include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit...
[linux-2.6-block.git] / net / wireless / sme.c
CommitLineData
b23aa676
SO
1/*
2 * SME code for cfg80211's connect emulation.
3 *
4 * Copyright 2009 Johannes Berg <johannes@sipsolutions.net>
5 * Copyright (C) 2009 Intel Corporation. All rights reserved.
6 */
7
8#include <linux/etherdevice.h>
9#include <linux/if_arp.h>
5a0e3ad6 10#include <linux/slab.h>
b23aa676 11#include <linux/workqueue.h>
a9a11622
JB
12#include <linux/wireless.h>
13#include <net/iw_handler.h>
b23aa676
SO
14#include <net/cfg80211.h>
15#include <net/rtnetlink.h>
16#include "nl80211.h"
8b19e6ca 17#include "reg.h"
b23aa676 18
6829c878
JB
19struct cfg80211_conn {
20 struct cfg80211_connect_params params;
21 /* these are sub-states of the _CONNECTING sme_state */
22 enum {
23 CFG80211_CONN_IDLE,
24 CFG80211_CONN_SCANNING,
25 CFG80211_CONN_SCAN_AGAIN,
26 CFG80211_CONN_AUTHENTICATE_NEXT,
27 CFG80211_CONN_AUTHENTICATING,
28 CFG80211_CONN_ASSOCIATE_NEXT,
29 CFG80211_CONN_ASSOCIATING,
7d930bc3 30 CFG80211_CONN_DEAUTH_ASSOC_FAIL,
6829c878 31 } state;
f401a6f7 32 u8 bssid[ETH_ALEN], prev_bssid[ETH_ALEN];
6829c878
JB
33 u8 *ie;
34 size_t ie_len;
f401a6f7 35 bool auto_auth, prev_bssid_valid;
6829c878
JB
36};
37
09d989d1
LR
38bool cfg80211_is_all_idle(void)
39{
40 struct cfg80211_registered_device *rdev;
41 struct wireless_dev *wdev;
42 bool is_all_idle = true;
43
44 mutex_lock(&cfg80211_mutex);
45
46 /*
47 * All devices must be idle as otherwise if you are actively
48 * scanning some new beacon hints could be learned and would
49 * count as new regulatory hints.
50 */
51 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
52 cfg80211_lock_rdev(rdev);
53 list_for_each_entry(wdev, &rdev->netdev_list, list) {
54 wdev_lock(wdev);
55 if (wdev->sme_state != CFG80211_SME_IDLE)
56 is_all_idle = false;
57 wdev_unlock(wdev);
58 }
59 cfg80211_unlock_rdev(rdev);
60 }
61
62 mutex_unlock(&cfg80211_mutex);
63
64 return is_all_idle;
65}
66
67static void disconnect_work(struct work_struct *work)
68{
69 if (!cfg80211_is_all_idle())
70 return;
71
72 regulatory_hint_disconnect();
73}
74
75static DECLARE_WORK(cfg80211_disconnect_work, disconnect_work);
6829c878
JB
76
77static int cfg80211_conn_scan(struct wireless_dev *wdev)
78{
79c97e97 79 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB
80 struct cfg80211_scan_request *request;
81 int n_channels, err;
82
83 ASSERT_RTNL();
79c97e97 84 ASSERT_RDEV_LOCK(rdev);
667503dd 85 ASSERT_WDEV_LOCK(wdev);
6829c878 86
79c97e97 87 if (rdev->scan_req)
6829c878
JB
88 return -EBUSY;
89
90 if (wdev->conn->params.channel) {
91 n_channels = 1;
92 } else {
93 enum ieee80211_band band;
94 n_channels = 0;
95
96 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
97 if (!wdev->wiphy->bands[band])
98 continue;
99 n_channels += wdev->wiphy->bands[band]->n_channels;
100 }
101 }
102 request = kzalloc(sizeof(*request) + sizeof(request->ssids[0]) +
103 sizeof(request->channels[0]) * n_channels,
104 GFP_KERNEL);
105 if (!request)
106 return -ENOMEM;
107
6829c878
JB
108 if (wdev->conn->params.channel)
109 request->channels[0] = wdev->conn->params.channel;
110 else {
111 int i = 0, j;
112 enum ieee80211_band band;
113
114 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
115 if (!wdev->wiphy->bands[band])
116 continue;
117 for (j = 0; j < wdev->wiphy->bands[band]->n_channels;
118 i++, j++)
119 request->channels[i] =
120 &wdev->wiphy->bands[band]->channels[j];
121 }
122 }
123 request->n_channels = n_channels;
5ba63533 124 request->ssids = (void *)&request->channels[n_channels];
6829c878
JB
125 request->n_ssids = 1;
126
127 memcpy(request->ssids[0].ssid, wdev->conn->params.ssid,
128 wdev->conn->params.ssid_len);
129 request->ssids[0].ssid_len = wdev->conn->params.ssid_len;
130
463d0183 131 request->dev = wdev->netdev;
79c97e97 132 request->wiphy = &rdev->wiphy;
6829c878 133
79c97e97 134 rdev->scan_req = request;
6829c878 135
79c97e97 136 err = rdev->ops->scan(wdev->wiphy, wdev->netdev, request);
6829c878
JB
137 if (!err) {
