ibss.c 47.5 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 * IBSS mode implementation
 * Copyright 2003-2008, Jouni Malinen <j@w1.fi>
 * Copyright 2004, Instant802 Networks, Inc.
 * Copyright 2005, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
 * Copyright 2009, Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/delay.h>
16
#include <linux/slab.h>
17 18 19 20 21 22 23 24
#include <linux/if_ether.h>
#include <linux/skbuff.h>
#include <linux/if_arp.h>
#include <linux/etherdevice.h>
#include <linux/rtnetlink.h>
#include <net/mac80211.h>

#include "ieee80211_i.h"
25
#include "driver-ops.h"
26 27 28 29 30 31 32
#include "rate.h"

#define IEEE80211_SCAN_INTERVAL (2 * HZ)
#define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)

#define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
#define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
33
#define IEEE80211_IBSS_RSN_INACTIVITY_LIMIT (10 * HZ)
34 35 36

#define IEEE80211_IBSS_MAX_STA_ENTRIES 128

37 38 39 40 41
static struct beacon_data *
ieee80211_ibss_build_presp(struct ieee80211_sub_if_data *sdata,
			   const int beacon_int, const u32 basic_rates,
			   const u16 capability, u64 tsf,
			   struct cfg80211_chan_def *chandef,
42 43
			   bool *have_higher_than_11mbit,
			   struct cfg80211_csa_settings *csa_settings)
44 45 46
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct ieee80211_local *local = sdata->local;
47
	int rates_n = 0, i, ri;
48 49 50
	struct ieee80211_mgmt *mgmt;
	u8 *pos;
	struct ieee80211_supported_band *sband;
51
	u32 rate_flags, rates = 0, rates_added = 0;
52 53
	struct beacon_data *presp;
	int frame_len;
54
	int shift;
55

56
	/* Build IBSS probe response */
57 58 59 60 61 62
	frame_len = sizeof(struct ieee80211_hdr_3addr) +
		    12 /* struct ieee80211_mgmt.u.beacon */ +
		    2 + IEEE80211_MAX_SSID_LEN /* max SSID */ +
		    2 + 8 /* max Supported Rates */ +
		    3 /* max DS params */ +
		    4 /* IBSS params */ +
63
		    5 /* Channel Switch Announcement */ +
64 65 66 67 68 69
		    2 + (IEEE80211_MAX_SUPP_RATES - 8) +
		    2 + sizeof(struct ieee80211_ht_cap) +
		    2 + sizeof(struct ieee80211_ht_operation) +
		    ifibss->ie_len;
	presp = kzalloc(sizeof(*presp) + frame_len, GFP_KERNEL);
	if (!presp)
70
		return NULL;
71 72 73 74

	presp->head = (void *)(presp + 1);

	mgmt = (void *) presp->head;
75 76
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_PROBE_RESP);
77
	eth_broadcast_addr(mgmt->da);
78
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
79
	memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN);
80
	mgmt->u.beacon.beacon_int = cpu_to_le16(beacon_int);
81
	mgmt->u.beacon.timestamp = cpu_to_le64(tsf);
82 83
	mgmt->u.beacon.capab_info = cpu_to_le16(capability);

84 85
	pos = (u8 *)mgmt + offsetof(struct ieee80211_mgmt, u.beacon.variable);

86 87 88
	*pos++ = WLAN_EID_SSID;
	*pos++ = ifibss->ssid_len;
	memcpy(pos, ifibss->ssid, ifibss->ssid_len);
89
	pos += ifibss->ssid_len;
90

91 92 93 94 95 96 97
	sband = local->hw.wiphy->bands[chandef->chan->band];
	rate_flags = ieee80211_chandef_rate_flags(chandef);
	shift = ieee80211_chandef_get_shift(chandef);
	rates_n = 0;
	if (have_higher_than_11mbit)
		*have_higher_than_11mbit = false;

98 99 100
	for (i = 0; i < sband->n_bitrates; i++) {
		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
			continue;
101 102 103
		if (sband->bitrates[i].bitrate > 110 &&
		    have_higher_than_11mbit)
			*have_higher_than_11mbit = true;
104 105 106 107 108

		rates |= BIT(i);
		rates_n++;
	}

109
	*pos++ = WLAN_EID_SUPP_RATES;
110 111 112 113
	*pos++ = min_t(int, 8, rates_n);
	for (ri = 0; ri < sband->n_bitrates; ri++) {
		int rate = DIV_ROUND_UP(sband->bitrates[ri].bitrate,
					5 * (1 << shift));
114
		u8 basic = 0;
115 116 117 118
		if (!(rates & BIT(ri)))
			continue;

		if (basic_rates & BIT(ri))
119
			basic = 0x80;
120
		*pos++ = basic | (u8) rate;
121 122
		if (++rates_added == 8) {
			ri++; /* continue at next rate for EXT_SUPP_RATES */
123
			break;
124
		}
125
	}
126 127 128 129

	if (sband->band == IEEE80211_BAND_2GHZ) {
		*pos++ = WLAN_EID_DS_PARAMS;
		*pos++ = 1;
130 131
		*pos++ = ieee80211_frequency_to_channel(
				chandef->chan->center_freq);
132 133 134 135 136 137 138 139
	}

	*pos++ = WLAN_EID_IBSS_PARAMS;
	*pos++ = 2;
	/* FIX: set ATIM window based on scan results */
	*pos++ = 0;
	*pos++ = 0;

140 141 142 143 144 145 146 147 148 149
	if (csa_settings) {
		*pos++ = WLAN_EID_CHANNEL_SWITCH;
		*pos++ = 3;
		*pos++ = csa_settings->block_tx ? 1 : 0;
		*pos++ = ieee80211_frequency_to_channel(
				csa_settings->chandef.chan->center_freq);
		sdata->csa_counter_offset_beacon = (pos - presp->head);
		*pos++ = csa_settings->count;
	}

