1 // SPDX-License-Identifier: GPL-2.0 2 /* IEEE 802.11 SoftMAC layer 3 * Copyright (c) 2005 Andrea Merello <andrea.merello@gmail.com> 4 * 5 * Mostly extracted from the rtl8180-sa2400 driver for the 6 * in-kernel generic ieee802.11 stack. 7 * 8 * Few lines might be stolen from other part of the rtllib 9 * stack. Copyright who own it's copyright 10 * 11 * WPA code stolen from the ipw2200 driver. 12 * Copyright who own it's copyright. 13 */ 14 #include "rtllib.h" 15 16 #include <linux/random.h> 17 #include <linux/delay.h> 18 #include <linux/uaccess.h> 19 #include <linux/etherdevice.h> 20 #include <linux/ieee80211.h> 21 #include "dot11d.h" 22 23 static void rtllib_sta_wakeup(struct rtllib_device *ieee, short nl); 24 25 26 static short rtllib_is_54g(struct rtllib_network *net) 27 { 28 return (net->rates_ex_len > 0) || (net->rates_len > 4); 29 } 30 31 /* returns the total length needed for placing the RATE MFIE 32 * tag and the EXTENDED RATE MFIE tag if needed. 33 * It encludes two bytes per tag for the tag itself and its len 34 */ 35 static unsigned int rtllib_MFIE_rate_len(struct rtllib_device *ieee) 36 { 37 unsigned int rate_len = 0; 38 39 if (ieee->modulation & RTLLIB_CCK_MODULATION) 40 rate_len = RTLLIB_CCK_RATE_LEN + 2; 41 42 if (ieee->modulation & RTLLIB_OFDM_MODULATION) 43 44 rate_len += RTLLIB_OFDM_RATE_LEN + 2; 45 46 return rate_len; 47 } 48 49 /* place the MFIE rate, tag to the memory (double) pointed. 50 * Then it updates the pointer so that 51 * it points after the new MFIE tag added. 52 */ 53 static void rtllib_MFIE_Brate(struct rtllib_device *ieee, u8 **tag_p) 54 { 55 u8 *tag = *tag_p; 56 57 if (ieee->modulation & RTLLIB_CCK_MODULATION) { 58 *tag++ = MFIE_TYPE_RATES; 59 *tag++ = 4; 60 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_1MB; 61 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_2MB; 62 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_5MB; 63 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_11MB; 64 } 65 66 /* We may add an option for custom rates that specific HW 67 * might support 68 */ 69 *tag_p = tag; 70 } 71 72 static void rtllib_MFIE_Grate(struct rtllib_device *ieee, u8 **tag_p) 73 { 74 u8 *tag = *tag_p; 75 76 if (ieee->modulation & RTLLIB_OFDM_MODULATION) { 77 *tag++ = MFIE_TYPE_RATES_EX; 78 *tag++ = 8; 79 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_6MB; 80 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_9MB; 81 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_12MB; 82 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_18MB; 83 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_24MB; 84 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_36MB; 85 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_48MB; 86 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_54MB; 87 } 88 /* We may add an option for custom rates that specific HW might 89 * support 90 */ 91 *tag_p = tag; 92 } 93 94 static void rtllib_WMM_Info(struct rtllib_device *ieee, u8 **tag_p) 95 { 96 u8 *tag = *tag_p; 97 98 *tag++ = MFIE_TYPE_GENERIC; 99 *tag++ = 7; 100 *tag++ = 0x00; 101 *tag++ = 0x50; 102 *tag++ = 0xf2; 103 *tag++ = 0x02; 104 *tag++ = 0x00; 105 *tag++ = 0x01; 106 *tag++ = MAX_SP_Len; 107 *tag_p = tag; 108 } 109 110 static void rtllib_TURBO_Info(struct rtllib_device *ieee, u8 **tag_p) 111 { 112 u8 *tag = *tag_p; 113 114 *tag++ = MFIE_TYPE_GENERIC; 115 *tag++ = 7; 116 *tag++ = 0x00; 117 *tag++ = 0xe0; 118 *tag++ = 0x4c; 119 *tag++ = 0x01; 120 *tag++ = 0x02; 121 *tag++ = 0x11; 122 *tag++ = 0x00; 123 124 *tag_p = tag; 125 netdev_alert(ieee->dev, "This is enable turbo mode IE process\n"); 126 } 127 128 static void enqueue_mgmt(struct rtllib_device *ieee, struct sk_buff *skb) 129 { 130 int nh; 131 132 nh = (ieee->mgmt_queue_head + 1) % MGMT_QUEUE_NUM; 133 134 /* if the queue is full but we have newer frames then 135 * just overwrites the oldest. 136 * 137 * if (nh == ieee->mgmt_queue_tail) 138 * return -1; 139 */ 140 ieee->mgmt_queue_head = nh; 141 ieee->mgmt_queue_ring[nh] = skb; 142 143 } 144 145 static void init_mgmt_queue(struct rtllib_device *ieee) 146 { 147 ieee->mgmt_queue_tail = ieee->mgmt_queue_head = 0; 148 } 149 150 151 u8 152 MgntQuery_TxRateExcludeCCKRates(struct rtllib_device *ieee) 153 { 154 u16 i; 155 u8 QueryRate = 0; 156 u8 BasicRate; 157 158 159 for (i = 0; i < ieee->current_network.rates_len; i++) { 160 BasicRate = ieee->current_network.rates[i]&0x7F; 161 if (!rtllib_is_cck_rate(BasicRate)) { 162 if (QueryRate == 0) { 163 QueryRate = BasicRate; 164 } else { 165 if (BasicRate < QueryRate) 166 QueryRate = BasicRate; 167 } 168 } 169 } 170 171 if (QueryRate == 0) { 172 QueryRate = 12; 173 netdev_info(ieee->dev, "No BasicRate found!!\n"); 174 } 175 return QueryRate; 176 } 177 178 static u8 MgntQuery_MgntFrameTxRate(struct rtllib_device *ieee) 179 { 180 struct rt_hi_throughput *pHTInfo = ieee->pHTInfo; 181 u8 rate; 182 183 if (pHTInfo->IOTAction & HT_IOT_ACT_MGNT_USE_CCK_6M) 184 rate = 0x0c; 185 else 186 rate = ieee->basic_rate & 0x7f; 187 188 if (rate == 0) { 189 if (ieee->mode == IEEE_A || 190 ieee->mode == IEEE_N_5G || 191 (ieee->mode == IEEE_N_24G && !pHTInfo->bCurSuppCCK)) 192 rate = 0x0c; 193 else 194 rate = 0x02; 195 } 196 197 return rate; 198 } 199 200 inline void softmac_mgmt_xmit(struct sk_buff *skb, struct rtllib_device *ieee) 201 { 202 unsigned long flags; 203 short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE; 204 struct rtllib_hdr_3addr *header = 205 (struct rtllib_hdr_3addr *) skb->data; 206 207 struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + 8); 208 209 spin_lock_irqsave(&ieee->lock, flags); 210 211 /* called with 2nd param 0, no mgmt lock required */ 212 rtllib_sta_wakeup(ieee, 0); 213 214 if (le16_to_cpu(header->frame_ctl) == RTLLIB_STYPE_BEACON) 215 tcb_desc->queue_index = BEACON_QUEUE; 216 else 217 tcb_desc->queue_index = MGNT_QUEUE; 218 219 if (ieee->disable_mgnt_queue) 220 tcb_desc->queue_index = HIGH_QUEUE; 221 222 tcb_desc->data_rate = MgntQuery_MgntFrameTxRate(ieee); 223 tcb_desc->RATRIndex = 7; 224 tcb_desc->bTxDisableRateFallBack = 1; 225 tcb_desc->bTxUseDriverAssingedRate = 1; 226 if (single) { 227 if (ieee->queue_stop) { 228 enqueue_mgmt(ieee, skb); 229 } else { 230 header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0]<<4); 231 232 if (ieee->seq_ctrl[0] == 0xFFF) 233 ieee->seq_ctrl[0] = 0; 234 else 235 ieee->seq_ctrl[0]++; 236 237 /* avoid watchdog triggers */ 238 ieee->softmac_data_hard_start_xmit(skb, ieee->dev, 239 ieee->basic_rate); 240 } 241 242 spin_unlock_irqrestore(&ieee->lock, flags); 243 } else { 244 spin_unlock_irqrestore(&ieee->lock, flags); 245 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags); 246 247 header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4); 248 249 if (ieee->seq_ctrl[0] == 0xFFF) 250 ieee->seq_ctrl[0] = 0; 251 else 252 ieee->seq_ctrl[0]++; 253 254 /* check whether the managed packet queued greater than 5 */ 255 if (!ieee->check_nic_enough_desc(ieee->dev, 256 tcb_desc->queue_index) || 257 skb_queue_len(&ieee->skb_waitQ[tcb_desc->queue_index]) || 258 ieee->queue_stop) { 259 /* insert the skb packet to the management queue 260 * 261 * as for the completion function, it does not need 262 * to check it any more. 263 */ 264 netdev_info(ieee->dev, 265 "%s():insert to waitqueue, queue_index:%d!\n", 266 __func__, tcb_desc->queue_index); 267 skb_queue_tail(&ieee->skb_waitQ[tcb_desc->queue_index], 268 skb); 269 } else { 270 ieee->softmac_hard_start_xmit(skb, ieee->dev); 271 } 272 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags); 273 } 274 } 275 276 static inline void 277 softmac_ps_mgmt_xmit(struct sk_buff *skb, 278 struct rtllib_device *ieee) 279 { 280 short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE; 281 struct rtllib_hdr_3addr *header = 282 (struct rtllib_hdr_3addr *) skb->data; 283 u16 fc, type, stype; 284 struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + 8); 285 286 fc = le16_to_cpu(header->frame_ctl); 287 type = WLAN_FC_GET_TYPE(fc); 288 stype = WLAN_FC_GET_STYPE(fc); 289 290 291 if (stype != RTLLIB_STYPE_PSPOLL) 292 tcb_desc->queue_index = MGNT_QUEUE; 293 else 294 tcb_desc->queue_index = HIGH_QUEUE; 295 296 if (ieee->disable_mgnt_queue) 297 tcb_desc->queue_index = HIGH_QUEUE; 298 299 300 tcb_desc->data_rate = MgntQuery_MgntFrameTxRate(ieee); 301 tcb_desc->RATRIndex = 7; 302 tcb_desc->bTxDisableRateFallBack = 1; 303 tcb_desc->bTxUseDriverAssingedRate = 1; 304 if (single) { 305 if (type != RTLLIB_FTYPE_CTL) { 306 header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4); 307 308 if (ieee->seq_ctrl[0] == 0xFFF) 309 ieee->seq_ctrl[0] = 0; 310 else 311 ieee->seq_ctrl[0]++; 312 313 } 314 /* avoid watchdog triggers */ 315 ieee->softmac_data_hard_start_xmit(skb, ieee->dev, 316 ieee->basic_rate); 317 318 } else { 319 if (type != RTLLIB_FTYPE_CTL) { 320 header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4); 321 322 if (ieee->seq_ctrl[0] == 0xFFF) 323 ieee->seq_ctrl[0] = 0; 324 else 325 ieee->seq_ctrl[0]++; 326 } 327 ieee->softmac_hard_start_xmit(skb, ieee->dev); 328 329 } 330 } 331 332 static inline struct sk_buff *rtllib_probe_req(struct rtllib_device *ieee) 333 { 334 unsigned int len, rate_len; 335 u8 *tag; 336 struct sk_buff *skb; 337 struct rtllib_probe_request *req; 338 339 len = ieee->current_network.ssid_len; 340 341 rate_len = rtllib_MFIE_rate_len(ieee); 342 343 skb = dev_alloc_skb(sizeof(struct rtllib_probe_request) + 344 2 + len + rate_len + ieee->tx_headroom); 345 346 if (!skb) 347 return NULL; 348 349 skb_reserve(skb, ieee->tx_headroom); 350 351 req = skb_put(skb, sizeof(struct rtllib_probe_request)); 352 req->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_PROBE_REQ); 353 req->header.duration_id = 0; 354 355 eth_broadcast_addr(req->header.addr1); 356 ether_addr_copy(req->header.addr2, ieee->dev->dev_addr); 357 eth_broadcast_addr(req->header.addr3); 358 359 tag = skb_put(skb, len + 2 + rate_len); 360 361 *tag++ = MFIE_TYPE_SSID; 362 *tag++ = len; 363 memcpy(tag, ieee->current_network.ssid, len); 364 tag += len; 365 366 rtllib_MFIE_Brate(ieee, &tag); 367 rtllib_MFIE_Grate(ieee, &tag); 368 369 return skb; 370 } 371 372 static struct sk_buff *rtllib_get_beacon_(struct rtllib_device *ieee); 373 374 static void rtllib_send_beacon(struct rtllib_device *ieee) 375 { 376 struct sk_buff *skb; 377 378 if (!ieee->ieee_up) 379 return; 380 skb = rtllib_get_beacon_(ieee); 381 382 if (skb) { 383 softmac_mgmt_xmit(skb, ieee); 384 ieee->softmac_stats.tx_beacons++; 385 } 386 387 if (ieee->beacon_txing && ieee->ieee_up) 388 mod_timer(&ieee->beacon_timer, jiffies + 389 (msecs_to_jiffies(ieee->current_network.beacon_interval - 5))); 390 } 391 392 393 static void rtllib_send_beacon_cb(struct timer_list *t) 394 { 395 struct rtllib_device *ieee = 396 from_timer(ieee, t, beacon_timer); 397 unsigned long flags; 398 399 spin_lock_irqsave(&ieee->beacon_lock, flags); 400 rtllib_send_beacon(ieee); 401 spin_unlock_irqrestore(&ieee->beacon_lock, flags); 402 } 403 404 /* Enables network monitor mode, all rx packets will be received. */ 405 void rtllib_EnableNetMonitorMode(struct net_device *dev, 406 bool bInitState) 407 { 408 struct rtllib_device *ieee = netdev_priv_rsl(dev); 409 410 netdev_info(dev, "========>Enter Monitor Mode\n"); 411 412 ieee->AllowAllDestAddrHandler(dev, true, !bInitState); 413 } 414 415 416 /* Disables network monitor mode. Only packets destinated to 417 * us will be received. 418 */ 419 void rtllib_DisableNetMonitorMode(struct net_device *dev, 420 bool bInitState) 421 { 422 struct rtllib_device *ieee = netdev_priv_rsl(dev); 423 424 netdev_info(dev, "========>Exit Monitor Mode\n"); 425 426 ieee->AllowAllDestAddrHandler(dev, false, !bInitState); 427 } 428 429 430 /* Enables the specialized promiscuous mode required by Intel. 431 * In this mode, Intel intends to hear traffics from/to other STAs in the 432 * same BSS. Therefore we don't have to disable checking BSSID and we only need 433 * to allow all dest. BUT: if we enable checking BSSID then we can't recv 434 * packets from other STA. 435 */ 436 void rtllib_EnableIntelPromiscuousMode(struct net_device *dev, 437 bool bInitState) 438 { 439 bool bFilterOutNonAssociatedBSSID = false; 440 441 struct rtllib_device *ieee = netdev_priv_rsl(dev); 442 443 netdev_info(dev, "========>Enter Intel Promiscuous Mode\n"); 444 445 ieee->AllowAllDestAddrHandler(dev, true, !bInitState); 446 ieee->SetHwRegHandler(dev, HW_VAR_CECHK_BSSID, 447 (u8 *)&bFilterOutNonAssociatedBSSID); 448 449 ieee->bNetPromiscuousMode = true; 450 } 451 EXPORT_SYMBOL(rtllib_EnableIntelPromiscuousMode); 452 453 454 /* Disables the specialized promiscuous mode required by Intel. 