linux/net/mac80211/mlme.c
<<
>>
Prefs
   1/*
   2 * BSS client mode implementation
   3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
   4 * Copyright 2004, Instant802 Networks, Inc.
   5 * Copyright 2005, Devicescape Software, Inc.
   6 * Copyright 2006-2007  Jiri Benc <jbenc@suse.cz>
   7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
   8 *
   9 * This program is free software; you can redistribute it and/or modify
  10 * it under the terms of the GNU General Public License version 2 as
  11 * published by the Free Software Foundation.
  12 */
  13
  14#include <linux/delay.h>
  15#include <linux/if_ether.h>
  16#include <linux/skbuff.h>
  17#include <linux/netdevice.h>
  18#include <linux/if_arp.h>
  19#include <linux/wireless.h>
  20#include <linux/random.h>
  21#include <linux/etherdevice.h>
  22#include <linux/rtnetlink.h>
  23#include <net/iw_handler.h>
  24#include <net/mac80211.h>
  25#include <asm/unaligned.h>
  26
  27#include "ieee80211_i.h"
  28#include "rate.h"
  29#include "led.h"
  30
  31#define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
  32#define IEEE80211_AUTH_TIMEOUT (HZ / 5)
  33#define IEEE80211_AUTH_MAX_TRIES 3
  34#define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
  35#define IEEE80211_ASSOC_MAX_TRIES 3
  36#define IEEE80211_MONITORING_INTERVAL (2 * HZ)
  37#define IEEE80211_PROBE_INTERVAL (60 * HZ)
  38#define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
  39#define IEEE80211_SCAN_INTERVAL (2 * HZ)
  40#define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
  41#define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
  42
  43#define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
  44#define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
  45
  46#define IEEE80211_IBSS_MAX_STA_ENTRIES 128
  47
  48
  49/* utils */
  50static int ecw2cw(int ecw)
  51{
  52        return (1 << ecw) - 1;
  53}
  54
  55static u8 *ieee80211_bss_get_ie(struct ieee80211_bss *bss, u8 ie)
  56{
  57        u8 *end, *pos;
  58
  59        pos = bss->ies;
  60        if (pos == NULL)
  61                return NULL;
  62        end = pos + bss->ies_len;
  63
  64        while (pos + 1 < end) {
  65                if (pos + 2 + pos[1] > end)
  66                        break;
  67                if (pos[0] == ie)
  68                        return pos;
  69                pos += 2 + pos[1];
  70        }
  71
  72        return NULL;
  73}
  74
  75static int ieee80211_compatible_rates(struct ieee80211_bss *bss,
  76                                      struct ieee80211_supported_band *sband,
  77                                      u64 *rates)
  78{
  79        int i, j, count;
  80        *rates = 0;
  81        count = 0;
  82        for (i = 0; i < bss->supp_rates_len; i++) {
  83                int rate = (bss->supp_rates[i] & 0x7F) * 5;
  84
  85                for (j = 0; j < sband->n_bitrates; j++)
  86                        if (sband->bitrates[j].bitrate == rate) {
  87                                *rates |= BIT(j);
  88                                count++;
  89                                break;
  90                        }
  91        }
  92
  93        return count;
  94}
  95
  96/* also used by mesh code */
  97u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
  98                            struct ieee802_11_elems *elems,
  99                            enum ieee80211_band band)
 100{
 101        struct ieee80211_supported_band *sband;
 102        struct ieee80211_rate *bitrates;
 103        size_t num_rates;
 104        u64 supp_rates;
 105        int i, j;
 106        sband = local->hw.wiphy->bands[band];
 107
 108        if (!sband) {
 109                WARN_ON(1);
 110                sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
 111        }
 112
 113        bitrates = sband->bitrates;
 114        num_rates = sband->n_bitrates;
 115        supp_rates = 0;
 116        for (i = 0; i < elems->supp_rates_len +
 117                     elems->ext_supp_rates_len; i++) {
 118                u8 rate = 0;
 119                int own_rate;
 120                if (i < elems->supp_rates_len)
 121                        rate = elems->supp_rates[i];
 122                else if (elems->ext_supp_rates)
 123                        rate = elems->ext_supp_rates
 124                                [i - elems->supp_rates_len];
 125                own_rate = 5 * (rate & 0x7f);
 126                for (j = 0; j < num_rates; j++)
 127                        if (bitrates[j].bitrate == own_rate)
 128                                supp_rates |= BIT(j);
 129        }
 130        return supp_rates;
 131}
 132
 133/* frame sending functions */
 134
 135/* also used by scanning code */
 136void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
 137                              u8 *ssid, size_t ssid_len)
 138{
 139        struct ieee80211_local *local = sdata->local;
 140        struct ieee80211_supported_band *sband;
 141        struct sk_buff *skb;
 142        struct ieee80211_mgmt *mgmt;
 143        u8 *pos, *supp_rates, *esupp_rates = NULL;
 144        int i;
 145
 146        skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
 147        if (!skb) {
 148                printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
 149                       "request\n", sdata->dev->name);
 150                return;
 151        }
 152        skb_reserve(skb, local->hw.extra_tx_headroom);
 153
 154        mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
 155        memset(mgmt, 0, 24);
 156        mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 157                                          IEEE80211_STYPE_PROBE_REQ);
 158        memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
 159        if (dst) {
 160                memcpy(mgmt->da, dst, ETH_ALEN);
 161                memcpy(mgmt->bssid, dst, ETH_ALEN);
 162        } else {
 163                memset(mgmt->da, 0xff, ETH_ALEN);
 164                memset(mgmt->bssid, 0xff, ETH_ALEN);
 165        }
 166        pos = skb_put(skb, 2 + ssid_len);
 167        *pos++ = WLAN_EID_SSID;
 168        *pos++ = ssid_len;
 169        memcpy(pos, ssid, ssid_len);
 170
 171        supp_rates = skb_put(skb, 2);
 172        supp_rates[0] = WLAN_EID_SUPP_RATES;
 173        supp_rates[1] = 0;
 174        sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
 175
 176        for (i = 0; i < sband->n_bitrates; i++) {
 177                struct ieee80211_rate *rate = &sband->bitrates[i];
 178                if (esupp_rates) {
 179                        pos = skb_put(skb, 1);
 180                        esupp_rates[1]++;
 181                } else if (supp_rates[1] == 8) {
 182                        esupp_rates = skb_put(skb, 3);
 183                        esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
 184                        esupp_rates[1] = 1;
 185                        pos = &esupp_rates[2];
 186                } else {
 187                        pos = skb_put(skb, 1);
 188                        supp_rates[1]++;
 189                }
 190                *pos = rate->bitrate / 5;
 191        }
 192
 193        ieee80211_tx_skb(sdata, skb, 0);
 194}
 195
 196static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
 197                                struct ieee80211_if_sta *ifsta,
 198                                int transaction, u8 *extra, size_t extra_len,
 199                                int encrypt)
 200{
 201        struct ieee80211_local *local = sdata->local;
 202        struct sk_buff *skb;
 203        struct ieee80211_mgmt *mgmt;
 204
 205        skb = dev_alloc_skb(local->hw.extra_tx_headroom +
 206                            sizeof(*mgmt) + 6 + extra_len);
 207        if (!skb) {
 208                printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
 209                       "frame\n", sdata->dev->name);
 210                return;
 211        }
 212        skb_reserve(skb, local->hw.extra_tx_headroom);
 213
 214        mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
 215        memset(mgmt, 0, 24 + 6);
 216        mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 217                                          IEEE80211_STYPE_AUTH);
 218        if (encrypt)
 219                mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
 220        memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
 221        memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
 222        memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
 223        mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
 224        mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
 225        ifsta->auth_transaction = transaction + 1;
 226        mgmt->u.auth.status_code = cpu_to_le16(0);
 227        if (extra)
 228                memcpy(skb_put(skb, extra_len), extra, extra_len);
 229
 230        ieee80211_tx_skb(sdata, skb, encrypt);
 231}
 232
 233static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
 234                                 struct ieee80211_if_sta *ifsta)
 235{
 236        struct ieee80211_local *local = sdata->local;
 237        struct sk_buff *skb;
 238        struct ieee80211_mgmt *mgmt;
 239        u8 *pos, *ies, *ht_add_ie;
 240        int i, len, count, rates_len, supp_rates_len;
 241        u16 capab;
 242        struct ieee80211_bss *bss;
 243        int wmm = 0;
 244        struct ieee80211_supported_band *sband;
 245        u64 rates = 0;
 246
 247        skb = dev_alloc_skb(local->hw.extra_tx_headroom +
 248                            sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
 249                            ifsta->ssid_len);
 250        if (!skb) {
 251                printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
 252                       "frame\n", sdata->dev->name);
 253                return;
 254        }
 255        skb_reserve(skb, local->hw.extra_tx_headroom);
 256
 257        sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
 258
 259        capab = ifsta->capab;
 260
 261        if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
 262                if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
 263                        capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
 264                if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
 265                        capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
 266        }
 267
 268        bss = ieee80211_rx_bss_get(local, ifsta->bssid,
 269                                   local->hw.conf.channel->center_freq,
 270                                   ifsta->ssid, ifsta->ssid_len);
 271        if (bss) {
 272                if (bss->capability & WLAN_CAPABILITY_PRIVACY)
 273                        capab |= WLAN_CAPABILITY_PRIVACY;
 274                if (bss->wmm_used)
 275                        wmm = 1;
 276
 277                /* get all rates supported by the device and the AP as
 278                 * some APs don't like getting a superset of their rates
 279                 * in the association request (e.g. D-Link DAP 1353 in
 280                 * b-only mode) */
 281                rates_len = ieee80211_compatible_rates(bss, sband, &rates);
 282
 283                if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
 284                    (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
 285                        capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
 286
 287                ieee80211_rx_bss_put(local, bss);
 288        } else {
 289                rates = ~0;
 290                rates_len = sband->n_bitrates;
 291        }
 292
 293        mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
 294        memset(mgmt, 0, 24);
 295        memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
 296        memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
 297        memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
 298
 299        if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
 300                skb_put(skb, 10);
 301                mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 302                                                  IEEE80211_STYPE_REASSOC_REQ);
 303                mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
 304                mgmt->u.reassoc_req.listen_interval =
 305                                cpu_to_le16(local->hw.conf.listen_interval);
 306                memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
 307                       ETH_ALEN);
 308        } else {
 309                skb_put(skb, 4);
 310                mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 311                                                  IEEE80211_STYPE_ASSOC_REQ);
 312                mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
 313                mgmt->u.reassoc_req.listen_interval =
 314                                cpu_to_le16(local->hw.conf.listen_interval);
 315        }
 316
 317        /* SSID */
 318        ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
 319        *pos++ = WLAN_EID_SSID;
 320        *pos++ = ifsta->ssid_len;
 321        memcpy(pos, ifsta->ssid, ifsta->ssid_len);
 322
 323        /* add all rates which were marked to be used above */
 324        supp_rates_len = rates_len;
 325        if (supp_rates_len > 8)
 326                supp_rates_len = 8;
 327
 328        len = sband->n_bitrates;
 329        pos = skb_put(skb, supp_rates_len + 2);
 330        *pos++ = WLAN_EID_SUPP_RATES;
 331        *pos++ = supp_rates_len;
