]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blame - net/mac80211/mlme.c
iwlwifi: update copyright year to 2009
[mirror_ubuntu-zesty-kernel.git] / net / mac80211 / mlme.c
CommitLineData
f0706e82
JB
1/*
2 * BSS client mode implementation
5394af4d 3 * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
f0706e82
JB
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
12 */
13
5b323edb 14#include <linux/delay.h>
f0706e82
JB
15#include <linux/if_ether.h>
16#include <linux/skbuff.h>
f0706e82
JB
17#include <linux/if_arp.h>
18#include <linux/wireless.h>
19#include <linux/random.h>
20#include <linux/etherdevice.h>
d0709a65 21#include <linux/rtnetlink.h>
f0706e82 22#include <net/iw_handler.h>
f0706e82 23#include <net/mac80211.h>
472dbc45 24#include <asm/unaligned.h>
60f8b39c 25
f0706e82 26#include "ieee80211_i.h"
2c8dccc7
JB
27#include "rate.h"
28#include "led.h"
f0706e82 29
6042a3e3 30#define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
f0706e82
JB
31#define IEEE80211_AUTH_TIMEOUT (HZ / 5)
32#define IEEE80211_AUTH_MAX_TRIES 3
33#define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
34#define IEEE80211_ASSOC_MAX_TRIES 3
35#define IEEE80211_MONITORING_INTERVAL (2 * HZ)
36#define IEEE80211_PROBE_INTERVAL (60 * HZ)
37#define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
38#define IEEE80211_SCAN_INTERVAL (2 * HZ)
39#define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
872ba533 40#define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
f0706e82 41
f0706e82
JB
42#define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
43#define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
44
45#define IEEE80211_IBSS_MAX_STA_ENTRIES 128
46
47
5484e237
JB
48/* utils */
49static int ecw2cw(int ecw)
60f8b39c 50{
5484e237 51 return (1 << ecw) - 1;
60f8b39c
JB
52}
53
c2b13452 54static u8 *ieee80211_bss_get_ie(struct ieee80211_bss *bss, u8 ie)
43ac2ca3
JM
55{
56 u8 *end, *pos;
57
58 pos = bss->ies;
59 if (pos == NULL)
60 return NULL;
61 end = pos + bss->ies_len;
62
63 while (pos + 1 < end) {
64 if (pos + 2 + pos[1] > end)
65 break;
66 if (pos[0] == ie)
67 return pos;
68 pos += 2 + pos[1];
69 }
70
71 return NULL;
72}
73
c2b13452 74static int ieee80211_compatible_rates(struct ieee80211_bss *bss,
9ac19a90
JB
75 struct ieee80211_supported_band *sband,
76 u64 *rates)
77{
78 int i, j, count;
79 *rates = 0;
80 count = 0;
81 for (i = 0; i < bss->supp_rates_len; i++) {
82 int rate = (bss->supp_rates[i] & 0x7F) * 5;
83
84 for (j = 0; j < sband->n_bitrates; j++)
85 if (sband->bitrates[j].bitrate == rate) {
86 *rates |= BIT(j);
87 count++;
88 break;
89 }
90 }
91
92 return count;
93}
94
9c6bd790
JB
95/* also used by mesh code */
96u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
97 struct ieee802_11_elems *elems,
98 enum ieee80211_band band)
60f8b39c 99{
9c6bd790
JB
100 struct ieee80211_supported_band *sband;
101 struct ieee80211_rate *bitrates;
102 size_t num_rates;
103 u64 supp_rates;
104 int i, j;
105 sband = local->hw.wiphy->bands[band];
60f8b39c 106
9c6bd790
JB
107 if (!sband) {
108 WARN_ON(1);
109 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
60f8b39c 110 }
60f8b39c 111
9c6bd790
JB
112 bitrates = sband->bitrates;
113 num_rates = sband->n_bitrates;
114 supp_rates = 0;
115 for (i = 0; i < elems->supp_rates_len +
116 elems->ext_supp_rates_len; i++) {
117 u8 rate = 0;
118 int own_rate;
119 if (i < elems->supp_rates_len)
120 rate = elems->supp_rates[i];
121 else if (elems->ext_supp_rates)
122 rate = elems->ext_supp_rates
123 [i - elems->supp_rates_len];
124 own_rate = 5 * (rate & 0x7f);
125 for (j = 0; j < num_rates; j++)
126 if (bitrates[j].bitrate == own_rate)
127 supp_rates |= BIT(j);
128 }
129 return supp_rates;
60f8b39c
JB
130}
131
9c6bd790
JB
132/* frame sending functions */
133
134/* also used by scanning code */
0a51b27e
JB
135void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
136 u8 *ssid, size_t ssid_len)
60f8b39c
JB
137{
138 struct ieee80211_local *local = sdata->local;
139 struct ieee80211_supported_band *sband;
140 struct sk_buff *skb;
141 struct ieee80211_mgmt *mgmt;
142 u8 *pos, *supp_rates, *esupp_rates = NULL;
143 int i;
144
145 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
146 if (!skb) {
147 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
148 "request\n", sdata->dev->name);
149 return;
150 }
151 skb_reserve(skb, local->hw.extra_tx_headroom);
152
153 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
154 memset(mgmt, 0, 24);
155 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
156 IEEE80211_STYPE_PROBE_REQ);
157 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
158 if (dst) {
159 memcpy(mgmt->da, dst, ETH_ALEN);
160 memcpy(mgmt->bssid, dst, ETH_ALEN);
161 } else {
162 memset(mgmt->da, 0xff, ETH_ALEN);
163 memset(mgmt->bssid, 0xff, ETH_ALEN);
164 }
165 pos = skb_put(skb, 2 + ssid_len);
166 *pos++ = WLAN_EID_SSID;
167 *pos++ = ssid_len;
168 memcpy(pos, ssid, ssid_len);
169
170 supp_rates = skb_put(skb, 2);
171 supp_rates[0] = WLAN_EID_SUPP_RATES;
172 supp_rates[1] = 0;
173 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
174
175 for (i = 0; i < sband->n_bitrates; i++) {
176 struct ieee80211_rate *rate = &sband->bitrates[i];
177 if (esupp_rates) {
178 pos = skb_put(skb, 1);
179 esupp_rates[1]++;
180 } else if (supp_rates[1] == 8) {
181 esupp_rates = skb_put(skb, 3);
182 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
183 esupp_rates[1] = 1;
184 pos = &esupp_rates[2];
185 } else {
186 pos = skb_put(skb, 1);
187 supp_rates[1]++;
188 }
189 *pos = rate->bitrate / 5;
190 }
191
e50db65c 192 ieee80211_tx_skb(sdata, skb, 0);
60f8b39c
JB
193}
194
9c6bd790
JB
195static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
196 struct ieee80211_if_sta *ifsta,
197 int transaction, u8 *extra, size_t extra_len,
198 int encrypt)
199{
200 struct ieee80211_local *local = sdata->local;
201 struct sk_buff *skb;
202 struct ieee80211_mgmt *mgmt;
203
204 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
205 sizeof(*mgmt) + 6 + extra_len);
206 if (!skb) {
207 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
208 "frame\n", sdata->dev->name);
209 return;
210 }
211 skb_reserve(skb, local->hw.extra_tx_headroom);
212
213 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
214 memset(mgmt, 0, 24 + 6);
215 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
216 IEEE80211_STYPE_AUTH);
217 if (encrypt)
218 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
219 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
220 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
221 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
222 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
223 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
224 ifsta->auth_transaction = transaction + 1;
225 mgmt->u.auth.status_code = cpu_to_le16(0);
226 if (extra)
227 memcpy(skb_put(skb, extra_len), extra, extra_len);
228
229 ieee80211_tx_skb(sdata, skb, encrypt);
230}
231
9ac19a90
JB
232static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
233 struct ieee80211_if_sta *ifsta)
234{
235 struct ieee80211_local *local = sdata->local;
236 struct sk_buff *skb;
237 struct ieee80211_mgmt *mgmt;
d9fe60de 238 u8 *pos, *ies, *ht_ie;
9ac19a90
JB
239 int i, len, count, rates_len, supp_rates_len;
240 u16 capab;
c2b13452 241 struct ieee80211_bss *bss;
9ac19a90
JB
242 int wmm = 0;
243 struct ieee80211_supported_band *sband;
244 u64 rates = 0;
245
246 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
247 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
248 ifsta->ssid_len);
249 if (!skb) {
250 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
251 "frame\n", sdata->dev->name);
252 return;
253 }
254 skb_reserve(skb, local->hw.extra_tx_headroom);
255
256 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
257
258 capab = ifsta->capab;
259
260 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
261 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
262 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
263 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
264 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
265 }
266
267 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
268 local->hw.conf.channel->center_freq,
269 ifsta->ssid, ifsta->ssid_len);
270 if (bss) {
271 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
272 capab |= WLAN_CAPABILITY_PRIVACY;
273 if (bss->wmm_used)
274 wmm = 1;
275
276 /* get all rates supported by the device and the AP as
277 * some APs don't like getting a superset of their rates
278 * in the association request (e.g. D-Link DAP 1353 in
279 * b-only mode) */
280 rates_len = ieee80211_compatible_rates(bss, sband, &rates);
281
282 if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
283 (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
284 capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
285
286 ieee80211_rx_bss_put(local, bss);
287 } else {
288 rates = ~0;
289 rates_len = sband->n_bitrates;
290 }
291
292 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
293 memset(mgmt, 0, 24);
294 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
295 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
296 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
297
298 if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
299 skb_put(skb, 10);
300 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
301 IEEE80211_STYPE_REASSOC_REQ);
302 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
303 mgmt->u.reassoc_req.listen_interval =
304 cpu_to_le16(local->hw.conf.listen_interval);
305 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
306 ETH_ALEN);
307 } else {
308 skb_put(skb, 4);
309 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
310 IEEE80211_STYPE_ASSOC_REQ);
311 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
13554121 312 mgmt->u.assoc_req.listen_interval =
9ac19a90
JB
313 cpu_to_le16(local->hw.conf.listen_interval);
314 }
315
316 /* SSID */
317 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
318 *pos++ = WLAN_EID_SSID;
319 *pos++ = ifsta->ssid_len;
320 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
321
322 /* add all rates which were marked to be used above */
323 supp_rates_len = rates_len;
324 if (supp_rates_len > 8)
325 supp_rates_len = 8;
326
327 len = sband->n_bitrates;
328 pos = skb_put(skb, supp_rates_len + 2);
329 *pos++ = WLAN_EID_SUPP_RATES;
330 *pos++ = supp_rates_len;
331
332 count = 0;
333 for (i = 0; i < sband->n_bitrates; i++) {
334 if (BIT(i) & rates) {
335 int rate = sband->bitrates[i].bitrate;
336 *pos++ = (u8) (rate / 5);
337 if (++count == 8)
338 break;
339 }
340 }
341
342 if (rates_len > count) {
343 pos = skb_put(skb, rates_len - count + 2);
344 *pos++ = WLAN_EID_EXT_SUPP_RATES;
345 *pos++ = rates_len - count;
346
347 for (i++; i < sband->n_bitrates; i++) {
348 if (BIT(i) & rates) {
349 int rate = sband->bitrates[i].bitrate;
350 *pos++ = (u8) (rate / 5);
351 }
352 }
353 }
354
355 if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
356 /* 1. power capabilities */
357 pos = skb_put(skb, 4);
358 *pos++ = WLAN_EID_PWR_CAPABILITY;
359 *pos++ = 2;
360 *pos++ = 0; /* min tx power */
361 *pos++ = local->hw.conf.channel->max_power; /* max tx power */
362
363 /* 2. supported channels */
364 /* TODO: get this in reg domain format */
365 pos = skb_put(skb, 2 * sband->n_channels + 2);
366 *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
367 *pos++ = 2 * sband->n_channels;
368 for (i = 0; i < sband->n_channels; i++) {
369 *pos++ = ieee80211_frequency_to_channel(
370 sband->channels[i].center_freq);
371 *pos++ = 1; /* one channel in the subband*/
372 }
373 }
374
375 if (ifsta->extra_ie) {
376 pos = skb_put(skb, ifsta->extra_ie_len);
377 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
378 }
379
380 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
381 pos = skb_put(skb, 9);
382 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
383 *pos++ = 7; /* len */
384 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
385 *pos++ = 0x50;
386 *pos++ = 0xf2;
387 *pos++ = 2; /* WME */
388 *pos++ = 0; /* WME info */
389 *pos++ = 1; /* WME ver */
390 *pos++ = 0;
391 }
392
393 /* wmm support is a must to HT */
eb46936b
VT
394 /*
395 * IEEE802.11n does not allow TKIP/WEP as pairwise
396 * ciphers in HT mode. We still associate in non-ht
397 * mode (11a/b/g) if any one of these ciphers is
398 * configured as pairwise.
