1 // SPDX-License-Identifier: GPL-2.0
3 * Original code based Host AP (software wireless LAN access point) driver
4 * for Intersil Prism2/2.5/3 - hostap.o module, common routines
6 * Copyright (c) 2001-2002, SSH Communications Security Corp and Jouni Malinen
8 * Copyright (c) 2002-2003, Jouni Malinen <jkmaline@cc.hut.fi>
9 * Copyright (c) 2004, Intel Corporation
11 * Few modifications for Realtek's Wi-Fi drivers by
12 * Andrea Merello <andrea.merello@gmail.com>
14 * A special thanks goes to Realtek for their support !
16 #include <linux/compiler.h>
17 #include <linux/errno.h>
18 #include <linux/if_arp.h>
19 #include <linux/in6.h>
22 #include <linux/kernel.h>
23 #include <linux/module.h>
24 #include <linux/netdevice.h>
25 #include <linux/pci.h>
26 #include <linux/proc_fs.h>
27 #include <linux/skbuff.h>
28 #include <linux/slab.h>
29 #include <linux/tcp.h>
30 #include <linux/types.h>
31 #include <linux/wireless.h>
32 #include <linux/etherdevice.h>
33 #include <linux/uaccess.h>
34 #include <linux/ctype.h>
39 static void rtllib_rx_mgt(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
40 struct rtllib_rx_stats
*stats
);
42 static inline void rtllib_monitor_rx(struct rtllib_device
*ieee
,
44 struct rtllib_rx_stats
*rx_status
,
48 skb_reset_mac_header(skb
);
49 skb_pull(skb
, hdr_length
);
50 skb
->pkt_type
= PACKET_OTHERHOST
;
51 skb
->protocol
= htons(ETH_P_80211_RAW
);
52 memset(skb
->cb
, 0, sizeof(skb
->cb
));
56 /* Called only as a tasklet (software IRQ) */
57 static struct rtllib_frag_entry
*
58 rtllib_frag_cache_find(struct rtllib_device
*ieee
, unsigned int seq
,
59 unsigned int frag
, u8 tid
, u8
*src
, u8
*dst
)
61 struct rtllib_frag_entry
*entry
;
64 for (i
= 0; i
< RTLLIB_FRAG_CACHE_LEN
; i
++) {
65 entry
= &ieee
->frag_cache
[tid
][i
];
66 if (entry
->skb
!= NULL
&&
67 time_after(jiffies
, entry
->first_frag_time
+ 2 * HZ
)) {
69 "expiring fragment cache entry seq=%u last_frag=%u\n",
70 entry
->seq
, entry
->last_frag
);
71 dev_kfree_skb_any(entry
->skb
);
75 if (entry
->skb
!= NULL
&& entry
->seq
== seq
&&
76 (entry
->last_frag
+ 1 == frag
|| frag
== -1) &&
77 memcmp(entry
->src_addr
, src
, ETH_ALEN
) == 0 &&
78 memcmp(entry
->dst_addr
, dst
, ETH_ALEN
) == 0)
85 /* Called only as a tasklet (software IRQ) */
86 static struct sk_buff
*
87 rtllib_frag_cache_get(struct rtllib_device
*ieee
,
88 struct rtllib_hdr_4addr
*hdr
)
90 struct sk_buff
*skb
= NULL
;
91 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
92 u16 sc
= le16_to_cpu(hdr
->seq_ctl
);
93 unsigned int frag
= WLAN_GET_SEQ_FRAG(sc
);
94 unsigned int seq
= WLAN_GET_SEQ_SEQ(sc
);
95 struct rtllib_frag_entry
*entry
;
96 struct rtllib_hdr_3addrqos
*hdr_3addrqos
;
97 struct rtllib_hdr_4addrqos
*hdr_4addrqos
;
100 if (((fc
& RTLLIB_FCTL_DSTODS
) == RTLLIB_FCTL_DSTODS
) &&
101 RTLLIB_QOS_HAS_SEQ(fc
)) {
102 hdr_4addrqos
= (struct rtllib_hdr_4addrqos
*)hdr
;
103 tid
= le16_to_cpu(hdr_4addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
106 } else if (RTLLIB_QOS_HAS_SEQ(fc
)) {
107 hdr_3addrqos
= (struct rtllib_hdr_3addrqos
*)hdr
;
108 tid
= le16_to_cpu(hdr_3addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
116 /* Reserve enough space to fit maximum frame length */
117 skb
= dev_alloc_skb(ieee
->dev
->mtu
+
118 sizeof(struct rtllib_hdr_4addr
) +
124 (RTLLIB_QOS_HAS_SEQ(fc
) ? 2 : 0));
128 entry
= &ieee
->frag_cache
[tid
][ieee
->frag_next_idx
[tid
]];
129 ieee
->frag_next_idx
[tid
]++;
130 if (ieee
->frag_next_idx
[tid
] >= RTLLIB_FRAG_CACHE_LEN
)
131 ieee
->frag_next_idx
[tid
] = 0;
133 if (entry
->skb
!= NULL
)
134 dev_kfree_skb_any(entry
->skb
);
136 entry
->first_frag_time
= jiffies
;
138 entry
->last_frag
= frag
;
140 ether_addr_copy(entry
->src_addr
, hdr
->addr2
);
141 ether_addr_copy(entry
->dst_addr
, hdr
->addr1
);
143 /* received a fragment of a frame for which the head fragment
144 * should have already been received
146 entry
= rtllib_frag_cache_find(ieee
, seq
, frag
, tid
, hdr
->addr2
,
149 entry
->last_frag
= frag
;
158 /* Called only as a tasklet (software IRQ) */
159 static int rtllib_frag_cache_invalidate(struct rtllib_device
*ieee
,
160 struct rtllib_hdr_4addr
*hdr
)
162 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
163 u16 sc
= le16_to_cpu(hdr
->seq_ctl
);
164 unsigned int seq
= WLAN_GET_SEQ_SEQ(sc
);
165 struct rtllib_frag_entry
*entry
;
166 struct rtllib_hdr_3addrqos
*hdr_3addrqos
;
167 struct rtllib_hdr_4addrqos
*hdr_4addrqos
;
170 if (((fc
& RTLLIB_FCTL_DSTODS
) == RTLLIB_FCTL_DSTODS
) &&
171 RTLLIB_QOS_HAS_SEQ(fc
)) {
172 hdr_4addrqos
= (struct rtllib_hdr_4addrqos
*)hdr
;
173 tid
= le16_to_cpu(hdr_4addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
176 } else if (RTLLIB_QOS_HAS_SEQ(fc
)) {
177 hdr_3addrqos
= (struct rtllib_hdr_3addrqos
*)hdr
;
178 tid
= le16_to_cpu(hdr_3addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
185 entry
= rtllib_frag_cache_find(ieee
, seq
, -1, tid
, hdr
->addr2
,
189 netdev_dbg(ieee
->dev
,
190 "Couldn't invalidate fragment cache entry (seq=%u)\n",
199 /* rtllib_rx_frame_mgtmt
201 * Responsible for handling management control frames
203 * Called by rtllib_rx
206 rtllib_rx_frame_mgmt(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
207 struct rtllib_rx_stats
*rx_stats
, u16 type
,
210 /* On the struct stats definition there is written that
211 * this is not mandatory.... but seems that the probe
212 * response parser uses it
214 struct rtllib_hdr_3addr
*hdr
= (struct rtllib_hdr_3addr
*)skb
->data
;
216 rx_stats
->len
= skb
->len
;
217 rtllib_rx_mgt(ieee
, skb
, rx_stats
);
218 if ((memcmp(hdr
->addr1
, ieee
->dev
->dev_addr
, ETH_ALEN
))) {
219 dev_kfree_skb_any(skb
);
222 rtllib_rx_frame_softmac(ieee
, skb
, rx_stats
, type
, stype
);
224 dev_kfree_skb_any(skb
);
229 /* See IEEE 802.1H for LLC/SNAP encapsulation/decapsulation
230 * Ethernet-II snap header (RFC1042 for most EtherTypes)
232 static unsigned char rfc1042_header
[] = {
233 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00
235 /* Bridge-Tunnel header (for EtherTypes ETH_P_AARP and ETH_P_IPX) */
236 static unsigned char bridge_tunnel_header
[] = {
237 0xaa, 0xaa, 0x03, 0x00, 0x00, 0xf8
239 /* No encapsulation header if EtherType < 0x600 (=length) */
241 /* Called by rtllib_rx_frame_decrypt */
242 static int rtllib_is_eapol_frame(struct rtllib_device
*ieee
,
243 struct sk_buff
*skb
, size_t hdrlen
)
245 struct net_device
*dev
= ieee
->dev
;
247 struct rtllib_hdr_4addr
*hdr
;
253 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
254 fc
= le16_to_cpu(hdr
->frame_ctl
);
256 /* check that the frame is unicast frame to us */
257 if ((fc
& (RTLLIB_FCTL_TODS
| RTLLIB_FCTL_FROMDS
)) ==
259 memcmp(hdr
->addr1
, dev
->dev_addr
, ETH_ALEN
) == 0 &&
260 memcmp(hdr
->addr3
, dev
->dev_addr
, ETH_ALEN
) == 0) {
261 /* ToDS frame with own addr BSSID and DA */
262 } else if ((fc
& (RTLLIB_FCTL_TODS
| RTLLIB_FCTL_FROMDS
)) ==
263 RTLLIB_FCTL_FROMDS
&&
264 memcmp(hdr
->addr1
, dev
->dev_addr
, ETH_ALEN
) == 0) {
265 /* FromDS frame with own addr as DA */
269 if (skb
->len
< 24 + 8)
272 /* check for port access entity Ethernet type */
273 pos
= skb
->data
+ hdrlen
;
274 ethertype
= (pos
[6] << 8) | pos
[7];
275 if (ethertype
== ETH_P_PAE
)
281 /* Called only as a tasklet (software IRQ), by rtllib_rx */
283 rtllib_rx_frame_decrypt(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
284 struct lib80211_crypt_data
*crypt
)
286 struct rtllib_hdr_4addr
*hdr
;
289 if (crypt
== NULL
|| crypt
->ops
->decrypt_mpdu
== NULL
)
292 if (ieee
->hwsec_active
) {
293 struct cb_desc
*tcb_desc
= (struct cb_desc
*)
294 (skb
->cb
+ MAX_DEV_ADDR_SIZE
);
296 tcb_desc
->bHwSec
= 1;
298 if (ieee
->need_sw_enc
)
299 tcb_desc
->bHwSec
= 0;
302 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
303 hdrlen
= rtllib_get_hdrlen(le16_to_cpu(hdr
->frame_ctl
));
305 atomic_inc(&crypt
->refcnt
);
306 res
= crypt
->ops
->decrypt_mpdu(skb
, hdrlen
, crypt
->priv
);
307 atomic_dec(&crypt
->refcnt
);
309 netdev_dbg(ieee
->dev
, "decryption failed (SA= %pM) res=%d\n",
312 netdev_dbg(ieee
->dev
,
313 "Decryption failed ICV mismatch (key %d)\n",
314 skb
->data
[hdrlen
+ 3] >> 6);
322 /* Called only as a tasklet (software IRQ), by rtllib_rx */
324 rtllib_rx_frame_decrypt_msdu(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
325 int keyidx
, struct lib80211_crypt_data
*crypt
)
327 struct rtllib_hdr_4addr
*hdr
;
330 if (crypt
== NULL
|| crypt
->ops
->decrypt_msdu
== NULL
)
332 if (ieee
->hwsec_active
) {
333 struct cb_desc
*tcb_desc
= (struct cb_desc
*)
334 (skb
->cb
