mlme.c 17.7 KB
Newer Older
1 2 3 4 5 6 7 8 9 10
/*
 * cfg80211 MLME SAP interface
 *
 * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
 */

#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/netdevice.h>
#include <linux/nl80211.h>
11
#include <linux/wireless.h>
12
#include <net/cfg80211.h>
13
#include <net/iw_handler.h>
14 15 16
#include "core.h"
#include "nl80211.h"

17
void cfg80211_send_rx_auth(struct net_device *dev, const u8 *buf, size_t len)
18
{
J
Johannes Berg 已提交
19 20
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
21
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
22 23 24 25 26 27
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
	u8 *bssid = mgmt->bssid;
	int i;
	u16 status = le16_to_cpu(mgmt->u.auth.status_code);
	bool done = false;

J
Johannes Berg 已提交
28
	wdev_lock(wdev);
29

J
Johannes Berg 已提交
30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46
	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid,
							ETH_ALEN) == 0) {
			if (status == WLAN_STATUS_SUCCESS) {
				wdev->auth_bsses[i] = wdev->authtry_bsses[i];
			} else {
				cfg80211_unhold_bss(wdev->authtry_bsses[i]);
				cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			}
			wdev->authtry_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
47

48
	nl80211_send_rx_auth(rdev, dev, buf, len, GFP_KERNEL);
49
	cfg80211_sme_rx_auth(dev, buf, len);
J
Johannes Berg 已提交
50 51

	wdev_unlock(wdev);
52 53 54
}
EXPORT_SYMBOL(cfg80211_send_rx_auth);

55
void cfg80211_send_rx_assoc(struct net_device *dev, const u8 *buf, size_t len)
56
{
57 58 59
	u16 status_code;
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
60
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
61 62
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
	u8 *ie = mgmt->u.assoc_resp.variable;
J
Johannes Berg 已提交
63
	int i, ieoffs = offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
64
	struct cfg80211_internal_bss *bss = NULL;
65

J
Johannes Berg 已提交
66
	wdev_lock(wdev);
67

68 69
	status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);

70 71 72 73 74 75 76 77 78 79
	/*
	 * This is a bit of a hack, we don't notify userspace of
	 * a (re-)association reply if we tried to send a reassoc
	 * and got a reject -- we only try again with an assoc
	 * frame instead of reassoc.
	 */
	if (status_code != WLAN_STATUS_SUCCESS && wdev->conn &&
	    cfg80211_sme_failed_reassoc(wdev))
		goto out;

80
	nl80211_send_rx_assoc(rdev, dev, buf, len, GFP_KERNEL);
81

J
Johannes Berg 已提交
82
	if (status_code == WLAN_STATUS_SUCCESS) {
83 84 85 86 87 88
		for (i = 0; i < MAX_AUTH_BSSES; i++) {
			if (!wdev->auth_bsses[i])
				continue;
			if (memcmp(wdev->auth_bsses[i]->pub.bssid, mgmt->bssid,
				   ETH_ALEN) == 0) {
				bss = wdev->auth_bsses[i];
J
Johannes Berg 已提交
89
				wdev->auth_bsses[i] = NULL;
90 91
				/* additional reference to drop hold */
				cfg80211_ref_bss(bss);
J
Johannes Berg 已提交
92 93 94 95
				break;
			}
		}

96
		WARN_ON(!bss);
97 98 99 100 101 102 103
	} else if (wdev->conn) {
		cfg80211_sme_failed_assoc(wdev);
		/*
		 * do not call connect_result() now because the
		 * sme will schedule work that does it later.
		 */
		goto out;
104 105
	}

106 107 108 109 110 111 112 113 114
	if (!wdev->conn && wdev->sme_state == CFG80211_SME_IDLE) {
		/*
		 * This is for the userspace SME, the CONNECTING
		 * state will be changed to CONNECTED by
		 * __cfg80211_connect_result() below.
		 */
		wdev->sme_state = CFG80211_SME_CONNECTING;
	}

115 116 117 118 119 120 121 122 123
	/* this consumes one bss reference (unless bss is NULL) */
	__cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, ie, len - ieoffs,
				  status_code,
				  status_code == WLAN_STATUS_SUCCESS,
				  bss ? &bss->pub : NULL);
	/* drop hold now, and also reference acquired above */
	if (bss) {
		cfg80211_unhold_bss(bss);
		cfg80211_put_bss(&bss->pub);
J
Johannes Berg 已提交
124
	}
J
Johannes Berg 已提交
125

