net/wireless/mlme.c

   1 /*
   2  * cfg80211 MLME SAP interface
   3  *
   4  * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
   5  */
   6
   7 #include <linux/kernel.h>
   8 #include <linux/module.h>
   9 #include <linux/netdevice.h>
  10 #include <linux/nl80211.h>
  11 #include <linux/wireless.h>
  12 #include <net/cfg80211.h>
  13 #include <net/iw_handler.h>
  14 #include "core.h"
  15 #include "nl80211.h"
  16
  17 void cfg80211_send_rx_auth(struct net_device *dev, const u8 *buf, size_t len)
  18 {
  19         struct wireless_dev *wdev = dev->ieee80211_ptr;
  20         struct wiphy *wiphy = wdev->wiphy;
  21         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
  22         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
  23         u8 *bssid = mgmt->bssid;
  24         int i;
  25         u16 status = le16_to_cpu(mgmt->u.auth.status_code);
  26         bool done = false;
  27
  28         wdev_lock(wdev);
  29
  30         for (i = 0; i < MAX_AUTH_BSSES; i++) {
  31                 if (wdev->authtry_bsses[i] &&
  32                     memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid,
  33                                                         ETH_ALEN) == 0) {
  34                         if (status == WLAN_STATUS_SUCCESS) {
  35                                 wdev->auth_bsses[i] = wdev->authtry_bsses[i];
  36                         } else {
  37                                 cfg80211_unhold_bss(wdev->authtry_bsses[i]);
  38                                 cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
  39                         }
  40                         wdev->authtry_bsses[i] = NULL;
  41                         done = true;
  42                         break;
  43                 }
  44         }
  45
  46         WARN_ON(!done);
  47
  48         nl80211_send_rx_auth(rdev, dev, buf, len, GFP_KERNEL);
  49         cfg80211_sme_rx_auth(dev, buf, len);
  50
  51         wdev_unlock(wdev);
  52 }
  53 EXPORT_SYMBOL(cfg80211_send_rx_auth);
  54
  55 void cfg80211_send_rx_assoc(struct net_device *dev, const u8 *buf, size_t len)
  56 {
  57         u16 status_code;
  58         struct wireless_dev *wdev = dev->ieee80211_ptr;
  59         struct wiphy *wiphy = wdev->wiphy;
  60         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
  61         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
  62         u8 *ie = mgmt->u.assoc_resp.variable;
  63         int i, ieoffs = offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
  64         struct cfg80211_internal_bss *bss = NULL;
  65
  66         wdev_lock(wdev);
  67
  68         status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
  69
  70         /*
  71          * This is a bit of a hack, we don't notify userspace of
  72          * a (re-)association reply if we tried to send a reassoc
  73          * and got a reject -- we only try again with an assoc
  74          * frame instead of reassoc.
  75          */
  76         if (status_code != WLAN_STATUS_SUCCESS && wdev->conn &&
  77             cfg80211_sme_failed_reassoc(wdev))
  78                 goto out;
  79
  80         nl80211_send_rx_assoc(rdev, dev, buf, len, GFP_KERNEL);
  81
  82         if (status_code == WLAN_STATUS_SUCCESS) {
  83                 for (i = 0; i < MAX_AUTH_BSSES; i++) {
  84                         if (!wdev->auth_bsses[i])
  85                                 continue;
  86                         if (memcmp(wdev->auth_bsses[i]->pub.bssid, mgmt->bssid,
  87                                    ETH_ALEN) == 0) {
  88                                 bss = wdev->auth_bsses[i];
  89                                 wdev->auth_bsses[i] = NULL;
  90                                 /* additional reference to drop hold */
  91                                 cfg80211_ref_bss(bss);
  92                                 break;
  93                         }
  94                 }
  95
  96                 WARN_ON(!bss);
  97         } else if (wdev->conn) {
  98                 cfg80211_sme_failed_assoc(wdev);
  99                 /*
 100                  * do not call connect_result() now because the
 101                  * sme will schedule work that does it later.
 102                  */
 103                 goto out;
 104         }
 105
 106         if (!wdev->conn && wdev->sme_state == CFG80211_SME_IDLE) {
 107                 /*
 108                  * This is for the userspace SME, the CONNECTING
 109                  * state will be changed to CONNECTED by
 110                  * __cfg80211_connect_result() below.
