1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (c) 2008, 2009 open80211s Ltd. 4 * Copyright (C) 2018 - 2024 Intel Corporation 5 * Authors: Luis Carlos Cobo <luisca@cozybit.com> 6 * Javier Cardona <javier@cozybit.com> 7 */ 8 9 #include <linux/slab.h> 10 #include <linux/unaligned.h> 11 #include "ieee80211_i.h" 12 #include "mesh.h" 13 #include "wme.h" 14 #include "driver-ops.h" 15 16 static int mesh_allocated; 17 static struct kmem_cache *rm_cache; 18 mesh_action_is_path_sel(struct ieee80211_mgmt * mgmt)19 bool mesh_action_is_path_sel(struct ieee80211_mgmt *mgmt) 20 { 21 return (mgmt->u.action.u.mesh_action.action_code == 22 WLAN_MESH_ACTION_HWMP_PATH_SELECTION); 23 } 24 ieee80211s_init(void)25 void ieee80211s_init(void) 26 { 27 mesh_allocated = 1; 28 rm_cache = kmem_cache_create("mesh_rmc", sizeof(struct rmc_entry), 29 0, 0, NULL); 30 } 31 ieee80211s_stop(void)32 void ieee80211s_stop(void) 33 { 34 if (!mesh_allocated) 35 return; 36 kmem_cache_destroy(rm_cache); 37 } 38 ieee80211_mesh_housekeeping_timer(struct timer_list * t)39 static void ieee80211_mesh_housekeeping_timer(struct timer_list *t) 40 { 41 struct ieee80211_sub_if_data *sdata = 42 from_timer(sdata, t, u.mesh.housekeeping_timer); 43 struct ieee80211_local *local = sdata->local; 44 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 45 46 set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags); 47 48 wiphy_work_queue(local->hw.wiphy, &sdata->work); 49 } 50 51 /** 52 * mesh_matches_local - check if the config of a mesh point matches ours 53 * 54 * @sdata: local mesh subif 55 * @ie: information elements of a management frame from the mesh peer 56 * 57 * This function checks if the mesh configuration of a mesh point matches the 58 * local mesh configuration, i.e. if both nodes belong to the same mesh network. 59 * 60 * Returns: %true if both nodes belong to the same mesh 61 */ mesh_matches_local(struct ieee80211_sub_if_data * sdata,struct ieee802_11_elems * ie)62 bool mesh_matches_local(struct ieee80211_sub_if_data *sdata, 63 struct ieee802_11_elems *ie) 64 { 65 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 66 u32 basic_rates = 0; 67 struct cfg80211_chan_def sta_chan_def; 68 struct ieee80211_supported_band *sband; 69 u32 vht_cap_info = 0; 70 71 /* 72 * As support for each feature is added, check for matching 73 * - On mesh config capabilities 74 * - Power Save Support En 75 * - Sync support enabled 76 * - Sync support active 77 * - Sync support required from peer 78 * - MDA enabled 79 * - Power management control on fc 80 */ 81 if (!(ifmsh->mesh_id_len == ie->mesh_id_len && 82 memcmp(ifmsh->mesh_id, ie->mesh_id, ie->mesh_id_len) == 0 && 83 (ifmsh->mesh_pp_id == ie->mesh_config->meshconf_psel) && 84 (ifmsh->mesh_pm_id == ie->mesh_config->meshconf_pmetric) && 85 (ifmsh->mesh_cc_id == ie->mesh_config->meshconf_congest) && 86 (ifmsh->mesh_sp_id == ie->mesh_config->meshconf_synch) && 87 (ifmsh->mesh_auth_id == ie->mesh_config->meshconf_auth))) 88 return false; 89 90 sband = ieee80211_get_sband(sdata); 91 if (!sband) 92 return false; 93 94 ieee80211_sta_get_rates(sdata, ie, sband->band, 95 &basic_rates); 96 97 if (sdata->vif.bss_conf.basic_rates != basic_rates) 98 return false; 99 100 cfg80211_chandef_create(&sta_chan_def, sdata->vif.bss_conf.chanreq.oper.chan, 101 NL80211_CHAN_NO_HT); 102 ieee80211_chandef_ht_oper(ie->ht_operation, &sta_chan_def); 103 104 if (ie->vht_cap_elem) 105 vht_cap_info = le32_to_cpu(ie->vht_cap_elem->vht_cap_info); 106 107 ieee80211_chandef_vht_oper(&sdata->local->hw, vht_cap_info, 108 ie->vht_operation, ie->ht_operation, 109 &sta_chan_def); 110 ieee80211_chandef_he_6ghz_oper(sdata->local, ie->he_operation, 111 ie->eht_operation, 112 &sta_chan_def); 113 114 if (!cfg80211_chandef_compatible(&sdata->vif.bss_conf.chanreq.oper, 115 &sta_chan_def)) 116 return false; 117 118 return true; 119 } 120 121 /** 122 * mesh_peer_accepts_plinks - check if an mp is willing to establish peer links 123 * 124 * @ie: information elements of a management frame from the mesh peer 125 * 126 * Returns: %true if the mesh peer is willing to establish peer links 127 */ mesh_peer_accepts_plinks(struct ieee802_11_elems * ie)128 bool mesh_peer_accepts_plinks(struct ieee802_11_elems *ie) 129 { 130 return (ie->mesh_config->meshconf_cap & 131 IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS) != 0; 132 } 133 134 /** 135 * mesh_accept_plinks_update - update accepting_plink in local mesh beacons 136 * 137 * @sdata: mesh interface in which mesh beacons are going to be updated 138 * 139 * Returns: beacon changed flag if the beacon content changed. 140 */ mesh_accept_plinks_update(struct ieee80211_sub_if_data * sdata)141 u64 mesh_accept_plinks_update(struct ieee80211_sub_if_data *sdata) 142 { 143 bool free_plinks; 144 u64 changed = 0; 145 146 /* In case mesh_plink_free_count > 0 and mesh_plinktbl_capacity == 0, 147 * the mesh interface might be able to establish plinks with peers that 148 * are already on the table but are not on PLINK_ESTAB state. However, 149 * in general the mesh interface is not accepting peer link requests 150 * from new peers, and that must be reflected in the beacon 151 */ 152 free_plinks = mesh_plink_availables(sdata); 153 154 if (free_plinks != sdata->u.mesh.accepting_plinks) { 155 sdata->u.mesh.accepting_plinks = free_plinks; 156 changed = BSS_CHANGED_BEACON; 157 } 158 159 return changed; 160 } 161 162 /* 163 * mesh_sta_cleanup - clean up any mesh sta state 164 * 165 * @sta: mesh sta to clean up. 166 */ mesh_sta_cleanup(struct sta_info * sta)167 void mesh_sta_cleanup(struct sta_info *sta) 168 { 169 struct ieee80211_sub_if_data *sdata = sta->sdata; 170 u64 changed = mesh_plink_deactivate(sta); 171 172 if (changed) 173 ieee80211_mbss_info_change_notify(sdata, changed); 174 } 175 mesh_rmc_init(struct ieee80211_sub_if_data * sdata)176 int mesh_rmc_init(struct ieee80211_sub_if_data *sdata) 177 { 178 int i; 179 180 sdata->u.mesh.rmc = kmalloc(sizeof(struct mesh_rmc), GFP_KERNEL); 181 if (!sdata->u.mesh.rmc) 182 return -ENOMEM; 183 sdata->u.mesh.rmc->idx_mask = RMC_BUCKETS - 1; 184 for (i = 0; i < RMC_BUCKETS; i++) 185 INIT_HLIST_HEAD(&sdata->u.mesh.rmc->bucket[i]); 186 return 0; 187 } 188 mesh_rmc_free(struct ieee80211_sub_if_data * sdata)189 void mesh_rmc_free(struct ieee80211_sub_if_data *sdata) 190 { 191 struct mesh_rmc *rmc = sdata->u.mesh.rmc; 192 struct rmc_entry *p; 193 struct hlist_node *n; 194 int i; 195 196 if (!sdata->u.mesh.rmc) 197 return; 198 199 for (i = 0; i < RMC_BUCKETS; i++) { 200 hlist_for_each_entry_safe(p, n, &rmc->bucket[i], list) { 201 hlist_del(&p->list); 202 kmem_cache_free(rm_cache, p); 203 } 204 } 205 206 kfree(rmc); 207 sdata->u.mesh.rmc = NULL; 208 } 209 210 /** 211 * mesh_rmc_check - Check frame in recent multicast cache and add if absent. 212 * 213 * @sdata: interface 214 * @sa: source address 215 * @mesh_hdr: mesh_header 216 * 217 * Returns: 0 if the frame is not in the cache, nonzero otherwise. 