150 151
	/* put the remaining rates in WLAN_EID_EXT_SUPP_RATES */
	if (rates_n > 8) {
152
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
153 154 155 156
		*pos++ = rates_n - 8;
		for (; ri < sband->n_bitrates; ri++) {
			int rate = DIV_ROUND_UP(sband->bitrates[ri].bitrate,
						5 * (1 << shift));
157
			u8 basic = 0;
158 159 160 161
			if (!(rates & BIT(ri)))
				continue;

			if (basic_rates & BIT(ri))
162
				basic = 0x80;
163
			*pos++ = basic | (u8) rate;
164
		}
165 166
	}

167 168 169 170
	if (ifibss->ie_len) {
		memcpy(pos, ifibss->ie, ifibss->ie_len);
		pos += ifibss->ie_len;
	}
171

172
	/* add HT capability and information IEs */
173 174 175
	if (chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
	    chandef->width != NL80211_CHAN_WIDTH_5 &&
	    chandef->width != NL80211_CHAN_WIDTH_10 &&
176
	    sband->ht_cap.ht_supported) {
177 178 179 180 181 182
		struct ieee80211_sta_ht_cap ht_cap;

		memcpy(&ht_cap, &sband->ht_cap, sizeof(ht_cap));
		ieee80211_apply_htcap_overrides(sdata, &ht_cap);

		pos = ieee80211_ie_build_ht_cap(pos, &ht_cap, ht_cap.cap);
183 184 185 186 187
		/*
		 * Note: According to 802.11n-2009 9.13.3.1, HT Protection
		 * field and RIFS Mode are reserved in IBSS mode, therefore
		 * keep them at 0
		 */
188
		pos = ieee80211_ie_build_ht_oper(pos, &sband->ht_cap,
189
						 chandef, 0);
190 191
	}

192
	if (local->hw.queues >= IEEE80211_NUM_ACS) {
193 194 195 196 197 198 199 200 201 202 203
		*pos++ = WLAN_EID_VENDOR_SPECIFIC;
		*pos++ = 7; /* len */
		*pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
		*pos++ = 0x50;
		*pos++ = 0xf2;
		*pos++ = 2; /* WME */
		*pos++ = 0; /* WME info */
		*pos++ = 1; /* WME ver */
		*pos++ = 0; /* U-APSD no in use */
	}

204 205
	presp->head_len = pos - presp->head;
	if (WARN_ON(presp->head_len > frame_len))
206 207 208 209 210 211 212 213 214 215
		goto error;

	return presp;
error:
	kfree(presp);
	return NULL;
}

static void __ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
				      const u8 *bssid, const int beacon_int,
216
				      struct cfg80211_chan_def *req_chandef,
217 218 219 220 221 222 223 224 225 226 227
				      const u32 basic_rates,
				      const u16 capability, u64 tsf,
				      bool creator)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	struct ieee80211_mgmt *mgmt;
	struct cfg80211_bss *bss;
	u32 bss_change;
	struct cfg80211_chan_def chandef;
228
	struct ieee80211_channel *chan;
229 230 231
	struct beacon_data *presp;
	enum nl80211_bss_scan_width scan_width;
	bool have_higher_than_11mbit;
232
	bool radar_required = false;
233
	int err;
234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251

	sdata_assert_lock(sdata);

	/* Reset own TSF to allow time synchronization work. */
	drv_reset_tsf(local, sdata);

	if (!ether_addr_equal(ifibss->bssid, bssid))
		sta_info_flush(sdata);

	/* if merging, indicate to driver that we leave the old IBSS */
	if (sdata->vif.bss_conf.ibss_joined) {
		sdata->vif.bss_conf.ibss_joined = false;
		sdata->vif.bss_conf.ibss_creator = false;
		sdata->vif.bss_conf.enable_beacon = false;
		netif_carrier_off(sdata->dev);
		ieee80211_bss_info_change_notify(sdata,
						 BSS_CHANGED_IBSS |
						 BSS_CHANGED_BEACON_ENABLED);
252
		drv_leave_ibss(local, sdata);
253 254 255 256 257 258 259 260 261 262
	}

	presp = rcu_dereference_protected(ifibss->presp,
					  lockdep_is_held(&sdata->wdev.mtx));
	rcu_assign_pointer(ifibss->presp, NULL);
	if (presp)
		kfree_rcu(presp, rcu_head);

	sdata->drop_unencrypted = capability & WLAN_CAPABILITY_PRIVACY ? 1 : 0;

263 264 265
	/* make a copy of the chandef, it could be modified below. */
	chandef = *req_chandef;
	chan = chandef.chan;
266 267 268 269 270 271 272 273 274 275 276
	if (!cfg80211_reg_can_beacon(local->hw.wiphy, &chandef)) {
		if (chandef.width == NL80211_CHAN_WIDTH_5 ||
		    chandef.width == NL80211_CHAN_WIDTH_10 ||
		    chandef.width == NL80211_CHAN_WIDTH_20_NOHT ||
		    chandef.width == NL80211_CHAN_WIDTH_20) {
			sdata_info(sdata,
				   "Failed to join IBSS, beacons forbidden\n");
			return;
		}
		chandef.width = NL80211_CHAN_WIDTH_20;
		chandef.center_freq1 = chan->center_freq;
277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293
		/* check again for downgraded chandef */
		if (!cfg80211_reg_can_beacon(local->hw.wiphy, &chandef)) {
			sdata_info(sdata,
				   "Failed to join IBSS, beacons forbidden\n");
			return;
		}
	}