+ MAX_DEV_ADDR_SIZE
);
336 tcb_desc
->bHwSec
= 1;
338 if (ieee
->need_sw_enc
)
339 tcb_desc
->bHwSec
= 0;
342 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
343 hdrlen
= rtllib_get_hdrlen(le16_to_cpu(hdr
->frame_ctl
));
345 atomic_inc(&crypt
->refcnt
);
346 res
= crypt
->ops
->decrypt_msdu(skb
, keyidx
, hdrlen
, crypt
->priv
);
347 atomic_dec(&crypt
->refcnt
);
349 netdev_dbg(ieee
->dev
,
350 "MSDU decryption/MIC verification failed (SA= %pM keyidx=%d)\n",
359 /* this function is stolen from ipw2200 driver*/
360 #define IEEE_PACKET_RETRY_TIME (5*HZ)
361 static int is_duplicate_packet(struct rtllib_device
*ieee
,
362 struct rtllib_hdr_4addr
*header
)
364 u16 fc
= le16_to_cpu(header
->frame_ctl
);
365 u16 sc
= le16_to_cpu(header
->seq_ctl
);
366 u16 seq
= WLAN_GET_SEQ_SEQ(sc
);
367 u16 frag
= WLAN_GET_SEQ_FRAG(sc
);
368 u16
*last_seq
, *last_frag
;
369 unsigned long *last_time
;
370 struct rtllib_hdr_3addrqos
*hdr_3addrqos
;
371 struct rtllib_hdr_4addrqos
*hdr_4addrqos
;
374 if (((fc
& RTLLIB_FCTL_DSTODS
) == RTLLIB_FCTL_DSTODS
) &&
375 RTLLIB_QOS_HAS_SEQ(fc
)) {
376 hdr_4addrqos
= (struct rtllib_hdr_4addrqos
*)header
;
377 tid
= le16_to_cpu(hdr_4addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
380 } else if (RTLLIB_QOS_HAS_SEQ(fc
)) {
381 hdr_3addrqos
= (struct rtllib_hdr_3addrqos
*)header
;
382 tid
= le16_to_cpu(hdr_3addrqos
->qos_ctl
) & RTLLIB_QCTL_TID
;
389 switch (ieee
->iw_mode
) {
393 struct ieee_ibss_seq
*entry
= NULL
;
394 u8
*mac
= header
->addr2
;
395 int index
= mac
[5] % IEEE_IBSS_MAC_HASH_SIZE
;
397 list_for_each(p
, &ieee
->ibss_mac_hash
[index
]) {
398 entry
= list_entry(p
, struct ieee_ibss_seq
, list
);
399 if (!memcmp(entry
->mac
, mac
, ETH_ALEN
))
402 if (p
== &ieee
->ibss_mac_hash
[index
]) {
403 entry
= kmalloc(sizeof(struct ieee_ibss_seq
),
408 ether_addr_copy(entry
->mac
, mac
);
409 entry
->seq_num
[tid
] = seq
;
410 entry
->frag_num
[tid
] = frag
;
411 entry
->packet_time
[tid
] = jiffies
;
412 list_add(&entry
->list
, &ieee
->ibss_mac_hash
[index
]);
415 last_seq
= &entry
->seq_num
[tid
];
416 last_frag
= &entry
->frag_num
[tid
];
417 last_time
= &entry
->packet_time
[tid
];
422 last_seq
= &ieee
->last_rxseq_num
[tid
];
423 last_frag
= &ieee
->last_rxfrag_num
[tid
];
424 last_time
= &ieee
->last_packet_time
[tid
];
430 if ((*last_seq
== seq
) &&
431 time_after(*last_time
+ IEEE_PACKET_RETRY_TIME
, jiffies
)) {
432 if (*last_frag
== frag
)
434 if (*last_frag
+ 1 != frag
)
435 /* out-of-order fragment */
441 *last_time
= jiffies
;
449 static bool AddReorderEntry(struct rx_ts_record
*pTS
,
450 struct rx_reorder_entry
*pReorderEntry
)
452 struct list_head
*pList
= &pTS
->RxPendingPktList
;
454 while (pList
->next
!= &pTS
->RxPendingPktList
) {
455 if (SN_LESS(pReorderEntry
->SeqNum
, ((struct rx_reorder_entry
*)
456 list_entry(pList
->next
, struct rx_reorder_entry
,
459 else if (SN_EQUAL(pReorderEntry
->SeqNum
,
460 ((struct rx_reorder_entry
*)list_entry(pList
->next
,
461 struct rx_reorder_entry
, List
))->SeqNum
))
466 pReorderEntry
->List
.next
= pList
->next
;
467 pReorderEntry
->List
.next
->prev
= &pReorderEntry
->List
;
468 pReorderEntry
->List
.prev
= pList
;
469 pList
->next
= &pReorderEntry
->List
;
474 void rtllib_indicate_packets(struct rtllib_device
*ieee
,
475 struct rtllib_rxb
**prxbIndicateArray
, u8 index
)
477 struct net_device_stats
*stats
= &ieee
->stats
;
481 for (j
= 0; j
< index
; j
++) {
482 struct rtllib_rxb
*prxb
= prxbIndicateArray
[j
];
484 for (i
= 0; i
< prxb
->nr_subframes
; i
++) {
485 struct sk_buff
*sub_skb
= prxb
->subframes
[i
];
487 /* convert hdr + possible LLC headers into Ethernet header */
488 ethertype
= (sub_skb
->data
[6] << 8) | sub_skb
->data
[7];
489 if (sub_skb
->len
>= 8 &&
490 ((memcmp(sub_skb
->data
, rfc1042_header
,
492 ethertype
!= ETH_P_AARP
&&
493 ethertype
!= ETH_P_IPX
) ||
494 memcmp(sub_skb
->data
, bridge_tunnel_header
,
496 /* remove RFC1042 or Bridge-Tunnel encapsulation
497 * and replace EtherType
499 skb_pull(sub_skb
, SNAP_SIZE
);
500 memcpy(skb_push(sub_skb
, ETH_ALEN
), prxb
->src
, ETH_ALEN
);
501 memcpy(skb_push(sub_skb
, ETH_ALEN
), prxb
->dst
, ETH_ALEN
);
504 /* Leave Ethernet header part of hdr and full payload */
506 memcpy(skb_push(sub_skb
, 2), &len
, 2);
507 memcpy(skb_push(sub_skb
, ETH_ALEN
), prxb
->src
, ETH_ALEN
);
508 memcpy(skb_push(sub_skb
, ETH_ALEN
), prxb
->dst
, ETH_ALEN
);
511 /* Indicate the packets to upper layer */
514 stats
->rx_bytes
+= sub_skb
->len
;
516 memset(sub_skb
->cb
, 0, sizeof(sub_skb
->cb
));
517 sub_skb
->protocol
= eth_type_trans(sub_skb
,
519 sub_skb
->dev
= ieee
->dev
;
520 sub_skb
->dev
->stats
.rx_packets
++;
521 sub_skb
->dev
->stats
.rx_bytes
+= sub_skb
->len
;
522 /* 802.11 crc not sufficient */
523 sub_skb
->ip_summed
= CHECKSUM_NONE
;
524 ieee
->last_rx_ps_time
= jiffies
;
533 void rtllib_FlushRxTsPendingPkts(struct rtllib_device
*ieee
,
534 struct rx_ts_record
*pTS
)
536 struct rx_reorder_entry
*pRxReorderEntry
;
539 del_timer_sync(&pTS
->RxPktPendingTimer
);
540 while (!list_empty(&pTS
->RxPendingPktList
)) {
541 if (RfdCnt
>= REORDER_WIN_SIZE
) {
542 netdev_info(ieee
->dev
,
543 "-------------->%s() error! RfdCnt >= REORDER_WIN_SIZE\n",
548 pRxReorderEntry
= (struct rx_reorder_entry
*)
549 list_entry(pTS
->RxPendingPktList
.prev
,
550 struct rx_reorder_entry
, List
);
551 netdev_dbg(ieee
->dev
, "%s(): Indicate SeqNum %d!\n", __func__
,
552 pRxReorderEntry
->SeqNum
);
553 list_del_init(&pRxReorderEntry
->List
);
555 ieee
->RfdArray
[RfdCnt
] = pRxReorderEntry
->prxb
;
558 list_add_tail(&pRxReorderEntry
->List
,
559 &ieee
->RxReorder_Unused_List
);
561 rtllib_indicate_packets(ieee
, ieee
->RfdArray
, RfdCnt
);
563 pTS
->RxIndicateSeq
= 0xffff;
566 static void RxReorderIndicatePacket(struct rtllib_device
*ieee
,
567 struct rtllib_rxb
*prxb
,
568 struct rx_ts_record
*pTS
, u16 SeqNum
)
570 struct rt_hi_throughput
*pHTInfo
= ieee
->pHTInfo
;
571 struct rx_reorder_entry
*pReorderEntry
= NULL
;
572 u8 WinSize
= pHTInfo
->RxReorderWinSize
;
575 bool bMatchWinStart
= false, bPktInBuf
= false;
578 netdev_dbg(ieee
->dev
,
579 "%s(): Seq is %d, pTS->RxIndicateSeq is %d, WinSize is %d\n",
580 __func__
, SeqNum
, pTS
->RxIndicateSeq
, WinSize
);
582 spin_lock_irqsave(&(ieee
->reorder_spinlock
), flags
);
584 WinEnd
= (pTS
->RxIndicateSeq
+ WinSize
- 1) % 4096;
585 /* Rx Reorder initialize condition.*/
586 if (pTS
->RxIndicateSeq
== 0xffff)
587 pTS
->RxIndicateSeq
= SeqNum
;
589 /* Drop out the packet which SeqNum is smaller than WinStart */
590 if (SN_LESS(SeqNum
, pTS
->RxIndicateSeq
)) {
591 netdev_dbg(ieee
->dev
,
592 "Packet Drop! IndicateSeq: %d, NewSeq: %d\n",
593 pTS
->RxIndicateSeq
, SeqNum
);
594 pHTInfo
->RxReorderDropCounter
++;
598 for (i
= 0; i
< prxb
->nr_subframes
; i
++)
599 dev_kfree_skb(prxb
->subframes
[i
]);
603 spin_unlock_irqrestore(&(ieee
->reorder_spinlock
), flags
);
607 /* Sliding window manipulation. Conditions includes:
608 * 1. Incoming SeqNum is equal to WinStart =>Window shift 1
609 * 2. Incoming SeqNum is larger than the WinEnd => Window shift N
611 if (SN_EQUAL(SeqNum
, pTS
->RxIndicateSeq
)) {
612 pTS
->RxIndicateSeq
= (pTS
->RxIndicateSeq
+ 1) % 4096;
613 bMatchWinStart
= true;
614 } else if (SN_LESS(WinEnd
, SeqNum
)) {
615 if (SeqNum
>= (WinSize
- 1))
616 pTS
->RxIndicateSeq
= SeqNum
+ 1 - WinSize
;
618 pTS
->RxIndicateSeq
= 4095 -
619 (WinSize
- (SeqNum
+ 1)) + 1;
620 netdev_dbg(ieee
->dev
,
621 "Window Shift! IndicateSeq: %d, NewSeq: %d\n",
622 pTS
->RxIndicateSeq
, SeqNum
);
625 /* Indication process.
626 * After Packet dropping and Sliding Window shifting as above, we can
627 * now just indicate the packets with the SeqNum smaller than latest
628 * WinStart and struct buffer other packets.
630 * For Rx Reorder condition:
631 * 1. All packets with SeqNum smaller than WinStart => Indicate
632 * 2. All packets with SeqNum larger than or equal to
633 * WinStart => Buffer it.
635 if (bMatchWinStart
) {
636 /* Current packet is going to be indicated.*/
637 netdev_dbg(ieee
->dev
,
638 "Packets indication! IndicateSeq: %d, NewSeq: %d\n",
639 pTS
->RxIndicateSeq
, SeqNum
);
640 ieee
->prxbIndicateArray
[0] = prxb
;
643 /* Current packet is going to be inserted into pending list.*/
644 if (!list_empty(&ieee
->RxReorder_Unused_List
)) {
645 pReorderEntry
= (struct rx_reorder_entry
*)
646 list_entry(ieee
->RxReorder_Unused_List
.next
,
647 struct rx_reorder_entry
, List
);
648 list_del_init(&pReorderEntry
->List
);
650 /* Make a reorder entry and insert
651 * into a the packet list.
