11a1e1d21SSam Leffler /*- 27535e66aSSam Leffler * Copyright (c) 2001 Atsushi Onoe 310ad9a77SSam Leffler * Copyright (c) 2002-2009 Sam Leffler, Errno Consulting 41a1e1d21SSam Leffler * All rights reserved. 51a1e1d21SSam Leffler * 61a1e1d21SSam Leffler * Redistribution and use in source and binary forms, with or without 71a1e1d21SSam Leffler * modification, are permitted provided that the following conditions 81a1e1d21SSam Leffler * are met: 91a1e1d21SSam Leffler * 1. Redistributions of source code must retain the above copyright 107535e66aSSam Leffler * notice, this list of conditions and the following disclaimer. 117535e66aSSam Leffler * 2. Redistributions in binary form must reproduce the above copyright 127535e66aSSam Leffler * notice, this list of conditions and the following disclaimer in the 137535e66aSSam Leffler * documentation and/or other materials provided with the distribution. 141a1e1d21SSam Leffler * 157535e66aSSam Leffler * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 167535e66aSSam Leffler * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 177535e66aSSam Leffler * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 187535e66aSSam Leffler * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 197535e66aSSam Leffler * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 207535e66aSSam Leffler * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 217535e66aSSam Leffler * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 227535e66aSSam Leffler * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 237535e66aSSam Leffler * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 247535e66aSSam Leffler * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 251a1e1d21SSam Leffler */ 261a1e1d21SSam Leffler 271a1e1d21SSam Leffler #include <sys/cdefs.h> 281a1e1d21SSam Leffler __FBSDID("$FreeBSD$"); 291a1e1d21SSam Leffler 30b032f27cSSam Leffler #include "opt_wlan.h" 31b032f27cSSam Leffler 321a1e1d21SSam Leffler #include <sys/param.h> 331a1e1d21SSam Leffler #include <sys/systm.h> 341a1e1d21SSam Leffler #include <sys/mbuf.h> 351a1e1d21SSam Leffler #include <sys/malloc.h> 361a1e1d21SSam Leffler #include <sys/kernel.h> 371a1e1d21SSam Leffler 388a1b9b6aSSam Leffler #include <sys/socket.h> 391a1e1d21SSam Leffler 401a1e1d21SSam Leffler #include <net/if.h> 411a1e1d21SSam Leffler #include <net/if_media.h> 421a1e1d21SSam Leffler #include <net/ethernet.h> 431a1e1d21SSam Leffler 441a1e1d21SSam Leffler #include <net80211/ieee80211_var.h> 45b032f27cSSam Leffler #include <net80211/ieee80211_input.h> 4610ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 4710ad9a77SSam Leffler #include <net80211/ieee80211_tdma.h> 4810ad9a77SSam Leffler #endif 49b032f27cSSam Leffler #include <net80211/ieee80211_wds.h> 501a1e1d21SSam Leffler 511a1e1d21SSam Leffler #include <net/bpf.h> 521a1e1d21SSam Leffler 537268fa64SSam Leffler /* 547268fa64SSam Leffler * Association id's are managed with a bit vector. 557268fa64SSam Leffler */ 56b032f27cSSam Leffler #define IEEE80211_AID_SET(_vap, b) \ 57b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] |= \ 58b032f27cSSam Leffler (1 << (IEEE80211_AID(b) % 32))) 59b032f27cSSam Leffler #define IEEE80211_AID_CLR(_vap, b) \ 60b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] &= \ 61b032f27cSSam Leffler ~(1 << (IEEE80211_AID(b) % 32))) 62b032f27cSSam Leffler #define IEEE80211_AID_ISSET(_vap, b) \ 63b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] & (1 << (IEEE80211_AID(b) % 32))) 647268fa64SSam Leffler 65132142c5SDiomidis Spinellis #ifdef IEEE80211_DEBUG_REFCNT 66132142c5SDiomidis Spinellis #define REFCNT_LOC "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line 67132142c5SDiomidis Spinellis #else 68132142c5SDiomidis Spinellis #define REFCNT_LOC "%s %p<%s> refcnt %d\n", __func__ 69132142c5SDiomidis Spinellis #endif 70132142c5SDiomidis Spinellis 7168e8e04eSSam Leffler static int ieee80211_sta_join1(struct ieee80211_node *); 7268e8e04eSSam Leffler 7338c208f8SSam Leffler static struct ieee80211_node *node_alloc(struct ieee80211vap *, 7438c208f8SSam Leffler const uint8_t [IEEE80211_ADDR_LEN]); 758a1b9b6aSSam Leffler static void node_cleanup(struct ieee80211_node *); 768a1b9b6aSSam Leffler static void node_free(struct ieee80211_node *); 77b032f27cSSam Leffler static void node_age(struct ieee80211_node *); 7868e8e04eSSam Leffler static int8_t node_getrssi(const struct ieee80211_node *); 7968e8e04eSSam Leffler static void node_getsignal(const struct ieee80211_node *, int8_t *, int8_t *); 80b032f27cSSam Leffler static void node_getmimoinfo(const struct ieee80211_node *, 81b032f27cSSam Leffler struct ieee80211_mimo_info *); 821a1e1d21SSam Leffler 838a1b9b6aSSam Leffler static void _ieee80211_free_node(struct ieee80211_node *); 848a1b9b6aSSam Leffler 858a1b9b6aSSam Leffler static void ieee80211_node_table_init(struct ieee80211com *ic, 86c1225b52SSam Leffler struct ieee80211_node_table *nt, const char *name, 8768e8e04eSSam Leffler int inact, int keymaxix); 88b032f27cSSam Leffler static void ieee80211_node_table_reset(struct ieee80211_node_table *, 89b032f27cSSam Leffler struct ieee80211vap *); 908a1b9b6aSSam Leffler static void ieee80211_node_table_cleanup(struct ieee80211_node_table *nt); 91b105a069SSam Leffler static void ieee80211_erp_timeout(struct ieee80211com *); 921a1e1d21SSam Leffler 9332346d60SSam Leffler MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state"); 94b032f27cSSam Leffler MALLOC_DEFINE(M_80211_NODE_IE, "80211nodeie", "802.11 node ie"); 9537c150c4SSam Leffler 961a1e1d21SSam Leffler void 978a1b9b6aSSam Leffler ieee80211_node_attach(struct ieee80211com *ic) 981a1e1d21SSam Leffler { 99b032f27cSSam Leffler ieee80211_node_table_init(ic, &ic->ic_sta, "station", 100b032f27cSSam Leffler IEEE80211_INACT_INIT, ic->ic_max_keyix); 101b032f27cSSam Leffler callout_init(&ic->ic_inact, CALLOUT_MPSAFE); 102b032f27cSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 103b032f27cSSam Leffler ieee80211_node_timeout, ic); 1041a1e1d21SSam Leffler 1058a1b9b6aSSam Leffler ic->ic_node_alloc = node_alloc; 1068a1b9b6aSSam Leffler ic->ic_node_free = node_free; 1078a1b9b6aSSam Leffler ic->ic_node_cleanup = node_cleanup; 108b032f27cSSam Leffler ic->ic_node_age = node_age; 109b032f27cSSam Leffler ic->ic_node_drain = node_age; /* NB: same as age */ 1108a1b9b6aSSam Leffler ic->ic_node_getrssi = node_getrssi; 11168e8e04eSSam Leffler ic->ic_node_getsignal = node_getsignal; 112b032f27cSSam Leffler ic->ic_node_getmimoinfo = node_getmimoinfo; 1138a1b9b6aSSam Leffler 114b032f27cSSam Leffler /* 115b032f27cSSam Leffler * Set flags to be propagated to all vap's; 116b032f27cSSam Leffler * these define default behaviour/configuration. 117b032f27cSSam Leffler */ 118c066143cSSam Leffler ic->ic_flags_ext |= IEEE80211_FEXT_INACT; /* inactivity processing */ 119c1225b52SSam Leffler } 120c1225b52SSam Leffler 121c1225b52SSam Leffler void 1228a1b9b6aSSam Leffler ieee80211_node_detach(struct ieee80211com *ic) 1231a1e1d21SSam Leffler { 1241a1e1d21SSam Leffler 125b032f27cSSam Leffler callout_drain(&ic->ic_inact); 126acc4f7f5SSam Leffler ieee80211_node_table_cleanup(&ic->ic_sta); 127b032f27cSSam Leffler } 128b032f27cSSam Leffler 129b032f27cSSam Leffler void 130b032f27cSSam Leffler ieee80211_node_vattach(struct ieee80211vap *vap) 131b032f27cSSam Leffler { 132b032f27cSSam Leffler /* NB: driver can override */ 133b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_DEF; 134b032f27cSSam Leffler 135b032f27cSSam Leffler /* default station inactivity timer setings */ 136b032f27cSSam Leffler vap->iv_inact_init = IEEE80211_INACT_INIT; 137b032f27cSSam Leffler vap->iv_inact_auth = IEEE80211_INACT_AUTH; 138b032f27cSSam Leffler vap->iv_inact_run = IEEE80211_INACT_RUN; 139b032f27cSSam Leffler vap->iv_inact_probe = IEEE80211_INACT_PROBE; 140be1054edSSam Leffler 141be1054edSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_INACT, 142be1054edSSam Leffler "%s: init %u auth %u run %u probe %u\n", __func__, 143be1054edSSam Leffler vap->iv_inact_init, vap->iv_inact_auth, 144be1054edSSam Leffler vap->iv_inact_run, vap->iv_inact_probe); 145b032f27cSSam Leffler } 146b032f27cSSam Leffler 147b032f27cSSam Leffler void 148b032f27cSSam Leffler ieee80211_node_latevattach(struct ieee80211vap *vap) 149b032f27cSSam Leffler { 150b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) { 151b032f27cSSam Leffler /* XXX should we allow max aid to be zero? */ 152b032f27cSSam Leffler if (vap->iv_max_aid < IEEE80211_AID_MIN) { 153b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_MIN; 154b032f27cSSam Leffler if_printf(vap->iv_ifp, 155b032f27cSSam Leffler "WARNING: max aid too small, changed to %d\n", 156b032f27cSSam Leffler vap->iv_max_aid); 157b032f27cSSam Leffler } 158e2126decSSam Leffler vap->iv_aid_bitmap = (uint32_t *) malloc( 159c5abbba3SDag-Erling Smørgrav howmany(vap->iv_max_aid, 32) * sizeof(uint32_t), 160b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 161b032f27cSSam Leffler if (vap->iv_aid_bitmap == NULL) { 162b032f27cSSam Leffler /* XXX no way to recover */ 163b032f27cSSam Leffler printf("%s: no memory for AID bitmap, max aid %d!\n", 164b032f27cSSam Leffler __func__, vap->iv_max_aid); 165b032f27cSSam Leffler vap->iv_max_aid = 0; 166b032f27cSSam Leffler } 167b032f27cSSam Leffler } 168b032f27cSSam Leffler 169b032f27cSSam Leffler ieee80211_reset_bss(vap); 170b032f27cSSam Leffler 171b032f27cSSam Leffler vap->iv_auth = ieee80211_authenticator_get(vap->iv_bss->ni_authmode); 172b032f27cSSam Leffler } 173b032f27cSSam Leffler 174b032f27cSSam Leffler void 175b032f27cSSam Leffler ieee80211_node_vdetach(struct ieee80211vap *vap) 176b032f27cSSam Leffler { 177b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 178b032f27cSSam Leffler 179b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 180b032f27cSSam Leffler if (vap->iv_bss != NULL) { 181b032f27cSSam Leffler ieee80211_free_node(vap->iv_bss); 182b032f27cSSam Leffler vap->iv_bss = NULL; 183b032f27cSSam Leffler } 184b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) { 185e2126decSSam Leffler free(vap->iv_aid_bitmap, M_80211_NODE); 186b032f27cSSam Leffler vap->iv_aid_bitmap = NULL; 1878a1b9b6aSSam Leffler } 1888a1b9b6aSSam Leffler } 1898a1b9b6aSSam Leffler 1908a1b9b6aSSam Leffler /* 1918a1b9b6aSSam Leffler * Port authorize/unauthorize interfaces for use by an authenticator. 1928a1b9b6aSSam Leffler */ 1938a1b9b6aSSam Leffler 1948a1b9b6aSSam Leffler void 195e4918ecdSSam Leffler ieee80211_node_authorize(struct ieee80211_node *ni) 1968a1b9b6aSSam Leffler { 197be1054edSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 198be1054edSSam Leffler 1998a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_AUTH; 200be1054edSSam Leffler ni->ni_inact_reload = vap->iv_inact_run; 201c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 202be1054edSSam Leffler 203be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 204be1054edSSam Leffler "%s: inact_reload %u", __func__, ni->ni_inact_reload); 2058a1b9b6aSSam Leffler } 2068a1b9b6aSSam Leffler 2078a1b9b6aSSam Leffler void 208e4918ecdSSam Leffler ieee80211_node_unauthorize(struct ieee80211_node *ni) 2098a1b9b6aSSam Leffler { 210be1054edSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 211be1054edSSam Leffler 2128a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_AUTH; 213be1054edSSam Leffler ni->ni_inact_reload = vap->iv_inact_auth; 214c066143cSSam Leffler if (ni->ni_inact > ni->ni_inact_reload) 215c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 216be1054edSSam Leffler 217be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 218be1054edSSam Leffler "%s: inact_reload %u inact %u", __func__, 219be1054edSSam Leffler ni->ni_inact_reload, ni->ni_inact); 2208a1b9b6aSSam Leffler } 2218a1b9b6aSSam Leffler 2228a1b9b6aSSam Leffler /* 22301a03542SSam Leffler * Fix tx parameters for a node according to ``association state''. 22401a03542SSam Leffler */ 22501a03542SSam Leffler static void 22601a03542SSam Leffler node_setuptxparms(struct ieee80211_node *ni) 22701a03542SSam Leffler { 22801a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 229f76cde95SSam Leffler enum ieee80211_phymode mode; 23001a03542SSam Leffler 23101a03542SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) { 23201a03542SSam Leffler if (IEEE80211_IS_CHAN_5GHZ(ni->ni_chan)) 233f76cde95SSam Leffler mode = IEEE80211_MODE_11NA; 23401a03542SSam Leffler else 235f76cde95SSam Leffler mode = IEEE80211_MODE_11NG; 23601a03542SSam Leffler } else { /* legacy rate handling */ 237f76cde95SSam Leffler /* NB: 108A/108G should be handled as 11a/11g respectively */ 238f76cde95SSam Leffler if (IEEE80211_IS_CHAN_ST(ni->ni_chan)) 239f76cde95SSam Leffler mode = IEEE80211_MODE_STURBO_A; 240f76cde95SSam Leffler else if (IEEE80211_IS_CHAN_A(ni->ni_chan)) 241f76cde95SSam Leffler mode = IEEE80211_MODE_11A; 24201a03542SSam Leffler else if (ni->ni_flags & IEEE80211_NODE_ERP) 243f76cde95SSam Leffler mode = IEEE80211_MODE_11G; 24401a03542SSam Leffler else 245f76cde95SSam Leffler mode = IEEE80211_MODE_11B; 24601a03542SSam Leffler } 247f76cde95SSam Leffler ni->ni_txparms = &vap->iv_txparms[mode]; 24801a03542SSam Leffler } 24901a03542SSam Leffler 25001a03542SSam Leffler /* 2518a1b9b6aSSam Leffler * Set/change the channel. The rate set is also updated as 2528a1b9b6aSSam Leffler * to insure a consistent view by drivers. 253b032f27cSSam Leffler * XXX should be private but hostap needs it to deal with CSA 2548a1b9b6aSSam Leffler */ 255b032f27cSSam Leffler void 256b032f27cSSam Leffler ieee80211_node_set_chan(struct ieee80211_node *ni, 257b032f27cSSam Leffler struct ieee80211_channel *chan) 2588a1b9b6aSSam Leffler { 259b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 26001a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 26101a03542SSam Leffler enum ieee80211_phymode mode; 26268e8e04eSSam Leffler 263b032f27cSSam Leffler KASSERT(chan != IEEE80211_CHAN_ANYC, ("no channel")); 264b032f27cSSam Leffler 2658a1b9b6aSSam Leffler ni->ni_chan = chan; 26601a03542SSam Leffler mode = ieee80211_chan2mode(chan); 26768e8e04eSSam Leffler if (IEEE80211_IS_CHAN_HT(chan)) { 26868e8e04eSSam Leffler /* 26968e8e04eSSam Leffler * XXX Gotta be careful here; the rate set returned by 27068e8e04eSSam Leffler * ieee80211_get_suprates is actually any HT rate 27168e8e04eSSam Leffler * set so blindly copying it will be bad. We must 27268e8e04eSSam Leffler * install the legacy rate est in ni_rates and the 27368e8e04eSSam Leffler * HT rate set in ni_htrates. 