126
 out:
J
Johannes Berg 已提交
127
	wdev_unlock(wdev);
128 129 130
}
EXPORT_SYMBOL(cfg80211_send_rx_assoc);

131
void __cfg80211_send_deauth(struct net_device *dev,
J
Johannes Berg 已提交
132
				   const u8 *buf, size_t len)
133
{
134 135
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
136
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
137
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
J
Johannes Berg 已提交
138 139
	const u8 *bssid = mgmt->bssid;
	int i;
140
	bool found = false;
141

J
Johannes Berg 已提交
142
	ASSERT_WDEV_LOCK(wdev);
143

J
Johannes Berg 已提交
144 145 146 147 148
	if (wdev->current_bss &&
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
		cfg80211_unhold_bss(wdev->current_bss);
		cfg80211_put_bss(&wdev->current_bss->pub);
		wdev->current_bss = NULL;
149
		found = true;
J
Johannes Berg 已提交
150 151 152 153 154 155
	} else for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(wdev->auth_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->auth_bsses[i]);
			cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
			wdev->auth_bsses[i] = NULL;
156
			found = true;
J
Johannes Berg 已提交
157 158 159 160 161 162 163
			break;
		}
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->authtry_bsses[i]);
			cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			wdev->authtry_bsses[i] = NULL;
164
			found = true;
J
Johannes Berg 已提交
165 166 167 168
			break;
		}
	}

169 170 171 172 173
	if (!found)
		return;

	nl80211_send_deauth(rdev, dev, buf, len, GFP_KERNEL);

174 175 176 177 178 179
	if (wdev->sme_state == CFG80211_SME_CONNECTED) {
		u16 reason_code;
		bool from_ap;

		reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);

180
		from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
J
Johannes Berg 已提交
181
		__cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
182
	} else if (wdev->sme_state == CFG80211_SME_CONNECTING) {
J
Johannes Berg 已提交
183 184
		__cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
185
					  false, NULL);
J
Johannes Berg 已提交
186 187
	}
}
188
EXPORT_SYMBOL(__cfg80211_send_deauth);
J
Johannes Berg 已提交
189

190
void cfg80211_send_deauth(struct net_device *dev, const u8 *buf, size_t len)
J
Johannes Berg 已提交
191 192 193
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;

194 195 196
	wdev_lock(wdev);
	__cfg80211_send_deauth(dev, buf, len);
	wdev_unlock(wdev);
197
}
198
EXPORT_SYMBOL(cfg80211_send_deauth);
199

200
void __cfg80211_send_disassoc(struct net_device *dev,
J
Johannes Berg 已提交
201
				     const u8 *buf, size_t len)
202
{
203 204
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
205
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
206
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
J
Johannes Berg 已提交
207 208 209 210 211
	const u8 *bssid = mgmt->bssid;
	int i;
	u16 reason_code;
	bool from_ap;
	bool done = false;
212

213
	ASSERT_WDEV_LOCK(wdev);
214 215

	nl80211_send_disassoc(rdev, dev, buf, len, GFP_KERNEL);
216

217 218
	if (wdev->sme_state != CFG80211_SME_CONNECTED)
		return;
219

J
Johannes Berg 已提交
220
	if (wdev->current_bss &&
221
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
J
Johannes Berg 已提交
222 223 224 225 226 227 228 229 230 231 232 233
		for (i = 0; i < MAX_AUTH_BSSES; i++) {
			if (wdev->authtry_bsses[i] || wdev->auth_bsses[i])
				continue;
			wdev->auth_bsses[i] = wdev->current_bss;
			wdev->current_bss = NULL;
			done = true;
			cfg80211_sme_disassoc(dev, i);
			break;
		}
		WARN_ON(!done);
	} else
		WARN_ON(1);
234 235


J
Johannes Berg 已提交
236 237
	reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);

238
	from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
J
Johannes Berg 已提交
239 240
	__cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
}
241
EXPORT_SYMBOL(__cfg80211_send_disassoc);
J
Johannes Berg 已提交
242

243
void cfg80211_send_disassoc(struct net_device *dev, const u8 *buf, size_t len)
J
Johannes Berg 已提交
244 245 246
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;

247 248 249
	wdev_lock(wdev);
	__cfg80211_send_disassoc(dev, buf, len);
	wdev_unlock(wdev);
250
}
251
EXPORT_SYMBOL(cfg80211_send_disassoc);
252

253
static void __cfg80211_auth_remove(struct wireless_dev *wdev, const u8 *addr)
254
{
J
Johannes Berg 已提交
255 256 257
	int i;
	bool done = false;

