8
*ieee80211_bss_get_ie(struct ieee80211_bss
*bss
, u8 ie
)
46 pos
= bss
->cbss
.information_elements
;
49 end
= pos
+ bss
->cbss
.len_information_elements
;
51 while (pos
+ 1 < end
) {
52 if (pos
+ 2 + pos
[1] > end
)
62 static int ieee80211_compatible_rates(struct ieee80211_bss
*bss
,
63 struct ieee80211_supported_band
*sband
,
69 for (i
= 0; i
< bss
->supp_rates_len
; i
++) {
70 int rate
= (bss
->supp_rates
[i
] & 0x7F) * 5;
72 for (j
= 0; j
< sband
->n_bitrates
; j
++)
73 if (sband
->bitrates
[j
].bitrate
== rate
) {
83 /* frame sending functions */
85 static void ieee80211_send_assoc(struct ieee80211_sub_if_data
*sdata
)
87 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
88 struct ieee80211_local
*local
= sdata
->local
;
90 struct ieee80211_mgmt
*mgmt
;
91 u8
*pos
, *ies
, *ht_ie
;
92 int i
, len
, count
, rates_len
, supp_rates_len
;
94 struct ieee80211_bss
*bss
;
96 struct ieee80211_supported_band
*sband
;
99 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+
100 sizeof(*mgmt
) + 200 + ifmgd
->extra_ie_len
+
103 printk(KERN_DEBUG
"%s: failed to allocate buffer for assoc "
104 "frame\n", sdata
->dev
->name
);
107 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
109 sband
= local
->hw
.wiphy
->bands
[local
->hw
.conf
.channel
->band
];
111 capab
= ifmgd
->capab
;
113 if (local
->hw
.conf
.channel
->band
== IEEE80211_BAND_2GHZ
) {
114 if (!(local
->hw
.flags
& IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE
))
115 capab
|= WLAN_CAPABILITY_SHORT_SLOT_TIME
;
116 if (!(local
->hw
.flags
& IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE
))
117 capab
|= WLAN_CAPABILITY_SHORT_PREAMBLE
;
120 bss
= ieee80211_rx_bss_get(local
, ifmgd
->bssid
,
121 local
->hw
.conf
.channel
->center_freq
,
122 ifmgd
->ssid
, ifmgd
->ssid_len
);
124 if (bss
->cbss
.capability
& WLAN_CAPABILITY_PRIVACY
)
125 capab
|= WLAN_CAPABILITY_PRIVACY
;
129 /* get all rates supported by the device and the AP as
130 * some APs don't like getting a superset of their rates
131 * in the association request (e.g. D-Link DAP 1353 in
133 rates_len
= ieee80211_compatible_rates(bss
, sband
, &rates
);
135 if ((bss
->cbss
.capability
& WLAN_CAPABILITY_SPECTRUM_MGMT
) &&
136 (local
->hw
.flags
& IEEE80211_HW_SPECTRUM_MGMT
))
137 capab
|= WLAN_CAPABILITY_SPECTRUM_MGMT
;
139 ieee80211_rx_bss_put(local
, bss
);
142 rates_len
= sband
->n_bitrates
;
145 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
147 memcpy(mgmt
->da
, ifmgd
->bssid
, ETH_ALEN
);
148 memcpy(mgmt
->sa
, sdata
->dev
->dev_addr
, ETH_ALEN
);
149 memcpy(mgmt
->bssid
, ifmgd
->bssid
, ETH_ALEN
);
151 if (ifmgd
->flags
& IEEE80211_STA_PREV_BSSID_SET
) {
153 mgmt
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
154 IEEE80211_STYPE_REASSOC_REQ
);
155 mgmt
->u
.reassoc_req
.capab_info
= cpu_to_le16(capab
);
156 mgmt
->u
.reassoc_req
.listen_interval
=
157 cpu_to_le16(local
->hw
.conf
.listen_interval
);
158 memcpy(mgmt
->u
.reassoc_req
.current_ap
, ifmgd
->prev_bssid
,
162 mgmt
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
163 IEEE80211_STYPE_ASSOC_REQ
);
164 mgmt
->u
.assoc_req
.capab_info
= cpu_to_le16(capab
);
165 mgmt
->u
.assoc_req
.listen_interval
=
166 cpu_to_le16(local
->hw
.conf
.listen_interval
);
170 ies
= pos
= skb_put(skb
, 2 + ifmgd
->ssid_len
);
171 *pos
++ = WLAN_EID_SSID
;
172 *pos
++ = ifmgd
->ssid_len
;
173 memcpy(pos
, ifmgd
->ssid
, ifmgd
->ssid_len
);
175 /* add all rates which were marked to be used above */
176 supp_rates_len
= rates_len
;
177 if (supp_rates_len
> 8)
180 len
= sband
->n_bitrates
;
181 pos
= skb_put(skb
, supp_rates_len
+ 2);
182 *pos
++ = WLAN_EID_SUPP_RATES
;
183 *pos
++ = supp_rates_len
;
186 for (i
= 0; i
< sband
->n_bitrates
; i
++) {
187 if (BIT(i
) & rates
) {
188 int rate
= sband
->bitrates
[i
].bitrate
;
189 *pos
++ = (u8
) (rate
/ 5);
195 if (rates_len
> count
) {
196 pos
= skb_put(skb
, rates_len
- count
+ 2);
197 *pos
++ = WLAN_EID_EXT_SUPP_RATES
;
198 *pos
++ = rates_len
- count
;
200 for (i
++; i
< sband
->n_bitrates
; i
++) {
201 if (BIT(i
) & rates
) {
202 int rate
= sband
->bitrates
[i
].bitrate
;
203 *pos
++ = (u8
) (rate
/ 5);
208 if (capab
& WLAN_CAPABILITY_SPECTRUM_MGMT
) {
209 /* 1. power capabilities */
210 pos
= skb_put(skb
, 4);
211 *pos
++ = WLAN_EID_PWR_CAPABILITY
;
213 *pos
++ = 0; /* min tx power */
214 *pos
++ = local
->hw
.conf
.channel
->max_power
; /* max tx power */
216 /* 2. supported channels */
217 /* TODO: get this in reg domain format */
218 pos
= skb_put(skb
, 2 * sband
->n_channels
+ 2);
219 *pos
++ = WLAN_EID_SUPPORTED_CHANNELS
;
220 *pos
++ = 2 * sband
->n_channels
;
221 for (i
= 0; i
< sband
->n_channels
; i
++) {
222 *pos
++ = ieee80211_frequency_to_channel(
223 sband
->channels
[i
].center_freq
);
224 *pos
++ = 1; /* one channel in the subband*/
228 if (ifmgd
->extra_ie
) {
229 pos
= skb_put(skb
, ifmgd
->extra_ie_len
);
230 memcpy(pos
, ifmgd
->extra_ie
, ifmgd
->extra_ie_len
);
233 if (wmm
&& (ifmgd
->flags
& IEEE80211_STA_WMM_ENABLED
)) {
234 pos
= skb_put(skb
, 9);
235 *pos
++ = WLAN_EID_VENDOR_SPECIFIC
;
236 *pos
++ = 7; /* len */
237 *pos
++ = 0x00; /* Microsoft OUI 00:50:F2 */
240 *pos
++ = 2; /* WME */
241 *pos
++ = 0; /* WME info */
242 *pos
++ = 1; /* WME ver */
246 /* wmm support is a must to HT */
248 * IEEE802.11n does not allow TKIP/WEP as pairwise
249 * ciphers in HT mode. We still associate in non-ht
250 * mode (11a/b/g) if any one of these ciphers is
251 * configured as pairwise.
