11a1e1d21SSam Leffler /*- 27535e66aSSam Leffler * Copyright (c) 2001 Atsushi Onoe 310ad9a77SSam Leffler * Copyright (c) 2002-2009 Sam Leffler, Errno Consulting 41a1e1d21SSam Leffler * All rights reserved. 51a1e1d21SSam Leffler * 61a1e1d21SSam Leffler * Redistribution and use in source and binary forms, with or without 71a1e1d21SSam Leffler * modification, are permitted provided that the following conditions 81a1e1d21SSam Leffler * are met: 91a1e1d21SSam Leffler * 1. Redistributions of source code must retain the above copyright 107535e66aSSam Leffler * notice, this list of conditions and the following disclaimer. 117535e66aSSam Leffler * 2. Redistributions in binary form must reproduce the above copyright 127535e66aSSam Leffler * notice, this list of conditions and the following disclaimer in the 137535e66aSSam Leffler * documentation and/or other materials provided with the distribution. 141a1e1d21SSam Leffler * 157535e66aSSam Leffler * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 167535e66aSSam Leffler * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 177535e66aSSam Leffler * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 187535e66aSSam Leffler * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 197535e66aSSam Leffler * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 207535e66aSSam Leffler * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 217535e66aSSam Leffler * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 227535e66aSSam Leffler * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 237535e66aSSam Leffler * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 247535e66aSSam Leffler * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 251a1e1d21SSam Leffler */ 261a1e1d21SSam Leffler 271a1e1d21SSam Leffler #include <sys/cdefs.h> 281a1e1d21SSam Leffler __FBSDID("$FreeBSD$"); 291a1e1d21SSam Leffler 30b032f27cSSam Leffler #include "opt_wlan.h" 31b032f27cSSam Leffler 321a1e1d21SSam Leffler #include <sys/param.h> 331a1e1d21SSam Leffler #include <sys/systm.h> 341a1e1d21SSam Leffler #include <sys/mbuf.h> 351a1e1d21SSam Leffler #include <sys/malloc.h> 361a1e1d21SSam Leffler #include <sys/kernel.h> 371a1e1d21SSam Leffler 388a1b9b6aSSam Leffler #include <sys/socket.h> 391a1e1d21SSam Leffler 401a1e1d21SSam Leffler #include <net/if.h> 411a1e1d21SSam Leffler #include <net/if_media.h> 421a1e1d21SSam Leffler #include <net/ethernet.h> 431a1e1d21SSam Leffler 441a1e1d21SSam Leffler #include <net80211/ieee80211_var.h> 45b032f27cSSam Leffler #include <net80211/ieee80211_input.h> 46616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 47616190d0SSam Leffler #include <net80211/ieee80211_superg.h> 48616190d0SSam Leffler #endif 4910ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 5010ad9a77SSam Leffler #include <net80211/ieee80211_tdma.h> 5110ad9a77SSam Leffler #endif 52b032f27cSSam Leffler #include <net80211/ieee80211_wds.h> 5359aa14a9SRui Paulo #include <net80211/ieee80211_mesh.h> 54b6108616SRui Paulo #include <net80211/ieee80211_ratectl.h> 551a1e1d21SSam Leffler 561a1e1d21SSam Leffler #include <net/bpf.h> 571a1e1d21SSam Leffler 587268fa64SSam Leffler /* 5959aa14a9SRui Paulo * IEEE80211_NODE_HASHSIZE must be a power of 2. 6059aa14a9SRui Paulo */ 6159aa14a9SRui Paulo CTASSERT((IEEE80211_NODE_HASHSIZE & (IEEE80211_NODE_HASHSIZE-1)) == 0); 6259aa14a9SRui Paulo 6359aa14a9SRui Paulo /* 647268fa64SSam Leffler * Association id's are managed with a bit vector. 657268fa64SSam Leffler */ 66b032f27cSSam Leffler #define IEEE80211_AID_SET(_vap, b) \ 67b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] |= \ 68b032f27cSSam Leffler (1 << (IEEE80211_AID(b) % 32))) 69b032f27cSSam Leffler #define IEEE80211_AID_CLR(_vap, b) \ 70b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] &= \ 71b032f27cSSam Leffler ~(1 << (IEEE80211_AID(b) % 32))) 72b032f27cSSam Leffler #define IEEE80211_AID_ISSET(_vap, b) \ 73b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] & (1 << (IEEE80211_AID(b) % 32))) 747268fa64SSam Leffler 75132142c5SDiomidis Spinellis #ifdef IEEE80211_DEBUG_REFCNT 76132142c5SDiomidis Spinellis #define REFCNT_LOC "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line 77132142c5SDiomidis Spinellis #else 78132142c5SDiomidis Spinellis #define REFCNT_LOC "%s %p<%s> refcnt %d\n", __func__ 79132142c5SDiomidis Spinellis #endif 80132142c5SDiomidis Spinellis 8168e8e04eSSam Leffler static int ieee80211_sta_join1(struct ieee80211_node *); 8268e8e04eSSam Leffler 8338c208f8SSam Leffler static struct ieee80211_node *node_alloc(struct ieee80211vap *, 8438c208f8SSam Leffler const uint8_t [IEEE80211_ADDR_LEN]); 858a1b9b6aSSam Leffler static void node_cleanup(struct ieee80211_node *); 868a1b9b6aSSam Leffler static void node_free(struct ieee80211_node *); 87b032f27cSSam Leffler static void node_age(struct ieee80211_node *); 8868e8e04eSSam Leffler static int8_t node_getrssi(const struct ieee80211_node *); 8968e8e04eSSam Leffler static void node_getsignal(const struct ieee80211_node *, int8_t *, int8_t *); 90b032f27cSSam Leffler static void node_getmimoinfo(const struct ieee80211_node *, 91b032f27cSSam Leffler struct ieee80211_mimo_info *); 921a1e1d21SSam Leffler 938a1b9b6aSSam Leffler static void _ieee80211_free_node(struct ieee80211_node *); 948a1b9b6aSSam Leffler 958a1b9b6aSSam Leffler static void ieee80211_node_table_init(struct ieee80211com *ic, 96c1225b52SSam Leffler struct ieee80211_node_table *nt, const char *name, 9768e8e04eSSam Leffler int inact, int keymaxix); 98b032f27cSSam Leffler static void ieee80211_node_table_reset(struct ieee80211_node_table *, 99b032f27cSSam Leffler struct ieee80211vap *); 1008a1b9b6aSSam Leffler static void ieee80211_node_table_cleanup(struct ieee80211_node_table *nt); 101b105a069SSam Leffler static void ieee80211_erp_timeout(struct ieee80211com *); 1021a1e1d21SSam Leffler 10332346d60SSam Leffler MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state"); 104b032f27cSSam Leffler MALLOC_DEFINE(M_80211_NODE_IE, "80211nodeie", "802.11 node ie"); 10537c150c4SSam Leffler 1061a1e1d21SSam Leffler void 1078a1b9b6aSSam Leffler ieee80211_node_attach(struct ieee80211com *ic) 1081a1e1d21SSam Leffler { 1095b16c28cSSam Leffler /* XXX really want maxlen enforced per-sta */ 1105b16c28cSSam Leffler ieee80211_ageq_init(&ic->ic_stageq, ic->ic_max_keyix * 8, 1115b16c28cSSam Leffler "802.11 staging q"); 112b032f27cSSam Leffler ieee80211_node_table_init(ic, &ic->ic_sta, "station", 113b032f27cSSam Leffler IEEE80211_INACT_INIT, ic->ic_max_keyix); 114b032f27cSSam Leffler callout_init(&ic->ic_inact, CALLOUT_MPSAFE); 115b032f27cSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 116b032f27cSSam Leffler ieee80211_node_timeout, ic); 1171a1e1d21SSam Leffler 1188a1b9b6aSSam Leffler ic->ic_node_alloc = node_alloc; 1198a1b9b6aSSam Leffler ic->ic_node_free = node_free; 1208a1b9b6aSSam Leffler ic->ic_node_cleanup = node_cleanup; 121b032f27cSSam Leffler ic->ic_node_age = node_age; 122b032f27cSSam Leffler ic->ic_node_drain = node_age; /* NB: same as age */ 1238a1b9b6aSSam Leffler ic->ic_node_getrssi = node_getrssi; 12468e8e04eSSam Leffler ic->ic_node_getsignal = node_getsignal; 125b032f27cSSam Leffler ic->ic_node_getmimoinfo = node_getmimoinfo; 1268a1b9b6aSSam Leffler 127b032f27cSSam Leffler /* 128b032f27cSSam Leffler * Set flags to be propagated to all vap's; 129b032f27cSSam Leffler * these define default behaviour/configuration. 130b032f27cSSam Leffler */ 131c066143cSSam Leffler ic->ic_flags_ext |= IEEE80211_FEXT_INACT; /* inactivity processing */ 132c1225b52SSam Leffler } 133c1225b52SSam Leffler 134c1225b52SSam Leffler void 1358a1b9b6aSSam Leffler ieee80211_node_detach(struct ieee80211com *ic) 1361a1e1d21SSam Leffler { 1371a1e1d21SSam Leffler 138b032f27cSSam Leffler callout_drain(&ic->ic_inact); 139acc4f7f5SSam Leffler ieee80211_node_table_cleanup(&ic->ic_sta); 1405b16c28cSSam Leffler ieee80211_ageq_cleanup(&ic->ic_stageq); 141b032f27cSSam Leffler } 142b032f27cSSam Leffler 143b032f27cSSam Leffler void 144b032f27cSSam Leffler ieee80211_node_vattach(struct ieee80211vap *vap) 145b032f27cSSam Leffler { 146b032f27cSSam Leffler /* NB: driver can override */ 147b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_DEF; 148b032f27cSSam Leffler 149b032f27cSSam Leffler /* default station inactivity timer setings */ 150b032f27cSSam Leffler vap->iv_inact_init = IEEE80211_INACT_INIT; 151b032f27cSSam Leffler vap->iv_inact_auth = IEEE80211_INACT_AUTH; 152b032f27cSSam Leffler vap->iv_inact_run = IEEE80211_INACT_RUN; 153b032f27cSSam Leffler vap->iv_inact_probe = IEEE80211_INACT_PROBE; 154be1054edSSam Leffler 155be1054edSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_INACT, 156be1054edSSam Leffler "%s: init %u auth %u run %u probe %u\n", __func__, 157be1054edSSam Leffler vap->iv_inact_init, vap->iv_inact_auth, 158be1054edSSam Leffler vap->iv_inact_run, vap->iv_inact_probe); 159b032f27cSSam Leffler } 160b032f27cSSam Leffler 161b032f27cSSam Leffler void 162b032f27cSSam Leffler ieee80211_node_latevattach(struct ieee80211vap *vap) 163b032f27cSSam Leffler { 164b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) { 165b032f27cSSam Leffler /* XXX should we allow max aid to be zero? */ 166b032f27cSSam Leffler if (vap->iv_max_aid < IEEE80211_AID_MIN) { 167b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_MIN; 168b032f27cSSam Leffler if_printf(vap->iv_ifp, 169b032f27cSSam Leffler "WARNING: max aid too small, changed to %d\n", 170b032f27cSSam Leffler vap->iv_max_aid); 171b032f27cSSam Leffler } 172e2126decSSam Leffler vap->iv_aid_bitmap = (uint32_t *) malloc( 173c5abbba3SDag-Erling Smørgrav howmany(vap->iv_max_aid, 32) * sizeof(uint32_t), 174b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 175b032f27cSSam Leffler if (vap->iv_aid_bitmap == NULL) { 176b032f27cSSam Leffler /* XXX no way to recover */ 177b032f27cSSam Leffler printf("%s: no memory for AID bitmap, max aid %d!\n", 178b032f27cSSam Leffler __func__, vap->iv_max_aid); 179b032f27cSSam Leffler vap->iv_max_aid = 0; 180b032f27cSSam Leffler } 181b032f27cSSam Leffler } 182b032f27cSSam Leffler 183b032f27cSSam Leffler ieee80211_reset_bss(vap); 184b032f27cSSam Leffler 185b032f27cSSam Leffler vap->iv_auth = ieee80211_authenticator_get(vap->iv_bss->ni_authmode); 186b032f27cSSam Leffler } 187b032f27cSSam Leffler 188b032f27cSSam Leffler void 189b032f27cSSam Leffler ieee80211_node_vdetach(struct ieee80211vap *vap) 190b032f27cSSam Leffler { 191b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 192b032f27cSSam Leffler 193b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 194b032f27cSSam Leffler if (vap->iv_bss != NULL) { 195b032f27cSSam Leffler ieee80211_free_node(vap->iv_bss); 196b032f27cSSam Leffler vap->iv_bss = NULL; 197b032f27cSSam Leffler } 198b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) { 199e2126decSSam Leffler free(vap->iv_aid_bitmap, M_80211_NODE); 200b032f27cSSam Leffler vap->iv_aid_bitmap = NULL; 2018a1b9b6aSSam Leffler } 2028a1b9b6aSSam Leffler } 2038a1b9b6aSSam Leffler 2048a1b9b6aSSam Leffler /* 2058a1b9b6aSSam Leffler * Port authorize/unauthorize interfaces for use by an authenticator. 2068a1b9b6aSSam Leffler */ 2078a1b9b6aSSam Leffler 2088a1b9b6aSSam Leffler void 209e4918ecdSSam Leffler ieee80211_node_authorize(struct ieee80211_node *ni) 2108a1b9b6aSSam Leffler { 211be1054edSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 212be1054edSSam Leffler 2138a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_AUTH; 214be1054edSSam Leffler ni->ni_inact_reload = vap->iv_inact_run; 215c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 216be1054edSSam Leffler 217be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 218be1054edSSam Leffler "%s: inact_reload %u", __func__, ni->ni_inact_reload); 2198a1b9b6aSSam Leffler } 2208a1b9b6aSSam Leffler 2218a1b9b6aSSam Leffler void 222e4918ecdSSam Leffler ieee80211_node_unauthorize(struct ieee80211_node *ni) 2238a1b9b6aSSam Leffler { 224be1054edSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 225be1054edSSam Leffler 2268a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_AUTH; 227be1054edSSam Leffler ni->ni_inact_reload = vap->iv_inact_auth; 228c066143cSSam Leffler if (ni->ni_inact > ni->ni_inact_reload) 229c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 230be1054edSSam Leffler 231be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 232be1054edSSam Leffler "%s: inact_reload %u inact %u", __func__, 233be1054edSSam Leffler ni->ni_inact_reload, ni->ni_inact); 2348a1b9b6aSSam Leffler } 2358a1b9b6aSSam Leffler 2368a1b9b6aSSam Leffler /* 23701a03542SSam Leffler * Fix tx parameters for a node according to ``association state''. 23801a03542SSam Leffler */ 239d77148fbSSam Leffler void 240d77148fbSSam Leffler ieee80211_node_setuptxparms(struct ieee80211_node *ni) 24101a03542SSam Leffler { 24201a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 243f76cde95SSam Leffler enum ieee80211_phymode mode; 24401a03542SSam Leffler 24501a03542SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) { 24601a03542SSam Leffler if (IEEE80211_IS_CHAN_5GHZ(ni->ni_chan)) 247f76cde95SSam Leffler mode = IEEE80211_MODE_11NA; 24801a03542SSam Leffler else 249f76cde95SSam Leffler mode = IEEE80211_MODE_11NG; 25001a03542SSam Leffler } else { /* legacy rate handling */ 251f76cde95SSam Leffler if (IEEE80211_IS_CHAN_ST(ni->ni_chan)) 252f76cde95SSam Leffler mode = IEEE80211_MODE_STURBO_A; 2536a76ae21SSam Leffler else if (IEEE80211_IS_CHAN_HALF(ni->ni_chan)) 2546a76ae21SSam Leffler mode = IEEE80211_MODE_HALF; 2556a76ae21SSam Leffler else if (IEEE80211_IS_CHAN_QUARTER(ni->ni_chan)) 2566a76ae21SSam Leffler mode = IEEE80211_MODE_QUARTER; 257c5262b82SSam Leffler /* NB: 108A should be handled as 11a */ 258f76cde95SSam Leffler else if (IEEE80211_IS_CHAN_A(ni->ni_chan)) 259f76cde95SSam Leffler mode = IEEE80211_MODE_11A; 260c5262b82SSam Leffler else if (IEEE80211_IS_CHAN_108G(ni->ni_chan) || 261c5262b82SSam Leffler (ni->ni_flags & IEEE80211_NODE_ERP)) 262f76cde95SSam Leffler mode = IEEE80211_MODE_11G; 26301a03542SSam Leffler else 264f76cde95SSam Leffler mode = IEEE80211_MODE_11B; 26501a03542SSam Leffler } 266f76cde95SSam Leffler ni->ni_txparms = &vap->iv_txparms[mode]; 26701a03542SSam Leffler } 26801a03542SSam Leffler 26901a03542SSam Leffler /* 2708a1b9b6aSSam Leffler * Set/change the channel. The rate set is also updated as 2718a1b9b6aSSam Leffler * to insure a consistent view by drivers. 272b032f27cSSam Leffler * XXX should be private but hostap needs it to deal with CSA 2738a1b9b6aSSam Leffler */ 274b032f27cSSam Leffler void 275b032f27cSSam Leffler ieee80211_node_set_chan(struct ieee80211_node *ni, 276b032f27cSSam Leffler struct ieee80211_channel *chan) 2778a1b9b6aSSam Leffler { 278b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 27901a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 28001a03542SSam Leffler enum ieee80211_phymode mode; 28168e8e04eSSam Leffler 282b032f27cSSam Leffler KASSERT(chan != IEEE80211_CHAN_ANYC, ("no channel")); 283b032f27cSSam Leffler 2848a1b9b6aSSam Leffler ni->ni_chan = chan; 28501a03542SSam Leffler mode = ieee80211_chan2mode(chan); 28668e8e04eSSam Leffler if (IEEE80211_IS_CHAN_HT(chan)) { 28768e8e04eSSam Leffler /* 288597029bfSBernhard Schmidt * We must install the legacy rate est in ni_rates and the 28968e8e04eSSam Leffler * HT rate set in ni_htrates. 