Linux Audio

Check our new training course

Loading...
v4.10.11
 
   1/*
   2 * Copyright (c) 2008, 2009 open80211s Ltd.
 
   3 * Authors:    Luis Carlos Cobo <luisca@cozybit.com>
   4 * 	       Javier Cardona <javier@cozybit.com>
   5 *
   6 * This program is free software; you can redistribute it and/or modify
   7 * it under the terms of the GNU General Public License version 2 as
   8 * published by the Free Software Foundation.
   9 */
  10
  11#include <linux/slab.h>
  12#include <asm/unaligned.h>
  13#include "ieee80211_i.h"
  14#include "mesh.h"
  15#include "driver-ops.h"
  16
  17static int mesh_allocated;
  18static struct kmem_cache *rm_cache;
  19
  20bool mesh_action_is_path_sel(struct ieee80211_mgmt *mgmt)
  21{
  22	return (mgmt->u.action.u.mesh_action.action_code ==
  23			WLAN_MESH_ACTION_HWMP_PATH_SELECTION);
  24}
  25
  26void ieee80211s_init(void)
  27{
  28	mesh_allocated = 1;
  29	rm_cache = kmem_cache_create("mesh_rmc", sizeof(struct rmc_entry),
  30				     0, 0, NULL);
  31}
  32
  33void ieee80211s_stop(void)
  34{
  35	if (!mesh_allocated)
  36		return;
  37	kmem_cache_destroy(rm_cache);
  38}
  39
  40static void ieee80211_mesh_housekeeping_timer(unsigned long data)
  41{
  42	struct ieee80211_sub_if_data *sdata = (void *) data;
 
  43	struct ieee80211_local *local = sdata->local;
  44	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
  45
  46	set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
  47
  48	ieee80211_queue_work(&local->hw, &sdata->work);
  49}
  50
  51/**
  52 * mesh_matches_local - check if the config of a mesh point matches ours
  53 *
  54 * @sdata: local mesh subif
  55 * @ie: information elements of a management frame from the mesh peer
  56 *
  57 * This function checks if the mesh configuration of a mesh point matches the
  58 * local mesh configuration, i.e. if both nodes belong to the same mesh network.
  59 */
  60bool mesh_matches_local(struct ieee80211_sub_if_data *sdata,
  61			struct ieee802_11_elems *ie)
  62{
  63	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
  64	u32 basic_rates = 0;
  65	struct cfg80211_chan_def sta_chan_def;
 
  66
  67	/*
  68	 * As support for each feature is added, check for matching
  69	 * - On mesh config capabilities
  70	 *   - Power Save Support En
  71	 *   - Sync support enabled
  72	 *   - Sync support active
  73	 *   - Sync support required from peer
  74	 *   - MDA enabled
  75	 * - Power management control on fc
  76	 */
  77	if (!(ifmsh->mesh_id_len == ie->mesh_id_len &&
  78	     memcmp(ifmsh->mesh_id, ie->mesh_id, ie->mesh_id_len) == 0 &&
  79	     (ifmsh->mesh_pp_id == ie->mesh_config->meshconf_psel) &&
  80	     (ifmsh->mesh_pm_id == ie->mesh_config->meshconf_pmetric) &&
  81	     (ifmsh->mesh_cc_id == ie->mesh_config->meshconf_congest) &&
  82	     (ifmsh->mesh_sp_id == ie->mesh_config->meshconf_synch) &&
  83	     (ifmsh->mesh_auth_id == ie->mesh_config->meshconf_auth)))
  84		return false;
  85
  86	ieee80211_sta_get_rates(sdata, ie, ieee80211_get_sdata_band(sdata),
 
 
 
 
  87				&basic_rates);
  88
  89	if (sdata->vif.bss_conf.basic_rates != basic_rates)
  90		return false;
  91
  92	cfg80211_chandef_create(&sta_chan_def, sdata->vif.bss_conf.chandef.chan,
  93				NL80211_CHAN_NO_HT);
  94	ieee80211_chandef_ht_oper(ie->ht_operation, &sta_chan_def);
  95	ieee80211_chandef_vht_oper(ie->vht_operation, &sta_chan_def);
 
 
  96
  97	if (!cfg80211_chandef_compatible(&sdata->vif.bss_conf.chandef,
  98					 &sta_chan_def))
  99		return false;
 100
 101	return true;
 102}
 103
 104/**
 105 * mesh_peer_accepts_plinks - check if an mp is willing to establish peer links
 106 *
 107 * @ie: information elements of a management frame from the mesh peer
 108 */
 109bool mesh_peer_accepts_plinks(struct ieee802_11_elems *ie)
 110{
 111	return (ie->mesh_config->meshconf_cap &
 112			IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS) != 0;
 113}
 114
 115/**
 116 * mesh_accept_plinks_update - update accepting_plink in local mesh beacons
 117 *
 118 * @sdata: mesh interface in which mesh beacons are going to be updated
 119 *
 120 * Returns: beacon changed flag if the beacon content changed.
 121 */
 122u32 mesh_accept_plinks_update(struct ieee80211_sub_if_data *sdata)
 123{
 124	bool free_plinks;
 125	u32 changed = 0;
 126
 127	/* In case mesh_plink_free_count > 0 and mesh_plinktbl_capacity == 0,
 128	 * the mesh interface might be able to establish plinks with peers that
 129	 * are already on the table but are not on PLINK_ESTAB state. However,
 130	 * in general the mesh interface is not accepting peer link requests
 131	 * from new peers, and that must be reflected in the beacon
 132	 */
 133	free_plinks = mesh_plink_availables(sdata);
 134
 135	if (free_plinks != sdata->u.mesh.accepting_plinks) {
 136		sdata->u.mesh.accepting_plinks = free_plinks;
 137		changed = BSS_CHANGED_BEACON;
 138	}
 139
 140	return changed;
 141}
 142
 143/*
 144 * mesh_sta_cleanup - clean up any mesh sta state
 145 *
 146 * @sta: mesh sta to clean up.
 147 */
 148void mesh_sta_cleanup(struct sta_info *sta)
 149{
 150	struct ieee80211_sub_if_data *sdata = sta->sdata;
 151	u32 changed = mesh_plink_deactivate(sta);
 152
 153	if (changed)
 154		ieee80211_mbss_info_change_notify(sdata, changed);
 155}
 156
 157int mesh_rmc_init(struct ieee80211_sub_if_data *sdata)
 158{
 159	int i;
 160
 161	sdata->u.mesh.rmc = kmalloc(sizeof(struct mesh_rmc), GFP_KERNEL);
 162	if (!sdata->u.mesh.rmc)
 163		return -ENOMEM;
 164	sdata->u.mesh.rmc->idx_mask = RMC_BUCKETS - 1;
 165	for (i = 0; i < RMC_BUCKETS; i++)
 166		INIT_HLIST_HEAD(&sdata->u.mesh.rmc->bucket[i]);
 167	return 0;
 168}
 169
 170void mesh_rmc_free(struct ieee80211_sub_if_data *sdata)
 171{
 172	struct mesh_rmc *rmc = sdata->u.mesh.rmc;
 173	struct rmc_entry *p;
 174	struct hlist_node *n;
 175	int i;
 176
 177	if (!sdata->u.mesh.rmc)
 178		return;
 179
 180	for (i = 0; i < RMC_BUCKETS; i++) {
 181		hlist_for_each_entry_safe(p, n, &rmc->bucket[i], list) {
 182			hlist_del(&p->list);
 183			kmem_cache_free(rm_cache, p);
 184		}
 185	}
 186
 187	kfree(rmc);
 188	sdata->u.mesh.rmc = NULL;
 189}
 190
 191/**
 192 * mesh_rmc_check - Check frame in recent multicast cache and add if absent.
 193 *
 194 * @sdata:	interface
 195 * @sa:		source address
 196 * @mesh_hdr:	mesh_header
 197 *
 198 * Returns: 0 if the frame is not in the cache, nonzero otherwise.
 199 *
 200 * Checks using the source address and the mesh sequence number if we have
 201 * received this frame lately. If the frame is not in the cache, it is added to
 202 * it.
 203 */
 204int mesh_rmc_check(struct ieee80211_sub_if_data *sdata,
 205		   const u8 *sa, struct ieee80211s_hdr *mesh_hdr)
 206{
 207	struct mesh_rmc *rmc = sdata->u.mesh.rmc;
 208	u32 seqnum = 0;
 209	int entries = 0;
 210	u8 idx;
 211	struct rmc_entry *p;
 212	struct hlist_node *n;
 213
 214	if (!rmc)
 215		return -1;
 216
 217	/* Don't care about endianness since only match matters */
 218	memcpy(&seqnum, &mesh_hdr->seqnum, sizeof(mesh_hdr->seqnum));
 219	idx = le32_to_cpu(mesh_hdr->seqnum) & rmc->idx_mask;
 220	hlist_for_each_entry_safe(p, n, &rmc->bucket[idx], list) {
 221		++entries;
 222		if (time_after(jiffies, p->exp_time) ||
 223		    entries == RMC_QUEUE_MAX_LEN) {
 224			hlist_del(&p->list);
 225			kmem_cache_free(rm_cache, p);
 226			--entries;
 227		} else if ((seqnum == p->seqnum) && ether_addr_equal(sa, p->sa))
 228			return -1;
 229	}
 230
 231	p = kmem_cache_alloc(rm_cache, GFP_ATOMIC);
 232	if (!p)
 233		return 0;
 234
 235	p->seqnum = seqnum;
 236	p->exp_time = jiffies + RMC_TIMEOUT;
 237	memcpy(p->sa, sa, ETH_ALEN);
 238	hlist_add_head(&p->list, &rmc->bucket[idx]);
 239	return 0;
 240}
 241
 242int mesh_add_meshconf_ie(struct ieee80211_sub_if_data *sdata,
 243			 struct sk_buff *skb)
 244{
 245	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 246	u8 *pos, neighbors;
 247	u8 meshconf_len = sizeof(struct ieee80211_meshconf_ie);
 
 
 
 248
 249	if (skb_tailroom(skb) < 2 + meshconf_len)
 250		return -ENOMEM;
 251
 252	pos = skb_put(skb, 2 + meshconf_len);
 253	*pos++ = WLAN_EID_MESH_CONFIG;
 254	*pos++ = meshconf_len;
 255
 256	/* save a pointer for quick updates in pre-tbtt */
 257	ifmsh->meshconf_offset = pos - skb->data;
 258
 259	/* Active path selection protocol ID */
 260	*pos++ = ifmsh->mesh_pp_id;
 261	/* Active path selection metric ID   */
 262	*pos++ = ifmsh->mesh_pm_id;
 263	/* Congestion control mode identifier */
 264	*pos++ = ifmsh->mesh_cc_id;
 265	/* Synchronization protocol identifier */
 266	*pos++ = ifmsh->mesh_sp_id;
 267	/* Authentication Protocol identifier */
 268	*pos++ = ifmsh->mesh_auth_id;
 269	/* Mesh Formation Info - number of neighbors */
 270	neighbors = atomic_read(&ifmsh->estab_plinks);
 271	neighbors = min_t(int, neighbors, IEEE80211_MAX_MESH_PEERINGS);
 272	*pos++ = neighbors << 1;
 273	/* Mesh capability */
 274	*pos = 0x00;
 275	*pos |= ifmsh->mshcfg.dot11MeshForwarding ?
 276			IEEE80211_MESHCONF_CAPAB_FORWARDING : 0x00;
 277	*pos |= ifmsh->accepting_plinks ?
 278			IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS : 0x00;
 279	/* Mesh PS mode. See IEEE802.11-2012 8.4.2.100.8 */
 280	*pos |= ifmsh->ps_peers_deep_sleep ?
 281			IEEE80211_MESHCONF_CAPAB_POWER_SAVE_LEVEL : 0x00;
 282	*pos++ |= ifmsh->adjusting_tbtt ?
 283			IEEE80211_MESHCONF_CAPAB_TBTT_ADJUSTING : 0x00;
 284	*pos++ = 0x00;
 285
 286	return 0;
 287}
 288
 289int mesh_add_meshid_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
 290{
 291	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 292	u8 *pos;
 293
 294	if (skb_tailroom(skb) < 2 + ifmsh->mesh_id_len)
 295		return -ENOMEM;
 296
 297	pos = skb_put(skb, 2 + ifmsh->mesh_id_len);
 298	*pos++ = WLAN_EID_MESH_ID;
 299	*pos++ = ifmsh->mesh_id_len;
 300	if (ifmsh->mesh_id_len)
 301		memcpy(pos, ifmsh->mesh_id, ifmsh->mesh_id_len);
 302
 303	return 0;
 304}
 305
 306static int mesh_add_awake_window_ie(struct ieee80211_sub_if_data *sdata,
 307				    struct sk_buff *skb)
 308{
 309	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 310	u8 *pos;
 311
 312	/* see IEEE802.11-2012 13.14.6 */
 313	if (ifmsh->ps_peers_light_sleep == 0 &&
 314	    ifmsh->ps_peers_deep_sleep == 0 &&
 315	    ifmsh->nonpeer_pm == NL80211_MESH_POWER_ACTIVE)
 316		return 0;
 317
 318	if (skb_tailroom(skb) < 4)
 319		return -ENOMEM;
 320
 321	pos = skb_put(skb, 2 + 2);
 322	*pos++ = WLAN_EID_MESH_AWAKE_WINDOW;
 323	*pos++ = 2;
 324	put_unaligned_le16(ifmsh->mshcfg.dot11MeshAwakeWindowDuration, pos);
 325
 326	return 0;
 327}
 328
 329int mesh_add_vendor_ies(struct ieee80211_sub_if_data *sdata,
 330			struct sk_buff *skb)
 331{
 332	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 333	u8 offset, len;
 334	const u8 *data;
 335
 336	if (!ifmsh->ie || !ifmsh->ie_len)
 337		return 0;
 338
 339	/* fast-forward to vendor IEs */
 340	offset = ieee80211_ie_split_vendor(ifmsh->ie, ifmsh->ie_len, 0);
 341
 342	if (offset < ifmsh->ie_len) {
 343		len = ifmsh->ie_len - offset;
 344		data = ifmsh->ie + offset;
 345		if (skb_tailroom(skb) < len)
 346			return -ENOMEM;
 347		memcpy(skb_put(skb, len), data, len);
 348	}
 349
 350	return 0;
 351}
 352
 353int mesh_add_rsn_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
 354{
 355	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 356	u8 len = 0;
 357	const u8 *data;
 358
 359	if (!ifmsh->ie || !ifmsh->ie_len)
 360		return 0;
 361
 362	/* find RSN IE */
 363	data = cfg80211_find_ie(WLAN_EID_RSN, ifmsh->ie, ifmsh->ie_len);
 364	if (!data)
 365		return 0;
 366
 367	len = data[1] + 2;
 368
 369	if (skb_tailroom(skb) < len)
 370		return -ENOMEM;
 371	memcpy(skb_put(skb, len), data, len);
 372
 373	return 0;
 374}
 375
 376static int mesh_add_ds_params_ie(struct ieee80211_sub_if_data *sdata,
 377				 struct sk_buff *skb)
 378{
 379	struct ieee80211_chanctx_conf *chanctx_conf;
 380	struct ieee80211_channel *chan;
 381	u8 *pos;
 382
 383	if (skb_tailroom(skb) < 3)
 384		return -ENOMEM;
 385
 386	rcu_read_lock();
 387	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 388	if (WARN_ON(!chanctx_conf)) {
 389		rcu_read_unlock();
 390		return -EINVAL;
 391	}
 392	chan = chanctx_conf->def.chan;
 393	rcu_read_unlock();
 394
 395	pos = skb_put(skb, 2 + 1);
 396	*pos++ = WLAN_EID_DS_PARAMS;
 397	*pos++ = 1;
 398	*pos++ = ieee80211_frequency_to_channel(chan->center_freq);
 399
 400	return 0;
 401}
 402
 403int mesh_add_ht_cap_ie(struct ieee80211_sub_if_data *sdata,
 404		       struct sk_buff *skb)
 405{
 406	struct ieee80211_local *local = sdata->local;
 407	enum nl80211_band band = ieee80211_get_sdata_band(sdata);
 408	struct ieee80211_supported_band *sband;
 409	u8 *pos;
 410
 411	sband = local->hw.wiphy->bands[band];
 
