Root/
1 | /* |
2 | * BSS client mode implementation |
3 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> |
4 | * Copyright 2004, Instant802 Networks, Inc. |
5 | * Copyright 2005, Devicescape Software, Inc. |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> |
8 | * |
9 | * This program is free software; you can redistribute it and/or modify |
10 | * it under the terms of the GNU General Public License version 2 as |
11 | * published by the Free Software Foundation. |
12 | */ |
13 | |
14 | #include <linux/delay.h> |
15 | #include <linux/if_ether.h> |
16 | #include <linux/skbuff.h> |
17 | #include <linux/if_arp.h> |
18 | #include <linux/etherdevice.h> |
19 | #include <linux/rtnetlink.h> |
20 | #include <linux/pm_qos_params.h> |
21 | #include <linux/crc32.h> |
22 | #include <net/mac80211.h> |
23 | #include <asm/unaligned.h> |
24 | |
25 | #include "ieee80211_i.h" |
26 | #include "driver-ops.h" |
27 | #include "rate.h" |
28 | #include "led.h" |
29 | |
30 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) |
31 | #define IEEE80211_AUTH_MAX_TRIES 3 |
32 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) |
33 | #define IEEE80211_ASSOC_MAX_TRIES 3 |
34 | #define IEEE80211_MAX_PROBE_TRIES 5 |
35 | |
36 | /* |
37 | * beacon loss detection timeout |
38 | * XXX: should depend on beacon interval |
39 | */ |
40 | #define IEEE80211_BEACON_LOSS_TIME (2 * HZ) |
41 | /* |
42 | * Time the connection can be idle before we probe |
43 | * it to see if we can still talk to the AP. |
44 | */ |
45 | #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ) |
46 | /* |
47 | * Time we wait for a probe response after sending |
48 | * a probe request because of beacon loss or for |
49 | * checking the connection still works. |
50 | */ |
51 | #define IEEE80211_PROBE_WAIT (HZ / 2) |
52 | |
53 | #define TMR_RUNNING_TIMER 0 |
54 | #define TMR_RUNNING_CHANSW 1 |
55 | |
56 | /* |
57 | * All cfg80211 functions have to be called outside a locked |
58 | * section so that they can acquire a lock themselves... This |
59 | * is much simpler than queuing up things in cfg80211, but we |
60 | * do need some indirection for that here. |
61 | */ |
62 | enum rx_mgmt_action { |
63 | /* no action required */ |
64 | RX_MGMT_NONE, |
65 | |
66 | /* caller must call cfg80211_send_rx_auth() */ |
67 | RX_MGMT_CFG80211_AUTH, |
68 | |
69 | /* caller must call cfg80211_send_rx_assoc() */ |
70 | RX_MGMT_CFG80211_ASSOC, |
71 | |
72 | /* caller must call cfg80211_send_deauth() */ |
73 | RX_MGMT_CFG80211_DEAUTH, |
74 | |
75 | /* caller must call cfg80211_send_disassoc() */ |
76 | RX_MGMT_CFG80211_DISASSOC, |
77 | |
78 | /* caller must call cfg80211_auth_timeout() & free work */ |
79 | RX_MGMT_CFG80211_AUTH_TO, |
80 | |
81 | /* caller must call cfg80211_assoc_timeout() & free work */ |
82 | RX_MGMT_CFG80211_ASSOC_TO, |
83 | }; |
84 | |
85 | /* utils */ |
86 | static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd) |
87 | { |
88 | WARN_ON(!mutex_is_locked(&ifmgd->mtx)); |
89 | } |
90 | |
91 | /* |
92 | * We can have multiple work items (and connection probing) |
93 | * scheduling this timer, but we need to take care to only |
94 | * reschedule it when it should fire _earlier_ than it was |
95 | * asked for before, or if it's not pending right now. This |
96 | * function ensures that. Note that it then is required to |
97 | * run this function for all timeouts after the first one |
98 | * has happened -- the work that runs from this timer will |
99 | * do that. |
100 | */ |
101 | static void run_again(struct ieee80211_if_managed *ifmgd, |
102 | unsigned long timeout) |
103 | { |
104 | ASSERT_MGD_MTX(ifmgd); |
105 | |
106 | if (!timer_pending(&ifmgd->timer) || |
107 | time_before(timeout, ifmgd->timer.expires)) |
108 | mod_timer(&ifmgd->timer, timeout); |
109 | } |
110 | |
111 | static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata) |
112 | { |
113 | if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER) |
114 | return; |
115 | |
116 | mod_timer(&sdata->u.mgd.bcn_mon_timer, |
117 | round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME)); |
118 | } |
119 | |
120 | static int ecw2cw(int ecw) |
121 | { |
122 | return (1 << ecw) - 1; |
123 | } |
124 | |
125 | static int ieee80211_compatible_rates(struct ieee80211_bss *bss, |
126 | struct ieee80211_supported_band *sband, |
127 | u32 *rates) |
128 | { |
129 | int i, j, count; |
130 | *rates = 0; |
131 | count = 0; |
132 | for (i = 0; i < bss->supp_rates_len; i++) { |
133 | int rate = (bss->supp_rates[i] & 0x7F) * 5; |
134 | |
135 | for (j = 0; j < sband->n_bitrates; j++) |
136 | if (sband->bitrates[j].bitrate == rate) { |
137 | *rates |= BIT(j); |
138 | count++; |
139 | break; |
140 | } |
141 | } |
142 | |
143 | return count; |
144 | } |
145 | |
146 | /* |
147 | * ieee80211_enable_ht should be called only after the operating band |
148 | * has been determined as ht configuration depends on the hw's |
149 | * HT abilities for a specific band. |
150 | */ |
151 | static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, |
152 | struct ieee80211_ht_info *hti, |
153 | const u8 *bssid, u16 ap_ht_cap_flags) |
154 | { |
155 | struct ieee80211_local *local = sdata->local; |
156 | struct ieee80211_supported_band *sband; |
157 | struct sta_info *sta; |
158 | u32 changed = 0; |
159 | u16 ht_opmode; |
160 | bool enable_ht = true, ht_changed; |
161 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; |
162 | |
163 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
164 | |
165 | /* HT is not supported */ |
166 | if (!sband->ht_cap.ht_supported) |
167 | enable_ht = false; |
168 | |
169 | /* check that channel matches the right operating channel */ |
170 | if (local->hw.conf.channel->center_freq != |
171 | ieee80211_channel_to_frequency(hti->control_chan)) |
172 | enable_ht = false; |
173 | |
174 | if (enable_ht) { |
175 | channel_type = NL80211_CHAN_HT20; |
176 | |
177 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && |
178 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && |
179 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { |
180 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
181 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: |
182 | if (!(local->hw.conf.channel->flags & |
183 | IEEE80211_CHAN_NO_HT40PLUS)) |
184 | channel_type = NL80211_CHAN_HT40PLUS; |
185 | break; |
186 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
187 | if (!(local->hw.conf.channel->flags & |
188 | IEEE80211_CHAN_NO_HT40MINUS)) |
189 | channel_type = NL80211_CHAN_HT40MINUS; |
190 | break; |
191 | } |
192 | } |
193 | } |
194 | |
195 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || |
196 | channel_type != local->hw.conf.channel_type; |
197 | |
198 | local->oper_channel_type = channel_type; |
199 | |
200 | if (ht_changed) { |
201 | /* channel_type change automatically detected */ |
202 | ieee80211_hw_config(local, 0); |
203 | |
204 | rcu_read_lock(); |
205 | sta = sta_info_get(local, bssid); |
206 | if (sta) |
207 | rate_control_rate_update(local, sband, sta, |
208 | IEEE80211_RC_HT_CHANGED); |
209 | rcu_read_unlock(); |
210 | } |
211 | |
212 | /* disable HT */ |
213 | if (!enable_ht) |
214 | return 0; |
215 | |
216 | ht_opmode = le16_to_cpu(hti->operation_mode); |
217 | |
218 | /* if bss configuration changed store the new one */ |
219 | if (!sdata->ht_opmode_valid || |
220 | sdata->vif.bss_conf.ht_operation_mode != ht_opmode) { |
221 | changed |= BSS_CHANGED_HT; |
222 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; |
223 | sdata->ht_opmode_valid = true; |
224 | } |
225 | |
226 | return changed; |
227 | } |
228 | |
229 | /* frame sending functions */ |
230 | |
231 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
232 | struct ieee80211_mgd_work *wk) |
233 | { |
234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
235 | struct ieee80211_local *local = sdata->local; |
236 | struct sk_buff *skb; |
237 | struct ieee80211_mgmt *mgmt; |
238 | u8 *pos; |
239 | const u8 *ies, *ht_ie; |
240 | int i, len, count, rates_len, supp_rates_len; |
241 | u16 capab; |
242 | int wmm = 0; |
243 | struct ieee80211_supported_band *sband; |
244 | u32 rates = 0; |
245 | |
246 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + |
247 | sizeof(*mgmt) + 200 + wk->ie_len + |
248 | wk->ssid_len); |
249 | if (!skb) { |
250 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " |
251 | "frame\n", sdata->dev->name); |
252 | return; |
253 | } |
254 | skb_reserve(skb, local->hw.extra_tx_headroom); |
255 | |
256 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
257 | |
258 | capab = ifmgd->capab; |
259 | |
260 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { |
261 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) |
262 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; |
263 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) |
264 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; |
265 | } |
266 | |
267 | if (wk->bss->cbss.capability & WLAN_CAPABILITY_PRIVACY) |
268 | capab |= WLAN_CAPABILITY_PRIVACY; |
269 | if (wk->bss->wmm_used) |
270 | wmm = 1; |
271 | |
272 | /* get all rates supported by the device and the AP as |
273 | * some APs don't like getting a superset of their rates |
274 | * in the association request (e.g. D-Link DAP 1353 in |
275 | * b-only mode) */ |
276 | rates_len = ieee80211_compatible_rates(wk->bss, sband, &rates); |
277 | |
278 | if ((wk->bss->cbss.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
279 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) |
280 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; |
281 | |
282 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); |
283 | memset(mgmt, 0, 24); |
284 | memcpy(mgmt->da, wk->bss->cbss.bssid, ETH_ALEN); |
285 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
286 | memcpy(mgmt->bssid, wk->bss->cbss.bssid, ETH_ALEN); |
287 | |
288 | if (!is_zero_ether_addr(wk->prev_bssid)) { |
289 | skb_put(skb, 10); |
290 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | |
291 | IEEE80211_STYPE_REASSOC_REQ); |
292 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); |
293 | mgmt->u.reassoc_req.listen_interval = |
294 | cpu_to_le16(local->hw.conf.listen_interval); |
295 | memcpy(mgmt->u.reassoc_req.current_ap, wk->prev_bssid, |
296 | ETH_ALEN); |
297 | } else { |
298 | skb_put(skb, 4); |
299 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | |
300 | IEEE80211_STYPE_ASSOC_REQ); |
301 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); |
302 | mgmt->u.assoc_req.listen_interval = |
303 | cpu_to_le16(local->hw.conf.listen_interval); |
304 | } |
305 | |
306 | /* SSID */ |
307 | ies = pos = skb_put(skb, 2 + wk->ssid_len); |
308 | *pos++ = WLAN_EID_SSID; |
309 | *pos++ = wk->ssid_len; |
310 | memcpy(pos, wk->ssid, wk->ssid_len); |
311 | |
312 | /* add all rates which were marked to be used above */ |
313 | supp_rates_len = rates_len; |
314 | if (supp_rates_len > 8) |
315 | supp_rates_len = 8; |
316 | |
317 | len = sband->n_bitrates; |
318 | pos = skb_put(skb, supp_rates_len + 2); |
319 | *pos++ = WLAN_EID_SUPP_RATES; |
