2 * IBSS mode implementation
3 * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
8 * Copyright 2009, Johannes Berg <johannes@sipsolutions.net>
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
15 #include <linux/delay.h>
16 #include <linux/slab.h>
17 #include <linux/if_ether.h>
18 #include <linux/skbuff.h>
19 #include <linux/if_arp.h>
20 #include <linux/etherdevice.h>
21 #include <linux/rtnetlink.h>
22 #include <net/mac80211.h>
24 #include "ieee80211_i.h"
25 #include "driver-ops.h"
28 #define IEEE80211_SCAN_INTERVAL (2 * HZ)
29 #define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
31 #define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
32 #define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
34 #define IEEE80211_IBSS_MAX_STA_ENTRIES 128
37 static void __ieee80211_sta_join_ibss(struct ieee80211_sub_if_data
*sdata
,
38 const u8
*bssid
, const int beacon_int
,
39 struct ieee80211_channel
*chan
,
40 const u32 basic_rates
,
41 const u16 capability
, u64 tsf
,
44 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
45 struct ieee80211_local
*local
= sdata
->local
;
47 struct ieee80211_mgmt
*mgmt
;
49 struct ieee80211_supported_band
*sband
;
50 struct cfg80211_bss
*bss
;
52 u8 supp_rates
[IEEE80211_MAX_SUPP_RATES
];
53 struct cfg80211_chan_def chandef
;
54 struct beacon_data
*presp
;
57 lockdep_assert_held(&ifibss
->mtx
);
59 /* Reset own TSF to allow time synchronization work. */
60 drv_reset_tsf(local
, sdata
);
62 if (!ether_addr_equal(ifibss
->bssid
, bssid
))
63 sta_info_flush(sdata
);
65 /* if merging, indicate to driver that we leave the old IBSS */
66 if (sdata
->vif
.bss_conf
.ibss_joined
) {
67 sdata
->vif
.bss_conf
.ibss_joined
= false;
68 sdata
->vif
.bss_conf
.ibss_creator
= false;
69 sdata
->vif
.bss_conf
.enable_beacon
= false;
70 netif_carrier_off(sdata
->dev
);
71 ieee80211_bss_info_change_notify(sdata
,
73 BSS_CHANGED_BEACON_ENABLED
);
76 presp
= rcu_dereference_protected(ifibss
->presp
,
77 lockdep_is_held(&ifibss
->mtx
));
78 rcu_assign_pointer(ifibss
->presp
, NULL
);
80 kfree_rcu(presp
, rcu_head
);
82 sdata
->drop_unencrypted
= capability
& WLAN_CAPABILITY_PRIVACY
? 1 : 0;
84 cfg80211_chandef_create(&chandef
, chan
, ifibss
->channel_type
);
85 if (!cfg80211_reg_can_beacon(local
->hw
.wiphy
, &chandef
)) {
86 chandef
.width
= NL80211_CHAN_WIDTH_20
;
87 chandef
.center_freq1
= chan
->center_freq
;
90 ieee80211_vif_release_channel(sdata
);
91 if (ieee80211_vif_use_channel(sdata
, &chandef
,
92 ifibss
->fixed_channel
?
93 IEEE80211_CHANCTX_SHARED
:
94 IEEE80211_CHANCTX_EXCLUSIVE
)) {
95 sdata_info(sdata
, "Failed to join IBSS, no channel context\n");
99 memcpy(ifibss
->bssid
, bssid
, ETH_ALEN
);
101 sband
= local
->hw
.wiphy
->bands
[chan
->band
];
103 /* Build IBSS probe response */
104 frame_len
= sizeof(struct ieee80211_hdr_3addr
) +
105 12 /* struct ieee80211_mgmt.u.beacon */ +
106 2 + IEEE80211_MAX_SSID_LEN
/* max SSID */ +
107 2 + 8 /* max Supported Rates */ +
108 3 /* max DS params */ +
109 4 /* IBSS params */ +
110 2 + (IEEE80211_MAX_SUPP_RATES
- 8) +
111 2 + sizeof(struct ieee80211_ht_cap
) +
112 2 + sizeof(struct ieee80211_ht_operation
) +
114 presp
= kzalloc(sizeof(*presp
) + frame_len
, GFP_KERNEL
);
118 presp
->head
= (void *)(presp
+ 1);
120 mgmt
= (void *) presp
->head
;
121 mgmt
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
122 IEEE80211_STYPE_PROBE_RESP
);
123 eth_broadcast_addr(mgmt
->da
);
124 memcpy(mgmt
->sa
, sdata
->vif
.addr
, ETH_ALEN
);
125 memcpy(mgmt
->bssid
, ifibss
->bssid
, ETH_ALEN
);
126 mgmt
->u
.beacon
.beacon_int
= cpu_to_le16(beacon_int
);
127 mgmt
->u
.beacon
.timestamp
= cpu_to_le64(tsf
);
128 mgmt
->u
.beacon
.capab_info
= cpu_to_le16(capability
);
130 pos
= (u8
*)mgmt
+ offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
);
132 *pos
++ = WLAN_EID_SSID
;
133 *pos
++ = ifibss
->ssid_len
;
134 memcpy(pos
, ifibss
->ssid
, ifibss
->ssid_len
);
135 pos
+= ifibss
->ssid_len
;
137 rates
