mlme.c 62 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277
  1. /*
  2. * BSS client mode implementation
  3. * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
  4. * Copyright 2004, Instant802 Networks, Inc.
  5. * Copyright 2005, Devicescape Software, Inc.
  6. * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
  7. * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
  8. *
  9. * This program is free software; you can redistribute it and/or modify
  10. * it under the terms of the GNU General Public License version 2 as
  11. * published by the Free Software Foundation.
  12. */
  13. #include <linux/delay.h>
  14. #include <linux/if_ether.h>
  15. #include <linux/skbuff.h>
  16. #include <linux/if_arp.h>
  17. #include <linux/etherdevice.h>
  18. #include <linux/rtnetlink.h>
  19. #include <linux/pm_qos_params.h>
  20. #include <linux/crc32.h>
  21. #include <net/mac80211.h>
  22. #include <asm/unaligned.h>
  23. #include "ieee80211_i.h"
  24. #include "driver-ops.h"
  25. #include "rate.h"
  26. #include "led.h"
  27. #define IEEE80211_MAX_PROBE_TRIES 5
  28. /*
  29. * beacon loss detection timeout
  30. * XXX: should depend on beacon interval
  31. */
  32. #define IEEE80211_BEACON_LOSS_TIME (2 * HZ)
  33. /*
  34. * Time the connection can be idle before we probe
  35. * it to see if we can still talk to the AP.
  36. */
  37. #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ)
  38. /*
  39. * Time we wait for a probe response after sending
  40. * a probe request because of beacon loss or for
  41. * checking the connection still works.
  42. */
  43. #define IEEE80211_PROBE_WAIT (HZ / 2)
  44. /*
  45. * Weight given to the latest Beacon frame when calculating average signal
  46. * strength for Beacon frames received in the current BSS. This must be
  47. * between 1 and 15.
  48. */
  49. #define IEEE80211_SIGNAL_AVE_WEIGHT 3
  50. #define TMR_RUNNING_TIMER 0
  51. #define TMR_RUNNING_CHANSW 1
  52. /*
  53. * All cfg80211 functions have to be called outside a locked
  54. * section so that they can acquire a lock themselves... This
  55. * is much simpler than queuing up things in cfg80211, but we
  56. * do need some indirection for that here.
  57. */
  58. enum rx_mgmt_action {
  59. /* no action required */
  60. RX_MGMT_NONE,
  61. /* caller must call cfg80211_send_rx_auth() */
  62. RX_MGMT_CFG80211_AUTH,
  63. /* caller must call cfg80211_send_rx_assoc() */
  64. RX_MGMT_CFG80211_ASSOC,
  65. /* caller must call cfg80211_send_deauth() */
  66. RX_MGMT_CFG80211_DEAUTH,
  67. /* caller must call cfg80211_send_disassoc() */
  68. RX_MGMT_CFG80211_DISASSOC,
  69. /* caller must tell cfg80211 about internal error */
  70. RX_MGMT_CFG80211_ASSOC_ERROR,
  71. };
  72. /* utils */
  73. static inline void ASSERT_MGD_MTX(struct ieee80211_if_managed *ifmgd)
  74. {
  75. WARN_ON(!mutex_is_locked(&ifmgd->mtx));
  76. }
  77. /*
  78. * We can have multiple work items (and connection probing)
  79. * scheduling this timer, but we need to take care to only
  80. * reschedule it when it should fire _earlier_ than it was
  81. * asked for before, or if it's not pending right now. This
  82. * function ensures that. Note that it then is required to
  83. * run this function for all timeouts after the first one
  84. * has happened -- the work that runs from this timer will
  85. * do that.
  86. */
  87. static void run_again(struct ieee80211_if_managed *ifmgd,
  88. unsigned long timeout)
  89. {
  90. ASSERT_MGD_MTX(ifmgd);
  91. if (!timer_pending(&ifmgd->timer) ||
  92. time_before(timeout, ifmgd->timer.expires))
  93. mod_timer(&ifmgd->timer, timeout);
  94. }
  95. static void mod_beacon_timer(struct ieee80211_sub_if_data *sdata)
  96. {
  97. if (sdata->local->hw.flags & IEEE80211_HW_BEACON_FILTER)
  98. return;
  99. mod_timer(&sdata->u.mgd.bcn_mon_timer,
  100. round_jiffies_up(jiffies + IEEE80211_BEACON_LOSS_TIME));
  101. }
  102. static int ecw2cw(int ecw)
  103. {
  104. return (1 << ecw) - 1;
  105. }
  106. /*
  107. * ieee80211_enable_ht should be called only after the operating band
  108. * has been determined as ht configuration depends on the hw's
  109. * HT abilities for a specific band.
  110. */
  111. static u32 ieee80211_enable_ht(struct ieee80211_sub_if_data *sdata,
  112. struct ieee80211_ht_info *hti,
  113. const u8 *bssid, u16 ap_ht_cap_flags)
  114. {
  115. struct ieee80211_local *local = sdata->local;
  116. struct ieee80211_supported_band *sband;
  117. struct sta_info *sta;
  118. u32 changed = 0;
  119. u16 ht_opmode;
  120. bool enable_ht = true, ht_changed;
  121. enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
  122. sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
  123. /* HT is not supported */
  124. if (!sband->ht_cap.ht_supported)
  125. enable_ht = false;
  126. /* check that channel matches the right operating channel */
  127. if (local->hw.conf.channel->center_freq !=
  128. ieee80211_channel_to_frequency(hti->control_chan))
  129. enable_ht = false;
  130. if (enable_ht) {
  131. channel_type = NL80211_CHAN_HT20;
  132. if (!(ap_ht_cap_flags & IEEE80211_HT_CAP_40MHZ_INTOLERANT) &&
  133. (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) &&
  134. (hti->ht_param & IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) {
  135. switch(hti->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
  136. case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
  137. if (!(local->hw.conf.channel->flags &
  138. IEEE80211_CHAN_NO_HT40PLUS))
  139. channel_type = NL80211_CHAN_HT40PLUS;
  140. break;
  141. case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
  142. if (!(local->hw.conf.channel->flags &
  143. IEEE80211_CHAN_NO_HT40MINUS))
  144. channel_type = NL80211_CHAN_HT40MINUS;
  145. break;
  146. }
  147. }
  148. }
  149. ht_changed = conf_is_ht(&local->hw.conf) != enable_ht ||
  150. channel_type != local->hw.conf.channel_type;
  151. local->oper_channel_type = channel_type;
  152. if (ht_changed) {
  153. /* channel_type change automatically detected */
  154. ieee80211_hw_config(local, 0);
  155. rcu_read_lock();
  156. sta = sta_info_get(sdata, bssid);
  157. if (sta)
  158. rate_control_rate_update(local, sband, sta,
  159. IEEE80211_RC_HT_CHANGED,
  160. local->oper_channel_type);
  161. rcu_read_unlock();
  162. }
  163. /* disable HT */
  164. if (!enable_ht)
  165. return 0;
  166. ht_opmode = le16_to_cpu(hti->operation_mode);
  167. /* if bss configuration changed store the new one */
  168. if (!sdata->ht_opmode_valid ||
  169. sdata->vif.bss_conf.ht_operation_mode != ht_opmode) {
  170. changed |= BSS_CHANGED_HT;
  171. sdata->vif.bss_conf.ht_operation_mode = ht_opmode;
  172. sdata->ht_opmode_valid = true;
  173. }
  174. return changed;
  175. }
  176. /* frame sending functions */
  177. static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
  178. const u8 *bssid, u16 stype, u16 reason,
  179. void *cookie, bool send_frame)
  180. {
  181. struct ieee80211_local *local = sdata->local;
  182. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  183. struct sk_buff *skb;
  184. struct ieee80211_mgmt *mgmt;
  185. skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
  186. if (!skb) {
  187. printk(KERN_DEBUG "%s: failed to allocate buffer for "
  188. "deauth/disassoc frame\n", sdata->name);
  189. return;
  190. }
  191. skb_reserve(skb, local->hw.extra_tx_headroom);
  192. mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
  193. memset(mgmt, 0, 24);
  194. memcpy(mgmt->da, bssid, ETH_ALEN);
  195. memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
  196. memcpy(mgmt->bssid, bssid, ETH_ALEN);
  197. mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
  198. skb_put(skb, 2);
  199. /* u.deauth.reason_code == u.disassoc.reason_code */
  200. mgmt->u.deauth.reason_code = cpu_to_le16(reason);
  201. if (stype == IEEE80211_STYPE_DEAUTH)
  202. if (cookie)
  203. __cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len);
  204. else
  205. cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len);
  206. else
  207. if (cookie)
  208. __cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len);
  209. else
  210. cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len);
  211. if (!(ifmgd->flags & IEEE80211_STA_MFP_ENABLED))
  212. IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
  213. if (send_frame)
  214. ieee80211_tx_skb(sdata, skb);
  215. else
  216. kfree_skb(skb);
  217. }
  218. void ieee80211_send_pspoll(struct ieee80211_local *local,
  219. struct ieee80211_sub_if_data *sdata)
  220. {
  221. struct ieee80211_pspoll *pspoll;
  222. struct sk_buff *skb;
  223. skb = ieee80211_pspoll_get(&local->hw, &sdata->vif);
  224. if (!skb)
  225. return;
  226. pspoll = (struct ieee80211_pspoll *) skb->data;
  227. pspoll->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
  228. IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
  229. ieee80211_tx_skb(sdata, skb);
  230. }
  231. void ieee80211_send_nullfunc(struct ieee80211_local *local,
  232. struct ieee80211_sub_if_data *sdata,
  233. int powersave)
  234. {
  235. struct sk_buff *skb;
  236. struct ieee80211_hdr_3addr *nullfunc;
  237. skb = ieee80211_nullfunc_get(&local->hw, &sdata->vif);
  238. if (!skb)
  239. return;
  240. nullfunc = (struct ieee80211_hdr_3addr *) skb->data;
  241. if (powersave)
  242. nullfunc->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
