2 * BSS client mode implementation
3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
15 * BSS table: use <BSSID,SSID> as the key to support multi-SSID APs
16 * order BSS list by RSSI(?) ("quality of AP")
17 * scan result table filtering (by capability (privacy, IBSS/BSS, WPA/RSN IE,
20 #include <linux/delay.h>
21 #include <linux/if_ether.h>
22 #include <linux/skbuff.h>
23 #include <linux/netdevice.h>
24 #include <linux/if_arp.h>
25 #include <linux/wireless.h>
26 #include <linux/random.h>
27 #include <linux/etherdevice.h>
28 #include <linux/rtnetlink.h>
29 #include <net/iw_handler.h>
30 #include <asm/types.h>
32 #include <net/mac80211.h>
33 #include "ieee80211_i.h"
34 #include "ieee80211_rate.h"
35 #include "hostapd_ioctl.h"
37 #define IEEE80211_AUTH_TIMEOUT (HZ / 5)
38 #define IEEE80211_AUTH_MAX_TRIES 3
39 #define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
40 #define IEEE80211_ASSOC_MAX_TRIES 3
41 #define IEEE80211_MONITORING_INTERVAL (2 * HZ)
42 #define IEEE80211_PROBE_INTERVAL (60 * HZ)
43 #define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
44 #define IEEE80211_SCAN_INTERVAL (2 * HZ)
45 #define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
46 #define IEEE80211_IBSS_JOIN_TIMEOUT (20 * HZ)
48 #define IEEE80211_PROBE_DELAY (HZ / 33)
49 #define IEEE80211_CHANNEL_TIME (HZ / 33)
50 #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 5)
51 #define IEEE80211_SCAN_RESULT_EXPIRE (10 * HZ)
52 #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
53 #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
55 #define IEEE80211_IBSS_MAX_STA_ENTRIES 128
58 #define IEEE80211_FC(type, stype) cpu_to_le16(type | stype)
60 #define ERP_INFO_USE_PROTECTION BIT(1)
62 static void ieee80211_send_probe_req(struct net_device *dev, u8 *dst,
63 u8 *ssid, size_t ssid_len);
64 static struct ieee80211_sta_bss *
65 ieee80211_rx_bss_get(struct net_device *dev, u8 *bssid);
66 static void ieee80211_rx_bss_put(struct net_device *dev,
67 struct ieee80211_sta_bss *bss);
68 static int ieee80211_sta_find_ibss(struct net_device *dev,
69 struct ieee80211_if_sta *ifsta);
70 static int ieee80211_sta_wep_configured(struct net_device *dev);
71 static int ieee80211_sta_start_scan(struct net_device *dev,
72 u8 *ssid, size_t ssid_len);
73 static int ieee80211_sta_config_auth(struct net_device *dev,
74 struct ieee80211_if_sta *ifsta);
77 /* Parsed Information Elements */
78 struct ieee802_11_elems {
95 /* length of them, respectively */
107 u8 ext_supp_rates_len;
112 typedef enum { ParseOK = 0, ParseUnknown = 1, ParseFailed = -1 } ParseRes;
115 static ParseRes ieee802_11_parse_elems(u8 *start, size_t len,
116 struct ieee802_11_elems *elems)
122 memset(elems, 0, sizeof(*elems));
134 printk(KERN_DEBUG "IEEE 802.11 element parse "
135 "failed (id=%d elen=%d left=%d)\n",
144 elems->ssid_len = elen;
146 case WLAN_EID_SUPP_RATES:
147 elems->supp_rates = pos;
148 elems->supp_rates_len = elen;
150 case WLAN_EID_FH_PARAMS:
151 elems->fh_params = pos;
152 elems->fh_params_len = elen;
154 case WLAN_EID_DS_PARAMS:
155 elems->ds_params = pos;
156 elems->ds_params_len = elen;
158 case WLAN_EID_CF_PARAMS:
159 elems->cf_params = pos;
160 elems->cf_params_len = elen;
164 elems->tim_len = elen;
166 case WLAN_EID_IBSS_PARAMS:
167 elems->ibss_params = pos;
168 elems->ibss_params_len = elen;
170 case WLAN_EID_CHALLENGE:
171 elems->challenge = pos;
172 elems->challenge_len = elen;
175 if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
177 /* Microsoft OUI (00:50:F2) */
179 /* OUI Type 1 - WPA IE */
181 elems->wpa_len = elen;
182 } else if (elen >= 5 && pos[3] == 2) {
184 elems->wmm_info = pos;
185 elems->wmm_info_len = elen;
186 } else if (pos[4] == 1) {
187 elems->wmm_param = pos;
188 elems->wmm_param_len = elen;
195 elems->rsn_len = elen;
197 case WLAN_EID_ERP_INFO:
198 elems->erp_info = pos;
199 elems->erp_info_len = elen;
201 case WLAN_EID_EXT_SUPP_RATES:
202 elems->ext_supp_rates = pos;
203 elems->ext_supp_rates_len = elen;
207 printk(KERN_DEBUG "IEEE 802.11 element parse ignored "
208 "unknown element (id=%d elen=%d)\n",
219 /* Do not trigger error if left == 1 as Apple Airport base stations
220 * send AssocResps that are one spurious byte too long. */
222 return unknown ? ParseUnknown : ParseOK;
228 static int ecw2cw(int ecw)
239 static void ieee80211_sta_wmm_params(struct net_device *dev,
240 struct ieee80211_if_sta *ifsta,
241 u8 *wmm_param, size_t wmm_param_len)
243 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
244 struct ieee80211_tx_queue_params params;
249 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
251 count = wmm_param[6] & 0x0f;
252 if (count == ifsta->wmm_last_param_set)
254 ifsta->wmm_last_param_set = count;
257 left = wmm_param_len - 8;
259 memset(¶ms, 0, sizeof(params));
261 if (!local->ops->conf_tx)
265 for (; left >= 4; left -= 4, pos += 4) {
266 int aci = (pos[0] >> 5) & 0x03;
267 int acm = (pos[0] >> 4) & 0x01;
272 queue = IEEE80211_TX_QUEUE_DATA3;
274 local->wmm_acm |= BIT(0) | BIT(3);
278 queue = IEEE80211_TX_QUEUE_DATA1;
280 local->wmm_acm |= BIT(4) | BIT(5);
284 queue = IEEE80211_TX_QUEUE_DATA0;
286 local->wmm_acm |= BIT(6) | BIT(7);
291 queue = IEEE80211_TX_QUEUE_DATA2;
293 local->wmm_acm |= BIT(1) | BIT(2);
298 params.aifs = pos[0] & 0x0f;
299 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
300 params.cw_min = ecw2cw(pos[1] & 0x0f);
301 /* TXOP is in units of 32 usec; burst_time in 0.1 ms */
302 params.burst_time = (pos[2] | (pos[3] << 8)) * 32 / 100;
303 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
304 "cWmin=%d cWmax=%d burst=%d\n",
305 dev->name, queue, aci, acm, params.aifs, params.cw_min,
306 params.cw_max, params.burst_time);
307 /* TODO: handle ACM (block TX, fallback to next lowest allowed
309 if (local->ops->conf_tx(local_to_hw(local), queue, ¶ms)) {
310 printk(KERN_DEBUG "%s: failed to set TX queue "
311 "parameters for queue %d\n", dev->name, queue);
317 static void ieee80211_sta_send_associnfo(struct net_device *dev,
318 struct ieee80211_if_sta *ifsta)
323 union iwreq_data wrqu;
325 if (!ifsta->assocreq_ies && !ifsta->assocresp_ies)
328 buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len +
329 ifsta->assocresp_ies_len), GFP_ATOMIC);
333 len = sprintf(buf, "ASSOCINFO(");
334 if (ifsta->assocreq_ies) {
335 len += sprintf(buf + len, "ReqIEs=");
336 for (i = 0; i < ifsta->assocreq_ies_len; i++) {
337 len += sprintf(buf + len, "%02x",
338 ifsta->assocreq_ies[i]);
341 if (ifsta->assocresp_ies) {
342 if (ifsta->assocreq_ies)
343 len += sprintf(buf + len, " ");
344 len += sprintf(buf + len, "RespIEs=");
345 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
346 len += sprintf(buf + len, "%02x",
347 ifsta->assocresp_ies[i]);
350 len += sprintf(buf + len, ")");
352 if (len > IW_CUSTOM_MAX) {
353 len = sprintf(buf, "ASSOCRESPIE=");
354 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
355 len += sprintf(buf + len, "%02x",
356 ifsta->assocresp_ies[i]);
360 memset(&wrqu, 0, sizeof(wrqu));
361 wrqu.data.length = len;
362 wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf);
368 static void ieee80211_set_associated(struct net_device *dev,
369 struct ieee80211_if_sta *ifsta, int assoc)
371 union iwreq_data wrqu;
373 if (ifsta->associated == assoc)
376 ifsta->associated = assoc;
379 struct ieee80211_sub_if_data *sdata;
380 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
381 if (sdata->type != IEEE80211_IF_TYPE_STA)
383 netif_carrier_on(dev);
384 ifsta->prev_bssid_set = 1;
385 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
386 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
387 ieee80211_sta_send_associnfo(dev, ifsta);
389 netif_carrier_off(dev);
390 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
392 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
393 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
394 ifsta->last_probe = jiffies;
397 static void ieee80211_set_disassoc(struct net_device *dev,
398 struct ieee80211_if_sta *ifsta, int deauth)
401 ifsta->auth_tries = 0;
402 ifsta->assoc_tries = 0;
403 ieee80211_set_associated(dev, ifsta, 0);
406 static void ieee80211_sta_tx(struct net_device *dev, struct sk_buff *skb,
409 struct ieee80211_sub_if_data *sdata;
410 struct ieee80211_tx_packet_data *pkt_data;
412 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
413 skb->dev = sdata->local->mdev;
414 skb_set_mac_header(skb, 0);
415 skb_set_network_header(skb, 0);
416 skb_set_transport_header(skb, 0);
418 pkt_data = (struct ieee80211_tx_packet_data *) skb->cb;
419 memset(pkt_data, 0, sizeof(struct ieee80211_tx_packet_data));
420 pkt_data->ifindex = sdata->dev->ifindex;
421 pkt_data->mgmt_iface = (sdata->type == IEEE80211_IF_TYPE_MGMT);
422 pkt_data->do_not_encrypt = !encrypt;
428 static void ieee80211_send_auth(struct net_device *dev,
429 struct ieee80211_if_sta *ifsta,
430 int transaction, u8 *extra, size_t extra_len,
433 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
435 struct ieee80211_mgmt *mgmt;
437 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
438 sizeof(*mgmt) + 6 + extra_len);
440 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
441 "frame\n", dev->name);
444 skb_reserve(skb, local->hw.extra_tx_headroom);
446 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
447 memset(mgmt, 0, 24 + 6);
448 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
449 IEEE80211_STYPE_AUTH);
451 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
452 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
453 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
454 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
455 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
456 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
457 ifsta->auth_transaction = transaction + 1;
458 mgmt->u.auth.status_code = cpu_to_le16(0);
460 memcpy(skb_put(skb, extra_len), extra, extra_len);
462 ieee80211_sta_tx(dev, skb, encrypt);
466 static void ieee80211_authenticate(struct net_device *dev,
467 struct ieee80211_if_sta *ifsta)
470 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
471 printk(KERN_DEBUG "%s: authentication with AP " MAC_FMT
473 dev->name, MAC_ARG(ifsta->bssid));
474 ifsta->state = IEEE80211_DISABLED;
478 ifsta->state = IEEE80211_AUTHENTICATE;
479 printk(KERN_DEBUG "%s: authenticate with AP " MAC_FMT "\n",
480 dev->name, MAC_ARG(ifsta->bssid));
482 ieee80211_send_auth(dev, ifsta, 1, NULL, 0, 0);
484 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
488 static void ieee80211_send_assoc(struct net_device *dev,
489 struct ieee80211_if_sta *ifsta)
491 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
492 struct ieee80211_hw_mode *mode;
494 struct ieee80211_mgmt *mgmt;
498 struct ieee80211_sta_bss *bss;
501 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
502 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
505 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
506 "frame\n", dev->name);
509 skb_reserve(skb, local->hw.extra_tx_headroom);
511 mode = local->oper_hw_mode;
512 capab = ifsta->capab;
513 if (mode->mode == MODE_IEEE80211G) {
514 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME |
515 WLAN_CAPABILITY_SHORT_PREAMBLE;
517 bss = ieee80211_rx_bss_get(dev, ifsta->bssid);
519 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
520 capab |= WLAN_CAPABILITY_PRIVACY;
524 ieee80211_rx_bss_put(dev, bss);
527 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
529 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
530 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
531 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
533 if (ifsta->prev_bssid_set) {
535 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
536 IEEE80211_STYPE_REASSOC_REQ);
537 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
538 mgmt->u.reassoc_req.listen_interval = cpu_to_le16(1);
539 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
543 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
544 IEEE80211_STYPE_ASSOC_REQ);
545 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
546 mgmt->u.assoc_req.listen_interval = cpu_to_le16(1);
550 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
551 *pos++ = WLAN_EID_SSID;
552 *pos++ = ifsta->ssid_len;
553 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
555 len = mode->num_rates;
558 pos = skb_put(skb, len + 2);
559 *pos++ = WLAN_EID_SUPP_RATES;
561 for (i = 0; i < len; i++) {
562 int rate = mode->rates[i].rate;
563 if (mode->mode == MODE_ATHEROS_TURBO)
565 *pos++ = (u8) (rate / 5);
568 if (mode->num_rates > len) {
569 pos = skb_put(skb, mode->num_rates - len + 2);
570 *pos++ = WLAN_EID_EXT_SUPP_RATES;
571 *pos++ = mode->num_rates - len;
572 for (i = len; i < mode->num_rates; i++) {
573 int rate = mode->rates[i].rate;
574 if (mode->mode == MODE_ATHEROS_TURBO)
576 *pos++ = (u8) (rate / 5);
580 if (ifsta->extra_ie) {
581 pos = skb_put(skb, ifsta->extra_ie_len);
582 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
585 if (wmm && ifsta->wmm_enabled) {
586 pos = skb_put(skb, 9);
587 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
588 *pos++ = 7; /* len */
589 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
592 *pos++ = 2; /* WME */
593 *pos++ = 0; /* WME info */
594 *pos++ = 1; /* WME ver */
598 kfree(ifsta->assocreq_ies);
599 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
600 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_ATOMIC);
601 if (ifsta->assocreq_ies)
602 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
604 ieee80211_sta_tx(dev, skb, 0);
608 static void ieee80211_send_deauth(struct net_device *dev,
609 struct ieee80211_if_sta *ifsta, u16 reason)
611 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
613 struct ieee80211_mgmt *mgmt;
615 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
617 printk(KERN_DEBUG "%s: failed to allocate buffer for deauth "
618 "frame\n", dev->name);
621 skb_reserve(skb, local->hw.extra_tx_headroom);
623 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
625 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
626 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
627 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
628 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
629 IEEE80211_STYPE_DEAUTH);
631 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
633 ieee80211_sta_tx(dev, skb, 0);
637 static void ieee80211_send_disassoc(struct net_device *dev,
638 struct ieee80211_if_sta *ifsta, u16 reason)
640 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
642 struct ieee80211_mgmt *mgmt;
644 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
646 printk(KERN_DEBUG "%s: failed to allocate buffer for disassoc "
647 "frame\n", dev->name);
650 skb_reserve(skb, local->hw.extra_tx_headroom);
652 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
654 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
655 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
656 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
657 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
658 IEEE80211_STYPE_DISASSOC);
660 mgmt->u.disassoc.reason_code = cpu_to_le16(reason);
662 ieee80211_sta_tx(dev, skb, 0);
666 static int ieee80211_privacy_mismatch(struct net_device *dev,
667 struct ieee80211_if_sta *ifsta)
669 struct ieee80211_sta_bss *bss;
672 if (!ifsta || ifsta->mixed_cell ||
673 ifsta->key_mgmt != IEEE80211_KEY_MGMT_NONE)
676 bss = ieee80211_rx_bss_get(dev, ifsta->bssid);
680 if (ieee80211_sta_wep_configured(dev) !=
681 !!(bss->capability & WLAN_CAPABILITY_PRIVACY))
684 ieee80211_rx_bss_put(dev, bss);
690 static void ieee80211_associate(struct net_device *dev,
691 struct ieee80211_if_sta *ifsta)
693 ifsta->assoc_tries++;
694 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
695 printk(KERN_DEBUG "%s: association with AP " MAC_FMT
697 dev->name, MAC_ARG(ifsta->bssid));
698 ifsta->state = IEEE80211_DISABLED;
702 ifsta->state = IEEE80211_ASSOCIATE;
703 printk(KERN_DEBUG "%s: associate with AP " MAC_FMT "\n",
704 dev->name, MAC_ARG(ifsta->bssid));
705 if (ieee80211_privacy_mismatch(dev, ifsta)) {
706 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
707 "mixed-cell disabled - abort association\n", dev->name);
708 ifsta->state = IEEE80211_DISABLED;
712 ieee80211_send_assoc(dev, ifsta);
714 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
718 static void ieee80211_associated(struct net_device *dev,
719 struct ieee80211_if_sta *ifsta)
721 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
722 struct sta_info *sta;
725 /* TODO: start monitoring current AP signal quality and number of
726 * missed beacons. Scan other channels every now and then and search
728 /* TODO: remove expired BSSes */
730 ifsta->state = IEEE80211_ASSOCIATED;
732 sta = sta_info_get(local, ifsta->bssid);
734 printk(KERN_DEBUG "%s: No STA entry for own AP " MAC_FMT "\n",
735 dev->name, MAC_ARG(ifsta->bssid));
739 if (time_after(jiffies,
740 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
741 if (ifsta->probereq_poll) {
742 printk(KERN_DEBUG "%s: No ProbeResp from "
743 "current AP " MAC_FMT " - assume out of "
745 dev->name, MAC_ARG(ifsta->bssid));
747 sta_info_free(sta, 0);
748 ifsta->probereq_poll = 0;
750 ieee80211_send_probe_req(dev, ifsta->bssid,
752 local->scan_ssid_len);
753 ifsta->probereq_poll = 1;
756 ifsta->probereq_poll = 0;
757 if (time_after(jiffies, ifsta->last_probe +
758 IEEE80211_PROBE_INTERVAL)) {
759 ifsta->last_probe = jiffies;
760 ieee80211_send_probe_req(dev, ifsta->bssid,
768 union iwreq_data wrqu;
769 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
770 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
771 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
772 mod_timer(&ifsta->timer, jiffies +
773 IEEE80211_MONITORING_INTERVAL + 30 * HZ);
775 mod_timer(&ifsta->timer, jiffies +
776 IEEE80211_MONITORING_INTERVAL);
781 static void ieee80211_send_probe_req(struct net_device *dev, u8 *dst,
782 u8 *ssid, size_t ssid_len)
784 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
785 struct ieee80211_hw_mode *mode;
787 struct ieee80211_mgmt *mgmt;
788 u8 *pos, *supp_rates, *esupp_rates = NULL;
791 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
793 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
794 "request\n", dev->name);
797 skb_reserve(skb, local->hw.extra_tx_headroom);
799 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
801 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
802 IEEE80211_STYPE_PROBE_REQ);
803 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
805 memcpy(mgmt->da, dst, ETH_ALEN);
806 memcpy(mgmt->bssid, dst, ETH_ALEN);
808 memset(mgmt->da, 0xff, ETH_ALEN);
809 memset(mgmt->bssid, 0xff, ETH_ALEN);
811 pos = skb_put(skb, 2 + ssid_len);
812 *pos++ = WLAN_EID_SSID;
814 memcpy(pos, ssid, ssid_len);
816 supp_rates = skb_put(skb, 2);
817 supp_rates[0] = WLAN_EID_SUPP_RATES;
819 mode = local->oper_hw_mode;
820 for (i = 0; i < mode->num_rates; i++) {
821 struct ieee80211_rate *rate = &mode->rates[i];
822 if (!(rate->flags & IEEE80211_RATE_SUPPORTED))
825 pos = skb_put(skb, 1);
827 } else if (supp_rates[1] == 8) {
828 esupp_rates = skb_put(skb, 3);
829 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
831 pos = &esupp_rates[2];
833 pos = skb_put(skb, 1);
836 if (mode->mode == MODE_ATHEROS_TURBO)
837 *pos = rate->rate / 10;
839 *pos = rate->rate / 5;
842 ieee80211_sta_tx(dev, skb, 0);
846 static int ieee80211_sta_wep_configured(struct net_device *dev)
848 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
849 if (!sdata || !sdata->default_key ||
850 sdata->default_key->alg != ALG_WEP)
856 static void ieee80211_auth_completed(struct net_device *dev,
857 struct ieee80211_if_sta *ifsta)
859 printk(KERN_DEBUG "%s: authenticated\n", dev->name);
860 ifsta->authenticated = 1;
861 ieee80211_associate(dev, ifsta);
865 static void ieee80211_auth_challenge(struct net_device *dev,
866 struct ieee80211_if_sta *ifsta,
867 struct ieee80211_mgmt *mgmt,
871 struct ieee802_11_elems elems;
873 printk(KERN_DEBUG "%s: replying to auth challenge\n", dev->name);
874 pos = mgmt->u.auth.variable;
875 if (ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems)
877 printk(KERN_DEBUG "%s: failed to parse Auth(challenge)\n",
881 if (!elems.challenge) {
882 printk(KERN_DEBUG "%s: no challenge IE in shared key auth "
883 "frame\n", dev->name);
886 ieee80211_send_auth(dev, ifsta, 3, elems.challenge - 2,
887 elems.challenge_len + 2, 1);
891 static void ieee80211_rx_mgmt_auth(struct net_device *dev,
892 struct ieee80211_if_sta *ifsta,
893 struct ieee80211_mgmt *mgmt,
896 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
897 u16 auth_alg, auth_transaction, status_code;
899 if (ifsta->state != IEEE80211_AUTHENTICATE &&
900 sdata->type != IEEE80211_IF_TYPE_IBSS) {
901 printk(KERN_DEBUG "%s: authentication frame received from "
902 MAC_FMT ", but not in authenticate state - ignored\n",
903 dev->name, MAC_ARG(mgmt->sa));
908 printk(KERN_DEBUG "%s: too short (%zd) authentication frame "
909 "received from " MAC_FMT " - ignored\n",
910 dev->name, len, MAC_ARG(mgmt->sa));
914 if (sdata->type != IEEE80211_IF_TYPE_IBSS &&
915 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) {
916 printk(KERN_DEBUG "%s: authentication frame received from "
917 "unknown AP (SA=" MAC_FMT " BSSID=" MAC_FMT ") - "
918 "ignored\n", dev->name, MAC_ARG(mgmt->sa),
919 MAC_ARG(mgmt->bssid));
923 if (sdata->type != IEEE80211_IF_TYPE_IBSS &&
924 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0) {
925 printk(KERN_DEBUG "%s: authentication frame received from "
926 "unknown BSSID (SA=" MAC_FMT " BSSID=" MAC_FMT ") - "
927 "ignored\n", dev->name, MAC_ARG(mgmt->sa),
928 MAC_ARG(mgmt->bssid));
932 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
933 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
934 status_code = le16_to_cpu(mgmt->u.auth.status_code);
936 printk(KERN_DEBUG "%s: RX authentication from " MAC_FMT " (alg=%d "
937 "transaction=%d status=%d)\n",
938 dev->name, MAC_ARG(mgmt->sa), auth_alg,
939 auth_transaction, status_code);
941 if (sdata->type == IEEE80211_IF_TYPE_IBSS) {
942 /* IEEE 802.11 standard does not require authentication in IBSS
943 * networks and most implementations do not seem to use it.