253 if (wmm
&& (ifmgd
->flags
& IEEE80211_STA_WMM_ENABLED
) &&
254 sband
->ht_cap
.ht_supported
&&
255 (ht_ie
= ieee80211_bss_get_ie(bss
, WLAN_EID_HT_INFORMATION
)) &&
256 ht_ie
[1] >= sizeof(struct ieee80211_ht_info
) &&
257 (!(ifmgd
->flags
& IEEE80211_STA_TKIP_WEP_USED
))) {
258 struct ieee80211_ht_info
*ht_info
=
259 (struct ieee80211_ht_info
*)(ht_ie
+ 2);
260 u16 cap
= sband
->ht_cap
.cap
;
262 u32 flags
= local
->hw
.conf
.channel
->flags
;
264 switch (ht_info
->ht_param
& IEEE80211_HT_PARAM_CHA_SEC_OFFSET
) {
265 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE
:
266 if (flags
& IEEE80211_CHAN_NO_FAT_ABOVE
) {
267 cap
&= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40
;
268 cap
&= ~IEEE80211_HT_CAP_SGI_40
;
271 case IEEE80211_HT_PARAM_CHA_SEC_BELOW
:
272 if (flags
& IEEE80211_CHAN_NO_FAT_BELOW
) {
273 cap
&= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40
;
274 cap
&= ~IEEE80211_HT_CAP_SGI_40
;
279 tmp
= cpu_to_le16(cap
);
280 pos
= skb_put(skb
, sizeof(struct ieee80211_ht_cap
)+2);
281 *pos
++ = WLAN_EID_HT_CAPABILITY
;
282 *pos
++ = sizeof(struct ieee80211_ht_cap
);
283 memset(pos
, 0, sizeof(struct ieee80211_ht_cap
));
284 memcpy(pos
, &tmp
, sizeof(u16
));
286 /* TODO: needs a define here for << 2 */
287 *pos
++ = sband
->ht_cap
.ampdu_factor
|
288 (sband
->ht_cap
.ampdu_density
<< 2);
289 memcpy(pos
, &sband
->ht_cap
.mcs
, sizeof(sband
->ht_cap
.mcs
));
292 kfree(ifmgd
->assocreq_ies
);
293 ifmgd
->assocreq_ies_len
= (skb
->data
+ skb
->len
) - ies
;
294 ifmgd
->assocreq_ies
= kmalloc(ifmgd
->assocreq_ies_len
, GFP_KERNEL
);
295 if (ifmgd
->assocreq_ies
)
296 memcpy(ifmgd
->assocreq_ies
, ies
, ifmgd
->assocreq_ies_len
);
298 ieee80211_tx_skb(sdata
, skb
, 0);
302 static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data
*sdata
,
303 u16 stype
, u16 reason
)
305 struct ieee80211_local
*local
= sdata
->local
;
306 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
308 struct ieee80211_mgmt
*mgmt
;
310 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ sizeof(*mgmt
));
312 printk(KERN_DEBUG
"%s: failed to allocate buffer for "
313 "deauth/disassoc frame\n", sdata
->dev
->name
);
316 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
318 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
320 memcpy(mgmt
->da
, ifmgd
->bssid
, ETH_ALEN
);
321 memcpy(mgmt
->sa
, sdata
->dev
->dev_addr
, ETH_ALEN
);
322 memcpy(mgmt
->bssid
, ifmgd
->bssid
, ETH_ALEN
);
323 mgmt
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
| stype
);
325 /* u.deauth.reason_code == u.disassoc.reason_code */
326 mgmt
->u
.deauth
.reason_code
= cpu_to_le16(reason
);
328 if (stype
== IEEE80211_STYPE_DEAUTH
)
329 cfg80211_send_deauth(sdata
->dev
, (u8
*) mgmt
, skb
->len
);
331 cfg80211_send_disassoc(sdata
->dev
, (u8
*) mgmt
, skb
->len
);
332 ieee80211_tx_skb(sdata
, skb
, ifmgd
->flags
& IEEE80211_STA_MFP_ENABLED
);
335 void ieee80211_send_pspoll(struct ieee80211_local
*local
,
336 struct ieee80211_sub_if_data
*sdata
)
338 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
339 struct ieee80211_pspoll
*pspoll
;
343 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ sizeof(*pspoll
));
345 printk(KERN_DEBUG
"%s: failed to allocate buffer for "
346 "pspoll frame\n", sdata
->dev
->name
);
349 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
351 pspoll
= (struct ieee80211_pspoll
*) skb_put(skb
, sizeof(*pspoll
));
352 memset(pspoll
, 0, sizeof(*pspoll
));
353 fc
= IEEE80211_FTYPE_CTL
| IEEE80211_STYPE_PSPOLL
| IEEE80211_FCTL_PM
;
354 pspoll
->frame_control
= cpu_to_le16(fc
);
355 pspoll
->aid
= cpu_to_le16(ifmgd
->aid
);
357 /* aid in PS-Poll has its two MSBs each set to 1 */
358 pspoll
->aid
|= cpu_to_le16(1 << 15 | 1 << 14);
360 memcpy(pspoll
->bssid
, ifmgd
->bssid
, ETH_ALEN
);
361 memcpy(pspoll
->ta
, sdata
->dev
->dev_addr
, ETH_ALEN
);
363 ieee80211_tx_skb(sdata
, skb
, 0);
367 static void ieee80211_sta_wmm_params(struct ieee80211_local
*local
,
368 struct ieee80211_if_managed
*ifmgd
,
369 u8
*wmm_param
, size_t wmm_param_len
)
371 struct ieee80211_tx_queue_params params
;
376 if (!(ifmgd
->flags
& IEEE80211_STA_WMM_ENABLED
))
382 if (wmm_param_len
< 8 || wmm_param
[5] /* version */ != 1)
384 count
= wmm_param
[6] & 0x0f;
385 if (count
== ifmgd
->wmm_last_param_set
)
387 ifmgd
->wmm_last_param_set
= count
;
390 left
= wmm_param_len
- 8;
392 memset(¶ms
, 0, sizeof(params
));
395 for (; left
>= 4; left
-= 4, pos
+= 4) {
396 int aci
= (pos
[0] >> 5) & 0x03;
397 int acm
= (pos
[0] >> 4) & 0x01;
404 local
->wmm_acm
|= BIT(1) | BIT(2); /* BK/- */
409 local
->wmm_acm
|= BIT(4) | BIT(5); /* CL/VI */
414 local
->wmm_acm
|= BIT(6) | BIT(7); /* VO/NC */
420 local
->wmm_acm
|= BIT(0) | BIT(3); /* BE/EE */
424 params
.aifs
= pos
[0] & 0x0f;
425 params
.cw_max
= ecw2cw((pos
[1] & 0xf0) >> 4);
426 params
.cw_min
= ecw2cw(pos
[1] & 0x0f);
427 params
.txop
= get_unaligned_le16(pos
+ 2);
428 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
429 printk(KERN_DEBUG
"%s: WMM queue=%d aci=%d acm=%d aifs=%d "
430 "cWmin=%d cWmax=%d txop=%d\n",
431 local
->mdev
->name
, queue
, aci
, acm
, params
.aifs
, params
.cw_min
,
432 params
.cw_max
, params
.txop
);
434 if (local
->ops
->conf_tx
&&
435 local
->ops
->conf_tx(local_to_hw(local
), queue
, ¶ms
)) {
436 printk(KERN_DEBUG
"%s: failed to set TX queue "
437 "parameters for queue %d\n", local
->mdev
->name
, queue
);
442 static bool ieee80211_check_tim(struct ieee802_11_elems
*elems
, u16 aid
)
445 u8 index
, indexn1
, indexn2
;
446 struct ieee80211_tim_ie
*tim
= (struct ieee80211_tim_ie
*) elems
->tim
;
448 if (unlikely(!tim
|| elems
->tim_len
< 4))
453 mask
= 1 << (aid
& 7);
455 indexn1
= tim
->bitmap_ctrl
& 0xfe;
456 indexn2
= elems
->tim_len
+ indexn1
- 4;
458 if (index
< indexn1
|| index
> indexn2
)
463 return !!(tim
->virtual_map
[index
] & mask
);
466 static u32
ieee80211_handle_bss_capability(struct ieee80211_sub_if_data
*sdata
,
467 u16 capab
, bool erp_valid
, u8 erp
)
469 struct ieee80211_bss_conf
*bss_conf
= &sdata
->vif
.bss_conf
;
470 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
471 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
475 bool use_short_preamble
;
479 use_protection
= (erp
& WLAN_ERP_USE_PROTECTION
) != 0;
480 use_short_preamble
= (erp
& WLAN_ERP_BARKER_PREAMBLE
) == 0;
482 use_protection
= false;
483 use_short_preamble
= !!(capab
& WLAN_CAPABILITY_SHORT_PREAMBLE
);
486 use_short_slot
= !!(capab
& WLAN_CAPABILITY_SHORT_SLOT_TIME
);
488 if (use_protection
!= bss_conf
->use_cts_prot
) {
489 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
490 if (net_ratelimit()) {
491 printk(KERN_DEBUG
"%s: CTS protection %s (BSSID=%pM)\n",
493 use_protection
? "enabled" : "disabled",
497 bss_conf
->use_cts_prot
= use_protection
;
498 changed
|= BSS_CHANGED_ERP_CTS_PROT
;
501 if (use_short_preamble
!= bss_conf
->use_short_preamble
) {
502 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
503 if (net_ratelimit()) {
504 printk(KERN_DEBUG
"%s: switched to %s barker preamble"
507 use_short_preamble
? "short" : "long",
511 bss_conf
->use_short_preamble
= use_short_preamble
;
512 changed
|= BSS_CHANGED_ERP_PREAMBLE
;
515 if (use_short_slot
!= bss_conf
->use_short_slot
) {
516 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
517 if (net_ratelimit()) {
518 printk(KERN_DEBUG
"%s: switched to %s slot time"
521 use_short_slot
? "short" : "long",
525 bss_conf
->use_short_slot
= use_short_slot
;
526 changed
|= BSS_CHANGED_ERP_SLOT
;
532 static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data
*sdata
)
534 union iwreq_data wrqu
;
536 memset(&wrqu
, 0, sizeof(wrqu
));
537 if (sdata
->u
.mgd
.flags
& IEEE80211_STA_ASSOCIATED
)
538 memcpy(wrqu
.ap_addr
.sa_data
, sdata
->u
.mgd
.bssid
, ETH_ALEN
);
539 wrqu
.ap_addr
.sa_family
= ARPHRD_ETHER
;
540 wireless_send_event(sdata
->dev
, SIOCGIWAP
, &wrqu
, NULL
);
543 static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data
*sdata
)
545 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
549 union iwreq_data wrqu
;
551 if (!ifmgd
->assocreq_ies
&& !ifmgd
->assocresp_ies
)
554 buf
= kmalloc(50 + 2 * (ifmgd
->assocreq_ies_len
+
555 ifmgd
->assocresp_ies_len
), GFP_KERNEL
);
559 len
= sprintf(buf
, "ASSOCINFO(");
560 if (ifmgd
->assocreq_ies
) {
561 len
+= sprintf(buf
+ len
, "ReqIEs=");
562 for (i
= 0; i
< ifmgd
->assocreq_ies_len
; i
++) {
563 len
+= sprintf(buf
+ len
, "%02x",
564 ifmgd
->assocreq_ies
[i
]);
567 if (ifmgd
->assocresp_ies
) {
568 if (ifmgd
->assocreq_ies
)
569 len
+= sprintf(buf
+ len
, " ");
570 len
+= sprintf(buf
+ len
, "RespIEs=");
571 for (i
= 0; i
< ifmgd
->assocresp_ies_len
; i
++) {
572 len
+= sprintf(buf
+ len
, "%02x",
573 ifmgd
->assocresp_ies
[i
]);
576 len
+= sprintf(buf
+ len
, ")");
578 if (len
> IW_CUSTOM_MAX
) {
579 len
= sprintf(buf
, "ASSOCRESPIE=");
580 for (i
= 0; i
< ifmgd
->assocresp_ies_len
; i
++) {
581 len
+= sprintf(buf
+ len
, "%02x",
582 ifmgd
->assocresp_ies
[i
]);
586 if (len
<= IW_CUSTOM_MAX
) {