455 * See MgntEnableIntelPromiscuousMode for detail. 456 */ 457 void rtllib_DisableIntelPromiscuousMode(struct net_device *dev, 458 bool bInitState) 459 { 460 bool bFilterOutNonAssociatedBSSID = true; 461 462 struct rtllib_device *ieee = netdev_priv_rsl(dev); 463 464 netdev_info(dev, "========>Exit Intel Promiscuous Mode\n"); 465 466 ieee->AllowAllDestAddrHandler(dev, false, !bInitState); 467 ieee->SetHwRegHandler(dev, HW_VAR_CECHK_BSSID, 468 (u8 *)&bFilterOutNonAssociatedBSSID); 469 470 ieee->bNetPromiscuousMode = false; 471 } 472 EXPORT_SYMBOL(rtllib_DisableIntelPromiscuousMode); 473 474 static void rtllib_send_probe(struct rtllib_device *ieee, u8 is_mesh) 475 { 476 struct sk_buff *skb; 477 478 skb = rtllib_probe_req(ieee); 479 if (skb) { 480 softmac_mgmt_xmit(skb, ieee); 481 ieee->softmac_stats.tx_probe_rq++; 482 } 483 } 484 485 486 static void rtllib_send_probe_requests(struct rtllib_device *ieee, u8 is_mesh) 487 { 488 if (ieee->active_scan && (ieee->softmac_features & 489 IEEE_SOFTMAC_PROBERQ)) { 490 rtllib_send_probe(ieee, 0); 491 rtllib_send_probe(ieee, 0); 492 } 493 } 494 495 static void rtllib_update_active_chan_map(struct rtllib_device *ieee) 496 { 497 memcpy(ieee->active_channel_map, GET_DOT11D_INFO(ieee)->channel_map, 498 MAX_CHANNEL_NUMBER+1); 499 } 500 501 /* this performs syncro scan blocking the caller until all channels 502 * in the allowed channel map has been checked. 503 */ 504 static void rtllib_softmac_scan_syncro(struct rtllib_device *ieee, u8 is_mesh) 505 { 506 union iwreq_data wrqu; 507 short ch = 0; 508 509 rtllib_update_active_chan_map(ieee); 510 511 ieee->be_scan_inprogress = true; 512 513 mutex_lock(&ieee->scan_mutex); 514 515 while (1) { 516 do { 517 ch++; 518 if (ch > MAX_CHANNEL_NUMBER) 519 goto out; /* scan completed */ 520 } while (!ieee->active_channel_map[ch]); 521 522 /* this function can be called in two situations 523 * 1- We have switched to ad-hoc mode and we are 524 * performing a complete syncro scan before conclude 525 * there are no interesting cell and to create a 526 * new one. In this case the link state is 527 * RTLLIB_NOLINK until we found an interesting cell. 528 * If so the ieee8021_new_net, called by the RX path 529 * will set the state to RTLLIB_LINKED, so we stop 530 * scanning 531 * 2- We are linked and the root uses run iwlist scan. 532 * So we switch to RTLLIB_LINKED_SCANNING to remember 533 * that we are still logically linked (not interested in 534 * new network events, despite for updating the net list, 535 * but we are temporarly 'unlinked' as the driver shall 536 * not filter RX frames and the channel is changing. 537 * So the only situation in which are interested is to check 538 * if the state become LINKED because of the #1 situation 539 */ 540 541 if (ieee->state == RTLLIB_LINKED) 542 goto out; 543 if (ieee->sync_scan_hurryup) { 544 netdev_info(ieee->dev, 545 "============>sync_scan_hurryup out\n"); 546 goto out; 547 } 548 549 ieee->set_chan(ieee->dev, ch); 550 if (ieee->active_channel_map[ch] == 1) 551 rtllib_send_probe_requests(ieee, 0); 552 553 /* this prevent excessive time wait when we 554 * need to wait for a syncro scan to end.. 555 */ 556 msleep_interruptible_rsl(RTLLIB_SOFTMAC_SCAN_TIME); 557 } 558 out: 559 ieee->actscanning = false; 560 ieee->sync_scan_hurryup = 0; 561 562 if (ieee->state >= RTLLIB_LINKED) { 563 if (IS_DOT11D_ENABLE(ieee)) 564 dot11d_scan_complete(ieee); 565 } 566 mutex_unlock(&ieee->scan_mutex); 567 568 ieee->be_scan_inprogress = false; 569 570 memset(&wrqu, 0, sizeof(wrqu)); 571 wireless_send_event(ieee->dev, SIOCGIWSCAN, &wrqu, NULL); 572 } 573 574 static void rtllib_softmac_scan_wq(void *data) 575 { 576 struct rtllib_device *ieee = container_of_dwork_rsl(data, 577 struct rtllib_device, softmac_scan_wq); 578 u8 last_channel = ieee->current_network.channel; 579 580 rtllib_update_active_chan_map(ieee); 581 582 if (!ieee->ieee_up) 583 return; 584 if (rtllib_act_scanning(ieee, true)) 585 return; 586 587 mutex_lock(&ieee->scan_mutex); 588 589 if (ieee->eRFPowerState == eRfOff) { 590 netdev_info(ieee->dev, 591 "======>%s():rf state is eRfOff, return\n", 592 __func__); 593 goto out1; 594 } 595 596 do { 597 ieee->current_network.channel = 598 (ieee->current_network.channel + 1) % 599 MAX_CHANNEL_NUMBER; 600 if (ieee->scan_watch_dog++ > MAX_CHANNEL_NUMBER) { 601 if (!ieee->active_channel_map[ieee->current_network.channel]) 602 ieee->current_network.channel = 6; 603 goto out; /* no good chans */ 604 } 605 } while (!ieee->active_channel_map[ieee->current_network.channel]); 606 607 if (ieee->scanning_continue == 0) 608 goto out; 609 610 ieee->set_chan(ieee->dev, ieee->current_network.channel); 611 612 if (ieee->active_channel_map[ieee->current_network.channel] == 1) 613 rtllib_send_probe_requests(ieee, 0); 614 615 schedule_delayed_work(&ieee->softmac_scan_wq, 616 msecs_to_jiffies(RTLLIB_SOFTMAC_SCAN_TIME)); 617 618 mutex_unlock(&ieee->scan_mutex); 619 return; 620 621 out: 622 if (IS_DOT11D_ENABLE(ieee)) 623 dot11d_scan_complete(ieee); 624 ieee->current_network.channel = last_channel; 625 626 out1: 627 ieee->actscanning = false; 628 ieee->scan_watch_dog = 0; 629 ieee->scanning_continue = 0; 630 mutex_unlock(&ieee->scan_mutex); 631 } 632 633 634 635 static void rtllib_beacons_start(struct rtllib_device *ieee) 636 { 637 unsigned long flags; 638 639 spin_lock_irqsave(&ieee->beacon_lock, flags); 640 641 ieee->beacon_txing = 1; 642 rtllib_send_beacon(ieee); 643 644 spin_unlock_irqrestore(&ieee->beacon_lock, flags); 645 } 646 647 static void rtllib_beacons_stop(struct rtllib_device *ieee) 648 { 649 unsigned long flags; 650 651 spin_lock_irqsave(&ieee->beacon_lock, flags); 652 653 ieee->beacon_txing = 0; 654 del_timer_sync(&ieee->beacon_timer); 655 656 spin_unlock_irqrestore(&ieee->beacon_lock, flags); 657 658 } 659 660 661 void rtllib_stop_send_beacons(struct rtllib_device *ieee) 662 { 663 if (ieee->stop_send_beacons) 664 ieee->stop_send_beacons(ieee->dev); 665 if (ieee->softmac_features & IEEE_SOFTMAC_BEACONS) 666 rtllib_beacons_stop(ieee); 667 } 668 EXPORT_SYMBOL(rtllib_stop_send_beacons); 669 670 671 void rtllib_start_send_beacons(struct rtllib_device *ieee) 672 { 673 if (ieee->start_send_beacons) 674 ieee->start_send_beacons(ieee->dev); 675 if (ieee->softmac_features & IEEE_SOFTMAC_BEACONS) 676 rtllib_beacons_start(ieee); 677 } 678 EXPORT_SYMBOL(rtllib_start_send_beacons); 679 680 681 static void rtllib_softmac_stop_scan(struct rtllib_device *ieee) 682 { 683 mutex_lock(&ieee->scan_mutex); 684 ieee->scan_watch_dog = 0; 685 if (ieee->scanning_continue == 1) { 686 ieee->scanning_continue = 0; 687 ieee->actscanning = false; 688 689 cancel_delayed_work_sync(&ieee->softmac_scan_wq); 690 } 691 692 mutex_unlock(&ieee->scan_mutex); 693 } 694 695 void rtllib_stop_scan(struct rtllib_device *ieee) 696 { 697 if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) { 698 rtllib_softmac_stop_scan(ieee); 699 } else { 700 if (ieee->rtllib_stop_hw_scan) 701 ieee->rtllib_stop_hw_scan(ieee->dev); 702 } 703 } 704 EXPORT_SYMBOL(rtllib_stop_scan); 705 706 void rtllib_stop_scan_syncro(struct rtllib_device *ieee) 707 { 708 if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) { 709 ieee->sync_scan_hurryup = 1; 710 } else { 711 if (ieee->rtllib_stop_hw_scan) 712 ieee->rtllib_stop_hw_scan(ieee->dev); 713 } 714 } 715 EXPORT_SYMBOL(rtllib_stop_scan_syncro); 716 717 bool rtllib_act_scanning(struct rtllib_device *ieee, bool sync_scan) 718 { 719 if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) { 720 if (sync_scan) 721 return ieee->be_scan_inprogress; 722 else 723 return ieee->actscanning || ieee->be_scan_inprogress; 724 } else { 725 return test_bit(STATUS_SCANNING, &ieee->status); 726 } 727 } 728 EXPORT_SYMBOL(rtllib_act_scanning); 729 730 /* called with ieee->lock held */ 731 static void rtllib_start_scan(struct rtllib_device *ieee) 732 { 733 if (ieee->rtllib_ips_leave_wq != NULL) 734 ieee->rtllib_ips_leave_wq(ieee->dev); 735 736 if (IS_DOT11D_ENABLE(ieee)) { 737 if (IS_COUNTRY_IE_VALID(ieee)) 738 RESET_CIE_WATCHDOG(ieee); 739 } 740 if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) { 741 if (ieee->scanning_continue == 0) { 742 ieee->actscanning = true; 743 ieee->scanning_continue = 1; 744 schedule_delayed_work(&ieee->softmac_scan_wq, 0); 745 } 746 } else { 747 if (ieee->rtllib_start_hw_scan) 748 ieee->rtllib_start_hw_scan(ieee->dev); 749 } 750 } 751 752 /* called with wx_mutex held */ 753 void rtllib_start_scan_syncro(struct rtllib_device *ieee, u8 is_mesh) 754 { 755 if (IS_DOT11D_ENABLE(ieee)) { 756 if (IS_COUNTRY_IE_VALID(ieee)) 757 RESET_CIE_WATCHDOG(ieee); 758 } 759 ieee->sync_scan_hurryup = 0; 760 if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) { 761 rtllib_softmac_scan_syncro(ieee, is_mesh); 762 } else { 763 if (ieee->rtllib_start_hw_scan) 764 ieee->rtllib_start_hw_scan(ieee->dev); 765 } 766 } 767 EXPORT_SYMBOL(rtllib_start_scan_syncro); 768 769 static inline struct sk_buff * 770 rtllib_authentication_req(struct rtllib_network *beacon, 771 struct rtllib_device *ieee, 772 int challengelen, u8 *daddr) 773 { 774 struct sk_buff *skb; 775 struct rtllib_authentication *auth; 776 int len; 777 778 len = sizeof(struct rtllib_authentication) + challengelen + 779 ieee->tx_headroom + 4; 780 skb = dev_alloc_skb(len); 781 782 if (!skb) 783 return NULL; 784 785 skb_reserve(skb, ieee->tx_headroom); 786 787 auth = skb_put(skb, sizeof(struct rtllib_authentication)); 788 789 auth->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_AUTH); 790 if (challengelen) 791 auth->header.frame_ctl |= cpu_to_le16(RTLLIB_FCTL_WEP); 792 793 auth->header.duration_id = cpu_to_le16(0x013a); 794 ether_addr_copy(auth->header.addr1, beacon->bssid); 795 ether_addr_copy(auth->header.addr2, ieee->dev->dev_addr); 796 ether_addr_copy(auth->header.addr3, beacon->bssid); 797 if (ieee->auth_mode == 0) 798 auth->algorithm = WLAN_AUTH_OPEN; 799 else if (ieee->auth_mode == 1) 800 auth->algorithm = cpu_to_le16(WLAN_AUTH_SHARED_KEY); 801 else if (ieee->auth_mode == 2) 802 auth->algorithm = WLAN_AUTH_OPEN; 803 auth->transaction = cpu_to_le16(ieee->associate_seq); 804 ieee->associate_seq++; 805 806 auth->status = cpu_to_le16(WLAN_STATUS_SUCCESS); 807 808 return skb; 809 } 810 811 static struct sk_buff *rtllib_probe_resp(struct rtllib_device *ieee, 812 const u8 *dest) 813 { 814 u8 *tag; 815 int beacon_size; 816 struct rtllib_probe_response *beacon_buf; 817 struct sk_buff *skb = NULL; 818 int encrypt; 819 int atim_len, erp_len; 820 struct lib80211_crypt_data *crypt; 821 822 char *ssid = ieee->current_network.ssid; 823 int ssid_len = ieee->current_network.ssid_len; 824 int rate_len = ieee->current_network.rates_len+2; 825 int rate_ex_len = ieee->current_network.rates_ex_len; 826 int wpa_ie_len = ieee->wpa_ie_len; 827 u8 erpinfo_content = 0; 828 829 u8 *tmp_ht_cap_buf = NULL; 830 u8 tmp_ht_cap_len = 0; 831 u8 *tmp_ht_info_buf = NULL; 832 u8 tmp_ht_info_len = 0; 833 struct rt_hi_throughput *pHTInfo = ieee->pHTInfo; 834 u8 *tmp_generic_ie_buf = NULL; 835 u8 tmp_generic_ie_len = 0; 836 837 if (rate_ex_len > 0) 838 rate_ex_len += 2; 839 840 if (ieee->current_network.capability & WLAN_CAPABILITY_IBSS) 841 atim_len = 4; 842 else 843 atim_len = 0; 844 845 if ((ieee->current_network.mode == IEEE_G) || 846 (ieee->current_network.mode == IEEE_N_24G && 847 ieee->pHTInfo->bCurSuppCCK)) { 848 erp_len = 3; 849 erpinfo_content = 0; 850 if (ieee->current_network.buseprotection) 851 erpinfo_content |= ERP_UseProtection; 852 } else 853 erp_len = 0; 854 855 crypt = ieee->crypt_info.crypt[ieee->crypt_info.tx_keyidx]; 856 encrypt = ieee->host_encrypt && crypt && crypt->ops && 857 ((strcmp(crypt->ops->name, "R-WEP") == 0 || wpa_ie_len)); 858 if (ieee->pHTInfo->bCurrentHTSupport) { 859 tmp_ht_cap_buf = (u8 *) &(ieee->pHTInfo->SelfHTCap); 860 tmp_ht_cap_len = sizeof(ieee->pHTInfo->SelfHTCap); 861 tmp_ht_info_buf = (u8 *) &(ieee->pHTInfo->SelfHTInfo); 862 tmp_ht_info_len = sizeof(ieee->pHTInfo->SelfHTInfo); 