218 * 219 * Checks using the source address and the mesh sequence number if we have 220 * received this frame lately. If the frame is not in the cache, it is added to 221 * it. 222 */ mesh_rmc_check(struct ieee80211_sub_if_data * sdata,const u8 * sa,struct ieee80211s_hdr * mesh_hdr)223 int mesh_rmc_check(struct ieee80211_sub_if_data *sdata, 224 const u8 *sa, struct ieee80211s_hdr *mesh_hdr) 225 { 226 struct mesh_rmc *rmc = sdata->u.mesh.rmc; 227 u32 seqnum = 0; 228 int entries = 0; 229 u8 idx; 230 struct rmc_entry *p; 231 struct hlist_node *n; 232 233 if (!rmc) 234 return -1; 235 236 /* Don't care about endianness since only match matters */ 237 memcpy(&seqnum, &mesh_hdr->seqnum, sizeof(mesh_hdr->seqnum)); 238 idx = le32_to_cpu(mesh_hdr->seqnum) & rmc->idx_mask; 239 hlist_for_each_entry_safe(p, n, &rmc->bucket[idx], list) { 240 ++entries; 241 if (time_after(jiffies, p->exp_time) || 242 entries == RMC_QUEUE_MAX_LEN) { 243 hlist_del(&p->list); 244 kmem_cache_free(rm_cache, p); 245 --entries; 246 } else if ((seqnum == p->seqnum) && ether_addr_equal(sa, p->sa)) 247 return -1; 248 } 249 250 p = kmem_cache_alloc(rm_cache, GFP_ATOMIC); 251 if (!p) 252 return 0; 253 254 p->seqnum = seqnum; 255 p->exp_time = jiffies + RMC_TIMEOUT; 256 memcpy(p->sa, sa, ETH_ALEN); 257 hlist_add_head(&p->list, &rmc->bucket[idx]); 258 return 0; 259 } 260 mesh_add_meshconf_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)261 int mesh_add_meshconf_ie(struct ieee80211_sub_if_data *sdata, 262 struct sk_buff *skb) 263 { 264 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 265 u8 *pos, neighbors; 266 u8 meshconf_len = sizeof(struct ieee80211_meshconf_ie); 267 bool is_connected_to_gate = ifmsh->num_gates > 0 || 268 ifmsh->mshcfg.dot11MeshGateAnnouncementProtocol || 269 ifmsh->mshcfg.dot11MeshConnectedToMeshGate; 270 bool is_connected_to_as = ifmsh->mshcfg.dot11MeshConnectedToAuthServer; 271 272 if (skb_tailroom(skb) < 2 + meshconf_len) 273 return -ENOMEM; 274 275 pos = skb_put(skb, 2 + meshconf_len); 276 *pos++ = WLAN_EID_MESH_CONFIG; 277 *pos++ = meshconf_len; 278 279 /* save a pointer for quick updates in pre-tbtt */ 280 ifmsh->meshconf_offset = pos - skb->data; 281 282 /* Active path selection protocol ID */ 283 *pos++ = ifmsh->mesh_pp_id; 284 /* Active path selection metric ID */ 285 *pos++ = ifmsh->mesh_pm_id; 286 /* Congestion control mode identifier */ 287 *pos++ = ifmsh->mesh_cc_id; 288 /* Synchronization protocol identifier */ 289 *pos++ = ifmsh->mesh_sp_id; 290 /* Authentication Protocol identifier */ 291 *pos++ = ifmsh->mesh_auth_id; 292 /* Mesh Formation Info - number of neighbors */ 293 neighbors = atomic_read(&ifmsh->estab_plinks); 294 neighbors = min_t(int, neighbors, IEEE80211_MAX_MESH_PEERINGS); 295 *pos++ = (is_connected_to_as << 7) | 296 (neighbors << 1) | 297 is_connected_to_gate; 298 /* Mesh capability */ 299 *pos = 0x00; 300 *pos |= ifmsh->mshcfg.dot11MeshForwarding ? 301 IEEE80211_MESHCONF_CAPAB_FORWARDING : 0x00; 302 *pos |= ifmsh->accepting_plinks ? 303 IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS : 0x00; 304 /* Mesh PS mode. See IEEE802.11-2012 8.4.2.100.8 */ 305 *pos |= ifmsh->ps_peers_deep_sleep ? 306 IEEE80211_MESHCONF_CAPAB_POWER_SAVE_LEVEL : 0x00; 307 return 0; 308 } 309 mesh_add_meshid_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)310 int mesh_add_meshid_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) 311 { 312 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 313 u8 *pos; 314 315 if (skb_tailroom(skb) < 2 + ifmsh->mesh_id_len) 316 return -ENOMEM; 317 318 pos = skb_put(skb, 2 + ifmsh->mesh_id_len); 319 *pos++ = WLAN_EID_MESH_ID; 320 *pos++ = ifmsh->mesh_id_len; 321 if (ifmsh->mesh_id_len) 322 memcpy(pos, ifmsh->mesh_id, ifmsh->mesh_id_len); 323 324 return 0; 325 } 326 mesh_add_awake_window_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)327 static int mesh_add_awake_window_ie(struct ieee80211_sub_if_data *sdata, 328 struct sk_buff *skb) 329 { 330 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 331 u8 *pos; 332 333 /* see IEEE802.11-2012 13.14.6 */ 334 if (ifmsh->ps_peers_light_sleep == 0 && 335 ifmsh->ps_peers_deep_sleep == 0 && 336 ifmsh->nonpeer_pm == NL80211_MESH_POWER_ACTIVE) 337 return 0; 338 339 if (skb_tailroom(skb) < 4) 340 return -ENOMEM; 341 342 pos = skb_put(skb, 2 + 2); 343 *pos++ = WLAN_EID_MESH_AWAKE_WINDOW; 344 *pos++ = 2; 345 put_unaligned_le16(ifmsh->mshcfg.dot11MeshAwakeWindowDuration, pos); 346 347 return 0; 348 } 349 mesh_add_vendor_ies(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)350 int mesh_add_vendor_ies(struct ieee80211_sub_if_data *sdata, 351 struct sk_buff *skb) 352 { 353 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 354 u8 offset, len; 355 const u8 *data; 356 357 if (!ifmsh->ie || !ifmsh->ie_len) 358 return 0; 359 360 /* fast-forward to vendor IEs */ 361 offset = ieee80211_ie_split_vendor(ifmsh->ie, ifmsh->ie_len, 0); 362 363 if (offset < ifmsh->ie_len) { 364 len = ifmsh->ie_len - offset; 365 data = ifmsh->ie + offset; 366 if (skb_tailroom(skb) < len) 367 return -ENOMEM; 368 skb_put_data(skb, data, len); 369 } 370 371 return 0; 372 } 373 mesh_add_rsn_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)374 int mesh_add_rsn_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) 375 { 376 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 377 u8 len = 0; 378 const u8 *data; 379 380 if (!ifmsh->ie || !ifmsh->ie_len) 381 return 0; 382 383 /* find RSN IE */ 384 data = cfg80211_find_ie(WLAN_EID_RSN, ifmsh->ie, ifmsh->ie_len); 385 if (!data) 386 return 0; 387 388 len = data[1] + 2; 389 390 if (skb_tailroom(skb) < len) 391 return -ENOMEM; 392 skb_put_data(skb, data, len); 393 394 return 0; 395 } 396 mesh_add_ds_params_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)397 static int mesh_add_ds_params_ie(struct ieee80211_sub_if_data *sdata, 398 struct sk_buff *skb) 399 { 400 struct ieee80211_chanctx_conf *chanctx_conf; 401 struct ieee80211_channel *chan; 402 u8 *pos; 403 404 if (skb_tailroom(skb) < 3) 405 return -ENOMEM; 406 407 rcu_read_lock(); 408 chanctx_conf = rcu_dereference(sdata->vif.bss_conf.chanctx_conf); 409 if (WARN_ON(!chanctx_conf)) { 410 rcu_read_unlock(); 411 return -EINVAL; 412 } 413 chan = chanctx_conf->def.chan; 414 rcu_read_unlock(); 415 416 pos = skb_put(skb, 2 + 1); 417 *pos++ = WLAN_EID_DS_PARAMS; 418 *pos++ = 1; 419 *pos++ = ieee80211_frequency_to_channel(chan->center_freq); 420 421 return 0; 422 } 423 mesh_add_ht_cap_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)424 int mesh_add_ht_cap_ie(struct ieee80211_sub_if_data *sdata, 425 struct sk_buff *skb) 426 { 427 struct ieee80211_supported_band *sband; 428 u8 *pos; 429 430 sband = ieee80211_get_sband(sdata); 431 if (!sband) 432 return -EINVAL; 433 434 /* HT not allowed in 6 GHz */ 435 if (sband->band == NL80211_BAND_6GHZ) 436 return 0; 437 438 if (!sband->ht_cap.ht_supported || 439 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 440 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 441 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 442 return 0; 443 444 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_cap)) 445 return -ENOMEM; 446 447 pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_cap)); 448 ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, sband->ht_cap.cap); 449 450 return 0; 451 } 452 mesh_add_ht_oper_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)453 int mesh_add_ht_oper_ie(struct ieee80211_sub_if_data *sdata, 454 struct sk_buff *skb) 455 { 456 struct ieee80211_local *local = sdata->local; 457 struct ieee80211_chanctx_conf *chanctx_conf; 458 struct ieee80211_channel *channel; 459 struct ieee80211_supported_band *sband; 460 struct ieee80211_sta_ht_cap *ht_cap; 461 u8 *pos; 462 463 rcu_read_lock(); 464 chanctx_conf = rcu_dereference(sdata->vif.bss_conf.chanctx_conf); 465 if (WARN_ON(!chanctx_conf)) { 466 rcu_read_unlock(); 467 return -EINVAL; 468 } 469 channel = chanctx_conf->def.chan; 470 rcu_read_unlock(); 471 472 sband = local->hw.wiphy->bands[channel->band]; 473 ht_cap = &sband->ht_cap; 474 475 /* HT not allowed in 6 GHz */ 476 if (sband->band == NL80211_BAND_6GHZ) 