]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * Copyright (c) 2008, 2009 open80211s Ltd. | |
3 | * Author: Luis Carlos Cobo <luisca@cozybit.com> | |
4 | * | |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of the GNU General Public License version 2 as | |
7 | * published by the Free Software Foundation. | |
8 | */ | |
9 | #include <linux/gfp.h> | |
10 | #include <linux/kernel.h> | |
11 | #include <linux/random.h> | |
12 | #include "ieee80211_i.h" | |
13 | #include "rate.h" | |
14 | #include "mesh.h" | |
15 | ||
16 | #define PLINK_GET_LLID(p) (p + 2) | |
17 | #define PLINK_GET_PLID(p) (p + 4) | |
18 | ||
19 | #define mod_plink_timer(s, t) (mod_timer(&s->plink_timer, \ | |
20 | jiffies + HZ * t / 1000)) | |
21 | ||
22 | enum plink_event { | |
23 | PLINK_UNDEFINED, | |
24 | OPN_ACPT, | |
25 | OPN_RJCT, | |
26 | OPN_IGNR, | |
27 | CNF_ACPT, | |
28 | CNF_RJCT, | |
29 | CNF_IGNR, | |
30 | CLS_ACPT, | |
31 | CLS_IGNR | |
32 | }; | |
33 | ||
34 | static const char * const mplstates[] = { | |
35 | [NL80211_PLINK_LISTEN] = "LISTEN", | |
36 | [NL80211_PLINK_OPN_SNT] = "OPN-SNT", | |
37 | [NL80211_PLINK_OPN_RCVD] = "OPN-RCVD", | |
38 | [NL80211_PLINK_CNF_RCVD] = "CNF_RCVD", | |
39 | [NL80211_PLINK_ESTAB] = "ESTAB", | |
40 | [NL80211_PLINK_HOLDING] = "HOLDING", | |
41 | [NL80211_PLINK_BLOCKED] = "BLOCKED" | |
42 | }; | |
43 | ||
44 | static const char * const mplevents[] = { | |
45 | [PLINK_UNDEFINED] = "NONE", | |
46 | [OPN_ACPT] = "OPN_ACPT", | |
47 | [OPN_RJCT] = "OPN_RJCT", | |
48 | [OPN_IGNR] = "OPN_IGNR", | |
49 | [CNF_ACPT] = "CNF_ACPT", | |
50 | [CNF_RJCT] = "CNF_RJCT", | |
51 | [CNF_IGNR] = "CNF_IGNR", | |
52 | [CLS_ACPT] = "CLS_ACPT", | |
53 | [CLS_IGNR] = "CLS_IGNR" | |
54 | }; | |
55 | ||
56 | static int mesh_plink_frame_tx(struct ieee80211_sub_if_data *sdata, | |
57 | enum ieee80211_self_protected_actioncode action, | |
58 | u8 *da, __le16 llid, __le16 plid, __le16 reason); | |
59 | ||
60 | ||
61 | /* We only need a valid sta if user configured a minimum rssi_threshold. */ | |
62 | static bool rssi_threshold_check(struct ieee80211_sub_if_data *sdata, | |
63 | struct sta_info *sta) | |
64 | { | |
65 | s32 rssi_threshold = sdata->u.mesh.mshcfg.rssi_threshold; | |
66 | return rssi_threshold == 0 || | |
67 | (sta && (s8) -ewma_read(&sta->avg_signal) > rssi_threshold); | |
68 | } | |
69 | ||
70 | /** | |
71 | * mesh_plink_fsm_restart - restart a mesh peer link finite state machine | |
72 | * | |
73 | * @sta: mesh peer link to restart | |
74 | * | |
75 | * Locking: this function must be called holding sta->lock | |
76 | */ | |
77 | static inline void mesh_plink_fsm_restart(struct sta_info *sta) | |
78 | { | |
79 | sta->plink_state = NL80211_PLINK_LISTEN; | |
80 | sta->llid = sta->plid = sta->reason = 0; | |
81 | sta->plink_retries = 0; | |
82 | } | |
83 | ||
84 | /* | |
85 | * mesh_set_short_slot_time - enable / disable ERP short slot time. | |
86 | * | |
87 | * The standard indirectly mandates mesh STAs to turn off short slot time by | |
88 | * disallowing advertising this (802.11-2012 8.4.1.4), but that doesn't mean we | |
89 | * can't be sneaky about it. Enable short slot time if all mesh STAs in the | |
90 | * MBSS support ERP rates. | |
91 | * | |
92 | * Returns BSS_CHANGED_ERP_SLOT or 0 for no change. | |
93 | */ | |
94 | static u32 mesh_set_short_slot_time(struct ieee80211_sub_if_data *sdata) | |
95 | { | |
96 | struct ieee80211_local *local = sdata->local; | |
97 | enum ieee80211_band band = ieee80211_get_sdata_band(sdata); | |
98 | struct ieee80211_supported_band *sband = local->hw.wiphy->bands[band]; | |
99 | struct sta_info *sta; | |
100 | u32 erp_rates = 0, changed = 0; | |
101 | int i; | |
102 | bool short_slot = false; | |
103 | ||
104 | if (band == IEEE80211_BAND_5GHZ) { | |
105 | /* (IEEE 802.11-2012 19.4.5) */ | |
106 | short_slot = true; | |
107 | goto out; | |
108 | } else if (band != IEEE80211_BAND_2GHZ || | |
109 | (band == IEEE80211_BAND_2GHZ && | |
110 | local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
111 | goto out; | |
112 | ||
113 | for (i = 0; i < sband->n_bitrates; i++) | |
114 | if (sband->bitrates[i].flags & IEEE80211_RATE_ERP_G) | |
115 | erp_rates |= BIT(i); | |
116 | ||
117 | if (!erp_rates) | |
118 | goto out; | |
119 | ||
120 | rcu_read_lock(); | |
121 | list_for_each_entry_rcu(sta, &local->sta_list, list) { | |
122 | if (sdata != sta->sdata || | |
123 | sta->plink_state != NL80211_PLINK_ESTAB) | |
124 | continue; | |
