Home | History | Annotate | Line # | Download | only in net80211
ieee80211_node.c revision 1.32.2.6
      1  1.32.2.6  skrll /*	$NetBSD: ieee80211_node.c,v 1.32.2.6 2004/10/19 15:58:11 skrll Exp $	*/
      2  1.32.2.2  skrll /*-
      3  1.32.2.2  skrll  * Copyright (c) 2001 Atsushi Onoe
      4  1.32.2.2  skrll  * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting
      5  1.32.2.2  skrll  * All rights reserved.
      6  1.32.2.2  skrll  *
      7  1.32.2.2  skrll  * Redistribution and use in source and binary forms, with or without
      8  1.32.2.2  skrll  * modification, are permitted provided that the following conditions
      9  1.32.2.2  skrll  * are met:
     10  1.32.2.2  skrll  * 1. Redistributions of source code must retain the above copyright
     11  1.32.2.2  skrll  *    notice, this list of conditions and the following disclaimer.
     12  1.32.2.2  skrll  * 2. Redistributions in binary form must reproduce the above copyright
     13  1.32.2.2  skrll  *    notice, this list of conditions and the following disclaimer in the
     14  1.32.2.2  skrll  *    documentation and/or other materials provided with the distribution.
     15  1.32.2.2  skrll  * 3. The name of the author may not be used to endorse or promote products
     16  1.32.2.2  skrll  *    derived from this software without specific prior written permission.
     17  1.32.2.2  skrll  *
     18  1.32.2.2  skrll  * Alternatively, this software may be distributed under the terms of the
     19  1.32.2.2  skrll  * GNU General Public License ("GPL") version 2 as published by the Free
     20  1.32.2.2  skrll  * Software Foundation.
     21  1.32.2.2  skrll  *
     22  1.32.2.2  skrll  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     23  1.32.2.2  skrll  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     24  1.32.2.2  skrll  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     25  1.32.2.2  skrll  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     26  1.32.2.2  skrll  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     27  1.32.2.2  skrll  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     28  1.32.2.2  skrll  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     29  1.32.2.2  skrll  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     30  1.32.2.2  skrll  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     31  1.32.2.2  skrll  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     32  1.32.2.2  skrll  */
     33  1.32.2.2  skrll 
     34  1.32.2.2  skrll #include <sys/cdefs.h>
     35  1.32.2.2  skrll #ifdef __FreeBSD__
     36  1.32.2.2  skrll __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_node.c,v 1.22 2004/04/05 04:15:55 sam Exp $");
     37  1.32.2.2  skrll #else
     38  1.32.2.6  skrll __KERNEL_RCSID(0, "$NetBSD: ieee80211_node.c,v 1.32.2.6 2004/10/19 15:58:11 skrll Exp $");
     39  1.32.2.2  skrll #endif
     40  1.32.2.2  skrll 
     41  1.32.2.2  skrll #include "opt_inet.h"
     42  1.32.2.2  skrll 
     43  1.32.2.2  skrll #include <sys/param.h>
     44  1.32.2.2  skrll #include <sys/systm.h>
     45  1.32.2.2  skrll #include <sys/mbuf.h>
     46  1.32.2.2  skrll #include <sys/malloc.h>
     47  1.32.2.2  skrll #include <sys/kernel.h>
     48  1.32.2.2  skrll #include <sys/socket.h>
     49  1.32.2.2  skrll #include <sys/sockio.h>
     50  1.32.2.2  skrll #include <sys/endian.h>
     51  1.32.2.2  skrll #include <sys/errno.h>
     52  1.32.2.2  skrll #ifdef __FreeBSD__
     53  1.32.2.2  skrll #include <sys/bus.h>
     54  1.32.2.2  skrll #endif
     55  1.32.2.2  skrll #include <sys/proc.h>
     56  1.32.2.2  skrll #include <sys/sysctl.h>
     57  1.32.2.2  skrll 
     58  1.32.2.2  skrll #ifdef __FreeBSD__
     59  1.32.2.2  skrll #include <machine/atomic.h>
     60  1.32.2.2  skrll #endif
     61  1.32.2.2  skrll 
     62  1.32.2.2  skrll #include <net/if.h>
     63  1.32.2.2  skrll #include <net/if_dl.h>
     64  1.32.2.2  skrll #include <net/if_media.h>
     65  1.32.2.2  skrll #include <net/if_arp.h>
     66  1.32.2.2  skrll #ifdef __FreeBSD__
     67  1.32.2.2  skrll #include <net/ethernet.h>
     68  1.32.2.2  skrll #else
     69  1.32.2.2  skrll #include <net/if_ether.h>
     70  1.32.2.2  skrll #endif
     71  1.32.2.2  skrll #include <net/if_llc.h>
     72  1.32.2.2  skrll 
     73  1.32.2.2  skrll #include <net80211/ieee80211_var.h>
     74  1.32.2.2  skrll #include <net80211/ieee80211_compat.h>
     75  1.32.2.2  skrll 
     76  1.32.2.2  skrll #include <net/bpf.h>
     77  1.32.2.2  skrll 
     78  1.32.2.2  skrll #ifdef INET
     79  1.32.2.2  skrll #include <netinet/in.h>
     80  1.32.2.2  skrll #ifdef __FreeBSD__
     81  1.32.2.2  skrll #include <netinet/if_ether.h>
     82  1.32.2.2  skrll #else
     83  1.32.2.2  skrll #include <net/if_ether.h>
     84  1.32.2.2  skrll #endif
     85  1.32.2.2  skrll #endif
     86  1.32.2.2  skrll 
     87  1.32.2.2  skrll static struct ieee80211_node *ieee80211_node_alloc(struct ieee80211com *);
     88  1.32.2.2  skrll static void ieee80211_node_free(struct ieee80211com *, struct ieee80211_node *);
     89  1.32.2.2  skrll static void ieee80211_node_copy(struct ieee80211com *,
     90  1.32.2.2  skrll 		struct ieee80211_node *, const struct ieee80211_node *);
     91  1.32.2.2  skrll static u_int8_t ieee80211_node_getrssi(struct ieee80211com *,
     92  1.32.2.2  skrll 		struct ieee80211_node *);
     93  1.32.2.2  skrll 
     94  1.32.2.2  skrll static void ieee80211_setup_node(struct ieee80211com *ic,
     95  1.32.2.2  skrll 		struct ieee80211_node *ni, u_int8_t *macaddr);
     96  1.32.2.3  skrll static void ieee80211_free_node(struct ieee80211com *,
     97  1.32.2.2  skrll 		struct ieee80211_node *);
     98  1.32.2.2  skrll 
     99  1.32.2.2  skrll MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state");
    100  1.32.2.2  skrll 
    101  1.32.2.2  skrll void
    102  1.32.2.2  skrll ieee80211_node_attach(struct ieee80211com *ic)
    103  1.32.2.2  skrll {
    104  1.32.2.2  skrll 
    105  1.32.2.2  skrll 	/* XXX need unit */
    106  1.32.2.2  skrll 	IEEE80211_NODE_LOCK_INIT(ic, ic->ic_ifp->if_xname);
    107  1.32.2.2  skrll 	TAILQ_INIT(&ic->ic_node);
    108  1.32.2.2  skrll 	ic->ic_node_alloc = ieee80211_node_alloc;
    109  1.32.2.2  skrll 	ic->ic_node_free = ieee80211_node_free;