587 memset(&wrqu
, 0, sizeof(wrqu
));
588 wrqu
.data
.length
= len
;
589 wireless_send_event(sdata
->dev
, IWEVCUSTOM
, &wrqu
, buf
);
596 static void ieee80211_set_associated(struct ieee80211_sub_if_data
*sdata
,
597 u32 bss_info_changed
)
599 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
600 struct ieee80211_local
*local
= sdata
->local
;
601 struct ieee80211_conf
*conf
= &local_to_hw(local
)->conf
;
603 struct ieee80211_bss
*bss
;
605 bss_info_changed
|= BSS_CHANGED_ASSOC
;
606 ifmgd
->flags
|= IEEE80211_STA_ASSOCIATED
;
608 bss
= ieee80211_rx_bss_get(local
, ifmgd
->bssid
,
609 conf
->channel
->center_freq
,
610 ifmgd
->ssid
, ifmgd
->ssid_len
);
612 /* set timing information */
613 sdata
->vif
.bss_conf
.beacon_int
= bss
->cbss
.beacon_interval
;
614 sdata
->vif
.bss_conf
.timestamp
= bss
->cbss
.tsf
;
615 sdata
->vif
.bss_conf
.dtim_period
= bss
->dtim_period
;
617 bss_info_changed
|= ieee80211_handle_bss_capability(sdata
,
618 bss
->cbss
.capability
, bss
->has_erp_value
, bss
->erp_value
);
620 cfg80211_hold_bss(&bss
->cbss
);
622 ieee80211_rx_bss_put(local
, bss
);
625 ifmgd
->flags
|= IEEE80211_STA_PREV_BSSID_SET
;
626 memcpy(ifmgd
->prev_bssid
, sdata
->u
.mgd
.bssid
, ETH_ALEN
);
627 ieee80211_sta_send_associnfo(sdata
);
629 ifmgd
->last_probe
= jiffies
;
630 ieee80211_led_assoc(local
, 1);
632 sdata
->vif
.bss_conf
.assoc
= 1;
634 * For now just always ask the driver to update the basic rateset
635 * when we have associated, we aren't checking whether it actually
638 bss_info_changed
|= BSS_CHANGED_BASIC_RATES
;
639 ieee80211_bss_info_change_notify(sdata
, bss_info_changed
);
641 if (local
->powersave
) {
642 if (!(local
->hw
.flags
& IEEE80211_HW_SUPPORTS_DYNAMIC_PS
) &&
643 local
->hw
.conf
.dynamic_ps_timeout
> 0) {
644 mod_timer(&local
->dynamic_ps_timer
, jiffies
+
646 local
->hw
.conf
.dynamic_ps_timeout
));
648 if (local
->hw
.flags
& IEEE80211_HW_PS_NULLFUNC_STACK
)
649 ieee80211_send_nullfunc(local
, sdata
, 1);
650 conf
->flags
|= IEEE80211_CONF_PS
;
651 ieee80211_hw_config(local
, IEEE80211_CONF_CHANGE_PS
);
655 netif_tx_start_all_queues(sdata
->dev
);
656 netif_carrier_on(sdata
->dev
);
658 ieee80211_sta_send_apinfo(sdata
);
661 static void ieee80211_direct_probe(struct ieee80211_sub_if_data
*sdata
)
663 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
664 struct ieee80211_local
*local
= sdata
->local
;
666 ifmgd
->direct_probe_tries
++;
667 if (ifmgd
->direct_probe_tries
> IEEE80211_AUTH_MAX_TRIES
) {
668 printk(KERN_DEBUG
"%s: direct probe to AP %pM timed out\n",
669 sdata
->dev
->name
, ifmgd
->bssid
);
670 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
671 ieee80211_sta_send_apinfo(sdata
);
674 * Most likely AP is not in the range so remove the
675 * bss information associated to the AP
677 ieee80211_rx_bss_remove(sdata
, ifmgd
->bssid
,
678 sdata
->local
->hw
.conf
.channel
->center_freq
,
679 ifmgd
->ssid
, ifmgd
->ssid_len
);
682 * We might have a pending scan which had no chance to run yet
683 * due to state == IEEE80211_STA_MLME_DIRECT_PROBE.
684 * Hence, queue the STAs work again
686 queue_work(local
->hw
.workqueue
, &ifmgd
->work
);
690 printk(KERN_DEBUG
"%s: direct probe to AP %pM try %d\n",
691 sdata
->dev
->name
, ifmgd
->bssid
,
692 ifmgd
->direct_probe_tries
);
694 ifmgd
->state
= IEEE80211_STA_MLME_DIRECT_PROBE
;
696 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE
, &ifmgd
->request
);
698 /* Direct probe is sent to broadcast address as some APs
699 * will not answer to direct packet in unassociated state.
701 ieee80211_send_probe_req(sdata
, NULL
,
702 ifmgd
->ssid
, ifmgd
->ssid_len
, NULL
, 0);
704 mod_timer(&ifmgd
->timer
, jiffies
+ IEEE80211_AUTH_TIMEOUT
);
708 static void ieee80211_authenticate(struct ieee80211_sub_if_data
*sdata
)
710 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
711 struct ieee80211_local
*local
= sdata
->local
;
716 if (ifmgd
->auth_tries
> IEEE80211_AUTH_MAX_TRIES
) {
717 printk(KERN_DEBUG
"%s: authentication with AP %pM"
719 sdata
->dev
->name
, ifmgd
->bssid
);
720 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
721 ieee80211_sta_send_apinfo(sdata
);
722 ieee80211_rx_bss_remove(sdata
, ifmgd
->bssid
,
723 sdata
->local
->hw
.conf
.channel
->center_freq
,
724 ifmgd
->ssid
, ifmgd
->ssid_len
);
727 * We might have a pending scan which had no chance to run yet
728 * due to state == IEEE80211_STA_MLME_AUTHENTICATE.
729 * Hence, queue the STAs work again
731 queue_work(local
->hw
.workqueue
, &ifmgd
->work
);
735 ifmgd
->state
= IEEE80211_STA_MLME_AUTHENTICATE
;
736 printk(KERN_DEBUG
"%s: authenticate with AP %pM\n",
737 sdata
->dev
->name
, ifmgd
->bssid
);
739 if (ifmgd
->flags
& IEEE80211_STA_EXT_SME
) {
740 ies
= ifmgd
->sme_auth_ie
;
741 ies_len
= ifmgd
->sme_auth_ie_len
;
746 ieee80211_send_auth(sdata
, 1, ifmgd
->auth_alg
, ies
, ies_len
,
748 ifmgd
->auth_transaction
= 2;
750 mod_timer(&ifmgd
->timer
, jiffies
+ IEEE80211_AUTH_TIMEOUT
);
754 * The disassoc 'reason' argument can be either our own reason
755 * if self disconnected or a reason code from the AP.
757 static void ieee80211_set_disassoc(struct ieee80211_sub_if_data
*sdata
,
758 bool deauth
, bool self_disconnected
,
761 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
762 struct ieee80211_local
*local
= sdata
->local
;
763 struct ieee80211_conf
*conf
= &local_to_hw(local
)->conf
;
764 struct ieee80211_bss
*bss
;
765 struct sta_info
*sta
;
766 u32 changed
= 0, config_changed
= 0;
770 sta
= sta_info_get(local
, ifmgd
->bssid
);
777 ifmgd
->direct_probe_tries
= 0;
778 ifmgd
->auth_tries
= 0;
780 ifmgd
->assoc_scan_tries
= 0;
781 ifmgd
->assoc_tries
= 0;
783 netif_tx_stop_all_queues(sdata
->dev
);
784 netif_carrier_off(sdata
->dev
);
786 ieee80211_sta_tear_down_BA_sessions(sta
);
788 bss
= ieee80211_rx_bss_get(local
, ifmgd
->bssid
,
789 conf
->channel
->center_freq
,
790 ifmgd
->ssid
, ifmgd
->ssid_len
);
793 cfg80211_unhold_bss(&bss
->cbss
);
794 ieee80211_rx_bss_put(local
, bss
);
797 if (self_disconnected
) {
799 ieee80211_send_deauth_disassoc(sdata
,
800 IEEE80211_STYPE_DEAUTH
, reason
);
802 ieee80211_send_deauth_disassoc(sdata
,
803 IEEE80211_STYPE_DISASSOC
, reason
);
806 ifmgd
->flags
&= ~IEEE80211_STA_ASSOCIATED
;
807 changed
|= ieee80211_reset_erp_info(sdata
);
809 ieee80211_led_assoc(local
, 0);
810 changed
|= BSS_CHANGED_ASSOC
;
811 sdata
->vif
.bss_conf
.assoc
= false;
813 ieee80211_sta_send_apinfo(sdata
);
815 if (self_disconnected
|| reason
== WLAN_REASON_DISASSOC_STA_HAS_LEFT
) {
816 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
817 ieee80211_rx_bss_remove(sdata
, ifmgd
->bssid
,
818 sdata
->local
->hw
.conf
.channel
->center_freq
,
819 ifmgd
->ssid
, ifmgd
->ssid_len
);
824 /* channel(_type) changes are handled by ieee80211_hw_config */
825 local
->oper_channel_type
= NL80211_CHAN_NO_HT
;
827 local
->power_constr_level
= 0;
829 del_timer_sync(&local
->dynamic_ps_timer
);
830 cancel_work_sync(&local
->dynamic_ps_enable_work
);
832 if (local
->hw
.conf
.flags
& IEEE80211_CONF_PS
) {
833 local
->hw
.conf
.flags
&= ~IEEE80211_CONF_PS
;
834 config_changed
|= IEEE80211_CONF_CHANGE_PS
;
837 ieee80211_hw_config(local
, config_changed
);
838 ieee80211_bss_info_change_notify(sdata
, changed
);
842 sta
= sta_info_get(local
, ifmgd
->bssid
);
848 sta_info_unlink(&sta
);
852 sta_info_destroy(sta
);
855 static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data
*sdata
)
857 if (!sdata
|| !sdata
->default_key
||
858 sdata
->default_key
->conf
.alg
!= ALG_WEP
)
863 static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data
*sdata
)
865 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
866 struct ieee80211_local
*local
= sdata
->local
;
867 struct ieee80211_bss
*bss
;
872 if (!ifmgd
|| (ifmgd
->flags
& IEEE80211_STA_EXT_SME
))
875 bss
= ieee80211_rx_bss_get(local
, ifmgd
->bssid
,
876 local
->hw
.conf
.channel
->center_freq
,
877 ifmgd
->ssid
, ifmgd
->ssid_len
);
881 bss_privacy
= !!(bss
->cbss
.capability
& WLAN_CAPABILITY_PRIVACY
);
882 wep_privacy
= !!ieee80211_sta_wep_configured(sdata
);
883 privacy_invoked
= !!(ifmgd
->flags
& IEEE80211_STA_PRIVACY_INVOKED
);
885 ieee80211_rx_bss_put(local
, bss
);
887 if ((bss_privacy
== wep_privacy
) || (bss_privacy
== privacy_invoked
))
893 static void ieee80211_associate(struct ieee80211_sub_if_data
*sdata
)
895 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
896 struct ieee80211_local
*local
= sdata
->local
;
898 ifmgd
->assoc_tries
++;
899 if (ifmgd
->assoc_tries
> IEEE80211_ASSOC_MAX_TRIES
) {
900 printk(KERN_DEBUG
"%s: association with AP %pM"
902 sdata
->dev
->name
, ifmgd
->bssid
);
903 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
904 ieee80211_sta_send_apinfo(sdata
);
905 ieee80211_rx_bss_remove(sdata
, ifmgd
->bssid
,
906 sdata
->local
->hw
.conf
.channel
->center_freq
,
907 ifmgd
->ssid
, ifmgd
->ssid_len
);
909 * We might have a pending scan which had no chance to run yet
910 * due to state == IEEE80211_STA_MLME_ASSOCIATE.