944 * However, try to reply to authentication attempts if someone
945 * has actually implemented this.
946 * TODO: Could implement shared key authentication. */
947 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1) {
948 printk(KERN_DEBUG "%s: unexpected IBSS authentication "
949 "frame (alg=%d transaction=%d)\n",
950 dev->name, auth_alg, auth_transaction);
953 ieee80211_send_auth(dev, ifsta, 2, NULL, 0, 0);
956 if (auth_alg != ifsta->auth_alg ||
957 auth_transaction != ifsta->auth_transaction) {
958 printk(KERN_DEBUG "%s: unexpected authentication frame "
959 "(alg=%d transaction=%d)\n",
960 dev->name, auth_alg, auth_transaction);
964 if (status_code != WLAN_STATUS_SUCCESS) {
965 printk(KERN_DEBUG "%s: AP denied authentication (auth_alg=%d "
966 "code=%d)\n", dev->name, ifsta->auth_alg, status_code);
967 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
969 const int num_algs = ARRAY_SIZE(algs);
971 algs[0] = algs[1] = algs[2] = 0xff;
972 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
973 algs[0] = WLAN_AUTH_OPEN;
974 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
975 algs[1] = WLAN_AUTH_SHARED_KEY;
976 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
977 algs[2] = WLAN_AUTH_LEAP;
978 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
980 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
984 for (i = 0; i < num_algs; i++) {
988 if (algs[pos] == ifsta->auth_alg ||
991 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
992 !ieee80211_sta_wep_configured(dev))
994 ifsta->auth_alg = algs[pos];
995 printk(KERN_DEBUG "%s: set auth_alg=%d for "
997 dev->name, ifsta->auth_alg);
1004 switch (ifsta->auth_alg) {
1005 case WLAN_AUTH_OPEN:
1006 case WLAN_AUTH_LEAP:
1007 ieee80211_auth_completed(dev, ifsta);
1009 case WLAN_AUTH_SHARED_KEY:
1010 if (ifsta->auth_transaction == 4)
1011 ieee80211_auth_completed(dev, ifsta);
1013 ieee80211_auth_challenge(dev, ifsta, mgmt, len);
1019 static void ieee80211_rx_mgmt_deauth(struct net_device *dev,
1020 struct ieee80211_if_sta *ifsta,
1021 struct ieee80211_mgmt *mgmt,
1027 printk(KERN_DEBUG "%s: too short (%zd) deauthentication frame "
1028 "received from " MAC_FMT " - ignored\n",
1029 dev->name, len, MAC_ARG(mgmt->sa));
1033 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) {
1034 printk(KERN_DEBUG "%s: deauthentication frame received from "
1035 "unknown AP (SA=" MAC_FMT " BSSID=" MAC_FMT ") - "
1036 "ignored\n", dev->name, MAC_ARG(mgmt->sa),
1037 MAC_ARG(mgmt->bssid));
1041 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1043 printk(KERN_DEBUG "%s: RX deauthentication from " MAC_FMT
1045 dev->name, MAC_ARG(mgmt->sa), reason_code);
1047 if (ifsta->authenticated) {
1048 printk(KERN_DEBUG "%s: deauthenticated\n", dev->name);
1051 if (ifsta->state == IEEE80211_AUTHENTICATE ||
1052 ifsta->state == IEEE80211_ASSOCIATE ||
1053 ifsta->state == IEEE80211_ASSOCIATED) {
1054 ifsta->state = IEEE80211_AUTHENTICATE;
1055 mod_timer(&ifsta->timer, jiffies +
1056 IEEE80211_RETRY_AUTH_INTERVAL);
1059 ieee80211_set_disassoc(dev, ifsta, 1);
1060 ifsta->authenticated = 0;
1064 static void ieee80211_rx_mgmt_disassoc(struct net_device *dev,
1065 struct ieee80211_if_sta *ifsta,
1066 struct ieee80211_mgmt *mgmt,
1072 printk(KERN_DEBUG "%s: too short (%zd) disassociation frame "
1073 "received from " MAC_FMT " - ignored\n",
1074 dev->name, len, MAC_ARG(mgmt->sa));
1078 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) {
1079 printk(KERN_DEBUG "%s: disassociation frame received from "
1080 "unknown AP (SA=" MAC_FMT " BSSID=" MAC_FMT ") - "
1081 "ignored\n", dev->name, MAC_ARG(mgmt->sa),
1082 MAC_ARG(mgmt->bssid));
1086 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1088 printk(KERN_DEBUG "%s: RX disassociation from " MAC_FMT
1090 dev->name, MAC_ARG(mgmt->sa), reason_code);
1092 if (ifsta->associated)
1093 printk(KERN_DEBUG "%s: disassociated\n", dev->name);
1095 if (ifsta->state == IEEE80211_ASSOCIATED) {
1096 ifsta->state = IEEE80211_ASSOCIATE;
1097 mod_timer(&ifsta->timer, jiffies +
1098 IEEE80211_RETRY_AUTH_INTERVAL);
1101 ieee80211_set_disassoc(dev, ifsta, 0);
1105 static void ieee80211_rx_mgmt_assoc_resp(struct net_device *dev,
1106 struct ieee80211_if_sta *ifsta,
1107 struct ieee80211_mgmt *mgmt,
1111 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1112 struct ieee80211_hw_mode *mode;
1113 struct sta_info *sta;
1115 u16 capab_info, status_code, aid;
1116 struct ieee802_11_elems elems;
1120 /* AssocResp and ReassocResp have identical structure, so process both
1121 * of them in this function. */
1123 if (ifsta->state != IEEE80211_ASSOCIATE) {
1124 printk(KERN_DEBUG "%s: association frame received from "
1125 MAC_FMT ", but not in associate state - ignored\n",
1126 dev->name, MAC_ARG(mgmt->sa));
1131 printk(KERN_DEBUG "%s: too short (%zd) association frame "
1132 "received from " MAC_FMT " - ignored\n",
1133 dev->name, len, MAC_ARG(mgmt->sa));
1137 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0) {
1138 printk(KERN_DEBUG "%s: association frame received from "
1139 "unknown AP (SA=" MAC_FMT " BSSID=" MAC_FMT ") - "
1140 "ignored\n", dev->name, MAC_ARG(mgmt->sa),
1141 MAC_ARG(mgmt->bssid));
1145 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1146 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1147 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
1148 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1149 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
1150 "set\n", dev->name, aid);
1151 aid &= ~(BIT(15) | BIT(14));
1153 printk(KERN_DEBUG "%s: RX %sssocResp from " MAC_FMT " (capab=0x%x "
1154 "status=%d aid=%d)\n",
1155 dev->name, reassoc ? "Rea" : "A", MAC_ARG(mgmt->sa),
1156 capab_info, status_code, aid);
1158 if (status_code != WLAN_STATUS_SUCCESS) {
1159 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
1160 dev->name, status_code);
1161 if (status_code == WLAN_STATUS_REASSOC_NO_ASSOC)
1162 ifsta->prev_bssid_set = 0;
1166 pos = mgmt->u.assoc_resp.variable;
1167 if (ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems)
1169 printk(KERN_DEBUG "%s: failed to parse AssocResp\n",
1174 if (!elems.supp_rates) {
1175 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
1180 printk(KERN_DEBUG "%s: associated\n", dev->name);
1182 ifsta->ap_capab = capab_info;
1184 kfree(ifsta->assocresp_ies);
1185 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
1186 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_ATOMIC);
1187 if (ifsta->assocresp_ies)
1188 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1190 ieee80211_set_associated(dev, ifsta, 1);
1192 /* Add STA entry for the AP */
1193 sta = sta_info_get(local, ifsta->bssid);
1195 struct ieee80211_sta_bss *bss;
1196 sta = sta_info_add(local, dev, ifsta->bssid, GFP_ATOMIC);
1198 printk(KERN_DEBUG "%s: failed to add STA entry for the"
1199 " AP\n", dev->name);
1202 bss = ieee80211_rx_bss_get(dev, ifsta->bssid);
1204 sta->last_rssi = bss->rssi;
1205 sta->last_signal = bss->signal;
1206 sta->last_noise = bss->noise;
1207 ieee80211_rx_bss_put(dev, bss);
1212 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
1216 mode = local->oper_hw_mode;
1217 for (i = 0; i < elems.supp_rates_len; i++) {
1218 int rate = (elems.supp_rates[i] & 0x7f) * 5;
1219 if (mode->mode == MODE_ATHEROS_TURBO)
1221 for (j = 0; j < mode->num_rates; j++)
1222 if (mode->rates[j].rate == rate)
1225 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1226 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
1227 if (mode->mode == MODE_ATHEROS_TURBO)
1229 for (j = 0; j < mode->num_rates; j++)
1230 if (mode->rates[j].rate == rate)
1233 sta->supp_rates = rates;
1235 rate_control_rate_init(sta, local);
1237 if (elems.wmm_param && ifsta->wmm_enabled) {
1238 sta->flags |= WLAN_STA_WME;
1239 ieee80211_sta_wmm_params(dev, ifsta, elems.wmm_param,
1240 elems.wmm_param_len);
1246 ieee80211_associated(dev, ifsta);
1250 /* Caller must hold local->sta_bss_lock */
1251 static void __ieee80211_rx_bss_hash_add(struct net_device *dev,
1252 struct ieee80211_sta_bss *bss)
1254 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1255 bss->hnext = local->sta_bss_hash[STA_HASH(bss->bssid)];
1256 local->sta_bss_hash[STA_HASH(bss->bssid)] = bss;
1260 /* Caller must hold local->sta_bss_lock */
1261 static void __ieee80211_rx_bss_hash_del(struct net_device *dev,
1262 struct ieee80211_sta_bss *bss)
1264 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1265 struct ieee80211_sta_bss *b, *prev = NULL;
1266 b = local->sta_bss_hash[STA_HASH(bss->bssid)];
1270 local->sta_bss_hash[STA_HASH(bss->bssid)] =
1273 prev->hnext = bss->hnext;
1282 static struct ieee80211_sta_bss *
1283 ieee80211_rx_bss_add(struct net_device *dev, u8 *bssid)
1285 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1286 struct ieee80211_sta_bss *bss;
1288 bss = kmalloc(sizeof(*bss), GFP_ATOMIC);
1291 memset(bss, 0, sizeof(*bss));
1292 atomic_inc(&bss->users);
1293 atomic_inc(&bss->users);
1294 memcpy(bss->bssid, bssid, ETH_ALEN);
1296 spin_lock_bh(&local->sta_bss_lock);
1297 /* TODO: order by RSSI? */
1298 list_add_tail(&bss->list, &local->sta_bss_list);
1299 __ieee80211_rx_bss_hash_add(dev, bss);
1300 spin_unlock_bh(&local->sta_bss_lock);
1305 static struct ieee80211_sta_bss *
1306 ieee80211_rx_bss_get(struct net_device *dev, u8 *bssid)