  243. IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
  244. ieee80211_tx_skb(sdata, skb);
  245. }
  246. static void ieee80211_send_4addr_nullfunc(struct ieee80211_local *local,
  247. struct ieee80211_sub_if_data *sdata)
  248. {
  249. struct sk_buff *skb;
  250. struct ieee80211_hdr *nullfunc;
  251. __le16 fc;
  252. if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
  253. return;
  254. skb = dev_alloc_skb(local->hw.extra_tx_headroom + 30);
  255. if (!skb) {
  256. printk(KERN_DEBUG "%s: failed to allocate buffer for 4addr "
  257. "nullfunc frame\n", sdata->name);
  258. return;
  259. }
  260. skb_reserve(skb, local->hw.extra_tx_headroom);
  261. nullfunc = (struct ieee80211_hdr *) skb_put(skb, 30);
  262. memset(nullfunc, 0, 30);
  263. fc = cpu_to_le16(IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC |
  264. IEEE80211_FCTL_FROMDS | IEEE80211_FCTL_TODS);
  265. nullfunc->frame_control = fc;
  266. memcpy(nullfunc->addr1, sdata->u.mgd.bssid, ETH_ALEN);
  267. memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
  268. memcpy(nullfunc->addr3, sdata->u.mgd.bssid, ETH_ALEN);
  269. memcpy(nullfunc->addr4, sdata->vif.addr, ETH_ALEN);
  270. IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
  271. ieee80211_tx_skb(sdata, skb);
  272. }
  273. /* spectrum management related things */
  274. static void ieee80211_chswitch_work(struct work_struct *work)
  275. {
  276. struct ieee80211_sub_if_data *sdata =
  277. container_of(work, struct ieee80211_sub_if_data, u.mgd.chswitch_work);
  278. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  279. if (!ieee80211_sdata_running(sdata))
  280. return;
  281. mutex_lock(&ifmgd->mtx);
  282. if (!ifmgd->associated)
  283. goto out;
  284. sdata->local->oper_channel = sdata->local->csa_channel;
  285. ieee80211_hw_config(sdata->local, IEEE80211_CONF_CHANGE_CHANNEL);
  286. /* XXX: shouldn't really modify cfg80211-owned data! */
  287. ifmgd->associated->channel = sdata->local->oper_channel;
  288. ieee80211_wake_queues_by_reason(&sdata->local->hw,
  289. IEEE80211_QUEUE_STOP_REASON_CSA);
  290. out:
  291. ifmgd->flags &= ~IEEE80211_STA_CSA_RECEIVED;
  292. mutex_unlock(&ifmgd->mtx);
  293. }
  294. static void ieee80211_chswitch_timer(unsigned long data)
  295. {
  296. struct ieee80211_sub_if_data *sdata =
  297. (struct ieee80211_sub_if_data *) data;
  298. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  299. if (sdata->local->quiescing) {
  300. set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running);
  301. return;
  302. }
  303. ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work);
  304. }
  305. void ieee80211_sta_process_chanswitch(struct ieee80211_sub_if_data *sdata,
  306. struct ieee80211_channel_sw_ie *sw_elem,
  307. struct ieee80211_bss *bss)
  308. {
  309. struct cfg80211_bss *cbss =
  310. container_of((void *)bss, struct cfg80211_bss, priv);
  311. struct ieee80211_channel *new_ch;
  312. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  313. int new_freq = ieee80211_channel_to_frequency(sw_elem->new_ch_num);
  314. ASSERT_MGD_MTX(ifmgd);
  315. if (!ifmgd->associated)
  316. return;
  317. if (sdata->local->scanning)
  318. return;
  319. /* Disregard subsequent beacons if we are already running a timer
  320. processing a CSA */
  321. if (ifmgd->flags & IEEE80211_STA_CSA_RECEIVED)
  322. return;
  323. new_ch = ieee80211_get_channel(sdata->local->hw.wiphy, new_freq);
  324. if (!new_ch || new_ch->flags & IEEE80211_CHAN_DISABLED)
  325. return;
  326. sdata->local->csa_channel = new_ch;
  327. if (sw_elem->count <= 1) {
  328. ieee80211_queue_work(&sdata->local->hw, &ifmgd->chswitch_work);
  329. } else {
  330. ieee80211_stop_queues_by_reason(&sdata->local->hw,
  331. IEEE80211_QUEUE_STOP_REASON_CSA);
  332. ifmgd->flags |= IEEE80211_STA_CSA_RECEIVED;
  333. mod_timer(&ifmgd->chswitch_timer,
  334. jiffies +
  335. msecs_to_jiffies(sw_elem->count *
  336. cbss->beacon_interval));
  337. }
  338. }
  339. static void ieee80211_handle_pwr_constr(struct ieee80211_sub_if_data *sdata,
  340. u16 capab_info, u8 *pwr_constr_elem,
  341. u8 pwr_constr_elem_len)
  342. {
  343. struct ieee80211_conf *conf = &sdata->local->hw.conf;
  344. if (!(capab_info & WLAN_CAPABILITY_SPECTRUM_MGMT))
  345. return;
  346. /* Power constraint IE length should be 1 octet */
  347. if (pwr_constr_elem_len != 1)
  348. return;
  349. if ((*pwr_constr_elem <= conf->channel->max_power) &&
  350. (*pwr_constr_elem != sdata->local->power_constr_level)) {
  351. sdata->local->power_constr_level = *pwr_constr_elem;
  352. ieee80211_hw_config(sdata->local, 0);
  353. }
  354. }
  355. /* powersave */
  356. static void ieee80211_enable_ps(struct ieee80211_local *local,
  357. struct ieee80211_sub_if_data *sdata)
  358. {
  359. struct ieee80211_conf *conf = &local->hw.conf;
  360. /*
  361. * If we are scanning right now then the parameters will
  362. * take effect when scan finishes.
  363. */
  364. if (local->scanning)
  365. return;
  366. if (conf->dynamic_ps_timeout > 0 &&
  367. !(local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)) {
  368. mod_timer(&local->dynamic_ps_timer, jiffies +
  369. msecs_to_jiffies(conf->dynamic_ps_timeout));
  370. } else {
  371. if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
  372. ieee80211_send_nullfunc(local, sdata, 1);
  373. if ((local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) &&
  374. (local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS))
  375. return;
  376. conf->flags |= IEEE80211_CONF_PS;
  377. ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
  378. }
  379. }
  380. static void ieee80211_change_ps(struct ieee80211_local *local)
  381. {
  382. struct ieee80211_conf *conf = &local->hw.conf;
  383. if (local->ps_sdata) {
  384. ieee80211_enable_ps(local, local->ps_sdata);
  385. } else if (conf->flags & IEEE80211_CONF_PS) {
  386. conf->flags &= ~IEEE80211_CONF_PS;
  387. ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
  388. del_timer_sync(&local->dynamic_ps_timer);
  389. cancel_work_sync(&local->dynamic_ps_enable_work);
  390. }
  391. }
  392. /* need to hold RTNL or interface lock */
  393. void ieee80211_recalc_ps(struct ieee80211_local *local, s32 latency)
  394. {
  395. struct ieee80211_sub_if_data *sdata, *found = NULL;
  396. int count = 0;
  397. if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) {
  398. local->ps_sdata = NULL;
  399. return;
  400. }
  401. if (!list_empty(&local->work_list)) {
  402. local->ps_sdata = NULL;
  403. goto change;
  404. }
  405. list_for_each_entry(sdata, &local->interfaces, list) {
  406. if (!ieee80211_sdata_running(sdata))
  407. continue;
  408. if (sdata->vif.type != NL80211_IFTYPE_STATION)
  409. continue;
  410. found = sdata;
  411. count++;
  412. }
  413. if (count == 1 && found->u.mgd.powersave &&
  414. found->u.mgd.associated &&
  415. found->u.mgd.associated->beacon_ies &&
  416. !(found->u.mgd.flags & (IEEE80211_STA_BEACON_POLL |
  417. IEEE80211_STA_CONNECTION_POLL))) {
  418. s32 beaconint_us;
  419. if (latency < 0)
  420. latency = pm_qos_requirement(PM_QOS_NETWORK_LATENCY);
  421. beaconint_us = ieee80211_tu_to_usec(
  422. found->vif.bss_conf.beacon_int);
  423. if (beaconint_us > latency) {
  424. local->ps_sdata = NULL;
  425. } else {
  426. struct ieee80211_bss *bss;
  427. int maxslp = 1;
  428. u8 dtimper;
  429. bss = (void *)found->u.mgd.associated->priv;
  430. dtimper = bss->dtim_period;
  431. /* If the TIM IE is invalid, pretend the value is 1 */
  432. if (!dtimper)
  433. dtimper = 1;
  434. else if (dtimper > 1)
  435. maxslp = min_t(int, dtimper,
  436. latency / beaconint_us);
  437. local->hw.conf.max_sleep_period = maxslp;
  438. local->hw.conf.ps_dtim_period = dtimper;
  439. local->ps_sdata = found;
  440. }
  441. } else {
  442. local->ps_sdata = NULL;
  443. }
  444. change:
  445. ieee80211_change_ps(local);
  446. }
  447. void ieee80211_dynamic_ps_disable_work(struct work_struct *work)
  448. {
  449. struct ieee80211_local *local =
  450. container_of(work, struct ieee80211_local,
  451. dynamic_ps_disable_work);
  452. if (local->hw.conf.flags & IEEE80211_CONF_PS) {
  453. local->hw.conf.flags &= ~IEEE80211_CONF_PS;
  454. ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
  455. }
  456. ieee80211_wake_queues_by_reason(&local->hw,
  457. IEEE80211_QUEUE_STOP_REASON_PS);
  458. }
  459. void ieee80211_dynamic_ps_enable_work(struct work_struct *work)
  460. {
  461. struct ieee80211_local *local =
  462. container_of(work, struct ieee80211_local,
  463. dynamic_ps_enable_work);
  464. struct ieee80211_sub_if_data *sdata = local->ps_sdata;
  465. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  466. /* can only happen when PS was just disabled anyway */
  467. if (!sdata)
  468. return;
  469. if (local->hw.conf.flags & IEEE80211_CONF_PS)
  470. return;
  471. if ((local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) &&
  472. (!(ifmgd->flags & IEEE80211_STA_NULLFUNC_ACKED)))
  473. ieee80211_send_nullfunc(local, sdata, 1);
  474. if (!((local->hw.flags & IEEE80211_HW_REPORTS_TX_ACK_STATUS) &&
  475. (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)) ||
  476. (ifmgd->flags & IEEE80211_STA_NULLFUNC_ACKED)) {
  477. ifmgd->flags &= ~IEEE80211_STA_NULLFUNC_ACKED;
  478. local->hw.conf.flags |= IEEE80211_CONF_PS;
  479. ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
