2 * BSS client mode implementation
3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
15 * BSS table: use <BSSID,SSID> as the key to support multi-SSID APs
16 * order BSS list by RSSI(?) ("quality of AP")
17 * scan result table filtering (by capability (privacy, IBSS/BSS, WPA/RSN IE,
20 #include <linux/delay.h>
21 #include <linux/if_ether.h>
22 #include <linux/skbuff.h>
23 #include <linux/netdevice.h>
24 #include <linux/if_arp.h>
25 #include <linux/wireless.h>
26 #include <linux/random.h>
27 #include <linux/etherdevice.h>
28 #include <linux/rtnetlink.h>
29 #include <net/iw_handler.h>
30 #include <asm/types.h>
32 #include <net/mac80211.h>
33 #include "ieee80211_i.h"
34 #include "ieee80211_rate.h"
35 #include "hostapd_ioctl.h"
37 #define IEEE80211_AUTH_TIMEOUT (HZ / 5)
38 #define IEEE80211_AUTH_MAX_TRIES 3
39 #define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
40 #define IEEE80211_ASSOC_MAX_TRIES 3
41 #define IEEE80211_MONITORING_INTERVAL (2 * HZ)
42 #define IEEE80211_PROBE_INTERVAL (60 * HZ)
43 #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
44 #define IEEE80211_SCAN_INTERVAL (2 * HZ)
45 #define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
46 #define IEEE80211_IBSS_JOIN_TIMEOUT (20 * HZ)
48 #define IEEE80211_PROBE_DELAY (HZ / 33)
49 #define IEEE80211_CHANNEL_TIME (HZ / 33)
50 #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 5)
51 #define IEEE80211_SCAN_RESULT_EXPIRE (10 * HZ)
52 #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
53 #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
55 #define IEEE80211_IBSS_MAX_STA_ENTRIES 128
58 #define IEEE80211_FC(type, stype) cpu_to_le16(type | stype)
60 #define ERP_INFO_USE_PROTECTION BIT(1)
62 static void ieee80211_send_probe_req(struct net_device
*dev
, u8
*dst
,
63 u8
*ssid
, size_t ssid_len
);
64 static struct ieee80211_sta_bss
*
65 ieee80211_rx_bss_get(struct net_device
*dev
, u8
*bssid
);
66 static void ieee80211_rx_bss_put(struct net_device
*dev
,
67 struct ieee80211_sta_bss
*bss
);
68 static int ieee80211_sta_find_ibss(struct net_device
*dev
,
69 struct ieee80211_if_sta
*ifsta
);
70 static int ieee80211_sta_wep_configured(struct net_device
*dev
);
71 static int ieee80211_sta_start_scan(struct net_device
*dev
,
72 u8
*ssid
, size_t ssid_len
);
73 static int ieee80211_sta_config_auth(struct net_device
*dev
,
74 struct ieee80211_if_sta
*ifsta
);
77 /* Parsed Information Elements */
78 struct ieee802_11_elems
{
95 /* length of them, respectively */
107 u8 ext_supp_rates_len
;
112 typedef enum { ParseOK
= 0, ParseUnknown
= 1, ParseFailed
= -1 } ParseRes
;
115 static ParseRes
ieee802_11_parse_elems(u8
*start
, size_t len
,
116 struct ieee802_11_elems
*elems
)
122 memset(elems
, 0, sizeof(*elems
));
134 printk(KERN_DEBUG
"IEEE 802.11 element parse "
135 "failed (id=%d elen=%d left=%d)\n",
144 elems
->ssid_len
= elen
;
146 case WLAN_EID_SUPP_RATES
:
147 elems
->supp_rates
= pos
;
148 elems
->supp_rates_len
= elen
;
150 case WLAN_EID_FH_PARAMS
:
151 elems
->fh_params
= pos
;
152 elems
->fh_params_len
= elen
;
154 case WLAN_EID_DS_PARAMS
:
155 elems
->ds_params
= pos
;
156 elems
->ds_params_len
= elen
;
158 case WLAN_EID_CF_PARAMS
:
159 elems
->cf_params
= pos
;
160 elems
->cf_params_len
= elen
;
164 elems
->tim_len
= elen
;
166 case WLAN_EID_IBSS_PARAMS
:
167 elems
->ibss_params
= pos
;
168 elems
->ibss_params_len
= elen
;
170 case WLAN_EID_CHALLENGE
:
171 elems
->challenge
= pos
;
172 elems
->challenge_len
= elen
;
175 if (elen
>= 4 && pos
[0] == 0x00 && pos
[1] == 0x50 &&
177 /* Microsoft OUI (00:50:F2) */
179 /* OUI Type 1 - WPA IE */
181 elems
->wpa_len
= elen
;
182 } else if (elen
>= 5 && pos
[3] == 2) {
184 elems
->wmm_info
= pos
;
185 elems
->wmm_info_len
= elen
;
186 } else if (pos
[4] == 1) {
187 elems
->wmm_param
= pos
;
188 elems
->wmm_param_len
= elen
;
195 elems
->rsn_len
= elen
;
197 case WLAN_EID_ERP_INFO
:
198 elems
->erp_info
= pos
;
199 elems
->erp_info_len
= elen
;
201 case WLAN_EID_EXT_SUPP_RATES
:
202 elems
->ext_supp_rates
= pos
;
203 elems
->ext_supp_rates_len
= elen
;
207 printk(KERN_DEBUG
"IEEE 802.11 element parse ignored "
208 "unknown element (id=%d elen=%d)\n",
219 /* Do not trigger error if left == 1 as Apple Airport base stations
220 * send AssocResps that are one spurious byte too long. */
222 return unknown
? ParseUnknown
: ParseOK
;
228 static int ecw2cw(int ecw
)
239 static void ieee80211_sta_wmm_params(struct net_device
*dev
,
240 struct ieee80211_if_sta
*ifsta
,
241 u8
*wmm_param
, size_t wmm_param_len
)
243 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
244 struct ieee80211_tx_queue_params params
;
249 if (wmm_param_len
< 8 || wmm_param
[5] /* version */ != 1)
251 count
= wmm_param
[6] & 0x0f;
252 if (count
== ifsta
->wmm_last_param_set
)
254 ifsta
->wmm_last_param_set
= count
;
257 left
= wmm_param_len
- 8;
259 memset(¶ms
, 0, sizeof(params
));
261 if (!local
->ops
->conf_tx
)
265 for (; left
>= 4; left
-= 4, pos
+= 4) {
266 int aci
= (pos
[0] >> 5) & 0x03;
267 int acm
= (pos
[0] >> 4) & 0x01;
272 queue
= IEEE80211_TX_QUEUE_DATA3
;
274 local
->wmm_acm
|= BIT(0) | BIT(3);
278 queue
= IEEE80211_TX_QUEUE_DATA1
;
280 local
->wmm_acm
|= BIT(4) | BIT(5);
284 queue
= IEEE80211_TX_QUEUE_DATA0
;
286 local
->wmm_acm
|= BIT(6) | BIT(7);
291 queue
= IEEE80211_TX_QUEUE_DATA2
;
293 local
->wmm_acm
|= BIT(1) | BIT(2);
298 params
.aifs
= pos
[0] & 0x0f;
299 params
.cw_max
= ecw2cw((pos
[1] & 0xf0) >> 4);
300 params
.cw_min
= ecw2cw(pos
[1] & 0x0f);
301 /* TXOP is in units of 32 usec; burst_time in 0.1 ms */
302 params
.burst_time
= (pos
[2] | (pos
[3] << 8)) * 32 / 100;
303 printk(KERN_DEBUG
"%s: WMM queue=%d aci=%d acm=%d aifs=%d "
304 "cWmin=%d cWmax=%d burst=%d\n",
305 dev
->name
, queue
, aci
, acm
, params
.aifs
, params
.cw_min
,
306 params
.cw_max
, params
.burst_time
);
307 /* TODO: handle ACM (block TX, fallback to next lowest allowed
309 if (local
->ops
->conf_tx(local_to_hw(local
), queue
, ¶ms
)) {
310 printk(KERN_DEBUG
"%s: failed to set TX queue "
311 "parameters for queue %d\n", dev
->name
, queue
);
317 static void ieee80211_sta_send_associnfo(struct net_device
*dev
,
318 struct ieee80211_if_sta
*ifsta
)
323 union iwreq_data wrqu
;
325 if (!ifsta
->assocreq_ies
&& !ifsta
->assocresp_ies
)
328 buf
= kmalloc(50 + 2 * (ifsta
->assocreq_ies_len
+
329 ifsta
->assocresp_ies_len
), GFP_ATOMIC
);
333 len
= sprintf(buf
, "ASSOCINFO(");
334 if (ifsta
->assocreq_ies
) {
335 len
+= sprintf(buf
+ len
, "ReqIEs=");
336 for (i
= 0; i
< ifsta
->assocreq_ies_len
; i
++) {
337 len
+= sprintf(buf
+ len
, "%02x",
338 ifsta
->assocreq_ies
[i
]);
341 if (ifsta
->assocresp_ies
) {
342 if (ifsta
->assocreq_ies
)
343 len
+= sprintf(buf
+ len
, " ");
344 len
+= sprintf(buf
+ len
, "RespIEs=");
345 for (i
= 0; i
< ifsta
->assocresp_ies_len
; i
++) {
346 len
+= sprintf(buf
+ len
, "%02x",
347 ifsta
->assocresp_ies
[i
]);
350 len
+= sprintf(buf
+ len
, ")");
352 if (len
> IW_CUSTOM_MAX
) {
353 len
= sprintf(buf
, "ASSOCRESPIE=");
354 for (i
= 0; i
< ifsta
->assocresp_ies_len
; i
++) {
355 len
+= sprintf(buf
+ len
, "%02x",
356 ifsta
->assocresp_ies
[i
]);
360 memset(&wrqu
, 0, sizeof(wrqu
));
361 wrqu
.data
.length
= len
;
362 wireless_send_event(dev
, IWEVCUSTOM
, &wrqu
, buf
);
368 static void ieee80211_set_associated(struct net_device
*dev
,
369 struct ieee80211_if_sta
*ifsta
, int assoc
)
371 union iwreq_data wrqu
;
373 if (ifsta
->associated
== assoc
)
376 ifsta
->associated
= assoc
;
379 struct ieee80211_sub_if_data
*sdata
;
380 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
381 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
)
383 netif_carrier_on(dev
);
384 ifsta
->prev_bssid_set
= 1;
385 memcpy(ifsta
->prev_bssid
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
386 memcpy(wrqu
.ap_addr
.sa_data
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
387 ieee80211_sta_send_associnfo(dev
, ifsta
);
389 netif_carrier_off(dev
);
390 memset(wrqu
.ap_addr
.sa_data
, 0, ETH_ALEN
);
392 wrqu
.ap_addr
.sa_family
= ARPHRD_ETHER
;
393 wireless_send_event(dev
, SIOCGIWAP
, &wrqu
, NULL
);
394 ifsta
->last_probe
= jiffies
;
397 static void ieee80211_set_disassoc(struct net_device
*dev
,
398 struct ieee80211_if_sta
*ifsta
, int deauth
)
401 ifsta
->auth_tries
= 0;
402 ifsta
->assoc_tries
= 0;
403 ieee80211_set_associated(dev
, ifsta
, 0);
406 static void ieee80211_sta_tx(struct net_device
*dev
, struct sk_buff
*skb
,
409 struct ieee80211_sub_if_data
*sdata
;
410 struct ieee80211_tx_packet_data
*pkt_data
;
412 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
413 skb
->dev
= sdata
->local
->mdev
;
414 skb_set_mac_header(skb
, 0);
415 skb_set_network_header(skb
, 0);
416 skb_set_transport_header(skb
, 0);
418 pkt_data
= (struct ieee80211_tx_packet_data
*) skb
->cb
;
419 memset(pkt_data
, 0, sizeof(struct ieee80211_tx_packet_data
));
420 pkt_data
->ifindex
= sdata
->dev
->ifindex
;
421 pkt_data
->mgmt_iface
= (sdata
->type
== IEEE80211_IF_TYPE_MGMT
);
422 pkt_data
->do_not_encrypt
= !encrypt
;
428 static void ieee80211_send_auth(struct net_device
*dev
,
429 struct ieee80211_if_sta
*ifsta
,
430 int transaction
, u8
*extra
, size_t extra_len
,
433 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
435 struct ieee80211_mgmt
*mgmt
;
437 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+
438 sizeof(*mgmt
) + 6 + extra_len
);
440 printk(KERN_DEBUG
"%s: failed to allocate buffer for auth "
441 "frame\n", dev
->name
);
444 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
446 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24 + 6);
447 memset(mgmt
, 0, 24 + 6);
448 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
449 IEEE80211_STYPE_AUTH
);
451 mgmt
->frame_control
|= cpu_to_le16(IEEE80211_FCTL_PROTECTED
);
452 memcpy(mgmt
->da
, ifsta
->bssid
, ETH_ALEN
);
453 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
454 memcpy(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
);
455 mgmt
->u
.auth
.auth_alg
= cpu_to_le16(ifsta
->auth_alg
);
456 mgmt
->u
.auth
.auth_transaction
= cpu_to_le16(transaction
);
457 ifsta
->auth_transaction
= transaction
+ 1;
458 mgmt
->u
.auth
.status_code
= cpu_to_le16(0);
460 memcpy(skb_put(skb
, extra_len
), extra
, extra_len
);
462 ieee80211_sta_tx(dev
, skb
, encrypt
);
466 static void ieee80211_authenticate(struct net_device
*dev
,
467 struct ieee80211_if_sta
*ifsta
)
470 if (ifsta
->auth_tries
> IEEE80211_AUTH_MAX_TRIES
) {
471 printk(KERN_DEBUG
"%s: authentication with AP " MAC_FMT
473 dev
->name
, MAC_ARG(ifsta
->bssid
));
474 ifsta
->state
= IEEE80211_DISABLED
;
478 ifsta
->state
= IEEE80211_AUTHENTICATE
;
479 printk(KERN_DEBUG
"%s: authenticate with AP " MAC_FMT
"\n",
480 dev
->name
, MAC_ARG(ifsta
->bssid
));
482 ieee80211_send_auth(dev
, ifsta
, 1, NULL
, 0, 0);
484 mod_timer(&ifsta
->timer
, jiffies
+ IEEE80211_AUTH_TIMEOUT
);
488 static void ieee80211_send_assoc(struct net_device
*dev
,
489 struct ieee80211_if_sta
*ifsta
)
491 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
492 struct ieee80211_hw_mode
*mode
;
494 struct ieee80211_mgmt
*mgmt
;
498 struct ieee80211_sta_bss
*bss
;
501 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+
502 sizeof(*mgmt
) + 200 + ifsta
->extra_ie_len
+
505 printk(KERN_DEBUG
"%s: failed to allocate buffer for assoc "
506 "frame\n", dev
->name
);
509 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
511 mode
= local
->oper_hw_mode
;
512 capab
= ifsta
->capab
;
513 if (mode
->mode
== MODE_IEEE80211G
) {
514 capab
|= WLAN_CAPABILITY_SHORT_SLOT_TIME
|