1308 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1309 struct ieee80211_sta_bss *bss;
1311 spin_lock_bh(&local->sta_bss_lock);
1312 bss = local->sta_bss_hash[STA_HASH(bssid)];
1314 if (memcmp(bss->bssid, bssid, ETH_ALEN) == 0) {
1315 atomic_inc(&bss->users);
1320 spin_unlock_bh(&local->sta_bss_lock);
1325 static void ieee80211_rx_bss_free(struct ieee80211_sta_bss *bss)
1334 static void ieee80211_rx_bss_put(struct net_device *dev,
1335 struct ieee80211_sta_bss *bss)
1337 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1338 if (!atomic_dec_and_test(&bss->users))
1341 spin_lock_bh(&local->sta_bss_lock);
1342 __ieee80211_rx_bss_hash_del(dev, bss);
1343 list_del(&bss->list);
1344 spin_unlock_bh(&local->sta_bss_lock);
1345 ieee80211_rx_bss_free(bss);
1349 void ieee80211_rx_bss_list_init(struct net_device *dev)
1351 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1352 spin_lock_init(&local->sta_bss_lock);
1353 INIT_LIST_HEAD(&local->sta_bss_list);
1357 void ieee80211_rx_bss_list_deinit(struct net_device *dev)
1359 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1360 struct ieee80211_sta_bss *bss, *tmp;
1362 list_for_each_entry_safe(bss, tmp, &local->sta_bss_list, list)
1363 ieee80211_rx_bss_put(dev, bss);
1367 static void ieee80211_rx_bss_info(struct net_device *dev,
1368 struct ieee80211_mgmt *mgmt,
1370 struct ieee80211_rx_status *rx_status,
1373 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1374 struct ieee802_11_elems elems;
1376 int channel, invalid = 0, clen;
1377 struct ieee80211_sta_bss *bss;
1378 struct sta_info *sta;
1379 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1382 if (!beacon && memcmp(mgmt->da, dev->dev_addr, ETH_ALEN))
1383 return; /* ignore ProbeResp to foreign address */
1386 printk(KERN_DEBUG "%s: RX %s from " MAC_FMT " to " MAC_FMT "\n",
1387 dev->name, beacon ? "Beacon" : "Probe Response",
1388 MAC_ARG(mgmt->sa), MAC_ARG(mgmt->da));
1391 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1395 timestamp = le64_to_cpu(mgmt->u.beacon.timestamp);
1397 if (sdata->type == IEEE80211_IF_TYPE_IBSS && beacon &&
1398 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1399 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1400 static unsigned long last_tsf_debug = 0;
1402 if (local->ops->get_tsf)
1403 tsf = local->ops->get_tsf(local_to_hw(local));
1406 if (time_after(jiffies, last_tsf_debug + 5 * HZ)) {
1407 printk(KERN_DEBUG "RX beacon SA=" MAC_FMT " BSSID="
1408 MAC_FMT " TSF=0x%llx BCN=0x%llx diff=%lld "
1410 MAC_ARG(mgmt->sa), MAC_ARG(mgmt->bssid),
1411 (unsigned long long)tsf,
1412 (unsigned long long)timestamp,
1413 (unsigned long long)(tsf - timestamp),
1415 last_tsf_debug = jiffies;
1417 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1420 if (ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen,
1421 &elems) == ParseFailed)
1424 if (sdata->type == IEEE80211_IF_TYPE_IBSS && elems.supp_rates &&
1425 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0 &&
1426 (sta = sta_info_get(local, mgmt->sa))) {
1427 struct ieee80211_hw_mode *mode;
1428 struct ieee80211_rate *rates;
1430 u32 supp_rates, prev_rates;
1433 mode = local->sta_scanning ?
1434 local->scan_hw_mode : local->oper_hw_mode;
1435 rates = mode->rates;
1436 num_rates = mode->num_rates;
1439 for (i = 0; i < elems.supp_rates_len +
1440 elems.ext_supp_rates_len; i++) {
1443 if (i < elems.supp_rates_len)
1444 rate = elems.supp_rates[i];
1445 else if (elems.ext_supp_rates)
1446 rate = elems.ext_supp_rates
1447 [i - elems.supp_rates_len];
1448 own_rate = 5 * (rate & 0x7f);
1449 if (mode->mode == MODE_ATHEROS_TURBO)
1451 for (j = 0; j < num_rates; j++)
1452 if (rates[j].rate == own_rate)
1453 supp_rates |= BIT(j);
1456 prev_rates = sta->supp_rates;
1457 sta->supp_rates &= supp_rates;
1458 if (sta->supp_rates == 0) {
1459 /* No matching rates - this should not really happen.
1460 * Make sure that at least one rate is marked
1461 * supported to avoid issues with TX rate ctrl. */
1462 sta->supp_rates = sdata->u.sta.supp_rates_bits;
1464 if (sta->supp_rates != prev_rates) {
1465 printk(KERN_DEBUG "%s: updated supp_rates set for "
1466 MAC_FMT " based on beacon info (0x%x & 0x%x -> "
1468 dev->name, MAC_ARG(sta->addr), prev_rates,
1469 supp_rates, sta->supp_rates);
1477 if (elems.ds_params && elems.ds_params_len == 1)
1478 channel = elems.ds_params[0];
1480 channel = rx_status->channel;
1482 bss = ieee80211_rx_bss_get(dev, mgmt->bssid);
1484 bss = ieee80211_rx_bss_add(dev, mgmt->bssid);
1489 /* TODO: order by RSSI? */
1490 spin_lock_bh(&local->sta_bss_lock);
1491 list_move_tail(&bss->list, &local->sta_bss_list);
1492 spin_unlock_bh(&local->sta_bss_lock);
1496 if (bss->probe_resp && beacon) {
1497 /* Do not allow beacon to override data from Probe Response. */
1498 ieee80211_rx_bss_put(dev, bss);
1502 bss->beacon_int = le16_to_cpu(mgmt->u.beacon.beacon_int);
1503 bss->capability = le16_to_cpu(mgmt->u.beacon.capab_info);
1504 if (elems.ssid && elems.ssid_len <= IEEE80211_MAX_SSID_LEN) {
1505 memcpy(bss->ssid, elems.ssid, elems.ssid_len);
1506 bss->ssid_len = elems.ssid_len;
1509 bss->supp_rates_len = 0;
1510 if (elems.supp_rates) {
1511 clen = IEEE80211_MAX_SUPP_RATES - bss->supp_rates_len;
1512 if (clen > elems.supp_rates_len)
1513 clen = elems.supp_rates_len;
1514 memcpy(&bss->supp_rates[bss->supp_rates_len], elems.supp_rates,
1516 bss->supp_rates_len += clen;
1518 if (elems.ext_supp_rates) {
1519 clen = IEEE80211_MAX_SUPP_RATES - bss->supp_rates_len;
1520 if (clen > elems.ext_supp_rates_len)
1521 clen = elems.ext_supp_rates_len;
1522 memcpy(&bss->supp_rates[bss->supp_rates_len],
1523 elems.ext_supp_rates, clen);
1524 bss->supp_rates_len += clen;
1528 (!bss->wpa_ie || bss->wpa_ie_len != elems.wpa_len ||
1529 memcmp(bss->wpa_ie, elems.wpa, elems.wpa_len))) {
1531 bss->wpa_ie = kmalloc(elems.wpa_len + 2, GFP_ATOMIC);
1533 memcpy(bss->wpa_ie, elems.wpa - 2, elems.wpa_len + 2);
1534 bss->wpa_ie_len = elems.wpa_len + 2;
1536 bss->wpa_ie_len = 0;
1537 } else if (!elems.wpa && bss->wpa_ie) {
1540 bss->wpa_ie_len = 0;
1544 (!bss->rsn_ie || bss->rsn_ie_len != elems.rsn_len ||
1545 memcmp(bss->rsn_ie, elems.rsn, elems.rsn_len))) {
1547 bss->rsn_ie = kmalloc(elems.rsn_len + 2, GFP_ATOMIC);
1549 memcpy(bss->rsn_ie, elems.rsn - 2, elems.rsn_len + 2);
1550 bss->rsn_ie_len = elems.rsn_len + 2;
1552 bss->rsn_ie_len = 0;
1553 } else if (!elems.rsn && bss->rsn_ie) {
1556 bss->rsn_ie_len = 0;
1559 if (elems.wmm_param &&
1560 (!bss->wmm_ie || bss->wmm_ie_len != elems.wmm_param_len ||
1561 memcmp(bss->wmm_ie, elems.wmm_param, elems.wmm_param_len))) {
1563 bss->wmm_ie = kmalloc(elems.wmm_param_len + 2, GFP_ATOMIC);
1565 memcpy(bss->wmm_ie, elems.wmm_param - 2,
1566 elems.wmm_param_len + 2);
1567 bss->wmm_ie_len = elems.wmm_param_len + 2;
1569 bss->wmm_ie_len = 0;
1570 } else if (!elems.wmm_param && bss->wmm_ie) {
1573 bss->wmm_ie_len = 0;
1577 bss->hw_mode = rx_status->phymode;
1578 bss->channel = channel;
1579 bss->freq = rx_status->freq;
1580 if (channel != rx_status->channel &&
1581 (bss->hw_mode == MODE_IEEE80211G ||
1582 bss->hw_mode == MODE_IEEE80211B) &&
1583 channel >= 1 && channel <= 14) {
1584 static const int freq_list[] = {
1585 2412, 2417, 2422, 2427, 2432, 2437, 2442,
1586 2447, 2452, 2457, 2462, 2467, 2472, 2484
1588 /* IEEE 802.11g/b mode can receive packets from neighboring
1589 * channels, so map the channel into frequency. */
1590 bss->freq = freq_list[channel - 1];
1592 bss->timestamp = timestamp;
1593 bss->last_update = jiffies;
1594 bss->rssi = rx_status->ssi;
1595 bss->signal = rx_status->signal;
1596 bss->noise = rx_status->noise;
1599 ieee80211_rx_bss_put(dev, bss);
1603 static void ieee80211_rx_mgmt_probe_resp(struct net_device *dev,
1604 struct ieee80211_mgmt *mgmt,
1606 struct ieee80211_rx_status *rx_status)
1608 ieee80211_rx_bss_info(dev, mgmt, len, rx_status, 0);
1612 static void ieee80211_rx_mgmt_beacon(struct net_device *dev,
1613 struct ieee80211_mgmt *mgmt,
1615 struct ieee80211_rx_status *rx_status)
1617 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1618 struct ieee80211_sub_if_data *sdata;
1619 struct ieee80211_if_sta *ifsta;
1622 struct ieee802_11_elems elems;
1624 ieee80211_rx_bss_info(dev, mgmt, len, rx_status, 1);
1626 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1627 if (sdata->type != IEEE80211_IF_TYPE_STA)
1629 ifsta = &sdata->u.sta;
1631 if (!ifsta->associated ||
1632 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1635 /* Process beacon from the current BSS */
1636 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1640 if (ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen,
1641 &elems) == ParseFailed)
1645 if (elems.erp_info && elems.erp_info_len >= 1) {
1647 (elems.erp_info[0] & ERP_INFO_USE_PROTECTION) != 0;
1650 if (use_protection != !!ifsta->use_protection) {
1651 if (net_ratelimit()) {
1652 printk(KERN_DEBUG "%s: CTS protection %s (BSSID="
1655 use_protection ? "enabled" : "disabled",
1656 MAC_ARG(ifsta->bssid));
1658 ifsta->use_protection = use_protection ? 1 : 0;
1659 local->cts_protect_erp_frames = use_protection;
1662 if (elems.wmm_param && ifsta->wmm_enabled) {
1663 ieee80211_sta_wmm_params(dev, ifsta, elems.wmm_param,
1664 elems.wmm_param_len);
1669 static void ieee80211_rx_mgmt_probe_req(struct net_device *dev,