477 return 0; 478 479 if (!ht_cap->ht_supported || 480 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 481 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 482 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 483 return 0; 484 485 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_operation)) 486 return -ENOMEM; 487 488 pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_operation)); 489 ieee80211_ie_build_ht_oper(pos, ht_cap, &sdata->vif.bss_conf.chanreq.oper, 490 sdata->vif.bss_conf.ht_operation_mode, 491 false); 492 493 return 0; 494 } 495 mesh_add_vht_cap_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)496 int mesh_add_vht_cap_ie(struct ieee80211_sub_if_data *sdata, 497 struct sk_buff *skb) 498 { 499 struct ieee80211_supported_band *sband; 500 u8 *pos; 501 502 sband = ieee80211_get_sband(sdata); 503 if (!sband) 504 return -EINVAL; 505 506 /* VHT not allowed in 6 GHz */ 507 if (sband->band == NL80211_BAND_6GHZ) 508 return 0; 509 510 if (!sband->vht_cap.vht_supported || 511 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 512 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 513 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 514 return 0; 515 516 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_cap)) 517 return -ENOMEM; 518 519 pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_cap)); 520 ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, sband->vht_cap.cap); 521 522 return 0; 523 } 524 mesh_add_vht_oper_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)525 int mesh_add_vht_oper_ie(struct ieee80211_sub_if_data *sdata, 526 struct sk_buff *skb) 527 { 528 struct ieee80211_local *local = sdata->local; 529 struct ieee80211_chanctx_conf *chanctx_conf; 530 struct ieee80211_channel *channel; 531 struct ieee80211_supported_band *sband; 532 struct ieee80211_sta_vht_cap *vht_cap; 533 u8 *pos; 534 535 rcu_read_lock(); 536 chanctx_conf = rcu_dereference(sdata->vif.bss_conf.chanctx_conf); 537 if (WARN_ON(!chanctx_conf)) { 538 rcu_read_unlock(); 539 return -EINVAL; 540 } 541 channel = chanctx_conf->def.chan; 542 rcu_read_unlock(); 543 544 sband = local->hw.wiphy->bands[channel->band]; 545 vht_cap = &sband->vht_cap; 546 547 /* VHT not allowed in 6 GHz */ 548 if (sband->band == NL80211_BAND_6GHZ) 549 return 0; 550 551 if (!vht_cap->vht_supported || 552 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 553 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 554 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 555 return 0; 556 557 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_operation)) 558 return -ENOMEM; 559 560 pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_operation)); 561 ieee80211_ie_build_vht_oper(pos, vht_cap, 562 &sdata->vif.bss_conf.chanreq.oper); 563 564 return 0; 565 } 566 mesh_add_he_cap_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb,u8 ie_len)567 int mesh_add_he_cap_ie(struct ieee80211_sub_if_data *sdata, 568 struct sk_buff *skb, u8 ie_len) 569 { 570 struct ieee80211_supported_band *sband; 571 572 sband = ieee80211_get_sband(sdata); 573 if (!sband) 574 return -EINVAL; 575 576 if (sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 577 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 578 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 579 return 0; 580 581 return ieee80211_put_he_cap(skb, sdata, sband, NULL); 582 } 583 mesh_add_he_oper_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)584 int mesh_add_he_oper_ie(struct ieee80211_sub_if_data *sdata, 585 struct sk_buff *skb) 586 { 587 const struct ieee80211_sta_he_cap *he_cap; 588 struct ieee80211_supported_band *sband; 589 u32 len; 590 u8 *pos; 591 592 sband = ieee80211_get_sband(sdata); 593 if (!sband) 594 return -EINVAL; 595 596 he_cap = ieee80211_get_he_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT); 597 if (!he_cap || 598 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 599 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 600 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 601 return 0; 602 603 len = 2 + 1 + sizeof(struct ieee80211_he_operation); 604 if (sdata->vif.bss_conf.chanreq.oper.chan->band == NL80211_BAND_6GHZ) 605 len += sizeof(struct ieee80211_he_6ghz_oper); 606 607 if (skb_tailroom(skb) < len) 608 return -ENOMEM; 609 610 pos = skb_put(skb, len); 611 ieee80211_ie_build_he_oper(pos, &sdata->vif.bss_conf.chanreq.oper); 612 613 return 0; 614 } 615 mesh_add_he_6ghz_cap_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)616 int mesh_add_he_6ghz_cap_ie(struct ieee80211_sub_if_data *sdata, 617 struct sk_buff *skb) 618 { 619 struct ieee80211_supported_band *sband; 620 const struct ieee80211_sband_iftype_data *iftd; 621 622 sband = ieee80211_get_sband(sdata); 623 if (!sband) 624 return -EINVAL; 625 626 iftd = ieee80211_get_sband_iftype_data(sband, 627 NL80211_IFTYPE_MESH_POINT); 628 /* The device doesn't support HE in mesh mode or at all */ 629 if (!iftd) 630 return 0; 631 632 ieee80211_put_he_6ghz_cap(skb, sdata, sdata->deflink.smps_mode); 633 return 0; 634 } 635 mesh_add_eht_cap_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb,u8 ie_len)636 int mesh_add_eht_cap_ie(struct ieee80211_sub_if_data *sdata, 637 struct sk_buff *skb, u8 ie_len) 638 { 639 struct ieee80211_supported_band *sband; 640 641 sband = ieee80211_get_sband(sdata); 642 if (!sband) 643 return -EINVAL; 644 645 if (sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 646 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 647 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 648 return 0; 649 650 return ieee80211_put_eht_cap(skb, sdata, sband, NULL); 651 } 652 mesh_add_eht_oper_ie(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)653 int mesh_add_eht_oper_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) 654 { 655 const struct ieee80211_sta_eht_cap *eht_cap; 656 struct ieee80211_supported_band *sband; 657 u32 len; 658 u8 *pos; 659 660 sband = ieee80211_get_sband(sdata); 661 if (!sband) 662 return -EINVAL; 663 664 eht_cap = ieee80211_get_eht_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT); 665 if (!eht_cap || 666 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 667 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 668 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 669 return 0; 670 671 len = 2 + 1 + offsetof(struct ieee80211_eht_operation, optional) + 672 offsetof(struct ieee80211_eht_operation_info, optional); 673 674 if (skb_tailroom(skb) < len) 675 return -ENOMEM; 676 677 pos = skb_put(skb, len); 678 ieee80211_ie_build_eht_oper(pos, &sdata->vif.bss_conf.chanreq.oper, eht_cap); 679 680 return 0; 681 } 682 ieee80211_mesh_path_timer(struct timer_list * t)683 static void ieee80211_mesh_path_timer(struct timer_list *t) 684 { 685 struct ieee80211_sub_if_data *sdata = 686 from_timer(sdata, t, u.mesh.mesh_path_timer); 687 688 wiphy_work_queue(sdata->local->hw.wiphy, &sdata->work); 689 } 690 ieee80211_mesh_path_root_timer(struct timer_list * t)691 static void ieee80211_mesh_path_root_timer(struct timer_list *t) 692 { 693 struct ieee80211_sub_if_data *sdata = 694 from_timer(sdata, t, u.mesh.mesh_path_root_timer); 695 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 696 697 set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags); 698 699 wiphy_work_queue(sdata->local->hw.wiphy, &sdata->work); 700 } 701 ieee80211_mesh_root_setup(struct ieee80211_if_mesh * ifmsh)702 void ieee80211_mesh_root_setup(struct ieee80211_if_mesh *ifmsh) 703 { 704 if (ifmsh->mshcfg.dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT) 