138 wdev->conn->state = CFG80211_CONN_SCANNING;
79c97e97 139 nl80211_send_scan_start(rdev, wdev->netdev);
463d0183 140 dev_hold(wdev->netdev);
6829c878 141 } else {
79c97e97 142 rdev->scan_req = NULL;
6829c878
JB
143 kfree(request);
144 }
145 return err;
146}
147
148static int cfg80211_conn_do_work(struct wireless_dev *wdev)
149{
79c97e97 150 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
19957bb3 151 struct cfg80211_connect_params *params;
f401a6f7 152 const u8 *prev_bssid = NULL;
19957bb3 153 int err;
6829c878 154
667503dd
JB
155 ASSERT_WDEV_LOCK(wdev);
156
6829c878
JB
157 if (!wdev->conn)
158 return 0;
159
19957bb3
JB
160 params = &wdev->conn->params;
161
6829c878
JB
162 switch (wdev->conn->state) {
163 case CFG80211_CONN_SCAN_AGAIN:
164 return cfg80211_conn_scan(wdev);
165 case CFG80211_CONN_AUTHENTICATE_NEXT:
79c97e97 166 BUG_ON(!rdev->ops->auth);
19957bb3 167 wdev->conn->state = CFG80211_CONN_AUTHENTICATING;
79c97e97 168 return __cfg80211_mlme_auth(rdev, wdev->netdev,
667503dd
JB
169 params->channel, params->auth_type,
170 params->bssid,
171 params->ssid, params->ssid_len,
fffd0934
JB
172 NULL, 0,
173 params->key, params->key_len,
174 params->key_idx);
6829c878 175 case CFG80211_CONN_ASSOCIATE_NEXT:
79c97e97 176 BUG_ON(!rdev->ops->assoc);
19957bb3 177 wdev->conn->state = CFG80211_CONN_ASSOCIATING;
f401a6f7
JB
178 if (wdev->conn->prev_bssid_valid)
179 prev_bssid = wdev->conn->prev_bssid;
79c97e97 180 err = __cfg80211_mlme_assoc(rdev, wdev->netdev,
667503dd 181 params->channel, params->bssid,
f401a6f7 182 prev_bssid,
667503dd
JB
183 params->ssid, params->ssid_len,
184 params->ie, params->ie_len,
185 false, &params->crypto);
19957bb3 186 if (err)
79c97e97 187 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid,
667503dd
JB
188 NULL, 0,
189 WLAN_REASON_DEAUTH_LEAVING);
19957bb3 190 return err;
7d930bc3
JB
191 case CFG80211_CONN_DEAUTH_ASSOC_FAIL:
192 __cfg80211_mlme_deauth(rdev, wdev->netdev, params->bssid,
193 NULL, 0,
194 WLAN_REASON_DEAUTH_LEAVING);
195 /* return an error so that we call __cfg80211_connect_result() */
196 return -EINVAL;
6829c878
JB
197 default:
198 return 0;
199 }
200}
201
202void cfg80211_conn_work(struct work_struct *work)
203{
79c97e97 204 struct cfg80211_registered_device *rdev =
6829c878
JB
205 container_of(work, struct cfg80211_registered_device, conn_work);
206 struct wireless_dev *wdev;
7400f42e 207 u8 bssid_buf[ETH_ALEN], *bssid = NULL;
6829c878
JB
208
209 rtnl_lock();
79c97e97
JB
210 cfg80211_lock_rdev(rdev);
211 mutex_lock(&rdev->devlist_mtx);
6829c878 212
79c97e97 213 list_for_each_entry(wdev, &rdev->netdev_list, list) {
667503dd
JB
214 wdev_lock(wdev);
215 if (!netif_running(wdev->netdev)) {
216 wdev_unlock(wdev);
6829c878 217 continue;
667503dd
JB
218 }
219 if (wdev->sme_state != CFG80211_SME_CONNECTING) {
220 wdev_unlock(wdev);
6829c878 221 continue;
667503dd 222 }
7400f42e
JB
223 if (wdev->conn->params.bssid) {
224 memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN);
225 bssid = bssid_buf;
226 }
6829c878 227 if (cfg80211_conn_do_work(wdev))
667503dd 228 __cfg80211_connect_result(
7d930bc3 229 wdev->netdev, bssid,
667503dd
JB
230 NULL, 0, NULL, 0,
231 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 232 false, NULL);
667503dd 233 wdev_unlock(wdev);
6829c878
JB
234 }
235
79c97e97
JB
236 mutex_unlock(&rdev->devlist_mtx);
237 cfg80211_unlock_rdev(rdev);
6829c878
JB
238 rtnl_unlock();
239}
240
bbac31f4 241static struct cfg80211_bss *cfg80211_get_conn_bss(struct wireless_dev *wdev)
6829c878 242{
79c97e97 243 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
6829c878
JB
244 struct cfg80211_bss *bss;
245 u16 capa = WLAN_CAPABILITY_ESS;
246
667503dd
JB
247 ASSERT_WDEV_LOCK(wdev);
248
6829c878
JB
249 if (wdev->conn->params.privacy)
250 capa |= WLAN_CAPABILITY_PRIVACY;
251
252 bss = cfg80211_get_bss(wdev->wiphy, NULL, wdev->conn->params.bssid,
253 wdev->conn->params.ssid,
254 wdev->conn->params.ssid_len,
255 WLAN_CAPABILITY_ESS | WLAN_CAPABILITY_PRIVACY,
256 capa);
6829c878 257 if (!bss)
bbac31f4 258 return NULL;
