1 /* 2 * SME code for cfg80211's connect emulation. 3 * 4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net> 5 * Copyright (C) 2009 Intel Corporation. All rights reserved. 6 */ 7 8 #include <linux/etherdevice.h> 9 #include <linux/if_arp.h> 10 #include <linux/slab.h> 11 #include <linux/workqueue.h> 12 #include <linux/wireless.h> 13 #include <net/iw_handler.h> 14 #include <net/cfg80211.h> 15 #include <net/rtnetlink.h> 16 #include "nl80211.h" 17 #include "reg.h" 18 19 struct cfg80211_conn { 20 struct cfg80211_connect_params params; 21 /* these are sub-states of the _CONNECTING sme_state */ 22 enum { 23 CFG80211_CONN_IDLE, 24 CFG80211_CONN_SCANNING, 25 CFG80211_CONN_SCAN_AGAIN, 26 CFG80211_CONN_AUTHENTICATE_NEXT, 27 CFG80211_CONN_AUTHENTICATING, 28 CFG80211_CONN_ASSOCIATE_NEXT, 29 CFG80211_CONN_ASSOCIATING, 30 CFG80211_CONN_DEAUTH_ASSOC_FAIL, 31 } state; 32 u8 bssid[ETH_ALEN], prev_bssid[ETH_ALEN]; 33 u8 *ie; 34 size_t ie_len; 35 bool auto_auth, prev_bssid_valid; 36 }; 37 38 static bool cfg80211_is_all_idle(void) 39 { 40 struct cfg80211_registered_device *rdev; 41 struct wireless_dev *wdev; 42 bool is_all_idle = true; 43 44 mutex_lock(&cfg80211_mutex); 45 46 /* 47 * All devices must be idle as otherwise if you are actively 48 * scanning some new beacon hints could be learned and would 49 * count as new regulatory hints. 50 */ 51 list_for_each_entry(rdev, &cfg80211_rdev_list, list) { 52 cfg80211_lock_rdev(rdev); 53 list_for_each_entry(wdev, &rdev->netdev_list, list) { 54 wdev_lock(wdev); 55 if (wdev->sme_state != CFG80211_SME_IDLE) 56 is_all_idle = false; 57 wdev_unlock(wdev); 58 } 59 cfg80211_unlock_rdev(rdev); 60 } 61 62 mutex_unlock(&cfg80211_mutex); 63 64 return is_all_idle; 65 } 66 67 static void disconnect_work(struct work_struct *work) 68 { 69 if (!cfg80211_is_all_idle()) 70 return; 71 72 regulatory_hint_disconnect(); 73 } 74 75 static DECLARE_WORK(cfg80211_disconnect_work, disconnect_work); 76 77 static int cfg80211_conn_scan(struct wireless_dev *wdev) 78 { 79 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 80 struct cfg80211_scan_request *request; 81 int n_channels, err; 82 83 ASSERT_RTNL(); 84 ASSERT_RDEV_LOCK(rdev); 85 ASSERT_WDEV_LOCK(wdev); 86 87 if (rdev->scan_req) 88 return -EBUSY; 89 90 if (wdev->conn->params.channel) { 91 n_channels = 1; 92 } else { 93 enum ieee80211_band band; 94 n_channels = 0; 95 96 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 97 if (!wdev->wiphy->bands[band]) 98 continue; 99 n_channels += wdev->wiphy->bands[band]->n_channels; 100 } 101 } 102 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) + 103 sizeof(request->channels[0]) * n_channels, 104 GFP_KERNEL); 105 if (!request) 106 return -ENOMEM; 107 108 if (wdev->conn->params.channel) 109 request->channels[0] = wdev->conn->params.channel; 110 else { 111 int i = 0, j; 112 enum ieee80211_band band; 113 114 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 115 if (!wdev->wiphy->bands[band]) 116 continue; 117 for (j = 0; j < wdev->wiphy->bands[band]->n_channels; 118 i++, j++) 119 request->channels[i] = 120 &wdev->wiphy->bands[band]->channels[j]; 121 } 122 } 123 request->n_channels = n_channels; 124 request->ssids = (void *)&request->channels[n_channels]; 125 request->n_ssids = 1; 126 127 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid, 128 wdev->conn->params.ssid_len); 129 request->ssids[0].ssid_len = wdev->conn->params.ssid_len; 130 131 request->dev = wdev->netdev; 132 request->wiphy = &rdev->wiphy; 133 134 rdev->scan_req = request; 135 136 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request); 