863 HTConstructCapabilityElement(ieee, tmp_ht_cap_buf, 864 &tmp_ht_cap_len, encrypt, false); 865 HTConstructInfoElement(ieee, tmp_ht_info_buf, &tmp_ht_info_len, 866 encrypt); 867 868 if (pHTInfo->bRegRT2RTAggregation) { 869 tmp_generic_ie_buf = ieee->pHTInfo->szRT2RTAggBuffer; 870 tmp_generic_ie_len = 871 sizeof(ieee->pHTInfo->szRT2RTAggBuffer); 872 HTConstructRT2RTAggElement(ieee, tmp_generic_ie_buf, 873 &tmp_generic_ie_len); 874 } 875 } 876 877 beacon_size = sizeof(struct rtllib_probe_response)+2+ 878 ssid_len + 3 + rate_len + rate_ex_len + atim_len + erp_len 879 + wpa_ie_len + ieee->tx_headroom; 880 skb = dev_alloc_skb(beacon_size); 881 if (!skb) 882 return NULL; 883 884 skb_reserve(skb, ieee->tx_headroom); 885 886 beacon_buf = skb_put(skb, (beacon_size - ieee->tx_headroom)); 887 ether_addr_copy(beacon_buf->header.addr1, dest); 888 ether_addr_copy(beacon_buf->header.addr2, ieee->dev->dev_addr); 889 ether_addr_copy(beacon_buf->header.addr3, ieee->current_network.bssid); 890 891 beacon_buf->header.duration_id = 0; 892 beacon_buf->beacon_interval = 893 cpu_to_le16(ieee->current_network.beacon_interval); 894 beacon_buf->capability = 895 cpu_to_le16(ieee->current_network.capability & 896 WLAN_CAPABILITY_IBSS); 897 beacon_buf->capability |= 898 cpu_to_le16(ieee->current_network.capability & 899 WLAN_CAPABILITY_SHORT_PREAMBLE); 900 901 if (ieee->short_slot && (ieee->current_network.capability & 902 WLAN_CAPABILITY_SHORT_SLOT_TIME)) 903 beacon_buf->capability |= 904 cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME); 905 906 crypt = ieee->crypt_info.crypt[ieee->crypt_info.tx_keyidx]; 907 if (encrypt) 908 beacon_buf->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY); 909 910 911 beacon_buf->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_PROBE_RESP); 912 beacon_buf->info_element[0].id = MFIE_TYPE_SSID; 913 beacon_buf->info_element[0].len = ssid_len; 914 915 tag = (u8 *) beacon_buf->info_element[0].data; 916 917 memcpy(tag, ssid, ssid_len); 918 919 tag += ssid_len; 920 921 *(tag++) = MFIE_TYPE_RATES; 922 *(tag++) = rate_len-2; 923 memcpy(tag, ieee->current_network.rates, rate_len-2); 924 tag += rate_len-2; 925 926 *(tag++) = MFIE_TYPE_DS_SET; 927 *(tag++) = 1; 928 *(tag++) = ieee->current_network.channel; 929 930 if (atim_len) { 931 u16 val16; 932 *(tag++) = MFIE_TYPE_IBSS_SET; 933 *(tag++) = 2; 934 val16 = ieee->current_network.atim_window; 935 memcpy((u8 *)tag, (u8 *)&val16, 2); 936 tag += 2; 937 } 938 939 if (erp_len) { 940 *(tag++) = MFIE_TYPE_ERP; 941 *(tag++) = 1; 942 *(tag++) = erpinfo_content; 943 } 944 if (rate_ex_len) { 945 *(tag++) = MFIE_TYPE_RATES_EX; 946 *(tag++) = rate_ex_len-2; 947 memcpy(tag, ieee->current_network.rates_ex, rate_ex_len-2); 948 tag += rate_ex_len-2; 949 } 950 951 if (wpa_ie_len) { 952 if (ieee->iw_mode == IW_MODE_ADHOC) 953 memcpy(&ieee->wpa_ie[14], &ieee->wpa_ie[8], 4); 954 memcpy(tag, ieee->wpa_ie, ieee->wpa_ie_len); 955 tag += ieee->wpa_ie_len; 956 } 957 return skb; 958 } 959 960 static struct sk_buff *rtllib_assoc_resp(struct rtllib_device *ieee, u8 *dest) 961 { 962 struct sk_buff *skb; 963 u8 *tag; 964 965 struct lib80211_crypt_data *crypt; 966 struct rtllib_assoc_response_frame *assoc; 967 short encrypt; 968 969 unsigned int rate_len = rtllib_MFIE_rate_len(ieee); 970 int len = sizeof(struct rtllib_assoc_response_frame) + rate_len + 971 ieee->tx_headroom; 972 973 skb = dev_alloc_skb(len); 974 975 if (!skb) 976 return NULL; 977 978 skb_reserve(skb, ieee->tx_headroom); 979 980 assoc = skb_put(skb, sizeof(struct rtllib_assoc_response_frame)); 981 982 assoc->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_ASSOC_RESP); 983 ether_addr_copy(assoc->header.addr1, dest); 984 ether_addr_copy(assoc->header.addr3, ieee->dev->dev_addr); 985 ether_addr_copy(assoc->header.addr2, ieee->dev->dev_addr); 986 assoc->capability = cpu_to_le16(ieee->iw_mode == IW_MODE_MASTER ? 987 WLAN_CAPABILITY_ESS : WLAN_CAPABILITY_IBSS); 988 989 990 if (ieee->short_slot) 991 assoc->capability |= 992 cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME); 993 994 if (ieee->host_encrypt) 995 crypt = ieee->crypt_info.crypt[ieee->crypt_info.tx_keyidx]; 996 else 997 crypt = NULL; 998 999 encrypt = (crypt && crypt->ops); 1000 1001 if (encrypt) 1002 assoc->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY); 1003 1004 assoc->status = 0; 1005 assoc->aid = cpu_to_le16(ieee->assoc_id); 1006 if (ieee->assoc_id == 0x2007) 1007 ieee->assoc_id = 0; 1008 else 1009 ieee->assoc_id++; 1010 1011 tag = skb_put(skb, rate_len); 1012 rtllib_MFIE_Brate(ieee, &tag); 1013 rtllib_MFIE_Grate(ieee, &tag); 1014 1015 return skb; 1016 } 1017 1018 static struct sk_buff *rtllib_auth_resp(struct rtllib_device *ieee, int status, 1019 u8 *dest) 1020 { 1021 struct sk_buff *skb = NULL; 1022 struct rtllib_authentication *auth; 1023 int len = ieee->tx_headroom + sizeof(struct rtllib_authentication) + 1; 1024 1025 skb = dev_alloc_skb(len); 1026 if (!skb) 1027 return NULL; 1028 1029 skb->len = sizeof(struct rtllib_authentication); 1030 1031 skb_reserve(skb, ieee->tx_headroom); 1032 1033 auth = skb_put(skb, sizeof(struct rtllib_authentication)); 1034 1035 auth->status = cpu_to_le16(status); 1036 auth->transaction = cpu_to_le16(2); 1037 auth->algorithm = cpu_to_le16(WLAN_AUTH_OPEN); 1038 1039 ether_addr_copy(auth->header.addr3, ieee->dev->dev_addr); 1040 ether_addr_copy(auth->header.addr2, ieee->dev->dev_addr); 1041 ether_addr_copy(auth->header.addr1, dest); 1042 auth->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_AUTH); 1043 return skb; 1044 1045 1046 } 1047 1048 static struct sk_buff *rtllib_null_func(struct rtllib_device *ieee, short pwr) 1049 { 1050 struct sk_buff *skb; 1051 struct rtllib_hdr_3addr *hdr; 1052 1053 skb = dev_alloc_skb(sizeof(struct rtllib_hdr_3addr)+ieee->tx_headroom); 1054 if (!skb) 1055 return NULL; 1056 1057 skb_reserve(skb, ieee->tx_headroom); 1058 1059 hdr = skb_put(skb, sizeof(struct rtllib_hdr_3addr)); 1060 1061 ether_addr_copy(hdr->addr1, ieee->current_network.bssid); 1062 ether_addr_copy(hdr->addr2, ieee->dev->dev_addr); 1063 ether_addr_copy(hdr->addr3, ieee->current_network.bssid); 1064 1065 hdr->frame_ctl = cpu_to_le16(RTLLIB_FTYPE_DATA | 1066 RTLLIB_STYPE_NULLFUNC | RTLLIB_FCTL_TODS | 1067 (pwr ? RTLLIB_FCTL_PM : 0)); 1068 1069 return skb; 1070 1071 1072 } 1073 1074 static struct sk_buff *rtllib_pspoll_func(struct rtllib_device *ieee) 1075 { 1076 struct sk_buff *skb; 1077 struct rtllib_pspoll_hdr *hdr; 1078 1079 skb = dev_alloc_skb(sizeof(struct rtllib_pspoll_hdr)+ieee->tx_headroom); 1080 if (!skb) 1081 return NULL; 1082 1083 skb_reserve(skb, ieee->tx_headroom); 1084 1085 hdr = skb_put(skb, sizeof(struct rtllib_pspoll_hdr)); 1086 1087 ether_addr_copy(hdr->bssid, ieee->current_network.bssid); 1088 ether_addr_copy(hdr->ta, ieee->dev->dev_addr); 1089 1090 hdr->aid = cpu_to_le16(ieee->assoc_id | 0xc000); 1091 hdr->frame_ctl = cpu_to_le16(RTLLIB_FTYPE_CTL | RTLLIB_STYPE_PSPOLL | 1092 RTLLIB_FCTL_PM); 1093 1094 return skb; 1095 1096 } 1097 1098 static void rtllib_resp_to_assoc_rq(struct rtllib_device *ieee, u8 *dest) 1099 { 1100 struct sk_buff *buf = rtllib_assoc_resp(ieee, dest); 1101 1102 if (buf) 1103 softmac_mgmt_xmit(buf, ieee); 1104 } 1105 1106 1107 static void rtllib_resp_to_auth(struct rtllib_device *ieee, int s, u8 *dest) 1108 { 1109 struct sk_buff *buf = rtllib_auth_resp(ieee, s, dest); 1110 1111 if (buf) 1112 softmac_mgmt_xmit(buf, ieee); 1113 } 1114 1115 1116 static void rtllib_resp_to_probe(struct rtllib_device *ieee, u8 *dest) 1117 { 1118 struct sk_buff *buf = rtllib_probe_resp(ieee, dest); 1119 1120 if (buf) 1121 softmac_mgmt_xmit(buf, ieee); 1122 } 1123 1124 1125 static inline int SecIsInPMKIDList(struct rtllib_device *ieee, u8 *bssid) 1126 { 1127 int i = 0; 1128 1129 do { 1130 if ((ieee->PMKIDList[i].bUsed) && 1131 (memcmp(ieee->PMKIDList[i].Bssid, bssid, ETH_ALEN) == 0)) 1132 break; 1133 i++; 1134 } while (i < NUM_PMKID_CACHE); 1135 1136 if (i == NUM_PMKID_CACHE) 1137 i = -1; 1138 return i; 1139 } 1140 1141 static inline struct sk_buff * 1142 rtllib_association_req(struct rtllib_network *beacon, 1143 struct rtllib_device *ieee) 1144 { 1145 struct sk_buff *skb; 1146 struct rtllib_assoc_request_frame *hdr; 1147 u8 *tag, *ies; 1148 int i; 1149 u8 *ht_cap_buf = NULL; 1150 u8 ht_cap_len = 0; 1151 u8 *realtek_ie_buf = NULL; 1152 u8 realtek_ie_len = 0; 1153 int wpa_ie_len = ieee->wpa_ie_len; 1154 int wps_ie_len = ieee->wps_ie_len; 1155 unsigned int ckip_ie_len = 0; 1156 unsigned int ccxrm_ie_len = 0; 1157 unsigned int cxvernum_ie_len = 0; 1158 struct lib80211_crypt_data *crypt; 1159 int encrypt; 1160 int PMKCacheIdx; 1161 1162 unsigned int rate_len = (beacon->rates_len ? 1163 (beacon->rates_len + 2) : 0) + 1164 (beacon->rates_ex_len ? (beacon->rates_ex_len) + 1165 2 : 0); 1166 1167 unsigned int wmm_info_len = beacon->qos_data.supported ? 9 : 0; 1168 unsigned int turbo_info_len = beacon->Turbo_Enable ? 9 : 0; 1169 1170 int len = 0; 1171 1172 crypt = ieee->crypt_info.crypt[ieee->crypt_info.tx_keyidx]; 1173 if (crypt != NULL) 1174 encrypt = ieee->host_encrypt && crypt && crypt->ops && 1175 ((strcmp(crypt->ops->name, "R-WEP") == 0 || 1176 wpa_ie_len)); 1177 else 1178 encrypt = 0; 1179 1180 if ((ieee->rtllib_ap_sec_type && 1181 (ieee->rtllib_ap_sec_type(ieee) & SEC_ALG_TKIP)) || 1182 ieee->bForcedBgMode) { 1183 ieee->pHTInfo->bEnableHT = 0; 1184 ieee->mode = WIRELESS_MODE_G; 1185 } 1186 1187 if (ieee->pHTInfo->bCurrentHTSupport && ieee->pHTInfo->bEnableHT) { 1188 ht_cap_buf = (u8 *)&(ieee->pHTInfo->SelfHTCap); 1189 ht_cap_len = sizeof(ieee->pHTInfo->SelfHTCap); 1190 HTConstructCapabilityElement(ieee, ht_cap_buf, &ht_cap_len, 1191 encrypt, true); 1192 if (ieee->pHTInfo->bCurrentRT2RTAggregation) { 1193 realtek_ie_buf = ieee->pHTInfo->szRT2RTAggBuffer; 1194 realtek_ie_len = 1195 sizeof(ieee->pHTInfo->szRT2RTAggBuffer); 1196 HTConstructRT2RTAggElement(ieee, realtek_ie_buf, 1197 &realtek_ie_len); 1198 } 1199 } 1200 1201 if (beacon->bCkipSupported) 1202 ckip_ie_len = 30+2; 1203 if (beacon->bCcxRmEnable) 1204 ccxrm_ie_len = 6+2; 1205 if (beacon->BssCcxVerNumber >= 2) 1206 cxvernum_ie_len = 5+2; 1207 1208 PMKCacheIdx = SecIsInPMKIDList(ieee, ieee->current_network.bssid); 1209 if (PMKCacheIdx >= 0) { 1210 wpa_ie_len += 18; 1211 netdev_info(ieee->dev, "[PMK cache]: WPA2 IE length: %x\n", 1212 wpa_ie_len); 1213 } 1214 len = sizeof(struct rtllib_assoc_request_frame) + 2 1215 + beacon->ssid_len 1216 + rate_len 1217 + wpa_ie_len 1218 + wps_ie_len 1219 + wmm_info_len 1220 + turbo_info_len 1221 + ht_cap_len 1222 + realtek_ie_len 1223 + ckip_ie_len 1224 + ccxrm_ie_len 1225 + cxvernum_ie_len 1226 + ieee->tx_headroom; 1227 1228 skb = dev_alloc_skb(len); 1229 1230 if (!skb) 1231 return NULL; 1232 1233 skb_reserve(skb, ieee->tx_headroom); 1234 1235 hdr = skb_put(skb, sizeof(struct rtllib_assoc_request_frame) + 2); 1236 1237 1238 hdr->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_ASSOC_REQ); 1239 hdr->header.duration_id = cpu_to_le16(37); 1240 ether_addr_copy(hdr->header.addr1, beacon->bssid); 1241 ether_addr_copy(hdr->header.addr2, ieee->dev->dev_addr); 1242 ether_addr_copy(hdr->header.addr3, beacon->bssid); 1243 1244 ether_addr_copy(ieee->ap_mac_addr, beacon->bssid); 1245 1246 hdr->capability = cpu_to_le16(WLAN_CAPABILITY_ESS); 1247 if (beacon->capability & WLAN_CAPABILITY_PRIVACY) 1248 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY); 1249 1250 if (beacon->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) 1251 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE); 1252 1253 if (ieee->short_slot && 1254 (beacon->capability&WLAN_CAPABILITY_SHORT_SLOT_TIME)) 1255 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME); 1256 1257 1258 hdr->listen_interval = cpu_to_le16(beacon->listen_interval); 1259 1260 hdr->info_element[0].id = MFIE_TYPE_SSID; 1261 1262 hdr->info_element[0].len = beacon->ssid_len; 1263 skb_put_data(skb, beacon->ssid, beacon->ssid_len); 1264 1265 tag = skb_put(skb, rate_len); 1266 1267 if (beacon->rates_len) { 1268 *tag++ = MFIE_TYPE_RATES; 1269 *tag++ = beacon->rates_len; 1270 for (i = 0; i < beacon->rates_len; i++) 1271 *tag++ = beacon->rates[i]; 1272 } 1273 1274 if (beacon->rates_ex_len) { 1275 *tag++ = MFIE_TYPE_RATES_EX; 1276 *tag++ = beacon->rates_ex_len; 1277 for (i = 0; i < beacon->rates_ex_len; i++) 1278 *tag++ = beacon->rates_ex[i]; 1279 } 1280 1281 if (beacon->bCkipSupported) { 1282 static const u8 AironetIeOui[] = {0x00, 0x01, 0x66}; 1283 u8 CcxAironetBuf[30]; 1284 struct octet_string osCcxAironetIE; 1285 1286 memset(CcxAironetBuf, 0, 30); 1287 osCcxAironetIE.Octet = CcxAironetBuf; 1288 osCcxAironetIE.Length = sizeof(CcxAironetBuf); 1289 memcpy(osCcxAironetIE.Octet, AironetIeOui, 1290 sizeof(AironetIeOui)); 1291 1292 osCcxAironetIE.Octet[IE_CISCO_FLAG_POSITION] |= 1293 (SUPPORT_CKIP_PK|SUPPORT_CKIP_MIC); 1294 tag = skb_put(skb, ckip_ie_len); 1295 *tag++ = MFIE_TYPE_AIRONET; 1296 *tag++ = osCcxAironetIE.Length; 1297 memcpy(tag, osCcxAironetIE.Octet, osCcxAironetIE.Length); 1298 tag += osCcxAironetIE.Length; 1299 } 1300 1301 if (beacon->bCcxRmEnable) { 1302 static const u8 CcxRmCapBuf[] = {0x00, 0x40, 0x96, 0x01, 0x01, 1303 0x00}; 1304 struct octet_string osCcxRmCap; 1305 1306 osCcxRmCap.Octet = (u8 *) CcxRmCapBuf; 1307 osCcxRmCap.Length = sizeof(CcxRmCapBuf); 1308 tag = skb_put(skb, ccxrm_ie_len); 1309 *tag++ = MFIE_TYPE_GENERIC; 1310 *tag++ = osCcxRmCap.Length; 1311 memcpy(tag, osCcxRmCap.Octet, osCcxRmCap.Length); 1312 tag += osCcxRmCap.Length; 1313 } 1314 1315 if (beacon->BssCcxVerNumber >= 2) { 1316 u8 CcxVerNumBuf[] = {0x00, 0x40, 0x96, 0x03, 0x00}; 1317 struct octet_string osCcxVerNum; 1318 1319 CcxVerNumBuf[4] = beacon->BssCcxVerNumber; 1320 osCcxVerNum.Octet = CcxVerNumBuf; 1321 osCcxVerNum.Length = sizeof(CcxVerNumBuf); 1322 tag = skb_put(skb, cxvernum_ie_len); 1323 *tag++ = MFIE_TYPE_GENERIC; 1324 *tag++ = osCcxVerNum.Length; 1325 memcpy(tag, osCcxVerNum.Octet, osCcxVerNum.Length); 1326 tag += osCcxVerNum.Length; 1327 } 1328 if (ieee->pHTInfo->bCurrentHTSupport && ieee->pHTInfo->bEnableHT) { 1329 if (ieee->pHTInfo->ePeerHTSpecVer != HT_SPEC_VER_EWC) { 1330 tag = skb_put(skb, ht_cap_len); 1331 *tag++ = MFIE_TYPE_HT_CAP; 1332 *tag++ = ht_cap_len - 2; 1333 memcpy(tag, ht_cap_buf, ht_cap_len - 2); 1334 tag += ht_cap_len - 2; 1335 } 1336 } 1337 1338 if (wpa_ie_len) { 1339 skb_put_data(skb, ieee->wpa_ie, ieee->wpa_ie_len); 1340 1341 if (PMKCacheIdx >= 0) { 1342 tag = skb_put(skb, 18); 1343 *tag = 1; 1344 *(tag + 1) = 0; 1345 memcpy((tag + 2), &ieee->PMKIDList[PMKCacheIdx].PMKID, 1346 16); 1347 } 1348 } 1349 if (wmm_info_len) { 1350 tag = skb_put(skb, wmm_info_len); 1351 rtllib_WMM_Info(ieee, &tag); 1352 } 1353 1354 if (wps_ie_len && ieee->wps_ie) 1355 skb_put_data(skb, ieee->wps_ie, wps_ie_len); 1356 1357 if (turbo_info_len) { 1358 tag = skb_put(skb, turbo_info_len); 1359 rtllib_TURBO_Info(ieee, &tag); 1360 } 1361 1362 if (ieee->pHTInfo->bCurrentHTSupport && ieee->pHTInfo->bEnableHT) { 1363 if (ieee->pHTInfo->ePeerHTSpecVer == HT_SPEC_VER_EWC) { 1364 tag = skb_put(skb, ht_cap_len); 1365 *tag++ = MFIE_TYPE_GENERIC; 1366 *tag++ = ht_cap_len - 2; 1367 memcpy(tag, ht_cap_buf, ht_cap_len - 2); 1368 tag += ht_cap_len - 2; 1369 } 1370 1371 if (ieee->pHTInfo->bCurrentRT2RTAggregation) { 1372 tag = skb_put(skb, realtek_ie_len); 1373 *tag++ = MFIE_TYPE_GENERIC; 1374 *tag++ = realtek_ie_len - 2; 1375 memcpy(tag, realtek_ie_buf, realtek_ie_len - 2); 1376 } 1377 } 1378 1379 kfree(ieee->assocreq_ies); 1380 ieee->assocreq_ies = NULL; 1381 ies = &(hdr->info_element[0].id); 1382 ieee->assocreq_ies_len = (skb->data + skb->len) - ies; 1383 ieee->assocreq_ies = kmemdup(ies, ieee->assocreq_ies_len, GFP_ATOMIC); 1384 if (!ieee->assocreq_ies) 1385 ieee->assocreq_ies_len = 0; 1386 1387 return skb; 1388 } 1389 1390 static void rtllib_associate_abort(struct rtllib_device *ieee) 1391 { 1392 unsigned long flags; 1393 1394 spin_lock_irqsave(&ieee->lock, flags); 1395 1396 ieee->associate_seq++; 1397 1398 /* don't scan, and avoid to have the RX path possibily 1399 * try again to associate. Even do not react to AUTH or 1400 * ASSOC response. Just wait for the retry wq to be scheduled. 1401 * Here we will check if there are good nets to associate 1402 * with, so we retry or just get back to NO_LINK and scanning 1403 */ 1404 if (ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATING) { 1405 netdev_dbg(ieee->dev, "Authentication failed\n"); 1406 ieee->softmac_stats.no_auth_rs++; 1407 } else { 1408 netdev_dbg(ieee->dev, "Association failed\n"); 1409 ieee->softmac_stats.no_ass_rs++; 1410 } 1411 1412 ieee->state = RTLLIB_ASSOCIATING_RETRY; 1413 1414 schedule_delayed_work(&ieee->associate_retry_wq, 1415 RTLLIB_SOFTMAC_ASSOC_RETRY_TIME); 1416 1417 spin_unlock_irqrestore(&ieee->lock, flags); 1418 } 1419 1420 static void rtllib_associate_abort_cb(struct timer_list *t) 1421 { 1422 struct rtllib_device *dev = from_timer(dev, t, associate_timer); 1423 1424 rtllib_associate_abort(dev); 1425 } 1426 1427 static void rtllib_associate_step1(struct rtllib_device *ieee, u8 *daddr) 1428 { 1429 struct rtllib_network *beacon = &ieee->current_network; 1430 struct sk_buff *skb; 1431 1432 netdev_dbg(ieee->dev, "Stopping scan\n"); 1433 1434 ieee->softmac_stats.tx_auth_rq++; 1435 1436 skb = rtllib_authentication_req(beacon, ieee, 0, daddr); 1437 1438 if (!skb) 1439 rtllib_associate_abort(ieee); 1440 else { 1441 ieee->state = RTLLIB_ASSOCIATING_AUTHENTICATING; 1442 netdev_dbg(ieee->dev, "Sending authentication request\n"); 1443 softmac_mgmt_xmit(skb, ieee); 1444 if (!timer_pending(&ieee->associate_timer)) { 1445 ieee->associate_timer.expires = jiffies + (HZ / 2); 1446 add_timer(&ieee->associate_timer); 1447 } 1448 } 1449 } 1450 1451 static void rtllib_auth_challenge(struct rtllib_device *ieee, u8 *challenge, 1452 int chlen) 1453 { 1454 u8 *c; 1455 struct sk_buff *skb; 1456 struct rtllib_network *beacon = &ieee->current_network; 1457 1458 ieee->associate_seq++; 1459 ieee->softmac_stats.tx_auth_rq++; 1460 1461 skb = rtllib_authentication_req(beacon, ieee, chlen + 2, beacon->bssid); 1462 1463 if (!skb) 1464 rtllib_associate_abort(ieee); 1465 else { 1466 c = skb_put(skb, chlen+2); 1467 *(c++) = MFIE_TYPE_CHALLENGE; 1468 *(c++) = chlen; 1469 memcpy(c, challenge, chlen); 1470 1471 netdev_dbg(ieee->dev, 1472 "Sending authentication challenge response\n"); 1473 1474 rtllib_encrypt_fragment(ieee, skb, 1475 sizeof(struct rtllib_hdr_3addr)); 1476 1477 softmac_mgmt_xmit(skb, ieee); 1478 mod_timer(&ieee->associate_timer, jiffies + (HZ/2)); 1479 } 1480 kfree(challenge); 1481 } 1482 1483 static void rtllib_associate_step2(struct rtllib_device *ieee) 1484 { 1485 struct sk_buff *skb; 1486 struct rtllib_network *beacon = &ieee->current_network; 1487 1488 del_timer_sync(&ieee->associate_timer); 1489 1490 netdev_dbg(ieee->dev, "Sending association request\n"); 1491 1492 ieee->softmac_stats.tx_ass_rq++; 1493 skb = rtllib_association_req(beacon, ieee); 1494 if (!skb) 1495 rtllib_associate_abort(ieee); 1496 else { 1497 softmac_mgmt_xmit(skb, ieee); 1498 mod_timer(&ieee->associate_timer, jiffies + (HZ/2)); 1499 } 1500 } 1501 1502 static void rtllib_associate_complete_wq(void *data) 1503 { 1504 struct rtllib_device *ieee = (struct rtllib_device *) 1505 container_of_work_rsl(data, 1506 struct rtllib_device, 1507 associate_complete_wq); 1508 struct rt_pwr_save_ctrl *pPSC = &(ieee->PowerSaveControl); 1509 1510 netdev_info(ieee->dev, "Associated successfully with %pM\n", 1511 ieee->current_network.bssid); 1512 if (!ieee->is_silent_reset) { 1513 netdev_info(ieee->dev, "normal associate\n"); 1514 notify_wx_assoc_event(ieee); 1515 } 1516 1517 netif_carrier_on(ieee->dev); 1518 ieee->is_roaming = false; 1519 if (rtllib_is_54g(&ieee->current_network) && 1520 (ieee->modulation & RTLLIB_OFDM_MODULATION)) { 1521 ieee->rate = 108; 1522 netdev_info(ieee->dev, "Using G rates:%d\n", ieee->rate); 1523 } else { 1524 ieee->rate = 22; 1525 ieee->SetWirelessMode(ieee->dev, IEEE_B); 1526 netdev_info(ieee->dev, "Using B rates:%d\n", ieee->rate); 1527 } 1528 if (ieee->pHTInfo->bCurrentHTSupport && ieee->pHTInfo->bEnableHT) { 1529 netdev_info(ieee->dev, "Successfully associated, ht enabled\n"); 1530 HTOnAssocRsp(ieee); 1531 } else { 1532 netdev_info(ieee->dev, 1533 "Successfully associated, ht not enabled(%d, %d)\n", 1534 ieee->pHTInfo->bCurrentHTSupport, 1535 ieee->pHTInfo->bEnableHT); 1536 memset(ieee->dot11HTOperationalRateSet, 0, 16); 1537 } 1538 ieee->LinkDetectInfo.SlotNum = 2 * (1 + 1539 ieee->current_network.beacon_interval / 1540 500); 1541 if (ieee->LinkDetectInfo.NumRecvBcnInPeriod == 0 || 1542 ieee->LinkDetectInfo.NumRecvDataInPeriod == 0) { 1543 ieee->LinkDetectInfo.NumRecvBcnInPeriod = 1; 1544 ieee->LinkDetectInfo.NumRecvDataInPeriod = 1; 1545 } 1546 pPSC->LpsIdleCount = 0; 1547 ieee->link_change(ieee->dev); 1548 1549 if (ieee->is_silent_reset) { 1550 netdev_info(ieee->dev, "silent reset associate\n"); 1551 ieee->is_silent_reset = false; 1552 } 1553 1554 if (ieee->data_hard_resume) 1555 ieee->data_hard_resume(ieee->dev); 1556 1557 } 1558 1559 static void rtllib_sta_send_associnfo(struct rtllib_device *ieee) 1560 { 1561 } 1562 1563 static void rtllib_associate_complete(struct rtllib_device *ieee) 1564 { 1565 del_timer_sync(&ieee->associate_timer); 1566 1567 ieee->state = RTLLIB_LINKED; 1568 rtllib_sta_send_associnfo(ieee); 1569 1570 schedule_work(&ieee->associate_complete_wq); 1571 } 1572 1573 static void rtllib_associate_procedure_wq(void *data) 1574 { 1575 struct rtllib_device *ieee = container_of_dwork_rsl(data, 1576 struct rtllib_device, 1577 associate_procedure_wq); 1578 rtllib_stop_scan_syncro(ieee); 1579 if (ieee->rtllib_ips_leave != NULL) 1580 ieee->rtllib_ips_leave(ieee->dev); 1581 mutex_lock(&ieee->wx_mutex); 1582 1583 if (ieee->data_hard_stop) 1584 ieee->data_hard_stop(ieee->dev); 1585 1586 rtllib_stop_scan(ieee); 1587 RT_TRACE(COMP_DBG, "===>%s(), chan:%d\n", __func__, 1588 ieee->current_network.channel); 1589 HTSetConnectBwMode(ieee, HT_CHANNEL_WIDTH_20, HT_EXTCHNL_OFFSET_NO_EXT); 1590 if (ieee->eRFPowerState == eRfOff) { 1591 RT_TRACE(COMP_DBG, 1592 "=============>%s():Rf state is eRfOff, schedule ipsleave wq again,return\n", 1593 __func__); 1594 if (ieee->rtllib_ips_leave_wq != NULL) 1595 ieee->rtllib_ips_leave_wq(ieee->dev); 1596 mutex_unlock(&ieee->wx_mutex); 1597 return; 1598 } 1599 ieee->associate_seq = 1; 1600 1601 rtllib_associate_step1(ieee, ieee->current_network.bssid); 1602 1603 mutex_unlock(&ieee->wx_mutex); 1604 } 1605 1606 inline void rtllib_softmac_new_net(struct rtllib_device *ieee, 1607 struct rtllib_network *net) 1608 { 1609 u8 tmp_ssid[IW_ESSID_MAX_SIZE + 1]; 1610 int tmp_ssid_len = 0; 1611 1612 short apset, ssidset, ssidbroad, apmatch, ssidmatch; 1613 1614 /* we are interested in new new only if we are not associated 1615 * and we are not associating / authenticating 1616 */ 1617 if (ieee->state != RTLLIB_NOLINK) 1618 return; 1619 1620 if ((ieee->iw_mode == IW_MODE_INFRA) && !(net->capability & 1621 WLAN_CAPABILITY_ESS)) 1622 return; 1623 1624 if ((ieee->iw_mode == IW_MODE_ADHOC) && !(net->capability & 1625 WLAN_CAPABILITY_IBSS)) 1626 return; 1627 1628 if ((ieee->iw_mode == IW_MODE_ADHOC) && 1629 (net->channel > ieee->ibss_maxjoin_chal)) 1630 return; 1631 if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) { 1632 /* if the user specified the AP MAC, we need also the essid 1633 * This could be obtained by beacons or, if the network does not 1634 * broadcast it, it can be put manually. 1635 */ 1636 apset = ieee->wap_set; 1637 ssidset = ieee->ssid_set; 1638 ssidbroad = !(net->ssid_len == 0 || net->ssid[0] == '\0'); 1639 apmatch = (memcmp(ieee->current_network.bssid, net->bssid, 1640 ETH_ALEN) == 0); 1641 if (!ssidbroad) { 1642 ssidmatch = (ieee->current_network.ssid_len == 1643 net->hidden_ssid_len) && 1644 (!strncmp(ieee->current_network.ssid, 1645 net->hidden_ssid, net->hidden_ssid_len)); 1646 if (net->hidden_ssid_len > 0) { 1647 strncpy(net->ssid, net->hidden_ssid, 1648 net->hidden_ssid_len); 1649 net->ssid_len = net->hidden_ssid_len; 1650 ssidbroad = 1; 1651 } 1652 } else 1653 ssidmatch = 1654 (ieee->current_network.ssid_len == net->ssid_len) && 1655 (!strncmp(ieee->current_network.ssid, net->ssid, 1656 net->ssid_len)); 1657 1658 /* if the user set the AP check if match. 