ieee80211_node.c revision 1.32.2.2
1 1.32.2.2 skrll /* $NetBSD: ieee80211_node.c,v 1.32.2.2 2004/08/03 10:54:21 skrll Exp $ */ 2 1.32.2.2 skrll /*- 3 1.32.2.2 skrll * Copyright (c) 2001 Atsushi Onoe 4 1.32.2.2 skrll * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting 5 1.32.2.2 skrll * All rights reserved. 6 1.32.2.2 skrll * 7 1.32.2.2 skrll * Redistribution and use in source and binary forms, with or without 8 1.32.2.2 skrll * modification, are permitted provided that the following conditions 9 1.32.2.2 skrll * are met: 10 1.32.2.2 skrll * 1. Redistributions of source code must retain the above copyright 11 1.32.2.2 skrll * notice, this list of conditions and the following disclaimer. 12 1.32.2.2 skrll * 2. Redistributions in binary form must reproduce the above copyright 13 1.32.2.2 skrll * notice, this list of conditions and the following disclaimer in the 14 1.32.2.2 skrll * documentation and/or other materials provided with the distribution. 15 1.32.2.2 skrll * 3. The name of the author may not be used to endorse or promote products 16 1.32.2.2 skrll * derived from this software without specific prior written permission. 17 1.32.2.2 skrll * 18 1.32.2.2 skrll * Alternatively, this software may be distributed under the terms of the 19 1.32.2.2 skrll * GNU General Public License ("GPL") version 2 as published by the Free 20 1.32.2.2 skrll * Software Foundation. 21 1.32.2.2 skrll * 22 1.32.2.2 skrll * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 23 1.32.2.2 skrll * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 24 1.32.2.2 skrll * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 25 1.32.2.2 skrll * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 26 1.32.2.2 skrll * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 27 1.32.2.2 skrll * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 28 1.32.2.2 skrll * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 29 1.32.2.2 skrll * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 30 1.32.2.2 skrll * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 31 1.32.2.2 skrll * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 1.32.2.2 skrll */ 33 1.32.2.2 skrll 34 1.32.2.2 skrll #include <sys/cdefs.h> 35 1.32.2.2 skrll #ifdef __FreeBSD__ 36 1.32.2.2 skrll __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_node.c,v 1.22 2004/04/05 04:15:55 sam Exp $"); 37 1.32.2.2 skrll #else 38 1.32.2.2 skrll __KERNEL_RCSID(0, "$NetBSD: ieee80211_node.c,v 1.32.2.2 2004/08/03 10:54:21 skrll Exp $"); 39 1.32.2.2 skrll #endif 40 1.32.2.2 skrll 41 1.32.2.2 skrll #include "opt_inet.h" 42 1.32.2.2 skrll 43 1.32.2.2 skrll #include <sys/param.h> 44 1.32.2.2 skrll #include <sys/systm.h> 45 1.32.2.2 skrll #include <sys/mbuf.h> 46 1.32.2.2 skrll #include <sys/malloc.h> 47 1.32.2.2 skrll #include <sys/kernel.h> 48 1.32.2.2 skrll #include <sys/socket.h> 49 1.32.2.2 skrll #include <sys/sockio.h> 50 1.32.2.2 skrll #include <sys/endian.h> 51 1.32.2.2 skrll #include <sys/errno.h> 52 1.32.2.2 skrll #ifdef __FreeBSD__ 53 1.32.2.2 skrll #include <sys/bus.h> 54 1.32.2.2 skrll #endif 55 1.32.2.2 skrll #include <sys/proc.h> 56 1.32.2.2 skrll #include <sys/sysctl.h> 57 1.32.2.2 skrll 58 1.32.2.2 skrll #ifdef __FreeBSD__ 59 1.32.2.2 skrll #include <machine/atomic.h> 60 1.32.2.2 skrll #endif 61 1.32.2.2 skrll 62 1.32.2.2 skrll #include <net/if.h> 63 1.32.2.2 skrll #include <net/if_dl.h> 64 1.32.2.2 skrll #include <net/if_media.h> 65 1.32.2.2 skrll #include <net/if_arp.h> 66 1.32.2.2 skrll #ifdef __FreeBSD__ 67 1.32.2.2 skrll #include <net/ethernet.h> 68 1.32.2.2 skrll #else 69 1.32.2.2 skrll #include <net/if_ether.h> 70 1.32.2.2 skrll #endif 71 1.32.2.2 skrll #include <net/if_llc.h> 72 1.32.2.2 skrll 73 1.32.2.2 skrll #include <net80211/ieee80211_var.h> 74 1.32.2.2 skrll #include <net80211/ieee80211_compat.h> 75 1.32.2.2 skrll 76 1.32.2.2 skrll #include <net/bpf.h> 77 1.32.2.2 skrll 78 1.32.2.2 skrll #ifdef INET 79 1.32.2.2 skrll #include <netinet/in.h> 80 1.32.2.2 skrll #ifdef __FreeBSD__ 81 1.32.2.2 skrll #include <netinet/if_ether.h> 82 1.32.2.2 skrll #else 83 1.32.2.2 skrll #include <net/if_ether.h> 84 1.32.2.2 skrll #endif 85 1.32.2.2 skrll #endif 86 1.32.2.2 skrll 87 1.32.2.2 skrll static struct ieee80211_node *ieee80211_node_alloc(struct ieee80211com *); 88 1.32.2.2 skrll static void ieee80211_node_free(struct ieee80211com *, struct ieee80211_node *); 89 1.32.2.2 skrll static void ieee80211_node_copy(struct ieee80211com *, 90 1.32.2.2 skrll struct ieee80211_node *, const struct ieee80211_node *); 91 1.32.2.2 skrll static u_int8_t ieee80211_node_getrssi(struct ieee80211com *, 92 1.32.2.2 skrll struct ieee80211_node *); 93 1.32.2.2 skrll 94 1.32.2.2 skrll static void ieee80211_setup_node(struct ieee80211com *ic, 95 1.32.2.2 skrll struct ieee80211_node *ni, u_int8_t *macaddr); 96 1.32.2.2 skrll static void _ieee80211_free_node(struct ieee80211com *, 97 1.32.2.2 skrll struct ieee80211_node *); 98 1.32.2.2 skrll 99 1.32.2.2 skrll MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state"); 100 1.32.2.2 skrll 101 1.32.2.2 skrll void 102 1.32.2.2 skrll ieee80211_node_attach(struct ieee80211com *ic) 103 1.32.2.2 skrll { 104 1.32.2.2 skrll 105 1.32.2.2 skrll /* XXX need unit */ 106 1.32.2.2 skrll IEEE80211_NODE_LOCK_INIT(ic, ic->ic_ifp->if_xname); 107 1.32.2.2 skrll TAILQ_INIT(&ic->ic_node); 108 1.32.2.2 skrll ic->ic_node_alloc = ieee80211_node_alloc; 109 1.32.2.2 skrll ic->ic_node_free = ieee80211_node_free; 110 1.32.2.2 skrll ic->ic_node_copy = ieee80211_node_copy; 111 1.32.2.2 skrll ic->ic_node_getrssi = ieee80211_node_getrssi; 112 1.32.2.2 skrll ic->ic_scangen = 1; 113 1.32.2.2 skrll 114 1.32.2.2 skrll if (ic->ic_max_aid == 0) 115 1.32.2.2 skrll ic->ic_max_aid = IEEE80211_AID_DEF; 116 1.32.2.2 skrll else if (ic->ic_max_aid > IEEE80211_AID_MAX) 117 1.32.2.2 skrll ic->ic_max_aid = IEEE80211_AID_MAX; 118 1.32.2.2 skrll MALLOC(ic->ic_aid_bitmap, u_int32_t *, 119 1.32.2.2 skrll howmany(ic->ic_max_aid, 32) * sizeof(u_int32_t), 120 1.32.2.2 skrll M_DEVBUF, M_NOWAIT | M_ZERO); 121 1.32.2.2 skrll if (ic->ic_aid_bitmap == NULL) { 122 1.32.2.2 skrll /* XXX no way to recover */ 123 1.32.2.2 skrll printf("%s: no memory for AID bitmap!