2 * BSS client mode implementation
3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
14 #include <linux/delay.h>
15 #include <linux/if_ether.h>
16 #include <linux/skbuff.h>
17 #include <linux/netdevice.h>
18 #include <linux/if_arp.h>
19 #include <linux/wireless.h>
20 #include <linux/random.h>
21 #include <linux/etherdevice.h>
22 #include <linux/rtnetlink.h>
23 #include <net/iw_handler.h>
24 #include <net/mac80211.h>
26 #include "ieee80211_i.h"
31 #define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
32 #define IEEE80211_AUTH_TIMEOUT (HZ / 5)
33 #define IEEE80211_AUTH_MAX_TRIES 3
34 #define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
35 #define IEEE80211_ASSOC_MAX_TRIES 3
36 #define IEEE80211_MONITORING_INTERVAL (2 * HZ)
37 #define IEEE80211_MESH_HOUSEKEEPING_INTERVAL (60 * HZ)
38 #define IEEE80211_PROBE_INTERVAL (60 * HZ)
39 #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
40 #define IEEE80211_SCAN_INTERVAL (2 * HZ)
41 #define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
42 #define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
44 #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
45 #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
46 #define IEEE80211_MESH_PEER_INACTIVITY_LIMIT (1800 * HZ)
48 #define IEEE80211_IBSS_MAX_STA_ENTRIES 128
52 static int ecw2cw(int ecw)
54 return (1 << ecw) - 1;
57 static u8 *ieee80211_bss_get_ie(struct ieee80211_sta_bss *bss, u8 ie)
64 end = pos + bss->ies_len;
66 while (pos + 1 < end) {
67 if (pos + 2 + pos[1] > end)
77 static int ieee80211_compatible_rates(struct ieee80211_sta_bss *bss,
78 struct ieee80211_supported_band *sband,
84 for (i = 0; i < bss->supp_rates_len; i++) {
85 int rate = (bss->supp_rates[i] & 0x7F) * 5;
87 for (j = 0; j < sband->n_bitrates; j++)
88 if (sband->bitrates[j].bitrate == rate) {
98 /* frame sending functions */
99 void ieee80211_sta_tx(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
102 skb->dev = sdata->local->mdev;
103 skb_set_mac_header(skb, 0);
104 skb_set_network_header(skb, 0);
105 skb_set_transport_header(skb, 0);
107 skb->iif = sdata->dev->ifindex;
108 skb->do_not_encrypt = !encrypt;
113 static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
114 struct ieee80211_if_sta *ifsta,
115 int transaction, u8 *extra, size_t extra_len,
118 struct ieee80211_local *local = sdata->local;
120 struct ieee80211_mgmt *mgmt;
122 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
123 sizeof(*mgmt) + 6 + extra_len);
125 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
126 "frame\n", sdata->dev->name);
129 skb_reserve(skb, local->hw.extra_tx_headroom);
131 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
132 memset(mgmt, 0, 24 + 6);
133 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
134 IEEE80211_STYPE_AUTH);
136 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
137 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
138 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
139 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
140 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
141 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
142 ifsta->auth_transaction = transaction + 1;
143 mgmt->u.auth.status_code = cpu_to_le16(0);
145 memcpy(skb_put(skb, extra_len), extra, extra_len);
147 ieee80211_sta_tx(sdata, skb, encrypt);
150 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
151 u8 *ssid, size_t ssid_len)
153 struct ieee80211_local *local = sdata->local;
154 struct ieee80211_supported_band *sband;
156 struct ieee80211_mgmt *mgmt;
157 u8 *pos, *supp_rates, *esupp_rates = NULL;
160 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
162 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
163 "request\n", sdata->dev->name);
166 skb_reserve(skb, local->hw.extra_tx_headroom);
168 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
170 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
171 IEEE80211_STYPE_PROBE_REQ);
172 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
174 memcpy(mgmt->da, dst, ETH_ALEN);
175 memcpy(mgmt->bssid, dst, ETH_ALEN);
177 memset(mgmt->da, 0xff, ETH_ALEN);
178 memset(mgmt->bssid, 0xff, ETH_ALEN);
180 pos = skb_put(skb, 2 + ssid_len);
181 *pos++ = WLAN_EID_SSID;
183 memcpy(pos, ssid, ssid_len);
185 supp_rates = skb_put(skb, 2);
186 supp_rates[0] = WLAN_EID_SUPP_RATES;
188 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
190 for (i = 0; i < sband->n_bitrates; i++) {
191 struct ieee80211_rate *rate = &sband->bitrates[i];
193 pos = skb_put(skb, 1);
195 } else if (supp_rates[1] == 8) {
196 esupp_rates = skb_put(skb, 3);
197 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
199 pos = &esupp_rates[2];
201 pos = skb_put(skb, 1);
204 *pos = rate->bitrate / 5;
207 ieee80211_sta_tx(sdata, skb, 0);
210 static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
211 struct ieee80211_if_sta *ifsta)
213 struct ieee80211_local *local = sdata->local;
215 struct ieee80211_mgmt *mgmt;
216 u8 *pos, *ies, *ht_add_ie;
217 int i, len, count, rates_len, supp_rates_len;
219 struct ieee80211_sta_bss *bss;
221 struct ieee80211_supported_band *sband;
224 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
225 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
228 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
229 "frame\n", sdata->dev->name);
232 skb_reserve(skb, local->hw.extra_tx_headroom);
234 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
236 capab = ifsta->capab;
238 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
239 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
240 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
241 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
242 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
245 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
246 local->hw.conf.channel->center_freq,
247 ifsta->ssid, ifsta->ssid_len);
249 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
250 capab |= WLAN_CAPABILITY_PRIVACY;
254 /* get all rates supported by the device and the AP as
255 * some APs don't like getting a superset of their rates
256 * in the association request (e.g. D-Link DAP 1353 in
258 rates_len = ieee80211_compatible_rates(bss, sband, &rates);
260 if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
261 (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
262 capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
264 ieee80211_rx_bss_put(local, bss);
267 rates_len = sband->n_bitrates;
270 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
272 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
273 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
274 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
276 if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
278 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
279 IEEE80211_STYPE_REASSOC_REQ);
280 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
281 mgmt->u.reassoc_req.listen_interval =
282 cpu_to_le16(local->hw.conf.listen_interval);
283 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
287 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
288 IEEE80211_STYPE_ASSOC_REQ);
289 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
290 mgmt->u.reassoc_req.listen_interval =
291 cpu_to_le16(local->hw.conf.listen_interval);
295 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
296 *pos++ = WLAN_EID_SSID;
297 *pos++ = ifsta->ssid_len;
298 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
300 /* add all rates which were marked to be used above */
301 supp_rates_len = rates_len;
302 if (supp_rates_len > 8)
305 len = sband->n_bitrates;
306 pos = skb_put(skb, supp_rates_len + 2);
307 *pos++ = WLAN_EID_SUPP_RATES;
308 *pos++ = supp_rates_len;
311 for (i = 0; i < sband->n_bitrates; i++) {
312 if (BIT(i) & rates) {
313 int rate = sband->bitrates[i].bitrate;
314 *pos++ = (u8) (rate / 5);
320 if (rates_len > count) {
321 pos = skb_put(skb, rates_len - count + 2);
322 *pos++ = WLAN_EID_EXT_SUPP_RATES;
323 *pos++ = rates_len - count;
325 for (i++; i < sband->n_bitrates; i++) {
326 if (BIT(i) & rates) {
327 int rate = sband->bitrates[i].bitrate;
328 *pos++ = (u8) (rate / 5);
333 if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
334 /* 1. power capabilities */
335 pos = skb_put(skb, 4);
336 *pos++ = WLAN_EID_PWR_CAPABILITY;
338 *pos++ = 0; /* min tx power */
339 *pos++ = local->hw.conf.channel->max_power; /* max tx power */
341 /* 2. supported channels */
342 /* TODO: get this in reg domain format */
343 pos = skb_put(skb, 2 * sband->n_channels + 2);
344 *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
345 *pos++ = 2 * sband->n_channels;
346 for (i = 0; i < sband->n_channels; i++) {
347 *pos++ = ieee80211_frequency_to_channel(
348 sband->channels[i].center_freq);
349 *pos++ = 1; /* one channel in the subband*/
353 if (ifsta->extra_ie) {
354 pos = skb_put(skb, ifsta->extra_ie_len);
355 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
358 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
359 pos = skb_put(skb, 9);
360 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
361 *pos++ = 7; /* len */
362 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
365 *pos++ = 2; /* WME */
366 *pos++ = 0; /* WME info */
367 *pos++ = 1; /* WME ver */
371 /* wmm support is a must to HT */
372 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
373 sband->ht_info.ht_supported &&
374 (ht_add_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_EXTRA_INFO))) {
375 struct ieee80211_ht_addt_info *ht_add_info =
376 (struct ieee80211_ht_addt_info *)ht_add_ie;
377 u16 cap = sband->ht_info.cap;
379 u32 flags = local->hw.conf.channel->flags;
381 switch (ht_add_info->ht_param & IEEE80211_HT_IE_CHA_SEC_OFFSET) {
382 case IEEE80211_HT_IE_CHA_SEC_ABOVE:
383 if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
384 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
385 cap &= ~IEEE80211_HT_CAP_SGI_40;
388 case IEEE80211_HT_IE_CHA_SEC_BELOW:
389 if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
390 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
391 cap &= ~IEEE80211_HT_CAP_SGI_40;
396 tmp = cpu_to_le16(cap);
397 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
398 *pos++ = WLAN_EID_HT_CAPABILITY;
399 *pos++ = sizeof(struct ieee80211_ht_cap);
400 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
401 memcpy(pos, &tmp, sizeof(u16));
403 /* TODO: needs a define here for << 2 */
404 *pos++ = sband->ht_info.ampdu_factor |
405 (sband->ht_info.ampdu_density << 2);
406 memcpy(pos, sband->ht_info.supp_mcs_set, 16);
409 kfree(ifsta->assocreq_ies);
410 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
411 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
412 if (ifsta->assocreq_ies)
413 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
415 ieee80211_sta_tx(sdata, skb, 0);
419 static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
420 u16 stype, u16 reason)
422 struct ieee80211_local *local = sdata->local;
423 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
425 struct ieee80211_mgmt *mgmt;
427 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
429 printk(KERN_DEBUG "%s: failed to allocate buffer for "
430 "deauth/disassoc frame\n", sdata->dev->name);