29068e8e04eSSam Leffler */ 29168e8e04eSSam Leffler ni->ni_htrates = *ieee80211_get_suphtrates(ic, chan); 29201a03542SSam Leffler /* 29301a03542SSam Leffler * Setup bss tx parameters based on operating mode. We 29401a03542SSam Leffler * use legacy rates when operating in a mixed HT+non-HT bss 29501a03542SSam Leffler * and non-ERP rates in 11g for mixed ERP+non-ERP bss. 29601a03542SSam Leffler */ 29701a03542SSam Leffler if (mode == IEEE80211_MODE_11NA && 2982bfc8a91SSam Leffler (vap->iv_flags_ht & IEEE80211_FHT_PUREN) == 0) 29901a03542SSam Leffler mode = IEEE80211_MODE_11A; 30001a03542SSam Leffler else if (mode == IEEE80211_MODE_11NG && 3012bfc8a91SSam Leffler (vap->iv_flags_ht & IEEE80211_FHT_PUREN) == 0) 30201a03542SSam Leffler mode = IEEE80211_MODE_11G; 30301a03542SSam Leffler if (mode == IEEE80211_MODE_11G && 30401a03542SSam Leffler (vap->iv_flags & IEEE80211_F_PUREG) == 0) 30501a03542SSam Leffler mode = IEEE80211_MODE_11B; 30668e8e04eSSam Leffler } 30701a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[mode]; 30841b3c790SSam Leffler ni->ni_rates = *ieee80211_get_suprates(ic, chan); 3091a1e1d21SSam Leffler } 3101a1e1d21SSam Leffler 311f9cd9174SSam Leffler static __inline void 312f9cd9174SSam Leffler copy_bss(struct ieee80211_node *nbss, const struct ieee80211_node *obss) 313f9cd9174SSam Leffler { 314f9cd9174SSam Leffler /* propagate useful state */ 315f9cd9174SSam Leffler nbss->ni_authmode = obss->ni_authmode; 316f9cd9174SSam Leffler nbss->ni_txpower = obss->ni_txpower; 317f9cd9174SSam Leffler nbss->ni_vlan = obss->ni_vlan; 318f9cd9174SSam Leffler /* XXX statistics? */ 319b032f27cSSam Leffler /* XXX legacy WDS bssid? */ 320f9cd9174SSam Leffler } 321f9cd9174SSam Leffler 3221a1e1d21SSam Leffler void 323b032f27cSSam Leffler ieee80211_create_ibss(struct ieee80211vap* vap, struct ieee80211_channel *chan) 3241a1e1d21SSam Leffler { 325b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 3261a1e1d21SSam Leffler struct ieee80211_node *ni; 3278a1b9b6aSSam Leffler 328b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_SCAN, 32959aa14a9SRui Paulo "%s: creating %s on channel %u\n", __func__, 33059aa14a9SRui Paulo ieee80211_opmode_name[vap->iv_opmode], 331b032f27cSSam Leffler ieee80211_chan2ieee(ic, chan)); 3328a1b9b6aSSam Leffler 333b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 334acc4f7f5SSam Leffler if (ni == NULL) { 335acc4f7f5SSam Leffler /* XXX recovery? */ 3368a1b9b6aSSam Leffler return; 3378a1b9b6aSSam Leffler } 338b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 339b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 340b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 341b032f27cSSam Leffler if (vap->iv_bss != NULL) 342b032f27cSSam Leffler copy_bss(ni, vap->iv_bss); 343d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 344b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) 3451a1e1d21SSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY; 3461a1e1d21SSam Leffler if (ic->ic_phytype == IEEE80211_T_FH) { 3471a1e1d21SSam Leffler ni->ni_fhdwell = 200; /* XXX */ 3481a1e1d21SSam Leffler ni->ni_fhindex = 1; 3491a1e1d21SSam Leffler } 350b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 351b032f27cSSam Leffler vap->iv_flags |= IEEE80211_F_SIBSS; 3528a1b9b6aSSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_IBSS; /* XXX */ 353b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 354b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 355fe49f061SSam Leffler else { 356fe49f061SSam Leffler get_random_bytes(ni->ni_bssid, IEEE80211_ADDR_LEN); 357fe49f061SSam Leffler /* clear group bit, add local bit */ 358fe49f061SSam Leffler ni->ni_bssid[0] = (ni->ni_bssid[0] &~ 0x01) | 0x02; 359fe49f061SSam Leffler } 360b032f27cSSam Leffler } else if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 361b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 362b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 36350d8b493SSam Leffler else 36410ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 36510ad9a77SSam Leffler if ((vap->iv_caps & IEEE80211_C_TDMA) == 0) 36610ad9a77SSam Leffler #endif 36750d8b493SSam Leffler memset(ni->ni_bssid, 0, IEEE80211_ADDR_LEN); 36859aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 36959aa14a9SRui Paulo } else if (vap->iv_opmode == IEEE80211_M_MBSS) { 37059aa14a9SRui Paulo ni->ni_meshidlen = vap->iv_mesh->ms_idlen; 37159aa14a9SRui Paulo memcpy(ni->ni_meshid, vap->iv_mesh->ms_id, ni->ni_meshidlen); 37259aa14a9SRui Paulo #endif 3738a1b9b6aSSam Leffler } 3748a1b9b6aSSam Leffler /* 3758a1b9b6aSSam Leffler * Fix the channel and related attributes. 3768a1b9b6aSSam Leffler */ 377b032f27cSSam Leffler /* clear DFS CAC state on previous channel */ 378b032f27cSSam Leffler if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 379b032f27cSSam Leffler ic->ic_bsschan->ic_freq != chan->ic_freq && 380b032f27cSSam Leffler IEEE80211_IS_CHAN_CACDONE(ic->ic_bsschan)) 381b032f27cSSam Leffler ieee80211_dfs_cac_clear(ic, ic->ic_bsschan); 38268e8e04eSSam Leffler ic->ic_bsschan = chan; 383b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 38468e8e04eSSam Leffler ic->ic_curmode = ieee80211_chan2mode(chan); 3858a1b9b6aSSam Leffler /* 386b032f27cSSam Leffler * Do mode-specific setup. 3878a1b9b6aSSam Leffler */ 38868e8e04eSSam Leffler if (IEEE80211_IS_CHAN_FULL(chan)) { 38968e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(chan)) { 39068e8e04eSSam Leffler /* 391b032f27cSSam Leffler * Use a mixed 11b/11g basic rate set. 39268e8e04eSSam Leffler */ 393b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 39468e8e04eSSam Leffler IEEE80211_MODE_11G); 395b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PUREG) { 396b032f27cSSam Leffler /* 397b032f27cSSam Leffler * Also mark OFDM rates basic so 11b 398b032f27cSSam Leffler * stations do not join (WiFi compliance). 399b032f27cSSam Leffler */ 400b032f27cSSam Leffler ieee80211_addbasicrates(&ni->ni_rates, 401b032f27cSSam Leffler IEEE80211_MODE_11A); 402b032f27cSSam Leffler } 40368e8e04eSSam Leffler } else if (IEEE80211_IS_CHAN_B(chan)) { 40468e8e04eSSam Leffler /* 40568e8e04eSSam Leffler * Force pure 11b rate set. 40668e8e04eSSam Leffler */ 407b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 40868e8e04eSSam Leffler IEEE80211_MODE_11B); 40968e8e04eSSam Leffler } 4101a1e1d21SSam Leffler } 4111a1e1d21SSam Leffler 41268e8e04eSSam Leffler (void) ieee80211_sta_join1(ieee80211_ref_node(ni)); 41368e8e04eSSam Leffler } 41468e8e04eSSam Leffler 41568e8e04eSSam Leffler /* 41668e8e04eSSam Leffler * Reset bss state on transition to the INIT state. 41768e8e04eSSam Leffler * Clear any stations from the table (they have been 41868e8e04eSSam Leffler * deauth'd) and reset the bss node (clears key, rate 41968e8e04eSSam Leffler * etc. state). 42068e8e04eSSam Leffler */ 4218a1b9b6aSSam Leffler void 422b032f27cSSam Leffler ieee80211_reset_bss(struct ieee80211vap *vap) 423b4c5a90fSSam Leffler { 424b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 4258a1b9b6aSSam Leffler struct ieee80211_node *ni, *obss; 4268a1b9b6aSSam Leffler 427b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 428b032f27cSSam Leffler /* XXX multi-bss: wrong */ 42968e8e04eSSam Leffler ieee80211_reset_erp(ic); 430acc4f7f5SSam Leffler 431b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 43248e1bda0SRui Paulo KASSERT(ni != NULL, ("unable to setup initial BSS node")); 433b032f27cSSam Leffler obss = vap->iv_bss; 434b032f27cSSam Leffler vap->iv_bss = ieee80211_ref_node(ni); 435f9cd9174SSam Leffler if (obss != NULL) { 436f9cd9174SSam Leffler copy_bss(ni, obss); 437d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 4388a1b9b6aSSam Leffler ieee80211_free_node(obss); 439b032f27cSSam Leffler } else 440b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 441f9cd9174SSam Leffler } 4428a1b9b6aSSam Leffler 4438a1b9b6aSSam Leffler static int 44468e8e04eSSam Leffler match_ssid(const struct ieee80211_node *ni, 44568e8e04eSSam Leffler int nssid, const struct ieee80211_scan_ssid ssids[]) 4468a1b9b6aSSam Leffler { 44768e8e04eSSam Leffler int i; 44868e8e04eSSam Leffler 44968e8e04eSSam Leffler for (i = 0; i < nssid; i++) { 45068e8e04eSSam Leffler if (ni->ni_esslen == ssids[i].len && 45168e8e04eSSam Leffler memcmp(ni->ni_essid, ssids[i].ssid, ni->ni_esslen) == 0) 45268e8e04eSSam Leffler return 1; 45368e8e04eSSam Leffler } 45468e8e04eSSam Leffler return 0; 45568e8e04eSSam Leffler } 45668e8e04eSSam Leffler 45768e8e04eSSam Leffler /* 45868e8e04eSSam Leffler * Test a node for suitability/compatibility. 45968e8e04eSSam Leffler */ 46068e8e04eSSam Leffler static int 461b032f27cSSam Leffler check_bss(struct ieee80211vap *vap, struct ieee80211_node *ni) 46268e8e04eSSam Leffler { 463b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 46468e8e04eSSam Leffler uint8_t rate; 46568e8e04eSSam Leffler 46668e8e04eSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 46768e8e04eSSam Leffler return 0; 468b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 46968e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 47068e8e04eSSam Leffler return 0; 47168e8e04eSSam Leffler } else { 47268e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 47368e8e04eSSam Leffler return 0; 47468e8e04eSSam Leffler } 475b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 47668e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 47768e8e04eSSam Leffler return 0; 47868e8e04eSSam Leffler } else { 47968e8e04eSSam Leffler /* XXX does this mean privacy is supported or required? */ 48068e8e04eSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 48168e8e04eSSam Leffler return 0; 48268e8e04eSSam Leffler } 48368e8e04eSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 48468e8e04eSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 48568e8e04eSSam Leffler if (rate & IEEE80211_RATE_BASIC) 48668e8e04eSSam Leffler return 0; 487b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 488b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 48968e8e04eSSam Leffler return 0; 490b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 491b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 49268e8e04eSSam Leffler return 0; 49368e8e04eSSam Leffler return 1; 49468e8e04eSSam Leffler } 49568e8e04eSSam Leffler 49668e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 49768e8e04eSSam Leffler /* 49868e8e04eSSam Leffler * Display node suitability/compatibility. 49968e8e04eSSam Leffler */ 50068e8e04eSSam Leffler static void 501b032f27cSSam Leffler check_bss_debug(struct ieee80211vap *vap, struct ieee80211_node *ni) 50268e8e04eSSam Leffler { 503b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 50468e8e04eSSam Leffler uint8_t rate; 505b4c5a90fSSam Leffler int fail; 506b4c5a90fSSam Leffler 507b4c5a90fSSam Leffler fail = 0; 508b4c5a90fSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 509b4c5a90fSSam Leffler fail |= 0x01; 510b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 511b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 512b4c5a90fSSam Leffler fail |= 0x02; 513b4c5a90fSSam Leffler } else { 514b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 515b4c5a90fSSam Leffler fail |= 0x02; 516b4c5a90fSSam Leffler } 517b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 518b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 519b4c5a90fSSam Leffler fail |= 0x04; 520b4c5a90fSSam Leffler } else { 521b4c5a90fSSam Leffler /* XXX does this mean privacy is supported or required? */ 522b4c5a90fSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 523b4c5a90fSSam Leffler fail |= 0x04; 524b4c5a90fSSam Leffler } 52570e28b9aSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 52679edaebfSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 527b4c5a90fSSam Leffler if (rate & IEEE80211_RATE_BASIC) 528b4c5a90fSSam Leffler fail |= 0x08; 529b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 530b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 531b4c5a90fSSam Leffler fail |= 0x10; 532b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 533b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 534b4c5a90fSSam Leffler fail |= 0x20; 53568e8e04eSSam Leffler 53668e8e04eSSam Leffler printf(" %c %s", fail ? '-' : '+', ether_sprintf(ni->ni_macaddr)); 53768e8e04eSSam Leffler printf(" %s%c", ether_sprintf(ni->ni_bssid), fail & 0x20 ? '!' : ' '); 53868e8e04eSSam Leffler printf(" %3d%c", 53968e8e04eSSam Leffler ieee80211_chan2ieee(ic, ni->ni_chan), fail & 0x01 ? '!' : ' '); 540b4c5a90fSSam Leffler printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2, 541b4c5a90fSSam Leffler fail & 0x08 ? '!' : ' '); 542b4c5a90fSSam Leffler printf(" %4s%c", 543b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" : 544b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" : 545b4c5a90fSSam Leffler "????", 546b4c5a90fSSam Leffler fail & 0x02 ? '!' : ' '); 547b4c5a90fSSam Leffler printf(" %3s%c ", 54868e8e04eSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ? "wep" : "no", 549b4c5a90fSSam Leffler fail & 0x04 ? '!' : ' '); 550b4c5a90fSSam Leffler ieee80211_print_essid(ni->ni_essid, ni->ni_esslen); 551b4c5a90fSSam Leffler printf("%s\n", fail & 0x10 ? "!" : ""); 552b4c5a90fSSam Leffler } 55368e8e04eSSam Leffler #endif /* IEEE80211_DEBUG */ 5548a1b9b6aSSam Leffler 555750d6d0cSSam Leffler /* 5568a1b9b6aSSam Leffler * Handle 802.11 ad hoc network merge. The 5578a1b9b6aSSam Leffler * convention, set by the Wireless Ethernet Compatibility Alliance 5588a1b9b6aSSam Leffler * (WECA), is that an 802.11 station will change its BSSID to match 5598a1b9b6aSSam Leffler * the "oldest" 802.11 ad hoc network, on the same channel, that 5608a1b9b6aSSam Leffler * has the station's desired SSID. The "oldest" 802.11 network 5618a1b9b6aSSam Leffler * sends beacons with the greatest TSF timestamp. 5628a1b9b6aSSam Leffler * 5638a1b9b6aSSam Leffler * The caller is assumed to validate TSF's before attempting a merge. 5648a1b9b6aSSam Leffler * 5658a1b9b6aSSam Leffler * Return !0 if the BSSID changed, 0 otherwise. 566750d6d0cSSam Leffler */ 5678a1b9b6aSSam Leffler int 568641b4d0bSSam Leffler ieee80211_ibss_merge(struct ieee80211_node *ni) 5698a1b9b6aSSam Leffler { 570b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 571b032f27cSSam Leffler #ifdef IEEE80211_DEBUG 572641b4d0bSSam Leffler struct ieee80211com *ic = ni->ni_ic; 573b032f27cSSam Leffler #endif 5748a1b9b6aSSam Leffler 575b032f27cSSam Leffler if (ni == vap->iv_bss || 576b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_bssid, vap->iv_bss->ni_bssid)) { 5778a1b9b6aSSam Leffler /* unchanged, nothing to do */ 5788a1b9b6aSSam Leffler return 0; 5798a1b9b6aSSam Leffler } 580b032f27cSSam Leffler if (!check_bss(vap, ni)) { 58168e8e04eSSam Leffler /* capabilities mismatch */ 582b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5838a1b9b6aSSam Leffler "%s: merge failed, capabilities mismatch\n", __func__); 58468e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 585b032f27cSSam Leffler if (ieee80211_msg_assoc(vap)) 586b032f27cSSam Leffler check_bss_debug(vap, ni); 58768e8e04eSSam Leffler #endif 588b032f27cSSam Leffler vap->iv_stats.is_ibss_capmismatch++; 5898a1b9b6aSSam Leffler return 0; 5908a1b9b6aSSam Leffler } 591b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5928a1b9b6aSSam Leffler "%s: new bssid %s: %s preamble, %s slot time%s\n", __func__, 5938a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 5948a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHPREAMBLE ? "short" : "long", 5958a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHSLOT ? "short" : "long", 5968a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_USEPROT ? ", protection" : "" 5978a1b9b6aSSam Leffler ); 59868e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 5998a1b9b6aSSam Leffler } 6008a1b9b6aSSam Leffler 6018a1b9b6aSSam Leffler /* 602b032f27cSSam Leffler * Calculate HT channel promotion flags for all vaps. 603b032f27cSSam Leffler * This assumes ni_chan have been setup for each vap. 604b032f27cSSam Leffler */ 605b032f27cSSam Leffler static int 606b032f27cSSam Leffler gethtadjustflags(struct ieee80211com *ic) 607b032f27cSSam Leffler { 608b032f27cSSam Leffler struct ieee80211vap *vap; 609b032f27cSSam Leffler int flags; 610b032f27cSSam Leffler 611b032f27cSSam Leffler flags = 0; 612b032f27cSSam Leffler /* XXX locking */ 613b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 614b032f27cSSam Leffler if (vap->iv_state < IEEE80211_S_RUN) 615b032f27cSSam Leffler continue; 616b032f27cSSam Leffler switch (vap->iv_opmode) { 617b032f27cSSam Leffler case IEEE80211_M_WDS: 618b032f27cSSam Leffler case IEEE80211_M_STA: 619b032f27cSSam Leffler case IEEE80211_M_AHDEMO: 620b032f27cSSam Leffler case IEEE80211_M_HOSTAP: 621b032f27cSSam Leffler case IEEE80211_M_IBSS: 62259aa14a9SRui Paulo case IEEE80211_M_MBSS: 623b032f27cSSam Leffler flags |= ieee80211_htchanflags(vap->iv_bss->ni_chan); 624b032f27cSSam Leffler break; 625b032f27cSSam Leffler default: 626b032f27cSSam Leffler break; 627b032f27cSSam Leffler } 628b032f27cSSam Leffler } 629b032f27cSSam Leffler return flags; 630b032f27cSSam Leffler } 631b032f27cSSam Leffler 632b032f27cSSam Leffler /* 633b032f27cSSam Leffler * Check if the current channel needs to change based on whether 6345d44f8c0SSam Leffler * any vap's are using HT20/HT40. This is used to sync the state 6355d44f8c0SSam Leffler * of ic_curchan after a channel width change on a running vap. 6361b6167d2SSam Leffler */ 6371b6167d2SSam Leffler void 638b032f27cSSam Leffler ieee80211_sync_curchan(struct ieee80211com *ic) 6391b6167d2SSam Leffler { 640b032f27cSSam Leffler struct ieee80211_channel *c; 641b032f27cSSam Leffler 642b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, ic->ic_curchan, gethtadjustflags(ic)); 643b032f27cSSam Leffler if (c != ic->ic_curchan) { 644b032f27cSSam Leffler ic->ic_curchan = c; 645b032f27cSSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 64626d39e2cSSam Leffler ic->ic_rt = ieee80211_get_ratetable(ic->ic_curchan); 6475efea30fSAndrew Thompson IEEE80211_UNLOCK(ic); 648b032f27cSSam Leffler ic->ic_set_channel(ic); 6495463c4a4SSam Leffler ieee80211_radiotap_chan_change(ic); 6505efea30fSAndrew Thompson IEEE80211_LOCK(ic); 651b032f27cSSam Leffler } 652b032f27cSSam Leffler } 653b032f27cSSam Leffler 654b032f27cSSam Leffler /* 6555efea30fSAndrew Thompson * Setup the current channel. The request channel may be 656b032f27cSSam Leffler * promoted if other vap's are operating with HT20/HT40. 