1 /* 2 * SME code for cfg80211's connect emulation. 3 * 4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net> 5 * Copyright (C) 2009 Intel Corporation. All rights reserved. 6 */ 7 8 #include <linux/etherdevice.h> 9 #include <linux/if_arp.h> 10 #include <linux/slab.h> 11 #include <linux/workqueue.h> 12 #include <linux/wireless.h> 13 #include <net/iw_handler.h> 14 #include <net/cfg80211.h> 15 #include <net/rtnetlink.h> 16 #include "nl80211.h" 17 #include "reg.h" 18 19 struct cfg80211_conn { 20 struct cfg80211_connect_params params; 21 /* these are sub-states of the _CONNECTING sme_state */ 22 enum { 23 CFG80211_CONN_IDLE, 24 CFG80211_CONN_SCANNING, 25 CFG80211_CONN_SCAN_AGAIN, 26 CFG80211_CONN_AUTHENTICATE_NEXT, 27 CFG80211_CONN_AUTHENTICATING, 28 CFG80211_CONN_ASSOCIATE_NEXT, 29 CFG80211_CONN_ASSOCIATING, 30 CFG80211_CONN_DEAUTH_ASSOC_FAIL, 31 } state; 32 u8 bssid[ETH_ALEN], prev_bssid[ETH_ALEN]; 33 u8 *ie; 34 size_t ie_len; 35 bool auto_auth, prev_bssid_valid; 36 }; 37 38 bool cfg80211_is_all_idle(void) 39 { 40 struct cfg80211_registered_device *rdev; 41 struct wireless_dev *wdev; 42 bool is_all_idle = true; 43 44 mutex_lock(&cfg80211_mutex); 45 46 /* 47 * All devices must be idle as otherwise if you are actively 48 * scanning some new beacon hints could be learned and would 49 * count as new regulatory hints. 50 */ 51 list_for_each_entry(rdev, &cfg80211_rdev_list, list) { 52 cfg80211_lock_rdev(rdev); 53 list_for_each_entry(wdev, &rdev->netdev_list, list) { 54 wdev_lock(wdev); 55 if (wdev->sme_state != CFG80211_SME_IDLE) 56 is_all_idle = false; 57 wdev_unlock(wdev); 58 } 59 cfg80211_unlock_rdev(rdev); 60 } 61 62 mutex_unlock(&cfg80211_mutex); 63 64 return is_all_idle; 65 } 66 67 static void disconnect_work(struct work_struct *work) 68 { 69 if (!cfg80211_is_all_idle()) 70 return; 71 72 regulatory_hint_disconnect(); 73 } 74 75 static DECLARE_WORK(cfg80211_disconnect_work, disconnect_work); 76 77 static int cfg80211_conn_scan(struct wireless_dev *wdev) 78 { 79 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 80 struct cfg80211_scan_request *request; 81 int n_channels, err; 82 83 ASSERT_RTNL(); 84 ASSERT_RDEV_LOCK(rdev); 85 ASSERT_WDEV_LOCK(wdev); 86 87 if (rdev->scan_req) 88 return -EBUSY; 89 90 if (wdev->conn->params.channel) { 91 n_channels = 1; 92 } else { 93 enum ieee80211_band band; 94 n_channels = 0; 95 96 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 97 if (!wdev->wiphy->bands[band]) 98 continue; 99 n_channels += wdev->wiphy->bands[band]->n_channels; 100 } 101 } 102 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) + 103 sizeof(request->channels[0]) * n_channels, 104 GFP_KERNEL); 105 if (!request) 106 return -ENOMEM; 107 108 if (wdev->conn->params.channel) 109 request->channels[0] = wdev->conn->params.channel; 110 else { 111 int i = 0, j; 112 enum ieee80211_band band; 113 114 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 115 if (!wdev->wiphy->bands[band]) 116 continue; 117 for (j = 0; j < wdev->wiphy->bands[band]->n_channels; 118 i++, j++) 119 request->channels[i] = 120 &wdev->wiphy->bands[band]->channels[j]; 121 } 122 } 123 request->n_channels = n_channels; 124 request->ssids = (void *)&request->channels[n_channels]; 125 request->n_ssids = 1; 126 127 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid, 128 wdev->conn->params.ssid_len); 129 request->ssids[0].ssid_len = wdev->conn->params.ssid_len; 130 131 request->dev = wdev->netdev; 132 request->wiphy = &rdev->wiphy; 133 134 rdev->scan_req = request; 135 136 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request); 