![Johannes Berg](/assets/img/avatar_default.png)
When STA structure insertion fails, it has been allocated but isn't really alive yet, it isn't reachable by any other code and also can't yet have much configured. This patch changes the code so that when the insertion fails, the resulting STA pointer is no longer valid because it is freed. Signed-off-by: Johannes Berg <johannes@sipsolutions.net> Signed-off-by: John W. Linville <linville@tuxdriver.com>
764 lines
20 KiB
C
764 lines
20 KiB
C
/*
|
|
* Copyright (c) 2008 open80211s Ltd.
|
|
* Author: Luis Carlos Cobo <luisca@cozybit.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
* published by the Free Software Foundation.
|
|
*/
|
|
#include <linux/kernel.h>
|
|
#include <linux/random.h>
|
|
#include "ieee80211_i.h"
|
|
#include "ieee80211_rate.h"
|
|
#include "mesh.h"
|
|
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
#define mpl_dbg(fmt, args...) printk(KERN_DEBUG fmt, ##args)
|
|
#else
|
|
#define mpl_dbg(fmt, args...) do { (void)(0); } while (0)
|
|
#endif
|
|
|
|
#define IEEE80211_FC(type, stype) cpu_to_le16(type | stype)
|
|
#define PLINK_GET_FRAME_SUBTYPE(p) (p)
|
|
#define PLINK_GET_LLID(p) (p + 1)
|
|
#define PLINK_GET_PLID(p) (p + 3)
|
|
|
|
#define mod_plink_timer(s, t) (mod_timer(&s->plink_timer, \
|
|
jiffies + HZ * t / 1000))
|
|
|
|
/* Peer link cancel reasons, all subject to ANA approval */
|
|
#define MESH_LINK_CANCELLED 2
|
|
#define MESH_MAX_NEIGHBORS 3
|
|
#define MESH_CAPABILITY_POLICY_VIOLATION 4
|
|
#define MESH_CLOSE_RCVD 5
|
|
#define MESH_MAX_RETRIES 6
|
|
#define MESH_CONFIRM_TIMEOUT 7
|
|
#define MESH_SECURITY_ROLE_NEGOTIATION_DIFFERS 8
|
|
#define MESH_SECURITY_AUTHENTICATION_IMPOSSIBLE 9
|
|
#define MESH_SECURITY_FAILED_VERIFICATION 10
|
|
|
|
#define dot11MeshMaxRetries(s) (s->u.sta.mshcfg.dot11MeshMaxRetries)
|
|
#define dot11MeshRetryTimeout(s) (s->u.sta.mshcfg.dot11MeshRetryTimeout)
|
|
#define dot11MeshConfirmTimeout(s) (s->u.sta.mshcfg.dot11MeshConfirmTimeout)
|
|
#define dot11MeshHoldingTimeout(s) (s->u.sta.mshcfg.dot11MeshHoldingTimeout)
|
|
#define dot11MeshMaxPeerLinks(s) (s->u.sta.mshcfg.dot11MeshMaxPeerLinks)
|
|
|
|
enum plink_frame_type {
|
|
PLINK_OPEN = 0,
|
|
PLINK_CONFIRM,
|
|
PLINK_CLOSE
|
|
};
|
|
|
|
enum plink_event {
|
|
PLINK_UNDEFINED,
|
|
OPN_ACPT,
|
|
OPN_RJCT,
|
|
OPN_IGNR,
|
|
CNF_ACPT,
|
|
CNF_RJCT,
|
|
CNF_IGNR,
|
|
CLS_ACPT,
|
|
CLS_IGNR
|
|
};
|
|
|
|
static inline
|
|
void mesh_plink_inc_estab_count(struct ieee80211_sub_if_data *sdata)
|
|
{
|
|
atomic_inc(&sdata->u.sta.mshstats.estab_plinks);
|
|
mesh_accept_plinks_update(sdata);
|
|
}
|
|
|
|
static inline
|
|
void mesh_plink_dec_estab_count(struct ieee80211_sub_if_data *sdata)
|
|
{
|
|
atomic_dec(&sdata->u.sta.mshstats.estab_plinks);
|
|
mesh_accept_plinks_update(sdata);
|
|
}
|
|
|
|
/**
|
|
* mesh_plink_fsm_restart - restart a mesh peer link finite state machine
|
|
*
|
|
* @sta: mes peer link to restart
|
|
*
|
|
* Locking: this function must be called holding sta->plink_lock
|
|
*/
|
|
static inline void mesh_plink_fsm_restart(struct sta_info *sta)
|
|
{
|
|
sta->plink_state = PLINK_LISTEN;
|
|
sta->llid = sta->plid = sta->reason = 0;
|
|
sta->plink_retries = 0;
|
|
}
|
|
|
|
/*
|
|
* NOTE: This is just an alias for sta_info_alloc(), see notes
|
|
* on it in the lifecycle management section!