433 skb_reserve(skb, local->hw.extra_tx_headroom);
435 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
437 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
438 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
439 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
440 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
442 /* u.deauth.reason_code == u.disassoc.reason_code */
443 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
445 ieee80211_sta_tx(sdata, skb, 0);
448 static void ieee80211_send_addba_resp(struct ieee80211_sub_if_data *sdata, u8 *da, u16 tid,
449 u8 dialog_token, u16 status, u16 policy,
450 u16 buf_size, u16 timeout)
452 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
453 struct ieee80211_local *local = sdata->local;
455 struct ieee80211_mgmt *mgmt;
458 skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
461 printk(KERN_DEBUG "%s: failed to allocate buffer "
462 "for addba resp frame\n", sdata->dev->name);
466 skb_reserve(skb, local->hw.extra_tx_headroom);
467 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
469 memcpy(mgmt->da, da, ETH_ALEN);
470 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
471 if (sdata->vif.type == IEEE80211_IF_TYPE_AP)
472 memcpy(mgmt->bssid, sdata->dev->dev_addr, ETH_ALEN);
474 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
475 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
476 IEEE80211_STYPE_ACTION);
478 skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_resp));
479 mgmt->u.action.category = WLAN_CATEGORY_BACK;
480 mgmt->u.action.u.addba_resp.action_code = WLAN_ACTION_ADDBA_RESP;
481 mgmt->u.action.u.addba_resp.dialog_token = dialog_token;
483 capab = (u16)(policy << 1); /* bit 1 aggregation policy */
484 capab |= (u16)(tid << 2); /* bit 5:2 TID number */
485 capab |= (u16)(buf_size << 6); /* bit 15:6 max size of aggregation */
487 mgmt->u.action.u.addba_resp.capab = cpu_to_le16(capab);
488 mgmt->u.action.u.addba_resp.timeout = cpu_to_le16(timeout);
489 mgmt->u.action.u.addba_resp.status = cpu_to_le16(status);
491 ieee80211_sta_tx(sdata, skb, 0);
494 static void ieee80211_send_refuse_measurement_request(struct ieee80211_sub_if_data *sdata,
495 struct ieee80211_msrment_ie *request_ie,
496 const u8 *da, const u8 *bssid,
499 struct ieee80211_local *local = sdata->local;
501 struct ieee80211_mgmt *msr_report;
503 skb = dev_alloc_skb(sizeof(*msr_report) + local->hw.extra_tx_headroom +
504 sizeof(struct ieee80211_msrment_ie));
507 printk(KERN_ERR "%s: failed to allocate buffer for "
508 "measurement report frame\n", sdata->dev->name);
512 skb_reserve(skb, local->hw.extra_tx_headroom);
513 msr_report = (struct ieee80211_mgmt *)skb_put(skb, 24);
514 memset(msr_report, 0, 24);
515 memcpy(msr_report->da, da, ETH_ALEN);
516 memcpy(msr_report->sa, sdata->dev->dev_addr, ETH_ALEN);
517 memcpy(msr_report->bssid, bssid, ETH_ALEN);
518 msr_report->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
519 IEEE80211_STYPE_ACTION);
521 skb_put(skb, 1 + sizeof(msr_report->u.action.u.measurement));
522 msr_report->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
523 msr_report->u.action.u.measurement.action_code =
524 WLAN_ACTION_SPCT_MSR_RPRT;
525 msr_report->u.action.u.measurement.dialog_token = dialog_token;
527 msr_report->u.action.u.measurement.element_id = WLAN_EID_MEASURE_REPORT;
528 msr_report->u.action.u.measurement.length =
529 sizeof(struct ieee80211_msrment_ie);
531 memset(&msr_report->u.action.u.measurement.msr_elem, 0,
532 sizeof(struct ieee80211_msrment_ie));
533 msr_report->u.action.u.measurement.msr_elem.token = request_ie->token;
534 msr_report->u.action.u.measurement.msr_elem.mode |=
535 IEEE80211_SPCT_MSR_RPRT_MODE_REFUSED;
536 msr_report->u.action.u.measurement.msr_elem.type = request_ie->type;
538 ieee80211_sta_tx(sdata, skb, 0);
542 static void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata)
544 struct ieee80211_local *local = sdata->local;
545 struct ieee80211_tx_queue_params qparam;
548 if (!local->ops->conf_tx)
551 memset(&qparam, 0, sizeof(qparam));
555 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
556 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE))
561 qparam.cw_max = 1023;
564 for (i = 0; i < local_to_hw(local)->queues; i++)
565 local->ops->conf_tx(local_to_hw(local), i, &qparam);
568 static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
569 struct ieee80211_sta_bss *bss)
571 struct ieee80211_local *local = sdata->local;
572 int i, have_higher_than_11mbit = 0;
574 /* cf. IEEE 802.11 9.2.12 */
575 for (i = 0; i < bss->supp_rates_len; i++)
576 if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
577 have_higher_than_11mbit = 1;
579 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
580 have_higher_than_11mbit)
581 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
583 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
585 ieee80211_set_wmm_default(sdata);
588 static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
589 struct ieee80211_if_sta *ifsta,
590 u8 *wmm_param, size_t wmm_param_len)
592 struct ieee80211_tx_queue_params params;
597 if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
603 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
605 count = wmm_param[6] & 0x0f;
606 if (count == ifsta->wmm_last_param_set)
608 ifsta->wmm_last_param_set = count;
611 left = wmm_param_len - 8;
613 memset(¶ms, 0, sizeof(params));
615 if (!local->ops->conf_tx)
619 for (; left >= 4; left -= 4, pos += 4) {
620 int aci = (pos[0] >> 5) & 0x03;
621 int acm = (pos[0] >> 4) & 0x01;
628 local->wmm_acm |= BIT(0) | BIT(3);
633 local->wmm_acm |= BIT(4) | BIT(5);
638 local->wmm_acm |= BIT(6) | BIT(7);
644 local->wmm_acm |= BIT(1) | BIT(2);
648 params.aifs = pos[0] & 0x0f;
649 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
650 params.cw_min = ecw2cw(pos[1] & 0x0f);
651 params.txop = get_unaligned_le16(pos + 2);
652 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
653 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
654 "cWmin=%d cWmax=%d txop=%d\n",
655 local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
656 params.cw_max, params.txop);
658 /* TODO: handle ACM (block TX, fallback to next lowest allowed
660 if (local->ops->conf_tx(local_to_hw(local), queue, ¶ms)) {
661 printk(KERN_DEBUG "%s: failed to set TX queue "
662 "parameters for queue %d\n", local->mdev->name, queue);
667 static u32 ieee80211_handle_protect_preamb(struct ieee80211_sub_if_data *sdata,
669 bool use_short_preamble)
671 struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
672 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
673 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
674 DECLARE_MAC_BUF(mac);
678 if (use_protection != bss_conf->use_cts_prot) {
679 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
680 if (net_ratelimit()) {
681 printk(KERN_DEBUG "%s: CTS protection %s (BSSID="
684 use_protection ? "enabled" : "disabled",
685 print_mac(mac, ifsta->bssid));
688 bss_conf->use_cts_prot = use_protection;
689 changed |= BSS_CHANGED_ERP_CTS_PROT;
692 if (use_short_preamble != bss_conf->use_short_preamble) {
693 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
694 if (net_ratelimit()) {
695 printk(KERN_DEBUG "%s: switched to %s barker preamble"
698 use_short_preamble ? "short" : "long",
699 print_mac(mac, ifsta->bssid));
702 bss_conf->use_short_preamble = use_short_preamble;
703 changed |= BSS_CHANGED_ERP_PREAMBLE;
709 static u32 ieee80211_handle_erp_ie(struct ieee80211_sub_if_data *sdata,
712 bool use_protection = (erp_value & WLAN_ERP_USE_PROTECTION) != 0;
713 bool use_short_preamble = (erp_value & WLAN_ERP_BARKER_PREAMBLE) == 0;
715 return ieee80211_handle_protect_preamb(sdata,
716 use_protection, use_short_preamble);
719 static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
720 struct ieee80211_sta_bss *bss)
724 if (bss->has_erp_value)
725 changed |= ieee80211_handle_erp_ie(sdata, bss->erp_value);
727 u16 capab = bss->capability;
728 changed |= ieee80211_handle_protect_preamb(sdata, false,
729 (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
735 static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
736 struct ieee80211_if_sta *ifsta)
738 union iwreq_data wrqu;
739 memset(&wrqu, 0, sizeof(wrqu));
740 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
741 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
742 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
743 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
746 static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
747 struct ieee80211_if_sta *ifsta)
749 union iwreq_data wrqu;
751 if (ifsta->assocreq_ies) {
752 memset(&wrqu, 0, sizeof(wrqu));
753 wrqu.data.length = ifsta->assocreq_ies_len;
754 wireless_send_event(sdata->dev, IWEVASSOCREQIE, &wrqu,
755 ifsta->assocreq_ies);
757 if (ifsta->assocresp_ies) {
758 memset(&wrqu, 0, sizeof(wrqu));
759 wrqu.data.length = ifsta->assocresp_ies_len;
760 wireless_send_event(sdata->dev, IWEVASSOCRESPIE, &wrqu,
761 ifsta->assocresp_ies);
766 static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
767 struct ieee80211_if_sta *ifsta)
769 struct ieee80211_local *local = sdata->local;
770 struct ieee80211_conf *conf = &local_to_hw(local)->conf;
771 u32 changed = BSS_CHANGED_ASSOC;
773 struct ieee80211_sta_bss *bss;
775 ifsta->flags |= IEEE80211_STA_ASSOCIATED;
777 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
780 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
781 conf->channel->center_freq,
782 ifsta->ssid, ifsta->ssid_len);
784 /* set timing information */
785 sdata->bss_conf.beacon_int = bss->beacon_int;
786 sdata->bss_conf.timestamp = bss->timestamp;
787 sdata->bss_conf.dtim_period = bss->dtim_period;
789 changed |= ieee80211_handle_bss_capability(sdata, bss);
791 ieee80211_rx_bss_put(local, bss);
794 if (conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
795 changed |= BSS_CHANGED_HT;
796 sdata->bss_conf.assoc_ht = 1;
797 sdata->bss_conf.ht_conf = &conf->ht_conf;
798 sdata->bss_conf.ht_bss_conf = &conf->ht_bss_conf;
801 ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
802 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
803 ieee80211_sta_send_associnfo(sdata, ifsta);
805 ifsta->last_probe = jiffies;
806 ieee80211_led_assoc(local, 1);
808 sdata->bss_conf.assoc = 1;
809 ieee80211_bss_info_change_notify(sdata, changed);
811 netif_tx_start_all_queues(sdata->dev);
812 netif_carrier_on(sdata->dev);
814 ieee80211_sta_send_apinfo(sdata, ifsta);
817 static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
818 struct ieee80211_if_sta *ifsta)
820 DECLARE_MAC_BUF(mac);
822 ifsta->direct_probe_tries++;
823 if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
824 printk(KERN_DEBUG "%s: direct probe to AP %s timed out\n",
825 sdata->dev->name, print_mac(mac, ifsta->bssid));
826 ifsta->state = IEEE80211_STA_MLME_DISABLED;
830 printk(KERN_DEBUG "%s: direct probe to AP %s try %d\n",
831 sdata->dev->name, print_mac(mac, ifsta->bssid),
832 ifsta->direct_probe_tries);
834 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
836 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
838 /* Direct probe is sent to broadcast address as some APs
839 * will not answer to direct packet in unassociated state.
