ieee80211_node.c revision 1.32.2.9
1 1.32.2.9 skrll /* $NetBSD: ieee80211_node.c,v 1.32.2.9 2005/11/10 14:10:51 skrll Exp $ */ 2 1.32.2.2 skrll /*- 3 1.32.2.2 skrll * Copyright (c) 2001 Atsushi Onoe 4 1.32.2.9 skrll * Copyright (c) 2002-2005 Sam Leffler, Errno Consulting 5 1.32.2.2 skrll * All rights reserved. 6 1.32.2.2 skrll * 7 1.32.2.2 skrll * Redistribution and use in source and binary forms, with or without 8 1.32.2.2 skrll * modification, are permitted provided that the following conditions 9 1.32.2.2 skrll * are met: 10 1.32.2.2 skrll * 1. Redistributions of source code must retain the above copyright 11 1.32.2.2 skrll * notice, this list of conditions and the following disclaimer. 12 1.32.2.2 skrll * 2. Redistributions in binary form must reproduce the above copyright 13 1.32.2.2 skrll * notice, this list of conditions and the following disclaimer in the 14 1.32.2.2 skrll * documentation and/or other materials provided with the distribution. 15 1.32.2.2 skrll * 3. The name of the author may not be used to endorse or promote products 16 1.32.2.2 skrll * derived from this software without specific prior written permission. 17 1.32.2.2 skrll * 18 1.32.2.2 skrll * Alternatively, this software may be distributed under the terms of the 19 1.32.2.2 skrll * GNU General Public License ("GPL") version 2 as published by the Free 20 1.32.2.2 skrll * Software Foundation. 21 1.32.2.2 skrll * 22 1.32.2.2 skrll * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 23 1.32.2.2 skrll * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 24 1.32.2.2 skrll * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 25 1.32.2.2 skrll * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 26 1.32.2.2 skrll * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 27 1.32.2.2 skrll * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 28 1.32.2.2 skrll * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 29 1.32.2.2 skrll * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 30 1.32.2.2 skrll * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 31 1.32.2.2 skrll * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 1.32.2.2 skrll */ 33 1.32.2.2 skrll 34 1.32.2.2 skrll #include <sys/cdefs.h> 35 1.32.2.2 skrll #ifdef __FreeBSD__ 36 1.32.2.9 skrll __FBSDID("$FreeBSD: src/sys/net80211/ieee80211_node.c,v 1.48 2005/07/06 01:51:44 sam Exp $"); 37 1.32.2.9 skrll #endif 38 1.32.2.9 skrll #ifdef __NetBSD__ 39 1.32.2.9 skrll __KERNEL_RCSID(0, "$NetBSD: ieee80211_node.c,v 1.32.2.9 2005/11/10 14:10:51 skrll Exp $"); 40 1.32.2.2 skrll #endif 41 1.32.2.2 skrll 42 1.32.2.2 skrll #include "opt_inet.h" 43 1.32.2.2 skrll 44 1.32.2.2 skrll #include <sys/param.h> 45 1.32.2.9 skrll #include <sys/systm.h> 46 1.32.2.9 skrll #include <sys/mbuf.h> 47 1.32.2.2 skrll #include <sys/malloc.h> 48 1.32.2.2 skrll #include <sys/kernel.h> 49 1.32.2.9 skrll 50 1.32.2.2 skrll #include <sys/socket.h> 51 1.32.2.2 skrll #include <sys/sockio.h> 52 1.32.2.2 skrll #include <sys/endian.h> 53 1.32.2.2 skrll #include <sys/errno.h> 54 1.32.2.2 skrll #include <sys/proc.h> 55 1.32.2.2 skrll #include <sys/sysctl.h> 56 1.32.2.2 skrll 57 1.32.2.2 skrll #include <net/if.h> 58 1.32.2.2 skrll #include <net/if_media.h> 59 1.32.2.2 skrll #include <net/if_arp.h> 60 1.32.2.2 skrll #include <net/if_ether.h> 61 1.32.2.2 skrll #include <net/if_llc.h> 62 1.32.2.2 skrll 63 1.32.2.9 skrll #include <net80211/ieee80211_netbsd.h> 64 1.32.2.2 skrll #include <net80211/ieee80211_var.h> 65 1.32.2.2 skrll 66 1.32.2.2 skrll #include <net/bpf.h> 67 1.32.2.2 skrll 68 1.32.2.2 skrll #ifdef INET 69 1.32.2.9 skrll #include <netinet/in.h> 70 1.32.2.2 skrll #include <net/if_ether.h> 71 1.32.2.2 skrll #endif 72 1.32.2.2 skrll 73 1.32.2.9 skrll /* 74 1.32.2.9 skrll * Association id's are managed with a bit vector. 75 1.32.2.9 skrll */ 76 1.32.2.9 skrll #define IEEE80211_AID_SET(b, w) \ 77 1.32.2.9 skrll ((w)[IEEE80211_AID(b) / 32] |= (1 << (IEEE80211_AID(b) % 32))) 78 1.32.2.9 skrll #define IEEE80211_AID_CLR(b, w) \ 79 1.32.2.9 skrll ((w)[IEEE80211_AID(b) / 32] &= ~(1 << (IEEE80211_AID(b) % 32))) 80 1.32.2.9 skrll #define IEEE80211_AID_ISSET(b, w) \ 81 1.32.2.9 skrll ((w)[IEEE80211_AID(b) / 32] & (1 << (IEEE80211_AID(b) % 32))) 82 1.32.2.9 skrll 83 1.32.2.9 skrll static struct ieee80211_node *node_alloc(struct ieee80211_node_table *); 84 1.32.2.9 skrll static void node_cleanup(struct ieee80211_node *); 85 1.32.2.9 skrll static void node_free(struct ieee80211_node *); 86 1.32.2.9 skrll static u_int8_t node_getrssi(const struct ieee80211_node *); 87 1.32.2.9 skrll 88 1.32.2.9 skrll static void ieee80211_setup_node(struct ieee80211_node_table *, 89 1.32.2.9 skrll struct ieee80211_node *, const u_int8_t *); 90 1.32.2.9 skrll static void _ieee80211_free_node(struct ieee80211_node *); 91 1.32.2.9 skrll static void ieee80211_free_allnodes(struct ieee80211_node_table *); 92 1.32.2.9 skrll 93 1.32.2.9 skrll static void ieee80211_timeout_scan_candidates(struct ieee80211_node_table *); 94 1.32.2.9 skrll static void ieee80211_timeout_stations(struct ieee80211_node_table *); 95 1.32.2.9 skrll 96 1.32.2.9 skrll static void ieee80211_set_tim(struct ieee80211com *, 97 1.32.2.9 skrll struct ieee80211_node *, int set); 98 1.32.2.9 skrll 99 1.32.2.9 skrll static void ieee80211_node_table_init(struct ieee80211com *ic, 100 1.32.2.9 skrll struct ieee80211_node_table *nt, const char *name, int inact, 101 1.32.2.9 skrll void (*timeout)(struct ieee80211_node_table *)); 102 1.32.2.9 skrll static void ieee80211_node_table_cleanup(struct ieee80211_node_table *nt); 103 1.32.2.2 skrll 104 1.32.2.2 skrll MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state"); 105 1.32.2.2 skrll 106 1.32.2.2 skrll void 107 1.32.2.2 skrll ieee80211_node_attach(struct ieee80211com *ic) 108 1.32.2.2 skrll { 109 1.32.2.2 skrll 110 1.32.2.9 skrll ieee80211_node_table_init(ic, &ic->ic_sta, "station", 111 1.32.2.9 skrll IEEE80211_INACT_INIT, ieee80211_timeout_stations); 112 1.32.2.9 skrll ieee80211_node_table_init(ic, &ic->ic_scan, "scan", 113 1.32.2.9 skrll IEEE80211_INACT_SCAN, ieee80211_timeout_scan_candidates); 114 1.32.2.9 skrll 115 1.32.2.9 skrll ic->ic_node_alloc = node_alloc; 116 1.32.2.9 skrll ic->ic_node_free = node_free; 117 1.32.2.9 skrll ic->ic_node_cleanup = node_cleanup; 118 1.32.2.9 skrll ic->ic_node_getrssi = node_getrssi; 119 1.32.2.9 skrll 120 1.32.2.9 skrll /* default station inactivity timer setings */ 121 1.32.2.9 skrll ic->ic_inact_init = IEEE80211_INACT_INIT; 122 1.32.2.9 skrll ic->ic_inact_auth = IEEE80211_INACT_AUTH; 123 1.32.2.9 skrll ic->ic_inact_run = IEEE80211_INACT_RUN; 124 1.32.2.9 skrll ic->ic_inact_probe = IEEE80211_INACT_PROBE; 125 1.32.2.2 skrll 126 1.32.2.9 skrll /* XXX defer */ 127 1.32.2.2 skrll if (ic->ic_max_aid == 0) 128 1.32.2.2 skrll ic->ic_max_aid = IEEE80211_AID_DEF; 129 1.32.2.2 skrll else if (ic->ic_max_aid > IEEE80211_AID_MAX) 130 1.32.2.2 skrll ic->ic_max_aid = IEEE80211_AID_MAX; 131 1.32.2.2 skrll MALLOC(ic->ic_aid_bitmap, u_int32_t *, 132 1.32.2.2 skrll howmany(ic->ic_max_aid, 32) * sizeof(u_int32_t), 133 1.32.2.2 skrll M_DEVBUF, M_NOWAIT | M_ZERO); 134 1.32.2.2 skrll if (ic->ic_aid_bitmap == NULL) { 135 1.32.2.2 skrll /* XXX no way to recover */ 136 1.32.2.2 skrll printf("%s: no memory for AID bitmap!\n", __func__); 137 1.32.2.2 skrll ic->ic_max_aid = 0; 138 1.32.2.2 skrll } 139 1.32.2.2 skrll 140 1.32.2.9 skrll /* XXX defer until using hostap/ibss mode */ 141 1.32.2.9 skrll ic->ic_tim_len = howmany(ic->ic_max_aid, 8) * sizeof(u_int8_t); 142 1.32.2.9 skrll MALLOC(ic->ic_tim_bitmap, u_int8_t *, ic->ic_tim_len, 143 1.32.2.9 skrll M_DEVBUF, M_NOWAIT | M_ZERO); 144 1.32.2.9 skrll if (ic->ic_tim_bitmap == NULL) { 145 1.32.2.9 skrll /* XXX no way to recover */ 146 1.32.2.9 skrll printf("%s: no memory for TIM bitmap!\n", __func__); 147 1.32.2.9 skrll } 148 1.32.2.9 skrll ic->ic_set_tim = ieee80211_set_tim; /* NB: driver should override */ 149 1.32.2.3 skrll } 150 1.32.2.3 skrll 151 1.32.2.2 skrll void 152 1.32.2.2 skrll ieee80211_node_lateattach(struct ieee80211com *ic) 153 1.32.2.2 skrll { 154 1.32.2.2 skrll struct ieee80211_node *ni; 155 1.32.2.9 skrll struct ieee80211_rsnparms *rsn; 156 1.32.2.2 skrll 157 1.32.2.9 skrll ni = ieee80211_alloc_node(&ic->ic_scan, ic->ic_myaddr); 158 1.32.2.2 skrll IASSERT(ni != NULL, ("unable to setup inital BSS node")); 159 1.32.2.9 skrll /* 160 1.32.2.9 skrll * Setup "global settings" in the bss node so that 161 1.32.2.9 skrll * each new station automatically inherits them. 162 1.32.2.9 skrll */ 163 1.32.2.9 skrll rsn = &ni->ni_rsn; 164 1.32.2.9 skrll /* WEP, TKIP, and AES-CCM are always supported */ 165 1.32.2.9 skrll rsn->rsn_ucastcipherset |= 1<<IEEE80211_CIPHER_WEP; 166 1.32.2.9 skrll rsn->rsn_ucastcipherset |= 1<<IEEE80211_CIPHER_TKIP; 167 1.32.2.9 skrll rsn->rsn_ucastcipherset |= 1<<IEEE80211_CIPHER_AES_CCM; 168 1.32.2.9 skrll if (ic->ic_caps & IEEE80211_C_AES) 169 1.32.2.9 skrll rsn->rsn_ucastcipherset |= 1<<IEEE80211_CIPHER_AES_OCB; 170 1.32.2.9 skrll if (ic->ic_caps & IEEE80211_C_CKIP) 171 1.32.2.9 skrll rsn->rsn_ucastcipherset |= 1<<IEEE80211_CIPHER_CKIP; 172 1.32.2.9 skrll /* 173 1.32.2.9 skrll * Default unicast cipher to WEP for 802.1x use. If 174 1.32.2.9 skrll * WPA is enabled the management code will set these 175 1.32.2.9 skrll * values to reflect. 176 1.32.2.9 skrll */ 177 1.32.2.9 skrll rsn->rsn_ucastcipher = IEEE80211_CIPHER_WEP; 178 1.32.2.9 skrll rsn->rsn_ucastkeylen = 104 / NBBY; 179 1.32.2.9 skrll /* 180 1.32.2.9 skrll * WPA says the multicast cipher is the lowest unicast 181 1.32.2.9 skrll * cipher supported. But we skip WEP which would 182 1.32.2.9 skrll * otherwise be used based on this criteria. 183 1.32.2.9 skrll */ 184 1.32.2.9 skrll rsn->rsn_mcastcipher = IEEE80211_CIPHER_TKIP; 185 1.32.2.9 skrll rsn->rsn_mcastkeylen = 128 / NBBY; 186 1.32.2.9 skrll 187 1.32.2.9 skrll /* 188 1.32.2.9 skrll * We support both WPA-PSK and 802.1x; the one used 189 1.32.2.9 skrll * is determined by the authentication mode and the 190 1.32.2.9 skrll * setting of the PSK state. 191 1.32.2.9 skrll */ 192 1.32.2.9 skrll rsn->rsn_keymgmtset = WPA_ASE_8021X_UNSPEC | WPA_ASE_8021X_PSK; 193 1.32.2.9 skrll rsn->rsn_keymgmt = WPA_ASE_8021X_PSK; 194 1.32.2.9 skrll 195 1.32.2.9 skrll ic->ic_bss = ieee80211_ref_node(ni); /* hold reference */ 196 1.32.2.9 skrll ic->ic_auth = ieee80211_authenticator_get(ni->ni_authmode); 197 1.32.2.2 skrll } 198 1.32.2.2 skrll 199 1.32.2.2 skrll void 200 1.32.2.2 skrll ieee80211_node_detach(struct ieee80211com *ic) 201 1.32.2.2 skrll { 202 1.32.2.2 skrll 203 1.32.2.2 skrll if (ic->ic_bss != NULL) { 204 1.32.2.9 skrll ieee80211_free_node(ic->ic_bss); 205 1.32.2.2 skrll ic->ic_bss = NULL; 206 1.32.2.2 skrll } 207 1.32.2.9 skrll ieee80211_node_table_cleanup(&ic->ic_scan); 208 1.32.2.9 skrll ieee80211_node_table_cleanup(&ic->ic_sta); 209 1.32.2.9 skrll if (ic->ic_aid_bitmap != NULL) { 210 1.32.2.9 skrll FREE(ic->ic_aid_bitmap, M_DEVBUF); 211 1.32.2.9 skrll ic->ic_aid_bitmap = NULL; 212 1.32.2.9 skrll } 213 1.32.2.9 skrll if (ic->ic_tim_bitmap != NULL) { 214 1.32.2.9 skrll FREE(ic->ic_tim_bitmap, M_DEVBUF); 215 1.32.2.9 skrll ic->ic_tim_bitmap = NULL; 216 1.32.2.9 skrll } 217 1.32.2.9 skrll } 218 1.32.2.9 skrll 219 1.32.2.9 skrll /* 220 1.32.2.9 skrll * Port authorize/unauthorize interfaces for use by an authenticator. 221 1.32.2.9 skrll */ 222 1.32.2.9 skrll 223 1.32.2.9 skrll void 224 1.32.2.9 skrll ieee80211_node_authorize(struct ieee80211com *ic, struct ieee80211_node *ni) 225 1.32.2.9 skrll { 226 1.32.2.9 skrll ni->ni_flags |= IEEE80211_NODE_AUTH; 227 1.32.2.9 skrll ni->ni_inact_reload = ic->ic_inact_run; 228 1.32.2.9 skrll } 229 1.32.2.9 skrll 230 1.32.2.9 skrll void 231 1.32.2.9 skrll ieee80211_node_unauthorize(struct ieee80211com *ic, struct ieee80211_node *ni) 232 1.32.2.9 skrll { 233 1.32.2.9 skrll ni->ni_flags &= ~IEEE80211_NODE_AUTH; 234 1.32.2.9 skrll } 235 1.32.2.9 skrll 236 1.32.2.9 skrll /* 237 1.32.2.9 skrll * Set/change the channel. The rate set is also updated as 238 1.32.2.9 skrll * to insure a consistent view by drivers. 