mesh_plink.c 18.9 KB
Newer Older
1
/*
2
 * Copyright (c) 2008, 2009 open80211s Ltd.
3 4 5 6 7 8
 * Author:     Luis Carlos Cobo <luisca@cozybit.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
Johannes Berg's avatar
Johannes Berg committed
9 10
#include <linux/kernel.h>
#include <linux/random.h>
11
#include "ieee80211_i.h"
Johannes Berg's avatar
Johannes Berg committed
12
#include "rate.h"
13 14 15 16 17 18 19 20
#include "mesh.h"

#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
#define mpl_dbg(fmt, args...)	printk(KERN_DEBUG fmt, ##args)
#else
#define mpl_dbg(fmt, args...)	do { (void)(0); } while (0)
#endif

21 22
#define PLINK_GET_LLID(p) (p + 4)
#define PLINK_GET_PLID(p) (p + 6)
23 24 25 26 27 28 29 30 31 32 33 34 35 36 37

#define mod_plink_timer(s, t) (mod_timer(&s->plink_timer, \
				jiffies + HZ * t / 1000))

/* Peer link cancel reasons, all subject to ANA approval */
#define MESH_LINK_CANCELLED			2
#define MESH_MAX_NEIGHBORS			3
#define MESH_CAPABILITY_POLICY_VIOLATION	4
#define MESH_CLOSE_RCVD				5
#define MESH_MAX_RETRIES			6
#define MESH_CONFIRM_TIMEOUT			7
#define MESH_SECURITY_ROLE_NEGOTIATION_DIFFERS	8
#define MESH_SECURITY_AUTHENTICATION_IMPOSSIBLE	9
#define MESH_SECURITY_FAILED_VERIFICATION	10

38 39 40 41 42
#define dot11MeshMaxRetries(s) (s->u.mesh.mshcfg.dot11MeshMaxRetries)
#define dot11MeshRetryTimeout(s) (s->u.mesh.mshcfg.dot11MeshRetryTimeout)
#define dot11MeshConfirmTimeout(s) (s->u.mesh.mshcfg.dot11MeshConfirmTimeout)
#define dot11MeshHoldingTimeout(s) (s->u.mesh.mshcfg.dot11MeshHoldingTimeout)
#define dot11MeshMaxPeerLinks(s) (s->u.mesh.mshcfg.dot11MeshMaxPeerLinks)
43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64

enum plink_frame_type {
	PLINK_OPEN = 0,
	PLINK_CONFIRM,
	PLINK_CLOSE
};

enum plink_event {
	PLINK_UNDEFINED,
	OPN_ACPT,
	OPN_RJCT,
	OPN_IGNR,
	CNF_ACPT,
	CNF_RJCT,
	CNF_IGNR,
	CLS_ACPT,
	CLS_IGNR
};

static inline
void mesh_plink_inc_estab_count(struct ieee80211_sub_if_data *sdata)
{
65
	atomic_inc(&sdata->u.mesh.mshstats.estab_plinks);
66
	mesh_accept_plinks_update(sdata);
67
	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON);
68 69 70 71 72
}

static inline
void mesh_plink_dec_estab_count(struct ieee80211_sub_if_data *sdata)
{
73
	atomic_dec(&sdata->u.mesh.mshstats.estab_plinks);
74
	mesh_accept_plinks_update(sdata);
75
	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON);
76 77 78 79 80
}

/**
 * mesh_plink_fsm_restart - restart a mesh peer link finite state machine
 *
Rui Paulo's avatar
Rui Paulo committed
81
 * @sta: mesh peer link to restart
82
 *
83
 * Locking: this function must be called holding sta->lock
84 85 86
 */
static inline void mesh_plink_fsm_restart(struct sta_info *sta)
{
87
	sta->plink_state = PLINK_LISTEN;
88 89
	sta->llid = sta->plid = sta->reason = 0;
	sta->plink_retries = 0;
90 91
}

92 93 94 95
/*
 * NOTE: This is just an alias for sta_info_alloc(), see notes
 *       on it in the lifecycle management section!
 */
96
static struct sta_info *mesh_plink_alloc(struct ieee80211_sub_if_data *sdata,
97
					 u8 *hw_addr, u32 rates)
98
{
99
	struct ieee80211_local *local = sdata->local;
100 101 102
	struct sta_info *sta;

	if (local->num_sta >= MESH_MAX_PLINKS)
Johannes Berg's avatar
Johannes Berg committed
103
		return NULL;
104