705 set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags); 706 else { 707 clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags); 708 /* stop running timer */ 709 del_timer_sync(&ifmsh->mesh_path_root_timer); 710 } 711 } 712 713 static void ieee80211_mesh_update_bss_params(struct ieee80211_sub_if_data * sdata,u8 * ie,u8 ie_len)714 ieee80211_mesh_update_bss_params(struct ieee80211_sub_if_data *sdata, 715 u8 *ie, u8 ie_len) 716 { 717 struct ieee80211_supported_band *sband; 718 const struct element *cap; 719 const struct ieee80211_he_operation *he_oper = NULL; 720 721 sband = ieee80211_get_sband(sdata); 722 if (!sband) 723 return; 724 725 if (!ieee80211_get_he_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT) || 726 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_20_NOHT || 727 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_5 || 728 sdata->vif.bss_conf.chanreq.oper.width == NL80211_CHAN_WIDTH_10) 729 return; 730 731 sdata->vif.bss_conf.he_support = true; 732 733 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_OPERATION, ie, ie_len); 734 if (cap && cap->datalen >= 1 + sizeof(*he_oper) && 735 cap->datalen >= 1 + ieee80211_he_oper_size(cap->data + 1)) 736 he_oper = (void *)(cap->data + 1); 737 738 if (he_oper) 739 sdata->vif.bss_conf.he_oper.params = 740 __le32_to_cpu(he_oper->he_oper_params); 741 742 sdata->vif.bss_conf.eht_support = 743 !!ieee80211_get_eht_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT); 744 } 745 ieee80211_mesh_xmit_fast(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb,u32 ctrl_flags)746 bool ieee80211_mesh_xmit_fast(struct ieee80211_sub_if_data *sdata, 747 struct sk_buff *skb, u32 ctrl_flags) 748 { 749 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 750 struct ieee80211_mesh_fast_tx_key key = { 751 .type = MESH_FAST_TX_TYPE_LOCAL 752 }; 753 struct ieee80211_mesh_fast_tx *entry; 754 struct ieee80211s_hdr *meshhdr; 755 u8 sa[ETH_ALEN] __aligned(2); 756 struct tid_ampdu_tx *tid_tx; 757 struct sta_info *sta; 758 bool copy_sa = false; 759 u16 ethertype; 760 u8 tid; 761 762 if (ctrl_flags & IEEE80211_TX_CTRL_SKIP_MPATH_LOOKUP) 763 return false; 764 765 if (ifmsh->mshcfg.dot11MeshNolearn) 766 return false; 767 768 /* Add support for these cases later */ 769 if (ifmsh->ps_peers_light_sleep || ifmsh->ps_peers_deep_sleep) 770 return false; 771 772 if (is_multicast_ether_addr(skb->data)) 773 return false; 774 775 ethertype = (skb->data[12] << 8) | skb->data[13]; 776 if (ethertype < ETH_P_802_3_MIN) 777 return false; 778 779 if (skb->sk && skb_shinfo(skb)->tx_flags & SKBTX_WIFI_STATUS) 780 return false; 781 782 if (skb->ip_summed == CHECKSUM_PARTIAL) { 783 skb_set_transport_header(skb, skb_checksum_start_offset(skb)); 784 if (skb_checksum_help(skb)) 785 return false; 786 } 787 788 ether_addr_copy(key.addr, skb->data); 789 if (!ether_addr_equal(skb->data + ETH_ALEN, sdata->vif.addr)) 790 key.type = MESH_FAST_TX_TYPE_PROXIED; 791 entry = mesh_fast_tx_get(sdata, &key); 792 if (!entry) 793 return false; 794 795 if (skb_headroom(skb) < entry->hdrlen + entry->fast_tx.hdr_len) 796 return false; 797 798 sta = rcu_dereference(entry->mpath->next_hop); 799 if (!sta) 800 return false; 801 802 tid = skb->priority & IEEE80211_QOS_CTL_TAG1D_MASK; 803 tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]); 804 if (tid_tx) { 805 if (!test_bit(HT_AGG_STATE_OPERATIONAL, &tid_tx->state)) 806 return false; 807 if (tid_tx->timeout) 808 tid_tx->last_tx = jiffies; 809 } 810 811 skb = skb_share_check(skb, GFP_ATOMIC); 812 if (!skb) 813 return true; 814 815 skb_set_queue_mapping(skb, ieee80211_select_queue(sdata, sta, skb)); 816 817 meshhdr = (struct ieee80211s_hdr *)entry->hdr; 818 if ((meshhdr->flags & MESH_FLAGS_AE) == MESH_FLAGS_AE_A5_A6) { 819 /* preserve SA from eth header for 6-addr frames */ 820 ether_addr_copy(sa, skb->data + ETH_ALEN); 821 copy_sa = true; 822 } 823 824 memcpy(skb_push(skb, entry->hdrlen - 2 * ETH_ALEN), entry->hdr, 825 entry->hdrlen); 826 827 meshhdr = (struct ieee80211s_hdr *)skb->data; 828 put_unaligned_le32(atomic_inc_return(&sdata->u.mesh.mesh_seqnum), 829 &meshhdr->seqnum); 830 meshhdr->ttl = sdata->u.mesh.mshcfg.dot11MeshTTL; 831 if (copy_sa) 832 ether_addr_copy(meshhdr->eaddr2, sa); 833 834 skb_push(skb, 2 * ETH_ALEN); 835 __ieee80211_xmit_fast(sdata, sta, &entry->fast_tx, skb, tid_tx, 836 entry->mpath->dst, sdata->vif.addr); 837 838 return true; 839 } 840 841 /** 842 * ieee80211_fill_mesh_addresses - fill addresses of a locally originated mesh frame 843 * @hdr: 802.11 frame header 844 * @fc: frame control field 845 * @meshda: destination address in the mesh 846 * @meshsa: source address in the mesh. Same as TA, as frame is 847 * locally originated. 848 * 849 * Returns: the length of the 802.11 frame header (excludes mesh control header) 850 */ ieee80211_fill_mesh_addresses(struct ieee80211_hdr * hdr,__le16 * fc,const u8 * meshda,const u8 * meshsa)851 int ieee80211_fill_mesh_addresses(struct ieee80211_hdr *hdr, __le16 *fc, 852 const u8 *meshda, const u8 *meshsa) 853 { 854 if (is_multicast_ether_addr(meshda)) { 855 *fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS); 856 /* DA TA SA */ 857 memcpy(hdr->addr1, meshda, ETH_ALEN); 858 memcpy(hdr->addr2, meshsa, ETH_ALEN); 859 memcpy(hdr->addr3, meshsa, ETH_ALEN); 860 return 24; 861 } else { 862 *fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS | IEEE80211_FCTL_TODS); 863 /* RA TA DA SA */ 864 eth_zero_addr(hdr->addr1); /* RA is resolved later */ 865 memcpy(hdr->addr2, meshsa, ETH_ALEN); 866 memcpy(hdr->addr3, meshda, ETH_ALEN); 867 memcpy(hdr->addr4, meshsa, ETH_ALEN); 868 return 30; 869 } 870 } 871 872 /** 873 * ieee80211_new_mesh_header - create a new mesh header 874 * @sdata: mesh interface to be used 875 * @meshhdr: uninitialized mesh header 876 * @addr4or5: 1st address in the ae header, which may correspond to address 4 877 * (if addr6 is NULL) or address 5 (if addr6 is present). It may 878 * be NULL. 879 * @addr6: 2nd address in the ae header, which corresponds to addr6 of the 880 * mesh frame 881 * 882 * Returns: the header length 883 */ ieee80211_new_mesh_header(struct ieee80211_sub_if_data * sdata,struct ieee80211s_hdr * meshhdr,const char * addr4or5,const char * addr6)884 unsigned int ieee80211_new_mesh_header(struct ieee80211_sub_if_data *sdata, 885 struct ieee80211s_hdr *meshhdr, 886 const char *addr4or5, const char *addr6) 887 { 888 if (WARN_ON(!addr4or5 && addr6)) 889 return 0; 890 891 memset(meshhdr, 0, sizeof(*meshhdr)); 892 893 meshhdr->ttl = sdata->u.mesh.mshcfg.dot11MeshTTL; 894 895 put_unaligned_le32(atomic_inc_return(&sdata->u.mesh.mesh_seqnum), 896 &meshhdr->seqnum); 897 if (addr4or5 && !addr6) { 898 meshhdr->flags |= MESH_FLAGS_AE_A4; 899 memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN); 900 return 2 * ETH_ALEN; 901 } else if (addr4or5 && addr6) { 902 meshhdr->flags |= MESH_FLAGS_AE_A5_A6; 903 memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN); 904 memcpy(meshhdr->eaddr2, addr6, ETH_ALEN); 905 return 3 * ETH_ALEN; 906 } 907 908 return ETH_ALEN; 909 } 910 ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data * sdata)911 static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata) 912 { 913 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 914 u64 changed; 915 916 if (ifmsh->mshcfg.plink_timeout > 0) 917 ieee80211_sta_expire(sdata, ifmsh->mshcfg.plink_timeout * HZ); 918 mesh_path_expire(sdata); 919 920 changed = mesh_accept_plinks_update(sdata); 921 ieee80211_mbss_info_change_notify(sdata, changed); 