515 WLAN_CAPABILITY_SHORT_PREAMBLE
;
517 bss
= ieee80211_rx_bss_get(dev
, ifsta
->bssid
);
519 if (bss
->capability
& WLAN_CAPABILITY_PRIVACY
)
520 capab
|= WLAN_CAPABILITY_PRIVACY
;
524 ieee80211_rx_bss_put(dev
, bss
);
527 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
529 memcpy(mgmt
->da
, ifsta
->bssid
, ETH_ALEN
);
530 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
531 memcpy(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
);
533 if (ifsta
->prev_bssid_set
) {
535 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
536 IEEE80211_STYPE_REASSOC_REQ
);
537 mgmt
->u
.reassoc_req
.capab_info
= cpu_to_le16(capab
);
538 mgmt
->u
.reassoc_req
.listen_interval
= cpu_to_le16(1);
539 memcpy(mgmt
->u
.reassoc_req
.current_ap
, ifsta
->prev_bssid
,
543 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
544 IEEE80211_STYPE_ASSOC_REQ
);
545 mgmt
->u
.assoc_req
.capab_info
= cpu_to_le16(capab
);
546 mgmt
->u
.assoc_req
.listen_interval
= cpu_to_le16(1);
550 ies
= pos
= skb_put(skb
, 2 + ifsta
->ssid_len
);
551 *pos
++ = WLAN_EID_SSID
;
552 *pos
++ = ifsta
->ssid_len
;
553 memcpy(pos
, ifsta
->ssid
, ifsta
->ssid_len
);
555 len
= mode
->num_rates
;
558 pos
= skb_put(skb
, len
+ 2);
559 *pos
++ = WLAN_EID_SUPP_RATES
;
561 for (i
= 0; i
< len
; i
++) {
562 int rate
= mode
->rates
[i
].rate
;
563 if (mode
->mode
== MODE_ATHEROS_TURBO
)
565 *pos
++ = (u8
) (rate
/ 5);
568 if (mode
->num_rates
> len
) {
569 pos
= skb_put(skb
, mode
->num_rates
- len
+ 2);
570 *pos
++ = WLAN_EID_EXT_SUPP_RATES
;
571 *pos
++ = mode
->num_rates
- len
;
572 for (i
= len
; i
< mode
->num_rates
; i
++) {
573 int rate
= mode
->rates
[i
].rate
;
574 if (mode
->mode
== MODE_ATHEROS_TURBO
)
576 *pos
++ = (u8
) (rate
/ 5);
580 if (ifsta
->extra_ie
) {
581 pos
= skb_put(skb
, ifsta
->extra_ie_len
);
582 memcpy(pos
, ifsta
->extra_ie
, ifsta
->extra_ie_len
);
585 if (wmm
&& ifsta
->wmm_enabled
) {
586 pos
= skb_put(skb
, 9);
587 *pos
++ = WLAN_EID_VENDOR_SPECIFIC
;
588 *pos
++ = 7; /* len */
589 *pos
++ = 0x00; /* Microsoft OUI 00:50:F2 */
592 *pos
++ = 2; /* WME */
593 *pos
++ = 0; /* WME info */
594 *pos
++ = 1; /* WME ver */
598 kfree(ifsta
->assocreq_ies
);
599 ifsta
->assocreq_ies_len
= (skb
->data
+ skb
->len
) - ies
;
600 ifsta
->assocreq_ies
= kmalloc(ifsta
->assocreq_ies_len
, GFP_ATOMIC
);
601 if (ifsta
->assocreq_ies
)
602 memcpy(ifsta
->assocreq_ies
, ies
, ifsta
->assocreq_ies_len
);
604 ieee80211_sta_tx(dev
, skb
, 0);
608 static void ieee80211_send_deauth(struct net_device
*dev
,
609 struct ieee80211_if_sta
*ifsta
, u16 reason
)
611 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
613 struct ieee80211_mgmt
*mgmt
;
615 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ sizeof(*mgmt
));
617 printk(KERN_DEBUG
"%s: failed to allocate buffer for deauth "
618 "frame\n", dev
->name
);
621 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
623 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
625 memcpy(mgmt
->da
, ifsta
->bssid
, ETH_ALEN
);
626 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
627 memcpy(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
);
628 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
629 IEEE80211_STYPE_DEAUTH
);
631 mgmt
->u
.deauth
.reason_code
= cpu_to_le16(reason
);
633 ieee80211_sta_tx(dev
, skb
, 0);
637 static void ieee80211_send_disassoc(struct net_device
*dev
,
638 struct ieee80211_if_sta
*ifsta
, u16 reason
)
640 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
642 struct ieee80211_mgmt
*mgmt
;
644 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ sizeof(*mgmt
));
646 printk(KERN_DEBUG
"%s: failed to allocate buffer for disassoc "
647 "frame\n", dev
->name
);
650 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
652 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
654 memcpy(mgmt
->da
, ifsta
->bssid
, ETH_ALEN
);
655 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
656 memcpy(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
);
657 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
658 IEEE80211_STYPE_DISASSOC
);
660 mgmt
->u
.disassoc
.reason_code
= cpu_to_le16(reason
);
662 ieee80211_sta_tx(dev
, skb
, 0);
666 static int ieee80211_privacy_mismatch(struct net_device
*dev
,
667 struct ieee80211_if_sta
*ifsta
)
669 struct ieee80211_sta_bss
*bss
;
672 if (!ifsta
|| ifsta
->mixed_cell
||
673 ifsta
->key_mgmt
!= IEEE80211_KEY_MGMT_NONE
)
676 bss
= ieee80211_rx_bss_get(dev
, ifsta
->bssid
);
680 if (ieee80211_sta_wep_configured(dev
) !=
681 !!(bss
->capability
& WLAN_CAPABILITY_PRIVACY
))
684 ieee80211_rx_bss_put(dev
, bss
);
690 static void ieee80211_associate(struct net_device
*dev
,
691 struct ieee80211_if_sta
*ifsta
)
693 ifsta
->assoc_tries
++;
694 if (ifsta
->assoc_tries
> IEEE80211_ASSOC_MAX_TRIES
) {
695 printk(KERN_DEBUG
"%s: association with AP " MAC_FMT
697 dev
->name
, MAC_ARG(ifsta
->bssid
));
698 ifsta
->state
= IEEE80211_DISABLED
;
702 ifsta
->state
= IEEE80211_ASSOCIATE
;
703 printk(KERN_DEBUG
"%s: associate with AP " MAC_FMT
"\n",
704 dev
->name
, MAC_ARG(ifsta
->bssid
));
705 if (ieee80211_privacy_mismatch(dev
, ifsta
)) {
706 printk(KERN_DEBUG
"%s: mismatch in privacy configuration and "
707 "mixed-cell disabled - abort association\n", dev
->name
);
708 ifsta
->state
= IEEE80211_DISABLED
;
712 ieee80211_send_assoc(dev
, ifsta
);
714 mod_timer(&ifsta
->timer
, jiffies
+ IEEE80211_ASSOC_TIMEOUT
);
718 static void ieee80211_associated(struct net_device
*dev
,
719 struct ieee80211_if_sta
*ifsta
)
721 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
722 struct sta_info
*sta
;
725 /* TODO: start monitoring current AP signal quality and number of
726 * missed beacons. Scan other channels every now and then and search
728 /* TODO: remove expired BSSes */
730 ifsta
->state
= IEEE80211_ASSOCIATED
;
732 sta
= sta_info_get(local
, ifsta
->bssid
);
734 printk(KERN_DEBUG
"%s: No STA entry for own AP " MAC_FMT
"\n",
735 dev
->name
, MAC_ARG(ifsta
->bssid
));
739 if (time_after(jiffies
,
740 sta
->last_rx
+ IEEE80211_MONITORING_INTERVAL
)) {
741 if (ifsta
->probereq_poll
) {
742 printk(KERN_DEBUG
"%s: No ProbeResp from "
743 "current AP " MAC_FMT
" - assume out of "
745 dev
->name
, MAC_ARG(ifsta
->bssid
));
747 sta_info_free(sta
, 0);
748 ifsta
->probereq_poll
= 0;
750 ieee80211_send_probe_req(dev
, ifsta
->bssid
,
752 local
->scan_ssid_len
);
753 ifsta
->probereq_poll
= 1;
756 ifsta
->probereq_poll
= 0;
757 if (time_after(jiffies
, ifsta
->last_probe
+
758 IEEE80211_PROBE_INTERVAL
)) {
759 ifsta
->last_probe
= jiffies
;
760 ieee80211_send_probe_req(dev
, ifsta
->bssid
,
768 union iwreq_data wrqu
;
769 memset(wrqu
.ap_addr
.sa_data
, 0, ETH_ALEN
);
770 wrqu
.ap_addr
.sa_family
= ARPHRD_ETHER
;
771 wireless_send_event(dev
, SIOCGIWAP
, &wrqu
, NULL
);
772 mod_timer(&ifsta
->timer
, jiffies
+
773 IEEE80211_MONITORING_INTERVAL
+ 30 * HZ
);
775 mod_timer(&ifsta
->timer
, jiffies
+
776 IEEE80211_MONITORING_INTERVAL
);
781 static void ieee80211_send_probe_req(struct net_device
*dev
, u8
*dst
,
782 u8
*ssid
, size_t ssid_len
)
784 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
785 struct ieee80211_hw_mode
*mode
;
787 struct ieee80211_mgmt
*mgmt
;
788 u8
*pos
, *supp_rates
, *esupp_rates
= NULL
;
791 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ sizeof(*mgmt
) + 200);
793 printk(KERN_DEBUG
"%s: failed to allocate buffer for probe "
794 "request\n", dev
->name
);
797 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
799 mgmt
= (struct ieee80211_mgmt
*) skb_put(skb
, 24);
801 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
802 IEEE80211_STYPE_PROBE_REQ
);
803 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
805 memcpy(mgmt
->da
, dst
, ETH_ALEN
);
806 memcpy(mgmt
->bssid
, dst
, ETH_ALEN
);
808 memset(mgmt
->da
, 0xff, ETH_ALEN
);
809 memset(mgmt
->bssid
, 0xff, ETH_ALEN
);
811 pos
= skb_put(skb
, 2 + ssid_len
);
812 *pos
++ = WLAN_EID_SSID
;
814 memcpy(pos
, ssid
, ssid_len
);
816 supp_rates
= skb_put(skb
, 2);
817 supp_rates
[0] = WLAN_EID_SUPP_RATES
;
819 mode
= local
->oper_hw_mode
;
820 for (i
= 0; i
< mode
->num_rates
; i
++) {
821 struct ieee80211_rate
*rate
= &mode
->rates
[i
];
822 if (!(rate
->flags
& IEEE80211_RATE_SUPPORTED
))
825 pos
= skb_put(skb
, 1);
827 } else if (supp_rates
[1] == 8) {
828 esupp_rates
= skb_put(skb
, 3);
829 esupp_rates
[0] = WLAN_EID_EXT_SUPP_RATES
;
831 pos
= &esupp_rates
[2];
833 pos
= skb_put(skb
, 1);
836 if (mode
->mode
== MODE_ATHEROS_TURBO
)
837 *pos
= rate
->rate
/ 10;
839 *pos
= rate
->rate
/ 5;
842 ieee80211_sta_tx(dev
, skb
, 0);
846 static int ieee80211_sta_wep_configured(struct net_device
*dev
)
848 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
849 if (!sdata
|| !sdata
->default_key
||
850 sdata
->default_key
->alg
!= ALG_WEP
)
856 static void ieee80211_auth_completed(struct net_device
*dev
,
857 struct ieee80211_if_sta
*ifsta
)
859 printk(KERN_DEBUG
"%s: authenticated\n", dev
->name
);
860 ifsta
->authenticated
= 1;
861 ieee80211_associate(dev
, ifsta
);
865 static void ieee80211_auth_challenge(struct net_device
*dev
,
866 struct ieee80211_if_sta
*ifsta
,
867 struct ieee80211_mgmt
*mgmt
,
871 struct ieee802_11_elems elems
;
873 printk(KERN_DEBUG
"%s: replying to auth challenge\n", dev
->name
);
874 pos
= mgmt
->u
.auth
.variable
;
875 if (ieee802_11_parse_elems(pos
, len
- (pos
- (u8
*) mgmt
), &elems
)
877 printk(KERN_DEBUG
"%s: failed to parse Auth(challenge)\n",
881 if (!elems
.challenge
) {
882 printk(KERN_DEBUG
"%s: no challenge IE in shared key auth "
883 "frame\n", dev
->name
);
886 ieee80211_send_auth(dev
, ifsta
, 3, elems
.challenge
- 2,
887 elems
.challenge_len
+ 2, 1);
891 static void ieee80211_rx_mgmt_auth(struct net_device
*dev
,
892 struct ieee80211_if_sta
*ifsta
,
893 struct ieee80211_mgmt
*mgmt
,
896 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
897 u16 auth_alg
, auth_transaction
, status_code
;
899 if (ifsta
->state
!= IEEE80211_AUTHENTICATE
&&
900 sdata
->type
!= IEEE80211_IF_TYPE_IBSS
) {
901 printk(KERN_DEBUG
"%s: authentication frame received from "
902 MAC_FMT
", but not in authenticate state - ignored\n",
903 dev
->name
, MAC_ARG(mgmt
->sa
));
908 printk(KERN_DEBUG
"%s: too short (%zd) authentication frame "
909 "received from " MAC_FMT
" - ignored\n",
910 dev
->name
, len
, MAC_ARG(mgmt
->sa
));
914 if (sdata
->type
!= IEEE80211_IF_TYPE_IBSS
&&
915 memcmp(ifsta
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0) {
916 printk(KERN_DEBUG
"%s: authentication frame received from "
917 "unknown AP (SA=" MAC_FMT
" BSSID=" MAC_FMT
") - "
918 "ignored\n", dev
->name
, MAC_ARG(mgmt
->sa
),
919 MAC_ARG(mgmt
->bssid
));
923 if (sdata
->type
!= IEEE80211_IF_TYPE_IBSS
&&
924 memcmp(ifsta
->bssid
, mgmt
->bssid
, ETH_ALEN
) != 0) {
925 printk(KERN_DEBUG
"%s: authentication frame received from "
926 "unknown BSSID (SA=" MAC_FMT
" BSSID=" MAC_FMT
") - "
927 "ignored\n", dev
->name
, MAC_ARG(mgmt
->sa
),
928 MAC_ARG(mgmt
->bssid
));
932 auth_alg
= le16_to_cpu(mgmt
->u
.auth
.auth_alg
);
933 auth_transaction
= le16_to_cpu(mgmt
->u
.auth
.auth_transaction
);
934 status_code
= le16_to_cpu(mgmt
->u
.auth
.status_code
);
936 printk(KERN_DEBUG
"%s: RX authentication from " MAC_FMT
" (alg=%d "
937 "transaction=%d status=%d)\n",
938 dev
->name
, MAC_ARG(mgmt
->sa
), auth_alg
,
939 auth_transaction
, status_code
);
941 if (sdata
->type
== IEEE80211_IF_TYPE_IBSS
) {
942 /* IEEE 802.11 standard does not require authentication in IBSS
943 * networks and most implementations do not seem to use it.