105
	sta = sta_info_alloc(sdata, hw_addr, GFP_KERNEL);
Johannes Berg's avatar
Johannes Berg committed
106 107
	if (!sta)
		return NULL;
108

109
	sta->flags = WLAN_STA_AUTHORIZED;
110
	sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
111
	rate_control_rate_init(sta);
112 113 114 115 116

	return sta;
}

/**
117
 * mesh_plink_deactivate - deactivate mesh peer link
118 119 120 121 122
 *
 * @sta: mesh peer link to deactivate
 *
 * All mesh paths with this peer as next hop will be flushed
 *
123
 * Locking: the caller must hold sta->lock
124
 */
Johannes Berg's avatar
Johannes Berg committed
125
static void __mesh_plink_deactivate(struct sta_info *sta)
126
{
127 128
	struct ieee80211_sub_if_data *sdata = sta->sdata;

129
	if (sta->plink_state == PLINK_ESTAB)
130
		mesh_plink_dec_estab_count(sdata);
131
	sta->plink_state = PLINK_BLOCKED;
132 133 134
	mesh_path_flush_by_nexthop(sta);
}

Johannes Berg's avatar
Johannes Berg committed
135 136 137 138 139 140 141 142 143
/**
 * __mesh_plink_deactivate - deactivate mesh peer link
 *
 * @sta: mesh peer link to deactivate
 *
 * All mesh paths with this peer as next hop will be flushed
 */
void mesh_plink_deactivate(struct sta_info *sta)
{
144
	spin_lock_bh(&sta->lock);
Johannes Berg's avatar
Johannes Berg committed
145
	__mesh_plink_deactivate(sta);
146
	spin_unlock_bh(&sta->lock);
Johannes Berg's avatar
Johannes Berg committed
147 148
}

149
static int mesh_plink_frame_tx(struct ieee80211_sub_if_data *sdata,
150 151
		enum plink_frame_type action, u8 *da, __le16 llid, __le16 plid,
		__le16 reason) {
152
	struct ieee80211_local *local = sdata->local;
153 154 155
	struct sk_buff *skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
	struct ieee80211_mgmt *mgmt;
	bool include_plid = false;
156
	static const u8 meshpeeringproto[] = { 0x00, 0x0F, 0xAC, 0x2A };
157 158 159 160 161 162 163 164 165 166 167 168
	u8 *pos;
	int ie_len;

	if (!skb)
		return -1;
	skb_reserve(skb, local->hw.extra_tx_headroom);
	/* 25 is the size of the common mgmt part (24) plus the size of the
	 * common action part (1)
	 */
	mgmt = (struct ieee80211_mgmt *)
		skb_put(skb, 25 + sizeof(mgmt->u.action.u.plink_action));
	memset(mgmt, 0, 25 + sizeof(mgmt->u.action.u.plink_action));
169 170
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_ACTION);
171
	memcpy(mgmt->da, da, ETH_ALEN);
172
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
173
	/* BSSID is left zeroed, wildcard value */
174
	mgmt->u.action.category = MESH_PLINK_CATEGORY;
175 176 177 178 179 180 181 182 183
	mgmt->u.action.u.plink_action.action_code = action;

	if (action == PLINK_CLOSE)
		mgmt->u.action.u.plink_action.aux = reason;
	else {
		mgmt->u.action.u.plink_action.aux = cpu_to_le16(0x0);
		if (action == PLINK_CONFIRM) {
			pos = skb_put(skb, 4);
			/* two-byte status code followed by two-byte AID */
184 185
			memset(pos, 0, 2);
			memcpy(pos + 2, &plid, 2);
186
		}
187
		mesh_mgmt_ies_add(skb, sdata);
188 189 190 191 192
	}