125 | ||
126 | short_slot = false; | |
127 | if (erp_rates & sta->sta.supp_rates[band]) | |
128 | short_slot = true; | |
129 | else | |
130 | break; | |
131 | } | |
132 | rcu_read_unlock(); | |
133 | ||
134 | out: | |
135 | if (sdata->vif.bss_conf.use_short_slot != short_slot) { | |
136 | sdata->vif.bss_conf.use_short_slot = short_slot; | |
137 | changed = BSS_CHANGED_ERP_SLOT; | |
138 | mpl_dbg(sdata, "mesh_plink %pM: ERP short slot time %d\n", | |
139 | sdata->vif.addr, short_slot); | |
140 | } | |
141 | return changed; | |
142 | } | |
143 | ||
144 | /** | |
145 | * mesh_set_ht_prot_mode - set correct HT protection mode | |
146 | * | |
147 | * Section 9.23.3.5 of IEEE 80211-2012 describes the protection rules for HT | |
148 | * mesh STA in a MBSS. Three HT protection modes are supported for now, non-HT | |
149 | * mixed mode, 20MHz-protection and no-protection mode. non-HT mixed mode is | |
150 | * selected if any non-HT peers are present in our MBSS. 20MHz-protection mode | |
151 | * is selected if all peers in our 20/40MHz MBSS support HT and atleast one | |
152 | * HT20 peer is present. Otherwise no-protection mode is selected. | |
153 | */ | |
154 | static u32 mesh_set_ht_prot_mode(struct ieee80211_sub_if_data *sdata) | |
155 | { | |
156 | struct ieee80211_local *local = sdata->local; | |
157 | struct sta_info *sta; | |
158 | u16 ht_opmode; | |
159 | bool non_ht_sta = false, ht20_sta = false; | |
160 | ||
161 | switch (sdata->vif.bss_conf.chandef.width) { | |
162 | case NL80211_CHAN_WIDTH_20_NOHT: | |
163 | case NL80211_CHAN_WIDTH_5: | |
164 | case NL80211_CHAN_WIDTH_10: | |
165 | return 0; | |
166 | default: | |
167 | break; | |
168 | } | |
169 | ||
170 | rcu_read_lock(); | |
171 | list_for_each_entry_rcu(sta, &local->sta_list, list) { | |
172 | if (sdata != sta->sdata || | |
173 | sta->plink_state != NL80211_PLINK_ESTAB) | |
174 | continue; | |
175 | ||
176 | if (sta->sta.bandwidth > IEEE80211_STA_RX_BW_20) | |
177 | continue; | |
178 | ||
179 | if (!sta->sta.ht_cap.ht_supported) { | |
180 | mpl_dbg(sdata, "nonHT sta (%pM) is present\n", | |
181 | sta->sta.addr); | |
182 | non_ht_sta = true; | |
183 | break; | |
184 | } | |
185 | ||
186 | mpl_dbg(sdata, "HT20 sta (%pM) is present\n", sta->sta.addr); | |
187 | ht20_sta = true; | |
188 | } | |
189 | rcu_read_unlock(); | |
190 | ||
191 | if (non_ht_sta) | |
192 | ht_opmode = IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED; | |
193 | else if (ht20_sta && | |
194 | sdata->vif.bss_conf.chandef.width > NL80211_CHAN_WIDTH_20) | |
195 | ht_opmode = IEEE80211_HT_OP_MODE_PROTECTION_20MHZ; | |
196 | else | |
197 | ht_opmode = IEEE80211_HT_OP_MODE_PROTECTION_NONE; | |
198 | ||
199 | if (sdata->vif.bss_conf.ht_operation_mode == ht_opmode) | |
200 | return 0; | |
201 | ||
202 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; | |
203 | sdata->u.mesh.mshcfg.ht_opmode = ht_opmode; | |
204 | mpl_dbg(sdata, "selected new HT protection mode %d\n", ht_opmode); | |
205 | return BSS_CHANGED_HT; | |
206 | } | |
207 | ||
208 | /** | |
209 | * __mesh_plink_deactivate - deactivate mesh peer link | |
210 | * | |
211 | * @sta: mesh peer link to deactivate | |
212 | * | |
213 | * All mesh paths with this peer as next hop will be flushed | |
214 | * Returns beacon changed flag if the beacon content changed. | |
215 | * | |
216 | * Locking: the caller must hold sta->lock | |
217 | */ | |
218 | static u32 __mesh_plink_deactivate(struct sta_info *sta) | |
219 | { | |
220 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
221 | u32 changed = 0; | |
222 | ||
223 | if (sta->plink_state == NL80211_PLINK_ESTAB) | |
224 | changed = mesh_plink_dec_estab_count(sdata); | |
225 | sta->plink_state = NL80211_PLINK_BLOCKED; | |
226 | mesh_path_flush_by_nexthop(sta); | |
227 | ||
228 | ieee80211_mps_sta_status_update(sta); | |
229 | changed |= ieee80211_mps_set_sta_local_pm(sta, | |
230 | NL80211_MESH_POWER_UNKNOWN); | |
231 | ||
232 | return changed; | |
233 | } | |
234 | ||
235 | /** | |
236 | * mesh_plink_deactivate - deactivate mesh peer link | |
237 | * | |
238 | * @sta: mesh peer link to deactivate | |
239 | * | |
240 | * All mesh paths with this peer as next hop will be flushed | |
241 | */ | |
242 | u32 mesh_plink_deactivate(struct sta_info *sta) | |
243 | { | |
244 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
245 | u32 changed; | |
246 | ||
247 | spin_lock_bh(&sta->lock); | |
248 | changed = __mesh_plink_deactivate(sta); | |