 332
 333        count = 0;
 334        for (i = 0; i < sband->n_bitrates; i++) {
 335                if (BIT(i) & rates) {
 336                        int rate = sband->bitrates[i].bitrate;
 337                        *pos++ = (u8) (rate / 5);
 338                        if (++count == 8)
 339                                break;
 340                }
 341        }
 342
 343        if (rates_len > count) {
 344                pos = skb_put(skb, rates_len - count + 2);
 345                *pos++ = WLAN_EID_EXT_SUPP_RATES;
 346                *pos++ = rates_len - count;
 347
 348                for (i++; i < sband->n_bitrates; i++) {
 349                        if (BIT(i) & rates) {
 350                                int rate = sband->bitrates[i].bitrate;
 351                                *pos++ = (u8) (rate / 5);
 352                        }
 353                }
 354        }
 355
 356        if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
 357                /* 1. power capabilities */
 358                pos = skb_put(skb, 4);
 359                *pos++ = WLAN_EID_PWR_CAPABILITY;
 360                *pos++ = 2;
 361                *pos++ = 0; /* min tx power */
 362                *pos++ = local->hw.conf.channel->max_power; /* max tx power */
 363
 364                /* 2. supported channels */
 365                /* TODO: get this in reg domain format */
 366                pos = skb_put(skb, 2 * sband->n_channels + 2);
 367                *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
 368                *pos++ = 2 * sband->n_channels;
 369                for (i = 0; i < sband->n_channels; i++) {
 370                        *pos++ = ieee80211_frequency_to_channel(
 371                                        sband->channels[i].center_freq);
 372                        *pos++ = 1; /* one channel in the subband*/
 373                }
 374        }
 375
 376        if (ifsta->extra_ie) {
 377                pos = skb_put(skb, ifsta->extra_ie_len);
 378                memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
 379        }
 380
 381        if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
 382                pos = skb_put(skb, 9);
 383                *pos++ = WLAN_EID_VENDOR_SPECIFIC;
 384                *pos++ = 7; /* len */
 385                *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
 386                *pos++ = 0x50;
 387                *pos++ = 0xf2;
 388                *pos++ = 2; /* WME */
 389                *pos++ = 0; /* WME info */
 390                *pos++ = 1; /* WME ver */
 391                *pos++ = 0;
 392        }
 393
 394        /* wmm support is a must to HT */
 395        if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
 396            sband->ht_info.ht_supported &&
 397            (ht_add_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_EXTRA_INFO))) {
 398                struct ieee80211_ht_addt_info *ht_add_info =
 399                        (struct ieee80211_ht_addt_info *)ht_add_ie;
 400                u16 cap = sband->ht_info.cap;
 401                __le16 tmp;
 402                u32 flags = local->hw.conf.channel->flags;
 403
 404                switch (ht_add_info->ht_param & IEEE80211_HT_IE_CHA_SEC_OFFSET) {
 405                case IEEE80211_HT_IE_CHA_SEC_ABOVE:
 406                        if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
 407                                cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
 408                                cap &= ~IEEE80211_HT_CAP_SGI_40;
 409                        }
 410                        break;
 411                case IEEE80211_HT_IE_CHA_SEC_BELOW:
 412                        if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
 413                                cap &= ~IEEE80211_HT_CAP_SUP_WIDTH;
 414                                cap &= ~IEEE80211_HT_CAP_SGI_40;
 415                        }
 416                        break;
 417                }
 418
 419                tmp = cpu_to_le16(cap);
 420                pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
 421                *pos++ = WLAN_EID_HT_CAPABILITY;
 422                *pos++ = sizeof(struct ieee80211_ht_cap);
 423                memset(pos, 0, sizeof(struct ieee80211_ht_cap));
 424                memcpy(pos, &tmp, sizeof(u16));
 425                pos += sizeof(u16);
 426                /* TODO: needs a define here for << 2 */
 427                *pos++ = sband->ht_info.ampdu_factor |
 428                         (sband->ht_info.ampdu_density << 2);
 429                memcpy(pos, sband->ht_info.supp_mcs_set, 16);
 430        }
 431
 432        kfree(ifsta->assocreq_ies);
 433        ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
 434        ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
 435        if (ifsta->assocreq_ies)
 436                memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
 437
 438        ieee80211_tx_skb(sdata, skb, 0);
 439}
 440
 441
 442static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
 443                                           u16 stype, u16 reason)
 444{
 445        struct ieee80211_local *local = sdata->local;
 446        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
 447        struct sk_buff *skb;
 448        struct ieee80211_mgmt *mgmt;
 449
 450        skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
 451        if (!skb) {
 452                printk(KERN_DEBUG "%s: failed to allocate buffer for "
 453                       "deauth/disassoc frame\n", sdata->dev->name);
 454                return;
 455        }
 456        skb_reserve(skb, local->hw.extra_tx_headroom);
 457
 458        mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
 459        memset(mgmt, 0, 24);
 460        memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
 461        memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
 462        memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
 463        mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
 464        skb_put(skb, 2);
 465        /* u.deauth.reason_code == u.disassoc.reason_code */
 466        mgmt->u.deauth.reason_code = cpu_to_le16(reason);
 467
 468        ieee80211_tx_skb(sdata, skb, 0);
 469}
 470
 471/* MLME */
 472static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
 473                                         struct ieee80211_bss *bss)
 474{
 475        struct ieee80211_local *local = sdata->local;
 476        int i, have_higher_than_11mbit = 0;
 477
 478        /* cf. IEEE 802.11 9.2.12 */
 479        for (i = 0; i < bss->supp_rates_len; i++)
 480                if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
 481                        have_higher_than_11mbit = 1;
 482
 483        if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
 484            have_higher_than_11mbit)
 485                sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
 486        else
 487                sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
 488
 489        ieee80211_set_wmm_default(sdata);
 490}
 491
 492static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
 493                                     struct ieee80211_if_sta *ifsta,
 494                                     u8 *wmm_param, size_t wmm_param_len)
 495{
 496        struct ieee80211_tx_queue_params params;
 497        size_t left;
 498        int count;
 499        u8 *pos;
 500
 501        if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
 502                return;
 503
 504        if (!wmm_param)
 505                return;
 506
 507        if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
 508                return;
 509        count = wmm_param[6] & 0x0f;
 510        if (count == ifsta->wmm_last_param_set)
 511                return;
 512        ifsta->wmm_last_param_set = count;
 513
 514        pos = wmm_param + 8;
 515        left = wmm_param_len - 8;
 516
 517        memset(&params, 0, sizeof(params));
 518
 519        if (!local->ops->conf_tx)
 520                return;
 521
 522        local->wmm_acm = 0;
 523        for (; left >= 4; left -= 4, pos += 4) {
 524                int aci = (pos[0] >> 5) & 0x03;
 525                int acm = (pos[0] >> 4) & 0x01;
 526                int queue;
 527
 528                switch (aci) {
 529                case 1:
 530                        queue = 3;
 531                        if (acm)
 532                                local->wmm_acm |= BIT(0) | BIT(3);
 533                        break;
 534                case 2:
 535                        queue = 1;
 536                        if (acm)
 537                                local->wmm_acm |= BIT(4) | BIT(5);
 538                        break;
 539                case 3:
 540                        queue = 0;
 541                        if (acm)
 542                                local->wmm_acm |= BIT(6) | BIT(7);
 543                        break;
 544                case 0:
 545                default:
 546                        queue = 2;
 547                        if (acm)
 548                                local->wmm_acm |= BIT(1) | BIT(2);
 549                        break;
 550                }
 551
 552                params.aifs = pos[0] & 0x0f;
 553                params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
 554                params.cw_min = ecw2cw(pos[1] & 0x0f);
 555                params.txop = get_unaligned_le16(pos + 2);
 556#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
 557                printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
 558                       "cWmin=%d cWmax=%d txop=%d\n",
 559                       local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
 560                       params.cw_max, params.txop);
 561#endif
 562                /* TODO: handle ACM (block TX, fallback to next lowest allowed
 563                 * AC for now) */
 564                if (local->ops->conf_tx(local_to_hw(local), queue, &params)) {
 565                        printk(KERN_DEBUG "%s: failed to set TX queue "
 566                               "parameters for queue %d\n", local->mdev->name, queue);
 567                }
 568        }
 569}
 570
 571static u32 ieee80211_handle_protect_preamb(struct ieee80211_sub_if_data *sdata,
 572                                           bool use_protection,
 573                                           bool use_short_preamble)
 574{
 575        struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
 576#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
 577        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
 578        DECLARE_MAC_BUF(mac);
 579#endif
 580        u32 changed = 0;
 581
 582        if (use_protection != bss_conf->use_cts_prot) {
 583#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
 584                if (net_ratelimit()) {
 585                        printk(KERN_DEBUG "%s: CTS protection %s (BSSID="
 586                               "%s)\n",
 587                               sdata->dev->name,
 588                               use_protection ? "enabled" : "disabled",
 589                               print_mac(mac, ifsta->bssid));
 590                }
 591#endif
 592                bss_conf->use_cts_prot = use_protection;
 593                changed |= BSS_CHANGED_ERP_CTS_PROT;
 594        }
 595
 596        if (use_short_preamble != bss_conf->use_short_preamble) {
 597#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
 598                if (net_ratelimit()) {
 599                        printk(KERN_DEBUG "%s: switched to %s barker preamble"
 600                               " (BSSID=%s)\n",
 601                               sdata->dev->name,
 602                               use_short_preamble ? "short" : "long",
 603                               print_mac(mac, ifsta->bssid));
 604                }
 605#endif
 606                bss_conf->use_short_preamble = use_short_preamble;
 607                changed |= BSS_CHANGED_ERP_PREAMBLE;
 608        }
 609
 610        return changed;
 611}
 612
 613static u32 ieee80211_handle_erp_ie(struct ieee80211_sub_if_data *sdata,
 614                                   u8 erp_value)
 615{
 616        bool use_protection = (erp_value & WLAN_ERP_USE_PROTECTION) != 0;
 617        bool use_short_preamble = (erp_value & WLAN_ERP_BARKER_PREAMBLE) == 0;
 618
 619        return ieee80211_handle_protect_preamb(sdata,
 620                        use_protection, use_short_preamble);
 621}
 622
 623static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
 624                                           struct ieee80211_bss *bss)
 625{
 626        u32 changed = 0;
 627
 628        if (bss->has_erp_value)
 629                changed |= ieee80211_handle_erp_ie(sdata, bss->erp_value);
 630        else {
 631                u16 capab = bss->capability;
 632                changed |= ieee80211_handle_protect_preamb(sdata, false,
 633                                (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
 634        }
 635
 636        return changed;
 637}
 638
 639static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
 640                                        struct ieee80211_if_sta *ifsta)
 641{
 642        union iwreq_data wrqu;
 643        memset(&wrqu, 0, sizeof(wrqu));
 644        if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
 645                memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
 646        wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 647        wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
