]>
Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * BSS client mode implementation | |
5394af4d | 3 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> |
f0706e82 JB |
4 | * Copyright 2004, Instant802 Networks, Inc. |
5 | * Copyright 2005, Devicescape Software, Inc. | |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License version 2 as | |
11 | * published by the Free Software Foundation. | |
12 | */ | |
13 | ||
5b323edb | 14 | #include <linux/delay.h> |
f0706e82 JB |
15 | #include <linux/if_ether.h> |
16 | #include <linux/skbuff.h> | |
f0706e82 | 17 | #include <linux/if_arp.h> |
f0706e82 | 18 | #include <linux/etherdevice.h> |
d0709a65 | 19 | #include <linux/rtnetlink.h> |
10f644a4 | 20 | #include <linux/pm_qos_params.h> |
d91f36db | 21 | #include <linux/crc32.h> |
f0706e82 | 22 | #include <net/mac80211.h> |
472dbc45 | 23 | #include <asm/unaligned.h> |
60f8b39c | 24 | |
f0706e82 | 25 | #include "ieee80211_i.h" |
24487981 | 26 | #include "driver-ops.h" |
2c8dccc7 JB |
27 | #include "rate.h" |
28 | #include "led.h" | |
f0706e82 JB |
29 | |
30 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
31 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
32 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
33 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
a43abf29 | 34 | #define IEEE80211_MAX_PROBE_TRIES 5 |
b291ba11 JB |
35 | |
36 | /* | |
37 | * beacon loss detection timeout | |
38 | * XXX: should depend on beacon interval | |
39 | */ | |
40 | #define IEEE80211_BEACON_LOSS_TIME (2 * HZ) | |
41 | /* | |
42 | * Time the connection can be idle before we probe | |
43 | * it to see if we can still talk to the AP. | |
44 | */ | |
d1c5091f | 45 | #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ) |
b291ba11 JB |
46 | /* |
47 | * Time we wait for a probe response after sending | |
48 | * a probe request because of beacon loss or for | |
49 | * checking the connection still works. | |
50 | */ | |
d1c5091f | 51 | #define IEEE80211_PROBE_WAIT (HZ / 2) |
f0706e82 | 52 | |
5bb644a0 JB |
53 | #define TMR_RUNNING_TIMER 0 |
54 | #define TMR_RUNNING_CHANSW 1 | |
55 | ||
77fdaa12 JB |
56 | /* |
57 | * All cfg80211 functions have to be called outside a locked | |
58 | * section so that they can acquire a lock themselves... This | |
59 | * is much simpler than queuing up things in cfg80211, but we | |
60 | * do need some indirection for that here. | |
61 | */ | |
62 | enum rx_mgmt_action { | |
63 | /* no action required */ | |
64 | RX_MGMT_NONE, | |
65 | ||
66 | /* caller must call cfg80211_send_rx_auth() */ | |
67 | RX_MGMT_CFG80211_AUTH, | |
68 | ||
69 | /* caller must call cfg80211_send_rx_assoc() */ | |
70 | RX_MGMT_CFG80211_ASSOC, | |
71 | ||
72 | /* caller must call cfg80211_send_deauth() */ | |
73 | RX_MGMT_CFG80211_DEAUTH, | |
74 | ||
75 | /* caller must call cfg80211_send_disassoc() */ | |
76 | RX_MGMT_CFG80211_DISASSOC, | |
77 | ||
78 | /* caller must call cfg80211_auth_timeout() & free work */ | |
79 | RX_MGMT_CFG80211_AUTH_TO, | |
80 | ||
81 | /* caller must call cfg80211_assoc_timeout() & free work */ | |
82 | RX_MGMT_CFG80211_ASSOC_TO, | |
83 | }; | |
84 | ||
5484e237 | 85 | /* utils */ |
77fdaa12 JB |
86 | static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd) |
87 | { | |
88 | WARN_ON(!mutex_is_locked(&ifmgd->mtx)); | |
89 | } | |
90 | ||
ca386f31 JB |
91 | /* |
92 | * We can have multiple work items (and connection probing) | |
93 | * scheduling this timer, but we need to take care to only | |
94 | * reschedule it when it should fire _earlier_ than it was | |
95 | * asked for before, or if it's not pending right now. This | |
96 | * function ensures that. Note that it then is required to | |
97 | * run this function for all timeouts after the first one | |
98 | * has happened -- the work that runs from this timer will | |
99 | * do that. | |
100 | */ | |
101 | static void run_again(struct ieee80211_if_managed *ifmgd, | |
102 | unsigned long timeout) | |
103 | { | |
104 | ASSERT_MGD_MTX(ifmgd); | |
105 | ||
106 | if (!timer_pending(&ifmgd->timer) || | |
107 | time_before(timeout, ifmgd->timer.expires)) | |
108 | mod_timer(&ifmgd->timer, timeout); | |
109 | } | |
110 | ||
b291ba11 JB |
111 | static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata) |
112 | { | |
113 | if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER) | |
114 | return; | |
115 | ||
116 | mod_timer(&sdata->u.mgd.bcn_mon_timer, | |
117 | round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME)); | |
118 | } | |
119 | ||
5484e237 | 120 | static int ecw2cw(int ecw) |
60f8b39c | 121 | { |
5484e237 | 122 | return (1 << ecw) - 1; |
60f8b39c JB |
123 | } |
124 | ||
c2b13452 | 125 | static int ieee80211_compatible_rates(struct ieee80211_bss *bss, |
9ac19a90 | 126 | struct ieee80211_supported_band *sband, |
881d948c | 127 | u32 *rates) |
9ac19a90 JB |
128 | { |
129 | int i, j, count; | |
130 | *rates = 0; | |
131 | count = 0; | |
132 | for (i = 0; i < bss->supp_rates_len; i++) { | |
133 | int rate = (bss->supp_rates[i] & 0x7F) * 5; | |
134 | ||
135 | for (j = 0; j < sband->n_bitrates; j++) | |
136 | if (sband->bitrates[j].bitrate == rate) { | |
137 | *rates |= BIT(j); | |
138 | count++; | |
139 | break; | |
140 | } | |
141 | } | |
142 | ||
143 | return count; | |
144 | } | |
145 | ||
d5522e03 JB |
146 | /* |
147 | * ieee80211_enable_ht should be called only after the operating band | |
148 | * has been determined as ht configuration depends on the hw's | |
149 | * HT abilities for a specific band. | |
150 | */ | |
151 | static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, | |
152 | struct ieee80211_ht_info *hti, | |
77fdaa12 | 153 | const u8 *bssid, u16 ap_ht_cap_flags) |
d5522e03 JB |
154 | { |
155 | struct ieee80211_local *local = sdata->local; | |
156 | struct ieee80211_supported_band *sband; | |
d5522e03 JB |
157 | struct sta_info *sta; |
158 | u32 changed = 0; | |
9ed6bcce | 159 | u16 ht_opmode; |
d5522e03 JB |
160 | bool enable_ht = true, ht_changed; |
161 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; | |
162 | ||
163 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
164 | ||
d5522e03 JB |
165 | /* HT is not supported */ |
166 | if (!sband->ht_cap.ht_supported) | |
167 | enable_ht = false; | |
168 | ||
169 | /* check that channel matches the right operating channel */ | |
170 | if (local->hw.conf.channel->center_freq != | |
171 | ieee80211_channel_to_frequency(hti->control_chan)) | |
172 | enable_ht = false; | |
173 | ||
174 | if (enable_ht) { | |
175 | channel_type = NL80211_CHAN_HT20; | |
176 | ||
177 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && | |
178 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && | |
179 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
180 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
181 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
768777ea LR |
182 | if (!(local->hw.conf.channel->flags & |
183 | IEEE80211_CHAN_NO_HT40PLUS)) | |
184 | channel_type = NL80211_CHAN_HT40PLUS; | |
d5522e03 JB |
185 | break; |
186 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
768777ea LR |
187 | if (!(local->hw.conf.channel->flags & |
188 | IEEE80211_CHAN_NO_HT40MINUS)) | |
189 | channel_type = NL80211_CHAN_HT40MINUS; | |
d5522e03 JB |
190 | break; |
191 | } | |
192 | } | |
193 | } | |
194 | ||
195 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || | |
196 | channel_type != local->hw.conf.channel_type; | |
197 | ||
198 | local->oper_channel_type = channel_type; | |
199 | ||
200 | if (ht_changed) { | |
201 | /* channel_type change automatically detected */ | |
202 | ieee80211_hw_config(local, 0); | |
203 | ||
204 | rcu_read_lock(); | |
77fdaa12 | 205 | sta = sta_info_get(local, bssid); |
d5522e03 JB |
206 | if (sta) |
207 | rate_control_rate_update(local, sband, sta, | |
208 | IEEE80211_RC_HT_CHANGED); | |
d5522e03 | 209 | rcu_read_unlock(); |
d5522e03 JB |
210 | } |
211 | ||
212 | /* disable HT */ | |
213 | if (!enable_ht) | |
214 | return 0; | |
215 | ||
9ed6bcce | 216 | ht_opmode = le16_to_cpu(hti->operation_mode); |
d5522e03 JB |
217 | |
218 | /* if bss configuration changed store the new one */ | |
413ad50a JB |
219 | if (!sdata->ht_opmode_valid || |
220 | sdata->vif.bss_conf.ht_operation_mode != ht_opmode) { | |
d5522e03 | 221 | changed |= BSS_CHANGED_HT; |
9ed6bcce | 222 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; |
413ad50a | 223 | sdata->ht_opmode_valid = true; |
d5522e03 JB |
224 | } |
225 | ||
226 | return changed; | |
227 | } | |
228 | ||
9c6bd790 JB |
229 | /* frame sending functions */ |
230 | ||
77fdaa12 JB |
231 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
232 | struct ieee80211_mgd_work *wk) | |
9ac19a90 | 233 | { |
46900298 | 234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
235 | struct ieee80211_local *local = sdata->local; |
236 | struct sk_buff *skb; | |
237 | struct ieee80211_mgmt *mgmt; | |
517357c6 JB |
238 | u8 *pos; |
239 | const u8 *ies, *ht_ie; | |
9ac19a90 JB |
240 | int i, len, count, rates_len, supp_rates_len; |
241 | u16 capab; | |
9ac19a90 JB |
242 | int wmm = 0; |
243 | struct ieee80211_supported_band *sband; | |
881d948c | 244 | u32 rates = 0; |
9ac19a90 JB |
245 | |
246 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
77fdaa12 JB |
247 | sizeof(*mgmt) + 200 + wk->ie_len + |
248 | wk->ssid_len); | |
9ac19a90 JB |
249 | if (!skb) { |
250 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
251 | "frame\n", sdata->dev->name); | |
252 | return; | |
253 | } | |
254 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
255 | ||
256 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
257 | ||
46900298 | 258 | capab = ifmgd->capab; |
9ac19a90 JB |
259 | |
260 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { | |
261 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
262 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
263 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
264 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
265 | } | |
266 | ||
77fdaa12 JB |
267 | if (wk->bss->cbss.capability & WLAN_CAPABILITY_PRIVACY) |
268 | capab |= WLAN_CAPABILITY_PRIVACY; | |
269 | if (wk->bss->wmm_used) | |
270 | wmm = 1; | |
9ac19a90 | 271 | |
77fdaa12 JB |
272 | /* get all rates supported by the device and the AP as |
273 | * some APs don't like getting a superset of their rates | |
274 | * in the association request (e.g. D-Link DAP 1353 in | |
275 | * b-only mode) */ | |
276 | rates_len = ieee80211_compatible_rates(wk->bss, sband, &rates); | |
9ac19a90 | 277 | |
77fdaa12 JB |
278 | if ((wk->bss->cbss.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
279 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) | |
280 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; | |
9ac19a90 JB |
281 | |
282 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
283 | memset(mgmt, 0, 24); | |
77fdaa12 | 284 | memcpy(mgmt->da, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 285 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 286 | memcpy(mgmt->bssid, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 287 | |
77fdaa12 | 288 | if (!is_zero_ether_addr(wk->prev_bssid)) { |
9ac19a90 JB |
289 | skb_put(skb, 10); |
290 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
291 | IEEE80211_STYPE_REASSOC_REQ); | |
292 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
293 | mgmt->u.reassoc_req.listen_interval = | |
294 | cpu_to_le16(local->hw.conf.listen_interval); | |
77fdaa12 | 295 | memcpy(mgmt->u.reassoc_req.current_ap, wk->prev_bssid, |
9ac19a90 JB |
296 | ETH_ALEN); |
297 | } else { | |
298 | skb_put(skb, 4); | |
299 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
300 | IEEE80211_STYPE_ASSOC_REQ); | |
301 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
13554121 | 302 | mgmt->u.assoc_req.listen_interval = |
9ac19a90 JB |
303 | cpu_to_le16(local->hw.conf.listen_interval); |
304 | } | |
305 | ||
306 | /* SSID */ | |
77fdaa12 | 307 | ies = pos = skb_put(skb, 2 + wk->ssid_len); |
9ac19a90 | 308 | *pos++ = WLAN_EID_SSID; |
77fdaa12 JB |
309 | *pos++ = wk->ssid_len; |
310 | memcpy(pos, wk->ssid, wk->ssid_len); | |
9ac19a90 JB |
311 | |
312 | /* add all rates which were marked to be used above */ | |
313 | supp_rates_len = rates_len; | |
314 | if (supp_rates_len > 8) | |
315 | supp_rates_len = 8; | |
316 | ||
317 | len = sband->n_bitrates; | |
318 | pos = skb_put(skb, supp_rates_len + 2); | |
319 | *pos++ = WLAN_EID_SUPP_RATES; | |
320 | *pos++ = supp_rates_len; | |
321 | ||
322 | count = 0; | |
323 | for (i = 0; i < sband->n_bitrates; i++) { | |
324 | if (BIT(i) & rates) { | |
325 | int rate = sband->bitrates[i].bitrate; | |
326 | *pos++ = (u8) (rate / 5); | |
