mirror of
https://github.com/aircrack-ng/rtl8812au.git
synced 2024-11-09 23:57:00 +00:00
radiotap tx support for injection
This commit is contained in:
parent
d4f1921d37
commit
07c704c0a7
241
core/rtw_xmit.c
241
core/rtw_xmit.c
@ -4401,7 +4401,6 @@ static void do_queue_select(_adapter *padapter, struct pkt_attrib *pattrib)
|
|||||||
s32 rtw_monitor_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
|
s32 rtw_monitor_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
|
||||||
{
|
{
|
||||||
u16 frame_ctl;
|
u16 frame_ctl;
|
||||||
struct ieee80211_radiotap_header rtap_hdr;
|
|
||||||
_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
|
_adapter *padapter = (_adapter *)rtw_netdev_priv(ndev);
|
||||||
struct pkt_file pktfile;
|
struct pkt_file pktfile;
|
||||||
struct rtw_ieee80211_hdr *pwlanhdr;
|
struct rtw_ieee80211_hdr *pwlanhdr;
|
||||||
@ -4411,37 +4410,57 @@ s32 rtw_monitor_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
|
|||||||
struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
|
struct xmit_priv *pxmitpriv = &(padapter->xmitpriv);
|
||||||
struct registry_priv *pregpriv = &(padapter->registrypriv);
|
struct registry_priv *pregpriv = &(padapter->registrypriv);
|
||||||
unsigned char *pframe;
|
unsigned char *pframe;
|
||||||
u8 dummybuf[32];
|
int len = skb->len;
|
||||||
int len = skb->len, rtap_len, consume;
|
|
||||||
|
int rtap_len, rtap_remain, ret;
|
||||||
|
struct ieee80211_radiotap_header *rtap_hdr; // net/ieee80211_radiotap.h
|
||||||
|
struct ieee80211_radiotap_iterator iterator; // net/cfg80211.h
|
||||||
|
u8 rtap_buf[256];
|
||||||
|
|
||||||
int alloc_tries, alloc_delay;
|
int alloc_tries, alloc_delay;
|
||||||
|
|
||||||
rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, skb->truesize);
|
rtw_mstat_update(MSTAT_TYPE_SKB, MSTAT_ALLOC_SUCCESS, skb->truesize);
|
||||||
|
|
||||||
#ifndef CONFIG_CUSTOMER_ALIBABA_GENERAL
|
|
||||||
if (unlikely(skb->len < sizeof(struct ieee80211_radiotap_header)))
|
if (unlikely(skb->len < sizeof(struct ieee80211_radiotap_header)))
|
||||||
goto fail;
|
goto fail;
|
||||||
|
|
||||||
_rtw_open_pktfile((_pkt *)skb, &pktfile);
|
_rtw_open_pktfile((_pkt *)skb, &pktfile);
|
||||||
_rtw_pktfile_read(&pktfile, (u8 *)(&rtap_hdr), sizeof(struct ieee80211_radiotap_header));
|
// Read in radiotap header and sanity check length
|
||||||
rtap_len = ieee80211_get_radiotap_len((u8 *)(&rtap_hdr));
|
_rtw_pktfile_read(&pktfile, rtap_buf, sizeof(struct ieee80211_radiotap_header));
|
||||||
if (unlikely(rtap_hdr.it_version))
|
rtap_hdr = (struct ieee80211_radiotap_header*)(rtap_buf);
|
||||||
|
rtap_len = ieee80211_get_radiotap_len(rtap_buf);
|
||||||
|
|
||||||
|
if (unlikely(rtap_hdr->it_version))
|
||||||
goto fail;
|
goto fail;
|
||||||
|
|
||||||
if (unlikely(skb->len < rtap_len))
|
if (unlikely(skb->len < rtap_len))
|
||||||
goto fail;
|
goto fail;
|
||||||
|
|
||||||
|
if (unlikely(rtap_len < sizeof(struct ieee80211_radiotap_header)))
|
||||||
|
goto fail;
|
||||||
|
|
||||||
len -= sizeof(struct ieee80211_radiotap_header);
|
len -= sizeof(struct ieee80211_radiotap_header);
|
||||||
rtap_len -= sizeof(struct ieee80211_radiotap_header);
|
rtap_remain = rtap_len - sizeof(struct ieee80211_radiotap_header);
|
||||||
|
|
||||||
while(rtap_len) {
|
// Read in rest of radiotap body
|
||||||
consume = rtap_len > sizeof(dummybuf) ? sizeof(dummybuf) : rtap_len;
|
if (rtap_remain) {
|
||||||
_rtw_pktfile_read(&pktfile, dummybuf, consume);
|
_rtw_pktfile_read(&pktfile, &rtap_buf[sizeof(struct ieee80211_radiotap_header)], rtap_remain);
|
||||||
rtap_len -= consume;
|
len -= rtap_remain;
|
||||||
len -= consume;
|
|
||||||
}
|
}
|
||||||
#endif
|
|
||||||
|
|
||||||
|
// NOTE: we process the radiotap header after we update the frame attribs below,
|
||||||
|
// so we can directly apply overrides rather than cache all the values into
|
||||||
|
// variables and apply them later.
