]>
Commit | Line | Data |
---|---|---|
f0706e82 JB |
1 | /* |
2 | * BSS client mode implementation | |
5394af4d | 3 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> |
f0706e82 JB |
4 | * Copyright 2004, Instant802 Networks, Inc. |
5 | * Copyright 2005, Devicescape Software, Inc. | |
6 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
7 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License version 2 as | |
11 | * published by the Free Software Foundation. | |
12 | */ | |
13 | ||
5b323edb | 14 | #include <linux/delay.h> |
f0706e82 JB |
15 | #include <linux/if_ether.h> |
16 | #include <linux/skbuff.h> | |
f0706e82 | 17 | #include <linux/if_arp.h> |
f0706e82 | 18 | #include <linux/etherdevice.h> |
d0709a65 | 19 | #include <linux/rtnetlink.h> |
10f644a4 | 20 | #include <linux/pm_qos_params.h> |
d91f36db | 21 | #include <linux/crc32.h> |
f0706e82 | 22 | #include <net/mac80211.h> |
472dbc45 | 23 | #include <asm/unaligned.h> |
60f8b39c | 24 | |
f0706e82 | 25 | #include "ieee80211_i.h" |
24487981 | 26 | #include "driver-ops.h" |
2c8dccc7 JB |
27 | #include "rate.h" |
28 | #include "led.h" | |
f0706e82 JB |
29 | |
30 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
31 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
32 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
33 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
a43abf29 | 34 | #define IEEE80211_MAX_PROBE_TRIES 5 |
b291ba11 JB |
35 | |
36 | /* | |
37 | * beacon loss detection timeout | |
38 | * XXX: should depend on beacon interval | |
39 | */ | |
40 | #define IEEE80211_BEACON_LOSS_TIME (2 * HZ) | |
41 | /* | |
42 | * Time the connection can be idle before we probe | |
43 | * it to see if we can still talk to the AP. | |
44 | */ | |
d1c5091f | 45 | #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ) |
b291ba11 JB |
46 | /* |
47 | * Time we wait for a probe response after sending | |
48 | * a probe request because of beacon loss or for | |
49 | * checking the connection still works. | |
50 | */ | |
d1c5091f | 51 | #define IEEE80211_PROBE_WAIT (HZ / 2) |
f0706e82 | 52 | |
5bb644a0 JB |
53 | #define TMR_RUNNING_TIMER 0 |
54 | #define TMR_RUNNING_CHANSW 1 | |
55 | ||
77fdaa12 JB |
56 | /* |
57 | * All cfg80211 functions have to be called outside a locked | |
58 | * section so that they can acquire a lock themselves... This | |
59 | * is much simpler than queuing up things in cfg80211, but we | |
60 | * do need some indirection for that here. | |
61 | */ | |
62 | enum rx_mgmt_action { | |
63 | /* no action required */ | |
64 | RX_MGMT_NONE, | |
65 | ||
66 | /* caller must call cfg80211_send_rx_auth() */ | |
67 | RX_MGMT_CFG80211_AUTH, | |
68 | ||
69 | /* caller must call cfg80211_send_rx_assoc() */ | |
70 | RX_MGMT_CFG80211_ASSOC, | |
71 | ||
72 | /* caller must call cfg80211_send_deauth() */ | |
73 | RX_MGMT_CFG80211_DEAUTH, | |
74 | ||
75 | /* caller must call cfg80211_send_disassoc() */ | |
76 | RX_MGMT_CFG80211_DISASSOC, | |
77 | ||
78 | /* caller must call cfg80211_auth_timeout() & free work */ | |
79 | RX_MGMT_CFG80211_AUTH_TO, | |
80 | ||
81 | /* caller must call cfg80211_assoc_timeout() & free work */ | |
82 | RX_MGMT_CFG80211_ASSOC_TO, | |
83 | }; | |
84 | ||
5484e237 | 85 | /* utils */ |
77fdaa12 JB |
86 | static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd) |
87 | { | |
88 | WARN_ON(!mutex_is_locked(&ifmgd->mtx)); | |
89 | } | |
90 | ||
ca386f31 JB |
91 | /* |
92 | * We can have multiple work items (and connection probing) | |
93 | * scheduling this timer, but we need to take care to only | |
94 | * reschedule it when it should fire _earlier_ than it was | |
95 | * asked for before, or if it's not pending right now. This | |
96 | * function ensures that. Note that it then is required to | |
97 | * run this function for all timeouts after the first one | |
98 | * has happened -- the work that runs from this timer will | |
99 | * do that. | |
100 | */ | |
101 | static void run_again(struct ieee80211_if_managed *ifmgd, | |
102 | unsigned long timeout) | |
103 | { | |
104 | ASSERT_MGD_MTX(ifmgd); | |
105 | ||
106 | if (!timer_pending(&ifmgd->timer) || | |
107 | time_before(timeout, ifmgd->timer.expires)) | |
108 | mod_timer(&ifmgd->timer, timeout); | |
109 | } | |
110 | ||
b291ba11 JB |
111 | static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata) |
112 | { | |
113 | if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER) | |
114 | return; | |
115 | ||
116 | mod_timer(&sdata->u.mgd.bcn_mon_timer, | |
117 | round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME)); | |
118 | } | |
119 | ||
5484e237 | 120 | static int ecw2cw(int ecw) |
60f8b39c | 121 | { |
5484e237 | 122 | return (1 << ecw) - 1; |
60f8b39c JB |
123 | } |
124 | ||
c2b13452 | 125 | static int ieee80211_compatible_rates(struct ieee80211_bss *bss, |
9ac19a90 | 126 | struct ieee80211_supported_band *sband, |
881d948c | 127 | u32 *rates) |
9ac19a90 JB |
128 | { |
129 | int i, j, count; | |
130 | *rates = 0; | |
131 | count = 0; | |
132 | for (i = 0; i < bss->supp_rates_len; i++) { | |
133 | int rate = (bss->supp_rates[i] & 0x7F) * 5; | |
134 | ||
135 | for (j = 0; j < sband->n_bitrates; j++) | |
136 | if (sband->bitrates[j].bitrate == rate) { | |
137 | *rates |= BIT(j); | |
138 | count++; | |
139 | break; | |
140 | } | |
141 | } | |
142 | ||
143 | return count; | |
144 | } | |
145 | ||
d5522e03 JB |
146 | /* |
147 | * ieee80211_enable_ht should be called only after the operating band | |
148 | * has been determined as ht configuration depends on the hw's | |
149 | * HT abilities for a specific band. | |
150 | */ | |
151 | static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata, | |
152 | struct ieee80211_ht_info *hti, | |
77fdaa12 | 153 | const u8 *bssid, u16 ap_ht_cap_flags) |
d5522e03 JB |
154 | { |
155 | struct ieee80211_local *local = sdata->local; | |
156 | struct ieee80211_supported_band *sband; | |
d5522e03 JB |
157 | struct sta_info *sta; |
158 | u32 changed = 0; | |
9ed6bcce | 159 | u16 ht_opmode; |
d5522e03 JB |
160 | bool enable_ht = true, ht_changed; |
161 | enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT; | |
162 | ||
163 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
164 | ||
d5522e03 JB |
165 | /* HT is not supported */ |
166 | if (!sband->ht_cap.ht_supported) | |
167 | enable_ht = false; | |
168 | ||
169 | /* check that channel matches the right operating channel */ | |
170 | if (local->hw.conf.channel->center_freq != | |
171 | ieee80211_channel_to_frequency(hti->control_chan)) | |
172 | enable_ht = false; | |
173 | ||
174 | if (enable_ht) { | |
175 | channel_type = NL80211_CHAN_HT20; | |
176 | ||
177 | if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) && | |
178 | (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) && | |
179 | (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) { | |
180 | switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
181 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
768777ea LR |
182 | if (!(local->hw.conf.channel->flags & |
183 | IEEE80211_CHAN_NO_HT40PLUS)) | |
184 | channel_type = NL80211_CHAN_HT40PLUS; | |
d5522e03 JB |
185 | break; |
186 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
768777ea LR |
187 | if (!(local->hw.conf.channel->flags & |
188 | IEEE80211_CHAN_NO_HT40MINUS)) | |
189 | channel_type = NL80211_CHAN_HT40MINUS; | |
d5522e03 JB |
190 | break; |
191 | } | |
192 | } | |
193 | } | |
194 | ||
195 | ht_changed = conf_is_ht(&local->hw.conf) != enable_ht || | |
196 | channel_type != local->hw.conf.channel_type; | |
197 | ||
198 | local->oper_channel_type = channel_type; | |
199 | ||
200 | if (ht_changed) { | |
201 | /* channel_type change automatically detected */ | |
202 | ieee80211_hw_config(local, 0); | |
203 | ||
204 | rcu_read_lock(); | |
abe60632 | 205 | sta = sta_info_get(sdata, bssid); |
d5522e03 JB |
206 | if (sta) |
207 | rate_control_rate_update(local, sband, sta, | |
208 | IEEE80211_RC_HT_CHANGED); | |
d5522e03 | 209 | rcu_read_unlock(); |
d5522e03 JB |
210 | } |
211 | ||
212 | /* disable HT */ | |
213 | if (!enable_ht) | |
214 | return 0; | |
215 | ||
9ed6bcce | 216 | ht_opmode = le16_to_cpu(hti->operation_mode); |
d5522e03 JB |
217 | |
218 | /* if bss configuration changed store the new one */ | |
413ad50a JB |
219 | if (!sdata->ht_opmode_valid || |
220 | sdata->vif.bss_conf.ht_operation_mode != ht_opmode) { | |
d5522e03 | 221 | changed |= BSS_CHANGED_HT; |
9ed6bcce | 222 | sdata->vif.bss_conf.ht_operation_mode = ht_opmode; |
413ad50a | 223 | sdata->ht_opmode_valid = true; |
d5522e03 JB |
224 | } |
225 | ||
226 | return changed; | |
227 | } | |
228 | ||
9c6bd790 JB |
229 | /* frame sending functions */ |
230 | ||
77fdaa12 JB |
231 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
232 | struct ieee80211_mgd_work *wk) | |
9ac19a90 | 233 | { |
46900298 | 234 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
235 | struct ieee80211_local *local = sdata->local; |
236 | struct sk_buff *skb; | |
237 | struct ieee80211_mgmt *mgmt; | |
517357c6 JB |
238 | u8 *pos; |
239 | const u8 *ies, *ht_ie; | |
9ac19a90 JB |
240 | int i, len, count, rates_len, supp_rates_len; |
241 | u16 capab; | |
9ac19a90 JB |
242 | int wmm = 0; |
243 | struct ieee80211_supported_band *sband; | |
881d948c | 244 | u32 rates = 0; |
9ac19a90 JB |
245 | |
246 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + | |
77fdaa12 JB |
247 | sizeof(*mgmt) + 200 + wk->ie_len + |
248 | wk->ssid_len); | |
9ac19a90 JB |
249 | if (!skb) { |
250 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
47846c9b | 251 | "frame\n", sdata->name); |
9ac19a90 JB |
252 | return; |
253 | } | |
254 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
255 | ||
256 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
257 | ||
46900298 | 258 | capab = ifmgd->capab; |
9ac19a90 JB |
259 | |
260 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) { | |
261 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
262 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
263 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
264 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
265 | } | |
266 | ||
77fdaa12 JB |
267 | if (wk->bss->cbss.capability & WLAN_CAPABILITY_PRIVACY) |
268 | capab |= WLAN_CAPABILITY_PRIVACY; | |
269 | if (wk->bss->wmm_used) | |
270 | wmm = 1; | |
9ac19a90 | 271 | |
77fdaa12 JB |
272 | /* get all rates supported by the device and the AP as |
273 | * some APs don't like getting a superset of their rates | |
274 | * in the association request (e.g. D-Link DAP 1353 in | |
275 | * b-only mode) */ | |
276 | rates_len = ieee80211_compatible_rates(wk->bss, sband, &rates); | |
9ac19a90 | 277 | |
77fdaa12 JB |
278 | if ((wk->bss->cbss.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
279 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) | |
280 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; | |
9ac19a90 JB |
281 | |
282 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
283 | memset(mgmt, 0, 24); | |
77fdaa12 | 284 | memcpy(mgmt->da, wk->bss->cbss.bssid, ETH_ALEN); |
47846c9b | 285 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); |
77fdaa12 | 286 | memcpy(mgmt->bssid, wk->bss->cbss.bssid, ETH_ALEN); |
9ac19a90 | 287 | |
77fdaa12 | 288 | if (!is_zero_ether_addr(wk->prev_bssid)) { |
9ac19a90 JB |
289 | skb_put(skb, 10); |
290 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
291 | IEEE80211_STYPE_REASSOC_REQ); | |
292 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
293 | mgmt->u.reassoc_req.listen_interval = | |
294 | cpu_to_le16(local->hw.conf.listen_interval); | |
77fdaa12 | 295 | memcpy(mgmt->u.reassoc_req.current_ap, wk->prev_bssid, |
9ac19a90 JB |
296 | ETH_ALEN); |
297 | } else { | |
298 | skb_put(skb, 4); | |
299 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
300 | IEEE80211_STYPE_ASSOC_REQ); | |
301 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
13554121 | 302 | mgmt->u.assoc_req.listen_interval = |
9ac19a90 JB |
303 | cpu_to_le16(local->hw.conf.listen_interval); |
304 | } | |
305 | ||
306 | /* SSID */ | |
77fdaa12 | 307 | ies = pos = skb_put(skb, 2 + wk->ssid_len); |
9ac19a90 | 308 | *pos++ = WLAN_EID_SSID; |
77fdaa12 JB |
309 | *pos++ = wk->ssid_len; |
310 | memcpy(pos, wk->ssid, wk->ssid_len); | |
9ac19a90 JB |
311 | |
312 | /* add all rates which were marked to be used above */ | |
313 | supp_rates_len = rates_len; | |
314 | if (supp_rates_len > 8) | |
315 | supp_rates_len = 8; | |
316 | ||
317 | len = sband->n_bitrates; | |
318 | pos = skb_put(skb, supp_rates_len + 2); | |
319 | *pos++ = WLAN_EID_SUPP_RATES; | |
320 | *pos++ = supp_rates_len; | |
321 | ||
322 | count = 0; | |
323 | for (i = 0; i < sband->n_bitrates; i++) { | |
324 | if (BIT(i) & rates) { | |
325 | int rate = sband->bitrates[i].bitrate; | |
326 | *pos++ = (u8) (rate / 5); | |
327 | if (++count == 8) | |
328 | break; | |
329 | } | |
330 | } | |
331 | ||
332 | if (rates_len > count) { | |
333 | pos = skb_put(skb, rates_len - count + 2); | |
334 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
335 | *pos++ = rates_len - count; | |
336 | ||
337 | for (i++; i < sband->n_bitrates; i++) { | |
338 | if (BIT(i) & rates) { | |
339 | int rate = sband->bitrates[i].bitrate; | |