249 | sta->reason = cpu_to_le16(WLAN_REASON_MESH_PEER_CANCELED); | |
250 | mesh_plink_frame_tx(sdata, WLAN_SP_MESH_PEERING_CLOSE, | |
251 | sta->sta.addr, sta->llid, sta->plid, | |
252 | sta->reason); | |
253 | spin_unlock_bh(&sta->lock); | |
254 | ||
255 | return changed; | |
256 | } | |
257 | ||
258 | static int mesh_plink_frame_tx(struct ieee80211_sub_if_data *sdata, | |
259 | enum ieee80211_self_protected_actioncode action, | |
260 | u8 *da, __le16 llid, __le16 plid, __le16 reason) | |
261 | { | |
262 | struct ieee80211_local *local = sdata->local; | |
263 | struct sk_buff *skb; | |
264 | struct ieee80211_tx_info *info; | |
265 | struct ieee80211_mgmt *mgmt; | |
266 | bool include_plid = false; | |
267 | u16 peering_proto = 0; | |
268 | u8 *pos, ie_len = 4; | |
269 | int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.self_prot) + | |
270 | sizeof(mgmt->u.action.u.self_prot); | |
271 | int err = -ENOMEM; | |
272 | ||
273 | skb = dev_alloc_skb(local->tx_headroom + | |
274 | hdr_len + | |
275 | 2 + /* capability info */ | |
276 | 2 + /* AID */ | |
277 | 2 + 8 + /* supported rates */ | |
278 | 2 + (IEEE80211_MAX_SUPP_RATES - 8) + | |
279 | 2 + sdata->u.mesh.mesh_id_len + | |
280 | 2 + sizeof(struct ieee80211_meshconf_ie) + | |
281 | 2 + sizeof(struct ieee80211_ht_cap) + | |
282 | 2 + sizeof(struct ieee80211_ht_operation) + | |
283 | 2 + 8 + /* peering IE */ | |
284 | sdata->u.mesh.ie_len); | |
285 | if (!skb) | |
286 | return err; | |
287 | info = IEEE80211_SKB_CB(skb); | |
288 | skb_reserve(skb, local->tx_headroom); | |
289 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, hdr_len); | |
290 | memset(mgmt, 0, hdr_len); | |
291 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
292 | IEEE80211_STYPE_ACTION); | |
293 | memcpy(mgmt->da, da, ETH_ALEN); | |
294 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); | |
295 | memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); | |
296 | mgmt->u.action.category = WLAN_CATEGORY_SELF_PROTECTED; | |
297 | mgmt->u.action.u.self_prot.action_code = action; | |
298 | ||
299 | if (action != WLAN_SP_MESH_PEERING_CLOSE) { | |
300 | enum ieee80211_band band = ieee80211_get_sdata_band(sdata); | |
301 | ||
302 | /* capability info */ | |
303 | pos = skb_put(skb, 2); | |
304 | memset(pos, 0, 2); | |
305 | if (action == WLAN_SP_MESH_PEERING_CONFIRM) { | |
306 | /* AID */ | |
307 | pos = skb_put(skb, 2); | |
308 | memcpy(pos + 2, &plid, 2); | |
309 | } | |
310 | if (ieee80211_add_srates_ie(sdata, skb, true, band) || | |
311 | ieee80211_add_ext_srates_ie(sdata, skb, true, band) || | |
312 | mesh_add_rsn_ie(sdata, skb) || | |
313 | mesh_add_meshid_ie(sdata, skb) || | |
314 | mesh_add_meshconf_ie(sdata, skb)) | |
315 | goto free; | |
316 | } else { /* WLAN_SP_MESH_PEERING_CLOSE */ | |
317 | info->flags |= IEEE80211_TX_CTL_NO_ACK; | |
318 | if (mesh_add_meshid_ie(sdata, skb)) | |
319 | goto free; | |
320 | } | |
321 | ||
322 | /* Add Mesh Peering Management element */ | |
323 | switch (action) { | |
324 | case WLAN_SP_MESH_PEERING_OPEN: | |
325 | break; | |
326 | case WLAN_SP_MESH_PEERING_CONFIRM: | |
327 | ie_len += 2; | |
328 | include_plid = true; | |
329 | break; | |
330 | case WLAN_SP_MESH_PEERING_CLOSE: | |
331 | if (plid) { | |
332 | ie_len += 2; | |
333 | include_plid = true; | |
334 | } | |
335 | ie_len += 2; /* reason code */ | |
336 | break; | |
337 | default: | |
338 | err = -EINVAL; | |
339 | goto free; | |
340 | } | |
341 | ||
342 | if (WARN_ON(skb_tailroom(skb) < 2 + ie_len)) | |
343 | goto free; | |
344 | ||
345 | pos = skb_put(skb, 2 + ie_len); | |
346 | *pos++ = WLAN_EID_PEER_MGMT; | |
347 | *pos++ = ie_len; | |
348 | memcpy(pos, &peering_proto, 2); | |
349 | pos += 2; | |
350 | memcpy(pos, &llid, 2); | |
351 | pos += 2; | |
352 | if (include_plid) { | |
353 | memcpy(pos, &plid, 2); | |
354 | pos += 2; | |
355 | } | |
356 | if (action == WLAN_SP_MESH_PEERING_CLOSE) { | |
357 | memcpy(pos, &reason, 2); | |
358 | pos += 2; | |
359 | } | |
360 | ||
361 | if (action != WLAN_SP_MESH_PEERING_CLOSE) { | |
362 | if (mesh_add_ht_cap_ie(sdata, skb) || | |
363 | mesh_add_ht_oper_ie(sdata, skb)) | |
364 | goto free; | |
365 | } | |
366 | ||
367 | if (mesh_add_vendor_ies(sdata, skb)) | |
368 | goto free; | |
369 | ||
370 | ieee80211_tx_skb(sdata, skb); | |
371 | return 0; | |
372 | free: | |
373 | kfree_skb(skb); | |
374 | return err; | |
375 | } | |
376 | ||
377 | static void mesh_sta_info_init(struct ieee80211_sub_if_data *sdata, | |
