]> bbs.cooldavid.org Git - net-next-2.6.git/blame - net/wireless/sme.c
git://bbs.cooldavid.org / net-next-2.6.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cfg80211: fix SME association after disassociation
[net-next-2.6.git] / net / wireless / sme.c
CommitLineData
b23aa676
SO		 1/*
2 * SME code for cfg80211's connect emulation.
3 *
4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net>
5 * Copyright (C) 2009 Intel Corporation. All rights reserved.
6 */
7
8#include <linux/etherdevice.h>
9#include <linux/if_arp.h>
10#include <linux/workqueue.h>
a9a11622
JB		 11#include <linux/wireless.h>
12#include <net/iw_handler.h>
b23aa676
SO		 13#include <net/cfg80211.h>
14#include <net/rtnetlink.h>
15#include "nl80211.h"
8b19e6ca 16#include "reg.h"
b23aa676 17
6829c878
JB		 18struct cfg80211_conn {
19 struct cfg80211_connect_params params;
20 /* these are sub-states of the _CONNECTING sme_state */
21 enum {
22 CFG80211_CONN_IDLE,
23 CFG80211_CONN_SCANNING,
24 CFG80211_CONN_SCAN_AGAIN,
25 CFG80211_CONN_AUTHENTICATE_NEXT,
26 CFG80211_CONN_AUTHENTICATING,
27 CFG80211_CONN_ASSOCIATE_NEXT,
28 CFG80211_CONN_ASSOCIATING,
29 } state;
30 u8 bssid[ETH_ALEN];
31 u8 *ie;
32 size_t ie_len;
33 bool auto_auth;
34};
35
36
37static int cfg80211_conn_scan(struct wireless_dev *wdev)
38{
79c97e97 39 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB		 40 struct cfg80211_scan_request *request;
41 int n_channels, err;
42
43 ASSERT_RTNL();
79c97e97 44 ASSERT_RDEV_LOCK(rdev);
667503dd 45 ASSERT_WDEV_LOCK(wdev);
6829c878 46
79c97e97 47 if (rdev->scan_req)
6829c878
JB		 48 return -EBUSY;
49
50 if (wdev->conn->params.channel) {
51 n_channels = 1;
52 } else {
53 enum ieee80211_band band;
54 n_channels = 0;
55
56 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
57 if (!wdev->wiphy->bands[band])
58 continue;
59 n_channels += wdev->wiphy->bands[band]->n_channels;
60 }
61 }
62 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) +
63 sizeof(request->channels[0]) * n_channels,
64 GFP_KERNEL);
65 if (!request)
66 return -ENOMEM;
67
68 request->channels = (void *)((char *)request + sizeof(*request));
69 if (wdev->conn->params.channel)
70 request->channels[0] = wdev->conn->params.channel;
71 else {
72 int i = 0, j;
73 enum ieee80211_band band;
74
75 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
76 if (!wdev->wiphy->bands[band])
77 continue;
78 for (j = 0; j < wdev->wiphy->bands[band]->n_channels;
79 i++, j++)
80 request->channels[i] =
81 &wdev->wiphy->bands[band]->channels[j];
82 }
83 }
84 request->n_channels = n_channels;
85 request->ssids = (void *)(request->channels + n_channels);
86 request->n_ssids = 1;
87
88 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid,
89 wdev->conn->params.ssid_len);
90 request->ssids[0].ssid_len = wdev->conn->params.ssid_len;
91
463d0183 92 request->dev = wdev->netdev;
79c97e97 93 request->wiphy = &rdev->wiphy;
6829c878 94
79c97e97 95 rdev->scan_req = request;
6829c878 96
79c97e97 97 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request);
6829c878
JB		 98 if (!err) {
99 wdev->conn->state = CFG80211_CONN_SCANNING;
79c97e97 100 nl80211_send_scan_start(rdev, wdev->netdev);
463d0183 101 dev_hold(wdev->netdev);
6829c878 102 } else {
79c97e97 103 rdev->scan_req = NULL;
6829c878
JB		 104 kfree(request);
105 }
106 return err;
107}
108
109static int cfg80211_conn_do_work(struct wireless_dev *wdev)
110{
79c97e97 111 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
19957bb3
JB		 112 struct cfg80211_connect_params *params;
113 int err;
6829c878 114
667503dd
JB		 115 ASSERT_WDEV_LOCK(wdev);
116
6829c878
JB		 117 if (!wdev->conn)
118 return 0;
119
19957bb3
JB		 120 params = &wdev->conn->params;
121
6829c878
JB		 122 switch (wdev->conn->state) {
123 case CFG80211_CONN_SCAN_AGAIN:
124 return cfg80211_conn_scan(wdev);