239 1.32.2.9 skrll */ 240 1.32.2.9 skrll static __inline void 241 1.32.2.9 skrll ieee80211_set_chan(struct ieee80211com *ic, 242 1.32.2.9 skrll struct ieee80211_node *ni, struct ieee80211_channel *chan) 243 1.32.2.9 skrll { 244 1.32.2.9 skrll ni->ni_chan = chan; 245 1.32.2.9 skrll ni->ni_rates = ic->ic_sup_rates[ieee80211_chan2mode(ic, chan)]; 246 1.32.2.2 skrll } 247 1.32.2.2 skrll 248 1.32.2.2 skrll /* 249 1.32.2.2 skrll * AP scanning support. 250 1.32.2.2 skrll */ 251 1.32.2.2 skrll 252 1.32.2.9 skrll #ifdef IEEE80211_DEBUG 253 1.32.2.9 skrll static void 254 1.32.2.9 skrll dump_chanlist(const u_char chans[]) 255 1.32.2.9 skrll { 256 1.32.2.9 skrll const char *sep; 257 1.32.2.9 skrll int i; 258 1.32.2.9 skrll 259 1.32.2.9 skrll sep = " "; 260 1.32.2.9 skrll for (i = 0; i < IEEE80211_CHAN_MAX; i++) 261 1.32.2.9 skrll if (isset(chans, i)) { 262 1.32.2.9 skrll printf("%s%u", sep, i); 263 1.32.2.9 skrll sep = ", "; 264 1.32.2.9 skrll } 265 1.32.2.9 skrll } 266 1.32.2.9 skrll #endif /* IEEE80211_DEBUG */ 267 1.32.2.9 skrll 268 1.32.2.2 skrll /* 269 1.32.2.9 skrll * Initialize the channel set to scan based on the 270 1.32.2.2 skrll * of available channels and the current PHY mode. 271 1.32.2.2 skrll */ 272 1.32.2.2 skrll static void 273 1.32.2.2 skrll ieee80211_reset_scan(struct ieee80211com *ic) 274 1.32.2.2 skrll { 275 1.32.2.2 skrll 276 1.32.2.9 skrll /* XXX ic_des_chan should be handled with ic_chan_active */ 277 1.32.2.9 skrll if (ic->ic_des_chan != IEEE80211_CHAN_ANYC) { 278 1.32.2.9 skrll memset(ic->ic_chan_scan, 0, sizeof(ic->ic_chan_scan)); 279 1.32.2.9 skrll setbit(ic->ic_chan_scan, 280 1.32.2.9 skrll ieee80211_chan2ieee(ic, ic->ic_des_chan)); 281 1.32.2.9 skrll } else 282 1.32.2.9 skrll memcpy(ic->ic_chan_scan, ic->ic_chan_active, 283 1.32.2.9 skrll sizeof(ic->ic_chan_active)); 284 1.32.2.2 skrll /* NB: hack, setup so next_scan starts with the first channel */ 285 1.32.2.2 skrll if (ic->ic_bss->ni_chan == IEEE80211_CHAN_ANYC) 286 1.32.2.9 skrll ieee80211_set_chan(ic, ic->ic_bss, 287 1.32.2.9 skrll &ic->ic_channels[IEEE80211_CHAN_MAX]); 288 1.32.2.9 skrll #ifdef IEEE80211_DEBUG 289 1.32.2.9 skrll if (ieee80211_msg_scan(ic)) { 290 1.32.2.9 skrll printf("%s: scan set:", __func__); 291 1.32.2.9 skrll dump_chanlist(ic->ic_chan_scan); 292 1.32.2.9 skrll printf(" start chan %u\n", 293 1.32.2.9 skrll ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan)); 294 1.32.2.9 skrll } 295 1.32.2.9 skrll #endif /* IEEE80211_DEBUG */ 296 1.32.2.2 skrll } 297 1.32.2.2 skrll 298 1.32.2.2 skrll /* 299 1.32.2.2 skrll * Begin an active scan. 300 1.32.2.2 skrll */ 301 1.32.2.2 skrll void 302 1.32.2.9 skrll ieee80211_begin_scan(struct ieee80211com *ic, int reset) 303 1.32.2.2 skrll { 304 1.32.2.2 skrll 305 1.32.2.9 skrll ic->ic_scan.nt_scangen++; 306 1.32.2.2 skrll /* 307 1.32.2.2 skrll * In all but hostap mode scanning starts off in 308 1.32.2.2 skrll * an active mode before switching to passive. 309 1.32.2.2 skrll */ 310 1.32.2.2 skrll if (ic->ic_opmode != IEEE80211_M_HOSTAP) { 311 1.32.2.2 skrll ic->ic_flags |= IEEE80211_F_ASCAN; 312 1.32.2.2 skrll ic->ic_stats.is_scan_active++; 313 1.32.2.2 skrll } else 314 1.32.2.2 skrll ic->ic_stats.is_scan_passive++; 315 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 316 1.32.2.9 skrll "begin %s scan in %s mode, scangen %u\n", 317 1.32.2.9 skrll (ic->ic_flags & IEEE80211_F_ASCAN) ? "active" : "passive", 318 1.32.2.9 skrll ieee80211_phymode_name[ic->ic_curmode], ic->ic_scan.nt_scangen); 319 1.32.2.2 skrll /* 320 1.32.2.9 skrll * Clear scan state and flush any previously seen AP's. 321 1.32.2.2 skrll */ 322 1.32.2.2 skrll ieee80211_reset_scan(ic); 323 1.32.2.9 skrll if (reset) 324 1.32.2.9 skrll ieee80211_free_allnodes(&ic->ic_scan); 325 1.32.2.9 skrll 326 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_SCAN; 327 1.32.2.2 skrll 328 1.32.2.2 skrll /* Scan the next channel. */ 329 1.32.2.2 skrll ieee80211_next_scan(ic); 330 1.32.2.2 skrll } 331 1.32.2.2 skrll 332 1.32.2.2 skrll /* 333 1.32.2.2 skrll * Switch to the next channel marked for scanning. 334 1.32.2.2 skrll */ 335 1.32.2.9 skrll int 336 1.32.2.2 skrll ieee80211_next_scan(struct ieee80211com *ic) 337 1.32.2.2 skrll { 338 1.32.2.2 skrll struct ieee80211_channel *chan; 339 1.32.2.2 skrll 340 1.32.2.9 skrll /* 341 1.32.2.9 skrll * Insure any previous mgt frame timeouts don't fire. 342 1.32.2.9 skrll * This assumes the driver does the right thing in 343 1.32.2.9 skrll * flushing anything queued in the driver and below. 344 1.32.2.9 skrll */ 345 1.32.2.9 skrll ic->ic_mgt_timer = 0; 346 1.32.2.9 skrll 347 1.32.2.2 skrll chan = ic->ic_bss->ni_chan; 348 1.32.2.9 skrll do { 349 1.32.2.2 skrll if (++chan > &ic->ic_channels[IEEE80211_CHAN_MAX]) 350 1.32.2.2 skrll chan = &ic->ic_channels[0]; 351 1.32.2.2 skrll if (isset(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan))) { 352 1.32.2.9 skrll clrbit(ic->ic_chan_scan, ieee80211_chan2ieee(ic, chan)); 353 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 354 1.32.2.9 skrll "%s: chan %d->%d\n", __func__, 355 1.32.2.9 skrll ieee80211_chan2ieee(ic, ic->ic_bss->ni_chan), 356 1.32.2.9 skrll ieee80211_chan2ieee(ic, chan)); 357 1.32.2.9 skrll ieee80211_set_chan(ic, ic->ic_bss, chan); 358 1.32.2.9 skrll #ifdef notyet 359 1.32.2.9 skrll /* XXX driver state change */ 360 1.32.2.2 skrll /* 361 1.32.2.9 skrll * Scan next channel. If doing an active scan 362 1.32.2.9 skrll * and the channel is not marked passive-only 363 1.32.2.9 skrll * then send a probe request. Otherwise just 364 1.32.2.9 skrll * listen for beacons on the channel. 365 1.32.2.2 skrll */ 366 1.32.2.9 skrll if ((ic->ic_flags & IEEE80211_F_ASCAN) && 367 1.32.2.9 skrll (ni->ni_chan->ic_flags & IEEE80211_CHAN_PASSIVE) == 0) { 368 1.32.2.9 skrll IEEE80211_SEND_MGMT(ic, ni, 369 1.32.2.9 skrll IEEE80211_FC0_SUBTYPE_PROBE_REQ, 0); 370 1.32.2.9 skrll } 371 1.32.2.9 skrll #else 372 1.32.2.9 skrll ieee80211_new_state(ic, IEEE80211_S_SCAN, -1); 373 1.32.2.9 skrll #endif 374 1.32.2.9 skrll return 1; 375 1.32.2.2 skrll } 376 1.32.2.9 skrll } while (chan != ic->ic_bss->ni_chan); 377 1.32.2.9 skrll ieee80211_end_scan(ic); 378 1.32.2.9 skrll return 0; 379 1.32.2.9 skrll } 380 1.32.2.9 skrll 381 1.32.2.9 skrll static __inline void 382 1.32.2.9 skrll copy_bss(struct ieee80211_node *nbss, const struct ieee80211_node *obss) 383 1.32.2.9 skrll { 384 1.32.2.9 skrll /* propagate useful state */ 385 1.32.2.9 skrll nbss->ni_authmode = obss->ni_authmode; 386 1.32.2.9 skrll nbss->ni_txpower = obss->ni_txpower; 387 1.32.2.9 skrll nbss->ni_vlan = obss->ni_vlan; 388 1.32.2.9 skrll nbss->ni_rsn = obss->ni_rsn; 389 1.32.2.9 skrll /* XXX statistics? */ 390 1.32.2.2 skrll } 391 1.32.2.2 skrll 392 1.32.2.2 skrll void 393 1.32.2.2 skrll ieee80211_create_ibss(struct ieee80211com* ic, struct ieee80211_channel *chan) 394 1.32.2.2 skrll { 395 1.32.2.9 skrll struct ieee80211_node_table *nt; 396 1.32.2.2 skrll struct ieee80211_node *ni; 397 1.32.2.2 skrll 398 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 399 1.32.2.9 skrll "%s: creating ibss\n", __func__); 400 1.32.2.9 skrll 401 1.32.2.9 skrll /* 402 1.32.2.9 skrll * Create the station/neighbor table. Note that for adhoc 403 1.32.2.9 skrll * mode we make the initial inactivity timer longer since 404 1.32.2.9 skrll * we create nodes only through discovery and they typically 405 1.32.2.9 skrll * are long-lived associations. 406 1.32.2.9 skrll */ 407 1.32.2.9 skrll nt = &ic->ic_sta; 408 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 409 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 410 1.32.2.9 skrll nt->nt_name = "station"; 411 1.32.2.9 skrll nt->nt_inact_init = ic->ic_inact_init; 412 1.32.2.9 skrll } else { 413 1.32.2.9 skrll nt->nt_name = "neighbor"; 414 1.32.2.9 skrll nt->nt_inact_init = ic->ic_inact_run; 415 1.32.2.9 skrll } 416 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 417 1.32.2.9 skrll 418 1.32.2.9 skrll ni = ieee80211_alloc_node(nt, ic->ic_myaddr); 419 1.32.2.9 skrll if (ni == NULL) { 420 1.32.2.9 skrll /* XXX recovery? */ 421 1.32.2.9 skrll return; 422 1.32.2.2 skrll } 423 1.32.2.9 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_myaddr); 424 1.32.2.2 skrll ni->ni_esslen = ic->ic_des_esslen; 425 1.32.2.2 skrll memcpy(ni->ni_essid, ic->ic_des_essid, ni->ni_esslen); 426 1.32.2.9 skrll copy_bss(ni, ic->ic_bss); 427 1.32.2.2 skrll ni->ni_intval = ic->ic_lintval; 428 1.32.2.2 skrll if (ic->ic_flags & IEEE80211_F_PRIVACY) 429 1.32.2.2 skrll ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY; 430 1.32.2.2 skrll if (ic->ic_phytype == IEEE80211_T_FH) { 431 1.32.2.2 skrll ni->ni_fhdwell = 200; /* XXX */ 432 1.32.2.2 skrll ni->ni_fhindex = 1; 433 1.32.2.2 skrll } 434 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 435 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_SIBSS; 436 1.32.2.9 skrll ni->ni_capinfo |= IEEE80211_CAPINFO_IBSS; /* XXX */ 437 1.32.2.9 skrll if (ic->ic_flags & IEEE80211_F_DESBSSID) 438 1.32.2.9 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_des_bssid); 439 1.32.2.9 skrll else 440 1.32.2.9 skrll ni->ni_bssid[0] |= 0x02; /* local bit for IBSS */ 441 1.32.2.9 skrll } 442 1.32.2.9 skrll /* 443 1.32.2.9 skrll * Fix the channel and related attributes. 444 1.32.2.9 skrll */ 445 1.32.2.9 skrll ieee80211_set_chan(ic, ni, chan); 446 1.32.2.9 skrll ic->ic_curmode = ieee80211_chan2mode(ic, chan); 447 1.32.2.9 skrll /* 448 1.32.2.9 skrll * Do mode-specific rate setup. 449 1.32.2.9 skrll */ 450 1.32.2.9 skrll if (ic->ic_curmode == IEEE80211_MODE_11G) { 451 1.32.2.9 skrll /* 452 1.32.2.9 skrll * Use a mixed 11b/11g rate set. 453 1.32.2.9 skrll */ 454 1.32.2.9 skrll ieee80211_set11gbasicrates(&ni->ni_rates, IEEE80211_MODE_11G); 455 1.32.2.9 skrll } else if (ic->ic_curmode == IEEE80211_MODE_11B) { 456 1.32.2.9 skrll /* 457 1.32.2.9 skrll * Force pure 11b rate set. 458 1.32.2.9 skrll */ 459 1.32.2.9 skrll ieee80211_set11gbasicrates(&ni->ni_rates, IEEE80211_MODE_11B); 460 1.32.2.9 skrll } 461 1.32.2.9 skrll 462 1.32.2.9 skrll (void) ieee80211_sta_join(ic, ieee80211_ref_node(ni)); 463 1.32.2.2 skrll } 464 1.32.2.2 skrll 465 1.32.2.9 skrll void 466 1.32.2.9 skrll ieee80211_reset_bss(struct ieee80211com *ic) 467 1.32.2.9 skrll { 468 1.32.2.9 skrll struct ieee80211_node *ni, *obss; 469 1.32.2.9 skrll 470 1.32.2.9 skrll ieee80211_node_table_reset(&ic->ic_scan); 471 1.32.2.9 skrll ieee80211_node_table_reset(&ic->ic_sta); 472 1.32.2.9 skrll 473 1.32.2.9 skrll ni = ieee80211_alloc_node(&ic->ic_scan, ic->ic_myaddr); 474 1.32.2.9 skrll IASSERT(ni != NULL, ("unable to setup inital BSS node")); 475 1.32.2.9 skrll obss = ic->ic_bss; 476 1.32.2.9 skrll ic->ic_bss = ieee80211_ref_node(ni); 477 1.32.2.9 skrll if (obss != NULL) { 478 1.32.2.9 skrll copy_bss(ni, obss); 479 1.32.2.9 skrll ni->ni_intval = ic->ic_lintval; 480 1.32.2.9 skrll ieee80211_free_node(obss); 481 1.32.2.9 skrll } 482 1.32.2.9 skrll } 483 1.32.2.9 skrll 484 1.32.2.9 skrll static int 485 1.32.2.2 skrll ieee80211_match_bss(struct ieee80211com *ic, struct ieee80211_node *ni) 486 1.32.2.2 skrll { 487 1.32.2.2 skrll u_int8_t rate; 488 1.32.2.2 skrll int fail; 489 1.32.2.2 skrll 490 1.32.2.2 skrll fail = 0; 491 1.32.2.2 skrll if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 492 1.32.2.2 skrll fail |= 0x01; 493 1.32.2.2 skrll if (ic->ic_des_chan != IEEE80211_CHAN_ANYC && 494 1.32.2.2 skrll ni->ni_chan != ic->ic_des_chan) 495 1.32.2.2 skrll fail |= 0x01; 496 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 497 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 498 1.32.2.2 skrll fail |= 0x02; 499 1.32.2.2 skrll } else { 500 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 501 1.32.2.2 skrll fail |= 0x02; 502 1.32.2.2 skrll } 503 1.32.2.2 skrll if (ic->ic_flags & IEEE80211_F_PRIVACY) { 504 1.32.2.2 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 505 1.32.2.2 skrll fail |= 0x04; 506 1.32.2.2 skrll } else { 507 1.32.2.2 skrll /* XXX does this mean privacy is supported or required? */ 508 1.32.2.2 skrll if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 509 1.32.2.2 skrll fail |= 0x04; 510 1.32.2.2 skrll } 511 1.32.2.9 skrll rate = ieee80211_fix_rate(ic, ni, 512 1.32.2.9 skrll IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 513 1.32.2.2 skrll if (rate & IEEE80211_RATE_BASIC) 514 1.32.2.2 skrll fail |= 0x08; 515 1.32.2.2 skrll if (ic->ic_des_esslen != 0 && 516 1.32.2.2 skrll (ni->ni_esslen != ic->ic_des_esslen || 517 1.32.2.2 skrll memcmp(ni->ni_essid, ic->ic_des_essid, ic->ic_des_esslen) != 0)) 518 1.32.2.2 skrll fail |= 0x10; 519 1.32.2.2 skrll if ((ic->ic_flags & IEEE80211_F_DESBSSID) && 520 1.32.2.2 skrll !IEEE80211_ADDR_EQ(ic->ic_des_bssid, ni->ni_bssid)) 521 1.32.2.2 skrll fail |= 0x20; 522 1.32.2.2 skrll #ifdef IEEE80211_DEBUG 523 1.32.2.9 skrll if (ieee80211_msg_scan(ic)) { 524 1.32.2.2 skrll printf(" %c %s", fail ? '-' : '+', 525 1.32.2.2 skrll ether_sprintf(ni->ni_macaddr)); 526 1.32.2.2 skrll printf(" %s%c", ether_sprintf(ni->ni_bssid), 527 1.32.2.2 skrll fail & 0x20 ? '!' : ' '); 528 1.32.2.2 skrll printf(" %3d%c", ieee80211_chan2ieee(ic, ni->ni_chan), 529 1.32.2.2 skrll fail & 0x01 ? '!' : ' '); 530 1.32.2.2 skrll printf(" %+4d", ni->ni_rssi); 531 1.32.2.2 skrll printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2, 532 1.32.2.2 skrll fail & 0x08 ? '!' : ' '); 533 1.32.2.2 skrll printf(" %4s%c", 534 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" : 535 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" : 536 1.32.2.2 skrll "????", 537 1.32.2.2 skrll fail & 0x02 ? '!' : ' '); 538 1.32.2.2 skrll printf(" %3s%c ", 539 1.32.2.2 skrll (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ? 