\n", __func__); 124 1.32.2.2 skrll ic->ic_max_aid = 0; 125 1.32.2.2 skrll } 126 1.32.2.2 skrll } 127 1.32.2.2 skrll 128 1.32.2.2 skrll void 129 1.32.2.2 skrll ieee80211_node_lateattach(struct ieee80211com *ic) 130 1.32.2.2 skrll { 131 1.32.2.2 skrll struct ieee80211_node *ni; 132 1.32.2.2 skrll 133 1.32.2.2 skrll ni = (*ic->ic_node_alloc)(ic); 134 1.32.2.2 skrll IASSERT(ni != NULL, ("unable to setup inital BSS node")); 135 1.32.2.2 skrll ni->ni_chan = IEEE80211_CHAN_ANYC; 136 1.32.2.2 skrll ic->ic_bss = ni; 137 1.32.2.2 skrll ic->ic_txpower = IEEE80211_TXPOWER_MAX; 138 1.32.2.2 skrll } 139 1.32.2.2 skrll 140 1.32.2.2 skrll void 141 1.32.2.2 skrll ieee80211_node_detach(struct ieee80211com *ic) 142 1.32.2.2 skrll { 143 1.32.2.2 skrll 144 1.32.2.2 skrll if (ic->ic_bss != NULL) { 145 1.32.2.2 skrll (*ic->ic_node_free)(ic, ic->ic_bss); 146 1.32.2.2 skrll ic->ic_bss = NULL; 147 1.32.2.2 skrll } 148 1.32.2.2 skrll ieee80211_free_allnodes(ic); 149 1.32.2.2 skrll IEEE80211_NODE_LOCK_DESTROY(ic); 150 1.32.2.2 skrll if (ic->ic_aid_bitmap != NULL) 151 1.32.2.2 skrll FREE(ic->ic_aid_bitmap, M_DEVBUF); 152 1.32.2.2 skrll } 153 1.32.2.2 skrll 154 1.32.2.2 skrll /* 155 1.32.2.2 skrll * AP scanning support. 156 1.32.2.2 skrll */ 157 1.32.2.2 skrll 158 1.32.2.2 skrll /* 159 1.32.2.2 skrll * Initialize the active channel set based on the set 160 1.32.2.2 skrll * of available channels and the current PHY mode. 161 1.32.2.2 skrll */ 162 1.32.2.2 skrll static void 163 1.32.2.2 skrll ieee80211_reset_scan(struct ieee80211com *ic) 164 1.32.2.2 skrll { 165 1.32.2.2 skrll 166 1.32.2.2 skrll memcpy(ic->ic_chan_scan, ic->ic_chan_active, 167 1.32.2.2 skrll sizeof(ic->ic_chan_active)); 168 1.32.2.2 skrll /* NB: hack, setup so next_scan starts with the first channel */ 169 1.32.2.2 skrll if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC) 170 1.32.2.2 skrll ic->ic_bss->ni_chan = &ic->ic_channels[IEEE80211_CHAN_MAX]; 171 1.32.2.2 skrll } 172 1.32.2.2 skrll 173 1.32.2.2 skrll /* 174 1.32.2.2 skrll * Begin an active scan. 175 1.32.2.2 skrll */ 176 1.32.2.2 skrll void 177 1.32.2.2 skrll ieee80211_begin_scan(struct ieee80211com *ic) 178 1.32.2.2 skrll { 179 1.32.2.2 skrll 180 1.32.2.2 skrll /* 181 1.32.2.2 skrll * In all but hostap mode scanning starts off in 182 1.32.2.2 skrll * an active mode before switching to passive. 183 1.32.2.2 skrll */ 184 1.32.2.2 skrll if (ic->ic_opmode != IEEE80211_M_HOSTAP) { 185 1.32.2.2 skrll ic->ic_flags |= IEEE80211_F_ASCAN; 186 1.32.2.2 skrll ic->ic_stats.is_scan_active++; 187 1.32.2.2 skrll } else 188 1.32.2.2 skrll ic->ic_stats.is_scan_passive++; 189 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("begin %s scan\n", 190 1.32.2.2 skrll (ic->ic_flags & IEEE80211_F_ASCAN) ? "active" : "passive")); 191 1.32.2.2 skrll /* 192 1.32.2.2 skrll * Clear scan state and flush any previously seen 193 1.32.2.2 skrll * AP's. Note that the latter assumes we don't act 194 1.32.2.2 skrll * as both an AP and a station, otherwise we'll 195 1.32.2.2 skrll * potentially flush state of stations associated 196 1.32.2.2 skrll * with us. 197 1.32.2.2 skrll */ 198 1.32.2.2 skrll ieee80211_reset_scan(ic); 199 1.32.2.2 skrll ieee80211_free_allnodes(ic); 200 1.32.2.2 skrll 201 1.32.2.2 skrll /* Scan the next channel. */ 202 1.32.2.2 skrll ieee80211_next_scan(ic); 203 1.32.2.2 skrll } 204 1.32.2.2 skrll 205 1.32.2.2 skrll /* 206 1.32.2.2 skrll * Switch to the next channel marked for scanning. 207 1.32.2.2 skrll */ 208 1.32.2.2 skrll void 209 1.32.2.2 skrll ieee80211_next_scan(struct ieee80211com *ic) 210 1.32.2.2 skrll { 211 1.32.2.2 skrll struct ieee80211_channel *chan; 212 1.32.2.2 skrll 213 1.32.2.2 skrll chan = ic->ic_bss->ni_chan; 214 1.32.2.2 skrll for (;;) { 215 1.32.2.2 skrll if (++chan > &ic->ic_channels[IEEE80211_CHAN_MAX]) 216 1.32.2.2 skrll chan = &ic->ic_channels[0]; 217 1.32.2.2 skrll if (isset(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan))) { 218 1.32.2.2 skrll /* 219 1.32.2.2 skrll * Honor channels marked passive-only 220 1.32.2.2 skrll * during an active scan. 221 1.32.2.2 skrll */ 222 1.32.2.2 skrll if ((ic->ic_flags & IEEE80211_F_ASCAN) == 0 || 223 1.32.2.2 skrll (chan->ic_flags & IEEE80211_CHAN_PASSIVE) == 0) 224 1.32.2.2 skrll break; 225 1.32.2.2 skrll } 226 1.32.2.2 skrll if (chan == ic->ic_bss->ni_chan) { 227 1.32.2.2 skrll ieee80211_end_scan(ic); 228 1.32.2.2 skrll return; 229 1.32.2.2 skrll } 230 1.32.2.2 skrll } 231 1.32.2.2 skrll clrbit(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan)); 232 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 233 1.32.2.2 skrll ("%s: chan %d->%d\n", __func__, 234 1.32.2.2 skrll ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan), 235 1.32.2.2 skrll ieee80211_chan2ieee(ic, chan))); 236 1.32.2.2 skrll ic->ic_bss->ni_chan = chan; 237 