137 if (!err) { 138 wdev->conn->state = CFG80211_CONN_SCANNING; 139 nl80211_send_scan_start(rdev, wdev->netdev); 140 dev_hold(wdev->netdev); 141 } else { 142 rdev->scan_req = NULL; 143 kfree(request); 144 } 145 return err; 146 } 147 148 static int cfg80211_conn_do_work(struct wireless_dev *wdev) 149 { 150 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 151 struct cfg80211_connect_params *params; 152 const u8 *prev_bssid = NULL; 153 int err; 154 155 ASSERT_WDEV_LOCK(wdev); 156 157 if (!wdev->conn) 158 return 0; 159 160 params = &wdev->conn->params; 161 162 switch (wdev->conn->state) { 163 case CFG80211_CONN_SCAN_AGAIN: 164 return cfg80211_conn_scan(wdev); 165 case CFG80211_CONN_AUTHENTICATE_NEXT: 166 BUG_ON(!rdev->ops->auth); 167 wdev->conn->state = CFG80211_CONN_AUTHENTICATING; 168 return __cfg80211_mlme_auth(rdev, wdev->netdev, 169 params->channel, params->auth_type, 170 params->bssid, 171 params->ssid, params->ssid_len, 172 NULL, 0, 173 params->key, params->key_len, 174 params->key_idx); 175 case CFG80211_CONN_ASSOCIATE_NEXT: 176 BUG_ON(!rdev->ops->assoc); 177 wdev->conn->state = CFG80211_CONN_ASSOCIATING; 178 if (wdev->conn->prev_bssid_valid) 179 prev_bssid = wdev->conn->prev_bssid; 180 err = __cfg80211_mlme_assoc(rdev, wdev->netdev, 181 params->channel, params->bssid, 182 prev_bssid, 183 params->ssid, params->ssid_len, 184 params->ie, params->ie_len, 185 false, ¶ms->crypto); 186 if (err) 187 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 188 NULL, 0, 189 WLAN_REASON_DEAUTH_LEAVING); 190 return err; 191 case CFG80211_CONN_DEAUTH_ASSOC_FAIL: 192 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid, 193 NULL, 0, 194 WLAN_REASON_DEAUTH_LEAVING); 195 /* return an error so that we call __cfg80211_connect_result() */ 196 return -EINVAL; 197 default: 198 return 0; 199 } 200 } 201 202 void cfg80211_conn_work(struct work_struct *work) 203 { 204 struct cfg80211_registered_device *rdev = 205 container_of(work, struct cfg80211_registered_device, conn_work); 206 struct wireless_dev *wdev; 207 u8 bssid_buf[ETH_ALEN], *bssid = NULL; 208 209 rtnl_lock(); 210 cfg80211_lock_rdev(rdev); 211 mutex_lock(&rdev->devlist_mtx); 212 213 list_for_each_entry(wdev, &rdev->netdev_list, list) { 214 wdev_lock(wdev); 215 if (!netif_running(wdev->netdev)) { 216 wdev_unlock(wdev); 217 continue; 218 } 219 if (wdev->sme_state != CFG80211_SME_CONNECTING) { 220 wdev_unlock(wdev); 221 continue; 222 } 223 if (wdev->conn->params.bssid) { 224 memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN); 225 bssid = bssid_buf; 226 } 227 if (cfg80211_conn_do_work(wdev)) 228 __cfg80211_connect_result( 229 wdev->netdev, bssid, 230 NULL, 0, NULL, 0, 231 WLAN_STATUS_UNSPECIFIED_FAILURE, 232 false, NULL); 233 wdev_unlock(wdev); 234 } 235 236 mutex_unlock(&rdev->devlist_mtx); 237 cfg80211_unlock_rdev(rdev); 238 rtnl_unlock(); 239 } 240 241 static struct cfg80211_bss *cfg80211_get_conn_bss(struct wireless_dev *wdev) 242 { 243 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 244 struct cfg80211_bss *bss; 245 u16 capa = WLAN_CAPABILITY_ESS; 246 247 ASSERT_WDEV_LOCK(wdev); 248 249 if (wdev->conn->params.privacy) 250 capa |= WLAN_CAPABILITY_PRIVACY; 251 252 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid, 253 wdev->conn->params.ssid, 254 wdev->conn->params.ssid_len, 255 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY, 256 capa); 257 if (!bss) 258 return NULL; 259 260 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN); 261 wdev->conn->params.bssid = wdev->conn->bssid; 