27468e8e04eSSam Leffler */ 27568e8e04eSSam Leffler ni->ni_htrates = *ieee80211_get_suphtrates(ic, chan); 27601a03542SSam Leffler /* 27701a03542SSam Leffler * Setup bss tx parameters based on operating mode. We 27801a03542SSam Leffler * use legacy rates when operating in a mixed HT+non-HT bss 27901a03542SSam Leffler * and non-ERP rates in 11g for mixed ERP+non-ERP bss. 28001a03542SSam Leffler */ 28101a03542SSam Leffler if (mode == IEEE80211_MODE_11NA && 28201a03542SSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_PUREN) == 0) 28301a03542SSam Leffler mode = IEEE80211_MODE_11A; 28401a03542SSam Leffler else if (mode == IEEE80211_MODE_11NG && 28501a03542SSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_PUREN) == 0) 28601a03542SSam Leffler mode = IEEE80211_MODE_11G; 28701a03542SSam Leffler if (mode == IEEE80211_MODE_11G && 28801a03542SSam Leffler (vap->iv_flags & IEEE80211_F_PUREG) == 0) 28901a03542SSam Leffler mode = IEEE80211_MODE_11B; 29068e8e04eSSam Leffler } 29101a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[mode]; 29241b3c790SSam Leffler ni->ni_rates = *ieee80211_get_suprates(ic, chan); 2931a1e1d21SSam Leffler } 2941a1e1d21SSam Leffler 295f9cd9174SSam Leffler static __inline void 296f9cd9174SSam Leffler copy_bss(struct ieee80211_node *nbss, const struct ieee80211_node *obss) 297f9cd9174SSam Leffler { 298f9cd9174SSam Leffler /* propagate useful state */ 299f9cd9174SSam Leffler nbss->ni_authmode = obss->ni_authmode; 300f9cd9174SSam Leffler nbss->ni_txpower = obss->ni_txpower; 301f9cd9174SSam Leffler nbss->ni_vlan = obss->ni_vlan; 302f9cd9174SSam Leffler /* XXX statistics? */ 303b032f27cSSam Leffler /* XXX legacy WDS bssid? */ 304f9cd9174SSam Leffler } 305f9cd9174SSam Leffler 3061a1e1d21SSam Leffler void 307b032f27cSSam Leffler ieee80211_create_ibss(struct ieee80211vap* vap, struct ieee80211_channel *chan) 3081a1e1d21SSam Leffler { 309b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 3101a1e1d21SSam Leffler struct ieee80211_node *ni; 3118a1b9b6aSSam Leffler 312b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_SCAN, 313b032f27cSSam Leffler "%s: creating ibss on channel %u\n", __func__, 314b032f27cSSam Leffler ieee80211_chan2ieee(ic, chan)); 3158a1b9b6aSSam Leffler 316b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 317acc4f7f5SSam Leffler if (ni == NULL) { 318acc4f7f5SSam Leffler /* XXX recovery? */ 3198a1b9b6aSSam Leffler return; 3208a1b9b6aSSam Leffler } 321b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 322b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 323b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 324b032f27cSSam Leffler if (vap->iv_bss != NULL) 325b032f27cSSam Leffler copy_bss(ni, vap->iv_bss); 326d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 327b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) 3281a1e1d21SSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY; 3291a1e1d21SSam Leffler if (ic->ic_phytype == IEEE80211_T_FH) { 3301a1e1d21SSam Leffler ni->ni_fhdwell = 200; /* XXX */ 3311a1e1d21SSam Leffler ni->ni_fhindex = 1; 3321a1e1d21SSam Leffler } 333b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 334b032f27cSSam Leffler vap->iv_flags |= IEEE80211_F_SIBSS; 3358a1b9b6aSSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_IBSS; /* XXX */ 336b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 337b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 338fe49f061SSam Leffler else { 339fe49f061SSam Leffler get_random_bytes(ni->ni_bssid, IEEE80211_ADDR_LEN); 340fe49f061SSam Leffler /* clear group bit, add local bit */ 341fe49f061SSam Leffler ni->ni_bssid[0] = (ni->ni_bssid[0] &~ 0x01) | 0x02; 342fe49f061SSam Leffler } 343b032f27cSSam Leffler } else if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 344b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 345b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 34650d8b493SSam Leffler else 34710ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 34810ad9a77SSam Leffler if ((vap->iv_caps & IEEE80211_C_TDMA) == 0) 34910ad9a77SSam Leffler #endif 35050d8b493SSam Leffler memset(ni->ni_bssid, 0, IEEE80211_ADDR_LEN); 3518a1b9b6aSSam Leffler } 3528a1b9b6aSSam Leffler /* 3538a1b9b6aSSam Leffler * Fix the channel and related attributes. 3548a1b9b6aSSam Leffler */ 355b032f27cSSam Leffler /* clear DFS CAC state on previous channel */ 356b032f27cSSam Leffler if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 357b032f27cSSam Leffler ic->ic_bsschan->ic_freq != chan->ic_freq && 358b032f27cSSam Leffler IEEE80211_IS_CHAN_CACDONE(ic->ic_bsschan)) 359b032f27cSSam Leffler ieee80211_dfs_cac_clear(ic, ic->ic_bsschan); 36068e8e04eSSam Leffler ic->ic_bsschan = chan; 361b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 36268e8e04eSSam Leffler ic->ic_curmode = ieee80211_chan2mode(chan); 3638a1b9b6aSSam Leffler /* 364b032f27cSSam Leffler * Do mode-specific setup. 3658a1b9b6aSSam Leffler */ 36668e8e04eSSam Leffler if (IEEE80211_IS_CHAN_FULL(chan)) { 36768e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(chan)) { 36868e8e04eSSam Leffler /* 369b032f27cSSam Leffler * Use a mixed 11b/11g basic rate set. 37068e8e04eSSam Leffler */ 371b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 37268e8e04eSSam Leffler IEEE80211_MODE_11G); 373b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PUREG) { 374b032f27cSSam Leffler /* 375b032f27cSSam Leffler * Also mark OFDM rates basic so 11b 376b032f27cSSam Leffler * stations do not join (WiFi compliance). 377b032f27cSSam Leffler */ 378b032f27cSSam Leffler ieee80211_addbasicrates(&ni->ni_rates, 379b032f27cSSam Leffler IEEE80211_MODE_11A); 380b032f27cSSam Leffler } 38168e8e04eSSam Leffler } else if (IEEE80211_IS_CHAN_B(chan)) { 38268e8e04eSSam Leffler /* 38368e8e04eSSam Leffler * Force pure 11b rate set. 38468e8e04eSSam Leffler */ 385b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 38668e8e04eSSam Leffler IEEE80211_MODE_11B); 38768e8e04eSSam Leffler } 3881a1e1d21SSam Leffler } 3891a1e1d21SSam Leffler 39068e8e04eSSam Leffler (void) ieee80211_sta_join1(ieee80211_ref_node(ni)); 39168e8e04eSSam Leffler } 39268e8e04eSSam Leffler 39368e8e04eSSam Leffler /* 39468e8e04eSSam Leffler * Reset bss state on transition to the INIT state. 39568e8e04eSSam Leffler * Clear any stations from the table (they have been 39668e8e04eSSam Leffler * deauth'd) and reset the bss node (clears key, rate 39768e8e04eSSam Leffler * etc. state). 39868e8e04eSSam Leffler */ 3998a1b9b6aSSam Leffler void 400b032f27cSSam Leffler ieee80211_reset_bss(struct ieee80211vap *vap) 401b4c5a90fSSam Leffler { 402b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 4038a1b9b6aSSam Leffler struct ieee80211_node *ni, *obss; 4048a1b9b6aSSam Leffler 405b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 406b032f27cSSam Leffler /* XXX multi-bss: wrong */ 40768e8e04eSSam Leffler ieee80211_reset_erp(ic); 408acc4f7f5SSam Leffler 409b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 4108a1b9b6aSSam Leffler KASSERT(ni != NULL, ("unable to setup inital BSS node")); 411b032f27cSSam Leffler obss = vap->iv_bss; 412b032f27cSSam Leffler vap->iv_bss = ieee80211_ref_node(ni); 413f9cd9174SSam Leffler if (obss != NULL) { 414f9cd9174SSam Leffler copy_bss(ni, obss); 415d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 4168a1b9b6aSSam Leffler ieee80211_free_node(obss); 417b032f27cSSam Leffler } else 418b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 419f9cd9174SSam Leffler } 4208a1b9b6aSSam Leffler 4218a1b9b6aSSam Leffler static int 42268e8e04eSSam Leffler match_ssid(const struct ieee80211_node *ni, 42368e8e04eSSam Leffler int nssid, const struct ieee80211_scan_ssid ssids[]) 4248a1b9b6aSSam Leffler { 42568e8e04eSSam Leffler int i; 42668e8e04eSSam Leffler 42768e8e04eSSam Leffler for (i = 0; i < nssid; i++) { 42868e8e04eSSam Leffler if (ni->ni_esslen == ssids[i].len && 42968e8e04eSSam Leffler memcmp(ni->ni_essid, ssids[i].ssid, ni->ni_esslen) == 0) 43068e8e04eSSam Leffler return 1; 43168e8e04eSSam Leffler } 43268e8e04eSSam Leffler return 0; 43368e8e04eSSam Leffler } 43468e8e04eSSam Leffler 43568e8e04eSSam Leffler /* 43668e8e04eSSam Leffler * Test a node for suitability/compatibility. 43768e8e04eSSam Leffler */ 43868e8e04eSSam Leffler static int 439b032f27cSSam Leffler check_bss(struct ieee80211vap *vap, struct ieee80211_node *ni) 44068e8e04eSSam Leffler { 441b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 44268e8e04eSSam Leffler uint8_t rate; 44368e8e04eSSam Leffler 44468e8e04eSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 44568e8e04eSSam Leffler return 0; 446b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 44768e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 44868e8e04eSSam Leffler return 0; 44968e8e04eSSam Leffler } else { 45068e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 45168e8e04eSSam Leffler return 0; 45268e8e04eSSam Leffler } 453b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 45468e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 45568e8e04eSSam Leffler return 0; 45668e8e04eSSam Leffler } else { 45768e8e04eSSam Leffler /* XXX does this mean privacy is supported or required? */ 45868e8e04eSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 45968e8e04eSSam Leffler return 0; 46068e8e04eSSam Leffler } 46168e8e04eSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 46268e8e04eSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 46368e8e04eSSam Leffler if (rate & IEEE80211_RATE_BASIC) 46468e8e04eSSam Leffler return 0; 465b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 466b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 46768e8e04eSSam Leffler return 0; 468b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 469b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 47068e8e04eSSam Leffler return 0; 47168e8e04eSSam Leffler return 1; 47268e8e04eSSam Leffler } 47368e8e04eSSam Leffler 47468e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 47568e8e04eSSam Leffler /* 47668e8e04eSSam Leffler * Display node suitability/compatibility. 47768e8e04eSSam Leffler */ 47868e8e04eSSam Leffler static void 479b032f27cSSam Leffler check_bss_debug(struct ieee80211vap *vap, struct ieee80211_node *ni) 48068e8e04eSSam Leffler { 481b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 48268e8e04eSSam Leffler uint8_t rate; 483b4c5a90fSSam Leffler int fail; 484b4c5a90fSSam Leffler 485b4c5a90fSSam Leffler fail = 0; 486b4c5a90fSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 487b4c5a90fSSam Leffler fail |= 0x01; 488b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 489b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 490b4c5a90fSSam Leffler fail |= 0x02; 491b4c5a90fSSam Leffler } else { 492b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 493b4c5a90fSSam Leffler fail |= 0x02; 494b4c5a90fSSam Leffler } 495b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 496b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 497b4c5a90fSSam Leffler fail |= 0x04; 498b4c5a90fSSam Leffler } else { 499b4c5a90fSSam Leffler /* XXX does this mean privacy is supported or required? */ 500b4c5a90fSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 501b4c5a90fSSam Leffler fail |= 0x04; 502b4c5a90fSSam Leffler } 50370e28b9aSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 50479edaebfSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 505b4c5a90fSSam Leffler if (rate & IEEE80211_RATE_BASIC) 506b4c5a90fSSam Leffler fail |= 0x08; 507b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 508b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 509b4c5a90fSSam Leffler fail |= 0x10; 510b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 511b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 512b4c5a90fSSam Leffler fail |= 0x20; 51368e8e04eSSam Leffler 51468e8e04eSSam Leffler printf(" %c %s", fail ? '-' : '+', ether_sprintf(ni->ni_macaddr)); 51568e8e04eSSam Leffler printf(" %s%c", ether_sprintf(ni->ni_bssid), fail & 0x20 ? '!' : ' '); 51668e8e04eSSam Leffler printf(" %3d%c", 51768e8e04eSSam Leffler ieee80211_chan2ieee(ic, ni->ni_chan), fail & 0x01 ? '!' : ' '); 518b4c5a90fSSam Leffler printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2, 519b4c5a90fSSam Leffler fail & 0x08 ? '!' : ' '); 520b4c5a90fSSam Leffler printf(" %4s%c", 521b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" : 522b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" : 523b4c5a90fSSam Leffler "????", 524b4c5a90fSSam Leffler fail & 0x02 ? '!' : ' '); 525b4c5a90fSSam Leffler printf(" %3s%c ", 52668e8e04eSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ? "wep" : "no", 527b4c5a90fSSam Leffler fail & 0x04 ? '!' : ' '); 528b4c5a90fSSam Leffler ieee80211_print_essid(ni->ni_essid, ni->ni_esslen); 529b4c5a90fSSam Leffler printf("%s\n", fail & 0x10 ? "!" : ""); 530b4c5a90fSSam Leffler } 53168e8e04eSSam Leffler #endif /* IEEE80211_DEBUG */ 5328a1b9b6aSSam Leffler 533750d6d0cSSam Leffler /* 5348a1b9b6aSSam Leffler * Handle 802.11 ad hoc network merge. The 5358a1b9b6aSSam Leffler * convention, set by the Wireless Ethernet Compatibility Alliance 5368a1b9b6aSSam Leffler * (WECA), is that an 802.11 station will change its BSSID to match 5378a1b9b6aSSam Leffler * the "oldest" 802.11 ad hoc network, on the same channel, that 5388a1b9b6aSSam Leffler * has the station's desired SSID. The "oldest" 802.11 network 5398a1b9b6aSSam Leffler * sends beacons with the greatest TSF timestamp. 5408a1b9b6aSSam Leffler * 5418a1b9b6aSSam Leffler * The caller is assumed to validate TSF's before attempting a merge. 5428a1b9b6aSSam Leffler * 5438a1b9b6aSSam Leffler * Return !0 if the BSSID changed, 0 otherwise. 544750d6d0cSSam Leffler */ 5458a1b9b6aSSam Leffler int 546641b4d0bSSam Leffler ieee80211_ibss_merge(struct ieee80211_node *ni) 5478a1b9b6aSSam Leffler { 548b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 549b032f27cSSam Leffler #ifdef IEEE80211_DEBUG 550641b4d0bSSam Leffler struct ieee80211com *ic = ni->ni_ic; 551b032f27cSSam Leffler #endif 5528a1b9b6aSSam Leffler 553b032f27cSSam Leffler if (ni == vap->iv_bss || 554b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_bssid, vap->iv_bss->ni_bssid)) { 5558a1b9b6aSSam Leffler /* unchanged, nothing to do */ 5568a1b9b6aSSam Leffler return 0; 5578a1b9b6aSSam Leffler } 558b032f27cSSam Leffler if (!check_bss(vap, ni)) { 55968e8e04eSSam Leffler /* capabilities mismatch */ 560b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5618a1b9b6aSSam Leffler "%s: merge failed, capabilities mismatch\n", __func__); 56268e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 563b032f27cSSam Leffler if (ieee80211_msg_assoc(vap)) 564b032f27cSSam Leffler check_bss_debug(vap, ni); 56568e8e04eSSam Leffler #endif 566b032f27cSSam Leffler vap->iv_stats.is_ibss_capmismatch++; 5678a1b9b6aSSam Leffler return 0; 5688a1b9b6aSSam Leffler } 569b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5708a1b9b6aSSam Leffler "%s: new bssid %s: %s preamble, %s slot time%s\n", __func__, 5718a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 5728a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHPREAMBLE ? "short" : "long", 5738a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHSLOT ? "short" : "long", 5748a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_USEPROT ? ", protection" : "" 5758a1b9b6aSSam Leffler ); 57668e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 5778a1b9b6aSSam Leffler } 5788a1b9b6aSSam Leffler 5798a1b9b6aSSam Leffler /* 580b032f27cSSam Leffler * Calculate HT channel promotion flags for all vaps. 581b032f27cSSam Leffler * This assumes ni_chan have been setup for each vap. 582b032f27cSSam Leffler */ 583b032f27cSSam Leffler static int 584b032f27cSSam Leffler gethtadjustflags(struct ieee80211com *ic) 585b032f27cSSam Leffler { 586b032f27cSSam Leffler struct ieee80211vap *vap; 587b032f27cSSam Leffler int flags; 588b032f27cSSam Leffler 589b032f27cSSam Leffler flags = 0; 590b032f27cSSam Leffler /* XXX locking */ 591b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 592b032f27cSSam Leffler if (vap->iv_state < IEEE80211_S_RUN) 593b032f27cSSam Leffler continue; 594b032f27cSSam Leffler switch (vap->iv_opmode) { 595b032f27cSSam Leffler case IEEE80211_M_WDS: 596b032f27cSSam Leffler case IEEE80211_M_STA: 597b032f27cSSam Leffler case IEEE80211_M_AHDEMO: 598b032f27cSSam Leffler case IEEE80211_M_HOSTAP: 599b032f27cSSam Leffler case IEEE80211_M_IBSS: 600b032f27cSSam Leffler flags |= ieee80211_htchanflags(vap->iv_bss->ni_chan); 601b032f27cSSam Leffler break; 602b032f27cSSam Leffler default: 603b032f27cSSam Leffler break; 604b032f27cSSam Leffler } 605b032f27cSSam Leffler } 606b032f27cSSam Leffler return flags; 607b032f27cSSam Leffler } 608b032f27cSSam Leffler 609b032f27cSSam Leffler /* 610b032f27cSSam Leffler * Check if the current channel needs to change based on whether 6115d44f8c0SSam Leffler * any vap's are using HT20/HT40. This is used to sync the state 6125d44f8c0SSam Leffler * of ic_curchan after a channel width change on a running vap. 6131b6167d2SSam Leffler */ 6141b6167d2SSam Leffler void 615b032f27cSSam Leffler ieee80211_sync_curchan(struct ieee80211com *ic) 6161b6167d2SSam Leffler { 617b032f27cSSam Leffler struct ieee80211_channel *c; 618b032f27cSSam Leffler 619b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, ic->ic_curchan, gethtadjustflags(ic)); 620b032f27cSSam Leffler if (c != ic->ic_curchan) { 621b032f27cSSam Leffler ic->ic_curchan = c; 622b032f27cSSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 623b032f27cSSam Leffler ic->ic_set_channel(ic); 624b032f27cSSam Leffler } 625b032f27cSSam Leffler } 626b032f27cSSam Leffler 627b032f27cSSam Leffler /* 628b032f27cSSam Leffler * Change the current channel. The request channel may be 629b032f27cSSam Leffler * promoted if other vap's are operating with HT20/HT40. 