sme.c revision f444de05d20e27cdd960c13fcbcfca3099f03143
1/* 2 * SME code for cfg80211's connect emulation. 3 * 4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net> 5 * Copyright (C) 2009 Intel Corporation. All rights reserved. 6 */ 7 8#include <linux/etherdevice.h> 9#include <linux/if_arp.h> 10#include <linux/workqueue.h> 11#include <linux/wireless.h> 12#include <net/iw_handler.h> 13#include <net/cfg80211.h> 14#include <net/rtnetlink.h> 15#include "nl80211.h" 16#include "reg.h" 17 18struct cfg80211_conn { 19 struct cfg80211_connect_params params; 20 /* these are sub-states of the _CONNECTING sme_state */ 21 enum { 22 CFG80211_CONN_IDLE, 23 CFG80211_CONN_SCANNING, 24 CFG80211_CONN_SCAN_AGAIN, 25 CFG80211_CONN_AUTHENTICATE_NEXT, 26 CFG80211_CONN_AUTHENTICATING, 27 CFG80211_CONN_ASSOCIATE_NEXT, 28 CFG80211_CONN_ASSOCIATING, 29 CFG80211_CONN_DEAUTH_ASSOC_FAIL, 30 } state; 31 u8 bssid[ETH_ALEN], prev_bssid[ETH_ALEN]; 32 u8 *ie; 33 size_t ie_len; 34 bool auto_auth, prev_bssid_valid; 35}; 36 37bool cfg80211_is_all_idle(void) 38{ 39 struct cfg80211_registered_device *rdev; 40 struct wireless_dev *wdev; 41 bool is_all_idle = true; 42 43 mutex_lock(&cfg80211_mutex); 44 45 /* 46 * All devices must be idle as otherwise if you are actively 47 * scanning some new beacon hints could be learned and would 48 * count as new regulatory hints. 49 */ 50 list_for_each_entry(rdev, &cfg80211_rdev_list, list) { 51 cfg80211_lock_rdev(rdev); 52 list_for_each_entry(wdev, &rdev->netdev_list, list) { 53 wdev_lock(wdev); 54 if (wdev->sme_state != CFG80211_SME_IDLE) 55 is_all_idle = false; 56 wdev_unlock(wdev); 57 } 58 cfg80211_unlock_rdev(rdev); 59 } 60 61 mutex_unlock(&cfg80211_mutex); 62 63 return is_all_idle; 64} 65 66static void disconnect_work(struct work_struct *work) 67{ 68 if (!cfg80211_is_all_idle()) 69 return; 70 71 regulatory_hint_disconnect(); 72} 73 74static DECLARE_WORK(cfg80211_disconnect_work, disconnect_work); 75 76static int cfg80211_conn_scan(struct wireless_dev *wdev) 77{ 78 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 79 struct cfg80211_scan_request *request; 80 int n_channels, err; 81 82 ASSERT_RTNL(); 83 ASSERT_RDEV_LOCK(rdev); 84 ASSERT_WDEV_LOCK(wdev); 85 86 if (rdev->scan_req) 87 return -EBUSY; 88 89 if (wdev->conn->params.channel) { 90 n_channels = 1; 91 } else { 92 enum ieee80211_band band; 93 n_channels = 0; 94 95 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 96 if (!wdev->wiphy->bands[band]) 97 continue; 98 n_channels += wdev->wiphy->bands[band]->n_channels; 99 } 100 } 101 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) + 102 sizeof(request->channels[0]) * n_channels, 103 GFP_KERNEL); 104 if (!request) 105 return -ENOMEM; 106 107 if (wdev->conn->params.channel) 108 request->channels[0] = wdev->conn->params.channel; 109 else { 110 int i = 0, j; 111 enum ieee80211_band band; 112 113 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 114 if (!wdev->wiphy->bands[band]) 115 continue; 116 for (j = 0; j < wdev->wiphy->bands[band]->n_channels; 117 i++, j++) 118 request->channels[i] = 119 &wdev->wiphy->bands[band]->channels[j]; 120 } 121 } 122 request->n_channels = n_channels; 123 request->ssids = (void *)&request->channels[n_channels]; 124 request->n_ssids = 1; 125 126 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid, 127 wdev->conn->params.ssid_len); 128 request->ssids[0].ssid_len = wdev->conn->params.ssid_len; 129 130 request->dev = wdev->netdev; 131 request->wiphy = &rdev->wiphy; 132 133 rdev->scan_req = request; 134 135 