Some APs will not negotiate 11n (aka HT) if the vendor-specific WME
(Wireless Multimedia Extensions) info element is missing in probe
and association requests. WME info essentially tells the other end
that we're QoS capable, which is a requirement for 11n (e.g. A-MPDUs
are sent in QoS data frames).
The 802.11-2012 standard defines other ways of indicating QoS support
which we already use. WME is not part of this standard but I'm adding
it for interoperability. FreeBSD and Linux send a WME info element, too.
Since this is an ugly vendor-specific element I decided to use magic
numbers instead of IEEE80211_ defines. I have no document explaining
what these numbers really mean, and Linux and FreeBSD use different
terminology. I put the names FreeBSD uses in comments.

Also, fix bugs where the wrong flag was checked to determine whether
11n-related elements should be included in management frames.
If 11n mode is enabled (F_HTON flag) we can always include 11n related
elements in management frames we send out, regardless of whether the
other STAs or APs support 11n.
The NODE_HT flag is only set once HT has been negotiated with a peer,
i.e. after exchanging assoc request and response with the AP.
Checking this flag earlier, e.g. in ieee80211_get_assoc_resp(), is wrong.

Index: net80211/ieee80211_output.c
===================================================================
RCS file: /cvs/src/sys/net80211/ieee80211_output.c,v
retrieving revision 1.101
diff -u -p -r1.101 ieee80211_output.c
--- net80211/ieee80211_output.c 24 Nov 2015 12:32:53 -0000      1.101
+++ net80211/ieee80211_output.c 12 Dec 2015 10:12:58 -0000
@@ -94,6 +94,7 @@ struct        mbuf *ieee80211_get_addba_resp(st
            struct ieee80211_node *, u_int8_t, u_int8_t, u_int16_t);
 struct mbuf *ieee80211_get_delba(struct ieee80211com *,
            struct ieee80211_node *, u_int8_t, u_int8_t, u_int16_t);
+uint8_t *ieee80211_add_wme_info(uint8_t *, struct ieee80211com *);
 #endif
 struct mbuf *ieee80211_get_sa_query(struct ieee80211com *,
            struct ieee80211_node *, u_int8_t);
@@ -831,6 +832,26 @@ ieee80211_add_qos_capability(u_int8_t *f
        return frm;
 }
 
+#ifndef IEEE80211_NO_HT
+/*
+ * Add a Wifi-Alliance WME (aka WMM) info element to a frame.
+ * WME is a requirement for Wifi-Alliance compliance and some
+ * 11n APs will not negotiate HT if this element is missing.
+ */
+uint8_t *
+ieee80211_add_wme_info(uint8_t *frm, struct ieee80211com *ic)
+{
+       *frm++ = IEEE80211_ELEMID_VENDOR;
+       *frm++ = 7;
+       memcpy(frm, MICROSOFT_OUI, 3); frm += 3;
+       *frm++ = 2; /* OUI type */
+       *frm++ = 0; /* OUI subtype */
+       *frm++ = 1; /* version */
+       *frm++ = 0; /* info */
+
+       return frm;
+}
+#endif
 /*
  * Add an RSN element to a frame (see 802.11-2012 8.4.2.27)
  */
@@ -1097,7 +1118,7 @@ ieee80211_get_probe_req(struct ieee80211
            2 + min(rs->rs_nrates, IEEE80211_RATE_SIZE) +
            ((rs->rs_nrates > IEEE80211_RATE_SIZE) ?
                2 + rs->rs_nrates - IEEE80211_RATE_SIZE : 0) +
-           ((ni->ni_flags & IEEE80211_NODE_HT) ? 28 : 0));
+           ((ic->ic_flags & IEEE80211_F_HTON) ? 28 + 9 : 0));
        if (m == NULL)
                return NULL;
 
@@ -1107,8 +1128,10 @@ ieee80211_get_probe_req(struct ieee80211
        if (rs->rs_nrates > IEEE80211_RATE_SIZE)
                frm = ieee80211_add_xrates(frm, rs);
 #ifndef IEEE80211_NO_HT
-       if (ni->ni_flags & IEEE80211_NODE_HT)
+       if (ic->ic_flags & IEEE80211_F_HTON) {
                frm = ieee80211_add_htcaps(frm, ic);
+               frm = ieee80211_add_wme_info(frm, ic);
+       }
 #endif
 
        m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
@@ -1278,7 +1301,7 @@ ieee80211_get_assoc_req(struct ieee80211
            (((ic->ic_flags & IEEE80211_F_RSNON) &&
              (ni->ni_rsnprotos & IEEE80211_PROTO_WPA)) ?
                2 + IEEE80211_WPAIE_MAXLEN : 0) +
-           ((ni->ni_flags & IEEE80211_NODE_HT) ? 28 : 0));
+           ((ic->ic_flags & IEEE80211_F_HTON) ? 28 + 9 : 0));
        if (m == NULL)
                return NULL;
 
@@ -1310,8 +1333,10 @@ ieee80211_get_assoc_req(struct ieee80211
            (ni->ni_rsnprotos & IEEE80211_PROTO_WPA))
                frm = ieee80211_add_wpa(frm, ic, ni);
 #ifndef IEEE80211_NO_HT
-       if (ni->ni_flags & IEEE80211_NODE_HT)
+       if (ic->ic_flags & IEEE80211_F_HTON) {
                frm = ieee80211_add_htcaps(frm, ic);
+               frm = ieee80211_add_wme_info(frm, ic);
+       }
 #endif
 
        m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
@@ -1347,7 +1372,7 @@ ieee80211_get_assoc_resp(struct ieee8021
                2 + rs->rs_nrates - IEEE80211_RATE_SIZE : 0) +
            ((ni->ni_flags & IEEE80211_NODE_QOS) ? 2 + 18 : 0) +
            ((status == IEEE80211_STATUS_TRY_AGAIN_LATER) ? 2 + 7 : 0) +
-           ((ni->ni_flags & IEEE80211_NODE_HT) ? 28 + 24 : 0));
+           ((ic->ic_flags & IEEE80211_F_HTON) ? 28 + 24 : 0));
        if (m == NULL)
                return NULL;
 
@@ -1370,7 +1395,7 @@ ieee80211_get_assoc_resp(struct ieee8021
                frm = ieee80211_add_tie(frm, 3, 1000 /* XXX */);
        }
 #ifndef IEEE80211_NO_HT
-       if (ni->ni_flags & IEEE80211_NODE_HT) {
+       if (ic->ic_flags & IEEE80211_F_HTON) {
                frm = ieee80211_add_htcaps(frm, ic);
                frm = ieee80211_add_htop(frm, ic);
        }


Reply via email to