ieee80211_ioctl.c revision 1.16.2.7
1 /* $NetBSD: ieee80211_ioctl.c,v 1.16.2.7 2005/11/10 14:10:51 skrll Exp $ */ 2 /*- 3 * Copyright (c) 2001 Atsushi Onoe 4 * Copyright (c) 2002-2005 Sam Leffler, Errno Consulting 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 3. The name of the author may not be used to endorse or promote products 16 * derived from this software without specific prior written permission. 17 * 18 * Alternatively, this software may be distributed under the terms of the 19 * GNU General Public License ("GPL") version 2 as published by the Free 20 * Software Foundation. 21 * 22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34 #include <sys/cdefs.h> 35 #ifdef __FreeBSD__ 36 __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_ioctl.c,v 1.13 2004/03/30 22:57:57 sam Exp $"); 37 #else 38 __KERNEL_RCSID(0, "$NetBSD: ieee80211_ioctl.c,v 1.16.2.7 2005/11/10 14:10:51 skrll Exp $"); 39 #endif 40 41 /* 42 * IEEE 802.11 ioctl support (FreeBSD-specific) 43 */ 44 45 #include "opt_inet.h" 46 47 #include <sys/endian.h> 48 #include <sys/param.h> 49 #include <sys/kernel.h> 50 #include <sys/socket.h> 51 #include <sys/sockio.h> 52 #include <sys/systm.h> 53 #include <sys/proc.h> 54 55 #include <net/if.h> 56 #include <net/if_arp.h> 57 #include <net/if_media.h> 58 #include <net/if_ether.h> 59 60 #ifdef INET 61 #include <netinet/in.h> 62 #include <netinet/if_inarp.h> 63 #endif 64 65 #include <net80211/ieee80211_var.h> 66 #include <net80211/ieee80211_ioctl.h> 67 68 #include <dev/ic/wi_ieee.h> 69 70 #define IS_UP(_ic) \ 71 (((_ic)->ic_ifp->if_flags & (IFF_RUNNING|IFF_UP)) == (IFF_RUNNING|IFF_UP)) 72 #define IS_UP_AUTO(_ic) \ 73 (IS_UP(_ic) && (_ic)->ic_roaming == IEEE80211_ROAMING_AUTO) 74 75 /* 76 * XXX 77 * Wireless LAN specific configuration interface, which is compatible 78 * with wicontrol(8). 79 */ 80 81 struct wi_read_ap_args { 82 int i; /* result count */ 83 struct wi_apinfo *ap; /* current entry in result buffer */ 84 caddr_t max; /* result buffer bound */ 85 }; 86 87 static void 88 wi_read_ap_result(void *arg, struct ieee80211_node *ni) 89 { 90 struct ieee80211com *ic = ni->ni_ic; 91 struct wi_read_ap_args *sa = arg; 92 struct wi_apinfo *ap = sa->ap; 93 struct ieee80211_rateset *rs; 94 int j; 95 96 if ((caddr_t)(ap + 1) > sa->max) 97 return; 98 memset(ap, 0, sizeof(struct wi_apinfo)); 99 if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 100 IEEE80211_ADDR_COPY(ap->bssid, ni->ni_macaddr); 101 ap->namelen = ic->ic_des_esslen; 102 if (ic->ic_des_esslen) 103 memcpy(ap->name, ic->ic_des_essid, 104 ic->ic_des_esslen); 105 } else { 106 IEEE80211_ADDR_COPY(ap->bssid, ni->ni_bssid); 107 ap->namelen = ni->ni_esslen; 108 if (ni->ni_esslen) 109 memcpy(ap->name, ni->ni_essid, 110 ni->ni_esslen); 111 } 112 ap->channel = ieee80211_chan2ieee(ic, ni->ni_chan); 113 ap->signal = ic->ic_node_getrssi(ni); 114 ap->capinfo = ni->ni_capinfo; 115 ap->interval = ni->ni_intval; 116 rs = &ni->ni_rates; 117 for (j = 0; j < rs->rs_nrates; j++) { 118 if (rs->rs_rates[j] & IEEE80211_RATE_BASIC) { 119 ap->rate = (rs->rs_rates[j] & 120 IEEE80211_RATE_VAL) * 5; /* XXX */ 121 } 122 } 123 sa->i++; 124 sa->ap++; 125 } 126 127 struct wi_read_prism2_args { 128 int i; /* result count */ 129 struct wi_scan_res *res;/* current entry in result buffer */ 130 caddr_t max; /* result buffer bound */ 131 }; 132 133 #if 0 134 static void 135 wi_read_prism2_result(void *arg, struct ieee80211_node *ni) 136 { 137 struct ieee80211com *ic = ni->ni_ic; 138 struct wi_read_prism2_args *sa = arg; 139 struct wi_scan_res *res = sa->res; 140 141 if ((caddr_t)(res + 1) > sa->max) 142 return; 143 res->wi_chan = ieee80211_chan2ieee(ic, ni->ni_chan); 144 res->wi_noise = 0; 145 res->wi_signal = ic->ic_node_getrssi(ni); 146 IEEE80211_ADDR_COPY(res->wi_bssid, ni->ni_bssid); 147 res->wi_interval = ni->ni_intval; 148 res->wi_capinfo = ni->ni_capinfo; 149 res->wi_ssid_len = ni->ni_esslen; 150 memcpy(res->wi_ssid, ni->ni_essid, IEEE80211_NWID_LEN); 151 /* NB: assumes wi_srates holds <= ni->ni_rates */ 152 memcpy(res->wi_srates, ni->ni_rates.rs_rates, 153 sizeof(res->wi_srates)); 154 if (ni->ni_rates.rs_nrates < 10) 155 res->wi_srates[ni->ni_rates.rs_nrates] = 0; 156 res->wi_rate = ni->ni_rates.rs_rates[ni->ni_txrate]; 157 res->wi_rsvd = 0; 158 159 sa->i++; 160 sa->res++; 161 } 162 163 struct wi_read_sigcache_args { 164 int i; /* result count */ 165 struct wi_sigcache *wsc;/* current entry in result buffer */ 166 caddr_t max; /* result buffer bound */ 167 }; 168 169 static void 170 wi_read_sigcache(void *arg, struct ieee80211_node *ni) 171 { 172 struct ieee80211com *ic = ni->ni_ic; 173 struct wi_read_sigcache_args *sa = arg; 174 struct wi_sigcache *wsc = sa->wsc; 175 176 if ((caddr_t)(wsc + 1) > sa->max) 177 return; 178 memset(wsc, 0, sizeof(struct wi_sigcache)); 179 IEEE80211_ADDR_COPY(wsc->macsrc, ni->ni_macaddr); 180 wsc->signal = ic->ic_node_getrssi(ni); 181 182 sa->wsc++; 183 sa->i++; 184 } 185 #endif 186 187 int 188 ieee80211_cfgget(struct ieee80211com *ic, u_long cmd, caddr_t data) 189 { 190 struct ifnet *ifp = ic->ic_ifp; 191 int i, j, error; 192 struct ifreq *ifr = (struct ifreq *)data; 193 struct wi_req wreq; 194 struct wi_ltv_keys *keys; 195 196 error = copyin(ifr->ifr_data, &wreq, sizeof(wreq)); 197 if (error) 198 return error; 199 wreq.wi_len = 0; 200 switch (wreq.wi_type) { 201 case WI_RID_SERIALNO: 202 case WI_RID_STA_IDENTITY: 203 /* nothing appropriate */ 204 break; 205 case WI_RID_NODENAME: 206 strlcpy((char *)&wreq.wi_val[1], hostname, 207 sizeof(wreq.wi_val) - sizeof(wreq.wi_val[0])); 208 wreq.wi_val[0] = htole16(strlen(hostname)); 209 wreq.wi_len = (1 + strlen(hostname) + 1) / 2; 210 break; 211 case WI_RID_CURRENT_SSID: 212 if (ic->ic_state != IEEE80211_S_RUN) { 213 wreq.wi_val[0] = 0; 214 wreq.wi_len = 1; 215 break; 216 } 217 wreq.wi_val[0] = htole16(ic->ic_bss->ni_esslen); 218 memcpy(&wreq.wi_val[1], ic->ic_bss->ni_essid, 219 ic->ic_bss->ni_esslen); 220 wreq.wi_len = (1 + ic->ic_bss->ni_esslen + 1) / 2; 221 break; 222 case WI_RID_OWN_SSID: 223 case WI_RID_DESIRED_SSID: 224 wreq.wi_val[0] = htole16(ic->ic_des_esslen); 225 memcpy(&wreq.wi_val[1], ic->ic_des_essid, ic->ic_des_esslen); 226 wreq.wi_len = (1 + ic->ic_des_esslen + 1) / 2; 227 break; 228 case WI_RID_CURRENT_BSSID: 229 if (ic->ic_state == IEEE80211_S_RUN) 230 IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_bss->ni_bssid); 231 else 232 memset(wreq.wi_val, 0, IEEE80211_ADDR_LEN); 233 wreq.wi_len = IEEE80211_ADDR_LEN / 2; 234 break; 235 case WI_RID_CHANNEL_LIST: 236 memset(wreq.wi_val, 0, sizeof(wreq.wi_val)); 237 /* 238 * Since channel 0 is not available for DS, channel 1 239 * is assigned to LSB on WaveLAN. 240 */ 241 if (ic->ic_phytype == IEEE80211_T_DS) 242 i = 1; 243 else 244 i = 0; 245 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) 246 if (isset(ic->ic_chan_active, i)) { 247 setbit((u_int8_t *)wreq.wi_val, j); 248 wreq.wi_len = j / 16 + 1; 249 } 250 break; 251 case WI_RID_OWN_CHNL: 252 wreq.wi_val[0] = htole16( 253 ieee80211_chan2ieee(ic, ic->ic_ibss_chan)); 254 wreq.wi_len = 1; 255 break; 256 case WI_RID_CURRENT_CHAN: 257 wreq.wi_val[0] = htole16( 258 ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan)); 259 wreq.wi_len = 1; 260 break; 261 case WI_RID_COMMS_QUALITY: 262 wreq.wi_val[0] = 0; /* quality */ 263 wreq.wi_val[1] = htole16(ic->ic_node_getrssi(ic->ic_bss)); 264 wreq.wi_val[2] = 0; /* noise */ 265 wreq.wi_len = 3; 266 break; 267 case WI_RID_PROMISC: 268 wreq.wi_val[0] = htole16((ifp->if_flags & IFF_PROMISC) ? 1 : 0); 269 wreq.wi_len = 1; 270 break; 271 case WI_RID_PORTTYPE: 272 wreq.wi_val[0] = htole16(ic->ic_opmode); 273 wreq.wi_len = 1; 274 break; 275 case WI_RID_MAC_NODE: 276 IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_myaddr); 277 wreq.wi_len = IEEE80211_ADDR_LEN / 2; 278 break; 279 case WI_RID_TX_RATE: 280 if (ic->ic_fixed_rate == -1) 281 wreq.wi_val[0] = 0; /* auto */ 282 else 283 wreq.wi_val[0] = htole16( 284 (ic->ic_sup_rates[ic->ic_curmode].rs_rates[ic->ic_fixed_rate] & 285 IEEE80211_RATE_VAL) / 2); 286 wreq.wi_len = 1; 287 break; 288 case WI_RID_CUR_TX_RATE: 289 wreq.wi_val[0] = htole16( 290 (ic->ic_bss->ni_rates.rs_rates[ic->ic_bss->ni_txrate] & 291 IEEE80211_RATE_VAL) / 2); 292 wreq.wi_len = 1; 293 break; 294 case WI_RID_FRAG_THRESH: 295 wreq.wi_val[0] = htole16(ic->ic_fragthreshold); 296 wreq.wi_len = 1; 297 break; 298 case WI_RID_RTS_THRESH: 299 wreq.wi_val[0] = htole16(ic->ic_rtsthreshold); 300 wreq.wi_len = 1; 301 break; 302 case WI_RID_CREATE_IBSS: 303 wreq.wi_val[0] = 304 htole16((ic->ic_flags & IEEE80211_F_IBSSON) ? 1 : 0); 305 wreq.wi_len = 1; 306 break; 307 case WI_RID_MICROWAVE_OVEN: 308 wreq.wi_val[0] = 0; /* no ... not supported */ 309 wreq.wi_len = 1; 310 break; 311 case WI_RID_ROAMING_MODE: 312 wreq.wi_val[0] = htole16(ic->ic_roaming); /* XXX map */ 313 wreq.wi_len = 1; 314 break; 315 case WI_RID_SYSTEM_SCALE: 316 wreq.wi_val[0] = htole16(1); /* low density ... not supp */ 317 wreq.wi_len = 1; 318 break; 319 case WI_RID_PM_ENABLED: 320 wreq.wi_val[0] = 321 htole16((ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0); 322 wreq.wi_len = 1; 323 break; 324 case WI_RID_MAX_SLEEP: 325 wreq.wi_val[0] = htole16(ic->ic_lintval); 326 wreq.wi_len = 1; 327 break; 328 case WI_RID_CUR_BEACON_INT: 329 wreq.wi_val[0] = htole16(ic->ic_bss->ni_intval); 330 wreq.wi_len = 1; 331 break; 332 case WI_RID_WEP_AVAIL: 333 wreq.wi_val[0] = htole16(1); /* always available */ 334 wreq.wi_len = 1; 335 break; 336 case WI_RID_CNFAUTHMODE: 337 wreq.wi_val[0] = htole16(1); /* TODO: open system only */ 338 wreq.wi_len = 1; 339 break; 340 case WI_RID_ENCRYPTION: 341 wreq.wi_val[0] = 342 htole16((ic->ic_flags & IEEE80211_F_PRIVACY) ? 1 : 0); 343 wreq.wi_len = 1; 344 break; 345 case WI_RID_TX_CRYPT_KEY: 346 wreq.wi_val[0] = htole16(ic->ic_def_txkey); 347 wreq.wi_len = 1; 348 break; 349 case WI_RID_DEFLT_CRYPT_KEYS: 350 keys = (struct wi_ltv_keys *)&wreq; 351 /* do not show keys to non-root user */ 352 error = suser(curproc->p_ucred, &curproc->p_acflag); 353 if (error) { 354 memset(keys, 0, sizeof(*keys)); 355 error = 0; 356 break; 357 } 358 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 359 keys->wi_keys[i].wi_keylen = 360 htole16(ic->ic_nw_keys[i].wk_keylen); 361 memcpy(keys->wi_keys[i].wi_keydat, 362 ic->ic_nw_keys[i].wk_key, 363 ic->ic_nw_keys[i].wk_keylen); 364 } 365 wreq.wi_len = sizeof(*keys) / 2; 366 break; 367 case WI_RID_MAX_DATALEN: 368 wreq.wi_val[0] = htole16(ic->ic_fragthreshold); 369 wreq.wi_len = 1; 370 break; 371 case WI_RID_DBM_ADJUST: 372 /* not supported, we just pass rssi value from driver. */ 373 break; 374 case WI_RID_IFACE_STATS: 375 /* XXX: should be implemented in lower drivers */ 376 break; 377 case WI_RID_READ_APS: 378 /* 379 * Don't return results until active scan completes. 