2 * BSS client mode implementation
3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
14 #include <linux/delay.h>
15 #include <linux/if_ether.h>
16 #include <linux/skbuff.h>
17 #include <linux/netdevice.h>
18 #include <linux/if_arp.h>
19 #include <linux/wireless.h>
20 #include <linux/random.h>
21 #include <linux/etherdevice.h>
22 #include <linux/rtnetlink.h>
23 #include <net/iw_handler.h>
24 #include <net/mac80211.h>
26 #include "ieee80211_i.h"
31 #define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
32 #define IEEE80211_AUTH_TIMEOUT (HZ / 5)
33 #define IEEE80211_AUTH_MAX_TRIES 3
34 #define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
35 #define IEEE80211_ASSOC_MAX_TRIES 3
36 #define IEEE80211_MONITORING_INTERVAL (2 * HZ)
37 #define IEEE80211_MESH_HOUSEKEEPING_INTERVAL (60 * HZ)
38 #define IEEE80211_PROBE_INTERVAL (60 * HZ)
39 #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
40 #define IEEE80211_SCAN_INTERVAL (2 * HZ)
41 #define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
42 #define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
44 #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
45 #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
46 #define IEEE80211_MESH_PEER_INACTIVITY_LIMIT (1800 * HZ)
48 #define IEEE80211_IBSS_MAX_STA_ENTRIES 128
52 static int ecw2cw(int ecw)
54 return (1 << ecw) - 1;
57 static u8 *ieee80211_bss_get_ie(struct ieee80211_sta_bss *bss, u8 ie)
64 end = pos + bss->ies_len;
66 while (pos + 1 < end) {
67 if (pos + 2 + pos[1] > end)
77 static int ieee80211_compatible_rates(struct ieee80211_sta_bss *bss,
78 struct ieee80211_supported_band *sband,
84 for (i = 0; i < bss->supp_rates_len; i++) {
85 int rate = (bss->supp_rates[i] & 0x7F) * 5;
87 for (j = 0; j < sband->n_bitrates; j++)
88 if (sband->bitrates[j].bitrate == rate) {
98 /* frame sending functions */
99 void ieee80211_sta_tx(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
102 skb->dev = sdata->local->mdev;
103 skb_set_mac_header(skb, 0);
104 skb_set_network_header(skb, 0);
105 skb_set_transport_header(skb, 0);
107 skb->iif = sdata->dev->ifindex;
108 skb->do_not_encrypt = !encrypt;
113 static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
114 struct ieee80211_if_sta *ifsta,
115 int transaction, u8 *extra, size_t extra_len,
118 struct ieee80211_local *local = sdata->local;
120 struct ieee80211_mgmt *mgmt;
122 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
123 sizeof(*mgmt) + 6 + extra_len);
125 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
126 "frame\n", sdata->dev->name);
129 skb_reserve(skb, local->hw.extra_tx_headroom);
131 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
132 memset(mgmt, 0, 24 + 6);
133 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
134 IEEE80211_STYPE_AUTH);
136 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
137 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
138 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
139 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
140 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
141 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
142 ifsta->auth_transaction = transaction + 1;
143 mgmt->u.auth.status_code = cpu_to_le16(0);
145 memcpy(skb_put(skb, extra_len), extra, extra_len);
147 ieee80211_sta_tx(sdata, skb, encrypt);
150 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
151 u8 *ssid, size_t ssid_len)
153 struct ieee80211_local *local = sdata->local;
154 struct ieee80211_supported_band *sband;
156 struct ieee80211_mgmt *mgmt;
157 u8 *pos, *supp_rates, *esupp_rates = NULL;
160 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
162 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
163 "request\n", sdata->dev->name);
166 skb_reserve(skb, local->hw.extra_tx_headroom);
168 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
170 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
171 IEEE80211_STYPE_PROBE_REQ);
172 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
174 memcpy(mgmt->da, dst, ETH_ALEN);
175 memcpy(mgmt->bssid, dst, ETH_ALEN);
177 memset(mgmt->da, 0xff, ETH_ALEN);
178 memset(mgmt->bssid, 0xff, ETH_ALEN);
180 pos = skb_put(skb, 2 + ssid_len);
181 *pos++ = WLAN_EID_SSID;
183 memcpy(pos, ssid, ssid_len);
185 supp_rates = skb_put(skb, 2);
186 supp_rates[0] = WLAN_EID_SUPP_RATES;
188 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
190 for (i = 0; i < sband->n_bitrates; i++) {
191 struct ieee80211_rate *rate = &sband->bitrates[i];
193 pos = skb_put(skb, 1);
195 } else if (supp_rates[1] == 8) {
196 esupp_rates = skb_put(skb, 3);
197 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
199 pos = &esupp_rates[2];
201 pos = skb_put(skb, 1);
204 *pos = rate->bitrate / 5;
207 ieee80211_sta_tx(sdata, skb, 0);
210 static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
211 struct ieee80211_if_sta *ifsta)
213 struct ieee80211_local *local = sdata->local;
215 struct ieee80211_mgmt *mgmt;
216 u8 *pos, *ies, *ht_add_ie;
217 int i, len, count, rates_len, supp_rates_len;
219 struct ieee80211_sta_bss *bss;
221 struct ieee80211_supported_band *sband;
224 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
225 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
228 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
229 "frame\n", sdata->dev->name);
232 skb_reserve(skb, local->hw.extra_tx_headroom);
234 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
236 capab = ifsta->capab;
238 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
239 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
240 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
241 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
242 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
245 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
246 local->hw.conf.channel->center_freq,
247 ifsta->ssid, ifsta->ssid_len);
249 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
250 capab |= WLAN_CAPABILITY_PRIVACY;
254 /* get all rates supported by the device and the AP as
255 * some APs don't like getting a superset of their rates
256 * in the association request (e.g. D-Link DAP 1353 in
258 rates_len = ieee80211_compatible_rates(bss, sband, &rates);
260 if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
261 (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
262 capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
264 ieee80211_rx_bss_put(local, bss);
267 rates_len = sband->n_bitrates;
270 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
272 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
273 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
274 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
276 if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
278 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
279 IEEE80211_STYPE_REASSOC_REQ);
280 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
281 mgmt->u.reassoc_req.listen_interval =
282 cpu_to_le16(local->hw.conf.listen_interval);
283 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
287 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
288 IEEE80211_STYPE_ASSOC_REQ);
289 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
290 mgmt->u.reassoc_req.listen_interval =
291 cpu_to_le16(local->hw.conf.listen_interval);
295 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
296 *pos++ = WLAN_EID_SSID;
297 *pos++ = ifsta->ssid_len;
298 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
300 /* add all rates which were marked to be used above */
301 supp_rates_len = rates_len;
302 if (supp_rates_len > 8)
305 len = sband->n_bitrates;
306 pos = skb_put(skb, supp_rates_len + 2);
307 *pos++ = WLAN_EID_SUPP_RATES;
308 *pos++ = supp_rates_len;
311 for (i = 0; i < sband->n_bitrates; i++) {
312 if (BIT(i) & rates) {
313 int rate = sband->bitrates[i].bitrate;
314 *pos++ = (u8) (rate / 5);
320 if (rates_len > count) {
321 pos = skb_put(skb, rates_len - count + 2);
322 *pos++ = WLAN_EID_EXT_SUPP_RATES;
323 *pos++ = rates_len - count;
325 for (i++; i < sband->n_bitrates; i++) {
326 if (BIT(i) & rates) {
327 int rate = sband->bitrates[i].bitrate;
328 *pos++ = (u8) (rate / 5);
333 if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
334 /* 1. power capabilities */
335 pos = skb_put(skb, 4);
336 *pos++ = WLAN_EID_PWR_CAPABILITY;
338 *pos++ = 0; /* min tx power */
339 *pos++ = local->hw.conf.channel->max_power; /* max tx power */
341 /* 2. supported channels */
342 /* TODO: get this in reg domain format */
343 pos = skb_put(skb, 2 * sband->n_channels + 2);
344 *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
345 *pos++ = 2 * sband->n_channels;
346 for (i = 0; i < sband->n_channels; i++) {
347 *pos++ = ieee80211_frequency_to_channel(
348 sband->channels[i].center_freq);
349 *pos++ = 1; /* one channel in the subband*/
353 if (ifsta->extra_ie) {
354 pos = skb_put(skb, ifsta->extra_ie_len);
355 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
358 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
359 pos = skb_put(skb, 9);
360 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
361 *pos++ = 7; /* len */
362 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
365 *pos++ = 2; /* WME */
366 *pos++ = 0; /* WME info */
367 *pos++ = 1; /* WME ver */
371 /* wmm support is a must to HT */
372 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
373 sband->ht_info.ht_supported &&
374 (ht_add_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_EXTRA_INFO))) {
375 struct ieee80211_ht_addt_info *ht_add_info =
376 (struct ieee80211_ht_addt_info *)ht_add_ie;
377 u16 cap = sband->ht_info.cap;
379 u32 flags = local->hw.conf.channel->flags;
381 switch (ht_add_info->ht_param & IEEE80211_HT_IE_CHA_SEC_OFFSET) {
382 case IEEE80211_HT_IE_CHA_SEC_ABOVE:
383 if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
384 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
385 cap &= ~IEEE80211_HT_CAP_SGI_40;
388 case IEEE80211_HT_IE_CHA_SEC_BELOW:
389 if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
390 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
391 cap &= ~IEEE80211_HT_CAP_SGI_40;
396 tmp = cpu_to_le16(cap);
397 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
398 *pos++ = WLAN_EID_HT_CAPABILITY;
399 *pos++ = sizeof(struct ieee80211_ht_cap);
400 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
401 memcpy(pos, &tmp, sizeof(u16));
403 /* TODO: needs a define here for << 2 */
404 *pos++ = sband->ht_info.ampdu_factor |
405 (sband->ht_info.ampdu_density << 2);
406 memcpy(pos, sband->ht_info.supp_mcs_set, 16);
409 kfree(ifsta->assocreq_ies);
410 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
411 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
412 if (ifsta->assocreq_ies)
413 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
415 ieee80211_sta_tx(sdata, skb, 0);
419 static void ieee80211_send_deauth(struct ieee80211_sub_if_data *sdata,
420 struct ieee80211_if_sta *ifsta, u16 reason)
422 struct ieee80211_local *local = sdata->local;
424 struct ieee80211_mgmt *mgmt;
426 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
428 printk(KERN_DEBUG "%s: failed to allocate buffer for deauth "
429 "frame\n", sdata->dev->name);
432 skb_reserve(skb, local->hw.extra_tx_headroom);
434 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
436 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
437 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
438 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
439 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