540 1.32.2.2 skrll "wep" : "no", 541 1.32.2.2 skrll fail & 0x04 ? '!' : ' '); 542 1.32.2.2 skrll ieee80211_print_essid(ni->ni_essid, ni->ni_esslen); 543 1.32.2.2 skrll printf("%s\n", fail & 0x10 ? "!" : ""); 544 1.32.2.2 skrll } 545 1.32.2.2 skrll #endif 546 1.32.2.2 skrll return fail; 547 1.32.2.2 skrll } 548 1.32.2.2 skrll 549 1.32.2.9 skrll static __inline u_int8_t 550 1.32.2.9 skrll maxrate(const struct ieee80211_node *ni) 551 1.32.2.9 skrll { 552 1.32.2.9 skrll const struct ieee80211_rateset *rs = &ni->ni_rates; 553 1.32.2.9 skrll /* NB: assumes rate set is sorted (happens on frame receive) */ 554 1.32.2.9 skrll return rs->rs_rates[rs->rs_nrates-1] & IEEE80211_RATE_VAL; 555 1.32.2.9 skrll } 556 1.32.2.9 skrll 557 1.32.2.9 skrll /* 558 1.32.2.9 skrll * Compare the capabilities of two nodes and decide which is 559 1.32.2.9 skrll * more desirable (return >0 if a is considered better). Note 560 1.32.2.9 skrll * that we assume compatibility/usability has already been checked 561 1.32.2.9 skrll * so we don't need to (e.g. validate whether privacy is supported). 562 1.32.2.9 skrll * Used to select the best scan candidate for association in a BSS. 563 1.32.2.9 skrll */ 564 1.32.2.9 skrll static int 565 1.32.2.9 skrll ieee80211_node_compare(struct ieee80211com *ic, 566 1.32.2.9 skrll const struct ieee80211_node *a, 567 1.32.2.9 skrll const struct ieee80211_node *b) 568 1.32.2.9 skrll { 569 1.32.2.9 skrll u_int8_t maxa, maxb; 570 1.32.2.9 skrll u_int8_t rssia, rssib; 571 1.32.2.9 skrll 572 1.32.2.9 skrll /* privacy support preferred */ 573 1.32.2.9 skrll if ((a->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) && 574 1.32.2.9 skrll (b->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 575 1.32.2.9 skrll return 1; 576 1.32.2.9 skrll if ((a->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0 && 577 1.32.2.9 skrll (b->ni_capinfo & IEEE80211_CAPINFO_PRIVACY)) 578 1.32.2.9 skrll return -1; 579 1.32.2.9 skrll 580 1.32.2.9 skrll rssia = ic->ic_node_getrssi(a); 581 1.32.2.9 skrll rssib = ic->ic_node_getrssi(b); 582 1.32.2.9 skrll if (abs(rssib - rssia) < 5) { 583 1.32.2.9 skrll /* best/max rate preferred if signal level close enough XXX */ 584 1.32.2.9 skrll maxa = maxrate(a); 585 1.32.2.9 skrll maxb = maxrate(b); 586 1.32.2.9 skrll if (maxa != maxb) 587 1.32.2.9 skrll return maxa - maxb; 588 1.32.2.9 skrll /* XXX use freq for channel preference */ 589 1.32.2.9 skrll /* for now just prefer 5Ghz band to all other bands */ 590 1.32.2.9 skrll if (IEEE80211_IS_CHAN_5GHZ(a->ni_chan) && 591 1.32.2.9 skrll !IEEE80211_IS_CHAN_5GHZ(b->ni_chan)) 592 1.32.2.9 skrll return 1; 593 1.32.2.9 skrll if (!IEEE80211_IS_CHAN_5GHZ(a->ni_chan) && 594 1.32.2.9 skrll IEEE80211_IS_CHAN_5GHZ(b->ni_chan)) 595 1.32.2.9 skrll return -1; 596 1.32.2.9 skrll } 597 1.32.2.9 skrll /* all things being equal, use signal level */ 598 1.32.2.9 skrll return rssia - rssib; 599 1.32.2.9 skrll } 600 1.32.2.9 skrll 601 1.32.2.9 skrll /* 602 1.32.2.9 skrll * Mark an ongoing scan stopped. 603 1.32.2.9 skrll */ 604 1.32.2.9 skrll void 605 1.32.2.9 skrll ieee80211_cancel_scan(struct ieee80211com *ic) 606 1.32.2.9 skrll { 607 1.32.2.9 skrll 608 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, "%s: end %s scan\n", 609 1.32.2.9 skrll __func__, 610 1.32.2.9 skrll (ic->ic_flags & IEEE80211_F_ASCAN) ? "active" : "passive"); 611 1.32.2.9 skrll 612 1.32.2.9 skrll ic->ic_flags &= ~(IEEE80211_F_SCAN | IEEE80211_F_ASCAN); 613 1.32.2.9 skrll } 614 1.32.2.9 skrll 615 1.32.2.2 skrll /* 616 1.32.2.2 skrll * Complete a scan of potential channels. 617 1.32.2.2 skrll */ 618 1.32.2.2 skrll void 619 1.32.2.2 skrll ieee80211_end_scan(struct ieee80211com *ic) 620 1.32.2.2 skrll { 621 1.32.2.9 skrll struct ieee80211_node_table *nt = &ic->ic_scan; 622 1.32.2.9 skrll struct ieee80211_node *ni, *selbs; 623 1.32.2.2 skrll 624 1.32.2.9 skrll ieee80211_cancel_scan(ic); 625 1.32.2.9 skrll ieee80211_notify_scan_done(ic); 626 1.32.2.2 skrll 627 1.32.2.9 skrll #ifndef IEEE80211_NO_HOSTAP 628 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_HOSTAP) { 629 1.32.2.9 skrll u_int8_t maxrssi[IEEE80211_CHAN_MAX]; /* XXX off stack? */ 630 1.32.2.9 skrll int i, bestchan; 631 1.32.2.9 skrll u_int8_t rssi; 632 1.32.2.9 skrll 633 1.32.2.2 skrll /* 634 1.32.2.2 skrll * The passive scan to look for existing AP's completed, 635 1.32.2.2 skrll * select a channel to camp on. Identify the channels 636 1.32.2.2 skrll * that already have one or more AP's and try to locate 637 1.32.2.9 skrll * an unoccupied one. If that fails, pick a channel that 638 1.32.2.9 skrll * looks to be quietest. 639 1.32.2.2 skrll */ 640 1.32.2.9 skrll memset(maxrssi, 0, sizeof(maxrssi)); 641 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 642 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 643 1.32.2.9 skrll rssi = ic->ic_node_getrssi(ni); 644 1.32.2.9 skrll i = ieee80211_chan2ieee(ic, ni->ni_chan); 645 1.32.2.9 skrll if (rssi > maxrssi[i]) 646 1.32.2.9 skrll maxrssi[i] = rssi; 647 1.32.2.2 skrll } 648 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 649 1.32.2.9 skrll /* XXX select channel more intelligently */ 650 1.32.2.9 skrll bestchan = -1; 651 1.32.2.2 skrll for (i = 0; i < IEEE80211_CHAN_MAX; i++) 652 1.32.2.9 skrll if (isset(ic->ic_chan_active, i)) { 653 1.32.2.9 skrll /* 654 1.32.2.9 skrll * If the channel is unoccupied the max rssi 655 1.32.2.9 skrll * should be zero; just take it. Otherwise 656 1.32.2.9 skrll * track the channel with the lowest rssi and 657 1.32.2.9 skrll * use that when all channels appear occupied. 658 1.32.2.9 skrll */ 659 1.32.2.9 skrll if (maxrssi[i] == 0) { 660 1.32.2.9 skrll bestchan = i; 661 1.32.2.2 skrll break; 662 1.32.2.9 skrll } 663 1.32.2.9 skrll if (bestchan == -1 || 664 1.32.2.9 skrll maxrssi[i] < maxrssi[bestchan]) 665 1.32.2.9 skrll bestchan = i; 666 1.32.2.9 skrll } 667 1.32.2.9 skrll if (bestchan != -1) { 668 1.32.2.9 skrll ieee80211_create_ibss(ic, &ic->ic_channels[bestchan]); 669 1.32.2.9 skrll return; 670 1.32.2.2 skrll } 671 1.32.2.9 skrll /* no suitable channel, should not happen */ 672 1.32.2.2 skrll } 673 1.32.2.9 skrll #endif /* !IEEE80211_NO_HOSTAP */ 674 1.32.2.9 skrll 675 1.32.2.9 skrll /* 676 1.32.2.9 skrll * When manually sequencing the state machine; scan just once 677 1.32.2.9 skrll * regardless of whether we have a candidate or not. The 678 1.32.2.9 skrll * controlling application is expected to setup state and 679 1.32.2.9 skrll * initiate an association. 680 1.32.2.9 skrll */ 681 1.32.2.9 skrll if (ic->ic_roaming == IEEE80211_ROAMING_MANUAL) 682 1.32.2.9 skrll return; 683 1.32.2.9 skrll /* 684 1.32.2.9 skrll * Automatic sequencing; look for a candidate and 685 1.32.2.9 skrll * if found join the network. 686 1.32.2.9 skrll */ 687 1.32.2.9 skrll /* NB: unlocked read should be ok */ 688 1.32.2.9 skrll if (TAILQ_FIRST(&nt->nt_node) == NULL) { 689 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 690 1.32.2.9 skrll "%s: no scan candidate\n", __func__); 691 1.32.2.2 skrll notfound: 692 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS && 693 1.32.2.2 skrll (ic->ic_flags & IEEE80211_F_IBSSON) && 694 1.32.2.2 skrll ic->ic_des_esslen != 0) { 695 1.32.2.2 skrll ieee80211_create_ibss(ic, ic->ic_ibss_chan); 696 1.32.2.2 skrll return; 697 1.32.2.2 skrll } 698 1.32.2.2 skrll /* 699 1.32.2.2 skrll * Reset the list of channels to scan and start again. 700 1.32.2.2 skrll */ 701 1.32.2.2 skrll ieee80211_reset_scan(ic); 702 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_SCAN; 703 1.32.2.2 skrll ieee80211_next_scan(ic); 704 1.32.2.2 skrll return; 705 1.32.2.2 skrll } 706 1.32.2.2 skrll selbs = NULL; 707 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, "\t%s\n", 708 1.32.2.9 skrll "macaddr bssid chan rssi rate flag wep essid"); 709 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 710 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 711 1.32.2.2 skrll if (ni->ni_fails) { 712 1.32.2.2 skrll /* 713 1.32.2.2 skrll * The configuration of the access points may change 714 1.32.2.2 skrll * during my scan. So delete the entry for the AP 715 1.32.2.2 skrll * and retry to associate if there is another beacon. 716 1.32.2.2 skrll */ 717 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_SCAN, 718 1.32.2.9 skrll "%s: skip scan candidate %s, fails %u\n", 719 1.32.2.9 skrll __func__, ether_sprintf(ni->ni_macaddr), 720 1.32.2.9 skrll ni->ni_fails); 721 1.32.2.9 skrll ni->ni_fails++; 722 1.32.2.9 skrll #if 0 723 1.32.2.2 skrll if (ni->ni_fails++ > 2) 724 1.32.2.9 skrll ieee80211_free_node(ni); 725 1.32.2.9 skrll #endif 726 1.32.2.2 skrll continue; 727 1.32.2.2 skrll } 728 1.32.2.2 skrll if (ieee80211_match_bss(ic, ni) == 0) { 729 1.32.2.2 skrll if (selbs == NULL) 730 1.32.2.2 skrll selbs = ni; 731 1.32.2.9 skrll else if (ieee80211_node_compare(ic, ni, selbs) > 0) 732 1.32.2.2 skrll selbs = ni; 733 1.32.2.2 skrll } 734 1.32.2.2 skrll } 735 1.32.2.9 skrll if (selbs != NULL) /* NB: grab ref while dropping lock */ 736 1.32.2.9 skrll (void) ieee80211_ref_node(selbs); 737 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 738 1.32.2.2 skrll if (selbs == NULL) 739 1.32.2.2 skrll goto notfound; 740 1.32.2.9 skrll if (!ieee80211_sta_join(ic, selbs)) { 741 1.32.2.9 skrll ieee80211_free_node(selbs); 742 1.32.2.9 skrll goto notfound; 743 1.32.2.9 skrll } 744 1.32.2.9 skrll } 745 1.32.2.9 skrll 746 1.32.2.9 skrll /* 747 1.32.2.9 skrll * Handle 802.11 ad hoc network merge. The 748 1.32.2.9 skrll * convention, set by the Wireless Ethernet Compatibility Alliance 749 1.32.2.9 skrll * (WECA), is that an 802.11 station will change its BSSID to match 750 1.32.2.9 skrll * the "oldest" 802.11 ad hoc network, on the same channel, that 751 1.32.2.9 skrll * has the station's desired SSID. The "oldest" 802.11 network 752 1.32.2.9 skrll * sends beacons with the greatest TSF timestamp. 753 1.32.2.9 skrll * 754 1.32.2.9 skrll * The caller is assumed to validate TSF's before attempting a merge. 755 1.32.2.9 skrll * 756 1.32.2.9 skrll * Return !0 if the BSSID changed, 0 otherwise. 