125 case CFG80211_CONN_AUTHENTICATE_NEXT:
79c97e97 126 BUG_ON(!rdev->ops->auth);
19957bb3 127 wdev->conn->state = CFG80211_CONN_AUTHENTICATING;
79c97e97 128 return __cfg80211_mlme_auth(rdev, wdev->netdev,
667503dd
JB		 129 params->channel, params->auth_type,
130 params->bssid,
131 params->ssid, params->ssid_len,
fffd0934
JB		 132 NULL, 0,
133 params->key, params->key_len,
134 params->key_idx);
6829c878 135 case CFG80211_CONN_ASSOCIATE_NEXT:
79c97e97 136 BUG_ON(!rdev->ops->assoc);
19957bb3 137 wdev->conn->state = CFG80211_CONN_ASSOCIATING;
3e5d7649
JB		 138 /*
139 * We could, later, implement roaming here and then actually
140 * set prev_bssid to non-NULL. But then we need to be aware
141 * that some APs don't like that -- so we'd need to retry
142 * the association.
143 */
79c97e97 144 err = __cfg80211_mlme_assoc(rdev, wdev->netdev,
667503dd
JB		 145 params->channel, params->bssid,
146 NULL,
147 params->ssid, params->ssid_len,
148 params->ie, params->ie_len,
149 false, &params->crypto);
19957bb3 150 if (err)
79c97e97 151 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid,
667503dd
JB		 152 NULL, 0,
153 WLAN_REASON_DEAUTH_LEAVING);
19957bb3 154 return err;
6829c878
JB		 155 default:
156 return 0;
157 }
158}
159
160void cfg80211_conn_work(struct work_struct *work)
161{
79c97e97 162 struct cfg80211_registered_device *rdev =
6829c878
JB		 163 container_of(work, struct cfg80211_registered_device, conn_work);
164 struct wireless_dev *wdev;
165
166 rtnl_lock();
79c97e97
JB		 167 cfg80211_lock_rdev(rdev);
168 mutex_lock(&rdev->devlist_mtx);
6829c878 169
79c97e97 170 list_for_each_entry(wdev, &rdev->netdev_list, list) {
667503dd
JB		 171 wdev_lock(wdev);
172 if (!netif_running(wdev->netdev)) {
173 wdev_unlock(wdev);
6829c878 174 continue;
667503dd
JB		 175 }
176 if (wdev->sme_state != CFG80211_SME_CONNECTING) {
177 wdev_unlock(wdev);
6829c878 178 continue;
667503dd 179 }
6829c878 180 if (cfg80211_conn_do_work(wdev))
667503dd
JB		 181 __cfg80211_connect_result(
182 wdev->netdev,
183 wdev->conn->params.bssid,
184 NULL, 0, NULL, 0,
185 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 186 false, NULL);
667503dd 187 wdev_unlock(wdev);
6829c878
JB		 188 }
189
79c97e97
JB		 190 mutex_unlock(&rdev->devlist_mtx);
191 cfg80211_unlock_rdev(rdev);
6829c878
JB		 192 rtnl_unlock();
193}
194
195static bool cfg80211_get_conn_bss(struct wireless_dev *wdev)
196{
79c97e97 197 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB		 198 struct cfg80211_bss *bss;
199 u16 capa = WLAN_CAPABILITY_ESS;
200
667503dd
JB		 201 ASSERT_WDEV_LOCK(wdev);
202
6829c878
JB		 203 if (wdev->conn->params.privacy)
204 capa |= WLAN_CAPABILITY_PRIVACY;
205
206 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid,
207 wdev->conn->params.ssid,
208 wdev->conn->params.ssid_len,
209 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY,
210 capa);
6829c878
JB		 211 if (!bss)
212 return false;
213
214 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN);
215 wdev->conn->params.bssid = wdev->conn->bssid;
216 wdev->conn->params.channel = bss->channel;
217 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
79c97e97 218 schedule_work(&rdev->conn_work);
6829c878
JB		 219
220 cfg80211_put_bss(bss);
221 return true;
222}
223
667503dd 224static void __cfg80211_sme_scan_done(struct net_device *dev)
6829c878
JB		 225{
226 struct wireless_dev *wdev = dev->ieee80211_ptr;
79c97e97 227 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878 228
667503dd
JB		 229 ASSERT_WDEV_LOCK(wdev);
230
6829c878
JB		 231 if (wdev->sme_state != CFG80211_SME_CONNECTING)
232 return;
233
d4b1a687 234 if (!wdev->conn)
6829c878
JB		 235 return;
236
237 if (wdev->conn->state != CFG80211_CONN_SCANNING &&
238 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN)
239 return;