327 | if (++count == 8) | |
328 | break; | |
329 | } | |
330 | } | |
331 | ||
332 | if (rates_len > count) { | |
333 | pos = skb_put(skb, rates_len - count + 2); | |
334 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
335 | *pos++ = rates_len - count; | |
336 | ||
337 | for (i++; i < sband->n_bitrates; i++) { | |
338 | if (BIT(i) & rates) { | |
339 | int rate = sband->bitrates[i].bitrate; | |
340 | *pos++ = (u8) (rate / 5); | |
341 | } | |
342 | } | |
343 | } | |
344 | ||
345 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { | |
346 | /* 1. power capabilities */ | |
347 | pos = skb_put(skb, 4); | |
348 | *pos++ = WLAN_EID_PWR_CAPABILITY; | |
349 | *pos++ = 2; | |
350 | *pos++ = 0; /* min tx power */ | |
351 | *pos++ = local->hw.conf.channel->max_power; /* max tx power */ | |
352 | ||
353 | /* 2. supported channels */ | |
354 | /* TODO: get this in reg domain format */ | |
355 | pos = skb_put(skb, 2 * sband->n_channels + 2); | |
356 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
357 | *pos++ = 2 * sband->n_channels; | |
358 | for (i = 0; i < sband->n_channels; i++) { | |
359 | *pos++ = ieee80211_frequency_to_channel( | |
360 | sband->channels[i].center_freq); | |
361 | *pos++ = 1; /* one channel in the subband*/ | |
362 | } | |
363 | } | |
364 | ||
77fdaa12 JB |
365 | if (wk->ie_len && wk->ie) { |
366 | pos = skb_put(skb, wk->ie_len); | |
367 | memcpy(pos, wk->ie, wk->ie_len); | |
9ac19a90 JB |
368 | } |
369 | ||
46900298 | 370 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) { |
9ac19a90 JB |
371 | pos = skb_put(skb, 9); |
372 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
373 | *pos++ = 7; /* len */ | |
374 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
375 | *pos++ = 0x50; | |
376 | *pos++ = 0xf2; | |
377 | *pos++ = 2; /* WME */ | |
378 | *pos++ = 0; /* WME info */ | |
379 | *pos++ = 1; /* WME ver */ | |
380 | *pos++ = 0; | |
381 | } | |
382 | ||
383 | /* wmm support is a must to HT */ | |
eb46936b VT |
384 | /* |
385 | * IEEE802.11n does not allow TKIP/WEP as pairwise | |
386 | * ciphers in HT mode. We still associate in non-ht | |
387 | * mode (11a/b/g) if any one of these ciphers is | |
388 | * configured as pairwise. | |
389 | */ | |
46900298 | 390 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
d9fe60de | 391 | sband->ht_cap.ht_supported && |
77fdaa12 | 392 | (ht_ie = ieee80211_bss_get_ie(&wk->bss->cbss, WLAN_EID_HT_INFORMATION)) && |
eb46936b | 393 | ht_ie[1] >= sizeof(struct ieee80211_ht_info) && |
ab1faead | 394 | (!(ifmgd->flags & IEEE80211_STA_DISABLE_11N))) { |
d9fe60de JB |
395 | struct ieee80211_ht_info *ht_info = |
396 | (struct ieee80211_ht_info *)(ht_ie + 2); | |
397 | u16 cap = sband->ht_cap.cap; | |
9ac19a90 JB |
398 | __le16 tmp; |
399 | u32 flags = local->hw.conf.channel->flags; | |
400 | ||
d9fe60de JB |
401 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
402 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
689da1b3 | 403 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { |
d9fe60de | 404 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
405 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
406 | } | |
407 | break; | |
d9fe60de | 408 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
689da1b3 | 409 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { |
d9fe60de | 410 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
411 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
412 | } | |
413 | break; | |
414 | } | |
415 | ||
416 | tmp = cpu_to_le16(cap); | |
417 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2); | |
418 | *pos++ = WLAN_EID_HT_CAPABILITY; | |
419 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
420 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
421 | memcpy(pos, &tmp, sizeof(u16)); | |
422 | pos += sizeof(u16); | |
423 | /* TODO: needs a define here for << 2 */ | |
d9fe60de JB |
424 | *pos++ = sband->ht_cap.ampdu_factor | |
425 | (sband->ht_cap.ampdu_density << 2); | |
426 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); | |
9ac19a90 JB |
427 | } |
428 | ||
e50db65c | 429 | ieee80211_tx_skb(sdata, skb, 0); |
9ac19a90 JB |
430 | } |
431 | ||
432 | ||
ef422bc0 | 433 | static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
434 | const u8 *bssid, u16 stype, u16 reason, |
435 | void *cookie) | |
9ac19a90 JB |
436 | { |
437 | struct ieee80211_local *local = sdata->local; | |
46900298 | 438 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
439 | struct sk_buff *skb; |
440 | struct ieee80211_mgmt *mgmt; | |
9aed3cc1 | 441 | |
65fc73ac | 442 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); |
9ac19a90 | 443 | if (!skb) { |
ef422bc0 JB |
444 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
445 | "deauth/disassoc frame\n", sdata->dev->name); | |
9ac19a90 JB |
446 | return; |
447 | } | |
448 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
449 | ||
450 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
451 | memset(mgmt, 0, 24); | |
77fdaa12 | 452 | memcpy(mgmt->da, bssid, ETH_ALEN); |
9ac19a90 | 453 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
77fdaa12 | 454 | memcpy(mgmt->bssid, bssid, ETH_ALEN); |
ef422bc0 | 455 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); |
9ac19a90 | 456 | skb_put(skb, 2); |
ef422bc0 | 457 | /* u.deauth.reason_code == u.disassoc.reason_code */ |
9ac19a90 JB |
458 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); |
459 | ||
53b46b84 | 460 | if (stype == IEEE80211_STYPE_DEAUTH) |
667503dd | 461 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, cookie); |
53b46b84 | 462 | else |
667503dd | 463 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len, cookie); |
46900298 | 464 | ieee80211_tx_skb(sdata, skb, ifmgd->flags & IEEE80211_STA_MFP_ENABLED); |
9ac19a90 JB |
465 | } |
466 | ||
572e0012 KV |
467 | void ieee80211_send_pspoll(struct ieee80211_local *local, |
468 | struct ieee80211_sub_if_data *sdata) | |
469 | { | |
46900298 | 470 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
572e0012 KV |
471 | struct ieee80211_pspoll *pspoll; |
472 | struct sk_buff *skb; | |
473 | u16 fc; | |
474 | ||
475 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*pspoll)); | |
476 | if (!skb) { | |
477 | printk(KERN_DEBUG "%s: failed to allocate buffer for " | |
478 | "pspoll frame\n", sdata->dev->name); | |
479 | return; | |
480 | } | |
481 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
482 | ||
483 | pspoll = (struct ieee80211_pspoll *) skb_put(skb, sizeof(*pspoll)); | |
484 | memset(pspoll, 0, sizeof(*pspoll)); | |
485 | fc = IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL | IEEE80211_FCTL_PM; | |
486 | pspoll->frame_control = cpu_to_le16(fc); | |
46900298 | 487 | pspoll->aid = cpu_to_le16(ifmgd->aid); |
572e0012 KV |
488 | |
489 | /* aid in PS-Poll has its two MSBs each set to 1 */ | |
490 | pspoll->aid |= cpu_to_le16(1 << 15 | 1 << 14); | |
491 | ||
46900298 | 492 | memcpy(pspoll->bssid, ifmgd->bssid, ETH_ALEN); |
572e0012 KV |
493 | memcpy(pspoll->ta, sdata->dev->dev_addr, ETH_ALEN); |
494 | ||
495 | ieee80211_tx_skb(sdata, skb, 0); | |
572e0012 KV |
496 | } |
497 | ||
965bedad JB |
498 | void ieee80211_send_nullfunc(struct ieee80211_local *local, |
499 | struct ieee80211_sub_if_data *sdata, | |
500 | int powersave) | |
501 | { | |
502 | struct sk_buff *skb; | |
503 | struct ieee80211_hdr *nullfunc; | |
504 | __le16 fc; | |
505 | ||
506 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) | |
507 | return; | |
508 | ||
509 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); | |
510 | if (!skb) { | |
511 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " | |
512 | "frame\n", sdata->dev->name); | |
513 | return; | |
514 | } | |
515 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
516 | ||
517 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); | |
518 | memset(nullfunc, 0, 24); | |
519 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | | |
520 | IEEE80211_FCTL_TODS); | |
521 | if (powersave) | |
522 | fc |= cpu_to_le16(IEEE80211_FCTL_PM); | |
523 | nullfunc->frame_control = fc; | |
524 | memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN); | |
525 | memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN); | |
526 | memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN); | |
527 | ||
528 | ieee80211_tx_skb(sdata, skb, 0); | |
529 | } | |
530 | ||
cc32abd4 JB |
531 | /* spectrum management related things */ |
532 | static void ieee80211_chswitch_work(struct work_struct *work) | |
533 | { | |
534 | struct ieee80211_sub_if_data *sdata = | |
535 | container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work); | |
cc32abd4 JB |
536 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
537 | ||
538 | if (!netif_running(sdata->dev)) | |
539 | return; | |
540 | ||
77fdaa12 JB |
541 | mutex_lock(&ifmgd->mtx); |
542 | if (!ifmgd->associated) | |
543 | goto out; | |
cc32abd4 JB |
544 | |
545 | sdata->local->oper_channel = sdata->local->csa_channel; | |
77fdaa12 JB |
546 | ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL); |
547 | ||
cc32abd4 | 548 | /* XXX: shouldn't really modify cfg80211-owned data! */ |
77fdaa12 | 549 | ifmgd->associated->cbss.channel = sdata->local->oper_channel; |
cc32abd4 | 550 | |
cc32abd4 JB |
551 | ieee80211_wake_queues_by_reason(&sdata->local->hw, |
552 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
77fdaa12 JB |
553 | out: |
554 | ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED; | |
555 | mutex_unlock(&ifmgd->mtx); | |
cc32abd4 JB |
556 | } |
557 | ||
558 | static void ieee80211_chswitch_timer(unsigned long data) | |
559 | { | |
560 | struct ieee80211_sub_if_data *sdata = | |
561 | (struct ieee80211_sub_if_data *) data; | |
562 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
563 | ||
5bb644a0 JB |
564 | if (sdata->local->quiescing) { |
565 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
566 | return; | |
567 | } | |
568 | ||
42935eca | 569 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
570 | } |
571 | ||
572 | void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata, | |
573 | struct ieee80211_channel_sw_ie *sw_elem, | |
574 | struct ieee80211_bss *bss) | |
575 | { | |
576 | struct ieee80211_channel *new_ch; | |
577 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
578 | int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num); | |
579 | ||
77fdaa12 JB |
580 | ASSERT_MGD_MTX(ifmgd); |
581 | ||
582 | if (!ifmgd->associated) | |
cc32abd4 JB |
583 | return; |
584 | ||
fbe9c429 | 585 | if (sdata->local->scanning) |
cc32abd4 JB |
586 | return; |
587 | ||
588 | /* Disregard subsequent beacons if we are already running a timer | |
589 | processing a CSA */ | |
590 | ||
591 | if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED) | |
592 | return; | |
593 | ||
594 | new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq); | |
595 | if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED) | |
596 | return; | |
597 | ||
598 | sdata->local->csa_channel = new_ch; | |
599 | ||
600 | if (sw_elem->count <= 1) { | |
42935eca | 601 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
602 | } else { |
603 | ieee80211_stop_queues_by_reason(&sdata->local->hw, | |
604 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
605 | ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED; | |
606 | mod_timer(&ifmgd->chswitch_timer, | |
607 | jiffies + | |
608 | msecs_to_jiffies(sw_elem->count * | |
609 | bss->cbss.beacon_interval)); | |
610 | } | |
611 | } | |
612 | ||
613 | static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata, | |
614 | u16 capab_info, u8 *pwr_constr_elem, | |
615 | u8 pwr_constr_elem_len) | |
616 | { | |
617 | struct ieee80211_conf *conf = &sdata->local->hw.conf; | |
618 | ||
619 | if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT)) | |
620 | return; | |
621 | ||
622 | /* Power constraint IE length should be 1 octet */ | |
623 | if (pwr_constr_elem_len != 1) | |
624 | return; | |
625 | ||
626 | if ((*pwr_constr_elem <= conf->channel->max_power) && | |
627 | (*pwr_constr_elem != sdata->local->power_constr_level)) { | |
628 | sdata->local->power_constr_level = *pwr_constr_elem; | |
629 | ieee80211_hw_config(sdata->local, 0); | |
630 | } | |
631 | } | |
632 | ||
965bedad JB |
633 | /* powersave */ |
634 | static void ieee80211_enable_ps(struct ieee80211_local *local, | |
635 | struct ieee80211_sub_if_data *sdata) | |
636 | { | |
637 | struct ieee80211_conf *conf = &local->hw.conf; | |
638 | ||
d5edaedc JB |
639 | /* |
640 | * If we are scanning right now then the parameters will | |
641 | * take effect when scan finishes. | |
642 | */ | |
fbe9c429 | 643 | if (local->scanning) |
d5edaedc JB |
644 | return; |
645 | ||