	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
					    &chandef);
	if (err > 0) {
		if (!ifibss->userspace_handles_dfs) {
			sdata_info(sdata,
				   "Failed to join IBSS, DFS channel without control program\n");
			return;
		}
		radar_required = true;
294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310
	}

	ieee80211_vif_release_channel(sdata);
	if (ieee80211_vif_use_channel(sdata, &chandef,
				      ifibss->fixed_channel ?
					IEEE80211_CHANCTX_SHARED :
					IEEE80211_CHANCTX_EXCLUSIVE)) {
		sdata_info(sdata, "Failed to join IBSS, no channel context\n");
		return;
	}

	memcpy(ifibss->bssid, bssid, ETH_ALEN);

	sband = local->hw.wiphy->bands[chan->band];

	presp = ieee80211_ibss_build_presp(sdata, beacon_int, basic_rates,
					   capability, tsf, &chandef,
311
					   &have_higher_than_11mbit, NULL);
312
	if (!presp)
313 314 315
		return;

	rcu_assign_pointer(ifibss->presp, presp);
316
	mgmt = (void *)presp->head;
317

318
	sdata->radar_required = radar_required;
319
	sdata->vif.bss_conf.enable_beacon = true;
320
	sdata->vif.bss_conf.beacon_int = beacon_int;
321
	sdata->vif.bss_conf.basic_rates = basic_rates;
322 323
	sdata->vif.bss_conf.ssid_len = ifibss->ssid_len;
	memcpy(sdata->vif.bss_conf.ssid, ifibss->ssid, ifibss->ssid_len);
324 325 326 327 328
	bss_change = BSS_CHANGED_BEACON_INT;
	bss_change |= ieee80211_reset_erp_info(sdata);
	bss_change |= BSS_CHANGED_BSSID;
	bss_change |= BSS_CHANGED_BEACON;
	bss_change |= BSS_CHANGED_BEACON_ENABLED;
329
	bss_change |= BSS_CHANGED_BASIC_RATES;
330
	bss_change |= BSS_CHANGED_HT;
331
	bss_change |= BSS_CHANGED_IBSS;
332
	bss_change |= BSS_CHANGED_SSID;
333 334 335 336 337 338 339 340 341 342 343 344 345 346

	/*
	 * In 5 GHz/802.11a, we can always use short slot time.
	 * (IEEE 802.11-2012 18.3.8.7)
	 *
	 * In 2.4GHz, we must always use long slots in IBSS for compatibility
	 * reasons.
	 * (IEEE 802.11-2012 19.4.5)
	 *
	 * HT follows these specifications (IEEE 802.11-2012 20.3.18)
	 */
	sdata->vif.bss_conf.use_short_slot = chan->band == IEEE80211_BAND_5GHZ;
	bss_change |= BSS_CHANGED_ERP_SLOT;

347 348 349 350 351 352
	/* cf. IEEE 802.11 9.2.12 */
	if (chan->band == IEEE80211_BAND_2GHZ && have_higher_than_11mbit)
		sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
	else
		sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;

353 354
	ieee80211_set_wmm_default(sdata, true);

355
	sdata->vif.bss_conf.ibss_joined = true;
356
	sdata->vif.bss_conf.ibss_creator = creator;
357

358 359 360 361 362 363 364 365 366 367 368 369 370 371 372
	err = drv_join_ibss(local, sdata);
	if (err) {
		sdata->vif.bss_conf.ibss_joined = false;
		sdata->vif.bss_conf.ibss_creator = false;
		sdata->vif.bss_conf.enable_beacon = false;
		sdata->vif.bss_conf.ssid_len = 0;
		RCU_INIT_POINTER(ifibss->presp, NULL);
		kfree_rcu(presp, rcu_head);
		ieee80211_vif_release_channel(sdata);
		sdata_info(sdata, "Failed to join IBSS, driver failure: %d\n",
			   err);
		return;
	}

	ieee80211_bss_info_change_notify(sdata, bss_change);
373 374

	ifibss->state = IEEE80211_IBSS_MLME_JOINED;
375 376
	mod_timer(&ifibss->timer,
		  round_jiffies(jiffies + IEEE80211_IBSS_MERGE_INTERVAL));
377

378 379 380 381
	scan_width = cfg80211_chandef_to_scan_width(&chandef);
	bss = cfg80211_inform_bss_width_frame(local->hw.wiphy, chan,
					      scan_width, mgmt,
					      presp->head_len, 0, GFP_KERNEL);
382
	cfg80211_put_bss(local->hw.wiphy, bss);
383
	netif_carrier_on(sdata->dev);
384
	cfg80211_ibss_joined(sdata->dev, ifibss->bssid, GFP_KERNEL);
385 386
}

387 388
static void ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
				    struct ieee80211_bss *bss)
389
{
390 391
	struct cfg80211_bss *cbss =
		container_of((void *)bss, struct cfg80211_bss, priv);
392
	struct ieee80211_supported_band *sband;
393
	struct cfg80211_chan_def chandef;
394 395
	u32 basic_rates;
	int i, j;
396
	u16 beacon_int = cbss->beacon_interval;
Johannes Berg's avatar
Johannes Berg committed
397
	const struct cfg80211_bss_ies *ies;
398
	enum nl80211_channel_type chan_type;
Johannes Berg's avatar
Johannes Berg committed
399
	u64 tsf;
400 401
	u32 rate_flags;
	int shift;
402

403
	sdata_assert_lock(sdata);
Johannes Berg's avatar
Johannes Berg committed
404

405 406 407
	if (beacon_int < 10)
		beacon_int = 10;

408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427
	switch (sdata->u.ibss.chandef.width) {
	case NL80211_CHAN_WIDTH_20_NOHT:
	case NL80211_CHAN_WIDTH_20:
	case NL80211_CHAN_WIDTH_40:
		chan_type = cfg80211_get_chandef_type(&sdata->u.ibss.chandef);
		cfg80211_chandef_create(&chandef, cbss->channel, chan_type);
		break;
	case NL80211_CHAN_WIDTH_5:
	case NL80211_CHAN_WIDTH_10:
		cfg80211_chandef_create(&chandef, cbss->channel,
					NL80211_CHAN_WIDTH_20_NOHT);
		chandef.width = sdata->u.ibss.chandef.width;
		break;
	default:
		/* fall back to 20 MHz for unsupported modes */
		cfg80211_chandef_create(&chandef, cbss->channel,
					NL80211_CHAN_WIDTH_20_NOHT);
		break;
	}

