blob: d737091cf6acc1c4abd45d0a8d058e3e3b9799d3 [file] [log] [blame]
Jouni Malinenff1d2762005-05-12 22:54:16 -04001/* Host AP driver Info Frame processing (part of hostap.o module) */
2
Dan Williams1ea893f2009-02-11 17:17:10 -05003#include <linux/if_arp.h>
Alexey Dobriyand43c36d2009-10-07 17:09:06 +04004#include <linux/sched.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +09005#include <linux/slab.h>
Adrian Bunk5fad5a22006-01-14 03:09:34 +01006#include "hostap_wlan.h"
7#include "hostap.h"
8#include "hostap_ap.h"
Jouni Malinenff1d2762005-05-12 22:54:16 -04009
10/* Called only as a tasklet (software IRQ) */
11static void prism2_info_commtallies16(local_info_t *local, unsigned char *buf,
12 int left)
13{
14 struct hfa384x_comm_tallies *tallies;
15
16 if (left < sizeof(struct hfa384x_comm_tallies)) {
17 printk(KERN_DEBUG "%s: too short (len=%d) commtallies "
18 "info frame\n", local->dev->name, left);
19 return;
20 }
21
22 tallies = (struct hfa384x_comm_tallies *) buf;
23#define ADD_COMM_TALLIES(name) \
24local->comm_tallies.name += le16_to_cpu(tallies->name)
25 ADD_COMM_TALLIES(tx_unicast_frames);
26 ADD_COMM_TALLIES(tx_multicast_frames);
27 ADD_COMM_TALLIES(tx_fragments);
28 ADD_COMM_TALLIES(tx_unicast_octets);
29 ADD_COMM_TALLIES(tx_multicast_octets);
30 ADD_COMM_TALLIES(tx_deferred_transmissions);
31 ADD_COMM_TALLIES(tx_single_retry_frames);
32 ADD_COMM_TALLIES(tx_multiple_retry_frames);
33 ADD_COMM_TALLIES(tx_retry_limit_exceeded);
34 ADD_COMM_TALLIES(tx_discards);
35 ADD_COMM_TALLIES(rx_unicast_frames);
36 ADD_COMM_TALLIES(rx_multicast_frames);
37 ADD_COMM_TALLIES(rx_fragments);
38 ADD_COMM_TALLIES(rx_unicast_octets);
39 ADD_COMM_TALLIES(rx_multicast_octets);
40 ADD_COMM_TALLIES(rx_fcs_errors);
41 ADD_COMM_TALLIES(rx_discards_no_buffer);
42 ADD_COMM_TALLIES(tx_discards_wrong_sa);
43 ADD_COMM_TALLIES(rx_discards_wep_undecryptable);
44 ADD_COMM_TALLIES(rx_message_in_msg_fragments);
45 ADD_COMM_TALLIES(rx_message_in_bad_msg_fragments);
46#undef ADD_COMM_TALLIES
47}
48
49
50/* Called only as a tasklet (software IRQ) */
51static void prism2_info_commtallies32(local_info_t *local, unsigned char *buf,
52 int left)
53{
54 struct hfa384x_comm_tallies32 *tallies;
55
56 if (left < sizeof(struct hfa384x_comm_tallies32)) {
57 printk(KERN_DEBUG "%s: too short (len=%d) commtallies32 "
58 "info frame\n", local->dev->name, left);
59 return;
60 }
61
62 tallies = (struct hfa384x_comm_tallies32 *) buf;
63#define ADD_COMM_TALLIES(name) \
64local->comm_tallies.name += le32_to_cpu(tallies->name)
65 ADD_COMM_TALLIES(tx_unicast_frames);
66 ADD_COMM_TALLIES(tx_multicast_frames);
67 ADD_COMM_TALLIES(tx_fragments);
68 ADD_COMM_TALLIES(tx_unicast_octets);
69 ADD_COMM_TALLIES(tx_multicast_octets);
70 ADD_COMM_TALLIES(tx_deferred_transmissions);
71 ADD_COMM_TALLIES(tx_single_retry_frames);
72 ADD_COMM_TALLIES(tx_multiple_retry_frames);
73 ADD_COMM_TALLIES(tx_retry_limit_exceeded);
74 ADD_COMM_TALLIES(tx_discards);
75 ADD_COMM_TALLIES(rx_unicast_frames);
76 ADD_COMM_TALLIES(rx_multicast_frames);
77 ADD_COMM_TALLIES(rx_fragments);
78 ADD_COMM_TALLIES(rx_unicast_octets);
79 ADD_COMM_TALLIES(rx_multicast_octets);
80 ADD_COMM_TALLIES(rx_fcs_errors);
81 ADD_COMM_TALLIES(rx_discards_no_buffer);