 648}
 649
 650static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
 651                                         struct ieee80211_if_sta *ifsta)
 652{
 653        char *buf;
 654        size_t len;
 655        int i;
 656        union iwreq_data wrqu;
 657
 658        if (!ifsta->assocreq_ies && !ifsta->assocresp_ies)
 659                return;
 660
 661        buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len +
 662                                ifsta->assocresp_ies_len), GFP_KERNEL);
 663        if (!buf)
 664                return;
 665
 666        len = sprintf(buf, "ASSOCINFO(");
 667        if (ifsta->assocreq_ies) {
 668                len += sprintf(buf + len, "ReqIEs=");
 669                for (i = 0; i < ifsta->assocreq_ies_len; i++) {
 670                        len += sprintf(buf + len, "%02x",
 671                                       ifsta->assocreq_ies[i]);
 672                }
 673        }
 674        if (ifsta->assocresp_ies) {
 675                if (ifsta->assocreq_ies)
 676                        len += sprintf(buf + len, " ");
 677                len += sprintf(buf + len, "RespIEs=");
 678                for (i = 0; i < ifsta->assocresp_ies_len; i++) {
 679                        len += sprintf(buf + len, "%02x",
 680                                       ifsta->assocresp_ies[i]);
 681                }
 682        }
 683        len += sprintf(buf + len, ")");
 684
 685        if (len > IW_CUSTOM_MAX) {
 686                len = sprintf(buf, "ASSOCRESPIE=");
 687                for (i = 0; i < ifsta->assocresp_ies_len; i++) {
 688                        len += sprintf(buf + len, "%02x",
 689                                       ifsta->assocresp_ies[i]);
 690                }
 691        }
 692
 693        if (len <= IW_CUSTOM_MAX) {
 694                memset(&wrqu, 0, sizeof(wrqu));
 695                wrqu.data.length = len;
 696                wireless_send_event(sdata->dev, IWEVCUSTOM, &wrqu, buf);
 697        }
 698
 699        kfree(buf);
 700}
 701
 702
 703static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
 704                                     struct ieee80211_if_sta *ifsta)
 705{
 706        struct ieee80211_local *local = sdata->local;
 707        struct ieee80211_conf *conf = &local_to_hw(local)->conf;
 708        u32 changed = BSS_CHANGED_ASSOC;
 709
 710        struct ieee80211_bss *bss;
 711
 712        ifsta->flags |= IEEE80211_STA_ASSOCIATED;
 713
 714        if (sdata->vif.type != NL80211_IFTYPE_STATION)
 715                return;
 716
 717        bss = ieee80211_rx_bss_get(local, ifsta->bssid,
 718                                   conf->channel->center_freq,
 719                                   ifsta->ssid, ifsta->ssid_len);
 720        if (bss) {
 721                /* set timing information */
 722                sdata->bss_conf.beacon_int = bss->beacon_int;
 723                sdata->bss_conf.timestamp = bss->timestamp;
 724                sdata->bss_conf.dtim_period = bss->dtim_period;
 725
 726                changed |= ieee80211_handle_bss_capability(sdata, bss);
 727
 728                ieee80211_rx_bss_put(local, bss);
 729        }
 730
 731        if (conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
 732                changed |= BSS_CHANGED_HT;
 733                sdata->bss_conf.assoc_ht = 1;
 734                sdata->bss_conf.ht_conf = &conf->ht_conf;
 735                sdata->bss_conf.ht_bss_conf = &conf->ht_bss_conf;
 736        }
 737
 738        ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
 739        memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
 740        ieee80211_sta_send_associnfo(sdata, ifsta);
 741
 742        ifsta->last_probe = jiffies;
 743        ieee80211_led_assoc(local, 1);
 744
 745        sdata->bss_conf.assoc = 1;
 746        /*
 747         * For now just always ask the driver to update the basic rateset
 748         * when we have associated, we aren't checking whether it actually
 749         * changed or not.
 750         */
 751        changed |= BSS_CHANGED_BASIC_RATES;
 752        ieee80211_bss_info_change_notify(sdata, changed);
 753
 754        netif_tx_start_all_queues(sdata->dev);
 755        netif_carrier_on(sdata->dev);
 756
 757        ieee80211_sta_send_apinfo(sdata, ifsta);
 758}
 759
 760static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
 761                                   struct ieee80211_if_sta *ifsta)
 762{
 763        DECLARE_MAC_BUF(mac);
 764
 765        ifsta->direct_probe_tries++;
 766        if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
 767                printk(KERN_DEBUG "%s: direct probe to AP %s timed out\n",
 768                       sdata->dev->name, print_mac(mac, ifsta->bssid));
 769                ifsta->state = IEEE80211_STA_MLME_DISABLED;
 770                return;
 771        }
 772
 773        printk(KERN_DEBUG "%s: direct probe to AP %s try %d\n",
 774                        sdata->dev->name, print_mac(mac, ifsta->bssid),
 775                        ifsta->direct_probe_tries);
 776
 777        ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
 778
 779        set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
 780
 781        /* Direct probe is sent to broadcast address as some APs
 782         * will not answer to direct packet in unassociated state.
 783         */
 784        ieee80211_send_probe_req(sdata, NULL,
 785                                 ifsta->ssid, ifsta->ssid_len);
 786
 787        mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
 788}
 789
 790
 791static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
 792                                   struct ieee80211_if_sta *ifsta)
 793{
 794        DECLARE_MAC_BUF(mac);
 795
 796        ifsta->auth_tries++;
 797        if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
 798                printk(KERN_DEBUG "%s: authentication with AP %s"
 799                       " timed out\n",
 800                       sdata->dev->name, print_mac(mac, ifsta->bssid));
 801                ifsta->state = IEEE80211_STA_MLME_DISABLED;
 802                return;
 803        }
 804
 805        ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
 806        printk(KERN_DEBUG "%s: authenticate with AP %s\n",
 807               sdata->dev->name, print_mac(mac, ifsta->bssid));
 808
 809        ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
 810
 811        mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
 812}
 813
 814static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
 815                                   struct ieee80211_if_sta *ifsta, bool deauth,
 816                                   bool self_disconnected, u16 reason)
 817{
 818        struct ieee80211_local *local = sdata->local;
 819        struct sta_info *sta;
 820        u32 changed = BSS_CHANGED_ASSOC;
 821
 822        rcu_read_lock();
 823
 824        sta = sta_info_get(local, ifsta->bssid);
 825        if (!sta) {
 826                rcu_read_unlock();
 827                return;
 828        }
 829
 830        if (deauth) {
 831                ifsta->direct_probe_tries = 0;
 832                ifsta->auth_tries = 0;
 833        }
 834        ifsta->assoc_scan_tries = 0;
 835        ifsta->assoc_tries = 0;
 836
 837        netif_tx_stop_all_queues(sdata->dev);
 838        netif_carrier_off(sdata->dev);
 839
 840        ieee80211_sta_tear_down_BA_sessions(sdata, sta->sta.addr);
 841
 842        if (self_disconnected) {
 843                if (deauth)
 844                        ieee80211_send_deauth_disassoc(sdata,
 845                                IEEE80211_STYPE_DEAUTH, reason);
 846                else
 847                        ieee80211_send_deauth_disassoc(sdata,
 848                                IEEE80211_STYPE_DISASSOC, reason);
 849        }
 850
 851        ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
 852        changed |= ieee80211_reset_erp_info(sdata);
 853
 854        if (sdata->bss_conf.assoc_ht)
 855                changed |= BSS_CHANGED_HT;
 856
 857        sdata->bss_conf.assoc_ht = 0;
 858        sdata->bss_conf.ht_conf = NULL;
 859        sdata->bss_conf.ht_bss_conf = NULL;
 860
 861        ieee80211_led_assoc(local, 0);
 862        sdata->bss_conf.assoc = 0;
 863
 864        ieee80211_sta_send_apinfo(sdata, ifsta);
 865
 866        if (self_disconnected)
 867                ifsta->state = IEEE80211_STA_MLME_DISABLED;
 868
 869        sta_info_unlink(&sta);
 870
 871        rcu_read_unlock();
 872
 873        sta_info_destroy(sta);
 874}
 875
 876static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
 877{
 878        if (!sdata || !sdata->default_key ||
 879            sdata->default_key->conf.alg != ALG_WEP)
 880                return 0;
 881        return 1;
 882}
 883
 884static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
 885                                      struct ieee80211_if_sta *ifsta)
 886{
 887        struct ieee80211_local *local = sdata->local;
 888        struct ieee80211_bss *bss;
 889        int bss_privacy;
 890        int wep_privacy;
 891        int privacy_invoked;
 892
 893        if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
 894                return 0;
 895
 896        bss = ieee80211_rx_bss_get(local, ifsta->bssid,
 897                                   local->hw.conf.channel->center_freq,
 898                                   ifsta->ssid, ifsta->ssid_len);
 899        if (!bss)
 900                return 0;
 901
 902        bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
 903        wep_privacy = !!ieee80211_sta_wep_configured(sdata);
 904        privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
 905
 906        ieee80211_rx_bss_put(local, bss);
 907
 908        if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
 909                return 0;
 910
 911        return 1;
 912}
 913
 914static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
 915                                struct ieee80211_if_sta *ifsta)
 916{
 917        DECLARE_MAC_BUF(mac);
 918
 919        ifsta->assoc_tries++;
 920        if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
 921                printk(KERN_DEBUG "%s: association with AP %s"
 922                       " timed out\n",
 923                       sdata->dev->name, print_mac(mac, ifsta->bssid));
 924                ifsta->state = IEEE80211_STA_MLME_DISABLED;
 925                return;
 926        }
 927
 928        ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
 929        printk(KERN_DEBUG "%s: associate with AP %s\n",
 930               sdata->dev->name, print_mac(mac, ifsta->bssid));
 931        if (ieee80211_privacy_mismatch(sdata, ifsta)) {
 932                printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
 933                       "mixed-cell disabled - abort association\n", sdata->dev->name);
 934                ifsta->state = IEEE80211_STA_MLME_DISABLED;
 935                return;
 936        }
 937
 938        ieee80211_send_assoc(sdata, ifsta);
 939
 940        mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
 941}
 942
 943
 944static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
 945                                 struct ieee80211_if_sta *ifsta)
 946{
 947        struct ieee80211_local *local = sdata->local;
 948        struct sta_info *sta;
 949        int disassoc;
 950        DECLARE_MAC_BUF(mac);
 951
 952        /* TODO: start monitoring current AP signal quality and number of
 953         * missed beacons. Scan other channels every now and then and search
 954         * for better APs. */
 955        /* TODO: remove expired BSSes */
 956
 957        ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
 958
 959        rcu_read_lock();
 960
 961        sta = sta_info_get(local, ifsta->bssid);
 962        if (!sta) {
 963                printk(KERN_DEBUG "%s: No STA entry for own AP %s\n",
 964                       sdata->dev->name, print_mac(mac, ifsta->bssid));
 965                disassoc = 1;
 966        } else {
 967                disassoc = 0;
 968                if (time_after(jiffies,
 969                               sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
 970                        if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
 971                                printk(KERN_DEBUG "%s: No ProbeResp from "
 972                                       "current AP %s - assume out of "
 973                                       "range\n",
 974                                       sdata->dev->name, print_mac(mac, ifsta->bssid));
 975                                disassoc = 1;
 976                        } else
 977                                ieee80211_send_probe_req(sdata, ifsta->bssid,
 978                                                         ifsta->ssid,
 979                                                         ifsta->ssid_len);
 980                        ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
 981                } else {
 982                        ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
 983                        if (time_after(jiffies, ifsta->last_probe +
 984                                       IEEE80211_PROBE_INTERVAL)) {
 985                                ifsta->last_probe = jiffies;
 986                                ieee80211_send_probe_req(sdata, ifsta->bssid,
 987                                                         ifsta->ssid,
 988                                                         ifsta->ssid_len);