380 */ 381 if ((ic->ic_flags & (IEEE80211_F_SCAN|IEEE80211_F_ASCAN)) == 0) { 382 struct wi_read_ap_args args; 383 384 args.i = 0; 385 args.ap = (void *)((char *)wreq.wi_val + sizeof(i)); 386 args.max = (void *)(&wreq + 1); 387 ieee80211_iterate_nodes(&ic->ic_scan, 388 wi_read_ap_result, &args); 389 memcpy(wreq.wi_val, &args.i, sizeof(args.i)); 390 wreq.wi_len = (sizeof(int) + 391 sizeof(struct wi_apinfo) * args.i) / 2; 392 } else 393 error = EINPROGRESS; 394 break; 395 #if 0 396 case WI_RID_SCAN_RES: /* compatibility interface */ 397 if ((ic->ic_flags & (IEEE80211_F_SCAN|IEEE80211_F_ASCAN)) == 0) { 398 struct wi_read_prism2_args args; 399 struct wi_scan_p2_hdr *p2; 400 401 /* NB: use Prism2 format so we can include rate info */ 402 p2 = (struct wi_scan_p2_hdr *)wreq.wi_val; 403 args.i = 0; 404 args.res = (void *)&p2[1]; 405 args.max = (void *)(&wreq + 1); 406 ieee80211_iterate_nodes(&ic->ic_scan, 407 wi_read_prism2_result, &args); 408 p2->wi_rsvd = 0; 409 p2->wi_reason = args.i; 410 wreq.wi_len = (sizeof(*p2) + 411 sizeof(struct wi_scan_res) * args.i) / 2; 412 } else 413 error = EINPROGRESS; 414 break; 415 case WI_RID_READ_CACHE: { 416 struct wi_read_sigcache_args args; 417 args.i = 0; 418 args.wsc = (struct wi_sigcache *) wreq.wi_val; 419 args.max = (void *)(&wreq + 1); 420 ieee80211_iterate_nodes(&ic->ic_scan, wi_read_sigcache, &args); 421 wreq.wi_len = sizeof(struct wi_sigcache) * args.i / 2; 422 break; 423 } 424 #endif 425 default: 426 error = EINVAL; 427 break; 428 } 429 if (error == 0) { 430 wreq.wi_len++; 431 error = copyout(&wreq, ifr->ifr_data, sizeof(wreq)); 432 } 433 return error; 434 } 435 436 static int 437 findrate(struct ieee80211com *ic, enum ieee80211_phymode mode, int rate) 438 { 439 #define IEEERATE(_ic,_m,_i) \ 440 ((_ic)->ic_sup_rates[_m].rs_rates[_i] & IEEE80211_RATE_VAL) 441 int i, nrates = ic->ic_sup_rates[mode].rs_nrates; 442 for (i = 0; i < nrates; i++) 443 if (IEEERATE(ic, mode, i) == rate) 444 return i; 445 return -1; 446 #undef IEEERATE 447 } 448 449 /* 450 * Prepare to do a user-initiated scan for AP's. If no 451 * current/default channel is setup or the current channel 452 * is invalid then pick the first available channel from 453 * the active list as the place to start the scan. 454 */ 455 static int 456 ieee80211_setupscan(struct ieee80211com *ic, const u_int8_t chanlist[]) 457 { 458 int i; 459 460 /* 461 * XXX don't permit a scan to be started unless we 462 * know the device is ready. For the moment this means 463 * the device is marked up as this is the required to 464 * initialize the hardware. It would be better to permit 465 * scanning prior to being up but that'll require some 466 * changes to the infrastructure. 467 */ 468 if (!IS_UP(ic)) 469 return EINVAL; 470 if (ic->ic_ibss_chan == NULL || 471 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_ibss_chan))) { 472 for (i = 0; i <= IEEE80211_CHAN_MAX; i++) 473 if (isset(chanlist, i)) { 474 ic->ic_ibss_chan = &ic->ic_channels[i]; 475 goto found; 476 } 477 return EINVAL; /* no active channels */ 478 found: 479 ; 480 } 481 if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC || 482 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan))) 483 ic->ic_bss->ni_chan = ic->ic_ibss_chan; 484 memcpy(ic->ic_chan_active, chanlist, sizeof(ic->ic_chan_active)); 485 /* 486 * We force the state to INIT before calling ieee80211_new_state 487 * to get ieee80211_begin_scan called. We really want to scan w/o 488 * altering the current state but that's not possible right now. 489 */ 490 /* XXX handle proberequest case */ 491 ic->ic_state = IEEE80211_S_INIT; /* XXX bypass state machine */ 492 return 0; 493 } 494 495 int 496 ieee80211_cfgset(struct ieee80211com *ic, u_long cmd, caddr_t data) 497 { 498 struct ifnet *ifp = ic->ic_ifp; 499 int i, j, len, error, rate; 500 struct ifreq *ifr = (struct ifreq *)data; 501 struct wi_ltv_keys *keys; 502 struct wi_req wreq; 503 u_char chanlist[roundup(IEEE80211_CHAN_MAX, NBBY)]; 504 505 error = copyin(ifr->ifr_data, &wreq, sizeof(wreq)); 506 if (error) 507 return error; 508 len = wreq.wi_len ? (wreq.wi_len - 1) * 2 : 0; 509 switch (wreq.wi_type) { 510 case WI_RID_SERIALNO: 511 case WI_RID_NODENAME: 512 return EPERM; 513 case WI_RID_CURRENT_SSID: 514 return EPERM; 515 case WI_RID_OWN_SSID: 516 case WI_RID_DESIRED_SSID: 517 if (le16toh(wreq.wi_val[0]) * 2 > len || 518 le16toh(wreq.wi_val[0]) > IEEE80211_NWID_LEN) { 519 error = ENOSPC; 520 break; 521 } 522 memset(ic->ic_des_essid, 0, sizeof(ic->ic_des_essid)); 523 ic->ic_des_esslen = le16toh(wreq.wi_val[0]) * 2; 524 memcpy(ic->ic_des_essid, &wreq.wi_val[1], ic->ic_des_esslen); 525 error = ENETRESET; 526 break; 527 case WI_RID_CURRENT_BSSID: 528 return EPERM; 529 case WI_RID_OWN_CHNL: 530 if (len != 2) 531 return EINVAL; 532 i = le16toh(wreq.wi_val[0]); 533 if (i < 0 || 534 i > IEEE80211_CHAN_MAX || 535 isclr(ic->ic_chan_active, i)) 536 return EINVAL; 537 ic->ic_ibss_chan = &ic->ic_channels[i]; 538 if (ic->ic_opmode == IEEE80211_M_MONITOR) 539 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 540 else 541 error = ENETRESET; 542 break; 543 case WI_RID_CURRENT_CHAN: 544 return EPERM; 545 case WI_RID_COMMS_QUALITY: 546 return EPERM; 547 case WI_RID_PROMISC: 548 if (len != 2) 549 return EINVAL; 550 if (ifp->if_flags & IFF_PROMISC) { 551 if (wreq.wi_val[0] == 0) { 552 ifp->if_flags &= ~IFF_PROMISC; 553 error = ENETRESET; 554 } 555 } else { 556 if (wreq.wi_val[0] != 0) { 557 ifp->if_flags |= IFF_PROMISC; 558 error = ENETRESET; 559 } 560 } 561 break; 562 case WI_RID_PORTTYPE: 563 if (len != 2) 564 return EINVAL; 565 switch (le16toh(wreq.wi_val[0])) { 566 case IEEE80211_M_STA: 567 break; 568 case IEEE80211_M_IBSS: 569 if (!(ic->ic_caps & IEEE80211_C_IBSS)) 570 return EINVAL; 571 break; 572 case IEEE80211_M_AHDEMO: 573 if (ic->ic_phytype != IEEE80211_T_DS || 574 !(ic->ic_caps & IEEE80211_C_AHDEMO)) 575 return EINVAL; 576 break; 577 case IEEE80211_M_HOSTAP: 578 if (!(ic->ic_caps & IEEE80211_C_HOSTAP)) 579 return EINVAL; 580 break; 581 default: 582 return EINVAL; 583 } 584 if (le16toh(wreq.wi_val[0]) != ic->ic_opmode) { 585 ic->ic_opmode = le16toh(wreq.wi_val[0]); 586 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 587 } 588 break; 589 #if 0 590 case WI_RID_MAC_NODE: 591 if (len != IEEE80211_ADDR_LEN) 592 return EINVAL; 593 IEEE80211_ADDR_COPY(LLADDR(ifp->if_sadl), wreq.wi_val); 594 /* if_init will copy lladdr into ic_myaddr */ 595 error = ENETRESET; 596 break; 597 #endif 598 case WI_RID_TX_RATE: 599 if (len != 2) 600 return EINVAL; 601 if (wreq.wi_val[0] == 0) { 602 /* auto */ 603 ic->ic_fixed_rate = -1; 604 break; 605 } 606 rate = 2 * le16toh(wreq.wi_val[0]); 607 if (ic->ic_curmode == IEEE80211_MODE_AUTO) { 608 /* 609 * In autoselect mode search for the rate. We take 610 * the first instance which may not be right, but we 611 * are limited by the interface. Note that we also 612 * lock the mode to insure the rate is meaningful 613 * when it is used. 614 */ 615 for (j = IEEE80211_MODE_11A; 616 j < IEEE80211_MODE_MAX; j++) { 617 if ((ic->ic_modecaps & (1<<j)) == 0) 618 continue; 619 i = findrate(ic, j, rate); 620 if (i != -1) { 621 /* lock mode too */ 622 ic->ic_curmode = j; 623 goto setrate; 624 } 625 } 626 } else { 627 i = findrate(ic, ic->ic_curmode, rate); 628 if (i != -1) 629 goto setrate; 630 } 631 return EINVAL; 632 setrate: 633 ic->ic_fixed_rate = i; 634 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 635 break; 636 case WI_RID_CUR_TX_RATE: 637 return EPERM; 638 case WI_RID_FRAG_THRESH: 639 if (len != 2) 640 return EINVAL; 641 ic->ic_fragthreshold = le16toh(wreq.wi_val[0]); 642 error = ENETRESET; 643 break; 644 case WI_RID_RTS_THRESH: 645 if (len != 2) 646 return EINVAL; 647 ic->ic_rtsthreshold = le16toh(wreq.wi_val[0]); 648 error = ENETRESET; 649 break; 650 case WI_RID_CREATE_IBSS: 651 if (len != 2) 652 return EINVAL; 653 if (wreq.wi_val[0] != 0) { 654 if ((ic->ic_caps & IEEE80211_C_IBSS) == 0) 655 return EINVAL; 656 if ((ic->ic_flags & IEEE80211_F_IBSSON) == 0) { 657 ic->ic_flags |= IEEE80211_F_IBSSON; 658 if (ic->ic_opmode == IEEE80211_M_IBSS && 659 ic->ic_state == IEEE80211_S_SCAN) 660 error = IS_UP_AUTO(ic) ? ENETRESET : 0; 661 } 662 } else { 663 if (ic->ic_flags & IEEE80211_F_IBSSON) { 664 ic->ic_flags &= ~IEEE80211_F_IBSSON; 665 if (ic->ic_flags & IEEE80211_F_SIBSS) { 666 ic->ic_flags &= ~IEEE80211_F_SIBSS; 667 error = IS_UP_AUTO(ic) ? ENETRESET : 0; 668 } 669 } 670 } 671 break; 672 case WI_RID_MICROWAVE_OVEN: 673 if (len != 2) 674 return EINVAL; 675 if (wreq.wi_val[0] != 0) 676 return EINVAL; /* not supported */ 677 break; 678 case WI_RID_ROAMING_MODE: 679 if (len != 2) 680 return EINVAL; 681 i = le16toh(wreq.wi_val[0]); 682 if (i > IEEE80211_ROAMING_MANUAL) 683 return EINVAL; /* not supported */ 684 ic->ic_roaming = i; 685 break; 686 case WI_RID_SYSTEM_SCALE: 687 if (len != 2) 688 return EINVAL; 689 if (le16toh(wreq.wi_val[0]) != 1) 690 return EINVAL; /* not supported */ 691 break; 692 case WI_RID_PM_ENABLED: 693 if (len != 2) 694 return EINVAL; 695 if (wreq.wi_val[0] != 0) { 696 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 697 return EINVAL; 698 if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 699 ic->ic_flags |= IEEE80211_F_PMGTON; 700 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 701 } 702 } else { 703 if (ic->ic_flags & IEEE80211_F_PMGTON) { 704 ic->ic_flags &= ~IEEE80211_F_PMGTON; 705 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 706 } 707 } 708 break; 709 case WI_RID_MAX_SLEEP: 710 if (len != 2) 711 return EINVAL; 712 ic->ic_lintval = le16toh(wreq.wi_val[0]); 713 if (ic->ic_flags & IEEE80211_F_PMGTON) 714 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 715 break; 716 case WI_RID_CUR_BEACON_INT: 717 return EPERM; 718 case WI_RID_WEP_AVAIL: 719 return EPERM; 720 case WI_RID_CNFAUTHMODE: 721 if (len != 2) 722 return EINVAL; 723 i = le16toh(wreq.wi_val[0]); 724 if (i > IEEE80211_AUTH_WPA) 725 return EINVAL; 726 ic->ic_bss->ni_authmode = i; /* XXX ENETRESET? */ 727 error = ENETRESET; 728 break; 729 case WI_RID_ENCRYPTION: 730 if (len != 2) 731 return EINVAL; 732 if (wreq.wi_val[0] != 0) { 733 if ((ic->ic_caps & IEEE80211_C_WEP) == 0) 734 return EINVAL; 735 if ((ic->ic_flags & IEEE80211_F_PRIVACY) == 0) { 736 ic->ic_flags |= IEEE80211_F_PRIVACY; 737 error = ENETRESET; 738 } 739 } else { 740 if (ic->ic_flags & IEEE80211_F_PRIVACY) { 741 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 742 error = ENETRESET; 743 } 744 } 745 break; 746 case WI_RID_TX_CRYPT_KEY: 747 if (len != 2) 748 return EINVAL; 749 i = le16toh(wreq.wi_val[0]); 750 if (i >= IEEE80211_WEP_NKID) 751 return EINVAL; 752 ic->ic_def_txkey = i; 753 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 754 break; 755 case WI_RID_DEFLT_CRYPT_KEYS: 756 if (len != sizeof(struct wi_ltv_keys)) 