	/* Add Peer Link Management element */
	switch (action) {
	case PLINK_OPEN:
193
		ie_len = 6;
194 195
		break;
	case PLINK_CONFIRM:
196
		ie_len = 8;
197 198 199 200 201
		include_plid = true;
		break;
	case PLINK_CLOSE:
	default:
		if (!plid)
202
			ie_len = 8;
203
		else {
204
			ie_len = 10;
205 206 207 208 209 210 211 212
			include_plid = true;
		}
		break;
	}

	pos = skb_put(skb, 2 + ie_len);
	*pos++ = WLAN_EID_PEER_LINK;
	*pos++ = ie_len;
213 214
	memcpy(pos, meshpeeringproto, sizeof(meshpeeringproto));
	pos += 4;
215 216 217 218 219 220 221 222 223 224
	memcpy(pos, &llid, 2);
	if (include_plid) {
		pos += 2;
		memcpy(pos, &plid, 2);
	}
	if (action == PLINK_CLOSE) {
		pos += 2;
		memcpy(pos, &reason, 2);
	}

225
	ieee80211_tx_skb(sdata, skb);
226 227 228
	return 0;
}

229
void mesh_neighbour_update(u8 *hw_addr, u32 rates, struct ieee80211_sub_if_data *sdata,
230 231
			   bool peer_accepting_plinks)
{
232
	struct ieee80211_local *local = sdata->local;
233 234
	struct sta_info *sta;

235 236
	rcu_read_lock();

237
	sta = sta_info_get(sdata, hw_addr);
238
	if (!sta) {
239 240
		rcu_read_unlock();

241
		sta = mesh_plink_alloc(sdata, hw_addr, rates);
242
		if (!sta)
Johannes Berg's avatar
Johannes Berg committed
243
			return;
244
		if (sta_info_insert_rcu(sta)) {
245
			rcu_read_unlock();
246
			return;
247
		}
248 249 250
	}

	sta->last_rx = jiffies;
251
	sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
252
	if (peer_accepting_plinks && sta->plink_state == PLINK_LISTEN &&
253 254
			sdata->u.mesh.accepting_plinks &&
			sdata->u.mesh.mshcfg.auto_open_plinks)
255 256
		mesh_plink_open(sta);

257
	rcu_read_unlock();
258 259 260 261 262 263 264 265
}

static void mesh_plink_timer(unsigned long data)
{
	struct sta_info *sta;
	__le16 llid, plid, reason;
	struct ieee80211_sub_if_data *sdata;

266 267 268 269 270
	/*
	 * This STA is valid because sta_info_destroy() will
	 * del_timer_sync() this timer after having made sure
	 * it cannot be readded (by deleting the plink.)
	 */
271 272
	sta = (struct sta_info *) data;

273 274 275 276 277
	if (sta->sdata->local->quiescing) {
		sta->plink_timer_was_running = true;
		return;
	}

278
	spin_lock_bh(&sta->lock);
279 280
	if (sta->ignore_plink_timer) {
		sta->ignore_plink_timer = false;
281
		spin_unlock_bh(&sta->lock);
282 283
		return;
	}
284 285
	mpl_dbg("Mesh plink timer for %pM fired on state %d\n",
		sta->sta.addr, sta->plink_state);
286 287 288
	reason = 0;
	llid = sta->llid;
	plid = sta->plid;
289
	sdata = sta->sdata;
290 291

	switch (sta->plink_state) {
292 293
	case PLINK_OPN_RCVD:
	case PLINK_OPN_SNT:
294 295 296
		/* retry timer */
		if (sta->plink_retries < dot11MeshMaxRetries(sdata)) {
			u32 rand;
297 298 299
			mpl_dbg("Mesh plink for %pM (retry, timeout): %d %d\n",
				sta->sta.addr, sta->plink_retries,
				sta->plink_timeout);
300 301 302 303
			get_random_bytes(&rand, sizeof(u32));
			sta->plink_timeout = sta->plink_timeout +
					     rand % sta->plink_timeout;
			++sta->plink_retries;
304
			mod_plink_timer(sta, sta->plink_timeout);
305
			spin_unlock_bh(&sta->lock);
306
			mesh_plink_frame_tx(sdata, PLINK_OPEN, sta->sta.addr, llid,
307 308 309 310 311
					    0, 0);
			break;
		}
		reason = cpu_to_le16(MESH_MAX_RETRIES);
		/* fall through on else */
312
	case PLINK_CNF_RCVD:
313 314 315
		/* confirm timer */
		if (!reason)
			reason = cpu_to_le16(MESH_CONFIRM_TIMEOUT);
316
		sta->plink_state = PLINK_HOLDING;
317
		mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata));
318
		spin_unlock_bh(&sta->lock);
319
		mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr, llid, plid,
320 321
				    reason);
		break;
322
	case PLINK_HOLDING:
323
		/* holding timer */
324
		del_timer(&sta->plink_timer);
325
		mesh_plink_fsm_restart(sta);
326
		spin_unlock_bh(&sta->lock);
327 328
		break;
	default:
329
		spin_unlock_bh(&sta->lock);
330 331 332 333
		break;
	}
}