= min_t(int, 8, sband
->n_bitrates
);
138 *pos
++ = WLAN_EID_SUPP_RATES
;
140 for (i
= 0; i
< rates
; i
++) {
141 int rate
= sband
->bitrates
[i
].bitrate
;
143 if (basic_rates
& BIT(i
))
145 *pos
++ = basic
| (u8
) (rate
/ 5);
148 if (sband
->band
== IEEE80211_BAND_2GHZ
) {
149 *pos
++ = WLAN_EID_DS_PARAMS
;
151 *pos
++ = ieee80211_frequency_to_channel(chan
->center_freq
);
154 *pos
++ = WLAN_EID_IBSS_PARAMS
;
156 /* FIX: set ATIM window based on scan results */
160 if (sband
->n_bitrates
> 8) {
161 *pos
++ = WLAN_EID_EXT_SUPP_RATES
;
162 *pos
++ = sband
->n_bitrates
- 8;
163 for (i
= 8; i
< sband
->n_bitrates
; i
++) {
164 int rate
= sband
->bitrates
[i
].bitrate
;
166 if (basic_rates
& BIT(i
))
168 *pos
++ = basic
| (u8
) (rate
/ 5);
172 if (ifibss
->ie_len
) {
173 memcpy(pos
, ifibss
->ie
, ifibss
->ie_len
);
174 pos
+= ifibss
->ie_len
;
177 /* add HT capability and information IEs */
178 if (chandef
.width
!= NL80211_CHAN_WIDTH_20_NOHT
&&
179 sband
->ht_cap
.ht_supported
) {
180 pos
= ieee80211_ie_build_ht_cap(pos
, &sband
->ht_cap
,
183 * Note: According to 802.11n-2009 9.13.3.1, HT Protection
184 * field and RIFS Mode are reserved in IBSS mode, therefore
187 pos
= ieee80211_ie_build_ht_oper(pos
, &sband
->ht_cap
,
191 if (local
->hw
.queues
>= IEEE80211_NUM_ACS
) {
192 *pos
++ = WLAN_EID_VENDOR_SPECIFIC
;
193 *pos
++ = 7; /* len */
194 *pos
++ = 0x00; /* Microsoft OUI 00:50:F2 */
197 *pos
++ = 2; /* WME */
198 *pos
++ = 0; /* WME info */
199 *pos
++ = 1; /* WME ver */
200 *pos
++ = 0; /* U-APSD no in use */
203 presp
->head_len
= pos
- presp
->head
;
204 if (WARN_ON(presp
->head_len
> frame_len
))
207 rcu_assign_pointer(ifibss
->presp
, presp
);
209 sdata
->vif
.bss_conf
.enable_beacon
= true;
210 sdata
->vif
.bss_conf
.beacon_int
= beacon_int
;
211 sdata
->vif
.bss_conf
.basic_rates
= basic_rates
;
212 sdata
->vif
.bss_conf
.ssid_len
= ifibss
->ssid_len
;
213 memcpy(sdata
->vif
.bss_conf
.ssid
, ifibss
->ssid
, ifibss
->ssid_len
);
214 bss_change
= BSS_CHANGED_BEACON_INT
;
215 bss_change
|= ieee80211_reset_erp_info(sdata
);
216 bss_change
|= BSS_CHANGED_BSSID
;
217 bss_change
|= BSS_CHANGED_BEACON
;
218 bss_change
|= BSS_CHANGED_BEACON_ENABLED
;
219 bss_change
|= BSS_CHANGED_BASIC_RATES
;
220 bss_change
|= BSS_CHANGED_HT
;
221 bss_change
|= BSS_CHANGED_IBSS
;
222 bss_change
|= BSS_CHANGED_SSID
;
225 * In 5 GHz/802.11a, we can always use short slot time.
226 * (IEEE 802.11-2012 18.3.8.7)
228 * In 2.4GHz, we must always use long slots in IBSS for compatibility
230 * (IEEE 802.11-2012 19.4.5)
232 * HT follows these specifications (IEEE 802.11-2012 20.3.18)
234 sdata
->vif
.bss_conf
.use_short_slot
= chan
->band
== IEEE80211_BAND_5GHZ
;
235 bss_change
|= BSS_CHANGED_ERP_SLOT
;
237 sdata
->vif
.bss_conf
.ibss_joined
= true;
238 sdata
->vif
.bss_conf
.ibss_creator
= creator
;
239 ieee80211_bss_info_change_notify(sdata
, bss_change
);
241 ieee80211_sta_def_wmm_params(sdata
, sband
->n_bitrates
, supp_rates
);
243 ifibss
->state
= IEEE80211_IBSS_MLME_JOINED
;
244 mod_timer(&ifibss
->timer
,
245 round_jiffies(jiffies
+ IEEE80211_IBSS_MERGE_INTERVAL
));
247 bss
= cfg80211_inform_bss_frame(local
->hw
.wiphy
, chan
,
248 mgmt
, presp
->head_len
, 0, GFP_KERNEL
);
249 cfg80211_put_bss(local
->hw
.wiphy
, bss
);
250 netif_carrier_on(sdata
->dev
);
251 cfg80211_ibss_joined(sdata
->dev
, ifibss
->bssid
, GFP_KERNEL
);
254 static void ieee80211_sta_join_ibss(struct ieee80211_sub_if_data
*sdata
,
255 struct ieee80211_bss
*bss
)
257 struct cfg80211_bss
*cbss
=
258 container_of((void *)bss
, struct cfg80211_bss
, priv
);
259 struct ieee80211_supported_band
*sband
;
262 u16 beacon_int
= cbss
->beacon_interval
;
263 const struct cfg80211_bss_ies
*ies
;
266 lockdep_assert_held(&sdata
->u
.ibss
.mtx
);
271 sband
= sdata
->local
->hw
.wiphy
->bands
[cbss
->channel
->band
];
275 for (i
= 0; i
< bss
->supp_rates_len
; i
++) {
276 int rate
= (bss
->supp_rates
[i
] & 0x7f) * 5;
277 bool is_basic
= !!(bss
