2 * hostapd / WMM (Wi-Fi Multimedia)
3 * Copyright 2002-2003, Instant802 Networks, Inc.
4 * Copyright 2005-2006, Devicescape Software, Inc.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
10 * Alternatively, this software may be distributed under the terms of BSD
13 * See README and COPYING for more details.
20 #include "ieee802_11.h"
26 /* TODO: maintain separate sequence and fragment numbers for each AC
27 * TODO: IGMP snooping to track which multicasts to forward - and use QOS-DATA
28 * if only WMM stations are receiving a certain group */
31 static inline u8
wmm_aci_aifsn(int aifsn
, int acm
, int aci
)
34 ret
= (aifsn
<< WMM_AC_AIFNS_SHIFT
) & WMM_AC_AIFSN_MASK
;
37 ret
|= (aci
<< WMM_AC_ACI_SHIFT
) & WMM_AC_ACI_MASK
;
42 static inline u8
wmm_ecw(int ecwmin
, int ecwmax
)
44 return ((ecwmin
<< WMM_AC_ECWMIN_SHIFT
) & WMM_AC_ECWMIN_MASK
) |
45 ((ecwmax
<< WMM_AC_ECWMAX_SHIFT
) & WMM_AC_ECWMAX_MASK
);
50 * Add WMM Parameter Element to Beacon, Probe Response, and (Re)Association
53 u8
* hostapd_eid_wmm(struct hostapd_data
*hapd
, u8
*eid
)
56 struct wmm_parameter_element
*wmm
=
57 (struct wmm_parameter_element
*) (pos
+ 2);
60 if (!hapd
->conf
->wmm_enabled
)
62 eid
[0] = WLAN_EID_VENDOR_SPECIFIC
;
66 wmm
->oui_type
= WMM_OUI_TYPE
;
67 wmm
->oui_subtype
= WMM_OUI_SUBTYPE_PARAMETER_ELEMENT
;
68 wmm
->version
= WMM_VERSION
;
69 wmm
->qos_info
= hapd
->parameter_set_count
& 0xf;
71 /* fill in a parameter set record for each AC */
72 for (e
= 0; e
< 4; e
++) {
73 struct wmm_ac_parameter
*ac
= &wmm
->ac
[e
];
74 struct hostapd_wmm_ac_params
*acp
=
75 &hapd
->iconf
->wmm_ac_params
[e
];
77 ac
->aci_aifsn
= wmm_aci_aifsn(acp
->aifs
,
78 acp
->admission_control_mandatory
,
80 ac
->cw
= wmm_ecw(acp
->cwmin
, acp
->cwmax
);
81 ac
->txop_limit
= host_to_le16(acp
->txop_limit
);
84 pos
= (u8
*) (wmm
+ 1);
85 eid
[1] = pos
- eid
- 2; /* element length */
91 /* This function is called when a station sends an association request with
92 * WMM info element. The function returns zero on success or non-zero on any
93 * error in WMM element. eid does not include Element ID and Length octets. */
94 int hostapd_eid_wmm_valid(struct hostapd_data
*hapd
, const u8
*eid
, size_t len
)
96 struct wmm_information_element
*wmm
;
98 wpa_hexdump(MSG_MSGDUMP
, "WMM IE", eid
, len
);
100 if (len
< sizeof(struct wmm_information_element
)) {
101 wpa_printf(MSG_DEBUG
, "Too short WMM IE (len=%lu)",
102 (unsigned long) len
);
106 wmm
= (struct wmm_information_element
*) eid
;
107 wpa_printf(MSG_DEBUG
, "Validating WMM IE: OUI %02x:%02x:%02x "
108 "OUI type %d OUI sub-type %d version %d QoS info 0x%x",
109 wmm
->oui
[0], wmm
->oui
[1], wmm
->oui
[2], wmm
->oui_type
,
110 wmm
->oui_subtype
, wmm
->version
, wmm
->qos_info
);
111 if (wmm
->oui_subtype
!= WMM_OUI_SUBTYPE_INFORMATION_ELEMENT
||
112 wmm
->version
!= WMM_VERSION
) {
113 wpa_printf(MSG_DEBUG
, "Unsupported WMM IE Subtype/Version");
121 static void wmm_send_action(struct hostapd_data
*hapd
, const u8
*addr
,
122 const struct wmm_tspec_element
*tspec
,
123 u8 action_code
, u8 dialogue_token
, u8 status_code
)
126 struct ieee80211_mgmt
*m
= (struct ieee80211_mgmt
*) buf
;
127 struct wmm_tspec_element
*t
= (struct wmm_tspec_element
*)
128 m
->u
.action
.u