6829c878
JB
259
260 memcpy(wdev->conn->bssid, bss->bssid, ETH_ALEN);
261 wdev->conn->params.bssid = wdev->conn->bssid;
262 wdev->conn->params.channel = bss->channel;
263 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
79c97e97 264 schedule_work(&rdev->conn_work);
6829c878 265
bbac31f4 266 return bss;
6829c878
JB
267}
268
667503dd 269static void __cfg80211_sme_scan_done(struct net_device *dev)
6829c878
JB
270{
271 struct wireless_dev *wdev = dev->ieee80211_ptr;
79c97e97 272 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
bbac31f4 273 struct cfg80211_bss *bss;
6829c878 274
667503dd
JB
275 ASSERT_WDEV_LOCK(wdev);
276
6829c878
JB
277 if (wdev->sme_state != CFG80211_SME_CONNECTING)
278 return;
279
d4b1a687 280 if (!wdev->conn)
6829c878
JB
281 return;
282
283 if (wdev->conn->state != CFG80211_CONN_SCANNING &&
284 wdev->conn->state != CFG80211_CONN_SCAN_AGAIN)
285 return;
286
bbac31f4
JB
287 bss = cfg80211_get_conn_bss(wdev);
288 if (bss) {
289 cfg80211_put_bss(bss);
290 } else {
6829c878
JB
291 /* not found */
292 if (wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)
79c97e97 293 schedule_work(&rdev->conn_work);
6829c878 294 else
667503dd
JB
295 __cfg80211_connect_result(
296 wdev->netdev,
297 wdev->conn->params.bssid,
298 NULL, 0, NULL, 0,
299 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 300 false, NULL);
6829c878
JB
301 }
302}
303
667503dd
JB
304void cfg80211_sme_scan_done(struct net_device *dev)
305{
306 struct wireless_dev *wdev = dev->ieee80211_ptr;
307
59bbb6f7 308 mutex_lock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx);
667503dd
JB
309 wdev_lock(wdev);
310 __cfg80211_sme_scan_done(dev);
311 wdev_unlock(wdev);
59bbb6f7 312 mutex_unlock(&wiphy_to_dev(wdev->wiphy)->devlist_mtx);
667503dd
JB
313}
314
315void cfg80211_sme_rx_auth(struct net_device *dev,
316 const u8 *buf, size_t len)
6829c878
JB
317{
318 struct wireless_dev *wdev = dev->ieee80211_ptr;
319 struct wiphy *wiphy = wdev->wiphy;
320 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
321 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
322 u16 status_code = le16_to_cpu(mgmt->u.auth.status_code);
323
667503dd
JB
324 ASSERT_WDEV_LOCK(wdev);
325
6829c878
JB
326 /* should only RX auth frames when connecting */
327 if (wdev->sme_state != CFG80211_SME_CONNECTING)
328 return;
329
330 if (WARN_ON(!wdev->conn))
331 return;
332
333 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
334 wdev->conn->auto_auth &&
335 wdev->conn->params.auth_type != NL80211_AUTHTYPE_NETWORK_EAP) {
336 /* select automatically between only open, shared, leap */
337 switch (wdev->conn->params.auth_type) {
338 case NL80211_AUTHTYPE_OPEN_SYSTEM:
fffd0934
JB
339 if (wdev->connect_keys)
340 wdev->conn->params.auth_type =
341 NL80211_AUTHTYPE_SHARED_KEY;
342 else
343 wdev->conn->params.auth_type =
344 NL80211_AUTHTYPE_NETWORK_EAP;
6829c878
JB
345 break;
346 case NL80211_AUTHTYPE_SHARED_KEY:
347 wdev->conn->params.auth_type =
348 NL80211_AUTHTYPE_NETWORK_EAP;
349 break;
350 default:
351 /* huh? */
352 wdev->conn->params.auth_type =
353 NL80211_AUTHTYPE_OPEN_SYSTEM;
354 break;
355 }
356 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
357 schedule_work(&rdev->conn_work);
19957bb3 358 } else if (status_code != WLAN_STATUS_SUCCESS) {
4bde0f7d 359 __cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
df7fc0f9 360 status_code, false, NULL);
19957bb3 361 } else if (wdev->sme_state == CFG80211_SME_CONNECTING &&
6829c878
JB
362 wdev->conn->state == CFG80211_CONN_AUTHENTICATING) {
363 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT;
364 schedule_work(&rdev->conn_work);
365 }
366}
b23aa676 367
f401a6f7
JB
368bool cfg80211_sme_failed_reassoc(struct wireless_dev *wdev)
369{
370 struct wiphy *wiphy = wdev->wiphy;
371 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
372
373 if (WARN_ON(!wdev->conn))
374 return false;
375
376 if (!wdev->conn->prev_bssid_valid)
377 return false;
378
379 /*
380 * Some stupid APs don't accept reassoc, so we
381 * need to fall back to trying regular assoc.