757 return EINVAL; 758 keys = (struct wi_ltv_keys *)&wreq; 759 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 760 len = le16toh(keys->wi_keys[i].wi_keylen); 761 if (len != 0 && len < IEEE80211_WEP_KEYLEN) 762 return EINVAL; 763 if (len > IEEE80211_KEYBUF_SIZE) 764 return EINVAL; 765 } 766 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 767 struct ieee80211_key *k = &ic->ic_nw_keys[i]; 768 769 len = le16toh(keys->wi_keys[i].wi_keylen); 770 k->wk_keylen = len; 771 k->wk_flags = IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV; 772 memset(k->wk_key, 0, sizeof(k->wk_key)); 773 memcpy(k->wk_key, keys->wi_keys[i].wi_keydat, len); 774 #if 0 775 k->wk_type = IEEE80211_CIPHER_WEP; 776 #endif 777 } 778 error = ENETRESET; 779 break; 780 case WI_RID_MAX_DATALEN: 781 if (len != 2) 782 return EINVAL; 783 len = le16toh(wreq.wi_val[0]); 784 if (len < 350 /* ? */ || len > IEEE80211_MAX_LEN) 785 return EINVAL; 786 ic->ic_fragthreshold = len; 787 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 788 break; 789 case WI_RID_IFACE_STATS: 790 error = EPERM; 791 break; 792 case WI_RID_SCAN_REQ: /* XXX wicontrol */ 793 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 794 break; 795 error = ieee80211_setupscan(ic, ic->ic_chan_avail); 796 if (error == 0) 797 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 798 break; 799 case WI_RID_SCAN_APS: 800 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 801 break; 802 len--; /* XXX: tx rate? */ 803 /* FALLTHRU */ 804 case WI_RID_CHANNEL_LIST: 805 memset(chanlist, 0, sizeof(chanlist)); 806 /* 807 * Since channel 0 is not available for DS, channel 1 808 * is assigned to LSB on WaveLAN. 809 */ 810 if (ic->ic_phytype == IEEE80211_T_DS) 811 i = 1; 812 else 813 i = 0; 814 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) { 815 if ((j / 8) >= len) 816 break; 817 if (isclr((u_int8_t *)wreq.wi_val, j)) 818 continue; 819 if (isclr(ic->ic_chan_active, i)) { 820 if (wreq.wi_type != WI_RID_CHANNEL_LIST) 821 continue; 822 if (isclr(ic->ic_chan_avail, i)) 823 return EPERM; 824 } 825 setbit(chanlist, i); 826 } 827 error = ieee80211_setupscan(ic, chanlist); 828 if (wreq.wi_type == WI_RID_CHANNEL_LIST) { 829 /* NB: ignore error from ieee80211_setupscan */ 830 error = ENETRESET; 831 } else if (error == 0) 832 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 833 break; 834 default: 835 error = EINVAL; 836 break; 837 } 838 if (error == ENETRESET && !IS_UP_AUTO(ic)) 839 error = 0; 840 return error; 841 } 842 843 #ifdef __FreeBSD__ 844 static struct ieee80211_channel * 845 getcurchan(struct ieee80211com *ic) 846 { 847 switch (ic->ic_state) { 848 case IEEE80211_S_INIT: 849 case IEEE80211_S_SCAN: 850 return ic->ic_des_chan; 851 default: 852 return ic->ic_ibss_chan; 853 } 854 } 855 #endif /* __FreeBSD__ */ 856 857 static int 858 cap2cipher(int flag) 859 { 860 switch (flag) { 861 case IEEE80211_C_WEP: return IEEE80211_CIPHER_WEP; 862 case IEEE80211_C_AES: return IEEE80211_CIPHER_AES_OCB; 863 case IEEE80211_C_AES_CCM: return IEEE80211_CIPHER_AES_CCM; 864 case IEEE80211_C_CKIP: return IEEE80211_CIPHER_CKIP; 865 case IEEE80211_C_TKIP: return IEEE80211_CIPHER_TKIP; 866 } 867 return -1; 868 } 869 870 static int 871 ieee80211_ioctl_getkey(struct ieee80211com *ic, struct ieee80211req *ireq) 872 { 873 struct ieee80211_node *ni; 874 struct ieee80211req_key ik; 875 struct ieee80211_key *wk; 876 const struct ieee80211_cipher *cip; 877 u_int kid; 878 int error; 879 880 if (ireq->i_len != sizeof(ik)) 881 return EINVAL; 882 error = copyin(ireq->i_data, &ik, sizeof(ik)); 883 if (error) 884 return error; 885 kid = ik.ik_keyix; 886 if (kid == IEEE80211_KEYIX_NONE) { 887 ni = ieee80211_find_node(&ic->ic_sta, ik.ik_macaddr); 888 if (ni == NULL) 889 return EINVAL; /* XXX */ 890 wk = &ni->ni_ucastkey; 891 } else { 892 if (kid >= IEEE80211_WEP_NKID) 893 return EINVAL; 894 wk = &ic->ic_nw_keys[kid]; 895 IEEE80211_ADDR_COPY(&ik.ik_macaddr, ic->ic_bss->ni_macaddr); 896 ni = NULL; 897 } 898 cip = wk->wk_cipher; 899 ik.ik_type = cip->ic_cipher; 900 ik.ik_keylen = wk->wk_keylen; 901 ik.ik_flags = wk->wk_flags & (IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV); 902 if (wk->wk_keyix == ic->ic_def_txkey) 903 ik.ik_flags |= IEEE80211_KEY_DEFAULT; 904 if (suser(curproc->p_ucred, &curproc->p_acflag) == 0) { 905 /* NB: only root can read key data */ 906 ik.ik_keyrsc = wk->wk_keyrsc; 907 ik.ik_keytsc = wk->wk_keytsc; 908 memcpy(ik.ik_keydata, wk->wk_key, wk->wk_keylen); 909 if (cip->ic_cipher == IEEE80211_CIPHER_TKIP) { 910 memcpy(ik.ik_keydata+wk->wk_keylen, 911 wk->wk_key + IEEE80211_KEYBUF_SIZE, 912 IEEE80211_MICBUF_SIZE); 913 ik.ik_keylen += IEEE80211_MICBUF_SIZE; 914 } 915 } else { 916 ik.ik_keyrsc = 0; 917 ik.ik_keytsc = 0; 918 memset(ik.ik_keydata, 0, sizeof(ik.ik_keydata)); 919 } 920 if (ni != NULL) 921 ieee80211_free_node(ni); 922 return copyout(&ik, ireq->i_data, sizeof(ik)); 923 } 924 925 static int 926 ieee80211_ioctl_getchanlist(struct ieee80211com *ic, struct ieee80211req *ireq) 927 { 928 929 if (sizeof(ic->ic_chan_active) > ireq->i_len) 930 ireq->i_len = sizeof(ic->ic_chan_active); 931 return copyout(&ic->ic_chan_active, ireq->i_data, ireq->i_len); 932 } 933 934 static int 935 ieee80211_ioctl_getchaninfo(struct ieee80211com *ic, struct ieee80211req *ireq) 936 { 937 struct ieee80211req_chaninfo chans; /* XXX off stack? */ 938 int i, space; 939 940 /* 941 * Since channel 0 is not available for DS, channel 1 942 * is assigned to LSB on WaveLAN. 943 */ 944 if (ic->ic_phytype == IEEE80211_T_DS) 945 i = 1; 946 else 947 i = 0; 948 memset(&chans, 0, sizeof(chans)); 949 for (; i <= IEEE80211_CHAN_MAX; i++) 950 if (isset(ic->ic_chan_avail, i)) { 951 struct ieee80211_channel *c = &ic->ic_channels[i]; 952 chans.ic_chans[chans.ic_nchans].ic_freq = c->ic_freq; 953 chans.ic_chans[chans.ic_nchans].ic_flags = c->ic_flags; 954 chans.ic_nchans++; 955 } 956 space = __offsetof(struct ieee80211req_chaninfo, 957 ic_chans[chans.ic_nchans]); 958 if (space > ireq->i_len) 959 space = ireq->i_len; 960 return copyout(&chans, ireq->i_data, space); 961 } 962 963 static int 964 ieee80211_ioctl_getwpaie(struct ieee80211com *ic, struct ieee80211req *ireq) 965 { 966 struct ieee80211_node *ni; 967 struct ieee80211req_wpaie wpaie; 968 int error; 969 970 if (ireq->i_len < IEEE80211_ADDR_LEN) 971 return EINVAL; 972 error = copyin(ireq->i_data, wpaie.wpa_macaddr, IEEE80211_ADDR_LEN); 973 if (error != 0) 974 return error; 975 ni = ieee80211_find_node(&ic->ic_sta, wpaie.wpa_macaddr); 976 if (ni == NULL) 977 return EINVAL; /* XXX */ 978 memset(wpaie.wpa_ie, 0, sizeof(wpaie.wpa_ie)); 979 if (ni->ni_wpa_ie != NULL) { 980 int ielen = ni->ni_wpa_ie[1] + 2; 981 if (ielen > sizeof(wpaie.wpa_ie)) 982 ielen = sizeof(wpaie.wpa_ie); 983 memcpy(wpaie.wpa_ie, ni->ni_wpa_ie, ielen); 984 } 985 ieee80211_free_node(ni); 986 if (ireq->i_len > sizeof(wpaie)) 987 ireq->i_len = sizeof(wpaie); 988 return copyout(&wpaie, ireq->i_data, ireq->i_len); 989 } 990 991 static int 992 ieee80211_ioctl_getstastats(struct ieee80211com *ic, struct ieee80211req *ireq) 993 { 994 struct ieee80211_node *ni; 995 u_int8_t macaddr[IEEE80211_ADDR_LEN]; 996 const int off = __offsetof(struct ieee80211req_sta_stats, is_stats); 997 int error; 998 999 if (ireq->i_len < off) 1000 return EINVAL; 1001 error = copyin(ireq->i_data, macaddr, IEEE80211_ADDR_LEN); 1002 if (error != 0) 1003 return error; 1004 ni = ieee80211_find_node(&ic->ic_sta, macaddr); 1005 if (ni == NULL) 1006 return EINVAL; /* XXX */ 1007 if (ireq->i_len > sizeof(struct ieee80211req_sta_stats)) 1008 ireq->i_len = sizeof(struct ieee80211req_sta_stats); 1009 /* NB: copy out only the statistics */ 1010 error = copyout(&ni->ni_stats, (u_int8_t *) ireq->i_data + off, 1011 ireq->i_len - off); 1012 ieee80211_free_node(ni); 1013 return error; 1014 } 1015 1016 static void 1017 get_scan_result(struct ieee80211req_scan_result *sr, 1018 const struct ieee80211_node *ni) 1019 { 1020 struct ieee80211com *ic = ni->ni_ic; 1021 1022 memset(sr, 0, sizeof(*sr)); 1023 sr->isr_ssid_len = ni->ni_esslen; 1024 if (ni->ni_wpa_ie != NULL) 1025 sr->isr_ie_len += 2+ni->ni_wpa_ie[1]; 1026 if (ni->ni_wme_ie != NULL) 1027 sr->isr_ie_len += 2+ni->ni_wme_ie[1]; 1028 sr->isr_len = sizeof(*sr) + sr->isr_ssid_len + sr->isr_ie_len; 1029 sr->isr_len = roundup(sr->isr_len, sizeof(u_int32_t)); 1030 if (ni->ni_chan != IEEE80211_CHAN_ANYC) { 1031 sr->isr_freq = ni->ni_chan->ic_freq; 1032 sr->isr_flags = ni->ni_chan->ic_flags; 1033 } 1034 sr->isr_rssi = ic->ic_node_getrssi(ni); 1035 sr->isr_intval = ni->ni_intval; 1036 sr->isr_capinfo = ni->ni_capinfo; 1037 sr->isr_erp = ni->ni_erp; 1038 IEEE80211_ADDR_COPY(sr->isr_bssid, ni->ni_bssid); 1039 sr->isr_nrates = ni->ni_rates.rs_nrates; 1040 if (sr->isr_nrates > 15) 1041 sr->isr_nrates = 15; 1042 memcpy(sr->isr_rates, ni->ni_rates.rs_rates, sr->isr_nrates); 1043 } 1044 1045 static int 1046 ieee80211_ioctl_getscanresults(struct ieee80211com *ic, struct ieee80211req *ireq) 1047 { 1048 union { 1049 struct ieee80211req_scan_result res; 1050 char data[512]; /* XXX shrink? */ 1051 } u; 1052 struct ieee80211req_scan_result *sr = &u.res; 1053 struct ieee80211_node_table *nt; 1054 struct ieee80211_node *ni; 1055 int error, space; 1056 u_int8_t *p, *cp; 1057 1058 p = ireq->i_data; 1059 space = ireq->i_len; 1060 error = 0; 1061 /* XXX locking */ 1062 nt = &ic->ic_scan; 1063 TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1064 /* NB: skip pre-scan node state */ 1065 if (ni->ni_chan == IEEE80211_CHAN_ANYC) 1066 continue; 1067 get_scan_result(sr, ni); 1068 if (sr->isr_len > sizeof(u)) 1069 continue; /* XXX */ 1070 if (space < sr->isr_len) 1071 break; 1072 cp = (u_int8_t *)(sr+1); 1073 memcpy(cp, ni->ni_essid, ni->ni_esslen); 1074 cp += ni->ni_esslen; 1075 if (ni->ni_wpa_ie != NULL) { 1076 memcpy(cp, ni->ni_wpa_ie, 2+ni->ni_wpa_ie[1]); 1077 cp += 2+ni->ni_wpa_ie[1]; 1078 } 1079 if (ni->ni_wme_ie != NULL) { 1080 memcpy(cp, ni->ni_wme_ie, 2+ni->ni_wme_ie[1]); 1081 cp += 2+ni->ni_wme_ie[1]; 1082 } 1083 error = copyout(sr, p, sr->isr_len); 1084 if (error) 1085 break; 1086 p += sr->isr_len; 1087 space -= sr->isr_len; 1088 } 1089 ireq->i_len -= space; 1090 return error; 1091 } 1092 1093 static void 1094 get_sta_info(struct ieee80211req_sta_info *si, const struct ieee80211_node *ni) 1095 { 1096 struct ieee80211com *ic = ni->ni_ic; 1097 1098 si->isi_ie_len = 0; 1099 if (ni->ni_wpa_ie != NULL) 1100 si->isi_ie_len += 2+ni->ni_wpa_ie[1]; 1101 if (ni->ni_wme_ie != NULL) 1102 si->isi_ie_len += 2+ni->ni_wme_ie[1]; 1103 si->isi_len = sizeof(*si) + si->isi_ie_len, sizeof(u_int32_t); 1104 si->isi_len = roundup(si->isi_len, sizeof(u_int32_t)); 1105 si->isi_freq = ni->ni_chan->ic_freq; 1106 si->isi_flags = ni->ni_chan->ic_flags; 1107 si->isi_state = ni->ni_flags; 1108 si->isi_authmode = ni->ni_authmode; 