1.32.2.2 skrll ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 238 1.32.2.2 skrll } 239 1.32.2.2 skrll 240 1.32.2.2 skrll void 241 1.32.2.2 skrll ieee80211_create_ibss(struct ieee80211com* ic, struct ieee80211_channel *chan) 242 1.32.2.2 skrll { 243 1.32.2.2 skrll struct ieee80211_node *ni; 244 1.32.2.2 skrll 245 1.32.2.2 skrll ni = ic->ic_bss; 246 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("creating ibss\n")); 247 1.32.2.2 skrll ic->ic_flags |= IEEE80211_F_SIBSS; 248 1.32.2.2 skrll ni->ni_chan = chan; 249 1.32.2.2 skrll ni->ni_rates = ic->ic_sup_rates[ieee80211_chan2mode(ic, ni->ni_chan)]; 250 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_macaddr, ic->ic_myaddr); 251 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_myaddr); 252 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 253 1.32.2.2 skrll if ((ic->ic_flags & IEEE80211_F_DESBSSID) != 0) 254 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_des_bssid); 255 1.32.2.2 skrll else 256 1.32.2.2 skrll ni->ni_bssid[0] |= 0x02; /* local bit for IBSS */ 257 1.32.2.2 skrll } 258 1.32.2.2 skrll ni->ni_esslen = ic->ic_des_esslen; 259 1.32.2.2 skrll memcpy(ni->ni_essid, ic->ic_des_essid, ni->ni_esslen); 260 1.32.2.2 skrll ni->ni_rssi = 0; 261 1.32.2.2 skrll ni->ni_rstamp = 0; 262 1.32.2.2 skrll memset(ni->ni_tstamp, 0, sizeof(ni->ni_tstamp)); 263 1.32.2.2 skrll ni->ni_intval = ic->ic_lintval; 264 1.32.2.2 skrll ni->ni_capinfo = IEEE80211_CAPINFO_IBSS; 265 1.32.2.2 skrll if (ic->ic_flags & IEEE80211_F_PRIVACY) 266 1.32.2.2 skrll ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY; 267 1.32.2.2 skrll if (ic->ic_phytype == IEEE80211_T_FH) { 268 1.32.2.2 skrll ni->ni_fhdwell = 200; /* XXX */ 269 1.32.2.2 skrll ni->ni_fhindex = 1; 270 1.32.2.2 skrll } 271 1.32.2.2 skrll ieee80211_new_state(ic, IEEE80211_S_RUN, -1); 272 1.32.2.2 skrll } 273 1.32.2.2 skrll 274 1.32.2.2 skrll int 275 1.32.2.2 skrll ieee80211_match_bss(struct ieee80211com *ic, struct ieee80211_node *ni) 276 1.32.2.2 skrll { 277 1.32.2.2 skrll u_int8_t rate; 278 1.32.2.2 skrll int fail; 279 1.32.2.2 skrll 280 1.32.2.2 skrll fail = 0; 281 1.32.2.2 skrll if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 282 1.32.2.2 skrll fail |= 0x01; 283 1.32.2.2 skrll if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 284 1.32.2.2 skrll ni->ni_chan != ic->ic_des_chan) 285 1.32.2.2 skrll fail |= 0x01; 286 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 287 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 288 1.32.2.2 skrll fail |= 0x02; 289 1.32.2.2 skrll } else { 290 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 291 1.32.2.2 skrll fail |= 0x02; 292 1.32.2.2 skrll } 293 1.32.2.2 skrll if (ic->ic_flags & IEEE80211_F_PRIVACY) { 294 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 295 1.32.2.2 skrll fail |= 0x04; 296 1.32.2.2 skrll } else { 297 1.32.2.2 skrll /* XXX does this mean privacy is supported or required? */ 298 1.32.2.2 skrll if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 299 1.32.2.2 skrll fail |= 0x04; 300 1.32.2.2 skrll } 301 1.32.2.2 skrll rate = ieee80211_fix_rate(ic, ni, IEEE80211_F_DONEGO); 302 1.32.2.2 skrll if (rate & IEEE80211_RATE_BASIC) 303 1.32.2.2 skrll fail |= 0x08; 304 1.32.2.2 skrll if (ic->ic_des_esslen != 0 && 305 1.32.2.2 skrll (ni->ni_esslen != ic->ic_des_esslen || 306 1.32.2.2 skrll memcmp(ni->ni_essid, ic->ic_des_essid, ic->ic_des_esslen) != 0)) 307 1.32.2.2 skrll fail |= 0x10; 308 1.32.2.2 skrll if ((ic->ic_flags & IEEE80211_F_DESBSSID) && 309 1.32.2.2 skrll !IEEE80211_ADDR_EQ(ic->ic_des_bssid, ni->ni_bssid)) 310 1.32.2.2 skrll fail |= 0x20; 311 1.32.2.2 skrll #ifdef IEEE80211_DEBUG 312 1.32.2.2 skrll if (ic->ic_if.if_flags & IFF_DEBUG) { 313 1.32.2.2 skrll printf(" %c %s", fail ? '-' : '+', 314 1.32.2.2 skrll ether_sprintf(ni->ni_macaddr)); 315 1.32.2.2 skrll printf(" %s%c", ether_sprintf(ni->ni_bssid), 316 1.32.2.2 skrll fail & 0x20 ? '!' : ' '); 317 1.32.2.2 skrll printf(" %3d%c", ieee80211_chan2ieee(ic, ni->ni_chan), 318 1.32.2.2 skrll fail & 0x01 ? '!' : ' '); 319 1.32.2.2 skrll printf(" %+4d", ni->ni_rssi); 320 1.32.2.2 skrll printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2, 321 1.32.2.2 skrll fail & 0x08 ? '!' : ' '); 322 1.32.2.2 skrll printf(" %4s%c", 323 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" : 324 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" : 325 1.32.2.2 skrll "????", 326 1.32.2.2 skrll fail & 0x02 ? '!' : ' '); 327 1.32.2.2 skrll printf(" %3s%c ", 328 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ? 329 1.32.2.2 skrll "wep" : "no", 330 1.32.2.2 skrll fail & 0x04 ? '!' : ' '); 331 1.32.2.2 skrll ieee80211_print_essid(ni->ni_essid, ni->ni_esslen); 332 1.32.2.2 skrll printf("%s\n", fail & 0x10 ? "!" : ""); 333 1.32.2.2 skrll } 334 1.32.2.2 skrll #endif 335 1.32.2.2 skrll return fail; 336 1.32.2.2 skrll } 337 1.32.2.2 skrll 338 1.32.2.2 skrll /* 339 1.32.2.2 skrll * Complete a scan of potential channels. 