757 1.32.2.9 skrll */ 758 1.32.2.9 skrll int 759 1.32.2.9 skrll ieee80211_ibss_merge(struct ieee80211com *ic, struct ieee80211_node *ni) 760 1.32.2.9 skrll { 761 1.32.2.9 skrll 762 1.32.2.9 skrll if (ni == ic->ic_bss || 763 1.32.2.9 skrll IEEE80211_ADDR_EQ(ni->ni_bssid, ic->ic_bss->ni_bssid)) { 764 1.32.2.9 skrll /* unchanged, nothing to do */ 765 1.32.2.9 skrll return 0; 766 1.32.2.9 skrll } 767 1.32.2.9 skrll if (ieee80211_match_bss(ic, ni) != 0) { /* capabilities mismatch */ 768 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 769 1.32.2.9 skrll "%s: merge failed, capabilities mismatch\n", __func__); 770 1.32.2.9 skrll ic->ic_stats.is_ibss_capmismatch++; 771 1.32.2.9 skrll return 0; 772 1.32.2.9 skrll } 773 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 774 1.32.2.9 skrll "%s: new bssid %s: %s preamble, %s slot time%s\n", __func__, 775 1.32.2.9 skrll ether_sprintf(ni->ni_bssid), 776 1.32.2.9 skrll ic->ic_flags&IEEE80211_F_SHPREAMBLE ? "short" : "long", 777 1.32.2.9 skrll ic->ic_flags&IEEE80211_F_SHSLOT ? "short" : "long", 778 1.32.2.9 skrll ic->ic_flags&IEEE80211_F_USEPROT ? ", protection" : "" 779 1.32.2.9 skrll ); 780 1.32.2.9 skrll return ieee80211_sta_join(ic, ieee80211_ref_node(ni)); 781 1.32.2.9 skrll } 782 1.32.2.9 skrll 783 1.32.2.9 skrll /* 784 1.32.2.9 skrll * Join the specified IBSS/BSS network. The node is assumed to 785 1.32.2.9 skrll * be passed in with a held reference. 786 1.32.2.9 skrll */ 787 1.32.2.9 skrll int 788 1.32.2.9 skrll ieee80211_sta_join(struct ieee80211com *ic, struct ieee80211_node *selbs) 789 1.32.2.9 skrll { 790 1.32.2.9 skrll struct ieee80211_node *obss; 791 1.32.2.9 skrll 792 1.32.2.2 skrll if (ic->ic_opmode == IEEE80211_M_IBSS) { 793 1.32.2.9 skrll struct ieee80211_node_table *nt; 794 1.32.2.9 skrll /* 795 1.32.2.9 skrll * Delete unusable rates; we've already checked 796 1.32.2.9 skrll * that the negotiated rate set is acceptable. 797 1.32.2.9 skrll */ 798 1.32.2.9 skrll ieee80211_fix_rate(ic, selbs, IEEE80211_F_DODEL); 799 1.32.2.9 skrll /* 800 1.32.2.9 skrll * Fillin the neighbor table; it will already 801 1.32.2.9 skrll * exist if we are simply switching mastership. 802 1.32.2.9 skrll * XXX ic_sta always setup so this is unnecessary? 803 1.32.2.9 skrll */ 804 1.32.2.9 skrll nt = &ic->ic_sta; 805 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 806 1.32.2.9 skrll nt->nt_name = "neighbor"; 807 1.32.2.9 skrll nt->nt_inact_init = ic->ic_inact_run; 808 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 809 1.32.2.2 skrll } 810 1.32.2.9 skrll 811 1.32.2.9 skrll /* 812 1.32.2.9 skrll * Committed to selbs, setup state. 813 1.32.2.9 skrll */ 814 1.32.2.9 skrll obss = ic->ic_bss; 815 1.32.2.9 skrll ic->ic_bss = selbs; /* NB: caller assumed to bump refcnt */ 816 1.32.2.9 skrll if (obss != NULL) 817 1.32.2.9 skrll ieee80211_free_node(obss); 818 1.32.2.9 skrll /* 819 1.32.2.9 skrll * Set the erp state (mostly the slot time) to deal with 820 1.32.2.9 skrll * the auto-select case; this should be redundant if the 821 1.32.2.9 skrll * mode is locked. 822 1.32.2.9 skrll */ 823 1.32.2.9 skrll ic->ic_curmode = ieee80211_chan2mode(ic, selbs->ni_chan); 824 1.32.2.9 skrll ieee80211_reset_erp(ic); 825 1.32.2.9 skrll ieee80211_wme_initparams(ic); 826 1.32.2.9 skrll 827 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_STA) 828 1.32.2.9 skrll ieee80211_new_state(ic, IEEE80211_S_AUTH, -1); 829 1.32.2.9 skrll else 830 1.32.2.9 skrll ieee80211_new_state(ic, IEEE80211_S_RUN, -1); 831 1.32.2.9 skrll return 1; 832 1.32.2.9 skrll } 833 1.32.2.9 skrll 834 1.32.2.9 skrll /* 835 1.32.2.9 skrll * Leave the specified IBSS/BSS network. The node is assumed to 836 1.32.2.9 skrll * be passed in with a held reference. 837 1.32.2.9 skrll */ 838 1.32.2.9 skrll void 839 1.32.2.9 skrll ieee80211_sta_leave(struct ieee80211com *ic, struct ieee80211_node *ni) 840 1.32.2.9 skrll { 841 1.32.2.9 skrll ic->ic_node_cleanup(ni); 842 1.32.2.9 skrll ieee80211_notify_node_leave(ic, ni); 843 1.32.2.2 skrll } 844 1.32.2.2 skrll 845 1.32.2.2 skrll int 846 1.32.2.2 skrll ieee80211_get_rate(struct ieee80211com *ic) 847 1.32.2.2 skrll { 848 1.32.2.2 skrll u_int8_t (*rates)[IEEE80211_RATE_MAXSIZE]; 849 1.32.2.2 skrll int rate; 850 1.32.2.2 skrll 851 1.32.2.2 skrll rates = &ic->ic_bss->ni_rates.rs_rates; 852 1.32.2.2 skrll 853 1.32.2.2 skrll if (ic->ic_fixed_rate != -1) 854 1.32.2.2 skrll rate = (*rates)[ic->ic_fixed_rate]; 855 1.32.2.2 skrll else if (ic->ic_state == IEEE80211_S_RUN) 856 1.32.2.2 skrll rate = (*rates)[ic->ic_bss->ni_txrate]; 857 1.32.2.2 skrll else 858 1.32.2.2 skrll rate = 0; 859 1.32.2.2 skrll 860 1.32.2.2 skrll return rate & IEEE80211_RATE_VAL; 861 1.32.2.2 skrll } 862 1.32.2.2 skrll 863 1.32.2.2 skrll static struct ieee80211_node * 864 1.32.2.9 skrll node_alloc(struct ieee80211_node_table *nt) 865 1.32.2.2 skrll { 866 1.32.2.2 skrll struct ieee80211_node *ni; 867 1.32.2.9 skrll 868 1.32.2.2 skrll MALLOC(ni, struct ieee80211_node *, sizeof(struct ieee80211_node), 869 1.32.2.2 skrll M_80211_NODE, M_NOWAIT | M_ZERO); 870 1.32.2.2 skrll return ni; 871 1.32.2.2 skrll } 872 1.32.2.2 skrll 873 1.32.2.9 skrll /* 874 1.32.2.9 skrll * Reclaim any resources in a node and reset any critical 875 1.32.2.9 skrll * state. Typically nodes are free'd immediately after, 876 1.32.2.9 skrll * but in some cases the storage may be reused so we need 877 1.32.2.9 skrll * to insure consistent state (should probably fix that). 878 1.32.2.9 skrll */ 879 1.32.2.2 skrll static void 880 1.32.2.9 skrll node_cleanup(struct ieee80211_node *ni) 881 1.32.2.2 skrll { 882 1.32.2.9 skrll #define N(a) (sizeof(a)/sizeof(a[0])) 883 1.32.2.9 skrll struct ieee80211com *ic = ni->ni_ic; 884 1.32.2.9 skrll int i, qlen; 885 1.32.2.9 skrll 886 1.32.2.9 skrll /* NB: preserve ni_table */ 887 1.32.2.9 skrll if (ni->ni_flags & IEEE80211_NODE_PWR_MGT) { 888 1.32.2.9 skrll ic->ic_ps_sta--; 889 1.32.2.9 skrll ni->ni_flags &= ~IEEE80211_NODE_PWR_MGT; 890 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_POWER, 891 1.32.2.9 skrll "[%s] power save mode off, %u sta's in ps mode\n", 892 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ic->ic_ps_sta); 893 1.32.2.9 skrll } 894 1.32.2.9 skrll /* 895 1.32.2.9 skrll * Clear AREF flag that marks the authorization refcnt bump 896 1.32.2.9 skrll * has happened. This is probably not needed as the node 897 1.32.2.9 skrll * should always be removed from the table so not found but 898 1.32.2.9 skrll * do it just in case. 899 1.32.2.9 skrll */ 900 1.32.2.9 skrll ni->ni_flags &= ~IEEE80211_NODE_AREF; 901 1.32.2.2 skrll 902 1.32.2.9 skrll /* 903 1.32.2.9 skrll * Drain power save queue and, if needed, clear TIM. 904 1.32.2.9 skrll */ 905 1.32.2.9 skrll IEEE80211_NODE_SAVEQ_DRAIN(ni, qlen); 906 1.32.2.9 skrll if (qlen != 0 && ic->ic_set_tim != NULL) 907 1.32.2.9 skrll ic->ic_set_tim(ic, ni, 0); 908 1.32.2.9 skrll 909 1.32.2.9 skrll ni->ni_associd = 0; 910 1.32.2.9 skrll if (ni->ni_challenge != NULL) { 911 1.32.2.9 skrll FREE(ni->ni_challenge, M_DEVBUF); 912 1.32.2.9 skrll ni->ni_challenge = NULL; 913 1.32.2.9 skrll } 914 1.32.2.9 skrll /* 915 1.32.2.9 skrll * Preserve SSID, WPA, and WME ie's so the bss node is 916 1.32.2.9 skrll * reusable during a re-auth/re-assoc state transition. 917 1.32.2.9 skrll * If we remove these data they will not be recreated 918 1.32.2.9 skrll * because they come from a probe-response or beacon frame 919 1.32.2.9 skrll * which cannot be expected prior to the association-response. 920 1.32.2.9 skrll * This should not be an issue when operating in other modes 921 1.32.2.9 skrll * as stations leaving always go through a full state transition 922 1.32.2.9 skrll * which will rebuild this state. 923 1.32.2.9 skrll * 924 1.32.2.9 skrll * XXX does this leave us open to inheriting old state? 925 1.32.2.9 skrll */ 926 1.32.2.9 skrll for (i = 0; i < N(ni->ni_rxfrag); i++) 927 1.32.2.9 skrll if (ni->ni_rxfrag[i] != NULL) { 928 1.32.2.9 skrll m_freem(ni->ni_rxfrag[i]); 929 1.32.2.9 skrll ni->ni_rxfrag[i] = NULL; 930 1.32.2.9 skrll } 931 1.32.2.9 skrll ieee80211_crypto_delkey(ic, &ni->ni_ucastkey); 932 1.32.2.9 skrll #undef N 933 1.32.2.2 skrll } 934 1.32.2.2 skrll 935 1.32.2.2 skrll static void 936 1.32.2.9 skrll node_free(struct ieee80211_node *ni) 937 1.32.2.2 skrll { 938 1.32.2.9 skrll struct ieee80211com *ic = ni->ni_ic; 939 1.32.2.9 skrll 940 1.32.2.9 skrll ic->ic_node_cleanup(ni); 941 1.32.2.9 skrll if (ni->ni_wpa_ie != NULL) 942 1.32.2.9 skrll FREE(ni->ni_wpa_ie, M_DEVBUF); 943 1.32.2.9 skrll if (ni->ni_wme_ie != NULL) 944 1.32.2.9 skrll FREE(ni->ni_wme_ie, M_DEVBUF); 945 1.32.2.9 skrll IEEE80211_NODE_SAVEQ_DESTROY(ni); 946 1.32.2.9 skrll FREE(ni, M_80211_NODE); 947 1.32.2.2 skrll } 948 1.32.2.2 skrll 949 1.32.2.2 skrll static u_int8_t 950 1.32.2.9 skrll node_getrssi(const struct ieee80211_node *ni) 951 1.32.2.2 skrll { 952 1.32.2.2 skrll return ni->ni_rssi; 953 1.32.2.2 skrll } 954 1.32.2.2 skrll 955 1.32.2.2 skrll static void 956 1.32.2.9 skrll ieee80211_setup_node(struct ieee80211_node_table *nt, 957 1.32.2.9 skrll struct ieee80211_node *ni, const u_int8_t *macaddr) 958 1.32.2.2 skrll { 959 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 960 1.32.2.2 skrll int hash; 961 1.32.2.2 skrll 962 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 963 1.32.2.9 skrll "%s %p<%s> in %s table\n", __func__, ni, 964 1.32.2.9 skrll ether_sprintf(macaddr), nt->nt_name); 965 1.32.2.9 skrll 966 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 967 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 968 1.32.2.9 skrll ieee80211_node_initref(ni); /* mark referenced */ 969 1.32.2.9 skrll ni->ni_chan = IEEE80211_CHAN_ANYC; 970 1.32.2.9 skrll ni->ni_authmode = IEEE80211_AUTH_OPEN; 971 1.32.2.9 skrll ni->ni_txpower = ic->ic_txpowlimit; /* max power */ 972 1.32.2.9 skrll ieee80211_crypto_resetkey(ic, &ni->ni_ucastkey, IEEE80211_KEYIX_NONE); 973 1.32.2.9 skrll ni->ni_inact_reload = nt->nt_inact_init; 974 1.32.2.9 skrll ni->ni_inact = ni->ni_inact_reload; 975 1.32.2.9 skrll IEEE80211_NODE_SAVEQ_INIT(ni, "unknown"); 976 1.32.2.9 skrll 977 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 978 1.32.2.9 skrll TAILQ_INSERT_TAIL(&nt->nt_node, ni, ni_list); 979 1.32.2.9 skrll LIST_INSERT_HEAD(&nt->nt_hash[hash], ni, ni_hash); 980 1.32.2.9 skrll ni->ni_table = nt; 981 1.32.2.9 skrll ni->ni_ic = ic; 982 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 983 1.32.2.2 skrll } 984 1.32.2.2 skrll 985 1.32.2.2 skrll struct ieee80211_node * 986 1.32.2.9 skrll ieee80211_alloc_node(struct ieee80211_node_table *nt, const u_int8_t *macaddr) 987 1.32.2.2 skrll { 988 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 989 1.32.2.9 skrll struct ieee80211_node *ni; 990 1.32.2.9 skrll 991 1.32.2.9 skrll ni = ic->ic_node_alloc(nt); 992 1.32.2.9 skrll if (ni != NULL) 993 1.32.2.9 skrll ieee80211_setup_node(nt, ni, macaddr); 994 1.32.2.9 skrll else 995 1.32.2.2 skrll ic->ic_stats.is_rx_nodealloc++; 996 1.32.2.2 skrll return ni; 997 1.32.2.2 skrll } 998 1.32.2.2 skrll 999 1.32.2.2 skrll struct ieee80211_node * 1000 1.32.2.9 skrll ieee80211_dup_bss(struct ieee80211_node_table *nt, const u_int8_t *macaddr) 1001 1.32.2.2 skrll { 1002 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1003 1.32.2.9 skrll struct ieee80211_node *ni; 1004 1.32.2.9 skrll 1005 1.32.2.9 skrll ni = ic->ic_node_alloc(nt); 1006 1.32.2.2 skrll if (ni != NULL) { 1007 1.32.2.9 skrll ieee80211_setup_node(nt, ni, macaddr); 1008 1.32.2.2 skrll /* 1009 1.32.2.2 skrll * Inherit from ic_bss. 1010 1.32.2.2 skrll */ 1011 1.32.2.9 skrll ni->ni_authmode = ic->ic_bss->ni_authmode; 1012 1.32.2.9 skrll ni->ni_txpower = ic->ic_bss->ni_txpower; 1013 1.32.2.9 skrll ni->ni_vlan = ic->ic_bss->ni_vlan; /* XXX?? */ 1014 1.32.2.2 skrll IEEE80211_ADDR_COPY(ni->ni_bssid, ic->ic_bss->ni_bssid); 1015 1.32.2.9 skrll ieee80211_set_chan(ic, ni, ic->ic_bss->ni_chan); 1016 1.32.2.9 skrll ni->ni_rsn = ic->ic_bss->ni_rsn; 1017 1.32.2.2 skrll } else 1018 1.32.2.2 skrll ic->ic_stats.is_rx_nodealloc++; 1019 1.32.2.2 skrll return ni; 1020 1.32.2.2 skrll } 1021 1.32.2.2 skrll 1022 1.32.2.2 skrll static struct ieee80211_node * 1023 