378 | struct sta_info *sta, | |
379 | struct ieee802_11_elems *elems, bool insert) | |
380 | { | |
381 | struct ieee80211_local *local = sdata->local; | |
382 | enum ieee80211_band band = ieee80211_get_sdata_band(sdata); | |
383 | struct ieee80211_supported_band *sband; | |
384 | u32 rates, basic_rates = 0, changed = 0; | |
385 | ||
386 | sband = local->hw.wiphy->bands[band]; | |
387 | rates = ieee80211_sta_get_rates(sdata, elems, band, &basic_rates); | |
388 | ||
389 | spin_lock_bh(&sta->lock); | |
390 | sta->last_rx = jiffies; | |
391 | ||
392 | /* rates and capabilities don't change during peering */ | |
393 | if (sta->plink_state == NL80211_PLINK_ESTAB) | |
394 | goto out; | |
395 | ||
396 | if (sta->sta.supp_rates[band] != rates) | |
397 | changed |= IEEE80211_RC_SUPP_RATES_CHANGED; | |
398 | sta->sta.supp_rates[band] = rates; | |
399 | ||
400 | if (ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband, | |
401 | elems->ht_cap_elem, sta)) | |
402 | changed |= IEEE80211_RC_BW_CHANGED; | |
403 | ||
404 | /* HT peer is operating 20MHz-only */ | |
405 | if (elems->ht_operation && | |
406 | !(elems->ht_operation->ht_param & | |
407 | IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
408 | if (sta->sta.bandwidth != IEEE80211_STA_RX_BW_20) | |
409 | changed |= IEEE80211_RC_BW_CHANGED; | |
410 | sta->sta.bandwidth = IEEE80211_STA_RX_BW_20; | |
411 | } | |
412 | ||
413 | if (insert) | |
414 | rate_control_rate_init(sta); | |
415 | else | |
416 | rate_control_rate_update(local, sband, sta, changed); | |
417 | out: | |
418 | spin_unlock_bh(&sta->lock); | |
419 | } | |
420 | ||
421 | static struct sta_info * | |
422 | __mesh_sta_info_alloc(struct ieee80211_sub_if_data *sdata, u8 *hw_addr) | |
423 | { | |
424 | struct sta_info *sta; | |
425 | ||
426 | if (sdata->local->num_sta >= MESH_MAX_PLINKS) | |
427 | return NULL; | |
428 | ||
429 | sta = sta_info_alloc(sdata, hw_addr, GFP_KERNEL); | |
430 | if (!sta) | |
431 | return NULL; | |
432 | ||
433 | sta->plink_state = NL80211_PLINK_LISTEN; | |
434 | ||
435 | sta_info_pre_move_state(sta, IEEE80211_STA_AUTH); | |
436 | sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC); | |
437 | sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED); | |
438 | ||
439 | set_sta_flag(sta, WLAN_STA_WME); | |
440 | ||
441 | return sta; | |
442 | } | |
443 | ||
444 | static struct sta_info * | |
445 | mesh_sta_info_alloc(struct ieee80211_sub_if_data *sdata, u8 *addr, | |
446 | struct ieee802_11_elems *elems) | |
447 | { | |
448 | struct sta_info *sta = NULL; | |
449 | ||
450 | /* Userspace handles station allocation */ | |
451 | if (sdata->u.mesh.user_mpm || | |
452 | sdata->u.mesh.security & IEEE80211_MESH_SEC_AUTHED) | |
453 | cfg80211_notify_new_peer_candidate(sdata->dev, addr, | |
454 | elems->ie_start, | |
455 | elems->total_len, | |
456 | GFP_KERNEL); | |
457 | else | |
458 | sta = __mesh_sta_info_alloc(sdata, addr); | |
459 | ||
460 | return sta; | |
461 | } | |
462 | ||
463 | /* | |
464 | * mesh_sta_info_get - return mesh sta info entry for @addr. | |
465 | * | |
466 | * @sdata: local meshif | |
467 | * @addr: peer's address | |
468 | * @elems: IEs from beacon or mesh peering frame. | |
469 | * | |
470 | * Return existing or newly allocated sta_info under RCU read lock. | |
471 | * (re)initialize with given IEs. | |
472 | */ | |
473 | static struct sta_info * | |
474 | mesh_sta_info_get(struct ieee80211_sub_if_data *sdata, | |
475 | u8 *addr, struct ieee802_11_elems *elems) __acquires(RCU) | |
476 | { | |
477 | struct sta_info *sta = NULL; | |
478 | ||
479 | rcu_read_lock(); | |
480 | sta = sta_info_get(sdata, addr); | |
481 | if (sta) { | |
482 | mesh_sta_info_init(sdata, sta, elems, false); | |
483 | } else { | |
484 | rcu_read_unlock(); | |
485 | /* can't run atomic */ | |
486 | sta = mesh_sta_info_alloc(sdata, addr, elems); | |
487 | if (!sta) { | |
488 | rcu_read_lock(); | |
489 | return NULL; | |
490 | } | |
491 | ||
492 | mesh_sta_info_init(sdata, sta, elems, true); | |
493 | ||
494 | if (sta_info_insert_rcu(sta)) | |
495 | return NULL; | |
496 | } | |
497 | ||
498 | return sta; | |
499 | } | |
500 | ||
501 | /* | |
502 | * mesh_neighbour_update - update or initialize new mesh neighbor. | |
503 | * | |
504 | * @sdata: local meshif | |
505 | * @addr: peer's address | |
506 | * @elems: IEs from beacon or mesh peering frame | |
507 | * | |
508 | * Initiates peering if appropriate. | |
509 | */ | |