630b032f27cSSam Leffler */ 631b032f27cSSam Leffler void 632b032f27cSSam Leffler ieee80211_setcurchan(struct ieee80211com *ic, struct ieee80211_channel *c) 633b032f27cSSam Leffler { 634b032f27cSSam Leffler if (ic->ic_htcaps & IEEE80211_HTC_HT) { 635b032f27cSSam Leffler int flags = gethtadjustflags(ic); 636b032f27cSSam Leffler /* 637b032f27cSSam Leffler * Check for channel promotion required to support the 638b032f27cSSam Leffler * set of running vap's. This assumes we are called 639b032f27cSSam Leffler * after ni_chan is setup for each vap. 640b032f27cSSam Leffler */ 641b032f27cSSam Leffler /* NB: this assumes IEEE80211_FEXT_USEHT40 > IEEE80211_FEXT_HT */ 642b032f27cSSam Leffler if (flags > ieee80211_htchanflags(c)) 643b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, c, flags); 644b032f27cSSam Leffler } 645b032f27cSSam Leffler ic->ic_bsschan = ic->ic_curchan = c; 6461b6167d2SSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 6471b6167d2SSam Leffler ic->ic_set_channel(ic); 6481b6167d2SSam Leffler } 6491b6167d2SSam Leffler 6501b6167d2SSam Leffler /* 6518a1b9b6aSSam Leffler * Join the specified IBSS/BSS network. The node is assumed to 6528a1b9b6aSSam Leffler * be passed in with a held reference. 6538a1b9b6aSSam Leffler */ 65468e8e04eSSam Leffler static int 65568e8e04eSSam Leffler ieee80211_sta_join1(struct ieee80211_node *selbs) 6568a1b9b6aSSam Leffler { 657b032f27cSSam Leffler struct ieee80211vap *vap = selbs->ni_vap; 65868e8e04eSSam Leffler struct ieee80211com *ic = selbs->ni_ic; 6598a1b9b6aSSam Leffler struct ieee80211_node *obss; 66068e8e04eSSam Leffler int canreassoc; 6618a1b9b6aSSam Leffler 6628a1b9b6aSSam Leffler /* 6638a1b9b6aSSam Leffler * Committed to selbs, setup state. 6648a1b9b6aSSam Leffler */ 665b032f27cSSam Leffler obss = vap->iv_bss; 66668e8e04eSSam Leffler /* 66768e8e04eSSam Leffler * Check if old+new node have the same address in which 66868e8e04eSSam Leffler * case we can reassociate when operating in sta mode. 66968e8e04eSSam Leffler */ 67068e8e04eSSam Leffler canreassoc = (obss != NULL && 671b032f27cSSam Leffler vap->iv_state == IEEE80211_S_RUN && 67268e8e04eSSam Leffler IEEE80211_ADDR_EQ(obss->ni_macaddr, selbs->ni_macaddr)); 673b032f27cSSam Leffler vap->iv_bss = selbs; /* NB: caller assumed to bump refcnt */ 6741fd2349dSSam Leffler if (obss != NULL) { 6751fd2349dSSam Leffler copy_bss(selbs, obss); 67647a7b0faSSam Leffler ieee80211_node_decref(obss); /* iv_bss reference */ 67747a7b0faSSam Leffler ieee80211_free_node(obss); /* station table reference */ 678b032f27cSSam Leffler obss = NULL; /* NB: guard against later use */ 6791fd2349dSSam Leffler } 68079edaebfSSam Leffler 68179edaebfSSam Leffler /* 68279edaebfSSam Leffler * Delete unusable rates; we've already checked 68379edaebfSSam Leffler * that the negotiated rate set is acceptable. 68479edaebfSSam Leffler */ 685b032f27cSSam Leffler ieee80211_fix_rate(vap->iv_bss, &vap->iv_bss->ni_rates, 68670e28b9aSSam Leffler IEEE80211_F_DODEL | IEEE80211_F_JOIN); 68779edaebfSSam Leffler 688b032f27cSSam Leffler ieee80211_setcurchan(ic, selbs->ni_chan); 6898a1b9b6aSSam Leffler /* 6908a1b9b6aSSam Leffler * Set the erp state (mostly the slot time) to deal with 6918a1b9b6aSSam Leffler * the auto-select case; this should be redundant if the 6928a1b9b6aSSam Leffler * mode is locked. 6938a1b9b6aSSam Leffler */ 6948a1b9b6aSSam Leffler ieee80211_reset_erp(ic); 695b032f27cSSam Leffler ieee80211_wme_initparams(vap); 696acc4f7f5SSam Leffler 697b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA) { 69868e8e04eSSam Leffler if (canreassoc) { 69968e8e04eSSam Leffler /* Reassociate */ 700b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_ASSOC, 1); 70168e8e04eSSam Leffler } else { 70268e8e04eSSam Leffler /* 70368e8e04eSSam Leffler * Act as if we received a DEAUTH frame in case we 70468e8e04eSSam Leffler * are invoked from the RUN state. This will cause 70568e8e04eSSam Leffler * us to try to re-authenticate if we are operating 70668e8e04eSSam Leffler * as a station. 70768e8e04eSSam Leffler */ 708b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_AUTH, 70968e8e04eSSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH); 71068e8e04eSSam Leffler } 71168e8e04eSSam Leffler } else 712b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_RUN, -1); 7138a1b9b6aSSam Leffler return 1; 7148a1b9b6aSSam Leffler } 7158a1b9b6aSSam Leffler 71668e8e04eSSam Leffler int 71710959256SSam Leffler ieee80211_sta_join(struct ieee80211vap *vap, struct ieee80211_channel *chan, 71868e8e04eSSam Leffler const struct ieee80211_scan_entry *se) 71968e8e04eSSam Leffler { 720b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 72168e8e04eSSam Leffler struct ieee80211_node *ni; 72268e8e04eSSam Leffler 723b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, se->se_macaddr); 72468e8e04eSSam Leffler if (ni == NULL) { 72568e8e04eSSam Leffler /* XXX msg */ 72668e8e04eSSam Leffler return 0; 72768e8e04eSSam Leffler } 72868e8e04eSSam Leffler /* 72968e8e04eSSam Leffler * Expand scan state into node's format. 73068e8e04eSSam Leffler * XXX may not need all this stuff 73168e8e04eSSam Leffler */ 73268e8e04eSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, se->se_bssid); 73368e8e04eSSam Leffler ni->ni_esslen = se->se_ssid[1]; 73468e8e04eSSam Leffler memcpy(ni->ni_essid, se->se_ssid+2, ni->ni_esslen); 73568e8e04eSSam Leffler ni->ni_rstamp = se->se_rstamp; 73668e8e04eSSam Leffler ni->ni_tstamp.tsf = se->se_tstamp.tsf; 73768e8e04eSSam Leffler ni->ni_intval = se->se_intval; 73868e8e04eSSam Leffler ni->ni_capinfo = se->se_capinfo; 73910959256SSam Leffler ni->ni_chan = chan; 74068e8e04eSSam Leffler ni->ni_timoff = se->se_timoff; 74168e8e04eSSam Leffler ni->ni_fhdwell = se->se_fhdwell; 74268e8e04eSSam Leffler ni->ni_fhindex = se->se_fhindex; 74368e8e04eSSam Leffler ni->ni_erp = se->se_erp; 744b032f27cSSam Leffler IEEE80211_RSSI_LPF(ni->ni_avgrssi, se->se_rssi); 74568e8e04eSSam Leffler ni->ni_noise = se->se_noise; 7466ca74c40SSam Leffler if (vap->iv_opmode == IEEE80211_M_STA) { 7476ca74c40SSam Leffler /* NB: only infrastructure mode requires an associd */ 7481b999d64SSam Leffler ni->ni_flags |= IEEE80211_NODE_ASSOCID; 7496ca74c40SSam Leffler } 75068e8e04eSSam Leffler 751b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, se->se_ies.data, se->se_ies.len)) { 752b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 753b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 754b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 755b032f27cSSam Leffler if (ni->ni_ies.htcap_ie != NULL) 756b032f27cSSam Leffler ieee80211_parse_htcap(ni, ni->ni_ies.htcap_ie); 757b032f27cSSam Leffler if (ni->ni_ies.htinfo_ie != NULL) 758b032f27cSSam Leffler ieee80211_parse_htinfo(ni, ni->ni_ies.htinfo_ie); 75910ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 76010ad9a77SSam Leffler if (ni->ni_ies.tdma_ie != NULL) 76110ad9a77SSam Leffler ieee80211_parse_tdma(ni, ni->ni_ies.tdma_ie); 76210ad9a77SSam Leffler #endif 763b032f27cSSam Leffler } 764b032f27cSSam Leffler 765b032f27cSSam Leffler vap->iv_dtim_period = se->se_dtimperiod; 766b032f27cSSam Leffler vap->iv_dtim_count = 0; 76768e8e04eSSam Leffler 76868e8e04eSSam Leffler /* NB: must be after ni_chan is setup */ 76968e8e04eSSam Leffler ieee80211_setup_rates(ni, se->se_rates, se->se_xrates, 77068e8e04eSSam Leffler IEEE80211_F_DOSORT); 771dfcd1f4dSSam Leffler if (ieee80211_iserp_rateset(&ni->ni_rates)) 772dfcd1f4dSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 773dfcd1f4dSSam Leffler node_setuptxparms(ni); 77468e8e04eSSam Leffler 77568e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 77668e8e04eSSam Leffler } 77768e8e04eSSam Leffler 7788a1b9b6aSSam Leffler /* 7798a1b9b6aSSam Leffler * Leave the specified IBSS/BSS network. The node is assumed to 7808a1b9b6aSSam Leffler * be passed in with a held reference. 7818a1b9b6aSSam Leffler */ 7828a1b9b6aSSam Leffler void 783b032f27cSSam Leffler ieee80211_sta_leave(struct ieee80211_node *ni) 7848a1b9b6aSSam Leffler { 785b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 786b032f27cSSam Leffler 7878a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 788b032f27cSSam Leffler ieee80211_notify_node_leave(ni); 789b032f27cSSam Leffler } 790b032f27cSSam Leffler 791b032f27cSSam Leffler /* 792b032f27cSSam Leffler * Send a deauthenticate frame and drop the station. 793b032f27cSSam Leffler */ 794b032f27cSSam Leffler void 795b032f27cSSam Leffler ieee80211_node_deauth(struct ieee80211_node *ni, int reason) 796b032f27cSSam Leffler { 797b032f27cSSam Leffler /* NB: bump the refcnt to be sure temporay nodes are not reclaimed */ 798b032f27cSSam Leffler ieee80211_ref_node(ni); 799b032f27cSSam Leffler if (ni->ni_associd != 0) 800b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, IEEE80211_FC0_SUBTYPE_DEAUTH, reason); 801b032f27cSSam Leffler ieee80211_node_leave(ni); 802b032f27cSSam Leffler ieee80211_free_node(ni); 8038a1b9b6aSSam Leffler } 8048a1b9b6aSSam Leffler 8051a1e1d21SSam Leffler static struct ieee80211_node * 80638c208f8SSam Leffler node_alloc(struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 8071a1e1d21SSam Leffler { 808410ca74bSSam Leffler struct ieee80211_node *ni; 8098a1b9b6aSSam Leffler 810e2126decSSam Leffler ni = (struct ieee80211_node *) malloc(sizeof(struct ieee80211_node), 811410ca74bSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 812410ca74bSSam Leffler return ni; 8131a1e1d21SSam Leffler } 8141a1e1d21SSam Leffler 8158a1b9b6aSSam Leffler /* 816b032f27cSSam Leffler * Initialize an ie blob with the specified data. If previous 817b032f27cSSam Leffler * data exists re-use the data block. As a side effect we clear 818b032f27cSSam Leffler * all references to specific ie's; the caller is required to 819b032f27cSSam Leffler * recalculate them. 820b032f27cSSam Leffler */ 821b032f27cSSam Leffler int 822b032f27cSSam Leffler ieee80211_ies_init(struct ieee80211_ies *ies, const uint8_t *data, int len) 823b032f27cSSam Leffler { 824b032f27cSSam Leffler /* NB: assumes data+len are the last fields */ 825b032f27cSSam Leffler memset(ies, 0, offsetof(struct ieee80211_ies, data)); 826b032f27cSSam Leffler if (ies->data != NULL && ies->len != len) { 827b032f27cSSam Leffler /* data size changed */ 828e2126decSSam Leffler free(ies->data, M_80211_NODE_IE); 829b032f27cSSam Leffler ies->data = NULL; 830b032f27cSSam Leffler } 831b032f27cSSam Leffler if (ies->data == NULL) { 832e2126decSSam Leffler ies->data = (uint8_t *) malloc(len, M_80211_NODE_IE, M_NOWAIT); 833b032f27cSSam Leffler if (ies->data == NULL) { 834b032f27cSSam Leffler ies->len = 0; 835b032f27cSSam Leffler /* NB: pointers have already been zero'd above */ 836b032f27cSSam Leffler return 0; 837b032f27cSSam Leffler } 838b032f27cSSam Leffler } 839b032f27cSSam Leffler memcpy(ies->data, data, len); 840b032f27cSSam Leffler ies->len = len; 841b032f27cSSam Leffler return 1; 842b032f27cSSam Leffler } 843b032f27cSSam Leffler 844b032f27cSSam Leffler /* 845b032f27cSSam Leffler * Reclaim storage for an ie blob. 846b032f27cSSam Leffler */ 847b032f27cSSam Leffler void 848b032f27cSSam Leffler ieee80211_ies_cleanup(struct ieee80211_ies *ies) 849b032f27cSSam Leffler { 850b032f27cSSam Leffler if (ies->data != NULL) 851e2126decSSam Leffler free(ies->data, M_80211_NODE_IE); 852b032f27cSSam Leffler } 853b032f27cSSam Leffler 854b032f27cSSam Leffler /* 855b032f27cSSam Leffler * Expand an ie blob data contents and to fillin individual 856b032f27cSSam Leffler * ie pointers. The data blob is assumed to be well-formed; 857b032f27cSSam Leffler * we don't do any validity checking of ie lengths. 858b032f27cSSam Leffler */ 859b032f27cSSam Leffler void 860b032f27cSSam Leffler ieee80211_ies_expand(struct ieee80211_ies *ies) 861b032f27cSSam Leffler { 862b032f27cSSam Leffler uint8_t *ie; 863b032f27cSSam Leffler int ielen; 864b032f27cSSam Leffler 865b032f27cSSam Leffler ie = ies->data; 866b032f27cSSam Leffler ielen = ies->len; 867b032f27cSSam Leffler while (ielen > 0) { 868b032f27cSSam Leffler switch (ie[0]) { 869b032f27cSSam Leffler case IEEE80211_ELEMID_VENDOR: 870b032f27cSSam Leffler if (iswpaoui(ie)) 871b032f27cSSam Leffler ies->wpa_ie = ie; 872b032f27cSSam Leffler else if (iswmeoui(ie)) 873b032f27cSSam Leffler ies->wme_ie = ie; 874b032f27cSSam Leffler else if (isatherosoui(ie)) 875b032f27cSSam Leffler ies->ath_ie = ie; 87610ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 87710ad9a77SSam Leffler else if (istdmaoui(ie)) 87810ad9a77SSam Leffler ies->tdma_ie = ie; 87910ad9a77SSam Leffler #endif 880b032f27cSSam Leffler break; 881b032f27cSSam Leffler case IEEE80211_ELEMID_RSN: 882b032f27cSSam Leffler ies->rsn_ie = ie; 883b032f27cSSam Leffler break; 884b032f27cSSam Leffler case IEEE80211_ELEMID_HTCAP: 885b032f27cSSam Leffler ies->htcap_ie = ie; 886b032f27cSSam Leffler break; 887b032f27cSSam Leffler } 888b032f27cSSam Leffler ielen -= 2 + ie[1]; 889b032f27cSSam Leffler ie += 2 + ie[1]; 890b032f27cSSam Leffler } 891b032f27cSSam Leffler } 892b032f27cSSam Leffler 893b032f27cSSam Leffler /* 8948a1b9b6aSSam Leffler * Reclaim any resources in a node and reset any critical 8958a1b9b6aSSam Leffler * state. Typically nodes are free'd immediately after, 8968a1b9b6aSSam Leffler * but in some cases the storage may be reused so we need 8978a1b9b6aSSam Leffler * to insure consistent state (should probably fix that). 8988a1b9b6aSSam Leffler */ 8991a1e1d21SSam Leffler static void 9008a1b9b6aSSam Leffler node_cleanup(struct ieee80211_node *ni) 9011a1e1d21SSam Leffler { 9028a1b9b6aSSam Leffler #define N(a) (sizeof(a)/sizeof(a[0])) 903b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 90468e8e04eSSam Leffler int i; 9058a1b9b6aSSam Leffler 9068a1b9b6aSSam Leffler /* NB: preserve ni_table */ 9078a1b9b6aSSam Leffler if (ni->ni_flags & IEEE80211_NODE_PWR_MGT) { 908b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 909b032f27cSSam Leffler vap->iv_ps_sta--; 9108a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_PWR_MGT; 911b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_POWER, ni, 912b032f27cSSam Leffler "power save mode off, %u sta's in ps mode", vap->iv_ps_sta); 9138a1b9b6aSSam Leffler } 914ebdda46cSSam Leffler /* 9151b6167d2SSam Leffler * Cleanup any HT-related state. 9161b6167d2SSam Leffler */ 9171b6167d2SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) 9181b6167d2SSam Leffler ieee80211_ht_node_cleanup(ni); 9191b6167d2SSam Leffler /* 920ebdda46cSSam Leffler * Clear AREF flag that marks the authorization refcnt bump 921ebdda46cSSam Leffler * has happened. This is probably not needed as the node 922ebdda46cSSam Leffler * should always be removed from the table so not found but 923ebdda46cSSam Leffler * do it just in case. 9241b999d64SSam Leffler * Likewise clear the ASSOCID flag as these flags are intended 9251b999d64SSam Leffler * to be managed in tandem. 926ebdda46cSSam Leffler */ 9271b999d64SSam Leffler ni->ni_flags &= ~(IEEE80211_NODE_AREF | IEEE80211_NODE_ASSOCID); 9288a1b9b6aSSam Leffler 9298a1b9b6aSSam Leffler /* 9308a1b9b6aSSam Leffler * Drain power save queue and, if needed, clear TIM. 9318a1b9b6aSSam Leffler */ 93263092fceSSam Leffler if (ieee80211_node_psq_drain(ni) != 0 && vap->iv_set_tim != NULL) 933b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 9348a1b9b6aSSam Leffler 9358a1b9b6aSSam Leffler ni->ni_associd = 0; 9368a1b9b6aSSam Leffler if (ni->ni_challenge != NULL) { 937e2126decSSam Leffler free(ni->ni_challenge, M_80211_NODE); 9388a1b9b6aSSam Leffler ni->ni_challenge = NULL; 9398a1b9b6aSSam Leffler } 9408a1b9b6aSSam Leffler /* 9418a1b9b6aSSam Leffler * Preserve SSID, WPA, and WME ie's so the bss node is 9428a1b9b6aSSam Leffler * reusable during a re-auth/re-assoc state transition. 9438a1b9b6aSSam Leffler * If we remove these data they will not be recreated 9448a1b9b6aSSam Leffler * because they come from a probe-response or beacon frame 9458a1b9b6aSSam Leffler * which cannot be expected prior to the association-response. 9468a1b9b6aSSam Leffler * This should not be an issue when operating in other modes 9478a1b9b6aSSam Leffler * as stations leaving always go through a full state transition 9488a1b9b6aSSam Leffler * which will rebuild this state. 9498a1b9b6aSSam Leffler * 9508a1b9b6aSSam Leffler * XXX does this leave us open to inheriting old state? 