2 * Scanning implementation
4 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
5 * Copyright 2004, Instant802 Networks, Inc.
6 * Copyright 2005, Devicescape Software, Inc.
7 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
16 * order BSS list by RSSI(?) ("quality of AP")
17 * scan result table filtering (by capability (privacy, IBSS/BSS, WPA/RSN IE,
21 #include <linux/wireless.h>
22 #include <linux/if_arp.h>
23 #include <net/mac80211.h>
24 #include <net/iw_handler.h>
26 #include "ieee80211_i.h"
29 #define IEEE80211_PROBE_DELAY (HZ / 33)
30 #define IEEE80211_CHANNEL_TIME (HZ / 33)
31 #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 5)
33 void ieee80211_rx_bss_list_init(struct ieee80211_local
*local
)
35 spin_lock_init(&local
->sta_bss_lock
);
36 INIT_LIST_HEAD(&local
->sta_bss_list
);
39 void ieee80211_rx_bss_list_deinit(struct ieee80211_local
*local
)
41 struct ieee80211_sta_bss
*bss
, *tmp
;
43 list_for_each_entry_safe(bss
, tmp
, &local
->sta_bss_list
, list
)
44 ieee80211_rx_bss_put(local
, bss
);
47 struct ieee80211_sta_bss
*
48 ieee80211_rx_bss_get(struct ieee80211_local
*local
, u8
*bssid
, int freq
,
49 u8
*ssid
, u8 ssid_len
)
51 struct ieee80211_sta_bss
*bss
;
53 spin_lock_bh(&local
->sta_bss_lock
);
54 bss
= local
->sta_bss_hash
[STA_HASH(bssid
)];
56 if (!bss_mesh_cfg(bss
) &&
57 !memcmp(bss
->bssid
, bssid
, ETH_ALEN
) &&
59 bss
->ssid_len
== ssid_len
&&
60 (ssid_len
== 0 || !memcmp(bss
->ssid
, ssid
, ssid_len
))) {
61 atomic_inc(&bss
->users
);
66 spin_unlock_bh(&local
->sta_bss_lock
);
70 /* Caller must hold local->sta_bss_lock */
71 static void __ieee80211_rx_bss_hash_add(struct ieee80211_local
*local
,
72 struct ieee80211_sta_bss
*bss
)
76 if (bss_mesh_cfg(bss
))
77 hash_idx
= mesh_id_hash(bss_mesh_id(bss
),
78 bss_mesh_id_len(bss
));
80 hash_idx
= STA_HASH(bss
->bssid
);
82 bss
->hnext
= local
->sta_bss_hash
[hash_idx
];
83 local
->sta_bss_hash
[hash_idx
] = bss
;
86 /* Caller must hold local->sta_bss_lock */
87 static void __ieee80211_rx_bss_hash_del(struct ieee80211_local
*local
,
88 struct ieee80211_sta_bss
*bss
)
90 struct ieee80211_sta_bss
*b
, *prev
= NULL
;
91 b
= local
->sta_bss_hash
[STA_HASH(bss
->bssid
)];
95 local
->sta_bss_hash
[STA_HASH(bss
->bssid
)] =
98 prev
->hnext
= bss
->hnext
;
106 struct ieee80211_sta_bss
*
107 ieee80211_rx_bss_add(struct ieee80211_local
*local
, u8
*bssid
, int freq
,
108 u8
*ssid
, u8 ssid_len
)
110 struct ieee80211_sta_bss
*bss
;
112 bss
= kzalloc(sizeof(*bss
), GFP_ATOMIC
);
115 atomic_set(&bss
->users
, 2);
116 memcpy(bss
->bssid
, bssid
, ETH_ALEN
);
118 if (ssid
&& ssid_len
<= IEEE80211_MAX_SSID_LEN
) {
119 memcpy(bss
->ssid
, ssid
, ssid_len
);
120 bss
->ssid_len
= ssid_len
;
123 spin_lock_bh(&local
->sta_bss_lock
);
124 /* TODO: order by RSSI? */
125 list_add_tail(&bss
->list
, &local
->sta_bss_list
);
126 __ieee80211_rx_bss_hash_add(local
, bss
);
127 spin_unlock_bh(&local
->sta_bss_lock
);