965bedad JB |
646 | if (conf->dynamic_ps_timeout > 0 && |
647 | !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) { | |
648 | mod_timer(&local->dynamic_ps_timer, jiffies + | |
649 | msecs_to_jiffies(conf->dynamic_ps_timeout)); | |
650 | } else { | |
651 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
652 | ieee80211_send_nullfunc(local, sdata, 1); | |
653 | conf->flags |= IEEE80211_CONF_PS; | |
654 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
655 | } | |
656 | } | |
657 | ||
658 | static void ieee80211_change_ps(struct ieee80211_local *local) | |
659 | { | |
660 | struct ieee80211_conf *conf = &local->hw.conf; | |
661 | ||
662 | if (local->ps_sdata) { | |
965bedad JB |
663 | ieee80211_enable_ps(local, local->ps_sdata); |
664 | } else if (conf->flags & IEEE80211_CONF_PS) { | |
665 | conf->flags &= ~IEEE80211_CONF_PS; | |
666 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
667 | del_timer_sync(&local->dynamic_ps_timer); | |
668 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
669 | } | |
670 | } | |
671 | ||
672 | /* need to hold RTNL or interface lock */ | |
10f644a4 | 673 | void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency) |
965bedad JB |
674 | { |
675 | struct ieee80211_sub_if_data *sdata, *found = NULL; | |
676 | int count = 0; | |
677 | ||
678 | if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) { | |
679 | local->ps_sdata = NULL; | |
680 | return; | |
681 | } | |
682 | ||
683 | list_for_each_entry(sdata, &local->interfaces, list) { | |
684 | if (!netif_running(sdata->dev)) | |
685 | continue; | |
686 | if (sdata->vif.type != NL80211_IFTYPE_STATION) | |
687 | continue; | |
688 | found = sdata; | |
689 | count++; | |
690 | } | |
691 | ||
43f78531 | 692 | if (count == 1 && found->u.mgd.powersave && |
77fdaa12 | 693 | found->u.mgd.associated && list_empty(&found->u.mgd.work_list) && |
b291ba11 JB |
694 | !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL | |
695 | IEEE80211_STA_CONNECTION_POLL))) { | |
10f644a4 JB |
696 | s32 beaconint_us; |
697 | ||
698 | if (latency < 0) | |
699 | latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY); | |
700 | ||
701 | beaconint_us = ieee80211_tu_to_usec( | |
702 | found->vif.bss_conf.beacon_int); | |
703 | ||
04fe2037 | 704 | if (beaconint_us > latency) { |
10f644a4 | 705 | local->ps_sdata = NULL; |
04fe2037 JB |
706 | } else { |
707 | u8 dtimper = found->vif.bss_conf.dtim_period; | |
708 | int maxslp = 1; | |
709 | ||
710 | if (dtimper > 1) | |
711 | maxslp = min_t(int, dtimper, | |
712 | latency / beaconint_us); | |
713 | ||
9ccebe61 | 714 | local->hw.conf.max_sleep_period = maxslp; |
10f644a4 | 715 | local->ps_sdata = found; |
04fe2037 | 716 | } |
10f644a4 | 717 | } else { |
965bedad | 718 | local->ps_sdata = NULL; |
10f644a4 | 719 | } |
965bedad JB |
720 | |
721 | ieee80211_change_ps(local); | |
722 | } | |
723 | ||
724 | void ieee80211_dynamic_ps_disable_work(struct work_struct *work) | |
725 | { | |
726 | struct ieee80211_local *local = | |
727 | container_of(work, struct ieee80211_local, | |
728 | dynamic_ps_disable_work); | |
729 | ||
730 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { | |
731 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
732 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
733 | } | |
734 | ||
735 | ieee80211_wake_queues_by_reason(&local->hw, | |
736 | IEEE80211_QUEUE_STOP_REASON_PS); | |
737 | } | |
738 | ||
739 | void ieee80211_dynamic_ps_enable_work(struct work_struct *work) | |
740 | { | |
741 | struct ieee80211_local *local = | |
742 | container_of(work, struct ieee80211_local, | |
743 | dynamic_ps_enable_work); | |
744 | struct ieee80211_sub_if_data *sdata = local->ps_sdata; | |
745 | ||
746 | /* can only happen when PS was just disabled anyway */ | |
747 | if (!sdata) | |
748 | return; | |
749 | ||
750 | if (local->hw.conf.flags & IEEE80211_CONF_PS) | |
751 | return; | |
752 | ||
753 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
754 | ieee80211_send_nullfunc(local, sdata, 1); | |
755 | ||
756 | local->hw.conf.flags |= IEEE80211_CONF_PS; | |
757 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
758 | } | |
759 | ||
760 | void ieee80211_dynamic_ps_timer(unsigned long data) | |
761 | { | |
762 | struct ieee80211_local *local = (void *) data; | |
763 | ||
78f1a8b7 | 764 | if (local->quiescing || local->suspended) |
5bb644a0 JB |
765 | return; |
766 | ||
42935eca | 767 | ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work); |
965bedad JB |
768 | } |
769 | ||
60f8b39c | 770 | /* MLME */ |
f698d856 | 771 | static void ieee80211_sta_wmm_params(struct ieee80211_local *local, |
46900298 | 772 | struct ieee80211_if_managed *ifmgd, |
f0706e82 JB |
773 | u8 *wmm_param, size_t wmm_param_len) |
774 | { | |
f0706e82 JB |
775 | struct ieee80211_tx_queue_params params; |
776 | size_t left; | |
777 | int count; | |
778 | u8 *pos; | |
779 | ||
46900298 | 780 | if (!(ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) |
3434fbd3 JB |
781 | return; |
782 | ||
783 | if (!wmm_param) | |
784 | return; | |
785 | ||
f0706e82 JB |
786 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
787 | return; | |
788 | count = wmm_param[6] & 0x0f; | |
46900298 | 789 | if (count == ifmgd->wmm_last_param_set) |
f0706e82 | 790 | return; |
46900298 | 791 | ifmgd->wmm_last_param_set = count; |
f0706e82 JB |
792 | |
793 | pos = wmm_param + 8; | |
794 | left = wmm_param_len - 8; | |
795 | ||
796 | memset(¶ms, 0, sizeof(params)); | |
797 | ||
f0706e82 JB |
798 | local->wmm_acm = 0; |
799 | for (; left >= 4; left -= 4, pos += 4) { | |
800 | int aci = (pos[0] >> 5) & 0x03; | |
801 | int acm = (pos[0] >> 4) & 0x01; | |
802 | int queue; | |
803 | ||
804 | switch (aci) { | |
0eeb59fe | 805 | case 1: /* AC_BK */ |
e100bb64 | 806 | queue = 3; |
988c0f72 | 807 | if (acm) |
0eeb59fe | 808 | local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */ |
f0706e82 | 809 | break; |
0eeb59fe | 810 | case 2: /* AC_VI */ |
e100bb64 | 811 | queue = 1; |
988c0f72 | 812 | if (acm) |
0eeb59fe | 813 | local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */ |
f0706e82 | 814 | break; |
0eeb59fe | 815 | case 3: /* AC_VO */ |
e100bb64 | 816 | queue = 0; |
988c0f72 | 817 | if (acm) |
0eeb59fe | 818 | local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */ |
f0706e82 | 819 | break; |
0eeb59fe | 820 | case 0: /* AC_BE */ |
f0706e82 | 821 | default: |
e100bb64 | 822 | queue = 2; |
988c0f72 | 823 | if (acm) |
0eeb59fe | 824 | local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */ |
f0706e82 JB |
825 | break; |
826 | } | |
827 | ||
828 | params.aifs = pos[0] & 0x0f; | |
829 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); | |
830 | params.cw_min = ecw2cw(pos[1] & 0x0f); | |
f434b2d1 | 831 | params.txop = get_unaligned_le16(pos + 2); |
f4ea83dd | 832 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
f0706e82 | 833 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
3330d7be | 834 | "cWmin=%d cWmax=%d txop=%d\n", |
0bffe40f JB |
835 | wiphy_name(local->hw.wiphy), queue, aci, acm, |
836 | params.aifs, params.cw_min, params.cw_max, params.txop); | |
3330d7be | 837 | #endif |
24487981 | 838 | if (drv_conf_tx(local, queue, ¶ms) && local->ops->conf_tx) |
f0706e82 | 839 | printk(KERN_DEBUG "%s: failed to set TX queue " |
0bffe40f JB |
840 | "parameters for queue %d\n", |
841 | wiphy_name(local->hw.wiphy), queue); | |
f0706e82 JB |
842 | } |
843 | } | |
844 | ||
7a5158ef JB |
845 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, |
846 | u16 capab, bool erp_valid, u8 erp) | |
5628221c | 847 | { |
bda3933a | 848 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
471b3efd | 849 | u32 changed = 0; |
7a5158ef JB |
850 | bool use_protection; |
851 | bool use_short_preamble; | |
852 | bool use_short_slot; | |
853 | ||
854 | if (erp_valid) { | |
855 | use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0; | |
856 | use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0; | |
857 | } else { | |
858 | use_protection = false; | |
859 | use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE); | |
860 | } | |
861 | ||
862 | use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME); | |
5628221c | 863 | |
471b3efd | 864 | if (use_protection != bss_conf->use_cts_prot) { |
471b3efd JB |
865 | bss_conf->use_cts_prot = use_protection; |
866 | changed |= BSS_CHANGED_ERP_CTS_PROT; | |
5628221c | 867 | } |
7e9ed188 | 868 | |
d43c7b37 | 869 | if (use_short_preamble != bss_conf->use_short_preamble) { |
d43c7b37 | 870 | bss_conf->use_short_preamble = use_short_preamble; |
471b3efd | 871 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
7e9ed188 | 872 | } |
d9430a32 | 873 | |
7a5158ef | 874 | if (use_short_slot != bss_conf->use_short_slot) { |
7a5158ef JB |
875 | bss_conf->use_short_slot = use_short_slot; |
876 | changed |= BSS_CHANGED_ERP_SLOT; | |
50c4afb9 JL |
877 | } |
878 | ||
879 | return changed; | |
880 | } | |
881 | ||
f698d856 | 882 | static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata, |
e21546a2 | 883 | struct ieee80211_mgd_work *wk, |
ae5eb026 | 884 | u32 bss_info_changed) |
f0706e82 | 885 | { |
471b3efd | 886 | struct ieee80211_local *local = sdata->local; |
e21546a2 | 887 | struct ieee80211_bss *bss = wk->bss; |
d6f2da5b | 888 | |
ae5eb026 | 889 | bss_info_changed |= BSS_CHANGED_ASSOC; |
77fdaa12 JB |
890 | /* set timing information */ |
891 | sdata->vif.bss_conf.beacon_int = bss->cbss.beacon_interval; | |
892 | sdata->vif.bss_conf.timestamp = bss->cbss.tsf; | |
893 | sdata->vif.bss_conf.dtim_period = bss->dtim_period; | |
5628221c | 894 | |
77fdaa12 JB |
895 | bss_info_changed |= BSS_CHANGED_BEACON_INT; |
896 | bss_info_changed |= ieee80211_handle_bss_capability(sdata, | |
897 | bss->cbss.capability, bss->has_erp_value, bss->erp_value); | |
21c0cbe7 | 898 | |
77fdaa12 | 899 | sdata->u.mgd.associated = bss; |
e21546a2 | 900 | sdata->u.mgd.old_associate_work = wk; |
77fdaa12 | 901 | memcpy(sdata->u.mgd.bssid, bss->cbss.bssid, ETH_ALEN); |
f0706e82 | 902 | |
b291ba11 JB |
903 | /* just to be sure */ |
904 | sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
905 | IEEE80211_STA_BEACON_POLL); | |
906 | ||
9ac19a90 | 907 | ieee80211_led_assoc(local, 1); |
9306102e | 908 | |
bda3933a | 909 | sdata->vif.bss_conf.assoc = 1; |
96dd22ac JB |
910 | /* |
911 | * For now just always ask the driver to update the basic rateset | |
912 | * when we have associated, we aren't checking whether it actually | |
913 | * changed or not. | |
914 | */ | |
ae5eb026 | 915 | bss_info_changed |= BSS_CHANGED_BASIC_RATES; |
9cef8737 JB |
916 | |
917 | /* And the BSSID changed - we're associated now */ | |
918 | bss_info_changed |= BSS_CHANGED_BSSID; | |
919 | ||
ae5eb026 | 920 | ieee80211_bss_info_change_notify(sdata, bss_info_changed); |
f0706e82 | 921 | |
056508dc JB |
922 | mutex_lock(&local->iflist_mtx); |
923 | ieee80211_recalc_ps(local, -1); | |
924 | mutex_unlock(&local->iflist_mtx); | |
e0cb686f | 925 | |
9ac19a90 JB |
926 | netif_tx_start_all_queues(sdata->dev); |
927 | netif_carrier_on(sdata->dev); | |
f0706e82 JB |
928 | } |
929 | ||
77fdaa12 JB |
930 | static enum rx_mgmt_action __must_check |
931 | ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata, | |
932 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 933 | { |
46900298 | 934 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 935 | struct ieee80211_local *local = sdata->local; |
46900298 | 936 | |
77fdaa12 JB |
937 | wk->tries++; |
938 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 939 | printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n", |
77fdaa12 | 940 | sdata->dev->name, wk->bss->cbss.bssid); |
7a947080 VT |
941 | |
942 | /* | |
943 | * Most likely AP is not in the range so remove the | |
77fdaa12 | 944 | * bss struct for that AP. |
7a947080 | 945 | */ |
77fdaa12 | 946 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
11432379 HS |
947 | |
948 | /* | |
949 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
950 | * due to work needing to be done. Hence, queue the STAs work |
951 | * again for that. | |
11432379 | 952 | */ |
42935eca | 953 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 954 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 955 | } |
f0706e82 | 956 | |
77fdaa12 JB |
957 | printk(KERN_DEBUG "%s: direct probe to AP %pM (try %d)\n", |
958 | sdata->dev->name, wk->bss->cbss.bssid, | |
959 | wk->tries); | |
f0706e82 | 960 | |
77fdaa12 JB |
961 | /* |
962 | * Direct probe is sent to broadcast address as some APs | |
9ac19a90 JB |
963 | * will not answer to direct packet in unassociated state. |
964 | */ | |
77fdaa12 JB |
965 | ieee80211_send_probe_req(sdata, NULL, wk->ssid, wk->ssid_len, NULL, 0); |
966 | ||