137 if (!err) { 138 wdev->conn->state = CFG80211_CONN_SCANNING; 139 nl80211_send_scan_start(rdev, wdev->netdev); 140 dev_hold(wdev->netdev); 141 } else { 142 rdev->scan_req = NULL; 143 kfree(request); 144 } 145 return err; 146 } 147 148 static int cfg80211_conn_do_work(struct wireless_dev *wdev) 149 { 150 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 151 struct cfg80211_connect_params *params; 152 const u8 *prev_bssid = NULL; 153 int err; 154 155 ASSERT_WDEV_LOCK(wdev); 156 157 if (!wdev->conn) 158 return 0; 159 160 params = &wdev->conn->params; 161 162 switch (wdev->conn->state) { 163 case CFG80211_CONN_SCAN_AGAIN: 164 return cfg80211_conn_scan(wdev); 165 case CFG80211_CONN_AUTHENTICATE_NEXT: 166 BUG_ON(!rdev->ops->auth); 167 wdev->conn->state = CFG80211_CONN_AUTHENTICATING; 168 return __cfg80211_mlme_auth(rdev, wdev->netdev, 169 params->channel, params->auth_type, 170 params->bssid, 171 params->ssid, params->ssid_len, 172 NULL, 0, 173 params->key, params->key_len, 174 params->key_idx, false); 175 case CFG80211_CONN_ASSOCIATE_NEXT: 176 BUG_ON(!rdev->ops->assoc); 177 wdev->conn->state = CFG80211_CONN_ASSOCIATING; 178 if (wdev->conn->prev_bssid_valid) 179 prev_bssid = wdev->conn->prev_bssid; 180 err = __cfg80211_mlme_assoc(rdev, wdev->netdev, 181 params->channel, params->bssid, 182 prev_bssid, 183 params->ssid, params->ssid_len, 184 params->ie, params->ie_len, 185 false, ¶ms->crypto); 186 if (err) 187 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 188 NULL, 0, 189 WLAN_REASON_DEAUTH_LEAVING, 190 false); 191 return err; 192 case CFG80211_CONN_DEAUTH_ASSOC_FAIL: 193 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 194 NULL, 0, 195 WLAN_REASON_DEAUTH_LEAVING, false); 196 /* return an error so that we call __cfg80211_connect_result() */ 197 return -EINVAL; 198 default: 199 return 0; 200 } 201 } 202 203 void cfg80211_conn_work(struct work_struct *work) 204 { 205 struct cfg80211_registered_device *rdev = 206 container_of(work, struct cfg80211_registered_device, conn_work); 207 struct wireless_dev *wdev; 208 u8 bssid_buf[ETH_ALEN], *bssid = NULL; 209 210 rtnl_lock(); 211 cfg80211_lock_rdev(rdev); 212 mutex_lock(&rdev->devlist_mtx); 213 214 list_for_each_entry(wdev, &rdev->netdev_list, list) { 215 wdev_lock(wdev); 216 if (!netif_running(wdev->netdev)) { 217 wdev_unlock(wdev); 218 continue; 219 } 220 if (wdev->sme_state != CFG80211_SME_CONNECTING) { 221 wdev_unlock(wdev); 222 continue; 223 } 224 if (wdev->conn->params.bssid) { 225 memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN); 226 bssid = bssid_buf; 227 } 228 if (cfg80211_conn_do_work(wdev)) 229 __cfg80211_connect_result( 230 wdev->netdev, bssid, 231 NULL, 0, NULL, 0, 232 WLAN_STATUS_UNSPECIFIED_FAILURE, 233 false, NULL); 234 wdev_unlock(wdev); 235 } 236 237 mutex_unlock(&rdev->devlist_mtx); 238 cfg80211_unlock_rdev(rdev); 239 rtnl_unlock(); 240 } 241 242 static struct cfg80211_bss *cfg80211_get_conn_bss(struct wireless_dev *wdev) 243 { 244 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 245 struct cfg80211_bss *bss; 246 u16 capa = WLAN_CAPABILITY_ESS; 247 248 ASSERT_WDEV_LOCK(wdev); 249 250 if (wdev->conn->params.privacy) 251 capa |= WLAN_CAPABILITY_PRIVACY; 252 253 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid, 254 wdev->conn->params.ssid, 255 wdev->conn->params.ssid_len, 256 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY, 257 capa); 258 if (!bss) 259 return NULL; 260 261 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN); 262 wdev->conn->params.bssid = wdev->conn->bssid; 263 