428
	sband = sdata->local->hw.wiphy->bands[cbss->channel->band];
429 430
	rate_flags = ieee80211_chandef_rate_flags(&sdata->u.ibss.chandef);
	shift = ieee80211_vif_get_shift(&sdata->vif);
431 432 433 434

	basic_rates = 0;

	for (i = 0; i < bss->supp_rates_len; i++) {
435
		int rate = bss->supp_rates[i] & 0x7f;
436 437 438
		bool is_basic = !!(bss->supp_rates[i] & 0x80);

		for (j = 0; j < sband->n_bitrates; j++) {
439 440 441 442 443 444 445 446
			int brate;
			if ((rate_flags & sband->bitrates[j].flags)
			    != rate_flags)
				continue;

			brate = DIV_ROUND_UP(sband->bitrates[j].bitrate,
					     5 * (1 << shift));
			if (brate == rate) {
447 448 449 450 451 452 453
				if (is_basic)
					basic_rates |= BIT(j);
				break;
			}
		}
	}

Johannes Berg's avatar
Johannes Berg committed
454 455 456 457 458
	rcu_read_lock();
	ies = rcu_dereference(cbss->ies);
	tsf = ies->tsf;
	rcu_read_unlock();

459
	__ieee80211_sta_join_ibss(sdata, cbss->bssid,
460
				  beacon_int,
461
				  &chandef,
462
				  basic_rates,
463
				  cbss->capability,
Johannes Berg's avatar
Johannes Berg committed
464
				  tsf, false);
465 466
}

467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518
int ieee80211_ibss_csa_beacon(struct ieee80211_sub_if_data *sdata,
			      struct cfg80211_csa_settings *csa_settings)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct beacon_data *presp, *old_presp;
	struct cfg80211_bss *cbss;
	const struct cfg80211_bss_ies *ies;
	u16 capability;
	u64 tsf;
	int ret = 0;

	sdata_assert_lock(sdata);

	capability = WLAN_CAPABILITY_IBSS;

	if (ifibss->privacy)
		capability |= WLAN_CAPABILITY_PRIVACY;

	cbss = cfg80211_get_bss(sdata->local->hw.wiphy, ifibss->chandef.chan,
				ifibss->bssid, ifibss->ssid,
				ifibss->ssid_len, WLAN_CAPABILITY_IBSS |
				WLAN_CAPABILITY_PRIVACY,
				capability);

	if (WARN_ON(!cbss)) {
		ret = -EINVAL;
		goto out;
	}

	rcu_read_lock();
	ies = rcu_dereference(cbss->ies);
	tsf = ies->tsf;
	rcu_read_unlock();
	cfg80211_put_bss(sdata->local->hw.wiphy, cbss);

	old_presp = rcu_dereference_protected(ifibss->presp,
					  lockdep_is_held(&sdata->wdev.mtx));

	presp = ieee80211_ibss_build_presp(sdata,
					   sdata->vif.bss_conf.beacon_int,
					   sdata->vif.bss_conf.basic_rates,
					   capability, tsf, &ifibss->chandef,
					   NULL, csa_settings);
	if (!presp) {
		ret = -ENOMEM;
		goto out;
	}

	rcu_assign_pointer(ifibss->presp, presp);
	if (old_presp)
		kfree_rcu(old_presp, rcu_head);

519 520 521 522 523 524
	/* it might not send the beacon for a while. send an action frame
	 * immediately to announce the channel switch.
	 */
	if (csa_settings)
		ieee80211_send_action_csa(sdata, csa_settings);

525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552
	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON);
 out:
	return ret;
}

int ieee80211_ibss_finish_csa(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct cfg80211_bss *cbss;
	int err;
	u16 capability;

	sdata_lock(sdata);
	/* update cfg80211 bss information with the new channel */
	if (!is_zero_ether_addr(ifibss->bssid)) {
		capability = WLAN_CAPABILITY_IBSS;

		if (ifibss->privacy)
			capability |= WLAN_CAPABILITY_PRIVACY;

		cbss = cfg80211_get_bss(sdata->local->hw.wiphy,
					ifibss->chandef.chan,
					ifibss->bssid, ifibss->ssid,
					ifibss->ssid_len, WLAN_CAPABILITY_IBSS |
					WLAN_CAPABILITY_PRIVACY,
					capability);
		/* XXX: should not really modify cfg80211 data */
		if (cbss) {
553
			cbss->channel = sdata->csa_chandef.chan;
554 555 556 557
			cfg80211_put_bss(sdata->local->hw.wiphy, cbss);
		}
	}

558
	ifibss->chandef = sdata->csa_chandef;
559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575

	/* generate the beacon */
	err = ieee80211_ibss_csa_beacon(sdata, NULL);
	sdata_unlock(sdata);
	if (err < 0)
		return err;

	return 0;
}

void ieee80211_ibss_stop(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;

	cancel_work_sync(&ifibss->csa_connection_drop_work);
}

576
static struct sta_info *ieee80211_ibss_finish_sta(struct sta_info *sta)
577 578 579 580 581 582 583
	__acquires(RCU)
{
	struct ieee80211_sub_if_data *sdata = sta->sdata;
	u8 addr[ETH_ALEN];

	memcpy(addr, sta->sta.addr, ETH_ALEN);

Johannes Berg's avatar
Johannes Berg committed
584
	ibss_dbg(sdata, "Adding new IBSS station %pM\n", addr);
585

586 587
	sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
	sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
588 589 590 591
	/* authorize the station only if the network is not RSN protected. If
	 * not wait for the userspace to authorize it */
	if (!sta->sdata->u.ibss.control_port)
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
592 593 594 595 596 597 598 599 600 601

	rate_control_rate_init(sta);