967 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
ca386f31 | 968 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 969 | |
77fdaa12 | 970 | return RX_MGMT_NONE; |
60f8b39c | 971 | } |
f0706e82 | 972 | |
9ac19a90 | 973 | |
77fdaa12 JB |
974 | static enum rx_mgmt_action __must_check |
975 | ieee80211_authenticate(struct ieee80211_sub_if_data *sdata, | |
976 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 977 | { |
46900298 | 978 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 979 | struct ieee80211_local *local = sdata->local; |
46900298 | 980 | |
77fdaa12 JB |
981 | wk->tries++; |
982 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 983 | printk(KERN_DEBUG "%s: authentication with AP %pM" |
9ac19a90 | 984 | " timed out\n", |
77fdaa12 JB |
985 | sdata->dev->name, wk->bss->cbss.bssid); |
986 | ||
987 | /* | |
988 | * Most likely AP is not in the range so remove the | |
989 | * bss struct for that AP. | |
990 | */ | |
991 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
11432379 HS |
992 | |
993 | /* | |
994 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
995 | * due to work needing to be done. Hence, queue the STAs work |
996 | * again for that. | |
11432379 | 997 | */ |
42935eca | 998 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 999 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 1000 | } |
f0706e82 | 1001 | |
77fdaa12 JB |
1002 | printk(KERN_DEBUG "%s: authenticate with AP %pM (try %d)\n", |
1003 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1004 | ||
1005 | ieee80211_send_auth(sdata, 1, wk->auth_alg, wk->ie, wk->ie_len, | |
fffd0934 | 1006 | wk->bss->cbss.bssid, NULL, 0, 0); |
77fdaa12 | 1007 | wk->auth_transaction = 2; |
f0706e82 | 1008 | |
77fdaa12 | 1009 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
ca386f31 | 1010 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 1011 | |
77fdaa12 | 1012 | return RX_MGMT_NONE; |
f0706e82 JB |
1013 | } |
1014 | ||
e21546a2 JB |
1015 | static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata, |
1016 | bool deauth) | |
aa458d17 | 1017 | { |
46900298 | 1018 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
aa458d17 TW |
1019 | struct ieee80211_local *local = sdata->local; |
1020 | struct sta_info *sta; | |
e0cb686f | 1021 | u32 changed = 0, config_changed = 0; |
b291ba11 | 1022 | u8 bssid[ETH_ALEN]; |
aa458d17 | 1023 | |
77fdaa12 JB |
1024 | ASSERT_MGD_MTX(ifmgd); |
1025 | ||
b291ba11 JB |
1026 | if (WARN_ON(!ifmgd->associated)) |
1027 | return; | |
1028 | ||
1029 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
1030 | ||
77fdaa12 JB |
1031 | ifmgd->associated = NULL; |
1032 | memset(ifmgd->bssid, 0, ETH_ALEN); | |
1033 | ||
e21546a2 JB |
1034 | if (deauth) { |
1035 | kfree(ifmgd->old_associate_work); | |
1036 | ifmgd->old_associate_work = NULL; | |
1037 | } else { | |
1038 | struct ieee80211_mgd_work *wk = ifmgd->old_associate_work; | |
1039 | ||
1040 | wk->state = IEEE80211_MGD_STATE_IDLE; | |
1041 | list_add(&wk->list, &ifmgd->work_list); | |
1042 | } | |
1043 | ||
77fdaa12 JB |
1044 | /* |
1045 | * we need to commit the associated = NULL change because the | |
1046 | * scan code uses that to determine whether this iface should | |
1047 | * go to/wake up from powersave or not -- and could otherwise | |
1048 | * wake the queues erroneously. | |
1049 | */ | |
1050 | smp_mb(); | |
1051 | ||
1052 | /* | |
1053 | * Thus, we can only afterwards stop the queues -- to account | |
1054 | * for the case where another CPU is finishing a scan at this | |
1055 | * time -- we don't want the scan code to enable queues. | |
1056 | */ | |
aa458d17 | 1057 | |
24e64622 | 1058 | netif_tx_stop_all_queues(sdata->dev); |
aa458d17 TW |
1059 | netif_carrier_off(sdata->dev); |
1060 | ||
1fa6f4af | 1061 | rcu_read_lock(); |
77fdaa12 | 1062 | sta = sta_info_get(local, bssid); |
1fa6f4af JB |
1063 | if (sta) |
1064 | ieee80211_sta_tear_down_BA_sessions(sta); | |
1065 | rcu_read_unlock(); | |
aa458d17 | 1066 | |
f5e5bf25 TW |
1067 | changed |= ieee80211_reset_erp_info(sdata); |
1068 | ||
f5e5bf25 | 1069 | ieee80211_led_assoc(local, 0); |
ae5eb026 JB |
1070 | changed |= BSS_CHANGED_ASSOC; |
1071 | sdata->vif.bss_conf.assoc = false; | |
f5e5bf25 | 1072 | |
aa837e1d JB |
1073 | ieee80211_set_wmm_default(sdata); |
1074 | ||
5cff20e6 JB |
1075 | ieee80211_recalc_idle(local); |
1076 | ||
4797938c | 1077 | /* channel(_type) changes are handled by ieee80211_hw_config */ |
094d05dc | 1078 | local->oper_channel_type = NL80211_CHAN_NO_HT; |
e0cb686f | 1079 | |
413ad50a JB |
1080 | /* on the next assoc, re-program HT parameters */ |
1081 | sdata->ht_opmode_valid = false; | |
1082 | ||
a8302de9 VT |
1083 | local->power_constr_level = 0; |
1084 | ||
520eb820 KV |
1085 | del_timer_sync(&local->dynamic_ps_timer); |
1086 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
1087 | ||
e0cb686f KV |
1088 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
1089 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1090 | config_changed |= IEEE80211_CONF_CHANGE_PS; | |
1091 | } | |
ae5eb026 | 1092 | |
e0cb686f | 1093 | ieee80211_hw_config(local, config_changed); |
9cef8737 JB |
1094 | |
1095 | /* And the BSSID changed -- not very interesting here */ | |
1096 | changed |= BSS_CHANGED_BSSID; | |
ae5eb026 | 1097 | ieee80211_bss_info_change_notify(sdata, changed); |
8e268e47 TW |
1098 | |
1099 | rcu_read_lock(); | |
1100 | ||
77fdaa12 | 1101 | sta = sta_info_get(local, bssid); |
8e268e47 TW |
1102 | if (!sta) { |
1103 | rcu_read_unlock(); | |
1104 | return; | |
1105 | } | |
1106 | ||
1107 | sta_info_unlink(&sta); | |
1108 | ||
1109 | rcu_read_unlock(); | |
1110 | ||
1111 | sta_info_destroy(sta); | |
aa458d17 | 1112 | } |
f0706e82 | 1113 | |
77fdaa12 JB |
1114 | static enum rx_mgmt_action __must_check |
1115 | ieee80211_associate(struct ieee80211_sub_if_data *sdata, | |
1116 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1117 | { |
46900298 | 1118 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1119 | struct ieee80211_local *local = sdata->local; |
46900298 | 1120 | |
77fdaa12 JB |
1121 | wk->tries++; |
1122 | if (wk->tries > IEEE80211_ASSOC_MAX_TRIES) { | |
0c68ae26 | 1123 | printk(KERN_DEBUG "%s: association with AP %pM" |
f0706e82 | 1124 | " timed out\n", |
77fdaa12 JB |
1125 | sdata->dev->name, wk->bss->cbss.bssid); |
1126 | ||
1127 | /* | |
1128 | * Most likely AP is not in the range so remove the | |
1129 | * bss struct for that AP. | |
1130 | */ | |
1131 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
1132 | ||
11432379 HS |
1133 | /* |
1134 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1135 | * due to work needing to be done. Hence, queue the STAs work |
1136 | * again for that. | |
11432379 | 1137 | */ |
42935eca | 1138 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1139 | return RX_MGMT_CFG80211_ASSOC_TO; |
f0706e82 JB |
1140 | } |
1141 | ||
77fdaa12 JB |
1142 | printk(KERN_DEBUG "%s: associate with AP %pM (try %d)\n", |
1143 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); | |
1144 | ieee80211_send_assoc(sdata, wk); | |
1145 | ||
1146 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; | |
ca386f31 | 1147 | run_again(ifmgd, wk->timeout); |
f0706e82 | 1148 | |
77fdaa12 | 1149 | return RX_MGMT_NONE; |
f0706e82 JB |
1150 | } |
1151 | ||
3cf335d5 KV |
1152 | void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata, |
1153 | struct ieee80211_hdr *hdr) | |
1154 | { | |
1155 | /* | |
1156 | * We can postpone the mgd.timer whenever receiving unicast frames | |
1157 | * from AP because we know that the connection is working both ways | |
1158 | * at that time. But multicast frames (and hence also beacons) must | |
1159 | * be ignored here, because we need to trigger the timer during | |
b291ba11 JB |
1160 | * data idle periods for sending the periodic probe request to the |
1161 | * AP we're connected to. | |
3cf335d5 | 1162 | */ |
b291ba11 JB |
1163 | if (is_multicast_ether_addr(hdr->addr1)) |
1164 | return; | |
1165 | ||
1166 | mod_timer(&sdata->u.mgd.conn_mon_timer, | |
1167 | round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME)); | |
3cf335d5 | 1168 | } |
f0706e82 | 1169 | |
a43abf29 ML |
1170 | static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata) |
1171 | { | |
1172 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
1173 | const u8 *ssid; | |
1174 | ||
1175 | ssid = ieee80211_bss_get_ie(&ifmgd->associated->cbss, WLAN_EID_SSID); | |
1176 | ieee80211_send_probe_req(sdata, ifmgd->associated->cbss.bssid, | |
1177 | ssid + 2, ssid[1], NULL, 0); | |
1178 | ||
1179 | ifmgd->probe_send_count++; | |
1180 | ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT; | |
1181 | run_again(ifmgd, ifmgd->probe_timeout); | |
1182 | } | |
1183 | ||
b291ba11 JB |
1184 | static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata, |
1185 | bool beacon) | |
04de8381 | 1186 | { |
04de8381 | 1187 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
b291ba11 | 1188 | bool already = false; |
34bfc411 | 1189 | |
0e2b6286 JB |
1190 | if (!netif_running(sdata->dev)) |
1191 | return; | |
1192 | ||
91a3bd76 LR |
1193 | if (sdata->local->scanning) |
1194 | return; | |
1195 | ||
77fdaa12 JB |
1196 | mutex_lock(&ifmgd->mtx); |
1197 | ||
1198 | if (!ifmgd->associated) | |
1199 | goto out; | |
1200 | ||
a860402d | 1201 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
b291ba11 JB |
1202 | if (beacon && net_ratelimit()) |
1203 | printk(KERN_DEBUG "%s: detected beacon loss from AP " | |
77fdaa12 | 1204 | "- sending probe request\n", sdata->dev->name); |
a860402d | 1205 | #endif |
04de8381 | 1206 | |
b291ba11 JB |
1207 | /* |
1208 | * The driver/our work has already reported this event or the | |
1209 | * connection monitoring has kicked in and we have already sent | |
1210 | * a probe request. Or maybe the AP died and the driver keeps | |
1211 | * reporting until we disassociate... | |
1212 | * | |
1213 | * In either case we have to ignore the current call to this | |
1214 | * function (except for setting the correct probe reason bit) | |
1215 | * because otherwise we would reset the timer every time and | |
1216 | * never check whether we received a probe response! | |
1217 | */ | |
1218 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | | |
1219 | IEEE80211_STA_CONNECTION_POLL)) | |
1220 | already = true; | |
1221 | ||
1222 | if (beacon) | |
1223 | ifmgd->flags |= IEEE80211_STA_BEACON_POLL; | |
1224 | else | |
1225 | ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL; | |
1226 | ||
1227 | if (already) | |
1228 | goto out; | |
1229 | ||
4e751843 JB |
1230 | mutex_lock(&sdata->local->iflist_mtx); |
1231 | ieee80211_recalc_ps(sdata->local, -1); | |
1232 | mutex_unlock(&sdata->local->iflist_mtx); | |
1233 | ||
a43abf29 ML |
1234 | ifmgd->probe_send_count = 0; |
1235 | ieee80211_mgd_probe_ap_send(sdata); | |
77fdaa12 JB |
1236 | out: |
1237 | mutex_unlock(&ifmgd->mtx); | |
04de8381 KV |
1238 | } |
1239 | ||
b291ba11 JB |
1240 | void ieee80211_beacon_loss_work(struct work_struct *work) |
1241 | { | |
1242 | struct ieee80211_sub_if_data *sdata = | |
1243 | container_of(work, struct ieee80211_sub_if_data, | |
1244 | u.mgd.beacon_loss_work); | |
1245 | ||
1246 | ieee80211_mgd_probe_ap(sdata, true); | |
1247 | } | |
1248 | ||
04de8381 KV |
1249 | void ieee80211_beacon_loss(struct ieee80211_vif *vif) |
1250 | { | |
1251 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
1252 | ||
42935eca | 1253 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
04de8381 KV |
1254 | } |
1255 | EXPORT_SYMBOL(ieee80211_beacon_loss); | |
1256 | ||
77fdaa12 JB |
1257 | static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata, |
1258 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1259 | { |
77fdaa12 | 1260 | wk->state = IEEE80211_MGD_STATE_IDLE; |
f698d856 | 1261 | printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name); |
f0706e82 JB |
1262 | } |
1263 | ||
1264 | ||
f698d856 | 1265 | static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata, |
77fdaa12 | 1266 | struct ieee80211_mgd_work *wk, |
f0706e82 JB |
1267 | struct ieee80211_mgmt *mgmt, |
1268 | size_t len) | |
1269 | { | |
1270 | u8 *pos; | |
1271 | struct ieee802_11_elems elems; | |
1272 | ||
f0706e82 | 1273 | pos = mgmt->u.auth.variable; |
67a4cce4 | 1274 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f4ea83dd | 1275 | if (!elems.challenge) |
f0706e82 | 1276 | return; |
77fdaa12 | 1277 | ieee80211_send_auth(sdata, 3, wk->auth_alg, |
46900298 | 1278 | elems.challenge - 2, elems.challenge_len + 2, |
fffd0934 JB |
1279 | wk->bss->cbss.bssid, |
1280 | wk->key, wk->key_len, wk->key_idx); | |
77fdaa12 | 1281 | wk->auth_transaction = 4; |
fe3d2c3f JB |
1282 | } |