510 | void mesh_neighbour_update(struct ieee80211_sub_if_data *sdata, | |
511 | u8 *hw_addr, | |
512 | struct ieee802_11_elems *elems) | |
513 | { | |
514 | struct sta_info *sta; | |
515 | u32 changed = 0; | |
516 | ||
517 | sta = mesh_sta_info_get(sdata, hw_addr, elems); | |
518 | if (!sta) | |
519 | goto out; | |
520 | ||
521 | if (mesh_peer_accepts_plinks(elems) && | |
522 | sta->plink_state == NL80211_PLINK_LISTEN && | |
523 | sdata->u.mesh.accepting_plinks && | |
524 | sdata->u.mesh.mshcfg.auto_open_plinks && | |
525 | rssi_threshold_check(sdata, sta)) | |
526 | changed = mesh_plink_open(sta); | |
527 | ||
528 | ieee80211_mps_frame_release(sta, elems); | |
529 | out: | |
530 | rcu_read_unlock(); | |
531 | ieee80211_mbss_info_change_notify(sdata, changed); | |
532 | } | |
533 | ||
534 | static void mesh_plink_timer(unsigned long data) | |
535 | { | |
536 | struct sta_info *sta; | |
537 | __le16 llid, plid, reason; | |
538 | struct ieee80211_sub_if_data *sdata; | |
539 | struct mesh_config *mshcfg; | |
540 | enum ieee80211_self_protected_actioncode action = 0; | |
541 | ||
542 | /* | |
543 | * This STA is valid because sta_info_destroy() will | |
544 | * del_timer_sync() this timer after having made sure | |
545 | * it cannot be readded (by deleting the plink.) | |
546 | */ | |
547 | sta = (struct sta_info *) data; | |
548 | ||
549 | if (sta->sdata->local->quiescing) | |
550 | return; | |
551 | ||
552 | spin_lock_bh(&sta->lock); | |
553 | if (sta->ignore_plink_timer) { | |
554 | sta->ignore_plink_timer = false; | |
555 | spin_unlock_bh(&sta->lock); | |
556 | return; | |
557 | } | |
558 | mpl_dbg(sta->sdata, | |
559 | "Mesh plink timer for %pM fired on state %s\n", | |
560 | sta->sta.addr, mplstates[sta->plink_state]); | |
561 | reason = 0; | |
562 | llid = sta->llid; | |
563 | plid = sta->plid; | |
564 | sdata = sta->sdata; | |
565 | mshcfg = &sdata->u.mesh.mshcfg; | |
566 | ||
567 | switch (sta->plink_state) { | |
568 | case NL80211_PLINK_OPN_RCVD: | |
569 | case NL80211_PLINK_OPN_SNT: | |
570 | /* retry timer */ | |
571 | if (sta->plink_retries < mshcfg->dot11MeshMaxRetries) { | |
572 | u32 rand; | |
573 | mpl_dbg(sta->sdata, | |
574 | "Mesh plink for %pM (retry, timeout): %d %d\n", | |
575 | sta->sta.addr, sta->plink_retries, | |
576 | sta->plink_timeout); | |
577 | get_random_bytes(&rand, sizeof(u32)); | |
578 | sta->plink_timeout = sta->plink_timeout + | |
579 | rand % sta->plink_timeout; | |
580 | ++sta->plink_retries; | |
581 | mod_plink_timer(sta, sta->plink_timeout); | |
582 | action = WLAN_SP_MESH_PEERING_OPEN; | |
583 | break; | |
584 | } | |
585 | reason = cpu_to_le16(WLAN_REASON_MESH_MAX_RETRIES); | |
586 | /* fall through on else */ | |
587 | case NL80211_PLINK_CNF_RCVD: | |
588 | /* confirm timer */ | |
589 | if (!reason) | |
590 | reason = cpu_to_le16(WLAN_REASON_MESH_CONFIRM_TIMEOUT); | |
591 | sta->plink_state = NL80211_PLINK_HOLDING; | |
592 | mod_plink_timer(sta, mshcfg->dot11MeshHoldingTimeout); | |
593 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
594 | break; | |
595 | case NL80211_PLINK_HOLDING: | |
596 | /* holding timer */ | |
597 | del_timer(&sta->plink_timer); | |
598 | mesh_plink_fsm_restart(sta); | |
599 | break; | |
600 | default: | |
601 | break; | |
602 | } | |
603 | spin_unlock_bh(&sta->lock); | |
604 | if (action) | |
605 | mesh_plink_frame_tx(sdata, action, sta->sta.addr, | |
606 | llid, plid, reason); | |
607 | } | |
608 | ||
609 | static inline void mesh_plink_timer_set(struct sta_info *sta, int timeout) | |
610 | { | |
611 | sta->plink_timer.expires = jiffies + (HZ * timeout / 1000); | |
612 | sta->plink_timer.data = (unsigned long) sta; | |
613 | sta->plink_timer.function = mesh_plink_timer; | |
614 | sta->plink_timeout = timeout; | |
615 | add_timer(&sta->plink_timer); | |
616 | } | |
617 | ||
618 | u32 mesh_plink_open(struct sta_info *sta) | |
619 | { | |
620 | __le16 llid; | |
621 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
622 | u32 changed; | |
623 | ||
624 | if (!test_sta_flag(sta, WLAN_STA_AUTH)) | |
625 | return 0; | |
626 | ||
627 | spin_lock_bh(&sta->lock); | |
628 | get_random_bytes(&llid, 2); | |
629 | sta->llid = llid; | |
630 | if (sta->plink_state != NL80211_PLINK_LISTEN && | |
631 | sta->plink_state != NL80211_PLINK_BLOCKED) { | |
632 | spin_unlock_bh(&sta->lock); | |
633 | return 0; | |
634 | } | |
635 | sta->plink_state = NL80211_PLINK_OPN_SNT; | |
636 | mesh_plink_timer_set(sta, sdata->u.mesh.mshcfg.dot11MeshRetryTimeout); | |
