ieee80211_ioctl.c revision 1.23
1 /* $NetBSD: ieee80211_ioctl.c,v 1.23 2005/07/27 07:01:25 dyoung Exp $ */ 2 /*- 3 * Copyright (c) 2001 Atsushi Onoe 4 * Copyright (c) 2002-2005 Sam Leffler, Errno Consulting 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 3. The name of the author may not be used to endorse or promote products 16 * derived from this software without specific prior written permission. 17 * 18 * Alternatively, this software may be distributed under the terms of the 19 * GNU General Public License ("GPL") version 2 as published by the Free 20 * Software Foundation. 21 * 22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34 #include <sys/cdefs.h> 35 #ifdef __FreeBSD__ 36 __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_ioctl.c,v 1.25 2005/07/06 15:38:27 sam Exp $"); 37 #endif 38 #ifdef __NetBSD__ 39 __KERNEL_RCSID(0, "$NetBSD: ieee80211_ioctl.c,v 1.23 2005/07/27 07:01:25 dyoung Exp $"); 40 #endif 41 42 /* 43 * IEEE 802.11 ioctl support (FreeBSD-specific) 44 */ 45 46 #include "opt_inet.h" 47 48 #include <sys/endian.h> 49 #include <sys/param.h> 50 #include <sys/kernel.h> 51 #include <sys/socket.h> 52 #include <sys/sockio.h> 53 #include <sys/systm.h> 54 #include <sys/proc.h> 55 56 #include <net/if.h> 57 #include <net/if_arp.h> 58 #include <net/if_media.h> 59 #include <net/if_ether.h> 60 61 #ifdef INET 62 #include <netinet/in.h> 63 #include <netinet/if_inarp.h> 64 #endif 65 66 #include <net80211/ieee80211_var.h> 67 #include <net80211/ieee80211_ioctl.h> 68 69 #include <dev/ic/wi_ieee.h> 70 71 #define IS_UP(_ic) \ 72 (((_ic)->ic_ifp->if_flags & (IFF_RUNNING|IFF_UP)) == (IFF_RUNNING|IFF_UP)) 73 #define IS_UP_AUTO(_ic) \ 74 (IS_UP(_ic) && (_ic)->ic_roaming == IEEE80211_ROAMING_AUTO) 75 76 /* 77 * XXX 78 * Wireless LAN specific configuration interface, which is compatible 79 * with wicontrol(8). 80 */ 81 82 struct wi_read_ap_args { 83 int i; /* result count */ 84 struct wi_apinfo *ap; /* current entry in result buffer */ 85 caddr_t max; /* result buffer bound */ 86 }; 87 88 static void 89 wi_read_ap_result(void *arg, struct ieee80211_node *ni) 90 { 91 struct ieee80211com *ic = ni->ni_ic; 92 struct wi_read_ap_args *sa = arg; 93 struct wi_apinfo *ap = sa->ap; 94 struct ieee80211_rateset *rs; 95 int j; 96 97 if ((caddr_t)(ap + 1) > sa->max) 98 return; 99 memset(ap, 0, sizeof(struct wi_apinfo)); 100 if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 101 IEEE80211_ADDR_COPY(ap->bssid, ni->ni_macaddr); 102 ap->namelen = ic->ic_des_esslen; 103 if (ic->ic_des_esslen) 104 memcpy(ap->name, ic->ic_des_essid, 105 ic->ic_des_esslen); 106 } else { 107 IEEE80211_ADDR_COPY(ap->bssid, ni->ni_bssid); 108 ap->namelen = ni->ni_esslen; 109 if (ni->ni_esslen) 110 memcpy(ap->name, ni->ni_essid, 111 ni->ni_esslen); 112 } 113 ap->channel = ieee80211_chan2ieee(ic, ni->ni_chan); 114 ap->signal = ic->ic_node_getrssi(ni); 115 ap->capinfo = ni->ni_capinfo; 116 ap->interval = ni->ni_intval; 117 rs = &ni->ni_rates; 118 for (j = 0; j < rs->rs_nrates; j++) { 119 if (rs->rs_rates[j] & IEEE80211_RATE_BASIC) { 120 ap->rate = (rs->rs_rates[j] & 121 IEEE80211_RATE_VAL) * 5; /* XXX */ 122 } 123 } 124 sa->i++; 125 sa->ap++; 126 } 127 128 struct wi_read_prism2_args { 129 int i; /* result count */ 130 struct wi_scan_res *res;/* current entry in result buffer */ 131 caddr_t max; /* result buffer bound */ 132 }; 133 134 #if 0 135 static void 136 wi_read_prism2_result(void *arg, struct ieee80211_node *ni) 137 { 138 struct ieee80211com *ic = ni->ni_ic; 139 struct wi_read_prism2_args *sa = arg; 140 struct wi_scan_res *res = sa->res; 141 142 if ((caddr_t)(res + 1) > sa->max) 143 return; 144 res->wi_chan = ieee80211_chan2ieee(ic, ni->ni_chan); 145 res->wi_noise = 0; 146 res->wi_signal = ic->ic_node_getrssi(ni); 147 IEEE80211_ADDR_COPY(res->wi_bssid, ni->ni_bssid); 148 res->wi_interval = ni->ni_intval; 149 res->wi_capinfo = ni->ni_capinfo; 150 res->wi_ssid_len = ni->ni_esslen; 151 memcpy(res->wi_ssid, ni->ni_essid, IEEE80211_NWID_LEN); 152 /* NB: assumes wi_srates holds <= ni->ni_rates */ 153 memcpy(res->wi_srates, ni->ni_rates.rs_rates, 154 sizeof(res->wi_srates)); 155 if (ni->ni_rates.rs_nrates < 10) 156 res->wi_srates[ni->ni_rates.rs_nrates] = 0; 157 res->wi_rate = ni->ni_rates.rs_rates[ni->ni_txrate]; 158 res->wi_rsvd = 0; 159 160 sa->i++; 161 sa->res++; 162 } 163 164 struct wi_read_sigcache_args { 165 int i; /* result count */ 166 struct wi_sigcache *wsc;/* current entry in result buffer */ 167 caddr_t max; /* result buffer bound */ 168 }; 169 170 static void 171 wi_read_sigcache(void *arg, struct ieee80211_node *ni) 172 { 173 struct ieee80211com *ic = ni->ni_ic; 174 struct wi_read_sigcache_args *sa = arg; 175 struct wi_sigcache *wsc = sa->wsc; 176 177 if ((caddr_t)(wsc + 1) > sa->max) 178 return; 179 memset(wsc, 0, sizeof(struct wi_sigcache)); 180 IEEE80211_ADDR_COPY(wsc->macsrc, ni->ni_macaddr); 181 wsc->signal = ic->ic_node_getrssi(ni); 182 183 sa->wsc++; 184 sa->i++; 185 } 186 #endif 187 188 int 189 ieee80211_cfgget(struct ieee80211com *ic, u_long cmd, caddr_t data) 190 { 191 struct ifnet *ifp = ic->ic_ifp; 192 int i, j, error; 193 struct ifreq *ifr = (struct ifreq *)data; 194 struct wi_req wreq; 195 struct wi_ltv_keys *keys; 196 197 error = copyin(ifr->ifr_data, &wreq, sizeof(wreq)); 198 if (error) 199 return error; 200 wreq.wi_len = 0; 201 switch (wreq.wi_type) { 202 case WI_RID_SERIALNO: 203 case WI_RID_STA_IDENTITY: 204 /* nothing appropriate */ 205 break; 206 case WI_RID_NODENAME: 207 strlcpy((char *)&wreq.wi_val[1], hostname, 208 sizeof(wreq.wi_val) - sizeof(wreq.wi_val[0])); 209 wreq.wi_val[0] = htole16(strlen(hostname)); 210 wreq.wi_len = (1 + strlen(hostname) + 1) / 2; 211 break; 212 case WI_RID_CURRENT_SSID: 213 if (ic->ic_state != IEEE80211_S_RUN) { 214 wreq.wi_val[0] = 0; 215 wreq.wi_len = 1; 216 break; 217 } 218 wreq.wi_val[0] = htole16(ic->ic_bss->ni_esslen); 219 memcpy(&wreq.wi_val[1], ic->ic_bss->ni_essid, 220 ic->ic_bss->ni_esslen); 221 wreq.wi_len = (1 + ic->ic_bss->ni_esslen + 1) / 2; 222 break; 223 case WI_RID_OWN_SSID: 224 case WI_RID_DESIRED_SSID: 225 wreq.wi_val[0] = htole16(ic->ic_des_esslen); 226 memcpy(&wreq.wi_val[1], ic->ic_des_essid, ic->ic_des_esslen); 227 wreq.wi_len = (1 + ic->ic_des_esslen + 1) / 2; 228 break; 229 case WI_RID_CURRENT_BSSID: 230 if (ic->ic_state == IEEE80211_S_RUN) 231 IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_bss->ni_bssid); 232 else 233 memset(wreq.wi_val, 0, IEEE80211_ADDR_LEN); 234 wreq.wi_len = IEEE80211_ADDR_LEN / 2; 235 break; 236 case WI_RID_CHANNEL_LIST: 237 memset(wreq.wi_val, 0, sizeof(wreq.wi_val)); 238 /* 239 * Since channel 0 is not available for DS, channel 1 240 * is assigned to LSB on WaveLAN. 241 */ 242 if (ic->ic_phytype == IEEE80211_T_DS) 243 i = 1; 244 else 245 i = 0; 246 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) 247 if (isset(ic->ic_chan_active, i)) { 248 setbit((u_int8_t *)wreq.wi_val, j); 249 wreq.wi_len = j / 16 + 1; 250 } 251 break; 252 case WI_RID_OWN_CHNL: 253 wreq.wi_val[0] = htole16( 254 ieee80211_chan2ieee(ic, ic->ic_ibss_chan)); 255 wreq.wi_len = 1; 256 break; 257 case WI_RID_CURRENT_CHAN: 258 wreq.wi_val[0] = htole16( 259 ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan)); 260 wreq.wi_len = 1; 261 break; 262 case WI_RID_COMMS_QUALITY: 263 wreq.wi_val[0] = 0; /* quality */ 264 wreq.wi_val[1] = htole16(ic->ic_node_getrssi(ic->ic_bss)); 265 wreq.wi_val[2] = 0; /* noise */ 266 wreq.wi_len = 3; 267 break; 268 case WI_RID_PROMISC: 269 wreq.wi_val[0] = htole16((ifp->if_flags & IFF_PROMISC) ? 1 : 0); 270 wreq.wi_len = 1; 271 break; 272 case WI_RID_PORTTYPE: 273 wreq.wi_val[0] = htole16(ic->ic_opmode); 274 wreq.wi_len = 1; 275 break; 276 case WI_RID_MAC_NODE: 277 IEEE80211_ADDR_COPY(wreq.wi_val, ic->ic_myaddr); 278 wreq.wi_len = IEEE80211_ADDR_LEN / 2; 279 break; 280 case WI_RID_TX_RATE: 281 if (ic->ic_fixed_rate == -1) 282 wreq.wi_val[0] = 0; /* auto */ 283 else 284 wreq.wi_val[0] = htole16( 285 (ic->ic_sup_rates[ic->ic_curmode].rs_rates[ic->ic_fixed_rate] & 286 IEEE80211_RATE_VAL) / 2); 287 wreq.wi_len = 1; 288 break; 289 case WI_RID_CUR_TX_RATE: 290 wreq.wi_val[0] = htole16( 291 (ic->ic_bss->ni_rates.rs_rates[ic->ic_bss->ni_txrate] & 292 IEEE80211_RATE_VAL) / 2); 293 wreq.wi_len = 1; 294 break; 295 case WI_RID_FRAG_THRESH: 296 wreq.wi_val[0] = htole16(ic->ic_fragthreshold); 297 wreq.wi_len = 1; 298 break; 299 case WI_RID_RTS_THRESH: 300 wreq.wi_val[0] = htole16(ic->ic_rtsthreshold); 301 wreq.wi_len = 1; 302 break; 303 case WI_RID_CREATE_IBSS: 304 wreq.wi_val[0] = 305 htole16((ic->ic_flags & IEEE80211_F_IBSSON) ? 1 : 0); 306 wreq.wi_len = 1; 307 break; 308 case WI_RID_MICROWAVE_OVEN: 309 wreq.wi_val[0] = 0; /* no ... not supported */ 310 wreq.wi_len = 1; 311 break; 312 case WI_RID_ROAMING_MODE: 313 wreq.wi_val[0] = htole16(ic->ic_roaming); /* XXX map */ 314 wreq.wi_len = 1; 315 break; 316 case WI_RID_SYSTEM_SCALE: 317 wreq.wi_val[0] = htole16(1); /* low density ... not supp */ 318 wreq.wi_len = 1; 319 break; 320 case WI_RID_PM_ENABLED: 321 wreq.wi_val[0] = 322 htole16((ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0); 323 wreq.wi_len = 1; 324 break; 325 case WI_RID_MAX_SLEEP: 326 wreq.wi_val[0] = htole16(ic->ic_lintval); 327 wreq.wi_len = 1; 328 break; 329 case WI_RID_CUR_BEACON_INT: 330 wreq.wi_val[0] = htole16(ic->ic_bss->ni_intval); 331 wreq.wi_len = 1; 332 break; 333 case WI_RID_WEP_AVAIL: 334 wreq.wi_val[0] = htole16(1); /* always available */ 335 wreq.wi_len = 1; 336 break; 337 case WI_RID_CNFAUTHMODE: 338 wreq.wi_val[0] = htole16(1); /* TODO: open system only */ 339 wreq.wi_len = 1; 340 break; 341 case WI_RID_ENCRYPTION: 342 wreq.wi_val[0] = 343 htole16((ic->ic_flags & IEEE80211_F_PRIVACY) ? 1 : 0); 344 wreq.wi_len = 1; 345 break; 346 case WI_RID_TX_CRYPT_KEY: 347 wreq.wi_val[0] = htole16(ic->ic_def_txkey); 348 wreq.wi_len = 1; 349 break; 350 case WI_RID_DEFLT_CRYPT_KEYS: 351 keys = (struct wi_ltv_keys *)&wreq; 352 /* do not show keys to non-root user */ 353 error = suser(curproc->p_ucred, &curproc->p_acflag); 354 if (error) { 355 memset(keys, 0, sizeof(*keys)); 356 error = 0; 357 break; 358 } 359 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 360 keys->wi_keys[i].wi_keylen = 361 htole16(ic->ic_nw_keys[i].wk_keylen); 362 memcpy(keys->wi_keys[i].wi_keydat, 363 ic->ic_nw_keys[i].wk_key, 364 ic->ic_nw_keys[i].wk_keylen); 365 } 366 wreq.wi_len = sizeof(*keys) / 2; 367 break; 368 case WI_RID_MAX_DATALEN: 369 wreq.wi_val[0] = htole16(ic->ic_fragthreshold); 370 wreq.wi_len = 1; 371 break; 372 case WI_RID_DBM_ADJUST: 373 /* not supported, we just pass rssi value from driver. */ 374 break; 375 case WI_RID_IFACE_STATS: 376 /* XXX: should be implemented in lower drivers */ 377 break; 378 case WI_RID_READ_APS: 379 /* 380 * Don't return results until active scan completes. 