Home | History | Annotate | Line # | Download | only in net80211
ieee80211_ioctl.c revision 1.8
      1  1.8    onoe /*	$NetBSD: ieee80211_ioctl.c,v 1.8 2004/01/16 14:07:32 onoe Exp $	*/
      2  1.1  dyoung /*-
      3  1.1  dyoung  * Copyright (c) 2001 Atsushi Onoe
      4  1.1  dyoung  * Copyright (c) 2002, 2003 Sam Leffler, Errno Consulting
      5  1.1  dyoung  * All rights reserved.
      6  1.1  dyoung  *
      7  1.1  dyoung  * Redistribution and use in source and binary forms, with or without
      8  1.1  dyoung  * modification, are permitted provided that the following conditions
      9  1.1  dyoung  * are met:
     10  1.1  dyoung  * 1. Redistributions of source code must retain the above copyright
     11  1.1  dyoung  *    notice, this list of conditions and the following disclaimer.
     12  1.1  dyoung  * 2. Redistributions in binary form must reproduce the above copyright
     13  1.1  dyoung  *    notice, this list of conditions and the following disclaimer in the
     14  1.1  dyoung  *    documentation and/or other materials provided with the distribution.
     15  1.1  dyoung  * 3. The name of the author may not be used to endorse or promote products
     16  1.1  dyoung  *    derived from this software without specific prior written permission.
     17  1.1  dyoung  *
     18  1.1  dyoung  * Alternatively, this software may be distributed under the terms of the
     19  1.1  dyoung  * GNU General Public License ("GPL") version 2 as published by the Free
     20  1.1  dyoung  * Software Foundation.
     21  1.1  dyoung  *
     22  1.1  dyoung  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     23  1.1  dyoung  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     24  1.1  dyoung  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     25  1.1  dyoung  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     26  1.1  dyoung  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     27  1.1  dyoung  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     28  1.1  dyoung  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     29  1.1  dyoung  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     30  1.1  dyoung  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     31  1.1  dyoung  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     32  1.1  dyoung  */
     33  1.1  dyoung 
     34  1.1  dyoung #include <sys/cdefs.h>
     35  1.3  dyoung #ifdef __FreeBSD__
     36  1.7  dyoung __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_ioctl.c,v 1.9 2003/11/13 05:23:58 sam Exp $");
     37  1.3  dyoung #else
     38  1.8    onoe __KERNEL_RCSID(0, "$NetBSD: ieee80211_ioctl.c,v 1.8 2004/01/16 14:07:32 onoe Exp $");
     39  1.3  dyoung #endif
     40  1.1  dyoung 
     41  1.1  dyoung /*
     42  1.1  dyoung  * IEEE 802.11 ioctl support (FreeBSD-specific)
     43  1.1  dyoung  */
     44  1.1  dyoung 
     45  1.1  dyoung #include <sys/endian.h>
     46  1.1  dyoung #include <sys/param.h>
     47  1.1  dyoung #include <sys/kernel.h>
     48  1.1  dyoung #include <sys/socket.h>
     49  1.1  dyoung #include <sys/sockio.h>
     50  1.1  dyoung #include <sys/systm.h>
     51  1.4  dyoung #include <sys/proc.h>
     52  1.1  dyoung 
     53  1.1  dyoung #include <net/if.h>
     54  1.1  dyoung #include <net/if_arp.h>
     55  1.1  dyoung #include <net/if_media.h>
     56  1.2  dyoung #ifdef __FreeBSD__
     57  1.1  dyoung #include <net/ethernet.h>
     58  1.4  dyoung #else
     59  1.4  dyoung #include <net/if_ether.h>
     60  1.2  dyoung #endif
     61  1.1  dyoung 
     62  1.1  dyoung #include <net80211/ieee80211_var.h>
     63  1.1  dyoung #include <net80211/ieee80211_ioctl.h>
     64  1.1  dyoung 
     65  1.4  dyoung #ifdef __FreeBSD__
     66  1.1  dyoung #include <dev/wi/if_wavelan_ieee.h>
     67  1.4  dyoung #else
     68  1.4  dyoung #include <dev/ic/wi_ieee.h>
     69  1.4  dyoung #endif
     70  1.1  dyoung 
     71  1.1  dyoung /*
     72  1.1  dyoung  * XXX
     73  1.1  dyoung  * Wireless LAN specific configuration interface, which is compatible
     74  1.1  dyoung  * with wicontrol(8).
     75  1.1  dyoung  */
     76  1.1  dyoung 
     77  1.1  dyoung int
     78  1.1  dyoung ieee80211_cfgget(struct ifnet *ifp, u_long cmd, caddr_t data)
     79  1.1  dyoung {
     80  1.1  dyoung 	struct ieee80211com *ic = (void *)ifp;
     81  1.1  dyoung 	int i, j, error;
     82  1.1  dyoung 	struct ifreq *ifr = (struct ifreq *)data;
     83  1.1  dyoung 	struct wi_req wreq;
     84  1.1  dyoung 	struct wi_ltv_keys *keys;
     85  1.1  dyoung 	struct wi_apinfo *ap;
     86  1.1  dyoung 	struct ieee80211_node *ni;
     87  1.1  dyoung 	struct ieee80211_rateset *rs;
     88  1.4  dyoung #ifdef WICACHE
     89  1.1  dyoung 	struct wi_sigcache wsc;
     90  1.4  dyoung #endif /* WICACHE */
     91  1.4  dyoung #if 0 /* TBD */
     92  1.1  dyoung 	struct wi_scan_p2_hdr *p2;
     93  1.1  dyoung 	struct wi_scan_res *res;
     94  1.4  dyoung #endif
     95  1.1  dyoung 
     96  1.1  dyoung 	error = copyin(ifr->ifr_data, &wreq, sizeof(wreq));
     97  1.1  dyoung 	if (error)
     98  1.1  dyoung 		return error;
     99  1.1  dyoung 	wreq.wi_len = 0;
    100  1.1  dyoung 	switch (wreq.wi_type) {
    101  1.1  dyoung 	case WI_RID_SERIALNO:
    102  1.8    onoe 	case WI_RID_STA_IDENTITY:
    103  1.1  dyoung 		/* nothing appropriate */
    104  1.1  dyoung 		break;
    105  1.1  dyoung 	case WI_RID_NODENAME:
    106  1.1  dyoung 		strcpy((char *)&wreq.wi_val[1], hostname);
    107  1.1  dyoung 		wreq.wi_val[0] = htole16(strlen(hostname));
    108  1.1  dyoung 		wreq.wi_len = (1 + strlen(hostname) + 1) / 2;
    109  1.1  dyoung 		break;
    110  1.1  dyoung 	case WI_RID_CURRENT_SSID:
    111  1.1  dyoung 		if (ic->ic_state != IEEE80211_S_RUN) {
    112  1.1  dyoung 			wreq.wi_val[0] = 0;
    113  1.1  dyoung 			wreq.wi_len = 1;
    114  1.1  dyoung 			break;
    115  1.1  dyoung 		}
    116  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_bss->ni_esslen);
    117  1.1  dyoung 		memcpy(&wreq.wi_val[1], ic->ic_bss->ni_essid,
    118  1.1  dyoung 		    ic->ic_bss->ni_esslen);
    119  1.1  dyoung 		wreq.wi_len = (1 + ic->ic_bss->ni_esslen + 1) / 2;
    120  1.1  dyoung 		break;
    121  1.1  dyoung 	case WI_RID_OWN_SSID:
    122  1.1  dyoung 	case WI_RID_DESIRED_SSID:
    123  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_des_esslen);
    124  1.1  dyoung 		memcpy(&wreq.wi_val[1], ic->ic_des_essid, ic->ic_des_esslen);
    125  1.1  dyoung 		wreq.wi_len = (1 + ic->ic_des_esslen + 1) / 2;
    126  1.1  dyoung 		break;
    127  1.1  dyoung 	case WI_RID_CURRENT_BSSID:
    128  1.1  dyoung 		if (ic->ic_state == IEEE80211_S_RUN)
    129  1.1  dyoung 			IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_bss->ni_bssid);
    130  1.1  dyoung 		else
    131  1.1  dyoung 			memset(wreq.wi_val, 0, IEEE80211_ADDR_LEN);
    132  1.1  dyoung 		wreq.wi_len = IEEE80211_ADDR_LEN / 2;
    133  1.1  dyoung 		break;
    134  1.1  dyoung 	case WI_RID_CHANNEL_LIST:
    135  1.1  dyoung 		memset(wreq.wi_val, 0, sizeof(wreq.wi_val));
    136  1.1  dyoung 		/*
    137  1.1  dyoung 		 * Since channel 0 is not available for DS, channel 1
    138  1.1  dyoung 		 * is assigned to LSB on WaveLAN.