653 pReorderEntry
->SeqNum
= SeqNum
;
654 pReorderEntry
->prxb
= prxb
;
656 if (!AddReorderEntry(pTS
, pReorderEntry
)) {
659 netdev_dbg(ieee
->dev
,
660 "%s(): Duplicate packet is dropped. IndicateSeq: %d, NewSeq: %d\n",
661 __func__
, pTS
->RxIndicateSeq
,
663 list_add_tail(&pReorderEntry
->List
,
664 &ieee
->RxReorder_Unused_List
);
666 for (i
= 0; i
< prxb
->nr_subframes
; i
++)
667 dev_kfree_skb(prxb
->subframes
[i
]);
671 netdev_dbg(ieee
->dev
,
672 "Pkt insert into struct buffer. IndicateSeq: %d, NewSeq: %d\n",
673 pTS
->RxIndicateSeq
, SeqNum
);
676 /* Packets are dropped if there are not enough reorder
677 * entries. This part should be modified!! We can just
678 * indicate all the packets in struct buffer and get
681 netdev_err(ieee
->dev
,
682 "%s(): There is no reorder entry! Packet is dropped!\n",
687 for (i
= 0; i
< prxb
->nr_subframes
; i
++)
688 dev_kfree_skb(prxb
->subframes
[i
]);
695 /* Check if there is any packet need indicate.*/
696 while (!list_empty(&pTS
->RxPendingPktList
)) {
697 netdev_dbg(ieee
->dev
, "%s(): start RREORDER indicate\n",
700 pReorderEntry
= (struct rx_reorder_entry
*)
701 list_entry(pTS
->RxPendingPktList
.prev
,
702 struct rx_reorder_entry
,
704 if (SN_LESS(pReorderEntry
->SeqNum
, pTS
->RxIndicateSeq
) ||
705 SN_EQUAL(pReorderEntry
->SeqNum
, pTS
->RxIndicateSeq
)) {
706 /* This protect struct buffer from overflow. */
707 if (index
>= REORDER_WIN_SIZE
) {
708 netdev_err(ieee
->dev
,
709 "%s(): Buffer overflow!\n",
715 list_del_init(&pReorderEntry
->List
);
717 if (SN_EQUAL(pReorderEntry
->SeqNum
, pTS
->RxIndicateSeq
))
718 pTS
->RxIndicateSeq
= (pTS
->RxIndicateSeq
+ 1) %
721 ieee
->prxbIndicateArray
[index
] = pReorderEntry
->prxb
;
722 netdev_dbg(ieee
->dev
, "%s(): Indicate SeqNum %d!\n",
723 __func__
, pReorderEntry
->SeqNum
);
726 list_add_tail(&pReorderEntry
->List
,
727 &ieee
->RxReorder_Unused_List
);
734 /* Handling pending timer. Set this timer to prevent from long time
738 if (timer_pending(&pTS
->RxPktPendingTimer
))
739 del_timer_sync(&pTS
->RxPktPendingTimer
);
740 pTS
->RxTimeoutIndicateSeq
= 0xffff;
742 if (index
> REORDER_WIN_SIZE
) {
743 netdev_err(ieee
->dev
,
744 "%s(): Rx Reorder struct buffer full!\n",
746 spin_unlock_irqrestore(&(ieee
->reorder_spinlock
),
750 rtllib_indicate_packets(ieee
, ieee
->prxbIndicateArray
, index
);
754 if (bPktInBuf
&& pTS
->RxTimeoutIndicateSeq
== 0xffff) {
755 netdev_dbg(ieee
->dev
, "%s(): SET rx timeout timer\n", __func__
);
756 pTS
->RxTimeoutIndicateSeq
= pTS
->RxIndicateSeq
;
757 mod_timer(&pTS
->RxPktPendingTimer
, jiffies
+
758 msecs_to_jiffies(pHTInfo
->RxReorderPendingTime
));
760 spin_unlock_irqrestore(&(ieee
->reorder_spinlock
), flags
);
763 static u8
parse_subframe(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
764 struct rtllib_rx_stats
*rx_stats
,
765 struct rtllib_rxb
*rxb
, u8
*src
, u8
*dst
)
767 struct rtllib_hdr_3addr
*hdr
= (struct rtllib_hdr_3addr
*)skb
->data
;
768 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
770 u16 LLCOffset
= sizeof(struct rtllib_hdr_3addr
);
772 bool bIsAggregateFrame
= false;
773 u16 nSubframe_Length
;
774 u8 nPadding_Length
= 0;
776 struct sk_buff
*sub_skb
;
777 /* just for debug purpose */
778 SeqNum
= WLAN_GET_SEQ_SEQ(le16_to_cpu(hdr
->seq_ctl
));
779 if ((RTLLIB_QOS_HAS_SEQ(fc
)) &&
780 (((union frameqos
*)(skb
->data
+ RTLLIB_3ADDR_LEN
))->field
.reserved
))
781 bIsAggregateFrame
= true;
783 if (RTLLIB_QOS_HAS_SEQ(fc
))
785 if (rx_stats
->bContainHTC
)
786 LLCOffset
+= sHTCLng
;
788 ChkLength
= LLCOffset
;
790 if (skb
->len
<= ChkLength
)
793 skb_pull(skb
, LLCOffset
);
794 ieee
->bIsAggregateFrame
= bIsAggregateFrame
;
795 if (!bIsAggregateFrame
) {
796 rxb
->nr_subframes
= 1;
798 /* altered by clark 3/30/2010
799 * The struct buffer size of the skb indicated to upper layer
800 * must be less than 5000, or the defraged IP datagram
801 * in the IP layer will exceed "ipfrag_high_tresh" and be
802 * discarded. so there must not use the function
803 * "skb_copy" and "skb_clone" for "skb".
806 /* Allocate new skb for releasing to upper layer */
807 sub_skb
= dev_alloc_skb(RTLLIB_SKBBUFFER_SIZE
);
810 skb_reserve(sub_skb
, 12);
811 skb_put_data(sub_skb
, skb
->data
, skb
->len
);
812 sub_skb
->dev
= ieee
->dev
;
814 rxb
->subframes
[0] = sub_skb
;
816 memcpy(rxb
->src
, src
, ETH_ALEN
);
817 memcpy(rxb
->dst
, dst
, ETH_ALEN
);
818 rxb
->subframes
[0]->dev
= ieee
->dev
;
822 rxb
->nr_subframes
= 0;
823 memcpy(rxb
->src
, src
, ETH_ALEN
);
824 memcpy(rxb
->dst
, dst
, ETH_ALEN
);
825 while (skb
->len
> ETHERNET_HEADER_SIZE
) {
826 /* Offset 12 denote 2 mac address */
827 nSubframe_Length
= *((u16
*)(skb
->data
+ 12));
828 nSubframe_Length
= (nSubframe_Length
>> 8) +
829 (nSubframe_Length
<< 8);
831 if (skb
->len
< (ETHERNET_HEADER_SIZE
+ nSubframe_Length
)) {
832 netdev_info(ieee
->dev
,
833 "%s: A-MSDU parse error!! pRfd->nTotalSubframe : %d\n",
834 __func__
, rxb
->nr_subframes
);
835 netdev_info(ieee
->dev
,
836 "%s: A-MSDU parse error!! Subframe Length: %d\n",
837 __func__
, nSubframe_Length
);
838 netdev_info(ieee
->dev
,
839 "nRemain_Length is %d and nSubframe_Length is : %d\n",
840 skb
->len
, nSubframe_Length
);
841 netdev_info(ieee
->dev
,
842 "The Packet SeqNum is %d\n",
847 /* move the data point to data content */
848 skb_pull(skb
, ETHERNET_HEADER_SIZE
);
850 /* altered by clark 3/30/2010
851 * The struct buffer size of the skb indicated to upper layer
852 * must be less than 5000, or the defraged IP datagram
853 * in the IP layer will exceed "ipfrag_high_tresh" and be
854 * discarded. so there must not use the function
855 * "skb_copy" and "skb_clone" for "skb".
858 /* Allocate new skb for releasing to upper layer */
859 sub_skb
= dev_alloc_skb(nSubframe_Length
+ 12);
862 skb_reserve(sub_skb
, 12);
863 skb_put_data(sub_skb
, skb
->data
, nSubframe_Length
);
865 sub_skb
->dev
= ieee
->dev
;
866 rxb
->subframes
[rxb
->nr_subframes
++] = sub_skb
;
867 if (rxb
->nr_subframes
>= MAX_SUBFRAME_COUNT
) {
868 netdev_dbg(ieee
->dev
,
869 "ParseSubframe(): Too many Subframes! Packets dropped!\n");
872 skb_pull(skb
, nSubframe_Length
);
875 nPadding_Length
= 4 - ((nSubframe_Length
+
876 ETHERNET_HEADER_SIZE
) % 4);
877 if (nPadding_Length
== 4)
880 if (skb
->len
< nPadding_Length
)
883 skb_pull(skb
, nPadding_Length
);
887 return rxb
->nr_subframes
;
891 static size_t rtllib_rx_get_hdrlen(struct rtllib_device
*ieee
,
893 struct rtllib_rx_stats
*rx_stats
)
895 struct rtllib_hdr_4addr
*hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
896 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
899 hdrlen
= rtllib_get_hdrlen(fc
);
900 if (HTCCheck(ieee
, skb
->data
)) {
902 netdev_info(ieee
->dev
, "%s: find HTCControl!\n",
905 rx_stats
->bContainHTC
= true;
908 if (RTLLIB_QOS_HAS_SEQ(fc
))
909 rx_stats
->bIsQosData
= true;
914 static int rtllib_rx_check_duplicate(struct rtllib_device
*ieee
,
915 struct sk_buff
*skb
, u8 multicast
)
917 struct rtllib_hdr_4addr
*hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
919 u8 frag
, type
, stype
;
921 fc
= le16_to_cpu(hdr
->frame_ctl
);
922 type
= WLAN_FC_GET_TYPE(fc
);
923 stype
= WLAN_FC_GET_STYPE(fc
);
924 sc
= le16_to_cpu(hdr
->seq_ctl
);
925 frag
= WLAN_GET_SEQ_FRAG(sc
);
927 if ((ieee
->pHTInfo
->bCurRxReorderEnable
== false) ||
928 !ieee
->current_network
.qos_data
.active
||
929 !IsDataFrame(skb
->data
) ||
930 IsLegacyDataFrame(skb
->data
)) {
931 if (!((type
== RTLLIB_FTYPE_MGMT
) &&
932 (stype
== RTLLIB_STYPE_BEACON
))) {
933 if (is_duplicate_packet(ieee
, hdr
))
937 struct rx_ts_record
*pRxTS
= NULL
;
939 if (GetTs(ieee
, (struct ts_common_info
**) &pRxTS
, hdr
->addr2
,
940 (u8
)Frame_QoSTID((u8
*)(skb
->data
)), RX_DIR
, true)) {
941 if ((fc
& (1<<11)) && (frag
== pRxTS
->RxLastFragNum
) &&
942 (WLAN_GET_SEQ_SEQ(sc
) == pRxTS
->RxLastSeqNum
))
944 pRxTS
->RxLastFragNum
= frag
;
945 pRxTS
->RxLastSeqNum
= WLAN_GET_SEQ_SEQ(sc
);
947 netdev_warn(ieee
->dev
, "%s(): No TS! Skip the check!\n",
956 static void rtllib_rx_extract_addr(struct rtllib_device
*ieee
,
957 struct rtllib_hdr_4addr
*hdr
, u8
*dst
,
960 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
962 switch (fc
& (RTLLIB_FCTL_FROMDS
| RTLLIB_FCTL_TODS
)) {
963 case RTLLIB_FCTL_FROMDS
:
964 ether_addr_copy(dst
, hdr
->addr1
);
965 ether_addr_copy(src
, hdr
->addr3
);
966 ether_addr_copy(bssid
, hdr
->addr2
);
968 case RTLLIB_FCTL_TODS
:
969 ether_addr_copy(dst
, hdr
->addr3
);
970 ether_addr_copy(src
, hdr
->addr2
);
971 ether_addr_copy(bssid
, hdr
->addr1
);
973 case RTLLIB_FCTL_FROMDS
| RTLLIB_FCTL_TODS
:
974 ether_addr_copy(dst
, hdr
->addr3
);
975 ether_addr_copy(src
, hdr
->addr4
);
976 ether_addr_copy(bssid
, ieee
->current_network
.bssid
);
979 ether_addr_copy(dst
, hdr
->addr1
);
980 ether_addr_copy(src
, hdr
->addr2
);
981 ether_addr_copy(bssid
, hdr
->addr3
);
986 static int rtllib_rx_data_filter(struct rtllib_device
*ieee
, u16 fc
,
987 u8
*dst
, u8
*src
, u8
*bssid
, u8
*addr2
)
991 type
= WLAN_FC_GET_TYPE(fc
);
992 stype
= WLAN_FC_GET_STYPE(fc
);
994 /* Filter frames from different BSS */
995 if (((fc
& RTLLIB_FCTL_DSTODS
) != RTLLIB_FCTL_DSTODS
) &&
996 !ether_addr_equal(ieee
->current_network
.bssid
, bssid
) &&
997 !is_zero_ether_addr(ieee
->current_network
.bssid
)) {
1001 /* Filter packets sent by an STA that will be forwarded by AP */
1002 if (ieee
->IntelPromiscuousModeInfo
.bPromiscuousOn
&&
1003 ieee
->IntelPromiscuousModeInfo
.bFilterSourceStationFrame
) {
1004 if ((fc
& RTLLIB_FCTL_TODS
) && !(fc
& RTLLIB_FCTL_FROMDS
) &&
1005 !ether_addr_equal(dst
, ieee
->current_network
.bssid
) &&
1006 ether_addr_equal(bssid
, ieee
->current_network
.bssid
)) {
1011 /* Nullfunc frames may have PS-bit set, so they must be passed to
1012 * hostap_handle_sta_rx() before being dropped here.
1014 if (!ieee
->IntelPromiscuousModeInfo
.bPromiscuousOn
) {
1015 if (stype
!= RTLLIB_STYPE_DATA
&&
1016 stype
!= RTLLIB_STYPE_DATA_CFACK
&&
1017 stype
!= RTLLIB_STYPE_DATA_CFPOLL
&&
1018 stype
!= RTLLIB_STYPE_DATA_CFACKPOLL
&&
1019 stype
!= RTLLIB_STYPE_QOS_DATA
) {
1020 if (stype
!= RTLLIB_STYPE_NULLFUNC
)
1021 netdev_dbg(ieee
->dev
,
1022 "RX: dropped data frame with no data (type=0x%02x, subtype=0x%02x)\n",
1028 if (ieee
->iw_mode
!= IW_MODE_MESH
) {
1029 /* packets from our adapter are dropped (echo) */
1030 if (!memcmp(src
, ieee
->dev
->dev_addr
, ETH_ALEN
))
1033 /* {broad,multi}cast packets to our BSS go through */
1034 if (is_multicast_ether_addr(dst
)) {
1035 if (memcmp(bssid
, ieee
->current_network
.bssid
,
1043 static int rtllib_rx_get_crypt(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1044 struct lib80211_crypt_data
**crypt
, size_t hdrlen
)
1046 struct rtllib_hdr_4addr
*hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
1047 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
1050 if (ieee
->host_decrypt
) {
1051 if (skb
->len
>= hdrlen
+ 3)
1052 idx
= skb
->data
[hdrlen
+ 3] >> 6;
1054 *crypt
= ieee
->crypt_info
.crypt
[idx
];
1055 /* allow NULL decrypt to indicate an station specific override
1056 * for default encryption
1058 if (*crypt
&& ((*crypt
)->ops
== NULL
||
1059 (*crypt
)->ops
->decrypt_mpdu
== NULL
))
1062 if (!*crypt
&& (fc
& RTLLIB_FCTL_WEP
)) {
1063 /* This seems to be triggered by some (multicast?)
