]> bbs.cooldavid.org Git - net-next-2.6.git/blame - net/wireless/sme.c
cfg80211/mac80211: better channel handling
[net-next-2.6.git] / net / wireless / sme.c
CommitLineData
b23aa676
SO
1/*
2 * SME code for cfg80211's connect emulation.
3 *
4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net>
5 * Copyright (C) 2009 Intel Corporation. All rights reserved.
6 */
7
8#include <linux/etherdevice.h>
9#include <linux/if_arp.h>
10#include <linux/workqueue.h>
a9a11622
JB
11#include <linux/wireless.h>
12#include <net/iw_handler.h>
b23aa676
SO
13#include <net/cfg80211.h>
14#include <net/rtnetlink.h>
15#include "nl80211.h"
8b19e6ca 16#include "reg.h"
b23aa676 17
6829c878
JB
18struct cfg80211_conn {
19 struct cfg80211_connect_params params;
20 /* these are sub-states of the _CONNECTING sme_state */
21 enum {
22 CFG80211_CONN_IDLE,
23 CFG80211_CONN_SCANNING,
24 CFG80211_CONN_SCAN_AGAIN,
25 CFG80211_CONN_AUTHENTICATE_NEXT,
26 CFG80211_CONN_AUTHENTICATING,
27 CFG80211_CONN_ASSOCIATE_NEXT,
28 CFG80211_CONN_ASSOCIATING,
7d930bc3 29 CFG80211_CONN_DEAUTH_ASSOC_FAIL,
6829c878 30 } state;
f401a6f7 31 u8 bssid[ETH_ALEN], prev_bssid[ETH_ALEN];
6829c878
JB
32 u8 *ie;
33 size_t ie_len;
f401a6f7 34 bool auto_auth, prev_bssid_valid;
6829c878
JB
35};
36
09d989d1
LR
37bool cfg80211_is_all_idle(void)
38{
39 struct cfg80211_registered_device *rdev;
40 struct wireless_dev *wdev;
41 bool is_all_idle = true;
42
43 mutex_lock(&cfg80211_mutex);
44
45 /*
46 * All devices must be idle as otherwise if you are actively
47 * scanning some new beacon hints could be learned and would
48 * count as new regulatory hints.
49 */
50 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
51 cfg80211_lock_rdev(rdev);
52 list_for_each_entry(wdev, &rdev->netdev_list, list) {
53 wdev_lock(wdev);
54 if (wdev->sme_state != CFG80211_SME_IDLE)
55 is_all_idle = false;
56 wdev_unlock(wdev);
57 }
58 cfg80211_unlock_rdev(rdev);
59 }
60
61 mutex_unlock(&cfg80211_mutex);
62
63 return is_all_idle;
64}
65
66static void disconnect_work(struct work_struct *work)
67{
68 if (!cfg80211_is_all_idle())
69 return;
70
71 regulatory_hint_disconnect();
72}
73
74static DECLARE_WORK(cfg80211_disconnect_work, disconnect_work);
6829c878
JB
75
76static int cfg80211_conn_scan(struct wireless_dev *wdev)
77{
79c97e97 78 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB
79 struct cfg80211_scan_request *request;
80 int n_channels, err;
81
82 ASSERT_RTNL();
79c97e97 83 ASSERT_RDEV_LOCK(rdev);
667503dd 84 ASSERT_WDEV_LOCK(wdev);
6829c878 85
79c97e97 86 if (rdev->scan_req)
6829c878
JB
87 return -EBUSY;
88
89 if (wdev->conn->params.channel) {
90 n_channels = 1;
91 } else {
92 enum ieee80211_band band;
93 n_channels = 0;
94
95 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
96 if (!wdev->wiphy->bands[band])
97 continue;
98 n_channels += wdev->wiphy->bands[band]->n_channels;
99 }
100 }
101 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) +
102 sizeof(request->channels[0]) * n_channels,
103 GFP_KERNEL);
104 if (!request)
105 return -ENOMEM;
106
6829c878
JB
107 if (wdev->conn->params.channel)
108 request->channels[0] = wdev->conn->params.channel;
109 else {
110 int i = 0, j;
111 enum ieee80211_band band;
112
113 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
114 if (!wdev->wiphy->bands[band])
115 continue;
116 for (j = 0; j < wdev->wiphy->bands[band]->n_channels;
117 i++, j++)
118 request->channels[i] =
119 &wdev->wiphy->bands[band]->channels[j];
120 }
121 }
122 request->n_channels = n_channels;
5ba63533 123 request->ssids = (void *)&request->channels[n_channels];
6829c878
JB
124 request->n_ssids = 1;
125
126 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid,
127 wdev->conn->params.ssid_len);
128 request->ssids[0].ssid_len = wdev->conn->params.ssid_len;
129
463d0183 130 request->dev = wdev->netdev;
79c97e97 131 request->wiphy = &rdev->wiphy;
6829c878 132
79c97e97 133 rdev->scan_req = request;
6829c878 134
79c97e97 135 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request);
6829c878
JB
136 if (!err) {
137 wdev->conn->state = CFG80211_CONN_SCANNING;
