// SPDX-License-Identifier: GPL-2.0-only /* * BSS client mode implementation * Copyright 2003 - 2008 , Jouni Malinen < j @ w1 . fi > * Copyright 2004 , Instant802 Networks , Inc . * Copyright 2005 , Devicescape Software , Inc . * Copyright 2006 - 2007 Jiri Benc < jbenc @ suse . cz > * Copyright 2007 , Michael Wu < flamingice @ sourmilk . net > * Copyright 2013 - 2014 Intel Mobile Communications GmbH * Copyright ( C ) 2015 - 2017 Intel Deutschland GmbH * Copyright ( C ) 2018 - 2025 Intel Corporation #include <linux/delay.h>#include <linux/fips.h>#include <linux/if_ether.h>#include <linux/skbuff.h>#include <linux/if_arp.h>#include <linux/etherdevice.h>#include <linux/moduleparam.h>#include <linux/rtnetlink.h>#include <linux/crc32.h>#include <linux/slab.h>#include <linux/export.h>#include <net/mac80211.h>#include <linux/unaligned.h>#include "ieee80211_i.h" #include "driver-ops.h" #include "rate.h" #include "led.h" #include "fils_aead.h" #include <kunit/static_stub.h>#define IEEE80211_AUTH_TIMEOUT (HZ / 5 )#define IEEE80211_AUTH_TIMEOUT_LONG (HZ / 2 )#define IEEE80211_AUTH_TIMEOUT_SHORT (HZ / 10 )#define IEEE80211_AUTH_TIMEOUT_SAE (HZ * 2 )#define IEEE80211_AUTH_MAX_TRIES 3 #define IEEE80211_AUTH_WAIT_ASSOC (HZ * 5 )#define IEEE80211_AUTH_WAIT_SAE_RETRY (HZ * 2 )#define IEEE80211_ASSOC_TIMEOUT (HZ / 5 )#define IEEE80211_ASSOC_TIMEOUT_LONG (HZ / 2 )#define IEEE80211_ASSOC_TIMEOUT_SHORT (HZ / 10 )#define IEEE80211_ASSOC_MAX_TRIES 3 #define IEEE80211_ADV_TTLM_SAFETY_BUFFER_MS (100 * USEC_PER_MSEC)#define IEEE80211_ADV_TTLM_ST_UNDERFLOW 0 xff00#define IEEE80211_NEG_TTLM_REQ_TIMEOUT (HZ / 5 )static int max_nullfunc_tries = 2 ;int , 0644 );"Maximum nullfunc tx tries before disconnecting (reason 4)." );static int max_probe_tries = 5 ;int , 0644 );"Maximum probe tries before disconnecting (reason 4)." );/* * Beacon loss timeout is calculated as N frames times the * advertised beacon interval . This may need to be somewhat * higher than what hardware might detect to account for * delays in the host processing frames . But since we also * probe on beacon miss before declaring the connection lost * default to what we want . static int beacon_loss_count = 7 ;int , 0644 );"Number of beacon intervals before we decide beacon was lost." );/* * Time the connection can be idle before we probe * it to see if we can still talk to the AP . #define IEEE80211_CONNECTION_IDLE_TIME (30 * HZ)/* * Time we wait for a probe response after sending * a probe request because of beacon loss or for * checking the connection still works . static int probe_wait_ms = 500 ;int , 0644 );"Maximum time(ms) to wait for probe response" " before disconnecting (reason 4)." );/* * How many Beacon frames need to have been used in average signal strength * before starting to indicate signal change events . #define IEEE80211_SIGNAL_AVE_MIN_COUNT 4 /* * We can have multiple work items ( and connection probing ) * scheduling this timer , but we need to take care to only * reschedule it when it should fire _ earlier_ than it was * asked for before , or if it ' s not pending right now . This * function ensures that . Note that it then is required to * run this function for all timeouts after the first one * has happened - - the work that runs from this timer will * do that . static void run_again(struct ieee80211_sub_if_data *sdata,unsigned long timeout)if (!timer_pending(&sdata->u.mgd.timer) ||void ieee80211_sta_reset_beacon_monitor(struct ieee80211_sub_if_data *sdata)if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER)return ;if (ieee80211_hw_check(&sdata->local->hw, CONNECTION_MONITOR))return ;void ieee80211_sta_reset_conn_monitor(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (unlikely(!ifmgd->associated))return ;if (ifmgd->probe_send_count)0 ;if (ieee80211_hw_check(&sdata->local->hw, CONNECTION_MONITOR))return ;static int ecw2cw(int ecw)return (1 << ecw) - 1 ;static enum ieee80211_conn_modestruct ieee80211_sub_if_data *sdata,struct ieee80211_channel *channel,const struct ieee802_11_elems *elems,bool ignore_ht_channel_mismatch,const struct ieee80211_conn_settings *conn,struct cfg80211_chan_def *chandef)const struct ieee80211_ht_operation *ht_oper = elems->ht_operation;const struct ieee80211_vht_operation *vht_oper = elems->vht_operation;const struct ieee80211_he_operation *he_oper = elems->he_operation;const struct ieee80211_eht_operation *eht_oper = elems->eht_operation;struct ieee80211_supported_band *sband =struct cfg80211_chan_def vht_chandef;bool no_vht = false ;if (ieee80211_hw_check(&sdata->local->hw, STRICT))false ;struct cfg80211_chan_def) {/* get special S1G case out of the way */ if (sband->band == NL80211_BAND_S1GHZ) {if (!ieee80211_chandef_s1g_oper(elems->s1g_oper, chandef)) {"Missing S1G Operation Element? Trying operating == primary\n" );return IEEE80211_CONN_MODE_S1G;/* get special 6 GHz case out of the way */ if (sband->band == NL80211_BAND_6GHZ) {enum ieee80211_conn_mode mode = IEEE80211_CONN_MODE_EHT;/* this is an error */ if (conn->mode < IEEE80211_CONN_MODE_HE)return IEEE80211_CONN_MODE_LEGACY;if (!elems->he_6ghz_capa || !elems->he_cap) {"HE 6 GHz AP is missing HE/HE 6 GHz band capability\n" );return IEEE80211_CONN_MODE_LEGACY;if (!eht_oper || !elems->eht_cap) {if (!ieee80211_chandef_he_6ghz_oper(sdata->local, he_oper,"bad HE/EHT 6 GHz operation\n" );return IEEE80211_CONN_MODE_LEGACY;return mode;/* now we have the progression HT, VHT, ... */ if (conn->mode < IEEE80211_CONN_MODE_HT)return IEEE80211_CONN_MODE_LEGACY;if (!ht_oper || !elems->ht_cap_elem)return IEEE80211_CONN_MODE_LEGACY;/* check that channel matches the right operating channel */ if (!ignore_ht_channel_mismatch && channel->center_freq != ht_cfreq) {/* * It ' s possible that some APs are confused here ; * Netgear WNDR3700 sometimes reports 4 higher than * the actual channel in association responses , but * since we look at probe response / beacon data here * it should be OK . "Wrong control channel: center-freq: %d ht-cfreq: %d ht->primary_chan: %d band: %d - Disabling HT\n" ,return IEEE80211_CONN_MODE_LEGACY;if (conn->mode < IEEE80211_CONN_MODE_VHT)return IEEE80211_CONN_MODE_HT;/* * having he_cap / he_oper parsed out implies we ' re at * least operating as HE STA if (elems->he_cap && he_oper &&struct ieee80211_vht_operation he_oper_vht_cap;/* * Set only first 3 bytes ( other 2 aren ' t used in * ieee80211_chandef_vht_oper ( ) anyway ) 3 );0 );if (!ieee80211_chandef_vht_oper(&sdata->local->hw, vht_cap_info,"HE AP VHT information is invalid, disabling HE\n" );/* this will cause us to re-parse as VHT STA */ return IEEE80211_CONN_MODE_VHT;else if (!vht_oper || !elems->vht_cap_elem) {if (sband->band == NL80211_BAND_5GHZ) {"VHT information is missing, disabling VHT\n" );return IEEE80211_CONN_MODE_HT;true ;else if (sband->band == NL80211_BAND_2GHZ) {true ;else if (!ieee80211_chandef_vht_oper(&sdata->local->hw,"AP VHT information is invalid, disabling VHT\n" );return IEEE80211_CONN_MODE_HT;if (!cfg80211_chandef_compatible(chandef, &vht_chandef)) {"AP VHT information doesn't match HT, disabling VHT\n" );return IEEE80211_CONN_MODE_HT;/* stick to current max mode if we or the AP don't have HE */ if (conn->mode < IEEE80211_CONN_MODE_HE ||if (no_vht)return IEEE80211_CONN_MODE_HT;return IEEE80211_CONN_MODE_VHT;/* stick to HE if we or the AP don't have EHT */ if (conn->mode < IEEE80211_CONN_MODE_EHT ||return IEEE80211_CONN_MODE_HE;/* * handle the case that the EHT operation indicates that it holds EHT * operation information ( in case that the channel width differs from * the channel width reported in HT / VHT / HE ) . if (eht_oper->params & IEEE80211_EHT_OPER_INFO_PRESENT) {struct cfg80211_chan_def eht_chandef = *chandef;const void *)eht_oper->optional,if (!cfg80211_chandef_valid(&eht_chandef)) {"AP EHT information is invalid, disabling EHT\n" );return IEEE80211_CONN_MODE_HE;if (!cfg80211_chandef_compatible(chandef, &eht_chandef)) {"AP EHT information doesn't match HT/VHT/HE, disabling EHT\n" );return IEEE80211_CONN_MODE_HE;return IEEE80211_CONN_MODE_EHT;static bool struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,const struct ieee80211_ht_operation *ht_op)struct ieee80211_sta_ht_cap sta_ht_cap;int i;if (sband->band == NL80211_BAND_6GHZ)return true ;if (!ht_op)return false ;sizeof (sta_ht_cap));/* * P802 . 11 REVme / D7 . 0 - 6 . 5 . 4 . 2 . 4 * . . . * If the MLME of an HT STA receives an MLME - JOIN . request primitive * with the SelectedBSS parameter containing a Basic HT - MCS Set field * in the HT Operation parameter that contains any unsupported MCSs , * the MLME response in the resulting MLME - JOIN . confirm primitive shall * contain a ResultCode parameter that is not set to the value SUCCESS . * . . . /* Simply check that all basic rates are in the STA RX mask */ for (i = 0 ; i < IEEE80211_HT_MCS_MASK_LEN; i++) {if ((ht_op->basic_set[i] & sta_ht_cap.mcs.rx_mask[i]) !=return false ;return true ;static bool struct ieee80211_sub_if_data *sdata,int link_id,struct ieee80211_supported_band *sband,const struct ieee80211_vht_operation *vht_op)struct ieee80211_sta_vht_cap sta_vht_cap;int nss;if (sband->band != NL80211_BAND_5GHZ)return true ;if (!vht_op)return false ;sizeof (sta_vht_cap));/* * Many APs are incorrectly advertising an all - zero value here , * which really means MCS 0 - 7 are required for 1 - 8 streams , but * they don ' t really mean it that way . * Some other APs are incorrectly advertising 3 spatial streams * with MCS 0 - 7 are required , but don ' t really mean it that way * and we ' ll connect only with HT , rather than even HE . * As a result , unfortunately the VHT basic MCS / NSS set cannot * be used at all , so check it only in strict mode . if (!ieee80211_hw_check(&sdata->local->hw, STRICT))return true ;/* * P802 . 11 REVme / D7 . 0 - 6 . 5 . 4 . 2 . 4 * . . . * If the MLME of a VHT STA receives an MLME - JOIN . request primitive * with a SelectedBSS parameter containing a Basic VHT - MCS And NSS Set * field in the VHT Operation parameter that contains any unsupported * < VHT - MCS , NSS > tuple , the MLME response in the resulting * MLME - JOIN . confirm primitive shall contain a ResultCode parameter * that is not set to the value SUCCESS . * . . . for (nss = 8 ; nss > 0 ; nss--) {2 * (nss - 1 ))) & 3 ;if (ap_op_val == IEEE80211_HE_MCS_NOT_SUPPORTED)continue ;2 * (nss - 1 ))) & 3 ;2 * (nss - 1 ))) & 3 ;if (sta_rx_val == IEEE80211_HE_MCS_NOT_SUPPORTED ||"Missing mandatory rates for %d Nss, rx %d, tx %d oper %d, disable VHT\n" ,return false ;return true ;static bool struct ieee80211_sub_if_data *sdata,int link_id,const struct ieee80211_he_cap_elem *he_cap,const struct ieee80211_he_operation *he_op)struct ieee80211_he_mcs_nss_supp *he_mcs_nss_supp;int nss;if (!he_cap)return false ;/* mcs_nss is right after he_cap info */ void *)(he_cap + 1 );/* P802.11-REVme/D0.3 * 27 . 1 . 1 Introduction to the HE PHY * . . . * An HE STA shall support the following features : * . . . * Single spatial stream HE - MCSs 0 to 7 ( transmit and receive ) in all * supported channel widths for HE SU PPDUs if ((mcs_80_map_tx & 0 x3) == IEEE80211_HE_MCS_NOT_SUPPORTED ||0 x3) == IEEE80211_HE_MCS_NOT_SUPPORTED) {"Missing mandatory rates for 1 Nss, rx 0x%x, tx 0x%x, disable HE\n" ,return false ;if (!he_op)return true ;/* * Apparently iPhone 13 ( at least iOS version 15 . 3 . 1 ) sets this to all * zeroes , which is nonsense , and completely inconsistent with itself * ( it doesn ' t have 8 streams ) . Accept the settings in this case anyway . if (!ieee80211_hw_check(&sdata->local->hw, STRICT) && !ap_min_req_set)return true ;/* make sure the AP is consistent with itself * * P802 . 11 - REVme / D0 . 3 * 26 . 17 . 1 Basic HE BSS operation * * A STA that is operating in an HE BSS shall be able to receive and * transmit at each of the < HE - MCS , NSS > tuple values indicated by the * Basic HE - MCS And NSS Set field of the HE Operation parameter of the * MLME - START . request primitive and shall be able to receive at each of * the < HE - MCS , NSS > tuple values indicated by the Supported HE - MCS and * NSS Set field in the HE Capabilities parameter of the MLMESTART . request * primitive for (nss = 8 ; nss > 0 ; nss--) {2 * (nss - 1 ))) & 3 ;if (ap_op_val == IEEE80211_HE_MCS_NOT_SUPPORTED)continue ;2 * (nss - 1 ))) & 3 ;2 * (nss - 1 ))) & 3 ;if (ap_rx_val == IEEE80211_HE_MCS_NOT_SUPPORTED ||"Invalid rates for %d Nss, rx %d, tx %d oper %d, disable HE\n" ,return false ;return true ;static bool struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,const struct ieee80211_he_operation *he_op)const struct ieee80211_sta_he_cap *sta_he_cap =int i;if (!sta_he_cap || !he_op)return false ;/* * Apparently iPhone 13 ( at least iOS version 15 . 3 . 1 ) sets this to all * zeroes , which is nonsense , and completely inconsistent with itself * ( it doesn ' t have 8 streams ) . Accept the settings in this case anyway . if (!ieee80211_hw_check(&sdata->local->hw, STRICT) && !ap_min_req_set)return true ;/* Need to go over for 80MHz, 160MHz and for 80+80 */ for (i = 0 ; i < 3 ; i++) {const struct ieee80211_he_mcs_nss_supp *sta_mcs_nss_supp =2 * i]);2 * i + 1 ]);bool verified = true ;/* * For each band there is a maximum of 8 spatial streams * possible . Each of the sta_mcs_map_ * is a 16 - bit struct built * of 2 bits per NSS ( 1 - 8 ) , with the values defined in enum * ieee80211_he_mcs_support . Need to make sure STA TX and RX * capabilities aren ' t less than the AP ' s minimum requirements * for this HE BSS per SS . * It is enough to find one such band that meets the reqs . for (nss = 8 ; nss > 0 ; nss--) {2 * (nss - 1 ))) & 3 ;2 * (nss - 1 ))) & 3 ;2 * (nss - 1 ))) & 3 ;if (ap_val == IEEE80211_HE_MCS_NOT_SUPPORTED)continue ;/* * Make sure the HE AP doesn ' t require MCSs that aren ' t * supported by the client as required by spec * * P802 . 11 - REVme / D0 . 3 * 26 . 17 . 1 Basic HE BSS operation * * An HE STA shall not attempt to join * ( MLME - JOIN . request primitive ) * a BSS , unless it supports ( i . e . , is able to both transmit and * receive using ) all of the < HE - MCS , NSS > tuples in the basic * HE - MCS and NSS set . if (sta_rx_val == IEEE80211_HE_MCS_NOT_SUPPORTED ||false ;break ;if (verified)return true ;/* If here, STA doesn't meet AP's HE min requirements */ return false ;static u8const struct ieee80211_sta_he_cap *sta_he_cap,const struct ieee80211_sta_eht_cap *sta_eht_cap,unsigned int idx, int bw)0 ];0 ];/* handle us being a 20 MHz-only EHT STA - with four values * for MCS 0 - 7 , 8 - 9 , 10 - 11 , 12 - 13 . if (!(he_phy_cap0 & IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_MASK_ALL))return sta_eht_cap->eht_mcs_nss_supp.only_20mhz.rx_tx_max_nss[idx];/* the others have MCS 0-9 together, rather than separately from 0-7 */ if (idx > 0 )switch (bw) {case 0 :return sta_eht_cap->eht_mcs_nss_supp.bw._80 .rx_tx_max_nss[idx];case 1 :if (!(he_phy_cap0 &return 0 xff; /* pass check */ return sta_eht_cap->eht_mcs_nss_supp.bw._160 .rx_tx_max_nss[idx];case 2 :if (!(eht_phy_cap0 & IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ))return 0 xff; /* pass check */ return sta_eht_cap->eht_mcs_nss_supp.bw._320 .rx_tx_max_nss[idx];1 );return 0 ;static bool struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,const struct ieee80211_eht_operation *eht_op)const struct ieee80211_sta_he_cap *sta_he_cap =const struct ieee80211_sta_eht_cap *sta_eht_cap =const struct ieee80211_eht_mcs_nss_supp_20mhz_only *req;unsigned int i;if (!sta_he_cap || !sta_eht_cap || !eht_op)return false ;for (i = 0 ; i < ARRAY_SIZE(req->rx_tx_max_nss); i++) {unsigned int bw;for (bw = 0 ; bw < 3 ; bw++) {if (req_rx_nss > have_rx_nss ||return false ;return true ;static void ieee80211_get_rates(struct ieee80211_supported_band *sband,const u8 *supp_rates,unsigned int supp_rates_len,const u8 *ext_supp_rates,unsigned int ext_supp_rates_len,unsigned long *unknown_rates_selectors,bool *have_higher_than_11mbit,int *min_rate, int *min_rate_index)int i, j;for (i = 0 ; i < supp_rates_len + ext_supp_rates_len; i++) {int rate = supp_rate & 0 x7f;bool is_basic = !!(supp_rate & 0 x80);if ((rate * 5 ) > 110 && have_higher_than_11mbit)true ;/* * Skip membership selectors since they ' re not rates . * * Note : Even though the membership selector and the basic * rate flag share the same bit , they are not exactly * the same . if (is_basic && rate >= BSS_MEMBERSHIP_SELECTOR_MIN) {if (unknown_rates_selectors)continue ;for (j = 0 ; j < sband->n_bitrates; j++) {struct ieee80211_rate *br;int brate;5 );if (brate == rate) {if (rates)if (is_basic && basic_rates)if (min_rate && (rate * 5 ) < *min_rate) {5 ;if (min_rate_index)break ;/* Handle an unknown entry as if it is an unknown selector */ if (is_basic && unknown_rates_selectors && j == sband->n_bitrates)static bool ieee80211_chandef_usable(struct ieee80211_sub_if_data *sdata,const struct cfg80211_chan_def *chandef,if (!cfg80211_chandef_usable(sdata->local->hw.wiphy,return false ;if (chandef->punctured &&return false ;return true ;static int ieee80211_chandef_num_subchans(const struct cfg80211_chan_def *c)if (c->width == NL80211_CHAN_WIDTH_80P80)return 4 + 4 ;return cfg80211_chandef_get_width(c) / 20 ;static int ieee80211_chandef_num_widths(const struct cfg80211_chan_def *c)switch (c->width) {case NL80211_CHAN_WIDTH_20:case NL80211_CHAN_WIDTH_20_NOHT:return 1 ;case NL80211_CHAN_WIDTH_40:return 2 ;case NL80211_CHAN_WIDTH_80P80:case NL80211_CHAN_WIDTH_80:return 3 ;case NL80211_CHAN_WIDTH_160:return 4 ;case NL80211_CHAN_WIDTH_320:return 5 ;default :1 );return 0 ;int const struct cfg80211_chan_def *ap,int n = ieee80211_chandef_num_subchans(ap);struct cfg80211_chan_def tmp = *ap;int offset = 0 ;/* * Given a chandef ( in this context , it ' s the AP ' s ) and a number * of subchannels that we want to look at ( ' n_partial_subchans ' ) , * calculate the offset in number of subchannels between the full * and the subset with the desired width . /* same number of subchannels means no offset, obviously */ if (n == n_partial_subchans)return 0 ;/* don't WARN - misconfigured APs could cause this if their N > width */ if (n < n_partial_subchans)return 0 ;while (ieee80211_chandef_num_subchans(&tmp) > n_partial_subchans) {/* * if center_freq moved up , half the original channels * are gone now but were below , so increase offset if (prev < tmp.center_freq1)/* * 80 + 80 with secondary 80 below primary - four subchannels for it * ( we cannot downgrade * to * 80 + 80 , so no need to consider ' tmp ' ) if (ap->width == NL80211_CHAN_WIDTH_80P80 &&4 ;return offset;void struct ieee80211_parsed_tpe_psd *psd,const struct cfg80211_chan_def *ap,const struct cfg80211_chan_def *used)if (!psd->valid)return ;/* if N is zero, all defaults were used, no point in rearranging */ if (!psd->n)goto out;sizeof (tmp) != sizeof (psd->power));/* * This assumes that ' N ' is consistent with the HE channel , as * it should be ( otherwise the AP is broken ) . * * In psd - > power we have values in the order 0 . . N , 0 . . K , where * N + K should cover the entire channel per ' ap ' , but even if it * doesn ' t then we ' ve pre - filled ' unlimited ' as defaults . * * But this is all the wrong order , we want to have them in the * order of the ' used ' channel . * * So for example , we could have a 320 MHz EHT AP , which has the * HE channel as 80 MHz ( e . g . due to puncturing , which doesn ' t * seem to be considered for the TPE ) , as follows : * * EHT 320 : | | | | | | | | | | | | | | | | | * HE 80 : | | | | | * used 160 : | | | | | | | | | * * N entries : | - - | - - | - - | - - | * K entries : | - - | - - | - - | - - | - - | - - | - - | - - | | - - | - - | - - | - - | * power idx : 4 5 6 7 8 9 10 11 0 1 2 3 12 13 14 15 * full chan : 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 * used chan : 0 1 2 3 4 5 6 7 * * The idx in the power array ( ' power idx ' ) is like this since it * comes directly from the element ' s N and K entries in their * element order , and those are this way for HE compatibility . * * Rearrange them as desired here , first by putting them into the * ' full chan ' order , and then selecting the necessary subset for * the ' used chan ' . /* first reorder according to AP channel */ for (int i = 0 ; i < have; i++) {if (i < offset)else if (i < offset + psd->n)else /* * and then select the subset for the used channel * ( set everything to defaults first in case a driver is confused ) sizeof (psd->power));for (int i = 0 ; i < needed; i++)/* limit, but don't lie if there are defaults in the data */ if (needed < psd->count)static void ieee80211_rearrange_tpe(struct ieee80211_parsed_tpe *tpe,const struct cfg80211_chan_def *ap,const struct cfg80211_chan_def *used)/* ignore this completely for narrow/invalid channels */ if (!ieee80211_chandef_num_subchans(ap) ||return ;for (int i = 0 ; i < 2 ; i++) {int needed_pwr_count;/* limit this to the widths we actually need */ if (needed_pwr_count < tpe->max_local[i].count)if (needed_pwr_count < tpe->max_reg_client[i].count)/* * The AP part of the channel request is used to distinguish settings * to the device used for wider bandwidth OFDMA . This is used in the * channel context code to assign two channel contexts even if they ' re * both for the same channel , if the AP bandwidths are incompatible . * If not EHT ( or driver override ) then ap . chan = = NULL indicates that * there ' s no wider BW OFDMA used . static void ieee80211_set_chanreq_ap(struct ieee80211_sub_if_data *sdata,struct ieee80211_chan_req *chanreq,struct ieee80211_conn_settings *conn,struct cfg80211_chan_def *ap_chandef)if (conn->mode < IEEE80211_CONN_MODE_EHT)return ;if (sdata->vif.driver_flags & IEEE80211_VIF_IGNORE_OFDMA_WIDER_BW)return ;struct ieee802_11_elems *struct ieee80211_sub_if_data *sdata,struct ieee80211_conn_settings *conn,struct cfg80211_bss *cbss, int link_id,struct ieee80211_chan_req *chanreq,struct cfg80211_chan_def *ap_chandef,unsigned long *userspace_selectors)const struct cfg80211_bss_ies *ies = rcu_dereference(cbss->ies);struct ieee80211_bss *bss = (void *)cbss->priv;struct ieee80211_channel *channel = cbss->channel;struct ieee80211_elems_parse_params parse_params = {1 ,true ,struct ieee802_11_elems *elems;struct ieee80211_supported_band *sband;enum ieee80211_conn_mode ap_mode;unsigned long unknown_rates_selectors[BITS_TO_LONGS(128 )] = {};unsigned long sta_selectors[BITS_TO_LONGS(128 )] = {};int ret;if (!elems)return ERR_PTR(-ENOMEM);false , conn, ap_chandef);/* this should be impossible since parsing depends on our mode */ if (WARN_ON(ap_mode > conn->mode)) {goto free;if (conn->mode != ap_mode) {goto again;"determined AP %pM to be %s\n" ,switch (channel->band) {case NL80211_BAND_S1GHZ:if (WARN_ON(ap_mode != IEEE80211_CONN_MODE_S1G)) {goto free;return elems;case NL80211_BAND_6GHZ:if (ap_mode < IEEE80211_CONN_MODE_HE) {"Rejecting non-HE 6/7 GHz connection" );goto free;break ;default :if (WARN_ON(ap_mode == IEEE80211_CONN_MODE_S1G)) {goto free;switch (ap_mode) {case IEEE80211_CONN_MODE_S1G:1 );goto free;case IEEE80211_CONN_MODE_LEGACY:break ;case IEEE80211_CONN_MODE_HT:enum ieee80211_conn_bw_limit,break ;case IEEE80211_CONN_MODE_VHT:case IEEE80211_CONN_MODE_HE:enum ieee80211_conn_bw_limit,break ;case IEEE80211_CONN_MODE_EHT:enum ieee80211_conn_bw_limit,break ;128 );if (conn->mode >= IEEE80211_CONN_MODE_HT)if (conn->mode >= IEEE80211_CONN_MODE_VHT)if (conn->mode >= IEEE80211_CONN_MODE_HE)if (conn->mode >= IEEE80211_CONN_MODE_EHT)/* * We do not support EPD or GLK so never add them . * SAE_H2E is handled through userspace_selectors . /* Check if we support all required features */ if (!bitmap_subset(unknown_rates_selectors, sta_selectors, 128 )) {"required basic rate or BSS membership selectors not supported or disabled, rejecting connection\n" );goto free;while (!ieee80211_chandef_usable(sdata, &chanreq->oper,if (WARN_ON(chanreq->oper.width == NL80211_CHAN_WIDTH_20_NOHT)) {goto free;if (conn->mode >= IEEE80211_CONN_MODE_HE &&enum ieee80211_conn_bw_limit,if (conn->mode >= IEEE80211_CONN_MODE_EHT &&enum ieee80211_conn_bw_limit,if (chanreq->oper.width != ap_chandef->width || ap_mode != conn->mode)"regulatory prevented using AP config, downgraded\n" );if (conn->mode >= IEEE80211_CONN_MODE_HT &&"required MCSes not supported, disabling HT\n" );if (conn->mode >= IEEE80211_CONN_MODE_VHT &&enum ieee80211_conn_bw_limit,"required MCSes not supported, disabling VHT\n" );if (conn->mode >= IEEE80211_CONN_MODE_HE &&void *)elems->he_cap,"required MCSes not supported, disabling HE\n" );if (conn->mode >= IEEE80211_CONN_MODE_EHT &&enum ieee80211_conn_bw_limit,"required MCSes not supported, disabling EHT\n" );if (conn->mode >= IEEE80211_CONN_MODE_EHT &&"required bandwidth not supported, disabling EHT\n" );/* the mode can only decrease, so this must terminate */ if (ap_mode != conn->mode) {goto again;"connecting with %s mode, max bandwidth %d MHz\n" ,20 * (1 << conn->bw_limit));if (WARN_ON_ONCE(!cfg80211_chandef_valid(&chanreq->oper))) {goto free;return elems;return ERR_PTR(ret);static int ieee80211_config_bw(struct ieee80211_link_data *link,struct ieee802_11_elems *elems,bool update, u64 *changed, u16 stype)struct ieee80211_channel *channel = link->conf->chanreq.oper.chan;struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_chan_req chanreq = {};struct cfg80211_chan_def ap_chandef;enum ieee80211_conn_mode ap_mode;const char *frame;0 ;int ret;switch (stype) {case IEEE80211_STYPE_BEACON:"beacon" ;break ;case IEEE80211_STYPE_ASSOC_RESP:"assoc response" ;break ;case IEEE80211_STYPE_REASSOC_RESP:"reassoc response" ;break ;case IEEE80211_STYPE_ACTION:/* the only action frame that gets here */ "ML reconf response" ;break ;default :return -EINVAL;/* don't track any bandwidth changes in legacy/S1G modes */ if (link->u.mgd.conn.mode == IEEE80211_CONN_MODE_LEGACY ||return 0 ;if (elems->vht_cap_elem)true , &link->u.mgd.conn,if (ap_mode != link->u.mgd.conn.mode) {"AP %pM appears to change mode (expected %s, found %s) in %s, disconnect\n" ,return -EINVAL;/* * if HT operation mode changed store the new one - * this may be applicable even if channel is identical if (elems->ht_operation) {if (link->conf->ht_operation_mode != ht_opmode) {/* * Downgrade the new channel if we associated with restricted * bandwidth capabilities . For example , if we associated as a * 20 MHz STA to a 40 MHz AP ( due to regulatory , capabilities * or config reasons ) then switching to a 40 MHz channel now * won ' t do us any good - - we couldn ' t use it with the AP . while (link->u.mgd.conn.bw_limit </* TPE element is not present in (re)assoc/ML reconfig response */ if (stype == IEEE80211_STYPE_BEACON &&if (memcmp(&link->conf->tpe, &elems->tpe, sizeof (elems->tpe))) {if (ieee80211_chanreq_identical(&chanreq, &link->conf->chanreq))return 0 ;"AP %pM changed bandwidth in %s, new used config is %d.%03d MHz, width %d (%d.%03d/%d MHz)\n" ,if (!cfg80211_chandef_valid(&chanreq.oper)) {"AP %pM changed caps/bw in %s in a way we can't support - disconnect\n" ,return -EINVAL;if (!update) {return 0 ;/* * We ' re tracking the current AP here , so don ' t do any further checks * here . This keeps us from playing ping - pong with regulatory , without * it the following can happen ( for example ) : * - connect to an AP with 80 MHz , world regdom allows 80 MHz * - AP advertises regdom US * - CRDA loads regdom US with 80 MHz prohibited ( old database ) * - we detect an unsupported channel and disconnect * - disconnect causes CRDA to reload world regdomain and the game * starts anew . * ( see https : //bugzilla.kernel.org/show_bug.cgi?id=70881) * * It seems possible that there are still scenarios with CSA or real * bandwidth changes where a this could happen , but those cases are * less common and wouldn ' t completely prevent using the AP . if (ret) {"AP %pM changed bandwidth in %s to incompatible one - disconnect\n" ,return ret;return 0 ;/* frame sending functions */ static void ieee80211_add_ht_ie(struct ieee80211_sub_if_data *sdata,struct sk_buff *skb, u8 ap_ht_param,struct ieee80211_supported_band *sband,struct ieee80211_channel *channel,enum ieee80211_smps_mode smps,const struct ieee80211_conn_settings *conn)struct ieee80211_sta_ht_cap ht_cap;sizeof (ht_cap) != sizeof (sband->ht_cap));sizeof (ht_cap));/* determine capability flags */ switch (ap_ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:if (flags & IEEE80211_CHAN_NO_HT40PLUS) {break ;case IEEE80211_HT_PARAM_CHA_SEC_BELOW:if (flags & IEEE80211_CHAN_NO_HT40MINUS) {break ;/* * If 40 MHz was disabled associate as though we weren ' t * capable of 40 MHz - - some broken APs will never fall * back to trying to transmit in 20 MHz . if (conn->bw_limit <= IEEE80211_CONN_BW_LIMIT_20) {/* set SM PS mode properly */ switch (smps) {case IEEE80211_SMPS_AUTOMATIC:case IEEE80211_SMPS_NUM_MODES:1 );case IEEE80211_SMPS_OFF:break ;case IEEE80211_SMPS_STATIC:break ;case IEEE80211_SMPS_DYNAMIC:break ;/* reserve and fill IE */ sizeof (struct ieee80211_ht_cap) + 2 );/* This function determines vht capability flags for the association * and builds the IE . * Note - the function returns true to own the MU - MIMO capability static bool ieee80211_add_vht_ie(struct ieee80211_sub_if_data *sdata,struct sk_buff *skb,struct ieee80211_supported_band *sband,struct ieee80211_vht_cap *ap_vht_cap,const struct ieee80211_conn_settings *conn)struct ieee80211_local *local = sdata->local;struct ieee80211_sta_vht_cap vht_cap;bool mu_mimo_owner = false ;sizeof (vht_cap) != sizeof (sband->vht_cap));sizeof (vht_cap));/* determine capability flags */ if (conn->bw_limit <= IEEE80211_CONN_BW_LIMIT_80) {/* * Some APs apparently get confused if our capabilities are better * than theirs , so restrict what we advertise in the assoc request . if (!ieee80211_hw_check(&local->hw, STRICT)) {if (!(ap_vht_cap->vht_cap_info &else if (!(ap_vht_cap->vht_cap_info &/* * If some other vif is using the MU - MIMO capability we cannot associate * using MU - MIMO - this will lead to contradictions in the group - id * mechanism . * Ownership is defined since association request , in order to avoid * simultaneous associations with MU - MIMO . if (cap & IEEE80211_VHT_CAP_MU_BEAMFORMEE_CAPABLE) {bool disable_mu_mimo = false ;struct ieee80211_sub_if_data *other;if (other->vif.bss_conf.mu_mimo_owner) {true ;break ;if (disable_mu_mimo)else true ;if (ap_bf_sts < our_bf_sts) {/* reserve and fill IE */ sizeof (struct ieee80211_vht_cap) + 2 );return mu_mimo_owner;static void ieee80211_assoc_add_rates(struct ieee80211_local *local,struct sk_buff *skb,enum nl80211_chan_width width,struct ieee80211_supported_band *sband,struct ieee80211_mgd_assoc_data *assoc_data)if (assoc_data->supp_rates_len &&/* * Get all rates supported by the device and the AP as * some APs don ' t like getting a superset of their rates * in the association request ( e . g . D - Link DAP 1353 in * b - only mode ) . . . else {/* * In case AP not provide any supported rates information * before association , we send information element ( s ) with * all rates that we support . 0 ;0 , ~rates,0 , ~rates,static size_t ieee80211_add_before_ht_elems(struct sk_buff *skb,const u8 *elems,static const u8 before_ht[] = {/* reassoc only */ /* reassoc only */ static const u8 after_ric[] = {/* luckily this is almost always there */ /* 60 GHz (Multi-band, DMG, MMS) can't happen */ if (!elems_len)return offset;return noffset;static size_t ieee80211_add_before_vht_elems(struct sk_buff *skb,const u8 *elems,static const u8 before_vht[] = {/* * no need to list the ones split off before HT * or generated here /* 60 GHz (Multi-band, DMG, MMS) can't happen */ if (!elems_len)return offset;/* RIC already taken care of in ieee80211_add_before_ht_elems() */ return noffset;static size_t ieee80211_add_before_he_elems(struct sk_buff *skb,const u8 *elems,static const u8 before_he[] = {/* * no need to list the ones split off before VHT * or generated here /* 11ai elements */ /* TODO: add 11ah/11aj/11ak elements */ if (!elems_len)return offset;/* RIC already taken care of in ieee80211_add_before_ht_elems() */ return noffset;static size_t ieee80211_add_before_reg_conn(struct sk_buff *skb,const u8 *elems, size_t elems_len,static const u8 before_reg_conn[] = {/* * no need to list the ones split off before HE * or generated here if (!elems_len)return offset;return noffset;#define PRESENT_ELEMS_MAX 8 #define PRESENT_ELEM_EXT_OFFS 0 x100static void struct ieee80211_sub_if_data *sdata,struct sk_buff *skb, u16 capab,const struct element *ext_capa,const u16 *present_elems,struct ieee80211_mgd_assoc_data *assoc_data);static size_tstruct ieee80211_sub_if_data *sdata,struct sk_buff *skb, u16 *capab,const struct element *ext_capa,const u8 *extra_elems,unsigned int link_id,struct ieee80211_link_data *link,struct ieee80211_mgd_assoc_data *assoc_data)enum nl80211_iftype iftype = ieee80211_vif_type_p2p(&sdata->vif);struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;struct ieee80211_channel *chan = cbss->channel;const struct ieee80211_sband_iftype_data *iftd;struct ieee80211_local *local = sdata->local;struct ieee80211_supported_band *sband;enum nl80211_chan_width width = NL80211_CHAN_WIDTH_20;struct ieee80211_chanctx_conf *chanctx_conf;enum ieee80211_smps_mode smps_mode;0 ;int present_elems_len = 0 ;int i;#define ADD_PRESENT_ELEM(id) do { \/* need a last for termination - we use 0 == SSID */ \ if (!WARN_ON(present_elems_len >= PRESENT_ELEMS_MAX - 1 )) \while (0 )#define ADD_PRESENT_EXT_ELEM(id) ADD_PRESENT_ELEM(PRESENT_ELEM_EXT_OFFS | (id))if (link)else if (sdata->u.mgd.powersave)else if (link) {/* * 5 / 10 MHz scenarios are only viable without MLO , in which * case this pointer should be used . . . All of this is a bit * unclear though , not sure this even works at all . if (chanctx_conf)if (sband->band == NL80211_BAND_2GHZ) {if ((cbss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&if (sband->band != NL80211_BAND_S1GHZ)if (*capab & WLAN_CAPABILITY_SPECTRUM_MGMT ||struct cfg80211_chan_def chandef = {4 );2 ;0 ; /* min tx power */ /* max tx power */ /* * Per spec , we shouldn ' t include the list of channels if we advertise * support for extended channel switching , but we ' ve always done that ; * ( for now ? ) apply this restriction only on the ( new ) 6 GHz band . if (*capab & WLAN_CAPABILITY_SPECTRUM_MGMT &&1 ||0 ] & WLAN_EXT_CAPA1_EXT_CHANNEL_SWITCHING))) {/* TODO: get this in reg domain format */ 2 * sband->n_channels + 2 );2 * sband->n_channels;for (i = 0 ; i < sband->n_channels; i++) {int cf = sband->channels[i].center_freq;1 ; /* one channel in the subband*/ /* if present, add any custom IEs that go before HT */ if (sband->band != NL80211_BAND_6GHZ &&/* if present, add any custom IEs that go before VHT */ if (sband->band != NL80211_BAND_6GHZ &&bool mu_mimo_owner =if (link)/* if present, add any custom IEs that go before HE */ if (assoc_data->link[link_id].conn.mode >= IEEE80211_CONN_MODE_HE) {if (sband->band == NL80211_BAND_6GHZ)/* * if present , add any custom IEs that go before regulatory * connectivity element if (sband->band == NL80211_BAND_6GHZ) {/* * as per Section E . 2 . 7 of IEEE 802 . 11 REVme D7 . 0 , non - AP STA * capable of operating on the 6 GHz band shall transmit * regulatory connectivity element . /* * careful - need to know about all the present elems before * calling ieee80211_assoc_add_ml_elem ( ) , so add this one if * we ' re going to put it after the ML element if (assoc_data->link[link_id].conn.mode >= IEEE80211_CONN_MODE_EHT)if (link_id == assoc_data->assoc_link_id)/* crash if somebody gets it wrong */ if (assoc_data->link[link_id].conn.mode >= IEEE80211_CONN_MODE_EHT)if (sband->band == NL80211_BAND_S1GHZ) {if (iftd && iftd->vendor_elems.data && iftd->vendor_elems.len)return offset;static void ieee80211_add_non_inheritance_elem(struct sk_buff *skb,const u16 *outer,const u16 *inner)unsigned int skb_len = skb->len;bool at_extension = false ;bool added = false ;int i, j;1 );for (i = 0 ; i < PRESENT_ELEMS_MAX && outer[i]; i++) {bool have_inner = false ;/* should at least be sorted in the sense of normal -> ext */ /* switch to extension list */ if (!at_extension && elem >= PRESENT_ELEM_EXT_OFFS) {true ;if (!list_len)0 );for (j = 0 ; j < PRESENT_ELEMS_MAX && inner[j]; j++) {if (elem == inner[j]) {true ;break ;if (have_inner)continue ;if (!list_len) {1 );0 ;1 ;true ;/* if we added a list but no extension list, make a zero-len one */ if (added && (!at_extension || !list_len))0 );/* if nothing added remove extension element completely */ if (!added)else 2 ;static void struct ieee80211_sub_if_data *sdata,struct sk_buff *skb, u16 capab,const struct element *ext_capa,const u16 *outer_present_elems,struct ieee80211_mgd_assoc_data *assoc_data)struct ieee80211_local *local = sdata->local;struct ieee80211_multi_link_elem *ml_elem;struct ieee80211_mle_basic_common_info *common;const struct wiphy_iftype_ext_capab *ift_ext_capa;0 , mld_capa_ops = 0 ;unsigned int link_id;void *capab_pos;if (!ieee80211_vif_is_mld(&sdata->vif))return ;if (ift_ext_capa) {1 );sizeof (*ml_elem));sizeof (*common));sizeof (*common) +2 ; /* MLD capa/ops */ /* add EML_CAPA only if needed, see Draft P802.11be_D2.1, 35.3.17 */ if (eml_capa &2 ; /* EML capabilities */ sizeof (eml_capa));sizeof (mld_capa_ops));if (assoc_data->ext_mld_capa_ops) {2 ;sizeof (assoc_data->ext_mld_capa_ops));for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {const u8 *extra_elems;if (!assoc_data->link[link_id].bss ||continue ;1 );sizeof (ctrl));1 + ETH_ALEN); /* STA Info Length */ /* * Now add the contents of the ( re ) association request , * but the " listen interval " and " current AP address " * ( if applicable ) are skipped . So we only have * the capability field ( remember the position and fill * later ) , followed by the elements added below by * calling ieee80211_add_link_elems ( ) . 2 );if (extra_elems)static int struct ieee80211_sub_if_data *sdata,enum nl80211_iftype iftype,struct cfg80211_bss *cbss,struct ieee80211_local *local = sdata->local;const struct ieee80211_sband_iftype_data *iftd;struct ieee80211_supported_band *sband;0 ;if (!cbss)return size;/* add STA profile elements length */ /* and supported rates length */ 4 + sband->n_bitrates;/* supported channels */ 2 + 2 * sband->n_channels;if (iftd)/* power capability */ 4 ;/* HT, VHT, HE, EHT */ 2 + sizeof (struct ieee80211_ht_cap);2 + sizeof (struct ieee80211_vht_cap);2 + 1 + sizeof (struct ieee80211_he_cap_elem) +sizeof (struct ieee80211_he_mcs_nss_supp) +if (sband->band == NL80211_BAND_6GHZ) {2 + 1 + sizeof (struct ieee80211_he_6ghz_capa);/* reg connection */ 4 ;2 + 1 + sizeof (struct ieee80211_eht_cap_elem) +sizeof (struct ieee80211_eht_mcs_nss_supp) +return size;static int ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_assoc_data *assoc_data = ifmgd->assoc_data;struct ieee80211_link_data *link;struct sk_buff *skb;struct ieee80211_mgmt *mgmt;0 , link_capab;struct element *ext_capa = NULL;enum nl80211_iftype iftype = ieee80211_vif_type_p2p(&sdata->vif);struct ieee80211_prep_tx_info info = {};unsigned int link_id, n_links = 0 ;void *capab_pos;int ret;/* we know it's writable, cast away the const */ if (assoc_data->ie_len)void *)cfg80211_find_elem(WLAN_EID_EXT_CAPABILITY,sizeof (*mgmt) + /* bit too much but doesn't matter */ 2 + assoc_data->ssid_len + /* SSID */ /* extra IEs */ 16 /* AES-SIV */ : 0) + 9 ; /* WMM */ for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;if (!cbss)continue ;/* non-inheritance element */ 2 + 2 + PRESENT_ELEMS_MAX;/* should be the same across all BSSes */ if (cbss->capability & WLAN_CAPABILITY_PRIVACY)if (ieee80211_vif_is_mld(&sdata->vif)) {/* consider the multi-link element with STA profile */ sizeof (struct ieee80211_multi_link_elem);/* max common info field in basic multi-link element */ sizeof (struct ieee80211_mle_basic_common_info) +2 + /* capa & op */ 2 + /* ext capa & op */ 2 ; /* EML capa */ /* * The capability elements were already considered above ; * note this over - estimates a bit because there ' s no * STA profile for the assoc link . 