| /* |
| * Marvell Wireless LAN device driver: management IE handling- setting and |
| * deleting IE. |
| * |
| * Copyright (C) 2012-2014, Marvell International Ltd. |
| * |
| * This software file (the "File") is distributed by Marvell International |
| * Ltd. under the terms of the GNU General Public License Version 2, June 1991 |
| * (the "License"). You may use, redistribute and/or modify this File in |
| * accordance with the terms and conditions of the License, a copy of which |
| * is available by writing to the Free Software Foundation, Inc., |
| * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the |
| * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. |
| * |
| * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE |
| * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE |
| * ARE EXPRESSLY DISCLAIMED. The License provides additional details about |
| * this warranty disclaimer. |
| */ |
| |
| #include "main.h" |
| |
| /* This function checks if current IE index is used by any on other interface. |
| * Return: -1: yes, current IE index is used by someone else. |
| * 0: no, current IE index is NOT used by other interface. |
| */ |
| static int |
| mwifiex_ie_index_used_by_other_intf(struct mwifiex_private *priv, u16 idx) |
| { |
| int i; |
| struct mwifiex_adapter *adapter = priv->adapter; |
| struct mwifiex_ie *ie; |
| |
| for (i = 0; i < adapter->priv_num; i++) { |
| if (adapter->priv[i] != priv) { |
| ie = &adapter->priv[i]->mgmt_ie[idx]; |
| if (ie->mgmt_subtype_mask && ie->ie_length) |
| return -1; |
| } |
| } |
| |
| return 0; |
| } |
| |
| /* Get unused IE index. This index will be used for setting new IE */ |
| static int |
| mwifiex_ie_get_autoidx(struct mwifiex_private *priv, u16 subtype_mask, |
| struct mwifiex_ie *ie, u16 *index) |
| { |
| u16 mask, len, i; |
| |
| for (i = 0; i < priv->adapter->max_mgmt_ie_index; i++) { |
| mask = le16_to_cpu(priv->mgmt_ie[i].mgmt_subtype_mask); |
| len = le16_to_cpu(ie->ie_length); |
| |
| if (mask == MWIFIEX_AUTO_IDX_MASK) |
| continue; |
| |
| if (mask == subtype_mask) { |
| if (len > IEEE_MAX_IE_SIZE) |
| continue; |
| |
| *index = i; |
| return 0; |
| } |
| |
| if (!priv->mgmt_ie[i].ie_length) { |
| if (mwifiex_ie_index_used_by_other_intf(priv, i)) |
| continue; |
| |
| *index = i; |
| return 0; |
| } |
| } |
| |
| return -1; |
| } |
| |
| /* This function prepares IE data buffer for command to be sent to FW */ |
| static int |
| mwifiex_update_autoindex_ies(struct mwifiex_private *priv, |
| struct mwifiex_ie_list *ie_list) |
| { |
| u16 travel_len, index, mask; |
| s16 input_len, tlv_len; |
| struct mwifiex_ie *ie; |
| u8 *tmp; |
| |
| input_len = le16_to_cpu(ie_list->len); |
| travel_len = sizeof(struct mwifiex_ie_types_header); |
| |
| ie_list->len = 0; |
| |
| while (input_len >= sizeof(struct mwifiex_ie_types_header)) { |
| ie = (struct mwifiex_ie *)(((u8 *)ie_list) + travel_len); |
| tlv_len = le16_to_cpu(ie->ie_length); |
| travel_len += tlv_len + MWIFIEX_IE_HDR_SIZE; |