    110  1.32.2.2  skrll 	ic->ic_node_copy = ieee80211_node_copy;
    111  1.32.2.2  skrll 	ic->ic_node_getrssi = ieee80211_node_getrssi;
    112  1.32.2.2  skrll 	ic->ic_scangen = 1;
    113  1.32.2.3  skrll 	ic->ic_max_nnodes = ieee80211_cache_size;
    114  1.32.2.2  skrll 
    115  1.32.2.2  skrll 	if (ic->ic_max_aid == 0)
    116  1.32.2.2  skrll 		ic->ic_max_aid = IEEE80211_AID_DEF;
    117  1.32.2.2  skrll 	else if (ic->ic_max_aid > IEEE80211_AID_MAX)
    118  1.32.2.2  skrll 		ic->ic_max_aid = IEEE80211_AID_MAX;
    119  1.32.2.2  skrll 	MALLOC(ic->ic_aid_bitmap, u_int32_t *,
    120  1.32.2.2  skrll 		howmany(ic->ic_max_aid, 32) * sizeof(u_int32_t),
    121  1.32.2.2  skrll 		M_DEVBUF, M_NOWAIT | M_ZERO);
    122  1.32.2.2  skrll 	if (ic->ic_aid_bitmap == NULL) {
    123  1.32.2.2  skrll 		/* XXX no way to recover */
    124  1.32.2.2  skrll 		printf("%s: no memory for AID bitmap!\n", __func__);
    125  1.32.2.2  skrll 		ic->ic_max_aid = 0;
    126  1.32.2.2  skrll 	}
    127  1.32.2.2  skrll }
    128  1.32.2.2  skrll 
    129  1.32.2.3  skrll static struct ieee80211_node *
    130  1.32.2.3  skrll ieee80211_alloc_node_helper(struct ieee80211com *ic)
    131  1.32.2.3  skrll {
    132  1.32.2.3  skrll 	struct ieee80211_node *ni;
    133  1.32.2.3  skrll 	if (ic->ic_nnodes >= ic->ic_max_nnodes)
    134  1.32.2.3  skrll 		ieee80211_clean_nodes(ic);
    135  1.32.2.3  skrll 	if (ic->ic_nnodes >= ic->ic_max_nnodes)
    136  1.32.2.3  skrll 		return NULL;
    137  1.32.2.3  skrll 	ni = (*ic->ic_node_alloc)(ic);
    138  1.32.2.3  skrll 	if (ni != NULL)
    139  1.32.2.3  skrll 		ic->ic_nnodes++;
    140  1.32.2.3  skrll 	return ni;
    141  1.32.2.3  skrll }
    142  1.32.2.3  skrll 
    143  1.32.2.2  skrll void
    144  1.32.2.2  skrll ieee80211_node_lateattach(struct ieee80211com *ic)
    145  1.32.2.2  skrll {
    146  1.32.2.2  skrll 	struct ieee80211_node *ni;
    147  1.32.2.2  skrll 
    148  1.32.2.3  skrll 	ni = ieee80211_alloc_node_helper(ic);
    149  1.32.2.2  skrll 	IASSERT(ni != NULL, ("unable to setup inital BSS node"));
    150  1.32.2.2  skrll 	ni->ni_chan = IEEE80211_CHAN_ANYC;
    151  1.32.2.3  skrll 	ic->ic_bss = ieee80211_ref_node(ni);
    152  1.32.2.2  skrll 	ic->ic_txpower = IEEE80211_TXPOWER_MAX;
    153  1.32.2.2  skrll }
    154  1.32.2.2  skrll 
    155  1.32.2.2  skrll void
    156  1.32.2.2  skrll ieee80211_node_detach(struct ieee80211com *ic)
    157  1.32.2.2  skrll {
    158  1.32.2.2  skrll 
    159  1.32.2.2  skrll 	if (ic->ic_bss != NULL) {
    160  1.32.2.2  skrll 		(*ic->ic_node_free)(ic, ic->ic_bss);
    161  1.32.2.2  skrll 		ic->ic_bss = NULL;
    162  1.32.2.2  skrll 	}
    163  1.32.2.2  skrll 	ieee80211_free_allnodes(ic);
    164  1.32.2.2  skrll 	IEEE80211_NODE_LOCK_DESTROY(ic);
    165  1.32.2.2  skrll         if (ic->ic_aid_bitmap != NULL)
    166  1.32.2.2  skrll                 FREE(ic->ic_aid_bitmap, M_DEVBUF);
    167  1.32.2.2  skrll }
    168  1.32.2.2  skrll 
    169  1.32.2.2  skrll /*
    170  1.32.2.2  skrll  * AP scanning support.
    171  1.32.2.2  skrll  */
    172  1.32.2.2  skrll 
    173  1.32.2.2  skrll /*
    174  1.32.2.2  skrll  * Initialize the active channel set based on the set
    175  1.32.2.2  skrll  * of available channels and the current PHY mode.
    176  1.32.2.2  skrll  */
    177  1.32.2.2  skrll static void
    178  1.32.2.2  skrll ieee80211_reset_scan(struct ieee80211com *ic)
    179  1.32.2.2  skrll {
    180  1.32.2.2  skrll 
    181  1.32.2.2  skrll 	memcpy(ic->ic_chan_scan, ic->ic_chan_active,
    182  1.32.2.2  skrll 		sizeof(ic->ic_chan_active));
    183  1.32.2.2  skrll 	/* NB: hack, setup so next_scan starts with the first channel */
    184  1.32.2.2  skrll 	if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC)
    185  1.32.2.2  skrll 		ic->ic_bss->ni_chan = &ic->ic_channels[IEEE80211_CHAN_MAX];
    186  1.32.2.2  skrll }
    187  1.32.2.2  skrll 
    188  1.32.2.2  skrll /*
    189  1.32.2.2  skrll  * Begin an active scan.
    190  1.32.2.2  skrll  */
    191  1.32.2.2  skrll void
    192  1.32.2.2  skrll ieee80211_begin_scan(struct ieee80211com *ic)
    193  1.32.2.2  skrll {
    194  1.32.2.2  skrll 
    195  1.32.2.2  skrll 	/*
    196  1.32.2.2  skrll 	 * In all but hostap mode scanning starts off in
    197  1.32.2.2  skrll 	 * an active mode before switching to passive.
    198  1.32.2.2  skrll 	 */
    199  1.32.2.2  skrll 	if (ic->ic_opmode != IEEE80211_M_HOSTAP) {
    200  1.32.2.2  skrll 		ic->ic_flags |= IEEE80211_F_ASCAN;
    201  1.32.2.2  skrll 		ic->ic_stats.is_scan_active++;
    202  1.32.2.2  skrll 	} else
    203  1.32.2.2  skrll 		ic->ic_stats.is_scan_passive++;
    204  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("begin %s scan\n",
    205  1.32.2.2  skrll 		(ic->ic_flags & IEEE80211_F_ASCAN) ?  "active" : "passive"));
    206  1.32.2.2  skrll 	/*
    207  1.32.2.2  skrll 	 * Clear scan state and flush any previously seen
    208  1.32.2.2  skrll 	 * AP's.  Note that the latter assumes we don't act
    209  1.32.2.2  skrll 	 * as both an AP and a station, otherwise we'll
    210  1.32.2.2  skrll 	 * potentially flush state of stations associated
    211  1.32.2.2  skrll 	 * with us.
    212  1.32.2.2  skrll 	 */
    213  1.32.2.2  skrll 	ieee80211_reset_scan(ic);
    214  1.32.2.2  skrll 	ieee80211_free_allnodes(ic);
    215  1.32.2.2  skrll 
    216  1.32.2.2  skrll 	/* Scan the next channel. */
    217  1.32.2.2  skrll 	ieee80211_next_scan(ic);
    218  1.32.2.2  skrll }
    219  1.32.2.2  skrll 
    220  1.32.2.2  skrll /*
    221  1.32.2.2  skrll  * Switch to the next channel marked for scanning.
    222  1.32.2.2  skrll  */
    223  1.32.2.2  skrll void
    224  1.32.2.2  skrll ieee80211_next_scan(struct ieee80211com *ic)
    225  1.32.2.2  skrll {
    226  1.32.2.2  skrll 	struct ieee80211_channel *chan;
    227  1.32.2.2  skrll 
    228  1.32.2.2  skrll 	chan = ic->ic_bss->ni_chan;
    229  1.32.2.2  skrll 	for (;;) {
    230  1.32.2.2  skrll 		if (++chan > &ic->ic_channels[IEEE80211_CHAN_MAX])
    231  1.32.2.2  skrll 			chan = &ic->ic_channels[0];
    232  1.32.2.2  skrll 		if (isset(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan))) {
    233  1.32.2.2  skrll 			/*
    234  1.32.2.2  skrll 			 * Honor channels marked passive-only
    235  1.32.2.2  skrll 			 * during an active scan.