    139  1.1  dyoung 		 */
    140  1.1  dyoung 		if (ic->ic_phytype == IEEE80211_T_DS)
    141  1.1  dyoung 			i = 1;
    142  1.1  dyoung 		else
    143  1.1  dyoung 			i = 0;
    144  1.1  dyoung 		for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++)
    145  1.1  dyoung 			if (isset(ic->ic_chan_active, i)) {
    146  1.1  dyoung 				setbit((u_int8_t *)wreq.wi_val, j);
    147  1.1  dyoung 				wreq.wi_len = j / 16 + 1;
    148  1.1  dyoung 			}
    149  1.1  dyoung 		break;
    150  1.1  dyoung 	case WI_RID_OWN_CHNL:
    151  1.1  dyoung 		wreq.wi_val[0] = htole16(
    152  1.1  dyoung 			ieee80211_chan2ieee(ic, ic->ic_ibss_chan));
    153  1.1  dyoung 		wreq.wi_len = 1;
    154  1.1  dyoung 		break;
    155  1.1  dyoung 	case WI_RID_CURRENT_CHAN:
    156  1.1  dyoung 		wreq.wi_val[0] = htole16(
    157  1.1  dyoung 			ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan));
    158  1.1  dyoung 		wreq.wi_len = 1;
    159  1.1  dyoung 		break;
    160  1.1  dyoung 	case WI_RID_COMMS_QUALITY:
    161  1.1  dyoung 		wreq.wi_val[0] = 0;				/* quality */
    162  1.7  dyoung 		wreq.wi_val[1] =
    163  1.7  dyoung 			htole16((*ic->ic_node_getrssi)(ic, ic->ic_bss));
    164  1.1  dyoung 		wreq.wi_val[2] = 0;				/* noise */
    165  1.1  dyoung 		wreq.wi_len = 3;
    166  1.1  dyoung 		break;
    167  1.1  dyoung 	case WI_RID_PROMISC:
    168  1.1  dyoung 		wreq.wi_val[0] = htole16((ifp->if_flags & IFF_PROMISC) ? 1 : 0);
    169  1.1  dyoung 		wreq.wi_len = 1;
    170  1.1  dyoung 		break;
    171  1.1  dyoung 	case WI_RID_PORTTYPE:
    172  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_opmode);
    173  1.1  dyoung 		wreq.wi_len = 1;
    174  1.1  dyoung 		break;
    175  1.1  dyoung 	case WI_RID_MAC_NODE:
    176  1.1  dyoung 		IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_myaddr);
    177  1.1  dyoung 		wreq.wi_len = IEEE80211_ADDR_LEN / 2;
    178  1.1  dyoung 		break;
    179  1.1  dyoung 	case WI_RID_TX_RATE:
    180  1.1  dyoung 		if (ic->ic_fixed_rate == -1)
    181  1.1  dyoung 			wreq.wi_val[0] = 0;	/* auto */
    182  1.1  dyoung 		else
    183  1.1  dyoung 			wreq.wi_val[0] = htole16(
    184  1.1  dyoung 			    (ic->ic_sup_rates[ic->ic_curmode].rs_rates[ic->ic_fixed_rate] &
    185  1.1  dyoung 			    IEEE80211_RATE_VAL) / 2);
    186  1.1  dyoung 		wreq.wi_len = 1;
    187  1.1  dyoung 		break;
    188  1.1  dyoung 	case WI_RID_CUR_TX_RATE:
    189  1.1  dyoung 		wreq.wi_val[0] = htole16(
    190  1.1  dyoung 		    (ic->ic_bss->ni_rates.rs_rates[ic->ic_bss->ni_txrate] &
    191  1.1  dyoung 		    IEEE80211_RATE_VAL) / 2);
    192  1.1  dyoung 		wreq.wi_len = 1;
    193  1.1  dyoung 		break;
    194  1.6  dyoung 	case WI_RID_FRAG_THRESH:
    195  1.6  dyoung 		wreq.wi_val[0] = htole16(ic->ic_fragthreshold);
    196  1.6  dyoung 		wreq.wi_len = 1;
    197  1.6  dyoung 		break;
    198  1.1  dyoung 	case WI_RID_RTS_THRESH:
    199  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_rtsthreshold);
    200  1.1  dyoung 		wreq.wi_len = 1;
    201  1.1  dyoung 		break;
    202  1.1  dyoung 	case WI_RID_CREATE_IBSS:
    203  1.1  dyoung 		wreq.wi_val[0] =
    204  1.1  dyoung 		    htole16((ic->ic_flags & IEEE80211_F_IBSSON) ? 1 : 0);
    205  1.1  dyoung 		wreq.wi_len = 1;
    206  1.1  dyoung 		break;
    207  1.1  dyoung 	case WI_RID_MICROWAVE_OVEN:
    208  1.1  dyoung 		wreq.wi_val[0] = 0;	/* no ... not supported */
    209  1.1  dyoung 		wreq.wi_len = 1;
    210  1.1  dyoung 		break;
    211  1.1  dyoung 	case WI_RID_ROAMING_MODE:
    212  1.1  dyoung 		wreq.wi_val[0] = htole16(1);	/* enabled ... not supported */
    213  1.1  dyoung 		wreq.wi_len = 1;
    214  1.1  dyoung 		break;
    215  1.1  dyoung 	case WI_RID_SYSTEM_SCALE:
    216  1.1  dyoung 		wreq.wi_val[0] = htole16(1);	/* low density ... not supp */
    217  1.1  dyoung 		wreq.wi_len = 1;
    218  1.1  dyoung 		break;
    219  1.1  dyoung 	case WI_RID_PM_ENABLED:
    220  1.1  dyoung 		wreq.wi_val[0] =
    221  1.1  dyoung 		    htole16((ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0);
    222  1.1  dyoung 		wreq.wi_len = 1;
    223  1.1  dyoung 		break;
    224  1.1  dyoung 	case WI_RID_MAX_SLEEP:
    225  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_lintval);
    226  1.1  dyoung 		wreq.wi_len = 1;
    227  1.1  dyoung 		break;
    228  1.1  dyoung 	case WI_RID_CUR_BEACON_INT:
    229  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_bss->ni_intval);
    230  1.1  dyoung 		wreq.wi_len = 1;
    231  1.1  dyoung 		break;
    232  1.1  dyoung 	case WI_RID_WEP_AVAIL:
    233  1.1  dyoung 		wreq.wi_val[0] =
    234  1.1  dyoung 		    htole16((ic->ic_caps & IEEE80211_C_WEP) ? 1 : 0);
    235  1.1  dyoung 		wreq.wi_len = 1;
    236  1.1  dyoung 		break;
    237  1.1  dyoung 	case WI_RID_CNFAUTHMODE:
    238  1.1  dyoung 		wreq.wi_val[0] = htole16(1);	/* TODO: open system only */
    239  1.1  dyoung 		wreq.wi_len = 1;
    240  1.1  dyoung 		break;
    241  1.1  dyoung 	case WI_RID_ENCRYPTION:
    242  1.1  dyoung 		wreq.wi_val[0] =
    243  1.1  dyoung 		    htole16((ic->ic_flags & IEEE80211_F_WEPON) ? 1 : 0);
    244  1.1  dyoung 		wreq.wi_len = 1;
    245  1.1  dyoung 		break;
    246  1.1  dyoung 	case WI_RID_TX_CRYPT_KEY:
    247  1.1  dyoung 		wreq.wi_val[0] = htole16(ic->ic_wep_txkey);
    248  1.1  dyoung 		wreq.wi_len = 1;
    249  1.1  dyoung 		break;
    250  1.1  dyoung 	case WI_RID_DEFLT_CRYPT_KEYS:
    251  1.1  dyoung 		keys = (struct wi_ltv_keys *)&wreq;
    252  1.1  dyoung 		/* do not show keys to non-root user */
    253  1.4  dyoung 		error = suser(curproc->p_ucred, &curproc->p_acflag);
    254  1.1  dyoung 		if (error) {
    255  1.1  dyoung 			memset(keys, 0, sizeof(*keys));
    256  1.1  dyoung 			error = 0;
    257  1.1  dyoung 			break;
    258  1.1  dyoung 		}
    259  1.1  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
    260  1.1  dyoung 			keys->wi_keys[i].wi_keylen =
    261  1.1  dyoung 			    htole16(ic->ic_nw_keys[i].wk_len);
    262  1.1  dyoung 			memcpy(keys->wi_keys[i].wi_keydat,
    263  1.1  dyoung 			    ic->ic_nw_keys[i].wk_key, ic->ic_nw_keys[i].wk_len);
    264  1.1  dyoung 		}
    265  1.1  dyoung 		wreq.wi_len = sizeof(*keys) / 2;
    266  1.1  dyoung 		break;
    267  1.1  dyoung 	case WI_RID_MAX_DATALEN:
    268  1.1  dyoung 		wreq.wi_val[0] = htole16(IEEE80211_MAX_LEN);	/* TODO: frag */
    269  1.1  dyoung 		wreq.wi_len = 1;
    270  1.1  dyoung 		break;
    271  1.8    onoe 	case WI_RID_DBM_ADJUST:
    272  1.8    onoe 		/* not supported, we just pass rssi value from driver. */
    273  1.8    onoe 		break;
    274  1.1  dyoung 	case WI_RID_IFACE_STATS:
    275  1.1  dyoung 		/* XXX: should be implemented in lower drivers */
    276  1.1  dyoung 		break;
    277  1.1  dyoung 	case WI_RID_READ_APS:
    278  1.1  dyoung 		if (ic->ic_opmode != IEEE80211_M_HOSTAP) {
    279  1.1  dyoung 			/*
    280  1.1  dyoung 			 * Don't return results until active scan completes.
    281  1.1  dyoung 			 */
    282  1.1  dyoung 			if (ic->ic_state == IEEE80211_S_SCAN &&
    283  1.1  dyoung 			    (ic->ic_flags & IEEE80211_F_ASCAN)) {
    284  1.1  dyoung 				error = EINPROGRESS;
    285  1.1  dyoung 				break;
    286  1.1  dyoung 			}
    287  1.1  dyoung 		}
    288  1.1  dyoung 		i = 0;
    289  1.1  dyoung 		ap = (void *)((char *)wreq.wi_val + sizeof(i));
    290  1.1  dyoung 		TAILQ_FOREACH(ni, &ic->ic_node, ni_list) {
    291  1.1  dyoung 			if ((caddr_t)(ap + 1) > (caddr_t)(&wreq + 1))
    292  1.1  dyoung 				break;
    293  1.1  dyoung 			memset(ap, 0, sizeof(*ap));