9518a1b9b6aSSam Leffler */ 9528a1b9b6aSSam Leffler for (i = 0; i < N(ni->ni_rxfrag); i++) 9538a1b9b6aSSam Leffler if (ni->ni_rxfrag[i] != NULL) { 9548a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[i]); 9558a1b9b6aSSam Leffler ni->ni_rxfrag[i] = NULL; 9568a1b9b6aSSam Leffler } 957c1225b52SSam Leffler /* 958c1225b52SSam Leffler * Must be careful here to remove any key map entry w/o a LOR. 959c1225b52SSam Leffler */ 960c1225b52SSam Leffler ieee80211_node_delucastkey(ni); 9618a1b9b6aSSam Leffler #undef N 9628a1b9b6aSSam Leffler } 9638a1b9b6aSSam Leffler 9648a1b9b6aSSam Leffler static void 9658a1b9b6aSSam Leffler node_free(struct ieee80211_node *ni) 9668a1b9b6aSSam Leffler { 9678a1b9b6aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 9688a1b9b6aSSam Leffler 9698a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 970b032f27cSSam Leffler ieee80211_ies_cleanup(&ni->ni_ies); 97163092fceSSam Leffler ieee80211_psq_cleanup(&ni->ni_psq); 972b032f27cSSam Leffler IEEE80211_NODE_WDSQ_DESTROY(ni); 973e2126decSSam Leffler free(ni, M_80211_NODE); 9741a1e1d21SSam Leffler } 9751a1e1d21SSam Leffler 976b032f27cSSam Leffler static void 977b032f27cSSam Leffler node_age(struct ieee80211_node *ni) 978b032f27cSSam Leffler { 979b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 9805d44f8c0SSam Leffler 9815d44f8c0SSam Leffler IEEE80211_NODE_LOCK_ASSERT(&vap->iv_ic->ic_sta); 9825d44f8c0SSam Leffler 983b032f27cSSam Leffler /* 984b032f27cSSam Leffler * Age frames on the power save queue. 985b032f27cSSam Leffler */ 98663092fceSSam Leffler if (ieee80211_node_psq_age(ni) != 0 && 98763092fceSSam Leffler ni->ni_psq.psq_len == 0 && vap->iv_set_tim != NULL) 988b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 989b032f27cSSam Leffler /* 990b032f27cSSam Leffler * Age frames on the wds pending queue. 991b032f27cSSam Leffler */ 992b032f27cSSam Leffler if (IEEE80211_NODE_WDSQ_QLEN(ni) != 0) 993b032f27cSSam Leffler ieee80211_node_wdsq_age(ni); 994b032f27cSSam Leffler /* 995b032f27cSSam Leffler * Age out HT resources (e.g. frames on the 996b032f27cSSam Leffler * A-MPDU reorder queues). 997b032f27cSSam Leffler */ 998b032f27cSSam Leffler if (ni->ni_associd != 0 && (ni->ni_flags & IEEE80211_NODE_HT)) 999b032f27cSSam Leffler ieee80211_ht_node_age(ni); 1000b032f27cSSam Leffler } 1001b032f27cSSam Leffler 100268e8e04eSSam Leffler static int8_t 10038a1b9b6aSSam Leffler node_getrssi(const struct ieee80211_node *ni) 1004d1e61976SSam Leffler { 1005b032f27cSSam Leffler uint32_t avgrssi = ni->ni_avgrssi; 1006b032f27cSSam Leffler int32_t rssi; 1007b032f27cSSam Leffler 1008b032f27cSSam Leffler if (avgrssi == IEEE80211_RSSI_DUMMY_MARKER) 1009b032f27cSSam Leffler return 0; 1010b032f27cSSam Leffler rssi = IEEE80211_RSSI_GET(avgrssi); 1011b032f27cSSam Leffler return rssi < 0 ? 0 : rssi > 127 ? 127 : rssi; 1012d1e61976SSam Leffler } 1013d1e61976SSam Leffler 10141a1e1d21SSam Leffler static void 101568e8e04eSSam Leffler node_getsignal(const struct ieee80211_node *ni, int8_t *rssi, int8_t *noise) 101668e8e04eSSam Leffler { 1017b032f27cSSam Leffler *rssi = node_getrssi(ni); 101868e8e04eSSam Leffler *noise = ni->ni_noise; 101968e8e04eSSam Leffler } 102068e8e04eSSam Leffler 102168e8e04eSSam Leffler static void 1022b032f27cSSam Leffler node_getmimoinfo(const struct ieee80211_node *ni, 1023b032f27cSSam Leffler struct ieee80211_mimo_info *info) 1024b032f27cSSam Leffler { 1025b032f27cSSam Leffler /* XXX zero data? */ 1026b032f27cSSam Leffler } 1027b032f27cSSam Leffler 1028b032f27cSSam Leffler struct ieee80211_node * 1029b032f27cSSam Leffler ieee80211_alloc_node(struct ieee80211_node_table *nt, 1030b032f27cSSam Leffler struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 10311a1e1d21SSam Leffler { 10328a1b9b6aSSam Leffler struct ieee80211com *ic = nt->nt_ic; 1033b032f27cSSam Leffler struct ieee80211_node *ni; 10341a1e1d21SSam Leffler int hash; 10351a1e1d21SSam Leffler 103638c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 1037b032f27cSSam Leffler if (ni == NULL) { 1038b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 1039b032f27cSSam Leffler return NULL; 1040b032f27cSSam Leffler } 1041b032f27cSSam Leffler 1042b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 104349a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 10448a1b9b6aSSam Leffler ether_sprintf(macaddr), nt->nt_name); 10458a1b9b6aSSam Leffler 10461a1e1d21SSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 10471a1e1d21SSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 10488a1b9b6aSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 10498a1b9b6aSSam Leffler ni->ni_chan = IEEE80211_CHAN_ANYC; 10508a1b9b6aSSam Leffler ni->ni_authmode = IEEE80211_AUTH_OPEN; 10518a1b9b6aSSam Leffler ni->ni_txpower = ic->ic_txpowlimit; /* max power */ 105201a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_curchan)]; 1053b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, IEEE80211_KEYIX_NONE); 1054b032f27cSSam Leffler ni->ni_avgrssi = IEEE80211_RSSI_DUMMY_MARKER; 10552045f699SSam Leffler ni->ni_inact_reload = nt->nt_inact_init; 10562045f699SSam Leffler ni->ni_inact = ni->ni_inact_reload; 105768e8e04eSSam Leffler ni->ni_ath_defkeyix = 0x7fff; 105863092fceSSam Leffler ieee80211_psq_init(&ni->ni_psq, "unknown"); 1059b032f27cSSam Leffler IEEE80211_NODE_WDSQ_INIT(ni, "unknown"); 10608a1b9b6aSSam Leffler 10618a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 10628a1b9b6aSSam Leffler TAILQ_INSERT_TAIL(&nt->nt_node, ni, ni_list); 10638a1b9b6aSSam Leffler LIST_INSERT_HEAD(&nt->nt_hash[hash], ni, ni_hash); 10648a1b9b6aSSam Leffler ni->ni_table = nt; 1065b032f27cSSam Leffler ni->ni_vap = vap; 10668a1b9b6aSSam Leffler ni->ni_ic = ic; 10678a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 10681a1e1d21SSam Leffler 1069be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 1070be1054edSSam Leffler "%s: inact_reload %u", __func__, ni->ni_inact_reload); 1071be1054edSSam Leffler 10721a1e1d21SSam Leffler return ni; 10731a1e1d21SSam Leffler } 10741a1e1d21SSam Leffler 107597c973adSSam Leffler /* 107697c973adSSam Leffler * Craft a temporary node suitable for sending a management frame 107797c973adSSam Leffler * to the specified station. We craft only as much state as we 107897c973adSSam Leffler * need to do the work since the node will be immediately reclaimed 107997c973adSSam Leffler * once the send completes. 108097c973adSSam Leffler */ 108197c973adSSam Leffler struct ieee80211_node * 1082b032f27cSSam Leffler ieee80211_tmp_node(struct ieee80211vap *vap, 1083b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 108497c973adSSam Leffler { 1085b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 108697c973adSSam Leffler struct ieee80211_node *ni; 108797c973adSSam Leffler 108838c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 108997c973adSSam Leffler if (ni != NULL) { 1090b9b5f07dSSam Leffler struct ieee80211_node *bss = vap->iv_bss; 1091b9b5f07dSSam Leffler 1092b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 109397c973adSSam Leffler "%s %p<%s>\n", __func__, ni, ether_sprintf(macaddr)); 109497c973adSSam Leffler 1095b032f27cSSam Leffler ni->ni_table = NULL; /* NB: pedantic */ 1096b032f27cSSam Leffler ni->ni_ic = ic; /* NB: needed to set channel */ 1097b032f27cSSam Leffler ni->ni_vap = vap; 1098b032f27cSSam Leffler 109997c973adSSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 1100b9b5f07dSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bss->ni_bssid); 110197c973adSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 110297c973adSSam Leffler /* NB: required by ieee80211_fix_rate */ 1103b9b5f07dSSam Leffler ieee80211_node_set_chan(ni, bss->ni_chan); 1104b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, 110597c973adSSam Leffler IEEE80211_KEYIX_NONE); 1106b9b5f07dSSam Leffler ni->ni_txpower = bss->ni_txpower; 110797c973adSSam Leffler /* XXX optimize away */ 110863092fceSSam Leffler ieee80211_psq_init(&ni->ni_psq, "unknown"); 1109b032f27cSSam Leffler IEEE80211_NODE_WDSQ_INIT(ni, "unknown"); 111097c973adSSam Leffler } else { 111197c973adSSam Leffler /* XXX msg */ 1112b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 111397c973adSSam Leffler } 111497c973adSSam Leffler return ni; 111597c973adSSam Leffler } 111697c973adSSam Leffler 11171a1e1d21SSam Leffler struct ieee80211_node * 1118b032f27cSSam Leffler ieee80211_dup_bss(struct ieee80211vap *vap, 1119b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 11201a1e1d21SSam Leffler { 1121b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 11228a1b9b6aSSam Leffler struct ieee80211_node *ni; 11238a1b9b6aSSam Leffler 1124b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, macaddr); 11251a1e1d21SSam Leffler if (ni != NULL) { 1126b9b5f07dSSam Leffler struct ieee80211_node *bss = vap->iv_bss; 1127694dca64SSam Leffler /* 1128b032f27cSSam Leffler * Inherit from iv_bss. 1129694dca64SSam Leffler */ 1130b9b5f07dSSam Leffler copy_bss(ni, bss); 1131b9b5f07dSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bss->ni_bssid); 1132b9b5f07dSSam Leffler ieee80211_node_set_chan(ni, bss->ni_chan); 1133b032f27cSSam Leffler } 11341a1e1d21SSam Leffler return ni; 11351a1e1d21SSam Leffler } 11361a1e1d21SSam Leffler 1137b032f27cSSam Leffler /* 1138b032f27cSSam Leffler * Create a bss node for a legacy WDS vap. The far end does 1139b032f27cSSam Leffler * not associate so we just create create a new node and 1140b032f27cSSam Leffler * simulate an association. The caller is responsible for 1141b032f27cSSam Leffler * installing the node as the bss node and handling any further 1142b032f27cSSam Leffler * setup work like authorizing the port. 1143b032f27cSSam Leffler */ 1144b032f27cSSam Leffler struct ieee80211_node * 1145b032f27cSSam Leffler ieee80211_node_create_wds(struct ieee80211vap *vap, 1146b032f27cSSam Leffler const uint8_t bssid[IEEE80211_ADDR_LEN], struct ieee80211_channel *chan) 1147b032f27cSSam Leffler { 1148b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1149b032f27cSSam Leffler struct ieee80211_node *ni; 1150b032f27cSSam Leffler 1151b032f27cSSam Leffler /* XXX check if node already in sta table? */ 1152b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, bssid); 1153b032f27cSSam Leffler if (ni != NULL) { 1154b032f27cSSam Leffler ni->ni_wdsvap = vap; 1155b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bssid); 1156b032f27cSSam Leffler /* 1157b032f27cSSam Leffler * Inherit any manually configured settings. 1158b032f27cSSam Leffler */ 1159b9b5f07dSSam Leffler copy_bss(ni, vap->iv_bss); 1160b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 1161b032f27cSSam Leffler /* NB: propagate ssid so available to WPA supplicant */ 1162b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 1163b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 1164b032f27cSSam Leffler /* NB: no associd for peer */ 1165b032f27cSSam Leffler /* 1166b032f27cSSam Leffler * There are no management frames to use to 1167b032f27cSSam Leffler * discover neighbor capabilities, so blindly 1168b032f27cSSam Leffler * propagate the local configuration. 1169b032f27cSSam Leffler */ 1170b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 1171b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1172b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 1173b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 1174b032f27cSSam Leffler if ((ic->ic_htcaps & IEEE80211_HTC_HT) && 1175b032f27cSSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_HT)) { 1176b032f27cSSam Leffler /* 1177b032f27cSSam Leffler * Device is HT-capable and HT is enabled for 1178b032f27cSSam Leffler * the vap; setup HT operation. On return 1179b032f27cSSam Leffler * ni_chan will be adjusted to an HT channel. 1180b032f27cSSam Leffler */ 1181b032f27cSSam Leffler ieee80211_ht_wds_init(ni); 1182b032f27cSSam Leffler } else { 1183b032f27cSSam Leffler struct ieee80211_channel *c = ni->ni_chan; 1184b032f27cSSam Leffler /* 1185b032f27cSSam Leffler * Force a legacy channel to be used. 1186b032f27cSSam Leffler */ 1187b032f27cSSam Leffler c = ieee80211_find_channel(ic, 1188b032f27cSSam Leffler c->ic_freq, c->ic_flags &~ IEEE80211_CHAN_HT); 1189b032f27cSSam Leffler KASSERT(c != NULL, ("no legacy channel, %u/%x", 1190b032f27cSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags)); 1191b032f27cSSam Leffler ni->ni_chan = c; 1192b032f27cSSam Leffler } 1193b032f27cSSam Leffler } 1194b032f27cSSam Leffler return ni; 1195b032f27cSSam Leffler } 1196b032f27cSSam Leffler 1197b032f27cSSam Leffler struct ieee80211_node * 11988a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1199b032f27cSSam Leffler ieee80211_find_node_locked_debug(struct ieee80211_node_table *nt, 1200b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 12018a1b9b6aSSam Leffler #else 1202b032f27cSSam Leffler ieee80211_find_node_locked(struct ieee80211_node_table *nt, 1203b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 12048a1b9b6aSSam Leffler #endif 12051a1e1d21SSam Leffler { 12061a1e1d21SSam Leffler struct ieee80211_node *ni; 12071a1e1d21SSam Leffler int hash; 12081a1e1d21SSam Leffler 12098a1b9b6aSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1210750d6d0cSSam Leffler 12111a1e1d21SSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 12128a1b9b6aSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 12131a1e1d21SSam Leffler if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 12148a1b9b6aSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 12158a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1216b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 121749a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 121849a15236SSam Leffler func, line, 121949a15236SSam Leffler ni, ether_sprintf(ni->ni_macaddr), 12208a1b9b6aSSam Leffler ieee80211_node_refcnt(ni)); 12218a1b9b6aSSam Leffler #endif 1222750d6d0cSSam Leffler return ni; 12231a1e1d21SSam Leffler } 12241a1e1d21SSam Leffler } 1225750d6d0cSSam Leffler return NULL; 1226750d6d0cSSam Leffler } 1227750d6d0cSSam Leffler 1228750d6d0cSSam Leffler struct ieee80211_node * 12298a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 12308a1b9b6aSSam Leffler ieee80211_find_node_debug(struct ieee80211_node_table *nt, 1231b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 12328a1b9b6aSSam Leffler #else 1233b032f27cSSam Leffler ieee80211_find_node(struct ieee80211_node_table *nt, 1234b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 12358a1b9b6aSSam Leffler #endif 1236750d6d0cSSam Leffler { 1237750d6d0cSSam Leffler struct ieee80211_node *ni; 1238750d6d0cSSam Leffler 12398a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1240b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 1241b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1242b032f27cSSam Leffler return ni; 1243b032f27cSSam Leffler } 1244b032f27cSSam Leffler 1245b032f27cSSam Leffler struct ieee80211_node * 1246b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1247b032f27cSSam Leffler ieee80211_find_vap_node_locked_debug(struct ieee80211_node_table *nt, 1248b032f27cSSam Leffler const struct ieee80211vap *vap, 1249b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1250b032f27cSSam Leffler #else 1251b032f27cSSam Leffler ieee80211_find_vap_node_locked(struct ieee80211_node_table *nt, 1252b032f27cSSam Leffler const struct ieee80211vap *vap, 1253b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1254b032f27cSSam Leffler #endif 1255b032f27cSSam Leffler { 1256b032f27cSSam Leffler struct ieee80211_node *ni; 1257b032f27cSSam Leffler int hash; 1258b032f27cSSam Leffler 1259b032f27cSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1260b032f27cSSam Leffler 1261b032f27cSSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 1262b032f27cSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1263b032f27cSSam Leffler if (ni->ni_vap == vap && 1264b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 1265b032f27cSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 1266b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1267b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1268b032f27cSSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1269b032f27cSSam Leffler func, line, 1270b032f27cSSam Leffler ni, ether_sprintf(ni->ni_macaddr), 1271b032f27cSSam Leffler ieee80211_node_refcnt(ni)); 1272b032f27cSSam Leffler #endif 1273b032f27cSSam Leffler return ni; 1274b032f27cSSam Leffler } 1275b032f27cSSam Leffler } 1276b032f27cSSam Leffler return NULL; 1277b032f27cSSam Leffler } 1278b032f27cSSam Leffler 1279b032f27cSSam Leffler struct ieee80211_node * 1280b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1281b032f27cSSam Leffler ieee80211_find_vap_node_debug(struct ieee80211_node_table *nt, 1282b032f27cSSam Leffler const struct ieee80211vap *vap, 1283b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1284b032f27cSSam Leffler #else 1285b032f27cSSam Leffler ieee80211_find_vap_node(struct ieee80211_node_table *nt, 1286b032f27cSSam Leffler const struct ieee80211vap *vap, 1287b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1288b032f27cSSam Leffler #endif 1289b032f27cSSam Leffler { 1290b032f27cSSam Leffler struct ieee80211_node *ni; 1291b032f27cSSam Leffler 1292b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1293b032f27cSSam Leffler ni = ieee80211_find_vap_node_locked(nt, vap, macaddr); 12948a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 12951a1e1d21SSam Leffler return ni; 12961a1e1d21SSam Leffler } 12971a1e1d21SSam Leffler 12981a1e1d21SSam Leffler /* 12998a1b9b6aSSam Leffler * Fake up a node; this handles node discovery in adhoc mode. 13008a1b9b6aSSam Leffler * Note that for the driver's benefit we we treat this like 13018a1b9b6aSSam Leffler * an association so the driver has an opportunity to setup 13028a1b9b6aSSam Leffler * it's private state. 