wdev->conn->params.channel = bss->channel; 264 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 265 schedule_work(&rdev->conn_work); 266 267 return bss; 268 } 269 270 static void __cfg80211_sme_scan_done(struct net_device *dev) 271 { 272 struct wireless_dev *wdev = dev->ieee80211_ptr; 273 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 274 struct cfg80211_bss *bss; 275 276 ASSERT_WDEV_LOCK(wdev); 277 278 if (wdev->sme_state != CFG80211_SME_CONNECTING) 279 return; 280 281 if (!wdev->conn) 282 return; 283 284 if (wdev->conn->state != CFG80211_CONN_SCANNING && 285 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN) 286 return; 287 288 bss = cfg80211_get_conn_bss(wdev); 289 if (bss) { 290 cfg80211_put_bss(bss); 291 } else { 292 /* not found */ 293 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN) 294 schedule_work(&rdev->conn_work); 295 else 296 __cfg80211_connect_result( 297 wdev->netdev, 298 wdev->conn->params.bssid, 299 NULL, 0, NULL, 0, 300 WLAN_STATUS_UNSPECIFIED_FAILURE, 301 false, NULL); 302 } 303 } 304 305 void cfg80211_sme_scan_done(struct net_device *dev) 306 { 307 struct wireless_dev *wdev = dev->ieee80211_ptr; 308 309 mutex_lock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 310 wdev_lock(wdev); 311 __cfg80211_sme_scan_done(dev); 312 wdev_unlock(wdev); 313 mutex_unlock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 314 } 315 316 void cfg80211_sme_rx_auth(struct net_device *dev, 317 const u8 *buf, size_t len) 318 { 319 struct wireless_dev *wdev = dev->ieee80211_ptr; 320 struct wiphy *wiphy = wdev->wiphy; 321 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 322 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; 323 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code); 324 325 ASSERT_WDEV_LOCK(wdev); 326 327 /* should only RX auth frames when connecting */ 328 if (wdev->sme_state != CFG80211_SME_CONNECTING) 329 return; 330 331 if (WARN_ON(!wdev->conn)) 332 return; 333 334 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG && 335 wdev->conn->auto_auth && 336 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) { 337 /* select automatically between only open, shared, leap */ 338 switch (wdev->conn->params.auth_type) { 339 case NL80211_AUTHTYPE_OPEN_SYSTEM: 340 if (wdev->connect_keys) 341 wdev->conn->params.auth_type = 342 NL80211_AUTHTYPE_SHARED_KEY; 343 else 344 wdev->conn->params.auth_type = 345 NL80211_AUTHTYPE_NETWORK_EAP; 346 break; 347 case NL80211_AUTHTYPE_SHARED_KEY: 348 wdev->conn->params.auth_type = 349 NL80211_AUTHTYPE_NETWORK_EAP; 350 break; 351 default: 352 /* huh? */ 353 wdev->conn->params.auth_type = 354 NL80211_AUTHTYPE_OPEN_SYSTEM; 355 break; 356 } 357 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 358 schedule_work(&rdev->conn_work); 359 } else if (status_code != WLAN_STATUS_SUCCESS) { 360 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0, 361 status_code, false, NULL); 362 } else if (wdev->sme_state == CFG80211_SME_CONNECTING && 363 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) { 364 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 365 schedule_work(&rdev->conn_work); 366 } 367 } 368 369 bool cfg80211_sme_failed_reassoc(struct wireless_dev *wdev) 370 { 371 struct wiphy *wiphy = wdev->wiphy; 372 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 373 374 if (WARN_ON(!wdev->conn)) 375 return false; 376 377 if (!wdev->conn->prev_bssid_valid) 378 return false; 379 380 /* 381 * Some stupid APs don't accept reassoc, so we 382 * need to fall back to trying regular assoc. 