922 923 mesh_fast_tx_gc(sdata); 924 925 mod_timer(&ifmsh->housekeeping_timer, 926 round_jiffies(jiffies + 927 IEEE80211_MESH_HOUSEKEEPING_INTERVAL)); 928 } 929 ieee80211_mesh_rootpath(struct ieee80211_sub_if_data * sdata)930 static void ieee80211_mesh_rootpath(struct ieee80211_sub_if_data *sdata) 931 { 932 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 933 u32 interval; 934 935 mesh_path_tx_root_frame(sdata); 936 937 if (ifmsh->mshcfg.dot11MeshHWMPRootMode == IEEE80211_PROACTIVE_RANN) 938 interval = ifmsh->mshcfg.dot11MeshHWMPRannInterval; 939 else 940 interval = ifmsh->mshcfg.dot11MeshHWMProotInterval; 941 942 mod_timer(&ifmsh->mesh_path_root_timer, 943 round_jiffies(TU_TO_EXP_TIME(interval))); 944 } 945 946 static int ieee80211_mesh_build_beacon(struct ieee80211_if_mesh * ifmsh)947 ieee80211_mesh_build_beacon(struct ieee80211_if_mesh *ifmsh) 948 { 949 struct beacon_data *bcn; 950 int head_len, tail_len; 951 struct sk_buff *skb; 952 struct ieee80211_mgmt *mgmt; 953 struct mesh_csa_settings *csa; 954 const struct ieee80211_supported_band *sband; 955 u8 ie_len_he_cap, ie_len_eht_cap; 956 u8 *pos; 957 struct ieee80211_sub_if_data *sdata; 958 int hdr_len = offsetofend(struct ieee80211_mgmt, u.beacon); 959 u32 rate_flags; 960 961 sdata = container_of(ifmsh, struct ieee80211_sub_if_data, u.mesh); 962 963 sband = ieee80211_get_sband(sdata); 964 rate_flags = 965 ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chanreq.oper); 966 967 ie_len_he_cap = ieee80211_ie_len_he_cap(sdata); 968 ie_len_eht_cap = ieee80211_ie_len_eht_cap(sdata); 969 head_len = hdr_len + 970 2 + /* NULL SSID */ 971 /* Channel Switch Announcement */ 972 2 + sizeof(struct ieee80211_channel_sw_ie) + 973 /* Mesh Channel Switch Parameters */ 974 2 + sizeof(struct ieee80211_mesh_chansw_params_ie) + 975 /* Channel Switch Wrapper + Wide Bandwidth CSA IE */ 976 2 + 2 + sizeof(struct ieee80211_wide_bw_chansw_ie) + 977 2 + sizeof(struct ieee80211_sec_chan_offs_ie) + 978 2 + 8 + /* supported rates */ 979 2 + 3; /* DS params */ 980 tail_len = 2 + (IEEE80211_MAX_SUPP_RATES - 8) + 981 2 + sizeof(struct ieee80211_ht_cap) + 982 2 + sizeof(struct ieee80211_ht_operation) + 983 2 + ifmsh->mesh_id_len + 984 2 + sizeof(struct ieee80211_meshconf_ie) + 985 2 + sizeof(__le16) + /* awake window */ 986 2 + sizeof(struct ieee80211_vht_cap) + 987 2 + sizeof(struct ieee80211_vht_operation) + 988 ie_len_he_cap + 989 2 + 1 + sizeof(struct ieee80211_he_operation) + 990 sizeof(struct ieee80211_he_6ghz_oper) + 991 2 + 1 + sizeof(struct ieee80211_he_6ghz_capa) + 992 ie_len_eht_cap + 993 2 + 1 + offsetof(struct ieee80211_eht_operation, optional) + 994 offsetof(struct ieee80211_eht_operation_info, optional) + 995 ifmsh->ie_len; 996 997 bcn = kzalloc(sizeof(*bcn) + head_len + tail_len, GFP_KERNEL); 998 /* need an skb for IE builders to operate on */ 999 skb = __dev_alloc_skb(max(head_len, tail_len), GFP_KERNEL); 1000 1001 if (!bcn || !skb) 1002 goto out_free; 1003 1004 /* 1005 * pointers go into the block we allocated, 1006 * memory is | beacon_data | head | tail | 1007 */ 1008 bcn->head = ((u8 *) bcn) + sizeof(*bcn); 1009 1010 /* fill in the head */ 1011 mgmt = skb_put_zero(skb, hdr_len); 1012 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 1013 IEEE80211_STYPE_BEACON); 1014 eth_broadcast_addr(mgmt->da); 1015 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1016 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); 1017 ieee80211_mps_set_frame_flags(sdata, NULL, (void *) mgmt); 1018 mgmt->u.beacon.beacon_int = 1019 cpu_to_le16(sdata->vif.bss_conf.beacon_int); 1020 mgmt->u.beacon.capab_info |= cpu_to_le16( 1021 sdata->u.mesh.security ? WLAN_CAPABILITY_PRIVACY : 0); 1022 1023 pos = skb_put(skb, 2); 1024 *pos++ = WLAN_EID_SSID; 1025 *pos++ = 0x0; 1026 1027 rcu_read_lock(); 1028 csa = rcu_dereference(ifmsh->csa); 1029 if (csa) { 1030 enum nl80211_channel_type ct; 1031 struct cfg80211_chan_def *chandef; 1032 int ie_len = 2 + sizeof(struct ieee80211_channel_sw_ie) + 1033 2 + sizeof(struct ieee80211_mesh_chansw_params_ie); 1034 1035 pos = skb_put_zero(skb, ie_len); 1036 *pos++ = WLAN_EID_CHANNEL_SWITCH; 1037 *pos++ = 3; 1038 *pos++ = 0x0; 1039 *pos++ = ieee80211_frequency_to_channel( 1040 csa->settings.chandef.chan->center_freq); 1041 bcn->cntdwn_current_counter = csa->settings.count; 1042 bcn->cntdwn_counter_offsets[0] = hdr_len + 6; 1043 *pos++ = csa->settings.count; 1044 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM; 1045 *pos++ = 6; 1046 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) { 1047 *pos++ = ifmsh->mshcfg.dot11MeshTTL; 1048 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR; 1049 } else { 1050 *pos++ = ifmsh->chsw_ttl; 1051 } 1052 *pos++ |= csa->settings.block_tx ? 1053 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00; 1054 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); 1055 pos += 2; 1056 put_unaligned_le16(ifmsh->pre_value, pos); 1057 pos += 2; 1058 1059 switch (csa->settings.chandef.width) { 1060 case NL80211_CHAN_WIDTH_40: 1061 ie_len = 2 + sizeof(struct ieee80211_sec_chan_offs_ie); 1062 pos = skb_put_zero(skb, ie_len); 1063 1064 *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */ 1065 *pos++ = 1; /* len */ 1066 ct = cfg80211_get_chandef_type(&csa->settings.chandef); 1067 if (ct == NL80211_CHAN_HT40PLUS) 1068 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 1069 else 1070 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 1071 break; 1072 case NL80211_CHAN_WIDTH_80: 1073 case NL80211_CHAN_WIDTH_80P80: 1074 case NL80211_CHAN_WIDTH_160: 1075 /* Channel Switch Wrapper + Wide Bandwidth CSA IE */ 1076 ie_len = 2 + 2 + 1077 sizeof(struct ieee80211_wide_bw_chansw_ie); 1078 pos = skb_put_zero(skb, ie_len); 1079 1080 *pos++ = WLAN_EID_CHANNEL_SWITCH_WRAPPER; /* EID */ 1081 *pos++ = 5; /* len */ 1082 /* put sub IE */ 1083 chandef = &csa->settings.chandef; 1084 ieee80211_ie_build_wide_bw_cs(pos, chandef); 1085 break; 1086 default: 1087 break; 1088 } 1089 } 1090 rcu_read_unlock(); 1091 1092 if (ieee80211_put_srates_elem(skb, sband, 1093 sdata->vif.bss_conf.basic_rates, 1094 rate_flags, 0, WLAN_EID_SUPP_RATES) || 1095 mesh_add_ds_params_ie(sdata, skb)) 1096 goto out_free; 1097 1098 bcn->head_len = skb->len; 1099 memcpy(bcn->head, skb->data, bcn->head_len); 1100 1101 /* now the tail */ 1102 skb_trim(skb, 0); 1103 bcn->tail = bcn->head + bcn->head_len; 1104 1105 if (ieee80211_put_srates_elem(skb, sband, 1106 sdata->vif.bss_conf.basic_rates, 1107 rate_flags, 0, WLAN_EID_EXT_SUPP_RATES) || 1108 mesh_add_rsn_ie(sdata, skb) || 1109 mesh_add_ht_cap_ie(sdata, skb) || 1110 mesh_add_ht_oper_ie(sdata, skb) || 1111 mesh_add_meshid_ie(sdata, skb) || 1112 mesh_add_meshconf_ie(sdata, skb) || 1113 mesh_add_awake_window_ie(sdata, skb) || 1114 mesh_add_vht_cap_ie(sdata, skb) || 1115 mesh_add_vht_oper_ie(sdata, skb) || 1116 mesh_add_he_cap_ie(sdata, skb, ie_len_he_cap) || 1117 mesh_add_he_oper_ie(sdata, skb) || 1118 mesh_add_he_6ghz_cap_ie(sdata, skb) || 1119 mesh_add_eht_cap_ie(sdata, skb, ie_len_eht_cap) || 1120 mesh_add_eht_oper_ie(sdata, skb) || 1121 mesh_add_vendor_ies(sdata, skb)) 1122 goto out_free; 1123 1124 bcn->tail_len = skb->len; 1125 memcpy(bcn->tail, skb->data, bcn->tail_len); 1126 ieee80211_mesh_update_bss_params(sdata, bcn->tail, bcn->tail_len); 1127 bcn->meshconf = (struct ieee80211_meshconf_ie *) 1128 (bcn->tail + ifmsh->meshconf_offset); 1129 1130 dev_kfree_skb(skb); 1131 rcu_assign_pointer(ifmsh->beacon, bcn); 1132 return 0; 1133 out_free: 1134 kfree(bcn); 1135 dev_kfree_skb(skb); 