944 * However, try to reply to authentication attempts if someone
945 * has actually implemented this.
946 * TODO: Could implement shared key authentication. */
947 if (auth_alg
!= WLAN_AUTH_OPEN
|| auth_transaction
!= 1) {
948 printk(KERN_DEBUG
"%s: unexpected IBSS authentication "
949 "frame (alg=%d transaction=%d)\n",
950 dev
->name
, auth_alg
, auth_transaction
);
953 ieee80211_send_auth(dev
, ifsta
, 2, NULL
, 0, 0);
956 if (auth_alg
!= ifsta
->auth_alg
||
957 auth_transaction
!= ifsta
->auth_transaction
) {
958 printk(KERN_DEBUG
"%s: unexpected authentication frame "
959 "(alg=%d transaction=%d)\n",
960 dev
->name
, auth_alg
, auth_transaction
);
964 if (status_code
!= WLAN_STATUS_SUCCESS
) {
965 printk(KERN_DEBUG
"%s: AP denied authentication (auth_alg=%d "
966 "code=%d)\n", dev
->name
, ifsta
->auth_alg
, status_code
);
967 if (status_code
== WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG
) {
969 const int num_algs
= ARRAY_SIZE(algs
);
971 algs
[0] = algs
[1] = algs
[2] = 0xff;
972 if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_OPEN
)
973 algs
[0] = WLAN_AUTH_OPEN
;
974 if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_SHARED_KEY
)
975 algs
[1] = WLAN_AUTH_SHARED_KEY
;
976 if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_LEAP
)
977 algs
[2] = WLAN_AUTH_LEAP
;
978 if (ifsta
->auth_alg
== WLAN_AUTH_OPEN
)
980 else if (ifsta
->auth_alg
== WLAN_AUTH_SHARED_KEY
)
984 for (i
= 0; i
< num_algs
; i
++) {
988 if (algs
[pos
] == ifsta
->auth_alg
||
991 if (algs
[pos
] == WLAN_AUTH_SHARED_KEY
&&
992 !ieee80211_sta_wep_configured(dev
))
994 ifsta
->auth_alg
= algs
[pos
];
995 printk(KERN_DEBUG
"%s: set auth_alg=%d for "
997 dev
->name
, ifsta
->auth_alg
);
1004 switch (ifsta
->auth_alg
) {
1005 case WLAN_AUTH_OPEN
:
1006 case WLAN_AUTH_LEAP
:
1007 ieee80211_auth_completed(dev
, ifsta
);
1009 case WLAN_AUTH_SHARED_KEY
:
1010 if (ifsta
->auth_transaction
== 4)
1011 ieee80211_auth_completed(dev
, ifsta
);
1013 ieee80211_auth_challenge(dev
, ifsta
, mgmt
, len
);
1019 static void ieee80211_rx_mgmt_deauth(struct net_device
*dev
,
1020 struct ieee80211_if_sta
*ifsta
,
1021 struct ieee80211_mgmt
*mgmt
,
1027 printk(KERN_DEBUG
"%s: too short (%zd) deauthentication frame "
1028 "received from " MAC_FMT
" - ignored\n",
1029 dev
->name
, len
, MAC_ARG(mgmt
->sa
));
1033 if (memcmp(ifsta
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0) {
1034 printk(KERN_DEBUG
"%s: deauthentication frame received from "
1035 "unknown AP (SA=" MAC_FMT
" BSSID=" MAC_FMT
") - "
1036 "ignored\n", dev
->name
, MAC_ARG(mgmt
->sa
),
1037 MAC_ARG(mgmt
->bssid
));
1041 reason_code
= le16_to_cpu(mgmt
->u
.deauth
.reason_code
);
1043 printk(KERN_DEBUG
"%s: RX deauthentication from " MAC_FMT
1045 dev
->name
, MAC_ARG(mgmt
->sa
), reason_code
);
1047 if (ifsta
->authenticated
) {
1048 printk(KERN_DEBUG
"%s: deauthenticated\n", dev
->name
);
1051 if (ifsta
->state
== IEEE80211_AUTHENTICATE
||
1052 ifsta
->state
== IEEE80211_ASSOCIATE
||
1053 ifsta
->state
== IEEE80211_ASSOCIATED
) {
1054 ifsta
->state
= IEEE80211_AUTHENTICATE
;
1055 mod_timer(&ifsta
->timer
, jiffies
+
1056 IEEE80211_RETRY_AUTH_INTERVAL
);
1059 ieee80211_set_disassoc(dev
, ifsta
, 1);
1060 ifsta
->authenticated
= 0;
1064 static void ieee80211_rx_mgmt_disassoc(struct net_device
*dev
,
1065 struct ieee80211_if_sta
*ifsta
,
1066 struct ieee80211_mgmt
*mgmt
,
1072 printk(KERN_DEBUG
"%s: too short (%zd) disassociation frame "
1073 "received from " MAC_FMT
" - ignored\n",
1074 dev
->name
, len
, MAC_ARG(mgmt
->sa
));
1078 if (memcmp(ifsta
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0) {
1079 printk(KERN_DEBUG
"%s: disassociation frame received from "
1080 "unknown AP (SA=" MAC_FMT
" BSSID=" MAC_FMT
") - "
1081 "ignored\n", dev
->name
, MAC_ARG(mgmt
->sa
),
1082 MAC_ARG(mgmt
->bssid
));
1086 reason_code
= le16_to_cpu(mgmt
->u
.disassoc
.reason_code
);
1088 printk(KERN_DEBUG
"%s: RX disassociation from " MAC_FMT
1090 dev
->name
, MAC_ARG(mgmt
->sa
), reason_code
);
1092 if (ifsta
->associated
)
1093 printk(KERN_DEBUG
"%s: disassociated\n", dev
->name
);
1095 if (ifsta
->state
== IEEE80211_ASSOCIATED
) {
1096 ifsta
->state
= IEEE80211_ASSOCIATE
;
1097 mod_timer(&ifsta
->timer
, jiffies
+
1098 IEEE80211_RETRY_AUTH_INTERVAL
);
1101 ieee80211_set_disassoc(dev
, ifsta
, 0);
1105 static void ieee80211_rx_mgmt_assoc_resp(struct net_device
*dev
,
1106 struct ieee80211_if_sta
*ifsta
,
1107 struct ieee80211_mgmt
*mgmt
,
1111 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1112 struct ieee80211_hw_mode
*mode
;
1113 struct sta_info
*sta
;
1115 u16 capab_info
, status_code
, aid
;
1116 struct ieee802_11_elems elems
;
1120 /* AssocResp and ReassocResp have identical structure, so process both
1121 * of them in this function. */
1123 if (ifsta
->state
!= IEEE80211_ASSOCIATE
) {
1124 printk(KERN_DEBUG
"%s: association frame received from "
1125 MAC_FMT
", but not in associate state - ignored\n",
1126 dev
->name
, MAC_ARG(mgmt
->sa
));
1131 printk(KERN_DEBUG
"%s: too short (%zd) association frame "
1132 "received from " MAC_FMT
" - ignored\n",
1133 dev
->name
, len
, MAC_ARG(mgmt
->sa
));
1137 if (memcmp(ifsta
->bssid
, mgmt
->sa
, ETH_ALEN
) != 0) {
1138 printk(KERN_DEBUG
"%s: association frame received from "
1139 "unknown AP (SA=" MAC_FMT
" BSSID=" MAC_FMT
") - "
1140 "ignored\n", dev
->name
, MAC_ARG(mgmt
->sa
),
1141 MAC_ARG(mgmt
->bssid
));
1145 capab_info
= le16_to_cpu(mgmt
->u
.assoc_resp
.capab_info
);
1146 status_code
= le16_to_cpu(mgmt
->u
.assoc_resp
.status_code
);
1147 aid
= le16_to_cpu(mgmt
->u
.assoc_resp
.aid
);
1148 if ((aid
& (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1149 printk(KERN_DEBUG
"%s: invalid aid value %d; bits 15:14 not "
1150 "set\n", dev
->name
, aid
);
1151 aid
&= ~(BIT(15) | BIT(14));
1153 printk(KERN_DEBUG
"%s: RX %sssocResp from " MAC_FMT
" (capab=0x%x "
1154 "status=%d aid=%d)\n",
1155 dev
->name
, reassoc
? "Rea" : "A", MAC_ARG(mgmt
->sa
),
1156 capab_info
, status_code
, aid
);
1158 if (status_code
!= WLAN_STATUS_SUCCESS
) {
1159 printk(KERN_DEBUG
"%s: AP denied association (code=%d)\n",
1160 dev
->name
, status_code
);
1161 if (status_code
== WLAN_STATUS_REASSOC_NO_ASSOC
)
1162 ifsta
->prev_bssid_set
= 0;
1166 pos
= mgmt
->u
.assoc_resp
.variable
;
1167 if (ieee802_11_parse_elems(pos
, len
- (pos
- (u8
*) mgmt
), &elems
)
1169 printk(KERN_DEBUG
"%s: failed to parse AssocResp\n",
1174 if (!elems
.supp_rates
) {
1175 printk(KERN_DEBUG
"%s: no SuppRates element in AssocResp\n",
1180 printk(KERN_DEBUG
"%s: associated\n", dev
->name
);
1182 ifsta
->ap_capab
= capab_info
;
1184 kfree(ifsta
->assocresp_ies
);
1185 ifsta
->assocresp_ies_len
= len
- (pos
- (u8
*) mgmt
);
1186 ifsta
->assocresp_ies
= kmalloc(ifsta
->assocresp_ies_len
, GFP_ATOMIC
);
1187 if (ifsta
->assocresp_ies
)
1188 memcpy(ifsta
->assocresp_ies
, pos
, ifsta
->assocresp_ies_len
);
1190 ieee80211_set_associated(dev
, ifsta
, 1);
1192 /* Add STA entry for the AP */
1193 sta
= sta_info_get(local
, ifsta
->bssid
);
1195 struct ieee80211_sta_bss
*bss
;
1196 sta
= sta_info_add(local
, dev
, ifsta
->bssid
, GFP_ATOMIC
);
1198 printk(KERN_DEBUG
"%s: failed to add STA entry for the"
1199 " AP\n", dev
->name
);
1202 bss
= ieee80211_rx_bss_get(dev
, ifsta
->bssid
);
1204 sta
->last_rssi
= bss
->rssi
;
1205 sta
->last_signal
= bss
->signal
;
1206 sta
->last_noise
= bss
->noise
;
1207 ieee80211_rx_bss_put(dev
, bss
);
1212 sta
->flags
|= WLAN_STA_AUTH
| WLAN_STA_ASSOC
;
1216 mode
= local
->oper_hw_mode
;
1217 for (i
= 0; i
< elems
.supp_rates_len
; i
++) {
1218 int rate
= (elems
.supp_rates
[i
] & 0x7f) * 5;
1219 if (mode
->mode
== MODE_ATHEROS_TURBO
)
1221 for (j
= 0; j
< mode
->num_rates
; j
++)
1222 if (mode
->rates
[j
].rate
== rate
)
1225 for (i
= 0; i
< elems
.ext_supp_rates_len
; i
++) {
1226 int rate
= (elems
.ext_supp_rates
[i
] & 0x7f) * 5;
1227 if (mode
->mode
== MODE_ATHEROS_TURBO
)
1229 for (j
= 0; j
< mode
->num_rates
; j
++)
1230 if (mode
->rates
[j
].rate
== rate
)
1233 sta
->supp_rates
= rates
;
1235 rate_control_rate_init(sta
, local
);
1237 if (elems
.wmm_param
&& ifsta
->wmm_enabled
) {
1238 sta
->flags
|= WLAN_STA_WME
;
1239 ieee80211_sta_wmm_params(dev
, ifsta
, elems
.wmm_param
,
1240 elems
.wmm_param_len
);
1246 ieee80211_associated(dev
, ifsta
);
1250 /* Caller must hold local->sta_bss_lock */
1251 static void __ieee80211_rx_bss_hash_add(struct net_device
*dev
,
1252 struct ieee80211_sta_bss
*bss
)
1254 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1255 bss
->hnext
= local
->sta_bss_hash
[STA_HASH(bss
->bssid
)];
1256 local
->sta_bss_hash
[STA_HASH(bss
->bssid
)] = bss
;
1260 /* Caller must hold local->sta_bss_lock */
1261 static void __ieee80211_rx_bss_hash_del(struct net_device
*dev
,
1262 struct ieee80211_sta_bss
*bss
)