383 */ 384 wdev->conn->prev_bssid_valid = false; 385 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 386 schedule_work(&rdev->conn_work); 387 388 return true; 389 } 390 391 void cfg80211_sme_failed_assoc(struct wireless_dev *wdev) 392 { 393 struct wiphy *wiphy = wdev->wiphy; 394 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 395 396 wdev->conn->state = CFG80211_CONN_DEAUTH_ASSOC_FAIL; 397 schedule_work(&rdev->conn_work); 398 } 399 400 void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 401 const u8 *req_ie, size_t req_ie_len, 402 const u8 *resp_ie, size_t resp_ie_len, 403 u16 status, bool wextev, 404 struct cfg80211_bss *bss) 405 { 406 struct wireless_dev *wdev = dev->ieee80211_ptr; 407 u8 *country_ie; 408 #ifdef CONFIG_CFG80211_WEXT 409 union iwreq_data wrqu; 410 #endif 411 412 ASSERT_WDEV_LOCK(wdev); 413 414 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION && 415 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)) 416 return; 417 418 if (wdev->sme_state != CFG80211_SME_CONNECTING) 419 return; 420 421 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev, 422 bssid, req_ie, req_ie_len, 423 resp_ie, resp_ie_len, 424 status, GFP_KERNEL); 425 426 #ifdef CONFIG_CFG80211_WEXT 427 if (wextev) { 428 if (req_ie && status == WLAN_STATUS_SUCCESS) { 429 memset(&wrqu, 0, sizeof(wrqu)); 430 wrqu.data.length = req_ie_len; 431 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie); 432 } 433 434 if (resp_ie && status == WLAN_STATUS_SUCCESS) { 435 memset(&wrqu, 0, sizeof(wrqu)); 436 wrqu.data.length = resp_ie_len; 437 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie); 438 } 439 440 memset(&wrqu, 0, sizeof(wrqu)); 441 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 442 if (bssid && status == WLAN_STATUS_SUCCESS) { 443 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 444 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 445 wdev->wext.prev_bssid_valid = true; 446 } 447 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 448 } 449 #endif 450 451 if (wdev->current_bss) { 452 cfg80211_unhold_bss(wdev->current_bss); 453 cfg80211_put_bss(&wdev->current_bss->pub); 454 wdev->current_bss = NULL; 455 } 456 457 if (wdev->conn) 458 wdev->conn->state = CFG80211_CONN_IDLE; 459 460 if (status != WLAN_STATUS_SUCCESS) { 461 wdev->sme_state = CFG80211_SME_IDLE; 462 if (wdev->conn) 463 kfree(wdev->conn->ie); 464 kfree(wdev->conn); 465 wdev->conn = NULL; 466 kfree(wdev->connect_keys); 467 wdev->connect_keys = NULL; 468 wdev->ssid_len = 0; 469 return; 470 } 471 472 if (!bss) 473 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 474 wdev->ssid, wdev->ssid_len, 475 WLAN_CAPABILITY_ESS, 476 WLAN_CAPABILITY_ESS); 477 478 if (WARN_ON(!bss)) 479 return; 480 481 cfg80211_hold_bss(bss_from_pub(bss)); 482 wdev->current_bss = bss_from_pub(bss); 483 484 wdev->sme_state = CFG80211_SME_CONNECTED; 485 cfg80211_upload_connect_keys(wdev); 486 487 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY); 488 489 if (!country_ie) 490 return; 491 492 /* 493 * ieee80211_bss_get_ie() ensures we can access: 494 * - country_ie + 2, the start of the country ie data, and 495 * - and country_ie[1] which is the IE length 496 */ 497 regulatory_hint_11d(wdev->wiphy, 498 bss->channel->band, 499 country_ie + 2, 500 country_ie[1]); 501 } 502 503 void cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 504 const u8 *req_ie, size_t req_ie_len, 505 const u8 *resp_ie, size_t resp_ie_len, 506 u16 status, gfp_t gfp) 507 { 508 struct wireless_dev *wdev = dev->ieee80211_ptr; 509 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 510 struct