131 #ifdef CONFIG_MAC80211_MESH
132 static struct ieee80211_sta_bss
*
133 ieee80211_rx_mesh_bss_get(struct ieee80211_local
*local
, u8
*mesh_id
, int mesh_id_len
,
134 u8
*mesh_cfg
, int freq
)
136 struct ieee80211_sta_bss
*bss
;
138 spin_lock_bh(&local
->sta_bss_lock
);
139 bss
= local
->sta_bss_hash
[mesh_id_hash(mesh_id
, mesh_id_len
)];
141 if (bss_mesh_cfg(bss
) &&
142 !memcmp(bss_mesh_cfg(bss
), mesh_cfg
, MESH_CFG_CMP_LEN
) &&
144 mesh_id_len
== bss
->mesh_id_len
&&
145 (mesh_id_len
== 0 || !memcmp(bss
->mesh_id
, mesh_id
,
147 atomic_inc(&bss
->users
);
152 spin_unlock_bh(&local
->sta_bss_lock
);
156 static struct ieee80211_sta_bss
*
157 ieee80211_rx_mesh_bss_add(struct ieee80211_local
*local
, u8
*mesh_id
, int mesh_id_len
,
158 u8
*mesh_cfg
, int mesh_config_len
, int freq
)
160 struct ieee80211_sta_bss
*bss
;
162 if (mesh_config_len
!= MESH_CFG_LEN
)
165 bss
= kzalloc(sizeof(*bss
), GFP_ATOMIC
);
169 bss
->mesh_cfg
= kmalloc(MESH_CFG_CMP_LEN
, GFP_ATOMIC
);
170 if (!bss
->mesh_cfg
) {
175 if (mesh_id_len
&& mesh_id_len
<= IEEE80211_MAX_MESH_ID_LEN
) {
176 bss
->mesh_id
= kmalloc(mesh_id_len
, GFP_ATOMIC
);
178 kfree(bss
->mesh_cfg
);
182 memcpy(bss
->mesh_id
, mesh_id
, mesh_id_len
);
185 atomic_set(&bss
->users
, 2);
186 memcpy(bss
->mesh_cfg
, mesh_cfg
, MESH_CFG_CMP_LEN
);
187 bss
->mesh_id_len
= mesh_id_len
;
189 spin_lock_bh(&local
->sta_bss_lock
);
190 /* TODO: order by RSSI? */
191 list_add_tail(&bss
->list
, &local
->sta_bss_list
);
192 __ieee80211_rx_bss_hash_add(local
, bss
);
193 spin_unlock_bh(&local
->sta_bss_lock
);
198 static void ieee80211_rx_bss_free(struct ieee80211_sta_bss
*bss
)
201 kfree(bss_mesh_id(bss
));
202 kfree(bss_mesh_cfg(bss
));
206 void ieee80211_rx_bss_put(struct ieee80211_local
*local
,
207 struct ieee80211_sta_bss
*bss
)
210 if (!atomic_dec_and_lock(&bss
->users
, &local
->sta_bss_lock
)) {
215 __ieee80211_rx_bss_hash_del(local
, bss
);
216 list_del(&bss
->list
);
217 spin_unlock_bh(&local
->sta_bss_lock
);
218 ieee80211_rx_bss_free(bss
);
221 struct ieee80211_sta_bss
*
222 ieee80211_bss_info_update(struct ieee80211_local
*local
,
223 struct ieee80211_rx_status
*rx_status
,
224 struct ieee80211_mgmt
*mgmt
,
226 struct ieee802_11_elems
*elems
,
227 int freq
, bool beacon
)
229 struct ieee80211_sta_bss
*bss
;
232 #ifdef CONFIG_MAC80211_MESH
233 if (elems
->mesh_config
)
234 bss
= ieee80211_rx_mesh_bss_get(local
, elems
->mesh_id
,
235 elems
->mesh_id_len
, elems
->mesh_config
, freq
);
238 bss
= ieee80211_rx_bss_get(local
, mgmt
->bssid
, freq
,
239 elems
->ssid
, elems
->ssid_len
);
241 #ifdef CONFIG_MAC80211_MESH
242 if (elems
->mesh_config
)
243 bss
= ieee80211_rx_mesh_bss_add(local
, elems
->mesh_id
,
244 elems
->mesh_id_len
, elems
->mesh_config
,
245 elems
->mesh_config_len
, freq
);
248 bss
= ieee80211_rx_bss_add(local
, mgmt
->bssid
, freq
,
249 elems
->ssid
, elems
->ssid_len
);
254 /* TODO: order by RSSI? */
255 spin_lock_bh(&local
->sta_bss_lock