|
|
*/
|
|
static struct sta_info *mesh_plink_alloc(struct ieee80211_sub_if_data *sdata,
|
|
u8 *hw_addr, u64 rates)
|
|
{
|
|
struct ieee80211_local *local = sdata->local;
|
|
struct sta_info *sta;
|
|
|
|
if (local->num_sta >= MESH_MAX_PLINKS)
|
|
return NULL;
|
|
|
|
sta = sta_info_alloc(sdata, hw_addr, GFP_ATOMIC);
|
|
if (!sta)
|
|
return NULL;
|
|
|
|
sta->flags |= WLAN_STA_AUTHORIZED;
|
|
sta->supp_rates[local->hw.conf.channel->band] = rates;
|
|
|
|
return sta;
|
|
}
|
|
|
|
/**
|
|
* mesh_plink_deactivate - deactivate mesh peer link
|
|
*
|
|
* @sta: mesh peer link to deactivate
|
|
*
|
|
* All mesh paths with this peer as next hop will be flushed
|
|
*
|
|
* Locking: the caller must hold sta->plink_lock
|
|
*/
|
|
static void __mesh_plink_deactivate(struct sta_info *sta)
|
|
{
|
|
struct ieee80211_sub_if_data *sdata = sta->sdata;
|
|
|
|
if (sta->plink_state == PLINK_ESTAB)
|
|
mesh_plink_dec_estab_count(sdata);
|
|
sta->plink_state = PLINK_BLOCKED;
|
|
mesh_path_flush_by_nexthop(sta);
|
|
}
|
|
|
|
/**
|
|
* __mesh_plink_deactivate - deactivate mesh peer link
|
|
*
|
|
* @sta: mesh peer link to deactivate
|
|
*
|
|
* All mesh paths with this peer as next hop will be flushed
|
|
*/
|
|
void mesh_plink_deactivate(struct sta_info *sta)
|
|
{
|
|
spin_lock_bh(&sta->plink_lock);
|
|
__mesh_plink_deactivate(sta);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
}
|
|
|
|
static int mesh_plink_frame_tx(struct net_device *dev,
|
|
enum plink_frame_type action, u8 *da, __le16 llid, __le16 plid,
|
|
__le16 reason) {
|
|
struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
|
|
struct sk_buff *skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
|
|
struct ieee80211_mgmt *mgmt;
|
|
bool include_plid = false;
|
|
u8 *pos;
|
|
int ie_len;
|
|
|
|
if (!skb)
|
|
return -1;
|
|
skb_reserve(skb, local->hw.extra_tx_headroom);
|
|
/* 25 is the size of the common mgmt part (24) plus the size of the
|
|
* common action part (1)
|
|
*/
|
|
mgmt = (struct ieee80211_mgmt *)
|
|
skb_put(skb, 25 + sizeof(mgmt->u.action.u.plink_action));
|
|
memset(mgmt, 0, 25 + sizeof(mgmt->u.action.u.plink_action));
|
|
mgmt->frame_control = IEEE80211_FC(IEEE80211_FTYPE_MGMT,
|
|
IEEE80211_STYPE_ACTION);
|
|
memcpy(mgmt->da, da, ETH_ALEN);
|
|
memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
|
|
/* BSSID is left zeroed, wildcard value */
|
|
mgmt->u.action.category = PLINK_CATEGORY;