	/* If it fails, maybe we raced another insertion? */
	if (sta_info_insert_rcu(sta))
		return sta_info_get(sdata, addr);
	return sta;
}

static struct sta_info *
602 603
ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata, const u8 *bssid,
		       const u8 *addr, u32 supp_rates)
604 605 606 607 608
	__acquires(RCU)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct ieee80211_local *local = sdata->local;
	struct sta_info *sta;
Johannes Berg's avatar
Johannes Berg committed
609
	struct ieee80211_chanctx_conf *chanctx_conf;
610
	struct ieee80211_supported_band *sband;
611
	enum nl80211_bss_scan_width scan_width;
Johannes Berg's avatar
Johannes Berg committed
612
	int band;
613 614 615 616 617 618

	/*
	 * XXX: Consider removing the least recently used entry and
	 * 	allow new one to be added.
	 */
	if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
Johannes Berg's avatar
Johannes Berg committed
619
		net_info_ratelimited("%s: No room for a new IBSS STA entry %pM\n",
620
				    sdata->name, addr);
621 622 623 624 625 626 627 628 629
		rcu_read_lock();
		return NULL;
	}

	if (ifibss->state == IEEE80211_IBSS_MLME_SEARCH) {
		rcu_read_lock();
		return NULL;
	}

630
	if (!ether_addr_equal(bssid, sdata->u.ibss.bssid)) {
631 632 633 634
		rcu_read_lock();
		return NULL;
	}

Johannes Berg's avatar
Johannes Berg committed
635 636 637 638
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	if (WARN_ON_ONCE(!chanctx_conf))
		return NULL;
639
	band = chanctx_conf->def.chan->band;
640
	scan_width = cfg80211_chandef_to_scan_width(&chanctx_conf->def);
Johannes Berg's avatar
Johannes Berg committed
641 642
	rcu_read_unlock();

643 644 645 646 647 648 649 650 651
	sta = sta_info_alloc(sdata, addr, GFP_KERNEL);
	if (!sta) {
		rcu_read_lock();
		return NULL;
	}

	sta->last_rx = jiffies;

	/* make sure mandatory rates are always added */
652
	sband = local->hw.wiphy->bands[band];
653
	sta->sta.supp_rates[band] = supp_rates |
654
			ieee80211_mandatory_rates(sband, scan_width);
655

656
	return ieee80211_ibss_finish_sta(sta);
657 658
}

659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745
static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	int active = 0;
	struct sta_info *sta;

	sdata_assert_lock(sdata);

	rcu_read_lock();

	list_for_each_entry_rcu(sta, &local->sta_list, list) {
		if (sta->sdata == sdata &&
		    time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
			       jiffies)) {
			active++;
			break;
		}
	}

	rcu_read_unlock();

	return active;
}

static void ieee80211_ibss_disconnect(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct ieee80211_local *local = sdata->local;
	struct cfg80211_bss *cbss;
	struct beacon_data *presp;
	struct sta_info *sta;
	int active_ibss;
	u16 capability;

	active_ibss = ieee80211_sta_active_ibss(sdata);

	if (!active_ibss && !is_zero_ether_addr(ifibss->bssid)) {
		capability = WLAN_CAPABILITY_IBSS;

		if (ifibss->privacy)
			capability |= WLAN_CAPABILITY_PRIVACY;

		cbss = cfg80211_get_bss(local->hw.wiphy, ifibss->chandef.chan,
					ifibss->bssid, ifibss->ssid,
					ifibss->ssid_len, WLAN_CAPABILITY_IBSS |
					WLAN_CAPABILITY_PRIVACY,
					capability);

		if (cbss) {
			cfg80211_unlink_bss(local->hw.wiphy, cbss);
			cfg80211_put_bss(sdata->local->hw.wiphy, cbss);
		}
	}

	ifibss->state = IEEE80211_IBSS_MLME_SEARCH;

	sta_info_flush(sdata);

	spin_lock_bh(&ifibss->incomplete_lock);
	while (!list_empty(&ifibss->incomplete_stations)) {
		sta = list_first_entry(&ifibss->incomplete_stations,
				       struct sta_info, list);
		list_del(&sta->list);
		spin_unlock_bh(&ifibss->incomplete_lock);

		sta_info_free(local, sta);
		spin_lock_bh(&ifibss->incomplete_lock);
	}
	spin_unlock_bh(&ifibss->incomplete_lock);

	netif_carrier_off(sdata->dev);

	sdata->vif.bss_conf.ibss_joined = false;
	sdata->vif.bss_conf.ibss_creator = false;
	sdata->vif.bss_conf.enable_beacon = false;
	sdata->vif.bss_conf.ssid_len = 0;

	/* remove beacon */
	presp = rcu_dereference_protected(ifibss->presp,
					  lockdep_is_held(&sdata->wdev.mtx));
	RCU_INIT_POINTER(sdata->u.ibss.presp, NULL);
	if (presp)
		kfree_rcu(presp, rcu_head);

	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED |
						BSS_CHANGED_IBSS);
746
	drv_leave_ibss(local, sdata);
747 748 749
	ieee80211_vif_release_channel(sdata);
}

750 751 752 753 754 755 756 757 758 759 760 761 762 763
static void ieee80211_csa_connection_drop_work(struct work_struct *work)
{
	struct ieee80211_sub_if_data *sdata =
		container_of(work, struct ieee80211_sub_if_data,
			     u.ibss.csa_connection_drop_work);

	ieee80211_ibss_disconnect(sdata);
	synchronize_rcu();
	skb_queue_purge(&sdata->skb_queue);

	/* trigger a scan to find another IBSS network to join */
	ieee80211_queue_work(&sdata->local->hw, &sdata->work);
}

764 765 766 767 768 769 770 771 772 773 774 775 776 777 778
static void ieee80211_ibss_csa_mark_radar(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	int err;

	/* if the current channel is a DFS channel, mark the channel as
	 * unavailable.
	 */
	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
					    &ifibss->chandef);
	if (err > 0)
		cfg80211_radar_event(sdata->local->hw.wiphy, &ifibss->chandef,
				     GFP_ATOMIC);
}