841 ieee80211_send_probe_req(sdata, NULL,
842 ifsta->ssid, ifsta->ssid_len);
844 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
848 static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
849 struct ieee80211_if_sta *ifsta)
851 DECLARE_MAC_BUF(mac);
854 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
855 printk(KERN_DEBUG "%s: authentication with AP %s"
857 sdata->dev->name, print_mac(mac, ifsta->bssid));
858 ifsta->state = IEEE80211_STA_MLME_DISABLED;
862 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
863 printk(KERN_DEBUG "%s: authenticate with AP %s\n",
864 sdata->dev->name, print_mac(mac, ifsta->bssid));
866 ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
868 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
871 static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
872 struct ieee80211_if_sta *ifsta, bool deauth,
873 bool self_disconnected, u16 reason)
875 struct ieee80211_local *local = sdata->local;
876 struct sta_info *sta;
877 u32 changed = BSS_CHANGED_ASSOC;
881 sta = sta_info_get(local, ifsta->bssid);
888 ifsta->direct_probe_tries = 0;
889 ifsta->auth_tries = 0;
891 ifsta->assoc_scan_tries = 0;
892 ifsta->assoc_tries = 0;
894 netif_tx_stop_all_queues(sdata->dev);
895 netif_carrier_off(sdata->dev);
897 ieee80211_sta_tear_down_BA_sessions(sdata, sta->addr);
899 if (self_disconnected) {
901 ieee80211_send_deauth_disassoc(sdata,
902 IEEE80211_STYPE_DEAUTH, reason);
904 ieee80211_send_deauth_disassoc(sdata,
905 IEEE80211_STYPE_DISASSOC, reason);
908 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
909 changed |= ieee80211_reset_erp_info(sdata);
911 if (sdata->bss_conf.assoc_ht)
912 changed |= BSS_CHANGED_HT;
914 sdata->bss_conf.assoc_ht = 0;
915 sdata->bss_conf.ht_conf = NULL;
916 sdata->bss_conf.ht_bss_conf = NULL;
918 ieee80211_led_assoc(local, 0);
919 sdata->bss_conf.assoc = 0;
921 ieee80211_sta_send_apinfo(sdata, ifsta);
923 if (self_disconnected)
924 ifsta->state = IEEE80211_STA_MLME_DISABLED;
926 sta_info_unlink(&sta);
930 sta_info_destroy(sta);
933 static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
935 if (!sdata || !sdata->default_key ||
936 sdata->default_key->conf.alg != ALG_WEP)
941 static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
942 struct ieee80211_if_sta *ifsta)
944 struct ieee80211_local *local = sdata->local;
945 struct ieee80211_sta_bss *bss;
950 if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
953 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
954 local->hw.conf.channel->center_freq,
955 ifsta->ssid, ifsta->ssid_len);
959 bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
960 wep_privacy = !!ieee80211_sta_wep_configured(sdata);
961 privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
963 ieee80211_rx_bss_put(local, bss);
965 if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
971 static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
972 struct ieee80211_if_sta *ifsta)
974 DECLARE_MAC_BUF(mac);
976 ifsta->assoc_tries++;
977 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
978 printk(KERN_DEBUG "%s: association with AP %s"
980 sdata->dev->name, print_mac(mac, ifsta->bssid));
981 ifsta->state = IEEE80211_STA_MLME_DISABLED;
985 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
986 printk(KERN_DEBUG "%s: associate with AP %s\n",
987 sdata->dev->name, print_mac(mac, ifsta->bssid));
988 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
989 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
990 "mixed-cell disabled - abort association\n", sdata->dev->name);
991 ifsta->state = IEEE80211_STA_MLME_DISABLED;
995 ieee80211_send_assoc(sdata, ifsta);
997 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
1001 static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
1002 struct ieee80211_if_sta *ifsta)
1004 struct ieee80211_local *local = sdata->local;
1005 struct sta_info *sta;
1007 DECLARE_MAC_BUF(mac);
1009 /* TODO: start monitoring current AP signal quality and number of
1010 * missed beacons. Scan other channels every now and then and search
1011 * for better APs. */
1012 /* TODO: remove expired BSSes */
1014 ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
1018 sta = sta_info_get(local, ifsta->bssid);
1020 printk(KERN_DEBUG "%s: No STA entry for own AP %s\n",
1021 sdata->dev->name, print_mac(mac, ifsta->bssid));
1025 if (time_after(jiffies,
1026 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
1027 if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
1028 printk(KERN_DEBUG "%s: No ProbeResp from "
1029 "current AP %s - assume out of "
1031 sdata->dev->name, print_mac(mac, ifsta->bssid));
1034 ieee80211_send_probe_req(sdata, ifsta->bssid,
1036 local->scan_ssid_len);
1037 ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
1039 ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
1040 if (time_after(jiffies, ifsta->last_probe +
1041 IEEE80211_PROBE_INTERVAL)) {
1042 ifsta->last_probe = jiffies;
1043 ieee80211_send_probe_req(sdata, ifsta->bssid,
1053 ieee80211_set_disassoc(sdata, ifsta, true, true,
1054 WLAN_REASON_PREV_AUTH_NOT_VALID);
1056 mod_timer(&ifsta->timer, jiffies +
1057 IEEE80211_MONITORING_INTERVAL);
1061 static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
1062 struct ieee80211_if_sta *ifsta)
1064 printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
1065 ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
1066 ieee80211_associate(sdata, ifsta);
1070 static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
1071 struct ieee80211_if_sta *ifsta,
1072 struct ieee80211_mgmt *mgmt,
1076 struct ieee802_11_elems elems;
1078 pos = mgmt->u.auth.variable;
1079 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1080 if (!elems.challenge)
1082 ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
1083 elems.challenge_len + 2, 1);
1087 * After accepting the AddBA Request we activated a timer,
1088 * resetting it after each frame that arrives from the originator.
1089 * if this timer expires ieee80211_sta_stop_rx_ba_session will be executed.
1091 static void sta_rx_agg_session_timer_expired(unsigned long data)
1093 /* not an elegant detour, but there is no choice as the timer passes
1094 * only one argument, and various sta_info are needed here, so init
1095 * flow in sta_info_create gives the TID as data, while the timer_to_id
1096 * array gives the sta through container_of */
1097 u8 *ptid = (u8 *)data;
1098 u8 *timer_to_id = ptid - *ptid;
1099 struct sta_info *sta = container_of(timer_to_id, struct sta_info,
1102 #ifdef CONFIG_MAC80211_HT_DEBUG
1103 printk(KERN_DEBUG "rx session timer expired on tid %d\n", (u16)*ptid);
1105 ieee80211_sta_stop_rx_ba_session(sta->sdata, sta->addr,
1106 (u16)*ptid, WLAN_BACK_TIMER,
1107 WLAN_REASON_QSTA_TIMEOUT);
1110 static void ieee80211_sta_process_addba_request(struct ieee80211_local *local,
1111 struct ieee80211_mgmt *mgmt,
1114 struct ieee80211_hw *hw = &local->hw;
1115 struct ieee80211_conf *conf = &hw->conf;
1116 struct sta_info *sta;
1117 struct tid_ampdu_rx *tid_agg_rx;
1118 u16 capab, tid, timeout, ba_policy, buf_size, start_seq_num, status;
1120 int ret = -EOPNOTSUPP;
1121 DECLARE_MAC_BUF(mac);
1125 sta = sta_info_get(local, mgmt->sa);
1131 /* extract session parameters from addba request frame */
1132 dialog_token = mgmt->u.action.u.addba_req.dialog_token;
1133 timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout);
1135 le16_to_cpu(mgmt->u.action.u.addba_req.start_seq_num) >> 4;
1137 capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab);
1138 ba_policy = (capab & IEEE80211_ADDBA_PARAM_POLICY_MASK) >> 1;
1139 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
