2 * Copyright (c) 2008, 2009 open80211s Ltd.
3 * Authors: Luis Carlos Cobo <luisca@cozybit.com>
4 * Javier Cardona <javier@cozybit.com>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/slab.h>
12 #include <asm/unaligned.h>
13 #include "ieee80211_i.h"
15 #include "driver-ops.h"
17 static int mesh_allocated;
18 static struct kmem_cache *rm_cache;
20 bool mesh_action_is_path_sel(struct ieee80211_mgmt *mgmt)
22 return (mgmt->u.action.u.mesh_action.action_code ==
23 WLAN_MESH_ACTION_HWMP_PATH_SELECTION);
26 void ieee80211s_init(void)
30 rm_cache = kmem_cache_create("mesh_rmc", sizeof(struct rmc_entry),
34 void ieee80211s_stop(void)
38 mesh_pathtbl_unregister();
39 kmem_cache_destroy(rm_cache);
42 static void ieee80211_mesh_housekeeping_timer(unsigned long data)
44 struct ieee80211_sub_if_data *sdata = (void *) data;
45 struct ieee80211_local *local = sdata->local;
46 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
48 set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
50 ieee80211_queue_work(&local->hw, &sdata->work);
54 * mesh_matches_local - check if the config of a mesh point matches ours
56 * @sdata: local mesh subif
57 * @ie: information elements of a management frame from the mesh peer
59 * This function checks if the mesh configuration of a mesh point matches the
60 * local mesh configuration, i.e. if both nodes belong to the same mesh network.
62 bool mesh_matches_local(struct ieee80211_sub_if_data *sdata,
63 struct ieee802_11_elems *ie)
65 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
67 struct cfg80211_chan_def sta_chan_def;
70 * As support for each feature is added, check for matching
71 * - On mesh config capabilities
72 * - Power Save Support En
73 * - Sync support enabled
74 * - Sync support active
75 * - Sync support required from peer
77 * - Power management control on fc
79 if (!(ifmsh->mesh_id_len == ie->mesh_id_len &&
80 memcmp(ifmsh->mesh_id, ie->mesh_id, ie->mesh_id_len) == 0 &&
81 (ifmsh->mesh_pp_id == ie->mesh_config->meshconf_psel) &&
82 (ifmsh->mesh_pm_id == ie->mesh_config->meshconf_pmetric) &&
83 (ifmsh->mesh_cc_id == ie->mesh_config->meshconf_congest) &&
84 (ifmsh->mesh_sp_id == ie->mesh_config->meshconf_synch) &&
85 (ifmsh->mesh_auth_id == ie->mesh_config->meshconf_auth)))
88 ieee80211_sta_get_rates(sdata, ie, ieee80211_get_sdata_band(sdata),
91 if (sdata->vif.bss_conf.basic_rates != basic_rates)
94 ieee80211_ht_oper_to_chandef(sdata->vif.bss_conf.chandef.chan,
95 ie->ht_operation, &sta_chan_def);
97 if (!cfg80211_chandef_compatible(&sdata->vif.bss_conf.chandef,
105 * mesh_peer_accepts_plinks - check if an mp is willing to establish peer links
107 * @ie: information elements of a management frame from the mesh peer
109 bool mesh_peer_accepts_plinks(struct ieee802_11_elems *ie)
111 return (ie->mesh_config->meshconf_cap &
112 IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS) != 0;
116 * mesh_accept_plinks_update - update accepting_plink in local mesh beacons
118 * @sdata: mesh interface in which mesh beacons are going to be updated
120 * Returns: beacon changed flag if the beacon content changed.
122 u32 mesh_accept_plinks_update(struct ieee80211_sub_if_data *sdata)
127 /* In case mesh_plink_free_count > 0 and mesh_plinktbl_capacity == 0,
128 * the mesh interface might be able to establish plinks with peers that
129 * are already on the table but are not on PLINK_ESTAB state. However,
130 * in general the mesh interface is not accepting peer link requests
131 * from new peers, and that must be reflected in the beacon
133 free_plinks = mesh_plink_availables(sdata);
135 if (free_plinks != sdata->u.mesh.accepting_plinks) {
136 sdata->u.mesh.accepting_plinks = free_plinks;
137 changed = BSS_CHANGED_BEACON;
144 * mesh_sta_cleanup - clean up any mesh sta state
146 * @sta: mesh sta to clean up.
148 void mesh_sta_cleanup(struct sta_info *sta)
150 struct ieee80211_sub_if_data *sdata = sta->sdata;
154 * maybe userspace handles peer allocation and peering, but in either
155 * case the beacon is still generated by the kernel and we might need
158 changed = mesh_accept_plinks_update(sdata);
159 if (!sdata->u.mesh.user_mpm) {
160 changed |= mesh_plink_deactivate(sta);
161 del_timer_sync(&sta->plink_timer);
165 ieee80211_mbss_info_change_notify(sdata, changed);
168 int mesh_rmc_init(struct ieee80211_sub_if_data *sdata)
172 sdata->u.mesh.rmc = kmalloc(sizeof(struct mesh_rmc), GFP_KERNEL);
173 if (!sdata->u.mesh.rmc)
175 sdata->u.mesh.rmc->idx_mask = RMC_BUCKETS - 1;
176 for (i = 0; i < RMC_BUCKETS; i++)
177 INIT_LIST_HEAD(&sdata->u.mesh.rmc->bucket[i]);
181 void mesh_rmc_free(struct ieee80211_sub_if_data *sdata)
183 struct mesh_rmc *rmc = sdata->u.mesh.rmc;
184 struct rmc_entry *p, *n;
187 if (!sdata->u.mesh.rmc)
190 for (i = 0; i < RMC_BUCKETS; i++) {
191 list_for_each_entry_safe(p, n, &rmc->bucket[i], list) {
193 kmem_cache_free(rm_cache, p);
198 sdata->u.mesh.rmc = NULL;
202 * mesh_rmc_check - Check frame in recent multicast cache and add if absent.
