]>
Commit | Line | Data |
---|---|---|
af6b6374 JB |
1 | /* |
2 | * mac80211 work implementation | |
3 | * | |
4 | * Copyright 2003-2008, Jouni Malinen <j@w1.fi> | |
5 | * Copyright 2004, Instant802 Networks, Inc. | |
6 | * Copyright 2005, Devicescape Software, Inc. | |
7 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> | |
8 | * Copyright 2007, Michael Wu <flamingice@sourmilk.net> | |
9 | * Copyright 2009, Johannes Berg <johannes@sipsolutions.net> | |
10 | * | |
11 | * This program is free software; you can redistribute it and/or modify | |
12 | * it under the terms of the GNU General Public License version 2 as | |
13 | * published by the Free Software Foundation. | |
14 | */ | |
15 | ||
16 | #include <linux/delay.h> | |
17 | #include <linux/if_ether.h> | |
18 | #include <linux/skbuff.h> | |
19 | #include <linux/if_arp.h> | |
20 | #include <linux/etherdevice.h> | |
21 | #include <linux/crc32.h> | |
22 | #include <net/mac80211.h> | |
23 | #include <asm/unaligned.h> | |
24 | ||
25 | #include "ieee80211_i.h" | |
26 | #include "rate.h" | |
27 | ||
28 | #define IEEE80211_AUTH_TIMEOUT (HZ / 5) | |
29 | #define IEEE80211_AUTH_MAX_TRIES 3 | |
30 | #define IEEE80211_ASSOC_TIMEOUT (HZ / 5) | |
31 | #define IEEE80211_ASSOC_MAX_TRIES 3 | |
32 | #define IEEE80211_MAX_PROBE_TRIES 5 | |
33 | ||
34 | enum work_action { | |
35 | WORK_ACT_NONE, | |
36 | WORK_ACT_TIMEOUT, | |
37 | WORK_ACT_DONE, | |
38 | }; | |
39 | ||
40 | ||
41 | /* utils */ | |
42 | static inline void ASSERT_WORK_MTX(struct ieee80211_local *local) | |
43 | { | |
44 | WARN_ON(!mutex_is_locked(&local->work_mtx)); | |
45 | } | |
46 | ||
47 | /* | |
48 | * We can have multiple work items (and connection probing) | |
49 | * scheduling this timer, but we need to take care to only | |
50 | * reschedule it when it should fire _earlier_ than it was | |
51 | * asked for before, or if it's not pending right now. This | |
52 | * function ensures that. Note that it then is required to | |
53 | * run this function for all timeouts after the first one | |
54 | * has happened -- the work that runs from this timer will | |
55 | * do that. | |
56 | */ | |
57 | static void run_again(struct ieee80211_local *local, | |
58 | unsigned long timeout) | |
59 | { | |
60 | ASSERT_WORK_MTX(local); | |
61 | ||
62 | if (!timer_pending(&local->work_timer) || | |
63 | time_before(timeout, local->work_timer.expires)) | |
64 | mod_timer(&local->work_timer, timeout); | |
65 | } | |
66 | ||
67 | static void work_free_rcu(struct rcu_head *head) | |
68 | { | |
69 | struct ieee80211_work *wk = | |
70 | container_of(head, struct ieee80211_work, rcu_head); | |
71 | ||
72 | kfree(wk); | |
73 | } | |
74 | ||
75 | void free_work(struct ieee80211_work *wk) | |
76 | { | |
77 | call_rcu(&wk->rcu_head, work_free_rcu); | |
78 | } | |
79 | ||
80 | static int ieee80211_compatible_rates(const u8 *supp_rates, int supp_rates_len, | |
81 | struct ieee80211_supported_band *sband, | |
82 | u32 *rates) | |
83 | { | |
84 | int i, j, count; | |
85 | *rates = 0; | |
86 | count = 0; | |
87 | for (i = 0; i < supp_rates_len; i++) { | |
88 | int rate = (supp_rates[i] & 0x7F) * 5; | |
89 | ||
90 | for (j = 0; j < sband->n_bitrates; j++) | |
91 | if (sband->bitrates[j].bitrate == rate) { | |
92 | *rates |= BIT(j); | |
93 | count++; | |
94 | break; | |
95 | } | |
96 | } | |
97 | ||
98 | return count; | |
99 | } | |
100 | ||
101 | /* frame sending functions */ | |
102 | ||
77c8144a JB |
103 | static void ieee80211_add_ht_ie(struct sk_buff *skb, const u8 *ht_info_ie, |
104 | struct ieee80211_supported_band *sband, | |
105 | struct ieee80211_channel *channel, | |
106 | enum ieee80211_smps_mode smps) | |
107 | { | |
108 | struct ieee80211_ht_info *ht_info; | |
109 | u8 *pos; | |
110 | u32 flags = channel->flags; | |
111 | u16 cap = sband->ht_cap.cap; | |
112 | __le16 tmp; | |
113 | ||
114 | if (!sband->ht_cap.ht_supported) | |
115 | return; | |
116 | ||
117 | if (!ht_info_ie) | |
118 | return; | |
119 | ||
120 | if (ht_info_ie[1] < sizeof(struct ieee80211_ht_info)) | |
121 | return; | |
122 | ||
123 | ht_info = (struct ieee80211_ht_info *)(ht_info_ie + 2); | |
124 | ||
125 | /* determine capability flags */ | |