82 ADD_COMM_TALLIES(tx_discards_wrong_sa);
83 ADD_COMM_TALLIES(rx_discards_wep_undecryptable);
84 ADD_COMM_TALLIES(rx_message_in_msg_fragments);
85 ADD_COMM_TALLIES(rx_message_in_bad_msg_fragments);
86#undef ADD_COMM_TALLIES
87}
88
89
90/* Called only as a tasklet (software IRQ) */
91static void prism2_info_commtallies(local_info_t *local, unsigned char *buf,
92 int left)
93{
94 if (local->tallies32)
95 prism2_info_commtallies32(local, buf, left);
96 else
97 prism2_info_commtallies16(local, buf, left);
98}
99
100
101#ifndef PRISM2_NO_STATION_MODES
102#ifndef PRISM2_NO_DEBUG
103static const char* hfa384x_linkstatus_str(u16 linkstatus)
104{
105 switch (linkstatus) {
106 case HFA384X_LINKSTATUS_CONNECTED:
107 return "Connected";
108 case HFA384X_LINKSTATUS_DISCONNECTED:
109 return "Disconnected";
110 case HFA384X_LINKSTATUS_AP_CHANGE:
111 return "Access point change";
112 case HFA384X_LINKSTATUS_AP_OUT_OF_RANGE:
113 return "Access point out of range";
114 case HFA384X_LINKSTATUS_AP_IN_RANGE:
115 return "Access point in range";
116 case HFA384X_LINKSTATUS_ASSOC_FAILED:
117 return "Association failed";
118 default:
119 return "Unknown";
120 }
121}
122#endif /* PRISM2_NO_DEBUG */
123
124
125/* Called only as a tasklet (software IRQ) */
126static void prism2_info_linkstatus(local_info_t *local, unsigned char *buf,
127 int left)
128{
129 u16 val;
130 int non_sta_mode;
131
132 /* Alloc new JoinRequests to occur since LinkStatus for the previous
133 * has been received */
134 local->last_join_time = 0;
135
136 if (left != 2) {
137 printk(KERN_DEBUG "%s: invalid linkstatus info frame "
138 "length %d\n", local->dev->name, left);
139 return;
140 }
141
142 non_sta_mode = local->iw_mode == IW_MODE_MASTER ||
143 local->iw_mode == IW_MODE_REPEAT ||
144 local->iw_mode == IW_MODE_MONITOR;
145
146 val = buf[0] | (buf[1] << 8);
147 if (!non_sta_mode || val != HFA384X_LINKSTATUS_DISCONNECTED) {
148 PDEBUG(DEBUG_EXTRA, "%s: LinkStatus=%d (%s)\n",
149 local->dev->name, val, hfa384x_linkstatus_str(val));
150 }
151
152 if (non_sta_mode) {
153 netif_carrier_on(local->dev);
154 netif_carrier_on(local->ddev);
155 return;
156 }
157
158 /* Get current BSSID later in scheduled task */
159 set_bit(PRISM2_INFO_PENDING_LINKSTATUS, &local->pending_info);
160 local->prev_link_status = val;
161 schedule_work(&local->info_queue);
162}
163
164
165static void prism2_host_roaming(local_info_t *local)
166{
167 struct hfa384x_join_request req;
168 struct net_device *dev = local->dev;
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700169 struct hfa384x_hostscan_result *selected, *entry;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400170 int i;
171 unsigned long flags;
172
173 if (local->last_join_time &&
174 time_before(jiffies, local->last_join_time + 10 * HZ)) {
175 PDEBUG(DEBUG_EXTRA, "%s: last join request has not yet been "
176 "completed - waiting for it before issuing new one\n",
177 dev->name);
178 return;
179 }
180
181 /* ScanResults are sorted: first ESS results in decreasing signal
182 * quality then IBSS results in similar order.
183 * Trivial roaming policy: just select the first entry.
184 * This could probably be improved by adding hysteresis to limit
185 * number of handoffs, etc.