->supp_rates
[i
] & 0x80);
279 for (j
= 0; j
< sband
->n_bitrates
; j
++) {
280 if (sband
->bitrates
[j
].bitrate
== rate
) {
282 basic_rates
|= BIT(j
);
289 ies
= rcu_dereference(cbss
->ies
);
293 __ieee80211_sta_join_ibss(sdata
, cbss
->bssid
,
301 static struct sta_info
*ieee80211_ibss_finish_sta(struct sta_info
*sta
,
305 struct ieee80211_sub_if_data
*sdata
= sta
->sdata
;
308 memcpy(addr
, sta
->sta
.addr
, ETH_ALEN
);
310 ibss_dbg(sdata
, "Adding new IBSS station %pM\n", addr
);
312 sta_info_pre_move_state(sta
, IEEE80211_STA_AUTH
);
313 sta_info_pre_move_state(sta
, IEEE80211_STA_ASSOC
);
314 /* authorize the station only if the network is not RSN protected. If
315 * not wait for the userspace to authorize it */
316 if (!sta
->sdata
->u
.ibss
.control_port
)
317 sta_info_pre_move_state(sta
, IEEE80211_STA_AUTHORIZED
);
319 rate_control_rate_init(sta
);
321 /* If it fails, maybe we raced another insertion? */
322 if (sta_info_insert_rcu(sta
))
323 return sta_info_get(sdata
, addr
);
324 if (auth
&& !sdata
->u
.ibss
.auth_frame_registrations
) {
326 "TX Auth SA=%pM DA=%pM BSSID=%pM (auth_transaction=1)\n",
327 sdata
->vif
.addr
, addr
, sdata
->u
.ibss
.bssid
);
328 ieee80211_send_auth(sdata
, 1, WLAN_AUTH_OPEN
, 0, NULL
, 0,
329 addr
, sdata
->u
.ibss
.bssid
, NULL
, 0, 0, 0);
334 static struct sta_info
*
335 ieee80211_ibss_add_sta(struct ieee80211_sub_if_data
*sdata
,
336 const u8
*bssid
, const u8
*addr
,
337 u32 supp_rates
, bool auth
)
340 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
341 struct ieee80211_local
*local
= sdata
->local
;
342 struct sta_info
*sta
;
343 struct ieee80211_chanctx_conf
*chanctx_conf
;
347 * XXX: Consider removing the least recently used entry and
348 * allow new one to be added.
350 if (local
->num_sta
>= IEEE80211_IBSS_MAX_STA_ENTRIES
) {
351 net_info_ratelimited("%s: No room for a new IBSS STA entry %pM\n",
357 if (ifibss
->state
== IEEE80211_IBSS_MLME_SEARCH
) {
362 if (!ether_addr_equal(bssid
, sdata
->u
.ibss
.bssid
)) {
368 chanctx_conf
= rcu_dereference(sdata
->vif
.chanctx_conf
);
369 if (WARN_ON_ONCE(!chanctx_conf
))
371 band
= chanctx_conf
->def
.chan
->band
;
374 sta
= sta_info_alloc(sdata
, addr
, GFP_KERNEL
);
380 sta
->last_rx
= jiffies
;
382 /* make sure mandatory rates are always added */
383 sta
->sta
.supp_rates
[band
] = supp_rates
|
384 ieee80211_mandatory_rates(local
, band
);
386 return ieee80211_ibss_finish_sta(sta
, auth
);
389 static void ieee80211_rx_mgmt_deauth_ibss(struct ieee80211_sub_if_data
*sdata
,
390 struct ieee80211_mgmt
*mgmt
,
393 u16 reason
= le16_to_cpu(mgmt
->u
.deauth
.reason_code
);
395 if (len
< IEEE80211_DEAUTH_FRAME_LEN
)
398 ibss_dbg(sdata
, "RX DeAuth SA=%pM DA=%pM BSSID=%pM (reason: %d)\n",
399 mgmt
->sa
, mgmt
->da
, mgmt
->bssid
, reason
);
400 sta_info_destroy_addr(sdata
, mgmt
->sa
);
403 static void ieee80211_rx_mgmt_auth_ibss(struct ieee80211_sub_if_data
*sdata
,
404 struct ieee80211_mgmt
*mgmt
,
407 u16 auth_alg
, auth_transaction
;
408 struct sta_info
*sta
;
409 u8 deauth_frame_buf
[IEEE80211_DEAUTH_FRAME_LEN
];
411 lockdep_assert_held(&sdata
->u
.ibss
.mtx
);
416 auth_alg
= le16_to_cpu(mgmt
->u
.auth
.auth_alg
);
417 auth_transaction
= le16_to_cpu(mgmt
->u
.auth
.auth_transaction
);
420 "RX Auth SA=%pM DA=%pM BSSID=%pM (auth_transaction=%d)\n",
421 mgmt
->sa
, mgmt
->da
, mgmt
->bssid
, auth_transaction
);
423 if (auth_alg
!= WLAN_AUTH_OPEN
|| auth_transaction
!= 1)
426 sta_info_destroy_addr(sdata
, mgmt
->sa
);
427 sta
= ieee80211_ibss_add_sta(sdata
, mgmt
->bssid
, mgmt
->sa
, 0, false);
431 * if we have any problem in allocating the new station, we reply with a
432 * DEAUTH frame to tell the other end that we had a problem
435 ieee80211_send_deauth_disassoc(sdata
, sdata
->u
.ibss
.bssid
,
436 IEEE80211_STYPE_DEAUTH
,
437 WLAN_REASON_UNSPECIFIED
, true,
443 * IEEE 802.11 standard does not require authentication in IBSS
444 * networks and most implementations do not seem to use it.