340 | *pos++ = (u8) (rate / 5); | |
341 | } | |
342 | } | |
343 | } | |
344 | ||
345 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { | |
346 | /* 1. power capabilities */ | |
347 | pos = skb_put(skb, 4); | |
348 | *pos++ = WLAN_EID_PWR_CAPABILITY; | |
349 | *pos++ = 2; | |
350 | *pos++ = 0; /* min tx power */ | |
351 | *pos++ = local->hw.conf.channel->max_power; /* max tx power */ | |
352 | ||
353 | /* 2. supported channels */ | |
354 | /* TODO: get this in reg domain format */ | |
355 | pos = skb_put(skb, 2 * sband->n_channels + 2); | |
356 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
357 | *pos++ = 2 * sband->n_channels; | |
358 | for (i = 0; i < sband->n_channels; i++) { | |
359 | *pos++ = ieee80211_frequency_to_channel( | |
360 | sband->channels[i].center_freq); | |
361 | *pos++ = 1; /* one channel in the subband*/ | |
362 | } | |
363 | } | |
364 | ||
77fdaa12 JB |
365 | if (wk->ie_len && wk->ie) { |
366 | pos = skb_put(skb, wk->ie_len); | |
367 | memcpy(pos, wk->ie, wk->ie_len); | |
9ac19a90 JB |
368 | } |
369 | ||
46900298 | 370 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) { |
9ac19a90 JB |
371 | pos = skb_put(skb, 9); |
372 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
373 | *pos++ = 7; /* len */ | |
374 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
375 | *pos++ = 0x50; | |
376 | *pos++ = 0xf2; | |
377 | *pos++ = 2; /* WME */ | |
378 | *pos++ = 0; /* WME info */ | |
379 | *pos++ = 1; /* WME ver */ | |
380 | *pos++ = 0; | |
381 | } | |
382 | ||
383 | /* wmm support is a must to HT */ | |
eb46936b VT |
384 | /* |
385 | * IEEE802.11n does not allow TKIP/WEP as pairwise | |
386 | * ciphers in HT mode. We still associate in non-ht | |
387 | * mode (11a/b/g) if any one of these ciphers is | |
388 | * configured as pairwise. | |
389 | */ | |
46900298 | 390 | if (wmm && (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
d9fe60de | 391 | sband->ht_cap.ht_supported && |
77fdaa12 | 392 | (ht_ie = ieee80211_bss_get_ie(&wk->bss->cbss, WLAN_EID_HT_INFORMATION)) && |
eb46936b | 393 | ht_ie[1] >= sizeof(struct ieee80211_ht_info) && |
ab1faead | 394 | (!(ifmgd->flags & IEEE80211_STA_DISABLE_11N))) { |
d9fe60de JB |
395 | struct ieee80211_ht_info *ht_info = |
396 | (struct ieee80211_ht_info *)(ht_ie + 2); | |
397 | u16 cap = sband->ht_cap.cap; | |
9ac19a90 JB |
398 | __le16 tmp; |
399 | u32 flags = local->hw.conf.channel->flags; | |
400 | ||
0f78231b JB |
401 | /* determine capability flags */ |
402 | ||
f38fd12f JB |
403 | if (ieee80211_disable_40mhz_24ghz && |
404 | sband->band == IEEE80211_BAND_2GHZ) { | |
405 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; | |
406 | cap &= ~IEEE80211_HT_CAP_SGI_40; | |
407 | } | |
408 | ||
d9fe60de JB |
409 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { |
410 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
689da1b3 | 411 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { |
d9fe60de | 412 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
413 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
414 | } | |
415 | break; | |
d9fe60de | 416 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: |
689da1b3 | 417 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { |
d9fe60de | 418 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; |
9ac19a90 JB |
419 | cap &= ~IEEE80211_HT_CAP_SGI_40; |
420 | } | |
421 | break; | |
422 | } | |
423 | ||
0f78231b JB |
424 | /* set SM PS mode properly */ |
425 | cap &= ~IEEE80211_HT_CAP_SM_PS; | |
426 | /* new association always uses requested smps mode */ | |
427 | if (ifmgd->req_smps == IEEE80211_SMPS_AUTOMATIC) { | |
428 | if (ifmgd->powersave) | |
429 | ifmgd->ap_smps = IEEE80211_SMPS_DYNAMIC; | |
430 | else | |
431 | ifmgd->ap_smps = IEEE80211_SMPS_OFF; | |
432 | } else | |
433 | ifmgd->ap_smps = ifmgd->req_smps; | |
434 | ||
435 | switch (ifmgd->ap_smps) { | |
436 | case IEEE80211_SMPS_AUTOMATIC: | |
437 | case IEEE80211_SMPS_NUM_MODES: | |
438 | WARN_ON(1); | |
439 | case IEEE80211_SMPS_OFF: | |
440 | cap |= WLAN_HT_CAP_SM_PS_DISABLED << | |
441 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
442 | break; | |
443 | case IEEE80211_SMPS_STATIC: | |
444 | cap |= WLAN_HT_CAP_SM_PS_STATIC << | |
445 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
446 | break; | |
447 | case IEEE80211_SMPS_DYNAMIC: | |
448 | cap |= WLAN_HT_CAP_SM_PS_DYNAMIC << | |
449 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
450 | break; | |
451 | } | |
452 | ||
453 | /* reserve and fill IE */ | |
454 | ||
455 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2); | |
9ac19a90 JB |
456 | *pos++ = WLAN_EID_HT_CAPABILITY; |
457 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
458 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
0f78231b JB |
459 | |
460 | /* capability flags */ | |
461 | tmp = cpu_to_le16(cap); | |
9ac19a90 JB |
462 | memcpy(pos, &tmp, sizeof(u16)); |
463 | pos += sizeof(u16); | |
0f78231b JB |
464 | |
465 | /* AMPDU parameters */ | |
d9fe60de | 466 | *pos++ = sband->ht_cap.ampdu_factor | |
0f78231b JB |
467 | (sband->ht_cap.ampdu_density << |
468 | IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT); | |
469 | ||
470 | /* MCS set */ | |
d9fe60de | 471 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); |
0f78231b JB |
472 | pos += sizeof(sband->ht_cap.mcs); |
473 | ||
474 | /* extended capabilities */ | |
475 | pos += sizeof(__le16); | |
476 | ||
477 | /* BF capabilities */ | |
478 | pos += sizeof(__le32); | |
479 | ||
480 | /* antenna selection */ | |
481 | pos += sizeof(u8); | |
9ac19a90 JB |
482 | } |
483 | ||
62ae67be JB |
484 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
485 | ieee80211_tx_skb(sdata, skb); | |
9ac19a90 JB |
486 | } |
487 | ||
488 | ||
ef422bc0 | 489 | static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
490 | const u8 *bssid, u16 stype, u16 reason, |
491 | void *cookie) | |
9ac19a90 JB |
492 | { |
493 | struct ieee80211_local *local = sdata->local; | |
46900298 | 494 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9ac19a90 JB |
495 | struct sk_buff *skb; |
496 | struct ieee80211_mgmt *mgmt; | |
9aed3cc1 | 497 | |
65fc73ac | 498 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt)); |
9ac19a90 | 499 | if (!skb) { |
ef422bc0 | 500 | printk(KERN_DEBUG "%s: failed to allocate buffer for " |
47846c9b | 501 | "deauth/disassoc frame\n", sdata->name); |
9ac19a90 JB |
502 | return; |
503 | } | |
504 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
505 | ||
506 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
507 | memset(mgmt, 0, 24); | |
77fdaa12 | 508 | memcpy(mgmt->da, bssid, ETH_ALEN); |
47846c9b | 509 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); |
77fdaa12 | 510 | memcpy(mgmt->bssid, bssid, ETH_ALEN); |
ef422bc0 | 511 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); |
9ac19a90 | 512 | skb_put(skb, 2); |
ef422bc0 | 513 | /* u.deauth.reason_code == u.disassoc.reason_code */ |
9ac19a90 JB |
514 | mgmt->u.deauth.reason_code = cpu_to_le16(reason); |
515 | ||
53b46b84 | 516 | if (stype == IEEE80211_STYPE_DEAUTH) |
ce470613 HS |
517 | if (cookie) |
518 | __cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
519 | else | |
520 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); | |
53b46b84 | 521 | else |
ce470613 HS |
522 | if (cookie) |
523 | __cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
524 | else | |
525 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); | |
62ae67be JB |
526 | if (!(ifmgd->flags & IEEE80211_STA_MFP_ENABLED)) |
527 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; | |
528 | ieee80211_tx_skb(sdata, skb); | |
9ac19a90 JB |
529 | } |
530 | ||
572e0012 KV |
531 | void ieee80211_send_pspoll(struct ieee80211_local *local, |
532 | struct ieee80211_sub_if_data *sdata) | |
533 | { | |
46900298 | 534 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
572e0012 KV |
535 | struct ieee80211_pspoll *pspoll; |
536 | struct sk_buff *skb; | |
537 | u16 fc; | |
538 | ||
539 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*pspoll)); | |
540 | if (!skb) { | |
541 | printk(KERN_DEBUG "%s: failed to allocate buffer for " | |
47846c9b | 542 | "pspoll frame\n", sdata->name); |
572e0012 KV |
543 | return; |
544 | } | |
545 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
546 | ||
547 | pspoll = (struct ieee80211_pspoll *) skb_put(skb, sizeof(*pspoll)); | |
548 | memset(pspoll, 0, sizeof(*pspoll)); | |
549 | fc = IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL | IEEE80211_FCTL_PM; | |
550 | pspoll->frame_control = cpu_to_le16(fc); | |
46900298 | 551 | pspoll->aid = cpu_to_le16(ifmgd->aid); |
572e0012 KV |
552 | |
553 | /* aid in PS-Poll has its two MSBs each set to 1 */ | |
554 | pspoll->aid |= cpu_to_le16(1 << 15 | 1 << 14); | |
555 | ||
46900298 | 556 | memcpy(pspoll->bssid, ifmgd->bssid, ETH_ALEN); |
47846c9b | 557 | memcpy(pspoll->ta, sdata->vif.addr, ETH_ALEN); |
572e0012 | 558 | |
62ae67be JB |
559 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
560 | ieee80211_tx_skb(sdata, skb); | |
572e0012 KV |
561 | } |
562 | ||
965bedad JB |
563 | void ieee80211_send_nullfunc(struct ieee80211_local *local, |
564 | struct ieee80211_sub_if_data *sdata, | |
565 | int powersave) | |
566 | { | |
567 | struct sk_buff *skb; | |
568 | struct ieee80211_hdr *nullfunc; | |
569 | __le16 fc; | |
570 | ||
571 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) | |
572 | return; | |
573 | ||
574 | skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24); | |
575 | if (!skb) { | |
576 | printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc " | |
47846c9b | 577 | "frame\n", sdata->name); |
965bedad JB |
578 | return; |
579 | } | |
580 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
581 | ||
582 | nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24); | |
583 | memset(nullfunc, 0, 24); | |
584 | fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC | | |
585 | IEEE80211_FCTL_TODS); | |
586 | if (powersave) | |
587 | fc |= cpu_to_le16(IEEE80211_FCTL_PM); | |
588 | nullfunc->frame_control = fc; | |
589 | memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN); | |
47846c9b | 590 | memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN); |
965bedad JB |
591 | memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN); |
592 | ||
62ae67be JB |
593 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
594 | ieee80211_tx_skb(sdata, skb); | |
965bedad JB |
595 | } |
596 | ||
cc32abd4 JB |
597 | /* spectrum management related things */ |
598 | static void ieee80211_chswitch_work(struct work_struct *work) | |
599 | { | |
600 | struct ieee80211_sub_if_data *sdata = | |
601 | container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work); | |
cc32abd4 JB |
602 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
603 | ||
604 | if (!netif_running(sdata->dev)) | |
605 | return; | |
606 | ||
77fdaa12 JB |
607 | mutex_lock(&ifmgd->mtx); |
608 | if (!ifmgd->associated) | |
609 | goto out; | |
cc32abd4 JB |
610 | |
611 | sdata->local->oper_channel = sdata->local->csa_channel; | |
77fdaa12 JB |
612 | ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL); |
613 | ||
cc32abd4 | 614 | /* XXX: shouldn't really modify cfg80211-owned data! */ |
77fdaa12 | 615 | ifmgd->associated->cbss.channel = sdata->local->oper_channel; |
cc32abd4 | 616 | |
cc32abd4 JB |
617 | ieee80211_wake_queues_by_reason(&sdata->local->hw, |
618 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
77fdaa12 JB |
619 | out: |
620 | ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED; | |
621 | mutex_unlock(&ifmgd->mtx); | |
cc32abd4 JB |
622 | } |
623 | ||
624 | static void ieee80211_chswitch_timer(unsigned long data) | |
625 | { | |
626 | struct ieee80211_sub_if_data *sdata = | |
627 | (struct ieee80211_sub_if_data *) data; | |
628 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
629 | ||
5bb644a0 JB |
630 | if (sdata->local->quiescing) { |
631 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
632 | return; | |
633 | } | |
634 | ||
42935eca | 635 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
636 | } |
637 | ||
638 | void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata, | |
639 | struct ieee80211_channel_sw_ie *sw_elem, | |
640 | struct ieee80211_bss *bss) | |
641 | { | |
642 | struct ieee80211_channel *new_ch; | |
643 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
644 | int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num); | |
645 | ||
77fdaa12 JB |
646 | ASSERT_MGD_MTX(ifmgd); |
647 | ||
648 | if (!ifmgd->associated) | |
cc32abd4 JB |
649 | return; |
650 | ||
fbe9c429 | 651 | if (sdata->local->scanning) |
cc32abd4 JB |
652 | return; |
653 | ||
654 | /* Disregard subsequent beacons if we are already running a timer | |
655 | processing a CSA */ | |
656 | ||
657 | if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED) | |
658 | return; | |
659 | ||
660 | new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq); | |
661 | if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED) | |
662 | return; | |
663 | ||
664 | sdata->local->csa_channel = new_ch; | |
665 | ||
666 | if (sw_elem->count <= 1) { | |
42935eca | 667 | ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work); |
