2 * mac80211 TDLS handling code
4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
5 * Copyright 2014, Intel Corporation
7 * This file is GPLv2 as found in COPYING.
10 #include <linux/ieee80211.h>
11 #include <net/cfg80211.h>
12 #include "ieee80211_i.h"
13 #include "driver-ops.h"
15 /* give usermode some time for retries in setting up the TDLS session */
16 #define TDLS_PEER_SETUP_TIMEOUT (15 * HZ)
18 void ieee80211_tdls_peer_del_work(struct work_struct *wk)
20 struct ieee80211_sub_if_data *sdata;
21 struct ieee80211_local *local;
23 sdata = container_of(wk, struct ieee80211_sub_if_data,
24 tdls_peer_del_work.work);
27 mutex_lock(&local->mtx);
28 if (!is_zero_ether_addr(sdata->tdls_peer)) {
29 tdls_dbg(sdata, "TDLS del peer %pM\n", sdata->tdls_peer);
30 sta_info_destroy_addr(sdata, sdata->tdls_peer);
31 eth_zero_addr(sdata->tdls_peer);
33 mutex_unlock(&local->mtx);
36 static void ieee80211_tdls_add_ext_capab(struct sk_buff *skb)
38 u8 *pos = (void *)skb_put(skb, 7);
40 *pos++ = WLAN_EID_EXT_CAPABILITY;
46 *pos++ = WLAN_EXT_CAPA5_TDLS_ENABLED;
49 static u16 ieee80211_get_tdls_sta_capab(struct ieee80211_sub_if_data *sdata)
51 struct ieee80211_local *local = sdata->local;
55 if (ieee80211_get_sdata_band(sdata) != IEEE80211_BAND_2GHZ)
58 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
59 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
60 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
61 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
66 static void ieee80211_tdls_add_link_ie(struct sk_buff *skb, const u8 *src_addr,
67 const u8 *peer, const u8 *bssid)
69 struct ieee80211_tdls_lnkie *lnkid;
71 lnkid = (void *)skb_put(skb, sizeof(struct ieee80211_tdls_lnkie));
73 lnkid->ie_type = WLAN_EID_LINK_ID;
74 lnkid->ie_len = sizeof(struct ieee80211_tdls_lnkie) - 2;
76 memcpy(lnkid->bssid, bssid, ETH_ALEN);
77 memcpy(lnkid->init_sta, src_addr, ETH_ALEN);
78 memcpy(lnkid->resp_sta, peer, ETH_ALEN);
82 ieee80211_prep_tdls_encap_data(struct wiphy *wiphy, struct net_device *dev,
83 const u8 *peer, u8 action_code, u8 dialog_token,
84 u16 status_code, struct sk_buff *skb)
86 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
87 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
88 struct ieee80211_tdls_data *tf;
90 tf = (void *)skb_put(skb, offsetof(struct ieee80211_tdls_data, u));
92 memcpy(tf->da, peer, ETH_ALEN);
93 memcpy(tf->sa, sdata->vif.addr, ETH_ALEN);
94 tf->ether_type = cpu_to_be16(ETH_P_TDLS);
95 tf->payload_type = WLAN_TDLS_SNAP_RFTYPE;
97 switch (action_code) {
98 case WLAN_TDLS_SETUP_REQUEST:
99 tf->category = WLAN_CATEGORY_TDLS;
100 tf->action_code = WLAN_TDLS_SETUP_REQUEST;
102 skb_put(skb, sizeof(tf->u.setup_req));
103 tf->u.setup_req.dialog_token = dialog_token;
104 tf->u.setup_req.capability =
105 cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
107 ieee80211_add_srates_ie(sdata, skb, false, band);
108 ieee80211_add_ext_srates_ie(sdata, skb, false, band);
109 ieee80211_tdls_add_ext_capab(skb);
111 case WLAN_TDLS_SETUP_RESPONSE:
112 tf->category = WLAN_CATEGORY_TDLS;
113 tf->action_code = WLAN_TDLS_SETUP_RESPONSE;
115 skb_put(skb, sizeof(tf->u.setup_resp));
116 tf->u.setup_resp.status_code = cpu_to_le16(status_code);
117 tf->u.setup_resp.dialog_token = dialog_token;
118 tf->u.setup_resp.capability =
119 cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
121 ieee80211_add_srates_ie(sdata, skb, false, band);
122 ieee80211_add_ext_srates_ie(sdata, skb, false, band);
123 ieee80211_tdls_add_ext_capab(skb);
125 case WLAN_TDLS_SETUP_CONFIRM:
126 tf->category = WLAN_CATEGORY_TDLS;
127 tf->action_code = WLAN_TDLS_SETUP_CONFIRM;