1264 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1265 struct ieee80211_sta_bss
*b
, *prev
= NULL
;
1266 b
= local
->sta_bss_hash
[STA_HASH(bss
->bssid
)];
1270 local
->sta_bss_hash
[STA_HASH(bss
->bssid
)] =
1273 prev
->hnext
= bss
->hnext
;
1282 static struct ieee80211_sta_bss
*
1283 ieee80211_rx_bss_add(struct net_device
*dev
, u8
*bssid
)
1285 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1286 struct ieee80211_sta_bss
*bss
;
1288 bss
= kmalloc(sizeof(*bss
), GFP_ATOMIC
);
1291 memset(bss
, 0, sizeof(*bss
));
1292 atomic_inc(&bss
->users
);
1293 atomic_inc(&bss
->users
);
1294 memcpy(bss
->bssid
, bssid
, ETH_ALEN
);
1296 spin_lock_bh(&local
->sta_bss_lock
);
1297 /* TODO: order by RSSI? */
1298 list_add_tail(&bss
->list
, &local
->sta_bss_list
);
1299 __ieee80211_rx_bss_hash_add(dev
, bss
);
1300 spin_unlock_bh(&local
->sta_bss_lock
);
1305 static struct ieee80211_sta_bss
*
1306 ieee80211_rx_bss_get(struct net_device
*dev
, u8
*bssid
)
1308 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1309 struct ieee80211_sta_bss
*bss
;
1311 spin_lock_bh(&local
->sta_bss_lock
);
1312 bss
= local
->sta_bss_hash
[STA_HASH(bssid
)];
1314 if (memcmp(bss
->bssid
, bssid
, ETH_ALEN
) == 0) {
1315 atomic_inc(&bss
->users
);
1320 spin_unlock_bh(&local
->sta_bss_lock
);
1325 static void ieee80211_rx_bss_free(struct ieee80211_sta_bss
*bss
)
1334 static void ieee80211_rx_bss_put(struct net_device
*dev
,
1335 struct ieee80211_sta_bss
*bss
)
1337 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1338 if (!atomic_dec_and_test(&bss
->users
))
1341 spin_lock_bh(&local
->sta_bss_lock
);
1342 __ieee80211_rx_bss_hash_del(dev
, bss
);
1343 list_del(&bss
->list
);
1344 spin_unlock_bh(&local
->sta_bss_lock
);
1345 ieee80211_rx_bss_free(bss
);
1349 void ieee80211_rx_bss_list_init(struct net_device
*dev
)
1351 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1352 spin_lock_init(&local
->sta_bss_lock
);
1353 INIT_LIST_HEAD(&local
->sta_bss_list
);
1357 void ieee80211_rx_bss_list_deinit(struct net_device
*dev
)
1359 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1360 struct ieee80211_sta_bss
*bss
, *tmp
;
1362 list_for_each_entry_safe(bss
, tmp
, &local
->sta_bss_list
, list
)
1363 ieee80211_rx_bss_put(dev
, bss
);
1367 static void ieee80211_rx_bss_info(struct net_device
*dev
,
1368 struct ieee80211_mgmt
*mgmt
,
1370 struct ieee80211_rx_status
*rx_status
,
1373 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1374 struct ieee802_11_elems elems
;
1376 int channel
, invalid
= 0, clen
;
1377 struct ieee80211_sta_bss
*bss
;
1378 struct sta_info
*sta
;
1379 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
1382 if (!beacon
&& memcmp(mgmt
->da
, dev
->dev_addr
, ETH_ALEN
))
1383 return; /* ignore ProbeResp to foreign address */
1386 printk(KERN_DEBUG
"%s: RX %s from " MAC_FMT
" to " MAC_FMT
"\n",
1387 dev
->name
, beacon
? "Beacon" : "Probe Response",
1388 MAC_ARG(mgmt
->sa
), MAC_ARG(mgmt
->da
));
1391 baselen
= (u8
*) mgmt
->u
.beacon
.variable
- (u8
*) mgmt
;
1395 timestamp
= le64_to_cpu(mgmt
->u
.beacon
.timestamp
);
1397 if (sdata
->type
== IEEE80211_IF_TYPE_IBSS
&& beacon
&&
1398 memcmp(mgmt
->bssid
, sdata
->u
.sta
.bssid
, ETH_ALEN
) == 0) {
1399 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1400 static unsigned long last_tsf_debug
= 0;
1402 if (local
->ops
->get_tsf
)
1403 tsf
= local
->ops
->get_tsf(local_to_hw(local
));
1406 if (time_after(jiffies
, last_tsf_debug
+ 5 * HZ
)) {
1407 printk(KERN_DEBUG
"RX beacon SA=" MAC_FMT
" BSSID="
1408 MAC_FMT
" TSF=0x%llx BCN=0x%llx diff=%lld "
1410 MAC_ARG(mgmt
->sa
), MAC_ARG(mgmt
->bssid
),
1411 (unsigned long long)tsf
,
1412 (unsigned long long)timestamp
,
1413 (unsigned long long)(tsf
- timestamp
),
1415 last_tsf_debug
= jiffies
;
1417 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1420 if (ieee802_11_parse_elems(mgmt
->u
.beacon
.variable
, len
- baselen
,
1421 &elems
) == ParseFailed
)
1424 if (sdata
->type
== IEEE80211_IF_TYPE_IBSS
&& elems
.supp_rates
&&
1425 memcmp(mgmt
->bssid
, sdata
->u
.sta
.bssid
, ETH_ALEN
) == 0 &&
1426 (sta
= sta_info_get(local
, mgmt
->sa
))) {
1427 struct ieee80211_hw_mode
*mode
;
1428 struct ieee80211_rate
*rates
;
1430 u32 supp_rates
, prev_rates
;
1433 mode
= local
->sta_scanning
?
1434 local
->scan_hw_mode
: local
->oper_hw_mode
;
1435 rates
= mode
->rates
;
1436 num_rates
= mode
->num_rates
;
1439 for (i
= 0; i
< elems
.supp_rates_len
+
1440 elems
.ext_supp_rates_len
; i
++) {
1443 if (i
< elems
.supp_rates_len
)
1444 rate
= elems
.supp_rates
[i
];
1445 else if (elems
.ext_supp_rates
)
1446 rate
= elems
.ext_supp_rates
1447 [i
- elems
.supp_rates_len
];
1448 own_rate
= 5 * (rate
& 0x7f);
1449 if (mode
->mode
== MODE_ATHEROS_TURBO
)
1451 for (j
= 0; j
< num_rates
; j
++)
1452 if (rates
[j
].rate
== own_rate
)
1453 supp_rates
|= BIT(j
);
1456 prev_rates
= sta
->supp_rates
;
1457 sta
->supp_rates
&= supp_rates
;
1458 if (sta
->supp_rates
== 0) {
1459 /* No matching rates - this should not really happen.
1460 * Make sure that at least one rate is marked
1461 * supported to avoid issues with TX rate ctrl. */
1462 sta
->supp_rates
= sdata
->u
.sta
.supp_rates_bits
;
1464 if (sta
->supp_rates
!= prev_rates
) {
1465 printk(KERN_DEBUG
"%s: updated supp_rates set for "
1466 MAC_FMT
" based on beacon info (0x%x & 0x%x -> "
1468 dev
->name
, MAC_ARG(sta
->addr
), prev_rates
,
1469 supp_rates
, sta
->supp_rates
);
1477 if (elems
.ds_params
&& elems
.ds_params_len
== 1)
1478 channel
= elems
.ds_params
[0];
1480 channel
= rx_status
->channel
;
1482 bss
= ieee80211_rx_bss_get(dev
, mgmt
->bssid
);
1484 bss
= ieee80211_rx_bss_add(dev
, mgmt
->bssid
);
1489 /* TODO: order by RSSI? */
1490 spin_lock_bh(&local
->sta_bss_lock
);
1491 list_move_tail(&bss
->list
, &local
->sta_bss_list
);
1492 spin_unlock_bh(&local
->sta_bss_lock
);
1496 if (bss
->probe_resp
&& beacon
) {
1497 /* Do not allow beacon to override data from Probe Response. */
1498 ieee80211_rx_bss_put(dev
, bss
);
1502 bss
->beacon_int
= le16_to_cpu(mgmt
->u
.beacon
.beacon_int
);
1503 bss
->capability
= le16_to_cpu(mgmt
->u
.beacon
.capab_info
);
1504 if (elems
.ssid
&& elems
.ssid_len
<= IEEE80211_MAX_SSID_LEN
) {
1505 memcpy(bss
->ssid
, elems
.ssid
, elems
.ssid_len
);
1506 bss
->ssid_len
= elems
.ssid_len
;
1509 bss
->supp_rates_len
= 0;
1510 if (elems
.supp_rates
) {
1511 clen
= IEEE80211_MAX_SUPP_RATES
- bss
->supp_rates_len
;
1512 if (clen
> elems
.supp_rates_len
)
1513 clen
= elems
.supp_rates_len
;
1514 memcpy(&bss
->supp_rates
[bss
->supp_rates_len
], elems
.supp_rates
,
1516 bss
->supp_rates_len
+= clen
;
1518 if (elems
.ext_supp_rates
) {
1519 clen
= IEEE80211_MAX_SUPP_RATES
- bss
->supp_rates_len
;
1520 if (clen
> elems
.ext_supp_rates_len
)
1521 clen
= elems
.ext_supp_rates_len
;
1522 memcpy(&bss
->supp_rates
[bss
->supp_rates_len
],
1523 elems
.ext_supp_rates
, clen
);
1524 bss
->supp_rates_len
+= clen
;
1528 (!bss
->wpa_ie
|| bss
->wpa_ie_len
!= elems
.wpa_len
||
1529 memcmp(bss
->wpa_ie
, elems
.wpa
, elems
.wpa_len
))) {
1531 bss
->wpa_ie
= kmalloc(elems
.wpa_len
+ 2, GFP_ATOMIC
);
1533 memcpy(bss
->wpa_ie
, elems
.wpa
- 2, elems
.wpa_len
+ 2);
1534 bss
->wpa_ie_len
= elems
.wpa_len
+ 2;
1536 bss
->wpa_ie_len
= 0;
1537 } else if (!elems
.wpa
&& bss
->wpa_ie
) {
1540 bss
->wpa_ie_len
= 0;
1544 (!bss
->rsn_ie
|| bss
->rsn_ie_len
!= elems
.rsn_len
||
1545 memcmp(bss
->rsn_ie
, elems
.rsn
, elems
.rsn_len
))) {
1547 bss
->rsn_ie
= kmalloc(elems
.rsn_len
+ 2, GFP_ATOMIC
);
1549 memcpy(bss
->rsn_ie
, elems
.rsn
- 2, elems
.rsn_len
+ 2);
1550 bss
->rsn_ie_len
= elems
.rsn_len
+ 2;
1552 bss
->rsn_ie_len
= 0;
1553 } else if (!elems
.rsn
&& bss
->rsn_ie
) {
1556 bss
->rsn_ie_len
= 0;
1559 if (elems
.wmm_param
&&
1560 (!bss
->wmm_ie
|| bss
->wmm_ie_len
!= elems
.wmm_param_len
||
1561 memcmp(bss
->wmm_ie
, elems
.wmm_param
, elems
.wmm_param_len
))) {
1563 bss
->wmm_ie
= kmalloc(elems
.wmm_param_len
+ 2, GFP_ATOMIC
);
1565 memcpy(bss
->wmm_ie
, elems
.wmm_param
- 2,
1566 elems
.wmm_param_len
+ 2);
1567 bss
->wmm_ie_len
= elems
.wmm_param_len
+ 2;
1569 bss
->wmm_ie_len
= 0;
1570 } else if (!elems
.wmm_param
&& bss
->wmm_ie
) {
1573 bss
->wmm_ie_len
= 0;
1577 bss
->hw_mode
= rx_status
->phymode
;
1578 bss
->channel
= channel
;
1579 bss
->freq
= rx_status
->freq
;
1580 if (channel
!= rx_status
->channel
&&
1581 (bss
->hw_mode
== MODE_IEEE80211G
||
1582 bss
->hw_mode
== MODE_IEEE80211B
) &&
1583 channel
>= 1 && channel
<= 14) {
1584 static const int freq_list
[] = {
1585 2412, 2417, 2422, 2427, 2432, 2437, 2442,
1586 2447, 2452, 2457, 2462, 2467, 2472, 2484
1588 /* IEEE 802.11g/b mode can receive packets from neighboring
1589 * channels, so map the channel into frequency. */
1590 bss
->freq
= freq_list
[channel
- 1];
1592 bss
->timestamp
= timestamp
;
1593 bss
->last_update
= jiffies
;
1594 bss
->rssi
= rx_status
->ssi
;