126 | ||
127 | if (ieee80211_disable_40mhz_24ghz && | |
128 | sband->band == IEEE80211_BAND_2GHZ) { | |
129 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; | |
130 | cap &= ~IEEE80211_HT_CAP_SGI_40; | |
131 | } | |
132 | ||
133 | switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { | |
134 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: | |
135 | if (flags & IEEE80211_CHAN_NO_HT40PLUS) { | |
136 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; | |
137 | cap &= ~IEEE80211_HT_CAP_SGI_40; | |
138 | } | |
139 | break; | |
140 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
141 | if (flags & IEEE80211_CHAN_NO_HT40MINUS) { | |
142 | cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; | |
143 | cap &= ~IEEE80211_HT_CAP_SGI_40; | |
144 | } | |
145 | break; | |
146 | } | |
147 | ||
148 | /* set SM PS mode properly */ | |
149 | cap &= ~IEEE80211_HT_CAP_SM_PS; | |
150 | switch (smps) { | |
151 | case IEEE80211_SMPS_AUTOMATIC: | |
152 | case IEEE80211_SMPS_NUM_MODES: | |
153 | WARN_ON(1); | |
154 | case IEEE80211_SMPS_OFF: | |
155 | cap |= WLAN_HT_CAP_SM_PS_DISABLED << | |
156 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
157 | break; | |
158 | case IEEE80211_SMPS_STATIC: | |
159 | cap |= WLAN_HT_CAP_SM_PS_STATIC << | |
160 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
161 | break; | |
162 | case IEEE80211_SMPS_DYNAMIC: | |
163 | cap |= WLAN_HT_CAP_SM_PS_DYNAMIC << | |
164 | IEEE80211_HT_CAP_SM_PS_SHIFT; | |
165 | break; | |
166 | } | |
167 | ||
168 | /* reserve and fill IE */ | |
169 | ||
170 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2); | |
171 | *pos++ = WLAN_EID_HT_CAPABILITY; | |
172 | *pos++ = sizeof(struct ieee80211_ht_cap); | |
173 | memset(pos, 0, sizeof(struct ieee80211_ht_cap)); | |
174 | ||
175 | /* capability flags */ | |
176 | tmp = cpu_to_le16(cap); | |
177 | memcpy(pos, &tmp, sizeof(u16)); | |
178 | pos += sizeof(u16); | |
179 | ||
180 | /* AMPDU parameters */ | |
181 | *pos++ = sband->ht_cap.ampdu_factor | | |
182 | (sband->ht_cap.ampdu_density << | |
183 | IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT); | |
184 | ||
185 | /* MCS set */ | |
186 | memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs)); | |
187 | pos += sizeof(sband->ht_cap.mcs); | |
188 | ||
189 | /* extended capabilities */ | |
190 | pos += sizeof(__le16); | |
191 | ||
192 | /* BF capabilities */ | |
193 | pos += sizeof(__le32); | |
194 | ||
195 | /* antenna selection */ | |
196 | pos += sizeof(u8); | |
197 | } | |
198 | ||
af6b6374 JB |
199 | static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata, |
200 | struct ieee80211_work *wk) | |
201 | { | |
202 | struct ieee80211_local *local = sdata->local; | |
203 | struct sk_buff *skb; | |
204 | struct ieee80211_mgmt *mgmt; | |
205 | u8 *pos; | |
77c8144a | 206 | const u8 *ies; |
8e664fb3 | 207 | size_t offset = 0, noffset; |
af6b6374 JB |
208 | int i, len, count, rates_len, supp_rates_len; |
209 | u16 capab; | |
210 | struct ieee80211_supported_band *sband; | |
211 | u32 rates = 0; | |
212 | ||
77c8144a JB |
213 | sband = local->hw.wiphy->bands[wk->chan->band]; |
214 | ||
215 | /* | |
216 | * Get all rates supported by the device and the AP as | |
217 | * some APs don't like getting a superset of their rates | |
218 | * in the association request (e.g. D-Link DAP 1353 in | |
219 | * b-only mode)... | |
220 | */ | |
221 | rates_len = ieee80211_compatible_rates(wk->assoc.supp_rates, | |
222 | wk->assoc.supp_rates_len, | |
223 | sband, &rates); | |
224 | ||
225 | skb = alloc_skb(local->hw.extra_tx_headroom + | |
226 | sizeof(*mgmt) + /* bit too much but doesn't matter */ | |
227 | 2 + wk->assoc.ssid_len + /* SSID */ | |
228 | 4 + rates_len + /* (extended) rates */ | |
229 | 4 + /* power capability */ | |
230 | 2 + 2 * sband->n_channels + /* supported channels */ | |
231 | 2 + sizeof(struct ieee80211_ht_cap) + /* HT */ | |
232 | wk->ie_len + /* extra IEs */ | |
233 | 9, /* WMM */ | |
234 | GFP_KERNEL); | |
af6b6374 JB |
235 | if (!skb) { |
236 | printk(KERN_DEBUG "%s: failed to allocate buffer for assoc " | |
237 | "frame\n", sdata->name); | |
238 | return; | |
239 | } | |