1659 * if the network does not broadcast essid we check the 1660 * user supplied ANY essid 1661 * if the network does broadcast and the user does not set 1662 * essid it is OK 1663 * if the network does broadcast and the user did set essid 1664 * check if essid match 1665 * if the ap is not set, check that the user set the bssid 1666 * and the network does broadcast and that those two bssid match 1667 */ 1668 if ((apset && apmatch && 1669 ((ssidset && ssidbroad && ssidmatch) || 1670 (ssidbroad && !ssidset) || (!ssidbroad && ssidset))) || 1671 (!apset && ssidset && ssidbroad && ssidmatch) || 1672 (ieee->is_roaming && ssidset && ssidbroad && ssidmatch)) { 1673 /* Save the essid so that if it is hidden, it is 1674 * replaced with the essid provided by the user. 1675 */ 1676 if (!ssidbroad) { 1677 memcpy(tmp_ssid, ieee->current_network.ssid, 1678 ieee->current_network.ssid_len); 1679 tmp_ssid_len = ieee->current_network.ssid_len; 1680 } 1681 memcpy(&ieee->current_network, net, 1682 sizeof(ieee->current_network)); 1683 if (!ssidbroad) { 1684 memcpy(ieee->current_network.ssid, tmp_ssid, 1685 tmp_ssid_len); 1686 ieee->current_network.ssid_len = tmp_ssid_len; 1687 } 1688 netdev_info(ieee->dev, 1689 "Linking with %s,channel:%d, qos:%d, myHT:%d, networkHT:%d, mode:%x cur_net.flags:0x%x\n", 1690 ieee->current_network.ssid, 1691 ieee->current_network.channel, 1692 ieee->current_network.qos_data.supported, 1693 ieee->pHTInfo->bEnableHT, 1694 ieee->current_network.bssht.bd_support_ht, 1695 ieee->current_network.mode, 1696 ieee->current_network.flags); 1697 1698 if ((rtllib_act_scanning(ieee, false)) && 1699 !(ieee->softmac_features & IEEE_SOFTMAC_SCAN)) 1700 rtllib_stop_scan_syncro(ieee); 1701 1702 HTResetIOTSetting(ieee->pHTInfo); 1703 ieee->wmm_acm = 0; 1704 if (ieee->iw_mode == IW_MODE_INFRA) { 1705 /* Join the network for the first time */ 1706 ieee->AsocRetryCount = 0; 1707 if ((ieee->current_network.qos_data.supported == 1) && 1708 ieee->current_network.bssht.bd_support_ht) 1709 HTResetSelfAndSavePeerSetting(ieee, 1710 &(ieee->current_network)); 1711 else 1712 ieee->pHTInfo->bCurrentHTSupport = 1713 false; 1714 1715 ieee->state = RTLLIB_ASSOCIATING; 1716 if (ieee->LedControlHandler != NULL) 1717 ieee->LedControlHandler(ieee->dev, 1718 LED_CTL_START_TO_LINK); 1719 schedule_delayed_work( 1720 &ieee->associate_procedure_wq, 0); 1721 } else { 1722 if (rtllib_is_54g(&ieee->current_network) && 1723 (ieee->modulation & 1724 RTLLIB_OFDM_MODULATION)) { 1725 ieee->rate = 108; 1726 ieee->SetWirelessMode(ieee->dev, 1727 IEEE_G); 1728 netdev_info(ieee->dev, 1729 "Using G rates\n"); 1730 } else { 1731 ieee->rate = 22; 1732 ieee->SetWirelessMode(ieee->dev, 1733 IEEE_B); 1734 netdev_info(ieee->dev, 1735 "Using B rates\n"); 1736 } 1737 memset(ieee->dot11HTOperationalRateSet, 0, 16); 1738 ieee->state = RTLLIB_LINKED; 1739 } 1740 } 1741 } 1742 } 1743 1744 static void rtllib_softmac_check_all_nets(struct rtllib_device *ieee) 1745 { 1746 unsigned long flags; 1747 struct rtllib_network *target; 1748 1749 spin_lock_irqsave(&ieee->lock, flags); 1750 1751 list_for_each_entry(target, &ieee->network_list, list) { 1752 1753 /* if the state become different that NOLINK means 1754 * we had found what we are searching for 1755 */ 1756 1757 if (ieee->state != RTLLIB_NOLINK) 1758 break; 1759 1760 if (ieee->scan_age == 0 || time_after(target->last_scanned + 1761 ieee->scan_age, jiffies)) 1762 rtllib_softmac_new_net(ieee, target); 1763 } 1764 spin_unlock_irqrestore(&ieee->lock, flags); 1765 } 1766 1767 static inline u16 auth_parse(struct net_device *dev, struct sk_buff *skb, 1768 u8 **challenge, int *chlen) 1769 { 1770 struct rtllib_authentication *a; 1771 u8 *t; 1772 1773 if (skb->len < (sizeof(struct rtllib_authentication) - 1774 sizeof(struct rtllib_info_element))) { 1775 netdev_dbg(dev, "invalid len in auth resp: %d\n", skb->len); 1776 return 0xcafe; 1777 } 1778 *challenge = NULL; 1779 a = (struct rtllib_authentication *) skb->data; 1780 if (skb->len > (sizeof(struct rtllib_authentication) + 3)) { 1781 t = skb->data + sizeof(struct rtllib_authentication); 1782 1783 if (*(t++) == MFIE_TYPE_CHALLENGE) { 1784 *chlen = *(t++); 1785 *challenge = kmemdup(t, *chlen, GFP_ATOMIC); 1786 if (!*challenge) 1787 return -ENOMEM; 1788 } 1789 } 1790 return le16_to_cpu(a->status); 1791 } 1792 1793 static int auth_rq_parse(struct net_device *dev, struct sk_buff *skb, u8 *dest) 1794 { 1795 struct rtllib_authentication *a; 1796 1797 if (skb->len < (sizeof(struct rtllib_authentication) - 1798 sizeof(struct rtllib_info_element))) { 1799 netdev_dbg(dev, "invalid len in auth request: %d\n", skb->len); 1800 return -1; 1801 } 1802 a = (struct rtllib_authentication *) skb->data; 1803 1804 ether_addr_copy(dest, a->header.addr2); 1805 1806 if (le16_to_cpu(a->algorithm) != WLAN_AUTH_OPEN) 1807 return WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG; 1808 1809 return WLAN_STATUS_SUCCESS; 1810 } 1811 1812 static short probe_rq_parse(struct rtllib_device *ieee, struct sk_buff *skb, 1813 u8 *src) 1814 { 1815 u8 *tag; 1816 u8 *skbend; 1817 u8 *ssid = NULL; 1818 u8 ssidlen = 0; 1819 struct rtllib_hdr_3addr *header = 1820 (struct rtllib_hdr_3addr *) skb->data; 1821 bool bssid_match; 1822 1823 if (skb->len < sizeof(struct rtllib_hdr_3addr)) 1824 return -1; /* corrupted */ 1825 1826 bssid_match = 1827 (!ether_addr_equal(header->addr3, ieee->current_network.bssid)) && 1828 (!is_broadcast_ether_addr(header->addr3)); 1829 if (bssid_match) 1830 return -1; 1831 1832 ether_addr_copy(src, header->addr2); 1833 1834 skbend = (u8 *)skb->data + skb->len; 1835 1836 tag = skb->data + sizeof(struct rtllib_hdr_3addr); 1837 1838 while (tag + 1 < skbend) { 1839 if (*tag == 0) { 1840 ssid = tag + 2; 1841 ssidlen = *(tag + 1); 1842 break; 1843 } 1844 tag++; /* point to the len field */ 1845 tag = tag + *(tag); /* point to the last data byte of the tag */ 1846 tag++; /* point to the next tag */ 1847 } 1848 1849 if (ssidlen == 0) 1850 return 1; 1851 1852 if (!ssid) 1853 return 1; /* ssid not found in tagged param */ 1854 1855 return !strncmp(ssid, ieee->current_network.ssid, ssidlen); 1856 } 1857 1858 static int assoc_rq_parse(struct net_device *dev, struct sk_buff *skb, u8 *dest) 1859 { 1860 struct rtllib_assoc_request_frame *a; 1861 1862 if (skb->len < (sizeof(struct rtllib_assoc_request_frame) - 1863 sizeof(struct rtllib_info_element))) { 1864 netdev_dbg(dev, "invalid len in auth request:%d\n", skb->len); 1865 return -1; 1866 } 1867 1868 a = (struct rtllib_assoc_request_frame *) skb->data; 1869 1870 ether_addr_copy(dest, a->header.addr2); 1871 1872 return 0; 1873 } 1874 1875 static inline u16 assoc_parse(struct rtllib_device *ieee, struct sk_buff *skb, 1876 int *aid) 1877 { 1878 struct rtllib_assoc_response_frame *response_head; 1879 u16 status_code; 1880 1881 if (skb->len < sizeof(struct rtllib_assoc_response_frame)) { 1882 netdev_dbg(ieee->dev, "Invalid len in auth resp: %d\n", 1883 skb->len); 1884 return 0xcafe; 1885 } 1886 1887 response_head = (struct rtllib_assoc_response_frame *) skb->data; 1888 *aid = le16_to_cpu(response_head->aid) & 0x3fff; 1889 1890 status_code = le16_to_cpu(response_head->status); 1891 if ((status_code == WLAN_STATUS_ASSOC_DENIED_RATES || 1892 status_code == WLAN_STATUS_CAPS_UNSUPPORTED) && 1893 ((ieee->mode == IEEE_G) && 1894 (ieee->current_network.mode == IEEE_N_24G) && 1895 (ieee->AsocRetryCount++ < (RT_ASOC_RETRY_LIMIT-1)))) { 1896 ieee->pHTInfo->IOTAction |= HT_IOT_ACT_PURE_N_MODE; 1897 } else { 1898 ieee->AsocRetryCount = 0; 1899 } 1900 1901 return le16_to_cpu(response_head->status); 1902 } 1903 1904 void rtllib_rx_probe_rq(struct rtllib_device *ieee, struct sk_buff *skb) 1905 { 1906 u8 dest[ETH_ALEN]; 1907 1908 ieee->softmac_stats.rx_probe_rq++; 1909 if (probe_rq_parse(ieee, skb, dest) > 0) { 1910 ieee->softmac_stats.tx_probe_rs++; 1911 rtllib_resp_to_probe(ieee, dest); 1912 } 1913 } 1914 1915 static inline void rtllib_rx_auth_rq(struct rtllib_device *ieee, 1916 struct sk_buff *skb) 1917 { 1918 u8 dest[ETH_ALEN]; 1919 int status; 1920 1921 ieee->softmac_stats.rx_auth_rq++; 1922 1923 status = auth_rq_parse(ieee->dev, skb, dest); 1924 if (status != -1) 1925 rtllib_resp_to_auth(ieee, status, dest); 1926 } 1927 1928 static inline void rtllib_rx_assoc_rq(struct rtllib_device *ieee, 1929 struct sk_buff *skb) 1930 { 1931 u8 dest[ETH_ALEN]; 1932 1933 1934 ieee->softmac_stats.rx_ass_rq++; 1935 if (assoc_rq_parse(ieee->dev, skb, dest) != -1) 1936 rtllib_resp_to_assoc_rq(ieee, dest); 1937 1938 netdev_info(ieee->dev, "New client associated: %pM\n", dest); 1939 } 1940 1941 void rtllib_sta_ps_send_null_frame(struct rtllib_device *ieee, short pwr) 1942 { 1943 1944 struct sk_buff *buf = rtllib_null_func(ieee, pwr); 1945 1946 if (buf) 1947 softmac_ps_mgmt_xmit(buf, ieee); 1948 } 1949 EXPORT_SYMBOL(rtllib_sta_ps_send_null_frame); 1950 1951 void rtllib_sta_ps_send_pspoll_frame(struct rtllib_device *ieee) 1952 { 1953 struct sk_buff *buf = rtllib_pspoll_func(ieee); 1954 1955 if (buf) 1956 softmac_ps_mgmt_xmit(buf, ieee); 1957 } 1958 1959 static short rtllib_sta_ps_sleep(struct rtllib_device *ieee, u64 *time) 1960 { 1961 int timeout; 1962 u8 dtim; 1963 struct rt_pwr_save_ctrl *pPSC = &(ieee->PowerSaveControl); 1964 1965 if (ieee->LPSDelayCnt) { 1966 ieee->LPSDelayCnt--; 1967 return 0; 1968 } 1969 1970 dtim = ieee->current_network.dtim_data; 1971 if (!(dtim & RTLLIB_DTIM_VALID)) 1972 return 0; 1973 timeout = ieee->current_network.beacon_interval; 1974 ieee->current_network.dtim_data = RTLLIB_DTIM_INVALID; 1975 /* there's no need to nofity AP that I find you buffered 1976 * with broadcast packet 1977 */ 1978 if (dtim & (RTLLIB_DTIM_UCAST & ieee->ps)) 1979 return 2; 1980 1981 if (!time_after(jiffies, 1982 dev_trans_start(ieee->dev) + msecs_to_jiffies(timeout))) 1983 return 0; 1984 if (!time_after(jiffies, 1985 ieee->last_rx_ps_time + msecs_to_jiffies(timeout))) 1986 return 0; 1987 if ((ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE) && 1988 (ieee->mgmt_queue_tail != ieee->mgmt_queue_head)) 1989 return 0; 1990 1991 if (time) { 1992 if (ieee->bAwakePktSent) { 1993 pPSC->LPSAwakeIntvl = 1; 1994 } else { 1995 u8 MaxPeriod = 1; 1996 1997 if (pPSC->LPSAwakeIntvl == 0) 1998 pPSC->LPSAwakeIntvl = 1; 1999 if (pPSC->RegMaxLPSAwakeIntvl == 0) 2000 MaxPeriod = 1; 2001 else if (pPSC->RegMaxLPSAwakeIntvl == 0xFF) 2002 MaxPeriod = ieee->current_network.dtim_period; 2003 else 2004 MaxPeriod = pPSC->RegMaxLPSAwakeIntvl; 2005 pPSC->LPSAwakeIntvl = (pPSC->LPSAwakeIntvl >= 2006 MaxPeriod) ? MaxPeriod : 2007 (pPSC->LPSAwakeIntvl + 1); 2008 } 2009 { 2010 u8 LPSAwakeIntvl_tmp = 0; 2011 u8 period = ieee->current_network.dtim_period; 2012 u8 count = ieee->current_network.tim.tim_count; 2013 2014 if (count == 0) { 2015 if (pPSC->LPSAwakeIntvl > period) 2016 LPSAwakeIntvl_tmp = period + 2017 (pPSC->LPSAwakeIntvl - 2018 period) - 2019 ((pPSC->LPSAwakeIntvl-period) % 2020 period); 2021 else 2022 LPSAwakeIntvl_tmp = pPSC->LPSAwakeIntvl; 2023 2024 } else { 2025 if (pPSC->LPSAwakeIntvl > 2026 ieee->current_network.tim.tim_count) 2027 LPSAwakeIntvl_tmp = count + 2028 (pPSC->LPSAwakeIntvl - count) - 2029 ((pPSC->LPSAwakeIntvl-count)%period); 2030 else 2031 LPSAwakeIntvl_tmp = pPSC->LPSAwakeIntvl; 2032 } 2033 2034 *time = ieee->current_network.last_dtim_sta_time 2035 + msecs_to_jiffies(ieee->current_network.beacon_interval * 2036 LPSAwakeIntvl_tmp); 2037 } 2038 } 2039 2040 return 1; 2041 2042 2043 } 2044 2045 static inline void rtllib_sta_ps(struct tasklet_struct *t) 2046 { 2047 struct rtllib_device *ieee = from_tasklet(ieee, t, ps_task); 2048 u64 time; 2049 short sleep; 2050 unsigned long flags, flags2; 2051 2052 spin_lock_irqsave(&ieee->lock, flags); 2053 2054 if ((ieee->ps == RTLLIB_PS_DISABLED || 2055 ieee->iw_mode != IW_MODE_INFRA || 2056 ieee->state != RTLLIB_LINKED)) { 2057 RT_TRACE(COMP_DBG, 2058 "=====>%s(): no need to ps,wake up!! ieee->ps is %d, ieee->iw_mode is %d, ieee->state is %d\n", 2059 __func__, ieee->ps, ieee->iw_mode, ieee->state); 2060 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2); 2061 rtllib_sta_wakeup(ieee, 1); 2062 2063 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2); 2064 } 2065 sleep = rtllib_sta_ps_sleep(ieee, &time); 2066 /* 2 wake, 1 sleep, 0 do nothing */ 2067 if (sleep == 0) 2068 goto out; 2069 if (sleep == 1) { 2070 if (ieee->sta_sleep == LPS_IS_SLEEP) { 2071 ieee->enter_sleep_state(ieee->dev, time); 2072 } else if (ieee->sta_sleep == LPS_IS_WAKE) { 2073 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2); 2074 2075 if (ieee->ps_is_queue_empty(ieee->dev)) { 2076 