262 wdev->conn->params.channel = bss->channel; 263 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 264 schedule_work(&rdev->conn_work); 265 266 return bss; 267 } 268 269 static void __cfg80211_sme_scan_done(struct net_device *dev) 270 { 271 struct wireless_dev *wdev = dev->ieee80211_ptr; 272 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 273 struct cfg80211_bss *bss; 274 275 ASSERT_WDEV_LOCK(wdev); 276 277 if (wdev->sme_state != CFG80211_SME_CONNECTING) 278 return; 279 280 if (!wdev->conn) 281 return; 282 283 if (wdev->conn->state != CFG80211_CONN_SCANNING && 284 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN) 285 return; 286 287 bss = cfg80211_get_conn_bss(wdev); 288 if (bss) { 289 cfg80211_put_bss(bss); 290 } else { 291 /* not found */ 292 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN) 293 schedule_work(&rdev->conn_work); 294 else 295 __cfg80211_connect_result( 296 wdev->netdev, 297 wdev->conn->params.bssid, 298 NULL, 0, NULL, 0, 299 WLAN_STATUS_UNSPECIFIED_FAILURE, 300 false, NULL); 301 } 302 } 303 304 void cfg80211_sme_scan_done(struct net_device *dev) 305 { 306 struct wireless_dev *wdev = dev->ieee80211_ptr; 307 308 mutex_lock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 309 wdev_lock(wdev); 310 __cfg80211_sme_scan_done(dev); 311 wdev_unlock(wdev); 312 mutex_unlock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx); 313 } 314 315 void cfg80211_sme_rx_auth(struct net_device *dev, 316 const u8 *buf, size_t len) 317 { 318 struct wireless_dev *wdev = dev->ieee80211_ptr; 319 struct wiphy *wiphy = wdev->wiphy; 320 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 321 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf; 322 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code); 323 324 ASSERT_WDEV_LOCK(wdev); 325 326 /* should only RX auth frames when connecting */ 327 if (wdev->sme_state != CFG80211_SME_CONNECTING) 328 return; 329 330 if (WARN_ON(!wdev->conn)) 331 return; 332 333 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG && 334 wdev->conn->auto_auth && 335 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) { 336 /* select automatically between only open, shared, leap */ 337 switch (wdev->conn->params.auth_type) { 338 case NL80211_AUTHTYPE_OPEN_SYSTEM: 339 if (wdev->connect_keys) 340 wdev->conn->params.auth_type = 341 NL80211_AUTHTYPE_SHARED_KEY; 342 else 343 wdev->conn->params.auth_type = 344 NL80211_AUTHTYPE_NETWORK_EAP; 345 break; 346 case NL80211_AUTHTYPE_SHARED_KEY: 347 wdev->conn->params.auth_type = 348 NL80211_AUTHTYPE_NETWORK_EAP; 349 break; 350 default: 351 /* huh? */ 352 wdev->conn->params.auth_type = 353 NL80211_AUTHTYPE_OPEN_SYSTEM; 354 break; 355 } 356 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 357 schedule_work(&rdev->conn_work); 358 } else if (status_code != WLAN_STATUS_SUCCESS) { 359 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0, 360 status_code, false, NULL); 361 } else if (wdev->sme_state == CFG80211_SME_CONNECTING && 362 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) { 363 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 364 schedule_work(&rdev->conn_work); 365 } 366 } 367 368 bool cfg80211_sme_failed_reassoc(struct wireless_dev *wdev) 369 { 370 struct wiphy *wiphy = wdev->wiphy; 371 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 372 373 if (WARN_ON(!wdev->conn)) 374 return false; 375 376 if (!wdev->conn->prev_bssid_valid) 377 return false; 378 379 /* 380 * Some stupid APs don't accept reassoc, so we 381 * need to fall back to trying regular assoc. 