320 | *pos++ = supp_rates_len; |
321 | |
322 | count = 0; |
323 | for (i = 0; i < sband->n_bitrates; i++) { |
324 | if (BIT(i) & rates) { |
325 | int rate = sband->bitrates[i].bitrate; |
326 | *pos++ = (u8) (rate / 5); |
327 | if (++count == 8) |
328 | break; |
329 | } |
330 | } |
331 | |
332 | if (rates_len > count) { |
333 | pos = skb_put(skb, rates_len - count + 2); |
334 | *pos++ = WLAN_EID_EXT_SUPP_RATES; |
335 | *pos++ = rates_len - count; |
336 | |
337 | for (i++; i < sband->n_bitrates; i++) { |
338 | if (BIT(i) & rates) { |
339 | int rate = sband->bitrates[i].bitrate; |
340 | *pos++ = (u8) (rate / 5); |
341 | } |
342 | } |
343 | } |
344 | |
345 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { |
346 | /* 1. power capabilities */ |
347 | pos = skb_put(skb, 4); |
348 | *pos++ = WLAN_EID_PWR_CAPABILITY; |
349 | *pos++ = 2; |
350 | *pos++ = 0; /* min tx power */ |
351 | *pos++ = local->hw.conf.channel->max_power; /* max tx power */ |
352 | |
353 | /* 2. supported channels */ |
354 | /* TODO: get this in reg domain format */ |
355 | pos = skb_put(skb, 2 * sband->n_channels + 2); |
356 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; |
357 | *pos++ = 2 * sband->n_channels; |
358 | for (i = 0; i < sband->n_channels; i++) { |
359 | *pos++ = ieee80211_frequency_to_channel( |
360 | sband->channels[i].center_freq); |
361 | *pos++ = 1; /* one channel in the subband*/ |
362 | } |
363 | } |
364 | |
365 | if (wk->ie_len && wk->ie) { |
366 | pos = skb_put(skb, wk->ie_len); |
367 | memcpy(pos, wk->ie, wk->ie_len); |
368 | } |
369 | |
370 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) { |
371 | pos = skb_put(skb, 9); |
372 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; |
373 | *pos++ = 7; /* len */ |
374 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ |
375 | *pos++ = 0x50; |
376 | *pos++ = 0xf2; |
377 | *pos++ = 2; /* WME */ |
378 | *pos++ = 0; /* WME info */ |
379 | *pos++ = 1; /* WME ver */ |
380 | *pos++ = 0; |
381 | } |
382 | |
383 | /* wmm support is a must to HT */ |
384 | /* |
385 | * IEEE802.11n does not allow TKIP/WEP as pairwise |
386 | * ciphers in HT mode. We still associate in non-ht |
387 | * mode (11a/b/g) if any one of these ciphers is |
388 | * configured as pairwise. |
389 | */ |
390 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
391 | sband->ht_cap.ht_supported && |
392 | (ht_ie = ieee80211_bss_get_ie(&wk->bss->cbss, WLAN_EID_HT_INFORMATION)) && |
393 | ht_ie[1] >= sizeof(struct ieee80211_ht_info) && |
394 | (!(ifmgd->flags & IEEE80211_STA_DISABLE_11N))) { |
395 | struct ieee80211_ht_info *ht_info = |
396 | (struct ieee80211_ht_info *)(ht_ie + 2); |
397 | u16 cap = sband->ht_cap.cap; |
398 | __le16 tmp; |
399 | u32 flags = local->hw.conf.channel->flags; |
400 | |
401 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
402 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: |
403 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { |
404 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
405 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
406 | } |
407 | break; |
408 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
409 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { |
410 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
411 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
412 | } |
413 | break; |
414 | } |
415 | |
416 | tmp = cpu_to_le16(cap); |
417 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2); |
418 | *pos++ = WLAN_EID_HT_CAPABILITY; |
419 | *pos++ = sizeof(struct ieee80211_ht_cap); |
420 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); |
421 | memcpy(pos, &tmp, sizeof(u16)); |
422 | pos += sizeof(u16); |
423 | /* TODO: needs a define here for << 2 */ |
424 | *pos++ = sband->ht_cap.ampdu_factor | |
425 | (sband->ht_cap.ampdu_density << 2); |
426 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); |
427 | } |
428 | |
429 | ieee80211_tx_skb(sdata, skb, 0); |
430 | } |
431 | |
432 | |
433 | static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, |
434 | const u8 *bssid, u16 stype, u16 reason, |
435 | void *cookie) |
436 | { |
437 | struct ieee80211_local *local = sdata->local; |
438 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
439 | struct sk_buff *skb; |
440 | struct ieee80211_mgmt *mgmt; |
441 | |
442 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); |
443 | if (!skb) { |
444 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
445 | "deauth/disassoc frame\n", sdata->dev->name); |
446 | return; |
447 | } |
448 | skb_reserve(skb, local->hw.extra_tx_headroom); |
449 | |
450 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); |
451 | memset(mgmt, 0, 24); |
452 | memcpy(mgmt->da, bssid, ETH_ALEN); |
453 | memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN); |
454 | memcpy(mgmt->bssid, bssid, ETH_ALEN); |
455 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); |
456 | skb_put(skb, 2); |
457 | /* u.deauth.reason_code == u.disassoc.reason_code */ |
458 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); |
459 | |
460 | if (stype == IEEE80211_STYPE_DEAUTH) |
461 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, cookie); |
462 | else |
463 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len, cookie); |
464 | ieee80211_tx_skb(sdata, skb, ifmgd->flags & IEEE80211_STA_MFP_ENABLED); |
465 | } |
466 | |
467 | void ieee80211_send_pspoll(struct ieee80211_local *local, |
468 | struct ieee80211_sub_if_data *sdata) |
469 | { |
470 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
471 | struct ieee80211_pspoll *pspoll; |
472 | struct sk_buff *skb; |
473 | u16 fc; |
474 | |
475 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*pspoll)); |
476 | if (!skb) { |
477 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
478 | "pspoll frame\n", sdata->dev->name); |
479 | return; |
480 | } |
481 | skb_reserve(skb, local->hw.extra_tx_headroom); |
482 | |
483 | pspoll = (struct ieee80211_pspoll *) skb_put(skb, sizeof(*pspoll)); |
484 | memset(pspoll, 0, sizeof(*pspoll)); |
485 | fc = IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL | IEEE80211_FCTL_PM; |
486 | pspoll->frame_control = cpu_to_le16(fc); |
487 | pspoll->aid = cpu_to_le16(ifmgd->aid); |
488 | |
489 | /* aid in PS-Poll has its two MSBs each set to 1 */ |
490 | pspoll->aid |= cpu_to_le16(1 << 15 | 1 << 14); |
491 | |
492 | memcpy(pspoll->bssid, ifmgd->bssid, ETH_ALEN); |
493 | memcpy(pspoll->ta, sdata->dev->dev_addr, ETH_ALEN); |
494 | |
495 | ieee80211_tx_skb(sdata, skb, 0); |
496 | } |
497 | |
498 | void ieee80211_send_nullfunc(struct ieee80211_local *local, |
499 | struct ieee80211_sub_if_data *sdata, |
500 | int powersave) |
501 | { |
502 | struct sk_buff *skb; |
503 | struct ieee80211_hdr *nullfunc; |
504 | __le16 fc; |
505 | |
506 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
507 | return; |
508 | |
509 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); |
510 | if (!skb) { |
511 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " |
512 | "frame\n", sdata->dev->name); |
513 | return; |
514 | } |
515 | skb_reserve(skb, local->hw.extra_tx_headroom); |
516 | |
517 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); |
518 | memset(nullfunc, 0, 24); |
519 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | |
520 | IEEE80211_FCTL_TODS); |
521 | if (powersave) |
522 | fc |= cpu_to_le16(IEEE80211_FCTL_PM); |
523 | nullfunc->frame_control = fc; |
524 | memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN); |
525 | memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN); |
526 | memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN); |
527 | |
528 | ieee80211_tx_skb(sdata, skb, 0); |
529 | } |
530 | |
531 | /* spectrum management related things */ |
532 | static void ieee80211_chswitch_work(struct work_struct *work) |
533 | { |
534 | struct ieee80211_sub_if_data *sdata = |
535 | container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work); |
536 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
537 | |
538 | if (!netif_running(sdata->dev)) |
539 | return; |
540 | |
541 | mutex_lock(&ifmgd->mtx); |
542 | if (!ifmgd->associated) |
543 | goto out; |
544 | |
545 | sdata->local->oper_channel = sdata->local->csa_channel; |
546 | ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL); |
547 | |
548 | /* XXX: shouldn't really modify cfg80211-owned data! */ |
549 | ifmgd->associated->cbss.channel = sdata->local->oper_channel; |
550 | |
551 | ieee80211_wake_queues_by_reason(&sdata->local->hw, |
552 | IEEE80211_QUEUE_STOP_REASON_CSA); |
553 | out: |
554 | ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED; |
555 | mutex_unlock(&ifmgd->mtx); |
556 | } |
557 | |
558 | static void ieee80211_chswitch_timer(unsigned long data) |
559 | { |
560 | struct ieee80211_sub_if_data *sdata = |
561 | (struct ieee80211_sub_if_data *) data; |
562 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
563 | |
564 | if (sdata->local->quiescing) { |
565 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); |
566 | return; |
567 | } |
568 | |
569 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
570 | } |
571 | |
572 | void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata, |
573 | struct ieee80211_channel_sw_ie *sw_elem, |
574 | struct ieee80211_bss *bss) |
575 | { |
576 | struct ieee80211_channel *new_ch; |
577 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
578 | int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num); |
579 | |
580 | ASSERT_MGD_MTX(ifmgd); |
581 | |
582 | if (!ifmgd->associated) |
583 | return; |
584 | |
585 | if (sdata->local->scanning) |
586 | return; |
587 | |
588 | /* Disregard subsequent beacons if we are already running a timer |
589 | processing a CSA */ |
590 | |
591 | if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED) |
592 | return; |
593 | |
594 | new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq); |
595 | if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED) |
596 | return; |
597 | |
598 | sdata->local->csa_channel = new_ch; |
599 | |
600 | if (sw_elem->count <= 1) { |
601 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
602 | } else { |
603 | ieee80211_stop_queues_by_reason(&sdata->local->hw, |
604 | IEEE80211_QUEUE_STOP_REASON_CSA); |
605 | ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED; |
606 | mod_timer(&ifmgd->chswitch_timer, |
607 | jiffies + |
608 | msecs_to_jiffies(sw_elem->count * |
609 | bss->cbss.beacon_interval)); |
610 | } |
611 | } |
612 | |
613 | static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata, |
614 | u16 capab_info, u8 *pwr_constr_elem, |
615 | u8 pwr_constr_elem_len) |
616 | { |
617 | struct ieee80211_conf *conf = &sdata->local->hw.conf; |
618 | |
619 | if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT)) |
620 | return; |
621 | |
622 | /* Power constraint IE length should be 1 octet */ |
623 | if (pwr_constr_elem_len != 1) |
624 | return; |
625 | |
626 | if ((*pwr_constr_elem <= conf->channel->max_power) && |
627 | (*pwr_constr_elem != sdata->local->power_constr_level)) { |