340 1.32.2.2 skrll */ 341 1.32.2.2 skrll void 342 1.32.2.2 skrll ieee80211_end_scan(struct ieee80211com *ic) 343 1.32.2.2 skrll { 344 1.32.2.2 skrll struct ieee80211_node *ni, *nextbs, *selbs; 345 1.32.2.2 skrll int i, fail; 346 1.32.2.2 skrll 347 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("end %s scan\n", 348 1.32.2.2 skrll (ic->ic_flags & IEEE80211_F_ASCAN) ? "active" : "passive")); 349 1.32.2.2 skrll 350 1.32.2.2 skrll ic->ic_flags &= ~IEEE80211_F_ASCAN; 351 1.32.2.2 skrll ni = TAILQ_FIRST(&ic->ic_node); 352 1.32.2.2 skrll 353 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 354 1.32.2.2 skrll /* XXX off stack? */ 355 1.32.2.2 skrll u_char occupied[roundup(IEEE80211_CHAN_MAX, NBBY)]; 356 1.32.2.2 skrll /* 357 1.32.2.2 skrll * The passive scan to look for existing AP's completed, 358 1.32.2.2 skrll * select a channel to camp on. Identify the channels 359 1.32.2.2 skrll * that already have one or more AP's and try to locate 360 1.32.2.2 skrll * an unnoccupied one. If that fails, pick a random 361 1.32.2.2 skrll * channel from the active set. 362 1.32.2.2 skrll */ 363 1.32.2.2 skrll for (; ni != NULL; ni = nextbs) { 364 1.32.2.2 skrll ieee80211_ref_node(ni); 365 1.32.2.2 skrll nextbs = TAILQ_NEXT(ni, ni_list); 366 1.32.2.2 skrll setbit(occupied, ieee80211_chan2ieee(ic, ni->ni_chan)); 367 1.32.2.2 skrll ieee80211_free_node(ic, ni); 368 1.32.2.2 skrll } 369 1.32.2.2 skrll for (i = 0; i < IEEE80211_CHAN_MAX; i++) 370 1.32.2.2 skrll if (isset(ic->ic_chan_active, i) && isclr(occupied, i)) 371 1.32.2.2 skrll break; 372 1.32.2.2 skrll if (i == IEEE80211_CHAN_MAX) { 373 1.32.2.2 skrll fail = arc4random() & 3; /* random 0-3 */ 374 1.32.2.2 skrll for (i = 0; i < IEEE80211_CHAN_MAX; i++) 375 1.32.2.2 skrll if (isset(ic->ic_chan_active, i) && fail-- == 0) 376 1.32.2.2 skrll break; 377 1.32.2.2 skrll } 378 1.32.2.2 skrll ieee80211_create_ibss(ic, &ic->ic_channels[i]); 379 1.32.2.2 skrll return; 380 1.32.2.2 skrll } 381 1.32.2.2 skrll if (ni == NULL) { 382 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 383 1.32.2.2 skrll ("%s: no scan candidate\n", __func__)); 384 1.32.2.2 skrll notfound: 385 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS && 386 1.32.2.2 skrll (ic->ic_flags & IEEE80211_F_IBSSON) && 387 1.32.2.2 skrll ic->ic_des_esslen != 0) { 388 1.32.2.2 skrll ieee80211_create_ibss(ic, ic->ic_ibss_chan); 389 1.32.2.2 skrll return; 390 1.32.2.2 skrll } 391 1.32.2.2 skrll /* 392 1.32.2.2 skrll * Reset the list of channels to scan and start again. 393 1.32.2.2 skrll */ 394 1.32.2.2 skrll ieee80211_reset_scan(ic); 395 1.32.2.2 skrll ieee80211_next_scan(ic); 396 1.32.2.2 skrll return; 397 1.32.2.2 skrll } 398 1.32.2.2 skrll selbs = NULL; 399 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 400 1.32.2.2 skrll ("\tmacaddr bssid chan rssi rate flag wep essid\n")); 401 1.32.2.2 skrll for (; ni != NULL; ni = nextbs) { 402 1.32.2.2 skrll ieee80211_ref_node(ni); 403 1.32.2.2 skrll nextbs = TAILQ_NEXT(ni, ni_list); 404 1.32.2.2 skrll if (ni->ni_fails) { 405 1.32.2.2 skrll /* 406 1.32.2.2 skrll * The configuration of the access points may change 407 1.32.2.2 skrll * during my scan. So delete the entry for the AP 408 1.32.2.2 skrll * and retry to associate if there is another beacon. 409 1.32.2.2 skrll */ 410 1.32.2.2 skrll if (ni->ni_fails++ > 2) 411 1.32.2.2 skrll ieee80211_free_node(ic, ni); 412 1.32.2.2 skrll continue; 413 1.32.2.2 skrll } 414 1.32.2.2 skrll if (ieee80211_match_bss(ic, ni) == 0) { 415 1.32.2.2 skrll if (selbs == NULL) 416 1.32.2.2 skrll selbs = ni; 417 1.32.2.2 skrll else if (ni->ni_rssi > selbs->ni_rssi) { 418 1.32.2.2 skrll ieee80211_unref_node(&selbs); 419 1.32.2.2 skrll selbs = ni; 420 1.32.2.2 skrll } else 421 1.32.2.2 skrll ieee80211_unref_node(&ni); 422 1.32.2.2 skrll } else { 423 1.32.2.2 skrll ieee80211_unref_node(&ni); 424 1.32.2.2 skrll } 425 1.32.2.2 skrll } 426 1.32.2.2 skrll if (selbs == NULL) 427 1.32.2.2 skrll goto notfound; 428 1.32.2.2 skrll (*ic->ic_node_copy)(ic, ic->ic_bss, selbs); 429 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 430 1.32.2.2 skrll ieee80211_fix_rate(ic, ic->ic_bss, IEEE80211_F_DOFRATE | 431 1.32.2.2 skrll IEEE80211_F_DONEGO | IEEE80211_F_DODEL); 432 1.32.2.2 skrll if (ic->ic_bss->ni_rates.rs_nrates == 0) { 433 1.32.2.2 skrll selbs->ni_fails++; 434 1.32.2.2 skrll ieee80211_unref_node(&selbs); 435 1.32.2.2 skrll goto notfound; 436 1.32.2.2 skrll } 437 1.32.2.2 skrll ieee80211_unref_node(&selbs); 438 1.32.2.2 skrll /* 439 1.32.2.2 skrll * Discard scan set; the nodes have a refcnt of zero 440 1.32.2.2 skrll * and have not asked the driver to setup private 441 1.32.2.2 skrll * node state. Let them be repopulated on demand either 442 1.32.2.2 skrll * through transmission (ieee80211_find_txnode) or receipt 443 1.32.2.2 skrll * of a probe response (to be added). 444 1.32.2.2 skrll */ 445 1.32.2.2 skrll ieee80211_free_allnodes(ic); 446 1.32.2.2 skrll ieee80211_new_state(ic, IEEE80211_S_RUN, -1); 447 1.32.2.2 skrll } else { 448 1.32.2.2 skrll ieee80211_unref_node(&selbs); 449 1.32.2.2 skrll ieee80211_new_state(ic, IEEE80211_S_AUTH, -1); 450 1.32.2.2 skrll } 451 1.32.2.2 skrll } 452 1.32.2.2 skrll 453 1.32.2.2 skrll int 454 1.32.2.2 skrll ieee80211_get_rate(struct ieee80211com *ic) 455 1.32.2.2 skrll { 456 1.32.2.2 skrll u_int8_t (*rates)[IEEE80211_RATE_MAXSIZE]; 457 1.32.2.2 skrll int rate; 458 1.32.2.2 skrll 459 1.32.2.2 skrll rates = &ic->ic_bss->ni_rates.rs_rates; 460 1.32.2.2 skrll 461 1.32.2.2 skrll if (ic->ic_fixed_rate != -1) 462 1.32.2.2 skrll rate = (*rates)[ic->ic_fixed_rate]; 463 1.32.2.2 skrll else if (ic->ic_state == IEEE80211_S_RUN) 464 1.32.2.2 skrll rate = (*rates)[ic->ic_bss->ni_txrate]; 465 1.32.2.2 skrll else 466 1.32.2.2 skrll rate = 0; 467 1.32.2.2 skrll 468 1.32.2.2 skrll return rate & IEEE80211_RATE_VAL; 469 1.32.2.2 skrll } 470 1.32.2.2 skrll 471 1.32.2.2 skrll static struct ieee80211_node * 472 1.32.2.2 skrll ieee80211_node_alloc(struct ieee80211com *ic) 473 1.32.2.2 skrll { 474 1.32.2.2 skrll struct ieee80211_node *ni; 475 