382 */ 383 wdev->conn->prev_bssid_valid = false; 384 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT; 385 schedule_work(&rdev->conn_work); 386 387 return true; 388 } 389 390 void cfg80211_sme_failed_assoc(struct wireless_dev *wdev) 391 { 392 struct wiphy *wiphy = wdev->wiphy; 393 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 394 395 wdev->conn->state = CFG80211_CONN_DEAUTH_ASSOC_FAIL; 396 schedule_work(&rdev->conn_work); 397 } 398 399 void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 400 const u8 *req_ie, size_t req_ie_len, 401 const u8 *resp_ie, size_t resp_ie_len, 402 u16 status, bool wextev, 403 struct cfg80211_bss *bss) 404 { 405 struct wireless_dev *wdev = dev->ieee80211_ptr; 406 u8 *country_ie; 407 #ifdef CONFIG_CFG80211_WEXT 408 union iwreq_data wrqu; 409 #endif 410 411 ASSERT_WDEV_LOCK(wdev); 412 413 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 414 return; 415 416 if (wdev->sme_state != CFG80211_SME_CONNECTING) 417 return; 418 419 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev, 420 bssid, req_ie, req_ie_len, 421 resp_ie, resp_ie_len, 422 status, GFP_KERNEL); 423 424 #ifdef CONFIG_CFG80211_WEXT 425 if (wextev) { 426 if (req_ie && status == WLAN_STATUS_SUCCESS) { 427 memset(&wrqu, 0, sizeof(wrqu)); 428 wrqu.data.length = req_ie_len; 429 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie); 430 } 431 432 if (resp_ie && status == WLAN_STATUS_SUCCESS) { 433 memset(&wrqu, 0, sizeof(wrqu)); 434 wrqu.data.length = resp_ie_len; 435 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie); 436 } 437 438 memset(&wrqu, 0, sizeof(wrqu)); 439 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 440 if (bssid && status == WLAN_STATUS_SUCCESS) { 441 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 442 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 443 wdev->wext.prev_bssid_valid = true; 444 } 445 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 446 } 447 #endif 448 449 if (wdev->current_bss) { 450 cfg80211_unhold_bss(wdev->current_bss); 451 cfg80211_put_bss(&wdev->current_bss->pub); 452 wdev->current_bss = NULL; 453 } 454 455 if (wdev->conn) 456 wdev->conn->state = CFG80211_CONN_IDLE; 457 458 if (status != WLAN_STATUS_SUCCESS) { 459 wdev->sme_state = CFG80211_SME_IDLE; 460 if (wdev->conn) 461 kfree(wdev->conn->ie); 462 kfree(wdev->conn); 463 wdev->conn = NULL; 464 kfree(wdev->connect_keys); 465 wdev->connect_keys = NULL; 466 wdev->ssid_len = 0; 467 return; 468 } 469 470 if (!bss) 471 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 472 wdev->ssid, wdev->ssid_len, 473 WLAN_CAPABILITY_ESS, 474 WLAN_CAPABILITY_ESS); 475 476 if (WARN_ON(!bss)) 477 return; 478 479 cfg80211_hold_bss(bss_from_pub(bss)); 480 wdev->current_bss = bss_from_pub(bss); 481 482 wdev->sme_state = CFG80211_SME_CONNECTED; 483 cfg80211_upload_connect_keys(wdev); 484 485 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY); 486 487 if (!country_ie) 488 return; 489 490 /* 491 * ieee80211_bss_get_ie() ensures we can access: 492 * - country_ie + 2, the start of the country ie data, and 493 * - and country_ie[1] which is the IE length 494 */ 495 regulatory_hint_11d(wdev->wiphy, 496 bss->channel->band, 497 country_ie + 2, 498 country_ie[1]); 499 } 500 501 void cfg80211_connect_result(struct net_device *dev, const u8 *bssid, 502 const u8 *req_ie, size_t req_ie_len, 503 const u8 *resp_ie, size_t resp_ie_len, 504 u16 status, gfp_t gfp) 505 { 506 struct wireless_dev *wdev = dev->ieee80211_ptr; 507 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 508 struct cfg80211_event *ev; 509 unsigned long flags; 510 511 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTING); 512 513 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 514 if (!ev) 515 return; 516 517 ev->type = EVENT_CONNECT_RESULT; 518 if (bssid) 519 memcpy(ev->cr.bssid, bssid, ETH_ALEN); 520 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev); 521 ev->cr.req_ie_len = req_ie_len; 522 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len); 523 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 524 ev->cr.resp_ie_len = resp_ie_len; 525 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len); 526 ev->cr.status = status; 527 528 spin_lock_irqsave(&wdev->event_lock, flags); 529 list_add_tail(&ev->list, &wdev->event_list); 530 spin_unlock_irqrestore(&wdev->event_lock, flags); 531 queue_work(cfg80211_wq, &rdev->event_work); 532 } 533 EXPORT_SYMBOL(cfg80211_connect_result); 534 535 void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid, 536 const u8 *req_ie, size_t req_ie_len, 537 const u8 *resp_ie, size_t resp_ie_len) 538 { 539 struct cfg80211_bss *bss; 540 #ifdef CONFIG_CFG80211_WEXT 541 union iwreq_data wrqu; 542 #endif 543 544 ASSERT_WDEV_LOCK(wdev); 545 546 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 547 return; 548 549 if (wdev->sme_state != CFG80211_SME_CONNECTED) 550 return; 551 552 /* internal error -- how did we get to CONNECTED w/o BSS? */ 553 if (WARN_ON(!wdev->current_bss)) { 554 return; 555 } 556 557 cfg80211_unhold_bss(wdev->current_bss); 558 cfg80211_put_bss(&wdev->current_bss->pub); 559 wdev->current_bss = NULL; 560 561 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid, 562 wdev->ssid, wdev->ssid_len, 563 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS); 564 565 if (WARN_ON(!bss)) 566 return; 567 568 cfg80211_hold_bss(bss_from_pub(bss)); 569 wdev->current_bss = bss_from_pub(bss); 570 571 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid, 572 req_ie, req_ie_len, resp_ie, resp_ie_len, 573 GFP_KERNEL); 574 575 #ifdef CONFIG_CFG80211_WEXT 576 if (req_ie) { 577 memset(&wrqu, 0, sizeof(wrqu)); 578 wrqu.data.length = req_ie_len; 579 wireless_send_event(wdev->netdev, IWEVASSOCREQIE, 580 &wrqu, req_ie); 581 } 582 583 if (resp_ie) { 584 memset(&wrqu, 0, sizeof(wrqu)); 585 wrqu.data.length = resp_ie_len; 586 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE, 587 &wrqu, resp_ie); 588 } 589 590 memset(&wrqu, 0, sizeof(wrqu)); 591 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 592 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN); 593 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN); 594 wdev->wext.prev_bssid_valid = true; 595 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL); 596 #endif 597 } 598 599 void cfg80211_roamed(struct net_device *dev, const u8 *bssid, 600 const u8 *req_ie, size_t req_ie_len, 601 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp) 602 { 603 struct wireless_dev *wdev = dev->ieee80211_ptr; 604 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 605 struct cfg80211_event *ev; 606 unsigned long flags; 607 608 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 609 610 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp); 611 if (!ev) 612 return; 613 614 ev->type = EVENT_ROAMED; 615 memcpy(ev->rm.bssid, bssid, ETH_ALEN); 616 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev); 617 ev->rm.req_ie_len = req_ie_len; 618 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len); 619 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len; 620 ev->rm.resp_ie_len = resp_ie_len; 