|
||||||
|
|
||||||
|
// In just a bit we will attempt to take a pointer to the wlan hdr. If the remaining bytes
|
||||||
|
// are less than a full header, we will technically be reading random bytes. So this is a
|
||||||
|
// guard check to ensure there is a full minimum frame to read before we alloc and proceed
|
||||||
|
// to read.
|
||||||
|
if (unlikely(len < sizeof(struct rtw_ieee80211_hdr))) {
|
||||||
|
goto fail;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Process rest of frame
|
||||||
alloc_delay = 100;
|
alloc_delay = 100;
|
||||||
for (alloc_tries=3; alloc_tries > 0; alloc_tries--) {
|
for (alloc_tries=3; alloc_tries > 0; alloc_tries--) {
|
||||||
pmgntframe = alloc_mgtxmitframe(pxmitpriv);
|
pmgntframe = alloc_mgtxmitframe(pxmitpriv);
|
||||||
@ -4459,7 +4478,7 @@ s32 rtw_monitor_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
|
|||||||
_rtw_pktfile_read(&pktfile, pframe, len);
|
_rtw_pktfile_read(&pktfile, pframe, len);
|
||||||
|
|
||||||
|
|
||||||
/* Check DATA/MGNT frames */
|
// Setup attribs for default Mgmt vs Data frame
|
||||||
pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
|
pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
|
||||||
pattrib = &pmgntframe->attrib;
|
pattrib = &pmgntframe->attrib;
|
||||||
pattrib->injected = _TRUE;
|
pattrib->injected = _TRUE;
|
||||||
@ -4493,11 +4512,197 @@ s32 rtw_monitor_xmit_entry(struct sk_buff *skb, struct net_device *ndev)
|
|||||||
else
|
else
|
||||||
pattrib->retry_ctrl = _FALSE;
|
pattrib->retry_ctrl = _FALSE;
|
||||||
pattrib->pktlen = len;
|
pattrib->pktlen = len;
|
||||||
pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
|
|
||||||
pattrib->seqnum = pmlmeext->mgnt_seq;
|
|
||||||
pmlmeext->mgnt_seq++;
|
|
||||||
pattrib->last_txcmdsz = pattrib->pktlen;
|
pattrib->last_txcmdsz = pattrib->pktlen;
|
||||||
|
|
||||||
|
/*
|
||||||
|
ANALYSIS: most other xmit/frame generation flows:
|
||||||
|
- take next seqnum from pmlmeext->mgnt_seq
|
||||||
|
- call SetSeqNum to write it into the packet
|
||||||
|
- increment pmlmext->mgnt_seq
|
||||||
|
- and set it into pattrib->seqnum
|
||||||
|
Then in HAL, update_txdesc will either use hardware seq number if !pattrib_qos_en,
|
||||||
|
otherwise SET_TX_DESC_SEQ_8812 w/ pattrib->seqnum.
|
||||||
|
Also worth noting is prior update_monitor_frame_attrib/update_mgntframe_attrib call
|
||||||
|
merely set pattrib->seqnum to pmlmeext->mgnt_seq, but do NOT increment mgnt_seq.
|
||||||
|
Also they both set qos_en=_FALSE, which induce HW seq numbers.
|
||||||
|
The code below, however, appears to read the seq num out of the injected packet,
|
||||||
|
update the global pmlmeext->mgnt_seq with the injected seqnum, and then set
|
||||||
|
global pmlmeext to next seq. IMHO it appears to be doing the wrong thing, since
|
||||||
|
it is both updating pmlmeext from data in the packet, and all those values
|
||||||
|
are ignored because qos_en=_FALSE and thus HW seq is just used.