|
|
mgmt->u.action.u.plink_action.action_code = action;
|
|
|
|
if (action == PLINK_CLOSE)
|
|
mgmt->u.action.u.plink_action.aux = reason;
|
|
else {
|
|
mgmt->u.action.u.plink_action.aux = cpu_to_le16(0x0);
|
|
if (action == PLINK_CONFIRM) {
|
|
pos = skb_put(skb, 4);
|
|
/* two-byte status code followed by two-byte AID */
|
|
memset(pos, 0, 4);
|
|
}
|
|
mesh_mgmt_ies_add(skb, dev);
|
|
}
|
|
|
|
/* Add Peer Link Management element */
|
|
switch (action) {
|
|
case PLINK_OPEN:
|
|
ie_len = 3;
|
|
break;
|
|
case PLINK_CONFIRM:
|
|
ie_len = 5;
|
|
include_plid = true;
|
|
break;
|
|
case PLINK_CLOSE:
|
|
default:
|
|
if (!plid)
|
|
ie_len = 5;
|
|
else {
|
|
ie_len = 7;
|
|
include_plid = true;
|
|
}
|
|
break;
|
|
}
|
|
|
|
pos = skb_put(skb, 2 + ie_len);
|
|
*pos++ = WLAN_EID_PEER_LINK;
|
|
*pos++ = ie_len;
|
|
*pos++ = action;
|
|
memcpy(pos, &llid, 2);
|
|
if (include_plid) {
|
|
pos += 2;
|
|
memcpy(pos, &plid, 2);
|
|
}
|
|
if (action == PLINK_CLOSE) {
|
|
pos += 2;
|
|
memcpy(pos, &reason, 2);
|
|
}
|
|
|
|
ieee80211_sta_tx(dev, skb, 0);
|
|
return 0;
|
|
}
|
|
|
|
void mesh_neighbour_update(u8 *hw_addr, u64 rates, struct net_device *dev,
|
|
bool peer_accepting_plinks)
|
|
{
|
|
struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
|
|
struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
|
|
struct sta_info *sta;
|
|
|
|
rcu_read_lock();
|
|
|
|
sta = sta_info_get(local, hw_addr);
|
|
if (!sta) {
|
|
sta = mesh_plink_alloc(sdata, hw_addr, rates);
|
|
if (!sta) {
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
if (sta_info_insert(sta)) {
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
}
|
|
|
|
sta->last_rx = jiffies;
|
|
sta->supp_rates[local->hw.conf.channel->band] = rates;
|
|
if (peer_accepting_plinks && sta->plink_state == PLINK_LISTEN &&
|
|
sdata->u.sta.accepting_plinks &&
|
|
sdata->u.sta.mshcfg.auto_open_plinks)
|
|
mesh_plink_open(sta);
|
|
|
|
rcu_read_unlock();
|
|
}
|
|
|
|
static void mesh_plink_timer(unsigned long data)
|
|
{
|
|
struct sta_info *sta;
|
|
__le16 llid, plid, reason;
|
|
struct net_device *dev = NULL;
|
|
struct ieee80211_sub_if_data *sdata;
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
DECLARE_MAC_BUF(mac);
|
|
#endif
|
|
|
|
/*
|
|
* This STA is valid because sta_info_destroy() will
|
|
* del_timer_sync() this timer after having made sure
|
|
* it cannot be readded (by deleting the plink.)