    294  1.1  dyoung 			if (ic->ic_opmode == IEEE80211_M_HOSTAP) {
    295  1.1  dyoung 				IEEE80211_ADDR_COPY(ap->bssid, ni->ni_macaddr);
    296  1.1  dyoung 				ap->namelen = ic->ic_des_esslen;
    297  1.1  dyoung 				if (ic->ic_des_esslen)
    298  1.1  dyoung 					memcpy(ap->name, ic->ic_des_essid,
    299  1.1  dyoung 					    ic->ic_des_esslen);
    300  1.1  dyoung 			} else {
    301  1.1  dyoung 				IEEE80211_ADDR_COPY(ap->bssid, ni->ni_bssid);
    302  1.1  dyoung 				ap->namelen = ni->ni_esslen;
    303  1.1  dyoung 				if (ni->ni_esslen)
    304  1.1  dyoung 					memcpy(ap->name, ni->ni_essid,
    305  1.1  dyoung 					    ni->ni_esslen);
    306  1.1  dyoung 			}
    307  1.1  dyoung 			ap->channel = ieee80211_chan2ieee(ic, ni->ni_chan);
    308  1.7  dyoung 			ap->signal = (*ic->ic_node_getrssi)(ic, ni);
    309  1.1  dyoung 			ap->capinfo = ni->ni_capinfo;
    310  1.1  dyoung 			ap->interval = ni->ni_intval;
    311  1.1  dyoung 			rs = &ni->ni_rates;
    312  1.1  dyoung 			for (j = 0; j < rs->rs_nrates; j++) {
    313  1.1  dyoung 				if (rs->rs_rates[j] & IEEE80211_RATE_BASIC) {
    314  1.1  dyoung 					ap->rate = (rs->rs_rates[j] &
    315  1.1  dyoung 					    IEEE80211_RATE_VAL) * 5; /* XXX */
    316  1.1  dyoung 				}
    317  1.1  dyoung 			}
    318  1.1  dyoung 			i++;
    319  1.1  dyoung 			ap++;
    320  1.1  dyoung 		}
    321  1.1  dyoung 		memcpy(wreq.wi_val, &i, sizeof(i));
    322  1.1  dyoung 		wreq.wi_len = (sizeof(int) + sizeof(*ap) * i) / 2;
    323  1.1  dyoung 		break;
    324  1.4  dyoung #if 0
    325  1.1  dyoung 	case WI_RID_PRISM2:
    326  1.1  dyoung 		wreq.wi_val[0] = 1;	/* XXX lie so SCAN_RES can give rates */
    327  1.1  dyoung 		wreq.wi_len = sizeof(u_int16_t) / 2;
    328  1.1  dyoung 		break;
    329  1.1  dyoung 	case WI_RID_SCAN_RES:			/* compatibility interface */
    330  1.1  dyoung 		if (ic->ic_opmode != IEEE80211_M_HOSTAP &&
    331  1.1  dyoung 		    ic->ic_state == IEEE80211_S_SCAN) {
    332  1.1  dyoung 			error = EINPROGRESS;
    333  1.1  dyoung 			break;
    334  1.1  dyoung 		}
    335  1.1  dyoung 		/* NB: we use the Prism2 format so we can return rate info */
    336  1.1  dyoung 		p2 = (struct wi_scan_p2_hdr *)wreq.wi_val;
    337  1.1  dyoung 		res = (void *)&p2[1];
    338  1.1  dyoung 		i = 0;
    339  1.1  dyoung 		TAILQ_FOREACH(ni, &ic->ic_node, ni_list) {
    340  1.1  dyoung 			if ((caddr_t)(res + 1) > (caddr_t)(&wreq + 1))
    341  1.1  dyoung 				break;
    342  1.1  dyoung 			res->wi_chan = ieee80211_chan2ieee(ic, ni->ni_chan);
    343  1.1  dyoung 			res->wi_noise = 0;
    344  1.7  dyoung 			res->wi_signal = (*ic->ic_node_getrssi)(ic, ni);
    345  1.1  dyoung 			IEEE80211_ADDR_COPY(res->wi_bssid, ni->ni_bssid);
    346  1.1  dyoung 			res->wi_interval = ni->ni_intval;
    347  1.1  dyoung 			res->wi_capinfo = ni->ni_capinfo;
    348  1.1  dyoung 			res->wi_ssid_len = ni->ni_esslen;
    349  1.1  dyoung 			memcpy(res->wi_ssid, ni->ni_essid, IEEE80211_NWID_LEN);
    350  1.1  dyoung 			/* NB: assumes wi_srates holds <= ni->ni_rates */
    351  1.1  dyoung 			memcpy(res->wi_srates, ni->ni_rates.rs_rates,
    352  1.1  dyoung 				sizeof(res->wi_srates));
    353  1.1  dyoung 			if (ni->ni_rates.rs_nrates < 10)
    354  1.1  dyoung 				res->wi_srates[ni->ni_rates.rs_nrates] = 0;
    355  1.1  dyoung 			res->wi_rate = ni->ni_rates.rs_rates[ni->ni_txrate];
    356  1.1  dyoung 			res->wi_rsvd = 0;
    357  1.1  dyoung 			res++, i++;
    358  1.1  dyoung 		}
    359  1.1  dyoung 		p2->wi_rsvd = 0;
    360  1.1  dyoung 		p2->wi_reason = i;
    361  1.1  dyoung 		wreq.wi_len = (sizeof(*p2) + sizeof(*res) * i) / 2;
    362  1.1  dyoung 		break;
    363  1.4  dyoung #endif /* 0 */
    364  1.4  dyoung #ifdef WICACHE
    365  1.1  dyoung 	case WI_RID_READ_CACHE:
    366  1.1  dyoung 		i = 0;
    367  1.1  dyoung 		TAILQ_FOREACH(ni, &ic->ic_node, ni_list) {
    368  1.1  dyoung 			if (i == (WI_MAX_DATALEN/sizeof(struct wi_sigcache))-1)
    369  1.1  dyoung 				break;
    370  1.1  dyoung 			IEEE80211_ADDR_COPY(wsc.macsrc, ni->ni_macaddr);
    371  1.1  dyoung 			memset(&wsc.ipsrc, 0, sizeof(wsc.ipsrc));
    372  1.7  dyoung 			wsc.signal = (*ic->ic_node_getrssi)(ic, ni);
    373  1.1  dyoung 			wsc.noise = 0;
    374  1.1  dyoung 			wsc.quality = 0;
    375  1.1  dyoung 			memcpy((caddr_t)wreq.wi_val + sizeof(wsc) * i,
    376  1.1  dyoung 			    &wsc, sizeof(wsc));
    377  1.1  dyoung 			i++;
    378  1.1  dyoung 		}
    379  1.1  dyoung 		wreq.wi_len = sizeof(wsc) * i / 2;
    380  1.1  dyoung 		break;
    381  1.4  dyoung #endif /* WICACHE */
    382  1.1  dyoung 	case WI_RID_SCAN_APS:
    383  1.1  dyoung 		error = EINVAL;
    384  1.1  dyoung 		break;
    385  1.1  dyoung 	default:
    386  1.1  dyoung 		error = EINVAL;
    387  1.1  dyoung 		break;
    388  1.1  dyoung 	}
    389  1.1  dyoung 	if (error == 0) {
    390  1.1  dyoung 		wreq.wi_len++;
    391  1.1  dyoung 		error = copyout(&wreq, ifr->ifr_data, sizeof(wreq));
    392  1.1  dyoung 	}
    393  1.1  dyoung 	return error;
    394  1.1  dyoung }
    395  1.1  dyoung 
    396  1.1  dyoung static int
    397  1.1  dyoung findrate(struct ieee80211com *ic, enum ieee80211_phymode mode, int rate)
    398  1.1  dyoung {
    399  1.1  dyoung #define	IEEERATE(_ic,_m,_i) \
    400  1.1  dyoung 	((_ic)->ic_sup_rates[_m].rs_rates[_i] & IEEE80211_RATE_VAL)
    401  1.1  dyoung 	int i, nrates = ic->ic_sup_rates[mode].rs_nrates;
    402  1.1  dyoung 	for (i = 0; i < nrates; i++)
    403  1.1  dyoung 		if (IEEERATE(ic, mode, i) == rate)
    404  1.1  dyoung 			return i;
    405  1.1  dyoung 	return -1;
    406  1.1  dyoung #undef IEEERATE
    407  1.1  dyoung }
    408  1.1  dyoung 
    409  1.7  dyoung /*
    410  1.7  dyoung  * Prepare to do a user-initiated scan for AP's.  If no
    411  1.7  dyoung  * current/default channel is setup or the current channel
    412  1.7  dyoung  * is invalid then pick the first available channel from
    413  1.7  dyoung  * the active list as the place to start the scan.
    414  1.7  dyoung  */
    415  1.7  dyoung static int
    416  1.7  dyoung ieee80211_setupscan(struct ieee80211com *ic)
    417  1.7  dyoung {
    418  1.7  dyoung 	u_char *chanlist = ic->ic_chan_active;
    419  1.7  dyoung 	int i;
    420  1.7  dyoung 
    421  1.7  dyoung 	if (ic->ic_ibss_chan == NULL ||
    422  1.7  dyoung 	    isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_ibss_chan))) {
    423  1.7  dyoung 		for (i = 0; i <= IEEE80211_CHAN_MAX; i++)
    424  1.7  dyoung 			if (isset(chanlist, i)) {
    425  1.7  dyoung 				ic->ic_ibss_chan = &ic->ic_channels[i];
    426  1.7  dyoung 				goto found;
    427  1.7  dyoung 			}
    428  1.7  dyoung 		return EINVAL;			/* no active channels */
    429  1.7  dyoung found:
    430  1.7  dyoung 		;
    431  1.7  dyoung 	}
    432  1.7  dyoung 	if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC ||
    433  1.7  dyoung 	    isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan)))
    434  1.7  dyoung 		ic->ic_bss->ni_chan = ic->ic_ibss_chan;
    435  1.7  dyoung 	/*
    436  1.7  dyoung 	 * XXX don't permit a scan to be started unless we
    437  1.7  dyoung 	 * know the device is ready.  For the moment this means
    438  1.7  dyoung 	 * the device is marked up as this is the required to
    439  1.7  dyoung 	 * initialize the hardware.  It would be better to permit
    440  1.7  dyoung 	 * scanning prior to being up but that'll require some
    441  1.7  dyoung 	 * changes to the infrastructure.