 989                        }
 990                }
 991        }
 992
 993        rcu_read_unlock();
 994
 995        if (disassoc)
 996                ieee80211_set_disassoc(sdata, ifsta, true, true,
 997                                        WLAN_REASON_PREV_AUTH_NOT_VALID);
 998        else
 999                mod_timer(&ifsta->timer, jiffies +
1000                                      IEEE80211_MONITORING_INTERVAL);
1001}
1002
1003
1004static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
1005                                     struct ieee80211_if_sta *ifsta)
1006{
1007        printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
1008        ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
1009        ieee80211_associate(sdata, ifsta);
1010}
1011
1012
1013static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
1014                                     struct ieee80211_if_sta *ifsta,
1015                                     struct ieee80211_mgmt *mgmt,
1016                                     size_t len)
1017{
1018        u8 *pos;
1019        struct ieee802_11_elems elems;
1020
1021        pos = mgmt->u.auth.variable;
1022        ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1023        if (!elems.challenge)
1024                return;
1025        ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
1026                            elems.challenge_len + 2, 1);
1027}
1028
1029static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
1030                                   struct ieee80211_if_sta *ifsta,
1031                                   struct ieee80211_mgmt *mgmt,
1032                                   size_t len)
1033{
1034        u16 auth_alg, auth_transaction, status_code;
1035        DECLARE_MAC_BUF(mac);
1036
1037        if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
1038            sdata->vif.type != NL80211_IFTYPE_ADHOC)
1039                return;
1040
1041        if (len < 24 + 6)
1042                return;
1043
1044        if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
1045            memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1046                return;
1047
1048        if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
1049            memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1050                return;
1051
1052        auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1053        auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1054        status_code = le16_to_cpu(mgmt->u.auth.status_code);
1055
1056        if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
1057                /*
1058                 * IEEE 802.11 standard does not require authentication in IBSS
1059                 * networks and most implementations do not seem to use it.
1060                 * However, try to reply to authentication attempts if someone
1061                 * has actually implemented this.
1062                 */
1063                if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
1064                        return;
1065                ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
1066        }
1067
1068        if (auth_alg != ifsta->auth_alg ||
1069            auth_transaction != ifsta->auth_transaction)
1070                return;
1071
1072        if (status_code != WLAN_STATUS_SUCCESS) {
1073                if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1074                        u8 algs[3];
1075                        const int num_algs = ARRAY_SIZE(algs);
1076                        int i, pos;
1077                        algs[0] = algs[1] = algs[2] = 0xff;
1078                        if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1079                                algs[0] = WLAN_AUTH_OPEN;
1080                        if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1081                                algs[1] = WLAN_AUTH_SHARED_KEY;
1082                        if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1083                                algs[2] = WLAN_AUTH_LEAP;
1084                        if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1085                                pos = 0;
1086                        else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1087                                pos = 1;
1088                        else
1089                                pos = 2;
1090                        for (i = 0; i < num_algs; i++) {
1091                                pos++;
1092                                if (pos >= num_algs)
1093                                        pos = 0;
1094                                if (algs[pos] == ifsta->auth_alg ||
1095                                    algs[pos] == 0xff)
1096                                        continue;
1097                                if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
1098                                    !ieee80211_sta_wep_configured(sdata))
1099                                        continue;
1100                                ifsta->auth_alg = algs[pos];
1101                                break;
1102                        }
1103                }
1104                return;
1105        }
1106
1107        switch (ifsta->auth_alg) {
1108        case WLAN_AUTH_OPEN:
1109        case WLAN_AUTH_LEAP:
1110                ieee80211_auth_completed(sdata, ifsta);
1111                break;
1112        case WLAN_AUTH_SHARED_KEY:
1113                if (ifsta->auth_transaction == 4)
1114                        ieee80211_auth_completed(sdata, ifsta);
1115                else
1116                        ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
1117                break;
1118        }
1119}
1120
1121
1122static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
1123                                     struct ieee80211_if_sta *ifsta,
1124                                     struct ieee80211_mgmt *mgmt,
1125                                     size_t len)
1126{
1127        u16 reason_code;
1128        DECLARE_MAC_BUF(mac);
1129
1130        if (len < 24 + 2)
1131                return;
1132
1133        if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1134                return;
1135
1136        reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1137
1138        if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
1139                printk(KERN_DEBUG "%s: deauthenticated\n", sdata->dev->name);
1140
1141        if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1142            ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1143            ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1144                ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
1145                mod_timer(&ifsta->timer, jiffies +
1146                                      IEEE80211_RETRY_AUTH_INTERVAL);
1147        }
1148
1149        ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
1150        ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
1151}
1152
1153
1154static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
1155                                       struct ieee80211_if_sta *ifsta,
1156                                       struct ieee80211_mgmt *mgmt,
1157                                       size_t len)
1158{
1159        u16 reason_code;
1160        DECLARE_MAC_BUF(mac);
1161
1162        if (len < 24 + 2)
1163                return;
1164
1165        if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
1166                return;
1167
1168        reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1169
1170        if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
1171                printk(KERN_DEBUG "%s: disassociated\n", sdata->dev->name);
1172
1173        if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1174                ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
1175                mod_timer(&ifsta->timer, jiffies +
1176                                      IEEE80211_RETRY_AUTH_INTERVAL);
1177        }
1178
1179        ieee80211_set_disassoc(sdata, ifsta, false, false, 0);
1180}
1181
1182
1183static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
1184                                         struct ieee80211_if_sta *ifsta,
1185                                         struct ieee80211_mgmt *mgmt,
1186                                         size_t len,
1187                                         int reassoc)
1188{
1189        struct ieee80211_local *local = sdata->local;
1190        struct ieee80211_supported_band *sband;
1191        struct sta_info *sta;
1192        u64 rates, basic_rates;
1193        u16 capab_info, status_code, aid;
1194        struct ieee802_11_elems elems;
1195        struct ieee80211_bss_conf *bss_conf = &sdata->bss_conf;
1196        u8 *pos;
1197        int i, j;
1198        DECLARE_MAC_BUF(mac);
1199        bool have_higher_than_11mbit = false;
1200
1201        /* AssocResp and ReassocResp have identical structure, so process both
1202         * of them in this function. */
1203
1204        if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
1205                return;
1206
1207        if (len < 24 + 6)
1208                return;
1209
1210        if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
1211                return;
1212
1213        capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1214        status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1215        aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
1216
1217        printk(KERN_DEBUG "%s: RX %sssocResp from %s (capab=0x%x "
1218               "status=%d aid=%d)\n",
1219               sdata->dev->name, reassoc ? "Rea" : "A", print_mac(mac, mgmt->sa),
1220               capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
1221
1222        if (status_code != WLAN_STATUS_SUCCESS) {
1223                printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
1224                       sdata->dev->name, status_code);
1225                /* if this was a reassociation, ensure we try a "full"
1226                 * association next time. This works around some broken APs
1227                 * which do not correctly reject reassociation requests. */
1228                ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
1229                return;
1230        }
1231
1232        if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1233                printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
1234                       "set\n", sdata->dev->name, aid);
1235        aid &= ~(BIT(15) | BIT(14));
1236
1237        pos = mgmt->u.assoc_resp.variable;
1238        ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
1239
1240        if (!elems.supp_rates) {
1241                printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
1242                       sdata->dev->name);
1243                return;
1244        }
1245
1246        printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
1247        ifsta->aid = aid;
1248        ifsta->ap_capab = capab_info;
1249
1250        kfree(ifsta->assocresp_ies);
1251        ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
1252        ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
1253        if (ifsta->assocresp_ies)
1254                memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1255
1256        rcu_read_lock();
1257
1258        /* Add STA entry for the AP */
1259        sta = sta_info_get(local, ifsta->bssid);
1260        if (!sta) {
1261                struct ieee80211_bss *bss;
1262                int err;
1263
1264                sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1265                if (!sta) {
1266                        printk(KERN_DEBUG "%s: failed to alloc STA entry for"
1267                               " the AP\n", sdata->dev->name);
1268                        rcu_read_unlock();
1269                        return;
1270                }
1271                bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1272                                           local->hw.conf.channel->center_freq,
1273                                           ifsta->ssid, ifsta->ssid_len);
1274                if (bss) {
1275                        sta->last_signal = bss->signal;
1276                        sta->last_qual = bss->qual;
1277                        sta->last_noise = bss->noise;
1278                        ieee80211_rx_bss_put(local, bss);
1279                }
1280
1281                err = sta_info_insert(sta);
1282                if (err) {
1283                        printk(KERN_DEBUG "%s: failed to insert STA entry for"
1284                               " the AP (error %d)\n", sdata->dev->name, err);
1285                        rcu_read_unlock();
1286                        return;
1287                }
1288                /* update new sta with its last rx activity */
1289                sta->last_rx = jiffies;
1290        }
1291
1292        /*
1293         * FIXME: Do we really need to update the sta_info's information here?
1294         *        We already know about the AP (we found it in our list) so it
1295         *        should already be filled with the right info, no?
1296         *        As is stands, all this is racy because typically we assume
1297         *        the information that is filled in here (except flags) doesn't
1298         *        change while a STA structure is alive. As such, it should move
1299         *        to between the sta_info_alloc() and sta_info_insert() above.