1064 * frames from other than current BSS, so just drop the
1065 * frames silently instead of filling system log with
1068 netdev_dbg(ieee
->dev
,
1069 "Decryption failed (not set) (SA= %pM)\n",
1078 static int rtllib_rx_decrypt(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1079 struct rtllib_rx_stats
*rx_stats
,
1080 struct lib80211_crypt_data
*crypt
, size_t hdrlen
)
1082 struct rtllib_hdr_4addr
*hdr
;
1087 hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
1088 fc
= le16_to_cpu(hdr
->frame_ctl
);
1089 sc
= le16_to_cpu(hdr
->seq_ctl
);
1090 frag
= WLAN_GET_SEQ_FRAG(sc
);
1092 if ((!rx_stats
->Decrypted
))
1093 ieee
->need_sw_enc
= 1;
1095 ieee
->need_sw_enc
= 0;
1097 keyidx
= rtllib_rx_frame_decrypt(ieee
, skb
, crypt
);
1098 if (ieee
->host_decrypt
&& (fc
& RTLLIB_FCTL_WEP
) && (keyidx
< 0)) {
1099 netdev_info(ieee
->dev
, "%s: decrypt frame error\n", __func__
);
1103 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
1104 if ((frag
!= 0 || (fc
& RTLLIB_FCTL_MOREFRAGS
))) {
1106 struct sk_buff
*frag_skb
= rtllib_frag_cache_get(ieee
, hdr
);
1108 netdev_dbg(ieee
->dev
, "Rx Fragment received (%u)\n", frag
);
1111 netdev_dbg(ieee
->dev
,
1112 "Rx cannot get skb from fragment cache (morefrag=%d seq=%u frag=%u)\n",
1113 (fc
& RTLLIB_FCTL_MOREFRAGS
) != 0,
1114 WLAN_GET_SEQ_SEQ(sc
), frag
);
1121 if (frag_skb
->tail
+ flen
> frag_skb
->end
) {
1122 netdev_warn(ieee
->dev
,
1123 "%s: host decrypted and reassembled frame did not fit skb\n",
1125 rtllib_frag_cache_invalidate(ieee
, hdr
);
1130 /* copy first fragment (including full headers) into
1131 * beginning of the fragment cache skb
1133 skb_put_data(frag_skb
, skb
->data
, flen
);
1135 /* append frame payload to the end of the fragment
1138 skb_put_data(frag_skb
, skb
->data
+ hdrlen
, flen
);
1140 dev_kfree_skb_any(skb
);
1143 if (fc
& RTLLIB_FCTL_MOREFRAGS
) {
1144 /* more fragments expected - leave the skb in fragment
1145 * cache for now; it will be delivered to upper layers
1146 * after all fragments have been received
1151 /* this was the last fragment and the frame will be
1152 * delivered, so remove skb from fragment cache
1155 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
1156 rtllib_frag_cache_invalidate(ieee
, hdr
);
1159 /* skb: hdr + (possible reassembled) full MSDU payload; possibly still
1160 * encrypted/authenticated
1162 if (ieee
->host_decrypt
&& (fc
& RTLLIB_FCTL_WEP
) &&
1163 rtllib_rx_frame_decrypt_msdu(ieee
, skb
, keyidx
, crypt
)) {
1164 netdev_info(ieee
->dev
, "%s: ==>decrypt msdu error\n", __func__
);
1168 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
1169 if (crypt
&& !(fc
& RTLLIB_FCTL_WEP
) && !ieee
->open_wep
) {
1170 if (/*ieee->ieee802_1x &&*/
1171 rtllib_is_eapol_frame(ieee
, skb
, hdrlen
)) {
1173 /* pass unencrypted EAPOL frames even if encryption is
1176 struct eapol
*eap
= (struct eapol
*)(skb
->data
+
1178 netdev_dbg(ieee
->dev
,
1179 "RX: IEEE 802.1X EAPOL frame: %s\n",
1180 eap_get_type(eap
->type
));
1182 netdev_dbg(ieee
->dev
,
1183 "encryption configured, but RX frame not encrypted (SA= %pM)\n",
1189 if (crypt
&& !(fc
& RTLLIB_FCTL_WEP
) &&
1190 rtllib_is_eapol_frame(ieee
, skb
, hdrlen
)) {
1191 struct eapol
*eap
= (struct eapol
*)(skb
->data
+ 24);
1193 netdev_dbg(ieee
->dev
, "RX: IEEE 802.1X EAPOL frame: %s\n",
1194 eap_get_type(eap
->type
));
1197 if (crypt
&& !(fc
& RTLLIB_FCTL_WEP
) && !ieee
->open_wep
&&
1198 !rtllib_is_eapol_frame(ieee
, skb
, hdrlen
)) {
1199 netdev_dbg(ieee
->dev
,
1200 "dropped unencrypted RX data frame from %pM (drop_unencrypted=1)\n",
1208 static void rtllib_rx_check_leave_lps(struct rtllib_device
*ieee
, u8 unicast
,
1213 if (ieee
->state
== RTLLIB_LINKED
) {
1214 if (((ieee
->LinkDetectInfo
.NumRxUnicastOkInPeriod
+
1215 ieee
->LinkDetectInfo
.NumTxOkInPeriod
) > 8) ||
1216 (ieee
->LinkDetectInfo
.NumRxUnicastOkInPeriod
> 2)) {
1217 if (ieee
->LeisurePSLeave
)
1218 ieee
->LeisurePSLeave(ieee
->dev
);
1222 ieee
->last_rx_ps_time
= jiffies
;
1225 static void rtllib_rx_indicate_pkt_legacy(struct rtllib_device
*ieee
,
1226 struct rtllib_rx_stats
*rx_stats
,
1227 struct rtllib_rxb
*rxb
,
1231 struct net_device
*dev
= ieee
->dev
;
1236 netdev_info(dev
, "%s: rxb is NULL!!\n", __func__
);
1240 for (i
= 0; i
< rxb
->nr_subframes
; i
++) {
1241 struct sk_buff
*sub_skb
= rxb
->subframes
[i
];
1244 /* convert hdr + possible LLC headers
1245 * into Ethernet header
1247 ethertype
= (sub_skb
->data
[6] << 8) | sub_skb
->data
[7];
1248 if (sub_skb
->len
>= 8 &&
1249 ((memcmp(sub_skb
->data
, rfc1042_header
, SNAP_SIZE
) == 0 &&
1250 ethertype
!= ETH_P_AARP
&& ethertype
!= ETH_P_IPX
) ||
1251 memcmp(sub_skb
->data
, bridge_tunnel_header
, SNAP_SIZE
) == 0)) {
1252 /* remove RFC1042 or Bridge-Tunnel encapsulation
1253 * and replace EtherType
1255 skb_pull(sub_skb
, SNAP_SIZE
);
1256 ether_addr_copy(skb_push(sub_skb
, ETH_ALEN
),
1258 ether_addr_copy(skb_push(sub_skb
, ETH_ALEN
),
1262 /* Leave Ethernet header part of hdr
1266 memcpy(skb_push(sub_skb
, 2), &len
, 2);
1267 ether_addr_copy(skb_push(sub_skb
, ETH_ALEN
),
1269 ether_addr_copy(skb_push(sub_skb
, ETH_ALEN
),
1273 ieee
->stats
.rx_packets
++;
1274 ieee
->stats
.rx_bytes
+= sub_skb
->len
;
1276 if (is_multicast_ether_addr(dst
))
1277 ieee
->stats
.multicast
++;
1279 /* Indicate the packets to upper layer */
1280 memset(sub_skb
->cb
, 0, sizeof(sub_skb
->cb
));
1281 sub_skb
->protocol
= eth_type_trans(sub_skb
, dev
);
1283 sub_skb
->dev
->stats
.rx_packets
++;
1284 sub_skb
->dev
->stats
.rx_bytes
+= sub_skb
->len
;
1285 /* 802.11 crc not sufficient */
1286 sub_skb
->ip_summed
= CHECKSUM_NONE
;
1293 static int rtllib_rx_InfraAdhoc(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1294 struct rtllib_rx_stats
*rx_stats
)
1296 struct net_device
*dev
= ieee
->dev
;
1297 struct rtllib_hdr_4addr
*hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
1298 struct lib80211_crypt_data
*crypt
= NULL
;
1299 struct rtllib_rxb
*rxb
= NULL
;
1300 struct rx_ts_record
*pTS
= NULL
;
1301 u16 fc
, sc
, SeqNum
= 0;
1302 u8 type
, stype
, multicast
= 0, unicast
= 0, nr_subframes
= 0, TID
= 0;
1305 u8 bssid
[ETH_ALEN
] = {0};
1308 bool bToOtherSTA
= false;
1311 fc
= le16_to_cpu(hdr
->frame_ctl
);
1312 type
= WLAN_FC_GET_TYPE(fc
);
1313 stype
= WLAN_FC_GET_STYPE(fc
);
1314 sc
= le16_to_cpu(hdr
->seq_ctl
);
1316 /*Filter pkt not to me*/
1317 multicast
= is_multicast_ether_addr(hdr
->addr1
);
1318 unicast
= !multicast
;
1319 if (unicast
&& !ether_addr_equal(dev
->dev_addr
, hdr
->addr1
)) {
1320 if (ieee
->bNetPromiscuousMode
)
1326 /*Filter pkt has too small length */
1327 hdrlen
= rtllib_rx_get_hdrlen(ieee
, skb
, rx_stats
);
1328 if (skb
->len
< hdrlen
) {
1330 "%s():ERR!!! skb->len is smaller than hdrlen\n",
1335 /* Filter Duplicate pkt */
1336 ret
= rtllib_rx_check_duplicate(ieee
, skb
, multicast
);
1340 /* Filter CTRL Frame */
1341 if (type
== RTLLIB_FTYPE_CTL
)
1344 /* Filter MGNT Frame */
1345 if (type
== RTLLIB_FTYPE_MGMT
) {
1348 if (rtllib_rx_frame_mgmt(ieee
, skb
, rx_stats
, type
, stype
))
1354 /* Filter WAPI DATA Frame */
1356 /* Update statstics for AP roaming */
1358 ieee
->LinkDetectInfo
.NumRecvDataInPeriod
++;
1359 ieee
->LinkDetectInfo
.NumRxOkInPeriod
++;
1362 /* Data frame - extract src/dst addresses */
1363 rtllib_rx_extract_addr(ieee
, hdr
, dst
, src
, bssid
);
1365 /* Filter Data frames */
1366 ret
= rtllib_rx_data_filter(ieee
, fc
, dst
, src
, bssid
, hdr
->addr2
);
1370 if (skb
->len
== hdrlen
)
1373 /* Send pspoll based on moredata */
1374 if ((ieee
->iw_mode
== IW_MODE_INFRA
) &&
1375 (ieee
->sta_sleep
== LPS_IS_SLEEP
) &&
1376 (ieee
->polling
) && (!bToOtherSTA
)) {
1377 if (WLAN_FC_MORE_DATA(fc
)) {
1378 /* more data bit is set, let's request a new frame
1381 rtllib_sta_ps_send_pspoll_frame(ieee
);
1383 ieee
->polling
= false;
1387 /* Get crypt if encrypted */
1388 ret
= rtllib_rx_get_crypt(ieee
, skb
, &crypt
, hdrlen
);
1392 /* Decrypt data frame (including reassemble) */
1393 ret
= rtllib_rx_decrypt(ieee
, skb
, rx_stats
, crypt
, hdrlen
);
1399 /* Get TS for Rx Reorder */
1400 hdr
= (struct rtllib_hdr_4addr
*) skb
->data
;
1401 if (ieee
->current_network
.qos_data
.active
&& IsQoSDataFrame(skb
->data
)
1402 && !is_multicast_ether_addr(hdr
->addr1
)
1403 && (!bToOtherSTA
)) {
1404 TID
= Frame_QoSTID(skb
->data
);
1405 SeqNum
= WLAN_GET_SEQ_SEQ(sc
);
1406 GetTs(ieee
, (struct ts_common_info
**) &pTS
, hdr
->addr2
, TID
,
1408 if (TID
!= 0 && TID
!= 3)
1409 ieee
->bis_any_nonbepkts
= true;
1412 /* Parse rx data frame (For AMSDU) */
1413 /* skb: hdr + (possible reassembled) full plaintext payload */
1414 rxb
= kmalloc(sizeof(struct rtllib_rxb
), GFP_ATOMIC
);
1418 /* to parse amsdu packets */
1419 /* qos data packets & reserved bit is 1 */
1420 if (parse_subframe(ieee
, skb
, rx_stats
, rxb
, src
, dst
) == 0) {
1421 /* only to free rxb, and not submit the packets
1424 for (i
= 0; i
< rxb
->nr_subframes
; i
++)
1425 dev_kfree_skb(rxb
->subframes
[i
]);
1431 /* Update WAPI PN */
1433 /* Check if leave LPS */
1435 if (ieee
->bIsAggregateFrame
)
1436 nr_subframes
= rxb
->nr_subframes
;
1440 ieee
->LinkDetectInfo
.NumRxUnicastOkInPeriod
+= nr_subframes
;
1441 rtllib_rx_check_leave_lps(ieee
, unicast
, nr_subframes
);
1444 /* Indicate packets to upper layer or Rx Reorder */
1445 if (ieee
->pHTInfo
->bCurRxReorderEnable
== false || pTS
== NULL
||
1447 rtllib_rx_indicate_pkt_legacy(ieee
, rx_stats
, rxb
, dst
, src
);
1449 RxReorderIndicatePacket(ieee
, rxb
, pTS
, SeqNum
);
1457 ieee
->stats
.rx_dropped
++;
1459 /* Returning 0 indicates to caller that we have not handled the SKB--
1460 * so it is still allocated and can be used again by underlying
1461 * hardware as a DMA target
1466 static int rtllib_rx_Master(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1467 struct rtllib_rx_stats
*rx_stats
)
1472 static int rtllib_rx_Monitor(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1473 struct rtllib_rx_stats
*rx_stats
)
1475 struct rtllib_hdr_4addr
*hdr
= (struct rtllib_hdr_4addr
*)skb
->data
;
1476 u16 fc
= le16_to_cpu(hdr
->frame_ctl
);
1477 size_t hdrlen
= rtllib_get_hdrlen(fc
);
1479 if (skb
->len
< hdrlen
) {
1480 netdev_info(ieee
->dev
,
1481 "%s():ERR!!! skb->len is smaller than hdrlen\n",
1486 if (HTCCheck(ieee
, skb
->data
)) {
1487 if (net_ratelimit())
1488 netdev_info(ieee
->dev
, "%s: Find HTCControl!\n",
1493 rtllib_monitor_rx(ieee
, skb
, rx_stats
, hdrlen
);
1494 ieee
->stats
.rx_packets
++;
1495 ieee
->stats
.rx_bytes
+= skb
->len
;
1500 static int rtllib_rx_Mesh(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1501 struct rtllib_rx_stats
*rx_stats
)
1506 /* All received frames are sent to this function. @skb contains the frame in
1507 * IEEE 802.11 format, i.e., in the format it was sent over air.