|
|
*/
|
|
sta = (struct sta_info *) data;
|
|
|
|
spin_lock_bh(&sta->plink_lock);
|
|
if (sta->ignore_plink_timer) {
|
|
sta->ignore_plink_timer = false;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
return;
|
|
}
|
|
mpl_dbg("Mesh plink timer for %s fired on state %d\n",
|
|
print_mac(mac, sta->addr), sta->plink_state);
|
|
reason = 0;
|
|
llid = sta->llid;
|
|
plid = sta->plid;
|
|
sdata = sta->sdata;
|
|
dev = sdata->dev;
|
|
|
|
switch (sta->plink_state) {
|
|
case PLINK_OPN_RCVD:
|
|
case PLINK_OPN_SNT:
|
|
/* retry timer */
|
|
if (sta->plink_retries < dot11MeshMaxRetries(sdata)) {
|
|
u32 rand;
|
|
mpl_dbg("Mesh plink for %s (retry, timeout): %d %d\n",
|
|
print_mac(mac, sta->addr),
|
|
sta->plink_retries, sta->plink_timeout);
|
|
get_random_bytes(&rand, sizeof(u32));
|
|
sta->plink_timeout = sta->plink_timeout +
|
|
rand % sta->plink_timeout;
|
|
++sta->plink_retries;
|
|
mod_plink_timer(sta, sta->plink_timeout);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_OPEN, sta->addr, llid,
|
|
0, 0);
|
|
break;
|
|
}
|
|
reason = cpu_to_le16(MESH_MAX_RETRIES);
|
|
/* fall through on else */
|
|
case PLINK_CNF_RCVD:
|
|
/* confirm timer */
|
|
if (!reason)
|
|
reason = cpu_to_le16(MESH_CONFIRM_TIMEOUT);
|
|
sta->plink_state = PLINK_HOLDING;
|
|
mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata));
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid, plid,
|
|
reason);
|
|
break;
|
|
case PLINK_HOLDING:
|
|
/* holding timer */
|
|
del_timer(&sta->plink_timer);
|
|
mesh_plink_fsm_restart(sta);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
}
|
|
|
|
static inline void mesh_plink_timer_set(struct sta_info *sta, int timeout)
|
|
{
|
|
sta->plink_timer.expires = jiffies + (HZ * timeout / 1000);
|
|
sta->plink_timer.data = (unsigned long) sta;
|
|
sta->plink_timer.function = mesh_plink_timer;
|
|
sta->plink_timeout = timeout;
|
|
add_timer(&sta->plink_timer);
|
|
}
|
|
|
|
int mesh_plink_open(struct sta_info *sta)
|
|
{
|
|
__le16 llid;
|
|
struct ieee80211_sub_if_data *sdata = sta->sdata;
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
DECLARE_MAC_BUF(mac);
|
|
#endif
|
|
|
|
spin_lock_bh(&sta->plink_lock);
|
|
get_random_bytes(&llid, 2);
|
|
sta->llid = llid;
|
|
if (sta->plink_state != PLINK_LISTEN) {
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
return -EBUSY;
|
|
}
|
|
sta->plink_state = PLINK_OPN_SNT;
|
|
mesh_plink_timer_set(sta, dot11MeshRetryTimeout(sdata));
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mpl_dbg("Mesh plink: starting establishment with %s\n",
|
|
print_mac(mac, sta->addr));
|
|
|
|
return mesh_plink_frame_tx(sdata->dev, PLINK_OPEN,
|
|
sta->addr, llid, 0, 0);
|
|
}
|
|
|
|
void mesh_plink_block(struct sta_info *sta)
|
|
{
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
DECLARE_MAC_BUF(mac);
|
|
#endif
|
|
|
|
spin_lock_bh(&sta->plink_lock);
|
|
__mesh_plink_deactivate(sta);
|
|
sta->plink_state = PLINK_BLOCKED;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
}
|
|
|
|
int mesh_plink_close(struct sta_info *sta)
|
|
{
|
|
struct ieee80211_sub_if_data *sdata = sta->sdata;
|
|
__le16 llid, plid, reason;
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
DECLARE_MAC_BUF(mac);
|
|
#endif
|
|
|
|
mpl_dbg("Mesh plink: closing link with %s\n",
|
|
print_mac(mac, sta->addr));
|
|