240
241 if (!cfg80211_get_conn_bss(wdev)) {
242 /* not found */
243 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)
79c97e97 244 schedule_work(&rdev->conn_work);
6829c878 245 else
667503dd
JB		 246 __cfg80211_connect_result(
247 wdev->netdev,
248 wdev->conn->params.bssid,
249 NULL, 0, NULL, 0,
250 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 251 false, NULL);
6829c878
JB		 252 }
253}
254
667503dd
JB		 255void cfg80211_sme_scan_done(struct net_device *dev)
256{
257 struct wireless_dev *wdev = dev->ieee80211_ptr;
258
259 wdev_lock(wdev);
260 __cfg80211_sme_scan_done(dev);
261 wdev_unlock(wdev);
262}
263
264void cfg80211_sme_rx_auth(struct net_device *dev,
265 const u8 *buf, size_t len)
6829c878
JB		 266{
267 struct wireless_dev *wdev = dev->ieee80211_ptr;
268 struct wiphy *wiphy = wdev->wiphy;
269 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
270 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
271 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code);
272
667503dd
JB		 273 ASSERT_WDEV_LOCK(wdev);
274
6829c878
JB		 275 /* should only RX auth frames when connecting */
276 if (wdev->sme_state != CFG80211_SME_CONNECTING)
277 return;
278
279 if (WARN_ON(!wdev->conn))
280 return;
281
282 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
283 wdev->conn->auto_auth &&
284 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) {
285 /* select automatically between only open, shared, leap */
286 switch (wdev->conn->params.auth_type) {
287 case NL80211_AUTHTYPE_OPEN_SYSTEM:
fffd0934
JB		 288 if (wdev->connect_keys)
289 wdev->conn->params.auth_type =
290 NL80211_AUTHTYPE_SHARED_KEY;
291 else
292 wdev->conn->params.auth_type =
293 NL80211_AUTHTYPE_NETWORK_EAP;
6829c878
JB		 294 break;
295 case NL80211_AUTHTYPE_SHARED_KEY:
296 wdev->conn->params.auth_type =
297 NL80211_AUTHTYPE_NETWORK_EAP;
298 break;
299 default:
300 /* huh? */
301 wdev->conn->params.auth_type =
302 NL80211_AUTHTYPE_OPEN_SYSTEM;
303 break;
304 }
305 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
306 schedule_work(&rdev->conn_work);
19957bb3 307 } else if (status_code != WLAN_STATUS_SUCCESS) {
4bde0f7d 308 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
df7fc0f9 309 status_code, false, NULL);
19957bb3 310 } else if (wdev->sme_state == CFG80211_SME_CONNECTING &&
6829c878
JB		 311 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) {
312 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT;
313 schedule_work(&rdev->conn_work);
314 }
315}
b23aa676 316
667503dd
JB		 317void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
318 const u8 *req_ie, size_t req_ie_len,
319 const u8 *resp_ie, size_t resp_ie_len,
df7fc0f9
JB		 320 u16 status, bool wextev,
321 struct cfg80211_bss *bss)
b23aa676
SO		 322{
323 struct wireless_dev *wdev = dev->ieee80211_ptr;
8b19e6ca 324 u8 *country_ie;
b23aa676
SO		 325#ifdef CONFIG_WIRELESS_EXT
326 union iwreq_data wrqu;
327#endif
328
667503dd
JB		 329 ASSERT_WDEV_LOCK(wdev);
330
b23aa676
SO		 331 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
332 return;
333
e45cd82a
JB		 334 if (wdev->sme_state == CFG80211_SME_CONNECTED)
335 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), dev,
336 bssid, req_ie, req_ie_len,
667503dd 337 resp_ie, resp_ie_len, GFP_KERNEL);
e45cd82a
JB		 338 else
339 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev,
340 bssid, req_ie, req_ie_len,
341 resp_ie, resp_ie_len,
667503dd 342 status, GFP_KERNEL);
e45cd82a
JB		 343
344#ifdef CONFIG_WIRELESS_EXT
345 if (wextev) {
346 if (req_ie && status == WLAN_STATUS_SUCCESS) {
347 memset(&wrqu, 0, sizeof(wrqu));
348 wrqu.data.length = req_ie_len;
3409ff77 349 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie);
e45cd82a
JB		 350 }
351
352 if (resp_ie && status == WLAN_STATUS_SUCCESS) {
353 memset(&wrqu, 0, sizeof(wrqu));