911 * Hence, queue the STAs work again
913 queue_work(local
->hw
.workqueue
, &ifmgd
->work
);
917 ifmgd
->state
= IEEE80211_STA_MLME_ASSOCIATE
;
918 printk(KERN_DEBUG
"%s: associate with AP %pM\n",
919 sdata
->dev
->name
, ifmgd
->bssid
);
920 if (ieee80211_privacy_mismatch(sdata
)) {
921 printk(KERN_DEBUG
"%s: mismatch in privacy configuration and "
922 "mixed-cell disabled - abort association\n", sdata
->dev
->name
);
923 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
927 ieee80211_send_assoc(sdata
);
929 mod_timer(&ifmgd
->timer
, jiffies
+ IEEE80211_ASSOC_TIMEOUT
);
932 void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data
*sdata
,
933 struct ieee80211_hdr
*hdr
)
936 * We can postpone the mgd.timer whenever receiving unicast frames
937 * from AP because we know that the connection is working both ways
938 * at that time. But multicast frames (and hence also beacons) must
939 * be ignored here, because we need to trigger the timer during
940 * data idle periods for sending the periodical probe request to
943 if (!is_multicast_ether_addr(hdr
->addr1
))
944 mod_timer(&sdata
->u
.mgd
.timer
,
945 jiffies
+ IEEE80211_MONITORING_INTERVAL
);
948 void ieee80211_beacon_loss_work(struct work_struct
*work
)
950 struct ieee80211_sub_if_data
*sdata
=
951 container_of(work
, struct ieee80211_sub_if_data
,
952 u
.mgd
.beacon_loss_work
);
953 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
955 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
956 if (net_ratelimit()) {
957 printk(KERN_DEBUG
"%s: driver reports beacon loss from AP %pM "
958 "- sending probe request\n", sdata
->dev
->name
,
963 ifmgd
->flags
|= IEEE80211_STA_PROBEREQ_POLL
;
964 ieee80211_send_probe_req(sdata
, ifmgd
->bssid
, ifmgd
->ssid
,
965 ifmgd
->ssid_len
, NULL
, 0);
967 mod_timer(&ifmgd
->timer
, jiffies
+ IEEE80211_MONITORING_INTERVAL
);
970 void ieee80211_beacon_loss(struct ieee80211_vif
*vif
)
972 struct ieee80211_sub_if_data
*sdata
= vif_to_sdata(vif
);
974 queue_work(sdata
->local
->hw
.workqueue
,
975 &sdata
->u
.mgd
.beacon_loss_work
);
977 EXPORT_SYMBOL(ieee80211_beacon_loss
);
979 static void ieee80211_associated(struct ieee80211_sub_if_data
*sdata
)
981 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
982 struct ieee80211_local
*local
= sdata
->local
;
983 struct sta_info
*sta
;
984 bool disassoc
= false;
986 /* TODO: start monitoring current AP signal quality and number of
987 * missed beacons. Scan other channels every now and then and search
989 /* TODO: remove expired BSSes */
991 ifmgd
->state
= IEEE80211_STA_MLME_ASSOCIATED
;
995 sta
= sta_info_get(local
, ifmgd
->bssid
);
997 printk(KERN_DEBUG
"%s: No STA entry for own AP %pM\n",
998 sdata
->dev
->name
, ifmgd
->bssid
);
1003 if ((ifmgd
->flags
& IEEE80211_STA_PROBEREQ_POLL
) &&
1004 time_after(jiffies
, sta
->last_rx
+ IEEE80211_MONITORING_INTERVAL
)) {
1005 printk(KERN_DEBUG
"%s: no probe response from AP %pM "
1006 "- disassociating\n",
1007 sdata
->dev
->name
, ifmgd
->bssid
);
1009 ifmgd
->flags
&= ~IEEE80211_STA_PROBEREQ_POLL
;
1014 * Beacon filtering is only enabled with power save and then the
1015 * stack should not check for beacon loss.
1017 if (!((local
->hw
.flags
& IEEE80211_HW_BEACON_FILTER
) &&
1018 (local
->hw
.conf
.flags
& IEEE80211_CONF_PS
)) &&
1020 ifmgd
->last_beacon
+ IEEE80211_MONITORING_INTERVAL
)) {
1021 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1022 if (net_ratelimit()) {
1023 printk(KERN_DEBUG
"%s: beacon loss from AP %pM "
1024 "- sending probe request\n",
1025 sdata
->dev
->name
, ifmgd
->bssid
);
1028 ifmgd
->flags
|= IEEE80211_STA_PROBEREQ_POLL
;
1029 ieee80211_send_probe_req(sdata
, ifmgd
->bssid
, ifmgd
->ssid
,
1030 ifmgd
->ssid_len
, NULL
, 0);
1035 if (time_after(jiffies
, sta
->last_rx
+ IEEE80211_PROBE_IDLE_TIME
)) {
1036 ifmgd
->flags
|= IEEE80211_STA_PROBEREQ_POLL
;
1037 ieee80211_send_probe_req(sdata
, ifmgd
->bssid
, ifmgd
->ssid
,
1038 ifmgd
->ssid_len
, NULL
, 0);
1045 ieee80211_set_disassoc(sdata
, true, true,
1046 WLAN_REASON_PREV_AUTH_NOT_VALID
);
1048 mod_timer(&ifmgd
->timer
, jiffies
+
1049 IEEE80211_MONITORING_INTERVAL
);
1053 static void ieee80211_auth_completed(struct ieee80211_sub_if_data
*sdata
)
1055 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1057 printk(KERN_DEBUG
"%s: authenticated\n", sdata
->dev
->name
);
1058 ifmgd
->flags
|= IEEE80211_STA_AUTHENTICATED
;
1059 if (ifmgd
->flags
& IEEE80211_STA_EXT_SME
) {
1060 /* Wait for SME to request association */
1061 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
1063 ieee80211_associate(sdata
);
1067 static void ieee80211_auth_challenge(struct ieee80211_sub_if_data
*sdata
,
1068 struct ieee80211_mgmt
*mgmt
,
1072 struct ieee802_11_elems elems
;
1074 pos
= mgmt
->u
.auth
.variable
;
1075 ieee802_11_parse_elems(pos
, len
- (pos
- (u8
*) mgmt
), &elems
);
1076 if (!elems
.challenge
)
1078 ieee80211_send_auth(sdata
, 3, sdata
->u
.mgd
.auth_alg
,
1079 elems
.challenge
- 2, elems
.challenge_len
+ 2,
1080 sdata
->u
.mgd
.bssid
, 1);
1081 sdata
->u
.mgd
.auth_transaction
= 4;
1084 static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data
*sdata
,
1085 struct ieee80211_mgmt
*mgmt
,
1088 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1089 u16 auth_alg
, auth_transaction
, status_code
;
1091 if (ifmgd
->state
!= IEEE80211_STA_MLME_AUTHENTICATE
)
1097 if (memcmp(ifmgd
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0)
1100 if (memcmp(ifmgd
->bssid
, mgmt
->bssid
, ETH_ALEN
) != 0)
1103 auth_alg
= le16_to_cpu(mgmt
->u
.auth
.auth_alg
);
1104 auth_transaction
= le16_to_cpu(mgmt
->u
.auth
.auth_transaction
);
1105 status_code
= le16_to_cpu(mgmt
->u
.auth
.status_code
);
1107 if (auth_alg
!= ifmgd
->auth_alg
||
1108 auth_transaction
!= ifmgd
->auth_transaction
)
1111 if (status_code
!= WLAN_STATUS_SUCCESS
) {
1112 if (status_code
== WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG
) {
1114 const int num_algs
= ARRAY_SIZE(algs
);
1116 algs
[0] = algs
[1] = algs
[2] = 0xff;
1117 if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_OPEN
)
1118 algs
[0] = WLAN_AUTH_OPEN
;
1119 if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_SHARED_KEY
)
1120 algs
[1] = WLAN_AUTH_SHARED_KEY
;
1121 if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_LEAP
)
1122 algs
[2] = WLAN_AUTH_LEAP
;
1123 if (ifmgd