1283 | ||
77fdaa12 JB |
1284 | static enum rx_mgmt_action __must_check |
1285 | ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata, | |
1286 | struct ieee80211_mgd_work *wk, | |
1287 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1288 | { |
f0706e82 JB |
1289 | u16 auth_alg, auth_transaction, status_code; |
1290 | ||
77fdaa12 JB |
1291 | if (wk->state != IEEE80211_MGD_STATE_AUTH) |
1292 | return RX_MGMT_NONE; | |
f0706e82 | 1293 | |
f4ea83dd | 1294 | if (len < 24 + 6) |
77fdaa12 | 1295 | return RX_MGMT_NONE; |
f0706e82 | 1296 | |
77fdaa12 JB |
1297 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1298 | return RX_MGMT_NONE; | |
f0706e82 | 1299 | |
77fdaa12 JB |
1300 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1301 | return RX_MGMT_NONE; | |
f0706e82 JB |
1302 | |
1303 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
1304 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
1305 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
1306 | ||
77fdaa12 JB |
1307 | if (auth_alg != wk->auth_alg || |
1308 | auth_transaction != wk->auth_transaction) | |
1309 | return RX_MGMT_NONE; | |
f0706e82 JB |
1310 | |
1311 | if (status_code != WLAN_STATUS_SUCCESS) { | |
77fdaa12 JB |
1312 | list_del(&wk->list); |
1313 | kfree(wk); | |
1314 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 JB |
1315 | } |
1316 | ||
77fdaa12 | 1317 | switch (wk->auth_alg) { |
f0706e82 JB |
1318 | case WLAN_AUTH_OPEN: |
1319 | case WLAN_AUTH_LEAP: | |
636a5d36 | 1320 | case WLAN_AUTH_FT: |
77fdaa12 JB |
1321 | ieee80211_auth_completed(sdata, wk); |
1322 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 | 1323 | case WLAN_AUTH_SHARED_KEY: |
77fdaa12 JB |
1324 | if (wk->auth_transaction == 4) { |
1325 | ieee80211_auth_completed(sdata, wk); | |
1326 | return RX_MGMT_CFG80211_AUTH; | |
6039f6d2 | 1327 | } else |
77fdaa12 | 1328 | ieee80211_auth_challenge(sdata, wk, mgmt, len); |
f0706e82 JB |
1329 | break; |
1330 | } | |
77fdaa12 JB |
1331 | |
1332 | return RX_MGMT_NONE; | |
f0706e82 JB |
1333 | } |
1334 | ||
1335 | ||
77fdaa12 JB |
1336 | static enum rx_mgmt_action __must_check |
1337 | ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata, | |
1338 | struct ieee80211_mgd_work *wk, | |
1339 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1340 | { |
46900298 | 1341 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 | 1342 | const u8 *bssid = NULL; |
f0706e82 JB |
1343 | u16 reason_code; |
1344 | ||
f4ea83dd | 1345 | if (len < 24 + 2) |
77fdaa12 | 1346 | return RX_MGMT_NONE; |
f0706e82 | 1347 | |
77fdaa12 JB |
1348 | ASSERT_MGD_MTX(ifmgd); |
1349 | ||
1350 | if (wk) | |
1351 | bssid = wk->bss->cbss.bssid; | |
1352 | else | |
1353 | bssid = ifmgd->associated->cbss.bssid; | |
f0706e82 JB |
1354 | |
1355 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
1356 | ||
77fdaa12 JB |
1357 | printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n", |
1358 | sdata->dev->name, bssid, reason_code); | |
1359 | ||
1360 | if (!wk) { | |
e21546a2 | 1361 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
1362 | } else { |
1363 | list_del(&wk->list); | |
1364 | kfree(wk); | |
1365 | } | |
f0706e82 | 1366 | |
77fdaa12 | 1367 | return RX_MGMT_CFG80211_DEAUTH; |
f0706e82 JB |
1368 | } |
1369 | ||
1370 | ||
77fdaa12 JB |
1371 | static enum rx_mgmt_action __must_check |
1372 | ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata, | |
1373 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1374 | { |
46900298 | 1375 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1376 | u16 reason_code; |
1377 | ||
f4ea83dd | 1378 | if (len < 24 + 2) |
77fdaa12 | 1379 | return RX_MGMT_NONE; |
f0706e82 | 1380 | |
77fdaa12 JB |
1381 | ASSERT_MGD_MTX(ifmgd); |
1382 | ||
1383 | if (WARN_ON(!ifmgd->associated)) | |
1384 | return RX_MGMT_NONE; | |
1385 | ||
1386 | if (WARN_ON(memcmp(ifmgd->associated->cbss.bssid, mgmt->sa, ETH_ALEN))) | |
1387 | return RX_MGMT_NONE; | |
f0706e82 JB |
1388 | |
1389 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); | |
1390 | ||
77fdaa12 JB |
1391 | printk(KERN_DEBUG "%s: disassociated (Reason: %u)\n", |
1392 | sdata->dev->name, reason_code); | |
f0706e82 | 1393 | |
e21546a2 | 1394 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 | 1395 | return RX_MGMT_CFG80211_DISASSOC; |
f0706e82 JB |
1396 | } |
1397 | ||
1398 | ||
77fdaa12 JB |
1399 | static enum rx_mgmt_action __must_check |
1400 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, | |
1401 | struct ieee80211_mgd_work *wk, | |
1402 | struct ieee80211_mgmt *mgmt, size_t len, | |
1403 | bool reassoc) | |
f0706e82 | 1404 | { |
46900298 | 1405 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
471b3efd | 1406 | struct ieee80211_local *local = sdata->local; |
8318d78a | 1407 | struct ieee80211_supported_band *sband; |
f0706e82 | 1408 | struct sta_info *sta; |
881d948c | 1409 | u32 rates, basic_rates; |
f0706e82 JB |
1410 | u16 capab_info, status_code, aid; |
1411 | struct ieee802_11_elems elems; | |
bda3933a | 1412 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
f0706e82 | 1413 | u8 *pos; |
ae5eb026 | 1414 | u32 changed = 0; |
f0706e82 | 1415 | int i, j; |
ddf4ac53 | 1416 | bool have_higher_than_11mbit = false, newsta = false; |
ae5eb026 | 1417 | u16 ap_ht_cap_flags; |
f0706e82 | 1418 | |
77fdaa12 JB |
1419 | /* |
1420 | * AssocResp and ReassocResp have identical structure, so process both | |
1421 | * of them in this function. | |
1422 | */ | |
f0706e82 | 1423 | |
f4ea83dd | 1424 | if (len < 24 + 6) |
77fdaa12 | 1425 | return RX_MGMT_NONE; |
f0706e82 | 1426 | |
77fdaa12 JB |
1427 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1428 | return RX_MGMT_NONE; | |
f0706e82 JB |
1429 | |
1430 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
1431 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
1432 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
f0706e82 | 1433 | |
0c68ae26 | 1434 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " |
f0706e82 | 1435 | "status=%d aid=%d)\n", |
0c68ae26 | 1436 | sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa, |
ddd68587 | 1437 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
f0706e82 | 1438 | |
63a5ab82 JM |
1439 | pos = mgmt->u.assoc_resp.variable; |
1440 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
1441 | ||
1442 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && | |
f797eb7e JM |
1443 | elems.timeout_int && elems.timeout_int_len == 5 && |
1444 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { | |
63a5ab82 | 1445 | u32 tu, ms; |
f797eb7e | 1446 | tu = get_unaligned_le32(elems.timeout_int + 1); |
63a5ab82 JM |
1447 | ms = tu * 1024 / 1000; |
1448 | printk(KERN_DEBUG "%s: AP rejected association temporarily; " | |
1449 | "comeback duration %u TU (%u ms)\n", | |
1450 | sdata->dev->name, tu, ms); | |
77fdaa12 | 1451 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
63a5ab82 | 1452 | if (ms > IEEE80211_ASSOC_TIMEOUT) |
ca386f31 | 1453 | run_again(ifmgd, jiffies + msecs_to_jiffies(ms)); |
77fdaa12 | 1454 | return RX_MGMT_NONE; |
63a5ab82 JM |
1455 | } |
1456 | ||
f0706e82 JB |
1457 | if (status_code != WLAN_STATUS_SUCCESS) { |
1458 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", | |
f698d856 | 1459 | sdata->dev->name, status_code); |
77fdaa12 JB |
1460 | list_del(&wk->list); |
1461 | kfree(wk); | |
1462 | return RX_MGMT_CFG80211_ASSOC; | |
f0706e82 JB |
1463 | } |
1464 | ||
1dd84aa2 JB |
1465 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1466 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " | |
f698d856 | 1467 | "set\n", sdata->dev->name, aid); |
1dd84aa2 JB |
1468 | aid &= ~(BIT(15) | BIT(14)); |
1469 | ||
f0706e82 JB |
1470 | if (!elems.supp_rates) { |
1471 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", | |
f698d856 | 1472 | sdata->dev->name); |
77fdaa12 | 1473 | return RX_MGMT_NONE; |
f0706e82 JB |
1474 | } |
1475 | ||
f698d856 | 1476 | printk(KERN_DEBUG "%s: associated\n", sdata->dev->name); |
46900298 | 1477 | ifmgd->aid = aid; |
f0706e82 | 1478 | |
d0709a65 JB |
1479 | rcu_read_lock(); |
1480 | ||
f0706e82 | 1481 | /* Add STA entry for the AP */ |
77fdaa12 | 1482 | sta = sta_info_get(local, wk->bss->cbss.bssid); |
f0706e82 | 1483 | if (!sta) { |
ddf4ac53 | 1484 | newsta = true; |
d0709a65 | 1485 | |
77fdaa12 JB |
1486 | rcu_read_unlock(); |
1487 | ||
1488 | sta = sta_info_alloc(sdata, wk->bss->cbss.bssid, GFP_KERNEL); | |
73651ee6 JB |
1489 | if (!sta) { |
1490 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" | |
f698d856 | 1491 | " the AP\n", sdata->dev->name); |
77fdaa12 | 1492 | return RX_MGMT_NONE; |
f0706e82 | 1493 | } |
f709fc69 | 1494 | |
77fdaa12 JB |
1495 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | |
1496 | WLAN_STA_ASSOC_AP); | |
1497 | if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT)) | |
1498 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); | |
f709fc69 | 1499 | |
77fdaa12 JB |
1500 | rcu_read_lock(); |
1501 | } | |
05e5e883 | 1502 | |
60f8b39c JB |
1503 | rates = 0; |
1504 | basic_rates = 0; | |
1505 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
f709fc69 | 1506 | |
60f8b39c JB |
1507 | for (i = 0; i < elems.supp_rates_len; i++) { |
1508 | int rate = (elems.supp_rates[i] & 0x7f) * 5; | |
d61272cb | 1509 | bool is_basic = !!(elems.supp_rates[i] & 0x80); |
f709fc69 | 1510 | |
60f8b39c JB |
1511 | if (rate > 110) |
1512 | have_higher_than_11mbit = true; | |
1513 | ||
1514 | for (j = 0; j < sband->n_bitrates; j++) { | |
d61272cb | 1515 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1516 | rates |= BIT(j); |
d61272cb TW |
1517 | if (is_basic) |
1518 | basic_rates |= BIT(j); | |
1519 | break; | |
1520 | } | |
f709fc69 | 1521 | } |
f709fc69 LCC |
1522 | } |
1523 | ||
60f8b39c JB |
1524 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
1525 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; | |
7e0986c1 | 1526 | bool is_basic = !!(elems.ext_supp_rates[i] & 0x80); |
f0706e82 | 1527 | |
60f8b39c JB |
1528 | if (rate > 110) |
1529 | have_higher_than_11mbit = true; | |
f0706e82 | 1530 | |
60f8b39c | 1531 | for (j = 0; j < sband->n_bitrates; j++) { |
d61272cb | 1532 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1533 | rates |= BIT(j); |
d61272cb TW |
1534 | if (is_basic) |
1535 | basic_rates |= BIT(j); | |
1536 | break; | |
1537 | } | |
60f8b39c | 1538 | } |
1ebebea8 | 1539 | } |
f0706e82 | 1540 | |
323ce79a | 1541 | sta->sta.supp_rates[local->hw.conf.channel->band] = rates; |
bda3933a | 1542 | sdata->vif.bss_conf.basic_rates = basic_rates; |
60f8b39c JB |
1543 | |
1544 | /* cf. IEEE 802.11 9.2.12 */ | |
1545 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
1546 | have_higher_than_11mbit) | |
1547 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
1548 | else | |
1549 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
f0706e82 | 1550 | |
ab1faead | 1551 | if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1552 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
d9fe60de | 1553 | elems.ht_cap_elem, &sta->sta.ht_cap); |
ae5eb026 JB |
1554 | |
1555 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
f0706e82 | 1556 | |
4b7679a5 | 1557 | rate_control_rate_init(sta); |
f0706e82 | 1558 | |
46900298 | 1559 | if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) |
5394af4d JM |
1560 | set_sta_flags(sta, WLAN_STA_MFP); |
1561 | ||
ddf4ac53 | 1562 | if (elems.wmm_param) |
60f8b39c | 1563 | set_sta_flags(sta, WLAN_STA_WME); |
ddf4ac53 JB |
1564 | |
1565 | if (newsta) { | |
1566 | int err = sta_info_insert(sta); | |
1567 | if (err) { | |
1568 | printk(KERN_DEBUG "%s: failed to insert STA entry for" | |
1569 | " the AP (error %d)\n", sdata->dev->name, err); | |
1570 | rcu_read_unlock(); | |
77fdaa12 | 1571 | return RX_MGMT_NONE; |
ddf4ac53 JB |
1572 | } |
1573 | } | |
1574 | ||
1575 | rcu_read_unlock(); | |
1576 | ||
1577 | if (elems.wmm_param) | |
46900298 | 1578 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
60f8b39c | 1579 | elems.wmm_param_len); |
aa837e1d JB |
1580 | else |
1581 | ieee80211_set_wmm_default(sdata); | |
f0706e82 | 1582 | |
ae5eb026 | 1583 | if (elems.ht_info_elem && elems.wmm_param && |
46900298 | 1584 | (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
ab1faead | 1585 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1586 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
77fdaa12 | 1587 | wk->bss->cbss.bssid, |
ae5eb026 JB |
1588 | ap_ht_cap_flags); |
1589 | ||
056508dc JB |
1590 | /* delete work item -- must be before set_associated for PS */ |
1591 | list_del(&wk->list); | |
1592 | ||
60f8b39c JB |
1593 | /* set AID and assoc capability, |
1594 | * ieee80211_set_associated() will tell the driver */ | |
1595 | bss_conf->aid = aid; | |
