?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
net/mlx4_core: Fix leakage of SW multicast entries
[linux-2.6/btrfs-unstable.git] / net / mac80211 / cfg.c
blob927b4ea0128bbc365a9692302ba299d5da16b2c4
1 /*
2 * mac80211 configuration hooks for cfg80211
3 *
4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
5 *
6 * This file is GPLv2 as found in COPYING.
7 */
8
9 #include <linux/ieee80211.h>
10 #include <linux/nl80211.h>
11 #include <linux/rtnetlink.h>
12 #include <linux/slab.h>
13 #include <net/net_namespace.h>
14 #include <linux/rcupdate.h>
15 #include <linux/if_ether.h>
16 #include <net/cfg80211.h>
17 #include "ieee80211_i.h"
18 #include "driver-ops.h"
19 #include "cfg.h"
20 #include "rate.h"
21 #include "mesh.h"
22
23 static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
24 const char *name,
25 enum nl80211_iftype type,
26 u32 *flags,
27 struct vif_params *params)
28 {
29 struct ieee80211_local *local = wiphy_priv(wiphy);
30 struct wireless_dev *wdev;
31 struct ieee80211_sub_if_data *sdata;
32 int err;
33
34 err = ieee80211_if_add(local, name, &wdev, type, params);
35 if (err)
36 return ERR_PTR(err);
37
38 if (type == NL80211_IFTYPE_MONITOR && flags) {
39 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
40 sdata->u.mntr_flags = *flags;
41 }
42
43 return wdev;
44 }
45
46 static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
47 {
48 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
49
50 return 0;
51 }
52
53 static int ieee80211_change_iface(struct wiphy *wiphy,
54 struct net_device *dev,
55 enum nl80211_iftype type, u32 *flags,
56 struct vif_params *params)
57 {
58 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
59 int ret;
60
61 ret = ieee80211_if_change_type(sdata, type);
62 if (ret)
63 return ret;
64
65 if (type == NL80211_IFTYPE_AP_VLAN &&
66 params && params->use_4addr == 0)
67 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
68 else if (type == NL80211_IFTYPE_STATION &&
69 params && params->use_4addr >= 0)
70 sdata->u.mgd.use_4addr = params->use_4addr;
71
72 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) {
73 struct ieee80211_local *local = sdata->local;
74
75 if (ieee80211_sdata_running(sdata)) {
76 u32 mask = MONITOR_FLAG_COOK_FRAMES |
77 MONITOR_FLAG_ACTIVE;
78
79 /*
80 * Prohibit MONITOR_FLAG_COOK_FRAMES and
81 * MONITOR_FLAG_ACTIVE to be changed while the
82 * interface is up.
83 * Else we would need to add a lot of cruft
84 * to update everything:
85 * cooked_mntrs, monitor and all fif_* counters
86 * reconfigure hardware
87 */
88 if ((*flags & mask) != (sdata->u.mntr_flags & mask))
89 return -EBUSY;
90
91 ieee80211_adjust_monitor_flags(sdata, -1);
92 sdata->u.mntr_flags = *flags;
93 ieee80211_adjust_monitor_flags(sdata, 1);
94
95 ieee80211_configure_filter(local);
96 } else {
97 /*
98 * Because the interface is down, ieee80211_do_stop
99 * and ieee80211_do_open take care of "everything"
100 * mentioned in the comment above.
