From: Andy Green <andy@xxxxxxxxxxx> Try #3 - moved to Michael Wu's method of tracking if we came in on a monitor interface by using ifindex - removed older proposed monitor interface tracking method and flags - style fixes - removed duped #include that is present in Michael Wu's patch already Try #2 - took Michael Wu's advice about better tools and basing on wireless-dev - took Luis Rodriguez's advice about coding style makeover - took Pavel Roskin's advice about little-endian radiotap Index: linux-2.6.20.i386/include/net/mac80211.h =================================================== diff --git a/net/mac80211/ieee80211.c b/net/mac80211/ieee80211.c index fb33b90..21e8990 100644 --- a/net/mac80211/ieee80211.c +++ b/net/mac80211/ieee80211.c @@ -1054,7 +1054,163 @@ ieee80211_tx_h_ps_buf(struct ieee80211_txrx_data *tx) } -static void inline +/* deal with packet injection down monitor interface + * with Radiotap Header -- only called for monitor mode interface + */ + +static ieee80211_txrx_result +__ieee80211_convert_radiotap_to_control_and_remove( + struct ieee80211_txrx_data *tx, + struct sk_buff *skb, struct ieee80211_tx_control *control) +{ + /* this is the moment to interpret the radiotap header that + * must be at the start of the packet injected in Monitor + * mode into control and then discard the radiotap header + * + * Need to take some care with endian-ness since radiotap + * is apparently a little-endian struct, including the args + */ + + struct ieee80211_radiotap_header *rthdr = + (struct ieee80211_radiotap_header *) skb->data; + + /* small length lookup table for all radiotap types we heard of + * starting from b0 in the bitmap, so we can walk the payload + * area of the radiotap header + */ + + static const u8 radiotap_entry_sizes[] = { + 8, /* IEEE80211_RADIOTAP_TSFT */ + 1, /* IEEE80211_RADIOTAP_FLAGS */ + 1, /* IEEE80211_RADIOTAP_RATE */ + 4, /* IEEE80211_RADIOTAP_CHANNEL */ + 2, /* IEEE80211_RADIOTAP_FHSS */ + 1, /* IEEE80211_RADIOTAP_DBM_ANTSIGNAL */ + 1, /* IEEE80211_RADIOTAP_DBM_ANTNOISE */ + 2, /* IEEE80211_RADIOTAP_LOCK_QUALITY */ + 2, /* IEEE80211_RADIOTAP_TX_ATTENUATION */ + 2, /* IEEE80211_RADIOTAP_DB_TX_ATTENUATION */ + 1, /* IEEE80211_RADIOTAP_DBM_TX_POWER */ + 1, /* IEEE80211_RADIOTAP_ANTENNA */ + 1, /* IEEE80211_RADIOTAP_DB_ANTSIGNAL */ + 1 /* IEEE80211_RADIOTAP_DB_ANTNOISE */ + /* add more here as they are defined */ + }; + int tap_index = 0; + u8 *tap_arg = skb->data + sizeof(struct ieee80211_radiotap_header); + u32 *curr_arg_bitmap = &rthdr->it_present; + u32 arg_bitmap = le32_to_cpu(*curr_arg_bitmap); + + if (rthdr->it_version) return TXRX_DROP; /* version byte as magic */ + + /* sanity check for skb length and radiotap length field */ + if (skb->len < (le16_to_cpu(rthdr->it_len) + + sizeof(struct ieee80211_hdr))) + return TXRX_DROP; + + /* find payload start allowing for extended bitmap(s) */ + + if (le32_to_cpu(rthdr->it_present) & 0x80000000) { + while( le32_to_cpu(*((u32 *)tap_arg)) & 0x80000000) + tap_arg += sizeof(u32); + tap_arg += sizeof(u32); + } + + /* default control situation for all injected packets */ + + control->retry_limit = 1; /* no retry */ + control->key_idx = -1; /* no encryption key */ + control->flags &= ~(IEEE80211_TXCTL_USE_RTS_CTS | + IEEE80211_TXCTL_USE_CTS_PROTECT); + control->flags |= (IEEE80211_TXCTL_DO_NOT_ENCRYPT | + IEEE80211_TXCTL_NO_ACK); + control->antenna_sel_tx = 0; /* default to default/diversity */ + + /* for every radiotap entry we can at + * least skip (by knowing the length)... + */ + + while (tap_index < sizeof(radiotap_entry_sizes)) { + int i, target_rate; + + if (!