240 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
241 | ||
af6b6374 JB |
242 | capab = WLAN_CAPABILITY_ESS; |
243 | ||
244 | if (sband->band == IEEE80211_BAND_2GHZ) { | |
245 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE)) | |
246 | capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME; | |
247 | if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE)) | |
248 | capab |= WLAN_CAPABILITY_SHORT_PREAMBLE; | |
249 | } | |
250 | ||
251 | if (wk->assoc.capability & WLAN_CAPABILITY_PRIVACY) | |
252 | capab |= WLAN_CAPABILITY_PRIVACY; | |
253 | ||
af6b6374 JB |
254 | if ((wk->assoc.capability & WLAN_CAPABILITY_SPECTRUM_MGMT) && |
255 | (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT)) | |
256 | capab |= WLAN_CAPABILITY_SPECTRUM_MGMT; | |
257 | ||
258 | mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24); | |
259 | memset(mgmt, 0, 24); | |
260 | memcpy(mgmt->da, wk->filter_ta, ETH_ALEN); | |
261 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); | |
262 | memcpy(mgmt->bssid, wk->filter_ta, ETH_ALEN); | |
263 | ||
264 | if (!is_zero_ether_addr(wk->assoc.prev_bssid)) { | |
265 | skb_put(skb, 10); | |
266 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
267 | IEEE80211_STYPE_REASSOC_REQ); | |
268 | mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab); | |
269 | mgmt->u.reassoc_req.listen_interval = | |
270 | cpu_to_le16(local->hw.conf.listen_interval); | |
271 | memcpy(mgmt->u.reassoc_req.current_ap, wk->assoc.prev_bssid, | |
272 | ETH_ALEN); | |
273 | } else { | |
274 | skb_put(skb, 4); | |
275 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | | |
276 | IEEE80211_STYPE_ASSOC_REQ); | |
277 | mgmt->u.assoc_req.capab_info = cpu_to_le16(capab); | |
278 | mgmt->u.assoc_req.listen_interval = | |
279 | cpu_to_le16(local->hw.conf.listen_interval); | |
280 | } | |
281 | ||
282 | /* SSID */ | |
283 | ies = pos = skb_put(skb, 2 + wk->assoc.ssid_len); | |
284 | *pos++ = WLAN_EID_SSID; | |
285 | *pos++ = wk->assoc.ssid_len; | |
286 | memcpy(pos, wk->assoc.ssid, wk->assoc.ssid_len); | |
287 | ||
288 | /* add all rates which were marked to be used above */ | |
289 | supp_rates_len = rates_len; | |
290 | if (supp_rates_len > 8) | |
291 | supp_rates_len = 8; | |
292 | ||
293 | len = sband->n_bitrates; | |
294 | pos = skb_put(skb, supp_rates_len + 2); | |
295 | *pos++ = WLAN_EID_SUPP_RATES; | |
296 | *pos++ = supp_rates_len; | |
297 | ||
298 | count = 0; | |
299 | for (i = 0; i < sband->n_bitrates; i++) { | |
300 | if (BIT(i) & rates) { | |
301 | int rate = sband->bitrates[i].bitrate; | |
302 | *pos++ = (u8) (rate / 5); | |
303 | if (++count == 8) | |
304 | break; | |
305 | } | |
306 | } | |
307 | ||
308 | if (rates_len > count) { | |
309 | pos = skb_put(skb, rates_len - count + 2); | |
310 | *pos++ = WLAN_EID_EXT_SUPP_RATES; | |
311 | *pos++ = rates_len - count; | |
312 | ||
313 | for (i++; i < sband->n_bitrates; i++) { | |
314 | if (BIT(i) & rates) { | |
315 | int rate = sband->bitrates[i].bitrate; | |
316 | *pos++ = (u8) (rate / 5); | |
317 | } | |
318 | } | |
319 | } | |
320 | ||
321 | if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) { | |
322 | /* 1. power capabilities */ | |
323 | pos = skb_put(skb, 4); | |
324 | *pos++ = WLAN_EID_PWR_CAPABILITY; | |
325 | *pos++ = 2; | |
326 | *pos++ = 0; /* min tx power */ | |
77c8144a | 327 | *pos++ = wk->chan->max_power; /* max tx power */ |
af6b6374 JB |
328 | |
329 | /* 2. supported channels */ | |
330 | /* TODO: get this in reg domain format */ | |
331 | pos = skb_put(skb, 2 * sband->n_channels + 2); | |
332 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
333 | *pos++ = 2 * sband->n_channels; | |
334 | for (i = 0; i < sband->n_channels; i++) { | |
335 | *pos++ = ieee80211_frequency_to_channel( | |
336 | sband->channels[i].center_freq); | |
337 | *pos++ = 1; /* one channel in the subband*/ | |
338 | } | |
339 | } | |
340 | ||
8e664fb3 | 341 | /* if present, add any custom IEs that go before HT */ |
af6b6374 | 342 | if (wk->ie_len && wk->ie) { |
8e664fb3 JB |
343 | static const u8 before_ht[] = { |
344 | WLAN_EID_SSID, | |
345 | WLAN_EID_SUPP_RATES, | |
346 | WLAN_EID_EXT_SUPP_RATES, | |
347 | WLAN_EID_PWR_CAPABILITY, | |
