11a1e1d21SSam Leffler /*- 27535e66aSSam Leffler * Copyright (c) 2001 Atsushi Onoe 3b032f27cSSam Leffler * Copyright (c) 2002-2008 Sam Leffler, Errno Consulting 41a1e1d21SSam Leffler * All rights reserved. 51a1e1d21SSam Leffler * 61a1e1d21SSam Leffler * Redistribution and use in source and binary forms, with or without 71a1e1d21SSam Leffler * modification, are permitted provided that the following conditions 81a1e1d21SSam Leffler * are met: 91a1e1d21SSam Leffler * 1. Redistributions of source code must retain the above copyright 107535e66aSSam Leffler * notice, this list of conditions and the following disclaimer. 117535e66aSSam Leffler * 2. Redistributions in binary form must reproduce the above copyright 127535e66aSSam Leffler * notice, this list of conditions and the following disclaimer in the 137535e66aSSam Leffler * documentation and/or other materials provided with the distribution. 141a1e1d21SSam Leffler * 157535e66aSSam Leffler * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 167535e66aSSam Leffler * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 177535e66aSSam Leffler * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 187535e66aSSam Leffler * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 197535e66aSSam Leffler * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 207535e66aSSam Leffler * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 217535e66aSSam Leffler * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 227535e66aSSam Leffler * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 237535e66aSSam Leffler * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 247535e66aSSam Leffler * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 251a1e1d21SSam Leffler */ 261a1e1d21SSam Leffler 271a1e1d21SSam Leffler #include <sys/cdefs.h> 281a1e1d21SSam Leffler __FBSDID("$FreeBSD$"); 291a1e1d21SSam Leffler 30b032f27cSSam Leffler #include "opt_wlan.h" 31b032f27cSSam Leffler 321a1e1d21SSam Leffler #include <sys/param.h> 331a1e1d21SSam Leffler #include <sys/systm.h> 341a1e1d21SSam Leffler #include <sys/mbuf.h> 351a1e1d21SSam Leffler #include <sys/malloc.h> 361a1e1d21SSam Leffler #include <sys/kernel.h> 371a1e1d21SSam Leffler 388a1b9b6aSSam Leffler #include <sys/socket.h> 391a1e1d21SSam Leffler 401a1e1d21SSam Leffler #include <net/if.h> 411a1e1d21SSam Leffler #include <net/if_media.h> 421a1e1d21SSam Leffler #include <net/ethernet.h> 431a1e1d21SSam Leffler 441a1e1d21SSam Leffler #include <net80211/ieee80211_var.h> 45b032f27cSSam Leffler #include <net80211/ieee80211_input.h> 46b032f27cSSam Leffler #include <net80211/ieee80211_wds.h> 471a1e1d21SSam Leffler 481a1e1d21SSam Leffler #include <net/bpf.h> 491a1e1d21SSam Leffler 507268fa64SSam Leffler /* 517268fa64SSam Leffler * Association id's are managed with a bit vector. 527268fa64SSam Leffler */ 53b032f27cSSam Leffler #define IEEE80211_AID_SET(_vap, b) \ 54b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] |= \ 55b032f27cSSam Leffler (1 << (IEEE80211_AID(b) % 32))) 56b032f27cSSam Leffler #define IEEE80211_AID_CLR(_vap, b) \ 57b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] &= \ 58b032f27cSSam Leffler ~(1 << (IEEE80211_AID(b) % 32))) 59b032f27cSSam Leffler #define IEEE80211_AID_ISSET(_vap, b) \ 60b032f27cSSam Leffler ((_vap)->iv_aid_bitmap[IEEE80211_AID(b) / 32] & (1 << (IEEE80211_AID(b) % 32))) 617268fa64SSam Leffler 62132142c5SDiomidis Spinellis #ifdef IEEE80211_DEBUG_REFCNT 63132142c5SDiomidis Spinellis #define REFCNT_LOC "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line 64132142c5SDiomidis Spinellis #else 65132142c5SDiomidis Spinellis #define REFCNT_LOC "%s %p<%s> refcnt %d\n", __func__ 66132142c5SDiomidis Spinellis #endif 67132142c5SDiomidis Spinellis 6868e8e04eSSam Leffler static int ieee80211_sta_join1(struct ieee80211_node *); 6968e8e04eSSam Leffler 7038c208f8SSam Leffler static struct ieee80211_node *node_alloc(struct ieee80211vap *, 7138c208f8SSam Leffler const uint8_t [IEEE80211_ADDR_LEN]); 728a1b9b6aSSam Leffler static void node_cleanup(struct ieee80211_node *); 738a1b9b6aSSam Leffler static void node_free(struct ieee80211_node *); 74b032f27cSSam Leffler static void node_age(struct ieee80211_node *); 7568e8e04eSSam Leffler static int8_t node_getrssi(const struct ieee80211_node *); 7668e8e04eSSam Leffler static void node_getsignal(const struct ieee80211_node *, int8_t *, int8_t *); 77b032f27cSSam Leffler static void node_getmimoinfo(const struct ieee80211_node *, 78b032f27cSSam Leffler struct ieee80211_mimo_info *); 791a1e1d21SSam Leffler 808a1b9b6aSSam Leffler static void _ieee80211_free_node(struct ieee80211_node *); 818a1b9b6aSSam Leffler 828a1b9b6aSSam Leffler static void ieee80211_node_table_init(struct ieee80211com *ic, 83c1225b52SSam Leffler struct ieee80211_node_table *nt, const char *name, 8468e8e04eSSam Leffler int inact, int keymaxix); 85b032f27cSSam Leffler static void ieee80211_node_table_reset(struct ieee80211_node_table *, 86b032f27cSSam Leffler struct ieee80211vap *); 87b032f27cSSam Leffler static void ieee80211_node_reclaim(struct ieee80211_node *); 888a1b9b6aSSam Leffler static void ieee80211_node_table_cleanup(struct ieee80211_node_table *nt); 89b105a069SSam Leffler static void ieee80211_erp_timeout(struct ieee80211com *); 901a1e1d21SSam Leffler 9132346d60SSam Leffler MALLOC_DEFINE(M_80211_NODE, "80211node", "802.11 node state"); 92b032f27cSSam Leffler MALLOC_DEFINE(M_80211_NODE_IE, "80211nodeie", "802.11 node ie"); 9337c150c4SSam Leffler 941a1e1d21SSam Leffler void 958a1b9b6aSSam Leffler ieee80211_node_attach(struct ieee80211com *ic) 961a1e1d21SSam Leffler { 97b032f27cSSam Leffler ieee80211_node_table_init(ic, &ic->ic_sta, "station", 98b032f27cSSam Leffler IEEE80211_INACT_INIT, ic->ic_max_keyix); 99b032f27cSSam Leffler callout_init(&ic->ic_inact, CALLOUT_MPSAFE); 100b032f27cSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 101b032f27cSSam Leffler ieee80211_node_timeout, ic); 1021a1e1d21SSam Leffler 1038a1b9b6aSSam Leffler ic->ic_node_alloc = node_alloc; 1048a1b9b6aSSam Leffler ic->ic_node_free = node_free; 1058a1b9b6aSSam Leffler ic->ic_node_cleanup = node_cleanup; 106b032f27cSSam Leffler ic->ic_node_age = node_age; 107b032f27cSSam Leffler ic->ic_node_drain = node_age; /* NB: same as age */ 1088a1b9b6aSSam Leffler ic->ic_node_getrssi = node_getrssi; 10968e8e04eSSam Leffler ic->ic_node_getsignal = node_getsignal; 110b032f27cSSam Leffler ic->ic_node_getmimoinfo = node_getmimoinfo; 1118a1b9b6aSSam Leffler 112b032f27cSSam Leffler /* 113b032f27cSSam Leffler * Set flags to be propagated to all vap's; 114b032f27cSSam Leffler * these define default behaviour/configuration. 115b032f27cSSam Leffler */ 116c066143cSSam Leffler ic->ic_flags_ext |= IEEE80211_FEXT_INACT; /* inactivity processing */ 117c1225b52SSam Leffler } 118c1225b52SSam Leffler 119c1225b52SSam Leffler void 1208a1b9b6aSSam Leffler ieee80211_node_detach(struct ieee80211com *ic) 1211a1e1d21SSam Leffler { 1221a1e1d21SSam Leffler 123b032f27cSSam Leffler callout_drain(&ic->ic_inact); 124acc4f7f5SSam Leffler ieee80211_node_table_cleanup(&ic->ic_sta); 125b032f27cSSam Leffler } 126b032f27cSSam Leffler 127b032f27cSSam Leffler void 128b032f27cSSam Leffler ieee80211_node_vattach(struct ieee80211vap *vap) 129b032f27cSSam Leffler { 130b032f27cSSam Leffler /* NB: driver can override */ 131b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_DEF; 132b032f27cSSam Leffler 133b032f27cSSam Leffler /* default station inactivity timer setings */ 134b032f27cSSam Leffler vap->iv_inact_init = IEEE80211_INACT_INIT; 135b032f27cSSam Leffler vap->iv_inact_auth = IEEE80211_INACT_AUTH; 136b032f27cSSam Leffler vap->iv_inact_run = IEEE80211_INACT_RUN; 137b032f27cSSam Leffler vap->iv_inact_probe = IEEE80211_INACT_PROBE; 138b032f27cSSam Leffler } 139b032f27cSSam Leffler 140b032f27cSSam Leffler void 141b032f27cSSam Leffler ieee80211_node_latevattach(struct ieee80211vap *vap) 142b032f27cSSam Leffler { 143b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) { 144b032f27cSSam Leffler /* XXX should we allow max aid to be zero? */ 145b032f27cSSam Leffler if (vap->iv_max_aid < IEEE80211_AID_MIN) { 146b032f27cSSam Leffler vap->iv_max_aid = IEEE80211_AID_MIN; 147b032f27cSSam Leffler if_printf(vap->iv_ifp, 148b032f27cSSam Leffler "WARNING: max aid too small, changed to %d\n", 149b032f27cSSam Leffler vap->iv_max_aid); 150b032f27cSSam Leffler } 151b032f27cSSam Leffler MALLOC(vap->iv_aid_bitmap, uint32_t *, 152b032f27cSSam Leffler howmany(vap->iv_max_aid, 32) * sizeof(uint32_t), 153b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 154b032f27cSSam Leffler if (vap->iv_aid_bitmap == NULL) { 155b032f27cSSam Leffler /* XXX no way to recover */ 156b032f27cSSam Leffler printf("%s: no memory for AID bitmap, max aid %d!\n", 157b032f27cSSam Leffler __func__, vap->iv_max_aid); 158b032f27cSSam Leffler vap->iv_max_aid = 0; 159b032f27cSSam Leffler } 160b032f27cSSam Leffler } 161b032f27cSSam Leffler 162b032f27cSSam Leffler ieee80211_reset_bss(vap); 163b032f27cSSam Leffler 164b032f27cSSam Leffler vap->iv_auth = ieee80211_authenticator_get(vap->iv_bss->ni_authmode); 165b032f27cSSam Leffler } 166b032f27cSSam Leffler 167b032f27cSSam Leffler void 168b032f27cSSam Leffler ieee80211_node_vdetach(struct ieee80211vap *vap) 169b032f27cSSam Leffler { 170b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 171b032f27cSSam Leffler 172b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 173b032f27cSSam Leffler if (vap->iv_bss != NULL) { 174b032f27cSSam Leffler ieee80211_free_node(vap->iv_bss); 175b032f27cSSam Leffler vap->iv_bss = NULL; 176b032f27cSSam Leffler } 177b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) { 178b032f27cSSam Leffler FREE(vap->iv_aid_bitmap, M_80211_NODE); 179b032f27cSSam Leffler vap->iv_aid_bitmap = NULL; 1808a1b9b6aSSam Leffler } 1818a1b9b6aSSam Leffler } 1828a1b9b6aSSam Leffler 1838a1b9b6aSSam Leffler /* 1848a1b9b6aSSam Leffler * Port authorize/unauthorize interfaces for use by an authenticator. 1858a1b9b6aSSam Leffler */ 1868a1b9b6aSSam Leffler 1878a1b9b6aSSam Leffler void 188e4918ecdSSam Leffler ieee80211_node_authorize(struct ieee80211_node *ni) 1898a1b9b6aSSam Leffler { 1908a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_AUTH; 191b032f27cSSam Leffler ni->ni_inact_reload = ni->ni_vap->iv_inact_run; 192c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 1938a1b9b6aSSam Leffler } 1948a1b9b6aSSam Leffler 1958a1b9b6aSSam Leffler void 196e4918ecdSSam Leffler ieee80211_node_unauthorize(struct ieee80211_node *ni) 1978a1b9b6aSSam Leffler { 1988a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_AUTH; 199b032f27cSSam Leffler ni->ni_inact_reload = ni->ni_vap->iv_inact_auth; 200c066143cSSam Leffler if (ni->ni_inact > ni->ni_inact_reload) 201c066143cSSam Leffler ni->ni_inact = ni->ni_inact_reload; 2028a1b9b6aSSam Leffler } 2038a1b9b6aSSam Leffler 2048a1b9b6aSSam Leffler /* 20501a03542SSam Leffler * Fix tx parameters for a node according to ``association state''. 20601a03542SSam Leffler */ 20701a03542SSam Leffler static void 20801a03542SSam Leffler node_setuptxparms(struct ieee80211_node *ni) 20901a03542SSam Leffler { 21001a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 21101a03542SSam Leffler 21201a03542SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) { 21301a03542SSam Leffler if (IEEE80211_IS_CHAN_5GHZ(ni->ni_chan)) 21401a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[IEEE80211_MODE_11NA]; 21501a03542SSam Leffler else 21601a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[IEEE80211_MODE_11NG]; 21701a03542SSam Leffler } else { /* legacy rate handling */ 21801a03542SSam Leffler if (IEEE80211_IS_CHAN_A(ni->ni_chan)) 21901a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[IEEE80211_MODE_11A]; 22001a03542SSam Leffler else if (ni->ni_flags & IEEE80211_NODE_ERP) 22101a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[IEEE80211_MODE_11G]; 22201a03542SSam Leffler else 22301a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[IEEE80211_MODE_11B]; 22401a03542SSam Leffler } 22501a03542SSam Leffler } 22601a03542SSam Leffler 22701a03542SSam Leffler /* 2288a1b9b6aSSam Leffler * Set/change the channel. The rate set is also updated as 2298a1b9b6aSSam Leffler * to insure a consistent view by drivers. 230b032f27cSSam Leffler * XXX should be private but hostap needs it to deal with CSA 2318a1b9b6aSSam Leffler */ 232b032f27cSSam Leffler void 233b032f27cSSam Leffler ieee80211_node_set_chan(struct ieee80211_node *ni, 234b032f27cSSam Leffler struct ieee80211_channel *chan) 2358a1b9b6aSSam Leffler { 236b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 23701a03542SSam Leffler struct ieee80211vap *vap = ni->ni_vap; 23801a03542SSam Leffler enum ieee80211_phymode mode; 23968e8e04eSSam Leffler 240b032f27cSSam Leffler KASSERT(chan != IEEE80211_CHAN_ANYC, ("no channel")); 241b032f27cSSam Leffler 2428a1b9b6aSSam Leffler ni->ni_chan = chan; 24301a03542SSam Leffler mode = ieee80211_chan2mode(chan); 24468e8e04eSSam Leffler if (IEEE80211_IS_CHAN_HT(chan)) { 24568e8e04eSSam Leffler /* 24668e8e04eSSam Leffler * XXX Gotta be careful here; the rate set returned by 24768e8e04eSSam Leffler * ieee80211_get_suprates is actually any HT rate 24868e8e04eSSam Leffler * set so blindly copying it will be bad. We must 24968e8e04eSSam Leffler * install the legacy rate est in ni_rates and the 25068e8e04eSSam Leffler * HT rate set in ni_htrates. 25168e8e04eSSam Leffler */ 25268e8e04eSSam Leffler ni->ni_htrates = *ieee80211_get_suphtrates(ic, chan); 25301a03542SSam Leffler /* 25401a03542SSam Leffler * Setup bss tx parameters based on operating mode. We 25501a03542SSam Leffler * use legacy rates when operating in a mixed HT+non-HT bss 25601a03542SSam Leffler * and non-ERP rates in 11g for mixed ERP+non-ERP bss. 25701a03542SSam Leffler */ 25801a03542SSam Leffler if (mode == IEEE80211_MODE_11NA && 25901a03542SSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_PUREN) == 0) 26001a03542SSam Leffler mode = IEEE80211_MODE_11A; 26101a03542SSam Leffler else if (mode == IEEE80211_MODE_11NG && 26201a03542SSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_PUREN) == 0) 26301a03542SSam Leffler mode = IEEE80211_MODE_11G; 26401a03542SSam Leffler if (mode == IEEE80211_MODE_11G && 26501a03542SSam Leffler (vap->iv_flags & IEEE80211_F_PUREG) == 0) 26601a03542SSam Leffler mode = IEEE80211_MODE_11B; 26768e8e04eSSam Leffler } 26801a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[mode]; 26941b3c790SSam Leffler ni->ni_rates = *ieee80211_get_suprates(ic, chan); 2701a1e1d21SSam Leffler } 2711a1e1d21SSam Leffler 272f9cd9174SSam Leffler static __inline void 273f9cd9174SSam Leffler copy_bss(struct ieee80211_node *nbss, const struct ieee80211_node *obss) 274f9cd9174SSam Leffler { 275f9cd9174SSam Leffler /* propagate useful state */ 276f9cd9174SSam Leffler nbss->ni_authmode = obss->ni_authmode; 277f9cd9174SSam Leffler nbss->ni_txpower = obss->ni_txpower; 278f9cd9174SSam Leffler nbss->ni_vlan = obss->ni_vlan; 279f9cd9174SSam Leffler /* XXX statistics? */ 280b032f27cSSam Leffler /* XXX legacy WDS bssid? */ 281f9cd9174SSam Leffler } 282f9cd9174SSam Leffler 2831a1e1d21SSam Leffler void 284b032f27cSSam Leffler ieee80211_create_ibss(struct ieee80211vap* vap, struct ieee80211_channel *chan) 2851a1e1d21SSam Leffler { 286b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 2871a1e1d21SSam Leffler struct ieee80211_node *ni; 2888a1b9b6aSSam Leffler 289b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_SCAN, 290b032f27cSSam Leffler "%s: creating ibss on channel %u\n", __func__, 291b032f27cSSam Leffler ieee80211_chan2ieee(ic, chan)); 2928a1b9b6aSSam Leffler 293b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 294acc4f7f5SSam Leffler if (ni == NULL) { 295acc4f7f5SSam Leffler /* XXX recovery? */ 2968a1b9b6aSSam Leffler return; 2978a1b9b6aSSam Leffler } 298b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 299b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 300b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 301b032f27cSSam Leffler if (vap->iv_bss != NULL) 302b032f27cSSam Leffler copy_bss(ni, vap->iv_bss); 303d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 304b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) 3051a1e1d21SSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_PRIVACY; 3061a1e1d21SSam Leffler if (ic->ic_phytype == IEEE80211_T_FH) { 3071a1e1d21SSam Leffler ni->ni_fhdwell = 200; /* XXX */ 3081a1e1d21SSam Leffler ni->ni_fhindex = 1; 3091a1e1d21SSam Leffler } 310b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 311b032f27cSSam Leffler vap->iv_flags |= IEEE80211_F_SIBSS; 3128a1b9b6aSSam Leffler ni->ni_capinfo |= IEEE80211_CAPINFO_IBSS; /* XXX */ 313b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 314b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 315fe49f061SSam Leffler else { 316fe49f061SSam Leffler get_random_bytes(ni->ni_bssid, IEEE80211_ADDR_LEN); 317fe49f061SSam Leffler /* clear group bit, add local bit */ 318fe49f061SSam Leffler ni->ni_bssid[0] = (ni->ni_bssid[0] &~ 0x01) | 0x02; 319fe49f061SSam Leffler } 320b032f27cSSam Leffler } else if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 321b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_DESBSSID) 322b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_des_bssid); 32350d8b493SSam Leffler else 32450d8b493SSam Leffler memset(ni->ni_bssid, 0, IEEE80211_ADDR_LEN); 3258a1b9b6aSSam Leffler } 3268a1b9b6aSSam Leffler /* 3278a1b9b6aSSam Leffler * Fix the channel and related attributes. 