1300         */
1301
1302        set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1303                           WLAN_STA_AUTHORIZED);
1304
1305        rates = 0;
1306        basic_rates = 0;
1307        sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1308
1309        for (i = 0; i < elems.supp_rates_len; i++) {
1310                int rate = (elems.supp_rates[i] & 0x7f) * 5;
1311
1312                if (rate > 110)
1313                        have_higher_than_11mbit = true;
1314
1315                for (j = 0; j < sband->n_bitrates; j++) {
1316                        if (sband->bitrates[j].bitrate == rate)
1317                                rates |= BIT(j);
1318                        if (elems.supp_rates[i] & 0x80)
1319                                basic_rates |= BIT(j);
1320                }
1321        }
1322
1323        for (i = 0; i < elems.ext_supp_rates_len; i++) {
1324                int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
1325
1326                if (rate > 110)
1327                        have_higher_than_11mbit = true;
1328
1329                for (j = 0; j < sband->n_bitrates; j++) {
1330                        if (sband->bitrates[j].bitrate == rate)
1331                                rates |= BIT(j);
1332                        if (elems.ext_supp_rates[i] & 0x80)
1333                                basic_rates |= BIT(j);
1334                }
1335        }
1336
1337        sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
1338        sdata->bss_conf.basic_rates = basic_rates;
1339
1340        /* cf. IEEE 802.11 9.2.12 */
1341        if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1342            have_higher_than_11mbit)
1343                sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1344        else
1345                sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
1346
1347        if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param &&
1348            (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
1349                struct ieee80211_ht_bss_info bss_info;
1350                ieee80211_ht_cap_ie_to_ht_info(
1351                                elems.ht_cap_elem, &sta->sta.ht_info);
1352                ieee80211_ht_addt_info_ie_to_ht_bss_info(
1353                                elems.ht_info_elem, &bss_info);
1354                ieee80211_handle_ht(local, 1, &sta->sta.ht_info, &bss_info);
1355        }
1356
1357        rate_control_rate_init(sta);
1358
1359        if (elems.wmm_param) {
1360                set_sta_flags(sta, WLAN_STA_WME);
1361                rcu_read_unlock();
1362                ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1363                                         elems.wmm_param_len);
1364        } else
1365                rcu_read_unlock();
1366
1367        /* set AID and assoc capability,
1368         * ieee80211_set_associated() will tell the driver */
1369        bss_conf->aid = aid;
1370        bss_conf->assoc_capability = capab_info;
1371        ieee80211_set_associated(sdata, ifsta);
1372
1373        ieee80211_associated(sdata, ifsta);
1374}
1375
1376
1377static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
1378                                   struct ieee80211_if_sta *ifsta,
1379                                   struct ieee80211_bss *bss)
1380{
1381        struct ieee80211_local *local = sdata->local;
1382        int res, rates, i, j;
1383        struct sk_buff *skb;
1384        struct ieee80211_mgmt *mgmt;
1385        u8 *pos;
1386        struct ieee80211_supported_band *sband;
1387        union iwreq_data wrqu;
1388
1389        sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1390
1391        /* Remove possible STA entries from other IBSS networks. */
1392        sta_info_flush_delayed(sdata);
1393
1394        if (local->ops->reset_tsf) {
1395                /* Reset own TSF to allow time synchronization work. */
1396                local->ops->reset_tsf(local_to_hw(local));
1397        }
1398        memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
1399        res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
1400        if (res)
1401                return res;
1402
1403        local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1404
1405        sdata->drop_unencrypted = bss->capability &
1406                WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1407
1408        res = ieee80211_set_freq(sdata, bss->freq);
1409
1410        if (res)
1411                return res;
1412
1413        /* Build IBSS probe response */
1414        skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1415        if (skb) {
1416                skb_reserve(skb, local->hw.extra_tx_headroom);
1417
1418                mgmt = (struct ieee80211_mgmt *)
1419                        skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1420                memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1421                mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1422                                                  IEEE80211_STYPE_PROBE_RESP);
1423                memset(mgmt->da, 0xff, ETH_ALEN);
1424                memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1425                memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1426                mgmt->u.beacon.beacon_int =
1427                        cpu_to_le16(local->hw.conf.beacon_int);
1428                mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1429                mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
1430
1431                pos = skb_put(skb, 2 + ifsta->ssid_len);
1432                *pos++ = WLAN_EID_SSID;
1433                *pos++ = ifsta->ssid_len;
1434                memcpy(pos, ifsta->ssid, ifsta->ssid_len);
1435
1436                rates = bss->supp_rates_len;
1437                if (rates > 8)
1438                        rates = 8;
1439                pos = skb_put(skb, 2 + rates);
1440                *pos++ = WLAN_EID_SUPP_RATES;
1441                *pos++ = rates;
1442                memcpy(pos, bss->supp_rates, rates);
1443
1444                if (bss->band == IEEE80211_BAND_2GHZ) {
1445                        pos = skb_put(skb, 2 + 1);
1446                        *pos++ = WLAN_EID_DS_PARAMS;
1447                        *pos++ = 1;
1448                        *pos++ = ieee80211_frequency_to_channel(bss->freq);
1449                }
1450
1451                pos = skb_put(skb, 2 + 2);
1452                *pos++ = WLAN_EID_IBSS_PARAMS;
1453                *pos++ = 2;
1454                /* FIX: set ATIM window based on scan results */
1455                *pos++ = 0;
1456                *pos++ = 0;
1457
1458                if (bss->supp_rates_len > 8) {
1459                        rates = bss->supp_rates_len - 8;
1460                        pos = skb_put(skb, 2 + rates);
1461                        *pos++ = WLAN_EID_EXT_SUPP_RATES;
1462                        *pos++ = rates;
1463                        memcpy(pos, &bss->supp_rates[8], rates);
1464                }
1465
1466                ifsta->probe_resp = skb;
1467
1468                ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1469        }
1470
1471        rates = 0;
1472        sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1473        for (i = 0; i < bss->supp_rates_len; i++) {
1474                int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1475                for (j = 0; j < sband->n_bitrates; j++)
1476                        if (sband->bitrates[j].bitrate == bitrate)
1477                                rates |= BIT(j);
1478        }
1479        ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1480
1481        ieee80211_sta_def_wmm_params(sdata, bss);
1482
1483        ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
1484        mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1485
1486        ieee80211_led_assoc(local, true);
1487
1488        memset(&wrqu, 0, sizeof(wrqu));
1489        memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
1490        wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
1491
1492        return res;
1493}
1494
1495static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1496                                  struct ieee80211_mgmt *mgmt,
1497                                  size_t len,
1498                                  struct ieee80211_rx_status *rx_status,
1499                                  struct ieee802_11_elems *elems,
1500                                  bool beacon)
1501{
1502        struct ieee80211_local *local = sdata->local;
1503        int freq;
1504        struct ieee80211_bss *bss;
1505        struct sta_info *sta;
1506        struct ieee80211_channel *channel;
1507        u64 beacon_timestamp, rx_timestamp;
1508        u64 supp_rates = 0;
1509        enum ieee80211_band band = rx_status->band;
1510        DECLARE_MAC_BUF(mac);
1511        DECLARE_MAC_BUF(mac2);
1512
1513        if (elems->ds_params && elems->ds_params_len == 1)
1514                freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1515        else
1516                freq = rx_status->freq;
1517
1518        channel = ieee80211_get_channel(local->hw.wiphy, freq);
1519
1520        if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1521                return;
1522
1523        if (sdata->vif.type == NL80211_IFTYPE_ADHOC && elems->supp_rates &&
1524            memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1525                supp_rates = ieee80211_sta_get_rates(local, elems, band);
1526
1527                rcu_read_lock();
1528
1529                sta = sta_info_get(local, mgmt->sa);
1530                if (sta) {
1531                        u64 prev_rates;
1532
1533                        prev_rates = sta->sta.supp_rates[band];
1534                        /* make sure mandatory rates are always added */
1535                        sta->sta.supp_rates[band] = supp_rates |
1536                                ieee80211_mandatory_rates(local, band);
1537
1538#ifdef CONFIG_MAC80211_IBSS_DEBUG
1539                        if (sta->sta.supp_rates[band] != prev_rates)
1540                                printk(KERN_DEBUG "%s: updated supp_rates set "
1541                                    "for %s based on beacon info (0x%llx | "
1542                                    "0x%llx -> 0x%llx)\n",
1543                                    sdata->dev->name,
1544                                    print_mac(mac, sta->sta.addr),
1545                                    (unsigned long long) prev_rates,
1546                                    (unsigned long long) supp_rates,
1547                                    (unsigned long long) sta->sta.supp_rates[band]);
1548#endif
1549                } else {
1550                        ieee80211_ibss_add_sta(sdata, NULL, mgmt->bssid,
1551                                               mgmt->sa, supp_rates);
1552                }
1553
1554                rcu_read_unlock();
1555        }
1556
1557        bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1558                                        freq, beacon);
1559        if (!bss)
1560                return;
1561
1562        /* was just updated in ieee80211_bss_info_update */
1563        beacon_timestamp = bss->timestamp;
1564
1565        /*
1566         * In STA mode, the remaining parameters should not be overridden
1567         * by beacons because they're not necessarily accurate there.
1568         */
1569        if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
1570            bss->last_probe_resp && beacon) {
1571                ieee80211_rx_bss_put(local, bss);
1572                return;
1573        }
1574
1575        /* check if we need to merge IBSS */
1576        if (sdata->vif.type == NL80211_IFTYPE_ADHOC && beacon &&
1577            bss->capability & WLAN_CAPABILITY_IBSS &&
1578            bss->freq == local->oper_channel->center_freq &&
1579            elems->ssid_len == sdata->u.sta.ssid_len &&
1580            memcmp(elems->ssid, sdata->u.sta.ssid,
1581                                sdata->u.sta.ssid_len) == 0) {
1582                if (rx_status->flag & RX_FLAG_TSFT) {
1583                        /* in order for correct IBSS merging we need mactime
1584                         *
1585                         * since mactime is defined as the time the first data
1586                         * symbol of the frame hits the PHY, and the timestamp
1587                         * of the beacon is defined as "the time that the data
1588                         * symbol containing the first bit of the timestamp is
1589                         * transmitted to the PHY plus the transmitting STA’s
1590                         * delays through its local PHY from the MAC-PHY
1591                         * interface to its interface with the WM"
1592                         * (802.11 11.1.2) - equals the time this bit arrives at
1593                         * the receiver - we have to take into account the
1594                         * offset between the two.