348 | WLAN_EID_SUPPORTED_CHANNELS, | |
349 | WLAN_EID_RSN, | |
350 | WLAN_EID_QOS_CAPA, | |
351 | WLAN_EID_RRM_ENABLED_CAPABILITIES, | |
352 | WLAN_EID_MOBILITY_DOMAIN, | |
353 | WLAN_EID_SUPPORTED_REGULATORY_CLASSES, | |
354 | }; | |
355 | noffset = ieee80211_ie_split(wk->ie, wk->ie_len, | |
356 | before_ht, ARRAY_SIZE(before_ht), | |
357 | offset); | |
358 | pos = skb_put(skb, noffset - offset); | |
359 | memcpy(pos, wk->ie + offset, noffset - offset); | |
360 | offset = noffset; | |
af6b6374 JB |
361 | } |
362 | ||
77c8144a JB |
363 | if (wk->assoc.use_11n && wk->assoc.wmm_used && |
364 | local->hw.queues >= 4) | |
365 | ieee80211_add_ht_ie(skb, wk->assoc.ht_information_ie, | |
366 | sband, wk->chan, wk->assoc.smps); | |
367 | ||
8e664fb3 JB |
368 | /* if present, add any custom non-vendor IEs that go after HT */ |
369 | if (wk->ie_len && wk->ie) { | |
370 | noffset = ieee80211_ie_split_vendor(wk->ie, wk->ie_len, | |
371 | offset); | |
372 | pos = skb_put(skb, noffset - offset); | |
373 | memcpy(pos, wk->ie + offset, noffset - offset); | |
374 | offset = noffset; | |
375 | } | |
376 | ||
af6b6374 JB |
377 | if (wk->assoc.wmm_used && local->hw.queues >= 4) { |
378 | pos = skb_put(skb, 9); | |
379 | *pos++ = WLAN_EID_VENDOR_SPECIFIC; | |
380 | *pos++ = 7; /* len */ | |
381 | *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */ | |
382 | *pos++ = 0x50; | |
383 | *pos++ = 0xf2; | |
384 | *pos++ = 2; /* WME */ | |
385 | *pos++ = 0; /* WME info */ | |
386 | *pos++ = 1; /* WME ver */ | |
387 | *pos++ = 0; | |
388 | } | |
389 | ||
8e664fb3 JB |
390 | /* add any remaining custom (i.e. vendor specific here) IEs */ |
391 | if (wk->ie_len && wk->ie) { | |
392 | noffset = wk->ie_len; | |
393 | pos = skb_put(skb, noffset - offset); | |
394 | memcpy(pos, wk->ie + offset, noffset - offset); | |
395 | } | |
396 | ||
af6b6374 JB |
397 | IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; |
398 | ieee80211_tx_skb(sdata, skb); | |
399 | } | |
400 | ||
401 | static void ieee80211_remove_auth_bss(struct ieee80211_local *local, | |
402 | struct ieee80211_work *wk) | |
403 | { | |
404 | struct cfg80211_bss *cbss; | |
405 | u16 capa_val = WLAN_CAPABILITY_ESS; | |
406 | ||
407 | if (wk->probe_auth.privacy) | |
408 | capa_val |= WLAN_CAPABILITY_PRIVACY; | |
409 | ||
410 | cbss = cfg80211_get_bss(local->hw.wiphy, wk->chan, wk->filter_ta, | |
411 | wk->probe_auth.ssid, wk->probe_auth.ssid_len, | |
412 | WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY, | |
413 | capa_val); | |
414 | if (!cbss) | |
415 | return; | |
416 | ||
417 | cfg80211_unlink_bss(local->hw.wiphy, cbss); | |
418 | cfg80211_put_bss(cbss); | |
419 | } | |
420 | ||
421 | static enum work_action __must_check | |
422 | ieee80211_direct_probe(struct ieee80211_work *wk) | |
423 | { | |
424 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
425 | struct ieee80211_local *local = sdata->local; | |
426 | ||
427 | wk->probe_auth.tries++; | |
428 | if (wk->probe_auth.tries > IEEE80211_AUTH_MAX_TRIES) { | |
7d3a1c3b | 429 | printk(KERN_DEBUG "%s: direct probe to %pM timed out\n", |
af6b6374 JB |
430 | sdata->name, wk->filter_ta); |
431 | ||
432 | /* | |
433 | * Most likely AP is not in the range so remove the | |
434 | * bss struct for that AP. | |
435 | */ | |
436 | ieee80211_remove_auth_bss(local, wk); | |
437 | ||
438 | /* | |
439 | * We might have a pending scan which had no chance to run yet | |
440 | * due to work needing to be done. Hence, queue the STAs work | |
441 | * again for that. | |
442 | */ | |
443 | ieee80211_queue_work(&local->hw, &local->work_work); | |
444 | return WORK_ACT_TIMEOUT; | |
445 | } | |
446 | ||
7d3a1c3b | 447 | printk(KERN_DEBUG "%s: direct probe to %pM (try %d)\n", |
af6b6374 JB |
448 | sdata->name, wk->filter_ta, wk->probe_auth.tries); |
449 | ||
450 | /* | |
451 | * Direct probe is sent to broadcast address as some APs | |
452 | * will not answer to direct packet in unassociated state. | |
453 | */ | |
454 | ieee80211_send_probe_req(sdata, NULL, wk->probe_auth.ssid, | |
455 | wk->probe_auth.ssid_len, NULL, 0); | |
456 | ||
457 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