445 * However, try to reply to authentication attempts if someone
446 * has actually implemented this.
448 ieee80211_send_auth(sdata
, 2, WLAN_AUTH_OPEN
, 0, NULL
, 0,
449 mgmt
->sa
, sdata
->u
.ibss
.bssid
, NULL
, 0, 0, 0);
452 static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data
*sdata
,
453 struct ieee80211_mgmt
*mgmt
, size_t len
,
454 struct ieee80211_rx_status
*rx_status
,
455 struct ieee802_11_elems
*elems
)
457 struct ieee80211_local
*local
= sdata
->local
;
459 struct cfg80211_bss
*cbss
;
460 struct ieee80211_bss
*bss
;
461 struct sta_info
*sta
;
462 struct ieee80211_channel
*channel
;
463 u64 beacon_timestamp
, rx_timestamp
;
465 enum ieee80211_band band
= rx_status
->band
;
466 struct ieee80211_supported_band
*sband
= local
->hw
.wiphy
->bands
[band
];
467 bool rates_updated
= false;
469 if (elems
->ds_params
)
470 freq
= ieee80211_channel_to_frequency(elems
->ds_params
[0],
473 freq
= rx_status
->freq
;
475 channel
= ieee80211_get_channel(local
->hw
.wiphy
, freq
);
477 if (!channel
|| channel
->flags
& IEEE80211_CHAN_DISABLED
)
480 if (sdata
->vif
.type
== NL80211_IFTYPE_ADHOC
&&
481 ether_addr_equal(mgmt
->bssid
, sdata
->u
.ibss
.bssid
)) {
484 sta
= sta_info_get(sdata
, mgmt
->sa
);
486 if (elems
->supp_rates
) {
487 supp_rates
= ieee80211_sta_get_rates(local
, elems
,
492 prev_rates
= sta
->sta
.supp_rates
[band
];
493 /* make sure mandatory rates are always added */
494 sta
->sta
.supp_rates
[band
] = supp_rates
|
495 ieee80211_mandatory_rates(local
, band
);
497 if (sta
->sta
.supp_rates
[band
] != prev_rates
) {
499 "updated supp_rates set for %pM based on beacon/probe_resp (0x%x -> 0x%x)\n",
500 sta
->sta
.addr
, prev_rates
,
501 sta
->sta
.supp_rates
[band
]);
502 rates_updated
= true;
506 sta
= ieee80211_ibss_add_sta(sdata
, mgmt
->bssid
,
507 mgmt
->sa
, supp_rates
, true);
511 if (sta
&& elems
->wmm_info
)
512 set_sta_flag(sta
, WLAN_STA_WME
);
514 if (sta
&& elems
->ht_operation
&& elems
->ht_cap_elem
&&
515 sdata
->u
.ibss
.channel_type
!= NL80211_CHAN_NO_HT
) {
517 struct ieee80211_ht_cap htcap_ie
;
518 struct cfg80211_chan_def chandef
;
520 ieee80211_ht_oper_to_chandef(channel
,
524 memcpy(&htcap_ie
, elems
->ht_cap_elem
, sizeof(htcap_ie
));
527 * fall back to HT20 if we don't use or use
528 * the other extension channel
530 if (cfg80211_get_chandef_type(&chandef
) !=
531 sdata
->u
.ibss
.channel_type
)
533 cpu_to_le16(~IEEE80211_HT_CAP_SUP_WIDTH_20_40
);
535 rates_updated
|= ieee80211_ht_cap_ie_to_sta_ht_cap(
536 sdata
, sband
, &htcap_ie
, sta
);
539 if (sta
&& rates_updated
) {
540 drv_sta_rc_update(local
, sdata
, &sta
->sta
,
541 IEEE80211_RC_SUPP_RATES_CHANGED
);
542 rate_control_rate_init(sta
);
548 bss
= ieee80211_bss_info_update(local
, rx_status
, mgmt
, len
, elems
,
553 cbss
= container_of((void *)bss
, struct cfg80211_bss
, priv
);
555 /* same for beacon and probe response */
556 beacon_timestamp
= le64_to_cpu(mgmt
->u
.beacon
.timestamp
);
558 /* check if we need to merge IBSS */
560 /* we use a fixed BSSID */
561 if (sdata
->u
.ibss
.fixed_bssid
)
565 if (!(cbss
->capability
& WLAN_CAPABILITY_IBSS
))
568 /* different channel */
569 if (sdata
->u
.ibss
.fixed_channel
&&
570 sdata
->u
.ibss
.channel
!= cbss
->channel
)
574 if (elems
->ssid_len
!= sdata
->u
.ibss
.ssid_len
||
575 memcmp(elems
->ssid
, sdata
->u
.ibss
.ssid
,
576 sdata
->u
.ibss
.ssid_len
))
580 if (ether_addr_equal(cbss
->bssid
, sdata
->u
.ibss
.bssid
))
583 if (ieee80211_have_rx_timestamp(rx_status
)) {
584 /* time when timestamp field was received */
586 ieee80211_calculate_rx_timestamp(local
, rx_status
,
590 * second best option: get current TSF
591 * (will return -1 if not supported)
593 rx_timestamp
= drv_get_tsf(local
, sdata
);
597 "RX beacon SA=%pM BSSID=%pM TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
598 mgmt
->sa
, mgmt
->bssid
,
599 (unsigned long long)rx_timestamp
,
600 (unsigned long long)beacon_timestamp
,
601 (unsigned long long)(rx_timestamp
- beacon_timestamp
),
604 if (beacon_timestamp
> rx_timestamp
) {