440 IEEE80211_STYPE_DEAUTH);
442 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
444 ieee80211_sta_tx(sdata, skb, 0);
447 static void ieee80211_send_disassoc(struct ieee80211_sub_if_data *sdata,
448 struct ieee80211_if_sta *ifsta, u16 reason)
450 struct ieee80211_local *local = sdata->local;
452 struct ieee80211_mgmt *mgmt;
454 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
456 printk(KERN_DEBUG "%s: failed to allocate buffer for disassoc "
457 "frame\n", sdata->dev->name);
460 skb_reserve(skb, local->hw.extra_tx_headroom);
462 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
464 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
465 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
466 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
467 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
468 IEEE80211_STYPE_DISASSOC);
470 mgmt->u.disassoc.reason_code = cpu_to_le16(reason);
472 ieee80211_sta_tx(sdata, skb, 0);
475 static void ieee80211_send_addba_resp(struct ieee80211_sub_if_data *sdata, u8 *da, u16 tid,
476 u8 dialog_token, u16 status, u16 policy,
477 u16 buf_size, u16 timeout)
479 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
480 struct ieee80211_local *local = sdata->local;
482 struct ieee80211_mgmt *mgmt;
485 skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom);
488 printk(KERN_DEBUG "%s: failed to allocate buffer "
489 "for addba resp frame\n", sdata->dev->name);
493 skb_reserve(skb, local->hw.extra_tx_headroom);
494 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
496 memcpy(mgmt->da, da, ETH_ALEN);
497 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
498 if (sdata->vif.type == IEEE80211_IF_TYPE_AP)
499 memcpy(mgmt->bssid, sdata->dev->dev_addr, ETH_ALEN);
501 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
502 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
503 IEEE80211_STYPE_ACTION);
505 skb_put(skb, 1 + sizeof(mgmt->u.action.u.addba_resp));
506 mgmt->u.action.category = WLAN_CATEGORY_BACK;
507 mgmt->u.action.u.addba_resp.action_code = WLAN_ACTION_ADDBA_RESP;
508 mgmt->u.action.u.addba_resp.dialog_token = dialog_token;
510 capab = (u16)(policy << 1); /* bit 1 aggregation policy */
511 capab |= (u16)(tid << 2); /* bit 5:2 TID number */
512 capab |= (u16)(buf_size << 6); /* bit 15:6 max size of aggregation */
514 mgmt->u.action.u.addba_resp.capab = cpu_to_le16(capab);
515 mgmt->u.action.u.addba_resp.timeout = cpu_to_le16(timeout);
516 mgmt->u.action.u.addba_resp.status = cpu_to_le16(status);
518 ieee80211_sta_tx(sdata, skb, 0);
521 static void ieee80211_send_refuse_measurement_request(struct ieee80211_sub_if_data *sdata,
522 struct ieee80211_msrment_ie *request_ie,
523 const u8 *da, const u8 *bssid,
526 struct ieee80211_local *local = sdata->local;
528 struct ieee80211_mgmt *msr_report;
530 skb = dev_alloc_skb(sizeof(*msr_report) + local->hw.extra_tx_headroom +
531 sizeof(struct ieee80211_msrment_ie));
534 printk(KERN_ERR "%s: failed to allocate buffer for "
535 "measurement report frame\n", sdata->dev->name);
539 skb_reserve(skb, local->hw.extra_tx_headroom);
540 msr_report = (struct ieee80211_mgmt *)skb_put(skb, 24);
541 memset(msr_report, 0, 24);
542 memcpy(msr_report->da, da, ETH_ALEN);
543 memcpy(msr_report->sa, sdata->dev->dev_addr, ETH_ALEN);
544 memcpy(msr_report->bssid, bssid, ETH_ALEN);
545 msr_report->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
546 IEEE80211_STYPE_ACTION);
548 skb_put(skb, 1 + sizeof(msr_report->u.action.u.measurement));
549 msr_report->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
550 msr_report->u.action.u.measurement.action_code =
551 WLAN_ACTION_SPCT_MSR_RPRT;
552 msr_report->u.action.u.measurement.dialog_token = dialog_token;
554 msr_report->u.action.u.measurement.element_id = WLAN_EID_MEASURE_REPORT;
555 msr_report->u.action.u.measurement.length =
556 sizeof(struct ieee80211_msrment_ie);
558 memset(&msr_report->u.action.u.measurement.msr_elem, 0,
559 sizeof(struct ieee80211_msrment_ie));
560 msr_report->u.action.u.measurement.msr_elem.token = request_ie->token;
561 msr_report->u.action.u.measurement.msr_elem.mode |=
562 IEEE80211_SPCT_MSR_RPRT_MODE_REFUSED;
563 msr_report->u.action.u.measurement.msr_elem.type = request_ie->type;
565 ieee80211_sta_tx(sdata, skb, 0);
569 static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
570 struct ieee80211_sta_bss *bss)
572 struct ieee80211_local *local = sdata->local;
573 int i, have_higher_than_11mbit = 0;
576 /* cf. IEEE 802.11 9.2.12 */
577 for (i = 0; i < bss->supp_rates_len; i++)
578 if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
579 have_higher_than_11mbit = 1;
581 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
582 have_higher_than_11mbit)
583 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
585 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
588 if (local->ops->conf_tx) {
589 struct ieee80211_tx_queue_params qparam;
591 memset(&qparam, 0, sizeof(qparam));
595 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
596 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE))
601 qparam.cw_max = 1023;
604 for (i = 0; i < local_to_hw(local)->queues; i++)
605 local->ops->conf_tx(local_to_hw(local), i, &qparam);
609 static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
610 struct ieee80211_if_sta *ifsta,
611 u8 *wmm_param, size_t wmm_param_len)
613 struct ieee80211_tx_queue_params params;
618 if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
624 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
626 count = wmm_param[6] & 0x0f;
627 if (count == ifsta->wmm_last_param_set)
629 ifsta->wmm_last_param_set = count;
632 left = wmm_param_len - 8;
634 memset(¶ms, 0, sizeof(params));
636 if (!local->ops->conf_tx)
640 for (; left >= 4; left -= 4, pos += 4) {
641 int aci = (pos[0] >> 5) & 0x03;
642 int acm = (pos[0] >> 4) & 0x01;
649 local->wmm_acm |= BIT(0) | BIT(3);
654 local->wmm_acm |= BIT(4) | BIT(5);
659 local->wmm_acm |= BIT(6) | BIT(7);
665 local->wmm_acm |= BIT(1) | BIT(2);
669 params.aifs = pos[0] & 0x0f;
670 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
671 params.cw_min = ecw2cw(pos[1] & 0x0f);
672 params.txop = get_unaligned_le16(pos + 2);
673 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
674 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
675 "cWmin=%d cWmax=%d txop=%d\n",
676 local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
677 params.cw_max, params.txop);
679 /* TODO: handle ACM (block TX, fallback to next lowest allowed
681 if (local->ops->conf_tx(local_to_hw(local), queue, ¶ms)) {
682 printk(KERN_DEBUG "%s: failed to set TX queue "
683 "parameters for queue %d\n", local->mdev->name, queue);
688 static u32 ieee80211_handle_protect_preamb(struct ieee80211_sub_if_data *sdata,
690 bool use_short_preamble)
692 struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
693 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
694 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
695 DECLARE_MAC_BUF(mac);
699 if (use_protection != bss_conf->use_cts_prot) {
700 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
701 if (net_ratelimit()) {
702 printk(KERN_DEBUG "%s: CTS protection %s (BSSID="
705 use_protection ? "enabled" : "disabled",
706 print_mac(mac, ifsta->bssid));
709 bss_conf->use_cts_prot = use_protection;
710 changed |= BSS_CHANGED_ERP_CTS_PROT;
713 if (use_short_preamble != bss_conf->use_short_preamble) {
714 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
715 if (net_ratelimit()) {
716 printk(KERN_DEBUG "%s: switched to %s barker preamble"
719 use_short_preamble ? "short" : "long",
720 print_mac(mac, ifsta->bssid));
723 bss_conf->use_short_preamble = use_short_preamble;
724 changed |= BSS_CHANGED_ERP_PREAMBLE;
730 static u32 ieee80211_handle_erp_ie(struct ieee80211_sub_if_data *sdata,
733 bool use_protection = (erp_value & WLAN_ERP_USE_PROTECTION) != 0;
734 bool use_short_preamble = (erp_value & WLAN_ERP_BARKER_PREAMBLE) == 0;
736 return ieee80211_handle_protect_preamb(sdata,
737 use_protection, use_short_preamble);
740 static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
741 struct ieee80211_sta_bss *bss)
745 if (bss->has_erp_value)
746 changed |= ieee80211_handle_erp_ie(sdata, bss->erp_value);
748 u16 capab = bss->capability;
749 changed |= ieee80211_handle_protect_preamb(sdata, false,
750 (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
756 static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
757 struct ieee80211_if_sta *ifsta)
759 union iwreq_data wrqu;
760 memset(&wrqu, 0, sizeof(wrqu));
761 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
762 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
763 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
764 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
767 static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
768 struct ieee80211_if_sta *ifsta)
770 union iwreq_data wrqu;
772 if (ifsta->assocreq_ies) {
773 memset(&wrqu, 0, sizeof(wrqu));
774 wrqu.data.length = ifsta->assocreq_ies_len;
775 wireless_send_event(sdata->dev, IWEVASSOCREQIE, &wrqu,
776 ifsta->assocreq_ies);
778 if (ifsta->assocresp_ies) {
779 memset(&wrqu, 0, sizeof(wrqu));
780 wrqu.data.length = ifsta->assocresp_ies_len;
781 wireless_send_event(sdata->dev, IWEVASSOCRESPIE, &wrqu,
782 ifsta->assocresp_ies);
787 static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
788 struct ieee80211_if_sta *ifsta)
790 struct ieee80211_local *local = sdata->local;
791 struct ieee80211_conf *conf = &local_to_hw(local)->conf;
792 u32 changed = BSS_CHANGED_ASSOC;
794 struct ieee80211_sta_bss *bss;
796 ifsta->flags |= IEEE80211_STA_ASSOCIATED;
798 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
801 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
802 conf->channel->center_freq,
803 ifsta->ssid, ifsta->ssid_len);
805 /* set timing information */
806 sdata->bss_conf.beacon_int = bss->beacon_int;
807 sdata->bss_conf.timestamp = bss->timestamp;
808 sdata->bss_conf.dtim_period = bss->dtim_period;
810 changed |= ieee80211_handle_bss_capability(sdata, bss);
812 ieee80211_rx_bss_put(local, bss);
815 if (conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
816 changed |= BSS_CHANGED_HT;
817 sdata->bss_conf.assoc_ht = 1;
818 sdata->bss_conf.ht_conf = &conf->ht_conf;
819 sdata->bss_conf.ht_bss_conf = &conf->ht_bss_conf;
822 ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
823 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
824 ieee80211_sta_send_associnfo(sdata, ifsta);
826 ifsta->last_probe = jiffies;
827 ieee80211_led_assoc(local, 1);
829 sdata->bss_conf.assoc = 1;
830 ieee80211_bss_info_change_notify(sdata, changed);
832 netif_tx_start_all_queues(sdata->dev);
833 netif_carrier_on(sdata->dev);
835 ieee80211_sta_send_apinfo(sdata, ifsta);
838 static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
839 struct ieee80211_if_sta *ifsta)
841 DECLARE_MAC_BUF(mac);
843 ifsta->direct_probe_tries++;
844 if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
845 printk(KERN_DEBUG "%s: direct probe to AP %s timed out\n",
846 sdata->dev->name, print_mac(mac, ifsta->bssid));
847 ifsta->state = IEEE80211_STA_MLME_DISABLED;
851 printk(KERN_DEBUG "%s: direct probe to AP %s try %d\n",
852 sdata->dev->name, print_mac(mac, ifsta->bssid),
853 ifsta->direct_probe_tries);
855 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
857 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
859 /* Direct probe is sent to broadcast address as some APs
860 * will not answer to direct packet in unassociated state.