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1024 1.32.2.9 skrll _ieee80211_find_node_debug(struct ieee80211_node_table *nt, 1025 1.32.2.9 skrll const u_int8_t *macaddr, const char *func, int line) 1026 1.32.2.9 skrll #else 1027 1.32.2.9 skrll _ieee80211_find_node(struct ieee80211_node_table *nt, 1028 1.32.2.9 skrll const u_int8_t *macaddr) 1029 1.32.2.9 skrll #endif 1030 1.32.2.2 skrll { 1031 1.32.2.2 skrll struct ieee80211_node *ni; 1032 1.32.2.2 skrll int hash; 1033 1.32.2.2 skrll 1034 1.32.2.9 skrll IEEE80211_NODE_LOCK_ASSERT(nt); 1035 1.32.2.2 skrll 1036 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 1037 1.32.2.9 skrll LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1038 1.32.2.2 skrll if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 1039 1.32.2.9 skrll ieee80211_ref_node(ni); /* mark referenced */ 1040 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1041 1.32.2.9 skrll IEEE80211_DPRINTF(nt->nt_ic, IEEE80211_MSG_NODE, 1042 1.32.2.9 skrll "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1043 1.32.2.9 skrll func, line, 1044 1.32.2.9 skrll ni, ether_sprintf(ni->ni_macaddr), 1045 1.32.2.9 skrll ieee80211_node_refcnt(ni)); 1046 1.32.2.9 skrll #endif 1047 1.32.2.2 skrll return ni; 1048 1.32.2.2 skrll } 1049 1.32.2.2 skrll } 1050 1.32.2.2 skrll return NULL; 1051 1.32.2.2 skrll } 1052 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1053 1.32.2.9 skrll #define _ieee80211_find_node(nt, mac) \ 1054 1.32.2.9 skrll _ieee80211_find_node_debug(nt, mac, func, line) 1055 1.32.2.9 skrll #endif 1056 1.32.2.2 skrll 1057 1.32.2.2 skrll struct ieee80211_node * 1058 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1059 1.32.2.9 skrll ieee80211_find_node_debug(struct ieee80211_node_table *nt, 1060 1.32.2.9 skrll const u_int8_t *macaddr, const char *func, int line) 1061 1.32.2.9 skrll #else 1062 1.32.2.9 skrll ieee80211_find_node(struct ieee80211_node_table *nt, const u_int8_t *macaddr) 1063 1.32.2.9 skrll #endif 1064 1.32.2.2 skrll { 1065 1.32.2.2 skrll struct ieee80211_node *ni; 1066 1.32.2.2 skrll 1067 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1068 1.32.2.9 skrll ni = _ieee80211_find_node(nt, macaddr); 1069 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1070 1.32.2.2 skrll return ni; 1071 1.32.2.2 skrll } 1072 1.32.2.2 skrll 1073 1.32.2.2 skrll /* 1074 1.32.2.9 skrll * Fake up a node; this handles node discovery in adhoc mode. 1075 1.32.2.9 skrll * Note that for the driver's benefit we we treat this like 1076 1.32.2.9 skrll * an association so the driver has an opportunity to setup 1077 1.32.2.9 skrll * it's private state. 1078 1.32.2.2 skrll */ 1079 1.32.2.2 skrll struct ieee80211_node * 1080 1.32.2.9 skrll ieee80211_fakeup_adhoc_node(struct ieee80211_node_table *nt, 1081 1.32.2.9 skrll const u_int8_t macaddr[IEEE80211_ADDR_LEN]) 1082 1.32.2.2 skrll { 1083 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1084 1.32.2.2 skrll struct ieee80211_node *ni; 1085 1.32.2.2 skrll 1086 1.32.2.9 skrll ni = ieee80211_dup_bss(nt, macaddr); 1087 1.32.2.9 skrll if (ni != NULL) { 1088 1.32.2.6 skrll /* XXX no rate negotiation; just dup */ 1089 1.32.2.6 skrll ni->ni_rates = ic->ic_bss->ni_rates; 1090 1.32.2.9 skrll if (ic->ic_newassoc != NULL) 1091 1.32.2.9 skrll ic->ic_newassoc(ic, ni, 1); 1092 1.32.2.9 skrll /* XXX not right for 802.1x/WPA */ 1093 1.32.2.9 skrll ieee80211_node_authorize(ic, ni); 1094 1.32.2.2 skrll } 1095 1.32.2.9 skrll return ni; 1096 1.32.2.2 skrll } 1097 1.32.2.2 skrll 1098 1.32.2.2 skrll /* 1099 1.32.2.9 skrll * Locate the node for sender, track state, and then pass the 1100 1.32.2.9 skrll * (referenced) node up to the 802.11 layer for its use. We 1101 1.32.2.9 skrll * are required to pass some node so we fall back to ic_bss 1102 1.32.2.9 skrll * when this frame is from an unknown sender. The 802.11 layer 1103 1.32.2.9 skrll * knows this means the sender wasn't in the node table and 1104 1.32.2.9 skrll * acts accordingly. 1105 1.32.2.2 skrll */ 1106 1.32.2.9 skrll struct ieee80211_node * 1107 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1108 1.32.2.9 skrll ieee80211_find_rxnode_debug(struct ieee80211com *ic, 1109 1.32.2.9 skrll const struct ieee80211_frame_min *wh, const char *func, int line) 1110 1.32.2.9 skrll #else 1111 1.32.2.9 skrll ieee80211_find_rxnode(struct ieee80211com *ic, 1112 1.32.2.9 skrll const struct ieee80211_frame_min *wh) 1113 1.32.2.9 skrll #endif 1114 1.32.2.9 skrll { 1115 1.32.2.9 skrll #define IS_CTL(wh) \ 1116 1.32.2.9 skrll ((wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) == IEEE80211_FC0_TYPE_CTL) 1117 1.32.2.9 skrll #define IS_PSPOLL(wh) \ 1118 1.32.2.9 skrll ((wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == IEEE80211_FC0_SUBTYPE_PS_POLL) 1119 1.32.2.9 skrll struct ieee80211_node_table *nt; 1120 1.32.2.9 skrll struct ieee80211_node *ni; 1121 1.32.2.2 skrll 1122 1.32.2.9 skrll /* XXX may want scanned nodes in the neighbor table for adhoc */ 1123 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_STA || 1124 1.32.2.9 skrll ic->ic_opmode == IEEE80211_M_MONITOR || 1125 1.32.2.9 skrll (ic->ic_flags & IEEE80211_F_SCAN)) 1126 1.32.2.9 skrll nt = &ic->ic_scan; 1127 1.32.2.9 skrll else 1128 1.32.2.9 skrll nt = &ic->ic_sta; 1129 1.32.2.9 skrll /* XXX check ic_bss first in station mode */ 1130 1.32.2.9 skrll /* XXX 4-address frames? */ 1131 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1132 1.32.2.9 skrll if (IS_CTL(wh) && !IS_PSPOLL(wh) /*&& !IS_RTS(ah)*/) 1133 1.32.2.9 skrll ni = _ieee80211_find_node(nt, wh->i_addr1); 1134 1.32.2.9 skrll else 1135 1.32.2.9 skrll ni = _ieee80211_find_node(nt, wh->i_addr2); 1136 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1137 1.32.2.2 skrll 1138 1.32.2.9 skrll return (ni != NULL ? ni : ieee80211_ref_node(ic->ic_bss)); 1139 1.32.2.9 skrll #undef IS_PSPOLL 1140 1.32.2.9 skrll #undef IS_CTL 1141 1.32.2.2 skrll } 1142 1.32.2.2 skrll 1143 1.32.2.9 skrll /* 1144 1.32.2.9 skrll * Return a reference to the appropriate node for sending 1145 1.32.2.9 skrll * a data frame. This handles node discovery in adhoc networks. 1146 1.32.2.3 skrll */ 1147 1.32.2.2 skrll struct ieee80211_node * 1148 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1149 1.32.2.9 skrll ieee80211_find_txnode_debug(struct ieee80211com *ic, const u_int8_t *macaddr, 1150 1.32.2.9 skrll const char *func, int line) 1151 1.32.2.9 skrll #else 1152 1.32.2.9 skrll ieee80211_find_txnode(struct ieee80211com *ic, const u_int8_t *macaddr) 1153 1.32.2.9 skrll #endif 1154 1.32.2.2 skrll { 1155 1.32.2.9 skrll struct ieee80211_node_table *nt = &ic->ic_sta; 1156 1.32.2.2 skrll struct ieee80211_node *ni; 1157 1.32.2.2 skrll 1158 1.32.2.9 skrll /* 1159 1.32.2.9 skrll * The destination address should be in the node table 1160 1.32.2.9 skrll * unless we are operating in station mode or this is a 1161 1.32.2.9 skrll * multicast/broadcast frame. 1162 1.32.2.9 skrll */ 1163 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_STA || IEEE80211_IS_MULTICAST(macaddr)) 1164 1.32.2.2 skrll return ieee80211_ref_node(ic->ic_bss); 1165 1.32.2.2 skrll 1166 1.32.2.9 skrll /* XXX can't hold lock across dup_bss 'cuz of recursive locking */ 1167 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1168 1.32.2.9 skrll ni = _ieee80211_find_node(nt, macaddr); 1169 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1170 1.32.2.2 skrll 1171 1.32.2.9 skrll if (ni == NULL) { 1172 1.32.2.9 skrll if (ic->ic_opmode == IEEE80211_M_IBSS || 1173 1.32.2.9 skrll ic->ic_opmode == IEEE80211_M_AHDEMO) { 1174 1.32.2.9 skrll /* 1175 1.32.2.9 skrll * In adhoc mode cons up a node for the destination. 1176 1.32.2.9 skrll * Note that we need an additional reference for the 1177 1.32.2.9 skrll * caller to be consistent with _ieee80211_find_node. 1178 1.32.2.9 skrll */ 1179 1.32.2.9 skrll ni = ieee80211_fakeup_adhoc_node(nt, macaddr); 1180 1.32.2.9 skrll if (ni != NULL) 1181 1.32.2.9 skrll (void) ieee80211_ref_node(ni); 1182 1.32.2.9 skrll } else { 1183 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_OUTPUT, 1184 1.32.2.9 skrll "[%s] no node, discard frame (%s)\n", 1185 1.32.2.9 skrll ether_sprintf(macaddr), __func__); 1186 1.32.2.9 skrll ic->ic_stats.is_tx_nonode++; 1187 1.32.2.9 skrll } 1188 1.32.2.9 skrll } 1189 1.32.2.9 skrll return ni; 1190 1.32.2.2 skrll } 1191 1.32.2.2 skrll 1192 1.32.2.2 skrll /* 1193 1.32.2.2 skrll * Like find but search based on the channel too. 1194 1.32.2.2 skrll */ 1195 1.32.2.2 skrll struct ieee80211_node * 1196 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1197 1.32.2.9 skrll ieee80211_find_node_with_channel_debug(struct ieee80211_node_table *nt, 1198 1.32.2.9 skrll const u_int8_t *macaddr, struct ieee80211_channel *chan, 1199 1.32.2.9 skrll const char *func, int line) 1200 1.32.2.9 skrll #else 1201 1.32.2.9 skrll ieee80211_find_node_with_channel(struct ieee80211_node_table *nt, 1202 1.32.2.9 skrll const u_int8_t *macaddr, struct ieee80211_channel *chan) 1203 1.32.2.9 skrll #endif 1204 1.32.2.2 skrll { 1205 1.32.2.9 skrll struct ieee80211_node *ni; 1206 1.32.2.2 skrll int hash; 1207 1.32.2.2 skrll 1208 1.32.2.2 skrll hash = IEEE80211_NODE_HASH(macaddr); 1209 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1210 1.32.2.9 skrll LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1211 1.32.2.9 skrll if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr) && 1212 1.32.2.9 skrll ni->ni_chan == chan) { 1213 1.32.2.9 skrll ieee80211_ref_node(ni); /* mark referenced */ 1214 1.32.2.9 skrll IEEE80211_DPRINTF(nt->nt_ic, IEEE80211_MSG_NODE, 1215 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1216 1.32.2.9 skrll "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1217 1.32.2.9 skrll func, line, 1218 1.32.2.9 skrll #else 1219 1.32.2.9 skrll "%s %p<%s> refcnt %d\n", __func__, 1220 1.32.2.9 skrll #endif 1221 1.32.2.9 skrll ni, ether_sprintf(ni->ni_macaddr), 1222 1.32.2.9 skrll ieee80211_node_refcnt(ni)); 1223 1.32.2.9 skrll break; 1224 1.32.2.9 skrll } 1225 1.32.2.9 skrll } 1226 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1227 1.32.2.9 skrll return ni; 1228 1.32.2.9 skrll } 1229 1.32.2.9 skrll 1230 1.32.2.9 skrll struct ieee80211_node * 1231 1.32.2.9 skrll ieee80211_refine_node_for_beacon(struct ieee80211com *ic, 1232 1.32.2.9 skrll struct ieee80211_node *ni0, struct ieee80211_channel *chan, 1233 1.32.2.9 skrll const u_int8_t *ssid) 1234 1.32.2.9 skrll { 1235 1.32.2.9 skrll struct ieee80211_node_table *nt = ni0->ni_table; 1236 1.32.2.9 skrll struct ieee80211_node *best, *ni; 1237 1.32.2.9 skrll int best_score = 0, score; 1238 1.32.2.9 skrll 1239 1.32.2.9 skrll if (nt == NULL) 1240 1.32.2.9 skrll return ni0; 1241 1.32.2.9 skrll 1242 1.32.2.9 skrll best = ni0; 1243 1.32.2.9 skrll if (ssid[1] == 0 || best->ni_esslen == 0) 1244 1.32.2.9 skrll best_score = 1; 1245 1.32.2.9 skrll else if (ssid[1] == best->ni_esslen && 1246 1.32.2.9 skrll memcmp(ssid + 2, best->ni_essid, ssid[1]) == 0) 1247 1.32.2.9 skrll best_score = 2; 1248 1.32.2.9 skrll else 1249 1.32.2.9 skrll best_score = 0; 1250 1.32.2.3 skrll 1251 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1252 1.32.2.9 skrll for (ni = LIST_NEXT(ni0, ni_hash); ni != NULL; 1253 1.32.2.9 skrll ni = LIST_NEXT(ni, ni_hash)) { 1254 1.32.2.9 skrll if (!IEEE80211_ADDR_EQ(ni->ni_macaddr, best->ni_macaddr) || 1255 1.32.2.9 skrll ni->ni_ic != best->ni_ic || ni->ni_chan != chan) 1256 1.32.2.9 skrll continue; 1257 1.32.2.3 skrll 1258 1.32.2.3 skrll if (ssid[1] == 0 || ni->ni_esslen == 0) 1259 1.32.2.9 skrll score = 1; 1260 1.32.2.9 skrll else if (ssid[1] == ni->ni_esslen && 1261 1.32.2.9 skrll memcmp(ssid + 2, ni->ni_essid, ssid[1]) == 0) 1262 1.32.2.9 skrll score = 2; 1263 1.32.2.9 skrll else 1264 1.32.2.3 skrll continue; 1265 1.32.2.3 skrll 1266 1.32.2.3 skrll if (score > best_score) { 1267 1.32.2.6 skrll best = ni; 1268 1.32.2.3 skrll best_score = score; 1269 1.32.2.2 skrll } 1270 1.32.2.2 skrll } 1271 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1272 1.32.2.3 