2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
2007-09-17 11:56:21 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-04-23 18:52:52 +02:00
|
|
|
|
2008-04-08 15:14:40 -04:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-04-08 15:14:40 -04:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-11 00:01:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-11 01:51:51 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-11 01:51:51 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-10-11 01:51:51 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-09-16 14:18:59 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-16 14:18:59 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-12 10:42:46 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
mac80211: check uapsd state for dynamic power save
To make U-APSD client mode effective, we must not wake up from dynamic power
save when transmitting frames. So if dynamic power save is enabled, it needs
check the queue the transmitted packet is in and decide if we need to wake
up or not.
In a perfect world, where all packets would have correct QoS tags, U-APSD
enabled queues should not trigger wakeup from power save. But in the real
world, where very few packets have correct QoS tags, this won't work. For
example, if only voip class has U-APSD enabled and we send a packet in voip
class, but the packets we receive are in best effort class, we would receive
the packets with the legacy power save method. And that would increase
latencies too much from a voip application point of view.
The workaround is to enable U-APSD for all qeueus and still use dynamic ps
wakeup for all other queues except voip. That way we can still save power
with a voip application and not sacrifice latency. Normal traffic (in
background, best effort or video class) would still trigger wakeup from
dynamic power save.
Signed-off-by: Kalle Valo <kalle.valo@nokia.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-01-12 10:42:53 +02:00
|
|
|
|
2010-01-12 10:42:46 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
mac80211: check uapsd state for dynamic power save
To make U-APSD client mode effective, we must not wake up from dynamic power
save when transmitting frames. So if dynamic power save is enabled, it needs
check the queue the transmitted packet is in and decide if we need to wake
up or not.
In a perfect world, where all packets would have correct QoS tags, U-APSD
enabled queues should not trigger wakeup from power save. But in the real
world, where very few packets have correct QoS tags, this won't work. For
example, if only voip class has U-APSD enabled and we send a packet in voip
class, but the packets we receive are in best effort class, we would receive
the packets with the legacy power save method. And that would increase
latencies too much from a voip application point of view.
The workaround is to enable U-APSD for all qeueus and still use dynamic ps
wakeup for all other queues except voip. That way we can still save power
with a voip application and not sacrifice latency. Normal traffic (in
background, best effort or video class) would still trigger wakeup from
dynamic power save.
Signed-off-by: Kalle Valo <kalle.valo@nokia.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-01-12 10:42:53 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-12 10:42:46 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2009-07-23 13:18:01 +02:00
|
|
|
|
2009-03-18 14:06:44 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-03 01:02:02 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-09-18 17:29:21 -04:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-07-24 10:40:37 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-09-18 17:29:20 -04:00
|
|
|
|
2008-06-30 15:10:46 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-12-19 01:31:25 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
mac80211: make master netdev handling sane
Currently, almost every interface type has a 'bss' pointer
pointing to BSS information. This BSS information, however,
is for a _local_ BSS, not for the BSS we joined, so having
it on a STA mode interface makes little sense, but now they
have it pointing to the master device, which is an AP mode
virtual interface. However, except for some bitrate control
data, this pointer is only used in AP/VLAN modes (for power
saving stations.)
Overall, it is not necessary to even have the master netdev
be a valid virtual interface, and it doesn't have to be on
the list of interfaces either.
This patch changes the master netdev to be special, it now
- no longer is on the list of virtual interfaces, which
lets me remove a lot of tests for that
- no longer has sub_if_data attached, since that isn't used
Additionally, this patch changes some vlan/ap mode handling
that is related to these 'bss' pointers described above (but
in the VLAN case they actually make sense because there they
point to the AP they belong to); it also adds some debugging
code to IEEE80211_DEV_TO_SUB_IF to validate it is not called
on the master netdev any more.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2008-07-09 14:40:34 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-12-19 01:31:25 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-12-19 01:31:25 +01:00
|
|
|
|
2009-10-29 12:19:21 +01:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
2009-10-29 12:19:21 +01:00
|
|
|
|
|
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:25 +01:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-24 10:40:37 +03:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2008-06-30 15:10:46 +02:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
2007-12-19 01:31:25 +01:00
|
|
|
|
2009-08-10 16:04:15 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:00 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2010-04-19 10:12:52 +03:00
|
|
|
|
2008-05-03 01:02:02 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-11-29 16:55:45 -08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-03 01:02:02 +02:00
|
|
|
|
|
|
|
|
|
mac80211: async station powersave handling
Some devices require that all frames to a station
are flushed when that station goes into powersave
mode before being able to send frames to that
station again when it wakes up or polls -- all in
order to avoid reordering and too many or too few
frames being sent to the station when it polls.