1 ) *1 + 1 + /* subelement ID/length */ 2 + /* STA control */ 1 + ETH_ALEN + 2 /* STA Info field */); if (WARN_ON(!link))return -EINVAL;if (WARN_ON(!assoc_data->link[assoc_data->assoc_link_id].bss))return -EINVAL;if (!skb)return -ENOMEM;if (ifmgd->flags & IEEE80211_STA_ENABLE_RRM)/* Set MBSSID support for HE AP if needed */ if (ieee80211_hw_check(&local->hw, SUPPORTS_ONLY_HE_MULTI_BSSID) &&3 )2 ] |= WLAN_EXT_CAPA3_MULTI_BSSID_SUPPORT;24 );if (!is_zero_ether_addr(assoc_data->prev_ap_addr)) {10 );else {4 );/* SSID */ 2 + assoc_data->ssid_len);/* * This bit is technically reserved , so it shouldn ' t matter for either * the AP or us , but it also means we shouldn ' t set it . However , we ' ve * always set it in the past , and apparently some EHT APs check that * we don ' t set it . To avoid interoperability issues with old APs that * for some reason check it and want it to be set , set the bit for all * pre - EHT connections as we used to do . if (link->u.mgd.conn.mode < IEEE80211_CONN_MODE_EHT &&/* add the elements for the assoc (main) link */ /* if present, add any custom non-vendor IEs */ if (assoc_data->ie_len) {if (assoc_data->wmm) {if (assoc_data->uapsd) {else {0 ;9 ), qos_info);/* add any remaining custom (i.e. vendor specific here) IEs */ if (assoc_data->ie_len) {if (assoc_data->fils_kek_len) {if (ret < 0 ) {return ret;if (!ifmgd->assoc_req_ies) {return -ENOMEM;if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS))return 0 ;void ieee80211_send_pspoll(struct ieee80211_local *local,struct ieee80211_sub_if_data *sdata)struct ieee80211_pspoll *pspoll;struct sk_buff *skb;if (!skb)return ;struct ieee80211_pspoll *) skb->data;void ieee80211_send_nullfunc(struct ieee80211_local *local,struct ieee80211_sub_if_data *sdata,bool powersave)struct sk_buff *skb;struct ieee80211_hdr_3addr *nullfunc;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;1 ,if (!skb)return ;struct ieee80211_hdr_3addr *) skb->data;if (powersave)if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS))if (ifmgd->flags & IEEE80211_STA_CONNECTION_POLL)void ieee80211_send_4addr_nullfunc(struct ieee80211_local *local,struct ieee80211_sub_if_data *sdata)struct sk_buff *skb;struct ieee80211_hdr *nullfunc;if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))return ;30 );if (!skb)return ;30 );/* spectrum management related things */ static void ieee80211_csa_switch_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_link_data *link =struct ieee80211_link_data,struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;int ret;if (!ieee80211_sdata_running(sdata))return ;if (!ifmgd->associated)return ;if (!link->conf->csa_active)return ;/* * If the link isn ' t active ( now ) , we cannot wait for beacons , won ' t * have a reserved chanctx , etc . Just switch over the chandef and * update cfg80211 directly . if (!ieee80211_vif_link_active(&sdata->vif, link->link_id)) {struct link_sta_info *link_sta;struct sta_info *ap_sta;false ;if (WARN_ON(!ap_sta))return ;if (WARN_ON(!link_sta))return ;return ;/* * using reservation isn ' t immediate as it may be deferred until later * with multi - vif . once reservation is complete it will re - schedule the * work with no reserved_chanctx so verify chandef to check if it * completed successfully if (link->reserved_chanctx) {/* * with multi - vif csa driver may call ieee80211_csa_finish ( ) * many times while waiting for other interfaces to use their * reservations if (link->reserved_ready)return ;if (ret) {"failed to use reserved channel context, disconnecting (err=%d)\n" ,return ;if (!ieee80211_chanreq_identical(&link->conf->chanreq,"failed to finalize channel switch, disconnecting\n" );return ;true ;/* apply new TPE restrictions immediately on the new channel */ if (link->u.mgd.csa.ap_chandef.chan->band == NL80211_BAND_6GHZ &&if (memcmp(&link->conf->tpe, &link->u.mgd.csa.tpe,sizeof (link->u.mgd.csa.tpe))) {/* * It is not necessary to reset these timers if any link does not * have an active CSA and that link still receives the beacons * when other links have active CSA . if (!link->conf->csa_active)return ;/* * Reset the beacon monitor and connection monitor timers when CSA * is active for all links in MLO when channel switch occurs in all * the links . static void ieee80211_chswitch_post_beacon(struct ieee80211_link_data *link)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;int ret;false ;false ;false ;if (ret) {"driver post channel switch failed, disconnecting\n" );return ;void ieee80211_chswitch_done(struct ieee80211_vif *vif, bool success,unsigned int link_id)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);if (!success) {"driver channel switch failed (link %d), disconnecting\n" ,else {struct ieee80211_link_data *link =if (WARN_ON(!link)) {return ;0 );static void struct ieee80211_link_data *link)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;if (!local->ops->abort_channel_switch)return ;if (rcu_access_pointer(link->conf->chanctx_conf))false ;false ;struct sta_csa_rnr_iter_data {struct ieee80211_link_data *link;struct ieee80211_channel *chan;static enum cfg80211_rnr_iter_retvoid *_data, u8 type,const struct ieee80211_neighbor_ap_info *info,const u8 *tbtt_info, u8 tbtt_info_len)struct sta_csa_rnr_iter_data *data = _data;struct ieee80211_link_data *link = data->link;struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;const struct ieee80211_tbtt_info_ge_11 *ti;enum nl80211_band band;unsigned int center_freq;int link_id;if (type != IEEE80211_TBTT_INFO_TYPE_TBTT)return RNR_ITER_CONTINUE;if (tbtt_info_len < sizeof (*ti))return RNR_ITER_CONTINUE;const void *)tbtt_info;if (ti->mld_params.mld_id != data->mld_id)return RNR_ITER_CONTINUE;if (link_id != data->link->link_id)return RNR_ITER_CONTINUE;/* we found the entry for our link! */ /* this AP is confused, it had this right before ... just disconnect */ if (!ieee80211_operating_class_to_band(info->op_class, &band)) {"AP now has invalid operating class in RNR, disconnect\n" );return RNR_ITER_BREAK;return RNR_ITER_BREAK;static void struct ieee80211_link_data *link,struct ieee802_11_elems *elems)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct sta_csa_rnr_iter_data data = {/* * If we get here , we see a beacon from another link without * CSA still being reported for it , so now we have to check * if the CSA was aborted or completed . This may not even be * perfectly possible if the CSA was only done for changing * the puncturing , but in that case if the link in inactive * we don ' t really care , and if it ' s an active link ( or when * it ' s activated later ) we ' ll get a beacon and adjust . if (WARN_ON(!elems->ml_basic))return ;const void *)elems->ml_basic);/* * So in order to do this , iterate the RNR element ( s ) and see * what channel is reported now . if (!data.chan) {"couldn't find (valid) channel in RNR for CSA, disconnect\n" );return ;/* * If it doesn ' t match the CSA , then assume it aborted . This * may erroneously detect that it was _ not_ aborted when it * was in fact aborted , but only changed the bandwidth or the * puncturing configuration , but we don ' t have enough data to * detect that . if (data.chan != link->csa.chanreq.oper.chan)enum ieee80211_csa_source {static void struct ieee80211_link_data *link,struct ieee802_11_elems *full_elems,struct ieee802_11_elems *csa_elems,enum ieee80211_csa_source source)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_chanctx *chanctx = NULL;struct ieee80211_chanctx_conf *conf;struct ieee80211_csa_ie csa_ie = {};struct ieee80211_channel_switch ch_switch = {int res;if (csa_elems) {struct cfg80211_bss *cbss = link->conf->bss;enum nl80211_band current_band;struct ieee80211_bss *bss;if (WARN_ON(!cbss))return ;void *)cbss->priv;if (res == 0 ) {else {/* * If there was no per - STA profile for this link , we * get called with csa_elems = = NULL . This of course means * there are no CSA elements , so set res = 1 indicating * no more CSA . 1 ;if (res < 0 ) {/* ignore this case, not a protected frame */ if (source == IEEE80211_CSA_SOURCE_UNPROT_ACTION)return ;goto drop_connection;if (link->conf->csa_active) {switch (source) {case IEEE80211_CSA_SOURCE_PROT_ACTION:case IEEE80211_CSA_SOURCE_UNPROT_ACTION:/* already processing - disregard action frames */ return ;case IEEE80211_CSA_SOURCE_BEACON:if (link->u.mgd.csa.waiting_bcn) {/* * If the CSA is still present after the switch * we need to consider it as a new CSA ( possibly * to self ) . This happens by not returning here * so we ' ll get to the check below . else if (res) {return ;else {return ;break ;case IEEE80211_CSA_SOURCE_OTHER_LINK:/* active link: we want to see the beacon to continue */ if (ieee80211_vif_link_active(&sdata->vif,return ;/* switch work ran, so just complete the process */ if (link->u.mgd.csa.waiting_bcn) {/* * If the CSA is still present after the switch * we need to consider it as a new CSA ( possibly * to self ) . This happens by not returning here * so we ' ll get to the check below . break ;/* link still has CSA but we already know, do nothing */ if (!res)return ;/* check in the RNR if the CSA aborted */ return ;/* no active CSA nor a new one */ if (res) {/* * However , we may have stopped queues when receiving a public * action frame that couldn ' t be protected , if it had the quiet * bit set . This is a trade - off , we want to be quiet as soon as * possible , but also don ' t trust the public action frame much , * as it can ' t be protected . if (unlikely(link->u.mgd.csa.blocked_tx)) {false ;return ;/* * We don ' t really trust public action frames , but block queues ( go to * quiet mode ) for them anyway , we should get a beacon soon to either * know what the CSA really is , or figure out the public action frame * was actually an attack . if (source == IEEE80211_CSA_SOURCE_UNPROT_ACTION) {if (csa_ie.mode) {true ;return ;if (link->conf->chanreq.oper.chan->band !="AP %pM switches to different band (%d MHz, width:%d, CF1/2: %d/%d MHz), disconnecting\n" ,goto drop_connection;if (!cfg80211_chandef_usable(local->hw.wiphy, &csa_ie.chanreq.oper,"AP %pM switches to unsupported channel (%d.%03d MHz, width:%d, CF1/2: %d.%03d/%d MHz), disconnecting\n" ,goto drop_connection;if (cfg80211_chandef_identical(&csa_ie.chanreq.oper,if (link->u.mgd.csa.ignored_same_chan)return ;"AP %pM tries to chanswitch to same channel, ignore\n" ,true ;return ;/* * Drop all TDLS peers on the affected link - either we disconnect or * move to a different channel from this point on . There ' s no telling * what our peer will do . * The TDLS WIDER_BW scenario is also problematic , as peers might now * have an incompatible wider chandef . if (ieee80211_vif_link_active(&sdata->vif, link->link_id) && !conf) {"no channel context assigned to vif?, disconnecting\n" );goto drop_connection;if (conf)struct ieee80211_chanctx, conf);if (!ieee80211_hw_check(&local->hw, CHANCTX_STA_CSA)) {"driver doesn't support chan-switch with channel contexts\n" );goto drop_connection;if (drv_pre_channel_switch(sdata, &ch_switch)) {"preparing for channel switch failed, disconnecting\n" );goto drop_connection;if (chanctx) {false );if (res) {"failed to reserve channel context for channel switch, disconnecting (err=%d)\n" ,goto drop_connection;true ;false ;false ;if (csa_ie.mode)/* we may have to handle timeout for deactivated link in software */ int , csa_ie.count, 1 ) - 1 ) * link->conf->beacon_int;if (ieee80211_vif_link_active(&sdata->vif, link->link_id) &&/* * Use driver ' s channel switch callback , the driver will * later call ieee80211_chswitch_done ( ) . It may deactivate * the link as well , we handle that elsewhere and queue * the csa . switch_work for the calculated time then . return ;/* channel switch handled in software */ return ;/* * This is just so that the disconnect flow will know that * we were trying to switch channel and failed . In case the * mode is 1 ( we are not allowed to Tx ) , we will know not to * send a deauthentication frame . Those two fields will be * reset when the disconnection worker runs . true ;struct sta_bss_param_ch_cnt_data {struct ieee80211_sub_if_data *sdata;static enum cfg80211_rnr_iter_retvoid *_data, u8 type,const struct ieee80211_neighbor_ap_info *info,const u8 *tbtt_info, u8 tbtt_info_len)struct sta_bss_param_ch_cnt_data *data = _data;struct ieee80211_sub_if_data *sdata = data->sdata;const struct ieee80211_tbtt_info_ge_11 *ti;int link_id;if (type != IEEE80211_TBTT_INFO_TYPE_TBTT)return RNR_ITER_CONTINUE;if (tbtt_info_len < sizeof (*ti))return RNR_ITER_CONTINUE;const void *)tbtt_info;if (ti->mld_params.mld_id != data->mld_id)return RNR_ITER_CONTINUE;if (bss_param_ch_cnt != 255 &&struct ieee80211_link_data *link =if (link && link->conf->bss_param_ch_cnt != bss_param_ch_cnt) {return RNR_ITER_CONTINUE;static void struct ieee80211_sub_if_data *sdata,struct ieee80211_bss_conf *bss_conf,struct ieee802_11_elems *elems)struct sta_bss_param_ch_cnt_data data = {int bss_param_ch_cnt;if (!elems->ml_basic)return ;const void *)elems->ml_basic);const void *)elems->ml_basic);/* * Update bss_param_ch_cnt_link_id even if bss_param_ch_cnt * didn ' t change to indicate that we got a beacon on our own * link . if (bss_param_ch_cnt >= 0 && bss_param_ch_cnt != 255 ) {static bool struct ieee80211_channel *channel,const u8 *country_ie, u8 country_ie_len,const u8 *pwr_constr_elem,int *chan_pwr, int *pwr_reduction)struct ieee80211_country_ie_triplet *triplet;int chan = ieee80211_frequency_to_channel(channel->center_freq);int i, chan_increment;bool have_chan_pwr = false ;/* Invalid IE */ if (country_ie_len % 2 || country_ie_len < IEEE80211_COUNTRY_IE_MIN_LEN)return false ;void *)(country_ie + 3 );3 ;switch (channel->band) {default :1 );case NL80211_BAND_2GHZ:case NL80211_BAND_60GHZ:case NL80211_BAND_LC:1 ;break ;case NL80211_BAND_5GHZ:4 ;break ;case NL80211_BAND_6GHZ:/* * In the 6 GHz band , the " maximum transmit power level " * field in the triplets is reserved , and thus will be * zero and we shouldn ' t use it to control TX power . * The actual TX power will be given in the transmit * power envelope element instead . return false ;/* find channel */ while (country_ie_len >= 3 ) {if (first_channel >= IEEE80211_COUNTRY_EXTENSION_ID)goto next;for (i = 0 ; i < triplet->chans.num_channels; i++) {if (first_channel + i * chan_increment == chan) {true ;break ;if (have_chan_pwr)break ;3 ;if (have_chan_pwr && pwr_constr_elem)else 0 ;return have_chan_pwr;static void ieee80211_find_cisco_dtpc(struct ieee80211_channel *channel,const u8 *cisco_dtpc_ie,int *pwr_level)/* From practical testing, the first data byte of the DTPC element * seems to contain the requested dBm level , and the CLI on Cisco * APs clearly state the range is - 127 to 127 dBm , which indicates * a signed byte , although it seemingly never actually goes negative . * The other byte seems to always be zero . 4 ];static u64 ieee80211_handle_pwr_constr(struct ieee80211_link_data *link,struct ieee80211_channel *channel,struct ieee80211_mgmt *mgmt,const u8 *country_ie, u8 country_ie_len,const u8 *pwr_constr_ie,const u8 *cisco_dtpc_ie)struct ieee80211_sub_if_data *sdata = link->sdata;bool has_80211h_pwr = false , has_cisco_pwr = false ;int chan_pwr = 0 , pwr_reduction_80211h = 0 ;int pwr_level_cisco, pwr_level_80211h;int new_ap_level;if (ieee80211_is_s1g_beacon(mgmt->frame_control))return 0 ; /* TODO */ if (country_ie &&int , 0 , chan_pwr - pwr_reduction_80211h);if (cisco_dtpc_ie) {true ;if (!has_80211h_pwr && !has_cisco_pwr)return 0 ;/* If we have both 802.11h and Cisco DTPC, apply both limits * by picking the smallest of the two power levels advertised . if (has_80211h_pwr &&if (link->ap_power_level == new_ap_level)return 0 ;"Limiting TX power to %d (%d - %d) dBm as advertised by %pM\n" ,else { /* has_cisco_pwr is always true here. */ if (link->ap_power_level == new_ap_level)return 0 ;"Limiting TX power to %d dBm as advertised by %pM\n" ,if (__ieee80211_recalc_txpower(link))return BSS_CHANGED_TXPOWER;return 0 ;/* powersave */ static void ieee80211_enable_ps(struct ieee80211_local *local,struct ieee80211_sub_if_data *sdata)struct ieee80211_conf *conf = &local->hw.conf;/* * If we are scanning right now then the parameters will * take effect when scan finishes . if (local->scanning)return ;if (conf->dynamic_ps_timeout > 0 &&else {if (ieee80211_hw_check(&local->hw, PS_NULLFUNC_STACK))true );if (ieee80211_hw_check(&local->hw, PS_NULLFUNC_STACK) &&return ;1 , IEEE80211_CONF_CHANGE_PS);static void ieee80211_change_ps(struct ieee80211_local *local)struct ieee80211_conf *conf = &local->hw.conf;if (local->ps_sdata) {else if (conf->flags & IEEE80211_CONF_PS) {1 , IEEE80211_CONF_CHANGE_PS);static bool ieee80211_powersave_allowed(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *mgd = &sdata->u.mgd;struct sta_info *sta = NULL;bool authorized = false ;if (!mgd->powersave)return false ;if (mgd->broken_ap)return false ;if (!mgd->associated)return false ;if (mgd->flags & IEEE80211_STA_CONNECTION_POLL)return false ;if (!(local->hw.wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO) &&return false ;if (sta)return authorized;/* need to hold RTNL or interface lock */ void ieee80211_recalc_ps(struct ieee80211_local *local)struct ieee80211_sub_if_data *sdata, *found = NULL;int count = 0 ;int timeout;if (!ieee80211_hw_check(&local->hw, SUPPORTS_PS) ||return ;if (!ieee80211_sdata_running(sdata))continue ;if (sdata->vif.type == NL80211_IFTYPE_AP) {/* If an AP vif is found, then disable PS * by setting the count to zero thereby setting * ps_sdata to NULL . 0 ;break ;if (sdata->vif.type != NL80211_IFTYPE_STATION)continue ;if (count == 1 && ieee80211_powersave_allowed(found)) {if (timeout < 0 )100 ;/* If the TIM IE is invalid, pretend the value is 1 */ if (!dtimper)1 ;else {void ieee80211_recalc_ps_vif(struct ieee80211_sub_if_data *sdata)bool ps_allowed = ieee80211_powersave_allowed(sdata);if (sdata->vif.cfg.ps != ps_allowed) {void ieee80211_dynamic_ps_disable_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_local *local =struct ieee80211_local,if (local->hw.conf.flags & IEEE80211_CONF_PS) {1 , IEEE80211_CONF_CHANGE_PS);false );void ieee80211_dynamic_ps_enable_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_local *local =struct ieee80211_local,struct ieee80211_sub_if_data *sdata = local->ps_sdata;struct ieee80211_if_managed *ifmgd;unsigned long flags;int q;/* can only happen when PS was just disabled anyway */ if (!sdata)return ;if (local->hw.conf.flags & IEEE80211_CONF_PS)return ;if (local->hw.conf.dynamic_ps_timeout > 0 ) {/* don't enter PS if TX frames are pending */ if (drv_tx_frames_pending(local)) {return ;/* * transmission can be stopped by others which leads to * dynamic_ps_timer expiry . Postpone the ps timer if it * is not the actual idle state . for (q = 0 ; q < local->hw.queues; q++) {if (local->queue_stop_reasons[q]) {return ;if (ieee80211_hw_check(&local->hw, PS_NULLFUNC_STACK) &&if (drv_tx_frames_pending(local)) {else {true );/* Flush to get the tx status of nullfunc frame */ false );if (!(ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS) &&1 , IEEE80211_CONF_CHANGE_PS);void ieee80211_dynamic_ps_timer(struct timer_list *t)struct ieee80211_local *local = timer_container_of(local, t,void ieee80211_dfs_cac_timer_work(struct wiphy *wiphy, struct wiphy_work *work)struct ieee80211_link_data *link =struct ieee80211_link_data,struct cfg80211_chan_def chandef = link->conf->chanreq.oper;struct ieee80211_sub_if_data *sdata = link->sdata;if (sdata->wdev.links[link->link_id].cac_started) {static bool struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;bool ret = false ;int ac;if (local->hw.queues < IEEE80211_NUM_ACS)return false ;for (ac = 0 ; ac < IEEE80211_NUM_ACS; ac++) {struct ieee80211_sta_tx_tspec *tx_tspec = &ifmgd->tx_tspec[ac];int non_acm_ac;unsigned long now = jiffies;if (tx_tspec->action == TX_TSPEC_ACTION_NONE &&0 ;if (tx_tspec->downgraded)switch (tx_tspec->action) {case TX_TSPEC_ACTION_STOP_DOWNGRADE:/* take the original parameters */ if (drv_conf_tx(local, &sdata->deflink, ac,"failed to set TX queue parameters for queue %d\n" ,false ;true ;break ;case TX_TSPEC_ACTION_DOWNGRADE:if (time_after(now, tx_tspec->time_slice_start + HZ)) {true ;break ;/* downgrade next lower non-ACM AC */ for (non_acm_ac = ac + 1 ;if (!(sdata->wmm_acm & BIT(7 - 2 * non_acm_ac)))break ;/* Usually the loop will result in using BK even if it * requires admission control , but such a configuration * makes no sense and we have to transmit somehow - the * AC selection does the same thing . * If we started out trying to downgrade from BK , then * the extra condition here might be needed . if (non_acm_ac >= IEEE80211_NUM_ACS)if (drv_conf_tx(local, &sdata->deflink, ac,"failed to set TX queue parameters for queue %d\n" ,true ;1 );break ;case TX_TSPEC_ACTION_NONE:/* nothing now */ break ;return ret;void ieee80211_sta_handle_tspec_ac_params(struct ieee80211_sub_if_data *sdata)if (__ieee80211_sta_handle_tspec_ac_params(sdata))static void ieee80211_sta_handle_tspec_ac_params_wk(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata;struct ieee80211_sub_if_data,void ieee80211_mgd_set_link_qos_params(struct ieee80211_link_data *link)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_tx_queue_params *params = link->tx_conf;for (ac = 0 ; ac < IEEE80211_NUM_ACS; ac++) {"WMM AC=%d acm=%d aifs=%d cWmin=%d cWmax=%d txop=%d uapsd=%d, downgraded=%d\n" ,if (!ifmgd->tx_tspec[ac].downgraded &&"failed to set TX queue parameters for AC %d\n" ,/* MLME */ static bool struct ieee80211_local *local,struct ieee80211_link_data *link,const u8 *wmm_param, size_t wmm_param_len,const struct ieee80211_mu_edca_param_set *mu_edca)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_tx_queue_params params[IEEE80211_NUM_ACS];struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;int count, mu_edca_count, ac;const u8 *pos;0 ;if (!local->ops->conf_tx)return false ;if (local->hw.queues < IEEE80211_NUM_ACS)return false ;if (!wmm_param)return false ;if (wmm_param_len < 8 || wmm_param[5 ] /* version */ != 1) return false ;if (ifmgd->flags & IEEE80211_STA_UAPSD_ENABLED)6 ] & 0 x0f;/* -1 is the initial value of ifmgd->mu_edca_last_param_set. * if mu_edca was preset before and now it disappeared tell * the driver about it . 0 x0f : -1 ;if (count == link->u.mgd.wmm_last_param_set &&return false ;8 ;8 ;0 , sizeof (params));0 ;for (; left >= 4 ; left -= 4 , pos += 4 ) {int aci = (pos[0 ] >> 5 ) & 0 x03;int acm = (pos[0 ] >> 4 ) & 0 x01;bool uapsd = false ;switch (aci) {case 1 : /* AC_BK */ if (acm)1 ) | BIT(2 ); /* BK/- */ if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BK)true ;if (mu_edca)break ;case 2 : /* AC_VI */ if (acm)4 ) | BIT(5 ); /* CL/VI */ if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VI)true ;if (mu_edca)break ;case 3 : /* AC_VO */ if (acm)6 ) | BIT(7 ); /* VO/NC */ if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VO)true ;if (mu_edca)break ;case 0 : /* AC_BE */ default :if (acm)0 ) | BIT(3 ); /* BE/EE */ if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BE)true ;if (mu_edca)break ;0 ] & 0 x0f;if (params[ac].aifs < 2 ) {"AP has invalid WMM params (AIFSN=%d for ACI %d), will use 2\n" ,2 ;1 ] & 0 xf0) >> 4 );1 ] & 0 x0f);2 );if (params[ac].cw_min == 0 ||"AP has invalid WMM params (CWmin/max=%d/%d for ACI %d), using defaults\n" ,return false ;/* WMM specification requires all 4 ACIs. */ for (ac = 0 ; ac < IEEE80211_NUM_ACS; ac++) {if (params[ac].cw_min == 0 ) {"AP has invalid WMM params (missing AC %d), using defaults\n" ,return false ;for (ac = 0 ; ac < IEEE80211_NUM_ACS; ac++)return true ;static bool struct ieee80211_local *local,struct ieee80211_link_data *link,const u8 *wmm_param, size_t wmm_param_len,const struct ieee80211_mu_edca_param_set *mu_edca)if (!_ieee80211_sta_wmm_params(local, link, wmm_param, wmm_param_len,return false ;/* enable WMM or activate new settings */ true ;return true ;static void __ieee80211_stop_poll(struct ieee80211_sub_if_data *sdata)static void ieee80211_stop_poll(struct ieee80211_sub_if_data *sdata)static u64 ieee80211_handle_bss_capability(struct ieee80211_link_data *link,bool erp_valid, u8 erp)struct ieee80211_bss_conf *bss_conf = link->conf;struct ieee80211_supported_band *sband;0 ;bool use_protection;bool use_short_preamble;bool use_short_slot;if (!sband)return changed;if (erp_valid) {0 ;0 ;else {false ;if (sband->band == NL80211_BAND_5GHZ ||true ;if (use_protection != bss_conf->use_cts_prot) {if (use_short_preamble != bss_conf->use_short_preamble) {if (use_short_slot != bss_conf->use_short_slot) {return changed;static u64 ieee80211_link_set_associated(struct ieee80211_link_data *link,struct cfg80211_bss *cbss)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_bss_conf *bss_conf = link->conf;struct ieee80211_bss *bss = (void *)cbss->priv;/* not really used in MLO */ if (sdata->vif.p2p ||const struct cfg80211_bss_ies *ies;if (ies) {int ret;sizeof (bss_conf->p2p_noa_attr));if (ret >= 2 ) {if (link->u.mgd.have_beacon) {else {/* Tell the driver to monitor connection quality (if supported) */ if (sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI &&return changed;static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgd_assoc_data *assoc_data,struct ieee80211_local *local = sdata->local;struct ieee80211_vif_cfg *vif_cfg = &sdata->vif.cfg;unsigned int link_id;true ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;struct ieee80211_link_data *link;if (!cbss ||continue ;if (ieee80211_vif_is_mld(&sdata->vif) &&continue ;if (WARN_ON(!link))return ;/* just to be sure */ 1 );1 ;/* Enable ARP filtering */ if (vif_cfg->arp_addr_cnt)if (ieee80211_vif_is_mld(&sdata->vif)) {for (link_id = 0 ;struct ieee80211_link_data *link;struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;if (!cbss ||continue ;if (WARN_ON(!link))return ;else {0 ]);/* leave this here to not change ordering in non-MLO cases */ if (!ieee80211_vif_is_mld(&sdata->vif))static void ieee80211_ml_reconf_reset(struct ieee80211_sub_if_data *sdata)struct ieee80211_mgd_assoc_data *add_links_data =if (!ieee80211_vif_is_mld(&sdata->vif) ||return ;0 ;0 ;0 ;if (add_links_data) {struct cfg80211_mlo_reconf_done_data done_data = {};for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS;static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,bool tx,struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_local *local = sdata->local;struct sta_info *ap_sta = sta_info_get(sdata, sdata->vif.cfg.ap_addr);unsigned int link_id;0 ;struct ieee80211_prep_tx_info info = {true ,1 ,if (frame_buf)0 , IEEE80211_DEAUTH_FRAME_LEN);if (WARN_ON(!ap_sta))return ;if (WARN_ON_ONCE(tx && !frame_buf))return ;if (WARN_ON(!ifmgd->associated))return ;false ;if (tx) {bool tx_link_found = false ;for (link_id = 0 ;struct ieee80211_link_data *link;if (!ieee80211_vif_link_active(&sdata->vif, link_id))continue ;if (WARN_ON_ONCE(!link))continue ;if (link->u.mgd.csa.blocked_tx)continue ;true ;break ;/* other links will be destroyed */ false ;/* * if we want to get out of ps before disassoc ( why ? ) we have * to do it before sending disassoc , as otherwise the null - packet * won ' t be valid . if (local->hw.conf.flags & IEEE80211_CONF_PS) {1 , IEEE80211_CONF_CHANGE_PS);/* disable per-vif ps */ /* make sure ongoing transmission finishes */ /* * drop any frame before deauth / disassoc , this can be data or * management frame . Since we are disconnecting , we should not * insist sending these frames which can take time and delay * the disconnection and possible the roaming . true );if (tx) {true , frame_buf);/* flush out frame - make sure the deauth was actually sent */ false );else if (frame_buf) {false , frame_buf);/* clear AP addr only after building the needed mgmt frames */ 0 ;/* Remove TDLS peers */ false , -1 , ap_sta);if (sdata->vif.driver_flags & IEEE80211_VIF_REMOVE_AP_AFTER_DISASSOC) {/* Only move the AP state */ else {/* Remove AP peer */ 1 );/* finally reset all BSS / config parameters */ if (!ieee80211_vif_is_mld(&sdata->vif))0 );false ;1 ;0 ,sizeof (sdata->vif.bss_conf.p2p_noa_attr));/* on the next assoc, re-program HT/VHT parameters */ 0 , sizeof (ifmgd->ht_capa));0 , sizeof (ifmgd->ht_capa_mask));0 , sizeof (ifmgd->vht_capa));0 , sizeof (ifmgd->vht_capa_mask));/* * reset MU - MIMO ownership and group data in default link , * if used , other links are destroyed 0 ,sizeof (sdata->vif.bss_conf.mu_group.membership));0 ,sizeof (sdata->vif.bss_conf.mu_group.position));if (!ieee80211_vif_is_mld(&sdata->vif))false ;/* Disable ARP filtering */ if (sdata->vif.cfg.arp_addr_cnt)false ;if (!ieee80211_vif_is_mld(&sdata->vif)) {/* The BSSID (not really interesting) and HT changed */ else {if (sdata->vif.driver_flags & IEEE80211_VIF_REMOVE_AP_AFTER_DISASSOC) {/* * After notifying the driver about the disassoc , * remove the ap sta . 1 );/* disassociated - set to defaults now */ false , false );0 ;false ;false ;false ;0 ;for (link_id = 0 ; link_id < ARRAY_SIZE(sdata->link); link_id++) {struct ieee80211_link_data *link;if (!link)continue ;false ;false ;false ;false ;/* existing TX TSPEC sessions no longer exist */ 0 , sizeof (ifmgd->tx_tspec));0 ;0 ;0 ;0 ;0 ,sizeof (sdata->u.mgd.ttlm_info));0 , sizeof (sdata->vif.neg_ttlm));0 ;/* if disconnection happens in the middle of the ML reconfiguration * flow , cfg80211 must called to release the BSS references obtained * when the flow started . 0 , 0 );false ;0 ;0 ,sizeof (ifmgd->userspace_selectors));static void ieee80211_reset_ap_probe(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_local *local = sdata->local;if (!(ifmgd->flags & IEEE80211_STA_CONNECTION_POLL))return ;if (ieee80211_hw_check(&sdata->local->hw, CONNECTION_MONITOR))return ;/* * We ' ve received a probe response , but are not sure whether * we have or will be receiving any beacons or data , so let ' s * schedule the timers again , just in case . static void ieee80211_sta_tx_wmm_ac_notify(struct ieee80211_sub_if_data *sdata,struct ieee80211_hdr *hdr,struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;int ac;struct ieee80211_sta_tx_tspec *tx_tspec;unsigned long now = jiffies;if (!ieee80211_is_data_qos(hdr->frame_control))return ;if (likely(!tx_tspec->admitted_time))return ;if (time_after(now, tx_tspec->time_slice_start + HZ)) {0 ;if (tx_tspec->downgraded) {0 );if (tx_tspec->downgraded)return ;if (tx_tspec->consumed_tx_time >= tx_tspec->admitted_time) {true ;0 );void ieee80211_sta_tx_notify(struct ieee80211_sub_if_data *sdata,struct ieee80211_hdr *hdr, bool ack, u16 tx_time)if (!ieee80211_is_any_nullfunc(hdr->frame_control) ||return ;if (ack)0 ;else true ;static void ieee80211_mlme_send_probe_req(struct ieee80211_sub_if_data *sdata,const u8 *src, const u8 *dst,const u8 *ssid, size_t ssid_len,struct ieee80211_channel *channel)struct sk_buff *skb;1 , channel,0 ,if (skb)static void ieee80211_mgd_probe_ap_send(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;1 , max_probe_tries - 3 );struct sta_info *sta;/* * Try sending broadcast probe requests for the last three * probe requests after the first ones failed since some * buggy APs only support broadcast probe requests . if (ifmgd->probe_send_count >= unicast_limit)/* * When the hardware reports an accurate Tx ACK status , it ' s * better to send a nullfunc frame instead of a probe request , * as it will kick us off the AP quickly if we aren ' t associated * anymore . The timeout will be reset if the frame is ACKed by * the AP . if (dst) {if (!WARN_ON(!sta))if (ieee80211_hw_check(&sdata->local->hw, REPORTS_TX_ACK_STATUS)) {false ;false );else {static void ieee80211_mgd_probe_ap(struct ieee80211_sub_if_data *sdata,bool beacon)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;bool already = false ;if (!ieee80211_sdata_running(sdata))return ;if (!ifmgd->associated)return ;if (sdata->local->tmp_channel || sdata->local->scanning)return ;if (sdata->local->suspending) {/* reschedule after resume */ return ;if (beacon) {"detected beacon loss from AP (missed %d beacons) - probing\n" ,/* * The driver / our work has already reported this event or the * connection monitoring has kicked in and we have already sent * a probe request . Or maybe the AP died and the driver keeps * reporting until we disassociate . . . * * In either case we have to ignore the current call to this * function ( except for setting the correct probe reason bit ) * because otherwise we would reset the timer every time and * never check whether we received a probe response ! if (ifmgd->flags & IEEE80211_STA_CONNECTION_POLL)true ;if (already)return ;0 ;struct sk_buff *ieee80211_ap_probereq_get(struct ieee80211_hw *hw,struct ieee80211_vif *vif)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct cfg80211_bss *cbss;struct sk_buff *skb;const struct element *ssid;int ssid_len;if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION ||return NULL;if (ifmgd->associated)else if (ifmgd->auth_data)else if (ifmgd->assoc_data && ifmgd->assoc_data->link[0 ].bss)0 ].bss;else return NULL;if (WARN_ONCE(!ssid || ssid->datalen > IEEE80211_MAX_SSID_LEN,"invalid SSID element (len=%d)" ,1 ))0 ;else 1 , cbss->channel,0 , IEEE80211_PROBE_FLAG_DIRECTED);return skb;static void ieee80211_report_disconnect(struct ieee80211_sub_if_data *sdata,const u8 *buf, size_t len, bool tx,bool reconnect)struct ieee80211_event event = {if (tx)else static void __ieee80211_disconnect(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (!ifmgd->associated)return ;if (!ifmgd->driver_disconnect) {unsigned int link_id;/* * AP is probably out of range ( or not reachable for another * reason ) so remove the bss structs for that AP . In the case * of multi - link , it ' s not clear that all of them really are * out of range , but if they weren ' t the driver likely would * have switched to just have a single link active ? for (link_id = 0 ;struct ieee80211_link_data *link;if (!link || !link->conf->bss)continue ;true , frame_buf);/* the other links will be destroyed */ false ;false ;false ;sizeof (frame_buf), true ,false ;static void ieee80211_beacon_connection_loss_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (ifmgd->connection_loss) {"Connection to AP %pM lost\n" ,false ;else if (ifmgd->driver_disconnect) {"Driver requested disconnection from AP %pM\n" ,false ;else {if (ifmgd->associated)true );static void ieee80211_csa_connection_drop_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,void ieee80211_beacon_loss(struct ieee80211_vif *vif)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);struct ieee80211_hw *hw = &sdata->local->hw;false ;void ieee80211_connection_loss(struct ieee80211_vif *vif)struct ieee80211_sub_if_data *sdata;struct ieee80211_hw *hw;true ;void ieee80211_disconnect(struct ieee80211_vif *vif, bool reconnect)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);struct ieee80211_hw *hw = &sdata->local->hw;if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))return ;true ;static void ieee80211_destroy_auth_data(struct ieee80211_sub_if_data *sdata,bool assoc)struct ieee80211_mgd_auth_data *auth_data = sdata->u.mgd.auth_data;if (!assoc) {/* * we are not authenticated yet , the only timer that could be * running is the timeout for the authentication response which * which is not relevant anymore . /* other links are destroyed */ 0 ;0 , 0 );enum assoc_status {static void ieee80211_destroy_assoc_data(struct ieee80211_sub_if_data *sdata,enum assoc_status status)struct ieee80211_mgd_assoc_data *assoc_data = sdata->u.mgd.assoc_data;if (status != ASSOC_SUCCESS) {/* * we are not associated yet , the only timer that could be * running is the timeout for the association response which * which is not relevant anymore . 0 ;false ;if (status != ASSOC_REJECTED) {struct cfg80211_assoc_failure data = {int i;for (i = 0 ; i < ARRAY_SIZE(data.bss); i++)if (ieee80211_vif_is_mld(&sdata->vif))0 , 0 );static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee80211_local *local = sdata->local;struct ieee80211_mgd_auth_data *auth_data = sdata->u.mgd.auth_data;const struct element *challenge;0 ;struct ieee80211_prep_tx_info info = {if (!challenge)return ;4 ;if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS))3 , auth_data->algorithm, 0 ,void *)challenge,sizeof (*challenge),static bool ieee80211_mark_sta_auth(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;const u8 *ap_addr = ifmgd->auth_data->ap_addr;struct sta_info *sta;"authenticated\n" );true ;true ;/* move station state to auth */ if (!sta) {1 , "%s: STA %pM not found" , sdata->name, ap_addr);return false ;if (sta_info_move_state(sta, IEEE80211_STA_AUTH)) {"failed moving %pM to auth\n" , ap_addr);return false ;return true ;static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_event event = {struct ieee80211_prep_tx_info info = {bool sae_need_confirm = false ;if (len < 24 + 6 )return ;if (!ifmgd->auth_data || ifmgd->auth_data->done)return ;if (!ether_addr_equal(ifmgd->auth_data->ap_addr, mgmt->bssid))return ;if (auth_alg != ifmgd->auth_data->algorithm ||2 ))) {"%pM unexpected authentication state: alg %d (expected %d) transact %d (expected %d)\n" ,goto notify_driver;if (status_code != WLAN_STATUS_SUCCESS) {if (auth_alg == WLAN_AUTH_SAE &&1 &&/* waiting for userspace now */ true ;true ;if (auth_transaction == 1 )true ;goto notify_driver;"%pM denied authentication (status %d)\n" ,false );goto notify_driver;switch (ifmgd->auth_data->algorithm) {case WLAN_AUTH_OPEN:case WLAN_AUTH_LEAP:case WLAN_AUTH_FT:case WLAN_AUTH_SAE:case WLAN_AUTH_FILS_SK:case WLAN_AUTH_FILS_SK_PFS:case WLAN_AUTH_FILS_PK:break ;case WLAN_AUTH_SHARED_KEY:if (ifmgd->auth_data->expected_transaction != 4 ) {/* need another frame */ return ;break ;default :1 , "invalid auth alg %d" ,goto notify_driver;1 ;if (ifmgd->auth_data->algorithm != WLAN_AUTH_SAE ||2 &&2 )) {if (!ieee80211_mark_sta_auth(sdata))return ; /* ignore frame -- wait for timeout */ else if (ifmgd->auth_data->algorithm == WLAN_AUTH_SAE &&1 ) {true ;else if (ifmgd->auth_data->algorithm == WLAN_AUTH_SAE &&2 ) {"SAE peer confirmed\n" );true ;if (!sae_need_confirm)#define case_WLAN(type) \case WLAN_REASON_## type: return #type const char *ieee80211_get_reason_code_string(u16 reason_code)switch (reason_code) {4 WAY_HANDSHAKE_TIMEOUT);default : return "<unknown>" ;static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (len < 24 + 2 )return ;if (!ether_addr_equal(mgmt->bssid, mgmt->sa)) {return ;if (ifmgd->associated &&"deauthenticated from %pM (Reason: %u=%s)\n" ,0 , 0 , false , NULL);false ,false );return ;if (ifmgd->assoc_data &&"deauthenticated from %pM while associating (Reason: %u=%s)\n" ,return ;static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (len < 24 + 2 )return ;if (!ifmgd->associated ||return ;if (!ether_addr_equal(mgmt->bssid, mgmt->sa)) {return ;"disassociated from %pM (Reason: %u=%s)\n" ,0 , 0 , false , NULL);false , reason_code,false );static bool ieee80211_twt_req_supported(struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,const struct link_sta_info *link_sta,const struct ieee802_11_elems *elems)const struct ieee80211_sta_he_cap *own_he_cap =if (elems->ext_capab_len < 10 )return false ;if (!