1595 bss
->signal
= rx_status
->signal
;
1596 bss
->noise
= rx_status
->noise
;
1599 ieee80211_rx_bss_put(dev
, bss
);
1603 static void ieee80211_rx_mgmt_probe_resp(struct net_device
*dev
,
1604 struct ieee80211_mgmt
*mgmt
,
1606 struct ieee80211_rx_status
*rx_status
)
1608 ieee80211_rx_bss_info(dev
, mgmt
, len
, rx_status
, 0);
1612 static void ieee80211_rx_mgmt_beacon(struct net_device
*dev
,
1613 struct ieee80211_mgmt
*mgmt
,
1615 struct ieee80211_rx_status
*rx_status
)
1617 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1618 struct ieee80211_sub_if_data
*sdata
;
1619 struct ieee80211_if_sta
*ifsta
;
1622 struct ieee802_11_elems elems
;
1624 ieee80211_rx_bss_info(dev
, mgmt
, len
, rx_status
, 1);
1626 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
1627 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
)
1629 ifsta
= &sdata
->u
.sta
;
1631 if (!ifsta
->associated
||
1632 memcmp(ifsta
->bssid
, mgmt
->bssid
, ETH_ALEN
) != 0)
1635 /* Process beacon from the current BSS */
1636 baselen
= (u8
*) mgmt
->u
.beacon
.variable
- (u8
*) mgmt
;
1640 if (ieee802_11_parse_elems(mgmt
->u
.beacon
.variable
, len
- baselen
,
1641 &elems
) == ParseFailed
)
1645 if (elems
.erp_info
&& elems
.erp_info_len
>= 1) {
1647 (elems
.erp_info
[0] & ERP_INFO_USE_PROTECTION
) != 0;
1650 if (use_protection
!= !!ifsta
->use_protection
) {
1651 if (net_ratelimit()) {
1652 printk(KERN_DEBUG
"%s: CTS protection %s (BSSID="
1655 use_protection
? "enabled" : "disabled",
1656 MAC_ARG(ifsta
->bssid
));
1658 ifsta
->use_protection
= use_protection
? 1 : 0;
1659 local
->cts_protect_erp_frames
= use_protection
;
1662 if (elems
.wmm_param
&& ifsta
->wmm_enabled
) {
1663 ieee80211_sta_wmm_params(dev
, ifsta
, elems
.wmm_param
,
1664 elems
.wmm_param_len
);
1669 static void ieee80211_rx_mgmt_probe_req(struct net_device
*dev
,
1670 struct ieee80211_if_sta
*ifsta
,
1671 struct ieee80211_mgmt
*mgmt
,
1673 struct ieee80211_rx_status
*rx_status
)
1675 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1676 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
1678 struct sk_buff
*skb
;
1679 struct ieee80211_mgmt
*resp
;
1682 if (sdata
->type
!= IEEE80211_IF_TYPE_IBSS
||
1683 ifsta
->state
!= IEEE80211_IBSS_JOINED
||
1684 len
< 24 + 2 || !ifsta
->probe_resp
)
1687 if (local
->ops
->tx_last_beacon
)
1688 tx_last_beacon
= local
->ops
->tx_last_beacon(local_to_hw(local
));
1692 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1693 printk(KERN_DEBUG
"%s: RX ProbeReq SA=" MAC_FMT
" DA=" MAC_FMT
" BSSID="
1694 MAC_FMT
" (tx_last_beacon=%d)\n",
1695 dev
->name
, MAC_ARG(mgmt
->sa
), MAC_ARG(mgmt
->da
),
1696 MAC_ARG(mgmt
->bssid
), tx_last_beacon
);
1697 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1699 if (!tx_last_beacon
)
1702 if (memcmp(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
) != 0 &&
1703 memcmp(mgmt
->bssid
, "\xff\xff\xff\xff\xff\xff", ETH_ALEN
) != 0)
1706 end
= ((u8
*) mgmt
) + len
;
1707 pos
= mgmt
->u
.probe_req
.variable
;
1708 if (pos
[0] != WLAN_EID_SSID
||
1709 pos
+ 2 + pos
[1] > end
) {
1710 if (net_ratelimit()) {
1711 printk(KERN_DEBUG
"%s: Invalid SSID IE in ProbeReq "
1712 "from " MAC_FMT
"\n",
1713 dev
->name
, MAC_ARG(mgmt
->sa
));
1718 (pos
[1] != ifsta
->ssid_len
||
1719 memcmp(pos
+ 2, ifsta
->ssid
, ifsta
->ssid_len
) != 0)) {
1720 /* Ignore ProbeReq for foreign SSID */
1724 /* Reply with ProbeResp */
1725 skb
= skb_copy(ifsta
->probe_resp
, GFP_ATOMIC
);
1729 resp
= (struct ieee80211_mgmt
*) skb
->data
;
1730 memcpy(resp
->da
, mgmt
->sa
, ETH_ALEN
);
1731 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1732 printk(KERN_DEBUG
"%s: Sending ProbeResp to " MAC_FMT
"\n",
1733 dev
->name
, MAC_ARG(resp
->da
));
1734 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1735 ieee80211_sta_tx(dev
, skb
, 0);
1739 void ieee80211_sta_rx_mgmt(struct net_device
*dev
, struct sk_buff
*skb
,
1740 struct ieee80211_rx_status
*rx_status
)
1742 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1743 struct ieee80211_sub_if_data
*sdata
;
1744 struct ieee80211_if_sta
*ifsta
;
1745 struct ieee80211_mgmt
*mgmt
;
1751 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
1752 ifsta
= &sdata
->u
.sta
;
1754 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
1755 fc
= le16_to_cpu(mgmt
->frame_control
);
1757 switch (fc
& IEEE80211_FCTL_STYPE
) {
1758 case IEEE80211_STYPE_PROBE_REQ
:
1759 case IEEE80211_STYPE_PROBE_RESP
:
1760 case IEEE80211_STYPE_BEACON
:
1761 memcpy(skb
->cb
, rx_status
, sizeof(*rx_status
));
1762 case IEEE80211_STYPE_AUTH
:
1763 case IEEE80211_STYPE_ASSOC_RESP
:
1764 case IEEE80211_STYPE_REASSOC_RESP
:
1765 case IEEE80211_STYPE_DEAUTH
:
1766 case IEEE80211_STYPE_DISASSOC
:
1767 skb_queue_tail(&ifsta
->skb_queue
, skb
);
1768 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
1771 printk(KERN_DEBUG
"%s: received unknown management frame - "
1772 "stype=%d\n", dev
->name
,
1773 (fc
& IEEE80211_FCTL_STYPE
) >> 4);
1782 static void ieee80211_sta_rx_queued_mgmt(struct net_device
*dev
,
1783 struct sk_buff
*skb
)
1785 struct ieee80211_rx_status
*rx_status
;
1786 struct ieee80211_sub_if_data
*sdata
;
1787 struct ieee80211_if_sta
*ifsta
;
1788 struct ieee80211_mgmt
*mgmt
;
1791 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
1792 ifsta
= &sdata
->u
.sta
;
1794 rx_status
= (struct ieee80211_rx_status
*) skb
->cb
;
1795 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
1796 fc
= le16_to_cpu(mgmt
->frame_control
);
1798 switch (fc
& IEEE80211_FCTL_STYPE
) {
1799 case IEEE80211_STYPE_PROBE_REQ
:
1800 ieee80211_rx_mgmt_probe_req(dev
, ifsta
, mgmt
, skb
->len
,
1803 case IEEE80211_STYPE_PROBE_RESP
:
1804 ieee80211_rx_mgmt_probe_resp(dev
, mgmt
, skb
->len
, rx_status
);
1806 case IEEE80211_STYPE_BEACON
:
1807 ieee80211_rx_mgmt_beacon(dev
, mgmt
, skb
->len
, rx_status
);
1809 case IEEE80211_STYPE_AUTH
:
1810 ieee80211_rx_mgmt_auth(dev
, ifsta
, mgmt
, skb
->len
);
1812 case IEEE80211_STYPE_ASSOC_RESP
:
1813 ieee80211_rx_mgmt_assoc_resp(dev
, ifsta
, mgmt
, skb
->len
, 0);
1815 case IEEE80211_STYPE_REASSOC_RESP
:
1816 ieee80211_rx_mgmt_assoc_resp(dev
, ifsta
, mgmt
, skb
->len
, 1);
1818 case IEEE80211_STYPE_DEAUTH
:
1819 ieee80211_rx_mgmt_deauth(dev
, ifsta
, mgmt
, skb
->len
);
1821 case IEEE80211_STYPE_DISASSOC
:
1822 ieee80211_rx_mgmt_disassoc(dev
, ifsta
, mgmt
, skb
->len
);
1830 void ieee80211_sta_rx_scan(struct net_device
*dev
, struct sk_buff
*skb
,
1831 struct ieee80211_rx_status
*rx_status
)
1833 struct ieee80211_mgmt
*mgmt
;
1836 if (skb
->len
< 24) {
1841 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
1842 fc
= le16_to_cpu(mgmt
->frame_control
);
1844 if ((fc
& IEEE80211_FCTL_FTYPE
) == IEEE80211_FTYPE_MGMT
) {
1845 if ((fc
& IEEE80211_FCTL_STYPE
) == IEEE80211_STYPE_PROBE_RESP
) {
1846 ieee80211_rx_mgmt_probe_resp(dev
, mgmt
,
1847 skb
->len
, rx_status
);
1848 } else if ((fc
& IEEE80211_FCTL_STYPE
) == IEEE80211_STYPE_BEACON
) {
1849 ieee80211_rx_mgmt_beacon(dev
, mgmt
, skb
->len
,
1858 static int ieee80211_sta_active_ibss(struct net_device
*dev
)
1860 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1862 struct sta_info
*sta
;
1864 spin_lock_bh(&local
->sta_lock
);
1865 list_for_each_entry(sta
, &local
->sta_list
, list
) {
1866 if (sta
->dev
== dev
&&
1867 time_after(sta
->last_rx
+ IEEE80211_IBSS_MERGE_INTERVAL
,
1873 spin_unlock_bh(&local
->sta_lock
);
1879 static void ieee80211_sta_expire(struct net_device
*dev
)
1881 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1882 struct sta_info
*sta
, *tmp
;
1884 spin_lock_bh(&local
->sta_lock
);
1885 list_for_each_entry_safe(sta
, tmp
, &local
->sta_list
, list
)
1886 if (time_after(jiffies
, sta
->last_rx
+
1887 IEEE80211_IBSS_INACTIVITY_LIMIT
)) {
1888 printk(KERN_DEBUG
"%s: expiring inactive STA " MAC_FMT
1889 "\n", dev
->name
, MAC_ARG(sta
->addr
));
1890 sta_info_free(sta
, 1);
1892 spin_unlock_bh(&local
->sta_lock
);
1896 static void ieee80211_sta_merge_ibss(struct net_device
*dev
,
1897 struct ieee80211_if_sta
*ifsta
)
1899 mod_timer(&ifsta
->timer
, jiffies
+ IEEE80211_IBSS_MERGE_INTERVAL
);
1901 ieee80211_sta_expire(dev
);
1902 if (ieee80211_sta_active_ibss(dev
))
1905 printk(KERN_DEBUG
"%s: No active IBSS STAs - trying to scan for other "
1906 "IBSS networks with same SSID (merge)\n", dev
->name
);
1907 ieee80211_sta_req_scan(dev
, ifsta
->ssid
, ifsta
->ssid_len
);
1911 void ieee80211_sta_timer(unsigned long data
)
1913 struct ieee80211_sub_if_data
*sdata
=
1914 (struct ieee80211_sub_if_data
*) data
;
1915 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
1916 struct ieee80211_local
*local
= wdev_priv(&sdata
->wdev
);
1918 set_bit(IEEE80211_STA_REQ_RUN
, &ifsta
->request
);
1919 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
1923 void ieee80211_sta_work(struct work_struct
*work
)
1925 struct ieee80211_sub_if_data