458 | run_again(local, wk->timeout); | |
459 | ||
460 | return WORK_ACT_NONE; | |
461 | } | |
462 | ||
463 | ||
464 | static enum work_action __must_check | |
465 | ieee80211_authenticate(struct ieee80211_work *wk) | |
466 | { | |
467 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
468 | struct ieee80211_local *local = sdata->local; | |
469 | ||
470 | wk->probe_auth.tries++; | |
471 | if (wk->probe_auth.tries > IEEE80211_AUTH_MAX_TRIES) { | |
7d3a1c3b | 472 | printk(KERN_DEBUG "%s: authentication with %pM" |
af6b6374 JB |
473 | " timed out\n", sdata->name, wk->filter_ta); |
474 | ||
475 | /* | |
476 | * Most likely AP is not in the range so remove the | |
477 | * bss struct for that AP. | |
478 | */ | |
479 | ieee80211_remove_auth_bss(local, wk); | |
480 | ||
481 | /* | |
482 | * We might have a pending scan which had no chance to run yet | |
483 | * due to work needing to be done. Hence, queue the STAs work | |
484 | * again for that. | |
485 | */ | |
486 | ieee80211_queue_work(&local->hw, &local->work_work); | |
487 | return WORK_ACT_TIMEOUT; | |
488 | } | |
489 | ||
7d3a1c3b | 490 | printk(KERN_DEBUG "%s: authenticate with %pM (try %d)\n", |
af6b6374 JB |
491 | sdata->name, wk->filter_ta, wk->probe_auth.tries); |
492 | ||
493 | ieee80211_send_auth(sdata, 1, wk->probe_auth.algorithm, wk->ie, | |
494 | wk->ie_len, wk->filter_ta, NULL, 0, 0); | |
495 | wk->probe_auth.transaction = 2; | |
496 | ||
497 | wk->timeout = jiffies + IEEE80211_AUTH_TIMEOUT; | |
498 | run_again(local, wk->timeout); | |
499 | ||
500 | return WORK_ACT_NONE; | |
501 | } | |
502 | ||
503 | static enum work_action __must_check | |
504 | ieee80211_associate(struct ieee80211_work *wk) | |
505 | { | |
506 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
507 | struct ieee80211_local *local = sdata->local; | |
508 | ||
509 | wk->assoc.tries++; | |
510 | if (wk->assoc.tries > IEEE80211_ASSOC_MAX_TRIES) { | |
7d3a1c3b | 511 | printk(KERN_DEBUG "%s: association with %pM" |
af6b6374 JB |
512 | " timed out\n", |
513 | sdata->name, wk->filter_ta); | |
514 | ||
515 | /* | |
516 | * Most likely AP is not in the range so remove the | |
517 | * bss struct for that AP. | |
518 | */ | |
519 | if (wk->assoc.bss) | |
0c1ad2ca | 520 | cfg80211_unlink_bss(local->hw.wiphy, wk->assoc.bss); |
af6b6374 JB |
521 | |
522 | /* | |
523 | * We might have a pending scan which had no chance to run yet | |
524 | * due to work needing to be done. Hence, queue the STAs work | |
525 | * again for that. | |
526 | */ | |
527 | ieee80211_queue_work(&local->hw, &local->work_work); | |
528 | return WORK_ACT_TIMEOUT; | |
529 | } | |
530 | ||
7d3a1c3b | 531 | printk(KERN_DEBUG "%s: associate with %pM (try %d)\n", |
af6b6374 JB |
532 | sdata->name, wk->filter_ta, wk->assoc.tries); |
533 | ieee80211_send_assoc(sdata, wk); | |
534 | ||
535 | wk->timeout = jiffies + IEEE80211_ASSOC_TIMEOUT; | |
536 | run_again(local, wk->timeout); | |
537 | ||
538 | return WORK_ACT_NONE; | |
539 | } | |
540 | ||
541 | static void ieee80211_auth_challenge(struct ieee80211_work *wk, | |
542 | struct ieee80211_mgmt *mgmt, | |
543 | size_t len) | |
544 | { | |
545 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
546 | u8 *pos; | |
547 | struct ieee802_11_elems elems; | |
548 | ||
549 | pos = mgmt->u.auth.variable; | |
550 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
551 | if (!elems.challenge) | |
552 | return; | |
553 | ieee80211_send_auth(sdata, 3, wk->probe_auth.algorithm, | |
554 | elems.challenge - 2, elems.challenge_len + 2, | |
555 | wk->filter_ta, wk->probe_auth.key, | |
556 | wk->probe_auth.key_len, wk->probe_auth.key_idx); | |
557 | wk->probe_auth.transaction = 4; | |
558 | } | |
559 | ||
560 | static enum work_action __must_check | |
561 | ieee80211_rx_mgmt_auth(struct ieee80211_work *wk, | |
562 | struct ieee80211_mgmt *mgmt, size_t len) | |
563 | { | |
564 | u16 auth_alg, auth_transaction, status_code; | |
565 | ||
566 | if (wk->type != IEEE80211_WORK_AUTH) | |
567 | return WORK_ACT_NONE; | |
568 | ||
569 | if (len < 24 + 6) | |
570 | return WORK_ACT_NONE; | |
571 | ||
572 | auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg); | |