  480. }
  481. }
  482. void ieee80211_dynamic_ps_timer(unsigned long data)
  483. {
  484. struct ieee80211_local *local = (void *) data;
  485. if (local->quiescing || local->suspended)
  486. return;
  487. ieee80211_queue_work(&local->hw, &local->dynamic_ps_enable_work);
  488. }
  489. /* MLME */
  490. static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
  491. struct ieee80211_if_managed *ifmgd,
  492. u8 *wmm_param, size_t wmm_param_len)
  493. {
  494. struct ieee80211_tx_queue_params params;
  495. size_t left;
  496. int count;
  497. u8 *pos, uapsd_queues = 0;
  498. if (!local->ops->conf_tx)
  499. return;
  500. if (local->hw.queues < 4)
  501. return;
  502. if (!wmm_param)
  503. return;
  504. if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
  505. return;
  506. if (ifmgd->flags & IEEE80211_STA_UAPSD_ENABLED)
  507. uapsd_queues = local->uapsd_queues;
  508. count = wmm_param[6] & 0x0f;
  509. if (count == ifmgd->wmm_last_param_set)
  510. return;
  511. ifmgd->wmm_last_param_set = count;
  512. pos = wmm_param + 8;
  513. left = wmm_param_len - 8;
  514. memset(&params, 0, sizeof(params));
  515. local->wmm_acm = 0;
  516. for (; left >= 4; left -= 4, pos += 4) {
  517. int aci = (pos[0] >> 5) & 0x03;
  518. int acm = (pos[0] >> 4) & 0x01;
  519. bool uapsd = false;
  520. int queue;
  521. switch (aci) {
  522. case 1: /* AC_BK */
  523. queue = 3;
  524. if (acm)
  525. local->wmm_acm |= BIT(1) | BIT(2); /* BK/- */
  526. if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BK)
  527. uapsd = true;
  528. break;
  529. case 2: /* AC_VI */
  530. queue = 1;
  531. if (acm)
  532. local->wmm_acm |= BIT(4) | BIT(5); /* CL/VI */
  533. if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VI)
  534. uapsd = true;
  535. break;
  536. case 3: /* AC_VO */
  537. queue = 0;
  538. if (acm)
  539. local->wmm_acm |= BIT(6) | BIT(7); /* VO/NC */
  540. if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VO)
  541. uapsd = true;
  542. break;
  543. case 0: /* AC_BE */
  544. default:
  545. queue = 2;
  546. if (acm)
  547. local->wmm_acm |= BIT(0) | BIT(3); /* BE/EE */
  548. if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BE)
  549. uapsd = true;
  550. break;
  551. }
  552. params.aifs = pos[0] & 0x0f;
  553. params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
  554. params.cw_min = ecw2cw(pos[1] & 0x0f);
  555. params.txop = get_unaligned_le16(pos + 2);
  556. params.uapsd = uapsd;
  557. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  558. printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
  559. "cWmin=%d cWmax=%d txop=%d uapsd=%d\n",
  560. wiphy_name(local->hw.wiphy), queue, aci, acm,
  561. params.aifs, params.cw_min, params.cw_max, params.txop,
  562. params.uapsd);
  563. #endif
  564. if (drv_conf_tx(local, queue, &params))
  565. printk(KERN_DEBUG "%s: failed to set TX queue "
  566. "parameters for queue %d\n",
  567. wiphy_name(local->hw.wiphy), queue);
  568. }
  569. /* enable WMM or activate new settings */
  570. local->hw.conf.flags |= IEEE80211_CONF_QOS;
  571. drv_config(local, IEEE80211_CONF_CHANGE_QOS);
  572. }
  573. static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
  574. u16 capab, bool erp_valid, u8 erp)
  575. {
  576. struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
  577. u32 changed = 0;
  578. bool use_protection;
  579. bool use_short_preamble;
  580. bool use_short_slot;
  581. if (erp_valid) {
  582. use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0;
  583. use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0;
  584. } else {
  585. use_protection = false;
  586. use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE);
  587. }
  588. use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME);
  589. if (sdata->local->hw.conf.channel->band == IEEE80211_BAND_5GHZ)
  590. use_short_slot = true;
  591. if (use_protection != bss_conf->use_cts_prot) {
  592. bss_conf->use_cts_prot = use_protection;
  593. changed |= BSS_CHANGED_ERP_CTS_PROT;
  594. }
  595. if (use_short_preamble != bss_conf->use_short_preamble) {
  596. bss_conf->use_short_preamble = use_short_preamble;
  597. changed |= BSS_CHANGED_ERP_PREAMBLE;
  598. }
  599. if (use_short_slot != bss_conf->use_short_slot) {
  600. bss_conf->use_short_slot = use_short_slot;
  601. changed |= BSS_CHANGED_ERP_SLOT;
  602. }
  603. return changed;
  604. }
  605. static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
  606. struct cfg80211_bss *cbss,
  607. u32 bss_info_changed)
  608. {
  609. struct ieee80211_bss *bss = (void *)cbss->priv;
  610. struct ieee80211_local *local = sdata->local;
  611. bss_info_changed |= BSS_CHANGED_ASSOC;
  612. /* set timing information */
  613. sdata->vif.bss_conf.beacon_int = cbss->beacon_interval;
  614. sdata->vif.bss_conf.timestamp = cbss->tsf;
  615. bss_info_changed |= BSS_CHANGED_BEACON_INT;
  616. bss_info_changed |= ieee80211_handle_bss_capability(sdata,
  617. cbss->capability, bss->has_erp_value, bss->erp_value);
  618. sdata->u.mgd.associated = cbss;
  619. memcpy(sdata->u.mgd.bssid, cbss->bssid, ETH_ALEN);
  620. sdata->u.mgd.flags |= IEEE80211_STA_RESET_SIGNAL_AVE;
  621. /* just to be sure */
  622. sdata->u.mgd.flags &= ~(IEEE80211_STA_CONNECTION_POLL |
  623. IEEE80211_STA_BEACON_POLL);
  624. /*
  625. * Always handle WMM once after association regardless
  626. * of the first value the AP uses. Setting -1 here has
  627. * that effect because the AP values is an unsigned
  628. * 4-bit value.
  629. */
  630. sdata->u.mgd.wmm_last_param_set = -1;
  631. ieee80211_led_assoc(local, 1);
  632. sdata->vif.bss_conf.assoc = 1;
  633. /*
  634. * For now just always ask the driver to update the basic rateset
  635. * when we have associated, we aren't checking whether it actually
  636. * changed or not.
  637. */
  638. bss_info_changed |= BSS_CHANGED_BASIC_RATES;
  639. /* And the BSSID changed - we're associated now */
  640. bss_info_changed |= BSS_CHANGED_BSSID;
  641. /* Tell the driver to monitor connection quality (if supported) */
  642. if ((local->hw.flags & IEEE80211_HW_SUPPORTS_CQM_RSSI) &&
  643. sdata->vif.bss_conf.cqm_rssi_thold)
  644. bss_info_changed |= BSS_CHANGED_CQM;
  645. ieee80211_bss_info_change_notify(sdata, bss_info_changed);
  646. mutex_lock(&local->iflist_mtx);
  647. ieee80211_recalc_ps(local, -1);
  648. ieee80211_recalc_smps(local, sdata);
  649. mutex_unlock(&local->iflist_mtx);
  650. netif_tx_start_all_queues(sdata->dev);
  651. netif_carrier_on(sdata->dev);
  652. }
  653. static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
  654. bool remove_sta)
  655. {
  656. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  657. struct ieee80211_local *local = sdata->local;
  658. struct sta_info *sta;
  659. u32 changed = 0, config_changed = 0;
  660. u8 bssid[ETH_ALEN];
  661. ASSERT_MGD_MTX(ifmgd);
  662. if (WARN_ON(!ifmgd->associated))
  663. return;
  664. memcpy(bssid, ifmgd->associated->bssid, ETH_ALEN);
  665. ifmgd->associated = NULL;
  666. memset(ifmgd->bssid, 0, ETH_ALEN);
  667. /*
  668. * we need to commit the associated = NULL change because the
  669. * scan code uses that to determine whether this iface should
  670. * go to/wake up from powersave or not -- and could otherwise
  671. * wake the queues erroneously.
  672. */
  673. smp_mb();
  674. /*
  675. * Thus, we can only afterwards stop the queues -- to account
  676. * for the case where another CPU is finishing a scan at this
  677. * time -- we don't want the scan code to enable queues.
  678. */
  679. netif_tx_stop_all_queues(sdata->dev);
  680. netif_carrier_off(sdata->dev);
  681. rcu_read_lock();
  682. sta = sta_info_get(sdata, bssid);
  683. if (sta) {
  684. set_sta_flags(sta, WLAN_STA_DISASSOC);
  685. ieee80211_sta_tear_down_BA_sessions(sta);
  686. }
  687. rcu_read_unlock();
  688. changed |= ieee80211_reset_erp_info(sdata);
  689. ieee80211_led_assoc(local, 0);
  690. changed |= BSS_CHANGED_ASSOC;
  691. sdata->vif.bss_conf.assoc = false;
  692. ieee80211_set_wmm_default(sdata);
  693. /* channel(_type) changes are handled by ieee80211_hw_config */
  694. local->oper_channel_type = NL80211_CHAN_NO_HT;
  695. /* on the next assoc, re-program HT parameters */
  696. sdata->ht_opmode_valid = false;
  697. local->power_constr_level = 0;
  698. del_timer_sync(&local->dynamic_ps_timer);
  699. cancel_work_sync(&local->dynamic_ps_enable_work);
  700. if (local->hw.conf.flags & IEEE80211_CONF_PS) {
  701. local->hw.conf.flags &= ~IEEE80211_CONF_PS;
  702. config_changed |= IEEE80211_CONF_CHANGE_PS;
  703. }
  704. ieee80211_hw_config(local, config_changed);
  705. /* And the BSSID changed -- not very interesting here */
  706. changed |= BSS_CHANGED_BSSID;
  707. ieee80211_bss_info_change_notify(sdata, changed);
  708. if (remove_sta)
  709. sta_info_destroy_addr(sdata, bssid);
  710. }
  711. void ieee80211_sta_rx_notify(struct ieee80211_sub_if_data *sdata,
  712. struct ieee80211_hdr *hdr)
  713. {
  714. /*
  715. * We can postpone the mgd.timer whenever receiving unicast frames
  716. * from AP because we know that the connection is working both ways
  717. * at that time. But multicast frames (and hence also beacons) must
  718. * be ignored here, because we need to trigger the timer during
  719. * data idle periods for sending the periodic probe request to the
  720. * AP we're connected to.