1136 return -ENOMEM; 1137 } 1138 1139 static int ieee80211_mesh_rebuild_beacon(struct ieee80211_sub_if_data * sdata)1140 ieee80211_mesh_rebuild_beacon(struct ieee80211_sub_if_data *sdata) 1141 { 1142 struct beacon_data *old_bcn; 1143 int ret; 1144 1145 old_bcn = sdata_dereference(sdata->u.mesh.beacon, sdata); 1146 ret = ieee80211_mesh_build_beacon(&sdata->u.mesh); 1147 if (ret) 1148 /* just reuse old beacon */ 1149 return ret; 1150 1151 if (old_bcn) 1152 kfree_rcu(old_bcn, rcu_head); 1153 return 0; 1154 } 1155 ieee80211_mbss_info_change_notify(struct ieee80211_sub_if_data * sdata,u64 changed)1156 void ieee80211_mbss_info_change_notify(struct ieee80211_sub_if_data *sdata, 1157 u64 changed) 1158 { 1159 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1160 unsigned long bits = changed; 1161 u32 bit; 1162 1163 if (!bits) 1164 return; 1165 1166 /* if we race with running work, worst case this work becomes a noop */ 1167 for_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE) 1168 set_bit(bit, ifmsh->mbss_changed); 1169 set_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags); 1170 wiphy_work_queue(sdata->local->hw.wiphy, &sdata->work); 1171 } 1172 ieee80211_start_mesh(struct ieee80211_sub_if_data * sdata)1173 int ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata) 1174 { 1175 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1176 struct ieee80211_local *local = sdata->local; 1177 u64 changed = BSS_CHANGED_BEACON | 1178 BSS_CHANGED_BEACON_ENABLED | 1179 BSS_CHANGED_HT | 1180 BSS_CHANGED_BASIC_RATES | 1181 BSS_CHANGED_BEACON_INT | 1182 BSS_CHANGED_MCAST_RATE; 1183 1184 local->fif_other_bss++; 1185 /* mesh ifaces must set allmulti to forward mcast traffic */ 1186 atomic_inc(&local->iff_allmultis); 1187 ieee80211_configure_filter(local); 1188 1189 ifmsh->mesh_cc_id = 0; /* Disabled */ 1190 /* register sync ops from extensible synchronization framework */ 1191 ifmsh->sync_ops = ieee80211_mesh_sync_ops_get(ifmsh->mesh_sp_id); 1192 ifmsh->sync_offset_clockdrift_max = 0; 1193 set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags); 1194 ieee80211_mesh_root_setup(ifmsh); 1195 wiphy_work_queue(local->hw.wiphy, &sdata->work); 1196 sdata->vif.bss_conf.ht_operation_mode = 1197 ifmsh->mshcfg.ht_opmode; 1198 sdata->vif.bss_conf.enable_beacon = true; 1199 1200 changed |= ieee80211_mps_local_status_update(sdata); 1201 1202 if (ieee80211_mesh_build_beacon(ifmsh)) { 1203 ieee80211_stop_mesh(sdata); 1204 return -ENOMEM; 1205 } 1206 1207 ieee80211_recalc_dtim(local, sdata); 1208 ieee80211_link_info_change_notify(sdata, &sdata->deflink, changed); 1209 1210 netif_carrier_on(sdata->dev); 1211 return 0; 1212 } 1213 ieee80211_stop_mesh(struct ieee80211_sub_if_data * sdata)1214 void ieee80211_stop_mesh(struct ieee80211_sub_if_data *sdata) 1215 { 1216 struct ieee80211_local *local = sdata->local; 1217 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1218 struct beacon_data *bcn; 1219 1220 netif_carrier_off(sdata->dev); 1221 1222 /* flush STAs and mpaths on this iface */ 1223 sta_info_flush(sdata, -1); 1224 ieee80211_free_keys(sdata, true); 1225 mesh_path_flush_by_iface(sdata); 1226 1227 /* stop the beacon */ 1228 ifmsh->mesh_id_len = 0; 1229 sdata->vif.bss_conf.enable_beacon = false; 1230 sdata->beacon_rate_set = false; 1231 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state); 1232 ieee80211_link_info_change_notify(sdata, &sdata->deflink, 1233 BSS_CHANGED_BEACON_ENABLED); 1234 1235 /* remove beacon */ 1236 bcn = sdata_dereference(ifmsh->beacon, sdata); 1237 RCU_INIT_POINTER(ifmsh->beacon, NULL); 1238 kfree_rcu(bcn, rcu_head); 1239 1240 /* free all potentially still buffered group-addressed frames */ 1241 local->total_ps_buffered -= skb_queue_len(&ifmsh->ps.bc_buf); 1242 skb_queue_purge(&ifmsh->ps.bc_buf); 1243 1244 del_timer_sync(&sdata->u.mesh.housekeeping_timer); 1245 del_timer_sync(&sdata->u.mesh.mesh_path_root_timer); 1246 del_timer_sync(&sdata->u.mesh.mesh_path_timer); 1247 1248 /* clear any mesh work (for next join) we may have accrued */ 1249 ifmsh->wrkq_flags = 0; 1250 memset(ifmsh->mbss_changed, 0, sizeof(ifmsh->mbss_changed)); 1251 1252 local->fif_other_bss--; 1253 atomic_dec(&local->iff_allmultis); 1254 ieee80211_configure_filter(local); 1255 } 1256 ieee80211_mesh_csa_mark_radar(struct ieee80211_sub_if_data * sdata)1257 static void ieee80211_mesh_csa_mark_radar(struct ieee80211_sub_if_data *sdata) 1258 { 1259 int err; 1260 1261 /* if the current channel is a DFS channel, mark the channel as 1262 * unavailable. 1263 */ 1264 err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy, 1265 &sdata->vif.bss_conf.chanreq.oper, 1266 NL80211_IFTYPE_MESH_POINT); 1267 if (err > 0) 1268 cfg80211_radar_event(sdata->local->hw.wiphy, 1269 &sdata->vif.bss_conf.chanreq.oper, 1270 GFP_ATOMIC); 1271 } 1272 1273 static bool ieee80211_mesh_process_chnswitch(struct ieee80211_sub_if_data * sdata,struct ieee802_11_elems * elems,bool beacon)1274 ieee80211_mesh_process_chnswitch(struct ieee80211_sub_if_data *sdata, 1275 struct ieee802_11_elems *elems, bool beacon) 1276 { 1277 struct cfg80211_csa_settings params; 1278 struct ieee80211_csa_ie csa_ie; 1279 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1280 struct ieee80211_supported_band *sband; 1281 int err; 1282 struct ieee80211_conn_settings conn = ieee80211_conn_settings_unlimited; 1283 u32 vht_cap_info = 0; 1284 1285 lockdep_assert_wiphy(sdata->local->hw.wiphy); 1286 1287 sband = ieee80211_get_sband(sdata); 1288 if (!sband) 1289 return false; 1290 1291 switch (sdata->vif.bss_conf.chanreq.oper.width) { 1292 case NL80211_CHAN_WIDTH_20_NOHT: 1293 conn.mode = IEEE80211_CONN_MODE_LEGACY; 1294 conn.bw_limit = IEEE80211_CONN_BW_LIMIT_20; 1295 break; 1296 case NL80211_CHAN_WIDTH_20: 1297 conn.mode = IEEE80211_CONN_MODE_HT; 1298 conn.bw_limit = IEEE80211_CONN_BW_LIMIT_20; 1299 break; 1300 case NL80211_CHAN_WIDTH_40: 1301 conn.mode = IEEE80211_CONN_MODE_HT; 1302 conn.bw_limit = IEEE80211_CONN_BW_LIMIT_40; 1303 break; 1304 default: 1305 break; 1306 } 1307 1308 if (elems->vht_cap_elem) 1309 vht_cap_info = 1310 le32_to_cpu(elems->vht_cap_elem->vht_cap_info); 1311 1312 memset(¶ms, 0, sizeof(params)); 1313 err = ieee80211_parse_ch_switch_ie(sdata, elems, sband->band, 1314 vht_cap_info, &conn, 1315 sdata->vif.addr, false, 1316 &csa_ie); 1317 if (err < 0) 1318 return false; 1319 if (err) 1320 return false; 1321 1322 /* Mark the channel unavailable if the reason for the switch is 1323 * regulatory. 