cc32abd4 JB |
668 | } else { |
669 | ieee80211_stop_queues_by_reason(&sdata->local->hw, | |
670 | IEEE80211_QUEUE_STOP_REASON_CSA); | |
671 | ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED; | |
672 | mod_timer(&ifmgd->chswitch_timer, | |
673 | jiffies + | |
674 | msecs_to_jiffies(sw_elem->count * | |
675 | bss->cbss.beacon_interval)); | |
676 | } | |
677 | } | |
678 | ||
679 | static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata, | |
680 | u16 capab_info, u8 *pwr_constr_elem, | |
681 | u8 pwr_constr_elem_len) | |
682 | { | |
683 | struct ieee80211_conf *conf = &sdata->local->hw.conf; | |
684 | ||
685 | if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT)) | |
686 | return; | |
687 | ||
688 | /* Power constraint IE length should be 1 octet */ | |
689 | if (pwr_constr_elem_len != 1) | |
690 | return; | |
691 | ||
692 | if ((*pwr_constr_elem <= conf->channel->max_power) && | |
693 | (*pwr_constr_elem != sdata->local->power_constr_level)) { | |
694 | sdata->local->power_constr_level = *pwr_constr_elem; | |
695 | ieee80211_hw_config(sdata->local, 0); | |
696 | } | |
697 | } | |
698 | ||
965bedad JB |
699 | /* powersave */ |
700 | static void ieee80211_enable_ps(struct ieee80211_local *local, | |
701 | struct ieee80211_sub_if_data *sdata) | |
702 | { | |
703 | struct ieee80211_conf *conf = &local->hw.conf; | |
704 | ||
d5edaedc JB |
705 | /* |
706 | * If we are scanning right now then the parameters will | |
707 | * take effect when scan finishes. | |
708 | */ | |
fbe9c429 | 709 | if (local->scanning) |
d5edaedc JB |
710 | return; |
711 | ||
965bedad JB |
712 | if (conf->dynamic_ps_timeout > 0 && |
713 | !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) { | |
714 | mod_timer(&local->dynamic_ps_timer, jiffies + | |
715 | msecs_to_jiffies(conf->dynamic_ps_timeout)); | |
716 | } else { | |
717 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
718 | ieee80211_send_nullfunc(local, sdata, 1); | |
719 | conf->flags |= IEEE80211_CONF_PS; | |
720 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
721 | } | |
722 | } | |
723 | ||
724 | static void ieee80211_change_ps(struct ieee80211_local *local) | |
725 | { | |
726 | struct ieee80211_conf *conf = &local->hw.conf; | |
727 | ||
728 | if (local->ps_sdata) { | |
965bedad JB |
729 | ieee80211_enable_ps(local, local->ps_sdata); |
730 | } else if (conf->flags & IEEE80211_CONF_PS) { | |
731 | conf->flags &= ~IEEE80211_CONF_PS; | |
732 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
733 | del_timer_sync(&local->dynamic_ps_timer); | |
734 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
735 | } | |
736 | } | |
737 | ||
738 | /* need to hold RTNL or interface lock */ | |
10f644a4 | 739 | void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency) |
965bedad JB |
740 | { |
741 | struct ieee80211_sub_if_data *sdata, *found = NULL; | |
742 | int count = 0; | |
743 | ||
744 | if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) { | |
745 | local->ps_sdata = NULL; | |
746 | return; | |
747 | } | |
748 | ||
749 | list_for_each_entry(sdata, &local->interfaces, list) { | |
750 | if (!netif_running(sdata->dev)) | |
751 | continue; | |
752 | if (sdata->vif.type != NL80211_IFTYPE_STATION) | |
753 | continue; | |
754 | found = sdata; | |
755 | count++; | |
756 | } | |
757 | ||
43f78531 | 758 | if (count == 1 && found->u.mgd.powersave && |
77fdaa12 | 759 | found->u.mgd.associated && list_empty(&found->u.mgd.work_list) && |
b291ba11 JB |
760 | !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL | |
761 | IEEE80211_STA_CONNECTION_POLL))) { | |
10f644a4 JB |
762 | s32 beaconint_us; |
763 | ||
764 | if (latency < 0) | |
765 | latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY); | |
766 | ||
767 | beaconint_us = ieee80211_tu_to_usec( | |
768 | found->vif.bss_conf.beacon_int); | |
769 | ||
04fe2037 | 770 | if (beaconint_us > latency) { |
10f644a4 | 771 | local->ps_sdata = NULL; |
04fe2037 JB |
772 | } else { |
773 | u8 dtimper = found->vif.bss_conf.dtim_period; | |
774 | int maxslp = 1; | |
775 | ||
776 | if (dtimper > 1) | |
777 | maxslp = min_t(int, dtimper, | |
778 | latency / beaconint_us); | |
779 | ||
9ccebe61 | 780 | local->hw.conf.max_sleep_period = maxslp; |
10f644a4 | 781 | local->ps_sdata = found; |
04fe2037 | 782 | } |
10f644a4 | 783 | } else { |
965bedad | 784 | local->ps_sdata = NULL; |
10f644a4 | 785 | } |
965bedad JB |
786 | |
787 | ieee80211_change_ps(local); | |
788 | } | |
789 | ||
790 | void ieee80211_dynamic_ps_disable_work(struct work_struct *work) | |
791 | { | |
792 | struct ieee80211_local *local = | |
793 | container_of(work, struct ieee80211_local, | |
794 | dynamic_ps_disable_work); | |
795 | ||
796 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { | |
797 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
798 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
799 | } | |
800 | ||
801 | ieee80211_wake_queues_by_reason(&local->hw, | |
802 | IEEE80211_QUEUE_STOP_REASON_PS); | |
803 | } | |
804 | ||
805 | void ieee80211_dynamic_ps_enable_work(struct work_struct *work) | |
806 | { | |
807 | struct ieee80211_local *local = | |
808 | container_of(work, struct ieee80211_local, | |
809 | dynamic_ps_enable_work); | |
810 | struct ieee80211_sub_if_data *sdata = local->ps_sdata; | |
811 | ||
812 | /* can only happen when PS was just disabled anyway */ | |
813 | if (!sdata) | |
814 | return; | |
815 | ||
816 | if (local->hw.conf.flags & IEEE80211_CONF_PS) | |
817 | return; | |
818 | ||
819 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
820 | ieee80211_send_nullfunc(local, sdata, 1); | |
821 | ||
822 | local->hw.conf.flags |= IEEE80211_CONF_PS; | |
823 | ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); | |
824 | } | |
825 | ||
826 | void ieee80211_dynamic_ps_timer(unsigned long data) | |
827 | { | |
828 | struct ieee80211_local *local = (void *) data; | |
829 | ||
78f1a8b7 | 830 | if (local->quiescing || local->suspended) |
5bb644a0 JB |
831 | return; |
832 | ||
42935eca | 833 | ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work); |
965bedad JB |
834 | } |
835 | ||
60f8b39c | 836 | /* MLME */ |
f698d856 | 837 | static void ieee80211_sta_wmm_params(struct ieee80211_local *local, |
46900298 | 838 | struct ieee80211_if_managed *ifmgd, |
f0706e82 JB |
839 | u8 *wmm_param, size_t wmm_param_len) |
840 | { | |
f0706e82 JB |
841 | struct ieee80211_tx_queue_params params; |
842 | size_t left; | |
843 | int count; | |
844 | u8 *pos; | |
845 | ||
46900298 | 846 | if (!(ifmgd->flags & IEEE80211_STA_WMM_ENABLED)) |
3434fbd3 JB |
847 | return; |
848 | ||
849 | if (!wmm_param) | |
850 | return; | |
851 | ||
f0706e82 JB |
852 | if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1) |
853 | return; | |
854 | count = wmm_param[6] & 0x0f; | |
46900298 | 855 | if (count == ifmgd->wmm_last_param_set) |
f0706e82 | 856 | return; |
46900298 | 857 | ifmgd->wmm_last_param_set = count; |
f0706e82 JB |
858 | |
859 | pos = wmm_param + 8; | |
860 | left = wmm_param_len - 8; | |
861 | ||
862 | memset(¶ms, 0, sizeof(params)); | |
863 | ||
f0706e82 JB |
864 | local->wmm_acm = 0; |
865 | for (; left >= 4; left -= 4, pos += 4) { | |
866 | int aci = (pos[0] >> 5) & 0x03; | |
867 | int acm = (pos[0] >> 4) & 0x01; | |
868 | int queue; | |
869 | ||
870 | switch (aci) { | |
0eeb59fe | 871 | case 1: /* AC_BK */ |
e100bb64 | 872 | queue = 3; |
988c0f72 | 873 | if (acm) |
0eeb59fe | 874 | local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */ |
f0706e82 | 875 | break; |
0eeb59fe | 876 | case 2: /* AC_VI */ |
e100bb64 | 877 | queue = 1; |
988c0f72 | 878 | if (acm) |
0eeb59fe | 879 | local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */ |
f0706e82 | 880 | break; |
0eeb59fe | 881 | case 3: /* AC_VO */ |
e100bb64 | 882 | queue = 0; |
988c0f72 | 883 | if (acm) |
0eeb59fe | 884 | local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */ |
f0706e82 | 885 | break; |
0eeb59fe | 886 | case 0: /* AC_BE */ |
f0706e82 | 887 | default: |
e100bb64 | 888 | queue = 2; |
988c0f72 | 889 | if (acm) |
0eeb59fe | 890 | local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */ |
f0706e82 JB |
891 | break; |
892 | } | |
893 | ||
894 | params.aifs = pos[0] & 0x0f; | |
895 | params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4); | |
896 | params.cw_min = ecw2cw(pos[1] & 0x0f); | |
f434b2d1 | 897 | params.txop = get_unaligned_le16(pos + 2); |
f4ea83dd | 898 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
f0706e82 | 899 | printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d " |
3330d7be | 900 | "cWmin=%d cWmax=%d txop=%d\n", |
0bffe40f JB |
901 | wiphy_name(local->hw.wiphy), queue, aci, acm, |
902 | params.aifs, params.cw_min, params.cw_max, params.txop); | |
3330d7be | 903 | #endif |
24487981 | 904 | if (drv_conf_tx(local, queue, ¶ms) && local->ops->conf_tx) |
f0706e82 | 905 | printk(KERN_DEBUG "%s: failed to set TX queue " |
0bffe40f JB |
906 | "parameters for queue %d\n", |
907 | wiphy_name(local->hw.wiphy), queue); | |
f0706e82 JB |
908 | } |
909 | } | |
910 | ||
7a5158ef JB |
911 | static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata, |
912 | u16 capab, bool erp_valid, u8 erp) | |
5628221c | 913 | { |
bda3933a | 914 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
471b3efd | 915 | u32 changed = 0; |
7a5158ef JB |
916 | bool use_protection; |
917 | bool use_short_preamble; | |
918 | bool use_short_slot; | |
919 | ||
920 | if (erp_valid) { | |
921 | use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0; | |
922 | use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0; | |
923 | } else { | |
924 | use_protection = false; | |
925 | use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE); | |
926 | } | |
927 | ||
928 | use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME); | |
5628221c | 929 | |
471b3efd | 930 | if (use_protection != bss_conf->use_cts_prot) { |
471b3efd JB |
931 | bss_conf->use_cts_prot = use_protection; |
932 | changed |= BSS_CHANGED_ERP_CTS_PROT; | |
5628221c | 933 | } |
7e9ed188 | 934 | |
d43c7b37 | 935 | if (use_short_preamble != bss_conf->use_short_preamble) { |
d43c7b37 | 936 | bss_conf->use_short_preamble = use_short_preamble; |
471b3efd | 937 | changed |= BSS_CHANGED_ERP_PREAMBLE; |
7e9ed188 | 938 | } |
d9430a32 | 939 | |
7a5158ef | 940 | if (use_short_slot != bss_conf->use_short_slot) { |
7a5158ef JB |
941 | bss_conf->use_short_slot = use_short_slot; |
942 | changed |= BSS_CHANGED_ERP_SLOT; | |
50c4afb9 JL |
943 | } |
944 | ||
945 | return changed; | |
946 | } | |
947 | ||
f698d856 | 948 | static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata, |
e21546a2 | 949 | struct ieee80211_mgd_work *wk, |
ae5eb026 | 950 | u32 bss_info_changed) |
f0706e82 | 951 | { |
471b3efd | 952 | struct ieee80211_local *local = sdata->local; |
e21546a2 | 953 | struct ieee80211_bss *bss = wk->bss; |
d6f2da5b | 954 | |
ae5eb026 | 955 | bss_info_changed |= BSS_CHANGED_ASSOC; |
77fdaa12 JB |
956 | /* set timing information */ |
957 | sdata->vif.bss_conf.beacon_int = bss->cbss.beacon_interval; | |
958 | sdata->vif.bss_conf.timestamp = bss->cbss.tsf; | |
959 | sdata->vif.bss_conf.dtim_period = bss->dtim_period; | |
5628221c | 960 | |
77fdaa12 JB |
961 | bss_info_changed |= BSS_CHANGED_BEACON_INT; |
962 | bss_info_changed |= ieee80211_handle_bss_capability(sdata, | |
963 | bss->cbss.capability, bss->has_erp_value, bss->erp_value); | |
21c0cbe7 | 964 | |
77fdaa12 | 965 | sdata->u.mgd.associated = bss; |
e21546a2 | 966 | sdata->u.mgd.old_associate_work = wk; |
77fdaa12 | 967 | memcpy(sdata->u.mgd.bssid, bss->cbss.bssid, ETH_ALEN); |
f0706e82 | 968 | |
b291ba11 JB |
969 | /* just to be sure */ |
970 | sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
971 | IEEE80211_STA_BEACON_POLL); | |
972 | ||
9ac19a90 | 973 | ieee80211_led_assoc(local, 1); |
9306102e | 974 | |
bda3933a | 975 | sdata->vif.bss_conf.assoc = 1; |
96dd22ac JB |
976 | /* |
977 | * For now just always ask the driver to update the basic rateset | |
978 | * when we have associated, we aren't checking whether it actually | |
979 | * changed or not. | |
980 | */ | |
ae5eb026 | 981 | bss_info_changed |= BSS_CHANGED_BASIC_RATES; |
9cef8737 JB |
982 | |
983 | /* And the BSSID changed - we're associated now */ | |
984 | bss_info_changed |= BSS_CHANGED_BSSID; | |
985 | ||
ae5eb026 | 986 | ieee80211_bss_info_change_notify(sdata, bss_info_changed); |
f0706e82 | 987 | |
056508dc JB |
988 | mutex_lock(&local->iflist_mtx); |
989 | ieee80211_recalc_ps(local, -1); | |
0f78231b | 990 | ieee80211_recalc_smps(local, sdata); |
056508dc | 991 | mutex_unlock(&local->iflist_mtx); |
e0cb686f | 992 | |
53623f1a | 993 | netif_start_queue(sdata->dev); |
9ac19a90 | 994 | netif_carrier_on(sdata->dev); |
f0706e82 JB |
995 | } |
996 | ||
77fdaa12 JB |
997 | static enum rx_mgmt_action __must_check |
998 | ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata, | |
999 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1000 | { |
46900298 | 1001 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1002 | struct ieee80211_local *local = sdata->local; |
46900298 | 1003 | |
77fdaa12 JB |
1004 | wk->tries++; |