382 */
383 wdev->conn->prev_bssid_valid = false;
384 wdev->conn->state = CFG80211_CONN_ASSOCIATE_NEXT;
385 schedule_work(&rdev->conn_work);
386
387 return true;
388}
389
7d930bc3
JB
390void cfg80211_sme_failed_assoc(struct wireless_dev *wdev)
391{
392 struct wiphy *wiphy = wdev->wiphy;
393 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
394
395 wdev->conn->state = CFG80211_CONN_DEAUTH_ASSOC_FAIL;
396 schedule_work(&rdev->conn_work);
397}
398
667503dd
JB
399void __cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
400 const u8 *req_ie, size_t req_ie_len,
401 const u8 *resp_ie, size_t resp_ie_len,
df7fc0f9
JB
402 u16 status, bool wextev,
403 struct cfg80211_bss *bss)
b23aa676
SO
404{
405 struct wireless_dev *wdev = dev->ieee80211_ptr;
8b19e6ca 406 u8 *country_ie;
3d23e349 407#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
408 union iwreq_data wrqu;
409#endif
410
667503dd
JB
411 ASSERT_WDEV_LOCK(wdev);
412
b23aa676
SO
413 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
414 return;
415
f7969969 416 if (wdev->sme_state != CFG80211_SME_CONNECTING)
ea416a79
JB
417 return;
418
419 nl80211_send_connect_result(wiphy_to_dev(wdev->wiphy), dev,
e45cd82a 420 bssid, req_ie, req_ie_len,
ea416a79
JB
421 resp_ie, resp_ie_len,
422 status, GFP_KERNEL);
e45cd82a 423
3d23e349 424#ifdef CONFIG_CFG80211_WEXT
e45cd82a
JB
425 if (wextev) {
426 if (req_ie && status == WLAN_STATUS_SUCCESS) {
427 memset(&wrqu, 0, sizeof(wrqu));
428 wrqu.data.length = req_ie_len;
3409ff77 429 wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, req_ie);
e45cd82a
JB
430 }
431
432 if (resp_ie && status == WLAN_STATUS_SUCCESS) {
433 memset(&wrqu, 0, sizeof(wrqu));
434 wrqu.data.length = resp_ie_len;
435 wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, resp_ie);
436 }
437
438 memset(&wrqu, 0, sizeof(wrqu));
439 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
f401a6f7 440 if (bssid && status == WLAN_STATUS_SUCCESS) {
e45cd82a 441 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
f401a6f7
JB
442 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN);
443 wdev->wext.prev_bssid_valid = true;
444 }
e45cd82a
JB
445 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
446 }
447#endif
448
df7fc0f9
JB
449 if (wdev->current_bss) {
450 cfg80211_unhold_bss(wdev->current_bss);
451 cfg80211_put_bss(&wdev->current_bss->pub);
452 wdev->current_bss = NULL;
453 }
454
19957bb3
JB
455 if (wdev->conn)
456 wdev->conn->state = CFG80211_CONN_IDLE;
457
fffd0934 458 if (status != WLAN_STATUS_SUCCESS) {
b23aa676 459 wdev->sme_state = CFG80211_SME_IDLE;
415ad1ef
DK
460 if (wdev->conn)
461 kfree(wdev->conn->ie);
19957bb3
JB
462 kfree(wdev->conn);
463 wdev->conn = NULL;
fffd0934
JB
464 kfree(wdev->connect_keys);
465 wdev->connect_keys = NULL;
8dadadb7 466 wdev->ssid_len = 0;
fffd0934 467 return;
b23aa676 468 }
fffd0934 469
df7fc0f9
JB
470 if (!bss)
471 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
472 wdev->ssid, wdev->ssid_len,
473 WLAN_CAPABILITY_ESS,
474 WLAN_CAPABILITY_ESS);
fffd0934
JB
475
476 if (WARN_ON(!bss))
477 return;
478
479 cfg80211_hold_bss(bss_from_pub(bss));
480 wdev->current_bss = bss_from_pub(bss);
481
fffd0934
JB
482 wdev->sme_state = CFG80211_SME_CONNECTED;
483 cfg80211_upload_connect_keys(wdev);
8b19e6ca
LR
484
485 country_ie = (u8 *) ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY);
486
487 if (!country_ie)
488 return;
489
490 /*
491 * ieee80211_bss_get_ie() ensures we can access:
492 * - country_ie + 2, the start of the country ie data, and
493 * - and country_ie[1] which is the IE length
494 */
495 regulatory_hint_11d(wdev->wiphy,
84920e3e 496 bss->channel->band,
8b19e6ca
LR
497 country_ie + 2,
498 country_ie[1]);
b23aa676 499}
f2129354
JB
500
501void cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
502 const u8 *req_ie, size_t req_ie_len,
503 const u8 *resp_ie, size_t resp_ie_len,
504 u16 status, gfp_t gfp)
505{
667503dd
JB
506 struct wireless_dev *wdev = dev->ieee80211_ptr;
507 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
508 struct cfg80211_event *ev;
509 unsigned long flags;
510
f7969969
JB
511 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTING);
512
667503dd
JB
513 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
514 if (!ev)
515 return;
516
517 ev->type = EVENT_CONNECT_RESULT;
16a832e7
ZY
518 if (bssid)
519 memcpy(ev->cr.bssid, bssid, ETH_ALEN);
667503dd
JB
520 ev->cr.req_ie = ((u8 *)ev) + sizeof(*ev);
521 ev->cr.req_ie_len = req_ie_len;
522 memcpy((void *)ev->cr.req_ie, req_ie, req_ie_len);
523 ev->cr.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
524 ev->cr.resp_ie_len = resp_ie_len;
525 memcpy((void *)ev->cr.resp_ie, resp_ie, resp_ie_len);
526 ev->cr.status = status;
527
528 spin_lock_irqsave(&wdev->event_lock, flags);
529 list_add_tail(&ev->list, &wdev->event_list);