657b032f27cSSam Leffler */ 658b032f27cSSam Leffler void 6595efea30fSAndrew Thompson ieee80211_setupcurchan(struct ieee80211com *ic, struct ieee80211_channel *c) 660b032f27cSSam Leffler { 661b032f27cSSam Leffler if (ic->ic_htcaps & IEEE80211_HTC_HT) { 662b032f27cSSam Leffler int flags = gethtadjustflags(ic); 663b032f27cSSam Leffler /* 664b032f27cSSam Leffler * Check for channel promotion required to support the 665b032f27cSSam Leffler * set of running vap's. This assumes we are called 666b032f27cSSam Leffler * after ni_chan is setup for each vap. 667b032f27cSSam Leffler */ 6682bfc8a91SSam Leffler /* NB: this assumes IEEE80211_FHT_USEHT40 > IEEE80211_FHT_HT */ 669b032f27cSSam Leffler if (flags > ieee80211_htchanflags(c)) 670b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, c, flags); 671b032f27cSSam Leffler } 672b032f27cSSam Leffler ic->ic_bsschan = ic->ic_curchan = c; 6731b6167d2SSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 67426d39e2cSSam Leffler ic->ic_rt = ieee80211_get_ratetable(ic->ic_curchan); 6755efea30fSAndrew Thompson } 6765efea30fSAndrew Thompson 6775efea30fSAndrew Thompson /* 6785efea30fSAndrew Thompson * Change the current channel. The channel change is guaranteed to have 6795efea30fSAndrew Thompson * happened before the next state change. 6805efea30fSAndrew Thompson */ 6815efea30fSAndrew Thompson void 6825efea30fSAndrew Thompson ieee80211_setcurchan(struct ieee80211com *ic, struct ieee80211_channel *c) 6835efea30fSAndrew Thompson { 6845efea30fSAndrew Thompson ieee80211_setupcurchan(ic, c); 6855efea30fSAndrew Thompson ieee80211_runtask(ic, &ic->ic_chan_task); 6861b6167d2SSam Leffler } 6871b6167d2SSam Leffler 6881b6167d2SSam Leffler /* 6898a1b9b6aSSam Leffler * Join the specified IBSS/BSS network. The node is assumed to 6908a1b9b6aSSam Leffler * be passed in with a held reference. 6918a1b9b6aSSam Leffler */ 69268e8e04eSSam Leffler static int 69368e8e04eSSam Leffler ieee80211_sta_join1(struct ieee80211_node *selbs) 6948a1b9b6aSSam Leffler { 695b032f27cSSam Leffler struct ieee80211vap *vap = selbs->ni_vap; 69668e8e04eSSam Leffler struct ieee80211com *ic = selbs->ni_ic; 6978a1b9b6aSSam Leffler struct ieee80211_node *obss; 69868e8e04eSSam Leffler int canreassoc; 6998a1b9b6aSSam Leffler 7008a1b9b6aSSam Leffler /* 7018a1b9b6aSSam Leffler * Committed to selbs, setup state. 7028a1b9b6aSSam Leffler */ 703b032f27cSSam Leffler obss = vap->iv_bss; 70468e8e04eSSam Leffler /* 70568e8e04eSSam Leffler * Check if old+new node have the same address in which 70668e8e04eSSam Leffler * case we can reassociate when operating in sta mode. 70768e8e04eSSam Leffler */ 70868e8e04eSSam Leffler canreassoc = (obss != NULL && 709b032f27cSSam Leffler vap->iv_state == IEEE80211_S_RUN && 71068e8e04eSSam Leffler IEEE80211_ADDR_EQ(obss->ni_macaddr, selbs->ni_macaddr)); 711b032f27cSSam Leffler vap->iv_bss = selbs; /* NB: caller assumed to bump refcnt */ 7121fd2349dSSam Leffler if (obss != NULL) { 7131fd2349dSSam Leffler copy_bss(selbs, obss); 71447a7b0faSSam Leffler ieee80211_node_decref(obss); /* iv_bss reference */ 71547a7b0faSSam Leffler ieee80211_free_node(obss); /* station table reference */ 716b032f27cSSam Leffler obss = NULL; /* NB: guard against later use */ 7171fd2349dSSam Leffler } 71879edaebfSSam Leffler 71979edaebfSSam Leffler /* 72079edaebfSSam Leffler * Delete unusable rates; we've already checked 72179edaebfSSam Leffler * that the negotiated rate set is acceptable. 72279edaebfSSam Leffler */ 723b032f27cSSam Leffler ieee80211_fix_rate(vap->iv_bss, &vap->iv_bss->ni_rates, 72470e28b9aSSam Leffler IEEE80211_F_DODEL | IEEE80211_F_JOIN); 72579edaebfSSam Leffler 726b032f27cSSam Leffler ieee80211_setcurchan(ic, selbs->ni_chan); 7278a1b9b6aSSam Leffler /* 7288a1b9b6aSSam Leffler * Set the erp state (mostly the slot time) to deal with 7298a1b9b6aSSam Leffler * the auto-select case; this should be redundant if the 7308a1b9b6aSSam Leffler * mode is locked. 7318a1b9b6aSSam Leffler */ 7328a1b9b6aSSam Leffler ieee80211_reset_erp(ic); 733b032f27cSSam Leffler ieee80211_wme_initparams(vap); 734acc4f7f5SSam Leffler 735b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA) { 73668e8e04eSSam Leffler if (canreassoc) { 73768e8e04eSSam Leffler /* Reassociate */ 738b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_ASSOC, 1); 73968e8e04eSSam Leffler } else { 74068e8e04eSSam Leffler /* 74168e8e04eSSam Leffler * Act as if we received a DEAUTH frame in case we 74268e8e04eSSam Leffler * are invoked from the RUN state. This will cause 74368e8e04eSSam Leffler * us to try to re-authenticate if we are operating 74468e8e04eSSam Leffler * as a station. 74568e8e04eSSam Leffler */ 746b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_AUTH, 74768e8e04eSSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH); 74868e8e04eSSam Leffler } 74968e8e04eSSam Leffler } else 750b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_RUN, -1); 7518a1b9b6aSSam Leffler return 1; 7528a1b9b6aSSam Leffler } 7538a1b9b6aSSam Leffler 75468e8e04eSSam Leffler int 75510959256SSam Leffler ieee80211_sta_join(struct ieee80211vap *vap, struct ieee80211_channel *chan, 75668e8e04eSSam Leffler const struct ieee80211_scan_entry *se) 75768e8e04eSSam Leffler { 758b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 75968e8e04eSSam Leffler struct ieee80211_node *ni; 76068e8e04eSSam Leffler 761b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, se->se_macaddr); 76268e8e04eSSam Leffler if (ni == NULL) { 76368e8e04eSSam Leffler /* XXX msg */ 76468e8e04eSSam Leffler return 0; 76568e8e04eSSam Leffler } 76668e8e04eSSam Leffler /* 76768e8e04eSSam Leffler * Expand scan state into node's format. 76868e8e04eSSam Leffler * XXX may not need all this stuff 76968e8e04eSSam Leffler */ 77068e8e04eSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, se->se_bssid); 77168e8e04eSSam Leffler ni->ni_esslen = se->se_ssid[1]; 77268e8e04eSSam Leffler memcpy(ni->ni_essid, se->se_ssid+2, ni->ni_esslen); 77368e8e04eSSam Leffler ni->ni_tstamp.tsf = se->se_tstamp.tsf; 77468e8e04eSSam Leffler ni->ni_intval = se->se_intval; 77568e8e04eSSam Leffler ni->ni_capinfo = se->se_capinfo; 77610959256SSam Leffler ni->ni_chan = chan; 77768e8e04eSSam Leffler ni->ni_timoff = se->se_timoff; 77868e8e04eSSam Leffler ni->ni_fhdwell = se->se_fhdwell; 77968e8e04eSSam Leffler ni->ni_fhindex = se->se_fhindex; 78068e8e04eSSam Leffler ni->ni_erp = se->se_erp; 781b032f27cSSam Leffler IEEE80211_RSSI_LPF(ni->ni_avgrssi, se->se_rssi); 78268e8e04eSSam Leffler ni->ni_noise = se->se_noise; 7836ca74c40SSam Leffler if (vap->iv_opmode == IEEE80211_M_STA) { 7846ca74c40SSam Leffler /* NB: only infrastructure mode requires an associd */ 7851b999d64SSam Leffler ni->ni_flags |= IEEE80211_NODE_ASSOCID; 7866ca74c40SSam Leffler } 78768e8e04eSSam Leffler 788b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, se->se_ies.data, se->se_ies.len)) { 789b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 790616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 791b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 792b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 793616190d0SSam Leffler #endif 794b032f27cSSam Leffler if (ni->ni_ies.htcap_ie != NULL) 795b032f27cSSam Leffler ieee80211_parse_htcap(ni, ni->ni_ies.htcap_ie); 796b032f27cSSam Leffler if (ni->ni_ies.htinfo_ie != NULL) 797b032f27cSSam Leffler ieee80211_parse_htinfo(ni, ni->ni_ies.htinfo_ie); 79859aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 79959aa14a9SRui Paulo if (ni->ni_ies.meshid_ie != NULL) 80059aa14a9SRui Paulo ieee80211_parse_meshid(ni, ni->ni_ies.meshid_ie); 80159aa14a9SRui Paulo #endif 80210ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 80310ad9a77SSam Leffler if (ni->ni_ies.tdma_ie != NULL) 80410ad9a77SSam Leffler ieee80211_parse_tdma(ni, ni->ni_ies.tdma_ie); 80510ad9a77SSam Leffler #endif 806b032f27cSSam Leffler } 807b032f27cSSam Leffler 808b032f27cSSam Leffler vap->iv_dtim_period = se->se_dtimperiod; 809b032f27cSSam Leffler vap->iv_dtim_count = 0; 81068e8e04eSSam Leffler 81168e8e04eSSam Leffler /* NB: must be after ni_chan is setup */ 81268e8e04eSSam Leffler ieee80211_setup_rates(ni, se->se_rates, se->se_xrates, 81368e8e04eSSam Leffler IEEE80211_F_DOSORT); 814dfcd1f4dSSam Leffler if (ieee80211_iserp_rateset(&ni->ni_rates)) 815dfcd1f4dSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 816d77148fbSSam Leffler ieee80211_node_setuptxparms(ni); 81749d2c137SBernhard Schmidt ieee80211_ratectl_node_init(ni); 81868e8e04eSSam Leffler 81968e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 82068e8e04eSSam Leffler } 82168e8e04eSSam Leffler 8228a1b9b6aSSam Leffler /* 8238a1b9b6aSSam Leffler * Leave the specified IBSS/BSS network. The node is assumed to 8248a1b9b6aSSam Leffler * be passed in with a held reference. 8258a1b9b6aSSam Leffler */ 8268a1b9b6aSSam Leffler void 827b032f27cSSam Leffler ieee80211_sta_leave(struct ieee80211_node *ni) 8288a1b9b6aSSam Leffler { 829b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 830b032f27cSSam Leffler 8318a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 832b032f27cSSam Leffler ieee80211_notify_node_leave(ni); 833b032f27cSSam Leffler } 834b032f27cSSam Leffler 835b032f27cSSam Leffler /* 836b032f27cSSam Leffler * Send a deauthenticate frame and drop the station. 837b032f27cSSam Leffler */ 838b032f27cSSam Leffler void 839b032f27cSSam Leffler ieee80211_node_deauth(struct ieee80211_node *ni, int reason) 840b032f27cSSam Leffler { 841b032f27cSSam Leffler /* NB: bump the refcnt to be sure temporay nodes are not reclaimed */ 842b032f27cSSam Leffler ieee80211_ref_node(ni); 843b032f27cSSam Leffler if (ni->ni_associd != 0) 844b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, IEEE80211_FC0_SUBTYPE_DEAUTH, reason); 845b032f27cSSam Leffler ieee80211_node_leave(ni); 846b032f27cSSam Leffler ieee80211_free_node(ni); 8478a1b9b6aSSam Leffler } 8488a1b9b6aSSam Leffler 8491a1e1d21SSam Leffler static struct ieee80211_node * 85038c208f8SSam Leffler node_alloc(struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 8511a1e1d21SSam Leffler { 852410ca74bSSam Leffler struct ieee80211_node *ni; 8538a1b9b6aSSam Leffler 854e2126decSSam Leffler ni = (struct ieee80211_node *) malloc(sizeof(struct ieee80211_node), 855410ca74bSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 856410ca74bSSam Leffler return ni; 8571a1e1d21SSam Leffler } 8581a1e1d21SSam Leffler 8598a1b9b6aSSam Leffler /* 860b032f27cSSam Leffler * Initialize an ie blob with the specified data. If previous 861b032f27cSSam Leffler * data exists re-use the data block. As a side effect we clear 862b032f27cSSam Leffler * all references to specific ie's; the caller is required to 863b032f27cSSam Leffler * recalculate them. 864b032f27cSSam Leffler */ 865b032f27cSSam Leffler int 866b032f27cSSam Leffler ieee80211_ies_init(struct ieee80211_ies *ies, const uint8_t *data, int len) 867b032f27cSSam Leffler { 868b032f27cSSam Leffler /* NB: assumes data+len are the last fields */ 869b032f27cSSam Leffler memset(ies, 0, offsetof(struct ieee80211_ies, data)); 870b032f27cSSam Leffler if (ies->data != NULL && ies->len != len) { 871b032f27cSSam Leffler /* data size changed */ 872e2126decSSam Leffler free(ies->data, M_80211_NODE_IE); 873b032f27cSSam Leffler ies->data = NULL; 874b032f27cSSam Leffler } 875b032f27cSSam Leffler if (ies->data == NULL) { 876e2126decSSam Leffler ies->data = (uint8_t *) malloc(len, M_80211_NODE_IE, M_NOWAIT); 877b032f27cSSam Leffler if (ies->data == NULL) { 878b032f27cSSam Leffler ies->len = 0; 879b032f27cSSam Leffler /* NB: pointers have already been zero'd above */ 880b032f27cSSam Leffler return 0; 881b032f27cSSam Leffler } 882b032f27cSSam Leffler } 883b032f27cSSam Leffler memcpy(ies->data, data, len); 884b032f27cSSam Leffler ies->len = len; 885b032f27cSSam Leffler return 1; 886b032f27cSSam Leffler } 887b032f27cSSam Leffler 888b032f27cSSam Leffler /* 889b032f27cSSam Leffler * Reclaim storage for an ie blob. 890b032f27cSSam Leffler */ 891b032f27cSSam Leffler void 892b032f27cSSam Leffler ieee80211_ies_cleanup(struct ieee80211_ies *ies) 893b032f27cSSam Leffler { 894b032f27cSSam Leffler if (ies->data != NULL) 895e2126decSSam Leffler free(ies->data, M_80211_NODE_IE); 896b032f27cSSam Leffler } 897b032f27cSSam Leffler 898b032f27cSSam Leffler /* 899b032f27cSSam Leffler * Expand an ie blob data contents and to fillin individual 900b032f27cSSam Leffler * ie pointers. The data blob is assumed to be well-formed; 901b032f27cSSam Leffler * we don't do any validity checking of ie lengths. 902b032f27cSSam Leffler */ 903b032f27cSSam Leffler void 904b032f27cSSam Leffler ieee80211_ies_expand(struct ieee80211_ies *ies) 905b032f27cSSam Leffler { 906b032f27cSSam Leffler uint8_t *ie; 907b032f27cSSam Leffler int ielen; 908b032f27cSSam Leffler 909b032f27cSSam Leffler ie = ies->data; 910b032f27cSSam Leffler ielen = ies->len; 911b032f27cSSam Leffler while (ielen > 0) { 912b032f27cSSam Leffler switch (ie[0]) { 913b032f27cSSam Leffler case IEEE80211_ELEMID_VENDOR: 914b032f27cSSam Leffler if (iswpaoui(ie)) 915b032f27cSSam Leffler ies->wpa_ie = ie; 916b032f27cSSam Leffler else if (iswmeoui(ie)) 917b032f27cSSam Leffler ies->wme_ie = ie; 918616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 919b032f27cSSam Leffler else if (isatherosoui(ie)) 920b032f27cSSam Leffler ies->ath_ie = ie; 921616190d0SSam Leffler #endif 92210ad9a77SSam Leffler #ifdef IEEE80211_SUPPORT_TDMA 92310ad9a77SSam Leffler else if (istdmaoui(ie)) 92410ad9a77SSam Leffler ies->tdma_ie = ie; 92510ad9a77SSam Leffler #endif 926b032f27cSSam Leffler break; 927b032f27cSSam Leffler case IEEE80211_ELEMID_RSN: 928b032f27cSSam Leffler ies->rsn_ie = ie; 929b032f27cSSam Leffler break; 930b032f27cSSam Leffler case IEEE80211_ELEMID_HTCAP: 931b032f27cSSam Leffler ies->htcap_ie = ie; 932b032f27cSSam Leffler break; 93359aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 93459aa14a9SRui Paulo case IEEE80211_ELEMID_MESHID: 93559aa14a9SRui Paulo ies->meshid_ie = ie; 93659aa14a9SRui Paulo break; 93759aa14a9SRui Paulo #endif 938b032f27cSSam Leffler } 939b032f27cSSam Leffler ielen -= 2 + ie[1]; 940b032f27cSSam Leffler ie += 2 + ie[1]; 941b032f27cSSam Leffler } 942b032f27cSSam Leffler } 943b032f27cSSam Leffler 944b032f27cSSam Leffler /* 9458a1b9b6aSSam Leffler * Reclaim any resources in a node and reset any critical 9468a1b9b6aSSam Leffler * state. Typically nodes are free'd immediately after, 9478a1b9b6aSSam Leffler * but in some cases the storage may be reused so we need 9488a1b9b6aSSam Leffler * to insure consistent state (should probably fix that). 9498a1b9b6aSSam Leffler */ 9501a1e1d21SSam Leffler static void 9518a1b9b6aSSam Leffler node_cleanup(struct ieee80211_node *ni) 9521a1e1d21SSam Leffler { 9538a1b9b6aSSam Leffler #define N(a) (sizeof(a)/sizeof(a[0])) 954b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 9555b16c28cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 95668e8e04eSSam Leffler int i; 9578a1b9b6aSSam Leffler 9588a1b9b6aSSam Leffler /* NB: preserve ni_table */ 9598a1b9b6aSSam Leffler if (ni->ni_flags & IEEE80211_NODE_PWR_MGT) { 960b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 961b032f27cSSam Leffler vap->iv_ps_sta--; 9628a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_PWR_MGT; 963b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_POWER, ni, 964b032f27cSSam Leffler "power save mode off, %u sta's in ps mode", vap->iv_ps_sta); 9658a1b9b6aSSam Leffler } 966ebdda46cSSam Leffler /* 9671b6167d2SSam Leffler * Cleanup any HT-related state. 9681b6167d2SSam Leffler */ 9691b6167d2SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) 9701b6167d2SSam Leffler ieee80211_ht_node_cleanup(ni); 971339ccfb3SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 972339ccfb3SSam Leffler else if (ni->ni_ath_flags & IEEE80211_NODE_ATH) 973339ccfb3SSam Leffler ieee80211_ff_node_cleanup(ni); 974339ccfb3SSam Leffler #endif 97559aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 97659aa14a9SRui Paulo /* 97759aa14a9SRui Paulo * Cleanup any mesh-related state. 97859aa14a9SRui Paulo */ 97959aa14a9SRui Paulo if (vap->iv_opmode == IEEE80211_M_MBSS) 98059aa14a9SRui Paulo ieee80211_mesh_node_cleanup(ni); 98159aa14a9SRui Paulo #endif 9821b6167d2SSam Leffler /* 9835b16c28cSSam Leffler * Clear any staging queue entries. 9845b16c28cSSam Leffler */ 9855b16c28cSSam Leffler ieee80211_ageq_drain_node(&ic->ic_stageq, ni); 9865b16c28cSSam Leffler 9875b16c28cSSam Leffler /* 988ebdda46cSSam Leffler * Clear AREF flag that marks the authorization refcnt bump 989ebdda46cSSam Leffler * has happened. This is probably not needed as the node 990ebdda46cSSam Leffler * should always be removed from the table so not found but 991ebdda46cSSam Leffler * do it just in case. 9921b999d64SSam Leffler * Likewise clear the ASSOCID flag as these flags are intended 9931b999d64SSam Leffler * to be managed in tandem. 