Normally, this is the case unless the station
goes to sleep and wakes up very quickly again.
But in that case, frames for it may be pending
on the hardware queues, and thus races could
happen in the case of multiple hardware queues
used for QoS/WMM. Normally this isn't a problem,
but with the iwlwifi mechanism we need to make
sure the race doesn't happen.
This makes mac80211 able to cope with the race
with driver help by a new WLAN_STA_PS_DRIVER
per-station flag that can be controlled by the
driver and tells mac80211 whether it can transmit
frames or not. This flag must be set according to
very specific rules outlined in the documentation
for the function that controls it.
When we buffer new frames for the station, we
normally set the TIM bit right away, but while
the driver has blocked transmission to that sta
we need to avoid that as well since we cannot
respond to the station if it wakes up due to the
TIM bit. Once the driver unblocks, we can set
the TIM bit.
Similarly, when the station just wakes up, we
need to wait until all other frames are flushed
before we can transmit frames to that station,
so the same applies here, we need to wait for
the driver to give the OK.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2009-11-06 11:35:50 +01:00
|
|
|
|
2009-07-24 13:23:09 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-24 10:40:37 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-30 15:10:46 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-20 11:21:35 +01:00
|
|
|
|
mac80211: async station powersave handling
Some devices require that all frames to a station
are flushed when that station goes into powersave
mode before being able to send frames to that
station again when it wakes up or polls -- all in
order to avoid reordering and too many or too few
frames being sent to the station when it polls.
Normally, this is the case unless the station
goes to sleep and wakes up very quickly again.
But in that case, frames for it may be pending
on the hardware queues, and thus races could
happen in the case of multiple hardware queues
used for QoS/WMM. Normally this isn't a problem,
but with the iwlwifi mechanism we need to make
sure the race doesn't happen.
This makes mac80211 able to cope with the race
with driver help by a new WLAN_STA_PS_DRIVER
per-station flag that can be controlled by the
driver and tells mac80211 whether it can transmit
frames or not. This flag must be set according to
very specific rules outlined in the documentation
for the function that controls it.
When we buffer new frames for the station, we
normally set the TIM bit right away, but while
the driver has blocked transmission to that sta
we need to avoid that as well since we cannot
respond to the station if it wakes up due to the
TIM bit. Once the driver unblocks, we can set
the TIM bit.
Similarly, when the station just wakes up, we
need to wait until all other frames are flushed
before we can transmit frames to that station,
so the same applies here, we need to wait for
the driver to give the OK.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2009-11-06 11:35:50 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-20 11:21:35 +01:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-06-07 21:58:37 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2010-04-19 10:12:52 +03:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
mac80211: async station powersave handling
Some devices require that all frames to a station
are flushed when that station goes into powersave
mode before being able to send frames to that
station again when it wakes up or polls -- all in
order to avoid reordering and too many or too few
frames being sent to the station when it polls.
Normally, this is the case unless the station
goes to sleep and wakes up very quickly again.
But in that case, frames for it may be pending
on the hardware queues, and thus races could
happen in the case of multiple hardware queues
used for QoS/WMM. Normally this isn't a problem,
but with the iwlwifi mechanism we need to make
sure the race doesn't happen.
This makes mac80211 able to cope with the race
with driver help by a new WLAN_STA_PS_DRIVER
per-station flag that can be controlled by the
driver and tells mac80211 whether it can transmit
frames or not. This flag must be set according to
very specific rules outlined in the documentation
for the function that controls it.