->auth_alg
== WLAN_AUTH_OPEN
)
1125 else if (ifmgd
->auth_alg
== WLAN_AUTH_SHARED_KEY
)
1129 for (i
= 0; i
< num_algs
; i
++) {
1131 if (pos
>= num_algs
)
1133 if (algs
[pos
] == ifmgd
->auth_alg
||
1136 if (algs
[pos
] == WLAN_AUTH_SHARED_KEY
&&
1137 !ieee80211_sta_wep_configured(sdata
))
1139 ifmgd
->auth_alg
= algs
[pos
];
1146 switch (ifmgd
->auth_alg
) {
1147 case WLAN_AUTH_OPEN
:
1148 case WLAN_AUTH_LEAP
:
1150 ieee80211_auth_completed(sdata
);
1151 cfg80211_send_rx_auth(sdata
->dev
, (u8
*) mgmt
, len
);
1153 case WLAN_AUTH_SHARED_KEY
:
1154 if (ifmgd
->auth_transaction
== 4) {
1155 ieee80211_auth_completed(sdata
);
1156 cfg80211_send_rx_auth(sdata
->dev
, (u8
*) mgmt
, len
);
1158 ieee80211_auth_challenge(sdata
, mgmt
, len
);
1164 static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data
*sdata
,
1165 struct ieee80211_mgmt
*mgmt
,
1168 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1174 if (memcmp(ifmgd
->bssid
, mgmt
->sa
, ETH_ALEN
))
1177 reason_code
= le16_to_cpu(mgmt
->u
.deauth
.reason_code
);
1179 if (ifmgd
->flags
& IEEE80211_STA_AUTHENTICATED
)
1180 printk(KERN_DEBUG
"%s: deauthenticated (Reason: %u)\n",
1181 sdata
->dev
->name
, reason_code
);
1183 if (!(ifmgd
->flags
& IEEE80211_STA_EXT_SME
) &&
1184 (ifmgd
->state
== IEEE80211_STA_MLME_AUTHENTICATE
||
1185 ifmgd
->state
== IEEE80211_STA_MLME_ASSOCIATE
||
1186 ifmgd
->state
== IEEE80211_STA_MLME_ASSOCIATED
)) {
1187 ifmgd
->state
= IEEE80211_STA_MLME_DIRECT_PROBE
;
1188 mod_timer(&ifmgd
->timer
, jiffies
+
1189 IEEE80211_RETRY_AUTH_INTERVAL
);
1192 ieee80211_set_disassoc(sdata
, true, false, 0);
1193 ifmgd
->flags
&= ~IEEE80211_STA_AUTHENTICATED
;
1194 cfg80211_send_deauth(sdata
->dev
, (u8
*) mgmt
, len
);
1198 static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data
*sdata
,
1199 struct ieee80211_mgmt
*mgmt
,
1202 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1208 if (memcmp(ifmgd
->bssid
, mgmt
->sa
, ETH_ALEN
))
1211 reason_code
= le16_to_cpu(mgmt
->u
.disassoc
.reason_code
);
1213 if (ifmgd
->flags
& IEEE80211_STA_ASSOCIATED
)
1214 printk(KERN_DEBUG
"%s: disassociated (Reason: %u)\n",
1215 sdata
->dev
->name
, reason_code
);
1217 if (!(ifmgd
->flags
& IEEE80211_STA_EXT_SME
) &&
1218 ifmgd
->state
== IEEE80211_STA_MLME_ASSOCIATED
) {
1219 ifmgd
->state
= IEEE80211_STA_MLME_ASSOCIATE
;
1220 mod_timer(&ifmgd
->timer
, jiffies
+
1221 IEEE80211_RETRY_AUTH_INTERVAL
);
1224 ieee80211_set_disassoc(sdata
, false, false, reason_code
);
1225 cfg80211_send_disassoc(sdata
->dev
, (u8
*) mgmt
, len
);
1229 static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data
*sdata
,
1230 struct ieee80211_mgmt
*mgmt
,
1234 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1235 struct ieee80211_local
*local
= sdata
->local
;
1236 struct ieee80211_supported_band
*sband
;
1237 struct sta_info
*sta
;
1238 u32 rates
, basic_rates
;
1239 u16 capab_info
, status_code
, aid
;
1240 struct ieee802_11_elems elems
;
1241 struct ieee80211_bss_conf
*bss_conf
= &sdata
->vif
.bss_conf
;
1245 bool have_higher_than_11mbit
= false, newsta
= false;
1246 u16 ap_ht_cap_flags
;
1248 /* AssocResp and ReassocResp have identical structure, so process both
1249 * of them in this function. */
1251 if (ifmgd
->state
!= IEEE80211_STA_MLME_ASSOCIATE
)
1257 if (memcmp(ifmgd
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0)
1260 capab_info
= le16_to_cpu(mgmt
->u
.assoc_resp
.capab_info
);
1261 status_code
= le16_to_cpu(mgmt
->u
.assoc_resp
.status_code
);
1262 aid
= le16_to_cpu(mgmt
->u
.assoc_resp
.aid
);
1264 printk(KERN_DEBUG
"%s: RX %sssocResp from %pM (capab=0x%x "
1265 "status=%d aid=%d)\n",
1266 sdata
->dev
->name
, reassoc
? "Rea" : "A", mgmt
->sa
,
1267 capab_info
, status_code
, (u16
)(aid
& ~(BIT(15) | BIT(14))));
1269 pos
= mgmt
->u
.assoc_resp
.variable
;
1270 ieee802_11_parse_elems(pos
, len
- (pos
- (u8
*) mgmt
), &elems
);
1272 if (status_code
== WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY
&&
1273 elems
.timeout_int
&& elems
.timeout_int_len
== 5 &&
1274 elems
.timeout_int
[0] == WLAN_TIMEOUT_ASSOC_COMEBACK
) {
1276 tu
= get_unaligned_le32(elems
.timeout_int
+ 1);
1277 ms
= tu
* 1024 / 1000;
1278 printk(KERN_DEBUG
"%s: AP rejected association temporarily; "
1279 "comeback duration %u TU (%u ms)\n",
1280 sdata
->dev
->name
, tu
, ms
);
1281 if (ms
> IEEE80211_ASSOC_TIMEOUT
)
1282 mod_timer(&ifmgd
->timer
,
1283 jiffies
+ msecs_to_jiffies(ms
));
1287 if (status_code
!= WLAN_STATUS_SUCCESS
) {
1288 printk(KERN_DEBUG
"%s: AP denied association (code=%d)\n",
1289 sdata
->dev
->name
, status_code
);
1290 /* if this was a reassociation, ensure we try a "full"
1291 * association next time. This works around some broken APs
1292 * which do not correctly reject reassociation requests. */
1293 ifmgd
->flags
&= ~IEEE80211_STA_PREV_BSSID_SET
;
1297 if ((aid
& (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1298 printk(KERN_DEBUG
"%s: invalid aid value %d; bits 15:14 not "
1299 "set\n", sdata
->dev
->name
, aid
);
1300 aid
&= ~(BIT(15) | BIT(14));
1302 if (!elems
.supp_rates
) {
1303 printk(KERN_DEBUG
"%s: no SuppRates element in AssocResp\n",
1308 printk(KERN_DEBUG
"%s: associated\n", sdata
->dev
->name
);
1310 ifmgd
->ap_capab
= capab_info
;
1312 kfree(ifmgd
->assocresp_ies
);
1313 ifmgd
->assocresp_ies_len
= len
- (pos
- (u8
*) mgmt
);
1314 ifmgd
->assocresp_ies
= kmalloc(ifmgd
->assocresp_ies_len
, GFP_KERNEL
);
1315 if (ifmgd
->assocresp_ies
)
1316 memcpy(ifmgd
->assocresp_ies
, pos
, ifmgd
->assocresp_ies_len
);
1320 /* Add STA entry for the AP */
1321 sta
= sta_info_get(local
, ifmgd
->bssid
);
1325 sta
= sta_info_alloc(sdata
, ifmgd
->bssid
, GFP_ATOMIC
);
1327 printk(KERN_DEBUG
"%s: failed to alloc STA entry for"
1328 " the AP\n", sdata
->dev
->name
);
1333 /* update new sta with its last rx activity */
1334 sta
->last_rx
= jiffies
;
1338 * FIXME: Do we really need to update the sta_info's information here?
1339 * We already know about the AP (we found it in our list) so it
1340 * should already be filled with the right info, no?
1341 * As is stands, all this is racy because typically we assume
1342 * the information that is filled in here (except flags) doesn't
1343 * change while a STA structure is alive. As such, it should move
1344 * to between the sta_info_alloc() and sta_info_insert() above.
