1 | // SPDX-License-Identifier: GPL-2.0-only |
2 | /* |
3 | * Copyright (C) 2007-2012 Siemens AG |
4 | * |
5 | * Written by: |
6 | * Pavel Smolenskiy <pavel.smolenskiy@gmail.com> |
7 | * Maxim Gorbachyov <maxim.gorbachev@siemens.com> |
8 | * Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> |
9 | * Alexander Smirnov <alex.bluesman.smirnov@gmail.com> |
10 | */ |
11 | |
12 | #include <linux/kernel.h> |
13 | #include <linux/module.h> |
14 | #include <linux/netdevice.h> |
15 | #include <linux/crc-ccitt.h> |
16 | #include <asm/unaligned.h> |
17 | |
18 | #include <net/mac802154.h> |
19 | #include <net/ieee802154_netdev.h> |
20 | #include <net/nl802154.h> |
21 | |
22 | #include "ieee802154_i.h" |
23 | |
24 | static int ieee802154_deliver_skb(struct sk_buff *skb) |
25 | { |
26 | skb->ip_summed = CHECKSUM_UNNECESSARY; |
27 | skb->protocol = htons(ETH_P_IEEE802154); |
28 | |
29 | return netif_receive_skb(skb); |
30 | } |
31 | |
32 | void mac802154_rx_beacon_worker(struct work_struct *work) |
33 | { |
34 | struct ieee802154_local *local = |
35 | container_of(work, struct ieee802154_local, rx_beacon_work); |
36 | struct cfg802154_mac_pkt *mac_pkt; |
37 | |
38 | mac_pkt = list_first_entry_or_null(&local->rx_beacon_list, |
39 | struct cfg802154_mac_pkt, node); |
40 | if (!mac_pkt) |
41 | return; |
42 | |
43 | mac802154_process_beacon(local, skb: mac_pkt->skb, page: mac_pkt->page, channel: mac_pkt->channel); |
44 | |
45 | list_del(entry: &mac_pkt->node); |
46 | kfree_skb(skb: mac_pkt->skb); |
47 | kfree(objp: mac_pkt); |
48 | } |
49 | |
50 | static bool mac802154_should_answer_beacon_req(struct ieee802154_local *local) |
51 | { |
52 | struct cfg802154_beacon_request *beacon_req; |
53 | unsigned int interval; |
54 | |
55 | rcu_read_lock(); |
56 | beacon_req = rcu_dereference(local->beacon_req); |
57 | if (!beacon_req) { |
58 | rcu_read_unlock(); |
59 | return false; |
60 | } |
61 | |
62 | interval = beacon_req->interval; |
63 | rcu_read_unlock(); |
64 | |
65 | if (!mac802154_is_beaconing(local)) |
66 | return false; |
67 | |
68 | return interval == IEEE802154_ACTIVE_SCAN_DURATION; |
69 | } |
70 | |
71 | void mac802154_rx_mac_cmd_worker(struct work_struct *work) |
72 | { |
73 | struct ieee802154_local *local = |
74 | container_of(work, struct ieee802154_local, rx_mac_cmd_work); |
75 | struct cfg802154_mac_pkt *mac_pkt; |
76 | u8 mac_cmd; |
77 | int rc; |
78 | |
79 | mac_pkt = list_first_entry_or_null(&local->rx_mac_cmd_list, |
80 | struct cfg802154_mac_pkt, node); |
81 | if (!mac_pkt) |
82 | return; |
83 | |
84 | rc = ieee802154_get_mac_cmd(skb: mac_pkt->skb, mac_cmd: &mac_cmd); |
85 | if (rc) |
86 | goto out; |
87 | |
88 | switch (mac_cmd) { |
89 | case IEEE802154_CMD_BEACON_REQ: |
90 | dev_dbg(&mac_pkt->sdata->dev->dev, "processing BEACON REQ\n" ); |
91 | if (!mac802154_should_answer_beacon_req(local)) |
92 | break; |
93 | |
94 | queue_delayed_work(wq: local->mac_wq, dwork: &local->beacon_work, delay: 0); |