.wmm_action
.variable
;
131 hostapd_logger(hapd
, addr
, HOSTAPD_MODULE_IEEE80211
,
133 "action response - reason %d", status_code
);
134 os_memset(buf
, 0, sizeof(buf
));
135 m
->frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
136 WLAN_FC_STYPE_ACTION
);
137 os_memcpy(m
->da
, addr
, ETH_ALEN
);
138 os_memcpy(m
->sa
, hapd
->own_addr
, ETH_ALEN
);
139 os_memcpy(m
->bssid
, hapd
->own_addr
, ETH_ALEN
);
140 m
->u
.action
.category
= WLAN_ACTION_WMM
;
141 m
->u
.action
.u
.wmm_action
.action_code
= action_code
;
142 m
->u
.action
.u
.wmm_action
.dialog_token
= dialogue_token
;
143 m
->u
.action
.u
.wmm_action
.status_code
= status_code
;
144 os_memcpy(t
, tspec
, sizeof(struct wmm_tspec_element
));
145 len
= ((u8
*) (t
+ 1)) - buf
;
147 if (hapd
->drv
.send_mgmt_frame(hapd
, m
, len
) < 0)
148 perror("wmm_send_action: send");
152 int wmm_process_tspec(struct wmm_tspec_element
*tspec
)
154 int medium_time
, pps
, duration
;
155 int up
, psb
, dir
, tid
;
158 up
= (tspec
->ts_info
[1] >> 3) & 0x07;
159 psb
= (tspec
->ts_info
[1] >> 2) & 0x01;
160 dir
= (tspec
->ts_info
[0] >> 5) & 0x03;
161 tid
= (tspec
->ts_info
[0] >> 1) & 0x0f;
162 wpa_printf(MSG_DEBUG
, "WMM: TS Info: UP=%d PSB=%d Direction=%d TID=%d",
164 val
= le_to_host16(tspec
->nominal_msdu_size
);
165 wpa_printf(MSG_DEBUG
, "WMM: Nominal MSDU Size: %d%s",
166 val
& 0x7fff, val
& 0x8000 ? " (fixed)" : "");
167 wpa_printf(MSG_DEBUG
, "WMM: Mean Data Rate: %u bps",
168 le_to_host32(tspec
->mean_data_rate
));
169 wpa_printf(MSG_DEBUG
, "WMM: Minimum PHY Rate: %u bps",
170 le_to_host32(tspec
->minimum_phy_rate
));
171 val
= le_to_host16(tspec
->surplus_bandwidth_allowance
);
172 wpa_printf(MSG_DEBUG
, "WMM: Surplus Bandwidth Allowance: %u.%04u",
173 val
>> 13, 10000 * (val
& 0x1fff) / 0x2000);
175 val
= le_to_host16(tspec
->nominal_msdu_size
);
177 wpa_printf(MSG_DEBUG
, "WMM: Invalid Nominal MSDU Size (0)");
178 return WMM_ADDTS_STATUS_INVALID_PARAMETERS
;
180 /* pps = Ceiling((Mean Data Rate / 8) / Nominal MSDU Size) */
181 pps
= ((le_to_host32(tspec
->mean_data_rate
) / 8) + val
- 1) / val
;
182 wpa_printf(MSG_DEBUG
, "WMM: Packets-per-second estimate for TSPEC: %d",
185 if (le_to_host32(tspec
->minimum_phy_rate
) < 1000000) {
186 wpa_printf(MSG_DEBUG
, "WMM: Too small Minimum PHY Rate");
187 return WMM_ADDTS_STATUS_INVALID_PARAMETERS
;
190 duration
= (le_to_host16(tspec
->nominal_msdu_size
) & 0x7fff) * 8 /
191 (le_to_host32(tspec
->minimum_phy_rate
) / 1000000) +
192 50 /* FIX: proper SIFS + ACK duration */;
194 /* unsigned binary number with an implicit binary point after the
195 * leftmost 3 bits, i.e., 0x2000 = 1.0 */
196 surplus
= le_to_host16(tspec
->surplus_bandwidth_allowance
);
197 if (surplus
<= 0x2000) {
198 wpa_printf(MSG_DEBUG
, "WMM: Surplus Bandwidth Allowance not "
199 "greater than unity");
200 return WMM_ADDTS_STATUS_INVALID_PARAMETERS
;
203 medium_time
= surplus
* pps
* duration
/ 0x2000;
204 wpa_printf(MSG_DEBUG
, "WMM: Estimated medium time: %u", medium_time
);
207 * TODO: store list of granted (and still active) TSPECs and check
208 * whether there is available medium time for this request. For now,
209 * just refuse requests that would by themselves take very large
210 * portion of the available bandwidth.