1347 set_sta_flags(sta
, WLAN_STA_AUTH
| WLAN_STA_ASSOC
| WLAN_STA_ASSOC_AP
|
1348 WLAN_STA_AUTHORIZED
);
1352 sband
= local
->hw
.wiphy
->bands
[local
->hw
.conf
.channel
->band
];
1354 for (i
= 0; i
< elems
.supp_rates_len
; i
++) {
1355 int rate
= (elems
.supp_rates
[i
] & 0x7f) * 5;
1356 bool is_basic
= !!(elems
.supp_rates
[i
] & 0x80);
1359 have_higher_than_11mbit
= true;
1361 for (j
= 0; j
< sband
->n_bitrates
; j
++) {
1362 if (sband
->bitrates
[j
].bitrate
== rate
) {
1365 basic_rates
|= BIT(j
);
1371 for (i
= 0; i
< elems
.ext_supp_rates_len
; i
++) {
1372 int rate
= (elems
.ext_supp_rates
[i
] & 0x7f) * 5;
1373 bool is_basic
= !!(elems
.ext_supp_rates
[i
] & 0x80);
1376 have_higher_than_11mbit
= true;
1378 for (j
= 0; j
< sband
->n_bitrates
; j
++) {
1379 if (sband
->bitrates
[j
].bitrate
== rate
) {
1382 basic_rates
|= BIT(j
);
1388 sta
->sta
.supp_rates
[local
->hw
.conf
.channel
->band
] = rates
;
1389 sdata
->vif
.bss_conf
.basic_rates
= basic_rates
;
1391 /* cf. IEEE 802.11 9.2.12 */
1392 if (local
->hw
.conf
.channel
->band
== IEEE80211_BAND_2GHZ
&&
1393 have_higher_than_11mbit
)
1394 sdata
->flags
|= IEEE80211_SDATA_OPERATING_GMODE
;
1396 sdata
->flags
&= ~IEEE80211_SDATA_OPERATING_GMODE
;
1398 /* If TKIP/WEP is used, no need to parse AP's HT capabilities */
1399 if (elems
.ht_cap_elem
&& !(ifmgd
->flags
& IEEE80211_STA_TKIP_WEP_USED
))
1400 ieee80211_ht_cap_ie_to_sta_ht_cap(sband
,
1401 elems
.ht_cap_elem
, &sta
->sta
.ht_cap
);
1403 ap_ht_cap_flags
= sta
->sta
.ht_cap
.cap
;
1405 rate_control_rate_init(sta
);
1407 if (ifmgd
->flags
& IEEE80211_STA_MFP_ENABLED
)
1408 set_sta_flags(sta
, WLAN_STA_MFP
);
1410 if (elems
.wmm_param
)
1411 set_sta_flags(sta
, WLAN_STA_WME
);
1414 int err
= sta_info_insert(sta
);
1416 printk(KERN_DEBUG
"%s: failed to insert STA entry for"
1417 " the AP (error %d)\n", sdata
->dev
->name
, err
);
1425 if (elems
.wmm_param
)
1426 ieee80211_sta_wmm_params(local
, ifmgd
, elems
.wmm_param
,
1427 elems
.wmm_param_len
);
1429 if (elems
.ht_info_elem
&& elems
.wmm_param
&&
1430 (ifmgd
->flags
& IEEE80211_STA_WMM_ENABLED
) &&
1431 !(ifmgd
->flags
& IEEE80211_STA_TKIP_WEP_USED
))
1432 changed
|= ieee80211_enable_ht(sdata
, elems
.ht_info_elem
,
1435 /* set AID and assoc capability,
1436 * ieee80211_set_associated() will tell the driver */
1437 bss_conf
->aid
= aid
;
1438 bss_conf
->assoc_capability
= capab_info
;
1439 ieee80211_set_associated(sdata
, changed
);
1442 * initialise the time of last beacon to be the association time,
1443 * otherwise beacon loss check will trigger immediately
1445 ifmgd
->last_beacon
= jiffies
;
1447 ieee80211_associated(sdata
);
1448 cfg80211_send_rx_assoc(sdata
->dev
, (u8
*) mgmt
, len
);
1452 static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data
*sdata
,
1453 struct ieee80211_mgmt
*mgmt
,
1455 struct ieee80211_rx_status
*rx_status
,
1456 struct ieee802_11_elems
*elems
,
1459 struct ieee80211_local
*local
= sdata
->local
;
1461 struct ieee80211_bss
*bss
;
1462 struct ieee80211_channel
*channel
;
1464 if (elems
->ds_params
&& elems
->ds_params_len
== 1)
1465 freq
= ieee80211_channel_to_frequency(elems
->ds_params
[0]);
1467 freq
= rx_status
->freq
;
1469 channel
= ieee80211_get_channel(local
->hw
.wiphy
, freq
);
1471 if (!channel
|| channel
->flags
& IEEE80211_CHAN_DISABLED
)
1474 bss
= ieee80211_bss_info_update(local
, rx_status
, mgmt
, len
, elems
,
1479 if (elems
->ch_switch_elem
&& (elems
->ch_switch_elem_len
== 3) &&
1480 (memcmp(mgmt
->bssid
, sdata
->u
.mgd
.bssid
, ETH_ALEN
) == 0)) {
1481 struct ieee80211_channel_sw_ie
*sw_elem
=
1482 (struct ieee80211_channel_sw_ie
*)elems
->ch_switch_elem
;
1483 ieee80211_process_chanswitch(sdata
, sw_elem
, bss
);
1486 ieee80211_rx_bss_put(local
, bss
);
1490 static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data
*sdata
,
1491 struct ieee80211_mgmt
*mgmt
,
1493 struct ieee80211_rx_status
*rx_status
)
1495 struct ieee80211_if_managed
*ifmgd
;
1497 struct ieee802_11_elems elems
;
1499 ifmgd
= &sdata
->u
.mgd
;
1501 if (memcmp(mgmt
->da
, sdata
->dev
->dev_addr
, ETH_ALEN
))
1502 return; /* ignore ProbeResp to foreign address */
1504 baselen
= (u8
*) mgmt
->u
.probe_resp
.variable
- (u8
*) mgmt
;
1508 ieee802_11_parse_elems(mgmt
->u
.probe_resp
.variable
, len
- baselen
,
1511 ieee80211_rx_bss_info(sdata
, mgmt
, len
, rx_status
, &elems
, false);
1513 /* direct probe may be part of the association flow */
1514 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE
,
1516 printk(KERN_DEBUG
"%s direct probe responded\n",
1518 ieee80211_authenticate(sdata
);
1521 if (ifmgd
->flags
& IEEE80211_STA_PROBEREQ_POLL
)
1522 ifmgd
->flags
&= ~IEEE80211_STA_PROBEREQ_POLL
;
1525 static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data
*sdata
,
1526 struct ieee80211_mgmt
*mgmt
,
1528 struct ieee80211_rx_status
*rx_status
)
1530 struct ieee80211_if_managed
*ifmgd
;
1532 struct ieee802_11_elems elems
;
1533 struct ieee80211_local
*local
= sdata
->local
;
1535 bool erp_valid
, directed_tim
;
1538 /* Process beacon from the current BSS */
1539 baselen
= (u8
*) mgmt
->u
.beacon
.variable
- (u8
*) mgmt
;
1543 ieee802_11_parse_elems(mgmt
->u
.beacon
.variable
, len
- baselen
, &elems
);
1545 ieee80211_rx_bss_info(sdata
, mgmt
, len
, rx_status
, &elems
, true);
1547 if (sdata
->vif
.type
!= NL80211_IFTYPE_STATION
)
1550 ifmgd
= &sdata
->u
.mgd
;
1552 if (!(ifmgd
->flags
& IEEE80211_STA_ASSOCIATED
) ||
1553 memcmp(ifmgd
->bssid
, mgmt
->bssid
, ETH_ALEN
) != 0)
1556 if (rx_status
->freq
!= local
->hw
.conf
.channel
->center_freq
)
1559 ieee80211_sta_wmm_params(local
, ifmgd
, elems
.wmm_param
,
1560 elems
.wmm_param_len
);
1562 if (local
->hw
.flags
& IEEE80211_HW_PS_NULLFUNC_STACK
) {
1563 directed_tim
= ieee80211_check_tim(&elems
, ifmgd
->aid
);
1566 if (local
->hw
.conf
.dynamic_ps_timeout
> 0) {
1567 local
->hw
.conf
.flags
&= ~IEEE80211_CONF_PS
;
1568 ieee80211_hw_config(local
,
1569 IEEE80211_CONF_CHANGE_PS
);
1570 ieee80211_send_nullfunc(local
, sdata
, 0);
1572 local
->pspolling
= true;
1575 * Here is assumed that the driver will be
1576 * able to send ps-poll frame and receive a
1577 * response even though power save mode is
1578 * enabled, but some drivers might require
1579 * to disable power save here. This needs
1580 * to be investigated.
1582 ieee80211_send_pspoll(local
, sdata
);
1587 if (elems
.erp_info
&& elems
.erp_info_len
>= 1) {
1589 erp_value
= elems
.erp_info
[0];
1593 changed
|= ieee80211_handle_bss_capability(sdata
,
1594 le16_to_cpu(mgmt
->u
.beacon
.capab_info
),
1595 erp_valid
, erp_value
);
1598 if (elems
.ht_cap_elem
&& elems
.ht_info_elem
&& elems
.wmm_param
&&
1599 !(ifmgd
->flags
& IEEE80211_STA_TKIP_WEP_USED
)) {
1600 struct sta_info
*sta
;
1601 struct ieee80211_supported_band
*sband
;
1602 u16 ap_ht_cap_flags
;
1606 sta
= sta_info_get(local
, ifmgd
->bssid
);
1612 sband
= local
->hw
.wiphy
->bands
[local
->hw
.conf
.channel
->band
];
1614 ieee80211_ht_cap_ie_to_sta_ht_cap(sband
,
1615 elems
.ht_cap_elem
, &sta
->sta
.ht_cap
);
1617 ap_ht_cap_flags
= sta
->sta
.ht_cap
.cap
;
1621 changed
|= ieee80211_enable_ht(sdata
, elems
.ht_info_elem
,
1625 if (elems
.country_elem
) {
1626 /* Note we are only reviewing this on beacons
1627 * for the BSSID we are associated to */
1628 regulatory_hint_11d(local
->hw
.wiphy
,
1629 elems
.country_elem
, elems
.country_elem_len
);
1631 /* TODO: IBSS also needs this */
1632 if (elems
.pwr_constr_elem
)
1633 ieee80211_handle_pwr_constr(sdata
,
1634 le16_to_cpu(mgmt