994ebdda46cSSam Leffler */ 9951b999d64SSam Leffler ni->ni_flags &= ~(IEEE80211_NODE_AREF | IEEE80211_NODE_ASSOCID); 9968a1b9b6aSSam Leffler 9978a1b9b6aSSam Leffler /* 9988a1b9b6aSSam Leffler * Drain power save queue and, if needed, clear TIM. 9998a1b9b6aSSam Leffler */ 100063092fceSSam Leffler if (ieee80211_node_psq_drain(ni) != 0 && vap->iv_set_tim != NULL) 1001b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 10028a1b9b6aSSam Leffler 10038a1b9b6aSSam Leffler ni->ni_associd = 0; 10048a1b9b6aSSam Leffler if (ni->ni_challenge != NULL) { 1005e2126decSSam Leffler free(ni->ni_challenge, M_80211_NODE); 10068a1b9b6aSSam Leffler ni->ni_challenge = NULL; 10078a1b9b6aSSam Leffler } 10088a1b9b6aSSam Leffler /* 10098a1b9b6aSSam Leffler * Preserve SSID, WPA, and WME ie's so the bss node is 10108a1b9b6aSSam Leffler * reusable during a re-auth/re-assoc state transition. 10118a1b9b6aSSam Leffler * If we remove these data they will not be recreated 10128a1b9b6aSSam Leffler * because they come from a probe-response or beacon frame 10138a1b9b6aSSam Leffler * which cannot be expected prior to the association-response. 10148a1b9b6aSSam Leffler * This should not be an issue when operating in other modes 10158a1b9b6aSSam Leffler * as stations leaving always go through a full state transition 10168a1b9b6aSSam Leffler * which will rebuild this state. 10178a1b9b6aSSam Leffler * 10188a1b9b6aSSam Leffler * XXX does this leave us open to inheriting old state? 10198a1b9b6aSSam Leffler */ 10208a1b9b6aSSam Leffler for (i = 0; i < N(ni->ni_rxfrag); i++) 10218a1b9b6aSSam Leffler if (ni->ni_rxfrag[i] != NULL) { 10228a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[i]); 10238a1b9b6aSSam Leffler ni->ni_rxfrag[i] = NULL; 10248a1b9b6aSSam Leffler } 1025c1225b52SSam Leffler /* 1026c1225b52SSam Leffler * Must be careful here to remove any key map entry w/o a LOR. 1027c1225b52SSam Leffler */ 1028c1225b52SSam Leffler ieee80211_node_delucastkey(ni); 10298a1b9b6aSSam Leffler #undef N 10308a1b9b6aSSam Leffler } 10318a1b9b6aSSam Leffler 10328a1b9b6aSSam Leffler static void 10338a1b9b6aSSam Leffler node_free(struct ieee80211_node *ni) 10348a1b9b6aSSam Leffler { 10358a1b9b6aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 10368a1b9b6aSSam Leffler 1037b6108616SRui Paulo ieee80211_ratectl_node_deinit(ni); 10388a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 1039b032f27cSSam Leffler ieee80211_ies_cleanup(&ni->ni_ies); 104063092fceSSam Leffler ieee80211_psq_cleanup(&ni->ni_psq); 1041e2126decSSam Leffler free(ni, M_80211_NODE); 10421a1e1d21SSam Leffler } 10431a1e1d21SSam Leffler 1044b032f27cSSam Leffler static void 1045b032f27cSSam Leffler node_age(struct ieee80211_node *ni) 1046b032f27cSSam Leffler { 1047b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 10485d44f8c0SSam Leffler 10495d44f8c0SSam Leffler IEEE80211_NODE_LOCK_ASSERT(&vap->iv_ic->ic_sta); 10505d44f8c0SSam Leffler 1051b032f27cSSam Leffler /* 1052b032f27cSSam Leffler * Age frames on the power save queue. 1053b032f27cSSam Leffler */ 105463092fceSSam Leffler if (ieee80211_node_psq_age(ni) != 0 && 105563092fceSSam Leffler ni->ni_psq.psq_len == 0 && vap->iv_set_tim != NULL) 1056b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 1057b032f27cSSam Leffler /* 1058b032f27cSSam Leffler * Age out HT resources (e.g. frames on the 1059b032f27cSSam Leffler * A-MPDU reorder queues). 1060b032f27cSSam Leffler */ 1061b032f27cSSam Leffler if (ni->ni_associd != 0 && (ni->ni_flags & IEEE80211_NODE_HT)) 1062b032f27cSSam Leffler ieee80211_ht_node_age(ni); 1063b032f27cSSam Leffler } 1064b032f27cSSam Leffler 106568e8e04eSSam Leffler static int8_t 10668a1b9b6aSSam Leffler node_getrssi(const struct ieee80211_node *ni) 1067d1e61976SSam Leffler { 1068b032f27cSSam Leffler uint32_t avgrssi = ni->ni_avgrssi; 1069b032f27cSSam Leffler int32_t rssi; 1070b032f27cSSam Leffler 1071b032f27cSSam Leffler if (avgrssi == IEEE80211_RSSI_DUMMY_MARKER) 1072b032f27cSSam Leffler return 0; 1073b032f27cSSam Leffler rssi = IEEE80211_RSSI_GET(avgrssi); 1074b032f27cSSam Leffler return rssi < 0 ? 0 : rssi > 127 ? 127 : rssi; 1075d1e61976SSam Leffler } 1076d1e61976SSam Leffler 10771a1e1d21SSam Leffler static void 107868e8e04eSSam Leffler node_getsignal(const struct ieee80211_node *ni, int8_t *rssi, int8_t *noise) 107968e8e04eSSam Leffler { 1080b032f27cSSam Leffler *rssi = node_getrssi(ni); 108168e8e04eSSam Leffler *noise = ni->ni_noise; 108268e8e04eSSam Leffler } 108368e8e04eSSam Leffler 108468e8e04eSSam Leffler static void 1085b032f27cSSam Leffler node_getmimoinfo(const struct ieee80211_node *ni, 1086b032f27cSSam Leffler struct ieee80211_mimo_info *info) 1087b032f27cSSam Leffler { 1088b032f27cSSam Leffler /* XXX zero data? */ 1089b032f27cSSam Leffler } 1090b032f27cSSam Leffler 1091b032f27cSSam Leffler struct ieee80211_node * 1092b032f27cSSam Leffler ieee80211_alloc_node(struct ieee80211_node_table *nt, 1093b032f27cSSam Leffler struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 10941a1e1d21SSam Leffler { 10958a1b9b6aSSam Leffler struct ieee80211com *ic = nt->nt_ic; 1096b032f27cSSam Leffler struct ieee80211_node *ni; 10971a1e1d21SSam Leffler int hash; 10981a1e1d21SSam Leffler 109938c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 1100b032f27cSSam Leffler if (ni == NULL) { 1101b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 1102b032f27cSSam Leffler return NULL; 1103b032f27cSSam Leffler } 1104b032f27cSSam Leffler 1105b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 110649a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 11078a1b9b6aSSam Leffler ether_sprintf(macaddr), nt->nt_name); 11088a1b9b6aSSam Leffler 11091a1e1d21SSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 111059aa14a9SRui Paulo hash = IEEE80211_NODE_HASH(ic, macaddr); 11118a1b9b6aSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 11128a1b9b6aSSam Leffler ni->ni_chan = IEEE80211_CHAN_ANYC; 11138a1b9b6aSSam Leffler ni->ni_authmode = IEEE80211_AUTH_OPEN; 11148a1b9b6aSSam Leffler ni->ni_txpower = ic->ic_txpowlimit; /* max power */ 111501a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_curchan)]; 1116b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, IEEE80211_KEYIX_NONE); 1117b032f27cSSam Leffler ni->ni_avgrssi = IEEE80211_RSSI_DUMMY_MARKER; 11182045f699SSam Leffler ni->ni_inact_reload = nt->nt_inact_init; 11192045f699SSam Leffler ni->ni_inact = ni->ni_inact_reload; 112068e8e04eSSam Leffler ni->ni_ath_defkeyix = 0x7fff; 112163092fceSSam Leffler ieee80211_psq_init(&ni->ni_psq, "unknown"); 112259aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 112359aa14a9SRui Paulo if (vap->iv_opmode == IEEE80211_M_MBSS) 112459aa14a9SRui Paulo ieee80211_mesh_node_init(vap, ni); 112559aa14a9SRui Paulo #endif 11268a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 11278a1b9b6aSSam Leffler TAILQ_INSERT_TAIL(&nt->nt_node, ni, ni_list); 11288a1b9b6aSSam Leffler LIST_INSERT_HEAD(&nt->nt_hash[hash], ni, ni_hash); 11298a1b9b6aSSam Leffler ni->ni_table = nt; 1130b032f27cSSam Leffler ni->ni_vap = vap; 11318a1b9b6aSSam Leffler ni->ni_ic = ic; 11328a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 11331a1e1d21SSam Leffler 1134be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 1135be1054edSSam Leffler "%s: inact_reload %u", __func__, ni->ni_inact_reload); 1136be1054edSSam Leffler 1137bd56e71bSBernhard Schmidt ieee80211_ratectl_node_init(ni); 1138bd56e71bSBernhard Schmidt 11391a1e1d21SSam Leffler return ni; 11401a1e1d21SSam Leffler } 11411a1e1d21SSam Leffler 114297c973adSSam Leffler /* 114397c973adSSam Leffler * Craft a temporary node suitable for sending a management frame 114497c973adSSam Leffler * to the specified station. We craft only as much state as we 114597c973adSSam Leffler * need to do the work since the node will be immediately reclaimed 114697c973adSSam Leffler * once the send completes. 114797c973adSSam Leffler */ 114897c973adSSam Leffler struct ieee80211_node * 1149b032f27cSSam Leffler ieee80211_tmp_node(struct ieee80211vap *vap, 1150b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 115197c973adSSam Leffler { 1152b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 115397c973adSSam Leffler struct ieee80211_node *ni; 115497c973adSSam Leffler 115538c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 115697c973adSSam Leffler if (ni != NULL) { 1157b9b5f07dSSam Leffler struct ieee80211_node *bss = vap->iv_bss; 1158b9b5f07dSSam Leffler 1159b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 116097c973adSSam Leffler "%s %p<%s>\n", __func__, ni, ether_sprintf(macaddr)); 116197c973adSSam Leffler 1162b032f27cSSam Leffler ni->ni_table = NULL; /* NB: pedantic */ 1163b032f27cSSam Leffler ni->ni_ic = ic; /* NB: needed to set channel */ 1164b032f27cSSam Leffler ni->ni_vap = vap; 1165b032f27cSSam Leffler 116697c973adSSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 1167b9b5f07dSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bss->ni_bssid); 116897c973adSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 116997c973adSSam Leffler /* NB: required by ieee80211_fix_rate */ 1170b9b5f07dSSam Leffler ieee80211_node_set_chan(ni, bss->ni_chan); 1171b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, 117297c973adSSam Leffler IEEE80211_KEYIX_NONE); 1173b9b5f07dSSam Leffler ni->ni_txpower = bss->ni_txpower; 117497c973adSSam Leffler /* XXX optimize away */ 117563092fceSSam Leffler ieee80211_psq_init(&ni->ni_psq, "unknown"); 1176bd56e71bSBernhard Schmidt 1177bd56e71bSBernhard Schmidt ieee80211_ratectl_node_init(ni); 117897c973adSSam Leffler } else { 117997c973adSSam Leffler /* XXX msg */ 1180b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 118197c973adSSam Leffler } 118297c973adSSam Leffler return ni; 118397c973adSSam Leffler } 118497c973adSSam Leffler 11851a1e1d21SSam Leffler struct ieee80211_node * 1186b032f27cSSam Leffler ieee80211_dup_bss(struct ieee80211vap *vap, 1187b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 11881a1e1d21SSam Leffler { 1189b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 11908a1b9b6aSSam Leffler struct ieee80211_node *ni; 11918a1b9b6aSSam Leffler 1192b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, macaddr); 11931a1e1d21SSam Leffler if (ni != NULL) { 1194b9b5f07dSSam Leffler struct ieee80211_node *bss = vap->iv_bss; 1195694dca64SSam Leffler /* 1196b032f27cSSam Leffler * Inherit from iv_bss. 1197694dca64SSam Leffler */ 1198b9b5f07dSSam Leffler copy_bss(ni, bss); 1199b9b5f07dSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bss->ni_bssid); 1200b9b5f07dSSam Leffler ieee80211_node_set_chan(ni, bss->ni_chan); 1201b032f27cSSam Leffler } 12021a1e1d21SSam Leffler return ni; 12031a1e1d21SSam Leffler } 12041a1e1d21SSam Leffler 1205b032f27cSSam Leffler /* 1206b032f27cSSam Leffler * Create a bss node for a legacy WDS vap. The far end does 1207b032f27cSSam Leffler * not associate so we just create create a new node and 1208b032f27cSSam Leffler * simulate an association. The caller is responsible for 1209b032f27cSSam Leffler * installing the node as the bss node and handling any further 1210b032f27cSSam Leffler * setup work like authorizing the port. 1211b032f27cSSam Leffler */ 1212b032f27cSSam Leffler struct ieee80211_node * 1213b032f27cSSam Leffler ieee80211_node_create_wds(struct ieee80211vap *vap, 1214b032f27cSSam Leffler const uint8_t bssid[IEEE80211_ADDR_LEN], struct ieee80211_channel *chan) 1215b032f27cSSam Leffler { 1216b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1217b032f27cSSam Leffler struct ieee80211_node *ni; 1218b032f27cSSam Leffler 1219b032f27cSSam Leffler /* XXX check if node already in sta table? */ 1220b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, bssid); 1221b032f27cSSam Leffler if (ni != NULL) { 1222b032f27cSSam Leffler ni->ni_wdsvap = vap; 1223b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bssid); 1224b032f27cSSam Leffler /* 1225b032f27cSSam Leffler * Inherit any manually configured settings. 1226b032f27cSSam Leffler */ 1227b9b5f07dSSam Leffler copy_bss(ni, vap->iv_bss); 1228b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 1229b032f27cSSam Leffler /* NB: propagate ssid so available to WPA supplicant */ 1230b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 1231b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 1232b032f27cSSam Leffler /* NB: no associd for peer */ 1233b032f27cSSam Leffler /* 1234b032f27cSSam Leffler * There are no management frames to use to 1235b032f27cSSam Leffler * discover neighbor capabilities, so blindly 1236b032f27cSSam Leffler * propagate the local configuration. 1237b032f27cSSam Leffler */ 1238b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 1239b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1240616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 1241b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 1242b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 1243616190d0SSam Leffler #endif 1244b032f27cSSam Leffler if ((ic->ic_htcaps & IEEE80211_HTC_HT) && 12452bfc8a91SSam Leffler (vap->iv_flags_ht & IEEE80211_FHT_HT)) { 1246b032f27cSSam Leffler /* 1247b032f27cSSam Leffler * Device is HT-capable and HT is enabled for 1248b032f27cSSam Leffler * the vap; setup HT operation. On return 1249b032f27cSSam Leffler * ni_chan will be adjusted to an HT channel. 1250b032f27cSSam Leffler */ 1251b032f27cSSam Leffler ieee80211_ht_wds_init(ni); 1252b032f27cSSam Leffler } else { 1253b032f27cSSam Leffler struct ieee80211_channel *c = ni->ni_chan; 1254b032f27cSSam Leffler /* 1255b032f27cSSam Leffler * Force a legacy channel to be used. 1256b032f27cSSam Leffler */ 1257b032f27cSSam Leffler c = ieee80211_find_channel(ic, 1258b032f27cSSam Leffler c->ic_freq, c->ic_flags &~ IEEE80211_CHAN_HT); 1259b032f27cSSam Leffler KASSERT(c != NULL, ("no legacy channel, %u/%x", 1260b032f27cSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags)); 1261b032f27cSSam Leffler ni->ni_chan = c; 1262b032f27cSSam Leffler } 1263b032f27cSSam Leffler } 1264b032f27cSSam Leffler return ni; 1265b032f27cSSam Leffler } 1266b032f27cSSam Leffler 1267b032f27cSSam Leffler struct ieee80211_node * 12688a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1269b032f27cSSam Leffler ieee80211_find_node_locked_debug(struct ieee80211_node_table *nt, 1270b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 12718a1b9b6aSSam Leffler #else 1272b032f27cSSam Leffler ieee80211_find_node_locked(struct ieee80211_node_table *nt, 1273b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 12748a1b9b6aSSam Leffler #endif 12751a1e1d21SSam Leffler { 12761a1e1d21SSam Leffler struct ieee80211_node *ni; 12771a1e1d21SSam Leffler int hash; 12781a1e1d21SSam Leffler 12798a1b9b6aSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1280750d6d0cSSam Leffler 128159aa14a9SRui Paulo hash = IEEE80211_NODE_HASH(nt->nt_ic, macaddr); 12828a1b9b6aSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 12831a1e1d21SSam Leffler if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 12848a1b9b6aSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 12858a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1286b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 128749a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 128849a15236SSam Leffler func, line, 128949a15236SSam Leffler ni, ether_sprintf(ni->ni_macaddr), 12908a1b9b6aSSam Leffler ieee80211_node_refcnt(ni)); 12918a1b9b6aSSam Leffler #endif 1292750d6d0cSSam Leffler return ni; 12931a1e1d21SSam Leffler } 12941a1e1d21SSam Leffler } 1295750d6d0cSSam Leffler return NULL; 1296750d6d0cSSam Leffler } 1297750d6d0cSSam Leffler 1298750d6d0cSSam Leffler struct ieee80211_node * 12998a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 13008a1b9b6aSSam Leffler ieee80211_find_node_debug(struct ieee80211_node_table *nt, 1301b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 13028a1b9b6aSSam Leffler #else 1303b032f27cSSam Leffler ieee80211_find_node(struct ieee80211_node_table *nt, 1304b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 13058a1b9b6aSSam Leffler #endif 1306750d6d0cSSam Leffler { 1307750d6d0cSSam Leffler struct ieee80211_node *ni; 1308750d6d0cSSam Leffler 13098a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1310b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 1311b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1312b032f27cSSam Leffler return ni; 1313b032f27cSSam Leffler } 1314b032f27cSSam Leffler 1315b032f27cSSam Leffler struct ieee80211_node * 1316b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1317b032f27cSSam Leffler ieee80211_find_vap_node_locked_debug(struct ieee80211_node_table *nt, 1318b032f27cSSam Leffler const struct ieee80211vap *vap, 1319b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1320b032f27cSSam Leffler #else 1321b032f27cSSam Leffler ieee80211_find_vap_node_locked(struct ieee80211_node_table *nt, 1322b032f27cSSam Leffler const struct ieee80211vap *vap, 1323b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1324b032f27cSSam Leffler #endif 1325b032f27cSSam Leffler { 1326b032f27cSSam Leffler struct ieee80211_node *ni; 1327b032f27cSSam Leffler int hash; 1328b032f27cSSam Leffler 1329b032f27cSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1330b032f27cSSam Leffler 133159aa14a9SRui Paulo hash = IEEE80211_NODE_HASH(nt->nt_ic, macaddr); 1332b032f27cSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1333b032f27cSSam Leffler if (ni->ni_vap == vap && 1334b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 1335b032f27cSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 1336b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1337b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1338b032f27cSSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1339b032f27cSSam Leffler func, line, 1340b032f27cSSam Leffler ni, ether_sprintf(ni->ni_macaddr), 1341b032f27cSSam Leffler ieee80211_node_refcnt(ni)); 1342b032f27cSSam Leffler #endif 1343b032f27cSSam Leffler return ni; 1344b032f27cSSam Leffler } 1345b032f27cSSam Leffler } 1346b032f27cSSam Leffler return NULL; 1347b032f27cSSam Leffler } 1348b032f27cSSam Leffler 1349b032f27cSSam Leffler struct ieee80211_node * 1350b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1351b032f27cSSam Leffler ieee80211_find_vap_node_debug(struct ieee80211_node_table *nt, 1352b032f27cSSam Leffler const struct ieee80211vap *vap, 1353b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1354b032f27cSSam Leffler #else 1355b032f27cSSam Leffler ieee80211_find_vap_node(struct ieee80211_node_table *nt, 1356b032f27cSSam Leffler const struct ieee80211vap *vap, 1357b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1358b032f27cSSam Leffler #endif 1359b032f27cSSam Leffler { 1360b032f27cSSam Leffler struct ieee80211_node *ni; 1361b032f27cSSam Leffler 1362b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1363b032f27cSSam Leffler ni = ieee80211_find_vap_node_locked(nt, vap, macaddr); 13648a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 13651a1e1d21SSam Leffler return ni; 13661a1e1d21SSam Leffler } 13671a1e1d21SSam Leffler 13681a1e1d21SSam Leffler /* 13698a1b9b6aSSam Leffler * Fake up a node; this handles node discovery in adhoc mode. 13708a1b9b6aSSam Leffler * Note that for the driver's benefit we we treat this like 13718a1b9b6aSSam Leffler * an association so the driver has an opportunity to setup 13728a1b9b6aSSam Leffler * it's private state. 