862 ieee80211_send_probe_req(sdata, NULL,
863 ifsta->ssid, ifsta->ssid_len);
865 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
869 static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
870 struct ieee80211_if_sta *ifsta)
872 DECLARE_MAC_BUF(mac);
875 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
876 printk(KERN_DEBUG "%s: authentication with AP %s"
878 sdata->dev->name, print_mac(mac, ifsta->bssid));
879 ifsta->state = IEEE80211_STA_MLME_DISABLED;
883 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
884 printk(KERN_DEBUG "%s: authenticate with AP %s\n",
885 sdata->dev->name, print_mac(mac, ifsta->bssid));
887 ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
889 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
892 static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
893 struct ieee80211_if_sta *ifsta, bool deauth,
894 bool self_disconnected, u16 reason)
896 struct ieee80211_local *local = sdata->local;
897 struct sta_info *sta;
898 u32 changed = BSS_CHANGED_ASSOC;
902 sta = sta_info_get(local, ifsta->bssid);
909 ifsta->direct_probe_tries = 0;
910 ifsta->auth_tries = 0;
912 ifsta->assoc_scan_tries = 0;
913 ifsta->assoc_tries = 0;
915 netif_tx_stop_all_queues(sdata->dev);
916 netif_carrier_off(sdata->dev);
918 ieee80211_sta_tear_down_BA_sessions(sdata, sta->addr);
920 if (self_disconnected) {
922 ieee80211_send_deauth(sdata, ifsta, reason);
924 ieee80211_send_disassoc(sdata, ifsta, reason);
927 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
928 changed |= ieee80211_reset_erp_info(sdata);
930 if (sdata->bss_conf.assoc_ht)
931 changed |= BSS_CHANGED_HT;
933 sdata->bss_conf.assoc_ht = 0;
934 sdata->bss_conf.ht_conf = NULL;
935 sdata->bss_conf.ht_bss_conf = NULL;
937 ieee80211_led_assoc(local, 0);
938 sdata->bss_conf.assoc = 0;
940 ieee80211_sta_send_apinfo(sdata, ifsta);
942 if (self_disconnected)
943 ifsta->state = IEEE80211_STA_MLME_DISABLED;
945 sta_info_unlink(&sta);
949 sta_info_destroy(sta);
952 static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
954 if (!sdata || !sdata->default_key ||
955 sdata->default_key->conf.alg != ALG_WEP)
960 static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
961 struct ieee80211_if_sta *ifsta)
963 struct ieee80211_local *local = sdata->local;
964 struct ieee80211_sta_bss *bss;
969 if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
972 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
973 local->hw.conf.channel->center_freq,
974 ifsta->ssid, ifsta->ssid_len);
978 bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
979 wep_privacy = !!ieee80211_sta_wep_configured(sdata);
980 privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
982 ieee80211_rx_bss_put(local, bss);
984 if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
990 static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
991 struct ieee80211_if_sta *ifsta)
993 DECLARE_MAC_BUF(mac);
995 ifsta->assoc_tries++;
996 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
997 printk(KERN_DEBUG "%s: association with AP %s"
999 sdata->dev->name, print_mac(mac, ifsta->bssid));
1000 ifsta->state = IEEE80211_STA_MLME_DISABLED;
1004 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
1005 printk(KERN_DEBUG "%s: associate with AP %s\n",
1006 sdata->dev->name, print_mac(mac, ifsta->bssid));
1007 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
1008 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
1009 "mixed-cell disabled - abort association\n", sdata->dev->name);
1010 ifsta->state = IEEE80211_STA_MLME_DISABLED;
1014 ieee80211_send_assoc(sdata, ifsta);
1016 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
1020 static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
1021 struct ieee80211_if_sta *ifsta)
1023 struct ieee80211_local *local = sdata->local;
1024 struct sta_info *sta;
1026 DECLARE_MAC_BUF(mac);
1028 /* TODO: start monitoring current AP signal quality and number of
1029 * missed beacons. Scan other channels every now and then and search
1030 * for better APs. */
1031 /* TODO: remove expired BSSes */
1033 ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
1037 sta = sta_info_get(local, ifsta->bssid);
1039 printk(KERN_DEBUG "%s: No STA entry for own AP %s\n",
1040 sdata->dev->name, print_mac(mac, ifsta->bssid));
1044 if (time_after(jiffies,
1045 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
1046 if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
1047 printk(KERN_DEBUG "%s: No ProbeResp from "
1048 "current AP %s - assume out of "
1050 sdata->dev->name, print_mac(mac, ifsta->bssid));
1053 ieee80211_send_probe_req(sdata, ifsta->bssid,
1055 local->scan_ssid_len);
1056 ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
1058 ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
1059 if (time_after(jiffies, ifsta->last_probe +
1060 IEEE80211_PROBE_INTERVAL)) {
1061 ifsta->last_probe = jiffies;
1062 ieee80211_send_probe_req(sdata, ifsta->bssid,
1072 ieee80211_set_disassoc(sdata, ifsta, true, true,
1073 WLAN_REASON_PREV_AUTH_NOT_VALID);
1075 mod_timer(&ifsta->timer, jiffies +
1076 IEEE80211_MONITORING_INTERVAL);
1080 static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
1081 struct ieee80211_if_sta *ifsta)
1083 printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
1084 ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
1085 ieee80211_associate(sdata, ifsta);
1089 static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
1090 struct ieee80211_if_sta *ifsta,
1091 struct ieee80211_mgmt *mgmt,
1095 struct ieee802_11_elems elems;
1097 pos = mgmt->u.auth.variable;
1098 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1099 if (!elems.challenge)
1101 ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
1102 elems.challenge_len + 2, 1);
1106 * After accepting the AddBA Request we activated a timer,
1107 * resetting it after each frame that arrives from the originator.
1108 * if this timer expires ieee80211_sta_stop_rx_ba_session will be executed.
1110 static void sta_rx_agg_session_timer_expired(unsigned long data)
1112 /* not an elegant detour, but there is no choice as the timer passes
1113 * only one argument, and various sta_info are needed here, so init
1114 * flow in sta_info_create gives the TID as data, while the timer_to_id
1115 * array gives the sta through container_of */
1116 u8 *ptid = (u8 *)data;
1117 u8 *timer_to_id = ptid - *ptid;
1118 struct sta_info *sta = container_of(timer_to_id, struct sta_info,
1121 #ifdef CONFIG_MAC80211_HT_DEBUG
1122 printk(KERN_DEBUG "rx session timer expired on tid %d\n", (u16)*ptid);
1124 ieee80211_sta_stop_rx_ba_session(sta->sdata, sta->addr,
1125 (u16)*ptid, WLAN_BACK_TIMER,
1126 WLAN_REASON_QSTA_TIMEOUT);
1129 static void ieee80211_sta_process_addba_request(struct ieee80211_local *local,
1130 struct ieee80211_mgmt *mgmt,
1133 struct ieee80211_hw *hw = &local->hw;
1134 struct ieee80211_conf *conf = &hw->conf;
1135 struct sta_info *sta;
1136 struct tid_ampdu_rx *tid_agg_rx;
1137 u16 capab, tid, timeout, ba_policy, buf_size, start_seq_num, status;
1139 int ret = -EOPNOTSUPP;
1140 DECLARE_MAC_BUF(mac);
1144 sta = sta_info_get(local, mgmt->sa);
1150 /* extract session parameters from addba request frame */
1151 dialog_token = mgmt->u.action.u.addba_req.dialog_token;
1152 timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout);
1154 le16_to_cpu(mgmt->u.action.u.addba_req.start_seq_num) >> 4;
1156 capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab);
1157 ba_policy = (capab & IEEE80211_ADDBA_PARAM_POLICY_MASK) >> 1;
1158 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