779 780 781 782 783 784
static bool
ieee80211_ibss_process_chanswitch(struct ieee80211_sub_if_data *sdata,
				  struct ieee802_11_elems *elems,
				  bool beacon)
{
	struct cfg80211_csa_settings params;
785
	struct ieee80211_csa_ie csa_ie;
786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_chanctx *chanctx;
	enum nl80211_channel_type ch_type;
	int err, num_chanctx;
	u32 sta_flags;

	if (sdata->vif.csa_active)
		return true;

	if (!sdata->vif.bss_conf.ibss_joined)
		return false;

	sta_flags = IEEE80211_STA_DISABLE_VHT;
	switch (ifibss->chandef.width) {
	case NL80211_CHAN_WIDTH_5:
	case NL80211_CHAN_WIDTH_10:
	case NL80211_CHAN_WIDTH_20_NOHT:
		sta_flags |= IEEE80211_STA_DISABLE_HT;
		/* fall through */
	case NL80211_CHAN_WIDTH_20:
		sta_flags |= IEEE80211_STA_DISABLE_40MHZ;
		break;
	default:
		break;
	}

	memset(&params, 0, sizeof(params));
814
	memset(&csa_ie, 0, sizeof(csa_ie));
815 816
	err = ieee80211_parse_ch_switch_ie(sdata, elems, beacon,
					   ifibss->chandef.chan->band,
817
					   sta_flags, ifibss->bssid, &csa_ie);
818 819 820 821 822 823 824 825
	/* can't switch to destination channel, fail */
	if (err < 0)
		goto disconnect;

	/* did not contain a CSA */
	if (err)
		return false;

826 827 828
	params.count = csa_ie.count;
	params.chandef = csa_ie.chandef;

829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863
	if (ifibss->chandef.chan->band != params.chandef.chan->band)
		goto disconnect;

	switch (ifibss->chandef.width) {
	case NL80211_CHAN_WIDTH_20_NOHT:
	case NL80211_CHAN_WIDTH_20:
	case NL80211_CHAN_WIDTH_40:
		/* keep our current HT mode (HT20/HT40+/HT40-), even if
		 * another mode  has been announced. The mode is not adopted
		 * within the beacon while doing CSA and we should therefore
		 * keep the mode which we announce.
		 */
		ch_type = cfg80211_get_chandef_type(&ifibss->chandef);
		cfg80211_chandef_create(&params.chandef, params.chandef.chan,
					ch_type);
		break;
	case NL80211_CHAN_WIDTH_5:
	case NL80211_CHAN_WIDTH_10:
		if (params.chandef.width != ifibss->chandef.width) {
			sdata_info(sdata,
				   "IBSS %pM received channel switch from incompatible channel width (%d MHz, width:%d, CF1/2: %d/%d MHz), disconnecting\n",
				   ifibss->bssid,
				   params.chandef.chan->center_freq,
				   params.chandef.width,
				   params.chandef.center_freq1,
				   params.chandef.center_freq2);
			goto disconnect;
		}
		break;
	default:
		/* should not happen, sta_flags should prevent VHT modes. */
		WARN_ON(1);
		goto disconnect;
	}

864
	if (!cfg80211_reg_can_beacon(sdata->local->hw.wiphy, &params.chandef)) {
865 866 867 868 869 870 871 872 873 874 875 876 877 878 879
		sdata_info(sdata,
			   "IBSS %pM switches to unsupported channel (%d MHz, width:%d, CF1/2: %d/%d MHz), disconnecting\n",
			   ifibss->bssid,
			   params.chandef.chan->center_freq,
			   params.chandef.width,
			   params.chandef.center_freq1,
			   params.chandef.center_freq2);
		goto disconnect;
	}

	err = cfg80211_chandef_dfs_required(sdata->local->hw.wiphy,
					    &params.chandef);
	if (err < 0)
		goto disconnect;
	if (err) {
880 881 882
		/* IBSS-DFS only allowed with a control program */
		if (!ifibss->userspace_handles_dfs)
			goto disconnect;
883

884
		params.radar_required = true;
885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914
	}

	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	if (!chanctx_conf) {
		rcu_read_unlock();
		goto disconnect;
	}

	/* don't handle for multi-VIF cases */
	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
	if (chanctx->refcount > 1) {
		rcu_read_unlock();
		goto disconnect;
	}
	num_chanctx = 0;
	list_for_each_entry_rcu(chanctx, &sdata->local->chanctx_list, list)
		num_chanctx++;

	if (num_chanctx > 1) {
		rcu_read_unlock();
		goto disconnect;
	}
	rcu_read_unlock();

	/* all checks done, now perform the channel switch. */
	ibss_dbg(sdata,
		 "received channel switch announcement to go to channel %d MHz\n",
		 params.chandef.chan->center_freq);

915
	params.block_tx = !!csa_ie.mode;
916 917 918 919 920 921 922 923 924

	ieee80211_ibss_csa_beacon(sdata, &params);
	sdata->csa_radar_required = params.radar_required;

	if (params.block_tx)
		ieee80211_stop_queues_by_reason(&sdata->local->hw,
				IEEE80211_MAX_QUEUE_MAP,
				IEEE80211_QUEUE_STOP_REASON_CSA);

925
	sdata->csa_chandef = params.chandef;
926 927 928 929 930
	sdata->vif.csa_active = true;

	ieee80211_bss_info_change_notify(sdata, err);
	drv_channel_switch_beacon(sdata, &params.chandef);

931 932
	ieee80211_ibss_csa_mark_radar(sdata);

933 934 935 936 937 938
	return true;
disconnect:
	ibss_dbg(sdata, "Can't handle channel switch, disconnect\n");
	ieee80211_queue_work(&sdata->local->hw,
			     &ifibss->csa_connection_drop_work);

939 940
	ieee80211_ibss_csa_mark_radar(sdata);