  721. */
  722. if (is_multicast_ether_addr(hdr->addr1))
  723. return;
  724. if (sdata->local->hw.flags & IEEE80211_HW_CONNECTION_MONITOR)
  725. return;
  726. mod_timer(&sdata->u.mgd.conn_mon_timer,
  727. round_jiffies_up(jiffies + IEEE80211_CONNECTION_IDLE_TIME));
  728. }
  729. static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata)
  730. {
  731. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  732. const u8 *ssid;
  733. ssid = ieee80211_bss_get_ie(ifmgd->associated, WLAN_EID_SSID);
  734. ieee80211_send_probe_req(sdata, ifmgd->associated->bssid,
  735. ssid + 2, ssid[1], NULL, 0);
  736. ifmgd->probe_send_count++;
  737. ifmgd->probe_timeout = jiffies + IEEE80211_PROBE_WAIT;
  738. run_again(ifmgd, ifmgd->probe_timeout);
  739. }
  740. static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata,
  741. bool beacon)
  742. {
  743. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  744. bool already = false;
  745. if (!ieee80211_sdata_running(sdata))
  746. return;
  747. if (sdata->local->scanning)
  748. return;
  749. if (sdata->local->tmp_channel)
  750. return;
  751. mutex_lock(&ifmgd->mtx);
  752. if (!ifmgd->associated)
  753. goto out;
  754. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  755. if (beacon && net_ratelimit())
  756. printk(KERN_DEBUG "%s: detected beacon loss from AP "
  757. "- sending probe request\n", sdata->name);
  758. #endif
  759. /*
  760. * The driver/our work has already reported this event or the
  761. * connection monitoring has kicked in and we have already sent
  762. * a probe request. Or maybe the AP died and the driver keeps
  763. * reporting until we disassociate...
  764. *
  765. * In either case we have to ignore the current call to this
  766. * function (except for setting the correct probe reason bit)
  767. * because otherwise we would reset the timer every time and
  768. * never check whether we received a probe response!
  769. */
  770. if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL |
  771. IEEE80211_STA_CONNECTION_POLL))
  772. already = true;
  773. if (beacon)
  774. ifmgd->flags |= IEEE80211_STA_BEACON_POLL;
  775. else
  776. ifmgd->flags |= IEEE80211_STA_CONNECTION_POLL;
  777. if (already)
  778. goto out;
  779. mutex_lock(&sdata->local->iflist_mtx);
  780. ieee80211_recalc_ps(sdata->local, -1);
  781. mutex_unlock(&sdata->local->iflist_mtx);
  782. ifmgd->probe_send_count = 0;
  783. ieee80211_mgd_probe_ap_send(sdata);
  784. out:
  785. mutex_unlock(&ifmgd->mtx);
  786. }
  787. static void __ieee80211_connection_loss(struct ieee80211_sub_if_data *sdata)
  788. {
  789. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  790. struct ieee80211_local *local = sdata->local;
  791. u8 bssid[ETH_ALEN];
  792. mutex_lock(&ifmgd->mtx);
  793. if (!ifmgd->associated) {
  794. mutex_unlock(&ifmgd->mtx);
  795. return;
  796. }
  797. memcpy(bssid, ifmgd->associated->bssid, ETH_ALEN);
  798. printk(KERN_DEBUG "Connection to AP %pM lost.\n", bssid);
  799. ieee80211_set_disassoc(sdata, true);
  800. ieee80211_recalc_idle(local);
  801. mutex_unlock(&ifmgd->mtx);
  802. /*
  803. * must be outside lock due to cfg80211,
  804. * but that's not a problem.
  805. */
  806. ieee80211_send_deauth_disassoc(sdata, bssid,
  807. IEEE80211_STYPE_DEAUTH,
  808. WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY,
  809. NULL, true);
  810. }
  811. void ieee80211_beacon_connection_loss_work(struct work_struct *work)
  812. {
  813. struct ieee80211_sub_if_data *sdata =
  814. container_of(work, struct ieee80211_sub_if_data,
  815. u.mgd.beacon_connection_loss_work);
  816. if (sdata->local->hw.flags & IEEE80211_HW_CONNECTION_MONITOR)
  817. __ieee80211_connection_loss(sdata);
  818. else
  819. ieee80211_mgd_probe_ap(sdata, true);
  820. }
  821. void ieee80211_beacon_loss(struct ieee80211_vif *vif)
  822. {
  823. struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
  824. struct ieee80211_hw *hw = &sdata->local->hw;
  825. trace_api_beacon_loss(sdata);
  826. WARN_ON(hw->flags & IEEE80211_HW_CONNECTION_MONITOR);
  827. ieee80211_queue_work(hw, &sdata->u.mgd.beacon_connection_loss_work);
  828. }
  829. EXPORT_SYMBOL(ieee80211_beacon_loss);
  830. void ieee80211_connection_loss(struct ieee80211_vif *vif)
  831. {
  832. struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
  833. struct ieee80211_hw *hw = &sdata->local->hw;
  834. trace_api_connection_loss(sdata);
  835. WARN_ON(!(hw->flags & IEEE80211_HW_CONNECTION_MONITOR));
  836. ieee80211_queue_work(hw, &sdata->u.mgd.beacon_connection_loss_work);
  837. }
  838. EXPORT_SYMBOL(ieee80211_connection_loss);
  839. static enum rx_mgmt_action __must_check
  840. ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
  841. struct ieee80211_mgmt *mgmt, size_t len)
  842. {
  843. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  844. const u8 *bssid = NULL;
  845. u16 reason_code;
  846. if (len < 24 + 2)
  847. return RX_MGMT_NONE;
  848. ASSERT_MGD_MTX(ifmgd);
  849. bssid = ifmgd->associated->bssid;
  850. reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
  851. printk(KERN_DEBUG "%s: deauthenticated from %pM (Reason: %u)\n",
  852. sdata->name, bssid, reason_code);
  853. ieee80211_set_disassoc(sdata, true);
  854. ieee80211_recalc_idle(sdata->local);
  855. return RX_MGMT_CFG80211_DEAUTH;
  856. }
  857. static enum rx_mgmt_action __must_check
  858. ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
  859. struct ieee80211_mgmt *mgmt, size_t len)
  860. {
  861. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  862. u16 reason_code;
  863. if (len < 24 + 2)
  864. return RX_MGMT_NONE;
  865. ASSERT_MGD_MTX(ifmgd);
  866. if (WARN_ON(!ifmgd->associated))
  867. return RX_MGMT_NONE;
  868. if (WARN_ON(memcmp(ifmgd->associated->bssid, mgmt->sa, ETH_ALEN)))
  869. return RX_MGMT_NONE;
  870. reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
  871. printk(KERN_DEBUG "%s: disassociated from %pM (Reason: %u)\n",
  872. sdata->name, mgmt->sa, reason_code);
  873. ieee80211_set_disassoc(sdata, true);
  874. ieee80211_recalc_idle(sdata->local);
  875. return RX_MGMT_CFG80211_DISASSOC;
  876. }
  877. static bool ieee80211_assoc_success(struct ieee80211_work *wk,
  878. struct ieee80211_mgmt *mgmt, size_t len)
  879. {
  880. struct ieee80211_sub_if_data *sdata = wk->sdata;
  881. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  882. struct ieee80211_local *local = sdata->local;
  883. struct ieee80211_supported_band *sband;
  884. struct sta_info *sta;
  885. struct cfg80211_bss *cbss = wk->assoc.bss;
  886. u8 *pos;
  887. u32 rates, basic_rates;
  888. u16 capab_info, aid;
  889. struct ieee802_11_elems elems;
  890. struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
  891. u32 changed = 0;
  892. int i, j, err;
  893. bool have_higher_than_11mbit = false;
  894. u16 ap_ht_cap_flags;
  895. /* AssocResp and ReassocResp have identical structure */
  896. aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
  897. capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
  898. if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
  899. printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
  900. "set\n", sdata->name, aid);
  901. aid &= ~(BIT(15) | BIT(14));
  902. pos = mgmt->u.assoc_resp.variable;
  903. ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
  904. if (!elems.supp_rates) {
  905. printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
  906. sdata->name);
  907. return false;
  908. }
  909. ifmgd->aid = aid;
  910. sta = sta_info_alloc(sdata, cbss->bssid, GFP_KERNEL);
  911. if (!sta) {
  912. printk(KERN_DEBUG "%s: failed to alloc STA entry for"
  913. " the AP\n", sdata->name);
  914. return false;
  915. }
  916. set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC |
  917. WLAN_STA_ASSOC_AP);
  918. if (!(ifmgd->flags & IEEE80211_STA_CONTROL_PORT))
  919. set_sta_flags(sta, WLAN_STA_AUTHORIZED);
  920. rates = 0;
  921. basic_rates = 0;
  922. sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
  923. for (i = 0; i < elems.supp_rates_len; i++) {
  924. int rate = (elems.supp_rates[i] & 0x7f) * 5;
  925. bool is_basic = !!(elems.supp_rates[i] & 0x80);
  926. if (rate > 110)
  927. have_higher_than_11mbit = true;
  928. for (j = 0; j < sband->n_bitrates; j++) {
  929. if (sband->bitrates[j].bitrate == rate) {
  930. rates |= BIT(j);
  931. if (is_basic)
  932. basic_rates |= BIT(j);
  933. break;
  934. }
  935. }
  936. }
  937. for (i = 0; i < elems.ext_supp_rates_len; i++) {
  938. int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
  939. bool is_basic = !!(elems.ext_supp_rates[i] & 0x80);
  940. if (rate > 110)
  941. have_higher_than_11mbit = true;
  942. for (j = 0; j < sband->n_bitrates; j++) {
  943. if (sband->bitrates[j].bitrate == rate) {
  944. rates |= BIT(j);
  945. if (is_basic)
  946. basic_rates |= BIT(j);
  947. break;
  948. }
  949. }
  950. }
  951. sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
  952. sdata->vif.bss_conf.basic_rates = basic_rates;
  953. /* cf. IEEE 802.11 9.2.12 */
  954. if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
  955. have_higher_than_11mbit)
  956. sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
  957. else
  958. sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
  959. if (elems.ht_cap_elem && !(ifmgd->flags & IEEE80211_STA_DISABLE_11N))
  960. ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
  961. elems.ht_cap_elem, &sta->sta.ht_cap);
  962. ap_ht_cap_flags = sta->sta.ht_cap.cap;
  963. rate_control_rate_init(sta);
  964. if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED)
  965. set_sta_flags(sta, WLAN_STA_MFP);
  966. if (elems.wmm_param)
  967. set_sta_flags(sta, WLAN_STA_WME);
  968. err = sta_info_insert(sta);
  969. sta = NULL;
  970. if (err) {
  971. printk(KERN_DEBUG "%s: failed to insert STA entry for"
  972. " the AP (error %d)\n", sdata->name, err);
  973. return false;
  974. }
  975. if (elems.wmm_param)
  976. ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param,
  977. elems.wmm_param_len);
  978. else
  979. ieee80211_set_wmm_default(sdata);
  980. local->oper_channel = wk->chan;
  981. if (elems.ht_info_elem && elems.wmm_param &&
  982. (sdata->local->hw.queues >= 4) &&
  983. !(ifmgd->flags & IEEE80211_STA_DISABLE_11N))
  984. changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
  985. cbss->bssid, ap_ht_cap_flags);
  986. /* set AID and assoc capability,
  987. * ieee80211_set_associated() will tell the driver */
  988. bss_conf->aid = aid;
  989. bss_conf->assoc_capability = capab_info;
  990. ieee80211_set_associated(sdata, cbss, changed);
  991. /*
  992. * If we're using 4-addr mode, let the AP know that we're
  993. * doing so, so that it can create the STA VLAN on its side
  994. */
  995. if (ifmgd->use_4addr)
  996. ieee80211_send_4addr_nullfunc(local, sdata);
  997. /*
  998. * Start timer to probe the connection to the AP now.