1595                         * e.g: at 1 MBit that means mactime is 192 usec earlier
1596                         * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
1597                         */
1598                        int rate = local->hw.wiphy->bands[band]->
1599                                        bitrates[rx_status->rate_idx].bitrate;
1600                        rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
1601                } else if (local && local->ops && local->ops->get_tsf)
1602                        /* second best option: get current TSF */
1603                        rx_timestamp = local->ops->get_tsf(local_to_hw(local));
1604                else
1605                        /* can't merge without knowing the TSF */
1606                        rx_timestamp = -1LLU;
1607#ifdef CONFIG_MAC80211_IBSS_DEBUG
1608                printk(KERN_DEBUG "RX beacon SA=%s BSSID="
1609                       "%s TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
1610                       print_mac(mac, mgmt->sa),
1611                       print_mac(mac2, mgmt->bssid),
1612                       (unsigned long long)rx_timestamp,
1613                       (unsigned long long)beacon_timestamp,
1614                       (unsigned long long)(rx_timestamp - beacon_timestamp),
1615                       jiffies);
1616#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1617                if (beacon_timestamp > rx_timestamp) {
1618#ifdef CONFIG_MAC80211_IBSS_DEBUG
1619                        printk(KERN_DEBUG "%s: beacon TSF higher than "
1620                               "local TSF - IBSS merge with BSSID %s\n",
1621                               sdata->dev->name, print_mac(mac, mgmt->bssid));
1622#endif
1623                        ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
1624                        ieee80211_ibss_add_sta(sdata, NULL,
1625                                               mgmt->bssid, mgmt->sa,
1626                                               supp_rates);
1627                }
1628        }
1629
1630        ieee80211_rx_bss_put(local, bss);
1631}
1632
1633
1634static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
1635                                         struct ieee80211_mgmt *mgmt,
1636                                         size_t len,
1637                                         struct ieee80211_rx_status *rx_status)
1638{
1639        size_t baselen;
1640        struct ieee802_11_elems elems;
1641        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
1642
1643        if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
1644                return; /* ignore ProbeResp to foreign address */
1645
1646        baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1647        if (baselen > len)
1648                return;
1649
1650        ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1651                                &elems);
1652
1653        ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
1654
1655        /* direct probe may be part of the association flow */
1656        if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
1657                                                        &ifsta->request)) {
1658                printk(KERN_DEBUG "%s direct probe responded\n",
1659                       sdata->dev->name);
1660                ieee80211_authenticate(sdata, ifsta);
1661        }
1662}
1663
1664
1665static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
1666                                     struct ieee80211_mgmt *mgmt,
1667                                     size_t len,
1668                                     struct ieee80211_rx_status *rx_status)
1669{
1670        struct ieee80211_if_sta *ifsta;
1671        size_t baselen;
1672        struct ieee802_11_elems elems;
1673        struct ieee80211_local *local = sdata->local;
1674        struct ieee80211_conf *conf = &local->hw.conf;
1675        u32 changed = 0;
1676
1677        /* Process beacon from the current BSS */
1678        baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1679        if (baselen > len)
1680                return;
1681
1682        ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
1683
1684        ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
1685
1686        if (sdata->vif.type != NL80211_IFTYPE_STATION)
1687                return;
1688        ifsta = &sdata->u.sta;
1689
1690        if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
1691            memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1692                return;
1693
1694        ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1695                                 elems.wmm_param_len);
1696
1697        if (elems.erp_info && elems.erp_info_len >= 1)
1698                changed |= ieee80211_handle_erp_ie(sdata, elems.erp_info[0]);
1699        else {
1700                u16 capab = le16_to_cpu(mgmt->u.beacon.capab_info);
1701                changed |= ieee80211_handle_protect_preamb(sdata, false,
1702                                (capab & WLAN_CAPABILITY_SHORT_PREAMBLE) != 0);
1703        }
1704
1705        if (elems.ht_cap_elem && elems.ht_info_elem &&
1706            elems.wmm_param && conf->flags & IEEE80211_CONF_SUPPORT_HT_MODE) {
1707                struct ieee80211_ht_bss_info bss_info;
1708
1709                ieee80211_ht_addt_info_ie_to_ht_bss_info(
1710                                elems.ht_info_elem, &bss_info);
1711                changed |= ieee80211_handle_ht(local, 1, &conf->ht_conf,
1712                                               &bss_info);
1713        }
1714
1715        ieee80211_bss_info_change_notify(sdata, changed);
1716}
1717
1718
1719static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
1720                                        struct ieee80211_if_sta *ifsta,
1721                                        struct ieee80211_mgmt *mgmt,
1722                                        size_t len,
1723                                        struct ieee80211_rx_status *rx_status)
1724{
1725        struct ieee80211_local *local = sdata->local;
1726        int tx_last_beacon;
1727        struct sk_buff *skb;
1728        struct ieee80211_mgmt *resp;
1729        u8 *pos, *end;
1730        DECLARE_MAC_BUF(mac);
1731#ifdef CONFIG_MAC80211_IBSS_DEBUG
1732        DECLARE_MAC_BUF(mac2);
1733        DECLARE_MAC_BUF(mac3);
1734#endif
1735
1736        if (sdata->vif.type != NL80211_IFTYPE_ADHOC ||
1737            ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
1738            len < 24 + 2 || !ifsta->probe_resp)
1739                return;
1740
1741        if (local->ops->tx_last_beacon)
1742                tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
1743        else
1744                tx_last_beacon = 1;
1745
1746#ifdef CONFIG_MAC80211_IBSS_DEBUG
1747        printk(KERN_DEBUG "%s: RX ProbeReq SA=%s DA=%s BSSID="
1748               "%s (tx_last_beacon=%d)\n",
1749               sdata->dev->name, print_mac(mac, mgmt->sa), print_mac(mac2, mgmt->da),
1750               print_mac(mac3, mgmt->bssid), tx_last_beacon);
1751#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1752
1753        if (!tx_last_beacon)
1754                return;
1755
1756        if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
1757            memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
1758                return;
1759
1760        end = ((u8 *) mgmt) + len;
1761        pos = mgmt->u.probe_req.variable;
1762        if (pos[0] != WLAN_EID_SSID ||
1763            pos + 2 + pos[1] > end) {
1764#ifdef CONFIG_MAC80211_IBSS_DEBUG
1765                printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
1766                       "from %s\n",
1767                       sdata->dev->name, print_mac(mac, mgmt->sa));
1768#endif
1769                return;
1770        }
1771        if (pos[1] != 0 &&
1772            (pos[1] != ifsta->ssid_len ||
1773             memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
1774                /* Ignore ProbeReq for foreign SSID */
1775                return;
1776        }
1777
1778        /* Reply with ProbeResp */
1779        skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
1780        if (!skb)
1781                return;
1782
1783        resp = (struct ieee80211_mgmt *) skb->data;
1784        memcpy(resp->da, mgmt->sa, ETH_ALEN);
1785#ifdef CONFIG_MAC80211_IBSS_DEBUG
1786        printk(KERN_DEBUG "%s: Sending ProbeResp to %s\n",
1787               sdata->dev->name, print_mac(mac, resp->da));
1788#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1789        ieee80211_tx_skb(sdata, skb, 0);
1790}
1791
1792void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
1793                           struct ieee80211_rx_status *rx_status)
1794{
1795        struct ieee80211_local *local = sdata->local;
1796        struct ieee80211_if_sta *ifsta;
1797        struct ieee80211_mgmt *mgmt;
1798        u16 fc;
1799
1800        if (skb->len < 24)
1801                goto fail;
1802
1803        ifsta = &sdata->u.sta;
1804
1805        mgmt = (struct ieee80211_mgmt *) skb->data;
1806        fc = le16_to_cpu(mgmt->frame_control);
1807
1808        switch (fc & IEEE80211_FCTL_STYPE) {
1809        case IEEE80211_STYPE_PROBE_REQ:
1810        case IEEE80211_STYPE_PROBE_RESP:
1811        case IEEE80211_STYPE_BEACON:
1812                memcpy(skb->cb, rx_status, sizeof(*rx_status));
1813        case IEEE80211_STYPE_AUTH:
1814        case IEEE80211_STYPE_ASSOC_RESP:
1815        case IEEE80211_STYPE_REASSOC_RESP:
1816        case IEEE80211_STYPE_DEAUTH:
1817        case IEEE80211_STYPE_DISASSOC:
1818                skb_queue_tail(&ifsta->skb_queue, skb);
1819                queue_work(local->hw.workqueue, &ifsta->work);
1820                return;
1821        }
1822
1823 fail:
1824        kfree_skb(skb);
1825}
1826
1827static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
1828                                         struct sk_buff *skb)
1829{
1830        struct ieee80211_rx_status *rx_status;
1831        struct ieee80211_if_sta *ifsta;
1832        struct ieee80211_mgmt *mgmt;
1833        u16 fc;
1834
1835        ifsta = &sdata->u.sta;
1836
1837        rx_status = (struct ieee80211_rx_status *) skb->cb;
1838        mgmt = (struct ieee80211_mgmt *) skb->data;
1839        fc = le16_to_cpu(mgmt->frame_control);
1840
1841        switch (fc & IEEE80211_FCTL_STYPE) {
1842        case IEEE80211_STYPE_PROBE_REQ:
1843                ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len,
1844                                            rx_status);
1845                break;
1846        case IEEE80211_STYPE_PROBE_RESP:
1847                ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
1848                break;
1849        case IEEE80211_STYPE_BEACON:
1850                ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
1851                break;
1852        case IEEE80211_STYPE_AUTH:
1853                ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
1854                break;
1855        case IEEE80211_STYPE_ASSOC_RESP:
1856                ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
1857                break;
1858        case IEEE80211_STYPE_REASSOC_RESP:
1859                ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
1860                break;
1861        case IEEE80211_STYPE_DEAUTH:
1862                ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
1863                break;
1864        case IEEE80211_STYPE_DISASSOC:
1865                ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
1866                break;
1867        }
1868
1869        kfree_skb(skb);
1870}
1871
1872
1873static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
1874{
1875        struct ieee80211_local *local = sdata->local;
1876        int active = 0;
1877        struct sta_info *sta;
1878
1879        rcu_read_lock();
1880
1881        list_for_each_entry_rcu(sta, &local->sta_list, list) {
1882                if (sta->sdata == sdata &&
1883                    time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
1884                               jiffies)) {
1885                        active++;
1886                        break;
1887                }
1888        }
1889
1890        rcu_read_unlock();
1891
1892        return active;
1893}
1894
1895
1896static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
1897                                     struct ieee80211_if_sta *ifsta)
1898{
1899        mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1900
1901        ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
1902        if (ieee80211_sta_active_ibss(sdata))
1903                return;
1904
1905        printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
1906               "IBSS networks with same SSID (merge)\n", sdata->dev->name);
1907        ieee80211_request_scan(sdata, ifsta->ssid, ifsta->ssid_len);
1908}
1909
1910
1911static void ieee80211_sta_timer(unsigned long data)
1912{
1913        struct ieee80211_sub_if_data *sdata =
1914                (struct ieee80211_sub_if_data *) data;
1915        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
1916        struct ieee80211_local *local = sdata->local;