 
 
 412	if (!sband->ht_cap.ht_supported ||
 413	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 414	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 415	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 416		return 0;
 417
 418	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_cap))
 419		return -ENOMEM;
 420
 421	pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_cap));
 422	ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, sband->ht_cap.cap);
 423
 424	return 0;
 425}
 426
 427int mesh_add_ht_oper_ie(struct ieee80211_sub_if_data *sdata,
 428			struct sk_buff *skb)
 429{
 430	struct ieee80211_local *local = sdata->local;
 431	struct ieee80211_chanctx_conf *chanctx_conf;
 432	struct ieee80211_channel *channel;
 433	struct ieee80211_supported_band *sband;
 434	struct ieee80211_sta_ht_cap *ht_cap;
 435	u8 *pos;
 436
 437	rcu_read_lock();
 438	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 439	if (WARN_ON(!chanctx_conf)) {
 440		rcu_read_unlock();
 441		return -EINVAL;
 442	}
 443	channel = chanctx_conf->def.chan;
 444	rcu_read_unlock();
 445
 446	sband = local->hw.wiphy->bands[channel->band];
 447	ht_cap = &sband->ht_cap;
 448
 449	if (!ht_cap->ht_supported ||
 450	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 451	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 452	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 453		return 0;
 454
 455	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_operation))
 456		return -ENOMEM;
 457
 458	pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_operation));
 459	ieee80211_ie_build_ht_oper(pos, ht_cap, &sdata->vif.bss_conf.chandef,
 460				   sdata->vif.bss_conf.ht_operation_mode,
 461				   false);
 462
 463	return 0;
 464}
 465
 466int mesh_add_vht_cap_ie(struct ieee80211_sub_if_data *sdata,
 467			struct sk_buff *skb)
 468{
 469	struct ieee80211_local *local = sdata->local;
 470	enum nl80211_band band = ieee80211_get_sdata_band(sdata);
 471	struct ieee80211_supported_band *sband;
 472	u8 *pos;
 473
 474	sband = local->hw.wiphy->bands[band];
 
 
 
 475	if (!sband->vht_cap.vht_supported ||
 476	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 477	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 478	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 479		return 0;
 480
 481	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_cap))
 482		return -ENOMEM;
 483
 484	pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_cap));
 485	ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, sband->vht_cap.cap);
 486
 487	return 0;
 488}
 489
 490int mesh_add_vht_oper_ie(struct ieee80211_sub_if_data *sdata,
 491			 struct sk_buff *skb)
 492{
 493	struct ieee80211_local *local = sdata->local;
 494	struct ieee80211_chanctx_conf *chanctx_conf;
 495	struct ieee80211_channel *channel;
 496	struct ieee80211_supported_band *sband;
 497	struct ieee80211_sta_vht_cap *vht_cap;
 498	u8 *pos;
 499
 500	rcu_read_lock();
 501	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 502	if (WARN_ON(!chanctx_conf)) {
 503		rcu_read_unlock();
 504		return -EINVAL;
 505	}
 506	channel = chanctx_conf->def.chan;
 507	rcu_read_unlock();
 508
 509	sband = local->hw.wiphy->bands[channel->band];
 510	vht_cap = &sband->vht_cap;
 511
 512	if (!vht_cap->vht_supported ||
 513	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 514	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 515	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 516		return 0;
 517
 518	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_operation))
 519		return -ENOMEM;
 520
 521	pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_operation));
 522	ieee80211_ie_build_vht_oper(pos, vht_cap,
 523				    &sdata->vif.bss_conf.chandef);
 524
 525	return 0;
 526}
 527
 528static void ieee80211_mesh_path_timer(unsigned long data)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 529{
 530	struct ieee80211_sub_if_data *sdata =
 531		(struct ieee80211_sub_if_data *) data;
 532
 533	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 534}
 535
 536static void ieee80211_mesh_path_root_timer(unsigned long data)
 537{
 538	struct ieee80211_sub_if_data *sdata =
 539		(struct ieee80211_sub_if_data *) data;
 540	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 541
 542	set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 543
 544	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 545}
 546
 547void ieee80211_mesh_root_setup(struct ieee80211_if_mesh *ifmsh)
 548{
 549	if (ifmsh->mshcfg.dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)
 550		set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 551	else {
 552		clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 553		/* stop running timer */
 554		del_timer_sync(&ifmsh->mesh_path_root_timer);
 555	}
 556}
 557
 558/**
 559 * ieee80211_fill_mesh_addresses - fill addresses of a locally originated mesh frame
 560 * @hdr:	802.11 frame header
 561 * @fc:		frame control field
 562 * @meshda:	destination address in the mesh
 563 * @meshsa:	source address address in the mesh.  Same as TA, as frame is
 564 *              locally originated.
 565 *
 566 * Return the length of the 802.11 (does not include a mesh control header)
 567 */
 568int ieee80211_fill_mesh_addresses(struct ieee80211_hdr *hdr, __le16 *fc,
 569				  const u8 *meshda, const u8 *meshsa)
 570{
 571	if (is_multicast_ether_addr(meshda)) {
 572		*fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
 573		/* DA TA SA */
 574		memcpy(hdr->addr1, meshda, ETH_ALEN);
 575		memcpy(hdr->addr2, meshsa, ETH_ALEN);
 576		memcpy(hdr->addr3, meshsa, ETH_ALEN);
 577		return 24;
 578	} else {
 579		*fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS | IEEE80211_FCTL_TODS);
 580		/* RA TA DA SA */
 581		eth_zero_addr(hdr->addr1);   /* RA is resolved later */
 582		memcpy(hdr->addr2, meshsa, ETH_ALEN);
 583		memcpy(hdr->addr3, meshda, ETH_ALEN);
 584		memcpy(hdr->addr4, meshsa, ETH_ALEN);
 585		return 30;
 586	}
 587}
 588
 589/**
 590 * ieee80211_new_mesh_header - create a new mesh header
 591 * @sdata:	mesh interface to be used
 592 * @meshhdr:    uninitialized mesh header
 593 * @addr4or5:   1st address in the ae header, which may correspond to address 4
 594 *              (if addr6 is NULL) or address 5 (if addr6 is present). It may
 595 *              be NULL.
 596 * @addr6:	2nd address in the ae header, which corresponds to addr6 of the
 597 *              mesh frame
 598 *
 599 * Return the header length.
 600 */
 601unsigned int ieee80211_new_mesh_header(struct ieee80211_sub_if_data *sdata,
 602				       struct ieee80211s_hdr *meshhdr,
 603				       const char *addr4or5, const char *addr6)
 604{
 605	if (WARN_ON(!addr4or5 && addr6))
 606		return 0;
 607
 608	memset(meshhdr, 0, sizeof(*meshhdr));
 609
 610	meshhdr->ttl = sdata->u.mesh.mshcfg.dot11MeshTTL;
 611
 612	/* FIXME: racy -- TX on multiple queues can be concurrent */
 613	put_unaligned(cpu_to_le32(sdata->u.mesh.mesh_seqnum), &meshhdr->seqnum);
 614	sdata->u.mesh.mesh_seqnum++;
 615
 616	if (addr4or5 && !addr6) {
 617		meshhdr->flags |= MESH_FLAGS_AE_A4;
 618		memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
 619		return 2 * ETH_ALEN;
 620	} else if (addr4or5 && addr6) {
 621		meshhdr->flags |= MESH_FLAGS_AE_A5_A6;
 622		memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
 623		memcpy(meshhdr->eaddr2, addr6, ETH_ALEN);
 624		return 3 * ETH_ALEN;
 625	}
 626
 627	return ETH_ALEN;
 628}
 629
 630static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata)
 631{
 632	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 633	u32 changed;
 634
 635	if (ifmsh->mshcfg.plink_timeout > 0)
 636		ieee80211_sta_expire(sdata, ifmsh->mshcfg.plink_timeout * HZ);
 637	mesh_path_expire(sdata);
 638
 639	changed = mesh_accept_plinks_update(sdata);
 640	ieee80211_mbss_info_change_notify(sdata, changed);
 641
 642	mod_timer(&ifmsh->housekeeping_timer,
 643		  round_jiffies(jiffies +
 644				IEEE80211_MESH_HOUSEKEEPING_INTERVAL));
 645}
 646
 647static void ieee80211_mesh_rootpath(struct ieee80211_sub_if_data *sdata)
 648{
 649	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 650	u32 interval;
 651
 652	mesh_path_tx_root_frame(sdata);
 653
 654	if (ifmsh->mshcfg.dot11MeshHWMPRootMode == IEEE80211_PROACTIVE_RANN)
 655		interval = ifmsh->mshcfg.dot11MeshHWMPRannInterval;
 656	else
 657		interval = ifmsh->mshcfg.dot11MeshHWMProotInterval;
 658
 659	mod_timer(&ifmsh->mesh_path_root_timer,
 660		  round_jiffies(TU_TO_EXP_TIME(interval)));
 661}
 662
 663static int
 664ieee80211_mesh_build_beacon(struct ieee80211_if_mesh *ifmsh)
 665{
 666	struct beacon_data *bcn;
 667	int head_len, tail_len;
 668	struct sk_buff *skb;
 669	struct ieee80211_mgmt *mgmt;
 670	struct ieee80211_chanctx_conf *chanctx_conf;
 671	struct mesh_csa_settings *csa;
 672	enum nl80211_band band;
 
 673	u8 *pos;
 674	struct ieee80211_sub_if_data *sdata;
 675	int hdr_len = offsetof(struct ieee80211_mgmt, u.beacon) +
 676		      sizeof(mgmt->u.beacon);
 677
 678	sdata = container_of(ifmsh, struct ieee80211_sub_if_data, u.mesh);
 679	rcu_read_lock();
 680	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 681	band = chanctx_conf->def.chan->band;
 682	rcu_read_unlock();
 683
 
 
 684	head_len = hdr_len +
 685		   2 + /* NULL SSID */
 686		   /* Channel Switch Announcement */
 687		   2 + sizeof(struct ieee80211_channel_sw_ie) +
 688		   /* Mesh Channel Swith Parameters */
 689		   2 + sizeof(struct ieee80211_mesh_chansw_params_ie) +
 
 
 
 690		   2 + 8 + /* supported rates */
 691		   2 + 3; /* DS params */
 692	tail_len = 2 + (IEEE80211_MAX_SUPP_RATES - 8) +
 693		   2 + sizeof(struct ieee80211_ht_cap) +
 694		   2 + sizeof(struct ieee80211_ht_operation) +
 695		   2 + ifmsh->mesh_id_len +
 696		   2 + sizeof(struct ieee80211_meshconf_ie) +
 697		   2 + sizeof(__le16) + /* awake window */
 698		   2 + sizeof(struct ieee80211_vht_cap) +
 699		   2 + sizeof(struct ieee80211_vht_operation) +
 
 
 700		   ifmsh->ie_len;
 701
 702	bcn = kzalloc(sizeof(*bcn) + head_len + tail_len, GFP_KERNEL);
 703	/* need an skb for IE builders to operate on */
 704	skb = dev_alloc_skb(max(head_len, tail_len));
 705
 706	if (!bcn || !skb)
 707		goto out_free;
 708
 709	/*
 710	 * pointers go into the block we allocated,
 711	 * memory is | beacon_data | head | tail |
 712	 */
 713	bcn->head = ((u8 *) bcn) + sizeof(*bcn);
 714
 715	/* fill in the head */
 716	mgmt = (struct ieee80211_mgmt *) skb_put(skb, hdr_len);
 717	memset(mgmt, 0, hdr_len);
 718	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 719					  IEEE80211_STYPE_BEACON);
 720	eth_broadcast_addr(mgmt->da);
 721	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
 722	memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
 723	ieee80211_mps_set_frame_flags(sdata, NULL, (void *) mgmt);
 724	mgmt->u.beacon.beacon_int =
 725		cpu_to_le16(sdata->vif.bss_conf.beacon_int);
 726	mgmt->u.beacon.capab_info |= cpu_to_le16(
 727		sdata->u.mesh.security ? WLAN_CAPABILITY_PRIVACY : 0);
 728
 729	pos = skb_put(skb, 2);
 730	*pos++ = WLAN_EID_SSID;
 731	*pos++ = 0x0;
 732
 733	rcu_read_lock();
 734	csa = rcu_dereference(ifmsh->csa);
 735	if (csa) {
 736		pos = skb_put(skb, 13);
 737		memset(pos, 0, 13);
 
 
 