(arg_bitmap & 1)) goto next_entry; + + /* arg is present */ + + switch(tap_index) { /* deal with if interested */ + + case IEEE80211_RADIOTAP_RATE: + /* radiotap "rate" u8 is in + * 500kbps units, eg, 0x02=1Mbps + * ieee80211 "rate" int is + * in 100kbps units, eg, 0x0a=1Mbps + */ + target_rate = (*tap_arg) * 5; + for (i = 0; i < tx->local->num_curr_rates; i++) { + struct ieee80211_rate *r = + &tx->local->curr_rates[i]; + + if (r->rate <= target_rate) { + if (r->flags & + IEEE80211_RATE_PREAMBLE2) { + control->tx_rate = r->val2; + } else { + control->tx_rate = r->val; + } + + + /* end on exact match */ + if (r->rate == target_rate) + i = tx->local->num_curr_rates; + } + } + break; + + case IEEE80211_RADIOTAP_ANTENNA: + /* radiotap uses 0 for 1st ant, + * mac80211 is 1 for 1st ant + * absence of IEEE80211_RADIOTAP_ANTENNA + * gives default/diversity + */ + control->antenna_sel_tx = (*tap_arg) + 1; + break; + + case IEEE80211_RADIOTAP_DBM_TX_POWER: + control->power_level = *tap_arg; + break; + + default: + break; + } + + tap_arg += radiotap_entry_sizes[tap_index]; + + next_entry: + + tap_index++; + if (unlikely((tap_index & 31) == 0)) { + /* completed current u32 bitmap */ + if (arg_bitmap & 1) { /* b31 was set, there is more */ + /* move to next u32 bitmap */ + curr_arg_bitmap++; + arg_bitmap = le32_to_cpu(*curr_arg_bitmap); + } else { + /* he didn't give us any more bitmaps: end */ + tap_index = sizeof(radiotap_entry_sizes); + } + } else { /* just try the next bit */ + arg_bitmap >>= 1; + } + } + + /* remove the radiotap header */ + skb_pull(skb, le16_to_cpu(rthdr->it_len)); + + return TXRX_CONTINUE; +} + + +static ieee80211_txrx_result inline __ieee80211_tx_prepare(struct ieee80211_txrx_data *tx, struct sk_buff *skb, struct net_device *dev, @@ -1062,6 +1218,9 @@ __ieee80211_tx_prepare(struct ieee80211_txrx_data *tx, { struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data; + struct ieee80211_sub_if_data *sdata; + ieee80211_txrx_result res=TXRX_CONTINUE; + int hdrlen; memset(tx, 0, sizeof(*tx)); @@ -1071,7 +1230,32 @@ __ieee80211_tx_prepare(struct ieee80211_txrx_data *tx, tx->sdata = IEEE80211_DEV_TO_SUB_IF(dev); tx->sta = sta_info_get(local, hdr->addr1); tx->fc = le16_to_cpu(hdr->frame_control); + + /* set defaults for things that can be set by + * injected radiotap headers + */ + control->power_level = local->hw.conf.power_level; + control->antenna_sel_tx = local->hw.conf.antenna_sel_tx; + if (local->sta_antenna_sel != STA_ANTENNA_SEL_AUTO && tx->sta ) + control->antenna_sel_tx = tx->sta->antenna_sel_tx; + + /* process and remove the injection radiotap header */ + + sdata = IEEE80211_DEV_TO_SUB_IF(dev); + if (unlikely(sdata->type==IEEE80211_IF_TYPE_MNTR)) { + if (__ieee80211_convert_radiotap_to_control_and_remove( + tx, skb, control) == TXRX_DROP) { + return TXRX_DROP; + } + /* we removed the radiotap header after this point, + * we filled control with what we could use + * set to the actual ieee header now + */ + hdr = (struct ieee80211_hdr *) skb->data; + res=TXRX_QUEUED; /* indication