13738a1b9b6aSSam Leffler */ 13748a1b9b6aSSam Leffler struct ieee80211_node * 1375b032f27cSSam Leffler ieee80211_fakeup_adhoc_node(struct ieee80211vap *vap, 137668e8e04eSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 13778a1b9b6aSSam Leffler { 13788a1b9b6aSSam Leffler struct ieee80211_node *ni; 13798a1b9b6aSSam Leffler 1380b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1381be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(macaddr)); 1382b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, macaddr); 13838a1b9b6aSSam Leffler if (ni != NULL) { 1384b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1385b032f27cSSam Leffler 13868a1b9b6aSSam Leffler /* XXX no rate negotiation; just dup */ 1387b032f27cSSam Leffler ni->ni_rates = vap->iv_bss->ni_rates; 1388aa68c24fSSam Leffler if (ieee80211_iserp_rateset(&ni->ni_rates)) 1389aa68c24fSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 1390b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 13918e292e8eSSam Leffler /* 139268e8e04eSSam Leffler * In adhoc demo mode there are no management 139368e8e04eSSam Leffler * frames to use to discover neighbor capabilities, 139468e8e04eSSam Leffler * so blindly propagate the local configuration 139568e8e04eSSam Leffler * so we can do interesting things (e.g. use 139668e8e04eSSam Leffler * WME to disable ACK's). 13978e292e8eSSam Leffler */ 1398b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 13998e292e8eSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1400616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 1401b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 140268e8e04eSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 1403616190d0SSam Leffler #endif 14048e292e8eSSam Leffler } 1405d77148fbSSam Leffler ieee80211_node_setuptxparms(ni); 140649d2c137SBernhard Schmidt ieee80211_ratectl_node_init(ni); 1407b032f27cSSam Leffler if (ic->ic_newassoc != NULL) 1408b032f27cSSam Leffler ic->ic_newassoc(ni, 1); 140968e8e04eSSam Leffler /* XXX not right for 802.1x/WPA */ 141068e8e04eSSam Leffler ieee80211_node_authorize(ni); 14118a1b9b6aSSam Leffler } 14128a1b9b6aSSam Leffler return ni; 14138a1b9b6aSSam Leffler } 14148a1b9b6aSSam Leffler 1415be425a0fSSam Leffler void 1416be425a0fSSam Leffler ieee80211_init_neighbor(struct ieee80211_node *ni, 1417be425a0fSSam Leffler const struct ieee80211_frame *wh, 1418be425a0fSSam Leffler const struct ieee80211_scanparams *sp) 1419be425a0fSSam Leffler { 1420be425a0fSSam Leffler ni->ni_esslen = sp->ssid[1]; 1421be425a0fSSam Leffler memcpy(ni->ni_essid, sp->ssid + 2, sp->ssid[1]); 1422be425a0fSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, wh->i_addr3); 1423be425a0fSSam Leffler memcpy(ni->ni_tstamp.data, sp->tstamp, sizeof(ni->ni_tstamp)); 1424be425a0fSSam Leffler ni->ni_intval = sp->bintval; 1425be425a0fSSam Leffler ni->ni_capinfo = sp->capinfo; 1426be425a0fSSam Leffler ni->ni_chan = ni->ni_ic->ic_curchan; 1427be425a0fSSam Leffler ni->ni_fhdwell = sp->fhdwell; 1428be425a0fSSam Leffler ni->ni_fhindex = sp->fhindex; 1429be425a0fSSam Leffler ni->ni_erp = sp->erp; 1430be425a0fSSam Leffler ni->ni_timoff = sp->timoff; 143159aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 143259aa14a9SRui Paulo if (ni->ni_vap->iv_opmode == IEEE80211_M_MBSS) 143359aa14a9SRui Paulo ieee80211_mesh_init_neighbor(ni, wh, sp); 143459aa14a9SRui Paulo #endif 1435b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, sp->ies, sp->ies_len)) { 1436b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 14379094ffdfSSam Leffler if (ni->ni_ies.wme_ie != NULL) 14389094ffdfSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 14399094ffdfSSam Leffler else 14409094ffdfSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_QOS; 1441616190d0SSam Leffler #ifdef IEEE80211_SUPPORT_SUPERG 1442b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 1443b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 1444616190d0SSam Leffler #endif 1445b032f27cSSam Leffler } 1446be425a0fSSam Leffler 1447be425a0fSSam Leffler /* NB: must be after ni_chan is setup */ 144879edaebfSSam Leffler ieee80211_setup_rates(ni, sp->rates, sp->xrates, 144979edaebfSSam Leffler IEEE80211_F_DOSORT | IEEE80211_F_DOFRATE | 145079edaebfSSam Leffler IEEE80211_F_DONEGO | IEEE80211_F_DODEL); 1451be425a0fSSam Leffler } 1452be425a0fSSam Leffler 1453b5c99415SSam Leffler /* 1454b5c99415SSam Leffler * Do node discovery in adhoc mode on receipt of a beacon 1455b5c99415SSam Leffler * or probe response frame. Note that for the driver's 1456b5c99415SSam Leffler * benefit we we treat this like an association so the 1457b5c99415SSam Leffler * driver has an opportunity to setup it's private state. 1458b5c99415SSam Leffler */ 1459b5c99415SSam Leffler struct ieee80211_node * 1460b032f27cSSam Leffler ieee80211_add_neighbor(struct ieee80211vap *vap, 1461b5c99415SSam Leffler const struct ieee80211_frame *wh, 1462b5c99415SSam Leffler const struct ieee80211_scanparams *sp) 1463b5c99415SSam Leffler { 1464b5c99415SSam Leffler struct ieee80211_node *ni; 1465b5c99415SSam Leffler 1466b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1467be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(wh->i_addr2)); 1468b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, wh->i_addr2);/* XXX alloc_node? */ 1469b5c99415SSam Leffler if (ni != NULL) { 1470b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1471b032f27cSSam Leffler 1472be425a0fSSam Leffler ieee80211_init_neighbor(ni, wh, sp); 1473aa68c24fSSam Leffler if (ieee80211_iserp_rateset(&ni->ni_rates)) 1474aa68c24fSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 1475d77148fbSSam Leffler ieee80211_node_setuptxparms(ni); 147649d2c137SBernhard Schmidt ieee80211_ratectl_node_init(ni); 1477b5c99415SSam Leffler if (ic->ic_newassoc != NULL) 1478b5c99415SSam Leffler ic->ic_newassoc(ni, 1); 1479b5c99415SSam Leffler /* XXX not right for 802.1x/WPA */ 1480b5c99415SSam Leffler ieee80211_node_authorize(ni); 1481b5c99415SSam Leffler } 1482b5c99415SSam Leffler return ni; 1483b5c99415SSam Leffler } 1484b5c99415SSam Leffler 1485a2cfa5b7SSam Leffler #define IS_PROBEREQ(wh) \ 1486a2cfa5b7SSam Leffler ((wh->i_fc[0] & (IEEE80211_FC0_TYPE_MASK|IEEE80211_FC0_SUBTYPE_MASK)) \ 1487a2cfa5b7SSam Leffler == (IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_PROBE_REQ)) 1488a2cfa5b7SSam Leffler #define IS_BCAST_PROBEREQ(wh) \ 1489a2cfa5b7SSam Leffler (IS_PROBEREQ(wh) && IEEE80211_IS_MULTICAST( \ 1490a2cfa5b7SSam Leffler ((const struct ieee80211_frame *)(wh))->i_addr3)) 1491a2cfa5b7SSam Leffler 1492a2cfa5b7SSam Leffler static __inline struct ieee80211_node * 1493a2cfa5b7SSam Leffler _find_rxnode(struct ieee80211_node_table *nt, 1494a2cfa5b7SSam Leffler const struct ieee80211_frame_min *wh) 1495a2cfa5b7SSam Leffler { 1496a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1497a2cfa5b7SSam Leffler return NULL; /* spam bcast probe req to all vap's */ 1498a2cfa5b7SSam Leffler return ieee80211_find_node_locked(nt, wh->i_addr2); 1499a2cfa5b7SSam Leffler } 150068e8e04eSSam Leffler 15018a1b9b6aSSam Leffler /* 15028a1b9b6aSSam Leffler * Locate the node for sender, track state, and then pass the 1503a2cfa5b7SSam Leffler * (referenced) node up to the 802.11 layer for its use. Note 1504a2cfa5b7SSam Leffler * we can return NULL if the sender is not in the table. 15058a1b9b6aSSam Leffler */ 15068a1b9b6aSSam Leffler struct ieee80211_node * 15078a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 15088a1b9b6aSSam Leffler ieee80211_find_rxnode_debug(struct ieee80211com *ic, 15098a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh, const char *func, int line) 15108a1b9b6aSSam Leffler #else 15118a1b9b6aSSam Leffler ieee80211_find_rxnode(struct ieee80211com *ic, 15128a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh) 15138a1b9b6aSSam Leffler #endif 15148a1b9b6aSSam Leffler { 15158a1b9b6aSSam Leffler struct ieee80211_node_table *nt; 15168a1b9b6aSSam Leffler struct ieee80211_node *ni; 15178a1b9b6aSSam Leffler 151868e8e04eSSam Leffler nt = &ic->ic_sta; 15198a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1520a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 15218a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 15228a1b9b6aSSam Leffler 1523c1225b52SSam Leffler return ni; 1524c1225b52SSam Leffler } 1525c1225b52SSam Leffler 1526c1225b52SSam Leffler /* 1527c1225b52SSam Leffler * Like ieee80211_find_rxnode but use the supplied h/w 1528c1225b52SSam Leffler * key index as a hint to locate the node in the key 1529c1225b52SSam Leffler * mapping table. If an entry is present at the key 1530c1225b52SSam Leffler * index we return it; otherwise do a normal lookup and 1531c1225b52SSam Leffler * update the mapping table if the station has a unicast 1532c1225b52SSam Leffler * key assigned to it. 1533c1225b52SSam Leffler */ 1534c1225b52SSam Leffler struct ieee80211_node * 1535c1225b52SSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1536c1225b52SSam Leffler ieee80211_find_rxnode_withkey_debug(struct ieee80211com *ic, 1537c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix, 1538c1225b52SSam Leffler const char *func, int line) 1539c1225b52SSam Leffler #else 1540c1225b52SSam Leffler ieee80211_find_rxnode_withkey(struct ieee80211com *ic, 1541c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix) 1542c1225b52SSam Leffler #endif 1543c1225b52SSam Leffler { 1544c1225b52SSam Leffler struct ieee80211_node_table *nt; 1545c1225b52SSam Leffler struct ieee80211_node *ni; 1546c1225b52SSam Leffler 1547c1225b52SSam Leffler nt = &ic->ic_sta; 1548c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 1549c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) 1550c1225b52SSam Leffler ni = nt->nt_keyixmap[keyix]; 1551c1225b52SSam Leffler else 1552c1225b52SSam Leffler ni = NULL; 1553c1225b52SSam Leffler if (ni == NULL) { 1554a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 1555b032f27cSSam Leffler if (ni != NULL && nt->nt_keyixmap != NULL) { 1556c1225b52SSam Leffler /* 1557c1225b52SSam Leffler * If the station has a unicast key cache slot 1558c1225b52SSam Leffler * assigned update the key->node mapping table. 1559c1225b52SSam Leffler */ 1560c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1561c1225b52SSam Leffler /* XXX can keyixmap[keyix] != NULL? */ 1562c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1563c1225b52SSam Leffler nt->nt_keyixmap[keyix] == NULL) { 1564b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1565b032f27cSSam Leffler IEEE80211_MSG_NODE, 1566c1225b52SSam Leffler "%s: add key map entry %p<%s> refcnt %d\n", 1567c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1568c1225b52SSam Leffler ieee80211_node_refcnt(ni)+1); 1569c1225b52SSam Leffler nt->nt_keyixmap[keyix] = ieee80211_ref_node(ni); 1570c1225b52SSam Leffler } 1571c1225b52SSam Leffler } 1572a2cfa5b7SSam Leffler } else { 1573a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1574a2cfa5b7SSam Leffler ni = NULL; /* spam bcast probe req to all vap's */ 1575a2cfa5b7SSam Leffler else 1576c1225b52SSam Leffler ieee80211_ref_node(ni); 1577a2cfa5b7SSam Leffler } 1578c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1579c1225b52SSam Leffler 1580c1225b52SSam Leffler return ni; 1581c1225b52SSam Leffler } 1582a2cfa5b7SSam Leffler #undef IS_BCAST_PROBEREQ 1583a2cfa5b7SSam Leffler #undef IS_PROBEREQ 15848a1b9b6aSSam Leffler 15858a1b9b6aSSam Leffler /* 1586750d6d0cSSam Leffler * Return a reference to the appropriate node for sending 1587750d6d0cSSam Leffler * a data frame. This handles node discovery in adhoc networks. 1588750d6d0cSSam Leffler */ 1589750d6d0cSSam Leffler struct ieee80211_node * 15908a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1591b032f27cSSam Leffler ieee80211_find_txnode_debug(struct ieee80211vap *vap, 1592b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], 15938a1b9b6aSSam Leffler const char *func, int line) 15948a1b9b6aSSam Leffler #else 1595b032f27cSSam Leffler ieee80211_find_txnode(struct ieee80211vap *vap, 1596b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 15978a1b9b6aSSam Leffler #endif 1598750d6d0cSSam Leffler { 1599b032f27cSSam Leffler struct ieee80211_node_table *nt = &vap->iv_ic->ic_sta; 1600750d6d0cSSam Leffler struct ieee80211_node *ni; 1601750d6d0cSSam Leffler 1602750d6d0cSSam Leffler /* 1603750d6d0cSSam Leffler * The destination address should be in the node table 1604c1225b52SSam Leffler * unless this is a multicast/broadcast frame. We can 1605c1225b52SSam Leffler * also optimize station mode operation, all frames go 1606c1225b52SSam Leffler * to the bss node. 1607750d6d0cSSam Leffler */ 1608750d6d0cSSam Leffler /* XXX can't hold lock across dup_bss 'cuz of recursive locking */ 16098a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1610b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA || 1611b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_WDS || 1612b032f27cSSam Leffler IEEE80211_IS_MULTICAST(macaddr)) 1613b032f27cSSam Leffler ni = ieee80211_ref_node(vap->iv_bss); 16141b999d64SSam Leffler else 1615b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 16168a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 16178a1b9b6aSSam Leffler 16188a1b9b6aSSam Leffler if (ni == NULL) { 1619b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS || 1620b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO) { 162190d0d036SSam Leffler /* 162290d0d036SSam Leffler * In adhoc mode cons up a node for the destination. 162390d0d036SSam Leffler * Note that we need an additional reference for the 1624b032f27cSSam Leffler * caller to be consistent with 1625b032f27cSSam Leffler * ieee80211_find_node_locked. 162690d0d036SSam Leffler */ 1627b032f27cSSam Leffler ni = ieee80211_fakeup_adhoc_node(vap, macaddr); 162890d0d036SSam Leffler if (ni != NULL) 162990d0d036SSam Leffler (void) ieee80211_ref_node(ni); 163090d0d036SSam Leffler } else { 1631b032f27cSSam Leffler IEEE80211_NOTE_MAC(vap, IEEE80211_MSG_OUTPUT, macaddr, 1632b032f27cSSam Leffler "no node, discard frame (%s)", __func__); 1633b032f27cSSam Leffler vap->iv_stats.is_tx_nonode++; 1634750d6d0cSSam Leffler } 1635750d6d0cSSam Leffler } 1636750d6d0cSSam Leffler return ni; 1637750d6d0cSSam Leffler } 1638750d6d0cSSam Leffler 16398a1b9b6aSSam Leffler static void 16408a1b9b6aSSam Leffler _ieee80211_free_node(struct ieee80211_node *ni) 16418a1b9b6aSSam Leffler { 16428a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 16438a1b9b6aSSam Leffler 164437e9743aSSam Leffler /* 164537e9743aSSam Leffler * NB: careful about referencing the vap as it may be 164637e9743aSSam Leffler * gone if the last reference was held by a driver. 164737e9743aSSam Leffler * We know the com will always be present so it's safe 164837e9743aSSam Leffler * to use ni_ic below to reclaim resources. 