1508 * This function is called only as a tasklet (software IRQ).
1510 int rtllib_rx(struct rtllib_device
*ieee
, struct sk_buff
*skb
,
1511 struct rtllib_rx_stats
*rx_stats
)
1515 if (!ieee
|| !skb
|| !rx_stats
) {
1516 pr_info("%s: Input parameters NULL!\n", __func__
);
1519 if (skb
->len
< 10) {
1520 netdev_info(ieee
->dev
, "%s: SKB length < 10\n", __func__
);
1524 switch (ieee
->iw_mode
) {
1527 ret
= rtllib_rx_InfraAdhoc(ieee
, skb
, rx_stats
);
1529 case IW_MODE_MASTER
:
1530 case IW_MODE_REPEAT
:
1531 ret
= rtllib_rx_Master(ieee
, skb
, rx_stats
);
1533 case IW_MODE_MONITOR
:
1534 ret
= rtllib_rx_Monitor(ieee
, skb
, rx_stats
);
1537 ret
= rtllib_rx_Mesh(ieee
, skb
, rx_stats
);
1540 netdev_info(ieee
->dev
, "%s: ERR iw mode!!!\n", __func__
);
1548 ieee
->stats
.rx_dropped
++;
1551 EXPORT_SYMBOL(rtllib_rx
);
1553 static u8 qos_oui
[QOS_OUI_LEN
] = { 0x00, 0x50, 0xF2 };
1555 /* Make ther structure we read from the beacon packet has the right values */
1556 static int rtllib_verify_qos_info(struct rtllib_qos_information_element
1557 *info_element
, int sub_type
)
1560 if (info_element
->qui_subtype
!= sub_type
)
1562 if (memcmp(info_element
->qui
, qos_oui
, QOS_OUI_LEN
))
1564 if (info_element
->qui_type
!= QOS_OUI_TYPE
)
1566 if (info_element
->version
!= QOS_VERSION_1
)
1573 /* Parse a QoS parameter element */
1574 static int rtllib_read_qos_param_element(struct rtllib_qos_parameter_info
1576 struct rtllib_info_element
1580 u16 size
= sizeof(struct rtllib_qos_parameter_info
) - 2;
1582 if ((info_element
== NULL
) || (element_param
== NULL
))
1585 if (info_element
->id
== QOS_ELEMENT_ID
&& info_element
->len
== size
) {
1586 memcpy(element_param
->info_element
.qui
, info_element
->data
,
1588 element_param
->info_element
.elementID
= info_element
->id
;
1589 element_param
->info_element
.length
= info_element
->len
;
1593 ret
= rtllib_verify_qos_info(&element_param
->info_element
,
1594 QOS_OUI_PARAM_SUB_TYPE
);
1598 /* Parse a QoS information element */
1599 static int rtllib_read_qos_info_element(struct rtllib_qos_information_element
1601 struct rtllib_info_element
1605 u16 size
= sizeof(struct rtllib_qos_information_element
) - 2;
1607 if (element_info
== NULL
)
1609 if (info_element
== NULL
)
1612 if ((info_element
->id
== QOS_ELEMENT_ID
) &&
1613 (info_element
->len
== size
)) {
1614 memcpy(element_info
->qui
, info_element
->data
,
1616 element_info
->elementID
= info_element
->id
;
1617 element_info
->length
= info_element
->len
;
1622 ret
= rtllib_verify_qos_info(element_info
,
1623 QOS_OUI_INFO_SUB_TYPE
);
1628 /* Write QoS parameters from the ac parameters. */
1629 static int rtllib_qos_convert_ac_to_parameters(struct rtllib_qos_parameter_info
*param_elm
,
1630 struct rtllib_qos_data
*qos_data
)
1632 struct rtllib_qos_ac_parameter
*ac_params
;
1633 struct rtllib_qos_parameters
*qos_param
= &(qos_data
->parameters
);
1638 qos_data
->wmm_acm
= 0;
1639 for (i
= 0; i
< QOS_QUEUE_NUM
; i
++) {
1640 ac_params
= &(param_elm
->ac_params_record
[i
]);
1642 aci
= (ac_params
->aci_aifsn
& 0x60) >> 5;
1643 acm
= (ac_params
->aci_aifsn
& 0x10) >> 4;
1645 if (aci
>= QOS_QUEUE_NUM
)
1649 /* BIT(0) | BIT(3) */
1651 qos_data
->wmm_acm
|= (0x01<<0)|(0x01<<3);
1654 /* BIT(4) | BIT(5) */
1656 qos_data
->wmm_acm
|= (0x01<<4)|(0x01<<5);
1659 /* BIT(6) | BIT(7) */
1661 qos_data
->wmm_acm
|= (0x01<<6)|(0x01<<7);
1665 /* BIT(1) | BIT(2) */
1667 qos_data
->wmm_acm
|= (0x01<<1)|(0x01<<2);
1671 qos_param
->aifs
[aci
] = (ac_params
->aci_aifsn
) & 0x0f;
1673 /* WMM spec P.11: The minimum value for AIFSN shall be 2 */
1674 qos_param
->aifs
[aci
] = max_t(u8
, qos_param
->aifs
[aci
], 2);
1676 qos_param
->cw_min
[aci
] = cpu_to_le16(ac_params
->ecw_min_max
&
1679 qos_param
->cw_max
[aci
] = cpu_to_le16((ac_params
->ecw_min_max
&
1682 qos_param
->flag
[aci
] =
1683 (ac_params
->aci_aifsn
& 0x10) ? 0x01 : 0x00;
1684 qos_param
->tx_op_limit
[aci
] = ac_params
->tx_op_limit
;
1689 /* we have a generic data element which it may contain QoS information or
1690 * parameters element. check the information element length to decide
1691 * which type to read
1693 static int rtllib_parse_qos_info_param_IE(struct rtllib_device
*ieee
,
1694 struct rtllib_info_element
1696 struct rtllib_network
*network
)
1699 struct rtllib_qos_information_element qos_info_element
;
1701 rc
= rtllib_read_qos_info_element(&qos_info_element
, info_element
);
1704 network
->qos_data
.param_count
= qos_info_element
.ac_info
& 0x0F;
1705 network
->flags
|= NETWORK_HAS_QOS_INFORMATION
;
1707 struct rtllib_qos_parameter_info param_element
;
1709 rc
= rtllib_read_qos_param_element(¶m_element
,
1712 rtllib_qos_convert_ac_to_parameters(¶m_element
,
1713 &(network
->qos_data
));
1714 network
->flags
|= NETWORK_HAS_QOS_PARAMETERS
;
1715 network
->qos_data
.param_count
=
1716 param_element
.info_element
.ac_info
& 0x0F;
1721 netdev_dbg(ieee
->dev
, "QoS is supported\n");
1722 network
->qos_data
.supported
= 1;
1727 static const char *get_info_element_string(u16 id
)
1730 case MFIE_TYPE_SSID
:
1732 case MFIE_TYPE_RATES
:
1734 case MFIE_TYPE_FH_SET
:
1736 case MFIE_TYPE_DS_SET
:
1738 case MFIE_TYPE_CF_SET
:
1742 case MFIE_TYPE_IBSS_SET
:
1744 case MFIE_TYPE_COUNTRY
:
1746 case MFIE_TYPE_HOP_PARAMS
:
1747 return "HOP_PARAMS";
1748 case MFIE_TYPE_HOP_TABLE
:
1750 case MFIE_TYPE_REQUEST
:
1752 case MFIE_TYPE_CHALLENGE
:
1754 case MFIE_TYPE_POWER_CONSTRAINT
:
1755 return "POWER_CONSTRAINT";
1756 case MFIE_TYPE_POWER_CAPABILITY
:
1757 return "POWER_CAPABILITY";
1758 case MFIE_TYPE_TPC_REQUEST
:
1759 return "TPC_REQUEST";
1760 case MFIE_TYPE_TPC_REPORT
:
1761 return "TPC_REPORT";
1762 case MFIE_TYPE_SUPP_CHANNELS
:
1763 return "SUPP_CHANNELS";
1766 case MFIE_TYPE_MEASURE_REQUEST
:
1767 return "MEASURE_REQUEST";
1768 case MFIE_TYPE_MEASURE_REPORT
:
1769 return "MEASURE_REPORT";
1770 case MFIE_TYPE_QUIET
:
1772 case MFIE_TYPE_IBSS_DFS
:
1776 case MFIE_TYPE_RATES_EX
:
1778 case MFIE_TYPE_GENERIC
:
1780 case MFIE_TYPE_QOS_PARAMETER
:
1781 return "QOS_PARAMETER";
1787 static inline void rtllib_extract_country_ie(
1788 struct rtllib_device
*ieee
,
1789 struct rtllib_info_element
*info_element
,
1790 struct rtllib_network
*network
,
1793 if (IS_DOT11D_ENABLE(ieee
)) {
1794 if (info_element
->len
!= 0) {
1795 memcpy(network
->CountryIeBuf
, info_element
->data
,
1797 network
->CountryIeLen
= info_element
->len
;
1799 if (!IS_COUNTRY_IE_VALID(ieee
)) {
1800 if (rtllib_act_scanning(ieee
, false) &&
1801 ieee
->FirstIe_InScan
)
1802 netdev_info(ieee
->dev
,
1803 "Received beacon ContryIE, SSID: <%s>\n",
1805 dot11d_update_country(ieee
, addr2
,
1807 info_element
->data
);
1811 if (IS_EQUAL_CIE_SRC(ieee
, addr2
))
1812 UPDATE_CIE_WATCHDOG(ieee
);
1816 static void rtllib_parse_mife_generic(struct rtllib_device
*ieee
,
1817 struct rtllib_info_element
*info_element
,
1818 struct rtllib_network
*network
,
1820 u16
*tmp_htinfo_len
)
1822 u16 ht_realtek_agg_len
= 0;
1823 u8 ht_realtek_agg_buf
[MAX_IE_LEN
];
1825 if (!rtllib_parse_qos_info_param_IE(ieee
, info_element
, network
))
1827 if (info_element
->len
>= 4 &&
1828 info_element
->data
[0] == 0x00 &&
1829 info_element
->data
[1] == 0x50 &&
1830 info_element
->data
[2] == 0xf2 &&
1831 info_element
->data
[3] == 0x01) {
1832 network
->wpa_ie_len
= min(info_element
->len
+ 2,
1834 memcpy(network
->wpa_ie
, info_element
, network
->wpa_ie_len
);
1837 if (info_element
->len
== 7 &&
1838 info_element
->data
[0] == 0x00 &&
1839 info_element
->data
[1] == 0xe0 &&
1840 info_element
->data
[2] == 0x4c &&
1841 info_element
->data
[3] == 0x01 &&
1842 info_element
->data
[4] == 0x02)
1843 network
->Turbo_Enable
= 1;
1845 if (*tmp_htcap_len
== 0) {
1846 if (info_element
->len
>= 4 &&
1847 info_element
->data
[0] == 0x00 &&
1848 info_element
->data
[1] == 0x90 &&
1849 info_element
->data
[2] == 0x4c &&
1850 info_element
->data
[3] == 0x033) {
1851 *tmp_htcap_len
= min_t(u8
, info_element
->len
,
1853 if (*tmp_htcap_len
!= 0) {
1854 network
->bssht
.bdHTSpecVer
= HT_SPEC_VER_EWC
;
1855 network
->bssht
.bdHTCapLen
= min_t(u16
, *tmp_htcap_len
, sizeof(network
->bssht
.bdHTCapBuf
));
1856 memcpy(network
->bssht
.bdHTCapBuf
,
1858 network
->bssht
.bdHTCapLen
);
1861 if (*tmp_htcap_len
!= 0) {
1862 network
->bssht
.bdSupportHT
= true;
1863 network
->bssht
.bdHT1R
= ((((struct ht_capab_ele
*)(network
->bssht
.bdHTCapBuf
))->MCS
[1]) == 0);
1865 network
->bssht
.bdSupportHT
= false;
1866 network
->bssht
.bdHT1R
= false;
1871 if (*tmp_htinfo_len
== 0) {
1872 if (info_element
->len
>= 4 &&
1873 info_element
->data
[0] == 0x00 &&
1874 info_element
->data
[1] == 0x90 &&
1875 info_element
->data
[2] == 0x4c &&
1876 info_element
->data
[3] == 0x034) {
1877 *tmp_htinfo_len
= min_t(u8
, info_element
->len
,
1879 if (*tmp_htinfo_len
!= 0) {
1880 network
->bssht
.bdHTSpecVer
= HT_SPEC_VER_EWC
;
1881 network
->bssht
.bdHTInfoLen
= min_t(u16
, *tmp_htinfo_len
, sizeof(network
->bssht
.bdHTInfoBuf
));
1882 memcpy(network
->bssht
.bdHTInfoBuf
,
1884 network
->bssht
.bdHTInfoLen
);
1889 if (network
->bssht
.bdSupportHT
) {
1890 if (info_element
->len
>= 4 &&
1891 info_element
->data
[0] == 0x00 &&
1892 info_element
->data
[1] == 0xe0 &&
1893 info_element
->data
[2] == 0x4c &&
1894 info_element
->data
[3] == 0x02) {
1895 ht_realtek_agg_len
= min_t(u8
, info_element
->len
,
1897 memcpy(ht_realtek_agg_buf
, info_element
->data
,
1900 if (ht_realtek_agg_len
>= 5) {
1901 network
->realtek_cap_exit
= true;