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request); 136 if (!err) { 137 wdev->conn->state = CFG80211_CONN_SCANNING; 138 nl80211_send_scan_start(rdev, wdev->netdev); 139 dev_hold(wdev->netdev); 140 } else { 141 rdev->scan_req = NULL; 142 kfree(request); 143 } 144 return err; 145} 146 147static int cfg80211_conn_do_work(struct wireless_dev *wdev) 148{ 149 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 150 struct cfg80211_connect_params *params; 151 const u8 *prev_bssid = NULL; 152 int err; 153 154 ASSERT_WDEV_LOCK(wdev); 155 156 if (!wdev->conn) 157 return 0; 158 159 params = &wdev->conn->params; 160 161 switch (wdev->conn->state) { 162 case CFG80211_CONN_SCAN_AGAIN: 163 return cfg80211_conn_scan(wdev); 164 case CFG80211_CONN_AUTHENTICATE_NEXT: 165 BUG_ON(!rdev->ops->auth); 166 wdev->conn->state = CFG80211_CONN_AUTHENTICATING; 167 return __cfg80211_mlme_auth(rdev, wdev->netdev, 168 params->channel, params->auth_type, 169 params->bssid, 170 params->ssid, params->ssid_len, 171 NULL, 0, 172 params->key, params->key_len, 173 params->key_idx, false); 174 case CFG80211_CONN_ASSOCIATE_NEXT: 175 BUG_ON(!rdev->ops->assoc); 176 wdev->conn->state = CFG80211_CONN_ASSOCIATING; 177 if (wdev->conn->prev_bssid_valid) 178 prev_bssid = wdev->conn->prev_bssid; 179 err = __cfg80211_mlme_assoc(rdev, wdev->netdev, 180 params->channel, params->bssid, 181 prev_bssid, 182 params->ssid, params->ssid_len, 183 params->ie, params->ie_len, 184 false, ¶ms->crypto); 185 if (err) 186 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 187 NULL, 0, 188 WLAN_REASON_DEAUTH_LEAVING, 189 false); 190 return err; 191 case CFG80211_CONN_DEAUTH_ASSOC_FAIL: 192 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 193 NULL, 0, 194 WLAN_REASON_DEAUTH_LEAVING, false); 195 /* return an error so that we call __cfg80211_connect_result() */ 196 return -EINVAL; 197 default: 198 return 0; 199 } 200} 201 202void cfg80211_conn_work(struct work_struct *work) 203{ 204 struct cfg80211_registered_device *rdev = 205 container_of(work, struct cfg80211_registered_device, conn_work); 206 struct wireless_dev *wdev; 207 u8 bssid_buf[ETH_ALEN], *bssid = NULL; 208 209 rtnl_lock(); 210 cfg80211_lock_rdev(rdev); 211 mutex_lock(&rdev->devlist_mtx); 212 213 list_for_each_entry(wdev, &rdev->netdev_list, list) { 214 wdev_lock(wdev); 215 if (!netif_running(wdev->netdev)) { 216 wdev_unlock(wdev); 217 continue; 218 } 219 if (wdev->sme_state != CFG80211_SME_CONNECTING) { 220 wdev_unlock(wdev); 221 continue; 222 } 223 if (wdev->conn->params.bssid) { 224 memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN); 225 bssid = bssid_buf; 226 } 227 if (cfg80211_conn_do_work(wdev)) 228 __cfg80211_connect_result( 229 wdev->netdev, bssid, 230 NULL, 0, NULL, 0, 231 WLAN_STATUS_UNSPECIFIED_FAILURE, 232 false, NULL); 233 wdev_unlock(wdev); 234 } 235 236 mutex_unlock(&rdev->devlist_mtx); 237 cfg80211_unlock_rdev(rdev); 238 rtnl_unlock(); 239} 240 241static struct cfg80211_bss *cfg80211_get_conn_bss(struct wireless_dev *wdev) 242{ 243 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 244 struct cfg80211_bss *bss; 245 u16 capa = WLAN_CAPABILITY_ESS; 246 247 ASSERT_WDEV_LOCK(wdev); 248 249 if (wdev->conn->params.privacy) 250 capa |= WLAN_CAPABILITY_PRIVACY; 251 252 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid, 253 wdev->conn->params.ssid, 254 wdev->conn->params.ssid_len, 255 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY, 256 capa); 257 if (!bss) 258 return NULL; 259 260 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN); 