]>
Commit | Line | Data |
---|---|---|
6039f6d2 JM |
1 | /* |
2 | * cfg80211 MLME SAP interface | |
3 | * | |
4 | * Copyright (c) 2009, Jouni Malinen <j@w1.fi> | |
5 | */ | |
6 | ||
7 | #include <linux/kernel.h> | |
8 | #include <linux/module.h> | |
9 | #include <linux/netdevice.h> | |
10 | #include <linux/nl80211.h> | |
5a0e3ad6 | 11 | #include <linux/slab.h> |
a9a11622 | 12 | #include <linux/wireless.h> |
6039f6d2 | 13 | #include <net/cfg80211.h> |
a9a11622 | 14 | #include <net/iw_handler.h> |
6039f6d2 JM |
15 | #include "core.h" |
16 | #include "nl80211.h" | |
17 | ||
cb0b4beb | 18 | void cfg80211_send_rx_auth(struct net_device *dev, const u8 *buf, size_t len) |
6039f6d2 | 19 | { |
19957bb3 JB |
20 | struct wireless_dev *wdev = dev->ieee80211_ptr; |
21 | struct wiphy *wiphy = wdev->wiphy; | |
6039f6d2 | 22 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); |
19957bb3 JB |
23 | struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; |
24 | u8 *bssid = mgmt->bssid; | |
25 | int i; | |
26 | u16 status = le16_to_cpu(mgmt->u.auth.status_code); | |
27 | bool done = false; | |
28 | ||
667503dd | 29 | wdev_lock(wdev); |
cb0b4beb | 30 | |
19957bb3 JB |
31 | for (i = 0; i < MAX_AUTH_BSSES; i++) { |
32 | if (wdev->authtry_bsses[i] && | |
33 | memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid, | |
34 | ETH_ALEN) == 0) { | |
35 | if (status == WLAN_STATUS_SUCCESS) { | |
36 | wdev->auth_bsses[i] = wdev->authtry_bsses[i]; | |
37 | } else { | |
38 | cfg80211_unhold_bss(wdev->authtry_bsses[i]); | |
39 | cfg80211_put_bss(&wdev->authtry_bsses[i]->pub); | |
40 | } | |
41 | wdev->authtry_bsses[i] = NULL; | |
42 | done = true; | |
43 | break; | |
44 | } | |
45 | } | |
46 | ||
643f82e3 JB |
47 | if (done) { |
48 | nl80211_send_rx_auth(rdev, dev, buf, len, GFP_KERNEL); | |
49 | cfg80211_sme_rx_auth(dev, buf, len); | |
50 | } | |
667503dd JB |
51 | |
52 | wdev_unlock(wdev); | |
6039f6d2 JM |
53 | } |
54 | EXPORT_SYMBOL(cfg80211_send_rx_auth); | |
55 | ||
cb0b4beb | 56 | void cfg80211_send_rx_assoc(struct net_device *dev, const u8 *buf, size_t len) |
6039f6d2 | 57 | { |
6829c878 JB |
58 | u16 status_code; |
59 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
60 | struct wiphy *wiphy = wdev->wiphy; | |
6039f6d2 | 61 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); |
6829c878 JB |
62 | struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; |
63 | u8 *ie = mgmt->u.assoc_resp.variable; | |
19957bb3 | 64 | int i, ieoffs = offsetof(struct ieee80211_mgmt, u.assoc_resp.variable); |
df7fc0f9 | 65 | struct cfg80211_internal_bss *bss = NULL; |
6829c878 | 66 | |
667503dd | 67 | wdev_lock(wdev); |
cb0b4beb | 68 | |
6829c878 JB |
69 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); |
70 | ||
f401a6f7 JB |
71 | /* |
72 | * This is a bit of a hack, we don't notify userspace of | |
73 | * a (re-)association reply if we tried to send a reassoc | |
74 | * and got a reject -- we only try again with an assoc | |
75 | * frame instead of reassoc. | |
76 | */ | |
77 | if (status_code != WLAN_STATUS_SUCCESS && wdev->conn && | |
78 | cfg80211_sme_failed_reassoc(wdev)) | |
79 | goto out; | |
80 | ||
cb0b4beb | 81 | nl80211_send_rx_assoc(rdev, dev, buf, len, GFP_KERNEL); |
6829c878 | 82 | |
19957bb3 | 83 | if (status_code == WLAN_STATUS_SUCCESS) { |
df7fc0f9 JB |
84 | for (i = 0; i < MAX_AUTH_BSSES; i++) { |
85 | if (!wdev->auth_bsses[i]) | |
86 | continue; | |
87 | if (memcmp(wdev->auth_bsses[i]->pub.bssid, mgmt->bssid, | |
88 | ETH_ALEN) == 0) { | |
89 | bss = wdev->auth_bsses[i]; | |
19957bb3 | 90 | wdev->auth_bsses[i] = NULL; |
df7fc0f9 JB |
91 | /* additional reference to drop hold */ |
92 | cfg80211_ref_bss(bss); | |
19957bb3 JB |
93 | break; |
94 | } | |
95 | } | |
96 | ||
3bdb2d48 JB |
97 | /* |
98 | * We might be coming here because the driver reported | |
99 | * a successful association at the same time as the | |
100 | * user requested a deauth. In that case, we will have | |
101 | * removed the BSS from the auth_bsses list due to the | |
102 | * deauth request when the assoc response makes it. If | |
103 | * the two code paths acquire the lock the other way | |
104 | * around, that's just the standard situation of a | |
105 | * deauth being requested while connected. | |
106 | */ | |
107 | if (!bss) | |
108 | goto out; | |
7d930bc3 JB |
109 | } else if (wdev->conn) { |
110 | cfg80211_sme_failed_assoc(wdev); | |
7d930bc3 JB |
111 | /* |
112 | * do not call connect_result() now because the | |
113 | * sme will schedule work that does it later. | |
114 | */ | |
115 | goto out; | |
df7fc0f9 JB |
116 | } |
117 | ||
ea416a79 JB |
118 | if (!wdev->conn && wdev->sme_state == CFG80211_SME_IDLE) { |
119 | /* | |
120 | * This is for the userspace SME, the CONNECTING | |
121 | * state will be changed to CONNECTED by | |
122 | * __cfg80211_connect_result() below. | |
123 | */ | |
124 | wdev->sme_state = CFG80211_SME_CONNECTING; | |
125 | } | |
126 | ||
df7fc0f9 JB |
127 | /* this consumes one bss reference (unless bss is NULL) */ |
128 | __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, ie, len - ieoffs, | |
129 | status_code, | |
130 | status_code == WLAN_STATUS_SUCCESS, | |