    442  1.7  dyoung 	 */
    443  1.7  dyoung 	return (ic->ic_if.if_flags & IFF_UP) ? 0 : ENETRESET;
    444  1.7  dyoung }
    445  1.7  dyoung 
    446  1.1  dyoung int
    447  1.1  dyoung ieee80211_cfgset(struct ifnet *ifp, u_long cmd, caddr_t data)
    448  1.1  dyoung {
    449  1.1  dyoung 	struct ieee80211com *ic = (void *)ifp;
    450  1.1  dyoung 	int i, j, len, error, rate;
    451  1.1  dyoung 	struct ifreq *ifr = (struct ifreq *)data;
    452  1.1  dyoung 	struct wi_ltv_keys *keys;
    453  1.1  dyoung 	struct wi_req wreq;
    454  1.1  dyoung 	u_char chanlist[roundup(IEEE80211_CHAN_MAX, NBBY)];
    455  1.1  dyoung 
    456  1.1  dyoung 	error = copyin(ifr->ifr_data, &wreq, sizeof(wreq));
    457  1.1  dyoung 	if (error)
    458  1.1  dyoung 		return error;
    459  1.1  dyoung 	len = wreq.wi_len ? (wreq.wi_len - 1) * 2 : 0;
    460  1.1  dyoung 	switch (wreq.wi_type) {
    461  1.1  dyoung 	case WI_RID_SERIALNO:
    462  1.1  dyoung 	case WI_RID_NODENAME:
    463  1.1  dyoung 		return EPERM;
    464  1.1  dyoung 	case WI_RID_CURRENT_SSID:
    465  1.1  dyoung 		return EPERM;
    466  1.1  dyoung 	case WI_RID_OWN_SSID:
    467  1.1  dyoung 	case WI_RID_DESIRED_SSID:
    468  1.1  dyoung 		if (le16toh(wreq.wi_val[0]) * 2 > len ||
    469  1.1  dyoung 		    le16toh(wreq.wi_val[0]) > IEEE80211_NWID_LEN) {
    470  1.1  dyoung 			error = ENOSPC;
    471  1.1  dyoung 			break;
    472  1.1  dyoung 		}
    473  1.1  dyoung 		memset(ic->ic_des_essid, 0, sizeof(ic->ic_des_essid));
    474  1.1  dyoung 		ic->ic_des_esslen = le16toh(wreq.wi_val[0]) * 2;
    475  1.1  dyoung 		memcpy(ic->ic_des_essid, &wreq.wi_val[1], ic->ic_des_esslen);
    476  1.1  dyoung 		error = ENETRESET;
    477  1.1  dyoung 		break;
    478  1.1  dyoung 	case WI_RID_CURRENT_BSSID:
    479  1.1  dyoung 		return EPERM;
    480  1.1  dyoung 	case WI_RID_OWN_CHNL:
    481  1.1  dyoung 		if (len != 2)
    482  1.1  dyoung 			return EINVAL;
    483  1.1  dyoung 		i = le16toh(wreq.wi_val[0]);
    484  1.1  dyoung 		if (i < 0 ||
    485  1.1  dyoung 		    i > IEEE80211_CHAN_MAX ||
    486  1.1  dyoung 		    isclr(ic->ic_chan_active, i))
    487  1.1  dyoung 			return EINVAL;
    488  1.1  dyoung 		ic->ic_ibss_chan = &ic->ic_channels[i];
    489  1.1  dyoung 		if (ic->ic_flags & IEEE80211_F_SIBSS)
    490  1.1  dyoung 			error = ENETRESET;
    491  1.1  dyoung 		break;
    492  1.1  dyoung 	case WI_RID_CURRENT_CHAN:
    493  1.1  dyoung 		return EPERM;
    494  1.1  dyoung 	case WI_RID_COMMS_QUALITY:
    495  1.1  dyoung 		return EPERM;
    496  1.1  dyoung 	case WI_RID_PROMISC:
    497  1.1  dyoung 		if (len != 2)
    498  1.1  dyoung 			return EINVAL;
    499  1.1  dyoung 		if (ifp->if_flags & IFF_PROMISC) {
    500  1.1  dyoung 			if (wreq.wi_val[0] == 0) {
    501  1.1  dyoung 				ifp->if_flags &= ~IFF_PROMISC;
    502  1.1  dyoung 				error = ENETRESET;
    503  1.1  dyoung 			}
    504  1.1  dyoung 		} else {
    505  1.1  dyoung 			if (wreq.wi_val[0] != 0) {
    506  1.1  dyoung 				ifp->if_flags |= IFF_PROMISC;
    507  1.1  dyoung 				error = ENETRESET;
    508  1.1  dyoung 			}
    509  1.1  dyoung 		}
    510  1.1  dyoung 		break;
    511  1.1  dyoung 	case WI_RID_PORTTYPE:
    512  1.1  dyoung 		if (len != 2)
    513  1.1  dyoung 			return EINVAL;
    514  1.1  dyoung 		switch (le16toh(wreq.wi_val[0])) {
    515  1.1  dyoung 		case IEEE80211_M_STA:
    516  1.1  dyoung 			break;
    517  1.1  dyoung 		case IEEE80211_M_IBSS:
    518  1.1  dyoung 			if (!(ic->ic_caps & IEEE80211_C_IBSS))
    519  1.1  dyoung 				return EINVAL;
    520  1.1  dyoung 			break;
    521  1.1  dyoung 		case IEEE80211_M_AHDEMO:
    522  1.1  dyoung 			if (ic->ic_phytype != IEEE80211_T_DS ||
    523  1.1  dyoung 			    !(ic->ic_caps & IEEE80211_C_AHDEMO))
    524  1.1  dyoung 				return EINVAL;
    525  1.1  dyoung 			break;
    526  1.1  dyoung 		case IEEE80211_M_HOSTAP:
    527  1.1  dyoung 			if (!(ic->ic_caps & IEEE80211_C_HOSTAP))
    528  1.1  dyoung 				return EINVAL;
    529  1.1  dyoung 			break;
    530  1.1  dyoung 		default:
    531  1.1  dyoung 			return EINVAL;
    532  1.1  dyoung 		}
    533  1.1  dyoung 		if (le16toh(wreq.wi_val[0]) != ic->ic_opmode) {
    534  1.1  dyoung 			ic->ic_opmode = le16toh(wreq.wi_val[0]);
    535  1.1  dyoung 			error = ENETRESET;
    536  1.1  dyoung 		}
    537  1.1  dyoung 		break;
    538  1.1  dyoung #if 0
    539  1.1  dyoung 	case WI_RID_MAC_NODE:
    540  1.1  dyoung 		if (len != IEEE80211_ADDR_LEN)
    541  1.1  dyoung 			return EINVAL;
    542  1.1  dyoung 		IEEE80211_ADDR_COPY(LLADDR(ifp->if_sadl), wreq.wi_val);
    543  1.1  dyoung 		/* if_init will copy lladdr into ic_myaddr */
    544  1.1  dyoung 		error = ENETRESET;
    545  1.1  dyoung 		break;
    546  1.1  dyoung #endif
    547  1.1  dyoung 	case WI_RID_TX_RATE:
    548  1.1  dyoung 		if (len != 2)
    549  1.1  dyoung 			return EINVAL;
    550  1.1  dyoung 		if (wreq.wi_val[0] == 0) {
    551  1.1  dyoung 			/* auto */
    552  1.1  dyoung 			ic->ic_fixed_rate = -1;
    553  1.1  dyoung 			break;
    554  1.1  dyoung 		}
    555  1.1  dyoung 		rate = 2 * le16toh(wreq.wi_val[0]);
    556  1.1  dyoung 		if (ic->ic_curmode == IEEE80211_MODE_AUTO) {
    557  1.1  dyoung 			/*
    558  1.1  dyoung 			 * In autoselect mode search for the rate.  We take
    559  1.1  dyoung 			 * the first instance which may not be right, but we
    560  1.1  dyoung 			 * are limited by the interface.  Note that we also
    561  1.1  dyoung 			 * lock the mode to insure the rate is meaningful
    562  1.1  dyoung 			 * when it is used.
    563  1.1  dyoung 			 */
    564  1.1  dyoung 			for (j = IEEE80211_MODE_11A;
    565  1.1  dyoung 			     j < IEEE80211_MODE_MAX; j++) {
    566  1.1  dyoung 				if ((ic->ic_modecaps & (1<<j)) == 0)
    567  1.1  dyoung 					continue;
    568  1.1  dyoung 				i = findrate(ic, j, rate);
    569  1.1  dyoung 				if (i != -1) {
    570  1.1  dyoung 					/* lock mode too */
    571  1.1  dyoung 					ic->ic_curmode = j;
    572  1.1  dyoung 					goto setrate;
    573  1.1  dyoung 				}
    574  1.1  dyoung 			}
    575  1.1  dyoung 		} else {
    576  1.1  dyoung 			i = findrate(ic, ic->ic_curmode, rate);
    577  1.1  dyoung 			if (i != -1)
    578  1.1  dyoung 				goto setrate;
    579  1.1  dyoung 		}
    580  1.1  dyoung 		return EINVAL;
    581  1.1  dyoung 	setrate:
    582  1.1  dyoung 		ic->ic_fixed_rate = i;
    583  1.1  dyoung 		error = ENETRESET;
    584  1.1  dyoung 		break;
    585  1.1  dyoung 	case WI_RID_CUR_TX_RATE:
    586  1.1  dyoung 		return EPERM;
    587  1.6  dyoung 	case WI_RID_FRAG_THRESH:
    588  1.6  dyoung 		if (len != 2)
    589  1.6  dyoung 			return EINVAL;
    590  1.6  dyoung 		ic->ic_fragthreshold = le16toh(wreq.wi_val[0]);
    591  1.6  dyoung 		error = ENETRESET;
    592  1.6  dyoung 		break;
    593  1.1  dyoung 	case WI_RID_RTS_THRESH:
    594  1.1  dyoung 		if (len != 2)
    595  1.1  dyoung 			return EINVAL;
    596  1.6  dyoung 		ic->ic_rtsthreshold = le16toh(wreq.wi_val[0]);
    597  1.6  dyoung 		error = ENETRESET;
    598  1.1  dyoung 		break;
    599  1.1  dyoung 	case WI_RID_CREATE_IBSS:
    600  1.1  dyoung 		if (len != 2)
    601  1.1  dyoung 			return EINVAL;
    602  1.1  dyoung 		if (wreq.wi_val[0] != 0) {
    603  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_IBSS) == 0)
    604  1.1  dyoung 				return EINVAL;
    605  1.1  dyoung 			if ((ic->ic_flags & IEEE80211_F_IBSSON) == 0) {
    606  1.1  dyoung 				ic->ic_flags |= IEEE80211_F_IBSSON;
    607  1.1  dyoung 				if (ic->ic_opmode == IEEE80211_M_IBSS &&
    608  1.1  dyoung 				    ic->ic_state == IEEE80211_S_SCAN)
    609  1.1  dyoung 					error = ENETRESET;
    610  1.1  dyoung 			}
    611  1.1  dyoung 		} else {
    612  1.1  dyoung 			if (ic->ic_flags & IEEE80211_F_IBSSON) {
    613  1.1  dyoung 				ic->ic_flags &= ~IEEE80211_F_IBSSON;
    614  1.1  dyoung 				if (ic->ic_flags & IEEE80211_F_SIBSS) {
    615  1.1  dyoung 					ic->ic_flags &= ~IEEE80211_F_SIBSS;
    616  1.1  dyoung 					error = ENETRESET;
    617  1.1  dyoung 				}
    618  1.1  dyoung 			}