1596 | bss_conf->assoc_capability = capab_info; | |
e21546a2 JB |
1597 | /* this will take ownership of wk */ |
1598 | ieee80211_set_associated(sdata, wk, changed); | |
f0706e82 | 1599 | |
15b7b062 | 1600 | /* |
b291ba11 JB |
1601 | * Start timer to probe the connection to the AP now. |
1602 | * Also start the timer that will detect beacon loss. | |
15b7b062 | 1603 | */ |
b291ba11 JB |
1604 | ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt); |
1605 | mod_beacon_timer(sdata); | |
15b7b062 | 1606 | |
77fdaa12 | 1607 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1608 | } |
1609 | ||
1610 | ||
98c8fccf JB |
1611 | static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata, |
1612 | struct ieee80211_mgmt *mgmt, | |
1613 | size_t len, | |
1614 | struct ieee80211_rx_status *rx_status, | |
1615 | struct ieee802_11_elems *elems, | |
1616 | bool beacon) | |
1617 | { | |
1618 | struct ieee80211_local *local = sdata->local; | |
1619 | int freq; | |
c2b13452 | 1620 | struct ieee80211_bss *bss; |
98c8fccf | 1621 | struct ieee80211_channel *channel; |
98c8fccf JB |
1622 | |
1623 | if (elems->ds_params && elems->ds_params_len == 1) | |
1624 | freq = ieee80211_channel_to_frequency(elems->ds_params[0]); | |
1625 | else | |
1626 | freq = rx_status->freq; | |
1627 | ||
1628 | channel = ieee80211_get_channel(local->hw.wiphy, freq); | |
1629 | ||
1630 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) | |
1631 | return; | |
1632 | ||
98c8fccf | 1633 | bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems, |
2a519311 | 1634 | channel, beacon); |
77fdaa12 JB |
1635 | if (bss) |
1636 | ieee80211_rx_bss_put(local, bss); | |
1637 | ||
1638 | if (!sdata->u.mgd.associated) | |
98c8fccf JB |
1639 | return; |
1640 | ||
c481ec97 | 1641 | if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) && |
77fdaa12 JB |
1642 | (memcmp(mgmt->bssid, sdata->u.mgd.associated->cbss.bssid, |
1643 | ETH_ALEN) == 0)) { | |
c481ec97 S |
1644 | struct ieee80211_channel_sw_ie *sw_elem = |
1645 | (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem; | |
cc32abd4 | 1646 | ieee80211_sta_process_chanswitch(sdata, sw_elem, bss); |
c481ec97 | 1647 | } |
f0706e82 JB |
1648 | } |
1649 | ||
1650 | ||
f698d856 | 1651 | static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata, |
77fdaa12 JB |
1652 | struct ieee80211_mgd_work *wk, |
1653 | struct ieee80211_mgmt *mgmt, size_t len, | |
f0706e82 JB |
1654 | struct ieee80211_rx_status *rx_status) |
1655 | { | |
15b7b062 | 1656 | struct ieee80211_if_managed *ifmgd; |
ae6a44e3 EK |
1657 | size_t baselen; |
1658 | struct ieee802_11_elems elems; | |
1659 | ||
15b7b062 KV |
1660 | ifmgd = &sdata->u.mgd; |
1661 | ||
77fdaa12 JB |
1662 | ASSERT_MGD_MTX(ifmgd); |
1663 | ||
8e7cdbb6 TW |
1664 | if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN)) |
1665 | return; /* ignore ProbeResp to foreign address */ | |
1666 | ||
ae6a44e3 EK |
1667 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; |
1668 | if (baselen > len) | |
1669 | return; | |
1670 | ||
1671 | ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen, | |
1672 | &elems); | |
1673 | ||
98c8fccf | 1674 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false); |
9859b81e RR |
1675 | |
1676 | /* direct probe may be part of the association flow */ | |
77fdaa12 | 1677 | if (wk && wk->state == IEEE80211_MGD_STATE_PROBE) { |
9859b81e RR |
1678 | printk(KERN_DEBUG "%s direct probe responded\n", |
1679 | sdata->dev->name); | |
77fdaa12 JB |
1680 | wk->tries = 0; |
1681 | wk->state = IEEE80211_MGD_STATE_AUTH; | |
1682 | WARN_ON(ieee80211_authenticate(sdata, wk) != RX_MGMT_NONE); | |
9859b81e | 1683 | } |
15b7b062 | 1684 | |
77fdaa12 JB |
1685 | if (ifmgd->associated && |
1686 | memcmp(mgmt->bssid, ifmgd->associated->cbss.bssid, ETH_ALEN) == 0 && | |
b291ba11 JB |
1687 | ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1688 | IEEE80211_STA_CONNECTION_POLL)) { | |
1689 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
1690 | IEEE80211_STA_BEACON_POLL); | |
4e751843 JB |
1691 | mutex_lock(&sdata->local->iflist_mtx); |
1692 | ieee80211_recalc_ps(sdata->local, -1); | |
1693 | mutex_unlock(&sdata->local->iflist_mtx); | |
b291ba11 JB |
1694 | /* |
1695 | * We've received a probe response, but are not sure whether | |
1696 | * we have or will be receiving any beacons or data, so let's | |
1697 | * schedule the timers again, just in case. | |
1698 | */ | |
1699 | mod_beacon_timer(sdata); | |
1700 | mod_timer(&ifmgd->conn_mon_timer, | |
1701 | round_jiffies_up(jiffies + | |
1702 | IEEE80211_CONNECTION_IDLE_TIME)); | |
4e751843 | 1703 | } |
f0706e82 JB |
1704 | } |
1705 | ||
d91f36db JB |
1706 | /* |
1707 | * This is the canonical list of information elements we care about, | |
1708 | * the filter code also gives us all changes to the Microsoft OUI | |
1709 | * (00:50:F2) vendor IE which is used for WMM which we need to track. | |
1710 | * | |
1711 | * We implement beacon filtering in software since that means we can | |
1712 | * avoid processing the frame here and in cfg80211, and userspace | |
1713 | * will not be able to tell whether the hardware supports it or not. | |
1714 | * | |
1715 | * XXX: This list needs to be dynamic -- userspace needs to be able to | |
1716 | * add items it requires. It also needs to be able to tell us to | |
1717 | * look out for other vendor IEs. | |
1718 | */ | |
1719 | static const u64 care_about_ies = | |
1d4df3a5 JB |
1720 | (1ULL << WLAN_EID_COUNTRY) | |
1721 | (1ULL << WLAN_EID_ERP_INFO) | | |
1722 | (1ULL << WLAN_EID_CHANNEL_SWITCH) | | |
1723 | (1ULL << WLAN_EID_PWR_CONSTRAINT) | | |
1724 | (1ULL << WLAN_EID_HT_CAPABILITY) | | |
1725 | (1ULL << WLAN_EID_HT_INFORMATION); | |
d91f36db | 1726 | |
f698d856 | 1727 | static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1728 | struct ieee80211_mgmt *mgmt, |
1729 | size_t len, | |
1730 | struct ieee80211_rx_status *rx_status) | |
1731 | { | |
d91f36db | 1732 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1733 | size_t baselen; |
1734 | struct ieee802_11_elems elems; | |
f698d856 | 1735 | struct ieee80211_local *local = sdata->local; |
471b3efd | 1736 | u32 changed = 0; |
d91f36db | 1737 | bool erp_valid, directed_tim = false; |
7a5158ef | 1738 | u8 erp_value = 0; |
d91f36db | 1739 | u32 ncrc; |
77fdaa12 JB |
1740 | u8 *bssid; |
1741 | ||
1742 | ASSERT_MGD_MTX(ifmgd); | |
f0706e82 | 1743 | |
ae6a44e3 EK |
1744 | /* Process beacon from the current BSS */ |
1745 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
1746 | if (baselen > len) | |
1747 | return; | |
1748 | ||
d91f36db | 1749 | if (rx_status->freq != local->hw.conf.channel->center_freq) |
f0706e82 | 1750 | return; |
f0706e82 | 1751 | |
b291ba11 JB |
1752 | /* |
1753 | * We might have received a number of frames, among them a | |
1754 | * disassoc frame and a beacon... | |
1755 | */ | |
1756 | if (!ifmgd->associated) | |
77fdaa12 JB |
1757 | return; |
1758 | ||
1759 | bssid = ifmgd->associated->cbss.bssid; | |
1760 | ||
b291ba11 JB |
1761 | /* |
1762 | * And in theory even frames from a different AP we were just | |
1763 | * associated to a split-second ago! | |
1764 | */ | |
1765 | if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0) | |
f0706e82 JB |
1766 | return; |
1767 | ||
b291ba11 | 1768 | if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) { |
92778180 JM |
1769 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1770 | if (net_ratelimit()) { | |
1771 | printk(KERN_DEBUG "%s: cancelling probereq poll due " | |
1772 | "to a received beacon\n", sdata->dev->name); | |
1773 | } | |
1774 | #endif | |
b291ba11 | 1775 | ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL; |
4e751843 JB |
1776 | mutex_lock(&local->iflist_mtx); |
1777 | ieee80211_recalc_ps(local, -1); | |
1778 | mutex_unlock(&local->iflist_mtx); | |
92778180 JM |
1779 | } |
1780 | ||
b291ba11 JB |
1781 | /* |
1782 | * Push the beacon loss detection into the future since | |
1783 | * we are processing a beacon from the AP just now. | |
1784 | */ | |
1785 | mod_beacon_timer(sdata); | |
1786 | ||
d91f36db JB |
1787 | ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4); |
1788 | ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable, | |
1789 | len - baselen, &elems, | |
1790 | care_about_ies, ncrc); | |
1791 | ||
1792 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
e7ec86f5 JB |
1793 | directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len, |
1794 | ifmgd->aid); | |
d91f36db | 1795 | |
30196673 JM |
1796 | if (ncrc != ifmgd->beacon_crc) { |
1797 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, | |
1798 | true); | |
d91f36db | 1799 | |
30196673 JM |
1800 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1801 | elems.wmm_param_len); | |
1802 | } | |
fe3fa827 | 1803 | |
25c9c875 | 1804 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) { |
1fb3606b | 1805 | if (directed_tim) { |
572e0012 KV |
1806 | if (local->hw.conf.dynamic_ps_timeout > 0) { |
1807 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1808 | ieee80211_hw_config(local, | |
1809 | IEEE80211_CONF_CHANGE_PS); | |
1810 | ieee80211_send_nullfunc(local, sdata, 0); | |
1811 | } else { | |
1812 | local->pspolling = true; | |
1813 | ||
1814 | /* | |
1815 | * Here is assumed that the driver will be | |
1816 | * able to send ps-poll frame and receive a | |
1817 | * response even though power save mode is | |
1818 | * enabled, but some drivers might require | |
1819 | * to disable power save here. This needs | |
1820 | * to be investigated. | |
1821 | */ | |
1822 | ieee80211_send_pspoll(local, sdata); | |
1823 | } | |
a97b77b9 VN |
1824 | } |
1825 | } | |
7a5158ef | 1826 | |
30196673 JM |
1827 | if (ncrc == ifmgd->beacon_crc) |
1828 | return; | |
1829 | ifmgd->beacon_crc = ncrc; | |
1830 | ||
7a5158ef JB |
1831 | if (elems.erp_info && elems.erp_info_len >= 1) { |
1832 | erp_valid = true; | |
1833 | erp_value = elems.erp_info[0]; | |
1834 | } else { | |
1835 | erp_valid = false; | |
50c4afb9 | 1836 | } |
7a5158ef JB |
1837 | changed |= ieee80211_handle_bss_capability(sdata, |
1838 | le16_to_cpu(mgmt->u.beacon.capab_info), | |
1839 | erp_valid, erp_value); | |
f0706e82 | 1840 | |
d3c990fb | 1841 | |
53d6f81c | 1842 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
ab1faead | 1843 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) { |
ae5eb026 JB |
1844 | struct sta_info *sta; |
1845 | struct ieee80211_supported_band *sband; | |
1846 | u16 ap_ht_cap_flags; | |
1847 | ||
1848 | rcu_read_lock(); | |
1849 | ||
77fdaa12 JB |
1850 | sta = sta_info_get(local, bssid); |
1851 | if (WARN_ON(!sta)) { | |
ae5eb026 JB |
1852 | rcu_read_unlock(); |
1853 | return; | |
1854 | } | |
1855 | ||
1856 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
1857 | ||
1858 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, | |
1859 | elems.ht_cap_elem, &sta->sta.ht_cap); | |
1860 | ||
1861 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
1862 | ||
1863 | rcu_read_unlock(); | |
1864 | ||
1865 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, | |
77fdaa12 | 1866 | bssid, ap_ht_cap_flags); |
d3c990fb RR |
1867 | } |
1868 | ||
8b19e6ca | 1869 | /* Note: country IE parsing is done for us by cfg80211 */ |
3f2355cb | 1870 | if (elems.country_elem) { |
a8302de9 VT |
1871 | /* TODO: IBSS also needs this */ |
1872 | if (elems.pwr_constr_elem) | |
1873 | ieee80211_handle_pwr_constr(sdata, | |
1874 | le16_to_cpu(mgmt->u.probe_resp.capab_info), | |
1875 | elems.pwr_constr_elem, | |
1876 | elems.pwr_constr_elem_len); | |
3f2355cb LR |
1877 | } |
1878 | ||
471b3efd | 1879 | ieee80211_bss_info_change_notify(sdata, changed); |
f0706e82 JB |
1880 | } |
1881 | ||
46900298 | 1882 | ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, |
f1d58c25 | 1883 | struct sk_buff *skb) |
f0706e82 | 1884 | { |
f698d856 | 1885 | struct ieee80211_local *local = sdata->local; |
f0706e82 JB |
1886 | struct ieee80211_mgmt *mgmt; |
1887 | u16 fc; | |
1888 | ||
1889 | if (skb->len < 24) | |
46900298 | 1890 | return RX_DROP_MONITOR; |
f0706e82 JB |
1891 | |
1892 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1893 | fc = le16_to_cpu(mgmt->frame_control); | |
1894 | ||
1895 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1896 | case IEEE80211_STYPE_PROBE_REQ: | |
1897 | case IEEE80211_STYPE_PROBE_RESP: | |
1898 | case IEEE80211_STYPE_BEACON: | |
f0706e82 JB |
1899 | case IEEE80211_STYPE_AUTH: |
1900 | case IEEE80211_STYPE_ASSOC_RESP: | |
1901 | case IEEE80211_STYPE_REASSOC_RESP: | |
1902 | case IEEE80211_STYPE_DEAUTH: | |
1903 | case IEEE80211_STYPE_DISASSOC: | |
77fdaa12 | 1904 | case IEEE80211_STYPE_ACTION: |
46900298 | 1905 | skb_queue_tail(&sdata->u.mgd.skb_queue, skb); |