1005 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 1006 | printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n", |
47846c9b | 1007 | sdata->name, wk->bss->cbss.bssid); |
7a947080 VT |
1008 | |
1009 | /* | |
1010 | * Most likely AP is not in the range so remove the | |
77fdaa12 | 1011 | * bss struct for that AP. |
7a947080 | 1012 | */ |
77fdaa12 | 1013 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); |
11432379 HS |
1014 | |
1015 | /* | |
1016 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1017 | * due to work needing to be done. Hence, queue the STAs work |
1018 | * again for that. | |
11432379 | 1019 | */ |
42935eca | 1020 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1021 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 1022 | } |
f0706e82 | 1023 | |
77fdaa12 | 1024 | printk(KERN_DEBUG "%s: direct probe to AP %pM (try %d)\n", |
47846c9b | 1025 | sdata->name, wk->bss->cbss.bssid, |
77fdaa12 | 1026 | wk->tries); |
f0706e82 | 1027 | |
77fdaa12 JB |
1028 | /* |
1029 | * Direct probe is sent to broadcast address as some APs | |
9ac19a90 JB |
1030 | * will not answer to direct packet in unassociated state. |
1031 | */ | |
77fdaa12 JB |
1032 | ieee80211_send_probe_req(sdata, NULL, wk->ssid, wk->ssid_len, NULL, 0); |
1033 | ||
1034 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
ca386f31 | 1035 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 1036 | |
77fdaa12 | 1037 | return RX_MGMT_NONE; |
60f8b39c | 1038 | } |
f0706e82 | 1039 | |
9ac19a90 | 1040 | |
77fdaa12 JB |
1041 | static enum rx_mgmt_action __must_check |
1042 | ieee80211_authenticate(struct ieee80211_sub_if_data *sdata, | |
1043 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1044 | { |
46900298 | 1045 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1046 | struct ieee80211_local *local = sdata->local; |
46900298 | 1047 | |
77fdaa12 JB |
1048 | wk->tries++; |
1049 | if (wk->tries > IEEE80211_AUTH_MAX_TRIES) { | |
0c68ae26 | 1050 | printk(KERN_DEBUG "%s: authentication with AP %pM" |
9ac19a90 | 1051 | " timed out\n", |
47846c9b | 1052 | sdata->name, wk->bss->cbss.bssid); |
77fdaa12 JB |
1053 | |
1054 | /* | |
1055 | * Most likely AP is not in the range so remove the | |
1056 | * bss struct for that AP. | |
1057 | */ | |
1058 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
11432379 HS |
1059 | |
1060 | /* | |
1061 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1062 | * due to work needing to be done. Hence, queue the STAs work |
1063 | * again for that. | |
11432379 | 1064 | */ |
42935eca | 1065 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1066 | return RX_MGMT_CFG80211_AUTH_TO; |
f0706e82 | 1067 | } |
f0706e82 | 1068 | |
77fdaa12 | 1069 | printk(KERN_DEBUG "%s: authenticate with AP %pM (try %d)\n", |
47846c9b | 1070 | sdata->name, wk->bss->cbss.bssid, wk->tries); |
77fdaa12 JB |
1071 | |
1072 | ieee80211_send_auth(sdata, 1, wk->auth_alg, wk->ie, wk->ie_len, | |
fffd0934 | 1073 | wk->bss->cbss.bssid, NULL, 0, 0); |
77fdaa12 | 1074 | wk->auth_transaction = 2; |
f0706e82 | 1075 | |
77fdaa12 | 1076 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; |
ca386f31 | 1077 | run_again(ifmgd, wk->timeout); |
9ac19a90 | 1078 | |
77fdaa12 | 1079 | return RX_MGMT_NONE; |
f0706e82 JB |
1080 | } |
1081 | ||
e21546a2 JB |
1082 | static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata, |
1083 | bool deauth) | |
aa458d17 | 1084 | { |
46900298 | 1085 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
aa458d17 TW |
1086 | struct ieee80211_local *local = sdata->local; |
1087 | struct sta_info *sta; | |
e0cb686f | 1088 | u32 changed = 0, config_changed = 0; |
b291ba11 | 1089 | u8 bssid[ETH_ALEN]; |
aa458d17 | 1090 | |
77fdaa12 JB |
1091 | ASSERT_MGD_MTX(ifmgd); |
1092 | ||
b291ba11 JB |
1093 | if (WARN_ON(!ifmgd->associated)) |
1094 | return; | |
1095 | ||
1096 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
1097 | ||
77fdaa12 JB |
1098 | ifmgd->associated = NULL; |
1099 | memset(ifmgd->bssid, 0, ETH_ALEN); | |
1100 | ||
e21546a2 JB |
1101 | if (deauth) { |
1102 | kfree(ifmgd->old_associate_work); | |
1103 | ifmgd->old_associate_work = NULL; | |
1104 | } else { | |
1105 | struct ieee80211_mgd_work *wk = ifmgd->old_associate_work; | |
1106 | ||
1107 | wk->state = IEEE80211_MGD_STATE_IDLE; | |
1108 | list_add(&wk->list, &ifmgd->work_list); | |
1109 | } | |
1110 | ||
77fdaa12 JB |
1111 | /* |
1112 | * we need to commit the associated = NULL change because the | |
1113 | * scan code uses that to determine whether this iface should | |
1114 | * go to/wake up from powersave or not -- and could otherwise | |
1115 | * wake the queues erroneously. | |
1116 | */ | |
1117 | smp_mb(); | |
1118 | ||
1119 | /* | |
1120 | * Thus, we can only afterwards stop the queues -- to account | |
1121 | * for the case where another CPU is finishing a scan at this | |
1122 | * time -- we don't want the scan code to enable queues. | |
1123 | */ | |
aa458d17 | 1124 | |
53623f1a | 1125 | netif_stop_queue(sdata->dev); |
aa458d17 TW |
1126 | netif_carrier_off(sdata->dev); |
1127 | ||
1fa6f4af | 1128 | rcu_read_lock(); |
abe60632 | 1129 | sta = sta_info_get(sdata, bssid); |
1fa6f4af JB |
1130 | if (sta) |
1131 | ieee80211_sta_tear_down_BA_sessions(sta); | |
1132 | rcu_read_unlock(); | |
aa458d17 | 1133 | |
f5e5bf25 TW |
1134 | changed |= ieee80211_reset_erp_info(sdata); |
1135 | ||
f5e5bf25 | 1136 | ieee80211_led_assoc(local, 0); |
ae5eb026 JB |
1137 | changed |= BSS_CHANGED_ASSOC; |
1138 | sdata->vif.bss_conf.assoc = false; | |
f5e5bf25 | 1139 | |
aa837e1d JB |
1140 | ieee80211_set_wmm_default(sdata); |
1141 | ||
5cff20e6 JB |
1142 | ieee80211_recalc_idle(local); |
1143 | ||
4797938c | 1144 | /* channel(_type) changes are handled by ieee80211_hw_config */ |
094d05dc | 1145 | local->oper_channel_type = NL80211_CHAN_NO_HT; |
e0cb686f | 1146 | |
413ad50a JB |
1147 | /* on the next assoc, re-program HT parameters */ |
1148 | sdata->ht_opmode_valid = false; | |
1149 | ||
a8302de9 VT |
1150 | local->power_constr_level = 0; |
1151 | ||
520eb820 KV |
1152 | del_timer_sync(&local->dynamic_ps_timer); |
1153 | cancel_work_sync(&local->dynamic_ps_enable_work); | |
1154 | ||
e0cb686f KV |
1155 | if (local->hw.conf.flags & IEEE80211_CONF_PS) { |
1156 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1157 | config_changed |= IEEE80211_CONF_CHANGE_PS; | |
1158 | } | |
ae5eb026 | 1159 | |
e0cb686f | 1160 | ieee80211_hw_config(local, config_changed); |
9cef8737 JB |
1161 | |
1162 | /* And the BSSID changed -- not very interesting here */ | |
1163 | changed |= BSS_CHANGED_BSSID; | |
ae5eb026 | 1164 | ieee80211_bss_info_change_notify(sdata, changed); |
8e268e47 TW |
1165 | |
1166 | rcu_read_lock(); | |
1167 | ||
abe60632 | 1168 | sta = sta_info_get(sdata, bssid); |
8e268e47 TW |
1169 | if (!sta) { |
1170 | rcu_read_unlock(); | |
1171 | return; | |
1172 | } | |
1173 | ||
1174 | sta_info_unlink(&sta); | |
1175 | ||
1176 | rcu_read_unlock(); | |
1177 | ||
1178 | sta_info_destroy(sta); | |
aa458d17 | 1179 | } |
f0706e82 | 1180 | |
77fdaa12 JB |
1181 | static enum rx_mgmt_action __must_check |
1182 | ieee80211_associate(struct ieee80211_sub_if_data *sdata, | |
1183 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1184 | { |
46900298 | 1185 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
11432379 | 1186 | struct ieee80211_local *local = sdata->local; |
46900298 | 1187 | |
77fdaa12 JB |
1188 | wk->tries++; |
1189 | if (wk->tries > IEEE80211_ASSOC_MAX_TRIES) { | |
0c68ae26 | 1190 | printk(KERN_DEBUG "%s: association with AP %pM" |
f0706e82 | 1191 | " timed out\n", |
47846c9b | 1192 | sdata->name, wk->bss->cbss.bssid); |
77fdaa12 JB |
1193 | |
1194 | /* | |
1195 | * Most likely AP is not in the range so remove the | |
1196 | * bss struct for that AP. | |
1197 | */ | |
1198 | cfg80211_unlink_bss(local->hw.wiphy, &wk->bss->cbss); | |
1199 | ||
11432379 HS |
1200 | /* |
1201 | * We might have a pending scan which had no chance to run yet | |
77fdaa12 JB |
1202 | * due to work needing to be done. Hence, queue the STAs work |
1203 | * again for that. | |
11432379 | 1204 | */ |
42935eca | 1205 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
77fdaa12 | 1206 | return RX_MGMT_CFG80211_ASSOC_TO; |
f0706e82 JB |
1207 | } |
1208 | ||
77fdaa12 | 1209 | printk(KERN_DEBUG "%s: associate with AP %pM (try %d)\n", |
47846c9b | 1210 | sdata->name, wk->bss->cbss.bssid, wk->tries); |
77fdaa12 JB |
1211 | ieee80211_send_assoc(sdata, wk); |
1212 | ||
1213 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; | |
ca386f31 | 1214 | run_again(ifmgd, wk->timeout); |
f0706e82 | 1215 | |
77fdaa12 | 1216 | return RX_MGMT_NONE; |
f0706e82 JB |
1217 | } |
1218 | ||
3cf335d5 KV |
1219 | void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata, |
1220 | struct ieee80211_hdr *hdr) | |
1221 | { | |
1222 | /* | |
1223 | * We can postpone the mgd.timer whenever receiving unicast frames | |
1224 | * from AP because we know that the connection is working both ways | |
1225 | * at that time. But multicast frames (and hence also beacons) must | |
1226 | * be ignored here, because we need to trigger the timer during | |
b291ba11 JB |
1227 | * data idle periods for sending the periodic probe request to the |
1228 | * AP we're connected to. | |
3cf335d5 | 1229 | */ |
b291ba11 JB |
1230 | if (is_multicast_ether_addr(hdr->addr1)) |
1231 | return; | |
1232 | ||
1233 | mod_timer(&sdata->u.mgd.conn_mon_timer, | |
1234 | round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME)); | |
3cf335d5 | 1235 | } |
f0706e82 | 1236 | |
a43abf29 ML |
1237 | static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata) |
1238 | { | |
1239 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
1240 | const u8 *ssid; | |
1241 | ||
1242 | ssid = ieee80211_bss_get_ie(&ifmgd->associated->cbss, WLAN_EID_SSID); | |
1243 | ieee80211_send_probe_req(sdata, ifmgd->associated->cbss.bssid, | |
1244 | ssid + 2, ssid[1], NULL, 0); | |
1245 | ||
1246 | ifmgd->probe_send_count++; | |
1247 | ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT; | |
1248 | run_again(ifmgd, ifmgd->probe_timeout); | |
1249 | } | |
1250 | ||
b291ba11 JB |
1251 | static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata, |
1252 | bool beacon) | |
04de8381 | 1253 | { |
04de8381 | 1254 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
b291ba11 | 1255 | bool already = false; |
34bfc411 | 1256 | |
0e2b6286 JB |
1257 | if (!netif_running(sdata->dev)) |
1258 | return; | |
1259 | ||
91a3bd76 LR |
1260 | if (sdata->local->scanning) |
1261 | return; | |
1262 | ||
77fdaa12 JB |
1263 | mutex_lock(&ifmgd->mtx); |
1264 | ||
1265 | if (!ifmgd->associated) | |
1266 | goto out; | |
1267 | ||
a860402d | 1268 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
b291ba11 JB |
1269 | if (beacon && net_ratelimit()) |
1270 | printk(KERN_DEBUG "%s: detected beacon loss from AP " | |
47846c9b | 1271 | "- sending probe request\n", sdata->name); |
a860402d | 1272 | #endif |
04de8381 | 1273 | |
b291ba11 JB |
1274 | /* |
1275 | * The driver/our work has already reported this event or the | |
1276 | * connection monitoring has kicked in and we have already sent | |
1277 | * a probe request. Or maybe the AP died and the driver keeps | |
1278 | * reporting until we disassociate... | |
1279 | * | |
1280 | * In either case we have to ignore the current call to this | |
1281 | * function (except for setting the correct probe reason bit) | |
1282 | * because otherwise we would reset the timer every time and | |
1283 | * never check whether we received a probe response! | |
1284 | */ | |
1285 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | | |
1286 | IEEE80211_STA_CONNECTION_POLL)) | |
1287 | already = true; | |
1288 | ||
1289 | if (beacon) | |
1290 | ifmgd->flags |= IEEE80211_STA_BEACON_POLL; | |
1291 | else | |
1292 | ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL; | |
1293 | ||
1294 | if (already) | |
1295 | goto out; | |
1296 | ||
4e751843 JB |
1297 | mutex_lock(&sdata->local->iflist_mtx); |
1298 | ieee80211_recalc_ps(sdata->local, -1); | |
1299 | mutex_unlock(&sdata->local->iflist_mtx); | |
1300 | ||
a43abf29 ML |
1301 | ifmgd->probe_send_count = 0; |
1302 | ieee80211_mgd_probe_ap_send(sdata); | |
77fdaa12 JB |
1303 | out: |
1304 | mutex_unlock(&ifmgd->mtx); | |
04de8381 KV |
1305 | } |
1306 | ||
b291ba11 JB |
1307 | void ieee80211_beacon_loss_work(struct work_struct *work) |
1308 | { | |
1309 | struct ieee80211_sub_if_data *sdata = | |
1310 | container_of(work, struct ieee80211_sub_if_data, | |
1311 | u.mgd.beacon_loss_work); | |
1312 | ||
1313 | ieee80211_mgd_probe_ap(sdata, true); | |
1314 | } | |
1315 | ||
04de8381 KV |
1316 | void ieee80211_beacon_loss(struct ieee80211_vif *vif) |
1317 | { | |
1318 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
1319 | ||
42935eca | 1320 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
04de8381 KV |
1321 | } |
1322 | EXPORT_SYMBOL(ieee80211_beacon_loss); | |
1323 | ||
77fdaa12 JB |
1324 | static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata, |
1325 | struct ieee80211_mgd_work *wk) | |
f0706e82 | 1326 | { |
77fdaa12 | 1327 | wk->state = IEEE80211_MGD_STATE_IDLE; |
47846c9b | 1328 | printk(KERN_DEBUG "%s: authenticated\n", sdata->name); |
f0706e82 JB |