186 *
187 * Could do periodic RID_SCANREQUEST or Inquire F101 to get new
188 * ScanResults */
189 spin_lock_irqsave(&local->lock, flags);
190 if (local->last_scan_results == NULL ||
191 local->last_scan_results_count == 0) {
192 spin_unlock_irqrestore(&local->lock, flags);
193 PDEBUG(DEBUG_EXTRA, "%s: no scan results for host roaming\n",
194 dev->name);
195 return;
196 }
197
198 selected = &local->last_scan_results[0];
199
200 if (local->preferred_ap[0] || local->preferred_ap[1] ||
201 local->preferred_ap[2] || local->preferred_ap[3] ||
202 local->preferred_ap[4] || local->preferred_ap[5]) {
203 /* Try to find preferred AP */
Johannes Berge1749612008-10-27 15:59:26 -0700204 PDEBUG(DEBUG_EXTRA, "%s: Preferred AP BSSID %pM\n",
205 dev->name, local->preferred_ap);
Jouni Malinenff1d2762005-05-12 22:54:16 -0400206 for (i = 0; i < local->last_scan_results_count; i++) {
207 entry = &local->last_scan_results[i];
208 if (memcmp(local->preferred_ap, entry->bssid, 6) == 0)
209 {
210 PDEBUG(DEBUG_EXTRA, "%s: using preferred AP "
211 "selection\n", dev->name);
212 selected = entry;
213 break;
214 }
215 }
216 }
217
218 memcpy(req.bssid, selected->bssid, 6);
219 req.channel = selected->chid;
220 spin_unlock_irqrestore(&local->lock, flags);
221
Johannes Berge1749612008-10-27 15:59:26 -0700222 PDEBUG(DEBUG_EXTRA, "%s: JoinRequest: BSSID=%pM"
Joe Perches0795af52007-10-03 17:59:30 -0700223 " channel=%d\n",
Johannes Berge1749612008-10-27 15:59:26 -0700224 dev->name, req.bssid, le16_to_cpu(req.channel));
Jouni Malinenff1d2762005-05-12 22:54:16 -0400225 if (local->func->set_rid(dev, HFA384X_RID_JOINREQUEST, &req,
226 sizeof(req))) {
227 printk(KERN_DEBUG "%s: JoinRequest failed\n", dev->name);
228 }
229 local->last_join_time = jiffies;
230}
231
232
233static void hostap_report_scan_complete(local_info_t *local)
234{
235 union iwreq_data wrqu;
236
237 /* Inform user space about new scan results (just empty event,
238 * SIOCGIWSCAN can be used to fetch data */
239 wrqu.data.length = 0;
240 wrqu.data.flags = 0;
241 wireless_send_event(local->dev, SIOCGIWSCAN, &wrqu, NULL);
242
243 /* Allow SIOCGIWSCAN handling to occur since we have received
244 * scanning result */
245 local->scan_timestamp = 0;
246}
247
248
249/* Called only as a tasklet (software IRQ) */
250static void prism2_info_scanresults(local_info_t *local, unsigned char *buf,
251 int left)
252{
253 u16 *pos;
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700254 int new_count, i;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400255 unsigned long flags;
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700256 struct hfa384x_scan_result *res;
257 struct hfa384x_hostscan_result *results, *prev;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400258
259 if (left < 4) {
260 printk(KERN_DEBUG "%s: invalid scanresult info frame "
261 "length %d\n", local->dev->name, left);
262 return;
263 }
264
265 pos = (u16 *) buf;
266 pos++;
267 pos++;
268 left -= 4;
269
270 new_count = left / sizeof(struct hfa384x_scan_result);
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700271 results = kmalloc(new_count * sizeof(struct hfa384x_hostscan_result),
Jouni Malinenff1d2762005-05-12 22:54:16 -0400272 GFP_ATOMIC);
273 if (results == NULL)
274 return;
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700275
276 /* Convert to hostscan result format. */
277 res = (struct hfa384x_scan_result *) pos;
278 for (i = 0; i < new_count; i++) {
279 memcpy(&results[i], &res[i],
280 sizeof(struct hfa384x_scan_result));
281 results[i].atim = 0;
282 }
Jouni Malinenff1d2762005-05-12 22:54:16 -0400283
284 spin_lock_irqsave(&local->lock, flags);
285 local->last_scan_type = PRISM2_SCAN;
286 prev = local->last_scan_results;
287 local->last_scan_results = results;
288 local->last_scan_results_count = new_count;
289 spin_unlock_irqrestore(&local->lock, flags);