    619  1.1  dyoung 		}
    620  1.1  dyoung 		break;
    621  1.1  dyoung 	case WI_RID_MICROWAVE_OVEN:
    622  1.1  dyoung 		if (len != 2)
    623  1.1  dyoung 			return EINVAL;
    624  1.1  dyoung 		if (wreq.wi_val[0] != 0)
    625  1.1  dyoung 			return EINVAL;		/* not supported */
    626  1.1  dyoung 		break;
    627  1.1  dyoung 	case WI_RID_ROAMING_MODE:
    628  1.1  dyoung 		if (len != 2)
    629  1.1  dyoung 			return EINVAL;
    630  1.1  dyoung 		if (le16toh(wreq.wi_val[0]) != 1)
    631  1.1  dyoung 			return EINVAL;		/* not supported */
    632  1.1  dyoung 		break;
    633  1.1  dyoung 	case WI_RID_SYSTEM_SCALE:
    634  1.1  dyoung 		if (len != 2)
    635  1.1  dyoung 			return EINVAL;
    636  1.1  dyoung 		if (le16toh(wreq.wi_val[0]) != 1)
    637  1.1  dyoung 			return EINVAL;		/* not supported */
    638  1.1  dyoung 		break;
    639  1.1  dyoung 	case WI_RID_PM_ENABLED:
    640  1.1  dyoung 		if (len != 2)
    641  1.1  dyoung 			return EINVAL;
    642  1.1  dyoung 		if (wreq.wi_val[0] != 0) {
    643  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_PMGT) == 0)
    644  1.1  dyoung 				return EINVAL;
    645  1.1  dyoung 			if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) {
    646  1.1  dyoung 				ic->ic_flags |= IEEE80211_F_PMGTON;
    647  1.1  dyoung 				error = ENETRESET;
    648  1.1  dyoung 			}
    649  1.1  dyoung 		} else {
    650  1.1  dyoung 			if (ic->ic_flags & IEEE80211_F_PMGTON) {
    651  1.1  dyoung 				ic->ic_flags &= ~IEEE80211_F_PMGTON;
    652  1.1  dyoung 				error = ENETRESET;
    653  1.1  dyoung 			}
    654  1.1  dyoung 		}
    655  1.1  dyoung 		break;
    656  1.1  dyoung 	case WI_RID_MAX_SLEEP:
    657  1.1  dyoung 		if (len != 2)
    658  1.1  dyoung 			return EINVAL;
    659  1.1  dyoung 		ic->ic_lintval = le16toh(wreq.wi_val[0]);
    660  1.1  dyoung 		if (ic->ic_flags & IEEE80211_F_PMGTON)
    661  1.1  dyoung 			error = ENETRESET;
    662  1.1  dyoung 		break;
    663  1.1  dyoung 	case WI_RID_CUR_BEACON_INT:
    664  1.1  dyoung 		return EPERM;
    665  1.1  dyoung 	case WI_RID_WEP_AVAIL:
    666  1.1  dyoung 		return EPERM;
    667  1.1  dyoung 	case WI_RID_CNFAUTHMODE:
    668  1.1  dyoung 		if (len != 2)
    669  1.1  dyoung 			return EINVAL;
    670  1.1  dyoung 		if (le16toh(wreq.wi_val[0]) != 1)
    671  1.1  dyoung 			return EINVAL;		/* TODO: shared key auth */
    672  1.1  dyoung 		break;
    673  1.1  dyoung 	case WI_RID_ENCRYPTION:
    674  1.1  dyoung 		if (len != 2)
    675  1.1  dyoung 			return EINVAL;
    676  1.1  dyoung 		if (wreq.wi_val[0] != 0) {
    677  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0)
    678  1.1  dyoung 				return EINVAL;
    679  1.1  dyoung 			if ((ic->ic_flags & IEEE80211_F_WEPON) == 0) {
    680  1.1  dyoung 				ic->ic_flags |= IEEE80211_F_WEPON;
    681  1.1  dyoung 				error = ENETRESET;
    682  1.1  dyoung 			}
    683  1.1  dyoung 		} else {
    684  1.1  dyoung 			if (ic->ic_flags & IEEE80211_F_WEPON) {
    685  1.1  dyoung 				ic->ic_flags &= ~IEEE80211_F_WEPON;
    686  1.1  dyoung 				error = ENETRESET;
    687  1.1  dyoung 			}
    688  1.1  dyoung 		}
    689  1.1  dyoung 		break;
    690  1.1  dyoung 	case WI_RID_TX_CRYPT_KEY:
    691  1.1  dyoung 		if (len != 2)
    692  1.1  dyoung 			return EINVAL;
    693  1.1  dyoung 		i = le16toh(wreq.wi_val[0]);
    694  1.1  dyoung 		if (i >= IEEE80211_WEP_NKID)
    695  1.1  dyoung 			return EINVAL;
    696  1.1  dyoung 		ic->ic_wep_txkey = i;
    697  1.1  dyoung 		break;
    698  1.1  dyoung 	case WI_RID_DEFLT_CRYPT_KEYS:
    699  1.1  dyoung 		if (len != sizeof(struct wi_ltv_keys))
    700  1.1  dyoung 			return EINVAL;
    701  1.1  dyoung 		keys = (struct wi_ltv_keys *)&wreq;
    702  1.1  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
    703  1.1  dyoung 			len = le16toh(keys->wi_keys[i].wi_keylen);
    704  1.1  dyoung 			if (len != 0 && len < IEEE80211_WEP_KEYLEN)
    705  1.1  dyoung 				return EINVAL;
    706  1.1  dyoung 			if (len > sizeof(ic->ic_nw_keys[i].wk_key))
    707  1.1  dyoung 				return EINVAL;
    708  1.1  dyoung 		}
    709  1.1  dyoung 		memset(ic->ic_nw_keys, 0, sizeof(ic->ic_nw_keys));
    710  1.1  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
    711  1.1  dyoung 			len = le16toh(keys->wi_keys[i].wi_keylen);
    712  1.1  dyoung 			ic->ic_nw_keys[i].wk_len = len;
    713  1.1  dyoung 			memcpy(ic->ic_nw_keys[i].wk_key,
    714  1.1  dyoung 			    keys->wi_keys[i].wi_keydat, len);
    715  1.1  dyoung 		}
    716  1.1  dyoung 		error = ENETRESET;
    717  1.1  dyoung 		break;
    718  1.1  dyoung 	case WI_RID_MAX_DATALEN:
    719  1.1  dyoung 		if (len != 2)
    720  1.1  dyoung 			return EINVAL;
    721  1.1  dyoung 		len = le16toh(wreq.wi_val[0]);
    722  1.1  dyoung 		if (len < 350 /* ? */ || len > IEEE80211_MAX_LEN)
    723  1.1  dyoung 			return EINVAL;
    724  1.1  dyoung 		if (len != IEEE80211_MAX_LEN)
    725  1.1  dyoung 			return EINVAL;		/* TODO: fragment */
    726  1.1  dyoung 		ic->ic_fragthreshold = len;
    727  1.1  dyoung 		error = ENETRESET;
    728  1.1  dyoung 		break;
    729  1.1  dyoung 	case WI_RID_IFACE_STATS:
    730  1.1  dyoung 		error = EPERM;
    731  1.1  dyoung 		break;
    732  1.1  dyoung 	case WI_RID_SCAN_REQ:			/* XXX wicontrol */
    733  1.1  dyoung 		if (ic->ic_opmode == IEEE80211_M_HOSTAP)
    734  1.1  dyoung 			break;
    735  1.7  dyoung 		error = ieee80211_setupscan(ic);
    736  1.7  dyoung 		if (error == 0)
    737  1.7  dyoung 			error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1);
    738  1.1  dyoung 		break;
    739  1.1  dyoung 	case WI_RID_SCAN_APS:
    740  1.1  dyoung 		if (ic->ic_opmode == IEEE80211_M_HOSTAP)
    741  1.1  dyoung 			break;
    742  1.1  dyoung 		len--;			/* XXX: tx rate? */
    743  1.1  dyoung 		/* FALLTHRU */
    744  1.1  dyoung 	case WI_RID_CHANNEL_LIST:
    745  1.1  dyoung 		memset(chanlist, 0, sizeof(chanlist));
    746  1.1  dyoung 		/*
    747  1.1  dyoung 		 * Since channel 0 is not available for DS, channel 1
    748  1.1  dyoung 		 * is assigned to LSB on WaveLAN.
    749  1.1  dyoung 		 */
    750  1.1  dyoung 		if (ic->ic_phytype == IEEE80211_T_DS)
    751  1.1  dyoung 			i = 1;
    752  1.1  dyoung 		else
    753  1.1  dyoung 			i = 0;
    754  1.1  dyoung 		for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) {
    755  1.1  dyoung 			if ((j / 8) >= len)
    756  1.1  dyoung 				break;
    757  1.1  dyoung 			if (isclr((u_int8_t *)wreq.wi_val, j))
    758  1.1  dyoung 				continue;
    759  1.1  dyoung 			if (isclr(ic->ic_chan_active, i)) {
    760  1.1  dyoung 				if (wreq.wi_type != WI_RID_CHANNEL_LIST)
    761  1.1  dyoung 					continue;
    762  1.1  dyoung 				if (isclr(ic->ic_chan_avail, i))
    763  1.1  dyoung 					return EPERM;
    764  1.1  dyoung 			}
    765  1.1  dyoung 			setbit(chanlist, i);
    766  1.1  dyoung 		}
    767  1.1  dyoung 		memcpy(ic->ic_chan_active, chanlist,
    768  1.1  dyoung 		    sizeof(ic->ic_chan_active));
    769  1.7  dyoung 		error = ieee80211_setupscan(ic);
    770  1.7  dyoung 		if (wreq.wi_type == WI_RID_CHANNEL_LIST) {
    771  1.7  dyoung 			/* NB: ignore error from ieee80211_setupscan */
    772  1.1  dyoung 			error = ENETRESET;
    773  1.7  dyoung 		} else if (error == 0)
    774  1.1  dyoung 			error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1);
    775  1.1  dyoung 		break;
    776  1.1  dyoung 	default:
    777  1.1  dyoung 		error = EINVAL;
    778  1.1  dyoung 		break;
    779  1.1  dyoung 	}
    780  1.1  dyoung 	return error;
    781  1.1  dyoung }
    782  1.1  dyoung 
    783  1.2  dyoung #ifdef __FreeBSD__
    784  1.1  dyoung int
    785  1.1  dyoung ieee80211_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
    786  1.1  dyoung {
    787  1.1  dyoung 	struct ieee80211com *ic = (void *)ifp;
    788  1.1  dyoung 	int error = 0;
    789  1.1  dyoung 	u_int kid, len;
    790  1.1  dyoung 	struct ieee80211req *ireq;
    791  1.7  dyoung 	struct ifreq *ifr;
    792  1.1  dyoung 	u_int8_t tmpkey[IEEE80211_KEYBUF_SIZE];