1329 | } |
1330 | ||
1331 | ||
f698d856 | 1332 | static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata, |
77fdaa12 | 1333 | struct ieee80211_mgd_work *wk, |
f0706e82 JB |
1334 | struct ieee80211_mgmt *mgmt, |
1335 | size_t len) | |
1336 | { | |
1337 | u8 *pos; | |
1338 | struct ieee802_11_elems elems; | |
1339 | ||
f0706e82 | 1340 | pos = mgmt->u.auth.variable; |
67a4cce4 | 1341 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); |
f4ea83dd | 1342 | if (!elems.challenge) |
f0706e82 | 1343 | return; |
77fdaa12 | 1344 | ieee80211_send_auth(sdata, 3, wk->auth_alg, |
46900298 | 1345 | elems.challenge - 2, elems.challenge_len + 2, |
fffd0934 JB |
1346 | wk->bss->cbss.bssid, |
1347 | wk->key, wk->key_len, wk->key_idx); | |
77fdaa12 | 1348 | wk->auth_transaction = 4; |
fe3d2c3f JB |
1349 | } |
1350 | ||
77fdaa12 JB |
1351 | static enum rx_mgmt_action __must_check |
1352 | ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata, | |
1353 | struct ieee80211_mgd_work *wk, | |
1354 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1355 | { |
f0706e82 JB |
1356 | u16 auth_alg, auth_transaction, status_code; |
1357 | ||
77fdaa12 JB |
1358 | if (wk->state != IEEE80211_MGD_STATE_AUTH) |
1359 | return RX_MGMT_NONE; | |
f0706e82 | 1360 | |
f4ea83dd | 1361 | if (len < 24 + 6) |
77fdaa12 | 1362 | return RX_MGMT_NONE; |
f0706e82 | 1363 | |
77fdaa12 JB |
1364 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1365 | return RX_MGMT_NONE; | |
f0706e82 | 1366 | |
77fdaa12 JB |
1367 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) |
1368 | return RX_MGMT_NONE; | |
f0706e82 JB |
1369 | |
1370 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
1371 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
1372 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
1373 | ||
77fdaa12 JB |
1374 | if (auth_alg != wk->auth_alg || |
1375 | auth_transaction != wk->auth_transaction) | |
1376 | return RX_MGMT_NONE; | |
f0706e82 JB |
1377 | |
1378 | if (status_code != WLAN_STATUS_SUCCESS) { | |
77fdaa12 JB |
1379 | list_del(&wk->list); |
1380 | kfree(wk); | |
1381 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 JB |
1382 | } |
1383 | ||
77fdaa12 | 1384 | switch (wk->auth_alg) { |
f0706e82 JB |
1385 | case WLAN_AUTH_OPEN: |
1386 | case WLAN_AUTH_LEAP: | |
636a5d36 | 1387 | case WLAN_AUTH_FT: |
77fdaa12 JB |
1388 | ieee80211_auth_completed(sdata, wk); |
1389 | return RX_MGMT_CFG80211_AUTH; | |
f0706e82 | 1390 | case WLAN_AUTH_SHARED_KEY: |
77fdaa12 JB |
1391 | if (wk->auth_transaction == 4) { |
1392 | ieee80211_auth_completed(sdata, wk); | |
1393 | return RX_MGMT_CFG80211_AUTH; | |
6039f6d2 | 1394 | } else |
77fdaa12 | 1395 | ieee80211_auth_challenge(sdata, wk, mgmt, len); |
f0706e82 JB |
1396 | break; |
1397 | } | |
77fdaa12 JB |
1398 | |
1399 | return RX_MGMT_NONE; | |
f0706e82 JB |
1400 | } |
1401 | ||
1402 | ||
77fdaa12 JB |
1403 | static enum rx_mgmt_action __must_check |
1404 | ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata, | |
1405 | struct ieee80211_mgd_work *wk, | |
1406 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1407 | { |
46900298 | 1408 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 | 1409 | const u8 *bssid = NULL; |
f0706e82 JB |
1410 | u16 reason_code; |
1411 | ||
f4ea83dd | 1412 | if (len < 24 + 2) |
77fdaa12 | 1413 | return RX_MGMT_NONE; |
f0706e82 | 1414 | |
77fdaa12 JB |
1415 | ASSERT_MGD_MTX(ifmgd); |
1416 | ||
1417 | if (wk) | |
1418 | bssid = wk->bss->cbss.bssid; | |
1419 | else | |
1420 | bssid = ifmgd->associated->cbss.bssid; | |
f0706e82 JB |
1421 | |
1422 | reason_code = le16_to_cpu(mgmt->u.deauth.reason_code); | |
1423 | ||
77fdaa12 | 1424 | printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n", |
47846c9b | 1425 | sdata->name, bssid, reason_code); |
77fdaa12 JB |
1426 | |
1427 | if (!wk) { | |
e21546a2 | 1428 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
1429 | } else { |
1430 | list_del(&wk->list); | |
1431 | kfree(wk); | |
1432 | } | |
f0706e82 | 1433 | |
77fdaa12 | 1434 | return RX_MGMT_CFG80211_DEAUTH; |
f0706e82 JB |
1435 | } |
1436 | ||
1437 | ||
77fdaa12 JB |
1438 | static enum rx_mgmt_action __must_check |
1439 | ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata, | |
1440 | struct ieee80211_mgmt *mgmt, size_t len) | |
f0706e82 | 1441 | { |
46900298 | 1442 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1443 | u16 reason_code; |
1444 | ||
f4ea83dd | 1445 | if (len < 24 + 2) |
77fdaa12 | 1446 | return RX_MGMT_NONE; |
f0706e82 | 1447 | |
77fdaa12 JB |
1448 | ASSERT_MGD_MTX(ifmgd); |
1449 | ||
1450 | if (WARN_ON(!ifmgd->associated)) | |
1451 | return RX_MGMT_NONE; | |
1452 | ||
1453 | if (WARN_ON(memcmp(ifmgd->associated->cbss.bssid, mgmt->sa, ETH_ALEN))) | |
1454 | return RX_MGMT_NONE; | |
f0706e82 JB |
1455 | |
1456 | reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code); | |
1457 | ||
0ff71613 | 1458 | printk(KERN_DEBUG "%s: disassociated from %pM (Reason: %u)\n", |
47846c9b | 1459 | sdata->name, mgmt->sa, reason_code); |
f0706e82 | 1460 | |
e21546a2 | 1461 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 | 1462 | return RX_MGMT_CFG80211_DISASSOC; |
f0706e82 JB |
1463 | } |
1464 | ||
1465 | ||
77fdaa12 JB |
1466 | static enum rx_mgmt_action __must_check |
1467 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata, | |
1468 | struct ieee80211_mgd_work *wk, | |
1469 | struct ieee80211_mgmt *mgmt, size_t len, | |
1470 | bool reassoc) | |
f0706e82 | 1471 | { |
46900298 | 1472 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
471b3efd | 1473 | struct ieee80211_local *local = sdata->local; |
8318d78a | 1474 | struct ieee80211_supported_band *sband; |
f0706e82 | 1475 | struct sta_info *sta; |
881d948c | 1476 | u32 rates, basic_rates; |
f0706e82 JB |
1477 | u16 capab_info, status_code, aid; |
1478 | struct ieee802_11_elems elems; | |
bda3933a | 1479 | struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf; |
f0706e82 | 1480 | u8 *pos; |
ae5eb026 | 1481 | u32 changed = 0; |
f0706e82 | 1482 | int i, j; |
ddf4ac53 | 1483 | bool have_higher_than_11mbit = false, newsta = false; |
ae5eb026 | 1484 | u16 ap_ht_cap_flags; |
f0706e82 | 1485 | |
77fdaa12 JB |
1486 | /* |
1487 | * AssocResp and ReassocResp have identical structure, so process both | |
1488 | * of them in this function. | |
1489 | */ | |
f0706e82 | 1490 | |
f4ea83dd | 1491 | if (len < 24 + 6) |
77fdaa12 | 1492 | return RX_MGMT_NONE; |
f0706e82 | 1493 | |
77fdaa12 JB |
1494 | if (memcmp(wk->bss->cbss.bssid, mgmt->sa, ETH_ALEN) != 0) |
1495 | return RX_MGMT_NONE; | |
f0706e82 JB |
1496 | |
1497 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
1498 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
1499 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
f0706e82 | 1500 | |
0c68ae26 | 1501 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " |
f0706e82 | 1502 | "status=%d aid=%d)\n", |
47846c9b | 1503 | sdata->name, reassoc ? "Rea" : "A", mgmt->sa, |
ddd68587 | 1504 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); |
f0706e82 | 1505 | |
63a5ab82 JM |
1506 | pos = mgmt->u.assoc_resp.variable; |
1507 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
1508 | ||
1509 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && | |
f797eb7e JM |
1510 | elems.timeout_int && elems.timeout_int_len == 5 && |
1511 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { | |
63a5ab82 | 1512 | u32 tu, ms; |
f797eb7e | 1513 | tu = get_unaligned_le32(elems.timeout_int + 1); |
63a5ab82 JM |
1514 | ms = tu * 1024 / 1000; |
1515 | printk(KERN_DEBUG "%s: AP rejected association temporarily; " | |
1516 | "comeback duration %u TU (%u ms)\n", | |
47846c9b | 1517 | sdata->name, tu, ms); |
77fdaa12 | 1518 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
63a5ab82 | 1519 | if (ms > IEEE80211_ASSOC_TIMEOUT) |
ca386f31 | 1520 | run_again(ifmgd, jiffies + msecs_to_jiffies(ms)); |
77fdaa12 | 1521 | return RX_MGMT_NONE; |
63a5ab82 JM |
1522 | } |
1523 | ||
f0706e82 JB |
1524 | if (status_code != WLAN_STATUS_SUCCESS) { |
1525 | printk(KERN_DEBUG "%s: AP denied association (code=%d)\n", | |
47846c9b | 1526 | sdata->name, status_code); |
2ef6e444 | 1527 | wk->state = IEEE80211_MGD_STATE_IDLE; |
77fdaa12 | 1528 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1529 | } |
1530 | ||
1dd84aa2 JB |
1531 | if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14))) |
1532 | printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not " | |
47846c9b | 1533 | "set\n", sdata->name, aid); |
1dd84aa2 JB |
1534 | aid &= ~(BIT(15) | BIT(14)); |
1535 | ||
f0706e82 JB |
1536 | if (!elems.supp_rates) { |
1537 | printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n", | |
47846c9b | 1538 | sdata->name); |
77fdaa12 | 1539 | return RX_MGMT_NONE; |
f0706e82 JB |
1540 | } |
1541 | ||
47846c9b | 1542 | printk(KERN_DEBUG "%s: associated\n", sdata->name); |
46900298 | 1543 | ifmgd->aid = aid; |
f0706e82 | 1544 | |
d0709a65 JB |
1545 | rcu_read_lock(); |
1546 | ||
f0706e82 | 1547 | /* Add STA entry for the AP */ |
abe60632 | 1548 | sta = sta_info_get(sdata, wk->bss->cbss.bssid); |
f0706e82 | 1549 | if (!sta) { |
ddf4ac53 | 1550 | newsta = true; |
d0709a65 | 1551 | |
77fdaa12 JB |
1552 | rcu_read_unlock(); |
1553 | ||
1554 | sta = sta_info_alloc(sdata, wk->bss->cbss.bssid, GFP_KERNEL); | |
73651ee6 JB |
1555 | if (!sta) { |
1556 | printk(KERN_DEBUG "%s: failed to alloc STA entry for" | |
47846c9b | 1557 | " the AP\n", sdata->name); |
77fdaa12 | 1558 | return RX_MGMT_NONE; |
f0706e82 | 1559 | } |
f709fc69 | 1560 | |
77fdaa12 JB |
1561 | set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | |
1562 | WLAN_STA_ASSOC_AP); | |
1563 | if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT)) | |
1564 | set_sta_flags(sta, WLAN_STA_AUTHORIZED); | |
f709fc69 | 1565 | |
77fdaa12 JB |
1566 | rcu_read_lock(); |
1567 | } | |
05e5e883 | 1568 | |
60f8b39c JB |
1569 | rates = 0; |
1570 | basic_rates = 0; | |
1571 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
f709fc69 | 1572 | |
60f8b39c JB |
1573 | for (i = 0; i < elems.supp_rates_len; i++) { |
1574 | int rate = (elems.supp_rates[i] & 0x7f) * 5; | |
d61272cb | 1575 | bool is_basic = !!(elems.supp_rates[i] & 0x80); |
f709fc69 | 1576 | |
60f8b39c JB |
1577 | if (rate > 110) |
1578 | have_higher_than_11mbit = true; | |
1579 | ||
1580 | for (j = 0; j < sband->n_bitrates; j++) { | |
d61272cb | 1581 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1582 | rates |= BIT(j); |
d61272cb TW |
1583 | if (is_basic) |
1584 | basic_rates |= BIT(j); | |
1585 | break; | |
1586 | } | |
f709fc69 | 1587 | } |
f709fc69 LCC |
1588 | } |
1589 | ||
60f8b39c JB |
1590 | for (i = 0; i < elems.ext_supp_rates_len; i++) { |
1591 | int rate = (elems.ext_supp_rates[i] & 0x7f) * 5; | |
7e0986c1 | 1592 | bool is_basic = !!(elems.ext_supp_rates[i] & 0x80); |
f0706e82 | 1593 | |
60f8b39c JB |
1594 | if (rate > 110) |
1595 | have_higher_than_11mbit = true; | |
f0706e82 | 1596 | |
60f8b39c | 1597 | for (j = 0; j < sband->n_bitrates; j++) { |
d61272cb | 1598 | if (sband->bitrates[j].bitrate == rate) { |
60f8b39c | 1599 | rates |= BIT(j); |
d61272cb TW |
1600 | if (is_basic) |
1601 | basic_rates |= BIT(j); | |
1602 | break; | |
1603 | } | |
60f8b39c | 1604 | } |
1ebebea8 | 1605 | } |
f0706e82 | 1606 | |
323ce79a | 1607 | sta->sta.supp_rates[local->hw.conf.channel->band] = rates; |
bda3933a | 1608 | sdata->vif.bss_conf.basic_rates = basic_rates; |
60f8b39c JB |
1609 | |
1610 | /* cf. IEEE 802.11 9.2.12 */ | |
1611 | if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ && | |
1612 | have_higher_than_11mbit) | |
1613 | sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE; | |
1614 | else | |
1615 | sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE; | |
f0706e82 | 1616 | |
ab1faead | 1617 | if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1618 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, |
d9fe60de | 1619 | elems.ht_cap_elem, &sta->sta.ht_cap); |
ae5eb026 JB |
1620 | |
1621 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
f0706e82 | 1622 | |
4b7679a5 | 1623 | rate_control_rate_init(sta); |
f0706e82 | 1624 | |
46900298 | 1625 | if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) |
5394af4d JM |
1626 | set_sta_flags(sta, WLAN_STA_MFP); |
1627 | ||
ddf4ac53 | 1628 | if (elems.wmm_param) |
60f8b39c | 1629 | set_sta_flags(sta, WLAN_STA_WME); |
ddf4ac53 JB |
1630 | |
1631 | if (newsta) { | |
1632 | int err = sta_info_insert(sta); | |
1633 | if (err) { | |
1634 | printk(KERN_DEBUG "%s: failed to insert STA entry for" | |
47846c9b | 1635 | " the AP (error %d)\n", sdata->name, err); |
ddf4ac53 | 1636 | rcu_read_unlock(); |
77fdaa12 | 1637 | return RX_MGMT_NONE; |
ddf4ac53 JB |
1638 | } |
1639 | } | |
1640 | ||
1641 | rcu_read_unlock(); | |
1642 | ||
1643 | if (elems.wmm_param) | |
46900298 | 1644 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
60f8b39c | 1645 | elems.wmm_param_len); |
aa837e1d JB |
1646 | else |
1647 | ieee80211_set_wmm_default(sdata); | |
f0706e82 | 1648 | |
ae5eb026 | 1649 | if (elems.ht_info_elem && elems.wmm_param && |
46900298 | 1650 | (ifmgd->flags & IEEE80211_STA_WMM_ENABLED) && |
ab1faead | 1651 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) |