| |
| if (input_len < tlv_len + MWIFIEX_IE_HDR_SIZE) |
| return -1; |
| index = le16_to_cpu(ie->ie_index); |
| mask = le16_to_cpu(ie->mgmt_subtype_mask); |
| |
| if (index == MWIFIEX_AUTO_IDX_MASK) { |
| /* automatic addition */ |
| if (mwifiex_ie_get_autoidx(priv, mask, ie, &index)) |
| return -1; |
| if (index == MWIFIEX_AUTO_IDX_MASK) |
| return -1; |
| |
| tmp = (u8 *)&priv->mgmt_ie[index].ie_buffer; |
| memcpy(tmp, &ie->ie_buffer, le16_to_cpu(ie->ie_length)); |
| priv->mgmt_ie[index].ie_length = ie->ie_length; |
| priv->mgmt_ie[index].ie_index = cpu_to_le16(index); |
| priv->mgmt_ie[index].mgmt_subtype_mask = |
| cpu_to_le16(mask); |
| |
| ie->ie_index = cpu_to_le16(index); |
| } else { |
| if (mask != MWIFIEX_DELETE_MASK) |
| return -1; |
| /* |
| * Check if this index is being used on any |
| * other interface. |
| */ |
| if (mwifiex_ie_index_used_by_other_intf(priv, index)) |
| return -1; |
| |
| ie->ie_length = 0; |
| memcpy(&priv->mgmt_ie[index], ie, |
| sizeof(struct mwifiex_ie)); |
| } |
| |
| le16_add_cpu(&ie_list->len, |
| le16_to_cpu(priv->mgmt_ie[index].ie_length) + |
| MWIFIEX_IE_HDR_SIZE); |
| input_len -= tlv_len + MWIFIEX_IE_HDR_SIZE; |
| } |
| |
| if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) |
| return mwifiex_send_cmd(priv, HostCmd_CMD_UAP_SYS_CONFIG, |
| HostCmd_ACT_GEN_SET, |
| UAP_CUSTOM_IE_I, ie_list, false); |
| |
| return 0; |
| } |
| |
| /* Copy individual custom IEs for beacon, probe response and assoc response |
| * and prepare single structure for IE setting. |
| * This function also updates allocated IE indices from driver. |
| */ |
| static int |
| mwifiex_update_uap_custom_ie(struct mwifiex_private *priv, |
| struct mwifiex_ie *beacon_ie, u16 *beacon_idx, |
| struct mwifiex_ie *pr_ie, u16 *probe_idx, |
| struct mwifiex_ie *ar_ie, u16 *assoc_idx) |
| { |
| struct mwifiex_ie_list *ap_custom_ie; |
| u8 *pos; |
| u16 len; |
| int ret; |
| |
| ap_custom_ie = kzalloc(sizeof(*ap_custom_ie), GFP_KERNEL); |
| if (!ap_custom_ie) |
| return -ENOMEM; |
| |
| ap_custom_ie->type = cpu_to_le16(TLV_TYPE_MGMT_IE); |
| pos = (u8 *)ap_custom_ie->ie_list; |
| |
| if (beacon_ie) { |
| len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE + |
| le16_to_cpu(beacon_ie->ie_length); |
| memcpy(pos, beacon_ie, len); |
| pos += len; |
| le16_add_cpu(&ap_custom_ie->len, len); |
| } |
| if (pr_ie) { |
| len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE + |
| le16_to_cpu(pr_ie->ie_length); |
| memcpy(pos, pr_ie, len); |
| pos += len; |
| le16_add_cpu(&ap_custom_ie->len, len); |
| } |
| if (ar_ie) { |
| len = sizeof(struct mwifiex_ie) - IEEE_MAX_IE_SIZE + |
| le16_to_cpu(ar_ie->ie_length); |
| memcpy(pos, ar_ie, len); |
| pos += len; |
| le16_add_cpu(&ap_custom_ie->len, len); |
| } |
| |
| ret = mwifiex_update_autoindex_ies(priv, ap_custom_ie); |
| |
| pos = (u8 *)(&ap_custom_ie->ie_list[0].ie_index); |
| if (beacon_ie && *beacon_idx == MWIFIEX_AUTO_IDX_MASK) { |
| /* save beacon ie index after auto-indexing */ |