628 | sdata->local->power_constr_level = *pwr_constr_elem; |
629 | ieee80211_hw_config(sdata->local, 0); |
630 | } |
631 | } |
632 | |
633 | /* powersave */ |
634 | static void ieee80211_enable_ps(struct ieee80211_local *local, |
635 | struct ieee80211_sub_if_data *sdata) |
636 | { |
637 | struct ieee80211_conf *conf = &local->hw.conf; |
638 | |
639 | /* |
640 | * If we are scanning right now then the parameters will |
641 | * take effect when scan finishes. |
642 | */ |
643 | if (local->scanning) |
644 | return; |
645 | |
646 | if (conf->dynamic_ps_timeout > 0 && |
647 | !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) { |
648 | mod_timer(&local->dynamic_ps_timer, jiffies + |
649 | msecs_to_jiffies(conf->dynamic_ps_timeout)); |
650 | } else { |
651 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) |
652 | ieee80211_send_nullfunc(local, sdata, 1); |
653 | conf->flags |= IEEE80211_CONF_PS; |
654 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); |
655 | } |
656 | } |
657 | |
658 | static void ieee80211_change_ps(struct ieee80211_local *local) |
659 | { |
660 | struct ieee80211_conf *conf = &local->hw.conf; |
661 | |
662 | if (local->ps_sdata) { |
663 | ieee80211_enable_ps(local, local->ps_sdata); |
664 | } else if (conf->flags & IEEE80211_CONF_PS) { |
665 | conf->flags &= ~IEEE80211_CONF_PS; |
666 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); |
667 | del_timer_sync(&local->dynamic_ps_timer); |
668 | cancel_work_sync(&local->dynamic_ps_enable_work); |
669 | } |
670 | } |
671 | |
672 | /* need to hold RTNL or interface lock */ |
673 | void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency) |
674 | { |
675 | struct ieee80211_sub_if_data *sdata, *found = NULL; |
676 | int count = 0; |
677 | |
678 | if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) { |
679 | local->ps_sdata = NULL; |
680 | return; |
681 | } |
682 | |
683 | list_for_each_entry(sdata, &local->interfaces, list) { |
684 | if (!netif_running(sdata->dev)) |
685 | continue; |
686 | if (sdata->vif.type != NL80211_IFTYPE_STATION) |
687 | continue; |
688 | found = sdata; |
689 | count++; |
690 | } |
691 | |
692 | if (count == 1 && found->u.mgd.powersave && |
693 | found->u.mgd.associated && list_empty(&found->u.mgd.work_list) && |
694 | !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL | |
695 | IEEE80211_STA_CONNECTION_POLL))) { |
696 | s32 beaconint_us; |
697 | |
698 | if (latency < 0) |
699 | latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY); |
700 | |
701 | beaconint_us = ieee80211_tu_to_usec( |
702 | found->vif.bss_conf.beacon_int); |
703 | |
704 | if (beaconint_us > latency) { |
705 | local->ps_sdata = NULL; |
706 | } else { |
707 | u8 dtimper = found->vif.bss_conf.dtim_period; |
708 | int maxslp = 1; |
709 | |
710 | if (dtimper > 1) |
711 | maxslp = min_t(int, dtimper, |
712 | latency / beaconint_us); |
713 | |
714 | local->hw.conf.max_sleep_period = maxslp; |
715 | local->ps_sdata = found; |
716 | } |
717 | } else { |
718 | local->ps_sdata = NULL; |
719 | } |
720 | |
721 | ieee80211_change_ps(local); |
722 | } |
723 | |
724 | void ieee80211_dynamic_ps_disable_work(struct work_struct *work) |
725 | { |
726 | struct ieee80211_local *local = |
727 | container_of(work, struct ieee80211_local, |
728 | dynamic_ps_disable_work); |
729 | |
730 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
731 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; |
732 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); |
733 | } |
734 | |
735 | ieee80211_wake_queues_by_reason(&local->hw, |
736 | IEEE80211_QUEUE_STOP_REASON_PS); |
737 | } |
738 | |
739 | void ieee80211_dynamic_ps_enable_work(struct work_struct *work) |
740 | { |
741 | struct ieee80211_local *local = |
742 | container_of(work, struct ieee80211_local, |
743 | dynamic_ps_enable_work); |
744 | struct ieee80211_sub_if_data *sdata = local->ps_sdata; |
745 | |
746 | /* can only happen when PS was just disabled anyway */ |
747 | if (!sdata) |
748 | return; |
749 | |
750 | if (local->hw.conf.flags & IEEE80211_CONF_PS) |
751 | return; |
752 | |
753 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) |
754 | ieee80211_send_nullfunc(local, sdata, 1); |
755 | |
756 | local->hw.conf.flags |= IEEE80211_CONF_PS; |
757 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); |
758 | } |
759 | |
760 | void ieee80211_dynamic_ps_timer(unsigned long data) |
761 | { |
762 | struct ieee80211_local *local = (void *) data; |
763 | |
764 | if (local->quiescing || local->suspended) |
765 | return; |
766 | |
767 | ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work); |
768 | } |
769 | |
770 | /* MLME */ |
771 | static void ieee80211_sta_wmm_params(struct ieee80211_local *local, |
772 | struct ieee80211_if_managed *ifmgd, |
773 | u8 *wmm_param, size_t wmm_param_len) |
774 | { |
775 | struct ieee80211_tx_queue_params params; |
776 | size_t left; |
777 | int count; |
778 | u8 *pos; |
779 | |
780 | if (!(ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) |
781 | return; |
782 | |
783 | if (!wmm_param) |
784 | return; |
785 | |
786 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
787 | return; |
788 | count = wmm_param[6] & 0x0f; |
789 | if (count == ifmgd->wmm_last_param_set) |
790 | return; |
791 | ifmgd->wmm_last_param_set = count; |
792 | |
793 | pos = wmm_param + 8; |
794 | left = wmm_param_len - 8; |
795 | |
796 | memset(¶ms, 0, sizeof(params)); |
797 | |
798 | local->wmm_acm = 0; |
799 | for (; left >= 4; left -= 4, pos += 4) { |
800 | int aci = (pos[0] >> 5) & 0x03; |
801 | int acm = (pos[0] >> 4) & 0x01; |
802 | int queue; |
803 | |
804 | switch (aci) { |
805 | case 1: /* AC_BK */ |
806 | queue = 3; |
807 | if (acm) |
808 | local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */ |
809 | break; |
810 | case 2: /* AC_VI */ |
811 | queue = 1; |
812 | if (acm) |
813 | local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */ |
814 | break; |
815 | case 3: /* AC_VO */ |
816 | queue = 0; |
817 | if (acm) |
818 | local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */ |
819 | break; |
820 | case 0: /* AC_BE */ |
821 | default: |
822 | queue = 2; |
823 | if (acm) |
824 | local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */ |
825 | break; |
826 | } |
827 | |
828 | params.aifs = pos[0] & 0x0f; |
829 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); |
830 | params.cw_min = ecw2cw(pos[1] & 0x0f); |
831 | params.txop = get_unaligned_le16(pos + 2); |
832 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
833 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
834 | "cWmin=%d cWmax=%d txop=%d\n", |
835 | wiphy_name(local->hw.wiphy), queue, aci, acm, |
836 | params.aifs, params.cw_min, params.cw_max, params.txop); |
837 | #endif |
838 | if (drv_conf_tx(local, queue, ¶ms) && local->ops->conf_tx) |
839 | printk(KERN_DEBUG "%s: failed to set TX queue " |
840 | "parameters for queue %d\n", |
841 | wiphy_name(local->hw.wiphy), queue); |
842 | } |
843 | } |
844 | |
845 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, |
846 | u16 capab, bool erp_valid, u8 erp) |
847 | { |
848 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
849 | u32 changed = 0; |
850 | bool use_protection; |
851 | bool use_short_preamble; |
852 | bool use_short_slot; |
853 | |
854 | if (erp_valid) { |
855 | use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0; |
856 | use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0; |
857 | } else { |
858 | use_protection = false; |
859 | use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE); |
860 | } |
861 | |
862 | use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME); |
863 | |
864 | if (use_protection != bss_conf->use_cts_prot) { |
865 | bss_conf->use_cts_prot = use_protection; |
866 | changed |= BSS_CHANGED_ERP_CTS_PROT; |
867 | } |
868 | |
869 | if (use_short_preamble != bss_conf->use_short_preamble) { |
870 | bss_conf->use_short_preamble = use_short_preamble; |
871 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
872 | } |
873 | |
874 | if (use_short_slot != bss_conf->use_short_slot) { |
875 | bss_conf->use_short_slot = use_short_slot; |
876 | changed |= BSS_CHANGED_ERP_SLOT; |
877 | } |
878 | |
879 | return changed; |
880 | } |
881 | |
882 | static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata, |
883 | struct ieee80211_mgd_work *wk, |
884 | u32 bss_info_changed) |
885 | { |
886 | struct ieee80211_local *local = sdata->local; |
887 | struct ieee80211_bss *bss = wk->bss; |
888 | |
889 | bss_info_changed |= BSS_CHANGED_ASSOC; |
890 | /* set timing information */ |
891 | sdata->vif.bss_conf.beacon_int = bss->cbss.beacon_interval; |
892 | sdata->vif.bss_conf.timestamp = bss->cbss.tsf; |
893 | sdata->vif.bss_conf.dtim_period = bss->dtim_period; |
894 | |
895 | bss_info_changed |= BSS_CHANGED_BEACON_INT; |
896 | bss_info_changed |= ieee80211_handle_bss_capability(sdata, |
897 | bss->cbss.capability, bss->has_erp_value, bss->erp_value); |
898 | |
899 | sdata->u.mgd.associated = bss; |
900 | sdata->u.mgd.old_associate_work = wk; |
901 | memcpy(sdata->u.mgd.bssid, bss->cbss.bssid, ETH_ALEN); |
902 | |
903 | /* just to be sure */ |
904 | sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL | |
905 | IEEE80211_STA_BEACON_POLL); |
906 | |
907 | /* |
908 | * Always handle WMM once after association regardless |
909 | * of the first value the AP uses. Setting -1 here has |
910 | * that effect because the AP values is an unsigned |
911 | * 4-bit value. |
912 | */ |
913 | sdata->u.mgd.wmm_last_param_set = -1; |
914 | |
915 | ieee80211_led_assoc(local, 1); |
916 | |
917 | sdata->vif.bss_conf.assoc = 1; |
918 | /* |
919 | * For now just always ask the driver to update the basic rateset |
920 | * when we have associated, we aren't checking whether it actually |
921 | * changed or not. |
922 | */ |
923 | bss_info_changed |= BSS_CHANGED_BASIC_RATES; |
924 | |
925 | /* And the BSSID changed - we're associated now */ |
926 | bss_info_changed |= BSS_CHANGED_BSSID; |
927 | |
928 | ieee80211_bss_info_change_notify(sdata, bss_info_changed); |
929 | |
930 | mutex_lock(&local->iflist_mtx); |
931 | ieee80211_recalc_ps(local, -1); |
932 | mutex_unlock(&local->iflist_mtx); |
933 | |
934 | netif_tx_start_all_queues(sdata->dev); |
935 | netif_carrier_on(sdata->dev); |
936 | } |
937 | |
938 | static enum rx_mgmt_action __must_check |
939 | ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata, |
940 | struct ieee80211_mgd_work *wk) |
941 | { |
942 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
943 | struct ieee80211_local *local = sdata->local; |
944 | |
945 | wk->tries++; |
946 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { |
947 | printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n", |
948 | sdata->dev->name, wk->bss->cbss.bssid); |
949 | |
950 | /* |
951 | * Most likely AP is not in the range so remove the |
952 | * bss struct for that AP. |
953 | */ |
954 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
955 | |
956 | /* |
957 | * We might have a pending scan which had no chance to run yet |