79c97e97 138 nl80211_send_scan_start(rdev, wdev->netdev);
463d0183 139 dev_hold(wdev->netdev);
6829c878 140 } else {
79c97e97 141 rdev->scan_req = NULL;
6829c878
JB
142 kfree(request);
143 }
144 return err;
145}
146
147static int cfg80211_conn_do_work(struct wireless_dev *wdev)
148{
79c97e97 149 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
19957bb3 150 struct cfg80211_connect_params *params;
f401a6f7 151 const u8 *prev_bssid = NULL;
19957bb3 152 int err;
6829c878 153
667503dd
JB
154 ASSERT_WDEV_LOCK(wdev);
155
6829c878
JB
156 if (!wdev->conn)
157 return 0;
158
19957bb3
JB
159 params = &wdev->conn->params;
160
6829c878
JB
161 switch (wdev->conn->state) {
162 case CFG80211_CONN_SCAN_AGAIN:
163 return cfg80211_conn_scan(wdev);
164 case CFG80211_CONN_AUTHENTICATE_NEXT:
79c97e97 165 BUG_ON(!rdev->ops->auth);
19957bb3 166 wdev->conn->state = CFG80211_CONN_AUTHENTICATING;
79c97e97 167 return __cfg80211_mlme_auth(rdev, wdev->netdev,
667503dd
JB
168 params->channel, params->auth_type,
169 params->bssid,
170 params->ssid, params->ssid_len,
fffd0934
JB
171 NULL, 0,
172 params->key, params->key_len,
d5cdfacb 173 params->key_idx, false);
6829c878 174 case CFG80211_CONN_ASSOCIATE_NEXT:
79c97e97 175 BUG_ON(!rdev->ops->assoc);
19957bb3 176 wdev->conn->state = CFG80211_CONN_ASSOCIATING;
f401a6f7
JB
177 if (wdev->conn->prev_bssid_valid)
178 prev_bssid = wdev->conn->prev_bssid;
79c97e97 179 err = __cfg80211_mlme_assoc(rdev, wdev->netdev,
667503dd 180 params->channel, params->bssid,
f401a6f7 181 prev_bssid,
667503dd
JB
182 params->ssid, params->ssid_len,
183 params->ie, params->ie_len,
184 false, &params->crypto);
19957bb3 185 if (err)
79c97e97 186 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid,
667503dd 187 NULL, 0,
d5cdfacb
JM
188 WLAN_REASON_DEAUTH_LEAVING,
189 false);
19957bb3 190 return err;
7d930bc3
JB
191 case CFG80211_CONN_DEAUTH_ASSOC_FAIL:
192 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid,
193 NULL, 0,
d5cdfacb 194 WLAN_REASON_DEAUTH_LEAVING, false);
7d930bc3
JB
195 /* return an error so that we call __cfg80211_connect_result() */
196 return -EINVAL;
6829c878
JB
197 default:
198 return 0;
199 }
200}
201
202void cfg80211_conn_work(struct work_struct *work)
203{
79c97e97 204 struct cfg80211_registered_device *rdev =
6829c878
JB
205 container_of(work, struct cfg80211_registered_device, conn_work);
206 struct wireless_dev *wdev;
7400f42e 207 u8 bssid_buf[ETH_ALEN], *bssid = NULL;
6829c878
JB
208
209 rtnl_lock();
79c97e97
JB
210 cfg80211_lock_rdev(rdev);
211 mutex_lock(&rdev->devlist_mtx);
6829c878 212
79c97e97 213 list_for_each_entry(wdev, &rdev->netdev_list, list) {
667503dd
JB
214 wdev_lock(wdev);
215 if (!netif_running(wdev->netdev)) {
216 wdev_unlock(wdev);
6829c878 217 continue;
667503dd
JB
218 }
219 if (wdev->sme_state != CFG80211_SME_CONNECTING) {
220 wdev_unlock(wdev);
6829c878 221 continue;
667503dd 222 }
7400f42e
JB
223 if (wdev->conn->params.bssid) {
224 memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN);
225 bssid = bssid_buf;
226 }
6829c878 227 if (cfg80211_conn_do_work(wdev))
667503dd 228 __cfg80211_connect_result(
7d930bc3 229 wdev->netdev, bssid,
667503dd
JB
230 NULL, 0, NULL, 0,
231 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 232 false, NULL);
667503dd 233 wdev_unlock(wdev);
6829c878
JB
234 }
235
79c97e97
JB
236 mutex_unlock(&rdev->devlist_mtx);
237 cfg80211_unlock_rdev(rdev);
6829c878
JB
238 rtnl_unlock();
239}
240
bbac31f4 241static struct cfg80211_bss *cfg80211_get_conn_bss(struct wireless_dev *wdev)
6829c878 242{
79c97e97 243 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB
244 struct cfg80211_bss *bss;
245 u16 capa = WLAN_CAPABILITY_ESS;
246
667503dd
JB
247 ASSERT_WDEV_LOCK(wdev);
248
6829c878
JB
249 if (wdev->conn->params.privacy)
250 capa |= WLAN_CAPABILITY_PRIVACY;
251
252 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid,
253 wdev->conn->params.ssid,
254 wdev->conn->params.ssid_len,
255 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY,
256 capa);
6829c878 257 if (!bss)
bbac31f4 258 return NULL;