131 | bss ? &bss->pub : NULL); | |
132 | /* drop hold now, and also reference acquired above */ | |
133 | if (bss) { | |
134 | cfg80211_unhold_bss(bss); | |
135 | cfg80211_put_bss(&bss->pub); | |
19957bb3 | 136 | } |
667503dd | 137 | |
f401a6f7 | 138 | out: |
667503dd | 139 | wdev_unlock(wdev); |
6039f6d2 JM |
140 | } |
141 | EXPORT_SYMBOL(cfg80211_send_rx_assoc); | |
142 | ||
ce470613 | 143 | void __cfg80211_send_deauth(struct net_device *dev, |
667503dd | 144 | const u8 *buf, size_t len) |
6039f6d2 | 145 | { |
6829c878 JB |
146 | struct wireless_dev *wdev = dev->ieee80211_ptr; |
147 | struct wiphy *wiphy = wdev->wiphy; | |
6039f6d2 | 148 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); |
6829c878 | 149 | struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; |
19957bb3 JB |
150 | const u8 *bssid = mgmt->bssid; |
151 | int i; | |
3f3b6a8d | 152 | bool found = false, was_current = false; |
6829c878 | 153 | |
667503dd | 154 | ASSERT_WDEV_LOCK(wdev); |
cb0b4beb | 155 | |
19957bb3 JB |
156 | if (wdev->current_bss && |
157 | memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) { | |
19957bb3 JB |
158 | cfg80211_unhold_bss(wdev->current_bss); |
159 | cfg80211_put_bss(&wdev->current_bss->pub); | |
160 | wdev->current_bss = NULL; | |
5fba4af3 | 161 | found = true; |
3f3b6a8d | 162 | was_current = true; |
19957bb3 JB |
163 | } else for (i = 0; i < MAX_AUTH_BSSES; i++) { |
164 | if (wdev->auth_bsses[i] && | |
165 | memcmp(wdev->auth_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) { | |
166 | cfg80211_unhold_bss(wdev->auth_bsses[i]); | |
167 | cfg80211_put_bss(&wdev->auth_bsses[i]->pub); | |
168 | wdev->auth_bsses[i] = NULL; | |
5fba4af3 | 169 | found = true; |
19957bb3 JB |
170 | break; |
171 | } | |
172 | if (wdev->authtry_bsses[i] && | |
323222b5 PS |
173 | memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid, |
174 | ETH_ALEN) == 0 && | |
175 | memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) == 0) { | |
19957bb3 JB |
176 | cfg80211_unhold_bss(wdev->authtry_bsses[i]); |
177 | cfg80211_put_bss(&wdev->authtry_bsses[i]->pub); | |
178 | wdev->authtry_bsses[i] = NULL; | |
5fba4af3 | 179 | found = true; |
19957bb3 JB |
180 | break; |
181 | } | |
182 | } | |
19957bb3 | 183 | |
5fba4af3 JB |
184 | if (!found) |
185 | return; | |
186 | ||
187 | nl80211_send_deauth(rdev, dev, buf, len, GFP_KERNEL); | |
188 | ||
3f3b6a8d | 189 | if (wdev->sme_state == CFG80211_SME_CONNECTED && was_current) { |
6829c878 JB |
190 | u16 reason_code; |
191 | bool from_ap; | |
192 | ||
193 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
194 | ||
e458b8a2 | 195 | from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0; |
667503dd | 196 | __cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap); |
6829c878 | 197 | } else if (wdev->sme_state == CFG80211_SME_CONNECTING) { |
667503dd JB |
198 | __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0, |
199 | WLAN_STATUS_UNSPECIFIED_FAILURE, | |
df7fc0f9 | 200 | false, NULL); |
667503dd JB |
201 | } |
202 | } | |
ce470613 | 203 | EXPORT_SYMBOL(__cfg80211_send_deauth); |
667503dd | 204 | |
ce470613 | 205 | void cfg80211_send_deauth(struct net_device *dev, const u8 *buf, size_t len) |
667503dd JB |
206 | { |
207 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
208 | ||
ce470613 HS |
209 | wdev_lock(wdev); |
210 | __cfg80211_send_deauth(dev, buf, len); | |
211 | wdev_unlock(wdev); | |
6039f6d2 | 212 | } |
53b46b84 | 213 | EXPORT_SYMBOL(cfg80211_send_deauth); |
6039f6d2 | 214 | |
ce470613 | 215 | void __cfg80211_send_disassoc(struct net_device *dev, |
667503dd | 216 | const u8 *buf, size_t len) |
6039f6d2 | 217 | { |
6829c878 JB |
218 | struct wireless_dev *wdev = dev->ieee80211_ptr; |
219 | struct wiphy *wiphy = wdev->wiphy; | |
6039f6d2 | 220 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); |
6829c878 | 221 | struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; |
19957bb3 JB |
222 | const u8 *bssid = mgmt->bssid; |
223 | int i; | |
224 | u16 reason_code; | |
225 | bool from_ap; | |
226 | bool done = false; | |
6829c878 | 227 | |
596a07c1 | 228 | ASSERT_WDEV_LOCK(wdev); |
cb0b4beb JB |
229 | |
230 | nl80211_send_disassoc(rdev, dev, buf, len, GFP_KERNEL); | |
a3b8b056 | 231 | |
596a07c1 JB |
232 | if (wdev->sme_state != CFG80211_SME_CONNECTED) |
233 | return; | |
6829c878 | 234 | |
19957bb3 | 235 | if (wdev->current_bss && |
b935df01 | 236 | memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) { |
19957bb3 JB |
237 | for (i = 0; i < MAX_AUTH_BSSES; i++) { |
238 | if (wdev->authtry_bsses[i] || wdev->auth_bsses[i]) | |
239 | continue; | |
240 | wdev->auth_bsses[i] = wdev->current_bss; | |
241 | wdev->current_bss = NULL; | |
242 | done = true; | |
243 | cfg80211_sme_disassoc(dev, i); | |
244 | break; | |
245 | } | |
246 | WARN_ON(!done); | |
247 | } else | |
248 | WARN_ON(1); | |
6829c878 | 249 | |
6829c878 | 250 | |
19957bb3 JB |
251 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); |
252 | ||
e458b8a2 | 253 | from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0; |
667503dd | 254 | __cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap); |
667503dd | 255 | } |