530 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 531 queue_work(cfg80211_wq, &rdev->event_work);
f2129354 532}
b23aa676
SO
533EXPORT_SYMBOL(cfg80211_connect_result);
534
667503dd
JB
535void __cfg80211_roamed(struct wireless_dev *wdev, const u8 *bssid,
536 const u8 *req_ie, size_t req_ie_len,
537 const u8 *resp_ie, size_t resp_ie_len)
b23aa676 538{
b23aa676 539 struct cfg80211_bss *bss;
3d23e349 540#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
541 union iwreq_data wrqu;
542#endif
543
667503dd
JB
544 ASSERT_WDEV_LOCK(wdev);
545
b23aa676
SO
546 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
547 return;
548
f7969969 549 if (wdev->sme_state != CFG80211_SME_CONNECTED)
b23aa676
SO
550 return;
551
552 /* internal error -- how did we get to CONNECTED w/o BSS? */
553 if (WARN_ON(!wdev->current_bss)) {
554 return;
555 }
556
557 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 558 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO
559 wdev->current_bss = NULL;
560
561 bss = cfg80211_get_bss(wdev->wiphy, NULL, bssid,
562 wdev->ssid, wdev->ssid_len,
563 WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
564
565 if (WARN_ON(!bss))
566 return;
567
19957bb3
JB
568 cfg80211_hold_bss(bss_from_pub(bss));
569 wdev->current_bss = bss_from_pub(bss);
b23aa676 570
667503dd
JB
571 nl80211_send_roamed(wiphy_to_dev(wdev->wiphy), wdev->netdev, bssid,
572 req_ie, req_ie_len, resp_ie, resp_ie_len,
573 GFP_KERNEL);
b23aa676 574
3d23e349 575#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
576 if (req_ie) {
577 memset(&wrqu, 0, sizeof(wrqu));
578 wrqu.data.length = req_ie_len;
3409ff77 579 wireless_send_event(wdev->netdev, IWEVASSOCREQIE,
667503dd 580 &wrqu, req_ie);
b23aa676
SO
581 }
582
583 if (resp_ie) {
584 memset(&wrqu, 0, sizeof(wrqu));
585 wrqu.data.length = resp_ie_len;
667503dd
JB
586 wireless_send_event(wdev->netdev, IWEVASSOCRESPIE,
587 &wrqu, resp_ie);
b23aa676
SO
588 }
589
590 memset(&wrqu, 0, sizeof(wrqu));
591 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
592 memcpy(wrqu.ap_addr.sa_data, bssid, ETH_ALEN);
f401a6f7
JB
593 memcpy(wdev->wext.prev_bssid, bssid, ETH_ALEN);
594 wdev->wext.prev_bssid_valid = true;
667503dd 595 wireless_send_event(wdev->netdev, SIOCGIWAP, &wrqu, NULL);
b23aa676
SO
596#endif
597}
667503dd
JB
598
599void cfg80211_roamed(struct net_device *dev, const u8 *bssid,
600 const u8 *req_ie, size_t req_ie_len,
601 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
602{
603 struct wireless_dev *wdev = dev->ieee80211_ptr;
604 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
605 struct cfg80211_event *ev;
606 unsigned long flags;
607
f7969969
JB
608 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED);
609
667503dd
JB
610 ev = kzalloc(sizeof(*ev) + req_ie_len + resp_ie_len, gfp);
611 if (!ev)
612 return;
613
614 ev->type = EVENT_ROAMED;
615 memcpy(ev->rm.bssid, bssid, ETH_ALEN);
616 ev->rm.req_ie = ((u8 *)ev) + sizeof(*ev);
617 ev->rm.req_ie_len = req_ie_len;
618 memcpy((void *)ev->rm.req_ie, req_ie, req_ie_len);
619 ev->rm.resp_ie = ((u8 *)ev) + sizeof(*ev) + req_ie_len;
620 ev->rm.resp_ie_len = resp_ie_len;
621 memcpy((void *)ev->rm.resp_ie, resp_ie, resp_ie_len);
622
623 spin_lock_irqsave(&wdev->event_lock, flags);
624 list_add_tail(&ev->list, &wdev->event_list);
625 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 626 queue_work(cfg80211_wq, &rdev->event_work);
667503dd 627}
b23aa676
SO
628EXPORT_SYMBOL(cfg80211_roamed);
629
667503dd 630void __cfg80211_disconnected(struct net_device *dev, const u8 *ie,
6829c878 631 size_t ie_len, u16 reason, bool from_ap)
b23aa676
SO
632{
633 struct wireless_dev *wdev = dev->ieee80211_ptr;
fffd0934
JB
634 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
635 int i;
3d23e349 636#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
637 union iwreq_data wrqu;
638#endif
639
667503dd
JB
640 ASSERT_WDEV_LOCK(wdev);
641
b23aa676
SO
642 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_STATION))
643 return;
644
f7969969 645 if (wdev->sme_state != CFG80211_SME_CONNECTED)
b23aa676
SO
646 return;
647
648 if (wdev->current_bss) {
649 cfg80211_unhold_bss(wdev->current_bss);
19957bb3 650 cfg80211_put_bss(&wdev->current_bss->pub);
b23aa676
SO
651 }
652
653 wdev->current_bss = NULL;
654 wdev->sme_state = CFG80211_SME_IDLE;
8dadadb7 655 wdev->ssid_len = 0;
b23aa676 656
6829c878 657 if (wdev->conn) {
b6f0b639
JB
658 const u8 *bssid;
659 int ret;
660
6829c878
JB
661 kfree(wdev->conn->ie);
662 wdev->conn->ie = NULL;
19957bb3
JB
663 kfree(wdev->conn);
664 wdev->conn = NULL;
b6f0b639
JB
665
666 /*
667 * If this disconnect was due to a disassoc, we
668 * we might still have an auth BSS around. For
669 * the userspace SME that's currently expected,
670 * but for the kernel SME (nl80211 CONNECT or
671 * wireless extensions) we want to clear up all
672 * state.