129 skb_put(skb, sizeof(tf->u.setup_cfm));
130 tf->u.setup_cfm.status_code = cpu_to_le16(status_code);
131 tf->u.setup_cfm.dialog_token = dialog_token;
133 case WLAN_TDLS_TEARDOWN:
134 tf->category = WLAN_CATEGORY_TDLS;
135 tf->action_code = WLAN_TDLS_TEARDOWN;
137 skb_put(skb, sizeof(tf->u.teardown));
138 tf->u.teardown.reason_code = cpu_to_le16(status_code);
140 case WLAN_TDLS_DISCOVERY_REQUEST:
141 tf->category = WLAN_CATEGORY_TDLS;
142 tf->action_code = WLAN_TDLS_DISCOVERY_REQUEST;
144 skb_put(skb, sizeof(tf->u.discover_req));
145 tf->u.discover_req.dialog_token = dialog_token;
155 ieee80211_prep_tdls_direct(struct wiphy *wiphy, struct net_device *dev,
156 const u8 *peer, u8 action_code, u8 dialog_token,
157 u16 status_code, struct sk_buff *skb)
159 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
160 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
161 struct ieee80211_mgmt *mgmt;
163 mgmt = (void *)skb_put(skb, 24);
165 memcpy(mgmt->da, peer, ETH_ALEN);
166 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
167 memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
169 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
170 IEEE80211_STYPE_ACTION);
172 switch (action_code) {
173 case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
174 skb_put(skb, 1 + sizeof(mgmt->u.action.u.tdls_discover_resp));
175 mgmt->u.action.category = WLAN_CATEGORY_PUBLIC;
176 mgmt->u.action.u.tdls_discover_resp.action_code =
177 WLAN_PUB_ACTION_TDLS_DISCOVER_RES;
178 mgmt->u.action.u.tdls_discover_resp.dialog_token =
180 mgmt->u.action.u.tdls_discover_resp.capability =
181 cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
183 ieee80211_add_srates_ie(sdata, skb, false, band);
184 ieee80211_add_ext_srates_ie(sdata, skb, false, band);
185 ieee80211_tdls_add_ext_capab(skb);
195 ieee80211_tdls_prep_mgmt_packet(struct wiphy *wiphy, struct net_device *dev,
196 const u8 *peer, u8 action_code,
197 u8 dialog_token, u16 status_code,
198 u32 peer_capability, bool initiator,
199 const u8 *extra_ies, size_t extra_ies_len)
201 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
202 struct ieee80211_local *local = sdata->local;
203 struct sk_buff *skb = NULL;
205 const u8 *init_addr, *rsp_addr;
208 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
209 max(sizeof(struct ieee80211_mgmt),
210 sizeof(struct ieee80211_tdls_data)) +
211 50 + /* supported rates */
214 sizeof(struct ieee80211_tdls_lnkie));
218 skb_reserve(skb, local->hw.extra_tx_headroom);
220 switch (action_code) {
221 case WLAN_TDLS_SETUP_REQUEST:
222 case WLAN_TDLS_SETUP_RESPONSE:
223 case WLAN_TDLS_SETUP_CONFIRM:
224 case WLAN_TDLS_TEARDOWN:
225 case WLAN_TDLS_DISCOVERY_REQUEST:
226 ret = ieee80211_prep_tdls_encap_data(wiphy, dev, peer,
227 action_code, dialog_token,
231 case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
232 ret = ieee80211_prep_tdls_direct(wiphy, dev, peer, action_code,
233 dialog_token, status_code,
246 memcpy(skb_put(skb, extra_ies_len), extra_ies, extra_ies_len);
248 /* sanity check for initiator */
249 switch (action_code) {
250 case WLAN_TDLS_SETUP_REQUEST:
251 case WLAN_TDLS_SETUP_CONFIRM:
252 case WLAN_TDLS_DISCOVERY_REQUEST:
258 case WLAN_TDLS_SETUP_RESPONSE:
259 case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
265 case WLAN_TDLS_TEARDOWN:
266 /* any value is ok */
274 init_addr = sdata->vif.addr;
278 rsp_addr = sdata->vif.addr;
281 ieee80211_tdls_add_link_ie(skb, init_addr, rsp_addr,
285 ieee80211_tx_skb(sdata, skb);
290 * According to 802.11z: Setup req/resp are sent in AC_BK, otherwise
291 * we should default to AC_VI.