205 * @sa: source address
206 * @mesh_hdr: mesh_header
208 * Returns: 0 if the frame is not in the cache, nonzero otherwise.
210 * Checks using the source address and the mesh sequence number if we have
211 * received this frame lately. If the frame is not in the cache, it is added to
214 int mesh_rmc_check(struct ieee80211_sub_if_data *sdata,
215 const u8 *sa, struct ieee80211s_hdr *mesh_hdr)
217 struct mesh_rmc *rmc = sdata->u.mesh.rmc;
221 struct rmc_entry *p, *n;
223 /* Don't care about endianness since only match matters */
224 memcpy(&seqnum, &mesh_hdr->seqnum, sizeof(mesh_hdr->seqnum));
225 idx = le32_to_cpu(mesh_hdr->seqnum) & rmc->idx_mask;
226 list_for_each_entry_safe(p, n, &rmc->bucket[idx], list) {
228 if (time_after(jiffies, p->exp_time) ||
229 entries == RMC_QUEUE_MAX_LEN) {
231 kmem_cache_free(rm_cache, p);
233 } else if ((seqnum == p->seqnum) && ether_addr_equal(sa, p->sa))
237 p = kmem_cache_alloc(rm_cache, GFP_ATOMIC);
242 p->exp_time = jiffies + RMC_TIMEOUT;
243 memcpy(p->sa, sa, ETH_ALEN);
244 list_add(&p->list, &rmc->bucket[idx]);
248 int mesh_add_meshconf_ie(struct ieee80211_sub_if_data *sdata,
251 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
253 u8 meshconf_len = sizeof(struct ieee80211_meshconf_ie);
255 if (skb_tailroom(skb) < 2 + meshconf_len)
258 pos = skb_put(skb, 2 + meshconf_len);
259 *pos++ = WLAN_EID_MESH_CONFIG;
260 *pos++ = meshconf_len;
262 /* save a pointer for quick updates in pre-tbtt */
263 ifmsh->meshconf_offset = pos - skb->data;
265 /* Active path selection protocol ID */
266 *pos++ = ifmsh->mesh_pp_id;
267 /* Active path selection metric ID */
268 *pos++ = ifmsh->mesh_pm_id;
269 /* Congestion control mode identifier */
270 *pos++ = ifmsh->mesh_cc_id;
271 /* Synchronization protocol identifier */
272 *pos++ = ifmsh->mesh_sp_id;
273 /* Authentication Protocol identifier */
274 *pos++ = ifmsh->mesh_auth_id;
275 /* Mesh Formation Info - number of neighbors */
276 neighbors = atomic_read(&ifmsh->estab_plinks);
277 neighbors = min_t(int, neighbors, IEEE80211_MAX_MESH_PEERINGS);
278 *pos++ = neighbors << 1;
279 /* Mesh capability */
281 *pos |= ifmsh->mshcfg.dot11MeshForwarding ?
282 IEEE80211_MESHCONF_CAPAB_FORWARDING : 0x00;
283 *pos |= ifmsh->accepting_plinks ?
284 IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS : 0x00;
285 /* Mesh PS mode. See IEEE802.11-2012 8.4.2.100.8 */
286 *pos |= ifmsh->ps_peers_deep_sleep ?
287 IEEE80211_MESHCONF_CAPAB_POWER_SAVE_LEVEL : 0x00;
288 *pos++ |= ifmsh->adjusting_tbtt ?