399 */
9ac19a90 400 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
d9fe60de
JB
401 sband->ht_cap.ht_supported &&
402 (ht_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_INFORMATION)) &&
eb46936b
VT
403 ht_ie[1] >= sizeof(struct ieee80211_ht_info) &&
404 (!(ifsta->flags & IEEE80211_STA_TKIP_WEP_USED))) {
d9fe60de
JB
405 struct ieee80211_ht_info *ht_info =
406 (struct ieee80211_ht_info *)(ht_ie + 2);
407 u16 cap = sband->ht_cap.cap;
9ac19a90
JB
408 __le16 tmp;
409 u32 flags = local->hw.conf.channel->flags;
410
d9fe60de
JB
411 switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
412 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
9ac19a90 413 if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
d9fe60de 414 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB
415 cap &= ~IEEE80211_HT_CAP_SGI_40;
416 }
417 break;
d9fe60de 418 case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
9ac19a90 419 if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
d9fe60de 420 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB
421 cap &= ~IEEE80211_HT_CAP_SGI_40;
422 }
423 break;
424 }
425
426 tmp = cpu_to_le16(cap);
427 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
428 *pos++ = WLAN_EID_HT_CAPABILITY;
429 *pos++ = sizeof(struct ieee80211_ht_cap);
430 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
431 memcpy(pos, &tmp, sizeof(u16));
432 pos += sizeof(u16);
433 /* TODO: needs a define here for << 2 */
d9fe60de
JB
434 *pos++ = sband->ht_cap.ampdu_factor |
435 (sband->ht_cap.ampdu_density << 2);
436 memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs));
9ac19a90
JB
437 }
438
439 kfree(ifsta->assocreq_ies);
440 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
441 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
442 if (ifsta->assocreq_ies)
443 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
444
e50db65c 445 ieee80211_tx_skb(sdata, skb, 0);
9ac19a90
JB
446}
447
448
ef422bc0
JB
449static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
450 u16 stype, u16 reason)
9ac19a90
JB
451{
452 struct ieee80211_local *local = sdata->local;
ef422bc0 453 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
9ac19a90
JB
454 struct sk_buff *skb;
455 struct ieee80211_mgmt *mgmt;
456
457 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
458 if (!skb) {
ef422bc0
JB
459 printk(KERN_DEBUG "%s: failed to allocate buffer for "
460 "deauth/disassoc frame\n", sdata->dev->name);
9ac19a90
JB
461 return;
462 }
463 skb_reserve(skb, local->hw.extra_tx_headroom);
464
465 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
466 memset(mgmt, 0, 24);
467 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
468 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
469 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
ef422bc0 470 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
9ac19a90 471 skb_put(skb, 2);
ef422bc0 472 /* u.deauth.reason_code == u.disassoc.reason_code */
9ac19a90
JB
473 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
474
5394af4d 475 ieee80211_tx_skb(sdata, skb, ifsta->flags & IEEE80211_STA_MFP_ENABLED);
9ac19a90
JB
476}
477
60f8b39c 478/* MLME */
f698d856 479static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
c2b13452 480 struct ieee80211_bss *bss)
e2839d8f 481{
e2839d8f
VK
482 struct ieee80211_local *local = sdata->local;
483 int i, have_higher_than_11mbit = 0;
484
e2839d8f
VK
485 /* cf. IEEE 802.11 9.2.12 */
486 for (i = 0; i < bss->supp_rates_len; i++)
487 if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
488 have_higher_than_11mbit = 1;
489
490 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
491 have_higher_than_11mbit)
492 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
493 else
494 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
495
3d35f7c6 496 ieee80211_set_wmm_default(sdata);
e2839d8f
VK
497}
498
f698d856 499static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
f0706e82
JB
500 struct ieee80211_if_sta *ifsta,
501 u8 *wmm_param, size_t wmm_param_len)
502{
f0706e82
JB
503 struct ieee80211_tx_queue_params params;
504 size_t left;
505 int count;
506 u8 *pos;
507
3434fbd3
JB
508 if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
509 return;
510
511 if (!wmm_param)
512 return;
513
f0706e82
JB
514 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
515 return;
516 count = wmm_param[6] & 0x0f;
517 if (count == ifsta->wmm_last_param_set)
518 return;
519 ifsta->wmm_last_param_set = count;
520
521 pos = wmm_param + 8;
522 left = wmm_param_len - 8;
523
524 memset(&params, 0, sizeof(params));
525
526 if (!local->ops->conf_tx)
527 return;
528
529 local->wmm_acm = 0;
530 for (; left >= 4; left -= 4, pos += 4) {
531 int aci = (pos[0] >> 5) & 0x03;
532 int acm = (pos[0] >> 4) & 0x01;
533 int queue;
534
535 switch (aci) {
536 case 1:
e100bb64 537 queue = 3;
988c0f72 538 if (acm)
f0706e82 539 local->wmm_acm |= BIT(0) | BIT(3);
f0706e82
JB
540 break;
541 case 2:
e100bb64 542 queue = 1;
988c0f72 543 if (acm)
f0706e82 544 local->wmm_acm |= BIT(4) | BIT(5);
f0706e82
JB
545 break;
546 case 3:
e100bb64 547 queue = 0;
988c0f72 548 if (acm)
f0706e82 549 local->wmm_acm |= BIT(6) | BIT(7);
f0706e82
JB
550 break;
551 case 0:
552 default:
e100bb64 553 queue = 2;
988c0f72 554 if (acm)
f0706e82 555 local->wmm_acm |= BIT(1) | BIT(2);
f0706e82
JB
556 break;
557 }
558
559 params.aifs = pos[0] & 0x0f;
560 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
561 params.cw_min = ecw2cw(pos[1] & 0x0f);
f434b2d1 562 params.txop = get_unaligned_le16(pos + 2);
f4ea83dd 563#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
f0706e82 564 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
3330d7be 565 "cWmin=%d cWmax=%d txop=%d\n",
f698d856 566 local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
3330d7be
JB
567 params.cw_max, params.txop);
568#endif
f0706e82
JB
569 /* TODO: handle ACM (block TX, fallback to next lowest allowed
570 * AC for now) */
571 if (local->ops->conf_tx(local_to_hw(local), queue, &params)) {
572 printk(KERN_DEBUG "%s: failed to set TX queue "
f698d856 573 "parameters for queue %d\n", local->mdev->name, queue);
f0706e82
JB
574 }
575 }
576}
577
a97b77b9
VN
578static bool check_tim(struct ieee802_11_elems *elems, u16 aid, bool *is_mc)
579{
580 u8 mask;
581 u8 index, indexn1, indexn2;
582 struct ieee80211_tim_ie *tim = (struct ieee80211_tim_ie *) elems->tim;
583
584 aid &= 0x3fff;
585 index = aid / 8;
586 mask = 1 << (aid & 7);
587
588 if (tim->bitmap_ctrl & 0x01)
589 *is_mc = true;
590
591 indexn1 = tim->bitmap_ctrl & 0xfe;
592 indexn2 = elems->tim_len + indexn1 - 4;
593
594 if (index < indexn1 || index > indexn2)
595 return false;
596
597 index -= indexn1;
598
599 return !!(tim->virtual_map[index] & mask);
600}
601
7a5158ef
JB
602static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
603 u16 capab, bool erp_valid, u8 erp)
5628221c 604{
bda3933a 605 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
ebd74487 606#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 607 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ebd74487 608#endif
471b3efd 609 u32 changed = 0;
7a5158ef
JB
610 bool use_protection;
611 bool use_short_preamble;
612 bool use_short_slot;
613
614 if (erp_valid) {
615 use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0;
616 use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0;
617 } else {
618 use_protection = false;
619 use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE);
620 }
621
622 use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME);
5628221c 623
471b3efd 624 if (use_protection != bss_conf->use_cts_prot) {
f4ea83dd 625#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 626 if (net_ratelimit()) {
0c68ae26 627 printk(KERN_DEBUG "%s: CTS protection %s (BSSID=%pM)\n",
471b3efd 628 sdata->dev->name,
5628221c 629 use_protection ? "enabled" : "disabled",
0c68ae26 630 ifsta->bssid);
5628221c 631 }
f4ea83dd 632#endif
471b3efd
JB
633 bss_conf->use_cts_prot = use_protection;
634 changed |= BSS_CHANGED_ERP_CTS_PROT;
5628221c 635 }
7e9ed188 636
d43c7b37 637 if (use_short_preamble != bss_conf->use_short_preamble) {
f4ea83dd 638#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
7e9ed188
DD
639 if (net_ratelimit()) {
640 printk(KERN_DEBUG "%s: switched to %s barker preamble"
0c68ae26 641 " (BSSID=%pM)\n",
471b3efd 642 sdata->dev->name,
d43c7b37 643 use_short_preamble ? "short" : "long",
0c68ae26 644 ifsta->bssid);
7e9ed188 645 }
f4ea83dd 646#endif
d43c7b37 647 bss_conf->use_short_preamble = use_short_preamble;
471b3efd 648 changed |= BSS_CHANGED_ERP_PREAMBLE;
7e9ed188 649 }
d9430a32 650
7a5158ef
JB
651 if (use_short_slot != bss_conf->use_short_slot) {
652#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
653 if (net_ratelimit()) {
391429c1
CL
654 printk(KERN_DEBUG "%s: switched to %s slot time"
655 " (BSSID=%pM)\n",
7a5158ef
JB
656 sdata->dev->name,
657 use_short_slot ? "short" : "long",
658 ifsta->bssid);
659 }
660#endif
661 bss_conf->use_short_slot = use_short_slot;
662 changed |= BSS_CHANGED_ERP_SLOT;
50c4afb9
JL
663 }
664
665 return changed;
666}
667
f5e5bf25
TW
668static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
669 struct ieee80211_if_sta *ifsta)
670{
671 union iwreq_data wrqu;
672 memset(&wrqu, 0, sizeof(wrqu));
673 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
674 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
675 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
676 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
677}
678
f698d856 679static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
680 struct ieee80211_if_sta *ifsta)
681{
74af0250
LT
682 char *buf;
683 size_t len;
684 int i;
f0706e82
JB
685 union iwreq_data wrqu;
686
74af0250
LT
687 if (!ifsta->assocreq_ies && !ifsta->assocresp_ies)
688 return;
689
690 buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len +
691 ifsta->assocresp_ies_len), GFP_KERNEL);
692 if (!buf)
693 return;
694
695 len = sprintf(buf, "ASSOCINFO(");
f0706e82 696 if (ifsta->assocreq_ies) {
74af0250
LT
697 len += sprintf(buf + len, "ReqIEs=");
698 for (i = 0; i < ifsta->assocreq_ies_len; i++) {
699 len += sprintf(buf + len, "%02x",
700 ifsta->assocreq_ies[i]);
701 }
f0706e82 702 }
087d833e 703 if (ifsta->assocresp_ies) {
74af0250
LT
704 if (ifsta->assocreq_ies)
705 len += sprintf(buf + len, " ");
706 len += sprintf(buf + len, "RespIEs=");
707 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
708 len += sprintf(buf + len, "%02x",
709 ifsta->assocresp_ies[i]);
710 }
f0706e82 711 }
74af0250
LT
712 len += sprintf(buf + len, ")");
713
714 if (len > IW_CUSTOM_MAX) {
715 len = sprintf(buf, "ASSOCRESPIE=");
716 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
717 len += sprintf(buf + len, "%02x",
718 ifsta->assocresp_ies[i]);
719 }
720 }
721
ad788b5e
JL
722 if (len <= IW_CUSTOM_MAX) {
723 memset(&wrqu, 0, sizeof(wrqu));
724 wrqu.data.length = len;
725 wireless_send_event(sdata->dev, IWEVCUSTOM, &wrqu, buf);
726 }
74af0250
LT
727
728 kfree(buf);
f0706e82
JB
729}
730
731
f698d856 732static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
ae5eb026
JB
733 struct ieee80211_if_sta *ifsta,
734 u32 bss_info_changed)
f0706e82 735{
471b3efd 736 struct ieee80211_local *local = sdata->local;
38668c05 737 struct ieee80211_conf *conf = &local_to_hw(local)->conf;
f0706e82 738
c2b13452 739 struct ieee80211_bss *bss;
d6f2da5b 740
ae5eb026 741 bss_info_changed |= BSS_CHANGED_ASSOC;
f5e5bf25 742 ifsta->flags |= IEEE80211_STA_ASSOCIATED;
5628221c 743
05c914fe 744 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f5e5bf25 745 return;
21c0cbe7 746
f5e5bf25
TW
747 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
748 conf->channel->center_freq,
749 ifsta->ssid, ifsta->ssid_len);
750 if (bss) {
751 /* set timing information */
bda3933a
JB
752 sdata->vif.bss_conf.beacon_int = bss->beacon_int;
753 sdata->vif.bss_conf.timestamp = bss->timestamp;
754 sdata->vif.bss_conf.dtim_period = bss->dtim_period;
21c0cbe7 755
ae5eb026 756 bss_info_changed |= ieee80211_handle_bss_capability(sdata,
7a5158ef 757 bss->capability, bss->has_erp_value, bss->erp_value);
9ac19a90
JB
758
759 ieee80211_rx_bss_put(local, bss);
f0706e82
JB
760 }
761
9ac19a90
JB
762 ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
763 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
764 ieee80211_sta_send_associnfo(sdata, ifsta);
9306102e 765
9ac19a90
JB
766 ifsta->last_probe = jiffies;
767 ieee80211_led_assoc(local, 1);
9306102e 768
bda3933a 769 sdata->vif.bss_conf.assoc = 1;
96dd22ac
JB
770 /*
771 * For now just always ask the driver to update the basic rateset
772 * when we have associated, we aren't checking whether it actually
773 * changed or not.