261 wdev->conn->params.bssid = wdev->conn->bssid; 262 wdev->conn->params.channel = bss->channel; 263 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 264 schedule_work(&rdev->conn_work); 265 266 return bss; 267} 268 269static void __cfg80211_sme_scan_done(struct net_device *dev) 270{ 271 struct wireless_dev *wdev = dev->ieee80211_ptr; 272 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 273 struct cfg80211_bss *bss; 274 275 ASSERT_WDEV_LOCK(wdev); 276 277 if (wdev->sme_state != CFG80211_SME_CONNECTING) 278 return; 279 280 if (!wdev->conn) 281 return; 282 283 if (wdev->conn->state != CFG80211_CONN_SCANNING && 284 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN) 285 return; 286 287 bss = cfg80211_get_conn_bss(wdev); 288 if (bss) { 289 cfg80211_put_bss(bss); 290 } else { 291 /* not found */ 292 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN) 293 schedule_work(&rdev->conn_work); 294 else 295 __cfg80211_connect_result( 296 wdev->netdev, 297 wdev->conn->params.bssid, 298 NULL, 0, NULL, 0, 299 WLAN_STATUS_UNSPECIFIED_FAILURE, 300 false, NULL); 301 } 302} 303 304void cfg80211_sme_scan_done(struct net_device *dev) 305{ 306 struct wireless_dev *wdev = dev->ieee80211_ptr; 307 308 mutex_lock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 309 wdev_lock(wdev); 310 __cfg80211_sme_scan_done(dev); 311 wdev_unlock(wdev); 312 mutex_unlock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 313} 314 315void cfg80211_sme_rx_auth(struct net_device *dev, 316 const u8 *buf, size_t len) 317{ 318 struct wireless_dev *wdev = dev->ieee80211_ptr; 319 struct wiphy *wiphy = wdev->wiphy; 320 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 321 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; 322 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code); 323 324 ASSERT_WDEV_LOCK(wdev); 325 326 /* should only RX auth frames when connecting */ 327 if (wdev->sme_state != CFG80211_SME_CONNECTING) 328 return; 329 330 if (WARN_ON(!wdev->conn)) 331 return; 332 333 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG && 334 wdev->conn->auto_auth && 335 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) { 336 /* select automatically between only open, shared, leap */ 337 switch (wdev->conn->params.auth_type) { 338 case NL80211_AUTHTYPE_OPEN_SYSTEM: 339 if (wdev->connect_keys) 340 wdev->conn->params.auth_type = 341 NL80211_AUTHTYPE_SHARED_KEY; 342 else 343 wdev->conn->params.auth_type = 344 NL80211_AUTHTYPE_NETWORK_EAP; 345 break; 346 case NL80211_AUTHTYPE_SHARED_KEY: 347 wdev->conn->params.auth_type = 348 NL80211_AUTHTYPE_NETWORK_EAP; 349 break; 350 default: 351 /* huh? */ 352 wdev->conn->params.auth_type = 353 NL80211_AUTHTYPE_OPEN_SYSTEM; 354 break; 355 } 356 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 357 schedule_work(&rdev->conn_work); 358 } else if (status_code != WLAN_STATUS_SUCCESS) { 359 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0, 360 status_code, false, NULL); 361 } else if (wdev->sme_state == CFG80211_SME_CONNECTING && 362 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) { 363 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 364 schedule_work(&rdev->conn_work); 365 } 366} 367 368bool cfg80211_sme_failed_reassoc(struct wireless_dev *wdev) 369{ 370 struct wiphy *wiphy = wdev->wiphy; 371 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 372 373 if (WARN_ON(!wdev->conn)) 374 return false; 375 376 if (!wdev->conn->prev_bssid_valid) 377 return false; 378 379 /* 380 * Some stupid APs don't accept reassoc, so we 381 * need to fall back to trying regular assoc. 