6829c878
JB
259
260 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN);
261 wdev->conn->params.bssid = wdev->conn->bssid;
262 wdev->conn->params.channel = bss->channel;
263 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
79c97e97 264 schedule_work(&rdev->conn_work);
6829c878 265
bbac31f4 266 return bss;
6829c878
JB
267}
268
667503dd 269static void __cfg80211_sme_scan_done(struct net_device *dev)
6829c878
JB
270{
271 struct wireless_dev *wdev = dev->ieee80211_ptr;
79c97e97 272 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
bbac31f4 273 struct cfg80211_bss *bss;
6829c878 274
667503dd
JB
275 ASSERT_WDEV_LOCK(wdev);
276
6829c878
JB
277 if (wdev->sme_state != CFG80211_SME_CONNECTING)
278 return;
279
d4b1a687 280 if (!wdev->conn)
6829c878
JB
281 return;
282
283 if (wdev->conn->state != CFG80211_CONN_SCANNING &&
284 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN)
285 return;
286
bbac31f4
JB
287 bss = cfg80211_get_conn_bss(wdev);
288 if (bss) {
289 cfg80211_put_bss(bss);
290 } else {
6829c878
JB
291 /* not found */
292 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)
79c97e97 293 schedule_work(&rdev->conn_work);
6829c878 294 else
667503dd
JB
295 __cfg80211_connect_result(
296 wdev->netdev,
297 wdev->conn->params.bssid,
298 NULL, 0, NULL, 0,
299 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 300 false, NULL);
6829c878
JB
301 }
302}
303
667503dd
JB
304void cfg80211_sme_scan_done(struct net_device *dev)
305{
306 struct wireless_dev *wdev = dev->ieee80211_ptr;
307
59bbb6f7 308 mutex_lock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx);
667503dd
JB
309 wdev_lock(wdev);
310 __cfg80211_sme_scan_done(dev);
311 wdev_unlock(wdev);
59bbb6f7 312 mutex_unlock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx);
667503dd
JB
313}
314
315void cfg80211_sme_rx_auth(struct net_device *dev,
316 const u8 *buf, size_t len)
6829c878
JB
317{
318 struct wireless_dev *wdev = dev->ieee80211_ptr;
319 struct wiphy *wiphy = wdev->wiphy;
320 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
321 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
322 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code);
323
667503dd
JB
324 ASSERT_WDEV_LOCK(wdev);
325
6829c878
JB
326 /* should only RX auth frames when connecting */
327 if (wdev->sme_state != CFG80211_SME_CONNECTING)
328 return;
329
330 if (WARN_ON(!wdev->conn))
331 return;
332
333 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
334 wdev->conn->auto_auth &&
335 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) {
336 /* select automatically between only open, shared, leap */
337 switch (wdev->conn->params.auth_type) {
338 case NL80211_AUTHTYPE_OPEN_SYSTEM:
fffd0934
JB
339 if (wdev->connect_keys)
340 wdev->conn->params.auth_type =
341 NL80211_AUTHTYPE_SHARED_KEY;
342 else
343 wdev->conn->params.auth_type =
344 NL80211_AUTHTYPE_NETWORK_EAP;
6829c878
JB
345 break;
346 case NL80211_AUTHTYPE_SHARED_KEY:
347 wdev->conn->params.auth_type =
348 NL80211_AUTHTYPE_NETWORK_EAP;
349 break;
350 default:
351 /* huh? */
352 wdev->conn->params.auth_type =
353 NL80211_AUTHTYPE_OPEN_SYSTEM;
354 break;
355 }
356 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
357 schedule_work(&rdev->conn_work);
19957bb3 358 } else if (status_code != WLAN_STATUS_SUCCESS) {
4bde0f7d 359 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
df7fc0f9 360 status_code, false, NULL);
19957bb3 361 } else if (wdev->sme_state == CFG80211_SME_CONNECTING &&
6829c878
JB
362 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) {
363 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT;
364 schedule_work(&rdev->conn_work);
365 }
366}
b23aa676 367
f401a6f7
JB
368bool cfg80211_sme_failed_reassoc(struct wireless_dev *wdev)
369{
370 struct wiphy *wiphy = wdev->wiphy;
371 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
372
373 if (WARN_ON(!wdev->conn))
374 return false;
375
376 if (!wdev->conn->prev_bssid_valid)
377 return false;
378
379 /*
380 * Some stupid APs don't accept reassoc, so we
381 * need to fall back to trying regular assoc.