381 */ 382 if ((ic->ic_flags & (IEEE80211_F_SCAN|IEEE80211_F_ASCAN)) == 0) { 383 struct wi_read_ap_args args; 384 385 args.i = 0; 386 args.ap = (void *)((char *)wreq.wi_val + sizeof(i)); 387 args.max = (void *)(&wreq + 1); 388 ieee80211_iterate_nodes(&ic->ic_scan, 389 wi_read_ap_result, &args); 390 memcpy(wreq.wi_val, &args.i, sizeof(args.i)); 391 wreq.wi_len = (sizeof(int) + 392 sizeof(struct wi_apinfo) * args.i) / 2; 393 } else 394 error = EINPROGRESS; 395 break; 396 #if 0 397 case WI_RID_SCAN_RES: /* compatibility interface */ 398 if ((ic->ic_flags & (IEEE80211_F_SCAN|IEEE80211_F_ASCAN)) == 0) { 399 struct wi_read_prism2_args args; 400 struct wi_scan_p2_hdr *p2; 401 402 /* NB: use Prism2 format so we can include rate info */ 403 p2 = (struct wi_scan_p2_hdr *)wreq.wi_val; 404 args.i = 0; 405 args.res = (void *)&p2[1]; 406 args.max = (void *)(&wreq + 1); 407 ieee80211_iterate_nodes(&ic->ic_scan, 408 wi_read_prism2_result, &args); 409 p2->wi_rsvd = 0; 410 p2->wi_reason = args.i; 411 wreq.wi_len = (sizeof(*p2) + 412 sizeof(struct wi_scan_res) * args.i) / 2; 413 } else 414 error = EINPROGRESS; 415 break; 416 case WI_RID_READ_CACHE: { 417 struct wi_read_sigcache_args args; 418 args.i = 0; 419 args.wsc = (struct wi_sigcache *) wreq.wi_val; 420 args.max = (void *)(&wreq + 1); 421 ieee80211_iterate_nodes(&ic->ic_scan, wi_read_sigcache, &args); 422 wreq.wi_len = sizeof(struct wi_sigcache) * args.i / 2; 423 break; 424 } 425 #endif 426 default: 427 error = EINVAL; 428 break; 429 } 430 if (error == 0) { 431 wreq.wi_len++; 432 error = copyout(&wreq, ifr->ifr_data, sizeof(wreq)); 433 } 434 return error; 435 } 436 437 static int 438 findrate(struct ieee80211com *ic, enum ieee80211_phymode mode, int rate) 439 { 440 #define IEEERATE(_ic,_m,_i) \ 441 ((_ic)->ic_sup_rates[_m].rs_rates[_i] & IEEE80211_RATE_VAL) 442 int i, nrates = ic->ic_sup_rates[mode].rs_nrates; 443 for (i = 0; i < nrates; i++) 444 if (IEEERATE(ic, mode, i) == rate) 445 return i; 446 return -1; 447 #undef IEEERATE 448 } 449 450 /* 451 * Prepare to do a user-initiated scan for AP's. If no 452 * current/default channel is setup or the current channel 453 * is invalid then pick the first available channel from 454 * the active list as the place to start the scan. 455 */ 456 static int 457 ieee80211_setupscan(struct ieee80211com *ic, const u_int8_t chanlist[]) 458 { 459 int i; 460 461 /* 462 * XXX don't permit a scan to be started unless we 463 * know the device is ready. For the moment this means 464 * the device is marked up as this is the required to 465 * initialize the hardware. It would be better to permit 466 * scanning prior to being up but that'll require some 467 * changes to the infrastructure. 468 */ 469 if (!IS_UP(ic)) 470 return EINVAL; 471 if (ic->ic_ibss_chan == NULL || 472 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_ibss_chan))) { 473 for (i = 0; i <= IEEE80211_CHAN_MAX; i++) 474 if (isset(chanlist, i)) { 475 ic->ic_ibss_chan = &ic->ic_channels[i]; 476 goto found; 477 } 478 return EINVAL; /* no active channels */ 479 found: 480 ; 481 } 482 if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC || 483 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan))) 484 ic->ic_bss->ni_chan = ic->ic_ibss_chan; 485 memcpy(ic->ic_chan_active, chanlist, sizeof(ic->ic_chan_active)); 486 /* 487 * We force the state to INIT before calling ieee80211_new_state 488 * to get ieee80211_begin_scan called. We really want to scan w/o 489 * altering the current state but that's not possible right now. 490 */ 491 /* XXX handle proberequest case */ 492 ic->ic_state = IEEE80211_S_INIT; /* XXX bypass state machine */ 493 return 0; 494 } 495 496 int 497 ieee80211_cfgset(struct ieee80211com *ic, u_long cmd, caddr_t data) 498 { 499 struct ifnet *ifp = ic->ic_ifp; 500 int i, j, len, error, rate; 501 struct ifreq *ifr = (struct ifreq *)data; 502 struct wi_ltv_keys *keys; 503 struct wi_req wreq; 504 u_char chanlist[roundup(IEEE80211_CHAN_MAX, NBBY)]; 505 506 error = copyin(ifr->ifr_data, &wreq, sizeof(wreq)); 507 if (error) 508 return error; 509 len = wreq.wi_len ? (wreq.wi_len - 1) * 2 : 0; 510 switch (wreq.wi_type) { 511 case WI_RID_SERIALNO: 512 case WI_RID_NODENAME: 513 return EPERM; 514 case WI_RID_CURRENT_SSID: 515 return EPERM; 516 case WI_RID_OWN_SSID: 517 case WI_RID_DESIRED_SSID: 518 if (le16toh(wreq.wi_val[0]) * 2 > len || 519 le16toh(wreq.wi_val[0]) > IEEE80211_NWID_LEN) { 520 error = ENOSPC; 521 break; 522 } 523 memset(ic->ic_des_essid, 0, sizeof(ic->ic_des_essid)); 524 ic->ic_des_esslen = le16toh(wreq.wi_val[0]) * 2; 525 memcpy(ic->ic_des_essid, &wreq.wi_val[1], ic->ic_des_esslen); 526 error = ENETRESET; 527 break; 528 case WI_RID_CURRENT_BSSID: 529 return EPERM; 530 case WI_RID_OWN_CHNL: 531 if (len != 2) 532 return EINVAL; 533 i = le16toh(wreq.wi_val[0]); 534 if (i < 0 || 535 i > IEEE80211_CHAN_MAX || 536 isclr(ic->ic_chan_active, i)) 537 return EINVAL; 538 ic->ic_ibss_chan = &ic->ic_channels[i]; 539 if (ic->ic_opmode == IEEE80211_M_MONITOR) 540 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 541 else 542 error = ENETRESET; 543 break; 544 case WI_RID_CURRENT_CHAN: 545 return EPERM; 546 case WI_RID_COMMS_QUALITY: 547 return EPERM; 548 case WI_RID_PROMISC: 549 if (len != 2) 550 return EINVAL; 551 if (ifp->if_flags & IFF_PROMISC) { 552 if (wreq.wi_val[0] == 0) { 553 ifp->if_flags &= ~IFF_PROMISC; 554 error = ENETRESET; 555 } 556 } else { 557 if (wreq.wi_val[0] != 0) { 558 ifp->if_flags |= IFF_PROMISC; 559 error = ENETRESET; 560 } 561 } 562 break; 563 case WI_RID_PORTTYPE: 564 if (len != 2) 565 return EINVAL; 566 switch (le16toh(wreq.wi_val[0])) { 567 case IEEE80211_M_STA: 568 break; 569 case IEEE80211_M_IBSS: 570 if (!(ic->ic_caps & IEEE80211_C_IBSS)) 571 return EINVAL; 572 break; 573 case IEEE80211_M_AHDEMO: 574 if (ic->ic_phytype != IEEE80211_T_DS || 575 !(ic->ic_caps & IEEE80211_C_AHDEMO)) 576 return EINVAL; 577 break; 578 case IEEE80211_M_HOSTAP: 579 if (!(ic->ic_caps & IEEE80211_C_HOSTAP)) 580 return EINVAL; 581 break; 582 default: 583 return EINVAL; 584 } 585 if (le16toh(wreq.wi_val[0]) != ic->ic_opmode) { 586 ic->ic_opmode = le16toh(wreq.wi_val[0]); 587 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 588 } 589 break; 590 #if 0 591 case WI_RID_MAC_NODE: 592 if (len != IEEE80211_ADDR_LEN) 593 return EINVAL; 594 IEEE80211_ADDR_COPY(LLADDR(ifp->if_sadl), wreq.wi_val); 595 /* if_init will copy lladdr into ic_myaddr */ 596 error = ENETRESET; 597 break; 598 #endif 599 case WI_RID_TX_RATE: 600 if (len != 2) 601 return EINVAL; 602 if (wreq.wi_val[0] == 0) { 603 /* auto */ 604 ic->ic_fixed_rate = -1; 605 break; 606 } 607 rate = 2 * le16toh(wreq.wi_val[0]); 608 if (ic->ic_curmode == IEEE80211_MODE_AUTO) { 609 /* 610 * In autoselect mode search for the rate. We take 611 * the first instance which may not be right, but we 612 * are limited by the interface. Note that we also 613 * lock the mode to insure the rate is meaningful 614 * when it is used. 615 */ 616 for (j = IEEE80211_MODE_11A; 617 j < IEEE80211_MODE_MAX; j++) { 618 if ((ic->ic_modecaps & (1<<j)) == 0) 619 continue; 620 i = findrate(ic, j, rate); 621 if (i != -1) { 622 /* lock mode too */ 623 ic->ic_curmode = j; 624 goto setrate; 625 } 626 } 627 } else { 628 i = findrate(ic, ic->ic_curmode, rate); 629 if (i != -1) 630 goto setrate; 631 } 632 return EINVAL; 633 setrate: 634 ic->ic_fixed_rate = i; 635 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 636 break; 637 case WI_RID_CUR_TX_RATE: 638 return EPERM; 639 case WI_RID_FRAG_THRESH: 640 if (len != 2) 641 return EINVAL; 642 ic->ic_fragthreshold = le16toh(wreq.wi_val[0]); 643 error = ENETRESET; 644 break; 645 case WI_RID_RTS_THRESH: 646 if (len != 2) 647 return EINVAL; 648 ic->ic_rtsthreshold = le16toh(wreq.wi_val[0]); 649 error = ENETRESET; 650 break; 651 case WI_RID_CREATE_IBSS: 652 if (len != 2) 653 return EINVAL; 654 if (wreq.wi_val[0] != 0) { 655 if ((ic->ic_caps & IEEE80211_C_IBSS) == 0) 656 return EINVAL; 657 if ((ic->ic_flags & IEEE80211_F_IBSSON) == 0) { 658 ic->ic_flags |= IEEE80211_F_IBSSON; 659 if (ic->ic_opmode == IEEE80211_M_IBSS && 660 ic->ic_state == IEEE80211_S_SCAN) 661 error = IS_UP_AUTO(ic) ? ENETRESET : 0; 662 } 663 } else { 664 if (ic->ic_flags & IEEE80211_F_IBSSON) { 665 ic->ic_flags &= ~IEEE80211_F_IBSSON; 666 if (ic->ic_flags & IEEE80211_F_SIBSS) { 667 ic->ic_flags &= ~IEEE80211_F_SIBSS; 668 error = IS_UP_AUTO(ic) ? ENETRESET : 0; 669 } 670 } 671 } 672 break; 673 case WI_RID_MICROWAVE_OVEN: 674 if (len != 2) 675 return EINVAL; 676 if (wreq.wi_val[0] != 0) 677 return EINVAL; /* not supported */ 678 break; 679 case WI_RID_ROAMING_MODE: 680 if (len != 2) 681 return EINVAL; 682 i = le16toh(wreq.wi_val[0]); 683 if (i > IEEE80211_ROAMING_MANUAL) 684 return EINVAL; /* not supported */ 685 ic->ic_roaming = i; 686 break; 687 case WI_RID_SYSTEM_SCALE: 688 if (len != 2) 689 return EINVAL; 690 if (le16toh(wreq.wi_val[0]) != 1) 691 return EINVAL; /* not supported */ 692 break; 693 case WI_RID_PM_ENABLED: 694 if (len != 2) 695 return EINVAL; 696 if (wreq.wi_val[0] != 0) { 697 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 698 return EINVAL; 699 if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 700 ic->ic_flags |= IEEE80211_F_PMGTON; 701 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 702 } 703 } else { 704 if (ic->ic_flags & IEEE80211_F_PMGTON) { 705 ic->ic_flags &= ~IEEE80211_F_PMGTON; 706 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 707 } 708 } 709 break; 710 case WI_RID_MAX_SLEEP: 711 if (len != 2) 712 return EINVAL; 713 ic->ic_lintval = le16toh(wreq.wi_val[0]); 714 if (ic->ic_flags & IEEE80211_F_PMGTON) 715 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 716 break; 717 case WI_RID_CUR_BEACON_INT: 718 return EPERM; 719 case WI_RID_WEP_AVAIL: 720 return EPERM; 721 case WI_RID_CNFAUTHMODE: 722 if (len != 2) 723 return EINVAL; 724 i = le16toh(wreq.wi_val[0]); 725 if (i > IEEE80211_AUTH_WPA) 726 return EINVAL; 727 ic->ic_bss->ni_authmode = i; /* XXX ENETRESET? */ 728 error = ENETRESET; 729 break; 730 case WI_RID_ENCRYPTION: 731 if (len != 2) 732 return EINVAL; 733 if (wreq.wi_val[0] != 0) { 734 if ((ic->ic_caps & IEEE80211_C_WEP) == 0) 735 return EINVAL; 736 if ((ic->ic_flags & IEEE80211_F_PRIVACY) == 0) { 737 ic->ic_flags |= IEEE80211_F_PRIVACY; 738 error = ENETRESET; 739 } 740 } else { 741 if (ic->ic_flags & IEEE80211_F_PRIVACY) { 742 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 743 error = ENETRESET; 744 } 745 } 746 break; 747 case WI_RID_TX_CRYPT_KEY: 748 if (len != 2) 749 return EINVAL; 750 i = le16toh(wreq.wi_val[0]); 751 if (i >= IEEE80211_WEP_NKID) 752 return EINVAL; 753 ic->ic_def_txkey = i; 754 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 755 break; 756 case WI_RID_DEFLT_CRYPT_KEYS: 757 if (len != sizeof(struct wi_ltv_keys)) 758 return EINVAL; 759 keys = (struct wi_ltv_keys *)&wreq; 760 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 761 len = le16toh(keys->wi_keys[i].wi_keylen); 762 if (len != 0 && len < IEEE80211_WEP_KEYLEN) 763 return EINVAL; 764 if (len > IEEE80211_KEYBUF_SIZE) 765 return EINVAL; 766 } 767 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 768 struct ieee80211_key *k = &ic->ic_nw_keys[i]; 769 770 len = le16toh(keys->wi_keys[i].wi_keylen); 771 k->wk_keylen = len; 772 k->wk_flags = IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV; 773 memset(k->wk_key, 0, sizeof(k->wk_key)); 774 memcpy(k->wk_key, keys->wi_keys[i].wi_keydat, len); 775 #if 0 776 k->wk_type = IEEE80211_CIPHER_WEP; 777 #endif 778 } 779 error = ENETRESET; 780 break; 781 case WI_RID_MAX_DATALEN: 782 if (len != 2) 783 return EINVAL; 784 len = le16toh(wreq.wi_val[0]); 785 if (len < 350 /* ? */ || len > IEEE80211_MAX_LEN) 786 return EINVAL; 787 ic->ic_fragthreshold = len; 788 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 789 break; 790 case WI_RID_IFACE_STATS: 791 error = EPERM; 792 break; 793 case WI_RID_SCAN_REQ: /* XXX wicontrol */ 794 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 795 break; 796 error = ieee80211_setupscan(ic, ic->ic_chan_avail); 797 if (error == 0) 798 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 799 break; 800 case WI_RID_SCAN_APS: 801 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 802 break; 803 len--; /* XXX: tx rate? */ 804 /* FALLTHRU */ 805 case WI_RID_CHANNEL_LIST: 806 memset(chanlist, 0, sizeof(chanlist)); 807 /* 808 * Since channel 0 is not available for DS, channel 1 809 * is assigned to LSB on WaveLAN. 810 */ 811 if (ic->ic_phytype == IEEE80211_T_DS) 812 i = 1; 813 else 814 i = 0; 815 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) { 816 if ((j / 8) >= len) 817 break; 818 if (isclr((u_int8_t *)wreq.wi_val, j)) 819 continue; 820 if (isclr(ic->ic_chan_active, i)) { 821 if (wreq.wi_type != WI_RID_CHANNEL_LIST) 822 continue; 823 if (isclr(ic->ic_chan_avail, i)) 824 return EPERM; 825 } 826 setbit(chanlist, i); 827 } 828 error = ieee80211_setupscan(ic, chanlist); 829 if (wreq.wi_type == WI_RID_CHANNEL_LIST) { 830 /* NB: ignore error from ieee80211_setupscan */ 831 error = ENETRESET; 832 } else if (error == 0) 833 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 834 break; 835 default: 836 error = EINVAL; 837 break; 838 } 839 if (error == ENETRESET && !IS_UP_AUTO(ic)) 840 error = 0; 841 return error; 842 } 843 844 #ifdef COMPAT_FREEBSD 845 static struct ieee80211_channel * 846 getcurchan(struct ieee80211com *ic) 847 { 848 switch (ic->ic_state) { 849 case IEEE80211_S_INIT: 850 case IEEE80211_S_SCAN: 851 return ic->ic_des_chan; 852 default: 853 return ic->ic_ibss_chan; 854 } 855 } 856 #endif /* COMPAT_FREEBSD */ 857 858 static int 859 cap2cipher(int flag) 860 { 861 switch (flag) { 862 case IEEE80211_C_WEP: return IEEE80211_CIPHER_WEP; 863 case IEEE80211_C_AES: return IEEE80211_CIPHER_AES_OCB; 864 case IEEE80211_C_AES_CCM: return IEEE80211_CIPHER_AES_CCM; 865 case IEEE80211_C_CKIP: return IEEE80211_CIPHER_CKIP; 866 case IEEE80211_C_TKIP: return IEEE80211_CIPHER_TKIP; 867 } 868 return -1; 869 } 870 871 static int 872 ieee80211_ioctl_getkey(struct ieee80211com *ic, struct ieee80211req *ireq) 873 { 874 struct ieee80211_node *ni; 875 struct ieee80211req_key ik; 876 struct ieee80211_key *wk; 877 const struct ieee80211_cipher *cip; 878 u_int kid; 879 int error; 880 881 if (ireq->i_len != sizeof(ik)) 882 return EINVAL; 883 error = copyin(ireq->i_data, &ik, sizeof(ik)); 884 if (error) 885 return error; 886 kid = ik.ik_keyix; 887 if (kid == IEEE80211_KEYIX_NONE) { 888 ni = ieee80211_find_node(&ic->ic_sta, ik.ik_macaddr); 889 if (ni == NULL) 890 return EINVAL; /* XXX */ 891 wk = &ni->ni_ucastkey; 892 } else { 893 if (kid >= IEEE80211_WEP_NKID) 894 return EINVAL; 895 wk = &ic->ic_nw_keys[kid]; 896 IEEE80211_ADDR_COPY(&ik.ik_macaddr, ic->ic_bss->ni_macaddr); 897 ni = NULL; 898 } 899 cip = wk->wk_cipher; 900 ik.ik_type = cip->ic_cipher; 901 ik.ik_keylen = wk->wk_keylen; 902 ik.ik_flags = wk->wk_flags & (IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV); 903 if (wk->wk_keyix == ic->ic_def_txkey) 904 ik.ik_flags |= IEEE80211_KEY_DEFAULT; 905 if (suser(curproc->p_ucred, &curproc->p_acflag) == 0) { 906 /* NB: only root can read key data */ 907 ik.ik_keyrsc = wk->wk_keyrsc; 908 ik.ik_keytsc = wk->wk_keytsc; 909 memcpy(ik.ik_keydata, wk->wk_key, wk->wk_keylen); 910 if (cip->ic_cipher == IEEE80211_CIPHER_TKIP) { 911 memcpy(ik.ik_keydata+wk->wk_keylen, 912 wk->wk_key + IEEE80211_KEYBUF_SIZE, 913 IEEE80211_MICBUF_SIZE); 914 ik.ik_keylen += IEEE80211_MICBUF_SIZE; 915 } 916 } else { 917 ik.ik_keyrsc = 0; 918 ik.ik_keytsc = 0; 919 memset(ik.ik_keydata, 0, sizeof(ik.ik_keydata)); 920 } 921 if (ni != NULL) 922 ieee80211_free_node(ni); 923 return copyout(&ik, ireq->i_data, sizeof(ik)); 924 } 925 926 static int 927 ieee80211_ioctl_getchanlist(struct ieee80211com *ic, struct ieee80211req *ireq) 928 { 929 930 if (sizeof(ic->ic_chan_active) > ireq->i_len) 931 ireq->i_len = sizeof(ic->ic_chan_active); 932 return copyout(&ic->ic_chan_active, ireq->i_data, ireq->i_len); 933 } 934 935 static int 936 ieee80211_ioctl_getchaninfo(struct ieee80211com *ic, struct ieee80211req *ireq) 937 { 938 struct ieee80211req_chaninfo chans; /* XXX off stack? */ 939 int i, space; 940 941 /* 942 * Since channel 0 is not available for DS, channel 1 943 * is assigned to LSB on WaveLAN. 944 */ 945 if (ic->ic_phytype == IEEE80211_T_DS) 946 i = 1; 947 else 948 i = 0; 949 memset(&chans, 0, sizeof(chans)); 950 for (; i <= IEEE80211_CHAN_MAX; i++) 951 if (isset(ic->ic_chan_avail, i)) { 952 struct ieee80211_channel *c = &ic->ic_channels[i]; 953 chans.ic_chans[chans.ic_nchans].ic_freq = c->ic_freq; 954 chans.ic_chans[chans.ic_nchans].ic_flags = c->ic_flags; 955 chans.ic_nchans++; 956 } 957 space = __offsetof(struct ieee80211req_chaninfo, 958 ic_chans[chans.ic_nchans]); 959 if (space > ireq->i_len) 960 space = ireq->i_len; 961 return copyout(&chans, ireq->i_data, space); 962 } 963 964 static int 965 ieee80211_ioctl_getwpaie(struct ieee80211com *ic, struct ieee80211req *ireq) 966 { 967 struct ieee80211_node *ni; 968 struct ieee80211req_wpaie wpaie; 969 int error; 970 971 if (ireq->i_len < IEEE80211_ADDR_LEN) 972 return EINVAL; 973 error = copyin(ireq->i_data, wpaie.wpa_macaddr, IEEE80211_ADDR_LEN); 974 if (error != 0) 975 return error; 976 ni = ieee80211_find_node(&ic->ic_sta, wpaie.wpa_macaddr); 977 if (ni == NULL) 978 return EINVAL; /* XXX */ 979 memset(wpaie.wpa_ie, 0, sizeof(wpaie.wpa_ie)); 980 if (ni->ni_wpa_ie != NULL) { 981 int ielen = ni->ni_wpa_ie[1] + 2; 982 if (ielen > sizeof(wpaie.wpa_ie)) 983 ielen = sizeof(wpaie.wpa_ie); 984 memcpy(wpaie.wpa_ie, ni->ni_wpa_ie, ielen); 985 } 986 ieee80211_free_node(ni); 987 if (ireq->i_len > sizeof(wpaie)) 988 ireq->i_len = sizeof(wpaie); 989 return copyout(&wpaie, ireq->i_data, ireq->i_len); 990 } 991 992 static int 993 ieee80211_ioctl_getstastats(struct ieee80211com *ic, struct ieee80211req *ireq) 994 { 995 struct ieee80211_node *ni; 996 u_int8_t macaddr[IEEE80211_ADDR_LEN]; 997 const int off = __offsetof(struct ieee80211req_sta_stats, is_stats); 998 int error; 999 1000 if (ireq->i_len < off) 1001 return EINVAL; 1002 error = copyin(ireq->i_data, macaddr, IEEE80211_ADDR_LEN); 1003 if (error != 0) 1004 return error; 1005 ni = ieee80211_find_node(&ic->ic_sta, macaddr); 1006 if (ni == NULL) 1007 return EINVAL; /* XXX */ 1008 if (ireq->i_len > sizeof(struct ieee80211req_sta_stats)) 1009 ireq->i_len = sizeof(struct ieee80211req_sta_stats); 1010 /* NB: copy out only the statistics */ 1011 error = copyout(&ni->ni_stats, (u_int8_t *) ireq->i_data + off, 1012 ireq->i_len - off); 1013 ieee80211_free_node(ni); 1014 return error; 1015 } 1016 1017 static void 1018 get_scan_result(struct ieee80211req_scan_result *sr, 1019 const struct ieee80211_node *ni) 1020 { 1021 struct ieee80211com *ic = ni->ni_ic; 1022 1023 memset(sr, 0, sizeof(*sr)); 1024 sr->isr_ssid_len = ni->ni_esslen; 1025 if (ni->ni_wpa_ie != NULL) 1026 sr->isr_ie_len += 2+ni->ni_wpa_ie[1]; 1027 if (ni->ni_wme_ie != NULL) 1028 sr->isr_ie_len += 2+ni->ni_wme_ie[1]; 1029 sr->isr_len = sizeof(*sr) + sr->isr_ssid_len + sr->isr_ie_len; 1030 sr->isr_len = roundup(sr->isr_len, sizeof(u_int32_t)); 1031 if (ni->ni_chan != IEEE80211_CHAN_ANYC) { 1032 sr->isr_freq = ni->ni_chan->ic_freq; 1033 sr->isr_flags = ni->ni_chan->ic_flags; 1034 } 1035 sr->isr_rssi = ic->ic_node_getrssi(ni); 1036 sr->isr_intval = ni->ni_intval; 1037 sr->isr_capinfo = ni->ni_capinfo; 1038 sr->isr_erp = ni->ni_erp; 1039 IEEE80211_ADDR_COPY(sr->isr_bssid, ni->ni_bssid); 1040 sr->isr_nrates = ni->ni_rates.rs_nrates; 1041 if (sr->isr_nrates > 15) 1042 sr->isr_nrates = 15; 1043 memcpy(sr->isr_rates, ni->ni_rates.rs_rates, sr->isr_nrates); 1044 } 1045 1046 static int 1047 ieee80211_ioctl_getscanresults(struct ieee80211com *ic, struct ieee80211req *ireq) 1048 { 1049 union { 1050 struct ieee80211req_scan_result res; 1051 char data[512]; /* XXX shrink? */ 1052 } u; 1053 struct ieee80211req_scan_result *sr = &u.res; 1054 struct ieee80211_node_table *nt; 1055 struct ieee80211_node *ni; 1056 int error, space; 1057 u_int8_t *p, *cp; 1058 1059 p = ireq->i_data; 1060 space = ireq->i_len; 1061 error = 0; 1062 /* XXX locking */ 1063 nt = &ic->ic_scan; 1064 TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1065 /* NB: skip pre-scan node state */ 1066 if (ni->ni_chan == IEEE80211_CHAN_ANYC) 1067 continue; 1068 get_scan_result(sr, ni); 1069 if (sr->isr_len > sizeof(u)) 1070 continue; /* XXX */ 1071 if (space < sr->isr_len) 1072 break; 1073 cp = (u_int8_t *)(sr+1); 1074 memcpy(cp, ni->ni_essid, ni->ni_esslen); 1075 cp += ni->ni_esslen; 1076 if (ni->ni_wpa_ie != NULL) { 1077 memcpy(cp, ni->ni_wpa_ie, 2+ni->ni_wpa_ie[1]); 1078 cp += 2+ni->ni_wpa_ie[1]; 1079 } 1080 if (ni->ni_wme_ie != NULL) { 1081 memcpy(cp, ni->ni_wme_ie, 2+ni->ni_wme_ie[1]); 1082 cp += 2+ni->ni_wme_ie[1]; 1083 } 1084 error = copyout(sr, p, sr->isr_len); 1085 if (error) 1086 break; 1087 p += sr->isr_len; 1088 space -= sr->isr_len; 1089 } 1090 ireq->i_len -= space; 1091 return error; 1092 } 1093 1094 static void 1095 get_sta_info(struct ieee80211req_sta_info *si, const struct ieee80211_node *ni) 1096 { 1097 struct ieee80211com *ic = ni->ni_ic; 1098 1099 si->isi_ie_len = 0; 1100 if (ni->ni_wpa_ie != NULL) 1101 si->isi_ie_len += 2+ni->ni_wpa_ie[1]; 1102 if (ni->ni_wme_ie != NULL) 1103 si->isi_ie_len += 2+ni->ni_wme_ie[1]; 1104 si->isi_len = sizeof(*si) + si->isi_ie_len, sizeof(u_int32_t); 1105 si->isi_len = roundup(si->isi_len, sizeof(u_int32_t)); 1106 si->isi_freq = ni->ni_chan->ic_freq; 1107 si->isi_flags = ni->ni_chan->ic_flags; 1108 si->isi_state = ni->ni_flags; 1109 si->isi_authmode = ni->ni_authmode; 1110 si->isi_rssi = ic->ic_node_getrssi(ni); 1111 