  999. * Also start the timer that will detect beacon loss.
  1000. */
  1001. ieee80211_sta_rx_notify(sdata, (struct ieee80211_hdr *)mgmt);
  1002. mod_beacon_timer(sdata);
  1003. return true;
  1004. }
  1005. static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
  1006. struct ieee80211_mgmt *mgmt,
  1007. size_t len,
  1008. struct ieee80211_rx_status *rx_status,
  1009. struct ieee802_11_elems *elems,
  1010. bool beacon)
  1011. {
  1012. struct ieee80211_local *local = sdata->local;
  1013. int freq;
  1014. struct ieee80211_bss *bss;
  1015. struct ieee80211_channel *channel;
  1016. bool need_ps = false;
  1017. if (sdata->u.mgd.associated) {
  1018. bss = (void *)sdata->u.mgd.associated->priv;
  1019. /* not previously set so we may need to recalc */
  1020. need_ps = !bss->dtim_period;
  1021. }
  1022. if (elems->ds_params && elems->ds_params_len == 1)
  1023. freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
  1024. else
  1025. freq = rx_status->freq;
  1026. channel = ieee80211_get_channel(local->hw.wiphy, freq);
  1027. if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
  1028. return;
  1029. bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
  1030. channel, beacon);
  1031. if (bss)
  1032. ieee80211_rx_bss_put(local, bss);
  1033. if (!sdata->u.mgd.associated)
  1034. return;
  1035. if (need_ps) {
  1036. mutex_lock(&local->iflist_mtx);
  1037. ieee80211_recalc_ps(local, -1);
  1038. mutex_unlock(&local->iflist_mtx);
  1039. }
  1040. if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) &&
  1041. (memcmp(mgmt->bssid, sdata->u.mgd.associated->bssid,
  1042. ETH_ALEN) == 0)) {
  1043. struct ieee80211_channel_sw_ie *sw_elem =
  1044. (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem;
  1045. ieee80211_sta_process_chanswitch(sdata, sw_elem, bss);
  1046. }
  1047. }
  1048. static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
  1049. struct sk_buff *skb)
  1050. {
  1051. struct ieee80211_mgmt *mgmt = (void *)skb->data;
  1052. struct ieee80211_if_managed *ifmgd;
  1053. struct ieee80211_rx_status *rx_status = (void *) skb->cb;
  1054. size_t baselen, len = skb->len;
  1055. struct ieee802_11_elems elems;
  1056. ifmgd = &sdata->u.mgd;
  1057. ASSERT_MGD_MTX(ifmgd);
  1058. if (memcmp(mgmt->da, sdata->vif.addr, ETH_ALEN))
  1059. return; /* ignore ProbeResp to foreign address */
  1060. baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
  1061. if (baselen > len)
  1062. return;
  1063. ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
  1064. &elems);
  1065. ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
  1066. if (ifmgd->associated &&
  1067. memcmp(mgmt->bssid, ifmgd->associated->bssid, ETH_ALEN) == 0 &&
  1068. ifmgd->flags & (IEEE80211_STA_BEACON_POLL |
  1069. IEEE80211_STA_CONNECTION_POLL)) {
  1070. ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL |
  1071. IEEE80211_STA_BEACON_POLL);
  1072. mutex_lock(&sdata->local->iflist_mtx);
  1073. ieee80211_recalc_ps(sdata->local, -1);
  1074. mutex_unlock(&sdata->local->iflist_mtx);
  1075. if (sdata->local->hw.flags & IEEE80211_HW_CONNECTION_MONITOR)
  1076. return;
  1077. /*
  1078. * We've received a probe response, but are not sure whether
  1079. * we have or will be receiving any beacons or data, so let's
  1080. * schedule the timers again, just in case.
  1081. */
  1082. mod_beacon_timer(sdata);
  1083. mod_timer(&ifmgd->conn_mon_timer,
  1084. round_jiffies_up(jiffies +
  1085. IEEE80211_CONNECTION_IDLE_TIME));
  1086. }
  1087. }
  1088. /*
  1089. * This is the canonical list of information elements we care about,
  1090. * the filter code also gives us all changes to the Microsoft OUI
  1091. * (00:50:F2) vendor IE which is used for WMM which we need to track.
  1092. *
  1093. * We implement beacon filtering in software since that means we can
  1094. * avoid processing the frame here and in cfg80211, and userspace
  1095. * will not be able to tell whether the hardware supports it or not.
  1096. *
  1097. * XXX: This list needs to be dynamic -- userspace needs to be able to
  1098. * add items it requires. It also needs to be able to tell us to
  1099. * look out for other vendor IEs.
  1100. */
  1101. static const u64 care_about_ies =
  1102. (1ULL << WLAN_EID_COUNTRY) |
  1103. (1ULL << WLAN_EID_ERP_INFO) |
  1104. (1ULL << WLAN_EID_CHANNEL_SWITCH) |
  1105. (1ULL << WLAN_EID_PWR_CONSTRAINT) |
  1106. (1ULL << WLAN_EID_HT_CAPABILITY) |
  1107. (1ULL << WLAN_EID_HT_INFORMATION);
  1108. static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
  1109. struct ieee80211_mgmt *mgmt,
  1110. size_t len,
  1111. struct ieee80211_rx_status *rx_status)
  1112. {
  1113. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1114. struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
  1115. size_t baselen;
  1116. struct ieee802_11_elems elems;
  1117. struct ieee80211_local *local = sdata->local;
  1118. u32 changed = 0;
  1119. bool erp_valid, directed_tim = false;
  1120. u8 erp_value = 0;
  1121. u32 ncrc;
  1122. u8 *bssid;
  1123. ASSERT_MGD_MTX(ifmgd);
  1124. /* Process beacon from the current BSS */
  1125. baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
  1126. if (baselen > len)
  1127. return;
  1128. if (rx_status->freq != local->hw.conf.channel->center_freq)
  1129. return;
  1130. /*
  1131. * We might have received a number of frames, among them a
  1132. * disassoc frame and a beacon...
  1133. */
  1134. if (!ifmgd->associated)
  1135. return;
  1136. bssid = ifmgd->associated->bssid;
  1137. /*
  1138. * And in theory even frames from a different AP we were just
  1139. * associated to a split-second ago!
  1140. */
  1141. if (memcmp(bssid, mgmt->bssid, ETH_ALEN) != 0)
  1142. return;
  1143. /* Track average RSSI from the Beacon frames of the current AP */
  1144. ifmgd->last_beacon_signal = rx_status->signal;
  1145. if (ifmgd->flags & IEEE80211_STA_RESET_SIGNAL_AVE) {
  1146. ifmgd->flags &= ~IEEE80211_STA_RESET_SIGNAL_AVE;
  1147. ifmgd->ave_beacon_signal = rx_status->signal;
  1148. ifmgd->last_cqm_event_signal = 0;
  1149. } else {
  1150. ifmgd->ave_beacon_signal =
  1151. (IEEE80211_SIGNAL_AVE_WEIGHT * rx_status->signal * 16 +
  1152. (16 - IEEE80211_SIGNAL_AVE_WEIGHT) *
  1153. ifmgd->ave_beacon_signal) / 16;
  1154. }
  1155. if (bss_conf->cqm_rssi_thold &&
  1156. !(local->hw.flags & IEEE80211_HW_SUPPORTS_CQM_RSSI)) {
  1157. int sig = ifmgd->ave_beacon_signal / 16;
  1158. int last_event = ifmgd->last_cqm_event_signal;
  1159. int thold = bss_conf->cqm_rssi_thold;
  1160. int hyst = bss_conf->cqm_rssi_hyst;
  1161. if (sig < thold &&
  1162. (last_event == 0 || sig < last_event - hyst)) {
  1163. ifmgd->last_cqm_event_signal = sig;
  1164. ieee80211_cqm_rssi_notify(
  1165. &sdata->vif,
  1166. NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW,
  1167. GFP_KERNEL);
  1168. } else if (sig > thold &&
  1169. (last_event == 0 || sig > last_event + hyst)) {
  1170. ifmgd->last_cqm_event_signal = sig;
  1171. ieee80211_cqm_rssi_notify(
  1172. &sdata->vif,
  1173. NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH,
  1174. GFP_KERNEL);
  1175. }
  1176. }
  1177. if (ifmgd->flags & IEEE80211_STA_BEACON_POLL) {
  1178. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  1179. if (net_ratelimit()) {
  1180. printk(KERN_DEBUG "%s: cancelling probereq poll due "
  1181. "to a received beacon\n", sdata->name);
  1182. }
  1183. #endif
  1184. ifmgd->flags &= ~IEEE80211_STA_BEACON_POLL;
  1185. mutex_lock(&local->iflist_mtx);
  1186. ieee80211_recalc_ps(local, -1);
  1187. mutex_unlock(&local->iflist_mtx);
  1188. }
  1189. /*
  1190. * Push the beacon loss detection into the future since
  1191. * we are processing a beacon from the AP just now.
  1192. */
  1193. mod_beacon_timer(sdata);
  1194. ncrc = crc32_be(0, (void *)&mgmt->u.beacon.beacon_int, 4);
  1195. ncrc = ieee802_11_parse_elems_crc(mgmt->u.beacon.variable,
  1196. len - baselen, &elems,
  1197. care_about_ies, ncrc);
  1198. if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK)
  1199. directed_tim = ieee80211_check_tim(elems.tim, elems.tim_len,
  1200. ifmgd->aid);
  1201. if (ncrc != ifmgd->beacon_crc) {
  1202. ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems,
  1203. true);
  1204. ieee80211_sta_wmm_params(local, ifmgd, elems.wmm_param,
  1205. elems.wmm_param_len);
  1206. }
  1207. if (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK) {
  1208. if (directed_tim) {
  1209. if (local->hw.conf.dynamic_ps_timeout > 0) {
  1210. local->hw.conf.flags &= ~IEEE80211_CONF_PS;
  1211. ieee80211_hw_config(local,
  1212. IEEE80211_CONF_CHANGE_PS);
  1213. ieee80211_send_nullfunc(local, sdata, 0);
  1214. } else {
  1215. local->pspolling = true;
  1216. /*
  1217. * Here is assumed that the driver will be
  1218. * able to send ps-poll frame and receive a
  1219. * response even though power save mode is
  1220. * enabled, but some drivers might require
  1221. * to disable power save here. This needs
  1222. * to be investigated.