164937e9743aSSam Leffler */ 165037e9743aSSam Leffler #if 0 1651b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 165249a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 165349a15236SSam Leffler ether_sprintf(ni->ni_macaddr), 16548a1b9b6aSSam Leffler nt != NULL ? nt->nt_name : "<gone>"); 165537e9743aSSam Leffler #endif 165637e9743aSSam Leffler if (ni->ni_associd != 0) { 165737e9743aSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1658b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1659b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 166037e9743aSSam Leffler } 16618a1b9b6aSSam Leffler if (nt != NULL) { 16628a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 16638a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 16648a1b9b6aSSam Leffler } 166537e9743aSSam Leffler ni->ni_ic->ic_node_free(ni); 16668a1b9b6aSSam Leffler } 16678a1b9b6aSSam Leffler 16688a1b9b6aSSam Leffler void 16698a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 16708a1b9b6aSSam Leffler ieee80211_free_node_debug(struct ieee80211_node *ni, const char *func, int line) 16718a1b9b6aSSam Leffler #else 16728a1b9b6aSSam Leffler ieee80211_free_node(struct ieee80211_node *ni) 16738a1b9b6aSSam Leffler #endif 16748a1b9b6aSSam Leffler { 16758a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 16768a1b9b6aSSam Leffler 16778a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1678b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 167949a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line, ni, 16808a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)-1); 16818a1b9b6aSSam Leffler #endif 1682c1225b52SSam Leffler if (nt != NULL) { 1683c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 16848a1b9b6aSSam Leffler if (ieee80211_node_dectestref(ni)) { 16858a1b9b6aSSam Leffler /* 1686c1225b52SSam Leffler * Last reference, reclaim state. 16878a1b9b6aSSam Leffler */ 16888a1b9b6aSSam Leffler _ieee80211_free_node(ni); 1689c1225b52SSam Leffler } else if (ieee80211_node_refcnt(ni) == 1 && 1690c1225b52SSam Leffler nt->nt_keyixmap != NULL) { 1691c1225b52SSam Leffler ieee80211_keyix keyix; 1692c1225b52SSam Leffler /* 1693c1225b52SSam Leffler * Check for a last reference in the key mapping table. 1694c1225b52SSam Leffler */ 1695c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1696c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1697c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1698b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1699b032f27cSSam Leffler IEEE80211_MSG_NODE, 1700c1225b52SSam Leffler "%s: %p<%s> clear key map entry", __func__, 1701c1225b52SSam Leffler ni, ether_sprintf(ni->ni_macaddr)); 1702c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1703c1225b52SSam Leffler ieee80211_node_decref(ni); /* XXX needed? */ 17048a1b9b6aSSam Leffler _ieee80211_free_node(ni); 17058a1b9b6aSSam Leffler } 17061a1e1d21SSam Leffler } 1707c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1708c1225b52SSam Leffler } else { 1709c1225b52SSam Leffler if (ieee80211_node_dectestref(ni)) 1710c1225b52SSam Leffler _ieee80211_free_node(ni); 1711c1225b52SSam Leffler } 1712c1225b52SSam Leffler } 1713c1225b52SSam Leffler 1714c1225b52SSam Leffler /* 1715c1225b52SSam Leffler * Reclaim a unicast key and clear any key cache state. 1716c1225b52SSam Leffler */ 1717c1225b52SSam Leffler int 1718c1225b52SSam Leffler ieee80211_node_delucastkey(struct ieee80211_node *ni) 1719c1225b52SSam Leffler { 172037e9743aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 172137e9743aSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1722c1225b52SSam Leffler struct ieee80211_node *nikey; 1723c1225b52SSam Leffler ieee80211_keyix keyix; 1724c1225b52SSam Leffler int isowned, status; 1725c1225b52SSam Leffler 1726c1225b52SSam Leffler /* 1727c1225b52SSam Leffler * NB: We must beware of LOR here; deleting the key 1728c1225b52SSam Leffler * can cause the crypto layer to block traffic updates 1729c1225b52SSam Leffler * which can generate a LOR against the node table lock; 1730c1225b52SSam Leffler * grab it here and stash the key index for our use below. 1731c1225b52SSam Leffler * 1732c1225b52SSam Leffler * Must also beware of recursion on the node table lock. 1733c1225b52SSam Leffler * When called from node_cleanup we may already have 1734c1225b52SSam Leffler * the node table lock held. Unfortunately there's no 1735c1225b52SSam Leffler * way to separate out this path so we must do this 1736c1225b52SSam Leffler * conditionally. 1737c1225b52SSam Leffler */ 1738c1225b52SSam Leffler isowned = IEEE80211_NODE_IS_LOCKED(nt); 1739c1225b52SSam Leffler if (!isowned) 1740c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 174137e9743aSSam Leffler nikey = NULL; 174237e9743aSSam Leffler status = 1; /* NB: success */ 1743ca92652aSSam Leffler if (ni->ni_ucastkey.wk_keyix != IEEE80211_KEYIX_NONE) { 1744c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 174537e9743aSSam Leffler status = ieee80211_crypto_delkey(ni->ni_vap, &ni->ni_ucastkey); 1746c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) { 1747c1225b52SSam Leffler nikey = nt->nt_keyixmap[keyix]; 1748c2ede4b3SMartin Blapp nt->nt_keyixmap[keyix] = NULL; 174937e9743aSSam Leffler } 175037e9743aSSam Leffler } 1751c1225b52SSam Leffler if (!isowned) 1752b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1753c1225b52SSam Leffler 1754c1225b52SSam Leffler if (nikey != NULL) { 1755c1225b52SSam Leffler KASSERT(nikey == ni, 1756c1225b52SSam Leffler ("key map out of sync, ni %p nikey %p", ni, nikey)); 175737e9743aSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1758c1225b52SSam Leffler "%s: delete key map entry %p<%s> refcnt %d\n", 1759c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1760c1225b52SSam Leffler ieee80211_node_refcnt(ni)-1); 1761c1225b52SSam Leffler ieee80211_free_node(ni); 1762c1225b52SSam Leffler } 1763c1225b52SSam Leffler return status; 1764c1225b52SSam Leffler } 17651a1e1d21SSam Leffler 1766303ebc3cSSam Leffler /* 17678a1b9b6aSSam Leffler * Reclaim a node. If this is the last reference count then 17688a1b9b6aSSam Leffler * do the normal free work. Otherwise remove it from the node 17698a1b9b6aSSam Leffler * table and mark it gone by clearing the back-reference. 17708a1b9b6aSSam Leffler */ 17718a1b9b6aSSam Leffler static void 17728a1b9b6aSSam Leffler node_reclaim(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 17738a1b9b6aSSam Leffler { 1774c1225b52SSam Leffler ieee80211_keyix keyix; 1775c1225b52SSam Leffler 1776c1225b52SSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 17778a1b9b6aSSam Leffler 1778b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 177949a15236SSam Leffler "%s: remove %p<%s> from %s table, refcnt %d\n", 178049a15236SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 178149a15236SSam Leffler nt->nt_name, ieee80211_node_refcnt(ni)-1); 1782c1225b52SSam Leffler /* 1783c1225b52SSam Leffler * Clear any entry in the unicast key mapping table. 1784c1225b52SSam Leffler * We need to do it here so rx lookups don't find it 1785c1225b52SSam Leffler * in the mapping table even if it's not in the hash 1786c1225b52SSam Leffler * table. We cannot depend on the mapping table entry 1787c1225b52SSam Leffler * being cleared because the node may not be free'd. 1788c1225b52SSam Leffler */ 1789c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1790c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax && 1791c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1792b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 179373bac36fSSam Leffler "%s: %p<%s> clear key map entry %u\n", 179473bac36fSSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), keyix); 1795c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1796c1225b52SSam Leffler ieee80211_node_decref(ni); /* NB: don't need free */ 1797c1225b52SSam Leffler } 17988a1b9b6aSSam Leffler if (!ieee80211_node_dectestref(ni)) { 17998a1b9b6aSSam Leffler /* 18008a1b9b6aSSam Leffler * Other references are present, just remove the 18018a1b9b6aSSam Leffler * node from the table so it cannot be found. When 18028a1b9b6aSSam Leffler * the references are dropped storage will be 1803acc4f7f5SSam Leffler * reclaimed. 18048a1b9b6aSSam Leffler */ 18058a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 18068a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 18078a1b9b6aSSam Leffler ni->ni_table = NULL; /* clear reference */ 18088a1b9b6aSSam Leffler } else 18098a1b9b6aSSam Leffler _ieee80211_free_node(ni); 18108a1b9b6aSSam Leffler } 18118a1b9b6aSSam Leffler 1812b032f27cSSam Leffler /* 1813b032f27cSSam Leffler * Node table support. 1814b032f27cSSam Leffler */ 1815b032f27cSSam Leffler 1816b032f27cSSam Leffler static void 1817b032f27cSSam Leffler ieee80211_node_table_init(struct ieee80211com *ic, 1818b032f27cSSam Leffler struct ieee80211_node_table *nt, 1819b032f27cSSam Leffler const char *name, int inact, int keyixmax) 1820b032f27cSSam Leffler { 1821b032f27cSSam Leffler struct ifnet *ifp = ic->ic_ifp; 1822b032f27cSSam Leffler 1823b032f27cSSam Leffler nt->nt_ic = ic; 1824b032f27cSSam Leffler IEEE80211_NODE_LOCK_INIT(nt, ifp->if_xname); 1825b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_INIT(nt, ifp->if_xname); 1826b032f27cSSam Leffler TAILQ_INIT(&nt->nt_node); 1827b032f27cSSam Leffler nt->nt_name = name; 1828b032f27cSSam Leffler nt->nt_scangen = 1; 1829b032f27cSSam Leffler nt->nt_inact_init = inact; 1830b032f27cSSam Leffler nt->nt_keyixmax = keyixmax; 1831b032f27cSSam Leffler if (nt->nt_keyixmax > 0) { 1832e2126decSSam Leffler nt->nt_keyixmap = (struct ieee80211_node **) malloc( 1833c5abbba3SDag-Erling Smørgrav keyixmax * sizeof(struct ieee80211_node *), 1834b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 1835b032f27cSSam Leffler if (nt->nt_keyixmap == NULL) 1836b032f27cSSam Leffler if_printf(ic->ic_ifp, 1837b032f27cSSam Leffler "Cannot allocate key index map with %u entries\n", 1838b032f27cSSam Leffler keyixmax); 1839b032f27cSSam Leffler } else 1840b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1841b032f27cSSam Leffler } 1842b032f27cSSam Leffler 1843b032f27cSSam Leffler static void 1844b032f27cSSam Leffler ieee80211_node_table_reset(struct ieee80211_node_table *nt, 1845b032f27cSSam Leffler struct ieee80211vap *match) 1846b032f27cSSam Leffler { 1847b032f27cSSam Leffler struct ieee80211_node *ni, *next; 1848b032f27cSSam Leffler 1849b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1850b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) { 1851b032f27cSSam Leffler if (match != NULL && ni->ni_vap != match) 1852b032f27cSSam Leffler continue; 1853b032f27cSSam Leffler /* XXX can this happen? if so need's work */ 1854b032f27cSSam Leffler if (ni->ni_associd != 0) { 1855b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1856b032f27cSSam Leffler 1857b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 1858b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 1859b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1860b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 1861b032f27cSSam Leffler } 1862b032f27cSSam Leffler ni->ni_wdsvap = NULL; /* clear reference */ 18638a1b9b6aSSam Leffler node_reclaim(nt, ni); 18648a1b9b6aSSam Leffler } 1865b032f27cSSam Leffler if (match != NULL && match->iv_opmode == IEEE80211_M_WDS) { 1866b032f27cSSam Leffler /* 1867b032f27cSSam Leffler * Make a separate pass to clear references to this vap 1868b032f27cSSam Leffler * held by DWDS entries. They will not be matched above 1869b032f27cSSam Leffler * because ni_vap will point to the ap vap but we still 1870b032f27cSSam Leffler * need to clear ni_wdsvap when the WDS vap is destroyed 1871b032f27cSSam Leffler * and/or reset. 1872b032f27cSSam Leffler */ 1873b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) 1874b032f27cSSam Leffler if (ni->ni_wdsvap == match) 1875b032f27cSSam Leffler ni->ni_wdsvap = NULL; 1876b032f27cSSam Leffler } 1877b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1878b032f27cSSam Leffler } 1879b032f27cSSam Leffler 1880b032f27cSSam Leffler static void 1881b032f27cSSam Leffler ieee80211_node_table_cleanup(struct ieee80211_node_table *nt) 1882b032f27cSSam Leffler { 1883b032f27cSSam Leffler ieee80211_node_table_reset(nt, NULL); 1884b032f27cSSam Leffler if (nt->nt_keyixmap != NULL) { 1885b032f27cSSam Leffler #ifdef DIAGNOSTIC 1886b032f27cSSam Leffler /* XXX verify all entries are NULL */ 1887b032f27cSSam Leffler int i; 1888b032f27cSSam Leffler for (i = 0; i < nt->nt_keyixmax; i++) 1889b032f27cSSam Leffler if (nt->nt_keyixmap[i] != NULL) 1890b032f27cSSam Leffler printf("%s: %s[%u] still active\n", __func__, 1891b032f27cSSam Leffler nt->nt_name, i); 1892b032f27cSSam Leffler #endif 1893e2126decSSam Leffler free(nt->nt_keyixmap, M_80211_NODE); 1894b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1895b032f27cSSam Leffler } 1896b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_DESTROY(nt); 1897b032f27cSSam Leffler IEEE80211_NODE_LOCK_DESTROY(nt); 18988a1b9b6aSSam Leffler } 18998a1b9b6aSSam Leffler 19008a1b9b6aSSam Leffler /* 19018a1b9b6aSSam Leffler * Timeout inactive stations and do related housekeeping. 19028a1b9b6aSSam Leffler * Note that we cannot hold the node lock while sending a 19038a1b9b6aSSam Leffler * frame as this would lead to a LOR. Instead we use a 19048a1b9b6aSSam Leffler * generation number to mark nodes that we've scanned and 19058a1b9b6aSSam Leffler * drop the lock and restart a scan if we have to time out 19068a1b9b6aSSam Leffler * a node. Since we are single-threaded by virtue of 1907303ebc3cSSam Leffler * controlling the inactivity timer we can be sure this will 1908303ebc3cSSam Leffler * process each node only once. 1909303ebc3cSSam Leffler */ 19108a1b9b6aSSam Leffler static void 1911b032f27cSSam Leffler ieee80211_timeout_stations(struct ieee80211com *ic) 19121a1e1d21SSam Leffler { 1913b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1914b032f27cSSam Leffler struct ieee80211vap *vap; 1915303ebc3cSSam Leffler struct ieee80211_node *ni; 1916b032f27cSSam Leffler int gen = 0; 19171a1e1d21SSam Leffler 1918b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 1919a1a50502SSam Leffler gen = ++nt->nt_scangen; 1920303ebc3cSSam Leffler restart: 19218a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 19228a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1923303ebc3cSSam Leffler if (ni->ni_scangen == gen) /* previously handled */ 1924303ebc3cSSam Leffler continue; 1925303ebc3cSSam Leffler ni->ni_scangen = gen; 19260a915fadSSam Leffler /* 1927ebdda46cSSam Leffler * Ignore entries for which have yet to receive an 1928ebdda46cSSam Leffler * authentication frame. These are transient and 1929ebdda46cSSam Leffler * will be reclaimed when the last reference to them 1930ebdda46cSSam Leffler * goes away (when frame xmits complete). 1931ebdda46cSSam Leffler */ 1932b032f27cSSam Leffler vap = ni->ni_vap; 1933b032f27cSSam Leffler /* 1934b032f27cSSam Leffler * Only process stations when in RUN state. This 1935b032f27cSSam Leffler * insures, for example, that we don't timeout an 1936b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 1937b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 1938b032f27cSSam Leffler * it applies to more than timeout processing. 1939b032f27cSSam Leffler */ 1940b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 1941b032f27cSSam Leffler continue; 1942b032f27cSSam Leffler /* XXX can vap be NULL? */ 1943b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 1944b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 194544b666cdSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 1946ebdda46cSSam Leffler continue; 1947ebdda46cSSam Leffler /* 19488a1b9b6aSSam Leffler * Free fragment if not needed anymore 19498a1b9b6aSSam Leffler * (last fragment older than 1s). 1950b032f27cSSam Leffler * XXX doesn't belong here, move to node_age 19510a915fadSSam Leffler */ 19528a1b9b6aSSam Leffler if (ni->ni_rxfrag[0] != NULL && 19538a1b9b6aSSam Leffler ticks > ni->ni_rxfragstamp + hz) { 19548a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[0]); 19558a1b9b6aSSam Leffler ni->ni_rxfrag[0] = NULL; 19568a1b9b6aSSam Leffler } 1957be1054edSSam Leffler if (ni->ni_inact > 0) { 1958c066143cSSam Leffler ni->ni_inact--; 1959be1054edSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_INACT, ni, 1960be1054edSSam Leffler "%s: inact %u inact_reload %u nrates %u", 1961be1054edSSam Leffler __func__, ni->ni_inact, ni->ni_inact_reload, 1962be1054edSSam Leffler ni->ni_rates.rs_nrates); 1963be1054edSSam Leffler } 1964ce647032SSam Leffler /* 1965ce647032SSam Leffler * Special case ourself; we may be idle for extended periods 1966ce647032SSam Leffler * of time and regardless reclaiming our state is wrong. 1967b032f27cSSam Leffler * XXX run ic_node_age 1968ce647032SSam Leffler */ 1969b032f27cSSam Leffler if (ni == vap->iv_bss) 1970ce647032SSam Leffler continue; 1971b032f27cSSam Leffler if (ni->ni_associd != 0 || 1972b032f27cSSam Leffler (vap->iv_opmode == IEEE80211_M_IBSS || 1973b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO)) { 19748a1b9b6aSSam Leffler /* 1975b032f27cSSam Leffler * Age/drain resources held by the station. 