    793  1.1  dyoung 	char tmpssid[IEEE80211_NWID_LEN];
    794  1.1  dyoung 	struct ieee80211_channel *chan;
    795  1.1  dyoung 
    796  1.1  dyoung 	switch (cmd) {
    797  1.1  dyoung 	case SIOCSIFMEDIA:
    798  1.1  dyoung 	case SIOCGIFMEDIA:
    799  1.1  dyoung 		error = ifmedia_ioctl(ifp, (struct ifreq *) data,
    800  1.1  dyoung 				&ic->ic_media, cmd);
    801  1.1  dyoung 		break;
    802  1.1  dyoung 	case SIOCG80211:
    803  1.1  dyoung 		ireq = (struct ieee80211req *) data;
    804  1.1  dyoung 		switch (ireq->i_type) {
    805  1.1  dyoung 		case IEEE80211_IOC_SSID:
    806  1.1  dyoung 			switch (ic->ic_state) {
    807  1.1  dyoung 			case IEEE80211_S_INIT:
    808  1.1  dyoung 			case IEEE80211_S_SCAN:
    809  1.1  dyoung 				ireq->i_len = ic->ic_des_esslen;
    810  1.1  dyoung 				memcpy(tmpssid, ic->ic_des_essid, ireq->i_len);
    811  1.1  dyoung 				break;
    812  1.1  dyoung 			default:
    813  1.1  dyoung 				ireq->i_len = ic->ic_bss->ni_esslen;
    814  1.1  dyoung 				memcpy(tmpssid, ic->ic_bss->ni_essid,
    815  1.1  dyoung 					ireq->i_len);
    816  1.1  dyoung 				break;
    817  1.1  dyoung 			}
    818  1.1  dyoung 			error = copyout(tmpssid, ireq->i_data, ireq->i_len);
    819  1.1  dyoung 			break;
    820  1.1  dyoung 		case IEEE80211_IOC_NUMSSIDS:
    821  1.1  dyoung 			ireq->i_val = 1;
    822  1.1  dyoung 			break;
    823  1.1  dyoung 		case IEEE80211_IOC_WEP:
    824  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0) {
    825  1.1  dyoung 				ireq->i_val = IEEE80211_WEP_NOSUP;
    826  1.1  dyoung 			} else {
    827  1.1  dyoung 				if (ic->ic_flags & IEEE80211_F_WEPON) {
    828  1.1  dyoung 					ireq->i_val =
    829  1.1  dyoung 					    IEEE80211_WEP_MIXED;
    830  1.1  dyoung 				} else {
    831  1.1  dyoung 					ireq->i_val =
    832  1.1  dyoung 					    IEEE80211_WEP_OFF;
    833  1.1  dyoung 				}
    834  1.1  dyoung 			}
    835  1.1  dyoung 			break;
    836  1.1  dyoung 		case IEEE80211_IOC_WEPKEY:
    837  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0) {
    838  1.1  dyoung 				error = EINVAL;
    839  1.1  dyoung 				break;
    840  1.1  dyoung 			}
    841  1.1  dyoung 			kid = (u_int) ireq->i_val;
    842  1.1  dyoung 			if (kid >= IEEE80211_WEP_NKID) {
    843  1.1  dyoung 				error = EINVAL;
    844  1.1  dyoung 				break;
    845  1.1  dyoung 			}
    846  1.1  dyoung 			len = (u_int) ic->ic_nw_keys[kid].wk_len;
    847  1.1  dyoung 			/* NB: only root can read WEP keys */
    848  1.7  dyoung 			if (suser(curthread) == 0) {
    849  1.1  dyoung 				bcopy(ic->ic_nw_keys[kid].wk_key, tmpkey, len);
    850  1.1  dyoung 			} else {
    851  1.1  dyoung 				bzero(tmpkey, len);
    852  1.1  dyoung 			}
    853  1.1  dyoung 			ireq->i_len = len;
    854  1.1  dyoung 			error = copyout(tmpkey, ireq->i_data, len);
    855  1.1  dyoung 			break;
    856  1.1  dyoung 		case IEEE80211_IOC_NUMWEPKEYS:
    857  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0)
    858  1.1  dyoung 				error = EINVAL;
    859  1.1  dyoung 			else
    860  1.1  dyoung 				ireq->i_val = IEEE80211_WEP_NKID;
    861  1.1  dyoung 			break;
    862  1.1  dyoung 		case IEEE80211_IOC_WEPTXKEY:
    863  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0)
    864  1.1  dyoung 				error = EINVAL;
    865  1.1  dyoung 			else
    866  1.1  dyoung 				ireq->i_val = ic->ic_wep_txkey;
    867  1.1  dyoung 			break;
    868  1.1  dyoung 		case IEEE80211_IOC_AUTHMODE:
    869  1.1  dyoung 			ireq->i_val = IEEE80211_AUTH_OPEN;
    870  1.1  dyoung 			break;
    871  1.1  dyoung 		case IEEE80211_IOC_CHANNEL:
    872  1.1  dyoung 			switch (ic->ic_state) {
    873  1.1  dyoung 			case IEEE80211_S_INIT:
    874  1.1  dyoung 			case IEEE80211_S_SCAN:
    875  1.1  dyoung 				if (ic->ic_opmode == IEEE80211_M_STA)
    876  1.1  dyoung 					chan = ic->ic_des_chan;
    877  1.1  dyoung 				else
    878  1.1  dyoung 					chan = ic->ic_ibss_chan;
    879  1.1  dyoung 				break;
    880  1.1  dyoung 			default:
    881  1.1  dyoung 				chan = ic->ic_bss->ni_chan;
    882  1.1  dyoung 				break;
    883  1.1  dyoung 			}
    884  1.1  dyoung 			ireq->i_val = ieee80211_chan2ieee(ic, chan);
    885  1.1  dyoung 			break;
    886  1.1  dyoung 		case IEEE80211_IOC_POWERSAVE:
    887  1.1  dyoung 			if (ic->ic_flags & IEEE80211_F_PMGTON)
    888  1.1  dyoung 				ireq->i_val = IEEE80211_POWERSAVE_ON;
    889  1.1  dyoung 			else
    890  1.1  dyoung 				ireq->i_val = IEEE80211_POWERSAVE_OFF;
    891  1.1  dyoung 			break;
    892  1.1  dyoung 		case IEEE80211_IOC_POWERSAVESLEEP:
    893  1.1  dyoung 			ireq->i_val = ic->ic_lintval;
    894  1.1  dyoung 			break;
    895  1.7  dyoung 		case IEEE80211_IOC_RTSTHRESHOLD:
    896  1.1  dyoung 			ireq->i_val = ic->ic_rtsthreshold;
    897  1.1  dyoung 			break;
    898  1.1  dyoung 		default:
    899  1.1  dyoung 			error = EINVAL;
    900  1.1  dyoung 		}
    901  1.1  dyoung 		break;
    902  1.1  dyoung 	case SIOCS80211:
    903  1.4  dyoung 		error = suser(curproc->p_ucred, &curproc->p_acflag);
    904  1.1  dyoung 		if (error)
    905  1.1  dyoung 			break;
    906  1.1  dyoung 		ireq = (struct ieee80211req *) data;
    907  1.1  dyoung 		switch (ireq->i_type) {
    908  1.1  dyoung 		case IEEE80211_IOC_SSID:
    909  1.1  dyoung 			if (ireq->i_val != 0 ||
    910  1.1  dyoung 			    ireq->i_len > IEEE80211_NWID_LEN) {
    911  1.1  dyoung 				error = EINVAL;
    912  1.1  dyoung 				break;
    913  1.1  dyoung 			}
    914  1.1  dyoung 			error = copyin(ireq->i_data, tmpssid, ireq->i_len);
    915  1.1  dyoung 			if (error)
    916  1.1  dyoung 				break;
    917  1.1  dyoung 			memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN);
    918  1.1  dyoung 			ic->ic_des_esslen = ireq->i_len;
    919  1.1  dyoung 			memcpy(ic->ic_des_essid, tmpssid, ireq->i_len);
    920  1.1  dyoung 			error = ENETRESET;
    921  1.1  dyoung 			break;
    922  1.1  dyoung 		case IEEE80211_IOC_WEP:
    923  1.1  dyoung 			/*
    924  1.1  dyoung 			 * These cards only support one mode so
    925  1.1  dyoung 			 * we just turn wep on if what ever is
    926  1.1  dyoung 			 * passed in is not OFF.
    927  1.1  dyoung 			 */
    928  1.1  dyoung 			if (ireq->i_val == IEEE80211_WEP_OFF) {
    929  1.1  dyoung 				ic->ic_flags &= ~IEEE80211_F_WEPON;
    930  1.1  dyoung 			} else {
    931  1.1  dyoung 				ic->ic_flags |= IEEE80211_F_WEPON;
    932  1.1  dyoung 			}
    933  1.1  dyoung 			error = ENETRESET;
    934  1.1  dyoung 			break;
    935  1.1  dyoung 		case IEEE80211_IOC_WEPKEY:
    936  1.1  dyoung 			if ((ic->ic_caps & IEEE80211_C_WEP) == 0) {
    937  1.1  dyoung 				error = EINVAL;
    938  1.1  dyoung 				break;
    939  1.1  dyoung 			}
    940  1.1  dyoung 			kid = (u_int) ireq->i_val;
    941  1.1  dyoung 			if (kid >= IEEE80211_WEP_NKID) {
    942  1.1  dyoung 				error = EINVAL;
    943  1.1  dyoung 				break;
    944  1.1  dyoung 			}
    945  1.1  dyoung 			if (ireq->i_len > sizeof(tmpkey)) {
    946  1.1  dyoung 				error = EINVAL;
    947  1.1  dyoung 				break;
    948  1.1  dyoung 			}
    949  1.1  dyoung 			memset(tmpkey, 0, sizeof(tmpkey));
    950  1.1  dyoung 			error = copyin(ireq->i_data, tmpkey, ireq->i_len);
    951  1.1  dyoung 			if (error)
    952  1.1  dyoung 				break;
    953  1.1  dyoung 			memcpy(ic->ic_nw_keys[kid].wk_key, tmpkey,
    954  1.1  dyoung 				sizeof(tmpkey));
    955  1.1  dyoung 			ic->ic_nw_keys[kid].wk_len = ireq->i_len;
    956  1.1  dyoung 			error = ENETRESET;
    957  1.1  dyoung 			break;
    958  1.1  dyoung 		case IEEE80211_IOC_WEPTXKEY:
    959  1.1  dyoung 			kid = (u_int) ireq->i_val;
    960  1.1  dyoung 			if (kid >= IEEE80211_WEP_NKID) {
    961  1.1  dyoung 				error = EINVAL;
    962  1.1  dyoung 				break;
    963  1.1  dyoung 			}
    964  1.1  dyoung 			ic->ic_wep_txkey = kid;
    965  1.1  dyoung 			error = ENETRESET;
    966  1.1  dyoung 			break;
    967  1.1  dyoung #if 0
    968  1.1  dyoung 		case IEEE80211_IOC_AUTHMODE:
    969  1.1  dyoung 			sc->wi_authmode = ireq->i_val;
    970  1.1  dyoung 			break;