95 | break; |
96 | |
97 | case IEEE802154_CMD_ASSOCIATION_RESP: |
98 | dev_dbg(&mac_pkt->sdata->dev->dev, "processing ASSOC RESP\n" ); |
99 | if (!mac802154_is_associating(local)) |
100 | break; |
101 | |
102 | mac802154_process_association_resp(sdata: mac_pkt->sdata, skb: mac_pkt->skb); |
103 | break; |
104 | |
105 | case IEEE802154_CMD_ASSOCIATION_REQ: |
106 | dev_dbg(&mac_pkt->sdata->dev->dev, "processing ASSOC REQ\n" ); |
107 | if (mac_pkt->sdata->wpan_dev.iftype != NL802154_IFTYPE_COORD) |
108 | break; |
109 | |
110 | mac802154_process_association_req(sdata: mac_pkt->sdata, skb: mac_pkt->skb); |
111 | break; |
112 | |
113 | case IEEE802154_CMD_DISASSOCIATION_NOTIFY: |
114 | dev_dbg(&mac_pkt->sdata->dev->dev, "processing DISASSOC NOTIF\n" ); |
115 | if (mac_pkt->sdata->wpan_dev.iftype != NL802154_IFTYPE_COORD) |
116 | break; |
117 | |
118 | mac802154_process_disassociation_notif(sdata: mac_pkt->sdata, skb: mac_pkt->skb); |
119 | break; |
120 | |
121 | default: |
122 | break; |
123 | } |
124 | |
125 | out: |
126 | list_del(entry: &mac_pkt->node); |
127 | kfree_skb(skb: mac_pkt->skb); |
128 | kfree(objp: mac_pkt); |
129 | } |
130 | |
131 | static int |
132 | ieee802154_subif_frame(struct ieee802154_sub_if_data *sdata, |
133 | struct sk_buff *skb, const struct ieee802154_hdr *hdr) |
134 | { |
135 | struct wpan_phy *wpan_phy = sdata->local->hw.phy; |
136 | struct wpan_dev *wpan_dev = &sdata->wpan_dev; |
137 | struct cfg802154_mac_pkt *mac_pkt; |
138 | __le16 span, sshort; |
139 | int rc; |
140 | |
141 | pr_debug("getting packet via slave interface %s\n" , sdata->dev->name); |
142 | |
143 | span = wpan_dev->pan_id; |
144 | sshort = wpan_dev->short_addr; |
145 | |
146 | /* Level 3 filtering: Only beacons are accepted during scans */ |
147 | if (sdata->required_filtering == IEEE802154_FILTERING_3_SCAN && |
148 | sdata->required_filtering > wpan_phy->filtering) { |
149 | if (mac_cb(skb)->type != IEEE802154_FC_TYPE_BEACON) { |
150 | dev_dbg(&sdata->dev->dev, |
151 | "drop non-beacon frame (0x%x) during scan\n" , |
152 | mac_cb(skb)->type); |
153 | goto fail; |
154 | } |
155 | } |
156 | |
157 | switch (mac_cb(skb)->dest.mode) { |
158 | case IEEE802154_ADDR_NONE: |
159 | if (hdr->source.mode == IEEE802154_ADDR_NONE) |
160 | /* ACK comes with both addresses empty */ |
161 | skb->pkt_type = PACKET_HOST; |
162 | else if (!wpan_dev->parent) |
163 | /* No dest means PAN coordinator is the recipient */ |
164 | skb->pkt_type = PACKET_HOST; |
165 | else |
166 | /* We are not the PAN coordinator, just relaying */ |
167 | skb->pkt_type = PACKET_OTHERHOST; |
168 | break; |
169 | case IEEE802154_ADDR_LONG: |
170 | if (mac_cb(skb)->dest.pan_id != span && |
171 | mac_cb(skb)->dest.pan_id != cpu_to_le16(IEEE802154_PANID_BROADCAST)) |
172 | skb->pkt_type = PACKET_OTHERHOST; |
173 | else if (mac_cb(skb)->dest.extended_addr == wpan_dev->extended_addr) |
174 | skb->pkt_type = PACKET_HOST; |
