Commit | Line | Data |
---|---|---|
28c61a66 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
95224fe8 AN |
2 | /* |
3 | * mac80211 TDLS handling code | |
4 | * | |
5 | * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net> | |
6 | * Copyright 2014, Intel Corporation | |
d98ad83e | 7 | * Copyright 2014 Intel Mobile Communications GmbH |
59021c67 | 8 | * Copyright 2015 - 2016 Intel Deutschland GmbH |
c6112046 | 9 | * Copyright (C) 2019, 2021-2023 Intel Corporation |
95224fe8 AN |
10 | */ |
11 | ||
12 | #include <linux/ieee80211.h> | |
6f7eaa47 | 13 | #include <linux/log2.h> |
c887f0d3 | 14 | #include <net/cfg80211.h> |
c8ff71e6 | 15 | #include <linux/rtnetlink.h> |
95224fe8 | 16 | #include "ieee80211_i.h" |
ee10f2c7 | 17 | #include "driver-ops.h" |
59021c67 | 18 | #include "rate.h" |
cb59bc14 | 19 | #include "wme.h" |
95224fe8 | 20 | |
17e6a59a AN |
21 | /* give usermode some time for retries in setting up the TDLS session */ |
22 | #define TDLS_PEER_SETUP_TIMEOUT (15 * HZ) | |
23 | ||
777b2600 | 24 | void ieee80211_tdls_peer_del_work(struct wiphy *wiphy, struct wiphy_work *wk) |
17e6a59a AN |
25 | { |
26 | struct ieee80211_sub_if_data *sdata; | |
27 | struct ieee80211_local *local; | |
28 | ||
29 | sdata = container_of(wk, struct ieee80211_sub_if_data, | |
81dd2b88 | 30 | u.mgd.tdls_peer_del_work.work); |
17e6a59a AN |
31 | local = sdata->local; |
32 | ||
0cd8080e JB |
33 | lockdep_assert_wiphy(local->hw.wiphy); |
34 | ||
81dd2b88 AN |
35 | if (!is_zero_ether_addr(sdata->u.mgd.tdls_peer)) { |
36 | tdls_dbg(sdata, "TDLS del peer %pM\n", sdata->u.mgd.tdls_peer); | |
37 | sta_info_destroy_addr(sdata, sdata->u.mgd.tdls_peer); | |
38 | eth_zero_addr(sdata->u.mgd.tdls_peer); | |
17e6a59a | 39 | } |
17e6a59a AN |
40 | } |
41 | ||
78a7ea37 | 42 | static void ieee80211_tdls_add_ext_capab(struct ieee80211_link_data *link, |
78632a17 | 43 | struct sk_buff *skb) |
95224fe8 | 44 | { |
78a7ea37 | 45 | struct ieee80211_sub_if_data *sdata = link->sdata; |
b98fb44f | 46 | struct ieee80211_local *local = sdata->local; |
82c0cc90 | 47 | struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; |
78632a17 AN |
48 | bool chan_switch = local->hw.wiphy->features & |
49 | NL80211_FEATURE_TDLS_CHANNEL_SWITCH; | |
82c0cc90 AN |
50 | bool wider_band = ieee80211_hw_check(&local->hw, TDLS_WIDER_BW) && |
51 | !ifmgd->tdls_wider_bw_prohibited; | |
e2fb1b83 YT |
52 | bool buffer_sta = ieee80211_hw_check(&local->hw, |
53 | SUPPORTS_TDLS_BUFFER_STA); | |
78a7ea37 | 54 | struct ieee80211_supported_band *sband = ieee80211_get_link_sband(link); |
b98fb44f | 55 | bool vht = sband && sband->vht_cap.vht_supported; |
4df864c1 | 56 | u8 *pos = skb_put(skb, 10); |
95224fe8 AN |
57 | |
58 | *pos++ = WLAN_EID_EXT_CAPABILITY; | |
b98fb44f | 59 | *pos++ = 8; /* len */ |
95224fe8 AN |
60 | *pos++ = 0x0; |
61 | *pos++ = 0x0; | |
62 | *pos++ = 0x0; | |
e2fb1b83 YT |
63 | *pos++ = (chan_switch ? WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH : 0) | |
64 | (buffer_sta ? WLAN_EXT_CAPA4_TDLS_BUFFER_STA : 0); | |
95224fe8 | 65 | *pos++ = WLAN_EXT_CAPA5_TDLS_ENABLED; |
b98fb44f AN |
66 | *pos++ = 0; |
67 | *pos++ = 0; | |
68 | *pos++ = (vht && wider_band) ? WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED : 0; | |
95224fe8 AN |
69 | } |
70 | ||
f0d29cb9 AN |
71 | static u8 |
72 | ieee80211_tdls_add_subband(struct ieee80211_sub_if_data *sdata, | |
73 | struct sk_buff *skb, u16 start, u16 end, | |
74 | u16 spacing) | |
75 | { | |
76 | u8 subband_cnt = 0, ch_cnt = 0; | |
77 | struct ieee80211_channel *ch; | |
78 | struct cfg80211_chan_def chandef; | |
79 | int i, subband_start; | |
923b352f | 80 | struct wiphy *wiphy = sdata->local->hw.wiphy; |
f0d29cb9 AN |
81 | |
82 | for (i = start; i <= end; i += spacing) { | |
83 | if (!ch_cnt) | |
84 | subband_start = i; | |
85 | ||
86 | ch = ieee80211_get_channel(sdata->local->hw.wiphy, i); | |
87 | if (ch) { | |
88 | /* we will be active on the channel */ | |
f0d29cb9 | 89 | cfg80211_chandef_create(&chandef, ch, |
50075892 | 90 | NL80211_CHAN_NO_HT); |
923b352f AN |
91 | if (cfg80211_reg_can_beacon_relax(wiphy, &chandef, |
92 | sdata->wdev.iftype)) { | |
f0d29cb9 | 93 | ch_cnt++; |
50075892 AN |
94 | /* |
95 | * check if the next channel is also part of | |
96 | * this allowed range | |
97 | */ | |
f0d29cb9 AN |
98 | continue; |
99 | } | |
100 | } | |
101 | ||
50075892 AN |
102 | /* |
103 | * we've reached the end of a range, with allowed channels | |
104 | * found | |
105 | */ | |
f0d29cb9 AN |
106 | if (ch_cnt) { |
107 | u8 *pos = skb_put(skb, 2); | |
108 | *pos++ = ieee80211_frequency_to_channel(subband_start); | |
109 | *pos++ = ch_cnt; | |
110 | ||
111 | subband_cnt++; | |
112 | ch_cnt = 0; | |
113 | } | |
114 | } | |
115 | ||
50075892 AN |
116 | /* all channels in the requested range are allowed - add them here */ |
117 | if (ch_cnt) { | |
118 | u8 *pos = skb_put(skb, 2); | |
119 | *pos++ = ieee80211_frequency_to_channel(subband_start); | |
120 | *pos++ = ch_cnt; | |
121 | ||
122 | subband_cnt++; | |
123 | } | |
124 | ||
f0d29cb9 AN |
125 | return subband_cnt; |
126 | } | |
127 | ||
128 | static void | |
129 | ieee80211_tdls_add_supp_channels(struct ieee80211_sub_if_data *sdata, | |
130 | struct sk_buff *skb) | |
131 | { | |
132 | /* | |
133 | * Add possible channels for TDLS. These are channels that are allowed | |
134 | * to be active. | |
135 | */ | |
136 | u8 subband_cnt; | |
137 | u8 *pos = skb_put(skb, 2); | |
138 | ||
139 | *pos++ = WLAN_EID_SUPPORTED_CHANNELS; | |
140 | ||
141 | /* | |
142 | * 5GHz and 2GHz channels numbers can overlap. Ignore this for now, as | |
143 | * this doesn't happen in real world scenarios. | |
144 | */ | |
145 | ||
146 | /* 2GHz, with 5MHz spacing */ | |
147 | subband_cnt = ieee80211_tdls_add_subband(sdata, skb, 2412, 2472, 5); | |
148 | ||
149 | /* 5GHz, with 20MHz spacing */ | |
150 | subband_cnt += ieee80211_tdls_add_subband(sdata, skb, 5000, 5825, 20); | |
151 | ||
152 | /* length */ | |
153 | *pos = 2 * subband_cnt; | |
154 | } | |
155 | ||
78a7ea37 | 156 | static void ieee80211_tdls_add_oper_classes(struct ieee80211_link_data *link, |
a38700dd AN |
157 | struct sk_buff *skb) |
158 | { | |
159 | u8 *pos; | |
160 | u8 op_class; | |
161 | ||
78a7ea37 | 162 | if (!ieee80211_chandef_to_operating_class(&link->conf->chandef, |
a38700dd AN |
163 | &op_class)) |
164 | return; | |
165 | ||
166 | pos = skb_put(skb, 4); | |
167 | *pos++ = WLAN_EID_SUPPORTED_REGULATORY_CLASSES; | |
168 | *pos++ = 2; /* len */ | |
169 | ||
170 | *pos++ = op_class; | |
171 | *pos++ = op_class; /* give current operating class as alternate too */ | |
172 | } | |
173 | ||
2cedd879 AN |
174 | static void ieee80211_tdls_add_bss_coex_ie(struct sk_buff *skb) |
175 | { | |
4df864c1 | 176 | u8 *pos = skb_put(skb, 3); |
2cedd879 AN |
177 | |
178 | *pos++ = WLAN_EID_BSS_COEX_2040; | |
179 | *pos++ = 1; /* len */ | |
180 | ||
181 | *pos++ = WLAN_BSS_COEX_INFORMATION_REQUEST; | |
182 | } | |
183 | ||
78a7ea37 | 184 | static u16 ieee80211_get_tdls_sta_capab(struct ieee80211_link_data *link, |
dd8c0b03 | 185 | u16 status_code) |
95224fe8 | 186 | { |
21a8e9dd MSS |
187 | struct ieee80211_supported_band *sband; |
188 | ||
dd8c0b03 AN |
189 | /* The capability will be 0 when sending a failure code */ |
190 | if (status_code != 0) | |
191 | return 0; | |
192 | ||
78a7ea37 MS |
193 | sband = ieee80211_get_link_sband(link); |
194 | ||
21a8e9dd | 195 | if (sband && sband->band == NL80211_BAND_2GHZ) { |
ea1b2b45 JB |
196 | return WLAN_CAPABILITY_SHORT_SLOT_TIME | |
197 | WLAN_CAPABILITY_SHORT_PREAMBLE; | |
198 | } | |
95224fe8 | 199 | |
ea1b2b45 | 200 | return 0; |
95224fe8 AN |
201 | } |
202 | ||
78a7ea37 | 203 | static void ieee80211_tdls_add_link_ie(struct ieee80211_link_data *link, |
1606ef4a AN |
204 | struct sk_buff *skb, const u8 *peer, |
205 | bool initiator) | |
95224fe8 | 206 | { |
78a7ea37 | 207 | struct ieee80211_sub_if_data *sdata = link->sdata; |
95224fe8 | 208 | struct ieee80211_tdls_lnkie *lnkid; |
1606ef4a AN |
209 | const u8 *init_addr, *rsp_addr; |
210 | ||
211 | if (initiator) { | |
212 | init_addr = sdata->vif.addr; | |
213 | rsp_addr = peer; | |
214 | } else { | |
215 | init_addr = peer; | |
216 | rsp_addr = sdata->vif.addr; | |
217 | } | |
95224fe8 | 218 | |
4df864c1 | 219 | lnkid = skb_put(skb, sizeof(struct ieee80211_tdls_lnkie)); |
95224fe8 AN |
220 | |
221 | lnkid->ie_type = WLAN_EID_LINK_ID; | |
222 | lnkid->ie_len = sizeof(struct ieee80211_tdls_lnkie) - 2; | |
223 | ||
78a7ea37 | 224 | memcpy(lnkid->bssid, link->u.mgd.bssid, ETH_ALEN); |
1606ef4a AN |
225 | memcpy(lnkid->init_sta, init_addr, ETH_ALEN); |
226 | memcpy(lnkid->resp_sta, rsp_addr, ETH_ALEN); | |
95224fe8 AN |
227 | } |
228 | ||
fb28ec0c AN |
229 | static void |
230 | ieee80211_tdls_add_aid(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) | |
231 | { | |
4df864c1 | 232 | u8 *pos = skb_put(skb, 4); |
fb28ec0c AN |
233 | |
234 | *pos++ = WLAN_EID_AID; | |
235 | *pos++ = 2; /* len */ | |
f276e20b | 236 | put_unaligned_le16(sdata->vif.cfg.aid, pos); |
fb28ec0c AN |
237 | } |
238 | ||
6f7eaa47 AN |
239 | /* translate numbering in the WMM parameter IE to the mac80211 notation */ |
240 | static enum ieee80211_ac_numbers ieee80211_ac_from_wmm(int ac) | |
241 | { | |
242 | switch (ac) { | |
243 | default: | |
244 | WARN_ON_ONCE(1); | |
fc0561dc | 245 | fallthrough; |
6f7eaa47 AN |
246 | case 0: |
247 | return IEEE80211_AC_BE; | |
248 | case 1: | |
249 | return IEEE80211_AC_BK; | |
250 | case 2: | |
251 | return IEEE80211_AC_VI; | |
252 | case 3: | |
253 | return IEEE80211_AC_VO; | |
254 | } | |
255 | } | |
256 | ||
257 | static u8 ieee80211_wmm_aci_aifsn(int aifsn, bool acm, int aci) | |
258 | { | |
259 | u8 ret; | |
260 | ||
261 | ret = aifsn & 0x0f; | |
262 | if (acm) | |
263 | ret |= 0x10; | |
264 | ret |= (aci << 5) & 0x60; | |
265 | return ret; | |
266 | } | |
267 | ||
268 | static u8 ieee80211_wmm_ecw(u16 cw_min, u16 cw_max) | |
269 | { | |
270 | return ((ilog2(cw_min + 1) << 0x0) & 0x0f) | | |
271 | ((ilog2(cw_max + 1) << 0x4) & 0xf0); | |
272 | } | |
273 | ||
274 | static void ieee80211_tdls_add_wmm_param_ie(struct ieee80211_sub_if_data *sdata, | |
275 | struct sk_buff *skb) | |
276 | { | |
277 | struct ieee80211_wmm_param_ie *wmm; | |
278 | struct ieee80211_tx_queue_params *txq; | |
279 | int i; | |
280 | ||
b080db58 | 281 | wmm = skb_put_zero(skb, sizeof(*wmm)); |
6f7eaa47 AN |
282 | |