42935eca | 1906 | ieee80211_queue_work(&local->hw, &sdata->u.mgd.work); |
46900298 | 1907 | return RX_QUEUED; |
f0706e82 JB |
1908 | } |
1909 | ||
46900298 | 1910 | return RX_DROP_MONITOR; |
f0706e82 JB |
1911 | } |
1912 | ||
f698d856 | 1913 | static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1914 | struct sk_buff *skb) |
1915 | { | |
77fdaa12 | 1916 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 | 1917 | struct ieee80211_rx_status *rx_status; |
f0706e82 | 1918 | struct ieee80211_mgmt *mgmt; |
77fdaa12 JB |
1919 | struct ieee80211_mgd_work *wk; |
1920 | enum rx_mgmt_action rma = RX_MGMT_NONE; | |
f0706e82 JB |
1921 | u16 fc; |
1922 | ||
f0706e82 JB |
1923 | rx_status = (struct ieee80211_rx_status *) skb->cb; |
1924 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1925 | fc = le16_to_cpu(mgmt->frame_control); | |
1926 | ||
77fdaa12 JB |
1927 | mutex_lock(&ifmgd->mtx); |
1928 | ||
1929 | if (ifmgd->associated && | |
1930 | memcmp(ifmgd->associated->cbss.bssid, mgmt->bssid, | |
1931 | ETH_ALEN) == 0) { | |
1932 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1933 | case IEEE80211_STYPE_BEACON: | |
1934 | ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, | |
1935 | rx_status); | |
1936 | break; | |
1937 | case IEEE80211_STYPE_PROBE_RESP: | |
1938 | ieee80211_rx_mgmt_probe_resp(sdata, NULL, mgmt, | |
1939 | skb->len, rx_status); | |
1940 | break; | |
1941 | case IEEE80211_STYPE_DEAUTH: | |
1942 | rma = ieee80211_rx_mgmt_deauth(sdata, NULL, | |
1943 | mgmt, skb->len); | |
1944 | break; | |
1945 | case IEEE80211_STYPE_DISASSOC: | |
1946 | rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); | |
1947 | break; | |
1948 | case IEEE80211_STYPE_ACTION: | |
1949 | /* XXX: differentiate, can only happen for CSA now! */ | |
1950 | ieee80211_sta_process_chanswitch(sdata, | |
1951 | &mgmt->u.action.u.chan_switch.sw_elem, | |
1952 | ifmgd->associated); | |
1953 | break; | |
1954 | } | |
1955 | mutex_unlock(&ifmgd->mtx); | |
1956 | ||
1957 | switch (rma) { | |
1958 | case RX_MGMT_NONE: | |
1959 | /* no action */ | |
1960 | break; | |
1961 | case RX_MGMT_CFG80211_DEAUTH: | |
667503dd JB |
1962 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, |
1963 | NULL); | |
77fdaa12 JB |
1964 | break; |
1965 | case RX_MGMT_CFG80211_DISASSOC: | |
667503dd JB |
1966 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len, |
1967 | NULL); | |
77fdaa12 JB |
1968 | break; |
1969 | default: | |
1970 | WARN(1, "unexpected: %d", rma); | |
1971 | } | |
1972 | goto out; | |
1973 | } | |
1974 | ||
1975 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
1976 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) | |
1977 | continue; | |
1978 | ||
1979 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1980 | case IEEE80211_STYPE_PROBE_RESP: | |
1981 | ieee80211_rx_mgmt_probe_resp(sdata, wk, mgmt, skb->len, | |
1982 | rx_status); | |
1983 | break; | |
1984 | case IEEE80211_STYPE_AUTH: | |
1985 | rma = ieee80211_rx_mgmt_auth(sdata, wk, mgmt, skb->len); | |
1986 | break; | |
1987 | case IEEE80211_STYPE_ASSOC_RESP: | |
1988 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
1989 | skb->len, false); | |
1990 | break; | |
1991 | case IEEE80211_STYPE_REASSOC_RESP: | |
1992 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
1993 | skb->len, true); | |
1994 | break; | |
1995 | case IEEE80211_STYPE_DEAUTH: | |
1996 | rma = ieee80211_rx_mgmt_deauth(sdata, wk, mgmt, | |
1997 | skb->len); | |
1998 | break; | |
1999 | } | |
2000 | /* | |
2001 | * We've processed this frame for that work, so it can't | |
2002 | * belong to another work struct. | |
2003 | * NB: this is also required for correctness because the | |
2004 | * called functions can free 'wk', and for 'rma'! | |
2005 | */ | |
46900298 | 2006 | break; |
77fdaa12 JB |
2007 | } |
2008 | ||
2009 | mutex_unlock(&ifmgd->mtx); | |
2010 | ||
2011 | switch (rma) { | |
2012 | case RX_MGMT_NONE: | |
2013 | /* no action */ | |
46900298 | 2014 | break; |
77fdaa12 | 2015 | case RX_MGMT_CFG80211_AUTH: |
cb0b4beb | 2016 | cfg80211_send_rx_auth(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2017 | break; |
77fdaa12 | 2018 | case RX_MGMT_CFG80211_ASSOC: |
cb0b4beb | 2019 | cfg80211_send_rx_assoc(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2020 | break; |
8d8b261a JB |
2021 | case RX_MGMT_CFG80211_DEAUTH: |
2022 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, NULL); | |
2023 | break; | |
77fdaa12 JB |
2024 | default: |
2025 | WARN(1, "unexpected: %d", rma); | |
f0706e82 JB |
2026 | } |
2027 | ||
77fdaa12 | 2028 | out: |
f0706e82 JB |
2029 | kfree_skb(skb); |
2030 | } | |
2031 | ||
9c6bd790 | 2032 | static void ieee80211_sta_timer(unsigned long data) |
f0706e82 | 2033 | { |
60f8b39c JB |
2034 | struct ieee80211_sub_if_data *sdata = |
2035 | (struct ieee80211_sub_if_data *) data; | |
46900298 | 2036 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
60f8b39c | 2037 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 2038 | |
5bb644a0 JB |
2039 | if (local->quiescing) { |
2040 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2041 | return; | |
2042 | } | |
2043 | ||
42935eca | 2044 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
f0706e82 JB |
2045 | } |
2046 | ||
9c6bd790 JB |
2047 | static void ieee80211_sta_work(struct work_struct *work) |
2048 | { | |
2049 | struct ieee80211_sub_if_data *sdata = | |
46900298 | 2050 | container_of(work, struct ieee80211_sub_if_data, u.mgd.work); |
9c6bd790 | 2051 | struct ieee80211_local *local = sdata->local; |
46900298 | 2052 | struct ieee80211_if_managed *ifmgd; |
9c6bd790 | 2053 | struct sk_buff *skb; |
77fdaa12 JB |
2054 | struct ieee80211_mgd_work *wk, *tmp; |
2055 | LIST_HEAD(free_work); | |
2056 | enum rx_mgmt_action rma; | |
2057 | bool anybusy = false; | |
9c6bd790 JB |
2058 | |
2059 | if (!netif_running(sdata->dev)) | |
2060 | return; | |
2061 | ||
fbe9c429 | 2062 | if (local->scanning) |
9c6bd790 JB |
2063 | return; |
2064 | ||
46900298 | 2065 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
9c6bd790 | 2066 | return; |
5bb644a0 JB |
2067 | |
2068 | /* | |
42935eca LR |
2069 | * ieee80211_queue_work() should have picked up most cases, |
2070 | * here we'll pick the the rest. | |
5bb644a0 | 2071 | */ |
42935eca LR |
2072 | if (WARN(local->suspended, "STA MLME work scheduled while " |
2073 | "going to suspend\n")) | |
5bb644a0 JB |
2074 | return; |
2075 | ||
46900298 | 2076 | ifmgd = &sdata->u.mgd; |
f0706e82 | 2077 | |
77fdaa12 | 2078 | /* first process frames to avoid timing out while a frame is pending */ |
46900298 | 2079 | while ((skb = skb_dequeue(&ifmgd->skb_queue))) |
9c6bd790 JB |
2080 | ieee80211_sta_rx_queued_mgmt(sdata, skb); |
2081 | ||
77fdaa12 JB |
2082 | /* then process the rest of the work */ |
2083 | mutex_lock(&ifmgd->mtx); | |
2084 | ||
b291ba11 JB |
2085 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
2086 | IEEE80211_STA_CONNECTION_POLL) && | |
2087 | ifmgd->associated) { | |
a43abf29 ML |
2088 | u8 bssid[ETH_ALEN]; |
2089 | ||
2090 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
b291ba11 JB |
2091 | if (time_is_after_jiffies(ifmgd->probe_timeout)) |
2092 | run_again(ifmgd, ifmgd->probe_timeout); | |
a43abf29 ML |
2093 | |
2094 | else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) { | |
2095 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
2096 | printk(KERN_DEBUG "No probe response from AP %pM" | |
2097 | " after %dms, try %d\n", bssid, | |
2098 | (1000 * IEEE80211_PROBE_WAIT)/HZ, | |
2099 | ifmgd->probe_send_count); | |
2100 | #endif | |
2101 | ieee80211_mgd_probe_ap_send(sdata); | |
2102 | } else { | |
b291ba11 JB |
2103 | /* |
2104 | * We actually lost the connection ... or did we? | |
2105 | * Let's make sure! | |
2106 | */ | |
2107 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
2108 | IEEE80211_STA_BEACON_POLL); | |
b291ba11 JB |
2109 | printk(KERN_DEBUG "No probe response from AP %pM" |
2110 | " after %dms, disconnecting.\n", | |
2111 | bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ); | |
e21546a2 | 2112 | ieee80211_set_disassoc(sdata, true); |
b291ba11 JB |
2113 | mutex_unlock(&ifmgd->mtx); |
2114 | /* | |
2115 | * must be outside lock due to cfg80211, | |
2116 | * but that's not a problem. | |
2117 | */ | |
2118 | ieee80211_send_deauth_disassoc(sdata, bssid, | |
2119 | IEEE80211_STYPE_DEAUTH, | |
2120 | WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY, | |
2121 | NULL); | |
2122 | mutex_lock(&ifmgd->mtx); | |
2123 | } | |
2124 | } | |
2125 | ||
77fdaa12 JB |
2126 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2127 | if (wk->state != IEEE80211_MGD_STATE_IDLE) { | |
2128 | anybusy = true; | |
2129 | break; | |
2130 | } | |
f0706e82 JB |
2131 | } |
2132 | ||
77fdaa12 JB |
2133 | ieee80211_recalc_idle(local); |
2134 | ||
2135 | if (!anybusy) { | |
2136 | mutex_unlock(&ifmgd->mtx); | |
2137 | ||
2138 | if (test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifmgd->request)) | |
42935eca LR |
2139 | ieee80211_queue_delayed_work(&local->hw, |
2140 | &local->scan_work, | |
2141 | round_jiffies_relative(0)); | |
9c6bd790 | 2142 | return; |
77fdaa12 | 2143 | } |
d6f2da5b | 2144 | |
77fdaa12 | 2145 | list_for_each_entry_safe(wk, tmp, &ifmgd->work_list, list) { |
ca386f31 JB |
2146 | if (time_is_after_jiffies(wk->timeout)) { |
2147 | /* | |
2148 | * This work item isn't supposed to be worked on | |
2149 | * right now, but take care to adjust the timer | |
2150 | * properly. | |
2151 | */ | |
2152 | run_again(ifmgd, wk->timeout); | |
77fdaa12 | 2153 | continue; |
ca386f31 | 2154 | } |
5cff20e6 | 2155 | |
77fdaa12 JB |
2156 | switch (wk->state) { |
2157 | default: | |
2158 | WARN_ON(1); | |
2159 | /* fall through */ | |
2160 | case IEEE80211_MGD_STATE_IDLE: | |
2161 | /* nothing */ | |
2162 | rma = RX_MGMT_NONE; | |
2163 | break; | |
2164 | case IEEE80211_MGD_STATE_PROBE: | |
2165 | rma = ieee80211_direct_probe(sdata, wk); | |
2166 | break; | |
2167 | case IEEE80211_MGD_STATE_AUTH: | |
2168 | rma = ieee80211_authenticate(sdata, wk); | |
2169 | break; | |
2170 | case IEEE80211_MGD_STATE_ASSOC: | |
2171 | rma = ieee80211_associate(sdata, wk); | |
2172 | break; | |
2173 | } | |
2174 | ||
2175 | switch (rma) { | |
2176 | case RX_MGMT_NONE: | |
2177 | /* no action required */ | |
2178 | break; | |
2179 | case RX_MGMT_CFG80211_AUTH_TO: | |
2180 | case RX_MGMT_CFG80211_ASSOC_TO: | |
2181 | list_del(&wk->list); | |
2182 | list_add(&wk->list, &free_work); | |
2183 | wk->tries = rma; /* small abuse but only local */ | |
2184 | break; | |
2185 | default: | |
2186 | WARN(1, "unexpected: %d", rma); | |
2187 | } | |
2188 | } | |
2189 | ||
2190 | mutex_unlock(&ifmgd->mtx); | |
2191 | ||
2192 | list_for_each_entry_safe(wk, tmp, &free_work, list) { | |
2193 | switch (wk->tries) { | |
2194 | case RX_MGMT_CFG80211_AUTH_TO: | |
2195 | cfg80211_send_auth_timeout(sdata->dev, | |
cb0b4beb | 2196 | wk->bss->cbss.bssid); |
77fdaa12 JB |
2197 | break; |
2198 | case RX_MGMT_CFG80211_ASSOC_TO: | |
cb0b4beb JB |
2199 | cfg80211_send_assoc_timeout(sdata->dev, |
2200 | wk->bss->cbss.bssid); | |
77fdaa12 JB |
2201 | break; |
2202 | default: | |
2203 | WARN(1, "unexpected: %d", wk->tries); | |
2204 | } | |
2205 | ||
2206 | list_del(&wk->list); | |
2207 | kfree(wk); | |
9c6bd790 | 2208 | } |
77fdaa12 JB |
2209 | |
2210 | ieee80211_recalc_idle(local); | |
f0706e82 JB |
2211 | } |
2212 | ||
b291ba11 JB |
2213 | static void ieee80211_sta_bcn_mon_timer(unsigned long data) |
2214 | { | |
2215 | struct ieee80211_sub_if_data *sdata = | |
2216 | (struct ieee80211_sub_if_data *) data; | |
2217 | struct ieee80211_local *local = sdata->local; | |
2218 | ||
2219 | if (local->quiescing) | |
2220 | return; | |
2221 | ||
42935eca | 2222 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
b291ba11 JB |
2223 | } |
2224 | ||
2225 | static void ieee80211_sta_conn_mon_timer(unsigned long data) | |
2226 | { | |
2227 | struct ieee80211_sub_if_data *sdata = | |
2228 | (struct ieee80211_sub_if_data *) data; | |
2229 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2230 | struct ieee80211_local *local = sdata->local; | |
2231 | ||
2232 | if (local->quiescing) | |
2233 | return; | |
2234 | ||
42935eca | 2235 | ieee80211_queue_work(&local->hw, &ifmgd->monitor_work); |
b291ba11 JB |
2236 | } |
2237 | ||
2238 | static void ieee80211_sta_monitor_work(struct work_struct *work) | |
2239 | { | |
2240 | struct ieee80211_sub_if_data *sdata = | |
2241 | container_of(work, struct ieee80211_sub_if_data, | |
2242 | u.mgd.monitor_work); | |
2243 | ||
2244 | ieee80211_mgd_probe_ap(sdata, false); | |
2245 | } | |
2246 | ||
9c6bd790 JB |
2247 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
2248 | { | |
ad935687 | 2249 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