cfg80211_event *ev; 511 unsigned long flags; 512 513 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTING); 514 515 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 516 if (!ev) 517 return; 518 519 ev->type = EVENT_CONNECT_RESULT; 520 if (bssid) 521 memcpy(ev->cr.bssid, bssid, ETH_ALEN); 522 if (req_ie_len) { 523 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev); 524 ev->cr.req_ie_len = req_ie_len; 525 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len); 526 } 527 if (resp_ie_len) { 528 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 529 ev->cr.resp_ie_len = resp_ie_len; 530 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len); 531 } 532 ev->cr.status = status; 533 534 spin_lock_irqsave(&wdev->event_lock, flags); 535 list_add_tail(&ev->list, &wdev->event_list); 536 spin_unlock_irqrestore(&wdev->event_lock, flags); 537 queue_work(cfg80211_wq, &rdev->event_work); 538 } 539 EXPORT_SYMBOL(cfg80211_connect_result); 540 541 void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid, 542 const u8 *req_ie, size_t req_ie_len, 543 const u8 *resp_ie, size_t resp_ie_len) 544 { 545 struct cfg80211_bss *bss; 546 #ifdef CONFIG_CFG80211_WEXT 547 union iwreq_data wrqu; 548 #endif 549 550 ASSERT_WDEV_LOCK(wdev); 551 552 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION && 553 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)) 554 return; 555 556 if (wdev->sme_state != CFG80211_SME_CONNECTED) 557 return; 558 559 /* internal error -- how did we get to CONNECTED w/o BSS? */ 560 if (WARN_ON(!wdev->current_bss)) { 561 return; 562 } 563 564 cfg80211_unhold_bss(wdev->current_bss); 565 cfg80211_put_bss(&wdev->current_bss->pub); 566 wdev->current_bss = NULL; 567 568 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 569 wdev->ssid, wdev->ssid_len, 570 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS); 571 572 if (WARN_ON(!bss)) 573 return; 574 575 cfg80211_hold_bss(bss_from_pub(bss)); 576 wdev->current_bss = bss_from_pub(bss); 577 578 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid, 579 req_ie, req_ie_len, resp_ie, resp_ie_len, 580 GFP_KERNEL); 581 582 #ifdef CONFIG_CFG80211_WEXT 583 if (req_ie) { 584 memset(&wrqu, 0, sizeof(wrqu)); 585 wrqu.data.length = req_ie_len; 586 wireless_send_event(wdev->netdev, IWEVASSOCREQIE, 587 &wrqu, req_ie); 588 } 589 590 if (resp_ie) { 591 memset(&wrqu, 0, sizeof(wrqu)); 592 wrqu.data.length = resp_ie_len; 593 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE, 594 &wrqu, resp_ie); 595 } 596 597 memset(&wrqu, 0, sizeof(wrqu)); 598 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 599 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 600 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 601 wdev->wext.prev_bssid_valid = true; 602 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL); 603 #endif 604 } 605 606 void cfg80211_roamed(struct net_device *dev, const u8 *bssid, 607 const u8 *req_ie, size_t req_ie_len, 608 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp) 609 { 610 struct wireless_dev *wdev = dev->ieee80211_ptr; 611 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 612 struct cfg80211_event *ev; 613 unsigned long flags; 614 615 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 616 617 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 618 if (!ev) 619 return; 620 621 ev->type = EVENT_ROAMED; 622 memcpy(ev->rm.bssid, bssid, ETH_ALEN); 623 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev); 624 ev->rm.req_ie_len = req_ie_len; 625 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len); 