skrll return best; 1273 1.32.2.2 skrll } 1274 1.32.2.2 skrll 1275 1.32.2.9 skrll /* 1276 1.32.2.9 skrll * Like find but search based on the ssid too. 1277 1.32.2.9 skrll */ 1278 1.32.2.9 skrll struct ieee80211_node * 1279 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1280 1.32.2.9 skrll ieee80211_find_node_with_ssid_debug(struct ieee80211_node_table *nt, 1281 1.32.2.9 skrll const u_int8_t *macaddr, u_int ssidlen, const u_int8_t *ssid, 1282 1.32.2.9 skrll const char *func, int line) 1283 1.32.2.9 skrll #else 1284 1.32.2.9 skrll ieee80211_find_node_with_ssid(struct ieee80211_node_table *nt, 1285 1.32.2.9 skrll const u_int8_t *macaddr, u_int ssidlen, const u_int8_t *ssid) 1286 1.32.2.9 skrll #endif 1287 1.32.2.9 skrll { 1288 1.32.2.9 skrll #define MATCH_SSID(ni, ssid, ssidlen) \ 1289 1.32.2.9 skrll (ni->ni_esslen == ssidlen && memcmp(ni->ni_essid, ssid, ssidlen) == 0) 1290 1.32.2.9 skrll static const u_int8_t zeromac[IEEE80211_ADDR_LEN]; 1291 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1292 1.32.2.9 skrll struct ieee80211_node *ni; 1293 1.32.2.9 skrll int hash; 1294 1.32.2.9 skrll 1295 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1296 1.32.2.9 skrll /* 1297 1.32.2.9 skrll * A mac address that is all zero means match only the ssid; 1298 1.32.2.9 skrll * otherwise we must match both. 1299 1.32.2.9 skrll */ 1300 1.32.2.9 skrll if (IEEE80211_ADDR_EQ(macaddr, zeromac)) { 1301 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1302 1.32.2.9 skrll if (MATCH_SSID(ni, ssid, ssidlen)) 1303 1.32.2.9 skrll break; 1304 1.32.2.9 skrll } 1305 1.32.2.9 skrll } else { 1306 1.32.2.9 skrll hash = IEEE80211_NODE_HASH(macaddr); 1307 1.32.2.9 skrll LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1308 1.32.2.9 skrll if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr) && 1309 1.32.2.9 skrll MATCH_SSID(ni, ssid, ssidlen)) 1310 1.32.2.9 skrll break; 1311 1.32.2.9 skrll } 1312 1.32.2.9 skrll } 1313 1.32.2.9 skrll if (ni != NULL) { 1314 1.32.2.9 skrll ieee80211_ref_node(ni); /* mark referenced */ 1315 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1316 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1317 1.32.2.9 skrll "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1318 1.32.2.9 skrll func, line, 1319 1.32.2.9 skrll #else 1320 1.32.2.9 skrll "%s %p<%s> refcnt %d\n", __func__, 1321 1.32.2.9 skrll #endif 1322 1.32.2.9 skrll ni, ether_sprintf(ni->ni_macaddr), 1323 1.32.2.9 skrll ieee80211_node_refcnt(ni)); 1324 1.32.2.9 skrll } 1325 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1326 1.32.2.9 skrll return ni; 1327 1.32.2.9 skrll #undef MATCH_SSID 1328 1.32.2.9 skrll } 1329 1.32.2.9 skrll 1330 1.32.2.2 skrll static void 1331 1.32.2.9 skrll _ieee80211_free_node(struct ieee80211_node *ni) 1332 1.32.2.2 skrll { 1333 1.32.2.9 skrll struct ieee80211com *ic = ni->ni_ic; 1334 1.32.2.9 skrll struct ieee80211_node_table *nt = ni->ni_table; 1335 1.32.2.2 skrll 1336 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1337 1.32.2.9 skrll "%s %p<%s> in %s table\n", __func__, ni, 1338 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), 1339 1.32.2.9 skrll nt != NULL ? nt->nt_name : "<gone>"); 1340 1.32.2.9 skrll 1341 1.32.2.2 skrll IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap); 1342 1.32.2.9 skrll if (nt != NULL) { 1343 1.32.2.9 skrll TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 1344 1.32.2.9 skrll LIST_REMOVE(ni, ni_hash); 1345 1.32.2.9 skrll } 1346 1.32.2.9 skrll ic->ic_node_free(ni); 1347 1.32.2.2 skrll } 1348 1.32.2.2 skrll 1349 1.32.2.2 skrll void 1350 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1351 1.32.2.9 skrll ieee80211_free_node_debug(struct ieee80211_node *ni, const char *func, int line) 1352 1.32.2.9 skrll #else 1353 1.32.2.9 skrll ieee80211_free_node(struct ieee80211_node *ni) 1354 1.32.2.9 skrll #endif 1355 1.32.2.2 skrll { 1356 1.32.2.9 skrll struct ieee80211_node_table *nt = ni->ni_table; 1357 1.32.2.9 skrll 1358 1.32.2.9 skrll #ifdef IEEE80211_DEBUG_REFCNT 1359 1.32.2.9 skrll IEEE80211_DPRINTF(ni->ni_ic, IEEE80211_MSG_NODE, 1360 1.32.2.9 skrll "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line, ni, 1361 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)-1); 1362 1.32.2.9 skrll #endif 1363 1.32.2.9 skrll if (ieee80211_node_dectestref(ni)) { 1364 1.32.2.9 skrll /* 1365 1.32.2.9 skrll * Beware; if the node is marked gone then it's already 1366 1.32.2.9 skrll * been removed from the table and we cannot assume the 1367 1.32.2.9 skrll * table still exists. Regardless, there's no need to lock 1368 1.32.2.9 skrll * the table. 1369 1.32.2.9 skrll */ 1370 1.32.2.9 skrll if (ni->ni_table != NULL) { 1371 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1372 1.32.2.9 skrll _ieee80211_free_node(ni); 1373 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1374 1.32.2.9 skrll } else 1375 1.32.2.9 skrll _ieee80211_free_node(ni); 1376 1.32.2.2 skrll } 1377 1.32.2.2 skrll } 1378 1.32.2.2 skrll 1379 1.32.2.9 skrll /* 1380 1.32.2.9 skrll * Reclaim a node. If this is the last reference count then 1381 1.32.2.9 skrll * do the normal free work. Otherwise remove it from the node 1382 1.32.2.9 skrll * table and mark it gone by clearing the back-reference. 1383 1.32.2.9 skrll */ 1384 1.32.2.9 skrll static void 1385 1.32.2.9 skrll node_reclaim(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 1386 1.32.2.9 skrll { 1387 1.32.2.9 skrll 1388 1.32.2.9 skrll IEEE80211_DPRINTF(ni->ni_ic, IEEE80211_MSG_NODE, 1389 1.32.2.9 skrll "%s: remove %p<%s> from %s table, refcnt %d\n", 1390 1.32.2.9 skrll __func__, ni, ether_sprintf(ni->ni_macaddr), 1391 1.32.2.9 skrll nt->nt_name, ieee80211_node_refcnt(ni)-1); 1392 1.32.2.9 skrll if (!ieee80211_node_dectestref(ni)) { 1393 1.32.2.9 skrll /* 1394 1.32.2.9 skrll * Other references are present, just remove the 1395 1.32.2.9 skrll * node from the table so it cannot be found. When 1396 1.32.2.9 skrll * the references are dropped storage will be 1397 1.32.2.9 skrll * reclaimed. 1398 1.32.2.9 skrll */ 1399 1.32.2.9 skrll TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 1400 1.32.2.9 skrll LIST_REMOVE(ni, ni_hash); 1401 1.32.2.9 skrll ni->ni_table = NULL; /* clear reference */ 1402 1.32.2.9 skrll } else 1403 1.32.2.9 skrll _ieee80211_free_node(ni); 1404 1.32.2.9 skrll } 1405 1.32.2.9 skrll 1406 1.32.2.9 skrll static void 1407 1.32.2.9 skrll ieee80211_free_allnodes_locked(struct ieee80211_node_table *nt) 1408 1.32.2.2 skrll { 1409 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1410 1.32.2.2 skrll struct ieee80211_node *ni; 1411 1.32.2.2 skrll 1412 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1413 1.32.2.9 skrll "%s: free all nodes in %s table\n", __func__, nt->nt_name); 1414 1.32.2.9 skrll 1415 1.32.2.9 skrll while ((ni = TAILQ_FIRST(&nt->nt_node)) != NULL) { 1416 1.32.2.9 skrll if (ni->ni_associd != 0) { 1417 1.32.2.9 skrll if (ic->ic_auth->ia_node_leave != NULL) 1418 1.32.2.9 skrll ic->ic_auth->ia_node_leave(ic, ni); 1419 1.32.2.9 skrll IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap); 1420 1.32.2.9 skrll } 1421 1.32.2.9 skrll node_reclaim(nt, ni); 1422 1.32.2.9 skrll } 1423 1.32.2.9 skrll ieee80211_reset_erp(ic); 1424 1.32.2.9 skrll } 1425 1.32.2.9 skrll 1426 1.32.2.9 skrll static void 1427 1.32.2.9 skrll ieee80211_free_allnodes(struct ieee80211_node_table *nt) 1428 1.32.2.9 skrll { 1429 1.32.2.2 skrll 1430 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1431 1.32.2.9 skrll ieee80211_free_allnodes_locked(nt); 1432 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1433 1.32.2.2 skrll } 1434 1.32.2.2 skrll 1435 1.32.2.2 skrll /* 1436 1.32.2.9 skrll * Timeout entries in the scan cache. 1437 1.32.2.9 skrll */ 1438 1.32.2.9 skrll static void 1439 1.32.2.9 skrll ieee80211_timeout_scan_candidates(struct ieee80211_node_table *nt) 1440 1.32.2.9 skrll { 1441 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1442 1.32.2.9 skrll struct ieee80211_node *ni, *tni; 1443 1.32.2.9 skrll 1444 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1445 1.32.2.9 skrll ni = ic->ic_bss; 1446 1.32.2.9 skrll /* XXX belongs elsewhere */ 1447 1.32.2.9 skrll if (ni->ni_rxfrag[0] != NULL && ticks > ni->ni_rxfragstamp + hz) { 1448 1.32.2.9 skrll m_freem(ni->ni_rxfrag[0]); 1449 1.32.2.9 skrll ni->ni_rxfrag[0] = NULL; 1450 1.32.2.9 skrll } 1451 1.32.2.9 skrll TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, tni) { 1452 1.32.2.9 skrll if (ni->ni_inact && --ni->ni_inact == 0) { 1453 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1454 1.32.2.9 skrll "[%s] scan candidate purged from cache " 1455 1.32.2.9 skrll "(refcnt %u)\n", ether_sprintf(ni->ni_macaddr), 1456 1.32.2.9 skrll ieee80211_node_refcnt(ni)); 1457 1.32.2.9 skrll node_reclaim(nt, ni); 1458 1.32.2.9 skrll } 1459 1.32.2.9 skrll } 1460 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1461 1.32.2.9 skrll 1462 1.32.2.9 skrll nt->nt_inact_timer = IEEE80211_INACT_WAIT; 1463 1.32.2.9 skrll } 1464 1.32.2.9 skrll 1465 1.32.2.9 skrll /* 1466 1.32.2.9 skrll * Timeout inactive stations and do related housekeeping. 1467 1.32.2.9 skrll * Note that we cannot hold the node lock while sending a 1468 1.32.2.9 skrll * frame as this would lead to a LOR. Instead we use a 1469 1.32.2.9 skrll * generation number to mark nodes that we've scanned and 1470 1.32.2.9 skrll * drop the lock and restart a scan if we have to time out 1471 1.32.2.9 skrll * a node. Since we are single-threaded by virtue of 1472 1.32.2.2 skrll * controlling the inactivity timer we can be sure this will 1473 1.32.2.2 skrll * process each node only once. 1474 1.32.2.2 skrll */ 1475 1.32.2.9 skrll static void 1476 1.32.2.9 skrll ieee80211_timeout_stations(struct ieee80211_node_table *nt) 1477 1.32.2.2 skrll { 1478 1.32.2.9 skrll struct ieee80211com *ic = nt->nt_ic; 1479 1.32.2.2 skrll struct ieee80211_node *ni; 1480 1.32.2.9 skrll u_int gen; 1481 1.32.2.2 skrll 1482 1.32.2.9 skrll IEEE80211_SCAN_LOCK(nt); 1483 1.32.2.9 skrll gen = nt->nt_scangen++; 1484 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1485 1.32.2.9 skrll "%s: %s scangen %u\n", __func__, nt->nt_name, gen); 1486 1.32.2.2 skrll restart: 1487 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1488 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1489 1.32.2.2 skrll if (ni->ni_scangen == gen) /* previously handled */ 1490 1.32.2.2 skrll continue; 1491 1.32.2.2 skrll ni->ni_scangen = gen; 1492 1.32.2.9 skrll /* 1493 1.32.2.9 skrll * Ignore entries for which have yet to receive an 1494 1.32.2.9 skrll * authentication frame. These are transient and 1495 1.32.2.9 skrll * will be reclaimed when the last reference to them 1496 1.32.2.9 skrll * goes away (when frame xmits complete). 1497 1.32.2.9 skrll */ 1498 1.32.2.9 skrll if ((ni->ni_flags & IEEE80211_NODE_AREF) == 0) 1499 1.32.2.3 skrll continue; 1500 1.32.2.3 skrll /* 1501 1.32.2.9 skrll * Free fragment if not needed anymore 1502 1.32.2.9 skrll * (last fragment older than 1s). 1503 1.32.2.9 skrll * XXX doesn't belong here 1504 1.32.2.9 skrll */ 1505 1.32.2.9 skrll if (ni->ni_rxfrag[0] != NULL && 1506 1.32.2.9 skrll ticks > ni->ni_rxfragstamp + hz) { 1507 1.32.2.9 skrll m_freem(ni->ni_rxfrag[0]); 1508 1.32.2.9 skrll ni->ni_rxfrag[0] = NULL; 1509 1.32.2.9 skrll } 1510 1.32.2.9 skrll /* 1511 1.32.2.9 skrll * Special case ourself; we may be idle for extended periods 1512 1.32.2.9 skrll * of time and regardless reclaiming our state is wrong. 