When we buffer new frames for the station, we
normally set the TIM bit right away, but while
the driver has blocked transmission to that sta
we need to avoid that as well since we cannot
respond to the station if it wakes up due to the
TIM bit. Once the driver unblocks, we can set
the TIM bit.
Similarly, when the station just wakes up, we
need to wait until all other frames are flushed
before we can transmit frames to that station,
so the same applies here, we need to wait for
the driver to give the OK.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2009-11-06 11:35:50 +01:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-04-24 15:35:42 -04:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:02 +02:00
|
|
|
|
2010-03-29 23:35:23 -07:00
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:02 +02:00
|
|
|
|
|
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-07-29 11:32:07 +02:00
|
|
|
|
2009-01-19 16:52:00 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-12-18 15:27:47 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-17 01:47:58 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-09-17 01:29:25 -04:00
|
|
|
|
2007-12-18 15:27:47 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2007-12-18 15:27:47 +01:00
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
2007-12-18 15:27:47 +01:00
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:00 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-23 20:27:14 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:00 +02:00
|
|
|
|
2009-01-08 13:32:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-18 15:27:47 +01:00
|
|
|
|
2010-01-17 01:47:58 +01:00
|
|
|
|
2010-01-22 22:07:59 +01:00
|
|
|
|
2010-01-25 11:36:16 +01:00
|
|
|
|
2010-01-17 01:47:58 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2010-01-17 01:47:55 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-02-03 13:59:58 +01:00
|
|
|
|
2010-01-17 01:47:55 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-04-27 11:15:12 -07:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
2009-07-16 10:15:09 -07:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2010-04-27 11:15:12 -07:00
|
|
|
|
2009-04-20 18:39:05 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-06 13:09:08 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-12-29 12:59:19 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
2009-04-20 18:39:05 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-07-16 10:15:09 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-23 12:14:04 +02:00
|
|
|
|
2009-07-16 10:15:09 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2009-07-16 10:15:09 -07:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2009-07-16 10:15:09 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-04-23 19:36:14 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2008-10-23 12:14:02 +05:30
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-10 13:21:59 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
2008-10-10 13:21:59 +02:00
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
2008-10-10 13:21:59 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-05-15 12:55:28 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-04-20 18:39:05 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:28 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:13 +02:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-06-12 15:42:29 +03:00
|
|
|
|
2008-05-17 00:57:13 +02:00
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
2008-05-17 00:57:13 +02:00
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2008-05-15 12:55:28 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2009-04-29 23:35:56 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-08-10 16:01:54 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-05-15 12:55:28 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-01-08 13:32:02 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:28 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
2009-05-19 19:25:58 +03:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-25 14:36:27 +03:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-09 19:48:25 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2010-02-03 10:24:30 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-02-03 10:24:30 +01:00
|
|
|
|
2009-06-09 19:48:25 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-09 19:48:25 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-02-03 10:24:30 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2010-02-03 10:24:30 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-09 19:48:25 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2010-01-31 21:56:25 +01:00
|
|
|
|
2009-06-09 19:48:25 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2010-01-31 21:56:25 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
2010-01-08 18:15:13 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
2010-01-08 18:15:13 +01:00
|
|
|
|
|
|
|
|
|
2010-01-31 23:25:24 +01:00
|
|
|
|
|
|
|
|
|
2010-01-08 18:15:13 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
2009-11-25 17:46:18 +01:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-04-06 11:18:44 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-04-06 11:18:44 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-24 09:55:27 +05:30
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2009-05-12 22:05:40 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
|
|
|
|
|
2009-04-20 18:39:05 +02:00
|
|
|
|
2008-06-12 15:42:29 +03:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-05-03 01:02:02 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2008-07-15 18:44:12 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-01-31 19:48:20 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2009-03-23 17:28:38 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:38 +01:00
|
|
|
|
2008-07-24 18:46:44 +03:00
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:40 +01:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-24 18:46:44 +03:00
|
|
|
|
2009-03-23 17:28:36 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2009-03-23 17:28:36 +01:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2009-03-23 17:28:40 +01:00
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-08-07 16:42:15 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-04-23 18:52:52 +02:00
|
|
|
|
2009-03-23 17:28:40 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-24 19:57:25 -04:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2009-07-24 19:57:25 -04:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:38 +01:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-17 01:47:59 +01:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
|
|
|
|
|
2009-10-29 08:43:48 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-12 10:42:46 +02:00
|
|
|
|
2009-10-29 08:43:48 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-17 01:47:55 +01:00
|
|
|
|
2009-11-17 18:18:36 +01:00
|
|
|
|
|
|
|
|
|
2010-01-17 01:47:59 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-10-29 08:43:48 +01:00
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2009-10-29 08:43:48 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
2008-06-30 15:10:44 +02:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
2008-06-28 03:15:03 +03:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
|
|
|
|
|
2008-06-28 03:15:03 +03:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
|
|
|
|
|
2007-09-26 17:53:18 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:13 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:13 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
[MAC80211]: fix race conditions with keys
During receive processing, we select the key long before using it and
because there's no locking it is possible that we kfree() the key
after having selected it but before using it for crypto operations.