ae5eb026 | 1652 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, |
77fdaa12 | 1653 | wk->bss->cbss.bssid, |
ae5eb026 JB |
1654 | ap_ht_cap_flags); |
1655 | ||
056508dc JB |
1656 | /* delete work item -- must be before set_associated for PS */ |
1657 | list_del(&wk->list); | |
1658 | ||
60f8b39c JB |
1659 | /* set AID and assoc capability, |
1660 | * ieee80211_set_associated() will tell the driver */ | |
1661 | bss_conf->aid = aid; | |
1662 | bss_conf->assoc_capability = capab_info; | |
e21546a2 JB |
1663 | /* this will take ownership of wk */ |
1664 | ieee80211_set_associated(sdata, wk, changed); | |
f0706e82 | 1665 | |
15b7b062 | 1666 | /* |
b291ba11 JB |
1667 | * Start timer to probe the connection to the AP now. |
1668 | * Also start the timer that will detect beacon loss. | |
15b7b062 | 1669 | */ |
b291ba11 JB |
1670 | ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt); |
1671 | mod_beacon_timer(sdata); | |
15b7b062 | 1672 | |
77fdaa12 | 1673 | return RX_MGMT_CFG80211_ASSOC; |
f0706e82 JB |
1674 | } |
1675 | ||
1676 | ||
98c8fccf JB |
1677 | static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata, |
1678 | struct ieee80211_mgmt *mgmt, | |
1679 | size_t len, | |
1680 | struct ieee80211_rx_status *rx_status, | |
1681 | struct ieee802_11_elems *elems, | |
1682 | bool beacon) | |
1683 | { | |
1684 | struct ieee80211_local *local = sdata->local; | |
1685 | int freq; | |
c2b13452 | 1686 | struct ieee80211_bss *bss; |
98c8fccf | 1687 | struct ieee80211_channel *channel; |
98c8fccf JB |
1688 | |
1689 | if (elems->ds_params && elems->ds_params_len == 1) | |
1690 | freq = ieee80211_channel_to_frequency(elems->ds_params[0]); | |
1691 | else | |
1692 | freq = rx_status->freq; | |
1693 | ||
1694 | channel = ieee80211_get_channel(local->hw.wiphy, freq); | |
1695 | ||
1696 | if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) | |
1697 | return; | |
1698 | ||
98c8fccf | 1699 | bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems, |
2a519311 | 1700 | channel, beacon); |
77fdaa12 JB |
1701 | if (bss) |
1702 | ieee80211_rx_bss_put(local, bss); | |
1703 | ||
1704 | if (!sdata->u.mgd.associated) | |
98c8fccf JB |
1705 | return; |
1706 | ||
c481ec97 | 1707 | if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) && |
77fdaa12 JB |
1708 | (memcmp(mgmt->bssid, sdata->u.mgd.associated->cbss.bssid, |
1709 | ETH_ALEN) == 0)) { | |
c481ec97 S |
1710 | struct ieee80211_channel_sw_ie *sw_elem = |
1711 | (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem; | |
cc32abd4 | 1712 | ieee80211_sta_process_chanswitch(sdata, sw_elem, bss); |
c481ec97 | 1713 | } |
f0706e82 JB |
1714 | } |
1715 | ||
1716 | ||
f698d856 | 1717 | static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata, |
77fdaa12 JB |
1718 | struct ieee80211_mgd_work *wk, |
1719 | struct ieee80211_mgmt *mgmt, size_t len, | |
f0706e82 JB |
1720 | struct ieee80211_rx_status *rx_status) |
1721 | { | |
15b7b062 | 1722 | struct ieee80211_if_managed *ifmgd; |
ae6a44e3 EK |
1723 | size_t baselen; |
1724 | struct ieee802_11_elems elems; | |
1725 | ||
15b7b062 KV |
1726 | ifmgd = &sdata->u.mgd; |
1727 | ||
77fdaa12 JB |
1728 | ASSERT_MGD_MTX(ifmgd); |
1729 | ||
47846c9b | 1730 | if (memcmp(mgmt->da, sdata->vif.addr, ETH_ALEN)) |
8e7cdbb6 TW |
1731 | return; /* ignore ProbeResp to foreign address */ |
1732 | ||
ae6a44e3 EK |
1733 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; |
1734 | if (baselen > len) | |
1735 | return; | |
1736 | ||
1737 | ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen, | |
1738 | &elems); | |
1739 | ||
98c8fccf | 1740 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false); |
9859b81e RR |
1741 | |
1742 | /* direct probe may be part of the association flow */ | |
77fdaa12 | 1743 | if (wk && wk->state == IEEE80211_MGD_STATE_PROBE) { |
0ff71613 | 1744 | printk(KERN_DEBUG "%s: direct probe responded\n", |
47846c9b | 1745 | sdata->name); |
77fdaa12 JB |
1746 | wk->tries = 0; |
1747 | wk->state = IEEE80211_MGD_STATE_AUTH; | |
1748 | WARN_ON(ieee80211_authenticate(sdata, wk) != RX_MGMT_NONE); | |
9859b81e | 1749 | } |
15b7b062 | 1750 | |
77fdaa12 JB |
1751 | if (ifmgd->associated && |
1752 | memcmp(mgmt->bssid, ifmgd->associated->cbss.bssid, ETH_ALEN) == 0 && | |
b291ba11 JB |
1753 | ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
1754 | IEEE80211_STA_CONNECTION_POLL)) { | |
1755 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
1756 | IEEE80211_STA_BEACON_POLL); | |
4e751843 JB |
1757 | mutex_lock(&sdata->local->iflist_mtx); |
1758 | ieee80211_recalc_ps(sdata->local, -1); | |
1759 | mutex_unlock(&sdata->local->iflist_mtx); | |
b291ba11 JB |
1760 | /* |
1761 | * We've received a probe response, but are not sure whether | |
1762 | * we have or will be receiving any beacons or data, so let's | |
1763 | * schedule the timers again, just in case. | |
1764 | */ | |
1765 | mod_beacon_timer(sdata); | |
1766 | mod_timer(&ifmgd->conn_mon_timer, | |
1767 | round_jiffies_up(jiffies + | |
1768 | IEEE80211_CONNECTION_IDLE_TIME)); | |
4e751843 | 1769 | } |
f0706e82 JB |
1770 | } |
1771 | ||
d91f36db JB |
1772 | /* |
1773 | * This is the canonical list of information elements we care about, | |
1774 | * the filter code also gives us all changes to the Microsoft OUI | |
1775 | * (00:50:F2) vendor IE which is used for WMM which we need to track. | |
1776 | * | |
1777 | * We implement beacon filtering in software since that means we can | |
1778 | * avoid processing the frame here and in cfg80211, and userspace | |
1779 | * will not be able to tell whether the hardware supports it or not. | |
1780 | * | |
1781 | * XXX: This list needs to be dynamic -- userspace needs to be able to | |
1782 | * add items it requires. It also needs to be able to tell us to | |
1783 | * look out for other vendor IEs. | |
1784 | */ | |
1785 | static const u64 care_about_ies = | |
1d4df3a5 JB |
1786 | (1ULL << WLAN_EID_COUNTRY) | |
1787 | (1ULL << WLAN_EID_ERP_INFO) | | |
1788 | (1ULL << WLAN_EID_CHANNEL_SWITCH) | | |
1789 | (1ULL << WLAN_EID_PWR_CONSTRAINT) | | |
1790 | (1ULL << WLAN_EID_HT_CAPABILITY) | | |
1791 | (1ULL << WLAN_EID_HT_INFORMATION); | |
d91f36db | 1792 | |
f698d856 | 1793 | static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1794 | struct ieee80211_mgmt *mgmt, |
1795 | size_t len, | |
1796 | struct ieee80211_rx_status *rx_status) | |
1797 | { | |
d91f36db | 1798 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 JB |
1799 | size_t baselen; |
1800 | struct ieee802_11_elems elems; | |
f698d856 | 1801 | struct ieee80211_local *local = sdata->local; |
471b3efd | 1802 | u32 changed = 0; |
d91f36db | 1803 | bool erp_valid, directed_tim = false; |
7a5158ef | 1804 | u8 erp_value = 0; |
d91f36db | 1805 | u32 ncrc; |
77fdaa12 JB |
1806 | u8 *bssid; |
1807 | ||
1808 | ASSERT_MGD_MTX(ifmgd); | |
f0706e82 | 1809 | |
ae6a44e3 EK |
1810 | /* Process beacon from the current BSS */ |
1811 | baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt; | |
1812 | if (baselen > len) | |
1813 | return; | |
1814 | ||
d91f36db | 1815 | if (rx_status->freq != local->hw.conf.channel->center_freq) |
f0706e82 | 1816 | return; |
f0706e82 | 1817 | |
b291ba11 JB |
1818 | /* |
1819 | * We might have received a number of frames, among them a | |
1820 | * disassoc frame and a beacon... | |
1821 | */ | |
1822 | if (!ifmgd->associated) | |
77fdaa12 JB |
1823 | return; |
1824 | ||
1825 | bssid = ifmgd->associated->cbss.bssid; | |
1826 | ||
b291ba11 JB |
1827 | /* |
1828 | * And in theory even frames from a different AP we were just | |
1829 | * associated to a split-second ago! | |
1830 | */ | |
1831 | if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0) | |
f0706e82 JB |
1832 | return; |
1833 | ||
b291ba11 | 1834 | if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) { |
92778180 JM |
1835 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG |
1836 | if (net_ratelimit()) { | |
1837 | printk(KERN_DEBUG "%s: cancelling probereq poll due " | |
47846c9b | 1838 | "to a received beacon\n", sdata->name); |
92778180 JM |
1839 | } |
1840 | #endif | |
b291ba11 | 1841 | ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL; |
4e751843 JB |
1842 | mutex_lock(&local->iflist_mtx); |
1843 | ieee80211_recalc_ps(local, -1); | |
1844 | mutex_unlock(&local->iflist_mtx); | |
92778180 JM |
1845 | } |
1846 | ||
b291ba11 JB |
1847 | /* |
1848 | * Push the beacon loss detection into the future since | |
1849 | * we are processing a beacon from the AP just now. | |
1850 | */ | |
1851 | mod_beacon_timer(sdata); | |
1852 | ||
d91f36db JB |
1853 | ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4); |
1854 | ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable, | |
1855 | len - baselen, &elems, | |
1856 | care_about_ies, ncrc); | |
1857 | ||
1858 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) | |
e7ec86f5 JB |
1859 | directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len, |
1860 | ifmgd->aid); | |
d91f36db | 1861 | |
30196673 JM |
1862 | if (ncrc != ifmgd->beacon_crc) { |
1863 | ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, | |
1864 | true); | |
d91f36db | 1865 | |
30196673 JM |
1866 | ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param, |
1867 | elems.wmm_param_len); | |
1868 | } | |
fe3fa827 | 1869 | |
25c9c875 | 1870 | if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) { |
1fb3606b | 1871 | if (directed_tim) { |
572e0012 KV |
1872 | if (local->hw.conf.dynamic_ps_timeout > 0) { |
1873 | local->hw.conf.flags &= ~IEEE80211_CONF_PS; | |
1874 | ieee80211_hw_config(local, | |
1875 | IEEE80211_CONF_CHANGE_PS); | |
1876 | ieee80211_send_nullfunc(local, sdata, 0); | |
1877 | } else { | |
1878 | local->pspolling = true; | |
1879 | ||
1880 | /* | |
1881 | * Here is assumed that the driver will be | |
1882 | * able to send ps-poll frame and receive a | |
1883 | * response even though power save mode is | |
1884 | * enabled, but some drivers might require | |
1885 | * to disable power save here. This needs | |
1886 | * to be investigated. | |
1887 | */ | |
1888 | ieee80211_send_pspoll(local, sdata); | |
1889 | } | |
a97b77b9 VN |
1890 | } |
1891 | } | |
7a5158ef | 1892 | |
30196673 JM |
1893 | if (ncrc == ifmgd->beacon_crc) |
1894 | return; | |
1895 | ifmgd->beacon_crc = ncrc; | |
1896 | ||
7a5158ef JB |
1897 | if (elems.erp_info && elems.erp_info_len >= 1) { |
1898 | erp_valid = true; | |
1899 | erp_value = elems.erp_info[0]; | |
1900 | } else { | |
1901 | erp_valid = false; | |
50c4afb9 | 1902 | } |
7a5158ef JB |
1903 | changed |= ieee80211_handle_bss_capability(sdata, |
1904 | le16_to_cpu(mgmt->u.beacon.capab_info), | |
1905 | erp_valid, erp_value); | |
f0706e82 | 1906 | |
d3c990fb | 1907 | |
53d6f81c | 1908 | if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param && |
ab1faead | 1909 | !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) { |
ae5eb026 JB |
1910 | struct sta_info *sta; |
1911 | struct ieee80211_supported_band *sband; | |
1912 | u16 ap_ht_cap_flags; | |
1913 | ||
1914 | rcu_read_lock(); | |
1915 | ||
abe60632 | 1916 | sta = sta_info_get(sdata, bssid); |
77fdaa12 | 1917 | if (WARN_ON(!sta)) { |
ae5eb026 JB |
1918 | rcu_read_unlock(); |
1919 | return; | |
1920 | } | |
1921 | ||
1922 | sband = local->hw.wiphy->bands[local->hw.conf.channel->band]; | |
1923 | ||
1924 | ieee80211_ht_cap_ie_to_sta_ht_cap(sband, | |
1925 | elems.ht_cap_elem, &sta->sta.ht_cap); | |
1926 | ||
1927 | ap_ht_cap_flags = sta->sta.ht_cap.cap; | |
1928 | ||
1929 | rcu_read_unlock(); | |
1930 | ||
1931 | changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem, | |
77fdaa12 | 1932 | bssid, ap_ht_cap_flags); |
d3c990fb RR |
1933 | } |
1934 | ||
8b19e6ca | 1935 | /* Note: country IE parsing is done for us by cfg80211 */ |
3f2355cb | 1936 | if (elems.country_elem) { |
a8302de9 VT |
1937 | /* TODO: IBSS also needs this */ |
1938 | if (elems.pwr_constr_elem) | |
1939 | ieee80211_handle_pwr_constr(sdata, | |
1940 | le16_to_cpu(mgmt->u.probe_resp.capab_info), | |
1941 | elems.pwr_constr_elem, | |
1942 | elems.pwr_constr_elem_len); | |
3f2355cb LR |
1943 | } |
1944 | ||
471b3efd | 1945 | ieee80211_bss_info_change_notify(sdata, changed); |
f0706e82 JB |
1946 | } |
1947 | ||
46900298 | 1948 | ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, |
f1d58c25 | 1949 | struct sk_buff *skb) |
f0706e82 | 1950 | { |
f698d856 | 1951 | struct ieee80211_local *local = sdata->local; |
f0706e82 JB |
1952 | struct ieee80211_mgmt *mgmt; |
1953 | u16 fc; | |
1954 | ||
1955 | if (skb->len < 24) | |
46900298 | 1956 | return RX_DROP_MONITOR; |
f0706e82 JB |
1957 | |
1958 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1959 | fc = le16_to_cpu(mgmt->frame_control); | |
1960 | ||
1961 | switch (fc & IEEE80211_FCTL_STYPE) { | |
f0706e82 JB |
1962 | case IEEE80211_STYPE_PROBE_RESP: |
1963 | case IEEE80211_STYPE_BEACON: | |
f0706e82 JB |
1964 | case IEEE80211_STYPE_AUTH: |
1965 | case IEEE80211_STYPE_ASSOC_RESP: | |
1966 | case IEEE80211_STYPE_REASSOC_RESP: | |
1967 | case IEEE80211_STYPE_DEAUTH: | |
1968 | case IEEE80211_STYPE_DISASSOC: | |
77fdaa12 | 1969 | case IEEE80211_STYPE_ACTION: |
46900298 | 1970 | skb_queue_tail(&sdata->u.mgd.skb_queue, skb); |
42935eca | 1971 | ieee80211_queue_work(&local->hw, &sdata->u.mgd.work); |