  1223. */
  1224. ieee80211_send_pspoll(local, sdata);
  1225. }
  1226. }
  1227. }
  1228. if (ncrc == ifmgd->beacon_crc)
  1229. return;
  1230. ifmgd->beacon_crc = ncrc;
  1231. if (elems.erp_info && elems.erp_info_len >= 1) {
  1232. erp_valid = true;
  1233. erp_value = elems.erp_info[0];
  1234. } else {
  1235. erp_valid = false;
  1236. }
  1237. changed |= ieee80211_handle_bss_capability(sdata,
  1238. le16_to_cpu(mgmt->u.beacon.capab_info),
  1239. erp_valid, erp_value);
  1240. if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param &&
  1241. !(ifmgd->flags & IEEE80211_STA_DISABLE_11N)) {
  1242. struct sta_info *sta;
  1243. struct ieee80211_supported_band *sband;
  1244. u16 ap_ht_cap_flags;
  1245. rcu_read_lock();
  1246. sta = sta_info_get(sdata, bssid);
  1247. if (WARN_ON(!sta)) {
  1248. rcu_read_unlock();
  1249. return;
  1250. }
  1251. sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
  1252. ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
  1253. elems.ht_cap_elem, &sta->sta.ht_cap);
  1254. ap_ht_cap_flags = sta->sta.ht_cap.cap;
  1255. rcu_read_unlock();
  1256. changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
  1257. bssid, ap_ht_cap_flags);
  1258. }
  1259. /* Note: country IE parsing is done for us by cfg80211 */
  1260. if (elems.country_elem) {
  1261. /* TODO: IBSS also needs this */
  1262. if (elems.pwr_constr_elem)
  1263. ieee80211_handle_pwr_constr(sdata,
  1264. le16_to_cpu(mgmt->u.probe_resp.capab_info),
  1265. elems.pwr_constr_elem,
  1266. elems.pwr_constr_elem_len);
  1267. }
  1268. ieee80211_bss_info_change_notify(sdata, changed);
  1269. }
  1270. ieee80211_rx_result ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata,
  1271. struct sk_buff *skb)
  1272. {
  1273. struct ieee80211_local *local = sdata->local;
  1274. struct ieee80211_mgmt *mgmt;
  1275. u16 fc;
  1276. if (skb->len < 24)
  1277. return RX_DROP_MONITOR;
  1278. mgmt = (struct ieee80211_mgmt *) skb->data;
  1279. fc = le16_to_cpu(mgmt->frame_control);
  1280. switch (fc & IEEE80211_FCTL_STYPE) {
  1281. case IEEE80211_STYPE_PROBE_RESP:
  1282. case IEEE80211_STYPE_BEACON:
  1283. case IEEE80211_STYPE_DEAUTH:
  1284. case IEEE80211_STYPE_DISASSOC:
  1285. case IEEE80211_STYPE_ACTION:
  1286. skb_queue_tail(&sdata->u.mgd.skb_queue, skb);
  1287. ieee80211_queue_work(&local->hw, &sdata->u.mgd.work);
  1288. return RX_QUEUED;
  1289. }
  1290. return RX_DROP_MONITOR;
  1291. }
  1292. static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
  1293. struct sk_buff *skb)
  1294. {
  1295. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1296. struct ieee80211_rx_status *rx_status;
  1297. struct ieee80211_mgmt *mgmt;
  1298. enum rx_mgmt_action rma = RX_MGMT_NONE;
  1299. u16 fc;
  1300. rx_status = (struct ieee80211_rx_status *) skb->cb;
  1301. mgmt = (struct ieee80211_mgmt *) skb->data;
  1302. fc = le16_to_cpu(mgmt->frame_control);
  1303. mutex_lock(&ifmgd->mtx);
  1304. if (ifmgd->associated &&
  1305. memcmp(ifmgd->associated->bssid, mgmt->bssid, ETH_ALEN) == 0) {
  1306. switch (fc & IEEE80211_FCTL_STYPE) {
  1307. case IEEE80211_STYPE_BEACON:
  1308. ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len,
  1309. rx_status);
  1310. break;
  1311. case IEEE80211_STYPE_PROBE_RESP:
  1312. ieee80211_rx_mgmt_probe_resp(sdata, skb);
  1313. break;
  1314. case IEEE80211_STYPE_DEAUTH:
  1315. rma = ieee80211_rx_mgmt_deauth(sdata, mgmt, skb->len);
  1316. break;
  1317. case IEEE80211_STYPE_DISASSOC:
  1318. rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len);
  1319. break;
  1320. case IEEE80211_STYPE_ACTION:
  1321. if (mgmt->u.action.category != WLAN_CATEGORY_SPECTRUM_MGMT)
  1322. break;
  1323. ieee80211_sta_process_chanswitch(sdata,
  1324. &mgmt->u.action.u.chan_switch.sw_elem,
  1325. (void *)ifmgd->associated->priv);
  1326. break;
  1327. }
  1328. mutex_unlock(&ifmgd->mtx);
  1329. switch (rma) {
  1330. case RX_MGMT_NONE:
  1331. /* no action */
  1332. break;
  1333. case RX_MGMT_CFG80211_DEAUTH:
  1334. cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len);
  1335. break;
  1336. case RX_MGMT_CFG80211_DISASSOC:
  1337. cfg80211_send_disassoc(sdata->dev, (u8 *)mgmt, skb->len);
  1338. break;
  1339. default:
  1340. WARN(1, "unexpected: %d", rma);
  1341. }
  1342. goto out;
  1343. }
  1344. mutex_unlock(&ifmgd->mtx);
  1345. if (skb->len >= 24 + 2 /* mgmt + deauth reason */ &&
  1346. (fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_DEAUTH)
  1347. cfg80211_send_deauth(sdata->dev, (u8 *)mgmt, skb->len);
  1348. out:
  1349. kfree_skb(skb);
  1350. }
  1351. static void ieee80211_sta_timer(unsigned long data)
  1352. {
  1353. struct ieee80211_sub_if_data *sdata =
  1354. (struct ieee80211_sub_if_data *) data;
  1355. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1356. struct ieee80211_local *local = sdata->local;
  1357. if (local->quiescing) {
  1358. set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running);
  1359. return;
  1360. }
  1361. ieee80211_queue_work(&local->hw, &ifmgd->work);
  1362. }
  1363. static void ieee80211_sta_work(struct work_struct *work)
  1364. {
  1365. struct ieee80211_sub_if_data *sdata =
  1366. container_of(work, struct ieee80211_sub_if_data, u.mgd.work);
  1367. struct ieee80211_local *local = sdata->local;
  1368. struct ieee80211_if_managed *ifmgd;
  1369. struct sk_buff *skb;
  1370. if (!ieee80211_sdata_running(sdata))
  1371. return;
  1372. if (local->scanning)
  1373. return;
  1374. if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
  1375. return;
  1376. /*
  1377. * ieee80211_queue_work() should have picked up most cases,
  1378. * here we'll pick the the rest.
  1379. */
  1380. if (WARN(local->suspended, "STA MLME work scheduled while "
  1381. "going to suspend\n"))
  1382. return;
  1383. ifmgd = &sdata->u.mgd;
  1384. /* first process frames to avoid timing out while a frame is pending */
  1385. while ((skb = skb_dequeue(&ifmgd->skb_queue)))
  1386. ieee80211_sta_rx_queued_mgmt(sdata, skb);
  1387. /* then process the rest of the work */
  1388. mutex_lock(&ifmgd->mtx);
  1389. if (ifmgd->flags & (IEEE80211_STA_BEACON_POLL |
  1390. IEEE80211_STA_CONNECTION_POLL) &&
  1391. ifmgd->associated) {
  1392. u8 bssid[ETH_ALEN];
  1393. memcpy(bssid, ifmgd->associated->bssid, ETH_ALEN);
  1394. if (time_is_after_jiffies(ifmgd->probe_timeout))
  1395. run_again(ifmgd, ifmgd->probe_timeout);
  1396. else if (ifmgd->probe_send_count < IEEE80211_MAX_PROBE_TRIES) {
  1397. #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  1398. printk(KERN_DEBUG "No probe response from AP %pM"
  1399. " after %dms, try %d\n", bssid,
  1400. (1000 * IEEE80211_PROBE_WAIT)/HZ,
  1401. ifmgd->probe_send_count);
  1402. #endif
  1403. ieee80211_mgd_probe_ap_send(sdata);
  1404. } else {
  1405. /*
  1406. * We actually lost the connection ... or did we?
  1407. * Let's make sure!
  1408. */
  1409. ifmgd->flags &= ~(IEEE80211_STA_CONNECTION_POLL |
  1410. IEEE80211_STA_BEACON_POLL);
  1411. printk(KERN_DEBUG "No probe response from AP %pM"
  1412. " after %dms, disconnecting.\n",
  1413. bssid, (1000 * IEEE80211_PROBE_WAIT)/HZ);
  1414. ieee80211_set_disassoc(sdata, true);
  1415. ieee80211_recalc_idle(local);
  1416. mutex_unlock(&ifmgd->mtx);
  1417. /*
  1418. * must be outside lock due to cfg80211,
  1419. * but that's not a problem.