606 "beacon TSF higher than local TSF - IBSS merge with BSSID %pM\n",
608 ieee80211_sta_join_ibss(sdata
, bss
);
609 supp_rates
= ieee80211_sta_get_rates(local
, elems
, band
, NULL
);
610 ieee80211_ibss_add_sta(sdata
, mgmt
->bssid
, mgmt
->sa
,
616 ieee80211_rx_bss_put(local
, bss
);
619 void ieee80211_ibss_rx_no_sta(struct ieee80211_sub_if_data
*sdata
,
620 const u8
*bssid
, const u8
*addr
,
623 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
624 struct ieee80211_local
*local
= sdata
->local
;
625 struct sta_info
*sta
;
626 struct ieee80211_chanctx_conf
*chanctx_conf
;
630 * XXX: Consider removing the least recently used entry and
631 * allow new one to be added.
633 if (local
->num_sta
>= IEEE80211_IBSS_MAX_STA_ENTRIES
) {
634 net_info_ratelimited("%s: No room for a new IBSS STA entry %pM\n",
639 if (ifibss
->state
== IEEE80211_IBSS_MLME_SEARCH
)
642 if (!ether_addr_equal(bssid
, sdata
->u
.ibss
.bssid
))
646 chanctx_conf
= rcu_dereference(sdata
->vif
.chanctx_conf
);
647 if (WARN_ON_ONCE(!chanctx_conf
)) {
651 band
= chanctx_conf
->def
.chan
->band
;
654 sta
= sta_info_alloc(sdata
, addr
, GFP_ATOMIC
);
658 sta
->last_rx
= jiffies
;
660 /* make sure mandatory rates are always added */
661 sta
->sta
.supp_rates
[band
] = supp_rates
|
662 ieee80211_mandatory_rates(local
, band
);
664 spin_lock(&ifibss
->incomplete_lock
);
665 list_add(&sta
->list
, &ifibss
->incomplete_stations
);
666 spin_unlock(&ifibss
->incomplete_lock
);
667 ieee80211_queue_work(&local
->hw
, &sdata
->work
);
670 static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data
*sdata
)
672 struct ieee80211_local
*local
= sdata
->local
;
674 struct sta_info
*sta
;
676 lockdep_assert_held(&sdata
->u
.ibss
.mtx
);
680 list_for_each_entry_rcu(sta
, &local
->sta_list
, list
) {
681 if (sta
->sdata
== sdata
&&
682 time_after(sta
->last_rx
+ IEEE80211_IBSS_MERGE_INTERVAL
,
695 * This function is called with state == IEEE80211_IBSS_MLME_JOINED
698 static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data
*sdata
)
700 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
702 lockdep_assert_held(&ifibss
->mtx
);
704 mod_timer(&ifibss
->timer
,
705 round_jiffies(jiffies
+ IEEE80211_IBSS_MERGE_INTERVAL
));
707 ieee80211_sta_expire(sdata
, IEEE80211_IBSS_INACTIVITY_LIMIT
);
709 if (time_before(jiffies
, ifibss
->last_scan_completed
+
710 IEEE80211_IBSS_MERGE_INTERVAL
))
713 if (ieee80211_sta_active_ibss(sdata
))
716 if (ifibss
->fixed_channel
)
720 "No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)\n");
722 ieee80211_request_ibss_scan(sdata
, ifibss
->ssid
, ifibss
->ssid_len
,
726 static void ieee80211_sta_create_ibss(struct ieee80211_sub_if_data
*sdata
)
728 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
733 lockdep_assert_held(&ifibss
->mtx
);
735 if (ifibss
->fixed_bssid
) {
736 memcpy(bssid
, ifibss
->bssid
, ETH_ALEN
);
738 /* Generate random, not broadcast, locally administered BSSID. Mix in
739 * own MAC address to make sure that devices that do not have proper
740 * random number generator get different BSSID. */
741 get_random_bytes(bssid
, ETH_ALEN
);
742 for (i
= 0; i
< ETH_ALEN
; i
++)
743 bssid
[i
] ^= sdata
->vif
.addr
[i
];
748 sdata_info(sdata
, "Creating new IBSS network, BSSID %pM\n", bssid
);
750 capability
= WLAN_CAPABILITY_IBSS
;
753 capability
|= WLAN_CAPABILITY_PRIVACY
;
755 sdata
->drop_unencrypted
= 0;
757 __ieee80211_sta_join_ibss(sdata
, bssid
, sdata
->vif
.bss_conf
.beacon_int
,
758 ifibss
->channel
, ifibss
->basic_rates
,
759 capability
, 0, true);
763 * This function is called with state == IEEE80211_IBSS_MLME_SEARCH
766 static void ieee80211_sta_find_ibss(struct ieee80211_sub_if_data
*sdata
)
768 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
769 struct ieee80211_local
*local
= sdata
->local
;
770 struct cfg80211_bss
*cbss
;
771 struct ieee80211_channel
*chan
= NULL
;
772 const u8
*bssid
= NULL
;
776 lockdep_assert_held(&ifibss
->mtx
);
778 active_ibss
= ieee80211_sta_active_ibss(sdata
);
779 ibss_dbg(sdata
, "sta_find_ibss (active_ibss=%d)\n", active_ibss
);
784 capability