 
 738		*pos++ = WLAN_EID_CHANNEL_SWITCH;
 739		*pos++ = 3;
 740		*pos++ = 0x0;
 741		*pos++ = ieee80211_frequency_to_channel(
 742				csa->settings.chandef.chan->center_freq);
 743		bcn->csa_current_counter = csa->settings.count;
 744		bcn->csa_counter_offsets[0] = hdr_len + 6;
 745		*pos++ = csa->settings.count;
 746		*pos++ = WLAN_EID_CHAN_SWITCH_PARAM;
 747		*pos++ = 6;
 748		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) {
 749			*pos++ = ifmsh->mshcfg.dot11MeshTTL;
 750			*pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
 751		} else {
 752			*pos++ = ifmsh->chsw_ttl;
 753		}
 754		*pos++ |= csa->settings.block_tx ?
 755			  WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
 756		put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos);
 757		pos += 2;
 758		put_unaligned_le16(ifmsh->pre_value, pos);
 759		pos += 2;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 760	}
 761	rcu_read_unlock();
 762
 763	if (ieee80211_add_srates_ie(sdata, skb, true, band) ||
 764	    mesh_add_ds_params_ie(sdata, skb))
 765		goto out_free;
 766
 767	bcn->head_len = skb->len;
 768	memcpy(bcn->head, skb->data, bcn->head_len);
 769
 770	/* now the tail */
 771	skb_trim(skb, 0);
 772	bcn->tail = bcn->head + bcn->head_len;
 773
 774	if (ieee80211_add_ext_srates_ie(sdata, skb, true, band) ||
 775	    mesh_add_rsn_ie(sdata, skb) ||
 776	    mesh_add_ht_cap_ie(sdata, skb) ||
 777	    mesh_add_ht_oper_ie(sdata, skb) ||
 778	    mesh_add_meshid_ie(sdata, skb) ||
 779	    mesh_add_meshconf_ie(sdata, skb) ||
 780	    mesh_add_awake_window_ie(sdata, skb) ||
 781	    mesh_add_vht_cap_ie(sdata, skb) ||
 782	    mesh_add_vht_oper_ie(sdata, skb) ||
 
 
 783	    mesh_add_vendor_ies(sdata, skb))
 784		goto out_free;
 785
 786	bcn->tail_len = skb->len;
 787	memcpy(bcn->tail, skb->data, bcn->tail_len);
 788	bcn->meshconf = (struct ieee80211_meshconf_ie *)
 789					(bcn->tail + ifmsh->meshconf_offset);
 790
 791	dev_kfree_skb(skb);
 792	rcu_assign_pointer(ifmsh->beacon, bcn);
 793	return 0;
 794out_free:
 795	kfree(bcn);
 796	dev_kfree_skb(skb);
 797	return -ENOMEM;
 798}
 799
 800static int
 801ieee80211_mesh_rebuild_beacon(struct ieee80211_sub_if_data *sdata)
 802{
 803	struct beacon_data *old_bcn;
 804	int ret;
 805
 806	old_bcn = rcu_dereference_protected(sdata->u.mesh.beacon,
 807					    lockdep_is_held(&sdata->wdev.mtx));
 808	ret = ieee80211_mesh_build_beacon(&sdata->u.mesh);
 809	if (ret)
 810		/* just reuse old beacon */
 811		return ret;
 812
 813	if (old_bcn)
 814		kfree_rcu(old_bcn, rcu_head);
 815	return 0;
 816}
 817
 818void ieee80211_mbss_info_change_notify(struct ieee80211_sub_if_data *sdata,
 819				       u32 changed)
 820{
 821	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 822	unsigned long bits = changed;
 823	u32 bit;
 824
 825	if (!bits)
 826		return;
 827
 828	/* if we race with running work, worst case this work becomes a noop */
 829	for_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE)
 830		set_bit(bit, &ifmsh->mbss_changed);
 831	set_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags);
 832	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 833}
 834
 835int ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata)
 836{
 837	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 838	struct ieee80211_local *local = sdata->local;
 839	u32 changed = BSS_CHANGED_BEACON |
 840		      BSS_CHANGED_BEACON_ENABLED |
 841		      BSS_CHANGED_HT |
 842		      BSS_CHANGED_BASIC_RATES |
 843		      BSS_CHANGED_BEACON_INT;
 
 844
 845	local->fif_other_bss++;
 846	/* mesh ifaces must set allmulti to forward mcast traffic */
 847	atomic_inc(&local->iff_allmultis);
 848	ieee80211_configure_filter(local);
 849
 850	ifmsh->mesh_cc_id = 0;	/* Disabled */
 851	/* register sync ops from extensible synchronization framework */
 852	ifmsh->sync_ops = ieee80211_mesh_sync_ops_get(ifmsh->mesh_sp_id);
 853	ifmsh->adjusting_tbtt = false;
 854	ifmsh->sync_offset_clockdrift_max = 0;
 855	set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
 856	ieee80211_mesh_root_setup(ifmsh);
 857	ieee80211_queue_work(&local->hw, &sdata->work);
 858	sdata->vif.bss_conf.ht_operation_mode =
 859				ifmsh->mshcfg.ht_opmode;
 860	sdata->vif.bss_conf.enable_beacon = true;
 861
 862	changed |= ieee80211_mps_local_status_update(sdata);
 863
 864	if (ieee80211_mesh_build_beacon(ifmsh)) {
 865		ieee80211_stop_mesh(sdata);
 866		return -ENOMEM;
 867	}
 868
 869	ieee80211_recalc_dtim(local, sdata);
 870	ieee80211_bss_info_change_notify(sdata, changed);
 871
 872	netif_carrier_on(sdata->dev);
 873	return 0;
 874}
 875
 876void ieee80211_stop_mesh(struct ieee80211_sub_if_data *sdata)
 877{
 878	struct ieee80211_local *local = sdata->local;
 879	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 880	struct beacon_data *bcn;
 881
 882	netif_carrier_off(sdata->dev);
 883
 884	/* flush STAs and mpaths on this iface */
 885	sta_info_flush(sdata);
 
 886	mesh_path_flush_by_iface(sdata);
 887
 888	/* stop the beacon */
 889	ifmsh->mesh_id_len = 0;
 890	sdata->vif.bss_conf.enable_beacon = false;
 891	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
 892	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
 893
 894	/* remove beacon */
 895	bcn = rcu_dereference_protected(ifmsh->beacon,
 896					lockdep_is_held(&sdata->wdev.mtx));
 897	RCU_INIT_POINTER(ifmsh->beacon, NULL);
 898	kfree_rcu(bcn, rcu_head);
 899
 900	/* free all potentially still buffered group-addressed frames */
 901	local->total_ps_buffered -= skb_queue_len(&ifmsh->ps.bc_buf);
 902	skb_queue_purge(&ifmsh->ps.bc_buf);
 903
 904	del_timer_sync(&sdata->u.mesh.housekeeping_timer);
 905	del_timer_sync(&sdata->u.mesh.mesh_path_root_timer);
 906	del_timer_sync(&sdata->u.mesh.mesh_path_timer);
 907
 908	/* clear any mesh work (for next join) we may have accrued */
 909	ifmsh->wrkq_flags = 0;
 910	ifmsh->mbss_changed = 0;
 911
 912	local->fif_other_bss--;
 913	atomic_dec(&local->iff_allmultis);
 914	ieee80211_configure_filter(local);
 915}
 916
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 917static bool
 918ieee80211_mesh_process_chnswitch(struct ieee80211_sub_if_data *sdata,
 919				 struct ieee802_11_elems *elems, bool beacon)
 920{
 921	struct cfg80211_csa_settings params;
 922	struct ieee80211_csa_ie csa_ie;
 923	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 924	enum nl80211_band band = ieee80211_get_sdata_band(sdata);
 925	int err;
 926	u32 sta_flags;
 927
 928	sdata_assert_lock(sdata);
 929
 930	sta_flags = IEEE80211_STA_DISABLE_VHT;
 
 
 
 
 931	switch (sdata->vif.bss_conf.chandef.width) {
 932	case NL80211_CHAN_WIDTH_20_NOHT:
 933		sta_flags |= IEEE80211_STA_DISABLE_HT;
 
 934	case NL80211_CHAN_WIDTH_20:
 935		sta_flags |= IEEE80211_STA_DISABLE_40MHZ;
 
 
 
 936		break;
 937	default:
 938		break;
 939	}
 940
 941	memset(&params, 0, sizeof(params));
 942	memset(&csa_ie, 0, sizeof(csa_ie));
 943	err = ieee80211_parse_ch_switch_ie(sdata, elems, band,
 944					   sta_flags, sdata->vif.addr,
 945					   &csa_ie);
 946	if (err < 0)
 947		return false;
 948	if (err)
 949		return false;
 950
 
 
 
 
 
 
 951	params.chandef = csa_ie.chandef;
 952	params.count = csa_ie.count;
 953
 954	if (!cfg80211_chandef_usable(sdata->local->hw.wiphy, &params.chandef,
 955				     IEEE80211_CHAN_DISABLED)) {
 
 
 956		sdata_info(sdata,
 957			   "mesh STA %pM switches to unsupported channel (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n",
 958			   sdata->vif.addr,
 959			   params.chandef.chan->center_freq,
 960			   params.chandef.width,
 961			   params.chandef.center_freq1,
 962			   params.chandef.center_freq2);
 963		return false;
 964	}
 965
 966	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
 967					    &params.chandef,
 968					    NL80211_IFTYPE_MESH_POINT);
 969	if (err < 0)
 970		return false;
 971	if (err > 0)
 972		/* TODO: DFS not (yet) supported */
 
 
 
 
 
 
 973		return false;
 
 974
 975	params.radar_required = err;
 976
 977	if (cfg80211_chandef_identical(&params.chandef,
 978				       &sdata->vif.bss_conf.chandef)) {
 979		mcsa_dbg(sdata,
 980			 "received csa with an identical chandef, ignoring\n");
 981		return true;
 982	}
 983
 984	mcsa_dbg(sdata,
 985		 "received channel switch announcement to go to channel %d MHz\n",
 986		 params.chandef.chan->center_freq);
 987
 988	params.block_tx = csa_ie.mode & WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT;
 989	if (beacon) {
 990		ifmsh->chsw_ttl = csa_ie.ttl - 1;
 991		if (ifmsh->pre_value >= csa_ie.pre_value)
 992			return false;
 993		ifmsh->pre_value = csa_ie.pre_value;
 994	}
 995
 996	if (ifmsh->chsw_ttl >= ifmsh->mshcfg.dot11MeshTTL)
 997		return false;
 998
 999	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_REPEATER;
1000
1001	if (ieee80211_channel_switch(sdata->local->hw.wiphy, sdata->dev,
1002				     &params) < 0)
1003		return false;
1004
1005	return true;
1006}
1007
1008static void
1009ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data *sdata,
1010			    struct ieee80211_mgmt *mgmt, size_t len)
1011{
1012	struct ieee80211_local *local = sdata->local;
1013	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1014	struct sk_buff *presp;
1015	struct beacon_data *bcn;
1016	struct ieee80211_mgmt *hdr;
1017	struct ieee802_11_elems elems;
1018	size_t baselen;
1019	u8 *pos;
1020
1021	pos = mgmt->u.probe_req.variable;
1022	baselen = (u8 *) pos - (u8 *) mgmt;
1023	if (baselen > len)
1024		return;
1025
1026	ieee802_11_parse_elems(pos, len - baselen, false, &elems);
 
1027
1028	if (!elems.mesh_id)
1029		return;
1030
1031	/* 802.11-2012 10.1.4.3.2 */
1032	if ((!ether_addr_equal(mgmt->da, sdata->vif.addr) &&
1033	     !is_broadcast_ether_addr(mgmt->da)) ||
1034	    elems.ssid_len != 0)
1035		return;
1036
1037	if (elems.mesh_id_len != 0 &&
1038	    (elems.mesh_id_len != ifmsh->mesh_id_len ||
1039	     memcmp(elems.mesh_id, ifmsh->mesh_id, ifmsh->mesh_id_len)))
1040		return;
1041
1042	rcu_read_lock();
1043	bcn = rcu_dereference(ifmsh->beacon);
1044
1045	if (!bcn)
1046		goto out;
1047
1048	presp = dev_alloc_skb(local->tx_headroom +
1049			      bcn->head_len + bcn->tail_len);
1050	if (!presp)
1051		goto out;
1052
1053	skb_reserve(presp, local->tx_headroom);
1054	memcpy(skb_put(presp, bcn->head_len), bcn->head, bcn->head_len);
1055	memcpy(skb_put(presp, bcn->tail_len), bcn->tail, bcn->tail_len);
1056	hdr = (struct ieee80211_mgmt *) presp->data;
1057	hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1058					 IEEE80211_STYPE_PROBE_RESP);
1059	memcpy(hdr->da, mgmt->sa, ETH_ALEN);
1060	IEEE80211_SKB_CB(presp)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1061	ieee80211_tx_skb(sdata, presp);
1062out:
1063	rcu_read_unlock();
1064}
1065
1066static void ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data *sdata,
1067					u16 stype,
1068					struct ieee80211_mgmt *mgmt,
1069					size_t len,
1070					struct ieee80211_rx_status *rx_status)
1071{
1072	struct ieee80211_local *local = sdata->local;
1073	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1074	struct ieee802_11_elems elems;
1075	struct ieee80211_channel *channel;
1076	size_t baselen;
1077	int freq;
1078	enum nl80211_band band = rx_status->band;
1079
1080	/* ignore ProbeResp to foreign address */
1081	if (stype == IEEE80211_STYPE_PROBE_RESP &&
1082	    !ether_addr_equal(mgmt->da, sdata->vif.addr))
1083		return;
1084
1085	baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1086	if (baselen > len)
1087		return;
1088
1089	ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1090			       false, &elems);
1091
1092	/* ignore non-mesh or secure / unsecure mismatch */
1093	if ((!elems.mesh_id || !elems.mesh_config) ||
1094	    (elems.rsn && sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE) ||
1095	    (!elems.rsn && sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE))
1096		return;
1097
1098	if (elems.ds_params)
1099		freq = ieee80211_channel_to_frequency(elems.ds_params[0], band);
1100	else
1101		freq = rx_status->freq;
1102
1103	channel = ieee80211_get_channel(local->hw.wiphy, freq);
1104
1105	if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1106		return;
1107
1108	if (mesh_matches_local(sdata, &elems))
1109		mesh_neighbour_update(sdata, mgmt->sa, &elems);
 
 
 
 
 
 
 
1110
1111	if (ifmsh->sync_ops)
1112		ifmsh->sync_ops->rx_bcn_presp(sdata,
1113			stype, mgmt, &elems, rx_status);
1114
1115	if (ifmsh->csa_role != IEEE80211_MESH_CSA_ROLE_INIT &&
1116	    !sdata->vif.csa_active)
1117		ieee80211_mesh_process_chnswitch(sdata, &elems, true);
1118}
1119
1120int ieee80211_mesh_finish_csa(struct ieee80211_sub_if_data *sdata)
1121{
1122	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1123	struct mesh_csa_settings *tmp_csa_settings;
1124	int ret = 0;
1125	int changed = 0;
1126
1127	/* Reset the TTL value and Initiator flag */
1128	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1129	ifmsh->chsw_ttl = 0;
1130
1131	/* Remove the CSA and MCSP elements from the beacon */
1132	tmp_csa_settings = rcu_dereference(ifmsh->csa);
 