382 */ 383 wdev->conn->prev_bssid_valid = false; 384 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 385 schedule_work(&rdev->conn_work); 386 387 return true; 388} 389 390void cfg80211_sme_failed_assoc(struct wireless_dev *wdev) 391{ 392 struct wiphy *wiphy = wdev->wiphy; 393 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 394 395 wdev->conn->state = CFG80211_CONN_DEAUTH_ASSOC_FAIL; 396 schedule_work(&rdev->conn_work); 397} 398 399void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 400 const u8 *req_ie, size_t req_ie_len, 401 const u8 *resp_ie, size_t resp_ie_len, 402 u16 status, bool wextev, 403 struct cfg80211_bss *bss) 404{ 405 struct wireless_dev *wdev = dev->ieee80211_ptr; 406 u8 *country_ie; 407#ifdef CONFIG_CFG80211_WEXT 408 union iwreq_data wrqu; 409#endif 410 411 ASSERT_WDEV_LOCK(wdev); 412 413 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 414 return; 415 416 if (wdev->sme_state != CFG80211_SME_CONNECTING) 417 return; 418 419 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev, 420 bssid, req_ie, req_ie_len, 421 resp_ie, resp_ie_len, 422 status, GFP_KERNEL); 423 424#ifdef CONFIG_CFG80211_WEXT 425 if (wextev) { 426 if (req_ie && status == WLAN_STATUS_SUCCESS) { 427 memset(&wrqu, 0, sizeof(wrqu)); 428 wrqu.data.length = req_ie_len; 429 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie); 430 } 431 432 if (resp_ie && status == WLAN_STATUS_SUCCESS) { 433 memset(&wrqu, 0, sizeof(wrqu)); 434 wrqu.data.length = resp_ie_len; 435 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie); 436 } 437 438 memset(&wrqu, 0, sizeof(wrqu)); 439 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 440 if (bssid && status == WLAN_STATUS_SUCCESS) { 441 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 442 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 443 wdev->wext.prev_bssid_valid = true; 444 } 445 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 446 } 447#endif 448 449 if (wdev->current_bss) { 450 cfg80211_unhold_bss(wdev->current_bss); 451 cfg80211_put_bss(&wdev->current_bss->pub); 452 wdev->current_bss = NULL; 453 } 454 455 if (wdev->conn) 456 wdev->conn->state = CFG80211_CONN_IDLE; 457 458 if (status != WLAN_STATUS_SUCCESS) { 459 wdev->sme_state = CFG80211_SME_IDLE; 460 if (wdev->conn) 461 kfree(wdev->conn->ie); 462 kfree(wdev->conn); 463 wdev->conn = NULL; 464 kfree(wdev->connect_keys); 465 wdev->connect_keys = NULL; 466 wdev->ssid_len = 0; 467 return; 468 } 469 470 if (!bss) 471 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 472 wdev->ssid, wdev->ssid_len, 473 WLAN_CAPABILITY_ESS, 474 WLAN_CAPABILITY_ESS); 475 476 if (WARN_ON(!bss)) 477 return; 478 479 cfg80211_hold_bss(bss_from_pub(bss)); 480 wdev->current_bss = bss_from_pub(bss); 481 482 wdev->sme_state = CFG80211_SME_CONNECTED; 483 cfg80211_upload_connect_keys(wdev); 484 485 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY); 486 487 if (!country_ie) 488 return; 489 490 /* 491 * ieee80211_bss_get_ie() ensures we can access: 492 * - country_ie + 2, the start of the country ie data, and 493 * - and country_ie[1] which is the IE length 494 */ 495 regulatory_hint_11d(wdev->wiphy, 496 bss->channel->band, 497 country_ie + 2, 498 country_ie[1]); 499} 500 501void cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 502 const u8 *req_ie, size_t req_ie_len, 503 const u8 *resp_ie, size_t resp_ie_len, 504 u16 status, gfp_t gfp) 505{ 506 struct wireless_dev *wdev = dev->ieee80211_ptr; 507 