Obviously, this is bad.
Secondly, during transmit processing, there are two possible races: We
have a similar race between select_key() and using it for encryption,
but we also have a race here between select_key() and hardware
encryption (both when a key is removed.)
This patch solves these issues by using RCU: when a key is to be freed,
we first remove the pointer from the appropriate places (sdata->keys,
sdata->default_key, sta->key) using rcu_assign_pointer() and then
synchronize_rcu(). Then, we can safely kfree() the key and remove it
from the hardware. There's a window here where the hardware may still
be using it for decryption, but we can't work around that without having
two hardware callbacks, one to disable the key for RX and one to disable
it for TX; but the worst thing that will happen is that we receive a
packet decrypted that we don't find a key for any more and then drop it.
When we add a key, we first need to upload it to the hardware and then,
using rcu_assign_pointer() again, link it into our structures.
In the code using keys (TX/RX paths) we use rcu_dereference() to get the
key and enclose the whole tx/rx section in a rcu_read_lock() ...
rcu_read_unlock() block. Because we've uploaded the key to hardware
before linking it into internal structures, we can guarantee that it is
valid once get to into tx().
One possible race condition remains, however: when we have hardware
acceleration enabled and the driver shuts down the queues, we end up
queueing the frame. If now somebody removes the key, the key will be
removed from hwaccel and then then driver will be asked to encrypt the
frame with a key index that has been removed. Hence, drivers will need
to be aware that the hw_key_index they are passed might not be under
all circumstances. Most drivers will, however, simply ignore that
condition and encrypt the frame with the selected key anyway, this
only results in a frame being encrypted with a wrong key or dropped
(rightfully) because the key was not valid. There isn't much we can
do about it unless we want to walk the pending frame queue every time
a key is removed and remove all frames that used it.
This race condition, however, will most likely be solved once we add
multiqueue support to mac80211 because then frames will be queued
further up the stack instead of after being processed.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Acked-by: Michael Wu <flamingice@sourmilk.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-09-14 11:10:24 -04:00
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2008-08-05 19:34:52 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-11-16 23:20:41 +01:00
|
|
|
|
|
|
|
|
|
2009-08-10 17:29:29 -07:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-31 21:56:25 +01:00
|
|
|
|
|
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
2009-07-10 16:42:29 -04:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
2009-12-23 13:15:31 +01:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-02-06 00:27:32 +01:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2009-10-24 20:55:09 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-09-12 22:52:47 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-08-05 19:34:52 +02:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
2009-11-16 23:20:41 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-08-10 17:29:29 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-11-16 23:20:41 +01:00
|
|
|
|
2009-08-10 17:29:29 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-05 18:00:58 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-11-16 23:20:41 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-08-31 19:50:57 +00:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-01-30 09:08:29 -08:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-01-30 09:08:29 -08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2009-11-19 01:08:30 +01:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-07-27 15:43:24 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-08-31 19:50:57 +00:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-09-16 14:18:59 +02:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-06-12 06:22:29 +00:00
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-12-19 01:31:27 +01:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
2009-11-19 11:55:19 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-09-11 00:01:49 +02:00
|
|
|
|
2008-08-05 19:34:52 +02:00
|
|
|
|
2008-09-11 00:01:49 +02:00
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2008-08-05 19:34:52 +02:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
|
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
2009-11-17 13:34:04 +01:00
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
|
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-11-17 13:34:04 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-11-17 13:34:04 +01:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
2009-11-17 13:34:04 +01:00
|
|
|
|
|
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2009-08-10 12:15:48 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-22 13:30:32 +08:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
|
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2009-02-15 12:44:28 +01:00