= WLAN_CAPABILITY_IBSS
;
786 capability
|= WLAN_CAPABILITY_PRIVACY
;
787 if (ifibss
->fixed_bssid
)
788 bssid
= ifibss
->bssid
;
789 if (ifibss
->fixed_channel
)
790 chan
= ifibss
->channel
;
791 if (!is_zero_ether_addr(ifibss
->bssid
))
792 bssid
= ifibss
->bssid
;
793 cbss
= cfg80211_get_bss(local
->hw
.wiphy
, chan
, bssid
,
794 ifibss
->ssid
, ifibss
->ssid_len
,
795 WLAN_CAPABILITY_IBSS
| WLAN_CAPABILITY_PRIVACY
,
799 struct ieee80211_bss
*bss
;
801 bss
= (void *)cbss
->priv
;
803 "sta_find_ibss: selected %pM current %pM\n",
804 cbss
->bssid
, ifibss
->bssid
);
806 "Selected IBSS BSSID %pM based on configured SSID\n",
809 ieee80211_sta_join_ibss(sdata
, bss
);
810 ieee80211_rx_bss_put(local
, bss
);
814 ibss_dbg(sdata
, "sta_find_ibss: did not try to join ibss\n");
816 /* Selected IBSS not found in current scan results - try to scan */
817 if (time_after(jiffies
, ifibss
->last_scan_completed
+
818 IEEE80211_SCAN_INTERVAL
)) {
819 sdata_info(sdata
, "Trigger new scan to find an IBSS to join\n");
821 ieee80211_request_ibss_scan(sdata
, ifibss
->ssid
,
822 ifibss
->ssid_len
, chan
);
824 int interval
= IEEE80211_SCAN_INTERVAL
;
826 if (time_after(jiffies
, ifibss
->ibss_join_req
+
827 IEEE80211_IBSS_JOIN_TIMEOUT
))
828 ieee80211_sta_create_ibss(sdata
);
830 mod_timer(&ifibss
->timer
,
831 round_jiffies(jiffies
+ interval
));
835 static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data
*sdata
,
838 struct ieee80211_mgmt
*mgmt
= (void *)req
->data
;
839 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
840 struct ieee80211_local
*local
= sdata
->local
;
841 int tx_last_beacon
, len
= req
->len
;
843 struct beacon_data
*presp
;
846 lockdep_assert_held(&ifibss
->mtx
);
848 presp
= rcu_dereference_protected(ifibss
->presp
,
849 lockdep_is_held(&ifibss
->mtx
));
851 if (ifibss
->state
!= IEEE80211_IBSS_MLME_JOINED
||
852 len
< 24 + 2 || !presp
)
855 tx_last_beacon
= drv_tx_last_beacon(local
);
858 "RX ProbeReq SA=%pM DA=%pM BSSID=%pM (tx_last_beacon=%d)\n",
859 mgmt
->sa
, mgmt
->da
, mgmt
->bssid
, tx_last_beacon
);
861 if (!tx_last_beacon
&& is_multicast_ether_addr(mgmt
->da
))
864 if (!ether_addr_equal(mgmt
->bssid
, ifibss
->bssid
) &&
865 !is_broadcast_ether_addr(mgmt
->bssid
))
868 end
= ((u8
*) mgmt
) + len
;
869 pos
= mgmt
->u
.probe_req
.variable
;
870 if (pos
[0] != WLAN_EID_SSID
||
871 pos
+ 2 + pos
[1] > end
) {
872 ibss_dbg(sdata
, "Invalid SSID IE in ProbeReq from %pM\n",
877 (pos
[1] != ifibss
->ssid_len
||
878 memcmp(pos
+ 2, ifibss
->ssid
, ifibss
->ssid_len
))) {
879 /* Ignore ProbeReq for foreign SSID */
883 /* Reply with ProbeResp */
884 skb
= dev_alloc_skb(local
->tx_headroom
+ presp
->head_len
);
888 skb_reserve(skb
, local
->tx_headroom
);
889 memcpy(skb_put(skb
, presp
->head_len
), presp
->head
, presp
->head_len
);
891 memcpy(((struct ieee80211_mgmt
*) skb
->data
)->da
, mgmt
->sa
, ETH_ALEN
);
892 ibss_dbg(sdata
, "Sending ProbeResp to %pM\n", mgmt
->sa
);
893 IEEE80211_SKB_CB(skb
)->flags
|= IEEE80211_TX_INTFL_DONT_ENCRYPT
;
894 ieee80211_tx_skb(sdata
, skb
);
898 void ieee80211_rx_mgmt_probe_beacon(struct ieee80211_sub_if_data
*sdata
,
899 struct ieee80211_mgmt
*mgmt
, size_t len
,
900 struct ieee80211_rx_status
*rx_status
)
903 struct ieee802_11_elems elems
;
905 BUILD_BUG_ON(offsetof(typeof(mgmt
->u
.probe_resp
), variable
) !=
906 offsetof(typeof(mgmt
->u
.beacon
), variable
));
909 * either beacon or probe_resp but the variable field is at the
912 baselen
= (u8
*) mgmt
->u
.probe_resp
.variable
- (u8
*) mgmt
;
916 ieee802_11_parse_elems(mgmt
->u
.probe_resp
.variable
, len
- baselen
,
919 ieee80211_rx_bss_info(sdata
, mgmt
, len
, rx_status
, &elems
);
922 void ieee80211_ibss_rx_queued_mgmt(struct ieee80211_sub_if_data
*sdata
,
925 struct ieee80211_rx_status
*rx_status
;
926 struct ieee80211_mgmt
*mgmt
;
929 rx_status
= IEEE80211_SKB_RXCB(skb
);
930 mgmt
= (struct ieee80211_mgmt
*) skb
->data
;
931 fc
= le16_to_cpu(mgmt
->frame_control
);
933 mutex_lock(&sdata
->u
.ibss
.mtx
);
935 if (!sdata
->u
.ibss
.ssid_len
)
936 goto mgmt_out