19768a1b9b6aSSam Leffler */ 1977b032f27cSSam Leffler ic->ic_node_age(ni); 19788a1b9b6aSSam Leffler /* 19798a1b9b6aSSam Leffler * Probe the station before time it out. We 19808a1b9b6aSSam Leffler * send a null data frame which may not be 19818a1b9b6aSSam Leffler * universally supported by drivers (need it 19828a1b9b6aSSam Leffler * for ps-poll support so it should be...). 198368e8e04eSSam Leffler * 198468e8e04eSSam Leffler * XXX don't probe the station unless we've 198568e8e04eSSam Leffler * received a frame from them (and have 198668e8e04eSSam Leffler * some idea of the rates they are capable 198768e8e04eSSam Leffler * of); this will get fixed more properly 198868e8e04eSSam Leffler * soon with better handling of the rate set. 19898a1b9b6aSSam Leffler */ 1990b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 1991c066143cSSam Leffler (0 < ni->ni_inact && 1992b032f27cSSam Leffler ni->ni_inact <= vap->iv_inact_probe) && 199368e8e04eSSam Leffler ni->ni_rates.rs_nrates != 0) { 1994b032f27cSSam Leffler IEEE80211_NOTE(vap, 1995f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, 1996f66d97f6SSam Leffler ni, "%s", 1997f66d97f6SSam Leffler "probe station due to inactivity"); 199819ad2dd7SSam Leffler /* 199919ad2dd7SSam Leffler * Grab a reference before unlocking the table 200019ad2dd7SSam Leffler * so the node cannot be reclaimed before we 200119ad2dd7SSam Leffler * send the frame. ieee80211_send_nulldata 200219ad2dd7SSam Leffler * understands we've done this and reclaims the 200319ad2dd7SSam Leffler * ref for us as needed. 200419ad2dd7SSam Leffler */ 200519ad2dd7SSam Leffler ieee80211_ref_node(ni); 20068a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 2007f62121ceSSam Leffler ieee80211_send_nulldata(ni); 20088a1b9b6aSSam Leffler /* XXX stat? */ 20098a1b9b6aSSam Leffler goto restart; 20108a1b9b6aSSam Leffler } 20118a1b9b6aSSam Leffler } 2012b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 2013c066143cSSam Leffler ni->ni_inact <= 0) { 2014b032f27cSSam Leffler IEEE80211_NOTE(vap, 2015f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, ni, 2016f66d97f6SSam Leffler "station timed out due to inactivity " 2017f66d97f6SSam Leffler "(refcnt %u)", ieee80211_node_refcnt(ni)); 20188a1b9b6aSSam Leffler /* 20198a1b9b6aSSam Leffler * Send a deauthenticate frame and drop the station. 20208a1b9b6aSSam Leffler * This is somewhat complicated due to reference counts 20218a1b9b6aSSam Leffler * and locking. At this point a station will typically 20228a1b9b6aSSam Leffler * have a reference count of 1. ieee80211_node_leave 20238a1b9b6aSSam Leffler * will do a "free" of the node which will drop the 20248a1b9b6aSSam Leffler * reference count. But in the meantime a reference 20258a1b9b6aSSam Leffler * wil be held by the deauth frame. The actual reclaim 20268a1b9b6aSSam Leffler * of the node will happen either after the tx is 20278a1b9b6aSSam Leffler * completed or by ieee80211_node_leave. 20288a1b9b6aSSam Leffler * 20298a1b9b6aSSam Leffler * Separately we must drop the node lock before sending 203068e8e04eSSam Leffler * in case the driver takes a lock, as this can result 203168e8e04eSSam Leffler * in a LOR between the node lock and the driver lock. 20328a1b9b6aSSam Leffler */ 20335698ab1aSSam Leffler ieee80211_ref_node(ni); 20348a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20358a1b9b6aSSam Leffler if (ni->ni_associd != 0) { 2036b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, 20371a1e1d21SSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH, 20381a1e1d21SSam Leffler IEEE80211_REASON_AUTH_EXPIRE); 20398a1b9b6aSSam Leffler } 2040b032f27cSSam Leffler ieee80211_node_leave(ni); 20415698ab1aSSam Leffler ieee80211_free_node(ni); 2042b032f27cSSam Leffler vap->iv_stats.is_node_timeout++; 2043303ebc3cSSam Leffler goto restart; 2044303ebc3cSSam Leffler } 20451a1e1d21SSam Leffler } 20468a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20478a1b9b6aSSam Leffler 2048b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 204968e8e04eSSam Leffler } 20508a1b9b6aSSam Leffler 2051b032f27cSSam Leffler /* 2052b032f27cSSam Leffler * Aggressively reclaim resources. This should be used 2053b032f27cSSam Leffler * only in a critical situation to reclaim mbuf resources. 2054b032f27cSSam Leffler */ 2055b032f27cSSam Leffler void 2056b032f27cSSam Leffler ieee80211_drain(struct ieee80211com *ic) 2057b032f27cSSam Leffler { 2058b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 2059b032f27cSSam Leffler struct ieee80211vap *vap; 2060b032f27cSSam Leffler struct ieee80211_node *ni; 2061b032f27cSSam Leffler 2062b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 2063b032f27cSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 2064b032f27cSSam Leffler /* 2065b032f27cSSam Leffler * Ignore entries for which have yet to receive an 2066b032f27cSSam Leffler * authentication frame. These are transient and 2067b032f27cSSam Leffler * will be reclaimed when the last reference to them 2068b032f27cSSam Leffler * goes away (when frame xmits complete). 2069b032f27cSSam Leffler */ 2070b032f27cSSam Leffler vap = ni->ni_vap; 2071b032f27cSSam Leffler /* 2072b032f27cSSam Leffler * Only process stations when in RUN state. This 2073b032f27cSSam Leffler * insures, for example, that we don't timeout an 2074b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 2075b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 2076b032f27cSSam Leffler * it applies to more than timeout processing. 2077b032f27cSSam Leffler */ 2078b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 2079b032f27cSSam Leffler continue; 2080b032f27cSSam Leffler /* XXX can vap be NULL? */ 2081b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 2082b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 2083b032f27cSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 2084b032f27cSSam Leffler continue; 2085b032f27cSSam Leffler /* 2086b032f27cSSam Leffler * Free fragments. 2087b032f27cSSam Leffler * XXX doesn't belong here, move to node_drain 2088b032f27cSSam Leffler */ 2089b032f27cSSam Leffler if (ni->ni_rxfrag[0] != NULL) { 2090b032f27cSSam Leffler m_freem(ni->ni_rxfrag[0]); 2091b032f27cSSam Leffler ni->ni_rxfrag[0] = NULL; 2092b032f27cSSam Leffler } 2093b032f27cSSam Leffler /* 2094b032f27cSSam Leffler * Drain resources held by the station. 2095b032f27cSSam Leffler */ 2096b032f27cSSam Leffler ic->ic_node_drain(ni); 2097b032f27cSSam Leffler } 2098b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 2099b032f27cSSam Leffler } 2100b032f27cSSam Leffler 2101b032f27cSSam Leffler /* 2102b032f27cSSam Leffler * Per-ieee80211com inactivity timer callback. 2103b032f27cSSam Leffler */ 210468e8e04eSSam Leffler void 210568e8e04eSSam Leffler ieee80211_node_timeout(void *arg) 210668e8e04eSSam Leffler { 210768e8e04eSSam Leffler struct ieee80211com *ic = arg; 210868e8e04eSSam Leffler 2109b032f27cSSam Leffler /* 2110b032f27cSSam Leffler * Defer timeout processing if a channel switch is pending. 2111b032f27cSSam Leffler * We typically need to be mute so not doing things that 2112b032f27cSSam Leffler * might generate frames is good to handle in one place. 2113b032f27cSSam Leffler * Supressing the station timeout processing may extend the 2114b032f27cSSam Leffler * lifetime of inactive stations (by not decrementing their 2115b032f27cSSam Leffler * idle counters) but this should be ok unless the CSA is 2116b032f27cSSam Leffler * active for an unusually long time. 2117b032f27cSSam Leffler */ 2118b032f27cSSam Leffler if ((ic->ic_flags & IEEE80211_F_CSAPENDING) == 0) { 211968e8e04eSSam Leffler ieee80211_scan_timeout(ic); 2120b032f27cSSam Leffler ieee80211_timeout_stations(ic); 21215b16c28cSSam Leffler ieee80211_ageq_age(&ic->ic_stageq, IEEE80211_INACT_WAIT); 212268e8e04eSSam Leffler 2123b105a069SSam Leffler IEEE80211_LOCK(ic); 2124b105a069SSam Leffler ieee80211_erp_timeout(ic); 21251b6167d2SSam Leffler ieee80211_ht_timeout(ic); 2126b105a069SSam Leffler IEEE80211_UNLOCK(ic); 2127b032f27cSSam Leffler } 212868e8e04eSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 212968e8e04eSSam Leffler ieee80211_node_timeout, ic); 21301a1e1d21SSam Leffler } 21311a1e1d21SSam Leffler 21321a1e1d21SSam Leffler void 2133b032f27cSSam Leffler ieee80211_iterate_nodes(struct ieee80211_node_table *nt, 2134b032f27cSSam Leffler ieee80211_iter_func *f, void *arg) 21351a1e1d21SSam Leffler { 21361a1e1d21SSam Leffler struct ieee80211_node *ni; 21378a1b9b6aSSam Leffler u_int gen; 21381a1e1d21SSam Leffler 2139b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 2140a1a50502SSam Leffler gen = ++nt->nt_scangen; 21418a1b9b6aSSam Leffler restart: 21428a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 21438a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 21448a1b9b6aSSam Leffler if (ni->ni_scangen != gen) { 21458a1b9b6aSSam Leffler ni->ni_scangen = gen; 21468a1b9b6aSSam Leffler (void) ieee80211_ref_node(ni); 21478a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 21481a1e1d21SSam Leffler (*f)(arg, ni); 21498a1b9b6aSSam Leffler ieee80211_free_node(ni); 21508a1b9b6aSSam Leffler goto restart; 21518a1b9b6aSSam Leffler } 21528a1b9b6aSSam Leffler } 21538a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 21548a1b9b6aSSam Leffler 2155b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 21568a1b9b6aSSam Leffler } 21578a1b9b6aSSam Leffler 21588a1b9b6aSSam Leffler void 21598a1b9b6aSSam Leffler ieee80211_dump_node(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 21608a1b9b6aSSam Leffler { 21618a1b9b6aSSam Leffler printf("0x%p: mac %s refcnt %d\n", ni, 21628a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)); 21638a1b9b6aSSam Leffler printf("\tscangen %u authmode %u flags 0x%x\n", 21648a1b9b6aSSam Leffler ni->ni_scangen, ni->ni_authmode, ni->ni_flags); 21658a1b9b6aSSam Leffler printf("\tassocid 0x%x txpower %u vlan %u\n", 21668a1b9b6aSSam Leffler ni->ni_associd, ni->ni_txpower, ni->ni_vlan); 21678a1b9b6aSSam Leffler printf("\ttxseq %u rxseq %u fragno %u rxfragstamp %u\n", 2168801df4a5SSam Leffler ni->ni_txseqs[IEEE80211_NONQOS_TID], 2169801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] >> IEEE80211_SEQ_SEQ_SHIFT, 2170801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] & IEEE80211_SEQ_FRAG_MASK, 21718a1b9b6aSSam Leffler ni->ni_rxfragstamp); 21725463c4a4SSam Leffler printf("\trssi %d noise %d intval %u capinfo 0x%x\n", 21735463c4a4SSam Leffler node_getrssi(ni), ni->ni_noise, 217468e8e04eSSam Leffler ni->ni_intval, ni->ni_capinfo); 21758a1b9b6aSSam Leffler printf("\tbssid %s essid \"%.*s\" channel %u:0x%x\n", 21768a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 21778a1b9b6aSSam Leffler ni->ni_esslen, ni->ni_essid, 21788a1b9b6aSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags); 2179be1054edSSam Leffler printf("\tinact %u inact_reload %u txrate %u\n", 2180be1054edSSam Leffler ni->ni_inact, ni->ni_inact_reload, ni->ni_txrate); 218168e8e04eSSam Leffler printf("\thtcap %x htparam %x htctlchan %u ht2ndchan %u\n", 218268e8e04eSSam Leffler ni->ni_htcap, ni->ni_htparam, 218368e8e04eSSam Leffler ni->ni_htctlchan, ni->ni_ht2ndchan); 218468e8e04eSSam Leffler printf("\thtopmode %x htstbc %x chw %u\n", 218568e8e04eSSam Leffler ni->ni_htopmode, ni->ni_htstbc, ni->ni_chw); 21868a1b9b6aSSam Leffler } 21878a1b9b6aSSam Leffler 21888a1b9b6aSSam Leffler void 21898a1b9b6aSSam Leffler ieee80211_dump_nodes(struct ieee80211_node_table *nt) 21908a1b9b6aSSam Leffler { 21918a1b9b6aSSam Leffler ieee80211_iterate_nodes(nt, 21928a1b9b6aSSam Leffler (ieee80211_iter_func *) ieee80211_dump_node, nt); 21938a1b9b6aSSam Leffler } 21948a1b9b6aSSam Leffler 21952dc4d8dcSSam Leffler static void 21962dc4d8dcSSam Leffler ieee80211_notify_erp_locked(struct ieee80211com *ic) 2197b105a069SSam Leffler { 2198b032f27cSSam Leffler struct ieee80211vap *vap; 2199b032f27cSSam Leffler 2200b032f27cSSam Leffler IEEE80211_LOCK_ASSERT(ic); 2201b032f27cSSam Leffler 2202b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) 2203b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) 2204b032f27cSSam Leffler ieee80211_beacon_notify(vap, IEEE80211_BEACON_ERP); 2205b105a069SSam Leffler } 2206b105a069SSam Leffler 22072dc4d8dcSSam Leffler void 22082dc4d8dcSSam Leffler ieee80211_notify_erp(struct ieee80211com *ic) 22092dc4d8dcSSam Leffler { 22102dc4d8dcSSam Leffler IEEE80211_LOCK(ic); 22112dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 22122dc4d8dcSSam Leffler IEEE80211_UNLOCK(ic); 22132dc4d8dcSSam Leffler } 22142dc4d8dcSSam Leffler 22158a1b9b6aSSam Leffler /* 22168a1b9b6aSSam Leffler * Handle a station joining an 11g network. 22178a1b9b6aSSam Leffler */ 22188a1b9b6aSSam Leffler static void 2219b032f27cSSam Leffler ieee80211_node_join_11g(struct ieee80211_node *ni) 22208a1b9b6aSSam Leffler { 2221b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 22228a1b9b6aSSam Leffler 22231b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 22241b6167d2SSam Leffler 22258a1b9b6aSSam Leffler /* 22268a1b9b6aSSam Leffler * Station isn't capable of short slot time. Bump 22278a1b9b6aSSam Leffler * the count of long slot time stations and disable 22288a1b9b6aSSam Leffler * use of short slot time. Note that the actual switch 22298a1b9b6aSSam Leffler * over to long slot time use may not occur until the 22308a1b9b6aSSam Leffler * next beacon transmission (per sec. 7.3.1.4 of 11g). 22318a1b9b6aSSam Leffler */ 22328a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 22338a1b9b6aSSam Leffler ic->ic_longslotsta++; 2234b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2235b105a069SSam Leffler "station needs long slot time, count %d", 2236b105a069SSam Leffler ic->ic_longslotsta); 22378a1b9b6aSSam Leffler /* XXX vap's w/ conflicting needs won't work */ 223868e8e04eSSam Leffler if (!IEEE80211_IS_CHAN_108G(ic->ic_bsschan)) { 223968e8e04eSSam Leffler /* 224068e8e04eSSam Leffler * Don't force slot time when switched to turbo 224168e8e04eSSam Leffler * mode as non-ERP stations won't be present; this 224268e8e04eSSam Leffler * need only be done when on the normal G channel. 224368e8e04eSSam Leffler */ 22448a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 0); 22458a1b9b6aSSam Leffler } 224668e8e04eSSam Leffler } 22478a1b9b6aSSam Leffler /* 22488a1b9b6aSSam Leffler * If the new station is not an ERP station 22498a1b9b6aSSam Leffler * then bump the counter and enable protection 22508a1b9b6aSSam Leffler * if configured. 22518a1b9b6aSSam Leffler */ 2252b032f27cSSam Leffler if (!ieee80211_iserp_rateset(&ni->ni_rates)) { 22538a1b9b6aSSam Leffler ic->ic_nonerpsta++; 2254b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2255b105a069SSam Leffler "station is !ERP, %d non-ERP stations associated", 2256b105a069SSam Leffler ic->ic_nonerpsta); 22578a1b9b6aSSam Leffler /* 22588a1b9b6aSSam Leffler * If station does not support short preamble 22598a1b9b6aSSam Leffler * then we must enable use of Barker preamble. 22608a1b9b6aSSam Leffler */ 22618a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_PREAMBLE) == 0) { 2262b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2263b105a069SSam Leffler "%s", "station needs long preamble"); 22648a1b9b6aSSam Leffler ic->ic_flags |= IEEE80211_F_USEBARKER; 22658a1b9b6aSSam Leffler ic->ic_flags &= ~IEEE80211_F_SHPREAMBLE; 22668a1b9b6aSSam Leffler } 2267b105a069SSam Leffler /* 2268b032f27cSSam Leffler * If protection is configured and this is the first 2269b032f27cSSam Leffler * indication we should use protection, enable it. 2270b105a069SSam Leffler */ 2271b105a069SSam Leffler if (ic->ic_protmode != IEEE80211_PROT_NONE && 2272b105a069SSam Leffler ic->ic_nonerpsta == 1 && 2273b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2274b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 2275b105a069SSam Leffler "%s: enable use of protection\n", __func__); 2276b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_USEPROT; 22772dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2278b105a069SSam Leffler } 22798a1b9b6aSSam Leffler } else 22808a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 22818a1b9b6aSSam Leffler } 22828a1b9b6aSSam Leffler 22838a1b9b6aSSam Leffler void 2284b032f27cSSam Leffler ieee80211_node_join(struct ieee80211_node *ni, int resp) 22858a1b9b6aSSam Leffler { 2286b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2287b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 22888a1b9b6aSSam Leffler int newassoc; 22898a1b9b6aSSam Leffler 22908a1b9b6aSSam Leffler if (ni->ni_associd == 0) { 229168e8e04eSSam Leffler uint16_t aid; 22928a1b9b6aSSam Leffler 2293b032f27cSSam Leffler KASSERT(vap->iv_aid_bitmap != NULL, ("no aid bitmap")); 22948a1b9b6aSSam Leffler /* 22958a1b9b6aSSam Leffler * It would be good to search the bitmap 22968a1b9b6aSSam Leffler * more efficiently, but this will do for now. 22978a1b9b6aSSam Leffler */ 2298b032f27cSSam Leffler for (aid = 1; aid < vap->iv_max_aid; aid++) { 2299b032f27cSSam Leffler if (!IEEE80211_AID_ISSET(vap, aid)) 23008a1b9b6aSSam Leffler break; 23018a1b9b6aSSam Leffler } 2302b032f27cSSam Leffler if (aid >= vap->iv_max_aid) { 230313f91245SSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_TOOMANY); 2304b032f27cSSam Leffler ieee80211_node_leave(ni); 23058a1b9b6aSSam Leffler return; 23068a1b9b6aSSam Leffler } 23078a1b9b6aSSam Leffler ni->ni_associd = aid | 0xc000; 23081b6167d2SSam Leffler ni->ni_jointime = time_uptime; 2309b032f27cSSam Leffler IEEE80211_LOCK(ic); 2310b032f27cSSam Leffler IEEE80211_AID_SET(vap, ni->ni_associd); 2311b032f27cSSam Leffler vap->iv_sta_assoc++; 23128a1b9b6aSSam Leffler ic->ic_sta_assoc++; 23131b6167d2SSam Leffler 23141b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 23151b6167d2SSam Leffler ieee80211_ht_node_join(ni); 231668e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 231768e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2318b032f27cSSam Leffler ieee80211_node_join_11g(ni); 23191b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 23201b6167d2SSam Leffler 23211b6167d2SSam Leffler newassoc = 1; 23228a1b9b6aSSam Leffler } else 23238a1b9b6aSSam Leffler newassoc = 0; 23248a1b9b6aSSam Leffler 2325b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 232644f7a6edSSam Leffler "station associated at aid %d: %s preamble, %s slot time%s%s%s%s%s%s%s%s", 2327b8fcf546SSam Leffler IEEE80211_NODE_AID(ni), 2328b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHPREAMBLE ? "short" : "long", 2329b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHSLOT ? "short" : "long", 2330b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_USEPROT ? ", protection" : "", 233168e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_QOS ? ", QoS" : "", 233268e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_HT ? 