334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349
#ifdef CONFIG_PM
void mesh_plink_quiesce(struct sta_info *sta)
{
	if (del_timer_sync(&sta->plink_timer))
		sta->plink_timer_was_running = true;
}

void mesh_plink_restart(struct sta_info *sta)
{
	if (sta->plink_timer_was_running) {
		add_timer(&sta->plink_timer);
		sta->plink_timer_was_running = false;
	}
}
#endif

350 351 352 353 354 355 356 357 358 359 360 361
static inline void mesh_plink_timer_set(struct sta_info *sta, int timeout)
{
	sta->plink_timer.expires = jiffies + (HZ * timeout / 1000);
	sta->plink_timer.data = (unsigned long) sta;
	sta->plink_timer.function = mesh_plink_timer;
	sta->plink_timeout = timeout;
	add_timer(&sta->plink_timer);
}

int mesh_plink_open(struct sta_info *sta)
{
	__le16 llid;
362
	struct ieee80211_sub_if_data *sdata = sta->sdata;
363

364
	spin_lock_bh(&sta->lock);
365 366
	get_random_bytes(&llid, 2);
	sta->llid = llid;
367
	if (sta->plink_state != PLINK_LISTEN) {
368
		spin_unlock_bh(&sta->lock);
369 370
		return -EBUSY;
	}
371
	sta->plink_state = PLINK_OPN_SNT;
372
	mesh_plink_timer_set(sta, dot11MeshRetryTimeout(sdata));
373
	spin_unlock_bh(&sta->lock);
374 375
	mpl_dbg("Mesh plink: starting establishment with %pM\n",
		sta->sta.addr);
376

377
	return mesh_plink_frame_tx(sdata, PLINK_OPEN,
378
				   sta->sta.addr, llid, 0, 0);
379 380 381 382
}

void mesh_plink_block(struct sta_info *sta)
{
383
	spin_lock_bh(&sta->lock);
Johannes Berg's avatar
Johannes Berg committed
384
	__mesh_plink_deactivate(sta);
385
	sta->plink_state = PLINK_BLOCKED;
386
	spin_unlock_bh(&sta->lock);
387 388 389
}


390
void mesh_rx_plink_frame(struct ieee80211_sub_if_data *sdata, struct ieee80211_mgmt *mgmt,
391 392
			 size_t len, struct ieee80211_rx_status *rx_status)
{
393
	struct ieee80211_local *local = sdata->local;
394 395 396 397 398 399 400 401
	struct ieee802_11_elems elems;
	struct sta_info *sta;
	enum plink_event event;
	enum plink_frame_type ftype;
	size_t baselen;
	u8 ie_len;
	u8 *baseaddr;
	__le16 plid, llid, reason;
402 403 404 405 406 407 408 409 410 411 412
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
	static const char *mplstates[] = {
		[PLINK_LISTEN] = "LISTEN",
		[PLINK_OPN_SNT] = "OPN-SNT",
		[PLINK_OPN_RCVD] = "OPN-RCVD",
		[PLINK_CNF_RCVD] = "CNF_RCVD",
		[PLINK_ESTAB] = "ESTAB",
		[PLINK_HOLDING] = "HOLDING",
		[PLINK_BLOCKED] = "BLOCKED"
	};
#endif
413

414 415 416 417
	/* need action_code, aux */
	if (len < IEEE80211_MIN_ACTION_SIZE + 3)
		return;

418 419 420 421 422 423 424 425 426
	if (is_multicast_ether_addr(mgmt->da)) {
		mpl_dbg("Mesh plink: ignore frame from multicast address");
		return;
	}

	baseaddr = mgmt->u.action.u.plink_action.variable;
	baselen = (u8 *) mgmt->u.action.u.plink_action.variable - (u8 *) mgmt;
	if (mgmt->u.action.u.plink_action.action_code == PLINK_CONFIRM) {
		baseaddr += 4;
427
		baselen += 4;
428 429 430 431 432 433 434
	}
	ieee802_11_parse_elems(baseaddr, len - baselen, &elems);
	if (!elems.peer_link) {
		mpl_dbg("Mesh plink: missing necessary peer link ie\n");
		return;
	}