1140 buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6;
1142 status = WLAN_STATUS_REQUEST_DECLINED;
1144 /* sanity check for incoming parameters:
1145 * check if configuration can support the BA policy
1146 * and if buffer size does not exceeds max value */
1147 if (((ba_policy != 1)
1148 && (!(conf->ht_conf.cap & IEEE80211_HT_CAP_DELAY_BA)))
1149 || (buf_size > IEEE80211_MAX_AMPDU_BUF)) {
1150 status = WLAN_STATUS_INVALID_QOS_PARAM;
1151 #ifdef CONFIG_MAC80211_HT_DEBUG
1152 if (net_ratelimit())
1153 printk(KERN_DEBUG "AddBA Req with bad params from "
1154 "%s on tid %u. policy %d, buffer size %d\n",
1155 print_mac(mac, mgmt->sa), tid, ba_policy,
1157 #endif /* CONFIG_MAC80211_HT_DEBUG */
1160 /* determine default buffer size */
1161 if (buf_size == 0) {
1162 struct ieee80211_supported_band *sband;
1164 sband = local->hw.wiphy->bands[conf->channel->band];
1165 buf_size = IEEE80211_MIN_AMPDU_BUF;
1166 buf_size = buf_size << sband->ht_info.ampdu_factor;
1170 /* examine state machine */
1171 spin_lock_bh(&sta->lock);
1173 if (sta->ampdu_mlme.tid_state_rx[tid] != HT_AGG_STATE_IDLE) {
1174 #ifdef CONFIG_MAC80211_HT_DEBUG
1175 if (net_ratelimit())
1176 printk(KERN_DEBUG "unexpected AddBA Req from "
1178 print_mac(mac, mgmt->sa), tid);
1179 #endif /* CONFIG_MAC80211_HT_DEBUG */
1183 /* prepare A-MPDU MLME for Rx aggregation */
1184 sta->ampdu_mlme.tid_rx[tid] =
1185 kmalloc(sizeof(struct tid_ampdu_rx), GFP_ATOMIC);
1186 if (!sta->ampdu_mlme.tid_rx[tid]) {
1187 #ifdef CONFIG_MAC80211_HT_DEBUG
1188 if (net_ratelimit())
1189 printk(KERN_ERR "allocate rx mlme to tid %d failed\n",
1195 sta->ampdu_mlme.tid_rx[tid]->session_timer.function =
1196 sta_rx_agg_session_timer_expired;
1197 sta->ampdu_mlme.tid_rx[tid]->session_timer.data =
1198 (unsigned long)&sta->timer_to_tid[tid];
1199 init_timer(&sta->ampdu_mlme.tid_rx[tid]->session_timer);
1201 tid_agg_rx = sta->ampdu_mlme.tid_rx[tid];
1203 /* prepare reordering buffer */
1204 tid_agg_rx->reorder_buf =
1205 kmalloc(buf_size * sizeof(struct sk_buff *), GFP_ATOMIC);
1206 if (!tid_agg_rx->reorder_buf) {
1207 #ifdef CONFIG_MAC80211_HT_DEBUG
1208 if (net_ratelimit())
1209 printk(KERN_ERR "can not allocate reordering buffer "
1210 "to tid %d\n", tid);
1212 kfree(sta->ampdu_mlme.tid_rx[tid]);
1215 memset(tid_agg_rx->reorder_buf, 0,
1216 buf_size * sizeof(struct sk_buff *));
1218 if (local->ops->ampdu_action)
1219 ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_START,
1220 sta->addr, tid, &start_seq_num);
1221 #ifdef CONFIG_MAC80211_HT_DEBUG
1222 printk(KERN_DEBUG "Rx A-MPDU request on tid %d result %d\n", tid, ret);
1223 #endif /* CONFIG_MAC80211_HT_DEBUG */
1226 kfree(tid_agg_rx->reorder_buf);
1228 sta->ampdu_mlme.tid_rx[tid] = NULL;
1232 /* change state and send addba resp */
1233 sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_OPERATIONAL;
1234 tid_agg_rx->dialog_token = dialog_token;
1235 tid_agg_rx->ssn = start_seq_num;
1236 tid_agg_rx->head_seq_num = start_seq_num;
1237 tid_agg_rx->buf_size = buf_size;
1238 tid_agg_rx->timeout = timeout;
1239 tid_agg_rx->stored_mpdu_num = 0;
1240 status = WLAN_STATUS_SUCCESS;
1242 spin_unlock_bh(&sta->lock);
1245 ieee80211_send_addba_resp(sta->sdata, sta->addr, tid,
1246 dialog_token, status, 1, buf_size, timeout);
1250 static void ieee80211_sta_process_addba_resp(struct ieee80211_local *local,
1251 struct ieee80211_mgmt *mgmt,
1254 struct ieee80211_hw *hw = &local->hw;
1255 struct sta_info *sta;
1262 sta = sta_info_get(local, mgmt->sa);
1268 capab = le16_to_cpu(mgmt->u.action.u.addba_resp.capab);
1269 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
1271 state = &sta->ampdu_mlme.tid_state_tx[tid];
1273 spin_lock_bh(&sta->lock);
1275 if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
1276 spin_unlock_bh(&sta->lock);
1277 goto addba_resp_exit;
1280 if (mgmt->u.action.u.addba_resp.dialog_token !=
1281 sta->ampdu_mlme.tid_tx[tid]->dialog_token) {
1282 spin_unlock_bh(&sta->lock);
1283 #ifdef CONFIG_MAC80211_HT_DEBUG
1284 printk(KERN_DEBUG "wrong addBA response token, tid %d\n", tid);
1285 #endif /* CONFIG_MAC80211_HT_DEBUG */
1286 goto addba_resp_exit;
1289 del_timer_sync(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
1290 #ifdef CONFIG_MAC80211_HT_DEBUG
1291 printk(KERN_DEBUG "switched off addBA timer for tid %d \n", tid);
1292 #endif /* CONFIG_MAC80211_HT_DEBUG */
1293 if (le16_to_cpu(mgmt->u.action.u.addba_resp.status)
1294 == WLAN_STATUS_SUCCESS) {
1295 *state |= HT_ADDBA_RECEIVED_MSK;
1296 sta->ampdu_mlme.addba_req_num[tid] = 0;
1298 if (*state == HT_AGG_STATE_OPERATIONAL)
1299 ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
1301 spin_unlock_bh(&sta->lock);
1303 sta->ampdu_mlme.addba_req_num[tid]++;
1304 /* this will allow the state check in stop_BA_session */
1305 *state = HT_AGG_STATE_OPERATIONAL;
1306 spin_unlock_bh(&sta->lock);
1307 ieee80211_stop_tx_ba_session(hw, sta->addr, tid,
1308 WLAN_BACK_INITIATOR);
1315 static void ieee80211_sta_process_delba(struct ieee80211_sub_if_data *sdata,
1316 struct ieee80211_mgmt *mgmt, size_t len)
1318 struct ieee80211_local *local = sdata->local;
1319 struct sta_info *sta;
1322 DECLARE_MAC_BUF(mac);
1326 sta = sta_info_get(local, mgmt->sa);
1332 params = le16_to_cpu(mgmt->u.action.u.delba.params);
1333 tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
1334 initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;
1336 #ifdef CONFIG_MAC80211_HT_DEBUG
1337 if (net_ratelimit())
1338 printk(KERN_DEBUG "delba from %s (%s) tid %d reason code %d\n",
1339 print_mac(mac, mgmt->sa),
1340 initiator ? "initiator" : "recipient", tid,
1341 mgmt->u.action.u.delba.reason_code);
1342 #endif /* CONFIG_MAC80211_HT_DEBUG */
1344 if (initiator == WLAN_BACK_INITIATOR)
1345 ieee80211_sta_stop_rx_ba_session(sdata, sta->addr, tid,
1346 WLAN_BACK_INITIATOR, 0);
1347 else { /* WLAN_BACK_RECIPIENT */
1348 spin_lock_bh(&sta->lock);
1349 sta->ampdu_mlme.tid_state_tx[tid] =
1350 HT_AGG_STATE_OPERATIONAL;
1351 spin_unlock_bh(&sta->lock);
1352 ieee80211_stop_tx_ba_session(&local->hw, sta->addr, tid,
1353 WLAN_BACK_RECIPIENT);
1358 static void ieee80211_sta_process_measurement_req(struct ieee80211_sub_if_data *sdata,
1359 struct ieee80211_mgmt *mgmt,
1363 * Ignoring measurement request is spec violation.
1364 * Mandatory measurements must be reported optional
1365 * measurements might be refused or reported incapable
1366 * For now just refuse
1367 * TODO: Answer basic measurement as unmeasured
1369 ieee80211_send_refuse_measurement_request(sdata,
1370 &mgmt->u.action.u.measurement.msr_elem,
1371 mgmt->sa, mgmt->bssid,
1372 mgmt->u.action.u.measurement.dialog_token);
1376 static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
1377 struct ieee80211_if_sta *ifsta,
1378 struct ieee80211_mgmt *mgmt,
1381 u16 auth_alg, auth_transaction, status_code;
1382 DECLARE_MAC_BUF(mac);
1384 if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
1385 sdata->vif.type != IEEE80211_IF_TYPE_IBSS)
1391 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
1392 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1395 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
1396 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1399 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1400 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1401 status_code = le16_to_cpu(mgmt->u.auth.status_code);
1403 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
1405 * IEEE 802.11 standard does not require authentication in IBSS
1406 * networks and most implementations do not seem to use it.
1407 * However, try to reply to authentication attempts if someone
1408 * has actually implemented this.