958 | * due to work needing to be done. Hence, queue the STAs work |
959 | * again for that. |
960 | */ |
961 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
962 | return RX_MGMT_CFG80211_AUTH_TO; |
963 | } |
964 | |
965 | printk(KERN_DEBUG "%s: direct probe to AP %pM (try %d)\n", |
966 | sdata->dev->name, wk->bss->cbss.bssid, |
967 | wk->tries); |
968 | |
969 | /* |
970 | * Direct probe is sent to broadcast address as some APs |
971 | * will not answer to direct packet in unassociated state. |
972 | */ |
973 | ieee80211_send_probe_req(sdata, NULL, wk->ssid, wk->ssid_len, NULL, 0); |
974 | |
975 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
976 | run_again(ifmgd, wk->timeout); |
977 | |
978 | return RX_MGMT_NONE; |
979 | } |
980 | |
981 | |
982 | static enum rx_mgmt_action __must_check |
983 | ieee80211_authenticate(struct ieee80211_sub_if_data *sdata, |
984 | struct ieee80211_mgd_work *wk) |
985 | { |
986 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
987 | struct ieee80211_local *local = sdata->local; |
988 | |
989 | wk->tries++; |
990 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { |
991 | printk(KERN_DEBUG "%s: authentication with AP %pM" |
992 | " timed out\n", |
993 | sdata->dev->name, wk->bss->cbss.bssid); |
994 | |
995 | /* |
996 | * Most likely AP is not in the range so remove the |
997 | * bss struct for that AP. |
998 | */ |
999 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
1000 | |
1001 | /* |
1002 | * We might have a pending scan which had no chance to run yet |
1003 | * due to work needing to be done. Hence, queue the STAs work |
1004 | * again for that. |
1005 | */ |
1006 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
1007 | return RX_MGMT_CFG80211_AUTH_TO; |
1008 | } |
1009 | |
1010 | printk(KERN_DEBUG "%s: authenticate with AP %pM (try %d)\n", |
1011 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); |
1012 | |
1013 | ieee80211_send_auth(sdata, 1, wk->auth_alg, wk->ie, wk->ie_len, |
1014 | wk->bss->cbss.bssid, NULL, 0, 0); |
1015 | wk->auth_transaction = 2; |
1016 | |
1017 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
1018 | run_again(ifmgd, wk->timeout); |
1019 | |
1020 | return RX_MGMT_NONE; |
1021 | } |
1022 | |
1023 | static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata, |
1024 | bool deauth) |
1025 | { |
1026 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1027 | struct ieee80211_local *local = sdata->local; |
1028 | struct sta_info *sta; |
1029 | u32 changed = 0, config_changed = 0; |
1030 | u8 bssid[ETH_ALEN]; |
1031 | |
1032 | ASSERT_MGD_MTX(ifmgd); |
1033 | |
1034 | if (WARN_ON(!ifmgd->associated)) |
1035 | return; |
1036 | |
1037 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); |
1038 | |
1039 | ifmgd->associated = NULL; |
1040 | memset(ifmgd->bssid, 0, ETH_ALEN); |
1041 | |
1042 | if (deauth) { |
1043 | kfree(ifmgd->old_associate_work); |
1044 | ifmgd->old_associate_work = NULL; |
1045 | } else { |
1046 | struct ieee80211_mgd_work *wk = ifmgd->old_associate_work; |
1047 | |
1048 | wk->state = IEEE80211_MGD_STATE_IDLE; |
1049 | list_add(&wk->list, &ifmgd->work_list); |
1050 | } |
1051 | |
1052 | /* |
1053 | * we need to commit the associated = NULL change because the |
1054 | * scan code uses that to determine whether this iface should |
1055 | * go to/wake up from powersave or not -- and could otherwise |
1056 | * wake the queues erroneously. |
1057 | */ |
1058 | smp_mb(); |
1059 | |
1060 | /* |
1061 | * Thus, we can only afterwards stop the queues -- to account |
1062 | * for the case where another CPU is finishing a scan at this |
1063 | * time -- we don't want the scan code to enable queues. |
1064 | */ |
1065 | |
1066 | netif_tx_stop_all_queues(sdata->dev); |
1067 | netif_carrier_off(sdata->dev); |
1068 | |
1069 | rcu_read_lock(); |
1070 | sta = sta_info_get(local, bssid); |
1071 | if (sta) |
1072 | ieee80211_sta_tear_down_BA_sessions(sta); |
1073 | rcu_read_unlock(); |
1074 | |
1075 | changed |= ieee80211_reset_erp_info(sdata); |
1076 | |
1077 | ieee80211_led_assoc(local, 0); |
1078 | changed |= BSS_CHANGED_ASSOC; |
1079 | sdata->vif.bss_conf.assoc = false; |
1080 | |
1081 | ieee80211_set_wmm_default(sdata); |
1082 | |
1083 | ieee80211_recalc_idle(local); |
1084 | |
1085 | /* channel(_type) changes are handled by ieee80211_hw_config */ |
1086 | local->oper_channel_type = NL80211_CHAN_NO_HT; |
1087 | |
1088 | /* on the next assoc, re-program HT parameters */ |
1089 | sdata->ht_opmode_valid = false; |
1090 | |
1091 | local->power_constr_level = 0; |
1092 | |
1093 | del_timer_sync(&local->dynamic_ps_timer); |
1094 | cancel_work_sync(&local->dynamic_ps_enable_work); |
1095 | |
1096 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
1097 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; |
1098 | config_changed |= IEEE80211_CONF_CHANGE_PS; |
1099 | } |
1100 | |
1101 | ieee80211_hw_config(local, config_changed); |
1102 | |
1103 | /* And the BSSID changed -- not very interesting here */ |
1104 | changed |= BSS_CHANGED_BSSID; |
1105 | ieee80211_bss_info_change_notify(sdata, changed); |
1106 | |
1107 | rcu_read_lock(); |
1108 | |
1109 | sta = sta_info_get(local, bssid); |
1110 | if (!sta) { |
1111 | rcu_read_unlock(); |
1112 | return; |
1113 | } |
1114 | |
1115 | sta_info_unlink(&sta); |
1116 | |
1117 | rcu_read_unlock(); |
1118 | |
1119 | sta_info_destroy(sta); |
1120 | } |
1121 | |
1122 | static enum rx_mgmt_action __must_check |
1123 | ieee80211_associate(struct ieee80211_sub_if_data *sdata, |
1124 | struct ieee80211_mgd_work *wk) |
1125 | { |
1126 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1127 | struct ieee80211_local *local = sdata->local; |
1128 | |
1129 | wk->tries++; |
1130 | if (wk->tries > IEEE80211_ASSOC_MAX_TRIES) { |
1131 | printk(KERN_DEBUG "%s: association with AP %pM" |
1132 | " timed out\n", |
1133 | sdata->dev->name, wk->bss->cbss.bssid); |
1134 | |
1135 | /* |
1136 | * Most likely AP is not in the range so remove the |
1137 | * bss struct for that AP. |
1138 | */ |
1139 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
1140 | |
1141 | /* |
1142 | * We might have a pending scan which had no chance to run yet |
1143 | * due to work needing to be done. Hence, queue the STAs work |
1144 | * again for that. |
1145 | */ |
1146 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
1147 | return RX_MGMT_CFG80211_ASSOC_TO; |
1148 | } |
1149 | |
1150 | printk(KERN_DEBUG "%s: associate with AP %pM (try %d)\n", |
1151 | sdata->dev->name, wk->bss->cbss.bssid, wk->tries); |
1152 | ieee80211_send_assoc(sdata, wk); |
1153 | |
1154 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; |
1155 | run_again(ifmgd, wk->timeout); |
1156 | |
1157 | return RX_MGMT_NONE; |
1158 | } |
1159 | |
1160 | void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata, |
1161 | struct ieee80211_hdr *hdr) |
1162 | { |
1163 | /* |
1164 | * We can postpone the mgd.timer whenever receiving unicast frames |
1165 | * from AP because we know that the connection is working both ways |
1166 | * at that time. But multicast frames (and hence also beacons) must |
1167 | * be ignored here, because we need to trigger the timer during |
1168 | * data idle periods for sending the periodic probe request to the |
1169 | * AP we're connected to. |
1170 | */ |
1171 | if (is_multicast_ether_addr(hdr->addr1)) |
1172 | return; |
1173 | |
1174 | mod_timer(&sdata->u.mgd.conn_mon_timer, |
1175 | round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME)); |
1176 | } |
1177 | |
1178 | static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata) |
1179 | { |
1180 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1181 | const u8 *ssid; |
1182 | |
1183 | ssid = ieee80211_bss_get_ie(&ifmgd->associated->cbss, WLAN_EID_SSID); |
1184 | ieee80211_send_probe_req(sdata, ifmgd->associated->cbss.bssid, |
1185 | ssid + 2, ssid[1], NULL, 0); |
1186 | |
1187 | ifmgd->probe_send_count++; |
1188 | ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT; |
1189 | run_again(ifmgd, ifmgd->probe_timeout); |
1190 | } |
1191 | |
1192 | static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata, |
1193 | bool beacon) |
1194 | { |
1195 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1196 | bool already = false; |
1197 | |
1198 | if (!netif_running(sdata->dev)) |
1199 | return; |
1200 | |
1201 | if (sdata->local->scanning) |
1202 | return; |
1203 | |
1204 | mutex_lock(&ifmgd->mtx); |
1205 | |
1206 | if (!ifmgd->associated) |
1207 | goto out; |
1208 | |
1209 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1210 | if (beacon && net_ratelimit()) |
1211 | printk(KERN_DEBUG "%s: detected beacon loss from AP " |
1212 | "- sending probe request\n", sdata->dev->name); |
1213 | #endif |
1214 | |
1215 | /* |
1216 | * The driver/our work has already reported this event or the |
1217 | * connection monitoring has kicked in and we have already sent |
1218 | * a probe request. Or maybe the AP died and the driver keeps |
1219 | * reporting until we disassociate... |
1220 | * |
1221 | * In either case we have to ignore the current call to this |
1222 | * function (except for setting the correct probe reason bit) |
1223 | * because otherwise we would reset the timer every time and |
1224 | * never check whether we received a probe response! |
1225 | */ |
1226 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1227 | IEEE80211_STA_CONNECTION_POLL)) |
1228 | already = true; |
1229 | |
1230 | if (beacon) |
1231 | ifmgd->flags |= IEEE80211_STA_BEACON_POLL; |
1232 | else |
1233 | ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL; |
1234 | |
1235 | if (already) |
1236 | goto out; |
1237 | |
1238 | mutex_lock(&sdata->local->iflist_mtx); |
1239 | ieee80211_recalc_ps(sdata->local, -1); |
1240 | mutex_unlock(&sdata->local->iflist_mtx); |
1241 | |
1242 | ifmgd->probe_send_count = 0; |
1243 | ieee80211_mgd_probe_ap_send(sdata); |
1244 | out: |
1245 | mutex_unlock(&ifmgd->mtx); |
1246 | } |
1247 | |
1248 | void ieee80211_beacon_loss_work(struct work_struct *work) |
1249 | { |
1250 | struct ieee80211_sub_if_data *sdata = |
1251 | container_of(work, struct ieee80211_sub_if_data, |
1252 | u.mgd.beacon_loss_work); |
1253 | |
1254 | ieee80211_mgd_probe_ap(sdata, true); |
1255 | } |
1256 | |
1257 | void ieee80211_beacon_loss(struct ieee80211_vif *vif) |
1258 | { |
1259 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); |
1260 | |
1261 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
1262 | } |
1263 | EXPORT_SYMBOL(ieee80211_beacon_loss); |
1264 | |
1265 | static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata, |
1266 | struct ieee80211_mgd_work *wk) |
1267 | { |
1268 | wk->state = IEEE80211_MGD_STATE_IDLE; |
1269 | printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name); |
1270 | } |
1271 | |
1272 | |
1273 | static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata, |
1274 | struct ieee80211_mgd_work *wk, |
1275 | struct ieee80211_mgmt *mgmt, |
1276 | size_t len) |
1277 | { |
1278 | u8 *pos; |
1279 | struct ieee802_11_elems elems; |
1280 | |
1281 | pos = mgmt->u.auth.variable; |