354 wrqu.data.length = resp_ie_len;
355 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie);
356 }
357
358 memset(&wrqu, 0, sizeof(wrqu));
359 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
360 if (bssid && status == WLAN_STATUS_SUCCESS)
361 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
362 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
363 }
364#endif
365
df7fc0f9
JB		 366 if (wdev->current_bss) {
367 cfg80211_unhold_bss(wdev->current_bss);
368 cfg80211_put_bss(&wdev->current_bss->pub);
369 wdev->current_bss = NULL;
370 }
371
e45cd82a 372 if (status == WLAN_STATUS_SUCCESS &&
fffd0934
JB		 373 wdev->sme_state == CFG80211_SME_IDLE)
374 goto success;
e45cd82a 375
6829c878 376 if (wdev->sme_state != CFG80211_SME_CONNECTING)
b23aa676
SO		 377 return;
378
19957bb3
JB		 379 if (wdev->conn)
380 wdev->conn->state = CFG80211_CONN_IDLE;
381
fffd0934 382 if (status != WLAN_STATUS_SUCCESS) {
b23aa676 383 wdev->sme_state = CFG80211_SME_IDLE;
19957bb3
JB		 384 kfree(wdev->conn);
385 wdev->conn = NULL;
fffd0934
JB		 386 kfree(wdev->connect_keys);
387 wdev->connect_keys = NULL;
8dadadb7 388 wdev->ssid_len = 0;
fffd0934 389 return;
b23aa676 390 }
fffd0934 391
df7fc0f9
JB		 392 success:
393 if (!bss)
394 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
395 wdev->ssid, wdev->ssid_len,
396 WLAN_CAPABILITY_ESS,
397 WLAN_CAPABILITY_ESS);
fffd0934
JB		 398
399 if (WARN_ON(!bss))
400 return;
401
402 cfg80211_hold_bss(bss_from_pub(bss));
403 wdev->current_bss = bss_from_pub(bss);
404
fffd0934
JB		 405 wdev->sme_state = CFG80211_SME_CONNECTED;
406 cfg80211_upload_connect_keys(wdev);
8b19e6ca
LR		 407
408 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY);
409
410 if (!country_ie)
411 return;
412
413 /*
414 * ieee80211_bss_get_ie() ensures we can access:
415 * - country_ie + 2, the start of the country ie data, and
416 * - and country_ie[1] which is the IE length
417 */
418 regulatory_hint_11d(wdev->wiphy,
419 country_ie + 2,
420 country_ie[1]);
b23aa676 421}
f2129354
JB		 422
423void cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
424 const u8 *req_ie, size_t req_ie_len,
425 const u8 *resp_ie, size_t resp_ie_len,
426 u16 status, gfp_t gfp)
427{
667503dd
JB		 428 struct wireless_dev *wdev = dev->ieee80211_ptr;
429 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
430 struct cfg80211_event *ev;
431 unsigned long flags;
432
433 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
434 if (!ev)
435 return;
436
437 ev->type = EVENT_CONNECT_RESULT;
438 memcpy(ev->cr.bssid, bssid, ETH_ALEN);
439 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev);
440 ev->cr.req_ie_len = req_ie_len;
441 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len);
442 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
443 ev->cr.resp_ie_len = resp_ie_len;
444 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len);
445 ev->cr.status = status;
446
447 spin_lock_irqsave(&wdev->event_lock, flags);
448 list_add_tail(&ev->list, &wdev->event_list);
449 spin_unlock_irqrestore(&wdev->event_lock, flags);
450 schedule_work(&rdev->event_work);
f2129354 451}
b23aa676
SO		 452EXPORT_SYMBOL(cfg80211_connect_result);
453
667503dd
JB		 454void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid,
455 const u8 *req_ie, size_t req_ie_len,
456 const u8 *resp_ie, size_t resp_ie_len)
b23aa676 457{
b23aa676
SO		 458 struct cfg80211_bss *bss;
459#ifdef CONFIG_WIRELESS_EXT
460 union iwreq_data wrqu;
461#endif
462
667503dd
JB		 463 ASSERT_WDEV_LOCK(wdev);
464
b23aa676
SO		 465 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
466 return;
467
468 if (WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED))
469 return;
470
471 /* internal error -- how did we get to CONNECTED w/o BSS? */
472 if (WARN_ON(!wdev->current_bss)) {