ce470613 | 256 | EXPORT_SYMBOL(__cfg80211_send_disassoc); |
667503dd | 257 | |
ce470613 | 258 | void cfg80211_send_disassoc(struct net_device *dev, const u8 *buf, size_t len) |
667503dd JB |
259 | { |
260 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
261 | ||
ce470613 HS |
262 | wdev_lock(wdev); |
263 | __cfg80211_send_disassoc(dev, buf, len); | |
264 | wdev_unlock(wdev); | |
1965c853 | 265 | } |
6829c878 | 266 | EXPORT_SYMBOL(cfg80211_send_disassoc); |
1965c853 | 267 | |
cf4e594e JM |
268 | void cfg80211_send_unprot_deauth(struct net_device *dev, const u8 *buf, |
269 | size_t len) | |
270 | { | |
271 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
272 | struct wiphy *wiphy = wdev->wiphy; | |
273 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
274 | ||
275 | nl80211_send_unprot_deauth(rdev, dev, buf, len, GFP_ATOMIC); | |
276 | } | |
277 | EXPORT_SYMBOL(cfg80211_send_unprot_deauth); | |
278 | ||
279 | void cfg80211_send_unprot_disassoc(struct net_device *dev, const u8 *buf, | |
280 | size_t len) | |
281 | { | |
282 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
283 | struct wiphy *wiphy = wdev->wiphy; | |
284 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
285 | ||
286 | nl80211_send_unprot_disassoc(rdev, dev, buf, len, GFP_ATOMIC); | |
287 | } | |
288 | EXPORT_SYMBOL(cfg80211_send_unprot_disassoc); | |
289 | ||
a58ce43f | 290 | static void __cfg80211_auth_remove(struct wireless_dev *wdev, const u8 *addr) |
1965c853 | 291 | { |
19957bb3 JB |
292 | int i; |
293 | bool done = false; | |
294 | ||
a58ce43f | 295 | ASSERT_WDEV_LOCK(wdev); |
19957bb3 JB |
296 | |
297 | for (i = 0; addr && i < MAX_AUTH_BSSES; i++) { | |
298 | if (wdev->authtry_bsses[i] && | |
299 | memcmp(wdev->authtry_bsses[i]->pub.bssid, | |
300 | addr, ETH_ALEN) == 0) { | |
301 | cfg80211_unhold_bss(wdev->authtry_bsses[i]); | |
302 | cfg80211_put_bss(&wdev->authtry_bsses[i]->pub); | |
303 | wdev->authtry_bsses[i] = NULL; | |
304 | done = true; | |
305 | break; | |
306 | } | |
307 | } | |
308 | ||
309 | WARN_ON(!done); | |
a58ce43f JB |
310 | } |
311 | ||
312 | void __cfg80211_auth_canceled(struct net_device *dev, const u8 *addr) | |
313 | { | |
314 | __cfg80211_auth_remove(dev->ieee80211_ptr, addr); | |
315 | } | |
316 | EXPORT_SYMBOL(__cfg80211_auth_canceled); | |
317 | ||
318 | void cfg80211_send_auth_timeout(struct net_device *dev, const u8 *addr) | |
319 | { | |
320 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
321 | struct wiphy *wiphy = wdev->wiphy; | |
322 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
323 | ||
324 | wdev_lock(wdev); | |
325 | ||
326 | nl80211_send_auth_timeout(rdev, dev, addr, GFP_KERNEL); | |
327 | if (wdev->sme_state == CFG80211_SME_CONNECTING) | |
328 | __cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0, | |
329 | WLAN_STATUS_UNSPECIFIED_FAILURE, | |
330 | false, NULL); | |
331 | ||
332 | __cfg80211_auth_remove(wdev, addr); | |
667503dd JB |
333 | |
334 | wdev_unlock(wdev); | |
1965c853 JM |
335 | } |
336 | EXPORT_SYMBOL(cfg80211_send_auth_timeout); | |
337 | ||
cb0b4beb | 338 | void cfg80211_send_assoc_timeout(struct net_device *dev, const u8 *addr) |
1965c853 | 339 | { |
6829c878 JB |
340 | struct wireless_dev *wdev = dev->ieee80211_ptr; |
341 | struct wiphy *wiphy = wdev->wiphy; | |
1965c853 | 342 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); |
19957bb3 JB |
343 | int i; |
344 | bool done = false; | |
345 | ||
667503dd | 346 | wdev_lock(wdev); |
cb0b4beb JB |
347 | |
348 | nl80211_send_assoc_timeout(rdev, dev, addr, GFP_KERNEL); | |
6829c878 | 349 | if (wdev->sme_state == CFG80211_SME_CONNECTING) |
667503dd JB |
350 | __cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0, |
351 | WLAN_STATUS_UNSPECIFIED_FAILURE, | |
df7fc0f9 | 352 | false, NULL); |
19957bb3 JB |
353 | |
354 | for (i = 0; addr && i < MAX_AUTH_BSSES; i++) { | |
355 | if (wdev->auth_bsses[i] && | |
356 | memcmp(wdev->auth_bsses[i]->pub.bssid, | |
357 | addr, ETH_ALEN) == 0) { | |
358 | cfg80211_unhold_bss(wdev->auth_bsses[i]); | |
359 | cfg80211_put_bss(&wdev->auth_bsses[i]->pub); | |
360 | wdev->auth_bsses[i] = NULL; | |
361 | done = true; | |
362 | break; | |
363 | } | |
364 | } | |
365 | ||
366 | WARN_ON(!done); | |
667503dd JB |
367 | |
368 | wdev_unlock(wdev); | |
1965c853 JM |
369 | } |
370 | EXPORT_SYMBOL(cfg80211_send_assoc_timeout); | |
371 | ||
a3b8b056 JM |
372 | void cfg80211_michael_mic_failure(struct net_device *dev, const u8 *addr, |
373 | enum nl80211_key_type key_type, int key_id, | |
e6d6e342 | 374 | const u8 *tsc, gfp_t gfp) |
a3b8b056 JM |
375 | { |
376 | struct wiphy *wiphy = dev->ieee80211_ptr->wiphy; | |
377 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
3d23e349 | 378 | #ifdef CONFIG_CFG80211_WEXT |
f58d4ed9 | 379 | union iwreq_data wrqu; |
e6d6e342 | 380 | char *buf = kmalloc(128, gfp); |
f58d4ed9 JB |
381 | |
382 | if (buf) { | |
383 | sprintf(buf, "MLME-MICHAELMICFAILURE.indication(" | |
384 | "keyid=%d %scast addr=%pM)", key_id, | |
385 | key_type == NL80211_KEYTYPE_GROUP ? "broad" : "uni", | |
386 | addr); | |
387 | memset(&wrqu, 0, sizeof(wrqu)); | |
388 | wrqu.data.length = strlen(buf); | |