1282 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
1283 | if (!elems.challenge) |
1284 | return; |
1285 | ieee80211_send_auth(sdata, 3, wk->auth_alg, |
1286 | elems.challenge - 2, elems.challenge_len + 2, |
1287 | wk->bss->cbss.bssid, |
1288 | wk->key, wk->key_len, wk->key_idx); |
1289 | wk->auth_transaction = 4; |
1290 | } |
1291 | |
1292 | static enum rx_mgmt_action __must_check |
1293 | ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata, |
1294 | struct ieee80211_mgd_work *wk, |
1295 | struct ieee80211_mgmt *mgmt, size_t len) |
1296 | { |
1297 | u16 auth_alg, auth_transaction, status_code; |
1298 | |
1299 | if (wk->state != IEEE80211_MGD_STATE_AUTH) |
1300 | return RX_MGMT_NONE; |
1301 | |
1302 | if (len < 24 + 6) |
1303 | return RX_MGMT_NONE; |
1304 | |
1305 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1306 | return RX_MGMT_NONE; |
1307 | |
1308 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1309 | return RX_MGMT_NONE; |
1310 | |
1311 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); |
1312 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); |
1313 | status_code = le16_to_cpu(mgmt->u.auth.status_code); |
1314 | |
1315 | if (auth_alg != wk->auth_alg || |
1316 | auth_transaction != wk->auth_transaction) |
1317 | return RX_MGMT_NONE; |
1318 | |
1319 | if (status_code != WLAN_STATUS_SUCCESS) { |
1320 | list_del(&wk->list); |
1321 | kfree(wk); |
1322 | return RX_MGMT_CFG80211_AUTH; |
1323 | } |
1324 | |
1325 | switch (wk->auth_alg) { |
1326 | case WLAN_AUTH_OPEN: |
1327 | case WLAN_AUTH_LEAP: |
1328 | case WLAN_AUTH_FT: |
1329 | ieee80211_auth_completed(sdata, wk); |
1330 | return RX_MGMT_CFG80211_AUTH; |
1331 | case WLAN_AUTH_SHARED_KEY: |
1332 | if (wk->auth_transaction == 4) { |
1333 | ieee80211_auth_completed(sdata, wk); |
1334 | return RX_MGMT_CFG80211_AUTH; |
1335 | } else |
1336 | ieee80211_auth_challenge(sdata, wk, mgmt, len); |
1337 | break; |
1338 | } |
1339 | |
1340 | return RX_MGMT_NONE; |
1341 | } |
1342 | |
1343 | |
1344 | static enum rx_mgmt_action __must_check |
1345 | ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata, |
1346 | struct ieee80211_mgd_work *wk, |
1347 | struct ieee80211_mgmt *mgmt, size_t len) |
1348 | { |
1349 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1350 | const u8 *bssid = NULL; |
1351 | u16 reason_code; |
1352 | |
1353 | if (len < 24 + 2) |
1354 | return RX_MGMT_NONE; |
1355 | |
1356 | ASSERT_MGD_MTX(ifmgd); |
1357 | |
1358 | if (wk) |
1359 | bssid = wk->bss->cbss.bssid; |
1360 | else |
1361 | bssid = ifmgd->associated->cbss.bssid; |
1362 | |
1363 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); |
1364 | |
1365 | printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n", |
1366 | sdata->dev->name, bssid, reason_code); |
1367 | |
1368 | if (!wk) { |
1369 | ieee80211_set_disassoc(sdata, true); |
1370 | } else { |
1371 | list_del(&wk->list); |
1372 | kfree(wk); |
1373 | } |
1374 | |
1375 | return RX_MGMT_CFG80211_DEAUTH; |
1376 | } |
1377 | |
1378 | |
1379 | static enum rx_mgmt_action __must_check |
1380 | ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata, |
1381 | struct ieee80211_mgmt *mgmt, size_t len) |
1382 | { |
1383 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1384 | u16 reason_code; |
1385 | |
1386 | if (len < 24 + 2) |
1387 | return RX_MGMT_NONE; |
1388 | |
1389 | ASSERT_MGD_MTX(ifmgd); |
1390 | |
1391 | if (WARN_ON(!ifmgd->associated)) |
1392 | return RX_MGMT_NONE; |
1393 | |
1394 | if (WARN_ON(memcmp(ifmgd->associated->cbss.bssid, mgmt->sa, ETH_ALEN))) |
1395 | return RX_MGMT_NONE; |
1396 | |
1397 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); |
1398 | |
1399 | printk(KERN_DEBUG "%s: disassociated from %pM (Reason: %u)\n", |
1400 | sdata->dev->name, mgmt->sa, reason_code); |
1401 | |
1402 | ieee80211_set_disassoc(sdata, false); |
1403 | return RX_MGMT_CFG80211_DISASSOC; |
1404 | } |
1405 | |
1406 | |
1407 | static enum rx_mgmt_action __must_check |
1408 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, |
1409 | struct ieee80211_mgd_work *wk, |
1410 | struct ieee80211_mgmt *mgmt, size_t len, |
1411 | bool reassoc) |
1412 | { |
1413 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1414 | struct ieee80211_local *local = sdata->local; |
1415 | struct ieee80211_supported_band *sband; |
1416 | struct sta_info *sta; |
1417 | u32 rates, basic_rates; |
1418 | u16 capab_info, status_code, aid; |
1419 | struct ieee802_11_elems elems; |
1420 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
1421 | u8 *pos; |
1422 | u32 changed = 0; |
1423 | int i, j; |
1424 | bool have_higher_than_11mbit = false, newsta = false; |
1425 | u16 ap_ht_cap_flags; |
1426 | |
1427 | /* |
1428 | * AssocResp and ReassocResp have identical structure, so process both |
1429 | * of them in this function. |
1430 | */ |
1431 | |
1432 | if (len < 24 + 6) |
1433 | return RX_MGMT_NONE; |
1434 | |
1435 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1436 | return RX_MGMT_NONE; |
1437 | |
1438 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); |
1439 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); |
1440 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); |
1441 | |
1442 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " |
1443 | "status=%d aid=%d)\n", |
1444 | sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa, |
1445 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
1446 | |
1447 | pos = mgmt->u.assoc_resp.variable; |
1448 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
1449 | |
1450 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && |
1451 | elems.timeout_int && elems.timeout_int_len == 5 && |
1452 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { |
1453 | u32 tu, ms; |
1454 | tu = get_unaligned_le32(elems.timeout_int + 1); |
1455 | ms = tu * 1024 / 1000; |
1456 | printk(KERN_DEBUG "%s: AP rejected association temporarily; " |
1457 | "comeback duration %u TU (%u ms)\n", |
1458 | sdata->dev->name, tu, ms); |
1459 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
1460 | if (ms > IEEE80211_ASSOC_TIMEOUT) |
1461 | run_again(ifmgd, jiffies + msecs_to_jiffies(ms)); |
1462 | return RX_MGMT_NONE; |
1463 | } |
1464 | |
1465 | if (status_code != WLAN_STATUS_SUCCESS) { |
1466 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", |
1467 | sdata->dev->name, status_code); |
1468 | wk->state = IEEE80211_MGD_STATE_IDLE; |
1469 | return RX_MGMT_CFG80211_ASSOC; |
1470 | } |
1471 | |
1472 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1473 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " |
1474 | "set\n", sdata->dev->name, aid); |
1475 | aid &= ~(BIT(15) | BIT(14)); |
1476 | |
1477 | if (!elems.supp_rates) { |
1478 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", |
1479 | sdata->dev->name); |
1480 | return RX_MGMT_NONE; |
1481 | } |
1482 | |
1483 | printk(KERN_DEBUG "%s: associated\n", sdata->dev->name); |
1484 | ifmgd->aid = aid; |
1485 | |
1486 | rcu_read_lock(); |
1487 | |
1488 | /* Add STA entry for the AP */ |
1489 | sta = sta_info_get(local, wk->bss->cbss.bssid); |
1490 | if (!sta) { |
1491 | newsta = true; |
1492 | |
1493 | rcu_read_unlock(); |
1494 | |
1495 | sta = sta_info_alloc(sdata, wk->bss->cbss.bssid, GFP_KERNEL); |
1496 | if (!sta) { |
1497 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" |
1498 | " the AP\n", sdata->dev->name); |
1499 | return RX_MGMT_NONE; |
1500 | } |
1501 | |
1502 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | |
1503 | WLAN_STA_ASSOC_AP); |
1504 | if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT)) |
1505 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); |
1506 | |
1507 | rcu_read_lock(); |
1508 | } |
1509 | |
1510 | rates = 0; |
1511 | basic_rates = 0; |
1512 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
1513 | |
1514 | for (i = 0; i < elems.supp_rates_len; i++) { |
1515 | int rate = (elems.supp_rates[i] & 0x7f) * 5; |
1516 | bool is_basic = !!(elems.supp_rates[i] & 0x80); |
1517 | |
1518 | if (rate > 110) |
1519 | have_higher_than_11mbit = true; |
1520 | |
1521 | for (j = 0; j < sband->n_bitrates; j++) { |
1522 | if (sband->bitrates[j].bitrate == rate) { |
1523 | rates |= BIT(j); |
1524 | if (is_basic) |
1525 | basic_rates |= BIT(j); |
1526 | break; |
1527 | } |
1528 | } |
1529 | } |
1530 | |
1531 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
1532 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; |
1533 | bool is_basic = !!(elems.ext_supp_rates[i] & 0x80); |
1534 | |
1535 | if (rate > 110) |
1536 | have_higher_than_11mbit = true; |
1537 | |
1538 | for (j = 0; j < sband->n_bitrates; j++) { |
1539 | if (sband->bitrates[j].bitrate == rate) { |
1540 | rates |= BIT(j); |
1541 | if (is_basic) |
1542 | basic_rates |= BIT(j); |
1543 | break; |
1544 | } |
1545 | } |
1546 | } |
1547 | |
1548 | sta->sta.supp_rates[local->hw.conf.channel->band] = rates; |
1549 | sdata->vif.bss_conf.basic_rates = basic_rates; |
1550 | |
1551 | /* cf. IEEE 802.11 9.2.12 */ |
1552 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && |
1553 | have_higher_than_11mbit) |
1554 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; |
1555 | else |
1556 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; |
1557 | |
1558 | if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
1559 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
1560 | elems.ht_cap_elem, &sta->sta.ht_cap); |
1561 | |
1562 | ap_ht_cap_flags = sta->sta.ht_cap.cap; |
1563 | |
1564 | rate_control_rate_init(sta); |
1565 | |
1566 | if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) |
1567 | set_sta_flags(sta, WLAN_STA_MFP); |
1568 | |
1569 | if (elems.wmm_param) |
1570 | set_sta_flags(sta, WLAN_STA_WME); |
1571 | |
1572 | if (newsta) { |
1573 | int err = sta_info_insert(sta); |
1574 | if (err) { |
1575 | printk(KERN_DEBUG "%s: failed to insert STA entry for" |
1576 | " the AP (error %d)\n", sdata->dev->name, err); |
1577 | rcu_read_unlock(); |
1578 | return RX_MGMT_NONE; |
1579 | } |
1580 | } |
1581 | |
1582 | rcu_read_unlock(); |
1583 | |
1584 | if (elems.wmm_param) |
1585 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1586 | elems.wmm_param_len); |
1587 | else |
1588 | ieee80211_set_wmm_default(sdata); |
1589 | |
1590 | if (elems.ht_info_elem && elems.wmm_param && |
1591 | (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
1592 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
1593 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
1594 | wk->bss->cbss.bssid, |
1595 | ap_ht_cap_flags); |
1596 | |
1597 | /* delete work item -- must be before set_associated for PS */ |
1598 | list_del(&wk->list); |
1599 | |
1600 | /* set AID and assoc capability, |
1601 | * ieee80211_set_associated() will tell the driver */ |
1602 | bss_conf->aid = aid; |
1603 | bss_conf->assoc_capability = capab_info; |
1604 | /* this will take ownership of wk */ |
1605 | ieee80211_set_associated(sdata, wk, changed); |
1606 | |
1607 | /* |
1608 | * Start timer to probe the connection to the AP now. |
1609 | * Also start the timer that will detect beacon loss. |