(elems->ext_capab[9 ] & WLAN_EXT_CAPA10_TWT_RESPONDER_SUPPORT))return false ;return link_sta->pub->he_cap.he_cap_elem.mac_cap_info[0 ] &0 ] &static u64 ieee80211_recalc_twt_req(struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,struct ieee80211_link_data *link,struct link_sta_info *link_sta,struct ieee802_11_elems *elems)bool twt = ieee80211_twt_req_supported(sdata, sband, link_sta, elems);if (link->conf->twt_requester != twt) {return BSS_CHANGED_TWT;return 0 ;static bool ieee80211_twt_bcast_support(struct ieee80211_sub_if_data *sdata,struct ieee80211_bss_conf *bss_conf,struct ieee80211_supported_band *sband,struct link_sta_info *link_sta)const struct ieee80211_sta_he_cap *own_he_cap =return bss_conf->he_support &&2 ] &2 ] &static void ieee80211_epcs_changed(struct ieee80211_sub_if_data *sdata,bool enabled)/* in any case this is called, dialog token should be reset */ 0 ;if (sdata->u.mgd.epcs.enabled == enabled)return ;static void ieee80211_epcs_teardown(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;if (!sdata->u.mgd.epcs.enabled)return ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct ieee802_11_elems *elems;struct ieee80211_link_data *link;const struct cfg80211_bss_ies *ies;bool ret;if (!link || !link->conf || !link->conf->bss) {continue ;if (link->u.mgd.disable_wmm_tracking) {false , false );continue ;if (!ies) {false , false );continue ;false ,if (!elems) {false , false );continue ;if (!ret) {false , false );continue ;static bool ieee80211_assoc_config_link(struct ieee80211_link_data *link,struct link_sta_info *link_sta,struct cfg80211_bss *cbss,struct ieee80211_mgmt *mgmt,const u8 *elem_start,unsigned int elem_len,struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_mgd_assoc_data *assoc_data =struct ieee80211_bss_conf *bss_conf = link->conf;struct ieee80211_local *local = sdata->local;unsigned int link_id = link->link_id;struct ieee80211_elems_parse_params parse_params = {1 : link_id,true ,bool is_5ghz = cbss->channel->band == NL80211_BAND_5GHZ;bool is_6ghz = cbss->channel->band == NL80211_BAND_6GHZ;bool is_s1g = cbss->channel->band == NL80211_BAND_S1GHZ;const struct cfg80211_bss_ies *bss_ies = NULL;struct ieee80211_supported_band *sband;struct ieee802_11_elems *elems;const __le16 prof_bss_param_ch_present =bool ret;if (!elems)return false ;if (link_id == assoc_data->assoc_link_id) {/* * we should not get to this flow unless the association was * successful , so set the status directly to success if (elems->ml_basic) {int bss_param_ch_cnt =const void *)elems->ml_basic);if (bss_param_ch_cnt < 0 ) {false ;goto out;else if (elems->parse_error & IEEE80211_PARSE_ERR_DUP_NEST_ML_BASIC ||false ;goto out;else {const u8 *ptr = elems->prof->variable +1 ;int bss_param_ch_cnt;/* * During parsing , we validated that these fields exist , * otherwise elems - > prof would have been set to NULL . 2 );if (assoc_data->link[link_id].status != WLAN_STATUS_SUCCESS) {"association response status code=%u\n" ,true ;goto out;if (!is_s1g && !elems->supp_rates) {"no SuppRates element in AssocResp\n" );false ;goto out;5 &&4 ] & WLAN_EXT_CAPA5_TDLS_CH_SW_PROHIBITED);/* * Some APs are erroneously not including some information in their * ( re ) association response frames . Try to recover by using the data * from the beacon or probe response . This seems to afflict mobile * 2 G / 3 G / 4 G wifi routers , reported models include the " Onda PN51T " , * " Vodafone PocketWiFi 2 " , " ZTE MF60 " and a similar T - Mobile device . if (!ieee80211_hw_check(&local->hw, STRICT) && !is_6ghz &&const struct cfg80211_bss_ies *ies;struct ieee802_11_elems *bss_elems;if (ies)sizeof (*ies) + ies->len,if (!bss_ies) {false ;goto out;1 ;if (!bss_elems) {false ;goto out;if (assoc_data->wmm &&"AP bug: WMM param missing from AssocResp\n" );/* * Also check if we requested HT / VHT , otherwise the AP doesn ' t * have to include the IEs in the ( re ) association response . if (!elems->ht_cap_elem && bss_elems->ht_cap_elem &&"AP bug: HT capability missing from AssocResp\n" );if (!elems->ht_operation && bss_elems->ht_operation &&"AP bug: HT operation missing from AssocResp\n" );if (is_5ghz) {if (!elems->vht_cap_elem && bss_elems->vht_cap_elem &&"AP bug: VHT capa missing from AssocResp\n" );if (!elems->vht_operation && bss_elems->vht_operation &&"AP bug: VHT operation missing from AssocResp\n" );/* * We previously checked these in the beacon / probe response , so * they should be present here . This is just a safety net . * Note that the ieee80211_config_bw ( ) below would also check * for this ( and more ) , but this has better error reporting . if (!is_6ghz && link->u.mgd.conn.mode >= IEEE80211_CONN_MODE_HT &&"HT AP is missing WMM params or HT capability/operation\n" );false ;goto out;if (is_5ghz && link->u.mgd.conn.mode >= IEEE80211_CONN_MODE_VHT &&"VHT AP is missing VHT capability/operation\n" );false ;goto out;/* check/update if AP changed anything in assoc response vs. scan */ if (ieee80211_config_bw(link, elems,false ;goto out;if (WARN_ON(!link->conf->chanreq.oper.chan)) {false ;goto out;/* Set up internal HT/VHT capabilities */ if (elems->ht_cap_elem && link->u.mgd.conn.mode >= IEEE80211_CONN_MODE_HT)if (elems->vht_cap_elem &&const struct ieee80211_vht_cap *bss_vht_cap = NULL;const struct cfg80211_bss_ies *ies;/* * Cisco AP module 9115 with FW 17 . 3 has a bug and sends a * too large maximum MPDU length in the association response * ( indicating 12 k ) that it cannot actually process . . . * Work around that . if (ies) {const struct element *elem;if (elem && elem->datalen >= sizeof (*bss_vht_cap))const void *)elem->data;if (ieee80211_hw_check(&local->hw, STRICT) &&sizeof (*bss_vht_cap)))) {false ;"VHT capabilities mismatch\n" );goto out;if (elems->he_operation &&if (elems->rsnx && elems->rsnx_len &&0 ] & WLAN_RSNX_CAPA_PROTECTED_TWT) &&true ;else false ;if (elems->eht_operation && elems->eht_cap &&0 ] &/* EPCS might be already enabled but a new added link * does not support EPCS . This should not really happen * in practice . if (sdata->u.mgd.epcs.enabled &&else {false ;false ;else {false ;false ;false ;false ;false ;if (elems->s1g_oper &&if (bss_conf->he_support) {if (bss_conf->he_bss_color.enabled)if (elems->uora_element)0 ];/* TODO: OPEN: what happens if BSS color disable is set? */ if (cbss->transmitted_bss) {true ;/* * Some APs , e . g . Netgear WNDR3700 , report invalid HT operation data * in their association response , so ignore that data for our own * configuration . If it changed since the last beacon , we ' ll get the * next beacon and update then . /* * If an operating mode notification IE is present , override the * NSS calculation ( that would be done in rate_control_rate_init ( ) ) * and use the # of streams from that element . if (elems->opmode_notif &&1 ;/* * Always handle WMM once after association regardless * of the first value the AP uses . Setting - 1 here has * that effect because the AP values is an unsigned * 4 - bit value . 1 ;1 ;if (link->u.mgd.disable_wmm_tracking) {false , false );else if (!ieee80211_sta_wmm_params(local, link, elems->wmm_param,/* still enable QoS since we might have HT/VHT */ false , true );/* disable WMM tracking in this case to disable * tracking WMM parameter changes in the beacon if * the parameters weren ' t actually valid . Doing so * avoids changing parameters very strangely when * the AP is going back and forth between valid and * invalid parameters . true ;if (elems->max_idle_period_ie) {else {0 ;false ;/* set assoc capability (AID was already set earlier), true ;return ret;static int ieee80211_mgd_setup_link_sta(struct ieee80211_link_data *link,struct sta_info *sta,struct link_sta_info *link_sta,struct cfg80211_bss *cbss)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;struct ieee80211_bss *bss = (void *)cbss->priv;0 , basic_rates = 0 ;bool have_higher_than_11mbit = false ;int min_rate = INT_MAX, min_rate_index = -1 ;struct ieee80211_supported_band *sband;/* TODO: S1G Basic Rate Set is expressed elsewhere */ if (cbss->channel->band == NL80211_BAND_S1GHZ) {return 0 ;0 ,/* * This used to be a workaround for basic rates missing * in the association response frame . Now that we no * longer use the basic rates from there , it probably * doesn ' t happen any more , but keep the workaround so * in case some * other * APs are buggy in different ways * we can connect - - with a warning . * Allow this workaround only in case the AP provided at least * one rate . if (min_rate_index < 0 ) {"No legacy rates in association response\n" );return -EINVAL;else if (!basic_rates) {"No basic rates, using min rate instead\n" );if (rates)else "No rates found, keeping mandatory only\n" );/* cf. IEEE 802.11 9.2.12 */ return 0 ;static u8 ieee80211_max_rx_chains(struct ieee80211_link_data *link,struct cfg80211_bss *cbss)struct ieee80211_he_mcs_nss_supp *he_mcs_nss_supp;const struct element *ht_cap_elem, *vht_cap_elem;const struct cfg80211_bss_ies *ies;const struct ieee80211_ht_cap *ht_cap;const struct ieee80211_vht_cap *vht_cap;const struct ieee80211_he_cap_elem *he_cap;const struct element *he_cap_elem;int i, mcs_nss_size;bool support_160;1 ;if (link->u.mgd.conn.mode < IEEE80211_CONN_MODE_HT)return chains;if (ht_cap_elem && ht_cap_elem->datalen >= sizeof (*ht_cap)) {void *)ht_cap_elem->data;/* * TODO : use " Tx Maximum Number Spatial Streams Supported " and * " Tx Unequal Modulation Supported " fields . if (link->u.mgd.conn.mode < IEEE80211_CONN_MODE_VHT)return chains;if (vht_cap_elem && vht_cap_elem->datalen >= sizeof (*vht_cap)) {void *)vht_cap_elem->data;for (nss = 8 ; nss > 0 ; nss--) {if (((tx_mcs_map >> (2 * (nss - 1 ))) & 3 ) !=break ;/* TODO: use "Tx Highest Supported Long GI Data Rate" field? */ if (link->u.mgd.conn.mode < IEEE80211_CONN_MODE_HE)return chains;if (!he_cap_elem || he_cap_elem->datalen < sizeof (*he_cap) + 1 )return chains;/* skip one byte ext_tag_id */ void *)(he_cap_elem->data + 1 );/* invalid HE IE */ if (he_cap_elem->datalen < 1 + mcs_nss_size + sizeof (*he_cap))return chains;/* mcs_nss is right after he_cap info */ void *)(he_cap + 1 );for (i = 7 ; i >= 0 ; i--) {2 * i) & 3 ;if (mcs_80 != IEEE80211_VHT_MCS_NOT_SUPPORTED) {1 );break ;0 ] &if (!support_160)return chains;for (i = 7 ; i >= 0 ; i--) {2 * i) & 3 ;if (mcs_160 != IEEE80211_VHT_MCS_NOT_SUPPORTED) {1 );break ;return chains;static void struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,struct cfg80211_assoc_request *req,bool wmm_used, int link_id,struct ieee80211_conn_settings *conn)struct ieee80211_sta_ht_cap sta_ht_cap = sband->ht_cap;bool is_5ghz = sband->band == NL80211_BAND_5GHZ;bool is_6ghz = sband->band == NL80211_BAND_6GHZ;const struct ieee80211_sta_he_cap *he_cap;const struct ieee80211_sta_eht_cap *eht_cap;struct ieee80211_sta_vht_cap vht_cap;if (sband->band == NL80211_BAND_S1GHZ) {"operating as S1G STA\n" );return ;if (req && req->flags & ASSOC_REQ_DISABLE_HT) {"HT disabled by flag, limiting to legacy\n" );goto out;if (!wmm_used) {"WMM/QoS not supported, limiting to legacy\n" );goto out;if (req) {unsigned int i;for (i = 0 ; i < req->crypto.n_ciphers_pairwise; i++) {if (req->crypto.ciphers_pairwise[i] == WLAN_CIPHER_SUITE_WEP40 ||"WEP/TKIP use, limiting to legacy\n" );goto out;if (!sta_ht_cap.ht_supported && !is_6ghz) {"HT not supported (and not on 6 GHz), limiting to legacy\n" );goto out;/* HT is fine */ sizeof (vht_cap));if (req && req->flags & ASSOC_REQ_DISABLE_VHT) {"VHT disabled by flag, limiting to HT\n" );goto out;if (vht_cap.vht_supported && is_5ghz) {bool have_80mhz = false ;unsigned int i;if (conn->bw_limit == IEEE80211_CONN_BW_LIMIT_20) {"no 40 MHz support on 5 GHz, limiting to HT\n" );goto out;/* Allow VHT if at least one channel on the sband supports 80 MHz */ for (i = 0 ; i < sband->n_channels; i++) {if (sband->channels[i].flags & (IEEE80211_CHAN_DISABLED |continue ;true ;break ;if (!have_80mhz) {"no 80 MHz channel support on 5 GHz, limiting to HT\n" );goto out;else if (is_5ghz) { /* !vht_supported but on 5 GHz */ "no VHT support on 5 GHz, limiting to HT\n" );goto out;/* VHT - if we have - is fine, including 80 MHz, check 160 below again */ if (sband->band != NL80211_BAND_2GHZ) {if (is_5ghz &&"no VHT 160 MHz capability on 5 GHz, limiting to 80 MHz" );if (req && req->flags & ASSOC_REQ_DISABLE_HE) {"HE disabled by flag, limiting to HT/VHT\n" );goto out;if (!he_cap) {"no HE support, limiting to HT/VHT\n" );goto out;/* so we have HE */ /* check bandwidth */ switch (sband->band) {default :case NL80211_BAND_2GHZ:if (he_cap->he_cap_elem.phy_cap_info[0 ] &break ;"no 40 MHz HE cap in 2.4 GHz, limiting to 20 MHz\n" );break ;case NL80211_BAND_5GHZ:if (!(he_cap->he_cap_elem.phy_cap_info[0 ] &"no 40/80 MHz HE cap in 5 GHz, limiting to 20 MHz\n" );break ;if (!(he_cap->he_cap_elem.phy_cap_info[0 ] &enum ieee80211_conn_bw_limit,"no 160 MHz HE cap in 5 GHz, limiting to 80 MHz\n" );break ;case NL80211_BAND_6GHZ:if (he_cap->he_cap_elem.phy_cap_info[0 ] &break ;enum ieee80211_conn_bw_limit,"no 160 MHz HE cap in 6 GHz, limiting to 80 MHz\n" );break ;if (req && req->flags & ASSOC_REQ_DISABLE_EHT) {"EHT disabled by flag, limiting to HE\n" );goto out;if (!eht_cap) {"no EHT support, limiting to HE\n" );goto out;/* we have EHT */ /* check bandwidth */ if (is_6ghz &&0 ] & IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ)else if (is_6ghz)"no EHT 320 MHz cap in 6 GHz, limiting to 160 MHz\n" );"determined local STA to be %s, BW limited to %d MHz\n" ,20 * (1 << conn->bw_limit));static void struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,struct cfg80211_auth_request *req,bool wmm_used,struct ieee80211_conn_settings *conn)0 ? req->link_id : 0 ,static void struct ieee80211_sub_if_data *sdata,struct ieee80211_supported_band *sband,struct cfg80211_assoc_request *req,bool wmm_used, int link_id,struct ieee80211_conn_settings *conn)struct ieee80211_conn_settings tmp;enum ieee80211_conn_mode,enum ieee80211_conn_bw_limit,static enum ieee80211_ap_reg_powerswitch (u8_get_bits(control, IEEE80211_HE_6GHZ_OPER_CTRL_REG_INFO)) {case IEEE80211_6GHZ_CTRL_REG_LPI_AP:case IEEE80211_6GHZ_CTRL_REG_INDOOR_LPI_AP:return IEEE80211_REG_LPI_AP;case IEEE80211_6GHZ_CTRL_REG_SP_AP:case IEEE80211_6GHZ_CTRL_REG_INDOOR_SP_AP:case IEEE80211_6GHZ_CTRL_REG_INDOOR_SP_AP_OLD:return IEEE80211_REG_SP_AP;case IEEE80211_6GHZ_CTRL_REG_VLP_AP:return IEEE80211_REG_VLP_AP;default :return IEEE80211_REG_UNSET_AP;static int ieee80211_prep_channel(struct ieee80211_sub_if_data *sdata,struct ieee80211_link_data *link,int link_id,struct cfg80211_bss *cbss, bool mlo,struct ieee80211_conn_settings *conn,unsigned long *userspace_selectors)struct ieee80211_local *local = sdata->local;bool is_6ghz = cbss->channel->band == NL80211_BAND_6GHZ;struct ieee80211_chan_req chanreq = {};struct cfg80211_chan_def ap_chandef;struct ieee802_11_elems *elems;int ret;if (IS_ERR(elems)) {return PTR_ERR(elems);if (mlo && !elems->ml_basic) {"Rejecting MLO as it is not supported by AP\n" );return -EINVAL;if (link && is_6ghz && conn->mode >= IEEE80211_CONN_MODE_HE) {const struct ieee80211_he_6ghz_oper *he_6ghz_oper;if (elems->pwr_constr_elem)if (he_6ghz_oper)else "HE 6 GHz operation missing (on %d MHz), expect issues\n" ,/* the element data was RCU protected so no longer valid anyway */ if (!link)return 0 ;/* * If this fails ( possibly due to channel context sharing * on incompatible channels , e . g . 80 + 80 and 160 sharing the * same control channel ) try to use a smaller bandwidth . /* don't downgrade for 5 and 10 MHz channels, though. */ if (chanreq.oper.width == NL80211_CHAN_WIDTH_5 ||return ret;while (ret && chanreq.oper.width != NL80211_CHAN_WIDTH_20_NOHT) {return ret;static bool ieee80211_get_dtim(const struct cfg80211_bss_ies *ies,const u8 *tim_ie = cfg80211_find_ie(WLAN_EID_TIM, ies->data, ies->len);const u8 *idx_ie = cfg80211_find_ie(WLAN_EID_MULTI_BSSID_IDX, ies->data,const struct ieee80211_tim_ie *tim = NULL;const struct ieee80211_bssid_index *idx;bool valid = tim_ie && tim_ie[1 ] >= 2 ;if (valid)void *)(tim_ie + 2 );if (dtim_count)0 ;if (dtim_period)0 ;/* Check if value is overridden by non-transmitted profile */ if (!idx_ie || idx_ie[1 ] < 3 )return valid;void *)(idx_ie + 2 );if (dtim_count)if (dtim_period)return true ;static bool ieee80211_assoc_success(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt,struct ieee802_11_elems *elems,const u8 *elem_start, unsigned int elem_len)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_assoc_data *assoc_data = ifmgd->assoc_data;struct ieee80211_local *local = sdata->local;unsigned int link_id;struct sta_info *sta;0 , dormant_links = 0 ;int err;/* * station info was already allocated and inserted before * the association and should be available to us if (WARN_ON(!sta))goto out_err;if (ieee80211_vif_is_mld(&sdata->vif)) {for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {if (!assoc_data->link[link_id].bss)continue ;if (assoc_data->link[link_id].disabled)if (link_id != assoc_data->assoc_link_id) {if (err)goto out_err;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;struct ieee80211_link_data *link;struct link_sta_info *link_sta;if (!cbss)continue ;if (WARN_ON(!link))goto out_err;if (ieee80211_vif_is_mld(&sdata->vif))"local address %pM, AP link address %pM%s\n" ," (assoc)" : "" );if (WARN_ON(!link_sta))goto out_err;if (!link->u.mgd.have_beacon) {const struct cfg80211_bss_ies *ies;if (ies)true ;else 1 ;if (link_id != assoc_data->assoc_link_id) {true , &link->u.mgd.conn,if (err) {"prep_channel failed\n" );goto out_err;if (err)goto out_err;if (!ieee80211_assoc_config_link(link, link_sta,goto out_err;if (assoc_data->link[link_id].status != WLAN_STATUS_SUCCESS) {continue ;if (link_id != assoc_data->assoc_link_id) {if (err)goto out_err;/* links might have changed due to rejected ones, set them again */ if (ifmgd->flags & IEEE80211_STA_MFP_ENABLED) {true ;else {false ;if (!err && !(ifmgd->flags & IEEE80211_STA_CONTROL_PORT))if (err) {"failed to move station %pM to desired state\n" ,goto out_err;if (sdata->wdev.use_4addr)true );/* * If we ' re using 4 - addr mode , let the AP know that we ' re * doing so , so that it can create the STA VLAN on its side if (ifmgd->use_4addr)/* * Start timer to probe the connection to the AP now . * Also start the timer that will detect beacon loss . return true ;return false ;static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt,struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_assoc_data *assoc_data = ifmgd->assoc_data;struct ieee80211_elems_parse_params parse_params = {1 ,true ,struct ieee802_11_elems *elems;int ac;const u8 *elem_start;unsigned int elem_len;bool reassoc;struct ieee80211_event event = {struct ieee80211_prep_tx_info info = {};struct cfg80211_rx_assoc_resp_data resp = {1 ,2 );unsigned int link_id;if (!assoc_data)return ;if (!ether_addr_equal(assoc_data->ap_addr, mgmt->bssid) ||return ;/* * AssocResp and ReassocResp have identical structure , so process both * of them in this function . if (len < 24 + 6 )return ;if (assoc_data->s1g)else /* * Note : this may not be perfect , AP might misbehave - if * anyone needs to rely on perfect complete notification * with the exact right subtype , then we need to track what * we actually transmitted . if (assoc_data->fils_kek_len &&0 )return ;if (!elems)goto notify_driver;if (elems->aid_resp)else if (assoc_data->s1g)0 ; /* TODO */ else /* * The 5 MSB of the AID field are reserved * ( 802 . 