);
256 list_move_tail(&bss
->list
, &local
->sta_bss_list
);
257 spin_unlock_bh(&local
->sta_bss_lock
);
261 /* save the ERP value so that it is available at association time */
262 if (elems
->erp_info
&& elems
->erp_info_len
>= 1) {
263 bss
->erp_value
= elems
->erp_info
[0];
264 bss
->has_erp_value
= 1;
267 bss
->beacon_int
= le16_to_cpu(mgmt
->u
.beacon
.beacon_int
);
268 bss
->capability
= le16_to_cpu(mgmt
->u
.beacon
.capab_info
);
271 struct ieee80211_tim_ie
*tim_ie
=
272 (struct ieee80211_tim_ie
*)elems
->tim
;
273 bss
->dtim_period
= tim_ie
->dtim_period
;
276 /* set default value for buggy APs */
277 if (!elems
->tim
|| bss
->dtim_period
== 0)
278 bss
->dtim_period
= 1;
280 bss
->supp_rates_len
= 0;
281 if (elems
->supp_rates
) {
282 clen
= IEEE80211_MAX_SUPP_RATES
- bss
->supp_rates_len
;
283 if (clen
> elems
->supp_rates_len
)
284 clen
= elems
->supp_rates_len
;
285 memcpy(&bss
->supp_rates
[bss
->supp_rates_len
], elems
->supp_rates
,
287 bss
->supp_rates_len
+= clen
;
289 if (elems
->ext_supp_rates
) {
290 clen
= IEEE80211_MAX_SUPP_RATES
- bss
->supp_rates_len
;
291 if (clen
> elems
->ext_supp_rates_len
)
292 clen
= elems
->ext_supp_rates_len
;
293 memcpy(&bss
->supp_rates
[bss
->supp_rates_len
],
294 elems
->ext_supp_rates
, clen
);
295 bss
->supp_rates_len
+= clen
;
298 bss
->band
= rx_status
->band
;
300 bss
->timestamp
= le64_to_cpu(mgmt
->u
.beacon
.timestamp
);
301 bss
->last_update
= jiffies
;
302 bss
->signal
= rx_status
->signal
;
303 bss
->noise
= rx_status
->noise
;
304 bss
->qual
= rx_status
->qual
;
305 bss
->wmm_used
= elems
->wmm_param
|| elems
->wmm_info
;
308 bss
->last_probe_resp
= jiffies
;
311 * For probe responses, or if we don't have any information yet,
312 * use the IEs from the beacon.
314 if (!bss
->ies
|| !beacon
) {
315 if (bss
->ies
== NULL
|| bss
->ies_len
< elems
->total_len
) {
317 bss
->ies
= kmalloc(elems
->total_len
, GFP_ATOMIC
);
320 memcpy(bss
->ies
, elems
->ie_start
, elems
->total_len
);
321 bss
->ies_len
= elems
->total_len
;
330 ieee80211_sta_rx_scan(struct ieee80211_sub_if_data
*sdata
, struct sk_buff
*skb
,
331 struct ieee80211_rx_status
*rx_status
)
333 struct ieee80211_mgmt
*mgmt
;
334 struct ieee80211_sta_bss
*bss
;
336 struct ieee80211_channel
*channel
;
340 bool presp
, beacon
= false;
341 struct ieee802_11_elems elems
;
344 return RX_DROP_UNUSABLE
;
346 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
347 fc
= mgmt
->frame_control
;
349 if (ieee80211_is_ctl(fc
))
353 return RX_DROP_MONITOR
;
355 presp
= ieee80211_is_probe_resp(fc
);
357 /* ignore ProbeResp to foreign address */
358 if (memcmp(mgmt
->da
, sdata
->dev
->dev_addr
, ETH_ALEN
))
359 return RX_DROP_MONITOR
;
362 elements
= mgmt
->u
.probe_resp
.variable
;
363 baselen
= offsetof(struct ieee80211_mgmt
, u
.probe_resp
.variable
);
365 beacon
= ieee80211_is_beacon(fc
);
366 baselen
= offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
);
367 elements