46900298 | 1972 | return RX_QUEUED; |
f0706e82 JB |
1973 | } |
1974 | ||
46900298 | 1975 | return RX_DROP_MONITOR; |
f0706e82 JB |
1976 | } |
1977 | ||
f698d856 | 1978 | static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, |
f0706e82 JB |
1979 | struct sk_buff *skb) |
1980 | { | |
77fdaa12 | 1981 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
f0706e82 | 1982 | struct ieee80211_rx_status *rx_status; |
f0706e82 | 1983 | struct ieee80211_mgmt *mgmt; |
77fdaa12 JB |
1984 | struct ieee80211_mgd_work *wk; |
1985 | enum rx_mgmt_action rma = RX_MGMT_NONE; | |
f0706e82 JB |
1986 | u16 fc; |
1987 | ||
f0706e82 JB |
1988 | rx_status = (struct ieee80211_rx_status *) skb->cb; |
1989 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
1990 | fc = le16_to_cpu(mgmt->frame_control); | |
1991 | ||
77fdaa12 JB |
1992 | mutex_lock(&ifmgd->mtx); |
1993 | ||
1994 | if (ifmgd->associated && | |
1995 | memcmp(ifmgd->associated->cbss.bssid, mgmt->bssid, | |
1996 | ETH_ALEN) == 0) { | |
1997 | switch (fc & IEEE80211_FCTL_STYPE) { | |
1998 | case IEEE80211_STYPE_BEACON: | |
1999 | ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, | |
2000 | rx_status); | |
2001 | break; | |
2002 | case IEEE80211_STYPE_PROBE_RESP: | |
2003 | ieee80211_rx_mgmt_probe_resp(sdata, NULL, mgmt, | |
2004 | skb->len, rx_status); | |
2005 | break; | |
2006 | case IEEE80211_STYPE_DEAUTH: | |
2007 | rma = ieee80211_rx_mgmt_deauth(sdata, NULL, | |
2008 | mgmt, skb->len); | |
2009 | break; | |
2010 | case IEEE80211_STYPE_DISASSOC: | |
2011 | rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); | |
2012 | break; | |
2013 | case IEEE80211_STYPE_ACTION: | |
2014 | /* XXX: differentiate, can only happen for CSA now! */ | |
2015 | ieee80211_sta_process_chanswitch(sdata, | |
2016 | &mgmt->u.action.u.chan_switch.sw_elem, | |
2017 | ifmgd->associated); | |
2018 | break; | |
2019 | } | |
2020 | mutex_unlock(&ifmgd->mtx); | |
2021 | ||
2022 | switch (rma) { | |
2023 | case RX_MGMT_NONE: | |
2024 | /* no action */ | |
2025 | break; | |
2026 | case RX_MGMT_CFG80211_DEAUTH: | |
ce470613 | 2027 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
2028 | break; |
2029 | case RX_MGMT_CFG80211_DISASSOC: | |
ce470613 | 2030 | cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len); |
77fdaa12 JB |
2031 | break; |
2032 | default: | |
2033 | WARN(1, "unexpected: %d", rma); | |
2034 | } | |
2035 | goto out; | |
2036 | } | |
2037 | ||
2038 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
2039 | if (memcmp(wk->bss->cbss.bssid, mgmt->bssid, ETH_ALEN) != 0) | |
2040 | continue; | |
2041 | ||
2042 | switch (fc & IEEE80211_FCTL_STYPE) { | |
2043 | case IEEE80211_STYPE_PROBE_RESP: | |
2044 | ieee80211_rx_mgmt_probe_resp(sdata, wk, mgmt, skb->len, | |
2045 | rx_status); | |
2046 | break; | |
2047 | case IEEE80211_STYPE_AUTH: | |
2048 | rma = ieee80211_rx_mgmt_auth(sdata, wk, mgmt, skb->len); | |
2049 | break; | |
2050 | case IEEE80211_STYPE_ASSOC_RESP: | |
2051 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
2052 | skb->len, false); | |
2053 | break; | |
2054 | case IEEE80211_STYPE_REASSOC_RESP: | |
2055 | rma = ieee80211_rx_mgmt_assoc_resp(sdata, wk, mgmt, | |
2056 | skb->len, true); | |
2057 | break; | |
2058 | case IEEE80211_STYPE_DEAUTH: | |
2059 | rma = ieee80211_rx_mgmt_deauth(sdata, wk, mgmt, | |
2060 | skb->len); | |
2061 | break; | |
2062 | } | |
2063 | /* | |
2064 | * We've processed this frame for that work, so it can't | |
2065 | * belong to another work struct. | |
2066 | * NB: this is also required for correctness because the | |
2067 | * called functions can free 'wk', and for 'rma'! | |
2068 | */ | |
46900298 | 2069 | break; |
77fdaa12 JB |
2070 | } |
2071 | ||
2072 | mutex_unlock(&ifmgd->mtx); | |
2073 | ||
2074 | switch (rma) { | |
2075 | case RX_MGMT_NONE: | |
2076 | /* no action */ | |
46900298 | 2077 | break; |
77fdaa12 | 2078 | case RX_MGMT_CFG80211_AUTH: |
cb0b4beb | 2079 | cfg80211_send_rx_auth(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2080 | break; |
77fdaa12 | 2081 | case RX_MGMT_CFG80211_ASSOC: |
cb0b4beb | 2082 | cfg80211_send_rx_assoc(sdata->dev, (u8 *) mgmt, skb->len); |
46900298 | 2083 | break; |
8d8b261a | 2084 | case RX_MGMT_CFG80211_DEAUTH: |
ce470613 | 2085 | cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len); |
8d8b261a | 2086 | break; |
77fdaa12 JB |
2087 | default: |
2088 | WARN(1, "unexpected: %d", rma); | |
f0706e82 JB |
2089 | } |
2090 | ||
77fdaa12 | 2091 | out: |
f0706e82 JB |
2092 | kfree_skb(skb); |
2093 | } | |
2094 | ||
9c6bd790 | 2095 | static void ieee80211_sta_timer(unsigned long data) |
f0706e82 | 2096 | { |
60f8b39c JB |
2097 | struct ieee80211_sub_if_data *sdata = |
2098 | (struct ieee80211_sub_if_data *) data; | |
46900298 | 2099 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
60f8b39c | 2100 | struct ieee80211_local *local = sdata->local; |
f0706e82 | 2101 | |
5bb644a0 JB |
2102 | if (local->quiescing) { |
2103 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2104 | return; | |
2105 | } | |
2106 | ||
42935eca | 2107 | ieee80211_queue_work(&local->hw, &ifmgd->work); |
f0706e82 JB |
2108 | } |
2109 | ||
9c6bd790 JB |
2110 | static void ieee80211_sta_work(struct work_struct *work) |
2111 | { | |
2112 | struct ieee80211_sub_if_data *sdata = | |
46900298 | 2113 | container_of(work, struct ieee80211_sub_if_data, u.mgd.work); |
9c6bd790 | 2114 | struct ieee80211_local *local = sdata->local; |
46900298 | 2115 | struct ieee80211_if_managed *ifmgd; |
9c6bd790 | 2116 | struct sk_buff *skb; |
77fdaa12 JB |
2117 | struct ieee80211_mgd_work *wk, *tmp; |
2118 | LIST_HEAD(free_work); | |
2119 | enum rx_mgmt_action rma; | |
2120 | bool anybusy = false; | |
9c6bd790 JB |
2121 | |
2122 | if (!netif_running(sdata->dev)) | |
2123 | return; | |
2124 | ||
fbe9c429 | 2125 | if (local->scanning) |
9c6bd790 JB |
2126 | return; |
2127 | ||
46900298 | 2128 | if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) |
9c6bd790 | 2129 | return; |
5bb644a0 JB |
2130 | |
2131 | /* | |
42935eca LR |
2132 | * ieee80211_queue_work() should have picked up most cases, |
2133 | * here we'll pick the the rest. | |
5bb644a0 | 2134 | */ |
42935eca LR |
2135 | if (WARN(local->suspended, "STA MLME work scheduled while " |
2136 | "going to suspend\n")) | |
5bb644a0 JB |
2137 | return; |
2138 | ||
46900298 | 2139 | ifmgd = &sdata->u.mgd; |
f0706e82 | 2140 | |
77fdaa12 | 2141 | /* first process frames to avoid timing out while a frame is pending */ |
46900298 | 2142 | while ((skb = skb_dequeue(&ifmgd->skb_queue))) |
9c6bd790 JB |
2143 | ieee80211_sta_rx_queued_mgmt(sdata, skb); |
2144 | ||
77fdaa12 JB |
2145 | /* then process the rest of the work */ |
2146 | mutex_lock(&ifmgd->mtx); | |
2147 | ||
b291ba11 JB |
2148 | if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL | |
2149 | IEEE80211_STA_CONNECTION_POLL) && | |
2150 | ifmgd->associated) { | |
a43abf29 ML |
2151 | u8 bssid[ETH_ALEN]; |
2152 | ||
2153 | memcpy(bssid, ifmgd->associated->cbss.bssid, ETH_ALEN); | |
b291ba11 JB |
2154 | if (time_is_after_jiffies(ifmgd->probe_timeout)) |
2155 | run_again(ifmgd, ifmgd->probe_timeout); | |
a43abf29 ML |
2156 | |
2157 | else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) { | |
2158 | #ifdef CONFIG_MAC80211_VERBOSE_DEBUG | |
2159 | printk(KERN_DEBUG "No probe response from AP %pM" | |
2160 | " after %dms, try %d\n", bssid, | |
2161 | (1000 * IEEE80211_PROBE_WAIT)/HZ, | |
2162 | ifmgd->probe_send_count); | |
2163 | #endif | |
2164 | ieee80211_mgd_probe_ap_send(sdata); | |
2165 | } else { | |
b291ba11 JB |
2166 | /* |
2167 | * We actually lost the connection ... or did we? | |
2168 | * Let's make sure! | |
2169 | */ | |
2170 | ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL | | |
2171 | IEEE80211_STA_BEACON_POLL); | |
b291ba11 JB |
2172 | printk(KERN_DEBUG "No probe response from AP %pM" |
2173 | " after %dms, disconnecting.\n", | |
2174 | bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ); | |
e21546a2 | 2175 | ieee80211_set_disassoc(sdata, true); |
b291ba11 JB |
2176 | mutex_unlock(&ifmgd->mtx); |
2177 | /* | |
2178 | * must be outside lock due to cfg80211, | |
2179 | * but that's not a problem. | |
2180 | */ | |
2181 | ieee80211_send_deauth_disassoc(sdata, bssid, | |
2182 | IEEE80211_STYPE_DEAUTH, | |
2183 | WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY, | |
2184 | NULL); | |
2185 | mutex_lock(&ifmgd->mtx); | |
2186 | } | |
2187 | } | |
2188 | ||
f0706e82 | 2189 | |
77fdaa12 JB |
2190 | ieee80211_recalc_idle(local); |
2191 | ||
77fdaa12 | 2192 | list_for_each_entry_safe(wk, tmp, &ifmgd->work_list, list) { |
ca386f31 JB |
2193 | if (time_is_after_jiffies(wk->timeout)) { |
2194 | /* | |
2195 | * This work item isn't supposed to be worked on | |
2196 | * right now, but take care to adjust the timer | |
2197 | * properly. | |
2198 | */ | |
2199 | run_again(ifmgd, wk->timeout); | |
77fdaa12 | 2200 | continue; |
ca386f31 | 2201 | } |
5cff20e6 | 2202 | |
77fdaa12 JB |
2203 | switch (wk->state) { |
2204 | default: | |
2205 | WARN_ON(1); | |
2206 | /* fall through */ | |
2207 | case IEEE80211_MGD_STATE_IDLE: | |
2208 | /* nothing */ | |
2209 | rma = RX_MGMT_NONE; | |
2210 | break; | |
2211 | case IEEE80211_MGD_STATE_PROBE: | |
2212 | rma = ieee80211_direct_probe(sdata, wk); | |
2213 | break; | |
2214 | case IEEE80211_MGD_STATE_AUTH: | |
2215 | rma = ieee80211_authenticate(sdata, wk); | |
2216 | break; | |
2217 | case IEEE80211_MGD_STATE_ASSOC: | |
2218 | rma = ieee80211_associate(sdata, wk); | |
2219 | break; | |
2220 | } | |
2221 | ||
2222 | switch (rma) { | |
2223 | case RX_MGMT_NONE: | |
2224 | /* no action required */ | |
2225 | break; | |
2226 | case RX_MGMT_CFG80211_AUTH_TO: | |
2227 | case RX_MGMT_CFG80211_ASSOC_TO: | |
2228 | list_del(&wk->list); | |
2229 | list_add(&wk->list, &free_work); | |
2230 | wk->tries = rma; /* small abuse but only local */ | |
2231 | break; | |
2232 | default: | |
2233 | WARN(1, "unexpected: %d", rma); | |
2234 | } | |
2235 | } | |
2236 | ||
5bf6fcc2 JM |
2237 | list_for_each_entry(wk, &ifmgd->work_list, list) { |
2238 | if (wk->state != IEEE80211_MGD_STATE_IDLE) { | |
2239 | anybusy = true; | |
2240 | break; | |
2241 | } | |
2242 | } | |
2243 | if (!anybusy && | |
2244 | test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifmgd->request)) | |
2245 | ieee80211_queue_delayed_work(&local->hw, | |
2246 | &local->scan_work, | |
2247 | round_jiffies_relative(0)); | |
2248 | ||
77fdaa12 JB |
2249 | mutex_unlock(&ifmgd->mtx); |
2250 | ||
2251 | list_for_each_entry_safe(wk, tmp, &free_work, list) { | |
2252 | switch (wk->tries) { | |
2253 | case RX_MGMT_CFG80211_AUTH_TO: | |
2254 | cfg80211_send_auth_timeout(sdata->dev, | |
cb0b4beb | 2255 | wk->bss->cbss.bssid); |
77fdaa12 JB |
2256 | break; |
2257 | case RX_MGMT_CFG80211_ASSOC_TO: | |
cb0b4beb JB |
2258 | cfg80211_send_assoc_timeout(sdata->dev, |
2259 | wk->bss->cbss.bssid); | |
77fdaa12 JB |
2260 | break; |
2261 | default: | |
2262 | WARN(1, "unexpected: %d", wk->tries); | |
2263 | } | |
2264 | ||
2265 | list_del(&wk->list); | |
2266 | kfree(wk); | |
9c6bd790 | 2267 | } |
77fdaa12 JB |
2268 | |
2269 | ieee80211_recalc_idle(local); | |
f0706e82 JB |
2270 | } |
2271 | ||
b291ba11 JB |
2272 | static void ieee80211_sta_bcn_mon_timer(unsigned long data) |
2273 | { | |
2274 | struct ieee80211_sub_if_data *sdata = | |
2275 | (struct ieee80211_sub_if_data *) data; | |
2276 | struct ieee80211_local *local = sdata->local; | |
2277 | ||
2278 | if (local->quiescing) | |
2279 | return; | |
2280 | ||
42935eca | 2281 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.beacon_loss_work); |
b291ba11 JB |
2282 | } |
2283 | ||
2284 | static void ieee80211_sta_conn_mon_timer(unsigned long data) | |
2285 | { | |
2286 | struct ieee80211_sub_if_data *sdata = | |
2287 | (struct ieee80211_sub_if_data *) data; | |
2288 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2289 | struct ieee80211_local *local = sdata->local; | |
2290 | ||
2291 | if (local->quiescing) | |
2292 | return; | |
2293 | ||
42935eca | 2294 | ieee80211_queue_work(&local->hw, &ifmgd->monitor_work); |
b291ba11 JB |
2295 | } |
2296 | ||
2297 | static void ieee80211_sta_monitor_work(struct work_struct *work) | |
2298 | { | |
2299 | struct ieee80211_sub_if_data *sdata = | |
2300 | container_of(work, struct ieee80211_sub_if_data, | |
2301 | u.mgd.monitor_work); | |
2302 | ||
2303 | ieee80211_mgd_probe_ap(sdata, false); | |
2304 | } | |
2305 | ||
9c6bd790 JB |
2306 | static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata) |
2307 | { | |
ad935687 | 2308 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
b291ba11 JB |
2309 | sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL | |
2310 | IEEE80211_STA_CONNECTION_POLL); | |
ad935687 | 2311 | |
b291ba11 | 2312 | /* let's probe the connection once */ |
42935eca | 2313 | ieee80211_queue_work(&sdata->local->hw, |
b291ba11 JB |
2314 | &sdata->u.mgd.monitor_work); |
2315 | /* and do all the other regular work too */ | |
42935eca | 2316 | ieee80211_queue_work(&sdata->local->hw, |
46900298 | 2317 | &sdata->u.mgd.work); |
ad935687 | 2318 | } |
9c6bd790 | 2319 | } |
f0706e82 | 2320 | |
5bb644a0 JB |
2321 | #ifdef CONFIG_PM |