11 - 2016 9 . 4 . 1 . 8 AID field ) 0 x7ff;"RX %sssocResp from %pM (capab=0x%x status=%d aid=%d)\n" ,"Rea" : "A" , assoc_data->ap_addr,15 ) | BIT(14 ))));false ;if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY &&1024 / 1000 ;"%pM rejected association temporarily; comeback duration %u TU (%u ms)\n" ,true ;true ;if (ms > IEEE80211_ASSOC_TIMEOUT)goto notify_driver;if (status_code != WLAN_STATUS_SUCCESS) {"%pM denied association (code=%d)\n" ,else {if (aid == 0 || aid > IEEE80211_MAX_AID) {"invalid AID value %d (out of range), turn off PS\n" ,0 ;true ;if (ieee80211_vif_is_mld(&sdata->vif)) {struct ieee80211_mle_basic_common_info *common;if (!elems->ml_basic) {"MLO association with %pM but no (basic) multi-link element in response!\n" ,goto abandon_assoc;void *)elems->ml_basic->variable;if (memcmp(assoc_data->ap_addr,"AP MLD MAC address mismatch: got %pM expected %pM\n" ,goto abandon_assoc;const void *)elems->ml_basic);const void *)elems->ml_basic);const void *)elems->ml_basic);if (!ieee80211_assoc_success(sdata, mgmt, elems,/* oops -- internal error -- send timeout for now */ goto notify_driver;"associated\n" );1 ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct ieee80211_link_data *link;if (!assoc_data->link[link_id].bss)continue ;if (!link)continue ;/* get uapsd queues configuration - same for all links */ 0 ;for (ac = 0 ; ac < IEEE80211_NUM_ACS; ac++)if (link->tx_conf[ac].uapsd)if (ieee80211_vif_is_mld(&sdata->vif)) {return ;goto notify_driver;static void ieee80211_rx_bss_info(struct ieee80211_link_data *link,struct ieee80211_mgmt *mgmt, size_t len,struct ieee80211_rx_status *rx_status)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;struct ieee80211_bss *bss;struct ieee80211_channel *channel;if (!channel)return ;if (bss) {static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_link_data *link,struct sk_buff *skb)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_mgmt *mgmt = (void *)skb->data;struct ieee80211_if_managed *ifmgd;struct ieee80211_rx_status *rx_status = (void *) skb->cb;struct ieee80211_channel *channel;/* * According to Draft P802 . 11 ax D6 . 0 clause 26 . 17 . 2 . 3 . 2 : * " If a 6 GHz AP receives a Probe Request frame and responds with * a Probe Response frame [ . . ] , the Address 1 field of the Probe * Response frame shall be set to the broadcast address [ . . ] " * So , on 6 GHz band we should also accept broadcast responses . if (!channel)return ;if (!ether_addr_equal(mgmt->da, sdata->vif.addr) &&return ; /* ignore ProbeResp to foreign address */ if (baselen > len)return ;if (ifmgd->associated &&/* * This is the canonical list of information elements we care about , * the filter code also gives us all changes to the Microsoft OUI * ( 00 : 50 : F2 ) vendor IE which is used for WMM which we need to track , * as well as the DTPC IE ( part of the Cisco OUI ) used for signaling * changes to requested client power . * * We implement beacon filtering in software since that means we can * avoid processing the frame here and in cfg80211 , and userspace * will not be able to tell whether the hardware supports it or not . * * XXX : This list needs to be dynamic - - userspace needs to be able to * add items it requires . It also needs to be able to tell us to * look out for other vendor IEs . static const u64 care_about_ies =1 ULL << WLAN_EID_COUNTRY) |1 ULL << WLAN_EID_ERP_INFO) |1 ULL << WLAN_EID_CHANNEL_SWITCH) |1 ULL << WLAN_EID_PWR_CONSTRAINT) |1 ULL << WLAN_EID_HT_CAPABILITY) |1 ULL << WLAN_EID_HT_OPERATION) |1 ULL << WLAN_EID_EXT_CHANSWITCH_ANN);static void ieee80211_handle_beacon_sig(struct ieee80211_link_data *link,struct ieee80211_if_managed *ifmgd,struct ieee80211_bss_conf *bss_conf,struct ieee80211_local *local,struct ieee80211_rx_status *rx_status)struct ieee80211_sub_if_data *sdata = link->sdata;/* Track average RSSI from the Beacon frames of the current AP */ if (!link->u.mgd.tracking_signal_avg) {true ;0 ;1 ;0 ;else {if (ifmgd->rssi_min_thold != ifmgd->rssi_max_thold &&int sig = -ewma_beacon_signal_read(&link->u.mgd.ave_beacon_signal);int last_sig = link->u.mgd.last_ave_beacon_signal;struct ieee80211_event event = {/* * if signal crosses either of the boundaries , invoke callback * with appropriate parameters if (sig > ifmgd->rssi_max_thold &&0 )) {else if (sig < ifmgd->rssi_min_thold &&0 )) {if (bss_conf->cqm_rssi_thold &&int sig = -ewma_beacon_signal_read(&link->u.mgd.ave_beacon_signal);int last_event = link->u.mgd.last_cqm_event_signal;int thold = bss_conf->cqm_rssi_thold;int hyst = bss_conf->cqm_rssi_hyst;if (sig < thold &&0 || sig < last_event - hyst)) {else if (sig > thold &&0 || sig > last_event + hyst)) {if (bss_conf->cqm_rssi_low &&int sig = -ewma_beacon_signal_read(&link->u.mgd.ave_beacon_signal);int last_event = link->u.mgd.last_cqm_event_signal;int low = bss_conf->cqm_rssi_low;int high = bss_conf->cqm_rssi_high;if (sig < low &&0 || last_event >= low)) {else if (sig > high &&0 || last_event <= high)) {static bool ieee80211_rx_our_beacon(const u8 *tx_bssid,struct cfg80211_bss *bss)if (ether_addr_equal(tx_bssid, bss->bssid))return true ;if (!bss->transmitted_bss)return false ;return ether_addr_equal(tx_bssid, bss->transmitted_bss->bssid);static void ieee80211_ml_reconf_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,int ret;if (!sdata->u.mgd.removed_links)return ;"MLO Reconfiguration: work: valid=0x%x, removed=0x%x\n" ,if (new_valid_links == sdata->vif.valid_links)return ;if (!new_valid_links ||"No valid links after reconfiguration\n" );goto out;if (new_active_links != sdata->vif.active_links) {if (!new_active_links)1 );if (ret) {"Failed setting active links\n" );goto out;if (ret)"Failed setting valid links\n" );if (!ret)else 0 ;static void ieee80211_ml_reconfiguration(struct ieee80211_sub_if_data *sdata,struct ieee802_11_elems *elems)const struct element *sub;unsigned long removed_links = 0 ;if (!ieee80211_vif_is_mld(&sdata->vif) || !elems->ml_reconf)return ;/* Directly parse the sub elements as the common information doesn't * hold any useful information . const u8 *)elems->ml_reconf,struct ieee80211_mle_per_sta_profile *prof = (void *)sub->data;if (sub->id != IEEE80211_MLE_SUBELEM_PER_STA_PROFILE)continue ;if (!ieee80211_mle_reconf_sta_prof_size_ok(sub->data,return ;/* the MAC address should not be included, but handle it */ if (control &6 ;/* According to Draft P802.11be_D3.0, the control should * include the AP Removal Timer present . If the AP Removal Timer * is not present assume immediate removal . if (control &if (!removed_links) {/* In case the removal was cancelled, abort it */ if (sdata->u.mgd.removed_links) {0 ;return ;0 ;struct ieee80211_bss_conf *link_conf =if (!link_conf) {continue ;if (link_removal_timeout[link_id] < 1 )0 ;else 1 );if (!delay)else static int ieee80211_ttlm_set_links(struct ieee80211_sub_if_data *sdata,0 ;int ret;if (!active_links) {goto out;/* If there is an active negotiated TTLM, it should be discarded by * the new negotiated / advertised TTLM . if (sdata->vif.neg_ttlm.valid) {0 , sizeof (sdata->vif.neg_ttlm));0 ;if (sdata->vif.active_links != active_links) {/* usable links are affected when active_links are changed, * so notify the driver about the status change if (!active_links)if (ret) {"Failed to set TTLM active links\n" );goto out;if (ret) {"Failed to set TTLM dormant links\n" );goto out;if (sdata->vif.suspended_links)if (ret)false );return ret;static void ieee80211_tid_to_link_map_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,0 );if (ieee80211_ttlm_set_links(sdata, new_active_links, new_dormant_links,0 ))return ;true ;0 ;static u16 ieee80211_get_ttlm(u8 bm_size, u8 *data)if (bm_size == 1 )return *data;else return get_unaligned_le16(data);static int struct ieee80211_sub_if_data *sdata,const struct ieee80211_ttlm_elem *ttlm,struct ieee80211_adv_ttlm_info *ttlm_info)/* The element size was already validated in * ieee80211_tid_to_link_map_size_ok ( ) 0 , sizeof (*ttlm_info));void *)ttlm->optional;if ((control & IEEE80211_TTLM_CONTROL_DEF_LINK_MAP) ||return 0 ;if ((control & IEEE80211_TTLM_CONTROL_DIRECTION) !="Invalid advertised T2L map direction\n" );return -EINVAL;/* Since ttlm_info->switch_time == 0 means no switch time, bump it * by 1 . if (!ttlm_info->switch_time)1 ;2 ;if (control & IEEE80211_TTLM_CONTROL_EXPECTED_DUR_PRESENT) {0 ] | pos[1 ] << 8 | pos[2 ] << 16 ;3 ;if (control & IEEE80211_TTLM_CONTROL_LINK_MAP_SIZE)1 ;else 2 ;/* According to Draft P802.11be_D3.0 clause 35.3.7.1.7, an AP MLD shall * not advertise a TID - to - link mapping that does not map all TIDs to the * same link set , reject frame if not all links have mapping if (link_map_presence != 0 xff) {"Invalid advertised T2L mapping presence indicator\n" );return -EINVAL;if (!ttlm_info->map) {"Invalid advertised T2L map for TID 0\n" );return -EINVAL;for (tid = 1 ; tid < 8 ; tid++) {if (map != ttlm_info->map) {"Invalid advertised T2L map for tid %d\n" ,return -EINVAL;return 0 ;static void ieee80211_process_adv_ttlm(struct ieee80211_sub_if_data *sdata,struct ieee802_11_elems *elems,int ret;if (!ieee80211_vif_is_mld(&sdata->vif))return ;if (!elems->ttlm_num) {if (sdata->u.mgd.ttlm_info.switch_time) {/* if a planned TID-to-link mapping was cancelled - * abort it else if (sdata->u.mgd.ttlm_info.active) {/* if no TID-to-link element, set to default mapping in * which all TIDs are mapped to all setup links 0 );if (ret) {"Failed setting valid/dormant links\n" );return ;0 ,sizeof (sdata->u.mgd.ttlm_info));return ;for (i = 0 ; i < elems->ttlm_num; i++) {struct ieee80211_adv_ttlm_info ttlm_info;if (res) {return ;if (ttlm_info.switch_time) {/* The t2l map switch time is indicated with a partial * TSF value ( bits 10 to 25 ) , get the partial beacon TS * as well , and calc the delay to the start time . 25 , 10 );10 ;/* * If the switch time is far in the future , then it * could also be the previous switch still being * announced . * We can simply ignore it for now , if it is a future * switch the AP will continue to announce it anyway . if (delay > IEEE80211_ADV_TTLM_ST_UNDERFLOW)return ;/* Link switching can take time, so schedule it * 100 ms before to be ready on time if (delay_usec > IEEE80211_ADV_TTLM_SAFETY_BUFFER_MS)else 0 ;return ;static void struct ieee80211_sub_if_data *sdata,int reporting_link_id,struct ieee802_11_elems *elems)const struct element *sta_profiles[IEEE80211_MLD_MAX_NUM_LINKS] = {};const struct element *sub;const u8 *subelems;int link_id;if (!ieee80211_mle_size_ok((u8 *)elems->ml_basic, elems->ml_basic_len))return ;struct ieee80211_mle_per_sta_profile *prof = (void *)sub->data;struct ieee80211_link_data *link;if (!ieee80211_mle_basic_sta_prof_size_ok(sub->data,continue ;/* need a valid link ID, but also not our own, both AP bugs */ if (link_id == reporting_link_id ||continue ;if (!link)continue ;0 ,if (WARN_ON(len < 0 ))continue ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct ieee80211_mle_per_sta_profile *prof;struct ieee802_11_elems *prof_elems;struct ieee80211_link_data *link;if (link_id == reporting_link_id)continue ;if (!link)continue ;if (!sta_profiles[link_id]) {goto handle;/* we can defragment in-place, won't use the buffer again */ void *)sta_profiles[link_id],if (WARN_ON(len != sta_profiles_len[link_id]))continue ;void *)sta_profiles[link_id];1 ),1 ),false , NULL);/* memory allocation failed - let's hope that's transient */ if (!prof_elems)continue ;/* * FIXME : the timings here are obviously incorrect , * but only older Intel drivers seem to care , and * those don ' t have MLO . If you really need this , * the problem is having to calculate it with the * TSF offset etc . The device_timestamp is still * correct , of course . 0 , 0 , elems, prof_elems,static bool ieee80211_mgd_ssid_mismatch(struct ieee80211_sub_if_data *sdata,const struct ieee802_11_elems *elems)struct ieee80211_vif_cfg *cfg = &sdata->vif.cfg;static u8 zero_ssid[IEEE80211_MAX_SSID_LEN];if (!elems->ssid)return false ;/* hidden SSID: zero length */ if (elems->ssid_len == 0 )return false ;if (elems->ssid_len != cfg->ssid_len)return true ;/* hidden SSID: zeroed out */ if (!memcmp(elems->ssid, zero_ssid, elems->ssid_len))return false ;return memcmp(elems->ssid, cfg->ssid, cfg->ssid_len);static void ieee80211_rx_mgmt_beacon(struct ieee80211_link_data *link,struct ieee80211_hdr *hdr, size_t len,struct ieee80211_rx_status *rx_status)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_bss_conf *bss_conf = link->conf;struct ieee80211_vif_cfg *vif_cfg = &sdata->vif.cfg;struct ieee80211_mgmt *mgmt = (void *) hdr;struct ieee80211_ext *ext = NULL;struct ieee802_11_elems *elems;struct ieee80211_local *local = sdata->local;struct ieee80211_chanctx_conf *chanctx_conf;struct ieee80211_supported_band *sband;struct ieee80211_channel *chan;struct link_sta_info *link_sta;struct sta_info *sta;0 ;bool erp_valid;0 ;0 ;struct ieee80211_elems_parse_params parse_params = {1 ,true ,/* Process beacon from the current BSS */ if (ieee80211_is_s1g_beacon(mgmt->frame_control)) {void *)mgmt;if (baselen > len)return ;if (!chanctx_conf) {return ;if (ieee80211_rx_status_to_khz(rx_status) !=return ;if (ifmgd->assoc_data && ifmgd->assoc_data->need_beacon &&0 ].bss)) {0 ].bss;if (!elems)return ;if (elems->dtim_period)true ;false ;if (ieee80211_hw_check(&local->hw, TIMING_BEACON_ONLY) &&if (elems->mbssid_config_ie)else 0 ;if (elems->ext_capab_len >= 11 &&10 ] & WLAN_EXT_CAPA11_EMA_SUPPORT))true ;else false ;/* continue assoc process */ true ;return ;if (!ifmgd->associated ||return ;if (!(rx_status->flag & RX_FLAG_NO_SIGNAL_VAL))if (ifmgd->flags & IEEE80211_STA_CONNECTION_POLL) {"cancelling AP probe due to a received beacon\n" );/* * Push the beacon loss detection into the future since * we are processing a beacon from the AP just now . /* TODO: CRC urrently not calculated on S1G Beacon Compatibility * element ( which carries the beacon interval ) . Don ' t forget to add a * bit to care_about_ies [ ] above if mac80211 is interested in a * changing S1G element . if (!ieee80211_is_s1g_beacon(hdr->frame_control))0 , (void *)&mgmt->u.beacon.beacon_int, 4 );if (!elems)return ;if (rx_status->flag & RX_FLAG_DECRYPTED &&"SSID mismatch for AP %pM, disconnect\n" ,return ;if (ieee80211_hw_check(&local->hw, PS_NULLFUNC_STACK) &&if (local->hw.conf.dynamic_ps_timeout > 0 ) {if (local->hw.conf.flags & IEEE80211_CONF_PS) {1 ,false );else if (!local->pspolling && sdata->u.mgd.powersave) {true ;/* * Here is assumed that the driver will be * able to send ps - poll frame and receive a * response even though power save mode is * enabled , but some drivers might require * to disable power save here . This needs * to be investigated . if (sdata->vif.p2p ||struct ieee80211_p2p_noa_attr noa = {};int ret;sizeof (noa));if (ret >= 2 ) {if (link->u.mgd.p2p_noa_index != noa.index) {/* valid noa_attr and index changed */ sizeof (noa));/* * make sure we update all information , the CRC * mechanism doesn ' t look at P2P attributes . false ;else if (link->u.mgd.p2p_noa_index != -1 ) {/* noa_attr not found and we had valid noa_attr before */ 1 ;0 , sizeof (bss_conf->p2p_noa_attr));false ;/* * Update beacon timing and dtim count on every beacon appearance . This * will allow the driver to use the most updated values . Do it before * comparing this one with last received beacon . * IMPORTANT : These parameters would possibly be out of sync by the time * the driver will use them . The synchronized view is currently * guaranteed only in certain callbacks . if (ieee80211_hw_check(&local->hw, TIMING_BEACON_ONLY) &&if ((ncrc == link->u.mgd.beacon_crc && link->u.mgd.beacon_crc_valid) ||goto free;true ;/* note that after this elems->ml_basic can no longer be used fully */ if (!sdata->u.mgd.epcs.enabled &&/* * If we haven ' t had a beacon before , tell the driver about the * DTIM period ( and beacon timing if desired ) now . if (!link->u.mgd.have_beacon) {/* a few bogus AP send dtim_period = 0 or no TIM IE */ 1 ;true ;if (elems->erp_info) {true ;0 ];else {false ;if (!ieee80211_is_s1g_beacon(hdr->frame_control))if (WARN_ON(!sta)) {goto free;if (WARN_ON(!link_sta)) {goto free;if (WARN_ON(!bss_conf->chanreq.oper.chan))goto free;if (ieee80211_config_bw(link, elems, true , &changed,true , deauth_buf);sizeof (deauth_buf), true ,false );goto free;if (elems->opmode_notif)static void ieee80211_apply_neg_ttlm(struct ieee80211_sub_if_data *sdata,struct ieee80211_neg_ttlm neg_ttlm)0 ;for (i = 0 ; i < IEEE80211_TTLM_NUM_TIDS; i++)/* If there is an active TTLM, unset previously suspended links */ if (sdata->vif.neg_ttlm.valid)/* exclude links that are already disabled by advertised TTLM */ if (ieee80211_ttlm_set_links(sdata, new_active_links,return ;true ;static void ieee80211_neg_ttlm_timeout_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,"No negotiated TTLM response from AP, disconnecting.\n" );static void struct sk_buff *skb,struct ieee80211_neg_ttlm *neg_ttlm)if (memcmp(neg_ttlm->downlink, neg_ttlm->uplink,sizeof (neg_ttlm->downlink))) {0 ] = IEEE80211_TTLM_DIRECTION_DOWN;1 ] = IEEE80211_TTLM_DIRECTION_UP;else {0 ] = IEEE80211_TTLM_DIRECTION_BOTH;for (i = 0 ; i < ARRAY_SIZE(direction); i++) {0 , *len_pos, *map_ind_pos, *pos;sizeof (struct ieee80211_ttlm_elem) + 1 + 1 ;2 );for (tid = 0 ; tid < IEEE80211_TTLM_NUM_TIDS; tid++) {if (!map)continue ;2 ;sizeof (map));if (direction[i] == IEEE80211_TTLM_DIRECTION_BOTH)break ;static void struct ieee80211_sub_if_data *sdata,struct ieee80211_neg_ttlm *neg_ttlm,struct ieee80211_local *local = sdata->local;struct ieee80211_mgmt *mgmt;struct sk_buff *skb;int hdr_len = offsetofend(struct ieee80211_mgmt, u.action.u.ttlm_req);int ttlm_max_len = 2 + 1 + sizeof (struct ieee80211_ttlm_elem) + 1 +2 * 2 * IEEE80211_TTLM_NUM_TIDS;if (!skb)return ;int ieee80211_req_neg_ttlm(struct ieee80211_sub_if_data *sdata,struct cfg80211_ttlm_params *params)struct ieee80211_neg_ttlm neg_ttlm = {};if (!ieee80211_vif_is_mld(&sdata->vif) ||return -EINVAL;for (i = 0 ; i < IEEE80211_TTLM_NUM_TIDS; i++) {if ((params->dlink[i] & ~sdata->vif.valid_links) ||return -EINVAL;if (drv_can_neg_ttlm(sdata->local, sdata, &neg_ttlm) !