|
|
|
|
2009-11-19 11:55:19 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2009-11-10 20:10:05 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-02-15 12:44:28 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-08-28 17:01:54 -04:00
|
|
|
|
|
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-28 17:11:43 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
2009-11-25 17:46:18 +01:00
|
|
|
|
|
|
|
|
|
2008-05-03 01:02:02 +02:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-03 00:59:37 +02:00
|
|
|
|
2009-03-12 23:49:28 +01:00
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-01-28 17:19:37 +01:00
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
2008-08-05 19:34:52 +02:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
2008-10-27 15:56:10 -07:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2007-12-19 01:31:22 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-18 01:19:51 -07:00
|
|
|
|
2008-05-29 10:38:53 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-09-14 11:10:24 -04:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
2007-09-14 11:10:24 -04:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-08-24 11:29:34 -07:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-07-05 19:23:38 -07:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:35 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
2009-11-25 17:46:18 +01:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-03-22 13:42:43 -07:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2009-03-23 17:28:41 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-03-23 17:28:36 +01:00
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-17 00:57:14 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-07-14 00:33:34 +02:00
|
|
|
|
|
|
|
|
|
2009-07-27 10:33:31 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2010-03-22 13:42:43 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-03-23 17:28:37 +01:00
|
|
|
|
2009-03-23 17:28:36 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-12-01 13:56:55 +02:00
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-10-29 08:30:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2009-12-29 12:59:19 +02:00
|
|
|
|
2008-01-24 19:38:38 +01:00
|
|
|
|
2008-05-15 12:55:27 +02:00
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2009-10-29 08:30:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-12-01 13:56:55 +02:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-12-01 13:56:55 +02:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2009-10-29 08:30:35 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
|
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2009-02-15 12:44:28 +01:00
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
2009-04-19 21:25:43 +02:00
|
|
|
|
2008-02-23 15:17:10 +01:00
|
|
|
|
2009-04-19 21:25:43 +02:00
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
|
|
|
|
|
2009-04-19 21:25:43 +02:00
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-07-15 18:44:13 -07:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
2008-09-11 00:01:49 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
2009-11-25 17:46:19 +01:00
|
|
|
|
|
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
2009-04-23 16:10:04 +02:00
|
|
|
|
2008-02-23 15:17:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-08-03 12:04:37 +12:00
|
|
|
|
2008-07-09 14:40:37 +02:00
|
|
|
|
|
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-12-29 12:59:19 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2009-12-29 12:59:19 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-06 13:09:08 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-12-29 12:59:19 +02:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
|
|
|
|
|
2008-07-10 11:21:26 +02:00
|
|
|
|
2010-05-06 14:45:17 -04:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-10-21 12:40:02 +02:00
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2009-10-29 08:30:35 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2010-01-05 20:16:19 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-05 20:16:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-22 16:45:27 -07:00
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2008-05-27 17:50:51 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2007-12-19 01:31:26 +01:00
|
|
|
|
2008-05-27 17:50:51 +03:00
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-09-11 00:01:58 +02:00
|
|
|
|
2008-05-27 17:50:51 +03:00
|
|
|
|
2007-12-19 02:03:33 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-05-27 17:50:51 +03:00
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-27 17:50:51 +03:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-02-25 16:27:43 +01:00
|
|
|
|
|
|
|
|
|
2008-05-15 12:55:29 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
2008-06-20 01:22:30 +02:00
|
|
|
|
2008-02-25 16:27:46 +01:00
|
|
|
|
2007-07-27 15:43:22 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-11-18 18:42:05 +01:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-01-05 18:00:58 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-18 17:25:11 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|
2009-06-18 17:25:11 +02:00
|
|
|
|
2009-06-17 17:43:56 +02:00
|
|
|
|