; /* not ready to merge yet */
938 switch (fc
& IEEE80211_FCTL_STYPE
) {
939 case IEEE80211_STYPE_PROBE_REQ
:
940 ieee80211_rx_mgmt_probe_req(sdata
, skb
);
942 case IEEE80211_STYPE_PROBE_RESP
:
943 case IEEE80211_STYPE_BEACON
:
944 ieee80211_rx_mgmt_probe_beacon(sdata
, mgmt
, skb
->len
,
947 case IEEE80211_STYPE_AUTH
:
948 ieee80211_rx_mgmt_auth_ibss(sdata
, mgmt
, skb
->len
);
950 case IEEE80211_STYPE_DEAUTH
:
951 ieee80211_rx_mgmt_deauth_ibss(sdata
, mgmt
, skb
->len
);
956 mutex_unlock(&sdata
->u
.ibss
.mtx
);
959 void ieee80211_ibss_work(struct ieee80211_sub_if_data
*sdata
)
961 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
962 struct sta_info
*sta
;
964 mutex_lock(&ifibss
->mtx
);
967 * Work could be scheduled after scan or similar
968 * when we aren't even joined (or trying) with a
971 if (!ifibss
->ssid_len
)
974 spin_lock_bh(&ifibss
->incomplete_lock
);
975 while (!list_empty(&ifibss
->incomplete_stations
)) {
976 sta
= list_first_entry(&ifibss
->incomplete_stations
,
977 struct sta_info
, list
);
978 list_del(&sta
->list
);
979 spin_unlock_bh(&ifibss
->incomplete_lock
);
981 ieee80211_ibss_finish_sta(sta
, true);
983 spin_lock_bh(&ifibss
->incomplete_lock
);
985 spin_unlock_bh(&ifibss
->incomplete_lock
);
987 switch (ifibss
->state
) {
988 case IEEE80211_IBSS_MLME_SEARCH
:
989 ieee80211_sta_find_ibss(sdata
);
991 case IEEE80211_IBSS_MLME_JOINED
:
992 ieee80211_sta_merge_ibss(sdata
);
1000 mutex_unlock(&ifibss
->mtx
);
1003 static void ieee80211_ibss_timer(unsigned long data
)
1005 struct ieee80211_sub_if_data
*sdata
=
1006 (struct ieee80211_sub_if_data
*) data
;
1008 ieee80211_queue_work(&sdata
->local
->hw
, &sdata
->work
);
1011 void ieee80211_ibss_setup_sdata(struct ieee80211_sub_if_data
*sdata
)
1013 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
1015 setup_timer(&ifibss
->timer
, ieee80211_ibss_timer
,
1016 (unsigned long) sdata
);
1017 mutex_init(&ifibss
->mtx
);
1018 INIT_LIST_HEAD(&ifibss
->incomplete_stations
);
1019 spin_lock_init(&ifibss
->incomplete_lock
);
1022 /* scan finished notification */
1023 void ieee80211_ibss_notify_scan_completed(struct ieee80211_local
*local
)
1025 struct ieee80211_sub_if_data
*sdata
;
1027 mutex_lock(&local
->iflist_mtx
);
1028 list_for_each_entry(sdata
, &local
->interfaces
, list
) {
1029 if (!ieee80211_sdata_running(sdata
))
1031 if (sdata
->vif
.type
!= NL80211_IFTYPE_ADHOC
)
1033 sdata
->u
.ibss
.last_scan_completed
= jiffies
;
1034 ieee80211_queue_work(&local
->hw
, &sdata
->work
);
1036 mutex_unlock(&local
->iflist_mtx
);
1039 int ieee80211_ibss_join(struct ieee80211_sub_if_data
*sdata
,
1040 struct cfg80211_ibss_params
*params
)
1044 mutex_lock(&sdata
->u
.ibss
.mtx
);
1046 if (params
->bssid
) {
1047 memcpy(sdata
->u
.ibss
.bssid
, params
->bssid
, ETH_ALEN
);
1048 sdata
->u
.ibss
.fixed_bssid
= true;
1050 sdata
->u
.ibss
.fixed_bssid
= false;
1052 sdata
->u
.ibss
.privacy
= params
->privacy
;
1053 sdata
->u
.ibss
.control_port
= params
->control_port
;
1054 sdata
->u
.ibss
.basic_rates
= params
->basic_rates
;
1055 memcpy(sdata
->vif
.bss_conf
.mcast_rate
, params
->mcast_rate
,
1056 sizeof(params
->mcast_rate
));
1058 sdata
->vif
.bss_conf
.beacon_int
= params
->beacon_interval
;
1060 sdata
->u
.ibss
.channel
= params
->chandef
.chan
;
1061 sdata
->u
.ibss
.channel_type
=
1062 cfg80211_get_chandef_type(¶ms
->chandef
);
1063 sdata
->u
.ibss
.fixed_channel
= params
->channel_fixed
;
1066 sdata
->u
.ibss
.ie
= kmemdup(params
->ie
, params
->ie_len
,
1068 if (sdata
->u
.ibss
.ie
)
1069 sdata
->u
.ibss
.ie_len
= params
->ie_len
;
1072 sdata
->u
.ibss
.state
= IEEE80211_IBSS_MLME_SEARCH
;
1073 sdata
->u
.ibss
.ibss_join_req
= jiffies
;
1075 memcpy(sdata
->u
.ibss
.ssid
, params
->ssid
, params
->ssid_len
);
1076 sdata
->u
.ibss
.ssid_len
= params
->ssid_len
;
1078 mutex_unlock(&sdata
->u
.ibss
.mtx
);
1081 * 802.11n-2009 9.13.3.1: In an IBSS, the HT Protection field is
1082 * reserved, but an HT STA shall protect HT transmissions as though
1083 * the HT Protection field were set to non-HT mixed mode.