389 | wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf); | |
390 | kfree(buf); | |
391 | } | |
392 | #endif | |
393 | ||
e6d6e342 | 394 | nl80211_michael_mic_failure(rdev, dev, addr, key_type, key_id, tsc, gfp); |
a3b8b056 JM |
395 | } |
396 | EXPORT_SYMBOL(cfg80211_michael_mic_failure); | |
19957bb3 JB |
397 | |
398 | /* some MLME handling for userspace SME */ | |
667503dd JB |
399 | int __cfg80211_mlme_auth(struct cfg80211_registered_device *rdev, |
400 | struct net_device *dev, | |
401 | struct ieee80211_channel *chan, | |
402 | enum nl80211_auth_type auth_type, | |
403 | const u8 *bssid, | |
404 | const u8 *ssid, int ssid_len, | |
fffd0934 | 405 | const u8 *ie, int ie_len, |
d5cdfacb JM |
406 | const u8 *key, int key_len, int key_idx, |
407 | bool local_state_change) | |
19957bb3 JB |
408 | { |
409 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
410 | struct cfg80211_auth_request req; | |
411 | struct cfg80211_internal_bss *bss; | |
412 | int i, err, slot = -1, nfree = 0; | |
413 | ||
667503dd JB |
414 | ASSERT_WDEV_LOCK(wdev); |
415 | ||
fffd0934 JB |
416 | if (auth_type == NL80211_AUTHTYPE_SHARED_KEY) |
417 | if (!key || !key_len || key_idx < 0 || key_idx > 4) | |
418 | return -EINVAL; | |
419 | ||
0a9b5e17 JB |
420 | if (wdev->current_bss && |
421 | memcmp(bssid, wdev->current_bss->pub.bssid, ETH_ALEN) == 0) | |
422 | return -EALREADY; | |
423 | ||
424 | for (i = 0; i < MAX_AUTH_BSSES; i++) { | |
425 | if (wdev->authtry_bsses[i] && | |
426 | memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid, | |
427 | ETH_ALEN) == 0) | |
428 | return -EALREADY; | |
429 | if (wdev->auth_bsses[i] && | |
430 | memcmp(bssid, wdev->auth_bsses[i]->pub.bssid, | |
431 | ETH_ALEN) == 0) | |
432 | return -EALREADY; | |
433 | } | |
434 | ||
19957bb3 JB |
435 | memset(&req, 0, sizeof(req)); |
436 | ||
d5cdfacb | 437 | req.local_state_change = local_state_change; |
19957bb3 JB |
438 | req.ie = ie; |
439 | req.ie_len = ie_len; | |
440 | req.auth_type = auth_type; | |
441 | req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len, | |
442 | WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS); | |
fffd0934 JB |
443 | req.key = key; |
444 | req.key_len = key_len; | |
445 | req.key_idx = key_idx; | |
19957bb3 JB |
446 | if (!req.bss) |
447 | return -ENOENT; | |
448 | ||
449 | bss = bss_from_pub(req.bss); | |
450 | ||
19957bb3 JB |
451 | for (i = 0; i < MAX_AUTH_BSSES; i++) { |
452 | if (!wdev->auth_bsses[i] && !wdev->authtry_bsses[i]) { | |
453 | slot = i; | |
454 | nfree++; | |
455 | } | |
456 | } | |
457 | ||
458 | /* we need one free slot for disassoc and one for this auth */ | |
459 | if (nfree < 2) { | |
460 | err = -ENOSPC; | |
461 | goto out; | |
462 | } | |
463 | ||
d5cdfacb JM |
464 | if (local_state_change) |
465 | wdev->auth_bsses[slot] = bss; | |
466 | else | |
467 | wdev->authtry_bsses[slot] = bss; | |
19957bb3 JB |
468 | cfg80211_hold_bss(bss); |
469 | ||
470 | err = rdev->ops->auth(&rdev->wiphy, dev, &req); | |
471 | if (err) { | |
d5cdfacb JM |
472 | if (local_state_change) |
473 | wdev->auth_bsses[slot] = NULL; | |
474 | else | |
475 | wdev->authtry_bsses[slot] = NULL; | |
19957bb3 JB |
476 | cfg80211_unhold_bss(bss); |
477 | } | |
478 | ||
479 | out: | |
480 | if (err) | |
481 | cfg80211_put_bss(req.bss); | |
482 | return err; | |
483 | } | |
484 | ||
667503dd JB |
485 | int cfg80211_mlme_auth(struct cfg80211_registered_device *rdev, |
486 | struct net_device *dev, struct ieee80211_channel *chan, | |
487 | enum nl80211_auth_type auth_type, const u8 *bssid, | |
488 | const u8 *ssid, int ssid_len, | |
fffd0934 | 489 | const u8 *ie, int ie_len, |
d5cdfacb JM |
490 | const u8 *key, int key_len, int key_idx, |
491 | bool local_state_change) | |
667503dd JB |
492 | { |
493 | int err; | |
494 | ||
495 | wdev_lock(dev->ieee80211_ptr); | |
496 | err = __cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid, | |
fffd0934 | 497 | ssid, ssid_len, ie, ie_len, |
d5cdfacb | 498 | key, key_len, key_idx, local_state_change); |
667503dd JB |
499 | wdev_unlock(dev->ieee80211_ptr); |
500 | ||
501 | return err; | |
502 | } | |
503 | ||
504 | int __cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev, | |
505 | struct net_device *dev, | |
506 | struct ieee80211_channel *chan, | |
507 | const u8 *bssid, const u8 *prev_bssid, | |
508 | const u8 *ssid, int ssid_len, | |
509 | const u8 *ie, int ie_len, bool use_mfp, | |
510 | struct cfg80211_crypto_settings *crypt) | |
19957bb3 JB |
511 | { |
512 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
513 | struct cfg80211_assoc_request req; | |
514 | struct cfg80211_internal_bss *bss; | |
515 | int i, err, slot = -1; | |
24b6b15f | 516 | bool was_connected = false; |
19957bb3 | 517 | |
667503dd JB |
518 | ASSERT_WDEV_LOCK(wdev); |
519 | ||
19957bb3 JB |
520 | memset(&req, 0, sizeof(req)); |
521 | ||
24b6b15f JM |
522 | if (wdev->current_bss && prev_bssid && |
523 | memcmp(wdev->current_bss->pub.bssid, prev_bssid, ETH_ALEN) == 0) { | |
524 | /* | |
525 | * Trying to reassociate: Allow this to proceed and let the old | |
526 | * association to be dropped when the new one is completed. | |
527 | */ | |