1410 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
1412 ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
1415 if (auth_alg != ifsta->auth_alg ||
1416 auth_transaction != ifsta->auth_transaction)
1419 if (status_code != WLAN_STATUS_SUCCESS) {
1420 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1422 const int num_algs = ARRAY_SIZE(algs);
1424 algs[0] = algs[1] = algs[2] = 0xff;
1425 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1426 algs[0] = WLAN_AUTH_OPEN;
1427 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1428 algs[1] = WLAN_AUTH_SHARED_KEY;
1429 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1430 algs[2] = WLAN_AUTH_LEAP;
1431 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1433 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1437 for (i = 0; i < num_algs; i++) {
1439 if (pos >= num_algs)
1441 if (algs[pos] == ifsta->auth_alg ||
1444 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
1445 !ieee80211_sta_wep_configured(sdata))
1447 ifsta->auth_alg = algs[pos];
1454 switch (ifsta->auth_alg) {
1455 case WLAN_AUTH_OPEN:
1456 case WLAN_AUTH_LEAP:
1457 ieee80211_auth_completed(sdata, ifsta);
1459 case WLAN_AUTH_SHARED_KEY:
1460 if (ifsta->auth_transaction == 4)
1461 ieee80211_auth_completed(sdata, ifsta);
1463 ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
1469 static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
1470 struct ieee80211_if_sta *ifsta,
1471 struct ieee80211_mgmt *mgmt,
1475 DECLARE_MAC_BUF(mac);
1480 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1483 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1485 if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
1486 printk(KERN_DEBUG "%s: deauthenticated\n", sdata->dev->name);
1488 if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1489 ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1490 ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1491 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
1492 mod_timer(&ifsta->timer, jiffies +
1493 IEEE80211_RETRY_AUTH_INTERVAL);
1496 ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
1497 ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
1501 static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
1502 struct ieee80211_if_sta *ifsta,
1503 struct ieee80211_mgmt *mgmt,
1507 DECLARE_MAC_BUF(mac);
1512 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1515 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1517 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
1518 printk(KERN_DEBUG "%s: disassociated\n", sdata->dev->name);
1520 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1521 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
1522 mod_timer(&ifsta->timer, jiffies +
1523 IEEE80211_RETRY_AUTH_INTERVAL);
1526 ieee80211_set_disassoc(sdata, ifsta, false, false, 0);
1530 static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
1531 struct ieee80211_if_sta *ifsta,
1532 struct ieee80211_mgmt *mgmt,
1536 struct ieee80211_local *local = sdata->local;
1537 struct ieee80211_supported_band *sband;
1538 struct sta_info *sta;
1539 u64 rates, basic_rates;
1540 u16 capab_info, status_code, aid;
1541 struct ieee802_11_elems elems;
1542 struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
1545 DECLARE_MAC_BUF(mac);
1546 bool have_higher_than_11mbit = false;
1548 /* AssocResp and ReassocResp have identical structure, so process both
1549 * of them in this function. */
1551 if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
1557 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1560 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1561 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1562 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
1564 printk(KERN_DEBUG "%s: RX %sssocResp from %s (capab=0x%x "
1565 "status=%d aid=%d)\n",
1566 sdata->dev->name, reassoc ? "Rea" : "A", print_mac(mac, mgmt->sa),
1567 capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
1569 if (status_code != WLAN_STATUS_SUCCESS) {
1570 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
1571 sdata->dev->name, status_code);
1572 /* if this was a reassociation, ensure we try a "full"
1573 * association next time. This works around some broken APs
1574 * which do not correctly reject reassociation requests. */
1575 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
1579 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1580 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
1581 "set\n", sdata->dev->name, aid);
1582 aid &= ~(BIT(15) | BIT(14));
1584 pos = mgmt->u.assoc_resp.variable;
1585 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1587 if (!elems.supp_rates) {
1588 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
1593 printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
1595 ifsta->ap_capab = capab_info;
1597 kfree(ifsta->assocresp_ies);
1598 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
1599 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
1600 if (ifsta->assocresp_ies)
1601 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1605 /* Add STA entry for the AP */
1606 sta = sta_info_get(local, ifsta->bssid);
1608 struct ieee80211_sta_bss *bss;
1611 sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1613 printk(KERN_DEBUG "%s: failed to alloc STA entry for"
1614 " the AP\n", sdata->dev->name);
1618 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1619 local->hw.conf.channel->center_freq,
1620 ifsta->ssid, ifsta->ssid_len);
1622 sta->last_signal = bss->signal;
1623 sta->last_qual = bss->qual;
1624 sta->last_noise = bss->noise;
1625 ieee80211_rx_bss_put(local, bss);
1628 err = sta_info_insert(sta);
1630 printk(KERN_DEBUG "%s: failed to insert STA entry for"
1631 " the AP (error %d)\n", sdata->dev->name, err);
1635 /* update new sta with its last rx activity */
1636 sta->last_rx = jiffies;
1640 * FIXME: Do we really need to update the sta_info's information here?
1641 * We already know about the AP (we found it in our list) so it
1642 * should already be filled with the right info, no?
1643 * As is stands, all this is racy because typically we assume
1644 * the information that is filled in here (except flags) doesn't
1645 * change while a STA structure is alive. As such, it should move
1646 * to between the sta_info_alloc() and sta_info_insert() above.
1649 set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1650 WLAN_STA_AUTHORIZED);
1654 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1656 for (i = 0; i < elems.supp_rates_len; i++) {
1657 int rate = (elems.supp_rates[i] & 0x7f) * 5;
1660 have_higher_than_11mbit = true;
1662 for (j = 0; j < sband->n_bitrates; j++) {
1663 if (sband->bitrates[j].bitrate == rate)
1665 if (elems.supp_rates[i] & 0x80)
1666 basic_rates |= BIT(j);
1670 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1671 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
1674 have_higher_than_11mbit = true;
1676 for (j = 0; j < sband->n_bitrates; j++) {
1677 if (sband->bitrates[j].bitrate == rate)
1679 if (elems.ext_supp_rates[i] & 0x80)
1680 basic_rates |= BIT(j);
1684 sta->supp_rates[local->hw.conf.channel->band] = rates;
1685 sdata->basic_rates = basic_rates;
1687 /* cf. IEEE 802.11 9.2.12 */
1688 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1689 have_higher_than_11mbit)
1690 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1692 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
1694 if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param &&
1695 (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
1696 struct ieee80211_ht_bss_info bss_info;
1697 ieee80211_ht_cap_ie_to_ht_info(
1698 (struct ieee80211_ht_cap *)
1699 elems.ht_cap_elem, &sta->ht_info);
1700 ieee80211_ht_addt_info_ie_to_ht_bss_info(
1701 (struct ieee80211_ht_addt_info *)
1702 elems.ht_info_elem, &bss_info);
1703 ieee80211_handle_ht(local, 1, &sta->ht_info, &bss_info);
1706 rate_control_rate_init(sta, local);
1708 if (elems.wmm_param) {
1709 set_sta_flags(sta, WLAN_STA_WME);
1711 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1712 elems.wmm_param_len);
1716 /* set AID and assoc capability,
1717 * ieee80211_set_associated() will tell the driver */
1718 bss_conf->aid = aid;
1719 bss_conf->assoc_capability = capab_info;
1720 ieee80211_set_associated(sdata, ifsta);
1722 ieee80211_associated(sdata, ifsta);
1726 static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
1727 struct ieee80211_if_sta *ifsta,
1728 struct ieee80211_sta_bss *bss)
1730 struct ieee80211_local *local = sdata->local;
1731 int res, rates, i, j;
1732 struct sk_buff *skb;
1733 struct ieee80211_mgmt *mgmt;
1735 struct ieee80211_supported_band *sband;
1736 union iwreq_data wrqu;
1738 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1740 /* Remove possible STA entries from other IBSS networks. */
1741 sta_info_flush_delayed(sdata);
1743 if (local->ops->reset_tsf) {
1744 /* Reset own TSF to allow time synchronization work. */
1745 local->ops->reset_tsf(local_to_hw(local));
1747 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
1748 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
1752 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1754 sdata->drop_unencrypted = bss->capability &
1755 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1757 res = ieee80211_set_freq(sdata, bss->freq);
1762 /* Build IBSS probe response */
1763 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1765 skb_reserve(skb, local->hw.extra_tx_headroom);
1767 mgmt = (struct ieee80211_mgmt *)
1768 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1769 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1770 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1771 IEEE80211_STYPE_PROBE_RESP);
1772 memset(mgmt->da, 0xff, ETH_ALEN);
1773 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1774 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1775 mgmt->u.beacon.beacon_int =
1776 cpu_to_le16(local->hw.conf.beacon_int);
1777 mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1778 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
1780 pos = skb_put(skb, 2 + ifsta->ssid_len);
1781 *pos++ = WLAN_EID_SSID;
1782 *pos++ = ifsta->ssid_len;
1783 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
1785 rates = bss->supp_rates_len;
1788 pos = skb_put(skb, 2 + rates);
1789 *pos++ = WLAN_EID_SUPP_RATES;
1791 memcpy(pos, bss->supp_rates, rates);
1793 if (bss->band == IEEE80211_BAND_2GHZ) {
1794 pos = skb_put(skb, 2 + 1);
1795 *pos++ = WLAN_EID_DS_PARAMS;
1797 *pos++ = ieee80211_frequency_to_channel(bss->freq);
1800 pos = skb_put(skb, 2 + 2);
1801 *pos++ = WLAN_EID_IBSS_PARAMS;
1803 /* FIX: set ATIM window based on scan results */
1807 if (bss->supp_rates_len > 8) {
1808 rates = bss->supp_rates_len - 8;
1809 pos = skb_put(skb, 2 + rates);
1810 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1812 memcpy(pos, &bss->supp_rates[8], rates);
1815 ifsta->probe_resp = skb;
1817 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1821 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1822 for (i = 0; i < bss->supp_rates_len; i++) {
1823 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1824 for (j = 0; j < sband->n_bitrates; j++)
1825 if (sband->bitrates[j].bitrate == bitrate)
1828 ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1830 ieee80211_sta_def_wmm_params(sdata, bss);
1832 ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
1833 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1835 memset(&wrqu, 0, sizeof(wrqu));
1836 memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
1837 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
1842 u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
1843 struct ieee802_11_elems *elems,
1844 enum ieee80211_band band)
1846 struct ieee80211_supported_band *sband;
1847 struct ieee80211_rate *bitrates;
1851 sband = local->hw.wiphy->bands[band];
1855 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1858 bitrates = sband->bitrates;
1859 num_rates = sband->n_bitrates;
1861 for (i = 0; i < elems->supp_rates_len +
1862 elems->ext_supp_rates_len; i++) {
1865 if (i < elems->supp_rates_len)
1866 rate = elems->supp_rates[i];
1867 else if (elems->ext_supp_rates)
1868 rate = elems->ext_supp_rates
1869 [i - elems->supp_rates_len];
1870 own_rate = 5 * (rate & 0x7f);
1871 for (j = 0; j < num_rates; j++)
1872 if (bitrates[j].bitrate == own_rate)
1873 supp_rates |= BIT(j);
1878 static u64 ieee80211_sta_get_mandatory_rates(struct ieee80211_local *local,
1879 enum ieee80211_band band)
1881 struct ieee80211_supported_band *sband;
1882 struct ieee80211_rate *bitrates;
1883 u64 mandatory_rates;
1884 enum ieee80211_rate_flags mandatory_flag;
1887 sband = local->hw.wiphy->bands[band];
1890 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1893 if (band == IEEE80211_BAND_2GHZ)
1894 mandatory_flag = IEEE80211_RATE_MANDATORY_B;
1896 mandatory_flag = IEEE80211_RATE_MANDATORY_A;
1898 bitrates = sband->bitrates;
1899 mandatory_rates = 0;
1900 for (i = 0; i < sband->n_bitrates; i++)
1901 if (bitrates[i].flags & mandatory_flag)
1902 mandatory_rates |= BIT(i);
1903 return mandatory_rates;
1906 static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1907 struct ieee80211_mgmt *mgmt,
1909 struct ieee80211_rx_status *rx_status,
1910 struct ieee802_11_elems *elems,
1913 struct ieee80211_local *local = sdata->local;
1915 struct ieee80211_sta_bss *bss;
1916 struct sta_info *sta;
1917 struct ieee80211_channel *channel;
1918 u64 beacon_timestamp, rx_timestamp;
1920 enum ieee80211_band band = rx_status->band;
1921 DECLARE_MAC_BUF(mac);
1922 DECLARE_MAC_BUF(mac2);
1924 if (elems->ds_params && elems->ds_params_len == 1)
1925 freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1927 freq = rx_status->freq;
1929 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1931 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1934 if (ieee80211_vif_is_mesh(&sdata->vif) && elems->mesh_id &&
1935 elems->mesh_config && mesh_matches_local(elems, sdata)) {
1936 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1938 mesh_neighbour_update(mgmt->sa, supp_rates, sdata,
1939 mesh_peer_accepts_plinks(elems));
1942 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && elems->supp_rates &&
1943 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1944 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1948 sta = sta_info_get(local, mgmt->sa);
1952 prev_rates = sta->supp_rates[band];
1953 /* make sure mandatory rates are always added */
1954 sta->supp_rates[band] = supp_rates |
1955 ieee80211_sta_get_mandatory_rates(local, band);
1957 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1958 if (sta->supp_rates[band] != prev_rates)
1959 printk(KERN_DEBUG "%s: updated supp_rates set "
1960 "for %s based on beacon info (0x%llx | "
1961 "0x%llx -> 0x%llx)\n",
1962 sdata->dev->name, print_mac(mac, sta->addr),
1963 (unsigned long long) prev_rates,
1964 (unsigned long long) supp_rates,
1965 (unsigned long long) sta->supp_rates[band]);
1968 ieee80211_ibss_add_sta(sdata, NULL, mgmt->bssid,
1969 mgmt->sa, supp_rates);
1975 bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1980 /* was just updated in ieee80211_bss_info_update */
1981 beacon_timestamp = bss->timestamp;
1984 * In STA mode, the remaining parameters should not be overridden
1985 * by beacons because they're not necessarily accurate there.