101 */
102 sdata->u.mntr_flags = *flags;
103 }
104 }
105
106 return 0;
107 }
108
109 static int ieee80211_start_p2p_device(struct wiphy *wiphy,
110 struct wireless_dev *wdev)
111 {
112 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
113 int ret;
114
115 mutex_lock(&sdata->local->chanctx_mtx);
116 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
117 mutex_unlock(&sdata->local->chanctx_mtx);
118 if (ret < 0)
119 return ret;
120
121 return ieee80211_do_open(wdev, true);
122 }
123
124 static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
125 struct wireless_dev *wdev)
126 {
127 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
128 }
129
130 static int ieee80211_set_noack_map(struct wiphy *wiphy,
131 struct net_device *dev,
132 u16 noack_map)
133 {
134 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
135
136 sdata->noack_map = noack_map;
137 return 0;
138 }
139
140 static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
141 u8 key_idx, bool pairwise, const u8 *mac_addr,
142 struct key_params *params)
143 {
144 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
145 struct ieee80211_local *local = sdata->local;
146 struct sta_info *sta = NULL;
147 const struct ieee80211_cipher_scheme *cs = NULL;
148 struct ieee80211_key *key;
149 int err;
150
151 if (!ieee80211_sdata_running(sdata))
152 return -ENETDOWN;
153
154 /* reject WEP and TKIP keys if WEP failed to initialize */
155 switch (params->cipher) {
156 case WLAN_CIPHER_SUITE_WEP40:
157 case WLAN_CIPHER_SUITE_TKIP:
158 case WLAN_CIPHER_SUITE_WEP104:
159 if (IS_ERR(local->wep_tx_tfm))
160 return -EINVAL;
161 break;
162 case WLAN_CIPHER_SUITE_CCMP:
163 case WLAN_CIPHER_SUITE_AES_CMAC:
164 case WLAN_CIPHER_SUITE_GCMP:
165 break;
166 default:
167 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
168 break;
169 }
170
171 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
172 params->key, params->seq_len, params->seq,
173 cs);
174 if (IS_ERR(key))
175 return PTR_ERR(key);
176
177 if (pairwise)
178 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
179
180 mutex_lock(&local->sta_mtx);
181
182 if (mac_addr) {
183 if (ieee80211_vif_is_mesh(&sdata->vif))
184 sta = sta_info_get(sdata, mac_addr);
185 else
186 sta = sta_info_get_bss(sdata, mac_addr);
187 /*
188 * The ASSOC test makes sure the driver is ready to
189 * receive the key. When wpa_supplicant has roamed
190 * using FT, it attempts to set the key before
191 * association has completed, this rejects that attempt
192 * so it will set the key again after assocation.
193 *
194 * TODO: accept the key if we have a station entry and
195 * add it to the device after the station.
196 */
197 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
198 ieee80211_key_free_unused(key);
199 err = -ENOENT;
200 goto out_unlock;
201 }
202 }
203
204 switch (sdata->vif.type) {
205 case NL80211_IFTYPE_STATION:
206 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
207 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
208 break;
209 case NL80211_IFTYPE_AP:
210 case NL80211_IFTYPE_AP_VLAN:
211 /* Keys without a station are used for TX only */
212 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
213 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
214 break;
215 case NL80211_IFTYPE_ADHOC:
216 /* no MFP (yet) */
217 break;
218 case NL80211_IFTYPE_MESH_POINT:
219 #ifdef CONFIG_MAC80211_MESH
220 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
221 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
222 break;
223 #endif
224 case NL80211_IFTYPE_WDS:
225 case NL80211_IFTYPE_MONITOR:
226 case NL80211_IFTYPE_P2P_DEVICE:
227 case NL80211_IFTYPE_UNSPECIFIED:
228 case NUM_NL80211_IFTYPES:
229 case NL80211_IFTYPE_P2P_CLIENT:
230 case NL80211_IFTYPE_P2P_GO:
231 /* shouldn't happen */
232 WARN_ON_ONCE(1);
233 break;
234 }
235
236 if (sta)
237 sta->cipher_scheme = cs;
238
239 err = ieee80211_key_link(key, sdata, sta);
240
241 out_unlock:
242 mutex_unlock(&local->sta_mtx);
243
244 return err;
245 }
246
247 static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
248 u8 key_idx, bool pairwise, const u8 *mac_addr)
249 {
250 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
251 struct ieee80211_local *local = sdata->local;
252 struct sta_info *sta;
253 struct ieee80211_key *key = NULL;
254 int ret;
255
256 mutex_lock(&local->sta_mtx);
257 mutex_lock(&local->key_mtx);
258
259 if (mac_addr) {
260 ret = -ENOENT;
261
262 sta = sta_info_get_bss(sdata, mac_addr);
263 if (!sta)
264 goto out_unlock;
265
266 if (pairwise)
267 key = key_mtx_dereference(local, sta->ptk[key_idx]);
268 else
269 key = key_mtx_dereference(local, sta->gtk[key_idx]);
270 } else
271 key = key_mtx_dereference(local, sdata->keys[key_idx]);
272
273 if (!key) {
274 ret = -ENOENT;
275 goto out_unlock;