289 IEEE80211_MESHCONF_CAPAB_TBTT_ADJUSTING : 0x00;
295 int mesh_add_meshid_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
297 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
300 if (skb_tailroom(skb) < 2 + ifmsh->mesh_id_len)
303 pos = skb_put(skb, 2 + ifmsh->mesh_id_len);
304 *pos++ = WLAN_EID_MESH_ID;
305 *pos++ = ifmsh->mesh_id_len;
306 if (ifmsh->mesh_id_len)
307 memcpy(pos, ifmsh->mesh_id, ifmsh->mesh_id_len);
312 static int mesh_add_awake_window_ie(struct ieee80211_sub_if_data *sdata,
315 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
318 /* see IEEE802.11-2012 13.14.6 */
319 if (ifmsh->ps_peers_light_sleep == 0 &&
320 ifmsh->ps_peers_deep_sleep == 0 &&
321 ifmsh->nonpeer_pm == NL80211_MESH_POWER_ACTIVE)
324 if (skb_tailroom(skb) < 4)
327 pos = skb_put(skb, 2 + 2);
328 *pos++ = WLAN_EID_MESH_AWAKE_WINDOW;
330 put_unaligned_le16(ifmsh->mshcfg.dot11MeshAwakeWindowDuration, pos);
335 int mesh_add_vendor_ies(struct ieee80211_sub_if_data *sdata,
338 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
342 if (!ifmsh->ie || !ifmsh->ie_len)
345 /* fast-forward to vendor IEs */
346 offset = ieee80211_ie_split_vendor(ifmsh->ie, ifmsh->ie_len, 0);
349 len = ifmsh->ie_len - offset;
350 data = ifmsh->ie + offset;
351 if (skb_tailroom(skb) < len)
353 memcpy(skb_put(skb, len), data, len);
359 int mesh_add_rsn_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
361 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
365 if (!ifmsh->ie || !ifmsh->ie_len)
370 while (data < ifmsh->ie + ifmsh->ie_len) {
371 if (*data == WLAN_EID_RSN) {
379 if (skb_tailroom(skb) < len)
381 memcpy(skb_put(skb, len), data, len);
387 static int mesh_add_ds_params_ie(struct ieee80211_sub_if_data *sdata,
390 struct ieee80211_chanctx_conf *chanctx_conf;
391 struct ieee80211_channel *chan;
394 if (skb_tailroom(skb) < 3)
398 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
399 if (WARN_ON(!chanctx_conf)) {
403 chan = chanctx_conf->def.chan;
406 pos = skb_put(skb, 2 + 1);
407 *pos++ = WLAN_EID_DS_PARAMS;
409 *pos++ = ieee80211_frequency_to_channel(chan->center_freq);
414 int mesh_add_ht_cap_ie(struct ieee80211_sub_if_data *sdata,
417 struct ieee80211_local *local = sdata->local;
418 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
419 struct ieee80211_supported_band *sband;
422 sband = local->hw.wiphy->bands[band];
423 if (!sband->ht_cap.ht_supported ||
424 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
425 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
426 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
429 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_cap))
432 pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_cap));
433 ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, sband->ht_cap.cap);
438 int mesh_add_ht_oper_ie(struct ieee80211_sub_if_data *sdata,
441 struct ieee80211_local *local = sdata->local;
442 struct ieee80211_chanctx_conf *chanctx_conf;
443 struct ieee80211_channel *channel;
444 enum nl80211_channel_type channel_type =
445 cfg80211_get_chandef_type(&sdata->vif.bss_conf.chandef);
446 struct ieee80211_supported_band *sband;
447 struct ieee80211_sta_ht_cap *ht_cap;
451 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
452 if (WARN_ON(!chanctx_conf)) {
456 channel = chanctx_conf->def.chan;
459 sband = local->hw.wiphy->bands[channel->band];
460 ht_cap = &sband->ht_cap;
462 if (!ht_cap->ht_supported || channel_type == NL80211_CHAN_NO_HT)
465 if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_operation))
468 pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_operation));
469 ieee80211_ie_build_ht_oper(pos, ht_cap, &sdata->vif.bss_conf.chandef,
470 sdata->vif.bss_conf.ht_operation_mode);
475 static void ieee80211_mesh_path_timer(unsigned long data)
477 struct ieee80211_sub_if_data *sdata =
478 (struct ieee80211_sub_if_data *) data;
480 ieee80211_queue_work(&sdata->local->hw, &sdata->work);
483 static void ieee80211_mesh_path_root_timer(unsigned long data)
485 struct ieee80211_sub_if_data *sdata =
486 (struct ieee80211_sub_if_data *) data;
487 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
489 set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
491 ieee80211_queue_work(&sdata->local->hw, &sdata->work);
494 void ieee80211_mesh_root_setup(struct ieee80211_if_mesh *ifmsh)
496 if (ifmsh->mshcfg.dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)
497 set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
499 clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
500 /* stop running timer */
501 del_timer_sync(&ifmsh->mesh_path_root_timer);
506 * ieee80211_fill_mesh_addresses - fill addresses of a locally originated mesh frame
507 * @hdr: 802.11 frame header
508 * @fc: frame control field
509 * @meshda: destination address in the mesh
510 * @meshsa: source address address in the mesh. Same as TA, as frame is
511 * locally originated.
513 * Return the length of the 802.11 (does not include a mesh control header)
515 int ieee80211_fill_mesh_addresses(struct ieee80211_hdr *hdr, __le16 *fc,
516 const u8 *meshda, const u8 *meshsa)
518 if (is_multicast_ether_addr(meshda)) {
519 *fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
521 memcpy(hdr->addr1, meshda, ETH_ALEN);
522 memcpy(hdr->addr2, meshsa, ETH_ALEN);
523 memcpy(hdr->addr3, meshsa, ETH_ALEN);
526 *fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS | IEEE80211_FCTL_TODS);
528 memset(hdr->addr1, 0, ETH_ALEN); /* RA is resolved later */
529 memcpy(hdr->addr2, meshsa, ETH_ALEN);
530 memcpy(hdr->addr3, meshda, ETH_ALEN);
531 memcpy(hdr->addr4, meshsa, ETH_ALEN);
537 * ieee80211_new_mesh_header - create a new mesh header
538 * @sdata: mesh interface to be used
539 * @meshhdr: uninitialized mesh header
540 * @addr4or5: 1st address in the ae header, which may correspond to address 4
541 * (if addr6 is NULL) or address 5 (if addr6 is present). It may
543 * @addr6: 2nd address in the ae header, which corresponds to addr6 of the
546 * Return the header length.