1159 buf_size = (capab & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6;
1161 status = WLAN_STATUS_REQUEST_DECLINED;
1163 /* sanity check for incoming parameters:
1164 * check if configuration can support the BA policy
1165 * and if buffer size does not exceeds max value */
1166 if (((ba_policy != 1)
1167 && (!(conf->ht_conf.cap & IEEE80211_HT_CAP_DELAY_BA)))
1168 || (buf_size > IEEE80211_MAX_AMPDU_BUF)) {
1169 status = WLAN_STATUS_INVALID_QOS_PARAM;
1170 #ifdef CONFIG_MAC80211_HT_DEBUG
1171 if (net_ratelimit())
1172 printk(KERN_DEBUG "AddBA Req with bad params from "
1173 "%s on tid %u. policy %d, buffer size %d\n",
1174 print_mac(mac, mgmt->sa), tid, ba_policy,
1176 #endif /* CONFIG_MAC80211_HT_DEBUG */
1179 /* determine default buffer size */
1180 if (buf_size == 0) {
1181 struct ieee80211_supported_band *sband;
1183 sband = local->hw.wiphy->bands[conf->channel->band];
1184 buf_size = IEEE80211_MIN_AMPDU_BUF;
1185 buf_size = buf_size << sband->ht_info.ampdu_factor;
1189 /* examine state machine */
1190 spin_lock_bh(&sta->lock);
1192 if (sta->ampdu_mlme.tid_state_rx[tid] != HT_AGG_STATE_IDLE) {
1193 #ifdef CONFIG_MAC80211_HT_DEBUG
1194 if (net_ratelimit())
1195 printk(KERN_DEBUG "unexpected AddBA Req from "
1197 print_mac(mac, mgmt->sa), tid);
1198 #endif /* CONFIG_MAC80211_HT_DEBUG */
1202 /* prepare A-MPDU MLME for Rx aggregation */
1203 sta->ampdu_mlme.tid_rx[tid] =
1204 kmalloc(sizeof(struct tid_ampdu_rx), GFP_ATOMIC);
1205 if (!sta->ampdu_mlme.tid_rx[tid]) {
1206 #ifdef CONFIG_MAC80211_HT_DEBUG
1207 if (net_ratelimit())
1208 printk(KERN_ERR "allocate rx mlme to tid %d failed\n",
1214 sta->ampdu_mlme.tid_rx[tid]->session_timer.function =
1215 sta_rx_agg_session_timer_expired;
1216 sta->ampdu_mlme.tid_rx[tid]->session_timer.data =
1217 (unsigned long)&sta->timer_to_tid[tid];
1218 init_timer(&sta->ampdu_mlme.tid_rx[tid]->session_timer);
1220 tid_agg_rx = sta->ampdu_mlme.tid_rx[tid];
1222 /* prepare reordering buffer */
1223 tid_agg_rx->reorder_buf =
1224 kmalloc(buf_size * sizeof(struct sk_buff *), GFP_ATOMIC);
1225 if (!tid_agg_rx->reorder_buf) {
1226 #ifdef CONFIG_MAC80211_HT_DEBUG
1227 if (net_ratelimit())
1228 printk(KERN_ERR "can not allocate reordering buffer "
1229 "to tid %d\n", tid);
1231 kfree(sta->ampdu_mlme.tid_rx[tid]);
1234 memset(tid_agg_rx->reorder_buf, 0,
1235 buf_size * sizeof(struct sk_buff *));
1237 if (local->ops->ampdu_action)
1238 ret = local->ops->ampdu_action(hw, IEEE80211_AMPDU_RX_START,
1239 sta->addr, tid, &start_seq_num);
1240 #ifdef CONFIG_MAC80211_HT_DEBUG
1241 printk(KERN_DEBUG "Rx A-MPDU request on tid %d result %d\n", tid, ret);
1242 #endif /* CONFIG_MAC80211_HT_DEBUG */
1245 kfree(tid_agg_rx->reorder_buf);
1247 sta->ampdu_mlme.tid_rx[tid] = NULL;
1251 /* change state and send addba resp */
1252 sta->ampdu_mlme.tid_state_rx[tid] = HT_AGG_STATE_OPERATIONAL;
1253 tid_agg_rx->dialog_token = dialog_token;
1254 tid_agg_rx->ssn = start_seq_num;
1255 tid_agg_rx->head_seq_num = start_seq_num;
1256 tid_agg_rx->buf_size = buf_size;
1257 tid_agg_rx->timeout = timeout;
1258 tid_agg_rx->stored_mpdu_num = 0;
1259 status = WLAN_STATUS_SUCCESS;
1261 spin_unlock_bh(&sta->lock);
1264 ieee80211_send_addba_resp(sta->sdata, sta->addr, tid,
1265 dialog_token, status, 1, buf_size, timeout);
1269 static void ieee80211_sta_process_addba_resp(struct ieee80211_local *local,
1270 struct ieee80211_mgmt *mgmt,
1273 struct ieee80211_hw *hw = &local->hw;
1274 struct sta_info *sta;
1281 sta = sta_info_get(local, mgmt->sa);
1287 capab = le16_to_cpu(mgmt->u.action.u.addba_resp.capab);
1288 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
1290 state = &sta->ampdu_mlme.tid_state_tx[tid];
1292 spin_lock_bh(&sta->lock);
1294 if (!(*state & HT_ADDBA_REQUESTED_MSK)) {
1295 spin_unlock_bh(&sta->lock);
1296 goto addba_resp_exit;
1299 if (mgmt->u.action.u.addba_resp.dialog_token !=
1300 sta->ampdu_mlme.tid_tx[tid]->dialog_token) {
1301 spin_unlock_bh(&sta->lock);
1302 #ifdef CONFIG_MAC80211_HT_DEBUG
1303 printk(KERN_DEBUG "wrong addBA response token, tid %d\n", tid);
1304 #endif /* CONFIG_MAC80211_HT_DEBUG */
1305 goto addba_resp_exit;
1308 del_timer_sync(&sta->ampdu_mlme.tid_tx[tid]->addba_resp_timer);
1309 #ifdef CONFIG_MAC80211_HT_DEBUG
1310 printk(KERN_DEBUG "switched off addBA timer for tid %d \n", tid);
1311 #endif /* CONFIG_MAC80211_HT_DEBUG */
1312 if (le16_to_cpu(mgmt->u.action.u.addba_resp.status)
1313 == WLAN_STATUS_SUCCESS) {
1314 *state |= HT_ADDBA_RECEIVED_MSK;
1315 sta->ampdu_mlme.addba_req_num[tid] = 0;
1317 if (*state == HT_AGG_STATE_OPERATIONAL)
1318 ieee80211_wake_queue(hw, sta->tid_to_tx_q[tid]);
1320 spin_unlock_bh(&sta->lock);
1322 sta->ampdu_mlme.addba_req_num[tid]++;
1323 /* this will allow the state check in stop_BA_session */
1324 *state = HT_AGG_STATE_OPERATIONAL;
1325 spin_unlock_bh(&sta->lock);
1326 ieee80211_stop_tx_ba_session(hw, sta->addr, tid,
1327 WLAN_BACK_INITIATOR);
1334 static void ieee80211_sta_process_delba(struct ieee80211_sub_if_data *sdata,
1335 struct ieee80211_mgmt *mgmt, size_t len)
1337 struct ieee80211_local *local = sdata->local;
1338 struct sta_info *sta;
1341 DECLARE_MAC_BUF(mac);
1345 sta = sta_info_get(local, mgmt->sa);
1351 params = le16_to_cpu(mgmt->u.action.u.delba.params);
1352 tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
1353 initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;
1355 #ifdef CONFIG_MAC80211_HT_DEBUG
1356 if (net_ratelimit())
1357 printk(KERN_DEBUG "delba from %s (%s) tid %d reason code %d\n",
1358 print_mac(mac, mgmt->sa),
1359 initiator ? "initiator" : "recipient", tid,
1360 mgmt->u.action.u.delba.reason_code);
1361 #endif /* CONFIG_MAC80211_HT_DEBUG */
1363 if (initiator == WLAN_BACK_INITIATOR)
1364 ieee80211_sta_stop_rx_ba_session(sdata, sta->addr, tid,
1365 WLAN_BACK_INITIATOR, 0);
1366 else { /* WLAN_BACK_RECIPIENT */
1367 spin_lock_bh(&sta->lock);
1368 sta->ampdu_mlme.tid_state_tx[tid] =
1369 HT_AGG_STATE_OPERATIONAL;
1370 spin_unlock_bh(&sta->lock);
1371 ieee80211_stop_tx_ba_session(&local->hw, sta->addr, tid,
1372 WLAN_BACK_RECIPIENT);
1377 static void ieee80211_sta_process_measurement_req(struct ieee80211_sub_if_data *sdata,
1378 struct ieee80211_mgmt *mgmt,
1382 * Ignoring measurement request is spec violation.
1383 * Mandatory measurements must be reported optional
1384 * measurements might be refused or reported incapable
1385 * For now just refuse
1386 * TODO: Answer basic measurement as unmeasured
1388 ieee80211_send_refuse_measurement_request(sdata,
1389 &mgmt->u.action.u.measurement.msr_elem,
1390 mgmt->sa, mgmt->bssid,
1391 mgmt->u.action.u.measurement.dialog_token);
1395 static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
1396 struct ieee80211_if_sta *ifsta,
1397 struct ieee80211_mgmt *mgmt,
1400 u16 auth_alg, auth_transaction, status_code;
1401 DECLARE_MAC_BUF(mac);
1403 if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
1404 sdata->vif.type != IEEE80211_IF_TYPE_IBSS)
1410 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
1411 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1414 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
1415 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1418 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1419 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1420 status_code = le16_to_cpu(mgmt->u.auth.status_code);
1422 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
1424 * IEEE 802.11 standard does not require authentication in IBSS
1425 * networks and most implementations do not seem to use it.
1426 * However, try to reply to authentication attempts if someone
1427 * has actually implemented this.