 111                  */
 112                 wdev->sme_state = CFG80211_SME_CONNECTING;
 113         }
 114
 115         /* this consumes one bss reference (unless bss is NULL) */
 116         __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, ie, len - ieoffs,
 117                                   status_code,
 118                                   status_code == WLAN_STATUS_SUCCESS,
 119                                   bss ? &bss->pub : NULL);
 120         /* drop hold now, and also reference acquired above */
 121         if (bss) {
 122                 cfg80211_unhold_bss(bss);
 123                 cfg80211_put_bss(&bss->pub);
 124         }
 125
 126  out:
 127         wdev_unlock(wdev);
 128 }
 129 EXPORT_SYMBOL(cfg80211_send_rx_assoc);
 130
 131 void __cfg80211_send_deauth(struct net_device *dev,
 132                                    const u8 *buf, size_t len)
 133 {
 134         struct wireless_dev *wdev = dev->ieee80211_ptr;
 135         struct wiphy *wiphy = wdev->wiphy;
 136         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 137         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
 138         const u8 *bssid = mgmt->bssid;
 139         int i;
 140         bool found = false;
 141
 142         ASSERT_WDEV_LOCK(wdev);
 143
 144         if (wdev->current_bss &&
 145             memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
 146                 cfg80211_unhold_bss(wdev->current_bss);
 147                 cfg80211_put_bss(&wdev->current_bss->pub);
 148                 wdev->current_bss = NULL;
 149                 found = true;
 150         } else for (i = 0; i < MAX_AUTH_BSSES; i++) {
 151                 if (wdev->auth_bsses[i] &&
 152                     memcmp(wdev->auth_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
 153                         cfg80211_unhold_bss(wdev->auth_bsses[i]);
 154                         cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
 155                         wdev->auth_bsses[i] = NULL;
 156                         found = true;
 157                         break;
 158                 }
 159                 if (wdev->authtry_bsses[i] &&
 160                     memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
 161                         cfg80211_unhold_bss(wdev->authtry_bsses[i]);
 162                         cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
 163                         wdev->authtry_bsses[i] = NULL;
 164                         found = true;
 165                         break;
 166                 }
 167         }
 168
 169         if (!found)
 170                 return;
 171
 172         nl80211_send_deauth(rdev, dev, buf, len, GFP_KERNEL);
 173
 174         if (wdev->sme_state == CFG80211_SME_CONNECTED) {
 175                 u16 reason_code;
 176                 bool from_ap;
 177
 178                 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
 179
 180                 from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
 181                 __cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
 182         } else if (wdev->sme_state == CFG80211_SME_CONNECTING) {
 183                 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
 184                                           WLAN_STATUS_UNSPECIFIED_FAILURE,
 185                                           false, NULL);
 186         }
 187 }
 188 EXPORT_SYMBOL(__cfg80211_send_deauth);
 189
 190 void cfg80211_send_deauth(struct net_device *dev, const u8 *buf, size_t len)
 191 {
 192         struct wireless_dev *wdev = dev->ieee80211_ptr;
 193
 194         wdev_lock(wdev);
 195         __cfg80211_send_deauth(dev, buf, len);
 196         wdev_unlock(wdev);
 197 }
 198 EXPORT_SYMBOL(cfg80211_send_deauth);
 199
 200 void __cfg80211_send_disassoc(struct net_device *dev,
 201                                      const u8 *buf, size_t len)
 202 {
 203         struct wireless_dev *wdev = dev->ieee80211_ptr;
 204         struct wiphy *wiphy = wdev->wiphy;
 205         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 206         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
 207         const u8 *bssid = mgmt->bssid;
 208         int i;
 209         u16 reason_code;
 210         bool from_ap;
 211         bool done = false;
 212
 213         ASSERT_WDEV_LOCK(wdev);
 214
 215         nl80211_send_disassoc(rdev, dev, buf, len, GFP_KERNEL);
 216
 217         if (wdev->sme_state != CFG80211_SME_CONNECTED)
 218                 return;
 219
 220         if (wdev->current_bss &&
 221             memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