1670 struct ieee80211_if_sta *ifsta,
1671 struct ieee80211_mgmt *mgmt,
1673 struct ieee80211_rx_status *rx_status)
1675 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1676 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1678 struct sk_buff *skb;
1679 struct ieee80211_mgmt *resp;
1682 if (sdata->type != IEEE80211_IF_TYPE_IBSS ||
1683 ifsta->state != IEEE80211_IBSS_JOINED ||
1684 len < 24 + 2 || !ifsta->probe_resp)
1687 if (local->ops->tx_last_beacon)
1688 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
1692 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1693 printk(KERN_DEBUG "%s: RX ProbeReq SA=" MAC_FMT " DA=" MAC_FMT " BSSID="
1694 MAC_FMT " (tx_last_beacon=%d)\n",
1695 dev->name, MAC_ARG(mgmt->sa), MAC_ARG(mgmt->da),
1696 MAC_ARG(mgmt->bssid), tx_last_beacon);
1697 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1699 if (!tx_last_beacon)
1702 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
1703 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
1706 end = ((u8 *) mgmt) + len;
1707 pos = mgmt->u.probe_req.variable;
1708 if (pos[0] != WLAN_EID_SSID ||
1709 pos + 2 + pos[1] > end) {
1710 if (net_ratelimit()) {
1711 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
1712 "from " MAC_FMT "\n",
1713 dev->name, MAC_ARG(mgmt->sa));
1718 (pos[1] != ifsta->ssid_len ||
1719 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
1720 /* Ignore ProbeReq for foreign SSID */
1724 /* Reply with ProbeResp */
1725 skb = skb_copy(ifsta->probe_resp, GFP_ATOMIC);
1729 resp = (struct ieee80211_mgmt *) skb->data;
1730 memcpy(resp->da, mgmt->sa, ETH_ALEN);
1731 #ifdef CONFIG_MAC80211_IBSS_DEBUG
1732 printk(KERN_DEBUG "%s: Sending ProbeResp to " MAC_FMT "\n",
1733 dev->name, MAC_ARG(resp->da));
1734 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
1735 ieee80211_sta_tx(dev, skb, 0);
1739 void ieee80211_sta_rx_mgmt(struct net_device *dev, struct sk_buff *skb,
1740 struct ieee80211_rx_status *rx_status)
1742 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1743 struct ieee80211_sub_if_data *sdata;
1744 struct ieee80211_if_sta *ifsta;
1745 struct ieee80211_mgmt *mgmt;
1751 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1752 ifsta = &sdata->u.sta;
1754 mgmt = (struct ieee80211_mgmt *) skb->data;
1755 fc = le16_to_cpu(mgmt->frame_control);
1757 switch (fc & IEEE80211_FCTL_STYPE) {
1758 case IEEE80211_STYPE_PROBE_REQ:
1759 case IEEE80211_STYPE_PROBE_RESP:
1760 case IEEE80211_STYPE_BEACON:
1761 memcpy(skb->cb, rx_status, sizeof(*rx_status));
1762 case IEEE80211_STYPE_AUTH:
1763 case IEEE80211_STYPE_ASSOC_RESP:
1764 case IEEE80211_STYPE_REASSOC_RESP:
1765 case IEEE80211_STYPE_DEAUTH:
1766 case IEEE80211_STYPE_DISASSOC:
1767 skb_queue_tail(&ifsta->skb_queue, skb);
1768 queue_work(local->hw.workqueue, &ifsta->work);
1771 printk(KERN_DEBUG "%s: received unknown management frame - "
1772 "stype=%d\n", dev->name,
1773 (fc & IEEE80211_FCTL_STYPE) >> 4);
1782 static void ieee80211_sta_rx_queued_mgmt(struct net_device *dev,
1783 struct sk_buff *skb)
1785 struct ieee80211_rx_status *rx_status;
1786 struct ieee80211_sub_if_data *sdata;
1787 struct ieee80211_if_sta *ifsta;
1788 struct ieee80211_mgmt *mgmt;
1791 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1792 ifsta = &sdata->u.sta;
1794 rx_status = (struct ieee80211_rx_status *) skb->cb;
1795 mgmt = (struct ieee80211_mgmt *) skb->data;
1796 fc = le16_to_cpu(mgmt->frame_control);
1798 switch (fc & IEEE80211_FCTL_STYPE) {
1799 case IEEE80211_STYPE_PROBE_REQ:
1800 ieee80211_rx_mgmt_probe_req(dev, ifsta, mgmt, skb->len,
1803 case IEEE80211_STYPE_PROBE_RESP:
1804 ieee80211_rx_mgmt_probe_resp(dev, mgmt, skb->len, rx_status);
1806 case IEEE80211_STYPE_BEACON:
1807 ieee80211_rx_mgmt_beacon(dev, mgmt, skb->len, rx_status);
1809 case IEEE80211_STYPE_AUTH:
1810 ieee80211_rx_mgmt_auth(dev, ifsta, mgmt, skb->len);
1812 case IEEE80211_STYPE_ASSOC_RESP:
1813 ieee80211_rx_mgmt_assoc_resp(dev, ifsta, mgmt, skb->len, 0);
1815 case IEEE80211_STYPE_REASSOC_RESP:
1816 ieee80211_rx_mgmt_assoc_resp(dev, ifsta, mgmt, skb->len, 1);
1818 case IEEE80211_STYPE_DEAUTH:
1819 ieee80211_rx_mgmt_deauth(dev, ifsta, mgmt, skb->len);
1821 case IEEE80211_STYPE_DISASSOC:
1822 ieee80211_rx_mgmt_disassoc(dev, ifsta, mgmt, skb->len);
1830 void ieee80211_sta_rx_scan(struct net_device *dev, struct sk_buff *skb,
1831 struct ieee80211_rx_status *rx_status)
1833 struct ieee80211_mgmt *mgmt;
1836 if (skb->len < 24) {
1841 mgmt = (struct ieee80211_mgmt *) skb->data;
1842 fc = le16_to_cpu(mgmt->frame_control);
1844 if ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT) {
1845 if ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP) {
1846 ieee80211_rx_mgmt_probe_resp(dev, mgmt,
1847 skb->len, rx_status);
1848 } else if ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_BEACON) {
1849 ieee80211_rx_mgmt_beacon(dev, mgmt, skb->len,
1858 static int ieee80211_sta_active_ibss(struct net_device *dev)
1860 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1862 struct sta_info *sta;
1864 spin_lock_bh(&local->sta_lock);
1865 list_for_each_entry(sta, &local->sta_list, list) {
1866 if (sta->dev == dev &&
1867 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
1873 spin_unlock_bh(&local->sta_lock);
1879 static void ieee80211_sta_expire(struct net_device *dev)
1881 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1882 struct sta_info *sta, *tmp;
1884 spin_lock_bh(&local->sta_lock);
1885 list_for_each_entry_safe(sta, tmp, &local->sta_list, list)
1886 if (time_after(jiffies, sta->last_rx +
1887 IEEE80211_IBSS_INACTIVITY_LIMIT)) {
1888 printk(KERN_DEBUG "%s: expiring inactive STA " MAC_FMT
1889 "\n", dev->name, MAC_ARG(sta->addr));
1890 sta_info_free(sta, 1);
1892 spin_unlock_bh(&local->sta_lock);
1896 static void ieee80211_sta_merge_ibss(struct net_device *dev,
1897 struct ieee80211_if_sta *ifsta)
1899 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1901 ieee80211_sta_expire(dev);
1902 if (ieee80211_sta_active_ibss(dev))
1905 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
1906 "IBSS networks with same SSID (merge)\n", dev->name);
1907 ieee80211_sta_req_scan(dev, ifsta->ssid, ifsta->ssid_len);
1911 void ieee80211_sta_timer(unsigned long data)
1913 struct ieee80211_sub_if_data *sdata =
1914 (struct ieee80211_sub_if_data *) data;
1915 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
1916 struct ieee80211_local *local = wdev_priv(&sdata->wdev);
1918 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
1919 queue_work(local->hw.workqueue, &ifsta->work);
1923 void ieee80211_sta_work(struct work_struct *work)
1925 struct ieee80211_sub_if_data *sdata =
1926 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
1927 struct net_device *dev = sdata->dev;
1928 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
1929 struct ieee80211_if_sta *ifsta;
1930 struct sk_buff *skb;
1932 if (!netif_running(dev))
1935 if (local->sta_scanning)
1938 if (sdata->type != IEEE80211_IF_TYPE_STA &&
1939 sdata->type != IEEE80211_IF_TYPE_IBSS) {
1940 printk(KERN_DEBUG "%s: ieee80211_sta_work: non-STA interface "
1941 "(type=%d)\n", dev->name, sdata->type);
1944 ifsta = &sdata->u.sta;
1946 while ((skb = skb_dequeue(&ifsta->skb_queue)))
1947 ieee80211_sta_rx_queued_mgmt(dev, skb);
1949 if (ifsta->state != IEEE80211_AUTHENTICATE &&
1950 ifsta->state != IEEE80211_ASSOCIATE &&
1951 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
1952 ieee80211_sta_start_scan(dev, NULL, 0);
1956 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
1957 if (ieee80211_sta_config_auth(dev, ifsta))
1959 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
1960 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
1963 switch (ifsta->state) {
1964 case IEEE80211_DISABLED:
1966 case IEEE80211_AUTHENTICATE:
1967 ieee80211_authenticate(dev, ifsta);
1969 case IEEE80211_ASSOCIATE:
1970 ieee80211_associate(dev, ifsta);
1972 case IEEE80211_ASSOCIATED:
1973 ieee80211_associated(dev, ifsta);
1975 case IEEE80211_IBSS_SEARCH:
1976 ieee80211_sta_find_ibss(dev, ifsta);
1978 case IEEE80211_IBSS_JOINED:
1979 ieee80211_sta_merge_ibss(dev, ifsta);
1982 printk(KERN_DEBUG "ieee80211_sta_work: Unknown state %d\n",
1987 if (ieee80211_privacy_mismatch(dev, ifsta)) {
1988 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
1989 "mixed-cell disabled - disassociate\n", dev->name);
1991 ieee80211_send_disassoc(dev, ifsta, WLAN_REASON_UNSPECIFIED);
1992 ieee80211_set_disassoc(dev, ifsta, 0);
1997 static void ieee80211_sta_reset_auth(struct net_device *dev,
1998 struct ieee80211_if_sta *ifsta)
2000 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2002 if (local->ops->reset_tsf) {
2003 /* Reset own TSF to allow time synchronization work. */
2004 local->ops->reset_tsf(local_to_hw(local));
2007 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2010 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2011 ifsta->auth_alg = WLAN_AUTH_OPEN;
2012 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2013 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2014 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2015 ifsta->auth_alg = WLAN_AUTH_LEAP;
2017 ifsta->auth_alg = WLAN_AUTH_OPEN;
2018 printk(KERN_DEBUG "%s: Initial auth_alg=%d\n", dev->name,
2020 ifsta->auth_transaction = -1;