626 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 627 ev->rm.resp_ie_len = resp_ie_len; 628 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len); 629 630 spin_lock_irqsave(&wdev->event_lock, flags); 631 list_add_tail(&ev->list, &wdev->event_list); 632 spin_unlock_irqrestore(&wdev->event_lock, flags); 633 queue_work(cfg80211_wq, &rdev->event_work); 634 } 635 EXPORT_SYMBOL(cfg80211_roamed); 636 637 void __cfg80211_disconnected(struct net_device *dev, const u8 *ie, 638 size_t ie_len, u16 reason, bool from_ap) 639 { 640 struct wireless_dev *wdev = dev->ieee80211_ptr; 641 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 642 int i; 643 #ifdef CONFIG_CFG80211_WEXT 644 union iwreq_data wrqu; 645 #endif 646 647 ASSERT_WDEV_LOCK(wdev); 648 649 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION && 650 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)) 651 return; 652 653 if (wdev->sme_state != CFG80211_SME_CONNECTED) 654 return; 655 656 if (wdev->current_bss) { 657 cfg80211_unhold_bss(wdev->current_bss); 658 cfg80211_put_bss(&wdev->current_bss->pub); 659 } 660 661 wdev->current_bss = NULL; 662 wdev->sme_state = CFG80211_SME_IDLE; 663 wdev->ssid_len = 0; 664 665 if (wdev->conn) { 666 const u8 *bssid; 667 int ret; 668 669 kfree(wdev->conn->ie); 670 wdev->conn->ie = NULL; 671 kfree(wdev->conn); 672 wdev->conn = NULL; 673 674 /* 675 * If this disconnect was due to a disassoc, we 676 * we might still have an auth BSS around. For 677 * the userspace SME that's currently expected, 678 * but for the kernel SME (nl80211 CONNECT or 679 * wireless extensions) we want to clear up all 680 * state. 681 */ 682 for (i = 0; i < MAX_AUTH_BSSES; i++) { 683 if (!wdev->auth_bsses[i]) 684 continue; 685 bssid = wdev->auth_bsses[i]->pub.bssid; 686 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0, 687 WLAN_REASON_DEAUTH_LEAVING, 688 false); 689 WARN(ret, "deauth failed: %d\n", ret); 690 } 691 } 692 693 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap); 694 695 /* 696 * Delete all the keys ... pairwise keys can't really 697 * exist any more anyway, but default keys might. 698 */ 699 if (rdev->ops->del_key) 700 for (i = 0; i < 6; i++) 701 rdev->ops->del_key(wdev->wiphy, dev, i, false, NULL); 702 703 #ifdef CONFIG_CFG80211_WEXT 704 memset(&wrqu, 0, sizeof(wrqu)); 705 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 706 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 707 wdev->wext.connect.ssid_len = 0; 708 #endif 709 710 schedule_work(&cfg80211_disconnect_work); 711 } 712 713 void cfg80211_disconnected(struct net_device *dev, u16 reason, 714 u8 *ie, size_t ie_len, gfp_t gfp) 715 { 716 struct wireless_dev *wdev = dev->ieee80211_ptr; 717 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 718 struct cfg80211_event *ev; 719 unsigned long flags; 720 721 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 722 723 ev = kzalloc(sizeof(*ev) + ie_len, gfp); 724 if (!ev) 725 return; 726 727 ev->type = EVENT_DISCONNECTED; 728 ev->dc.ie = ((u8 *)ev) + sizeof(*ev); 729 ev->dc.ie_len = ie_len; 730 memcpy((void *)ev->dc.ie, ie, ie_len); 731 ev->dc.reason = reason; 732 733 spin_lock_irqsave(&wdev->event_lock, flags); 734 list_add_tail(&ev->list, &wdev->event_list); 735 spin_unlock_irqrestore(&wdev->event_lock, flags); 736 queue_work(cfg80211_wq, &rdev->event_work); 737 } 738 EXPORT_SYMBOL(cfg80211_disconnected); 739 740 int __cfg80211_connect(struct cfg80211_registered_device *rdev, 741 struct net_device *dev, 742 struct cfg80211_connect_params *connect, 743 struct cfg80211_cached_keys *connkeys, 