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 508 struct cfg80211_event *ev; 509 unsigned long flags; 510 511 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTING); 512 513 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 514 if (!ev) 515 return; 516 517 ev->type = EVENT_CONNECT_RESULT; 518 if (bssid) 519 memcpy(ev->cr.bssid, bssid, ETH_ALEN); 520 if (req_ie_len) { 521 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev); 522 ev->cr.req_ie_len = req_ie_len; 523 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len); 524 } 525 if (resp_ie_len) { 526 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 527 ev->cr.resp_ie_len = resp_ie_len; 528 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len); 529 } 530 ev->cr.status = status; 531 532 spin_lock_irqsave(&wdev->event_lock, flags); 533 list_add_tail(&ev->list, &wdev->event_list); 534 spin_unlock_irqrestore(&wdev->event_lock, flags); 535 queue_work(cfg80211_wq, &rdev->event_work); 536} 537EXPORT_SYMBOL(cfg80211_connect_result); 538 539void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid, 540 const u8 *req_ie, size_t req_ie_len, 541 const u8 *resp_ie, size_t resp_ie_len) 542{ 543 struct cfg80211_bss *bss; 544#ifdef CONFIG_CFG80211_WEXT 545 union iwreq_data wrqu; 546#endif 547 548 ASSERT_WDEV_LOCK(wdev); 549 550 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 551 return; 552 553 if (wdev->sme_state != CFG80211_SME_CONNECTED) 554 return; 555 556 /* internal error -- how did we get to CONNECTED w/o BSS? */ 557 if (WARN_ON(!wdev->current_bss)) { 558 return; 559 } 560 561 cfg80211_unhold_bss(wdev->current_bss); 562 cfg80211_put_bss(&wdev->current_bss->pub); 563 wdev->current_bss = NULL; 564 565 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 566 wdev->ssid, wdev->ssid_len, 567 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS); 568 569 if (WARN_ON(!bss)) 570 return; 571 572 cfg80211_hold_bss(bss_from_pub(bss)); 573 wdev->current_bss = bss_from_pub(bss); 574 575 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid, 576 req_ie, req_ie_len, resp_ie, resp_ie_len, 577 GFP_KERNEL); 578 579#ifdef CONFIG_CFG80211_WEXT 580 if (req_ie) { 581 memset(&wrqu, 0, sizeof(wrqu)); 582 wrqu.data.length = req_ie_len; 583 wireless_send_event(wdev->netdev, IWEVASSOCREQIE, 584 &wrqu, req_ie); 585 } 586 587 if (resp_ie) { 588 memset(&wrqu, 0, sizeof(wrqu)); 589 wrqu.data.length = resp_ie_len; 590 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE, 591 &wrqu, resp_ie); 592 } 593 594 memset(&wrqu, 0, sizeof(wrqu)); 595 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 596 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 597 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 598 wdev->wext.prev_bssid_valid = true; 599 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL); 600#endif 601} 602 603void cfg80211_roamed(struct net_device *dev, const u8 *bssid, 604 const u8 *req_ie, size_t req_ie_len, 605 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp) 606{ 607 struct wireless_dev *wdev = dev->ieee80211_ptr; 608 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 609 struct cfg80211_event *ev; 610 unsigned long flags; 611 612 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 613 614 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 615 if (!ev) 616 return; 617 618 ev->type = EVENT_ROAMED; 619 memcpy(ev->rm.bssid, bssid, ETH_ALEN); 620 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev); 621 ev->rm.req_ie_len = req_ie_len; 622 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len); 