212 if (medium_time
> 750000) {
213 wpa_printf(MSG_DEBUG
, "WMM: Refuse TSPEC request for over "
214 "75%% of available bandwidth");
215 return WMM_ADDTS_STATUS_REFUSED
;
218 /* Convert to 32 microseconds per second unit */
219 tspec
->medium_time
= host_to_le16(medium_time
/ 32);
221 return WMM_ADDTS_STATUS_ADMISSION_ACCEPTED
;
225 static void wmm_addts_req(struct hostapd_data
*hapd
,
226 const struct ieee80211_mgmt
*mgmt
,
227 struct wmm_tspec_element
*tspec
, size_t len
)
229 const u8
*end
= ((const u8
*) mgmt
) + len
;
232 if ((const u8
*) (tspec
+ 1) > end
) {
233 wpa_printf(MSG_DEBUG
, "WMM: TSPEC overflow in ADDTS Request");
237 wpa_printf(MSG_DEBUG
, "WMM: ADDTS Request (Dialog Token %d) for TSPEC "
239 mgmt
->u
.action
.u
.wmm_action
.dialog_token
,
242 res
= wmm_process_tspec(tspec
);
243 wpa_printf(MSG_DEBUG
, "WMM: ADDTS processing result: %d", res
);
245 wmm_send_action(hapd
, mgmt
->sa
, tspec
, WMM_ACTION_CODE_ADDTS_RESP
,
246 mgmt
->u
.action
.u
.wmm_action
.dialog_token
, res
);
250 void hostapd_wmm_action(struct hostapd_data
*hapd
,
251 const struct ieee80211_mgmt
*mgmt
, size_t len
)
254 int left
= len
- IEEE80211_HDRLEN
- 4;
255 const u8
*pos
= ((const u8
*) mgmt
) + IEEE80211_HDRLEN
+ 4;
256 struct ieee802_11_elems elems
;
257 struct sta_info
*sta
= ap_get_sta(hapd
, mgmt
->sa
);
259 /* check that the request comes from a valid station */
261 (sta
->flags
& (WLAN_STA_ASSOC
| WLAN_STA_WMM
)) !=
262 (WLAN_STA_ASSOC
| WLAN_STA_WMM
)) {
263 hostapd_logger(hapd
, mgmt
->sa
, HOSTAPD_MODULE_IEEE80211
,
265 "wmm action received is not from associated wmm"
267 /* TODO: respond with action frame refused status code */
271 /* extract the tspec info element */
272 if (ieee802_11_parse_elems(pos
, left
, &elems
, 1) == ParseFailed
) {
273 hostapd_logger(hapd
, mgmt
->sa
, HOSTAPD_MODULE_IEEE80211
,
275 "hostapd_wmm_action - could not parse wmm "
277 /* TODO: respond with action frame invalid parameters status
282 if (!elems
.wmm_tspec
||
283 elems
.wmm_tspec_len
!= (sizeof(struct wmm_tspec_element
) - 2)) {
284 hostapd_logger(hapd
, mgmt
->sa
, HOSTAPD_MODULE_IEEE80211
,
286 "hostapd_wmm_action - missing or wrong length "
288 /* TODO: respond with action frame invalid parameters status
293 /* TODO: check the request is for an AC with ACM set, if not, refuse
296 action_code
= mgmt
->u
.action
.u
.wmm_action
.action_code
;
297 switch (action_code
) {
298 case WMM_ACTION_CODE_ADDTS_REQ
:
299 wmm_addts_req(hapd
, mgmt
, (struct wmm_tspec_element
*)
300 (elems
.wmm_tspec
- 2), len
);
303 /* TODO: needed for client implementation */
304 case WMM_ACTION_CODE_ADDTS_RESP
:
305 wmm_setup_request(hapd
, mgmt
, len
);
307 /* TODO: handle station teardown requests */
308 case WMM_ACTION_CODE_DELTS
:
309 wmm_teardown(hapd
, mgmt
, len
);
314 hostapd_logger(hapd
, mgmt
->sa
, HOSTAPD_MODULE_IEEE80211
,
316 "hostapd_wmm_action - unknown action code %d",