1109 si->isi_rssi = ic->ic_node_getrssi(ni); 1110 si->isi_capinfo = ni->ni_capinfo; 1111 si->isi_erp = ni->ni_erp; 1112 IEEE80211_ADDR_COPY(si->isi_macaddr, ni->ni_macaddr); 1113 si->isi_nrates = ni->ni_rates.rs_nrates; 1114 if (si->isi_nrates > 15) 1115 si->isi_nrates = 15; 1116 memcpy(si->isi_rates, ni->ni_rates.rs_rates, si->isi_nrates); 1117 si->isi_txrate = ni->ni_txrate; 1118 si->isi_associd = ni->ni_associd; 1119 si->isi_txpower = ni->ni_txpower; 1120 si->isi_vlan = ni->ni_vlan; 1121 if (ni->ni_flags & IEEE80211_NODE_QOS) { 1122 memcpy(si->isi_txseqs, ni->ni_txseqs, sizeof(ni->ni_txseqs)); 1123 memcpy(si->isi_rxseqs, ni->ni_rxseqs, sizeof(ni->ni_rxseqs)); 1124 } else { 1125 si->isi_txseqs[0] = ni->ni_txseqs[0]; 1126 si->isi_rxseqs[0] = ni->ni_rxseqs[0]; 1127 } 1128 if (ic->ic_opmode == IEEE80211_M_IBSS || ni->ni_associd != 0) 1129 si->isi_inact = ic->ic_inact_run; 1130 else if (ieee80211_node_is_authorized(ni)) 1131 si->isi_inact = ic->ic_inact_auth; 1132 else 1133 si->isi_inact = ic->ic_inact_init; 1134 si->isi_inact = (si->isi_inact - ni->ni_inact) * IEEE80211_INACT_WAIT; 1135 } 1136 1137 static int 1138 ieee80211_ioctl_getstainfo(struct ieee80211com *ic, struct ieee80211req *ireq) 1139 { 1140 union { 1141 struct ieee80211req_sta_info info; 1142 char data[512]; /* XXX shrink? */ 1143 } u; 1144 struct ieee80211req_sta_info *si = &u.info; 1145 struct ieee80211_node_table *nt; 1146 struct ieee80211_node *ni; 1147 int error, space; 1148 u_int8_t *p, *cp; 1149 1150 nt = &ic->ic_sta; 1151 p = ireq->i_data; 1152 space = ireq->i_len; 1153 error = 0; 1154 /* XXX locking */ 1155 TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1156 get_sta_info(si, ni); 1157 if (si->isi_len > sizeof(u)) 1158 continue; /* XXX */ 1159 if (space < si->isi_len) 1160 break; 1161 cp = (u_int8_t *)(si+1); 1162 if (ni->ni_wpa_ie != NULL) { 1163 memcpy(cp, ni->ni_wpa_ie, 2+ni->ni_wpa_ie[1]); 1164 cp += 2+ni->ni_wpa_ie[1]; 1165 } 1166 if (ni->ni_wme_ie != NULL) { 1167 memcpy(cp, ni->ni_wme_ie, 2+ni->ni_wme_ie[1]); 1168 cp += 2+ni->ni_wme_ie[1]; 1169 } 1170 error = copyout(si, p, si->isi_len); 1171 if (error) 1172 break; 1173 p += si->isi_len; 1174 space -= si->isi_len; 1175 } 1176 ireq->i_len -= space; 1177 return error; 1178 } 1179 1180 static int 1181 ieee80211_ioctl_getstatxpow(struct ieee80211com *ic, struct ieee80211req *ireq) 1182 { 1183 struct ieee80211_node *ni; 1184 struct ieee80211req_sta_txpow txpow; 1185 int error; 1186 1187 if (ireq->i_len != sizeof(txpow)) 1188 return EINVAL; 1189 error = copyin(ireq->i_data, &txpow, sizeof(txpow)); 1190 if (error != 0) 1191 return error; 1192 ni = ieee80211_find_node(&ic->ic_sta, txpow.it_macaddr); 1193 if (ni == NULL) 1194 return EINVAL; /* XXX */ 1195 txpow.it_txpow = ni->ni_txpower; 1196 error = copyout(&txpow, ireq->i_data, sizeof(txpow)); 1197 ieee80211_free_node(ni); 1198 return error; 1199 } 1200 1201 static int 1202 ieee80211_ioctl_getwmeparam(struct ieee80211com *ic, struct ieee80211req *ireq) 1203 { 1204 struct ieee80211_wme_state *wme = &ic->ic_wme; 1205 struct wmeParams *wmep; 1206 int ac; 1207 1208 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 1209 return EINVAL; 1210 1211 ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL); 1212 if (ac >= WME_NUM_AC) 1213 ac = WME_AC_BE; 1214 if (ireq->i_len & IEEE80211_WMEPARAM_BSS) 1215 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1216 else 1217 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1218 switch (ireq->i_type) { 1219 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1220 ireq->i_val = wmep->wmep_logcwmin; 1221 break; 1222 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1223 ireq->i_val = wmep->wmep_logcwmax; 1224 break; 1225 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1226 ireq->i_val = wmep->wmep_aifsn; 1227 break; 1228 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1229 ireq->i_val = wmep->wmep_txopLimit; 1230 break; 1231 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1232 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1233 ireq->i_val = wmep->wmep_acm; 1234 break; 1235 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (!bss only)*/ 1236 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1237 ireq->i_val = !wmep->wmep_noackPolicy; 1238 break; 1239 } 1240 return 0; 1241 } 1242 1243 /* 1244 * When building the kernel with -O2 on the i386 architecture, gcc 1245 * seems to want to inline this function into ieee80211_ioctl() 1246 * (which is the only routine that calls it). When this happens, 1247 * ieee80211_ioctl() ends up consuming an additional 2K of stack 1248 * space. (Exactly why it needs so much is unclear.) The problem 1249 * is that it's possible for ieee80211_ioctl() to invoke other 1250 * routines (including driver init functions) which could then find 1251 * themselves perilously close to exhausting the stack. 1252 * 1253 * To avoid this, we deliberately prevent gcc from inlining this 1254 * routine. Another way to avoid this is to use less agressive 1255 * optimization when compiling this file (i.e. -O instead of -O2) 1256 * but special-casing the compilation of this one module in the 1257 * build system would be awkward. 1258 */ 1259 #ifdef __GNUC__ 1260 __attribute__ ((noinline)) 1261 #endif 1262 static int 1263 ieee80211_ioctl_get80211(struct ieee80211com *ic, u_long cmd, struct ieee80211req *ireq) 1264 { 1265 const struct ieee80211_rsnparms *rsn = &ic->ic_bss->ni_rsn; 1266 int error = 0; 1267 #ifdef __FreeBSD__ 1268 u_int kid, len; 1269 u_int8_t tmpkey[IEEE80211_KEYBUF_SIZE]; 1270 char tmpssid[IEEE80211_NWID_LEN]; 1271 #endif /* __FreeBSD__ */ 1272 u_int m; 1273 1274 switch (ireq->i_type) { 1275 #ifdef __FreeBSD__ 1276 case IEEE80211_IOC_SSID: 1277 switch (ic->ic_state) { 1278 case IEEE80211_S_INIT: 1279 case IEEE80211_S_SCAN: 1280 ireq->i_len = ic->ic_des_esslen; 1281 memcpy(tmpssid, ic->ic_des_essid, ireq->i_len); 1282 break; 1283 default: 1284 ireq->i_len = ic->ic_bss->ni_esslen; 1285 memcpy(tmpssid, ic->ic_bss->ni_essid, 1286 ireq->i_len); 1287 break; 1288 } 1289 error = copyout(tmpssid, ireq->i_data, ireq->i_len); 1290 break; 1291 case IEEE80211_IOC_NUMSSIDS: 1292 ireq->i_val = 1; 1293 break; 1294 case IEEE80211_IOC_WEP: 1295 if ((ic->ic_flags & IEEE80211_F_PRIVACY) == 0) 1296 ireq->i_val = IEEE80211_WEP_OFF; 1297 else if (ic->ic_flags & IEEE80211_F_DROPUNENC) 1298 ireq->i_val = IEEE80211_WEP_ON; 1299 else 1300 ireq->i_val = IEEE80211_WEP_MIXED; 1301 break; 1302 case IEEE80211_IOC_WEPKEY: 1303 kid = (u_int) ireq->i_val; 1304 if (kid >= IEEE80211_WEP_NKID) 1305 return EINVAL; 1306 len = (u_int) ic->ic_nw_keys[kid].wk_keylen; 1307 /* NB: only root can read WEP keys */ 1308 if (suser(curproc->p_ucred, &curproc->p_acflag) == 0) { 1309 bcopy(ic->ic_nw_keys[kid].wk_key, tmpkey, len); 1310 } else { 1311 bzero(tmpkey, len); 1312 } 1313 ireq->i_len = len; 1314 error = copyout(tmpkey, ireq->i_data, len); 1315 break; 1316 case IEEE80211_IOC_NUMWEPKEYS: 1317 ireq->i_val = IEEE80211_WEP_NKID; 1318 break; 1319 case IEEE80211_IOC_WEPTXKEY: 1320 ireq->i_val = ic->ic_def_txkey; 1321 break; 1322 #endif /* __FreeBSD__ */ 1323 case IEEE80211_IOC_AUTHMODE: 1324 if (ic->ic_flags & IEEE80211_F_WPA) 1325 ireq->i_val = IEEE80211_AUTH_WPA; 1326 else 1327 ireq->i_val = ic->ic_bss->ni_authmode; 1328 break; 1329 #ifdef __FreeBSD__ 1330 case IEEE80211_IOC_CHANNEL: 1331 ireq->i_val = ieee80211_chan2ieee(ic, getcurchan(ic)); 1332 break; 1333 case IEEE80211_IOC_POWERSAVE: 1334 if (ic->ic_flags & IEEE80211_F_PMGTON) 1335 ireq->i_val = IEEE80211_POWERSAVE_ON; 1336 else 1337 ireq->i_val = IEEE80211_POWERSAVE_OFF; 1338 break; 1339 case IEEE80211_IOC_POWERSAVESLEEP: 1340 ireq->i_val = ic->ic_lintval; 1341 break; 1342 #endif /* __FreeBSD__ */ 1343 case IEEE80211_IOC_RTSTHRESHOLD: 1344 ireq->i_val = ic->ic_rtsthreshold; 1345 break; 1346 case IEEE80211_IOC_PROTMODE: 1347 ireq->i_val = ic->ic_protmode; 1348 break; 1349 case IEEE80211_IOC_TXPOWER: 1350 if ((ic->ic_caps & IEEE80211_C_TXPMGT) == 0) 1351 return EINVAL; 1352 ireq->i_val = ic->ic_txpowlimit; 1353 break; 1354 case IEEE80211_IOC_MCASTCIPHER: 1355 ireq->i_val = rsn->rsn_mcastcipher; 1356 break; 1357 case IEEE80211_IOC_MCASTKEYLEN: 1358 ireq->i_val = rsn->rsn_mcastkeylen; 1359 break; 1360 case IEEE80211_IOC_UCASTCIPHERS: 1361 ireq->i_val = 0; 1362 for (m = 0x1; m != 0; m <<= 1) 1363 if (rsn->rsn_ucastcipherset & m) 1364 ireq->i_val |= 1<<cap2cipher(m); 1365 break; 1366 case IEEE80211_IOC_UCASTCIPHER: 1367 ireq->i_val = rsn->rsn_ucastcipher; 1368 break; 1369 case IEEE80211_IOC_UCASTKEYLEN: 1370 ireq->i_val = rsn->rsn_ucastkeylen; 1371 break; 1372 case IEEE80211_IOC_KEYMGTALGS: 1373 ireq->i_val = rsn->rsn_keymgmtset; 1374 break; 1375 case IEEE80211_IOC_RSNCAPS: 1376 ireq->i_val = rsn->rsn_caps; 1377 break; 1378 case IEEE80211_IOC_WPA: 1379 switch (ic->ic_flags & IEEE80211_F_WPA) { 1380 case IEEE80211_F_WPA1: 1381 ireq->i_val = 1; 1382 break; 1383 case IEEE80211_F_WPA2: 1384 ireq->i_val = 2; 1385 break; 1386 case IEEE80211_F_WPA1 | IEEE80211_F_WPA2: 1387 ireq->i_val = 3; 1388 break; 1389 default: 1390 ireq->i_val = 0; 1391 break; 1392 } 1393 break; 1394 case IEEE80211_IOC_CHANLIST: 1395 error = ieee80211_ioctl_getchanlist(ic, ireq); 1396 break; 1397 case IEEE80211_IOC_ROAMING: 1398 ireq->i_val = ic->ic_roaming; 1399 break; 1400 case IEEE80211_IOC_PRIVACY: 1401 ireq->i_val = (ic->ic_flags & IEEE80211_F_PRIVACY) != 0; 1402 break; 1403 case IEEE80211_IOC_DROPUNENCRYPTED: 1404 ireq->i_val = (ic->ic_flags & IEEE80211_F_DROPUNENC) != 0; 1405 break; 1406 case IEEE80211_IOC_COUNTERMEASURES: 1407 ireq->i_val = (ic->ic_flags & IEEE80211_F_COUNTERM) != 0; 1408 break; 1409 case IEEE80211_IOC_DRIVER_CAPS: 1410 ireq->i_val = ic->ic_caps>>16; 1411 ireq->i_len = ic->ic_caps&0xffff; 1412 break; 1413 case IEEE80211_IOC_WME: 1414 ireq->i_val = (ic->ic_flags & IEEE80211_F_WME) != 0; 1415 break; 1416 case IEEE80211_IOC_HIDESSID: 1417 ireq->i_val = (ic->ic_flags & IEEE80211_F_HIDESSID) != 0; 1418 break; 1419 case IEEE80211_IOC_APBRIDGE: 1420 ireq->i_val = (ic->ic_flags & IEEE80211_F_NOBRIDGE) == 0; 1421 break; 1422 case IEEE80211_IOC_OPTIE: 1423 if (ic->ic_opt_ie == NULL) 1424 return EINVAL; 1425 /* NB: truncate, caller can check length */ 1426 if (ireq->i_len > ic->ic_opt_ie_len) 1427 ireq->i_len = ic->ic_opt_ie_len; 1428 error = copyout(ic->ic_opt_ie, ireq->i_data, ireq->i_len); 1429 break; 1430 case IEEE80211_IOC_WPAKEY: 1431 error = ieee80211_ioctl_getkey(ic, ireq); 1432 break; 1433 case IEEE80211_IOC_CHANINFO: 1434 error = ieee80211_ioctl_getchaninfo(ic, ireq); 1435 break; 1436 #ifdef __FreeBSD__ 1437 case IEEE80211_IOC_BSSID: 1438 if (ireq->i_len != IEEE80211_ADDR_LEN) 1439 return EINVAL; 1440 error = copyout(ic->ic_state == IEEE80211_S_RUN ? 