276 }
277
278 ieee80211_key_free(key, true);
279
280 ret = 0;
281 out_unlock:
282 mutex_unlock(&local->key_mtx);
283 mutex_unlock(&local->sta_mtx);
284
285 return ret;
286 }
287
288 static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
289 u8 key_idx, bool pairwise, const u8 *mac_addr,
290 void *cookie,
291 void (*callback)(void *cookie,
292 struct key_params *params))
293 {
294 struct ieee80211_sub_if_data *sdata;
295 struct sta_info *sta = NULL;
296 u8 seq[6] = {0};
297 struct key_params params;
298 struct ieee80211_key *key = NULL;
299 u64 pn64;
300 u32 iv32;
301 u16 iv16;
302 int err = -ENOENT;
303
304 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
305
306 rcu_read_lock();
307
308 if (mac_addr) {
309 sta = sta_info_get_bss(sdata, mac_addr);
310 if (!sta)
311 goto out;
312
313 if (pairwise && key_idx < NUM_DEFAULT_KEYS)
314 key = rcu_dereference(sta->ptk[key_idx]);
315 else if (!pairwise &&
316 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
317 key = rcu_dereference(sta->gtk[key_idx]);
318 } else
319 key = rcu_dereference(sdata->keys[key_idx]);
320
321 if (!key)
322 goto out;
323
324 memset(&params, 0, sizeof(params));
325
326 params.cipher = key->conf.cipher;
327
328 switch (key->conf.cipher) {
329 case WLAN_CIPHER_SUITE_TKIP:
330 iv32 = key->u.tkip.tx.iv32;
331 iv16 = key->u.tkip.tx.iv16;
332
333 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)
334 drv_get_tkip_seq(sdata->local,
335 key->conf.hw_key_idx,
336 &iv32, &iv16);
337
338 seq[0] = iv16 & 0xff;
339 seq[1] = (iv16 >> 8) & 0xff;
340 seq[2] = iv32 & 0xff;
341 seq[3] = (iv32 >> 8) & 0xff;
342 seq[4] = (iv32 >> 16) & 0xff;
343 seq[5] = (iv32 >> 24) & 0xff;
344 params.seq = seq;
345 params.seq_len = 6;
346 break;
347 case WLAN_CIPHER_SUITE_CCMP:
348 pn64 = atomic64_read(&key->u.ccmp.tx_pn);
349 seq[0] = pn64;
350 seq[1] = pn64 >> 8;
351 seq[2] = pn64 >> 16;
352 seq[3] = pn64 >> 24;
353 seq[4] = pn64 >> 32;
354 seq[5] = pn64 >> 40;
355 params.seq = seq;
356 params.seq_len = 6;
357 break;
358 case WLAN_CIPHER_SUITE_AES_CMAC:
359 pn64 = atomic64_read(&key->u.aes_cmac.tx_pn);
360 seq[0] = pn64;
361 seq[1] = pn64 >> 8;
362 seq[2] = pn64 >> 16;
363 seq[3] = pn64 >> 24;
364 seq[4] = pn64 >> 32;
365 seq[5] = pn64 >> 40;
366 params.seq = seq;
367 params.seq_len = 6;
368 break;
369 }
370
371 params.key = key->conf.key;
372 params.key_len = key->conf.keylen;
373
374 callback(cookie, &params);
375 err = 0;
376
377 out:
378 rcu_read_unlock();
379 return err;
380 }
381
382 static int ieee80211_config_default_key(struct wiphy *wiphy,
383 struct net_device *dev,
384 u8 key_idx, bool uni,
385 bool multi)
386 {
387 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
388
389 ieee80211_set_default_key(sdata, key_idx, uni, multi);
390
391 return 0;
392 }
393
394 static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
395 struct net_device *dev,
396 u8 key_idx)
397 {
398 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
399
400 ieee80211_set_default_mgmt_key(sdata, key_idx);
401
402 return 0;
403 }
404
405 void sta_set_rate_info_tx(struct sta_info *sta,
406 const struct ieee80211_tx_rate *rate,
407 struct rate_info *rinfo)
408 {
409 rinfo->flags = 0;
410 if (rate->flags & IEEE80211_TX_RC_MCS) {
411 rinfo->flags |= RATE_INFO_FLAGS_MCS;
412 rinfo->mcs = rate->idx;
413 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
414 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
415 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
416 rinfo->nss = ieee80211_rate_get_vht_nss(rate);
417 } else {
418 struct ieee80211_supported_band *sband;
419 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
420 u16 brate;
421
422 sband = sta->local->hw.wiphy->bands[
423 ieee80211_get_sdata_band(sta->sdata)];
424 brate = sband->bitrates[rate->idx].bitrate;
425 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
426 }
427 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
428 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
429 if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
430 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
431 if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
432 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
433 if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
434 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
435 }
436
437 void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo)
438 {
439 rinfo->flags = 0;
440
441 if (sta->last_rx_rate_flag & RX_FLAG_HT) {
442 rinfo->flags |= RATE_INFO_FLAGS_MCS;
443 rinfo->mcs = sta->last_rx_rate_idx;
444 } else if (sta->last_rx_rate_flag & RX_FLAG_VHT) {
445 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
446 rinfo->nss = sta->last_rx_rate_vht_nss;
447 rinfo->mcs = sta->last_rx_rate_idx;
448 } else {