573 | auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction); | |
574 | status_code = le16_to_cpu(mgmt->u.auth.status_code); | |
575 | ||
576 | if (auth_alg != wk->probe_auth.algorithm || | |
577 | auth_transaction != wk->probe_auth.transaction) | |
578 | return WORK_ACT_NONE; | |
579 | ||
580 | if (status_code != WLAN_STATUS_SUCCESS) { | |
581 | printk(KERN_DEBUG "%s: %pM denied authentication (status %d)\n", | |
582 | wk->sdata->name, mgmt->sa, status_code); | |
583 | return WORK_ACT_DONE; | |
584 | } | |
585 | ||
586 | switch (wk->probe_auth.algorithm) { | |
587 | case WLAN_AUTH_OPEN: | |
588 | case WLAN_AUTH_LEAP: | |
589 | case WLAN_AUTH_FT: | |
590 | break; | |
591 | case WLAN_AUTH_SHARED_KEY: | |
592 | if (wk->probe_auth.transaction != 4) { | |
593 | ieee80211_auth_challenge(wk, mgmt, len); | |
594 | /* need another frame */ | |
595 | return WORK_ACT_NONE; | |
596 | } | |
597 | break; | |
598 | default: | |
599 | WARN_ON(1); | |
600 | return WORK_ACT_NONE; | |
601 | } | |
602 | ||
603 | printk(KERN_DEBUG "%s: authenticated\n", wk->sdata->name); | |
604 | return WORK_ACT_DONE; | |
605 | } | |
606 | ||
607 | static enum work_action __must_check | |
608 | ieee80211_rx_mgmt_assoc_resp(struct ieee80211_work *wk, | |
609 | struct ieee80211_mgmt *mgmt, size_t len, | |
610 | bool reassoc) | |
611 | { | |
612 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
613 | struct ieee80211_local *local = sdata->local; | |
614 | u16 capab_info, status_code, aid; | |
615 | struct ieee802_11_elems elems; | |
616 | u8 *pos; | |
617 | ||
618 | /* | |
619 | * AssocResp and ReassocResp have identical structure, so process both | |
620 | * of them in this function. | |
621 | */ | |
622 | ||
623 | if (len < 24 + 6) | |
624 | return WORK_ACT_NONE; | |
625 | ||
626 | capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info); | |
627 | status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code); | |
628 | aid = le16_to_cpu(mgmt->u.assoc_resp.aid); | |
629 | ||
630 | printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x " | |
631 | "status=%d aid=%d)\n", | |
632 | sdata->name, reassoc ? "Rea" : "A", mgmt->sa, | |
633 | capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14)))); | |
634 | ||
635 | pos = mgmt->u.assoc_resp.variable; | |
636 | ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems); | |
637 | ||
638 | if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY && | |
639 | elems.timeout_int && elems.timeout_int_len == 5 && | |
640 | elems.timeout_int[0] == WLAN_TIMEOUT_ASSOC_COMEBACK) { | |
641 | u32 tu, ms; | |
642 | tu = get_unaligned_le32(elems.timeout_int + 1); | |
643 | ms = tu * 1024 / 1000; | |
7d3a1c3b | 644 | printk(KERN_DEBUG "%s: %pM rejected association temporarily; " |
af6b6374 | 645 | "comeback duration %u TU (%u ms)\n", |
7d3a1c3b | 646 | sdata->name, mgmt->sa, tu, ms); |
af6b6374 JB |
647 | wk->timeout = jiffies + msecs_to_jiffies(ms); |
648 | if (ms > IEEE80211_ASSOC_TIMEOUT) | |
649 | run_again(local, wk->timeout); | |
650 | return WORK_ACT_NONE; | |
651 | } | |
652 | ||
653 | if (status_code != WLAN_STATUS_SUCCESS) | |
7d3a1c3b JB |
654 | printk(KERN_DEBUG "%s: %pM denied association (code=%d)\n", |
655 | sdata->name, mgmt->sa, status_code); | |
af6b6374 JB |
656 | else |
657 | printk(KERN_DEBUG "%s: associated\n", sdata->name); | |
658 | ||
659 | return WORK_ACT_DONE; | |
660 | } | |
661 | ||
662 | static enum work_action __must_check | |
663 | ieee80211_rx_mgmt_probe_resp(struct ieee80211_work *wk, | |
664 | struct ieee80211_mgmt *mgmt, size_t len, | |
665 | struct ieee80211_rx_status *rx_status) | |
666 | { | |
667 | struct ieee80211_sub_if_data *sdata = wk->sdata; | |
668 | struct ieee80211_local *local = sdata->local; | |
669 | size_t baselen; | |
670 | ||
671 | ASSERT_WORK_MTX(local); | |
672 | ||
673 | baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; | |
674 | if (baselen > len) | |
675 | return WORK_ACT_NONE; | |
676 | ||
677 | printk(KERN_DEBUG "%s: direct probe responded\n", sdata->name); | |
678 | return WORK_ACT_DONE; | |
679 | } | |
680 | ||
681 | static void ieee80211_work_rx_queued_mgmt(struct ieee80211_local *local, | |
682 | struct sk_buff *skb) | |