1324 */ 1325 if (csa_ie.reason_code == WLAN_REASON_MESH_CHAN_REGULATORY) 1326 ieee80211_mesh_csa_mark_radar(sdata); 1327 1328 params.chandef = csa_ie.chanreq.oper; 1329 params.count = csa_ie.count; 1330 1331 if (!cfg80211_chandef_usable(sdata->local->hw.wiphy, ¶ms.chandef, 1332 IEEE80211_CHAN_DISABLED) || 1333 !cfg80211_reg_can_beacon(sdata->local->hw.wiphy, ¶ms.chandef, 1334 NL80211_IFTYPE_MESH_POINT)) { 1335 sdata_info(sdata, 1336 "mesh STA %pM switches to unsupported channel (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n", 1337 sdata->vif.addr, 1338 params.chandef.chan->center_freq, 1339 params.chandef.width, 1340 params.chandef.center_freq1, 1341 params.chandef.center_freq2); 1342 return false; 1343 } 1344 1345 err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy, 1346 ¶ms.chandef, 1347 NL80211_IFTYPE_MESH_POINT); 1348 if (err < 0) 1349 return false; 1350 if (err > 0 && !ifmsh->userspace_handles_dfs) { 1351 sdata_info(sdata, 1352 "mesh STA %pM switches to channel requiring DFS (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n", 1353 sdata->vif.addr, 1354 params.chandef.chan->center_freq, 1355 params.chandef.width, 1356 params.chandef.center_freq1, 1357 params.chandef.center_freq2); 1358 return false; 1359 } 1360 1361 params.radar_required = err; 1362 1363 if (cfg80211_chandef_identical(¶ms.chandef, 1364 &sdata->vif.bss_conf.chanreq.oper)) { 1365 mcsa_dbg(sdata, 1366 "received csa with an identical chandef, ignoring\n"); 1367 return true; 1368 } 1369 1370 mcsa_dbg(sdata, 1371 "received channel switch announcement to go to channel %d MHz\n", 1372 params.chandef.chan->center_freq); 1373 1374 params.block_tx = csa_ie.mode & WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT; 1375 if (beacon) { 1376 ifmsh->chsw_ttl = csa_ie.ttl - 1; 1377 if (ifmsh->pre_value >= csa_ie.pre_value) 1378 return false; 1379 ifmsh->pre_value = csa_ie.pre_value; 1380 } 1381 1382 if (ifmsh->chsw_ttl >= ifmsh->mshcfg.dot11MeshTTL) 1383 return false; 1384 1385 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_REPEATER; 1386 1387 if (ieee80211_channel_switch(sdata->local->hw.wiphy, sdata->dev, 1388 ¶ms) < 0) 1389 return false; 1390 1391 return true; 1392 } 1393 1394 static void ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data * sdata,struct ieee80211_mgmt * mgmt,size_t len)1395 ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data *sdata, 1396 struct ieee80211_mgmt *mgmt, size_t len) 1397 { 1398 struct ieee80211_local *local = sdata->local; 1399 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1400 struct sk_buff *presp; 1401 struct beacon_data *bcn; 1402 struct ieee80211_mgmt *hdr; 1403 struct ieee802_11_elems *elems; 1404 size_t baselen; 1405 u8 *pos; 1406 1407 pos = mgmt->u.probe_req.variable; 1408 baselen = (u8 *) pos - (u8 *) mgmt; 1409 if (baselen > len) 1410 return; 1411 1412 elems = ieee802_11_parse_elems(pos, len - baselen, false, NULL); 1413 if (!elems) 1414 return; 1415 1416 if (!elems->mesh_id) 1417 goto free; 1418 1419 /* 802.11-2012 10.1.4.3.2 */ 1420 if ((!ether_addr_equal(mgmt->da, sdata->vif.addr) && 1421 !is_broadcast_ether_addr(mgmt->da)) || 1422 elems->ssid_len != 0) 1423 goto free; 1424 1425 if (elems->mesh_id_len != 0 && 1426 (elems->mesh_id_len != ifmsh->mesh_id_len || 1427 memcmp(elems->mesh_id, ifmsh->mesh_id, ifmsh->mesh_id_len))) 1428 goto free; 1429 1430 rcu_read_lock(); 1431 bcn = rcu_dereference(ifmsh->beacon); 1432 1433 if (!bcn) 1434 goto out; 1435 1436 presp = dev_alloc_skb(local->tx_headroom + 1437 bcn->head_len + bcn->tail_len); 1438 if (!presp) 1439 goto out; 1440 1441 skb_reserve(presp, local->tx_headroom); 1442 skb_put_data(presp, bcn->head, bcn->head_len); 1443 skb_put_data(presp, bcn->tail, bcn->tail_len); 1444 hdr = (struct ieee80211_mgmt *) presp->data; 1445 hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 1446 IEEE80211_STYPE_PROBE_RESP); 1447 memcpy(hdr->da, mgmt->sa, ETH_ALEN); 1448 IEEE80211_SKB_CB(presp)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; 1449 ieee80211_tx_skb(sdata, presp); 1450 out: 1451 rcu_read_unlock(); 1452 free: 1453 kfree(elems); 1454 } 1455 ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data * sdata,u16 stype,struct ieee80211_mgmt * mgmt,size_t len,struct ieee80211_rx_status * rx_status)1456 static void ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data *sdata, 1457 u16 stype, 1458 struct ieee80211_mgmt *mgmt, 1459 size_t len, 1460 struct ieee80211_rx_status *rx_status) 1461 { 1462 struct ieee80211_local *local = sdata->local; 1463 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1464 struct ieee802_11_elems *elems; 1465 struct ieee80211_channel *channel; 1466 size_t baselen; 1467 int freq; 1468 enum nl80211_band band = rx_status->band; 1469 1470 /* ignore ProbeResp to foreign address */ 1471 if (stype == IEEE80211_STYPE_PROBE_RESP && 1472 !ether_addr_equal(mgmt->da, sdata->vif.addr)) 1473 return; 1474 1475 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt; 1476 if (baselen > len) 1477 return; 1478 1479 elems = ieee802_11_parse_elems(mgmt->u.probe_resp.variable, 1480 len - baselen, 1481 false, NULL); 1482 if (!elems) 1483 return; 1484 1485 /* ignore non-mesh or secure / unsecure mismatch */ 1486 if ((!elems->mesh_id || !elems->mesh_config) || 1487 (elems->rsn && sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE) || 1488 (!elems->rsn && sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)) 1489 goto free; 1490 1491 if (elems->ds_params) 1492 freq = ieee80211_channel_to_frequency(elems->ds_params[0], band); 1493 else 1494 freq = rx_status->freq; 1495 1496 channel = ieee80211_get_channel(local->hw.wiphy, freq); 1497 1498 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) 1499 goto free; 1500 1501 if (mesh_matches_local(sdata, elems)) { 1502 mpl_dbg(sdata, "rssi_threshold=%d,rx_status->signal=%d\n", 1503 sdata->u.mesh.mshcfg.rssi_threshold, rx_status->signal); 1504 if (!sdata->u.mesh.user_mpm || 1505 sdata->u.mesh.mshcfg.rssi_threshold == 0 || 1506 sdata->u.mesh.mshcfg.rssi_threshold < rx_status->signal) 1507 mesh_neighbour_update(sdata, mgmt->sa, elems, 1508 rx_status); 1509 1510 if (ifmsh->csa_role != IEEE80211_MESH_CSA_ROLE_INIT && 1511 !sdata->vif.bss_conf.csa_active) 1512 ieee80211_mesh_process_chnswitch(sdata, elems, true); 1513 } 1514 1515 if (ifmsh->sync_ops) 1516 ifmsh->sync_ops->rx_bcn_presp(sdata, stype, mgmt, len, 1517 elems->mesh_config, rx_status); 1518 free: 1519 kfree(elems); 1520 } 1521 ieee80211_mesh_finish_csa(struct ieee80211_sub_if_data * sdata,u64 * changed)1522 int ieee80211_mesh_finish_csa(struct ieee80211_sub_if_data *sdata, u64 *changed) 1523 { 1524 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1525 struct mesh_csa_settings *tmp_csa_settings; 1526 int ret = 0; 1527 1528 /* Reset the TTL value and Initiator flag */ 1529 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE; 1530 ifmsh->chsw_ttl = 0; 1531 1532 /* Remove the CSA and MCSP elements from the beacon */ 1533 tmp_csa_settings = sdata_dereference(ifmsh->csa, sdata); 1534 RCU_INIT_POINTER(ifmsh->csa, NULL); 1535 if (tmp_csa_settings) 1536 kfree_rcu(tmp_csa_settings, rcu_head); 1537 ret = ieee80211_mesh_rebuild_beacon(sdata); 1538 if (ret) 1539 return -EINVAL; 1540 1541 *changed |= BSS_CHANGED_BEACON; 1542 1543 mcsa_dbg(sdata, "complete switching to center freq %d MHz", 1544 sdata->vif.bss_conf.chanreq.oper.chan->center_freq); 1545 return 0; 1546 } 1547 ieee80211_mesh_csa_beacon(struct ieee80211_sub_if_data * sdata,struct cfg80211_csa_settings * csa_settings,u64 * changed)1548 int ieee80211_mesh_csa_beacon(struct ieee80211_sub_if_data *sdata, 1549 struct cfg80211_csa_settings *csa_settings, 1550 u64 *changed) 1551 { 1552 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1553 struct mesh_csa_settings *tmp_csa_settings; 1554 int ret = 0; 1555 1556 lockdep_assert_wiphy(sdata->local->hw.wiphy); 1557 1558 tmp_csa_settings = kmalloc(sizeof(*tmp_csa_settings), 1559 GFP_ATOMIC); 1560 if (!tmp_csa_settings) 1561 return -ENOMEM; 1562 1563 memcpy(&tmp_csa_settings->settings, csa_settings, 1564 sizeof(struct cfg80211_csa_settings)); 1565 1566 rcu_assign_pointer(ifmsh->csa, tmp_csa_settings); 1567 1568 ret = ieee80211_mesh_rebuild_beacon(sdata); 1569 if (ret) { 1570 tmp_csa_settings = rcu_dereference(ifmsh->csa); 1571 RCU_INIT_POINTER(ifmsh->csa, NULL); 1572 kfree_rcu(tmp_csa_settings, rcu_head); 1573 return ret; 1574 } 1575 1576 *changed |= BSS_CHANGED_BEACON; 1577 return 0; 1578 } 1579 mesh_fwd_csa_frame(struct ieee80211_sub_if_data * sdata,struct ieee80211_mgmt * mgmt,size_t len,struct ieee802_11_elems * elems)1580 static int mesh_fwd_csa_frame(struct