1.32.2.2 skrll MALLOC(ni, struct ieee80211_node *, sizeof(struct ieee80211_node), 476 1.32.2.2 skrll M_80211_NODE, M_NOWAIT | M_ZERO); 477 1.32.2.2 skrll return ni; 478 1.32.2.2 skrll } 479 1.32.2.2 skrll 480 1.32.2.2 skrll static void 481 1.32.2.2 skrll node_cleanup(struct ieee80211com *ic, struct ieee80211_node *ni) 482 1.32.2.2 skrll { 483 1.32.2.2 skrll 484 1.32.2.2 skrll if (ni->ni_challenge != NULL) { 485 1.32.2.2 skrll FREE(ni->ni_challenge, M_DEVBUF); 486 1.32.2.2 skrll ni->ni_challenge = NULL; 487 1.32.2.2 skrll } 488 1.32.2.2 skrll } 489 1.32.2.2 skrll 490 1.32.2.2 skrll static void 491 1.32.2.2 skrll ieee80211_node_free(struct ieee80211com *ic, struct ieee80211_node *ni) 492 1.32.2.2 skrll { 493 1.32.2.2 skrll node_cleanup(ic, ni); 494 1.32.2.2 skrll FREE(ni, M_80211_NODE); 495 1.32.2.2 skrll } 496 1.32.2.2 skrll 497 1.32.2.2 skrll static void 498 1.32.2.2 skrll ieee80211_node_copy(struct ieee80211com *ic, 499 1.32.2.2 skrll struct ieee80211_node *dst, const struct ieee80211_node *src) 500 1.32.2.2 skrll { 501 1.32.2.2 skrll node_cleanup(ic, dst); 502 1.32.2.2 skrll *dst = *src; 503 1.32.2.2 skrll dst->ni_challenge = NULL; 504 1.32.2.2 skrll } 505 1.32.2.2 skrll 506 1.32.2.2 skrll static u_int8_t 507 1.32.2.2 skrll ieee80211_node_getrssi(struct ieee80211com *ic, struct ieee80211_node *ni) 508 1.32.2.2 skrll { 509 1.32.2.2 skrll return ni->ni_rssi; 510 1.32.2.2 skrll } 511 1.32.2.2 skrll 512 1.32.2.2 skrll static void 513 1.32.2.2 skrll ieee80211_setup_node(struct ieee80211com *ic, 514 1.32.2.2 skrll struct ieee80211_node *ni, u_int8_t *macaddr) 515 1.32.2.2 skrll { 516 1.32.2.2 skrll int hash; 517 1.32.2.2 skrll 518 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 519 1.32.2.2 skrll ("%s %s\n", __func__, ether_sprintf(macaddr))); 520 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 521 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 522 1.32.2.2 skrll ni->ni_refcnt = 1; /* mark referenced */ 523 1.32.2.2 skrll 524 1.32.2.2 skrll IEEE80211_NODE_LOCK_BH(ic); 525 1.32.2.2 skrll /* 526 1.32.2.2 skrll * Note we don't enable the inactive timer when acting 527 1.32.2.2 skrll * as a station. Nodes created in this mode represent 528 1.32.2.2 skrll * AP's identified while scanning. If we time them out 529 1.32.2.2 skrll * then several things happen: we can't return the data 530 1.32.2.2 skrll * to users to show the list of AP's we encountered, and 531 1.32.2.2 skrll * more importantly, we'll incorrectly deauthenticate 532 1.32.2.2 skrll * ourself because the inactivity timer will kick us off. 533 1.32.2.2 skrll */ 534 1.32.2.2 skrll if (ic->ic_opmode != IEEE80211_M_STA && 535 1.32.2.2 skrll TAILQ_EMPTY(&ic->ic_node)) 536 1.32.2.2 skrll ic->ic_inact_timer = IEEE80211_INACT_WAIT; 537 1.32.2.2 skrll TAILQ_INSERT_TAIL(&ic->ic_node, ni, ni_list); 538 1.32.2.2 skrll LIST_INSERT_HEAD(&ic->ic_hash[hash], ni, ni_hash); 539 1.32.2.2 skrll IEEE80211_NODE_UNLOCK_BH(ic); 540 1.32.2.2 skrll } 541 1.32.2.2 skrll 542 1.32.2.2 skrll struct ieee80211_node * 543 1.32.2.2 skrll ieee80211_alloc_node(struct ieee80211com *ic, u_int8_t *macaddr) 544 1.32.2.2 skrll { 545 1.32.2.2 skrll struct ieee80211_node *ni = (*ic->ic_node_alloc)(ic); 546 1.32.2.2 skrll if (ni != NULL) 547 1.32.2.2 skrll ieee80211_setup_node(ic, ni, macaddr); 548 1.32.2.2 skrll else 549 1.32.2.2 skrll ic->ic_stats.is_rx_nodealloc++; 550 1.32.2.2 skrll return ni; 551 1.32.2.2 skrll } 552 1.32.2.2 skrll 553 1.32.2.2 skrll struct ieee80211_node * 554 1.32.2.2 skrll ieee80211_dup_bss(struct ieee80211com *ic, u_int8_t *macaddr) 555 1.32.2.2 skrll { 556 1.32.2.2 skrll struct ieee80211_node *ni = (*ic->ic_node_alloc)(ic); 557 1.32.2.2 skrll if (ni != NULL) { 558 1.32.2.2 skrll ieee80211_setup_node(ic, ni, macaddr); 559 1.32.2.2 skrll /* 560 1.32.2.2 skrll * Inherit from ic_bss. 561 1.32.2.2 skrll */ 562 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_bss->ni_bssid); 563 1.32.2.2 skrll ni->ni_chan = ic->ic_bss->ni_chan; 564 1.32.2.2 skrll } else 565 1.32.2.2 skrll ic->ic_stats.is_rx_nodealloc++; 566 1.32.2.2 skrll return ni; 567 1.32.2.2 skrll } 568 1.32.2.2 skrll 569 1.32.2.2 skrll static struct ieee80211_node * 570 1.32.2.2 skrll _ieee80211_find_node(struct ieee80211com *ic, u_int8_t *macaddr) 571 1.32.2.2 skrll { 572 1.32.2.2 skrll struct ieee80211_node *ni; 573 1.32.2.2 skrll int hash; 574 1.32.2.2 skrll 575 1.32.2.2 skrll IEEE80211_NODE_LOCK_ASSERT(ic); 576 1.32.2.2 skrll 577 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 578 1.32.2.2 skrll LIST_FOREACH(ni, &ic->ic_hash[hash], ni_hash) { 579 1.32.2.2 skrll if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 580 1.32.2.2 skrll ieee80211_node_incref(ni); /* mark referenced */ 581 1.32.2.2 skrll return ni; 582 1.32.2.2 skrll } 583 1.32.2.2 skrll } 584 1.32.2.2 skrll return NULL; 585 1.32.2.2 skrll } 586 1.32.2.2 skrll 587 1.32.2.2 skrll struct ieee80211_node * 588 1.32.2.2 skrll ieee80211_find_node(struct ieee80211com *ic, u_int8_t *macaddr) 589 1.32.2.2 skrll { 590 1.32.2.2 skrll struct ieee80211_node *ni; 591 1.32.2.2 skrll 592 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 593 1.32.2.2 skrll ni = _ieee80211_find_node(ic, macaddr); 594 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 595 1.32.2.2 skrll return ni; 596 1.32.2.2 skrll } 597 1.32.2.2 skrll 598 1.32.2.2 skrll /* 599 1.32.2.2 skrll * Return a reference to the appropriate node for sending 600 1.32.2.2 skrll * a data frame. This handles node discovery in adhoc networks. 