1441 ic->ic_bss->ni_bssid : 1442 ic->ic_des_bssid, 1443 ireq->i_data, ireq->i_len); 1444 break; 1445 #endif /* __FreeBSD__ */ 1446 case IEEE80211_IOC_WPAIE: 1447 error = ieee80211_ioctl_getwpaie(ic, ireq); 1448 break; 1449 case IEEE80211_IOC_SCAN_RESULTS: 1450 error = ieee80211_ioctl_getscanresults(ic, ireq); 1451 break; 1452 case IEEE80211_IOC_STA_STATS: 1453 error = ieee80211_ioctl_getstastats(ic, ireq); 1454 break; 1455 case IEEE80211_IOC_TXPOWMAX: 1456 ireq->i_val = ic->ic_bss->ni_txpower; 1457 break; 1458 case IEEE80211_IOC_STA_TXPOW: 1459 error = ieee80211_ioctl_getstatxpow(ic, ireq); 1460 break; 1461 case IEEE80211_IOC_STA_INFO: 1462 error = ieee80211_ioctl_getstainfo(ic, ireq); 1463 break; 1464 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1465 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1466 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1467 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1468 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1469 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (bss only) */ 1470 error = ieee80211_ioctl_getwmeparam(ic, ireq); 1471 break; 1472 case IEEE80211_IOC_DTIM_PERIOD: 1473 ireq->i_val = ic->ic_dtim_period; 1474 break; 1475 case IEEE80211_IOC_BEACON_INTERVAL: 1476 /* NB: get from ic_bss for station mode */ 1477 ireq->i_val = ic->ic_bss->ni_intval; 1478 break; 1479 case IEEE80211_IOC_PUREG: 1480 ireq->i_val = (ic->ic_flags & IEEE80211_F_PUREG) != 0; 1481 break; 1482 default: 1483 error = EINVAL; 1484 break; 1485 } 1486 return error; 1487 } 1488 1489 static int 1490 ieee80211_ioctl_setoptie(struct ieee80211com *ic, struct ieee80211req *ireq) 1491 { 1492 int error; 1493 void *ie; 1494 1495 /* 1496 * NB: Doing this for ap operation could be useful (e.g. for 1497 * WPA and/or WME) except that it typically is worthless 1498 * without being able to intervene when processing 1499 * association response frames--so disallow it for now. 1500 */ 1501 if (ic->ic_opmode != IEEE80211_M_STA) 1502 return EINVAL; 1503 if (ireq->i_len > IEEE80211_MAX_OPT_IE) 1504 return EINVAL; 1505 /* NB: data.length is validated by the wireless extensions code */ 1506 MALLOC(ie, void *, (u_long)ireq->i_len, M_DEVBUF, M_WAITOK); 1507 if (ie == NULL) 1508 return ENOMEM; 1509 error = copyin(ireq->i_data, ie, ireq->i_len); 1510 /* XXX sanity check data? */ 1511 if (ic->ic_opt_ie != NULL) 1512 FREE(ic->ic_opt_ie, M_DEVBUF); 1513 ic->ic_opt_ie = ie; 1514 ic->ic_opt_ie_len = ireq->i_len; 1515 return 0; 1516 } 1517 1518 static int 1519 ieee80211_ioctl_setkey(struct ieee80211com *ic, struct ieee80211req *ireq) 1520 { 1521 struct ieee80211req_key ik; 1522 struct ieee80211_node *ni; 1523 struct ieee80211_key *wk; 1524 u_int16_t kid; 1525 int error; 1526 1527 if (ireq->i_len != sizeof(ik)) 1528 return EINVAL; 1529 error = copyin(ireq->i_data, &ik, sizeof(ik)); 1530 if (error) 1531 return error; 1532 /* NB: cipher support is verified by ieee80211_crypt_newkey */ 1533 /* NB: this also checks ik->ik_keylen > sizeof(wk->wk_key) */ 1534 if (ik.ik_keylen > sizeof(ik.ik_keydata)) 1535 return E2BIG; 1536 kid = ik.ik_keyix; 1537 if (kid == IEEE80211_KEYIX_NONE) { 1538 /* XXX unicast keys currently must be tx/rx */ 1539 if (ik.ik_flags != (IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV)) 1540 return EINVAL; 1541 if (ic->ic_opmode == IEEE80211_M_STA) { 1542 ni = ieee80211_ref_node(ic->ic_bss); 1543 if (!IEEE80211_ADDR_EQ(ik.ik_macaddr, ni->ni_bssid)) { 1544 ieee80211_free_node(ni); 1545 return EADDRNOTAVAIL; 1546 } 1547 } else { 1548 ni = ieee80211_find_node(&ic->ic_sta, ik.ik_macaddr); 1549 if (ni == NULL) 1550 return ENOENT; 1551 } 1552 wk = &ni->ni_ucastkey; 1553 } else { 1554 if (kid >= IEEE80211_WEP_NKID) 1555 return EINVAL; 1556 wk = &ic->ic_nw_keys[kid]; 1557 ni = NULL; 1558 } 1559 error = 0; 1560 ieee80211_key_update_begin(ic); 1561 if (ieee80211_crypto_newkey(ic, ik.ik_type, ik.ik_flags, wk)) { 1562 wk->wk_keylen = ik.ik_keylen; 1563 /* NB: MIC presence is implied by cipher type */ 1564 if (wk->wk_keylen > IEEE80211_KEYBUF_SIZE) 1565 wk->wk_keylen = IEEE80211_KEYBUF_SIZE; 1566 wk->wk_keyrsc = ik.ik_keyrsc; 1567 wk->wk_keytsc = 0; /* new key, reset */ 1568 memset(wk->wk_key, 0, sizeof(wk->wk_key)); 1569 memcpy(wk->wk_key, ik.ik_keydata, ik.ik_keylen); 1570 if (!ieee80211_crypto_setkey(ic, wk, 1571 ni != NULL ? ni->ni_macaddr : ik.ik_macaddr)) 1572 error = EIO; 1573 else if ((ik.ik_flags & IEEE80211_KEY_DEFAULT)) 1574 ic->ic_def_txkey = kid; 1575 } else 1576 error = ENXIO; 1577 ieee80211_key_update_end(ic); 1578 if (ni != NULL) 1579 ieee80211_free_node(ni); 1580 return error; 1581 } 1582 1583 static int 1584 ieee80211_ioctl_delkey(struct ieee80211com *ic, struct ieee80211req *ireq) 1585 { 1586 struct ieee80211req_del_key dk; 1587 int kid, error; 1588 1589 if (ireq->i_len != sizeof(dk)) 1590 return EINVAL; 1591 error = copyin(ireq->i_data, &dk, sizeof(dk)); 1592 if (error) 1593 return error; 1594 kid = dk.idk_keyix; 1595 /* XXX u_int8_t -> u_int16_t */ 1596 if (dk.idk_keyix == (u_int8_t) IEEE80211_KEYIX_NONE) { 1597 struct ieee80211_node *ni; 1598 1599 if (ic->ic_opmode == IEEE80211_M_STA) { 1600 ni = ieee80211_ref_node(ic->ic_bss); 1601 if (!IEEE80211_ADDR_EQ(dk.idk_macaddr, ni->ni_bssid)) { 1602 ieee80211_free_node(ni); 1603 return EADDRNOTAVAIL; 1604 } 1605 } else { 1606 ni = ieee80211_find_node(&ic->ic_sta, dk.idk_macaddr); 1607 if (ni == NULL) 1608 return ENOENT; 1609 } 1610 /* XXX error return */ 1611 ieee80211_crypto_delkey(ic, &ni->ni_ucastkey); 1612 ieee80211_free_node(ni); 1613 } else { 1614 if (kid >= IEEE80211_WEP_NKID) 1615 return EINVAL; 1616 /* XXX error return */ 1617 ieee80211_crypto_delkey(ic, &ic->ic_nw_keys[kid]); 1618 } 1619 return 0; 1620 } 1621 1622 #ifndef IEEE80211_NO_HOSTAP 1623 static void 1624 domlme(void *arg, struct ieee80211_node *ni) 1625 { 1626 struct ieee80211com *ic = ni->ni_ic; 1627 struct ieee80211req_mlme *mlme = arg; 1628 1629 if (ni->ni_associd != 0) { 1630 IEEE80211_SEND_MGMT(ic, ni, 1631 mlme->im_op == IEEE80211_MLME_DEAUTH ? 1632 IEEE80211_FC0_SUBTYPE_DEAUTH : 1633 IEEE80211_FC0_SUBTYPE_DISASSOC, 1634 mlme->im_reason); 1635 } 1636 ieee80211_node_leave(ic, ni); 1637 } 1638 #endif /* !IEEE80211_NO_HOSTAP */ 1639 1640 static int 1641 ieee80211_ioctl_setmlme(struct ieee80211com *ic, struct ieee80211req *ireq) 1642 { 1643 struct ieee80211req_mlme mlme; 1644 struct ieee80211_node *ni; 1645 int error; 1646 1647 if (ireq->i_len != sizeof(mlme)) 1648 return EINVAL; 1649 error = copyin(ireq->i_data, &mlme, sizeof(mlme)); 1650 if (error) 1651 return error; 1652 switch (mlme.im_op) { 1653 case IEEE80211_MLME_ASSOC: 1654 if (ic->ic_opmode != IEEE80211_M_STA) 1655 return EINVAL; 1656 /* XXX must be in S_SCAN state? */ 1657 1658 if (mlme.im_ssid_len != 0) { 1659 /* 1660 * Desired ssid specified; must match both bssid and 1661 * ssid to distinguish ap advertising multiple ssid's. 1662 */ 1663 ni = ieee80211_find_node_with_ssid(&ic->ic_scan, 1664 mlme.im_macaddr, 1665 mlme.im_ssid_len, mlme.im_ssid); 1666 } else { 1667 /* 1668 * Normal case; just match bssid. 1669 */ 1670 ni = ieee80211_find_node(&ic->ic_scan, mlme.im_macaddr); 1671 } 1672 if (ni == NULL) 1673 return EINVAL; 1674 if (!ieee80211_sta_join(ic, ni)) { 1675 ieee80211_free_node(ni); 1676 return EINVAL; 1677 } 1678 break; 1679 case IEEE80211_MLME_DISASSOC: 1680 case IEEE80211_MLME_DEAUTH: 1681 switch (ic->ic_opmode) { 1682 case IEEE80211_M_STA: 1683 /* XXX not quite right */ 1684 ieee80211_new_state(ic, IEEE80211_S_INIT, 1685 mlme.im_reason); 1686 break; 1687 case IEEE80211_M_HOSTAP: 1688 #ifndef IEEE80211_NO_HOSTAP 1689 /* NB: the broadcast address means do 'em all */ 1690 if (!IEEE80211_ADDR_EQ(mlme.im_macaddr, ic->ic_ifp->if_broadcastaddr)) { 1691 if ((ni = ieee80211_find_node(&ic->ic_sta, 1692 mlme.im_macaddr)) == NULL) 1693 return EINVAL; 1694 domlme(&mlme, ni); 1695 ieee80211_free_node(ni); 1696 } else { 1697 ieee80211_iterate_nodes(&ic->ic_sta, 1698 domlme, &mlme); 1699 } 1700 #endif /* !IEEE80211_NO_HOSTAP */ 1701 break; 1702 default: 1703 return EINVAL; 1704 } 1705 break; 1706 case IEEE80211_MLME_AUTHORIZE: 1707 case IEEE80211_MLME_UNAUTHORIZE: 1708 if (ic->ic_opmode != IEEE80211_M_HOSTAP) 1709 return EINVAL; 1710 ni = ieee80211_find_node(&ic->ic_sta, mlme.im_macaddr); 1711 if (ni == NULL) 1712 return EINVAL; 1713 if (mlme.im_op == IEEE80211_MLME_AUTHORIZE) 1714 ieee80211_node_authorize(ic, ni); 1715 else 1716 ieee80211_node_unauthorize(ic, ni); 1717 ieee80211_free_node(ni); 1718 break; 1719 default: 1720 return EINVAL; 1721 } 1722 return 0; 1723 } 1724 1725 static int 1726 ieee80211_ioctl_macmac(struct ieee80211com *ic, struct ieee80211req *ireq) 1727 { 1728 u_int8_t mac[IEEE80211_ADDR_LEN]; 1729 const struct ieee80211_aclator *acl = ic->ic_acl; 1730 int error; 1731 1732 if (ireq->i_len != sizeof(mac)) 1733 return EINVAL; 1734 error = copyin(ireq->i_data, mac, ireq->i_len); 1735 if (error) 1736 return error; 1737 if (acl == NULL) { 1738 acl = ieee80211_aclator_get("mac"); 1739 if (acl == NULL || !acl->iac_attach(ic)) 1740 return EINVAL; 1741 ic->ic_acl = acl; 1742 } 1743 if (ireq->i_type == IEEE80211_IOC_ADDMAC) 1744 acl->iac_add(ic, mac); 1745 else 1746 acl->iac_remove(ic, mac); 1747 return 0; 1748 } 1749 1750 static int 1751 ieee80211_ioctl_maccmd(struct ieee80211com *ic, struct ieee80211req *ireq) 1752 { 1753 const struct ieee80211_aclator *acl = ic->ic_acl; 1754 1755 switch (ireq->i_val) { 1756 case IEEE80211_MACCMD_POLICY_OPEN: 1757 case IEEE80211_MACCMD_POLICY_ALLOW: 1758 case IEEE80211_MACCMD_POLICY_DENY: 1759 if (acl == NULL) { 1760 acl = ieee80211_aclator_get("mac"); 1761 if (acl == NULL || !acl->iac_attach(ic)) 1762 return EINVAL; 1763 ic->ic_acl = acl; 1764 } 1765 acl->iac_setpolicy(ic, ireq->i_val); 1766 break; 1767 case IEEE80211_MACCMD_FLUSH: 1768 if (acl != NULL) 1769 acl->iac_flush(ic); 1770 /* NB: silently ignore when not in use */ 1771 break; 1772 case IEEE80211_MACCMD_DETACH: 1773 if (acl != NULL) { 1774 ic->ic_acl = NULL; 1775 acl->iac_detach(ic); 1776 } 1777 break; 1778 default: 1779 return EINVAL; 1780 } 1781 return 0; 1782 } 1783 1784 static int 1785 ieee80211_ioctl_setchanlist(struct ieee80211com *ic, struct ieee80211req *ireq) 1786 { 1787 struct ieee80211req_chanlist list; 1788 u_char chanlist[IEEE80211_CHAN_BYTES]; 1789 int i, j, error; 1790 1791 if (ireq->i_len != sizeof(list)) 1792 return EINVAL; 1793 error = copyin(ireq->i_data, &list, sizeof(list)); 1794 if (error) 1795 return error; 1796 memset(chanlist, 0, sizeof(chanlist)); 1797 /* 1798 * Since channel 0 is not available for DS, channel 1 1799 * is assigned to LSB on WaveLAN. 1800 */ 1801 if (ic->ic_phytype == IEEE80211_T_DS) 1802 i = 1; 1803 else 1804 i = 0; 1805 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) { 1806 /* 1807 * NB: silently discard unavailable channels so users 1808 * can specify 1-255 to get all available channels. 