283 | wmm->element_id = WLAN_EID_VENDOR_SPECIFIC; | |
284 | wmm->len = sizeof(*wmm) - 2; | |
285 | ||
286 | wmm->oui[0] = 0x00; /* Microsoft OUI 00:50:F2 */ | |
287 | wmm->oui[1] = 0x50; | |
288 | wmm->oui[2] = 0xf2; | |
289 | wmm->oui_type = 2; /* WME */ | |
290 | wmm->oui_subtype = 1; /* WME param */ | |
291 | wmm->version = 1; /* WME ver */ | |
292 | wmm->qos_info = 0; /* U-APSD not in use */ | |
293 | ||
294 | /* | |
295 | * Use the EDCA parameters defined for the BSS, or default if the AP | |
296 | * doesn't support it, as mandated by 802.11-2012 section 10.22.4 | |
297 | */ | |
298 | for (i = 0; i < IEEE80211_NUM_ACS; i++) { | |
b3e2130b | 299 | txq = &sdata->deflink.tx_conf[ieee80211_ac_from_wmm(i)]; |
6f7eaa47 AN |
300 | wmm->ac[i].aci_aifsn = ieee80211_wmm_aci_aifsn(txq->aifs, |
301 | txq->acm, i); | |
302 | wmm->ac[i].cw = ieee80211_wmm_ecw(txq->cw_min, txq->cw_max); | |
303 | wmm->ac[i].txop_limit = cpu_to_le16(txq->txop); | |
304 | } | |
305 | } | |
306 | ||
0fabfaaf AN |
307 | static void |
308 | ieee80211_tdls_chandef_vht_upgrade(struct ieee80211_sub_if_data *sdata, | |
309 | struct sta_info *sta) | |
310 | { | |
311 | /* IEEE802.11ac-2013 Table E-4 */ | |
5b43bd71 | 312 | static const u16 centers_80mhz[] = { 5210, 5290, 5530, 5610, 5690, 5775 }; |
0fabfaaf | 313 | struct cfg80211_chan_def uc = sta->tdls_chandef; |
c71420db JB |
314 | enum nl80211_chan_width max_width = |
315 | ieee80211_sta_cap_chan_bw(&sta->deflink); | |
0fabfaaf AN |
316 | int i; |
317 | ||
318 | /* only support upgrading non-narrow channels up to 80Mhz */ | |
319 | if (max_width == NL80211_CHAN_WIDTH_5 || | |
320 | max_width == NL80211_CHAN_WIDTH_10) | |
321 | return; | |
322 | ||
323 | if (max_width > NL80211_CHAN_WIDTH_80) | |
324 | max_width = NL80211_CHAN_WIDTH_80; | |
325 | ||
4b559ec0 | 326 | if (uc.width >= max_width) |
0fabfaaf AN |
327 | return; |
328 | /* | |
329 | * Channel usage constrains in the IEEE802.11ac-2013 specification only | |
330 | * allow expanding a 20MHz channel to 80MHz in a single way. In | |
331 | * addition, there are no 40MHz allowed channels that are not part of | |
332 | * the allowed 80MHz range in the 5GHz spectrum (the relevant one here). | |
333 | */ | |
334 | for (i = 0; i < ARRAY_SIZE(centers_80mhz); i++) | |
335 | if (abs(uc.chan->center_freq - centers_80mhz[i]) <= 30) { | |
336 | uc.center_freq1 = centers_80mhz[i]; | |
4b559ec0 | 337 | uc.center_freq2 = 0; |
0fabfaaf AN |
338 | uc.width = NL80211_CHAN_WIDTH_80; |
339 | break; | |
340 | } | |
341 | ||
342 | if (!uc.center_freq1) | |
343 | return; | |
344 | ||
554d072e | 345 | /* proceed to downgrade the chandef until usable or the same as AP BW */ |
db8d9977 | 346 | while (uc.width > max_width || |
554d072e AN |
347 | (uc.width > sta->tdls_chandef.width && |
348 | !cfg80211_reg_can_beacon_relax(sdata->local->hw.wiphy, &uc, | |
349 | sdata->wdev.iftype))) | |
0fabfaaf AN |
350 | ieee80211_chandef_downgrade(&uc); |
351 | ||
352 | if (!cfg80211_chandef_identical(&uc, &sta->tdls_chandef)) { | |
353 | tdls_dbg(sdata, "TDLS ch width upgraded %d -> %d\n", | |
354 | sta->tdls_chandef.width, uc.width); | |
355 | ||
356 | /* | |
357 | * the station is not yet authorized when BW upgrade is done, | |
358 | * locking is not required | |
359 | */ | |
360 | sta->tdls_chandef = uc; | |
361 | } | |
362 | } | |
363 | ||
f09a87d2 | 364 | static void |
78a7ea37 | 365 | ieee80211_tdls_add_setup_start_ies(struct ieee80211_link_data *link, |
f09a87d2 | 366 | struct sk_buff *skb, const u8 *peer, |
1606ef4a AN |
367 | u8 action_code, bool initiator, |
368 | const u8 *extra_ies, size_t extra_ies_len) | |
f09a87d2 | 369 | { |
78a7ea37 | 370 | struct ieee80211_sub_if_data *sdata = link->sdata; |
13cc8a4a | 371 | struct ieee80211_supported_band *sband; |
21a8e9dd | 372 | struct ieee80211_local *local = sdata->local; |
13cc8a4a | 373 | struct ieee80211_sta_ht_cap ht_cap; |
fb28ec0c | 374 | struct ieee80211_sta_vht_cap vht_cap; |
71b3b7ac AN |
375 | const struct ieee80211_sta_he_cap *he_cap; |
376 | const struct ieee80211_sta_eht_cap *eht_cap; | |
13cc8a4a | 377 | struct sta_info *sta = NULL; |
f09a87d2 AN |
378 | size_t offset = 0, noffset; |
379 | u8 *pos; | |
380 | ||
78a7ea37 MS |
381 | sband = ieee80211_get_link_sband(link); |
382 | if (WARN_ON_ONCE(!sband)) | |
21a8e9dd MSS |
383 | return; |
384 | ||
385 | ieee80211_add_srates_ie(sdata, skb, false, sband->band); | |
386 | ieee80211_add_ext_srates_ie(sdata, skb, false, sband->band); | |
f0d29cb9 | 387 | ieee80211_tdls_add_supp_channels(sdata, skb); |
f09a87d2 AN |
388 | |
389 | /* add any custom IEs that go before Extended Capabilities */ | |
390 | if (extra_ies_len) { | |
391 | static const u8 before_ext_cap[] = { | |
392 | WLAN_EID_SUPP_RATES, | |
393 | WLAN_EID_COUNTRY, | |
394 | WLAN_EID_EXT_SUPP_RATES, | |
395 | WLAN_EID_SUPPORTED_CHANNELS, | |
396 | WLAN_EID_RSN, | |
397 | }; | |
398 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
399 | before_ext_cap, | |
400 | ARRAY_SIZE(before_ext_cap), | |
401 | offset); | |
b952f4df | 402 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
f09a87d2 AN |
403 | offset = noffset; |
404 | } | |
405 | ||
78a7ea37 | 406 | ieee80211_tdls_add_ext_capab(link, skb); |
f09a87d2 | 407 | |
40b861a0 AN |
408 | /* add the QoS element if we support it */ |
409 | if (local->hw.queues >= IEEE80211_NUM_ACS && | |
410 | action_code != WLAN_PUB_ACTION_TDLS_DISCOVER_RES) | |
411 | ieee80211_add_wmm_info_ie(skb_put(skb, 9), 0); /* no U-APSD */ | |
412 | ||
f09a87d2 AN |
413 | /* add any custom IEs that go before HT capabilities */ |
414 | if (extra_ies_len) { | |
415 | static const u8 before_ht_cap[] = { | |
416 | WLAN_EID_SUPP_RATES, | |
417 | WLAN_EID_COUNTRY, | |
418 | WLAN_EID_EXT_SUPP_RATES, | |
419 | WLAN_EID_SUPPORTED_CHANNELS, | |
420 | WLAN_EID_RSN, | |
421 | WLAN_EID_EXT_CAPABILITY, | |
422 | WLAN_EID_QOS_CAPA, | |
423 | WLAN_EID_FAST_BSS_TRANSITION, | |
424 | WLAN_EID_TIMEOUT_INTERVAL, | |
425 | WLAN_EID_SUPPORTED_REGULATORY_CLASSES, | |
426 | }; | |
427 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
428 | before_ht_cap, | |
429 | ARRAY_SIZE(before_ht_cap), | |
430 | offset); | |
b952f4df | 431 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
f09a87d2 AN |
432 | offset = noffset; |
433 | } | |
434 | ||
ae2e9fba AN |
435 | /* we should have the peer STA if we're already responding */ |
436 | if (action_code == WLAN_TDLS_SETUP_RESPONSE) { | |
437 | sta = sta_info_get(sdata, peer); | |
78a7ea37 | 438 | if (WARN_ON_ONCE(!sta)) |
ae2e9fba | 439 | return; |
0fabfaaf | 440 | |
78a7ea37 | 441 | sta->tdls_chandef = link->conf->chandef; |
ae2e9fba AN |
442 | } |
443 | ||
78a7ea37 | 444 | ieee80211_tdls_add_oper_classes(link, skb); |
a38700dd | 445 | |
13cc8a4a AN |
446 | /* |
447 | * with TDLS we can switch channels, and HT-caps are not necessarily | |
448 | * the same on all bands. The specification limits the setup to a | |
449 | * single HT-cap, so use the current band for now. | |
450 | */ | |
13cc8a4a | 451 | memcpy(&ht_cap, &sband->ht_cap, sizeof(ht_cap)); |
c5309ba7 | 452 | |
070e176a AN |
453 | if ((action_code == WLAN_TDLS_SETUP_REQUEST || |
454 | action_code == WLAN_PUB_ACTION_TDLS_DISCOVER_RES) && | |
455 | ht_cap.ht_supported) { | |
c5309ba7 JB |
456 | ieee80211_apply_htcap_overrides(sdata, &ht_cap); |
457 | ||
458 | /* disable SMPS in TDLS initiator */ | |
459 | ht_cap.cap |= WLAN_HT_CAP_SM_PS_DISABLED | |
460 | << IEEE80211_HT_CAP_SM_PS_SHIFT; | |
461 | ||
462 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2); | |
463 | ieee80211_ie_build_ht_cap(pos, &ht_cap, ht_cap.cap); | |
464 | } else if (action_code == WLAN_TDLS_SETUP_RESPONSE && | |
046d2e7c | 465 | ht_cap.ht_supported && sta->sta.deflink.ht_cap.ht_supported) { |
c5309ba7 | 466 | /* the peer caps are already intersected with our own */ |
046d2e7c | 467 | memcpy(&ht_cap, &sta->sta.deflink.ht_cap, sizeof(ht_cap)); |
13cc8a4a AN |
468 | |
469 | pos = skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2); | |
470 | ieee80211_ie_build_ht_cap(pos, &ht_cap, ht_cap.cap); | |
471 | } | |
472 | ||
2cedd879 AN |
473 | if (ht_cap.ht_supported && |
474 | (ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40)) | |
475 | ieee80211_tdls_add_bss_coex_ie(skb); | |
476 | ||
78a7ea37 | 477 | ieee80211_tdls_add_link_ie(link, skb, peer, initiator); |
fb28ec0c AN |
478 | |
479 | /* add any custom IEs that go before VHT capabilities */ | |
480 | if (extra_ies_len) { | |
481 | static const u8 before_vht_cap[] = { | |
482 | WLAN_EID_SUPP_RATES, | |
483 | WLAN_EID_COUNTRY, | |
484 | WLAN_EID_EXT_SUPP_RATES, | |
485 | WLAN_EID_SUPPORTED_CHANNELS, | |
486 | WLAN_EID_RSN, | |
487 | WLAN_EID_EXT_CAPABILITY, | |
488 | WLAN_EID_QOS_CAPA, | |
489 | WLAN_EID_FAST_BSS_TRANSITION, | |
490 | WLAN_EID_TIMEOUT_INTERVAL, | |
491 | WLAN_EID_SUPPORTED_REGULATORY_CLASSES, | |
492 | WLAN_EID_MULTI_BAND, | |
493 | }; | |
494 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
495 | before_vht_cap, | |
496 | ARRAY_SIZE(before_vht_cap), | |
497 | offset); | |
b952f4df | 498 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
fb28ec0c AN |
499 | offset = noffset; |
500 | } | |
501 | ||
05995d05 | 502 | /* add AID if VHT, HE or EHT capabilities supported */ |
fb28ec0c | 503 | memcpy(&vht_cap, &sband->vht_cap, sizeof(vht_cap)); |
05995d05 MS |
504 | he_cap = ieee80211_get_he_iftype_cap_vif(sband, &sdata->vif); |
505 | eht_cap = ieee80211_get_eht_iftype_cap_vif(sband, &sdata->vif); | |
506 | if ((vht_cap.vht_supported || he_cap || eht_cap) && | |
507 | (action_code == WLAN_TDLS_SETUP_REQUEST || | |
508 | action_code == WLAN_TDLS_SETUP_RESPONSE)) | |
509 | ieee80211_tdls_add_aid(sdata, skb); | |
510 | ||
511 | /* build the VHT-cap similarly to the HT-cap */ | |
070e176a AN |
512 | if ((action_code == WLAN_TDLS_SETUP_REQUEST || |
513 | action_code == WLAN_PUB_ACTION_TDLS_DISCOVER_RES) && | |
514 | vht_cap.vht_supported) { | |
fb28ec0c AN |
515 | ieee80211_apply_vhtcap_overrides(sdata, &vht_cap); |
516 | ||
fb28ec0c AN |
517 | pos = skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2); |
518 | ieee80211_ie_build_vht_cap(pos, &vht_cap, vht_cap.cap); | |
519 | } else if (action_code == WLAN_TDLS_SETUP_RESPONSE && | |
046d2e7c | 520 | vht_cap.vht_supported && sta->sta.deflink.vht_cap.vht_supported) { |
fb28ec0c | 521 | /* the peer caps are already intersected with our own */ |
046d2e7c | 522 | memcpy(&vht_cap, &sta->sta.deflink.vht_cap, sizeof(vht_cap)); |