    236  1.32.2.2  skrll 			 */
    237  1.32.2.2  skrll 			if ((ic->ic_flags & IEEE80211_F_ASCAN) == 0 ||
    238  1.32.2.2  skrll 			    (chan->ic_flags & IEEE80211_CHAN_PASSIVE) == 0)
    239  1.32.2.2  skrll 				break;
    240  1.32.2.2  skrll 		}
    241  1.32.2.2  skrll 		if (chan == ic->ic_bss->ni_chan) {
    242  1.32.2.2  skrll 			ieee80211_end_scan(ic);
    243  1.32.2.2  skrll 			return;
    244  1.32.2.2  skrll 		}
    245  1.32.2.2  skrll 	}
    246  1.32.2.2  skrll 	clrbit(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan));
    247  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN,
    248  1.32.2.2  skrll 		("%s: chan %d->%d\n", __func__,
    249  1.32.2.2  skrll 		ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan),
    250  1.32.2.2  skrll 		ieee80211_chan2ieee(ic, chan)));
    251  1.32.2.2  skrll 	ic->ic_bss->ni_chan = chan;
    252  1.32.2.2  skrll 	ieee80211_new_state(ic, IEEE80211_S_SCAN, -1);
    253  1.32.2.2  skrll }
    254  1.32.2.2  skrll 
    255  1.32.2.2  skrll void
    256  1.32.2.2  skrll ieee80211_create_ibss(struct ieee80211com* ic, struct ieee80211_channel *chan)
    257  1.32.2.2  skrll {
    258  1.32.2.2  skrll 	struct ieee80211_node *ni;
    259  1.32.2.2  skrll 
    260  1.32.2.2  skrll 	ni = ic->ic_bss;
    261  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("creating ibss\n"));
    262  1.32.2.2  skrll 	ic->ic_flags |= IEEE80211_F_SIBSS;
    263  1.32.2.2  skrll 	ni->ni_chan = chan;
    264  1.32.2.2  skrll 	ni->ni_rates = ic->ic_sup_rates[ieee80211_chan2mode(ic, ni->ni_chan)];
    265  1.32.2.2  skrll 	IEEE80211_ADDR_COPY(ni->ni_macaddr, ic->ic_myaddr);
    266  1.32.2.2  skrll 	IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_myaddr);
    267  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_IBSS) {
    268  1.32.2.2  skrll 		if ((ic->ic_flags & IEEE80211_F_DESBSSID) != 0)
    269  1.32.2.2  skrll 			IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_des_bssid);
    270  1.32.2.2  skrll 		else
    271  1.32.2.2  skrll 			ni->ni_bssid[0] |= 0x02;	/* local bit for IBSS */
    272  1.32.2.2  skrll 	}
    273  1.32.2.2  skrll 	ni->ni_esslen = ic->ic_des_esslen;
    274  1.32.2.2  skrll 	memcpy(ni->ni_essid, ic->ic_des_essid, ni->ni_esslen);
    275  1.32.2.2  skrll 	ni->ni_rssi = 0;
    276  1.32.2.2  skrll 	ni->ni_rstamp = 0;
    277  1.32.2.2  skrll 	memset(ni->ni_tstamp, 0, sizeof(ni->ni_tstamp));
    278  1.32.2.2  skrll 	ni->ni_intval = ic->ic_lintval;
    279  1.32.2.2  skrll 	ni->ni_capinfo = IEEE80211_CAPINFO_IBSS;
    280  1.32.2.2  skrll 	if (ic->ic_flags & IEEE80211_F_PRIVACY)
    281  1.32.2.2  skrll 		ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY;
    282  1.32.2.2  skrll 	if (ic->ic_phytype == IEEE80211_T_FH) {
    283  1.32.2.2  skrll 		ni->ni_fhdwell = 200;	/* XXX */
    284  1.32.2.2  skrll 		ni->ni_fhindex = 1;
    285  1.32.2.2  skrll 	}
    286  1.32.2.2  skrll 	ieee80211_new_state(ic, IEEE80211_S_RUN, -1);
    287  1.32.2.2  skrll }
    288  1.32.2.2  skrll 
    289  1.32.2.2  skrll int
    290  1.32.2.2  skrll ieee80211_match_bss(struct ieee80211com *ic, struct ieee80211_node *ni)
    291  1.32.2.2  skrll {
    292  1.32.2.2  skrll         u_int8_t rate;
    293  1.32.2.2  skrll         int fail;
    294  1.32.2.2  skrll 
    295  1.32.2.2  skrll 	fail = 0;
    296  1.32.2.2  skrll 	if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan)))
    297  1.32.2.2  skrll 		fail |= 0x01;
    298  1.32.2.2  skrll 	if (ic->ic_des_chan != IEEE80211_CHAN_ANYC &&
    299  1.32.2.2  skrll 	    ni->ni_chan != ic->ic_des_chan)
    300  1.32.2.2  skrll 		fail |= 0x01;
    301  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_IBSS) {
    302  1.32.2.2  skrll 		if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0)
    303  1.32.2.2  skrll 			fail |= 0x02;
    304  1.32.2.2  skrll 	} else {
    305  1.32.2.2  skrll 		if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0)
    306  1.32.2.2  skrll 			fail |= 0x02;
    307  1.32.2.2  skrll 	}
    308  1.32.2.2  skrll 	if (ic->ic_flags & IEEE80211_F_PRIVACY) {
    309  1.32.2.2  skrll 		if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0)
    310  1.32.2.2  skrll 			fail |= 0x04;
    311  1.32.2.2  skrll 	} else {
    312  1.32.2.2  skrll 		/* XXX does this mean privacy is supported or required? */
    313  1.32.2.2  skrll 		if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY)
    314  1.32.2.2  skrll 			fail |= 0x04;
    315  1.32.2.2  skrll 	}
    316  1.32.2.2  skrll 	rate = ieee80211_fix_rate(ic, ni, IEEE80211_F_DONEGO);
    317  1.32.2.2  skrll 	if (rate & IEEE80211_RATE_BASIC)
    318  1.32.2.2  skrll 		fail |= 0x08;
    319  1.32.2.2  skrll 	if (ic->ic_des_esslen != 0 &&
    320  1.32.2.2  skrll 	    (ni->ni_esslen != ic->ic_des_esslen ||
    321  1.32.2.2  skrll 	     memcmp(ni->ni_essid, ic->ic_des_essid, ic->ic_des_esslen) != 0))
    322  1.32.2.2  skrll 		fail |= 0x10;
    323  1.32.2.2  skrll 	if ((ic->ic_flags & IEEE80211_F_DESBSSID) &&
    324  1.32.2.2  skrll 	    !IEEE80211_ADDR_EQ(ic->ic_des_bssid, ni->ni_bssid))
    325  1.32.2.2  skrll 		fail |= 0x20;
    326  1.32.2.2  skrll #ifdef IEEE80211_DEBUG
    327  1.32.2.2  skrll 	if (ic->ic_if.if_flags & IFF_DEBUG) {
    328  1.32.2.2  skrll 		printf(" %c %s", fail ? '-' : '+',
    329  1.32.2.2  skrll 		    ether_sprintf(ni->ni_macaddr));
    330  1.32.2.2  skrll 		printf(" %s%c", ether_sprintf(ni->ni_bssid),
    331  1.32.2.2  skrll 		    fail & 0x20 ? '!' : ' ');
    332  1.32.2.2  skrll 		printf(" %3d%c", ieee80211_chan2ieee(ic, ni->ni_chan),
    333  1.32.2.2  skrll 			fail & 0x01 ? '!' : ' ');
    334  1.32.2.2  skrll 		printf(" %+4d", ni->ni_rssi);
    335  1.32.2.2  skrll 		printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2,
    336  1.32.2.2  skrll 		    fail & 0x08 ? '!' : ' ');
    337  1.32.2.2  skrll 		printf(" %4s%c",
    338  1.32.2.2  skrll 		    (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" :
    339  1.32.2.2  skrll 		    (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" :
    340  1.32.2.2  skrll 		    "????",
    341  1.32.2.2  skrll 		    fail & 0x02 ? '!' : ' ');
    342  1.32.2.2  skrll 		printf(" %3s%c ",
    343  1.32.2.2  skrll 		    (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ?
    344  1.32.2.2  skrll 		    "wep" : "no",
    345  1.32.2.2  skrll 		    fail & 0x04 ? '!' : ' ');
    346  1.32.2.2  skrll 		ieee80211_print_essid(ni->ni_essid, ni->ni_esslen);
    347  1.32.2.2  skrll 		printf("%s\n", fail & 0x10 ? "!" : "");
    348  1.32.2.2  skrll 	}
    349  1.32.2.2  skrll #endif
    350  1.32.2.2  skrll 	return fail;
    351  1.32.2.2  skrll }
    352  1.32.2.2  skrll 
    353  1.32.2.2  skrll /*
    354  1.32.2.2  skrll  * Complete a scan of potential channels.
    355  1.32.2.2  skrll  */
    356  1.32.2.2  skrll void
    357  1.32.2.2  skrll ieee80211_end_scan(struct ieee80211com *ic)
    358  1.32.2.2  skrll {
    359  1.32.2.2  skrll 	struct ieee80211_node *ni, *nextbs, *selbs;
    360  1.32.2.2  skrll 	int i, fail;
    361  1.32.2.2  skrll 
    362  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, ("end %s scan\n",
    363  1.32.2.2  skrll 		(ic->ic_flags & IEEE80211_F_ASCAN) ?  "active" : "passive"));
    364  1.32.2.2  skrll 
    365  1.32.2.2  skrll 	ic->ic_flags &= ~IEEE80211_F_ASCAN;
    366  1.32.2.2  skrll 	ni = TAILQ_FIRST(&ic->ic_node);
    367  1.32.2.2  skrll 
    368  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_HOSTAP) {
    369  1.32.2.2  skrll 		/* XXX off stack? */
    370  1.32.2.2  skrll 		u_char occupied[roundup(IEEE80211_CHAN_MAX, NBBY)];
    371  1.32.2.2  skrll 		/*
    372  1.32.2.2  skrll 		 * The passive scan to look for existing AP's completed,
    373  1.32.2.2  skrll 		 * select a channel to camp on.  Identify the channels
    374  1.32.2.2  skrll 		 * that already have one or more AP's and try to locate
    375  1.32.2.2  skrll 		 * an unnoccupied one.  If that fails, pick a random
    376  1.32.2.2  skrll 		 * channel from the active set.