774 */
ae5eb026
JB
775 bss_info_changed |= BSS_CHANGED_BASIC_RATES;
776 ieee80211_bss_info_change_notify(sdata, bss_info_changed);
f0706e82 777
4be8c387
JB
778 if (local->powersave) {
779 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS) &&
780 local->hw.conf.dynamic_ps_timeout > 0) {
520eb820 781 mod_timer(&local->dynamic_ps_timer, jiffies +
46f2c4bd
JB
782 msecs_to_jiffies(
783 local->hw.conf.dynamic_ps_timeout));
4be8c387
JB
784 } else {
785 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
786 ieee80211_send_nullfunc(local, sdata, 1);
520eb820 787 conf->flags |= IEEE80211_CONF_PS;
4be8c387 788 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
520eb820 789 }
e0cb686f
KV
790 }
791
9ac19a90
JB
792 netif_tx_start_all_queues(sdata->dev);
793 netif_carrier_on(sdata->dev);
f0706e82 794
9ac19a90 795 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB
796}
797
9ac19a90
JB
798static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
799 struct ieee80211_if_sta *ifsta)
f0706e82 800{
9ac19a90
JB
801 ifsta->direct_probe_tries++;
802 if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26
JB
803 printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n",
804 sdata->dev->name, ifsta->bssid);
9ac19a90 805 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 806 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB
807 return;
808 }
f0706e82 809
0c68ae26
JB
810 printk(KERN_DEBUG "%s: direct probe to AP %pM try %d\n",
811 sdata->dev->name, ifsta->bssid,
9ac19a90 812 ifsta->direct_probe_tries);
f0706e82 813
9ac19a90 814 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82 815
9ac19a90
JB
816 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
817
818 /* Direct probe is sent to broadcast address as some APs
819 * will not answer to direct packet in unassociated state.
820 */
821 ieee80211_send_probe_req(sdata, NULL,
822 ifsta->ssid, ifsta->ssid_len);
823
824 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
60f8b39c 825}
f0706e82 826
9ac19a90
JB
827
828static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
829 struct ieee80211_if_sta *ifsta)
f0706e82 830{
9ac19a90
JB
831 ifsta->auth_tries++;
832 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26 833 printk(KERN_DEBUG "%s: authentication with AP %pM"
9ac19a90 834 " timed out\n",
0c68ae26 835 sdata->dev->name, ifsta->bssid);
9ac19a90 836 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 837 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB
838 return;
839 }
f0706e82 840
9ac19a90 841 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
0c68ae26
JB
842 printk(KERN_DEBUG "%s: authenticate with AP %pM\n",
843 sdata->dev->name, ifsta->bssid);
f0706e82 844
9ac19a90
JB
845 ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
846
847 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
f0706e82
JB
848}
849
5925d976
VN
850/*
851 * The disassoc 'reason' argument can be either our own reason
852 * if self disconnected or a reason code from the AP.
853 */
aa458d17
TW
854static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
855 struct ieee80211_if_sta *ifsta, bool deauth,
856 bool self_disconnected, u16 reason)
857{
858 struct ieee80211_local *local = sdata->local;
859 struct sta_info *sta;
e0cb686f 860 u32 changed = 0, config_changed = 0;
aa458d17
TW
861
862 rcu_read_lock();
863
864 sta = sta_info_get(local, ifsta->bssid);
865 if (!sta) {
866 rcu_read_unlock();
867 return;
868 }
869
870 if (deauth) {
871 ifsta->direct_probe_tries = 0;
872 ifsta->auth_tries = 0;
873 }
874 ifsta->assoc_scan_tries = 0;
875 ifsta->assoc_tries = 0;
876
24e64622 877 netif_tx_stop_all_queues(sdata->dev);
aa458d17
TW
878 netif_carrier_off(sdata->dev);
879
17741cdc 880 ieee80211_sta_tear_down_BA_sessions(sdata, sta->sta.addr);
aa458d17
TW
881
882 if (self_disconnected) {
883 if (deauth)
ef422bc0
JB
884 ieee80211_send_deauth_disassoc(sdata,
885 IEEE80211_STYPE_DEAUTH, reason);
aa458d17 886 else
ef422bc0
JB
887 ieee80211_send_deauth_disassoc(sdata,
888 IEEE80211_STYPE_DISASSOC, reason);
aa458d17
TW
889 }
890
f5e5bf25
TW
891 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
892 changed |= ieee80211_reset_erp_info(sdata);
893
f5e5bf25 894 ieee80211_led_assoc(local, 0);
ae5eb026
JB
895 changed |= BSS_CHANGED_ASSOC;
896 sdata->vif.bss_conf.assoc = false;
f5e5bf25
TW
897
898 ieee80211_sta_send_apinfo(sdata, ifsta);
aa458d17 899
5925d976 900 if (self_disconnected || reason == WLAN_REASON_DISASSOC_STA_HAS_LEFT)
aa458d17
TW
901 ifsta->state = IEEE80211_STA_MLME_DISABLED;
902
aa458d17
TW
903 rcu_read_unlock();
904
4797938c 905 /* channel(_type) changes are handled by ieee80211_hw_config */
094d05dc 906 local->oper_channel_type = NL80211_CHAN_NO_HT;
e0cb686f 907
520eb820
KV
908 del_timer_sync(&local->dynamic_ps_timer);
909 cancel_work_sync(&local->dynamic_ps_enable_work);
910
e0cb686f
KV
911 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
912 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
913 config_changed |= IEEE80211_CONF_CHANGE_PS;
914 }
ae5eb026 915
e0cb686f 916 ieee80211_hw_config(local, config_changed);
ae5eb026 917 ieee80211_bss_info_change_notify(sdata, changed);
8e268e47
TW
918
919 rcu_read_lock();
920
921 sta = sta_info_get(local, ifsta->bssid);
922 if (!sta) {
923 rcu_read_unlock();
924 return;
925 }
926
927 sta_info_unlink(&sta);
928
929 rcu_read_unlock();
930
931 sta_info_destroy(sta);
aa458d17 932}
f0706e82 933
9ac19a90
JB
934static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
935{
936 if (!sdata || !sdata->default_key ||
937 sdata->default_key->conf.alg != ALG_WEP)
938 return 0;
939 return 1;
940}
941
f698d856 942static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
943 struct ieee80211_if_sta *ifsta)
944{
f698d856 945 struct ieee80211_local *local = sdata->local;
c2b13452 946 struct ieee80211_bss *bss;
5b98b1f7
JB
947 int bss_privacy;
948 int wep_privacy;
949 int privacy_invoked;
f0706e82 950
5b98b1f7 951 if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
f0706e82
JB
952 return 0;
953
f698d856 954 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
8318d78a 955 local->hw.conf.channel->center_freq,
cffdd30d 956 ifsta->ssid, ifsta->ssid_len);
f0706e82
JB
957 if (!bss)
958 return 0;
959
5b98b1f7 960 bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
f698d856 961 wep_privacy = !!ieee80211_sta_wep_configured(sdata);
5b98b1f7 962 privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
f0706e82 963
3e122be0 964 ieee80211_rx_bss_put(local, bss);
f0706e82 965
5b98b1f7
JB
966 if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
967 return 0;
968
969 return 1;
f0706e82
JB
970}
971
f698d856 972static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
973 struct ieee80211_if_sta *ifsta)
974{
975 ifsta->assoc_tries++;
976 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
0c68ae26 977 printk(KERN_DEBUG "%s: association with AP %pM"
f0706e82 978 " timed out\n",
0c68ae26 979 sdata->dev->name, ifsta->bssid);
48c2fc59 980 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 981 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB
982 return;
983 }
984
48c2fc59 985 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
0c68ae26
JB
986 printk(KERN_DEBUG "%s: associate with AP %pM\n",
987 sdata->dev->name, ifsta->bssid);
f698d856 988 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
f0706e82 989 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
f698d856 990 "mixed-cell disabled - abort association\n", sdata->dev->name);
48c2fc59 991 ifsta->state = IEEE80211_STA_MLME_DISABLED;
f0706e82
JB
992 return;
993 }
994
f698d856 995 ieee80211_send_assoc(sdata, ifsta);
f0706e82
JB
996
997 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
998}
999
1000
f698d856 1001static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1002 struct ieee80211_if_sta *ifsta)
1003{
f698d856 1004 struct ieee80211_local *local = sdata->local;
f0706e82
JB
1005 struct sta_info *sta;
1006 int disassoc;
1007
1008 /* TODO: start monitoring current AP signal quality and number of
1009 * missed beacons. Scan other channels every now and then and search
1010 * for better APs. */
1011 /* TODO: remove expired BSSes */
1012
48c2fc59 1013 ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
f0706e82 1014
d0709a65
JB
1015 rcu_read_lock();
1016
f0706e82
JB
1017 sta = sta_info_get(local, ifsta->bssid);
1018 if (!sta) {
0c68ae26
JB
1019 printk(KERN_DEBUG "%s: No STA entry for own AP %pM\n",
1020 sdata->dev->name, ifsta->bssid);
f0706e82
JB
1021 disassoc = 1;
1022 } else {
1023 disassoc = 0;
1024 if (time_after(jiffies,
1025 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
d6f2da5b 1026 if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
f0706e82 1027 printk(KERN_DEBUG "%s: No ProbeResp from "
0c68ae26 1028 "current AP %pM - assume out of "
f0706e82 1029 "range\n",
0c68ae26 1030 sdata->dev->name, ifsta->bssid);
f0706e82 1031 disassoc = 1;
d6f2da5b 1032 } else
f698d856 1033 ieee80211_send_probe_req(sdata, ifsta->bssid,
4dfe51e1
JB
1034 ifsta->ssid,
1035 ifsta->ssid_len);
d6f2da5b 1036 ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
f0706e82 1037 } else {
d6f2da5b 1038 ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
f0706e82
JB
1039 if (time_after(jiffies, ifsta->last_probe +
1040 IEEE80211_PROBE_INTERVAL)) {
1041 ifsta->last_probe = jiffies;
f698d856 1042 ieee80211_send_probe_req(sdata, ifsta->bssid,
f0706e82
JB
1043 ifsta->ssid,
1044 ifsta->ssid_len);
1045 }
1046 }
f0706e82 1047 }
d0709a65
JB
1048
1049 rcu_read_unlock();
1050
60f8b39c
JB
1051 if (disassoc)
1052 ieee80211_set_disassoc(sdata, ifsta, true, true,
1053 WLAN_REASON_PREV_AUTH_NOT_VALID);
1054 else
1055 mod_timer(&ifsta->timer, jiffies +
1056 IEEE80211_MONITORING_INTERVAL);
f0706e82
JB
1057}
1058
1059
f698d856 1060static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1061 struct ieee80211_if_sta *ifsta)
1062{
f698d856 1063 printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
d6f2da5b 1064 ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
f698d856 1065 ieee80211_associate(sdata, ifsta);
f0706e82
JB
1066}
1067
1068
f698d856 1069static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1070 struct ieee80211_if_sta *ifsta,
1071 struct ieee80211_mgmt *mgmt,
1072 size_t len)
1073{
1074 u8 *pos;
1075 struct ieee802_11_elems elems;
1076
f0706e82 1077 pos = mgmt->u.auth.variable;
67a4cce4 1078 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
f4ea83dd 1079 if (!elems.challenge)
f0706e82 1080 return;
f698d856 1081 ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
f0706e82
JB
1082 elems.challenge_len + 2, 1);
1083}
1084
f698d856 1085static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1086 struct ieee80211_if_sta *ifsta,
1087 struct ieee80211_mgmt *mgmt,
1088 size_t len)
1089{
f0706e82
JB
1090 u16 auth_alg, auth_transaction, status_code;
1091
48c2fc59 1092 if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
05c914fe 1093 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82 1094 return;
f0706e82 1095
f4ea83dd 1096 if (len < 24 + 6)
f0706e82 1097 return;
f0706e82 1098
05c914fe 1099 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1100 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1101 return;
f0706e82 1102
05c914fe 1103 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1104 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
f0706e82 1105 return;
f0706e82
JB
1106
1107 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1108 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1109 status_code = le16_to_cpu(mgmt->u.auth.status_code);
1110
05c914fe 1111 if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
135a2110
JB
1112 /*
1113 * IEEE 802.11 standard does not require authentication in IBSS
f0706e82
JB
1114 * networks and most implementations do not seem to use it.