si->isi_capinfo = ni->ni_capinfo; 1112 si->isi_erp = ni->ni_erp; 1113 IEEE80211_ADDR_COPY(si->isi_macaddr, ni->ni_macaddr); 1114 si->isi_nrates = ni->ni_rates.rs_nrates; 1115 if (si->isi_nrates > 15) 1116 si->isi_nrates = 15; 1117 memcpy(si->isi_rates, ni->ni_rates.rs_rates, si->isi_nrates); 1118 si->isi_txrate = ni->ni_txrate; 1119 si->isi_associd = ni->ni_associd; 1120 si->isi_txpower = ni->ni_txpower; 1121 si->isi_vlan = ni->ni_vlan; 1122 if (ni->ni_flags & IEEE80211_NODE_QOS) { 1123 memcpy(si->isi_txseqs, ni->ni_txseqs, sizeof(ni->ni_txseqs)); 1124 memcpy(si->isi_rxseqs, ni->ni_rxseqs, sizeof(ni->ni_rxseqs)); 1125 } else { 1126 si->isi_txseqs[0] = ni->ni_txseqs[0]; 1127 si->isi_rxseqs[0] = ni->ni_rxseqs[0]; 1128 } 1129 if (ic->ic_opmode == IEEE80211_M_IBSS || ni->ni_associd != 0) 1130 si->isi_inact = ic->ic_inact_run; 1131 else if (ieee80211_node_is_authorized(ni)) 1132 si->isi_inact = ic->ic_inact_auth; 1133 else 1134 si->isi_inact = ic->ic_inact_init; 1135 si->isi_inact = (si->isi_inact - ni->ni_inact) * IEEE80211_INACT_WAIT; 1136 } 1137 1138 static int 1139 ieee80211_ioctl_getstainfo(struct ieee80211com *ic, struct ieee80211req *ireq) 1140 { 1141 union { 1142 struct ieee80211req_sta_info info; 1143 char data[512]; /* XXX shrink? */ 1144 } u; 1145 struct ieee80211req_sta_info *si = &u.info; 1146 struct ieee80211_node_table *nt; 1147 struct ieee80211_node *ni; 1148 int error, space; 1149 u_int8_t *p, *cp; 1150 1151 nt = &ic->ic_sta; 1152 p = ireq->i_data; 1153 space = ireq->i_len; 1154 error = 0; 1155 /* XXX locking */ 1156 TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1157 get_sta_info(si, ni); 1158 if (si->isi_len > sizeof(u)) 1159 continue; /* XXX */ 1160 if (space < si->isi_len) 1161 break; 1162 cp = (u_int8_t *)(si+1); 1163 if (ni->ni_wpa_ie != NULL) { 1164 memcpy(cp, ni->ni_wpa_ie, 2+ni->ni_wpa_ie[1]); 1165 cp += 2+ni->ni_wpa_ie[1]; 1166 } 1167 if (ni->ni_wme_ie != NULL) { 1168 memcpy(cp, ni->ni_wme_ie, 2+ni->ni_wme_ie[1]); 1169 cp += 2+ni->ni_wme_ie[1]; 1170 } 1171 error = copyout(si, p, si->isi_len); 1172 if (error) 1173 break; 1174 p += si->isi_len; 1175 space -= si->isi_len; 1176 } 1177 ireq->i_len -= space; 1178 return error; 1179 } 1180 1181 static int 1182 ieee80211_ioctl_getstatxpow(struct ieee80211com *ic, struct ieee80211req *ireq) 1183 { 1184 struct ieee80211_node *ni; 1185 struct ieee80211req_sta_txpow txpow; 1186 int error; 1187 1188 if (ireq->i_len != sizeof(txpow)) 1189 return EINVAL; 1190 error = copyin(ireq->i_data, &txpow, sizeof(txpow)); 1191 if (error != 0) 1192 return error; 1193 ni = ieee80211_find_node(&ic->ic_sta, txpow.it_macaddr); 1194 if (ni == NULL) 1195 return EINVAL; /* XXX */ 1196 txpow.it_txpow = ni->ni_txpower; 1197 error = copyout(&txpow, ireq->i_data, sizeof(txpow)); 1198 ieee80211_free_node(ni); 1199 return error; 1200 } 1201 1202 static int 1203 ieee80211_ioctl_getwmeparam(struct ieee80211com *ic, struct ieee80211req *ireq) 1204 { 1205 struct ieee80211_wme_state *wme = &ic->ic_wme; 1206 struct wmeParams *wmep; 1207 int ac; 1208 1209 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 1210 return EINVAL; 1211 1212 ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL); 1213 if (ac >= WME_NUM_AC) 1214 ac = WME_AC_BE; 1215 if (ireq->i_len & IEEE80211_WMEPARAM_BSS) 1216 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1217 else 1218 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1219 switch (ireq->i_type) { 1220 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1221 ireq->i_val = wmep->wmep_logcwmin; 1222 break; 1223 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1224 ireq->i_val = wmep->wmep_logcwmax; 1225 break; 1226 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1227 ireq->i_val = wmep->wmep_aifsn; 1228 break; 1229 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1230 ireq->i_val = wmep->wmep_txopLimit; 1231 break; 1232 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1233 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1234 ireq->i_val = wmep->wmep_acm; 1235 break; 1236 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (!bss only)*/ 1237 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1238 ireq->i_val = !wmep->wmep_noackPolicy; 1239 break; 1240 } 1241 return 0; 1242 } 1243 1244 /* 1245 * When building the kernel with -O2 on the i386 architecture, gcc 1246 * seems to want to inline this function into ieee80211_ioctl() 1247 * (which is the only routine that calls it). When this happens, 1248 * ieee80211_ioctl() ends up consuming an additional 2K of stack 1249 * space. (Exactly why it needs so much is unclear.) The problem 1250 * is that it's possible for ieee80211_ioctl() to invoke other 1251 * routines (including driver init functions) which could then find 1252 * themselves perilously close to exhausting the stack. 1253 * 1254 * To avoid this, we deliberately prevent gcc from inlining this 1255 * routine. Another way to avoid this is to use less agressive 1256 * optimization when compiling this file (i.e. -O instead of -O2) 1257 * but special-casing the compilation of this one module in the 1258 * build system would be awkward. 1259 */ 1260 #ifdef __GNUC__ 1261 __attribute__ ((noinline)) 1262 #endif 1263 static int 1264 ieee80211_ioctl_get80211(struct ieee80211com *ic, u_long cmd, struct ieee80211req *ireq) 1265 { 1266 const struct ieee80211_rsnparms *rsn = &ic->ic_bss->ni_rsn; 1267 int error = 0; 1268 #ifdef COMPAT_FREEBSD 1269 u_int kid, len; 1270 u_int8_t tmpkey[IEEE80211_KEYBUF_SIZE]; 1271 char tmpssid[IEEE80211_NWID_LEN]; 1272 #endif /* COMPAT_FREEBSD */ 1273 u_int m; 1274 1275 switch (ireq->i_type) { 1276 #ifdef COMPAT_FREEBSD 1277 case IEEE80211_IOC_SSID: 1278 switch (ic->ic_state) { 1279 case IEEE80211_S_INIT: 1280 case IEEE80211_S_SCAN: 1281 ireq->i_len = ic->ic_des_esslen; 1282 memcpy(tmpssid, ic->ic_des_essid, ireq->i_len); 1283 break; 1284 default: 1285 ireq->i_len = ic->ic_bss->ni_esslen; 1286 memcpy(tmpssid, ic->ic_bss->ni_essid, 1287 ireq->i_len); 1288 break; 1289 } 1290 error = copyout(tmpssid, ireq->i_data, ireq->i_len); 1291 break; 1292 case IEEE80211_IOC_NUMSSIDS: 1293 ireq->i_val = 1; 1294 break; 1295 case IEEE80211_IOC_WEP: 1296 if ((ic->ic_flags & IEEE80211_F_PRIVACY) == 0) 1297 ireq->i_val = IEEE80211_WEP_OFF; 1298 else if (ic->ic_flags & IEEE80211_F_DROPUNENC) 1299 ireq->i_val = IEEE80211_WEP_ON; 1300 else 1301 ireq->i_val = IEEE80211_WEP_MIXED; 1302 break; 1303 case IEEE80211_IOC_WEPKEY: 1304 kid = (u_int) ireq->i_val; 1305 if (kid >= IEEE80211_WEP_NKID) 1306 return EINVAL; 1307 len = (u_int) ic->ic_nw_keys[kid].wk_keylen; 1308 /* NB: only root can read WEP keys */ 1309 if (suser(curproc->p_ucred, &curproc->p_acflag) == 0) { 1310 bcopy(ic->ic_nw_keys[kid].wk_key, tmpkey, len); 1311 } else { 1312 bzero(tmpkey, len); 1313 } 1314 ireq->i_len = len; 1315 error = copyout(tmpkey, ireq->i_data, len); 1316 break; 1317 case IEEE80211_IOC_NUMWEPKEYS: 1318 ireq->i_val = IEEE80211_WEP_NKID; 1319 break; 1320 case IEEE80211_IOC_WEPTXKEY: 1321 ireq->i_val = ic->ic_def_txkey; 1322 break; 1323 #endif /* COMPAT_FREEBSD */ 1324 case IEEE80211_IOC_AUTHMODE: 1325 if (ic->ic_flags & IEEE80211_F_WPA) 1326 ireq->i_val = IEEE80211_AUTH_WPA; 1327 else 1328 ireq->i_val = ic->ic_bss->ni_authmode; 1329 break; 1330 #ifdef COMPAT_FREEBSD 1331 case IEEE80211_IOC_CHANNEL: 1332 ireq->i_val = ieee80211_chan2ieee(ic, getcurchan(ic)); 1333 break; 1334 case IEEE80211_IOC_POWERSAVE: 1335 if (ic->ic_flags & IEEE80211_F_PMGTON) 1336 ireq->i_val = IEEE80211_POWERSAVE_ON; 1337 else 1338 ireq->i_val = IEEE80211_POWERSAVE_OFF; 1339 break; 1340 case IEEE80211_IOC_POWERSAVESLEEP: 1341 ireq->i_val = ic->ic_lintval; 1342 break; 1343 #endif /* COMPAT_FREEBSD */ 1344 case IEEE80211_IOC_RTSTHRESHOLD: 1345 ireq->i_val = ic->ic_rtsthreshold; 1346 break; 1347 case IEEE80211_IOC_PROTMODE: 1348 ireq->i_val = ic->ic_protmode; 1349 break; 1350 case IEEE80211_IOC_TXPOWER: 1351 if ((ic->ic_caps & IEEE80211_C_TXPMGT) == 0) 1352 return EINVAL; 1353 ireq->i_val = ic->ic_txpowlimit; 1354 break; 1355 case IEEE80211_IOC_MCASTCIPHER: 1356 ireq->i_val = rsn->rsn_mcastcipher; 1357 break; 1358 case IEEE80211_IOC_MCASTKEYLEN: 1359 ireq->i_val = rsn->rsn_mcastkeylen; 1360 break; 1361 case IEEE80211_IOC_UCASTCIPHERS: 1362 ireq->i_val = 0; 1363 for (m = 0x1; m != 0; m <<= 1) 1364 if (rsn->rsn_ucastcipherset & m) 1365 ireq->i_val |= 1<<cap2cipher(m); 1366 break; 1367 case IEEE80211_IOC_UCASTCIPHER: 1368 ireq->i_val = rsn->rsn_ucastcipher; 1369 break; 1370 case IEEE80211_IOC_UCASTKEYLEN: 1371 ireq->i_val = rsn->rsn_ucastkeylen; 1372 break; 1373 case IEEE80211_IOC_KEYMGTALGS: 1374 ireq->i_val = rsn->rsn_keymgmtset; 1375 break; 1376 case IEEE80211_IOC_RSNCAPS: 1377 ireq->i_val = rsn->rsn_caps; 1378 break; 1379 case IEEE80211_IOC_WPA: 1380 switch (ic->ic_flags & IEEE80211_F_WPA) { 1381 case IEEE80211_F_WPA1: 1382 ireq->i_val = 1; 1383 break; 1384 case IEEE80211_F_WPA2: 1385 ireq->i_val = 2; 1386 break; 1387 case IEEE80211_F_WPA1 | IEEE80211_F_WPA2: 1388 ireq->i_val = 3; 1389 break; 1390 default: 1391 ireq->i_val = 0; 1392 break; 1393 } 1394 break; 1395 case IEEE80211_IOC_CHANLIST: 1396 error = ieee80211_ioctl_getchanlist(ic, ireq); 1397 break; 1398 case IEEE80211_IOC_ROAMING: 1399 ireq->i_val = ic->ic_roaming; 1400 break; 1401 #ifdef COMPAT_FREEBSD 1402 case IEEE80211_IOC_PRIVACY: 1403 ireq->i_val = (ic->ic_flags & IEEE80211_F_PRIVACY) != 0; 1404 break; 1405 case IEEE80211_IOC_DROPUNENCRYPTED: 1406 ireq->i_val = (ic->ic_flags & IEEE80211_F_DROPUNENC) != 0; 1407 break; 1408 #endif /* COMPAT_FREEBSD */ 1409 case IEEE80211_IOC_COUNTERMEASURES: 1410 ireq->i_val = (ic->ic_flags & IEEE80211_F_COUNTERM) != 0; 1411 break; 1412 case IEEE80211_IOC_DRIVER_CAPS: 1413 ireq->i_val = ic->ic_caps>>16; 1414 ireq->i_len = ic->ic_caps&0xffff; 1415 break; 1416 case IEEE80211_IOC_WME: 1417 ireq->i_val = (ic->ic_flags & IEEE80211_F_WME) != 0; 1418 break; 1419 case IEEE80211_IOC_HIDESSID: 1420 ireq->i_val = (ic->ic_flags & IEEE80211_F_HIDESSID) != 0; 1421 break; 1422 case IEEE80211_IOC_APBRIDGE: 1423 ireq->i_val = (ic->ic_flags & IEEE80211_F_NOBRIDGE) == 0; 1424 break; 1425 case IEEE80211_IOC_OPTIE: 1426 if (ic->ic_opt_ie == NULL) 1427 return EINVAL; 1428 /* NB: truncate, caller can check length */ 1429 if (ireq->i_len > ic->ic_opt_ie_len) 1430 ireq->i_len = ic->ic_opt_ie_len; 1431 error = copyout(ic->ic_opt_ie, ireq->i_data, ireq->i_len); 1432 break; 1433 case IEEE80211_IOC_WPAKEY: 1434 error = ieee80211_ioctl_getkey(ic, ireq); 1435 break; 1436 case IEEE80211_IOC_CHANINFO: 1437 error = ieee80211_ioctl_getchaninfo(ic, ireq); 1438 break; 1439 #ifdef COMPAT_FREEBSD 1440 case IEEE80211_IOC_BSSID: 1441 if (ireq->i_len != IEEE80211_ADDR_LEN) 1442 return EINVAL; 1443 error = copyout(ic->ic_state == IEEE80211_S_RUN ? 