  1420. */
  1421. ieee80211_send_deauth_disassoc(sdata, bssid,
  1422. IEEE80211_STYPE_DEAUTH,
  1423. WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY,
  1424. NULL, true);
  1425. mutex_lock(&ifmgd->mtx);
  1426. }
  1427. }
  1428. mutex_unlock(&ifmgd->mtx);
  1429. }
  1430. static void ieee80211_sta_bcn_mon_timer(unsigned long data)
  1431. {
  1432. struct ieee80211_sub_if_data *sdata =
  1433. (struct ieee80211_sub_if_data *) data;
  1434. struct ieee80211_local *local = sdata->local;
  1435. if (local->quiescing)
  1436. return;
  1437. ieee80211_queue_work(&sdata->local->hw,
  1438. &sdata->u.mgd.beacon_connection_loss_work);
  1439. }
  1440. static void ieee80211_sta_conn_mon_timer(unsigned long data)
  1441. {
  1442. struct ieee80211_sub_if_data *sdata =
  1443. (struct ieee80211_sub_if_data *) data;
  1444. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1445. struct ieee80211_local *local = sdata->local;
  1446. if (local->quiescing)
  1447. return;
  1448. ieee80211_queue_work(&local->hw, &ifmgd->monitor_work);
  1449. }
  1450. static void ieee80211_sta_monitor_work(struct work_struct *work)
  1451. {
  1452. struct ieee80211_sub_if_data *sdata =
  1453. container_of(work, struct ieee80211_sub_if_data,
  1454. u.mgd.monitor_work);
  1455. ieee80211_mgd_probe_ap(sdata, false);
  1456. }
  1457. static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)
  1458. {
  1459. if (sdata->vif.type == NL80211_IFTYPE_STATION) {
  1460. sdata->u.mgd.flags &= ~(IEEE80211_STA_BEACON_POLL |
  1461. IEEE80211_STA_CONNECTION_POLL);
  1462. /* let's probe the connection once */
  1463. ieee80211_queue_work(&sdata->local->hw,
  1464. &sdata->u.mgd.monitor_work);
  1465. /* and do all the other regular work too */
  1466. ieee80211_queue_work(&sdata->local->hw,
  1467. &sdata->u.mgd.work);
  1468. }
  1469. }
  1470. #ifdef CONFIG_PM
  1471. void ieee80211_sta_quiesce(struct ieee80211_sub_if_data *sdata)
  1472. {
  1473. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1474. /*
  1475. * we need to use atomic bitops for the running bits
  1476. * only because both timers might fire at the same
  1477. * time -- the code here is properly synchronised.
  1478. */
  1479. cancel_work_sync(&ifmgd->work);
  1480. cancel_work_sync(&ifmgd->beacon_connection_loss_work);
  1481. if (del_timer_sync(&ifmgd->timer))
  1482. set_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running);
  1483. cancel_work_sync(&ifmgd->chswitch_work);
  1484. if (del_timer_sync(&ifmgd->chswitch_timer))
  1485. set_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running);
  1486. cancel_work_sync(&ifmgd->monitor_work);
  1487. /* these will just be re-established on connection */
  1488. del_timer_sync(&ifmgd->conn_mon_timer);
  1489. del_timer_sync(&ifmgd->bcn_mon_timer);
  1490. }
  1491. void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata)
  1492. {
  1493. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1494. if (test_and_clear_bit(TMR_RUNNING_TIMER, &ifmgd->timers_running))
  1495. add_timer(&ifmgd->timer);
  1496. if (test_and_clear_bit(TMR_RUNNING_CHANSW, &ifmgd->timers_running))
  1497. add_timer(&ifmgd->chswitch_timer);
  1498. }
  1499. #endif
  1500. /* interface setup */
  1501. void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)
  1502. {
  1503. struct ieee80211_if_managed *ifmgd;
  1504. ifmgd = &sdata->u.mgd;
  1505. INIT_WORK(&ifmgd->work, ieee80211_sta_work);
  1506. INIT_WORK(&ifmgd->monitor_work, ieee80211_sta_monitor_work);
  1507. INIT_WORK(&ifmgd->chswitch_work, ieee80211_chswitch_work);
  1508. INIT_WORK(&ifmgd->beacon_connection_loss_work,
  1509. ieee80211_beacon_connection_loss_work);
  1510. setup_timer(&ifmgd->timer, ieee80211_sta_timer,
  1511. (unsigned long) sdata);
  1512. setup_timer(&ifmgd->bcn_mon_timer, ieee80211_sta_bcn_mon_timer,
  1513. (unsigned long) sdata);
  1514. setup_timer(&ifmgd->conn_mon_timer, ieee80211_sta_conn_mon_timer,
  1515. (unsigned long) sdata);
  1516. setup_timer(&ifmgd->chswitch_timer, ieee80211_chswitch_timer,
  1517. (unsigned long) sdata);
  1518. skb_queue_head_init(&ifmgd->skb_queue);
  1519. ifmgd->flags = 0;
  1520. mutex_init(&ifmgd->mtx);
  1521. if (sdata->local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS)
  1522. ifmgd->req_smps = IEEE80211_SMPS_AUTOMATIC;
  1523. else
  1524. ifmgd->req_smps = IEEE80211_SMPS_OFF;
  1525. }
  1526. /* scan finished notification */
  1527. void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
  1528. {
  1529. struct ieee80211_sub_if_data *sdata = local->scan_sdata;
  1530. /* Restart STA timers */
  1531. rcu_read_lock();
  1532. list_for_each_entry_rcu(sdata, &local->interfaces, list)
  1533. ieee80211_restart_sta_timer(sdata);
  1534. rcu_read_unlock();
  1535. }
  1536. int ieee80211_max_network_latency(struct notifier_block *nb,
  1537. unsigned long data, void *dummy)
  1538. {
  1539. s32 latency_usec = (s32) data;
  1540. struct ieee80211_local *local =
  1541. container_of(nb, struct ieee80211_local,
  1542. network_latency_notifier);
  1543. mutex_lock(&local->iflist_mtx);
  1544. ieee80211_recalc_ps(local, latency_usec);
  1545. mutex_unlock(&local->iflist_mtx);
  1546. return 0;
  1547. }
  1548. /* config hooks */
  1549. static enum work_done_result
  1550. ieee80211_probe_auth_done(struct ieee80211_work *wk,
  1551. struct sk_buff *skb)
  1552. {
  1553. if (!skb) {
  1554. cfg80211_send_auth_timeout(wk->sdata->dev, wk->filter_ta);
  1555. return WORK_DONE_DESTROY;
  1556. }
  1557. if (wk->type == IEEE80211_WORK_AUTH) {
  1558. cfg80211_send_rx_auth(wk->sdata->dev, skb->data, skb->len);
  1559. return WORK_DONE_DESTROY;
  1560. }
  1561. mutex_lock(&wk->sdata->u.mgd.mtx);
  1562. ieee80211_rx_mgmt_probe_resp(wk->sdata, skb);
  1563. mutex_unlock(&wk->sdata->u.mgd.mtx);
  1564. wk->type = IEEE80211_WORK_AUTH;
  1565. wk->probe_auth.tries = 0;
  1566. return WORK_DONE_REQUEUE;
  1567. }
  1568. int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata,
  1569. struct cfg80211_auth_request *req)
  1570. {
  1571. const u8 *ssid;
  1572. struct ieee80211_work *wk;
  1573. u16 auth_alg;
  1574. if (req->local_state_change)
  1575. return 0; /* no need to update mac80211 state */
  1576. switch (req->auth_type) {
  1577. case NL80211_AUTHTYPE_OPEN_SYSTEM:
  1578. auth_alg = WLAN_AUTH_OPEN;
  1579. break;
  1580. case NL80211_AUTHTYPE_SHARED_KEY:
  1581. auth_alg = WLAN_AUTH_SHARED_KEY;
  1582. break;
  1583. case NL80211_AUTHTYPE_FT:
  1584. auth_alg = WLAN_AUTH_FT;
  1585. break;
  1586. case NL80211_AUTHTYPE_NETWORK_EAP:
  1587. auth_alg = WLAN_AUTH_LEAP;
  1588. break;
  1589. default:
  1590. return -EOPNOTSUPP;
  1591. }
  1592. wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL);
  1593. if (!wk)
  1594. return -ENOMEM;
  1595. memcpy(wk->filter_ta, req->bss->bssid, ETH_ALEN);
  1596. if (req->ie && req->ie_len) {
  1597. memcpy(wk->ie, req->ie, req->ie_len);
  1598. wk->ie_len = req->ie_len;
  1599. }
  1600. if (req->key && req->key_len) {
  1601. wk->probe_auth.key_len = req->key_len;
  1602. wk->probe_auth.key_idx = req->key_idx;
  1603. memcpy(wk->probe_auth.key, req->key, req->key_len);
  1604. }
  1605. ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID);
  1606. memcpy(wk->probe_auth.ssid, ssid + 2, ssid[1]);
  1607. wk->probe_auth.ssid_len = ssid[1];
  1608. wk->probe_auth.algorithm = auth_alg;
  1609. wk->probe_auth.privacy = req->bss->capability & WLAN_CAPABILITY_PRIVACY;
  1610. /* if we already have a probe, don't probe again */
  1611. if (req->bss->proberesp_ies)
  1612. wk->type = IEEE80211_WORK_AUTH;
  1613. else
  1614. wk->type = IEEE80211_WORK_DIRECT_PROBE;
  1615. wk->chan = req->bss->channel;
  1616. wk->sdata = sdata;
  1617. wk->done = ieee80211_probe_auth_done;
  1618. ieee80211_add_work(wk);
  1619. return 0;
  1620. }
  1621. static enum work_done_result ieee80211_assoc_done(struct ieee80211_work *wk,
  1622. struct sk_buff *skb)
  1623. {
  1624. struct ieee80211_mgmt *mgmt;
  1625. u16 status;
  1626. if (!skb) {
  1627. cfg80211_send_assoc_timeout(wk->sdata->dev, wk->filter_ta);
  1628. return WORK_DONE_DESTROY;
  1629. }
  1630. mgmt = (void *)skb->data;
  1631. status = le16_to_cpu(mgmt->u.assoc_resp.status_code);
  1632. if (status == WLAN_STATUS_SUCCESS) {
  1633. mutex_lock(&wk->sdata->u.mgd.mtx);
  1634. if (!ieee80211_assoc_success(wk, mgmt, skb->len)) {
  1635. mutex_unlock(&wk->sdata->u.mgd.mtx);
  1636. /* oops -- internal error -- send timeout for now */
  1637. cfg80211_send_assoc_timeout(wk->sdata->dev,
  1638. wk->filter_ta);
  1639. return WORK_DONE_DESTROY;
  1640. }
  1641. mutex_unlock(&wk->sdata->u.mgd.mtx);
  1642. }
  1643. cfg80211_send_rx_assoc(wk->sdata->dev, skb->data, skb->len);
  1644. return WORK_DONE_DESTROY;
  1645. }
  1646. int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata,
  1647. struct cfg80211_assoc_request *req)
  1648. {
  1649. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1650. struct ieee80211_bss *bss = (void *)req->bss->priv;
  1651. struct ieee80211_work *wk;
  1652. const u8 *ssid;
  1653. int i;
  1654. mutex_lock(&ifmgd->mtx);
  1655. if (ifmgd->associated) {
  1656. if (!req->prev_bssid ||
  1657. memcmp(req->prev_bssid, ifmgd->associated->bssid,
  1658. ETH_ALEN)) {
  1659. /*
  1660. * We are already associated and the request was not a
  1661. * reassociation request from the current BSS, so
  1662. * reject it.