435
	ftype = mgmt->u.action.u.plink_action.action_code;
436
	ie_len = elems.peer_link_len;
437 438 439 440 441
	if ((ftype == PLINK_OPEN && ie_len != 6) ||
	    (ftype == PLINK_CONFIRM && ie_len != 8) ||
	    (ftype == PLINK_CLOSE && ie_len != 8 && ie_len != 10)) {
		mpl_dbg("Mesh plink: incorrect plink ie length %d %d\n",
		    ftype, ie_len);
442 443 444 445 446 447 448 449 450 451 452
		return;
	}

	if (ftype != PLINK_CLOSE && (!elems.mesh_id || !elems.mesh_config)) {
		mpl_dbg("Mesh plink: missing necessary ie\n");
		return;
	}
	/* Note the lines below are correct, the llid in the frame is the plid
	 * from the point of view of this host.
	 */
	memcpy(&plid, PLINK_GET_LLID(elems.peer_link), 2);
453
	if (ftype == PLINK_CONFIRM || (ftype == PLINK_CLOSE && ie_len == 10))
454 455
		memcpy(&llid, PLINK_GET_PLID(elems.peer_link), 2);

456 457
	rcu_read_lock();

458
	sta = sta_info_get(sdata, mgmt->sa);
459 460
	if (!sta && ftype != PLINK_OPEN) {
		mpl_dbg("Mesh plink: cls or cnf from unknown peer\n");
461
		rcu_read_unlock();
462 463 464
		return;
	}

465
	if (sta && sta->plink_state == PLINK_BLOCKED) {
466
		rcu_read_unlock();
467 468 469 470 471
		return;
	}

	/* Now we will figure out the appropriate event... */
	event = PLINK_UNDEFINED;
472
	if (ftype != PLINK_CLOSE && (!mesh_matches_local(&elems, sdata))) {
473 474 475 476 477 478 479 480 481 482 483
		switch (ftype) {
		case PLINK_OPEN:
			event = OPN_RJCT;
			break;
		case PLINK_CONFIRM:
			event = CNF_RJCT;
			break;
		case PLINK_CLOSE:
			/* avoid warning */
			break;
		}
484
		spin_lock_bh(&sta->lock);
485 486
	} else if (!sta) {
		/* ftype == PLINK_OPEN */
487
		u32 rates;
488 489 490

		rcu_read_unlock();

491 492 493 494 495 496
		if (!mesh_plink_free_count(sdata)) {
			mpl_dbg("Mesh plink error: no more free plinks\n");
			return;
		}

		rates = ieee80211_sta_get_rates(local, &elems, rx_status->band);
497
		sta = mesh_plink_alloc(sdata, mgmt->sa, rates);
Johannes Berg's avatar
Johannes Berg committed
498
		if (!sta) {
499 500 501
			mpl_dbg("Mesh plink error: plink table full\n");
			return;
		}
502
		if (sta_info_insert_rcu(sta)) {
Johannes Berg's avatar
Johannes Berg committed
503 504 505
			rcu_read_unlock();
			return;
		}
506
		event = OPN_ACPT;
507
		spin_lock_bh(&sta->lock);
508
	} else {
509
		spin_lock_bh(&sta->lock);
510 511 512
		switch (ftype) {
		case PLINK_OPEN:
			if (!mesh_plink_free_count(sdata) ||
513
			    (sta->plid && sta->plid != plid))
514 515 516 517 518 519
				event = OPN_IGNR;
			else
				event = OPN_ACPT;
			break;
		case PLINK_CONFIRM:
			if (!mesh_plink_free_count(sdata) ||
520
			    (sta->llid != llid || sta->plid != plid))
521 522 523 524 525
				event = CNF_IGNR;
			else
				event = CNF_ACPT;
			break;
		case PLINK_CLOSE:
526
			if (sta->plink_state == PLINK_ESTAB)
527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545
				/* Do not check for llid or plid. This does not
				 * follow the standard but since multiple plinks
				 * per sta are not supported, it is necessary in
				 * order to avoid a livelock when MP A sees an
				 * establish peer link to MP B but MP B does not
				 * see it. This can be caused by a timeout in
				 * B's peer link establishment or B beign
				 * restarted.
				 */
				event = CLS_ACPT;
			else if (sta->plid != plid)
				event = CLS_IGNR;
			else if (ie_len == 7 && sta->llid != llid)
				event = CLS_IGNR;
			else
				event = CLS_ACPT;
			break;
		default:
			mpl_dbg("Mesh plink: unknown frame subtype\n");
546
			spin_unlock_bh(&sta->lock);
547
			rcu_read_unlock();
548 549 550 551
			return;
		}
	}