1610 | */ |
1611 | ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt); |
1612 | mod_beacon_timer(sdata); |
1613 | |
1614 | return RX_MGMT_CFG80211_ASSOC; |
1615 | } |
1616 | |
1617 | |
1618 | static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata, |
1619 | struct ieee80211_mgmt *mgmt, |
1620 | size_t len, |
1621 | struct ieee80211_rx_status *rx_status, |
1622 | struct ieee802_11_elems *elems, |
1623 | bool beacon) |
1624 | { |
1625 | struct ieee80211_local *local = sdata->local; |
1626 | int freq; |
1627 | struct ieee80211_bss *bss; |
1628 | struct ieee80211_channel *channel; |
1629 | |
1630 | if (elems->ds_params && elems->ds_params_len == 1) |
1631 | freq = ieee80211_channel_to_frequency(elems->ds_params[0]); |
1632 | else |
1633 | freq = rx_status->freq; |
1634 | |
1635 | channel = ieee80211_get_channel(local->hw.wiphy, freq); |
1636 | |
1637 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) |
1638 | return; |
1639 | |
1640 | bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems, |
1641 | channel, beacon); |
1642 | if (bss) |
1643 | ieee80211_rx_bss_put(local, bss); |
1644 | |
1645 | if (!sdata->u.mgd.associated) |
1646 | return; |
1647 | |
1648 | if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) && |
1649 | (memcmp(mgmt->bssid, sdata->u.mgd.associated->cbss.bssid, |
1650 | ETH_ALEN) == 0)) { |
1651 | struct ieee80211_channel_sw_ie *sw_elem = |
1652 | (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem; |
1653 | ieee80211_sta_process_chanswitch(sdata, sw_elem, bss); |
1654 | } |
1655 | } |
1656 | |
1657 | |
1658 | static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata, |
1659 | struct ieee80211_mgd_work *wk, |
1660 | struct ieee80211_mgmt *mgmt, size_t len, |
1661 | struct ieee80211_rx_status *rx_status) |
1662 | { |
1663 | struct ieee80211_if_managed *ifmgd; |
1664 | size_t baselen; |
1665 | struct ieee802_11_elems elems; |
1666 | |
1667 | ifmgd = &sdata->u.mgd; |
1668 | |
1669 | ASSERT_MGD_MTX(ifmgd); |
1670 | |
1671 | if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN)) |
1672 | return; /* ignore ProbeResp to foreign address */ |
1673 | |
1674 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; |
1675 | if (baselen > len) |
1676 | return; |
1677 | |
1678 | ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen, |
1679 | &elems); |
1680 | |
1681 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false); |
1682 | |
1683 | /* direct probe may be part of the association flow */ |
1684 | if (wk && wk->state == IEEE80211_MGD_STATE_PROBE) { |
1685 | printk(KERN_DEBUG "%s: direct probe responded\n", |
1686 | sdata->dev->name); |
1687 | wk->tries = 0; |
1688 | wk->state = IEEE80211_MGD_STATE_AUTH; |
1689 | WARN_ON(ieee80211_authenticate(sdata, wk) != RX_MGMT_NONE); |
1690 | } |
1691 | |
1692 | if (ifmgd->associated && |
1693 | memcmp(mgmt->bssid, ifmgd->associated->cbss.bssid, ETH_ALEN) == 0 && |
1694 | ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1695 | IEEE80211_STA_CONNECTION_POLL)) { |
1696 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | |
1697 | IEEE80211_STA_BEACON_POLL); |
1698 | mutex_lock(&sdata->local->iflist_mtx); |
1699 | ieee80211_recalc_ps(sdata->local, -1); |
1700 | mutex_unlock(&sdata->local->iflist_mtx); |
1701 | /* |
1702 | * We've received a probe response, but are not sure whether |
1703 | * we have or will be receiving any beacons or data, so let's |
1704 | * schedule the timers again, just in case. |
1705 | */ |
1706 | mod_beacon_timer(sdata); |
1707 | mod_timer(&ifmgd->conn_mon_timer, |
1708 | round_jiffies_up(jiffies + |
1709 | IEEE80211_CONNECTION_IDLE_TIME)); |
1710 | } |
1711 | } |
1712 | |
1713 | /* |
1714 | * This is the canonical list of information elements we care about, |
1715 | * the filter code also gives us all changes to the Microsoft OUI |
1716 | * (00:50:F2) vendor IE which is used for WMM which we need to track. |
1717 | * |
1718 | * We implement beacon filtering in software since that means we can |
1719 | * avoid processing the frame here and in cfg80211, and userspace |
1720 | * will not be able to tell whether the hardware supports it or not. |
1721 | * |
1722 | * XXX: This list needs to be dynamic -- userspace needs to be able to |
1723 | * add items it requires. It also needs to be able to tell us to |
1724 | * look out for other vendor IEs. |
1725 | */ |
1726 | static const u64 care_about_ies = |
1727 | (1ULL << WLAN_EID_COUNTRY) | |
1728 | (1ULL << WLAN_EID_ERP_INFO) | |
1729 | (1ULL << WLAN_EID_CHANNEL_SWITCH) | |
1730 | (1ULL << WLAN_EID_PWR_CONSTRAINT) | |
1731 | (1ULL << WLAN_EID_HT_CAPABILITY) | |
1732 | (1ULL << WLAN_EID_HT_INFORMATION); |
1733 | |
1734 | static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata, |
1735 | struct ieee80211_mgmt *mgmt, |
1736 | size_t len, |
1737 | struct ieee80211_rx_status *rx_status) |
1738 | { |
1739 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1740 | size_t baselen; |
1741 | struct ieee802_11_elems elems; |
1742 | struct ieee80211_local *local = sdata->local; |
1743 | u32 changed = 0; |
1744 | bool erp_valid, directed_tim = false; |
1745 | u8 erp_value = 0; |
1746 | u32 ncrc; |
1747 | u8 *bssid; |
1748 | |
1749 | ASSERT_MGD_MTX(ifmgd); |
1750 | |
1751 | /* Process beacon from the current BSS */ |
1752 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; |
1753 | if (baselen > len) |
1754 | return; |
1755 | |
1756 | if (rx_status->freq != local->hw.conf.channel->center_freq) |
1757 | return; |
1758 | |
1759 | /* |
1760 | * We might have received a number of frames, among them a |
1761 | * disassoc frame and a beacon... |
1762 | */ |
1763 | if (!ifmgd->associated) |
1764 | return; |
1765 | |
1766 | bssid = ifmgd->associated->cbss.bssid; |
1767 | |
1768 | /* |
1769 | * And in theory even frames from a different AP we were just |
1770 | * associated to a split-second ago! |
1771 | */ |
1772 | if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0) |
1773 | return; |
1774 | |
1775 | if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) { |
1776 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1777 | if (net_ratelimit()) { |
1778 | printk(KERN_DEBUG "%s: cancelling probereq poll due " |
1779 | "to a received beacon\n", sdata->dev->name); |
1780 | } |
1781 | #endif |
1782 | ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL; |
1783 | mutex_lock(&local->iflist_mtx); |
1784 | ieee80211_recalc_ps(local, -1); |
1785 | mutex_unlock(&local->iflist_mtx); |
1786 | } |
1787 | |
1788 | /* |
1789 | * Push the beacon loss detection into the future since |
1790 | * we are processing a beacon from the AP just now. |
1791 | */ |
1792 | mod_beacon_timer(sdata); |
1793 | |
1794 | ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4); |
1795 | ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable, |
1796 | len - baselen, &elems, |
1797 | care_about_ies, ncrc); |
1798 | |
1799 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) |
1800 | directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len, |
1801 | ifmgd->aid); |
1802 | |
1803 | if (ncrc != ifmgd->beacon_crc) { |
1804 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, |
1805 | true); |
1806 | |
1807 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1808 | elems.wmm_param_len); |
1809 | } |
1810 | |
1811 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) { |
1812 | if (directed_tim) { |
1813 | if (local->hw.conf.dynamic_ps_timeout > 0) { |
1814 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; |
1815 | ieee80211_hw_config(local, |
1816 | IEEE80211_CONF_CHANGE_PS); |
1817 | ieee80211_send_nullfunc(local, sdata, 0); |
1818 | } else { |
1819 | local->pspolling = true; |
1820 | |
1821 | /* |
1822 | * Here is assumed that the driver will be |
1823 | * able to send ps-poll frame and receive a |
1824 | * response even though power save mode is |
1825 | * enabled, but some drivers might require |
1826 | * to disable power save here. This needs |
1827 | * to be investigated. |
1828 | */ |
1829 | ieee80211_send_pspoll(local, sdata); |
1830 | } |
1831 | } |
1832 | } |
1833 | |
1834 | if (ncrc == ifmgd->beacon_crc) |
1835 | return; |
1836 | ifmgd->beacon_crc = ncrc; |
1837 | |
1838 | if (elems.erp_info && elems.erp_info_len >= 1) { |
1839 | erp_valid = true; |
1840 | erp_value = elems.erp_info[0]; |
1841 | } else { |
1842 | erp_valid = false; |
1843 | } |
1844 | changed |= ieee80211_handle_bss_capability(sdata, |
1845 | le16_to_cpu(mgmt->u.beacon.capab_info), |
1846 | erp_valid, erp_value); |
1847 | |
1848 | |
1849 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
1850 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) { |
1851 | struct sta_info *sta; |
1852 | struct ieee80211_supported_band *sband; |
1853 | u16 ap_ht_cap_flags; |
1854 | |
1855 | rcu_read_lock(); |
1856 | |
1857 | sta = sta_info_get(local, bssid); |
1858 | if (WARN_ON(!sta)) { |
1859 | rcu_read_unlock(); |
1860 | return; |
1861 | } |
1862 | |
1863 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; |
1864 | |
1865 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
1866 | elems.ht_cap_elem, &sta->sta.ht_cap); |
1867 | |
1868 | ap_ht_cap_flags = sta->sta.ht_cap.cap; |
1869 | |
1870 | rcu_read_unlock(); |
1871 | |
1872 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
1873 | bssid, ap_ht_cap_flags); |
1874 | } |
1875 | |
1876 | /* Note: country IE parsing is done for us by cfg80211 */ |
1877 | if (elems.country_elem) { |
1878 | /* TODO: IBSS also needs this */ |
1879 | if (elems.pwr_constr_elem) |
1880 | ieee80211_handle_pwr_constr(sdata, |
1881 | le16_to_cpu(mgmt->u.probe_resp.capab_info), |
1882 | elems.pwr_constr_elem, |
1883 | elems.pwr_constr_elem_len); |
1884 | } |
1885 | |
1886 | ieee80211_bss_info_change_notify(sdata, changed); |
1887 | } |
1888 | |
1889 | ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, |
1890 | struct sk_buff *skb) |
1891 | { |
1892 | struct ieee80211_local *local = sdata->local; |
1893 | struct ieee80211_mgmt *mgmt; |
1894 | u16 fc; |
1895 | |
1896 | if (skb->len < 24) |
1897 | return RX_DROP_MONITOR; |
1898 | |
1899 | mgmt = (struct ieee80211_mgmt *) skb->data; |
1900 | fc = le16_to_cpu(mgmt->frame_control); |
1901 | |
1902 | switch (fc & IEEE80211_FCTL_STYPE) { |
1903 | case IEEE80211_STYPE_PROBE_REQ: |
1904 | case IEEE80211_STYPE_PROBE_RESP: |
1905 | case IEEE80211_STYPE_BEACON: |
1906 | case IEEE80211_STYPE_AUTH: |
1907 | case IEEE80211_STYPE_ASSOC_RESP: |
1908 | case IEEE80211_STYPE_REASSOC_RESP: |
1909 | case IEEE80211_STYPE_DEAUTH: |
1910 | case IEEE80211_STYPE_DISASSOC: |
1911 | case IEEE80211_STYPE_ACTION: |
1912 | skb_queue_tail(&sdata->u.mgd.skb_queue, skb); |
1913 | ieee80211_queue_work(&local->hw, &sdata->u.mgd.work); |
1914 | return RX_QUEUED; |
1915 | } |
1916 | |
1917 | return RX_DROP_MONITOR; |
1918 | } |
1919 | |
1920 | static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, |
1921 | struct sk_buff *skb) |
1922 | { |
1923 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
1924 | struct ieee80211_rx_status *rx_status; |
1925 | struct ieee80211_mgmt *mgmt; |