473 return;
474 }
475
476 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 477 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO		 478 wdev->current_bss = NULL;
479
480 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
481 wdev->ssid, wdev->ssid_len,
482 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
483
484 if (WARN_ON(!bss))
485 return;
486
19957bb3
JB		 487 cfg80211_hold_bss(bss_from_pub(bss));
488 wdev->current_bss = bss_from_pub(bss);
b23aa676 489
667503dd
JB		 490 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid,
491 req_ie, req_ie_len, resp_ie, resp_ie_len,
492 GFP_KERNEL);
b23aa676
SO		 493
494#ifdef CONFIG_WIRELESS_EXT
495 if (req_ie) {
496 memset(&wrqu, 0, sizeof(wrqu));
497 wrqu.data.length = req_ie_len;
3409ff77 498 wireless_send_event(wdev->netdev, IWEVASSOCREQIE,
667503dd 499 &wrqu, req_ie);
b23aa676
SO		 500 }
501
502 if (resp_ie) {
503 memset(&wrqu, 0, sizeof(wrqu));
504 wrqu.data.length = resp_ie_len;
667503dd
JB		 505 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE,
506 &wrqu, resp_ie);
b23aa676
SO		 507 }
508
509 memset(&wrqu, 0, sizeof(wrqu));
510 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
511 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
667503dd 512 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL);
b23aa676
SO		 513#endif
514}
667503dd
JB		 515
516void cfg80211_roamed(struct net_device *dev, const u8 *bssid,
517 const u8 *req_ie, size_t req_ie_len,
518 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
519{
520 struct wireless_dev *wdev = dev->ieee80211_ptr;
521 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
522 struct cfg80211_event *ev;
523 unsigned long flags;
524
525 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
526 if (!ev)
527 return;
528
529 ev->type = EVENT_ROAMED;
530 memcpy(ev->rm.bssid, bssid, ETH_ALEN);
531 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev);
532 ev->rm.req_ie_len = req_ie_len;
533 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len);
534 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
535 ev->rm.resp_ie_len = resp_ie_len;
536 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len);
537
538 spin_lock_irqsave(&wdev->event_lock, flags);
539 list_add_tail(&ev->list, &wdev->event_list);
540 spin_unlock_irqrestore(&wdev->event_lock, flags);
541 schedule_work(&rdev->event_work);
542}
b23aa676
SO		 543EXPORT_SYMBOL(cfg80211_roamed);
544
667503dd 545void __cfg80211_disconnected(struct net_device *dev, const u8 *ie,
6829c878 546 size_t ie_len, u16 reason, bool from_ap)
b23aa676
SO		 547{
548 struct wireless_dev *wdev = dev->ieee80211_ptr;
fffd0934
JB		 549 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
550 int i;
b23aa676
SO		 551#ifdef CONFIG_WIRELESS_EXT
552 union iwreq_data wrqu;
553#endif
554
667503dd
JB		 555 ASSERT_WDEV_LOCK(wdev);
556
b23aa676
SO		 557 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
558 return;
559
560 if (WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED))
561 return;
562
563 if (wdev->current_bss) {
564 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 565 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO		 566 }
567
568 wdev->current_bss = NULL;
569 wdev->sme_state = CFG80211_SME_IDLE;
8dadadb7 570 wdev->ssid_len = 0;
b23aa676 571
6829c878 572 if (wdev->conn) {
b6f0b639
JB		 573 const u8 *bssid;
574 int ret;
575
6829c878
JB		 576 kfree(wdev->conn->ie);
577 wdev->conn->ie = NULL;
19957bb3
JB		 578 kfree(wdev->conn);
579 wdev->conn = NULL;
b6f0b639
JB		 580
581 /*
582 * If this disconnect was due to a disassoc, we
583 * we might still have an auth BSS around. For
584 * the userspace SME that's currently expected,
585 * but for the kernel SME (nl80211 CONNECT or
586 * wireless extensions) we want to clear up all
587 * state.