    971  1.1  dyoung #endif
    972  1.1  dyoung 		case IEEE80211_IOC_CHANNEL:
    973  1.1  dyoung 			/* XXX 0xffff overflows 16-bit signed */
    974  1.1  dyoung 			if (ireq->i_val == 0 ||
    975  1.1  dyoung 			    ireq->i_val == (int16_t) IEEE80211_CHAN_ANY)
    976  1.1  dyoung 				ic->ic_des_chan = IEEE80211_CHAN_ANYC;
    977  1.1  dyoung 			else if ((u_int) ireq->i_val > IEEE80211_CHAN_MAX ||
    978  1.1  dyoung 			    isclr(ic->ic_chan_active, ireq->i_val)) {
    979  1.1  dyoung 				error = EINVAL;
    980  1.1  dyoung 				break;
    981  1.1  dyoung 			} else
    982  1.1  dyoung 				ic->ic_ibss_chan = ic->ic_des_chan =
    983  1.1  dyoung 					&ic->ic_channels[ireq->i_val];
    984  1.1  dyoung 			switch (ic->ic_state) {
    985  1.1  dyoung 			case IEEE80211_S_INIT:
    986  1.1  dyoung 			case IEEE80211_S_SCAN:
    987  1.1  dyoung 				error = ENETRESET;
    988  1.1  dyoung 				break;
    989  1.1  dyoung 			default:
    990  1.1  dyoung 				if (ic->ic_opmode == IEEE80211_M_STA) {
    991  1.1  dyoung 					if (ic->ic_des_chan != IEEE80211_CHAN_ANYC &&
    992  1.1  dyoung 					    ic->ic_bss->ni_chan != ic->ic_des_chan)
    993  1.1  dyoung 						error = ENETRESET;
    994  1.1  dyoung 				} else {
    995  1.1  dyoung 					if (ic->ic_bss->ni_chan != ic->ic_ibss_chan)
    996  1.1  dyoung 						error = ENETRESET;
    997  1.1  dyoung 				}
    998  1.1  dyoung 				break;
    999  1.1  dyoung 			}
   1000  1.1  dyoung 			break;
   1001  1.1  dyoung 		case IEEE80211_IOC_POWERSAVE:
   1002  1.1  dyoung 			switch (ireq->i_val) {
   1003  1.1  dyoung 			case IEEE80211_POWERSAVE_OFF:
   1004  1.1  dyoung 				if (ic->ic_flags & IEEE80211_F_PMGTON) {
   1005  1.1  dyoung 					ic->ic_flags &= ~IEEE80211_F_PMGTON;
   1006  1.1  dyoung 					error = ENETRESET;
   1007  1.1  dyoung 				}
   1008  1.1  dyoung 				break;
   1009  1.1  dyoung 			case IEEE80211_POWERSAVE_ON:
   1010  1.1  dyoung 				if ((ic->ic_caps & IEEE80211_C_PMGT) == 0)
   1011  1.1  dyoung 					error = EINVAL;
   1012  1.1  dyoung 				else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) {
   1013  1.1  dyoung 					ic->ic_flags |= IEEE80211_F_PMGTON;
   1014  1.1  dyoung 					error = ENETRESET;
   1015  1.1  dyoung 				}
   1016  1.1  dyoung 				break;
   1017  1.1  dyoung 			default:
   1018  1.1  dyoung 				error = EINVAL;
   1019  1.1  dyoung 				break;
   1020  1.1  dyoung 			}
   1021  1.1  dyoung 			break;
   1022  1.1  dyoung 		case IEEE80211_IOC_POWERSAVESLEEP:
   1023  1.1  dyoung 			if (ireq->i_val < 0) {
   1024  1.1  dyoung 				error = EINVAL;
   1025  1.1  dyoung 				break;
   1026  1.1  dyoung 			}
   1027  1.1  dyoung 			ic->ic_lintval = ireq->i_val;
   1028  1.1  dyoung 			error = ENETRESET;
   1029  1.1  dyoung 			break;
   1030  1.7  dyoung 		case IEEE80211_IOC_RTSTHRESHOLD:
   1031  1.1  dyoung 			if (!(IEEE80211_RTS_MIN < ireq->i_val &&
   1032  1.2  dyoung 			      ireq->i_val <= IEEE80211_RTS_MAX + 1)) {
   1033  1.1  dyoung 				error = EINVAL;
   1034  1.1  dyoung 				break;
   1035  1.1  dyoung 			}
   1036  1.1  dyoung 			ic->ic_rtsthreshold = ireq->i_val;
   1037  1.1  dyoung 			error = ENETRESET;
   1038  1.1  dyoung 			break;
   1039  1.1  dyoung 		default:
   1040  1.1  dyoung 			error = EINVAL;
   1041  1.1  dyoung 			break;
   1042  1.1  dyoung 		}
   1043  1.1  dyoung 		break;
   1044  1.1  dyoung 	case SIOCGIFGENERIC:
   1045  1.1  dyoung 		error = ieee80211_cfgget(ifp, cmd, data);
   1046  1.1  dyoung 		break;
   1047  1.1  dyoung 	case SIOCSIFGENERIC:
   1048  1.4  dyoung 		error = suser(curproc->p_ucred, &curproc->p_acflag);
   1049  1.1  dyoung 		if (error)
   1050  1.1  dyoung 			break;
   1051  1.1  dyoung 		error = ieee80211_cfgset(ifp, cmd, data);
   1052  1.1  dyoung 		break;
   1053  1.1  dyoung 	default:
   1054  1.1  dyoung 		error = ether_ioctl(ifp, cmd, data);
   1055  1.1  dyoung 		break;
   1056  1.1  dyoung 	}
   1057  1.1  dyoung 	return error;
   1058  1.1  dyoung }
   1059  1.2  dyoung #endif /* __FreeBSD__ */
   1060  1.2  dyoung 
   1061  1.2  dyoung #ifdef __NetBSD__
   1062  1.2  dyoung int
   1063  1.2  dyoung ieee80211_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
   1064  1.2  dyoung {
   1065  1.2  dyoung 	struct ieee80211com *ic = (void *)ifp;
   1066  1.2  dyoung 	struct ifreq *ifr = (struct ifreq *)data;
   1067  1.2  dyoung 	int i, error = 0;
   1068  1.2  dyoung 	struct ieee80211_nwid nwid;
   1069  1.2  dyoung 	struct ieee80211_nwkey *nwkey;
   1070  1.2  dyoung 	struct ieee80211_power *power;
   1071  1.2  dyoung 	struct ieee80211_bssid *bssid;
   1072  1.2  dyoung 	struct ieee80211chanreq *chanreq;
   1073  1.2  dyoung 	struct ieee80211_channel *chan;
   1074  1.2  dyoung 	struct ieee80211_wepkey keys[IEEE80211_WEP_NKID];
   1075  1.2  dyoung 	static const u_int8_t empty_macaddr[IEEE80211_ADDR_LEN] = {
   1076  1.2  dyoung 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00
   1077  1.2  dyoung 	};
   1078  1.2  dyoung 
   1079  1.2  dyoung 	switch (cmd) {
   1080  1.2  dyoung 	case SIOCSIFMEDIA:
   1081  1.2  dyoung 	case SIOCGIFMEDIA:
   1082  1.2  dyoung 		error = ifmedia_ioctl(ifp, ifr, &ic->ic_media, cmd);
   1083  1.2  dyoung 		break;
   1084  1.2  dyoung 	case SIOCS80211NWID:
   1085  1.2  dyoung 		if ((error = copyin(ifr->ifr_data, &nwid, sizeof(nwid))) != 0)
   1086  1.2  dyoung 			break;
   1087  1.2  dyoung 		if (nwid.i_len > IEEE80211_NWID_LEN) {
   1088  1.2  dyoung 			error = EINVAL;
   1089  1.2  dyoung 			break;
   1090  1.2  dyoung 		}
   1091  1.2  dyoung 		memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN);
   1092  1.2  dyoung 		ic->ic_des_esslen = nwid.i_len;
   1093  1.2  dyoung 		memcpy(ic->ic_des_essid, nwid.i_nwid, nwid.i_len);
   1094  1.2  dyoung 		error = ENETRESET;
   1095  1.2  dyoung 		break;
   1096  1.2  dyoung 	case SIOCG80211NWID:
   1097  1.2  dyoung 		memset(&nwid, 0, sizeof(nwid));
   1098  1.2  dyoung 		switch (ic->ic_state) {
   1099  1.2  dyoung 		case IEEE80211_S_INIT:
   1100  1.2  dyoung 		case IEEE80211_S_SCAN:
   1101  1.2  dyoung 			nwid.i_len = ic->ic_des_esslen;
   1102  1.2  dyoung 			memcpy(nwid.i_nwid, ic->ic_des_essid, nwid.i_len);
   1103  1.2  dyoung 			break;
   1104  1.2  dyoung 		default:
   1105  1.2  dyoung 			nwid.i_len = ic->ic_bss->ni_esslen;
   1106  1.2  dyoung 			memcpy(nwid.i_nwid, ic->ic_bss->ni_essid, nwid.i_len);
   1107  1.2  dyoung 			break;
   1108  1.2  dyoung 		}
   1109  1.2  dyoung 		error = copyout(&nwid, ifr->ifr_data, sizeof(nwid));
   1110  1.2  dyoung 		break;
   1111  1.2  dyoung 	case SIOCS80211NWKEY:
   1112  1.2  dyoung 		nwkey = (struct ieee80211_nwkey *)data;
   1113  1.5  dyoung 		if ((ic->ic_caps & IEEE80211_C_WEP) == 0 &&
   1114  1.2  dyoung 		    nwkey->i_wepon != IEEE80211_NWKEY_OPEN) {
   1115  1.2  dyoung 			error = EINVAL;
   1116  1.2  dyoung 			break;
   1117  1.2  dyoung 		}
   1118  1.2  dyoung 		/* check and copy keys */
   1119  1.2  dyoung 		memset(keys, 0, sizeof(keys));
   1120  1.2  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
   1121  1.2  dyoung 			keys[i].wk_len = nwkey->i_key[i].i_keylen;
   1122  1.2  dyoung 			if ((keys[i].wk_len > 0 &&
   1123  1.2  dyoung 			    keys[i].wk_len < IEEE80211_WEP_KEYLEN) ||
   1124  1.2  dyoung 			    keys[i].wk_len > sizeof(keys[i].wk_key)) {
   1125  1.2  dyoung 				error = EINVAL;
   1126  1.2  dyoung 				break;
   1127  1.2  dyoung 			}
   1128  1.2  dyoung 			if (keys[i].wk_len <= 0)
   1129  1.2  dyoung 				continue;
   1130  1.2  dyoung 			if ((error = copyin(nwkey->i_key[i].i_keydat,
   1131  1.2  dyoung 			    keys[i].wk_key, keys[i].wk_len)) != 0)
   1132  1.2  dyoung 				break;
   1133  1.2  dyoung 		}
   1134  1.2  dyoung 		if (error)
   1135  1.2  dyoung 			break;
   1136  1.2  dyoung 		i = nwkey->i_defkid - 1;
   1137  1.2  dyoung 		if (i < 0 || i >= IEEE80211_WEP_NKID ||
   1138  1.2  dyoung 		    keys[i].wk_len == 0 ||
   1139  1.2  dyoung 		    (keys[i].wk_len == -1 && ic->ic_nw_keys[i].wk_len == 0)) {
   1140  1.2  dyoung 			if (nwkey->i_wepon != IEEE80211_NWKEY_OPEN) {
   1141  1.2  dyoung 				error = EINVAL;