1902 network
->bssht
.bdRT2RTAggregation
= true;
1904 if ((ht_realtek_agg_buf
[4] == 1) &&
1905 (ht_realtek_agg_buf
[5] & 0x02))
1906 network
->bssht
.bdRT2RTLongSlotTime
= true;
1908 if ((ht_realtek_agg_buf
[4] == 1) &&
1909 (ht_realtek_agg_buf
[5] & RT_HT_CAP_USE_92SE
))
1910 network
->bssht
.RT2RT_HT_Mode
|= RT_HT_CAP_USE_92SE
;
1913 if (ht_realtek_agg_len
>= 5) {
1914 if ((ht_realtek_agg_buf
[5] & RT_HT_CAP_USE_SOFTAP
))
1915 network
->bssht
.RT2RT_HT_Mode
|= RT_HT_CAP_USE_SOFTAP
;
1918 if ((info_element
->len
>= 3 &&
1919 info_element
->data
[0] == 0x00 &&
1920 info_element
->data
[1] == 0x05 &&
1921 info_element
->data
[2] == 0xb5) ||
1922 (info_element
->len
>= 3 &&
1923 info_element
->data
[0] == 0x00 &&
1924 info_element
->data
[1] == 0x0a &&
1925 info_element
->data
[2] == 0xf7) ||
1926 (info_element
->len
>= 3 &&
1927 info_element
->data
[0] == 0x00 &&
1928 info_element
->data
[1] == 0x10 &&
1929 info_element
->data
[2] == 0x18)) {
1930 network
->broadcom_cap_exist
= true;
1932 if (info_element
->len
>= 3 &&
1933 info_element
->data
[0] == 0x00 &&
1934 info_element
->data
[1] == 0x0c &&
1935 info_element
->data
[2] == 0x43)
1936 network
->ralink_cap_exist
= true;
1937 if ((info_element
->len
>= 3 &&
1938 info_element
->data
[0] == 0x00 &&
1939 info_element
->data
[1] == 0x03 &&
1940 info_element
->data
[2] == 0x7f) ||
1941 (info_element
->len
>= 3 &&
1942 info_element
->data
[0] == 0x00 &&
1943 info_element
->data
[1] == 0x13 &&
1944 info_element
->data
[2] == 0x74))
1945 network
->atheros_cap_exist
= true;
1947 if ((info_element
->len
>= 3 &&
1948 info_element
->data
[0] == 0x00 &&
1949 info_element
->data
[1] == 0x50 &&
1950 info_element
->data
[2] == 0x43))
1951 network
->marvell_cap_exist
= true;
1952 if (info_element
->len
>= 3 &&
1953 info_element
->data
[0] == 0x00 &&
1954 info_element
->data
[1] == 0x40 &&
1955 info_element
->data
[2] == 0x96)
1956 network
->cisco_cap_exist
= true;
1959 if (info_element
->len
>= 3 &&
1960 info_element
->data
[0] == 0x00 &&
1961 info_element
->data
[1] == 0x0a &&
1962 info_element
->data
[2] == 0xf5)
1963 network
->airgo_cap_exist
= true;
1965 if (info_element
->len
> 4 &&
1966 info_element
->data
[0] == 0x00 &&
1967 info_element
->data
[1] == 0x40 &&
1968 info_element
->data
[2] == 0x96 &&
1969 info_element
->data
[3] == 0x01) {
1970 if (info_element
->len
== 6) {
1971 memcpy(network
->CcxRmState
, &info_element
->data
[4], 2);
1972 if (network
->CcxRmState
[0] != 0)
1973 network
->bCcxRmEnable
= true;
1975 network
->bCcxRmEnable
= false;
1976 network
->MBssidMask
= network
->CcxRmState
[1] & 0x07;
1977 if (network
->MBssidMask
!= 0) {
1978 network
->bMBssidValid
= true;
1979 network
->MBssidMask
= 0xff <<
1980 (network
->MBssidMask
);
1981 ether_addr_copy(network
->MBssid
,
1983 network
->MBssid
[5] &= network
->MBssidMask
;
1985 network
->bMBssidValid
= false;
1988 network
->bCcxRmEnable
= false;
1991 if (info_element
->len
> 4 &&
1992 info_element
->data
[0] == 0x00 &&
1993 info_element
->data
[1] == 0x40 &&
1994 info_element
->data
[2] == 0x96 &&
1995 info_element
->data
[3] == 0x03) {
1996 if (info_element
->len
== 5) {
1997 network
->bWithCcxVerNum
= true;
1998 network
->BssCcxVerNumber
= info_element
->data
[4];
2000 network
->bWithCcxVerNum
= false;
2001 network
->BssCcxVerNumber
= 0;
2004 if (info_element
->len
> 4 &&
2005 info_element
->data
[0] == 0x00 &&
2006 info_element
->data
[1] == 0x50 &&
2007 info_element
->data
[2] == 0xf2 &&
2008 info_element
->data
[3] == 0x04) {
2009 netdev_dbg(ieee
->dev
, "MFIE_TYPE_WZC: %d bytes\n",
2011 network
->wzc_ie_len
= min(info_element
->len
+2, MAX_WZC_IE_LEN
);
2012 memcpy(network
->wzc_ie
, info_element
, network
->wzc_ie_len
);
2016 static void rtllib_parse_mfie_ht_cap(struct rtllib_info_element
*info_element
,
2017 struct rtllib_network
*network
,
2020 struct bss_ht
*ht
= &network
->bssht
;
2022 *tmp_htcap_len
= min_t(u8
, info_element
->len
, MAX_IE_LEN
);
2023 if (*tmp_htcap_len
!= 0) {
2024 ht
->bdHTSpecVer
= HT_SPEC_VER_EWC
;
2025 ht
->bdHTCapLen
= min_t(u16
, *tmp_htcap_len
,
2026 sizeof(ht
->bdHTCapBuf
));
2027 memcpy(ht
->bdHTCapBuf
, info_element
->data
, ht
->bdHTCapLen
);
2029 ht
->bdSupportHT
= true;
2030 ht
->bdHT1R
= ((((struct ht_capab_ele
*)
2031 ht
->bdHTCapBuf
))->MCS
[1]) == 0;
2033 ht
->bdBandWidth
= (enum ht_channel_width
)
2034 (((struct ht_capab_ele
*)
2035 (ht
->bdHTCapBuf
))->ChlWidth
);
2037 ht
->bdSupportHT
= false;
2039 ht
->bdBandWidth
= HT_CHANNEL_WIDTH_20
;
2043 int rtllib_parse_info_param(struct rtllib_device
*ieee
,
2044 struct rtllib_info_element
*info_element
,
2046 struct rtllib_network
*network
,
2047 struct rtllib_rx_stats
*stats
)
2051 u16 tmp_htcap_len
= 0;
2052 u16 tmp_htinfo_len
= 0;
2056 while (length
>= sizeof(*info_element
)) {
2057 if (sizeof(*info_element
) + info_element
->len
> length
) {
2058 netdev_dbg(ieee
->dev
,
2059 "Info elem: parse failed: info_element->len + 2 > left : info_element->len+2=%zd left=%d, id=%d.\n",
2060 info_element
->len
+ sizeof(*info_element
),
2061 length
, info_element
->id
);
2062 /* We stop processing but don't return an error here
2063 * because some misbehaviour APs break this rule. ie.
2069 switch (info_element
->id
) {
2070 case MFIE_TYPE_SSID
:
2071 if (rtllib_is_empty_essid(info_element
->data
,
2072 info_element
->len
)) {
2073 network
->flags
|= NETWORK_EMPTY_ESSID
;
2077 network
->ssid_len
= min(info_element
->len
,
2078 (u8
) IW_ESSID_MAX_SIZE
);
2079 memcpy(network
->ssid
, info_element
->data
,
2081 if (network
->ssid_len
< IW_ESSID_MAX_SIZE
)
2082 memset(network
->ssid
+ network
->ssid_len
, 0,
2083 IW_ESSID_MAX_SIZE
- network
->ssid_len
);
2085 netdev_dbg(ieee
->dev
, "MFIE_TYPE_SSID: '%s' len=%d.\n",
2086 network
->ssid
, network
->ssid_len
);
2089 case MFIE_TYPE_RATES
:
2091 network
->rates_len
= min(info_element
->len
,
2093 for (i
= 0; i
< network
->rates_len
; i
++) {
2094 network
->rates
[i
] = info_element
->data
[i
];
2095 p
+= scnprintf(p
, sizeof(rates_str
) -
2096 (p
- rates_str
), "%02X ",
2098 if (rtllib_is_ofdm_rate
2099 (info_element
->data
[i
])) {
2100 network
->flags
|= NETWORK_HAS_OFDM
;
2101 if (info_element
->data
[i
] &
2102 RTLLIB_BASIC_RATE_MASK
)
2107 if (rtllib_is_cck_rate
2108 (info_element
->data
[i
])) {
2109 network
->flags
|= NETWORK_HAS_CCK
;
2113 netdev_dbg(ieee
->dev
, "MFIE_TYPE_RATES: '%s' (%d)\n",
2114 rates_str
, network
->rates_len
);
2117 case MFIE_TYPE_RATES_EX
:
2119 network
->rates_ex_len
= min(info_element
->len
,
2120 MAX_RATES_EX_LENGTH
);
2121 for (i
= 0; i
< network
->rates_ex_len
; i
++) {
2122 network
->rates_ex
[i
] = info_element
->data
[i
];
2123 p
+= scnprintf(p
, sizeof(rates_str
) -
2124 (p
- rates_str
), "%02X ",
2125 network
->rates_ex
[i
]);
2126 if (rtllib_is_ofdm_rate
2127 (info_element
->data
[i
])) {
2128 network
->flags
|= NETWORK_HAS_OFDM
;
2129 if (info_element
->data
[i
] &
2130 RTLLIB_BASIC_RATE_MASK
)
2136 netdev_dbg(ieee
->dev
, "MFIE_TYPE_RATES_EX: '%s' (%d)\n",
2137 rates_str
, network
->rates_ex_len
);
2140 case MFIE_TYPE_DS_SET
:
2141 netdev_dbg(ieee
->dev
, "MFIE_TYPE_DS_SET: %d\n",
2142 info_element
->data
[0]);
2143 network
->channel
= info_element
->data
[0];
2146 case MFIE_TYPE_FH_SET
:
2147 netdev_dbg(ieee
->dev
, "MFIE_TYPE_FH_SET: ignored\n");
2150 case MFIE_TYPE_CF_SET
:
2151 netdev_dbg(ieee
->dev
, "MFIE_TYPE_CF_SET: ignored\n");
2155 if (info_element
->len
< 4)
2158 network
->tim
.tim_count
= info_element
->data
[0];
2159 network
->tim
.tim_period
= info_element
->data
[1];
2161 network
->dtim_period
= info_element
->data
[1];
2162 if (ieee
->state
!= RTLLIB_LINKED
)
2164 network
->last_dtim_sta_time
= jiffies
;
2166 network
->dtim_data
= RTLLIB_DTIM_VALID
;
2169 if (info_element
->data
[2] & 1)
2170 network
->dtim_data
|= RTLLIB_DTIM_MBCAST
;
2172 offset
= (info_element
->data
[2] >> 1)*2;
2175 if (ieee
->assoc_id
< 8*offset
||
2176 ieee
->assoc_id
> 8*(offset
+ info_element
->len
- 3))
2179 offset
= (ieee
->assoc_id
/ 8) - offset
;
2180 if (info_element
->data
[3 + offset
] &
2181 (1 << (ieee
->assoc_id
% 8)))
2182 network
->dtim_data
|= RTLLIB_DTIM_UCAST
;
2184 network
->listen_interval
= network
->dtim_period
;
2188 network
->erp_value
= info_element
->data
[0];
2189 network
->flags
|= NETWORK_HAS_ERP_VALUE
;
2190 netdev_dbg(ieee
->dev
, "MFIE_TYPE_ERP_SET: %d\n",
2191 network
->erp_value
);
2193 case MFIE_TYPE_IBSS_SET
:
2194 network
->atim_window
= info_element
->data
[0];
2195 netdev_dbg(ieee
->dev
, "MFIE_TYPE_IBSS_SET: %d\n",
2196 network
->atim_window
);
2199 case MFIE_TYPE_CHALLENGE
:
2200 netdev_dbg(ieee
->dev
, "MFIE_TYPE_CHALLENGE: ignored\n");
2203 case MFIE_TYPE_GENERIC
:
2204 netdev_dbg(ieee
->dev
, "MFIE_TYPE_GENERIC: %d bytes\n",
2207 rtllib_parse_mife_generic(ieee
, info_element
, network
,
2213 netdev_dbg(ieee
->dev
, "MFIE_TYPE_RSN: %d bytes\n",
2215 network
->rsn_ie_len
= min(info_element
->len
+ 2,
2217 memcpy(network
->rsn_ie
, info_element
,
2218 network
->rsn_ie_len
);
2221 case MFIE_TYPE_HT_CAP
:
2222 netdev_dbg(ieee
->dev
, "MFIE_TYPE_HT_CAP: %d bytes\n",
2225 rtllib_parse_mfie_ht_cap(info_element
, network
,
2230 case MFIE_TYPE_HT_INFO
:
2231 netdev_dbg(ieee
->dev
, "MFIE_TYPE_HT_INFO: %d bytes\n",
2233 tmp_htinfo_len
= min_t(u8
, info_element
->len
,
2235 if (tmp_htinfo_len
) {
2236 network
->bssht
.bdHTSpecVer
= HT_SPEC_VER_IEEE
;
2237 network
->bssht
.bdHTInfoLen
= tmp_htinfo_len
>
2238 sizeof(network
->bssht
.bdHTInfoBuf
) ?