683 | { | |
684 | struct ieee80211_rx_status *rx_status; | |
685 | struct ieee80211_mgmt *mgmt; | |
686 | struct ieee80211_work *wk; | |
687 | enum work_action rma = WORK_ACT_NONE; | |
688 | u16 fc; | |
689 | ||
690 | rx_status = (struct ieee80211_rx_status *) skb->cb; | |
691 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
692 | fc = le16_to_cpu(mgmt->frame_control); | |
693 | ||
694 | mutex_lock(&local->work_mtx); | |
695 | ||
696 | list_for_each_entry(wk, &local->work_list, list) { | |
697 | const u8 *bssid = NULL; | |
698 | ||
699 | switch (wk->type) { | |
700 | case IEEE80211_WORK_DIRECT_PROBE: | |
701 | case IEEE80211_WORK_AUTH: | |
702 | case IEEE80211_WORK_ASSOC: | |
703 | bssid = wk->filter_ta; | |
704 | break; | |
705 | default: | |
706 | continue; | |
707 | } | |
708 | ||
709 | /* | |
710 | * Before queuing, we already verified mgmt->sa, | |
711 | * so this is needed just for matching. | |
712 | */ | |
713 | if (compare_ether_addr(bssid, mgmt->bssid)) | |
714 | continue; | |
715 | ||
716 | switch (fc & IEEE80211_FCTL_STYPE) { | |
717 | case IEEE80211_STYPE_PROBE_RESP: | |
718 | rma = ieee80211_rx_mgmt_probe_resp(wk, mgmt, skb->len, | |
719 | rx_status); | |
720 | break; | |
721 | case IEEE80211_STYPE_AUTH: | |
722 | rma = ieee80211_rx_mgmt_auth(wk, mgmt, skb->len); | |
723 | break; | |
724 | case IEEE80211_STYPE_ASSOC_RESP: | |
725 | rma = ieee80211_rx_mgmt_assoc_resp(wk, mgmt, | |
726 | skb->len, false); | |
727 | break; | |
728 | case IEEE80211_STYPE_REASSOC_RESP: | |
729 | rma = ieee80211_rx_mgmt_assoc_resp(wk, mgmt, | |
730 | skb->len, true); | |
731 | break; | |
732 | default: | |
733 | WARN_ON(1); | |
734 | } | |
735 | /* | |
736 | * We've processed this frame for that work, so it can't | |
737 | * belong to another work struct. | |
738 | * NB: this is also required for correctness for 'rma'! | |
739 | */ | |
740 | break; | |
741 | } | |
742 | ||
743 | switch (rma) { | |
744 | case WORK_ACT_NONE: | |
745 | break; | |
746 | case WORK_ACT_DONE: | |
747 | list_del_rcu(&wk->list); | |
748 | break; | |
749 | default: | |
750 | WARN(1, "unexpected: %d", rma); | |
751 | } | |
752 | ||
753 | mutex_unlock(&local->work_mtx); | |
754 | ||
755 | if (rma != WORK_ACT_DONE) | |
756 | goto out; | |
757 | ||
758 | switch (wk->done(wk, skb)) { | |
759 | case WORK_DONE_DESTROY: | |
760 | free_work(wk); | |
761 | break; | |
762 | case WORK_DONE_REQUEUE: | |
763 | synchronize_rcu(); | |
764 | wk->timeout = jiffies; /* run again directly */ | |
765 | mutex_lock(&local->work_mtx); | |
766 | list_add_tail(&wk->list, &local->work_list); | |
767 | mutex_unlock(&local->work_mtx); | |
768 | } | |
769 | ||
770 | out: | |
771 | kfree_skb(skb); | |
772 | } | |
773 | ||
774 | static void ieee80211_work_timer(unsigned long data) | |
775 | { | |
776 | struct ieee80211_local *local = (void *) data; | |
777 | ||
778 | if (local->quiescing) | |
779 | return; | |
780 | ||
781 | ieee80211_queue_work(&local->hw, &local->work_work); | |
782 | } | |
783 | ||
784 | static void ieee80211_work_work(struct work_struct *work) | |
785 | { | |
786 | struct ieee80211_local *local = | |
787 | container_of(work, struct ieee80211_local, work_work); | |
788 | struct sk_buff *skb; | |
789 | struct ieee80211_work *wk, *tmp; | |
790 | LIST_HEAD(free_work); | |
791 | enum work_action rma; | |
792 | ||
793 | if (local->scanning) | |
794 | return; | |
795 | ||
796 | /* | |
797 | * ieee80211_queue_work() should have picked up most cases, | |
798 | * here we'll pick the the rest. | |
799 | */ | |
800 | if (WARN(local->suspended, "work scheduled while going to suspend\n")) | |
801 | return; | |
802 | ||
803 | /* first process frames to avoid timing out while a frame is pending */ | |
804 | while ((skb = skb_dequeue(&local->work_skb_queue))) | |
805 | ieee80211_work_rx_queued_mgmt(local, skb); | |
806 | ||
807 | ieee80211_recalc_idle(local); | |
808 | ||
809 | mutex_lock(&local->work_mtx); | |
810 | ||
811 | list_for_each_entry_safe(wk, tmp, &local->work_list, list) { | |
812 | if (time_is_after_jiffies(wk->timeout)) { | |
813 | /* | |
814 | * This work item isn't supposed to be worked on | |
815 | * right now, but take care to adjust the timer | |