   1142  1.2  dyoung 				break;
   1143  1.2  dyoung 			}
   1144  1.2  dyoung 		} else
   1145  1.2  dyoung 			ic->ic_wep_txkey = i;
   1146  1.2  dyoung 		/* save the key */
   1147  1.2  dyoung 		if (nwkey->i_wepon == IEEE80211_NWKEY_OPEN)
   1148  1.2  dyoung 			ic->ic_flags &= ~IEEE80211_F_WEPON;
   1149  1.2  dyoung 		else
   1150  1.2  dyoung 			ic->ic_flags |= IEEE80211_F_WEPON;
   1151  1.2  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
   1152  1.2  dyoung 			if (keys[i].wk_len < 0)
   1153  1.2  dyoung 				continue;
   1154  1.2  dyoung 			ic->ic_nw_keys[i].wk_len = keys[i].wk_len;
   1155  1.2  dyoung 			memcpy(ic->ic_nw_keys[i].wk_key, keys[i].wk_key,
   1156  1.2  dyoung 			    sizeof(keys[i].wk_key));
   1157  1.2  dyoung 		}
   1158  1.2  dyoung 		error = ENETRESET;
   1159  1.2  dyoung 		break;
   1160  1.2  dyoung 	case SIOCG80211NWKEY:
   1161  1.2  dyoung 		nwkey = (struct ieee80211_nwkey *)data;
   1162  1.2  dyoung 		if (ic->ic_flags & IEEE80211_F_WEPON)
   1163  1.2  dyoung 			nwkey->i_wepon = IEEE80211_NWKEY_WEP;
   1164  1.2  dyoung 		else
   1165  1.2  dyoung 			nwkey->i_wepon = IEEE80211_NWKEY_OPEN;
   1166  1.2  dyoung 		nwkey->i_defkid = ic->ic_wep_txkey + 1;
   1167  1.2  dyoung 		for (i = 0; i < IEEE80211_WEP_NKID; i++) {
   1168  1.2  dyoung 			if (nwkey->i_key[i].i_keydat == NULL)
   1169  1.2  dyoung 				continue;
   1170  1.2  dyoung 			/* do not show any keys to non-root user */
   1171  1.2  dyoung 			if ((error = suser(curproc->p_ucred,
   1172  1.2  dyoung 			    &curproc->p_acflag)) != 0)
   1173  1.2  dyoung 				break;
   1174  1.2  dyoung 			nwkey->i_key[i].i_keylen = ic->ic_nw_keys[i].wk_len;
   1175  1.2  dyoung 			if ((error = copyout(ic->ic_nw_keys[i].wk_key,
   1176  1.2  dyoung 			    nwkey->i_key[i].i_keydat,
   1177  1.2  dyoung 			    ic->ic_nw_keys[i].wk_len)) != 0)
   1178  1.2  dyoung 				break;
   1179  1.2  dyoung 		}
   1180  1.2  dyoung 		break;
   1181  1.2  dyoung 	case SIOCS80211POWER:
   1182  1.2  dyoung 		power = (struct ieee80211_power *)data;
   1183  1.2  dyoung 		ic->ic_lintval = power->i_maxsleep;
   1184  1.2  dyoung 		if (power->i_enabled != 0) {
   1185  1.5  dyoung 			if ((ic->ic_caps & IEEE80211_C_PMGT) == 0)
   1186  1.2  dyoung 				error = EINVAL;
   1187  1.2  dyoung 			else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) {
   1188  1.2  dyoung 				ic->ic_flags |= IEEE80211_F_PMGTON;
   1189  1.2  dyoung 				error = ENETRESET;
   1190  1.2  dyoung 			}
   1191  1.2  dyoung 		} else {
   1192  1.2  dyoung 			if (ic->ic_flags & IEEE80211_F_PMGTON) {
   1193  1.2  dyoung 				ic->ic_flags &= ~IEEE80211_F_PMGTON;
   1194  1.2  dyoung 				error = ENETRESET;
   1195  1.2  dyoung 			}
   1196  1.2  dyoung 		}
   1197  1.2  dyoung 		break;
   1198  1.2  dyoung 	case SIOCG80211POWER:
   1199  1.2  dyoung 		power = (struct ieee80211_power *)data;
   1200  1.2  dyoung 		power->i_enabled = (ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0;
   1201  1.2  dyoung 		power->i_maxsleep = ic->ic_lintval;
   1202  1.2  dyoung 		break;
   1203  1.2  dyoung 	case SIOCS80211BSSID:
   1204  1.2  dyoung 		bssid = (struct ieee80211_bssid *)data;
   1205  1.2  dyoung 		if (IEEE80211_ADDR_EQ(bssid->i_bssid, empty_macaddr))
   1206  1.2  dyoung 			ic->ic_flags &= ~IEEE80211_F_DESBSSID;
   1207  1.2  dyoung 		else {
   1208  1.2  dyoung 			ic->ic_flags |= IEEE80211_F_DESBSSID;
   1209  1.2  dyoung 			IEEE80211_ADDR_COPY(ic->ic_des_bssid, bssid->i_bssid);
   1210  1.2  dyoung 		}
   1211  1.2  dyoung 		if (ic->ic_opmode == IEEE80211_M_HOSTAP)
   1212  1.2  dyoung 			break;
   1213  1.2  dyoung 		switch (ic->ic_state) {
   1214  1.2  dyoung 		case IEEE80211_S_INIT:
   1215  1.2  dyoung 		case IEEE80211_S_SCAN:
   1216  1.2  dyoung 			error = ENETRESET;
   1217  1.2  dyoung 			break;
   1218  1.2  dyoung 		default:
   1219  1.2  dyoung 			if ((ic->ic_flags & IEEE80211_F_DESBSSID) &&
   1220  1.2  dyoung 			    !IEEE80211_ADDR_EQ(ic->ic_des_bssid,
   1221  1.2  dyoung 			    ic->ic_bss->ni_bssid))
   1222  1.2  dyoung 				error = ENETRESET;
   1223  1.2  dyoung 			break;
   1224  1.2  dyoung 		}
   1225  1.2  dyoung 		break;
   1226  1.2  dyoung 	case SIOCG80211BSSID:
   1227  1.2  dyoung 		bssid = (struct ieee80211_bssid *)data;
   1228  1.2  dyoung 		switch (ic->ic_state) {
   1229  1.2  dyoung 		case IEEE80211_S_INIT:
   1230  1.2  dyoung 		case IEEE80211_S_SCAN:
   1231  1.2  dyoung 			if (ic->ic_opmode == IEEE80211_M_HOSTAP)
   1232  1.2  dyoung 				IEEE80211_ADDR_COPY(bssid->i_bssid,
   1233  1.2  dyoung 				    ic->ic_myaddr);
   1234  1.2  dyoung 			else if (ic->ic_flags & IEEE80211_F_DESBSSID)
   1235  1.2  dyoung 				IEEE80211_ADDR_COPY(bssid->i_bssid,
   1236  1.2  dyoung 				    ic->ic_des_bssid);
   1237  1.2  dyoung 			else
   1238  1.2  dyoung 				memset(bssid->i_bssid, 0, IEEE80211_ADDR_LEN);
   1239  1.2  dyoung 			break;
   1240  1.2  dyoung 		default:
   1241  1.2  dyoung 			IEEE80211_ADDR_COPY(bssid->i_bssid,
   1242  1.2  dyoung 			    ic->ic_bss->ni_bssid);
   1243  1.2  dyoung 			break;
   1244  1.2  dyoung 		}
   1245  1.2  dyoung 		break;
   1246  1.2  dyoung 	case SIOCS80211CHANNEL:
   1247  1.2  dyoung 		chanreq = (struct ieee80211chanreq *)data;
   1248  1.2  dyoung 		if (chanreq->i_channel == IEEE80211_CHAN_ANY)
   1249  1.2  dyoung 			ic->ic_des_chan = IEEE80211_CHAN_ANYC;
   1250  1.2  dyoung 		else if (chanreq->i_channel > IEEE80211_CHAN_MAX ||
   1251  1.2  dyoung 		    isclr(ic->ic_chan_active, chanreq->i_channel)) {
   1252  1.2  dyoung 			error = EINVAL;
   1253  1.2  dyoung 			break;
   1254  1.2  dyoung 		} else
   1255  1.4  dyoung 			ic->ic_ibss_chan = ic->ic_des_chan =
   1256  1.4  dyoung 			    &ic->ic_channels[chanreq->i_channel];
   1257  1.2  dyoung 		switch (ic->ic_state) {
   1258  1.2  dyoung 		case IEEE80211_S_INIT:
   1259  1.2  dyoung 		case IEEE80211_S_SCAN:
   1260  1.2  dyoung 			error = ENETRESET;
   1261  1.2  dyoung 			break;
   1262  1.2  dyoung 		default:
   1263  1.2  dyoung 			if (ic->ic_opmode == IEEE80211_M_STA) {
   1264  1.2  dyoung 				if (ic->ic_des_chan != IEEE80211_CHAN_ANYC &&
   1265  1.2  dyoung 				    ic->ic_bss->ni_chan != ic->ic_des_chan)
   1266  1.2  dyoung 					error = ENETRESET;
   1267  1.2  dyoung 			} else {
   1268  1.2  dyoung 				if (ic->ic_bss->ni_chan != ic->ic_ibss_chan)
   1269  1.2  dyoung 					error = ENETRESET;
   1270  1.2  dyoung 			}
   1271  1.2  dyoung 			break;
   1272  1.2  dyoung 		}
   1273  1.2  dyoung 		break;
   1274  1.2  dyoung 	case SIOCG80211CHANNEL:
   1275  1.2  dyoung 		chanreq = (struct ieee80211chanreq *)data;
   1276  1.2  dyoung 		switch (ic->ic_state) {
   1277  1.2  dyoung 		case IEEE80211_S_INIT:
   1278  1.2  dyoung 		case IEEE80211_S_SCAN:
   1279  1.2  dyoung 			if (ic->ic_opmode == IEEE80211_M_STA)
   1280  1.2  dyoung 				chan = ic->ic_des_chan;
   1281  1.2  dyoung 			else
   1282  1.2  dyoung 				chan = ic->ic_ibss_chan;
   1283  1.2  dyoung 			break;
   1284  1.2  dyoung 		default:
   1285  1.2  dyoung 			chan = ic->ic_bss->ni_chan;
   1286  1.2  dyoung 			break;
   1287  1.2  dyoung 		}
   1288  1.2  dyoung 		chanreq->i_channel = ieee80211_chan2ieee(ic, chan);
   1289  1.2  dyoung 		break;
   1290  1.2  dyoung 	case SIOCGIFGENERIC:
   1291  1.2  dyoung 		error = ieee80211_cfgget(ifp, cmd, data);
   1292  1.2  dyoung 		break;
   1293  1.2  dyoung 	case SIOCSIFGENERIC:
   1294  1.2  dyoung 		error = suser(curproc->p_ucred, &curproc->p_acflag);
   1295  1.2  dyoung 		if (error)
   1296  1.2  dyoung 			break;
   1297  1.2  dyoung 		error = ieee80211_cfgset(ifp, cmd, data);
   1298  1.7  dyoung 		break;
   1299  1.7  dyoung 	case SIOCG80211STATS:
   1300  1.7  dyoung 		ifr = (struct ifreq *)data;
   1301  1.7  dyoung 		copyout(&ic->ic_stats, ifr->ifr_data, sizeof (ic->ic_stats));
   1302  1.2  dyoung 		break;
   1303  1.2  dyoung 	default:
   1304  1.2  dyoung 		error = ether_ioctl(ifp, cmd, data);
   1305  1.2  dyoung 		break;
   1306  1.2  dyoung 	}
   1307  1.2  dyoung 	return error;
   1308  1.2  dyoung }
   1309  1.2  dyoung #endif /* __NetBSD__ */
   1310