2239 sizeof(network
->bssht
.bdHTInfoBuf
) :
2241 memcpy(network
->bssht
.bdHTInfoBuf
,
2243 network
->bssht
.bdHTInfoLen
);
2247 case MFIE_TYPE_AIRONET
:
2248 netdev_dbg(ieee
->dev
, "MFIE_TYPE_AIRONET: %d bytes\n",
2250 if (info_element
->len
> IE_CISCO_FLAG_POSITION
) {
2251 network
->bWithAironetIE
= true;
2253 if ((info_element
->data
[IE_CISCO_FLAG_POSITION
]
2254 & SUPPORT_CKIP_MIC
) ||
2255 (info_element
->data
[IE_CISCO_FLAG_POSITION
]
2257 network
->bCkipSupported
= true;
2259 network
->bCkipSupported
= false;
2261 network
->bWithAironetIE
= false;
2262 network
->bCkipSupported
= false;
2265 case MFIE_TYPE_QOS_PARAMETER
:
2266 netdev_err(ieee
->dev
,
2267 "QoS Error need to parse QOS_PARAMETER IE\n");
2270 case MFIE_TYPE_COUNTRY
:
2271 netdev_dbg(ieee
->dev
, "MFIE_TYPE_COUNTRY: %d bytes\n",
2273 rtllib_extract_country_ie(ieee
, info_element
, network
,
2278 netdev_dbg(ieee
->dev
,
2279 "Unsupported info element: %s (%d)\n",
2280 get_info_element_string(info_element
->id
),
2285 length
-= sizeof(*info_element
) + info_element
->len
;
2287 (struct rtllib_info_element
*)&info_element
->
2288 data
[info_element
->len
];
2291 if (!network
->atheros_cap_exist
&& !network
->broadcom_cap_exist
&&
2292 !network
->cisco_cap_exist
&& !network
->ralink_cap_exist
&&
2293 !network
->bssht
.bdRT2RTAggregation
)
2294 network
->unknown_cap_exist
= true;
2296 network
->unknown_cap_exist
= false;
2300 static long rtllib_translate_todbm(u8 signal_strength_index
)
2304 signal_power
= (long)((signal_strength_index
+ 1) >> 1);
2307 return signal_power
;
2310 static inline int rtllib_network_init(
2311 struct rtllib_device
*ieee
,
2312 struct rtllib_probe_response
*beacon
,
2313 struct rtllib_network
*network
,
2314 struct rtllib_rx_stats
*stats
)
2316 memset(&network
->qos_data
, 0, sizeof(struct rtllib_qos_data
));
2318 /* Pull out fixed field data */
2319 ether_addr_copy(network
->bssid
, beacon
->header
.addr3
);
2320 network
->capability
= le16_to_cpu(beacon
->capability
);
2321 network
->last_scanned
= jiffies
;
2322 network
->time_stamp
[0] = beacon
->time_stamp
[0];
2323 network
->time_stamp
[1] = beacon
->time_stamp
[1];
2324 network
->beacon_interval
= le16_to_cpu(beacon
->beacon_interval
);
2325 /* Where to pull this? beacon->listen_interval;*/
2326 network
->listen_interval
= 0x0A;
2327 network
->rates_len
= network
->rates_ex_len
= 0;
2328 network
->ssid_len
= 0;
2329 network
->hidden_ssid_len
= 0;
2330 memset(network
->hidden_ssid
, 0, sizeof(network
->hidden_ssid
));
2332 network
->atim_window
= 0;
2333 network
->erp_value
= (network
->capability
& WLAN_CAPABILITY_IBSS
) ?
2335 network
->berp_info_valid
= false;
2336 network
->broadcom_cap_exist
= false;
2337 network
->ralink_cap_exist
= false;
2338 network
->atheros_cap_exist
= false;
2339 network
->cisco_cap_exist
= false;
2340 network
->unknown_cap_exist
= false;
2341 network
->realtek_cap_exit
= false;
2342 network
->marvell_cap_exist
= false;
2343 network
->airgo_cap_exist
= false;
2344 network
->Turbo_Enable
= 0;
2345 network
->SignalStrength
= stats
->SignalStrength
;
2346 network
->RSSI
= stats
->SignalStrength
;
2347 network
->CountryIeLen
= 0;
2348 memset(network
->CountryIeBuf
, 0, MAX_IE_LEN
);
2349 HTInitializeBssDesc(&network
->bssht
);
2350 if (stats
->freq
== RTLLIB_52GHZ_BAND
) {
2351 /* for A band (No DS info) */
2352 network
->channel
= stats
->received_channel
;
2354 network
->flags
|= NETWORK_HAS_CCK
;
2356 network
->wpa_ie_len
= 0;
2357 network
->rsn_ie_len
= 0;
2358 network
->wzc_ie_len
= 0;
2360 if (rtllib_parse_info_param(ieee
,
2361 beacon
->info_element
,
2362 (stats
->len
- sizeof(*beacon
)),
2368 if (stats
->freq
== RTLLIB_52GHZ_BAND
)
2369 network
->mode
= IEEE_A
;
2371 if (network
->flags
& NETWORK_HAS_OFDM
)
2372 network
->mode
|= IEEE_G
;
2373 if (network
->flags
& NETWORK_HAS_CCK
)
2374 network
->mode
|= IEEE_B
;
2377 if (network
->mode
== 0) {
2378 netdev_dbg(ieee
->dev
, "Filtered out '%s (%pM)' network.\n",
2379 escape_essid(network
->ssid
, network
->ssid_len
),
2384 if (network
->bssht
.bdSupportHT
) {
2385 if (network
->mode
== IEEE_A
)
2386 network
->mode
= IEEE_N_5G
;
2387 else if (network
->mode
& (IEEE_G
| IEEE_B
))
2388 network
->mode
= IEEE_N_24G
;
2390 if (rtllib_is_empty_essid(network
->ssid
, network
->ssid_len
))
2391 network
->flags
|= NETWORK_EMPTY_ESSID
;
2392 stats
->signal
= 30 + (stats
->SignalStrength
* 70) / 100;
2393 stats
->noise
= rtllib_translate_todbm((u8
)(100-stats
->signal
)) - 25;
2395 memcpy(&network
->stats
, stats
, sizeof(network
->stats
));
2400 static inline int is_same_network(struct rtllib_network
*src
,
2401 struct rtllib_network
*dst
, u8 ssidbroad
)
2403 /* A network is only a duplicate if the channel, BSSID, ESSID
2404 * and the capability field (in particular IBSS and BSS) all match.
2405 * We treat all <hidden> with the same BSSID and channel
2408 return (((src
->ssid_len
== dst
->ssid_len
) || (!ssidbroad
)) &&
2409 (src
->channel
== dst
->channel
) &&
2410 !memcmp(src
->bssid
, dst
->bssid
, ETH_ALEN
) &&
2411 (!memcmp(src
->ssid
, dst
->ssid
, src
->ssid_len
) ||
2413 ((src
->capability
& WLAN_CAPABILITY_IBSS
) ==
2414 (dst
->capability
& WLAN_CAPABILITY_IBSS
)) &&
2415 ((src
->capability
& WLAN_CAPABILITY_ESS
) ==
2416 (dst
->capability
& WLAN_CAPABILITY_ESS
)));
2420 static inline void update_network(struct rtllib_device
*ieee
,
2421 struct rtllib_network
*dst
,
2422 struct rtllib_network
*src
)
2427 memcpy(&dst
->stats
, &src
->stats
, sizeof(struct rtllib_rx_stats
));
2428 dst
->capability
= src
->capability
;
2429 memcpy(dst
->rates
, src
->rates
, src
->rates_len
);
2430 dst
->rates_len
= src
->rates_len
;
2431 memcpy(dst
->rates_ex
, src
->rates_ex
, src
->rates_ex_len
);
2432 dst
->rates_ex_len
= src
->rates_ex_len
;
2433 if (src
->ssid_len
> 0) {
2434 if (dst
->ssid_len
== 0) {
2435 memset(dst
->hidden_ssid
, 0, sizeof(dst
->hidden_ssid
));
2436 dst
->hidden_ssid_len
= src
->ssid_len
;
2437 memcpy(dst
->hidden_ssid
, src
->ssid
, src
->ssid_len
);
2439 memset(dst
->ssid
, 0, dst
->ssid_len
);
2440 dst
->ssid_len
= src
->ssid_len
;
2441 memcpy(dst
->ssid
, src
->ssid
, src
->ssid_len
);
2444 dst
->mode
= src
->mode
;
2445 dst
->flags
= src
->flags
;
2446 dst
->time_stamp
[0] = src
->time_stamp
[0];
2447 dst
->time_stamp
[1] = src
->time_stamp
[1];
2448 if (src
->flags
& NETWORK_HAS_ERP_VALUE
) {
2449 dst
->erp_value
= src
->erp_value
;
2450 dst
->berp_info_valid
= src
->berp_info_valid
= true;
2452 dst
->beacon_interval
= src
->beacon_interval
;
2453 dst
->listen_interval
= src
->listen_interval
;
2454 dst
->atim_window
= src
->atim_window
;
2455 dst
->dtim_period
= src
->dtim_period
;
2456 dst
->dtim_data
= src
->dtim_data
;
2457 dst
->last_dtim_sta_time
= src
->last_dtim_sta_time
;
2458 memcpy(&dst
->tim
, &src
->tim
, sizeof(struct rtllib_tim_parameters
));
2460 dst
->bssht
.bdSupportHT
= src
->bssht
.bdSupportHT
;
2461 dst
->bssht
.bdRT2RTAggregation
= src
->bssht
.bdRT2RTAggregation
;
2462 dst
->bssht
.bdHTCapLen
= src
->bssht
.bdHTCapLen
;
2463 memcpy(dst
->bssht
.bdHTCapBuf
, src
->bssht
.bdHTCapBuf
,
2464 src
->bssht
.bdHTCapLen
);
2465 dst
->bssht
.bdHTInfoLen
= src
->bssht
.bdHTInfoLen
;
2466 memcpy(dst
->bssht
.bdHTInfoBuf
, src
->bssht
.bdHTInfoBuf
,
2467 src
->bssht
.bdHTInfoLen
);
2468 dst
->bssht
.bdHTSpecVer
= src
->bssht
.bdHTSpecVer
;
2469 dst
->bssht
.bdRT2RTLongSlotTime
= src
->bssht
.bdRT2RTLongSlotTime
;
2470 dst
->broadcom_cap_exist
= src
->broadcom_cap_exist
;
2471 dst
->ralink_cap_exist
= src
->ralink_cap_exist
;
2472 dst
->atheros_cap_exist
= src
->atheros_cap_exist
;
2473 dst
->realtek_cap_exit
= src
->realtek_cap_exit
;
2474 dst
->marvell_cap_exist
= src
->marvell_cap_exist
;
2475 dst
->cisco_cap_exist
= src
->cisco_cap_exist
;
2476 dst
->airgo_cap_exist
= src
->airgo_cap_exist
;
2477 dst
->unknown_cap_exist
= src
->unknown_cap_exist
;
2478 memcpy(dst
->wpa_ie
, src
->wpa_ie
, src
->wpa_ie_len
);
2479 dst
->wpa_ie_len
= src
->wpa_ie_len
;
2480 memcpy(dst
->rsn_ie
, src
->rsn_ie
, src
->rsn_ie_len
);
2481 dst
->rsn_ie_len
= src
->rsn_ie_len
;
2482 memcpy(dst
->wzc_ie
, src
->wzc_ie
, src
->wzc_ie_len
);
2483 dst
->wzc_ie_len
= src
->wzc_ie_len
;
2485 dst
->last_scanned
= jiffies
;
2486 /* qos related parameters */
2487 qos_active
= dst
->qos_data
.active
;
2488 old_param
= dst
->qos_data
.param_count
;
2489 dst
->qos_data
.supported
= src
->qos_data
.supported
;
2490 if (dst
->flags
& NETWORK_HAS_QOS_PARAMETERS
)
2491 memcpy(&dst
->qos_data
, &src
->qos_data
,
2492 sizeof(struct rtllib_qos_data
));
2493 if (dst
->qos_data
.supported
== 1) {
2495 netdev_dbg(ieee
->dev
,
2496 "QoS the network %s is QoS supported\n",
2499 netdev_dbg(ieee
->dev
,
2500 "QoS the network is QoS supported\n");
2502 dst
->qos_data
.active
= qos_active
;
2503 dst
->qos_data
.old_param_count
= old_param
;
2505 dst
->wmm_info
= src
->wmm_info
;
2506 if (src
->wmm_param
[0].ac_aci_acm_aifsn