601 1.32.2.2 skrll */ 602 1.32.2.2 skrll struct ieee80211_node * 603 1.32.2.2 skrll ieee80211_find_txnode(struct ieee80211com *ic, u_int8_t *macaddr) 604 1.32.2.2 skrll { 605 1.32.2.2 skrll struct ieee80211_node *ni; 606 1.32.2.2 skrll 607 1.32.2.2 skrll /* 608 1.32.2.2 skrll * The destination address should be in the node table 609 1.32.2.2 skrll * unless we are operating in station mode or this is a 610 1.32.2.2 skrll * multicast/broadcast frame. 611 1.32.2.2 skrll */ 612 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_STA || IEEE80211_IS_MULTICAST(macaddr)) 613 1.32.2.2 skrll return ic->ic_bss; 614 1.32.2.2 skrll 615 1.32.2.2 skrll /* XXX can't hold lock across dup_bss 'cuz of recursive locking */ 616 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 617 1.32.2.2 skrll ni = _ieee80211_find_node(ic, macaddr); 618 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 619 1.32.2.2 skrll if (ni == NULL && 620 1.32.2.2 skrll (ic->ic_opmode == IEEE80211_M_IBSS || 621 1.32.2.2 skrll ic->ic_opmode == IEEE80211_M_AHDEMO)) { 622 1.32.2.2 skrll /* 623 1.32.2.2 skrll * Fake up a node; this handles node discovery in 624 1.32.2.2 skrll * adhoc mode. Note that for the driver's benefit 625 1.32.2.2 skrll * we we treat this like an association so the driver 626 1.32.2.2 skrll * has an opportunity to setup it's private state. 627 1.32.2.2 skrll * 628 1.32.2.2 skrll * XXX need better way to handle this; issue probe 629 1.32.2.2 skrll * request so we can deduce rate set, etc. 630 1.32.2.2 skrll */ 631 1.32.2.2 skrll ni = ieee80211_dup_bss(ic, macaddr); 632 1.32.2.2 skrll if (ni != NULL) { 633 1.32.2.2 skrll /* XXX no rate negotiation; just dup */ 634 1.32.2.2 skrll ni->ni_rates = ic->ic_bss->ni_rates; 635 1.32.2.2 skrll if (ic->ic_newassoc) 636 1.32.2.2 skrll (*ic->ic_newassoc)(ic, ni, 1); 637 1.32.2.2 skrll } 638 1.32.2.2 skrll } 639 1.32.2.2 skrll return ni; 640 1.32.2.2 skrll } 641 1.32.2.2 skrll 642 1.32.2.2 skrll /* 643 1.32.2.2 skrll * It is usually desirable to process a Rx packet using its sender's 644 1.32.2.2 skrll * node-record instead of the BSS record. 645 1.32.2.2 skrll * 646 1.32.2.2 skrll * - AP mode: keep a node-record for every authenticated/associated 647 1.32.2.2 skrll * station *in the BSS*. For future use, we also track neighboring 648 1.32.2.2 skrll * APs, since they might belong to the same ESS. APs in the same 649 1.32.2.2 skrll * ESS may bridge packets to each other, forming a Wireless 650 1.32.2.2 skrll * Distribution System (WDS). 651 1.32.2.2 skrll * 652 1.32.2.2 skrll * - IBSS mode: keep a node-record for every station *in the BSS*. 653 1.32.2.2 skrll * Also track neighboring stations by their beacons/probe responses. 654 1.32.2.2 skrll * 655 1.32.2.2 skrll * - monitor mode: keep a node-record for every sender, regardless 656 1.32.2.2 skrll * of BSS. 657 1.32.2.2 skrll * 658 1.32.2.2 skrll * - STA mode: the only available node-record is the BSS record, 659 1.32.2.2 skrll * ic->ic_bss. 660 1.32.2.2 skrll * 661 1.32.2.2 skrll * Of all the 802.11 Control packets, only the node-records for 662 1.32.2.2 skrll * RTS packets node-record can be looked up. 663 1.32.2.2 skrll * 664 1.32.2.2 skrll * Return non-zero if the packet's node-record is kept, zero 665 1.32.2.2 skrll * otherwise. 666 1.32.2.2 skrll */ 667 1.32.2.2 skrll static __inline int 668 1.32.2.2 skrll ieee80211_needs_rxnode(struct ieee80211com *ic, struct ieee80211_frame *wh, 669 1.32.2.2 skrll u_int8_t **bssid) 670 1.32.2.2 skrll { 671 1.32.2.2 skrll struct ieee80211_node *bss = ic->ic_bss; 672 1.32.2.2 skrll int monitor, rc = 0; 673 1.32.2.2 skrll 674 1.32.2.2 skrll monitor = (ic->ic_opmode == IEEE80211_M_MONITOR); 675 1.32.2.2 skrll 676 1.32.2.2 skrll *bssid = NULL; 677 1.32.2.2 skrll 678 1.32.2.2 skrll switch (wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) { 679 1.32.2.2 skrll case IEEE80211_FC0_TYPE_CTL: 680 1.32.2.2 skrll if (!monitor) 681 1.32.2.2 skrll break; 682 1.32.2.2 skrll return (wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == 683 1.32.2.2 skrll IEEE80211_FC0_SUBTYPE_RTS; 684 1.32.2.2 skrll case IEEE80211_FC0_TYPE_MGT: 685 1.32.2.2 skrll *bssid = wh->i_addr3; 686 1.32.2.2 skrll switch (wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) { 687 1.32.2.2 skrll case IEEE80211_FC0_SUBTYPE_BEACON: 688 1.32.2.2 skrll case IEEE80211_FC0_SUBTYPE_PROBE_RESP: 689 1.32.2.2 skrll rc = 1; 690 1.32.2.2 skrll break; 691 1.32.2.2 skrll default: 692 1.32.2.2 skrll rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid); 693 1.32.2.2 skrll break; 694 1.32.2.2 skrll } 695 1.32.2.2 skrll break; 696 1.32.2.2 skrll case IEEE80211_FC0_TYPE_DATA: 697 1.32.2.2 skrll switch (wh->i_fc[1] & IEEE80211_FC1_DIR_MASK) { 698 1.32.2.2 skrll case IEEE80211_FC1_DIR_NODS: 699 1.32.2.2 skrll *bssid = wh->i_addr3; 700 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS || 701 1.32.2.2 skrll ic->ic_opmode == IEEE80211_M_AHDEMO) 702 1.32.2.2 skrll rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid); 703 1.32.2.2 skrll break; 704 1.32.2.2 skrll case IEEE80211_FC1_DIR_TODS: 705 1.32.2.2 skrll *bssid = wh->i_addr1; 706 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) 707 1.32.2.2 skrll rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid); 708 1.32.2.2 skrll break; 709 1.32.2.2 skrll case IEEE80211_FC1_DIR_FROMDS: 710 1.32.2.2 skrll case IEEE80211_FC1_DIR_DSTODS: 711 1.32.2.2 skrll *bssid = wh->i_addr2; 712 1.32.2.2 skrll rc = (ic->ic_opmode == IEEE80211_M_HOSTAP); 713 1.32.2.2 skrll break; 714 1.32.2.2 skrll } 715 