1133	RCU_INIT_POINTER(ifmsh->csa, NULL);
1134	if (tmp_csa_settings)
1135		kfree_rcu(tmp_csa_settings, rcu_head);
1136	ret = ieee80211_mesh_rebuild_beacon(sdata);
1137	if (ret)
1138		return -EINVAL;
1139
1140	changed |= BSS_CHANGED_BEACON;
1141
1142	mcsa_dbg(sdata, "complete switching to center freq %d MHz",
1143		 sdata->vif.bss_conf.chandef.chan->center_freq);
1144	return changed;
1145}
1146
1147int ieee80211_mesh_csa_beacon(struct ieee80211_sub_if_data *sdata,
1148			      struct cfg80211_csa_settings *csa_settings)
1149{
1150	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1151	struct mesh_csa_settings *tmp_csa_settings;
1152	int ret = 0;
1153
 
 
1154	tmp_csa_settings = kmalloc(sizeof(*tmp_csa_settings),
1155				   GFP_ATOMIC);
1156	if (!tmp_csa_settings)
1157		return -ENOMEM;
1158
1159	memcpy(&tmp_csa_settings->settings, csa_settings,
1160	       sizeof(struct cfg80211_csa_settings));
1161
1162	rcu_assign_pointer(ifmsh->csa, tmp_csa_settings);
1163
1164	ret = ieee80211_mesh_rebuild_beacon(sdata);
1165	if (ret) {
1166		tmp_csa_settings = rcu_dereference(ifmsh->csa);
1167		RCU_INIT_POINTER(ifmsh->csa, NULL);
1168		kfree_rcu(tmp_csa_settings, rcu_head);
1169		return ret;
1170	}
1171
1172	return BSS_CHANGED_BEACON;
1173}
1174
1175static int mesh_fwd_csa_frame(struct ieee80211_sub_if_data *sdata,
1176			       struct ieee80211_mgmt *mgmt, size_t len)
 
1177{
1178	struct ieee80211_mgmt *mgmt_fwd;
1179	struct sk_buff *skb;
1180	struct ieee80211_local *local = sdata->local;
1181	u8 *pos = mgmt->u.action.u.chan_switch.variable;
1182	size_t offset_ttl;
1183
1184	skb = dev_alloc_skb(local->tx_headroom + len);
1185	if (!skb)
1186		return -ENOMEM;
1187	skb_reserve(skb, local->tx_headroom);
1188	mgmt_fwd = (struct ieee80211_mgmt *) skb_put(skb, len);
1189
1190	/* offset_ttl is based on whether the secondary channel
1191	 * offset is available or not. Subtract 1 from the mesh TTL
1192	 * and disable the initiator flag before forwarding.
1193	 */
1194	offset_ttl = (len < 42) ? 7 : 10;
1195	*(pos + offset_ttl) -= 1;
1196	*(pos + offset_ttl + 1) &= ~WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
1197
1198	memcpy(mgmt_fwd, mgmt, len);
1199	eth_broadcast_addr(mgmt_fwd->da);
1200	memcpy(mgmt_fwd->sa, sdata->vif.addr, ETH_ALEN);
1201	memcpy(mgmt_fwd->bssid, sdata->vif.addr, ETH_ALEN);
1202
1203	ieee80211_tx_skb(sdata, skb);
1204	return 0;
1205}
1206
1207static void mesh_rx_csa_frame(struct ieee80211_sub_if_data *sdata,
1208			      struct ieee80211_mgmt *mgmt, size_t len)
1209{
1210	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1211	struct ieee802_11_elems elems;
1212	u16 pre_value;
1213	bool fwd_csa = true;
1214	size_t baselen;
1215	u8 *pos;
1216
1217	if (mgmt->u.action.u.measurement.action_code !=
1218	    WLAN_ACTION_SPCT_CHL_SWITCH)
1219		return;
1220
1221	pos = mgmt->u.action.u.chan_switch.variable;
1222	baselen = offsetof(struct ieee80211_mgmt,
1223			   u.action.u.chan_switch.variable);
1224	ieee802_11_parse_elems(pos, len - baselen, false, &elems);
 
1225
1226	ifmsh->chsw_ttl = elems.mesh_chansw_params_ie->mesh_ttl;
1227	if (!--ifmsh->chsw_ttl)
1228		fwd_csa = false;
1229
1230	pre_value = le16_to_cpu(elems.mesh_chansw_params_ie->mesh_pre_value);
1231	if (ifmsh->pre_value >= pre_value)
1232		return;
1233
1234	ifmsh->pre_value = pre_value;
1235
1236	if (!sdata->vif.csa_active &&
1237	    !ieee80211_mesh_process_chnswitch(sdata, &elems, false)) {
1238		mcsa_dbg(sdata, "Failed to process CSA action frame");
1239		return;
1240	}
1241
1242	/* forward or re-broadcast the CSA frame */
1243	if (fwd_csa) {
1244		if (mesh_fwd_csa_frame(sdata, mgmt, len) < 0)
1245			mcsa_dbg(sdata, "Failed to forward the CSA frame");
1246	}
1247}
1248
1249static void ieee80211_mesh_rx_mgmt_action(struct ieee80211_sub_if_data *sdata,
1250					  struct ieee80211_mgmt *mgmt,
1251					  size_t len,
1252					  struct ieee80211_rx_status *rx_status)
1253{
1254	switch (mgmt->u.action.category) {
1255	case WLAN_CATEGORY_SELF_PROTECTED:
1256		switch (mgmt->u.action.u.self_prot.action_code) {
1257		case WLAN_SP_MESH_PEERING_OPEN:
1258		case WLAN_SP_MESH_PEERING_CLOSE:
1259		case WLAN_SP_MESH_PEERING_CONFIRM:
1260			mesh_rx_plink_frame(sdata, mgmt, len, rx_status);
1261			break;
1262		}
1263		break;
1264	case WLAN_CATEGORY_MESH_ACTION:
1265		if (mesh_action_is_path_sel(mgmt))
1266			mesh_rx_path_sel_frame(sdata, mgmt, len);
1267		break;
1268	case WLAN_CATEGORY_SPECTRUM_MGMT:
1269		mesh_rx_csa_frame(sdata, mgmt, len);
1270		break;
1271	}
1272}
1273
1274void ieee80211_mesh_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
1275				   struct sk_buff *skb)
1276{
1277	struct ieee80211_rx_status *rx_status;
1278	struct ieee80211_mgmt *mgmt;
1279	u16 stype;
1280
1281	sdata_lock(sdata);
1282
1283	/* mesh already went down */
1284	if (!sdata->u.mesh.mesh_id_len)
1285		goto out;
1286
1287	rx_status = IEEE80211_SKB_RXCB(skb);
1288	mgmt = (struct ieee80211_mgmt *) skb->data;
1289	stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;
1290
1291	switch (stype) {
1292	case IEEE80211_STYPE_PROBE_RESP:
1293	case IEEE80211_STYPE_BEACON:
1294		ieee80211_mesh_rx_bcn_presp(sdata, stype, mgmt, skb->len,
1295					    rx_status);
1296		break;
1297	case IEEE80211_STYPE_PROBE_REQ:
1298		ieee80211_mesh_rx_probe_req(sdata, mgmt, skb->len);
1299		break;
1300	case IEEE80211_STYPE_ACTION:
1301		ieee80211_mesh_rx_mgmt_action(sdata, mgmt, skb->len, rx_status);
1302		break;
1303	}
1304out:
1305	sdata_unlock(sdata);
1306}
1307
1308static void mesh_bss_info_changed(struct ieee80211_sub_if_data *sdata)
1309{
1310	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1311	u32 bit, changed = 0;
1312
1313	for_each_set_bit(bit, &ifmsh->mbss_changed,
1314			 sizeof(changed) * BITS_PER_BYTE) {
1315		clear_bit(bit, &ifmsh->mbss_changed);
1316		changed |= BIT(bit);
1317	}
1318
1319	if (sdata->vif.bss_conf.enable_beacon &&
1320	    (changed & (BSS_CHANGED_BEACON |
1321			BSS_CHANGED_HT |
1322			BSS_CHANGED_BASIC_RATES |
1323			BSS_CHANGED_BEACON_INT)))
1324		if (ieee80211_mesh_rebuild_beacon(sdata))
1325			return;
1326
1327	ieee80211_bss_info_change_notify(sdata, changed);
1328}
1329
1330void ieee80211_mesh_work(struct ieee80211_sub_if_data *sdata)
1331{
1332	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1333
1334	sdata_lock(sdata);
1335
1336	/* mesh already went down */
1337	if (!sdata->u.mesh.mesh_id_len)
1338		goto out;
1339
1340	if (ifmsh->preq_queue_len &&
1341	    time_after(jiffies,
1342		       ifmsh->last_preq + msecs_to_jiffies(ifmsh->mshcfg.dot11MeshHWMPpreqMinInterval)))
1343		mesh_path_start_discovery(sdata);
1344
1345	if (test_and_clear_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags))
1346		ieee80211_mesh_housekeeping(sdata);
1347
1348	if (test_and_clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags))
1349		ieee80211_mesh_rootpath(sdata);
1350
1351	if (test_and_clear_bit(MESH_WORK_DRIFT_ADJUST, &ifmsh->wrkq_flags))
1352		mesh_sync_adjust_tbtt(sdata);
1353
1354	if (test_and_clear_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags))
1355		mesh_bss_info_changed(sdata);
1356out:
1357	sdata_unlock(sdata);
1358}
1359
1360
1361void ieee80211_mesh_init_sdata(struct ieee80211_sub_if_data *sdata)
1362{
1363	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1364	static u8 zero_addr[ETH_ALEN] = {};
1365
1366	setup_timer(&ifmsh->housekeeping_timer,
1367		    ieee80211_mesh_housekeeping_timer,
1368		    (unsigned long) sdata);
1369
1370	ifmsh->accepting_plinks = true;
1371	atomic_set(&ifmsh->mpaths, 0);
1372	mesh_rmc_init(sdata);
1373	ifmsh->last_preq = jiffies;
1374	ifmsh->next_perr = jiffies;
1375	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1376	/* Allocate all mesh structures when creating the first mesh interface. */
1377	if (!mesh_allocated)
1378		ieee80211s_init();
1379
1380	mesh_pathtbl_init(sdata);
1381
1382	setup_timer(&ifmsh->mesh_path_timer,
1383		    ieee80211_mesh_path_timer,
1384		    (unsigned long) sdata);
1385	setup_timer(&ifmsh->mesh_path_root_timer,
1386		    ieee80211_mesh_path_root_timer,
1387		    (unsigned long) sdata);
1388	INIT_LIST_HEAD(&ifmsh->preq_queue.list);
1389	skb_queue_head_init(&ifmsh->ps.bc_buf);
1390	spin_lock_init(&ifmsh->mesh_preq_queue_lock);
1391	spin_lock_init(&ifmsh->sync_offset_lock);
1392	RCU_INIT_POINTER(ifmsh->beacon, NULL);
1393
1394	sdata->vif.bss_conf.bssid = zero_addr;
1395}
1396
1397void ieee80211_mesh_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1398{
1399	mesh_rmc_free(sdata);
1400	mesh_pathtbl_unregister(sdata);
1401}
v5.4
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * Copyright (c) 2008, 2009 open80211s Ltd.
   4 * Copyright (C) 2018 - 2019 Intel Corporation
   5 * Authors:    Luis Carlos Cobo <luisca@cozybit.com>
   6 * 	       Javier Cardona <javier@cozybit.com>
 
 
 