637 | spin_unlock_bh(&sta->lock); | |
638 | mpl_dbg(sdata, | |
639 | "Mesh plink: starting establishment with %pM\n", | |
640 | sta->sta.addr); | |
641 | ||
642 | /* set the non-peer mode to active during peering */ | |
643 | changed = ieee80211_mps_local_status_update(sdata); | |
644 | ||
645 | mesh_plink_frame_tx(sdata, WLAN_SP_MESH_PEERING_OPEN, | |
646 | sta->sta.addr, llid, 0, 0); | |
647 | return changed; | |
648 | } | |
649 | ||
650 | u32 mesh_plink_block(struct sta_info *sta) | |
651 | { | |
652 | u32 changed; | |
653 | ||
654 | spin_lock_bh(&sta->lock); | |
655 | changed = __mesh_plink_deactivate(sta); | |
656 | sta->plink_state = NL80211_PLINK_BLOCKED; | |
657 | spin_unlock_bh(&sta->lock); | |
658 | ||
659 | return changed; | |
660 | } | |
661 | ||
662 | static void mesh_plink_close(struct ieee80211_sub_if_data *sdata, | |
663 | struct sta_info *sta, | |
664 | enum plink_event event) | |
665 | { | |
666 | struct mesh_config *mshcfg = &sdata->u.mesh.mshcfg; | |
667 | ||
668 | __le16 reason = (event == CLS_ACPT) ? | |
669 | cpu_to_le16(WLAN_REASON_MESH_CLOSE) : | |
670 | cpu_to_le16(WLAN_REASON_MESH_CONFIG); | |
671 | ||
672 | sta->reason = reason; | |
673 | sta->plink_state = NL80211_PLINK_HOLDING; | |
674 | mod_plink_timer(sta, mshcfg->dot11MeshHoldingTimeout); | |
675 | } | |
676 | ||
677 | static u32 mesh_plink_establish(struct ieee80211_sub_if_data *sdata, | |
678 | struct sta_info *sta) | |
679 | { | |
680 | struct mesh_config *mshcfg = &sdata->u.mesh.mshcfg; | |
681 | u32 changed = 0; | |
682 | ||
683 | del_timer(&sta->plink_timer); | |
684 | sta->plink_state = NL80211_PLINK_ESTAB; | |
685 | changed |= mesh_plink_inc_estab_count(sdata); | |
686 | changed |= mesh_set_ht_prot_mode(sdata); | |
687 | changed |= mesh_set_short_slot_time(sdata); | |
688 | mpl_dbg(sdata, "Mesh plink with %pM ESTABLISHED\n", sta->sta.addr); | |
689 | ieee80211_mps_sta_status_update(sta); | |
690 | changed |= ieee80211_mps_set_sta_local_pm(sta, mshcfg->power_mode); | |
691 | return changed; | |
692 | } | |
693 | ||
694 | static void | |
695 | mesh_process_plink_frame(struct ieee80211_sub_if_data *sdata, | |
696 | struct ieee80211_mgmt *mgmt, | |
697 | struct ieee802_11_elems *elems) | |
698 | { | |
699 | ||
700 | struct mesh_config *mshcfg = &sdata->u.mesh.mshcfg; | |
701 | enum ieee80211_self_protected_actioncode action = 0; | |
702 | struct sta_info *sta; | |
703 | enum plink_event event; | |
704 | enum ieee80211_self_protected_actioncode ftype; | |
705 | bool matches_local; | |
706 | u32 changed = 0; | |
707 | u8 ie_len; | |
708 | __le16 plid, llid; | |
709 | ||
710 | if (!elems->peering) { | |
711 | mpl_dbg(sdata, | |
712 | "Mesh plink: missing necessary peer link ie\n"); | |
713 | return; | |
714 | } | |
715 | ||
716 | if (elems->rsn_len && | |
717 | sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE) { | |
718 | mpl_dbg(sdata, | |
719 | "Mesh plink: can't establish link with secure peer\n"); | |
720 | return; | |
721 | } | |
722 | ||
723 | ftype = mgmt->u.action.u.self_prot.action_code; | |
724 | ie_len = elems->peering_len; | |
725 | if ((ftype == WLAN_SP_MESH_PEERING_OPEN && ie_len != 4) || | |
726 | (ftype == WLAN_SP_MESH_PEERING_CONFIRM && ie_len != 6) || | |
727 | (ftype == WLAN_SP_MESH_PEERING_CLOSE && ie_len != 6 | |
728 | && ie_len != 8)) { | |
729 | mpl_dbg(sdata, | |
730 | "Mesh plink: incorrect plink ie length %d %d\n", | |
731 | ftype, ie_len); | |
732 | return; | |
733 | } | |
734 | ||
735 | if (ftype != WLAN_SP_MESH_PEERING_CLOSE && | |
736 | (!elems->mesh_id || !elems->mesh_config)) { | |
737 | mpl_dbg(sdata, "Mesh plink: missing necessary ie\n"); | |
738 | return; | |
739 | } | |
740 | /* Note the lines below are correct, the llid in the frame is the plid | |
741 | * from the point of view of this host. | |
742 | */ | |
743 | memcpy(&plid, PLINK_GET_LLID(elems->peering), 2); | |
744 | if (ftype == WLAN_SP_MESH_PEERING_CONFIRM || | |
745 | (ftype == WLAN_SP_MESH_PEERING_CLOSE && ie_len == 8)) | |
746 | memcpy(&llid, PLINK_GET_PLID(elems->peering), 2); | |
747 | ||
748 | /* WARNING: Only for sta pointer, is dropped & re-acquired */ | |
749 | rcu_read_lock(); | |
750 | ||
751 | sta = sta_info_get(sdata, mgmt->sa); | |
752 | ||
753 | matches_local = (ftype == WLAN_SP_MESH_PEERING_CLOSE || | |
754 | mesh_matches_local(sdata, elems)); | |
755 | ||
756 | if (ftype == WLAN_SP_MESH_PEERING_OPEN && | |