fb28ec0c | 523 | |
fb28ec0c AN |
524 | pos = skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2); |
525 | ieee80211_ie_build_vht_cap(pos, &vht_cap, vht_cap.cap); | |
0fabfaaf AN |
526 | |
527 | /* | |
528 | * if both peers support WIDER_BW, we can expand the chandef to | |
529 | * a wider compatible one, up to 80MHz | |
530 | */ | |
531 | if (test_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW)) | |
532 | ieee80211_tdls_chandef_vht_upgrade(sdata, sta); | |
fb28ec0c AN |
533 | } |
534 | ||
71b3b7ac AN |
535 | /* add any custom IEs that go before HE capabilities */ |
536 | if (extra_ies_len) { | |
537 | static const u8 before_he_cap[] = { | |
538 | WLAN_EID_EXTENSION, | |
539 | WLAN_EID_EXT_FILS_REQ_PARAMS, | |
540 | WLAN_EID_AP_CSN, | |
541 | }; | |
542 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
543 | before_he_cap, | |
544 | ARRAY_SIZE(before_he_cap), | |
545 | offset); | |
546 | skb_put_data(skb, extra_ies + offset, noffset - offset); | |
547 | offset = noffset; | |
548 | } | |
549 | ||
550 | /* build the HE-cap from sband */ | |
71b3b7ac AN |
551 | if (he_cap && |
552 | (action_code == WLAN_TDLS_SETUP_REQUEST || | |
553 | action_code == WLAN_TDLS_SETUP_RESPONSE || | |
554 | action_code == WLAN_PUB_ACTION_TDLS_DISCOVER_RES)) { | |
555 | __le16 he_6ghz_capa; | |
556 | u8 cap_size; | |
557 | ||
558 | cap_size = | |
559 | 2 + 1 + sizeof(he_cap->he_cap_elem) + | |
560 | ieee80211_he_mcs_nss_size(&he_cap->he_cap_elem) + | |
561 | ieee80211_he_ppe_size(he_cap->ppe_thres[0], | |
562 | he_cap->he_cap_elem.phy_cap_info); | |
563 | pos = skb_put(skb, cap_size); | |
564 | pos = ieee80211_ie_build_he_cap(0, pos, he_cap, pos + cap_size); | |
565 | ||
566 | /* Build HE 6Ghz capa IE from sband */ | |
567 | if (sband->band == NL80211_BAND_6GHZ) { | |
568 | cap_size = 2 + 1 + sizeof(struct ieee80211_he_6ghz_capa); | |
569 | pos = skb_put(skb, cap_size); | |
570 | he_6ghz_capa = | |
571 | ieee80211_get_he_6ghz_capa_vif(sband, &sdata->vif); | |
572 | pos = ieee80211_write_he_6ghz_cap(pos, he_6ghz_capa, | |
573 | pos + cap_size); | |
574 | } | |
575 | } | |
576 | ||
577 | /* add any custom IEs that go before EHT capabilities */ | |
578 | if (extra_ies_len) { | |
579 | static const u8 before_he_cap[] = { | |
580 | WLAN_EID_EXTENSION, | |
581 | WLAN_EID_EXT_FILS_REQ_PARAMS, | |
582 | WLAN_EID_AP_CSN, | |
583 | }; | |
584 | ||
585 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
586 | before_he_cap, | |
587 | ARRAY_SIZE(before_he_cap), | |
588 | offset); | |
589 | skb_put_data(skb, extra_ies + offset, noffset - offset); | |
590 | offset = noffset; | |
591 | } | |
592 | ||
593 | /* build the EHT-cap from sband */ | |
71b3b7ac AN |
594 | if (he_cap && eht_cap && |
595 | (action_code == WLAN_TDLS_SETUP_REQUEST || | |
596 | action_code == WLAN_TDLS_SETUP_RESPONSE || | |
597 | action_code == WLAN_PUB_ACTION_TDLS_DISCOVER_RES)) { | |
598 | u8 cap_size; | |
599 | ||
600 | cap_size = | |
601 | 2 + 1 + sizeof(eht_cap->eht_cap_elem) + | |
602 | ieee80211_eht_mcs_nss_size(&he_cap->he_cap_elem, | |
603 | &eht_cap->eht_cap_elem, false) + | |
604 | ieee80211_eht_ppe_size(eht_cap->eht_ppe_thres[0], | |
605 | eht_cap->eht_cap_elem.phy_cap_info); | |
606 | pos = skb_put(skb, cap_size); | |
607 | ieee80211_ie_build_eht_cap(pos, he_cap, eht_cap, pos + cap_size, false); | |
608 | } | |
609 | ||
f09a87d2 AN |
610 | /* add any remaining IEs */ |
611 | if (extra_ies_len) { | |
612 | noffset = extra_ies_len; | |
b952f4df | 613 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
f09a87d2 | 614 | } |
1606ef4a | 615 | |
f09a87d2 AN |
616 | } |
617 | ||
6f7eaa47 | 618 | static void |
78a7ea37 | 619 | ieee80211_tdls_add_setup_cfm_ies(struct ieee80211_link_data *link, |
6f7eaa47 AN |
620 | struct sk_buff *skb, const u8 *peer, |
621 | bool initiator, const u8 *extra_ies, | |
622 | size_t extra_ies_len) | |
623 | { | |
78a7ea37 | 624 | struct ieee80211_sub_if_data *sdata = link->sdata; |
6f7eaa47 AN |
625 | struct ieee80211_local *local = sdata->local; |
626 | size_t offset = 0, noffset; | |
13cc8a4a | 627 | struct sta_info *sta, *ap_sta; |
21a8e9dd | 628 | struct ieee80211_supported_band *sband; |
6f7eaa47 AN |
629 | u8 *pos; |
630 | ||
78a7ea37 MS |
631 | sband = ieee80211_get_link_sband(link); |
632 | if (WARN_ON_ONCE(!sband)) | |
21a8e9dd MSS |
633 | return; |
634 | ||
6f7eaa47 | 635 | sta = sta_info_get(sdata, peer); |
78a7ea37 MS |
636 | ap_sta = sta_info_get(sdata, sdata->vif.cfg.ap_addr); |
637 | ||
638 | if (WARN_ON_ONCE(!sta || !ap_sta)) | |
6f7eaa47 | 639 | return; |
6f7eaa47 | 640 | |
78a7ea37 | 641 | sta->tdls_chandef = link->conf->chandef; |
0fabfaaf | 642 | |
6f7eaa47 AN |
643 | /* add any custom IEs that go before the QoS IE */ |
644 | if (extra_ies_len) { | |
645 | static const u8 before_qos[] = { | |
646 | WLAN_EID_RSN, | |
647 | }; | |
648 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
649 | before_qos, | |
650 | ARRAY_SIZE(before_qos), | |
651 | offset); | |
b952f4df | 652 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
6f7eaa47 AN |
653 | offset = noffset; |
654 | } | |
655 | ||
656 | /* add the QoS param IE if both the peer and we support it */ | |
a74a8c84 | 657 | if (local->hw.queues >= IEEE80211_NUM_ACS && sta->sta.wme) |
6f7eaa47 AN |
658 | ieee80211_tdls_add_wmm_param_ie(sdata, skb); |
659 | ||
13cc8a4a AN |
660 | /* add any custom IEs that go before HT operation */ |
661 | if (extra_ies_len) { | |
662 | static const u8 before_ht_op[] = { | |
663 | WLAN_EID_RSN, | |
664 | WLAN_EID_QOS_CAPA, | |
665 | WLAN_EID_FAST_BSS_TRANSITION, | |
666 | WLAN_EID_TIMEOUT_INTERVAL, | |
667 | }; | |
668 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
669 | before_ht_op, | |
670 | ARRAY_SIZE(before_ht_op), | |
671 | offset); | |
b952f4df | 672 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
13cc8a4a AN |
673 | offset = noffset; |
674 | } | |
675 | ||
57f255f5 AN |
676 | /* |
677 | * if HT support is only added in TDLS, we need an HT-operation IE. | |
678 | * add the IE as required by IEEE802.11-2012 9.23.3.2. | |
679 | */ | |
046d2e7c | 680 | if (!ap_sta->sta.deflink.ht_cap.ht_supported && sta->sta.deflink.ht_cap.ht_supported) { |
57f255f5 AN |
681 | u16 prot = IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED | |
682 | IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT | | |
683 | IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT; | |
684 | ||
890b7878 | 685 | pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_operation)); |
046d2e7c | 686 | ieee80211_ie_build_ht_oper(pos, &sta->sta.deflink.ht_cap, |
78a7ea37 | 687 | &link->conf->chandef, prot, |
57f255f5 | 688 | true); |
13cc8a4a AN |
689 | } |
690 | ||
78a7ea37 | 691 | ieee80211_tdls_add_link_ie(link, skb, peer, initiator); |
fb28ec0c AN |
692 | |
693 | /* only include VHT-operation if not on the 2.4GHz band */ | |
21a8e9dd | 694 | if (sband->band != NL80211_BAND_2GHZ && |
046d2e7c | 695 | sta->sta.deflink.vht_cap.vht_supported) { |
0fabfaaf AN |
696 | /* |
697 | * if both peers support WIDER_BW, we can expand the chandef to | |
698 | * a wider compatible one, up to 80MHz | |
699 | */ | |
700 | if (test_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW)) | |
701 | ieee80211_tdls_chandef_vht_upgrade(sdata, sta); | |
702 | ||
890b7878 | 703 | pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_operation)); |
046d2e7c | 704 | ieee80211_ie_build_vht_oper(pos, &sta->sta.deflink.vht_cap, |
0fabfaaf | 705 | &sta->tdls_chandef); |
fb28ec0c AN |
706 | } |
707 | ||
6f7eaa47 AN |
708 | /* add any remaining IEs */ |
709 | if (extra_ies_len) { | |
710 | noffset = extra_ies_len; | |
b952f4df | 711 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
6f7eaa47 | 712 | } |
6f7eaa47 AN |
713 | } |
714 | ||
a7a6bdd0 | 715 | static void |
78a7ea37 | 716 | ieee80211_tdls_add_chan_switch_req_ies(struct ieee80211_link_data *link, |
a7a6bdd0 AN |
717 | struct sk_buff *skb, const u8 *peer, |
718 | bool initiator, const u8 *extra_ies, | |
719 | size_t extra_ies_len, u8 oper_class, | |
720 | struct cfg80211_chan_def *chandef) | |
721 | { | |
722 | struct ieee80211_tdls_data *tf; | |
723 | size_t offset = 0, noffset; | |
a7a6bdd0 AN |
724 | |
725 | if (WARN_ON_ONCE(!chandef)) | |
726 | return; | |
727 | ||
728 | tf = (void *)skb->data; | |
729 | tf->u.chan_switch_req.target_channel = | |
730 | ieee80211_frequency_to_channel(chandef->chan->center_freq); | |
731 | tf->u.chan_switch_req.oper_class = oper_class; | |
732 | ||
733 | if (extra_ies_len) { | |
734 | static const u8 before_lnkie[] = { | |
735 | WLAN_EID_SECONDARY_CHANNEL_OFFSET, | |
736 | }; | |
737 | noffset = ieee80211_ie_split(extra_ies, extra_ies_len, | |
738 | before_lnkie, | |
739 | ARRAY_SIZE(before_lnkie), | |
740 | offset); | |
b952f4df | 741 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
a7a6bdd0 AN |
742 | offset = noffset; |
743 | } | |
744 | ||
78a7ea37 | 745 | ieee80211_tdls_add_link_ie(link, skb, peer, initiator); |
a7a6bdd0 AN |
746 | |
747 | /* add any remaining IEs */ | |
748 | if (extra_ies_len) { | |
749 | noffset = extra_ies_len; | |
b952f4df | 750 | skb_put_data(skb, extra_ies + offset, noffset - offset); |
a7a6bdd0 AN |
751 | } |
752 | } | |
753 | ||
8a4d32f3 | 754 | static void |
78a7ea37 | 755 | ieee80211_tdls_add_chan_switch_resp_ies(struct ieee80211_link_data *link, |
8a4d32f3 AN |
756 | struct sk_buff *skb, const u8 *peer, |
757 | u16 status_code, bool initiator, | |
758 | const u8 *extra_ies, | |
759 | size_t extra_ies_len) | |
760 | { | |
761 | if (status_code == 0) | |
78a7ea37 | 762 | ieee80211_tdls_add_link_ie(link, skb, peer, initiator); |
8a4d32f3 AN |
763 | |
764 | if (extra_ies_len) | |
59ae1d12 | 765 | skb_put_data(skb, extra_ies, extra_ies_len); |
8a4d32f3 AN |
766 | } |
767 | ||
78a7ea37 | 768 | static void ieee80211_tdls_add_ies(struct ieee80211_link_data *link, |
46792a2d | 769 | struct sk_buff *skb, const u8 *peer, |
1606ef4a AN |
770 | u8 action_code, u16 status_code, |
771 | bool initiator, const u8 *extra_ies, | |
c2733905 AN |
772 | size_t extra_ies_len, u8 oper_class, |
773 | struct cfg80211_chan_def *chandef) | |
46792a2d | 774 | { |
46792a2d AN |
775 | switch (action_code) { |
776 | case WLAN_TDLS_SETUP_REQUEST: | |
777 | case WLAN_TDLS_SETUP_RESPONSE: | |
778 | case WLAN_PUB_ACTION_TDLS_DISCOVER_RES: | |
1606ef4a | 779 | if (status_code == 0) |
78a7ea37 MS |
780 | ieee80211_tdls_add_setup_start_ies(link, |
781 | skb, peer, | |