382 */
383 wdev->conn->prev_bssid_valid = false;
384 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT;
385 schedule_work(&rdev->conn_work);
386
387 return true;
388}
389
7d930bc3
JB
390void cfg80211_sme_failed_assoc(struct wireless_dev *wdev)
391{
392 struct wiphy *wiphy = wdev->wiphy;
393 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
394
395 wdev->conn->state = CFG80211_CONN_DEAUTH_ASSOC_FAIL;
396 schedule_work(&rdev->conn_work);
397}
398
667503dd
JB
399void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
400 const u8 *req_ie, size_t req_ie_len,
401 const u8 *resp_ie, size_t resp_ie_len,
df7fc0f9
JB
402 u16 status, bool wextev,
403 struct cfg80211_bss *bss)
b23aa676
SO
404{
405 struct wireless_dev *wdev = dev->ieee80211_ptr;
8b19e6ca 406 u8 *country_ie;
3d23e349 407#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
408 union iwreq_data wrqu;
409#endif
410
667503dd
JB
411 ASSERT_WDEV_LOCK(wdev);
412
b23aa676
SO
413 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
414 return;
415
f7969969 416 if (wdev->sme_state != CFG80211_SME_CONNECTING)
ea416a79
JB
417 return;
418
419 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev,
e45cd82a 420 bssid, req_ie, req_ie_len,
ea416a79
JB
421 resp_ie, resp_ie_len,
422 status, GFP_KERNEL);
e45cd82a 423
3d23e349 424#ifdef CONFIG_CFG80211_WEXT
e45cd82a
JB
425 if (wextev) {
426 if (req_ie && status == WLAN_STATUS_SUCCESS) {
427 memset(&wrqu, 0, sizeof(wrqu));
428 wrqu.data.length = req_ie_len;
3409ff77 429 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie);
e45cd82a
JB
430 }
431
432 if (resp_ie && status == WLAN_STATUS_SUCCESS) {
433 memset(&wrqu, 0, sizeof(wrqu));
434 wrqu.data.length = resp_ie_len;
435 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie);
436 }
437
438 memset(&wrqu, 0, sizeof(wrqu));
439 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
f401a6f7 440 if (bssid && status == WLAN_STATUS_SUCCESS) {
e45cd82a 441 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
f401a6f7
JB
442 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN);
443 wdev->wext.prev_bssid_valid = true;
444 }
e45cd82a
JB
445 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
446 }
447#endif
448
df7fc0f9
JB
449 if (wdev->current_bss) {
450 cfg80211_unhold_bss(wdev->current_bss);
451 cfg80211_put_bss(&wdev->current_bss->pub);
452 wdev->current_bss = NULL;
453 }
454
19957bb3
JB
455 if (wdev->conn)
456 wdev->conn->state = CFG80211_CONN_IDLE;
457
fffd0934 458 if (status != WLAN_STATUS_SUCCESS) {
b23aa676 459 wdev->sme_state = CFG80211_SME_IDLE;
415ad1ef
DK
460 if (wdev->conn)
461 kfree(wdev->conn->ie);
19957bb3
JB
462 kfree(wdev->conn);
463 wdev->conn = NULL;
fffd0934
JB
464 kfree(wdev->connect_keys);
465 wdev->connect_keys = NULL;
8dadadb7 466 wdev->ssid_len = 0;
fffd0934 467 return;
b23aa676 468 }
fffd0934 469
df7fc0f9
JB
470 if (!bss)
471 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
472 wdev->ssid, wdev->ssid_len,
473 WLAN_CAPABILITY_ESS,
474 WLAN_CAPABILITY_ESS);
fffd0934
JB
475
476 if (WARN_ON(!bss))
477 return;
478
479 cfg80211_hold_bss(bss_from_pub(bss));
480 wdev->current_bss = bss_from_pub(bss);
481
fffd0934
JB
482 wdev->sme_state = CFG80211_SME_CONNECTED;
483 cfg80211_upload_connect_keys(wdev);
8b19e6ca
LR
484
485 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY);
486
487 if (!country_ie)
488 return;
489
490 /*
491 * ieee80211_bss_get_ie() ensures we can access:
492 * - country_ie + 2, the start of the country ie data, and
493 * - and country_ie[1] which is the IE length
494 */
495 regulatory_hint_11d(wdev->wiphy,
84920e3e 496 bss->channel->band,
8b19e6ca
LR
497 country_ie + 2,
498 country_ie[1]);
b23aa676 499}
f2129354
JB
500
501void cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
502 const u8 *req_ie, size_t req_ie_len,
503 const u8 *resp_ie, size_t resp_ie_len,
504 u16 status, gfp_t gfp)
505{
667503dd
JB
506 struct wireless_dev *wdev = dev->ieee80211_ptr;
507 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
508 struct cfg80211_event *ev;
509 unsigned long flags;
510
f7969969
JB
511 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTING);
512
667503dd
JB
513 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
514 if (!ev)
515 return;
516
517 ev->type = EVENT_CONNECT_RESULT;
16a832e7
ZY
518 if (bssid)