757 | !rssi_threshold_check(sdata, sta)) { | |
758 | mpl_dbg(sdata, "Mesh plink: %pM does not meet rssi threshold\n", | |
759 | mgmt->sa); | |
760 | rcu_read_unlock(); | |
761 | return; | |
762 | } | |
763 | ||
764 | if (!sta) { | |
765 | if (ftype != WLAN_SP_MESH_PEERING_OPEN) { | |
766 | mpl_dbg(sdata, "Mesh plink: cls or cnf from unknown peer\n"); | |
767 | rcu_read_unlock(); | |
768 | return; | |
769 | } | |
770 | /* ftype == WLAN_SP_MESH_PEERING_OPEN */ | |
771 | if (!mesh_plink_free_count(sdata)) { | |
772 | mpl_dbg(sdata, "Mesh plink error: no more free plinks\n"); | |
773 | rcu_read_unlock(); | |
774 | return; | |
775 | } | |
776 | /* deny open request from non-matching peer */ | |
777 | if (!matches_local) { | |
778 | rcu_read_unlock(); | |
779 | mesh_plink_frame_tx(sdata, WLAN_SP_MESH_PEERING_CLOSE, | |
780 | mgmt->sa, 0, plid, | |
781 | cpu_to_le16(WLAN_REASON_MESH_CONFIG)); | |
782 | return; | |
783 | } | |
784 | } else { | |
785 | if (!test_sta_flag(sta, WLAN_STA_AUTH)) { | |
786 | mpl_dbg(sdata, "Mesh plink: Action frame from non-authed peer\n"); | |
787 | rcu_read_unlock(); | |
788 | return; | |
789 | } | |
790 | if (sta->plink_state == NL80211_PLINK_BLOCKED) { | |
791 | rcu_read_unlock(); | |
792 | return; | |
793 | } | |
794 | } | |
795 | ||
796 | /* Now we will figure out the appropriate event... */ | |
797 | event = PLINK_UNDEFINED; | |
798 | ||
799 | if (!sta) | |
800 | event = OPN_ACPT; | |
801 | else { | |
802 | switch (ftype) { | |
803 | case WLAN_SP_MESH_PEERING_OPEN: | |
804 | if (!matches_local) | |
805 | event = OPN_RJCT; | |
806 | else if (!mesh_plink_free_count(sdata) || | |
807 | (sta->plid && sta->plid != plid)) | |
808 | event = OPN_IGNR; | |
809 | else | |
810 | event = OPN_ACPT; | |
811 | break; | |
812 | case WLAN_SP_MESH_PEERING_CONFIRM: | |
813 | if (!matches_local) | |
814 | event = CNF_RJCT; | |
815 | else if (!mesh_plink_free_count(sdata) || | |
816 | (sta->llid != llid || sta->plid != plid)) | |
817 | event = CNF_IGNR; | |
818 | else | |
819 | event = CNF_ACPT; | |
820 | break; | |
821 | case WLAN_SP_MESH_PEERING_CLOSE: | |
822 | if (sta->plink_state == NL80211_PLINK_ESTAB) | |
823 | /* Do not check for llid or plid. This does not | |
824 | * follow the standard but since multiple plinks | |
825 | * per sta are not supported, it is necessary in | |
826 | * order to avoid a livelock when MP A sees an | |
827 | * establish peer link to MP B but MP B does not | |
828 | * see it. This can be caused by a timeout in | |
829 | * B's peer link establishment or B beign | |
830 | * restarted. | |
831 | */ | |
832 | event = CLS_ACPT; | |
833 | else if (sta->plid != plid) | |
834 | event = CLS_IGNR; | |
835 | else if (ie_len == 8 && sta->llid != llid) | |
836 | event = CLS_IGNR; | |
837 | else | |
838 | event = CLS_ACPT; | |
839 | break; | |
840 | default: | |
841 | mpl_dbg(sdata, "Mesh plink: unknown frame subtype\n"); | |
842 | rcu_read_unlock(); | |
843 | return; | |
844 | } | |
845 | } | |
846 | ||
847 | if (event == OPN_ACPT) { | |
848 | rcu_read_unlock(); | |
849 | /* allocate sta entry if necessary and update info */ | |
850 | sta = mesh_sta_info_get(sdata, mgmt->sa, elems); | |
851 | if (!sta) { | |
852 | mpl_dbg(sdata, "Mesh plink: failed to init peer!\n"); | |
853 | rcu_read_unlock(); | |
854 | return; | |
855 | } | |
856 | } | |
857 | ||
858 | mpl_dbg(sdata, "peer %pM in state %s got event %s\n", mgmt->sa, | |
859 | mplstates[sta->plink_state], mplevents[event]); | |
860 | spin_lock_bh(&sta->lock); | |
861 | switch (sta->plink_state) { | |
862 | case NL80211_PLINK_LISTEN: | |
863 | switch (event) { | |
864 | case CLS_ACPT: | |
865 | mesh_plink_fsm_restart(sta); | |
866 | break; | |
867 | case OPN_ACPT: | |
868 | sta->plink_state = NL80211_PLINK_OPN_RCVD; | |
869 | sta->plid = plid; | |
870 | get_random_bytes(&llid, 2); | |
871 | sta->llid = llid; | |
872 | mesh_plink_timer_set(sta, | |
873 | mshcfg->dot11MeshRetryTimeout); | |
874 | ||
875 | /* set the non-peer mode to active during peering */ | |
876 | changed |= ieee80211_mps_local_status_update(sdata); | |
877 | ||
878 | action = WLAN_SP_MESH_PEERING_OPEN; | |
879 | break; | |
880 | default: | |
881 | break; | |
882 | } | |
883 | break; | |
884 | ||
885 | case NL80211_PLINK_OPN_SNT: | |
886 | switch (event) { | |
887 | case OPN_RJCT: | |
888 | case CNF_RJCT: | |
889 | case CLS_ACPT: | |
890 | mesh_plink_close(sdata, sta, event); | |
891 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