| *beacon_idx = le16_to_cpu(ap_custom_ie->ie_list[0].ie_index); |
| len = sizeof(*beacon_ie) - IEEE_MAX_IE_SIZE + |
| le16_to_cpu(beacon_ie->ie_length); |
| pos += len; |
| } |
| if (pr_ie && le16_to_cpu(pr_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK) { |
| /* save probe resp ie index after auto-indexing */ |
| *probe_idx = *((u16 *)pos); |
| len = sizeof(*pr_ie) - IEEE_MAX_IE_SIZE + |
| le16_to_cpu(pr_ie->ie_length); |
| pos += len; |
| } |
| if (ar_ie && le16_to_cpu(ar_ie->ie_index) == MWIFIEX_AUTO_IDX_MASK) |
| /* save assoc resp ie index after auto-indexing */ |
| *assoc_idx = *((u16 *)pos); |
| |
| kfree(ap_custom_ie); |
| return ret; |
| } |
| |
| /* This function checks if the vendor specified IE is present in passed buffer |
| * and copies it to mwifiex_ie structure. |
| * Function takes pointer to struct mwifiex_ie pointer as argument. |
| * If the vendor specified IE is present then memory is allocated for |
| * mwifiex_ie pointer and filled in with IE. Caller should take care of freeing |
| * this memory. |
| */ |
| static int mwifiex_update_vs_ie(const u8 *ies, int ies_len, |
| struct mwifiex_ie **ie_ptr, u16 mask, |
| unsigned int oui, u8 oui_type) |
| { |
| struct ieee_types_header *vs_ie; |
| struct mwifiex_ie *ie = *ie_ptr; |
| const u8 *vendor_ie; |
| |
| vendor_ie = cfg80211_find_vendor_ie(oui, oui_type, ies, ies_len); |
| if (vendor_ie) { |
| if (!*ie_ptr) { |
| *ie_ptr = kzalloc(sizeof(struct mwifiex_ie), |
| GFP_KERNEL); |
| if (!*ie_ptr) |
| return -ENOMEM; |
| ie = *ie_ptr; |
| } |
| |
| vs_ie = (struct ieee_types_header *)vendor_ie; |
| memcpy(ie->ie_buffer + le16_to_cpu(ie->ie_length), |
| vs_ie, vs_ie->len + 2); |
| le16_add_cpu(&ie->ie_length, vs_ie->len + 2); |
| ie->mgmt_subtype_mask = cpu_to_le16(mask); |
| ie->ie_index = cpu_to_le16(MWIFIEX_AUTO_IDX_MASK); |
| } |
| |
| *ie_ptr = ie; |
| return 0; |
| } |
| |
| /* This function parses beacon IEs, probe response IEs, association response IEs |
| * from cfg80211_ap_settings->beacon and sets these IE to FW. |
| */ |
| static int mwifiex_set_mgmt_beacon_data_ies(struct mwifiex_private *priv, |
| struct cfg80211_beacon_data *data) |
| { |
| struct mwifiex_ie *beacon_ie = NULL, *pr_ie = NULL, *ar_ie = NULL; |
| u16 beacon_idx = MWIFIEX_AUTO_IDX_MASK, pr_idx = MWIFIEX_AUTO_IDX_MASK; |
| u16 ar_idx = MWIFIEX_AUTO_IDX_MASK; |
| int ret = 0; |
| |
| if (data->beacon_ies && data->beacon_ies_len) { |
| mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len, |
| &beacon_ie, MGMT_MASK_BEACON, |
| WLAN_OUI_MICROSOFT, |
| WLAN_OUI_TYPE_MICROSOFT_WPS); |
| mwifiex_update_vs_ie(data->beacon_ies, data->beacon_ies_len, |
| &beacon_ie, MGMT_MASK_BEACON, |
| WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P); |
| } |
| |
| if (data->proberesp_ies && data->proberesp_ies_len) { |
| mwifiex_update_vs_ie(data->proberesp_ies, |
| data->proberesp_ies_len, &pr_ie, |
| MGMT_MASK_PROBE_RESP, WLAN_OUI_MICROSOFT, |
| WLAN_OUI_TYPE_MICROSOFT_WPS); |