1606ef4a AN |
782 | action_code, |
783 | initiator, | |
784 | extra_ies, | |
785 | extra_ies_len); | |
46792a2d AN |
786 | break; |
787 | case WLAN_TDLS_SETUP_CONFIRM: | |
6f7eaa47 | 788 | if (status_code == 0) |
78a7ea37 | 789 | ieee80211_tdls_add_setup_cfm_ies(link, skb, peer, |
6f7eaa47 AN |
790 | initiator, extra_ies, |
791 | extra_ies_len); | |
792 | break; | |
46792a2d AN |
793 | case WLAN_TDLS_TEARDOWN: |
794 | case WLAN_TDLS_DISCOVERY_REQUEST: | |
f09a87d2 | 795 | if (extra_ies_len) |
59ae1d12 | 796 | skb_put_data(skb, extra_ies, extra_ies_len); |
1606ef4a | 797 | if (status_code == 0 || action_code == WLAN_TDLS_TEARDOWN) |
78a7ea37 MS |
798 | ieee80211_tdls_add_link_ie(link, skb, |
799 | peer, initiator); | |
46792a2d | 800 | break; |
a7a6bdd0 | 801 | case WLAN_TDLS_CHANNEL_SWITCH_REQUEST: |
78a7ea37 | 802 | ieee80211_tdls_add_chan_switch_req_ies(link, skb, peer, |
a7a6bdd0 AN |
803 | initiator, extra_ies, |
804 | extra_ies_len, | |
805 | oper_class, chandef); | |
806 | break; | |
8a4d32f3 | 807 | case WLAN_TDLS_CHANNEL_SWITCH_RESPONSE: |
78a7ea37 | 808 | ieee80211_tdls_add_chan_switch_resp_ies(link, skb, peer, |
8a4d32f3 AN |
809 | status_code, |
810 | initiator, extra_ies, | |
811 | extra_ies_len); | |
812 | break; | |
46792a2d AN |
813 | } |
814 | ||
46792a2d AN |
815 | } |
816 | ||
95224fe8 AN |
817 | static int |
818 | ieee80211_prep_tdls_encap_data(struct wiphy *wiphy, struct net_device *dev, | |
78a7ea37 | 819 | struct ieee80211_link_data *link, |
3b3a0162 | 820 | const u8 *peer, u8 action_code, u8 dialog_token, |
95224fe8 AN |
821 | u16 status_code, struct sk_buff *skb) |
822 | { | |
823 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
95224fe8 AN |
824 | struct ieee80211_tdls_data *tf; |
825 | ||
4df864c1 | 826 | tf = skb_put(skb, offsetof(struct ieee80211_tdls_data, u)); |
95224fe8 AN |
827 | |
828 | memcpy(tf->da, peer, ETH_ALEN); | |
829 | memcpy(tf->sa, sdata->vif.addr, ETH_ALEN); | |
830 | tf->ether_type = cpu_to_be16(ETH_P_TDLS); | |
831 | tf->payload_type = WLAN_TDLS_SNAP_RFTYPE; | |
832 | ||
59cd85cb AN |
833 | /* network header is after the ethernet header */ |
834 | skb_set_network_header(skb, ETH_HLEN); | |
835 | ||
95224fe8 AN |
836 | switch (action_code) { |
837 | case WLAN_TDLS_SETUP_REQUEST: | |
838 | tf->category = WLAN_CATEGORY_TDLS; | |
839 | tf->action_code = WLAN_TDLS_SETUP_REQUEST; | |
840 | ||
841 | skb_put(skb, sizeof(tf->u.setup_req)); | |
842 | tf->u.setup_req.dialog_token = dialog_token; | |
843 | tf->u.setup_req.capability = | |
78a7ea37 | 844 | cpu_to_le16(ieee80211_get_tdls_sta_capab(link, |
dd8c0b03 | 845 | status_code)); |
95224fe8 AN |
846 | break; |
847 | case WLAN_TDLS_SETUP_RESPONSE: | |
848 | tf->category = WLAN_CATEGORY_TDLS; | |
849 | tf->action_code = WLAN_TDLS_SETUP_RESPONSE; | |
850 | ||
851 | skb_put(skb, sizeof(tf->u.setup_resp)); | |
852 | tf->u.setup_resp.status_code = cpu_to_le16(status_code); | |
853 | tf->u.setup_resp.dialog_token = dialog_token; | |
854 | tf->u.setup_resp.capability = | |
78a7ea37 | 855 | cpu_to_le16(ieee80211_get_tdls_sta_capab(link, |
dd8c0b03 | 856 | status_code)); |
95224fe8 AN |
857 | break; |
858 | case WLAN_TDLS_SETUP_CONFIRM: | |
859 | tf->category = WLAN_CATEGORY_TDLS; | |
860 | tf->action_code = WLAN_TDLS_SETUP_CONFIRM; | |
861 | ||
862 | skb_put(skb, sizeof(tf->u.setup_cfm)); | |
863 | tf->u.setup_cfm.status_code = cpu_to_le16(status_code); | |
864 | tf->u.setup_cfm.dialog_token = dialog_token; | |
865 | break; | |
866 | case WLAN_TDLS_TEARDOWN: | |
867 | tf->category = WLAN_CATEGORY_TDLS; | |
868 | tf->action_code = WLAN_TDLS_TEARDOWN; | |
869 | ||
870 | skb_put(skb, sizeof(tf->u.teardown)); | |
871 | tf->u.teardown.reason_code = cpu_to_le16(status_code); | |
872 | break; | |
873 | case WLAN_TDLS_DISCOVERY_REQUEST: | |
874 | tf->category = WLAN_CATEGORY_TDLS; | |
875 | tf->action_code = WLAN_TDLS_DISCOVERY_REQUEST; | |
876 | ||
877 | skb_put(skb, sizeof(tf->u.discover_req)); | |
878 | tf->u.discover_req.dialog_token = dialog_token; | |
879 | break; | |
a7a6bdd0 AN |
880 | case WLAN_TDLS_CHANNEL_SWITCH_REQUEST: |
881 | tf->category = WLAN_CATEGORY_TDLS; | |
882 | tf->action_code = WLAN_TDLS_CHANNEL_SWITCH_REQUEST; | |
883 | ||
884 | skb_put(skb, sizeof(tf->u.chan_switch_req)); | |
885 | break; | |
8a4d32f3 AN |
886 | case WLAN_TDLS_CHANNEL_SWITCH_RESPONSE: |
887 | tf->category = WLAN_CATEGORY_TDLS; | |
888 | tf->action_code = WLAN_TDLS_CHANNEL_SWITCH_RESPONSE; | |
889 | ||
890 | skb_put(skb, sizeof(tf->u.chan_switch_resp)); | |
891 | tf->u.chan_switch_resp.status_code = cpu_to_le16(status_code); | |
892 | break; | |
95224fe8 AN |
893 | default: |
894 | return -EINVAL; | |
895 | } | |
896 | ||
897 | return 0; | |
898 | } | |
899 | ||
900 | static int | |
901 | ieee80211_prep_tdls_direct(struct wiphy *wiphy, struct net_device *dev, | |
78a7ea37 MS |
902 | const u8 *peer, struct ieee80211_link_data *link, |
903 | u8 action_code, u8 dialog_token, | |
95224fe8 AN |
904 | u16 status_code, struct sk_buff *skb) |
905 | { | |
906 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
95224fe8 AN |
907 | struct ieee80211_mgmt *mgmt; |
908 | ||
b080db58 | 909 | mgmt = skb_put_zero(skb, 24); |
95224fe8 AN |
910 | memcpy(mgmt->da, peer, ETH_ALEN); |
911 | memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); | |
78a7ea37 | 912 | memcpy(mgmt->bssid, link->u.mgd.bssid, ETH_ALEN); |
95224fe8 AN |
913 | mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | |
914 | IEEE80211_STYPE_ACTION); | |
915 | ||
916 | switch (action_code) { | |
917 | case WLAN_PUB_ACTION_TDLS_DISCOVER_RES: | |
918 | skb_put(skb, 1 + sizeof(mgmt->u.action.u.tdls_discover_resp)); | |
919 | mgmt->u.action.category = WLAN_CATEGORY_PUBLIC; | |
920 | mgmt->u.action.u.tdls_discover_resp.action_code = | |
921 | WLAN_PUB_ACTION_TDLS_DISCOVER_RES; | |
922 | mgmt->u.action.u.tdls_discover_resp.dialog_token = | |
923 | dialog_token; | |
924 | mgmt->u.action.u.tdls_discover_resp.capability = | |
78a7ea37 | 925 | cpu_to_le16(ieee80211_get_tdls_sta_capab(link, |
dd8c0b03 | 926 | status_code)); |
95224fe8 AN |
927 | break; |
928 | default: | |
929 | return -EINVAL; | |
930 | } | |
931 | ||
932 | return 0; | |
933 | } | |
934 | ||
c2733905 AN |
935 | static struct sk_buff * |
936 | ieee80211_tdls_build_mgmt_packet_data(struct ieee80211_sub_if_data *sdata, | |
78a7ea37 MS |
937 | const u8 *peer, int link_id, |
938 | u8 action_code, u8 dialog_token, | |
939 | u16 status_code, bool initiator, | |
940 | const u8 *extra_ies, size_t extra_ies_len, | |
941 | u8 oper_class, | |
c2733905 | 942 | struct cfg80211_chan_def *chandef) |
95224fe8 | 943 | { |
95224fe8 | 944 | struct ieee80211_local *local = sdata->local; |
c2733905 | 945 | struct sk_buff *skb; |
95224fe8 | 946 | int ret; |
78a7ea37 MS |
947 | struct ieee80211_link_data *link; |
948 | ||
949 | link_id = link_id >= 0 ? link_id : 0; | |
950 | rcu_read_lock(); | |
951 | link = rcu_dereference(sdata->link[link_id]); | |
952 | if (WARN_ON(!link)) | |
953 | goto unlock; | |
95224fe8 | 954 | |
c2733905 | 955 | skb = netdev_alloc_skb(sdata->dev, |
1277b4a9 LK |
956 | local->hw.extra_tx_headroom + |
957 | max(sizeof(struct ieee80211_mgmt), | |
958 | sizeof(struct ieee80211_tdls_data)) + | |
959 | 50 + /* supported rates */ | |
b98fb44f | 960 | 10 + /* ext capab */ |
1277b4a9 LK |
961 | 26 + /* max(WMM-info, WMM-param) */ |
962 | 2 + max(sizeof(struct ieee80211_ht_cap), | |
963 | sizeof(struct ieee80211_ht_operation)) + | |
fb28ec0c AN |
964 | 2 + max(sizeof(struct ieee80211_vht_cap), |
965 | sizeof(struct ieee80211_vht_operation)) + | |
71b3b7ac AN |
966 | 2 + 1 + sizeof(struct ieee80211_he_cap_elem) + |
967 | sizeof(struct ieee80211_he_mcs_nss_supp) + | |
968 | IEEE80211_HE_PPE_THRES_MAX_LEN + | |
969 | 2 + 1 + sizeof(struct ieee80211_he_6ghz_capa) + | |
970 | 2 + 1 + sizeof(struct ieee80211_eht_cap_elem) + | |
971 | sizeof(struct ieee80211_eht_mcs_nss_supp) + | |
972 | IEEE80211_EHT_PPE_THRES_MAX_LEN + | |
f0d29cb9 | 973 | 50 + /* supported channels */ |
2cedd879 | 974 | 3 + /* 40/20 BSS coex */ |
fb28ec0c | 975 | 4 + /* AID */ |
a38700dd | 976 | 4 + /* oper classes */ |
1277b4a9 LK |
977 | extra_ies_len + |
978 | sizeof(struct ieee80211_tdls_lnkie)); | |
95224fe8 | 979 | if (!skb) |
78a7ea37 | 980 | goto unlock; |
95224fe8 AN |
981 | |
982 | skb_reserve(skb, local->hw.extra_tx_headroom); | |
983 | ||
984 | switch (action_code) { | |
985 | case WLAN_TDLS_SETUP_REQUEST: | |
986 | case WLAN_TDLS_SETUP_RESPONSE: | |
987 | case WLAN_TDLS_SETUP_CONFIRM: | |
988 | case WLAN_TDLS_TEARDOWN: | |
989 | case WLAN_TDLS_DISCOVERY_REQUEST: | |
a7a6bdd0 | 990 | case WLAN_TDLS_CHANNEL_SWITCH_REQUEST: |
8a4d32f3 | 991 | case WLAN_TDLS_CHANNEL_SWITCH_RESPONSE: |
c2733905 | 992 | ret = ieee80211_prep_tdls_encap_data(local->hw.wiphy, |
78a7ea37 | 993 | sdata->dev, link, peer, |
95224fe8 AN |
994 | action_code, dialog_token, |
995 | status_code, skb); | |
95224fe8 AN |
996 | break; |
997 | case WLAN_PUB_ACTION_TDLS_DISCOVER_RES: | |
c2733905 | 998 | ret = ieee80211_prep_tdls_direct(local->hw.wiphy, sdata->dev, |
78a7ea37 | 999 | peer, link, action_code, |
95224fe8 AN |
1000 | dialog_token, status_code, |
1001 | skb); | |
95224fe8 AN |
1002 | break; |
1003 | default: | |
1004 | ret = -ENOTSUPP; | |
1005 | break; | |
1006 | } | |
1007 | ||
1008 | if (ret < 0) | |
1009 | goto fail; | |
1010 | ||
78a7ea37 | 1011 | ieee80211_tdls_add_ies(link, skb, peer, action_code, status_code, |
c2733905 AN |
1012 | initiator, extra_ies, extra_ies_len, oper_class, |
1013 | chandef); | |
78a7ea37 | 1014 | rcu_read_unlock(); |
c2733905 AN |
1015 | return skb; |
1016 | ||
1017 | fail: | |
1018 | dev_kfree_skb(skb); | |
78a7ea37 MS |
1019 | unlock: |
1020 | rcu_read_unlock(); | |
c2733905 AN |
1021 | return NULL; |
1022 | } | |
1023 | ||
1024 | static int | |
1025 | ieee80211_tdls_prep_mgmt_packet(struct wiphy *wiphy, struct net_device *dev, | |
78a7ea37 MS |
1026 | const u8 *peer, int link_id, |
1027 | u8 action_code, u8 dialog_token, | |
c2733905 AN |
1028 | u16 status_code, u32 peer_capability, |
1029 | bool initiator, const u8 *extra_ies, | |
1030 | size_t extra_ies_len, u8 oper_class, | |
1031 | struct cfg80211_chan_def *chandef) | |
1032 | { | |
1033 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1034 | struct sk_buff *skb = NULL; | |
1035 | struct sta_info *sta; | |
1036 | u32 flags = 0; | |
1037 | int ret = 0; | |
1038 | ||
626911cc AN |