623 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 624 ev->rm.resp_ie_len = resp_ie_len; 625 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len); 626 627 spin_lock_irqsave(&wdev->event_lock, flags); 628 list_add_tail(&ev->list, &wdev->event_list); 629 spin_unlock_irqrestore(&wdev->event_lock, flags); 630 queue_work(cfg80211_wq, &rdev->event_work); 631} 632EXPORT_SYMBOL(cfg80211_roamed); 633 634void __cfg80211_disconnected(struct net_device *dev, const u8 *ie, 635 size_t ie_len, u16 reason, bool from_ap) 636{ 637 struct wireless_dev *wdev = dev->ieee80211_ptr; 638 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 639 int i; 640#ifdef CONFIG_CFG80211_WEXT 641 union iwreq_data wrqu; 642#endif 643 644 ASSERT_WDEV_LOCK(wdev); 645 646 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 647 return; 648 649 if (wdev->sme_state != CFG80211_SME_CONNECTED) 650 return; 651 652 if (wdev->current_bss) { 653 cfg80211_unhold_bss(wdev->current_bss); 654 cfg80211_put_bss(&wdev->current_bss->pub); 655 } 656 657 wdev->current_bss = NULL; 658 wdev->sme_state = CFG80211_SME_IDLE; 659 wdev->ssid_len = 0; 660 661 if (wdev->conn) { 662 const u8 *bssid; 663 int ret; 664 665 kfree(wdev->conn->ie); 666 wdev->conn->ie = NULL; 667 kfree(wdev->conn); 668 wdev->conn = NULL; 669 670 /* 671 * If this disconnect was due to a disassoc, we 672 * we might still have an auth BSS around. For 673 * the userspace SME that's currently expected, 674 * but for the kernel SME (nl80211 CONNECT or 675 * wireless extensions) we want to clear up all 676 * state. 677 */ 678 for (i = 0; i < MAX_AUTH_BSSES; i++) { 679 if (!wdev->auth_bsses[i]) 680 continue; 681 bssid = wdev->auth_bsses[i]->pub.bssid; 682 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0, 683 WLAN_REASON_DEAUTH_LEAVING, 684 false); 685 WARN(ret, "deauth failed: %d\n", ret); 686 } 687 } 688 689 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap); 690 691 /* 692 * Delete all the keys ... pairwise keys can't really 693 * exist any more anyway, but default keys might. 694 */ 695 if (rdev->ops->del_key) 696 for (i = 0; i < 6; i++) 697 rdev->ops->del_key(wdev->wiphy, dev, i, NULL); 698 699#ifdef CONFIG_CFG80211_WEXT 700 memset(&wrqu, 0, sizeof(wrqu)); 701 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 702 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 703 wdev->wext.connect.ssid_len = 0; 704#endif 705 706 schedule_work(&cfg80211_disconnect_work); 707} 708 709void cfg80211_disconnected(struct net_device *dev, u16 reason, 710 u8 *ie, size_t ie_len, gfp_t gfp) 711{ 712 struct wireless_dev *wdev = dev->ieee80211_ptr; 713 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 714 struct cfg80211_event *ev; 715 unsigned long flags; 716 717 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 718 719 ev = kzalloc(sizeof(*ev) + ie_len, gfp); 720 if (!ev) 721 return; 722 723 ev->type = EVENT_DISCONNECTED; 724 ev->dc.ie = ((u8 *)ev) + sizeof(*ev); 725 ev->dc.ie_len = ie_len; 726 memcpy((void *)ev->dc.ie, ie, ie_len); 727 ev->dc.reason = reason; 728 729 spin_lock_irqsave(&wdev->event_lock, flags); 730 list_add_tail(&ev->list, &wdev->event_list); 731 spin_unlock_irqrestore(&wdev->event_lock, flags); 732 queue_work(cfg80211_wq, &rdev->event_work); 733} 734EXPORT_SYMBOL(cfg80211_disconnected); 735 736int __cfg80211_connect(struct cfg80211_registered_device *rdev, 737 struct net_device *dev, 738 struct cfg80211_connect_params *connect, 739 struct cfg80211_cached_keys *connkeys, 740 const u8 *prev_bssid) 741{ 742 struct