=return -EINVAL;return 0 ;static void struct ieee80211_sub_if_data *sdata,enum ieee80211_neg_ttlm_res ttlm_res,struct ieee80211_neg_ttlm *neg_ttlm)struct ieee80211_local *local = sdata->local;struct ieee80211_mgmt *mgmt;struct sk_buff *skb;int hdr_len = offsetofend(struct ieee80211_mgmt, u.action.u.ttlm_res);int ttlm_max_len = 2 + 1 + sizeof (struct ieee80211_ttlm_elem) + 1 +2 * 2 * IEEE80211_TTLM_NUM_TIDS;if (!skb)return ;switch (ttlm_res) {default :1 );case NEG_TTLM_RES_REJECT:break ;case NEG_TTLM_RES_ACCEPT:break ;case NEG_TTLM_RES_SUGGEST_PREFERRED:break ;static int struct ieee80211_sub_if_data *sdata,const struct ieee80211_ttlm_elem *ttlm,struct ieee80211_neg_ttlm *neg_ttlm,/* The element size was already validated in * ieee80211_tid_to_link_map_size_ok ( ) void *)ttlm->optional;/* mapping switch time and expected duration fields are not expected * in case of negotiated TTLM if (control & (IEEE80211_TTLM_CONTROL_SWITCH_TIME_PRESENT |"Invalid TTLM element in negotiated TTLM request\n" );return -EINVAL;if (control & IEEE80211_TTLM_CONTROL_DEF_LINK_MAP) {for (tid = 0 ; tid < IEEE80211_TTLM_NUM_TIDS; tid++) {return 0 ;if (*direction != IEEE80211_TTLM_DIRECTION_DOWN &&return -EINVAL;if (control & IEEE80211_TTLM_CONTROL_LINK_MAP_SIZE)1 ;else 2 ;for (tid = 0 ; tid < IEEE80211_TTLM_NUM_TIDS; tid++) {if (link_map_presence & BIT(tid)) {if (!map) {"No active links for TID %d" , tid);return -EINVAL;else {0 ;switch (*direction) {case IEEE80211_TTLM_DIRECTION_BOTH:break ;case IEEE80211_TTLM_DIRECTION_DOWN:break ;case IEEE80211_TTLM_DIRECTION_UP:break ;default :return -EINVAL;return 0 ;void ieee80211_process_neg_ttlm_req(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)enum ieee80211_neg_ttlm_res ttlm_res = NEG_TTLM_RES_ACCEPT;struct ieee802_11_elems *elems = NULL;struct ieee80211_neg_ttlm neg_ttlm = {};if (!ieee80211_vif_is_mld(&sdata->vif))return ;struct ieee80211_mgmt,true , NULL);if (!elems) {goto out;for (i = 0 ; i < elems->ttlm_num; i++) {if (ieee80211_parse_neg_ttlm(sdata, elems->ttlm[i],1 )) {goto out;if (!elems->ttlm_num ||2 && direction[0 ] == direction[1 ])) {goto out;for (i = 0 ; i < IEEE80211_TTLM_NUM_TIDS; i++) {if ((neg_ttlm.downlink[i] &&goto out;if (ttlm_res != NEG_TTLM_RES_ACCEPT)goto out;void ieee80211_process_neg_ttlm_res(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)if (!ieee80211_vif_is_mld(&sdata->vif) ||return ;/* MLD station sends a TID to link mapping request, mainly to handle * BTM ( BSS transition management ) request , in which case it needs to * restrict the active links set . * In this case it ' s not expected that the MLD AP will reject the * negotiated TTLM request . * This can be better implemented in the future , to handle request * rejections . if (le16_to_cpu(mgmt->u.action.u.ttlm_res.status_code) != WLAN_STATUS_SUCCESS)void ieee80211_process_ttlm_teardown(struct ieee80211_sub_if_data *sdata)if (!sdata->vif.neg_ttlm.valid)return ;0 , sizeof (sdata->vif.neg_ttlm));0 ;static void ieee80211_teardown_ttlm_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,void ieee80211_send_teardown_neg_ttlm(struct ieee80211_vif *vif)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);struct ieee80211_local *local = sdata->local;struct ieee80211_mgmt *mgmt;struct sk_buff *skb;int frame_len = offsetofend(struct ieee80211_mgmt,struct ieee80211_tx_info *info;if (!skb)return ;void ieee80211_sta_rx_queued_ext(struct ieee80211_sub_if_data *sdata,struct sk_buff *skb)struct ieee80211_link_data *link = &sdata->deflink;struct ieee80211_rx_status *rx_status;struct ieee80211_hdr *hdr;struct ieee80211_rx_status *) skb->cb;struct ieee80211_hdr *) skb->data;switch (fc & IEEE80211_FCTL_STYPE) {case IEEE80211_STYPE_S1G_BEACON:break ;void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,struct sk_buff *skb)struct ieee80211_link_data *link = &sdata->deflink;struct ieee80211_rx_status *rx_status;struct ieee802_11_elems *elems;struct ieee80211_mgmt *mgmt;int ies_len;struct ieee80211_rx_status *) skb->cb;struct ieee80211_mgmt *) skb->data;if (rx_status->link_valid) {if (!link)return ;switch (fc & IEEE80211_FCTL_STYPE) {case IEEE80211_STYPE_BEACON:void *)mgmt,break ;case IEEE80211_STYPE_PROBE_RESP:break ;case IEEE80211_STYPE_AUTH:break ;case IEEE80211_STYPE_DEAUTH:break ;case IEEE80211_STYPE_DISASSOC:break ;case IEEE80211_STYPE_ASSOC_RESP:case IEEE80211_STYPE_REASSOC_RESP:break ;case IEEE80211_STYPE_ACTION:if (!sdata->u.mgd.associated ||break ;switch (mgmt->u.action.category) {case WLAN_CATEGORY_SPECTRUM_MGMT:struct ieee80211_mgmt,if (ies_len < 0 )break ;/* CSA IE cannot be overridden, no need for BSSID */ true , NULL);if (elems && !elems->parse_error) {enum ieee80211_csa_source src =break ;case WLAN_CATEGORY_PUBLIC:case WLAN_CATEGORY_PROTECTED_DUAL_OF_ACTION:struct ieee80211_mgmt,if (ies_len < 0 )break ;/* * extended CSA IE can ' t be overridden , no need for * BSSID true , NULL);if (elems && !elems->parse_error) {enum ieee80211_csa_source src;if (mgmt->u.action.category ==else /* for the handling code pretend it was an IE */ break ;break ;static void ieee80211_sta_timer(struct timer_list *t)struct ieee80211_sub_if_data *sdata =void ieee80211_sta_connection_lost(struct ieee80211_sub_if_data *sdata,bool tx)sizeof (frame_buf), true ,false );static int ieee80211_auth(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_auth_data *auth_data = ifmgd->auth_data;0 ;1 ;0 ;struct ieee80211_prep_tx_info info = {if (WARN_ON_ONCE(!auth_data))return -EINVAL;if (auth_data->tries > IEEE80211_AUTH_MAX_TRIES) {"authentication with %pM timed out\n" ,/* * Most likely AP is not in the range so remove the * bss struct for that AP . return -ETIMEDOUT;if (auth_data->algorithm == WLAN_AUTH_SAE)"send auth to %pM (try %d/%d)\n" ,2 ;if (auth_data->algorithm == WLAN_AUTH_SAE) {if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS))0 , 0 , tx_flags);if (tx_flags == 0 ) {if (auth_data->algorithm == WLAN_AUTH_SAE)else else {true ;return 0 ;static int ieee80211_do_assoc(struct ieee80211_sub_if_data *sdata)struct ieee80211_mgd_assoc_data *assoc_data = sdata->u.mgd.assoc_data;struct ieee80211_local *local = sdata->local;int ret;false ;if (assoc_data->tries > IEEE80211_ASSOC_MAX_TRIES) {"association with %pM timed out\n" ,/* * Most likely AP is not in the range so remove the * bss struct for that AP . return -ETIMEDOUT;"associate with %pM (try %d/%d)\n" ,if (ret)return ret;if (!ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS)) {true ;else {true ;return 0 ;void ieee80211_mgd_conn_tx_status(struct ieee80211_sub_if_data *sdata,bool acked)struct ieee80211_local *local = sdata->local;true ;void ieee80211_sta_work(struct ieee80211_sub_if_data *sdata)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (ifmgd->status_received) {bool status_acked = ifmgd->status_acked;false ;if (ifmgd->auth_data && ieee80211_is_auth(fc)) {if (status_acked) {if (ifmgd->auth_data->algorithm ==else else {1 ;true ;else if (ifmgd->assoc_data &&/* * Update association timeout based on the TX status * for the ( Re ) Association Request frame . Skip this if * we have already processed a ( Re ) Association Response * frame that indicated need for association comeback * at a specific time in the future . This could happen * if the TX status information is delayed enough for * the response to be received and processed first . if (status_acked) {else {1 ;true ;if (ifmgd->auth_data && ifmgd->auth_data->timeout_started &&if (ifmgd->auth_data->done || ifmgd->auth_data->waiting) {/* * ok . . . we waited for assoc or continuation but * userspace didn ' t do it , so kill the auth data false );else if (ieee80211_auth(sdata)) {struct ieee80211_event event = {false );else if (ifmgd->auth_data && ifmgd->auth_data->timeout_started)if (ifmgd->assoc_data && ifmgd->assoc_data->timeout_started &&if ((ifmgd->assoc_data->need_beacon &&struct ieee80211_event event = {else if (ifmgd->assoc_data && ifmgd->assoc_data->timeout_started)if (ifmgd->flags & IEEE80211_STA_CONNECTION_POLL &&int max_tries;if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS))else /* ACK received for nullfunc probing frame */ if (!ifmgd->probe_send_count)else if (ifmgd->nullfunc_failed) {if (ifmgd->probe_send_count < max_tries) {"No ack for nullfunc frame to AP %pM, try %d/%i\n" ,else {"No ack for nullfunc frame to AP %pM, disconnecting.\n" ,false );else if (time_is_after_jiffies(ifmgd->probe_timeout))else if (ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS)) {"Failed to send nullfunc to AP %pM after %dms, disconnecting\n" ,false );else if (ifmgd->probe_send_count < max_tries) {"No probe response from AP %pM after %dms, try %d/%i\n" ,else {/* * We actually lost the connection . . . or did we ? * Let ' s make sure ! "No probe response from AP %pM after %dms, disconnecting.\n" ,false );static bool struct ieee80211_sub_if_data *sdata)/* * In MLO , check the CSA flags ' active ' and ' waiting_bcn ' for all * the links . struct ieee80211_link_data *link;if (!(link->conf->csa_active &&return false ;return true ;static void ieee80211_sta_bcn_mon_timer(struct timer_list *t)struct ieee80211_sub_if_data *sdata =if (ieee80211_is_csa_in_progress(sdata))return ;if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER)return ;false ;static unsigned long struct ieee80211_sub_if_data *sdata)unsigned long latest_timeout = jiffies;unsigned int link_id;struct sta_info *sta;if (!sta)return 0 ;for (link_id = 0 ; link_id < ARRAY_SIZE(sta->link);struct link_sta_info *link_sta;unsigned long timeout;if (!link_sta)continue ;if (time_before(timeout, link_sta->rx_stats.last_rx))/* * latest_timeout holds the timeout of the link * that will expire last among all links in an * non - AP MLD STA . This ensures that the connection * monitor timer is only reset if at least one link * is still active , and it is scheduled to fire at * the latest possible timeout . if (time_after(timeout, latest_timeout))return latest_timeout;static void ieee80211_sta_conn_mon_timer(struct timer_list *t)struct ieee80211_sub_if_data *sdata =struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_local *local = sdata->local;unsigned long latest_timeout;if (ieee80211_is_csa_in_progress(sdata))return ;/* * If latest timeout is after now , then update timer to fire at * the later date , but do not actually probe at this time . if (time_is_after_jiffies(latest_timeout)) {return ;static void ieee80211_sta_monitor_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,false );static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)if (sdata->vif.type == NL80211_IFTYPE_STATION) {/* let's probe the connection once */ if (!ieee80211_hw_check(&sdata->local->hw, CONNECTION_MONITOR))#ifdef CONFIG_PMvoid ieee80211_mgd_quiesce(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (ifmgd->auth_data || ifmgd->assoc_data) {const u8 *ap_addr = ifmgd->auth_data ?/* * If we are trying to authenticate / associate while suspending , * cfg80211 won ' t know and won ' t actually abort those attempts , * thus we need to do that ourselves . false , frame_buf);if (ifmgd->assoc_data)if (ifmgd->auth_data)false );false );/* This is a bit of a hack - we should find a better and more generic * solution to this . Normally when suspending , cfg80211 will in fact * deauthenticate . However , it doesn ' t ( and cannot ) stop an ongoing * auth ( not so important ) or assoc ( this is the problem ) process . * * As a consequence , it can happen that we are in the process of both * associating and suspending , and receive an association response * after cfg80211 has checked if it needs to disconnect , but before * we actually set the flag to drop incoming frames . This will then * cause the workqueue flush to process the association response in * the suspend , resulting in a successful association just before it * tries to remove the interface from the driver , which now though * has a channel context assigned . . . this results in issues . * * To work around this ( for now ) simply deauth here again if we ' re * now connected . if (ifmgd->associated && !sdata->local->wowlan) {struct cfg80211_deauth_request req = {#endif void ieee80211_sta_restart(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;if (!ifmgd->associated)return ;if (sdata->flags & IEEE80211_SDATA_DISCONNECT_RESUME) {"driver requested disconnect after resume\n" );true );return ;if (sdata->flags & IEEE80211_SDATA_DISCONNECT_HW_RESTART) {"driver requested disconnect after hardware restart\n" );true );return ;static void ieee80211_request_smps_mgd_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_link_data *link =struct ieee80211_link_data,static void ieee80211_ml_sta_reconf_timeout(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_sub_if_data *sdata =struct ieee80211_sub_if_data,if (!sdata->u.mgd.reconf.added_links &&return ;"mlo: reconf: timeout: added=0x%x, removed=0x%x\n" ,/* interface setup */ void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;0 );0 );0 );0 ;/* Setup TDLS data */ static void ieee80211_recalc_smps_work(struct wiphy *wiphy,struct wiphy_work *work)struct ieee80211_link_data *link =struct ieee80211_link_data,void ieee80211_mgd_setup_link(struct ieee80211_link_data *link)struct ieee80211_sub_if_data *sdata = link->sdata;struct ieee80211_local *local = sdata->local;unsigned int link_id = link->link_id;1 ;if (local->hw.wiphy->features & NL80211_FEATURE_DYNAMIC_SMPS)else if (sdata->u.mgd.assoc_data)else if (sdata->u.mgd.reconf.add_links_data)else if (!is_valid_ether_addr(link->conf->addr))/* scan finished notification */ void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)struct ieee80211_sub_if_data *sdata;/* Restart STA timers */ if (ieee80211_sdata_running(sdata))static int ieee80211_prep_connection(struct ieee80211_sub_if_data *sdata,struct cfg80211_bss *cbss, s8 link_id,const u8 *ap_mld_addr, bool assoc,struct ieee80211_conn_settings *conn,bool override,unsigned long *userspace_selectors)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_bss *bss = (void *)cbss->priv;struct sta_info *new_sta = NULL;struct ieee80211_link_data *link;bool have_sta = false ;bool mlo;int err;if (link_id >= 0 ) {true ;if (WARN_ON(!ap_mld_addr))return -EINVAL;else {if (WARN_ON(ap_mld_addr))return -EINVAL;0 ;0 ;false ;if (assoc) {if (mlo && !have_sta &&return -EINVAL;0 );if (err)return err;if (WARN_ON(!link)) {goto out_err;if (WARN_ON(!ifmgd->auth_data && !ifmgd->assoc_data)) {goto out_err;/* If a reconfig is happening, bail out */ if (local->in_reconfig) {goto out_err;if (!have_sta) {if (mlo)else if (!new_sta) {goto out_err;/* * Set up the information for the new channel before setting the * new channel . We can ' t - completely race - free - change the basic * rates bitmap and the channel ( sband ) that it refers to , but if * we set it up before we at least avoid calling into the driver ' s * bss_info_changed ( ) method with invalid information ( since we do * call that from changing the channel - only for IDLE and perhaps * some others , but . . . ) . * * So to avoid that , just set up all the new information before the * channel , but tell the driver to apply it only afterwards , since * it might need the new channel for that . if (new_sta) {const struct cfg80211_bss_ies *ies;struct link_sta_info *link_sta;if (WARN_ON(!link_sta)) {goto out_err;if (err) {goto out_err;/* set timing information */ if (ies) {else if (!ieee80211_hw_check(&sdata->local->hw,/* must be non-NULL since beacon IEs were NULL */ 0 ;else {0 ;0 ;0 ;if (new_sta || override) {/* * Only set this if we ' re also going to calculate the AP * settings etc . , otherwise this was set before in a * previous call . Note override is set to % true in assoc * if the settings were changed . if (err) {if (new_sta)goto out_err;/* pass out for use in assoc */ if (new_sta) {/* * tell driver about BSSID , basic rates and timing * this was set up above , before setting the channel if (assoc)if (err) {"failed to insert STA entry for the AP (error %d)\n" ,goto out_release_chan;else /* Cancel scan to ensure that nothing interferes with connection */ if (local->scanning)return 0 ;0 , 0 );return err;static bool ieee80211_mgd_csa_present(struct ieee80211_sub_if_data *sdata,const struct cfg80211_bss_ies *ies,bool ignore_ecsa)const struct element *csa_elem, *ecsa_elem;struct ieee80211_channel_sw_ie *csa = NULL;struct ieee80211_ext_chansw_ie *ecsa = NULL;if (!ies)return false ;if (csa_elem && csa_elem->datalen == sizeof (*csa))void *)csa_elem->data;if (ecsa_elem && ecsa_elem->datalen == sizeof (*ecsa))void *)ecsa_elem->data;if (csa && csa->count == 0 )if (csa && !csa->mode && csa->new_ch_num == cur_channel)if (ecsa && ecsa->count == 0 )if (ecsa && !ecsa->mode && ecsa->new_ch_num == cur_channel)if (ignore_ecsa && ecsa) {"Ignoring ECSA in probe response - was considered stuck!\n" );return csa;return csa || ecsa;static bool ieee80211_mgd_csa_in_process(struct ieee80211_sub_if_data *sdata,struct cfg80211_bss *bss)bool ret;if (ieee80211_mgd_csa_present(sdata,false )) {true ;goto out;if (ieee80211_mgd_csa_present(sdata,true ;goto out;false ;return ret;static void ieee80211_parse_cfg_selectors(unsigned long *userspace_selectors,const u8 *supported_selectors,if (supported_selectors) {for (int i = 0 ; i < supported_selectors_len; i++) {else {/* Assume SAE_H2E support for backward compatibility. */ /* config hooks */ int ieee80211_mgd_auth(struct ieee80211_sub_if_data *sdata,struct cfg80211_auth_request *req)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_auth_data *auth_data;struct ieee80211_conn_settings conn;struct ieee80211_link_data *link;struct ieee80211_supported_band *sband;struct ieee80211_bss *bss;int err;bool cont_auth, wmm_used;/* prepare auth data structure */ switch (req->auth_type) {case NL80211_AUTHTYPE_OPEN_SYSTEM:break ;case NL80211_AUTHTYPE_SHARED_KEY:if (fips_enabled)return -EOPNOTSUPP;break ;case NL80211_AUTHTYPE_FT:break ;case NL80211_AUTHTYPE_NETWORK_EAP:break ;case NL80211_AUTHTYPE_SAE:break ;case NL80211_AUTHTYPE_FILS_SK:break ;case NL80211_AUTHTYPE_FILS_SK_PFS:break ;case NL80211_AUTHTYPE_FILS_PK:break ;default :return -EOPNOTSUPP;if (ifmgd->assoc_data)return -EBUSY;if (ieee80211_mgd_csa_in_process(sdata, req->bss)) {"AP is in CSA process, reject auth\n" );return -EINVAL;sizeof (*auth_data) + req->auth_data_len +if (!auth_data)return -ENOMEM;if (req->auth_data_len >= 4 ) {if (req->auth_type == NL80211_AUTHTYPE_SAE) {0 ]);1 ]);4 ,4 );4 ;/* Check if continuing authentication or trying to authenticate with the * same BSS that we were in the process of authenticating with and avoid * removal and re - addition of the STA entry in * ieee80211_prep_connection ( ) . if (req->ie && req->ie_len) {if (req->key && req->key_len) {/* try to authenticate/probe */ if (ifmgd->auth_data) {if (cont_auth && req->auth_type == NL80211_AUTHTYPE_SAE) {/* prep auth_data so we don't go into idle on disassoc */ /* If this is continuation of an ongoing SAE authentication exchange * ( i . e . , request to send SAE Confirm ) and the peer has already * confirmed , mark authentication completed since we are about to send * out SAE Confirm . if (cont_auth && req->auth_type == NL80211_AUTHTYPE_SAE &&2 )if (ifmgd->associated) {"disconnect from AP %pM for new auth to %pM\n" ,false , frame_buf);sizeof (frame_buf), true ,false );/* needed for transmitting the auth frame(s) properly */ void *)req->bss->priv;false ,if (err)goto err_clear;if (req->link_id >= 0 )else if (WARN_ON(!link)) {goto err_clear;"authenticate with %pM (local address=%pM)\n" ,if (err) {goto err_clear;/* hold our own reference */ return 0 ;if (!ieee80211_vif_is_mld(&sdata->vif)) {return err;static void struct ieee80211_sub_if_data *sdata,struct ieee80211_mgd_assoc_data *assoc_data,struct cfg80211_assoc_request *req,struct ieee80211_conn_settings *conn,unsigned int link_id)struct ieee80211_local *local = sdata->local;const struct cfg80211_bss_ies *bss_ies;struct ieee80211_supported_band *sband;struct ieee80211_link_data *link;struct cfg80211_bss *cbss;struct ieee80211_bss *bss;if (WARN_ON(!cbss))return ;void *)cbss->priv;if (WARN_ON(!sband))return ;if (WARN_ON(!link))return ;/* for MLO connections assume advertising all rates is OK */ if (!req->ap_mld_addr) {/* copy and link elems for the STA profile */ if (req->links[link_id].elems_len) {false ;0 ;false ;/* override HT configuration only if the AP and we support it */ if (conn->mode >= IEEE80211_CONN_MODE_HT) {struct ieee80211_sta_ht_cap sta_ht_cap;sizeof (sta_ht_cap));if (bss_ies) {0 ;true ;if (ieee80211_hw_check(&local->hw, TIMING_BEACON_ONLY)) {else {if (bss_ies) {const struct element *elem;if (elem && elem->datalen >= 3 )2 ];else 0 ;if (elem && elem->datalen >= 11 &&10 ] & WLAN_EXT_CAPA11_EMA_SUPPORT))true ;else false ;if (bss->corrupt_data) {char *corrupt_type = "data" ;if (bss->corrupt_data & IEEE80211_BSS_CORRUPT_BEACON) {if (bss->corrupt_data & IEEE80211_BSS_CORRUPT_PROBE_RESP)"beacon and probe response" ;else "beacon" ;else if (bss->corrupt_data & IEEE80211_BSS_CORRUPT_PROBE_RESP) {"probe response" ;"associating to AP %pM with corrupt %s\n" ,if (link->u.mgd.req_smps == IEEE80211_SMPS_AUTOMATIC) {if (sdata->u.mgd.powersave)else else {static int struct ieee80211_sub_if_data *sdata,struct ieee80211_mgd_assoc_data *assoc_data,int link_id)struct cfg80211_bss *cbss = assoc_data->link[link_id].bss;enum nl80211_band band = cbss->channel->band;struct ieee80211_supported_band *sband;const struct element *elem;int err;/* neither HT nor VHT elements used on 6 GHz */ if (band == NL80211_BAND_6GHZ)return 0 ;if (assoc_data->link[link_id].conn.mode < IEEE80211_CONN_MODE_HT)return 0 ;if (!elem || elem->datalen < sizeof (struct ieee80211_ht_operation)) {"no HT operation on BSS %pM\n" ,goto out_rcu;struct ieee80211_ht_operation *)(elem->data))->ht_param;if (assoc_data->link[link_id].conn.mode < IEEE80211_CONN_MODE_VHT)return 0 ;/* some drivers want to support VHT on 2.4 GHz even */ if (!sband->vht_cap.vht_supported)return 0 ;/* but even then accept it not being present on the AP */ if (!elem && band == NL80211_BAND_2GHZ) {0 ;goto out_rcu;if (!elem || elem->datalen < sizeof (struct ieee80211_vht_cap)) {"no VHT capa on BSS %pM\n" ,goto out_rcu;sizeof (struct ieee80211_vht_cap));return 0 ;return err;static bool struct cfg80211_assoc_request *req)const struct cfg80211_bss_ies *ies;struct cfg80211_bss *bss;const struct element *ml;/* not an MLO connection if link_id < 0, so irrelevant */ if (req->link_id < 0 )return false ;const struct ieee80211_multi_link_elem *mle;if (!ieee80211_mle_type_ok(ml->data + 1 ,1 ))continue ;void *)(ml->data + 1 );if (mle->control & cpu_to_le16(IEEE80211_MLC_BASIC_PRES_EXT_MLD_CAPA_OP))return true ;return false ;int ieee80211_mgd_assoc(struct ieee80211_sub_if_data *sdata,struct cfg80211_assoc_request *req)unsigned int assoc_link_id = req->link_id < 0 ? 