1039 | rcu_read_lock(); |
1040 | sta = sta_info_get(sdata, peer); | |
1041 | ||
1042 | /* infer the initiator if we can, to support old userspace */ | |
95224fe8 AN |
1043 | switch (action_code) { |
1044 | case WLAN_TDLS_SETUP_REQUEST: | |
8b94148c | 1045 | if (sta) { |
626911cc | 1046 | set_sta_flag(sta, WLAN_STA_TDLS_INITIATOR); |
8b94148c AN |
1047 | sta->sta.tdls_initiator = false; |
1048 | } | |
fc0561dc | 1049 | fallthrough; |
95224fe8 | 1050 | case WLAN_TDLS_SETUP_CONFIRM: |
95224fe8 | 1051 | case WLAN_TDLS_DISCOVERY_REQUEST: |
626911cc | 1052 | initiator = true; |
95224fe8 AN |
1053 | break; |
1054 | case WLAN_TDLS_SETUP_RESPONSE: | |
626911cc AN |
1055 | /* |
1056 | * In some testing scenarios, we send a request and response. | |
1057 | * Make the last packet sent take effect for the initiator | |
1058 | * value. | |
1059 | */ | |
8b94148c | 1060 | if (sta) { |
626911cc | 1061 | clear_sta_flag(sta, WLAN_STA_TDLS_INITIATOR); |
8b94148c AN |
1062 | sta->sta.tdls_initiator = true; |
1063 | } | |
fc0561dc | 1064 | fallthrough; |
95224fe8 | 1065 | case WLAN_PUB_ACTION_TDLS_DISCOVER_RES: |
626911cc | 1066 | initiator = false; |
2fb6b9b8 AN |
1067 | break; |
1068 | case WLAN_TDLS_TEARDOWN: | |
a7a6bdd0 | 1069 | case WLAN_TDLS_CHANNEL_SWITCH_REQUEST: |
8a4d32f3 | 1070 | case WLAN_TDLS_CHANNEL_SWITCH_RESPONSE: |
2fb6b9b8 | 1071 | /* any value is ok */ |
95224fe8 AN |
1072 | break; |
1073 | default: | |
1074 | ret = -ENOTSUPP; | |
626911cc | 1075 | break; |
95224fe8 AN |
1076 | } |
1077 | ||
46792a2d AN |
1078 | if (sta && test_sta_flag(sta, WLAN_STA_TDLS_INITIATOR)) |
1079 | initiator = true; | |
2fb6b9b8 | 1080 | |
626911cc AN |
1081 | rcu_read_unlock(); |
1082 | if (ret < 0) | |
1083 | goto fail; | |
1084 | ||
78a7ea37 MS |
1085 | skb = ieee80211_tdls_build_mgmt_packet_data(sdata, peer, |
1086 | link_id, action_code, | |
c2733905 AN |
1087 | dialog_token, status_code, |
1088 | initiator, extra_ies, | |
1089 | extra_ies_len, oper_class, | |
1090 | chandef); | |
1091 | if (!skb) { | |
1092 | ret = -EINVAL; | |
1093 | goto fail; | |
1094 | } | |
1095 | ||
1096 | if (action_code == WLAN_PUB_ACTION_TDLS_DISCOVER_RES) { | |
78a7ea37 | 1097 | ieee80211_tx_skb_tid(sdata, skb, 7, link_id); |
95224fe8 AN |
1098 | return 0; |
1099 | } | |
1100 | ||
1101 | /* | |
1102 | * According to 802.11z: Setup req/resp are sent in AC_BK, otherwise | |
1103 | * we should default to AC_VI. | |
1104 | */ | |
1105 | switch (action_code) { | |
1106 | case WLAN_TDLS_SETUP_REQUEST: | |
1107 | case WLAN_TDLS_SETUP_RESPONSE: | |
cb59bc14 | 1108 | skb->priority = 256 + 2; |
95224fe8 AN |
1109 | break; |
1110 | default: | |
cb59bc14 | 1111 | skb->priority = 256 + 5; |
95224fe8 AN |
1112 | break; |
1113 | } | |
1114 | ||
1277b4a9 LK |
1115 | /* |
1116 | * Set the WLAN_TDLS_TEARDOWN flag to indicate a teardown in progress. | |
1117 | * Later, if no ACK is returned from peer, we will re-send the teardown | |
1118 | * packet through the AP. | |
1119 | */ | |
1120 | if ((action_code == WLAN_TDLS_TEARDOWN) && | |
30686bf7 | 1121 | ieee80211_hw_check(&sdata->local->hw, REPORTS_TX_ACK_STATUS)) { |
1277b4a9 LK |
1122 | bool try_resend; /* Should we keep skb for possible resend */ |
1123 | ||
1124 | /* If not sending directly to peer - no point in keeping skb */ | |
1125 | rcu_read_lock(); | |
1126 | sta = sta_info_get(sdata, peer); | |
1127 | try_resend = sta && test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH); | |
1128 | rcu_read_unlock(); | |
1129 | ||
1130 | spin_lock_bh(&sdata->u.mgd.teardown_lock); | |
1131 | if (try_resend && !sdata->u.mgd.teardown_skb) { | |
1132 | /* Mark it as requiring TX status callback */ | |
1133 | flags |= IEEE80211_TX_CTL_REQ_TX_STATUS | | |
1134 | IEEE80211_TX_INTFL_MLME_CONN_TX; | |
1135 | ||
1136 | /* | |
1137 | * skb is copied since mac80211 will later set | |
1138 | * properties that might not be the same as the AP, | |
1139 | * such as encryption, QoS, addresses, etc. | |
1140 | * | |
1141 | * No problem if skb_copy() fails, so no need to check. | |
1142 | */ | |
1143 | sdata->u.mgd.teardown_skb = skb_copy(skb, GFP_ATOMIC); | |
1144 | sdata->u.mgd.orig_teardown_skb = skb; | |
1145 | } | |
1146 | spin_unlock_bh(&sdata->u.mgd.teardown_lock); | |
1147 | } | |
1148 | ||
95224fe8 AN |
1149 | /* disable bottom halves when entering the Tx path */ |
1150 | local_bh_disable(); | |
963d0e8d JB |
1151 | __ieee80211_subif_start_xmit(skb, dev, flags, |
1152 | IEEE80211_TX_CTRL_MLO_LINK_UNSPEC, NULL); | |
95224fe8 AN |
1153 | local_bh_enable(); |
1154 | ||
1155 | return ret; | |
1156 | ||
1157 | fail: | |
1158 | dev_kfree_skb(skb); | |
1159 | return ret; | |
1160 | } | |
1161 | ||
191dd469 AN |
1162 | static int |
1163 | ieee80211_tdls_mgmt_setup(struct wiphy *wiphy, struct net_device *dev, | |
78a7ea37 MS |
1164 | const u8 *peer, int link_id, |
1165 | u8 action_code, u8 dialog_token, | |
191dd469 AN |
1166 | u16 status_code, u32 peer_capability, bool initiator, |
1167 | const u8 *extra_ies, size_t extra_ies_len) | |
17e6a59a AN |
1168 | { |
1169 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1170 | struct ieee80211_local *local = sdata->local; | |
bfd8403a JB |
1171 | enum ieee80211_smps_mode smps_mode = |
1172 | sdata->deflink.u.mgd.driver_smps_mode; | |
17e6a59a AN |
1173 | int ret; |
1174 | ||
d51c2ea3 AN |
1175 | /* don't support setup with forced SMPS mode that's not off */ |
1176 | if (smps_mode != IEEE80211_SMPS_AUTOMATIC && | |
1177 | smps_mode != IEEE80211_SMPS_OFF) { | |
1178 | tdls_dbg(sdata, "Aborting TDLS setup due to SMPS mode %d\n", | |
1179 | smps_mode); | |
1180 | return -ENOTSUPP; | |
1181 | } | |
1182 | ||
0cd8080e | 1183 | lockdep_assert_wiphy(local->hw.wiphy); |
17e6a59a AN |
1184 | |
1185 | /* we don't support concurrent TDLS peer setups */ | |
81dd2b88 AN |
1186 | if (!is_zero_ether_addr(sdata->u.mgd.tdls_peer) && |
1187 | !ether_addr_equal(sdata->u.mgd.tdls_peer, peer)) { | |
17e6a59a | 1188 | ret = -EBUSY; |
ae2e9fba | 1189 | goto out_unlock; |
17e6a59a AN |
1190 | } |
1191 | ||
7adc3e46 AN |
1192 | /* |
1193 | * make sure we have a STA representing the peer so we drop or buffer | |
1194 | * non-TDLS-setup frames to the peer. We can't send other packets | |
6ae32e5d AN |
1195 | * during setup through the AP path. |
1196 | * Allow error packets to be sent - sometimes we don't even add a STA | |
1197 | * before failing the setup. | |
7adc3e46 | 1198 | */ |
6ae32e5d AN |
1199 | if (status_code == 0) { |
1200 | rcu_read_lock(); | |
1201 | if (!sta_info_get(sdata, peer)) { | |
1202 | rcu_read_unlock(); | |
1203 | ret = -ENOLINK; | |
ae2e9fba | 1204 | goto out_unlock; |
6ae32e5d | 1205 | } |
7adc3e46 | 1206 | rcu_read_unlock(); |
7adc3e46 | 1207 | } |
7adc3e46 | 1208 | |
3b24f4c6 | 1209 | ieee80211_flush_queues(local, sdata, false); |
ae2e9fba | 1210 | memcpy(sdata->u.mgd.tdls_peer, peer, ETH_ALEN); |
db67d661 | 1211 | |
ae2e9fba | 1212 | /* we cannot take the mutex while preparing the setup packet */ |
78a7ea37 MS |
1213 | ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer, |
1214 | link_id, action_code, | |
17e6a59a | 1215 | dialog_token, status_code, |
2fb6b9b8 | 1216 | peer_capability, initiator, |
c2733905 AN |
1217 | extra_ies, extra_ies_len, 0, |
1218 | NULL); | |
ae2e9fba | 1219 | if (ret < 0) { |
ae2e9fba | 1220 | eth_zero_addr(sdata->u.mgd.tdls_peer); |
ae2e9fba AN |
1221 | return ret; |
1222 | } | |
17e6a59a | 1223 | |
777b2600 JB |
1224 | wiphy_delayed_work_queue(sdata->local->hw.wiphy, |
1225 | &sdata->u.mgd.tdls_peer_del_work, | |
1226 | TDLS_PEER_SETUP_TIMEOUT); | |
ae2e9fba | 1227 | return 0; |
17e6a59a | 1228 | |
ae2e9fba | 1229 | out_unlock: |
191dd469 AN |
1230 | return ret; |
1231 | } | |
1232 | ||
db67d661 AN |
1233 | static int |
1234 | ieee80211_tdls_mgmt_teardown(struct wiphy *wiphy, struct net_device *dev, | |
78a7ea37 MS |
1235 | const u8 *peer, int link_id, |
1236 | u8 action_code, u8 dialog_token, | |
db67d661 AN |
1237 | u16 status_code, u32 peer_capability, |
1238 | bool initiator, const u8 *extra_ies, | |
1239 | size_t extra_ies_len) | |
1240 | { | |
1241 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1242 | struct ieee80211_local *local = sdata->local; | |
1243 | struct sta_info *sta; | |
1244 | int ret; | |
1245 | ||
1246 | /* | |
1247 | * No packets can be transmitted to the peer via the AP during setup - | |
1248 | * the STA is set as a TDLS peer, but is not authorized. | |
1249 | * During teardown, we prevent direct transmissions by stopping the | |
1250 | * queues and flushing all direct packets. | |
1251 | */ | |
1252 | ieee80211_stop_vif_queues(local, sdata, | |
1253 | IEEE80211_QUEUE_STOP_REASON_TDLS_TEARDOWN); | |
3b24f4c6 | 1254 | ieee80211_flush_queues(local, sdata, false); |
db67d661 | 1255 | |
78a7ea37 MS |
1256 | ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer, |
1257 | link_id, action_code, | |
db67d661 AN |
1258 | dialog_token, status_code, |
1259 | peer_capability, initiator, | |
c2733905 AN |
1260 | extra_ies, extra_ies_len, 0, |
1261 | NULL); | |
db67d661 AN |
1262 | if (ret < 0) |
1263 | sdata_err(sdata, "Failed sending TDLS teardown packet %d\n", | |
1264 | ret); | |
1265 | ||
1266 | /* | |
1267 | * Remove the STA AUTH flag to force further traffic through the AP. If | |
1268 | * the STA was unreachable, it was already removed. | |
1269 | */ | |
1270 | rcu_read_lock(); | |
1271 | sta = sta_info_get(sdata, peer); | |
1272 | if (sta) | |
1273 | clear_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH); | |
1274 | rcu_read_unlock(); | |
1275 | ||
1276 | ieee80211_wake_vif_queues(local, sdata, | |
1277 | IEEE80211_QUEUE_STOP_REASON_TDLS_TEARDOWN); | |
1278 | ||
1279 | return 0; | |
1280 | } | |
1281 | ||
191dd469 | 1282 | int ieee80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev, |
c6112046 MS |
1283 | const u8 *peer, int link_id, |
1284 | u8 action_code, u8 dialog_token, u16 status_code, | |
1285 | u32 peer_capability, bool initiator, | |
1286 | const u8 *extra_ies, size_t extra_ies_len) | |
191dd469 AN |
1287 | { |
1288 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1289 | int ret; | |
1290 | ||
1291 | if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS)) | |
1292 | return -ENOTSUPP; | |
1293 | ||
1294 | /* make sure we are in managed mode, and associated */ | |
1295 | if (sdata->vif.type != NL80211_IFTYPE_STATION || | |
1296 | !sdata->u.mgd.associated) | |
1297 | return -EINVAL; | |
1298 | ||