528 | if (wdev->sme_state == CFG80211_SME_CONNECTED) { | |
529 | was_connected = true; | |
530 | wdev->sme_state = CFG80211_SME_CONNECTING; | |
531 | } | |
532 | } else if (wdev->current_bss) | |
19957bb3 JB |
533 | return -EALREADY; |
534 | ||
535 | req.ie = ie; | |
536 | req.ie_len = ie_len; | |
537 | memcpy(&req.crypto, crypt, sizeof(req.crypto)); | |
538 | req.use_mfp = use_mfp; | |
3e5d7649 | 539 | req.prev_bssid = prev_bssid; |
19957bb3 JB |
540 | req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len, |
541 | WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS); | |
24b6b15f JM |
542 | if (!req.bss) { |
543 | if (was_connected) | |
544 | wdev->sme_state = CFG80211_SME_CONNECTED; | |
19957bb3 | 545 | return -ENOENT; |
24b6b15f | 546 | } |
19957bb3 JB |
547 | |
548 | bss = bss_from_pub(req.bss); | |
549 | ||
550 | for (i = 0; i < MAX_AUTH_BSSES; i++) { | |
551 | if (bss == wdev->auth_bsses[i]) { | |
552 | slot = i; | |
553 | break; | |
554 | } | |
555 | } | |
556 | ||
557 | if (slot < 0) { | |
558 | err = -ENOTCONN; | |
559 | goto out; | |
560 | } | |
561 | ||
562 | err = rdev->ops->assoc(&rdev->wiphy, dev, &req); | |
563 | out: | |
24b6b15f JM |
564 | if (err && was_connected) |
565 | wdev->sme_state = CFG80211_SME_CONNECTED; | |
19957bb3 JB |
566 | /* still a reference in wdev->auth_bsses[slot] */ |
567 | cfg80211_put_bss(req.bss); | |
568 | return err; | |
569 | } | |
570 | ||
667503dd JB |
571 | int cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev, |
572 | struct net_device *dev, | |
573 | struct ieee80211_channel *chan, | |
574 | const u8 *bssid, const u8 *prev_bssid, | |
575 | const u8 *ssid, int ssid_len, | |
576 | const u8 *ie, int ie_len, bool use_mfp, | |
577 | struct cfg80211_crypto_settings *crypt) | |
578 | { | |
579 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
580 | int err; | |
581 | ||
582 | wdev_lock(wdev); | |
583 | err = __cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid, | |
584 | ssid, ssid_len, ie, ie_len, use_mfp, crypt); | |
585 | wdev_unlock(wdev); | |
586 | ||
587 | return err; | |
588 | } | |
589 | ||
590 | int __cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev, | |
591 | struct net_device *dev, const u8 *bssid, | |
d5cdfacb JM |
592 | const u8 *ie, int ie_len, u16 reason, |
593 | bool local_state_change) | |
19957bb3 JB |
594 | { |
595 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
596 | struct cfg80211_deauth_request req; | |
597 | int i; | |
598 | ||
667503dd JB |
599 | ASSERT_WDEV_LOCK(wdev); |
600 | ||
19957bb3 JB |
601 | memset(&req, 0, sizeof(req)); |
602 | req.reason_code = reason; | |
d5cdfacb | 603 | req.local_state_change = local_state_change; |
19957bb3 JB |
604 | req.ie = ie; |
605 | req.ie_len = ie_len; | |
606 | if (wdev->current_bss && | |
607 | memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) { | |
608 | req.bss = &wdev->current_bss->pub; | |
609 | } else for (i = 0; i < MAX_AUTH_BSSES; i++) { | |
610 | if (wdev->auth_bsses[i] && | |
611 | memcmp(bssid, wdev->auth_bsses[i]->pub.bssid, ETH_ALEN) == 0) { | |
612 | req.bss = &wdev->auth_bsses[i]->pub; | |
613 | break; | |
614 | } | |
615 | if (wdev->authtry_bsses[i] && | |
616 | memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid, ETH_ALEN) == 0) { | |
617 | req.bss = &wdev->authtry_bsses[i]->pub; | |
618 | break; | |
619 | } | |
620 | } | |
621 | ||
622 | if (!req.bss) | |
623 | return -ENOTCONN; | |
624 | ||
667503dd | 625 | return rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev); |
19957bb3 JB |
626 | } |
627 | ||
667503dd JB |
628 | int cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev, |
629 | struct net_device *dev, const u8 *bssid, | |
d5cdfacb JM |
630 | const u8 *ie, int ie_len, u16 reason, |
631 | bool local_state_change) | |
667503dd JB |
632 | { |
633 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
634 | int err; | |
635 | ||
636 | wdev_lock(wdev); | |
d5cdfacb JM |
637 | err = __cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason, |
638 | local_state_change); | |
667503dd JB |
639 | wdev_unlock(wdev); |
640 | ||
641 | return err; | |
642 | } | |
643 | ||
644 | static int __cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev, | |
645 | struct net_device *dev, const u8 *bssid, | |
d5cdfacb JM |
646 | const u8 *ie, int ie_len, u16 reason, |
647 | bool local_state_change) | |
19957bb3 JB |
648 | { |
649 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
650 | struct cfg80211_disassoc_request req; | |
651 | ||
667503dd JB |
652 | ASSERT_WDEV_LOCK(wdev); |
653 | ||
f9d6b402 JB |
654 | if (wdev->sme_state != CFG80211_SME_CONNECTED) |
655 | return -ENOTCONN; | |
656 | ||
657 | if (WARN_ON(!wdev->current_bss)) | |
658 | return -ENOTCONN; | |
659 | ||
19957bb3 JB |
660 | memset(&req, 0, sizeof(req)); |
661 | req.reason_code = reason; | |
d5cdfacb | 662 | req.local_state_change = local_state_change; |
19957bb3 JB |
663 | req.ie = ie; |
664 | req.ie_len = ie_len; | |
665 | if (memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) | |
666 | req.bss = &wdev->current_bss->pub; | |
667 | else | |
668 | return -ENOTCONN; | |
669 | ||
667503dd JB |
670 | return rdev->ops->disassoc(&rdev->wiphy, dev, &req, wdev); |