|
||||||
|
Ideally it would be nice to be able to control the sequence number, but the
|
||||||
|
strong coupling to qos_en makes that difficult right now. So we will just
|
||||||
|
use the default HW mode. However, we are going to skip some of the extraneous
|
||||||
|
steps this original code did by simply accepting:
|
||||||
|
- update_*_attrib called prior already set seqnum from pmlmeext
|
||||||
|
- so all we need to do is mgnt_seq++ just in case
|
||||||
|
- (and it seems we can avoid the SetSeqNum call)
|
||||||
|
pmlmeext->mgnt_seq = GetSequence(pwlanhdr);
|
||||||
|
pattrib->seqnum = pmlmeext->mgnt_seq;
|
||||||
|
pmlmeext->mgnt_seq++;
|
||||||
|
*/
|
||||||
|
pmlmeext->mgnt_seq++;
|
||||||
|
|
||||||
|
pattrib->retry_ctrl = _FALSE;
|
||||||
|
|
||||||
|
// Parse radiotap for injection items and overwrite attribs as needed
|
||||||
|
ret = ieee80211_radiotap_iterator_init(&iterator, rtap_hdr, rtap_len, NULL);
|
||||||
|
while (!ret) {
|
||||||
|
ret = ieee80211_radiotap_iterator_next(&iterator);
|
||||||
|
if (ret)
|
||||||
|
continue;
|
||||||
|
|
||||||
|
switch (iterator.this_arg_index) {
|
||||||
|
case IEEE80211_RADIOTAP_RATE:
|
||||||
|
// This is basic 802.11b/g rate; use MCS/VHT for higher rates
|
||||||
|
pattrib->rate = *iterator.this_arg;
|
||||||
|
#ifdef CONFIG_80211AC_VHT
|
||||||
|
pattrib->raid = RATEID_IDX_BGN_40M_1SS;
|
||||||
|
#else
|
||||||
|
if (pattrib->rate == IEEE80211_CCK_RATE_1MB
|
||||||
|
|| pattrib->rate == IEEE80211_CCK_RATE_2MB
|
||||||
|
|| pattrib->rate == IEEE80211_CCK_RATE_5MB
|
||||||
|
|| pattrib->rate == IEEE80211_CCK_RATE_11MB )
|
||||||
|
pattrib->raid = rtw_get_mgntframe_raid(padapter, WIRELESS_11B);
|
||||||
|
else
|
||||||
|
pattrib->raid = rtw_get_mgntframe_raid(padapter, WIRELESS_11G);
|
||||||
|
#endif
|
||||||
|
|
||||||
|
// We have to reset other attributes that may have been set prior for MCS/VHT rates
|
||||||
|
pattrib->ht_en = _FALSE;
|
||||||
|
pattrib->ampdu_en = _FALSE;
|
||||||
|
pattrib->sgi = _FALSE;
|
||||||
|
pattrib->ldpc = _FALSE;
|
||||||
|
pattrib->stbc = 0;
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_20;
|
||||||
|
pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
|
||||||
|
|
||||||
|
break;
|
||||||
|
|
||||||
|
case IEEE80211_RADIOTAP_TX_FLAGS: {
|
||||||
|
u16 txflags = get_unaligned_le16(iterator.this_arg);
|
||||||
|
|
||||||
|
if ((txflags & IEEE80211_RADIOTAP_F_TX_NOACK) == 0)
|
||||||
|
pattrib->retry_ctrl = _TRUE; // Note; already _FALSE by default
|
||||||
|
|
||||||
|
if (txflags & 0x0010) { // Use preconfigured seq num
|
||||||
|
// NOTE: this is currently ignored due to qos_en=_FALSE and HW seq num override
|
||||||
|
pattrib->seqnum = GetSequence(pwlanhdr);
|
||||||
|
}
|
||||||
|
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
|
case IEEE80211_RADIOTAP_MCS: {
|
||||||
|
u8 mcs_have = iterator.this_arg[0];
|
||||||
|
|
||||||
|
// Set up defaults
|
||||||
|
pattrib->rate = MGN_MCS0;
|
||||||
|
pattrib->bwmode = IEEE80211_RADIOTAP_MCS_BW_20;
|
||||||
|
pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
|
||||||
|
pattrib->ht_en = _TRUE;
|
||||||
|
pattrib->sgi = _FALSE;
|
||||||
|
pattrib->ldpc = _FALSE;
|
||||||
|
pattrib->stbc = 0;
|
||||||
|
|
||||||
|
if (mcs_have & IEEE80211_RADIOTAP_MCS_HAVE_BW) {
|
||||||
|
|
||||||
|
u8 bw = (iterator.this_arg[1] & IEEE80211_RADIOTAP_MCS_BW_MASK);
|
||||||
|
if (bw == IEEE80211_RADIOTAP_MCS_BW_20L) {
|
||||||
|
bw = IEEE80211_RADIOTAP_MCS_BW_20;
|
||||||
|
pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
|
||||||
|
}
|
||||||
|
if (bw == IEEE80211_RADIOTAP_MCS_BW_20U) {
|
||||||
|
bw = IEEE80211_RADIOTAP_MCS_BW_20;