673 */
674 for (i = 0; i < MAX_AUTH_BSSES; i++) {
675 if (!wdev->auth_bsses[i])
676 continue;
677 bssid = wdev->auth_bsses[i]->pub.bssid;
678 ret = __cfg80211_mlme_deauth(rdev, dev, bssid, NULL, 0,
679 WLAN_REASON_DEAUTH_LEAVING);
680 WARN(ret, "deauth failed: %d\n", ret);
681 }
6829c878
JB
682 }
683
fffd0934
JB
684 nl80211_send_disconnected(rdev, dev, reason, ie, ie_len, from_ap);
685
686 /*
687 * Delete all the keys ... pairwise keys can't really
688 * exist any more anyway, but default keys might.
689 */
690 if (rdev->ops->del_key)
691 for (i = 0; i < 6; i++)
692 rdev->ops->del_key(wdev->wiphy, dev, i, NULL);
b23aa676 693
3d23e349 694#ifdef CONFIG_CFG80211_WEXT
b23aa676
SO
695 memset(&wrqu, 0, sizeof(wrqu));
696 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
697 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
5f612033 698 wdev->wext.connect.ssid_len = 0;
b23aa676 699#endif
09d989d1
LR
700
701 schedule_work(&cfg80211_disconnect_work);
b23aa676
SO
702}
703
704void cfg80211_disconnected(struct net_device *dev, u16 reason,
705 u8 *ie, size_t ie_len, gfp_t gfp)
706{
667503dd
JB
707 struct wireless_dev *wdev = dev->ieee80211_ptr;
708 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
709 struct cfg80211_event *ev;
710 unsigned long flags;
711
f7969969
JB
712 CFG80211_DEV_WARN_ON(wdev->sme_state != CFG80211_SME_CONNECTED);
713
667503dd
JB
714 ev = kzalloc(sizeof(*ev) + ie_len, gfp);
715 if (!ev)
716 return;
717
718 ev->type = EVENT_DISCONNECTED;
719 ev->dc.ie = ((u8 *)ev) + sizeof(*ev);
720 ev->dc.ie_len = ie_len;
721 memcpy((void *)ev->dc.ie, ie, ie_len);
722 ev->dc.reason = reason;
723
724 spin_lock_irqsave(&wdev->event_lock, flags);
725 list_add_tail(&ev->list, &wdev->event_list);
726 spin_unlock_irqrestore(&wdev->event_lock, flags);
e60d7443 727 queue_work(cfg80211_wq, &rdev->event_work);
b23aa676
SO
728}
729EXPORT_SYMBOL(cfg80211_disconnected);
730
667503dd
JB
731int __cfg80211_connect(struct cfg80211_registered_device *rdev,
732 struct net_device *dev,
fffd0934 733 struct cfg80211_connect_params *connect,
f401a6f7
JB
734 struct cfg80211_cached_keys *connkeys,
735 const u8 *prev_bssid)
b23aa676 736{
b23aa676 737 struct wireless_dev *wdev = dev->ieee80211_ptr;
59bbb6f7 738 struct ieee80211_channel *chan;
bbac31f4 739 struct cfg80211_bss *bss = NULL;
667503dd
JB
740 int err;
741
742 ASSERT_WDEV_LOCK(wdev);
b23aa676
SO
743
744 if (wdev->sme_state != CFG80211_SME_IDLE)
745 return -EALREADY;
746
59bbb6f7
JB
747 chan = rdev_fixed_channel(rdev, wdev);
748 if (chan && chan != connect->channel)
749 return -EBUSY;
750
fffd0934
JB
751 if (WARN_ON(wdev->connect_keys)) {
752 kfree(wdev->connect_keys);
753 wdev->connect_keys = NULL;
754 }
755
756 if (connkeys && connkeys->def >= 0) {
757 int idx;
bcba8eae 758 u32 cipher;
fffd0934
JB
759
760 idx = connkeys->def;
bcba8eae 761 cipher = connkeys->params[idx].cipher;
fffd0934 762 /* If given a WEP key we may need it for shared key auth */
bcba8eae
SO
763 if (cipher == WLAN_CIPHER_SUITE_WEP40 ||
764 cipher == WLAN_CIPHER_SUITE_WEP104) {
fffd0934
JB
765 connect->key_idx = idx;
766 connect->key = connkeys->params[idx].key;
767 connect->key_len = connkeys->params[idx].key_len;
bcba8eae
SO
768
769 /*
770 * If ciphers are not set (e.g. when going through
771 * iwconfig), we have to set them appropriately here.