621 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len); 622 623 spin_lock_irqsave(&wdev->event_lock, flags); 624 list_add_tail(&ev->list, &wdev->event_list); 625 spin_unlock_irqrestore(&wdev->event_lock, flags); 626 queue_work(cfg80211_wq, &rdev->event_work); 627 } 628 EXPORT_SYMBOL(cfg80211_roamed); 629 630 void __cfg80211_disconnected(struct net_device *dev, const u8 *ie, 631 size_t ie_len, u16 reason, bool from_ap) 632 { 633 struct wireless_dev *wdev = dev->ieee80211_ptr; 634 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 635 int i; 636 #ifdef CONFIG_CFG80211_WEXT 637 union iwreq_data wrqu; 638 #endif 639 640 ASSERT_WDEV_LOCK(wdev); 641 642 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION)) 643 return; 644 645 if (wdev->sme_state != CFG80211_SME_CONNECTED) 646 return; 647 648 if (wdev->current_bss) { 649 cfg80211_unhold_bss(wdev->current_bss); 650 cfg80211_put_bss(&wdev->current_bss->pub); 651 } 652 653 wdev->current_bss = NULL; 654 wdev->sme_state = CFG80211_SME_IDLE; 655 wdev->ssid_len = 0; 656 657 if (wdev->conn) { 658 const u8 *bssid; 659 int ret; 660 661 kfree(wdev->conn->ie); 662 wdev->conn->ie = NULL; 663 kfree(wdev->conn); 664 wdev->conn = NULL; 665 666 /* 667 * If this disconnect was due to a disassoc, we 668 * we might still have an auth BSS around. For 669 * the userspace SME that's currently expected, 670 * but for the kernel SME (nl80211 CONNECT or 671 * wireless extensions) we want to clear up all 672 * state. 673 */ 674 for (i = 0; i < MAX_AUTH_BSSES; i++) { 675 if (!wdev->auth_bsses[i]) 676 continue; 677 bssid = wdev->auth_bsses[i]->pub.bssid; 678 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0, 679 WLAN_REASON_DEAUTH_LEAVING); 680 WARN(ret, "deauth failed: %d\n", ret); 681 } 682 } 683 684 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap); 685 686 /* 687 * Delete all the keys ... pairwise keys can't really 688 * exist any more anyway, but default keys might. 689 */ 690 if (rdev->ops->del_key) 691 for (i = 0; i < 6; i++) 692 rdev->ops->del_key(wdev->wiphy, dev, i, NULL); 693 694 #ifdef CONFIG_CFG80211_WEXT 695 memset(&wrqu, 0, sizeof(wrqu)); 696 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 697 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); 698 wdev->wext.connect.ssid_len = 0; 699 #endif 700 701 schedule_work(&cfg80211_disconnect_work); 702 } 703 704 void cfg80211_disconnected(struct net_device *dev, u16 reason, 705 u8 *ie, size_t ie_len, gfp_t gfp) 706 { 707 struct wireless_dev *wdev = dev->ieee80211_ptr; 708 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 709 struct cfg80211_event *ev; 710 unsigned long flags; 711 712 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED); 713 714 ev = kzalloc(sizeof(*ev) + ie_len, gfp); 715 if (!ev) 716 return; 717 718 ev->type = EVENT_DISCONNECTED; 719 ev->dc.ie = ((u8 *)ev) + sizeof(*ev); 720 ev->dc.ie_len = ie_len; 721 memcpy((void *)ev->dc.ie, ie, ie_len); 722 ev->dc.reason = reason; 723 724 spin_lock_irqsave(&wdev->event_lock, flags); 725 list_add_tail(&ev->list, &wdev->event_list); 726 spin_unlock_irqrestore(&wdev->event_lock, flags); 727 queue_work(cfg80211_wq, &rdev->event_work); 728 } 729 EXPORT_SYMBOL(cfg80211_disconnected); 730 731 int __cfg80211_connect(struct cfg80211_registered_device *rdev, 732 struct net_device *dev, 733 struct cfg80211_connect_params *connect, 734 struct cfg80211_cached_keys *connkeys, 735 const u8 *prev_bssid) 736 { 737 struct wireless_dev *wdev = dev->ieee80211_ptr; 738 struct ieee80211_channel *chan; 739 struct cfg80211_bss *bss = NULL; 740 int err; 741 742 ASSERT_WDEV_LOCK(wdev); 743 744 if (wdev->sme_state != CFG80211_SME_IDLE) 745 return -EALREADY; 746 747 chan = rdev_fixed_channel(rdev, wdev); 748 if (chan && chan != connect->channel) 749 return -EBUSY; 750 751 if (WARN_ON(wdev->connect_keys)) { 752 kfree(wdev->connect_keys); 753 wdev->connect_keys = NULL; 754 } 755 756 if (connkeys && connkeys->def >= 0) { 757 int idx; 758 u32 cipher; 759 760 idx = connkeys->def; 761 cipher = connkeys->params[idx].cipher; 762 /* If given a WEP key we may need it for shared key auth */ 763 if (cipher == WLAN_CIPHER_SUITE_WEP40 || 764 cipher == WLAN_CIPHER_SUITE_WEP104) { 765 connect->key_idx = idx; 766 connect->key = connkeys->params[idx].key; 767 connect->key_len = connkeys->params[idx].key_len; 768 769 /* 770 * If ciphers are not set (e.g. when going through 771 * iwconfig), we have to set them appropriately here. 772 */ 773 if (connect->crypto.cipher_group == 0) 774 connect->crypto.cipher_group = cipher; 775 776 if (connect->crypto.n_ciphers_pairwise == 0) { 777 connect->crypto.n_ciphers_pairwise = 1; 778 connect->crypto.ciphers_pairwise[0] = cipher; 779 } 780 } 781 } 782 783 if (!rdev->ops->connect) { 784 if (!rdev->ops->auth || !rdev->ops->assoc) 785 return -EOPNOTSUPP; 786 787 if (WARN_ON(wdev->conn)) 788 return -EINPROGRESS; 789 790 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL); 791 if (!wdev->conn) 792 return -ENOMEM; 793 794 /* 795 * Copy all parameters, and treat explicitly IEs, BSSID, SSID. 796 */ 797 memcpy(&wdev->conn->params, connect, sizeof(*connect)); 798 if (connect->bssid) { 799 wdev->conn->params.bssid = wdev->conn->bssid; 800 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN); 801 } 802 803 if (connect->ie) { 804 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len, 805 GFP_KERNEL); 806 wdev->conn->params.ie = wdev->conn->ie; 807 if (!wdev->conn->ie) { 808 kfree(wdev->conn); 809 wdev->conn = NULL; 810 return -ENOMEM; 811 } 812 } 813 814 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) { 815 wdev->conn->auto_auth = true; 816 /* start with open system ... should mostly work */ 817 wdev->conn->params.auth_type = 818 NL80211_AUTHTYPE_OPEN_SYSTEM; 819 } else { 820 wdev->conn->auto_auth = false; 821 } 822 823 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 824 wdev->ssid_len = connect->ssid_len; 825 wdev->conn->params.ssid = wdev->ssid; 826 wdev->conn->params.ssid_len = connect->ssid_len; 827 828 /* see if we have the bss already */ 829 bss = cfg80211_get_conn_bss(wdev); 830 831 wdev->sme_state = CFG80211_SME_CONNECTING; 832 wdev->connect_keys = connkeys; 833 834 if (prev_bssid) { 835 memcpy(wdev->conn->prev_bssid, prev_bssid, ETH_ALEN); 836 wdev->conn->prev_bssid_valid = true; 837 } 838 839 /* we're good if we have a matching bss struct */ 840 if (bss) { 841 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT; 842 err = cfg80211_conn_do_work(wdev); 843 cfg80211_put_bss(bss); 844 } else { 845 /* otherwise we'll need to scan for the AP first */ 846 err = cfg80211_conn_scan(wdev); 847 /* 848 * If we can't scan right now, then we need to scan again 849 * after the current scan finished, since the parameters 850 * changed (unless we find a good AP anyway). 