1987 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
1988 bss->last_probe_resp && beacon) {
1989 ieee80211_rx_bss_put(local, bss);
1993 /* check if we need to merge IBSS */
1994 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && beacon &&
1995 bss->capability & WLAN_CAPABILITY_IBSS &&
1996 bss->freq == local->oper_channel->center_freq &&
1997 elems->ssid_len == sdata->u.sta.ssid_len &&
1998 memcmp(elems->ssid, sdata->u.sta.ssid,
1999 sdata->u.sta.ssid_len) == 0) {
2000 if (rx_status->flag & RX_FLAG_TSFT) {
2001 /* in order for correct IBSS merging we need mactime
2003 * since mactime is defined as the time the first data
2004 * symbol of the frame hits the PHY, and the timestamp
2005 * of the beacon is defined as "the time that the data
2006 * symbol containing the first bit of the timestamp is
2007 * transmitted to the PHY plus the transmitting STA’s
2008 * delays through its local PHY from the MAC-PHY
2009 * interface to its interface with the WM"
2010 * (802.11 11.1.2) - equals the time this bit arrives at
2011 * the receiver - we have to take into account the
2012 * offset between the two.
2013 * e.g: at 1 MBit that means mactime is 192 usec earlier
2014 * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
2016 int rate = local->hw.wiphy->bands[band]->
2017 bitrates[rx_status->rate_idx].bitrate;
2018 rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
2019 } else if (local && local->ops && local->ops->get_tsf)
2020 /* second best option: get current TSF */
2021 rx_timestamp = local->ops->get_tsf(local_to_hw(local));
2023 /* can't merge without knowing the TSF */
2024 rx_timestamp = -1LLU;
2025 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2026 printk(KERN_DEBUG "RX beacon SA=%s BSSID="
2027 "%s TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
2028 print_mac(mac, mgmt->sa),
2029 print_mac(mac2, mgmt->bssid),
2030 (unsigned long long)rx_timestamp,
2031 (unsigned long long)beacon_timestamp,
2032 (unsigned long long)(rx_timestamp - beacon_timestamp),
2034 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2035 if (beacon_timestamp > rx_timestamp) {
2036 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2037 printk(KERN_DEBUG "%s: beacon TSF higher than "
2038 "local TSF - IBSS merge with BSSID %s\n",
2039 sdata->dev->name, print_mac(mac, mgmt->bssid));
2041 ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
2042 ieee80211_ibss_add_sta(sdata, NULL,
2043 mgmt->bssid, mgmt->sa,
2048 ieee80211_rx_bss_put(local, bss);
2052 static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
2053 struct ieee80211_mgmt *mgmt,
2055 struct ieee80211_rx_status *rx_status)
2058 struct ieee802_11_elems elems;
2059 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2061 if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
2062 return; /* ignore ProbeResp to foreign address */
2064 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
2068 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
2071 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
2073 /* direct probe may be part of the association flow */
2074 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
2076 printk(KERN_DEBUG "%s direct probe responded\n",
2078 ieee80211_authenticate(sdata, ifsta);
2083 static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
2084 struct ieee80211_mgmt *mgmt,
2086 struct ieee80211_rx_status *rx_status)
2088 struct ieee80211_if_sta *ifsta;
2090 struct ieee802_11_elems elems;
2091 struct ieee80211_local *local = sdata->local;
2092 struct ieee80211_conf *conf = &local->hw.conf;
2095 /* Process beacon from the current BSS */
2096 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
2100 ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
2102 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
2104 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2106 ifsta = &sdata->u.sta;
2108 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
2109 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
2112 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
2113 elems.wmm_param_len);
2115 if (elems.erp_info && elems.erp_info_len >= 1)
2116 changed |= ieee80211_handle_erp_ie(sdata, elems.erp_info[0]);
2118 u16 capab = le16_to_cpu(mgmt->u.beacon.capab_info);
2119 changed |= ieee80211_handle_protect_preamb(sdata, false,
2120 (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
2123 if (elems.ht_cap_elem && elems.ht_info_elem &&
2124 elems.wmm_param && conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
2125 struct ieee80211_ht_bss_info bss_info;
2127 ieee80211_ht_addt_info_ie_to_ht_bss_info(
2128 (struct ieee80211_ht_addt_info *)
2129 elems.ht_info_elem, &bss_info);
2130 changed |= ieee80211_handle_ht(local, 1, &conf->ht_conf,
2134 ieee80211_bss_info_change_notify(sdata, changed);
2138 static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
2139 struct ieee80211_if_sta *ifsta,
2140 struct ieee80211_mgmt *mgmt,
2142 struct ieee80211_rx_status *rx_status)
2144 struct ieee80211_local *local = sdata->local;
2146 struct sk_buff *skb;
2147 struct ieee80211_mgmt *resp;
2149 DECLARE_MAC_BUF(mac);
2150 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2151 DECLARE_MAC_BUF(mac2);
2152 DECLARE_MAC_BUF(mac3);
2155 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS ||
2156 ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
2157 len < 24 + 2 || !ifsta->probe_resp)
2160 if (local->ops->tx_last_beacon)
2161 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
2165 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2166 printk(KERN_DEBUG "%s: RX ProbeReq SA=%s DA=%s BSSID="
2167 "%s (tx_last_beacon=%d)\n",
2168 sdata->dev->name, print_mac(mac, mgmt->sa), print_mac(mac2, mgmt->da),
2169 print_mac(mac3, mgmt->bssid), tx_last_beacon);
2170 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2172 if (!tx_last_beacon)
2175 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
2176 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
2179 end = ((u8 *) mgmt) + len;
2180 pos = mgmt->u.probe_req.variable;
2181 if (pos[0] != WLAN_EID_SSID ||
2182 pos + 2 + pos[1] > end) {
2183 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2184 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
2186 sdata->dev->name, print_mac(mac, mgmt->sa));
2191 (pos[1] != ifsta->ssid_len ||
2192 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
2193 /* Ignore ProbeReq for foreign SSID */
2197 /* Reply with ProbeResp */
2198 skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
2202 resp = (struct ieee80211_mgmt *) skb->data;
2203 memcpy(resp->da, mgmt->sa, ETH_ALEN);
2204 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2205 printk(KERN_DEBUG "%s: Sending ProbeResp to %s\n",
2206 sdata->dev->name, print_mac(mac, resp->da));
2207 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2208 ieee80211_sta_tx(sdata, skb, 0);
2211 static void ieee80211_rx_mgmt_action(struct ieee80211_sub_if_data *sdata,
2212 struct ieee80211_if_sta *ifsta,
2213 struct ieee80211_mgmt *mgmt,
2215 struct ieee80211_rx_status *rx_status)
2217 struct ieee80211_local *local = sdata->local;
2219 /* all categories we currently handle have action_code */
2220 if (len < IEEE80211_MIN_ACTION_SIZE + 1)
2223 switch (mgmt->u.action.category) {
2224 case WLAN_CATEGORY_SPECTRUM_MGMT:
2225 if (local->hw.conf.channel->band != IEEE80211_BAND_5GHZ)
2227 switch (mgmt->u.action.u.measurement.action_code) {
2228 case WLAN_ACTION_SPCT_MSR_REQ:
2229 if (len < (IEEE80211_MIN_ACTION_SIZE +
2230 sizeof(mgmt->u.action.u.measurement)))
2232 ieee80211_sta_process_measurement_req(sdata, mgmt, len);
2236 case WLAN_CATEGORY_BACK:
2237 switch (mgmt->u.action.u.addba_req.action_code) {
2238 case WLAN_ACTION_ADDBA_REQ:
2239 if (len < (IEEE80211_MIN_ACTION_SIZE +
2240 sizeof(mgmt->u.action.u.addba_req)))
2242 ieee80211_sta_process_addba_request(local, mgmt, len);
2244 case WLAN_ACTION_ADDBA_RESP:
2245 if (len < (IEEE80211_MIN_ACTION_SIZE +
2246 sizeof(mgmt->u.action.u.addba_resp)))
2248 ieee80211_sta_process_addba_resp(local, mgmt, len);
2250 case WLAN_ACTION_DELBA:
2251 if (len < (IEEE80211_MIN_ACTION_SIZE +
2252 sizeof(mgmt->u.action.u.delba)))
2254 ieee80211_sta_process_delba(sdata, mgmt, len);
2258 case PLINK_CATEGORY:
2259 if (ieee80211_vif_is_mesh(&sdata->vif))
2260 mesh_rx_plink_frame(sdata, mgmt, len, rx_status);
2262 case MESH_PATH_SEL_CATEGORY:
2263 if (ieee80211_vif_is_mesh(&sdata->vif))
2264 mesh_rx_path_sel_frame(sdata, mgmt, len);
2269 void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
2270 struct ieee80211_rx_status *rx_status)
2272 struct ieee80211_local *local = sdata->local;
2273 struct ieee80211_if_sta *ifsta;
2274 struct ieee80211_mgmt *mgmt;
2280 ifsta = &sdata->u.sta;
2282 mgmt = (struct ieee80211_mgmt *) skb->data;
2283 fc = le16_to_cpu(mgmt->frame_control);
2285 switch (fc & IEEE80211_FCTL_STYPE) {
2286 case IEEE80211_STYPE_PROBE_REQ:
2287 case IEEE80211_STYPE_PROBE_RESP:
2288 case IEEE80211_STYPE_BEACON:
2289 case IEEE80211_STYPE_ACTION:
2290 memcpy(skb->cb, rx_status, sizeof(*rx_status));
2291 case IEEE80211_STYPE_AUTH:
2292 case IEEE80211_STYPE_ASSOC_RESP:
2293 case IEEE80211_STYPE_REASSOC_RESP:
2294 case IEEE80211_STYPE_DEAUTH:
2295 case IEEE80211_STYPE_DISASSOC:
2296 skb_queue_tail(&ifsta->skb_queue, skb);
2297 queue_work(local->hw.workqueue, &ifsta->work);
2305 static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
2306 struct sk_buff *skb)
2308 struct ieee80211_rx_status *rx_status;
2309 struct ieee80211_if_sta *ifsta;
2310 struct ieee80211_mgmt *mgmt;
2313 ifsta = &sdata->u.sta;
2315 rx_status = (struct ieee80211_rx_status *) skb->cb;
2316 mgmt = (struct ieee80211_mgmt *) skb->data;
2317 fc = le16_to_cpu(mgmt->frame_control);
2319 switch (fc & IEEE80211_FCTL_STYPE) {
2320 case IEEE80211_STYPE_PROBE_REQ:
2321 ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len,
2324 case IEEE80211_STYPE_PROBE_RESP:
2325 ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
2327 case IEEE80211_STYPE_BEACON:
2328 ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
2330 case IEEE80211_STYPE_AUTH:
2331 ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
2333 case IEEE80211_STYPE_ASSOC_RESP:
2334 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
2336 case IEEE80211_STYPE_REASSOC_RESP:
2337 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
2339 case IEEE80211_STYPE_DEAUTH:
2340 ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
2342 case IEEE80211_STYPE_DISASSOC:
2343 ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
2345 case IEEE80211_STYPE_ACTION:
2346 ieee80211_rx_mgmt_action(sdata, ifsta, mgmt, skb->len, rx_status);
2354 static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
2356 struct ieee80211_local *local = sdata->local;
2358 struct sta_info *sta;
2362 list_for_each_entry_rcu(sta, &local->sta_list, list) {
2363 if (sta->sdata == sdata &&
2364 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
2377 static void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, unsigned long exp_time)