3288a1b9b6aSSam Leffler */ 329b032f27cSSam Leffler /* clear DFS CAC state on previous channel */ 330b032f27cSSam Leffler if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 331b032f27cSSam Leffler ic->ic_bsschan->ic_freq != chan->ic_freq && 332b032f27cSSam Leffler IEEE80211_IS_CHAN_CACDONE(ic->ic_bsschan)) 333b032f27cSSam Leffler ieee80211_dfs_cac_clear(ic, ic->ic_bsschan); 33468e8e04eSSam Leffler ic->ic_bsschan = chan; 335b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 33668e8e04eSSam Leffler ic->ic_curmode = ieee80211_chan2mode(chan); 3378a1b9b6aSSam Leffler /* 338b032f27cSSam Leffler * Do mode-specific setup. 3398a1b9b6aSSam Leffler */ 34068e8e04eSSam Leffler if (IEEE80211_IS_CHAN_FULL(chan)) { 34168e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(chan)) { 34268e8e04eSSam Leffler /* 343b032f27cSSam Leffler * Use a mixed 11b/11g basic rate set. 34468e8e04eSSam Leffler */ 345b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 34668e8e04eSSam Leffler IEEE80211_MODE_11G); 347b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PUREG) { 348b032f27cSSam Leffler /* 349b032f27cSSam Leffler * Also mark OFDM rates basic so 11b 350b032f27cSSam Leffler * stations do not join (WiFi compliance). 351b032f27cSSam Leffler */ 352b032f27cSSam Leffler ieee80211_addbasicrates(&ni->ni_rates, 353b032f27cSSam Leffler IEEE80211_MODE_11A); 354b032f27cSSam Leffler } 35568e8e04eSSam Leffler } else if (IEEE80211_IS_CHAN_B(chan)) { 35668e8e04eSSam Leffler /* 35768e8e04eSSam Leffler * Force pure 11b rate set. 35868e8e04eSSam Leffler */ 359b032f27cSSam Leffler ieee80211_setbasicrates(&ni->ni_rates, 36068e8e04eSSam Leffler IEEE80211_MODE_11B); 36168e8e04eSSam Leffler } 3621a1e1d21SSam Leffler } 3631a1e1d21SSam Leffler 36468e8e04eSSam Leffler (void) ieee80211_sta_join1(ieee80211_ref_node(ni)); 36568e8e04eSSam Leffler } 36668e8e04eSSam Leffler 36768e8e04eSSam Leffler /* 36868e8e04eSSam Leffler * Reset bss state on transition to the INIT state. 36968e8e04eSSam Leffler * Clear any stations from the table (they have been 37068e8e04eSSam Leffler * deauth'd) and reset the bss node (clears key, rate 37168e8e04eSSam Leffler * etc. state). 37268e8e04eSSam Leffler */ 3738a1b9b6aSSam Leffler void 374b032f27cSSam Leffler ieee80211_reset_bss(struct ieee80211vap *vap) 375b4c5a90fSSam Leffler { 376b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 3778a1b9b6aSSam Leffler struct ieee80211_node *ni, *obss; 3788a1b9b6aSSam Leffler 379b032f27cSSam Leffler ieee80211_node_table_reset(&ic->ic_sta, vap); 380b032f27cSSam Leffler /* XXX multi-bss: wrong */ 38168e8e04eSSam Leffler ieee80211_reset_erp(ic); 382acc4f7f5SSam Leffler 383b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, vap->iv_myaddr); 3848a1b9b6aSSam Leffler KASSERT(ni != NULL, ("unable to setup inital BSS node")); 385b032f27cSSam Leffler obss = vap->iv_bss; 386b032f27cSSam Leffler vap->iv_bss = ieee80211_ref_node(ni); 387f9cd9174SSam Leffler if (obss != NULL) { 388f9cd9174SSam Leffler copy_bss(ni, obss); 389d365f9c7SSam Leffler ni->ni_intval = ic->ic_bintval; 3908a1b9b6aSSam Leffler ieee80211_free_node(obss); 391b032f27cSSam Leffler } else 392b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_myaddr); 393f9cd9174SSam Leffler } 3948a1b9b6aSSam Leffler 3958a1b9b6aSSam Leffler static int 39668e8e04eSSam Leffler match_ssid(const struct ieee80211_node *ni, 39768e8e04eSSam Leffler int nssid, const struct ieee80211_scan_ssid ssids[]) 3988a1b9b6aSSam Leffler { 39968e8e04eSSam Leffler int i; 40068e8e04eSSam Leffler 40168e8e04eSSam Leffler for (i = 0; i < nssid; i++) { 40268e8e04eSSam Leffler if (ni->ni_esslen == ssids[i].len && 40368e8e04eSSam Leffler memcmp(ni->ni_essid, ssids[i].ssid, ni->ni_esslen) == 0) 40468e8e04eSSam Leffler return 1; 40568e8e04eSSam Leffler } 40668e8e04eSSam Leffler return 0; 40768e8e04eSSam Leffler } 40868e8e04eSSam Leffler 40968e8e04eSSam Leffler /* 41068e8e04eSSam Leffler * Test a node for suitability/compatibility. 41168e8e04eSSam Leffler */ 41268e8e04eSSam Leffler static int 413b032f27cSSam Leffler check_bss(struct ieee80211vap *vap, struct ieee80211_node *ni) 41468e8e04eSSam Leffler { 415b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 41668e8e04eSSam Leffler uint8_t rate; 41768e8e04eSSam Leffler 41868e8e04eSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 41968e8e04eSSam Leffler return 0; 420b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 42168e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 42268e8e04eSSam Leffler return 0; 42368e8e04eSSam Leffler } else { 42468e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 42568e8e04eSSam Leffler return 0; 42668e8e04eSSam Leffler } 427b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 42868e8e04eSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 42968e8e04eSSam Leffler return 0; 43068e8e04eSSam Leffler } else { 43168e8e04eSSam Leffler /* XXX does this mean privacy is supported or required? */ 43268e8e04eSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 43368e8e04eSSam Leffler return 0; 43468e8e04eSSam Leffler } 43568e8e04eSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 43668e8e04eSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 43768e8e04eSSam Leffler if (rate & IEEE80211_RATE_BASIC) 43868e8e04eSSam Leffler return 0; 439b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 440b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 44168e8e04eSSam Leffler return 0; 442b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 443b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 44468e8e04eSSam Leffler return 0; 44568e8e04eSSam Leffler return 1; 44668e8e04eSSam Leffler } 44768e8e04eSSam Leffler 44868e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 44968e8e04eSSam Leffler /* 45068e8e04eSSam Leffler * Display node suitability/compatibility. 45168e8e04eSSam Leffler */ 45268e8e04eSSam Leffler static void 453b032f27cSSam Leffler check_bss_debug(struct ieee80211vap *vap, struct ieee80211_node *ni) 45468e8e04eSSam Leffler { 455b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 45668e8e04eSSam Leffler uint8_t rate; 457b4c5a90fSSam Leffler int fail; 458b4c5a90fSSam Leffler 459b4c5a90fSSam Leffler fail = 0; 460b4c5a90fSSam Leffler if (isclr(ic->ic_chan_active, ieee80211_chan2ieee(ic, ni->ni_chan))) 461b4c5a90fSSam Leffler fail |= 0x01; 462b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS) { 463b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 464b4c5a90fSSam Leffler fail |= 0x02; 465b4c5a90fSSam Leffler } else { 466b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_ESS) == 0) 467b4c5a90fSSam Leffler fail |= 0x02; 468b4c5a90fSSam Leffler } 469b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_PRIVACY) { 470b4c5a90fSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) == 0) 471b4c5a90fSSam Leffler fail |= 0x04; 472b4c5a90fSSam Leffler } else { 473b4c5a90fSSam Leffler /* XXX does this mean privacy is supported or required? */ 474b4c5a90fSSam Leffler if (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) 475b4c5a90fSSam Leffler fail |= 0x04; 476b4c5a90fSSam Leffler } 47770e28b9aSSam Leffler rate = ieee80211_fix_rate(ni, &ni->ni_rates, 47879edaebfSSam Leffler IEEE80211_F_JOIN | IEEE80211_F_DONEGO | IEEE80211_F_DOFRATE); 479b4c5a90fSSam Leffler if (rate & IEEE80211_RATE_BASIC) 480b4c5a90fSSam Leffler fail |= 0x08; 481b032f27cSSam Leffler if (vap->iv_des_nssid != 0 && 482b032f27cSSam Leffler !match_ssid(ni, vap->iv_des_nssid, vap->iv_des_ssid)) 483b4c5a90fSSam Leffler fail |= 0x10; 484b032f27cSSam Leffler if ((vap->iv_flags & IEEE80211_F_DESBSSID) && 485b032f27cSSam Leffler !IEEE80211_ADDR_EQ(vap->iv_des_bssid, ni->ni_bssid)) 486b4c5a90fSSam Leffler fail |= 0x20; 48768e8e04eSSam Leffler 48868e8e04eSSam Leffler printf(" %c %s", fail ? '-' : '+', ether_sprintf(ni->ni_macaddr)); 48968e8e04eSSam Leffler printf(" %s%c", ether_sprintf(ni->ni_bssid), fail & 0x20 ? '!' : ' '); 49068e8e04eSSam Leffler printf(" %3d%c", 49168e8e04eSSam Leffler ieee80211_chan2ieee(ic, ni->ni_chan), fail & 0x01 ? '!' : ' '); 492b4c5a90fSSam Leffler printf(" %2dM%c", (rate & IEEE80211_RATE_VAL) / 2, 493b4c5a90fSSam Leffler fail & 0x08 ? '!' : ' '); 494b4c5a90fSSam Leffler printf(" %4s%c", 495b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_ESS) ? "ess" : 496b4c5a90fSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) ? "ibss" : 497b4c5a90fSSam Leffler "????", 498b4c5a90fSSam Leffler fail & 0x02 ? '!' : ' '); 499b4c5a90fSSam Leffler printf(" %3s%c ", 50068e8e04eSSam Leffler (ni->ni_capinfo & IEEE80211_CAPINFO_PRIVACY) ? "wep" : "no", 501b4c5a90fSSam Leffler fail & 0x04 ? '!' : ' '); 502b4c5a90fSSam Leffler ieee80211_print_essid(ni->ni_essid, ni->ni_esslen); 503b4c5a90fSSam Leffler printf("%s\n", fail & 0x10 ? "!" : ""); 504b4c5a90fSSam Leffler } 50568e8e04eSSam Leffler #endif /* IEEE80211_DEBUG */ 5068a1b9b6aSSam Leffler 507750d6d0cSSam Leffler /* 5088a1b9b6aSSam Leffler * Handle 802.11 ad hoc network merge. The 5098a1b9b6aSSam Leffler * convention, set by the Wireless Ethernet Compatibility Alliance 5108a1b9b6aSSam Leffler * (WECA), is that an 802.11 station will change its BSSID to match 5118a1b9b6aSSam Leffler * the "oldest" 802.11 ad hoc network, on the same channel, that 5128a1b9b6aSSam Leffler * has the station's desired SSID. The "oldest" 802.11 network 5138a1b9b6aSSam Leffler * sends beacons with the greatest TSF timestamp. 5148a1b9b6aSSam Leffler * 5158a1b9b6aSSam Leffler * The caller is assumed to validate TSF's before attempting a merge. 5168a1b9b6aSSam Leffler * 5178a1b9b6aSSam Leffler * Return !0 if the BSSID changed, 0 otherwise. 518750d6d0cSSam Leffler */ 5198a1b9b6aSSam Leffler int 520641b4d0bSSam Leffler ieee80211_ibss_merge(struct ieee80211_node *ni) 5218a1b9b6aSSam Leffler { 522b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 523b032f27cSSam Leffler #ifdef IEEE80211_DEBUG 524641b4d0bSSam Leffler struct ieee80211com *ic = ni->ni_ic; 525b032f27cSSam Leffler #endif 5268a1b9b6aSSam Leffler 527b032f27cSSam Leffler if (ni == vap->iv_bss || 528b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_bssid, vap->iv_bss->ni_bssid)) { 5298a1b9b6aSSam Leffler /* unchanged, nothing to do */ 5308a1b9b6aSSam Leffler return 0; 5318a1b9b6aSSam Leffler } 532b032f27cSSam Leffler if (!check_bss(vap, ni)) { 53368e8e04eSSam Leffler /* capabilities mismatch */ 534b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5358a1b9b6aSSam Leffler "%s: merge failed, capabilities mismatch\n", __func__); 53668e8e04eSSam Leffler #ifdef IEEE80211_DEBUG 537b032f27cSSam Leffler if (ieee80211_msg_assoc(vap)) 538b032f27cSSam Leffler check_bss_debug(vap, ni); 53968e8e04eSSam Leffler #endif 540b032f27cSSam Leffler vap->iv_stats.is_ibss_capmismatch++; 5418a1b9b6aSSam Leffler return 0; 5428a1b9b6aSSam Leffler } 543b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_ASSOC, 5448a1b9b6aSSam Leffler "%s: new bssid %s: %s preamble, %s slot time%s\n", __func__, 5458a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 5468a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHPREAMBLE ? "short" : "long", 5478a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_SHSLOT ? "short" : "long", 5488a1b9b6aSSam Leffler ic->ic_flags&IEEE80211_F_USEPROT ? ", protection" : "" 5498a1b9b6aSSam Leffler ); 55068e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 5518a1b9b6aSSam Leffler } 5528a1b9b6aSSam Leffler 5538a1b9b6aSSam Leffler /* 554b032f27cSSam Leffler * Calculate HT channel promotion flags for all vaps. 555b032f27cSSam Leffler * This assumes ni_chan have been setup for each vap. 556b032f27cSSam Leffler */ 557b032f27cSSam Leffler static int 558b032f27cSSam Leffler gethtadjustflags(struct ieee80211com *ic) 559b032f27cSSam Leffler { 560b032f27cSSam Leffler struct ieee80211vap *vap; 561b032f27cSSam Leffler int flags; 562b032f27cSSam Leffler 563b032f27cSSam Leffler flags = 0; 564b032f27cSSam Leffler /* XXX locking */ 565b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 566b032f27cSSam Leffler if (vap->iv_state < IEEE80211_S_RUN) 567b032f27cSSam Leffler continue; 568b032f27cSSam Leffler switch (vap->iv_opmode) { 569b032f27cSSam Leffler case IEEE80211_M_WDS: 570b032f27cSSam Leffler case IEEE80211_M_STA: 571b032f27cSSam Leffler case IEEE80211_M_AHDEMO: 572b032f27cSSam Leffler case IEEE80211_M_HOSTAP: 573b032f27cSSam Leffler case IEEE80211_M_IBSS: 574b032f27cSSam Leffler flags |= ieee80211_htchanflags(vap->iv_bss->ni_chan); 575b032f27cSSam Leffler break; 576b032f27cSSam Leffler default: 577b032f27cSSam Leffler break; 578b032f27cSSam Leffler } 579b032f27cSSam Leffler } 580b032f27cSSam Leffler return flags; 581b032f27cSSam Leffler } 582b032f27cSSam Leffler 583b032f27cSSam Leffler /* 584b032f27cSSam Leffler * Check if the current channel needs to change based on whether 585b032f27cSSam Leffler * any vap's are using HT20/HT40. This is used sync the state of 586b032f27cSSam Leffler * ic_curchan after a channel width change on a running vap. 5871b6167d2SSam Leffler */ 5881b6167d2SSam Leffler void 589b032f27cSSam Leffler ieee80211_sync_curchan(struct ieee80211com *ic) 5901b6167d2SSam Leffler { 591b032f27cSSam Leffler struct ieee80211_channel *c; 592b032f27cSSam Leffler 593b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, ic->ic_curchan, gethtadjustflags(ic)); 594b032f27cSSam Leffler if (c != ic->ic_curchan) { 595b032f27cSSam Leffler ic->ic_curchan = c; 596b032f27cSSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 597b032f27cSSam Leffler ic->ic_set_channel(ic); 598b032f27cSSam Leffler } 599b032f27cSSam Leffler } 600b032f27cSSam Leffler 601b032f27cSSam Leffler /* 602b032f27cSSam Leffler * Change the current channel. The request channel may be 603b032f27cSSam Leffler * promoted if other vap's are operating with HT20/HT40. 604b032f27cSSam Leffler */ 605b032f27cSSam Leffler void 606b032f27cSSam Leffler ieee80211_setcurchan(struct ieee80211com *ic, struct ieee80211_channel *c) 607b032f27cSSam Leffler { 608b032f27cSSam Leffler if (ic->ic_htcaps & IEEE80211_HTC_HT) { 609b032f27cSSam Leffler int flags = gethtadjustflags(ic); 610b032f27cSSam Leffler /* 611b032f27cSSam Leffler * Check for channel promotion required to support the 612b032f27cSSam Leffler * set of running vap's. This assumes we are called 613b032f27cSSam Leffler * after ni_chan is setup for each vap. 614b032f27cSSam Leffler */ 615b032f27cSSam Leffler /* NB: this assumes IEEE80211_FEXT_USEHT40 > IEEE80211_FEXT_HT */ 616b032f27cSSam Leffler if (flags > ieee80211_htchanflags(c)) 617b032f27cSSam Leffler c = ieee80211_ht_adjust_channel(ic, c, flags); 618b032f27cSSam Leffler } 619b032f27cSSam Leffler ic->ic_bsschan = ic->ic_curchan = c; 6201b6167d2SSam Leffler ic->ic_curmode = ieee80211_chan2mode(ic->ic_curchan); 6211b6167d2SSam Leffler ic->ic_set_channel(ic); 6221b6167d2SSam Leffler } 6231b6167d2SSam Leffler 6241b6167d2SSam Leffler /* 6258a1b9b6aSSam Leffler * Join the specified IBSS/BSS network. The node is assumed to 6268a1b9b6aSSam Leffler * be passed in with a held reference. 6278a1b9b6aSSam Leffler */ 62868e8e04eSSam Leffler static int 62968e8e04eSSam Leffler ieee80211_sta_join1(struct ieee80211_node *selbs) 6308a1b9b6aSSam Leffler { 631b032f27cSSam Leffler struct ieee80211vap *vap = selbs->ni_vap; 63268e8e04eSSam Leffler struct ieee80211com *ic = selbs->ni_ic; 6338a1b9b6aSSam Leffler struct ieee80211_node *obss; 63468e8e04eSSam Leffler int canreassoc; 6358a1b9b6aSSam Leffler 6368a1b9b6aSSam Leffler /* 6378a1b9b6aSSam Leffler * Committed to selbs, setup state. 