258
	ASSERT_WDEV_LOCK(wdev);
J
Johannes Berg 已提交
259 260 261 262 263 264 265 266 267 268 269 270 271 272

	for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid,
			   addr, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->authtry_bsses[i]);
			cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			wdev->authtry_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295
}

void __cfg80211_auth_canceled(struct net_device *dev, const u8 *addr)
{
	__cfg80211_auth_remove(dev->ieee80211_ptr, addr);
}
EXPORT_SYMBOL(__cfg80211_auth_canceled);

void cfg80211_send_auth_timeout(struct net_device *dev, const u8 *addr)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);

	wdev_lock(wdev);

	nl80211_send_auth_timeout(rdev, dev, addr, GFP_KERNEL);
	if (wdev->sme_state == CFG80211_SME_CONNECTING)
		__cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
					  false, NULL);

	__cfg80211_auth_remove(wdev, addr);
J
Johannes Berg 已提交
296 297

	wdev_unlock(wdev);
298 299 300
}
EXPORT_SYMBOL(cfg80211_send_auth_timeout);

301
void cfg80211_send_assoc_timeout(struct net_device *dev, const u8 *addr)
302
{
303 304
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
305
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
306 307 308
	int i;
	bool done = false;

J
Johannes Berg 已提交
309
	wdev_lock(wdev);
310 311

	nl80211_send_assoc_timeout(rdev, dev, addr, GFP_KERNEL);
312
	if (wdev->sme_state == CFG80211_SME_CONNECTING)
J
Johannes Berg 已提交
313 314
		__cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
315
					  false, NULL);
J
Johannes Berg 已提交
316 317 318 319 320 321 322 323 324 325 326 327 328 329

	for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(wdev->auth_bsses[i]->pub.bssid,
			   addr, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->auth_bsses[i]);
			cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
			wdev->auth_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
J
Johannes Berg 已提交
330 331

	wdev_unlock(wdev);
332 333 334
}
EXPORT_SYMBOL(cfg80211_send_assoc_timeout);

335 336
void cfg80211_michael_mic_failure(struct net_device *dev, const u8 *addr,
				  enum nl80211_key_type key_type, int key_id,
337
				  const u8 *tsc, gfp_t gfp)
338 339 340
{
	struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
341
#ifdef CONFIG_CFG80211_WEXT
342
	union iwreq_data wrqu;
343
	char *buf = kmalloc(128, gfp);
344 345 346 347 348 349 350 351 352 353 354 355 356

	if (buf) {
		sprintf(buf, "MLME-MICHAELMICFAILURE.indication("
			"keyid=%d %scast addr=%pM)", key_id,
			key_type == NL80211_KEYTYPE_GROUP ? "broad" : "uni",
			addr);
		memset(&wrqu, 0, sizeof(wrqu));
		wrqu.data.length = strlen(buf);
		wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf);
		kfree(buf);
	}
#endif

357
	nl80211_michael_mic_failure(rdev, dev, addr, key_type, key_id, tsc, gfp);
358 359
}
EXPORT_SYMBOL(cfg80211_michael_mic_failure);
J
Johannes Berg 已提交
360 361

/* some MLME handling for userspace SME */
J
Johannes Berg 已提交
362 363 364 365 366 367
int __cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
			 struct net_device *dev,
			 struct ieee80211_channel *chan,
			 enum nl80211_auth_type auth_type,
			 const u8 *bssid,
			 const u8 *ssid, int ssid_len,
J
Johannes Berg 已提交
368 369
			 const u8 *ie, int ie_len,
			 const u8 *key, int key_len, int key_idx)
J
Johannes Berg 已提交
370 371 372 373 374 375
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_auth_request req;
	struct cfg80211_internal_bss *bss;
	int i, err, slot = -1, nfree = 0;

J
Johannes Berg 已提交
376 377
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
378 379 380 381
	if (auth_type == NL80211_AUTHTYPE_SHARED_KEY)
		if (!key || !key_len || key_idx < 0 || key_idx > 4)
			return -EINVAL;

382 383 384 385 386 387 388 389 390 391 392 393 394 395 396
	if (wdev->current_bss &&
	    memcmp(bssid, wdev->current_bss->pub.bssid, ETH_ALEN) == 0)
		return -EALREADY;

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid,
						ETH_ALEN) == 0)
			return -EALREADY;
		if (wdev->auth_bsses[i] &&
		    memcmp(bssid, wdev->auth_bsses[i]->pub.bssid,
						ETH_ALEN) == 0)
			return -EALREADY;
	}