wireless_dev *wdev = dev->ieee80211_ptr; 743 struct cfg80211_bss *bss = NULL; 744 int err; 745 746 ASSERT_WDEV_LOCK(wdev); 747 748 if (wdev->sme_state != CFG80211_SME_IDLE) 749 return -EALREADY; 750 751 if (WARN_ON(wdev->connect_keys)) { 752 kfree(wdev->connect_keys); 753 wdev->connect_keys = NULL; 754 } 755 756 if (connkeys && connkeys->def >= 0) { 757 int idx; 758 u32 cipher; 759 760 idx = connkeys->def; 761 cipher = connkeys->params[idx].cipher; 762 /* If given a WEP key we may need it for shared key auth */ 763 if (cipher == WLAN_CIPHER_SUITE_WEP40 || 764 cipher == WLAN_CIPHER_SUITE_WEP104) { 765 connect->key_idx = idx; 766 connect->key = connkeys->params[idx].key; 767 connect->key_len = connkeys->params[idx].key_len; 768 769 /* 770 * If ciphers are not set (e.g. when going through 771 * iwconfig), we have to set them appropriately here. 772 */ 773 if (connect->crypto.cipher_group == 0) 774 connect->crypto.cipher_group = cipher; 775 776 if (connect->crypto.n_ciphers_pairwise == 0) { 777 connect->crypto.n_ciphers_pairwise = 1; 778 connect->crypto.ciphers_pairwise[0] = cipher; 779 } 780 } 781 } 782 783 if (!rdev->ops->connect) { 784 if (!rdev->ops->auth || !rdev->ops->assoc) 785 return -EOPNOTSUPP; 786 787 if (WARN_ON(wdev->conn)) 788 return -EINPROGRESS; 789 790 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL); 791 if (!wdev->conn) 792 return -ENOMEM; 793 794 /* 795 * Copy all parameters, and treat explicitly IEs, BSSID, SSID. 796 */ 797 memcpy(&wdev->conn->params, connect, sizeof(*connect)); 798 if (connect->bssid) { 799 wdev->conn->params.bssid = wdev->conn->bssid; 800 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN); 801 } 802 803 if (connect->ie) { 804 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len, 805 GFP_KERNEL); 806 wdev->conn->params.ie = wdev->conn->ie; 807 if (!wdev->conn->ie) { 808 kfree(wdev->conn); 809 wdev->conn = NULL; 810 return -ENOMEM; 811 } 812 } 813 814 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) { 815 wdev->conn->auto_auth = true; 816 /* start with open system ... should mostly work */ 817 wdev->conn->params.auth_type = 818 NL80211_AUTHTYPE_OPEN_SYSTEM; 819 } else { 820 wdev->conn->auto_auth = false; 821 } 822 823 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 824 wdev->ssid_len = connect->ssid_len; 825 wdev->conn->params.ssid = wdev->ssid; 826 wdev->conn->params.ssid_len = connect->ssid_len; 827 828 /* see if we have the bss already */ 829 bss = cfg80211_get_conn_bss(wdev); 830 831 wdev->sme_state = CFG80211_SME_CONNECTING; 832 wdev->connect_keys = connkeys; 833 834 if (prev_bssid) { 835 memcpy(wdev->conn->prev_bssid, prev_bssid, ETH_ALEN); 836 wdev->conn->prev_bssid_valid = true; 837 } 838 839 /* we're good if we have a matching bss struct */ 840 if (bss) { 841 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 842 err = cfg80211_conn_do_work(wdev); 843 cfg80211_put_bss(bss); 844 } else { 845 /* otherwise we'll need to scan for the AP first */ 846 err = cfg80211_conn_scan(wdev); 847 /* 848 * If we can't scan right now, then we need to scan again 849 * after the current scan finished, since the parameters 850 * changed (unless we find a good AP anyway). 