1809 */ 1810 if (isset(list.ic_channels, j) && isset(ic->ic_chan_avail, i)) 1811 setbit(chanlist, i); 1812 } 1813 if (ic->ic_ibss_chan == NULL || 1814 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_ibss_chan))) { 1815 for (i = 0; i <= IEEE80211_CHAN_MAX; i++) 1816 if (isset(chanlist, i)) { 1817 ic->ic_ibss_chan = &ic->ic_channels[i]; 1818 goto found; 1819 } 1820 return EINVAL; /* no active channels */ 1821 found: 1822 ; 1823 } 1824 memcpy(ic->ic_chan_active, chanlist, sizeof(ic->ic_chan_active)); 1825 if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC || 1826 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan))) 1827 ic->ic_bss->ni_chan = ic->ic_ibss_chan; 1828 return IS_UP_AUTO(ic) ? ENETRESET : 0; 1829 } 1830 1831 static int 1832 ieee80211_ioctl_setstatxpow(struct ieee80211com *ic, struct ieee80211req *ireq) 1833 { 1834 struct ieee80211_node *ni; 1835 struct ieee80211req_sta_txpow txpow; 1836 int error; 1837 1838 if (ireq->i_len != sizeof(txpow)) 1839 return EINVAL; 1840 error = copyin(ireq->i_data, &txpow, sizeof(txpow)); 1841 if (error != 0) 1842 return error; 1843 ni = ieee80211_find_node(&ic->ic_sta, txpow.it_macaddr); 1844 if (ni == NULL) 1845 return EINVAL; /* XXX */ 1846 ni->ni_txpower = txpow.it_txpow; 1847 ieee80211_free_node(ni); 1848 return error; 1849 } 1850 1851 static int 1852 ieee80211_ioctl_setwmeparam(struct ieee80211com *ic, struct ieee80211req *ireq) 1853 { 1854 struct ieee80211_wme_state *wme = &ic->ic_wme; 1855 struct wmeParams *wmep, *chanp; 1856 int isbss, ac; 1857 1858 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 1859 return EINVAL; 1860 1861 isbss = (ireq->i_len & IEEE80211_WMEPARAM_BSS); 1862 ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL); 1863 if (ac >= WME_NUM_AC) 1864 ac = WME_AC_BE; 1865 if (isbss) { 1866 chanp = &wme->wme_bssChanParams.cap_wmeParams[ac]; 1867 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1868 } else { 1869 chanp = &wme->wme_chanParams.cap_wmeParams[ac]; 1870 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1871 } 1872 switch (ireq->i_type) { 1873 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1874 if (isbss) { 1875 wmep->wmep_logcwmin = ireq->i_val; 1876 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1877 chanp->wmep_logcwmin = ireq->i_val; 1878 } else { 1879 wmep->wmep_logcwmin = chanp->wmep_logcwmin = 1880 ireq->i_val; 1881 } 1882 break; 1883 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1884 if (isbss) { 1885 wmep->wmep_logcwmax = ireq->i_val; 1886 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1887 chanp->wmep_logcwmax = ireq->i_val; 1888 } else { 1889 wmep->wmep_logcwmax = chanp->wmep_logcwmax = 1890 ireq->i_val; 1891 } 1892 break; 1893 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1894 if (isbss) { 1895 wmep->wmep_aifsn = ireq->i_val; 1896 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1897 chanp->wmep_aifsn = ireq->i_val; 1898 } else { 1899 wmep->wmep_aifsn = chanp->wmep_aifsn = ireq->i_val; 1900 } 1901 break; 1902 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1903 if (isbss) { 1904 wmep->wmep_txopLimit = ireq->i_val; 1905 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1906 chanp->wmep_txopLimit = ireq->i_val; 1907 } else { 1908 wmep->wmep_txopLimit = chanp->wmep_txopLimit = 1909 ireq->i_val; 1910 } 1911 break; 1912 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1913 wmep->wmep_acm = ireq->i_val; 1914 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1915 chanp->wmep_acm = ireq->i_val; 1916 break; 1917 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (!bss only)*/ 1918 wmep->wmep_noackPolicy = chanp->wmep_noackPolicy = 1919 (ireq->i_val) == 0; 1920 break; 1921 } 1922 ieee80211_wme_updateparams(ic); 1923 return 0; 1924 } 1925 1926 static int 1927 cipher2cap(int cipher) 1928 { 1929 switch (cipher) { 1930 case IEEE80211_CIPHER_WEP: return IEEE80211_C_WEP; 1931 case IEEE80211_CIPHER_AES_OCB: return IEEE80211_C_AES; 1932 case IEEE80211_CIPHER_AES_CCM: return IEEE80211_C_AES_CCM; 1933 case IEEE80211_CIPHER_CKIP: return IEEE80211_C_CKIP; 1934 case IEEE80211_CIPHER_TKIP: return IEEE80211_C_TKIP; 1935 } 1936 return 0; 1937 } 1938 1939 static int 1940 ieee80211_ioctl_set80211(struct ieee80211com *ic, u_long cmd, struct ieee80211req *ireq) 1941 { 1942 #ifdef __FreeBSD__ 1943 static const u_int8_t zerobssid[IEEE80211_ADDR_LEN]; 1944 u_int8_t tmpkey[IEEE80211_KEYBUF_SIZE]; 1945 char tmpssid[IEEE80211_NWID_LEN]; 1946 u_int8_t tmpbssid[IEEE80211_ADDR_LEN]; 1947 struct ieee80211_key *k; 1948 u_int kid; 1949 #endif /* __FreeBSD__ */ 1950 struct ieee80211_rsnparms *rsn = &ic->ic_bss->ni_rsn; 1951 int error; 1952 const struct ieee80211_authenticator *auth; 1953 int j, caps; 1954 1955 error = 0; 1956 switch (ireq->i_type) { 1957 #ifdef __FreeBSD__ 1958 case IEEE80211_IOC_SSID: 1959 if (ireq->i_val != 0 || 1960 ireq->i_len > IEEE80211_NWID_LEN) 1961 return EINVAL; 1962 error = copyin(ireq->i_data, tmpssid, ireq->i_len); 1963 if (error) 1964 break; 1965 memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN); 1966 ic->ic_des_esslen = ireq->i_len; 1967 memcpy(ic->ic_des_essid, tmpssid, ireq->i_len); 1968 error = ENETRESET; 1969 break; 1970 #endif /* __FreeBSD__ */ 1971 case IEEE80211_IOC_WEP: 1972 switch (ireq->i_val) { 1973 case IEEE80211_WEP_OFF: 1974 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 1975 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 1976 break; 1977 case IEEE80211_WEP_ON: 1978 ic->ic_flags |= IEEE80211_F_PRIVACY; 1979 ic->ic_flags |= IEEE80211_F_DROPUNENC; 1980 break; 1981 case IEEE80211_WEP_MIXED: 1982 ic->ic_flags |= IEEE80211_F_PRIVACY; 1983 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 1984 break; 1985 } 1986 error = ENETRESET; 1987 break; 1988 #ifdef __FreeBSD__ 1989 case IEEE80211_IOC_WEPKEY: 1990 kid = (u_int) ireq->i_val; 1991 if (kid >= IEEE80211_WEP_NKID) 1992 return EINVAL; 1993 k = &ic->ic_nw_keys[kid]; 1994 if (ireq->i_len == 0) { 1995 /* zero-len =>'s delete any existing key */ 1996 (void) ieee80211_crypto_delkey(ic, k); 1997 break; 1998 } 1999 if (ireq->i_len > sizeof(tmpkey)) 2000 return EINVAL; 2001 memset(tmpkey, 0, sizeof(tmpkey)); 2002 error = copyin(ireq->i_data, tmpkey, ireq->i_len); 2003 if (error) 2004 break; 2005 ieee80211_key_update_begin(ic); 2006 k->wk_keyix = kid; /* NB: force fixed key id */ 2007 if (ieee80211_crypto_newkey(ic, IEEE80211_CIPHER_WEP, 2008 IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV, k)) { 2009 k->wk_keylen = ireq->i_len; 2010 memcpy(k->wk_key, tmpkey, sizeof(tmpkey)); 2011 if (!ieee80211_crypto_setkey(ic, k, ic->ic_myaddr)) 2012 error = EINVAL; 2013 } else 2014 error = EINVAL; 2015 ieee80211_key_update_end(ic); 2016 if (!error) /* NB: for compatibility */ 2017 error = ENETRESET; 2018 break; 2019 case IEEE80211_IOC_WEPTXKEY: 2020 kid = (u_int) ireq->i_val; 2021 if (kid >= IEEE80211_WEP_NKID && 2022 (u_int16_t) kid != IEEE80211_KEYIX_NONE) 2023 return EINVAL; 2024 ic->ic_def_txkey = kid; 2025 error = ENETRESET; /* push to hardware */ 2026 break; 2027 #endif /* __FreeBSD__ */ 2028 case IEEE80211_IOC_AUTHMODE: 2029 switch (ireq->i_val) { 2030 case IEEE80211_AUTH_WPA: 2031 case IEEE80211_AUTH_8021X: /* 802.1x */ 2032 case IEEE80211_AUTH_OPEN: /* open */ 2033 case IEEE80211_AUTH_SHARED: /* shared-key */ 2034 case IEEE80211_AUTH_AUTO: /* auto */ 2035 auth = ieee80211_authenticator_get(ireq->i_val); 2036 if (auth == NULL) 2037 return EINVAL; 2038 break; 2039 default: 2040 return EINVAL; 2041 } 2042 switch (ireq->i_val) { 2043 case IEEE80211_AUTH_WPA: /* WPA w/ 802.1x */ 2044 ic->ic_flags |= IEEE80211_F_PRIVACY; 2045 ireq->i_val = IEEE80211_AUTH_8021X; 2046 break; 2047 case IEEE80211_AUTH_OPEN: /* open */ 2048 ic->ic_flags &= ~(IEEE80211_F_WPA|IEEE80211_F_PRIVACY); 2049 break; 2050 case IEEE80211_AUTH_SHARED: /* shared-key */ 2051 case IEEE80211_AUTH_8021X: /* 802.1x */ 2052 ic->ic_flags &= ~IEEE80211_F_WPA; 2053 /* both require a key so mark the PRIVACY capability */ 2054 ic->ic_flags |= IEEE80211_F_PRIVACY; 2055 break; 2056 case IEEE80211_AUTH_AUTO: /* auto */ 2057 ic->ic_flags &= ~IEEE80211_F_WPA; 2058 /* XXX PRIVACY handling? */ 2059 /* XXX what's the right way to do this? */ 2060 break; 2061 } 2062 /* NB: authenticator attach/detach happens on state change */ 2063 ic->ic_bss->ni_authmode = ireq->i_val; 2064 /* XXX mixed/mode/usage? */ 2065 ic->ic_auth = auth; 2066 error = ENETRESET; 2067 break; 2068 #ifdef __FreeBSD__ 2069 case IEEE80211_IOC_CHANNEL: 2070 /* XXX 0xffff overflows 16-bit signed */ 2071 if (ireq->i_val == 0 || 2072 ireq->i_val == (int16_t) IEEE80211_CHAN_ANY) 2073 ic->ic_des_chan = IEEE80211_CHAN_ANYC; 2074 else if ((u_int) ireq->i_val > IEEE80211_CHAN_MAX || 2075 isclr(ic->ic_chan_active, ireq->i_val)) { 2076 return EINVAL; 2077 } else 2078 ic->ic_ibss_chan = ic->ic_des_chan = 2079 &ic->ic_channels[ireq->i_val]; 2080 switch (ic->ic_state) { 2081 case IEEE80211_S_INIT: 2082 case IEEE80211_S_SCAN: 2083 error = ENETRESET; 2084 break; 2085 default: 2086 /* 2087 * If the desired channel has changed (to something 2088 * other than any) and we're not already scanning, 2089 * then kick the state machine. 2090 */ 2091 if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 2092 ic->ic_bss->ni_chan != ic->ic_des_chan && 2093 (ic->ic_flags & IEEE80211_F_SCAN) == 0) 2094 error = ENETRESET; 2095 break; 2096 } 2097 if (error == ENETRESET && ic->ic_opmode == IEEE80211_M_MONITOR) 2098 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2099 break; 2100 case IEEE80211_IOC_POWERSAVE: 2101 switch (ireq->i_val) { 2102 case IEEE80211_POWERSAVE_OFF: 2103 if (ic->ic_flags & IEEE80211_F_PMGTON) { 2104 ic->ic_flags &= ~IEEE80211_F_PMGTON; 2105 error = ENETRESET; 2106 } 2107 break; 2108 case IEEE80211_POWERSAVE_ON: 2109 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 2110 error = EINVAL; 2111 else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 2112 ic->ic_flags |= IEEE80211_F_PMGTON; 2113 error = ENETRESET; 2114 } 2115 break; 2116 default: 2117 error = EINVAL; 2118 break; 2119 } 2120 break; 2121 case IEEE80211_IOC_POWERSAVESLEEP: 2122 if (ireq->i_val < 0) 2123 return EINVAL; 2124 ic->ic_lintval = ireq->i_val; 2125 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2126 break; 2127 #endif /* __FreeBSD__ */ 2128 case IEEE80211_IOC_RTSTHRESHOLD: 2129 if (!(IEEE80211_RTS_MIN < ireq->i_val && 2130 ireq->i_val < IEEE80211_RTS_MAX)) 2131 return EINVAL; 2132 ic->ic_rtsthreshold = ireq->i_val; 2133 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2134 break; 2135 case IEEE80211_IOC_PROTMODE: 2136 if (ireq->i_val > IEEE80211_PROT_RTSCTS) 2137 return EINVAL; 2138 ic->ic_protmode = ireq->i_val; 2139 /* NB: if not operating in 11g this can wait */ 2140 if (ic->ic_curmode == IEEE80211_MODE_11G) 2141 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2142 break; 2143 case IEEE80211_IOC_TXPOWER: 2144 if ((ic->ic_caps & IEEE80211_C_TXPMGT) == 0) 2145 return EINVAL; 2146 if (!