588 */
589 for (i = 0; i < MAX_AUTH_BSSES; i++) {
590 if (!wdev->auth_bsses[i])
591 continue;
592 bssid = wdev->auth_bsses[i]->pub.bssid;
593 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0,
594 WLAN_REASON_DEAUTH_LEAVING);
595 WARN(ret, "deauth failed: %d\n", ret);
596 }
6829c878
JB		 597 }
598
fffd0934
JB		 599 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap);
600
601 /*
602 * Delete all the keys ... pairwise keys can't really
603 * exist any more anyway, but default keys might.
604 */
605 if (rdev->ops->del_key)
606 for (i = 0; i < 6; i++)
607 rdev->ops->del_key(wdev->wiphy, dev, i, NULL);
b23aa676
SO		 608
609#ifdef CONFIG_WIRELESS_EXT
610 memset(&wrqu, 0, sizeof(wrqu));
611 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
612 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
613#endif
614}
615
616void cfg80211_disconnected(struct net_device *dev, u16 reason,
617 u8 *ie, size_t ie_len, gfp_t gfp)
618{
667503dd
JB		 619 struct wireless_dev *wdev = dev->ieee80211_ptr;
620 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
621 struct cfg80211_event *ev;
622 unsigned long flags;
623
624 ev = kzalloc(sizeof(*ev) + ie_len, gfp);
625 if (!ev)
626 return;
627
628 ev->type = EVENT_DISCONNECTED;
629 ev->dc.ie = ((u8 *)ev) + sizeof(*ev);
630 ev->dc.ie_len = ie_len;
631 memcpy((void *)ev->dc.ie, ie, ie_len);
632 ev->dc.reason = reason;
633
634 spin_lock_irqsave(&wdev->event_lock, flags);
635 list_add_tail(&ev->list, &wdev->event_list);
636 spin_unlock_irqrestore(&wdev->event_lock, flags);
637 schedule_work(&rdev->event_work);
b23aa676
SO		 638}
639EXPORT_SYMBOL(cfg80211_disconnected);
640
667503dd
JB		 641int __cfg80211_connect(struct cfg80211_registered_device *rdev,
642 struct net_device *dev,
fffd0934
JB		 643 struct cfg80211_connect_params *connect,
644 struct cfg80211_cached_keys *connkeys)
b23aa676 645{
b23aa676 646 struct wireless_dev *wdev = dev->ieee80211_ptr;
667503dd
JB		 647 int err;
648
649 ASSERT_WDEV_LOCK(wdev);
b23aa676
SO		 650
651 if (wdev->sme_state != CFG80211_SME_IDLE)
652 return -EALREADY;
653
fffd0934
JB		 654 if (WARN_ON(wdev->connect_keys)) {
655 kfree(wdev->connect_keys);
656 wdev->connect_keys = NULL;
657 }
658
659 if (connkeys && connkeys->def >= 0) {
660 int idx;
661
662 idx = connkeys->def;
663 /* If given a WEP key we may need it for shared key auth */
664 if (connkeys->params[idx].cipher == WLAN_CIPHER_SUITE_WEP40 ||
665 connkeys->params[idx].cipher == WLAN_CIPHER_SUITE_WEP104) {
666 connect->key_idx = idx;
667 connect->key = connkeys->params[idx].key;
668 connect->key_len = connkeys->params[idx].key_len;
669 }
670 }
671
b23aa676 672 if (!rdev->ops->connect) {
6829c878
JB		 673 if (!rdev->ops->auth || !rdev->ops->assoc)
674 return -EOPNOTSUPP;
675
19957bb3
JB		 676 if (WARN_ON(wdev->conn))
677 return -EINPROGRESS;
678
679 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL);
680 if (!wdev->conn)
681 return -ENOMEM;
6829c878
JB		 682
683 /*
684 * Copy all parameters, and treat explicitly IEs, BSSID, SSID.