*sdata
=
1926 container_of(work
, struct ieee80211_sub_if_data
, u
.sta
.work
);
1927 struct net_device
*dev
= sdata
->dev
;
1928 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
1929 struct ieee80211_if_sta
*ifsta
;
1930 struct sk_buff
*skb
;
1932 if (!netif_running(dev
))
1935 if (local
->sta_scanning
)
1938 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
&&
1939 sdata
->type
!= IEEE80211_IF_TYPE_IBSS
) {
1940 printk(KERN_DEBUG
"%s: ieee80211_sta_work: non-STA interface "
1941 "(type=%d)\n", dev
->name
, sdata
->type
);
1944 ifsta
= &sdata
->u
.sta
;
1946 while ((skb
= skb_dequeue(&ifsta
->skb_queue
)))
1947 ieee80211_sta_rx_queued_mgmt(dev
, skb
);
1949 if (ifsta
->state
!= IEEE80211_AUTHENTICATE
&&
1950 ifsta
->state
!= IEEE80211_ASSOCIATE
&&
1951 test_and_clear_bit(IEEE80211_STA_REQ_SCAN
, &ifsta
->request
)) {
1952 ieee80211_sta_start_scan(dev
, NULL
, 0);
1956 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH
, &ifsta
->request
)) {
1957 if (ieee80211_sta_config_auth(dev
, ifsta
))
1959 clear_bit(IEEE80211_STA_REQ_RUN
, &ifsta
->request
);
1960 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN
, &ifsta
->request
))
1963 switch (ifsta
->state
) {
1964 case IEEE80211_DISABLED
:
1966 case IEEE80211_AUTHENTICATE
:
1967 ieee80211_authenticate(dev
, ifsta
);
1969 case IEEE80211_ASSOCIATE
:
1970 ieee80211_associate(dev
, ifsta
);
1972 case IEEE80211_ASSOCIATED
:
1973 ieee80211_associated(dev
, ifsta
);
1975 case IEEE80211_IBSS_SEARCH
:
1976 ieee80211_sta_find_ibss(dev
, ifsta
);
1978 case IEEE80211_IBSS_JOINED
:
1979 ieee80211_sta_merge_ibss(dev
, ifsta
);
1982 printk(KERN_DEBUG
"ieee80211_sta_work: Unknown state %d\n",
1987 if (ieee80211_privacy_mismatch(dev
, ifsta
)) {
1988 printk(KERN_DEBUG
"%s: privacy configuration mismatch and "
1989 "mixed-cell disabled - disassociate\n", dev
->name
);
1991 ieee80211_send_disassoc(dev
, ifsta
, WLAN_REASON_UNSPECIFIED
);
1992 ieee80211_set_disassoc(dev
, ifsta
, 0);
1997 static void ieee80211_sta_reset_auth(struct net_device
*dev
,
1998 struct ieee80211_if_sta
*ifsta
)
2000 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2002 if (local
->ops
->reset_tsf
) {
2003 /* Reset own TSF to allow time synchronization work. */
2004 local
->ops
->reset_tsf(local_to_hw(local
));
2007 ifsta
->wmm_last_param_set
= -1; /* allow any WMM update */
2010 if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_OPEN
)
2011 ifsta
->auth_alg
= WLAN_AUTH_OPEN
;
2012 else if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_SHARED_KEY
)
2013 ifsta
->auth_alg
= WLAN_AUTH_SHARED_KEY
;
2014 else if (ifsta
->auth_algs
& IEEE80211_AUTH_ALG_LEAP
)
2015 ifsta
->auth_alg
= WLAN_AUTH_LEAP
;
2017 ifsta
->auth_alg
= WLAN_AUTH_OPEN
;
2018 printk(KERN_DEBUG
"%s: Initial auth_alg=%d\n", dev
->name
,
2020 ifsta
->auth_transaction
= -1;
2021 ifsta
->associated
= ifsta
->auth_tries
= ifsta
->assoc_tries
= 0;
2022 netif_carrier_off(dev
);
2026 void ieee80211_sta_req_auth(struct net_device
*dev
,
2027 struct ieee80211_if_sta
*ifsta
)
2029 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2030 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2032 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
)
2035 if ((ifsta
->bssid_set
|| ifsta
->auto_bssid_sel
) &&
2036 (ifsta
->ssid_set
|| ifsta
->auto_ssid_sel
)) {
2037 set_bit(IEEE80211_STA_REQ_AUTH
, &ifsta
->request
);
2038 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
2042 static int ieee80211_sta_match_ssid(struct ieee80211_if_sta
*ifsta
,
2043 const char *ssid
, int ssid_len
)
2045 int tmp
, hidden_ssid
;
2047 if (!memcmp(ifsta
->ssid
, ssid
, ssid_len
))
2050 if (ifsta
->auto_bssid_sel
)
2056 if (ssid
[tmp
] != '\0') {
2062 if (hidden_ssid
&& ifsta
->ssid_len
== ssid_len
)
2065 if (ssid_len
== 1 && ssid
[0] == ' ')
2071 static int ieee80211_sta_config_auth(struct net_device
*dev
,
2072 struct ieee80211_if_sta
*ifsta
)
2074 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2075 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2076 struct ieee80211_sta_bss
*bss
, *selected
= NULL
;
2077 int top_rssi
= 0, freq
;
2081 if (!ifsta
->auto_channel_sel
&& !ifsta
->auto_bssid_sel
&&
2082 !ifsta
->auto_ssid_sel
) {
2083 ifsta
->state
= IEEE80211_AUTHENTICATE
;
2085 ieee80211_sta_reset_auth(dev
, ifsta
);
2089 spin_lock_bh(&local
->sta_bss_lock
);
2090 freq
= local
->oper_channel
->freq
;
2091 list_for_each_entry(bss
, &local
->sta_bss_list
, list
) {
2092 if (!(bss
->capability
& WLAN_CAPABILITY_ESS
))
2095 if (!!(bss
->capability
& WLAN_CAPABILITY_PRIVACY
) ^
2096 !!sdata
->default_key
)
2099 if (!ifsta
->auto_channel_sel
&& bss
->freq
!= freq
)
2102 if (!ifsta
->auto_bssid_sel
&&
2103 memcmp(bss
->bssid
, ifsta
->bssid
, ETH_ALEN
))
2106 if (!ifsta
->auto_ssid_sel
&&
2107 !ieee80211_sta_match_ssid(ifsta
, bss
->ssid
, bss
->ssid_len
))
2110 if (!selected
|| top_rssi
< bss
->rssi
) {
2112 top_rssi
= bss
->rssi
;
2116 atomic_inc(&selected
->users
);
2117 spin_unlock_bh(&local
->sta_bss_lock
);
2120 ieee80211_set_channel(local
, -1, selected
->freq
);
2121 if (!ifsta
->ssid_set
)
2122 ieee80211_sta_set_ssid(dev
, selected
->ssid
,
2123 selected
->ssid_len
);
2124 ieee80211_sta_set_bssid(dev
, selected
->bssid
);
2125 ieee80211_rx_bss_put(dev
, selected
);
2126 ifsta
->state
= IEEE80211_AUTHENTICATE
;
2128 ieee80211_sta_reset_auth(dev
, ifsta
);
2131 if (ifsta
->state
!= IEEE80211_AUTHENTICATE
) {
2132 ieee80211_sta_start_scan(dev
, NULL
, 0);
2133 ifsta
->state
= IEEE80211_AUTHENTICATE
;
2134 set_bit(IEEE80211_STA_REQ_AUTH
, &ifsta
->request
);
2136 ifsta
->state
= IEEE80211_DISABLED
;
2142 static int ieee80211_sta_join_ibss(struct net_device
*dev
,
2143 struct ieee80211_if_sta
*ifsta
,
2144 struct ieee80211_sta_bss
*bss
)
2146 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2147 int res
, rates
, i
, j
;
2148 struct sk_buff
*skb
;
2149 struct ieee80211_mgmt
*mgmt
;
2150 struct ieee80211_tx_control control
;
2151 struct ieee80211_rate
*rate
;
2152 struct ieee80211_hw_mode
*mode
;
2153 struct rate_control_extra extra
;
2155 struct ieee80211_sub_if_data
*sdata
;
2157 /* Remove possible STA entries from other IBSS networks. */
2158 sta_info_flush(local
, NULL
);
2160 if (local
->ops
->reset_tsf
) {
2161 /* Reset own TSF to allow time synchronization work. */
2162 local
->ops
->reset_tsf(local_to_hw(local
));
2164 memcpy(ifsta
->bssid
, bss
->bssid
, ETH_ALEN
);
2165 res
= ieee80211_if_config(dev
);
2169 local
->hw
.conf
.beacon_int
= bss
->beacon_int
>= 10 ? bss
->beacon_int
: 10;
2171 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2172 sdata
->drop_unencrypted
= bss
->capability
&
2173 WLAN_CAPABILITY_PRIVACY
? 1 : 0;
2175 res
= ieee80211_set_channel(local
, -1, bss
->freq
);
2177 if (!(local
->oper_channel
->flag
& IEEE80211_CHAN_W_IBSS
)) {
2178 printk(KERN_DEBUG
"%s: IBSS not allowed on channel %d "
2179 "(%d MHz)\n", dev
->name
, local
->hw
.conf
.channel
,
2180 local
->hw
.conf
.freq
);
2184 /* Set beacon template based on scan results */
2185 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ 400);
2190 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
2192 mgmt
= (struct ieee80211_mgmt
*)
2193 skb_put(skb
, 24 + sizeof(mgmt
->u
.beacon
));
2194 memset(mgmt
, 0, 24 + sizeof(mgmt
->u
.beacon
));
2195 mgmt
->frame_control
= IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
2196 IEEE80211_STYPE_BEACON
);
2197 memset(mgmt
->da
, 0xff, ETH_ALEN
);
2198 memcpy(mgmt
->sa
, dev
->dev_addr
, ETH_ALEN
);
2199 memcpy(mgmt
->bssid
, ifsta
->bssid
, ETH_ALEN
);
2200 mgmt
->u
.beacon
.beacon_int
=
2201 cpu_to_le16(local
->hw
.conf
.beacon_int
);
2202 mgmt
->u
.beacon
.capab_info
= cpu_to_le16(bss
->capability
);
2204 pos
= skb_put(skb
, 2 + ifsta
->ssid_len
);
2205 *pos
++ = WLAN_EID_SSID
;
2206 *pos
++ = ifsta
->ssid_len
;
2207 memcpy(pos
, ifsta
->ssid
, ifsta
->ssid_len
);
2209 rates
= bss
->supp_rates_len
;
2212 pos
= skb_put(skb
, 2 + rates
);
2213 *pos
++ = WLAN_EID_SUPP_RATES
;
2215 memcpy(pos
, bss
->supp_rates
, rates
);
2217 pos
= skb_put(skb
, 2 + 1);
2218 *pos
++ = WLAN_EID_DS_PARAMS
;
2220 *pos
++ = bss
->channel
;
2222 pos
= skb_put(skb
, 2 + 2);
2223 *pos
++ = WLAN_EID_IBSS_PARAMS
;
2225 /* FIX: set ATIM window based on scan results */
2229 if (bss
->supp_rates_len
> 8) {
2230 rates
= bss
->supp_rates_len
- 8;
2231 pos
= skb_put(skb
, 2 + rates
);
2232 *pos
++ = WLAN_EID_EXT_SUPP_RATES
;
2234 memcpy(pos
, &bss
->supp_rates
[8], rates
);
2237 memset(&control
, 0, sizeof(control
));
2238 memset(&extra
, 0, sizeof(extra
));
2239 extra
.mode
= local
->oper_hw_mode
;
2240 rate
= rate_control_get_rate(local
, dev
, skb
, &extra
);
2242 printk(KERN_DEBUG
"%s: Failed to determine TX rate "
2243 "for IBSS beacon\n", dev
->name
);
2246 control
.tx_rate
= (local
->short_preamble
&&
2247 (rate
->flags
& IEEE80211_RATE_PREAMBLE2
)) ?