1917
1918        set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
1919        queue_work(local->hw.workqueue, &ifsta->work);
1920}
1921
1922static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
1923                                     struct ieee80211_if_sta *ifsta)
1924{
1925        struct ieee80211_local *local = sdata->local;
1926
1927        if (local->ops->reset_tsf) {
1928                /* Reset own TSF to allow time synchronization work. */
1929                local->ops->reset_tsf(local_to_hw(local));
1930        }
1931
1932        ifsta->wmm_last_param_set = -1; /* allow any WMM update */
1933
1934
1935        if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1936                ifsta->auth_alg = WLAN_AUTH_OPEN;
1937        else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1938                ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
1939        else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1940                ifsta->auth_alg = WLAN_AUTH_LEAP;
1941        else
1942                ifsta->auth_alg = WLAN_AUTH_OPEN;
1943        ifsta->auth_transaction = -1;
1944        ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
1945        ifsta->assoc_scan_tries = 0;
1946        ifsta->direct_probe_tries = 0;
1947        ifsta->auth_tries = 0;
1948        ifsta->assoc_tries = 0;
1949        netif_tx_stop_all_queues(sdata->dev);
1950        netif_carrier_off(sdata->dev);
1951}
1952
1953
1954static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
1955                                    const char *ssid, int ssid_len)
1956{
1957        int tmp, hidden_ssid;
1958
1959        if (ssid_len == ifsta->ssid_len &&
1960            !memcmp(ifsta->ssid, ssid, ssid_len))
1961                return 1;
1962
1963        if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
1964                return 0;
1965
1966        hidden_ssid = 1;
1967        tmp = ssid_len;
1968        while (tmp--) {
1969                if (ssid[tmp] != '\0') {
1970                        hidden_ssid = 0;
1971                        break;
1972                }
1973        }
1974
1975        if (hidden_ssid && ifsta->ssid_len == ssid_len)
1976                return 1;
1977
1978        if (ssid_len == 1 && ssid[0] == ' ')
1979                return 1;
1980
1981        return 0;
1982}
1983
1984static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
1985                                     struct ieee80211_if_sta *ifsta)
1986{
1987        struct ieee80211_local *local = sdata->local;
1988        struct ieee80211_bss *bss;
1989        struct ieee80211_supported_band *sband;
1990        u8 bssid[ETH_ALEN], *pos;
1991        int i;
1992        int ret;
1993        DECLARE_MAC_BUF(mac);
1994
1995#if 0
1996        /* Easier testing, use fixed BSSID. */
1997        memset(bssid, 0xfe, ETH_ALEN);
1998#else
1999        /* Generate random, not broadcast, locally administered BSSID. Mix in
2000         * own MAC address to make sure that devices that do not have proper
2001         * random number generator get different BSSID. */
2002        get_random_bytes(bssid, ETH_ALEN);
2003        for (i = 0; i < ETH_ALEN; i++)
2004                bssid[i] ^= sdata->dev->dev_addr[i];
2005        bssid[0] &= ~0x01;
2006        bssid[0] |= 0x02;
2007#endif
2008
2009        printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %s\n",
2010               sdata->dev->name, print_mac(mac, bssid));
2011
2012        bss = ieee80211_rx_bss_add(local, bssid,
2013                                   local->hw.conf.channel->center_freq,
2014                                   sdata->u.sta.ssid, sdata->u.sta.ssid_len);
2015        if (!bss)
2016                return -ENOMEM;
2017
2018        bss->band = local->hw.conf.channel->band;
2019        sband = local->hw.wiphy->bands[bss->band];
2020
2021        if (local->hw.conf.beacon_int == 0)
2022                local->hw.conf.beacon_int = 100;
2023        bss->beacon_int = local->hw.conf.beacon_int;
2024        bss->last_update = jiffies;
2025        bss->capability = WLAN_CAPABILITY_IBSS;
2026
2027        if (sdata->default_key)
2028                bss->capability |= WLAN_CAPABILITY_PRIVACY;
2029        else
2030                sdata->drop_unencrypted = 0;
2031
2032        bss->supp_rates_len = sband->n_bitrates;
2033        pos = bss->supp_rates;
2034        for (i = 0; i < sband->n_bitrates; i++) {
2035                int rate = sband->bitrates[i].bitrate;
2036                *pos++ = (u8) (rate / 5);
2037        }
2038
2039        ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2040        ieee80211_rx_bss_put(local, bss);
2041        return ret;
2042}
2043
2044
2045static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
2046                                   struct ieee80211_if_sta *ifsta)
2047{
2048        struct ieee80211_local *local = sdata->local;
2049        struct ieee80211_bss *bss;
2050        int found = 0;
2051        u8 bssid[ETH_ALEN];
2052        int active_ibss;
2053        DECLARE_MAC_BUF(mac);
2054        DECLARE_MAC_BUF(mac2);
2055
2056        if (ifsta->ssid_len == 0)
2057                return -EINVAL;
2058
2059        active_ibss = ieee80211_sta_active_ibss(sdata);
2060#ifdef CONFIG_MAC80211_IBSS_DEBUG
2061        printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
2062               sdata->dev->name, active_ibss);
2063#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2064        spin_lock_bh(&local->bss_lock);
2065        list_for_each_entry(bss, &local->bss_list, list) {
2066                if (ifsta->ssid_len != bss->ssid_len ||
2067                    memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2068                    || !(bss->capability & WLAN_CAPABILITY_IBSS))
2069                        continue;
2070#ifdef CONFIG_MAC80211_IBSS_DEBUG
2071                printk(KERN_DEBUG "   bssid=%s found\n",
2072                       print_mac(mac, bss->bssid));
2073#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2074                memcpy(bssid, bss->bssid, ETH_ALEN);
2075                found = 1;
2076                if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2077                        break;
2078        }
2079        spin_unlock_bh(&local->bss_lock);
2080
2081#ifdef CONFIG_MAC80211_IBSS_DEBUG
2082        if (found)
2083                printk(KERN_DEBUG "   sta_find_ibss: selected %s current "
2084                       "%s\n", print_mac(mac, bssid),
2085                       print_mac(mac2, ifsta->bssid));
2086#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2087
2088        if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2089                int ret;
2090                int search_freq;
2091
2092                if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2093                        search_freq = bss->freq;
2094                else
2095                        search_freq = local->hw.conf.channel->center_freq;
2096
2097                bss = ieee80211_rx_bss_get(local, bssid, search_freq,
2098                                           ifsta->ssid, ifsta->ssid_len);
2099                if (!bss)
2100                        goto dont_join;
2101
2102                printk(KERN_DEBUG "%s: Selected IBSS BSSID %s"
2103                       " based on configured SSID\n",
2104                       sdata->dev->name, print_mac(mac, bssid));
2105                ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
2106                ieee80211_rx_bss_put(local, bss);
2107                return ret;
2108        }
2109
2110dont_join:
2111#ifdef CONFIG_MAC80211_IBSS_DEBUG
2112        printk(KERN_DEBUG "   did not try to join ibss\n");
2113#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2114
2115        /* Selected IBSS not found in current scan results - try to scan */
2116        if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
2117            !ieee80211_sta_active_ibss(sdata)) {
2118                mod_timer(&ifsta->timer, jiffies +
2119                                      IEEE80211_IBSS_MERGE_INTERVAL);
2120        } else if (time_after(jiffies, local->last_scan_completed +
2121                              IEEE80211_SCAN_INTERVAL)) {
2122                printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
2123                       "join\n", sdata->dev->name);
2124                return ieee80211_request_scan(sdata, ifsta->ssid,
2125                                              ifsta->ssid_len);
2126        } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
2127                int interval = IEEE80211_SCAN_INTERVAL;
2128
2129                if (time_after(jiffies, ifsta->ibss_join_req +
2130                               IEEE80211_IBSS_JOIN_TIMEOUT)) {
2131                        if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
2132                            (!(local->oper_channel->flags &
2133                                        IEEE80211_CHAN_NO_IBSS)))
2134                                return ieee80211_sta_create_ibss(sdata, ifsta);
2135                        if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
2136                                printk(KERN_DEBUG "%s: IBSS not allowed on"
2137                                       " %d MHz\n", sdata->dev->name,
2138                                       local->hw.conf.channel->center_freq);
2139                        }
2140
2141                        /* No IBSS found - decrease scan interval and continue
2142                         * scanning. */
2143                        interval = IEEE80211_SCAN_INTERVAL_SLOW;
2144                }
2145
2146                ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2147                mod_timer(&ifsta->timer, jiffies + interval);
2148                return 0;
2149        }
2150
2151        return 0;
2152}
2153
2154
2155static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2156                                     struct ieee80211_if_sta *ifsta)
2157{
2158        struct ieee80211_local *local = sdata->local;
2159        struct ieee80211_bss *bss, *selected = NULL;
2160        int top_rssi = 0, freq;
2161
2162        spin_lock_bh(&local->bss_lock);
2163        freq = local->oper_channel->center_freq;
2164        list_for_each_entry(bss, &local->bss_list, list) {
2165                if (!(bss->capability & WLAN_CAPABILITY_ESS))
2166                        continue;
2167
2168                if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2169                        IEEE80211_STA_AUTO_BSSID_SEL |
2170                        IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2171                    (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2172                     !!sdata->default_key))
2173                        continue;
2174
2175                if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2176                    bss->freq != freq)
2177                        continue;
2178
2179                if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2180                    memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2181                        continue;
2182
2183                if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2184                    !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2185                        continue;
2186
2187                if (!selected || top_rssi < bss->signal) {
2188                        selected = bss;
2189                        top_rssi = bss->signal;
2190                }
2191        }
2192        if (selected)
2193                atomic_inc(&selected->users);
2194        spin_unlock_bh(&local->bss_lock);
2195
2196        if (selected) {
2197                ieee80211_set_freq(sdata, selected->freq);
2198                if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2199                        ieee80211_sta_set_ssid(sdata, selected->ssid,
2200                                               selected->ssid_len);
2201                ieee80211_sta_set_bssid(sdata, selected->bssid);
2202                ieee80211_sta_def_wmm_params(sdata, selected);
2203
2204                /* Send out direct probe if no probe resp was received or
2205                 * the one we have is outdated
2206                 */
2207                if (!selected->last_probe_resp ||
2208                    time_after(jiffies, selected->last_probe_resp
2209                                        + IEEE80211_SCAN_RESULT_EXPIRE))
2210                        ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2211                else
2212                        ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2213
2214                ieee80211_rx_bss_put(local, selected);
2215                ieee80211_sta_reset_auth(sdata, ifsta);
2216                return 0;
2217        } else {
2218                if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2219                        ifsta->assoc_scan_tries++;
2220                        if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
2221                                ieee80211_start_scan(sdata, NULL, 0);
2222                        else
2223                                ieee80211_start_scan(sdata, ifsta->ssid,