175 | else |
176 | skb->pkt_type = PACKET_OTHERHOST; |
177 | break; |
178 | case IEEE802154_ADDR_SHORT: |
179 | if (mac_cb(skb)->dest.pan_id != span && |
180 | mac_cb(skb)->dest.pan_id != cpu_to_le16(IEEE802154_PANID_BROADCAST)) |
181 | skb->pkt_type = PACKET_OTHERHOST; |
182 | else if (mac_cb(skb)->dest.short_addr == sshort) |
183 | skb->pkt_type = PACKET_HOST; |
184 | else if (mac_cb(skb)->dest.short_addr == |
185 | cpu_to_le16(IEEE802154_ADDR_BROADCAST)) |
186 | skb->pkt_type = PACKET_BROADCAST; |
187 | else |
188 | skb->pkt_type = PACKET_OTHERHOST; |
189 | break; |
190 | default: |
191 | pr_debug("invalid dest mode\n" ); |
192 | goto fail; |
193 | } |
194 | |
195 | skb->dev = sdata->dev; |
196 | |
197 | /* TODO this should be moved after netif_receive_skb call, otherwise |
198 | * wireshark will show a mac header with security fields and the |
199 | * payload is already decrypted. |
200 | */ |
201 | rc = mac802154_llsec_decrypt(sec: &sdata->sec, skb); |
202 | if (rc) { |
203 | pr_debug("decryption failed: %i\n" , rc); |
204 | goto fail; |
205 | } |
206 | |
207 | sdata->dev->stats.rx_packets++; |
208 | sdata->dev->stats.rx_bytes += skb->len; |
209 | |
210 | switch (mac_cb(skb)->type) { |
211 | case IEEE802154_FC_TYPE_BEACON: |
212 | dev_dbg(&sdata->dev->dev, "BEACON received\n" ); |
213 | if (!mac802154_is_scanning(local: sdata->local)) |
214 | goto fail; |
215 | |
216 | mac_pkt = kzalloc(size: sizeof(*mac_pkt), GFP_ATOMIC); |
217 | if (!mac_pkt) |
218 | goto fail; |
219 | |
220 | mac_pkt->skb = skb_get(skb); |
221 | mac_pkt->sdata = sdata; |
222 | mac_pkt->page = sdata->local->scan_page; |
223 | mac_pkt->channel = sdata->local->scan_channel; |
224 | list_add_tail(new: &mac_pkt->node, head: &sdata->local->rx_beacon_list); |
225 | queue_work(wq: sdata->local->mac_wq, work: &sdata->local->rx_beacon_work); |
226 | return NET_RX_SUCCESS; |
227 | |
228 | case IEEE802154_FC_TYPE_MAC_CMD: |
229 | dev_dbg(&sdata->dev->dev, "MAC COMMAND received\n" ); |
230 | mac_pkt = kzalloc(size: sizeof(*mac_pkt), GFP_ATOMIC); |
231 | if (!mac_pkt) |
232 | goto fail; |
233 | |
234 | mac_pkt->skb = skb_get(skb); |
235 | mac_pkt->sdata = sdata; |
236 | list_add_tail(new: &mac_pkt->node, head: &sdata->local->rx_mac_cmd_list); |
237 | queue_work(wq: sdata->local->mac_wq, work: &sdata->local->rx_mac_cmd_work); |
238 | return NET_RX_SUCCESS; |
239 | |
240 | case IEEE802154_FC_TYPE_ACK: |
241 | goto fail; |
242 | |
243 | case IEEE802154_FC_TYPE_DATA: |
244 | return ieee802154_deliver_skb(skb); |
245 | default: |
246 | pr_warn_ratelimited("ieee802154: bad frame received " |
247 | "(type = %d)\n" , mac_cb(skb)->type); |
248 | goto fail; |
249 | } |
250 | |
251 | fail: |
252 | kfree_skb(skb); |
253 | return NET_RX_DROP; |
254 | } |
255 | |
256 | static void |
257 | ieee802154_print_addr(const char *name, const struct ieee802154_addr *addr) |
258 | { |
259 | if (addr->mode == IEEE802154_ADDR_NONE) { |