1115 * However, try to reply to authentication attempts if someone
1116 * has actually implemented this.
135a2110 1117 */
f4ea83dd 1118 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
f0706e82 1119 return;
f698d856 1120 ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
f0706e82
JB
1121 }
1122
1123 if (auth_alg != ifsta->auth_alg ||
f4ea83dd 1124 auth_transaction != ifsta->auth_transaction)
f0706e82 1125 return;
f0706e82
JB
1126
1127 if (status_code != WLAN_STATUS_SUCCESS) {
f0706e82
JB
1128 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1129 u8 algs[3];
1130 const int num_algs = ARRAY_SIZE(algs);
1131 int i, pos;
1132 algs[0] = algs[1] = algs[2] = 0xff;
1133 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1134 algs[0] = WLAN_AUTH_OPEN;
1135 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1136 algs[1] = WLAN_AUTH_SHARED_KEY;
1137 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1138 algs[2] = WLAN_AUTH_LEAP;
1139 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1140 pos = 0;
1141 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1142 pos = 1;
1143 else
1144 pos = 2;
1145 for (i = 0; i < num_algs; i++) {
1146 pos++;
1147 if (pos >= num_algs)
1148 pos = 0;
1149 if (algs[pos] == ifsta->auth_alg ||
1150 algs[pos] == 0xff)
1151 continue;
1152 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
f698d856 1153 !ieee80211_sta_wep_configured(sdata))
f0706e82
JB
1154 continue;
1155 ifsta->auth_alg = algs[pos];
f0706e82
JB
1156 break;
1157 }
1158 }
1159 return;
1160 }
1161
1162 switch (ifsta->auth_alg) {
1163 case WLAN_AUTH_OPEN:
1164 case WLAN_AUTH_LEAP:
f698d856 1165 ieee80211_auth_completed(sdata, ifsta);
f0706e82
JB
1166 break;
1167 case WLAN_AUTH_SHARED_KEY:
1168 if (ifsta->auth_transaction == 4)
f698d856 1169 ieee80211_auth_completed(sdata, ifsta);
f0706e82 1170 else
f698d856 1171 ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
f0706e82
JB
1172 break;
1173 }
1174}
1175
1176
f698d856 1177static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1178 struct ieee80211_if_sta *ifsta,
1179 struct ieee80211_mgmt *mgmt,
1180 size_t len)
1181{
1182 u16 reason_code;
1183
f4ea83dd 1184 if (len < 24 + 2)
f0706e82 1185 return;
f0706e82 1186
f4ea83dd 1187 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1188 return;
f0706e82
JB
1189
1190 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1191
988c0f72 1192 if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
97c8b013
ZY
1193 printk(KERN_DEBUG "%s: deauthenticated (Reason: %u)\n",
1194 sdata->dev->name, reason_code);
f0706e82 1195
48c2fc59
TW
1196 if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1197 ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1198 ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
9859b81e 1199 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82
JB
1200 mod_timer(&ifsta->timer, jiffies +
1201 IEEE80211_RETRY_AUTH_INTERVAL);
1202 }
1203
aa458d17 1204 ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
d6f2da5b 1205 ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
f0706e82
JB
1206}
1207
1208
f698d856 1209static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1210 struct ieee80211_if_sta *ifsta,
1211 struct ieee80211_mgmt *mgmt,
1212 size_t len)
1213{
1214 u16 reason_code;
1215
f4ea83dd 1216 if (len < 24 + 2)
f0706e82 1217 return;
f0706e82 1218
f4ea83dd 1219 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1220 return;
f0706e82
JB
1221
1222 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1223
d6f2da5b 1224 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
97c8b013
ZY
1225 printk(KERN_DEBUG "%s: disassociated (Reason: %u)\n",
1226 sdata->dev->name, reason_code);
f0706e82 1227
48c2fc59
TW
1228 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1229 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
f0706e82
JB
1230 mod_timer(&ifsta->timer, jiffies +
1231 IEEE80211_RETRY_AUTH_INTERVAL);
1232 }
1233
5925d976 1234 ieee80211_set_disassoc(sdata, ifsta, false, false, reason_code);
f0706e82
JB
1235}
1236
1237
471b3efd 1238static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1239 struct ieee80211_if_sta *ifsta,
1240 struct ieee80211_mgmt *mgmt,
1241 size_t len,
1242 int reassoc)
1243{
471b3efd 1244 struct ieee80211_local *local = sdata->local;
8318d78a 1245 struct ieee80211_supported_band *sband;
f0706e82 1246 struct sta_info *sta;
8318d78a 1247 u64 rates, basic_rates;
f0706e82
JB
1248 u16 capab_info, status_code, aid;
1249 struct ieee802_11_elems elems;
bda3933a 1250 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
f0706e82 1251 u8 *pos;
ae5eb026 1252 u32 changed = 0;
f0706e82 1253 int i, j;
ddf4ac53 1254 bool have_higher_than_11mbit = false, newsta = false;
ae5eb026 1255 u16 ap_ht_cap_flags;
f0706e82
JB
1256
1257 /* AssocResp and ReassocResp have identical structure, so process both
1258 * of them in this function. */
1259
48c2fc59 1260 if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
f0706e82 1261 return;
f0706e82 1262
f4ea83dd 1263 if (len < 24 + 6)
f0706e82 1264 return;
f0706e82 1265
f4ea83dd 1266 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1267 return;
f0706e82
JB
1268
1269 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1270 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1271 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
f0706e82 1272
0c68ae26 1273 printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x "
f0706e82 1274 "status=%d aid=%d)\n",
0c68ae26 1275 sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa,
ddd68587 1276 capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
f0706e82 1277
63a5ab82
JM
1278 pos = mgmt->u.assoc_resp.variable;
1279 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1280
1281 if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY &&
1282 elems.assoc_comeback && elems.assoc_comeback_len == 4) {
1283 u32 tu, ms;
1284 tu = get_unaligned_le32(elems.assoc_comeback);
1285 ms = tu * 1024 / 1000;
1286 printk(KERN_DEBUG "%s: AP rejected association temporarily; "
1287 "comeback duration %u TU (%u ms)\n",
1288 sdata->dev->name, tu, ms);
1289 if (ms > IEEE80211_ASSOC_TIMEOUT)
1290 mod_timer(&ifsta->timer,
1291 jiffies + msecs_to_jiffies(ms));
1292 return;
1293 }
1294
f0706e82
JB
1295 if (status_code != WLAN_STATUS_SUCCESS) {
1296 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
f698d856 1297 sdata->dev->name, status_code);
8a69aa93
DD
1298 /* if this was a reassociation, ensure we try a "full"
1299 * association next time. This works around some broken APs
1300 * which do not correctly reject reassociation requests. */
d6f2da5b 1301 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
f0706e82
JB
1302 return;
1303 }
1304
1dd84aa2
JB
1305 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1306 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
f698d856 1307 "set\n", sdata->dev->name, aid);
1dd84aa2
JB
1308 aid &= ~(BIT(15) | BIT(14));
1309
f0706e82
JB
1310 if (!elems.supp_rates) {
1311 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
f698d856 1312 sdata->dev->name);
f0706e82
JB
1313 return;
1314 }
1315
f698d856 1316 printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
f0706e82
JB
1317 ifsta->aid = aid;
1318 ifsta->ap_capab = capab_info;
1319
1320 kfree(ifsta->assocresp_ies);
1321 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
0ec0b7ac 1322 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
f0706e82
JB
1323 if (ifsta->assocresp_ies)
1324 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1325
d0709a65
JB
1326 rcu_read_lock();
1327
f0706e82
JB
1328 /* Add STA entry for the AP */
1329 sta = sta_info_get(local, ifsta->bssid);
1330 if (!sta) {
c2b13452 1331 struct ieee80211_bss *bss;
ddf4ac53
JB
1332
1333 newsta = true;
d0709a65 1334
73651ee6
JB
1335 sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1336 if (!sta) {
1337 printk(KERN_DEBUG "%s: failed to alloc STA entry for"
f698d856 1338 " the AP\n", sdata->dev->name);
d0709a65 1339 rcu_read_unlock();
f0706e82
JB
1340 return;
1341 }
60f8b39c
JB
1342 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1343 local->hw.conf.channel->center_freq,
1344 ifsta->ssid, ifsta->ssid_len);
1345 if (bss) {
1346 sta->last_signal = bss->signal;
1347 sta->last_qual = bss->qual;
1348 sta->last_noise = bss->noise;
1349 ieee80211_rx_bss_put(local, bss);
1350 }
f709fc69 1351
60f8b39c
JB
1352 /* update new sta with its last rx activity */
1353 sta->last_rx = jiffies;
f709fc69 1354 }
f709fc69 1355
60f8b39c
JB
1356 /*
1357 * FIXME: Do we really need to update the sta_info's information here?
1358 * We already know about the AP (we found it in our list) so it
1359 * should already be filled with the right info, no?
1360 * As is stands, all this is racy because typically we assume
1361 * the information that is filled in here (except flags) doesn't
1362 * change while a STA structure is alive. As such, it should move
1363 * to between the sta_info_alloc() and sta_info_insert() above.