 
   7 */
   8
   9#include <linux/slab.h>
  10#include <asm/unaligned.h>
  11#include "ieee80211_i.h"
  12#include "mesh.h"
  13#include "driver-ops.h"
  14
  15static int mesh_allocated;
  16static struct kmem_cache *rm_cache;
  17
  18bool mesh_action_is_path_sel(struct ieee80211_mgmt *mgmt)
  19{
  20	return (mgmt->u.action.u.mesh_action.action_code ==
  21			WLAN_MESH_ACTION_HWMP_PATH_SELECTION);
  22}
  23
  24void ieee80211s_init(void)
  25{
  26	mesh_allocated = 1;
  27	rm_cache = kmem_cache_create("mesh_rmc", sizeof(struct rmc_entry),
  28				     0, 0, NULL);
  29}
  30
  31void ieee80211s_stop(void)
  32{
  33	if (!mesh_allocated)
  34		return;
  35	kmem_cache_destroy(rm_cache);
  36}
  37
  38static void ieee80211_mesh_housekeeping_timer(struct timer_list *t)
  39{
  40	struct ieee80211_sub_if_data *sdata =
  41		from_timer(sdata, t, u.mesh.housekeeping_timer);
  42	struct ieee80211_local *local = sdata->local;
  43	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
  44
  45	set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
  46
  47	ieee80211_queue_work(&local->hw, &sdata->work);
  48}
  49
  50/**
  51 * mesh_matches_local - check if the config of a mesh point matches ours
  52 *
  53 * @sdata: local mesh subif
  54 * @ie: information elements of a management frame from the mesh peer
  55 *
  56 * This function checks if the mesh configuration of a mesh point matches the
  57 * local mesh configuration, i.e. if both nodes belong to the same mesh network.
  58 */
  59bool mesh_matches_local(struct ieee80211_sub_if_data *sdata,
  60			struct ieee802_11_elems *ie)
  61{
  62	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
  63	u32 basic_rates = 0;
  64	struct cfg80211_chan_def sta_chan_def;
  65	struct ieee80211_supported_band *sband;
  66
  67	/*
  68	 * As support for each feature is added, check for matching
  69	 * - On mesh config capabilities
  70	 *   - Power Save Support En
  71	 *   - Sync support enabled
  72	 *   - Sync support active
  73	 *   - Sync support required from peer
  74	 *   - MDA enabled
  75	 * - Power management control on fc
  76	 */
  77	if (!(ifmsh->mesh_id_len == ie->mesh_id_len &&
  78	     memcmp(ifmsh->mesh_id, ie->mesh_id, ie->mesh_id_len) == 0 &&
  79	     (ifmsh->mesh_pp_id == ie->mesh_config->meshconf_psel) &&
  80	     (ifmsh->mesh_pm_id == ie->mesh_config->meshconf_pmetric) &&
  81	     (ifmsh->mesh_cc_id == ie->mesh_config->meshconf_congest) &&
  82	     (ifmsh->mesh_sp_id == ie->mesh_config->meshconf_synch) &&
  83	     (ifmsh->mesh_auth_id == ie->mesh_config->meshconf_auth)))
  84		return false;
  85
  86	sband = ieee80211_get_sband(sdata);
  87	if (!sband)
  88		return false;
  89
  90	ieee80211_sta_get_rates(sdata, ie, sband->band,
  91				&basic_rates);
  92
  93	if (sdata->vif.bss_conf.basic_rates != basic_rates)
  94		return false;
  95
  96	cfg80211_chandef_create(&sta_chan_def, sdata->vif.bss_conf.chandef.chan,
  97				NL80211_CHAN_NO_HT);
  98	ieee80211_chandef_ht_oper(ie->ht_operation, &sta_chan_def);
  99	ieee80211_chandef_vht_oper(&sdata->local->hw,
 100				   ie->vht_operation, ie->ht_operation,
 101				   &sta_chan_def);
 102
 103	if (!cfg80211_chandef_compatible(&sdata->vif.bss_conf.chandef,
 104					 &sta_chan_def))
 105		return false;
 106
 107	return true;
 108}
 109
 110/**
 111 * mesh_peer_accepts_plinks - check if an mp is willing to establish peer links
 112 *
 113 * @ie: information elements of a management frame from the mesh peer
 114 */
 115bool mesh_peer_accepts_plinks(struct ieee802_11_elems *ie)
 116{
 117	return (ie->mesh_config->meshconf_cap &
 118			IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS) != 0;
 119}
 120
 121/**
 122 * mesh_accept_plinks_update - update accepting_plink in local mesh beacons
 123 *
 124 * @sdata: mesh interface in which mesh beacons are going to be updated
 125 *
 126 * Returns: beacon changed flag if the beacon content changed.
 127 */
 128u32 mesh_accept_plinks_update(struct ieee80211_sub_if_data *sdata)
 129{
 130	bool free_plinks;
 131	u32 changed = 0;
 132
 133	/* In case mesh_plink_free_count > 0 and mesh_plinktbl_capacity == 0,
 134	 * the mesh interface might be able to establish plinks with peers that
 135	 * are already on the table but are not on PLINK_ESTAB state. However,
 136	 * in general the mesh interface is not accepting peer link requests
 137	 * from new peers, and that must be reflected in the beacon
 138	 */
 139	free_plinks = mesh_plink_availables(sdata);
 140
 141	if (free_plinks != sdata->u.mesh.accepting_plinks) {
 142		sdata->u.mesh.accepting_plinks = free_plinks;
 143		changed = BSS_CHANGED_BEACON;
 144	}
 145
 146	return changed;
 147}
 148
 149/*
 150 * mesh_sta_cleanup - clean up any mesh sta state
 151 *
 152 * @sta: mesh sta to clean up.
 153 */
 154void mesh_sta_cleanup(struct sta_info *sta)
 155{
 156	struct ieee80211_sub_if_data *sdata = sta->sdata;
 157	u32 changed = mesh_plink_deactivate(sta);
 158
 159	if (changed)
 160		ieee80211_mbss_info_change_notify(sdata, changed);
 161}
 162
 163int mesh_rmc_init(struct ieee80211_sub_if_data *sdata)
 164{
 165	int i;
 166
 167	sdata->u.mesh.rmc = kmalloc(sizeof(struct mesh_rmc), GFP_KERNEL);
 168	if (!sdata->u.mesh.rmc)
 169		return -ENOMEM;
 170	sdata->u.mesh.rmc->idx_mask = RMC_BUCKETS - 1;
 171	for (i = 0; i < RMC_BUCKETS; i++)
 172		INIT_HLIST_HEAD(&sdata->u.mesh.rmc->bucket[i]);
 173	return 0;
 174}
 175
 176void mesh_rmc_free(struct ieee80211_sub_if_data *sdata)
 177{
 178	struct mesh_rmc *rmc = sdata->u.mesh.rmc;
 179	struct rmc_entry *p;
 180	struct hlist_node *n;
 181	int i;
 182
 183	if (!sdata->u.mesh.rmc)
 184		return;
 185
 186	for (i = 0; i < RMC_BUCKETS; i++) {
 187		hlist_for_each_entry_safe(p, n, &rmc->bucket[i], list) {
 188			hlist_del(&p->list);
 189			kmem_cache_free(rm_cache, p);
 190		}
 191	}
 192
 193	kfree(rmc);
 194	sdata->u.mesh.rmc = NULL;
 195}
 196
 197/**
 198 * mesh_rmc_check - Check frame in recent multicast cache and add if absent.
 199 *
 200 * @sdata:	interface
 201 * @sa:		source address
 202 * @mesh_hdr:	mesh_header
 203 *
 204 * Returns: 0 if the frame is not in the cache, nonzero otherwise.
 205 *
 206 * Checks using the source address and the mesh sequence number if we have
 207 * received this frame lately. If the frame is not in the cache, it is added to
 208 * it.
 209 */
 210int mesh_rmc_check(struct ieee80211_sub_if_data *sdata,
 211		   const u8 *sa, struct ieee80211s_hdr *mesh_hdr)
 212{
 213	struct mesh_rmc *rmc = sdata->u.mesh.rmc;
 214	u32 seqnum = 0;
 215	int entries = 0;
 216	u8 idx;
 217	struct rmc_entry *p;
 218	struct hlist_node *n;
 219
 220	if (!rmc)
 221		return -1;
 222
 223	/* Don't care about endianness since only match matters */
 224	memcpy(&seqnum, &mesh_hdr->seqnum, sizeof(mesh_hdr->seqnum));
 225	idx = le32_to_cpu(mesh_hdr->seqnum) & rmc->idx_mask;
 226	hlist_for_each_entry_safe(p, n, &rmc->bucket[idx], list) {
 227		++entries;
 228		if (time_after(jiffies, p->exp_time) ||
 229		    entries == RMC_QUEUE_MAX_LEN) {
 230			hlist_del(&p->list);
 231			kmem_cache_free(rm_cache, p);
 232			--entries;
 233		} else if ((seqnum == p->seqnum) && ether_addr_equal(sa, p->sa))
 234			return -1;
 235	}
 236
 237	p = kmem_cache_alloc(rm_cache, GFP_ATOMIC);
 238	if (!p)
 239		return 0;
 240
 241	p->seqnum = seqnum;
 242	p->exp_time = jiffies + RMC_TIMEOUT;
 243	memcpy(p->sa, sa, ETH_ALEN);
 244	hlist_add_head(&p->list, &rmc->bucket[idx]);
 245	return 0;
 246}
 247
 248int mesh_add_meshconf_ie(struct ieee80211_sub_if_data *sdata,
 249			 struct sk_buff *skb)
 250{
 251	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 252	u8 *pos, neighbors;
 253	u8 meshconf_len = sizeof(struct ieee80211_meshconf_ie);
 254	bool is_connected_to_gate = ifmsh->num_gates > 0 ||
 255		ifmsh->mshcfg.dot11MeshGateAnnouncementProtocol ||
 256		ifmsh->mshcfg.dot11MeshConnectedToMeshGate;
 257
 258	if (skb_tailroom(skb) < 2 + meshconf_len)
 259		return -ENOMEM;
 260
 261	pos = skb_put(skb, 2 + meshconf_len);
 262	*pos++ = WLAN_EID_MESH_CONFIG;
 263	*pos++ = meshconf_len;
 264
 265	/* save a pointer for quick updates in pre-tbtt */
 266	ifmsh->meshconf_offset = pos - skb->data;
 267
 268	/* Active path selection protocol ID */
 269	*pos++ = ifmsh->mesh_pp_id;
 270	/* Active path selection metric ID   */
 271	*pos++ = ifmsh->mesh_pm_id;
 272	/* Congestion control mode identifier */
 273	*pos++ = ifmsh->mesh_cc_id;
 274	/* Synchronization protocol identifier */
 275	*pos++ = ifmsh->mesh_sp_id;
 276	/* Authentication Protocol identifier */
 277	*pos++ = ifmsh->mesh_auth_id;
 278	/* Mesh Formation Info - number of neighbors */
 279	neighbors = atomic_read(&ifmsh->estab_plinks);
 280	neighbors = min_t(int, neighbors, IEEE80211_MAX_MESH_PEERINGS);
 281	*pos++ = (neighbors << 1) | is_connected_to_gate;
 282	/* Mesh capability */
 283	*pos = 0x00;
 284	*pos |= ifmsh->mshcfg.dot11MeshForwarding ?
 285			IEEE80211_MESHCONF_CAPAB_FORWARDING : 0x00;
 286	*pos |= ifmsh->accepting_plinks ?
 287			IEEE80211_MESHCONF_CAPAB_ACCEPT_PLINKS : 0x00;
 288	/* Mesh PS mode. See IEEE802.11-2012 8.4.2.100.8 */
 289	*pos |= ifmsh->ps_peers_deep_sleep ?
 290			IEEE80211_MESHCONF_CAPAB_POWER_SAVE_LEVEL : 0x00;
 
 
 
 
 291	return 0;
 292}
 293
 294int mesh_add_meshid_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
 295{
 296	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 297	u8 *pos;
 298
 299	if (skb_tailroom(skb) < 2 + ifmsh->mesh_id_len)
 300		return -ENOMEM;
 301
 302	pos = skb_put(skb, 2 + ifmsh->mesh_id_len);
 303	*pos++ = WLAN_EID_MESH_ID;
 304	*pos++ = ifmsh->mesh_id_len;
 305	if (ifmsh->mesh_id_len)
 306		memcpy(pos, ifmsh->mesh_id, ifmsh->mesh_id_len);
 307
 308	return 0;
 309}
 310
 311static int mesh_add_awake_window_ie(struct ieee80211_sub_if_data *sdata,
 312				    struct sk_buff *skb)
 313{
 314	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 315	u8 *pos;
 316
 317	/* see IEEE802.11-2012 13.14.6 */
 318	if (ifmsh->ps_peers_light_sleep == 0 &&
 319	    ifmsh->ps_peers_deep_sleep == 0 &&
 320	    ifmsh->nonpeer_pm == NL80211_MESH_POWER_ACTIVE)
 321		return 0;
 322
 323	if (skb_tailroom(skb) < 4)
 324		return -ENOMEM;
 325
 326	pos = skb_put(skb, 2 + 2);
 327	*pos++ = WLAN_EID_MESH_AWAKE_WINDOW;
 328	*pos++ = 2;
 329	put_unaligned_le16(ifmsh->mshcfg.dot11MeshAwakeWindowDuration, pos);
 330
 331	return 0;
 332}
 333
 334int mesh_add_vendor_ies(struct ieee80211_sub_if_data *sdata,
 335			struct sk_buff *skb)
 336{
 337	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 338	u8 offset, len;
 339	const u8 *data;
 340
 341	if (!ifmsh->ie || !ifmsh->ie_len)
 342		return 0;
 343
 344	/* fast-forward to vendor IEs */
 345	offset = ieee80211_ie_split_vendor(ifmsh->ie, ifmsh->ie_len, 0);
 346
 347	if (offset < ifmsh->ie_len) {
 348		len = ifmsh->ie_len - offset;
 349		data = ifmsh->ie + offset;
 350		if (skb_tailroom(skb) < len)
 351			return -ENOMEM;
 352		skb_put_data(skb, data, len);
 353	}
 354
 355	return 0;
 356}
 357
 358int mesh_add_rsn_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
 359{
 360	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 361	u8 len = 0;
 362	const u8 *data;
 363
 364	if (!ifmsh->ie || !ifmsh->ie_len)
 365		return 0;
 366
 367	/* find RSN IE */
 368	data = cfg80211_find_ie(WLAN_EID_RSN, ifmsh->ie, ifmsh->ie_len);
 369	if (!data)
 370		return 0;
 371
 372	len = data[1] + 2;
 373
 374	if (skb_tailroom(skb) < len)
 375		return -ENOMEM;
 376	skb_put_data(skb, data, len);
 377
 378	return 0;
 379}
 380
 381static int mesh_add_ds_params_ie(struct ieee80211_sub_if_data *sdata,
 382				 struct sk_buff *skb)
 383{
 384	struct ieee80211_chanctx_conf *chanctx_conf;
 385	struct ieee80211_channel *chan;
 386	u8 *pos;
 387
 388	if (skb_tailroom(skb) < 3)
 389		return -ENOMEM;
 390
 391	rcu_read_lock();
 392	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 393	if (WARN_ON(!chanctx_conf)) {
 394		rcu_read_unlock();
 395		return -EINVAL;
 396	}
 397	chan = chanctx_conf->def.chan;
 398	rcu_read_unlock();
 399
 400	pos = skb_put(skb, 2 + 1);
 401	*pos++ = WLAN_EID_DS_PARAMS;
 402	*pos++ = 1;
 403	*pos++ = ieee80211_frequency_to_channel(chan->center_freq);
 404
 405	return 0;
 406}
 407
 408int mesh_add_ht_cap_ie(struct ieee80211_sub_if_data *sdata,
 409		       struct sk_buff *skb)
 410{
 
 
 411	struct ieee80211_supported_band *sband;
 412	u8 *pos;
 413
 414	sband = ieee80211_get_sband(sdata);
 415	if (!sband)
 416		return -EINVAL;
 417
 418	if (!sband->ht_cap.ht_supported ||
 419	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 420	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 421	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 422		return 0;
 423
 424	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_cap))
 425		return -ENOMEM;
 426
 427	pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_cap));
 428	ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, sband->ht_cap.cap);
 429
 430	return 0;
 431}
 432
 433int mesh_add_ht_oper_ie(struct ieee80211_sub_if_data *sdata,
 434			struct sk_buff *skb)
 435{
 436	struct ieee80211_local *local = sdata->local;
 437	struct ieee80211_chanctx_conf *chanctx_conf;
 438	struct ieee80211_channel *channel;
 439	struct ieee80211_supported_band *sband;
 440	struct ieee80211_sta_ht_cap *ht_cap;
 441	u8 *pos;
 442
 443	rcu_read_lock();
 444	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 445	if (WARN_ON(!chanctx_conf)) {
 446		rcu_read_unlock();
 447		return -EINVAL;
 448	}
 449	channel = chanctx_conf->def.chan;
 450	rcu_read_unlock();
 451
 452	sband = local->hw.wiphy->bands[channel->band];
 453	ht_cap = &sband->ht_cap;
 454
 455	if (!ht_cap->ht_supported ||
 456	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 457	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 458	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 459		return 0;
 460
 461	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_ht_operation))
 462		return -ENOMEM;
 463
 464	pos = skb_put(skb, 2 + sizeof(struct ieee80211_ht_operation));
 465	ieee80211_ie_build_ht_oper(pos, ht_cap, &sdata->vif.bss_conf.chandef,
 466				   sdata->vif.bss_conf.ht_operation_mode,
 467				   false);
 468
 469	return 0;
 470}
 471
 472int mesh_add_vht_cap_ie(struct ieee80211_sub_if_data *sdata,
 473			struct sk_buff *skb)
 474{
 