    377  1.32.2.2  skrll 		 */
    378  1.32.2.2  skrll 		for (; ni != NULL; ni = nextbs) {
    379  1.32.2.2  skrll 			nextbs = TAILQ_NEXT(ni, ni_list);
    380  1.32.2.2  skrll 			setbit(occupied, ieee80211_chan2ieee(ic, ni->ni_chan));
    381  1.32.2.2  skrll 		}
    382  1.32.2.2  skrll 		for (i = 0; i < IEEE80211_CHAN_MAX; i++)
    383  1.32.2.2  skrll 			if (isset(ic->ic_chan_active, i) && isclr(occupied, i))
    384  1.32.2.2  skrll 				break;
    385  1.32.2.2  skrll 		if (i == IEEE80211_CHAN_MAX) {
    386  1.32.2.2  skrll 			fail = arc4random() & 3;	/* random 0-3 */
    387  1.32.2.2  skrll 			for (i = 0; i < IEEE80211_CHAN_MAX; i++)
    388  1.32.2.2  skrll 				if (isset(ic->ic_chan_active, i) && fail-- == 0)
    389  1.32.2.2  skrll 					break;
    390  1.32.2.2  skrll 		}
    391  1.32.2.2  skrll 		ieee80211_create_ibss(ic, &ic->ic_channels[i]);
    392  1.32.2.2  skrll 		return;
    393  1.32.2.2  skrll 	}
    394  1.32.2.2  skrll 	if (ni == NULL) {
    395  1.32.2.2  skrll 		IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN,
    396  1.32.2.2  skrll 			("%s: no scan candidate\n", __func__));
    397  1.32.2.2  skrll   notfound:
    398  1.32.2.2  skrll 		if (ic->ic_opmode == IEEE80211_M_IBSS &&
    399  1.32.2.2  skrll 		    (ic->ic_flags & IEEE80211_F_IBSSON) &&
    400  1.32.2.2  skrll 		    ic->ic_des_esslen != 0) {
    401  1.32.2.2  skrll 			ieee80211_create_ibss(ic, ic->ic_ibss_chan);
    402  1.32.2.2  skrll 			return;
    403  1.32.2.2  skrll 		}
    404  1.32.2.2  skrll 		/*
    405  1.32.2.2  skrll 		 * Reset the list of channels to scan and start again.
    406  1.32.2.2  skrll 		 */
    407  1.32.2.2  skrll 		ieee80211_reset_scan(ic);
    408  1.32.2.2  skrll 		ieee80211_next_scan(ic);
    409  1.32.2.2  skrll 		return;
    410  1.32.2.2  skrll 	}
    411  1.32.2.2  skrll 	selbs = NULL;
    412  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN,
    413  1.32.2.2  skrll 		("\tmacaddr          bssid         chan  rssi rate flag  wep  essid\n"));
    414  1.32.2.2  skrll 	for (; ni != NULL; ni = nextbs) {
    415  1.32.2.2  skrll 		nextbs = TAILQ_NEXT(ni, ni_list);
    416  1.32.2.2  skrll 		if (ni->ni_fails) {
    417  1.32.2.2  skrll 			/*
    418  1.32.2.2  skrll 			 * The configuration of the access points may change
    419  1.32.2.2  skrll 			 * during my scan.  So delete the entry for the AP
    420  1.32.2.2  skrll 			 * and retry to associate if there is another beacon.
    421  1.32.2.2  skrll 			 */
    422  1.32.2.2  skrll 			if (ni->ni_fails++ > 2)
    423  1.32.2.2  skrll 				ieee80211_free_node(ic, ni);
    424  1.32.2.2  skrll 			continue;
    425  1.32.2.2  skrll 		}
    426  1.32.2.2  skrll 		if (ieee80211_match_bss(ic, ni) == 0) {
    427  1.32.2.2  skrll 			if (selbs == NULL)
    428  1.32.2.2  skrll 				selbs = ni;
    429  1.32.2.3  skrll 			else if (ni->ni_rssi > selbs->ni_rssi)
    430  1.32.2.2  skrll 				selbs = ni;
    431  1.32.2.2  skrll 		}
    432  1.32.2.2  skrll 	}
    433  1.32.2.2  skrll 	if (selbs == NULL)
    434  1.32.2.2  skrll 		goto notfound;
    435  1.32.2.3  skrll 	ieee80211_node_newstate(selbs, IEEE80211_STA_BSS);
    436  1.32.2.2  skrll 	(*ic->ic_node_copy)(ic, ic->ic_bss, selbs);
    437  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_IBSS) {
    438  1.32.2.2  skrll 		ieee80211_fix_rate(ic, ic->ic_bss, IEEE80211_F_DOFRATE |
    439  1.32.2.2  skrll 		    IEEE80211_F_DONEGO | IEEE80211_F_DODEL);
    440  1.32.2.3  skrll 		if (ic->ic_bss->ni_rates.rs_nrates == 0)
    441  1.32.2.2  skrll 			goto notfound;
    442  1.32.2.2  skrll 		ieee80211_new_state(ic, IEEE80211_S_RUN, -1);
    443  1.32.2.2  skrll 	} else {
    444  1.32.2.2  skrll 		ieee80211_new_state(ic, IEEE80211_S_AUTH, -1);
    445  1.32.2.2  skrll 	}
    446  1.32.2.2  skrll }
    447  1.32.2.2  skrll 
    448  1.32.2.2  skrll int
    449  1.32.2.2  skrll ieee80211_get_rate(struct ieee80211com *ic)
    450  1.32.2.2  skrll {
    451  1.32.2.2  skrll 	u_int8_t (*rates)[IEEE80211_RATE_MAXSIZE];
    452  1.32.2.2  skrll 	int rate;
    453  1.32.2.2  skrll 
    454  1.32.2.2  skrll 	rates = &ic->ic_bss->ni_rates.rs_rates;
    455  1.32.2.2  skrll 
    456  1.32.2.2  skrll 	if (ic->ic_fixed_rate != -1)
    457  1.32.2.2  skrll 		rate = (*rates)[ic->ic_fixed_rate];
    458  1.32.2.2  skrll 	else if (ic->ic_state == IEEE80211_S_RUN)
    459  1.32.2.2  skrll 		rate = (*rates)[ic->ic_bss->ni_txrate];
    460  1.32.2.2  skrll 	else
    461  1.32.2.2  skrll 		rate = 0;
    462  1.32.2.2  skrll 
    463  1.32.2.2  skrll 	return rate & IEEE80211_RATE_VAL;
    464  1.32.2.2  skrll }
    465  1.32.2.2  skrll 
    466  1.32.2.2  skrll static struct ieee80211_node *
    467  1.32.2.2  skrll ieee80211_node_alloc(struct ieee80211com *ic)
    468  1.32.2.2  skrll {
    469  1.32.2.2  skrll 	struct ieee80211_node *ni;
    470  1.32.2.2  skrll 	MALLOC(ni, struct ieee80211_node *, sizeof(struct ieee80211_node),
    471  1.32.2.2  skrll 		M_80211_NODE, M_NOWAIT | M_ZERO);
    472  1.32.2.2  skrll 	return ni;
    473  1.32.2.2  skrll }
    474  1.32.2.2  skrll 
    475  1.32.2.2  skrll static void
    476  1.32.2.2  skrll node_cleanup(struct ieee80211com *ic, struct ieee80211_node *ni)
    477  1.32.2.2  skrll {
    478  1.32.2.2  skrll         if (ni->ni_challenge != NULL) {
    479  1.32.2.2  skrll                 FREE(ni->ni_challenge, M_DEVBUF);
    480  1.32.2.2  skrll                 ni->ni_challenge = NULL;
    481  1.32.2.2  skrll         }
    482  1.32.2.2  skrll }
    483  1.32.2.2  skrll 
    484  1.32.2.2  skrll static void
    485  1.32.2.2  skrll ieee80211_node_free(struct ieee80211com *ic, struct ieee80211_node *ni)
    486  1.32.2.2  skrll {
    487  1.32.2.2  skrll 	node_cleanup(ic, ni);
    488  1.32.2.2  skrll 	FREE(ni, M_80211_NODE);
    489  1.32.2.2  skrll }
    490  1.32.2.2  skrll 
    491  1.32.2.2  skrll static void
    492  1.32.2.2  skrll ieee80211_node_copy(struct ieee80211com *ic,
    493  1.32.2.2  skrll 	struct ieee80211_node *dst, const struct ieee80211_node *src)