1429 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
1431 ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
1434 if (auth_alg != ifsta->auth_alg ||
1435 auth_transaction != ifsta->auth_transaction)
1438 if (status_code != WLAN_STATUS_SUCCESS) {
1439 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1441 const int num_algs = ARRAY_SIZE(algs);
1443 algs[0] = algs[1] = algs[2] = 0xff;
1444 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1445 algs[0] = WLAN_AUTH_OPEN;
1446 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1447 algs[1] = WLAN_AUTH_SHARED_KEY;
1448 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1449 algs[2] = WLAN_AUTH_LEAP;
1450 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1452 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1456 for (i = 0; i < num_algs; i++) {
1458 if (pos >= num_algs)
1460 if (algs[pos] == ifsta->auth_alg ||
1463 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
1464 !ieee80211_sta_wep_configured(sdata))
1466 ifsta->auth_alg = algs[pos];
1473 switch (ifsta->auth_alg) {
1474 case WLAN_AUTH_OPEN:
1475 case WLAN_AUTH_LEAP:
1476 ieee80211_auth_completed(sdata, ifsta);
1478 case WLAN_AUTH_SHARED_KEY:
1479 if (ifsta->auth_transaction == 4)
1480 ieee80211_auth_completed(sdata, ifsta);
1482 ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
1488 static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
1489 struct ieee80211_if_sta *ifsta,
1490 struct ieee80211_mgmt *mgmt,
1494 DECLARE_MAC_BUF(mac);
1499 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1502 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1504 if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
1505 printk(KERN_DEBUG "%s: deauthenticated\n", sdata->dev->name);
1507 if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1508 ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1509 ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1510 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
1511 mod_timer(&ifsta->timer, jiffies +
1512 IEEE80211_RETRY_AUTH_INTERVAL);
1515 ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
1516 ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
1520 static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
1521 struct ieee80211_if_sta *ifsta,
1522 struct ieee80211_mgmt *mgmt,
1526 DECLARE_MAC_BUF(mac);
1531 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1534 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1536 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
1537 printk(KERN_DEBUG "%s: disassociated\n", sdata->dev->name);
1539 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1540 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
1541 mod_timer(&ifsta->timer, jiffies +
1542 IEEE80211_RETRY_AUTH_INTERVAL);
1545 ieee80211_set_disassoc(sdata, ifsta, false, false, 0);
1549 static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
1550 struct ieee80211_if_sta *ifsta,
1551 struct ieee80211_mgmt *mgmt,
1555 struct ieee80211_local *local = sdata->local;
1556 struct ieee80211_supported_band *sband;
1557 struct sta_info *sta;
1558 u64 rates, basic_rates;
1559 u16 capab_info, status_code, aid;
1560 struct ieee802_11_elems elems;
1561 struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
1564 DECLARE_MAC_BUF(mac);
1565 bool have_higher_than_11mbit = false;
1567 /* AssocResp and ReassocResp have identical structure, so process both
1568 * of them in this function. */
1570 if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
1576 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1579 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1580 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1581 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
1583 printk(KERN_DEBUG "%s: RX %sssocResp from %s (capab=0x%x "
1584 "status=%d aid=%d)\n",
1585 sdata->dev->name, reassoc ? "Rea" : "A", print_mac(mac, mgmt->sa),
1586 capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
1588 if (status_code != WLAN_STATUS_SUCCESS) {
1589 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
1590 sdata->dev->name, status_code);
1591 /* if this was a reassociation, ensure we try a "full"
1592 * association next time. This works around some broken APs
1593 * which do not correctly reject reassociation requests. */
1594 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
1598 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1599 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
1600 "set\n", sdata->dev->name, aid);
1601 aid &= ~(BIT(15) | BIT(14));
1603 pos = mgmt->u.assoc_resp.variable;
1604 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1606 if (!elems.supp_rates) {
1607 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
1612 printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
1614 ifsta->ap_capab = capab_info;
1616 kfree(ifsta->assocresp_ies);
1617 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
1618 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
1619 if (ifsta->assocresp_ies)
1620 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1624 /* Add STA entry for the AP */
1625 sta = sta_info_get(local, ifsta->bssid);
1627 struct ieee80211_sta_bss *bss;
1630 sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1632 printk(KERN_DEBUG "%s: failed to alloc STA entry for"
1633 " the AP\n", sdata->dev->name);
1637 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1638 local->hw.conf.channel->center_freq,
1639 ifsta->ssid, ifsta->ssid_len);
1641 sta->last_signal = bss->signal;
1642 sta->last_qual = bss->qual;
1643 sta->last_noise = bss->noise;
1644 ieee80211_rx_bss_put(local, bss);
1647 err = sta_info_insert(sta);
1649 printk(KERN_DEBUG "%s: failed to insert STA entry for"
1650 " the AP (error %d)\n", sdata->dev->name, err);
1654 /* update new sta with its last rx activity */
1655 sta->last_rx = jiffies;
1659 * FIXME: Do we really need to update the sta_info's information here?
1660 * We already know about the AP (we found it in our list) so it
1661 * should already be filled with the right info, no?
1662 * As is stands, all this is racy because typically we assume
1663 * the information that is filled in here (except flags) doesn't
1664 * change while a STA structure is alive. As such, it should move
1665 * to between the sta_info_alloc() and sta_info_insert() above.
1668 set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1669 WLAN_STA_AUTHORIZED);
1673 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1675 for (i = 0; i < elems.supp_rates_len; i++) {
1676 int rate = (elems.supp_rates[i] & 0x7f) * 5;
1679 have_higher_than_11mbit = true;
1681 for (j = 0; j < sband->n_bitrates; j++) {
1682 if (sband->bitrates[j].bitrate == rate)
1684 if (elems.supp_rates[i] & 0x80)
1685 basic_rates |= BIT(j);
1689 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1690 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
1693 have_higher_than_11mbit = true;
1695 for (j = 0; j < sband->n_bitrates; j++) {
1696 if (sband->bitrates[j].bitrate == rate)
1698 if (elems.ext_supp_rates[i] & 0x80)
1699 basic_rates |= BIT(j);
1703 sta->supp_rates[local->hw.conf.channel->band] = rates;
1704 sdata->basic_rates = basic_rates;
1706 /* cf. IEEE 802.11 9.2.12 */
1707 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1708 have_higher_than_11mbit)
1709 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1711 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
1713 if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param &&
1714 (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
1715 struct ieee80211_ht_bss_info bss_info;
1716 ieee80211_ht_cap_ie_to_ht_info(
1717 (struct ieee80211_ht_cap *)
1718 elems.ht_cap_elem, &sta->ht_info);
1719 ieee80211_ht_addt_info_ie_to_ht_bss_info(
1720 (struct ieee80211_ht_addt_info *)
1721 elems.ht_info_elem, &bss_info);
1722 ieee80211_handle_ht(local, 1, &sta->ht_info, &bss_info);
1725 rate_control_rate_init(sta, local);
1727 if (elems.wmm_param) {
1728 set_sta_flags(sta, WLAN_STA_WME);
1730 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1731 elems.wmm_param_len);
1735 /* set AID and assoc capability,
1736 * ieee80211_set_associated() will tell the driver */
1737 bss_conf->aid = aid;
1738 bss_conf->assoc_capability = capab_info;
1739 ieee80211_set_associated(sdata, ifsta);
1741 ieee80211_associated(sdata, ifsta);
1745 static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
1746 struct ieee80211_if_sta *ifsta,
1747 struct ieee80211_sta_bss *bss)
1749 struct ieee80211_local *local = sdata->local;
1750 int res, rates, i, j;
1751 struct sk_buff *skb;
1752 struct ieee80211_mgmt *mgmt;
1754 struct ieee80211_supported_band *sband;
1755 union iwreq_data wrqu;
1757 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1759 /* Remove possible STA entries from other IBSS networks. */
1760 sta_info_flush_delayed(sdata);
1762 if (local->ops->reset_tsf) {
1763 /* Reset own TSF to allow time synchronization work. */
1764 local->ops->reset_tsf(local_to_hw(local));
1766 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
1767 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
1771 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1773 sdata->drop_unencrypted = bss->capability &
1774 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1776 res = ieee80211_set_freq(sdata, bss->freq);
1781 /* Build IBSS probe response */
1782 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1784 skb_reserve(skb, local->hw.extra_tx_headroom);
1786 mgmt = (struct ieee80211_mgmt *)
1787 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1788 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1789 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1790 IEEE80211_STYPE_PROBE_RESP);
1791 memset(mgmt->da, 0xff, ETH_ALEN);
1792 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1793 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1794 mgmt->u.beacon.beacon_int =
1795 cpu_to_le16(local->hw.conf.beacon_int);
1796 mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1797 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
1799 pos = skb_put(skb, 2 + ifsta->ssid_len);
1800 *pos++ = WLAN_EID_SSID;
1801 *pos++ = ifsta->ssid_len;
1802 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
1804 rates = bss->supp_rates_len;
1807 pos = skb_put(skb, 2 + rates);
1808 *pos++ = WLAN_EID_SUPP_RATES;
1810 memcpy(pos, bss->supp_rates, rates);
1812 if (bss->band == IEEE80211_BAND_2GHZ) {
1813 pos = skb_put(skb, 2 + 1);
1814 *pos++ = WLAN_EID_DS_PARAMS;
1816 *pos++ = ieee80211_frequency_to_channel(bss->freq);
1819 pos = skb_put(skb, 2 + 2);
1820 *pos++ = WLAN_EID_IBSS_PARAMS;
1822 /* FIX: set ATIM window based on scan results */
1826 if (bss->supp_rates_len > 8) {
1827 rates = bss->supp_rates_len - 8;
1828 pos = skb_put(skb, 2 + rates);
1829 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1831 memcpy(pos, &bss->supp_rates[8], rates);
1834 ifsta->probe_resp = skb;
1836 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1840 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1841 for (i = 0; i < bss->supp_rates_len; i++) {
1842 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1843 for (j = 0; j < sband->n_bitrates; j++)
1844 if (sband->bitrates[j].bitrate == bitrate)
1847 ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1849 ieee80211_sta_def_wmm_params(sdata, bss);
1851 ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
1852 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1854 memset(&wrqu, 0, sizeof(wrqu));
1855 memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
1856 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
1861 u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
1862 struct ieee802_11_elems *elems,
1863 enum ieee80211_band band)
1865 struct ieee80211_supported_band *sband;
1866 struct ieee80211_rate *bitrates;
1870 sband = local->hw.wiphy->bands[band];
1874 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1877 bitrates = sband->bitrates;
1878 num_rates = sband->n_bitrates;
1880 for (i = 0; i < elems->supp_rates_len +
1881 elems->ext_supp_rates_len; i++) {
1884 if (i < elems->supp_rates_len)
1885 rate = elems->supp_rates[i];
1886 else if (elems->ext_supp_rates)
1887 rate = elems->ext_supp_rates
1888 [i - elems->supp_rates_len];
1889 own_rate = 5 * (rate & 0x7f);
1890 for (j = 0; j < num_rates; j++)
1891 if (bitrates[j].bitrate == own_rate)
1892 supp_rates |= BIT(j);
1897 static u64 ieee80211_sta_get_mandatory_rates(struct ieee80211_local *local,
1898 enum ieee80211_band band)
1900 struct ieee80211_supported_band *sband;
1901 struct ieee80211_rate *bitrates;
1902 u64 mandatory_rates;
1903 enum ieee80211_rate_flags mandatory_flag;
1906 sband = local->hw.wiphy->bands[band];
1909 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1912 if (band == IEEE80211_BAND_2GHZ)
1913 mandatory_flag = IEEE80211_RATE_MANDATORY_B;
1915 mandatory_flag = IEEE80211_RATE_MANDATORY_A;
1917 bitrates = sband->bitrates;
1918 mandatory_rates = 0;
1919 for (i = 0; i < sband->n_bitrates; i++)
1920 if (bitrates[i].flags & mandatory_flag)
1921 mandatory_rates |= BIT(i);
1922 return mandatory_rates;
1925 static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1926 struct ieee80211_mgmt *mgmt,
1928 struct ieee80211_rx_status *rx_status,
1929 struct ieee802_11_elems *elems,
1932 struct ieee80211_local *local = sdata->local;
1934 struct ieee80211_sta_bss *bss;
1935 struct sta_info *sta;
1936 struct ieee80211_channel *channel;
1937 u64 beacon_timestamp, rx_timestamp;
1939 enum ieee80211_band band = rx_status->band;
1940 DECLARE_MAC_BUF(mac);
1941 DECLARE_MAC_BUF(mac2);
1943 if (elems->ds_params && elems->ds_params_len == 1)
1944 freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1946 freq = rx_status->freq;
1948 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1950 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1953 if (ieee80211_vif_is_mesh(&sdata->vif) && elems->mesh_id &&
1954 elems->mesh_config && mesh_matches_local(elems, sdata)) {
1955 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1957 mesh_neighbour_update(mgmt->sa, supp_rates, sdata,
1958 mesh_peer_accepts_plinks(elems));
1961 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && elems->supp_rates &&
1962 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1963 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1967 sta = sta_info_get(local, mgmt->sa);
1971 prev_rates = sta->supp_rates[band];
1972 /* make sure mandatory rates are always added */
1973 sta->supp_rates[band] = supp_rates |
1974 ieee80211_sta_get_mandatory_rates(local, band);
1976 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1977 if (sta->supp_rates[band] != prev_rates)
1978 printk(KERN_DEBUG "%s: updated supp_rates set "
1979 "for %s based on beacon info (0x%llx | "
1980 "0x%llx -> 0x%llx)\n",
1981 sdata->dev->name, print_mac(mac, sta->addr),
1982 (unsigned long long) prev_rates,
1983 (unsigned long long) supp_rates,
1984 (unsigned long long) sta->supp_rates[band]);
1987 ieee80211_ibss_add_sta(sdata, NULL, mgmt->bssid,
1988 mgmt->sa, supp_rates);
1994 bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1999 /* was just updated in ieee80211_bss_info_update */
2000 beacon_timestamp = bss->timestamp;
2003 * In STA mode, the remaining parameters should not be overridden
2004 * by beacons because they're not necessarily accurate there.