519 memcpy(ev->cr.bssid, bssid, ETH_ALEN);
7834704b
NS
520 if (req_ie_len) {
521 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev);
522 ev->cr.req_ie_len = req_ie_len;
523 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len);
524 }
525 if (resp_ie_len) {
526 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
527 ev->cr.resp_ie_len = resp_ie_len;
528 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len);
529 }
667503dd
JB
530 ev->cr.status = status;
531
532 spin_lock_irqsave(&wdev->event_lock, flags);
533 list_add_tail(&ev->list, &wdev->event_list);
534 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 535 queue_work(cfg80211_wq, &rdev->event_work);
f2129354 536}
b23aa676
SO
537EXPORT_SYMBOL(cfg80211_connect_result);
538
667503dd
JB
539void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid,
540 const u8 *req_ie, size_t req_ie_len,
541 const u8 *resp_ie, size_t resp_ie_len)
b23aa676 542{
b23aa676 543 struct cfg80211_bss *bss;
3d23e349 544#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
545 union iwreq_data wrqu;
546#endif
547
667503dd
JB
548 ASSERT_WDEV_LOCK(wdev);
549
b23aa676
SO
550 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
551 return;
552
f7969969 553 if (wdev->sme_state != CFG80211_SME_CONNECTED)
b23aa676
SO
554 return;
555
556 /* internal error -- how did we get to CONNECTED w/o BSS? */
557 if (WARN_ON(!wdev->current_bss)) {
558 return;
559 }
560
561 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 562 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO
563 wdev->current_bss = NULL;
564
565 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
566 wdev->ssid, wdev->ssid_len,
567 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
568
569 if (WARN_ON(!bss))
570 return;
571
19957bb3
JB
572 cfg80211_hold_bss(bss_from_pub(bss));
573 wdev->current_bss = bss_from_pub(bss);
b23aa676 574
667503dd
JB
575 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid,
576 req_ie, req_ie_len, resp_ie, resp_ie_len,
577 GFP_KERNEL);
b23aa676 578
3d23e349 579#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
580 if (req_ie) {
581 memset(&wrqu, 0, sizeof(wrqu));
582 wrqu.data.length = req_ie_len;
3409ff77 583 wireless_send_event(wdev->netdev, IWEVASSOCREQIE,
667503dd 584 &wrqu, req_ie);
b23aa676
SO
585 }
586
587 if (resp_ie) {
588 memset(&wrqu, 0, sizeof(wrqu));
589 wrqu.data.length = resp_ie_len;
667503dd
JB
590 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE,
591 &wrqu, resp_ie);
b23aa676
SO
592 }
593
594 memset(&wrqu, 0, sizeof(wrqu));
595 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
596 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
f401a6f7
JB
597 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN);
598 wdev->wext.prev_bssid_valid = true;
667503dd 599 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL);
b23aa676
SO
600#endif
601}
667503dd
JB
602
603void cfg80211_roamed(struct net_device *dev, const u8 *bssid,
604 const u8 *req_ie, size_t req_ie_len,
605 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
606{
607 struct wireless_dev *wdev = dev->ieee80211_ptr;
608 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
609 struct cfg80211_event *ev;
610 unsigned long flags;
611
f7969969
JB
612 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED);
613
667503dd
JB
614 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
615 if (!ev)
616 return;
617
618 ev->type = EVENT_ROAMED;
619 memcpy(ev->rm.bssid, bssid, ETH_ALEN);
620 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev);
621 ev->rm.req_ie_len = req_ie_len;
622 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len);
623 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
624 ev->rm.resp_ie_len = resp_ie_len;
625 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len);
626
627 spin_lock_irqsave(&wdev->event_lock, flags);
628 list_add_tail(&ev->list, &wdev->event_list);
629 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 630 queue_work(cfg80211_wq, &rdev->event_work);
667503dd 631}
b23aa676
SO
632EXPORT_SYMBOL(cfg80211_roamed);
633
667503dd 634void __cfg80211_disconnected(struct net_device *dev, const u8 *ie,
6829c878 635 size_t ie_len, u16 reason, bool from_ap)
b23aa676
SO
636{
637 struct wireless_dev *wdev = dev->ieee80211_ptr;
fffd0934
JB
638 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