J
Johannes Berg 已提交
397 398 399 400 401 402 403
	memset(&req, 0, sizeof(req));

	req.ie = ie;
	req.ie_len = ie_len;
	req.auth_type = auth_type;
	req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
				   WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
J
Johannes Berg 已提交
404 405 406
	req.key = key;
	req.key_len = key_len;
	req.key_idx = key_idx;
J
Johannes Berg 已提交
407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439
	if (!req.bss)
		return -ENOENT;

	bss = bss_from_pub(req.bss);

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (!wdev->auth_bsses[i] && !wdev->authtry_bsses[i]) {
			slot = i;
			nfree++;
		}
	}

	/* we need one free slot for disassoc and one for this auth */
	if (nfree < 2) {
		err = -ENOSPC;
		goto out;
	}

	wdev->authtry_bsses[slot] = bss;
	cfg80211_hold_bss(bss);

	err = rdev->ops->auth(&rdev->wiphy, dev, &req);
	if (err) {
		wdev->authtry_bsses[slot] = NULL;
		cfg80211_unhold_bss(bss);
	}

 out:
	if (err)
		cfg80211_put_bss(req.bss);
	return err;
}

J
Johannes Berg 已提交
440 441 442 443
int cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
		       struct net_device *dev, struct ieee80211_channel *chan,
		       enum nl80211_auth_type auth_type, const u8 *bssid,
		       const u8 *ssid, int ssid_len,
J
Johannes Berg 已提交
444 445
		       const u8 *ie, int ie_len,
		       const u8 *key, int key_len, int key_idx)
J
Johannes Berg 已提交
446 447 448 449 450
{
	int err;

	wdev_lock(dev->ieee80211_ptr);
	err = __cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
J
Johannes Berg 已提交
451 452
				   ssid, ssid_len, ie, ie_len,
				   key, key_len, key_idx);
J
Johannes Berg 已提交
453 454 455 456 457 458 459 460 461 462 463 464
	wdev_unlock(dev->ieee80211_ptr);

	return err;
}

int __cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
			  struct net_device *dev,
			  struct ieee80211_channel *chan,
			  const u8 *bssid, const u8 *prev_bssid,
			  const u8 *ssid, int ssid_len,
			  const u8 *ie, int ie_len, bool use_mfp,
			  struct cfg80211_crypto_settings *crypt)
J
Johannes Berg 已提交
465 466 467 468 469
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_assoc_request req;
	struct cfg80211_internal_bss *bss;
	int i, err, slot = -1;
470
	bool was_connected = false;
J
Johannes Berg 已提交
471

J
Johannes Berg 已提交
472 473
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
474 475
	memset(&req, 0, sizeof(req));

476 477 478 479 480 481 482 483 484 485 486
	if (wdev->current_bss && prev_bssid &&
	    memcmp(wdev->current_bss->pub.bssid, prev_bssid, ETH_ALEN) == 0) {
		/*
		 * Trying to reassociate: Allow this to proceed and let the old
		 * association to be dropped when the new one is completed.
		 */
		if (wdev->sme_state == CFG80211_SME_CONNECTED) {
			was_connected = true;
			wdev->sme_state = CFG80211_SME_CONNECTING;
		}
	} else if (wdev->current_bss)
J
Johannes Berg 已提交
487 488 489 490 491 492
		return -EALREADY;

	req.ie = ie;
	req.ie_len = ie_len;
	memcpy(&req.crypto, crypt, sizeof(req.crypto));
	req.use_mfp = use_mfp;
493
	req.prev_bssid = prev_bssid;
J
Johannes Berg 已提交
494 495
	req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
				   WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
496 497 498
	if (!req.bss) {
		if (was_connected)
			wdev->sme_state = CFG80211_SME_CONNECTED;
J
Johannes Berg 已提交
499
		return -ENOENT;
500
	}
J
Johannes Berg 已提交
501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517

	bss = bss_from_pub(req.bss);

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (bss == wdev->auth_bsses[i]) {
			slot = i;
			break;
		}
	}

	if (slot < 0) {
		err = -ENOTCONN;
		goto out;
	}

	err = rdev->ops->assoc(&rdev->wiphy, dev, &req);
 out:
518 519
	if (err && was_connected)
		wdev->sme_state = CFG80211_SME_CONNECTED;
J
Johannes Berg 已提交
520 521 522 523 524
	/* still a reference in wdev->auth_bsses[slot] */
	cfg80211_put_bss(req.bss);
	return err;
}