1926 | struct ieee80211_mgd_work *wk; |
1927 | enum rx_mgmt_action rma = RX_MGMT_NONE; |
1928 | u16 fc; |
1929 | |
1930 | rx_status = (struct ieee80211_rx_status *) skb->cb; |
1931 | mgmt = (struct ieee80211_mgmt *) skb->data; |
1932 | fc = le16_to_cpu(mgmt->frame_control); |
1933 | |
1934 | mutex_lock(&ifmgd->mtx); |
1935 | |
1936 | if (ifmgd->associated && |
1937 | memcmp(ifmgd->associated->cbss.bssid, mgmt->bssid, |
1938 | ETH_ALEN) == 0) { |
1939 | switch (fc & IEEE80211_FCTL_STYPE) { |
1940 | case IEEE80211_STYPE_BEACON: |
1941 | ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, |
1942 | rx_status); |
1943 | break; |
1944 | case IEEE80211_STYPE_PROBE_RESP: |
1945 | ieee80211_rx_mgmt_probe_resp(sdata, NULL, mgmt, |
1946 | skb->len, rx_status); |
1947 | break; |
1948 | case IEEE80211_STYPE_DEAUTH: |
1949 | rma = ieee80211_rx_mgmt_deauth(sdata, NULL, |
1950 | mgmt, skb->len); |
1951 | break; |
1952 | case IEEE80211_STYPE_DISASSOC: |
1953 | rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); |
1954 | break; |
1955 | case IEEE80211_STYPE_ACTION: |
1956 | if (mgmt->u.action.category != WLAN_CATEGORY_SPECTRUM_MGMT) |
1957 | break; |
1958 | |
1959 | ieee80211_sta_process_chanswitch(sdata, |
1960 | &mgmt->u.action.u.chan_switch.sw_elem, |
1961 | ifmgd->associated); |
1962 | break; |
1963 | } |
1964 | mutex_unlock(&ifmgd->mtx); |
1965 | |
1966 | switch (rma) { |
1967 | case RX_MGMT_NONE: |
1968 | /* no action */ |
1969 | break; |
1970 | case RX_MGMT_CFG80211_DEAUTH: |
1971 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, |
1972 | NULL); |
1973 | break; |
1974 | case RX_MGMT_CFG80211_DISASSOC: |
1975 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len, |
1976 | NULL); |
1977 | break; |
1978 | default: |
1979 | WARN(1, "unexpected: %d", rma); |
1980 | } |
1981 | goto out; |
1982 | } |
1983 | |
1984 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
1985 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1986 | continue; |
1987 | |
1988 | switch (fc & IEEE80211_FCTL_STYPE) { |
1989 | case IEEE80211_STYPE_PROBE_RESP: |
1990 | ieee80211_rx_mgmt_probe_resp(sdata, wk, mgmt, skb->len, |
1991 | rx_status); |
1992 | break; |
1993 | case IEEE80211_STYPE_AUTH: |
1994 | rma = ieee80211_rx_mgmt_auth(sdata, wk, mgmt, skb->len); |
1995 | break; |
1996 | case IEEE80211_STYPE_ASSOC_RESP: |
1997 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, |
1998 | skb->len, false); |
1999 | break; |
2000 | case IEEE80211_STYPE_REASSOC_RESP: |
2001 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, |
2002 | skb->len, true); |
2003 | break; |
2004 | case IEEE80211_STYPE_DEAUTH: |
2005 | rma = ieee80211_rx_mgmt_deauth(sdata, wk, mgmt, |
2006 | skb->len); |
2007 | break; |
2008 | } |
2009 | /* |
2010 | * We've processed this frame for that work, so it can't |
2011 | * belong to another work struct. |
2012 | * NB: this is also required for correctness because the |
2013 | * called functions can free 'wk', and for 'rma'! |
2014 | */ |
2015 | break; |
2016 | } |
2017 | |
2018 | mutex_unlock(&ifmgd->mtx); |
2019 | |
2020 | switch (rma) { |
2021 | case RX_MGMT_NONE: |
2022 | /* no action */ |
2023 | break; |
2024 | case RX_MGMT_CFG80211_AUTH: |
2025 | cfg80211_send_rx_auth(sdata->dev, (u8 *) mgmt, skb->len); |
2026 | break; |
2027 | case RX_MGMT_CFG80211_ASSOC: |
2028 | cfg80211_send_rx_assoc(sdata->dev, (u8 *) mgmt, skb->len); |
2029 | break; |
2030 | case RX_MGMT_CFG80211_DEAUTH: |
2031 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len, NULL); |
2032 | break; |
2033 | default: |
2034 | WARN(1, "unexpected: %d", rma); |
2035 | } |
2036 | |
2037 | out: |
2038 | kfree_skb(skb); |
2039 | } |
2040 | |
2041 | static void ieee80211_sta_timer(unsigned long data) |
2042 | { |
2043 | struct ieee80211_sub_if_data *sdata = |
2044 | (struct ieee80211_sub_if_data *) data; |
2045 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2046 | struct ieee80211_local *local = sdata->local; |
2047 | |
2048 | if (local->quiescing) { |
2049 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); |
2050 | return; |
2051 | } |
2052 | |
2053 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
2054 | } |
2055 | |
2056 | static void ieee80211_sta_work(struct work_struct *work) |
2057 | { |
2058 | struct ieee80211_sub_if_data *sdata = |
2059 | container_of(work, struct ieee80211_sub_if_data, u.mgd.work); |
2060 | struct ieee80211_local *local = sdata->local; |
2061 | struct ieee80211_if_managed *ifmgd; |
2062 | struct sk_buff *skb; |
2063 | struct ieee80211_mgd_work *wk, *tmp; |
2064 | LIST_HEAD(free_work); |
2065 | enum rx_mgmt_action rma; |
2066 | bool anybusy = false; |
2067 | |
2068 | if (!netif_running(sdata->dev)) |
2069 | return; |
2070 | |
2071 | if (local->scanning) |
2072 | return; |
2073 | |
2074 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
2075 | return; |
2076 | |
2077 | /* |
2078 | * ieee80211_queue_work() should have picked up most cases, |
2079 | * here we'll pick the the rest. |
2080 | */ |
2081 | if (WARN(local->suspended, "STA MLME work scheduled while " |
2082 | "going to suspend\n")) |
2083 | return; |
2084 | |
2085 | ifmgd = &sdata->u.mgd; |
2086 | |
2087 | /* first process frames to avoid timing out while a frame is pending */ |
2088 | while ((skb = skb_dequeue(&ifmgd->skb_queue))) |
2089 | ieee80211_sta_rx_queued_mgmt(sdata, skb); |
2090 | |
2091 | /* then process the rest of the work */ |
2092 | mutex_lock(&ifmgd->mtx); |
2093 | |
2094 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
2095 | IEEE80211_STA_CONNECTION_POLL) && |
2096 | ifmgd->associated) { |
2097 | u8 bssid[ETH_ALEN]; |
2098 | |
2099 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); |
2100 | if (time_is_after_jiffies(ifmgd->probe_timeout)) |
2101 | run_again(ifmgd, ifmgd->probe_timeout); |
2102 | |
2103 | else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) { |
2104 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
2105 | printk(KERN_DEBUG "No probe response from AP %pM" |
2106 | " after %dms, try %d\n", bssid, |
2107 | (1000 * IEEE80211_PROBE_WAIT)/HZ, |
2108 | ifmgd->probe_send_count); |
2109 | #endif |
2110 | ieee80211_mgd_probe_ap_send(sdata); |
2111 | } else { |
2112 | /* |
2113 | * We actually lost the connection ... or did we? |
2114 | * Let's make sure! |
2115 | */ |
2116 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | |
2117 | IEEE80211_STA_BEACON_POLL); |
2118 | printk(KERN_DEBUG "No probe response from AP %pM" |
2119 | " after %dms, disconnecting.\n", |
2120 | bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ); |
2121 | ieee80211_set_disassoc(sdata, true); |
2122 | mutex_unlock(&ifmgd->mtx); |
2123 | /* |
2124 | * must be outside lock due to cfg80211, |
2125 | * but that's not a problem. |
2126 | */ |
2127 | ieee80211_send_deauth_disassoc(sdata, bssid, |
2128 | IEEE80211_STYPE_DEAUTH, |
2129 | WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY, |
2130 | NULL); |
2131 | mutex_lock(&ifmgd->mtx); |
2132 | } |
2133 | } |
2134 | |
2135 | |
2136 | ieee80211_recalc_idle(local); |
2137 | |
2138 | list_for_each_entry_safe(wk, tmp, &ifmgd->work_list, list) { |
2139 | if (time_is_after_jiffies(wk->timeout)) { |
2140 | /* |
2141 | * This work item isn't supposed to be worked on |
2142 | * right now, but take care to adjust the timer |
2143 | * properly. |
2144 | */ |
2145 | run_again(ifmgd, wk->timeout); |
2146 | continue; |
2147 | } |
2148 | |
2149 | switch (wk->state) { |
2150 | default: |
2151 | WARN_ON(1); |
2152 | /* fall through */ |
2153 | case IEEE80211_MGD_STATE_IDLE: |
2154 | /* nothing */ |
2155 | rma = RX_MGMT_NONE; |
2156 | break; |
2157 | case IEEE80211_MGD_STATE_PROBE: |
2158 | rma = ieee80211_direct_probe(sdata, wk); |
2159 | break; |
2160 | case IEEE80211_MGD_STATE_AUTH: |
2161 | rma = ieee80211_authenticate(sdata, wk); |
2162 | break; |
2163 | case IEEE80211_MGD_STATE_ASSOC: |
2164 | rma = ieee80211_associate(sdata, wk); |
2165 | break; |
2166 | } |
2167 | |
2168 | switch (rma) { |
2169 | case RX_MGMT_NONE: |
2170 | /* no action required */ |
2171 | break; |
2172 | case RX_MGMT_CFG80211_AUTH_TO: |
2173 | case RX_MGMT_CFG80211_ASSOC_TO: |
2174 | list_del(&wk->list); |
2175 | list_add(&wk->list, &free_work); |
2176 | wk->tries = rma; /* small abuse but only local */ |
2177 | break; |
2178 | default: |
2179 | WARN(1, "unexpected: %d", rma); |
2180 | } |
2181 | } |
2182 | |
2183 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2184 | if (wk->state != IEEE80211_MGD_STATE_IDLE) { |
2185 | anybusy = true; |
2186 | break; |
2187 | } |
2188 | } |
2189 | if (!anybusy && |
2190 | test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifmgd->request)) |
2191 | ieee80211_queue_delayed_work(&local->hw, |
2192 | &local->scan_work, |
2193 | round_jiffies_relative(0)); |
2194 | |
2195 | mutex_unlock(&ifmgd->mtx); |
2196 | |
2197 | list_for_each_entry_safe(wk, tmp, &free_work, list) { |
2198 | switch (wk->tries) { |
2199 | case RX_MGMT_CFG80211_AUTH_TO: |
2200 | cfg80211_send_auth_timeout(sdata->dev, |
2201 | wk->bss->cbss.bssid); |
2202 | break; |
2203 | case RX_MGMT_CFG80211_ASSOC_TO: |
2204 | cfg80211_send_assoc_timeout(sdata->dev, |
2205 | wk->bss->cbss.bssid); |
2206 | break; |
2207 | default: |
2208 | WARN(1, "unexpected: %d", wk->tries); |
2209 | } |
2210 | |
2211 | list_del(&wk->list); |
2212 | kfree(wk); |
2213 | } |
2214 | |
2215 | ieee80211_recalc_idle(local); |
2216 | } |
2217 | |
2218 | static void ieee80211_sta_bcn_mon_timer(unsigned long data) |
2219 | { |
2220 | struct ieee80211_sub_if_data *sdata = |
2221 | (struct ieee80211_sub_if_data *) data; |
2222 | struct ieee80211_local *local = sdata->local; |
2223 | |
2224 | if (local->quiescing) |
2225 | return; |
2226 | |
2227 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
2228 | } |
2229 | |
2230 | static void ieee80211_sta_conn_mon_timer(unsigned long data) |
2231 | { |
2232 | struct ieee80211_sub_if_data *sdata = |
2233 | (struct ieee80211_sub_if_data *) data; |
2234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2235 | struct ieee80211_local *local = sdata->local; |
2236 | |
2237 | if (local->quiescing) |
2238 | return; |
2239 | |
2240 | ieee80211_queue_work(&local->hw, &ifmgd->monitor_work); |
2241 | } |
2242 | |
2243 | static void ieee80211_sta_monitor_work(struct work_struct *work) |
2244 | { |
2245 | struct ieee80211_sub_if_data *sdata = |
2246 | container_of(work, struct ieee80211_sub_if_data, |
2247 | u.mgd.monitor_work); |
2248 | |
2249 | ieee80211_mgd_probe_ap(sdata, false); |
2250 | } |
2251 | |
2252 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
2253 | { |
2254 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
2255 | sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL | |
2256 | IEEE80211_STA_CONNECTION_POLL); |
2257 | |
2258 | /* let's probe the connection once */ |
2259 | ieee80211_queue_work(&sdata->local->hw, |
2260 | &sdata->u.mgd.monitor_work); |
2261 | /* and do all the other regular work too */ |
2262 | ieee80211_queue_work(&sdata->local->hw, |
2263 | &sdata->u.mgd.work); |
2264 | } |
2265 | } |
2266 | |
2267 | #ifdef CONFIG_PM |