13038a1b9b6aSSam Leffler */ 13048a1b9b6aSSam Leffler struct ieee80211_node * 1305b032f27cSSam Leffler ieee80211_fakeup_adhoc_node(struct ieee80211vap *vap, 130668e8e04eSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 13078a1b9b6aSSam Leffler { 13088a1b9b6aSSam Leffler struct ieee80211_node *ni; 13098a1b9b6aSSam Leffler 1310b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1311be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(macaddr)); 1312b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, macaddr); 13138a1b9b6aSSam Leffler if (ni != NULL) { 1314b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1315b032f27cSSam Leffler 13168a1b9b6aSSam Leffler /* XXX no rate negotiation; just dup */ 1317b032f27cSSam Leffler ni->ni_rates = vap->iv_bss->ni_rates; 1318b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 13198e292e8eSSam Leffler /* 132068e8e04eSSam Leffler * In adhoc demo mode there are no management 132168e8e04eSSam Leffler * frames to use to discover neighbor capabilities, 132268e8e04eSSam Leffler * so blindly propagate the local configuration 132368e8e04eSSam Leffler * so we can do interesting things (e.g. use 132468e8e04eSSam Leffler * WME to disable ACK's). 13258e292e8eSSam Leffler */ 1326b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 13278e292e8eSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1328b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 132968e8e04eSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 13308e292e8eSSam Leffler } 133101a03542SSam Leffler node_setuptxparms(ni); 1332b032f27cSSam Leffler if (ic->ic_newassoc != NULL) 1333b032f27cSSam Leffler ic->ic_newassoc(ni, 1); 133468e8e04eSSam Leffler /* XXX not right for 802.1x/WPA */ 133568e8e04eSSam Leffler ieee80211_node_authorize(ni); 13368a1b9b6aSSam Leffler } 13378a1b9b6aSSam Leffler return ni; 13388a1b9b6aSSam Leffler } 13398a1b9b6aSSam Leffler 1340be425a0fSSam Leffler void 1341be425a0fSSam Leffler ieee80211_init_neighbor(struct ieee80211_node *ni, 1342be425a0fSSam Leffler const struct ieee80211_frame *wh, 1343be425a0fSSam Leffler const struct ieee80211_scanparams *sp) 1344be425a0fSSam Leffler { 1345be425a0fSSam Leffler ni->ni_esslen = sp->ssid[1]; 1346be425a0fSSam Leffler memcpy(ni->ni_essid, sp->ssid + 2, sp->ssid[1]); 1347be425a0fSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, wh->i_addr3); 1348be425a0fSSam Leffler memcpy(ni->ni_tstamp.data, sp->tstamp, sizeof(ni->ni_tstamp)); 1349be425a0fSSam Leffler ni->ni_intval = sp->bintval; 1350be425a0fSSam Leffler ni->ni_capinfo = sp->capinfo; 1351be425a0fSSam Leffler ni->ni_chan = ni->ni_ic->ic_curchan; 1352be425a0fSSam Leffler ni->ni_fhdwell = sp->fhdwell; 1353be425a0fSSam Leffler ni->ni_fhindex = sp->fhindex; 1354be425a0fSSam Leffler ni->ni_erp = sp->erp; 1355be425a0fSSam Leffler ni->ni_timoff = sp->timoff; 1356b032f27cSSam Leffler 1357b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, sp->ies, sp->ies_len)) { 1358b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 13599094ffdfSSam Leffler if (ni->ni_ies.wme_ie != NULL) 13609094ffdfSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 13619094ffdfSSam Leffler else 13629094ffdfSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_QOS; 1363b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 1364b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 1365b032f27cSSam Leffler } 1366be425a0fSSam Leffler 1367be425a0fSSam Leffler /* NB: must be after ni_chan is setup */ 136879edaebfSSam Leffler ieee80211_setup_rates(ni, sp->rates, sp->xrates, 136979edaebfSSam Leffler IEEE80211_F_DOSORT | IEEE80211_F_DOFRATE | 137079edaebfSSam Leffler IEEE80211_F_DONEGO | IEEE80211_F_DODEL); 1371be425a0fSSam Leffler } 1372be425a0fSSam Leffler 1373b5c99415SSam Leffler /* 1374b5c99415SSam Leffler * Do node discovery in adhoc mode on receipt of a beacon 1375b5c99415SSam Leffler * or probe response frame. Note that for the driver's 1376b5c99415SSam Leffler * benefit we we treat this like an association so the 1377b5c99415SSam Leffler * driver has an opportunity to setup it's private state. 1378b5c99415SSam Leffler */ 1379b5c99415SSam Leffler struct ieee80211_node * 1380b032f27cSSam Leffler ieee80211_add_neighbor(struct ieee80211vap *vap, 1381b5c99415SSam Leffler const struct ieee80211_frame *wh, 1382b5c99415SSam Leffler const struct ieee80211_scanparams *sp) 1383b5c99415SSam Leffler { 1384b5c99415SSam Leffler struct ieee80211_node *ni; 1385b5c99415SSam Leffler 1386b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1387be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(wh->i_addr2)); 1388b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, wh->i_addr2);/* XXX alloc_node? */ 1389b5c99415SSam Leffler if (ni != NULL) { 1390b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1391b032f27cSSam Leffler 1392be425a0fSSam Leffler ieee80211_init_neighbor(ni, wh, sp); 139301a03542SSam Leffler node_setuptxparms(ni); 1394b5c99415SSam Leffler if (ic->ic_newassoc != NULL) 1395b5c99415SSam Leffler ic->ic_newassoc(ni, 1); 1396b5c99415SSam Leffler /* XXX not right for 802.1x/WPA */ 1397b5c99415SSam Leffler ieee80211_node_authorize(ni); 1398b5c99415SSam Leffler } 1399b5c99415SSam Leffler return ni; 1400b5c99415SSam Leffler } 1401b5c99415SSam Leffler 1402c1225b52SSam Leffler #define IS_CTL(wh) \ 1403c1225b52SSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) == IEEE80211_FC0_TYPE_CTL) 1404c1225b52SSam Leffler #define IS_PSPOLL(wh) \ 1405c1225b52SSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == IEEE80211_FC0_SUBTYPE_PS_POLL) 140668e8e04eSSam Leffler #define IS_BAR(wh) \ 140768e8e04eSSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == IEEE80211_FC0_SUBTYPE_BAR) 1408a2cfa5b7SSam Leffler #define IS_PROBEREQ(wh) \ 1409a2cfa5b7SSam Leffler ((wh->i_fc[0] & (IEEE80211_FC0_TYPE_MASK|IEEE80211_FC0_SUBTYPE_MASK)) \ 1410a2cfa5b7SSam Leffler == (IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_PROBE_REQ)) 1411a2cfa5b7SSam Leffler #define IS_BCAST_PROBEREQ(wh) \ 1412a2cfa5b7SSam Leffler (IS_PROBEREQ(wh) && IEEE80211_IS_MULTICAST( \ 1413a2cfa5b7SSam Leffler ((const struct ieee80211_frame *)(wh))->i_addr3)) 1414a2cfa5b7SSam Leffler 1415a2cfa5b7SSam Leffler static __inline struct ieee80211_node * 1416a2cfa5b7SSam Leffler _find_rxnode(struct ieee80211_node_table *nt, 1417a2cfa5b7SSam Leffler const struct ieee80211_frame_min *wh) 1418a2cfa5b7SSam Leffler { 1419a2cfa5b7SSam Leffler /* XXX 4-address frames? */ 1420a2cfa5b7SSam Leffler if (IS_CTL(wh) && !IS_PSPOLL(wh) && !IS_BAR(wh) /*&& !IS_RTS(ah)*/) 1421a2cfa5b7SSam Leffler return ieee80211_find_node_locked(nt, wh->i_addr1); 1422a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1423a2cfa5b7SSam Leffler return NULL; /* spam bcast probe req to all vap's */ 1424a2cfa5b7SSam Leffler return ieee80211_find_node_locked(nt, wh->i_addr2); 1425a2cfa5b7SSam Leffler } 142668e8e04eSSam Leffler 14278a1b9b6aSSam Leffler /* 14288a1b9b6aSSam Leffler * Locate the node for sender, track state, and then pass the 1429a2cfa5b7SSam Leffler * (referenced) node up to the 802.11 layer for its use. Note 1430a2cfa5b7SSam Leffler * we can return NULL if the sender is not in the table. 14318a1b9b6aSSam Leffler */ 14328a1b9b6aSSam Leffler struct ieee80211_node * 14338a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 14348a1b9b6aSSam Leffler ieee80211_find_rxnode_debug(struct ieee80211com *ic, 14358a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh, const char *func, int line) 14368a1b9b6aSSam Leffler #else 14378a1b9b6aSSam Leffler ieee80211_find_rxnode(struct ieee80211com *ic, 14388a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh) 14398a1b9b6aSSam Leffler #endif 14408a1b9b6aSSam Leffler { 14418a1b9b6aSSam Leffler struct ieee80211_node_table *nt; 14428a1b9b6aSSam Leffler struct ieee80211_node *ni; 14438a1b9b6aSSam Leffler 144468e8e04eSSam Leffler nt = &ic->ic_sta; 14458a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1446a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 14478a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 14488a1b9b6aSSam Leffler 1449c1225b52SSam Leffler return ni; 1450c1225b52SSam Leffler } 1451c1225b52SSam Leffler 1452c1225b52SSam Leffler /* 1453c1225b52SSam Leffler * Like ieee80211_find_rxnode but use the supplied h/w 1454c1225b52SSam Leffler * key index as a hint to locate the node in the key 1455c1225b52SSam Leffler * mapping table. If an entry is present at the key 1456c1225b52SSam Leffler * index we return it; otherwise do a normal lookup and 1457c1225b52SSam Leffler * update the mapping table if the station has a unicast 1458c1225b52SSam Leffler * key assigned to it. 1459c1225b52SSam Leffler */ 1460c1225b52SSam Leffler struct ieee80211_node * 1461c1225b52SSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1462c1225b52SSam Leffler ieee80211_find_rxnode_withkey_debug(struct ieee80211com *ic, 1463c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix, 1464c1225b52SSam Leffler const char *func, int line) 1465c1225b52SSam Leffler #else 1466c1225b52SSam Leffler ieee80211_find_rxnode_withkey(struct ieee80211com *ic, 1467c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix) 1468c1225b52SSam Leffler #endif 1469c1225b52SSam Leffler { 1470c1225b52SSam Leffler struct ieee80211_node_table *nt; 1471c1225b52SSam Leffler struct ieee80211_node *ni; 1472c1225b52SSam Leffler 1473c1225b52SSam Leffler nt = &ic->ic_sta; 1474c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 1475c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) 1476c1225b52SSam Leffler ni = nt->nt_keyixmap[keyix]; 1477c1225b52SSam Leffler else 1478c1225b52SSam Leffler ni = NULL; 1479c1225b52SSam Leffler if (ni == NULL) { 1480a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 1481b032f27cSSam Leffler if (ni != NULL && nt->nt_keyixmap != NULL) { 1482c1225b52SSam Leffler /* 1483c1225b52SSam Leffler * If the station has a unicast key cache slot 1484c1225b52SSam Leffler * assigned update the key->node mapping table. 1485c1225b52SSam Leffler */ 1486c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1487c1225b52SSam Leffler /* XXX can keyixmap[keyix] != NULL? */ 1488c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1489c1225b52SSam Leffler nt->nt_keyixmap[keyix] == NULL) { 1490b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1491b032f27cSSam Leffler IEEE80211_MSG_NODE, 1492c1225b52SSam Leffler "%s: add key map entry %p<%s> refcnt %d\n", 1493c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1494c1225b52SSam Leffler ieee80211_node_refcnt(ni)+1); 1495c1225b52SSam Leffler nt->nt_keyixmap[keyix] = ieee80211_ref_node(ni); 1496c1225b52SSam Leffler } 1497c1225b52SSam Leffler } 1498a2cfa5b7SSam Leffler } else { 1499a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1500a2cfa5b7SSam Leffler ni = NULL; /* spam bcast probe req to all vap's */ 1501a2cfa5b7SSam Leffler else 1502c1225b52SSam Leffler ieee80211_ref_node(ni); 1503a2cfa5b7SSam Leffler } 1504c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1505c1225b52SSam Leffler 1506c1225b52SSam Leffler return ni; 1507c1225b52SSam Leffler } 1508a2cfa5b7SSam Leffler #undef IS_BCAST_PROBEREQ 1509a2cfa5b7SSam Leffler #undef IS_PROBEREQ 151068e8e04eSSam Leffler #undef IS_BAR 15118a1b9b6aSSam Leffler #undef IS_PSPOLL 15128a1b9b6aSSam Leffler #undef IS_CTL 15138a1b9b6aSSam Leffler 15148a1b9b6aSSam Leffler /* 1515750d6d0cSSam Leffler * Return a reference to the appropriate node for sending 1516750d6d0cSSam Leffler * a data frame. This handles node discovery in adhoc networks. 1517750d6d0cSSam Leffler */ 1518750d6d0cSSam Leffler struct ieee80211_node * 15198a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1520b032f27cSSam Leffler ieee80211_find_txnode_debug(struct ieee80211vap *vap, 1521b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], 15228a1b9b6aSSam Leffler const char *func, int line) 15238a1b9b6aSSam Leffler #else 1524b032f27cSSam Leffler ieee80211_find_txnode(struct ieee80211vap *vap, 1525b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 15268a1b9b6aSSam Leffler #endif 1527750d6d0cSSam Leffler { 1528b032f27cSSam Leffler struct ieee80211_node_table *nt = &vap->iv_ic->ic_sta; 1529750d6d0cSSam Leffler struct ieee80211_node *ni; 1530750d6d0cSSam Leffler 1531750d6d0cSSam Leffler /* 1532750d6d0cSSam Leffler * The destination address should be in the node table 1533c1225b52SSam Leffler * unless this is a multicast/broadcast frame. We can 1534c1225b52SSam Leffler * also optimize station mode operation, all frames go 1535c1225b52SSam Leffler * to the bss node. 1536750d6d0cSSam Leffler */ 1537750d6d0cSSam Leffler /* XXX can't hold lock across dup_bss 'cuz of recursive locking */ 15388a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1539b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA || 1540b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_WDS || 1541b032f27cSSam Leffler IEEE80211_IS_MULTICAST(macaddr)) 1542b032f27cSSam Leffler ni = ieee80211_ref_node(vap->iv_bss); 15431b999d64SSam Leffler else 1544b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 15458a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 15468a1b9b6aSSam Leffler 15478a1b9b6aSSam Leffler if (ni == NULL) { 1548b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS || 1549b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO) { 155090d0d036SSam Leffler /* 155190d0d036SSam Leffler * In adhoc mode cons up a node for the destination. 155290d0d036SSam Leffler * Note that we need an additional reference for the 1553b032f27cSSam Leffler * caller to be consistent with 1554b032f27cSSam Leffler * ieee80211_find_node_locked. 155590d0d036SSam Leffler */ 1556b032f27cSSam Leffler ni = ieee80211_fakeup_adhoc_node(vap, macaddr); 155790d0d036SSam Leffler if (ni != NULL) 155890d0d036SSam Leffler (void) ieee80211_ref_node(ni); 155990d0d036SSam Leffler } else { 1560b032f27cSSam Leffler IEEE80211_NOTE_MAC(vap, IEEE80211_MSG_OUTPUT, macaddr, 1561b032f27cSSam Leffler "no node, discard frame (%s)", __func__); 1562b032f27cSSam Leffler vap->iv_stats.is_tx_nonode++; 1563750d6d0cSSam Leffler } 1564750d6d0cSSam Leffler } 1565750d6d0cSSam Leffler return ni; 1566750d6d0cSSam Leffler } 1567750d6d0cSSam Leffler 15688a1b9b6aSSam Leffler static void 15698a1b9b6aSSam Leffler _ieee80211_free_node(struct ieee80211_node *ni) 15708a1b9b6aSSam Leffler { 15718a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 15728a1b9b6aSSam Leffler 157337e9743aSSam Leffler /* 157437e9743aSSam Leffler * NB: careful about referencing the vap as it may be 157537e9743aSSam Leffler * gone if the last reference was held by a driver. 157637e9743aSSam Leffler * We know the com will always be present so it's safe 157737e9743aSSam Leffler * to use ni_ic below to reclaim resources. 