1364 */
f709fc69 1365
60f8b39c
JB
1366 set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1367 WLAN_STA_AUTHORIZED);
05e5e883 1368
60f8b39c
JB
1369 rates = 0;
1370 basic_rates = 0;
1371 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
f709fc69 1372
60f8b39c
JB
1373 for (i = 0; i < elems.supp_rates_len; i++) {
1374 int rate = (elems.supp_rates[i] & 0x7f) * 5;
d61272cb 1375 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f709fc69 1376
60f8b39c
JB
1377 if (rate > 110)
1378 have_higher_than_11mbit = true;
1379
1380 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1381 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1382 rates |= BIT(j);
d61272cb
TW
1383 if (is_basic)
1384 basic_rates |= BIT(j);
1385 break;
1386 }
f709fc69 1387 }
f709fc69
LCC
1388 }
1389
60f8b39c
JB
1390 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1391 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
d61272cb 1392 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f0706e82 1393
60f8b39c
JB
1394 if (rate > 110)
1395 have_higher_than_11mbit = true;
f0706e82 1396
60f8b39c 1397 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1398 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1399 rates |= BIT(j);
d61272cb
TW
1400 if (is_basic)
1401 basic_rates |= BIT(j);
1402 break;
1403 }
60f8b39c 1404 }
1ebebea8 1405 }
f0706e82 1406
323ce79a 1407 sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
bda3933a 1408 sdata->vif.bss_conf.basic_rates = basic_rates;
60f8b39c
JB
1409
1410 /* cf. IEEE 802.11 9.2.12 */
1411 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1412 have_higher_than_11mbit)
1413 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1414 else
1415 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
f0706e82 1416
ae5eb026
JB
1417 if (elems.ht_cap_elem)
1418 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
d9fe60de 1419 elems.ht_cap_elem, &sta->sta.ht_cap);
ae5eb026
JB
1420
1421 ap_ht_cap_flags = sta->sta.ht_cap.cap;
f0706e82 1422
4b7679a5 1423 rate_control_rate_init(sta);
f0706e82 1424
5394af4d
JM
1425 if (ifsta->flags & IEEE80211_STA_MFP_ENABLED)
1426 set_sta_flags(sta, WLAN_STA_MFP);
1427
ddf4ac53 1428 if (elems.wmm_param)
60f8b39c 1429 set_sta_flags(sta, WLAN_STA_WME);
ddf4ac53
JB
1430
1431 if (newsta) {
1432 int err = sta_info_insert(sta);
1433 if (err) {
1434 printk(KERN_DEBUG "%s: failed to insert STA entry for"
1435 " the AP (error %d)\n", sdata->dev->name, err);
1436 rcu_read_unlock();
1437 return;
1438 }
1439 }
1440
1441 rcu_read_unlock();
1442
1443 if (elems.wmm_param)
60f8b39c
JB
1444 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1445 elems.wmm_param_len);
f0706e82 1446
ae5eb026
JB
1447 if (elems.ht_info_elem && elems.wmm_param &&
1448 (ifsta->flags & IEEE80211_STA_WMM_ENABLED))
1449 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1450 ap_ht_cap_flags);
1451
60f8b39c
JB
1452 /* set AID and assoc capability,
1453 * ieee80211_set_associated() will tell the driver */
1454 bss_conf->aid = aid;
1455 bss_conf->assoc_capability = capab_info;
ae5eb026 1456 ieee80211_set_associated(sdata, ifsta, changed);
f0706e82 1457
60f8b39c 1458 ieee80211_associated(sdata, ifsta);
f0706e82
JB
1459}
1460
1461
f698d856 1462static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
a607268a 1463 struct ieee80211_if_sta *ifsta,
c2b13452 1464 struct ieee80211_bss *bss)
a607268a 1465{
f698d856 1466 struct ieee80211_local *local = sdata->local;
a607268a
BR
1467 int res, rates, i, j;
1468 struct sk_buff *skb;
1469 struct ieee80211_mgmt *mgmt;
a607268a 1470 u8 *pos;
a607268a 1471 struct ieee80211_supported_band *sband;
507b06d0 1472 union iwreq_data wrqu;
a607268a 1473
e2ef12d3
RR
1474 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1475 if (!skb) {
1476 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
1477 "response\n", sdata->dev->name);
1478 return -ENOMEM;
1479 }
1480
a607268a
BR
1481 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1482
1483 /* Remove possible STA entries from other IBSS networks. */
dc6676b7 1484 sta_info_flush_delayed(sdata);
a607268a
BR
1485
1486 if (local->ops->reset_tsf) {
1487 /* Reset own TSF to allow time synchronization work. */
1488 local->ops->reset_tsf(local_to_hw(local));
1489 }
1490 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
9d139c81 1491 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
a607268a
BR
1492 if (res)
1493 return res;
1494
1495 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1496
a607268a
BR
1497 sdata->drop_unencrypted = bss->capability &
1498 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1499
f698d856 1500 res = ieee80211_set_freq(sdata, bss->freq);
a607268a 1501
be038b37
AK
1502 if (res)
1503 return res;
a607268a 1504
9d139c81 1505 /* Build IBSS probe response */
a607268a 1506
e2ef12d3 1507 skb_reserve(skb, local->hw.extra_tx_headroom);
a607268a 1508
e2ef12d3
RR
1509 mgmt = (struct ieee80211_mgmt *)
1510 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1511 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1512 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1513 IEEE80211_STYPE_PROBE_RESP);
1514 memset(mgmt->da, 0xff, ETH_ALEN);
1515 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1516 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1517 mgmt->u.beacon.beacon_int =
1518 cpu_to_le16(local->hw.conf.beacon_int);
1519 mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1520 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
a607268a 1521
e2ef12d3
RR
1522 pos = skb_put(skb, 2 + ifsta->ssid_len);
1523 *pos++ = WLAN_EID_SSID;
1524 *pos++ = ifsta->ssid_len;
1525 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
a607268a 1526
e2ef12d3
RR
1527 rates = bss->supp_rates_len;
1528 if (rates > 8)
1529 rates = 8;
1530 pos = skb_put(skb, 2 + rates);
1531 *pos++ = WLAN_EID_SUPP_RATES;
1532 *pos++ = rates;
1533 memcpy(pos, bss->supp_rates, rates);
1534
1535 if (bss->band == IEEE80211_BAND_2GHZ) {
1536 pos = skb_put(skb, 2 + 1);
1537 *pos++ = WLAN_EID_DS_PARAMS;
1538 *pos++ = 1;
1539 *pos++ = ieee80211_frequency_to_channel(bss->freq);
1540 }
a607268a 1541
e2ef12d3
RR
1542 pos = skb_put(skb, 2 + 2);
1543 *pos++ = WLAN_EID_IBSS_PARAMS;
1544 *pos++ = 2;
1545 /* FIX: set ATIM window based on scan results */
1546 *pos++ = 0;
1547 *pos++ = 0;
e039fa4a 1548
e2ef12d3
RR
1549 if (bss->supp_rates_len > 8) {
1550 rates = bss->supp_rates_len - 8;
1551 pos = skb_put(skb, 2 + rates);
1552 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1553 *pos++ = rates;
1554 memcpy(pos, &bss->supp_rates[8], rates);
9d139c81 1555 }
a607268a 1556
e2ef12d3
RR
1557 ifsta->probe_resp = skb;
1558
1559 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1560
1561
9d139c81
JB
1562 rates = 0;
1563 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1564 for (i = 0; i < bss->supp_rates_len; i++) {
1565 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1566 for (j = 0; j < sband->n_bitrates; j++)
1567 if (sband->bitrates[j].bitrate == bitrate)
1568 rates |= BIT(j);
a607268a 1569 }
9d139c81
JB
1570 ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1571
b079ada7 1572 ieee80211_sta_def_wmm_params(sdata, bss);
a607268a 1573
48c2fc59 1574 ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
a607268a
BR
1575 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1576
4492bea6
EG
1577 ieee80211_led_assoc(local, true);
1578
507b06d0
DW
1579 memset(&wrqu, 0, sizeof(wrqu));
1580 memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
f698d856 1581 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
a607268a
BR
1582
1583 return res;
1584}
1585
98c8fccf
JB
1586static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1587 struct ieee80211_mgmt *mgmt,
1588 size_t len,
1589 struct ieee80211_rx_status *rx_status,
1590 struct ieee802_11_elems *elems,
1591 bool beacon)
1592{
1593 struct ieee80211_local *local = sdata->local;
1594 int freq;
c2b13452 1595 struct ieee80211_bss *bss;
98c8fccf
JB
1596 struct sta_info *sta;
1597 struct ieee80211_channel *channel;
1598 u64 beacon_timestamp, rx_timestamp;
1599 u64 supp_rates = 0;
1600 enum ieee80211_band band = rx_status->band;
98c8fccf
JB
1601
1602 if (elems->ds_params && elems->ds_params_len == 1)
1603 freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1604 else
1605 freq = rx_status->freq;
1606
1607 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1608
1609 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1610 return;
1611
05c914fe 1612 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && elems->supp_rates &&
98c8fccf
JB
1613 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1614 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1615
1616 rcu_read_lock();
1617
1618 sta = sta_info_get(local, mgmt->sa);
1619 if (sta) {
1620 u64 prev_rates;
1621
323ce79a 1622 prev_rates = sta->sta.supp_rates[band];
98c8fccf 1623 /* make sure mandatory rates are always added */
323ce79a 1624 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 1625 ieee80211_mandatory_rates(local, band);
98c8fccf
JB
1626
1627#ifdef CONFIG_MAC80211_IBSS_DEBUG
323ce79a 1628 if (sta->sta.supp_rates[band] != prev_rates)
98c8fccf 1629 printk(KERN_DEBUG "%s: updated supp_rates set "
0c68ae26 1630 "for %pM based on beacon info (0x%llx | "
98c8fccf 1631 "0x%llx -> 0x%llx)\n",
17741cdc 1632 sdata->dev->name,
0c68ae26 1633 sta->sta.addr,
98c8fccf
JB
1634 (unsigned long long) prev_rates,
1635 (unsigned long long) supp_rates,
323ce79a 1636 (unsigned long long) sta->sta.supp_rates[band]);
98c8fccf
JB
1637#endif
1638 } else {
ab1f5c0b 1639 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
98c8fccf
JB
1640 }
1641
1642 rcu_read_unlock();
1643 }
1644
1645 bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1646 freq, beacon);
1647 if (!bss)
1648 return;
1649
c481ec97
S
1650 if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) &&
1651 (memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0)) {
1652 struct ieee80211_channel_sw_ie *sw_elem =
1653 (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem;
1654 ieee80211_process_chanswitch(sdata, sw_elem, bss);
1655 }
1656
98c8fccf
JB
1657 /* was just updated in ieee80211_bss_info_update */
1658 beacon_timestamp = bss->timestamp;
1659
30b89b0f
JB
1660 /*
1661 * In STA mode, the remaining parameters should not be overridden
1662 * by beacons because they're not necessarily accurate there.
1663 */
05c914fe 1664 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
9859b81e 1665 bss->last_probe_resp && beacon) {
3e122be0 1666 ieee80211_rx_bss_put(local, bss);
30b89b0f
JB
1667 return;
1668 }
1669
9d9bf77d 1670 /* check if we need to merge IBSS */
05c914fe 1671 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && beacon &&
65f0e6a3 1672 (!(sdata->u.sta.flags & IEEE80211_STA_BSSID_SET)) &&
fba4a1e6 1673 bss->capability & WLAN_CAPABILITY_IBSS &&
9d9bf77d 1674 bss->freq == local->oper_channel->center_freq &&
ae6a44e3
EK
1675 elems->ssid_len == sdata->u.sta.ssid_len &&
1676 memcmp(elems->ssid, sdata->u.sta.ssid,
1677 sdata->u.sta.ssid_len) == 0) {
9d9bf77d
BR
1678 if (rx_status->flag & RX_FLAG_TSFT) {
1679 /* in order for correct IBSS merging we need mactime
1680 *
1681 * since mactime is defined as the time the first data
1682 * symbol of the frame hits the PHY, and the timestamp
1683 * of the beacon is defined as "the time that the data
1684 * symbol containing the first bit of the timestamp is
1685 * transmitted to the PHY plus the transmitting STA’s
1686 * delays through its local PHY from the MAC-PHY
1687 * interface to its interface with the WM"
1688 * (802.11 11.1.2) - equals the time this bit arrives at
1689 * the receiver - we have to take into account the
1690 * offset between the two.