2268 | void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata) |
2269 | { |
2270 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2271 | |
2272 | /* |
2273 | * we need to use atomic bitops for the running bits |
2274 | * only because both timers might fire at the same |
2275 | * time -- the code here is properly synchronised. |
2276 | */ |
2277 | |
2278 | cancel_work_sync(&ifmgd->work); |
2279 | cancel_work_sync(&ifmgd->beacon_loss_work); |
2280 | if (del_timer_sync(&ifmgd->timer)) |
2281 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); |
2282 | |
2283 | cancel_work_sync(&ifmgd->chswitch_work); |
2284 | if (del_timer_sync(&ifmgd->chswitch_timer)) |
2285 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); |
2286 | |
2287 | cancel_work_sync(&ifmgd->monitor_work); |
2288 | /* these will just be re-established on connection */ |
2289 | del_timer_sync(&ifmgd->conn_mon_timer); |
2290 | del_timer_sync(&ifmgd->bcn_mon_timer); |
2291 | } |
2292 | |
2293 | void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata) |
2294 | { |
2295 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2296 | |
2297 | if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running)) |
2298 | add_timer(&ifmgd->timer); |
2299 | if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running)) |
2300 | add_timer(&ifmgd->chswitch_timer); |
2301 | } |
2302 | #endif |
2303 | |
2304 | /* interface setup */ |
2305 | void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata) |
2306 | { |
2307 | struct ieee80211_if_managed *ifmgd; |
2308 | |
2309 | ifmgd = &sdata->u.mgd; |
2310 | INIT_WORK(&ifmgd->work, ieee80211_sta_work); |
2311 | INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work); |
2312 | INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work); |
2313 | INIT_WORK(&ifmgd->beacon_loss_work, ieee80211_beacon_loss_work); |
2314 | setup_timer(&ifmgd->timer, ieee80211_sta_timer, |
2315 | (unsigned long) sdata); |
2316 | setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer, |
2317 | (unsigned long) sdata); |
2318 | setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer, |
2319 | (unsigned long) sdata); |
2320 | setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer, |
2321 | (unsigned long) sdata); |
2322 | skb_queue_head_init(&ifmgd->skb_queue); |
2323 | |
2324 | INIT_LIST_HEAD(&ifmgd->work_list); |
2325 | |
2326 | ifmgd->capab = WLAN_CAPABILITY_ESS; |
2327 | ifmgd->flags = 0; |
2328 | if (sdata->local->hw.queues >= 4) |
2329 | ifmgd->flags |= IEEE80211_STA_WMM_ENABLED; |
2330 | |
2331 | mutex_init(&ifmgd->mtx); |
2332 | } |
2333 | |
2334 | /* scan finished notification */ |
2335 | void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local) |
2336 | { |
2337 | struct ieee80211_sub_if_data *sdata = local->scan_sdata; |
2338 | |
2339 | /* Restart STA timers */ |
2340 | rcu_read_lock(); |
2341 | list_for_each_entry_rcu(sdata, &local->interfaces, list) |
2342 | ieee80211_restart_sta_timer(sdata); |
2343 | rcu_read_unlock(); |
2344 | } |
2345 | |
2346 | int ieee80211_max_network_latency(struct notifier_block *nb, |
2347 | unsigned long data, void *dummy) |
2348 | { |
2349 | s32 latency_usec = (s32) data; |
2350 | struct ieee80211_local *local = |
2351 | container_of(nb, struct ieee80211_local, |
2352 | network_latency_notifier); |
2353 | |
2354 | mutex_lock(&local->iflist_mtx); |
2355 | ieee80211_recalc_ps(local, latency_usec); |
2356 | mutex_unlock(&local->iflist_mtx); |
2357 | |
2358 | return 0; |
2359 | } |
2360 | |
2361 | /* config hooks */ |
2362 | int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata, |
2363 | struct cfg80211_auth_request *req) |
2364 | { |
2365 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2366 | const u8 *ssid; |
2367 | struct ieee80211_mgd_work *wk; |
2368 | u16 auth_alg; |
2369 | |
2370 | switch (req->auth_type) { |
2371 | case NL80211_AUTHTYPE_OPEN_SYSTEM: |
2372 | auth_alg = WLAN_AUTH_OPEN; |
2373 | break; |
2374 | case NL80211_AUTHTYPE_SHARED_KEY: |
2375 | auth_alg = WLAN_AUTH_SHARED_KEY; |
2376 | break; |
2377 | case NL80211_AUTHTYPE_FT: |
2378 | auth_alg = WLAN_AUTH_FT; |
2379 | break; |
2380 | case NL80211_AUTHTYPE_NETWORK_EAP: |
2381 | auth_alg = WLAN_AUTH_LEAP; |
2382 | break; |
2383 | default: |
2384 | return -EOPNOTSUPP; |
2385 | } |
2386 | |
2387 | wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL); |
2388 | if (!wk) |
2389 | return -ENOMEM; |
2390 | |
2391 | wk->bss = (void *)req->bss; |
2392 | |
2393 | if (req->ie && req->ie_len) { |
2394 | memcpy(wk->ie, req->ie, req->ie_len); |
2395 | wk->ie_len = req->ie_len; |
2396 | } |
2397 | |
2398 | if (req->key && req->key_len) { |
2399 | wk->key_len = req->key_len; |
2400 | wk->key_idx = req->key_idx; |
2401 | memcpy(wk->key, req->key, req->key_len); |
2402 | } |
2403 | |
2404 | ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID); |
2405 | memcpy(wk->ssid, ssid + 2, ssid[1]); |
2406 | wk->ssid_len = ssid[1]; |
2407 | |
2408 | wk->state = IEEE80211_MGD_STATE_PROBE; |
2409 | wk->auth_alg = auth_alg; |
2410 | wk->timeout = jiffies; /* run right away */ |
2411 | |
2412 | /* |
2413 | * XXX: if still associated need to tell AP that we're going |
2414 | * to sleep and then change channel etc. |
2415 | */ |
2416 | sdata->local->oper_channel = req->bss->channel; |
2417 | ieee80211_hw_config(sdata->local, 0); |
2418 | |
2419 | mutex_lock(&ifmgd->mtx); |
2420 | list_add(&wk->list, &sdata->u.mgd.work_list); |
2421 | mutex_unlock(&ifmgd->mtx); |
2422 | |
2423 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
2424 | return 0; |
2425 | } |
2426 | |
2427 | int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata, |
2428 | struct cfg80211_assoc_request *req) |
2429 | { |
2430 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2431 | struct ieee80211_mgd_work *wk, *found = NULL; |
2432 | int i, err; |
2433 | |
2434 | mutex_lock(&ifmgd->mtx); |
2435 | |
2436 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2437 | if (&wk->bss->cbss == req->bss && |
2438 | wk->state == IEEE80211_MGD_STATE_IDLE) { |
2439 | found = wk; |
2440 | break; |
2441 | } |
2442 | } |
2443 | |
2444 | if (!found) { |
2445 | err = -ENOLINK; |
2446 | goto out; |
2447 | } |
2448 | |
2449 | list_del(&found->list); |
2450 | |
2451 | wk = krealloc(found, sizeof(*wk) + req->ie_len, GFP_KERNEL); |
2452 | if (!wk) { |
2453 | list_add(&found->list, &ifmgd->work_list); |
2454 | err = -ENOMEM; |
2455 | goto out; |
2456 | } |
2457 | |
2458 | list_add(&wk->list, &ifmgd->work_list); |
2459 | |
2460 | ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N; |
2461 | |
2462 | for (i = 0; i < req->crypto.n_ciphers_pairwise; i++) |
2463 | if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 || |
2464 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP || |
2465 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104) |
2466 | ifmgd->flags |= IEEE80211_STA_DISABLE_11N; |
2467 | |
2468 | sdata->local->oper_channel = req->bss->channel; |
2469 | ieee80211_hw_config(sdata->local, 0); |
2470 | |
2471 | if (req->ie && req->ie_len) { |
2472 | memcpy(wk->ie, req->ie, req->ie_len); |
2473 | wk->ie_len = req->ie_len; |
2474 | } else |
2475 | wk->ie_len = 0; |
2476 | |
2477 | if (req->prev_bssid) |
2478 | memcpy(wk->prev_bssid, req->prev_bssid, ETH_ALEN); |
2479 | |
2480 | wk->state = IEEE80211_MGD_STATE_ASSOC; |
2481 | wk->tries = 0; |
2482 | wk->timeout = jiffies; /* run right away */ |
2483 | |
2484 | if (req->use_mfp) { |
2485 | ifmgd->mfp = IEEE80211_MFP_REQUIRED; |
2486 | ifmgd->flags |= IEEE80211_STA_MFP_ENABLED; |
2487 | } else { |
2488 | ifmgd->mfp = IEEE80211_MFP_DISABLED; |
2489 | ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED; |
2490 | } |
2491 | |
2492 | if (req->crypto.control_port) |
2493 | ifmgd->flags |= IEEE80211_STA_CONTROL_PORT; |
2494 | else |
2495 | ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT; |
2496 | |
2497 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
2498 | |
2499 | err = 0; |
2500 | |
2501 | out: |
2502 | mutex_unlock(&ifmgd->mtx); |
2503 | return err; |
2504 | } |
2505 | |
2506 | int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata, |
2507 | struct cfg80211_deauth_request *req, |
2508 | void *cookie) |
2509 | { |
2510 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2511 | struct ieee80211_mgd_work *wk; |
2512 | const u8 *bssid = NULL; |
2513 | |
2514 | mutex_lock(&ifmgd->mtx); |
2515 | |
2516 | if (ifmgd->associated && &ifmgd->associated->cbss == req->bss) { |
2517 | bssid = req->bss->bssid; |
2518 | ieee80211_set_disassoc(sdata, true); |
2519 | } else list_for_each_entry(wk, &ifmgd->work_list, list) { |
2520 | if (&wk->bss->cbss == req->bss) { |
2521 | bssid = req->bss->bssid; |
2522 | list_del(&wk->list); |
2523 | kfree(wk); |
2524 | break; |
2525 | } |
2526 | } |
2527 | |
2528 | /* |
2529 | * cfg80211 should catch this ... but it's racy since |
2530 | * we can receive a deauth frame, process it, hand it |
2531 | * to cfg80211 while that's in a locked section already |
2532 | * trying to tell us that the user wants to disconnect. |
2533 | */ |
2534 | if (!bssid) { |
2535 | mutex_unlock(&ifmgd->mtx); |
2536 | return -ENOLINK; |
2537 | } |
2538 | |
2539 | mutex_unlock(&ifmgd->mtx); |
2540 | |
2541 | printk(KERN_DEBUG "%s: deauthenticating from %pM by local choice (reason=%d)\n", |
2542 | sdata->dev->name, bssid, req->reason_code); |
2543 | |
2544 | ieee80211_send_deauth_disassoc(sdata, bssid, |
2545 | IEEE80211_STYPE_DEAUTH, req->reason_code, |
2546 | cookie); |
2547 | |
2548 | return 0; |
2549 | } |
2550 | |
2551 | int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata, |
2552 | struct cfg80211_disassoc_request *req, |
2553 | void *cookie) |
2554 | { |
2555 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2556 | |
2557 | mutex_lock(&ifmgd->mtx); |
2558 | |
2559 | /* |
2560 | * cfg80211 should catch this ... but it's racy since |
2561 | * we can receive a disassoc frame, process it, hand it |
2562 | * to cfg80211 while that's in a locked section already |
2563 | * trying to tell us that the user wants to disconnect. |
2564 | */ |
2565 | if (&ifmgd->associated->cbss != req->bss) { |
2566 | mutex_unlock(&ifmgd->mtx); |
2567 | return -ENOLINK; |
2568 | } |
2569 | |
2570 | printk(KERN_DEBUG "%s: disassociating from %pM by local choice (reason=%d)\n", |
2571 | sdata->dev->name, req->bss->bssid, req->reason_code); |
2572 | |
2573 | ieee80211_set_disassoc(sdata, false); |
2574 | |
2575 | mutex_unlock(&ifmgd->mtx); |
2576 | |
2577 | ieee80211_send_deauth_disassoc(sdata, req->bss->bssid, |
2578 | IEEE80211_STYPE_DISASSOC, req->reason_code, |
2579 | cookie); |
2580 | return 0; |
2581 | } |
2582 |
Branches:
ben-wpan
ben-wpan-stefan
javiroman/ks7010
jz-2.6.34
jz-2.6.34-rc5
jz-2.6.34-rc6
jz-2.6.34-rc7
jz-2.6.35
jz-2.6.36
jz-2.6.37
jz-2.6.38
jz-2.6.39
jz-3.0
jz-3.1
jz-3.11
jz-3.12
jz-3.13
jz-3.15
jz-3.16
jz-3.18-dt
jz-3.2
jz-3.3
jz-3.4
jz-3.5
jz-3.6
jz-3.6-rc2-pwm
jz-3.9
jz-3.9-clk
jz-3.9-rc8
jz47xx
jz47xx-2.6.38
master
Tags:
od-2011-09-04
od-2011-09-18
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v3.9