 222                 for (i = 0; i < MAX_AUTH_BSSES; i++) {
 223                         if (wdev->authtry_bsses[i] || wdev->auth_bsses[i])
 224                                 continue;
 225                         wdev->auth_bsses[i] = wdev->current_bss;
 226                         wdev->current_bss = NULL;
 227                         done = true;
 228                         cfg80211_sme_disassoc(dev, i);
 229                         break;
 230                 }
 231                 WARN_ON(!done);
 232         } else
 233                 WARN_ON(1);
 234
 235
 236         reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
 237
 238         from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
 239         __cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
 240 }
 241 EXPORT_SYMBOL(__cfg80211_send_disassoc);
 242
 243 void cfg80211_send_disassoc(struct net_device *dev, const u8 *buf, size_t len)
 244 {
 245         struct wireless_dev *wdev = dev->ieee80211_ptr;
 246
 247         wdev_lock(wdev);
 248         __cfg80211_send_disassoc(dev, buf, len);
 249         wdev_unlock(wdev);
 250 }
 251 EXPORT_SYMBOL(cfg80211_send_disassoc);
 252
 253 static void __cfg80211_auth_remove(struct wireless_dev *wdev, const u8 *addr)
 254 {
 255         int i;
 256         bool done = false;
 257
 258         ASSERT_WDEV_LOCK(wdev);
 259
 260         for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
 261                 if (wdev->authtry_bsses[i] &&
 262                     memcmp(wdev->authtry_bsses[i]->pub.bssid,
 263                            addr, ETH_ALEN) == 0) {
 264                         cfg80211_unhold_bss(wdev->authtry_bsses[i]);
 265                         cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
 266                         wdev->authtry_bsses[i] = NULL;
 267                         done = true;
 268                         break;
 269                 }
 270         }
 271
 272         WARN_ON(!done);
 273 }
 274
 275 void __cfg80211_auth_canceled(struct net_device *dev, const u8 *addr)
 276 {
 277         __cfg80211_auth_remove(dev->ieee80211_ptr, addr);
 278 }
 279 EXPORT_SYMBOL(__cfg80211_auth_canceled);
 280
 281 void cfg80211_send_auth_timeout(struct net_device *dev, const u8 *addr)
 282 {
 283         struct wireless_dev *wdev = dev->ieee80211_ptr;
 284         struct wiphy *wiphy = wdev->wiphy;
 285         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 286
 287         wdev_lock(wdev);
 288
 289         nl80211_send_auth_timeout(rdev, dev, addr, GFP_KERNEL);
 290         if (wdev->sme_state == CFG80211_SME_CONNECTING)
 291                 __cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
 292                                           WLAN_STATUS_UNSPECIFIED_FAILURE,
 293                                           false, NULL);
 294
 295         __cfg80211_auth_remove(wdev, addr);
 296
 297         wdev_unlock(wdev);
 298 }
 299 EXPORT_SYMBOL(cfg80211_send_auth_timeout);
 300
 301 void cfg80211_send_assoc_timeout(struct net_device *dev, const u8 *addr)
 302 {
 303         struct wireless_dev *wdev = dev->ieee80211_ptr;
 304         struct wiphy *wiphy = wdev->wiphy;
 305         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 306         int i;
 307         bool done = false;
 308
 309         wdev_lock(wdev);
 310
 311         nl80211_send_assoc_timeout(rdev, dev, addr, GFP_KERNEL);
 312         if (wdev->sme_state == CFG80211_SME_CONNECTING)
 313                 __cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
 314                                           WLAN_STATUS_UNSPECIFIED_FAILURE,
 315                                           false, NULL);
 316
 317         for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
 318                 if (wdev->auth_bsses[i] &&
 319                     memcmp(wdev->auth_bsses[i]->pub.bssid,
 320                            addr, ETH_ALEN) == 0) {
 321                         cfg80211_unhold_bss(wdev->auth_bsses[i]);
 322                         cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
 323                         wdev->auth_bsses[i] = NULL;
 324                         done = true;
 325                         break;
 326                 }
 327         }
 328
 329         WARN_ON(!done);
 330
 331         wdev_unlock(wdev);
 332 }
 333 EXPORT_SYMBOL(cfg80211_send_assoc_timeout);
 334
 335 void cfg80211_michael_mic_failure(struct net_device *dev, const u8 *addr,
 336                                   enum nl80211_key_type key_type, int key_id,
 337                                   const u8 *tsc, gfp_t gfp)
 338 {