2021 ifsta->associated = ifsta->auth_tries = ifsta->assoc_tries = 0;
2022 netif_carrier_off(dev);
2026 void ieee80211_sta_req_auth(struct net_device *dev,
2027 struct ieee80211_if_sta *ifsta)
2029 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2030 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2032 if (sdata->type != IEEE80211_IF_TYPE_STA)
2035 if ((ifsta->bssid_set || ifsta->auto_bssid_sel) &&
2036 (ifsta->ssid_set || ifsta->auto_ssid_sel)) {
2037 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2038 queue_work(local->hw.workqueue, &ifsta->work);
2042 static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2043 const char *ssid, int ssid_len)
2045 int tmp, hidden_ssid;
2047 if (!memcmp(ifsta->ssid, ssid, ssid_len))
2050 if (ifsta->auto_bssid_sel)
2056 if (ssid[tmp] != '\0') {
2062 if (hidden_ssid && ifsta->ssid_len == ssid_len)
2065 if (ssid_len == 1 && ssid[0] == ' ')
2071 static int ieee80211_sta_config_auth(struct net_device *dev,
2072 struct ieee80211_if_sta *ifsta)
2074 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2075 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2076 struct ieee80211_sta_bss *bss, *selected = NULL;
2077 int top_rssi = 0, freq;
2081 if (!ifsta->auto_channel_sel && !ifsta->auto_bssid_sel &&
2082 !ifsta->auto_ssid_sel) {
2083 ifsta->state = IEEE80211_AUTHENTICATE;
2085 ieee80211_sta_reset_auth(dev, ifsta);
2089 spin_lock_bh(&local->sta_bss_lock);
2090 freq = local->oper_channel->freq;
2091 list_for_each_entry(bss, &local->sta_bss_list, list) {
2092 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2095 if (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2096 !!sdata->default_key)
2099 if (!ifsta->auto_channel_sel && bss->freq != freq)
2102 if (!ifsta->auto_bssid_sel &&
2103 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2106 if (!ifsta->auto_ssid_sel &&
2107 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2110 if (!selected || top_rssi < bss->rssi) {
2112 top_rssi = bss->rssi;
2116 atomic_inc(&selected->users);
2117 spin_unlock_bh(&local->sta_bss_lock);
2120 ieee80211_set_channel(local, -1, selected->freq);
2121 if (!ifsta->ssid_set)
2122 ieee80211_sta_set_ssid(dev, selected->ssid,
2123 selected->ssid_len);
2124 ieee80211_sta_set_bssid(dev, selected->bssid);
2125 ieee80211_rx_bss_put(dev, selected);
2126 ifsta->state = IEEE80211_AUTHENTICATE;
2128 ieee80211_sta_reset_auth(dev, ifsta);
2131 if (ifsta->state != IEEE80211_AUTHENTICATE) {
2132 ieee80211_sta_start_scan(dev, NULL, 0);
2133 ifsta->state = IEEE80211_AUTHENTICATE;
2134 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2136 ifsta->state = IEEE80211_DISABLED;
2142 static int ieee80211_sta_join_ibss(struct net_device *dev,
2143 struct ieee80211_if_sta *ifsta,
2144 struct ieee80211_sta_bss *bss)
2146 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2147 int res, rates, i, j;
2148 struct sk_buff *skb;
2149 struct ieee80211_mgmt *mgmt;
2150 struct ieee80211_tx_control control;
2151 struct ieee80211_rate *rate;
2152 struct ieee80211_hw_mode *mode;
2153 struct rate_control_extra extra;
2155 struct ieee80211_sub_if_data *sdata;
2157 /* Remove possible STA entries from other IBSS networks. */
2158 sta_info_flush(local, NULL);
2160 if (local->ops->reset_tsf) {
2161 /* Reset own TSF to allow time synchronization work. */
2162 local->ops->reset_tsf(local_to_hw(local));
2164 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
2165 res = ieee80211_if_config(dev);
2169 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
2171 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2172 sdata->drop_unencrypted = bss->capability &
2173 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
2175 res = ieee80211_set_channel(local, -1, bss->freq);
2177 if (!(local->oper_channel->flag & IEEE80211_CHAN_W_IBSS)) {
2178 printk(KERN_DEBUG "%s: IBSS not allowed on channel %d "
2179 "(%d MHz)\n", dev->name, local->hw.conf.channel,
2180 local->hw.conf.freq);
2184 /* Set beacon template based on scan results */
2185 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
2190 skb_reserve(skb, local->hw.extra_tx_headroom);
2192 mgmt = (struct ieee80211_mgmt *)
2193 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
2194 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
2195 mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
2196 IEEE80211_STYPE_BEACON);
2197 memset(mgmt->da, 0xff, ETH_ALEN);
2198 memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
2199 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
2200 mgmt->u.beacon.beacon_int =
2201 cpu_to_le16(local->hw.conf.beacon_int);
2202 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
2204 pos = skb_put(skb, 2 + ifsta->ssid_len);
2205 *pos++ = WLAN_EID_SSID;
2206 *pos++ = ifsta->ssid_len;
2207 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
2209 rates = bss->supp_rates_len;
2212 pos = skb_put(skb, 2 + rates);
2213 *pos++ = WLAN_EID_SUPP_RATES;
2215 memcpy(pos, bss->supp_rates, rates);
2217 pos = skb_put(skb, 2 + 1);
2218 *pos++ = WLAN_EID_DS_PARAMS;
2220 *pos++ = bss->channel;
2222 pos = skb_put(skb, 2 + 2);
2223 *pos++ = WLAN_EID_IBSS_PARAMS;
2225 /* FIX: set ATIM window based on scan results */
2229 if (bss->supp_rates_len > 8) {
2230 rates = bss->supp_rates_len - 8;
2231 pos = skb_put(skb, 2 + rates);
2232 *pos++ = WLAN_EID_EXT_SUPP_RATES;
2234 memcpy(pos, &bss->supp_rates[8], rates);
2237 memset(&control, 0, sizeof(control));
2238 memset(&extra, 0, sizeof(extra));
2239 extra.mode = local->oper_hw_mode;
2240 rate = rate_control_get_rate(local, dev, skb, &extra);
2242 printk(KERN_DEBUG "%s: Failed to determine TX rate "
2243 "for IBSS beacon\n", dev->name);
2246 control.tx_rate = (local->short_preamble &&
2247 (rate->flags & IEEE80211_RATE_PREAMBLE2)) ?
2248 rate->val2 : rate->val;
2249 control.antenna_sel_tx = local->hw.conf.antenna_sel_tx;
2250 control.power_level = local->hw.conf.power_level;
2251 control.flags |= IEEE80211_TXCTL_NO_ACK;
2252 control.retry_limit = 1;
2254 ifsta->probe_resp = skb_copy(skb, GFP_ATOMIC);
2255 if (ifsta->probe_resp) {
2256 mgmt = (struct ieee80211_mgmt *)
2257 ifsta->probe_resp->data;
2258 mgmt->frame_control =
2259 IEEE80211_FC(IEEE80211_FTYPE_MGMT,
2260 IEEE80211_STYPE_PROBE_RESP);
2262 printk(KERN_DEBUG "%s: Could not allocate ProbeResp "
2263 "template for IBSS\n", dev->name);
2266 if (local->ops->beacon_update &&
2267 local->ops->beacon_update(local_to_hw(local),
2268 skb, &control) == 0) {
2269 printk(KERN_DEBUG "%s: Configured IBSS beacon "
2270 "template based on scan results\n", dev->name);
2275 mode = local->oper_hw_mode;
2276 for (i = 0; i < bss->supp_rates_len; i++) {
2277 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
2278 if (mode->mode == MODE_ATHEROS_TURBO)
2280 for (j = 0; j < mode->num_rates; j++)
2281 if (mode->rates[j].rate == bitrate)
2284 ifsta->supp_rates_bits = rates;
2288 printk(KERN_DEBUG "%s: Failed to configure IBSS beacon "
2289 "template\n", dev->name);
2293 ifsta->state = IEEE80211_IBSS_JOINED;
2294 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2296 ieee80211_rx_bss_put(dev, bss);
2302 static int ieee80211_sta_create_ibss(struct net_device *dev,
2303 struct ieee80211_if_sta *ifsta)
2305 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2306 struct ieee80211_sta_bss *bss;
2307 struct ieee80211_sub_if_data *sdata;
2308 struct ieee80211_hw_mode *mode;
2309 u8 bssid[ETH_ALEN], *pos;
2313 /* Easier testing, use fixed BSSID. */
2314 memset(bssid, 0xfe, ETH_ALEN);
2316 /* Generate random, not broadcast, locally administered BSSID. Mix in
2317 * own MAC address to make sure that devices that do not have proper
2318 * random number generator get different BSSID. */
2319 get_random_bytes(bssid, ETH_ALEN);
2320 for (i = 0; i < ETH_ALEN; i++)
2321 bssid[i] ^= dev->dev_addr[i];
2326 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID " MAC_FMT "\n",
2327 dev->name, MAC_ARG(bssid));
2329 bss = ieee80211_rx_bss_add(dev, bssid);
2333 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2334 mode = local->oper_hw_mode;
2336 if (local->hw.conf.beacon_int == 0)
2337 local->hw.conf.beacon_int = 100;
2338 bss->beacon_int = local->hw.conf.beacon_int;
2339 bss->hw_mode = local->hw.conf.phymode;
2340 bss->channel = local->hw.conf.channel;
2341 bss->freq = local->hw.conf.freq;
2342 bss->last_update = jiffies;
2343 bss->capability = WLAN_CAPABILITY_IBSS;
2344 if (sdata->default_key) {
2345 bss->capability |= WLAN_CAPABILITY_PRIVACY;
2347 sdata->drop_unencrypted = 0;
2348 bss->supp_rates_len = mode->num_rates;
2349 pos = bss->supp_rates;
2350 for (i = 0; i < mode->num_rates; i++) {
2351 int rate = mode->rates[i].rate;
2352 if (mode->mode == MODE_ATHEROS_TURBO)
2354 *pos++ = (u8) (rate / 5);
2357 return ieee80211_sta_join_ibss(dev, ifsta, bss);
2361 static int ieee80211_sta_find_ibss(struct net_device *dev,
2362 struct ieee80211_if_sta *ifsta)
2364 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2365 struct ieee80211_sta_bss *bss;
2370 if (ifsta->ssid_len == 0)
2373 active_ibss = ieee80211_sta_active_ibss(dev);
2374 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2375 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
2376 dev->name, active_ibss);
2377 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2378 spin_lock_bh(&local->sta_bss_lock);