    494  1.32.2.2  skrll {
    495  1.32.2.2  skrll 	node_cleanup(ic, dst);
    496  1.32.2.2  skrll 	*dst = *src;
    497  1.32.2.2  skrll 	dst->ni_challenge = NULL;
    498  1.32.2.2  skrll }
    499  1.32.2.2  skrll 
    500  1.32.2.2  skrll static u_int8_t
    501  1.32.2.2  skrll ieee80211_node_getrssi(struct ieee80211com *ic, struct ieee80211_node *ni)
    502  1.32.2.2  skrll {
    503  1.32.2.2  skrll 	return ni->ni_rssi;
    504  1.32.2.2  skrll }
    505  1.32.2.2  skrll 
    506  1.32.2.2  skrll static void
    507  1.32.2.2  skrll ieee80211_setup_node(struct ieee80211com *ic,
    508  1.32.2.2  skrll 	struct ieee80211_node *ni, u_int8_t *macaddr)
    509  1.32.2.2  skrll {
    510  1.32.2.2  skrll 	int hash;
    511  1.32.2.2  skrll 
    512  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE,
    513  1.32.2.2  skrll 		("%s %s\n", __func__, ether_sprintf(macaddr)));
    514  1.32.2.2  skrll 	IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr);
    515  1.32.2.2  skrll 	hash = IEEE80211_NODE_HASH(macaddr);
    516  1.32.2.3  skrll 	ieee80211_node_newstate(ni, IEEE80211_STA_CACHE);
    517  1.32.2.2  skrll 
    518  1.32.2.2  skrll 	IEEE80211_NODE_LOCK_BH(ic);
    519  1.32.2.2  skrll 	/*
    520  1.32.2.2  skrll 	 * Note we don't enable the inactive timer when acting
    521  1.32.2.2  skrll 	 * as a station.  Nodes created in this mode represent
    522  1.32.2.2  skrll 	 * AP's identified while scanning.  If we time them out
    523  1.32.2.2  skrll 	 * then several things happen: we can't return the data
    524  1.32.2.2  skrll 	 * to users to show the list of AP's we encountered, and
    525  1.32.2.2  skrll 	 * more importantly, we'll incorrectly deauthenticate
    526  1.32.2.2  skrll 	 * ourself because the inactivity timer will kick us off.
    527  1.32.2.2  skrll 	 */
    528  1.32.2.2  skrll 	if (ic->ic_opmode != IEEE80211_M_STA &&
    529  1.32.2.2  skrll 	    TAILQ_EMPTY(&ic->ic_node))
    530  1.32.2.2  skrll 		ic->ic_inact_timer = IEEE80211_INACT_WAIT;
    531  1.32.2.2  skrll 	TAILQ_INSERT_TAIL(&ic->ic_node, ni, ni_list);
    532  1.32.2.2  skrll 	LIST_INSERT_HEAD(&ic->ic_hash[hash], ni, ni_hash);
    533  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK_BH(ic);
    534  1.32.2.2  skrll }
    535  1.32.2.2  skrll 
    536  1.32.2.2  skrll struct ieee80211_node *
    537  1.32.2.2  skrll ieee80211_alloc_node(struct ieee80211com *ic, u_int8_t *macaddr)
    538  1.32.2.2  skrll {
    539  1.32.2.3  skrll 	struct ieee80211_node *ni = ieee80211_alloc_node_helper(ic);
    540  1.32.2.3  skrll 	if (ni != NULL) {
    541  1.32.2.2  skrll 		ieee80211_setup_node(ic, ni, macaddr);
    542  1.32.2.3  skrll 	} else
    543  1.32.2.2  skrll 		ic->ic_stats.is_rx_nodealloc++;
    544  1.32.2.2  skrll 	return ni;
    545  1.32.2.2  skrll }
    546  1.32.2.2  skrll 
    547  1.32.2.2  skrll struct ieee80211_node *
    548  1.32.2.2  skrll ieee80211_dup_bss(struct ieee80211com *ic, u_int8_t *macaddr)
    549  1.32.2.2  skrll {
    550  1.32.2.3  skrll 	struct ieee80211_node *ni = ieee80211_alloc_node_helper(ic);
    551  1.32.2.2  skrll 	if (ni != NULL) {
    552  1.32.2.2  skrll 		ieee80211_setup_node(ic, ni, macaddr);
    553  1.32.2.2  skrll 		/*
    554  1.32.2.2  skrll 		 * Inherit from ic_bss.
    555  1.32.2.2  skrll 		 */
    556  1.32.2.2  skrll 		IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_bss->ni_bssid);
    557  1.32.2.2  skrll 		ni->ni_chan = ic->ic_bss->ni_chan;
    558  1.32.2.2  skrll 	} else
    559  1.32.2.2  skrll 		ic->ic_stats.is_rx_nodealloc++;
    560  1.32.2.2  skrll 	return ni;
    561  1.32.2.2  skrll }
    562  1.32.2.2  skrll 
    563  1.32.2.2  skrll static struct ieee80211_node *
    564  1.32.2.2  skrll _ieee80211_find_node(struct ieee80211com *ic, u_int8_t *macaddr)
    565  1.32.2.2  skrll {
    566  1.32.2.2  skrll 	struct ieee80211_node *ni;
    567  1.32.2.2  skrll 	int hash;
    568  1.32.2.2  skrll 
    569  1.32.2.2  skrll 	IEEE80211_NODE_LOCK_ASSERT(ic);
    570  1.32.2.2  skrll 
    571  1.32.2.2  skrll 	hash = IEEE80211_NODE_HASH(macaddr);
    572  1.32.2.2  skrll 	LIST_FOREACH(ni, &ic->ic_hash[hash], ni_hash) {
    573  1.32.2.2  skrll 		if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) {
    574  1.32.2.3  skrll 			/* least-recently used is at tail */
    575  1.32.2.3  skrll 			TAILQ_REMOVE(&ic->ic_node, ni, ni_list);
    576  1.32.2.3  skrll 			TAILQ_INSERT_TAIL(&ic->ic_node, ni, ni_list);
    577  1.32.2.2  skrll 			return ni;
    578  1.32.2.2  skrll 		}
    579  1.32.2.2  skrll 	}
    580  1.32.2.2  skrll 	return NULL;
    581  1.32.2.2  skrll }
    582  1.32.2.2  skrll 
    583  1.32.2.2  skrll struct ieee80211_node *
    584  1.32.2.2  skrll ieee80211_find_node(struct ieee80211com *ic, u_int8_t *macaddr)
    585  1.32.2.2  skrll {
    586  1.32.2.2  skrll 	struct ieee80211_node *ni;
    587  1.32.2.2  skrll 
    588  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    589  1.32.2.2  skrll 	ni = _ieee80211_find_node(ic, macaddr);
    590  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    591  1.32.2.2  skrll 	return ni;
    592  1.32.2.2  skrll }
    593  1.32.2.2  skrll 
    594  1.32.2.2  skrll /*
    595  1.32.2.2  skrll  * Return a reference to the appropriate node for sending
    596  1.32.2.2  skrll  * a data frame.  This handles node discovery in adhoc networks.
    597  1.32.2.3  skrll  *
    598  1.32.2.3  skrll  * Drivers will call this, so increase the reference count before
    599  1.32.2.3  skrll  * returning the node.
    600  1.32.2.2  skrll  */
    601  1.32.2.2  skrll struct ieee80211_node *
    602  1.32.2.2  skrll ieee80211_find_txnode(struct ieee80211com *ic, u_int8_t *macaddr)
    603  1.32.2.2  skrll {
    604  1.32.2.2  skrll 	struct ieee80211_node *ni;
    605  1.32.2.2  skrll 
    606  1.32.2.2  skrll 	/*
    607  1.32.2.2  skrll 	 * The destination address should be in the node table
    608  1.32.2.2  skrll 	 * unless we are operating in station mode or this is a
    609  1.32.2.2  skrll 	 * multicast/broadcast frame.