157837e9743aSSam Leffler */ 157937e9743aSSam Leffler #if 0 1580b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 158149a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 158249a15236SSam Leffler ether_sprintf(ni->ni_macaddr), 15838a1b9b6aSSam Leffler nt != NULL ? nt->nt_name : "<gone>"); 158437e9743aSSam Leffler #endif 158537e9743aSSam Leffler if (ni->ni_associd != 0) { 158637e9743aSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1587b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1588b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 158937e9743aSSam Leffler } 15908a1b9b6aSSam Leffler if (nt != NULL) { 15918a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 15928a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 15938a1b9b6aSSam Leffler } 159437e9743aSSam Leffler ni->ni_ic->ic_node_free(ni); 15958a1b9b6aSSam Leffler } 15968a1b9b6aSSam Leffler 15978a1b9b6aSSam Leffler void 15988a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 15998a1b9b6aSSam Leffler ieee80211_free_node_debug(struct ieee80211_node *ni, const char *func, int line) 16008a1b9b6aSSam Leffler #else 16018a1b9b6aSSam Leffler ieee80211_free_node(struct ieee80211_node *ni) 16028a1b9b6aSSam Leffler #endif 16038a1b9b6aSSam Leffler { 16048a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 16058a1b9b6aSSam Leffler 16068a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1607b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 160849a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line, ni, 16098a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)-1); 16108a1b9b6aSSam Leffler #endif 1611c1225b52SSam Leffler if (nt != NULL) { 1612c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 16138a1b9b6aSSam Leffler if (ieee80211_node_dectestref(ni)) { 16148a1b9b6aSSam Leffler /* 1615c1225b52SSam Leffler * Last reference, reclaim state. 16168a1b9b6aSSam Leffler */ 16178a1b9b6aSSam Leffler _ieee80211_free_node(ni); 1618c1225b52SSam Leffler } else if (ieee80211_node_refcnt(ni) == 1 && 1619c1225b52SSam Leffler nt->nt_keyixmap != NULL) { 1620c1225b52SSam Leffler ieee80211_keyix keyix; 1621c1225b52SSam Leffler /* 1622c1225b52SSam Leffler * Check for a last reference in the key mapping table. 1623c1225b52SSam Leffler */ 1624c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1625c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1626c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1627b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1628b032f27cSSam Leffler IEEE80211_MSG_NODE, 1629c1225b52SSam Leffler "%s: %p<%s> clear key map entry", __func__, 1630c1225b52SSam Leffler ni, ether_sprintf(ni->ni_macaddr)); 1631c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1632c1225b52SSam Leffler ieee80211_node_decref(ni); /* XXX needed? */ 16338a1b9b6aSSam Leffler _ieee80211_free_node(ni); 16348a1b9b6aSSam Leffler } 16351a1e1d21SSam Leffler } 1636c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1637c1225b52SSam Leffler } else { 1638c1225b52SSam Leffler if (ieee80211_node_dectestref(ni)) 1639c1225b52SSam Leffler _ieee80211_free_node(ni); 1640c1225b52SSam Leffler } 1641c1225b52SSam Leffler } 1642c1225b52SSam Leffler 1643c1225b52SSam Leffler /* 1644c1225b52SSam Leffler * Reclaim a unicast key and clear any key cache state. 1645c1225b52SSam Leffler */ 1646c1225b52SSam Leffler int 1647c1225b52SSam Leffler ieee80211_node_delucastkey(struct ieee80211_node *ni) 1648c1225b52SSam Leffler { 164937e9743aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 165037e9743aSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1651c1225b52SSam Leffler struct ieee80211_node *nikey; 1652c1225b52SSam Leffler ieee80211_keyix keyix; 1653c1225b52SSam Leffler int isowned, status; 1654c1225b52SSam Leffler 1655c1225b52SSam Leffler /* 1656c1225b52SSam Leffler * NB: We must beware of LOR here; deleting the key 1657c1225b52SSam Leffler * can cause the crypto layer to block traffic updates 1658c1225b52SSam Leffler * which can generate a LOR against the node table lock; 1659c1225b52SSam Leffler * grab it here and stash the key index for our use below. 1660c1225b52SSam Leffler * 1661c1225b52SSam Leffler * Must also beware of recursion on the node table lock. 1662c1225b52SSam Leffler * When called from node_cleanup we may already have 1663c1225b52SSam Leffler * the node table lock held. Unfortunately there's no 1664c1225b52SSam Leffler * way to separate out this path so we must do this 1665c1225b52SSam Leffler * conditionally. 1666c1225b52SSam Leffler */ 1667c1225b52SSam Leffler isowned = IEEE80211_NODE_IS_LOCKED(nt); 1668c1225b52SSam Leffler if (!isowned) 1669c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 167037e9743aSSam Leffler nikey = NULL; 167137e9743aSSam Leffler status = 1; /* NB: success */ 1672ca92652aSSam Leffler if (ni->ni_ucastkey.wk_keyix != IEEE80211_KEYIX_NONE) { 1673c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 167437e9743aSSam Leffler status = ieee80211_crypto_delkey(ni->ni_vap, &ni->ni_ucastkey); 1675c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) { 1676c1225b52SSam Leffler nikey = nt->nt_keyixmap[keyix]; 1677c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL;; 167837e9743aSSam Leffler } 167937e9743aSSam Leffler } 1680c1225b52SSam Leffler if (!isowned) 1681b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1682c1225b52SSam Leffler 1683c1225b52SSam Leffler if (nikey != NULL) { 1684c1225b52SSam Leffler KASSERT(nikey == ni, 1685c1225b52SSam Leffler ("key map out of sync, ni %p nikey %p", ni, nikey)); 168637e9743aSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1687c1225b52SSam Leffler "%s: delete key map entry %p<%s> refcnt %d\n", 1688c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1689c1225b52SSam Leffler ieee80211_node_refcnt(ni)-1); 1690c1225b52SSam Leffler ieee80211_free_node(ni); 1691c1225b52SSam Leffler } 1692c1225b52SSam Leffler return status; 1693c1225b52SSam Leffler } 16941a1e1d21SSam Leffler 1695303ebc3cSSam Leffler /* 16968a1b9b6aSSam Leffler * Reclaim a node. If this is the last reference count then 16978a1b9b6aSSam Leffler * do the normal free work. Otherwise remove it from the node 16988a1b9b6aSSam Leffler * table and mark it gone by clearing the back-reference. 16998a1b9b6aSSam Leffler */ 17008a1b9b6aSSam Leffler static void 17018a1b9b6aSSam Leffler node_reclaim(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 17028a1b9b6aSSam Leffler { 1703c1225b52SSam Leffler ieee80211_keyix keyix; 1704c1225b52SSam Leffler 1705c1225b52SSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 17068a1b9b6aSSam Leffler 1707b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 170849a15236SSam Leffler "%s: remove %p<%s> from %s table, refcnt %d\n", 170949a15236SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 171049a15236SSam Leffler nt->nt_name, ieee80211_node_refcnt(ni)-1); 1711c1225b52SSam Leffler /* 1712c1225b52SSam Leffler * Clear any entry in the unicast key mapping table. 1713c1225b52SSam Leffler * We need to do it here so rx lookups don't find it 1714c1225b52SSam Leffler * in the mapping table even if it's not in the hash 1715c1225b52SSam Leffler * table. We cannot depend on the mapping table entry 1716c1225b52SSam Leffler * being cleared because the node may not be free'd. 1717c1225b52SSam Leffler */ 1718c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1719c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax && 1720c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1721b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 172273bac36fSSam Leffler "%s: %p<%s> clear key map entry %u\n", 172373bac36fSSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), keyix); 1724c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1725c1225b52SSam Leffler ieee80211_node_decref(ni); /* NB: don't need free */ 1726c1225b52SSam Leffler } 17278a1b9b6aSSam Leffler if (!ieee80211_node_dectestref(ni)) { 17288a1b9b6aSSam Leffler /* 17298a1b9b6aSSam Leffler * Other references are present, just remove the 17308a1b9b6aSSam Leffler * node from the table so it cannot be found. When 17318a1b9b6aSSam Leffler * the references are dropped storage will be 1732acc4f7f5SSam Leffler * reclaimed. 17338a1b9b6aSSam Leffler */ 17348a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 17358a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 17368a1b9b6aSSam Leffler ni->ni_table = NULL; /* clear reference */ 17378a1b9b6aSSam Leffler } else 17388a1b9b6aSSam Leffler _ieee80211_free_node(ni); 17398a1b9b6aSSam Leffler } 17408a1b9b6aSSam Leffler 1741b032f27cSSam Leffler /* 1742b032f27cSSam Leffler * Node table support. 1743b032f27cSSam Leffler */ 1744b032f27cSSam Leffler 1745b032f27cSSam Leffler static void 1746b032f27cSSam Leffler ieee80211_node_table_init(struct ieee80211com *ic, 1747b032f27cSSam Leffler struct ieee80211_node_table *nt, 1748b032f27cSSam Leffler const char *name, int inact, int keyixmax) 1749b032f27cSSam Leffler { 1750b032f27cSSam Leffler struct ifnet *ifp = ic->ic_ifp; 1751b032f27cSSam Leffler 1752b032f27cSSam Leffler nt->nt_ic = ic; 1753b032f27cSSam Leffler IEEE80211_NODE_LOCK_INIT(nt, ifp->if_xname); 1754b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_INIT(nt, ifp->if_xname); 1755b032f27cSSam Leffler TAILQ_INIT(&nt->nt_node); 1756b032f27cSSam Leffler nt->nt_name = name; 1757b032f27cSSam Leffler nt->nt_scangen = 1; 1758b032f27cSSam Leffler nt->nt_inact_init = inact; 1759b032f27cSSam Leffler nt->nt_keyixmax = keyixmax; 1760b032f27cSSam Leffler if (nt->nt_keyixmax > 0) { 1761e2126decSSam Leffler nt->nt_keyixmap = (struct ieee80211_node **) malloc( 1762c5abbba3SDag-Erling Smørgrav keyixmax * sizeof(struct ieee80211_node *), 1763b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 1764b032f27cSSam Leffler if (nt->nt_keyixmap == NULL) 1765b032f27cSSam Leffler if_printf(ic->ic_ifp, 1766b032f27cSSam Leffler "Cannot allocate key index map with %u entries\n", 1767b032f27cSSam Leffler keyixmax); 1768b032f27cSSam Leffler } else 1769b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1770b032f27cSSam Leffler } 1771b032f27cSSam Leffler 1772b032f27cSSam Leffler static void 1773b032f27cSSam Leffler ieee80211_node_table_reset(struct ieee80211_node_table *nt, 1774b032f27cSSam Leffler struct ieee80211vap *match) 1775b032f27cSSam Leffler { 1776b032f27cSSam Leffler struct ieee80211_node *ni, *next; 1777b032f27cSSam Leffler 1778b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1779b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) { 1780b032f27cSSam Leffler if (match != NULL && ni->ni_vap != match) 1781b032f27cSSam Leffler continue; 1782b032f27cSSam Leffler /* XXX can this happen? if so need's work */ 1783b032f27cSSam Leffler if (ni->ni_associd != 0) { 1784b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1785b032f27cSSam Leffler 1786b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 1787b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 1788b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1789b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 1790b032f27cSSam Leffler } 1791b032f27cSSam Leffler ni->ni_wdsvap = NULL; /* clear reference */ 17928a1b9b6aSSam Leffler node_reclaim(nt, ni); 17938a1b9b6aSSam Leffler } 1794b032f27cSSam Leffler if (match != NULL && match->iv_opmode == IEEE80211_M_WDS) { 1795b032f27cSSam Leffler /* 1796b032f27cSSam Leffler * Make a separate pass to clear references to this vap 1797b032f27cSSam Leffler * held by DWDS entries. They will not be matched above 1798b032f27cSSam Leffler * because ni_vap will point to the ap vap but we still 1799b032f27cSSam Leffler * need to clear ni_wdsvap when the WDS vap is destroyed 1800b032f27cSSam Leffler * and/or reset. 1801b032f27cSSam Leffler */ 1802b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) 1803b032f27cSSam Leffler if (ni->ni_wdsvap == match) 1804b032f27cSSam Leffler ni->ni_wdsvap = NULL; 1805b032f27cSSam Leffler } 1806b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1807b032f27cSSam Leffler } 1808b032f27cSSam Leffler 1809b032f27cSSam Leffler static void 1810b032f27cSSam Leffler ieee80211_node_table_cleanup(struct ieee80211_node_table *nt) 1811b032f27cSSam Leffler { 1812b032f27cSSam Leffler ieee80211_node_table_reset(nt, NULL); 1813b032f27cSSam Leffler if (nt->nt_keyixmap != NULL) { 1814b032f27cSSam Leffler #ifdef DIAGNOSTIC 1815b032f27cSSam Leffler /* XXX verify all entries are NULL */ 1816b032f27cSSam Leffler int i; 1817b032f27cSSam Leffler for (i = 0; i < nt->nt_keyixmax; i++) 1818b032f27cSSam Leffler if (nt->nt_keyixmap[i] != NULL) 1819b032f27cSSam Leffler printf("%s: %s[%u] still active\n", __func__, 1820b032f27cSSam Leffler nt->nt_name, i); 1821b032f27cSSam Leffler #endif 1822e2126decSSam Leffler free(nt->nt_keyixmap, M_80211_NODE); 1823b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1824b032f27cSSam Leffler } 1825b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_DESTROY(nt); 1826b032f27cSSam Leffler IEEE80211_NODE_LOCK_DESTROY(nt); 18278a1b9b6aSSam Leffler } 18288a1b9b6aSSam Leffler 18298a1b9b6aSSam Leffler /* 18308a1b9b6aSSam Leffler * Timeout inactive stations and do related housekeeping. 18318a1b9b6aSSam Leffler * Note that we cannot hold the node lock while sending a 18328a1b9b6aSSam Leffler * frame as this would lead to a LOR. Instead we use a 18338a1b9b6aSSam Leffler * generation number to mark nodes that we've scanned and 18348a1b9b6aSSam Leffler * drop the lock and restart a scan if we have to time out 18358a1b9b6aSSam Leffler * a node. Since we are single-threaded by virtue of 1836303ebc3cSSam Leffler * controlling the inactivity timer we can be sure this will 1837303ebc3cSSam Leffler * process each node only once. 1838303ebc3cSSam Leffler */ 18398a1b9b6aSSam Leffler static void 1840b032f27cSSam Leffler ieee80211_timeout_stations(struct ieee80211com *ic) 18411a1e1d21SSam Leffler { 1842b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1843b032f27cSSam Leffler struct ieee80211vap *vap; 1844303ebc3cSSam Leffler struct ieee80211_node *ni; 1845b032f27cSSam Leffler int gen = 0; 18461a1e1d21SSam Leffler 1847b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 1848a1a50502SSam Leffler gen = ++nt->nt_scangen; 1849303ebc3cSSam Leffler restart: 18508a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 18518a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1852303ebc3cSSam Leffler if (ni->ni_scangen == gen) /* previously handled */ 1853303ebc3cSSam Leffler continue; 1854303ebc3cSSam Leffler ni->ni_scangen = gen; 18550a915fadSSam Leffler /* 1856ebdda46cSSam Leffler * Ignore entries for which have yet to receive an 1857ebdda46cSSam Leffler * authentication frame. These are transient and 1858ebdda46cSSam Leffler * will be reclaimed when the last reference to them 1859ebdda46cSSam Leffler * goes away (when frame xmits complete). 1860ebdda46cSSam Leffler */ 1861b032f27cSSam Leffler vap = ni->ni_vap; 1862b032f27cSSam Leffler /* 1863b032f27cSSam Leffler * Only process stations when in RUN state. This 1864b032f27cSSam Leffler * insures, for example, that we don't timeout an 1865b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 1866b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 1867b032f27cSSam Leffler * it applies to more than timeout processing. 1868b032f27cSSam Leffler */ 1869b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 1870b032f27cSSam Leffler continue; 1871b032f27cSSam Leffler /* XXX can vap be NULL? */ 1872b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 1873b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 187444b666cdSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 1875ebdda46cSSam Leffler continue; 1876ebdda46cSSam Leffler /* 18778a1b9b6aSSam Leffler * Free fragment if not needed anymore 18788a1b9b6aSSam Leffler * (last fragment older than 1s). 1879b032f27cSSam Leffler * XXX doesn't belong here, move to node_age 18800a915fadSSam Leffler */ 18818a1b9b6aSSam Leffler if (ni->ni_rxfrag[0] != NULL && 18828a1b9b6aSSam Leffler ticks > ni->ni_rxfragstamp + hz) { 18838a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[0]); 18848a1b9b6aSSam Leffler ni->ni_rxfrag[0] = NULL; 18858a1b9b6aSSam Leffler } 1886be1054edSSam Leffler if (ni->ni_inact > 0) { 1887c066143cSSam Leffler ni->ni_inact--; 1888be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 1889be1054edSSam Leffler "%s: inact %u inact_reload %u nrates %u", 1890be1054edSSam Leffler __func__, ni->ni_inact, ni->ni_inact_reload, 1891be1054edSSam Leffler ni->ni_rates.rs_nrates); 1892be1054edSSam Leffler } 1893ce647032SSam Leffler /* 1894ce647032SSam Leffler * Special case ourself; we may be idle for extended periods 1895ce647032SSam Leffler * of time and regardless reclaiming our state is wrong. 1896b032f27cSSam Leffler * XXX run ic_node_age 1897ce647032SSam Leffler */ 1898b032f27cSSam Leffler if (ni == vap->iv_bss) 1899ce647032SSam Leffler continue; 1900b032f27cSSam Leffler if (ni->ni_associd != 0 || 1901b032f27cSSam Leffler (vap->iv_opmode == IEEE80211_M_IBSS || 1902b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO)) { 19038a1b9b6aSSam Leffler /* 1904b032f27cSSam Leffler * Age/drain resources held by the station. 