671 | } | |
672 | ||
673 | int cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev, | |
674 | struct net_device *dev, const u8 *bssid, | |
d5cdfacb JM |
675 | const u8 *ie, int ie_len, u16 reason, |
676 | bool local_state_change) | |
667503dd JB |
677 | { |
678 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
679 | int err; | |
680 | ||
681 | wdev_lock(wdev); | |
d5cdfacb JM |
682 | err = __cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason, |
683 | local_state_change); | |
667503dd JB |
684 | wdev_unlock(wdev); |
685 | ||
686 | return err; | |
19957bb3 JB |
687 | } |
688 | ||
689 | void cfg80211_mlme_down(struct cfg80211_registered_device *rdev, | |
690 | struct net_device *dev) | |
691 | { | |
692 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
693 | struct cfg80211_deauth_request req; | |
694 | int i; | |
695 | ||
667503dd JB |
696 | ASSERT_WDEV_LOCK(wdev); |
697 | ||
19957bb3 JB |
698 | if (!rdev->ops->deauth) |
699 | return; | |
700 | ||
701 | memset(&req, 0, sizeof(req)); | |
702 | req.reason_code = WLAN_REASON_DEAUTH_LEAVING; | |
703 | req.ie = NULL; | |
704 | req.ie_len = 0; | |
705 | ||
706 | if (wdev->current_bss) { | |
707 | req.bss = &wdev->current_bss->pub; | |
667503dd | 708 | rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev); |
19957bb3 JB |
709 | if (wdev->current_bss) { |
710 | cfg80211_unhold_bss(wdev->current_bss); | |
711 | cfg80211_put_bss(&wdev->current_bss->pub); | |
712 | wdev->current_bss = NULL; | |
713 | } | |
714 | } | |
715 | ||
716 | for (i = 0; i < MAX_AUTH_BSSES; i++) { | |
717 | if (wdev->auth_bsses[i]) { | |
718 | req.bss = &wdev->auth_bsses[i]->pub; | |
667503dd | 719 | rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev); |
19957bb3 JB |
720 | if (wdev->auth_bsses[i]) { |
721 | cfg80211_unhold_bss(wdev->auth_bsses[i]); | |
722 | cfg80211_put_bss(&wdev->auth_bsses[i]->pub); | |
723 | wdev->auth_bsses[i] = NULL; | |
724 | } | |
725 | } | |
726 | if (wdev->authtry_bsses[i]) { | |
727 | req.bss = &wdev->authtry_bsses[i]->pub; | |
667503dd | 728 | rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev); |
19957bb3 JB |
729 | if (wdev->authtry_bsses[i]) { |
730 | cfg80211_unhold_bss(wdev->authtry_bsses[i]); | |
731 | cfg80211_put_bss(&wdev->authtry_bsses[i]->pub); | |
732 | wdev->authtry_bsses[i] = NULL; | |
733 | } | |
734 | } | |
735 | } | |
736 | } | |
9588bbd5 JM |
737 | |
738 | void cfg80211_ready_on_channel(struct net_device *dev, u64 cookie, | |
739 | struct ieee80211_channel *chan, | |
740 | enum nl80211_channel_type channel_type, | |
741 | unsigned int duration, gfp_t gfp) | |
742 | { | |
743 | struct wiphy *wiphy = dev->ieee80211_ptr->wiphy; | |
744 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
745 | ||
746 | nl80211_send_remain_on_channel(rdev, dev, cookie, chan, channel_type, | |
747 | duration, gfp); | |
748 | } | |
749 | EXPORT_SYMBOL(cfg80211_ready_on_channel); | |
750 | ||
751 | void cfg80211_remain_on_channel_expired(struct net_device *dev, | |
752 | u64 cookie, | |
753 | struct ieee80211_channel *chan, | |
754 | enum nl80211_channel_type channel_type, | |
755 | gfp_t gfp) | |
756 | { | |
757 | struct wiphy *wiphy = dev->ieee80211_ptr->wiphy; | |
758 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
759 | ||
760 | nl80211_send_remain_on_channel_cancel(rdev, dev, cookie, chan, | |
761 | channel_type, gfp); | |
762 | } | |
763 | EXPORT_SYMBOL(cfg80211_remain_on_channel_expired); | |
98b62183 JB |
764 | |
765 | void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr, | |
766 | struct station_info *sinfo, gfp_t gfp) | |
767 | { | |
768 | struct wiphy *wiphy = dev->ieee80211_ptr->wiphy; | |
769 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
770 | ||
771 | nl80211_send_sta_event(rdev, dev, mac_addr, sinfo, gfp); | |
772 | } | |
773 | EXPORT_SYMBOL(cfg80211_new_sta); | |
026331c4 | 774 | |
ec15e68b JM |
775 | void cfg80211_del_sta(struct net_device *dev, const u8 *mac_addr, gfp_t gfp) |
776 | { | |
777 | struct wiphy *wiphy = dev->ieee80211_ptr->wiphy; | |
778 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
779 | ||
780 | nl80211_send_sta_del_event(rdev, dev, mac_addr, gfp); | |
781 | } | |
782 | EXPORT_SYMBOL(cfg80211_del_sta); | |
783 | ||
2e161f78 | 784 | struct cfg80211_mgmt_registration { |
026331c4 JM |
785 | struct list_head list; |
786 | ||
787 | u32 nlpid; | |
788 | ||
789 | int match_len; | |
790 | ||
2e161f78 JB |
791 | __le16 frame_type; |
792 | ||
026331c4 JM |
793 | u8 match[]; |
794 | }; | |
795 | ||
2e161f78 JB |
796 | int cfg80211_mlme_register_mgmt(struct wireless_dev *wdev, u32 snd_pid, |
797 | u16 frame_type, const u8 *match_data, | |
798 | int match_len) | |
026331c4 | 799 | { |
271733cf JB |
800 | struct wiphy *wiphy = wdev->wiphy; |
801 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
2e161f78 | 802 | struct cfg80211_mgmt_registration *reg, *nreg; |
026331c4 | 803 | int err = 0; |
2e161f78 JB |
804 | u16 mgmt_type; |
805 | ||
806 | if (!wdev->wiphy->mgmt_stypes) | |
807 | return -EOPNOTSUPP; | |
808 | ||
809 | if ((frame_type & IEEE80211_FCTL_FTYPE) != IEEE80211_FTYPE_MGMT) | |
810 | return -EINVAL; | |
811 | ||