1085 * In an IBSS, the RIFS Mode field of the HT Operation element is
1086 * also reserved, but an HT STA shall operate as though this field
1090 sdata
->vif
.bss_conf
.ht_operation_mode
|=
1091 IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED
1092 | IEEE80211_HT_PARAM_RIFS_MODE
;
1094 changed
|= BSS_CHANGED_HT
;
1095 ieee80211_bss_info_change_notify(sdata
, changed
);
1097 sdata
->smps_mode
= IEEE80211_SMPS_OFF
;
1098 sdata
->needed_rx_chains
= sdata
->local
->rx_chains
;
1100 ieee80211_queue_work(&sdata
->local
->hw
, &sdata
->work
);
1105 int ieee80211_ibss_leave(struct ieee80211_sub_if_data
*sdata
)
1107 struct ieee80211_if_ibss
*ifibss
= &sdata
->u
.ibss
;
1108 struct ieee80211_local
*local
= sdata
->local
;
1109 struct cfg80211_bss
*cbss
;
1112 struct sta_info
*sta
;
1113 struct beacon_data
*presp
;
1115 mutex_lock(&sdata
->u
.ibss
.mtx
);
1117 active_ibss
= ieee80211_sta_active_ibss(sdata
);
1119 if (!active_ibss
&& !is_zero_ether_addr(ifibss
->bssid
)) {
1120 capability
= WLAN_CAPABILITY_IBSS
;
1122 if (ifibss
->privacy
)
1123 capability
|= WLAN_CAPABILITY_PRIVACY
;
1125 cbss
= cfg80211_get_bss(local
->hw
.wiphy
, ifibss
->channel
,
1126 ifibss
->bssid
, ifibss
->ssid
,
1127 ifibss
->ssid_len
, WLAN_CAPABILITY_IBSS
|
1128 WLAN_CAPABILITY_PRIVACY
,
1132 cfg80211_unlink_bss(local
->hw
.wiphy
, cbss
);
1133 cfg80211_put_bss(local
->hw
.wiphy
, cbss
);
1137 ifibss
->state
= IEEE80211_IBSS_MLME_SEARCH
;
1138 memset(ifibss
->bssid
, 0, ETH_ALEN
);
1139 ifibss
->ssid_len
= 0;
1141 sta_info_flush(sdata
);
1143 spin_lock_bh(&ifibss
->incomplete_lock
);
1144 while (!list_empty(&ifibss
->incomplete_stations
)) {
1145 sta
= list_first_entry(&ifibss
->incomplete_stations
,
1146 struct sta_info
, list
);
1147 list_del(&sta
->list
);
1148 spin_unlock_bh(&ifibss
->incomplete_lock
);
1150 sta_info_free(local
, sta
);
1151 spin_lock_bh(&ifibss
->incomplete_lock
);
1153 spin_unlock_bh(&ifibss
->incomplete_lock
);
1155 netif_carrier_off(sdata
->dev
);
1158 kfree(sdata
->u
.ibss
.ie
);
1159 presp
= rcu_dereference_protected(ifibss
->presp
,
1160 lockdep_is_held(&sdata
->u
.ibss
.mtx
));
1161 RCU_INIT_POINTER(sdata
->u
.ibss
.presp
, NULL
);
1162 sdata
->vif
.bss_conf
.ibss_joined
= false;
1163 sdata
->vif
.bss_conf
.ibss_creator
= false;
1164 sdata
->vif
.bss_conf
.enable_beacon
= false;
1165 sdata
->vif
.bss_conf
.ssid_len
= 0;
1166 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED
, &sdata
->state
);
1167 ieee80211_bss_info_change_notify(sdata
, BSS_CHANGED_BEACON_ENABLED
|
1169 ieee80211_vif_release_channel(sdata
);
1173 skb_queue_purge(&sdata
->skb_queue
);
1175 del_timer_sync(&sdata
->u
.ibss
.timer
);
1177 mutex_unlock(&sdata
->u
.ibss
.mtx
);