6388a1b9b6aSSam Leffler */ 639b032f27cSSam Leffler obss = vap->iv_bss; 64068e8e04eSSam Leffler /* 64168e8e04eSSam Leffler * Check if old+new node have the same address in which 64268e8e04eSSam Leffler * case we can reassociate when operating in sta mode. 64368e8e04eSSam Leffler */ 64468e8e04eSSam Leffler canreassoc = (obss != NULL && 645b032f27cSSam Leffler vap->iv_state == IEEE80211_S_RUN && 64668e8e04eSSam Leffler IEEE80211_ADDR_EQ(obss->ni_macaddr, selbs->ni_macaddr)); 647b032f27cSSam Leffler vap->iv_bss = selbs; /* NB: caller assumed to bump refcnt */ 6481fd2349dSSam Leffler if (obss != NULL) { 6491fd2349dSSam Leffler copy_bss(selbs, obss); 650b032f27cSSam Leffler ieee80211_node_reclaim(obss); 651b032f27cSSam Leffler obss = NULL; /* NB: guard against later use */ 6521fd2349dSSam Leffler } 65379edaebfSSam Leffler 65479edaebfSSam Leffler /* 65579edaebfSSam Leffler * Delete unusable rates; we've already checked 65679edaebfSSam Leffler * that the negotiated rate set is acceptable. 65779edaebfSSam Leffler */ 658b032f27cSSam Leffler ieee80211_fix_rate(vap->iv_bss, &vap->iv_bss->ni_rates, 65970e28b9aSSam Leffler IEEE80211_F_DODEL | IEEE80211_F_JOIN); 66079edaebfSSam Leffler 661b032f27cSSam Leffler ieee80211_setcurchan(ic, selbs->ni_chan); 6628a1b9b6aSSam Leffler /* 6638a1b9b6aSSam Leffler * Set the erp state (mostly the slot time) to deal with 6648a1b9b6aSSam Leffler * the auto-select case; this should be redundant if the 6658a1b9b6aSSam Leffler * mode is locked. 6668a1b9b6aSSam Leffler */ 6678a1b9b6aSSam Leffler ieee80211_reset_erp(ic); 668b032f27cSSam Leffler ieee80211_wme_initparams(vap); 669acc4f7f5SSam Leffler 670b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA) { 67168e8e04eSSam Leffler if (canreassoc) { 67268e8e04eSSam Leffler /* Reassociate */ 673b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_ASSOC, 1); 67468e8e04eSSam Leffler } else { 67568e8e04eSSam Leffler /* 67668e8e04eSSam Leffler * Act as if we received a DEAUTH frame in case we 67768e8e04eSSam Leffler * are invoked from the RUN state. This will cause 67868e8e04eSSam Leffler * us to try to re-authenticate if we are operating 67968e8e04eSSam Leffler * as a station. 68068e8e04eSSam Leffler */ 681b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_AUTH, 68268e8e04eSSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH); 68368e8e04eSSam Leffler } 68468e8e04eSSam Leffler } else 685b032f27cSSam Leffler ieee80211_new_state(vap, IEEE80211_S_RUN, -1); 6868a1b9b6aSSam Leffler return 1; 6878a1b9b6aSSam Leffler } 6888a1b9b6aSSam Leffler 68968e8e04eSSam Leffler int 690b032f27cSSam Leffler ieee80211_sta_join(struct ieee80211vap *vap, 69168e8e04eSSam Leffler const struct ieee80211_scan_entry *se) 69268e8e04eSSam Leffler { 693b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 69468e8e04eSSam Leffler struct ieee80211_node *ni; 69568e8e04eSSam Leffler 696b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, se->se_macaddr); 69768e8e04eSSam Leffler if (ni == NULL) { 69868e8e04eSSam Leffler /* XXX msg */ 69968e8e04eSSam Leffler return 0; 70068e8e04eSSam Leffler } 70168e8e04eSSam Leffler /* 70268e8e04eSSam Leffler * Expand scan state into node's format. 70368e8e04eSSam Leffler * XXX may not need all this stuff 70468e8e04eSSam Leffler */ 70568e8e04eSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, se->se_bssid); 70668e8e04eSSam Leffler ni->ni_esslen = se->se_ssid[1]; 70768e8e04eSSam Leffler memcpy(ni->ni_essid, se->se_ssid+2, ni->ni_esslen); 70868e8e04eSSam Leffler ni->ni_rstamp = se->se_rstamp; 70968e8e04eSSam Leffler ni->ni_tstamp.tsf = se->se_tstamp.tsf; 71068e8e04eSSam Leffler ni->ni_intval = se->se_intval; 71168e8e04eSSam Leffler ni->ni_capinfo = se->se_capinfo; 71268e8e04eSSam Leffler ni->ni_chan = se->se_chan; 71368e8e04eSSam Leffler ni->ni_timoff = se->se_timoff; 71468e8e04eSSam Leffler ni->ni_fhdwell = se->se_fhdwell; 71568e8e04eSSam Leffler ni->ni_fhindex = se->se_fhindex; 71668e8e04eSSam Leffler ni->ni_erp = se->se_erp; 717b032f27cSSam Leffler IEEE80211_RSSI_LPF(ni->ni_avgrssi, se->se_rssi); 71868e8e04eSSam Leffler ni->ni_noise = se->se_noise; 71968e8e04eSSam Leffler 720b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, se->se_ies.data, se->se_ies.len)) { 721b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 722b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 723b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 724b032f27cSSam Leffler if (ni->ni_ies.htcap_ie != NULL) 725b032f27cSSam Leffler ieee80211_parse_htcap(ni, ni->ni_ies.htcap_ie); 726b032f27cSSam Leffler if (ni->ni_ies.htinfo_ie != NULL) 727b032f27cSSam Leffler ieee80211_parse_htinfo(ni, ni->ni_ies.htinfo_ie); 728b032f27cSSam Leffler } 729b032f27cSSam Leffler 730b032f27cSSam Leffler vap->iv_dtim_period = se->se_dtimperiod; 731b032f27cSSam Leffler vap->iv_dtim_count = 0; 73268e8e04eSSam Leffler 73368e8e04eSSam Leffler /* NB: must be after ni_chan is setup */ 73468e8e04eSSam Leffler ieee80211_setup_rates(ni, se->se_rates, se->se_xrates, 73568e8e04eSSam Leffler IEEE80211_F_DOSORT); 73668e8e04eSSam Leffler 73768e8e04eSSam Leffler return ieee80211_sta_join1(ieee80211_ref_node(ni)); 73868e8e04eSSam Leffler } 73968e8e04eSSam Leffler 7408a1b9b6aSSam Leffler /* 7418a1b9b6aSSam Leffler * Leave the specified IBSS/BSS network. The node is assumed to 7428a1b9b6aSSam Leffler * be passed in with a held reference. 7438a1b9b6aSSam Leffler */ 7448a1b9b6aSSam Leffler void 745b032f27cSSam Leffler ieee80211_sta_leave(struct ieee80211_node *ni) 7468a1b9b6aSSam Leffler { 747b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 748b032f27cSSam Leffler 7498a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 750b032f27cSSam Leffler ieee80211_notify_node_leave(ni); 751b032f27cSSam Leffler } 752b032f27cSSam Leffler 753b032f27cSSam Leffler /* 754b032f27cSSam Leffler * Send a deauthenticate frame and drop the station. 755b032f27cSSam Leffler */ 756b032f27cSSam Leffler void 757b032f27cSSam Leffler ieee80211_node_deauth(struct ieee80211_node *ni, int reason) 758b032f27cSSam Leffler { 759b032f27cSSam Leffler /* NB: bump the refcnt to be sure temporay nodes are not reclaimed */ 760b032f27cSSam Leffler ieee80211_ref_node(ni); 761b032f27cSSam Leffler if (ni->ni_associd != 0) 762b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, IEEE80211_FC0_SUBTYPE_DEAUTH, reason); 763b032f27cSSam Leffler ieee80211_node_leave(ni); 764b032f27cSSam Leffler ieee80211_free_node(ni); 7658a1b9b6aSSam Leffler } 7668a1b9b6aSSam Leffler 7671a1e1d21SSam Leffler static struct ieee80211_node * 76838c208f8SSam Leffler node_alloc(struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 7691a1e1d21SSam Leffler { 770410ca74bSSam Leffler struct ieee80211_node *ni; 7718a1b9b6aSSam Leffler 772410ca74bSSam Leffler MALLOC(ni, struct ieee80211_node *, sizeof(struct ieee80211_node), 773410ca74bSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 774410ca74bSSam Leffler return ni; 7751a1e1d21SSam Leffler } 7761a1e1d21SSam Leffler 7778a1b9b6aSSam Leffler /* 778b032f27cSSam Leffler * Initialize an ie blob with the specified data. If previous 779b032f27cSSam Leffler * data exists re-use the data block. As a side effect we clear 780b032f27cSSam Leffler * all references to specific ie's; the caller is required to 781b032f27cSSam Leffler * recalculate them. 782b032f27cSSam Leffler */ 783b032f27cSSam Leffler int 784b032f27cSSam Leffler ieee80211_ies_init(struct ieee80211_ies *ies, const uint8_t *data, int len) 785b032f27cSSam Leffler { 786b032f27cSSam Leffler /* NB: assumes data+len are the last fields */ 787b032f27cSSam Leffler memset(ies, 0, offsetof(struct ieee80211_ies, data)); 788b032f27cSSam Leffler if (ies->data != NULL && ies->len != len) { 789b032f27cSSam Leffler /* data size changed */ 790b032f27cSSam Leffler FREE(ies->data, M_80211_NODE_IE); 791b032f27cSSam Leffler ies->data = NULL; 792b032f27cSSam Leffler } 793b032f27cSSam Leffler if (ies->data == NULL) { 794b032f27cSSam Leffler MALLOC(ies->data, uint8_t *, len, M_80211_NODE_IE, M_NOWAIT); 795b032f27cSSam Leffler if (ies->data == NULL) { 796b032f27cSSam Leffler ies->len = 0; 797b032f27cSSam Leffler /* NB: pointers have already been zero'd above */ 798b032f27cSSam Leffler return 0; 799b032f27cSSam Leffler } 800b032f27cSSam Leffler } 801b032f27cSSam Leffler memcpy(ies->data, data, len); 802b032f27cSSam Leffler ies->len = len; 803b032f27cSSam Leffler return 1; 804b032f27cSSam Leffler } 805b032f27cSSam Leffler 806b032f27cSSam Leffler /* 807b032f27cSSam Leffler * Reclaim storage for an ie blob. 808b032f27cSSam Leffler */ 809b032f27cSSam Leffler void 810b032f27cSSam Leffler ieee80211_ies_cleanup(struct ieee80211_ies *ies) 811b032f27cSSam Leffler { 812b032f27cSSam Leffler if (ies->data != NULL) 813b032f27cSSam Leffler FREE(ies->data, M_80211_NODE_IE); 814b032f27cSSam Leffler } 815b032f27cSSam Leffler 816b032f27cSSam Leffler /* 817b032f27cSSam Leffler * Expand an ie blob data contents and to fillin individual 818b032f27cSSam Leffler * ie pointers. The data blob is assumed to be well-formed; 819b032f27cSSam Leffler * we don't do any validity checking of ie lengths. 820b032f27cSSam Leffler */ 821b032f27cSSam Leffler void 822b032f27cSSam Leffler ieee80211_ies_expand(struct ieee80211_ies *ies) 823b032f27cSSam Leffler { 824b032f27cSSam Leffler uint8_t *ie; 825b032f27cSSam Leffler int ielen; 826b032f27cSSam Leffler 827b032f27cSSam Leffler ie = ies->data; 828b032f27cSSam Leffler ielen = ies->len; 829b032f27cSSam Leffler while (ielen > 0) { 830b032f27cSSam Leffler switch (ie[0]) { 831b032f27cSSam Leffler case IEEE80211_ELEMID_VENDOR: 832b032f27cSSam Leffler if (iswpaoui(ie)) 833b032f27cSSam Leffler ies->wpa_ie = ie; 834b032f27cSSam Leffler else if (iswmeoui(ie)) 835b032f27cSSam Leffler ies->wme_ie = ie; 836b032f27cSSam Leffler else if (isatherosoui(ie)) 837b032f27cSSam Leffler ies->ath_ie = ie; 838b032f27cSSam Leffler break; 839b032f27cSSam Leffler case IEEE80211_ELEMID_RSN: 840b032f27cSSam Leffler ies->rsn_ie = ie; 841b032f27cSSam Leffler break; 842b032f27cSSam Leffler case IEEE80211_ELEMID_HTCAP: 843b032f27cSSam Leffler ies->htcap_ie = ie; 844b032f27cSSam Leffler break; 845b032f27cSSam Leffler } 846b032f27cSSam Leffler ielen -= 2 + ie[1]; 847b032f27cSSam Leffler ie += 2 + ie[1]; 848b032f27cSSam Leffler } 849b032f27cSSam Leffler } 850b032f27cSSam Leffler 851b032f27cSSam Leffler /* 8528a1b9b6aSSam Leffler * Reclaim any resources in a node and reset any critical 8538a1b9b6aSSam Leffler * state. Typically nodes are free'd immediately after, 8548a1b9b6aSSam Leffler * but in some cases the storage may be reused so we need 8558a1b9b6aSSam Leffler * to insure consistent state (should probably fix that). 8568a1b9b6aSSam Leffler */ 8571a1e1d21SSam Leffler static void 8588a1b9b6aSSam Leffler node_cleanup(struct ieee80211_node *ni) 8591a1e1d21SSam Leffler { 8608a1b9b6aSSam Leffler #define N(a) (sizeof(a)/sizeof(a[0])) 861b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 86268e8e04eSSam Leffler int i; 8638a1b9b6aSSam Leffler 8648a1b9b6aSSam Leffler /* NB: preserve ni_table */ 8658a1b9b6aSSam Leffler if (ni->ni_flags & IEEE80211_NODE_PWR_MGT) { 866b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 867b032f27cSSam Leffler vap->iv_ps_sta--; 8688a1b9b6aSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_PWR_MGT; 869b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_POWER, ni, 870b032f27cSSam Leffler "power save mode off, %u sta's in ps mode", vap->iv_ps_sta); 8718a1b9b6aSSam Leffler } 872ebdda46cSSam Leffler /* 8731b6167d2SSam Leffler * Cleanup any HT-related state. 8741b6167d2SSam Leffler */ 8751b6167d2SSam Leffler if (ni->ni_flags & IEEE80211_NODE_HT) 8761b6167d2SSam Leffler ieee80211_ht_node_cleanup(ni); 8771b6167d2SSam Leffler /* 878ebdda46cSSam Leffler * Clear AREF flag that marks the authorization refcnt bump 879ebdda46cSSam Leffler * has happened. This is probably not needed as the node 880ebdda46cSSam Leffler * should always be removed from the table so not found but 881ebdda46cSSam Leffler * do it just in case. 882ebdda46cSSam Leffler */ 883ebdda46cSSam Leffler ni->ni_flags &= ~IEEE80211_NODE_AREF; 8848a1b9b6aSSam Leffler 8858a1b9b6aSSam Leffler /* 8868a1b9b6aSSam Leffler * Drain power save queue and, if needed, clear TIM. 8878a1b9b6aSSam Leffler */ 888b032f27cSSam Leffler if (ieee80211_node_saveq_drain(ni) != 0 && vap->iv_set_tim != NULL) 889b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 8908a1b9b6aSSam Leffler 8918a1b9b6aSSam Leffler ni->ni_associd = 0; 8928a1b9b6aSSam Leffler if (ni->ni_challenge != NULL) { 89368e8e04eSSam Leffler FREE(ni->ni_challenge, M_80211_NODE); 8948a1b9b6aSSam Leffler ni->ni_challenge = NULL; 8958a1b9b6aSSam Leffler } 8968a1b9b6aSSam Leffler /* 8978a1b9b6aSSam Leffler * Preserve SSID, WPA, and WME ie's so the bss node is 8988a1b9b6aSSam Leffler * reusable during a re-auth/re-assoc state transition. 8998a1b9b6aSSam Leffler * If we remove these data they will not be recreated 9008a1b9b6aSSam Leffler * because they come from a probe-response or beacon frame 9018a1b9b6aSSam Leffler * which cannot be expected prior to the association-response. 9028a1b9b6aSSam Leffler * This should not be an issue when operating in other modes 9038a1b9b6aSSam Leffler * as stations leaving always go through a full state transition 9048a1b9b6aSSam Leffler * which will rebuild this state. 9058a1b9b6aSSam Leffler * 9068a1b9b6aSSam Leffler * XXX does this leave us open to inheriting old state? 9078a1b9b6aSSam Leffler */ 9088a1b9b6aSSam Leffler for (i = 0; i < N(ni->ni_rxfrag); i++) 9098a1b9b6aSSam Leffler if (ni->ni_rxfrag[i] != NULL) { 9108a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[i]); 9118a1b9b6aSSam Leffler ni->ni_rxfrag[i] = NULL; 9128a1b9b6aSSam Leffler } 913c1225b52SSam Leffler /* 914c1225b52SSam Leffler * Must be careful here to remove any key map entry w/o a LOR. 915c1225b52SSam Leffler */ 916c1225b52SSam Leffler ieee80211_node_delucastkey(ni); 9178a1b9b6aSSam Leffler #undef N 9188a1b9b6aSSam Leffler } 9198a1b9b6aSSam Leffler 9208a1b9b6aSSam Leffler static void 9218a1b9b6aSSam Leffler node_free(struct ieee80211_node *ni) 9228a1b9b6aSSam Leffler { 9238a1b9b6aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 9248a1b9b6aSSam Leffler 9258a1b9b6aSSam Leffler ic->ic_node_cleanup(ni); 926b032f27cSSam Leffler ieee80211_ies_cleanup(&ni->ni_ies); 9278a1b9b6aSSam Leffler IEEE80211_NODE_SAVEQ_DESTROY(ni); 928b032f27cSSam Leffler IEEE80211_NODE_WDSQ_DESTROY(ni); 929410ca74bSSam Leffler FREE(ni, M_80211_NODE); 9301a1e1d21SSam Leffler } 9311a1e1d21SSam Leffler 932b032f27cSSam Leffler static void 933b032f27cSSam Leffler node_age(struct ieee80211_node *ni) 934b032f27cSSam Leffler { 935b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 936b032f27cSSam Leffler #if 0 937b032f27cSSam Leffler IEEE80211_NODE_LOCK_ASSERT(&ic->ic_sta); 938b032f27cSSam Leffler #endif 939b032f27cSSam Leffler /* 940b032f27cSSam Leffler * Age frames on the power save queue. 941b032f27cSSam Leffler */ 942b032f27cSSam Leffler if (ieee80211_node_saveq_age(ni) != 0 && 943b032f27cSSam Leffler IEEE80211_NODE_SAVEQ_QLEN(ni) == 0 && 944b032f27cSSam Leffler vap->iv_set_tim != NULL) 945b032f27cSSam Leffler vap->iv_set_tim(ni, 0); 946b032f27cSSam Leffler /* 947b032f27cSSam Leffler * Age frames on the wds pending queue. 948b032f27cSSam Leffler */ 949b032f27cSSam Leffler if (IEEE80211_NODE_WDSQ_QLEN(ni) != 0) 950b032f27cSSam Leffler ieee80211_node_wdsq_age(ni); 951b032f27cSSam Leffler /* 952b032f27cSSam Leffler * Age out HT resources (e.g. frames on the 953b032f27cSSam Leffler * A-MPDU reorder queues). 954b032f27cSSam Leffler */ 955b032f27cSSam Leffler if (ni->ni_associd != 0 && (ni->ni_flags & IEEE80211_NODE_HT)) 956b032f27cSSam Leffler ieee80211_ht_node_age(ni); 957b032f27cSSam Leffler } 958b032f27cSSam Leffler 95968e8e04eSSam Leffler static int8_t 9608a1b9b6aSSam Leffler node_getrssi(const struct ieee80211_node *ni) 961d1e61976SSam Leffler { 962b032f27cSSam Leffler uint32_t avgrssi = ni->ni_avgrssi; 963b032f27cSSam Leffler int32_t rssi; 964b032f27cSSam Leffler 965b032f27cSSam Leffler if (avgrssi == IEEE80211_RSSI_DUMMY_MARKER) 966b032f27cSSam Leffler return 0; 967b032f27cSSam Leffler rssi = IEEE80211_RSSI_GET(avgrssi); 968b032f27cSSam Leffler return rssi < 0 ? 0 : rssi > 127 ? 