685 */
686 memcpy(&wdev->conn->params, connect, sizeof(*connect));
687 if (connect->bssid) {
688 wdev->conn->params.bssid = wdev->conn->bssid;
689 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN);
690 }
691
692 if (connect->ie) {
693 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len,
694 GFP_KERNEL);
695 wdev->conn->params.ie = wdev->conn->ie;
19957bb3
JB		 696 if (!wdev->conn->ie) {
697 kfree(wdev->conn);
698 wdev->conn = NULL;
6829c878 699 return -ENOMEM;
19957bb3 700 }
6829c878
JB		 701 }
702
703 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) {
704 wdev->conn->auto_auth = true;
705 /* start with open system ... should mostly work */
706 wdev->conn->params.auth_type =
707 NL80211_AUTHTYPE_OPEN_SYSTEM;
708 } else {
709 wdev->conn->auto_auth = false;
710 }
711
712 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
713 wdev->ssid_len = connect->ssid_len;
714 wdev->conn->params.ssid = wdev->ssid;
715 wdev->conn->params.ssid_len = connect->ssid_len;
716
717 /* don't care about result -- but fill bssid & channel */
718 if (!wdev->conn->params.bssid || !wdev->conn->params.channel)
719 cfg80211_get_conn_bss(wdev);
720
721 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 722 wdev->connect_keys = connkeys;
6829c878
JB		 723
724 /* we're good if we have both BSSID and channel */
725 if (wdev->conn->params.bssid && wdev->conn->params.channel) {
726 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
727 err = cfg80211_conn_do_work(wdev);
728 } else {
729 /* otherwise we'll need to scan for the AP first */
730 err = cfg80211_conn_scan(wdev);
731 /*
732 * If we can't scan right now, then we need to scan again
733 * after the current scan finished, since the parameters
734 * changed (unless we find a good AP anyway).
735 */
736 if (err == -EBUSY) {
737 err = 0;
738 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN;
739 }
740 }
19957bb3
JB		 741 if (err) {
742 kfree(wdev->conn);
743 wdev->conn = NULL;
6829c878 744 wdev->sme_state = CFG80211_SME_IDLE;
fffd0934 745 wdev->connect_keys = NULL;
8dadadb7 746 wdev->ssid_len = 0;
19957bb3 747 }
6829c878
JB		 748
749 return err;
b23aa676
SO		 750 } else {
751 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 752 wdev->connect_keys = connkeys;
b23aa676
SO		 753 err = rdev->ops->connect(&rdev->wiphy, dev, connect);
754 if (err) {
fffd0934 755 wdev->connect_keys = NULL;
b23aa676
SO		 756 wdev->sme_state = CFG80211_SME_IDLE;
757 return err;
758 }
b23aa676 759
6829c878
JB		 760 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
761 wdev->ssid_len = connect->ssid_len;
b23aa676 762
6829c878
JB		 763 return 0;
764 }
b23aa676
SO		 765}
766
667503dd
JB		 767int cfg80211_connect(struct cfg80211_registered_device *rdev,
768 struct net_device *dev,
fffd0934
JB		 769 struct cfg80211_connect_params *connect,
770 struct cfg80211_cached_keys *connkeys)
667503dd
JB		 771{
772 int err;
773
774 wdev_lock(dev->ieee80211_ptr);
fffd0934 775 err = __cfg80211_connect(rdev, dev, connect, connkeys);
667503dd
JB		 776 wdev_unlock(dev->ieee80211_ptr);
777
778 return err;
779}
780