552 553
	mpl_dbg("Mesh plink (peer, state, llid, plid, event): %pM %s %d %d %d\n",
		mgmt->sa, mplstates[sta->plink_state],
554 555
		le16_to_cpu(sta->llid), le16_to_cpu(sta->plid),
		event);
556 557 558
	reason = 0;
	switch (sta->plink_state) {
		/* spin_unlock as soon as state is updated at each case */
559
	case PLINK_LISTEN:
560 561 562
		switch (event) {
		case CLS_ACPT:
			mesh_plink_fsm_restart(sta);
563
			spin_unlock_bh(&sta->lock);
564 565
			break;
		case OPN_ACPT:
566
			sta->plink_state = PLINK_OPN_RCVD;
567 568 569 570
			sta->plid = plid;
			get_random_bytes(&llid, 2);
			sta->llid = llid;
			mesh_plink_timer_set(sta, dot11MeshRetryTimeout(sdata));
571
			spin_unlock_bh(&sta->lock);
572
			mesh_plink_frame_tx(sdata, PLINK_OPEN, sta->sta.addr, llid,
573
					    0, 0);
574
			mesh_plink_frame_tx(sdata, PLINK_CONFIRM, sta->sta.addr,
575 576 577
					    llid, plid, 0);
			break;
		default:
578
			spin_unlock_bh(&sta->lock);
579 580 581 582
			break;
		}
		break;

583
	case PLINK_OPN_SNT:
584 585 586 587 588 589 590 591
		switch (event) {
		case OPN_RJCT:
		case CNF_RJCT:
			reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
		case CLS_ACPT:
			if (!reason)
				reason = cpu_to_le16(MESH_CLOSE_RCVD);
			sta->reason = reason;
592
			sta->plink_state = PLINK_HOLDING;
593 594 595 596 597
			if (!mod_plink_timer(sta,
					     dot11MeshHoldingTimeout(sdata)))
				sta->ignore_plink_timer = true;

			llid = sta->llid;
598
			spin_unlock_bh(&sta->lock);
599
			mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr, llid,
600 601 602 603
					    plid, reason);
			break;
		case OPN_ACPT:
			/* retry timer is left untouched */
604
			sta->plink_state = PLINK_OPN_RCVD;
605 606
			sta->plid = plid;
			llid = sta->llid;
607
			spin_unlock_bh(&sta->lock);
608
			mesh_plink_frame_tx(sdata, PLINK_CONFIRM, sta->sta.addr, llid,
609 610 611
					    plid, 0);
			break;
		case CNF_ACPT:
612
			sta->plink_state = PLINK_CNF_RCVD;
613 614 615 616
			if (!mod_plink_timer(sta,
					     dot11MeshConfirmTimeout(sdata)))
				sta->ignore_plink_timer = true;

617
			spin_unlock_bh(&sta->lock);
618 619
			break;
		default:
620
			spin_unlock_bh(&sta->lock);
621 622 623 624
			break;
		}
		break;