812 | if (frame_type & ~(IEEE80211_FCTL_FTYPE | IEEE80211_FCTL_STYPE)) | |
813 | return -EINVAL; | |
814 | ||
815 | mgmt_type = (frame_type & IEEE80211_FCTL_STYPE) >> 4; | |
816 | if (!(wdev->wiphy->mgmt_stypes[wdev->iftype].rx & BIT(mgmt_type))) | |
817 | return -EINVAL; | |
026331c4 JM |
818 | |
819 | nreg = kzalloc(sizeof(*reg) + match_len, GFP_KERNEL); | |
820 | if (!nreg) | |
821 | return -ENOMEM; | |
822 | ||
2e161f78 | 823 | spin_lock_bh(&wdev->mgmt_registrations_lock); |
026331c4 | 824 | |
2e161f78 | 825 | list_for_each_entry(reg, &wdev->mgmt_registrations, list) { |
026331c4 JM |
826 | int mlen = min(match_len, reg->match_len); |
827 | ||
2e161f78 JB |
828 | if (frame_type != le16_to_cpu(reg->frame_type)) |
829 | continue; | |
830 | ||
026331c4 JM |
831 | if (memcmp(reg->match, match_data, mlen) == 0) { |
832 | err = -EALREADY; | |
833 | break; | |
834 | } | |
835 | } | |
836 | ||
837 | if (err) { | |
838 | kfree(nreg); | |
839 | goto out; | |
840 | } | |
841 | ||
842 | memcpy(nreg->match, match_data, match_len); | |
843 | nreg->match_len = match_len; | |
844 | nreg->nlpid = snd_pid; | |
2e161f78 JB |
845 | nreg->frame_type = cpu_to_le16(frame_type); |
846 | list_add(&nreg->list, &wdev->mgmt_registrations); | |
026331c4 | 847 | |
271733cf JB |
848 | if (rdev->ops->mgmt_frame_register) |
849 | rdev->ops->mgmt_frame_register(wiphy, wdev->netdev, | |
850 | frame_type, true); | |
851 | ||
026331c4 | 852 | out: |
2e161f78 | 853 | spin_unlock_bh(&wdev->mgmt_registrations_lock); |
271733cf | 854 | |
026331c4 JM |
855 | return err; |
856 | } | |
857 | ||
2e161f78 | 858 | void cfg80211_mlme_unregister_socket(struct wireless_dev *wdev, u32 nlpid) |
026331c4 | 859 | { |
271733cf JB |
860 | struct wiphy *wiphy = wdev->wiphy; |
861 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
2e161f78 | 862 | struct cfg80211_mgmt_registration *reg, *tmp; |
026331c4 | 863 | |
2e161f78 | 864 | spin_lock_bh(&wdev->mgmt_registrations_lock); |
026331c4 | 865 | |
2e161f78 | 866 | list_for_each_entry_safe(reg, tmp, &wdev->mgmt_registrations, list) { |
271733cf JB |
867 | if (reg->nlpid != nlpid) |
868 | continue; | |
869 | ||
870 | if (rdev->ops->mgmt_frame_register) { | |
871 | u16 frame_type = le16_to_cpu(reg->frame_type); | |
872 | ||
873 | rdev->ops->mgmt_frame_register(wiphy, wdev->netdev, | |
874 | frame_type, false); | |
026331c4 | 875 | } |
271733cf JB |
876 | |
877 | list_del(®->list); | |
878 | kfree(reg); | |
026331c4 JM |
879 | } |
880 | ||
2e161f78 | 881 | spin_unlock_bh(&wdev->mgmt_registrations_lock); |
026331c4 JM |
882 | } |
883 | ||
2e161f78 | 884 | void cfg80211_mlme_purge_registrations(struct wireless_dev *wdev) |
026331c4 | 885 | { |
2e161f78 | 886 | struct cfg80211_mgmt_registration *reg, *tmp; |
026331c4 | 887 | |
2e161f78 | 888 | spin_lock_bh(&wdev->mgmt_registrations_lock); |
026331c4 | 889 | |
2e161f78 | 890 | list_for_each_entry_safe(reg, tmp, &wdev->mgmt_registrations, list) { |
026331c4 JM |
891 | list_del(®->list); |
892 | kfree(reg); | |
893 | } | |
894 | ||
2e161f78 | 895 | spin_unlock_bh(&wdev->mgmt_registrations_lock); |
026331c4 JM |
896 | } |
897 | ||
2e161f78 JB |
898 | int cfg80211_mlme_mgmt_tx(struct cfg80211_registered_device *rdev, |
899 | struct net_device *dev, | |
f7ca38df | 900 | struct ieee80211_channel *chan, bool offchan, |
2e161f78 | 901 | enum nl80211_channel_type channel_type, |
f7ca38df | 902 | bool channel_type_valid, unsigned int wait, |
2e161f78 | 903 | const u8 *buf, size_t len, u64 *cookie) |
026331c4 JM |
904 | { |
905 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
906 | const struct ieee80211_mgmt *mgmt; | |
2e161f78 JB |
907 | u16 stype; |
908 | ||
909 | if (!wdev->wiphy->mgmt_stypes) | |
910 | return -EOPNOTSUPP; | |
026331c4 | 911 | |
2e161f78 | 912 | if (!rdev->ops->mgmt_tx) |
026331c4 | 913 | return -EOPNOTSUPP; |
2e161f78 | 914 | |
026331c4 JM |
915 | if (len < 24 + 1) |
916 | return -EINVAL; | |
917 | ||
918 | mgmt = (const struct ieee80211_mgmt *) buf; | |
2e161f78 JB |
919 | |
920 | if (!ieee80211_is_mgmt(mgmt->frame_control)) | |
026331c4 | 921 | return -EINVAL; |
2e161f78 JB |
922 | |
923 | stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE; | |
924 | if (!(wdev->wiphy->mgmt_stypes[wdev->iftype].tx & BIT(stype >> 4))) | |
925 | return -EINVAL; | |
926 | ||
927 | if (ieee80211_is_action(mgmt->frame_control) && | |
928 | mgmt->u.action.category != WLAN_CATEGORY_PUBLIC) { | |
663fcafd JB |
929 | int err = 0; |
930 | ||
fe100acd JB |
931 | wdev_lock(wdev); |
932 | ||
663fcafd JB |
933 | switch (wdev->iftype) { |
934 | case NL80211_IFTYPE_ADHOC: | |
935 | case NL80211_IFTYPE_STATION: | |
936 | case NL80211_IFTYPE_P2P_CLIENT: | |
937 | if (!wdev->current_bss) { | |
938 | err = -ENOTCONN; | |
939 | break; | |
940 | } | |
941 | ||
942 | if (memcmp(wdev->current_bss->pub.bssid, | |
943 | mgmt->bssid, ETH_ALEN)) { | |
944 | err = -ENOTCONN; | |
945 | break; | |
946 | } | |
947 | ||
948 | /* | |
949 | * check for IBSS DA must be done by driver as | |
950 | * cfg80211 doesn't track the stations | |
951 | */ | |
952 | if (wdev->iftype == NL80211_IFTYPE_ADHOC) | |
953 | break; | |
fe100acd | 954 | |
663fcafd JB |