772 */
773 if (connect->crypto.cipher_group == 0)
774 connect->crypto.cipher_group = cipher;
775
776 if (connect->crypto.n_ciphers_pairwise == 0) {
777 connect->crypto.n_ciphers_pairwise = 1;
778 connect->crypto.ciphers_pairwise[0] = cipher;
779 }
fffd0934
JB
780 }
781 }
782
b23aa676 783 if (!rdev->ops->connect) {
6829c878
JB
784 if (!rdev->ops->auth || !rdev->ops->assoc)
785 return -EOPNOTSUPP;
786
19957bb3
JB
787 if (WARN_ON(wdev->conn))
788 return -EINPROGRESS;
789
790 wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL);
791 if (!wdev->conn)
792 return -ENOMEM;
6829c878
JB
793
794 /*
795 * Copy all parameters, and treat explicitly IEs, BSSID, SSID.
796 */
797 memcpy(&wdev->conn->params, connect, sizeof(*connect));
798 if (connect->bssid) {
799 wdev->conn->params.bssid = wdev->conn->bssid;
800 memcpy(wdev->conn->bssid, connect->bssid, ETH_ALEN);
801 }
802
803 if (connect->ie) {
804 wdev->conn->ie = kmemdup(connect->ie, connect->ie_len,
805 GFP_KERNEL);
806 wdev->conn->params.ie = wdev->conn->ie;
19957bb3
JB
807 if (!wdev->conn->ie) {
808 kfree(wdev->conn);
809 wdev->conn = NULL;
6829c878 810 return -ENOMEM;
19957bb3 811 }
6829c878
JB
812 }
813
814 if (connect->auth_type == NL80211_AUTHTYPE_AUTOMATIC) {
815 wdev->conn->auto_auth = true;
816 /* start with open system ... should mostly work */
817 wdev->conn->params.auth_type =
818 NL80211_AUTHTYPE_OPEN_SYSTEM;
819 } else {
820 wdev->conn->auto_auth = false;
821 }
822
823 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
824 wdev->ssid_len = connect->ssid_len;
825 wdev->conn->params.ssid = wdev->ssid;
826 wdev->conn->params.ssid_len = connect->ssid_len;
827
8bb89485
JB
828 /* see if we have the bss already */
829 bss = cfg80211_get_conn_bss(wdev);
6829c878
JB
830
831 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 832 wdev->connect_keys = connkeys;
6829c878 833
f401a6f7
JB
834 if (prev_bssid) {
835 memcpy(wdev->conn->prev_bssid, prev_bssid, ETH_ALEN);
836 wdev->conn->prev_bssid_valid = true;
837 }
838
bbac31f4
JB
839 /* we're good if we have a matching bss struct */
840 if (bss) {
6829c878
JB
841 wdev->conn->state = CFG80211_CONN_AUTHENTICATE_NEXT;
842 err = cfg80211_conn_do_work(wdev);
bbac31f4 843 cfg80211_put_bss(bss);
6829c878
JB
844 } else {
845 /* otherwise we'll need to scan for the AP first */
846 err = cfg80211_conn_scan(wdev);
847 /*
848 * If we can't scan right now, then we need to scan again
849 * after the current scan finished, since the parameters
850 * changed (unless we find a good AP anyway).