293 switch (action_code) {
294 case WLAN_TDLS_SETUP_REQUEST:
295 case WLAN_TDLS_SETUP_RESPONSE:
296 skb_set_queue_mapping(skb, IEEE80211_AC_BK);
300 skb_set_queue_mapping(skb, IEEE80211_AC_VI);
305 /* disable bottom halves when entering the Tx path */
307 ret = ieee80211_subif_start_xmit(skb, dev);
318 ieee80211_tdls_mgmt_setup(struct wiphy *wiphy, struct net_device *dev,
319 const u8 *peer, u8 action_code, u8 dialog_token,
320 u16 status_code, u32 peer_capability, bool initiator,
321 const u8 *extra_ies, size_t extra_ies_len)
323 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
324 struct ieee80211_local *local = sdata->local;
327 mutex_lock(&local->mtx);
329 /* we don't support concurrent TDLS peer setups */
330 if (!is_zero_ether_addr(sdata->tdls_peer) &&
331 !ether_addr_equal(sdata->tdls_peer, peer)) {
337 * make sure we have a STA representing the peer so we drop or buffer
338 * non-TDLS-setup frames to the peer. We can't send other packets
339 * during setup through the AP path
342 if (!sta_info_get(sdata, peer)) {
349 ieee80211_flush_queues(local, sdata);
351 ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer, action_code,
352 dialog_token, status_code,
353 peer_capability, initiator,
354 extra_ies, extra_ies_len);
358 memcpy(sdata->tdls_peer, peer, ETH_ALEN);
359 ieee80211_queue_delayed_work(&sdata->local->hw,
360 &sdata->tdls_peer_del_work,
361 TDLS_PEER_SETUP_TIMEOUT);
364 mutex_unlock(&local->mtx);
369 ieee80211_tdls_mgmt_teardown(struct wiphy *wiphy, struct net_device *dev,
370 const u8 *peer, u8 action_code, u8 dialog_token,
371 u16 status_code, u32 peer_capability,
372 bool initiator, const u8 *extra_ies,
373 size_t extra_ies_len)
375 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
376 struct ieee80211_local *local = sdata->local;
377 struct sta_info *sta;
381 * No packets can be transmitted to the peer via the AP during setup -
382 * the STA is set as a TDLS peer, but is not authorized.
383 * During teardown, we prevent direct transmissions by stopping the
384 * queues and flushing all direct packets.
386 ieee80211_stop_vif_queues(local, sdata,
387 IEEE80211_QUEUE_STOP_REASON_TDLS_TEARDOWN);
388 ieee80211_flush_queues(local, sdata);
390 ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer, action_code,
391 dialog_token, status_code,
392 peer_capability, initiator,
393 extra_ies, extra_ies_len);
395 sdata_err(sdata, "Failed sending TDLS teardown packet %d\n",
399 * Remove the STA AUTH flag to force further traffic through the AP. If
400 * the STA was unreachable, it was already removed.