| mwifiex_update_vs_ie(data->proberesp_ies, |
| data->proberesp_ies_len, &pr_ie, |
| MGMT_MASK_PROBE_RESP, |
| WLAN_OUI_WFA, WLAN_OUI_TYPE_WFA_P2P); |
| } |
| |
| if (data->assocresp_ies && data->assocresp_ies_len) { |
| mwifiex_update_vs_ie(data->assocresp_ies, |
| data->assocresp_ies_len, &ar_ie, |
| MGMT_MASK_ASSOC_RESP | |
| MGMT_MASK_REASSOC_RESP, |
| WLAN_OUI_MICROSOFT, |
| WLAN_OUI_TYPE_MICROSOFT_WPS); |
| mwifiex_update_vs_ie(data->assocresp_ies, |
| data->assocresp_ies_len, &ar_ie, |
| MGMT_MASK_ASSOC_RESP | |
| MGMT_MASK_REASSOC_RESP, WLAN_OUI_WFA, |
| WLAN_OUI_TYPE_WFA_P2P); |
| } |
| |
| if (beacon_ie || pr_ie || ar_ie) { |
| ret = mwifiex_update_uap_custom_ie(priv, beacon_ie, |
| &beacon_idx, pr_ie, |
| &pr_idx, ar_ie, &ar_idx); |
| if (ret) |
| goto done; |
| } |
| |
| priv->beacon_idx = beacon_idx; |
| priv->proberesp_idx = pr_idx; |
| priv->assocresp_idx = ar_idx; |
| |
| done: |
| kfree(beacon_ie); |
| kfree(pr_ie); |
| kfree(ar_ie); |
| |
| return ret; |
| } |
| |
| /* This function parses head and tail IEs, from cfg80211_beacon_data and sets |
| * these IE to FW. |
| */ |
| static int mwifiex_uap_parse_tail_ies(struct mwifiex_private *priv, |
| struct cfg80211_beacon_data *info) |
| { |
| struct mwifiex_ie *gen_ie; |
| struct ieee_types_header *hdr; |
| struct ieee80211_vendor_ie *vendorhdr; |
| u16 gen_idx = MWIFIEX_AUTO_IDX_MASK, ie_len = 0; |
| int left_len, parsed_len = 0; |
| |
| if (!info->tail || !info->tail_len) |
| return 0; |
| |
| gen_ie = kzalloc(sizeof(*gen_ie), GFP_KERNEL); |
| if (!gen_ie) |
| return -ENOMEM; |
| |
| left_len = info->tail_len; |
| |
| /* Many IEs are generated in FW by parsing bss configuration. |
| * Let's not add them here; else we may end up duplicating these IEs |
| */ |
| while (left_len > sizeof(struct ieee_types_header)) { |
| hdr = (void *)(info->tail + parsed_len); |
| switch (hdr->element_id) { |
| case WLAN_EID_SSID: |
| case WLAN_EID_SUPP_RATES: |
| case WLAN_EID_COUNTRY: |
| case WLAN_EID_PWR_CONSTRAINT: |
| case WLAN_EID_EXT_SUPP_RATES: |
| case WLAN_EID_HT_CAPABILITY: |
| case WLAN_EID_HT_OPERATION: |
| case WLAN_EID_VHT_CAPABILITY: |
| case WLAN_EID_VHT_OPERATION: |
| case WLAN_EID_VENDOR_SPECIFIC: |
| break; |
| default: |
| memcpy(gen_ie->ie_buffer + ie_len, hdr, |
| hdr->len + sizeof(struct ieee_types_header)); |
| ie_len += hdr->len + sizeof(struct ieee_types_header); |
| break; |
| } |
| left_len -= hdr->len + sizeof(struct ieee_types_header); |
| parsed_len += hdr->len + sizeof(struct ieee_types_header); |
| } |
| |
| /* parse only WPA vendor IE from tail, WMM IE is configured by |
| * bss_config command |
| */ |
| vendorhdr = (void *)cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT, |
| WLAN_OUI_TYPE_MICROSOFT_WPA, |
| info->tail, info->tail_len); |
| if (vendorhdr) { |
| memcpy(gen_ie->ie_buffer + ie_len, vendorhdr, |
| vendorhdr->len + sizeof(struct ieee_types_header)); |
| ie_len += vendorhdr->len + sizeof(struct ieee_types_header); |
| } |
| |
| if (!ie_len) { |