2379 list_for_each_entry(bss, &local->sta_bss_list, list) {
2380 if (ifsta->ssid_len != bss->ssid_len ||
2381 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2382 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2384 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2385 printk(KERN_DEBUG " bssid=" MAC_FMT " found\n",
2386 MAC_ARG(bss->bssid));
2387 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2388 memcpy(bssid, bss->bssid, ETH_ALEN);
2390 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2393 spin_unlock_bh(&local->sta_bss_lock);
2395 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2396 printk(KERN_DEBUG " sta_find_ibss: selected " MAC_FMT " current "
2397 MAC_FMT "\n", MAC_ARG(bssid), MAC_ARG(ifsta->bssid));
2398 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2399 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0 &&
2400 (bss = ieee80211_rx_bss_get(dev, bssid))) {
2401 printk(KERN_DEBUG "%s: Selected IBSS BSSID " MAC_FMT
2402 " based on configured SSID\n",
2403 dev->name, MAC_ARG(bssid));
2404 return ieee80211_sta_join_ibss(dev, ifsta, bss);
2406 #ifdef CONFIG_MAC80211_IBSS_DEBUG
2407 printk(KERN_DEBUG " did not try to join ibss\n");
2408 #endif /* CONFIG_MAC80211_IBSS_DEBUG */
2410 /* Selected IBSS not found in current scan results - try to scan */
2411 if (ifsta->state == IEEE80211_IBSS_JOINED &&
2412 !ieee80211_sta_active_ibss(dev)) {
2413 mod_timer(&ifsta->timer, jiffies +
2414 IEEE80211_IBSS_MERGE_INTERVAL);
2415 } else if (time_after(jiffies, local->last_scan_completed +
2416 IEEE80211_SCAN_INTERVAL)) {
2417 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
2418 "join\n", dev->name);
2419 return ieee80211_sta_req_scan(dev, ifsta->ssid,
2421 } else if (ifsta->state != IEEE80211_IBSS_JOINED) {
2422 int interval = IEEE80211_SCAN_INTERVAL;
2424 if (time_after(jiffies, ifsta->ibss_join_req +
2425 IEEE80211_IBSS_JOIN_TIMEOUT)) {
2426 if (ifsta->create_ibss &&
2427 local->oper_channel->flag & IEEE80211_CHAN_W_IBSS)
2428 return ieee80211_sta_create_ibss(dev, ifsta);
2429 if (ifsta->create_ibss) {
2430 printk(KERN_DEBUG "%s: IBSS not allowed on the"
2431 " configured channel %d (%d MHz)\n",
2432 dev->name, local->hw.conf.channel,
2433 local->hw.conf.freq);
2436 /* No IBSS found - decrease scan interval and continue
2438 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2441 ifsta->state = IEEE80211_IBSS_SEARCH;
2442 mod_timer(&ifsta->timer, jiffies + interval);
2450 int ieee80211_sta_set_ssid(struct net_device *dev, char *ssid, size_t len)
2452 struct ieee80211_sub_if_data *sdata;
2453 struct ieee80211_if_sta *ifsta;
2454 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2456 if (len > IEEE80211_MAX_SSID_LEN)
2459 /* TODO: This should always be done for IBSS, even if IEEE80211_QOS is
2461 if (local->ops->conf_tx) {
2462 struct ieee80211_tx_queue_params qparam;
2465 memset(&qparam, 0, sizeof(qparam));
2466 /* TODO: are these ok defaults for all hw_modes? */
2469 local->hw.conf.phymode == MODE_IEEE80211B ? 31 : 15;
2470 qparam.cw_max = 1023;
2471 qparam.burst_time = 0;
2472 for (i = IEEE80211_TX_QUEUE_DATA0; i < NUM_TX_DATA_QUEUES; i++)
2474 local->ops->conf_tx(local_to_hw(local),
2475 i + IEEE80211_TX_QUEUE_DATA0,
2478 /* IBSS uses different parameters for Beacon sending */
2482 local->ops->conf_tx(local_to_hw(local),
2483 IEEE80211_TX_QUEUE_BEACON, &qparam);
2486 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2487 ifsta = &sdata->u.sta;
2489 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0)
2490 ifsta->prev_bssid_set = 0;
2491 memcpy(ifsta->ssid, ssid, len);
2492 memset(ifsta->ssid + len, 0, IEEE80211_MAX_SSID_LEN - len);
2493 ifsta->ssid_len = len;
2495 ifsta->ssid_set = len ? 1 : 0;
2496 if (sdata->type == IEEE80211_IF_TYPE_IBSS && !ifsta->bssid_set) {
2497 ifsta->ibss_join_req = jiffies;
2498 ifsta->state = IEEE80211_IBSS_SEARCH;
2499 return ieee80211_sta_find_ibss(dev, ifsta);
2505 int ieee80211_sta_get_ssid(struct net_device *dev, char *ssid, size_t *len)
2507 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2508 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2509 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2510 *len = ifsta->ssid_len;
2515 int ieee80211_sta_set_bssid(struct net_device *dev, u8 *bssid)
2517 struct ieee80211_sub_if_data *sdata;
2518 struct ieee80211_if_sta *ifsta;
2521 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2522 ifsta = &sdata->u.sta;
2524 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
2525 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2526 res = ieee80211_if_config(dev);
2528 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2529 "the low-level driver\n", dev->name);
2534 if (!is_valid_ether_addr(bssid))
2535 ifsta->bssid_set = 0;
2537 ifsta->bssid_set = 1;
2542 static void ieee80211_send_nullfunc(struct ieee80211_local *local,
2543 struct ieee80211_sub_if_data *sdata,
2546 struct sk_buff *skb;
2547 struct ieee80211_hdr *nullfunc;
2550 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24);
2552 printk(KERN_DEBUG "%s: failed to allocate buffer for nullfunc "
2553 "frame\n", sdata->dev->name);
2556 skb_reserve(skb, local->hw.extra_tx_headroom);
2558 nullfunc = (struct ieee80211_hdr *) skb_put(skb, 24);
2559 memset(nullfunc, 0, 24);
2560 fc = IEEE80211_FTYPE_DATA | IEEE80211_STYPE_NULLFUNC |
2561 IEEE80211_FCTL_TODS;
2563 fc |= IEEE80211_FCTL_PM;
2564 nullfunc->frame_control = cpu_to_le16(fc);
2565 memcpy(nullfunc->addr1, sdata->u.sta.bssid, ETH_ALEN);
2566 memcpy(nullfunc->addr2, sdata->dev->dev_addr, ETH_ALEN);
2567 memcpy(nullfunc->addr3, sdata->u.sta.bssid, ETH_ALEN);
2569 ieee80211_sta_tx(sdata->dev, skb, 0);
2573 void ieee80211_scan_completed(struct ieee80211_hw *hw)
2575 struct ieee80211_local *local = hw_to_local(hw);
2576 struct net_device *dev = local->scan_dev;
2577 struct ieee80211_sub_if_data *sdata;
2578 union iwreq_data wrqu;
2580 local->last_scan_completed = jiffies;
2582 local->sta_scanning = 0;
2584 if (ieee80211_hw_config(local))
2585 printk(KERN_DEBUG "%s: failed to restore operational"
2586 "channel after scan\n", dev->name);
2588 if (!(local->hw.flags & IEEE80211_HW_NO_PROBE_FILTERING) &&
2589 ieee80211_if_config(dev))
2590 printk(KERN_DEBUG "%s: failed to restore operational"
2591 "BSSID after scan\n", dev->name);
2593 memset(&wrqu, 0, sizeof(wrqu));
2594 wireless_send_event(dev, SIOCGIWSCAN, &wrqu, NULL);
2596 read_lock(&local->sub_if_lock);
2597 list_for_each_entry(sdata, &local->sub_if_list, list) {
2599 /* No need to wake the master device. */
2600 if (sdata->dev == local->mdev)
2603 if (sdata->type == IEEE80211_IF_TYPE_STA) {
2604 if (sdata->u.sta.associated)
2605 ieee80211_send_nullfunc(local, sdata, 0);
2606 ieee80211_sta_timer((unsigned long)sdata);
2609 netif_wake_queue(sdata->dev);
2611 read_unlock(&local->sub_if_lock);
2613 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2614 if (sdata->type == IEEE80211_IF_TYPE_IBSS) {
2615 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2616 if (!ifsta->bssid_set ||
2617 (!ifsta->state == IEEE80211_IBSS_JOINED &&
2618 !ieee80211_sta_active_ibss(dev)))
2619 ieee80211_sta_find_ibss(dev, ifsta);
2622 EXPORT_SYMBOL(ieee80211_scan_completed);
2624 void ieee80211_sta_scan_work(struct work_struct *work)
2626 struct ieee80211_local *local =
2627 container_of(work, struct ieee80211_local, scan_work.work);
2628 struct net_device *dev = local->scan_dev;
2629 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2630 struct ieee80211_hw_mode *mode;
2631 struct ieee80211_channel *chan;
2633 unsigned long next_delay = 0;
2635 if (!local->sta_scanning)
2638 switch (local->scan_state) {
2639 case SCAN_SET_CHANNEL:
2640 mode = local->scan_hw_mode;
2641 if (local->scan_hw_mode->list.next == &local->modes_list &&
2642 local->scan_channel_idx >= mode->num_channels) {
2643 ieee80211_scan_completed(local_to_hw(local));
2646 skip = !(local->enabled_modes & (1 << mode->mode));
2647 chan = &mode->channels[local->scan_channel_idx];
2648 if (!(chan->flag & IEEE80211_CHAN_W_SCAN) ||
2649 (sdata->type == IEEE80211_IF_TYPE_IBSS &&
2650 !(chan->flag & IEEE80211_CHAN_W_IBSS)) ||
2651 (local->hw_modes & local->enabled_modes &
2652 (1 << MODE_IEEE80211G) && mode->mode == MODE_IEEE80211B))
2657 printk(KERN_DEBUG "%s: scan channel %d (%d MHz)\n",
2658 dev->name, chan->chan, chan->freq);
2661 local->scan_channel = chan;
2662 if (ieee80211_hw_config(local)) {
2663 printk(KERN_DEBUG "%s: failed to set channel "
2664 "%d (%d MHz) for scan\n", dev->name,
2665 chan->chan, chan->freq);
2670 local->scan_channel_idx++;
2671 if (local->scan_channel_idx >= local->scan_hw_mode->num_channels) {
2672 if (local->scan_hw_mode->list.next != &local->modes_list) {
2673 local->scan_hw_mode = list_entry(local->scan_hw_mode->list.next,
2674 struct ieee80211_hw_mode,
2676 local->scan_channel_idx = 0;
2683 next_delay = IEEE80211_PROBE_DELAY +
2684 usecs_to_jiffies(local->hw.channel_change_time);
2685 local->scan_state = SCAN_SEND_PROBE;
2687 case SCAN_SEND_PROBE:
2688 if (local->scan_channel->flag & IEEE80211_CHAN_W_ACTIVE_SCAN) {
2689 ieee80211_send_probe_req(dev, NULL, local->scan_ssid,
2690 local->scan_ssid_len);
2691 next_delay = IEEE80211_CHANNEL_TIME;
2693 next_delay = IEEE80211_PASSIVE_CHANNEL_TIME;