|
||||||
|
pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
|
||||||
|
}
|
||||||
|
|
||||||
|
pattrib->bwmode = bw;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mcs_have & IEEE80211_RADIOTAP_MCS_HAVE_MCS) {
|
||||||
|
u8 fixed_rate = iterator.this_arg[2] & 0x7f;
|
||||||
|
if(fixed_rate > 31)
|
||||||
|
fixed_rate = 0;
|
||||||
|
fixed_rate += MGN_MCS0;
|
||||||
|
pattrib->rate = fixed_rate;
|
||||||
|
}
|
||||||
|
|
||||||
|
if ((mcs_have & IEEE80211_RADIOTAP_MCS_HAVE_GI) && (iterator.this_arg[1] & IEEE80211_RADIOTAP_MCS_SGI))
|
||||||
|
pattrib->sgi = _TRUE;
|
||||||
|
|
||||||
|
if ((mcs_have & IEEE80211_RADIOTAP_MCS_HAVE_FEC) && (iterator.this_arg[1] & IEEE80211_RADIOTAP_MCS_FEC_LDPC))
|
||||||
|
pattrib->ldpc = _TRUE;
|
||||||
|
|
||||||
|
if (mcs_have & IEEE80211_RADIOTAP_MCS_HAVE_STBC) {
|
||||||
|
u8 stbc = (iterator.this_arg[1] & IEEE80211_RADIOTAP_MCS_STBC_MASK) >> IEEE80211_RADIOTAP_MCS_STBC_SHIFT;
|
||||||
|
pattrib->stbc = stbc;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
|
||||||
|
#ifdef CONFIG_80211AC_VHT
|
||||||
|
case IEEE80211_RADIOTAP_VHT: {
|
||||||
|
unsigned int mcs, nss;
|
||||||
|
|
||||||
|
u8 known = iterator.this_arg[0];
|
||||||
|
u8 flags = iterator.this_arg[2];
|
||||||
|
|
||||||
|
// Set up defaults
|
||||||
|
pattrib->stbc = 0;
|
||||||
|
pattrib->sgi = _FALSE;
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_20;
|
||||||
|
pattrib->ldpc = _FALSE;
|
||||||
|
pattrib->rate = MGN_VHT1SS_MCS0;
|
||||||
|
pattrib->raid = RATEID_IDX_VHT_1SS;
|
||||||
|
|
||||||
|
// NOTE: this code currently only supports 1SS for radiotap defined rates
|
||||||
|
|
||||||
|
if ((known & IEEE80211_RADIOTAP_VHT_KNOWN_STBC) && (flags & IEEE80211_RADIOTAP_VHT_FLAG_STBC))
|
||||||
|
pattrib->stbc = 1;
|
||||||
|
|
||||||
|
if ((known & IEEE80211_RADIOTAP_VHT_KNOWN_GI) && (flags & IEEE80211_RADIOTAP_VHT_FLAG_SGI))
|
||||||
|
pattrib->sgi = _TRUE;
|
||||||
|
|
||||||
|
if (known & IEEE80211_RADIOTAP_VHT_KNOWN_BANDWIDTH) {
|
||||||
|
u8 bw = iterator.this_arg[3] & 0x1F;
|
||||||
|
// NOTE: there are various L and U, but we just use straight 20/40/80
|
||||||
|
// since it's not clear how to set CHNL_OFFSET_LOWER/_UPPER with different
|
||||||
|
// sideband sizes/configurations. TODO.
|
||||||
|
// Also, any 160 is treated as 80 due to lack of WIDTH_160.
|
||||||
|
if (bw == 0)
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_20;
|
||||||
|
else if (bw >=1 && bw <= 3)
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_40;
|
||||||
|
else if (bw >=4 && bw <= 10)
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_80;
|
||||||
|
else if (bw >= 11 && bw <= 25)
|
||||||
|
pattrib->bwmode = CHANNEL_WIDTH_80; // Supposed to be 160Mhz, we use 80Mhz
|
||||||
|
}
|
||||||
|
|
||||||
|
// User 0
|
||||||
|
nss = iterator.this_arg[4] & 0x0F; // Number of spatial streams
|
||||||
|
if (nss > 0) {
|
||||||
|
if (nss > 4) nss = 4;
|
||||||
|
mcs = (iterator.this_arg[4]>>4) & 0x0F; // MCS rate index
|
||||||
|
if (mcs > 8) mcs = 9;
|
||||||
|
pattrib->rate = MGN_VHT1SS_MCS0 + ((nss-1)*10 + mcs);
|
||||||
|
|
||||||
|
if (iterator.this_arg[8] & IEEE80211_RADIOTAP_CODING_LDPC_USER0)
|
||||||
|
pattrib->ldpc = _TRUE;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
#endif
|
||||||
|
|
||||||
|
default:
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// All set
|
||||||
dump_mgntframe(padapter, pmgntframe);
|
dump_mgntframe(padapter, pmgntframe);
|
||||||
pxmitpriv->tx_pkts++;
|
pxmitpriv->tx_pkts++;
|
||||||
pxmitpriv->tx_bytes += skb->len;
|
pxmitpriv->tx_bytes += skb->len;
|
||||||
|
Loading…
Reference in New Issue
Block a user