1444 ic->ic_bss->ni_bssid : 1445 ic->ic_des_bssid, 1446 ireq->i_data, ireq->i_len); 1447 break; 1448 #endif /* COMPAT_FREEBSD */ 1449 case IEEE80211_IOC_WPAIE: 1450 error = ieee80211_ioctl_getwpaie(ic, ireq); 1451 break; 1452 case IEEE80211_IOC_SCAN_RESULTS: 1453 error = ieee80211_ioctl_getscanresults(ic, ireq); 1454 break; 1455 case IEEE80211_IOC_STA_STATS: 1456 error = ieee80211_ioctl_getstastats(ic, ireq); 1457 break; 1458 case IEEE80211_IOC_TXPOWMAX: 1459 ireq->i_val = ic->ic_bss->ni_txpower; 1460 break; 1461 case IEEE80211_IOC_STA_TXPOW: 1462 error = ieee80211_ioctl_getstatxpow(ic, ireq); 1463 break; 1464 case IEEE80211_IOC_STA_INFO: 1465 error = ieee80211_ioctl_getstainfo(ic, ireq); 1466 break; 1467 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1468 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1469 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1470 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1471 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1472 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (bss only) */ 1473 error = ieee80211_ioctl_getwmeparam(ic, ireq); 1474 break; 1475 case IEEE80211_IOC_DTIM_PERIOD: 1476 ireq->i_val = ic->ic_dtim_period; 1477 break; 1478 #ifdef COMPAT_FREEBSD 1479 case IEEE80211_IOC_BEACON_INTERVAL: 1480 /* NB: get from ic_bss for station mode */ 1481 ireq->i_val = ic->ic_bss->ni_intval; 1482 break; 1483 #endif /* COMPAT_FREEBSD */ 1484 case IEEE80211_IOC_PUREG: 1485 ireq->i_val = (ic->ic_flags & IEEE80211_F_PUREG) != 0; 1486 break; 1487 default: 1488 error = EINVAL; 1489 break; 1490 } 1491 return error; 1492 } 1493 1494 static int 1495 ieee80211_ioctl_setoptie(struct ieee80211com *ic, struct ieee80211req *ireq) 1496 { 1497 int error; 1498 void *ie; 1499 1500 /* 1501 * NB: Doing this for ap operation could be useful (e.g. for 1502 * WPA and/or WME) except that it typically is worthless 1503 * without being able to intervene when processing 1504 * association response frames--so disallow it for now. 1505 */ 1506 if (ic->ic_opmode != IEEE80211_M_STA) 1507 return EINVAL; 1508 if (ireq->i_len > IEEE80211_MAX_OPT_IE) 1509 return EINVAL; 1510 /* NB: data.length is validated by the wireless extensions code */ 1511 MALLOC(ie, void *, (u_long)ireq->i_len, M_DEVBUF, M_WAITOK); 1512 if (ie == NULL) 1513 return ENOMEM; 1514 error = copyin(ireq->i_data, ie, ireq->i_len); 1515 /* XXX sanity check data? */ 1516 if (ic->ic_opt_ie != NULL) 1517 FREE(ic->ic_opt_ie, M_DEVBUF); 1518 ic->ic_opt_ie = ie; 1519 ic->ic_opt_ie_len = ireq->i_len; 1520 return 0; 1521 } 1522 1523 static int 1524 ieee80211_ioctl_setkey(struct ieee80211com *ic, struct ieee80211req *ireq) 1525 { 1526 struct ieee80211req_key ik; 1527 struct ieee80211_node *ni; 1528 struct ieee80211_key *wk; 1529 u_int16_t kid; 1530 int error; 1531 1532 if (ireq->i_len != sizeof(ik)) 1533 return EINVAL; 1534 error = copyin(ireq->i_data, &ik, sizeof(ik)); 1535 if (error) 1536 return error; 1537 /* NB: cipher support is verified by ieee80211_crypt_newkey */ 1538 /* NB: this also checks ik->ik_keylen > sizeof(wk->wk_key) */ 1539 if (ik.ik_keylen > sizeof(ik.ik_keydata)) 1540 return E2BIG; 1541 kid = ik.ik_keyix; 1542 if (kid == IEEE80211_KEYIX_NONE) { 1543 /* XXX unicast keys currently must be tx/rx */ 1544 if (ik.ik_flags != (IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV)) 1545 return EINVAL; 1546 if (ic->ic_opmode == IEEE80211_M_STA) { 1547 ni = ieee80211_ref_node(ic->ic_bss); 1548 if (!IEEE80211_ADDR_EQ(ik.ik_macaddr, ni->ni_bssid)) { 1549 ieee80211_free_node(ni); 1550 return EADDRNOTAVAIL; 1551 } 1552 } else { 1553 ni = ieee80211_find_node(&ic->ic_sta, ik.ik_macaddr); 1554 if (ni == NULL) 1555 return ENOENT; 1556 } 1557 wk = &ni->ni_ucastkey; 1558 } else { 1559 if (kid >= IEEE80211_WEP_NKID) 1560 return EINVAL; 1561 wk = &ic->ic_nw_keys[kid]; 1562 ni = NULL; 1563 } 1564 error = 0; 1565 ieee80211_key_update_begin(ic); 1566 if (ieee80211_crypto_newkey(ic, ik.ik_type, ik.ik_flags, wk)) { 1567 wk->wk_keylen = ik.ik_keylen; 1568 /* NB: MIC presence is implied by cipher type */ 1569 if (wk->wk_keylen > IEEE80211_KEYBUF_SIZE) 1570 wk->wk_keylen = IEEE80211_KEYBUF_SIZE; 1571 wk->wk_keyrsc = ik.ik_keyrsc; 1572 wk->wk_keytsc = 0; /* new key, reset */ 1573 memset(wk->wk_key, 0, sizeof(wk->wk_key)); 1574 memcpy(wk->wk_key, ik.ik_keydata, ik.ik_keylen); 1575 if (!ieee80211_crypto_setkey(ic, wk, 1576 ni != NULL ? ni->ni_macaddr : ik.ik_macaddr)) 1577 error = EIO; 1578 else if ((ik.ik_flags & IEEE80211_KEY_DEFAULT)) 1579 ic->ic_def_txkey = kid; 1580 } else 1581 error = ENXIO; 1582 ieee80211_key_update_end(ic); 1583 if (ni != NULL) 1584 ieee80211_free_node(ni); 1585 return error; 1586 } 1587 1588 static int 1589 ieee80211_ioctl_delkey(struct ieee80211com *ic, struct ieee80211req *ireq) 1590 { 1591 struct ieee80211req_del_key dk; 1592 int kid, error; 1593 1594 if (ireq->i_len != sizeof(dk)) 1595 return EINVAL; 1596 error = copyin(ireq->i_data, &dk, sizeof(dk)); 1597 if (error) 1598 return error; 1599 kid = dk.idk_keyix; 1600 /* XXX u_int8_t -> u_int16_t */ 1601 if (dk.idk_keyix == (u_int8_t) IEEE80211_KEYIX_NONE) { 1602 struct ieee80211_node *ni; 1603 1604 if (ic->ic_opmode == IEEE80211_M_STA) { 1605 ni = ieee80211_ref_node(ic->ic_bss); 1606 if (!IEEE80211_ADDR_EQ(dk.idk_macaddr, ni->ni_bssid)) { 1607 ieee80211_free_node(ni); 1608 return EADDRNOTAVAIL; 1609 } 1610 } else { 1611 ni = ieee80211_find_node(&ic->ic_sta, dk.idk_macaddr); 1612 if (ni == NULL) 1613 return ENOENT; 1614 } 1615 /* XXX error return */ 1616 ieee80211_crypto_delkey(ic, &ni->ni_ucastkey); 1617 ieee80211_free_node(ni); 1618 } else { 1619 if (kid >= IEEE80211_WEP_NKID) 1620 return EINVAL; 1621 /* XXX error return */ 1622 ieee80211_crypto_delkey(ic, &ic->ic_nw_keys[kid]); 1623 } 1624 return 0; 1625 } 1626 1627 #ifndef IEEE80211_NO_HOSTAP 1628 static void 1629 domlme(void *arg, struct ieee80211_node *ni) 1630 { 1631 struct ieee80211com *ic = ni->ni_ic; 1632 struct ieee80211req_mlme *mlme = arg; 1633 1634 if (ni->ni_associd != 0) { 1635 IEEE80211_SEND_MGMT(ic, ni, 1636 mlme->im_op == IEEE80211_MLME_DEAUTH ? 1637 IEEE80211_FC0_SUBTYPE_DEAUTH : 1638 IEEE80211_FC0_SUBTYPE_DISASSOC, 1639 mlme->im_reason); 1640 } 1641 ieee80211_node_leave(ic, ni); 1642 } 1643 #endif /* !IEEE80211_NO_HOSTAP */ 1644 1645 static int 1646 ieee80211_ioctl_setmlme(struct ieee80211com *ic, struct ieee80211req *ireq) 1647 { 1648 struct ieee80211req_mlme mlme; 1649 struct ieee80211_node *ni; 1650 int error; 1651 1652 if (ireq->i_len != sizeof(mlme)) 1653 return EINVAL; 1654 error = copyin(ireq->i_data, &mlme, sizeof(mlme)); 1655 if (error) 1656 return error; 1657 switch (mlme.im_op) { 1658 case IEEE80211_MLME_ASSOC: 1659 if (ic->ic_opmode != IEEE80211_M_STA) 1660 return EINVAL; 1661 /* XXX must be in S_SCAN state? */ 1662 1663 if (mlme.im_ssid_len != 0) { 1664 /* 1665 * Desired ssid specified; must match both bssid and 1666 * ssid to distinguish ap advertising multiple ssid's. 1667 */ 1668 ni = ieee80211_find_node_with_ssid(&ic->ic_scan, 1669 mlme.im_macaddr, 1670 mlme.im_ssid_len, mlme.im_ssid); 1671 } else { 1672 /* 1673 * Normal case; just match bssid. 1674 */ 1675 ni = ieee80211_find_node(&ic->ic_scan, mlme.im_macaddr); 1676 } 1677 if (ni == NULL) 1678 return EINVAL; 1679 if (!ieee80211_sta_join(ic, ni)) { 1680 ieee80211_free_node(ni); 1681 return EINVAL; 1682 } 1683 break; 1684 case IEEE80211_MLME_DISASSOC: 1685 case IEEE80211_MLME_DEAUTH: 1686 switch (ic->ic_opmode) { 1687 case IEEE80211_M_STA: 1688 /* XXX not quite right */ 1689 ieee80211_new_state(ic, IEEE80211_S_INIT, 1690 mlme.im_reason); 1691 break; 1692 case IEEE80211_M_HOSTAP: 1693 #ifndef IEEE80211_NO_HOSTAP 1694 /* NB: the broadcast address means do 'em all */ 1695 if (!IEEE80211_ADDR_EQ(mlme.im_macaddr, ic->ic_ifp->if_broadcastaddr)) { 1696 if ((ni = ieee80211_find_node(&ic->ic_sta, 1697 mlme.im_macaddr)) == NULL) 1698 return EINVAL; 1699 domlme(&mlme, ni); 1700 ieee80211_free_node(ni); 1701 } else { 1702 ieee80211_iterate_nodes(&ic->ic_sta, 1703 domlme, &mlme); 1704 } 1705 #endif /* !IEEE80211_NO_HOSTAP */ 1706 break; 1707 default: 1708 return EINVAL; 1709 } 1710 break; 1711 case IEEE80211_MLME_AUTHORIZE: 1712 case IEEE80211_MLME_UNAUTHORIZE: 1713 if (ic->ic_opmode != IEEE80211_M_HOSTAP) 1714 return EINVAL; 1715 ni = ieee80211_find_node(&ic->ic_sta, mlme.im_macaddr); 1716 if (ni == NULL) 1717 return EINVAL; 1718 if (mlme.im_op == IEEE80211_MLME_AUTHORIZE) 1719 ieee80211_node_authorize(ic, ni); 1720 else 1721 ieee80211_node_unauthorize(ic, ni); 1722 ieee80211_free_node(ni); 1723 break; 1724 default: 1725 return EINVAL; 1726 } 1727 return 0; 1728 } 1729 1730 static int 1731 ieee80211_ioctl_macmac(struct ieee80211com *ic, struct ieee80211req *ireq) 1732 { 1733 u_int8_t mac[IEEE80211_ADDR_LEN]; 1734 const struct ieee80211_aclator *acl = ic->ic_acl; 1735 int error; 1736 1737 if (ireq->i_len != sizeof(mac)) 1738 return EINVAL; 1739 error = copyin(ireq->i_data, mac, ireq->i_len); 1740 if (error) 1741 return error; 1742 if (acl == NULL) { 1743 acl = ieee80211_aclator_get("mac"); 1744 if (acl == NULL || !acl->iac_attach(ic)) 1745 return EINVAL; 1746 ic->ic_acl = acl; 1747 } 1748 if (ireq->i_type == IEEE80211_IOC_ADDMAC) 1749 acl->iac_add(ic, mac); 1750 else 1751 acl->iac_remove(ic, mac); 1752 return 0; 1753 } 1754 1755 static int 1756 ieee80211_ioctl_maccmd(struct ieee80211com *ic, struct ieee80211req *ireq) 1757 { 1758 const struct ieee80211_aclator *acl = ic->ic_acl; 1759 1760 switch (ireq->i_val) { 1761 case IEEE80211_MACCMD_POLICY_OPEN: 1762 case IEEE80211_MACCMD_POLICY_ALLOW: 1763 case IEEE80211_MACCMD_POLICY_DENY: 1764 if (acl == NULL) { 1765 acl = ieee80211_aclator_get("mac"); 1766 if (acl == NULL || !acl->iac_attach(ic)) 1767 return EINVAL; 1768 ic->ic_acl = acl; 1769 } 1770 acl->iac_setpolicy(ic, ireq->i_val); 1771 break; 1772 case IEEE80211_MACCMD_FLUSH: 1773 if (acl != NULL) 1774 acl->iac_flush(ic); 1775 /* NB: silently ignore when not in use */ 1776 break; 1777 case IEEE80211_MACCMD_DETACH: 1778 if (acl != NULL) { 1779 ic->ic_acl = NULL; 1780 acl->iac_detach(ic); 1781 } 1782 break; 1783 default: 1784 return EINVAL; 1785 } 1786 return 0; 1787 } 1788 1789 static int 1790 ieee80211_ioctl_setchanlist(struct ieee80211com *ic, struct ieee80211req *ireq) 1791 { 1792 struct ieee80211req_chanlist list; 1793 u_char chanlist[IEEE80211_CHAN_BYTES]; 1794 int i, j, error; 1795 1796 if (ireq->i_len != sizeof(list)) 1797 return EINVAL; 1798 error = copyin(ireq->i_data, &list, sizeof(list)); 1799 if (error) 1800 return error; 1801 memset(chanlist, 0, sizeof(chanlist)); 1802 /* 1803 * Since channel 0 is not available for DS, channel 1 1804 * is assigned to LSB on WaveLAN. 1805 */ 1806 if (ic->ic_phytype == IEEE80211_T_DS) 1807 i = 1; 1808 else 1809 i = 0; 1810 for (j = 0; i <= IEEE80211_CHAN_MAX; i++, j++) { 1811 /* 1812 * NB: silently discard unavailable channels so users 1813 * can specify 1-255 to get all available channels. 