spin_lock_bh(&sta->plink_lock);
|
|
sta->reason = cpu_to_le16(MESH_LINK_CANCELLED);
|
|
reason = sta->reason;
|
|
|
|
if (sta->plink_state == PLINK_LISTEN ||
|
|
sta->plink_state == PLINK_BLOCKED) {
|
|
mesh_plink_fsm_restart(sta);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
return 0;
|
|
} else if (sta->plink_state == PLINK_ESTAB) {
|
|
__mesh_plink_deactivate(sta);
|
|
/* The timer should not be running */
|
|
mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata));
|
|
} else if (!mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata)))
|
|
sta->ignore_plink_timer = true;
|
|
|
|
sta->plink_state = PLINK_HOLDING;
|
|
llid = sta->llid;
|
|
plid = sta->plid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(sta->sdata->dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
return 0;
|
|
}
|
|
|
|
void mesh_rx_plink_frame(struct net_device *dev, struct ieee80211_mgmt *mgmt,
|
|
size_t len, struct ieee80211_rx_status *rx_status)
|
|
{
|
|
struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
|
|
struct ieee80211_local *local = sdata->local;
|
|
struct ieee802_11_elems elems;
|
|
struct sta_info *sta;
|
|
enum plink_event event;
|
|
enum plink_frame_type ftype;
|
|
size_t baselen;
|
|
u8 ie_len;
|
|
u8 *baseaddr;
|
|
__le16 plid, llid, reason;
|
|
#ifdef CONFIG_MAC80211_VERBOSE_MPL_DEBUG
|
|
DECLARE_MAC_BUF(mac);
|
|
#endif
|
|
|
|
if (is_multicast_ether_addr(mgmt->da)) {
|
|
mpl_dbg("Mesh plink: ignore frame from multicast address");
|
|
return;
|
|
}
|
|
|
|
baseaddr = mgmt->u.action.u.plink_action.variable;
|
|
baselen = (u8 *) mgmt->u.action.u.plink_action.variable - (u8 *) mgmt;
|
|
if (mgmt->u.action.u.plink_action.action_code == PLINK_CONFIRM) {
|
|
baseaddr += 4;
|
|
baselen -= 4;
|
|
}
|
|
ieee802_11_parse_elems(baseaddr, len - baselen, &elems);
|
|
if (!elems.peer_link) {
|
|
mpl_dbg("Mesh plink: missing necessary peer link ie\n");
|
|
return;
|
|
}
|
|
|
|
ftype = *((u8 *)PLINK_GET_FRAME_SUBTYPE(elems.peer_link));
|
|
ie_len = elems.peer_link_len;
|
|
if ((ftype == PLINK_OPEN && ie_len != 3) ||
|
|
(ftype == PLINK_CONFIRM && ie_len != 5) ||
|
|
(ftype == PLINK_CLOSE && ie_len != 5 && ie_len != 7)) {
|
|
mpl_dbg("Mesh plink: incorrect plink ie length\n");
|
|
return;
|
|
}
|
|
|
|
if (ftype != PLINK_CLOSE && (!elems.mesh_id || !elems.mesh_config)) {
|
|
mpl_dbg("Mesh plink: missing necessary ie\n");
|
|
return;
|
|
}
|
|
/* Note the lines below are correct, the llid in the frame is the plid
|
|
* from the point of view of this host.
|
|
*/
|
|
memcpy(&plid, PLINK_GET_LLID(elems.peer_link), 2);
|
|
if (ftype == PLINK_CONFIRM || (ftype == PLINK_CLOSE && ie_len == 7))
|
|
memcpy(&llid, PLINK_GET_PLID(elems.peer_link), 2);
|
|
|
|
rcu_read_lock();
|
|
|
|
sta = sta_info_get(local, mgmt->sa);
|
|
if (!sta && ftype != PLINK_OPEN) {
|
|
mpl_dbg("Mesh plink: cls or cnf from unknown peer\n");
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
|
|
if (sta && sta->plink_state == PLINK_BLOCKED) {
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
|
|
/* Now we will figure out the appropriate event... */
|
|
event = PLINK_UNDEFINED;
|
|
if (ftype != PLINK_CLOSE && (!mesh_matches_local(&elems, dev))) {
|
|
switch (ftype) {
|
|
case PLINK_OPEN:
|
|
event = OPN_RJCT;
|
|
break;
|
|
case PLINK_CONFIRM:
|
|
event = CNF_RJCT;
|
|
break;
|
|
case PLINK_CLOSE:
|
|
/* avoid warning */
|
|
break;
|
|
}
|
|
spin_lock_bh(&sta->plink_lock);
|
|
} else if (!sta) {
|
|
/* ftype == PLINK_OPEN */
|
|
u64 rates;
|
|
if (!mesh_plink_free_count(sdata)) {
|
|
mpl_dbg("Mesh plink error: no more free plinks\n");
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
|
|
rates = ieee80211_sta_get_rates(local, &elems, rx_status->band);
|
|
sta = mesh_plink_alloc(sdata, mgmt->sa, rates);
|
|
if (!sta) {
|
|
mpl_dbg("Mesh plink error: plink table full\n");
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
if (sta_info_insert(sta)) {
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
event = OPN_ACPT;
|
|
spin_lock_bh(&sta->plink_lock);
|
|
} else {
|
|
spin_lock_bh(&sta->plink_lock);
|
|
switch (ftype) {
|
|
case PLINK_OPEN:
|
|
if (!mesh_plink_free_count(sdata) ||
|
|
(sta->plid && sta->plid != plid))
|
|
event = OPN_IGNR;
|
|
else
|
|
event = OPN_ACPT;
|
|
break;
|
|
case PLINK_CONFIRM:
|
|
if (!mesh_plink_free_count(sdata) ||
|
|
(sta->llid != llid || sta->plid != plid))
|
|
event = CNF_IGNR;
|
|
else
|
|
event = CNF_ACPT;
|
|
break;
|
|
case PLINK_CLOSE:
|
|
if (sta->plink_state == PLINK_ESTAB)
|
|
/* Do not check for llid or plid. This does not
|
|
* follow the standard but since multiple plinks
|
|
* per sta are not supported, it is necessary in
|
|
* order to avoid a livelock when MP A sees an
|
|
* establish peer link to MP B but MP B does not
|
|
* see it. This can be caused by a timeout in
|
|
* B's peer link establishment or B beign
|
|
* restarted.
|
|
*/
|
|
event = CLS_ACPT;
|
|
else if (sta->plid != plid)
|
|
event = CLS_IGNR;
|
|
else if (ie_len == 7 && sta->llid != llid)
|
|
event = CLS_IGNR;
|
|
else
|
|
event = CLS_ACPT;
|
|
break;
|
|
default:
|
|
mpl_dbg("Mesh plink: unknown frame subtype\n");
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
rcu_read_unlock();
|
|
return;
|
|
}
|
|
}
|
|
|
|
mpl_dbg("Mesh plink (peer, state, llid, plid, event): %s %d %d %d %d\n",
|
|
print_mac(mac, mgmt->sa), sta->plink_state,
|
|
le16_to_cpu(sta->llid), le16_to_cpu(sta->plid),
|
|
event);
|
|
reason = 0;
|
|
switch (sta->plink_state) {
|
|
/* spin_unlock as soon as state is updated at each case */
|
|
case PLINK_LISTEN:
|
|
switch (event) {
|
|
case CLS_ACPT:
|
|
mesh_plink_fsm_restart(sta);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
case OPN_ACPT:
|
|
sta->plink_state = PLINK_OPN_RCVD;
|
|
sta->plid = plid;
|
|
get_random_bytes(&llid, 2);
|
|
sta->llid = llid;
|
|
mesh_plink_timer_set(sta, dot11MeshRetryTimeout(sdata));
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_OPEN, sta->addr, llid,
|
|
0, 0);
|
|
mesh_plink_frame_tx(dev, PLINK_CONFIRM, sta->addr,
|
|
llid, plid, 0);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case PLINK_OPN_SNT:
|
|
switch (event) {
|
|
case OPN_RJCT:
|
|
case CNF_RJCT:
|
|
reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
|
|
case CLS_ACPT:
|
|
if (!reason)
|
|
reason = cpu_to_le16(MESH_CLOSE_RCVD);
|
|
sta->reason = reason;
|
|
sta->plink_state = PLINK_HOLDING;
|
|
if (!mod_plink_timer(sta,
|
|
dot11MeshHoldingTimeout(sdata)))
|
|
sta->ignore_plink_timer = true;
|
|
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
break;
|
|
case OPN_ACPT:
|
|
/* retry timer is left untouched */
|
|
sta->plink_state = PLINK_OPN_RCVD;
|
|
sta->plid = plid;