= mgmt
->u
.beacon
.variable
;
370 if (!presp
&& !beacon
)
373 if (baselen
> skb
->len
)
374 return RX_DROP_MONITOR
;
376 ieee802_11_parse_elems(elements
, skb
->len
- baselen
, &elems
);
378 if (elems
.ds_params
&& elems
.ds_params_len
== 1)
379 freq
= ieee80211_channel_to_frequency(elems
.ds_params
[0]);
381 freq
= rx_status
->freq
;
383 channel
= ieee80211_get_channel(sdata
->local
->hw
.wiphy
, freq
);
385 if (!channel
|| channel
->flags
& IEEE80211_CHAN_DISABLED
)
386 return RX_DROP_MONITOR
;
388 bss
= ieee80211_bss_info_update(sdata
->local
, rx_status
,
389 mgmt
, skb
->len
, &elems
,
391 ieee80211_rx_bss_put(sdata
->local
, bss
);
397 static void ieee80211_send_nullfunc(struct ieee80211_local
*local
,
398 struct ieee80211_sub_if_data
*sdata
,
402 struct ieee80211_hdr
*nullfunc
;
405 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ 24);
407 printk(KERN_DEBUG
"%s: failed to allocate buffer for nullfunc "
408 "frame\n", sdata
->dev
->name
);
411 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
413 nullfunc
= (struct ieee80211_hdr
*) skb_put(skb
, 24);
414 memset(nullfunc
, 0, 24);
415 fc
= cpu_to_le16(IEEE80211_FTYPE_DATA
| IEEE80211_STYPE_NULLFUNC
|
416 IEEE80211_FCTL_TODS
);
418 fc
|= cpu_to_le16(IEEE80211_FCTL_PM
);
419 nullfunc
->frame_control
= fc
;
420 memcpy(nullfunc
->addr1
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
421 memcpy(nullfunc
->addr2
, sdata
->dev
->dev_addr
, ETH_ALEN
);
422 memcpy(nullfunc
->addr3
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
424 ieee80211_tx_skb(sdata
, skb
, 0);
427 void ieee80211_scan_completed(struct ieee80211_hw
*hw
)
429 struct ieee80211_local
*local
= hw_to_local(hw
);
430 struct ieee80211_sub_if_data
*sdata
;
431 union iwreq_data wrqu
;
433 local
->last_scan_completed
= jiffies
;
434 memset(&wrqu
, 0, sizeof(wrqu
));
435 wireless_send_event(local
->scan_sdata
->dev
, SIOCGIWSCAN
, &wrqu
, NULL
);
437 if (local
->sta_hw_scanning
) {
438 local
->sta_hw_scanning
= 0;
439 if (ieee80211_hw_config(local
))
440 printk(KERN_DEBUG
"%s: failed to restore operational "
441 "channel after scan\n", wiphy_name(local
->hw
.wiphy
));
446 local
->sta_sw_scanning
= 0;
447 if (ieee80211_hw_config(local
))
448 printk(KERN_DEBUG
"%s: failed to restore operational "
449 "channel after scan\n", wiphy_name(local
->hw
.wiphy
));
452 netif_tx_lock_bh(local
->mdev
);
453 netif_addr_lock(local
->mdev
);
454 local
->filter_flags
&= ~FIF_BCN_PRBRESP_PROMISC
;
455 local
->ops
->configure_filter(local_to_hw(local
),
456 FIF_BCN_PRBRESP_PROMISC
,
457 &local
->filter_flags
,
458 local
->mdev
->mc_count
,
459 local
->mdev
->mc_list
);
461 netif_addr_unlock(local
->mdev
);
462 netif_tx_unlock_bh(local
->mdev
);
465 list_for_each_entry_rcu(sdata
, &local
->interfaces
, list
) {
466 /* Tell AP we're back */
467 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
) {
468 if (sdata
->u
.sta
.flags
& IEEE80211_STA_ASSOCIATED
) {
469 ieee80211_send_nullfunc(local