    610  1.32.2.2  skrll 	 */
    611  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_STA || IEEE80211_IS_MULTICAST(macaddr))
    612  1.32.2.3  skrll 		return ieee80211_ref_node(ic->ic_bss);
    613  1.32.2.2  skrll 
    614  1.32.2.2  skrll 	/* XXX can't hold lock across dup_bss 'cuz of recursive locking */
    615  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    616  1.32.2.2  skrll 	ni = _ieee80211_find_node(ic, macaddr);
    617  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    618  1.32.2.6  skrll 	if (ni == NULL) {
    619  1.32.2.6  skrll 		if (ic->ic_opmode != IEEE80211_M_IBSS &&
    620  1.32.2.6  skrll 		    ic->ic_opmode != IEEE80211_M_AHDEMO)
    621  1.32.2.6  skrll 			return NULL;
    622  1.32.2.2  skrll 		/*
    623  1.32.2.2  skrll 		 * Fake up a node; this handles node discovery in
    624  1.32.2.2  skrll 		 * adhoc mode.  Note that for the driver's benefit
    625  1.32.2.2  skrll 		 * we we treat this like an association so the driver
    626  1.32.2.2  skrll 		 * has an opportunity to setup it's private state.
    627  1.32.2.2  skrll 		 *
    628  1.32.2.2  skrll 		 * XXX need better way to handle this; issue probe
    629  1.32.2.2  skrll 		 *     request so we can deduce rate set, etc.
    630  1.32.2.2  skrll 		 */
    631  1.32.2.6  skrll 		if ((ni = ieee80211_dup_bss(ic, macaddr)) == NULL)
    632  1.32.2.6  skrll 			return NULL;
    633  1.32.2.6  skrll 		/* XXX no rate negotiation; just dup */
    634  1.32.2.6  skrll 		ni->ni_rates = ic->ic_bss->ni_rates;
    635  1.32.2.6  skrll 		if (ic->ic_newassoc)
    636  1.32.2.6  skrll 			(*ic->ic_newassoc)(ic, ni, 1);
    637  1.32.2.2  skrll 	}
    638  1.32.2.3  skrll 	return ieee80211_ref_node(ni);
    639  1.32.2.2  skrll }
    640  1.32.2.2  skrll 
    641  1.32.2.2  skrll /*
    642  1.32.2.2  skrll  * It is usually desirable to process a Rx packet using its sender's
    643  1.32.2.2  skrll  * node-record instead of the BSS record.
    644  1.32.2.2  skrll  *
    645  1.32.2.2  skrll  *  - AP mode: keep a node-record for every authenticated/associated
    646  1.32.2.2  skrll  *    station *in the BSS*. For future use, we also track neighboring
    647  1.32.2.2  skrll  *    APs, since they might belong to the same ESS.  APs in the same
    648  1.32.2.2  skrll  *    ESS may bridge packets to each other, forming a Wireless
    649  1.32.2.2  skrll  *    Distribution System (WDS).
    650  1.32.2.2  skrll  *
    651  1.32.2.2  skrll  * - IBSS mode: keep a node-record for every station *in the BSS*.
    652  1.32.2.2  skrll  *   Also track neighboring stations by their beacons/probe responses.
    653  1.32.2.2  skrll  *
    654  1.32.2.2  skrll  * - monitor mode: keep a node-record for every sender, regardless
    655  1.32.2.2  skrll  *   of BSS.
    656  1.32.2.2  skrll  *
    657  1.32.2.2  skrll  * - STA mode: the only available node-record is the BSS record,
    658  1.32.2.2  skrll  *   ic->ic_bss.
    659  1.32.2.2  skrll  *
    660  1.32.2.2  skrll  * Of all the 802.11 Control packets, only the node-records for
    661  1.32.2.2  skrll  * RTS packets node-record can be looked up.
    662  1.32.2.2  skrll  *
    663  1.32.2.2  skrll  * Return non-zero if the packet's node-record is kept, zero
    664  1.32.2.2  skrll  * otherwise.
    665  1.32.2.2  skrll  */
    666  1.32.2.2  skrll static __inline int
    667  1.32.2.2  skrll ieee80211_needs_rxnode(struct ieee80211com *ic, struct ieee80211_frame *wh,
    668  1.32.2.2  skrll     u_int8_t **bssid)
    669  1.32.2.2  skrll {
    670  1.32.2.2  skrll 	struct ieee80211_node *bss = ic->ic_bss;
    671  1.32.2.2  skrll 	int monitor, rc = 0;
    672  1.32.2.2  skrll 
    673  1.32.2.2  skrll 	monitor = (ic->ic_opmode == IEEE80211_M_MONITOR);
    674  1.32.2.2  skrll 
    675  1.32.2.2  skrll 	*bssid = NULL;
    676  1.32.2.2  skrll 
    677  1.32.2.2  skrll 	switch (wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) {
    678  1.32.2.2  skrll 	case IEEE80211_FC0_TYPE_CTL:
    679  1.32.2.2  skrll 		if (!monitor)
    680  1.32.2.2  skrll 			break;
    681  1.32.2.2  skrll 		return (wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) ==
    682  1.32.2.2  skrll 		    IEEE80211_FC0_SUBTYPE_RTS;
    683  1.32.2.2  skrll 	case IEEE80211_FC0_TYPE_MGT:
    684  1.32.2.2  skrll 		*bssid = wh->i_addr3;
    685  1.32.2.2  skrll 		switch (wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) {
    686  1.32.2.2  skrll 		case IEEE80211_FC0_SUBTYPE_BEACON:
    687  1.32.2.2  skrll 		case IEEE80211_FC0_SUBTYPE_PROBE_RESP:
    688  1.32.2.2  skrll 			rc = 1;
    689  1.32.2.2  skrll 			break;
    690  1.32.2.2  skrll 		default:
    691  1.32.2.3  skrll 			if (ic->ic_opmode == IEEE80211_M_STA)
    692  1.32.2.3  skrll 				break;
    693  1.32.2.3  skrll 			rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid) ||
    694  1.32.2.3  skrll 			     IEEE80211_ADDR_EQ(*bssid, etherbroadcastaddr);
    695  1.32.2.2  skrll 			break;
    696  1.32.2.2  skrll 		}
    697  1.32.2.2  skrll 		break;
    698  1.32.2.2  skrll 	case IEEE80211_FC0_TYPE_DATA:
    699  1.32.2.2  skrll 		switch (wh->i_fc[1] & IEEE80211_FC1_DIR_MASK) {
    700  1.32.2.2  skrll 		case IEEE80211_FC1_DIR_NODS:
    701  1.32.2.2  skrll 			*bssid = wh->i_addr3;
    702  1.32.2.2  skrll 			if (ic->ic_opmode == IEEE80211_M_IBSS ||
    703  1.32.2.2  skrll 			    ic->ic_opmode == IEEE80211_M_AHDEMO)
    704  1.32.2.2  skrll 				rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid);
    705  1.32.2.2  skrll 			break;
    706  1.32.2.2  skrll 		case IEEE80211_FC1_DIR_TODS:
    707  1.32.2.2  skrll 			*bssid = wh->i_addr1;
    708  1.32.2.2  skrll 			if (ic->ic_opmode == IEEE80211_M_HOSTAP)
    709  1.32.2.2  skrll 				rc = IEEE80211_ADDR_EQ(*bssid, bss->ni_bssid);
    710  1.32.2.2  skrll 			break;
    711  1.32.2.2  skrll 		case IEEE80211_FC1_DIR_FROMDS:
    712  1.32.2.2  skrll 		case IEEE80211_FC1_DIR_DSTODS:
    713  1.32.2.2  skrll 			*bssid = wh->i_addr2;
    714  1.32.2.2  skrll 			rc = (ic->ic_opmode == IEEE80211_M_HOSTAP);
    715  1.32.2.2  skrll 			break;
    716  1.32.2.2  skrll 		}
    717  1.32.2.2  skrll 		break;
    718  1.32.2.2  skrll 	}
    719  1.32.2.2  skrll 	return monitor || rc;
    720  1.32.2.2  skrll }
    721  1.32.2.2  skrll 
    722  1.32.2.3  skrll /* Drivers call this, so increase the reference count before returning
    723  1.32.2.3  skrll  * the node.