260 | pr_debug("%s not present\n" , name); |
261 | return; |
262 | } |
263 | |
264 | pr_debug("%s PAN ID: %04x\n" , name, le16_to_cpu(addr->pan_id)); |
265 | if (addr->mode == IEEE802154_ADDR_SHORT) { |
266 | pr_debug("%s is short: %04x\n" , name, |
267 | le16_to_cpu(addr->short_addr)); |
268 | } else { |
269 | u64 hw = swab64((__force u64)addr->extended_addr); |
270 | |
271 | pr_debug("%s is hardware: %8phC\n" , name, &hw); |
272 | } |
273 | } |
274 | |
275 | static int |
276 | ieee802154_parse_frame_start(struct sk_buff *skb, struct ieee802154_hdr *hdr) |
277 | { |
278 | int hlen; |
279 | struct ieee802154_mac_cb *cb = mac_cb(skb); |
280 | |
281 | skb_reset_mac_header(skb); |
282 | |
283 | hlen = ieee802154_hdr_pull(skb, hdr); |
284 | if (hlen < 0) |
285 | return -EINVAL; |
286 | |
287 | skb->mac_len = hlen; |
288 | |
289 | pr_debug("fc: %04x dsn: %02x\n" , le16_to_cpup((__le16 *)&hdr->fc), |
290 | hdr->seq); |
291 | |
292 | cb->type = hdr->fc.type; |
293 | cb->ackreq = hdr->fc.ack_request; |
294 | cb->secen = hdr->fc.security_enabled; |
295 | |
296 | ieee802154_print_addr(name: "destination" , addr: &hdr->dest); |
297 | ieee802154_print_addr(name: "source" , addr: &hdr->source); |
298 | |
299 | cb->source = hdr->source; |
300 | cb->dest = hdr->dest; |
301 | |
302 | if (hdr->fc.security_enabled) { |
303 | u64 key; |
304 | |
305 | pr_debug("seclevel %i\n" , hdr->sec.level); |
306 | |
307 | switch (hdr->sec.key_id_mode) { |
308 | case IEEE802154_SCF_KEY_IMPLICIT: |
309 | pr_debug("implicit key\n" ); |
310 | break; |
311 | |
312 | case IEEE802154_SCF_KEY_INDEX: |
313 | pr_debug("key %02x\n" , hdr->sec.key_id); |
314 | break; |
315 | |
316 | case IEEE802154_SCF_KEY_SHORT_INDEX: |
317 | pr_debug("key %04x:%04x %02x\n" , |
318 | le32_to_cpu(hdr->sec.short_src) >> 16, |
319 | le32_to_cpu(hdr->sec.short_src) & 0xffff, |
320 | hdr->sec.key_id); |
321 | break; |
322 | |
323 | case IEEE802154_SCF_KEY_HW_INDEX: |
324 | key = swab64((__force u64)hdr->sec.extended_src); |
325 | pr_debug("key source %8phC %02x\n" , &key, |
326 | hdr->sec.key_id); |
327 | break; |
328 | } |
329 | } |
330 | |
331 | return 0; |
332 | } |
333 | |
334 | static void |
335 | __ieee802154_rx_handle_packet(struct ieee802154_local *local, |
336 | struct sk_buff *skb) |
337 | { |
338 | int ret; |
339 | struct ieee802154_sub_if_data *sdata; |
340 | struct ieee802154_hdr hdr; |
341 | struct sk_buff *skb2; |
342 | |
343 | ret = ieee802154_parse_frame_start(skb, hdr: &hdr); |
344 | if (ret) { |
345 | pr_debug("got invalid frame\n" ); |
346 | return; |
347 | } |
348 | |
349 | list_for_each_entry_rcu(sdata, &local->interfaces, list) { |
350 | if (sdata->wpan_dev.iftype == NL802154_IFTYPE_MONITOR) |
351 | continue; |
352 | |
353 | if (!ieee802154_sdata_running(sdata)) |
354 | continue; |
355 | |
356 | /* Do not deliver packets received on interfaces expecting |
357 | * AACK=1 if the address filters where disabled. |
358 | */ |