2006 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
2007 bss->last_probe_resp && beacon) {
2008 ieee80211_rx_bss_put(local, bss);
2012 /* check if we need to merge IBSS */
2013 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS && beacon &&
2014 bss->capability & WLAN_CAPABILITY_IBSS &&
2015 bss->freq == local->oper_channel->center_freq &&
2016 elems->ssid_len == sdata->u.sta.ssid_len &&
2017 memcmp(elems->ssid, sdata->u.sta.ssid,
2018 sdata->u.sta.ssid_len) == 0) {
2019 if (rx_status->flag & RX_FLAG_TSFT) {
2020 /* in order for correct IBSS merging we need mactime
2022 * since mactime is defined as the time the first data
2023 * symbol of the frame hits the PHY, and the timestamp
2024 * of the beacon is defined as "the time that the data
2025 * symbol containing the first bit of the timestamp is
2026 * transmitted to the PHY plus the transmitting STA’s
2027 * delays through its local PHY from the MAC-PHY
2028 * interface to its interface with the WM"
2029 * (802.11 11.1.2) - equals the time this bit arrives at
2030 * the receiver - we have to take into account the
2031 * offset between the two.
2032 * e.g: at 1 MBit that means mactime is 192 usec earlier
2033 * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
2035 int rate = local->hw.wiphy->bands[band]->
2036 bitrates[rx_status->rate_idx].bitrate;
2037 rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
2038 } else if (local && local->ops && local->ops->get_tsf)
2039 /* second best option: get current TSF */
2040 rx_timestamp = local->ops->get_tsf(local_to_hw(local));
2042 /* can't merge without knowing the TSF */
2043 rx_timestamp = -1LLU;
2044 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2045 printk(KERN_DEBUG "RX beacon SA=%s BSSID="
2046 "%s TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
2047 print_mac(mac, mgmt->sa),
2048 print_mac(mac2, mgmt->bssid),
2049 (unsigned long long)rx_timestamp,
2050 (unsigned long long)beacon_timestamp,
2051 (unsigned long long)(rx_timestamp - beacon_timestamp),
2053 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2054 if (beacon_timestamp > rx_timestamp) {
2055 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2056 printk(KERN_DEBUG "%s: beacon TSF higher than "
2057 "local TSF - IBSS merge with BSSID %s\n",
2058 sdata->dev->name, print_mac(mac, mgmt->bssid));
2060 ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
2061 ieee80211_ibss_add_sta(sdata, NULL,
2062 mgmt->bssid, mgmt->sa,
2067 ieee80211_rx_bss_put(local, bss);
2071 static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
2072 struct ieee80211_mgmt *mgmt,
2074 struct ieee80211_rx_status *rx_status)
2077 struct ieee802_11_elems elems;
2078 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2080 if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
2081 return; /* ignore ProbeResp to foreign address */
2083 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
2087 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
2090 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
2092 /* direct probe may be part of the association flow */
2093 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
2095 printk(KERN_DEBUG "%s direct probe responded\n",
2097 ieee80211_authenticate(sdata, ifsta);
2102 static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
2103 struct ieee80211_mgmt *mgmt,
2105 struct ieee80211_rx_status *rx_status)
2107 struct ieee80211_if_sta *ifsta;
2109 struct ieee802_11_elems elems;
2110 struct ieee80211_local *local = sdata->local;
2111 struct ieee80211_conf *conf = &local->hw.conf;
2114 /* Process beacon from the current BSS */
2115 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
2119 ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
2121 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
2123 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2125 ifsta = &sdata->u.sta;
2127 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
2128 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
2131 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
2132 elems.wmm_param_len);
2134 if (elems.erp_info && elems.erp_info_len >= 1)
2135 changed |= ieee80211_handle_erp_ie(sdata, elems.erp_info[0]);
2137 u16 capab = le16_to_cpu(mgmt->u.beacon.capab_info);
2138 changed |= ieee80211_handle_protect_preamb(sdata, false,
2139 (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
2142 if (elems.ht_cap_elem && elems.ht_info_elem &&
2143 elems.wmm_param && conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
2144 struct ieee80211_ht_bss_info bss_info;
2146 ieee80211_ht_addt_info_ie_to_ht_bss_info(
2147 (struct ieee80211_ht_addt_info *)
2148 elems.ht_info_elem, &bss_info);
2149 changed |= ieee80211_handle_ht(local, 1, &conf->ht_conf,
2153 ieee80211_bss_info_change_notify(sdata, changed);
2157 static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
2158 struct ieee80211_if_sta *ifsta,
2159 struct ieee80211_mgmt *mgmt,
2161 struct ieee80211_rx_status *rx_status)
2163 struct ieee80211_local *local = sdata->local;
2165 struct sk_buff *skb;
2166 struct ieee80211_mgmt *resp;
2168 DECLARE_MAC_BUF(mac);
2169 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2170 DECLARE_MAC_BUF(mac2);
2171 DECLARE_MAC_BUF(mac3);
2174 if (sdata->vif.type != IEEE80211_IF_TYPE_IBSS ||
2175 ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
2176 len < 24 + 2 || !ifsta->probe_resp)
2179 if (local->ops->tx_last_beacon)
2180 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
2184 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2185 printk(KERN_DEBUG "%s: RX ProbeReq SA=%s DA=%s BSSID="
2186 "%s (tx_last_beacon=%d)\n",
2187 sdata->dev->name, print_mac(mac, mgmt->sa), print_mac(mac2, mgmt->da),
2188 print_mac(mac3, mgmt->bssid), tx_last_beacon);
2189 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2191 if (!tx_last_beacon)
2194 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
2195 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
2198 end = ((u8 *) mgmt) + len;
2199 pos = mgmt->u.probe_req.variable;
2200 if (pos[0] != WLAN_EID_SSID ||
2201 pos + 2 + pos[1] > end) {
2202 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2203 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
2205 sdata->dev->name, print_mac(mac, mgmt->sa));
2210 (pos[1] != ifsta->ssid_len ||
2211 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
2212 /* Ignore ProbeReq for foreign SSID */
2216 /* Reply with ProbeResp */
2217 skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
2221 resp = (struct ieee80211_mgmt *) skb->data;
2222 memcpy(resp->da, mgmt->sa, ETH_ALEN);
2223 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2224 printk(KERN_DEBUG "%s: Sending ProbeResp to %s\n",
2225 sdata->dev->name, print_mac(mac, resp->da));
2226 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2227 ieee80211_sta_tx(sdata, skb, 0);
2230 static void ieee80211_rx_mgmt_action(struct ieee80211_sub_if_data *sdata,
2231 struct ieee80211_if_sta *ifsta,
2232 struct ieee80211_mgmt *mgmt,
2234 struct ieee80211_rx_status *rx_status)
2236 struct ieee80211_local *local = sdata->local;
2238 /* all categories we currently handle have action_code */
2239 if (len < IEEE80211_MIN_ACTION_SIZE + 1)
2242 switch (mgmt->u.action.category) {
2243 case WLAN_CATEGORY_SPECTRUM_MGMT:
2244 if (local->hw.conf.channel->band != IEEE80211_BAND_5GHZ)
2246 switch (mgmt->u.action.u.measurement.action_code) {
2247 case WLAN_ACTION_SPCT_MSR_REQ:
2248 if (len < (IEEE80211_MIN_ACTION_SIZE +
2249 sizeof(mgmt->u.action.u.measurement)))
2251 ieee80211_sta_process_measurement_req(sdata, mgmt, len);
2255 case WLAN_CATEGORY_BACK:
2256 switch (mgmt->u.action.u.addba_req.action_code) {
2257 case WLAN_ACTION_ADDBA_REQ:
2258 if (len < (IEEE80211_MIN_ACTION_SIZE +
2259 sizeof(mgmt->u.action.u.addba_req)))
2261 ieee80211_sta_process_addba_request(local, mgmt, len);
2263 case WLAN_ACTION_ADDBA_RESP:
2264 if (len < (IEEE80211_MIN_ACTION_SIZE +
2265 sizeof(mgmt->u.action.u.addba_resp)))
2267 ieee80211_sta_process_addba_resp(local, mgmt, len);
2269 case WLAN_ACTION_DELBA:
2270 if (len < (IEEE80211_MIN_ACTION_SIZE +
2271 sizeof(mgmt->u.action.u.delba)))
2273 ieee80211_sta_process_delba(sdata, mgmt, len);
2277 case PLINK_CATEGORY:
2278 if (ieee80211_vif_is_mesh(&sdata->vif))
2279 mesh_rx_plink_frame(sdata, mgmt, len, rx_status);
2281 case MESH_PATH_SEL_CATEGORY:
2282 if (ieee80211_vif_is_mesh(&sdata->vif))
2283 mesh_rx_path_sel_frame(sdata, mgmt, len);
2288 void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
2289 struct ieee80211_rx_status *rx_status)
2291 struct ieee80211_local *local = sdata->local;
2292 struct ieee80211_if_sta *ifsta;
2293 struct ieee80211_mgmt *mgmt;
2299 ifsta = &sdata->u.sta;
2301 mgmt = (struct ieee80211_mgmt *) skb->data;
2302 fc = le16_to_cpu(mgmt->frame_control);
2304 switch (fc & IEEE80211_FCTL_STYPE) {
2305 case IEEE80211_STYPE_PROBE_REQ:
2306 case IEEE80211_STYPE_PROBE_RESP:
2307 case IEEE80211_STYPE_BEACON:
2308 case IEEE80211_STYPE_ACTION:
2309 memcpy(skb->cb, rx_status, sizeof(*rx_status));
2310 case IEEE80211_STYPE_AUTH:
2311 case IEEE80211_STYPE_ASSOC_RESP:
2312 case IEEE80211_STYPE_REASSOC_RESP:
2313 case IEEE80211_STYPE_DEAUTH:
2314 case IEEE80211_STYPE_DISASSOC:
2315 skb_queue_tail(&ifsta->skb_queue, skb);
2316 queue_work(local->hw.workqueue, &ifsta->work);
2324 static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
2325 struct sk_buff *skb)
2327 struct ieee80211_rx_status *rx_status;
2328 struct ieee80211_if_sta *ifsta;
2329 struct ieee80211_mgmt *mgmt;
2332 ifsta = &sdata->u.sta;
2334 rx_status = (struct ieee80211_rx_status *) skb->cb;
2335 mgmt = (struct ieee80211_mgmt *) skb->data;
2336 fc = le16_to_cpu(mgmt->frame_control);
2338 switch (fc & IEEE80211_FCTL_STYPE) {
2339 case IEEE80211_STYPE_PROBE_REQ:
2340 ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len,
2343 case IEEE80211_STYPE_PROBE_RESP:
2344 ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
2346 case IEEE80211_STYPE_BEACON:
2347 ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
2349 case IEEE80211_STYPE_AUTH:
2350 ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
2352 case IEEE80211_STYPE_ASSOC_RESP:
2353 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
2355 case IEEE80211_STYPE_REASSOC_RESP:
2356 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
2358 case IEEE80211_STYPE_DEAUTH:
2359 ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
2361 case IEEE80211_STYPE_DISASSOC:
2362 ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
2364 case IEEE80211_STYPE_ACTION:
2365 ieee80211_rx_mgmt_action(sdata, ifsta, mgmt, skb->len, rx_status);
2373 static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
2375 struct ieee80211_local *local = sdata->local;
2377 struct sta_info *sta;
2381 list_for_each_entry_rcu(sta, &local->sta_list, list) {
2382 if (sta->sdata == sdata &&
2383 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
2396 static void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, unsigned long exp_time)