b291ba11 JB |
2250 | sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL | |
2251 | IEEE80211_STA_CONNECTION_POLL); | |
ad935687 | 2252 | |
b291ba11 | 2253 | /* let's probe the connection once */ |
42935eca | 2254 | ieee80211_queue_work(&sdata->local->hw, |
b291ba11 JB |
2255 | &sdata->u.mgd.monitor_work); |
2256 | /* and do all the other regular work too */ | |
42935eca | 2257 | ieee80211_queue_work(&sdata->local->hw, |
46900298 | 2258 | &sdata->u.mgd.work); |
ad935687 | 2259 | } |
9c6bd790 | 2260 | } |
f0706e82 | 2261 | |
5bb644a0 JB |
2262 | #ifdef CONFIG_PM |
2263 | void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata) | |
2264 | { | |
2265 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2266 | ||
2267 | /* | |
2268 | * we need to use atomic bitops for the running bits | |
2269 | * only because both timers might fire at the same | |
2270 | * time -- the code here is properly synchronised. | |
2271 | */ | |
2272 | ||
2273 | cancel_work_sync(&ifmgd->work); | |
2274 | cancel_work_sync(&ifmgd->beacon_loss_work); | |
2275 | if (del_timer_sync(&ifmgd->timer)) | |
2276 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2277 | ||
2278 | cancel_work_sync(&ifmgd->chswitch_work); | |
2279 | if (del_timer_sync(&ifmgd->chswitch_timer)) | |
2280 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
b291ba11 JB |
2281 | |
2282 | cancel_work_sync(&ifmgd->monitor_work); | |
2283 | /* these will just be re-established on connection */ | |
2284 | del_timer_sync(&ifmgd->conn_mon_timer); | |
2285 | del_timer_sync(&ifmgd->bcn_mon_timer); | |
5bb644a0 JB |
2286 | } |
2287 | ||
2288 | void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata) | |
2289 | { | |
2290 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2291 | ||
2292 | if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running)) | |
2293 | add_timer(&ifmgd->timer); | |
2294 | if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running)) | |
2295 | add_timer(&ifmgd->chswitch_timer); | |
2296 | } | |
2297 | #endif | |
2298 | ||
9c6bd790 JB |
2299 | /* interface setup */ |
2300 | void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata) | |
f0706e82 | 2301 | { |
46900298 | 2302 | struct ieee80211_if_managed *ifmgd; |
988c0f72 | 2303 | |
46900298 JB |
2304 | ifmgd = &sdata->u.mgd; |
2305 | INIT_WORK(&ifmgd->work, ieee80211_sta_work); | |
b291ba11 | 2306 | INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work); |
46900298 | 2307 | INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work); |
04de8381 | 2308 | INIT_WORK(&ifmgd->beacon_loss_work, ieee80211_beacon_loss_work); |
46900298 | 2309 | setup_timer(&ifmgd->timer, ieee80211_sta_timer, |
c481ec97 | 2310 | (unsigned long) sdata); |
b291ba11 JB |
2311 | setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer, |
2312 | (unsigned long) sdata); | |
2313 | setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer, | |
2314 | (unsigned long) sdata); | |
46900298 | 2315 | setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer, |
9c6bd790 | 2316 | (unsigned long) sdata); |
46900298 | 2317 | skb_queue_head_init(&ifmgd->skb_queue); |
9c6bd790 | 2318 | |
77fdaa12 JB |
2319 | INIT_LIST_HEAD(&ifmgd->work_list); |
2320 | ||
46900298 | 2321 | ifmgd->capab = WLAN_CAPABILITY_ESS; |
ab1faead | 2322 | ifmgd->flags = 0; |
176be728 | 2323 | if (sdata->local->hw.queues >= 4) |
46900298 | 2324 | ifmgd->flags |= IEEE80211_STA_WMM_ENABLED; |
bbbdff9e | 2325 | |
77fdaa12 | 2326 | mutex_init(&ifmgd->mtx); |
f0706e82 JB |
2327 | } |
2328 | ||
77fdaa12 JB |
2329 | /* scan finished notification */ |
2330 | void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local) | |
60f8b39c | 2331 | { |
77fdaa12 | 2332 | struct ieee80211_sub_if_data *sdata = local->scan_sdata; |
60f8b39c | 2333 | |
77fdaa12 JB |
2334 | /* Restart STA timers */ |
2335 | rcu_read_lock(); | |
2336 | list_for_each_entry_rcu(sdata, &local->interfaces, list) | |
2337 | ieee80211_restart_sta_timer(sdata); | |
2338 | rcu_read_unlock(); | |
2339 | } | |
60f8b39c | 2340 | |
77fdaa12 JB |
2341 | int ieee80211_max_network_latency(struct notifier_block *nb, |
2342 | unsigned long data, void *dummy) | |
2343 | { | |
2344 | s32 latency_usec = (s32) data; | |
2345 | struct ieee80211_local *local = | |
2346 | container_of(nb, struct ieee80211_local, | |
2347 | network_latency_notifier); | |
1fa6f4af | 2348 | |
77fdaa12 JB |
2349 | mutex_lock(&local->iflist_mtx); |
2350 | ieee80211_recalc_ps(local, latency_usec); | |
2351 | mutex_unlock(&local->iflist_mtx); | |
dfe67012 | 2352 | |
77fdaa12 | 2353 | return 0; |
9c6bd790 JB |
2354 | } |
2355 | ||
77fdaa12 JB |
2356 | /* config hooks */ |
2357 | int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata, | |
2358 | struct cfg80211_auth_request *req) | |
9c6bd790 | 2359 | { |
46900298 | 2360 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2361 | const u8 *ssid; |
2362 | struct ieee80211_mgd_work *wk; | |
2363 | u16 auth_alg; | |
9c6bd790 | 2364 | |
77fdaa12 JB |
2365 | switch (req->auth_type) { |
2366 | case NL80211_AUTHTYPE_OPEN_SYSTEM: | |
2367 | auth_alg = WLAN_AUTH_OPEN; | |
2368 | break; | |
2369 | case NL80211_AUTHTYPE_SHARED_KEY: | |
2370 | auth_alg = WLAN_AUTH_SHARED_KEY; | |
2371 | break; | |
2372 | case NL80211_AUTHTYPE_FT: | |
2373 | auth_alg = WLAN_AUTH_FT; | |
2374 | break; | |
2375 | case NL80211_AUTHTYPE_NETWORK_EAP: | |
2376 | auth_alg = WLAN_AUTH_LEAP; | |
2377 | break; | |
2378 | default: | |
2379 | return -EOPNOTSUPP; | |
60f8b39c | 2380 | } |
77fdaa12 JB |
2381 | |
2382 | wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2383 | if (!wk) | |
9c6bd790 | 2384 | return -ENOMEM; |
77fdaa12 JB |
2385 | |
2386 | wk->bss = (void *)req->bss; | |
2387 | ||
2388 | if (req->ie && req->ie_len) { | |
2389 | memcpy(wk->ie, req->ie, req->ie_len); | |
2390 | wk->ie_len = req->ie_len; | |
9c6bd790 | 2391 | } |
77fdaa12 | 2392 | |
fffd0934 JB |
2393 | if (req->key && req->key_len) { |
2394 | wk->key_len = req->key_len; | |
2395 | wk->key_idx = req->key_idx; | |
2396 | memcpy(wk->key, req->key, req->key_len); | |
2397 | } | |
2398 | ||
77fdaa12 JB |
2399 | ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID); |
2400 | memcpy(wk->ssid, ssid + 2, ssid[1]); | |
2401 | wk->ssid_len = ssid[1]; | |
2402 | ||
2403 | wk->state = IEEE80211_MGD_STATE_PROBE; | |
2404 | wk->auth_alg = auth_alg; | |
48531847 | 2405 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2406 | |
2407 | /* | |
2408 | * XXX: if still associated need to tell AP that we're going | |
2409 | * to sleep and then change channel etc. | |
2410 | */ | |
2411 | sdata->local->oper_channel = req->bss->channel; | |
2412 | ieee80211_hw_config(sdata->local, 0); | |
2413 | ||
2414 | mutex_lock(&ifmgd->mtx); | |
2415 | list_add(&wk->list, &sdata->u.mgd.work_list); | |
2416 | mutex_unlock(&ifmgd->mtx); | |
2417 | ||
42935eca | 2418 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
9c6bd790 | 2419 | return 0; |
60f8b39c JB |
2420 | } |
2421 | ||
77fdaa12 JB |
2422 | int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata, |
2423 | struct cfg80211_assoc_request *req) | |
f0706e82 | 2424 | { |
77fdaa12 JB |
2425 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2426 | struct ieee80211_mgd_work *wk, *found = NULL; | |
2427 | int i, err; | |
f0706e82 | 2428 | |
77fdaa12 JB |
2429 | mutex_lock(&ifmgd->mtx); |
2430 | ||
2431 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
2432 | if (&wk->bss->cbss == req->bss && | |
2433 | wk->state == IEEE80211_MGD_STATE_IDLE) { | |
2434 | found = wk; | |
2435 | break; | |
2436 | } | |
2437 | } | |
2438 | ||
2439 | if (!found) { | |
2440 | err = -ENOLINK; | |
2441 | goto out; | |
2442 | } | |
2443 | ||
2444 | list_del(&found->list); | |
2445 | ||
2446 | wk = krealloc(found, sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2447 | if (!wk) { | |
2448 | list_add(&found->list, &ifmgd->work_list); | |
2449 | err = -ENOMEM; | |
2450 | goto out; | |
2451 | } | |
2452 | ||
2453 | list_add(&wk->list, &ifmgd->work_list); | |
2454 | ||
2455 | ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N; | |
2456 | ||
2457 | for (i = 0; i < req->crypto.n_ciphers_pairwise; i++) | |
2458 | if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 || | |
2459 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP || | |
2460 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104) | |
2461 | ifmgd->flags |= IEEE80211_STA_DISABLE_11N; | |
2462 | ||
2463 | sdata->local->oper_channel = req->bss->channel; | |
2464 | ieee80211_hw_config(sdata->local, 0); | |
2465 | ||
2466 | if (req->ie && req->ie_len) { | |
2467 | memcpy(wk->ie, req->ie, req->ie_len); | |
2468 | wk->ie_len = req->ie_len; | |
2469 | } else | |
2470 | wk->ie_len = 0; | |
2471 | ||
2472 | if (req->prev_bssid) | |
2473 | memcpy(wk->prev_bssid, req->prev_bssid, ETH_ALEN); | |
2474 | ||
2475 | wk->state = IEEE80211_MGD_STATE_ASSOC; | |
2476 | wk->tries = 0; | |
48531847 | 2477 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2478 | |
2479 | if (req->use_mfp) { | |
2480 | ifmgd->mfp = IEEE80211_MFP_REQUIRED; | |
2481 | ifmgd->flags |= IEEE80211_STA_MFP_ENABLED; | |
2482 | } else { | |
2483 | ifmgd->mfp = IEEE80211_MFP_DISABLED; | |
2484 | ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED; | |
2485 | } | |
2486 | ||
2487 | if (req->crypto.control_port) | |
2488 | ifmgd->flags |= IEEE80211_STA_CONTROL_PORT; | |
2489 | else | |
2490 | ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT; | |
2491 | ||
42935eca | 2492 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
77fdaa12 JB |
2493 | |
2494 | err = 0; | |
2495 | ||
2496 | out: | |
2497 | mutex_unlock(&ifmgd->mtx); | |
2498 | return err; | |
f0706e82 JB |
2499 | } |
2500 | ||
77fdaa12 | 2501 | int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2502 | struct cfg80211_deauth_request *req, |
2503 | void *cookie) | |
f0706e82 | 2504 | { |
46900298 | 2505 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2506 | struct ieee80211_mgd_work *wk; |
2507 | const u8 *bssid = NULL; | |
f0706e82 | 2508 | |
77fdaa12 JB |
2509 | printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n", |
2510 | sdata->dev->name, req->reason_code); | |
2511 | ||
2512 | mutex_lock(&ifmgd->mtx); | |
2513 | ||
2514 | if (ifmgd->associated && &ifmgd->associated->cbss == req->bss) { | |
2515 | bssid = req->bss->bssid; | |
e21546a2 | 2516 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
2517 | } else list_for_each_entry(wk, &ifmgd->work_list, list) { |
2518 | if (&wk->bss->cbss == req->bss) { | |
2519 | bssid = req->bss->bssid; | |
2520 | list_del(&wk->list); | |
2521 | kfree(wk); | |
2522 | break; | |
2523 | } | |
2524 | } | |
f0706e82 | 2525 | |
8d8b261a JB |
2526 | /* |
2527 | * cfg80211 should catch this ... but it's racy since | |
2528 | * we can receive a deauth frame, process it, hand it | |
2529 | * to cfg80211 while that's in a locked section already | |
2530 | * trying to tell us that the user wants to disconnect. | |
2531 | */ | |
2532 | if (!bssid) { | |
77fdaa12 | 2533 | mutex_unlock(&ifmgd->mtx); |
46900298 | 2534 | return -ENOLINK; |
77fdaa12 JB |
2535 | } |
2536 | ||
2537 | mutex_unlock(&ifmgd->mtx); | |
2538 | ||
2539 | ieee80211_send_deauth_disassoc(sdata, bssid, | |
667503dd JB |
2540 | IEEE80211_STYPE_DEAUTH, req->reason_code, |
2541 | cookie); | |
f0706e82 | 2542 | |
f0706e82 JB |
2543 | return 0; |
2544 | } | |
84363e6e | 2545 | |
77fdaa12 | 2546 | int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2547 | struct cfg80211_disassoc_request *req, |
2548 | void *cookie) | |
9c6bd790 | 2549 | { |
77fdaa12 | 2550 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9c6bd790 | 2551 | |
77fdaa12 JB |
2552 | printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n", |
2553 | sdata->dev->name, req->reason_code); | |
10f644a4 | 2554 | |
77fdaa12 | 2555 | mutex_lock(&ifmgd->mtx); |
10f644a4 | 2556 | |
8d8b261a JB |
2557 | /* |
2558 | * cfg80211 should catch this ... but it's racy since | |
2559 | * we can receive a disassoc frame, process it, hand it | |
2560 | * to cfg80211 while that's in a locked section already | |
2561 | * trying to tell us that the user wants to disconnect. | |
2562 | */ | |
2563 | if (&ifmgd->associated->cbss != req->bss) { | |
77fdaa12 JB |
2564 | mutex_unlock(&ifmgd->mtx); |
2565 | return -ENOLINK; | |
2566 | } | |
2567 | ||
e21546a2 | 2568 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 JB |
2569 | |
2570 | mutex_unlock(&ifmgd->mtx); | |
10f644a4 | 2571 | |
77fdaa12 | 2572 | ieee80211_send_deauth_disassoc(sdata, req->bss->bssid, |
667503dd JB |
2573 | IEEE80211_STYPE_DISASSOC, req->reason_code, |
2574 | cookie); | |
10f644a4 JB |
2575 | return 0; |
2576 | } |