 339         struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
 340         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 341 #ifdef CONFIG_CFG80211_WEXT
 342         union iwreq_data wrqu;
 343         char *buf = kmalloc(128, gfp);
 344
 345         if (buf) {
 346                 sprintf(buf, "MLME-MICHAELMICFAILURE.indication("
 347                         "keyid=%d %scast addr=%pM)", key_id,
 348                         key_type == NL80211_KEYTYPE_GROUP ? "broad" : "uni",
 349                         addr);
 350                 memset(&wrqu, 0, sizeof(wrqu));
 351                 wrqu.data.length = strlen(buf);
 352                 wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf);
 353                 kfree(buf);
 354         }
 355 #endif
 356
 357         nl80211_michael_mic_failure(rdev, dev, addr, key_type, key_id, tsc, gfp);
 358 }
 359 EXPORT_SYMBOL(cfg80211_michael_mic_failure);
 360
 361 /* some MLME handling for userspace SME */
 362 int __cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
 363                          struct net_device *dev,
 364                          struct ieee80211_channel *chan,
 365                          enum nl80211_auth_type auth_type,
 366                          const u8 *bssid,
 367                          const u8 *ssid, int ssid_len,
 368                          const u8 *ie, int ie_len,
 369                          const u8 *key, int key_len, int key_idx)
 370 {
 371         struct wireless_dev *wdev = dev->ieee80211_ptr;
 372         struct cfg80211_auth_request req;
 373         struct cfg80211_internal_bss *bss;
 374         int i, err, slot = -1, nfree = 0;
 375
 376         ASSERT_WDEV_LOCK(wdev);
 377
 378         if (auth_type == NL80211_AUTHTYPE_SHARED_KEY)
 379                 if (!key || !key_len || key_idx < 0 || key_idx > 4)
 380                         return -EINVAL;
 381
 382         if (wdev->current_bss &&
 383             memcmp(bssid, wdev->current_bss->pub.bssid, ETH_ALEN) == 0)
 384                 return -EALREADY;
 385
 386         for (i = 0; i < MAX_AUTH_BSSES; i++) {
 387                 if (wdev->authtry_bsses[i] &&
 388                     memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid,
 389                                                 ETH_ALEN) == 0)
 390                         return -EALREADY;
 391                 if (wdev->auth_bsses[i] &&
 392                     memcmp(bssid, wdev->auth_bsses[i]->pub.bssid,
 393                                                 ETH_ALEN) == 0)
 394                         return -EALREADY;
 395         }
 396
 397         memset(&req, 0, sizeof(req));
 398
 399         req.ie = ie;
 400         req.ie_len = ie_len;
 401         req.auth_type = auth_type;
 402         req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
 403                                    WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
 404         req.key = key;
 405         req.key_len = key_len;
 406         req.key_idx = key_idx;
 407         if (!req.bss)
 408                 return -ENOENT;
 409
 410         bss = bss_from_pub(req.bss);
 411
 412         for (i = 0; i < MAX_AUTH_BSSES; i++) {
 413                 if (!wdev->auth_bsses[i] && !wdev->authtry_bsses[i]) {
 414                         slot = i;
 415                         nfree++;
 416                 }
 417         }
 418
 419         /* we need one free slot for disassoc and one for this auth */
 420         if (nfree < 2) {
 421                 err = -ENOSPC;
 422                 goto out;
 423         }
 424
 425         wdev->authtry_bsses[slot] = bss;
 426         cfg80211_hold_bss(bss);
 427
 428         err = rdev->ops->auth(&rdev->wiphy, dev, &req);
 429         if (err) {
 430                 wdev->authtry_bsses[slot] = NULL;
 431                 cfg80211_unhold_bss(bss);
 432         }
 433
 434  out:
 435         if (err)
 436                 cfg80211_put_bss(req.bss);
 437         return err;
 438 }
 439
 440 int cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
 441                        struct net_device *dev, struct ieee80211_channel *chan,
 442                        enum nl80211_auth_type auth_type, const u8 *bssid,
 443                        const u8 *ssid, int ssid_len,
 444                        const u8 *ie, int ie_len,
 445                        const u8 *key, int key_len, int key_idx)
 446 {
 447         int err;
 448
 449         wdev_lock(dev->ieee80211_ptr);
 450         err = __cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
 451                                    ssid, ssid_len, ie, ie_len,