290 kfree(prev);
291
292 hostap_report_scan_complete(local);
293
294 /* Perform rest of ScanResults handling later in scheduled task */
295 set_bit(PRISM2_INFO_PENDING_SCANRESULTS, &local->pending_info);
296 schedule_work(&local->info_queue);
297}
298
299
300/* Called only as a tasklet (software IRQ) */
301static void prism2_info_hostscanresults(local_info_t *local,
302 unsigned char *buf, int left)
303{
304 int i, result_size, copy_len, new_count;
305 struct hfa384x_hostscan_result *results, *prev;
306 unsigned long flags;
Al Viro8a9faf32007-12-21 03:30:16 -0500307 __le16 *pos;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400308 u8 *ptr;
309
310 wake_up_interruptible(&local->hostscan_wq);
311
312 if (left < 4) {
313 printk(KERN_DEBUG "%s: invalid hostscanresult info frame "
314 "length %d\n", local->dev->name, left);
315 return;
316 }
317
Al Viro8a9faf32007-12-21 03:30:16 -0500318 pos = (__le16 *) buf;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400319 copy_len = result_size = le16_to_cpu(*pos);
320 if (result_size == 0) {
321 printk(KERN_DEBUG "%s: invalid result_size (0) in "
322 "hostscanresults\n", local->dev->name);
323 return;
324 }
325 if (copy_len > sizeof(struct hfa384x_hostscan_result))
326 copy_len = sizeof(struct hfa384x_hostscan_result);
327
328 pos++;
329 pos++;
330 left -= 4;
331 ptr = (u8 *) pos;
332
333 new_count = left / result_size;
Yan Burmanb0471bb72006-12-02 13:33:40 +0200334 results = kcalloc(new_count, sizeof(struct hfa384x_hostscan_result),
Jouni Malinenff1d2762005-05-12 22:54:16 -0400335 GFP_ATOMIC);
336 if (results == NULL)
337 return;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400338
339 for (i = 0; i < new_count; i++) {
340 memcpy(&results[i], ptr, copy_len);
341 ptr += result_size;
342 left -= result_size;
343 }
344
345 if (left) {
346 printk(KERN_DEBUG "%s: short HostScan result entry (%d/%d)\n",
347 local->dev->name, left, result_size);
348 }
349
350 spin_lock_irqsave(&local->lock, flags);
351 local->last_scan_type = PRISM2_HOSTSCAN;
Jouni Malinen2e4fd062005-07-30 12:50:02 -0700352 prev = local->last_scan_results;
353 local->last_scan_results = results;
354 local->last_scan_results_count = new_count;
Jouni Malinenff1d2762005-05-12 22:54:16 -0400355 spin_unlock_irqrestore(&local->lock, flags);
356 kfree(prev);
357
358 hostap_report_scan_complete(local);
359}
360#endif /* PRISM2_NO_STATION_MODES */
361
362
363/* Called only as a tasklet (software IRQ) */
364void hostap_info_process(local_info_t *local, struct sk_buff *skb)
365{
366 struct hfa384x_info_frame *info;
367 unsigned char *buf;
368 int left;
369#ifndef PRISM2_NO_DEBUG
370 int i;
371#endif /* PRISM2_NO_DEBUG */
372
373 info = (struct hfa384x_info_frame *) skb->data;
374 buf = skb->data + sizeof(*info);
375 left = skb->len - sizeof(*info);
376
Al Viro184a3b22007-12-21 03:40:35 -0500377 switch (le16_to_cpu(info->type)) {
Jouni Malinenff1d2762005-05-12 22:54:16 -0400378 case HFA384X_INFO_COMMTALLIES:
379 prism2_info_commtallies(local, buf, left);
380 break;
381
382#ifndef PRISM2_NO_STATION_MODES
383 case HFA384X_INFO_LINKSTATUS:
384 prism2_info_linkstatus(local, buf, left);
385 break;
386
387 case HFA384X_INFO_SCANRESULTS:
388 prism2_info_scanresults(local, buf, left);
389 break;
390
391 case HFA384X_INFO_HOSTSCANRESULTS:
392 prism2_info_hostscanresults(local, buf, left);
393 break;
394#endif /* PRISM2_NO_STATION_MODES */
395
396#ifndef PRISM2_NO_DEBUG
397 default:
398 PDEBUG(DEBUG_EXTRA, "%s: INFO - len=%d type=0x%04x\n",
Al Viro184a3b22007-12-21 03:40:35 -0500399 local->dev->name, le16_to_cpu(info->len),
400 le16_to_cpu(info->type));
Jouni Malinenff1d2762005-05-12 22:54:16 -0400401 PDEBUG(DEBUG_EXTRA, "Unknown info frame:");
402 for (i = 0; i < (left < 100 ? left : 100); i++)
403 PDEBUG2(DEBUG_EXTRA, " %02x", buf[i]);