ieee->sta_sleep = LPS_WAIT_NULL_DATA_SEND; 2077 ieee->ack_tx_to_ieee = 1; 2078 rtllib_sta_ps_send_null_frame(ieee, 1); 2079 ieee->ps_time = time; 2080 } 2081 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2); 2082 2083 } 2084 2085 ieee->bAwakePktSent = false; 2086 2087 } else if (sleep == 2) { 2088 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2); 2089 2090 rtllib_sta_wakeup(ieee, 1); 2091 2092 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2); 2093 } 2094 2095 out: 2096 spin_unlock_irqrestore(&ieee->lock, flags); 2097 2098 } 2099 2100 static void rtllib_sta_wakeup(struct rtllib_device *ieee, short nl) 2101 { 2102 if (ieee->sta_sleep == LPS_IS_WAKE) { 2103 if (nl) { 2104 if (ieee->pHTInfo->IOTAction & 2105 HT_IOT_ACT_NULL_DATA_POWER_SAVING) { 2106 ieee->ack_tx_to_ieee = 1; 2107 rtllib_sta_ps_send_null_frame(ieee, 0); 2108 } else { 2109 ieee->ack_tx_to_ieee = 1; 2110 rtllib_sta_ps_send_pspoll_frame(ieee); 2111 } 2112 } 2113 return; 2114 2115 } 2116 2117 if (ieee->sta_sleep == LPS_IS_SLEEP) 2118 ieee->sta_wake_up(ieee->dev); 2119 if (nl) { 2120 if (ieee->pHTInfo->IOTAction & 2121 HT_IOT_ACT_NULL_DATA_POWER_SAVING) { 2122 ieee->ack_tx_to_ieee = 1; 2123 rtllib_sta_ps_send_null_frame(ieee, 0); 2124 } else { 2125 ieee->ack_tx_to_ieee = 1; 2126 ieee->polling = true; 2127 rtllib_sta_ps_send_pspoll_frame(ieee); 2128 } 2129 2130 } else { 2131 ieee->sta_sleep = LPS_IS_WAKE; 2132 ieee->polling = false; 2133 } 2134 } 2135 2136 void rtllib_ps_tx_ack(struct rtllib_device *ieee, short success) 2137 { 2138 unsigned long flags, flags2; 2139 2140 spin_lock_irqsave(&ieee->lock, flags); 2141 2142 if (ieee->sta_sleep == LPS_WAIT_NULL_DATA_SEND) { 2143 /* Null frame with PS bit set */ 2144 if (success) { 2145 ieee->sta_sleep = LPS_IS_SLEEP; 2146 ieee->enter_sleep_state(ieee->dev, ieee->ps_time); 2147 } 2148 /* if the card report not success we can't be sure the AP 2149 * has not RXed so we can't assume the AP believe us awake 2150 */ 2151 } else {/* 21112005 - tx again null without PS bit if lost */ 2152 2153 if ((ieee->sta_sleep == LPS_IS_WAKE) && !success) { 2154 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2); 2155 if (ieee->pHTInfo->IOTAction & 2156 HT_IOT_ACT_NULL_DATA_POWER_SAVING) 2157 rtllib_sta_ps_send_null_frame(ieee, 0); 2158 else 2159 rtllib_sta_ps_send_pspoll_frame(ieee); 2160 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2); 2161 } 2162 } 2163 spin_unlock_irqrestore(&ieee->lock, flags); 2164 } 2165 EXPORT_SYMBOL(rtllib_ps_tx_ack); 2166 2167 static void rtllib_process_action(struct rtllib_device *ieee, 2168 struct sk_buff *skb) 2169 { 2170 struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data; 2171 u8 *act = rtllib_get_payload((struct rtllib_hdr *)header); 2172 u8 category = 0; 2173 2174 if (act == NULL) { 2175 netdev_warn(ieee->dev, 2176 "Error getting payload of action frame\n"); 2177 return; 2178 } 2179 2180 category = *act; 2181 act++; 2182 switch (category) { 2183 case ACT_CAT_BA: 2184 switch (*act) { 2185 case ACT_ADDBAREQ: 2186 rtllib_rx_ADDBAReq(ieee, skb); 2187 break; 2188 case ACT_ADDBARSP: 2189 rtllib_rx_ADDBARsp(ieee, skb); 2190 break; 2191 case ACT_DELBA: 2192 rtllib_rx_DELBA(ieee, skb); 2193 break; 2194 } 2195 break; 2196 default: 2197 break; 2198 } 2199 } 2200 2201 static inline int 2202 rtllib_rx_assoc_resp(struct rtllib_device *ieee, struct sk_buff *skb, 2203 struct rtllib_rx_stats *rx_stats) 2204 { 2205 u16 errcode; 2206 int aid; 2207 u8 *ies; 2208 struct rtllib_assoc_response_frame *assoc_resp; 2209 struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data; 2210 u16 frame_ctl = le16_to_cpu(header->frame_ctl); 2211 2212 netdev_dbg(ieee->dev, "received [RE]ASSOCIATION RESPONSE (%d)\n", 2213 WLAN_FC_GET_STYPE(frame_ctl)); 2214 2215 if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) && 2216 ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATED && 2217 (ieee->iw_mode == IW_MODE_INFRA)) { 2218 errcode = assoc_parse(ieee, skb, &aid); 2219 if (!errcode) { 2220 struct rtllib_network *network = 2221 kzalloc(sizeof(struct rtllib_network), 2222 GFP_ATOMIC); 2223 2224 if (!network) 2225 return 1; 2226 ieee->state = RTLLIB_LINKED; 2227 ieee->assoc_id = aid; 2228 ieee->softmac_stats.rx_ass_ok++; 2229 /* station support qos */ 2230 /* Let the register setting default with Legacy station */ 2231 assoc_resp = (struct rtllib_assoc_response_frame *)skb->data; 2232 if (ieee->current_network.qos_data.supported == 1) { 2233 if (rtllib_parse_info_param(ieee, assoc_resp->info_element, 2234 rx_stats->len - sizeof(*assoc_resp), 2235 network, rx_stats)) { 2236 kfree(network); 2237 return 1; 2238 } 2239 memcpy(ieee->pHTInfo->PeerHTCapBuf, 2240 network->bssht.bd_ht_cap_buf, 2241 network->bssht.bd_ht_cap_len); 2242 memcpy(ieee->pHTInfo->PeerHTInfoBuf, 2243 network->bssht.bd_ht_info_buf, 2244 network->bssht.bd_ht_info_len); 2245 if (ieee->handle_assoc_response != NULL) 2246 ieee->handle_assoc_response(ieee->dev, 2247 (struct rtllib_assoc_response_frame *)header, 2248 network); 2249 } 2250 kfree(network); 2251 2252 kfree(ieee->assocresp_ies); 2253 ieee->assocresp_ies = NULL; 2254 ies = &(assoc_resp->info_element[0].id); 2255 ieee->assocresp_ies_len = (skb->data + skb->len) - ies; 2256 ieee->assocresp_ies = kmemdup(ies, 2257 ieee->assocresp_ies_len, 2258 GFP_ATOMIC); 2259 if (!ieee->assocresp_ies) 2260 ieee->assocresp_ies_len = 0; 2261 2262 rtllib_associate_complete(ieee); 2263 } else { 2264 /* aid could not been allocated */ 2265 ieee->softmac_stats.rx_ass_err++; 2266 netdev_info(ieee->dev, 2267 "Association response status code 0x%x\n", 2268 errcode); 2269 if (ieee->AsocRetryCount < RT_ASOC_RETRY_LIMIT) 2270 schedule_delayed_work( 2271 &ieee->associate_procedure_wq, 0); 2272 else 2273 rtllib_associate_abort(ieee); 2274 } 2275 } 2276 return 0; 2277 } 2278 2279 static void rtllib_rx_auth_resp(struct rtllib_device *ieee, struct sk_buff *skb) 2280 { 2281 u16 errcode; 2282 u8 *challenge; 2283 int chlen = 0; 2284 bool bSupportNmode = true, bHalfSupportNmode = false; 2285 2286 errcode = auth_parse(ieee->dev, skb, &challenge, &chlen); 2287 2288 if (errcode) { 2289 ieee->softmac_stats.rx_auth_rs_err++; 2290 netdev_info(ieee->dev, 2291 "Authentication response status code 0x%x", 2292 errcode); 2293 rtllib_associate_abort(ieee); 2294 return; 2295 } 2296 2297 if (ieee->open_wep || !challenge) { 2298 ieee->state = RTLLIB_ASSOCIATING_AUTHENTICATED; 2299 ieee->softmac_stats.rx_auth_rs_ok++; 2300 if (!(ieee->pHTInfo->IOTAction & HT_IOT_ACT_PURE_N_MODE)) { 2301 if (!ieee->GetNmodeSupportBySecCfg(ieee->dev)) { 2302 if (IsHTHalfNmodeAPs(ieee)) { 2303 bSupportNmode = true; 2304 bHalfSupportNmode = true; 2305 } else { 2306 bSupportNmode = false; 2307 bHalfSupportNmode = false; 2308 } 2309 } 2310 } 2311 /* Dummy wirless mode setting to avoid encryption issue */ 2312 if (bSupportNmode) { 2313 ieee->SetWirelessMode(ieee->dev, 2314 ieee->current_network.mode); 2315 } else { 2316 /*TODO*/ 2317 ieee->SetWirelessMode(ieee->dev, IEEE_G); 2318 } 2319 2320 if ((ieee->current_network.mode == IEEE_N_24G) && 2321 bHalfSupportNmode) { 2322 netdev_info(ieee->dev, "======>enter half N mode\n"); 2323 ieee->bHalfWirelessN24GMode = true; 2324 } else { 2325 ieee->bHalfWirelessN24GMode = false; 2326 } 2327 rtllib_associate_step2(ieee); 2328 } else { 2329 rtllib_auth_challenge(ieee, challenge, chlen); 2330 } 2331 } 2332 2333 static inline int 2334 rtllib_rx_auth(struct rtllib_device *ieee, struct sk_buff *skb, 2335 struct rtllib_rx_stats *rx_stats) 2336 { 2337 2338 if (ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) { 2339 if (ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATING && 2340 (ieee->iw_mode == IW_MODE_INFRA)) { 2341 netdev_dbg(ieee->dev, 2342 "Received authentication response"); 2343 rtllib_rx_auth_resp(ieee, skb); 2344 } else if (ieee->iw_mode == IW_MODE_MASTER) { 2345 rtllib_rx_auth_rq(ieee, skb); 2346 } 2347 } 2348 return 0; 2349 } 2350 2351 static inline int 2352 rtllib_rx_deauth(struct rtllib_device *ieee, struct sk_buff *skb) 2353 { 2354 struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data; 2355 u16 frame_ctl; 2356 2357 if (memcmp(header->addr3, ieee->current_network.bssid, ETH_ALEN) != 0) 2358 return 0; 2359 2360 /* FIXME for now repeat all the association procedure 2361 * both for disassociation and deauthentication 2362 */ 2363 if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) && 2364 ieee->state == RTLLIB_LINKED && 2365 (ieee->iw_mode == IW_MODE_INFRA)) { 2366 frame_ctl = le16_to_cpu(header->frame_ctl); 2367 netdev_info(ieee->dev, 2368 "==========>received disassoc/deauth(%x) frame, reason code:%x\n", 2369 WLAN_FC_GET_STYPE(frame_ctl), 2370 ((struct rtllib_disassoc *)skb->data)->reason); 2371 ieee->state = RTLLIB_ASSOCIATING; 2372 ieee->softmac_stats.reassoc++; 2373 ieee->is_roaming = true; 2374 ieee->LinkDetectInfo.bBusyTraffic = false; 2375 rtllib_disassociate(ieee); 2376 RemovePeerTS(ieee, header->addr2); 2377 if (ieee->LedControlHandler != NULL) 2378 ieee->LedControlHandler(ieee->dev, 2379 LED_CTL_START_TO_LINK); 2380 2381 if (!(ieee->rtllib_ap_sec_type(ieee) & 2382 (SEC_ALG_CCMP|SEC_ALG_TKIP))) 2383 schedule_delayed_work( 2384 &ieee->associate_procedure_wq, 5); 2385 } 2386 return 0; 2387 } 2388 2389 inline int rtllib_rx_frame_softmac(struct rtllib_device *ieee, 2390 struct sk_buff *skb, 2391 struct rtllib_rx_stats *rx_stats, u16 type, 2392 u16 stype) 2393 { 2394 struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data; 2395 u16 frame_ctl; 2396 2397 if (!ieee->proto_started) 2398 return 0; 2399 2400 frame_ctl = le16_to_cpu(header->frame_ctl); 2401 switch (WLAN_FC_GET_STYPE(frame_ctl)) { 2402 case RTLLIB_STYPE_ASSOC_RESP: 2403 case RTLLIB_STYPE_REASSOC_RESP: 2404 if (rtllib_rx_assoc_resp(ieee, skb, rx_stats) == 1) 2405 return 1; 2406 break; 2407 case RTLLIB_STYPE_ASSOC_REQ: 2408 case RTLLIB_STYPE_REASSOC_REQ: 2409 if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) && 2410 ieee->iw_mode == IW_MODE_MASTER) 2411 rtllib_rx_assoc_rq(ieee, skb); 2412 break; 2413 case RTLLIB_STYPE_AUTH: 2414 rtllib_rx_auth(ieee, skb, rx_stats); 2415 break; 2416 case RTLLIB_STYPE_DISASSOC: 2417 case RTLLIB_STYPE_DEAUTH: 2418 rtllib_rx_deauth(ieee, skb); 2419 break; 2420 case RTLLIB_STYPE_MANAGE_ACT: 2421 rtllib_process_action(ieee, skb); 2422 break; 2423 default: 2424 return -1; 2425 } 2426 return 0; 2427 } 2428 2429 /* following are for a simpler TX queue management. 2430 * Instead of using netif_[stop/wake]_queue the driver 2431 * will use these two functions (plus a reset one), that 2432 * will internally use the kernel netif_* and takes 2433 * care of the ieee802.11 fragmentation. 2434 * So the driver receives a fragment per time and might 2435 * call the stop function when it wants to not 2436 * have enough room to TX an entire packet. 2437 * This might be useful if each fragment needs it's own 2438 * descriptor, thus just keep a total free memory > than 2439 * the max fragmentation threshold is not enough.. If the 2440 * ieee802.11 stack passed a TXB struct then you need 2441 * to keep N free descriptors where 2442 * N = MAX_PACKET_SIZE / MIN_FRAG_TRESHOLD 2443 * In this way you need just one and the 802.11 stack 2444 * will take care of buffering fragments and pass them to 2445 * the driver later, when it wakes the queue. 