2398 struct ieee80211_local *local = sdata->local;
2399 struct sta_info *sta, *tmp;
2400 LIST_HEAD(tmp_list);
2401 DECLARE_MAC_BUF(mac);
2402 unsigned long flags;
2404 spin_lock_irqsave(&local->sta_lock, flags);
2405 list_for_each_entry_safe(sta, tmp, &local->sta_list, list)
2406 if (time_after(jiffies, sta->last_rx + exp_time)) {
2407 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2408 printk(KERN_DEBUG "%s: expiring inactive STA %s\n",
2409 sdata->dev->name, print_mac(mac, sta->addr));
2411 __sta_info_unlink(&sta);
2413 list_add(&sta->list, &tmp_list);
2415 spin_unlock_irqrestore(&local->sta_lock, flags);
2417 list_for_each_entry_safe(sta, tmp, &tmp_list, list)
2418 sta_info_destroy(sta);
2422 static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
2423 struct ieee80211_if_sta *ifsta)
2425 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2427 ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
2428 if (ieee80211_sta_active_ibss(sdata))
2431 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
2432 "IBSS networks with same SSID (merge)\n", sdata->dev->name);
2433 ieee80211_sta_req_scan(sdata, ifsta->ssid, ifsta->ssid_len);
2437 #ifdef CONFIG_MAC80211_MESH
2438 static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata,
2439 struct ieee80211_if_sta *ifsta)
2443 ieee80211_sta_expire(sdata, IEEE80211_MESH_PEER_INACTIVITY_LIMIT);
2444 mesh_path_expire(sdata);
2446 free_plinks = mesh_plink_availables(sdata);
2447 if (free_plinks != sdata->u.sta.accepting_plinks)
2448 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
2450 mod_timer(&ifsta->timer, jiffies +
2451 IEEE80211_MESH_HOUSEKEEPING_INTERVAL);
2455 void ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata)
2457 struct ieee80211_if_sta *ifsta;
2458 ifsta = &sdata->u.sta;
2459 ifsta->state = IEEE80211_STA_MLME_MESH_UP;
2460 ieee80211_sta_timer((unsigned long)sdata);
2461 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
2466 void ieee80211_sta_timer(unsigned long data)
2468 struct ieee80211_sub_if_data *sdata =
2469 (struct ieee80211_sub_if_data *) data;
2470 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2471 struct ieee80211_local *local = sdata->local;
2473 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2474 queue_work(local->hw.workqueue, &ifsta->work);
2477 static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
2478 struct ieee80211_if_sta *ifsta)
2480 struct ieee80211_local *local = sdata->local;
2482 if (local->ops->reset_tsf) {
2483 /* Reset own TSF to allow time synchronization work. */
2484 local->ops->reset_tsf(local_to_hw(local));
2487 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2490 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2491 ifsta->auth_alg = WLAN_AUTH_OPEN;
2492 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2493 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2494 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2495 ifsta->auth_alg = WLAN_AUTH_LEAP;
2497 ifsta->auth_alg = WLAN_AUTH_OPEN;
2498 ifsta->auth_transaction = -1;
2499 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
2500 ifsta->assoc_scan_tries = 0;
2501 ifsta->direct_probe_tries = 0;
2502 ifsta->auth_tries = 0;
2503 ifsta->assoc_tries = 0;
2504 netif_tx_stop_all_queues(sdata->dev);
2505 netif_carrier_off(sdata->dev);
2509 void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2510 struct ieee80211_if_sta *ifsta)
2512 struct ieee80211_local *local = sdata->local;
2514 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2517 if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2518 IEEE80211_STA_AUTO_BSSID_SEL)) &&
2519 (ifsta->flags & (IEEE80211_STA_SSID_SET |
2520 IEEE80211_STA_AUTO_SSID_SEL))) {
2522 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2523 ieee80211_set_disassoc(sdata, ifsta, true, true,
2524 WLAN_REASON_DEAUTH_LEAVING);
2526 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2527 queue_work(local->hw.workqueue, &ifsta->work);
2531 static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2532 const char *ssid, int ssid_len)
2534 int tmp, hidden_ssid;
2536 if (ssid_len == ifsta->ssid_len &&
2537 !memcmp(ifsta->ssid, ssid, ssid_len))
2540 if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
2546 if (ssid[tmp] != '\0') {
2552 if (hidden_ssid && ifsta->ssid_len == ssid_len)
2555 if (ssid_len == 1 && ssid[0] == ' ')
2561 static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
2562 struct ieee80211_if_sta *ifsta)
2564 struct ieee80211_local *local = sdata->local;
2565 struct ieee80211_sta_bss *bss;
2566 struct ieee80211_supported_band *sband;
2567 u8 bssid[ETH_ALEN], *pos;
2570 DECLARE_MAC_BUF(mac);
2573 /* Easier testing, use fixed BSSID. */
2574 memset(bssid, 0xfe, ETH_ALEN);
2576 /* Generate random, not broadcast, locally administered BSSID. Mix in
2577 * own MAC address to make sure that devices that do not have proper
2578 * random number generator get different BSSID. */
2579 get_random_bytes(bssid, ETH_ALEN);
2580 for (i = 0; i < ETH_ALEN; i++)
2581 bssid[i] ^= sdata->dev->dev_addr[i];
2586 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %s\n",
2587 sdata->dev->name, print_mac(mac, bssid));
2589 bss = ieee80211_rx_bss_add(local, bssid,
2590 local->hw.conf.channel->center_freq,
2591 sdata->u.sta.ssid, sdata->u.sta.ssid_len);
2595 bss->band = local->hw.conf.channel->band;
2596 sband = local->hw.wiphy->bands[bss->band];
2598 if (local->hw.conf.beacon_int == 0)
2599 local->hw.conf.beacon_int = 100;
2600 bss->beacon_int = local->hw.conf.beacon_int;
2601 bss->last_update = jiffies;
2602 bss->capability = WLAN_CAPABILITY_IBSS;
2604 if (sdata->default_key)
2605 bss->capability |= WLAN_CAPABILITY_PRIVACY;
2607 sdata->drop_unencrypted = 0;
2609 bss->supp_rates_len = sband->n_bitrates;
2610 pos = bss->supp_rates;
2611 for (i = 0; i < sband->n_bitrates; i++) {
2612 int rate = sband->bitrates[i].bitrate;
2613 *pos++ = (u8) (rate / 5);
2616 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2617 ieee80211_rx_bss_put(local, bss);
2622 static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
2623 struct ieee80211_if_sta *ifsta)
2625 struct ieee80211_local *local = sdata->local;
2626 struct ieee80211_sta_bss *bss;
2630 DECLARE_MAC_BUF(mac);
2631 DECLARE_MAC_BUF(mac2);
2633 if (ifsta->ssid_len == 0)
2636 active_ibss = ieee80211_sta_active_ibss(sdata);
2637 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2638 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
2639 sdata->dev->name, active_ibss);
2640 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2641 spin_lock_bh(&local->sta_bss_lock);
2642 list_for_each_entry(bss, &local->sta_bss_list, list) {
2643 if (ifsta->ssid_len != bss->ssid_len ||
2644 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2645 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2647 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2648 printk(KERN_DEBUG " bssid=%s found\n",
2649 print_mac(mac, bss->bssid));
2650 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2651 memcpy(bssid, bss->bssid, ETH_ALEN);
2653 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2656 spin_unlock_bh(&local->sta_bss_lock);
2658 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2660 printk(KERN_DEBUG " sta_find_ibss: selected %s current "
2661 "%s\n", print_mac(mac, bssid),
2662 print_mac(mac2, ifsta->bssid));
2663 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2665 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2669 if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2670 search_freq = bss->freq;
2672 search_freq = local->hw.conf.channel->center_freq;
2674 bss = ieee80211_rx_bss_get(local, bssid, search_freq,
2675 ifsta->ssid, ifsta->ssid_len);
2679 printk(KERN_DEBUG "%s: Selected IBSS BSSID %s"
2680 " based on configured SSID\n",
2681 sdata->dev->name, print_mac(mac, bssid));
2682 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2683 ieee80211_rx_bss_put(local, bss);
2688 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2689 printk(KERN_DEBUG " did not try to join ibss\n");
2690 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2692 /* Selected IBSS not found in current scan results - try to scan */
2693 if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
2694 !ieee80211_sta_active_ibss(sdata)) {
2695 mod_timer(&ifsta->timer, jiffies +
2696 IEEE80211_IBSS_MERGE_INTERVAL);
2697 } else if (time_after(jiffies, local->last_scan_completed +
2698 IEEE80211_SCAN_INTERVAL)) {
2699 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
2700 "join\n", sdata->dev->name);
2701 return ieee80211_sta_req_scan(sdata, ifsta->ssid,
2703 } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
2704 int interval = IEEE80211_SCAN_INTERVAL;
2706 if (time_after(jiffies, ifsta->ibss_join_req +
2707 IEEE80211_IBSS_JOIN_TIMEOUT)) {
2708 if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
2709 (!(local->oper_channel->flags &
2710 IEEE80211_CHAN_NO_IBSS)))
2711 return ieee80211_sta_create_ibss(sdata, ifsta);
2712 if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
2713 printk(KERN_DEBUG "%s: IBSS not allowed on"
2714 " %d MHz\n", sdata->dev->name,
2715 local->hw.conf.channel->center_freq);
2718 /* No IBSS found - decrease scan interval and continue
2720 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2723 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2724 mod_timer(&ifsta->timer, jiffies + interval);
2732 int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2734 struct ieee80211_if_sta *ifsta;
2737 if (len > IEEE80211_MAX_SSID_LEN)
2740 ifsta = &sdata->u.sta;
2742 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2743 memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2744 memcpy(ifsta->ssid, ssid, len);
2745 ifsta->ssid_len = len;
2746 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
2750 * Hack! MLME code needs to be cleaned up to have different
2751 * entry points for configuration and internal selection change
2753 if (netif_running(sdata->dev))
2754 res = ieee80211_if_config(sdata, IEEE80211_IFCC_SSID);
2756 printk(KERN_DEBUG "%s: Failed to config new SSID to "
2757 "the low-level driver\n", sdata->dev->name);
2763 ifsta->flags |= IEEE80211_STA_SSID_SET;
2765 ifsta->flags &= ~IEEE80211_STA_SSID_SET;
2767 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS &&
2768 !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2769 ifsta->ibss_join_req = jiffies;
2770 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2771 return ieee80211_sta_find_ibss(sdata, ifsta);
2778 int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2780 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2781 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2782 *len = ifsta->ssid_len;
2787 int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2789 struct ieee80211_if_sta *ifsta;
2792 ifsta = &sdata->u.sta;
2794 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2795 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2798 * Hack! See also ieee80211_sta_set_ssid.