1.32.2.2 skrll break; 716 1.32.2.2 skrll } 717 1.32.2.2 skrll return monitor || rc; 718 1.32.2.2 skrll } 719 1.32.2.2 skrll 720 1.32.2.2 skrll struct ieee80211_node * 721 1.32.2.2 skrll ieee80211_find_rxnode(struct ieee80211com *ic, struct ieee80211_frame *wh) 722 1.32.2.2 skrll { 723 1.32.2.2 skrll struct ieee80211_node *ni; 724 1.32.2.2 skrll const static u_int8_t zero[IEEE80211_ADDR_LEN]; 725 1.32.2.2 skrll u_int8_t *bssid; 726 1.32.2.2 skrll 727 1.32.2.2 skrll if (!ieee80211_needs_rxnode(ic, wh, &bssid)) 728 1.32.2.2 skrll return ieee80211_ref_node(ic->ic_bss); 729 1.32.2.2 skrll 730 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 731 1.32.2.2 skrll ni = _ieee80211_find_node(ic, wh->i_addr2); 732 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 733 1.32.2.2 skrll 734 1.32.2.2 skrll if (ni != NULL) 735 1.32.2.2 skrll return ni; 736 1.32.2.2 skrll 737 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) 738 1.32.2.2 skrll return ieee80211_ref_node(ic->ic_bss); 739 1.32.2.2 skrll 740 1.32.2.2 skrll /* XXX see remarks in ieee80211_find_txnode */ 741 1.32.2.2 skrll /* XXX no rate negotiation; just dup */ 742 1.32.2.2 skrll if ((ni = ieee80211_dup_bss(ic, wh->i_addr2)) == NULL) 743 1.32.2.2 skrll return ieee80211_ref_node(ic->ic_bss); 744 1.32.2.2 skrll 745 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, (bssid != NULL) ? bssid : zero); 746 1.32.2.2 skrll 747 1.32.2.2 skrll ni->ni_rates = ic->ic_bss->ni_rates; 748 1.32.2.2 skrll if (ic->ic_newassoc) 749 1.32.2.2 skrll (*ic->ic_newassoc)(ic, ni, 1); 750 1.32.2.2 skrll 751 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 752 1.32.2.2 skrll ("%s: faked-up node %p for %s\n", __func__, ni, 753 1.32.2.2 skrll ether_sprintf(wh->i_addr2))); 754 1.32.2.2 skrll 755 1.32.2.2 skrll return ieee80211_ref_node(ni); 756 1.32.2.2 skrll } 757 1.32.2.2 skrll 758 1.32.2.2 skrll /* 759 1.32.2.2 skrll * Like find but search based on the channel too. 760 1.32.2.2 skrll */ 761 1.32.2.2 skrll struct ieee80211_node * 762 1.32.2.2 skrll ieee80211_find_node_for_beacon(struct ieee80211com *ic, u_int8_t *macaddr, 763 1.32.2.2 skrll struct ieee80211_channel *chan, char *ssid) 764 1.32.2.2 skrll { 765 1.32.2.2 skrll struct ieee80211_node *ni; 766 1.32.2.2 skrll int hash; 767 1.32.2.2 skrll 768 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 769 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 770 1.32.2.2 skrll LIST_FOREACH(ni, &ic->ic_hash[hash], ni_hash) { 771 1.32.2.2 skrll if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr) && 772 1.32.2.2 skrll ni->ni_chan == chan && 773 1.32.2.2 skrll (ssid[1] == 0 || (ssid[1] == ni->ni_esslen && 774 1.32.2.2 skrll !memcmp(ssid + 2, ni->ni_essid, ssid[1])))) { 775 1.32.2.2 skrll ieee80211_node_incref(ni);/* mark referenced */ 776 1.32.2.2 skrll break; 777 1.32.2.2 skrll } 778 1.32.2.2 skrll } 779 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 780 1.32.2.2 skrll return ni; 781 1.32.2.2 skrll } 782 1.32.2.2 skrll 783 1.32.2.2 skrll static void 784 1.32.2.2 skrll _ieee80211_free_node(struct ieee80211com *ic, struct ieee80211_node *ni) 785 1.32.2.2 skrll { 786 1.32.2.2 skrll IASSERT(ni != ic->ic_bss, ("freeing bss node")); 787 1.32.2.2 skrll 788 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 789 1.32.2.2 skrll ("%s %s\n", __func__, ether_sprintf(ni->ni_macaddr))); 790 1.32.2.2 skrll IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap); 791 1.32.2.2 skrll TAILQ_REMOVE(&ic->ic_node, ni, ni_list); 792 1.32.2.2 skrll LIST_REMOVE(ni, ni_hash); 793 1.32.2.2 skrll if (!IF_IS_EMPTY(&ni->ni_savedq)) { 794 1.32.2.2 skrll IF_PURGE(&ni->ni_savedq); 795 1.32.2.2 skrll if (ic->ic_set_tim) 796 1.32.2.2 skrll (*ic->ic_set_tim)(ic, ni->ni_associd, 0); 797 1.32.2.2 skrll } 798 1.32.2.2 skrll if (TAILQ_EMPTY(&ic->ic_node)) 799 1.32.2.2 skrll ic->ic_inact_timer = 0; 800 1.32.2.2 skrll (*ic->ic_node_free)(ic, ni); 801 1.32.2.2 skrll } 802 1.32.2.2 skrll 803 1.32.2.2 skrll void 804 1.32.2.2 skrll ieee80211_free_node(struct ieee80211com *ic, struct ieee80211_node *ni) 805 1.32.2.2 skrll { 806 1.32.2.2 skrll IASSERT(ni != ic->ic_bss, ("freeing ic_bss")); 807 1.32.2.2 skrll 808 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 809 1.32.2.2 skrll ("%s %s refcnt %d\n", __func__, 810 1.32.2.2 skrll ether_sprintf(ni->ni_macaddr), ni->ni_refcnt)); 811 1.32.2.2 skrll if (ieee80211_node_decref(ni) == 0) { 812 1.32.2.2 skrll IEEE80211_NODE_LOCK_BH(ic); 813 1.32.2.2 skrll _ieee80211_free_node(ic, ni); 814 1.32.2.2 skrll IEEE80211_NODE_UNLOCK_BH(ic); 815 1.32.2.2 skrll } 816 1.32.2.2 skrll } 817 1.32.2.2 skrll 818 1.32.2.2 skrll void 819 1.32.2.2 skrll ieee80211_free_allnodes(struct ieee80211com *ic) 820 1.32.2.2 skrll { 821 1.32.2.2 skrll struct ieee80211_node *ni; 822 1.32.2.2 skrll 823 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, ("free all nodes\n")); 824 1.32.2.2 skrll IEEE80211_NODE_LOCK_BH(ic); 825 1.32.2.2 skrll while ((ni = TAILQ_FIRST(&ic->ic_node)) != NULL) 826 1.32.2.2 skrll _ieee80211_free_node(ic, ni); 827 1.32.2.2 skrll IEEE80211_NODE_UNLOCK_BH(ic); 828 1.32.2.2 skrll 829 1.32.2.2 skrll if (ic->ic_bss != NULL) 830 1.32.2.2 skrll node_cleanup(ic, ic->ic_bss); /* for station mode */ 831 1.32.2.2 skrll } 832 1.32.2.2 skrll 833 1.32.2.2 skrll /* 834 1.32.2.2 skrll * Timeout inactive nodes. Note that we cannot hold the node 835 1.32.2.2 skrll * lock while sending a frame as this would lead to a LOR. 836 1.32.2.2 skrll * Instead we use a generation number to mark nodes that we've 837 