 452                                    key, key_len, key_idx);
 453         wdev_unlock(dev->ieee80211_ptr);
 454
 455         return err;
 456 }
 457
 458 int __cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
 459                           struct net_device *dev,
 460                           struct ieee80211_channel *chan,
 461                           const u8 *bssid, const u8 *prev_bssid,
 462                           const u8 *ssid, int ssid_len,
 463                           const u8 *ie, int ie_len, bool use_mfp,
 464                           struct cfg80211_crypto_settings *crypt)
 465 {
 466         struct wireless_dev *wdev = dev->ieee80211_ptr;
 467         struct cfg80211_assoc_request req;
 468         struct cfg80211_internal_bss *bss;
 469         int i, err, slot = -1;
 470         bool was_connected = false;
 471
 472         ASSERT_WDEV_LOCK(wdev);
 473
 474         memset(&req, 0, sizeof(req));
 475
 476         if (wdev->current_bss && prev_bssid &&
 477             memcmp(wdev->current_bss->pub.bssid, prev_bssid, ETH_ALEN) == 0) {
 478                 /*
 479                  * Trying to reassociate: Allow this to proceed and let the old
 480                  * association to be dropped when the new one is completed.
 481                  */
 482                 if (wdev->sme_state == CFG80211_SME_CONNECTED) {
 483                         was_connected = true;
 484                         wdev->sme_state = CFG80211_SME_CONNECTING;
 485                 }
 486         } else if (wdev->current_bss)
 487                 return -EALREADY;
 488
 489         req.ie = ie;
 490         req.ie_len = ie_len;
 491         memcpy(&req.crypto, crypt, sizeof(req.crypto));
 492         req.use_mfp = use_mfp;
 493         req.prev_bssid = prev_bssid;
 494         req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
 495                                    WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
 496         if (!req.bss) {
 497                 if (was_connected)
 498                         wdev->sme_state = CFG80211_SME_CONNECTED;
 499                 return -ENOENT;
 500         }
 501
 502         bss = bss_from_pub(req.bss);
 503
 504         for (i = 0; i < MAX_AUTH_BSSES; i++) {
 505                 if (bss == wdev->auth_bsses[i]) {
 506                         slot = i;
 507                         break;
 508                 }
 509         }
 510
 511         if (slot < 0) {
 512                 err = -ENOTCONN;
 513                 goto out;
 514         }
 515
 516         err = rdev->ops->assoc(&rdev->wiphy, dev, &req);
 517  out:
 518         if (err && was_connected)
 519                 wdev->sme_state = CFG80211_SME_CONNECTED;
 520         /* still a reference in wdev->auth_bsses[slot] */
 521         cfg80211_put_bss(req.bss);
 522         return err;
 523 }
 524
 525 int cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
 526                         struct net_device *dev,
 527                         struct ieee80211_channel *chan,
 528                         const u8 *bssid, const u8 *prev_bssid,
 529                         const u8 *ssid, int ssid_len,
 530                         const u8 *ie, int ie_len, bool use_mfp,
 531                         struct cfg80211_crypto_settings *crypt)
 532 {
 533         struct wireless_dev *wdev = dev->ieee80211_ptr;
 534         int err;
 535
 536         wdev_lock(wdev);
 537         err = __cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
 538                                     ssid, ssid_len, ie, ie_len, use_mfp, crypt);
 539         wdev_unlock(wdev);
 540
 541         return err;
 542 }
 543
 544 int __cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
 545                            struct net_device *dev, const u8 *bssid,
 546                            const u8 *ie, int ie_len, u16 reason)
 547 {
 548         struct wireless_dev *wdev = dev->ieee80211_ptr;
 549         struct cfg80211_deauth_request req;
 550         int i;
 551
 552         ASSERT_WDEV_LOCK(wdev);
 553
 554         memset(&req, 0, sizeof(req));
 555         req.reason_code = reason;
 556         req.ie = ie;
 557         req.ie_len = ie_len;
 558         if (wdev->current_bss &&
 559             memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
 560                 req.bss = &wdev->current_bss->pub;
 561         } else for (i = 0; i < MAX_AUTH_BSSES; i++) {
 562                 if (wdev->auth_bsses[i] &&
 563                     memcmp(bssid, wdev->auth_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
 564                         req.bss = &wdev->auth_bsses[i]->pub;