it was monitor packet */ + } + tx->u.tx.control = control; tx->u.tx.unicast = !is_multicast_ether_addr(hdr->addr1); if (is_multicast_ether_addr(hdr->addr1)) @@ -1088,9 +1272,6 @@ __ieee80211_tx_prepare(struct ieee80211_txrx_data *tx, control->flags |= IEEE80211_TXCTL_CLEAR_DST_MASK; tx->sta->clear_dst_mask = 0; } - control->antenna_sel_tx = local->hw.conf.antenna_sel_tx; - if (local->sta_antenna_sel != STA_ANTENNA_SEL_AUTO && tx->sta) - control->antenna_sel_tx = tx->sta->antenna_sel_tx; hdrlen = ieee80211_get_hdrlen(tx->fc); if (skb->len > hdrlen + sizeof(rfc1042_header) + 2) { u8 *pos = &skb->data[hdrlen + sizeof(rfc1042_header)]; @@ -1098,6 +1279,7 @@ __ieee80211_tx_prepare(struct ieee80211_txrx_data *tx, } control->flags |= IEEE80211_TXCTL_FIRST_FRAGMENT; + return res; } static int inline is_ieee80211_device(struct net_device *dev, @@ -1205,7 +1387,7 @@ static int ieee80211_tx(struct net_device *dev, struct sk_buff *skb, struct sta_info *sta; ieee80211_tx_handler *handler; struct ieee80211_txrx_data tx; - ieee80211_txrx_result res = TXRX_DROP; + ieee80211_txrx_result res = TXRX_DROP, res_prepare; int ret, i; WARN_ON(__ieee80211_queue_pending(local, control->queue)); @@ -1215,14 +1397,24 @@ static int ieee80211_tx(struct net_device *dev, struct sk_buff *skb, return 0; } - __ieee80211_tx_prepare(&tx, skb, dev, control); + res_prepare=__ieee80211_tx_prepare(&tx, skb, dev, control); + + if (res_prepare==TXRX_DROP) { + dev_kfree_skb(skb); + return 0; + } + sta = tx.sta; tx.u.tx.mgmt_interface = mgmt; - for (handler = local->tx_handlers; *handler != NULL; handler++) { - res = (*handler)(&tx); - if (res != TXRX_CONTINUE) - break; + if (res_prepare==TXRX_QUEUED) { /* if it was an injected packet */ + res=TXRX_CONTINUE; + } else { + for (handler = local->tx_handlers; *handler != NULL; handler++) { + res = (*handler)(&tx); + if (res != TXRX_CONTINUE) + break; + } } skb = tx.skb; /* handlers are allowed to change skb */ @@ -1456,6 +1648,52 @@ static int ieee80211_subif_start_xmit(struct sk_buff *skb, goto fail; } + if (unlikely(sdata->type==IEEE80211_IF_TYPE_MNTR)) { + struct ieee80211_radiotap_header * prthdr= + (struct ieee80211_radiotap_header *)skb->data; + + /* there must be a radiotap header at the + * start in this case + */ + + if (unlikely(prthdr->it_version)) { + /* radiotap version used as magic */ + ret=0; + goto fail; + } + + skb->dev = local->mdev; + + pkt_data = (struct ieee80211_tx_packet_data *)skb->cb; + memset(pkt_data, 0, sizeof(struct ieee80211_tx_packet_data)); + pkt_data->ifindex = sdata->dev->ifindex; + /*local->mdev->ifindex*/ + pkt_data->mgmt_iface = 0; + pkt_data->do_not_encrypt = 1; + + /* above needed because we set skb device to master */ + + /* fix up the pointers accounting for the radiotap + * header still being in there. We are being given + * a precooked IEEE80211 header so no need for + * normal processing + */ + + skb->mac.raw = skb->data+prthdr->it_len; + skb->nh.raw = skb->data+prthdr->it_len+ + sizeof(struct ieee80211_hdr); + skb->h.raw = skb->data+prthdr->it_len+ + sizeof(struct ieee80211_hdr); + + /* pass the radiotap header up to + * the next stage intact + */ + + dev_queue_xmit(skb); + + return 0; + } + nh_pos = skb->nh.raw - skb->data; h_pos = skb->h.raw - skb->data; -- - To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html