851 */ 852 if (err == -EBUSY) { 853 err = 0; 854 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN; 855 } 856 } 857 if (err) { 858 kfree(wdev->conn->ie); 859 kfree(wdev->conn); 860 wdev->conn = NULL; 861 wdev->sme_state = CFG80211_SME_IDLE; 862 wdev->connect_keys = NULL; 863 wdev->ssid_len = 0; 864 } 865 866 return err; 867 } else { 868 wdev->sme_state = CFG80211_SME_CONNECTING; 869 wdev->connect_keys = connkeys; 870 err = rdev->ops->connect(&rdev->wiphy, dev, connect); 871 if (err) { 872 wdev->connect_keys = NULL; 873 wdev->sme_state = CFG80211_SME_IDLE; 874 return err; 875 } 876 877 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 878 wdev->ssid_len = connect->ssid_len; 879 880 return 0; 881 } 882} 883 884int cfg80211_connect(struct cfg80211_registered_device *rdev, 885 struct net_device *dev, 886 struct cfg80211_connect_params *connect, 887 struct cfg80211_cached_keys *connkeys) 888{ 889 int err; 890 891 mutex_lock(&rdev->devlist_mtx); 892 wdev_lock(dev->ieee80211_ptr); 893 err = __cfg80211_connect(rdev, dev, connect, connkeys, NULL); 894 wdev_unlock(dev->ieee80211_ptr); 895 mutex_unlock(&rdev->devlist_mtx); 896 897 return err; 898} 899 900int __cfg80211_disconnect(struct cfg80211_registered_device *rdev, 901 struct net_device *dev, u16 reason, bool wextev) 902{ 903 struct wireless_dev *wdev = dev->ieee80211_ptr; 904 int err; 905 906 ASSERT_WDEV_LOCK(wdev); 907 908 if (wdev->sme_state == CFG80211_SME_IDLE) 909 return -EINVAL; 910 911 kfree(wdev->connect_keys); 912 wdev->connect_keys = NULL; 913 914 if (!rdev->ops->disconnect) { 915 if (!rdev->ops->deauth) 916 return -EOPNOTSUPP; 917 918 /* was it connected by userspace SME? */ 919 if (!wdev->conn) { 920 cfg80211_mlme_down(rdev, dev); 921 return 0; 922 } 923 924 if (wdev->sme_state == CFG80211_SME_CONNECTING && 925 (wdev->conn->state == CFG80211_CONN_SCANNING || 926 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) { 927 wdev->sme_state = CFG80211_SME_IDLE; 928 kfree(wdev->conn->ie); 929 kfree(wdev->conn); 930 wdev->conn = NULL; 931 wdev->ssid_len = 0; 932 return 0; 933 } 934 935 /* wdev->conn->params.bssid must be set if > SCANNING */ 936 err = __cfg80211_mlme_deauth(rdev, dev, 937 wdev->conn->params.bssid, 938 NULL, 0, reason, false); 939 if (err) 940 return err; 941 } else { 942 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason); 943 if (err) 944 return err; 945 } 946 947 if (wdev->sme_state == CFG80211_SME_CONNECTED) 948 __cfg80211_disconnected(dev, NULL, 0, 0, false); 949 else if (wdev->sme_state == CFG80211_SME_CONNECTING) 950 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0, 951 WLAN_STATUS_UNSPECIFIED_FAILURE, 952 wextev, NULL); 953 954 return 0; 955} 956 957int cfg80211_disconnect(struct cfg80211_registered_device *rdev, 958 struct net_device *dev, 959 u16 reason, bool wextev) 960{ 961 int err; 962 963 wdev_lock(dev->ieee80211_ptr); 964 err = __cfg80211_disconnect(rdev, dev, reason, wextev); 965 wdev_unlock(dev->ieee80211_ptr); 966 967 return err; 968} 969 970void cfg80211_sme_disassoc(struct net_device *dev, int idx) 971{ 972 struct wireless_dev *wdev = dev->ieee80211_ptr; 973 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 974 u8 bssid[ETH_ALEN]; 975 976 ASSERT_WDEV_LOCK(wdev); 977 978 if (!wdev->conn) 979 return; 980 981 if (wdev->conn->state == CFG80211_CONN_IDLE) 982 return; 983 984 /* 985 * Ok, so the association was made by this SME -- we don't 986 * want it any more so deauthenticate too. 987 */ 988 989 if (!wdev->auth_bsses[idx]) 990 return; 991 992 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN); 993 if (__cfg80211_mlme_deauth(rdev, dev, bssid, 994 NULL, 0, WLAN_REASON_DEAUTH_LEAVING, 995 false)) { 996 /* whatever -- assume gone anyway */ 997 cfg80211_unhold_bss(wdev->auth_bsses[idx]); 998 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub); 999 wdev->auth_bsses[idx] = NULL; 1000 } 1001} 1002