1691 * e.g: at 1 MBit that means mactime is 192 usec earlier
1692 * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
1693 */
0fb8ca45
JM
1694 int rate;
1695 if (rx_status->flag & RX_FLAG_HT) {
1696 rate = 65; /* TODO: HT rates */
1697 } else {
1698 rate = local->hw.wiphy->bands[band]->
9d9bf77d 1699 bitrates[rx_status->rate_idx].bitrate;
0fb8ca45 1700 }
9d9bf77d
BR
1701 rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
1702 } else if (local && local->ops && local->ops->get_tsf)
1703 /* second best option: get current TSF */
1704 rx_timestamp = local->ops->get_tsf(local_to_hw(local));
1705 else
1706 /* can't merge without knowing the TSF */
1707 rx_timestamp = -1LLU;
1708#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB
1709 printk(KERN_DEBUG "RX beacon SA=%pM BSSID="
1710 "%pM TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
1711 mgmt->sa, mgmt->bssid,
9d9bf77d
BR
1712 (unsigned long long)rx_timestamp,
1713 (unsigned long long)beacon_timestamp,
1714 (unsigned long long)(rx_timestamp - beacon_timestamp),
1715 jiffies);
1716#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1717 if (beacon_timestamp > rx_timestamp) {
576fdeae 1718#ifdef CONFIG_MAC80211_IBSS_DEBUG
f4ea83dd 1719 printk(KERN_DEBUG "%s: beacon TSF higher than "
0c68ae26
JB
1720 "local TSF - IBSS merge with BSSID %pM\n",
1721 sdata->dev->name, mgmt->bssid);
fba4a1e6 1722#endif
f698d856 1723 ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
ab1f5c0b 1724 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
9d9bf77d
BR
1725 }
1726 }
1727
3e122be0 1728 ieee80211_rx_bss_put(local, bss);
f0706e82
JB
1729}
1730
1731
f698d856 1732static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1733 struct ieee80211_mgmt *mgmt,
1734 size_t len,
1735 struct ieee80211_rx_status *rx_status)
1736{
ae6a44e3
EK
1737 size_t baselen;
1738 struct ieee802_11_elems elems;
9859b81e 1739 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ae6a44e3 1740
8e7cdbb6
TW
1741 if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
1742 return; /* ignore ProbeResp to foreign address */
1743
ae6a44e3
EK
1744 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1745 if (baselen > len)
1746 return;
1747
1748 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1749 &elems);
1750
98c8fccf 1751 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
9859b81e
RR
1752
1753 /* direct probe may be part of the association flow */
1754 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
1755 &ifsta->request)) {
1756 printk(KERN_DEBUG "%s direct probe responded\n",
1757 sdata->dev->name);
1758 ieee80211_authenticate(sdata, ifsta);
1759 }
f0706e82
JB
1760}
1761
1762
f698d856 1763static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1764 struct ieee80211_mgmt *mgmt,
1765 size_t len,
1766 struct ieee80211_rx_status *rx_status)
1767{
f0706e82 1768 struct ieee80211_if_sta *ifsta;
f0706e82
JB
1769 size_t baselen;
1770 struct ieee802_11_elems elems;
f698d856 1771 struct ieee80211_local *local = sdata->local;
471b3efd 1772 u32 changed = 0;
a97b77b9 1773 bool erp_valid, directed_tim, is_mc = false;
7a5158ef 1774 u8 erp_value = 0;
f0706e82 1775
ae6a44e3
EK
1776 /* Process beacon from the current BSS */
1777 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1778 if (baselen > len)
1779 return;
1780
1781 ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
1782
98c8fccf 1783 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
f0706e82 1784
05c914fe 1785 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB
1786 return;
1787 ifsta = &sdata->u.sta;
1788
d6f2da5b 1789 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
f0706e82
JB
1790 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1791 return;
1792
c481ec97
S
1793 if (rx_status->freq != local->hw.conf.channel->center_freq)
1794 return;
1795
fe3fa827
JB
1796 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1797 elems.wmm_param_len);
1798
4be8c387
JB
1799 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK &&
1800 local->hw.conf.flags & IEEE80211_CONF_PS) {
a97b77b9
VN
1801 directed_tim = check_tim(&elems, ifsta->aid, &is_mc);
1802
1803 if (directed_tim || is_mc) {
4be8c387
JB
1804 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
1805 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
1806 ieee80211_send_nullfunc(local, sdata, 0);
a97b77b9
VN
1807 }
1808 }
7a5158ef
JB
1809
1810 if (elems.erp_info && elems.erp_info_len >= 1) {
1811 erp_valid = true;
1812 erp_value = elems.erp_info[0];
1813 } else {
1814 erp_valid = false;
50c4afb9 1815 }
7a5158ef
JB
1816 changed |= ieee80211_handle_bss_capability(sdata,
1817 le16_to_cpu(mgmt->u.beacon.capab_info),
1818 erp_valid, erp_value);
f0706e82 1819
d3c990fb 1820
ae5eb026
JB
1821 if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param) {
1822 struct sta_info *sta;
1823 struct ieee80211_supported_band *sband;
1824 u16 ap_ht_cap_flags;
1825
1826 rcu_read_lock();
1827
1828 sta = sta_info_get(local, ifsta->bssid);
1829 if (!sta) {
1830 rcu_read_unlock();
1831 return;
1832 }
1833
1834 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1835
1836 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
1837 elems.ht_cap_elem, &sta->sta.ht_cap);
1838
1839 ap_ht_cap_flags = sta->sta.ht_cap.cap;
1840
1841 rcu_read_unlock();
1842
1843 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1844 ap_ht_cap_flags);
d3c990fb
RR
1845 }
1846
3f2355cb
LR
1847 if (elems.country_elem) {
1848 /* Note we are only reviewing this on beacons
1849 * for the BSSID we are associated to */
1850 regulatory_hint_11d(local->hw.wiphy,
1851 elems.country_elem, elems.country_elem_len);
1852 }
1853
471b3efd 1854 ieee80211_bss_info_change_notify(sdata, changed);
f0706e82
JB
1855}
1856
1857
f698d856 1858static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1859 struct ieee80211_if_sta *ifsta,
1860 struct ieee80211_mgmt *mgmt,
504a71e4 1861 size_t len)
f0706e82 1862{
f698d856 1863 struct ieee80211_local *local = sdata->local;
f0706e82
JB
1864 int tx_last_beacon;
1865 struct sk_buff *skb;
1866 struct ieee80211_mgmt *resp;
1867 u8 *pos, *end;
1868
05c914fe 1869 if (sdata->vif.type != NL80211_IFTYPE_ADHOC ||
48c2fc59 1870 ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
f0706e82
JB
1871 len < 24 + 2 || !ifsta->probe_resp)
1872 return;
1873
1874 if (local->ops->tx_last_beacon)
1875 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
1876 else
1877 tx_last_beacon = 1;
1878
1879#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB
1880 printk(KERN_DEBUG "%s: RX ProbeReq SA=%pM DA=%pM BSSID=%pM"
1881 " (tx_last_beacon=%d)\n",
1882 sdata->dev->name, mgmt->sa, mgmt->da,
1883 mgmt->bssid, tx_last_beacon);
f0706e82
JB
1884#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1885
1886 if (!tx_last_beacon)
1887 return;
1888
1889 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
1890 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
1891 return;
1892
1893 end = ((u8 *) mgmt) + len;
1894 pos = mgmt->u.probe_req.variable;
1895 if (pos[0] != WLAN_EID_SSID ||
1896 pos + 2 + pos[1] > end) {
f4ea83dd
JB
1897#ifdef CONFIG_MAC80211_IBSS_DEBUG
1898 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
0c68ae26
JB
1899 "from %pM\n",
1900 sdata->dev->name, mgmt->sa);
f4ea83dd 1901#endif
f0706e82
JB
1902 return;
1903 }
1904 if (pos[1] != 0 &&
1905 (pos[1] != ifsta->ssid_len ||
1906 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
1907 /* Ignore ProbeReq for foreign SSID */
1908 return;
1909 }
1910
1911 /* Reply with ProbeResp */
0ec0b7ac 1912 skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
f0706e82
JB
1913 if (!skb)
1914 return;
1915
1916 resp = (struct ieee80211_mgmt *) skb->data;
1917 memcpy(resp->da, mgmt->sa, ETH_ALEN);
1918#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB
1919 printk(KERN_DEBUG "%s: Sending ProbeResp to %pM\n",
1920 sdata->dev->name, resp->da);
f0706e82 1921#endif /* CONFIG_MAC80211_IBSS_DEBUG */
e50db65c 1922 ieee80211_tx_skb(sdata, skb, 0);
f0706e82
JB
1923}
1924
f698d856 1925void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
f0706e82
JB
1926 struct ieee80211_rx_status *rx_status)
1927{
f698d856 1928 struct ieee80211_local *local = sdata->local;
f0706e82
JB
1929 struct ieee80211_if_sta *ifsta;
1930 struct ieee80211_mgmt *mgmt;
1931 u16 fc;
1932
1933 if (skb->len < 24)
1934 goto fail;
1935
f0706e82
JB
1936 ifsta = &sdata->u.sta;
1937
1938 mgmt = (struct ieee80211_mgmt *) skb->data;
1939 fc = le16_to_cpu(mgmt->frame_control);
1940
1941 switch (fc & IEEE80211_FCTL_STYPE) {
1942 case IEEE80211_STYPE_PROBE_REQ:
1943 case IEEE80211_STYPE_PROBE_RESP:
1944 case IEEE80211_STYPE_BEACON:
1945 memcpy(skb->cb, rx_status, sizeof(*rx_status));
1946 case IEEE80211_STYPE_AUTH:
1947 case IEEE80211_STYPE_ASSOC_RESP:
1948 case IEEE80211_STYPE_REASSOC_RESP:
1949 case IEEE80211_STYPE_DEAUTH:
1950 case IEEE80211_STYPE_DISASSOC:
1951 skb_queue_tail(&ifsta->skb_queue, skb);
1952 queue_work(local->hw.workqueue, &ifsta->work);
1953 return;
f0706e82
JB
1954 }
1955
1956 fail:
1957 kfree_skb(skb);
1958}
1959
f698d856 1960static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
1961 struct sk_buff *skb)
1962{
1963 struct ieee80211_rx_status *rx_status;
f0706e82
JB
1964 struct ieee80211_if_sta *ifsta;
1965 struct ieee80211_mgmt *mgmt;
1966 u16 fc;
1967
f0706e82
JB
1968 ifsta = &sdata->u.sta;
1969
1970 rx_status = (struct ieee80211_rx_status *) skb->cb;
1971 mgmt = (struct ieee80211_mgmt *) skb->data;
1972 fc = le16_to_cpu(mgmt->frame_control);
1973
1974 switch (fc & IEEE80211_FCTL_STYPE) {
1975 case IEEE80211_STYPE_PROBE_REQ:
504a71e4 1976 ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len);
f0706e82
JB
1977 break;
1978 case IEEE80211_STYPE_PROBE_RESP:
f698d856 1979 ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
f0706e82
JB
1980 break;
1981 case IEEE80211_STYPE_BEACON:
f698d856 1982 ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
f0706e82
JB
1983 break;
1984 case IEEE80211_STYPE_AUTH:
f698d856 1985 ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB
1986 break;
1987 case IEEE80211_STYPE_ASSOC_RESP:
471b3efd 1988 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
f0706e82
JB
1989 break;
1990 case IEEE80211_STYPE_REASSOC_RESP:
471b3efd 1991 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
f0706e82
JB
1992 break;
1993 case IEEE80211_STYPE_DEAUTH:
f698d856 1994 ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB
1995 break;
1996 case IEEE80211_STYPE_DISASSOC:
f698d856 1997 ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
f0706e82
JB
1998 break;
1999 }
2000
2001 kfree_skb(skb);
2002}
2003
2004
f698d856 2005static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
f0706e82 2006{
f698d856 2007 struct ieee80211_local *local = sdata->local;
f0706e82
JB
2008 int active = 0;
2009 struct sta_info *sta;
2010
d0709a65
JB
2011 rcu_read_lock();
2012
2013 list_for_each_entry_rcu(sta, &local->sta_list, list) {
2014 if (sta->sdata == sdata &&
f0706e82
JB
2015 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
2016 jiffies)) {
2017 active++;
2018 break;
2019 }
2020 }
d0709a65
JB
2021
2022 rcu_read_unlock();
f0706e82
JB
2023
2024 return active;
2025}
2026
2027
f698d856 2028static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
2029 struct ieee80211_if_sta *ifsta)
2030{
2031 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2032
f698d856
JBG
2033 ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
2034 if (ieee80211_sta_active_ibss(sdata))
f0706e82
JB
2035 return;
2036
137f9f46
AF
2037 if ((sdata->u.sta.flags & IEEE80211_STA_BSSID_SET) &&
2038 (!(sdata->u.sta.flags & IEEE80211_STA_AUTO_CHANNEL_SEL)))
2039 return;
2040
f0706e82 2041 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
f698d856 2042 "IBSS networks with same SSID (merge)\n", sdata->dev->name);
c2b13452 2043 ieee80211_request_scan(sdata, ifsta->ssid, ifsta->ssid_len);
f0706e82
JB
2044}
2045
2046
9c6bd790 2047static void ieee80211_sta_timer(unsigned long data)
f0706e82 2048{