 565                         break;
 566                 }
 567                 if (wdev->authtry_bsses[i] &&
 568                     memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
 569                         req.bss = &wdev->authtry_bsses[i]->pub;
 570                         break;
 571                 }
 572         }
 573
 574         if (!req.bss)
 575                 return -ENOTCONN;
 576
 577         return rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
 578 }
 579
 580 int cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
 581                          struct net_device *dev, const u8 *bssid,
 582                          const u8 *ie, int ie_len, u16 reason)
 583 {
 584         struct wireless_dev *wdev = dev->ieee80211_ptr;
 585         int err;
 586
 587         wdev_lock(wdev);
 588         err = __cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason);
 589         wdev_unlock(wdev);
 590
 591         return err;
 592 }
 593
 594 static int __cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
 595                                     struct net_device *dev, const u8 *bssid,
 596                                     const u8 *ie, int ie_len, u16 reason)
 597 {
 598         struct wireless_dev *wdev = dev->ieee80211_ptr;
 599         struct cfg80211_disassoc_request req;
 600
 601         ASSERT_WDEV_LOCK(wdev);
 602
 603         if (wdev->sme_state != CFG80211_SME_CONNECTED)
 604                 return -ENOTCONN;
 605
 606         if (WARN_ON(!wdev->current_bss))
 607                 return -ENOTCONN;
 608
 609         memset(&req, 0, sizeof(req));
 610         req.reason_code = reason;
 611         req.ie = ie;
 612         req.ie_len = ie_len;
 613         if (memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0)
 614                 req.bss = &wdev->current_bss->pub;
 615         else
 616                 return -ENOTCONN;
 617
 618         return rdev->ops->disassoc(&rdev->wiphy, dev, &req, wdev);
 619 }
 620
 621 int cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
 622                            struct net_device *dev, const u8 *bssid,
 623                            const u8 *ie, int ie_len, u16 reason)
 624 {
 625         struct wireless_dev *wdev = dev->ieee80211_ptr;
 626         int err;
 627
 628         wdev_lock(wdev);
 629         err = __cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason);
 630         wdev_unlock(wdev);
 631
 632         return err;
 633 }
 634
 635 void cfg80211_mlme_down(struct cfg80211_registered_device *rdev,
 636                         struct net_device *dev)
 637 {
 638         struct wireless_dev *wdev = dev->ieee80211_ptr;
 639         struct cfg80211_deauth_request req;
 640         int i;
 641
 642         ASSERT_WDEV_LOCK(wdev);
 643
 644         if (!rdev->ops->deauth)
 645                 return;
 646
 647         memset(&req, 0, sizeof(req));
 648         req.reason_code = WLAN_REASON_DEAUTH_LEAVING;
 649         req.ie = NULL;
 650         req.ie_len = 0;
 651
 652         if (wdev->current_bss) {
 653                 req.bss = &wdev->current_bss->pub;
 654                 rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
 655                 if (wdev->current_bss) {
 656                         cfg80211_unhold_bss(wdev->current_bss);
 657                         cfg80211_put_bss(&wdev->current_bss->pub);
 658                         wdev->current_bss = NULL;
 659                 }
 660         }
 661
 662         for (i = 0; i < MAX_AUTH_BSSES; i++) {
 663                 if (wdev->auth_bsses[i]) {
 664                         req.bss = &wdev->auth_bsses[i]->pub;
 665                         rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
 666                         if (wdev->auth_bsses[i]) {
 667                                 cfg80211_unhold_bss(wdev->auth_bsses[i]);
 668                                 cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
 669                                 wdev->auth_bsses[i] = NULL;
 670                         }
 671                 }
 672                 if (wdev->authtry_bsses[i]) {
 673                         req.bss = &wdev->authtry_bsses[i]->pub;
 674                         rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
 675                         if (wdev->authtry_bsses[i]) {
 676                                 cfg80211_unhold_bss(wdev->authtry_bsses[i]);
 677                                 cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
 678                                 wdev->authtry_bsses[i] = NULL;
 679                         }
 680                 }
 681         }
 682 }