1513 1.32.2.9 skrll */ 1514 1.32.2.9 skrll if (ni == ic->ic_bss) 1515 1.32.2.9 skrll continue; 1516 1.32.2.9 skrll ni->ni_inact--; 1517 1.32.2.9 skrll if (ni->ni_associd != 0) { 1518 1.32.2.9 skrll /* 1519 1.32.2.9 skrll * Age frames on the power save queue. The 1520 1.32.2.9 skrll * aging interval is 4 times the listen 1521 1.32.2.9 skrll * interval specified by the station. This 1522 1.32.2.9 skrll * number is factored into the age calculations 1523 1.32.2.9 skrll * when the frame is placed on the queue. We 1524 1.32.2.9 skrll * store ages as time differences we can check 1525 1.32.2.9 skrll * and/or adjust only the head of the list. 1526 1.32.2.9 skrll */ 1527 1.32.2.9 skrll if (IEEE80211_NODE_SAVEQ_QLEN(ni) != 0) { 1528 1.32.2.9 skrll struct mbuf *m; 1529 1.32.2.9 skrll int discard = 0; 1530 1.32.2.9 skrll 1531 1.32.2.9 skrll IEEE80211_NODE_SAVEQ_LOCK(ni); 1532 1.32.2.9 skrll while (IF_POLL(&ni->ni_savedq, m) != NULL && 1533 1.32.2.9 skrll M_AGE_GET(m) < IEEE80211_INACT_WAIT) { 1534 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_POWER, "[%s] discard frame, age %u\n", ether_sprintf(ni->ni_macaddr), M_AGE_GET(m));/*XXX*/ 1535 1.32.2.9 skrll _IEEE80211_NODE_SAVEQ_DEQUEUE_HEAD(ni, m); 1536 1.32.2.9 skrll m_freem(m); 1537 1.32.2.9 skrll discard++; 1538 1.32.2.9 skrll } 1539 1.32.2.9 skrll if (m != NULL) 1540 1.32.2.9 skrll M_AGE_SUB(m, IEEE80211_INACT_WAIT); 1541 1.32.2.9 skrll IEEE80211_NODE_SAVEQ_UNLOCK(ni); 1542 1.32.2.9 skrll 1543 1.32.2.9 skrll if (discard != 0) { 1544 1.32.2.9 skrll IEEE80211_DPRINTF(ic, 1545 1.32.2.9 skrll IEEE80211_MSG_POWER, 1546 1.32.2.9 skrll "[%s] discard %u frames for age\n", 1547 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), 1548 1.32.2.9 skrll discard); 1549 1.32.2.9 skrll IEEE80211_NODE_STAT_ADD(ni, 1550 1.32.2.9 skrll ps_discard, discard); 1551 1.32.2.9 skrll if (IEEE80211_NODE_SAVEQ_QLEN(ni) == 0) 1552 1.32.2.9 skrll ic->ic_set_tim(ic, ni, 0); 1553 1.32.2.9 skrll } 1554 1.32.2.9 skrll } 1555 1.32.2.9 skrll /* 1556 1.32.2.9 skrll * Probe the station before time it out. We 1557 1.32.2.9 skrll * send a null data frame which may not be 1558 1.32.2.9 skrll * universally supported by drivers (need it 1559 1.32.2.9 skrll * for ps-poll support so it should be...). 1560 1.32.2.9 skrll */ 1561 1.32.2.9 skrll if (0 < ni->ni_inact && 1562 1.32.2.9 skrll ni->ni_inact <= ic->ic_inact_probe) { 1563 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1564 1.32.2.9 skrll "[%s] probe station due to inactivity\n", 1565 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr)); 1566 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1567 1.32.2.9 skrll ieee80211_send_nulldata(ic, ni); 1568 1.32.2.9 skrll /* XXX stat? */ 1569 1.32.2.9 skrll goto restart; 1570 1.32.2.9 skrll } 1571 1.32.2.9 skrll } 1572 1.32.2.9 skrll if (ni->ni_inact <= 0) { 1573 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1574 1.32.2.9 skrll "[%s] station timed out due to inactivity " 1575 1.32.2.9 skrll "(refcnt %u)\n", ether_sprintf(ni->ni_macaddr), 1576 1.32.2.9 skrll ieee80211_node_refcnt(ni)); 1577 1.32.2.9 skrll /* 1578 1.32.2.9 skrll * Send a deauthenticate frame and drop the station. 1579 1.32.2.9 skrll * This is somewhat complicated due to reference counts 1580 1.32.2.9 skrll * and locking. At this point a station will typically 1581 1.32.2.9 skrll * have a reference count of 1. ieee80211_node_leave 1582 1.32.2.9 skrll * will do a "free" of the node which will drop the 1583 1.32.2.9 skrll * reference count. But in the meantime a reference 1584 1.32.2.9 skrll * wil be held by the deauth frame. The actual reclaim 1585 1.32.2.9 skrll * of the node will happen either after the tx is 1586 1.32.2.9 skrll * completed or by ieee80211_node_leave. 1587 1.32.2.9 skrll * 1588 1.32.2.9 skrll * Separately we must drop the node lock before sending 1589 1.32.2.9 skrll * in case the driver takes a lock, as this will result 1590 1.32.2.9 skrll * in LOR between the node lock and the driver lock. 1591 1.32.2.9 skrll */ 1592 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1593 1.32.2.9 skrll if (ni->ni_associd != 0) { 1594 1.32.2.9 skrll IEEE80211_SEND_MGMT(ic, ni, 1595 1.32.2.9 skrll IEEE80211_FC0_SUBTYPE_DEAUTH, 1596 1.32.2.9 skrll IEEE80211_REASON_AUTH_EXPIRE); 1597 1.32.2.9 skrll } 1598 1.32.2.3 skrll ieee80211_node_leave(ic, ni); 1599 1.32.2.9 skrll ic->ic_stats.is_node_timeout++; 1600 1.32.2.9 skrll goto restart; 1601 1.32.2.9 skrll } 1602 1.32.2.2 skrll } 1603 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1604 1.32.2.9 skrll 1605 1.32.2.9 skrll IEEE80211_SCAN_UNLOCK(nt); 1606 1.32.2.9 skrll 1607 1.32.2.9 skrll nt->nt_inact_timer = IEEE80211_INACT_WAIT; 1608 1.32.2.2 skrll } 1609 1.32.2.2 skrll 1610 1.32.2.2 skrll void 1611 1.32.2.9 skrll ieee80211_iterate_nodes(struct ieee80211_node_table *nt, ieee80211_iter_func *f, void *arg) 1612 1.32.2.2 skrll { 1613 1.32.2.2 skrll struct ieee80211_node *ni; 1614 1.32.2.9 skrll u_int gen; 1615 1.32.2.2 skrll 1616 1.32.2.9 skrll IEEE80211_SCAN_LOCK(nt); 1617 1.32.2.9 skrll gen = nt->nt_scangen++; 1618 1.32.2.9 skrll restart: 1619 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1620 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1621 1.32.2.9 skrll if (ni->ni_scangen != gen) { 1622 1.32.2.9 skrll ni->ni_scangen = gen; 1623 1.32.2.9 skrll (void) ieee80211_ref_node(ni); 1624 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1625 1.32.2.9 skrll (*f)(arg, ni); 1626 1.32.2.9 skrll ieee80211_free_node(ni); 1627 1.32.2.9 skrll goto restart; 1628 1.32.2.9 skrll } 1629 1.32.2.9 skrll } 1630 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1631 1.32.2.9 skrll 1632 1.32.2.9 skrll IEEE80211_SCAN_UNLOCK(nt); 1633 1.32.2.9 skrll } 1634 1.32.2.9 skrll 1635 1.32.2.9 skrll void 1636 1.32.2.9 skrll ieee80211_dump_node(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 1637 1.32.2.9 skrll { 1638 1.32.2.9 skrll printf("0x%p: mac %s refcnt %d\n", ni, 1639 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)); 1640 1.32.2.9 skrll printf("\tscangen %u authmode %u flags 0x%x\n", 1641 1.32.2.9 skrll ni->ni_scangen, ni->ni_authmode, ni->ni_flags); 1642 1.32.2.9 skrll printf("\tassocid 0x%x txpower %u vlan %u\n", 1643 1.32.2.9 skrll ni->ni_associd, ni->ni_txpower, ni->ni_vlan); 1644 1.32.2.9 skrll printf("\ttxseq %u rxseq %u fragno %u rxfragstamp %u\n", 1645 1.32.2.9 skrll ni->ni_txseqs[0], 1646 1.32.2.9 skrll ni->ni_rxseqs[0] >> IEEE80211_SEQ_SEQ_SHIFT, 1647 1.32.2.9 skrll ni->ni_rxseqs[0] & IEEE80211_SEQ_FRAG_MASK, 1648 1.32.2.9 skrll ni->ni_rxfragstamp); 1649 1.32.2.9 skrll printf("\trstamp %u rssi %u intval %u capinfo 0x%x\n", 1650 1.32.2.9 skrll ni->ni_rstamp, ni->ni_rssi, ni->ni_intval, ni->ni_capinfo); 1651 1.32.2.9 skrll printf("\tbssid %s essid \"%.*s\" channel %u:0x%x\n", 1652 1.32.2.9 skrll ether_sprintf(ni->ni_bssid), 1653 1.32.2.9 skrll ni->ni_esslen, ni->ni_essid, 1654 1.32.2.9 skrll ni->ni_chan->ic_freq, ni->ni_chan->ic_flags); 1655 1.32.2.9 skrll printf("\tfails %u inact %u txrate %u\n", 1656 1.32.2.9 skrll ni->ni_fails, ni->ni_inact, ni->ni_txrate); 1657 1.32.2.9 skrll } 1658 1.32.2.9 skrll 1659 1.32.2.9 skrll void 1660 1.32.2.9 skrll ieee80211_dump_nodes(struct ieee80211_node_table *nt) 1661 1.32.2.9 skrll { 1662 1.32.2.9 skrll ieee80211_iterate_nodes(nt, 1663 1.32.2.9 skrll (ieee80211_iter_func *) ieee80211_dump_node, nt); 1664 1.32.2.9 skrll } 1665 1.32.2.9 skrll 1666 1.32.2.9 skrll /* 1667 1.32.2.9 skrll * Handle a station joining an 11g network. 1668 1.32.2.9 skrll */ 1669 1.32.2.9 skrll static void 1670 1.32.2.9 skrll ieee80211_node_join_11g(struct ieee80211com *ic, struct ieee80211_node *ni) 1671 1.32.2.9 skrll { 1672 1.32.2.9 skrll 1673 1.32.2.9 skrll /* 1674 1.32.2.9 skrll * Station isn't capable of short slot time. Bump 1675 1.32.2.9 skrll * the count of long slot time stations and disable 1676 1.32.2.9 skrll * use of short slot time. Note that the actual switch 1677 1.32.2.9 skrll * over to long slot time use may not occur until the 1678 1.32.2.9 skrll * next beacon transmission (per sec. 7.3.1.4 of 11g). 1679 1.32.2.9 skrll */ 1680 1.32.2.9 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 1681 1.32.2.9 skrll ic->ic_longslotsta++; 1682 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1683 1.32.2.9 skrll "[%s] station needs long slot time, count %d\n", 1684 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ic->ic_longslotsta); 1685 1.32.2.9 skrll /* XXX vap's w/ conflicting needs won't work */ 1686 1.32.2.9 skrll ieee80211_set_shortslottime(ic, 0); 1687 1.32.2.9 skrll } 1688 1.32.2.9 skrll /* 1689 1.32.2.9 skrll * If the new station is not an ERP station 1690 1.32.2.9 skrll * then bump the counter and enable protection 1691 1.32.2.9 skrll * if configured. 1692 1.32.2.9 skrll */ 1693 1.32.2.9 skrll if (!ieee80211_iserp_rateset(ic, &ni->ni_rates)) { 1694 1.32.2.9 skrll ic->ic_nonerpsta++; 1695 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1696 1.32.2.9 skrll "[%s] station is !ERP, %d non-ERP stations associated\n", 1697 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ic->ic_nonerpsta); 1698 1.32.2.9 skrll /* 1699 1.32.2.9 skrll * If protection is configured, enable it. 1700 1.32.2.9 skrll */ 1701 1.32.2.9 skrll if (ic->ic_protmode != IEEE80211_PROT_NONE) { 1702 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1703 1.32.2.9 skrll "%s: enable use of protection\n", __func__); 1704 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_USEPROT; 1705 1.32.2.9 skrll } 1706 1.32.2.9 skrll /* 1707 1.32.2.9 skrll * If station does not support short preamble 1708 1.32.2.9 skrll * then we must enable use of Barker preamble. 1709 1.32.2.9 skrll */ 1710 1.32.2.9 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_PREAMBLE) == 0) { 1711 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1712 1.32.2.9 skrll "[%s] station needs long preamble\n", 1713 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr)); 1714 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_USEBARKER; 1715 1.32.2.9 skrll ic->ic_flags &= ~IEEE80211_F_SHPREAMBLE; 1716 1.32.2.9 skrll } 1717 1.32.2.9 skrll } else 1718 1.32.2.9 skrll ni->ni_flags |= IEEE80211_NODE_ERP; 1719 1.32.2.2 skrll } 1720 1.32.2.2 skrll 1721 1.32.2.2 skrll void 1722 1.32.2.2 skrll ieee80211_node_join(struct ieee80211com *ic, struct ieee80211_node *ni, int resp) 1723 1.32.2.2 skrll { 1724 1.32.2.2 skrll int newassoc; 1725 1.32.2.2 skrll 1726 1.32.2.2 skrll if (ni->ni_associd == 0) { 1727 1.32.2.2 skrll u_int16_t aid; 1728 1.32.2.2 skrll 1729 1.32.2.2 skrll /* 1730 1.32.2.9 skrll * It would be good to search the bitmap 1731 1.32.2.2 skrll * more efficiently, but this will do for now. 1732 1.32.2.2 skrll */ 1733 1.32.2.2 skrll for (aid = 1; aid < ic->ic_max_aid; aid++) { 1734 1.32.2.2 skrll if (!IEEE80211_AID_ISSET(aid, 1735 1.32.2.2 skrll ic->ic_aid_bitmap)) 1736 1.32.2.2 skrll break; 1737 1.32.2.2 skrll } 1738 1.32.2.2 skrll if (aid >= ic->ic_max_aid) { 1739 1.32.2.2 skrll IEEE80211_SEND_MGMT(ic, ni, resp, 1740 1.32.2.2 skrll IEEE80211_REASON_ASSOC_TOOMANY); 1741 1.32.2.2 skrll ieee80211_node_leave(ic, ni); 1742 1.32.2.2 skrll return; 1743 1.32.2.2 skrll } 1744 1.32.2.2 skrll ni->ni_associd = aid | 0xc000; 1745 1.32.2.2 skrll IEEE80211_AID_SET(ni->ni_associd, ic->ic_aid_bitmap); 1746 1.32.2.9 skrll ic->ic_sta_assoc++; 1747 1.32.2.2 skrll newassoc = 1; 1748 1.32.2.9 skrll if (ic->ic_curmode == IEEE80211_MODE_11G || 1749 1.32.2.9 skrll ic->ic_curmode == IEEE80211_MODE_TURBO_G) 1750 1.32.2.9 skrll ieee80211_node_join_11g(ic, ni); 1751 1.32.2.2 skrll } else 1752 1.32.2.2 skrll newassoc = 0; 1753 1.32.2.2 skrll 1754 1.32.2.2 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, 1755 1.32.2.9 skrll "[%s] station %sassociated at aid %d: %s preamble, %s slot time%s%s\n", 1756 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), newassoc ? "" : "re", 1757 1.32.2.9 skrll IEEE80211_NODE_AID(ni), 1758 1.32.2.9 skrll ic->ic_flags & IEEE80211_F_SHPREAMBLE ? "short" : "long", 1759 1.32.2.9 skrll ic->ic_flags & IEEE80211_F_SHSLOT ? "short" : "long", 1760 1.32.2.9 skrll ic->ic_flags & IEEE80211_F_USEPROT ? ", protection" : "", 1761 1.32.2.9 skrll ni->ni_flags & IEEE80211_NODE_QOS ? ", QoS" : "" 1762 1.32.2.9 skrll ); 1763 1.32.2.2 skrll 1764 1.32.2.2 skrll /* give driver a chance to setup state like ni_txrate */ 1765 1.32.2.9 skrll if (ic->ic_newassoc != NULL) 1766 1.32.2.9 skrll ic->ic_newassoc(ic, ni, newassoc); 1767 1.32.2.9 skrll ni->ni_inact_reload = ic->ic_inact_auth; 1768 1.32.2.9 skrll ni->ni_inact = ni->ni_inact_reload; 1769 1.32.2.2 skrll IEEE80211_SEND_MGMT(ic, ni, resp, IEEE80211_STATUS_SUCCESS); 1770 1.32.2.9 skrll /* tell the authenticator about new station */ 1771 1.32.2.9 skrll if (ic->ic_auth->ia_node_join != NULL) 1772 1.32.2.9 skrll ic->ic_auth->ia_node_join(ic, ni); 1773 1.32.2.9 skrll ieee80211_notify_node_join(ic, ni, newassoc); 1774 1.32.2.9 skrll } 1775 1.32.2.9 skrll 1776 1.32.2.9 skrll /* 1777 1.32.2.9 skrll * Handle a station leaving an 11g network. 