548 int ieee80211_new_mesh_header(struct ieee80211_sub_if_data *sdata,
549 struct ieee80211s_hdr *meshhdr,
550 const char *addr4or5, const char *addr6)
552 if (WARN_ON(!addr4or5 && addr6))
555 memset(meshhdr, 0, sizeof(*meshhdr));
557 meshhdr->ttl = sdata->u.mesh.mshcfg.dot11MeshTTL;
559 /* FIXME: racy -- TX on multiple queues can be concurrent */
560 put_unaligned(cpu_to_le32(sdata->u.mesh.mesh_seqnum), &meshhdr->seqnum);
561 sdata->u.mesh.mesh_seqnum++;
563 if (addr4or5 && !addr6) {
564 meshhdr->flags |= MESH_FLAGS_AE_A4;
565 memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
567 } else if (addr4or5 && addr6) {
568 meshhdr->flags |= MESH_FLAGS_AE_A5_A6;
569 memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
570 memcpy(meshhdr->eaddr2, addr6, ETH_ALEN);
577 static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata)
579 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
582 ieee80211_sta_expire(sdata, ifmsh->mshcfg.plink_timeout * HZ);
583 mesh_path_expire(sdata);
585 changed = mesh_accept_plinks_update(sdata);
586 ieee80211_mbss_info_change_notify(sdata, changed);
588 mod_timer(&ifmsh->housekeeping_timer,
589 round_jiffies(jiffies +
590 IEEE80211_MESH_HOUSEKEEPING_INTERVAL));
593 static void ieee80211_mesh_rootpath(struct ieee80211_sub_if_data *sdata)
595 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
598 mesh_path_tx_root_frame(sdata);
600 if (ifmsh->mshcfg.dot11MeshHWMPRootMode == IEEE80211_PROACTIVE_RANN)
601 interval = ifmsh->mshcfg.dot11MeshHWMPRannInterval;
603 interval = ifmsh->mshcfg.dot11MeshHWMProotInterval;
605 mod_timer(&ifmsh->mesh_path_root_timer,
606 round_jiffies(TU_TO_EXP_TIME(interval)));
610 ieee80211_mesh_build_beacon(struct ieee80211_if_mesh *ifmsh)
612 struct beacon_data *bcn;
613 int head_len, tail_len;
615 struct ieee80211_mgmt *mgmt;
616 struct ieee80211_chanctx_conf *chanctx_conf;
617 struct mesh_csa_settings *csa;
618 enum ieee80211_band band;
620 struct ieee80211_sub_if_data *sdata;
621 int hdr_len = offsetof(struct ieee80211_mgmt, u.beacon) +
622 sizeof(mgmt->u.beacon);
624 sdata = container_of(ifmsh, struct ieee80211_sub_if_data, u.mesh);
626 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
627 band = chanctx_conf->def.chan->band;
632 /* Channel Switch Announcement */
633 2 + sizeof(struct ieee80211_channel_sw_ie) +
634 /* Mesh Channel Swith Parameters */
635 2 + sizeof(struct ieee80211_mesh_chansw_params_ie) +
636 2 + 8 + /* supported rates */
637 2 + 3; /* DS params */
638 tail_len = 2 + (IEEE80211_MAX_SUPP_RATES - 8) +
639 2 + sizeof(struct ieee80211_ht_cap) +
640 2 + sizeof(struct ieee80211_ht_operation) +
641 2 + ifmsh->mesh_id_len +
642 2 + sizeof(struct ieee80211_meshconf_ie) +
643 2 + sizeof(__le16) + /* awake window */
646 bcn = kzalloc(sizeof(*bcn) + head_len + tail_len, GFP_KERNEL);
647 /* need an skb for IE builders to operate on */
648 skb = dev_alloc_skb(max(head_len, tail_len));
654 * pointers go into the block we allocated,
655 * memory is | beacon_data | head | tail |
657 bcn->head = ((u8 *) bcn) + sizeof(*bcn);
659 /* fill in the head */
660 mgmt = (struct ieee80211_mgmt *) skb_put(skb, hdr_len);
661 memset(mgmt, 0, hdr_len);
662 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
663 IEEE80211_STYPE_BEACON);
664 eth_broadcast_addr(mgmt->da);
665 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
666 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
667 ieee80211_mps_set_frame_flags(sdata, NULL, (void *) mgmt);
668 mgmt->u.beacon.beacon_int =
669 cpu_to_le16(sdata->vif.bss_conf.beacon_int);
670 mgmt->u.beacon.capab_info |= cpu_to_le16(
671 sdata->u.mesh.security ? WLAN_CAPABILITY_PRIVACY : 0);
673 pos = skb_put(skb, 2);
674 *pos++ = WLAN_EID_SSID;
678 csa = rcu_dereference(ifmsh->csa);
680 pos = skb_put(skb, 13);
682 *pos++ = WLAN_EID_CHANNEL_SWITCH;
685 *pos++ = ieee80211_frequency_to_channel(
686 csa->settings.chandef.chan->center_freq);
687 sdata->csa_counter_offset_beacon = hdr_len + 6;
688 *pos++ = csa->settings.count;
689 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM;
691 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) {
692 *pos++ = ifmsh->mshcfg.dot11MeshTTL;
693 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
695 *pos++ = ifmsh->chsw_ttl;
697 *pos++ |= csa->settings.block_tx ?