19058a1b9b6aSSam Leffler */ 1906b032f27cSSam Leffler ic->ic_node_age(ni); 19078a1b9b6aSSam Leffler /* 19088a1b9b6aSSam Leffler * Probe the station before time it out. We 19098a1b9b6aSSam Leffler * send a null data frame which may not be 19108a1b9b6aSSam Leffler * universally supported by drivers (need it 19118a1b9b6aSSam Leffler * for ps-poll support so it should be...). 191268e8e04eSSam Leffler * 191368e8e04eSSam Leffler * XXX don't probe the station unless we've 191468e8e04eSSam Leffler * received a frame from them (and have 191568e8e04eSSam Leffler * some idea of the rates they are capable 191668e8e04eSSam Leffler * of); this will get fixed more properly 191768e8e04eSSam Leffler * soon with better handling of the rate set. 19188a1b9b6aSSam Leffler */ 1919b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 1920c066143cSSam Leffler (0 < ni->ni_inact && 1921b032f27cSSam Leffler ni->ni_inact <= vap->iv_inact_probe) && 192268e8e04eSSam Leffler ni->ni_rates.rs_nrates != 0) { 1923b032f27cSSam Leffler IEEE80211_NOTE(vap, 1924f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, 1925f66d97f6SSam Leffler ni, "%s", 1926f66d97f6SSam Leffler "probe station due to inactivity"); 192719ad2dd7SSam Leffler /* 192819ad2dd7SSam Leffler * Grab a reference before unlocking the table 192919ad2dd7SSam Leffler * so the node cannot be reclaimed before we 193019ad2dd7SSam Leffler * send the frame. ieee80211_send_nulldata 193119ad2dd7SSam Leffler * understands we've done this and reclaims the 193219ad2dd7SSam Leffler * ref for us as needed. 193319ad2dd7SSam Leffler */ 193419ad2dd7SSam Leffler ieee80211_ref_node(ni); 19358a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1936f62121ceSSam Leffler ieee80211_send_nulldata(ni); 19378a1b9b6aSSam Leffler /* XXX stat? */ 19388a1b9b6aSSam Leffler goto restart; 19398a1b9b6aSSam Leffler } 19408a1b9b6aSSam Leffler } 1941b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 1942c066143cSSam Leffler ni->ni_inact <= 0) { 1943b032f27cSSam Leffler IEEE80211_NOTE(vap, 1944f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, ni, 1945f66d97f6SSam Leffler "station timed out due to inactivity " 1946f66d97f6SSam Leffler "(refcnt %u)", ieee80211_node_refcnt(ni)); 19478a1b9b6aSSam Leffler /* 19488a1b9b6aSSam Leffler * Send a deauthenticate frame and drop the station. 19498a1b9b6aSSam Leffler * This is somewhat complicated due to reference counts 19508a1b9b6aSSam Leffler * and locking. At this point a station will typically 19518a1b9b6aSSam Leffler * have a reference count of 1. ieee80211_node_leave 19528a1b9b6aSSam Leffler * will do a "free" of the node which will drop the 19538a1b9b6aSSam Leffler * reference count. But in the meantime a reference 19548a1b9b6aSSam Leffler * wil be held by the deauth frame. The actual reclaim 19558a1b9b6aSSam Leffler * of the node will happen either after the tx is 19568a1b9b6aSSam Leffler * completed or by ieee80211_node_leave. 19578a1b9b6aSSam Leffler * 19588a1b9b6aSSam Leffler * Separately we must drop the node lock before sending 195968e8e04eSSam Leffler * in case the driver takes a lock, as this can result 196068e8e04eSSam Leffler * in a LOR between the node lock and the driver lock. 19618a1b9b6aSSam Leffler */ 19625698ab1aSSam Leffler ieee80211_ref_node(ni); 19638a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 19648a1b9b6aSSam Leffler if (ni->ni_associd != 0) { 1965b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, 19661a1e1d21SSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH, 19671a1e1d21SSam Leffler IEEE80211_REASON_AUTH_EXPIRE); 19688a1b9b6aSSam Leffler } 1969b032f27cSSam Leffler ieee80211_node_leave(ni); 19705698ab1aSSam Leffler ieee80211_free_node(ni); 1971b032f27cSSam Leffler vap->iv_stats.is_node_timeout++; 1972303ebc3cSSam Leffler goto restart; 1973303ebc3cSSam Leffler } 19741a1e1d21SSam Leffler } 19758a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 19768a1b9b6aSSam Leffler 1977b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 197868e8e04eSSam Leffler } 19798a1b9b6aSSam Leffler 1980b032f27cSSam Leffler /* 1981b032f27cSSam Leffler * Aggressively reclaim resources. This should be used 1982b032f27cSSam Leffler * only in a critical situation to reclaim mbuf resources. 1983b032f27cSSam Leffler */ 1984b032f27cSSam Leffler void 1985b032f27cSSam Leffler ieee80211_drain(struct ieee80211com *ic) 1986b032f27cSSam Leffler { 1987b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1988b032f27cSSam Leffler struct ieee80211vap *vap; 1989b032f27cSSam Leffler struct ieee80211_node *ni; 1990b032f27cSSam Leffler 1991b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1992b032f27cSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1993b032f27cSSam Leffler /* 1994b032f27cSSam Leffler * Ignore entries for which have yet to receive an 1995b032f27cSSam Leffler * authentication frame. These are transient and 1996b032f27cSSam Leffler * will be reclaimed when the last reference to them 1997b032f27cSSam Leffler * goes away (when frame xmits complete). 1998b032f27cSSam Leffler */ 1999b032f27cSSam Leffler vap = ni->ni_vap; 2000b032f27cSSam Leffler /* 2001b032f27cSSam Leffler * Only process stations when in RUN state. This 2002b032f27cSSam Leffler * insures, for example, that we don't timeout an 2003b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 2004b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 2005b032f27cSSam Leffler * it applies to more than timeout processing. 2006b032f27cSSam Leffler */ 2007b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 2008b032f27cSSam Leffler continue; 2009b032f27cSSam Leffler /* XXX can vap be NULL? */ 2010b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 2011b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 2012b032f27cSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 2013b032f27cSSam Leffler continue; 2014b032f27cSSam Leffler /* 2015b032f27cSSam Leffler * Free fragments. 2016b032f27cSSam Leffler * XXX doesn't belong here, move to node_drain 2017b032f27cSSam Leffler */ 2018b032f27cSSam Leffler if (ni->ni_rxfrag[0] != NULL) { 2019b032f27cSSam Leffler m_freem(ni->ni_rxfrag[0]); 2020b032f27cSSam Leffler ni->ni_rxfrag[0] = NULL; 2021b032f27cSSam Leffler } 2022b032f27cSSam Leffler /* 2023b032f27cSSam Leffler * Drain resources held by the station. 2024b032f27cSSam Leffler */ 2025b032f27cSSam Leffler ic->ic_node_drain(ni); 2026b032f27cSSam Leffler } 2027b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 2028b032f27cSSam Leffler } 2029b032f27cSSam Leffler 2030b032f27cSSam Leffler /* 2031b032f27cSSam Leffler * Per-ieee80211com inactivity timer callback. 2032b032f27cSSam Leffler */ 203368e8e04eSSam Leffler void 203468e8e04eSSam Leffler ieee80211_node_timeout(void *arg) 203568e8e04eSSam Leffler { 203668e8e04eSSam Leffler struct ieee80211com *ic = arg; 203768e8e04eSSam Leffler 2038b032f27cSSam Leffler /* 2039b032f27cSSam Leffler * Defer timeout processing if a channel switch is pending. 2040b032f27cSSam Leffler * We typically need to be mute so not doing things that 2041b032f27cSSam Leffler * might generate frames is good to handle in one place. 2042b032f27cSSam Leffler * Supressing the station timeout processing may extend the 2043b032f27cSSam Leffler * lifetime of inactive stations (by not decrementing their 2044b032f27cSSam Leffler * idle counters) but this should be ok unless the CSA is 2045b032f27cSSam Leffler * active for an unusually long time. 2046b032f27cSSam Leffler */ 2047b032f27cSSam Leffler if ((ic->ic_flags & IEEE80211_F_CSAPENDING) == 0) { 204868e8e04eSSam Leffler ieee80211_scan_timeout(ic); 2049b032f27cSSam Leffler ieee80211_timeout_stations(ic); 205068e8e04eSSam Leffler 2051b105a069SSam Leffler IEEE80211_LOCK(ic); 2052b105a069SSam Leffler ieee80211_erp_timeout(ic); 20531b6167d2SSam Leffler ieee80211_ht_timeout(ic); 2054b105a069SSam Leffler IEEE80211_UNLOCK(ic); 2055b032f27cSSam Leffler } 205668e8e04eSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 205768e8e04eSSam Leffler ieee80211_node_timeout, ic); 20581a1e1d21SSam Leffler } 20591a1e1d21SSam Leffler 20601a1e1d21SSam Leffler void 2061b032f27cSSam Leffler ieee80211_iterate_nodes(struct ieee80211_node_table *nt, 2062b032f27cSSam Leffler ieee80211_iter_func *f, void *arg) 20631a1e1d21SSam Leffler { 20641a1e1d21SSam Leffler struct ieee80211_node *ni; 20658a1b9b6aSSam Leffler u_int gen; 20661a1e1d21SSam Leffler 2067b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 2068a1a50502SSam Leffler gen = ++nt->nt_scangen; 20698a1b9b6aSSam Leffler restart: 20708a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 20718a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 20728a1b9b6aSSam Leffler if (ni->ni_scangen != gen) { 20738a1b9b6aSSam Leffler ni->ni_scangen = gen; 20748a1b9b6aSSam Leffler (void) ieee80211_ref_node(ni); 20758a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20761a1e1d21SSam Leffler (*f)(arg, ni); 20778a1b9b6aSSam Leffler ieee80211_free_node(ni); 20788a1b9b6aSSam Leffler goto restart; 20798a1b9b6aSSam Leffler } 20808a1b9b6aSSam Leffler } 20818a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20828a1b9b6aSSam Leffler 2083b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 20848a1b9b6aSSam Leffler } 20858a1b9b6aSSam Leffler 20868a1b9b6aSSam Leffler void 20878a1b9b6aSSam Leffler ieee80211_dump_node(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 20888a1b9b6aSSam Leffler { 20898a1b9b6aSSam Leffler printf("0x%p: mac %s refcnt %d\n", ni, 20908a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)); 20918a1b9b6aSSam Leffler printf("\tscangen %u authmode %u flags 0x%x\n", 20928a1b9b6aSSam Leffler ni->ni_scangen, ni->ni_authmode, ni->ni_flags); 20938a1b9b6aSSam Leffler printf("\tassocid 0x%x txpower %u vlan %u\n", 20948a1b9b6aSSam Leffler ni->ni_associd, ni->ni_txpower, ni->ni_vlan); 20958a1b9b6aSSam Leffler printf("\ttxseq %u rxseq %u fragno %u rxfragstamp %u\n", 2096801df4a5SSam Leffler ni->ni_txseqs[IEEE80211_NONQOS_TID], 2097801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] >> IEEE80211_SEQ_SEQ_SHIFT, 2098801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] & IEEE80211_SEQ_FRAG_MASK, 20998a1b9b6aSSam Leffler ni->ni_rxfragstamp); 210068e8e04eSSam Leffler printf("\trstamp %u rssi %d noise %d intval %u capinfo 0x%x\n", 2101b032f27cSSam Leffler ni->ni_rstamp, node_getrssi(ni), ni->ni_noise, 210268e8e04eSSam Leffler ni->ni_intval, ni->ni_capinfo); 21038a1b9b6aSSam Leffler printf("\tbssid %s essid \"%.*s\" channel %u:0x%x\n", 21048a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 21058a1b9b6aSSam Leffler ni->ni_esslen, ni->ni_essid, 21068a1b9b6aSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags); 2107be1054edSSam Leffler printf("\tinact %u inact_reload %u txrate %u\n", 2108be1054edSSam Leffler ni->ni_inact, ni->ni_inact_reload, ni->ni_txrate); 210968e8e04eSSam Leffler printf("\thtcap %x htparam %x htctlchan %u ht2ndchan %u\n", 211068e8e04eSSam Leffler ni->ni_htcap, ni->ni_htparam, 211168e8e04eSSam Leffler ni->ni_htctlchan, ni->ni_ht2ndchan); 211268e8e04eSSam Leffler printf("\thtopmode %x htstbc %x chw %u\n", 211368e8e04eSSam Leffler ni->ni_htopmode, ni->ni_htstbc, ni->ni_chw); 21148a1b9b6aSSam Leffler } 21158a1b9b6aSSam Leffler 21168a1b9b6aSSam Leffler void 21178a1b9b6aSSam Leffler ieee80211_dump_nodes(struct ieee80211_node_table *nt) 21188a1b9b6aSSam Leffler { 21198a1b9b6aSSam Leffler ieee80211_iterate_nodes(nt, 21208a1b9b6aSSam Leffler (ieee80211_iter_func *) ieee80211_dump_node, nt); 21218a1b9b6aSSam Leffler } 21228a1b9b6aSSam Leffler 21232dc4d8dcSSam Leffler static void 21242dc4d8dcSSam Leffler ieee80211_notify_erp_locked(struct ieee80211com *ic) 2125b105a069SSam Leffler { 2126b032f27cSSam Leffler struct ieee80211vap *vap; 2127b032f27cSSam Leffler 2128b032f27cSSam Leffler IEEE80211_LOCK_ASSERT(ic); 2129b032f27cSSam Leffler 2130b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) 2131b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) 2132b032f27cSSam Leffler ieee80211_beacon_notify(vap, IEEE80211_BEACON_ERP); 2133b105a069SSam Leffler } 2134b105a069SSam Leffler 21352dc4d8dcSSam Leffler void 21362dc4d8dcSSam Leffler ieee80211_notify_erp(struct ieee80211com *ic) 21372dc4d8dcSSam Leffler { 21382dc4d8dcSSam Leffler IEEE80211_LOCK(ic); 21392dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 21402dc4d8dcSSam Leffler IEEE80211_UNLOCK(ic); 21412dc4d8dcSSam Leffler } 21422dc4d8dcSSam Leffler 21438a1b9b6aSSam Leffler /* 21448a1b9b6aSSam Leffler * Handle a station joining an 11g network. 21458a1b9b6aSSam Leffler */ 21468a1b9b6aSSam Leffler static void 2147b032f27cSSam Leffler ieee80211_node_join_11g(struct ieee80211_node *ni) 21488a1b9b6aSSam Leffler { 2149b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 21508a1b9b6aSSam Leffler 21511b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 21521b6167d2SSam Leffler 21538a1b9b6aSSam Leffler /* 21548a1b9b6aSSam Leffler * Station isn't capable of short slot time. Bump 21558a1b9b6aSSam Leffler * the count of long slot time stations and disable 21568a1b9b6aSSam Leffler * use of short slot time. Note that the actual switch 21578a1b9b6aSSam Leffler * over to long slot time use may not occur until the 21588a1b9b6aSSam Leffler * next beacon transmission (per sec. 7.3.1.4 of 11g). 21598a1b9b6aSSam Leffler */ 21608a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 21618a1b9b6aSSam Leffler ic->ic_longslotsta++; 2162b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2163b105a069SSam Leffler "station needs long slot time, count %d", 2164b105a069SSam Leffler ic->ic_longslotsta); 21658a1b9b6aSSam Leffler /* XXX vap's w/ conflicting needs won't work */ 216668e8e04eSSam Leffler if (!IEEE80211_IS_CHAN_108G(ic->ic_bsschan)) { 216768e8e04eSSam Leffler /* 216868e8e04eSSam Leffler * Don't force slot time when switched to turbo 216968e8e04eSSam Leffler * mode as non-ERP stations won't be present; this 217068e8e04eSSam Leffler * need only be done when on the normal G channel. 217168e8e04eSSam Leffler */ 21728a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 0); 21738a1b9b6aSSam Leffler } 217468e8e04eSSam Leffler } 21758a1b9b6aSSam Leffler /* 21768a1b9b6aSSam Leffler * If the new station is not an ERP station 21778a1b9b6aSSam Leffler * then bump the counter and enable protection 21788a1b9b6aSSam Leffler * if configured. 21798a1b9b6aSSam Leffler */ 2180b032f27cSSam Leffler if (!ieee80211_iserp_rateset(&ni->ni_rates)) { 21818a1b9b6aSSam Leffler ic->ic_nonerpsta++; 2182b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2183b105a069SSam Leffler "station is !ERP, %d non-ERP stations associated", 2184b105a069SSam Leffler ic->ic_nonerpsta); 21858a1b9b6aSSam Leffler /* 21868a1b9b6aSSam Leffler * If station does not support short preamble 21878a1b9b6aSSam Leffler * then we must enable use of Barker preamble. 