1.32.2.2 skrll * scanned and drop the lock and restart a scan if we have to 838 1.32.2.2 skrll * time out a node. Since we are single-threaded by virtue of 839 1.32.2.2 skrll * controlling the inactivity timer we can be sure this will 840 1.32.2.2 skrll * process each node only once. 841 1.32.2.2 skrll */ 842 1.32.2.2 skrll void 843 1.32.2.2 skrll ieee80211_timeout_nodes(struct ieee80211com *ic) 844 1.32.2.2 skrll { 845 1.32.2.2 skrll struct ieee80211_node *ni; 846 1.32.2.2 skrll u_int gen = ic->ic_scangen++; /* NB: ok 'cuz single-threaded*/ 847 1.32.2.2 skrll 848 1.32.2.2 skrll restart: 849 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 850 1.32.2.2 skrll TAILQ_FOREACH(ni, &ic->ic_node, ni_list) { 851 1.32.2.2 skrll if (ni->ni_scangen == gen) /* previously handled */ 852 1.32.2.2 skrll continue; 853 1.32.2.2 skrll ni->ni_scangen = gen; 854 1.32.2.2 skrll if (++ni->ni_inact > ieee80211_inact_max) { 855 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 856 1.32.2.2 skrll ("station %s timed out due to inactivity (%u secs)\n", 857 1.32.2.2 skrll ether_sprintf(ni->ni_macaddr), 858 1.32.2.2 skrll ni->ni_inact)); 859 1.32.2.2 skrll /* 860 1.32.2.2 skrll * Send a deauthenticate frame. 861 1.32.2.2 skrll * 862 1.32.2.2 skrll * Drop the node lock before sending the 863 1.32.2.2 skrll * deauthentication frame in case the driver takes 864 1.32.2.2 skrll * a lock, as this will result in a LOR between the 865 1.32.2.2 skrll * node lock and the driver lock. 866 1.32.2.2 skrll */ 867 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 868 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 869 1.32.2.2 skrll IEEE80211_SEND_MGMT(ic, ni, 870 1.32.2.2 skrll IEEE80211_FC0_SUBTYPE_DEAUTH, 871 1.32.2.2 skrll IEEE80211_REASON_AUTH_EXPIRE); 872 1.32.2.2 skrll ieee80211_node_leave(ic, ni); 873 1.32.2.2 skrll } else 874 1.32.2.2 skrll ieee80211_free_node(ic, ni); 875 1.32.2.2 skrll ic->ic_stats.is_node_timeout++; 876 1.32.2.2 skrll goto restart; 877 1.32.2.2 skrll } 878 1.32.2.2 skrll } 879 1.32.2.2 skrll if (!TAILQ_EMPTY(&ic->ic_node)) 880 1.32.2.2 skrll ic->ic_inact_timer = IEEE80211_INACT_WAIT; 881 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 882 1.32.2.2 skrll } 883 1.32.2.2 skrll 884 1.32.2.2 skrll void 885 1.32.2.2 skrll ieee80211_iterate_nodes(struct ieee80211com *ic, ieee80211_iter_func *f, void *arg) 886 1.32.2.2 skrll { 887 1.32.2.2 skrll struct ieee80211_node *ni; 888 1.32.2.2 skrll 889 1.32.2.2 skrll IEEE80211_NODE_LOCK(ic); 890 1.32.2.2 skrll TAILQ_FOREACH(ni, &ic->ic_node, ni_list) 891 1.32.2.2 skrll (*f)(arg, ni); 892 1.32.2.2 skrll IEEE80211_NODE_UNLOCK(ic); 893 1.32.2.2 skrll } 894 1.32.2.2 skrll 895 1.32.2.2 skrll void 896 1.32.2.2 skrll ieee80211_node_join(struct ieee80211com *ic, struct ieee80211_node *ni, int resp) 897 1.32.2.2 skrll { 898 1.32.2.2 skrll int newassoc; 899 1.32.2.2 skrll 900 1.32.2.2 skrll if (ni->ni_associd == 0) { 901 1.32.2.2 skrll u_int16_t aid; 902 1.32.2.2 skrll 903 1.32.2.2 skrll /* 904 1.32.2.2 skrll * It would be clever to search the bitmap 905 1.32.2.2 skrll * more efficiently, but this will do for now. 906 1.32.2.2 skrll */ 907 1.32.2.2 skrll for (aid = 1; aid < ic->ic_max_aid; aid++) { 908 1.32.2.2 skrll if (!IEEE80211_AID_ISSET(aid, 909 1.32.2.2 skrll ic->ic_aid_bitmap)) 910 1.32.2.2 skrll break; 911 1.32.2.2 skrll } 912 1.32.2.2 skrll if (aid >= ic->ic_max_aid) { 913 1.32.2.2 skrll IEEE80211_SEND_MGMT(ic, ni, resp, 914 1.32.2.2 skrll IEEE80211_REASON_ASSOC_TOOMANY); 915 1.32.2.2 skrll ieee80211_node_leave(ic, ni); 916 1.32.2.2 skrll return; 917 1.32.2.2 skrll } 918 1.32.2.2 skrll ni->ni_associd = aid | 0xc000; 919 1.32.2.2 skrll IEEE80211_AID_SET(ni->ni_associd, ic->ic_aid_bitmap); 920 1.32.2.2 skrll newassoc = 1; 921 1.32.2.2 skrll /* XXX for 11g must turn off short slot time if long 922 1.32.2.2 skrll slot time sta associates */ 923 1.32.2.2 skrll } else 924 1.32.2.2 skrll newassoc = 0; 925 1.32.2.2 skrll 926 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, 927 1.32.2.2 skrll ("station %s %s associated at aid %d\n", 928 1.32.2.2 skrll ether_sprintf(ni->ni_macaddr), 929 1.32.2.2 skrll (newassoc ? "newly" : "already"), 930 1.32.2.2 skrll ni->ni_associd & ~0xc000)); 931 1.32.2.2 skrll 932 1.32.2.2 skrll /* give driver a chance to setup state like ni_txrate */ 933 1.32.2.2 skrll if (ic->ic_newassoc) 934 1.32.2.2 skrll (*ic->ic_newassoc)(ic, ni, newassoc); 935 1.32.2.2 skrll IEEE80211_SEND_MGMT(ic, ni, resp, IEEE80211_STATUS_SUCCESS); 936 1.32.2.2 skrll } 937 1.32.2.2 skrll 938 1.32.2.2 skrll /* 939 1.32.2.2 skrll * Handle bookkeeping for station deauthentication/disassociation 940 1.32.2.2 skrll * when operating as an ap. 941 1.32.2.2 skrll */ 942 1.32.2.2 skrll void 943 1.32.2.2 skrll ieee80211_node_leave(struct ieee80211com *ic, struct ieee80211_node *ni) 944 1.32.2.2 skrll { 945 1.32.2.2 skrll 946 1.32.2.2 skrll IASSERT(ic->ic_opmode == IEEE80211_M_HOSTAP, 947 1.32.2.2 skrll ("not in ap mode, mode %u", ic->ic_opmode)); 948 1.32.2.2 skrll /* 949 1.32.2.2 skrll * If node wasn't previously associated all 950 1.32.2.2 skrll * we need to do is reclaim the reference. 951 1.32.2.2 skrll */ 952 1.32.2.2 skrll if (ni->ni_associd == 0) 953 1.32.2.2 skrll goto done; 954 1.32.2.2 skrll IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap); 955 1.32.2.2 skrll ni->ni_associd = 0; 956 1.32.2.2 skrll 957 1.32.2.2 skrll done: 958 1.32.2.2 skrll ieee80211_free_node(ic, ni); 959 1.32.2.2 skrll } 960
Indexes created Tue Sep 30 17:09:57 GMT 2025