2224                                                         ifsta->ssid_len);
2225                        ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2226                        set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2227                } else
2228                        ifsta->state = IEEE80211_STA_MLME_DISABLED;
2229        }
2230        return -1;
2231}
2232
2233
2234static void ieee80211_sta_work(struct work_struct *work)
2235{
2236        struct ieee80211_sub_if_data *sdata =
2237                container_of(work, struct ieee80211_sub_if_data, u.sta.work);
2238        struct ieee80211_local *local = sdata->local;
2239        struct ieee80211_if_sta *ifsta;
2240        struct sk_buff *skb;
2241
2242        if (!netif_running(sdata->dev))
2243                return;
2244
2245        if (local->sw_scanning || local->hw_scanning)
2246                return;
2247
2248        if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION &&
2249                    sdata->vif.type != NL80211_IFTYPE_ADHOC))
2250                return;
2251        ifsta = &sdata->u.sta;
2252
2253        while ((skb = skb_dequeue(&ifsta->skb_queue)))
2254                ieee80211_sta_rx_queued_mgmt(sdata, skb);
2255
2256        if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
2257            ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
2258            ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
2259            test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
2260                ieee80211_start_scan(sdata, ifsta->scan_ssid,
2261                                     ifsta->scan_ssid_len);
2262                return;
2263        }
2264
2265        if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
2266                if (ieee80211_sta_config_auth(sdata, ifsta))
2267                        return;
2268                clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2269        } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
2270                return;
2271
2272        switch (ifsta->state) {
2273        case IEEE80211_STA_MLME_DISABLED:
2274                break;
2275        case IEEE80211_STA_MLME_DIRECT_PROBE:
2276                ieee80211_direct_probe(sdata, ifsta);
2277                break;
2278        case IEEE80211_STA_MLME_AUTHENTICATE:
2279                ieee80211_authenticate(sdata, ifsta);
2280                break;
2281        case IEEE80211_STA_MLME_ASSOCIATE:
2282                ieee80211_associate(sdata, ifsta);
2283                break;
2284        case IEEE80211_STA_MLME_ASSOCIATED:
2285                ieee80211_associated(sdata, ifsta);
2286                break;
2287        case IEEE80211_STA_MLME_IBSS_SEARCH:
2288                ieee80211_sta_find_ibss(sdata, ifsta);
2289                break;
2290        case IEEE80211_STA_MLME_IBSS_JOINED:
2291                ieee80211_sta_merge_ibss(sdata, ifsta);
2292                break;
2293        default:
2294                WARN_ON(1);
2295                break;
2296        }
2297
2298        if (ieee80211_privacy_mismatch(sdata, ifsta)) {
2299                printk(KERN_DEBUG "%s: privacy configuration mismatch and "
2300                       "mixed-cell disabled - disassociate\n", sdata->dev->name);
2301
2302                ieee80211_set_disassoc(sdata, ifsta, false, true,
2303                                        WLAN_REASON_UNSPECIFIED);
2304        }
2305}
2306
2307static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)
2308{
2309        if (sdata->vif.type == NL80211_IFTYPE_STATION)
2310                queue_work(sdata->local->hw.workqueue,
2311                           &sdata->u.sta.work);
2312}
2313
2314/* interface setup */
2315void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)
2316{
2317        struct ieee80211_if_sta *ifsta;
2318
2319        ifsta = &sdata->u.sta;
2320        INIT_WORK(&ifsta->work, ieee80211_sta_work);
2321        setup_timer(&ifsta->timer, ieee80211_sta_timer,
2322                    (unsigned long) sdata);
2323        skb_queue_head_init(&ifsta->skb_queue);
2324
2325        ifsta->capab = WLAN_CAPABILITY_ESS;
2326        ifsta->auth_algs = IEEE80211_AUTH_ALG_OPEN |
2327                IEEE80211_AUTH_ALG_SHARED_KEY;
2328        ifsta->flags |= IEEE80211_STA_CREATE_IBSS |
2329                IEEE80211_STA_AUTO_BSSID_SEL |
2330                IEEE80211_STA_AUTO_CHANNEL_SEL;
2331        if (ieee80211_num_regular_queues(&sdata->local->hw) >= 4)
2332                ifsta->flags |= IEEE80211_STA_WMM_ENABLED;
2333}
2334
2335/*
2336 * Add a new IBSS station, will also be called by the RX code when,
2337 * in IBSS mode, receiving a frame from a yet-unknown station, hence
2338 * must be callable in atomic context.
2339 */
2340struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
2341                                        struct sk_buff *skb, u8 *bssid,
2342                                        u8 *addr, u64 supp_rates)
2343{
2344        struct ieee80211_local *local = sdata->local;
2345        struct sta_info *sta;
2346        DECLARE_MAC_BUF(mac);
2347        int band = local->hw.conf.channel->band;
2348
2349        /* TODO: Could consider removing the least recently used entry and
2350         * allow new one to be added. */
2351        if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2352                if (net_ratelimit()) {
2353                        printk(KERN_DEBUG "%s: No room for a new IBSS STA "
2354                               "entry %s\n", sdata->dev->name, print_mac(mac, addr));
2355                }
2356                return NULL;
2357        }
2358
2359        if (compare_ether_addr(bssid, sdata->u.sta.bssid))
2360                return NULL;
2361
2362#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
2363        printk(KERN_DEBUG "%s: Adding new IBSS station %s (dev=%s)\n",
2364               wiphy_name(local->hw.wiphy), print_mac(mac, addr), sdata->dev->name);
2365#endif
2366
2367        sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2368        if (!sta)
2369                return NULL;
2370
2371        set_sta_flags(sta, WLAN_STA_AUTHORIZED);
2372
2373        /* make sure mandatory rates are always added */
2374        sta->sta.supp_rates[band] = supp_rates |
2375                        ieee80211_mandatory_rates(local, band);
2376
2377        rate_control_rate_init(sta);
2378
2379        if (sta_info_insert(sta))
2380                return NULL;
2381
2382        return sta;
2383}
2384
2385/* configuration hooks */
2386void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2387                            struct ieee80211_if_sta *ifsta)
2388{
2389        struct ieee80211_local *local = sdata->local;
2390
2391        if (sdata->vif.type != NL80211_IFTYPE_STATION)
2392                return;
2393
2394        if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2395                             IEEE80211_STA_AUTO_BSSID_SEL)) &&
2396            (ifsta->flags & (IEEE80211_STA_SSID_SET |
2397                             IEEE80211_STA_AUTO_SSID_SEL))) {
2398
2399                if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2400                        ieee80211_set_disassoc(sdata, ifsta, true, true,
2401                                               WLAN_REASON_DEAUTH_LEAVING);
2402
2403                set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2404                queue_work(local->hw.workqueue, &ifsta->work);
2405        }
2406}
2407
2408int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2409{
2410        struct ieee80211_if_sta *ifsta;
2411        int res;
2412
2413        if (len > IEEE80211_MAX_SSID_LEN)
2414                return -EINVAL;
2415
2416        ifsta = &sdata->u.sta;
2417
2418        if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2419                memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2420                memcpy(ifsta->ssid, ssid, len);
2421                ifsta->ssid_len = len;
2422                ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
2423
2424                res = 0;
2425                /*
2426                 * Hack! MLME code needs to be cleaned up to have different
2427                 * entry points for configuration and internal selection change
2428                 */
2429                if (netif_running(sdata->dev))
2430                        res = ieee80211_if_config(sdata, IEEE80211_IFCC_SSID);
2431                if (res) {
2432                        printk(KERN_DEBUG "%s: Failed to config new SSID to "
2433                               "the low-level driver\n", sdata->dev->name);
2434                        return res;
2435                }
2436        }
2437
2438        if (len)
2439                ifsta->flags |= IEEE80211_STA_SSID_SET;
2440        else
2441                ifsta->flags &= ~IEEE80211_STA_SSID_SET;
2442
2443        if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
2444            !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2445                ifsta->ibss_join_req = jiffies;
2446                ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2447                return ieee80211_sta_find_ibss(sdata, ifsta);
2448        }
2449
2450        return 0;
2451}
2452
2453int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2454{
2455        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2456        memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2457        *len = ifsta->ssid_len;
2458        return 0;
2459}
2460
2461int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2462{
2463        struct ieee80211_if_sta *ifsta;
2464        int res;
2465
2466        ifsta = &sdata->u.sta;
2467
2468        if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2469                memcpy(ifsta->bssid, bssid, ETH_ALEN);
2470                res = 0;
2471                /*
2472                 * Hack! See also ieee80211_sta_set_ssid.
2473                 */
2474                if (netif_running(sdata->dev))
2475                        res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2476                if (res) {
2477                        printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2478                               "the low-level driver\n", sdata->dev->name);
2479                        return res;
2480                }
2481        }
2482
2483        if (is_valid_ether_addr(bssid))
2484                ifsta->flags |= IEEE80211_STA_BSSID_SET;
2485        else
2486                ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2487
2488        return 0;
2489}
2490
2491int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2492{
2493        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2494
2495        kfree(ifsta->extra_ie);
2496        if (len == 0) {
2497                ifsta->extra_ie = NULL;
2498                ifsta->extra_ie_len = 0;
2499                return 0;
2500        }
2501        ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2502        if (!ifsta->extra_ie) {
2503                ifsta->extra_ie_len = 0;
2504                return -ENOMEM;
2505        }
2506        memcpy(ifsta->extra_ie, ie, len);
2507        ifsta->extra_ie_len = len;
2508        return 0;
2509}
2510
2511int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
2512{
2513        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2514
2515        printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
2516               sdata->dev->name, reason);
2517
2518        if (sdata->vif.type != NL80211_IFTYPE_STATION &&
2519            sdata->vif.type != NL80211_IFTYPE_ADHOC)
2520                return -EINVAL;
2521
2522        ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
2523        return 0;
2524}
2525
2526int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
2527{
2528        struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2529
2530        printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
2531               sdata->dev->name, reason);
2532
2533        if (sdata->vif.type != NL80211_IFTYPE_STATION)
2534                return -EINVAL;
2535
2536        if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
2537                return -1;
2538
2539        ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
2540        return 0;
2541}
2542
2543/* scan finished notification */
2544void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
2545{
2546        struct ieee80211_sub_if_data *sdata = local->scan_sdata;
2547        struct ieee80211_if_sta *ifsta;
2548
2549        if (sdata && sdata->vif.type == NL80211_IFTYPE_ADHOC) {
2550                ifsta = &sdata->u.sta;
2551                if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
2552                    (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
2553                    !ieee80211_sta_active_ibss(sdata)))
2554                        ieee80211_sta_find_ibss(sdata, ifsta);
2555        }
2556
2557        /* Restart STA timers */
2558        rcu_read_lock();
2559        list_for_each_entry_rcu(sdata, &local->interfaces, list)
2560                ieee80211_restart_sta_timer(sdata);
2561        rcu_read_unlock();
2562}
2563
lxr.linux.no kindly hosted by Redpill Linpro AS, provider of Linux consulting and operations services since 1995.