21888a1b9b6aSSam Leffler */ 21898a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_PREAMBLE) == 0) { 2190b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2191b105a069SSam Leffler "%s", "station needs long preamble"); 21928a1b9b6aSSam Leffler ic->ic_flags |= IEEE80211_F_USEBARKER; 21938a1b9b6aSSam Leffler ic->ic_flags &= ~IEEE80211_F_SHPREAMBLE; 21948a1b9b6aSSam Leffler } 2195b105a069SSam Leffler /* 2196b032f27cSSam Leffler * If protection is configured and this is the first 2197b032f27cSSam Leffler * indication we should use protection, enable it. 2198b105a069SSam Leffler */ 2199b105a069SSam Leffler if (ic->ic_protmode != IEEE80211_PROT_NONE && 2200b105a069SSam Leffler ic->ic_nonerpsta == 1 && 2201b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2202b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 2203b105a069SSam Leffler "%s: enable use of protection\n", __func__); 2204b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_USEPROT; 22052dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2206b105a069SSam Leffler } 22078a1b9b6aSSam Leffler } else 22088a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 22098a1b9b6aSSam Leffler } 22108a1b9b6aSSam Leffler 22118a1b9b6aSSam Leffler void 2212b032f27cSSam Leffler ieee80211_node_join(struct ieee80211_node *ni, int resp) 22138a1b9b6aSSam Leffler { 2214b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2215b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 22168a1b9b6aSSam Leffler int newassoc; 22178a1b9b6aSSam Leffler 22188a1b9b6aSSam Leffler if (ni->ni_associd == 0) { 221968e8e04eSSam Leffler uint16_t aid; 22208a1b9b6aSSam Leffler 2221b032f27cSSam Leffler KASSERT(vap->iv_aid_bitmap != NULL, ("no aid bitmap")); 22228a1b9b6aSSam Leffler /* 22238a1b9b6aSSam Leffler * It would be good to search the bitmap 22248a1b9b6aSSam Leffler * more efficiently, but this will do for now. 22258a1b9b6aSSam Leffler */ 2226b032f27cSSam Leffler for (aid = 1; aid < vap->iv_max_aid; aid++) { 2227b032f27cSSam Leffler if (!IEEE80211_AID_ISSET(vap, aid)) 22288a1b9b6aSSam Leffler break; 22298a1b9b6aSSam Leffler } 2230b032f27cSSam Leffler if (aid >= vap->iv_max_aid) { 223113f91245SSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_TOOMANY); 2232b032f27cSSam Leffler ieee80211_node_leave(ni); 22338a1b9b6aSSam Leffler return; 22348a1b9b6aSSam Leffler } 22358a1b9b6aSSam Leffler ni->ni_associd = aid | 0xc000; 22361b6167d2SSam Leffler ni->ni_jointime = time_uptime; 2237b032f27cSSam Leffler IEEE80211_LOCK(ic); 2238b032f27cSSam Leffler IEEE80211_AID_SET(vap, ni->ni_associd); 2239b032f27cSSam Leffler vap->iv_sta_assoc++; 22408a1b9b6aSSam Leffler ic->ic_sta_assoc++; 22411b6167d2SSam Leffler 22421b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 22431b6167d2SSam Leffler ieee80211_ht_node_join(ni); 224468e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 224568e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2246b032f27cSSam Leffler ieee80211_node_join_11g(ni); 22471b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 22481b6167d2SSam Leffler 22491b6167d2SSam Leffler newassoc = 1; 22508a1b9b6aSSam Leffler } else 22518a1b9b6aSSam Leffler newassoc = 0; 22528a1b9b6aSSam Leffler 2253b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 225444f7a6edSSam Leffler "station associated at aid %d: %s preamble, %s slot time%s%s%s%s%s%s%s%s", 2255b8fcf546SSam Leffler IEEE80211_NODE_AID(ni), 2256b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHPREAMBLE ? "short" : "long", 2257b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHSLOT ? "short" : "long", 2258b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_USEPROT ? ", protection" : "", 225968e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_QOS ? ", QoS" : "", 226068e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_HT ? 22610f52b1c4SSam Leffler (ni->ni_chw == 40 ? ", HT40" : ", HT20") : "", 22621b6167d2SSam Leffler ni->ni_flags & IEEE80211_NODE_AMPDU ? " (+AMPDU)" : "", 22638c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_RTS ? " (+SMPS-DYN)" : 22648c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_PS ? " (+SMPS)" : "", 226544f7a6edSSam Leffler ni->ni_flags & IEEE80211_NODE_RIFS ? " (+RIFS)" : "", 2266b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_FF) ? 226768e8e04eSSam Leffler ", fast-frames" : "", 2268b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_TURBOP) ? 226968e8e04eSSam Leffler ", turbo" : "" 2270b8fcf546SSam Leffler ); 22718a1b9b6aSSam Leffler 227201a03542SSam Leffler node_setuptxparms(ni); 22738a1b9b6aSSam Leffler /* give driver a chance to setup state like ni_txrate */ 2274736b3dc3SSam Leffler if (ic->ic_newassoc != NULL) 2275e9962332SSam Leffler ic->ic_newassoc(ni, newassoc); 2276b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_SUCCESS); 22778a1b9b6aSSam Leffler /* tell the authenticator about new station */ 2278b032f27cSSam Leffler if (vap->iv_auth->ia_node_join != NULL) 2279b032f27cSSam Leffler vap->iv_auth->ia_node_join(ni); 2280b032f27cSSam Leffler ieee80211_notify_node_join(ni, 2281ce8977dfSSam Leffler resp == IEEE80211_FC0_SUBTYPE_ASSOC_RESP); 22828a1b9b6aSSam Leffler } 22838a1b9b6aSSam Leffler 2284b105a069SSam Leffler static void 2285b105a069SSam Leffler disable_protection(struct ieee80211com *ic) 2286b105a069SSam Leffler { 2287b105a069SSam Leffler KASSERT(ic->ic_nonerpsta == 0 && 2288b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0, 2289b105a069SSam Leffler ("%d non ERP stations, flags 0x%x", ic->ic_nonerpsta, 2290b105a069SSam Leffler ic->ic_flags_ext)); 2291b105a069SSam Leffler 2292b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEPROT; 2293b105a069SSam Leffler /* XXX verify mode? */ 2294b105a069SSam Leffler if (ic->ic_caps & IEEE80211_C_SHPREAMBLE) { 2295b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_SHPREAMBLE; 2296b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEBARKER; 2297b105a069SSam Leffler } 22982dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2299b105a069SSam Leffler } 2300b105a069SSam Leffler 23018a1b9b6aSSam Leffler /* 23028a1b9b6aSSam Leffler * Handle a station leaving an 11g network. 23038a1b9b6aSSam Leffler */ 23048a1b9b6aSSam Leffler static void 2305b032f27cSSam Leffler ieee80211_node_leave_11g(struct ieee80211_node *ni) 23068a1b9b6aSSam Leffler { 2307b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 23088a1b9b6aSSam Leffler 23091b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 23101b6167d2SSam Leffler 231168e8e04eSSam Leffler KASSERT(IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan), 2312b032f27cSSam Leffler ("not in 11g, bss %u:0x%x", ic->ic_bsschan->ic_freq, 2313b032f27cSSam Leffler ic->ic_bsschan->ic_flags)); 23148a1b9b6aSSam Leffler 23158a1b9b6aSSam Leffler /* 23168a1b9b6aSSam Leffler * If a long slot station do the slot time bookkeeping. 23178a1b9b6aSSam Leffler */ 23188a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 23198a1b9b6aSSam Leffler KASSERT(ic->ic_longslotsta > 0, 23208a1b9b6aSSam Leffler ("bogus long slot station count %d", ic->ic_longslotsta)); 23218a1b9b6aSSam Leffler ic->ic_longslotsta--; 2322b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2323b105a069SSam Leffler "long slot time station leaves, count now %d", 2324b105a069SSam Leffler ic->ic_longslotsta); 23258a1b9b6aSSam Leffler if (ic->ic_longslotsta == 0) { 23268a1b9b6aSSam Leffler /* 23278a1b9b6aSSam Leffler * Re-enable use of short slot time if supported 23288a1b9b6aSSam Leffler * and not operating in IBSS mode (per spec). 23298a1b9b6aSSam Leffler */ 23308a1b9b6aSSam Leffler if ((ic->ic_caps & IEEE80211_C_SHSLOT) && 23318a1b9b6aSSam Leffler ic->ic_opmode != IEEE80211_M_IBSS) { 2332b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 2333b032f27cSSam Leffler IEEE80211_MSG_ASSOC, 23348a1b9b6aSSam Leffler "%s: re-enable use of short slot time\n", 23358a1b9b6aSSam Leffler __func__); 23368a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 1); 23378a1b9b6aSSam Leffler } 23388a1b9b6aSSam Leffler } 23398a1b9b6aSSam Leffler } 23408a1b9b6aSSam Leffler /* 23418a1b9b6aSSam Leffler * If a non-ERP station do the protection-related bookkeeping. 23428a1b9b6aSSam Leffler */ 23438a1b9b6aSSam Leffler if ((ni->ni_flags & IEEE80211_NODE_ERP) == 0) { 23448a1b9b6aSSam Leffler KASSERT(ic->ic_nonerpsta > 0, 23458a1b9b6aSSam Leffler ("bogus non-ERP station count %d", ic->ic_nonerpsta)); 23468a1b9b6aSSam Leffler ic->ic_nonerpsta--; 2347b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2348b105a069SSam Leffler "non-ERP station leaves, count now %d%s", ic->ic_nonerpsta, 2349b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) ? 2350b105a069SSam Leffler " (non-ERP sta present)" : ""); 2351b105a069SSam Leffler if (ic->ic_nonerpsta == 0 && 2352b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2353b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 23548a1b9b6aSSam Leffler "%s: disable use of protection\n", __func__); 2355b105a069SSam Leffler disable_protection(ic); 2356b105a069SSam Leffler } 2357b105a069SSam Leffler } 2358b105a069SSam Leffler } 2359b105a069SSam Leffler 2360b105a069SSam Leffler /* 2361b105a069SSam Leffler * Time out presence of an overlapping bss with non-ERP 2362b105a069SSam Leffler * stations. When operating in hostap mode we listen for 2363b105a069SSam Leffler * beacons from other stations and if we identify a non-ERP 2364b105a069SSam Leffler * station is present we enable protection. To identify 2365b105a069SSam Leffler * when all non-ERP stations are gone we time out this 2366b105a069SSam Leffler * condition. 2367b105a069SSam Leffler */ 2368b105a069SSam Leffler static void 2369b105a069SSam Leffler ieee80211_erp_timeout(struct ieee80211com *ic) 2370b105a069SSam Leffler { 2371b105a069SSam Leffler 2372b105a069SSam Leffler IEEE80211_LOCK_ASSERT(ic); 2373b105a069SSam Leffler 2374b105a069SSam Leffler if ((ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) && 2375b105a069SSam Leffler time_after(ticks, ic->ic_lastnonerp + IEEE80211_NONERP_PRESENT_AGE)) { 2376b032f27cSSam Leffler #if 0 2377b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC, ni, 2378b032f27cSSam Leffler "%s", "age out non-ERP sta present on channel"); 2379b032f27cSSam Leffler #endif 2380b105a069SSam Leffler ic->ic_flags_ext &= ~IEEE80211_FEXT_NONERP_PR; 2381b105a069SSam Leffler if (ic->ic_nonerpsta == 0) 2382b105a069SSam Leffler disable_protection(ic); 23838a1b9b6aSSam Leffler } 23848a1b9b6aSSam Leffler } 23858a1b9b6aSSam Leffler 23868a1b9b6aSSam Leffler /* 23878a1b9b6aSSam Leffler * Handle bookkeeping for station deauthentication/disassociation 23888a1b9b6aSSam Leffler * when operating as an ap. 23898a1b9b6aSSam Leffler */ 23908a1b9b6aSSam Leffler void 2391b032f27cSSam Leffler ieee80211_node_leave(struct ieee80211_node *ni) 23928a1b9b6aSSam Leffler { 2393b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2394b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 239544acc00dSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 23968a1b9b6aSSam Leffler 2397b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 2398b105a069SSam Leffler "station with aid %d leaves", IEEE80211_NODE_AID(ni)); 23998a1b9b6aSSam Leffler 2400b032f27cSSam Leffler KASSERT(vap->iv_opmode != IEEE80211_M_STA, 2401b032f27cSSam Leffler ("unexpected operating mode %u", vap->iv_opmode)); 24028a1b9b6aSSam Leffler /* 24038a1b9b6aSSam Leffler * If node wasn't previously associated all 24048a1b9b6aSSam Leffler * we need to do is reclaim the reference. 24058a1b9b6aSSam Leffler */ 24068a1b9b6aSSam Leffler /* XXX ibss mode bypasses 11g and notification */ 24078a1b9b6aSSam Leffler if (ni->ni_associd == 0) 24088a1b9b6aSSam Leffler goto done; 24098a1b9b6aSSam Leffler /* 24108a1b9b6aSSam Leffler * Tell the authenticator the station is leaving. 24118a1b9b6aSSam Leffler * Note that we must do this before yanking the 24128a1b9b6aSSam Leffler * association id as the authenticator uses the 24138a1b9b6aSSam Leffler * associd to locate it's state block. 24148a1b9b6aSSam Leffler */ 2415b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 2416b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 24171b6167d2SSam Leffler 24181b6167d2SSam Leffler IEEE80211_LOCK(ic); 2419b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 24208a1b9b6aSSam Leffler ni->ni_associd = 0; 2421b032f27cSSam Leffler vap->iv_sta_assoc--; 24228a1b9b6aSSam Leffler ic->ic_sta_assoc--; 24238a1b9b6aSSam Leffler 24241b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 24251b6167d2SSam Leffler ieee80211_ht_node_leave(ni); 242668e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 242768e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2428b032f27cSSam Leffler ieee80211_node_leave_11g(ni); 24291b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 24308a1b9b6aSSam Leffler /* 24318a1b9b6aSSam Leffler * Cleanup station state. In particular clear various 24328a1b9b6aSSam Leffler * state that might otherwise be reused if the node 24338a1b9b6aSSam Leffler * is reused before the reference count goes to zero 24348a1b9b6aSSam Leffler * (and memory is reclaimed). 24358a1b9b6aSSam Leffler */ 2436b032f27cSSam Leffler ieee80211_sta_leave(ni); 24378a1b9b6aSSam Leffler done: 243844acc00dSSam Leffler /* 243944acc00dSSam Leffler * Remove the node from any table it's recorded in and 244044acc00dSSam Leffler * drop the caller's reference. Removal from the table 244144acc00dSSam Leffler * is important to insure the node is not reprocessed 244244acc00dSSam Leffler * for inactivity. 244344acc00dSSam Leffler */ 244444acc00dSSam Leffler if (nt != NULL) { 244544acc00dSSam Leffler IEEE80211_NODE_LOCK(nt); 244644acc00dSSam Leffler node_reclaim(nt, ni); 244744acc00dSSam Leffler IEEE80211_NODE_UNLOCK(nt); 244844acc00dSSam Leffler } else 24498a1b9b6aSSam Leffler ieee80211_free_node(ni); 24508a1b9b6aSSam Leffler } 24518a1b9b6aSSam Leffler 2452b032f27cSSam Leffler struct rssiinfo { 2453b032f27cSSam Leffler struct ieee80211vap *vap; 2454b032f27cSSam Leffler int rssi_samples; 2455b032f27cSSam Leffler uint32_t rssi_total; 2456b032f27cSSam Leffler }; 2457b032f27cSSam Leffler 2458b032f27cSSam Leffler static void 2459b032f27cSSam Leffler get_hostap_rssi(void *arg, struct ieee80211_node *ni) 2460b032f27cSSam Leffler { 2461b032f27cSSam Leffler struct rssiinfo *info = arg; 2462b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2463b032f27cSSam Leffler int8_t rssi; 2464b032f27cSSam Leffler 2465b032f27cSSam Leffler if (info->vap != vap) 2466b032f27cSSam Leffler return; 2467b032f27cSSam Leffler /* only associated stations */ 2468b032f27cSSam Leffler if (ni->ni_associd == 0) 2469b032f27cSSam Leffler return; 2470b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2471b032f27cSSam Leffler if (rssi != 0) { 2472b032f27cSSam Leffler info->rssi_samples++; 2473b032f27cSSam Leffler info->rssi_total += rssi; 2474b032f27cSSam Leffler } 2475b032f27cSSam Leffler } 2476b032f27cSSam Leffler 2477b032f27cSSam Leffler static void 2478b032f27cSSam Leffler get_adhoc_rssi(void *arg, struct ieee80211_node *ni) 2479b032f27cSSam Leffler { 2480b032f27cSSam Leffler struct rssiinfo *info = arg; 2481b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2482b032f27cSSam Leffler int8_t rssi; 2483b032f27cSSam Leffler 2484b032f27cSSam Leffler if (info->vap != vap) 2485b032f27cSSam Leffler return; 2486b032f27cSSam Leffler /* only neighbors */ 2487b032f27cSSam Leffler /* XXX check bssid */ 2488b032f27cSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 2489b032f27cSSam Leffler return; 2490b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2491b032f27cSSam Leffler if (rssi != 0) { 2492b032f27cSSam Leffler info->rssi_samples++; 2493b032f27cSSam Leffler info->rssi_total += rssi; 2494b032f27cSSam Leffler } 2495b032f27cSSam Leffler } 2496b032f27cSSam Leffler 249768e8e04eSSam Leffler int8_t 2498b032f27cSSam Leffler ieee80211_getrssi(struct ieee80211vap *vap) 24998a1b9b6aSSam Leffler { 25008a1b9b6aSSam Leffler #define NZ(x) ((x) == 0 ? 1 : (x)) 2501b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 2502b032f27cSSam Leffler struct rssiinfo info; 25038a1b9b6aSSam Leffler 2504b032f27cSSam Leffler info.rssi_total = 0; 2505b032f27cSSam Leffler info.rssi_samples = 0; 2506b032f27cSSam Leffler info.vap = vap; 2507b032f27cSSam Leffler switch (vap->iv_opmode) { 25088a1b9b6aSSam Leffler case IEEE80211_M_IBSS: /* average of all ibss neighbors */ 25098a1b9b6aSSam Leffler case IEEE80211_M_AHDEMO: /* average of all neighbors */ 2510b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_adhoc_rssi, &info); 2511b032f27cSSam Leffler break; 25128a1b9b6aSSam Leffler case IEEE80211_M_HOSTAP: /* average of all associated stations */ 2513b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_hostap_rssi, &info); 25148a1b9b6aSSam Leffler break; 25158a1b9b6aSSam Leffler case IEEE80211_M_MONITOR: /* XXX */ 25168a1b9b6aSSam Leffler case IEEE80211_M_STA: /* use stats from associated ap */ 25178a1b9b6aSSam Leffler default: 2518b032f27cSSam Leffler if (vap->iv_bss != NULL) 2519b032f27cSSam Leffler info.rssi_total = ic->ic_node_getrssi(vap->iv_bss); 2520b032f27cSSam Leffler info.rssi_samples = 1; 25218a1b9b6aSSam Leffler break; 25228a1b9b6aSSam Leffler } 2523b032f27cSSam Leffler return info.rssi_total / NZ(info.rssi_samples); 25248a1b9b6aSSam Leffler #undef NZ 25258a1b9b6aSSam Leffler } 25268a1b9b6aSSam Leffler 252768e8e04eSSam Leffler void 2528b032f27cSSam Leffler ieee80211_getsignal(struct ieee80211vap *vap, int8_t *rssi, int8_t *noise) 25298a1b9b6aSSam Leffler { 25308a1b9b6aSSam Leffler 2531b032f27cSSam Leffler if (vap->iv_bss == NULL) /* NB: shouldn't happen */ 253268e8e04eSSam Leffler return; 2533b032f27cSSam Leffler vap->iv_ic->ic_node_getsignal(vap->iv_bss, rssi, noise); 253468e8e04eSSam Leffler /* for non-station mode return avg'd rssi accounting */ 2535b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 2536b032f27cSSam Leffler *rssi = ieee80211_getrssi(vap); 25378a1b9b6aSSam Leffler } 2538