403 sta = sta_info_get(sdata, peer);
405 clear_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH);
408 ieee80211_wake_vif_queues(local, sdata,
409 IEEE80211_QUEUE_STOP_REASON_TDLS_TEARDOWN);
414 int ieee80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
415 const u8 *peer, u8 action_code, u8 dialog_token,
416 u16 status_code, u32 peer_capability,
417 bool initiator, const u8 *extra_ies,
418 size_t extra_ies_len)
420 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
423 if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS))
426 /* make sure we are in managed mode, and associated */
427 if (sdata->vif.type != NL80211_IFTYPE_STATION ||
428 !sdata->u.mgd.associated)
431 switch (action_code) {
432 case WLAN_TDLS_SETUP_REQUEST:
433 case WLAN_TDLS_SETUP_RESPONSE:
434 ret = ieee80211_tdls_mgmt_setup(wiphy, dev, peer, action_code,
435 dialog_token, status_code,
436 peer_capability, initiator,
437 extra_ies, extra_ies_len);
439 case WLAN_TDLS_TEARDOWN:
440 ret = ieee80211_tdls_mgmt_teardown(wiphy, dev, peer,
441 action_code, dialog_token,
443 peer_capability, initiator,
444 extra_ies, extra_ies_len);
446 case WLAN_TDLS_DISCOVERY_REQUEST:
448 * Protect the discovery so we can hear the TDLS discovery
449 * response frame. It is transmitted directly and not buffered
452 drv_mgd_protect_tdls_discover(sdata->local, sdata);
454 case WLAN_TDLS_SETUP_CONFIRM:
455 case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
456 /* no special handling */
457 ret = ieee80211_tdls_prep_mgmt_packet(wiphy, dev, peer,
462 initiator, extra_ies,
470 tdls_dbg(sdata, "TDLS mgmt action %d peer %pM status %d\n",
471 action_code, peer, ret);
475 int ieee80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
476 const u8 *peer, enum nl80211_tdls_operation oper)
478 struct sta_info *sta;
479 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
480 struct ieee80211_local *local = sdata->local;
483 if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS))
486 if (sdata->vif.type != NL80211_IFTYPE_STATION)
490 case NL80211_TDLS_ENABLE_LINK:
491 case NL80211_TDLS_DISABLE_LINK:
493 case NL80211_TDLS_TEARDOWN:
494 case NL80211_TDLS_SETUP:
495 case NL80211_TDLS_DISCOVERY_REQ:
496 /* We don't support in-driver setup/teardown/discovery */
500 mutex_lock(&local->mtx);
501 tdls_dbg(sdata, "TDLS oper %d peer %pM\n", oper, peer);
504 case NL80211_TDLS_ENABLE_LINK:
506 sta = sta_info_get(sdata, peer);
513 set_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH);
516 WARN_ON_ONCE(is_zero_ether_addr(sdata->tdls_peer) ||
517 !ether_addr_equal(sdata->tdls_peer, peer));
520 case NL80211_TDLS_DISABLE_LINK:
521 /* flush a potentially queued teardown packet */
522 ieee80211_flush_queues(local, sdata);
524 ret = sta_info_destroy_addr(sdata, peer);
531 if (ret == 0 && ether_addr_equal(sdata->tdls_peer, peer)) {
532 cancel_delayed_work(&sdata->tdls_peer_del_work);
533 eth_zero_addr(sdata->tdls_peer);
536 mutex_unlock(&local->mtx);
540 void ieee80211_tdls_oper_request(struct ieee80211_vif *vif, const u8 *peer,
541 enum nl80211_tdls_operation oper,
542 u16 reason_code, gfp_t gfp)
544 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
546 if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc) {
547 sdata_err(sdata, "Discarding TDLS oper %d - not STA or disconnected\n",
552 cfg80211_tdls_oper_request(sdata->dev, peer, oper, reason_code, gfp);
554 EXPORT_SYMBOL(ieee80211_tdls_oper_request);