744 const u8 *prev_bssid) 745 { 746 struct wireless_dev *wdev = dev->ieee80211_ptr; 747 struct cfg80211_bss *bss = NULL; 748 int err; 749 750 ASSERT_WDEV_LOCK(wdev); 751 752 if (wdev->sme_state != CFG80211_SME_IDLE) 753 return -EALREADY; 754 755 if (WARN_ON(wdev->connect_keys)) { 756 kfree(wdev->connect_keys); 757 wdev->connect_keys = NULL; 758 } 759 760 if (connkeys && connkeys->def >= 0) { 761 int idx; 762 u32 cipher; 763 764 idx = connkeys->def; 765 cipher = connkeys->params[idx].cipher; 766 /* If given a WEP key we may need it for shared key auth */ 767 if (cipher == WLAN_CIPHER_SUITE_WEP40 || 768 cipher == WLAN_CIPHER_SUITE_WEP104) { 769 connect->key_idx = idx; 770 connect->key = connkeys->params[idx].key; 771 connect->key_len = connkeys->params[idx].key_len; 772 773 /* 774 * If ciphers are not set (e.g. when going through 775 * iwconfig), we have to set them appropriately here. 776 */ 777 if (connect->crypto.cipher_group == 0) 778 connect->crypto.cipher_group = cipher; 779 780 if (connect->crypto.n_ciphers_pairwise == 0) { 781 connect->crypto.n_ciphers_pairwise = 1; 782 connect->crypto.ciphers_pairwise[0] = cipher; 783 } 784 } 785 } 786 787 if (!rdev->ops->connect) { 788 if (!rdev->ops->auth || !rdev->ops->assoc) 789 return -EOPNOTSUPP; 790 791 if (WARN_ON(wdev->conn)) 792 return -EINPROGRESS; 793 794 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL); 795 if (!wdev->conn) 796 return -ENOMEM; 797 798 /* 799 * Copy all parameters, and treat explicitly IEs, BSSID, SSID. 800 */ 801 memcpy(&wdev->conn->params, connect, sizeof(*connect)); 802 if (connect->bssid) { 803 wdev->conn->params.bssid = wdev->conn->bssid; 804 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN); 805 } 806 807 if (connect->ie) { 808 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len, 809 GFP_KERNEL); 810 wdev->conn->params.ie = wdev->conn->ie; 811 if (!wdev->conn->ie) { 812 kfree(wdev->conn); 813 wdev->conn = NULL; 814 return -ENOMEM; 815 } 816 } 817 818 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) { 819 wdev->conn->auto_auth = true; 820 /* start with open system ... should mostly work */ 821 wdev->conn->params.auth_type = 822 NL80211_AUTHTYPE_OPEN_SYSTEM; 823 } else { 824 wdev->conn->auto_auth = false; 825 } 826 827 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 828 wdev->ssid_len = connect->ssid_len; 829 wdev->conn->params.ssid = wdev->ssid; 830 wdev->conn->params.ssid_len = connect->ssid_len; 831 832 /* see if we have the bss already */ 833 bss = cfg80211_get_conn_bss(wdev); 834 835 wdev->sme_state = CFG80211_SME_CONNECTING; 836 wdev->connect_keys = connkeys; 837 838 if (prev_bssid) { 839 memcpy(wdev->conn->prev_bssid, prev_bssid, ETH_ALEN); 840 wdev->conn->prev_bssid_valid = true; 841 } 842 843 /* we're good if we have a matching bss struct */ 844 if (bss) { 845 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 846 err = cfg80211_conn_do_work(wdev); 847 cfg80211_put_bss(bss); 848 } else { 849 /* otherwise we'll need to scan for the AP first */ 850 err = cfg80211_conn_scan(wdev); 851 /* 852 * If we can't scan right now, then we need to scan again 853 * after the current scan finished, since the parameters 854 * changed (unless we find a good AP anyway). 