2694 local->scan_state = SCAN_SET_CHANNEL;
2698 if (local->sta_scanning)
2699 queue_delayed_work(local->hw.workqueue, &local->scan_work,
2704 static int ieee80211_sta_start_scan(struct net_device *dev,
2705 u8 *ssid, size_t ssid_len)
2707 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2708 struct ieee80211_sub_if_data *sdata;
2710 if (ssid_len > IEEE80211_MAX_SSID_LEN)
2713 /* MLME-SCAN.request (page 118) page 144 (11.1.3.1)
2714 * BSSType: INFRASTRUCTURE, INDEPENDENT, ANY_BSS
2717 * ScanType: ACTIVE, PASSIVE
2718 * ProbeDelay: delay (in microseconds) to be used prior to transmitting
2719 * a Probe frame during active scanning
2721 * MinChannelTime (>= ProbeDelay), in TU
2722 * MaxChannelTime: (>= MinChannelTime), in TU
2725 /* MLME-SCAN.confirm
2727 * ResultCode: SUCCESS, INVALID_PARAMETERS
2730 if (local->sta_scanning) {
2731 if (local->scan_dev == dev)
2736 if (local->ops->hw_scan) {
2737 int rc = local->ops->hw_scan(local_to_hw(local),
2740 local->sta_scanning = 1;
2741 local->scan_dev = dev;
2746 local->sta_scanning = 1;
2748 read_lock(&local->sub_if_lock);
2749 list_for_each_entry(sdata, &local->sub_if_list, list) {
2751 /* Don't stop the master interface, otherwise we can't transmit
2753 if (sdata->dev == local->mdev)
2756 netif_stop_queue(sdata->dev);
2757 if (sdata->type == IEEE80211_IF_TYPE_STA &&
2758 sdata->u.sta.associated)
2759 ieee80211_send_nullfunc(local, sdata, 1);
2761 read_unlock(&local->sub_if_lock);
2764 local->scan_ssid_len = ssid_len;
2765 memcpy(local->scan_ssid, ssid, ssid_len);
2767 local->scan_ssid_len = 0;
2768 local->scan_state = SCAN_SET_CHANNEL;
2769 local->scan_hw_mode = list_entry(local->modes_list.next,
2770 struct ieee80211_hw_mode,
2772 local->scan_channel_idx = 0;
2773 local->scan_dev = dev;
2775 if (!(local->hw.flags & IEEE80211_HW_NO_PROBE_FILTERING) &&
2776 ieee80211_if_config(dev))
2777 printk(KERN_DEBUG "%s: failed to set BSSID for scan\n",
2780 /* TODO: start scan as soon as all nullfunc frames are ACKed */
2781 queue_delayed_work(local->hw.workqueue, &local->scan_work,
2782 IEEE80211_CHANNEL_TIME);
2788 int ieee80211_sta_req_scan(struct net_device *dev, u8 *ssid, size_t ssid_len)
2790 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2791 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2792 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2794 if (sdata->type != IEEE80211_IF_TYPE_STA)
2795 return ieee80211_sta_start_scan(dev, ssid, ssid_len);
2797 if (local->sta_scanning) {
2798 if (local->scan_dev == dev)
2803 set_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request);
2804 queue_work(local->hw.workqueue, &ifsta->work);
2809 ieee80211_sta_scan_result(struct net_device *dev,
2810 struct ieee80211_sta_bss *bss,
2811 char *current_ev, char *end_buf)
2813 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2814 struct iw_event iwe;
2816 if (time_after(jiffies,
2817 bss->last_update + IEEE80211_SCAN_RESULT_EXPIRE))
2820 if (!(local->enabled_modes & (1 << bss->hw_mode)))
2823 if (local->scan_flags & IEEE80211_SCAN_WPA_ONLY &&
2824 !bss->wpa_ie && !bss->rsn_ie)
2827 if (local->scan_flags & IEEE80211_SCAN_MATCH_SSID &&
2828 (local->scan_ssid_len != bss->ssid_len ||
2829 memcmp(local->scan_ssid, bss->ssid, bss->ssid_len) != 0))
2832 memset(&iwe, 0, sizeof(iwe));
2833 iwe.cmd = SIOCGIWAP;
2834 iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
2835 memcpy(iwe.u.ap_addr.sa_data, bss->bssid, ETH_ALEN);
2836 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
2839 memset(&iwe, 0, sizeof(iwe));
2840 iwe.cmd = SIOCGIWESSID;
2841 iwe.u.data.length = bss->ssid_len;
2842 iwe.u.data.flags = 1;
2843 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
2846 if (bss->capability & (WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_IBSS)) {
2847 memset(&iwe, 0, sizeof(iwe));
2848 iwe.cmd = SIOCGIWMODE;
2849 if (bss->capability & WLAN_CAPABILITY_ESS)
2850 iwe.u.mode = IW_MODE_MASTER;
2852 iwe.u.mode = IW_MODE_ADHOC;
2853 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
2857 memset(&iwe, 0, sizeof(iwe));
2858 iwe.cmd = SIOCGIWFREQ;
2859 iwe.u.freq.m = bss->channel;
2861 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
2863 iwe.u.freq.m = bss->freq * 100000;
2865 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
2868 memset(&iwe, 0, sizeof(iwe));
2870 iwe.u.qual.qual = bss->signal;
2871 iwe.u.qual.level = bss->rssi;
2872 iwe.u.qual.noise = bss->noise;
2873 iwe.u.qual.updated = local->wstats_flags;
2874 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
2877 memset(&iwe, 0, sizeof(iwe));
2878 iwe.cmd = SIOCGIWENCODE;
2879 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
2880 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
2882 iwe.u.data.flags = IW_ENCODE_DISABLED;
2883 iwe.u.data.length = 0;
2884 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, "");
2886 if (bss && bss->wpa_ie) {
2887 memset(&iwe, 0, sizeof(iwe));
2888 iwe.cmd = IWEVGENIE;
2889 iwe.u.data.length = bss->wpa_ie_len;
2890 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
2894 if (bss && bss->rsn_ie) {
2895 memset(&iwe, 0, sizeof(iwe));
2896 iwe.cmd = IWEVGENIE;
2897 iwe.u.data.length = bss->rsn_ie_len;
2898 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
2902 if (bss && bss->supp_rates_len > 0) {
2903 /* display all supported rates in readable format */
2904 char *p = current_ev + IW_EV_LCP_LEN;
2907 memset(&iwe, 0, sizeof(iwe));
2908 iwe.cmd = SIOCGIWRATE;
2909 /* Those two flags are ignored... */
2910 iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
2912 for (i = 0; i < bss->supp_rates_len; i++) {
2913 iwe.u.bitrate.value = ((bss->supp_rates[i] &
2915 p = iwe_stream_add_value(current_ev, p,
2916 end_buf, &iwe, IW_EV_PARAM_LEN);
2923 buf = kmalloc(30, GFP_ATOMIC);
2925 memset(&iwe, 0, sizeof(iwe));
2926 iwe.cmd = IWEVCUSTOM;
2927 sprintf(buf, "tsf=%016llx", (unsigned long long)(bss->timestamp));
2928 iwe.u.data.length = strlen(buf);
2929 current_ev = iwe_stream_add_point(current_ev, end_buf,
2938 if (!(local->scan_flags & IEEE80211_SCAN_EXTRA_INFO))
2941 buf = kmalloc(100, GFP_ATOMIC);
2945 memset(&iwe, 0, sizeof(iwe));
2946 iwe.cmd = IWEVCUSTOM;
2947 sprintf(buf, "bcn_int=%d", bss->beacon_int);
2948 iwe.u.data.length = strlen(buf);
2949 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
2952 memset(&iwe, 0, sizeof(iwe));
2953 iwe.cmd = IWEVCUSTOM;
2954 sprintf(buf, "capab=0x%04x", bss->capability);
2955 iwe.u.data.length = strlen(buf);
2956 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
2967 int ieee80211_sta_scan_results(struct net_device *dev, char *buf, size_t len)
2969 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2970 char *current_ev = buf;
2971 char *end_buf = buf + len;
2972 struct ieee80211_sta_bss *bss;
2974 spin_lock_bh(&local->sta_bss_lock);
2975 list_for_each_entry(bss, &local->sta_bss_list, list) {
2976 if (buf + len - current_ev <= IW_EV_ADDR_LEN) {
2977 spin_unlock_bh(&local->sta_bss_lock);
2980 current_ev = ieee80211_sta_scan_result(dev, bss, current_ev,
2983 spin_unlock_bh(&local->sta_bss_lock);
2984 return current_ev - buf;
2988 int ieee80211_sta_set_extra_ie(struct net_device *dev, char *ie, size_t len)
2990 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2991 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2992 kfree(ifsta->extra_ie);
2994 ifsta->extra_ie = NULL;
2995 ifsta->extra_ie_len = 0;
2998 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2999 if (!ifsta->extra_ie) {
3000 ifsta->extra_ie_len = 0;
3003 memcpy(ifsta->extra_ie, ie, len);
3004 ifsta->extra_ie_len = len;
3009 struct sta_info * ieee80211_ibss_add_sta(struct net_device *dev,
3010 struct sk_buff *skb, u8 *bssid,
3013 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
3014 struct sta_info *sta;
3015 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3017 /* TODO: Could consider removing the least recently used entry and
3018 * allow new one to be added. */
3019 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
3020 if (net_ratelimit()) {
3021 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
3022 "entry " MAC_FMT "\n", dev->name, MAC_ARG(addr));
3027 printk(KERN_DEBUG "%s: Adding new IBSS station " MAC_FMT " (dev=%s)\n",
3028 local->mdev->name, MAC_ARG(addr), dev->name);
3030 sta = sta_info_add(local, dev, addr, GFP_ATOMIC);
3034 sta->supp_rates = sdata->u.sta.supp_rates_bits;
3036 rate_control_rate_init(sta, local);
3038 return sta; /* caller will call sta_info_put() */
3042 int ieee80211_sta_deauthenticate(struct net_device *dev, u16 reason)
3044 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3045 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
3047 printk(KERN_DEBUG "%s: deauthenticate(reason=%d)\n",
3050 if (sdata->type != IEEE80211_IF_TYPE_STA &&
3051 sdata->type != IEEE80211_IF_TYPE_IBSS)
3054 ieee80211_send_deauth(dev, ifsta, reason);
3055 ieee80211_set_disassoc(dev, ifsta, 1);
3060 int ieee80211_sta_disassociate(struct net_device *dev, u16 reason)
3062 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3063 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
3065 printk(KERN_DEBUG "%s: disassociate(reason=%d)\n",
3068 if (sdata->type != IEEE80211_IF_TYPE_STA)
3071 if (!ifsta->associated)
3074 ieee80211_send_disassoc(dev, ifsta, reason);
3075 ieee80211_set_disassoc(dev, ifsta, 0);