1814 */ 1815 if (isset(list.ic_channels, j) && isset(ic->ic_chan_avail, i)) 1816 setbit(chanlist, i); 1817 } 1818 if (ic->ic_ibss_chan == NULL || 1819 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_ibss_chan))) { 1820 for (i = 0; i <= IEEE80211_CHAN_MAX; i++) 1821 if (isset(chanlist, i)) { 1822 ic->ic_ibss_chan = &ic->ic_channels[i]; 1823 goto found; 1824 } 1825 return EINVAL; /* no active channels */ 1826 found: 1827 ; 1828 } 1829 memcpy(ic->ic_chan_active, chanlist, sizeof(ic->ic_chan_active)); 1830 if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC || 1831 isclr(chanlist, ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan))) 1832 ic->ic_bss->ni_chan = ic->ic_ibss_chan; 1833 return IS_UP_AUTO(ic) ? ENETRESET : 0; 1834 } 1835 1836 static int 1837 ieee80211_ioctl_setstatxpow(struct ieee80211com *ic, struct ieee80211req *ireq) 1838 { 1839 struct ieee80211_node *ni; 1840 struct ieee80211req_sta_txpow txpow; 1841 int error; 1842 1843 if (ireq->i_len != sizeof(txpow)) 1844 return EINVAL; 1845 error = copyin(ireq->i_data, &txpow, sizeof(txpow)); 1846 if (error != 0) 1847 return error; 1848 ni = ieee80211_find_node(&ic->ic_sta, txpow.it_macaddr); 1849 if (ni == NULL) 1850 return EINVAL; /* XXX */ 1851 ni->ni_txpower = txpow.it_txpow; 1852 ieee80211_free_node(ni); 1853 return error; 1854 } 1855 1856 static int 1857 ieee80211_ioctl_setwmeparam(struct ieee80211com *ic, struct ieee80211req *ireq) 1858 { 1859 struct ieee80211_wme_state *wme = &ic->ic_wme; 1860 struct wmeParams *wmep, *chanp; 1861 int isbss, ac; 1862 1863 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 1864 return EINVAL; 1865 1866 isbss = (ireq->i_len & IEEE80211_WMEPARAM_BSS); 1867 ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL); 1868 if (ac >= WME_NUM_AC) 1869 ac = WME_AC_BE; 1870 if (isbss) { 1871 chanp = &wme->wme_bssChanParams.cap_wmeParams[ac]; 1872 wmep = &wme->wme_wmeBssChanParams.cap_wmeParams[ac]; 1873 } else { 1874 chanp = &wme->wme_chanParams.cap_wmeParams[ac]; 1875 wmep = &wme->wme_wmeChanParams.cap_wmeParams[ac]; 1876 } 1877 switch (ireq->i_type) { 1878 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 1879 if (isbss) { 1880 wmep->wmep_logcwmin = ireq->i_val; 1881 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1882 chanp->wmep_logcwmin = ireq->i_val; 1883 } else { 1884 wmep->wmep_logcwmin = chanp->wmep_logcwmin = 1885 ireq->i_val; 1886 } 1887 break; 1888 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 1889 if (isbss) { 1890 wmep->wmep_logcwmax = ireq->i_val; 1891 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1892 chanp->wmep_logcwmax = ireq->i_val; 1893 } else { 1894 wmep->wmep_logcwmax = chanp->wmep_logcwmax = 1895 ireq->i_val; 1896 } 1897 break; 1898 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 1899 if (isbss) { 1900 wmep->wmep_aifsn = ireq->i_val; 1901 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1902 chanp->wmep_aifsn = ireq->i_val; 1903 } else { 1904 wmep->wmep_aifsn = chanp->wmep_aifsn = ireq->i_val; 1905 } 1906 break; 1907 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 1908 if (isbss) { 1909 wmep->wmep_txopLimit = ireq->i_val; 1910 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1911 chanp->wmep_txopLimit = ireq->i_val; 1912 } else { 1913 wmep->wmep_txopLimit = chanp->wmep_txopLimit = 1914 ireq->i_val; 1915 } 1916 break; 1917 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 1918 wmep->wmep_acm = ireq->i_val; 1919 if ((wme->wme_flags & WME_F_AGGRMODE) == 0) 1920 chanp->wmep_acm = ireq->i_val; 1921 break; 1922 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (!bss only)*/ 1923 wmep->wmep_noackPolicy = chanp->wmep_noackPolicy = 1924 (ireq->i_val) == 0; 1925 break; 1926 } 1927 ieee80211_wme_updateparams(ic); 1928 return 0; 1929 } 1930 1931 static int 1932 cipher2cap(int cipher) 1933 { 1934 switch (cipher) { 1935 case IEEE80211_CIPHER_WEP: return IEEE80211_C_WEP; 1936 case IEEE80211_CIPHER_AES_OCB: return IEEE80211_C_AES; 1937 case IEEE80211_CIPHER_AES_CCM: return IEEE80211_C_AES_CCM; 1938 case IEEE80211_CIPHER_CKIP: return IEEE80211_C_CKIP; 1939 case IEEE80211_CIPHER_TKIP: return IEEE80211_C_TKIP; 1940 } 1941 return 0; 1942 } 1943 1944 static int 1945 ieee80211_ioctl_set80211(struct ieee80211com *ic, u_long cmd, struct ieee80211req *ireq) 1946 { 1947 #ifdef COMPAT_FREEBSD 1948 static const u_int8_t zerobssid[IEEE80211_ADDR_LEN]; 1949 u_int8_t tmpkey[IEEE80211_KEYBUF_SIZE]; 1950 char tmpssid[IEEE80211_NWID_LEN]; 1951 u_int8_t tmpbssid[IEEE80211_ADDR_LEN]; 1952 struct ieee80211_key *k; 1953 u_int kid; 1954 #endif /* COMPAT_FREEBSD */ 1955 struct ieee80211_rsnparms *rsn = &ic->ic_bss->ni_rsn; 1956 int error; 1957 const struct ieee80211_authenticator *auth; 1958 int j, caps; 1959 1960 error = 0; 1961 switch (ireq->i_type) { 1962 #ifdef COMPAT_FREEBSD 1963 case IEEE80211_IOC_SSID: 1964 if (ireq->i_val != 0 || 1965 ireq->i_len > IEEE80211_NWID_LEN) 1966 return EINVAL; 1967 error = copyin(ireq->i_data, tmpssid, ireq->i_len); 1968 if (error) 1969 break; 1970 memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN); 1971 ic->ic_des_esslen = ireq->i_len; 1972 memcpy(ic->ic_des_essid, tmpssid, ireq->i_len); 1973 error = ENETRESET; 1974 break; 1975 #endif /* COMPAT_FREEBSD */ 1976 case IEEE80211_IOC_WEP: 1977 switch (ireq->i_val) { 1978 case IEEE80211_WEP_OFF: 1979 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 1980 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 1981 break; 1982 case IEEE80211_WEP_ON: 1983 ic->ic_flags |= IEEE80211_F_PRIVACY; 1984 ic->ic_flags |= IEEE80211_F_DROPUNENC; 1985 break; 1986 case IEEE80211_WEP_MIXED: 1987 ic->ic_flags |= IEEE80211_F_PRIVACY; 1988 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 1989 break; 1990 } 1991 error = ENETRESET; 1992 break; 1993 #ifdef COMPAT_FREEBSD 1994 case IEEE80211_IOC_WEPKEY: 1995 kid = (u_int) ireq->i_val; 1996 if (kid >= IEEE80211_WEP_NKID) 1997 return EINVAL; 1998 k = &ic->ic_nw_keys[kid]; 1999 if (ireq->i_len == 0) { 2000 /* zero-len =>'s delete any existing key */ 2001 (void) ieee80211_crypto_delkey(ic, k); 2002 break; 2003 } 2004 if (ireq->i_len > sizeof(tmpkey)) 2005 return EINVAL; 2006 memset(tmpkey, 0, sizeof(tmpkey)); 2007 error = copyin(ireq->i_data, tmpkey, ireq->i_len); 2008 if (error) 2009 break; 2010 ieee80211_key_update_begin(ic); 2011 k->wk_keyix = kid; /* NB: force fixed key id */ 2012 if (ieee80211_crypto_newkey(ic, IEEE80211_CIPHER_WEP, 2013 IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV, k)) { 2014 k->wk_keylen = ireq->i_len; 2015 memcpy(k->wk_key, tmpkey, sizeof(tmpkey)); 2016 if (!ieee80211_crypto_setkey(ic, k, ic->ic_myaddr)) 2017 error = EINVAL; 2018 } else 2019 error = EINVAL; 2020 ieee80211_key_update_end(ic); 2021 if (!error) /* NB: for compatibility */ 2022 error = ENETRESET; 2023 break; 2024 case IEEE80211_IOC_WEPTXKEY: 2025 kid = (u_int) ireq->i_val; 2026 if (kid >= IEEE80211_WEP_NKID && 2027 (u_int16_t) kid != IEEE80211_KEYIX_NONE) 2028 return EINVAL; 2029 ic->ic_def_txkey = kid; 2030 error = ENETRESET; /* push to hardware */ 2031 break; 2032 #endif /* COMPAT_FREEBSD */ 2033 case IEEE80211_IOC_AUTHMODE: 2034 switch (ireq->i_val) { 2035 case IEEE80211_AUTH_WPA: 2036 case IEEE80211_AUTH_8021X: /* 802.1x */ 2037 case IEEE80211_AUTH_OPEN: /* open */ 2038 case IEEE80211_AUTH_SHARED: /* shared-key */ 2039 case IEEE80211_AUTH_AUTO: /* auto */ 2040 auth = ieee80211_authenticator_get(ireq->i_val); 2041 if (auth == NULL) 2042 return EINVAL; 2043 break; 2044 default: 2045 return EINVAL; 2046 } 2047 switch (ireq->i_val) { 2048 case IEEE80211_AUTH_WPA: /* WPA w/ 802.1x */ 2049 ic->ic_flags |= IEEE80211_F_PRIVACY; 2050 ireq->i_val = IEEE80211_AUTH_8021X; 2051 break; 2052 case IEEE80211_AUTH_OPEN: /* open */ 2053 ic->ic_flags &= ~(IEEE80211_F_WPA|IEEE80211_F_PRIVACY); 2054 break; 2055 case IEEE80211_AUTH_SHARED: /* shared-key */ 2056 case IEEE80211_AUTH_8021X: /* 802.1x */ 2057 ic->ic_flags &= ~IEEE80211_F_WPA; 2058 /* both require a key so mark the PRIVACY capability */ 2059 ic->ic_flags |= IEEE80211_F_PRIVACY; 2060 break; 2061 case IEEE80211_AUTH_AUTO: /* auto */ 2062 ic->ic_flags &= ~IEEE80211_F_WPA; 2063 /* XXX PRIVACY handling? */ 2064 /* XXX what's the right way to do this? */ 2065 break; 2066 } 2067 /* NB: authenticator attach/detach happens on state change */ 2068 ic->ic_bss->ni_authmode = ireq->i_val; 2069 /* XXX mixed/mode/usage? */ 2070 ic->ic_auth = auth; 2071 error = ENETRESET; 2072 break; 2073 #ifdef COMPAT_FREEBSD 2074 case IEEE80211_IOC_CHANNEL: 2075 /* XXX 0xffff overflows 16-bit signed */ 2076 if (ireq->i_val == 0 || 2077 ireq->i_val == (int16_t) IEEE80211_CHAN_ANY) 2078 ic->ic_des_chan = IEEE80211_CHAN_ANYC; 2079 else if ((u_int) ireq->i_val > IEEE80211_CHAN_MAX || 2080 isclr(ic->ic_chan_active, ireq->i_val)) { 2081 return EINVAL; 2082 } else 2083 ic->ic_ibss_chan = ic->ic_des_chan = 2084 &ic->ic_channels[ireq->i_val]; 2085 switch (ic->ic_state) { 2086 case IEEE80211_S_INIT: 2087 case IEEE80211_S_SCAN: 2088 error = ENETRESET; 2089 break; 2090 default: 2091 /* 2092 * If the desired channel has changed (to something 2093 * other than any) and we're not already scanning, 2094 * then kick the state machine. 2095 */ 2096 if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 2097 ic->ic_bss->ni_chan != ic->ic_des_chan && 2098 (ic->ic_flags & IEEE80211_F_SCAN) == 0) 2099 error = ENETRESET; 2100 break; 2101 } 2102 if (error == ENETRESET && ic->ic_opmode == IEEE80211_M_MONITOR) 2103 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2104 break; 2105 case IEEE80211_IOC_POWERSAVE: 2106 switch (ireq->i_val) { 2107 case IEEE80211_POWERSAVE_OFF: 2108 if (ic->ic_flags & IEEE80211_F_PMGTON) { 2109 ic->ic_flags &= ~IEEE80211_F_PMGTON; 2110 error = ENETRESET; 2111 } 2112 break; 2113 case IEEE80211_POWERSAVE_ON: 2114 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 2115 error = EINVAL; 2116 else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 2117 ic->ic_flags |= IEEE80211_F_PMGTON; 2118 error = ENETRESET; 2119 } 2120 break; 2121 default: 2122 error = EINVAL; 2123 break; 2124 } 2125 break; 2126 case IEEE80211_IOC_POWERSAVESLEEP: 2127 if (ireq->i_val < 0) 2128 return EINVAL; 2129 ic->ic_lintval = ireq->i_val; 2130 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2131 break; 2132 #endif /* COMPAT_FREEBSD */ 2133 case IEEE80211_IOC_RTSTHRESHOLD: 2134 if (!(IEEE80211_RTS_MIN < ireq->i_val && 2135 ireq->i_val < IEEE80211_RTS_MAX)) 2136 return EINVAL; 2137 ic->ic_rtsthreshold = ireq->i_val; 2138 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2139 break; 2140 case IEEE80211_IOC_PROTMODE: 2141 if (ireq->i_val > IEEE80211_PROT_RTSCTS) 2142 return EINVAL; 2143 ic->ic_protmode = ireq->i_val; 2144 /* NB: if not operating in 11g this can wait */ 2145 if (ic->ic_curmode == IEEE80211_MODE_11G) 2146 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2147 break; 2148 case IEEE80211_IOC_TXPOWER: 2149 if ((ic->ic_caps & IEEE80211_C_TXPMGT) == 0) 2150 return EINVAL; 2151 if (!