2800 if (netif_running(sdata->dev))
2801 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2803 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2804 "the low-level driver\n", sdata->dev->name);
2809 if (is_valid_ether_addr(bssid))
2810 ifsta->flags |= IEEE80211_STA_BSSID_SET;
2812 ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2818 int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2820 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2822 kfree(ifsta->extra_ie);
2824 ifsta->extra_ie = NULL;
2825 ifsta->extra_ie_len = 0;
2828 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2829 if (!ifsta->extra_ie) {
2830 ifsta->extra_ie_len = 0;
2833 memcpy(ifsta->extra_ie, ie, len);
2834 ifsta->extra_ie_len = len;
2839 struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
2840 struct sk_buff *skb, u8 *bssid,
2841 u8 *addr, u64 supp_rates)
2843 struct ieee80211_local *local = sdata->local;
2844 struct sta_info *sta;
2845 DECLARE_MAC_BUF(mac);
2846 int band = local->hw.conf.channel->band;
2848 /* TODO: Could consider removing the least recently used entry and
2849 * allow new one to be added. */
2850 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2851 if (net_ratelimit()) {
2852 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
2853 "entry %s\n", sdata->dev->name, print_mac(mac, addr));
2858 if (compare_ether_addr(bssid, sdata->u.sta.bssid))
2861 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
2862 printk(KERN_DEBUG "%s: Adding new IBSS station %s (dev=%s)\n",
2863 wiphy_name(local->hw.wiphy), print_mac(mac, addr), sdata->dev->name);
2866 sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2870 set_sta_flags(sta, WLAN_STA_AUTHORIZED);
2872 /* make sure mandatory rates are always added */
2873 sta->supp_rates[band] = supp_rates |
2874 ieee80211_sta_get_mandatory_rates(local, band);
2876 rate_control_rate_init(sta, local);
2878 if (sta_info_insert(sta))
2885 static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2886 struct ieee80211_if_sta *ifsta)
2888 struct ieee80211_local *local = sdata->local;
2889 struct ieee80211_sta_bss *bss, *selected = NULL;
2890 int top_rssi = 0, freq;
2892 spin_lock_bh(&local->sta_bss_lock);
2893 freq = local->oper_channel->center_freq;
2894 list_for_each_entry(bss, &local->sta_bss_list, list) {
2895 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2898 if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2899 IEEE80211_STA_AUTO_BSSID_SEL |
2900 IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2901 (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2902 !!sdata->default_key))
2905 if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2909 if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2910 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2913 if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2914 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2917 if (!selected || top_rssi < bss->signal) {
2919 top_rssi = bss->signal;
2923 atomic_inc(&selected->users);
2924 spin_unlock_bh(&local->sta_bss_lock);
2927 ieee80211_set_freq(sdata, selected->freq);
2928 if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2929 ieee80211_sta_set_ssid(sdata, selected->ssid,
2930 selected->ssid_len);
2931 ieee80211_sta_set_bssid(sdata, selected->bssid);
2932 ieee80211_sta_def_wmm_params(sdata, selected);
2934 /* Send out direct probe if no probe resp was received or
2935 * the one we have is outdated
2937 if (!selected->last_probe_resp ||
2938 time_after(jiffies, selected->last_probe_resp
2939 + IEEE80211_SCAN_RESULT_EXPIRE))
2940 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2942 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2944 ieee80211_rx_bss_put(local, selected);
2945 ieee80211_sta_reset_auth(sdata, ifsta);
2948 if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2949 ifsta->assoc_scan_tries++;
2950 if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
2951 ieee80211_sta_start_scan(sdata, NULL, 0);
2953 ieee80211_sta_start_scan(sdata, ifsta->ssid,
2955 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2956 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2958 ifsta->state = IEEE80211_STA_MLME_DISABLED;
2964 int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
2966 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2968 printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
2969 sdata->dev->name, reason);
2971 if (sdata->vif.type != IEEE80211_IF_TYPE_STA &&
2972 sdata->vif.type != IEEE80211_IF_TYPE_IBSS)
2975 ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
2980 int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
2982 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2984 printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
2985 sdata->dev->name, reason);
2987 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
2990 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
2993 ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
2997 void ieee80211_notify_mac(struct ieee80211_hw *hw,
2998 enum ieee80211_notification_types notif_type)
3000 struct ieee80211_local *local = hw_to_local(hw);
3001 struct ieee80211_sub_if_data *sdata;
3003 switch (notif_type) {
3004 case IEEE80211_NOTIFY_RE_ASSOC:
3006 list_for_each_entry_rcu(sdata, &local->interfaces, list) {
3007 if (sdata->vif.type != IEEE80211_IF_TYPE_STA)
3010 ieee80211_sta_req_auth(sdata, &sdata->u.sta);
3016 EXPORT_SYMBOL(ieee80211_notify_mac);
3018 void ieee80211_sta_work(struct work_struct *work)
3020 struct ieee80211_sub_if_data *sdata =
3021 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
3022 struct ieee80211_local *local = sdata->local;
3023 struct ieee80211_if_sta *ifsta;
3024 struct sk_buff *skb;
3026 if (!netif_running(sdata->dev))
3029 if (local->sta_sw_scanning || local->sta_hw_scanning)
3032 if (WARN_ON(sdata->vif.type != IEEE80211_IF_TYPE_STA &&
3033 sdata->vif.type != IEEE80211_IF_TYPE_IBSS &&
3034 sdata->vif.type != IEEE80211_IF_TYPE_MESH_POINT))
3036 ifsta = &sdata->u.sta;
3038 while ((skb = skb_dequeue(&ifsta->skb_queue)))
3039 ieee80211_sta_rx_queued_mgmt(sdata, skb);
3041 #ifdef CONFIG_MAC80211_MESH
3042 if (ifsta->preq_queue_len &&
3044 ifsta->last_preq + msecs_to_jiffies(ifsta->mshcfg.dot11MeshHWMPpreqMinInterval)))
3045 mesh_path_start_discovery(sdata);
3048 if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
3049 ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
3050 ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
3051 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
3052 ieee80211_sta_start_scan(sdata, ifsta->scan_ssid, ifsta->scan_ssid_len);
3056 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
3057 if (ieee80211_sta_config_auth(sdata, ifsta))
3059 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
3060 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
3063 switch (ifsta->state) {
3064 case IEEE80211_STA_MLME_DISABLED:
3066 case IEEE80211_STA_MLME_DIRECT_PROBE:
3067 ieee80211_direct_probe(sdata, ifsta);
3069 case IEEE80211_STA_MLME_AUTHENTICATE:
3070 ieee80211_authenticate(sdata, ifsta);
3072 case IEEE80211_STA_MLME_ASSOCIATE:
3073 ieee80211_associate(sdata, ifsta);
3075 case IEEE80211_STA_MLME_ASSOCIATED:
3076 ieee80211_associated(sdata, ifsta);
3078 case IEEE80211_STA_MLME_IBSS_SEARCH:
3079 ieee80211_sta_find_ibss(sdata, ifsta);
3081 case IEEE80211_STA_MLME_IBSS_JOINED:
3082 ieee80211_sta_merge_ibss(sdata, ifsta);
3084 #ifdef CONFIG_MAC80211_MESH
3085 case IEEE80211_STA_MLME_MESH_UP:
3086 ieee80211_mesh_housekeeping(sdata, ifsta);
3094 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
3095 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
3096 "mixed-cell disabled - disassociate\n", sdata->dev->name);
3098 ieee80211_set_disassoc(sdata, ifsta, false, true,
3099 WLAN_REASON_UNSPECIFIED);
3103 void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
3105 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
3106 struct ieee80211_if_sta *ifsta;
3108 if (sdata->vif.type == IEEE80211_IF_TYPE_IBSS) {
3109 ifsta = &sdata->u.sta;
3110 if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
3111 (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
3112 !ieee80211_sta_active_ibss(sdata)))
3113 ieee80211_sta_find_ibss(sdata, ifsta);