941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967
	return true;
}

static void
ieee80211_rx_mgmt_spectrum_mgmt(struct ieee80211_sub_if_data *sdata,
				struct ieee80211_mgmt *mgmt, size_t len,
				struct ieee80211_rx_status *rx_status,
				struct ieee802_11_elems *elems)
{
	int required_len;

	if (len < IEEE80211_MIN_ACTION_SIZE + 1)
		return;

	/* CSA is the only action we handle for now */
	if (mgmt->u.action.u.measurement.action_code !=
	    WLAN_ACTION_SPCT_CHL_SWITCH)
		return;

	required_len = IEEE80211_MIN_ACTION_SIZE +
		       sizeof(mgmt->u.action.u.chan_switch);
	if (len < required_len)
		return;

	ieee80211_ibss_process_chanswitch(sdata, elems, false);
}

968 969 970 971 972 973 974 975 976 977 978 979 980 981
static void ieee80211_rx_mgmt_deauth_ibss(struct ieee80211_sub_if_data *sdata,
					  struct ieee80211_mgmt *mgmt,
					  size_t len)
{
	u16 reason = le16_to_cpu(mgmt->u.deauth.reason_code);

	if (len < IEEE80211_DEAUTH_FRAME_LEN)
		return;

	ibss_dbg(sdata, "RX DeAuth SA=%pM DA=%pM BSSID=%pM (reason: %d)\n",
		 mgmt->sa, mgmt->da, mgmt->bssid, reason);
	sta_info_destroy_addr(sdata, mgmt->sa);
}

982 983 984 985 986 987
static void ieee80211_rx_mgmt_auth_ibss(struct ieee80211_sub_if_data *sdata,
					struct ieee80211_mgmt *mgmt,
					size_t len)
{
	u16 auth_alg, auth_transaction;

988
	sdata_assert_lock(sdata);
989 990 991 992 993 994 995

	if (len < 24 + 6)
		return;

	auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
	auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);

Johannes Berg's avatar
Johannes Berg committed
996 997 998
	ibss_dbg(sdata,
		 "RX Auth SA=%pM DA=%pM BSSID=%pM (auth_transaction=%d)\n",
		 mgmt->sa, mgmt->da, mgmt->bssid, auth_transaction);
999 1000 1001 1002

	if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
		return;

1003 1004 1005 1006 1007 1008
	/*
	 * IEEE 802.11 standard does not require authentication in IBSS
	 * networks and most implementations do not seem to use it.
	 * However, try to reply to authentication attempts if someone
	 * has actually implemented this.
	 */
1009
	ieee80211_send_auth(sdata, 2, WLAN_AUTH_OPEN, 0, NULL, 0,
1010
			    mgmt->sa, sdata->u.ibss.bssid, NULL, 0, 0, 0);
1011 1012
}

1013
static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1014
				  struct ieee80211_mgmt *mgmt, size_t len,
1015
				  struct ieee80211_rx_status *rx_status,
1016
				  struct ieee802_11_elems *elems)
1017 1018 1019
{
	struct ieee80211_local *local = sdata->local;
	int freq;
1020
	struct cfg80211_bss *cbss;
1021 1022 1023 1024 1025 1026
	struct ieee80211_bss *bss;
	struct sta_info *sta;
	struct ieee80211_channel *channel;
	u64 beacon_timestamp, rx_timestamp;
	u32 supp_rates = 0;
	enum ieee80211_band band = rx_status->band;
1027
	enum nl80211_bss_scan_width scan_width;
1028 1029
	struct ieee80211_supported_band *sband = local->hw.wiphy->bands[band];
	bool rates_updated = false;
1030

1031
	if (elems->ds_params)
1032 1033
		freq = ieee80211_channel_to_frequency(elems->ds_params[0],
						      band);
1034 1035 1036 1037 1038 1039 1040 1041
	else
		freq = rx_status->freq;

	channel = ieee80211_get_channel(local->hw.wiphy, freq);

	if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
		return;

1042
	if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
1043
	    ether_addr_equal(mgmt->bssid, sdata->u.ibss.bssid)) {
1044 1045

		rcu_read_lock();
1046
		sta = sta_info_get(sdata, mgmt->sa);
1047

1048
		if (elems->supp_rates) {
1049
			supp_rates = ieee80211_sta_get_rates(sdata, elems,
1050
							     band, NULL);
1051 1052 1053 1054 1055
			if (sta) {
				u32 prev_rates;

				prev_rates = sta->sta.supp_rates[band];
				/* make sure mandatory rates are always added */
1056 1057 1058 1059 1060
				scan_width = NL80211_BSS_CHAN_WIDTH_20;
				if (rx_status->flag & RX_FLAG_5MHZ)
					scan_width = NL80211_BSS_CHAN_WIDTH_5;
				if (rx_status->flag & RX_FLAG_10MHZ)
					scan_width = NL80211_BSS_CHAN_WIDTH_10;
1061

1062 1063 1064
				sta->sta.supp_rates[band] = supp_rates |
					ieee80211_mandatory_rates(sband,
								  scan_width);
1065
				if (sta->sta.supp_rates[band] != prev_rates) {
Johannes Berg's avatar
Johannes Berg committed
1066 1067 1068 1069
					ibss_dbg(sdata,
						 "updated supp_rates set for %pM based on beacon/probe_resp (0x%x -> 0x%x)\n",
						 sta->sta.addr, prev_rates,
						 sta->sta.supp_rates[band]);
1070
					rates_updated = true;
1071
				}
1072 1073
			} else {
				rcu_read_unlock();
1074
				sta = ieee80211_ibss_add_sta(sdata, mgmt->bssid,
1075
						mgmt->sa, supp_rates);
1076
			}
1077
		}
1078 1079

		if (sta && elems->wmm_info)
1080
			set_sta_flag(sta, WLAN_STA_WME);
1081

1082
		if (sta && elems->ht_operation && elems->ht_cap_elem &&
1083 1084 1085
		    sdata->u.ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
		    sdata->u.ibss.chandef.width != NL80211_CHAN_WIDTH_5 &&
		    sdata->u.ibss.chandef.width != NL80211_CHAN_WIDTH_10) {
1086
			/* we both use HT */
1087
			struct ieee80211_ht_cap htcap_ie;
1088 1089 1090 1091 1092
			struct cfg80211_chan_def chandef;

			ieee80211_ht_oper_to_chandef(channel,
						     elems->ht_operation,
						     &chandef);
1093