698 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
699 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos);
701 put_unaligned_le16(ifmsh->pre_value, pos);
706 if (ieee80211_add_srates_ie(sdata, skb, true, band) ||
707 mesh_add_ds_params_ie(sdata, skb))
710 bcn->head_len = skb->len;
711 memcpy(bcn->head, skb->data, bcn->head_len);
715 bcn->tail = bcn->head + bcn->head_len;
717 if (ieee80211_add_ext_srates_ie(sdata, skb, true, band) ||
718 mesh_add_rsn_ie(sdata, skb) ||
719 mesh_add_ht_cap_ie(sdata, skb) ||
720 mesh_add_ht_oper_ie(sdata, skb) ||
721 mesh_add_meshid_ie(sdata, skb) ||
722 mesh_add_meshconf_ie(sdata, skb) ||
723 mesh_add_awake_window_ie(sdata, skb) ||
724 mesh_add_vendor_ies(sdata, skb))
727 bcn->tail_len = skb->len;
728 memcpy(bcn->tail, skb->data, bcn->tail_len);
729 bcn->meshconf = (struct ieee80211_meshconf_ie *)
730 (bcn->tail + ifmsh->meshconf_offset);
733 rcu_assign_pointer(ifmsh->beacon, bcn);
742 ieee80211_mesh_rebuild_beacon(struct ieee80211_sub_if_data *sdata)
744 struct beacon_data *old_bcn;
747 old_bcn = rcu_dereference_protected(sdata->u.mesh.beacon,
748 lockdep_is_held(&sdata->wdev.mtx));
749 ret = ieee80211_mesh_build_beacon(&sdata->u.mesh);
751 /* just reuse old beacon */
755 kfree_rcu(old_bcn, rcu_head);
759 void ieee80211_mbss_info_change_notify(struct ieee80211_sub_if_data *sdata,
762 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
763 unsigned long bits = changed;
769 /* if we race with running work, worst case this work becomes a noop */
770 for_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE)
771 set_bit(bit, &ifmsh->mbss_changed);
772 set_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags);
773 ieee80211_queue_work(&sdata->local->hw, &sdata->work);
776 int ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata)
778 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
779 struct ieee80211_local *local = sdata->local;
780 u32 changed = BSS_CHANGED_BEACON |
781 BSS_CHANGED_BEACON_ENABLED |
783 BSS_CHANGED_BASIC_RATES |
784 BSS_CHANGED_BEACON_INT;
786 local->fif_other_bss++;
787 /* mesh ifaces must set allmulti to forward mcast traffic */
788 atomic_inc(&local->iff_allmultis);
789 ieee80211_configure_filter(local);
791 ifmsh->mesh_cc_id = 0; /* Disabled */
792 /* register sync ops from extensible synchronization framework */
793 ifmsh->sync_ops = ieee80211_mesh_sync_ops_get(ifmsh->mesh_sp_id);
794 ifmsh->adjusting_tbtt = false;
795 ifmsh->sync_offset_clockdrift_max = 0;
796 set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
797 ieee80211_mesh_root_setup(ifmsh);
798 ieee80211_queue_work(&local->hw, &sdata->work);
799 sdata->vif.bss_conf.ht_operation_mode =
800 ifmsh->mshcfg.ht_opmode;
801 sdata->vif.bss_conf.enable_beacon = true;
803 changed |= ieee80211_mps_local_status_update(sdata);
805 if (ieee80211_mesh_build_beacon(ifmsh)) {
806 ieee80211_stop_mesh(sdata);
810 ieee80211_recalc_dtim(local, sdata);
811 ieee80211_bss_info_change_notify(sdata, changed);
813 netif_carrier_on(sdata->dev);
817 void ieee80211_stop_mesh(struct ieee80211_sub_if_data *sdata)
819 struct ieee80211_local *local = sdata->local;
820 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
821 struct beacon_data *bcn;
823 netif_carrier_off(sdata->dev);
825 /* stop the beacon */
826 ifmsh->mesh_id_len = 0;
827 sdata->vif.bss_conf.enable_beacon = false;
828 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
829 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
830 bcn = rcu_dereference_protected(ifmsh->beacon,
831 lockdep_is_held(&sdata->wdev.mtx));
832 rcu_assign_pointer(ifmsh->beacon, NULL);
833 kfree_rcu(bcn, rcu_head);
835 /* flush STAs and mpaths on this iface */
836 sta_info_flush(sdata);
837 mesh_path_flush_by_iface(sdata);
839 /* free all potentially still buffered group-addressed frames */
840 local->total_ps_buffered -= skb_queue_len(&ifmsh->ps.bc_buf);
841 skb_queue_purge(&ifmsh->ps.bc_buf);
843 del_timer_sync(&sdata->u.mesh.housekeeping_timer);
844 del_timer_sync(&sdata->u.mesh.mesh_path_root_timer);
845 del_timer_sync(&sdata->u.mesh.mesh_path_timer);
847 /* clear any mesh work (for next join) we may have accrued */
848 ifmsh->wrkq_flags = 0;
849 ifmsh->mbss_changed = 0;
851 local->fif_other_bss--;
852 atomic_dec(&local->iff_allmultis);
853 ieee80211_configure_filter(local);