  1663. */
  1664. mutex_unlock(&ifmgd->mtx);
  1665. return -EALREADY;
  1666. }
  1667. /* Trying to reassociate - clear previous association state */
  1668. ieee80211_set_disassoc(sdata, true);
  1669. }
  1670. mutex_unlock(&ifmgd->mtx);
  1671. wk = kzalloc(sizeof(*wk) + req->ie_len, GFP_KERNEL);
  1672. if (!wk)
  1673. return -ENOMEM;
  1674. ifmgd->flags &= ~IEEE80211_STA_DISABLE_11N;
  1675. ifmgd->flags &= ~IEEE80211_STA_NULLFUNC_ACKED;
  1676. for (i = 0; i < req->crypto.n_ciphers_pairwise; i++)
  1677. if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 ||
  1678. req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_TKIP ||
  1679. req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP104)
  1680. ifmgd->flags |= IEEE80211_STA_DISABLE_11N;
  1681. if (req->ie && req->ie_len) {
  1682. memcpy(wk->ie, req->ie, req->ie_len);
  1683. wk->ie_len = req->ie_len;
  1684. } else
  1685. wk->ie_len = 0;
  1686. wk->assoc.bss = req->bss;
  1687. memcpy(wk->filter_ta, req->bss->bssid, ETH_ALEN);
  1688. /* new association always uses requested smps mode */
  1689. if (ifmgd->req_smps == IEEE80211_SMPS_AUTOMATIC) {
  1690. if (ifmgd->powersave)
  1691. ifmgd->ap_smps = IEEE80211_SMPS_DYNAMIC;
  1692. else
  1693. ifmgd->ap_smps = IEEE80211_SMPS_OFF;
  1694. } else
  1695. ifmgd->ap_smps = ifmgd->req_smps;
  1696. wk->assoc.smps = ifmgd->ap_smps;
  1697. /*
  1698. * IEEE802.11n does not allow TKIP/WEP as pairwise ciphers in HT mode.
  1699. * We still associate in non-HT mode (11a/b/g) if any one of these
  1700. * ciphers is configured as pairwise.
  1701. * We can set this to true for non-11n hardware, that'll be checked
  1702. * separately along with the peer capabilities.
  1703. */
  1704. wk->assoc.use_11n = !(ifmgd->flags & IEEE80211_STA_DISABLE_11N);
  1705. wk->assoc.capability = req->bss->capability;
  1706. wk->assoc.wmm_used = bss->wmm_used;
  1707. wk->assoc.supp_rates = bss->supp_rates;
  1708. wk->assoc.supp_rates_len = bss->supp_rates_len;
  1709. wk->assoc.ht_information_ie =
  1710. ieee80211_bss_get_ie(req->bss, WLAN_EID_HT_INFORMATION);
  1711. if (bss->wmm_used && bss->uapsd_supported &&
  1712. (sdata->local->hw.flags & IEEE80211_HW_SUPPORTS_UAPSD)) {
  1713. wk->assoc.uapsd_used = true;
  1714. ifmgd->flags |= IEEE80211_STA_UAPSD_ENABLED;
  1715. } else {
  1716. wk->assoc.uapsd_used = false;
  1717. ifmgd->flags &= ~IEEE80211_STA_UAPSD_ENABLED;
  1718. }
  1719. ssid = ieee80211_bss_get_ie(req->bss, WLAN_EID_SSID);
  1720. memcpy(wk->assoc.ssid, ssid + 2, ssid[1]);
  1721. wk->assoc.ssid_len = ssid[1];
  1722. if (req->prev_bssid)
  1723. memcpy(wk->assoc.prev_bssid, req->prev_bssid, ETH_ALEN);
  1724. wk->type = IEEE80211_WORK_ASSOC;
  1725. wk->chan = req->bss->channel;
  1726. wk->sdata = sdata;
  1727. wk->done = ieee80211_assoc_done;
  1728. if (req->use_mfp) {
  1729. ifmgd->mfp = IEEE80211_MFP_REQUIRED;
  1730. ifmgd->flags |= IEEE80211_STA_MFP_ENABLED;
  1731. } else {
  1732. ifmgd->mfp = IEEE80211_MFP_DISABLED;
  1733. ifmgd->flags &= ~IEEE80211_STA_MFP_ENABLED;
  1734. }
  1735. if (req->crypto.control_port)
  1736. ifmgd->flags |= IEEE80211_STA_CONTROL_PORT;
  1737. else
  1738. ifmgd->flags &= ~IEEE80211_STA_CONTROL_PORT;
  1739. ieee80211_add_work(wk);
  1740. return 0;
  1741. }
  1742. int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata,
  1743. struct cfg80211_deauth_request *req,
  1744. void *cookie)
  1745. {
  1746. struct ieee80211_local *local = sdata->local;
  1747. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1748. struct ieee80211_work *wk;
  1749. const u8 *bssid = req->bss->bssid;
  1750. mutex_lock(&ifmgd->mtx);
  1751. if (ifmgd->associated == req->bss) {
  1752. bssid = req->bss->bssid;
  1753. ieee80211_set_disassoc(sdata, true);
  1754. mutex_unlock(&ifmgd->mtx);
  1755. } else {
  1756. bool not_auth_yet = false;
  1757. mutex_unlock(&ifmgd->mtx);
  1758. mutex_lock(&local->work_mtx);
  1759. list_for_each_entry(wk, &local->work_list, list) {
  1760. if (wk->sdata != sdata)
  1761. continue;
  1762. if (wk->type != IEEE80211_WORK_DIRECT_PROBE &&
  1763. wk->type != IEEE80211_WORK_AUTH)
  1764. continue;
  1765. if (memcmp(req->bss->bssid, wk->filter_ta, ETH_ALEN))
  1766. continue;
  1767. not_auth_yet = wk->type == IEEE80211_WORK_DIRECT_PROBE;
  1768. list_del_rcu(&wk->list);
  1769. free_work(wk);
  1770. break;
  1771. }
  1772. mutex_unlock(&local->work_mtx);
  1773. /*
  1774. * If somebody requests authentication and we haven't
  1775. * sent out an auth frame yet there's no need to send
  1776. * out a deauth frame either. If the state was PROBE,
  1777. * then this is the case. If it's AUTH we have sent a
  1778. * frame, and if it's IDLE we have completed the auth
  1779. * process already.
  1780. */
  1781. if (not_auth_yet) {
  1782. __cfg80211_auth_canceled(sdata->dev, bssid);
  1783. return 0;
  1784. }
  1785. }
  1786. printk(KERN_DEBUG "%s: deauthenticating from %pM by local choice (reason=%d)\n",
  1787. sdata->name, bssid, req->reason_code);
  1788. ieee80211_send_deauth_disassoc(sdata, bssid, IEEE80211_STYPE_DEAUTH,
  1789. req->reason_code, cookie,
  1790. !req->local_state_change);
  1791. ieee80211_recalc_idle(sdata->local);
  1792. return 0;
  1793. }
  1794. int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata,
  1795. struct cfg80211_disassoc_request *req,
  1796. void *cookie)
  1797. {
  1798. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1799. u8 bssid[ETH_ALEN];
  1800. mutex_lock(&ifmgd->mtx);
  1801. /*
  1802. * cfg80211 should catch this ... but it's racy since
  1803. * we can receive a disassoc frame, process it, hand it
  1804. * to cfg80211 while that's in a locked section already
  1805. * trying to tell us that the user wants to disconnect.
  1806. */
  1807. if (ifmgd->associated != req->bss) {
  1808. mutex_unlock(&ifmgd->mtx);
  1809. return -ENOLINK;
  1810. }
  1811. printk(KERN_DEBUG "%s: disassociating from %pM by local choice (reason=%d)\n",
  1812. sdata->name, req->bss->bssid, req->reason_code);
  1813. memcpy(bssid, req->bss->bssid, ETH_ALEN);
  1814. ieee80211_set_disassoc(sdata, false);
  1815. mutex_unlock(&ifmgd->mtx);
  1816. ieee80211_send_deauth_disassoc(sdata, req->bss->bssid,
  1817. IEEE80211_STYPE_DISASSOC, req->reason_code,
  1818. cookie, !req->local_state_change);
  1819. sta_info_destroy_addr(sdata, bssid);
  1820. ieee80211_recalc_idle(sdata->local);
  1821. return 0;
  1822. }
  1823. int ieee80211_mgd_action(struct ieee80211_sub_if_data *sdata,
  1824. struct ieee80211_channel *chan,
  1825. enum nl80211_channel_type channel_type,
  1826. const u8 *buf, size_t len, u64 *cookie)
  1827. {
  1828. struct ieee80211_local *local = sdata->local;
  1829. struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
  1830. struct sk_buff *skb;
  1831. /* Check that we are on the requested channel for transmission */
  1832. if ((chan != local->tmp_channel ||
  1833. channel_type != local->tmp_channel_type) &&
  1834. (chan != local->oper_channel ||
  1835. channel_type != local->oper_channel_type))
  1836. return -EBUSY;
  1837. skb = dev_alloc_skb(local->hw.extra_tx_headroom + len);
  1838. if (!skb)
  1839. return -ENOMEM;
  1840. skb_reserve(skb, local->hw.extra_tx_headroom);
  1841. memcpy(skb_put(skb, len), buf, len);
  1842. if (!(ifmgd->flags & IEEE80211_STA_MFP_ENABLED))
  1843. IEEE80211_SKB_CB(skb)->flags |=
  1844. IEEE80211_TX_INTFL_DONT_ENCRYPT;
  1845. IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_NL80211_FRAME_TX |
  1846. IEEE80211_TX_CTL_REQ_TX_STATUS;
  1847. skb->dev = sdata->dev;
  1848. ieee80211_tx_skb(sdata, skb);
  1849. *cookie = (unsigned long) skb;
  1850. return 0;
  1851. }
  1852. void ieee80211_cqm_rssi_notify(struct ieee80211_vif *vif,
  1853. enum nl80211_cqm_rssi_threshold_event rssi_event,
  1854. gfp_t gfp)
  1855. {
  1856. struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
  1857. trace_api_cqm_rssi_notify(sdata, rssi_event);
  1858. cfg80211_cqm_rssi_notify(sdata->dev, rssi_event, gfp);
  1859. }
  1860. EXPORT_SYMBOL(ieee80211_cqm_rssi_notify);