1778 1.32.2.9 skrll */ 1779 1.32.2.9 skrll static void 1780 1.32.2.9 skrll ieee80211_node_leave_11g(struct ieee80211com *ic, struct ieee80211_node *ni) 1781 1.32.2.9 skrll { 1782 1.32.2.9 skrll 1783 1.32.2.9 skrll IASSERT(ic->ic_curmode == IEEE80211_MODE_11G || 1784 1.32.2.9 skrll ic->ic_curmode == IEEE80211_MODE_TURBO_G, 1785 1.32.2.9 skrll ("not in 11g, curmode %x", ic->ic_curmode)); 1786 1.32.2.9 skrll 1787 1.32.2.9 skrll /* 1788 1.32.2.9 skrll * If a long slot station do the slot time bookkeeping. 1789 1.32.2.9 skrll */ 1790 1.32.2.9 skrll if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 1791 1.32.2.9 skrll IASSERT(ic->ic_longslotsta > 0, 1792 1.32.2.9 skrll ("bogus long slot station count %d", ic->ic_longslotsta)); 1793 1.32.2.9 skrll ic->ic_longslotsta--; 1794 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1795 1.32.2.9 skrll "[%s] long slot time station leaves, count now %d\n", 1796 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ic->ic_longslotsta); 1797 1.32.2.9 skrll if (ic->ic_longslotsta == 0) { 1798 1.32.2.9 skrll /* 1799 1.32.2.9 skrll * Re-enable use of short slot time if supported 1800 1.32.2.9 skrll * and not operating in IBSS mode (per spec). 1801 1.32.2.9 skrll */ 1802 1.32.2.9 skrll if ((ic->ic_caps & IEEE80211_C_SHSLOT) && 1803 1.32.2.9 skrll ic->ic_opmode != IEEE80211_M_IBSS) { 1804 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1805 1.32.2.9 skrll "%s: re-enable use of short slot time\n", 1806 1.32.2.9 skrll __func__); 1807 1.32.2.9 skrll ieee80211_set_shortslottime(ic, 1); 1808 1.32.2.9 skrll } 1809 1.32.2.9 skrll } 1810 1.32.2.9 skrll } 1811 1.32.2.9 skrll /* 1812 1.32.2.9 skrll * If a non-ERP station do the protection-related bookkeeping. 1813 1.32.2.9 skrll */ 1814 1.32.2.9 skrll if ((ni->ni_flags & IEEE80211_NODE_ERP) == 0) { 1815 1.32.2.9 skrll IASSERT(ic->ic_nonerpsta > 0, 1816 1.32.2.9 skrll ("bogus non-ERP station count %d", ic->ic_nonerpsta)); 1817 1.32.2.9 skrll ic->ic_nonerpsta--; 1818 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1819 1.32.2.9 skrll "[%s] non-ERP station leaves, count now %d\n", 1820 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), ic->ic_nonerpsta); 1821 1.32.2.9 skrll if (ic->ic_nonerpsta == 0) { 1822 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1823 1.32.2.9 skrll "%s: disable use of protection\n", __func__); 1824 1.32.2.9 skrll ic->ic_flags &= ~IEEE80211_F_USEPROT; 1825 1.32.2.9 skrll /* XXX verify mode? */ 1826 1.32.2.9 skrll if (ic->ic_caps & IEEE80211_C_SHPREAMBLE) { 1827 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC, 1828 1.32.2.9 skrll "%s: re-enable use of short preamble\n", 1829 1.32.2.9 skrll __func__); 1830 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_SHPREAMBLE; 1831 1.32.2.9 skrll ic->ic_flags &= ~IEEE80211_F_USEBARKER; 1832 1.32.2.9 skrll } 1833 1.32.2.9 skrll } 1834 1.32.2.9 skrll } 1835 1.32.2.2 skrll } 1836 1.32.2.2 skrll 1837 1.32.2.2 skrll /* 1838 1.32.2.2 skrll * Handle bookkeeping for station deauthentication/disassociation 1839 1.32.2.2 skrll * when operating as an ap. 1840 1.32.2.2 skrll */ 1841 1.32.2.2 skrll void 1842 1.32.2.2 skrll ieee80211_node_leave(struct ieee80211com *ic, struct ieee80211_node *ni) 1843 1.32.2.2 skrll { 1844 1.32.2.9 skrll struct ieee80211_node_table *nt = ni->ni_table; 1845 1.32.2.9 skrll 1846 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, 1847 1.32.2.9 skrll "[%s] station with aid %d leaves\n", 1848 1.32.2.9 skrll ether_sprintf(ni->ni_macaddr), IEEE80211_NODE_AID(ni)); 1849 1.32.2.2 skrll 1850 1.32.2.9 skrll IASSERT(ic->ic_opmode == IEEE80211_M_HOSTAP || 1851 1.32.2.9 skrll ic->ic_opmode == IEEE80211_M_IBSS || 1852 1.32.2.9 skrll ic->ic_opmode == IEEE80211_M_AHDEMO, 1853 1.32.2.9 skrll ("unexpected operating mode %u", ic->ic_opmode)); 1854 1.32.2.2 skrll /* 1855 1.32.2.2 skrll * If node wasn't previously associated all 1856 1.32.2.2 skrll * we need to do is reclaim the reference. 1857 1.32.2.2 skrll */ 1858 1.32.2.9 skrll /* XXX ibss mode bypasses 11g and notification */ 1859 1.32.2.2 skrll if (ni->ni_associd == 0) 1860 1.32.2.9 skrll goto done; 1861 1.32.2.9 skrll /* 1862 1.32.2.9 skrll * Tell the authenticator the station is leaving. 1863 1.32.2.9 skrll * Note that we must do this before yanking the 1864 1.32.2.9 skrll * association id as the authenticator uses the 1865 1.32.2.9 skrll * associd to locate it's state block. 1866 1.32.2.9 skrll */ 1867 1.32.2.9 skrll if (ic->ic_auth->ia_node_leave != NULL) 1868 1.32.2.9 skrll ic->ic_auth->ia_node_leave(ic, ni); 1869 1.32.2.2 skrll IEEE80211_AID_CLR(ni->ni_associd, ic->ic_aid_bitmap); 1870 1.32.2.2 skrll ni->ni_associd = 0; 1871 1.32.2.9 skrll ic->ic_sta_assoc--; 1872 1.32.2.9 skrll 1873 1.32.2.9 skrll if (ic->ic_curmode == IEEE80211_MODE_11G || 1874 1.32.2.9 skrll ic->ic_curmode == IEEE80211_MODE_TURBO_G) 1875 1.32.2.9 skrll ieee80211_node_leave_11g(ic, ni); 1876 1.32.2.9 skrll /* 1877 1.32.2.9 skrll * Cleanup station state. In particular clear various 1878 1.32.2.9 skrll * state that might otherwise be reused if the node 1879 1.32.2.9 skrll * is reused before the reference count goes to zero 1880 1.32.2.9 skrll * (and memory is reclaimed). 1881 1.32.2.9 skrll */ 1882 1.32.2.9 skrll ieee80211_sta_leave(ic, ni); 1883 1.32.2.9 skrll done: 1884 1.32.2.9 skrll /* 1885 1.32.2.9 skrll * Remove the node from any table it's recorded in and 1886 1.32.2.9 skrll * drop the caller's reference. Removal from the table 1887 1.32.2.9 skrll * is important to insure the node is not reprocessed 1888 1.32.2.9 skrll * for inactivity. 1889 1.32.2.9 skrll */ 1890 1.32.2.9 skrll if (nt != NULL) { 1891 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 1892 1.32.2.9 skrll node_reclaim(nt, ni); 1893 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 1894 1.32.2.9 skrll } else 1895 1.32.2.9 skrll ieee80211_free_node(ni); 1896 1.32.2.9 skrll } 1897 1.32.2.9 skrll 1898 1.32.2.9 skrll u_int8_t 1899 1.32.2.9 skrll ieee80211_getrssi(struct ieee80211com *ic) 1900 1.32.2.9 skrll { 1901 1.32.2.9 skrll #define NZ(x) ((x) == 0 ? 1 : (x)) 1902 1.32.2.9 skrll struct ieee80211_node_table *nt = &ic->ic_sta; 1903 1.32.2.9 skrll u_int32_t rssi_samples, rssi_total; 1904 1.32.2.9 skrll struct ieee80211_node *ni; 1905 1.32.2.9 skrll 1906 1.32.2.9 skrll rssi_total = 0; 1907 1.32.2.9 skrll rssi_samples = 0; 1908 1.32.2.9 skrll switch (ic->ic_opmode) { 1909 1.32.2.9 skrll case IEEE80211_M_IBSS: /* average of all ibss neighbors */ 1910 1.32.2.9 skrll /* XXX locking */ 1911 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) 1912 1.32.2.9 skrll if (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) { 1913 1.32.2.9 skrll rssi_samples++; 1914 1.32.2.9 skrll rssi_total += ic->ic_node_getrssi(ni); 1915 1.32.2.9 skrll } 1916 1.32.2.9 skrll break; 1917 1.32.2.9 skrll case IEEE80211_M_AHDEMO: /* average of all neighbors */ 1918 1.32.2.9 skrll /* XXX locking */ 1919 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1920 1.32.2.9 skrll rssi_samples++; 1921 1.32.2.9 skrll rssi_total += ic->ic_node_getrssi(ni); 1922 1.32.2.9 skrll } 1923 1.32.2.9 skrll break; 1924 1.32.2.9 skrll case IEEE80211_M_HOSTAP: /* average of all associated stations */ 1925 1.32.2.9 skrll #ifndef IEEE80211_NO_HOSTAP 1926 1.32.2.9 skrll /* XXX locking */ 1927 1.32.2.9 skrll TAILQ_FOREACH(ni, &nt->nt_node, ni_list) 1928 1.32.2.9 skrll if (IEEE80211_AID(ni->ni_associd) != 0) { 1929 1.32.2.9 skrll rssi_samples++; 1930 1.32.2.9 skrll rssi_total += ic->ic_node_getrssi(ni); 1931 1.32.2.9 skrll } 1932 1.32.2.9 skrll #endif /* !IEEE80211_NO_HOSTAP */ 1933 1.32.2.9 skrll break; 1934 1.32.2.9 skrll case IEEE80211_M_MONITOR: /* XXX */ 1935 1.32.2.9 skrll case IEEE80211_M_STA: /* use stats from associated ap */ 1936 1.32.2.9 skrll default: 1937 1.32.2.9 skrll if (ic->ic_bss != NULL) 1938 1.32.2.9 skrll rssi_total = ic->ic_node_getrssi(ic->ic_bss); 1939 1.32.2.9 skrll rssi_samples = 1; 1940 1.32.2.9 skrll break; 1941 1.32.2.9 skrll } 1942 1.32.2.9 skrll return rssi_total / NZ(rssi_samples); 1943 1.32.2.9 skrll #undef NZ 1944 1.32.2.9 skrll } 1945 1.32.2.9 skrll 1946 1.32.2.9 skrll /* 1947 1.32.2.9 skrll * Indicate whether there are frames queued for a station in power-save mode. 1948 1.32.2.9 skrll */ 1949 1.32.2.9 skrll static void 1950 1.32.2.9 skrll ieee80211_set_tim(struct ieee80211com *ic, struct ieee80211_node *ni, int set) 1951 1.32.2.9 skrll { 1952 1.32.2.9 skrll u_int16_t aid; 1953 1.32.2.9 skrll 1954 1.32.2.9 skrll IASSERT(ic->ic_opmode == IEEE80211_M_HOSTAP || 1955 1.32.2.9 skrll ic->ic_opmode == IEEE80211_M_IBSS, 1956 1.32.2.9 skrll ("operating mode %u", ic->ic_opmode)); 1957 1.32.2.9 skrll 1958 1.32.2.9 skrll aid = IEEE80211_AID(ni->ni_associd); 1959 1.32.2.9 skrll IASSERT(aid < ic->ic_max_aid, 1960 1.32.2.9 skrll ("bogus aid %u, max %u", aid, ic->ic_max_aid)); 1961 1.32.2.9 skrll 1962 1.32.2.9 skrll IEEE80211_BEACON_LOCK(ic); 1963 1.32.2.9 skrll if (set != (isset(ic->ic_tim_bitmap, aid) != 0)) { 1964 1.32.2.9 skrll if (set) { 1965 1.32.2.9 skrll setbit(ic->ic_tim_bitmap, aid); 1966 1.32.2.9 skrll ic->ic_ps_pending++; 1967 1.32.2.9 skrll } else { 1968 1.32.2.9 skrll clrbit(ic->ic_tim_bitmap, aid); 1969 1.32.2.9 skrll ic->ic_ps_pending--; 1970 1.32.2.9 skrll } 1971 1.32.2.9 skrll ic->ic_flags |= IEEE80211_F_TIMUPDATE; 1972 1.32.2.9 skrll } 1973 1.32.2.9 skrll IEEE80211_BEACON_UNLOCK(ic); 1974 1.32.2.9 skrll } 1975 1.32.2.9 skrll 1976 1.32.2.9 skrll /* 1977 1.32.2.9 skrll * Node table support. 1978 1.32.2.9 skrll */ 1979 1.32.2.9 skrll 1980 1.32.2.9 skrll static void 1981 1.32.2.9 skrll ieee80211_node_table_init(struct ieee80211com *ic, 1982 1.32.2.9 skrll struct ieee80211_node_table *nt, 1983 1.32.2.9 skrll const char *name, int inact, 1984 1.32.2.9 skrll void (*timeout)(struct ieee80211_node_table *)) 1985 1.32.2.9 skrll { 1986 1.32.2.9 skrll 1987 1.32.2.9 skrll IEEE80211_DPRINTF(ic, IEEE80211_MSG_NODE, 1988 1.32.2.9 skrll "%s %s table, inact %u\n", __func__, name, inact); 1989 1.32.2.9 skrll 1990 1.32.2.9 skrll nt->nt_ic = ic; 1991 1.32.2.9 skrll /* XXX need unit */ 1992 1.32.2.9 skrll IEEE80211_NODE_LOCK_INIT(nt, ic->ic_ifp->if_xname); 1993 1.32.2.9 skrll IEEE80211_SCAN_LOCK_INIT(nt, ic->ic_ifp->if_xname); 1994 1.32.2.9 skrll TAILQ_INIT(&nt->nt_node); 1995 1.32.2.9 skrll nt->nt_name = name; 1996 1.32.2.9 skrll nt->nt_scangen = 1; 1997 1.32.2.9 skrll nt->nt_inact_init = inact; 1998 1.32.2.9 skrll nt->nt_timeout = timeout; 1999 1.32.2.9 skrll } 2000 1.32.2.9 skrll 2001 1.32.2.9 skrll void 2002 1.32.2.9 skrll ieee80211_node_table_reset(struct ieee80211_node_table *nt) 2003 1.32.2.9 skrll { 2004 1.32.2.9 skrll 2005 1.32.2.9 skrll IEEE80211_DPRINTF(nt->nt_ic, IEEE80211_MSG_NODE, 2006 1.32.2.9 skrll "%s %s table\n", __func__, nt->nt_name); 2007 1.32.2.9 skrll 2008 1.32.2.9 skrll IEEE80211_NODE_LOCK(nt); 2009 1.32.2.9 skrll nt->nt_inact_timer = 0; 2010 1.32.2.9 skrll ieee80211_free_allnodes_locked(nt); 2011 1.32.2.9 skrll IEEE80211_NODE_UNLOCK(nt); 2012 1.32.2.9 skrll } 2013 1.32.2.9 skrll 2014 1.32.2.9 skrll static void 2015 1.32.2.9 skrll ieee80211_node_table_cleanup(struct ieee80211_node_table *nt) 2016 1.32.2.9 skrll { 2017 1.32.2.9 skrll 2018 1.32.2.9 skrll IEEE80211_DPRINTF(nt->nt_ic, IEEE80211_MSG_NODE, 2019 1.32.2.9 skrll "%s %s table\n", __func__, nt->nt_name); 2020 1.32.2.9 skrll 2021 1.32.2.9 skrll ieee80211_free_allnodes_locked(nt); 2022 1.32.2.9 skrll IEEE80211_SCAN_LOCK_DESTROY(nt); 2023 1.32.2.9 skrll IEEE80211_NODE_LOCK_DESTROY(nt); 2024 1.32.2.2 skrll } 2025
Indexes created Tue Sep 30 20:09:53 GMT 2025