J
Johannes Berg 已提交
525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546
int cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
			struct net_device *dev,
			struct ieee80211_channel *chan,
			const u8 *bssid, const u8 *prev_bssid,
			const u8 *ssid, int ssid_len,
			const u8 *ie, int ie_len, bool use_mfp,
			struct cfg80211_crypto_settings *crypt)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
				    ssid, ssid_len, ie, ie_len, use_mfp, crypt);
	wdev_unlock(wdev);

	return err;
}

int __cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
			   struct net_device *dev, const u8 *bssid,
			   const u8 *ie, int ie_len, u16 reason)
J
Johannes Berg 已提交
547 548 549 550 551
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_deauth_request req;
	int i;

J
Johannes Berg 已提交
552 553
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576
	memset(&req, 0, sizeof(req));
	req.reason_code = reason;
	req.ie = ie;
	req.ie_len = ie_len;
	if (wdev->current_bss &&
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
		req.bss = &wdev->current_bss->pub;
	} else for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(bssid, wdev->auth_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
			req.bss = &wdev->auth_bsses[i]->pub;
			break;
		}
		if (wdev->authtry_bsses[i] &&
		    memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
			req.bss = &wdev->authtry_bsses[i]->pub;
			break;
		}
	}

	if (!req.bss)
		return -ENOTCONN;

J
Johannes Berg 已提交
577
	return rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
578 579
}

J
Johannes Berg 已提交
580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596
int cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
			 struct net_device *dev, const u8 *bssid,
			 const u8 *ie, int ie_len, u16 reason)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason);
	wdev_unlock(wdev);

	return err;
}

static int __cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
				    struct net_device *dev, const u8 *bssid,
				    const u8 *ie, int ie_len, u16 reason)
J
Johannes Berg 已提交
597 598 599 600
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_disassoc_request req;

J
Johannes Berg 已提交
601 602
	ASSERT_WDEV_LOCK(wdev);

603 604 605 606 607 608
	if (wdev->sme_state != CFG80211_SME_CONNECTED)
		return -ENOTCONN;

	if (WARN_ON(!wdev->current_bss))
		return -ENOTCONN;

J
Johannes Berg 已提交
609 610 611 612 613 614 615 616 617
	memset(&req, 0, sizeof(req));
	req.reason_code = reason;
	req.ie = ie;
	req.ie_len = ie_len;
	if (memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0)
		req.bss = &wdev->current_bss->pub;
	else
		return -ENOTCONN;

J
Johannes Berg 已提交
618 619 620 621 622 623 624 625 626 627 628 629 630 631 632
	return rdev->ops->disassoc(&rdev->wiphy, dev, &req, wdev);
}

int cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
			   struct net_device *dev, const u8 *bssid,
			   const u8 *ie, int ie_len, u16 reason)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason);
	wdev_unlock(wdev);

	return err;
J
Johannes Berg 已提交
633 634 635 636 637 638 639 640 641
}

void cfg80211_mlme_down(struct cfg80211_registered_device *rdev,
			struct net_device *dev)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_deauth_request req;
	int i;

J
Johannes Berg 已提交
642 643
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
644 645 646 647 648 649 650 651 652 653
	if (!rdev->ops->deauth)
		return;

	memset(&req, 0, sizeof(req));
	req.reason_code = WLAN_REASON_DEAUTH_LEAVING;
	req.ie = NULL;
	req.ie_len = 0;

	if (wdev->current_bss) {
		req.bss = &wdev->current_bss->pub;
J
Johannes Berg 已提交
654
		rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
655 656 657 658 659 660 661 662 663 664
		if (wdev->current_bss) {
			cfg80211_unhold_bss(wdev->current_bss);
			cfg80211_put_bss(&wdev->current_bss->pub);
			wdev->current_bss = NULL;
		}
	}

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i]) {
			req.bss = &wdev->auth_bsses[i]->pub;
J
Johannes Berg 已提交
665
			rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
666 667 668 669 670 671 672 673
			if (wdev->auth_bsses[i]) {
				cfg80211_unhold_bss(wdev->auth_bsses[i]);
				cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
				wdev->auth_bsses[i] = NULL;
			}
		}
		if (wdev->authtry_bsses[i]) {
			req.bss = &wdev->authtry_bsses[i]->pub;
J
Johannes Berg 已提交
674
			rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
675 676 677 678 679 680 681 682
			if (wdev->authtry_bsses[i]) {
				cfg80211_unhold_bss(wdev->authtry_bsses[i]);
				cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
				wdev->authtry_bsses[i] = NULL;
			}
		}
	}
}