, sdata
, 0);
470 netif_tx_wake_all_queues(sdata
->dev
);
473 netif_tx_wake_all_queues(sdata
->dev
);
478 ieee80211_mlme_notify_scan_completed(local
);
480 EXPORT_SYMBOL(ieee80211_scan_completed
);
483 void ieee80211_sta_scan_work(struct work_struct
*work
)
485 struct ieee80211_local
*local
=
486 container_of(work
, struct ieee80211_local
, scan_work
.work
);
487 struct ieee80211_sub_if_data
*sdata
= local
->scan_sdata
;
488 struct ieee80211_supported_band
*sband
;
489 struct ieee80211_channel
*chan
;
491 unsigned long next_delay
= 0;
493 if (!local
->sta_sw_scanning
)
496 switch (local
->scan_state
) {
497 case SCAN_SET_CHANNEL
:
499 * Get current scan band. scan_band may be IEEE80211_NUM_BANDS
500 * after we successfully scanned the last channel of the last
501 * band (and the last band is supported by the hw)
503 if (local
->scan_band
< IEEE80211_NUM_BANDS
)
504 sband
= local
->hw
.wiphy
->bands
[local
->scan_band
];
509 * If we are at an unsupported band and have more bands
510 * left to scan, advance to the next supported one.
512 while (!sband
&& local
->scan_band
< IEEE80211_NUM_BANDS
- 1) {
514 sband
= local
->hw
.wiphy
->bands
[local
->scan_band
];
515 local
->scan_channel_idx
= 0;
518 /* if no more bands/channels left, complete scan */
519 if (!sband
|| local
->scan_channel_idx
>= sband
->n_channels
) {
520 ieee80211_scan_completed(local_to_hw(local
));
524 chan
= &sband
->channels
[local
->scan_channel_idx
];
526 if (chan
->flags
& IEEE80211_CHAN_DISABLED
||
527 (sdata
->vif
.type
== IEEE80211_IF_TYPE_IBSS
&&
528 chan
->flags
& IEEE80211_CHAN_NO_IBSS
))
532 local
->scan_channel
= chan
;
533 if (ieee80211_hw_config(local
)) {
534 printk(KERN_DEBUG
"%s: failed to set freq to "
535 "%d MHz for scan\n", wiphy_name(local
->hw
.wiphy
),
541 /* advance state machine to next channel/band */
542 local
->scan_channel_idx
++;
543 if (local
->scan_channel_idx
>= sband
->n_channels
) {
545 * scan_band may end up == IEEE80211_NUM_BANDS, but
546 * we'll catch that case above and complete the scan
547 * if that is the case.
550 local
->scan_channel_idx
= 0;
556 next_delay
= IEEE80211_PROBE_DELAY
+
557 usecs_to_jiffies(local
->hw
.channel_change_time
);
558 local
->scan_state
= SCAN_SEND_PROBE
;
560 case SCAN_SEND_PROBE
:
561 next_delay
= IEEE80211_PASSIVE_CHANNEL_TIME
;
562 local
->scan_state
= SCAN_SET_CHANNEL
;
564 if (local
->scan_channel
->flags
& IEEE80211_CHAN_PASSIVE_SCAN
)
566 ieee80211_send_probe_req(sdata
, NULL
, local
->scan_ssid
,
567 local
->scan_ssid_len
);
568 next_delay
= IEEE80211_CHANNEL_TIME
;
572 if (local
->sta_sw_scanning
)
573 queue_delayed_work(local
->hw
.workqueue
, &local
->scan_work
,
578 int ieee80211_sta_start_scan(struct ieee80211_sub_if_data
*scan_sdata
,
579 u8
*ssid
, size_t ssid_len
)
581 struct ieee80211_local
*local
= scan_sdata
->local
;
582 struct ieee80211_sub_if_data
*sdata
;
584 if (ssid_len
> IEEE80211_MAX_SSID_LEN
)