851 */ 852 if (err == -EBUSY) { 853 err = 0; 854 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN; 855 } 856 } 857 if (err) { 858 kfree(wdev->conn->ie); 859 kfree(wdev->conn); 860 wdev->conn = NULL; 861 wdev->sme_state = CFG80211_SME_IDLE; 862 wdev->connect_keys = NULL; 863 wdev->ssid_len = 0; 864 } 865 866 return err; 867 } else { 868 wdev->sme_state = CFG80211_SME_CONNECTING; 869 wdev->connect_keys = connkeys; 870 err = rdev->ops->connect(&rdev->wiphy, dev, connect); 871 if (err) { 872 wdev->connect_keys = NULL; 873 wdev->sme_state = CFG80211_SME_IDLE; 874 return err; 875 } 876 877 memcpy(wdev->ssid, connect->ssid, connect->ssid_len); 878 wdev->ssid_len = connect->ssid_len; 879 880 return 0; 881 } 882 } 883 884 int cfg80211_connect(struct cfg80211_registered_device *rdev, 885 struct net_device *dev, 886 struct cfg80211_connect_params *connect, 887 struct cfg80211_cached_keys *connkeys) 888 { 889 int err; 890 891 mutex_lock(&rdev->devlist_mtx); 892 wdev_lock(dev->ieee80211_ptr); 893 err = __cfg80211_connect(rdev, dev, connect, connkeys, NULL); 894 wdev_unlock(dev->ieee80211_ptr); 895 mutex_unlock(&rdev->devlist_mtx); 896 897 return err; 898 } 899 900 int __cfg80211_disconnect(struct cfg80211_registered_device *rdev, 901 struct net_device *dev, u16 reason, bool wextev) 902 { 903 struct wireless_dev *wdev = dev->ieee80211_ptr; 904 int err; 905 906 ASSERT_WDEV_LOCK(wdev); 907 908 if (wdev->sme_state == CFG80211_SME_IDLE) 909 return -EINVAL; 910 911 kfree(wdev->connect_keys); 912 wdev->connect_keys = NULL; 913 914 if (!rdev->ops->disconnect) { 915 if (!rdev->ops->deauth) 916 return -EOPNOTSUPP; 917 918 /* was it connected by userspace SME? */ 919 if (!wdev->conn) { 920 cfg80211_mlme_down(rdev, dev); 921 return 0; 922 } 923 924 if (wdev->sme_state == CFG80211_SME_CONNECTING && 925 (wdev->conn->state == CFG80211_CONN_SCANNING || 926 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) { 927 wdev->sme_state = CFG80211_SME_IDLE; 928 kfree(wdev->conn->ie); 929 kfree(wdev->conn); 930 wdev->conn = NULL; 931 wdev->ssid_len = 0; 932 return 0; 933 } 934 935 /* wdev->conn->params.bssid must be set if > SCANNING */ 936 err = __cfg80211_mlme_deauth(rdev, dev, 937 wdev->conn->params.bssid, 938 NULL, 0, reason); 939 if (err) 940 return err; 941 } else { 942 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason); 943 if (err) 944 return err; 945 } 946 947 if (wdev->sme_state == CFG80211_SME_CONNECTED) 948 __cfg80211_disconnected(dev, NULL, 0, 0, false); 949 else if (wdev->sme_state == CFG80211_SME_CONNECTING) 950 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0, 951 WLAN_STATUS_UNSPECIFIED_FAILURE, 952 wextev, NULL); 953 954 return 0; 955 } 956 957 int cfg80211_disconnect(struct cfg80211_registered_device *rdev, 958 struct net_device *dev, 959 u16 reason, bool wextev) 960 { 961 int err; 962 963 wdev_lock(dev->ieee80211_ptr); 964 err = __cfg80211_disconnect(rdev, dev, reason, wextev); 965 wdev_unlock(dev->ieee80211_ptr); 966 967 return err; 968 } 969 970 void cfg80211_sme_disassoc(struct net_device *dev, int idx) 971 { 972 struct wireless_dev *wdev = dev->ieee80211_ptr; 973 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 974 u8 bssid[ETH_ALEN]; 975 976 ASSERT_WDEV_LOCK(wdev); 977 978 if (!wdev->conn) 979 return; 980 981 if (wdev->conn->state == CFG80211_CONN_IDLE) 982 return; 983 984 /* 985 * Ok, so the association was made by this SME -- we don't 986 * want it any more so deauthenticate too. 987 */ 988 989 if (!wdev->auth_bsses[idx]) 990 return; 991 992 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN); 993 if (__cfg80211_mlme_deauth(rdev, dev, bssid, 994 NULL, 0, WLAN_REASON_DEAUTH_LEAVING)) { 995 /* whatever -- assume gone anyway */ 996 cfg80211_unhold_bss(wdev->auth_bsses[idx]); 997 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub); 998 wdev->auth_bsses[idx] = NULL; 999 } 1000 } 1001