127 : rssi; 969d1e61976SSam Leffler } 970d1e61976SSam Leffler 9711a1e1d21SSam Leffler static void 97268e8e04eSSam Leffler node_getsignal(const struct ieee80211_node *ni, int8_t *rssi, int8_t *noise) 97368e8e04eSSam Leffler { 974b032f27cSSam Leffler *rssi = node_getrssi(ni); 97568e8e04eSSam Leffler *noise = ni->ni_noise; 97668e8e04eSSam Leffler } 97768e8e04eSSam Leffler 97868e8e04eSSam Leffler static void 979b032f27cSSam Leffler node_getmimoinfo(const struct ieee80211_node *ni, 980b032f27cSSam Leffler struct ieee80211_mimo_info *info) 981b032f27cSSam Leffler { 982b032f27cSSam Leffler /* XXX zero data? */ 983b032f27cSSam Leffler } 984b032f27cSSam Leffler 985b032f27cSSam Leffler struct ieee80211_node * 986b032f27cSSam Leffler ieee80211_alloc_node(struct ieee80211_node_table *nt, 987b032f27cSSam Leffler struct ieee80211vap *vap, const uint8_t macaddr[IEEE80211_ADDR_LEN]) 9881a1e1d21SSam Leffler { 9898a1b9b6aSSam Leffler struct ieee80211com *ic = nt->nt_ic; 990b032f27cSSam Leffler struct ieee80211_node *ni; 9911a1e1d21SSam Leffler int hash; 9921a1e1d21SSam Leffler 99338c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 994b032f27cSSam Leffler if (ni == NULL) { 995b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 996b032f27cSSam Leffler return NULL; 997b032f27cSSam Leffler } 998b032f27cSSam Leffler 999b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 100049a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 10018a1b9b6aSSam Leffler ether_sprintf(macaddr), nt->nt_name); 10028a1b9b6aSSam Leffler 10031a1e1d21SSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 10041a1e1d21SSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 10058a1b9b6aSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 10068a1b9b6aSSam Leffler ni->ni_chan = IEEE80211_CHAN_ANYC; 10078a1b9b6aSSam Leffler ni->ni_authmode = IEEE80211_AUTH_OPEN; 10088a1b9b6aSSam Leffler ni->ni_txpower = ic->ic_txpowlimit; /* max power */ 100901a03542SSam Leffler ni->ni_txparms = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_curchan)]; 1010b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, IEEE80211_KEYIX_NONE); 1011b032f27cSSam Leffler ni->ni_avgrssi = IEEE80211_RSSI_DUMMY_MARKER; 10122045f699SSam Leffler ni->ni_inact_reload = nt->nt_inact_init; 10132045f699SSam Leffler ni->ni_inact = ni->ni_inact_reload; 101468e8e04eSSam Leffler ni->ni_ath_defkeyix = 0x7fff; 10158a1b9b6aSSam Leffler IEEE80211_NODE_SAVEQ_INIT(ni, "unknown"); 1016b032f27cSSam Leffler IEEE80211_NODE_WDSQ_INIT(ni, "unknown"); 10178a1b9b6aSSam Leffler 10188a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 10198a1b9b6aSSam Leffler TAILQ_INSERT_TAIL(&nt->nt_node, ni, ni_list); 10208a1b9b6aSSam Leffler LIST_INSERT_HEAD(&nt->nt_hash[hash], ni, ni_hash); 10218a1b9b6aSSam Leffler ni->ni_table = nt; 1022b032f27cSSam Leffler ni->ni_vap = vap; 10238a1b9b6aSSam Leffler ni->ni_ic = ic; 10248a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 10251a1e1d21SSam Leffler 10261a1e1d21SSam Leffler return ni; 10271a1e1d21SSam Leffler } 10281a1e1d21SSam Leffler 102997c973adSSam Leffler /* 103097c973adSSam Leffler * Craft a temporary node suitable for sending a management frame 103197c973adSSam Leffler * to the specified station. We craft only as much state as we 103297c973adSSam Leffler * need to do the work since the node will be immediately reclaimed 103397c973adSSam Leffler * once the send completes. 103497c973adSSam Leffler */ 103597c973adSSam Leffler struct ieee80211_node * 1036b032f27cSSam Leffler ieee80211_tmp_node(struct ieee80211vap *vap, 1037b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 103897c973adSSam Leffler { 1039b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 104097c973adSSam Leffler struct ieee80211_node *ni; 104197c973adSSam Leffler 104238c208f8SSam Leffler ni = ic->ic_node_alloc(vap, macaddr); 104397c973adSSam Leffler if (ni != NULL) { 1044b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 104597c973adSSam Leffler "%s %p<%s>\n", __func__, ni, ether_sprintf(macaddr)); 104697c973adSSam Leffler 1047b032f27cSSam Leffler ni->ni_table = NULL; /* NB: pedantic */ 1048b032f27cSSam Leffler ni->ni_ic = ic; /* NB: needed to set channel */ 1049b032f27cSSam Leffler ni->ni_vap = vap; 1050b032f27cSSam Leffler 105197c973adSSam Leffler IEEE80211_ADDR_COPY(ni->ni_macaddr, macaddr); 1052b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_bss->ni_bssid); 105397c973adSSam Leffler ieee80211_node_initref(ni); /* mark referenced */ 105497c973adSSam Leffler /* NB: required by ieee80211_fix_rate */ 1055b032f27cSSam Leffler ieee80211_node_set_chan(ni, vap->iv_bss->ni_chan); 1056b032f27cSSam Leffler ieee80211_crypto_resetkey(vap, &ni->ni_ucastkey, 105797c973adSSam Leffler IEEE80211_KEYIX_NONE); 105897c973adSSam Leffler /* XXX optimize away */ 105997c973adSSam Leffler IEEE80211_NODE_SAVEQ_INIT(ni, "unknown"); 1060b032f27cSSam Leffler IEEE80211_NODE_WDSQ_INIT(ni, "unknown"); 106197c973adSSam Leffler } else { 106297c973adSSam Leffler /* XXX msg */ 1063b032f27cSSam Leffler vap->iv_stats.is_rx_nodealloc++; 106497c973adSSam Leffler } 106597c973adSSam Leffler return ni; 106697c973adSSam Leffler } 106797c973adSSam Leffler 10681a1e1d21SSam Leffler struct ieee80211_node * 1069b032f27cSSam Leffler ieee80211_dup_bss(struct ieee80211vap *vap, 1070b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 10711a1e1d21SSam Leffler { 1072b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 10738a1b9b6aSSam Leffler struct ieee80211_node *ni; 10748a1b9b6aSSam Leffler 1075b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, macaddr); 10761a1e1d21SSam Leffler if (ni != NULL) { 1077694dca64SSam Leffler /* 1078b032f27cSSam Leffler * Inherit from iv_bss. 1079694dca64SSam Leffler */ 1080b032f27cSSam Leffler ni->ni_authmode = vap->iv_bss->ni_authmode; 1081b032f27cSSam Leffler ni->ni_vlan = vap->iv_bss->ni_vlan; /* XXX?? */ 1082b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, vap->iv_bss->ni_bssid); 1083b032f27cSSam Leffler ieee80211_node_set_chan(ni, vap->iv_bss->ni_chan); 1084b032f27cSSam Leffler } 10851a1e1d21SSam Leffler return ni; 10861a1e1d21SSam Leffler } 10871a1e1d21SSam Leffler 1088b032f27cSSam Leffler /* 1089b032f27cSSam Leffler * Create a bss node for a legacy WDS vap. The far end does 1090b032f27cSSam Leffler * not associate so we just create create a new node and 1091b032f27cSSam Leffler * simulate an association. The caller is responsible for 1092b032f27cSSam Leffler * installing the node as the bss node and handling any further 1093b032f27cSSam Leffler * setup work like authorizing the port. 1094b032f27cSSam Leffler */ 1095b032f27cSSam Leffler struct ieee80211_node * 1096b032f27cSSam Leffler ieee80211_node_create_wds(struct ieee80211vap *vap, 1097b032f27cSSam Leffler const uint8_t bssid[IEEE80211_ADDR_LEN], struct ieee80211_channel *chan) 1098b032f27cSSam Leffler { 1099b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1100b032f27cSSam Leffler struct ieee80211_node *ni; 1101b032f27cSSam Leffler 1102b032f27cSSam Leffler /* XXX check if node already in sta table? */ 1103b032f27cSSam Leffler ni = ieee80211_alloc_node(&ic->ic_sta, vap, bssid); 1104b032f27cSSam Leffler if (ni != NULL) { 1105b032f27cSSam Leffler ni->ni_wdsvap = vap; 1106b032f27cSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, bssid); 1107b032f27cSSam Leffler /* 1108b032f27cSSam Leffler * Inherit any manually configured settings. 1109b032f27cSSam Leffler */ 1110b032f27cSSam Leffler ni->ni_authmode = vap->iv_bss->ni_authmode; 1111b032f27cSSam Leffler ni->ni_vlan = vap->iv_bss->ni_vlan; 1112b032f27cSSam Leffler ieee80211_node_set_chan(ni, chan); 1113b032f27cSSam Leffler /* NB: propagate ssid so available to WPA supplicant */ 1114b032f27cSSam Leffler ni->ni_esslen = vap->iv_des_ssid[0].len; 1115b032f27cSSam Leffler memcpy(ni->ni_essid, vap->iv_des_ssid[0].ssid, ni->ni_esslen); 1116b032f27cSSam Leffler /* NB: no associd for peer */ 1117b032f27cSSam Leffler /* 1118b032f27cSSam Leffler * There are no management frames to use to 1119b032f27cSSam Leffler * discover neighbor capabilities, so blindly 1120b032f27cSSam Leffler * propagate the local configuration. 1121b032f27cSSam Leffler */ 1122b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 1123b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1124b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 1125b032f27cSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 1126b032f27cSSam Leffler if ((ic->ic_htcaps & IEEE80211_HTC_HT) && 1127b032f27cSSam Leffler (vap->iv_flags_ext & IEEE80211_FEXT_HT)) { 1128b032f27cSSam Leffler /* 1129b032f27cSSam Leffler * Device is HT-capable and HT is enabled for 1130b032f27cSSam Leffler * the vap; setup HT operation. On return 1131b032f27cSSam Leffler * ni_chan will be adjusted to an HT channel. 1132b032f27cSSam Leffler */ 1133b032f27cSSam Leffler ieee80211_ht_wds_init(ni); 1134b032f27cSSam Leffler } else { 1135b032f27cSSam Leffler struct ieee80211_channel *c = ni->ni_chan; 1136b032f27cSSam Leffler /* 1137b032f27cSSam Leffler * Force a legacy channel to be used. 1138b032f27cSSam Leffler */ 1139b032f27cSSam Leffler c = ieee80211_find_channel(ic, 1140b032f27cSSam Leffler c->ic_freq, c->ic_flags &~ IEEE80211_CHAN_HT); 1141b032f27cSSam Leffler KASSERT(c != NULL, ("no legacy channel, %u/%x", 1142b032f27cSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags)); 1143b032f27cSSam Leffler ni->ni_chan = c; 1144b032f27cSSam Leffler } 1145b032f27cSSam Leffler } 1146b032f27cSSam Leffler return ni; 1147b032f27cSSam Leffler } 1148b032f27cSSam Leffler 1149b032f27cSSam Leffler struct ieee80211_node * 11508a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1151b032f27cSSam Leffler ieee80211_find_node_locked_debug(struct ieee80211_node_table *nt, 1152b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 11538a1b9b6aSSam Leffler #else 1154b032f27cSSam Leffler ieee80211_find_node_locked(struct ieee80211_node_table *nt, 1155b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 11568a1b9b6aSSam Leffler #endif 11571a1e1d21SSam Leffler { 11581a1e1d21SSam Leffler struct ieee80211_node *ni; 11591a1e1d21SSam Leffler int hash; 11601a1e1d21SSam Leffler 11618a1b9b6aSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1162750d6d0cSSam Leffler 11631a1e1d21SSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 11648a1b9b6aSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 11651a1e1d21SSam Leffler if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 11668a1b9b6aSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 11678a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1168b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 116949a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 117049a15236SSam Leffler func, line, 117149a15236SSam Leffler ni, ether_sprintf(ni->ni_macaddr), 11728a1b9b6aSSam Leffler ieee80211_node_refcnt(ni)); 11738a1b9b6aSSam Leffler #endif 1174750d6d0cSSam Leffler return ni; 11751a1e1d21SSam Leffler } 11761a1e1d21SSam Leffler } 1177750d6d0cSSam Leffler return NULL; 1178750d6d0cSSam Leffler } 1179750d6d0cSSam Leffler 1180750d6d0cSSam Leffler struct ieee80211_node * 11818a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 11828a1b9b6aSSam Leffler ieee80211_find_node_debug(struct ieee80211_node_table *nt, 1183b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 11848a1b9b6aSSam Leffler #else 1185b032f27cSSam Leffler ieee80211_find_node(struct ieee80211_node_table *nt, 1186b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 11878a1b9b6aSSam Leffler #endif 1188750d6d0cSSam Leffler { 1189750d6d0cSSam Leffler struct ieee80211_node *ni; 1190750d6d0cSSam Leffler 11918a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1192b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 1193b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1194b032f27cSSam Leffler return ni; 1195b032f27cSSam Leffler } 1196b032f27cSSam Leffler 1197b032f27cSSam Leffler struct ieee80211_node * 1198b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1199b032f27cSSam Leffler ieee80211_find_vap_node_locked_debug(struct ieee80211_node_table *nt, 1200b032f27cSSam Leffler const struct ieee80211vap *vap, 1201b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1202b032f27cSSam Leffler #else 1203b032f27cSSam Leffler ieee80211_find_vap_node_locked(struct ieee80211_node_table *nt, 1204b032f27cSSam Leffler const struct ieee80211vap *vap, 1205b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1206b032f27cSSam Leffler #endif 1207b032f27cSSam Leffler { 1208b032f27cSSam Leffler struct ieee80211_node *ni; 1209b032f27cSSam Leffler int hash; 1210b032f27cSSam Leffler 1211b032f27cSSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 1212b032f27cSSam Leffler 1213b032f27cSSam Leffler hash = IEEE80211_NODE_HASH(macaddr); 1214b032f27cSSam Leffler LIST_FOREACH(ni, &nt->nt_hash[hash], ni_hash) { 1215b032f27cSSam Leffler if (ni->ni_vap == vap && 1216b032f27cSSam Leffler IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) { 1217b032f27cSSam Leffler ieee80211_ref_node(ni); /* mark referenced */ 1218b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1219b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1220b032f27cSSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, 1221b032f27cSSam Leffler func, line, 1222b032f27cSSam Leffler ni, ether_sprintf(ni->ni_macaddr), 1223b032f27cSSam Leffler ieee80211_node_refcnt(ni)); 1224b032f27cSSam Leffler #endif 1225b032f27cSSam Leffler return ni; 1226b032f27cSSam Leffler } 1227b032f27cSSam Leffler } 1228b032f27cSSam Leffler return NULL; 1229b032f27cSSam Leffler } 1230b032f27cSSam Leffler 1231b032f27cSSam Leffler struct ieee80211_node * 1232b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1233b032f27cSSam Leffler ieee80211_find_vap_node_debug(struct ieee80211_node_table *nt, 1234b032f27cSSam Leffler const struct ieee80211vap *vap, 1235b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], const char *func, int line) 1236b032f27cSSam Leffler #else 1237b032f27cSSam Leffler ieee80211_find_vap_node(struct ieee80211_node_table *nt, 1238b032f27cSSam Leffler const struct ieee80211vap *vap, 1239b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 1240b032f27cSSam Leffler #endif 1241b032f27cSSam Leffler { 1242b032f27cSSam Leffler struct ieee80211_node *ni; 1243b032f27cSSam Leffler 1244b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1245b032f27cSSam Leffler ni = ieee80211_find_vap_node_locked(nt, vap, macaddr); 12468a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 12471a1e1d21SSam Leffler return ni; 12481a1e1d21SSam Leffler } 12491a1e1d21SSam Leffler 12501a1e1d21SSam Leffler /* 12518a1b9b6aSSam Leffler * Fake up a node; this handles node discovery in adhoc mode. 12528a1b9b6aSSam Leffler * Note that for the driver's benefit we we treat this like 12538a1b9b6aSSam Leffler * an association so the driver has an opportunity to setup 12548a1b9b6aSSam Leffler * it's private state. 12558a1b9b6aSSam Leffler */ 12568a1b9b6aSSam Leffler struct ieee80211_node * 1257b032f27cSSam Leffler ieee80211_fakeup_adhoc_node(struct ieee80211vap *vap, 125868e8e04eSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 12598a1b9b6aSSam Leffler { 12608a1b9b6aSSam Leffler struct ieee80211_node *ni; 12618a1b9b6aSSam Leffler 1262b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1263be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(macaddr)); 1264b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, macaddr); 12658a1b9b6aSSam Leffler if (ni != NULL) { 1266b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1267b032f27cSSam Leffler 12688a1b9b6aSSam Leffler /* XXX no rate negotiation; just dup */ 1269b032f27cSSam Leffler ni->ni_rates = vap->iv_bss->ni_rates; 1270b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_AHDEMO) { 12718e292e8eSSam Leffler /* 127268e8e04eSSam Leffler * In adhoc demo mode there are no management 127368e8e04eSSam Leffler * frames to use to discover neighbor capabilities, 127468e8e04eSSam Leffler * so blindly propagate the local configuration 127568e8e04eSSam Leffler * so we can do interesting things (e.g. use 127668e8e04eSSam Leffler * WME to disable ACK's). 