2248 rate
->val2
: rate
->val
;
2249 control
.antenna_sel_tx
= local
->hw
.conf
.antenna_sel_tx
;
2250 control
.power_level
= local
->hw
.conf
.power_level
;
2251 control
.flags
|= IEEE80211_TXCTL_NO_ACK
;
2252 control
.retry_limit
= 1;
2254 ifsta
->probe_resp
= skb_copy(skb
, GFP_ATOMIC
);
2255 if (ifsta
->probe_resp
) {
2256 mgmt
= (struct ieee80211_mgmt
*)
2257 ifsta
->probe_resp
->data
;
2258 mgmt
->frame_control
=
2259 IEEE80211_FC(IEEE80211_FTYPE_MGMT
,
2260 IEEE80211_STYPE_PROBE_RESP
);
2262 printk(KERN_DEBUG
"%s: Could not allocate ProbeResp "
2263 "template for IBSS\n", dev
->name
);
2266 if (local
->ops
->beacon_update
&&
2267 local
->ops
->beacon_update(local_to_hw(local
),
2268 skb
, &control
) == 0) {
2269 printk(KERN_DEBUG
"%s: Configured IBSS beacon "
2270 "template based on scan results\n", dev
->name
);
2275 mode
= local
->oper_hw_mode
;
2276 for (i
= 0; i
< bss
->supp_rates_len
; i
++) {
2277 int bitrate
= (bss
->supp_rates
[i
] & 0x7f) * 5;
2278 if (mode
->mode
== MODE_ATHEROS_TURBO
)
2280 for (j
= 0; j
< mode
->num_rates
; j
++)
2281 if (mode
->rates
[j
].rate
== bitrate
)
2284 ifsta
->supp_rates_bits
= rates
;
2288 printk(KERN_DEBUG
"%s: Failed to configure IBSS beacon "
2289 "template\n", dev
->name
);
2293 ifsta
->state
= IEEE80211_IBSS_JOINED
;
2294 mod_timer(&ifsta
->timer
, jiffies
+ IEEE80211_IBSS_MERGE_INTERVAL
);
2296 ieee80211_rx_bss_put(dev
, bss
);
2302 static int ieee80211_sta_create_ibss(struct net_device
*dev
,
2303 struct ieee80211_if_sta
*ifsta
)
2305 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2306 struct ieee80211_sta_bss
*bss
;
2307 struct ieee80211_sub_if_data
*sdata
;
2308 struct ieee80211_hw_mode
*mode
;
2309 u8 bssid
[ETH_ALEN
], *pos
;
2313 /* Easier testing, use fixed BSSID. */
2314 memset(bssid
, 0xfe, ETH_ALEN
);
2316 /* Generate random, not broadcast, locally administered BSSID. Mix in
2317 * own MAC address to make sure that devices that do not have proper
2318 * random number generator get different BSSID. */
2319 get_random_bytes(bssid
, ETH_ALEN
);
2320 for (i
= 0; i
< ETH_ALEN
; i
++)
2321 bssid
[i
] ^= dev
->dev_addr
[i
];
2326 printk(KERN_DEBUG
"%s: Creating new IBSS network, BSSID " MAC_FMT
"\n",
2327 dev
->name
, MAC_ARG(bssid
));
2329 bss
= ieee80211_rx_bss_add(dev
, bssid
);
2333 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2334 mode
= local
->oper_hw_mode
;
2336 if (local
->hw
.conf
.beacon_int
== 0)
2337 local
->hw
.conf
.beacon_int
= 100;
2338 bss
->beacon_int
= local
->hw
.conf
.beacon_int
;
2339 bss
->hw_mode
= local
->hw
.conf
.phymode
;
2340 bss
->channel
= local
->hw
.conf
.channel
;
2341 bss
->freq
= local
->hw
.conf
.freq
;
2342 bss
->last_update
= jiffies
;
2343 bss
->capability
= WLAN_CAPABILITY_IBSS
;
2344 if (sdata
->default_key
) {
2345 bss
->capability
|= WLAN_CAPABILITY_PRIVACY
;
2347 sdata
->drop_unencrypted
= 0;
2348 bss
->supp_rates_len
= mode
->num_rates
;
2349 pos
= bss
->supp_rates
;
2350 for (i
= 0; i
< mode
->num_rates
; i
++) {
2351 int rate
= mode
->rates
[i
].rate
;
2352 if (mode
->mode
== MODE_ATHEROS_TURBO
)
2354 *pos
++ = (u8
) (rate
/ 5);
2357 return ieee80211_sta_join_ibss(dev
, ifsta
, bss
);
2361 static int ieee80211_sta_find_ibss(struct net_device
*dev
,
2362 struct ieee80211_if_sta
*ifsta
)
2364 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2365 struct ieee80211_sta_bss
*bss
;
2370 if (ifsta
->ssid_len
== 0)
2373 active_ibss
= ieee80211_sta_active_ibss(dev
);
2374 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2375 printk(KERN_DEBUG
"%s: sta_find_ibss (active_ibss=%d)\n",
2376 dev
->name
, active_ibss
);
2377 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2378 spin_lock_bh(&local
->sta_bss_lock
);
2379 list_for_each_entry(bss
, &local
->sta_bss_list
, list
) {
2380 if (ifsta
->ssid_len
!= bss
->ssid_len
||
2381 memcmp(ifsta
->ssid
, bss
->ssid
, bss
->ssid_len
) != 0
2382 || !(bss
->capability
& WLAN_CAPABILITY_IBSS
))
2384 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2385 printk(KERN_DEBUG
" bssid=" MAC_FMT
" found\n",
2386 MAC_ARG(bss
->bssid
));
2387 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2388 memcpy(bssid
, bss
->bssid
, ETH_ALEN
);
2390 if (active_ibss
|| memcmp(bssid
, ifsta
->bssid
, ETH_ALEN
) != 0)
2393 spin_unlock_bh(&local
->sta_bss_lock
);
2395 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2396 printk(KERN_DEBUG
" sta_find_ibss: selected " MAC_FMT
" current "
2397 MAC_FMT
"\n", MAC_ARG(bssid
), MAC_ARG(ifsta
->bssid
));
2398 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2399 if (found
&& memcmp(ifsta
->bssid
, bssid
, ETH_ALEN
) != 0 &&
2400 (bss
= ieee80211_rx_bss_get(dev
, bssid
))) {
2401 printk(KERN_DEBUG
"%s: Selected IBSS BSSID " MAC_FMT
2402 " based on configured SSID\n",
2403 dev
->name
, MAC_ARG(bssid
));
2404 return ieee80211_sta_join_ibss(dev
, ifsta
, bss
);
2406 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2407 printk(KERN_DEBUG
" did not try to join ibss\n");
2408 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2410 /* Selected IBSS not found in current scan results - try to scan */
2411 if (ifsta
->state
== IEEE80211_IBSS_JOINED
&&
2412 !ieee80211_sta_active_ibss(dev
)) {
2413 mod_timer(&ifsta
->timer
, jiffies
+
2414 IEEE80211_IBSS_MERGE_INTERVAL
);
2415 } else if (time_after(jiffies
, local
->last_scan_completed
+
2416 IEEE80211_SCAN_INTERVAL
)) {
2417 printk(KERN_DEBUG
"%s: Trigger new scan to find an IBSS to "
2418 "join\n", dev
->name
);
2419 return ieee80211_sta_req_scan(dev
, ifsta
->ssid
,
2421 } else if (ifsta
->state
!= IEEE80211_IBSS_JOINED
) {
2422 int interval
= IEEE80211_SCAN_INTERVAL
;
2424 if (time_after(jiffies
, ifsta
->ibss_join_req
+
2425 IEEE80211_IBSS_JOIN_TIMEOUT
)) {
2426 if (ifsta
->create_ibss
&&
2427 local
->oper_channel
->flag
& IEEE80211_CHAN_W_IBSS
)
2428 return ieee80211_sta_create_ibss(dev
, ifsta
);
2429 if (ifsta
->create_ibss
) {
2430 printk(KERN_DEBUG
"%s: IBSS not allowed on the"
2431 " configured channel %d (%d MHz)\n",
2432 dev
->name
, local
->hw
.conf
.channel
,
2433 local
->hw
.conf
.freq
);
2436 /* No IBSS found - decrease scan interval and continue
2438 interval
= IEEE80211_SCAN_INTERVAL_SLOW
;
2441 ifsta
->state
= IEEE80211_IBSS_SEARCH
;
2442 mod_timer(&ifsta
->timer
, jiffies
+ interval
);
2450 int ieee80211_sta_set_ssid(struct net_device
*dev
, char *ssid
, size_t len
)
2452 struct ieee80211_sub_if_data
*sdata
;
2453 struct ieee80211_if_sta
*ifsta
;
2454 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2456 if (len
> IEEE80211_MAX_SSID_LEN
)
2459 /* TODO: This should always be done for IBSS, even if IEEE80211_QOS is
2461 if (local
->ops
->conf_tx
) {
2462 struct ieee80211_tx_queue_params qparam
;
2465 memset(&qparam
, 0, sizeof(qparam
));
2466 /* TODO: are these ok defaults for all hw_modes? */
2469 local
->hw
.conf
.phymode
== MODE_IEEE80211B
? 31 : 15;
2470 qparam
.cw_max
= 1023;
2471 qparam
.burst_time
= 0;
2472 for (i
= IEEE80211_TX_QUEUE_DATA0
; i
< NUM_TX_DATA_QUEUES
; i
++)
2474 local
->ops
->conf_tx(local_to_hw(local
),
2475 i
+ IEEE80211_TX_QUEUE_DATA0
,
2478 /* IBSS uses different parameters for Beacon sending */
2482 local
->ops
->conf_tx(local_to_hw(local
),
2483 IEEE80211_TX_QUEUE_BEACON
, &qparam
);
2486 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2487 ifsta
= &sdata
->u
.sta
;
2489 if (ifsta
->ssid_len
!= len
|| memcmp(ifsta
->ssid
, ssid
, len
) != 0)
2490 ifsta
->prev_bssid_set
= 0;
2491 memcpy(ifsta
->ssid
, ssid
, len
);
2492 memset(ifsta
->ssid
+ len
, 0, IEEE80211_MAX_SSID_LEN
- len
);
2493 ifsta
->ssid_len
= len
;
2495 ifsta
->ssid_set
= len
? 1 : 0;
2496 if (sdata
->type
== IEEE80211_IF_TYPE_IBSS
&& !ifsta
->bssid_set
) {
2497 ifsta
->ibss_join_req
= jiffies
;
2498 ifsta
->state
= IEEE80211_IBSS_SEARCH
;
2499 return ieee80211_sta_find_ibss(dev
, ifsta
);
2505 int ieee80211_sta_get_ssid(struct net_device
*dev
, char *ssid
, size_t *len
)
2507 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2508 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
2509 memcpy(ssid
, ifsta
->ssid
, ifsta
->ssid_len
);
2510 *len
= ifsta
->ssid_len
;
2515 int ieee80211_sta_set_bssid(struct net_device
*dev
, u8
*bssid
)
2517 struct ieee80211_sub_if_data
*sdata
;
2518 struct ieee80211_if_sta
*ifsta
;
2521 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2522 ifsta
= &sdata
->u
.sta
;
2524 if (memcmp(ifsta
->bssid
, bssid
, ETH_ALEN
) != 0) {
2525 memcpy(ifsta
->bssid
, bssid
, ETH_ALEN
);
2526 res
= ieee80211_if_config(dev
);
2528 printk(KERN_DEBUG
"%s: Failed to config new BSSID to "
2529 "the low-level driver\n", dev
->name
);
2534 if (!is_valid_ether_addr(bssid
))
2535 ifsta
->bssid_set
= 0;
2537 ifsta
->bssid_set
= 1;
2542 static void ieee80211_send_nullfunc(struct ieee80211_local
*local
,
2543 struct ieee80211_sub_if_data
*sdata
,
2546 struct sk_buff
*skb
;
2547 struct ieee80211_hdr
*nullfunc
;
2550 skb
= dev_alloc_skb(local
->hw
.extra_tx_headroom
+ 24);
2552 printk(KERN_DEBUG
"%s: failed to allocate buffer for nullfunc "
2553 "frame\n", sdata
->dev
->name
);
2556 skb_reserve(skb
, local
->hw
.extra_tx_headroom
);
2558 nullfunc
= (struct ieee80211_hdr
*) skb_put(skb
, 24);
2559 memset(nullfunc
, 0, 24);
2560 fc
= IEEE80211_FTYPE_DATA
| IEEE80211_STYPE_NULLFUNC
|
2561 IEEE80211_FCTL_TODS
;
2563 fc
|= IEEE80211_FCTL_PM
;
2564 nullfunc
->frame_control
= cpu_to_le16(fc
);
2565 memcpy(nullfunc
->addr1
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
2566 memcpy(nullfunc
->addr2
, sdata
->dev
->dev_addr
, ETH_ALEN
);
2567 memcpy(nullfunc
->addr3
, sdata
->u
.sta
.bssid
, ETH_ALEN
);
2569 ieee80211_sta_tx(sdata
->dev
, skb
, 0);
2573 void ieee80211_scan_completed(struct ieee80211_hw
*hw
)
2575 struct ieee80211_local
*local
= hw_to_local(hw
);
2576 struct net_device
*dev
= local
->scan_dev
;
2577 struct ieee80211_sub_if_data
*sdata
;
2578 union iwreq_data wrqu
;
2580 local
->last_scan_completed
= jiffies
;
2582 local
->sta_scanning
= 0;
2584 if (ieee80211_hw_config(local
))
2585 printk(KERN_DEBUG
"%s: failed to restore operational"
2586 "channel after scan\n", dev
->name
);
2588 if (!(local
->hw
.flags
& IEEE80211_HW_NO_PROBE_FILTERING
) &&
2589 ieee80211_if_config(dev
))
2590 printk(KERN_DEBUG
"%s: failed to restore operational"
2591 "BSSID after scan\n", dev
->name
);
2593 memset(&wrqu
, 0, sizeof(wrqu
));
2594 wireless_send_event(dev
, SIOCGIWSCAN
, &wrqu
, NULL
);
2596 read_lock(&local
->sub_if_lock
);
2597 list_for_each_entry(sdata
, &local
->sub_if_list
, list
) {
2599 /* No need to wake the master device. */
2600 if (sdata
->dev
== local
->mdev
)
2603 if (sdata
->type
== IEEE80211_IF_TYPE_STA
) {
2604 if (sdata
->u
.sta
.associated
)
2605 ieee80211_send_nullfunc(local
, sdata
, 0);
2606 ieee80211_sta_timer((unsigned long)sdata
);
2609 netif_wake_queue(sdata
->dev
);
2611 read_unlock(&local
->sub_if_lock
);
2613 sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2614 if (sdata
->type
== IEEE80211_IF_TYPE_IBSS
) {
2615 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
2616 if (!ifsta
->bssid_set
||
2617 (!ifsta
->state
== IEEE80211_IBSS_JOINED
&&
2618 !ieee80211_sta_active_ibss(dev
)))
2619 ieee80211_sta_find_ibss(dev
, ifsta
);
2622 EXPORT_SYMBOL(ieee80211_scan_completed
);
2624 void ieee80211_sta_scan_work(struct work_struct
*work
)
2626 struct ieee80211_local
*local
=
2627 container_of(work
, struct ieee80211_local
, scan_work
.work
);
2628 struct net_device
*dev
= local
->scan_dev
;
2629 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2630 struct ieee80211_hw_mode
*mode
;
2631 struct ieee80211_channel