60f8b39c
JB
2049 struct ieee80211_sub_if_data *sdata =
2050 (struct ieee80211_sub_if_data *) data;
2051 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2052 struct ieee80211_local *local = sdata->local;
f0706e82 2053
60f8b39c
JB
2054 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2055 queue_work(local->hw.workqueue, &ifsta->work);
f0706e82
JB
2056}
2057
f698d856 2058static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
2059 struct ieee80211_if_sta *ifsta)
2060{
f698d856 2061 struct ieee80211_local *local = sdata->local;
f0706e82
JB
2062
2063 if (local->ops->reset_tsf) {
2064 /* Reset own TSF to allow time synchronization work. */
2065 local->ops->reset_tsf(local_to_hw(local));
2066 }
2067
2068 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2069
2070
2071 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2072 ifsta->auth_alg = WLAN_AUTH_OPEN;
2073 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2074 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2075 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2076 ifsta->auth_alg = WLAN_AUTH_LEAP;
2077 else
2078 ifsta->auth_alg = WLAN_AUTH_OPEN;
f0706e82 2079 ifsta->auth_transaction = -1;
d6f2da5b 2080 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
6042a3e3 2081 ifsta->assoc_scan_tries = 0;
9859b81e 2082 ifsta->direct_probe_tries = 0;
6042a3e3
RR
2083 ifsta->auth_tries = 0;
2084 ifsta->assoc_tries = 0;
24e64622 2085 netif_tx_stop_all_queues(sdata->dev);
f698d856 2086 netif_carrier_off(sdata->dev);
f0706e82
JB
2087}
2088
2089
f0706e82
JB
2090static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2091 const char *ssid, int ssid_len)
2092{
2093 int tmp, hidden_ssid;
2094
48225709
MW
2095 if (ssid_len == ifsta->ssid_len &&
2096 !memcmp(ifsta->ssid, ssid, ssid_len))
f0706e82
JB
2097 return 1;
2098
d6f2da5b 2099 if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
f0706e82
JB
2100 return 0;
2101
2102 hidden_ssid = 1;
2103 tmp = ssid_len;
2104 while (tmp--) {
2105 if (ssid[tmp] != '\0') {
2106 hidden_ssid = 0;
2107 break;
2108 }
2109 }
2110
cb3da8cc 2111 if (hidden_ssid && (ifsta->ssid_len == ssid_len || ssid_len == 0))
f0706e82
JB
2112 return 1;
2113
2114 if (ssid_len == 1 && ssid[0] == ' ')
2115 return 1;
2116
2117 return 0;
2118}
2119
f698d856 2120static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
2121 struct ieee80211_if_sta *ifsta)
2122{
f698d856 2123 struct ieee80211_local *local = sdata->local;
c2b13452 2124 struct ieee80211_bss *bss;
8318d78a 2125 struct ieee80211_supported_band *sband;
f0706e82
JB
2126 u8 bssid[ETH_ALEN], *pos;
2127 int i;
167ad6f7 2128 int ret;
f0706e82
JB
2129
2130#if 0
2131 /* Easier testing, use fixed BSSID. */
2132 memset(bssid, 0xfe, ETH_ALEN);
2133#else
2134 /* Generate random, not broadcast, locally administered BSSID. Mix in
2135 * own MAC address to make sure that devices that do not have proper
2136 * random number generator get different BSSID. */
2137 get_random_bytes(bssid, ETH_ALEN);
2138 for (i = 0; i < ETH_ALEN; i++)
f698d856 2139 bssid[i] ^= sdata->dev->dev_addr[i];
f0706e82
JB
2140 bssid[0] &= ~0x01;
2141 bssid[0] |= 0x02;
2142#endif
2143
0c68ae26
JB
2144 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %pM\n",
2145 sdata->dev->name, bssid);
f0706e82 2146
98c8fccf 2147 bss = ieee80211_rx_bss_add(local, bssid,
8318d78a 2148 local->hw.conf.channel->center_freq,
cffdd30d 2149 sdata->u.sta.ssid, sdata->u.sta.ssid_len);
f0706e82
JB
2150 if (!bss)
2151 return -ENOMEM;
2152
8318d78a
JB
2153 bss->band = local->hw.conf.channel->band;
2154 sband = local->hw.wiphy->bands[bss->band];
f0706e82
JB
2155
2156 if (local->hw.conf.beacon_int == 0)
dc0ae30c 2157 local->hw.conf.beacon_int = 100;
f0706e82 2158 bss->beacon_int = local->hw.conf.beacon_int;
f0706e82
JB
2159 bss->last_update = jiffies;
2160 bss->capability = WLAN_CAPABILITY_IBSS;
988c0f72
JB
2161
2162 if (sdata->default_key)
f0706e82 2163 bss->capability |= WLAN_CAPABILITY_PRIVACY;
988c0f72 2164 else
f0706e82 2165 sdata->drop_unencrypted = 0;
988c0f72 2166
8318d78a 2167 bss->supp_rates_len = sband->n_bitrates;
f0706e82 2168 pos = bss->supp_rates;
8318d78a
JB
2169 for (i = 0; i < sband->n_bitrates; i++) {
2170 int rate = sband->bitrates[i].bitrate;
f0706e82
JB
2171 *pos++ = (u8) (rate / 5);
2172 }
2173
f698d856 2174 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2175 ieee80211_rx_bss_put(local, bss);
167ad6f7 2176 return ret;
f0706e82
JB
2177}
2178
2179
f698d856 2180static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB
2181 struct ieee80211_if_sta *ifsta)
2182{
f698d856 2183 struct ieee80211_local *local = sdata->local;
c2b13452 2184 struct ieee80211_bss *bss;
f0706e82
JB
2185 int found = 0;
2186 u8 bssid[ETH_ALEN];
2187 int active_ibss;
2188
2189 if (ifsta->ssid_len == 0)
2190 return -EINVAL;
2191
f698d856 2192 active_ibss = ieee80211_sta_active_ibss(sdata);
f0706e82
JB
2193#ifdef CONFIG_MAC80211_IBSS_DEBUG
2194 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
f698d856 2195 sdata->dev->name, active_ibss);
f0706e82 2196#endif /* CONFIG_MAC80211_IBSS_DEBUG */
c2b13452
JB
2197 spin_lock_bh(&local->bss_lock);
2198 list_for_each_entry(bss, &local->bss_list, list) {
f0706e82
JB
2199 if (ifsta->ssid_len != bss->ssid_len ||
2200 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2201 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2202 continue;
2203#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26 2204 printk(KERN_DEBUG " bssid=%pM found\n", bss->bssid);
f0706e82
JB
2205#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2206 memcpy(bssid, bss->bssid, ETH_ALEN);
2207 found = 1;
2208 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2209 break;
2210 }
c2b13452 2211 spin_unlock_bh(&local->bss_lock);
f0706e82
JB
2212
2213#ifdef CONFIG_MAC80211_IBSS_DEBUG
6e43829b 2214 if (found)
0c68ae26
JB
2215 printk(KERN_DEBUG " sta_find_ibss: selected %pM current "
2216 "%pM\n", bssid, ifsta->bssid);
f0706e82 2217#endif /* CONFIG_MAC80211_IBSS_DEBUG */
80693ceb
DD
2218
2219 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
167ad6f7 2220 int ret;
80693ceb
DD
2221 int search_freq;
2222
2223 if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2224 search_freq = bss->freq;
2225 else
2226 search_freq = local->hw.conf.channel->center_freq;
2227
f698d856 2228 bss = ieee80211_rx_bss_get(local, bssid, search_freq,
80693ceb
DD
2229 ifsta->ssid, ifsta->ssid_len);
2230 if (!bss)
2231 goto dont_join;
2232
0c68ae26 2233 printk(KERN_DEBUG "%s: Selected IBSS BSSID %pM"
f0706e82 2234 " based on configured SSID\n",
0c68ae26 2235 sdata->dev->name, bssid);
f698d856 2236 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2237 ieee80211_rx_bss_put(local, bss);
167ad6f7 2238 return ret;
f0706e82 2239 }
80693ceb
DD
2240
2241dont_join:
f0706e82
JB
2242#ifdef CONFIG_MAC80211_IBSS_DEBUG
2243 printk(KERN_DEBUG " did not try to join ibss\n");
2244#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2245
2246 /* Selected IBSS not found in current scan results - try to scan */
48c2fc59 2247 if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
f698d856 2248 !ieee80211_sta_active_ibss(sdata)) {
f0706e82
JB
2249 mod_timer(&ifsta->timer, jiffies +
2250 IEEE80211_IBSS_MERGE_INTERVAL);
2251 } else if (time_after(jiffies, local->last_scan_completed +
2252 IEEE80211_SCAN_INTERVAL)) {
2253 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
f698d856 2254 "join\n", sdata->dev->name);
c2b13452 2255 return ieee80211_request_scan(sdata, ifsta->ssid,
f0706e82 2256 ifsta->ssid_len);
48c2fc59 2257 } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
f0706e82
JB
2258 int interval = IEEE80211_SCAN_INTERVAL;
2259
2260 if (time_after(jiffies, ifsta->ibss_join_req +
2261 IEEE80211_IBSS_JOIN_TIMEOUT)) {
d6f2da5b 2262 if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
8318d78a
JB
2263 (!(local->oper_channel->flags &
2264 IEEE80211_CHAN_NO_IBSS)))
f698d856 2265 return ieee80211_sta_create_ibss(sdata, ifsta);
d6f2da5b 2266 if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
8318d78a 2267 printk(KERN_DEBUG "%s: IBSS not allowed on"
f698d856 2268 " %d MHz\n", sdata->dev->name,
8318d78a 2269 local->hw.conf.channel->center_freq);
f0706e82
JB
2270 }
2271
2272 /* No IBSS found - decrease scan interval and continue
2273 * scanning. */
2274 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2275 }
2276
48c2fc59 2277 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
f0706e82
JB
2278 mod_timer(&ifsta->timer, jiffies + interval);
2279 return 0;
2280 }
2281
2282 return 0;
2283}
2284
2285
9c6bd790
JB
2286static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2287 struct ieee80211_if_sta *ifsta)
f0706e82 2288{
9c6bd790 2289 struct ieee80211_local *local = sdata->local;
c2b13452 2290 struct ieee80211_bss *bss, *selected = NULL;
9c6bd790 2291 int top_rssi = 0, freq;
f0706e82 2292
c2b13452 2293 spin_lock_bh(&local->bss_lock);
9c6bd790 2294 freq = local->oper_channel->center_freq;
c2b13452 2295 list_for_each_entry(bss, &local->bss_list, list) {
9c6bd790
JB
2296 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2297 continue;
f0706e82 2298
9c6bd790
JB
2299 if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2300 IEEE80211_STA_AUTO_BSSID_SEL |
2301 IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2302 (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2303 !!sdata->default_key))
2304 continue;
f0706e82 2305
9c6bd790
JB
2306 if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2307 bss->freq != freq)
2308 continue;
9d139c81 2309
9c6bd790
JB
2310 if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2311 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2312 continue;
f0706e82 2313
9c6bd790
JB
2314 if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2315 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2316 continue;
9d139c81 2317
9c6bd790
JB
2318 if (!selected || top_rssi < bss->signal) {
2319 selected = bss;
2320 top_rssi = bss->signal;
2321 }
f0706e82 2322 }
9c6bd790
JB
2323 if (selected)
2324 atomic_inc(&selected->users);
c2b13452 2325 spin_unlock_bh(&local->bss_lock);
9d139c81 2326
9c6bd790
JB
2327 if (selected) {
2328 ieee80211_set_freq(sdata, selected->freq);
2329 if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2330 ieee80211_sta_set_ssid(sdata, selected->ssid,
2331 selected->ssid_len);
2332 ieee80211_sta_set_bssid(sdata, selected->bssid);
2333 ieee80211_sta_def_wmm_params(sdata, selected);
fdfacf0a
JM
2334 if (sdata->u.sta.mfp == IEEE80211_MFP_REQUIRED)
2335 sdata->u.sta.flags |= IEEE80211_STA_MFP_ENABLED;
2336 else
2337 sdata->u.sta.flags &= ~IEEE80211_STA_MFP_ENABLED;
f0706e82 2338
9c6bd790
JB
2339 /* Send out direct probe if no probe resp was received or
2340 * the one we have is outdated
2341 */
2342 if (!selected->last_probe_resp ||
2343 time_after(jiffies, selected->last_probe_resp
2344 + IEEE80211_SCAN_RESULT_EXPIRE))
2345 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2346 else
2347 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
f0706e82 2348
9c6bd790
JB
2349 ieee80211_rx_bss_put(local, selected);
2350 ieee80211_sta_reset_auth(sdata, ifsta);
2351 return 0;
2352 } else {
2353 if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2354 ifsta->assoc_scan_tries++;
2355 if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
c2b13452 2356 ieee80211_start_scan(sdata, NULL, 0);
9c6bd790 2357 else
c2b13452 2358 ieee80211_start_scan(sdata, ifsta->ssid,
9c6bd790
JB
2359 ifsta->ssid_len);
2360 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2361 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2362 } else
2363 ifsta->state = IEEE80211_STA_MLME_DISABLED;
2364 }
2365 return -1;
2366}
2367
2368
2369static void ieee80211_sta_work(struct work_struct *work)
2370{
2371 struct ieee80211_sub_if_data *sdata =
2372 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
2373 struct ieee80211_local *local = sdata->local;
2374 struct ieee80211_if_sta *ifsta;
2375 struct sk_buff *skb;
2376