2446 */ 2447 void rtllib_softmac_xmit(struct rtllib_txb *txb, struct rtllib_device *ieee) 2448 { 2449 2450 unsigned int queue_index = txb->queue_index; 2451 unsigned long flags; 2452 int i; 2453 struct cb_desc *tcb_desc = NULL; 2454 unsigned long queue_len = 0; 2455 2456 spin_lock_irqsave(&ieee->lock, flags); 2457 2458 /* called with 2nd parm 0, no tx mgmt lock required */ 2459 rtllib_sta_wakeup(ieee, 0); 2460 2461 /* update the tx status */ 2462 tcb_desc = (struct cb_desc *)(txb->fragments[0]->cb + 2463 MAX_DEV_ADDR_SIZE); 2464 if (tcb_desc->bMulticast) 2465 ieee->stats.multicast++; 2466 2467 /* if xmit available, just xmit it immediately, else just insert it to 2468 * the wait queue 2469 */ 2470 for (i = 0; i < txb->nr_frags; i++) { 2471 queue_len = skb_queue_len(&ieee->skb_waitQ[queue_index]); 2472 if ((queue_len != 0) || 2473 (!ieee->check_nic_enough_desc(ieee->dev, queue_index)) || 2474 (ieee->queue_stop)) { 2475 /* insert the skb packet to the wait queue 2476 * as for the completion function, it does not need 2477 * to check it any more. 2478 */ 2479 if (queue_len < 200) 2480 skb_queue_tail(&ieee->skb_waitQ[queue_index], 2481 txb->fragments[i]); 2482 else 2483 kfree_skb(txb->fragments[i]); 2484 } else { 2485 ieee->softmac_data_hard_start_xmit( 2486 txb->fragments[i], 2487 ieee->dev, ieee->rate); 2488 } 2489 } 2490 2491 rtllib_txb_free(txb); 2492 2493 spin_unlock_irqrestore(&ieee->lock, flags); 2494 2495 } 2496 2497 void rtllib_reset_queue(struct rtllib_device *ieee) 2498 { 2499 unsigned long flags; 2500 2501 spin_lock_irqsave(&ieee->lock, flags); 2502 init_mgmt_queue(ieee); 2503 if (ieee->tx_pending.txb) { 2504 rtllib_txb_free(ieee->tx_pending.txb); 2505 ieee->tx_pending.txb = NULL; 2506 } 2507 ieee->queue_stop = 0; 2508 spin_unlock_irqrestore(&ieee->lock, flags); 2509 2510 } 2511 EXPORT_SYMBOL(rtllib_reset_queue); 2512 2513 void rtllib_stop_all_queues(struct rtllib_device *ieee) 2514 { 2515 unsigned int i; 2516 2517 for (i = 0; i < ieee->dev->num_tx_queues; i++) 2518 netdev_get_tx_queue(ieee->dev, i)->trans_start = jiffies; 2519 2520 netif_tx_stop_all_queues(ieee->dev); 2521 } 2522 2523 void rtllib_wake_all_queues(struct rtllib_device *ieee) 2524 { 2525 netif_tx_wake_all_queues(ieee->dev); 2526 } 2527 2528 /* called in user context only */ 2529 static void rtllib_start_master_bss(struct rtllib_device *ieee) 2530 { 2531 ieee->assoc_id = 1; 2532 2533 if (ieee->current_network.ssid_len == 0) { 2534 strncpy(ieee->current_network.ssid, 2535 RTLLIB_DEFAULT_TX_ESSID, 2536 IW_ESSID_MAX_SIZE); 2537 2538 ieee->current_network.ssid_len = 2539 strlen(RTLLIB_DEFAULT_TX_ESSID); 2540 ieee->ssid_set = 1; 2541 } 2542 2543 ether_addr_copy(ieee->current_network.bssid, ieee->dev->dev_addr); 2544 2545 ieee->set_chan(ieee->dev, ieee->current_network.channel); 2546 ieee->state = RTLLIB_LINKED; 2547 ieee->link_change(ieee->dev); 2548 notify_wx_assoc_event(ieee); 2549 2550 if (ieee->data_hard_resume) 2551 ieee->data_hard_resume(ieee->dev); 2552 2553 netif_carrier_on(ieee->dev); 2554 } 2555 2556 static void rtllib_start_monitor_mode(struct rtllib_device *ieee) 2557 { 2558 /* reset hardware status */ 2559 if (ieee->raw_tx) { 2560 if (ieee->data_hard_resume) 2561 ieee->data_hard_resume(ieee->dev); 2562 2563 netif_carrier_on(ieee->dev); 2564 } 2565 } 2566 2567 static void rtllib_start_ibss_wq(void *data) 2568 { 2569 struct rtllib_device *ieee = container_of_dwork_rsl(data, 2570 struct rtllib_device, start_ibss_wq); 2571 /* iwconfig mode ad-hoc will schedule this and return 2572 * on the other hand this will block further iwconfig SET 2573 * operations because of the wx_mutex hold. 2574 * Anyway some most set operations set a flag to speed-up 2575 * (abort) this wq (when syncro scanning) before sleeping 2576 * on the mutex 2577 */ 2578 if (!ieee->proto_started) { 2579 netdev_info(ieee->dev, "==========oh driver down return\n"); 2580 return; 2581 } 2582 mutex_lock(&ieee->wx_mutex); 2583 2584 if (ieee->current_network.ssid_len == 0) { 2585 strcpy(ieee->current_network.ssid, RTLLIB_DEFAULT_TX_ESSID); 2586 ieee->current_network.ssid_len = strlen(RTLLIB_DEFAULT_TX_ESSID); 2587 ieee->ssid_set = 1; 2588 } 2589 2590 ieee->state = RTLLIB_NOLINK; 2591 ieee->mode = IEEE_G; 2592 /* check if we have this cell in our network list */ 2593 rtllib_softmac_check_all_nets(ieee); 2594 2595 2596 /* if not then the state is not linked. Maybe the user switched to 2597 * ad-hoc mode just after being in monitor mode, or just after 2598 * being very few time in managed mode (so the card have had no 2599 * time to scan all the chans..) or we have just run up the iface 2600 * after setting ad-hoc mode. So we have to give another try.. 2601 * Here, in ibss mode, should be safe to do this without extra care 2602 * (in bss mode we had to make sure no-one tried to associate when 2603 * we had just checked the ieee->state and we was going to start the 2604 * scan) because in ibss mode the rtllib_new_net function, when 2605 * finds a good net, just set the ieee->state to RTLLIB_LINKED, 2606 * so, at worst, we waste a bit of time to initiate an unneeded syncro 2607 * scan, that will stop at the first round because it sees the state 2608 * associated. 2609 */ 2610 if (ieee->state == RTLLIB_NOLINK) 2611 rtllib_start_scan_syncro(ieee, 0); 2612 2613 /* the network definitively is not here.. create a new cell */ 2614 if (ieee->state == RTLLIB_NOLINK) { 2615 netdev_info(ieee->dev, "creating new IBSS cell\n"); 2616 ieee->current_network.channel = ieee->bss_start_channel; 2617 if (!ieee->wap_set) 2618 eth_random_addr(ieee->current_network.bssid); 2619 2620 if (ieee->modulation & RTLLIB_CCK_MODULATION) { 2621 2622 ieee->current_network.rates_len = 4; 2623 2624 ieee->current_network.rates[0] = 2625 RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_1MB; 2626 ieee->current_network.rates[1] = 2627 RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_2MB; 2628 ieee->current_network.rates[2] = 2629 RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_5MB; 2630 ieee->current_network.rates[3] = 2631 RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_11MB; 2632 2633 } else 2634 ieee->current_network.rates_len = 0; 2635 2636 if (ieee->modulation & RTLLIB_OFDM_MODULATION) { 2637 ieee->current_network.rates_ex_len = 8; 2638 2639 ieee->current_network.rates_ex[0] = 2640 RTLLIB_OFDM_RATE_6MB; 2641 ieee->current_network.rates_ex[1] = 2642 RTLLIB_OFDM_RATE_9MB; 2643 ieee->current_network.rates_ex[2] = 2644 RTLLIB_OFDM_RATE_12MB; 2645 ieee->current_network.rates_ex[3] = 2646 RTLLIB_OFDM_RATE_18MB; 2647 ieee->current_network.rates_ex[4] = 2648 RTLLIB_OFDM_RATE_24MB; 2649 ieee->current_network.rates_ex[5] = 2650 RTLLIB_OFDM_RATE_36MB; 2651 ieee->current_network.rates_ex[6] = 2652 RTLLIB_OFDM_RATE_48MB; 2653 ieee->current_network.rates_ex[7] = 2654 RTLLIB_OFDM_RATE_54MB; 2655 2656 ieee->rate = 108; 2657 } else { 2658 ieee->current_network.rates_ex_len = 0; 2659 ieee->rate = 22; 2660 } 2661 2662 ieee->current_network.qos_data.supported = 0; 2663 ieee->SetWirelessMode(ieee->dev, IEEE_G); 2664 ieee->current_network.mode = ieee->mode; 2665 ieee->current_network.atim_window = 0; 2666 ieee->current_network.capability = WLAN_CAPABILITY_IBSS; 2667 } 2668 2669 netdev_info(ieee->dev, "%s(): ieee->mode = %d\n", __func__, ieee->mode); 2670 if ((ieee->mode == IEEE_N_24G) || (ieee->mode == IEEE_N_5G)) 2671 HTUseDefaultSetting(ieee); 2672 else 2673 ieee->pHTInfo->bCurrentHTSupport = false; 2674 2675 ieee->SetHwRegHandler(ieee->dev, HW_VAR_MEDIA_STATUS, 2676 (u8 *)(&ieee->state)); 2677 2678 ieee->state = RTLLIB_LINKED; 2679 ieee->link_change(ieee->dev); 2680 2681 HTSetConnectBwMode(ieee, HT_CHANNEL_WIDTH_20, HT_EXTCHNL_OFFSET_NO_EXT); 2682 if (ieee->LedControlHandler != NULL) 2683 ieee->LedControlHandler(ieee->dev, LED_CTL_LINK); 2684 2685 rtllib_start_send_beacons(ieee); 2686 2687 notify_wx_assoc_event(ieee); 2688 2689 if (ieee->data_hard_resume) 2690 ieee->data_hard_resume(ieee->dev); 2691 2692 netif_carrier_on(ieee->dev); 2693 2694 mutex_unlock(&ieee->wx_mutex); 2695 } 2696 2697 inline void rtllib_start_ibss(struct rtllib_device *ieee) 2698 { 2699 schedule_delayed_work(&ieee->start_ibss_wq, msecs_to_jiffies(150)); 2700 } 2701 2702 /* this is called only in user context, with wx_mutex held */ 2703 static void rtllib_start_bss(struct rtllib_device *ieee) 2704 { 2705 unsigned long flags; 2706 2707 if (IS_DOT11D_ENABLE(ieee) && !IS_COUNTRY_IE_VALID(ieee)) { 2708 if (!ieee->global_domain) 2709 return; 2710 } 2711 /* check if we have already found the net we 2712 * are interested in (if any). 2713 * if not (we are disassociated and we are not 2714 * in associating / authenticating phase) start the background scanning. 2715 */ 2716 rtllib_softmac_check_all_nets(ieee); 2717 2718 /* ensure no-one start an associating process (thus setting 2719 * the ieee->state to rtllib_ASSOCIATING) while we 2720 * have just checked it and we are going to enable scan. 2721 * The rtllib_new_net function is always called with 2722 * lock held (from both rtllib_softmac_check_all_nets and 2723 * the rx path), so we cannot be in the middle of such function 2724 */ 2725 spin_lock_irqsave(&ieee->lock, flags); 2726 2727 if (ieee->state == RTLLIB_NOLINK) 2728 rtllib_start_scan(ieee); 2729 spin_unlock_irqrestore(&ieee->lock, flags); 2730 } 2731 2732 static void rtllib_link_change_wq(void *data) 2733 { 2734 struct rtllib_device *ieee = container_of_dwork_rsl(data, 2735 struct rtllib_device, link_change_wq); 2736 ieee->link_change(ieee->dev); 2737 } 2738 /* called only in userspace context */ 2739 void rtllib_disassociate(struct rtllib_device *ieee) 2740 { 2741 netif_carrier_off(ieee->dev); 2742 if (ieee->softmac_features & IEEE_SOFTMAC_TX_QUEUE) 2743 rtllib_reset_queue(ieee); 2744 2745 if (ieee->data_hard_stop) 2746 ieee->data_hard_stop(ieee->dev); 2747 if (IS_DOT11D_ENABLE(ieee)) 2748 dot11d_reset(ieee); 2749 ieee->state = RTLLIB_NOLINK; 2750 ieee->is_set_key = false; 2751 ieee->wap_set = 0; 2752 2753 schedule_delayed_work(&ieee->link_change_wq, 0); 2754 2755 notify_wx_assoc_event(ieee); 2756 } 2757 2758 static void rtllib_associate_retry_wq(void *data) 2759 { 2760 struct rtllib_device *ieee = container_of_dwork_rsl(data, 2761 struct rtllib_device, associate_retry_wq); 2762 unsigned long flags; 2763 2764 mutex_lock(&ieee->wx_mutex); 2765 if (!ieee->proto_started) 2766 goto exit; 2767 2768 if (ieee->state != RTLLIB_ASSOCIATING_RETRY) 2769 goto exit; 2770 2771 /* until we do not set the state to RTLLIB_NOLINK 2772 * there are no possibility to have someone else trying 2773 * to start an association procedure (we get here with 2774 * ieee->state = RTLLIB_ASSOCIATING). 2775 * When we set the state to RTLLIB_NOLINK it is possible 2776 * that the RX path run an attempt to associate, but 2777 * both rtllib_softmac_check_all_nets and the 2778 * RX path works with ieee->lock held so there are no 2779 * problems. If we are still disassociated then start a scan. 2780 * the lock here is necessary to ensure no one try to start 2781 * an association procedure when we have just checked the 2782 * state and we are going to start the scan. 2783 */ 2784 ieee->beinretry = true; 2785 ieee->state = RTLLIB_NOLINK; 2786 2787 rtllib_softmac_check_all_nets(ieee); 2788 2789 spin_lock_irqsave(&ieee->lock, flags); 2790 2791 if (ieee->state == RTLLIB_NOLINK) 2792 rtllib_start_scan(ieee); 2793 spin_unlock_irqrestore(&ieee->lock, flags); 2794 2795 ieee->beinretry = false; 2796 exit: 2797 mutex_unlock(&ieee->wx_mutex); 2798 } 2799 2800 static struct sk_buff *rtllib_get_beacon_(struct rtllib_device *ieee) 2801 { 2802 static const u8 broadcast_addr[] = { 2803 0xff, 0xff, 0xff, 0xff, 0xff, 0xff 2804 }; 2805 struct sk_buff *skb; 2806 struct rtllib_probe_response *b; 2807 2808 skb = rtllib_probe_resp(ieee, broadcast_addr); 2809 2810 if (!skb) 2811 return NULL; 2812 2813 b = (struct rtllib_probe_response *) skb->data; 2814 b->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_BEACON); 2815 2816 return skb; 2817 2818 } 2819 2820 struct sk_buff *rtllib_get_beacon(struct rtllib_device *ieee) 2821 { 2822 struct sk_buff *skb; 2823 struct rtllib_probe_response *b; 2824 2825 skb = rtllib_get_beacon_(ieee); 2826 if (!skb) 2827 return NULL; 2828 2829 b = (struct rtllib_probe_response *) skb->data; 2830 b->header.seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4); 2831 2832 if (ieee->seq_ctrl[0] == 0xFFF) 2833 ieee->seq_ctrl[0] = 0; 2834 else 2835 ieee->seq_ctrl[0]++; 2836 2837 return skb; 2838 } 2839 EXPORT_SYMBOL(rtllib_get_beacon); 2840 2841 void rtllib_softmac_stop_protocol(struct rtllib_device *ieee, u8 mesh_flag, 2842 u8 shutdown) 2843 { 2844 rtllib_stop_scan_syncro(ieee); 2845 mutex_lock(&ieee->wx_mutex); 2846 rtllib_stop_protocol(ieee, shutdown); 2847 mutex_unlock(&ieee->wx_mutex); 2848 } 2849 EXPORT_SYMBOL(rtllib_softmac_stop_protocol); 2850 2851 2852 void rtllib_stop_protocol(struct rtllib_device *ieee, u8 shutdown) 2853 { 2854 if (!ieee->proto_started) 2855 return; 2856 2857 if (shutdown) { 2858 ieee->proto_started = 0; 2859 ieee->proto_stoppping = 1; 2860 if (ieee->rtllib_ips_leave != NULL) 2861 ieee->rtllib_ips_leave(ieee->dev); 2862 } 2863 2864 rtllib_stop_send_beacons(ieee); 2865 del_timer_sync(&ieee->associate_timer); 2866 cancel_delayed_work_sync(&ieee->associate_retry_wq); 