->u
.probe_resp
.capab_info
),
1635 elems
.pwr_constr_elem
,
1636 elems
.pwr_constr_elem_len
);
1639 ieee80211_bss_info_change_notify(sdata
, changed
);
1642 ieee80211_rx_result
ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data
*sdata
,
1643 struct sk_buff
*skb
,
1644 struct ieee80211_rx_status
*rx_status
)
1646 struct ieee80211_local
*local
= sdata
->local
;
1647 struct ieee80211_mgmt
*mgmt
;
1651 return RX_DROP_MONITOR
;
1653 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
1654 fc
= le16_to_cpu(mgmt
->frame_control
);
1656 switch (fc
& IEEE80211_FCTL_STYPE
) {
1657 case IEEE80211_STYPE_PROBE_REQ
:
1658 case IEEE80211_STYPE_PROBE_RESP
:
1659 case IEEE80211_STYPE_BEACON
:
1660 memcpy(skb
->cb
, rx_status
, sizeof(*rx_status
));
1661 case IEEE80211_STYPE_AUTH
:
1662 case IEEE80211_STYPE_ASSOC_RESP
:
1663 case IEEE80211_STYPE_REASSOC_RESP
:
1664 case IEEE80211_STYPE_DEAUTH
:
1665 case IEEE80211_STYPE_DISASSOC
:
1666 skb_queue_tail(&sdata
->u
.mgd
.skb_queue
, skb
);
1667 queue_work(local
->hw
.workqueue
, &sdata
->u
.mgd
.work
);
1671 return RX_DROP_MONITOR
;
1674 static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data
*sdata
,
1675 struct sk_buff
*skb
)
1677 struct ieee80211_rx_status
*rx_status
;
1678 struct ieee80211_mgmt
*mgmt
;
1681 rx_status
= (struct ieee80211_rx_status
*) skb
->cb
;
1682 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
1683 fc
= le16_to_cpu(mgmt
->frame_control
);
1685 switch (fc
& IEEE80211_FCTL_STYPE
) {
1686 case IEEE80211_STYPE_PROBE_RESP
:
1687 ieee80211_rx_mgmt_probe_resp(sdata
, mgmt
, skb
->len
,
1690 case IEEE80211_STYPE_BEACON
:
1691 ieee80211_rx_mgmt_beacon(sdata
, mgmt
, skb
->len
,
1694 case IEEE80211_STYPE_AUTH
:
1695 ieee80211_rx_mgmt_auth(sdata
, mgmt
, skb
->len
);
1697 case IEEE80211_STYPE_ASSOC_RESP
:
1698 ieee80211_rx_mgmt_assoc_resp(sdata
, mgmt
, skb
->len
, 0);
1700 case IEEE80211_STYPE_REASSOC_RESP
:
1701 ieee80211_rx_mgmt_assoc_resp(sdata
, mgmt
, skb
->len
, 1);
1703 case IEEE80211_STYPE_DEAUTH
:
1704 ieee80211_rx_mgmt_deauth(sdata
, mgmt
, skb
->len
);
1706 case IEEE80211_STYPE_DISASSOC
:
1707 ieee80211_rx_mgmt_disassoc(sdata
, mgmt
, skb
->len
);
1714 static void ieee80211_sta_timer(unsigned long data
)
1716 struct ieee80211_sub_if_data
*sdata
=
1717 (struct ieee80211_sub_if_data
*) data
;
1718 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1719 struct ieee80211_local
*local
= sdata
->local
;
1721 set_bit(IEEE80211_STA_REQ_RUN
, &ifmgd
->request
);
1722 queue_work(local
->hw
.workqueue
, &ifmgd
->work
);
1725 static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data
*sdata
)
1727 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1728 struct ieee80211_local
*local
= sdata
->local
;
1730 if (local
->ops
->reset_tsf
) {
1731 /* Reset own TSF to allow time synchronization work. */
1732 local
->ops
->reset_tsf(local_to_hw(local
));
1735 ifmgd
->wmm_last_param_set
= -1; /* allow any WMM update */
1738 if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_OPEN
)
1739 ifmgd
->auth_alg
= WLAN_AUTH_OPEN
;
1740 else if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_SHARED_KEY
)
1741 ifmgd
->auth_alg
= WLAN_AUTH_SHARED_KEY
;
1742 else if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_LEAP
)
1743 ifmgd
->auth_alg
= WLAN_AUTH_LEAP
;
1744 else if (ifmgd
->auth_algs
& IEEE80211_AUTH_ALG_FT
)
1745 ifmgd
->auth_alg
= WLAN_AUTH_FT
;
1747 ifmgd
->auth_alg
= WLAN_AUTH_OPEN
;
1748 ifmgd
->auth_transaction
= -1;
1749 ifmgd
->flags
&= ~IEEE80211_STA_ASSOCIATED
;
1750 ifmgd
->assoc_scan_tries
= 0;
1751 ifmgd
->direct_probe_tries
= 0;
1752 ifmgd
->auth_tries
= 0;
1753 ifmgd
->assoc_tries
= 0;
1754 netif_tx_stop_all_queues(sdata
->dev
);
1755 netif_carrier_off(sdata
->dev
);
1758 static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data
*sdata
)
1760 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1761 struct ieee80211_local
*local
= sdata
->local
;
1762 struct ieee80211_bss
*bss
;
1763 u8
*bssid
= ifmgd
->bssid
, *ssid
= ifmgd
->ssid
;
1764 u8 ssid_len
= ifmgd
->ssid_len
;
1765 u16 capa_mask
= WLAN_CAPABILITY_ESS
;
1766 u16 capa_val
= WLAN_CAPABILITY_ESS
;
1767 struct ieee80211_channel
*chan
= local
->oper_channel
;
1769 if (!(ifmgd
->flags
& IEEE80211_STA_EXT_SME
) &&
1770 ifmgd
->flags
& (IEEE80211_STA_AUTO_SSID_SEL
|
1771 IEEE80211_STA_AUTO_BSSID_SEL
|
1772 IEEE80211_STA_AUTO_CHANNEL_SEL
)) {
1773 capa_mask
|= WLAN_CAPABILITY_PRIVACY
;
1774 if (sdata
->default_key
)
1775 capa_val
|= WLAN_CAPABILITY_PRIVACY
;
1778 if (ifmgd
->flags
& IEEE80211_STA_AUTO_CHANNEL_SEL
)
1781 if (ifmgd
->flags
& IEEE80211_STA_AUTO_BSSID_SEL
)
1784 if (ifmgd
->flags
& IEEE80211_STA_AUTO_SSID_SEL
) {
1789 bss
= (void *)cfg80211_get_bss(local
->hw
.wiphy
, chan
,
1790 bssid
, ssid
, ssid_len
,
1791 capa_mask
, capa_val
);
1794 ieee80211_set_freq(sdata
, bss
->cbss
.channel
->center_freq
);
1795 if (!(ifmgd
->flags
& IEEE80211_STA_SSID_SET
))
1796 ieee80211_sta_set_ssid(sdata
, bss
->ssid
,
1798 ieee80211_sta_set_bssid(sdata
, bss
->cbss
.bssid
);
1799 ieee80211_sta_def_wmm_params(sdata
, bss
->supp_rates_len
,
1801 if (sdata
->u
.mgd
.mfp
== IEEE80211_MFP_REQUIRED
)
1802 sdata
->u
.mgd
.flags
|= IEEE80211_STA_MFP_ENABLED
;
1804 sdata
->u
.mgd
.flags
&= ~IEEE80211_STA_MFP_ENABLED
;
1806 /* Send out direct probe if no probe resp was received or
1807 * the one we have is outdated
1809 if (!bss
->last_probe_resp
||
1810 time_after(jiffies
, bss
->last_probe_resp
1811 + IEEE80211_SCAN_RESULT_EXPIRE
))
1812 ifmgd
->state
= IEEE80211_STA_MLME_DIRECT_PROBE
;
1814 ifmgd
->state
= IEEE80211_STA_MLME_AUTHENTICATE
;
1816 ieee80211_rx_bss_put(local
, bss
);
1817 ieee80211_sta_reset_auth(sdata
);
1820 if (ifmgd
->assoc_scan_tries
< IEEE80211_ASSOC_SCANS_MAX_TRIES
) {
1821 ifmgd
->assoc_scan_tries
++;
1822 /* XXX maybe racy? */
1823 if (local
->scan_req
)
1825 memcpy(local
->int_scan_req
.ssids
[0].ssid
,
1826 ifmgd
->ssid
, IEEE80211_MAX_SSID_LEN
);
1827 if (ifmgd
->flags
& IEEE80211_STA_AUTO_SSID_SEL
)
1828 local
->int_scan_req
.ssids
[0].ssid_len
= 0;
1830 local
->int_scan_req
.ssids
[0].ssid_len
= ifmgd
->ssid_len
;
1832 if (ieee80211_start_scan(sdata
, &local
->int_scan_req
))
1833 ieee80211_scan_failed(local
);
1835 ifmgd
->state
= IEEE80211_STA_MLME_AUTHENTICATE
;
1836 set_bit(IEEE80211_STA_REQ_AUTH
, &ifmgd
->request
);
1838 ifmgd
->assoc_scan_tries
= 0;
1839 ifmgd
->state
= IEEE80211_STA_MLME_DISABLED
;
1846 static void ieee80211_sta_work(struct work_struct
*work
)
1848 struct ieee80211_sub_if_data
*sdata
=
1849 container_of(work
, struct ieee80211_sub_if_data
, u
.mgd
.work
);
1850 struct ieee80211_local
*local
= sdata
->local
;
1851 struct ieee80211_if_managed
*ifmgd
;
1852 struct sk_buff
*skb
;
1854 if (!netif_running(sdata
->dev
))
1857 if (local
->sw_scanning
|| local
->hw_scanning
)
1860 if (WARN_ON(sdata
->vif
.type
!= NL80211_IFTYPE_STATION
))
1862 ifmgd
= &sdata
->u
.mgd
;
1864 while ((skb
= skb_dequeue(&ifmgd
->skb_queue
)))
1865 ieee80211_sta_rx_queued_mgmt(sdata
, skb
);
1867 if (ifmgd
->state
!= IEEE80211_STA_MLME_DIRECT_PROBE
&&
1868 ifmgd
->state
!= IEEE80211_STA_MLME_AUTHENTICATE
&&
1869 ifmgd
->state
!= IEEE80211_STA_MLME_ASSOCIATE
&&
1870 test_and_clear_bit(IEEE80211_STA_REQ_SCAN
, &ifmgd
->request
)) {
1872 * The call to ieee80211_start_scan can fail but ieee80211_request_scan
1873 * (which queued ieee80211_sta_work) did not return an error. Thus, call
1874 * ieee80211_scan_failed here if ieee80211_start_scan fails in order to
1875 * notify the scan requester.