857 ieee80211_mesh_process_chnswitch(struct ieee80211_sub_if_data *sdata,
858 struct ieee802_11_elems *elems, bool beacon)
860 struct cfg80211_csa_settings params;
861 struct ieee80211_csa_ie csa_ie;
862 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
863 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
867 sdata_assert_lock(sdata);
869 sta_flags = IEEE80211_STA_DISABLE_VHT;
870 switch (sdata->vif.bss_conf.chandef.width) {
871 case NL80211_CHAN_WIDTH_20_NOHT:
872 sta_flags |= IEEE80211_STA_DISABLE_HT;
873 case NL80211_CHAN_WIDTH_20:
874 sta_flags |= IEEE80211_STA_DISABLE_40MHZ;
880 memset(¶ms, 0, sizeof(params));
881 memset(&csa_ie, 0, sizeof(csa_ie));
882 err = ieee80211_parse_ch_switch_ie(sdata, elems, beacon, band,
883 sta_flags, sdata->vif.addr,
890 params.chandef = csa_ie.chandef;
891 params.count = csa_ie.count;
893 if (!cfg80211_chandef_usable(sdata->local->hw.wiphy, ¶ms.chandef,
894 IEEE80211_CHAN_DISABLED)) {
896 "mesh STA %pM switches to unsupported channel (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n",
898 params.chandef.chan->center_freq,
899 params.chandef.width,
900 params.chandef.center_freq1,
901 params.chandef.center_freq2);
905 err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
910 params.radar_required = true;
911 /* TODO: DFS not (yet) supported */
915 if (cfg80211_chandef_identical(¶ms.chandef,
916 &sdata->vif.bss_conf.chandef)) {
918 "received csa with an identical chandef, ignoring\n");
923 "received channel switch announcement to go to channel %d MHz\n",
924 params.chandef.chan->center_freq);
926 params.block_tx = csa_ie.mode & WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT;
928 ifmsh->chsw_ttl = csa_ie.ttl - 1;
929 if (ifmsh->pre_value >= csa_ie.pre_value)
931 ifmsh->pre_value = csa_ie.pre_value;
934 if (ifmsh->chsw_ttl >= ifmsh->mshcfg.dot11MeshTTL)
937 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_REPEATER;
939 if (ieee80211_channel_switch(sdata->local->hw.wiphy, sdata->dev,
947 ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data *sdata,
948 struct ieee80211_mgmt *mgmt, size_t len)
950 struct ieee80211_local *local = sdata->local;
951 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
952 struct sk_buff *presp;
953 struct beacon_data *bcn;
954 struct ieee80211_mgmt *hdr;
955 struct ieee802_11_elems elems;
959 pos = mgmt->u.probe_req.variable;
960 baselen = (u8 *) pos - (u8 *) mgmt;
964 ieee802_11_parse_elems(pos, len - baselen, false, &elems);
969 /* 802.11-2012 10.1.4.3.2 */
970 if ((!ether_addr_equal(mgmt->da, sdata->vif.addr) &&
971 !is_broadcast_ether_addr(mgmt->da)) ||
975 if (elems.mesh_id_len != 0 &&
976 (elems.mesh_id_len != ifmsh->mesh_id_len ||
977 memcmp(elems.mesh_id, ifmsh->mesh_id, ifmsh->mesh_id_len)))
981 bcn = rcu_dereference(ifmsh->beacon);
986 presp = dev_alloc_skb(local->tx_headroom +
987 bcn->head_len + bcn->tail_len);
991 skb_reserve(presp, local->tx_headroom);
992 memcpy(skb_put(presp, bcn->head_len), bcn->head, bcn->head_len);
993 memcpy(skb_put(presp, bcn->tail_len), bcn->tail, bcn->tail_len);
994 hdr = (struct ieee80211_mgmt *) presp->data;
995 hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
996 IEEE80211_STYPE_PROBE_RESP);
997 memcpy(hdr->da, mgmt->sa, ETH_ALEN);
998 IEEE80211_SKB_CB(presp)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
999 ieee80211_tx_skb(sdata, presp);
1004 static void ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data *sdata,
1006 struct ieee80211_mgmt *mgmt,
1008 struct ieee80211_rx_status *rx_status)
1010 struct ieee80211_local *local = sdata->local;
1011 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1012 struct ieee802_11_elems elems;
1013 struct ieee80211_channel *channel;
1016 enum ieee80211_band band = rx_status->band;
1018 /* ignore ProbeResp to foreign address */
1019 if (stype == IEEE80211_STYPE_PROBE_RESP &&
1020 !ether_addr_equal(mgmt->da, sdata->vif.addr))
1023 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1027 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1030 /* ignore non-mesh or secure / unsecure mismatch */
1031 if ((!elems.mesh_id || !elems.mesh_config) ||
1032 (elems.rsn && sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE) ||
1033 (!elems.rsn && sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE))