855 */ 856 if (err == -EBUSY) { 857 err = 0; 858 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN; 859 } 860 } 861 if (err) { 862 kfree(wdev->conn->ie); 863 kfree(wdev->conn); 864 wdev->conn = NULL; 865 wdev->sme_state = CFG80211_SME_IDLE; 866 wdev->connect_keys = NULL; 867 wdev->ssid_len = 0; 868 } 869 870 return err; 871 } else { 872 wdev->sme_state = CFG80211_SME_CONNECTING; 873 wdev->connect_keys = connkeys; 874 err = rdev->ops->connect(&rdev->wiphy, dev, connect); 875 if (err) { 876 wdev->connect_keys = NULL; 877 wdev->sme_state = CFG80211_SME_IDLE; 878 return err; 879 } 880 881 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 882 wdev->ssid_len = connect->ssid_len; 883 884 return 0; 885 } 886 } 887 888 int cfg80211_connect(struct cfg80211_registered_device *rdev, 889 struct net_device *dev, 890 struct cfg80211_connect_params *connect, 891 struct cfg80211_cached_keys *connkeys) 892 { 893 int err; 894 895 mutex_lock(&rdev->devlist_mtx); 896 wdev_lock(dev->ieee80211_ptr); 897 err = __cfg80211_connect(rdev, dev, connect, connkeys, NULL); 898 wdev_unlock(dev->ieee80211_ptr); 899 mutex_unlock(&rdev->devlist_mtx); 900 901 return err; 902 } 903 904 int __cfg80211_disconnect(struct cfg80211_registered_device *rdev, 905 struct net_device *dev, u16 reason, bool wextev) 906 { 907 struct wireless_dev *wdev = dev->ieee80211_ptr; 908 int err; 909 910 ASSERT_WDEV_LOCK(wdev); 911 912 if (wdev->sme_state == CFG80211_SME_IDLE) 913 return -EINVAL; 914 915 kfree(wdev->connect_keys); 916 wdev->connect_keys = NULL; 917 918 if (!rdev->ops->disconnect) { 919 if (!rdev->ops->deauth) 920 return -EOPNOTSUPP; 921 922 /* was it connected by userspace SME? */ 923 if (!wdev->conn) { 924 cfg80211_mlme_down(rdev, dev); 925 return 0; 926 } 927 928 if (wdev->sme_state == CFG80211_SME_CONNECTING && 929 (wdev->conn->state == CFG80211_CONN_SCANNING || 930 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) { 931 wdev->sme_state = CFG80211_SME_IDLE; 932 kfree(wdev->conn->ie); 933 kfree(wdev->conn); 934 wdev->conn = NULL; 935 wdev->ssid_len = 0; 936 return 0; 937 } 938 939 /* wdev->conn->params.bssid must be set if > SCANNING */ 940 err = __cfg80211_mlme_deauth(rdev, dev, 941 wdev->conn->params.bssid, 942 NULL, 0, reason, false); 943 if (err) 944 return err; 945 } else { 946 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason); 947 if (err) 948 return err; 949 } 950 951 if (wdev->sme_state == CFG80211_SME_CONNECTED) 952 __cfg80211_disconnected(dev, NULL, 0, 0, false); 953 else if (wdev->sme_state == CFG80211_SME_CONNECTING) 954 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0, 955 WLAN_STATUS_UNSPECIFIED_FAILURE, 956 wextev, NULL); 957 958 return 0; 959 } 960 961 int cfg80211_disconnect(struct cfg80211_registered_device *rdev, 962 struct net_device *dev, 963 u16 reason, bool wextev) 964 { 965 int err; 966 967 wdev_lock(dev->ieee80211_ptr); 968 err = __cfg80211_disconnect(rdev, dev, reason, wextev); 969 wdev_unlock(dev->ieee80211_ptr); 970 971 return err; 972 } 973 974 void cfg80211_sme_disassoc(struct net_device *dev, int idx) 975 { 976 struct wireless_dev *wdev = dev->ieee80211_ptr; 977 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 978 u8 bssid[ETH_ALEN]; 979 980 ASSERT_WDEV_LOCK(wdev); 981 982 if (!wdev->conn) 983 return; 984 985 if (wdev->conn->state == CFG80211_CONN_IDLE) 986 return; 987 988 /* 989 * Ok, so the association was made by this SME -- we don't 990 * want it any more so deauthenticate too. 991 */ 992 993 if (!wdev->auth_bsses[idx]) 994 return; 995 996 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN); 997 if (__cfg80211_mlme_deauth(rdev, dev, bssid, 998 NULL, 0, WLAN_REASON_DEAUTH_LEAVING, 999 false)) { 1000 /* whatever -- assume gone anyway */ 1001 cfg80211_unhold_bss(wdev->auth_bsses[idx]); 1002 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub); 1003 wdev->auth_bsses[idx] = NULL; 1004 } 1005 } 1006