1877 if (ieee80211_start_scan(sdata
, local
->scan_req
))
1878 ieee80211_scan_failed(local
);
1882 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH
, &ifmgd
->request
)) {
1883 if (ieee80211_sta_config_auth(sdata
))
1885 clear_bit(IEEE80211_STA_REQ_RUN
, &ifmgd
->request
);
1886 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN
, &ifmgd
->request
))
1889 switch (ifmgd
->state
) {
1890 case IEEE80211_STA_MLME_DISABLED
:
1892 case IEEE80211_STA_MLME_DIRECT_PROBE
:
1893 ieee80211_direct_probe(sdata
);
1895 case IEEE80211_STA_MLME_AUTHENTICATE
:
1896 ieee80211_authenticate(sdata
);
1898 case IEEE80211_STA_MLME_ASSOCIATE
:
1899 ieee80211_associate(sdata
);
1901 case IEEE80211_STA_MLME_ASSOCIATED
:
1902 ieee80211_associated(sdata
);
1909 if (ieee80211_privacy_mismatch(sdata
)) {
1910 printk(KERN_DEBUG
"%s: privacy configuration mismatch and "
1911 "mixed-cell disabled - disassociate\n", sdata
->dev
->name
);
1913 ieee80211_set_disassoc(sdata
, false, true,
1914 WLAN_REASON_UNSPECIFIED
);
1918 static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data
*sdata
)
1920 if (sdata
->vif
.type
== NL80211_IFTYPE_STATION
) {
1922 * Need to update last_beacon to avoid beacon loss
1925 sdata
->u
.mgd
.last_beacon
= jiffies
;
1928 queue_work(sdata
->local
->hw
.workqueue
,
1929 &sdata
->u
.mgd
.work
);
1933 /* interface setup */
1934 void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data
*sdata
)
1936 struct ieee80211_if_managed
*ifmgd
;
1938 ifmgd
= &sdata
->u
.mgd
;
1939 INIT_WORK(&ifmgd
->work
, ieee80211_sta_work
);
1940 INIT_WORK(&ifmgd
->chswitch_work
, ieee80211_chswitch_work
);
1941 INIT_WORK(&ifmgd
->beacon_loss_work
, ieee80211_beacon_loss_work
);
1942 setup_timer(&ifmgd
->timer
, ieee80211_sta_timer
,
1943 (unsigned long) sdata
);
1944 setup_timer(&ifmgd
->chswitch_timer
, ieee80211_chswitch_timer
,
1945 (unsigned long) sdata
);
1946 skb_queue_head_init(&ifmgd
->skb_queue
);
1948 ifmgd
->capab
= WLAN_CAPABILITY_ESS
;
1949 ifmgd
->auth_algs
= IEEE80211_AUTH_ALG_OPEN
|
1950 IEEE80211_AUTH_ALG_SHARED_KEY
;
1951 ifmgd
->flags
|= IEEE80211_STA_CREATE_IBSS
|
1952 IEEE80211_STA_AUTO_BSSID_SEL
|
1953 IEEE80211_STA_AUTO_CHANNEL_SEL
;
1954 if (sdata
->local
->hw
.queues
>= 4)
1955 ifmgd
->flags
|= IEEE80211_STA_WMM_ENABLED
;
1958 /* configuration hooks */
1959 void ieee80211_sta_req_auth(struct ieee80211_sub_if_data
*sdata
)
1961 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1962 struct ieee80211_local
*local
= sdata
->local
;
1964 if (WARN_ON(sdata
->vif
.type
!= NL80211_IFTYPE_STATION
))
1967 if ((ifmgd
->flags
& (IEEE80211_STA_BSSID_SET
|
1968 IEEE80211_STA_AUTO_BSSID_SEL
)) &&
1969 (ifmgd
->flags
& (IEEE80211_STA_SSID_SET
|
1970 IEEE80211_STA_AUTO_SSID_SEL
))) {
1972 if (ifmgd
->state
== IEEE80211_STA_MLME_ASSOCIATED
)
1973 ieee80211_set_disassoc(sdata
, true, true,
1974 WLAN_REASON_DEAUTH_LEAVING
);
1976 if (!(ifmgd
->flags
& IEEE80211_STA_EXT_SME
) ||
1977 ifmgd
->state
!= IEEE80211_STA_MLME_ASSOCIATE
)
1978 set_bit(IEEE80211_STA_REQ_AUTH
, &ifmgd
->request
);
1979 else if (ifmgd
->flags
& IEEE80211_STA_EXT_SME
)
1980 set_bit(IEEE80211_STA_REQ_RUN
, &ifmgd
->request
);
1981 queue_work(local
->hw
.workqueue
, &ifmgd
->work
);
1985 int ieee80211_sta_commit(struct ieee80211_sub_if_data
*sdata
)
1987 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
1989 if (ifmgd
->ssid_len
)
1990 ifmgd
->flags
|= IEEE80211_STA_SSID_SET
;
1992 ifmgd
->flags
&= ~IEEE80211_STA_SSID_SET
;
1997 int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data
*sdata
, char *ssid
, size_t len
)
1999 struct ieee80211_if_managed
*ifmgd
;
2001 if (len
> IEEE80211_MAX_SSID_LEN
)
2004 ifmgd
= &sdata
->u
.mgd
;
2006 if (ifmgd
->ssid_len
!= len
|| memcmp(ifmgd
->ssid
, ssid
, len
) != 0) {
2008 * Do not use reassociation if SSID is changed (different ESS).
2010 ifmgd
->flags
&= ~IEEE80211_STA_PREV_BSSID_SET
;
2011 memset(ifmgd
->ssid
, 0, sizeof(ifmgd
->ssid
));
2012 memcpy(ifmgd
->ssid
, ssid
, len
);
2013 ifmgd
->ssid_len
= len
;
2016 return ieee80211_sta_commit(sdata
);
2019 int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data
*sdata
, char *ssid
, size_t *len
)
2021 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
2022 memcpy(ssid
, ifmgd
->ssid
, ifmgd
->ssid_len
);
2023 *len
= ifmgd
->ssid_len
;
2027 int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data
*sdata
, u8
*bssid
)
2029 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
2031 if (is_valid_ether_addr(bssid
)) {
2032 memcpy(ifmgd
->bssid
, bssid
, ETH_ALEN
);
2033 ifmgd
->flags
|= IEEE80211_STA_BSSID_SET
;
2035 memset(ifmgd
->bssid
, 0, ETH_ALEN
);
2036 ifmgd
->flags
&= ~IEEE80211_STA_BSSID_SET
;
2039 if (netif_running(sdata
->dev
)) {
2040 if (ieee80211_if_config(sdata
, IEEE80211_IFCC_BSSID
)) {
2041 printk(KERN_DEBUG
"%s: Failed to config new BSSID to "
2042 "the low-level driver\n", sdata
->dev
->name
);
2046 return ieee80211_sta_commit(sdata
);
2049 int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data
*sdata
,
2050 const char *ie
, size_t len
)
2052 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
2054 kfree(ifmgd
->extra_ie
);
2056 ifmgd
->extra_ie
= NULL
;
2057 ifmgd
->extra_ie_len
= 0;
2060 ifmgd
->extra_ie
= kmalloc(len
, GFP_KERNEL
);
2061 if (!ifmgd
->extra_ie
) {
2062 ifmgd
->extra_ie_len
= 0;
2065 memcpy(ifmgd
->extra_ie
, ie
, len
);
2066 ifmgd
->extra_ie_len
= len
;
2070 int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data
*sdata
, u16 reason
)
2072 printk(KERN_DEBUG
"%s: deauthenticating by local choice (reason=%d)\n",
2073 sdata
->dev
->name
, reason
);
2075 if (sdata
->vif
.type
!= NL80211_IFTYPE_STATION
)
2078 ieee80211_set_disassoc(sdata
, true, true, reason
);
2082 int ieee80211_sta_disassociate(struct ieee80211_sub_if_data
*sdata
, u16 reason
)
2084 struct ieee80211_if_managed
*ifmgd
= &sdata
->u
.mgd
;
2086 printk(KERN_DEBUG
"%s: disassociating by local choice (reason=%d)\n",
2087 sdata
->dev
->name
, reason
);
2089 if (sdata
->vif
.type
!= NL80211_IFTYPE_STATION
)
2092 if (!(ifmgd
->flags
& IEEE80211_STA_ASSOCIATED
))
2095 ieee80211_set_disassoc(sdata
, false, true, reason
);
2099 /* scan finished notification */
2100 void ieee80211_mlme_notify_scan_completed(struct ieee80211_local
*local
)
2102 struct ieee80211_sub_if_data
*sdata
= local
->scan_sdata
;
2104 /* Restart STA timers */
2106 list_for_each_entry_rcu(sdata
, &local
->interfaces
, list
)
2107 ieee80211_restart_sta_timer(sdata
);
2111 void ieee80211_dynamic_ps_disable_work(struct work_struct
*work
)
2113 struct ieee80211_local
*local
=
2114 container_of(work
, struct ieee80211_local
,
2115 dynamic_ps_disable_work
);
2117 if (local
->hw
.conf
.flags
& IEEE80211_CONF_PS
) {
2118 local
->hw
.conf
.flags
&= ~IEEE80211_CONF_PS
;
2119 ieee80211_hw_config(local
, IEEE80211_CONF_CHANGE_PS
);
2122 ieee80211_wake_queues_by_reason(&local
->hw
,
2123 IEEE80211_QUEUE_STOP_REASON_PS
);
2126 void ieee80211_dynamic_ps_enable_work(struct work_struct
*work
)
2128 struct ieee80211_local
*local
=
2129 container_of(work
, struct ieee80211_local
,
2130 dynamic_ps_enable_work
);
2131 /* XXX: using scan_sdata is completely broken! */
2132 struct ieee80211_sub_if_data
*sdata
= local
->scan_sdata
;
2134 if (local
->hw
.conf
.flags
& IEEE80211_CONF_PS
)
2137 if (local
->hw
.flags
& IEEE80211_HW_PS_NULLFUNC_STACK
&& sdata
)
2138 ieee80211_send_nullfunc(local
, sdata
, 1);
2140 local
->hw
.conf
.flags
|= IEEE80211_CONF_PS
;
2141 ieee80211_hw_config(local
, IEEE80211_CONF_CHANGE_PS
);
2144 void ieee80211_dynamic_ps_timer(unsigned long data
)
2146 struct ieee80211_local
*local
= (void *) data
;
2148 queue_work(local
->hw
.workqueue
, &local
->dynamic_ps_enable_work
);
2151 void ieee80211_send_nullfunc(struct ieee80211_local
*local
,
2152 struct ieee80211_sub_if_data
*sdata
,
2155 struct sk_buff
*skb
;
2156 struct ieee80211_hdr
*nullfunc
;
2159 if (WARN_ON(sdata
->vif
.type
!= NL80211_IFTYPE_STATION
))
2162 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ 24);
2164 printk(KERN_DEBUG
"%s: failed to allocate buffer for nullfunc "
2165 "frame\n", sdata
->dev
->name
);
2168 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
2170 nullfunc
= (struct ieee80211_hdr
*) skb_put(skb
, 24);
2171 memset(nullfunc
, 0, 24);
2172 fc
= cpu_to_le16(IEEE80211_FTYPE_DATA
| IEEE80211_STYPE_NULLFUNC
|
2173 IEEE80211_FCTL_TODS
);
2175 fc
|= cpu_to_le16(IEEE80211_FCTL_PM
);
2176 nullfunc
->frame_control
= fc
;
2177 memcpy(nullfunc
->addr1
, sdata
->u
.mgd
.bssid
, ETH_ALEN
);
2178 memcpy(nullfunc
->addr2
, sdata
->dev
->dev_addr
, ETH_ALEN
);
2179 memcpy(nullfunc
->addr3
, sdata
->u
.mgd
.bssid
, ETH_ALEN
);
2181 ieee80211_tx_skb(sdata
, skb
, 0);