(IEEE80211_TXPOWER_MIN < ireq->i_val && 2152 ireq->i_val < IEEE80211_TXPOWER_MAX)) 2153 return EINVAL; 2154 ic->ic_txpowlimit = ireq->i_val; 2155 error = IS_UP(ic) ? ic->ic_reset(ic->ic_ifp) : 0; 2156 break; 2157 case IEEE80211_IOC_ROAMING: 2158 if (!(IEEE80211_ROAMING_DEVICE <= ireq->i_val && 2159 ireq->i_val <= IEEE80211_ROAMING_MANUAL)) 2160 return EINVAL; 2161 ic->ic_roaming = ireq->i_val; 2162 /* XXXX reset? */ 2163 break; 2164 #ifdef COMPAT_FREEBSD 2165 case IEEE80211_IOC_PRIVACY: 2166 if (ireq->i_val) { 2167 /* XXX check for key state? */ 2168 ic->ic_flags |= IEEE80211_F_PRIVACY; 2169 } else 2170 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 2171 break; 2172 case IEEE80211_IOC_DROPUNENCRYPTED: 2173 if (ireq->i_val) 2174 ic->ic_flags |= IEEE80211_F_DROPUNENC; 2175 else 2176 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 2177 break; 2178 #endif /* COMPAT_FREEBSD */ 2179 case IEEE80211_IOC_WPAKEY: 2180 error = ieee80211_ioctl_setkey(ic, ireq); 2181 break; 2182 case IEEE80211_IOC_DELKEY: 2183 error = ieee80211_ioctl_delkey(ic, ireq); 2184 break; 2185 case IEEE80211_IOC_MLME: 2186 error = ieee80211_ioctl_setmlme(ic, ireq); 2187 break; 2188 case IEEE80211_IOC_OPTIE: 2189 error = ieee80211_ioctl_setoptie(ic, ireq); 2190 break; 2191 case IEEE80211_IOC_COUNTERMEASURES: 2192 if (ireq->i_val) { 2193 if ((ic->ic_flags & IEEE80211_F_WPA) == 0) 2194 return EINVAL; 2195 ic->ic_flags |= IEEE80211_F_COUNTERM; 2196 } else 2197 ic->ic_flags &= ~IEEE80211_F_COUNTERM; 2198 break; 2199 case IEEE80211_IOC_WPA: 2200 if (ireq->i_val > 3) 2201 return EINVAL; 2202 /* XXX verify ciphers available */ 2203 ic->ic_flags &= ~IEEE80211_F_WPA; 2204 switch (ireq->i_val) { 2205 case 1: 2206 ic->ic_flags |= IEEE80211_F_WPA1; 2207 break; 2208 case 2: 2209 ic->ic_flags |= IEEE80211_F_WPA2; 2210 break; 2211 case 3: 2212 ic->ic_flags |= IEEE80211_F_WPA1 | IEEE80211_F_WPA2; 2213 break; 2214 } 2215 error = ENETRESET; /* XXX? */ 2216 break; 2217 case IEEE80211_IOC_WME: 2218 if (ireq->i_val) { 2219 if ((ic->ic_caps & IEEE80211_C_WME) == 0) 2220 return EINVAL; 2221 ic->ic_flags |= IEEE80211_F_WME; 2222 } else 2223 ic->ic_flags &= ~IEEE80211_F_WME; 2224 error = ENETRESET; /* XXX maybe not for station? */ 2225 break; 2226 case IEEE80211_IOC_HIDESSID: 2227 if (ireq->i_val) 2228 ic->ic_flags |= IEEE80211_F_HIDESSID; 2229 else 2230 ic->ic_flags &= ~IEEE80211_F_HIDESSID; 2231 error = ENETRESET; 2232 break; 2233 case IEEE80211_IOC_APBRIDGE: 2234 if (ireq->i_val == 0) 2235 ic->ic_flags |= IEEE80211_F_NOBRIDGE; 2236 else 2237 ic->ic_flags &= ~IEEE80211_F_NOBRIDGE; 2238 break; 2239 case IEEE80211_IOC_MCASTCIPHER: 2240 if ((ic->ic_caps & cipher2cap(ireq->i_val)) == 0 && 2241 !ieee80211_crypto_available(ireq->i_val)) 2242 return EINVAL; 2243 rsn->rsn_mcastcipher = ireq->i_val; 2244 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2245 break; 2246 case IEEE80211_IOC_MCASTKEYLEN: 2247 if (!(0 < ireq->i_val && ireq->i_val < IEEE80211_KEYBUF_SIZE)) 2248 return EINVAL; 2249 /* XXX no way to verify driver capability */ 2250 rsn->rsn_mcastkeylen = ireq->i_val; 2251 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2252 break; 2253 case IEEE80211_IOC_UCASTCIPHERS: 2254 /* 2255 * Convert user-specified cipher set to the set 2256 * we can support (via hardware or software). 2257 * NB: this logic intentionally ignores unknown and 2258 * unsupported ciphers so folks can specify 0xff or 2259 * similar and get all available ciphers. 2260 */ 2261 caps = 0; 2262 for (j = 1; j < 32; j++) /* NB: skip WEP */ 2263 if ((ireq->i_val & (1<<j)) && 2264 ((ic->ic_caps & cipher2cap(j)) || 2265 ieee80211_crypto_available(j))) 2266 caps |= 1<<j; 2267 if (caps == 0) /* nothing available */ 2268 return EINVAL; 2269 /* XXX verify ciphers ok for unicast use? */ 2270 /* XXX disallow if running as it'll have no effect */ 2271 rsn->rsn_ucastcipherset = caps; 2272 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2273 break; 2274 case IEEE80211_IOC_UCASTCIPHER: 2275 if ((rsn->rsn_ucastcipherset & cipher2cap(ireq->i_val)) == 0) 2276 return EINVAL; 2277 rsn->rsn_ucastcipher = ireq->i_val; 2278 break; 2279 case IEEE80211_IOC_UCASTKEYLEN: 2280 if (!(0 < ireq->i_val && ireq->i_val < IEEE80211_KEYBUF_SIZE)) 2281 return EINVAL; 2282 /* XXX no way to verify driver capability */ 2283 rsn->rsn_ucastkeylen = ireq->i_val; 2284 break; 2285 case IEEE80211_IOC_DRIVER_CAPS: 2286 /* NB: for testing */ 2287 ic->ic_caps = (((u_int16_t) ireq->i_val) << 16) | 2288 ((u_int16_t) ireq->i_len); 2289 break; 2290 case IEEE80211_IOC_KEYMGTALGS: 2291 /* XXX check */ 2292 rsn->rsn_keymgmtset = ireq->i_val; 2293 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2294 break; 2295 case IEEE80211_IOC_RSNCAPS: 2296 /* XXX check */ 2297 rsn->rsn_caps = ireq->i_val; 2298 error = (ic->ic_flags & IEEE80211_F_WPA) ? ENETRESET : 0; 2299 break; 2300 #ifdef COMPAT_FREEBSD 2301 case IEEE80211_IOC_BSSID: 2302 /* NB: should only be set when in STA mode */ 2303 if (ic->ic_opmode != IEEE80211_M_STA) 2304 return EINVAL; 2305 if (ireq->i_len != sizeof(tmpbssid)) 2306 return EINVAL; 2307 error = copyin(ireq->i_data, tmpbssid, ireq->i_len); 2308 if (error) 2309 break; 2310 IEEE80211_ADDR_COPY(ic->ic_des_bssid, tmpbssid); 2311 if (IEEE80211_ADDR_EQ(ic->ic_des_bssid, zerobssid)) 2312 ic->ic_flags &= ~IEEE80211_F_DESBSSID; 2313 else 2314 ic->ic_flags |= IEEE80211_F_DESBSSID; 2315 error = ENETRESET; 2316 break; 2317 #endif /* COMPAT_FREEBSD */ 2318 case IEEE80211_IOC_CHANLIST: 2319 error = ieee80211_ioctl_setchanlist(ic, ireq); 2320 break; 2321 case IEEE80211_IOC_SCAN_REQ: 2322 if (ic->ic_opmode == IEEE80211_M_HOSTAP) /* XXX ignore */ 2323 break; 2324 error = ieee80211_setupscan(ic, ic->ic_chan_avail); 2325 if (error == 0) /* XXX background scan */ 2326 error = ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 2327 break; 2328 case IEEE80211_IOC_ADDMAC: 2329 case IEEE80211_IOC_DELMAC: 2330 error = ieee80211_ioctl_macmac(ic, ireq); 2331 break; 2332 case IEEE80211_IOC_MACCMD: 2333 error = ieee80211_ioctl_maccmd(ic, ireq); 2334 break; 2335 case IEEE80211_IOC_STA_TXPOW: 2336 error = ieee80211_ioctl_setstatxpow(ic, ireq); 2337 break; 2338 case IEEE80211_IOC_WME_CWMIN: /* WME: CWmin */ 2339 case IEEE80211_IOC_WME_CWMAX: /* WME: CWmax */ 2340 case IEEE80211_IOC_WME_AIFS: /* WME: AIFS */ 2341 case IEEE80211_IOC_WME_TXOPLIMIT: /* WME: txops limit */ 2342 case IEEE80211_IOC_WME_ACM: /* WME: ACM (bss only) */ 2343 case IEEE80211_IOC_WME_ACKPOLICY: /* WME: ACK policy (bss only) */ 2344 error = ieee80211_ioctl_setwmeparam(ic, ireq); 2345 break; 2346 case IEEE80211_IOC_DTIM_PERIOD: 2347 if (ic->ic_opmode != IEEE80211_M_HOSTAP && 2348 ic->ic_opmode != IEEE80211_M_IBSS) 2349 return EINVAL; 2350 if (IEEE80211_DTIM_MIN <= ireq->i_val && 2351 ireq->i_val <= IEEE80211_DTIM_MAX) { 2352 ic->ic_dtim_period = ireq->i_val; 2353 error = ENETRESET; /* requires restart */ 2354 } else 2355 error = EINVAL; 2356 break; 2357 #ifdef COMPAT_FREEBSD 2358 case IEEE80211_IOC_BEACON_INTERVAL: 2359 if (ic->ic_opmode != IEEE80211_M_HOSTAP && 2360 ic->ic_opmode != IEEE80211_M_IBSS) 2361 return EINVAL; 2362 if (IEEE80211_BINTVAL_MIN <= ireq->i_val && 2363 ireq->i_val <= IEEE80211_BINTVAL_MAX) { 2364 ic->ic_lintval = ireq->i_val; 2365 error = ENETRESET; /* requires restart */ 2366 } else 2367 error = EINVAL; 2368 break; 2369 #endif /* COMPAT_FREEBSD */ 2370 case IEEE80211_IOC_PUREG: 2371 if (ireq->i_val) 2372 ic->ic_flags |= IEEE80211_F_PUREG; 2373 else 2374 ic->ic_flags &= ~IEEE80211_F_PUREG; 2375 /* NB: reset only if we're operating on an 11g channel */ 2376 if (ic->ic_curmode == IEEE80211_MODE_11G) 2377 error = ENETRESET; 2378 break; 2379 default: 2380 error = EINVAL; 2381 break; 2382 } 2383 if (error == ENETRESET && !IS_UP_AUTO(ic)) 2384 error = 0; 2385 return error; 2386 } 2387 2388 #ifdef __FreeBSD__ 2389 int 2390 ieee80211_ioctl(struct ieee80211com *ic, u_long cmd, caddr_t data) 2391 { 2392 struct ifnet *ifp = ic->ic_ifp; 2393 int error = 0; 2394 struct ifreq *ifr; 2395 struct ifaddr *ifa; /* XXX */ 2396 2397 switch (cmd) { 2398 case SIOCSIFMEDIA: 2399 case SIOCGIFMEDIA: 2400 error = ifmedia_ioctl(ifp, (struct ifreq *) data, 2401 &ic->ic_media, cmd); 2402 break; 2403 case SIOCG80211: 2404 error = ieee80211_ioctl_get80211(ic, cmd, 2405 (struct ieee80211req *) data); 2406 break; 2407 case SIOCS80211: 2408 error = suser(curthread); 2409 if (error == 0) 2410 error = ieee80211_ioctl_set80211(ic, cmd, 2411 (struct ieee80211req *) data); 2412 break; 2413 case SIOCGIFGENERIC: 2414 error = ieee80211_cfgget(ic, cmd, data); 2415 break; 2416 case SIOCSIFGENERIC: 2417 error = suser(curthread); 2418 if (error) 2419 break; 2420 error = ieee80211_cfgset(ic, cmd, data); 2421 break; 2422 case SIOCG80211STATS: 2423 ifr = (struct ifreq *)data; 2424 copyout(&ic->ic_stats, ifr->ifr_data, sizeof (ic->ic_stats)); 2425 break; 2426 case SIOCSIFMTU: 2427 ifr = (struct ifreq *)data; 2428 if (!(IEEE80211_MTU_MIN <= ifr->ifr_mtu && 2429 ifr->ifr_mtu <= IEEE80211_MTU_MAX)) 2430 error = EINVAL; 2431 else 2432 ifp->if_mtu = ifr->ifr_mtu; 2433 break; 2434 case SIOCSIFADDR: 2435 /* 2436 * XXX Handle this directly so we can supress if_init calls. 2437 * XXX This should be done in ether_ioctl but for the moment 2438 * XXX there are too many other parts of the system that 2439 * XXX set IFF_UP and so supress if_init being called when 2440 * XXX it should be. 2441 */ 2442 ifa = (struct ifaddr *) data; 2443 switch (ifa->ifa_addr->sa_family) { 2444 #ifdef INET 2445 case AF_INET: 2446 if ((ifp->if_flags & IFF_UP) == 0) { 2447 ifp->if_flags |= IFF_UP; 2448 ifp->if_init(ifp->if_softc); 2449 } 2450 arp_ifinit(ifp, ifa); 2451 break; 2452 #endif 2453 #ifdef IPX 2454 /* 2455 * XXX - This code is probably wrong, 2456 * but has been copied many times. 