12778e292e8eSSam Leffler */ 1278b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_WME) 12798e292e8eSSam Leffler ni->ni_flags |= IEEE80211_NODE_QOS; 1280b032f27cSSam Leffler if (vap->iv_flags & IEEE80211_F_FF) 128168e8e04eSSam Leffler ni->ni_flags |= IEEE80211_NODE_FF; 12828e292e8eSSam Leffler } 128301a03542SSam Leffler node_setuptxparms(ni); 1284b032f27cSSam Leffler if (ic->ic_newassoc != NULL) 1285b032f27cSSam Leffler ic->ic_newassoc(ni, 1); 128668e8e04eSSam Leffler /* XXX not right for 802.1x/WPA */ 128768e8e04eSSam Leffler ieee80211_node_authorize(ni); 12888a1b9b6aSSam Leffler } 12898a1b9b6aSSam Leffler return ni; 12908a1b9b6aSSam Leffler } 12918a1b9b6aSSam Leffler 1292be425a0fSSam Leffler void 1293be425a0fSSam Leffler ieee80211_init_neighbor(struct ieee80211_node *ni, 1294be425a0fSSam Leffler const struct ieee80211_frame *wh, 1295be425a0fSSam Leffler const struct ieee80211_scanparams *sp) 1296be425a0fSSam Leffler { 1297be425a0fSSam Leffler ni->ni_esslen = sp->ssid[1]; 1298be425a0fSSam Leffler memcpy(ni->ni_essid, sp->ssid + 2, sp->ssid[1]); 1299be425a0fSSam Leffler IEEE80211_ADDR_COPY(ni->ni_bssid, wh->i_addr3); 1300be425a0fSSam Leffler memcpy(ni->ni_tstamp.data, sp->tstamp, sizeof(ni->ni_tstamp)); 1301be425a0fSSam Leffler ni->ni_intval = sp->bintval; 1302be425a0fSSam Leffler ni->ni_capinfo = sp->capinfo; 1303be425a0fSSam Leffler ni->ni_chan = ni->ni_ic->ic_curchan; 1304be425a0fSSam Leffler ni->ni_fhdwell = sp->fhdwell; 1305be425a0fSSam Leffler ni->ni_fhindex = sp->fhindex; 1306be425a0fSSam Leffler ni->ni_erp = sp->erp; 1307be425a0fSSam Leffler ni->ni_timoff = sp->timoff; 1308b032f27cSSam Leffler 1309b032f27cSSam Leffler if (ieee80211_ies_init(&ni->ni_ies, sp->ies, sp->ies_len)) { 1310b032f27cSSam Leffler ieee80211_ies_expand(&ni->ni_ies); 1311b032f27cSSam Leffler if (ni->ni_ies.ath_ie != NULL) 1312b032f27cSSam Leffler ieee80211_parse_ath(ni, ni->ni_ies.ath_ie); 1313b032f27cSSam Leffler } 1314be425a0fSSam Leffler 1315be425a0fSSam Leffler /* NB: must be after ni_chan is setup */ 131679edaebfSSam Leffler ieee80211_setup_rates(ni, sp->rates, sp->xrates, 131779edaebfSSam Leffler IEEE80211_F_DOSORT | IEEE80211_F_DOFRATE | 131879edaebfSSam Leffler IEEE80211_F_DONEGO | IEEE80211_F_DODEL); 1319be425a0fSSam Leffler } 1320be425a0fSSam Leffler 1321b5c99415SSam Leffler /* 1322b5c99415SSam Leffler * Do node discovery in adhoc mode on receipt of a beacon 1323b5c99415SSam Leffler * or probe response frame. Note that for the driver's 1324b5c99415SSam Leffler * benefit we we treat this like an association so the 1325b5c99415SSam Leffler * driver has an opportunity to setup it's private state. 1326b5c99415SSam Leffler */ 1327b5c99415SSam Leffler struct ieee80211_node * 1328b032f27cSSam Leffler ieee80211_add_neighbor(struct ieee80211vap *vap, 1329b5c99415SSam Leffler const struct ieee80211_frame *wh, 1330b5c99415SSam Leffler const struct ieee80211_scanparams *sp) 1331b5c99415SSam Leffler { 1332b5c99415SSam Leffler struct ieee80211_node *ni; 1333b5c99415SSam Leffler 1334b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1335be425a0fSSam Leffler "%s: mac<%s>\n", __func__, ether_sprintf(wh->i_addr2)); 1336b032f27cSSam Leffler ni = ieee80211_dup_bss(vap, wh->i_addr2);/* XXX alloc_node? */ 1337b5c99415SSam Leffler if (ni != NULL) { 1338b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 1339b032f27cSSam Leffler 1340be425a0fSSam Leffler ieee80211_init_neighbor(ni, wh, sp); 134101a03542SSam Leffler node_setuptxparms(ni); 1342b5c99415SSam Leffler if (ic->ic_newassoc != NULL) 1343b5c99415SSam Leffler ic->ic_newassoc(ni, 1); 1344b5c99415SSam Leffler /* XXX not right for 802.1x/WPA */ 1345b5c99415SSam Leffler ieee80211_node_authorize(ni); 1346b5c99415SSam Leffler } 1347b5c99415SSam Leffler return ni; 1348b5c99415SSam Leffler } 1349b5c99415SSam Leffler 1350c1225b52SSam Leffler #define IS_CTL(wh) \ 1351c1225b52SSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) == IEEE80211_FC0_TYPE_CTL) 1352c1225b52SSam Leffler #define IS_PSPOLL(wh) \ 1353c1225b52SSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == IEEE80211_FC0_SUBTYPE_PS_POLL) 135468e8e04eSSam Leffler #define IS_BAR(wh) \ 135568e8e04eSSam Leffler ((wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) == IEEE80211_FC0_SUBTYPE_BAR) 1356a2cfa5b7SSam Leffler #define IS_PROBEREQ(wh) \ 1357a2cfa5b7SSam Leffler ((wh->i_fc[0] & (IEEE80211_FC0_TYPE_MASK|IEEE80211_FC0_SUBTYPE_MASK)) \ 1358a2cfa5b7SSam Leffler == (IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_PROBE_REQ)) 1359a2cfa5b7SSam Leffler #define IS_BCAST_PROBEREQ(wh) \ 1360a2cfa5b7SSam Leffler (IS_PROBEREQ(wh) && IEEE80211_IS_MULTICAST( \ 1361a2cfa5b7SSam Leffler ((const struct ieee80211_frame *)(wh))->i_addr3)) 1362a2cfa5b7SSam Leffler 1363a2cfa5b7SSam Leffler static __inline struct ieee80211_node * 1364a2cfa5b7SSam Leffler _find_rxnode(struct ieee80211_node_table *nt, 1365a2cfa5b7SSam Leffler const struct ieee80211_frame_min *wh) 1366a2cfa5b7SSam Leffler { 1367a2cfa5b7SSam Leffler /* XXX 4-address frames? */ 1368a2cfa5b7SSam Leffler if (IS_CTL(wh) && !IS_PSPOLL(wh) && !IS_BAR(wh) /*&& !IS_RTS(ah)*/) 1369a2cfa5b7SSam Leffler return ieee80211_find_node_locked(nt, wh->i_addr1); 1370a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1371a2cfa5b7SSam Leffler return NULL; /* spam bcast probe req to all vap's */ 1372a2cfa5b7SSam Leffler return ieee80211_find_node_locked(nt, wh->i_addr2); 1373a2cfa5b7SSam Leffler } 137468e8e04eSSam Leffler 13758a1b9b6aSSam Leffler /* 13768a1b9b6aSSam Leffler * Locate the node for sender, track state, and then pass the 1377a2cfa5b7SSam Leffler * (referenced) node up to the 802.11 layer for its use. Note 1378a2cfa5b7SSam Leffler * we can return NULL if the sender is not in the table. 13798a1b9b6aSSam Leffler */ 13808a1b9b6aSSam Leffler struct ieee80211_node * 13818a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 13828a1b9b6aSSam Leffler ieee80211_find_rxnode_debug(struct ieee80211com *ic, 13838a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh, const char *func, int line) 13848a1b9b6aSSam Leffler #else 13858a1b9b6aSSam Leffler ieee80211_find_rxnode(struct ieee80211com *ic, 13868a1b9b6aSSam Leffler const struct ieee80211_frame_min *wh) 13878a1b9b6aSSam Leffler #endif 13888a1b9b6aSSam Leffler { 13898a1b9b6aSSam Leffler struct ieee80211_node_table *nt; 13908a1b9b6aSSam Leffler struct ieee80211_node *ni; 13918a1b9b6aSSam Leffler 139268e8e04eSSam Leffler nt = &ic->ic_sta; 13938a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1394a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 13958a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 13968a1b9b6aSSam Leffler 1397c1225b52SSam Leffler return ni; 1398c1225b52SSam Leffler } 1399c1225b52SSam Leffler 1400c1225b52SSam Leffler /* 1401c1225b52SSam Leffler * Like ieee80211_find_rxnode but use the supplied h/w 1402c1225b52SSam Leffler * key index as a hint to locate the node in the key 1403c1225b52SSam Leffler * mapping table. If an entry is present at the key 1404c1225b52SSam Leffler * index we return it; otherwise do a normal lookup and 1405c1225b52SSam Leffler * update the mapping table if the station has a unicast 1406c1225b52SSam Leffler * key assigned to it. 1407c1225b52SSam Leffler */ 1408c1225b52SSam Leffler struct ieee80211_node * 1409c1225b52SSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1410c1225b52SSam Leffler ieee80211_find_rxnode_withkey_debug(struct ieee80211com *ic, 1411c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix, 1412c1225b52SSam Leffler const char *func, int line) 1413c1225b52SSam Leffler #else 1414c1225b52SSam Leffler ieee80211_find_rxnode_withkey(struct ieee80211com *ic, 1415c1225b52SSam Leffler const struct ieee80211_frame_min *wh, ieee80211_keyix keyix) 1416c1225b52SSam Leffler #endif 1417c1225b52SSam Leffler { 1418c1225b52SSam Leffler struct ieee80211_node_table *nt; 1419c1225b52SSam Leffler struct ieee80211_node *ni; 1420c1225b52SSam Leffler 1421c1225b52SSam Leffler nt = &ic->ic_sta; 1422c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 1423c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) 1424c1225b52SSam Leffler ni = nt->nt_keyixmap[keyix]; 1425c1225b52SSam Leffler else 1426c1225b52SSam Leffler ni = NULL; 1427c1225b52SSam Leffler if (ni == NULL) { 1428a2cfa5b7SSam Leffler ni = _find_rxnode(nt, wh); 1429b032f27cSSam Leffler if (ni != NULL && nt->nt_keyixmap != NULL) { 1430c1225b52SSam Leffler /* 1431c1225b52SSam Leffler * If the station has a unicast key cache slot 1432c1225b52SSam Leffler * assigned update the key->node mapping table. 1433c1225b52SSam Leffler */ 1434c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1435c1225b52SSam Leffler /* XXX can keyixmap[keyix] != NULL? */ 1436c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1437c1225b52SSam Leffler nt->nt_keyixmap[keyix] == NULL) { 1438b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1439b032f27cSSam Leffler IEEE80211_MSG_NODE, 1440c1225b52SSam Leffler "%s: add key map entry %p<%s> refcnt %d\n", 1441c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1442c1225b52SSam Leffler ieee80211_node_refcnt(ni)+1); 1443c1225b52SSam Leffler nt->nt_keyixmap[keyix] = ieee80211_ref_node(ni); 1444c1225b52SSam Leffler } 1445c1225b52SSam Leffler } 1446a2cfa5b7SSam Leffler } else { 1447a2cfa5b7SSam Leffler if (IS_BCAST_PROBEREQ(wh)) 1448a2cfa5b7SSam Leffler ni = NULL; /* spam bcast probe req to all vap's */ 1449a2cfa5b7SSam Leffler else 1450c1225b52SSam Leffler ieee80211_ref_node(ni); 1451a2cfa5b7SSam Leffler } 1452c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1453c1225b52SSam Leffler 1454c1225b52SSam Leffler return ni; 1455c1225b52SSam Leffler } 1456a2cfa5b7SSam Leffler #undef IS_BCAST_PROBEREQ 1457a2cfa5b7SSam Leffler #undef IS_PROBEREQ 145868e8e04eSSam Leffler #undef IS_BAR 14598a1b9b6aSSam Leffler #undef IS_PSPOLL 14608a1b9b6aSSam Leffler #undef IS_CTL 14618a1b9b6aSSam Leffler 14628a1b9b6aSSam Leffler /* 1463750d6d0cSSam Leffler * Return a reference to the appropriate node for sending 1464750d6d0cSSam Leffler * a data frame. This handles node discovery in adhoc networks. 1465750d6d0cSSam Leffler */ 1466750d6d0cSSam Leffler struct ieee80211_node * 14678a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1468b032f27cSSam Leffler ieee80211_find_txnode_debug(struct ieee80211vap *vap, 1469b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN], 14708a1b9b6aSSam Leffler const char *func, int line) 14718a1b9b6aSSam Leffler #else 1472b032f27cSSam Leffler ieee80211_find_txnode(struct ieee80211vap *vap, 1473b032f27cSSam Leffler const uint8_t macaddr[IEEE80211_ADDR_LEN]) 14748a1b9b6aSSam Leffler #endif 1475750d6d0cSSam Leffler { 1476b032f27cSSam Leffler struct ieee80211_node_table *nt = &vap->iv_ic->ic_sta; 1477750d6d0cSSam Leffler struct ieee80211_node *ni; 1478750d6d0cSSam Leffler 1479750d6d0cSSam Leffler /* 1480750d6d0cSSam Leffler * The destination address should be in the node table 1481c1225b52SSam Leffler * unless this is a multicast/broadcast frame. We can 1482c1225b52SSam Leffler * also optimize station mode operation, all frames go 1483c1225b52SSam Leffler * to the bss node. 1484750d6d0cSSam Leffler */ 1485750d6d0cSSam Leffler /* XXX can't hold lock across dup_bss 'cuz of recursive locking */ 14868a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 1487b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_STA || 1488b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_WDS || 1489b032f27cSSam Leffler IEEE80211_IS_MULTICAST(macaddr)) 1490b032f27cSSam Leffler ni = ieee80211_ref_node(vap->iv_bss); 1491ee25b8dfSSam Leffler else { 1492b032f27cSSam Leffler ni = ieee80211_find_node_locked(nt, macaddr); 1493b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP && 1494ee25b8dfSSam Leffler (ni != NULL && ni->ni_associd == 0)) { 1495ee25b8dfSSam Leffler /* 1496ee25b8dfSSam Leffler * Station is not associated; don't permit the 1497ee25b8dfSSam Leffler * data frame to be sent by returning NULL. This 1498ee25b8dfSSam Leffler * is kinda a kludge but the least intrusive way 1499ee25b8dfSSam Leffler * to add this check into all drivers. 1500ee25b8dfSSam Leffler */ 1501ee25b8dfSSam Leffler ieee80211_unref_node(&ni); /* NB: null's ni */ 1502ee25b8dfSSam Leffler } 1503ee25b8dfSSam Leffler } 15048a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 15058a1b9b6aSSam Leffler 15068a1b9b6aSSam Leffler if (ni == NULL) { 1507b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_IBSS || 1508b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO) { 150990d0d036SSam Leffler /* 151090d0d036SSam Leffler * In adhoc mode cons up a node for the destination. 151190d0d036SSam Leffler * Note that we need an additional reference for the 1512b032f27cSSam Leffler * caller to be consistent with 1513b032f27cSSam Leffler * ieee80211_find_node_locked. 151490d0d036SSam Leffler */ 1515b032f27cSSam Leffler ni = ieee80211_fakeup_adhoc_node(vap, macaddr); 151690d0d036SSam Leffler if (ni != NULL) 151790d0d036SSam Leffler (void) ieee80211_ref_node(ni); 151890d0d036SSam Leffler } else { 1519b032f27cSSam Leffler IEEE80211_NOTE_MAC(vap, IEEE80211_MSG_OUTPUT, macaddr, 1520b032f27cSSam Leffler "no node, discard frame (%s)", __func__); 1521b032f27cSSam Leffler vap->iv_stats.is_tx_nonode++; 1522750d6d0cSSam Leffler } 1523750d6d0cSSam Leffler } 1524750d6d0cSSam Leffler return ni; 1525750d6d0cSSam Leffler } 1526750d6d0cSSam Leffler 15278a1b9b6aSSam Leffler static void 15288a1b9b6aSSam Leffler _ieee80211_free_node(struct ieee80211_node *ni) 15298a1b9b6aSSam Leffler { 15308a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 15318a1b9b6aSSam Leffler 153237e9743aSSam Leffler /* 153337e9743aSSam Leffler * NB: careful about referencing the vap as it may be 153437e9743aSSam Leffler * gone if the last reference was held by a driver. 153537e9743aSSam Leffler * We know the com will always be present so it's safe 153637e9743aSSam Leffler * to use ni_ic below to reclaim resources. 153737e9743aSSam Leffler */ 153837e9743aSSam Leffler #if 0 1539b032f27cSSam Leffler IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 154049a15236SSam Leffler "%s %p<%s> in %s table\n", __func__, ni, 154149a15236SSam Leffler ether_sprintf(ni->ni_macaddr), 15428a1b9b6aSSam Leffler nt != NULL ? nt->nt_name : "<gone>"); 154337e9743aSSam Leffler #endif 154437e9743aSSam Leffler if (ni->ni_associd != 0) { 154537e9743aSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1546b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1547b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 154837e9743aSSam Leffler } 15498a1b9b6aSSam Leffler if (nt != NULL) { 15508a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 15518a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 15528a1b9b6aSSam Leffler } 155337e9743aSSam Leffler ni->ni_ic->ic_node_free(ni); 15548a1b9b6aSSam Leffler } 15558a1b9b6aSSam Leffler 15568a1b9b6aSSam Leffler void 15578a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 15588a1b9b6aSSam Leffler ieee80211_free_node_debug(struct ieee80211_node *ni, const char *func, int line) 15598a1b9b6aSSam Leffler #else 15608a1b9b6aSSam Leffler ieee80211_free_node(struct ieee80211_node *ni) 15618a1b9b6aSSam Leffler #endif 15628a1b9b6aSSam Leffler { 15638a1b9b6aSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 15648a1b9b6aSSam Leffler 15658a1b9b6aSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1566b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 156749a15236SSam Leffler "%s (%s:%u) %p<%s> refcnt %d\n", __func__, func, line, ni, 15688a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)-1); 15698a1b9b6aSSam Leffler #endif 1570c1225b52SSam Leffler if (nt != NULL) { 1571c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 15728a1b9b6aSSam Leffler if (ieee80211_node_dectestref(ni)) { 15738a1b9b6aSSam Leffler /* 1574c1225b52SSam Leffler * Last reference, reclaim state. 15758a1b9b6aSSam Leffler */ 15768a1b9b6aSSam Leffler _ieee80211_free_node(ni); 1577c1225b52SSam Leffler } else if (ieee80211_node_refcnt(ni) == 1 && 1578c1225b52SSam Leffler nt->nt_keyixmap != NULL) { 1579c1225b52SSam Leffler ieee80211_keyix keyix; 1580c1225b52SSam Leffler /* 1581c1225b52SSam Leffler * Check for a last reference in the key mapping table. 1582c1225b52SSam Leffler */ 1583c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1584c1225b52SSam Leffler if (keyix < nt->nt_keyixmax && 1585c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1586b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1587b032f27cSSam Leffler IEEE80211_MSG_NODE, 1588c1225b52SSam Leffler "%s: %p<%s> clear key map entry", __func__, 1589c1225b52SSam Leffler ni, ether_sprintf(ni->ni_macaddr)); 1590c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1591c1225b52SSam Leffler ieee80211_node_decref(ni); /* XXX needed? */ 15928a1b9b6aSSam Leffler _ieee80211_free_node(ni); 15938a1b9b6aSSam Leffler } 15941a1e1d21SSam Leffler } 1595c1225b52SSam Leffler IEEE80211_NODE_UNLOCK(nt); 1596c1225b52SSam Leffler } else { 1597c1225b52SSam Leffler if (ieee80211_node_dectestref(ni)) 1598c1225b52SSam Leffler _ieee80211_free_node(ni); 1599c1225b52SSam Leffler } 1600c1225b52SSam Leffler } 1601c1225b52SSam Leffler 1602c1225b52SSam Leffler /* 1603c1225b52SSam Leffler * Reclaim a unicast key and clear any key cache state. 