892 | break; | |
893 | ||
894 | case OPN_ACPT: | |
895 | /* retry timer is left untouched */ | |
896 | sta->plink_state = NL80211_PLINK_OPN_RCVD; | |
897 | sta->plid = plid; | |
898 | action = WLAN_SP_MESH_PEERING_CONFIRM; | |
899 | break; | |
900 | case CNF_ACPT: | |
901 | sta->plink_state = NL80211_PLINK_CNF_RCVD; | |
902 | if (!mod_plink_timer(sta, | |
903 | mshcfg->dot11MeshConfirmTimeout)) | |
904 | sta->ignore_plink_timer = true; | |
905 | ||
906 | break; | |
907 | default: | |
908 | break; | |
909 | } | |
910 | break; | |
911 | ||
912 | case NL80211_PLINK_OPN_RCVD: | |
913 | switch (event) { | |
914 | case OPN_RJCT: | |
915 | case CNF_RJCT: | |
916 | case CLS_ACPT: | |
917 | mesh_plink_close(sdata, sta, event); | |
918 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
919 | break; | |
920 | case OPN_ACPT: | |
921 | action = WLAN_SP_MESH_PEERING_CONFIRM; | |
922 | break; | |
923 | case CNF_ACPT: | |
924 | changed |= mesh_plink_establish(sdata, sta); | |
925 | break; | |
926 | default: | |
927 | break; | |
928 | } | |
929 | break; | |
930 | ||
931 | case NL80211_PLINK_CNF_RCVD: | |
932 | switch (event) { | |
933 | case OPN_RJCT: | |
934 | case CNF_RJCT: | |
935 | case CLS_ACPT: | |
936 | mesh_plink_close(sdata, sta, event); | |
937 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
938 | break; | |
939 | case OPN_ACPT: | |
940 | changed |= mesh_plink_establish(sdata, sta); | |
941 | action = WLAN_SP_MESH_PEERING_CONFIRM; | |
942 | break; | |
943 | default: | |
944 | break; | |
945 | } | |
946 | break; | |
947 | ||
948 | case NL80211_PLINK_ESTAB: | |
949 | switch (event) { | |
950 | case CLS_ACPT: | |
951 | changed |= __mesh_plink_deactivate(sta); | |
952 | changed |= mesh_set_ht_prot_mode(sdata); | |
953 | changed |= mesh_set_short_slot_time(sdata); | |
954 | mesh_plink_close(sdata, sta, event); | |
955 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
956 | break; | |
957 | case OPN_ACPT: | |
958 | action = WLAN_SP_MESH_PEERING_CONFIRM; | |
959 | break; | |
960 | default: | |
961 | break; | |
962 | } | |
963 | break; | |
964 | case NL80211_PLINK_HOLDING: | |
965 | switch (event) { | |
966 | case CLS_ACPT: | |
967 | if (del_timer(&sta->plink_timer)) | |
968 | sta->ignore_plink_timer = 1; | |
969 | mesh_plink_fsm_restart(sta); | |
970 | break; | |
971 | case OPN_ACPT: | |
972 | case CNF_ACPT: | |
973 | case OPN_RJCT: | |
974 | case CNF_RJCT: | |
975 | action = WLAN_SP_MESH_PEERING_CLOSE; | |
976 | break; | |
977 | default: | |
978 | break; | |
979 | } | |
980 | break; | |
981 | default: | |
982 | /* should not get here, PLINK_BLOCKED is dealt with at the | |
983 | * beginning of the function | |
984 | */ | |
985 | break; | |
986 | } | |
987 | spin_unlock_bh(&sta->lock); | |
988 | if (action) { | |
989 | mesh_plink_frame_tx(sdata, action, sta->sta.addr, | |
990 | sta->llid, sta->plid, sta->reason); | |
991 | ||
992 | /* also send confirm in open case */ | |
993 | if (action == WLAN_SP_MESH_PEERING_OPEN) { | |
994 | mesh_plink_frame_tx(sdata, | |
995 | WLAN_SP_MESH_PEERING_CONFIRM, | |
996 | sta->sta.addr, sta->llid, | |
997 | sta->plid, 0); | |
998 | } | |
999 | } | |
1000 | ||
1001 | rcu_read_unlock(); | |
1002 | ||
1003 | if (changed) | |
1004 | ieee80211_mbss_info_change_notify(sdata, changed); | |
1005 | } | |
1006 | ||
1007 | void mesh_rx_plink_frame(struct ieee80211_sub_if_data *sdata, | |
1008 | struct ieee80211_mgmt *mgmt, size_t len, | |
1009 | struct ieee80211_rx_status *rx_status) | |
1010 | { | |
1011 | struct ieee802_11_elems elems; | |
1012 | size_t baselen; | |
1013 | u8 *baseaddr; | |
1014 | ||
1015 | /* need action_code, aux */ | |
1016 | if (len < IEEE80211_MIN_ACTION_SIZE + 3) | |
1017 | return; | |
1018 | ||
1019 | if (sdata->u.mesh.user_mpm) | |
1020 | /* userspace must register for these */ | |
1021 | return; | |
1022 | ||
1023 | if (is_multicast_ether_addr(mgmt->da)) { | |
1024 | mpl_dbg(sdata, | |
1025 | "Mesh plink: ignore frame from multicast address\n"); | |
1026 | return; | |
1027 | } | |
1028 | ||
1029 | baseaddr = mgmt->u.action.u.self_prot.variable; | |
1030 | baselen = (u8 *) mgmt->u.action.u.self_prot.variable - (u8 *) mgmt; | |
1031 | if (mgmt->u.action.u.self_prot.action_code == | |
1032 | WLAN_SP_MESH_PEERING_CONFIRM) { | |
1033 | baseaddr += 4; | |
1034 | baselen += 4; | |
1035 | } | |
1036 | ieee802_11_parse_elems(baseaddr, len - baselen, true, &elems); | |
1037 | mesh_process_plink_frame(sdata, mgmt, &elems); | |
1038 | } |