23330f52b1c4SSam Leffler (ni->ni_chw == 40 ? ", HT40" : ", HT20") : "", 23341b6167d2SSam Leffler ni->ni_flags & IEEE80211_NODE_AMPDU ? " (+AMPDU)" : "", 23358c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_RTS ? " (+SMPS-DYN)" : 23368c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_PS ? " (+SMPS)" : "", 233744f7a6edSSam Leffler ni->ni_flags & IEEE80211_NODE_RIFS ? " (+RIFS)" : "", 2338b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_FF) ? 233968e8e04eSSam Leffler ", fast-frames" : "", 2340b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_TURBOP) ? 234168e8e04eSSam Leffler ", turbo" : "" 2342b8fcf546SSam Leffler ); 23438a1b9b6aSSam Leffler 2344d77148fbSSam Leffler ieee80211_node_setuptxparms(ni); 234549d2c137SBernhard Schmidt ieee80211_ratectl_node_init(ni); 23468a1b9b6aSSam Leffler /* give driver a chance to setup state like ni_txrate */ 2347736b3dc3SSam Leffler if (ic->ic_newassoc != NULL) 2348e9962332SSam Leffler ic->ic_newassoc(ni, newassoc); 2349b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_SUCCESS); 23508a1b9b6aSSam Leffler /* tell the authenticator about new station */ 2351b032f27cSSam Leffler if (vap->iv_auth->ia_node_join != NULL) 2352b032f27cSSam Leffler vap->iv_auth->ia_node_join(ni); 2353b032f27cSSam Leffler ieee80211_notify_node_join(ni, 2354ce8977dfSSam Leffler resp == IEEE80211_FC0_SUBTYPE_ASSOC_RESP); 23558a1b9b6aSSam Leffler } 23568a1b9b6aSSam Leffler 2357b105a069SSam Leffler static void 2358b105a069SSam Leffler disable_protection(struct ieee80211com *ic) 2359b105a069SSam Leffler { 2360b105a069SSam Leffler KASSERT(ic->ic_nonerpsta == 0 && 2361b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0, 2362b105a069SSam Leffler ("%d non ERP stations, flags 0x%x", ic->ic_nonerpsta, 2363b105a069SSam Leffler ic->ic_flags_ext)); 2364b105a069SSam Leffler 2365b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEPROT; 2366b105a069SSam Leffler /* XXX verify mode? */ 2367b105a069SSam Leffler if (ic->ic_caps & IEEE80211_C_SHPREAMBLE) { 2368b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_SHPREAMBLE; 2369b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEBARKER; 2370b105a069SSam Leffler } 23712dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2372b105a069SSam Leffler } 2373b105a069SSam Leffler 23748a1b9b6aSSam Leffler /* 23758a1b9b6aSSam Leffler * Handle a station leaving an 11g network. 23768a1b9b6aSSam Leffler */ 23778a1b9b6aSSam Leffler static void 2378b032f27cSSam Leffler ieee80211_node_leave_11g(struct ieee80211_node *ni) 23798a1b9b6aSSam Leffler { 2380b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 23818a1b9b6aSSam Leffler 23821b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 23831b6167d2SSam Leffler 238468e8e04eSSam Leffler KASSERT(IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan), 2385b032f27cSSam Leffler ("not in 11g, bss %u:0x%x", ic->ic_bsschan->ic_freq, 2386b032f27cSSam Leffler ic->ic_bsschan->ic_flags)); 23878a1b9b6aSSam Leffler 23888a1b9b6aSSam Leffler /* 23898a1b9b6aSSam Leffler * If a long slot station do the slot time bookkeeping. 23908a1b9b6aSSam Leffler */ 23918a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 23928a1b9b6aSSam Leffler KASSERT(ic->ic_longslotsta > 0, 23938a1b9b6aSSam Leffler ("bogus long slot station count %d", ic->ic_longslotsta)); 23948a1b9b6aSSam Leffler ic->ic_longslotsta--; 2395b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2396b105a069SSam Leffler "long slot time station leaves, count now %d", 2397b105a069SSam Leffler ic->ic_longslotsta); 23988a1b9b6aSSam Leffler if (ic->ic_longslotsta == 0) { 23998a1b9b6aSSam Leffler /* 24008a1b9b6aSSam Leffler * Re-enable use of short slot time if supported 24018a1b9b6aSSam Leffler * and not operating in IBSS mode (per spec). 24028a1b9b6aSSam Leffler */ 24038a1b9b6aSSam Leffler if ((ic->ic_caps & IEEE80211_C_SHSLOT) && 24048a1b9b6aSSam Leffler ic->ic_opmode != IEEE80211_M_IBSS) { 2405b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 2406b032f27cSSam Leffler IEEE80211_MSG_ASSOC, 24078a1b9b6aSSam Leffler "%s: re-enable use of short slot time\n", 24088a1b9b6aSSam Leffler __func__); 24098a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 1); 24108a1b9b6aSSam Leffler } 24118a1b9b6aSSam Leffler } 24128a1b9b6aSSam Leffler } 24138a1b9b6aSSam Leffler /* 24148a1b9b6aSSam Leffler * If a non-ERP station do the protection-related bookkeeping. 24158a1b9b6aSSam Leffler */ 24168a1b9b6aSSam Leffler if ((ni->ni_flags & IEEE80211_NODE_ERP) == 0) { 24178a1b9b6aSSam Leffler KASSERT(ic->ic_nonerpsta > 0, 24188a1b9b6aSSam Leffler ("bogus non-ERP station count %d", ic->ic_nonerpsta)); 24198a1b9b6aSSam Leffler ic->ic_nonerpsta--; 2420b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2421b105a069SSam Leffler "non-ERP station leaves, count now %d%s", ic->ic_nonerpsta, 2422b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) ? 2423b105a069SSam Leffler " (non-ERP sta present)" : ""); 2424b105a069SSam Leffler if (ic->ic_nonerpsta == 0 && 2425b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2426b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 24278a1b9b6aSSam Leffler "%s: disable use of protection\n", __func__); 2428b105a069SSam Leffler disable_protection(ic); 2429b105a069SSam Leffler } 2430b105a069SSam Leffler } 2431b105a069SSam Leffler } 2432b105a069SSam Leffler 2433b105a069SSam Leffler /* 2434b105a069SSam Leffler * Time out presence of an overlapping bss with non-ERP 2435b105a069SSam Leffler * stations. When operating in hostap mode we listen for 2436b105a069SSam Leffler * beacons from other stations and if we identify a non-ERP 2437b105a069SSam Leffler * station is present we enable protection. To identify 2438b105a069SSam Leffler * when all non-ERP stations are gone we time out this 2439b105a069SSam Leffler * condition. 2440b105a069SSam Leffler */ 2441b105a069SSam Leffler static void 2442b105a069SSam Leffler ieee80211_erp_timeout(struct ieee80211com *ic) 2443b105a069SSam Leffler { 2444b105a069SSam Leffler 2445b105a069SSam Leffler IEEE80211_LOCK_ASSERT(ic); 2446b105a069SSam Leffler 2447b105a069SSam Leffler if ((ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) && 2448b105a069SSam Leffler time_after(ticks, ic->ic_lastnonerp + IEEE80211_NONERP_PRESENT_AGE)) { 2449b032f27cSSam Leffler #if 0 2450b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC, ni, 2451b032f27cSSam Leffler "%s", "age out non-ERP sta present on channel"); 2452b032f27cSSam Leffler #endif 2453b105a069SSam Leffler ic->ic_flags_ext &= ~IEEE80211_FEXT_NONERP_PR; 2454b105a069SSam Leffler if (ic->ic_nonerpsta == 0) 2455b105a069SSam Leffler disable_protection(ic); 24568a1b9b6aSSam Leffler } 24578a1b9b6aSSam Leffler } 24588a1b9b6aSSam Leffler 24598a1b9b6aSSam Leffler /* 24608a1b9b6aSSam Leffler * Handle bookkeeping for station deauthentication/disassociation 24618a1b9b6aSSam Leffler * when operating as an ap. 24628a1b9b6aSSam Leffler */ 24638a1b9b6aSSam Leffler void 2464b032f27cSSam Leffler ieee80211_node_leave(struct ieee80211_node *ni) 24658a1b9b6aSSam Leffler { 2466b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2467b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 246844acc00dSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 24698a1b9b6aSSam Leffler 2470b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 2471b105a069SSam Leffler "station with aid %d leaves", IEEE80211_NODE_AID(ni)); 24728a1b9b6aSSam Leffler 2473b032f27cSSam Leffler KASSERT(vap->iv_opmode != IEEE80211_M_STA, 2474b032f27cSSam Leffler ("unexpected operating mode %u", vap->iv_opmode)); 24758a1b9b6aSSam Leffler /* 24768a1b9b6aSSam Leffler * If node wasn't previously associated all 24778a1b9b6aSSam Leffler * we need to do is reclaim the reference. 24788a1b9b6aSSam Leffler */ 24798a1b9b6aSSam Leffler /* XXX ibss mode bypasses 11g and notification */ 24808a1b9b6aSSam Leffler if (ni->ni_associd == 0) 24818a1b9b6aSSam Leffler goto done; 24828a1b9b6aSSam Leffler /* 24838a1b9b6aSSam Leffler * Tell the authenticator the station is leaving. 24848a1b9b6aSSam Leffler * Note that we must do this before yanking the 24858a1b9b6aSSam Leffler * association id as the authenticator uses the 24868a1b9b6aSSam Leffler * associd to locate it's state block. 24878a1b9b6aSSam Leffler */ 2488b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 2489b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 24901b6167d2SSam Leffler 24911b6167d2SSam Leffler IEEE80211_LOCK(ic); 2492b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 24938a1b9b6aSSam Leffler ni->ni_associd = 0; 2494b032f27cSSam Leffler vap->iv_sta_assoc--; 24958a1b9b6aSSam Leffler ic->ic_sta_assoc--; 24968a1b9b6aSSam Leffler 24971b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 24981b6167d2SSam Leffler ieee80211_ht_node_leave(ni); 249968e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 250068e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2501b032f27cSSam Leffler ieee80211_node_leave_11g(ni); 25021b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 25038a1b9b6aSSam Leffler /* 25048a1b9b6aSSam Leffler * Cleanup station state. In particular clear various 25058a1b9b6aSSam Leffler * state that might otherwise be reused if the node 25068a1b9b6aSSam Leffler * is reused before the reference count goes to zero 25078a1b9b6aSSam Leffler * (and memory is reclaimed). 25088a1b9b6aSSam Leffler */ 2509b032f27cSSam Leffler ieee80211_sta_leave(ni); 25108a1b9b6aSSam Leffler done: 251144acc00dSSam Leffler /* 251244acc00dSSam Leffler * Remove the node from any table it's recorded in and 251344acc00dSSam Leffler * drop the caller's reference. Removal from the table 251444acc00dSSam Leffler * is important to insure the node is not reprocessed 251544acc00dSSam Leffler * for inactivity. 251644acc00dSSam Leffler */ 251744acc00dSSam Leffler if (nt != NULL) { 251844acc00dSSam Leffler IEEE80211_NODE_LOCK(nt); 251944acc00dSSam Leffler node_reclaim(nt, ni); 252044acc00dSSam Leffler IEEE80211_NODE_UNLOCK(nt); 252144acc00dSSam Leffler } else 25228a1b9b6aSSam Leffler ieee80211_free_node(ni); 25238a1b9b6aSSam Leffler } 25248a1b9b6aSSam Leffler 2525b032f27cSSam Leffler struct rssiinfo { 2526b032f27cSSam Leffler struct ieee80211vap *vap; 2527b032f27cSSam Leffler int rssi_samples; 2528b032f27cSSam Leffler uint32_t rssi_total; 2529b032f27cSSam Leffler }; 2530b032f27cSSam Leffler 2531b032f27cSSam Leffler static void 2532b032f27cSSam Leffler get_hostap_rssi(void *arg, struct ieee80211_node *ni) 2533b032f27cSSam Leffler { 2534b032f27cSSam Leffler struct rssiinfo *info = arg; 2535b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2536b032f27cSSam Leffler int8_t rssi; 2537b032f27cSSam Leffler 2538b032f27cSSam Leffler if (info->vap != vap) 2539b032f27cSSam Leffler return; 2540b032f27cSSam Leffler /* only associated stations */ 2541b032f27cSSam Leffler if (ni->ni_associd == 0) 2542b032f27cSSam Leffler return; 2543b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2544b032f27cSSam Leffler if (rssi != 0) { 2545b032f27cSSam Leffler info->rssi_samples++; 2546b032f27cSSam Leffler info->rssi_total += rssi; 2547b032f27cSSam Leffler } 2548b032f27cSSam Leffler } 2549b032f27cSSam Leffler 2550b032f27cSSam Leffler static void 2551b032f27cSSam Leffler get_adhoc_rssi(void *arg, struct ieee80211_node *ni) 2552b032f27cSSam Leffler { 2553b032f27cSSam Leffler struct rssiinfo *info = arg; 2554b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2555b032f27cSSam Leffler int8_t rssi; 2556b032f27cSSam Leffler 2557b032f27cSSam Leffler if (info->vap != vap) 2558b032f27cSSam Leffler return; 2559b032f27cSSam Leffler /* only neighbors */ 2560b032f27cSSam Leffler /* XXX check bssid */ 2561b032f27cSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 2562b032f27cSSam Leffler return; 2563b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2564b032f27cSSam Leffler if (rssi != 0) { 2565b032f27cSSam Leffler info->rssi_samples++; 2566b032f27cSSam Leffler info->rssi_total += rssi; 2567b032f27cSSam Leffler } 2568b032f27cSSam Leffler } 2569b032f27cSSam Leffler 257059aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 257159aa14a9SRui Paulo static void 257259aa14a9SRui Paulo get_mesh_rssi(void *arg, struct ieee80211_node *ni) 257359aa14a9SRui Paulo { 257459aa14a9SRui Paulo struct rssiinfo *info = arg; 257559aa14a9SRui Paulo struct ieee80211vap *vap = ni->ni_vap; 257659aa14a9SRui Paulo int8_t rssi; 257759aa14a9SRui Paulo 257859aa14a9SRui Paulo if (info->vap != vap) 257959aa14a9SRui Paulo return; 258059aa14a9SRui Paulo /* only neighbors that peered successfully */ 258159aa14a9SRui Paulo if (ni->ni_mlstate != IEEE80211_NODE_MESH_ESTABLISHED) 258259aa14a9SRui Paulo return; 258359aa14a9SRui Paulo rssi = vap->iv_ic->ic_node_getrssi(ni); 258459aa14a9SRui Paulo if (rssi != 0) { 258559aa14a9SRui Paulo info->rssi_samples++; 258659aa14a9SRui Paulo info->rssi_total += rssi; 258759aa14a9SRui Paulo } 258859aa14a9SRui Paulo } 258959aa14a9SRui Paulo #endif /* IEEE80211_SUPPORT_MESH */ 259059aa14a9SRui Paulo 259168e8e04eSSam Leffler int8_t 2592b032f27cSSam Leffler ieee80211_getrssi(struct ieee80211vap *vap) 25938a1b9b6aSSam Leffler { 25948a1b9b6aSSam Leffler #define NZ(x) ((x) == 0 ? 1 : (x)) 2595b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 2596b032f27cSSam Leffler struct rssiinfo info; 25978a1b9b6aSSam Leffler 2598b032f27cSSam Leffler info.rssi_total = 0; 2599b032f27cSSam Leffler info.rssi_samples = 0; 2600b032f27cSSam Leffler info.vap = vap; 2601b032f27cSSam Leffler switch (vap->iv_opmode) { 26028a1b9b6aSSam Leffler case IEEE80211_M_IBSS: /* average of all ibss neighbors */ 26038a1b9b6aSSam Leffler case IEEE80211_M_AHDEMO: /* average of all neighbors */ 2604b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_adhoc_rssi, &info); 2605b032f27cSSam Leffler break; 26068a1b9b6aSSam Leffler case IEEE80211_M_HOSTAP: /* average of all associated stations */ 2607b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_hostap_rssi, &info); 26088a1b9b6aSSam Leffler break; 260959aa14a9SRui Paulo #ifdef IEEE80211_SUPPORT_MESH 261059aa14a9SRui Paulo case IEEE80211_M_MBSS: /* average of all mesh neighbors */ 261159aa14a9SRui Paulo ieee80211_iterate_nodes(&ic->ic_sta, get_mesh_rssi, &info); 261259aa14a9SRui Paulo break; 261359aa14a9SRui Paulo #endif 26148a1b9b6aSSam Leffler case IEEE80211_M_MONITOR: /* XXX */ 26158a1b9b6aSSam Leffler case IEEE80211_M_STA: /* use stats from associated ap */ 26168a1b9b6aSSam Leffler default: 2617b032f27cSSam Leffler if (vap->iv_bss != NULL) 2618b032f27cSSam Leffler info.rssi_total = ic->ic_node_getrssi(vap->iv_bss); 2619b032f27cSSam Leffler info.rssi_samples = 1; 26208a1b9b6aSSam Leffler break; 26218a1b9b6aSSam Leffler } 2622b032f27cSSam Leffler return info.rssi_total / NZ(info.rssi_samples); 26238a1b9b6aSSam Leffler #undef NZ 26248a1b9b6aSSam Leffler } 26258a1b9b6aSSam Leffler 262668e8e04eSSam Leffler void 2627b032f27cSSam Leffler ieee80211_getsignal(struct ieee80211vap *vap, int8_t *rssi, int8_t *noise) 26288a1b9b6aSSam Leffler { 26298a1b9b6aSSam Leffler 2630b032f27cSSam Leffler if (vap->iv_bss == NULL) /* NB: shouldn't happen */ 263168e8e04eSSam Leffler return; 2632b032f27cSSam Leffler vap->iv_ic->ic_node_getsignal(vap->iv_bss, rssi, noise); 263368e8e04eSSam Leffler /* for non-station mode return avg'd rssi accounting */ 2634b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 2635b032f27cSSam Leffler *rssi = ieee80211_getrssi(vap); 26368a1b9b6aSSam Leffler } 2637