| kfree(gen_ie); |
| return 0; |
| } |
| |
| gen_ie->ie_index = cpu_to_le16(gen_idx); |
| gen_ie->mgmt_subtype_mask = cpu_to_le16(MGMT_MASK_BEACON | |
| MGMT_MASK_PROBE_RESP | |
| MGMT_MASK_ASSOC_RESP); |
| gen_ie->ie_length = cpu_to_le16(ie_len); |
| |
| if (mwifiex_update_uap_custom_ie(priv, gen_ie, &gen_idx, NULL, NULL, |
| NULL, NULL)) { |
| kfree(gen_ie); |
| return -1; |
| } |
| |
| priv->gen_idx = gen_idx; |
| kfree(gen_ie); |
| return 0; |
| } |
| |
| /* This function parses different IEs-head & tail IEs, beacon IEs, |
| * probe response IEs, association response IEs from cfg80211_ap_settings |
| * function and sets these IE to FW. |
| */ |
| int mwifiex_set_mgmt_ies(struct mwifiex_private *priv, |
| struct cfg80211_beacon_data *info) |
| { |
| int ret; |
| |
| ret = mwifiex_uap_parse_tail_ies(priv, info); |
| |
| if (ret) |
| return ret; |
| |
| return mwifiex_set_mgmt_beacon_data_ies(priv, info); |
| } |
| |
| /* This function removes management IE set */ |
| int mwifiex_del_mgmt_ies(struct mwifiex_private *priv) |
| { |
| struct mwifiex_ie *beacon_ie = NULL, *pr_ie = NULL; |
| struct mwifiex_ie *ar_ie = NULL, *gen_ie = NULL; |
| int ret = 0; |
| |
| if (priv->gen_idx != MWIFIEX_AUTO_IDX_MASK) { |
| gen_ie = kmalloc(sizeof(*gen_ie), GFP_KERNEL); |
| if (!gen_ie) |
| return -ENOMEM; |
| |
| gen_ie->ie_index = cpu_to_le16(priv->gen_idx); |
| gen_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK); |
| gen_ie->ie_length = 0; |
| if (mwifiex_update_uap_custom_ie(priv, gen_ie, &priv->gen_idx, |
| NULL, &priv->proberesp_idx, |
| NULL, &priv->assocresp_idx)) { |
| ret = -1; |
| goto done; |
| } |
| |
| priv->gen_idx = MWIFIEX_AUTO_IDX_MASK; |
| } |
| |
| if (priv->beacon_idx != MWIFIEX_AUTO_IDX_MASK) { |
| beacon_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL); |
| if (!beacon_ie) { |
| ret = -ENOMEM; |
| goto done; |
| } |
| beacon_ie->ie_index = cpu_to_le16(priv->beacon_idx); |
| beacon_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK); |
| beacon_ie->ie_length = 0; |
| } |
| if (priv->proberesp_idx != MWIFIEX_AUTO_IDX_MASK) { |
| pr_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL); |
| if (!pr_ie) { |
| ret = -ENOMEM; |
| goto done; |
| } |
| pr_ie->ie_index = cpu_to_le16(priv->proberesp_idx); |
| pr_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK); |
| pr_ie->ie_length = 0; |
| } |
| if (priv->assocresp_idx != MWIFIEX_AUTO_IDX_MASK) { |
| ar_ie = kmalloc(sizeof(struct mwifiex_ie), GFP_KERNEL); |
| if (!ar_ie) { |
| ret = -ENOMEM; |
| goto done; |
| } |
| ar_ie->ie_index = cpu_to_le16(priv->assocresp_idx); |
| ar_ie->mgmt_subtype_mask = cpu_to_le16(MWIFIEX_DELETE_MASK); |
| ar_ie->ie_length = 0; |
| } |
| |
| if (beacon_ie || pr_ie || ar_ie) |
| ret = mwifiex_update_uap_custom_ie(priv, |
| beacon_ie, &priv->beacon_idx, |
| pr_ie, &priv->proberesp_idx, |
| ar_ie, &priv->assocresp_idx); |
| |
| done: |
| kfree(gen_ie); |
| kfree(beacon_ie); |
| kfree(pr_ie); |
| kfree(ar_ie); |
| |
| return ret; |
| } |