 
 475	struct ieee80211_supported_band *sband;
 476	u8 *pos;
 477
 478	sband = ieee80211_get_sband(sdata);
 479	if (!sband)
 480		return -EINVAL;
 481
 482	if (!sband->vht_cap.vht_supported ||
 483	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 484	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 485	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 486		return 0;
 487
 488	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_cap))
 489		return -ENOMEM;
 490
 491	pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_cap));
 492	ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, sband->vht_cap.cap);
 493
 494	return 0;
 495}
 496
 497int mesh_add_vht_oper_ie(struct ieee80211_sub_if_data *sdata,
 498			 struct sk_buff *skb)
 499{
 500	struct ieee80211_local *local = sdata->local;
 501	struct ieee80211_chanctx_conf *chanctx_conf;
 502	struct ieee80211_channel *channel;
 503	struct ieee80211_supported_band *sband;
 504	struct ieee80211_sta_vht_cap *vht_cap;
 505	u8 *pos;
 506
 507	rcu_read_lock();
 508	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 509	if (WARN_ON(!chanctx_conf)) {
 510		rcu_read_unlock();
 511		return -EINVAL;
 512	}
 513	channel = chanctx_conf->def.chan;
 514	rcu_read_unlock();
 515
 516	sband = local->hw.wiphy->bands[channel->band];
 517	vht_cap = &sband->vht_cap;
 518
 519	if (!vht_cap->vht_supported ||
 520	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 521	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 522	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 523		return 0;
 524
 525	if (skb_tailroom(skb) < 2 + sizeof(struct ieee80211_vht_operation))
 526		return -ENOMEM;
 527
 528	pos = skb_put(skb, 2 + sizeof(struct ieee80211_vht_operation));
 529	ieee80211_ie_build_vht_oper(pos, vht_cap,
 530				    &sdata->vif.bss_conf.chandef);
 531
 532	return 0;
 533}
 534
 535int mesh_add_he_cap_ie(struct ieee80211_sub_if_data *sdata,
 536		       struct sk_buff *skb, u8 ie_len)
 537{
 538	const struct ieee80211_sta_he_cap *he_cap;
 539	struct ieee80211_supported_band *sband;
 540	u8 *pos;
 541
 542	sband = ieee80211_get_sband(sdata);
 543	if (!sband)
 544		return -EINVAL;
 545
 546	he_cap = ieee80211_get_he_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT);
 547
 548	if (!he_cap ||
 549	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 550	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 551	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 552		return 0;
 553
 554	if (skb_tailroom(skb) < ie_len)
 555		return -ENOMEM;
 556
 557	pos = skb_put(skb, ie_len);
 558	ieee80211_ie_build_he_cap(pos, he_cap, pos + ie_len);
 559
 560	return 0;
 561}
 562
 563int mesh_add_he_oper_ie(struct ieee80211_sub_if_data *sdata,
 564			struct sk_buff *skb)
 565{
 566	const struct ieee80211_sta_he_cap *he_cap;
 567	struct ieee80211_supported_band *sband;
 568	u8 *pos;
 569
 570	sband = ieee80211_get_sband(sdata);
 571	if (!sband)
 572		return -EINVAL;
 573
 574	he_cap = ieee80211_get_he_iftype_cap(sband, NL80211_IFTYPE_MESH_POINT);
 575	if (!he_cap ||
 576	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
 577	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_5 ||
 578	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_10)
 579		return 0;
 580
 581	if (skb_tailroom(skb) < 2 + 1 + sizeof(struct ieee80211_he_operation))
 582		return -ENOMEM;
 583
 584	pos = skb_put(skb, 2 + 1 + sizeof(struct ieee80211_he_operation));
 585	ieee80211_ie_build_he_oper(pos);
 586
 587	return 0;
 588}
 589
 590static void ieee80211_mesh_path_timer(struct timer_list *t)
 591{
 592	struct ieee80211_sub_if_data *sdata =
 593		from_timer(sdata, t, u.mesh.mesh_path_timer);
 594
 595	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 596}
 597
 598static void ieee80211_mesh_path_root_timer(struct timer_list *t)
 599{
 600	struct ieee80211_sub_if_data *sdata =
 601		from_timer(sdata, t, u.mesh.mesh_path_root_timer);
 602	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 603
 604	set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 605
 606	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 607}
 608
 609void ieee80211_mesh_root_setup(struct ieee80211_if_mesh *ifmsh)
 610{
 611	if (ifmsh->mshcfg.dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)
 612		set_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 613	else {
 614		clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags);
 615		/* stop running timer */
 616		del_timer_sync(&ifmsh->mesh_path_root_timer);
 617	}
 618}
 619
 620/**
 621 * ieee80211_fill_mesh_addresses - fill addresses of a locally originated mesh frame
 622 * @hdr:	802.11 frame header
 623 * @fc:		frame control field
 624 * @meshda:	destination address in the mesh
 625 * @meshsa:	source address address in the mesh.  Same as TA, as frame is
 626 *              locally originated.
 627 *
 628 * Return the length of the 802.11 (does not include a mesh control header)
 629 */
 630int ieee80211_fill_mesh_addresses(struct ieee80211_hdr *hdr, __le16 *fc,
 631				  const u8 *meshda, const u8 *meshsa)
 632{
 633	if (is_multicast_ether_addr(meshda)) {
 634		*fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
 635		/* DA TA SA */
 636		memcpy(hdr->addr1, meshda, ETH_ALEN);
 637		memcpy(hdr->addr2, meshsa, ETH_ALEN);
 638		memcpy(hdr->addr3, meshsa, ETH_ALEN);
 639		return 24;
 640	} else {
 641		*fc |= cpu_to_le16(IEEE80211_FCTL_FROMDS | IEEE80211_FCTL_TODS);
 642		/* RA TA DA SA */
 643		eth_zero_addr(hdr->addr1);   /* RA is resolved later */
 644		memcpy(hdr->addr2, meshsa, ETH_ALEN);
 645		memcpy(hdr->addr3, meshda, ETH_ALEN);
 646		memcpy(hdr->addr4, meshsa, ETH_ALEN);
 647		return 30;
 648	}
 649}
 650
 651/**
 652 * ieee80211_new_mesh_header - create a new mesh header
 653 * @sdata:	mesh interface to be used
 654 * @meshhdr:    uninitialized mesh header
 655 * @addr4or5:   1st address in the ae header, which may correspond to address 4
 656 *              (if addr6 is NULL) or address 5 (if addr6 is present). It may
 657 *              be NULL.
 658 * @addr6:	2nd address in the ae header, which corresponds to addr6 of the
 659 *              mesh frame
 660 *
 661 * Return the header length.
 662 */
 663unsigned int ieee80211_new_mesh_header(struct ieee80211_sub_if_data *sdata,
 664				       struct ieee80211s_hdr *meshhdr,
 665				       const char *addr4or5, const char *addr6)
 666{
 667	if (WARN_ON(!addr4or5 && addr6))
 668		return 0;
 669
 670	memset(meshhdr, 0, sizeof(*meshhdr));
 671
 672	meshhdr->ttl = sdata->u.mesh.mshcfg.dot11MeshTTL;
 673
 674	/* FIXME: racy -- TX on multiple queues can be concurrent */
 675	put_unaligned(cpu_to_le32(sdata->u.mesh.mesh_seqnum), &meshhdr->seqnum);
 676	sdata->u.mesh.mesh_seqnum++;
 677
 678	if (addr4or5 && !addr6) {
 679		meshhdr->flags |= MESH_FLAGS_AE_A4;
 680		memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
 681		return 2 * ETH_ALEN;
 682	} else if (addr4or5 && addr6) {
 683		meshhdr->flags |= MESH_FLAGS_AE_A5_A6;
 684		memcpy(meshhdr->eaddr1, addr4or5, ETH_ALEN);
 685		memcpy(meshhdr->eaddr2, addr6, ETH_ALEN);
 686		return 3 * ETH_ALEN;
 687	}
 688
 689	return ETH_ALEN;
 690}
 691
 692static void ieee80211_mesh_housekeeping(struct ieee80211_sub_if_data *sdata)
 693{
 694	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 695	u32 changed;
 696
 697	if (ifmsh->mshcfg.plink_timeout > 0)
 698		ieee80211_sta_expire(sdata, ifmsh->mshcfg.plink_timeout * HZ);
 699	mesh_path_expire(sdata);
 700
 701	changed = mesh_accept_plinks_update(sdata);
 702	ieee80211_mbss_info_change_notify(sdata, changed);
 703
 704	mod_timer(&ifmsh->housekeeping_timer,
 705		  round_jiffies(jiffies +
 706				IEEE80211_MESH_HOUSEKEEPING_INTERVAL));
 707}
 708
 709static void ieee80211_mesh_rootpath(struct ieee80211_sub_if_data *sdata)
 710{
 711	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 712	u32 interval;
 713
 714	mesh_path_tx_root_frame(sdata);
 715
 716	if (ifmsh->mshcfg.dot11MeshHWMPRootMode == IEEE80211_PROACTIVE_RANN)
 717		interval = ifmsh->mshcfg.dot11MeshHWMPRannInterval;
 718	else
 719		interval = ifmsh->mshcfg.dot11MeshHWMProotInterval;
 720
 721	mod_timer(&ifmsh->mesh_path_root_timer,
 722		  round_jiffies(TU_TO_EXP_TIME(interval)));
 723}
 724
 725static int
 726ieee80211_mesh_build_beacon(struct ieee80211_if_mesh *ifmsh)
 727{
 728	struct beacon_data *bcn;
 729	int head_len, tail_len;
 730	struct sk_buff *skb;
 731	struct ieee80211_mgmt *mgmt;
 732	struct ieee80211_chanctx_conf *chanctx_conf;
 733	struct mesh_csa_settings *csa;
 734	enum nl80211_band band;
 735	u8 ie_len_he_cap;
 736	u8 *pos;
 737	struct ieee80211_sub_if_data *sdata;
 738	int hdr_len = offsetofend(struct ieee80211_mgmt, u.beacon);
 
 739
 740	sdata = container_of(ifmsh, struct ieee80211_sub_if_data, u.mesh);
 741	rcu_read_lock();
 742	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
 743	band = chanctx_conf->def.chan->band;
 744	rcu_read_unlock();
 745
 746	ie_len_he_cap = ieee80211_ie_len_he_cap(sdata,
 747						NL80211_IFTYPE_MESH_POINT);
 748	head_len = hdr_len +
 749		   2 + /* NULL SSID */
 750		   /* Channel Switch Announcement */
 751		   2 + sizeof(struct ieee80211_channel_sw_ie) +
 752		   /* Mesh Channel Switch Parameters */
 753		   2 + sizeof(struct ieee80211_mesh_chansw_params_ie) +
 754		   /* Channel Switch Wrapper + Wide Bandwidth CSA IE */
 755		   2 + 2 + sizeof(struct ieee80211_wide_bw_chansw_ie) +
 756		   2 + sizeof(struct ieee80211_sec_chan_offs_ie) +
 757		   2 + 8 + /* supported rates */
 758		   2 + 3; /* DS params */
 759	tail_len = 2 + (IEEE80211_MAX_SUPP_RATES - 8) +
 760		   2 + sizeof(struct ieee80211_ht_cap) +
 761		   2 + sizeof(struct ieee80211_ht_operation) +
 762		   2 + ifmsh->mesh_id_len +
 763		   2 + sizeof(struct ieee80211_meshconf_ie) +
 764		   2 + sizeof(__le16) + /* awake window */
 765		   2 + sizeof(struct ieee80211_vht_cap) +
 766		   2 + sizeof(struct ieee80211_vht_operation) +
 767		   ie_len_he_cap +
 768		   2 + 1 + sizeof(struct ieee80211_he_operation) +
 769		   ifmsh->ie_len;
 770
 771	bcn = kzalloc(sizeof(*bcn) + head_len + tail_len, GFP_KERNEL);
 772	/* need an skb for IE builders to operate on */
 773	skb = dev_alloc_skb(max(head_len, tail_len));
 774
 775	if (!bcn || !skb)
 776		goto out_free;
 777
 778	/*
 779	 * pointers go into the block we allocated,
 780	 * memory is | beacon_data | head | tail |
 781	 */
 782	bcn->head = ((u8 *) bcn) + sizeof(*bcn);
 783
 784	/* fill in the head */
 785	mgmt = skb_put_zero(skb, hdr_len);
 