625
	case PLINK_OPN_RCVD:
626 627 628 629 630 631 632 633
		switch (event) {
		case OPN_RJCT:
		case CNF_RJCT:
			reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
		case CLS_ACPT:
			if (!reason)
				reason = cpu_to_le16(MESH_CLOSE_RCVD);
			sta->reason = reason;
634
			sta->plink_state = PLINK_HOLDING;
635 636 637 638 639
			if (!mod_plink_timer(sta,
					     dot11MeshHoldingTimeout(sdata)))
				sta->ignore_plink_timer = true;

			llid = sta->llid;
640
			spin_unlock_bh(&sta->lock);
641
			mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr, llid,
642 643 644 645
					    plid, reason);
			break;
		case OPN_ACPT:
			llid = sta->llid;
646
			spin_unlock_bh(&sta->lock);
647
			mesh_plink_frame_tx(sdata, PLINK_CONFIRM, sta->sta.addr, llid,
648 649 650
					    plid, 0);
			break;
		case CNF_ACPT:
651
			del_timer(&sta->plink_timer);
652
			sta->plink_state = PLINK_ESTAB;
653
			mesh_plink_inc_estab_count(sdata);
654
			spin_unlock_bh(&sta->lock);
655 656
			mpl_dbg("Mesh plink with %pM ESTABLISHED\n",
				sta->sta.addr);
657 658
			break;
		default:
659
			spin_unlock_bh(&sta->lock);
660 661 662 663
			break;
		}
		break;

664
	case PLINK_CNF_RCVD:
665 666 667 668 669 670 671 672
		switch (event) {
		case OPN_RJCT:
		case CNF_RJCT:
			reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
		case CLS_ACPT:
			if (!reason)
				reason = cpu_to_le16(MESH_CLOSE_RCVD);
			sta->reason = reason;
673
			sta->plink_state = PLINK_HOLDING;
674 675 676 677 678
			if (!mod_plink_timer(sta,
					     dot11MeshHoldingTimeout(sdata)))
				sta->ignore_plink_timer = true;

			llid = sta->llid;
679
			spin_unlock_bh(&sta->lock);
680
			mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr, llid,
681
					    plid, reason);
682
			break;
683
		case OPN_ACPT:
684
			del_timer(&sta->plink_timer);
685
			sta->plink_state = PLINK_ESTAB;
686
			mesh_plink_inc_estab_count(sdata);
687
			spin_unlock_bh(&sta->lock);
688 689
			mpl_dbg("Mesh plink with %pM ESTABLISHED\n",
				sta->sta.addr);
690
			mesh_plink_frame_tx(sdata, PLINK_CONFIRM, sta->sta.addr, llid,
691 692 693
					    plid, 0);
			break;
		default:
694
			spin_unlock_bh(&sta->lock);
695 696 697 698
			break;
		}
		break;

699
	case PLINK_ESTAB:
700 701 702 703
		switch (event) {
		case CLS_ACPT:
			reason = cpu_to_le16(MESH_CLOSE_RCVD);
			sta->reason = reason;
Johannes Berg's avatar
Johannes Berg committed
704
			__mesh_plink_deactivate(sta);
705
			sta->plink_state = PLINK_HOLDING;
706
			llid = sta->llid;
707
			mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata));
708
			spin_unlock_bh(&sta->lock);
709
			mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr, llid,
710 711 712 713
					    plid, reason);
			break;
		case OPN_ACPT:
			llid = sta->llid;
714
			spin_unlock_bh(&sta->lock);
715
			mesh_plink_frame_tx(sdata, PLINK_CONFIRM, sta->sta.addr, llid,
716 717 718
					    plid, 0);
			break;
		default:
719
			spin_unlock_bh(&sta->lock);
720 721 722
			break;
		}
		break;
723
	case PLINK_HOLDING:
724 725
		switch (event) {
		case CLS_ACPT:
726
			if (del_timer(&sta->plink_timer))
727 728
				sta->ignore_plink_timer = 1;
			mesh_plink_fsm_restart(sta);
729
			spin_unlock_bh(&sta->lock);
730 731 732 733 734 735 736
			break;
		case OPN_ACPT:
		case CNF_ACPT:
		case OPN_RJCT:
		case CNF_RJCT:
			llid = sta->llid;
			reason = sta->reason;
737
			spin_unlock_bh(&sta->lock);
738 739
			mesh_plink_frame_tx(sdata, PLINK_CLOSE, sta->sta.addr,
					    llid, plid, reason);
740 741
			break;
		default:
742
			spin_unlock_bh(&sta->lock);
743 744 745
		}
		break;
	default:
746 747
		/* should not get here, PLINK_BLOCKED is dealt with at the
		 * beggining of the function
748
		 */
749
		spin_unlock_bh(&sta->lock);
750 751
		break;
	}
752 753

	rcu_read_unlock();
754
}