404 PDEBUG2(DEBUG_EXTRA, "\n");
405 break;
406#endif /* PRISM2_NO_DEBUG */
407 }
408}
409
410
411#ifndef PRISM2_NO_STATION_MODES
412static void handle_info_queue_linkstatus(local_info_t *local)
413{
414 int val = local->prev_link_status;
415 int connected;
416 union iwreq_data wrqu;
417
418 connected =
419 val == HFA384X_LINKSTATUS_CONNECTED ||
420 val == HFA384X_LINKSTATUS_AP_CHANGE ||
421 val == HFA384X_LINKSTATUS_AP_IN_RANGE;
422
423 if (local->func->get_rid(local->dev, HFA384X_RID_CURRENTBSSID,
424 local->bssid, ETH_ALEN, 1) < 0) {
425 printk(KERN_DEBUG "%s: could not read CURRENTBSSID after "
426 "LinkStatus event\n", local->dev->name);
427 } else {
Johannes Berge1749612008-10-27 15:59:26 -0700428 PDEBUG(DEBUG_EXTRA, "%s: LinkStatus: BSSID=%pM\n",
Jouni Malinenff1d2762005-05-12 22:54:16 -0400429 local->dev->name,
Johannes Berge1749612008-10-27 15:59:26 -0700430 (unsigned char *) local->bssid);
Jouni Malinenff1d2762005-05-12 22:54:16 -0400431 if (local->wds_type & HOSTAP_WDS_AP_CLIENT)
432 hostap_add_sta(local->ap, local->bssid);
433 }
434
435 /* Get BSSID if we have a valid AP address */
436 if (connected) {
437 netif_carrier_on(local->dev);
438 netif_carrier_on(local->ddev);
439 memcpy(wrqu.ap_addr.sa_data, local->bssid, ETH_ALEN);
440 } else {
441 netif_carrier_off(local->dev);
442 netif_carrier_off(local->ddev);
443 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
444 }
445 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
446
447 /*
448 * Filter out sequential disconnect events in order not to cause a
449 * flood of SIOCGIWAP events that have a race condition with EAPOL
450 * frames and can confuse wpa_supplicant about the current association
451 * status.
452 */
453 if (connected || local->prev_linkstatus_connected)
454 wireless_send_event(local->dev, SIOCGIWAP, &wrqu, NULL);
455 local->prev_linkstatus_connected = connected;
456}
457
458
459static void handle_info_queue_scanresults(local_info_t *local)
460{
461 if (local->host_roaming == 1 && local->iw_mode == IW_MODE_INFRA)
462 prism2_host_roaming(local);
Jouni Malinen0c629a62005-07-30 12:50:03 -0700463
464 if (local->host_roaming == 2 && local->iw_mode == IW_MODE_INFRA &&
465 memcmp(local->preferred_ap, "\x00\x00\x00\x00\x00\x00",
466 ETH_ALEN) != 0) {
467 /*
468 * Firmware seems to be getting into odd state in host_roaming
469 * mode 2 when hostscan is used without join command, so try
470 * to fix this by re-joining the current AP. This does not
471 * actually trigger a new association if the current AP is
472 * still in the scan results.
473 */
474 prism2_host_roaming(local);
475 }
Jouni Malinenff1d2762005-05-12 22:54:16 -0400476}
477
478
479/* Called only as scheduled task after receiving info frames (used to avoid
480 * pending too much time in HW IRQ handler). */
David Howellsc4028952006-11-22 14:57:56 +0000481static void handle_info_queue(struct work_struct *work)
Jouni Malinenff1d2762005-05-12 22:54:16 -0400482{
David Howellsc4028952006-11-22 14:57:56 +0000483 local_info_t *local = container_of(work, local_info_t, info_queue);
Jouni Malinenff1d2762005-05-12 22:54:16 -0400484
485 if (test_and_clear_bit(PRISM2_INFO_PENDING_LINKSTATUS,
486 &local->pending_info))
487 handle_info_queue_linkstatus(local);
488
489 if (test_and_clear_bit(PRISM2_INFO_PENDING_SCANRESULTS,
490 &local->pending_info))
491 handle_info_queue_scanresults(local);
492}
493#endif /* PRISM2_NO_STATION_MODES */
494
495
496void hostap_info_init(local_info_t *local)
497{
498 skb_queue_head_init(&local->info_list);
499#ifndef PRISM2_NO_STATION_MODES
David Howellsc4028952006-11-22 14:57:56 +0000500 INIT_WORK(&local->info_queue, handle_info_queue);
Jouni Malinenff1d2762005-05-12 22:54:16 -0400501#endif /* PRISM2_NO_STATION_MODES */
502}
503
504
505EXPORT_SYMBOL(hostap_info_init);
506EXPORT_SYMBOL(hostap_info_process);