 786	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
 787					  IEEE80211_STYPE_BEACON);
 788	eth_broadcast_addr(mgmt->da);
 789	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
 790	memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
 791	ieee80211_mps_set_frame_flags(sdata, NULL, (void *) mgmt);
 792	mgmt->u.beacon.beacon_int =
 793		cpu_to_le16(sdata->vif.bss_conf.beacon_int);
 794	mgmt->u.beacon.capab_info |= cpu_to_le16(
 795		sdata->u.mesh.security ? WLAN_CAPABILITY_PRIVACY : 0);
 796
 797	pos = skb_put(skb, 2);
 798	*pos++ = WLAN_EID_SSID;
 799	*pos++ = 0x0;
 800
 801	rcu_read_lock();
 802	csa = rcu_dereference(ifmsh->csa);
 803	if (csa) {
 804		enum nl80211_channel_type ct;
 805		struct cfg80211_chan_def *chandef;
 806		int ie_len = 2 + sizeof(struct ieee80211_channel_sw_ie) +
 807			     2 + sizeof(struct ieee80211_mesh_chansw_params_ie);
 808
 809		pos = skb_put_zero(skb, ie_len);
 810		*pos++ = WLAN_EID_CHANNEL_SWITCH;
 811		*pos++ = 3;
 812		*pos++ = 0x0;
 813		*pos++ = ieee80211_frequency_to_channel(
 814				csa->settings.chandef.chan->center_freq);
 815		bcn->csa_current_counter = csa->settings.count;
 816		bcn->csa_counter_offsets[0] = hdr_len + 6;
 817		*pos++ = csa->settings.count;
 818		*pos++ = WLAN_EID_CHAN_SWITCH_PARAM;
 819		*pos++ = 6;
 820		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) {
 821			*pos++ = ifmsh->mshcfg.dot11MeshTTL;
 822			*pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
 823		} else {
 824			*pos++ = ifmsh->chsw_ttl;
 825		}
 826		*pos++ |= csa->settings.block_tx ?
 827			  WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
 828		put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos);
 829		pos += 2;
 830		put_unaligned_le16(ifmsh->pre_value, pos);
 831		pos += 2;
 832
 833		switch (csa->settings.chandef.width) {
 834		case NL80211_CHAN_WIDTH_40:
 835			ie_len = 2 + sizeof(struct ieee80211_sec_chan_offs_ie);
 836			pos = skb_put_zero(skb, ie_len);
 837
 838			*pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */
 839			*pos++ = 1;				    /* len */
 840			ct = cfg80211_get_chandef_type(&csa->settings.chandef);
 841			if (ct == NL80211_CHAN_HT40PLUS)
 842				*pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
 843			else
 844				*pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
 845			break;
 846		case NL80211_CHAN_WIDTH_80:
 847		case NL80211_CHAN_WIDTH_80P80:
 848		case NL80211_CHAN_WIDTH_160:
 849			/* Channel Switch Wrapper + Wide Bandwidth CSA IE */
 850			ie_len = 2 + 2 +
 851				 sizeof(struct ieee80211_wide_bw_chansw_ie);
 852			pos = skb_put_zero(skb, ie_len);
 853
 854			*pos++ = WLAN_EID_CHANNEL_SWITCH_WRAPPER; /* EID */
 855			*pos++ = 5;				  /* len */
 856			/* put sub IE */
 857			chandef = &csa->settings.chandef;
 858			ieee80211_ie_build_wide_bw_cs(pos, chandef);
 859			break;
 860		default:
 861			break;
 862		}
 863	}
 864	rcu_read_unlock();
 865
 866	if (ieee80211_add_srates_ie(sdata, skb, true, band) ||
 867	    mesh_add_ds_params_ie(sdata, skb))
 868		goto out_free;
 869
 870	bcn->head_len = skb->len;
 871	memcpy(bcn->head, skb->data, bcn->head_len);
 872
 873	/* now the tail */
 874	skb_trim(skb, 0);
 875	bcn->tail = bcn->head + bcn->head_len;
 876
 877	if (ieee80211_add_ext_srates_ie(sdata, skb, true, band) ||
 878	    mesh_add_rsn_ie(sdata, skb) ||
 879	    mesh_add_ht_cap_ie(sdata, skb) ||
 880	    mesh_add_ht_oper_ie(sdata, skb) ||
 881	    mesh_add_meshid_ie(sdata, skb) ||
 882	    mesh_add_meshconf_ie(sdata, skb) ||
 883	    mesh_add_awake_window_ie(sdata, skb) ||
 884	    mesh_add_vht_cap_ie(sdata, skb) ||
 885	    mesh_add_vht_oper_ie(sdata, skb) ||
 886	    mesh_add_he_cap_ie(sdata, skb, ie_len_he_cap) ||
 887	    mesh_add_he_oper_ie(sdata, skb) ||
 888	    mesh_add_vendor_ies(sdata, skb))
 889		goto out_free;
 890
 891	bcn->tail_len = skb->len;
 892	memcpy(bcn->tail, skb->data, bcn->tail_len);
 893	bcn->meshconf = (struct ieee80211_meshconf_ie *)
 894					(bcn->tail + ifmsh->meshconf_offset);
 895
 896	dev_kfree_skb(skb);
 897	rcu_assign_pointer(ifmsh->beacon, bcn);
 898	return 0;
 899out_free:
 900	kfree(bcn);
 901	dev_kfree_skb(skb);
 902	return -ENOMEM;
 903}
 904
 905static int
 906ieee80211_mesh_rebuild_beacon(struct ieee80211_sub_if_data *sdata)
 907{
 908	struct beacon_data *old_bcn;
 909	int ret;
 910
 911	old_bcn = rcu_dereference_protected(sdata->u.mesh.beacon,
 912					    lockdep_is_held(&sdata->wdev.mtx));
 913	ret = ieee80211_mesh_build_beacon(&sdata->u.mesh);
 914	if (ret)
 915		/* just reuse old beacon */
 916		return ret;
 917
 918	if (old_bcn)
 919		kfree_rcu(old_bcn, rcu_head);
 920	return 0;
 921}
 922
 923void ieee80211_mbss_info_change_notify(struct ieee80211_sub_if_data *sdata,
 924				       u32 changed)
 925{
 926	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 927	unsigned long bits = changed;
 928	u32 bit;
 929
 930	if (!bits)
 931		return;
 932
 933	/* if we race with running work, worst case this work becomes a noop */
 934	for_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE)
 935		set_bit(bit, &ifmsh->mbss_changed);
 936	set_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags);
 937	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
 938}
 939
 940int ieee80211_start_mesh(struct ieee80211_sub_if_data *sdata)
 941{
 942	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 943	struct ieee80211_local *local = sdata->local;
 944	u32 changed = BSS_CHANGED_BEACON |
 945		      BSS_CHANGED_BEACON_ENABLED |
 946		      BSS_CHANGED_HT |
 947		      BSS_CHANGED_BASIC_RATES |
 948		      BSS_CHANGED_BEACON_INT |
 949		      BSS_CHANGED_MCAST_RATE;
 950
 951	local->fif_other_bss++;
 952	/* mesh ifaces must set allmulti to forward mcast traffic */
 953	atomic_inc(&local->iff_allmultis);
 954	ieee80211_configure_filter(local);
 955
 956	ifmsh->mesh_cc_id = 0;	/* Disabled */
 957	/* register sync ops from extensible synchronization framework */
 958	ifmsh->sync_ops = ieee80211_mesh_sync_ops_get(ifmsh->mesh_sp_id);
 
 959	ifmsh->sync_offset_clockdrift_max = 0;
 960	set_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags);
 961	ieee80211_mesh_root_setup(ifmsh);
 962	ieee80211_queue_work(&local->hw, &sdata->work);
 963	sdata->vif.bss_conf.ht_operation_mode =
 964				ifmsh->mshcfg.ht_opmode;
 965	sdata->vif.bss_conf.enable_beacon = true;
 966
 967	changed |= ieee80211_mps_local_status_update(sdata);
 968
 969	if (ieee80211_mesh_build_beacon(ifmsh)) {
 970		ieee80211_stop_mesh(sdata);
 971		return -ENOMEM;
 972	}
 973
 974	ieee80211_recalc_dtim(local, sdata);
 975	ieee80211_bss_info_change_notify(sdata, changed);
 976
 977	netif_carrier_on(sdata->dev);
 978	return 0;
 979}
 980
 981void ieee80211_stop_mesh(struct ieee80211_sub_if_data *sdata)
 982{
 983	struct ieee80211_local *local = sdata->local;
 984	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
 985	struct beacon_data *bcn;
 986
 987	netif_carrier_off(sdata->dev);
 988
 989	/* flush STAs and mpaths on this iface */
 990	sta_info_flush(sdata);
 991	ieee80211_free_keys(sdata, true);
 992	mesh_path_flush_by_iface(sdata);
 993
 994	/* stop the beacon */
 995	ifmsh->mesh_id_len = 0;
 996	sdata->vif.bss_conf.enable_beacon = false;
 997	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
 998	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
 999
1000	/* remove beacon */
1001	bcn = rcu_dereference_protected(ifmsh->beacon,
1002					lockdep_is_held(&sdata->wdev.mtx));
1003	RCU_INIT_POINTER(ifmsh->beacon, NULL);
1004	kfree_rcu(bcn, rcu_head);
1005
1006	/* free all potentially still buffered group-addressed frames */
1007	local->total_ps_buffered -= skb_queue_len(&ifmsh->ps.bc_buf);
1008	skb_queue_purge(&ifmsh->ps.bc_buf);
1009
1010	del_timer_sync(&sdata->u.mesh.housekeeping_timer);
1011	del_timer_sync(&sdata->u.mesh.mesh_path_root_timer);
1012	del_timer_sync(&sdata->u.mesh.mesh_path_timer);
1013
1014	/* clear any mesh work (for next join) we may have accrued */
1015	ifmsh->wrkq_flags = 0;
1016	ifmsh->mbss_changed = 0;
1017
1018	local->fif_other_bss--;
1019	atomic_dec(&local->iff_allmultis);
1020	ieee80211_configure_filter(local);
1021}
1022
1023static void ieee80211_mesh_csa_mark_radar(struct ieee80211_sub_if_data *sdata)
1024{
1025	int err;
1026
1027	/* if the current channel is a DFS channel, mark the channel as
1028	 * unavailable.
1029	 */
1030	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
1031					    &sdata->vif.bss_conf.chandef,
1032					    NL80211_IFTYPE_MESH_POINT);
1033	if (err > 0)
1034		cfg80211_radar_event(sdata->local->hw.wiphy,
1035				     &sdata->vif.bss_conf.chandef, GFP_ATOMIC);
1036}
1037
1038static bool
1039ieee80211_mesh_process_chnswitch(struct ieee80211_sub_if_data *sdata,
1040				 struct ieee802_11_elems *elems, bool beacon)
1041{
1042	struct cfg80211_csa_settings params;
1043	struct ieee80211_csa_ie csa_ie;
1044	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1045	struct ieee80211_supported_band *sband;
1046	int err;
1047	u32 sta_flags;
1048
1049	sdata_assert_lock(sdata);
1050
1051	sband = ieee80211_get_sband(sdata);
1052	if (!sband)
1053		return false;
1054
1055	sta_flags = 0;
1056	switch (sdata->vif.bss_conf.chandef.width) {
1057	case NL80211_CHAN_WIDTH_20_NOHT:
1058		sta_flags |= IEEE80211_STA_DISABLE_HT;
1059		/* fall through */
1060	case NL80211_CHAN_WIDTH_20:
1061		sta_flags |= IEEE80211_STA_DISABLE_40MHZ;
1062		/* fall through */
1063	case NL80211_CHAN_WIDTH_40:
1064		sta_flags |= IEEE80211_STA_DISABLE_VHT;
1065		break;
1066	default:
1067		break;
1068	}
1069
1070	memset(&params, 0, sizeof(params));
1071	err = ieee80211_parse_ch_switch_ie(sdata, elems, sband->band,
 