587 /* MLME-SCAN.request (page 118) page 144 (11.1.3.1)
588 * BSSType: INFRASTRUCTURE, INDEPENDENT, ANY_BSS
591 * ScanType: ACTIVE, PASSIVE
592 * ProbeDelay: delay (in microseconds) to be used prior to transmitting
593 * a Probe frame during active scanning
595 * MinChannelTime (>= ProbeDelay), in TU
596 * MaxChannelTime: (>= MinChannelTime), in TU
601 * ResultCode: SUCCESS, INVALID_PARAMETERS
604 if (local
->sta_sw_scanning
|| local
->sta_hw_scanning
) {
605 if (local
->scan_sdata
== scan_sdata
)
610 if (local
->ops
->hw_scan
) {
611 int rc
= local
->ops
->hw_scan(local_to_hw(local
),
614 local
->sta_hw_scanning
= 1;
615 local
->scan_sdata
= scan_sdata
;
620 local
->sta_sw_scanning
= 1;
623 list_for_each_entry_rcu(sdata
, &local
->interfaces
, list
) {
624 if (sdata
->vif
.type
== IEEE80211_IF_TYPE_STA
) {
625 if (sdata
->u
.sta
.flags
& IEEE80211_STA_ASSOCIATED
) {
626 netif_tx_stop_all_queues(sdata
->dev
);
627 ieee80211_send_nullfunc(local
, sdata
, 1);
630 netif_tx_stop_all_queues(sdata
->dev
);
635 local
->scan_ssid_len
= ssid_len
;
636 memcpy(local
->scan_ssid
, ssid
, ssid_len
);
638 local
->scan_ssid_len
= 0;
639 local
->scan_state
= SCAN_SET_CHANNEL
;
640 local
->scan_channel_idx
= 0;
641 local
->scan_band
= IEEE80211_BAND_2GHZ
;
642 local
->scan_sdata
= scan_sdata
;
644 netif_addr_lock_bh(local
->mdev
);
645 local
->filter_flags
|= FIF_BCN_PRBRESP_PROMISC
;
646 local
->ops
->configure_filter(local_to_hw(local
),
647 FIF_BCN_PRBRESP_PROMISC
,
648 &local
->filter_flags
,
649 local
->mdev
->mc_count
,
650 local
->mdev
->mc_list
);
651 netif_addr_unlock_bh(local
->mdev
);
653 /* TODO: start scan as soon as all nullfunc frames are ACKed */
654 queue_delayed_work(local
->hw
.workqueue
, &local
->scan_work
,
655 IEEE80211_CHANNEL_TIME
);
661 int ieee80211_sta_req_scan(struct ieee80211_sub_if_data
*sdata
, u8
*ssid
, size_t ssid_len
)
663 struct ieee80211_local
*local
= sdata
->local
;
664 struct ieee80211_if_sta
*ifsta
;
666 if (sdata
->vif
.type
!= IEEE80211_IF_TYPE_STA
)
667 return ieee80211_sta_start_scan(sdata
, ssid
, ssid_len
);
670 * STA has a state machine that might need to defer scanning
671 * while it's trying to associate/authenticate, therefore we
672 * queue it up to the state machine in that case.
675 if (local
->sta_sw_scanning
|| local
->sta_hw_scanning
) {
676 if (local
->scan_sdata
== sdata
)
681 ifsta
= &sdata
->u
.sta
;
683 ifsta
->scan_ssid_len
= ssid_len
;
685 memcpy(ifsta
->scan_ssid
, ssid
, ssid_len
);
686 set_bit(IEEE80211_STA_REQ_SCAN
, &ifsta
->request
);
687 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
693 static void ieee80211_sta_add_scan_ies(struct iw_request_info
*info
,
694 struct ieee80211_sta_bss
*bss
,
695 char **current_ev
, char *end_buf
)
697 u8
*pos
, *end
, *next
;
700 if (bss
== NULL
|| bss
->ies
== NULL
)
704 * If needed, fragment the IEs buffer (at IE boundaries) into short
705 * enough fragments to fit into IW_GENERIC_IE_MAX octet messages.