2457 */ 2458 case AF_IPX: { 2459 struct ipx_addr *ina = &(IA_SIPX(ifa)->sipx_addr); 2460 2461 if (ipx_nullhost(*ina)) 2462 ina->x_host = *(union ipx_host *) 2463 IFP2ENADDR(ifp); 2464 else 2465 bcopy((caddr_t) ina->x_host.c_host, 2466 (caddr_t) IFP2ENADDR(ifp), 2467 ETHER_ADDR_LEN); 2468 /* fall thru... */ 2469 } 2470 #endif 2471 default: 2472 if ((ifp->if_flags & IFF_UP) == 0) { 2473 ifp->if_flags |= IFF_UP; 2474 ifp->if_init(ifp->if_softc); 2475 } 2476 break; 2477 } 2478 break; 2479 default: 2480 error = ether_ioctl(ifp, cmd, data); 2481 break; 2482 } 2483 return error; 2484 } 2485 #endif /* __FreeBSD__ */ 2486 2487 #ifdef COMPAT_20 2488 static void 2489 ieee80211_get_ostats(struct ieee80211_ostats *ostats, 2490 struct ieee80211_stats *stats) 2491 { 2492 #define COPYSTATS1(__ostats, __nstats, __dstmemb, __srcmemb, __lastmemb)\ 2493 (void)memcpy(&(__ostats)->__dstmemb, &(__nstats)->__srcmemb, \ 2494 offsetof(struct ieee80211_stats, __lastmemb) - \ 2495 offsetof(struct ieee80211_stats, __srcmemb)) 2496 #define COPYSTATS(__ostats, __nstats, __dstmemb, __lastmemb) \ 2497 COPYSTATS1(__ostats, __nstats, __dstmemb, __dstmemb, __lastmemb) 2498 2499 COPYSTATS(ostats, stats, is_rx_badversion, is_rx_unencrypted); 2500 COPYSTATS(ostats, stats, is_rx_wepfail, is_rx_beacon); 2501 COPYSTATS(ostats, stats, is_rx_rstoobig, is_rx_auth_countermeasures); 2502 COPYSTATS(ostats, stats, is_rx_assoc_bss, is_rx_assoc_badwpaie); 2503 COPYSTATS(ostats, stats, is_rx_deauth, is_rx_unauth); 2504 COPYSTATS1(ostats, stats, is_tx_nombuf, is_tx_nobuf, is_tx_badcipher); 2505 COPYSTATS(ostats, stats, is_scan_active, is_crypto_tkip); 2506 } 2507 #endif /* COMPAT_20 */ 2508 2509 #ifdef __NetBSD__ 2510 int 2511 ieee80211_ioctl(struct ieee80211com *ic, u_long cmd, caddr_t data) 2512 { 2513 struct ifnet *ifp = ic->ic_ifp; 2514 struct ifreq *ifr = (struct ifreq *)data; 2515 int i, error = 0, kid, klen, s; 2516 struct ieee80211_key *k; 2517 struct ieee80211_nwid nwid; 2518 struct ieee80211_nwkey *nwkey; 2519 struct ieee80211_power *power; 2520 struct ieee80211_bssid *bssid; 2521 struct ieee80211chanreq *chanreq; 2522 struct ieee80211_channel *chan; 2523 uint32_t oflags; 2524 #ifdef COMPAT_20 2525 struct ieee80211_ostats ostats; 2526 #endif /* COMPAT_20 */ 2527 static const u_int8_t empty_macaddr[IEEE80211_ADDR_LEN] = { 2528 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 2529 }; 2530 u_int8_t tmpkey[IEEE80211_WEP_NKID][IEEE80211_KEYBUF_SIZE]; 2531 2532 switch (cmd) { 2533 case SIOCSIFMEDIA: 2534 case SIOCGIFMEDIA: 2535 error = ifmedia_ioctl(ifp, ifr, &ic->ic_media, cmd); 2536 break; 2537 case SIOCG80211: 2538 error = ieee80211_ioctl_get80211(ic, cmd, 2539 (struct ieee80211req *) data); 2540 break; 2541 case SIOCS80211: 2542 if ((error = suser(curproc->p_ucred, &curproc->p_acflag)) != 0) 2543 break; 2544 error = ieee80211_ioctl_set80211(ic, cmd, 2545 (struct ieee80211req *) data); 2546 break; 2547 case SIOCS80211NWID: 2548 if ((error = copyin(ifr->ifr_data, &nwid, sizeof(nwid))) != 0) 2549 break; 2550 if (nwid.i_len > IEEE80211_NWID_LEN) { 2551 error = EINVAL; 2552 break; 2553 } 2554 memset(ic->ic_des_essid, 0, IEEE80211_NWID_LEN); 2555 ic->ic_des_esslen = nwid.i_len; 2556 memcpy(ic->ic_des_essid, nwid.i_nwid, nwid.i_len); 2557 error = ENETRESET; 2558 break; 2559 case SIOCG80211NWID: 2560 memset(&nwid, 0, sizeof(nwid)); 2561 switch (ic->ic_state) { 2562 case IEEE80211_S_INIT: 2563 case IEEE80211_S_SCAN: 2564 nwid.i_len = ic->ic_des_esslen; 2565 memcpy(nwid.i_nwid, ic->ic_des_essid, nwid.i_len); 2566 break; 2567 default: 2568 nwid.i_len = ic->ic_bss->ni_esslen; 2569 memcpy(nwid.i_nwid, ic->ic_bss->ni_essid, nwid.i_len); 2570 break; 2571 } 2572 error = copyout(&nwid, ifr->ifr_data, sizeof(nwid)); 2573 break; 2574 case SIOCS80211NWKEY: 2575 nwkey = (struct ieee80211_nwkey *)data; 2576 /* transmit key index out of range? */ 2577 kid = nwkey->i_defkid - 1; 2578 if (kid < 0 || kid >= IEEE80211_WEP_NKID) { 2579 error = EINVAL; 2580 break; 2581 } 2582 /* no such transmit key is set? */ 2583 if (nwkey->i_key[kid].i_keylen == 0 || 2584 (nwkey->i_key[kid].i_keylen == -1 && 2585 ic->ic_nw_keys[kid].wk_keylen == 0)) { 2586 if (nwkey->i_wepon != IEEE80211_NWKEY_OPEN) { 2587 error = EINVAL; 2588 break; 2589 } 2590 } 2591 /* check key lengths */ 2592 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2593 klen = nwkey->i_key[kid].i_keylen; 2594 if ((klen > 0 && 2595 klen < IEEE80211_WEP_KEYLEN) || 2596 klen > sizeof(ic->ic_nw_keys[kid].wk_key)) { 2597 error = EINVAL; 2598 break; 2599 } 2600 } 2601 2602 if (error) 2603 break; 2604 2605 /* copy in keys */ 2606 (void)memset(tmpkey, 0, sizeof(tmpkey)); 2607 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2608 klen = nwkey->i_key[kid].i_keylen; 2609 if (klen <= 0) 2610 continue; 2611 if ((error = copyin(nwkey->i_key[kid].i_keydat, 2612 tmpkey[kid], klen)) != 0) 2613 break; 2614 } 2615 2616 if (error) 2617 break; 2618 2619 /* set keys */ 2620 ieee80211_key_update_begin(ic); 2621 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2622 klen = nwkey->i_key[kid].i_keylen; 2623 if (klen <= 0) 2624 continue; 2625 k = &ic->ic_nw_keys[kid]; 2626 k->wk_keyix = kid; 2627 if (!ieee80211_crypto_newkey(ic, IEEE80211_CIPHER_WEP, 2628 IEEE80211_KEY_XMIT | IEEE80211_KEY_RECV, k)) { 2629 error = EINVAL; 2630 continue; 2631 } 2632 k->wk_keylen = nwkey->i_key[kid].i_keylen; 2633 (void)memcpy(k->wk_key, tmpkey[kid], 2634 sizeof(tmpkey[kid])); 2635 if (!ieee80211_crypto_setkey(ic, k, ic->ic_myaddr)) 2636 error = EINVAL; 2637 } 2638 ieee80211_key_update_end(ic); 2639 2640 if (error) 2641 break; 2642 2643 /* delete keys */ 2644 for (kid = 0; kid < IEEE80211_WEP_NKID; kid++) { 2645 klen = nwkey->i_key[kid].i_keylen; 2646 k = &ic->ic_nw_keys[kid]; 2647 if (klen <= 0) 2648 (void)ieee80211_crypto_delkey(ic, k); 2649 } 2650 2651 /* set transmit key */ 2652 kid = nwkey->i_defkid - 1; 2653 if (ic->ic_def_txkey != kid) { 2654 ic->ic_def_txkey = kid; 2655 error = ENETRESET; 2656 } 2657 oflags = ic->ic_flags; 2658 if (nwkey->i_wepon == IEEE80211_NWKEY_OPEN) { 2659 ic->ic_flags &= ~IEEE80211_F_PRIVACY; 2660 ic->ic_flags &= ~IEEE80211_F_DROPUNENC; 2661 } else { 2662 ic->ic_flags |= IEEE80211_F_PRIVACY; 2663 ic->ic_flags |= IEEE80211_F_DROPUNENC; 2664 } 2665 if (oflags != ic->ic_flags) 2666 error = ENETRESET; 2667 break; 2668 case SIOCG80211NWKEY: 2669 nwkey = (struct ieee80211_nwkey *)data; 2670 if (ic->ic_flags & IEEE80211_F_PRIVACY) 2671 nwkey->i_wepon = IEEE80211_NWKEY_WEP; 2672 else 2673 nwkey->i_wepon = IEEE80211_NWKEY_OPEN; 2674 nwkey->i_defkid = ic->ic_def_txkey + 1; 2675 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 2676 if (nwkey->i_key[i].i_keydat == NULL) 2677 continue; 2678 /* do not show any keys to non-root user */ 2679 if ((error = suser(curproc->p_ucred, 2680 &curproc->p_acflag)) != 0) 2681 break; 2682 nwkey->i_key[i].i_keylen = ic->ic_nw_keys[i].wk_keylen; 2683 if ((error = copyout(ic->ic_nw_keys[i].wk_key, 2684 nwkey->i_key[i].i_keydat, 2685 ic->ic_nw_keys[i].wk_keylen)) != 0) 2686 break; 2687 } 2688 break; 2689 case SIOCS80211POWER: 2690 power = (struct ieee80211_power *)data; 2691 ic->ic_lintval = power->i_maxsleep; 2692 if (power->i_enabled != 0) { 2693 if ((ic->ic_caps & IEEE80211_C_PMGT) == 0) 2694 error = EINVAL; 2695 else if ((ic->ic_flags & IEEE80211_F_PMGTON) == 0) { 2696 ic->ic_flags |= IEEE80211_F_PMGTON; 2697 error = ENETRESET; 2698 } 2699 } else { 2700 if (ic->ic_flags & IEEE80211_F_PMGTON) { 2701 ic->ic_flags &= ~IEEE80211_F_PMGTON; 2702 error = ENETRESET; 2703 } 2704 } 2705 break; 2706 case SIOCG80211POWER: 2707 power = (struct ieee80211_power *)data; 2708 power->i_enabled = (ic->ic_flags & IEEE80211_F_PMGTON) ? 1 : 0; 2709 power->i_maxsleep = ic->ic_lintval; 2710 break; 2711 case SIOCS80211BSSID: 2712 bssid = (struct ieee80211_bssid *)data; 2713 if (IEEE80211_ADDR_EQ(bssid->i_bssid, empty_macaddr)) 2714 ic->ic_flags &= ~IEEE80211_F_DESBSSID; 2715 else { 2716 ic->ic_flags |= IEEE80211_F_DESBSSID; 2717 IEEE80211_ADDR_COPY(ic->ic_des_bssid, bssid->i_bssid); 2718 } 2719 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 2720 break; 2721 switch (ic->ic_state) { 2722 case IEEE80211_S_INIT: 2723 case IEEE80211_S_SCAN: 2724 error = ENETRESET; 2725 break; 2726 default: 2727 if ((ic->ic_flags & IEEE80211_F_DESBSSID) && 2728 !IEEE80211_ADDR_EQ(ic->ic_des_bssid, 2729 ic->ic_bss->ni_bssid)) 2730 error = ENETRESET; 2731 break; 2732 } 2733 break; 2734 case SIOCG80211BSSID: 2735 bssid = (struct ieee80211_bssid *)data; 2736 switch (ic->ic_state) { 2737 case IEEE80211_S_INIT: 2738 case IEEE80211_S_SCAN: 2739 if (ic->ic_opmode == IEEE80211_M_HOSTAP) 2740 IEEE80211_ADDR_COPY(bssid->i_bssid, 2741 ic->ic_myaddr); 2742 else if (ic->ic_flags & IEEE80211_F_DESBSSID) 2743 IEEE80211_ADDR_COPY(bssid->i_bssid, 2744 ic->ic_des_bssid); 2745 else 2746 memset(bssid->i_bssid, 0, IEEE80211_ADDR_LEN); 2747 break; 2748 default: 2749 IEEE80211_ADDR_COPY(bssid->i_bssid, 2750 ic->ic_bss->ni_bssid); 2751 break; 2752 } 2753 break; 2754 case SIOCS80211CHANNEL: 2755 chanreq = (struct ieee80211chanreq *)data; 2756 if (chanreq->i_channel == IEEE80211_CHAN_ANY) 2757 ic->ic_des_chan = IEEE80211_CHAN_ANYC; 2758 else if (chanreq->i_channel > IEEE80211_CHAN_MAX || 2759 isclr(ic->ic_chan_active, chanreq->i_channel)) { 2760 error = EINVAL; 2761 break; 2762 } else 2763 ic->ic_ibss_chan = ic->ic_des_chan = 2764 &ic->ic_channels[chanreq->i_channel]; 2765 switch (ic->ic_state) { 2766 case IEEE80211_S_INIT: 2767 case IEEE80211_S_SCAN: 2768 error = ENETRESET; 2769 break; 2770 default: 2771 if (ic->ic_opmode == IEEE80211_M_STA) { 2772 if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 2773 ic->ic_bss->ni_chan != ic->ic_des_chan) 2774 error = ENETRESET; 2775 } else { 2776 if (ic->ic_bss->ni_chan != ic->ic_ibss_chan) 2777 error = ENETRESET; 2778 } 2779 break; 2780 } 2781 break; 2782 case SIOCG80211CHANNEL: 2783 chanreq = (struct ieee80211chanreq *)data; 2784 switch (ic->ic_state) { 2785 case IEEE80211_S_INIT: 2786 case IEEE80211_S_SCAN: 2787 if (ic->ic_opmode == IEEE80211_M_STA) 2788 chan = ic->ic_des_chan; 2789 else 2790 chan = ic->ic_ibss_chan; 2791 break; 2792 default: 2793 chan = ic->ic_bss->ni_chan; 2794 break; 2795 } 2796 chanreq->i_channel = ieee80211_chan2ieee(ic, chan); 2797 break; 2798 case SIOCGIFGENERIC: 2799 error = ieee80211_cfgget(ic, cmd, data); 2800 break; 2801 case SIOCSIFGENERIC: 2802 error = suser(curproc->p_ucred, &curproc->p_acflag); 2803 if (error) 2804 break; 2805 error = ieee80211_cfgset(ic, cmd, data); 2806 break; 2807 #ifdef COMPAT_20 2808 case OSIOCG80211STATS: 2809 case OSIOCG80211ZSTATS: 2810 ifr = (struct ifreq *)data; 2811 s = splnet(); 2812 ieee80211_get_ostats(&ostats, &ic->ic_stats); 2813 error = copyout(&ostats, ifr->ifr_data, sizeof(ostats)); 2814 if (error == 0 && cmd == OSIOCG80211ZSTATS) 2815 (void)memset(&ic->ic_stats, 0, sizeof(ic->ic_stats)); 2816 splx(s); 2817 break; 2818 #endif /* COMPAT_20 */ 2819 case SIOCG80211ZSTATS: 2820 case SIOCG80211STATS: 2821 ifr = (struct ifreq *)data; 2822 s = splnet(); 2823 error = copyout(&ic->ic_stats, ifr->ifr_buf, 2824 MIN(sizeof(ic->ic_stats), ifr->ifr_buflen)); 2825 if (error == 0 && cmd == SIOCG80211ZSTATS) 2826 (void)memset(&ic->ic_stats, 0, sizeof(ic->ic_stats)); 2827 splx(s); 2828 break; 2829 case SIOCSIFMTU: 2830 ifr = (struct ifreq *)data; 2831 if (!(IEEE80211_MTU_MIN <= ifr->ifr_mtu && 2832 ifr->ifr_mtu <= IEEE80211_MTU_MAX)) 2833 error = EINVAL; 2834 else 2835 ifp->if_mtu = ifr->ifr_mtu; 2836 break; 2837 default: 2838 error = ether_ioctl(ifp, cmd, data); 2839 break; 2840 } 2841 return error; 2842 } 2843 #endif /* __NetBSD__ */ 2844
Indexes created Wed Sep 24 05:09:52 GMT 2025