1299 | switch (action_code) { | |
1300 | case WLAN_TDLS_SETUP_REQUEST: | |
1301 | case WLAN_TDLS_SETUP_RESPONSE: | |
78a7ea37 MS |
1302 | ret = ieee80211_tdls_mgmt_setup(wiphy, dev, peer, |
1303 | link_id, action_code, | |
191dd469 AN |
1304 | dialog_token, status_code, |
1305 | peer_capability, initiator, | |
1306 | extra_ies, extra_ies_len); | |
1307 | break; | |
1308 | case WLAN_TDLS_TEARDOWN: | |
78a7ea37 | 1309 | ret = ieee80211_tdls_mgmt_teardown(wiphy, dev, peer, link_id, |
db67d661 AN |
1310 | action_code, dialog_token, |
1311 | status_code, | |
1312 | peer_capability, initiator, | |
1313 | extra_ies, extra_ies_len); | |
1314 | break; | |
191dd469 | 1315 | case WLAN_TDLS_DISCOVERY_REQUEST: |
ee10f2c7 AN |
1316 | /* |
1317 | * Protect the discovery so we can hear the TDLS discovery | |
1318 | * response frame. It is transmitted directly and not buffered | |
1319 | * by the AP. | |
1320 | */ | |
1321 | drv_mgd_protect_tdls_discover(sdata->local, sdata); | |
fc0561dc | 1322 | fallthrough; |
ee10f2c7 | 1323 | case WLAN_TDLS_SETUP_CONFIRM: |
191dd469 AN |
1324 | case WLAN_PUB_ACTION_TDLS_DISCOVER_RES: |
1325 | /* no special handling */ | |
1326 | ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer, | |
78a7ea37 | 1327 | link_id, action_code, |
191dd469 AN |
1328 | dialog_token, |
1329 | status_code, | |
1330 | peer_capability, | |
1331 | initiator, extra_ies, | |
c2733905 | 1332 | extra_ies_len, 0, NULL); |
191dd469 AN |
1333 | break; |
1334 | default: | |
1335 | ret = -EOPNOTSUPP; | |
1336 | break; | |
1337 | } | |
17e6a59a | 1338 | |
78a7ea37 MS |
1339 | tdls_dbg(sdata, "TDLS mgmt action %d peer %pM link_id %d status %d\n", |
1340 | action_code, peer, link_id, ret); | |
17e6a59a AN |
1341 | return ret; |
1342 | } | |
1343 | ||
59021c67 AN |
1344 | static void iee80211_tdls_recalc_chanctx(struct ieee80211_sub_if_data *sdata, |
1345 | struct sta_info *sta) | |
0fabfaaf AN |
1346 | { |
1347 | struct ieee80211_local *local = sdata->local; | |
1348 | struct ieee80211_chanctx_conf *conf; | |
1349 | struct ieee80211_chanctx *ctx; | |
59021c67 AN |
1350 | enum nl80211_chan_width width; |
1351 | struct ieee80211_supported_band *sband; | |
0fabfaaf | 1352 | |
5435af6e JB |
1353 | lockdep_assert_wiphy(local->hw.wiphy); |
1354 | ||
d0a9123e | 1355 | conf = rcu_dereference_protected(sdata->vif.bss_conf.chanctx_conf, |
5435af6e | 1356 | lockdep_is_held(&local->hw.wiphy->mtx)); |
0fabfaaf | 1357 | if (conf) { |
59021c67 AN |
1358 | width = conf->def.width; |
1359 | sband = local->hw.wiphy->bands[conf->def.chan->band]; | |
0fabfaaf AN |
1360 | ctx = container_of(conf, struct ieee80211_chanctx, conf); |
1361 | ieee80211_recalc_chanctx_chantype(local, ctx); | |
59021c67 AN |
1362 | |
1363 | /* if width changed and a peer is given, update its BW */ | |
1364 | if (width != conf->def.width && sta && | |
1365 | test_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW)) { | |
1366 | enum ieee80211_sta_rx_bandwidth bw; | |
1367 | ||
1368 | bw = ieee80211_chan_width_to_rx_bw(conf->def.width); | |
c71420db | 1369 | bw = min(bw, ieee80211_sta_cap_rx_bw(&sta->deflink)); |
046d2e7c S |
1370 | if (bw != sta->sta.deflink.bandwidth) { |
1371 | sta->sta.deflink.bandwidth = bw; | |
b4f85443 | 1372 | rate_control_rate_update(local, sband, sta, 0, |
59021c67 AN |
1373 | IEEE80211_RC_BW_CHANGED); |
1374 | /* | |
1375 | * if a TDLS peer BW was updated, we need to | |
1376 | * recalc the chandef width again, to get the | |
1377 | * correct chanctx min_def | |
1378 | */ | |
1379 | ieee80211_recalc_chanctx_chantype(local, ctx); | |
1380 | } | |
1381 | } | |
1382 | ||
0fabfaaf | 1383 | } |
0fabfaaf AN |
1384 | } |
1385 | ||
22f66895 AA |
1386 | static int iee80211_tdls_have_ht_peers(struct ieee80211_sub_if_data *sdata) |
1387 | { | |
1388 | struct sta_info *sta; | |
1389 | bool result = false; | |
1390 | ||
1391 | rcu_read_lock(); | |
1392 | list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) { | |
1393 | if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded || | |
1394 | !test_sta_flag(sta, WLAN_STA_AUTHORIZED) || | |
1395 | !test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH) || | |
046d2e7c | 1396 | !sta->sta.deflink.ht_cap.ht_supported) |
22f66895 AA |
1397 | continue; |
1398 | result = true; | |
1399 | break; | |
1400 | } | |
1401 | rcu_read_unlock(); | |
1402 | ||
1403 | return result; | |
1404 | } | |
1405 | ||
1406 | static void | |
1407 | iee80211_tdls_recalc_ht_protection(struct ieee80211_sub_if_data *sdata, | |
1408 | struct sta_info *sta) | |
1409 | { | |
22f66895 AA |
1410 | bool tdls_ht; |
1411 | u16 protection = IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED | | |
1412 | IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT | | |
1413 | IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT; | |
1414 | u16 opmode; | |
1415 | ||
1416 | /* Nothing to do if the BSS connection uses HT */ | |
ba323e29 | 1417 | if (!(sdata->deflink.u.mgd.conn_flags & IEEE80211_CONN_DISABLE_HT)) |
22f66895 AA |
1418 | return; |
1419 | ||
046d2e7c | 1420 | tdls_ht = (sta && sta->sta.deflink.ht_cap.ht_supported) || |
22f66895 AA |
1421 | iee80211_tdls_have_ht_peers(sdata); |
1422 | ||
1423 | opmode = sdata->vif.bss_conf.ht_operation_mode; | |
1424 | ||
1425 | if (tdls_ht) | |
1426 | opmode |= protection; | |
1427 | else | |
1428 | opmode &= ~protection; | |
1429 | ||
1430 | if (opmode == sdata->vif.bss_conf.ht_operation_mode) | |
1431 | return; | |
1432 | ||
1433 | sdata->vif.bss_conf.ht_operation_mode = opmode; | |
d8675a63 JB |
1434 | ieee80211_link_info_change_notify(sdata, &sdata->deflink, |
1435 | BSS_CHANGED_HT); | |
22f66895 AA |
1436 | } |
1437 | ||
95224fe8 | 1438 | int ieee80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev, |
3b3a0162 | 1439 | const u8 *peer, enum nl80211_tdls_operation oper) |
95224fe8 AN |
1440 | { |
1441 | struct sta_info *sta; | |
1442 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
17e6a59a AN |
1443 | struct ieee80211_local *local = sdata->local; |
1444 | int ret; | |
95224fe8 | 1445 | |
5435af6e JB |
1446 | lockdep_assert_wiphy(local->hw.wiphy); |
1447 | ||
95224fe8 AN |
1448 | if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS)) |
1449 | return -ENOTSUPP; | |
1450 | ||
1451 | if (sdata->vif.type != NL80211_IFTYPE_STATION) | |
1452 | return -EINVAL; | |
1453 | ||
17e6a59a AN |
1454 | switch (oper) { |
1455 | case NL80211_TDLS_ENABLE_LINK: | |
1456 | case NL80211_TDLS_DISABLE_LINK: | |
1457 | break; | |
1458 | case NL80211_TDLS_TEARDOWN: | |
1459 | case NL80211_TDLS_SETUP: | |
1460 | case NL80211_TDLS_DISCOVERY_REQ: | |
1461 | /* We don't support in-driver setup/teardown/discovery */ | |
1462 | return -ENOTSUPP; | |
1463 | } | |
1464 | ||
22f66895 AA |
1465 | /* protect possible bss_conf changes and avoid concurrency in |
1466 | * ieee80211_bss_info_change_notify() | |
1467 | */ | |
95224fe8 AN |
1468 | tdls_dbg(sdata, "TDLS oper %d peer %pM\n", oper, peer); |
1469 | ||
1470 | switch (oper) { | |
1471 | case NL80211_TDLS_ENABLE_LINK: | |
d0a9123e | 1472 | if (sdata->vif.bss_conf.csa_active) { |
c5a71688 | 1473 | tdls_dbg(sdata, "TDLS: disallow link during CSA\n"); |
076fc877 | 1474 | return -EBUSY; |
c5a71688 AN |
1475 | } |
1476 | ||
95224fe8 | 1477 | sta = sta_info_get(sdata, peer); |
076fc877 JB |
1478 | if (!sta) |
1479 | return -ENOLINK; | |
95224fe8 | 1480 | |
59021c67 | 1481 | iee80211_tdls_recalc_chanctx(sdata, sta); |
22f66895 AA |
1482 | iee80211_tdls_recalc_ht_protection(sdata, sta); |
1483 | ||
95224fe8 | 1484 | set_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH); |
17e6a59a | 1485 | |
81dd2b88 AN |
1486 | WARN_ON_ONCE(is_zero_ether_addr(sdata->u.mgd.tdls_peer) || |
1487 | !ether_addr_equal(sdata->u.mgd.tdls_peer, peer)); | |
95224fe8 AN |
1488 | break; |
1489 | case NL80211_TDLS_DISABLE_LINK: | |
bb3f8486 LK |
1490 | /* |
1491 | * The teardown message in ieee80211_tdls_mgmt_teardown() was | |
1492 | * created while the queues were stopped, so it might still be | |
1493 | * pending. Before flushing the queues we need to be sure the | |
1494 | * message is handled by the tasklet handling pending messages, | |
1495 | * otherwise we might start destroying the station before | |
1496 | * sending the teardown packet. | |
1497 | * Note that this only forces the tasklet to flush pendings - | |
1498 | * not to stop the tasklet from rescheduling itself. | |
1499 | */ | |
1500 | tasklet_kill(&local->tx_pending_tasklet); | |
db67d661 | 1501 | /* flush a potentially queued teardown packet */ |
3b24f4c6 | 1502 | ieee80211_flush_queues(local, sdata, false); |
db67d661 | 1503 | |
17e6a59a | 1504 | ret = sta_info_destroy_addr(sdata, peer); |
22f66895 | 1505 | |
22f66895 | 1506 | iee80211_tdls_recalc_ht_protection(sdata, NULL); |
22f66895 | 1507 | |
59021c67 | 1508 | iee80211_tdls_recalc_chanctx(sdata, NULL); |
076fc877 JB |
1509 | if (ret) |
1510 | return ret; | |
17e6a59a | 1511 | break; |
95224fe8 | 1512 | default: |
076fc877 | 1513 | return -ENOTSUPP; |
95224fe8 AN |
1514 | } |
1515 | ||
076fc877 | 1516 | if (ether_addr_equal(sdata->u.mgd.tdls_peer, peer)) { |
777b2600 JB |
1517 | wiphy_delayed_work_cancel(sdata->local->hw.wiphy, |
1518 | &sdata->u.mgd.tdls_peer_del_work); | |
81dd2b88 | 1519 | eth_zero_addr(sdata->u.mgd.tdls_peer); |
17e6a59a AN |
1520 | } |
1521 | ||
076fc877 JB |
1522 | wiphy_work_queue(sdata->local->hw.wiphy, |
1523 | &sdata->deflink.u.mgd.request_smps_work); | |
d51c2ea3 | 1524 | |
076fc877 | 1525 | return 0; |
95224fe8 | 1526 | } |
c887f0d3 AN |
1527 | |
1528 | void ieee80211_tdls_oper_request(struct ieee80211_vif *vif, const u8 *peer, | |
1529 | enum nl80211_tdls_operation oper, | |
1530 | u16 reason_code, gfp_t gfp) | |
1531 | { | |
1532 | struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); | |
1533 | ||
f276e20b | 1534 | if (vif->type != NL80211_IFTYPE_STATION || !vif->cfg.assoc) { |
c887f0d3 AN |
1535 | sdata_err(sdata, "Discarding TDLS oper %d - not STA or disconnected\n", |
1536 | oper); | |
1537 | return; | |
1538 | } | |
1539 | ||
1540 | cfg80211_tdls_oper_request(sdata->dev, peer, oper, reason_code, gfp); | |
1541 | } | |
1542 | EXPORT_SYMBOL(ieee80211_tdls_oper_request); | |
a7a6bdd0 AN |
1543 | |
1544 | static void | |
1545 | iee80211_tdls_add_ch_switch_timing(u8 *buf, u16 switch_time, u16 switch_timeout) | |
1546 | { | |
1547 | struct ieee80211_ch_switch_timing *ch_sw; | |
1548 | ||
1549 | *buf++ = WLAN_EID_CHAN_SWITCH_TIMING; | |