(IEEE80211_TXPOWER_MIN < ireq->i_val && 2147 ireq->i_val < IEEE80211_TXPOWER_MAX)) 2148 return EINVAL; 2149 ic->ic_txpowlimit = ireq->i_val; 2150 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2151 break; 2152 case IEEE80211_IOC_ROAMING: 2153 if (!(IEEE80211_ROAMING_DEVICE <= ireq->i_val && 2154 ireq->i_val <= IEEE80211_ROAMING_MANUAL)) 2155 return EINVAL; 2156 ic->ic_roaming = ireq->i_val; 2157 /* XXXX reset? */ 2158 break; 2159 case IEEE80211_IOC_PRIVACY: 2160 if (ireq->i_val) { 2161 /* XXX check for key state? */ 2162 ic->ic_flags |= IEEE80211_F_PRIVACY; 2163 } else 2164 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 2165 break; 2166 case IEEE80211_IOC_DROPUNENCRYPTED: 2167 if (ireq->i_val) 2168 ic->ic_flags |= IEEE80211_F_DROPUNENC; 2169 else 2170 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 2171 break; 2172 case IEEE80211_IOC_WPAKEY: 2173 error = ieee80211_ioctl_setkey(ic, ireq); 2174 break; 2175 case IEEE80211_IOC_DELKEY: 2176 error = ieee80211_ioctl_delkey(ic, ireq); 2177 break; 2178 case IEEE80211_IOC_MLME: 2179 error = ieee80211_ioctl_setmlme(ic, ireq); 2180 break; 2181 case IEEE80211_IOC_OPTIE: 2182 error = ieee80211_ioctl_setoptie(ic, ireq); 2183 break; 2184 case IEEE80211_IOC_COUNTERMEASURES: 2185 if (ireq->i_val) { 2186 if ((ic->ic_flags & IEEE80211_F_WPA) == 0) 2187 return EINVAL; 2188 ic->ic_flags |= IEEE80211_F_COUNTERM; 2189 } else 2190 ic->ic_flags &= ~IEEE80211_F_COUNTERM; 2191 break; 2192 case IEEE80211_IOC_WPA: 2193 if (ireq->i_val > 3) 2194 return EINVAL; 2195 /* XXX verify ciphers available */ 2196 ic->ic_flags &= ~IEEE80211_F_WPA; 2197 switch (ireq->i_val) { 2198 case 1: 2199 ic->ic_flags |= IEEE80211_F_WPA1; 2200 break; 2201 case 2: 2202 ic->ic_flags |= IEEE80211_F_WPA2; 2203 break; 2204 case 3: 2205 ic->ic_flags |= IEEE80211_F_WPA1 | IEEE80211_F_WPA2; 2206 break; 2207 } 2208 error = ENETRESET; /* XXX? */ 2209 break; 2210 case IEEE80211_IOC_WME: 2211 if (ireq->i_val) { 2212 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 2213 return EINVAL; 2214 ic->ic_flags |= IEEE80211_F_WME; 2215 } else 2216 ic->ic_flags &= ~IEEE80211_F_WME; 2217 error = ENETRESET; /* XXX maybe not for station? */ 2218 break; 2219 case IEEE80211_IOC_HIDESSID: 2220 if (ireq->i_val) 2221 ic->ic_flags |= IEEE80211_F_HIDESSID; 2222 else 2223 ic->ic_flags &= ~IEEE80211_F_HIDESSID; 2224 error = ENETRESET; 2225 break; 2226 case IEEE80211_IOC_APBRIDGE: 2227 if (ireq->i_val == 0) 2228 ic->ic_flags |= IEEE80211_F_NOBRIDGE; 2229 else 2230 ic->ic_flags &= ~IEEE80211_F_NOBRIDGE; 2231 break; 2232 case IEEE80211_IOC_MCASTCIPHER: 2233 if ((ic->ic_caps & cipher2cap(ireq->i_val)) == 0 && 2234 !ieee80211_crypto_available(ireq->i_val)) 2235 return EINVAL; 2236 rsn->rsn_mcastcipher = ireq->i_val; 2237 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2238 break; 2239 case IEEE80211_IOC_MCASTKEYLEN: 2240 if (!(0 < ireq->i_val && ireq->i_val < IEEE80211_KEYBUF_SIZE)) 2241 return EINVAL; 2242 /* XXX no way to verify driver capability */ 2243 rsn->rsn_mcastkeylen = ireq->i_val; 2244 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2245 break; 2246 case IEEE80211_IOC_UCASTCIPHERS: 2247 /* 2248 * Convert user-specified cipher set to the set 2249 * we can support (via hardware or software). 2250 * NB: this logic intentionally ignores unknown and 2251 * unsupported ciphers so folks can specify 0xff or 2252 * similar and get all available ciphers. 2253 */ 2254 caps = 0; 2255 for (j = 1; j < 32; j++) /* NB: skip WEP */ 2256 if ((ireq->i_val & (1<<j)) && 2257 ((ic->ic_caps & cipher2cap(j)) || 2258 ieee80211_crypto_available(j))) 2259 caps |= 1<<j; 2260 if (caps == 0) /* nothing available */ 2261 return EINVAL; 2262 /* XXX verify ciphers ok for unicast use? */ 2263 /* XXX disallow if running as it'll have no effect */ 2264 rsn->rsn_ucastcipherset = caps; 2265 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2266 break; 2267 case IEEE80211_IOC_UCASTCIPHER: 2268 if ((rsn->rsn_ucastcipherset & cipher2cap(ireq->i_val)) == 0) 2269 return EINVAL; 2270 rsn->rsn_ucastcipher = ireq->i_val; 2271 break; 2272 case IEEE80211_IOC_UCASTKEYLEN: 2273 if (!(0 < ireq->i_val && ireq->i_val < IEEE80211_KEYBUF_SIZE)) 2274 return EINVAL; 2275 /* XXX no way to verify driver capability */ 2276 rsn->rsn_ucastkeylen = ireq->i_val; 2277 break; 2278 case IEEE80211_IOC_DRIVER_CAPS: 2279 /* NB: for testing */ 2280 ic->ic_caps = (((u_int16_t) ireq->i_val) << 16) | 2281 ((u_int16_t) ireq->i_len); 2282 break; 2283 case IEEE80211_IOC_KEYMGTALGS: 2284 /* XXX check */ 2285 rsn->rsn_keymgmtset = ireq->i_val; 2286 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2287 break; 2288 case IEEE80211_IOC_RSNCAPS: 2289 /* XXX check */ 2290 rsn->rsn_caps = ireq->i_val; 2291 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2292 break; 2293 #ifdef __FreeBSD__ 2294 case IEEE80211_IOC_BSSID: 2295 /* NB: should only be set when in STA mode */ 2296 if (ic->ic_opmode != IEEE80211_M_STA) 2297 return EINVAL; 2298 if (ireq->i_len != sizeof(tmpbssid)) 2299 return EINVAL; 2300 error = copyin(ireq->i_data, tmpbssid, ireq->i_len); 2301 if (error) 2302 break; 2303 IEEE80211_ADDR_COPY(ic->ic_des_bssid, tmpbssid); 2304 if (IEEE80211_ADDR_EQ(ic->ic_des_bssid, zerobssid)) 2305 ic->ic_flags &= ~IEEE80211_F_DESBSSID; 2306 else 2307 ic->ic_flags |= IEEE80211_F_DESBSSID; 2308 error = ENETRESET; 2309 break; 2310 #endif /* __FreeBSD__ */ 2311 case IEEE80211_IOC_CHANLIST: 2312 error = ieee80211_ioctl_setchanlist(ic, ireq); 2313 break; 2314 case IEEE80211_IOC_SCAN_REQ: 2315 if (ic->ic_opmode == IEEE80211_M_HOSTAP) /* XXX ignore */ 2316 break; 2317 error = ieee80211_setupscan(ic, ic->ic_chan_avail); 2318 if (error == 0) /* XXX background scan */ 2319 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 2320 break; 2321 case IEEE80211_IOC_ADDMAC: 2322 case IEEE80211_IOC_DELMAC: 2323 error = ieee80211_ioctl_macmac(ic, ireq); 2324 break; 2325 case IEEE80211_IOC_MACCMD: 2326 error = ieee80211_ioctl_maccmd(ic, ireq); 2327 break; 2328 case IEEE80211_IOC_STA_TXPOW: 2329 error = ieee80211_ioctl_setstatxpow(ic, ireq); 2330 break; 2331 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 2332 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 2333 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 2334 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 2335 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 2336 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (bss only) */ 2337 error = ieee80211_ioctl_setwmeparam(ic, ireq); 2338 break; 2339 case IEEE80211_IOC_DTIM_PERIOD: 2340 if (ic->ic_opmode != IEEE80211_M_HOSTAP && 2341 ic->ic_opmode != IEEE80211_M_IBSS) 2342 return EINVAL; 2343 if (IEEE80211_DTIM_MIN <= ireq->i_val && 2344 ireq->i_val <= IEEE80211_DTIM_MAX) { 2345 ic->ic_dtim_period = ireq->i_val; 2346 error = ENETRESET; /* requires restart */ 2347 } else 2348 error = EINVAL; 2349 break; 2350 case IEEE80211_IOC_BEACON_INTERVAL: 2351 if (ic->ic_opmode != IEEE80211_M_HOSTAP && 2352 ic->ic_opmode != IEEE80211_M_IBSS) 2353 return EINVAL; 2354 if (IEEE80211_BINTVAL_MIN <= ireq->i_val && 2355 ireq->i_val <= IEEE80211_BINTVAL_MAX) { 2356 ic->ic_lintval = ireq->i_val; 2357 error = ENETRESET; /* requires restart */ 2358 } else 2359 error = EINVAL; 2360 break; 2361 case IEEE80211_IOC_PUREG: 2362 if (ireq->i_val) 2363 ic->ic_flags |= IEEE80211_F_PUREG; 2364 else 2365 ic->ic_flags &= ~IEEE80211_F_PUREG; 2366 /* NB: reset only if we're operating on an 11g channel */ 2367 if (ic->ic_curmode == IEEE80211_MODE_11G) 2368 error = ENETRESET; 2369 break; 2370 default: 2371 error = EINVAL; 2372 break; 2373 } 2374 if (error == ENETRESET && !IS_UP_AUTO(ic)) 2375 error = 0; 2376 return error; 2377 } 2378 2379 #ifdef __FreeBSD__ 2380 int 2381 ieee80211_ioctl(struct ieee80211com *ic, u_long cmd, caddr_t data) 2382 { 2383 struct ifnet *ifp = ic->ic_ifp; 2384 int error = 0; 2385 struct ifreq *ifr; 2386 struct ifaddr *ifa; /* XXX */ 2387 2388 switch (cmd) { 2389 case SIOCSIFMEDIA: 2390 case SIOCGIFMEDIA: 2391 error = ifmedia_ioctl(ifp, (struct ifreq *) data, 2392 &ic->ic_media, cmd); 2393 break; 2394 case SIOCG80211: 2395 error = ieee80211_ioctl_get80211(ic, cmd, 2396 (struct ieee80211req *) data); 2397 break; 2398 case SIOCS80211: 2399 error = suser(curthread); 2400 if (error == 0) 2401 error = ieee80211_ioctl_set80211(ic, cmd, 2402 (struct ieee80211req *) data); 2403 break; 2404 case SIOCGIFGENERIC: 2405 error = ieee80211_cfgget(ic, cmd, data); 2406 break; 2407 case SIOCSIFGENERIC: 2408 error = suser(curthread); 2409 if (error) 2410 break; 2411 error = ieee80211_cfgset(ic, cmd, data); 2412 break; 2413 case SIOCG80211STATS: 2414 ifr = (struct ifreq *)data; 2415 copyout(&ic->ic_stats, ifr->ifr_data, sizeof (ic->ic_stats)); 2416 break; 2417 case SIOCSIFMTU: 2418 ifr = (struct ifreq *)data; 2419 if (!(IEEE80211_MTU_MIN <= ifr->ifr_mtu && 2420 ifr->ifr_mtu <= IEEE80211_MTU_MAX)) 2421 error = EINVAL; 2422 else 2423 ifp->if_mtu = ifr->ifr_mtu; 2424 break; 2425 case SIOCSIFADDR: 2426 /* 2427 * XXX Handle this directly so we can supress if_init calls. 2428 * XXX This should be done in ether_ioctl but for the moment 2429 * XXX there are too many other parts of the system that 2430 * XXX set IFF_UP and so supress if_init being called when 2431 * XXX it should be. 2432 */ 2433 ifa = (struct ifaddr *) data; 2434 switch (ifa->ifa_addr->sa_family) { 2435 #ifdef INET 2436 case AF_INET: 2437 if ((ifp->if_flags & IFF_UP) == 0) { 2438 ifp->if_flags |= IFF_UP; 2439 ifp->if_init(ifp->if_softc); 2440 } 2441 arp_ifinit(ifp, ifa); 2442 break; 2443 #endif 2444 #ifdef IPX 2445 /* 2446 * XXX - This code is probably wrong, 2447 * but has been copied many times. 