2379 struct ieee80211_local *local = sdata->local;
2380 struct sta_info *sta, *tmp;
2381 LIST_HEAD(tmp_list);
2382 DECLARE_MAC_BUF(mac);
2383 unsigned long flags;
2385 spin_lock_irqsave(&local->sta_lock, flags);
2386 list_for_each_entry_safe(sta, tmp, &local->sta_list, list)
2387 if (time_after(jiffies, sta->last_rx + exp_time)) {
2388 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2389 printk(KERN_DEBUG "%s: expiring inactive STA %s\n",
2390 sdata->dev->name, print_mac(mac, sta->addr));
2392 __sta_info_unlink(&sta);
2394 list_add(&sta->list, &tmp_list);
2396 spin_unlock_irqrestore(&local->sta_lock, flags);
2398 list_for_each_entry_safe(sta, tmp, &tmp_list, list)
2399 sta_info_destroy(sta);
2403 static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
2404 struct ieee80211_if_sta *ifsta)
2406 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2408 ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
2409 if (ieee80211_sta_active_ibss(sdata))
2412 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
2413 "IBSS networks with same SSID (merge)\n", sdata->dev->name);
2414 ieee80211_sta_req_scan(sdata, ifsta->ssid, ifsta->ssid_len);
2418 #ifdef CONFIG_MAC80211_MESH
2419 static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata,
2420 struct ieee80211_if_sta *ifsta)
2424 ieee80211_sta_expire(sdata, IEEE80211_MESH_PEER_INACTIVITY_LIMIT);
2425 mesh_path_expire(sdata);
2427 free_plinks = mesh_plink_availables(sdata);
2428 if (free_plinks != sdata->u.sta.accepting_plinks)
2429 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
2431 mod_timer(&ifsta->timer, jiffies +
2432 IEEE80211_MESH_HOUSEKEEPING_INTERVAL);
2436 void ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata)
2438 struct ieee80211_if_sta *ifsta;
2439 ifsta = &sdata->u.sta;
2440 ifsta->state = IEEE80211_STA_MLME_MESH_UP;
2441 ieee80211_sta_timer((unsigned long)sdata);
2442 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
2447 void ieee80211_sta_timer(unsigned long data)
2449 struct ieee80211_sub_if_data *sdata =
2450 (struct ieee80211_sub_if_data *) data;
2451 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2452 struct ieee80211_local *local = sdata->local;
2454 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2455 queue_work(local->hw.workqueue, &ifsta->work);
2458 static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
2459 struct ieee80211_if_sta *ifsta)
2461 struct ieee80211_local *local = sdata->local;
2463 if (local->ops->reset_tsf) {
2464 /* Reset own TSF to allow time synchronization work. */
2465 local->ops->reset_tsf(local_to_hw(local));
2468 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2471 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2472 ifsta->auth_alg = WLAN_AUTH_OPEN;
2473 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2474 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2475 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2476 ifsta->auth_alg = WLAN_AUTH_LEAP;
2478 ifsta->auth_alg = WLAN_AUTH_OPEN;
2479 ifsta->auth_transaction = -1;
2480 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
2481 ifsta->assoc_scan_tries = 0;
2482 ifsta->direct_probe_tries = 0;
2483 ifsta->auth_tries = 0;
2484 ifsta->assoc_tries = 0;
2485 netif_tx_stop_all_queues(sdata->dev);
2486 netif_carrier_off(sdata->dev);
2490 void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2491 struct ieee80211_if_sta *ifsta)
2493 struct ieee80211_local *local = sdata->local;
2495 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2498 if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2499 IEEE80211_STA_AUTO_BSSID_SEL)) &&
2500 (ifsta->flags & (IEEE80211_STA_SSID_SET |
2501 IEEE80211_STA_AUTO_SSID_SEL))) {
2503 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2504 ieee80211_set_disassoc(sdata, ifsta, true, true,
2505 WLAN_REASON_DEAUTH_LEAVING);
2507 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2508 queue_work(local->hw.workqueue, &ifsta->work);
2512 static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2513 const char *ssid, int ssid_len)
2515 int tmp, hidden_ssid;
2517 if (ssid_len == ifsta->ssid_len &&
2518 !memcmp(ifsta->ssid, ssid, ssid_len))
2521 if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
2527 if (ssid[tmp] != '\0') {
2533 if (hidden_ssid && ifsta->ssid_len == ssid_len)
2536 if (ssid_len == 1 && ssid[0] == ' ')
2542 static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
2543 struct ieee80211_if_sta *ifsta)
2545 struct ieee80211_local *local = sdata->local;
2546 struct ieee80211_sta_bss *bss;
2547 struct ieee80211_supported_band *sband;
2548 u8 bssid[ETH_ALEN], *pos;
2551 DECLARE_MAC_BUF(mac);
2554 /* Easier testing, use fixed BSSID. */
2555 memset(bssid, 0xfe, ETH_ALEN);
2557 /* Generate random, not broadcast, locally administered BSSID. Mix in
2558 * own MAC address to make sure that devices that do not have proper
2559 * random number generator get different BSSID. */
2560 get_random_bytes(bssid, ETH_ALEN);
2561 for (i = 0; i < ETH_ALEN; i++)
2562 bssid[i] ^= sdata->dev->dev_addr[i];
2567 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %s\n",
2568 sdata->dev->name, print_mac(mac, bssid));
2570 bss = ieee80211_rx_bss_add(local, bssid,
2571 local->hw.conf.channel->center_freq,
2572 sdata->u.sta.ssid, sdata->u.sta.ssid_len);
2576 bss->band = local->hw.conf.channel->band;
2577 sband = local->hw.wiphy->bands[bss->band];
2579 if (local->hw.conf.beacon_int == 0)
2580 local->hw.conf.beacon_int = 100;
2581 bss->beacon_int = local->hw.conf.beacon_int;
2582 bss->last_update = jiffies;
2583 bss->capability = WLAN_CAPABILITY_IBSS;
2585 if (sdata->default_key)
2586 bss->capability |= WLAN_CAPABILITY_PRIVACY;
2588 sdata->drop_unencrypted = 0;
2590 bss->supp_rates_len = sband->n_bitrates;
2591 pos = bss->supp_rates;
2592 for (i = 0; i < sband->n_bitrates; i++) {
2593 int rate = sband->bitrates[i].bitrate;
2594 *pos++ = (u8) (rate / 5);
2597 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2598 ieee80211_rx_bss_put(local, bss);
2603 static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
2604 struct ieee80211_if_sta *ifsta)
2606 struct ieee80211_local *local = sdata->local;
2607 struct ieee80211_sta_bss *bss;
2611 DECLARE_MAC_BUF(mac);
2612 DECLARE_MAC_BUF(mac2);
2614 if (ifsta->ssid_len == 0)
2617 active_ibss = ieee80211_sta_active_ibss(sdata);
2618 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2619 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
2620 sdata->dev->name, active_ibss);
2621 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2622 spin_lock_bh(&local->sta_bss_lock);
2623 list_for_each_entry(bss, &local->sta_bss_list, list) {
2624 if (ifsta->ssid_len != bss->ssid_len ||
2625 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2626 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2628 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2629 printk(KERN_DEBUG " bssid=%s found\n",
2630 print_mac(mac, bss->bssid));
2631 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2632 memcpy(bssid, bss->bssid, ETH_ALEN);
2634 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2637 spin_unlock_bh(&local->sta_bss_lock);
2639 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2641 printk(KERN_DEBUG " sta_find_ibss: selected %s current "
2642 "%s\n", print_mac(mac, bssid),
2643 print_mac(mac2, ifsta->bssid));
2644 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2646 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2650 if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2651 search_freq = bss->freq;
2653 search_freq = local->hw.conf.channel->center_freq;
2655 bss = ieee80211_rx_bss_get(local, bssid, search_freq,
2656 ifsta->ssid, ifsta->ssid_len);
2660 printk(KERN_DEBUG "%s: Selected IBSS BSSID %s"
2661 " based on configured SSID\n",
2662 sdata->dev->name, print_mac(mac, bssid));
2663 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2664 ieee80211_rx_bss_put(local, bss);
2669 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2670 printk(KERN_DEBUG " did not try to join ibss\n");
2671 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2673 /* Selected IBSS not found in current scan results - try to scan */
2674 if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
2675 !ieee80211_sta_active_ibss(sdata)) {
2676 mod_timer(&ifsta->timer, jiffies +
2677 IEEE80211_IBSS_MERGE_INTERVAL);
2678 } else if (time_after(jiffies, local->last_scan_completed +
2679 IEEE80211_SCAN_INTERVAL)) {
2680 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
2681 "join\n", sdata->dev->name);
2682 return ieee80211_sta_req_scan(sdata, ifsta->ssid,
2684 } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
2685 int interval = IEEE80211_SCAN_INTERVAL;
2687 if (time_after(jiffies, ifsta->ibss_join_req +
2688 IEEE80211_IBSS_JOIN_TIMEOUT)) {
2689 if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
2690 (!(local->oper_channel->flags &
2691 IEEE80211_CHAN_NO_IBSS)))
2692 return ieee80211_sta_create_ibss(sdata, ifsta);
2693 if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
2694 printk(KERN_DEBUG "%s: IBSS not allowed on"
2695 " %d MHz\n", sdata->dev->name,
2696 local->hw.conf.channel->center_freq);
2699 /* No IBSS found - decrease scan interval and continue
2701 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2704 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2705 mod_timer(&ifsta->timer, jiffies + interval);
2713 int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2715 struct ieee80211_if_sta *ifsta;
2718 if (len > IEEE80211_MAX_SSID_LEN)
2721 ifsta = &sdata->u.sta;
2723 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2724 memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2725 memcpy(ifsta->ssid, ssid, len);
2726 ifsta->ssid_len = len;
2727 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
2731 * Hack! MLME code needs to be cleaned up to have different
2732 * entry points for configuration and internal selection change
2734 if (netif_running(sdata->dev))
2735 res = ieee80211_if_config(sdata, IEEE80211_IFCC_SSID);
2737 printk(KERN_DEBUG "%s: Failed to config new SSID to "
2738 "the low-level driver\n", sdata->dev->name);
2744 ifsta->flags |= IEEE80211_STA_SSID_SET;
2746 ifsta->flags &= ~IEEE80211_STA_SSID_SET;
2748 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
2749 !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2750 ifsta->ibss_join_req = jiffies;
2751 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2752 return ieee80211_sta_find_ibss(sdata, ifsta);
2759 int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2761 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2762 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2763 *len = ifsta->ssid_len;
2768 int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2770 struct ieee80211_if_sta *ifsta;
2773 ifsta = &sdata->u.sta;
2775 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2776 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2779 * Hack! See also ieee80211_sta_set_ssid.