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CONFIRM, sta->addr, llid,
|
|
plid, 0);
|
|
break;
|
|
case CNF_ACPT:
|
|
sta->plink_state = PLINK_CNF_RCVD;
|
|
if (!mod_plink_timer(sta,
|
|
dot11MeshConfirmTimeout(sdata)))
|
|
sta->ignore_plink_timer = true;
|
|
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case PLINK_OPN_RCVD:
|
|
switch (event) {
|
|
case OPN_RJCT:
|
|
case CNF_RJCT:
|
|
reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
|
|
case CLS_ACPT:
|
|
if (!reason)
|
|
reason = cpu_to_le16(MESH_CLOSE_RCVD);
|
|
sta->reason = reason;
|
|
sta->plink_state = PLINK_HOLDING;
|
|
if (!mod_plink_timer(sta,
|
|
dot11MeshHoldingTimeout(sdata)))
|
|
sta->ignore_plink_timer = true;
|
|
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
break;
|
|
case OPN_ACPT:
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CONFIRM, sta->addr, llid,
|
|
plid, 0);
|
|
break;
|
|
case CNF_ACPT:
|
|
del_timer(&sta->plink_timer);
|
|
sta->plink_state = PLINK_ESTAB;
|
|
mesh_plink_inc_estab_count(sdata);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mpl_dbg("Mesh plink with %s ESTABLISHED\n",
|
|
print_mac(mac, sta->addr));
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case PLINK_CNF_RCVD:
|
|
switch (event) {
|
|
case OPN_RJCT:
|
|
case CNF_RJCT:
|
|
reason = cpu_to_le16(MESH_CAPABILITY_POLICY_VIOLATION);
|
|
case CLS_ACPT:
|
|
if (!reason)
|
|
reason = cpu_to_le16(MESH_CLOSE_RCVD);
|
|
sta->reason = reason;
|
|
sta->plink_state = PLINK_HOLDING;
|
|
if (!mod_plink_timer(sta,
|
|
dot11MeshHoldingTimeout(sdata)))
|
|
sta->ignore_plink_timer = true;
|
|
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
break;
|
|
case OPN_ACPT:
|
|
del_timer(&sta->plink_timer);
|
|
sta->plink_state = PLINK_ESTAB;
|
|
mesh_plink_inc_estab_count(sdata);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mpl_dbg("Mesh plink with %s ESTABLISHED\n",
|
|
print_mac(mac, sta->addr));
|
|
mesh_plink_frame_tx(dev, PLINK_CONFIRM, sta->addr, llid,
|
|
plid, 0);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case PLINK_ESTAB:
|
|
switch (event) {
|
|
case CLS_ACPT:
|
|
reason = cpu_to_le16(MESH_CLOSE_RCVD);
|
|
sta->reason = reason;
|
|
__mesh_plink_deactivate(sta);
|
|
sta->plink_state = PLINK_HOLDING;
|
|
llid = sta->llid;
|
|
mod_plink_timer(sta, dot11MeshHoldingTimeout(sdata));
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
break;
|
|
case OPN_ACPT:
|
|
llid = sta->llid;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CONFIRM, sta->addr, llid,
|
|
plid, 0);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
break;
|
|
case PLINK_HOLDING:
|
|
switch (event) {
|
|
case CLS_ACPT:
|
|
if (del_timer(&sta->plink_timer))
|
|
sta->ignore_plink_timer = 1;
|
|
mesh_plink_fsm_restart(sta);
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
case OPN_ACPT:
|
|
case CNF_ACPT:
|
|
case OPN_RJCT:
|
|
case CNF_RJCT:
|
|
llid = sta->llid;
|
|
reason = sta->reason;
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
mesh_plink_frame_tx(dev, PLINK_CLOSE, sta->addr, llid,
|
|
plid, reason);
|
|
break;
|
|
default:
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
}
|
|
break;
|
|
default:
|
|
/* should not get here, PLINK_BLOCKED is dealt with at the
|
|
* beggining of the function
|
|
*/
|
|
spin_unlock_bh(&sta->plink_lock);
|
|
break;
|
|
}
|
|
|
|
rcu_read_unlock();
|
|
}
|