639 int i;
3d23e349 640#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
641 union iwreq_data wrqu;
642#endif
643
667503dd
JB
644 ASSERT_WDEV_LOCK(wdev);
645
b23aa676
SO
646 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
647 return;
648
f7969969 649 if (wdev->sme_state != CFG80211_SME_CONNECTED)
b23aa676
SO
650 return;
651
652 if (wdev->current_bss) {
653 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 654 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO
655 }
656
657 wdev->current_bss = NULL;
658 wdev->sme_state = CFG80211_SME_IDLE;
8dadadb7 659 wdev->ssid_len = 0;
b23aa676 660
6829c878 661 if (wdev->conn) {
b6f0b639
JB
662 const u8 *bssid;
663 int ret;
664
6829c878
JB
665 kfree(wdev->conn->ie);
666 wdev->conn->ie = NULL;
19957bb3
JB
667 kfree(wdev->conn);
668 wdev->conn = NULL;
b6f0b639
JB
669
670 /*
671 * If this disconnect was due to a disassoc, we
672 * we might still have an auth BSS around. For
673 * the userspace SME that's currently expected,
674 * but for the kernel SME (nl80211 CONNECT or
675 * wireless extensions) we want to clear up all
676 * state.
677 */
678 for (i = 0; i < MAX_AUTH_BSSES; i++) {
679 if (!wdev->auth_bsses[i])
680 continue;
681 bssid = wdev->auth_bsses[i]->pub.bssid;
682 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0,
d5cdfacb
JM
683 WLAN_REASON_DEAUTH_LEAVING,
684 false);
b6f0b639
JB
685 WARN(ret, "deauth failed: %d\n", ret);
686 }
6829c878
JB
687 }
688
fffd0934
JB
689 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap);
690
691 /*
692 * Delete all the keys ... pairwise keys can't really
693 * exist any more anyway, but default keys might.
694 */
695 if (rdev->ops->del_key)
696 for (i = 0; i < 6; i++)
697 rdev->ops->del_key(wdev->wiphy, dev, i, NULL);
b23aa676 698
3d23e349 699#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
700 memset(&wrqu, 0, sizeof(wrqu));
701 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
702 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
5f612033 703 wdev->wext.connect.ssid_len = 0;
b23aa676 704#endif
09d989d1
LR
705
706 schedule_work(&cfg80211_disconnect_work);
b23aa676
SO
707}
708
709void cfg80211_disconnected(struct net_device *dev, u16 reason,
710 u8 *ie, size_t ie_len, gfp_t gfp)
711{
667503dd
JB
712 struct wireless_dev *wdev = dev->ieee80211_ptr;
713 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
714 struct cfg80211_event *ev;
715 unsigned long flags;
716
f7969969
JB
717 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED);
718
667503dd
JB
719 ev = kzalloc(sizeof(*ev) + ie_len, gfp);
720 if (!ev)
721 return;
722
723 ev->type = EVENT_DISCONNECTED;
724 ev->dc.ie = ((u8 *)ev) + sizeof(*ev);
725 ev->dc.ie_len = ie_len;
726 memcpy((void *)ev->dc.ie, ie, ie_len);
727 ev->dc.reason = reason;
728
729 spin_lock_irqsave(&wdev->event_lock, flags);
730 list_add_tail(&ev->list, &wdev->event_list);
731 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 732 queue_work(cfg80211_wq, &rdev->event_work);
b23aa676
SO
733}
734EXPORT_SYMBOL(cfg80211_disconnected);
735
667503dd
JB
736int __cfg80211_connect(struct cfg80211_registered_device *rdev,
737 struct net_device *dev,
fffd0934 738 struct cfg80211_connect_params *connect,
f401a6f7
JB
739 struct cfg80211_cached_keys *connkeys,
740 const u8 *prev_bssid)
b23aa676 741{
b23aa676 742 struct wireless_dev *wdev = dev->ieee80211_ptr;
bbac31f4 743 struct cfg80211_bss *bss = NULL;
667503dd
JB
744 int err;
745
746 ASSERT_WDEV_LOCK(wdev);
b23aa676
SO
747
748 if (wdev->sme_state != CFG80211_SME_IDLE)
749 return -EALREADY;
750
fffd0934
JB
751 if (WARN_ON(wdev->connect_keys)) {
752 kfree(wdev->connect_keys);
753 wdev->connect_keys = NULL;
754 }
755
756 if (connkeys && connkeys->def >= 0) {
757 int idx;
bcba8eae 758 u32 cipher;
fffd0934
JB
759
760 idx = connkeys->def;
bcba8eae 761 cipher = connkeys->params[idx].cipher;
fffd0934 762 /* If given a WEP key we may need it for shared key auth */
bcba8eae
SO
763 if (cipher == WLAN_CIPHER_SUITE_WEP40 ||
764 cipher == WLAN_CIPHER_SUITE_WEP104) {
fffd0934
JB
765 connect->key_idx = idx;
766 connect->key = connkeys->params[idx].key;
767 connect->key_len = connkeys->params[idx].key_len;
bcba8eae
SO
768
769 /*
770 * If ciphers are not set (e.g. when going through
771 * iwconfig), we have to set them appropriately here.