2322 | void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata) | |
2323 | { | |
2324 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2325 | ||
2326 | /* | |
2327 | * we need to use atomic bitops for the running bits | |
2328 | * only because both timers might fire at the same | |
2329 | * time -- the code here is properly synchronised. | |
2330 | */ | |
2331 | ||
2332 | cancel_work_sync(&ifmgd->work); | |
2333 | cancel_work_sync(&ifmgd->beacon_loss_work); | |
2334 | if (del_timer_sync(&ifmgd->timer)) | |
2335 | set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running); | |
2336 | ||
2337 | cancel_work_sync(&ifmgd->chswitch_work); | |
2338 | if (del_timer_sync(&ifmgd->chswitch_timer)) | |
2339 | set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running); | |
b291ba11 JB |
2340 | |
2341 | cancel_work_sync(&ifmgd->monitor_work); | |
2342 | /* these will just be re-established on connection */ | |
2343 | del_timer_sync(&ifmgd->conn_mon_timer); | |
2344 | del_timer_sync(&ifmgd->bcn_mon_timer); | |
5bb644a0 JB |
2345 | } |
2346 | ||
2347 | void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata) | |
2348 | { | |
2349 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; | |
2350 | ||
2351 | if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running)) | |
2352 | add_timer(&ifmgd->timer); | |
2353 | if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running)) | |
2354 | add_timer(&ifmgd->chswitch_timer); | |
2355 | } | |
2356 | #endif | |
2357 | ||
9c6bd790 JB |
2358 | /* interface setup */ |
2359 | void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata) | |
f0706e82 | 2360 | { |
46900298 | 2361 | struct ieee80211_if_managed *ifmgd; |
988c0f72 | 2362 | |
46900298 JB |
2363 | ifmgd = &sdata->u.mgd; |
2364 | INIT_WORK(&ifmgd->work, ieee80211_sta_work); | |
b291ba11 | 2365 | INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work); |
46900298 | 2366 | INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work); |
04de8381 | 2367 | INIT_WORK(&ifmgd->beacon_loss_work, ieee80211_beacon_loss_work); |
46900298 | 2368 | setup_timer(&ifmgd->timer, ieee80211_sta_timer, |
c481ec97 | 2369 | (unsigned long) sdata); |
b291ba11 JB |
2370 | setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer, |
2371 | (unsigned long) sdata); | |
2372 | setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer, | |
2373 | (unsigned long) sdata); | |
46900298 | 2374 | setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer, |
9c6bd790 | 2375 | (unsigned long) sdata); |
46900298 | 2376 | skb_queue_head_init(&ifmgd->skb_queue); |
9c6bd790 | 2377 | |
77fdaa12 JB |
2378 | INIT_LIST_HEAD(&ifmgd->work_list); |
2379 | ||
46900298 | 2380 | ifmgd->capab = WLAN_CAPABILITY_ESS; |
ab1faead | 2381 | ifmgd->flags = 0; |
176be728 | 2382 | if (sdata->local->hw.queues >= 4) |
46900298 | 2383 | ifmgd->flags |= IEEE80211_STA_WMM_ENABLED; |
bbbdff9e | 2384 | |
77fdaa12 | 2385 | mutex_init(&ifmgd->mtx); |
0f78231b JB |
2386 | |
2387 | if (sdata->local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS) | |
2388 | ifmgd->req_smps = IEEE80211_SMPS_AUTOMATIC; | |
2389 | else | |
2390 | ifmgd->req_smps = IEEE80211_SMPS_OFF; | |
f0706e82 JB |
2391 | } |
2392 | ||
77fdaa12 JB |
2393 | /* scan finished notification */ |
2394 | void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local) | |
60f8b39c | 2395 | { |
77fdaa12 | 2396 | struct ieee80211_sub_if_data *sdata = local->scan_sdata; |
60f8b39c | 2397 | |
77fdaa12 JB |
2398 | /* Restart STA timers */ |
2399 | rcu_read_lock(); | |
2400 | list_for_each_entry_rcu(sdata, &local->interfaces, list) | |
2401 | ieee80211_restart_sta_timer(sdata); | |
2402 | rcu_read_unlock(); | |
2403 | } | |
60f8b39c | 2404 | |
77fdaa12 JB |
2405 | int ieee80211_max_network_latency(struct notifier_block *nb, |
2406 | unsigned long data, void *dummy) | |
2407 | { | |
2408 | s32 latency_usec = (s32) data; | |
2409 | struct ieee80211_local *local = | |
2410 | container_of(nb, struct ieee80211_local, | |
2411 | network_latency_notifier); | |
1fa6f4af | 2412 | |
77fdaa12 JB |
2413 | mutex_lock(&local->iflist_mtx); |
2414 | ieee80211_recalc_ps(local, latency_usec); | |
2415 | mutex_unlock(&local->iflist_mtx); | |
dfe67012 | 2416 | |
77fdaa12 | 2417 | return 0; |
9c6bd790 JB |
2418 | } |
2419 | ||
77fdaa12 JB |
2420 | /* config hooks */ |
2421 | int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata, | |
2422 | struct cfg80211_auth_request *req) | |
9c6bd790 | 2423 | { |
46900298 | 2424 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2425 | const u8 *ssid; |
2426 | struct ieee80211_mgd_work *wk; | |
2427 | u16 auth_alg; | |
9c6bd790 | 2428 | |
77fdaa12 JB |
2429 | switch (req->auth_type) { |
2430 | case NL80211_AUTHTYPE_OPEN_SYSTEM: | |
2431 | auth_alg = WLAN_AUTH_OPEN; | |
2432 | break; | |
2433 | case NL80211_AUTHTYPE_SHARED_KEY: | |
2434 | auth_alg = WLAN_AUTH_SHARED_KEY; | |
2435 | break; | |
2436 | case NL80211_AUTHTYPE_FT: | |
2437 | auth_alg = WLAN_AUTH_FT; | |
2438 | break; | |
2439 | case NL80211_AUTHTYPE_NETWORK_EAP: | |
2440 | auth_alg = WLAN_AUTH_LEAP; | |
2441 | break; | |
2442 | default: | |
2443 | return -EOPNOTSUPP; | |
60f8b39c | 2444 | } |
77fdaa12 JB |
2445 | |
2446 | wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2447 | if (!wk) | |
9c6bd790 | 2448 | return -ENOMEM; |
77fdaa12 JB |
2449 | |
2450 | wk->bss = (void *)req->bss; | |
2451 | ||
2452 | if (req->ie && req->ie_len) { | |
2453 | memcpy(wk->ie, req->ie, req->ie_len); | |
2454 | wk->ie_len = req->ie_len; | |
9c6bd790 | 2455 | } |
77fdaa12 | 2456 | |
fffd0934 JB |
2457 | if (req->key && req->key_len) { |
2458 | wk->key_len = req->key_len; | |
2459 | wk->key_idx = req->key_idx; | |
2460 | memcpy(wk->key, req->key, req->key_len); | |
2461 | } | |
2462 | ||
77fdaa12 JB |
2463 | ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID); |
2464 | memcpy(wk->ssid, ssid + 2, ssid[1]); | |
2465 | wk->ssid_len = ssid[1]; | |
2466 | ||
2467 | wk->state = IEEE80211_MGD_STATE_PROBE; | |
2468 | wk->auth_alg = auth_alg; | |
48531847 | 2469 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2470 | |
2471 | /* | |
2472 | * XXX: if still associated need to tell AP that we're going | |
2473 | * to sleep and then change channel etc. | |
2474 | */ | |
2475 | sdata->local->oper_channel = req->bss->channel; | |
2476 | ieee80211_hw_config(sdata->local, 0); | |
2477 | ||
2478 | mutex_lock(&ifmgd->mtx); | |
2479 | list_add(&wk->list, &sdata->u.mgd.work_list); | |
2480 | mutex_unlock(&ifmgd->mtx); | |
2481 | ||
42935eca | 2482 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
9c6bd790 | 2483 | return 0; |
60f8b39c JB |
2484 | } |
2485 | ||
77fdaa12 JB |
2486 | int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata, |
2487 | struct cfg80211_assoc_request *req) | |
f0706e82 | 2488 | { |
77fdaa12 JB |
2489 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
2490 | struct ieee80211_mgd_work *wk, *found = NULL; | |
2491 | int i, err; | |
f0706e82 | 2492 | |
77fdaa12 JB |
2493 | mutex_lock(&ifmgd->mtx); |
2494 | ||
2495 | list_for_each_entry(wk, &ifmgd->work_list, list) { | |
2496 | if (&wk->bss->cbss == req->bss && | |
2497 | wk->state == IEEE80211_MGD_STATE_IDLE) { | |
2498 | found = wk; | |
2499 | break; | |
2500 | } | |
2501 | } | |
2502 | ||
2503 | if (!found) { | |
2504 | err = -ENOLINK; | |
2505 | goto out; | |
2506 | } | |
2507 | ||
2508 | list_del(&found->list); | |
2509 | ||
2510 | wk = krealloc(found, sizeof(*wk) + req->ie_len, GFP_KERNEL); | |
2511 | if (!wk) { | |
2512 | list_add(&found->list, &ifmgd->work_list); | |
2513 | err = -ENOMEM; | |
2514 | goto out; | |
2515 | } | |
2516 | ||
2517 | list_add(&wk->list, &ifmgd->work_list); | |
2518 | ||
2519 | ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N; | |
2520 | ||
2521 | for (i = 0; i < req->crypto.n_ciphers_pairwise; i++) | |
2522 | if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 || | |
2523 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP || | |
2524 | req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104) | |
2525 | ifmgd->flags |= IEEE80211_STA_DISABLE_11N; | |
2526 | ||
2527 | sdata->local->oper_channel = req->bss->channel; | |
2528 | ieee80211_hw_config(sdata->local, 0); | |
2529 | ||
2530 | if (req->ie && req->ie_len) { | |
2531 | memcpy(wk->ie, req->ie, req->ie_len); | |
2532 | wk->ie_len = req->ie_len; | |
2533 | } else | |
2534 | wk->ie_len = 0; | |
2535 | ||
2536 | if (req->prev_bssid) | |
2537 | memcpy(wk->prev_bssid, req->prev_bssid, ETH_ALEN); | |
2538 | ||
2539 | wk->state = IEEE80211_MGD_STATE_ASSOC; | |
2540 | wk->tries = 0; | |
48531847 | 2541 | wk->timeout = jiffies; /* run right away */ |
77fdaa12 JB |
2542 | |
2543 | if (req->use_mfp) { | |
2544 | ifmgd->mfp = IEEE80211_MFP_REQUIRED; | |
2545 | ifmgd->flags |= IEEE80211_STA_MFP_ENABLED; | |
2546 | } else { | |
2547 | ifmgd->mfp = IEEE80211_MFP_DISABLED; | |
2548 | ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED; | |
2549 | } | |
2550 | ||
2551 | if (req->crypto.control_port) | |
2552 | ifmgd->flags |= IEEE80211_STA_CONTROL_PORT; | |
2553 | else | |
2554 | ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT; | |
2555 | ||
42935eca | 2556 | ieee80211_queue_work(&sdata->local->hw, &sdata->u.mgd.work); |
77fdaa12 JB |
2557 | |
2558 | err = 0; | |
2559 | ||
2560 | out: | |
2561 | mutex_unlock(&ifmgd->mtx); | |
2562 | return err; | |
f0706e82 JB |
2563 | } |
2564 | ||
77fdaa12 | 2565 | int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2566 | struct cfg80211_deauth_request *req, |
2567 | void *cookie) | |
f0706e82 | 2568 | { |
46900298 | 2569 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
77fdaa12 JB |
2570 | struct ieee80211_mgd_work *wk; |
2571 | const u8 *bssid = NULL; | |
a58ce43f | 2572 | bool not_auth_yet = false; |
f0706e82 | 2573 | |
77fdaa12 JB |
2574 | mutex_lock(&ifmgd->mtx); |
2575 | ||
2576 | if (ifmgd->associated && &ifmgd->associated->cbss == req->bss) { | |
2577 | bssid = req->bss->bssid; | |
e21546a2 | 2578 | ieee80211_set_disassoc(sdata, true); |
77fdaa12 JB |
2579 | } else list_for_each_entry(wk, &ifmgd->work_list, list) { |
2580 | if (&wk->bss->cbss == req->bss) { | |
2581 | bssid = req->bss->bssid; | |
a58ce43f JB |
2582 | if (wk->state == IEEE80211_MGD_STATE_PROBE) |
2583 | not_auth_yet = true; | |
77fdaa12 JB |
2584 | list_del(&wk->list); |
2585 | kfree(wk); | |
2586 | break; | |
2587 | } | |
2588 | } | |
f0706e82 | 2589 | |
a58ce43f JB |
2590 | /* |
2591 | * If somebody requests authentication and we haven't | |
2592 | * sent out an auth frame yet there's no need to send | |
2593 | * out a deauth frame either. If the state was PROBE, | |
2594 | * then this is the case. If it's AUTH we have sent a | |
2595 | * frame, and if it's IDLE we have completed the auth | |
2596 | * process already. | |
2597 | */ | |
2598 | if (not_auth_yet) { | |
2599 | mutex_unlock(&ifmgd->mtx); | |
2600 | __cfg80211_auth_canceled(sdata->dev, bssid); | |
2601 | return 0; | |
2602 | } | |
2603 | ||
8d8b261a JB |
2604 | /* |
2605 | * cfg80211 should catch this ... but it's racy since | |
2606 | * we can receive a deauth frame, process it, hand it | |
2607 | * to cfg80211 while that's in a locked section already | |
2608 | * trying to tell us that the user wants to disconnect. | |
2609 | */ | |
2610 | if (!bssid) { | |
77fdaa12 | 2611 | mutex_unlock(&ifmgd->mtx); |
46900298 | 2612 | return -ENOLINK; |
77fdaa12 JB |
2613 | } |
2614 | ||
2615 | mutex_unlock(&ifmgd->mtx); | |
2616 | ||
0ff71613 | 2617 | printk(KERN_DEBUG "%s: deauthenticating from %pM by local choice (reason=%d)\n", |
47846c9b | 2618 | sdata->name, bssid, req->reason_code); |
0ff71613 | 2619 | |
77fdaa12 | 2620 | ieee80211_send_deauth_disassoc(sdata, bssid, |
667503dd JB |
2621 | IEEE80211_STYPE_DEAUTH, req->reason_code, |
2622 | cookie); | |
f0706e82 | 2623 | |
f0706e82 JB |
2624 | return 0; |
2625 | } | |
84363e6e | 2626 | |
77fdaa12 | 2627 | int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata, |
667503dd JB |
2628 | struct cfg80211_disassoc_request *req, |
2629 | void *cookie) | |
9c6bd790 | 2630 | { |
77fdaa12 | 2631 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
9c6bd790 | 2632 | |
77fdaa12 | 2633 | mutex_lock(&ifmgd->mtx); |
10f644a4 | 2634 | |
8d8b261a JB |
2635 | /* |
2636 | * cfg80211 should catch this ... but it's racy since | |
2637 | * we can receive a disassoc frame, process it, hand it | |
2638 | * to cfg80211 while that's in a locked section already | |
2639 | * trying to tell us that the user wants to disconnect. | |
2640 | */ | |
2641 | if (&ifmgd->associated->cbss != req->bss) { | |
77fdaa12 JB |
2642 | mutex_unlock(&ifmgd->mtx); |
2643 | return -ENOLINK; | |
2644 | } | |
2645 | ||
0ff71613 | 2646 | printk(KERN_DEBUG "%s: disassociating from %pM by local choice (reason=%d)\n", |
47846c9b | 2647 | sdata->name, req->bss->bssid, req->reason_code); |
0ff71613 | 2648 | |
e21546a2 | 2649 | ieee80211_set_disassoc(sdata, false); |
77fdaa12 JB |
2650 | |
2651 | mutex_unlock(&ifmgd->mtx); | |
10f644a4 | 2652 | |
77fdaa12 | 2653 | ieee80211_send_deauth_disassoc(sdata, req->bss->bssid, |
667503dd JB |
2654 | IEEE80211_STYPE_DISASSOC, req->reason_code, |
2655 | cookie); | |
10f644a4 JB |
2656 | return 0; |
2657 | } |