2448 */ 2449 case AF_IPX: { 2450 struct ipx_addr *ina = &(IA_SIPX(ifa)->sipx_addr); 2451 2452 if (ipx_nullhost(*ina)) 2453 ina->x_host = *(union ipx_host *) 2454 IFP2ENADDR(ifp); 2455 else 2456 bcopy((caddr_t) ina->x_host.c_host, 2457 (caddr_t) IFP2ENADDR(ifp), 2458 ETHER_ADDR_LEN); 2459 /* fall thru... */ 2460 } 2461 #endif 2462 default: 2463 if ((ifp->if_flags & IFF_UP) == 0) { 2464 ifp->if_flags |= IFF_UP; 2465 ifp->if_init(ifp->if_softc); 2466 } 2467 break; 2468 } 2469 break; 2470 default: 2471 error = ether_ioctl(ifp, cmd, data); 2472 break; 2473 } 2474 return error; 2475 } 2476 #endif /* __FreeBSD__ */ 2477 2478 #ifdef COMPAT_20 2479 static void 2480 ieee80211_get_ostats(struct ieee80211_ostats *ostats, 2481 struct ieee80211_stats *stats) 2482 { 2483 #define COPYSTATS1(__ostats, __nstats, __dstmemb, __srcmemb, __lastmemb)\ 2484 (void)memcpy(&(__ostats)->__dstmemb, &(__nstats)->__srcmemb, \ 2485 offsetof(struct ieee80211_stats, __lastmemb) - \ 2486 offsetof(struct ieee80211_stats, __srcmemb)) 2487 #define COPYSTATS(__ostats, __nstats, __dstmemb, __lastmemb) \ 2488 COPYSTATS1(__ostats, __nstats, __dstmemb, __dstmemb, __lastmemb) 2489 2490 COPYSTATS(ostats, stats, is_rx_badversion, is_rx_unencrypted); 2491 COPYSTATS(ostats, stats, is_rx_wepfail, is_rx_beacon); 2492 COPYSTATS(ostats, stats, is_rx_rstoobig, is_rx_auth_countermeasures); 2493 COPYSTATS(ostats, stats, is_rx_assoc_bss, is_rx_assoc_badwpaie); 2494 COPYSTATS(ostats, stats, is_rx_deauth, is_rx_unauth); 2495 COPYSTATS1(ostats, stats, is_tx_nombuf, is_tx_nobuf, is_tx_badcipher); 2496 COPYSTATS(ostats, stats, is_scan_active, is_crypto_tkip); 2497 } 2498 #endif /* COMPAT_20 */ 2499 2500 #ifdef __NetBSD__ 2501 int 2502 ieee80211_ioctl(struct ieee80211com *ic, u_long cmd, caddr_t data) 2503 { 2504 struct ifnet *ifp = ic->ic_ifp; 2505 struct ifreq *ifr = (struct ifreq *)data; 2506 int i, error = 0, kid, klen, s; 2507 struct ieee80211_key *k; 2508 struct ieee80211_nwid nwid; 2509 struct ieee80211_nwkey *nwkey; 2510 struct ieee80211_power *power; 2511 struct ieee80211_bssid *bssid; 2512 struct ieee80211chanreq *chanreq; 2513 struct ieee80211_channel *chan; 2514 uint32_t oflags; 2515 #ifdef COMPAT_20 2516 struct ieee80211_ostats ostats; 2517 #endif /* COMPAT_20 */ 2518 static const u_int8_t empty_macaddr[IEEE80211_ADDR_LEN] = { 2519 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 2520 }; 2521 u_int8_t tmpkey[IEEE80211_WEP_NKID][IEEE80211_KEYBUF_SIZE]; 2522 2523 switch (cmd) { 2524 case SIOCSIFMEDIA: 2525 case SIOCGIFMEDIA: 2526 error = ifmedia_ioctl(ifp, ifr, &ic->ic_media, cmd); 2527 break; 2528 case SIOCG80211: 2529 error = ieee80211_ioctl_get80211(ic, cmd, 2530 (struct ieee80211req *) data); 2531 break; 2532 case SIOCS80211: 2533 if ((error = suser(curproc->p_ucred, &curproc->p_acflag)) != 0) 2534 break; 2535 error = ieee80211_ioctl_set80211(ic, cmd, 2536 (struct ieee80211req *) data); 2537 break; 2538 case SIOCS80211NWID: 2539 if ((error = copyin(ifr->ifr_data, &nwid, sizeof(nwid))) != 0) 2540 break; 2541 if (nwid.i_len > IEEE80211_NWID_LEN) { 2542 error = EINVAL; 2543 break; 2544 } 2545 memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN); 2546 ic->ic_des_esslen = nwid.i_len; 2547 memcpy(ic->ic_des_essid, nwid.i_nwid, nwid.i_len); 2548 error = ENETRESET; 2549 break; 2550 case SIOCG80211NWID: 2551 memset(&nwid, 0, sizeof(nwid)); 2552 switch (ic->ic_state) { 2553 case IEEE80211_S_INIT: 2554 case IEEE80211_S_SCAN: 2555 nwid.i_len = ic->ic_des_esslen; 2556 memcpy(nwid.i_nwid, ic->ic_des_essid, nwid.i_len); 2557 break; 2558 default: 2559 nwid.i_len = ic->ic_bss->ni_esslen; 2560 memcpy(nwid.i_nwid, ic->ic_bss->ni_essid, nwid.i_len); 2561 break; 2562 } 2563 error = copyout(&nwid, ifr->ifr_data, sizeof(nwid)); 2564 break; 2565 case SIOCS80211NWKEY: 2566 nwkey = (struct ieee80211_nwkey *)data; 2567 /* transmit key index out of range? */ 2568 kid = nwkey->i_defkid - 1; 2569 if (kid < 0 || kid >= IEEE80211_WEP_NKID) { 2570 error = EINVAL; 2571 break; 2572 } 2573 /* no such transmit key is set? */ 2574 if (nwkey->i_key[kid].i_keylen == 0 || 2575 (nwkey->i_key[kid].i_keylen == -1 && 2576 ic->ic_nw_keys[kid].wk_keylen == 0)) { 2577 if (nwkey->i_wepon != IEEE80211_NWKEY_OPEN) { 2578 error = EINVAL; 2579 break; 2580 } 2581 } 2582 /* check key lengths */ 2583 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2584 klen = nwkey->i_key[kid].i_keylen; 2585 if ((klen > 0 && 2586 klen < IEEE80211_WEP_KEYLEN) || 2587 klen > sizeof(ic->ic_nw_keys[kid].wk_key)) { 2588 error = EINVAL; 2589 break; 2590 } 2591 } 2592 2593 if (error) 2594 break; 2595 2596 /* copy in keys */ 2597 (void)memset(tmpkey, 0, sizeof(tmpkey)); 2598 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2599 klen = nwkey->i_key[kid].i_keylen; 2600 if (klen <= 0) 2601 continue; 2602 if ((error = copyin(nwkey->i_key[kid].i_keydat, 2603 tmpkey[kid], klen)) != 0) 2604 break; 2605 } 2606 2607 if (error) 2608 break; 2609 2610 /* set keys */ 2611 ieee80211_key_update_begin(ic); 2612 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2613 klen = nwkey->i_key[kid].i_keylen; 2614 if (klen <= 0) 2615 continue; 2616 k = &ic->ic_nw_keys[kid]; 2617 k->wk_keyix = kid; 2618 if (!ieee80211_crypto_newkey(ic, IEEE80211_CIPHER_WEP, 2619 IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV, k)) { 2620 error = EINVAL; 2621 continue; 2622 } 2623 k->wk_keylen = nwkey->i_key[kid].i_keylen; 2624 (void)memcpy(k->wk_key, tmpkey[kid], 2625 sizeof(tmpkey[kid])); 2626 if (!ieee80211_crypto_setkey(ic, k, ic->ic_myaddr)) 2627 error = EINVAL; 2628 } 2629 ieee80211_key_update_end(ic); 2630 2631 if (error) 2632 break; 2633 2634 /* delete keys */ 2635 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2636 klen = nwkey->i_key[kid].i_keylen; 2637 k = &ic->ic_nw_keys[kid]; 2638 if (klen <= 0) 2639 (void)ieee80211_crypto_delkey(ic, k); 2640 } 2641 2642 /* set transmit key */ 2643 kid = nwkey->i_defkid - 1; 2644 if (ic->ic_def_txkey != kid) { 2645 ic->ic_def_txkey = kid; 2646 error = ENETRESET; 2647 } 2648 oflags = ic->ic_flags; 2649 if (nwkey->i_wepon == IEEE80211_NWKEY_OPEN) { 2650 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 2651 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 2652 } else { 2653 ic->ic_flags |= IEEE80211_F_PRIVACY; 2654 ic->ic_flags |= IEEE80211_F_DROPUNENC; 2655 } 2656 if (oflags != ic->ic_flags) 2657 error = ENETRESET; 2658 break; 2659 case SIOCG80211NWKEY: 2660 nwkey = (struct ieee80211_nwkey *)data; 2661 if (ic->ic_flags & IEEE80211_F_PRIVACY) 2662 nwkey->i_wepon = IEEE80211_NWKEY_WEP; 2663 else 2664 nwkey->i_wepon = IEEE80211_NWKEY_OPEN; 2665 nwkey->i_defkid = ic->ic_def_txkey + 1; 2666 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 2667 if (nwkey->i_key[i].i_keydat == NULL) 2668 continue; 2669 /* do not show any keys to non-root user */ 2670 if ((error = suser(curproc->p_ucred, 2671 &curproc->p_acflag)) != 0) 2672 break; 2673 nwkey->i_key[i].i_keylen = ic->ic_nw_keys[i].wk_keylen; 2674 if ((error = copyout(ic->ic_nw_keys[i].wk_key, 2675 nwkey->i_key[i].i_keydat, 2676 ic->ic_nw_keys[i].wk_keylen)) != 0) 2677 break; 2678 } 2679 break; 2680 case SIOCS80211POWER: 2681 power = (struct ieee80211_power *)data; 2682 ic->ic_lintval = power->i_maxsleep; 2683 if (power->i_enabled != 0) { 2684 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 2685 error = EINVAL; 2686 else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 2687 ic->ic_flags |= IEEE80211_F_PMGTON; 2688 error = ENETRESET; 2689 } 2690 } else { 2691 if (ic->ic_flags & IEEE80211_F_PMGTON) { 2692 ic->ic_flags &= ~IEEE80211_F_PMGTON; 2693 error = ENETRESET; 2694 } 2695 } 2696 break; 2697 case SIOCG80211POWER: 2698 power = (struct ieee80211_power *)data; 2699 power->i_enabled = (ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0; 2700 power->i_maxsleep = ic->ic_lintval; 2701 break; 2702 case SIOCS80211BSSID: 2703 bssid = (struct ieee80211_bssid *)data; 2704 if (IEEE80211_ADDR_EQ(bssid->i_bssid, empty_macaddr)) 2705 ic->ic_flags &= ~IEEE80211_F_DESBSSID; 2706 else { 2707 ic->ic_flags |= IEEE80211_F_DESBSSID; 2708 IEEE80211_ADDR_COPY(ic->ic_des_bssid, bssid->i_bssid); 2709 } 2710 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 2711 break; 2712 switch (ic->ic_state) { 2713 case IEEE80211_S_INIT: 2714 case IEEE80211_S_SCAN: 2715 error = ENETRESET; 2716 break; 2717 default: 2718 if ((ic->ic_flags & IEEE80211_F_DESBSSID) && 2719 !IEEE80211_ADDR_EQ(ic->ic_des_bssid, 2720 ic->ic_bss->ni_bssid)) 2721 error = ENETRESET; 2722 break; 2723 } 2724 break; 2725 case SIOCG80211BSSID: 2726 bssid = (struct ieee80211_bssid *)data; 2727 switch (ic->ic_state) { 2728 case IEEE80211_S_INIT: 2729 case IEEE80211_S_SCAN: 2730 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 2731 IEEE80211_ADDR_COPY(bssid->i_bssid, 2732 ic->ic_myaddr); 2733 else if (ic->ic_flags & IEEE80211_F_DESBSSID) 2734 IEEE80211_ADDR_COPY(bssid->i_bssid, 2735 ic->ic_des_bssid); 2736 else 2737 memset(bssid->i_bssid, 0, IEEE80211_ADDR_LEN); 2738 break; 2739 default: 2740 IEEE80211_ADDR_COPY(bssid->i_bssid, 2741 ic->ic_bss->ni_bssid); 2742 break; 2743 } 2744 break; 2745 case SIOCS80211CHANNEL: 2746 chanreq = (struct ieee80211chanreq *)data; 2747 if (chanreq->i_channel == IEEE80211_CHAN_ANY) 2748 ic->ic_des_chan = IEEE80211_CHAN_ANYC; 2749 else if (chanreq->i_channel > IEEE80211_CHAN_MAX || 2750 isclr(ic->ic_chan_active, chanreq->i_channel)) { 2751 error = EINVAL; 2752 break; 2753 } else 2754 ic->ic_ibss_chan = ic->ic_des_chan = 2755 &ic->ic_channels[chanreq->i_channel]; 2756 switch (ic->ic_state) { 2757 case IEEE80211_S_INIT: 2758 case IEEE80211_S_SCAN: 2759 error = ENETRESET; 2760 break; 2761 default: 2762 if (ic->ic_opmode == IEEE80211_M_STA) { 2763 if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 2764 ic->ic_bss->ni_chan != ic->ic_des_chan) 2765 error = ENETRESET; 2766 } else { 2767 if (ic->ic_bss->ni_chan != ic->ic_ibss_chan) 2768 error = ENETRESET; 2769 } 2770 break; 2771 } 2772 break; 2773 case SIOCG80211CHANNEL: 2774 chanreq = (struct ieee80211chanreq *)data; 2775 switch (ic->ic_state) { 2776 case IEEE80211_S_INIT: 2777 case IEEE80211_S_SCAN: 2778 if (ic->ic_opmode == IEEE80211_M_STA) 2779 chan = ic->ic_des_chan; 2780 else 2781 chan = ic->ic_ibss_chan; 2782 break; 2783 default: 2784 chan = ic->ic_bss->ni_chan; 2785 break; 2786 } 2787 chanreq->i_channel = ieee80211_chan2ieee(ic, chan); 2788 break; 2789 case SIOCGIFGENERIC: 2790 error = ieee80211_cfgget(ic, cmd, data); 2791 break; 2792 case SIOCSIFGENERIC: 2793 error = suser(curproc->p_ucred, &curproc->p_acflag); 2794 if (error) 2795 break; 2796 error = ieee80211_cfgset(ic, cmd, data); 2797 break; 2798 #ifdef COMPAT_20 2799 case OSIOCG80211STATS: 2800 case OSIOCG80211ZSTATS: 2801 ifr = (struct ifreq *)data; 2802 s = splnet(); 2803 ieee80211_get_ostats(&ostats, &ic->ic_stats); 2804 error = copyout(&ostats, ifr->ifr_data, sizeof(ostats)); 2805 if (error == 0 && cmd == OSIOCG80211ZSTATS) 2806 (void)memset(&ic->ic_stats, 0, sizeof(ic->ic_stats)); 2807 splx(s); 2808 break; 2809 #endif /* COMPAT_20 */ 2810 case SIOCG80211ZSTATS: 2811 case SIOCG80211STATS: 2812 ifr = (struct ifreq *)data; 2813 s = splnet(); 2814 error = copyout(&ic->ic_stats, ifr->ifr_buf, 2815 MIN(sizeof(ic->ic_stats), ifr->ifr_buflen)); 2816 if (error == 0 && cmd == SIOCG80211ZSTATS) 2817 (void)memset(&ic->ic_stats, 0, sizeof(ic->ic_stats)); 2818 splx(s); 2819 break; 2820 case SIOCSIFMTU: 2821 ifr = (struct ifreq *)data; 2822 if (!(IEEE80211_MTU_MIN <= ifr->ifr_mtu && 2823 ifr->ifr_mtu <= IEEE80211_MTU_MAX)) 2824 error = EINVAL; 2825 else 2826 ifp->if_mtu = ifr->ifr_mtu; 2827 break; 2828 default: 2829 error = ether_ioctl(ifp, cmd, data); 2830 break; 2831 } 2832 return error; 2833 } 2834 #endif /* __NetBSD__ */ 2835
Indexes created Tue Sep 30 06:09:59 GMT 2025