1604c1225b52SSam Leffler */ 1605c1225b52SSam Leffler int 1606c1225b52SSam Leffler ieee80211_node_delucastkey(struct ieee80211_node *ni) 1607c1225b52SSam Leffler { 160837e9743aSSam Leffler struct ieee80211com *ic = ni->ni_ic; 160937e9743aSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1610c1225b52SSam Leffler struct ieee80211_node *nikey; 1611c1225b52SSam Leffler ieee80211_keyix keyix; 1612c1225b52SSam Leffler int isowned, status; 1613c1225b52SSam Leffler 1614c1225b52SSam Leffler /* 1615c1225b52SSam Leffler * NB: We must beware of LOR here; deleting the key 1616c1225b52SSam Leffler * can cause the crypto layer to block traffic updates 1617c1225b52SSam Leffler * which can generate a LOR against the node table lock; 1618c1225b52SSam Leffler * grab it here and stash the key index for our use below. 1619c1225b52SSam Leffler * 1620c1225b52SSam Leffler * Must also beware of recursion on the node table lock. 1621c1225b52SSam Leffler * When called from node_cleanup we may already have 1622c1225b52SSam Leffler * the node table lock held. Unfortunately there's no 1623c1225b52SSam Leffler * way to separate out this path so we must do this 1624c1225b52SSam Leffler * conditionally. 1625c1225b52SSam Leffler */ 1626c1225b52SSam Leffler isowned = IEEE80211_NODE_IS_LOCKED(nt); 1627c1225b52SSam Leffler if (!isowned) 1628c1225b52SSam Leffler IEEE80211_NODE_LOCK(nt); 162937e9743aSSam Leffler nikey = NULL; 163037e9743aSSam Leffler status = 1; /* NB: success */ 163137e9743aSSam Leffler if (!IEEE80211_KEY_UNDEFINED(&ni->ni_ucastkey)) { 1632c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 163337e9743aSSam Leffler status = ieee80211_crypto_delkey(ni->ni_vap, &ni->ni_ucastkey); 1634c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax) { 1635c1225b52SSam Leffler nikey = nt->nt_keyixmap[keyix]; 1636c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL;; 163737e9743aSSam Leffler } 163837e9743aSSam Leffler } 1639c1225b52SSam Leffler if (!isowned) 1640b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1641c1225b52SSam Leffler 1642c1225b52SSam Leffler if (nikey != NULL) { 1643c1225b52SSam Leffler KASSERT(nikey == ni, 1644c1225b52SSam Leffler ("key map out of sync, ni %p nikey %p", ni, nikey)); 164537e9743aSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1646c1225b52SSam Leffler "%s: delete key map entry %p<%s> refcnt %d\n", 1647c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 1648c1225b52SSam Leffler ieee80211_node_refcnt(ni)-1); 1649c1225b52SSam Leffler ieee80211_free_node(ni); 1650c1225b52SSam Leffler } 1651c1225b52SSam Leffler return status; 1652c1225b52SSam Leffler } 16531a1e1d21SSam Leffler 1654303ebc3cSSam Leffler /* 16558a1b9b6aSSam Leffler * Reclaim a node. If this is the last reference count then 16568a1b9b6aSSam Leffler * do the normal free work. Otherwise remove it from the node 16578a1b9b6aSSam Leffler * table and mark it gone by clearing the back-reference. 16588a1b9b6aSSam Leffler */ 16598a1b9b6aSSam Leffler static void 16608a1b9b6aSSam Leffler node_reclaim(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 16618a1b9b6aSSam Leffler { 1662c1225b52SSam Leffler ieee80211_keyix keyix; 1663c1225b52SSam Leffler 1664c1225b52SSam Leffler IEEE80211_NODE_LOCK_ASSERT(nt); 16658a1b9b6aSSam Leffler 1666b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 166749a15236SSam Leffler "%s: remove %p<%s> from %s table, refcnt %d\n", 166849a15236SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr), 166949a15236SSam Leffler nt->nt_name, ieee80211_node_refcnt(ni)-1); 1670c1225b52SSam Leffler /* 1671c1225b52SSam Leffler * Clear any entry in the unicast key mapping table. 1672c1225b52SSam Leffler * We need to do it here so rx lookups don't find it 1673c1225b52SSam Leffler * in the mapping table even if it's not in the hash 1674c1225b52SSam Leffler * table. We cannot depend on the mapping table entry 1675c1225b52SSam Leffler * being cleared because the node may not be free'd. 1676c1225b52SSam Leffler */ 1677c1225b52SSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1678c1225b52SSam Leffler if (nt->nt_keyixmap != NULL && keyix < nt->nt_keyixmax && 1679c1225b52SSam Leffler nt->nt_keyixmap[keyix] == ni) { 1680b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 1681c1225b52SSam Leffler "%s: %p<%s> clear key map entry\n", 1682c1225b52SSam Leffler __func__, ni, ether_sprintf(ni->ni_macaddr)); 1683c1225b52SSam Leffler nt->nt_keyixmap[keyix] = NULL; 1684c1225b52SSam Leffler ieee80211_node_decref(ni); /* NB: don't need free */ 1685c1225b52SSam Leffler } 16868a1b9b6aSSam Leffler if (!ieee80211_node_dectestref(ni)) { 16878a1b9b6aSSam Leffler /* 16888a1b9b6aSSam Leffler * Other references are present, just remove the 16898a1b9b6aSSam Leffler * node from the table so it cannot be found. When 16908a1b9b6aSSam Leffler * the references are dropped storage will be 1691acc4f7f5SSam Leffler * reclaimed. 16928a1b9b6aSSam Leffler */ 16938a1b9b6aSSam Leffler TAILQ_REMOVE(&nt->nt_node, ni, ni_list); 16948a1b9b6aSSam Leffler LIST_REMOVE(ni, ni_hash); 16958a1b9b6aSSam Leffler ni->ni_table = NULL; /* clear reference */ 16968a1b9b6aSSam Leffler } else 16978a1b9b6aSSam Leffler _ieee80211_free_node(ni); 16988a1b9b6aSSam Leffler } 16998a1b9b6aSSam Leffler 1700b032f27cSSam Leffler /* 1701b032f27cSSam Leffler * Reclaim a (bss) node. Decrement the refcnt and reclaim 1702b032f27cSSam Leffler * the node if the only other reference to it is in the sta 1703b032f27cSSam Leffler * table. This is effectively ieee80211_free_node followed 1704b032f27cSSam Leffler * by node_reclaim when the refcnt is 1 (after the free). 1705b032f27cSSam Leffler */ 17068a1b9b6aSSam Leffler static void 1707b032f27cSSam Leffler ieee80211_node_reclaim(struct ieee80211_node *ni) 17088a1b9b6aSSam Leffler { 1709b032f27cSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 17108a1b9b6aSSam Leffler 1711b032f27cSSam Leffler KASSERT(nt != NULL, ("reclaim node not in table")); 17128a1b9b6aSSam Leffler 1713b032f27cSSam Leffler #ifdef IEEE80211_DEBUG_REFCNT 1714b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_NODE, 171592172ed8SSam Leffler "%s %p<%s> refcnt %d\n", __func__, ni, 1716b032f27cSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)-1); 1717b032f27cSSam Leffler #endif 1718b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1719b032f27cSSam Leffler if (ieee80211_node_dectestref(ni)) { 1720b032f27cSSam Leffler /* 1721b032f27cSSam Leffler * Last reference, reclaim state. 1722b032f27cSSam Leffler */ 1723b032f27cSSam Leffler _ieee80211_free_node(ni); 1724b032f27cSSam Leffler nt = NULL; 1725b032f27cSSam Leffler } else if (ieee80211_node_refcnt(ni) == 1 && 1726b032f27cSSam Leffler nt->nt_keyixmap != NULL) { 1727b032f27cSSam Leffler ieee80211_keyix keyix; 1728b032f27cSSam Leffler /* 1729b032f27cSSam Leffler * Check for a last reference in the key mapping table. 1730b032f27cSSam Leffler */ 1731b032f27cSSam Leffler keyix = ni->ni_ucastkey.wk_rxkeyix; 1732b032f27cSSam Leffler if (keyix < nt->nt_keyixmax && 1733b032f27cSSam Leffler nt->nt_keyixmap[keyix] == ni) { 1734b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 1735b032f27cSSam Leffler IEEE80211_MSG_NODE, 1736b032f27cSSam Leffler "%s: %p<%s> clear key map entry", __func__, 1737b032f27cSSam Leffler ni, ether_sprintf(ni->ni_macaddr)); 1738b032f27cSSam Leffler nt->nt_keyixmap[keyix] = NULL; 1739b032f27cSSam Leffler ieee80211_node_decref(ni); /* XXX needed? */ 1740b032f27cSSam Leffler _ieee80211_free_node(ni); 1741b032f27cSSam Leffler nt = NULL; 17428a1b9b6aSSam Leffler } 1743b032f27cSSam Leffler } 1744b032f27cSSam Leffler if (nt != NULL && ieee80211_node_refcnt(ni) == 1) { 1745b032f27cSSam Leffler /* 1746b032f27cSSam Leffler * Last reference is in the sta table; complete 1747b032f27cSSam Leffler * the reclaim. This handles bss nodes being 1748b032f27cSSam Leffler * recycled: the node has two references, one for 1749b032f27cSSam Leffler * iv_bss and one for the table. After dropping 1750b032f27cSSam Leffler * the iv_bss ref above we need to reclaim the sta 1751b032f27cSSam Leffler * table reference. 1752b032f27cSSam Leffler */ 1753b032f27cSSam Leffler ieee80211_node_decref(ni); /* NB: be pendantic */ 1754b032f27cSSam Leffler _ieee80211_free_node(ni); 1755b032f27cSSam Leffler } 1756b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1757b032f27cSSam Leffler } 1758b032f27cSSam Leffler 1759b032f27cSSam Leffler /* 1760b032f27cSSam Leffler * Node table support. 1761b032f27cSSam Leffler */ 1762b032f27cSSam Leffler 1763b032f27cSSam Leffler static void 1764b032f27cSSam Leffler ieee80211_node_table_init(struct ieee80211com *ic, 1765b032f27cSSam Leffler struct ieee80211_node_table *nt, 1766b032f27cSSam Leffler const char *name, int inact, int keyixmax) 1767b032f27cSSam Leffler { 1768b032f27cSSam Leffler struct ifnet *ifp = ic->ic_ifp; 1769b032f27cSSam Leffler 1770b032f27cSSam Leffler nt->nt_ic = ic; 1771b032f27cSSam Leffler IEEE80211_NODE_LOCK_INIT(nt, ifp->if_xname); 1772b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_INIT(nt, ifp->if_xname); 1773b032f27cSSam Leffler TAILQ_INIT(&nt->nt_node); 1774b032f27cSSam Leffler nt->nt_name = name; 1775b032f27cSSam Leffler nt->nt_scangen = 1; 1776b032f27cSSam Leffler nt->nt_inact_init = inact; 1777b032f27cSSam Leffler nt->nt_keyixmax = keyixmax; 1778b032f27cSSam Leffler if (nt->nt_keyixmax > 0) { 1779b032f27cSSam Leffler MALLOC(nt->nt_keyixmap, struct ieee80211_node **, 1780b032f27cSSam Leffler keyixmax * sizeof(struct ieee80211_node *), 1781b032f27cSSam Leffler M_80211_NODE, M_NOWAIT | M_ZERO); 1782b032f27cSSam Leffler if (nt->nt_keyixmap == NULL) 1783b032f27cSSam Leffler if_printf(ic->ic_ifp, 1784b032f27cSSam Leffler "Cannot allocate key index map with %u entries\n", 1785b032f27cSSam Leffler keyixmax); 1786b032f27cSSam Leffler } else 1787b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1788b032f27cSSam Leffler } 1789b032f27cSSam Leffler 1790b032f27cSSam Leffler static void 1791b032f27cSSam Leffler ieee80211_node_table_reset(struct ieee80211_node_table *nt, 1792b032f27cSSam Leffler struct ieee80211vap *match) 1793b032f27cSSam Leffler { 1794b032f27cSSam Leffler struct ieee80211_node *ni, *next; 1795b032f27cSSam Leffler 1796b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 1797b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) { 1798b032f27cSSam Leffler if (match != NULL && ni->ni_vap != match) 1799b032f27cSSam Leffler continue; 1800b032f27cSSam Leffler /* XXX can this happen? if so need's work */ 1801b032f27cSSam Leffler if (ni->ni_associd != 0) { 1802b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 1803b032f27cSSam Leffler 1804b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 1805b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 1806b032f27cSSam Leffler if (vap->iv_aid_bitmap != NULL) 1807b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 1808b032f27cSSam Leffler } 1809b032f27cSSam Leffler ni->ni_wdsvap = NULL; /* clear reference */ 18108a1b9b6aSSam Leffler node_reclaim(nt, ni); 18118a1b9b6aSSam Leffler } 1812b032f27cSSam Leffler if (match != NULL && match->iv_opmode == IEEE80211_M_WDS) { 1813b032f27cSSam Leffler /* 1814b032f27cSSam Leffler * Make a separate pass to clear references to this vap 1815b032f27cSSam Leffler * held by DWDS entries. They will not be matched above 1816b032f27cSSam Leffler * because ni_vap will point to the ap vap but we still 1817b032f27cSSam Leffler * need to clear ni_wdsvap when the WDS vap is destroyed 1818b032f27cSSam Leffler * and/or reset. 1819b032f27cSSam Leffler */ 1820b032f27cSSam Leffler TAILQ_FOREACH_SAFE(ni, &nt->nt_node, ni_list, next) 1821b032f27cSSam Leffler if (ni->ni_wdsvap == match) 1822b032f27cSSam Leffler ni->ni_wdsvap = NULL; 1823b032f27cSSam Leffler } 1824b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1825b032f27cSSam Leffler } 1826b032f27cSSam Leffler 1827b032f27cSSam Leffler static void 1828b032f27cSSam Leffler ieee80211_node_table_cleanup(struct ieee80211_node_table *nt) 1829b032f27cSSam Leffler { 1830b032f27cSSam Leffler ieee80211_node_table_reset(nt, NULL); 1831b032f27cSSam Leffler if (nt->nt_keyixmap != NULL) { 1832b032f27cSSam Leffler #ifdef DIAGNOSTIC 1833b032f27cSSam Leffler /* XXX verify all entries are NULL */ 1834b032f27cSSam Leffler int i; 1835b032f27cSSam Leffler for (i = 0; i < nt->nt_keyixmax; i++) 1836b032f27cSSam Leffler if (nt->nt_keyixmap[i] != NULL) 1837b032f27cSSam Leffler printf("%s: %s[%u] still active\n", __func__, 1838b032f27cSSam Leffler nt->nt_name, i); 1839b032f27cSSam Leffler #endif 1840b032f27cSSam Leffler FREE(nt->nt_keyixmap, M_80211_NODE); 1841b032f27cSSam Leffler nt->nt_keyixmap = NULL; 1842b032f27cSSam Leffler } 1843b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK_DESTROY(nt); 1844b032f27cSSam Leffler IEEE80211_NODE_LOCK_DESTROY(nt); 18458a1b9b6aSSam Leffler } 18468a1b9b6aSSam Leffler 18478a1b9b6aSSam Leffler /* 18488a1b9b6aSSam Leffler * Timeout inactive stations and do related housekeeping. 18498a1b9b6aSSam Leffler * Note that we cannot hold the node lock while sending a 18508a1b9b6aSSam Leffler * frame as this would lead to a LOR. Instead we use a 18518a1b9b6aSSam Leffler * generation number to mark nodes that we've scanned and 18528a1b9b6aSSam Leffler * drop the lock and restart a scan if we have to time out 18538a1b9b6aSSam Leffler * a node. Since we are single-threaded by virtue of 1854303ebc3cSSam Leffler * controlling the inactivity timer we can be sure this will 1855303ebc3cSSam Leffler * process each node only once. 1856303ebc3cSSam Leffler */ 18578a1b9b6aSSam Leffler static void 1858b032f27cSSam Leffler ieee80211_timeout_stations(struct ieee80211com *ic) 18591a1e1d21SSam Leffler { 1860b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 1861b032f27cSSam Leffler struct ieee80211vap *vap; 1862303ebc3cSSam Leffler struct ieee80211_node *ni; 1863b032f27cSSam Leffler int gen = 0; 18641a1e1d21SSam Leffler 1865b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 1866a1a50502SSam Leffler gen = ++nt->nt_scangen; 1867303ebc3cSSam Leffler restart: 18688a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 18698a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 1870303ebc3cSSam Leffler if (ni->ni_scangen == gen) /* previously handled */ 1871303ebc3cSSam Leffler continue; 1872303ebc3cSSam Leffler ni->ni_scangen = gen; 18730a915fadSSam Leffler /* 1874ebdda46cSSam Leffler * Ignore entries for which have yet to receive an 1875ebdda46cSSam Leffler * authentication frame. These are transient and 1876ebdda46cSSam Leffler * will be reclaimed when the last reference to them 1877ebdda46cSSam Leffler * goes away (when frame xmits complete). 1878ebdda46cSSam Leffler */ 1879b032f27cSSam Leffler vap = ni->ni_vap; 1880b032f27cSSam Leffler /* 1881b032f27cSSam Leffler * Only process stations when in RUN state. This 1882b032f27cSSam Leffler * insures, for example, that we don't timeout an 1883b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 1884b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 1885b032f27cSSam Leffler * it applies to more than timeout processing. 1886b032f27cSSam Leffler */ 1887b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 1888b032f27cSSam Leffler continue; 1889b032f27cSSam Leffler /* XXX can vap be NULL? */ 1890b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 1891b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 189244b666cdSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 1893ebdda46cSSam Leffler continue; 1894ebdda46cSSam Leffler /* 18958a1b9b6aSSam Leffler * Free fragment if not needed anymore 18968a1b9b6aSSam Leffler * (last fragment older than 1s). 1897b032f27cSSam Leffler * XXX doesn't belong here, move to node_age 18980a915fadSSam Leffler */ 18998a1b9b6aSSam Leffler if (ni->ni_rxfrag[0] != NULL && 19008a1b9b6aSSam Leffler ticks > ni->ni_rxfragstamp + hz) { 19018a1b9b6aSSam Leffler m_freem(ni->ni_rxfrag[0]); 19028a1b9b6aSSam Leffler ni->ni_rxfrag[0] = NULL; 19038a1b9b6aSSam Leffler } 1904c066143cSSam Leffler if (ni->ni_inact > 0) 1905c066143cSSam Leffler ni->ni_inact--; 1906ce647032SSam Leffler /* 1907ce647032SSam Leffler * Special case ourself; we may be idle for extended periods 1908ce647032SSam Leffler * of time and regardless reclaiming our state is wrong. 1909b032f27cSSam Leffler * XXX run ic_node_age 1910ce647032SSam Leffler */ 1911b032f27cSSam Leffler if (ni == vap->iv_bss) 1912ce647032SSam Leffler continue; 1913b032f27cSSam Leffler if (ni->ni_associd != 0 || 1914b032f27cSSam Leffler (vap->iv_opmode == IEEE80211_M_IBSS || 1915b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_AHDEMO)) { 19168a1b9b6aSSam Leffler /* 1917b032f27cSSam Leffler * Age/drain resources held by the station. 