359 | if (local->hw.phy->filtering < IEEE802154_FILTERING_4_FRAME_FIELDS && |
360 | sdata->required_filtering == IEEE802154_FILTERING_4_FRAME_FIELDS) |
361 | continue; |
362 | |
363 | skb2 = skb_clone(skb, GFP_ATOMIC); |
364 | if (skb2) { |
365 | skb2->dev = sdata->dev; |
366 | ieee802154_subif_frame(sdata, skb: skb2, hdr: &hdr); |
367 | } |
368 | } |
369 | } |
370 | |
371 | static void |
372 | ieee802154_monitors_rx(struct ieee802154_local *local, struct sk_buff *skb) |
373 | { |
374 | struct sk_buff *skb2; |
375 | struct ieee802154_sub_if_data *sdata; |
376 | |
377 | skb_reset_mac_header(skb); |
378 | skb->ip_summed = CHECKSUM_UNNECESSARY; |
379 | skb->pkt_type = PACKET_OTHERHOST; |
380 | skb->protocol = htons(ETH_P_IEEE802154); |
381 | |
382 | list_for_each_entry_rcu(sdata, &local->interfaces, list) { |
383 | if (sdata->wpan_dev.iftype != NL802154_IFTYPE_MONITOR) |
384 | continue; |
385 | |
386 | if (!ieee802154_sdata_running(sdata)) |
387 | continue; |
388 | |
389 | skb2 = skb_clone(skb, GFP_ATOMIC); |
390 | if (skb2) { |
391 | skb2->dev = sdata->dev; |
392 | ieee802154_deliver_skb(skb: skb2); |
393 | |
394 | sdata->dev->stats.rx_packets++; |
395 | sdata->dev->stats.rx_bytes += skb->len; |
396 | } |
397 | } |
398 | } |
399 | |
400 | void ieee802154_rx(struct ieee802154_local *local, struct sk_buff *skb) |
401 | { |
402 | u16 crc; |
403 | |
404 | WARN_ON_ONCE(softirq_count() == 0); |
405 | |
406 | if (local->suspended) |
407 | goto free_skb; |
408 | |
409 | /* TODO: When a transceiver omits the checksum here, we |
410 | * add an own calculated one. This is currently an ugly |
411 | * solution because the monitor needs a crc here. |
412 | */ |
413 | if (local->hw.flags & IEEE802154_HW_RX_OMIT_CKSUM) { |
414 | crc = crc_ccitt(crc: 0, buffer: skb->data, len: skb->len); |
415 | put_unaligned_le16(val: crc, p: skb_put(skb, len: 2)); |
416 | } |
417 | |
418 | rcu_read_lock(); |
419 | |
420 | ieee802154_monitors_rx(local, skb); |
421 | |
422 | /* Level 1 filtering: Check the FCS by software when relevant */ |
423 | if (local->hw.phy->filtering == IEEE802154_FILTERING_NONE) { |
424 | crc = crc_ccitt(crc: 0, buffer: skb->data, len: skb->len); |
425 | if (crc) |
426 | goto drop; |
427 | } |
428 | /* remove crc */ |
429 | skb_trim(skb, len: skb->len - 2); |
430 | |
431 | __ieee802154_rx_handle_packet(local, skb); |
432 | |
433 | drop: |
434 | rcu_read_unlock(); |
435 | free_skb: |
436 | kfree_skb(skb); |
437 | } |
438 | |
439 | void |
440 | ieee802154_rx_irqsafe(struct ieee802154_hw *hw, struct sk_buff *skb, u8 lqi) |
441 | { |
442 | struct ieee802154_local *local = hw_to_local(hw); |
443 | struct ieee802154_mac_cb *cb = mac_cb_init(skb); |
444 | |
445 | cb->lqi = lqi; |
446 | skb->pkt_type = IEEE802154_RX_MSG; |
447 | skb_queue_tail(list: &local->skb_queue, newsk: skb); |
448 | tasklet_schedule(t: &local->tasklet); |
449 | } |
450 | EXPORT_SYMBOL(ieee802154_rx_irqsafe); |
451 | |