772 */
773 if (connect->crypto.cipher_group == 0)
774 connect->crypto.cipher_group = cipher;
775
776 if (connect->crypto.n_ciphers_pairwise == 0) {
777 connect->crypto.n_ciphers_pairwise = 1;
778 connect->crypto.ciphers_pairwise[0] = cipher;
779 }
fffd0934
JB
780 }
781 }
782
b23aa676 783 if (!rdev->ops->connect) {
6829c878
JB
784 if (!rdev->ops->auth || !rdev->ops->assoc)
785 return -EOPNOTSUPP;
786
19957bb3
JB
787 if (WARN_ON(wdev->conn))
788 return -EINPROGRESS;
789
790 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL);
791 if (!wdev->conn)
792 return -ENOMEM;
6829c878
JB
793
794 /*
795 * Copy all parameters, and treat explicitly IEs, BSSID, SSID.
796 */
797 memcpy(&wdev->conn->params, connect, sizeof(*connect));
798 if (connect->bssid) {
799 wdev->conn->params.bssid = wdev->conn->bssid;
800 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN);
801 }
802
803 if (connect->ie) {
804 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len,
805 GFP_KERNEL);
806 wdev->conn->params.ie = wdev->conn->ie;
19957bb3
JB
807 if (!wdev->conn->ie) {
808 kfree(wdev->conn);
809 wdev->conn = NULL;
6829c878 810 return -ENOMEM;
19957bb3 811 }
6829c878
JB
812 }
813
814 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) {
815 wdev->conn->auto_auth = true;
816 /* start with open system ... should mostly work */
817 wdev->conn->params.auth_type =
818 NL80211_AUTHTYPE_OPEN_SYSTEM;
819 } else {
820 wdev->conn->auto_auth = false;
821 }
822
823 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
824 wdev->ssid_len = connect->ssid_len;
825 wdev->conn->params.ssid = wdev->ssid;
826 wdev->conn->params.ssid_len = connect->ssid_len;
827
8bb89485
JB
828 /* see if we have the bss already */
829 bss = cfg80211_get_conn_bss(wdev);
6829c878
JB
830
831 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 832 wdev->connect_keys = connkeys;
6829c878 833
f401a6f7
JB
834 if (prev_bssid) {
835 memcpy(wdev->conn->prev_bssid, prev_bssid, ETH_ALEN);
836 wdev->conn->prev_bssid_valid = true;
837 }
838
bbac31f4
JB
839 /* we're good if we have a matching bss struct */
840 if (bss) {
6829c878
JB
841 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
842 err = cfg80211_conn_do_work(wdev);
bbac31f4 843 cfg80211_put_bss(bss);
6829c878
JB
844 } else {
845 /* otherwise we'll need to scan for the AP first */
846 err = cfg80211_conn_scan(wdev);
847 /*
848 * If we can't scan right now, then we need to scan again
849 * after the current scan finished, since the parameters
850 * changed (unless we find a good AP anyway).