781int __cfg80211_disconnect(struct cfg80211_registered_device *rdev,
782 struct net_device *dev, u16 reason, bool wextev)
b23aa676 783{
6829c878 784 struct wireless_dev *wdev = dev->ieee80211_ptr;
b23aa676
SO		 785 int err;
786
667503dd
JB		 787 ASSERT_WDEV_LOCK(wdev);
788
6829c878
JB		 789 if (wdev->sme_state == CFG80211_SME_IDLE)
790 return -EINVAL;
791
fffd0934
JB		 792 kfree(wdev->connect_keys);
793 wdev->connect_keys = NULL;
794
b23aa676 795 if (!rdev->ops->disconnect) {
19957bb3
JB		 796 if (!rdev->ops->deauth)
797 return -EOPNOTSUPP;
6829c878 798
19957bb3
JB		 799 /* was it connected by userspace SME? */
800 if (!wdev->conn) {
801 cfg80211_mlme_down(rdev, dev);
802 return 0;
803 }
6829c878
JB		 804
805 if (wdev->sme_state == CFG80211_SME_CONNECTING &&
806 (wdev->conn->state == CFG80211_CONN_SCANNING ||
807 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) {
808 wdev->sme_state = CFG80211_SME_IDLE;
19957bb3
JB		 809 kfree(wdev->conn);
810 wdev->conn = NULL;
8dadadb7 811 wdev->ssid_len = 0;
6829c878
JB		 812 return 0;
813 }
814
6829c878 815 /* wdev->conn->params.bssid must be set if > SCANNING */
667503dd
JB		 816 err = __cfg80211_mlme_deauth(rdev, dev,
817 wdev->conn->params.bssid,
818 NULL, 0, reason);
6829c878
JB		 819 if (err)
820 return err;
b23aa676
SO		 821 } else {
822 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason);
823 if (err)
824 return err;
825 }
826
6829c878 827 if (wdev->sme_state == CFG80211_SME_CONNECTED)
667503dd 828 __cfg80211_disconnected(dev, NULL, 0, 0, false);
6829c878 829 else if (wdev->sme_state == CFG80211_SME_CONNECTING)
f2129354
JB		 830 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0,
831 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 832 wextev, NULL);
b23aa676
SO		 833
834 return 0;
835}
19957bb3 836
667503dd
JB		 837int cfg80211_disconnect(struct cfg80211_registered_device *rdev,
838 struct net_device *dev,
839 u16 reason, bool wextev)
840{
841 int err;
842
843 wdev_lock(dev->ieee80211_ptr);
844 err = __cfg80211_disconnect(rdev, dev, reason, wextev);
845 wdev_unlock(dev->ieee80211_ptr);
846
847 return err;
848}
849
19957bb3
JB		 850void cfg80211_sme_disassoc(struct net_device *dev, int idx)
851{
852 struct wireless_dev *wdev = dev->ieee80211_ptr;
853 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
854 u8 bssid[ETH_ALEN];
855
667503dd
JB		 856 ASSERT_WDEV_LOCK(wdev);
857
19957bb3
JB		 858 if (!wdev->conn)
859 return;
860
861 if (wdev->conn->state == CFG80211_CONN_IDLE)
862 return;
863
864 /*
865 * Ok, so the association was made by this SME -- we don't
866 * want it any more so deauthenticate too.
867 */
868
869 if (!wdev->auth_bsses[idx])
870 return;
871
872 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN);
ec3f1490
JB		 873 if (__cfg80211_mlme_deauth(rdev, dev, bssid,
874 NULL, 0, WLAN_REASON_DEAUTH_LEAVING)) {
19957bb3
JB		 875 /* whatever -- assume gone anyway */
876 cfg80211_unhold_bss(wdev->auth_bsses[idx]);
877 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub);
878 wdev->auth_bsses[idx] = NULL;
879 }
880}
Clone of davem's net-next-2.6 tree