2377 if (!netif_running(sdata->dev))
2378 return;
2379
c2b13452 2380 if (local->sw_scanning || local->hw_scanning)
9c6bd790
JB
2381 return;
2382
05c914fe
JB
2383 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION &&
2384 sdata->vif.type != NL80211_IFTYPE_ADHOC))
9c6bd790 2385 return;
f0706e82
JB
2386 ifsta = &sdata->u.sta;
2387
9c6bd790
JB
2388 while ((skb = skb_dequeue(&ifsta->skb_queue)))
2389 ieee80211_sta_rx_queued_mgmt(sdata, skb);
2390
2391 if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
2392 ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
2393 ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
2394 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
c2b13452
JB
2395 ieee80211_start_scan(sdata, ifsta->scan_ssid,
2396 ifsta->scan_ssid_len);
9c6bd790 2397 return;
f0706e82
JB
2398 }
2399
9c6bd790
JB
2400 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
2401 if (ieee80211_sta_config_auth(sdata, ifsta))
2402 return;
2403 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2404 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
2405 return;
d6f2da5b 2406
9c6bd790
JB
2407 switch (ifsta->state) {
2408 case IEEE80211_STA_MLME_DISABLED:
2409 break;
2410 case IEEE80211_STA_MLME_DIRECT_PROBE:
2411 ieee80211_direct_probe(sdata, ifsta);
2412 break;
2413 case IEEE80211_STA_MLME_AUTHENTICATE:
2414 ieee80211_authenticate(sdata, ifsta);
2415 break;
2416 case IEEE80211_STA_MLME_ASSOCIATE:
2417 ieee80211_associate(sdata, ifsta);
2418 break;
2419 case IEEE80211_STA_MLME_ASSOCIATED:
2420 ieee80211_associated(sdata, ifsta);
2421 break;
2422 case IEEE80211_STA_MLME_IBSS_SEARCH:
2423 ieee80211_sta_find_ibss(sdata, ifsta);
2424 break;
2425 case IEEE80211_STA_MLME_IBSS_JOINED:
2426 ieee80211_sta_merge_ibss(sdata, ifsta);
2427 break;
2428 default:
2429 WARN_ON(1);
2430 break;
2431 }
2432
2433 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
2434 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
2435 "mixed-cell disabled - disassociate\n", sdata->dev->name);
2436
2437 ieee80211_set_disassoc(sdata, ifsta, false, true,
2438 WLAN_REASON_UNSPECIFIED);
2439 }
f0706e82
JB
2440}
2441
9c6bd790
JB
2442static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)
2443{
05c914fe 2444 if (sdata->vif.type == NL80211_IFTYPE_STATION)
9c6bd790
JB
2445 queue_work(sdata->local->hw.workqueue,
2446 &sdata->u.sta.work);
2447}
f0706e82 2448
9c6bd790
JB
2449/* interface setup */
2450void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82 2451{
9c6bd790 2452 struct ieee80211_if_sta *ifsta;
988c0f72 2453
9c6bd790
JB
2454 ifsta = &sdata->u.sta;
2455 INIT_WORK(&ifsta->work, ieee80211_sta_work);
c481ec97 2456 INIT_WORK(&ifsta->chswitch_work, ieee80211_chswitch_work);
9c6bd790 2457 setup_timer(&ifsta->timer, ieee80211_sta_timer,
c481ec97
S
2458 (unsigned long) sdata);
2459 setup_timer(&ifsta->chswitch_timer, ieee80211_chswitch_timer,
9c6bd790
JB
2460 (unsigned long) sdata);
2461 skb_queue_head_init(&ifsta->skb_queue);
2462
2463 ifsta->capab = WLAN_CAPABILITY_ESS;
2464 ifsta->auth_algs = IEEE80211_AUTH_ALG_OPEN |
2465 IEEE80211_AUTH_ALG_SHARED_KEY;
2466 ifsta->flags |= IEEE80211_STA_CREATE_IBSS |
2467 IEEE80211_STA_AUTO_BSSID_SEL |
2468 IEEE80211_STA_AUTO_CHANNEL_SEL;
2469 if (ieee80211_num_regular_queues(&sdata->local->hw) >= 4)
2470 ifsta->flags |= IEEE80211_STA_WMM_ENABLED;
f0706e82
JB
2471}
2472
9c6bd790
JB
2473/*
2474 * Add a new IBSS station, will also be called by the RX code when,
2475 * in IBSS mode, receiving a frame from a yet-unknown station, hence
2476 * must be callable in atomic context.
2477 */
f698d856 2478struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
ab1f5c0b 2479 u8 *bssid,u8 *addr, u64 supp_rates)
f0706e82 2480{
f698d856 2481 struct ieee80211_local *local = sdata->local;
f0706e82 2482 struct sta_info *sta;
87291c02 2483 int band = local->hw.conf.channel->band;
f0706e82
JB
2484
2485 /* TODO: Could consider removing the least recently used entry and
2486 * allow new one to be added. */
2487 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2488 if (net_ratelimit()) {
2489 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
0c68ae26 2490 "entry %pM\n", sdata->dev->name, addr);
f0706e82
JB
2491 }
2492 return NULL;
2493 }
2494
1e188637 2495 if (compare_ether_addr(bssid, sdata->u.sta.bssid))
87291c02
VK
2496 return NULL;
2497
f4ea83dd 2498#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
0c68ae26
JB
2499 printk(KERN_DEBUG "%s: Adding new IBSS station %pM (dev=%s)\n",
2500 wiphy_name(local->hw.wiphy), addr, sdata->dev->name);
f4ea83dd 2501#endif
f0706e82 2502
73651ee6
JB
2503 sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2504 if (!sta)
f0706e82
JB
2505 return NULL;
2506
07346f81 2507 set_sta_flags(sta, WLAN_STA_AUTHORIZED);
238814fd 2508
8e1535d5 2509 /* make sure mandatory rates are always added */
323ce79a 2510 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 2511 ieee80211_mandatory_rates(local, band);
f0706e82 2512
4b7679a5 2513 rate_control_rate_init(sta);
f0706e82 2514
93e5deb1 2515 if (sta_info_insert(sta))
73651ee6 2516 return NULL;
73651ee6 2517
d0709a65 2518 return sta;
f0706e82
JB
2519}
2520
9c6bd790
JB
2521/* configuration hooks */
2522void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2523 struct ieee80211_if_sta *ifsta)
60f8b39c
JB
2524{
2525 struct ieee80211_local *local = sdata->local;
60f8b39c 2526
05c914fe 2527 if (sdata->vif.type != NL80211_IFTYPE_STATION)
9c6bd790 2528 return;
60f8b39c 2529
9c6bd790
JB
2530 if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2531 IEEE80211_STA_AUTO_BSSID_SEL)) &&
2532 (ifsta->flags & (IEEE80211_STA_SSID_SET |
2533 IEEE80211_STA_AUTO_SSID_SEL))) {
60f8b39c 2534
9c6bd790
JB
2535 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2536 ieee80211_set_disassoc(sdata, ifsta, true, true,
2537 WLAN_REASON_DEAUTH_LEAVING);
60f8b39c 2538
9c6bd790
JB
2539 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2540 queue_work(local->hw.workqueue, &ifsta->work);
2541 }
2542}
60f8b39c 2543
9c6bd790
JB
2544int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2545{
2546 struct ieee80211_if_sta *ifsta;
60f8b39c 2547
9c6bd790
JB
2548 if (len > IEEE80211_MAX_SSID_LEN)
2549 return -EINVAL;
2550
2551 ifsta = &sdata->u.sta;
2552
2553 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2554 memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2555 memcpy(ifsta->ssid, ssid, len);
2556 ifsta->ssid_len = len;
2557 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
60f8b39c 2558 }
60f8b39c 2559
9c6bd790
JB
2560 if (len)
2561 ifsta->flags |= IEEE80211_STA_SSID_SET;
2562 else
2563 ifsta->flags &= ~IEEE80211_STA_SSID_SET;
60f8b39c 2564
05c914fe 2565 if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
9c6bd790
JB
2566 !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2567 ifsta->ibss_join_req = jiffies;
2568 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2569 return ieee80211_sta_find_ibss(sdata, ifsta);
2570 }
2571
2572 return 0;
2573}
2574
2575int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2576{
2577 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2578 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2579 *len = ifsta->ssid_len;
2580 return 0;
2581}
2582
2583int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2584{
2585 struct ieee80211_if_sta *ifsta;
2586 int res;
0efcdfd6 2587 bool valid;
9c6bd790
JB
2588
2589 ifsta = &sdata->u.sta;
0efcdfd6 2590 valid = is_valid_ether_addr(bssid);
9c6bd790
JB
2591
2592 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
0efcdfd6
AF
2593 if(valid)
2594 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2595 else
2596 memset(ifsta->bssid, 0, ETH_ALEN);
9c6bd790
JB
2597 res = 0;
2598 /*
2599 * Hack! See also ieee80211_sta_set_ssid.
60f8b39c 2600 */
9c6bd790
JB
2601 if (netif_running(sdata->dev))
2602 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2603 if (res) {
2604 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2605 "the low-level driver\n", sdata->dev->name);
2606 return res;
2607 }
2608 }
60f8b39c 2609
0efcdfd6 2610 if (valid)
9c6bd790
JB
2611 ifsta->flags |= IEEE80211_STA_BSSID_SET;
2612 else
2613 ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2614
2615 return 0;
2616}
2617
2618int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2619{
2620 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2621
2622 kfree(ifsta->extra_ie);
2623 if (len == 0) {
2624 ifsta->extra_ie = NULL;
2625 ifsta->extra_ie_len = 0;
60f8b39c 2626 return 0;
60f8b39c 2627 }
9c6bd790
JB
2628 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2629 if (!ifsta->extra_ie) {
2630 ifsta->extra_ie_len = 0;
2631 return -ENOMEM;
2632 }
2633 memcpy(ifsta->extra_ie, ie, len);
2634 ifsta->extra_ie_len = len;
2635 return 0;
60f8b39c
JB
2636}
2637
f698d856 2638int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2639{
f0706e82
JB
2640 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2641
f4ea83dd 2642 printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
f698d856 2643 sdata->dev->name, reason);
f0706e82 2644
05c914fe
JB
2645 if (sdata->vif.type != NL80211_IFTYPE_STATION &&
2646 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82
JB
2647 return -EINVAL;
2648
aa458d17 2649 ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
f0706e82
JB
2650 return 0;
2651}
2652
f698d856 2653int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2654{
f0706e82
JB
2655 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2656
f4ea83dd 2657 printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
f698d856 2658 sdata->dev->name, reason);
f0706e82 2659
05c914fe 2660 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB
2661 return -EINVAL;
2662
d6f2da5b 2663 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
f0706e82
JB
2664 return -1;
2665
aa458d17 2666 ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
f0706e82
JB
2667 return 0;
2668}
84363e6e 2669
9c6bd790
JB
2670/* scan finished notification */
2671void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
2672{
2673 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
2674 struct ieee80211_if_sta *ifsta;
2675
05c914fe 2676 if (sdata && sdata->vif.type == NL80211_IFTYPE_ADHOC) {
9c6bd790
JB
2677 ifsta = &sdata->u.sta;
2678 if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
2679 (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
2680 !ieee80211_sta_active_ibss(sdata)))
2681 ieee80211_sta_find_ibss(sdata, ifsta);
2682 }
2683
2684 /* Restart STA timers */
2685 rcu_read_lock();
2686 list_for_each_entry_rcu(sdata, &local->interfaces, list)
2687 ieee80211_restart_sta_timer(sdata);
2688 rcu_read_unlock();
2689}
520eb820
KV
2690
2691void ieee80211_dynamic_ps_disable_work(struct work_struct *work)
2692{
2693 struct ieee80211_local *local =
2694 container_of(work, struct ieee80211_local,
2695 dynamic_ps_disable_work);
2696
2697 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
2698 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
2699 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2700 }
2701
2702 ieee80211_wake_queues_by_reason(&local->hw,
2703 IEEE80211_QUEUE_STOP_REASON_PS);
2704}
2705
2706void ieee80211_dynamic_ps_enable_work(struct work_struct *work)
2707{
2708 struct ieee80211_local *local =
2709 container_of(work, struct ieee80211_local,
2710 dynamic_ps_enable_work);
a97b77b9 2711 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
520eb820
KV
2712
2713 if (local->hw.conf.flags & IEEE80211_CONF_PS)
2714 return;
2715
4be8c387
JB
2716 if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
2717 ieee80211_send_nullfunc(local, sdata, 1);
520eb820 2718
4be8c387 2719 local->hw.conf.flags |= IEEE80211_CONF_PS;
520eb820
KV
2720 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2721}
2722
2723void ieee80211_dynamic_ps_timer(unsigned long data)
2724{
2725 struct ieee80211_local *local = (void *) data;
2726
2727 queue_work(local->hw.workqueue, &local->dynamic_ps_enable_work);
2728}