1550 | *buf++ = sizeof(struct ieee80211_ch_switch_timing); | |
1551 | ||
1552 | ch_sw = (void *)buf; | |
1553 | ch_sw->switch_time = cpu_to_le16(switch_time); | |
1554 | ch_sw->switch_timeout = cpu_to_le16(switch_timeout); | |
1555 | } | |
1556 | ||
1557 | /* find switch timing IE in SKB ready for Tx */ | |
1558 | static const u8 *ieee80211_tdls_find_sw_timing_ie(struct sk_buff *skb) | |
1559 | { | |
1560 | struct ieee80211_tdls_data *tf; | |
1561 | const u8 *ie_start; | |
1562 | ||
1563 | /* | |
1564 | * Get the offset for the new location of the switch timing IE. | |
1565 | * The SKB network header will now point to the "payload_type" | |
1566 | * element of the TDLS data frame struct. | |
1567 | */ | |
1568 | tf = container_of(skb->data + skb_network_offset(skb), | |
1569 | struct ieee80211_tdls_data, payload_type); | |
1570 | ie_start = tf->u.chan_switch_req.variable; | |
1571 | return cfg80211_find_ie(WLAN_EID_CHAN_SWITCH_TIMING, ie_start, | |
1572 | skb->len - (ie_start - skb->data)); | |
1573 | } | |
1574 | ||
1575 | static struct sk_buff * | |
1576 | ieee80211_tdls_ch_sw_tmpl_get(struct sta_info *sta, u8 oper_class, | |
1577 | struct cfg80211_chan_def *chandef, | |
1578 | u32 *ch_sw_tm_ie_offset) | |
1579 | { | |
1580 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
1581 | u8 extra_ies[2 + sizeof(struct ieee80211_sec_chan_offs_ie) + | |
1582 | 2 + sizeof(struct ieee80211_ch_switch_timing)]; | |
1583 | int extra_ies_len = 2 + sizeof(struct ieee80211_ch_switch_timing); | |
1584 | u8 *pos = extra_ies; | |
1585 | struct sk_buff *skb; | |
78a7ea37 | 1586 | int link_id = sta->sta.valid_links ? ffs(sta->sta.valid_links) - 1 : 0; |
a7a6bdd0 AN |
1587 | |
1588 | /* | |
1589 | * if chandef points to a wide channel add a Secondary-Channel | |
1590 | * Offset information element | |
1591 | */ | |
1592 | if (chandef->width == NL80211_CHAN_WIDTH_40) { | |
1593 | struct ieee80211_sec_chan_offs_ie *sec_chan_ie; | |
1594 | bool ht40plus; | |
1595 | ||
1596 | *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; | |
1597 | *pos++ = sizeof(*sec_chan_ie); | |
1598 | sec_chan_ie = (void *)pos; | |
1599 | ||
1600 | ht40plus = cfg80211_get_chandef_type(chandef) == | |
1601 | NL80211_CHAN_HT40PLUS; | |
1602 | sec_chan_ie->sec_chan_offs = ht40plus ? | |
1603 | IEEE80211_HT_PARAM_CHA_SEC_ABOVE : | |
1604 | IEEE80211_HT_PARAM_CHA_SEC_BELOW; | |
1605 | pos += sizeof(*sec_chan_ie); | |
1606 | ||
1607 | extra_ies_len += 2 + sizeof(struct ieee80211_sec_chan_offs_ie); | |
1608 | } | |
1609 | ||
1610 | /* just set the values to 0, this is a template */ | |
1611 | iee80211_tdls_add_ch_switch_timing(pos, 0, 0); | |
1612 | ||
1613 | skb = ieee80211_tdls_build_mgmt_packet_data(sdata, sta->sta.addr, | |
78a7ea37 | 1614 | link_id, |
a7a6bdd0 AN |
1615 | WLAN_TDLS_CHANNEL_SWITCH_REQUEST, |
1616 | 0, 0, !sta->sta.tdls_initiator, | |
1617 | extra_ies, extra_ies_len, | |
1618 | oper_class, chandef); | |
1619 | if (!skb) | |
1620 | return NULL; | |
1621 | ||
1622 | skb = ieee80211_build_data_template(sdata, skb, 0); | |
1623 | if (IS_ERR(skb)) { | |
1624 | tdls_dbg(sdata, "Failed building TDLS channel switch frame\n"); | |
1625 | return NULL; | |
1626 | } | |
1627 | ||
1628 | if (ch_sw_tm_ie_offset) { | |
1629 | const u8 *tm_ie = ieee80211_tdls_find_sw_timing_ie(skb); | |
1630 | ||
1631 | if (!tm_ie) { | |
1632 | tdls_dbg(sdata, "No switch timing IE in TDLS switch\n"); | |
1633 | dev_kfree_skb_any(skb); | |
1634 | return NULL; | |
1635 | } | |
1636 | ||
1637 | *ch_sw_tm_ie_offset = tm_ie - skb->data; | |
1638 | } | |
1639 | ||
1640 | tdls_dbg(sdata, | |
1641 | "TDLS channel switch request template for %pM ch %d width %d\n", | |
1642 | sta->sta.addr, chandef->chan->center_freq, chandef->width); | |
1643 | return skb; | |
1644 | } | |
1645 | ||
1646 | int | |
1647 | ieee80211_tdls_channel_switch(struct wiphy *wiphy, struct net_device *dev, | |
1648 | const u8 *addr, u8 oper_class, | |
1649 | struct cfg80211_chan_def *chandef) | |
1650 | { | |
1651 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1652 | struct ieee80211_local *local = sdata->local; | |
1653 | struct sta_info *sta; | |
1654 | struct sk_buff *skb = NULL; | |
1655 | u32 ch_sw_tm_ie; | |
1656 | int ret; | |
1657 | ||
5435af6e JB |
1658 | lockdep_assert_wiphy(local->hw.wiphy); |
1659 | ||
b6011960 TP |
1660 | if (chandef->chan->freq_offset) |
1661 | /* this may work, but is untested */ | |
1662 | return -EOPNOTSUPP; | |
1663 | ||
a7a6bdd0 AN |
1664 | sta = sta_info_get(sdata, addr); |
1665 | if (!sta) { | |
1666 | tdls_dbg(sdata, | |
1667 | "Invalid TDLS peer %pM for channel switch request\n", | |
1668 | addr); | |
1669 | ret = -ENOENT; | |
1670 | goto out; | |
1671 | } | |
1672 | ||
1673 | if (!test_sta_flag(sta, WLAN_STA_TDLS_CHAN_SWITCH)) { | |
1674 | tdls_dbg(sdata, "TDLS channel switch unsupported by %pM\n", | |
1675 | addr); | |
1676 | ret = -ENOTSUPP; | |
1677 | goto out; | |
1678 | } | |
1679 | ||
1680 | skb = ieee80211_tdls_ch_sw_tmpl_get(sta, oper_class, chandef, | |
1681 | &ch_sw_tm_ie); | |
1682 | if (!skb) { | |
1683 | ret = -ENOENT; | |
1684 | goto out; | |
1685 | } | |
1686 | ||
1687 | ret = drv_tdls_channel_switch(local, sdata, &sta->sta, oper_class, | |
1688 | chandef, skb, ch_sw_tm_ie); | |
1689 | if (!ret) | |
1690 | set_sta_flag(sta, WLAN_STA_TDLS_OFF_CHANNEL); | |
1691 | ||
1692 | out: | |
a7a6bdd0 AN |
1693 | dev_kfree_skb_any(skb); |
1694 | return ret; | |
1695 | } | |
1696 | ||
1697 | void | |
1698 | ieee80211_tdls_cancel_channel_switch(struct wiphy *wiphy, | |
1699 | struct net_device *dev, | |
1700 | const u8 *addr) | |
1701 | { | |
1702 | struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); | |
1703 | struct ieee80211_local *local = sdata->local; | |
1704 | struct sta_info *sta; | |
1705 | ||
4d3acf43 JB |
1706 | lockdep_assert_wiphy(local->hw.wiphy); |
1707 | ||
a7a6bdd0 AN |
1708 | sta = sta_info_get(sdata, addr); |
1709 | if (!sta) { | |
1710 | tdls_dbg(sdata, | |
1711 | "Invalid TDLS peer %pM for channel switch cancel\n", | |
1712 | addr); | |
4d3acf43 | 1713 | return; |
a7a6bdd0 AN |
1714 | } |
1715 | ||
1716 | if (!test_sta_flag(sta, WLAN_STA_TDLS_OFF_CHANNEL)) { | |
1717 | tdls_dbg(sdata, "TDLS channel switch not initiated by %pM\n", | |
1718 | addr); | |
4d3acf43 | 1719 | return; |
a7a6bdd0 AN |
1720 | } |
1721 | ||
1722 | drv_tdls_cancel_channel_switch(local, sdata, &sta->sta); | |
1723 | clear_sta_flag(sta, WLAN_STA_TDLS_OFF_CHANNEL); | |
a7a6bdd0 | 1724 | } |
8a4d32f3 AN |
1725 | |
1726 | static struct sk_buff * | |
1727 | ieee80211_tdls_ch_sw_resp_tmpl_get(struct sta_info *sta, | |
1728 | u32 *ch_sw_tm_ie_offset) | |
1729 | { | |
1730 | struct ieee80211_sub_if_data *sdata = sta->sdata; | |
1731 | struct sk_buff *skb; | |
1732 | u8 extra_ies[2 + sizeof(struct ieee80211_ch_switch_timing)]; | |
78a7ea37 | 1733 | int link_id = sta->sta.valid_links ? ffs(sta->sta.valid_links) - 1 : 0; |
8a4d32f3 AN |
1734 | |
1735 | /* initial timing are always zero in the template */ | |
1736 | iee80211_tdls_add_ch_switch_timing(extra_ies, 0, 0); | |
1737 | ||
1738 | skb = ieee80211_tdls_build_mgmt_packet_data(sdata, sta->sta.addr, | |
78a7ea37 | 1739 | link_id, |
8a4d32f3 AN |
1740 | WLAN_TDLS_CHANNEL_SWITCH_RESPONSE, |
1741 | 0, 0, !sta->sta.tdls_initiator, | |
1742 | extra_ies, sizeof(extra_ies), 0, NULL); | |
1743 | if (!skb) | |
1744 | return NULL; | |
1745 | ||
1746 | skb = ieee80211_build_data_template(sdata, skb, 0); | |
1747 | if (IS_ERR(skb)) { | |
1748 | tdls_dbg(sdata, | |
1749 | "Failed building TDLS channel switch resp frame\n"); | |
1750 | return NULL; | |
1751 | } | |
1752 | ||
1753 | if (ch_sw_tm_ie_offset) { | |
1754 | const u8 *tm_ie = ieee80211_tdls_find_sw_timing_ie(skb); | |
1755 | ||
1756 | if (!tm_ie) { | |
1757 | tdls_dbg(sdata, | |
1758 | "No switch timing IE in TDLS switch resp\n"); | |
1759 | dev_kfree_skb_any(skb); | |
1760 | return NULL; | |
1761 | } | |
1762 | ||
1763 | *ch_sw_tm_ie_offset = tm_ie - skb->data; | |
1764 | } | |
1765 | ||
1766 | tdls_dbg(sdata, "TDLS get channel switch response template for %pM\n", | |
1767 | sta->sta.addr); | |
1768 | return skb; | |
1769 | } | |
1770 | ||
1771 | static int | |
1772 | ieee80211_process_tdls_channel_switch_resp(struct ieee80211_sub_if_data *sdata, | |
1773 | struct sk_buff *skb) | |
1774 | { | |
1775 | struct ieee80211_local *local = sdata->local; | |
5d24828d | 1776 | struct ieee802_11_elems *elems = NULL; |
8a4d32f3 AN |
1777 | struct sta_info *sta; |
1778 | struct ieee80211_tdls_data *tf = (void *)skb->data; | |
1779 | bool local_initiator; | |
1780 | struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb); | |
1781 | int baselen = offsetof(typeof(*tf), u.chan_switch_resp.variable); | |
1782 | struct ieee80211_tdls_ch_sw_params params = {}; | |
1783 | int ret; | |
1784 | ||
5435af6e JB |
1785 | lockdep_assert_wiphy(local->hw.wiphy); |
1786 | ||
8a4d32f3 AN |
1787 | params.action_code = WLAN_TDLS_CHANNEL_SWITCH_RESPONSE; |
1788 | params.timestamp = rx_status->device_timestamp; | |
1789 | ||
1790 | if (skb->len < baselen) { | |
1791 | tdls_dbg(sdata, "TDLS channel switch resp too short: %d\n", | |
1792 | skb->len); | |
1793 | return -EINVAL; | |
1794 | } | |
1795 | ||
8a4d32f3 AN |
1796 | sta = sta_info_get(sdata, tf->sa); |
1797 | if (!sta || !test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH)) { | |
1798 | tdls_dbg(sdata, "TDLS chan switch from non-peer sta %pM\n", | |
1799 | tf->sa); | |
1800 | ret = -EINVAL; | |
1801 | goto out; | |
1802 | } | |
1803 | ||
1804 | params.sta = &sta->sta; | |
1805 | params.status = le16_to_cpu(tf->u.chan_switch_resp.status_code); | |
1806 | if (params.status != 0) { | |
1807 | ret = 0; | |
1808 | goto call_drv; | |
1809 | } | |
1810 | ||
5d24828d | 1811 | elems = ieee802_11_parse_elems(tf->u.chan_switch_resp.variable, |
38c6aa29 | 1812 | skb->len - baselen, false, NULL); |
5d24828d JB |
1813 | if (!elems) { |
1814 | ret = -ENOMEM; | |
1815 | goto out; | |
1816 | } | |
1817 | ||
1818 | if (elems->parse_error) { | |
8a4d32f3 AN |
1819 | tdls_dbg(sdata, "Invalid IEs in TDLS channel switch resp\n"); |
1820 | ret = -EINVAL; | |
1821 | goto out; | |
1822 | } | |
1823 | ||
5d24828d | 1824 | if (!elems->ch_sw_timing || !elems->lnk_id) { |
8a4d32f3 AN |
1825 | tdls_dbg(sdata, "TDLS channel switch resp - missing IEs\n"); |
1826 | ret = -EINVAL; | |
1827 | goto out; | |
1828 | } | |
1829 | ||
1830 | /* validate the initiator is set correctly */ | |