851 */
852 if (err == -EBUSY) {
853 err = 0;
854 wdev->conn->state = CFG80211_CONN_SCAN_AGAIN;
855 }
856 }
19957bb3 857 if (err) {
415ad1ef 858 kfree(wdev->conn->ie);
19957bb3
JB
859 kfree(wdev->conn);
860 wdev->conn = NULL;
6829c878 861 wdev->sme_state = CFG80211_SME_IDLE;
fffd0934 862 wdev->connect_keys = NULL;
8dadadb7 863 wdev->ssid_len = 0;
19957bb3 864 }
6829c878
JB
865
866 return err;
b23aa676
SO
867 } else {
868 wdev->sme_state = CFG80211_SME_CONNECTING;
fffd0934 869 wdev->connect_keys = connkeys;
b23aa676
SO
870 err = rdev->ops->connect(&rdev->wiphy, dev, connect);
871 if (err) {
fffd0934 872 wdev->connect_keys = NULL;
b23aa676
SO
873 wdev->sme_state = CFG80211_SME_IDLE;
874 return err;
875 }
b23aa676 876
6829c878
JB
877 memcpy(wdev->ssid, connect->ssid, connect->ssid_len);
878 wdev->ssid_len = connect->ssid_len;
b23aa676 879
6829c878
JB
880 return 0;
881 }
b23aa676
SO
882}
883
667503dd
JB
884int cfg80211_connect(struct cfg80211_registered_device *rdev,
885 struct net_device *dev,
fffd0934
JB
886 struct cfg80211_connect_params *connect,
887 struct cfg80211_cached_keys *connkeys)
667503dd
JB
888{
889 int err;
890
59bbb6f7 891 mutex_lock(&rdev->devlist_mtx);
667503dd 892 wdev_lock(dev->ieee80211_ptr);
f401a6f7 893 err = __cfg80211_connect(rdev, dev, connect, connkeys, NULL);
667503dd 894 wdev_unlock(dev->ieee80211_ptr);
59bbb6f7 895 mutex_unlock(&rdev->devlist_mtx);
667503dd
JB
896
897 return err;
898}
899
900int __cfg80211_disconnect(struct cfg80211_registered_device *rdev,
901 struct net_device *dev, u16 reason, bool wextev)
b23aa676 902{
6829c878 903 struct wireless_dev *wdev = dev->ieee80211_ptr;
b23aa676
SO
904 int err;
905
667503dd
JB
906 ASSERT_WDEV_LOCK(wdev);
907
6829c878
JB
908 if (wdev->sme_state == CFG80211_SME_IDLE)
909 return -EINVAL;
910
fffd0934
JB
911 kfree(wdev->connect_keys);
912 wdev->connect_keys = NULL;
913
b23aa676 914 if (!rdev->ops->disconnect) {
19957bb3
JB
915 if (!rdev->ops->deauth)
916 return -EOPNOTSUPP;
6829c878 917
19957bb3
JB
918 /* was it connected by userspace SME? */
919 if (!wdev->conn) {
920 cfg80211_mlme_down(rdev, dev);
921 return 0;
922 }
6829c878
JB
923
924 if (wdev->sme_state == CFG80211_SME_CONNECTING &&
925 (wdev->conn->state == CFG80211_CONN_SCANNING ||
926 wdev->conn->state == CFG80211_CONN_SCAN_AGAIN)) {
927 wdev->sme_state = CFG80211_SME_IDLE;
415ad1ef 928 kfree(wdev->conn->ie);
19957bb3
JB
929 kfree(wdev->conn);
930 wdev->conn = NULL;
8dadadb7 931 wdev->ssid_len = 0;
6829c878
JB
932 return 0;
933 }
934
6829c878 935 /* wdev->conn->params.bssid must be set if > SCANNING */
667503dd
JB
936 err = __cfg80211_mlme_deauth(rdev, dev,
937 wdev->conn->params.bssid,
938 NULL, 0, reason);
6829c878
JB
939 if (err)
940 return err;
b23aa676
SO
941 } else {
942 err = rdev->ops->disconnect(&rdev->wiphy, dev, reason);
943 if (err)
944 return err;
945 }
946
6829c878 947 if (wdev->sme_state == CFG80211_SME_CONNECTED)
667503dd 948 __cfg80211_disconnected(dev, NULL, 0, 0, false);
6829c878 949 else if (wdev->sme_state == CFG80211_SME_CONNECTING)
f2129354
JB
950 __cfg80211_connect_result(dev, NULL, NULL, 0, NULL, 0,
951 WLAN_STATUS_UNSPECIFIED_FAILURE,
df7fc0f9 952 wextev, NULL);
b23aa676
SO
953
954 return 0;
955}
19957bb3 956
667503dd
JB
957int cfg80211_disconnect(struct cfg80211_registered_device *rdev,
958 struct net_device *dev,
959 u16 reason, bool wextev)
960{
961 int err;
962
963 wdev_lock(dev->ieee80211_ptr);
964 err = __cfg80211_disconnect(rdev, dev, reason, wextev);
965 wdev_unlock(dev->ieee80211_ptr);
966
967 return err;
968}
969
19957bb3
JB
970void cfg80211_sme_disassoc(struct net_device *dev, int idx)
971{
972 struct wireless_dev *wdev = dev->ieee80211_ptr;
973 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
974 u8 bssid[ETH_ALEN];
975
667503dd
JB
976 ASSERT_WDEV_LOCK(wdev);
977
19957bb3
JB
978 if (!wdev->conn)
979 return;
980
981 if (wdev->conn->state == CFG80211_CONN_IDLE)
982 return;
983
984 /*
985 * Ok, so the association was made by this SME -- we don't
986 * want it any more so deauthenticate too.
987 */
988
989 if (!wdev->auth_bsses[idx])
990 return;
991
992 memcpy(bssid, wdev->auth_bsses[idx]->pub.bssid, ETH_ALEN);
ec3f1490
JB
993 if (__cfg80211_mlme_deauth(rdev, dev, bssid,
994 NULL, 0, WLAN_REASON_DEAUTH_LEAVING)) {
19957bb3
JB
995 /* whatever -- assume gone anyway */
996 cfg80211_unhold_bss(wdev->auth_bsses[idx]);
997 cfg80211_put_bss(&wdev->auth_bsses[idx]->pub);
998 wdev->auth_bsses[idx] = NULL;
999 }
1000}