708 end
= pos
+ bss
->ies_len
;
710 while (end
- pos
> IW_GENERIC_IE_MAX
) {
711 next
= pos
+ 2 + pos
[1];
712 while (next
+ 2 + next
[1] - pos
< IW_GENERIC_IE_MAX
)
713 next
= next
+ 2 + next
[1];
715 memset(&iwe
, 0, sizeof(iwe
));
717 iwe
.u
.data
.length
= next
- pos
;
718 *current_ev
= iwe_stream_add_point(info
, *current_ev
,
725 memset(&iwe
, 0, sizeof(iwe
));
727 iwe
.u
.data
.length
= end
- pos
;
728 *current_ev
= iwe_stream_add_point(info
, *current_ev
,
735 ieee80211_sta_scan_result(struct ieee80211_local
*local
,
736 struct iw_request_info
*info
,
737 struct ieee80211_sta_bss
*bss
,
738 char *current_ev
, char *end_buf
)
743 if (time_after(jiffies
,
744 bss
->last_update
+ IEEE80211_SCAN_RESULT_EXPIRE
))
747 memset(&iwe
, 0, sizeof(iwe
));
749 iwe
.u
.ap_addr
.sa_family
= ARPHRD_ETHER
;
750 memcpy(iwe
.u
.ap_addr
.sa_data
, bss
->bssid
, ETH_ALEN
);
751 current_ev
= iwe_stream_add_event(info
, current_ev
, end_buf
, &iwe
,
754 memset(&iwe
, 0, sizeof(iwe
));
755 iwe
.cmd
= SIOCGIWESSID
;
756 if (bss_mesh_cfg(bss
)) {
757 iwe
.u
.data
.length
= bss_mesh_id_len(bss
);
758 iwe
.u
.data
.flags
= 1;
759 current_ev
= iwe_stream_add_point(info
, current_ev
, end_buf
,
760 &iwe
, bss_mesh_id(bss
));
762 iwe
.u
.data
.length
= bss
->ssid_len
;
763 iwe
.u
.data
.flags
= 1;
764 current_ev
= iwe_stream_add_point(info
, current_ev
, end_buf
,
768 if (bss
->capability
& (WLAN_CAPABILITY_ESS
| WLAN_CAPABILITY_IBSS
)
769 || bss_mesh_cfg(bss
)) {
770 memset(&iwe
, 0, sizeof(iwe
));
771 iwe
.cmd
= SIOCGIWMODE
;
772 if (bss_mesh_cfg(bss
))
773 iwe
.u
.mode
= IW_MODE_MESH
;
774 else if (bss
->capability
& WLAN_CAPABILITY_ESS
)
775 iwe
.u
.mode
= IW_MODE_MASTER
;
777 iwe
.u
.mode
= IW_MODE_ADHOC
;
778 current_ev
= iwe_stream_add_event(info
, current_ev
, end_buf
,
779 &iwe
, IW_EV_UINT_LEN
);
782 memset(&iwe
, 0, sizeof(iwe
));
783 iwe
.cmd
= SIOCGIWFREQ
;
784 iwe
.u
.freq
.m
= ieee80211_frequency_to_channel(bss
->freq
);
786 current_ev
= iwe_stream_add_event(info
, current_ev
, end_buf
, &iwe
,
789 memset(&iwe
, 0, sizeof(iwe
));
790 iwe
.cmd
= SIOCGIWFREQ
;
791 iwe
.u
.freq
.m
= bss
->freq
;
793 current_ev
= iwe_stream_add_event(info
, current_ev
, end_buf
, &iwe
,
795 memset(&iwe
, 0, sizeof(iwe
));
797 iwe
.u
.qual
.qual
= bss
->qual
;
798 iwe
.u
.qual
.level
= bss
->signal
;
799 iwe
.u
.qual
.noise
= bss
->noise
;
800 iwe
.u
.qual
.updated
= local
->wstats_flags
;
801 current_ev
= iwe_stream_add_event(info
, current_ev
, end_buf
, &iwe
,
804 memset(&iwe
, 0, sizeof(iwe
));
805 iwe
.cmd
= SIOCGIWENCODE
;
806 if (bss
->capability
& WLAN_CAPABILITY_PRIVACY
)
807 iwe
.u
.data
.flags
= IW_ENCODE_ENABLED
| IW_ENCODE_NOKEY
;
809 iwe
.u
.data
.flags
= IW_ENCODE_DISABLED
;
810 iwe
.u
.data
.length
= 0;
811 current_ev
= iwe_stream_add_point(info
, current_ev
, end_buf
,