955 | /* for station, check that DA is the AP */ |
956 | if (memcmp(wdev->current_bss->pub.bssid, | |
957 | mgmt->da, ETH_ALEN)) { | |
958 | err = -ENOTCONN; | |
959 | break; | |
960 | } | |
961 | break; | |
962 | case NL80211_IFTYPE_AP: | |
963 | case NL80211_IFTYPE_P2P_GO: | |
964 | case NL80211_IFTYPE_AP_VLAN: | |
965 | if (memcmp(mgmt->bssid, dev->dev_addr, ETH_ALEN)) | |
966 | err = -EINVAL; | |
967 | break; | |
0778a6a3 JC |
968 | case NL80211_IFTYPE_MESH_POINT: |
969 | if (memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN)) { | |
970 | err = -EINVAL; | |
971 | break; | |
972 | } | |
973 | /* | |
974 | * check for mesh DA must be done by driver as | |
975 | * cfg80211 doesn't track the stations | |
976 | */ | |
977 | break; | |
663fcafd JB |
978 | default: |
979 | err = -EOPNOTSUPP; | |
980 | break; | |
981 | } | |
fe100acd | 982 | wdev_unlock(wdev); |
663fcafd JB |
983 | |
984 | if (err) | |
985 | return err; | |
026331c4 JM |
986 | } |
987 | ||
988 | if (memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0) | |
989 | return -EINVAL; | |
990 | ||
991 | /* Transmit the Action frame as requested by user space */ | |
f7ca38df JB |
992 | return rdev->ops->mgmt_tx(&rdev->wiphy, dev, chan, offchan, |
993 | channel_type, channel_type_valid, | |
994 | wait, buf, len, cookie); | |
026331c4 JM |
995 | } |
996 | ||
2e161f78 JB |
997 | bool cfg80211_rx_mgmt(struct net_device *dev, int freq, const u8 *buf, |
998 | size_t len, gfp_t gfp) | |
026331c4 JM |
999 | { |
1000 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
1001 | struct wiphy *wiphy = wdev->wiphy; | |
1002 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
2e161f78 JB |
1003 | struct cfg80211_mgmt_registration *reg; |
1004 | const struct ieee80211_txrx_stypes *stypes = | |
1005 | &wiphy->mgmt_stypes[wdev->iftype]; | |
1006 | struct ieee80211_mgmt *mgmt = (void *)buf; | |
1007 | const u8 *data; | |
1008 | int data_len; | |
026331c4 | 1009 | bool result = false; |
2e161f78 JB |
1010 | __le16 ftype = mgmt->frame_control & |
1011 | cpu_to_le16(IEEE80211_FCTL_FTYPE | IEEE80211_FCTL_STYPE); | |
1012 | u16 stype; | |
026331c4 | 1013 | |
2e161f78 | 1014 | stype = (le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE) >> 4; |
026331c4 | 1015 | |
2e161f78 JB |
1016 | if (!(stypes->rx & BIT(stype))) |
1017 | return false; | |
026331c4 | 1018 | |
2e161f78 JB |
1019 | data = buf + ieee80211_hdrlen(mgmt->frame_control); |
1020 | data_len = len - ieee80211_hdrlen(mgmt->frame_control); | |
1021 | ||
1022 | spin_lock_bh(&wdev->mgmt_registrations_lock); | |
1023 | ||
1024 | list_for_each_entry(reg, &wdev->mgmt_registrations, list) { | |
1025 | if (reg->frame_type != ftype) | |
1026 | continue; | |
026331c4 | 1027 | |
2e161f78 | 1028 | if (reg->match_len > data_len) |
026331c4 JM |
1029 | continue; |
1030 | ||
2e161f78 | 1031 | if (memcmp(reg->match, data, reg->match_len)) |
026331c4 JM |
1032 | continue; |
1033 | ||
1034 | /* found match! */ | |
1035 | ||
1036 | /* Indicate the received Action frame to user space */ | |
2e161f78 JB |
1037 | if (nl80211_send_mgmt(rdev, dev, reg->nlpid, freq, |
1038 | buf, len, gfp)) | |
026331c4 JM |
1039 | continue; |
1040 | ||
1041 | result = true; | |
1042 | break; | |
1043 | } | |
1044 | ||
2e161f78 | 1045 | spin_unlock_bh(&wdev->mgmt_registrations_lock); |
026331c4 JM |
1046 | |
1047 | return result; | |
1048 | } | |
2e161f78 | 1049 | EXPORT_SYMBOL(cfg80211_rx_mgmt); |
026331c4 | 1050 | |
2e161f78 JB |
1051 | void cfg80211_mgmt_tx_status(struct net_device *dev, u64 cookie, |
1052 | const u8 *buf, size_t len, bool ack, gfp_t gfp) | |
026331c4 JM |
1053 | { |
1054 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
1055 | struct wiphy *wiphy = wdev->wiphy; | |
1056 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
1057 | ||
1058 | /* Indicate TX status of the Action frame to user space */ | |
2e161f78 | 1059 | nl80211_send_mgmt_tx_status(rdev, dev, cookie, buf, len, ack, gfp); |
026331c4 | 1060 | } |
2e161f78 | 1061 | EXPORT_SYMBOL(cfg80211_mgmt_tx_status); |
d6dc1a38 JO |
1062 | |
1063 | void cfg80211_cqm_rssi_notify(struct net_device *dev, | |
1064 | enum nl80211_cqm_rssi_threshold_event rssi_event, | |
1065 | gfp_t gfp) | |
1066 | { | |
1067 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
1068 | struct wiphy *wiphy = wdev->wiphy; | |
1069 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
1070 | ||
1071 | /* Indicate roaming trigger event to user space */ | |
1072 | nl80211_send_cqm_rssi_notify(rdev, dev, rssi_event, gfp); | |
1073 | } | |
1074 | EXPORT_SYMBOL(cfg80211_cqm_rssi_notify); | |
c063dbf5 JB |
1075 | |
1076 | void cfg80211_cqm_pktloss_notify(struct net_device *dev, | |
1077 | const u8 *peer, u32 num_packets, gfp_t gfp) | |
1078 | { | |
1079 | struct wireless_dev *wdev = dev->ieee80211_ptr; | |
1080 | struct wiphy *wiphy = wdev->wiphy; | |
1081 | struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); | |
1082 | ||
1083 | /* Indicate roaming trigger event to user space */ | |
1084 | nl80211_send_cqm_pktloss_notify(rdev, dev, peer, num_packets, gfp); | |
1085 | } | |
1086 | EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify); |