1036 if (elems.ds_params)
1037 freq = ieee80211_channel_to_frequency(elems.ds_params[0], band);
1039 freq = rx_status->freq;
1041 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1043 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1046 if (mesh_matches_local(sdata, &elems))
1047 mesh_neighbour_update(sdata, mgmt->sa, &elems);
1049 if (ifmsh->sync_ops)
1050 ifmsh->sync_ops->rx_bcn_presp(sdata,
1051 stype, mgmt, &elems, rx_status);
1053 if (ifmsh->csa_role != IEEE80211_MESH_CSA_ROLE_INIT &&
1054 !sdata->vif.csa_active)
1055 ieee80211_mesh_process_chnswitch(sdata, &elems, true);
1058 int ieee80211_mesh_finish_csa(struct ieee80211_sub_if_data *sdata)
1060 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1061 struct mesh_csa_settings *tmp_csa_settings;
1065 /* Reset the TTL value and Initiator flag */
1066 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1067 ifmsh->chsw_ttl = 0;
1069 /* Remove the CSA and MCSP elements from the beacon */
1070 tmp_csa_settings = rcu_dereference(ifmsh->csa);
1071 rcu_assign_pointer(ifmsh->csa, NULL);
1072 if (tmp_csa_settings)
1073 kfree_rcu(tmp_csa_settings, rcu_head);
1074 ret = ieee80211_mesh_rebuild_beacon(sdata);
1078 changed |= BSS_CHANGED_BEACON;
1080 mcsa_dbg(sdata, "complete switching to center freq %d MHz",
1081 sdata->vif.bss_conf.chandef.chan->center_freq);
1085 int ieee80211_mesh_csa_beacon(struct ieee80211_sub_if_data *sdata,
1086 struct cfg80211_csa_settings *csa_settings)
1088 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1089 struct mesh_csa_settings *tmp_csa_settings;
1092 tmp_csa_settings = kmalloc(sizeof(*tmp_csa_settings),
1094 if (!tmp_csa_settings)
1097 memcpy(&tmp_csa_settings->settings, csa_settings,
1098 sizeof(struct cfg80211_csa_settings));
1100 rcu_assign_pointer(ifmsh->csa, tmp_csa_settings);
1102 ret = ieee80211_mesh_rebuild_beacon(sdata);
1104 tmp_csa_settings = rcu_dereference(ifmsh->csa);
1105 rcu_assign_pointer(ifmsh->csa, NULL);
1106 kfree_rcu(tmp_csa_settings, rcu_head);
1110 return BSS_CHANGED_BEACON;
1113 static int mesh_fwd_csa_frame(struct ieee80211_sub_if_data *sdata,
1114 struct ieee80211_mgmt *mgmt, size_t len)
1116 struct ieee80211_mgmt *mgmt_fwd;
1117 struct sk_buff *skb;
1118 struct ieee80211_local *local = sdata->local;
1119 u8 *pos = mgmt->u.action.u.chan_switch.variable;
1122 skb = dev_alloc_skb(local->tx_headroom + len);
1125 skb_reserve(skb, local->tx_headroom);
1126 mgmt_fwd = (struct ieee80211_mgmt *) skb_put(skb, len);
1128 /* offset_ttl is based on whether the secondary channel
1129 * offset is available or not. Substract 1 from the mesh TTL
1130 * and disable the initiator flag before forwarding.
1132 offset_ttl = (len < 42) ? 7 : 10;
1133 *(pos + offset_ttl) -= 1;
1134 *(pos + offset_ttl + 1) &= ~WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
1136 memcpy(mgmt_fwd, mgmt, len);
1137 eth_broadcast_addr(mgmt_fwd->da);
1138 memcpy(mgmt_fwd->sa, sdata->vif.addr, ETH_ALEN);
1139 memcpy(mgmt_fwd->bssid, sdata->vif.addr, ETH_ALEN);
1141 ieee80211_tx_skb(sdata, skb);
1145 static void mesh_rx_csa_frame(struct ieee80211_sub_if_data *sdata,
1146 struct ieee80211_mgmt *mgmt, size_t len)
1148 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1149 struct ieee802_11_elems elems;
1151 bool fwd_csa = true;
1155 if (mgmt->u.action.u.measurement.action_code !=
1156 WLAN_ACTION_SPCT_CHL_SWITCH)
1159 pos = mgmt->u.action.u.chan_switch.variable;
1160 baselen = offsetof(struct ieee80211_mgmt,
1161 u.action.u.chan_switch.variable);
1162 ieee802_11_parse_elems(pos, len - baselen, false, &elems);
1164 ifmsh->chsw_ttl = elems.mesh_chansw_params_ie->mesh_ttl;
1165 if (!--ifmsh->chsw_ttl)
1168 pre_value = le16_to_cpu(elems.mesh_chansw_params_ie->mesh_pre_value);
1169 if (ifmsh->pre_value >= pre_value)
1172 ifmsh->pre_value = pre_value;
1174 if (!sdata->vif.csa_active &&
1175 !ieee80211_mesh_process_chnswitch(sdata, &elems, false)) {
1176 mcsa_dbg(sdata, "Failed to process CSA action frame");
1180 /* forward or re-broadcast the CSA frame */
1182 if (mesh_fwd_csa_frame(sdata, mgmt, len) < 0)
1183 mcsa_dbg(sdata, "Failed to forward the CSA frame");
1187 static void ieee80211_mesh_rx_mgmt_action(struct ieee80211_sub_if_data *sdata,
1188 struct ieee80211_mgmt *mgmt,
1190 struct ieee80211_rx_status *rx_status)
1192 switch (mgmt->u.action.category) {