851 */
852 if (err == -EBUSY) {
853 err = 0;
854 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN;
855 }
856 }
19957bb3 857 if (err) {
415ad1ef 858 kfree(wdev->conn->ie);
19957bb3
JB
859 kfree(wdev->conn);
860 wdev->conn = NULL;
6829c878 861 wdev->sme_state = CFG80211_SME_IDLE;
fffd0934 862 wdev->connect_keys = NULL;
8dadadb7 863 wdev->ssid_len = 0;
19957bb3 864 }
6829c878
JB
865
866 return err;
b23aa676
SO
867 } else {
868 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 869 wdev->connect_keys = connkeys;
b23aa676
SO
870 err = rdev->ops->connect(&rdev->wiphy, dev, connect);
871 if (err) {
fffd0934 872 wdev->connect_keys = NULL;
b23aa676
SO
873 wdev->sme_state = CFG80211_SME_IDLE;
874 return err;
875 }
b23aa676 876
6829c878
JB
877 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
878 wdev->ssid_len = connect->ssid_len;
b23aa676 879
6829c878
JB
880 return 0;
881 }
b23aa676
SO
882}
883
667503dd
JB
884int cfg80211_connect(struct cfg80211_registered_device *rdev,
885 struct net_device *dev,
fffd0934
JB
886 struct cfg80211_connect_params *connect,
887 struct cfg80211_cached_keys *connkeys)
667503dd
JB
888{
889 int err;
890
59bbb6f7 891 mutex_lock(&rdev->devlist_mtx);
667503dd 892 wdev_lock(dev->ieee80211_ptr);
f401a6f7 893 err = __cfg80211_connect(rdev, dev, connect, connkeys, NULL);
667503dd 894 wdev_unlock(dev->ieee80211_ptr);
59bbb6f7 895 mutex_unlock(&rdev->devlist_mtx);
667503dd
JB
896
897 return err;
898}
899
900int __cfg80211_disconnect(struct cfg80211_registered_device *rdev,
901 struct net_device *dev, u16 reason, bool wextev)
b23aa676 902{
6829c878 903 struct wireless_dev *wdev = dev->ieee80211_ptr;
b23aa676
SO
904 int err;
905
667503dd
JB
906 ASSERT_WDEV_LOCK(wdev);
907
6829c878
JB
908 if (wdev->sme_state == CFG80211_SME_IDLE)
909 return -EINVAL;
910
fffd0934
JB
911 kfree(wdev->connect_keys);
912 wdev->connect_keys = NULL;
913
b23aa676 914 if (!rdev->ops->disconnect) {
19957bb3
JB
915 if (!rdev->ops->deauth)
916 return -EOPNOTSUPP;
6829c878 917
19957bb3
JB
918 /* was it connected by userspace SME? */
919 if (!wdev->conn) {
920 cfg80211_mlme_down(rdev, dev);
921 return 0;
922 }
6829c878
JB
923
924 if (wdev->sme_state == CFG80211_SME_CONNECTING &&
925 (wdev->conn->state == CFG80211_CONN_SCANNING ||
926 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) {
927 wdev->sme_state = CFG80211_SME_IDLE;
415ad1ef 928 kfree(wdev->conn->ie);
19957bb3
JB
929 kfree(wdev->conn);
930 wdev->conn = NULL;
8dadadb7 931 wdev->ssid_len = 0;
6829c878
JB
932 return 0;
933 }
934
6829c878 935 /* wdev->conn->params.bssid must be set if > SCANNING */
667503dd
JB
936 err = __cfg80211_mlme_deauth(rdev, dev,
937 wdev->conn->params.bssid,
d5cdfacb 938 NULL, 0, reason, false);
6829c878
JB
939 if (err)
940 return err;
b23aa676
SO
941 } else {
942 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason);
943 if (err)
944 return err;
945 }
946
6829c878 947 if (wdev->sme_state == CFG80211_SME_CONNECTED)
667503dd 948 __cfg80211_disconnected(dev, NULL, 0, 0, false);
6829c878 949 else if (wdev->sme_state == CFG80211_SME_CONNECTING)
f2129354
JB
950 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0,
951 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 952 wextev, NULL);
b23aa676
SO
953
954 return 0;
955}
19957bb3 956
667503dd
JB
957int cfg80211_disconnect(struct cfg80211_registered_device *rdev,
958 struct net_device *dev,
959 u16 reason, bool wextev)
960{
961 int err;
962
963 wdev_lock(dev->ieee80211_ptr);
964 err = __cfg80211_disconnect(rdev, dev, reason, wextev);
965 wdev_unlock(dev->ieee80211_ptr);
966
967 return err;
968}
969
19957bb3
JB
970void cfg80211_sme_disassoc(struct net_device *dev, int idx)
971{
972 struct wireless_dev *wdev = dev->ieee80211_ptr;
973 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
974 u8 bssid[ETH_ALEN];
975
667503dd
JB
976 ASSERT_WDEV_LOCK(wdev);
977
19957bb3
JB
978 if (!wdev->conn)
979 return;
980
981 if (wdev->conn->state == CFG80211_CONN_IDLE)
982 return;
983
984 /*
985 * Ok, so the association was made by this SME -- we don't
986 * want it any more so deauthenticate too.
987 */
988
989 if (!wdev->auth_bsses[idx])
990 return;
991
992 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN);
ec3f1490 993 if (__cfg80211_mlme_deauth(rdev, dev, bssid,
d5cdfacb
JM
994 NULL, 0, WLAN_REASON_DEAUTH_LEAVING,
995 false)) {
19957bb3
JB
996 /* whatever -- assume gone anyway */
997 cfg80211_unhold_bss(wdev->auth_bsses[idx]);
998 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub);
999 wdev->auth_bsses[idx] = NULL;
1000 }
1001}