||
2507 src
->wmm_param
[1].ac_aci_acm_aifsn
||
2508 src
->wmm_param
[2].ac_aci_acm_aifsn
||
2509 src
->wmm_param
[3].ac_aci_acm_aifsn
)
2510 memcpy(dst
->wmm_param
, src
->wmm_param
, WME_AC_PRAM_LEN
);
2512 dst
->SignalStrength
= src
->SignalStrength
;
2513 dst
->RSSI
= src
->RSSI
;
2514 dst
->Turbo_Enable
= src
->Turbo_Enable
;
2516 dst
->CountryIeLen
= src
->CountryIeLen
;
2517 memcpy(dst
->CountryIeBuf
, src
->CountryIeBuf
, src
->CountryIeLen
);
2519 dst
->bWithAironetIE
= src
->bWithAironetIE
;
2520 dst
->bCkipSupported
= src
->bCkipSupported
;
2521 memcpy(dst
->CcxRmState
, src
->CcxRmState
, 2);
2522 dst
->bCcxRmEnable
= src
->bCcxRmEnable
;
2523 dst
->MBssidMask
= src
->MBssidMask
;
2524 dst
->bMBssidValid
= src
->bMBssidValid
;
2525 memcpy(dst
->MBssid
, src
->MBssid
, 6);
2526 dst
->bWithCcxVerNum
= src
->bWithCcxVerNum
;
2527 dst
->BssCcxVerNumber
= src
->BssCcxVerNumber
;
2530 static inline int is_beacon(u16 fc
)
2532 return (WLAN_FC_GET_STYPE(fc
) == RTLLIB_STYPE_BEACON
);
2535 static int IsPassiveChannel(struct rtllib_device
*rtllib
, u8 channel
)
2537 if (channel
> MAX_CHANNEL_NUMBER
) {
2538 netdev_info(rtllib
->dev
, "%s(): Invalid Channel\n", __func__
);
2542 if (rtllib
->active_channel_map
[channel
] == 2)
2548 int rtllib_legal_channel(struct rtllib_device
*rtllib
, u8 channel
)
2550 if (channel
> MAX_CHANNEL_NUMBER
) {
2551 netdev_info(rtllib
->dev
, "%s(): Invalid Channel\n", __func__
);
2554 if (rtllib
->active_channel_map
[channel
] > 0)
2559 EXPORT_SYMBOL(rtllib_legal_channel
);
2561 static inline void rtllib_process_probe_response(
2562 struct rtllib_device
*ieee
,
2563 struct rtllib_probe_response
*beacon
,
2564 struct rtllib_rx_stats
*stats
)
2566 struct rtllib_network
*target
;
2567 struct rtllib_network
*oldest
= NULL
;
2568 struct rtllib_info_element
*info_element
= &beacon
->info_element
[0];
2569 unsigned long flags
;
2571 struct rtllib_network
*network
= kzalloc(sizeof(struct rtllib_network
),
2573 u16 frame_ctl
= le16_to_cpu(beacon
->header
.frame_ctl
);
2578 netdev_dbg(ieee
->dev
,
2579 "'%s' ( %pM ): %c%c%c%c %c%c%c%c-%c%c%c%c %c%c%c%c\n",
2580 escape_essid(info_element
->data
, info_element
->len
),
2581 beacon
->header
.addr3
,
2582 (le16_to_cpu(beacon
->capability
) & (1<<0xf)) ? '1' : '0',
2583 (le16_to_cpu(beacon
->capability
) & (1<<0xe)) ? '1' : '0',
2584 (le16_to_cpu(beacon
->capability
) & (1<<0xd)) ? '1' : '0',
2585 (le16_to_cpu(beacon
->capability
) & (1<<0xc)) ? '1' : '0',
2586 (le16_to_cpu(beacon
->capability
) & (1<<0xb)) ? '1' : '0',
2587 (le16_to_cpu(beacon
->capability
) & (1<<0xa)) ? '1' : '0',
2588 (le16_to_cpu(beacon
->capability
) & (1<<0x9)) ? '1' : '0',
2589 (le16_to_cpu(beacon
->capability
) & (1<<0x8)) ? '1' : '0',
2590 (le16_to_cpu(beacon
->capability
) & (1<<0x7)) ? '1' : '0',
2591 (le16_to_cpu(beacon
->capability
) & (1<<0x6)) ? '1' : '0',
2592 (le16_to_cpu(beacon
->capability
) & (1<<0x5)) ? '1' : '0',
2593 (le16_to_cpu(beacon
->capability
) & (1<<0x4)) ? '1' : '0',
2594 (le16_to_cpu(beacon
->capability
) & (1<<0x3)) ? '1' : '0',
2595 (le16_to_cpu(beacon
->capability
) & (1<<0x2)) ? '1' : '0',
2596 (le16_to_cpu(beacon
->capability
) & (1<<0x1)) ? '1' : '0',
2597 (le16_to_cpu(beacon
->capability
) & (1<<0x0)) ? '1' : '0');
2599 if (rtllib_network_init(ieee
, beacon
, network
, stats
)) {
2600 netdev_dbg(ieee
->dev
, "Dropped '%s' ( %pM) via %s.\n",
2601 escape_essid(info_element
->data
, info_element
->len
),
2602 beacon
->header
.addr3
,
2603 is_beacon(frame_ctl
) ? "BEACON" : "PROBE RESPONSE");
2608 if (!rtllib_legal_channel(ieee
, network
->channel
))
2611 if (WLAN_FC_GET_STYPE(frame_ctl
) == RTLLIB_STYPE_PROBE_RESP
) {
2612 if (IsPassiveChannel(ieee
, network
->channel
)) {
2613 netdev_info(ieee
->dev
,
2614 "GetScanInfo(): For Global Domain, filter probe response at channel(%d).\n",
2620 /* The network parsed correctly -- so now we scan our known networks
2621 * to see if we can find it in our list.
2623 * NOTE: This search is definitely not optimized. Once its doing
2624 * the "right thing" we'll optimize it for efficiency if
2628 /* Search for this entry in the list and update it if it is
2632 spin_lock_irqsave(&ieee
->lock
, flags
);
2633 if (is_same_network(&ieee
->current_network
, network
,
2634 (network
->ssid_len
? 1 : 0))) {
2635 update_network(ieee
, &ieee
->current_network
, network
);
2636 if ((ieee
->current_network
.mode
== IEEE_N_24G
||
2637 ieee
->current_network
.mode
== IEEE_G
) &&
2638 ieee
->current_network
.berp_info_valid
) {
2639 if (ieee
->current_network
.erp_value
& ERP_UseProtection
)
2640 ieee
->current_network
.buseprotection
= true;
2642 ieee
->current_network
.buseprotection
= false;
2644 if (is_beacon(frame_ctl
)) {
2645 if (ieee
->state
>= RTLLIB_LINKED
)
2646 ieee
->LinkDetectInfo
.NumRecvBcnInPeriod
++;
2649 list_for_each_entry(target
, &ieee
->network_list
, list
) {
2650 if (is_same_network(target
, network
,
2651 (target
->ssid_len
? 1 : 0)))
2653 if ((oldest
== NULL
) ||
2654 (target
->last_scanned
< oldest
->last_scanned
))
2658 /* If we didn't find a match, then get a new network slot to initialize
2659 * with this beacon's information
2661 if (&target
->list
== &ieee
->network_list
) {
2662 if (list_empty(&ieee
->network_free_list
)) {
2663 /* If there are no more slots, expire the oldest */
2664 list_del(&oldest
->list
);
2666 netdev_dbg(ieee
->dev
,
2667 "Expired '%s' ( %pM) from network list.\n",
2668 escape_essid(target
->ssid
, target
->ssid_len
),
2671 /* Otherwise just pull from the free list */
2672 target
= list_entry(ieee
->network_free_list
.next
,
2673 struct rtllib_network
, list
);
2674 list_del(ieee
->network_free_list
.next
);
2677 netdev_dbg(ieee
->dev
, "Adding '%s' ( %pM) via %s.\n",
2678 escape_essid(network
->ssid
, network
->ssid_len
),
2680 is_beacon(frame_ctl
) ? "BEACON" : "PROBE RESPONSE");
2682 memcpy(target
, network
, sizeof(*target
));
2683 list_add_tail(&target
->list
, &ieee
->network_list
);
2684 if (ieee
->softmac_features
& IEEE_SOFTMAC_ASSOCIATE
)
2685 rtllib_softmac_new_net(ieee
, network
);
2687 netdev_dbg(ieee
->dev
, "Updating '%s' ( %pM) via %s.\n",
2688 escape_essid(target
->ssid
, target
->ssid_len
),
2690 is_beacon(frame_ctl
) ? "BEACON" : "PROBE RESPONSE");
2692 /* we have an entry and we are going to update it. But this
2693 * entry may be already expired. In this case we do the same
2694 * as we found a new net and call the new_net handler
2696 renew
= !time_after(target
->last_scanned
+ ieee
->scan_age
,
2698 if ((!target
->ssid_len
) &&
2699 (((network
->ssid_len
> 0) && (target
->hidden_ssid_len
== 0))
2700 || ((ieee
->current_network
.ssid_len
== network
->ssid_len
) &&
2701 (strncmp(ieee
->current_network
.ssid
, network
->ssid
,
2702 network
->ssid_len
) == 0) &&
2703 (ieee
->state
== RTLLIB_NOLINK
))))
2705 update_network(ieee
, target
, network
);
2706 if (renew
&& (ieee
->softmac_features
& IEEE_SOFTMAC_ASSOCIATE
))
2707 rtllib_softmac_new_net(ieee
, network
);
2710 spin_unlock_irqrestore(&ieee
->lock
, flags
);
2711 if (is_beacon(frame_ctl
) &&
2712 is_same_network(&ieee
->current_network
, network
,
2713 (network
->ssid_len
? 1 : 0)) &&
2714 (ieee
->state
== RTLLIB_LINKED
)) {
2715 if (ieee
->handle_beacon
!= NULL
)
2716 ieee
->handle_beacon(ieee
->dev
, beacon
,
2717 &ieee
->current_network
);
2723 static void rtllib_rx_mgt(struct rtllib_device
*ieee
,
2724 struct sk_buff
*skb
,
2725 struct rtllib_rx_stats
*stats
)
2727 struct rtllib_hdr_4addr
*header
= (struct rtllib_hdr_4addr
*)skb
->data
;
2729 if ((WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
)) !=
2730 RTLLIB_STYPE_PROBE_RESP
) &&
2731 (WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
)) !=
2732 RTLLIB_STYPE_BEACON
))
2733 ieee
->last_rx_ps_time
= jiffies
;
2735 switch (WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
))) {
2737 case RTLLIB_STYPE_BEACON
:
2738 netdev_dbg(ieee
->dev
, "received BEACON (%d)\n",
2739 WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
)));
2740 rtllib_process_probe_response(
2741 ieee
, (struct rtllib_probe_response
*)header
,
2744 if (ieee
->sta_sleep
|| (ieee
->ps
!= RTLLIB_PS_DISABLED
&&
2745 ieee
->iw_mode
== IW_MODE_INFRA
&&
2746 ieee
->state
== RTLLIB_LINKED
))
2747 tasklet_schedule(&ieee
->ps_task
);
2751 case RTLLIB_STYPE_PROBE_RESP
:
2752 netdev_dbg(ieee
->dev
, "received PROBE RESPONSE (%d)\n",
2753 WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
)));
2754 rtllib_process_probe_response(ieee
,
2755 (struct rtllib_probe_response
*)header
, stats
);
2757 case RTLLIB_STYPE_PROBE_REQ
:
2758 netdev_dbg(ieee
->dev
, "received PROBE RESQUEST (%d)\n",
2759 WLAN_FC_GET_STYPE(le16_to_cpu(header
->frame_ctl
)));
2760 if ((ieee
->softmac_features
& IEEE_SOFTMAC_PROBERS
) &&
2761 ((ieee
->iw_mode
== IW_MODE_ADHOC
||
2762 ieee
->iw_mode
== IW_MODE_MASTER
) &&
2763 ieee
->state
== RTLLIB_LINKED
))
2764 rtllib_rx_probe_rq(ieee
, skb
);