1072					   sta_flags, sdata->vif.addr,
1073					   &csa_ie);
1074	if (err < 0)
1075		return false;
1076	if (err)
1077		return false;
1078
1079	/* Mark the channel unavailable if the reason for the switch is
1080	 * regulatory.
1081	 */
1082	if (csa_ie.reason_code == WLAN_REASON_MESH_CHAN_REGULATORY)
1083		ieee80211_mesh_csa_mark_radar(sdata);
1084
1085	params.chandef = csa_ie.chandef;
1086	params.count = csa_ie.count;
1087
1088	if (!cfg80211_chandef_usable(sdata->local->hw.wiphy, &params.chandef,
1089				     IEEE80211_CHAN_DISABLED) ||
1090	    !cfg80211_reg_can_beacon(sdata->local->hw.wiphy, &params.chandef,
1091				     NL80211_IFTYPE_MESH_POINT)) {
1092		sdata_info(sdata,
1093			   "mesh STA %pM switches to unsupported channel (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n",
1094			   sdata->vif.addr,
1095			   params.chandef.chan->center_freq,
1096			   params.chandef.width,
1097			   params.chandef.center_freq1,
1098			   params.chandef.center_freq2);
1099		return false;
1100	}
1101
1102	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
1103					    &params.chandef,
1104					    NL80211_IFTYPE_MESH_POINT);
1105	if (err < 0)
1106		return false;
1107	if (err > 0 && !ifmsh->userspace_handles_dfs) {
1108		sdata_info(sdata,
1109			   "mesh STA %pM switches to channel requiring DFS (%d MHz, width:%d, CF1/2: %d/%d MHz), aborting\n",
1110			   sdata->vif.addr,
1111			   params.chandef.chan->center_freq,
1112			   params.chandef.width,
1113			   params.chandef.center_freq1,
1114			   params.chandef.center_freq2);
1115		return false;
1116	}
1117
1118	params.radar_required = err;
1119
1120	if (cfg80211_chandef_identical(&params.chandef,
1121				       &sdata->vif.bss_conf.chandef)) {
1122		mcsa_dbg(sdata,
1123			 "received csa with an identical chandef, ignoring\n");
1124		return true;
1125	}
1126
1127	mcsa_dbg(sdata,
1128		 "received channel switch announcement to go to channel %d MHz\n",
1129		 params.chandef.chan->center_freq);
1130
1131	params.block_tx = csa_ie.mode & WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT;
1132	if (beacon) {
1133		ifmsh->chsw_ttl = csa_ie.ttl - 1;
1134		if (ifmsh->pre_value >= csa_ie.pre_value)
1135			return false;
1136		ifmsh->pre_value = csa_ie.pre_value;
1137	}
1138
1139	if (ifmsh->chsw_ttl >= ifmsh->mshcfg.dot11MeshTTL)
1140		return false;
1141
1142	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_REPEATER;
1143
1144	if (ieee80211_channel_switch(sdata->local->hw.wiphy, sdata->dev,
1145				     &params) < 0)
1146		return false;
1147
1148	return true;
1149}
1150
1151static void
1152ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data *sdata,
1153			    struct ieee80211_mgmt *mgmt, size_t len)
1154{
1155	struct ieee80211_local *local = sdata->local;
1156	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1157	struct sk_buff *presp;
1158	struct beacon_data *bcn;
1159	struct ieee80211_mgmt *hdr;
1160	struct ieee802_11_elems elems;
1161	size_t baselen;
1162	u8 *pos;
1163
1164	pos = mgmt->u.probe_req.variable;
1165	baselen = (u8 *) pos - (u8 *) mgmt;
1166	if (baselen > len)
1167		return;
1168
1169	ieee802_11_parse_elems(pos, len - baselen, false, &elems, mgmt->bssid,
1170			       NULL);
1171
1172	if (!elems.mesh_id)
1173		return;
1174
1175	/* 802.11-2012 10.1.4.3.2 */
1176	if ((!ether_addr_equal(mgmt->da, sdata->vif.addr) &&
1177	     !is_broadcast_ether_addr(mgmt->da)) ||
1178	    elems.ssid_len != 0)
1179		return;
1180
1181	if (elems.mesh_id_len != 0 &&
1182	    (elems.mesh_id_len != ifmsh->mesh_id_len ||
1183	     memcmp(elems.mesh_id, ifmsh->mesh_id, ifmsh->mesh_id_len)))
1184		return;
1185
1186	rcu_read_lock();
1187	bcn = rcu_dereference(ifmsh->beacon);
1188
1189	if (!bcn)
1190		goto out;
1191
1192	presp = dev_alloc_skb(local->tx_headroom +
1193			      bcn->head_len + bcn->tail_len);
1194	if (!presp)
1195		goto out;
1196
1197	skb_reserve(presp, local->tx_headroom);
1198	skb_put_data(presp, bcn->head, bcn->head_len);
1199	skb_put_data(presp, bcn->tail, bcn->tail_len);
1200	hdr = (struct ieee80211_mgmt *) presp->data;
1201	hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1202					 IEEE80211_STYPE_PROBE_RESP);
1203	memcpy(hdr->da, mgmt->sa, ETH_ALEN);
1204	IEEE80211_SKB_CB(presp)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1205	ieee80211_tx_skb(sdata, presp);
1206out:
1207	rcu_read_unlock();
1208}
1209
1210static void ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data *sdata,
1211					u16 stype,
1212					struct ieee80211_mgmt *mgmt,
1213					size_t len,
1214					struct ieee80211_rx_status *rx_status)
1215{
1216	struct ieee80211_local *local = sdata->local;
1217	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1218	struct ieee802_11_elems elems;
1219	struct ieee80211_channel *channel;
1220	size_t baselen;
1221	int freq;
1222	enum nl80211_band band = rx_status->band;
1223
1224	/* ignore ProbeResp to foreign address */
1225	if (stype == IEEE80211_STYPE_PROBE_RESP &&
1226	    !ether_addr_equal(mgmt->da, sdata->vif.addr))
1227		return;
1228
1229	baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1230	if (baselen > len)
1231		return;
1232
1233	ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1234			       false, &elems, mgmt->bssid, NULL);
1235
1236	/* ignore non-mesh or secure / unsecure mismatch */
1237	if ((!elems.mesh_id || !elems.mesh_config) ||
1238	    (elems.rsn && sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE) ||
1239	    (!elems.rsn && sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE))
1240		return;
1241
1242	if (elems.ds_params)
1243		freq = ieee80211_channel_to_frequency(elems.ds_params[0], band);
1244	else
1245		freq = rx_status->freq;
1246
1247	channel = ieee80211_get_channel(local->hw.wiphy, freq);
1248
1249	if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1250		return;
1251
1252	if (mesh_matches_local(sdata, &elems)) {
1253		mpl_dbg(sdata, "rssi_threshold=%d,rx_status->signal=%d\n",
1254			sdata->u.mesh.mshcfg.rssi_threshold, rx_status->signal);
1255		if (!sdata->u.mesh.user_mpm ||
1256		    sdata->u.mesh.mshcfg.rssi_threshold == 0 ||
1257		    sdata->u.mesh.mshcfg.rssi_threshold < rx_status->signal)
1258			mesh_neighbour_update(sdata, mgmt->sa, &elems,
1259					      rx_status);
1260	}
1261
1262	if (ifmsh->sync_ops)
1263		ifmsh->sync_ops->rx_bcn_presp(sdata,
1264			stype, mgmt, &elems, rx_status);
1265
1266	if (ifmsh->csa_role != IEEE80211_MESH_CSA_ROLE_INIT &&
1267	    !sdata->vif.csa_active)
1268		ieee80211_mesh_process_chnswitch(sdata, &elems, true);
1269}
1270
1271int ieee80211_mesh_finish_csa(struct ieee80211_sub_if_data *sdata)
1272{
1273	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1274	struct mesh_csa_settings *tmp_csa_settings;
1275	int ret = 0;
1276	int changed = 0;
1277
1278	/* Reset the TTL value and Initiator flag */
1279	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1280	ifmsh->chsw_ttl = 0;
1281
1282	/* Remove the CSA and MCSP elements from the beacon */
1283	tmp_csa_settings = rcu_dereference_protected(ifmsh->csa,
1284					    lockdep_is_held(&sdata->wdev.mtx));
1285	RCU_INIT_POINTER(ifmsh->csa, NULL);
1286	if (tmp_csa_settings)
1287		kfree_rcu(tmp_csa_settings, rcu_head);
1288	ret = ieee80211_mesh_rebuild_beacon(sdata);
1289	if (ret)
1290		return -EINVAL;
1291
1292	changed |= BSS_CHANGED_BEACON;
1293
1294	mcsa_dbg(sdata, "complete switching to center freq %d MHz",
1295		 sdata->vif.bss_conf.chandef.chan->center_freq);
1296	return changed;
1297}
1298
1299int ieee80211_mesh_csa_beacon(struct ieee80211_sub_if_data *sdata,
1300			      struct cfg80211_csa_settings *csa_settings)
1301{
1302	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1303	struct mesh_csa_settings *tmp_csa_settings;
1304	int ret = 0;
1305
1306	lockdep_assert_held(&sdata->wdev.mtx);
1307
1308	tmp_csa_settings = kmalloc(sizeof(*tmp_csa_settings),
1309				   GFP_ATOMIC);
1310	if (!tmp_csa_settings)
1311		return -ENOMEM;
1312
1313	memcpy(&tmp_csa_settings->settings, csa_settings,
1314	       sizeof(struct cfg80211_csa_settings));
1315
1316	rcu_assign_pointer(ifmsh->csa, tmp_csa_settings);
1317
1318	ret = ieee80211_mesh_rebuild_beacon(sdata);
1319	if (ret) {
1320		tmp_csa_settings = rcu_dereference(ifmsh->csa);
1321		RCU_INIT_POINTER(ifmsh->csa, NULL);
1322		kfree_rcu(tmp_csa_settings, rcu_head);
1323		return ret;
1324	}
1325
1326	return BSS_CHANGED_BEACON;
1327}
1328
1329static int mesh_fwd_csa_frame(struct ieee80211_sub_if_data *sdata,
1330			       struct ieee80211_mgmt *mgmt, size_t len,
1331			       struct ieee802_11_elems *elems)
1332{
1333	struct ieee80211_mgmt *mgmt_fwd;
1334	struct sk_buff *skb;
1335	struct ieee80211_local *local = sdata->local;
 
 
1336
1337	skb = dev_alloc_skb(local->tx_headroom + len);
1338	if (!skb)
1339		return -ENOMEM;
1340	skb_reserve(skb, local->tx_headroom);
1341	mgmt_fwd = skb_put(skb, len);
1342
1343	elems->mesh_chansw_params_ie->mesh_ttl--;
1344	elems->mesh_chansw_params_ie->mesh_flags &=
1345		~WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
 
 
 
 
1346
1347	memcpy(mgmt_fwd, mgmt, len);
1348	eth_broadcast_addr(mgmt_fwd->da);
1349	memcpy(mgmt_fwd->sa, sdata->vif.addr, ETH_ALEN);
1350	memcpy(mgmt_fwd->bssid, sdata->vif.addr, ETH_ALEN);
1351
1352	ieee80211_tx_skb(sdata, skb);
1353	return 0;
1354}
1355
1356static void mesh_rx_csa_frame(struct ieee80211_sub_if_data *sdata,
1357			      struct ieee80211_mgmt *mgmt, size_t len)
1358{
1359	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1360	struct ieee802_11_elems elems;
1361	u16 pre_value;
1362	bool fwd_csa = true;
1363	size_t baselen;
1364	u8 *pos;
1365
1366	if (mgmt->u.action.u.measurement.action_code !=
1367	    WLAN_ACTION_SPCT_CHL_SWITCH)
1368		return;
1369
1370	pos = mgmt->u.action.u.chan_switch.variable;
1371	baselen = offsetof(struct ieee80211_mgmt,
1372			   u.action.u.chan_switch.variable);
1373	ieee802_11_parse_elems(pos, len - baselen, true, &elems,
1374			       mgmt->bssid, NULL);
1375
1376	ifmsh->chsw_ttl = elems.mesh_chansw_params_ie->mesh_ttl;
1377	if (!--ifmsh->chsw_ttl)
1378		fwd_csa = false;
1379
1380	pre_value = le16_to_cpu(elems.mesh_chansw_params_ie->mesh_pre_value);
1381	if (ifmsh->pre_value >= pre_value)
1382		return;
1383
1384	ifmsh->pre_value = pre_value;
1385
1386	if (!sdata->vif.csa_active &&
1387	    !ieee80211_mesh_process_chnswitch(sdata, &elems, false)) {
1388		mcsa_dbg(sdata, "Failed to process CSA action frame");
1389		return;
1390	}
1391
1392	/* forward or re-broadcast the CSA frame */
1393	if (fwd_csa) {
1394		if (mesh_fwd_csa_frame(sdata, mgmt, len, &elems) < 0)
1395			mcsa_dbg(sdata, "Failed to forward the CSA frame");
1396	}
1397}
1398
1399static void ieee80211_mesh_rx_mgmt_action(struct ieee80211_sub_if_data *sdata,
1400					  struct ieee80211_mgmt *mgmt,
1401					  size_t len,
1402					  struct ieee80211_rx_status *rx_status)
1403{
1404	switch (mgmt->u.action.category) {
1405	case WLAN_CATEGORY_SELF_PROTECTED:
1406		switch (mgmt->u.action.u.self_prot.action_code) {
1407		case WLAN_SP_MESH_PEERING_OPEN:
1408		case WLAN_SP_MESH_PEERING_CLOSE:
1409		case WLAN_SP_MESH_PEERING_CONFIRM:
1410			mesh_rx_plink_frame(sdata, mgmt, len, rx_status);
1411			break;
1412		}
1413		break;
1414	case WLAN_CATEGORY_MESH_ACTION:
1415		if (mesh_action_is_path_sel(mgmt))
1416			mesh_rx_path_sel_frame(sdata, mgmt, len);
1417		break;
1418	case WLAN_CATEGORY_SPECTRUM_MGMT:
1419		mesh_rx_csa_frame(sdata, mgmt, len);
1420		break;
1421	}
1422}
1423
1424void ieee80211_mesh_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
1425				   struct sk_buff *skb)
1426{
1427	struct ieee80211_rx_status *rx_status;
1428	struct ieee80211_mgmt *mgmt;
1429	u16 stype;
1430
1431	sdata_lock(sdata);
1432
1433	/* mesh already went down */
1434	if (!sdata->u.mesh.mesh_id_len)
1435		goto out;
1436
1437	rx_status = IEEE80211_SKB_RXCB(skb);
1438	mgmt = (struct ieee80211_mgmt *) skb->data;
1439	stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;
1440
1441	switch (stype) {
1442	case IEEE80211_STYPE_PROBE_RESP:
1443	case IEEE80211_STYPE_BEACON:
1444		ieee80211_mesh_rx_bcn_presp(sdata, stype, mgmt, skb->len,
1445					    rx_status);
1446		break;
1447	case IEEE80211_STYPE_PROBE_REQ:
1448		ieee80211_mesh_rx_probe_req(sdata, mgmt, skb->len);
1449		break;
1450	case IEEE80211_STYPE_ACTION:
1451		ieee80211_mesh_rx_mgmt_action(sdata, mgmt, skb->len, rx_status);
1452		break;
1453	}
1454out:
1455	sdata_unlock(sdata);
1456}
1457
1458static void mesh_bss_info_changed(struct ieee80211_sub_if_data *sdata)
1459{
1460	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1461	u32 bit, changed = 0;
1462
1463	for_each_set_bit(bit, &ifmsh->mbss_changed,
1464			 sizeof(changed) * BITS_PER_BYTE) {
1465		clear_bit(bit, &ifmsh->mbss_changed);
1466		changed |= BIT(bit);
1467	}
1468
1469	if (sdata->vif.bss_conf.enable_beacon &&
1470	    (changed & (BSS_CHANGED_BEACON |
1471			BSS_CHANGED_HT |
1472			BSS_CHANGED_BASIC_RATES |
1473			BSS_CHANGED_BEACON_INT)))
1474		if (ieee80211_mesh_rebuild_beacon(sdata))
1475			return;
1476
1477	ieee80211_bss_info_change_notify(sdata, changed);
1478}
1479
1480void ieee80211_mesh_work(struct ieee80211_sub_if_data *sdata)
1481{
1482	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1483
1484	sdata_lock(sdata);
1485
1486	/* mesh already went down */
1487	if (!sdata->u.mesh.mesh_id_len)
1488		goto out;
1489
1490	if (ifmsh->preq_queue_len &&
1491	    time_after(jiffies,
1492		       ifmsh->last_preq + msecs_to_jiffies(ifmsh->mshcfg.dot11MeshHWMPpreqMinInterval)))
1493		mesh_path_start_discovery(sdata);
1494
1495	if (test_and_clear_bit(MESH_WORK_HOUSEKEEPING, &ifmsh->wrkq_flags))
1496		ieee80211_mesh_housekeeping(sdata);
1497
1498	if (test_and_clear_bit(MESH_WORK_ROOT, &ifmsh->wrkq_flags))
1499		ieee80211_mesh_rootpath(sdata);
1500
1501	if (test_and_clear_bit(MESH_WORK_DRIFT_ADJUST, &ifmsh->wrkq_flags))
1502		mesh_sync_adjust_tsf(sdata);
1503
1504	if (test_and_clear_bit(MESH_WORK_MBSS_CHANGED, &ifmsh->wrkq_flags))
1505		mesh_bss_info_changed(sdata);
1506out:
1507	sdata_unlock(sdata);
1508}
1509
1510
1511void ieee80211_mesh_init_sdata(struct ieee80211_sub_if_data *sdata)
1512{
1513	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1514	static u8 zero_addr[ETH_ALEN] = {};
1515
1516	timer_setup(&ifmsh->housekeeping_timer,
1517		    ieee80211_mesh_housekeeping_timer, 0);
 
1518
1519	ifmsh->accepting_plinks = true;
1520	atomic_set(&ifmsh->mpaths, 0);
1521	mesh_rmc_init(sdata);
1522	ifmsh->last_preq = jiffies;
1523	ifmsh->next_perr = jiffies;
1524	ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
1525	/* Allocate all mesh structures when creating the first mesh interface. */
1526	if (!mesh_allocated)
1527		ieee80211s_init();
1528
1529	mesh_pathtbl_init(sdata);
1530
1531	timer_setup(&ifmsh->mesh_path_timer, ieee80211_mesh_path_timer, 0);
1532	timer_setup(&ifmsh->mesh_path_root_timer,
1533		    ieee80211_mesh_path_root_timer, 0);
 
 
 
1534	INIT_LIST_HEAD(&ifmsh->preq_queue.list);
1535	skb_queue_head_init(&ifmsh->ps.bc_buf);
1536	spin_lock_init(&ifmsh->mesh_preq_queue_lock);
1537	spin_lock_init(&ifmsh->sync_offset_lock);
1538	RCU_INIT_POINTER(ifmsh->beacon, NULL);
1539
1540	sdata->vif.bss_conf.bssid = zero_addr;
1541}
1542
1543void ieee80211_mesh_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1544{
1545	mesh_rmc_free(sdata);
1546	mesh_pathtbl_unregister(sdata);
1547}