0 : req->link_id;struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_assoc_data *assoc_data;const struct element *ssid_elem;struct ieee80211_vif_cfg *vif_cfg = &sdata->vif.cfg;struct ieee80211_link_data *link;struct cfg80211_bss *cbss;bool override, uapsd_supported;bool match_auth;int i, err;sizeof (*assoc_data) + req->ie_len;for (i = 0 ; i < IEEE80211_MLD_MAX_NUM_LINKS; i++)/* FIXME: no support for 4-addr MLO yet */ if (sdata->u.mgd.use_4addr && req->link_id >= 0 )return -EOPNOTSUPP;if (!assoc_data)return -ENOMEM;0 ? req->bss : req->links[req->link_id].bss;if (ieee80211_mgd_csa_in_process(sdata, cbss)) {"AP is in CSA process, reject assoc\n" );goto err_free;if (!ssid_elem || ssid_elem->datalen > sizeof (assoc_data->ssid)) {goto err_free;if (req->ap_mld_addr)else /* * Many APs have broken parsing of the extended MLD capa / ops field , * dropping ( re - ) association request frames or replying with association * response with a failure status if it ' s present . * Set our value from the userspace request only in strict mode or if * the AP also had that field present . if (ieee80211_hw_check(&local->hw, STRICT) ||if (ifmgd->associated) {"disconnect from AP %pM for new assoc to %pM\n" ,false , frame_buf);sizeof (frame_buf), true ,false );0 ,sizeof (sdata->u.mgd.userspace_selectors));sizeof (ifmgd->ht_capa));sizeof (ifmgd->ht_capa_mask));sizeof (ifmgd->vht_capa));sizeof (ifmgd->vht_capa_mask));sizeof (ifmgd->s1g_capa));sizeof (ifmgd->s1g_capa_mask));/* keep some setup (AP STA, channel, ...) if matching */ if (req->ap_mld_addr) {true ;if (req->flags & (ASSOC_REQ_DISABLE_HT |goto err_free;for (i = 0 ; i < IEEE80211_MLD_MAX_NUM_LINKS; i++) {struct ieee80211_supported_band *sband;struct cfg80211_bss *link_cbss = req->links[i].bss;struct ieee80211_bss *bss;if (!link_cbss)continue ;void *)link_cbss->priv;if (!bss->wmm_used) {goto err_free;if (link_cbss->channel->band == NL80211_BAND_S1GHZ) {goto err_free;if (link)else if (match_auth && i == assoc_link_id && link)else true , i,if (!bss->uapsd_supported)false ;if (assoc_data->link[i].conn.mode < IEEE80211_CONN_MODE_EHT) {goto err_free;if (err) {goto err_free;true ;else {struct ieee80211_supported_band *sband;struct ieee80211_bss *bss = (void *)cbss->priv;0 ].addr, sdata->vif.addr, ETH_ALEN);if (cbss->channel->band == NL80211_BAND_6GHZ &&goto err_free;0 ].bss = cbss;if (match_auth)0 ].conn = sdata->deflink.u.mgd.conn;else 0 ].conn =0 ,0 ].conn);0 );if (err)goto err_free;if (ifmgd->auth_data && !ifmgd->auth_data->done) {goto err_free;if (ifmgd->assoc_data) {goto err_free;/* Cleanup is delayed if auth_data matches */ if (ifmgd->auth_data && !match_auth)false );if (req->ie && req->ie_len) {else {if (req->fils_kek) {/* should already be checked in cfg80211 - so warn */ if (WARN_ON(req->fils_kek_len > FILS_MAX_KEK_LEN)) {goto err_free;if (req->fils_nonces)2 * FILS_NONCE_LEN);/* default timeout */ true ;if (req->ap_mld_addr) {/* if there was no authentication, set up the link */ 0 );if (err)goto err_clear;if (WARN_ON(!link)) {goto err_clear;if (WARN((sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_UAPSD) &&"U-APSD not supported with HW_PS_NULLFUNC_STACK\n" ))if (assoc_data->wmm && uapsd_supported &&true ;else {false ;if (req->prev_bssid)if (req->use_mfp) {else {if (req->flags & ASSOC_REQ_USE_RRM)else if (req->crypto.control_port)else /* kick off associate process */ for (i = 0 ; i < ARRAY_SIZE(assoc_data->link); i++) {if (!assoc_data->link[i].bss)continue ;if (i == assoc_data->assoc_link_id)continue ;/* only calculate the mode, hence link == NULL */ true ,if (err) {goto err_clear;/* needed for transmitting the assoc frames properly */ true ,if (err)goto err_clear;if (ieee80211_hw_check(&sdata->local->hw, NEED_DTIM_BEFORE_ASSOC)) {const struct cfg80211_bss_ies *beacon_ies;if (!beacon_ies) {/* * Wait up to one beacon interval . . . * should this be more if we miss one ? "waiting for beacon from %pM\n" ,true ;true ;/* We are associating, clean up auth_data */ if (ifmgd->auth_data)true );return 0 ;if (!ifmgd->auth_data) {return err;int ieee80211_mgd_deauth(struct ieee80211_sub_if_data *sdata,struct cfg80211_deauth_request *req)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;bool tx = !req->local_state_change;struct ieee80211_prep_tx_info info = {if (ifmgd->auth_data &&"aborting authentication with %pM by local choice (Reason: %u=%s)\n" ,false );sizeof (frame_buf), true ,false );return 0 ;if (ifmgd->assoc_data &&"aborting association with %pM by local choice (Reason: %u=%s)\n" ,sizeof (frame_buf), true ,false );return 0 ;if (ifmgd->associated &&"deauthenticating from %pM by local choice (Reason: %u=%s)\n" ,sizeof (frame_buf), true ,false );return 0 ;return -ENOTCONN;int ieee80211_mgd_disassoc(struct ieee80211_sub_if_data *sdata,struct cfg80211_disassoc_request *req)if (!sdata->u.mgd.associated ||return -ENOTCONN;"disassociating from %pM by local choice (Reason: %u=%s)\n" ,sizeof (frame_buf), true ,false );return 0 ;void ieee80211_mgd_stop_link(struct ieee80211_link_data *link)void ieee80211_mgd_stop(struct ieee80211_sub_if_data *sdata)struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;/* * Make sure some work items will not run after this , * they will not do anything but might not have been * cancelled when disconnecting . if (ifmgd->assoc_data)if (ifmgd->auth_data)false );if (ifmgd->teardown_skb) {0 ;void ieee80211_cqm_rssi_notify(struct ieee80211_vif *vif,enum nl80211_cqm_rssi_threshold_event rssi_event,struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);void ieee80211_cqm_beacon_loss_notify(struct ieee80211_vif *vif, gfp_t gfp)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,int rssi_min_thold,int rssi_max_thold)if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))return ;/* * Scale up threshold values before storing it , as the RSSI averaging * algorithm uses a scaled up value as well . Change this scaling * factor if the RSSI averaging algorithm changes . 16 ;16 ;void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,int rssi_min_thold,int rssi_max_thold)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);0 , 0 );void ieee80211_process_ml_reconf_resp(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee80211_local *local = sdata->local;struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;struct ieee80211_mgd_assoc_data *add_links_data =struct sta_info *sta;struct cfg80211_mlo_reconf_done_data done_data = {};unsigned int link_id;if (!ieee80211_vif_is_mld(&sdata->vif) ||return ;/* each status duple is 3 octets */ if (len < mgmt->u.action.u.ml_reconf_resp.count * 3 ) {"mlo: reconf: unexpected len=%zu, count=%u\n" ,goto disconnect;for (i = 0 ; i < mgmt->u.action.u.ml_reconf_resp.count; i++) {1 );if (!(link_mask & BIT(link_id))) {"mlo: reconf: unexpected link: %u, changed=0x%x\n" ,goto disconnect;/* clear the corresponding link, to detect the case that * the same link was included more than one time /* Handle failure to remove links here. Failure to remove added * links will be done later in the flow . if (status != WLAN_STATUS_SUCCESS) {"mlo: reconf: failed on link=%u, status=%u\n" ,/* The AP MLD failed to remove a link that was already * removed locally . As this is not expected behavior , * disconnect if (sdata->u.mgd.reconf.removed_links & BIT(link_id))goto disconnect;/* The AP MLD failed to add a link. Remove it from the * added links . 3 ;3 ;if (link_mask) {"mlo: reconf: no response for links=0x%x\n" ,goto disconnect;if (!sdata->u.mgd.reconf.added_links)goto out;if (len < 1 || len < 1 + *pos) {"mlo: reconf: invalid group key data length" );goto disconnect;/* The Group Key Data field must be present when links are added. This * field should be processed by userland . 1 ;/* Process the information for the added links */ if (WARN_ON(!sta))goto disconnect;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {if (!add_links_data->link[link_id].bss ||continue ;if (ieee80211_sta_allocate_link(sta, link_id))goto disconnect;0 ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct cfg80211_bss *cbss = add_links_data->link[link_id].bss;struct ieee80211_link_data *link;struct link_sta_info *link_sta;0 ;if (!cbss)continue ;if (WARN_ON(!link))goto disconnect;"mlo: reconf: local address %pM, AP link address %pM\n" ,if (WARN_ON(!link_sta))goto disconnect;if (!link->u.mgd.have_beacon) {const struct cfg80211_bss_ies *ies;if (ies)true ;else 1 ;if (ieee80211_prep_channel(sdata, link, link_id, cbss,true , &link->u.mgd.conn,"mlo: reconf: prep_channel failed\n" );goto disconnect;if (ieee80211_mgd_setup_link_sta(link, sta, link_sta,goto disconnect;if (!ieee80211_assoc_config_link(link, link_sta,goto disconnect;/* The AP MLD indicated success for this link, but the station * profile status indicated otherwise . Since there is an * inconsistency in the ML reconfiguration response , disconnect if (add_links_data->link[link_id].status != WLAN_STATUS_SUCCESS)goto disconnect;if (ieee80211_sta_activate_link(sta, link_id))goto disconnect;"mlo: reconf: current valid_links=0x%x, added=0x%x\n" ,/* links might have changed due to rejected ones, set them again */ const u8 *)mgmt;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {return ;static struct sk_buff *struct ieee80211_sub_if_data *sdata,struct ieee80211_mgd_assoc_data *add_links_data,struct ieee80211_local *local = sdata->local;struct ieee80211_mgmt *mgmt;struct ieee80211_multi_link_elem *ml_elem;struct ieee80211_mle_basic_common_info *common;enum nl80211_iftype iftype = ieee80211_vif_type_p2p(&sdata->vif);struct sk_buff *skb;unsigned int link_id;0 , mld_capa_ops = 0 ;struct ieee80211_tx_info *info;0 ;sizeof (*mgmt);/* Consider the maximal length of the reconfiguration ML element */ sizeof (struct ieee80211_multi_link_elem);/* The Basic ML element and the Reconfiguration ML element have the same * fixed common information fields in the context of ML reconfiguration * action frame . The AP MLD MAC address must always be present sizeof (*common);/* when adding links, the MLD capabilities must be present */ 0 ;if (add_links_data) {const struct wiphy_iftype_ext_capab *ift_ext_capa =if (ift_ext_capa) {/* MLD capabilities and operation */ 2 ;/* EML capabilities */ if (eml_capa & cpu_to_le16((IEEE80211_EML_CAP_EMLSR_SUPP |2 ;if (ext_mld_capa_ops)2 ;/* Add the common information length */ for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {struct cfg80211_bss *cbss;if (removed_links & BIT(link_id)) {sizeof (struct ieee80211_mle_per_sta_profile) +continue ;if (!add_links_data || !add_links_data->link[link_id].bss)continue ;/* should be the same across all BSSes */ if (cbss->capability & WLAN_CAPABILITY_PRIVACY)2 + sizeof (struct ieee80211_mle_per_sta_profile) +/* WMM */ 9 ;if (!skb)return NULL;struct ieee80211_mgmt,/* Add the MAC header */ /* Add the action frame fixed fields */ /* allocate a dialog token and store it */ /* Add the ML reconfiguration element and the common information */ 1 );sizeof (*ml_elem));if (add_links_data) {if (eml_capa &sizeof (eml_capa));sizeof (mld_capa_ops));if (ext_mld_capa_ops) {sizeof (ext_mld_capa_ops));if (sdata->u.mgd.flags & IEEE80211_STA_ENABLE_RRM)/* Add the per station profile */ for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {const u8 *addr;/* Skip links that are not changing */ if (!(removed_links & BIT(link_id)) &&continue ;if (removed_links & BIT(link_id)) {struct ieee80211_bss_conf *conf =if (!conf)continue ;else {1 );sizeof (ctrl)));1 + ETH_ALEN);if (!(removed_links & BIT(link_id))) {void *capab_pos;2 );if (add_links_data->link[link_id].elems)if (sdata->u.mgd.flags & IEEE80211_STA_UAPSD_ENABLED) {else {0 ;9 ), qos_info);return skb;int ieee80211_mgd_assoc_ml_reconf(struct ieee80211_sub_if_data *sdata,struct cfg80211_ml_reconf_req *req)struct ieee80211_local *local = sdata->local;struct ieee80211_mgd_assoc_data *data = NULL;struct sta_info *sta;struct sk_buff *skb;int link_id, err;if (!ieee80211_vif_is_mld(&sdata->vif) ||return -EINVAL;/* No support for concurrent ML reconfiguration operation */ if (sdata->u.mgd.reconf.added_links ||return -EBUSY;0 ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS; link_id++) {if (!req->add_links[link_id].bss)continue ;if (WARN_ON(!sta))return -ENOLINK;/* Adding links to the set of valid link is done only after a successful * ML reconfiguration frame exchange . Here prepare the data for the ML * reconfiguration frame construction and allocate the required * resources if (added_links) {bool uapsd_supported;sizeof (*data), GFP_KERNEL);if (!data)return -ENOMEM;1 ;true ;true ;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS;struct ieee80211_supported_band *sband;struct cfg80211_bss *link_cbss =struct ieee80211_bss *bss;if (!link_cbss)continue ;void *)link_cbss->priv;if (!bss->wmm_used) {goto err_free;if (link_cbss->channel->band == NL80211_BAND_S1GHZ) {goto err_free;true , link_id,if (!bss->uapsd_supported)false ;if (data->link[link_id].conn.mode <goto err_free;if (err) {goto err_free;/* Require U-APSD support if we enabled it */ if (sdata->u.mgd.flags & IEEE80211_STA_UAPSD_ENABLED &&"U-APSD on but not available on (all) new links\n" );goto err_free;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS;if (!data->link[link_id].bss)continue ;/* only used to verify the mode, nothing is allocated */ true ,if (err)goto err_free;/* link removal is done before the ML reconfiguration frame exchange so * that these links will not be used between their removal by the AP MLD * and before the station got the ML reconfiguration response . Based on * Section 35 . 3 . 6 . 4 in Draft P802 . 11 be_D7 . 0 the AP MLD should accept the * link removal request . if (req->rem_links) {/* Should not be left with no valid links to perform the * ML reconfiguration if (!new_valid_links ||"mlo: reconf: no valid links\n" );goto err_free;if (new_active_links != sdata->vif.active_links) {if (!new_active_links)if (err) {"mlo: reconf: failed set active links\n" );goto err_free;/* Build the SKB before the link removal as the construction of the * station info for removed links requires the local address . * Invalidate the removed links , so that the transmission of the ML * reconfiguration request frame would not be done using them , as the AP * is expected to send the ML reconfiguration response frame on the link * on which the request was received . if (!skb) {goto err_free;if (req->rem_links) {if (err) {"mlo: reconf: failed set valid links\n" );goto err_free;for (link_id = 0 ; link_id < IEEE80211_MLD_MAX_NUM_LINKS;if (!(req->rem_links & BIT(link_id)))continue ;/* notify the driver and upper layers */ "mlo: reconf: adding=0x%x, removed=0x%x\n" ,return 0 ;return err;static bool ieee80211_mgd_epcs_supp(struct ieee80211_sub_if_data *sdata)unsigned long valid_links = sdata->vif.valid_links;if (!ieee80211_vif_is_mld(&sdata->vif))return false ;struct ieee80211_bss_conf *bss_conf =if (WARN_ON(!bss_conf) || !bss_conf->epcs_support)return false ;return true ;int ieee80211_mgd_set_epcs(struct ieee80211_sub_if_data *sdata, bool enable)struct ieee80211_local *local = sdata->local;struct ieee80211_mgmt *mgmt;struct sk_buff *skb;int frame_len = offsetofend(struct ieee80211_mgmt,1 : 0 );if (!ieee80211_mgd_epcs_supp(sdata))return -EINVAL;if (sdata->u.mgd.epcs.enabled == enable &&return 0 ;/* Do not allow enabling EPCS if the AP didn't respond yet. * However , allow disabling EPCS in such a case . if (sdata->u.mgd.epcs.dialog_token && enable)return -EALREADY;if (!skb)return -ENOBUFS;if (enable) {else {false );return 0 ;static void ieee80211_ml_epcs(struct ieee80211_sub_if_data *sdata,struct ieee802_11_elems *elems)const struct element *sub;if (!ieee80211_vif_is_mld(&sdata->vif) || !elems->ml_epcs)return ;if (WARN_ON(!scratch))return ;/* Directly parse the sub elements as the common information doesn't * hold any useful information . const u8 *)elems->ml_epcs,struct ieee802_11_elems *link_elems __free(kfree) = NULL;struct ieee80211_link_data *link;void *)sub->data;if (sub->id != IEEE80211_MLE_SUBELEM_PER_STA_PROFILE)continue ;if (sub->datalen < sizeof (control))break ;if (!link)continue ;if (len < (ssize_t)sizeof (control))continue ;sizeof (control);sizeof (control);false , NULL);if (!link_elems)continue ;if (ieee80211_sta_wmm_params(sdata->local, link,void ieee80211_process_epcs_ena_resp(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)struct ieee802_11_elems *elems __free(kfree) = NULL;if (!ieee80211_mgd_epcs_supp(sdata))return ;/* Handle dialog token and status code */ 1 );/* An EPCS enable response with dialog token == 0 is an unsolicited * notification from the AP MLD . In such a case , EPCS should already be * enabled and status must be success if (!dialog_token &&return ;if (sdata->u.mgd.epcs.dialog_token != dialog_token)return ;0 ;if (status_code != WLAN_STATUS_SUCCESS)return ;struct ieee80211_mgmt,true , NULL);if (!elems)return ;true );void ieee80211_process_epcs_teardown(struct ieee80211_sub_if_data *sdata,struct ieee80211_mgmt *mgmt, size_t len)if (!ieee80211_vif_is_mld(&sdata->vif) ||return ;false );
Messung V0.5 in Prozent C=97 H=90 G=93
¤ Diese beiden folgenden Angebotsgruppen bietet das Unternehmen0.540Angebot
(Wie Sie bei der Firma Beratungs- und Dienstleistungen beauftragen können 2026-09-27)
¤ *Eine klare Vorstellung vom Zielzustand