*chan
;
2633 unsigned long next_delay
= 0;
2635 if (!local
->sta_scanning
)
2638 switch (local
->scan_state
) {
2639 case SCAN_SET_CHANNEL
:
2640 mode
= local
->scan_hw_mode
;
2641 if (local
->scan_hw_mode
->list
.next
== &local
->modes_list
&&
2642 local
->scan_channel_idx
>= mode
->num_channels
) {
2643 ieee80211_scan_completed(local_to_hw(local
));
2646 skip
= !(local
->enabled_modes
& (1 << mode
->mode
));
2647 chan
= &mode
->channels
[local
->scan_channel_idx
];
2648 if (!(chan
->flag
& IEEE80211_CHAN_W_SCAN
) ||
2649 (sdata
->type
== IEEE80211_IF_TYPE_IBSS
&&
2650 !(chan
->flag
& IEEE80211_CHAN_W_IBSS
)) ||
2651 (local
->hw_modes
& local
->enabled_modes
&
2652 (1 << MODE_IEEE80211G
) && mode
->mode
== MODE_IEEE80211B
))
2657 printk(KERN_DEBUG
"%s: scan channel %d (%d MHz)\n",
2658 dev
->name
, chan
->chan
, chan
->freq
);
2661 local
->scan_channel
= chan
;
2662 if (ieee80211_hw_config(local
)) {
2663 printk(KERN_DEBUG
"%s: failed to set channel "
2664 "%d (%d MHz) for scan\n", dev
->name
,
2665 chan
->chan
, chan
->freq
);
2670 local
->scan_channel_idx
++;
2671 if (local
->scan_channel_idx
>= local
->scan_hw_mode
->num_channels
) {
2672 if (local
->scan_hw_mode
->list
.next
!= &local
->modes_list
) {
2673 local
->scan_hw_mode
= list_entry(local
->scan_hw_mode
->list
.next
,
2674 struct ieee80211_hw_mode
,
2676 local
->scan_channel_idx
= 0;
2683 next_delay
= IEEE80211_PROBE_DELAY
+
2684 usecs_to_jiffies(local
->hw
.channel_change_time
);
2685 local
->scan_state
= SCAN_SEND_PROBE
;
2687 case SCAN_SEND_PROBE
:
2688 if (local
->scan_channel
->flag
& IEEE80211_CHAN_W_ACTIVE_SCAN
) {
2689 ieee80211_send_probe_req(dev
, NULL
, local
->scan_ssid
,
2690 local
->scan_ssid_len
);
2691 next_delay
= IEEE80211_CHANNEL_TIME
;
2693 next_delay
= IEEE80211_PASSIVE_CHANNEL_TIME
;
2694 local
->scan_state
= SCAN_SET_CHANNEL
;
2698 if (local
->sta_scanning
)
2699 queue_delayed_work(local
->hw
.workqueue
, &local
->scan_work
,
2704 static int ieee80211_sta_start_scan(struct net_device
*dev
,
2705 u8
*ssid
, size_t ssid_len
)
2707 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2708 struct ieee80211_sub_if_data
*sdata
;
2710 if (ssid_len
> IEEE80211_MAX_SSID_LEN
)
2713 /* MLME-SCAN.request (page 118) page 144 (11.1.3.1)
2714 * BSSType: INFRASTRUCTURE, INDEPENDENT, ANY_BSS
2717 * ScanType: ACTIVE, PASSIVE
2718 * ProbeDelay: delay (in microseconds) to be used prior to transmitting
2719 * a Probe frame during active scanning
2721 * MinChannelTime (>= ProbeDelay), in TU
2722 * MaxChannelTime: (>= MinChannelTime), in TU
2725 /* MLME-SCAN.confirm
2727 * ResultCode: SUCCESS, INVALID_PARAMETERS
2730 if (local
->sta_scanning
) {
2731 if (local
->scan_dev
== dev
)
2736 if (local
->ops
->hw_scan
) {
2737 int rc
= local
->ops
->hw_scan(local_to_hw(local
),
2740 local
->sta_scanning
= 1;
2741 local
->scan_dev
= dev
;
2746 local
->sta_scanning
= 1;
2748 read_lock(&local
->sub_if_lock
);
2749 list_for_each_entry(sdata
, &local
->sub_if_list
, list
) {
2751 /* Don't stop the master interface, otherwise we can't transmit
2753 if (sdata
->dev
== local
->mdev
)
2756 netif_stop_queue(sdata
->dev
);
2757 if (sdata
->type
== IEEE80211_IF_TYPE_STA
&&
2758 sdata
->u
.sta
.associated
)
2759 ieee80211_send_nullfunc(local
, sdata
, 1);
2761 read_unlock(&local
->sub_if_lock
);
2764 local
->scan_ssid_len
= ssid_len
;
2765 memcpy(local
->scan_ssid
, ssid
, ssid_len
);
2767 local
->scan_ssid_len
= 0;
2768 local
->scan_state
= SCAN_SET_CHANNEL
;
2769 local
->scan_hw_mode
= list_entry(local
->modes_list
.next
,
2770 struct ieee80211_hw_mode
,
2772 local
->scan_channel_idx
= 0;
2773 local
->scan_dev
= dev
;
2775 if (!(local
->hw
.flags
& IEEE80211_HW_NO_PROBE_FILTERING
) &&
2776 ieee80211_if_config(dev
))
2777 printk(KERN_DEBUG
"%s: failed to set BSSID for scan\n",
2780 /* TODO: start scan as soon as all nullfunc frames are ACKed */
2781 queue_delayed_work(local
->hw
.workqueue
, &local
->scan_work
,
2782 IEEE80211_CHANNEL_TIME
);
2788 int ieee80211_sta_req_scan(struct net_device
*dev
, u8
*ssid
, size_t ssid_len
)
2790 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2791 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
2792 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2794 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
)
2795 return ieee80211_sta_start_scan(dev
, ssid
, ssid_len
);
2797 if (local
->sta_scanning
) {
2798 if (local
->scan_dev
== dev
)
2803 set_bit(IEEE80211_STA_REQ_SCAN
, &ifsta
->request
);
2804 queue_work(local
->hw
.workqueue
, &ifsta
->work
);
2809 ieee80211_sta_scan_result(struct net_device
*dev
,
2810 struct ieee80211_sta_bss
*bss
,
2811 char *current_ev
, char *end_buf
)
2813 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2814 struct iw_event iwe
;
2816 if (time_after(jiffies
,
2817 bss
->last_update
+ IEEE80211_SCAN_RESULT_EXPIRE
))
2820 if (!(local
->enabled_modes
& (1 << bss
->hw_mode
)))
2823 if (local
->scan_flags
& IEEE80211_SCAN_WPA_ONLY
&&
2824 !bss
->wpa_ie
&& !bss
->rsn_ie
)
2827 if (local
->scan_flags
& IEEE80211_SCAN_MATCH_SSID
&&
2828 (local
->scan_ssid_len
!= bss
->ssid_len
||
2829 memcmp(local
->scan_ssid
, bss
->ssid
, bss
->ssid_len
) != 0))
2832 memset(&iwe
, 0, sizeof(iwe
));
2833 iwe
.cmd
= SIOCGIWAP
;
2834 iwe
.u
.ap_addr
.sa_family
= ARPHRD_ETHER
;
2835 memcpy(iwe
.u
.ap_addr
.sa_data
, bss
->bssid
, ETH_ALEN
);
2836 current_ev
= iwe_stream_add_event(current_ev
, end_buf
, &iwe
,
2839 memset(&iwe
, 0, sizeof(iwe
));
2840 iwe
.cmd
= SIOCGIWESSID
;
2841 iwe
.u
.data
.length
= bss
->ssid_len
;
2842 iwe
.u
.data
.flags
= 1;
2843 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
,
2846 if (bss
->capability
& (WLAN_CAPABILITY_ESS
| WLAN_CAPABILITY_IBSS
)) {
2847 memset(&iwe
, 0, sizeof(iwe
));
2848 iwe
.cmd
= SIOCGIWMODE
;
2849 if (bss
->capability
& WLAN_CAPABILITY_ESS
)
2850 iwe
.u
.mode
= IW_MODE_MASTER
;
2852 iwe
.u
.mode
= IW_MODE_ADHOC
;
2853 current_ev
= iwe_stream_add_event(current_ev
, end_buf
, &iwe
,
2857 memset(&iwe
, 0, sizeof(iwe
));
2858 iwe
.cmd
= SIOCGIWFREQ
;
2859 iwe
.u
.freq
.m
= bss
->channel
;
2861 current_ev
= iwe_stream_add_event(current_ev
, end_buf
, &iwe
,
2863 iwe
.u
.freq
.m
= bss
->freq
* 100000;
2865 current_ev
= iwe_stream_add_event(current_ev
, end_buf
, &iwe
,
2868 memset(&iwe
, 0, sizeof(iwe
));
2870 iwe
.u
.qual
.qual
= bss
->signal
;
2871 iwe
.u
.qual
.level
= bss
->rssi
;
2872 iwe
.u
.qual
.noise
= bss
->noise
;
2873 iwe
.u
.qual
.updated
= local
->wstats_flags
;
2874 current_ev
= iwe_stream_add_event(current_ev
, end_buf
, &iwe
,
2877 memset(&iwe
, 0, sizeof(iwe
));
2878 iwe
.cmd
= SIOCGIWENCODE
;
2879 if (bss
->capability
& WLAN_CAPABILITY_PRIVACY
)
2880 iwe
.u
.data
.flags
= IW_ENCODE_ENABLED
| IW_ENCODE_NOKEY
;
2882 iwe
.u
.data
.flags
= IW_ENCODE_DISABLED
;
2883 iwe
.u
.data
.length
= 0;
2884 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
, "");
2886 if (bss
&& bss
->wpa_ie
) {
2887 memset(&iwe
, 0, sizeof(iwe
));
2888 iwe
.cmd
= IWEVGENIE
;
2889 iwe
.u
.data
.length
= bss
->wpa_ie_len
;
2890 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
,
2894 if (bss
&& bss
->rsn_ie
) {
2895 memset(&iwe
, 0, sizeof(iwe
));
2896 iwe
.cmd
= IWEVGENIE
;
2897 iwe
.u
.data
.length
= bss
->rsn_ie_len
;
2898 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
,
2902 if (bss
&& bss
->supp_rates_len
> 0) {
2903 /* display all supported rates in readable format */
2904 char *p
= current_ev
+ IW_EV_LCP_LEN
;
2907 memset(&iwe
, 0, sizeof(iwe
));
2908 iwe
.cmd
= SIOCGIWRATE
;
2909 /* Those two flags are ignored... */
2910 iwe
.u
.bitrate
.fixed
= iwe
.u
.bitrate
.disabled
= 0;
2912 for (i
= 0; i
< bss
->supp_rates_len
; i
++) {
2913 iwe
.u
.bitrate
.value
= ((bss
->supp_rates
[i
] &
2915 p
= iwe_stream_add_value(current_ev
, p
,
2916 end_buf
, &iwe
, IW_EV_PARAM_LEN
);
2923 buf
= kmalloc(30, GFP_ATOMIC
);
2925 memset(&iwe
, 0, sizeof(iwe
));
2926 iwe
.cmd
= IWEVCUSTOM
;
2927 sprintf(buf
, "tsf=%016llx", (unsigned long long)(bss
->timestamp
));
2928 iwe
.u
.data
.length
= strlen(buf
);
2929 current_ev
= iwe_stream_add_point(current_ev
, end_buf
,
2938 if (!(local
->scan_flags
& IEEE80211_SCAN_EXTRA_INFO
))
2941 buf
= kmalloc(100, GFP_ATOMIC
);
2945 memset(&iwe
, 0, sizeof(iwe
));
2946 iwe
.cmd
= IWEVCUSTOM
;
2947 sprintf(buf
, "bcn_int=%d", bss
->beacon_int
);
2948 iwe
.u
.data
.length
= strlen(buf
);
2949 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
,
2952 memset(&iwe
, 0, sizeof(iwe
));
2953 iwe
.cmd
= IWEVCUSTOM
;
2954 sprintf(buf
, "capab=0x%04x", bss
->capability
);
2955 iwe
.u
.data
.length
= strlen(buf
);
2956 current_ev
= iwe_stream_add_point(current_ev
, end_buf
, &iwe
,
2967 int ieee80211_sta_scan_results(struct net_device
*dev
, char *buf
, size_t len
)
2969 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
2970 char *current_ev
= buf
;
2971 char *end_buf
= buf
+ len
;
2972 struct ieee80211_sta_bss
*bss
;
2974 spin_lock_bh(&local
->sta_bss_lock
);
2975 list_for_each_entry(bss
, &local
->sta_bss_list
, list
) {
2976 if (buf
+ len
- current_ev
<= IW_EV_ADDR_LEN
) {
2977 spin_unlock_bh(&local
->sta_bss_lock
);
2980 current_ev
= ieee80211_sta_scan_result(dev
, bss
, current_ev
,
2983 spin_unlock_bh(&local
->sta_bss_lock
);
2984 return current_ev
- buf
;
2988 int ieee80211_sta_set_extra_ie(struct net_device
*dev
, char *ie
, size_t len
)
2990 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
2991 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
2992 kfree(ifsta
->extra_ie
);
2994 ifsta
->extra_ie
= NULL
;
2995 ifsta
->extra_ie_len
= 0;
2998 ifsta
->extra_ie
= kmalloc(len
, GFP_KERNEL
);
2999 if (!ifsta
->extra_ie
) {
3000 ifsta
->extra_ie_len
= 0;
3003 memcpy(ifsta
->extra_ie
, ie
, len
);
3004 ifsta
->extra_ie_len
= len
;
3009 struct sta_info
* ieee80211_ibss_add_sta(struct net_device
*dev
,
3010 struct sk_buff
*skb
, u8
*bssid
,
3013 struct ieee80211_local
*local
= wdev_priv(dev
->ieee80211_ptr
);
3014 struct sta_info
*sta
;
3015 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
3017 /* TODO: Could consider removing the least recently used entry and
3018 * allow new one to be added. */
3019 if (local
->num_sta
>= IEEE80211_IBSS_MAX_STA_ENTRIES
) {
3020 if (net_ratelimit()) {
3021 printk(KERN_DEBUG
"%s: No room for a new IBSS STA "
3022 "entry " MAC_FMT
"\n", dev
->name
, MAC_ARG(addr
));
3027 printk(KERN_DEBUG
"%s: Adding new IBSS station " MAC_FMT
" (dev=%s)\n",
3028 local
->mdev
->name
, MAC_ARG(addr
), dev
->name
);
3030 sta
= sta_info_add(local
, dev
, addr
, GFP_ATOMIC
);
3034 sta
->supp_rates
= sdata
->u
.sta
.supp_rates_bits
;
3036 rate_control_rate_init(sta
, local
);
3038 return sta
; /* caller will call sta_info_put() */
3042 int ieee80211_sta_deauthenticate(struct net_device
*dev
, u16 reason
)
3044 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
3045 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
3047 printk(KERN_DEBUG
"%s: deauthenticate(reason=%d)\n",
3050 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
&&
3051 sdata
->type
!= IEEE80211_IF_TYPE_IBSS
)
3054 ieee80211_send_deauth(dev
, ifsta
, reason
);
3055 ieee80211_set_disassoc(dev
, ifsta
, 1);
3060 int ieee80211_sta_disassociate(struct net_device
*dev
, u16 reason
)
3062 struct ieee80211_sub_if_data
*sdata
= IEEE80211_DEV_TO_SUB_IF(dev
);
3063 struct ieee80211_if_sta
*ifsta
= &sdata
->u
.sta
;
3065 printk(KERN_DEBUG
"%s: disassociate(reason=%d)\n",
3068 if (sdata
->type
!= IEEE80211_IF_TYPE_STA
)
3071 if (!ifsta
->associated
)
3074 ieee80211_send_disassoc(dev
, ifsta
, reason
);
3075 ieee80211_set_disassoc(dev
, ifsta
, 0);