1094
			memcpy(&htcap_ie, elems->ht_cap_elem, sizeof(htcap_ie));
1095 1096 1097 1098 1099

			/*
			 * fall back to HT20 if we don't use or use
			 * the other extension channel
			 */
1100 1101
			if (chandef.center_freq1 !=
			    sdata->u.ibss.chandef.center_freq1)
1102 1103 1104 1105 1106
				htcap_ie.cap_info &=
					cpu_to_le16(~IEEE80211_HT_CAP_SUP_WIDTH_20_40);

			rates_updated |= ieee80211_ht_cap_ie_to_sta_ht_cap(
						sdata, sband, &htcap_ie, sta);
1107 1108
		}

1109 1110 1111
		if (sta && rates_updated) {
			drv_sta_rc_update(local, sdata, &sta->sta,
					  IEEE80211_RC_SUPP_RATES_CHANGED);
1112
			rate_control_rate_init(sta);
1113
		}
1114

1115
		rcu_read_unlock();
1116 1117 1118
	}

	bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1119
					channel);
1120 1121 1122
	if (!bss)
		return;

1123 1124
	cbss = container_of((void *)bss, struct cfg80211_bss, priv);

Johannes Berg's avatar
Johannes Berg committed
1125 1126
	/* same for beacon and probe response */
	beacon_timestamp = le64_to_cpu(mgmt->u.beacon.timestamp);
1127 1128 1129 1130

	/* check if we need to merge IBSS */

	/* not an IBSS */
1131
	if (!(cbss->capability & WLAN_CAPABILITY_IBSS))
1132 1133 1134
		goto put_bss;

	/* different channel */
Johannes Berg's avatar
Johannes Berg committed
1135
	if (sdata->u.ibss.fixed_channel &&
1136
	    sdata->u.ibss.chandef.chan != cbss->channel)
1137 1138 1139 1140 1141 1142 1143 1144
		goto put_bss;

	/* different SSID */
	if (elems->ssid_len != sdata->u.ibss.ssid_len ||
	    memcmp(elems->ssid, sdata->u.ibss.ssid,
				sdata->u.ibss.ssid_len))
		goto put_bss;

1145 1146 1147 1148
	/* process channel switch */
	if (ieee80211_ibss_process_chanswitch(sdata, elems, true))
		goto put_bss;

1149
	/* same BSSID */
1150
	if (ether_addr_equal(cbss->bssid, sdata->u.ibss.bssid))
1151 1152
		goto put_bss;

1153 1154 1155 1156
	/* we use a fixed BSSID */
	if (sdata->u.ibss.fixed_bssid)
		goto put_bss;

1157 1158 1159 1160 1161
	if (ieee80211_have_rx_timestamp(rx_status)) {
		/* time when timestamp field was received */
		rx_timestamp =
			ieee80211_calculate_rx_timestamp(local, rx_status,
							 len + FCS_LEN, 24);
1162 1163 1164 1165 1166
	} else {
		/*
		 * second best option: get current TSF
		 * (will return -1 if not supported)
		 */
1167
		rx_timestamp = drv_get_tsf(local, sdata);
1168
	}
1169

Johannes Berg's avatar
Johannes Berg committed
1170 1171 1172 1173 1174 1175 1176
	ibss_dbg(sdata,
		 "RX beacon SA=%pM BSSID=%pM TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
		 mgmt->sa, mgmt->bssid,
		 (unsigned long long)rx_timestamp,
		 (unsigned long long)beacon_timestamp,
		 (unsigned long long)(rx_timestamp - beacon_timestamp),
		 jiffies);
1177 1178

	if (beacon_timestamp > rx_timestamp) {
Johannes Berg's avatar
Johannes Berg committed
1179 1180 1181
		ibss_dbg(sdata,
			 "beacon TSF higher than local TSF - IBSS merge with BSSID %pM\n",
			 mgmt->bssid);
1182
		ieee80211_sta_join_ibss(sdata, bss);
1183
		supp_rates = ieee80211_sta_get_rates(sdata, elems, band, NULL);
1184
		ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa,
1185
				       supp_rates);
1186
		rcu_read_unlock();
1187 1188 1189 1190 1191 1192
	}

 put_bss:
	ieee80211_rx_bss_put(local, bss);
}

1193 1194 1195
void ieee80211_ibss_rx_no_sta(struct ieee80211_sub_if_data *sdata,
			      const u8 *bssid, const u8 *addr,
			      u32 supp_rates)
1196
{
1197
	struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
1198 1199
	struct ieee80211_local *local = sdata->local;
	struct sta_info *sta;
Johannes Berg's avatar
Johannes Berg committed
1200
	struct ieee80211_chanctx_conf *chanctx_conf;
1201
	struct ieee80211_supported_band *sband;
1202
	enum nl80211_bss_scan_width scan_width;
Johannes Berg's avatar
Johannes Berg committed
1203
	int band;
1204

1205 1206 1207 1208
	/*
	 * XXX: Consider removing the least recently used entry and
	 * 	allow new one to be added.
	 */
1209
	if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
Johannes Berg's avatar
Johannes Berg committed
1210
		net_info_ratelimited("%s: No room for a new IBSS STA entry %pM\n",
1211
				    sdata->name, addr);
1212
		return;
1213 1214
	}

1215
	if (ifibss->state == IEEE80211_IBSS_MLME_SEARCH)
1216
		return;
1217

1218
	if (!ether_addr_equal(bssid, sdata->u.ibss.bssid))