1831 | local_initiator = | |
5d24828d | 1832 | !memcmp(elems->lnk_id->init_sta, sdata->vif.addr, ETH_ALEN); |
8a4d32f3 AN |
1833 | if (local_initiator == sta->sta.tdls_initiator) { |
1834 | tdls_dbg(sdata, "TDLS chan switch invalid lnk-id initiator\n"); | |
1835 | ret = -EINVAL; | |
1836 | goto out; | |
1837 | } | |
1838 | ||
5d24828d JB |
1839 | params.switch_time = le16_to_cpu(elems->ch_sw_timing->switch_time); |
1840 | params.switch_timeout = le16_to_cpu(elems->ch_sw_timing->switch_timeout); | |
8a4d32f3 AN |
1841 | |
1842 | params.tmpl_skb = | |
1843 | ieee80211_tdls_ch_sw_resp_tmpl_get(sta, ¶ms.ch_sw_tm_ie); | |
1844 | if (!params.tmpl_skb) { | |
1845 | ret = -ENOENT; | |
1846 | goto out; | |
1847 | } | |
1848 | ||
49708e37 | 1849 | ret = 0; |
8a4d32f3 AN |
1850 | call_drv: |
1851 | drv_tdls_recv_channel_switch(sdata->local, sdata, ¶ms); | |
1852 | ||
1853 | tdls_dbg(sdata, | |
1854 | "TDLS channel switch response received from %pM status %d\n", | |
1855 | tf->sa, params.status); | |
1856 | ||
1857 | out: | |
8a4d32f3 | 1858 | dev_kfree_skb_any(params.tmpl_skb); |
5d24828d | 1859 | kfree(elems); |
8a4d32f3 AN |
1860 | return ret; |
1861 | } | |
1862 | ||
1863 | static int | |
1864 | ieee80211_process_tdls_channel_switch_req(struct ieee80211_sub_if_data *sdata, | |
1865 | struct sk_buff *skb) | |
1866 | { | |
1867 | struct ieee80211_local *local = sdata->local; | |
5d24828d | 1868 | struct ieee802_11_elems *elems; |
8a4d32f3 AN |
1869 | struct cfg80211_chan_def chandef; |
1870 | struct ieee80211_channel *chan; | |
1871 | enum nl80211_channel_type chan_type; | |
1872 | int freq; | |
1873 | u8 target_channel, oper_class; | |
1874 | bool local_initiator; | |
1875 | struct sta_info *sta; | |
57fbcce3 | 1876 | enum nl80211_band band; |
8a4d32f3 AN |
1877 | struct ieee80211_tdls_data *tf = (void *)skb->data; |
1878 | struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb); | |
1879 | int baselen = offsetof(typeof(*tf), u.chan_switch_req.variable); | |
1880 | struct ieee80211_tdls_ch_sw_params params = {}; | |
1881 | int ret = 0; | |
1882 | ||
5435af6e JB |
1883 | lockdep_assert_wiphy(local->hw.wiphy); |
1884 | ||
8a4d32f3 AN |
1885 | params.action_code = WLAN_TDLS_CHANNEL_SWITCH_REQUEST; |
1886 | params.timestamp = rx_status->device_timestamp; | |
1887 | ||
1888 | if (skb->len < baselen) { | |
1889 | tdls_dbg(sdata, "TDLS channel switch req too short: %d\n", | |
1890 | skb->len); | |
1891 | return -EINVAL; | |
1892 | } | |
1893 | ||
1894 | target_channel = tf->u.chan_switch_req.target_channel; | |
1895 | oper_class = tf->u.chan_switch_req.oper_class; | |
1896 | ||
1897 | /* | |
1898 | * We can't easily infer the channel band. The operating class is | |
1899 | * ambiguous - there are multiple tables (US/Europe/JP/Global). The | |
1900 | * solution here is to treat channels with number >14 as 5GHz ones, | |
1901 | * and specifically check for the (oper_class, channel) combinations | |
1902 | * where this doesn't hold. These are thankfully unique according to | |
1903 | * IEEE802.11-2012. | |
1904 | * We consider only the 2GHz and 5GHz bands and 20MHz+ channels as | |
1905 | * valid here. | |
1906 | */ | |
1907 | if ((oper_class == 112 || oper_class == 2 || oper_class == 3 || | |
1908 | oper_class == 4 || oper_class == 5 || oper_class == 6) && | |
1909 | target_channel < 14) | |
57fbcce3 | 1910 | band = NL80211_BAND_5GHZ; |
8a4d32f3 | 1911 | else |
57fbcce3 JB |
1912 | band = target_channel < 14 ? NL80211_BAND_2GHZ : |
1913 | NL80211_BAND_5GHZ; | |
8a4d32f3 AN |
1914 | |
1915 | freq = ieee80211_channel_to_frequency(target_channel, band); | |
1916 | if (freq == 0) { | |
1917 | tdls_dbg(sdata, "Invalid channel in TDLS chan switch: %d\n", | |
1918 | target_channel); | |
1919 | return -EINVAL; | |
1920 | } | |
1921 | ||
1922 | chan = ieee80211_get_channel(sdata->local->hw.wiphy, freq); | |
1923 | if (!chan) { | |
1924 | tdls_dbg(sdata, | |
1925 | "Unsupported channel for TDLS chan switch: %d\n", | |
1926 | target_channel); | |
1927 | return -EINVAL; | |
1928 | } | |
1929 | ||
5d24828d | 1930 | elems = ieee802_11_parse_elems(tf->u.chan_switch_req.variable, |
38c6aa29 | 1931 | skb->len - baselen, false, NULL); |
5d24828d JB |
1932 | if (!elems) |
1933 | return -ENOMEM; | |
1934 | ||
1935 | if (elems->parse_error) { | |
8a4d32f3 | 1936 | tdls_dbg(sdata, "Invalid IEs in TDLS channel switch req\n"); |
5d24828d JB |
1937 | ret = -EINVAL; |
1938 | goto free; | |
8a4d32f3 AN |
1939 | } |
1940 | ||
5d24828d | 1941 | if (!elems->ch_sw_timing || !elems->lnk_id) { |
8a4d32f3 | 1942 | tdls_dbg(sdata, "TDLS channel switch req - missing IEs\n"); |
5d24828d JB |
1943 | ret = -EINVAL; |
1944 | goto free; | |
8a4d32f3 AN |
1945 | } |
1946 | ||
5d24828d | 1947 | if (!elems->sec_chan_offs) { |
42d8d789 AN |
1948 | chan_type = NL80211_CHAN_HT20; |
1949 | } else { | |
5d24828d | 1950 | switch (elems->sec_chan_offs->sec_chan_offs) { |
42d8d789 AN |
1951 | case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: |
1952 | chan_type = NL80211_CHAN_HT40PLUS; | |
1953 | break; | |
1954 | case IEEE80211_HT_PARAM_CHA_SEC_BELOW: | |
1955 | chan_type = NL80211_CHAN_HT40MINUS; | |
1956 | break; | |
1957 | default: | |
1958 | chan_type = NL80211_CHAN_HT20; | |
1959 | break; | |
1960 | } | |
1961 | } | |
1962 | ||
1963 | cfg80211_chandef_create(&chandef, chan, chan_type); | |
1964 | ||
1965 | /* we will be active on the TDLS link */ | |
1966 | if (!cfg80211_reg_can_beacon_relax(sdata->local->hw.wiphy, &chandef, | |
1967 | sdata->wdev.iftype)) { | |
1968 | tdls_dbg(sdata, "TDLS chan switch to forbidden channel\n"); | |
5d24828d JB |
1969 | ret = -EINVAL; |
1970 | goto free; | |
42d8d789 AN |
1971 | } |
1972 | ||
8a4d32f3 AN |
1973 | sta = sta_info_get(sdata, tf->sa); |
1974 | if (!sta || !test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH)) { | |
1975 | tdls_dbg(sdata, "TDLS chan switch from non-peer sta %pM\n", | |
1976 | tf->sa); | |
1977 | ret = -EINVAL; | |
1978 | goto out; | |
1979 | } | |
1980 | ||
1981 | params.sta = &sta->sta; | |
1982 | ||
1983 | /* validate the initiator is set correctly */ | |
1984 | local_initiator = | |
5d24828d | 1985 | !memcmp(elems->lnk_id->init_sta, sdata->vif.addr, ETH_ALEN); |
8a4d32f3 AN |
1986 | if (local_initiator == sta->sta.tdls_initiator) { |
1987 | tdls_dbg(sdata, "TDLS chan switch invalid lnk-id initiator\n"); | |
1988 | ret = -EINVAL; | |
1989 | goto out; | |
1990 | } | |
1991 | ||
42d8d789 | 1992 | /* peer should have known better */ |
046d2e7c | 1993 | if (!sta->sta.deflink.ht_cap.ht_supported && elems->sec_chan_offs && |
5d24828d | 1994 | elems->sec_chan_offs->sec_chan_offs) { |
42d8d789 AN |
1995 | tdls_dbg(sdata, "TDLS chan switch - wide chan unsupported\n"); |
1996 | ret = -ENOTSUPP; | |
1997 | goto out; | |
8a4d32f3 AN |
1998 | } |
1999 | ||
8a4d32f3 | 2000 | params.chandef = &chandef; |
5d24828d JB |
2001 | params.switch_time = le16_to_cpu(elems->ch_sw_timing->switch_time); |
2002 | params.switch_timeout = le16_to_cpu(elems->ch_sw_timing->switch_timeout); | |
8a4d32f3 AN |
2003 | |
2004 | params.tmpl_skb = | |
2005 | ieee80211_tdls_ch_sw_resp_tmpl_get(sta, | |
2006 | ¶ms.ch_sw_tm_ie); | |
2007 | if (!params.tmpl_skb) { | |
2008 | ret = -ENOENT; | |
2009 | goto out; | |
2010 | } | |
2011 | ||
2012 | drv_tdls_recv_channel_switch(sdata->local, sdata, ¶ms); | |
2013 | ||
2014 | tdls_dbg(sdata, | |
2015 | "TDLS ch switch request received from %pM ch %d width %d\n", | |
2016 | tf->sa, params.chandef->chan->center_freq, | |
2017 | params.chandef->width); | |
2018 | out: | |
8a4d32f3 | 2019 | dev_kfree_skb_any(params.tmpl_skb); |
5d24828d JB |
2020 | free: |
2021 | kfree(elems); | |
8a4d32f3 AN |
2022 | return ret; |
2023 | } | |
2024 | ||
f057d140 | 2025 | void |
c8ff71e6 AN |
2026 | ieee80211_process_tdls_channel_switch(struct ieee80211_sub_if_data *sdata, |
2027 | struct sk_buff *skb) | |
8a4d32f3 AN |
2028 | { |
2029 | struct ieee80211_tdls_data *tf = (void *)skb->data; | |
2030 | struct wiphy *wiphy = sdata->local->hw.wiphy; | |
2031 | ||
a05829a7 | 2032 | lockdep_assert_wiphy(wiphy); |
c8ff71e6 | 2033 | |
8a4d32f3 AN |
2034 | /* make sure the driver supports it */ |
2035 | if (!(wiphy->features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH)) | |
2036 | return; | |
2037 | ||
2038 | /* we want to access the entire packet */ | |
2039 | if (skb_linearize(skb)) | |
2040 | return; | |
2041 | /* | |
2042 | * The packet/size was already validated by mac80211 Rx path, only look | |
2043 | * at the action type. | |
2044 | */ | |
2045 | switch (tf->action_code) { | |
2046 | case WLAN_TDLS_CHANNEL_SWITCH_REQUEST: | |
2047 | ieee80211_process_tdls_channel_switch_req(sdata, skb); | |
2048 | break; | |
2049 | case WLAN_TDLS_CHANNEL_SWITCH_RESPONSE: | |
2050 | ieee80211_process_tdls_channel_switch_resp(sdata, skb); | |
2051 | break; | |
2052 | default: | |
2053 | WARN_ON_ONCE(1); | |
2054 | return; | |
2055 | } | |
2056 | } | |
d51c2ea3 AN |
2057 | |
2058 | void ieee80211_teardown_tdls_peers(struct ieee80211_sub_if_data *sdata) | |
2059 | { | |
2060 | struct sta_info *sta; | |
2061 | u16 reason = WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED; | |
2062 | ||
2063 | rcu_read_lock(); | |
2064 | list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) { | |
2065 | if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded || | |
2066 | !test_sta_flag(sta, WLAN_STA_AUTHORIZED)) | |
2067 | continue; | |
2068 | ||
2069 | ieee80211_tdls_oper_request(&sdata->vif, sta->sta.addr, | |
2070 | NL80211_TDLS_TEARDOWN, reason, | |
2071 | GFP_ATOMIC); | |
2072 | } | |
2073 | rcu_read_unlock(); | |
2074 | } | |
c8ff71e6 | 2075 | |
79c92ca4 YW |
2076 | void ieee80211_tdls_handle_disconnect(struct ieee80211_sub_if_data *sdata, |
2077 | const u8 *peer, u16 reason) | |
2078 | { | |
2079 | struct ieee80211_sta *sta; | |
2080 | ||
2081 | rcu_read_lock(); | |
2082 | sta = ieee80211_find_sta(&sdata->vif, peer); | |
2083 | if (!sta || !sta->tdls) { | |
2084 | rcu_read_unlock(); | |
2085 | return; | |
2086 | } | |
2087 | rcu_read_unlock(); | |
2088 | ||
2089 | tdls_dbg(sdata, "disconnected from TDLS peer %pM (Reason: %u=%s)\n", | |
2090 | peer, reason, | |
2091 | ieee80211_get_reason_code_string(reason)); | |
2092 | ||
2093 | ieee80211_tdls_oper_request(&sdata->vif, peer, | |
2094 | NL80211_TDLS_TEARDOWN, | |
2095 | WLAN_REASON_TDLS_TEARDOWN_UNREACHABLE, | |
2096 | GFP_ATOMIC); | |
2097 | } |