814 ieee80211_sta_add_scan_ies(info
, bss
, ¤t_ev
, end_buf
);
816 if (bss
->supp_rates_len
> 0) {
817 /* display all supported rates in readable format */
818 char *p
= current_ev
+ iwe_stream_lcp_len(info
);
821 memset(&iwe
, 0, sizeof(iwe
));
822 iwe
.cmd
= SIOCGIWRATE
;
823 /* Those two flags are ignored... */
824 iwe
.u
.bitrate
.fixed
= iwe
.u
.bitrate
.disabled
= 0;
826 for (i
= 0; i
< bss
->supp_rates_len
; i
++) {
827 iwe
.u
.bitrate
.value
= ((bss
->supp_rates
[i
] &
829 p
= iwe_stream_add_value(info
, current_ev
, p
,
830 end_buf
, &iwe
, IW_EV_PARAM_LEN
);
835 buf
= kmalloc(30, GFP_ATOMIC
);
837 memset(&iwe
, 0, sizeof(iwe
));
838 iwe
.cmd
= IWEVCUSTOM
;
839 sprintf(buf
, "tsf=%016llx", (unsigned long long)(bss
->timestamp
));
840 iwe
.u
.data
.length
= strlen(buf
);
841 current_ev
= iwe_stream_add_point(info
, current_ev
, end_buf
,
843 memset(&iwe
, 0, sizeof(iwe
));
844 iwe
.cmd
= IWEVCUSTOM
;
845 sprintf(buf
, " Last beacon: %dms ago",
846 jiffies_to_msecs(jiffies
- bss
->last_update
));
847 iwe
.u
.data
.length
= strlen(buf
);
848 current_ev
= iwe_stream_add_point(info
, current_ev
,
853 if (bss_mesh_cfg(bss
)) {
854 u8
*cfg
= bss_mesh_cfg(bss
);
855 buf
= kmalloc(50, GFP_ATOMIC
);
857 memset(&iwe
, 0, sizeof(iwe
));
858 iwe
.cmd
= IWEVCUSTOM
;
859 sprintf(buf
, "Mesh network (version %d)", cfg
[0]);
860 iwe
.u
.data
.length
= strlen(buf
);
861 current_ev
= iwe_stream_add_point(info
, current_ev
,
864 sprintf(buf
, "Path Selection Protocol ID: "
865 "0x%02X%02X%02X%02X", cfg
[1], cfg
[2], cfg
[3],
867 iwe
.u
.data
.length
= strlen(buf
);
868 current_ev
= iwe_stream_add_point(info
, current_ev
,
871 sprintf(buf
, "Path Selection Metric ID: "
872 "0x%02X%02X%02X%02X", cfg
[5], cfg
[6], cfg
[7],
874 iwe
.u
.data
.length
= strlen(buf
);
875 current_ev
= iwe_stream_add_point(info
, current_ev
,
878 sprintf(buf
, "Congestion Control Mode ID: "
879 "0x%02X%02X%02X%02X", cfg
[9], cfg
[10],
881 iwe
.u
.data
.length
= strlen(buf
);
882 current_ev
= iwe_stream_add_point(info
, current_ev
,
885 sprintf(buf
, "Channel Precedence: "
886 "0x%02X%02X%02X%02X", cfg
[13], cfg
[14],
888 iwe
.u
.data
.length
= strlen(buf
);
889 current_ev
= iwe_stream_add_point(info
, current_ev
,
900 int ieee80211_sta_scan_results(struct ieee80211_local
*local
,
901 struct iw_request_info
*info
,
902 char *buf
, size_t len
)
904 char *current_ev
= buf
;
905 char *end_buf
= buf
+ len
;
906 struct ieee80211_sta_bss
*bss
;
908 spin_lock_bh(&local
->sta_bss_lock
);
909 list_for_each_entry(bss
, &local
->sta_bss_list
, list
) {
910 if (buf
+ len
- current_ev
<= IW_EV_ADDR_LEN
) {
911 spin_unlock_bh(&local
->sta_bss_lock
);
914 current_ev
= ieee80211_sta_scan_result(local
, info
, bss
,
915 current_ev
, end_buf
);
917 spin_unlock_bh(&local
->sta_bss_lock
);
918 return current_ev
- buf
;