19188a1b9b6aSSam Leffler */ 1919b032f27cSSam Leffler ic->ic_node_age(ni); 19208a1b9b6aSSam Leffler /* 19218a1b9b6aSSam Leffler * Probe the station before time it out. We 19228a1b9b6aSSam Leffler * send a null data frame which may not be 19238a1b9b6aSSam Leffler * universally supported by drivers (need it 19248a1b9b6aSSam Leffler * for ps-poll support so it should be...). 192568e8e04eSSam Leffler * 192668e8e04eSSam Leffler * XXX don't probe the station unless we've 192768e8e04eSSam Leffler * received a frame from them (and have 192868e8e04eSSam Leffler * some idea of the rates they are capable 192968e8e04eSSam Leffler * of); this will get fixed more properly 193068e8e04eSSam Leffler * soon with better handling of the rate set. 19318a1b9b6aSSam Leffler */ 1932b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 1933c066143cSSam Leffler (0 < ni->ni_inact && 1934b032f27cSSam Leffler ni->ni_inact <= vap->iv_inact_probe) && 193568e8e04eSSam Leffler ni->ni_rates.rs_nrates != 0) { 1936b032f27cSSam Leffler IEEE80211_NOTE(vap, 1937f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, 1938f66d97f6SSam Leffler ni, "%s", 1939f66d97f6SSam Leffler "probe station due to inactivity"); 194019ad2dd7SSam Leffler /* 194119ad2dd7SSam Leffler * Grab a reference before unlocking the table 194219ad2dd7SSam Leffler * so the node cannot be reclaimed before we 194319ad2dd7SSam Leffler * send the frame. ieee80211_send_nulldata 194419ad2dd7SSam Leffler * understands we've done this and reclaims the 194519ad2dd7SSam Leffler * ref for us as needed. 194619ad2dd7SSam Leffler */ 194719ad2dd7SSam Leffler ieee80211_ref_node(ni); 19488a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 1949f62121ceSSam Leffler ieee80211_send_nulldata(ni); 19508a1b9b6aSSam Leffler /* XXX stat? */ 19518a1b9b6aSSam Leffler goto restart; 19528a1b9b6aSSam Leffler } 19538a1b9b6aSSam Leffler } 1954b032f27cSSam Leffler if ((vap->iv_flags_ext & IEEE80211_FEXT_INACT) && 1955c066143cSSam Leffler ni->ni_inact <= 0) { 1956b032f27cSSam Leffler IEEE80211_NOTE(vap, 1957f66d97f6SSam Leffler IEEE80211_MSG_INACT | IEEE80211_MSG_NODE, ni, 1958f66d97f6SSam Leffler "station timed out due to inactivity " 1959f66d97f6SSam Leffler "(refcnt %u)", ieee80211_node_refcnt(ni)); 19608a1b9b6aSSam Leffler /* 19618a1b9b6aSSam Leffler * Send a deauthenticate frame and drop the station. 19628a1b9b6aSSam Leffler * This is somewhat complicated due to reference counts 19638a1b9b6aSSam Leffler * and locking. At this point a station will typically 19648a1b9b6aSSam Leffler * have a reference count of 1. ieee80211_node_leave 19658a1b9b6aSSam Leffler * will do a "free" of the node which will drop the 19668a1b9b6aSSam Leffler * reference count. But in the meantime a reference 19678a1b9b6aSSam Leffler * wil be held by the deauth frame. The actual reclaim 19688a1b9b6aSSam Leffler * of the node will happen either after the tx is 19698a1b9b6aSSam Leffler * completed or by ieee80211_node_leave. 19708a1b9b6aSSam Leffler * 19718a1b9b6aSSam Leffler * Separately we must drop the node lock before sending 197268e8e04eSSam Leffler * in case the driver takes a lock, as this can result 197368e8e04eSSam Leffler * in a LOR between the node lock and the driver lock. 19748a1b9b6aSSam Leffler */ 19755698ab1aSSam Leffler ieee80211_ref_node(ni); 19768a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 19778a1b9b6aSSam Leffler if (ni->ni_associd != 0) { 1978b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, 19791a1e1d21SSam Leffler IEEE80211_FC0_SUBTYPE_DEAUTH, 19801a1e1d21SSam Leffler IEEE80211_REASON_AUTH_EXPIRE); 19818a1b9b6aSSam Leffler } 1982b032f27cSSam Leffler ieee80211_node_leave(ni); 19835698ab1aSSam Leffler ieee80211_free_node(ni); 1984b032f27cSSam Leffler vap->iv_stats.is_node_timeout++; 1985303ebc3cSSam Leffler goto restart; 1986303ebc3cSSam Leffler } 19871a1e1d21SSam Leffler } 19888a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 19898a1b9b6aSSam Leffler 1990b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 199168e8e04eSSam Leffler } 19928a1b9b6aSSam Leffler 1993b032f27cSSam Leffler /* 1994b032f27cSSam Leffler * Aggressively reclaim resources. This should be used 1995b032f27cSSam Leffler * only in a critical situation to reclaim mbuf resources. 1996b032f27cSSam Leffler */ 1997b032f27cSSam Leffler void 1998b032f27cSSam Leffler ieee80211_drain(struct ieee80211com *ic) 1999b032f27cSSam Leffler { 2000b032f27cSSam Leffler struct ieee80211_node_table *nt = &ic->ic_sta; 2001b032f27cSSam Leffler struct ieee80211vap *vap; 2002b032f27cSSam Leffler struct ieee80211_node *ni; 2003b032f27cSSam Leffler 2004b032f27cSSam Leffler IEEE80211_NODE_LOCK(nt); 2005b032f27cSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 2006b032f27cSSam Leffler /* 2007b032f27cSSam Leffler * Ignore entries for which have yet to receive an 2008b032f27cSSam Leffler * authentication frame. These are transient and 2009b032f27cSSam Leffler * will be reclaimed when the last reference to them 2010b032f27cSSam Leffler * goes away (when frame xmits complete). 2011b032f27cSSam Leffler */ 2012b032f27cSSam Leffler vap = ni->ni_vap; 2013b032f27cSSam Leffler /* 2014b032f27cSSam Leffler * Only process stations when in RUN state. This 2015b032f27cSSam Leffler * insures, for example, that we don't timeout an 2016b032f27cSSam Leffler * inactive station during CAC. Note that CSA state 2017b032f27cSSam Leffler * is actually handled in ieee80211_node_timeout as 2018b032f27cSSam Leffler * it applies to more than timeout processing. 2019b032f27cSSam Leffler */ 2020b032f27cSSam Leffler if (vap->iv_state != IEEE80211_S_RUN) 2021b032f27cSSam Leffler continue; 2022b032f27cSSam Leffler /* XXX can vap be NULL? */ 2023b032f27cSSam Leffler if ((vap->iv_opmode == IEEE80211_M_HOSTAP || 2024b032f27cSSam Leffler vap->iv_opmode == IEEE80211_M_STA) && 2025b032f27cSSam Leffler (ni->ni_flags & IEEE80211_NODE_AREF) == 0) 2026b032f27cSSam Leffler continue; 2027b032f27cSSam Leffler /* 2028b032f27cSSam Leffler * Free fragments. 2029b032f27cSSam Leffler * XXX doesn't belong here, move to node_drain 2030b032f27cSSam Leffler */ 2031b032f27cSSam Leffler if (ni->ni_rxfrag[0] != NULL) { 2032b032f27cSSam Leffler m_freem(ni->ni_rxfrag[0]); 2033b032f27cSSam Leffler ni->ni_rxfrag[0] = NULL; 2034b032f27cSSam Leffler } 2035b032f27cSSam Leffler /* 2036b032f27cSSam Leffler * Drain resources held by the station. 2037b032f27cSSam Leffler */ 2038b032f27cSSam Leffler ic->ic_node_drain(ni); 2039b032f27cSSam Leffler } 2040b032f27cSSam Leffler IEEE80211_NODE_UNLOCK(nt); 2041b032f27cSSam Leffler } 2042b032f27cSSam Leffler 2043b032f27cSSam Leffler /* 2044b032f27cSSam Leffler * Per-ieee80211com inactivity timer callback. 2045b032f27cSSam Leffler */ 204668e8e04eSSam Leffler void 204768e8e04eSSam Leffler ieee80211_node_timeout(void *arg) 204868e8e04eSSam Leffler { 204968e8e04eSSam Leffler struct ieee80211com *ic = arg; 205068e8e04eSSam Leffler 2051b032f27cSSam Leffler /* 2052b032f27cSSam Leffler * Defer timeout processing if a channel switch is pending. 2053b032f27cSSam Leffler * We typically need to be mute so not doing things that 2054b032f27cSSam Leffler * might generate frames is good to handle in one place. 2055b032f27cSSam Leffler * Supressing the station timeout processing may extend the 2056b032f27cSSam Leffler * lifetime of inactive stations (by not decrementing their 2057b032f27cSSam Leffler * idle counters) but this should be ok unless the CSA is 2058b032f27cSSam Leffler * active for an unusually long time. 2059b032f27cSSam Leffler */ 2060b032f27cSSam Leffler if ((ic->ic_flags & IEEE80211_F_CSAPENDING) == 0) { 206168e8e04eSSam Leffler ieee80211_scan_timeout(ic); 2062b032f27cSSam Leffler ieee80211_timeout_stations(ic); 206368e8e04eSSam Leffler 2064b105a069SSam Leffler IEEE80211_LOCK(ic); 2065b105a069SSam Leffler ieee80211_erp_timeout(ic); 20661b6167d2SSam Leffler ieee80211_ht_timeout(ic); 2067b105a069SSam Leffler IEEE80211_UNLOCK(ic); 2068b032f27cSSam Leffler } 206968e8e04eSSam Leffler callout_reset(&ic->ic_inact, IEEE80211_INACT_WAIT*hz, 207068e8e04eSSam Leffler ieee80211_node_timeout, ic); 20711a1e1d21SSam Leffler } 20721a1e1d21SSam Leffler 20731a1e1d21SSam Leffler void 2074b032f27cSSam Leffler ieee80211_iterate_nodes(struct ieee80211_node_table *nt, 2075b032f27cSSam Leffler ieee80211_iter_func *f, void *arg) 20761a1e1d21SSam Leffler { 20771a1e1d21SSam Leffler struct ieee80211_node *ni; 20788a1b9b6aSSam Leffler u_int gen; 20791a1e1d21SSam Leffler 2080b032f27cSSam Leffler IEEE80211_NODE_ITERATE_LOCK(nt); 2081a1a50502SSam Leffler gen = ++nt->nt_scangen; 20828a1b9b6aSSam Leffler restart: 20838a1b9b6aSSam Leffler IEEE80211_NODE_LOCK(nt); 20848a1b9b6aSSam Leffler TAILQ_FOREACH(ni, &nt->nt_node, ni_list) { 20858a1b9b6aSSam Leffler if (ni->ni_scangen != gen) { 20868a1b9b6aSSam Leffler ni->ni_scangen = gen; 20878a1b9b6aSSam Leffler (void) ieee80211_ref_node(ni); 20888a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20891a1e1d21SSam Leffler (*f)(arg, ni); 20908a1b9b6aSSam Leffler ieee80211_free_node(ni); 20918a1b9b6aSSam Leffler goto restart; 20928a1b9b6aSSam Leffler } 20938a1b9b6aSSam Leffler } 20948a1b9b6aSSam Leffler IEEE80211_NODE_UNLOCK(nt); 20958a1b9b6aSSam Leffler 2096b032f27cSSam Leffler IEEE80211_NODE_ITERATE_UNLOCK(nt); 20978a1b9b6aSSam Leffler } 20988a1b9b6aSSam Leffler 20998a1b9b6aSSam Leffler void 21008a1b9b6aSSam Leffler ieee80211_dump_node(struct ieee80211_node_table *nt, struct ieee80211_node *ni) 21018a1b9b6aSSam Leffler { 21028a1b9b6aSSam Leffler printf("0x%p: mac %s refcnt %d\n", ni, 21038a1b9b6aSSam Leffler ether_sprintf(ni->ni_macaddr), ieee80211_node_refcnt(ni)); 21048a1b9b6aSSam Leffler printf("\tscangen %u authmode %u flags 0x%x\n", 21058a1b9b6aSSam Leffler ni->ni_scangen, ni->ni_authmode, ni->ni_flags); 21068a1b9b6aSSam Leffler printf("\tassocid 0x%x txpower %u vlan %u\n", 21078a1b9b6aSSam Leffler ni->ni_associd, ni->ni_txpower, ni->ni_vlan); 21088a1b9b6aSSam Leffler printf("\ttxseq %u rxseq %u fragno %u rxfragstamp %u\n", 2109801df4a5SSam Leffler ni->ni_txseqs[IEEE80211_NONQOS_TID], 2110801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] >> IEEE80211_SEQ_SEQ_SHIFT, 2111801df4a5SSam Leffler ni->ni_rxseqs[IEEE80211_NONQOS_TID] & IEEE80211_SEQ_FRAG_MASK, 21128a1b9b6aSSam Leffler ni->ni_rxfragstamp); 211368e8e04eSSam Leffler printf("\trstamp %u rssi %d noise %d intval %u capinfo 0x%x\n", 2114b032f27cSSam Leffler ni->ni_rstamp, node_getrssi(ni), ni->ni_noise, 211568e8e04eSSam Leffler ni->ni_intval, ni->ni_capinfo); 21168a1b9b6aSSam Leffler printf("\tbssid %s essid \"%.*s\" channel %u:0x%x\n", 21178a1b9b6aSSam Leffler ether_sprintf(ni->ni_bssid), 21188a1b9b6aSSam Leffler ni->ni_esslen, ni->ni_essid, 21198a1b9b6aSSam Leffler ni->ni_chan->ic_freq, ni->ni_chan->ic_flags); 2120b032f27cSSam Leffler printf("\tinact %u txrate %u\n", 2121b032f27cSSam Leffler ni->ni_inact, ni->ni_txrate); 212268e8e04eSSam Leffler printf("\thtcap %x htparam %x htctlchan %u ht2ndchan %u\n", 212368e8e04eSSam Leffler ni->ni_htcap, ni->ni_htparam, 212468e8e04eSSam Leffler ni->ni_htctlchan, ni->ni_ht2ndchan); 212568e8e04eSSam Leffler printf("\thtopmode %x htstbc %x chw %u\n", 212668e8e04eSSam Leffler ni->ni_htopmode, ni->ni_htstbc, ni->ni_chw); 21278a1b9b6aSSam Leffler } 21288a1b9b6aSSam Leffler 21298a1b9b6aSSam Leffler void 21308a1b9b6aSSam Leffler ieee80211_dump_nodes(struct ieee80211_node_table *nt) 21318a1b9b6aSSam Leffler { 21328a1b9b6aSSam Leffler ieee80211_iterate_nodes(nt, 21338a1b9b6aSSam Leffler (ieee80211_iter_func *) ieee80211_dump_node, nt); 21348a1b9b6aSSam Leffler } 21358a1b9b6aSSam Leffler 21362dc4d8dcSSam Leffler static void 21372dc4d8dcSSam Leffler ieee80211_notify_erp_locked(struct ieee80211com *ic) 2138b105a069SSam Leffler { 2139b032f27cSSam Leffler struct ieee80211vap *vap; 2140b032f27cSSam Leffler 2141b032f27cSSam Leffler IEEE80211_LOCK_ASSERT(ic); 2142b032f27cSSam Leffler 2143b032f27cSSam Leffler TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) 2144b032f27cSSam Leffler if (vap->iv_opmode == IEEE80211_M_HOSTAP) 2145b032f27cSSam Leffler ieee80211_beacon_notify(vap, IEEE80211_BEACON_ERP); 2146b105a069SSam Leffler } 2147b105a069SSam Leffler 21482dc4d8dcSSam Leffler void 21492dc4d8dcSSam Leffler ieee80211_notify_erp(struct ieee80211com *ic) 21502dc4d8dcSSam Leffler { 21512dc4d8dcSSam Leffler IEEE80211_LOCK(ic); 21522dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 21532dc4d8dcSSam Leffler IEEE80211_UNLOCK(ic); 21542dc4d8dcSSam Leffler } 21552dc4d8dcSSam Leffler 21568a1b9b6aSSam Leffler /* 21578a1b9b6aSSam Leffler * Handle a station joining an 11g network. 21588a1b9b6aSSam Leffler */ 21598a1b9b6aSSam Leffler static void 2160b032f27cSSam Leffler ieee80211_node_join_11g(struct ieee80211_node *ni) 21618a1b9b6aSSam Leffler { 2162b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 21638a1b9b6aSSam Leffler 21641b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 21651b6167d2SSam Leffler 21668a1b9b6aSSam Leffler /* 21678a1b9b6aSSam Leffler * Station isn't capable of short slot time. Bump 21688a1b9b6aSSam Leffler * the count of long slot time stations and disable 21698a1b9b6aSSam Leffler * use of short slot time. Note that the actual switch 21708a1b9b6aSSam Leffler * over to long slot time use may not occur until the 21718a1b9b6aSSam Leffler * next beacon transmission (per sec. 7.3.1.4 of 11g). 21728a1b9b6aSSam Leffler */ 21738a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 21748a1b9b6aSSam Leffler ic->ic_longslotsta++; 2175b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2176b105a069SSam Leffler "station needs long slot time, count %d", 2177b105a069SSam Leffler ic->ic_longslotsta); 21788a1b9b6aSSam Leffler /* XXX vap's w/ conflicting needs won't work */ 217968e8e04eSSam Leffler if (!IEEE80211_IS_CHAN_108G(ic->ic_bsschan)) { 218068e8e04eSSam Leffler /* 218168e8e04eSSam Leffler * Don't force slot time when switched to turbo 218268e8e04eSSam Leffler * mode as non-ERP stations won't be present; this 218368e8e04eSSam Leffler * need only be done when on the normal G channel. 218468e8e04eSSam Leffler */ 21858a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 0); 21868a1b9b6aSSam Leffler } 218768e8e04eSSam Leffler } 21888a1b9b6aSSam Leffler /* 21898a1b9b6aSSam Leffler * If the new station is not an ERP station 21908a1b9b6aSSam Leffler * then bump the counter and enable protection 21918a1b9b6aSSam Leffler * if configured. 21928a1b9b6aSSam Leffler */ 2193b032f27cSSam Leffler if (!ieee80211_iserp_rateset(&ni->ni_rates)) { 21948a1b9b6aSSam Leffler ic->ic_nonerpsta++; 2195b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2196b105a069SSam Leffler "station is !ERP, %d non-ERP stations associated", 2197b105a069SSam Leffler ic->ic_nonerpsta); 21988a1b9b6aSSam Leffler /* 21998a1b9b6aSSam Leffler * If station does not support short preamble 22008a1b9b6aSSam Leffler * then we must enable use of Barker preamble. 