ieee80211_sub_if_data *sdata, 1581 struct ieee80211_mgmt *mgmt, size_t len, 1582 struct ieee802_11_elems *elems) 1583 { 1584 struct ieee80211_mgmt *mgmt_fwd; 1585 struct sk_buff *skb; 1586 struct ieee80211_local *local = sdata->local; 1587 1588 skb = dev_alloc_skb(local->tx_headroom + len); 1589 if (!skb) 1590 return -ENOMEM; 1591 skb_reserve(skb, local->tx_headroom); 1592 mgmt_fwd = skb_put(skb, len); 1593 1594 elems->mesh_chansw_params_ie->mesh_ttl--; 1595 elems->mesh_chansw_params_ie->mesh_flags &= 1596 ~WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR; 1597 1598 memcpy(mgmt_fwd, mgmt, len); 1599 eth_broadcast_addr(mgmt_fwd->da); 1600 memcpy(mgmt_fwd->sa, sdata->vif.addr, ETH_ALEN); 1601 memcpy(mgmt_fwd->bssid, sdata->vif.addr, ETH_ALEN); 1602 1603 ieee80211_tx_skb(sdata, skb); 1604 return 0; 1605 } 1606 mesh_rx_csa_frame(struct ieee80211_sub_if_data * sdata,struct ieee80211_mgmt * mgmt,size_t len)1607 static void mesh_rx_csa_frame(struct ieee80211_sub_if_data *sdata, 1608 struct ieee80211_mgmt *mgmt, size_t len) 1609 { 1610 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1611 struct ieee802_11_elems *elems; 1612 u16 pre_value; 1613 bool fwd_csa = true; 1614 size_t baselen; 1615 u8 *pos; 1616 1617 if (mgmt->u.action.u.measurement.action_code != 1618 WLAN_ACTION_SPCT_CHL_SWITCH) 1619 return; 1620 1621 pos = mgmt->u.action.u.chan_switch.variable; 1622 baselen = offsetof(struct ieee80211_mgmt, 1623 u.action.u.chan_switch.variable); 1624 elems = ieee802_11_parse_elems(pos, len - baselen, true, NULL); 1625 if (!elems) 1626 return; 1627 1628 if (!mesh_matches_local(sdata, elems)) 1629 goto free; 1630 1631 ifmsh->chsw_ttl = elems->mesh_chansw_params_ie->mesh_ttl; 1632 if (!--ifmsh->chsw_ttl) 1633 fwd_csa = false; 1634 1635 pre_value = le16_to_cpu(elems->mesh_chansw_params_ie->mesh_pre_value); 1636 if (ifmsh->pre_value >= pre_value) 1637 goto free; 1638 1639 ifmsh->pre_value = pre_value; 1640 1641 if (!sdata->vif.bss_conf.csa_active && 1642 !ieee80211_mesh_process_chnswitch(sdata, elems, false)) { 1643 mcsa_dbg(sdata, "Failed to process CSA action frame"); 1644 goto free; 1645 } 1646 1647 /* forward or re-broadcast the CSA frame */ 1648 if (fwd_csa) { 1649 if (mesh_fwd_csa_frame(sdata, mgmt, len, elems) < 0) 1650 mcsa_dbg(sdata, "Failed to forward the CSA frame"); 1651 } 1652 free: 1653 kfree(elems); 1654 } 1655 ieee80211_mesh_rx_mgmt_action(struct ieee80211_sub_if_data * sdata,struct ieee80211_mgmt * mgmt,size_t len,struct ieee80211_rx_status * rx_status)1656 static void ieee80211_mesh_rx_mgmt_action(struct ieee80211_sub_if_data *sdata, 1657 struct ieee80211_mgmt *mgmt, 1658 size_t len, 1659 struct ieee80211_rx_status *rx_status) 1660 { 1661 switch (mgmt->u.action.category) { 1662 case WLAN_CATEGORY_SELF_PROTECTED: 1663 switch (mgmt->u.action.u.self_prot.action_code) { 1664 case WLAN_SP_MESH_PEERING_OPEN: 1665 case WLAN_SP_MESH_PEERING_CLOSE: 1666 case WLAN_SP_MESH_PEERING_CONFIRM: 1667 mesh_rx_plink_frame(sdata, mgmt, len, rx_status); 1668 break; 1669 } 1670 break; 1671 case WLAN_CATEGORY_MESH_ACTION: 1672 if (mesh_action_is_path_sel(mgmt)) 1673 mesh_rx_path_sel_frame(sdata, mgmt, len); 1674 break; 1675 case WLAN_CATEGORY_SPECTRUM_MGMT: 1676 mesh_rx_csa_frame(sdata, mgmt, len); 1677 break; 1678 } 1679 } 1680 ieee80211_mesh_rx_queued_mgmt(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1681 void ieee80211_mesh_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, 1682 struct sk_buff *skb) 1683 { 1684 struct ieee80211_rx_status *rx_status; 1685 struct ieee80211_mgmt *mgmt; 1686 u16 stype; 1687 1688 lockdep_assert_wiphy(sdata->local->hw.wiphy); 1689 1690 /* mesh already went down */ 1691 if (!sdata->u.mesh.mesh_id_len) 1692 return; 1693 1694 rx_status = IEEE80211_SKB_RXCB(skb); 1695 mgmt = (struct ieee80211_mgmt *) skb->data; 1696 stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE; 1697 1698 switch (stype) { 1699 case IEEE80211_STYPE_PROBE_RESP: 1700 case IEEE80211_STYPE_BEACON: 1701 ieee80211_mesh_rx_bcn_presp(sdata, stype, mgmt, skb->len, 1702 rx_status); 1703 break; 1704 case IEEE80211_STYPE_PROBE_REQ: 1705 ieee80211_mesh_rx_probe_req(sdata, mgmt, skb->len); 1706 break; 1707 case IEEE80211_STYPE_ACTION: 1708 ieee80211_mesh_rx_mgmt_action(sdata, mgmt, skb->len, rx_status); 1709 break; 1710 } 1711 } 1712 mesh_bss_info_changed(struct ieee80211_sub_if_data * sdata)1713 static void mesh_bss_info_changed(struct ieee80211_sub_if_data *sdata) 1714 { 1715 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1716 u32 bit; 1717 u64 changed = 0; 1718 1719 for_each_set_bit(bit, ifmsh->mbss_changed, 1720 sizeof(changed) * BITS_PER_BYTE) { 1721 clear_bit(bit, ifmsh->mbss_changed); 1722 changed |= BIT(bit); 1723 } 1724 1725 if (sdata->vif.bss_conf.enable_beacon && 1726 (changed & (BSS_CHANGED_BEACON | 1727 BSS_CHANGED_HT | 1728 BSS_CHANGED_BASIC_RATES | 1729 BSS_CHANGED_BEACON_INT))) 1730 if (ieee80211_mesh_rebuild_beacon(sdata)) 1731 return; 1732 1733 ieee80211_link_info_change_notify(sdata, &sdata->deflink, changed); 1734 } 1735 ieee80211_mesh_work(struct ieee80211_sub_if_data * sdata)1736 void ieee80211_mesh_work(struct ieee80211_sub_if_data *sdata) 1737 { 1738 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1739 1740 lockdep_assert_wiphy(sdata->local->hw.wiphy); 1741 1742 /* mesh already went down */ 1743 if (!sdata->u.mesh.mesh_id_len) 1744 return; 1745 1746 if (ifmsh->preq_queue_len && 1747 time_after(jiffies, 1748 ifmsh->last_preq + msecs_to_jiffies(ifmsh->mshcfg.dot11MeshHWMPpreqMinInterval))) 1749 mesh_path_start_discovery(sdata); 1750 1751 if (test_and_clear_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags)) 1752 ieee80211_mesh_housekeeping(sdata); 1753 1754 if (test_and_clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags)) 1755 ieee80211_mesh_rootpath(sdata); 1756 1757 if (test_and_clear_bit(MESH_WORK_DRIFT_ADJUST, &ifmsh->wrkq_flags)) 1758 mesh_sync_adjust_tsf(sdata); 1759 1760 if (test_and_clear_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags)) 1761 mesh_bss_info_changed(sdata); 1762 } 1763 1764 ieee80211_mesh_init_sdata(struct ieee80211_sub_if_data * sdata)1765 void ieee80211_mesh_init_sdata(struct ieee80211_sub_if_data *sdata) 1766 { 1767 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1768 static u8 zero_addr[ETH_ALEN] = {}; 1769 1770 timer_setup(&ifmsh->housekeeping_timer, 1771 ieee80211_mesh_housekeeping_timer, 0); 1772 1773 ifmsh->accepting_plinks = true; 1774 atomic_set(&ifmsh->mpaths, 0); 1775 mesh_rmc_init(sdata); 1776 ifmsh->last_preq = jiffies; 1777 ifmsh->next_perr = jiffies; 1778 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE; 1779 ifmsh->nonpeer_pm = NL80211_MESH_POWER_ACTIVE; 1780 /* Allocate all mesh structures when creating the first mesh interface. */ 1781 if (!mesh_allocated) 1782 ieee80211s_init(); 1783 1784 mesh_pathtbl_init(sdata); 1785 1786 timer_setup(&ifmsh->mesh_path_timer, ieee80211_mesh_path_timer, 0); 1787 timer_setup(&ifmsh->mesh_path_root_timer, 1788 ieee80211_mesh_path_root_timer, 0); 1789 INIT_LIST_HEAD(&ifmsh->preq_queue.list); 1790 skb_queue_head_init(&ifmsh->ps.bc_buf); 1791 spin_lock_init(&ifmsh->mesh_preq_queue_lock); 1792 spin_lock_init(&ifmsh->sync_offset_lock); 1793 RCU_INIT_POINTER(ifmsh->beacon, NULL); 1794 1795 sdata->vif.bss_conf.bssid = zero_addr; 1796 } 1797 ieee80211_mesh_teardown_sdata(struct ieee80211_sub_if_data * sdata)1798 void ieee80211_mesh_teardown_sdata(struct ieee80211_sub_if_data *sdata) 1799 { 1800 mesh_rmc_free(sdata); 1801 mesh_pathtbl_unregister(sdata); 1802 } 1803