    724  1.32.2.3  skrll  */
    725  1.32.2.2  skrll struct ieee80211_node *
    726  1.32.2.2  skrll ieee80211_find_rxnode(struct ieee80211com *ic, struct ieee80211_frame *wh)
    727  1.32.2.2  skrll {
    728  1.32.2.2  skrll 	struct ieee80211_node *ni;
    729  1.32.2.2  skrll 	const static u_int8_t zero[IEEE80211_ADDR_LEN];
    730  1.32.2.2  skrll 	u_int8_t *bssid;
    731  1.32.2.2  skrll 
    732  1.32.2.2  skrll 	if (!ieee80211_needs_rxnode(ic, wh, &bssid))
    733  1.32.2.2  skrll 	        return ieee80211_ref_node(ic->ic_bss);
    734  1.32.2.2  skrll 
    735  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    736  1.32.2.2  skrll 	ni = _ieee80211_find_node(ic, wh->i_addr2);
    737  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    738  1.32.2.2  skrll 
    739  1.32.2.2  skrll 	if (ni != NULL)
    740  1.32.2.3  skrll 		return ieee80211_ref_node(ni);
    741  1.32.2.2  skrll 
    742  1.32.2.2  skrll 	if (ic->ic_opmode == IEEE80211_M_HOSTAP)
    743  1.32.2.2  skrll 		return ieee80211_ref_node(ic->ic_bss);
    744  1.32.2.2  skrll 
    745  1.32.2.2  skrll 	/* XXX see remarks in ieee80211_find_txnode */
    746  1.32.2.2  skrll 	/* XXX no rate negotiation; just dup */
    747  1.32.2.2  skrll 	if ((ni = ieee80211_dup_bss(ic, wh->i_addr2)) == NULL)
    748  1.32.2.2  skrll 		return ieee80211_ref_node(ic->ic_bss);
    749  1.32.2.2  skrll 
    750  1.32.2.2  skrll 	IEEE80211_ADDR_COPY(ni->ni_bssid, (bssid != NULL) ? bssid : zero);
    751  1.32.2.2  skrll 
    752  1.32.2.2  skrll 	ni->ni_rates = ic->ic_bss->ni_rates;
    753  1.32.2.2  skrll 	if (ic->ic_newassoc)
    754  1.32.2.2  skrll 		(*ic->ic_newassoc)(ic, ni, 1);
    755  1.32.2.2  skrll 
    756  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE,
    757  1.32.2.2  skrll 		("%s: faked-up node %p for %s\n", __func__, ni,
    758  1.32.2.2  skrll 		ether_sprintf(wh->i_addr2)));
    759  1.32.2.2  skrll 
    760  1.32.2.2  skrll 	return ieee80211_ref_node(ni);
    761  1.32.2.2  skrll }
    762  1.32.2.2  skrll 
    763  1.32.2.2  skrll /*
    764  1.32.2.2  skrll  * Like find but search based on the channel too.
    765  1.32.2.6  skrll  *
    766  1.32.2.6  skrll  * Note that ieee80211_find_node_for_beacon does not increase the
    767  1.32.2.6  skrll  * reference count before returning the node, because drivers are not
    768  1.32.2.6  skrll  * expected to call it.
    769  1.32.2.2  skrll  */
    770  1.32.2.2  skrll struct ieee80211_node *
    771  1.32.2.2  skrll ieee80211_find_node_for_beacon(struct ieee80211com *ic, u_int8_t *macaddr,
    772  1.32.2.2  skrll 	struct ieee80211_channel *chan, char *ssid)
    773  1.32.2.2  skrll {
    774  1.32.2.3  skrll 	struct ieee80211_node *ni, *best;
    775  1.32.2.2  skrll 	int hash;
    776  1.32.2.3  skrll 	int best_score, score;
    777  1.32.2.3  skrll 
    778  1.32.2.3  skrll 	best = NULL;
    779  1.32.2.3  skrll 	best_score = -1;
    780  1.32.2.2  skrll 
    781  1.32.2.2  skrll 	hash = IEEE80211_NODE_HASH(macaddr);
    782  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    783  1.32.2.2  skrll 	LIST_FOREACH(ni, &ic->ic_hash[hash], ni_hash) {
    784  1.32.2.3  skrll 		if (!IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr))
    785  1.32.2.3  skrll 			continue;
    786  1.32.2.3  skrll 
    787  1.32.2.3  skrll 		score = (ni->ni_chan == chan) ? 1 : 0;
    788  1.32.2.3  skrll 
    789  1.32.2.3  skrll 		if (ssid[1] == 0 || ni->ni_esslen == 0)
    790  1.32.2.3  skrll 			score++;
    791  1.32.2.3  skrll 		else if (ssid[1] != ni->ni_esslen ||
    792  1.32.2.3  skrll 		     memcmp(ssid + 2, ni->ni_essid, ssid[1]) != 0)
    793  1.32.2.3  skrll 			continue;
    794  1.32.2.3  skrll 
    795  1.32.2.3  skrll 		if (score > best_score) {
    796  1.32.2.6  skrll 			best = ni;
    797  1.32.2.3  skrll 			best_score = score;
    798  1.32.2.2  skrll 		}
    799  1.32.2.2  skrll 	}
    800  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    801  1.32.2.3  skrll 	return best;
    802  1.32.2.2  skrll }
    803  1.32.2.2  skrll 
    804  1.32.2.2  skrll static void
    805  1.32.2.3  skrll ieee80211_free_node(struct ieee80211com *ic, struct ieee80211_node *ni)
    806  1.32.2.2  skrll {
    807  1.32.2.2  skrll 	IASSERT(ni != ic->ic_bss, ("freeing bss node"));
    808  1.32.2.2  skrll 
    809  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE,
    810  1.32.2.2  skrll 		("%s %s\n", __func__, ether_sprintf(ni->ni_macaddr)));
    811  1.32.2.2  skrll 	IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap);
    812  1.32.2.2  skrll 	TAILQ_REMOVE(&ic->ic_node, ni, ni_list);
    813  1.32.2.2  skrll 	LIST_REMOVE(ni, ni_hash);
    814  1.32.2.3  skrll 	ic->ic_nnodes--;
    815  1.32.2.2  skrll 	if (!IF_IS_EMPTY(&ni->ni_savedq)) {
    816  1.32.2.2  skrll 		IF_PURGE(&ni->ni_savedq);
    817  1.32.2.2  skrll 		if (ic->ic_set_tim)
    818  1.32.2.2  skrll 			(*ic->ic_set_tim)(ic, ni->ni_associd, 0);
    819  1.32.2.2  skrll 	}
    820  1.32.2.2  skrll 	if (TAILQ_EMPTY(&ic->ic_node))
    821  1.32.2.2  skrll 		ic->ic_inact_timer = 0;
    822  1.32.2.2  skrll 	(*ic->ic_node_free)(ic, ni);
    823  1.32.2.3  skrll 	/* TBD indicate to drivers that a new node can be allocated */
    824  1.32.2.2  skrll }
    825  1.32.2.2  skrll 
    826  1.32.2.2  skrll void
    827  1.32.2.3  skrll ieee80211_release_node(struct ieee80211com *ic, struct ieee80211_node *ni)
    828  1.32.2.2  skrll {
    829  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE,
    830  1.32.2.2  skrll 		("%s %s refcnt %d\n", __func__,
    831  1.32.2.2  skrll 		 ether_sprintf(ni->ni_macaddr), ni->ni_refcnt));
    832  1.32.2.3  skrll 	if (ieee80211_node_decref(ni) == 0 &&
    833  1.32.2.3  skrll 	    ni->ni_state == IEEE80211_STA_COLLECT) {
    834  1.32.2.2  skrll 		IEEE80211_NODE_LOCK_BH(ic);
    835  1.32.2.3  skrll 		ieee80211_free_node(ic, ni);
    836  1.32.2.2  skrll 		IEEE80211_NODE_UNLOCK_BH(ic);
    837  1.32.2.2  skrll 	}
    838  1.32.2.2  skrll }
    839  1.32.2.2  skrll 
    840  1.32.2.2  skrll void
    841  1.32.2.2  skrll ieee80211_free_allnodes(struct ieee80211com *ic)
    842  1.32.2.2  skrll {
    843  1.32.2.2  skrll 	struct ieee80211_node *ni;
    844  1.32.2.2  skrll 
    845  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, ("free all nodes\n"));
    846  1.32.2.2  skrll 	IEEE80211_NODE_LOCK_BH(ic);
    847  1.32.2.2  skrll 	while ((ni = TAILQ_FIRST(&ic->ic_node)) != NULL)
    848  1.32.2.3  skrll 		ieee80211_free_node(ic, ni);
    849  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK_BH(ic);
    850  1.32.2.2  skrll 
    851  1.32.2.2  skrll 	if (ic->ic_bss != NULL)
    852  1.32.2.2  skrll 		node_cleanup(ic, ic->ic_bss);	/* for station mode */
    853  1.32.2.2  skrll }
    854  1.32.2.2  skrll 
    855  1.32.2.2  skrll /*
    856  1.32.2.2  skrll  * Timeout inactive nodes.  Note that we cannot hold the node
    857  1.32.2.2  skrll  * lock while sending a frame as this would lead to a LOR.