2867 cancel_delayed_work_sync(&ieee->start_ibss_wq); 2868 cancel_delayed_work_sync(&ieee->link_change_wq); 2869 rtllib_stop_scan(ieee); 2870 2871 if (ieee->state <= RTLLIB_ASSOCIATING_AUTHENTICATED) 2872 ieee->state = RTLLIB_NOLINK; 2873 2874 if (ieee->state == RTLLIB_LINKED) { 2875 if (ieee->iw_mode == IW_MODE_INFRA) 2876 SendDisassociation(ieee, 1, WLAN_REASON_DEAUTH_LEAVING); 2877 rtllib_disassociate(ieee); 2878 } 2879 2880 if (shutdown) { 2881 RemoveAllTS(ieee); 2882 ieee->proto_stoppping = 0; 2883 } 2884 kfree(ieee->assocreq_ies); 2885 ieee->assocreq_ies = NULL; 2886 ieee->assocreq_ies_len = 0; 2887 kfree(ieee->assocresp_ies); 2888 ieee->assocresp_ies = NULL; 2889 ieee->assocresp_ies_len = 0; 2890 } 2891 2892 void rtllib_softmac_start_protocol(struct rtllib_device *ieee, u8 mesh_flag) 2893 { 2894 mutex_lock(&ieee->wx_mutex); 2895 rtllib_start_protocol(ieee); 2896 mutex_unlock(&ieee->wx_mutex); 2897 } 2898 EXPORT_SYMBOL(rtllib_softmac_start_protocol); 2899 2900 void rtllib_start_protocol(struct rtllib_device *ieee) 2901 { 2902 short ch = 0; 2903 int i = 0; 2904 2905 rtllib_update_active_chan_map(ieee); 2906 2907 if (ieee->proto_started) 2908 return; 2909 2910 ieee->proto_started = 1; 2911 2912 if (ieee->current_network.channel == 0) { 2913 do { 2914 ch++; 2915 if (ch > MAX_CHANNEL_NUMBER) 2916 return; /* no channel found */ 2917 } while (!ieee->active_channel_map[ch]); 2918 ieee->current_network.channel = ch; 2919 } 2920 2921 if (ieee->current_network.beacon_interval == 0) 2922 ieee->current_network.beacon_interval = 100; 2923 2924 for (i = 0; i < 17; i++) { 2925 ieee->last_rxseq_num[i] = -1; 2926 ieee->last_rxfrag_num[i] = -1; 2927 ieee->last_packet_time[i] = 0; 2928 } 2929 2930 if (ieee->UpdateBeaconInterruptHandler) 2931 ieee->UpdateBeaconInterruptHandler(ieee->dev, false); 2932 2933 ieee->wmm_acm = 0; 2934 /* if the user set the MAC of the ad-hoc cell and then 2935 * switch to managed mode, shall we make sure that association 2936 * attempts does not fail just because the user provide the essid 2937 * and the nic is still checking for the AP MAC ?? 2938 */ 2939 if (ieee->iw_mode == IW_MODE_INFRA) { 2940 rtllib_start_bss(ieee); 2941 } else if (ieee->iw_mode == IW_MODE_ADHOC) { 2942 if (ieee->UpdateBeaconInterruptHandler) 2943 ieee->UpdateBeaconInterruptHandler(ieee->dev, true); 2944 2945 rtllib_start_ibss(ieee); 2946 2947 } else if (ieee->iw_mode == IW_MODE_MASTER) { 2948 rtllib_start_master_bss(ieee); 2949 } else if (ieee->iw_mode == IW_MODE_MONITOR) { 2950 rtllib_start_monitor_mode(ieee); 2951 } 2952 } 2953 2954 void rtllib_softmac_init(struct rtllib_device *ieee) 2955 { 2956 int i; 2957 2958 memset(&ieee->current_network, 0, sizeof(struct rtllib_network)); 2959 2960 ieee->state = RTLLIB_NOLINK; 2961 for (i = 0; i < 5; i++) 2962 ieee->seq_ctrl[i] = 0; 2963 ieee->dot11d_info = kzalloc(sizeof(struct rt_dot11d_info), GFP_ATOMIC); 2964 if (!ieee->dot11d_info) 2965 netdev_err(ieee->dev, "Can't alloc memory for DOT11D\n"); 2966 ieee->LinkDetectInfo.SlotIndex = 0; 2967 ieee->LinkDetectInfo.SlotNum = 2; 2968 ieee->LinkDetectInfo.NumRecvBcnInPeriod = 0; 2969 ieee->LinkDetectInfo.NumRecvDataInPeriod = 0; 2970 ieee->LinkDetectInfo.NumTxOkInPeriod = 0; 2971 ieee->LinkDetectInfo.NumRxOkInPeriod = 0; 2972 ieee->LinkDetectInfo.NumRxUnicastOkInPeriod = 0; 2973 ieee->bIsAggregateFrame = false; 2974 ieee->assoc_id = 0; 2975 ieee->queue_stop = 0; 2976 ieee->scanning_continue = 0; 2977 ieee->softmac_features = 0; 2978 ieee->wap_set = 0; 2979 ieee->ssid_set = 0; 2980 ieee->proto_started = 0; 2981 ieee->proto_stoppping = 0; 2982 ieee->basic_rate = RTLLIB_DEFAULT_BASIC_RATE; 2983 ieee->rate = 22; 2984 ieee->ps = RTLLIB_PS_DISABLED; 2985 ieee->sta_sleep = LPS_IS_WAKE; 2986 2987 ieee->Regdot11HTOperationalRateSet[0] = 0xff; 2988 ieee->Regdot11HTOperationalRateSet[1] = 0xff; 2989 ieee->Regdot11HTOperationalRateSet[4] = 0x01; 2990 2991 ieee->Regdot11TxHTOperationalRateSet[0] = 0xff; 2992 ieee->Regdot11TxHTOperationalRateSet[1] = 0xff; 2993 ieee->Regdot11TxHTOperationalRateSet[4] = 0x01; 2994 2995 ieee->FirstIe_InScan = false; 2996 ieee->actscanning = false; 2997 ieee->beinretry = false; 2998 ieee->is_set_key = false; 2999 init_mgmt_queue(ieee); 3000 3001 ieee->tx_pending.txb = NULL; 3002 3003 timer_setup(&ieee->associate_timer, rtllib_associate_abort_cb, 0); 3004 3005 timer_setup(&ieee->beacon_timer, rtllib_send_beacon_cb, 0); 3006 3007 INIT_DELAYED_WORK_RSL(&ieee->link_change_wq, 3008 (void *)rtllib_link_change_wq, ieee); 3009 INIT_DELAYED_WORK_RSL(&ieee->start_ibss_wq, 3010 (void *)rtllib_start_ibss_wq, ieee); 3011 INIT_WORK_RSL(&ieee->associate_complete_wq, 3012 (void *)rtllib_associate_complete_wq, ieee); 3013 INIT_DELAYED_WORK_RSL(&ieee->associate_procedure_wq, 3014 (void *)rtllib_associate_procedure_wq, ieee); 3015 INIT_DELAYED_WORK_RSL(&ieee->softmac_scan_wq, 3016 (void *)rtllib_softmac_scan_wq, ieee); 3017 INIT_DELAYED_WORK_RSL(&ieee->associate_retry_wq, 3018 (void *)rtllib_associate_retry_wq, ieee); 3019 INIT_WORK_RSL(&ieee->wx_sync_scan_wq, (void *)rtllib_wx_sync_scan_wq, 3020 ieee); 3021 3022 mutex_init(&ieee->wx_mutex); 3023 mutex_init(&ieee->scan_mutex); 3024 mutex_init(&ieee->ips_mutex); 3025 3026 spin_lock_init(&ieee->mgmt_tx_lock); 3027 spin_lock_init(&ieee->beacon_lock); 3028 3029 tasklet_setup(&ieee->ps_task, rtllib_sta_ps); 3030 3031 } 3032 3033 void rtllib_softmac_free(struct rtllib_device *ieee) 3034 { 3035 mutex_lock(&ieee->wx_mutex); 3036 kfree(ieee->dot11d_info); 3037 ieee->dot11d_info = NULL; 3038 del_timer_sync(&ieee->associate_timer); 3039 3040 cancel_delayed_work_sync(&ieee->associate_retry_wq); 3041 cancel_delayed_work_sync(&ieee->associate_procedure_wq); 3042 cancel_delayed_work_sync(&ieee->softmac_scan_wq); 3043 cancel_delayed_work_sync(&ieee->start_ibss_wq); 3044 cancel_delayed_work_sync(&ieee->hw_wakeup_wq); 3045 cancel_delayed_work_sync(&ieee->hw_sleep_wq); 3046 cancel_delayed_work_sync(&ieee->link_change_wq); 3047 cancel_work_sync(&ieee->associate_complete_wq); 3048 cancel_work_sync(&ieee->ips_leave_wq); 3049 cancel_work_sync(&ieee->wx_sync_scan_wq); 3050 mutex_unlock(&ieee->wx_mutex); 3051 tasklet_kill(&ieee->ps_task); 3052 } 3053 3054 static inline struct sk_buff * 3055 rtllib_disauth_skb(struct rtllib_network *beacon, 3056 struct rtllib_device *ieee, u16 asRsn) 3057 { 3058 struct sk_buff *skb; 3059 struct rtllib_disauth *disauth; 3060 int len = sizeof(struct rtllib_disauth) + ieee->tx_headroom; 3061 3062 skb = dev_alloc_skb(len); 3063 if (!skb) 3064 return NULL; 3065 3066 skb_reserve(skb, ieee->tx_headroom); 3067 3068 disauth = skb_put(skb, sizeof(struct rtllib_disauth)); 3069 disauth->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_DEAUTH); 3070 disauth->header.duration_id = 0; 3071 3072 ether_addr_copy(disauth->header.addr1, beacon->bssid); 3073 ether_addr_copy(disauth->header.addr2, ieee->dev->dev_addr); 3074 ether_addr_copy(disauth->header.addr3, beacon->bssid); 3075 3076 disauth->reason = cpu_to_le16(asRsn); 3077 return skb; 3078 } 3079 3080 static inline struct sk_buff * 3081 rtllib_disassociate_skb(struct rtllib_network *beacon, 3082 struct rtllib_device *ieee, u16 asRsn) 3083 { 3084 struct sk_buff *skb; 3085 struct rtllib_disassoc *disass; 3086 int len = sizeof(struct rtllib_disassoc) + ieee->tx_headroom; 3087 3088 skb = dev_alloc_skb(len); 3089 3090 if (!skb) 3091 return NULL; 3092 3093 skb_reserve(skb, ieee->tx_headroom); 3094 3095 disass = skb_put(skb, sizeof(struct rtllib_disassoc)); 3096 disass->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_DISASSOC); 3097 disass->header.duration_id = 0; 3098 3099 ether_addr_copy(disass->header.addr1, beacon->bssid); 3100 ether_addr_copy(disass->header.addr2, ieee->dev->dev_addr); 3101 ether_addr_copy(disass->header.addr3, beacon->bssid); 3102 3103 disass->reason = cpu_to_le16(asRsn); 3104 return skb; 3105 } 3106 3107 void SendDisassociation(struct rtllib_device *ieee, bool deauth, u16 asRsn) 3108 { 3109 struct rtllib_network *beacon = &ieee->current_network; 3110 struct sk_buff *skb; 3111 3112 if (deauth) 3113 skb = rtllib_disauth_skb(beacon, ieee, asRsn); 3114 else 3115 skb = rtllib_disassociate_skb(beacon, ieee, asRsn); 3116 3117 if (skb) 3118 softmac_mgmt_xmit(skb, ieee); 3119 } 3120 3121 u8 rtllib_ap_sec_type(struct rtllib_device *ieee) 3122 { 3123 static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04}; 3124 static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04}; 3125 int wpa_ie_len = ieee->wpa_ie_len; 3126 struct lib80211_crypt_data *crypt; 3127 int encrypt; 3128 3129 crypt = ieee->crypt_info.crypt[ieee->crypt_info.tx_keyidx]; 3130 encrypt = (ieee->current_network.capability & WLAN_CAPABILITY_PRIVACY) 3131 || (ieee->host_encrypt && crypt && crypt->ops && 3132 (strcmp(crypt->ops->name, "R-WEP") == 0)); 3133 3134 /* simply judge */ 3135 if (encrypt && (wpa_ie_len == 0)) { 3136 return SEC_ALG_WEP; 3137 } else if ((wpa_ie_len != 0)) { 3138 if (((ieee->wpa_ie[0] == 0xdd) && 3139 (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || 3140 ((ieee->wpa_ie[0] == 0x30) && 3141 (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4)))) 3142 return SEC_ALG_CCMP; 3143 else 3144 return SEC_ALG_TKIP; 3145 } else { 3146 return SEC_ALG_NONE; 3147 } 3148 } 3149 3150 static void rtllib_MgntDisconnectIBSS(struct rtllib_device *rtllib) 3151 { 3152 u8 OpMode; 3153 u8 i; 3154 bool bFilterOutNonAssociatedBSSID = false; 3155 3156 rtllib->state = RTLLIB_NOLINK; 3157 3158 for (i = 0; i < 6; i++) 3159 rtllib->current_network.bssid[i] = 0x55; 3160 3161 rtllib->OpMode = RT_OP_MODE_NO_LINK; 3162 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_BSSID, 3163 rtllib->current_network.bssid); 3164 OpMode = RT_OP_MODE_NO_LINK; 3165 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_MEDIA_STATUS, &OpMode); 3166 rtllib_stop_send_beacons(rtllib); 3167 3168 bFilterOutNonAssociatedBSSID = false; 3169 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_CECHK_BSSID, 3170 (u8 *)(&bFilterOutNonAssociatedBSSID)); 3171 notify_wx_assoc_event(rtllib); 3172 3173 } 3174 3175 static void rtllib_MlmeDisassociateRequest(struct rtllib_device *rtllib, 3176 u8 *asSta, u8 asRsn) 3177 { 3178 u8 i; 3179 u8 OpMode; 3180 3181 RemovePeerTS(rtllib, asSta); 3182 3183 if (memcmp(rtllib->current_network.bssid, asSta, 6) == 0) { 3184 rtllib->state = RTLLIB_NOLINK; 3185 3186 for (i = 0; i < 6; i++) 3187 rtllib->current_network.bssid[i] = 0x22; 3188 OpMode = RT_OP_MODE_NO_LINK; 3189 rtllib->OpMode = RT_OP_MODE_NO_LINK; 3190 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_MEDIA_STATUS, 3191 (u8 *)(&OpMode)); 3192 rtllib_disassociate(rtllib); 3193 3194 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_BSSID, 3195 rtllib->current_network.bssid); 3196 3197 } 3198 3199 } 3200 3201 static void 3202 rtllib_MgntDisconnectAP( 3203 struct rtllib_device *rtllib, 3204 u8 asRsn 3205 ) 3206 { 3207 bool bFilterOutNonAssociatedBSSID = false; 3208 3209 bFilterOutNonAssociatedBSSID = false; 3210 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_CECHK_BSSID, 3211 (u8 *)(&bFilterOutNonAssociatedBSSID)); 3212 rtllib_MlmeDisassociateRequest(rtllib, rtllib->current_network.bssid, 3213 asRsn); 3214 3215 rtllib->state = RTLLIB_NOLINK; 3216 } 3217 3218 bool rtllib_MgntDisconnect(struct rtllib_device *rtllib, u8 asRsn) 3219 { 3220 if (rtllib->ps != RTLLIB_PS_DISABLED) 3221 rtllib->sta_wake_up(rtllib->dev); 3222 3223 if (rtllib->state == RTLLIB_LINKED) { 3224 if (rtllib->iw_mode == IW_MODE_ADHOC) 3225 rtllib_MgntDisconnectIBSS(rtllib); 3226 if (rtllib->iw_mode == IW_MODE_INFRA) 3227 rtllib_MgntDisconnectAP(rtllib, asRsn); 3228 3229 } 3230 3231 return true; 3232 } 3233 EXPORT_SYMBOL(rtllib_MgntDisconnect); 3234 3235 void notify_wx_assoc_event(struct rtllib_device *ieee) 3236 { 3237 union iwreq_data wrqu; 3238 3239 if (ieee->cannot_notify) 3240 return; 3241 3242 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 3243 if (ieee->state == RTLLIB_LINKED) 3244 memcpy(wrqu.ap_addr.sa_data, ieee->current_network.bssid, 3245 ETH_ALEN); 3246 else { 3247 3248 netdev_info(ieee->dev, "%s(): Tell user space disconnected\n", 3249 __func__); 3250 eth_zero_addr(wrqu.ap_addr.sa_data); 3251 } 3252 wireless_send_event(ieee->dev, SIOCGIWAP, &wrqu, NULL); 3253 } 3254 EXPORT_SYMBOL(notify_wx_assoc_event); 3255