2781 if (netif_running(sdata->dev))
2782 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2784 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2785 "the low-level driver\n", sdata->dev->name);
2790 if (is_valid_ether_addr(bssid))
2791 ifsta->flags |= IEEE80211_STA_BSSID_SET;
2793 ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2799 int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2801 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2803 kfree(ifsta->extra_ie);
2805 ifsta->extra_ie = NULL;
2806 ifsta->extra_ie_len = 0;
2809 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2810 if (!ifsta->extra_ie) {
2811 ifsta->extra_ie_len = 0;
2814 memcpy(ifsta->extra_ie, ie, len);
2815 ifsta->extra_ie_len = len;
2820 struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
2821 struct sk_buff *skb, u8 *bssid,
2822 u8 *addr, u64 supp_rates)
2824 struct ieee80211_local *local = sdata->local;
2825 struct sta_info *sta;
2826 DECLARE_MAC_BUF(mac);
2827 int band = local->hw.conf.channel->band;
2829 /* TODO: Could consider removing the least recently used entry and
2830 * allow new one to be added. */
2831 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2832 if (net_ratelimit()) {
2833 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
2834 "entry %s\n", sdata->dev->name, print_mac(mac, addr));
2839 if (compare_ether_addr(bssid, sdata->u.sta.bssid))
2842 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
2843 printk(KERN_DEBUG "%s: Adding new IBSS station %s (dev=%s)\n",
2844 wiphy_name(local->hw.wiphy), print_mac(mac, addr), sdata->dev->name);
2847 sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2851 set_sta_flags(sta, WLAN_STA_AUTHORIZED);
2853 /* make sure mandatory rates are always added */
2854 sta->supp_rates[band] = supp_rates |
2855 ieee80211_sta_get_mandatory_rates(local, band);
2857 rate_control_rate_init(sta, local);
2859 if (sta_info_insert(sta))
2866 static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2867 struct ieee80211_if_sta *ifsta)
2869 struct ieee80211_local *local = sdata->local;
2870 struct ieee80211_sta_bss *bss, *selected = NULL;
2871 int top_rssi = 0, freq;
2873 spin_lock_bh(&local->sta_bss_lock);
2874 freq = local->oper_channel->center_freq;
2875 list_for_each_entry(bss, &local->sta_bss_list, list) {
2876 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2879 if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2880 IEEE80211_STA_AUTO_BSSID_SEL |
2881 IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2882 (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2883 !!sdata->default_key))
2886 if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2890 if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2891 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2894 if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2895 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2898 if (!selected || top_rssi < bss->signal) {
2900 top_rssi = bss->signal;
2904 atomic_inc(&selected->users);
2905 spin_unlock_bh(&local->sta_bss_lock);
2908 ieee80211_set_freq(sdata, selected->freq);
2909 if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2910 ieee80211_sta_set_ssid(sdata, selected->ssid,
2911 selected->ssid_len);
2912 ieee80211_sta_set_bssid(sdata, selected->bssid);
2913 ieee80211_sta_def_wmm_params(sdata, selected);
2915 /* Send out direct probe if no probe resp was received or
2916 * the one we have is outdated
2918 if (!selected->last_probe_resp ||
2919 time_after(jiffies, selected->last_probe_resp
2920 + IEEE80211_SCAN_RESULT_EXPIRE))
2921 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2923 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2925 ieee80211_rx_bss_put(local, selected);
2926 ieee80211_sta_reset_auth(sdata, ifsta);
2929 if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2930 ifsta->assoc_scan_tries++;
2931 if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
2932 ieee80211_sta_start_scan(sdata, NULL, 0);
2934 ieee80211_sta_start_scan(sdata, ifsta->ssid,
2936 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2937 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2939 ifsta->state = IEEE80211_STA_MLME_DISABLED;
2945 int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
2947 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2949 printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
2950 sdata->dev->name, reason);
2952 if (sdata->vif.type != IEEE80211_IF_TYPE_STA &&
2953 sdata->vif.type != IEEE80211_IF_TYPE_IBSS)
2956 ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
2961 int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
2963 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2965 printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
2966 sdata->dev->name, reason);
2968 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2971 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
2974 ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
2978 void ieee80211_notify_mac(struct ieee80211_hw *hw,
2979 enum ieee80211_notification_types notif_type)
2981 struct ieee80211_local *local = hw_to_local(hw);
2982 struct ieee80211_sub_if_data *sdata;
2984 switch (notif_type) {
2985 case IEEE80211_NOTIFY_RE_ASSOC:
2987 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
2988 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2991 ieee80211_sta_req_auth(sdata, &sdata->u.sta);
2997 EXPORT_SYMBOL(ieee80211_notify_mac);
2999 void ieee80211_sta_work(struct work_struct *work)
3001 struct ieee80211_sub_if_data *sdata =
3002 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
3003 struct ieee80211_local *local = sdata->local;
3004 struct ieee80211_if_sta *ifsta;
3005 struct sk_buff *skb;
3007 if (!netif_running(sdata->dev))
3010 if (local->sta_sw_scanning || local->sta_hw_scanning)
3013 if (WARN_ON(sdata->vif.type != IEEE80211_IF_TYPE_STA &&
3014 sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
3015 sdata->vif.type != IEEE80211_IF_TYPE_MESH_POINT))
3017 ifsta = &sdata->u.sta;
3019 while ((skb = skb_dequeue(&ifsta->skb_queue)))
3020 ieee80211_sta_rx_queued_mgmt(sdata, skb);
3022 #ifdef CONFIG_MAC80211_MESH
3023 if (ifsta->preq_queue_len &&
3025 ifsta->last_preq + msecs_to_jiffies(ifsta->mshcfg.dot11MeshHWMPpreqMinInterval)))
3026 mesh_path_start_discovery(sdata);
3029 if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
3030 ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
3031 ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
3032 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
3033 ieee80211_sta_start_scan(sdata, ifsta->scan_ssid, ifsta->scan_ssid_len);
3037 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
3038 if (ieee80211_sta_config_auth(sdata, ifsta))
3040 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
3041 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
3044 switch (ifsta->state) {
3045 case IEEE80211_STA_MLME_DISABLED:
3047 case IEEE80211_STA_MLME_DIRECT_PROBE:
3048 ieee80211_direct_probe(sdata, ifsta);
3050 case IEEE80211_STA_MLME_AUTHENTICATE:
3051 ieee80211_authenticate(sdata, ifsta);
3053 case IEEE80211_STA_MLME_ASSOCIATE:
3054 ieee80211_associate(sdata, ifsta);
3056 case IEEE80211_STA_MLME_ASSOCIATED:
3057 ieee80211_associated(sdata, ifsta);
3059 case IEEE80211_STA_MLME_IBSS_SEARCH:
3060 ieee80211_sta_find_ibss(sdata, ifsta);
3062 case IEEE80211_STA_MLME_IBSS_JOINED:
3063 ieee80211_sta_merge_ibss(sdata, ifsta);
3065 #ifdef CONFIG_MAC80211_MESH
3066 case IEEE80211_STA_MLME_MESH_UP:
3067 ieee80211_mesh_housekeeping(sdata, ifsta);
3075 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
3076 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
3077 "mixed-cell disabled - disassociate\n", sdata->dev->name);
3079 ieee80211_set_disassoc(sdata, ifsta, false, true,
3080 WLAN_REASON_UNSPECIFIED);
3084 void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
3086 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
3087 struct ieee80211_if_sta *ifsta;
3089 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
3090 ifsta = &sdata->u.sta;
3091 if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
3092 (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
3093 !ieee80211_sta_active_ibss(sdata)))
3094 ieee80211_sta_find_ibss(sdata, ifsta);