    858  1.32.2.2  skrll  * Instead we use a generation number to mark nodes that we've
    859  1.32.2.2  skrll  * scanned and drop the lock and restart a scan if we have to
    860  1.32.2.2  skrll  * time out a node.  Since we are single-threaded by virtue of
    861  1.32.2.2  skrll  * controlling the inactivity timer we can be sure this will
    862  1.32.2.2  skrll  * process each node only once.
    863  1.32.2.2  skrll  */
    864  1.32.2.2  skrll void
    865  1.32.2.3  skrll ieee80211_clean_nodes(struct ieee80211com *ic)
    866  1.32.2.2  skrll {
    867  1.32.2.2  skrll 	struct ieee80211_node *ni;
    868  1.32.2.2  skrll 	u_int gen = ic->ic_scangen++;		/* NB: ok 'cuz single-threaded*/
    869  1.32.2.2  skrll 
    870  1.32.2.2  skrll restart:
    871  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    872  1.32.2.2  skrll 	TAILQ_FOREACH(ni, &ic->ic_node, ni_list) {
    873  1.32.2.3  skrll 		if (ic->ic_nnodes <= ic->ic_max_nnodes)
    874  1.32.2.3  skrll 			break;
    875  1.32.2.2  skrll 		if (ni->ni_scangen == gen)	/* previously handled */
    876  1.32.2.2  skrll 			continue;
    877  1.32.2.2  skrll 		ni->ni_scangen = gen;
    878  1.32.2.3  skrll 		if (ni->ni_refcnt > 0)
    879  1.32.2.3  skrll 			continue;
    880  1.32.2.3  skrll 		IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE,
    881  1.32.2.3  skrll 		    ("station %s purged from LRU cache\n",
    882  1.32.2.3  skrll 		    ether_sprintf(ni->ni_macaddr)));
    883  1.32.2.3  skrll 		/*
    884  1.32.2.3  skrll 		 * Send a deauthenticate frame.
    885  1.32.2.3  skrll 		 *
    886  1.32.2.3  skrll 		 * Drop the node lock before sending the
    887  1.32.2.3  skrll 		 * deauthentication frame in case the driver takes
    888  1.32.2.3  skrll 		 * a lock, as this will result in a LOR between the
    889  1.32.2.3  skrll 		 * node lock and the driver lock.
    890  1.32.2.3  skrll 		 */
    891  1.32.2.3  skrll 		IEEE80211_NODE_UNLOCK(ic);
    892  1.32.2.3  skrll 		if (ic->ic_opmode == IEEE80211_M_HOSTAP) {
    893  1.32.2.3  skrll 			IEEE80211_SEND_MGMT(ic, ni,
    894  1.32.2.3  skrll 			    IEEE80211_FC0_SUBTYPE_DEAUTH,
    895  1.32.2.3  skrll 			    IEEE80211_REASON_AUTH_EXPIRE);
    896  1.32.2.3  skrll 			ieee80211_node_leave(ic, ni);
    897  1.32.2.3  skrll 		} else
    898  1.32.2.3  skrll 			ieee80211_free_node(ic, ni);
    899  1.32.2.3  skrll 		ic->ic_stats.is_node_timeout++;
    900  1.32.2.3  skrll 		goto restart;
    901  1.32.2.2  skrll 	}
    902  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    903  1.32.2.2  skrll }
    904  1.32.2.2  skrll 
    905  1.32.2.2  skrll void
    906  1.32.2.2  skrll ieee80211_iterate_nodes(struct ieee80211com *ic, ieee80211_iter_func *f, void *arg)
    907  1.32.2.2  skrll {
    908  1.32.2.2  skrll 	struct ieee80211_node *ni;
    909  1.32.2.2  skrll 
    910  1.32.2.2  skrll 	IEEE80211_NODE_LOCK(ic);
    911  1.32.2.2  skrll 	TAILQ_FOREACH(ni, &ic->ic_node, ni_list)
    912  1.32.2.2  skrll 		(*f)(arg, ni);
    913  1.32.2.2  skrll 	IEEE80211_NODE_UNLOCK(ic);
    914  1.32.2.2  skrll }
    915  1.32.2.2  skrll 
    916  1.32.2.2  skrll void
    917  1.32.2.2  skrll ieee80211_node_join(struct ieee80211com *ic, struct ieee80211_node *ni, int resp)
    918  1.32.2.2  skrll {
    919  1.32.2.2  skrll 	int newassoc;
    920  1.32.2.2  skrll 
    921  1.32.2.2  skrll 	if (ni->ni_associd == 0) {
    922  1.32.2.2  skrll 		u_int16_t aid;
    923  1.32.2.2  skrll 
    924  1.32.2.2  skrll 		/*
    925  1.32.2.2  skrll 		 * It would be clever to search the bitmap
    926  1.32.2.2  skrll 		 * more efficiently, but this will do for now.
    927  1.32.2.2  skrll 		 */
    928  1.32.2.2  skrll 		for (aid = 1; aid < ic->ic_max_aid; aid++) {
    929  1.32.2.2  skrll 			if (!IEEE80211_AID_ISSET(aid,
    930  1.32.2.2  skrll 			    ic->ic_aid_bitmap))
    931  1.32.2.2  skrll 				break;
    932  1.32.2.2  skrll 		}
    933  1.32.2.2  skrll 		if (aid >= ic->ic_max_aid) {
    934  1.32.2.2  skrll 			IEEE80211_SEND_MGMT(ic, ni, resp,
    935  1.32.2.2  skrll 			    IEEE80211_REASON_ASSOC_TOOMANY);
    936  1.32.2.2  skrll 			ieee80211_node_leave(ic, ni);
    937  1.32.2.2  skrll 			return;
    938  1.32.2.2  skrll 		}
    939  1.32.2.2  skrll 		ni->ni_associd = aid | 0xc000;
    940  1.32.2.2  skrll 		IEEE80211_AID_SET(ni->ni_associd, ic->ic_aid_bitmap);
    941  1.32.2.2  skrll 		newassoc = 1;
    942  1.32.2.2  skrll 		/* XXX for 11g must turn off short slot time if long
    943  1.32.2.2  skrll 		   slot time sta associates */
    944  1.32.2.2  skrll 	} else
    945  1.32.2.2  skrll 		newassoc = 0;
    946  1.32.2.2  skrll 
    947  1.32.2.2  skrll 	IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG,
    948  1.32.2.2  skrll 		("station %s %s associated at aid %d\n",
    949  1.32.2.2  skrll 		ether_sprintf(ni->ni_macaddr),
    950  1.32.2.2  skrll 		(newassoc ? "newly" : "already"),
    951  1.32.2.2  skrll 		ni->ni_associd & ~0xc000));
    952  1.32.2.2  skrll 
    953  1.32.2.2  skrll 	/* give driver a chance to setup state like ni_txrate */
    954  1.32.2.2  skrll 	if (ic->ic_newassoc)
    955  1.32.2.2  skrll 		(*ic->ic_newassoc)(ic, ni, newassoc);
    956  1.32.2.2  skrll 	IEEE80211_SEND_MGMT(ic, ni, resp, IEEE80211_STATUS_SUCCESS);
    957  1.32.2.3  skrll 	ieee80211_node_newstate(ni, IEEE80211_STA_ASSOC);
    958  1.32.2.2  skrll }
    959  1.32.2.2  skrll 
    960  1.32.2.2  skrll /*
    961  1.32.2.2  skrll  * Handle bookkeeping for station deauthentication/disassociation
    962  1.32.2.2  skrll  * when operating as an ap.
    963  1.32.2.2  skrll  */
    964  1.32.2.2  skrll void
    965  1.32.2.2  skrll ieee80211_node_leave(struct ieee80211com *ic, struct ieee80211_node *ni)
    966  1.32.2.2  skrll {
    967  1.32.2.2  skrll 
    968  1.32.2.2  skrll 	IASSERT(ic->ic_opmode == IEEE80211_M_HOSTAP,
    969  1.32.2.2  skrll 		("not in ap mode, mode %u", ic->ic_opmode));
    970  1.32.2.2  skrll 	/*
    971  1.32.2.2  skrll 	 * If node wasn't previously associated all
    972  1.32.2.2  skrll 	 * we need to do is reclaim the reference.
    973  1.32.2.2  skrll 	 */
    974  1.32.2.2  skrll 	if (ni->ni_associd == 0)
    975  1.32.2.3  skrll 		return;
    976  1.32.2.2  skrll 	IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap);
    977  1.32.2.2  skrll 	ni->ni_associd = 0;
    978  1.32.2.3  skrll 	ieee80211_node_newstate(ni, IEEE80211_STA_COLLECT);
    979  1.32.2.2  skrll }
    980