816 | * properly. | |
817 | */ | |
818 | run_again(local, wk->timeout); | |
819 | continue; | |
820 | } | |
821 | ||
822 | switch (wk->type) { | |
823 | default: | |
824 | WARN_ON(1); | |
825 | /* nothing */ | |
826 | rma = WORK_ACT_NONE; | |
827 | break; | |
828 | case IEEE80211_WORK_DIRECT_PROBE: | |
829 | rma = ieee80211_direct_probe(wk); | |
830 | break; | |
831 | case IEEE80211_WORK_AUTH: | |
832 | rma = ieee80211_authenticate(wk); | |
833 | break; | |
834 | case IEEE80211_WORK_ASSOC: | |
835 | rma = ieee80211_associate(wk); | |
836 | break; | |
837 | } | |
838 | ||
839 | switch (rma) { | |
840 | case WORK_ACT_NONE: | |
841 | /* no action required */ | |
842 | break; | |
843 | case WORK_ACT_TIMEOUT: | |
844 | list_del_rcu(&wk->list); | |
845 | synchronize_rcu(); | |
846 | list_add(&wk->list, &free_work); | |
847 | break; | |
848 | default: | |
849 | WARN(1, "unexpected: %d", rma); | |
850 | } | |
851 | } | |
852 | ||
853 | if (list_empty(&local->work_list) && local->scan_req) | |
854 | ieee80211_queue_delayed_work(&local->hw, | |
855 | &local->scan_work, | |
856 | round_jiffies_relative(0)); | |
857 | ||
858 | mutex_unlock(&local->work_mtx); | |
859 | ||
860 | list_for_each_entry_safe(wk, tmp, &free_work, list) { | |
861 | wk->done(wk, NULL); | |
862 | list_del(&wk->list); | |
863 | kfree(wk); | |
864 | } | |
865 | } | |
866 | ||
867 | void ieee80211_add_work(struct ieee80211_work *wk) | |
868 | { | |
869 | struct ieee80211_local *local; | |
870 | ||
871 | if (WARN_ON(!wk->chan)) | |
872 | return; | |
873 | ||
874 | if (WARN_ON(!wk->sdata)) | |
875 | return; | |
876 | ||
877 | if (WARN_ON(!wk->done)) | |
878 | return; | |
879 | ||
880 | wk->timeout = jiffies; | |
881 | ||
882 | local = wk->sdata->local; | |
883 | mutex_lock(&local->work_mtx); | |
884 | list_add_tail(&wk->list, &local->work_list); | |
885 | mutex_unlock(&local->work_mtx); | |
886 | ||
887 | ieee80211_queue_work(&local->hw, &local->work_work); | |
888 | } | |
889 | ||
890 | void ieee80211_work_init(struct ieee80211_local *local) | |
891 | { | |
892 | mutex_init(&local->work_mtx); | |
893 | INIT_LIST_HEAD(&local->work_list); | |
894 | setup_timer(&local->work_timer, ieee80211_work_timer, | |
895 | (unsigned long)local); | |
896 | INIT_WORK(&local->work_work, ieee80211_work_work); | |
897 | skb_queue_head_init(&local->work_skb_queue); | |
898 | } | |
899 | ||
900 | void ieee80211_work_purge(struct ieee80211_sub_if_data *sdata) | |
901 | { | |
902 | struct ieee80211_local *local = sdata->local; | |
903 | struct ieee80211_work *wk, *tmp; | |
904 | ||
905 | mutex_lock(&local->work_mtx); | |
906 | list_for_each_entry_safe(wk, tmp, &local->work_list, list) { | |
907 | if (wk->sdata != sdata) | |
908 | continue; | |
909 | list_del(&wk->list); | |
910 | free_work(wk); | |
911 | } | |
912 | mutex_unlock(&local->work_mtx); | |
913 | } | |
914 | ||
915 | ieee80211_rx_result ieee80211_work_rx_mgmt(struct ieee80211_sub_if_data *sdata, | |
916 | struct sk_buff *skb) | |
917 | { | |
918 | struct ieee80211_local *local = sdata->local; | |
919 | struct ieee80211_mgmt *mgmt; | |
920 | struct ieee80211_work *wk; | |
921 | u16 fc; | |
922 | ||
923 | if (skb->len < 24) | |
924 | return RX_DROP_MONITOR; | |
925 | ||
926 | mgmt = (struct ieee80211_mgmt *) skb->data; | |
927 | fc = le16_to_cpu(mgmt->frame_control); | |
928 | ||
929 | list_for_each_entry_rcu(wk, &local->work_list, list) { | |
930 | if (sdata != wk->sdata) | |
931 | continue; | |
932 | if (compare_ether_addr(wk->filter_ta, mgmt->sa)) | |
933 | continue; | |
934 | if (compare_ether_addr(wk->filter_ta, mgmt->bssid)) | |
935 | continue; | |
936 | ||
937 | switch (fc & IEEE80211_FCTL_STYPE) { | |
938 | case IEEE80211_STYPE_AUTH: | |
939 | case IEEE80211_STYPE_PROBE_RESP: | |
940 | case IEEE80211_STYPE_ASSOC_RESP: | |
941 | case IEEE80211_STYPE_REASSOC_RESP: | |
942 | case IEEE80211_STYPE_DEAUTH: | |
943 | case IEEE80211_STYPE_DISASSOC: | |
944 | skb_queue_tail(&local->work_skb_queue, skb); | |
945 | ieee80211_queue_work(&local->hw, &local->work_work); | |
946 | return RX_QUEUED; | |
947 | } | |
948 | } | |
949 | ||
950 | return RX_CONTINUE; | |
951 | } |