22018a1b9b6aSSam Leffler */ 22028a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_PREAMBLE) == 0) { 2203b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2204b105a069SSam Leffler "%s", "station needs long preamble"); 22058a1b9b6aSSam Leffler ic->ic_flags |= IEEE80211_F_USEBARKER; 22068a1b9b6aSSam Leffler ic->ic_flags &= ~IEEE80211_F_SHPREAMBLE; 22078a1b9b6aSSam Leffler } 2208b105a069SSam Leffler /* 2209b032f27cSSam Leffler * If protection is configured and this is the first 2210b032f27cSSam Leffler * indication we should use protection, enable it. 2211b105a069SSam Leffler */ 2212b105a069SSam Leffler if (ic->ic_protmode != IEEE80211_PROT_NONE && 2213b105a069SSam Leffler ic->ic_nonerpsta == 1 && 2214b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2215b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 2216b105a069SSam Leffler "%s: enable use of protection\n", __func__); 2217b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_USEPROT; 22182dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2219b105a069SSam Leffler } 22208a1b9b6aSSam Leffler } else 22218a1b9b6aSSam Leffler ni->ni_flags |= IEEE80211_NODE_ERP; 22228a1b9b6aSSam Leffler } 22238a1b9b6aSSam Leffler 22248a1b9b6aSSam Leffler void 2225b032f27cSSam Leffler ieee80211_node_join(struct ieee80211_node *ni, int resp) 22268a1b9b6aSSam Leffler { 2227b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2228b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 22298a1b9b6aSSam Leffler int newassoc; 22308a1b9b6aSSam Leffler 22318a1b9b6aSSam Leffler if (ni->ni_associd == 0) { 223268e8e04eSSam Leffler uint16_t aid; 22338a1b9b6aSSam Leffler 2234b032f27cSSam Leffler KASSERT(vap->iv_aid_bitmap != NULL, ("no aid bitmap")); 22358a1b9b6aSSam Leffler /* 22368a1b9b6aSSam Leffler * It would be good to search the bitmap 22378a1b9b6aSSam Leffler * more efficiently, but this will do for now. 22388a1b9b6aSSam Leffler */ 2239b032f27cSSam Leffler for (aid = 1; aid < vap->iv_max_aid; aid++) { 2240b032f27cSSam Leffler if (!IEEE80211_AID_ISSET(vap, aid)) 22418a1b9b6aSSam Leffler break; 22428a1b9b6aSSam Leffler } 2243b032f27cSSam Leffler if (aid >= vap->iv_max_aid) { 224413f91245SSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_TOOMANY); 2245b032f27cSSam Leffler ieee80211_node_leave(ni); 22468a1b9b6aSSam Leffler return; 22478a1b9b6aSSam Leffler } 22488a1b9b6aSSam Leffler ni->ni_associd = aid | 0xc000; 22491b6167d2SSam Leffler ni->ni_jointime = time_uptime; 2250b032f27cSSam Leffler IEEE80211_LOCK(ic); 2251b032f27cSSam Leffler IEEE80211_AID_SET(vap, ni->ni_associd); 2252b032f27cSSam Leffler vap->iv_sta_assoc++; 22538a1b9b6aSSam Leffler ic->ic_sta_assoc++; 22541b6167d2SSam Leffler 22551b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 22561b6167d2SSam Leffler ieee80211_ht_node_join(ni); 225768e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 225868e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2259b032f27cSSam Leffler ieee80211_node_join_11g(ni); 22601b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 22611b6167d2SSam Leffler 22621b6167d2SSam Leffler newassoc = 1; 22638a1b9b6aSSam Leffler } else 22648a1b9b6aSSam Leffler newassoc = 0; 22658a1b9b6aSSam Leffler 2266b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 22678c070d69SSam Leffler "station associated at aid %d: %s preamble, %s slot time%s%s%s%s%s%s%s", 2268b8fcf546SSam Leffler IEEE80211_NODE_AID(ni), 2269b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHPREAMBLE ? "short" : "long", 2270b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_SHSLOT ? "short" : "long", 2271b8fcf546SSam Leffler ic->ic_flags & IEEE80211_F_USEPROT ? ", protection" : "", 227268e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_QOS ? ", QoS" : "", 227368e8e04eSSam Leffler ni->ni_flags & IEEE80211_NODE_HT ? 22740f52b1c4SSam Leffler (ni->ni_chw == 40 ? ", HT40" : ", HT20") : "", 22751b6167d2SSam Leffler ni->ni_flags & IEEE80211_NODE_AMPDU ? " (+AMPDU)" : "", 22768c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_RTS ? " (+SMPS-DYN)" : 22778c070d69SSam Leffler ni->ni_flags & IEEE80211_NODE_MIMO_PS ? " (+SMPS)" : "", 2278b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_FF) ? 227968e8e04eSSam Leffler ", fast-frames" : "", 2280b032f27cSSam Leffler IEEE80211_ATH_CAP(vap, ni, IEEE80211_NODE_TURBOP) ? 228168e8e04eSSam Leffler ", turbo" : "" 2282b8fcf546SSam Leffler ); 22838a1b9b6aSSam Leffler 228401a03542SSam Leffler node_setuptxparms(ni); 22858a1b9b6aSSam Leffler /* give driver a chance to setup state like ni_txrate */ 2286736b3dc3SSam Leffler if (ic->ic_newassoc != NULL) 2287e9962332SSam Leffler ic->ic_newassoc(ni, newassoc); 2288b032f27cSSam Leffler IEEE80211_SEND_MGMT(ni, resp, IEEE80211_STATUS_SUCCESS); 22898a1b9b6aSSam Leffler /* tell the authenticator about new station */ 2290b032f27cSSam Leffler if (vap->iv_auth->ia_node_join != NULL) 2291b032f27cSSam Leffler vap->iv_auth->ia_node_join(ni); 2292b032f27cSSam Leffler ieee80211_notify_node_join(ni, 2293ce8977dfSSam Leffler resp == IEEE80211_FC0_SUBTYPE_ASSOC_RESP); 22948a1b9b6aSSam Leffler } 22958a1b9b6aSSam Leffler 2296b105a069SSam Leffler static void 2297b105a069SSam Leffler disable_protection(struct ieee80211com *ic) 2298b105a069SSam Leffler { 2299b105a069SSam Leffler KASSERT(ic->ic_nonerpsta == 0 && 2300b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0, 2301b105a069SSam Leffler ("%d non ERP stations, flags 0x%x", ic->ic_nonerpsta, 2302b105a069SSam Leffler ic->ic_flags_ext)); 2303b105a069SSam Leffler 2304b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEPROT; 2305b105a069SSam Leffler /* XXX verify mode? */ 2306b105a069SSam Leffler if (ic->ic_caps & IEEE80211_C_SHPREAMBLE) { 2307b105a069SSam Leffler ic->ic_flags |= IEEE80211_F_SHPREAMBLE; 2308b105a069SSam Leffler ic->ic_flags &= ~IEEE80211_F_USEBARKER; 2309b105a069SSam Leffler } 23102dc4d8dcSSam Leffler ieee80211_notify_erp_locked(ic); 2311b105a069SSam Leffler } 2312b105a069SSam Leffler 23138a1b9b6aSSam Leffler /* 23148a1b9b6aSSam Leffler * Handle a station leaving an 11g network. 23158a1b9b6aSSam Leffler */ 23168a1b9b6aSSam Leffler static void 2317b032f27cSSam Leffler ieee80211_node_leave_11g(struct ieee80211_node *ni) 23188a1b9b6aSSam Leffler { 2319b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 23208a1b9b6aSSam Leffler 23211b6167d2SSam Leffler IEEE80211_LOCK_ASSERT(ic); 23221b6167d2SSam Leffler 232368e8e04eSSam Leffler KASSERT(IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan), 2324b032f27cSSam Leffler ("not in 11g, bss %u:0x%x", ic->ic_bsschan->ic_freq, 2325b032f27cSSam Leffler ic->ic_bsschan->ic_flags)); 23268a1b9b6aSSam Leffler 23278a1b9b6aSSam Leffler /* 23288a1b9b6aSSam Leffler * If a long slot station do the slot time bookkeeping. 23298a1b9b6aSSam Leffler */ 23308a1b9b6aSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_SHORT_SLOTTIME) == 0) { 23318a1b9b6aSSam Leffler KASSERT(ic->ic_longslotsta > 0, 23328a1b9b6aSSam Leffler ("bogus long slot station count %d", ic->ic_longslotsta)); 23338a1b9b6aSSam Leffler ic->ic_longslotsta--; 2334b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2335b105a069SSam Leffler "long slot time station leaves, count now %d", 2336b105a069SSam Leffler ic->ic_longslotsta); 23378a1b9b6aSSam Leffler if (ic->ic_longslotsta == 0) { 23388a1b9b6aSSam Leffler /* 23398a1b9b6aSSam Leffler * Re-enable use of short slot time if supported 23408a1b9b6aSSam Leffler * and not operating in IBSS mode (per spec). 23418a1b9b6aSSam Leffler */ 23428a1b9b6aSSam Leffler if ((ic->ic_caps & IEEE80211_C_SHSLOT) && 23438a1b9b6aSSam Leffler ic->ic_opmode != IEEE80211_M_IBSS) { 2344b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, 2345b032f27cSSam Leffler IEEE80211_MSG_ASSOC, 23468a1b9b6aSSam Leffler "%s: re-enable use of short slot time\n", 23478a1b9b6aSSam Leffler __func__); 23488a1b9b6aSSam Leffler ieee80211_set_shortslottime(ic, 1); 23498a1b9b6aSSam Leffler } 23508a1b9b6aSSam Leffler } 23518a1b9b6aSSam Leffler } 23528a1b9b6aSSam Leffler /* 23538a1b9b6aSSam Leffler * If a non-ERP station do the protection-related bookkeeping. 23548a1b9b6aSSam Leffler */ 23558a1b9b6aSSam Leffler if ((ni->ni_flags & IEEE80211_NODE_ERP) == 0) { 23568a1b9b6aSSam Leffler KASSERT(ic->ic_nonerpsta > 0, 23578a1b9b6aSSam Leffler ("bogus non-ERP station count %d", ic->ic_nonerpsta)); 23588a1b9b6aSSam Leffler ic->ic_nonerpsta--; 2359b032f27cSSam Leffler IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_ASSOC, ni, 2360b105a069SSam Leffler "non-ERP station leaves, count now %d%s", ic->ic_nonerpsta, 2361b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) ? 2362b105a069SSam Leffler " (non-ERP sta present)" : ""); 2363b105a069SSam Leffler if (ic->ic_nonerpsta == 0 && 2364b105a069SSam Leffler (ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) == 0) { 2365b032f27cSSam Leffler IEEE80211_DPRINTF(ni->ni_vap, IEEE80211_MSG_ASSOC, 23668a1b9b6aSSam Leffler "%s: disable use of protection\n", __func__); 2367b105a069SSam Leffler disable_protection(ic); 2368b105a069SSam Leffler } 2369b105a069SSam Leffler } 2370b105a069SSam Leffler } 2371b105a069SSam Leffler 2372b105a069SSam Leffler /* 2373b105a069SSam Leffler * Time out presence of an overlapping bss with non-ERP 2374b105a069SSam Leffler * stations. When operating in hostap mode we listen for 2375b105a069SSam Leffler * beacons from other stations and if we identify a non-ERP 2376b105a069SSam Leffler * station is present we enable protection. To identify 2377b105a069SSam Leffler * when all non-ERP stations are gone we time out this 2378b105a069SSam Leffler * condition. 2379b105a069SSam Leffler */ 2380b105a069SSam Leffler static void 2381b105a069SSam Leffler ieee80211_erp_timeout(struct ieee80211com *ic) 2382b105a069SSam Leffler { 2383b105a069SSam Leffler 2384b105a069SSam Leffler IEEE80211_LOCK_ASSERT(ic); 2385b105a069SSam Leffler 2386b105a069SSam Leffler if ((ic->ic_flags_ext & IEEE80211_FEXT_NONERP_PR) && 2387b105a069SSam Leffler time_after(ticks, ic->ic_lastnonerp + IEEE80211_NONERP_PRESENT_AGE)) { 2388b032f27cSSam Leffler #if 0 2389b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC, ni, 2390b032f27cSSam Leffler "%s", "age out non-ERP sta present on channel"); 2391b032f27cSSam Leffler #endif 2392b105a069SSam Leffler ic->ic_flags_ext &= ~IEEE80211_FEXT_NONERP_PR; 2393b105a069SSam Leffler if (ic->ic_nonerpsta == 0) 2394b105a069SSam Leffler disable_protection(ic); 23958a1b9b6aSSam Leffler } 23968a1b9b6aSSam Leffler } 23978a1b9b6aSSam Leffler 23988a1b9b6aSSam Leffler /* 23998a1b9b6aSSam Leffler * Handle bookkeeping for station deauthentication/disassociation 24008a1b9b6aSSam Leffler * when operating as an ap. 24018a1b9b6aSSam Leffler */ 24028a1b9b6aSSam Leffler void 2403b032f27cSSam Leffler ieee80211_node_leave(struct ieee80211_node *ni) 24048a1b9b6aSSam Leffler { 2405b032f27cSSam Leffler struct ieee80211com *ic = ni->ni_ic; 2406b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 240744acc00dSSam Leffler struct ieee80211_node_table *nt = ni->ni_table; 24088a1b9b6aSSam Leffler 2409b032f27cSSam Leffler IEEE80211_NOTE(vap, IEEE80211_MSG_ASSOC | IEEE80211_MSG_DEBUG, ni, 2410b105a069SSam Leffler "station with aid %d leaves", IEEE80211_NODE_AID(ni)); 24118a1b9b6aSSam Leffler 2412b032f27cSSam Leffler KASSERT(vap->iv_opmode != IEEE80211_M_STA, 2413b032f27cSSam Leffler ("unexpected operating mode %u", vap->iv_opmode)); 24148a1b9b6aSSam Leffler /* 24158a1b9b6aSSam Leffler * If node wasn't previously associated all 24168a1b9b6aSSam Leffler * we need to do is reclaim the reference. 24178a1b9b6aSSam Leffler */ 24188a1b9b6aSSam Leffler /* XXX ibss mode bypasses 11g and notification */ 24198a1b9b6aSSam Leffler if (ni->ni_associd == 0) 24208a1b9b6aSSam Leffler goto done; 24218a1b9b6aSSam Leffler /* 24228a1b9b6aSSam Leffler * Tell the authenticator the station is leaving. 24238a1b9b6aSSam Leffler * Note that we must do this before yanking the 24248a1b9b6aSSam Leffler * association id as the authenticator uses the 24258a1b9b6aSSam Leffler * associd to locate it's state block. 24268a1b9b6aSSam Leffler */ 2427b032f27cSSam Leffler if (vap->iv_auth->ia_node_leave != NULL) 2428b032f27cSSam Leffler vap->iv_auth->ia_node_leave(ni); 24291b6167d2SSam Leffler 24301b6167d2SSam Leffler IEEE80211_LOCK(ic); 2431b032f27cSSam Leffler IEEE80211_AID_CLR(vap, ni->ni_associd); 24328a1b9b6aSSam Leffler ni->ni_associd = 0; 2433b032f27cSSam Leffler vap->iv_sta_assoc--; 24348a1b9b6aSSam Leffler ic->ic_sta_assoc--; 24358a1b9b6aSSam Leffler 24361b6167d2SSam Leffler if (IEEE80211_IS_CHAN_HT(ic->ic_bsschan)) 24371b6167d2SSam Leffler ieee80211_ht_node_leave(ni); 243868e8e04eSSam Leffler if (IEEE80211_IS_CHAN_ANYG(ic->ic_bsschan) && 243968e8e04eSSam Leffler IEEE80211_IS_CHAN_FULL(ic->ic_bsschan)) 2440b032f27cSSam Leffler ieee80211_node_leave_11g(ni); 24411b6167d2SSam Leffler IEEE80211_UNLOCK(ic); 24428a1b9b6aSSam Leffler /* 24438a1b9b6aSSam Leffler * Cleanup station state. In particular clear various 24448a1b9b6aSSam Leffler * state that might otherwise be reused if the node 24458a1b9b6aSSam Leffler * is reused before the reference count goes to zero 24468a1b9b6aSSam Leffler * (and memory is reclaimed). 24478a1b9b6aSSam Leffler */ 2448b032f27cSSam Leffler ieee80211_sta_leave(ni); 24498a1b9b6aSSam Leffler done: 245044acc00dSSam Leffler /* 245144acc00dSSam Leffler * Remove the node from any table it's recorded in and 245244acc00dSSam Leffler * drop the caller's reference. Removal from the table 245344acc00dSSam Leffler * is important to insure the node is not reprocessed 245444acc00dSSam Leffler * for inactivity. 245544acc00dSSam Leffler */ 245644acc00dSSam Leffler if (nt != NULL) { 245744acc00dSSam Leffler IEEE80211_NODE_LOCK(nt); 245844acc00dSSam Leffler node_reclaim(nt, ni); 245944acc00dSSam Leffler IEEE80211_NODE_UNLOCK(nt); 246044acc00dSSam Leffler } else 24618a1b9b6aSSam Leffler ieee80211_free_node(ni); 24628a1b9b6aSSam Leffler } 24638a1b9b6aSSam Leffler 2464b032f27cSSam Leffler struct rssiinfo { 2465b032f27cSSam Leffler struct ieee80211vap *vap; 2466b032f27cSSam Leffler int rssi_samples; 2467b032f27cSSam Leffler uint32_t rssi_total; 2468b032f27cSSam Leffler }; 2469b032f27cSSam Leffler 2470b032f27cSSam Leffler static void 2471b032f27cSSam Leffler get_hostap_rssi(void *arg, struct ieee80211_node *ni) 2472b032f27cSSam Leffler { 2473b032f27cSSam Leffler struct rssiinfo *info = arg; 2474b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2475b032f27cSSam Leffler int8_t rssi; 2476b032f27cSSam Leffler 2477b032f27cSSam Leffler if (info->vap != vap) 2478b032f27cSSam Leffler return; 2479b032f27cSSam Leffler /* only associated stations */ 2480b032f27cSSam Leffler if (ni->ni_associd == 0) 2481b032f27cSSam Leffler return; 2482b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2483b032f27cSSam Leffler if (rssi != 0) { 2484b032f27cSSam Leffler info->rssi_samples++; 2485b032f27cSSam Leffler info->rssi_total += rssi; 2486b032f27cSSam Leffler } 2487b032f27cSSam Leffler } 2488b032f27cSSam Leffler 2489b032f27cSSam Leffler static void 2490b032f27cSSam Leffler get_adhoc_rssi(void *arg, struct ieee80211_node *ni) 2491b032f27cSSam Leffler { 2492b032f27cSSam Leffler struct rssiinfo *info = arg; 2493b032f27cSSam Leffler struct ieee80211vap *vap = ni->ni_vap; 2494b032f27cSSam Leffler int8_t rssi; 2495b032f27cSSam Leffler 2496b032f27cSSam Leffler if (info->vap != vap) 2497b032f27cSSam Leffler return; 2498b032f27cSSam Leffler /* only neighbors */ 2499b032f27cSSam Leffler /* XXX check bssid */ 2500b032f27cSSam Leffler if ((ni->ni_capinfo & IEEE80211_CAPINFO_IBSS) == 0) 2501b032f27cSSam Leffler return; 2502b032f27cSSam Leffler rssi = vap->iv_ic->ic_node_getrssi(ni); 2503b032f27cSSam Leffler if (rssi != 0) { 2504b032f27cSSam Leffler info->rssi_samples++; 2505b032f27cSSam Leffler info->rssi_total += rssi; 2506b032f27cSSam Leffler } 2507b032f27cSSam Leffler } 2508b032f27cSSam Leffler 250968e8e04eSSam Leffler int8_t 2510b032f27cSSam Leffler ieee80211_getrssi(struct ieee80211vap *vap) 25118a1b9b6aSSam Leffler { 25128a1b9b6aSSam Leffler #define NZ(x) ((x) == 0 ? 1 : (x)) 2513b032f27cSSam Leffler struct ieee80211com *ic = vap->iv_ic; 2514b032f27cSSam Leffler struct rssiinfo info; 25158a1b9b6aSSam Leffler 2516b032f27cSSam Leffler info.rssi_total = 0; 2517b032f27cSSam Leffler info.rssi_samples = 0; 2518b032f27cSSam Leffler info.vap = vap; 2519b032f27cSSam Leffler switch (vap->iv_opmode) { 25208a1b9b6aSSam Leffler case IEEE80211_M_IBSS: /* average of all ibss neighbors */ 25218a1b9b6aSSam Leffler case IEEE80211_M_AHDEMO: /* average of all neighbors */ 2522b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_adhoc_rssi, &info); 2523b032f27cSSam Leffler break; 25248a1b9b6aSSam Leffler case IEEE80211_M_HOSTAP: /* average of all associated stations */ 2525b032f27cSSam Leffler ieee80211_iterate_nodes(&ic->ic_sta, get_hostap_rssi, &info); 25268a1b9b6aSSam Leffler break; 25278a1b9b6aSSam Leffler case IEEE80211_M_MONITOR: /* XXX */ 25288a1b9b6aSSam Leffler case IEEE80211_M_STA: /* use stats from associated ap */ 25298a1b9b6aSSam Leffler default: 2530b032f27cSSam Leffler if (vap->iv_bss != NULL) 2531b032f27cSSam Leffler info.rssi_total = ic->ic_node_getrssi(vap->iv_bss); 2532b032f27cSSam Leffler info.rssi_samples = 1; 25338a1b9b6aSSam Leffler break; 25348a1b9b6aSSam Leffler } 2535b032f27cSSam Leffler return info.rssi_total / NZ(info.rssi_samples); 25368a1b9b6aSSam Leffler #undef NZ 25378a1b9b6aSSam Leffler } 25388a1b9b6aSSam Leffler 253968e8e04eSSam Leffler void 2540b032f27cSSam Leffler ieee80211_getsignal(struct ieee80211vap *vap, int8_t *rssi, int8_t *noise) 25418a1b9b6aSSam Leffler { 25428a1b9b6aSSam Leffler 2543b032f27cSSam Leffler if (vap->iv_bss == NULL) /* NB: shouldn't happen */ 254468e8e04eSSam Leffler return; 2545b032f27cSSam Leffler vap->iv_ic->ic_node_getsignal(vap->iv_bss, rssi, noise); 254668e8e04eSSam Leffler /* for non-station mode return avg'd rssi accounting */ 2547b032f27cSSam Leffler if (vap->iv_opmode != IEEE80211_M_STA) 2548b032f27cSSam Leffler *rssi = ieee80211_getrssi(vap); 25498a1b9b6aSSam Leffler } 2550