1193 case WLAN_CATEGORY_SELF_PROTECTED:
1194 switch (mgmt->u.action.u.self_prot.action_code) {
1195 case WLAN_SP_MESH_PEERING_OPEN:
1196 case WLAN_SP_MESH_PEERING_CLOSE:
1197 case WLAN_SP_MESH_PEERING_CONFIRM:
1198 mesh_rx_plink_frame(sdata, mgmt, len, rx_status);
1202 case WLAN_CATEGORY_MESH_ACTION:
1203 if (mesh_action_is_path_sel(mgmt))
1204 mesh_rx_path_sel_frame(sdata, mgmt, len);
1206 case WLAN_CATEGORY_SPECTRUM_MGMT:
1207 mesh_rx_csa_frame(sdata, mgmt, len);
1212 void ieee80211_mesh_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
1213 struct sk_buff *skb)
1215 struct ieee80211_rx_status *rx_status;
1216 struct ieee80211_mgmt *mgmt;
1221 /* mesh already went down */
1222 if (!sdata->u.mesh.mesh_id_len)
1225 rx_status = IEEE80211_SKB_RXCB(skb);
1226 mgmt = (struct ieee80211_mgmt *) skb->data;
1227 stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;
1230 case IEEE80211_STYPE_PROBE_RESP:
1231 case IEEE80211_STYPE_BEACON:
1232 ieee80211_mesh_rx_bcn_presp(sdata, stype, mgmt, skb->len,
1235 case IEEE80211_STYPE_PROBE_REQ:
1236 ieee80211_mesh_rx_probe_req(sdata, mgmt, skb->len);
1238 case IEEE80211_STYPE_ACTION:
1239 ieee80211_mesh_rx_mgmt_action(sdata, mgmt, skb->len, rx_status);
1243 sdata_unlock(sdata);
1246 static void mesh_bss_info_changed(struct ieee80211_sub_if_data *sdata)
1248 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1249 u32 bit, changed = 0;
1251 for_each_set_bit(bit, &ifmsh->mbss_changed,
1252 sizeof(changed) * BITS_PER_BYTE) {
1253 clear_bit(bit, &ifmsh->mbss_changed);
1254 changed |= BIT(bit);
1257 if (sdata->vif.bss_conf.enable_beacon &&
1258 (changed & (BSS_CHANGED_BEACON |
1260 BSS_CHANGED_BASIC_RATES |
1261 BSS_CHANGED_BEACON_INT)))
1262 if (ieee80211_mesh_rebuild_beacon(sdata))
1265 ieee80211_bss_info_change_notify(sdata, changed);
1268 void ieee80211_mesh_work(struct ieee80211_sub_if_data *sdata)
1270 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1274 /* mesh already went down */
1275 if (!sdata->u.mesh.mesh_id_len)
1278 if (ifmsh->preq_queue_len &&
1280 ifmsh->last_preq + msecs_to_jiffies(ifmsh->mshcfg.dot11MeshHWMPpreqMinInterval)))
1281 mesh_path_start_discovery(sdata);
1283 if (test_and_clear_bit(MESH_WORK_GROW_MPATH_TABLE, &ifmsh->wrkq_flags))
1284 mesh_mpath_table_grow();
1286 if (test_and_clear_bit(MESH_WORK_GROW_MPP_TABLE, &ifmsh->wrkq_flags))
1287 mesh_mpp_table_grow();
1289 if (test_and_clear_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags))
1290 ieee80211_mesh_housekeeping(sdata);
1292 if (test_and_clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags))
1293 ieee80211_mesh_rootpath(sdata);
1295 if (test_and_clear_bit(MESH_WORK_DRIFT_ADJUST, &ifmsh->wrkq_flags))
1296 mesh_sync_adjust_tbtt(sdata);
1298 if (test_and_clear_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags))
1299 mesh_bss_info_changed(sdata);
1301 sdata_unlock(sdata);
1304 void ieee80211_mesh_notify_scan_completed(struct ieee80211_local *local)
1306 struct ieee80211_sub_if_data *sdata;
1309 list_for_each_entry_rcu(sdata, &local->interfaces, list)
1310 if (ieee80211_vif_is_mesh(&sdata->vif) &&
1311 ieee80211_sdata_running(sdata))
1312 ieee80211_queue_work(&local->hw, &sdata->work);
1316 void ieee80211_mesh_init_sdata(struct ieee80211_sub_if_data *sdata)
1318 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1319 static u8 zero_addr[ETH_ALEN] = {};
1321 setup_timer(&ifmsh->housekeeping_timer,
1322 ieee80211_mesh_housekeeping_timer,
1323 (unsigned long) sdata);
1325 ifmsh->accepting_plinks = true;
1326 atomic_set(&ifmsh->mpaths, 0);
1327 mesh_rmc_init(sdata);
1328 ifmsh->last_preq = jiffies;
1329 ifmsh->next_perr = jiffies;
1330 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1331 /* Allocate all mesh structures when creating the first mesh interface. */
1332 if (!mesh_allocated)
1334 setup_timer(&ifmsh->mesh_path_timer,
1335 ieee80211_mesh_path_timer,
1336 (unsigned long) sdata);
1337 setup_timer(&ifmsh->mesh_path_root_timer,
1338 ieee80211_mesh_path_root_timer,
1339 (unsigned long) sdata);
1340 INIT_LIST_HEAD(&ifmsh->preq_queue.list);
1341 skb_queue_head_init(&ifmsh->ps.bc_buf);
1342 spin_lock_init(&ifmsh->mesh_preq_queue_lock);
1343 spin_lock_init(&ifmsh->sync_offset_lock);
1344 RCU_INIT_POINTER(ifmsh->beacon, NULL);
1346 sdata->vif.bss_conf.bssid = zero_addr;