449 struct ieee80211_supported_band *sband;
450 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
451 u16 brate;
452
453 sband = sta->local->hw.wiphy->bands[
454 ieee80211_get_sdata_band(sta->sdata)];
455 brate = sband->bitrates[sta->last_rx_rate_idx].bitrate;
456 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
457 }
458
459 if (sta->last_rx_rate_flag & RX_FLAG_40MHZ)
460 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
461 if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI)
462 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
463 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80MHZ)
464 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
465 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80P80MHZ)
466 rinfo->flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
467 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_160MHZ)
468 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
469 }
470
471 static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
472 int idx, u8 *mac, struct station_info *sinfo)
473 {
474 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
475 struct ieee80211_local *local = sdata->local;
476 struct sta_info *sta;
477 int ret = -ENOENT;
478
479 mutex_lock(&local->sta_mtx);
480
481 sta = sta_info_get_by_idx(sdata, idx);
482 if (sta) {
483 ret = 0;
484 memcpy(mac, sta->sta.addr, ETH_ALEN);
485 sta_set_sinfo(sta, sinfo);
486 }
487
488 mutex_unlock(&local->sta_mtx);
489
490 return ret;
491 }
492
493 static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
494 int idx, struct survey_info *survey)
495 {
496 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
497
498 return drv_get_survey(local, idx, survey);
499 }
500
501 static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
502 const u8 *mac, struct station_info *sinfo)
503 {
504 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
505 struct ieee80211_local *local = sdata->local;
506 struct sta_info *sta;
507 int ret = -ENOENT;
508
509 mutex_lock(&local->sta_mtx);
510
511 sta = sta_info_get_bss(sdata, mac);
512 if (sta) {
513 ret = 0;
514 sta_set_sinfo(sta, sinfo);
515 }
516
517 mutex_unlock(&local->sta_mtx);
518
519 return ret;
520 }
521
522 static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
523 struct cfg80211_chan_def *chandef)
524 {
525 struct ieee80211_local *local = wiphy_priv(wiphy);
526 struct ieee80211_sub_if_data *sdata;
527 int ret = 0;
528
529 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
530 return 0;
531
532 mutex_lock(&local->mtx);
533 mutex_lock(&local->iflist_mtx);
534 if (local->use_chanctx) {
535 sdata = rcu_dereference_protected(
536 local->monitor_sdata,
537 lockdep_is_held(&local->iflist_mtx));
538 if (sdata) {
539 ieee80211_vif_release_channel(sdata);
540 ret = ieee80211_vif_use_channel(sdata, chandef,
541 IEEE80211_CHANCTX_EXCLUSIVE);
542 }
543 } else if (local->open_count == local->monitors) {
544 local->_oper_chandef = *chandef;
545 ieee80211_hw_config(local, 0);
546 }
547
548 if (ret == 0)
549 local->monitor_chandef = *chandef;
550 mutex_unlock(&local->iflist_mtx);
551 mutex_unlock(&local->mtx);
552
553 return ret;
554 }
555
556 static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
557 const u8 *resp, size_t resp_len,
558 const struct ieee80211_csa_settings *csa)
559 {
560 struct probe_resp *new, *old;
561
562 if (!resp || !resp_len)
563 return 1;
564
565 old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
566
567 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
568 if (!new)
569 return -ENOMEM;
570
571 new->len = resp_len;
572 memcpy(new->data, resp, resp_len);
573
574 if (csa)
575 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
576 csa->n_counter_offsets_presp *
577 sizeof(new->csa_counter_offsets[0]));
578
579 rcu_assign_pointer(sdata->u.ap.probe_resp, new);
580 if (old)
581 kfree_rcu(old, rcu_head);
582
583 return 0;
584 }
585
586 static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
587 struct cfg80211_beacon_data *params,
588 const struct ieee80211_csa_settings *csa)
589 {
590 struct beacon_data *new, *old;
591 int new_head_len, new_tail_len;
592 int size, err;
593 u32 changed = BSS_CHANGED_BEACON;
594
595 old = sdata_dereference(sdata->u.ap.beacon, sdata);
596
597
598 /* Need to have a beacon head if we don't have one yet */
599 if (!params->head && !old)
600 return -EINVAL;
601
602 /* new or old head? */
603 if (params->head)
604 new_head_len = params->head_len;
605 else
606 new_head_len = old->head_len;
607
608 /* new or old tail? */
609 if (params->tail || !old)
610 /* params->tail_len will be zero for !params->tail */
611 new_tail_len = params->tail_len;
612 else
613 new_tail_len = old->tail_len;
614
615 size = sizeof(*new) + new_head_len + new_tail_len;
616
617 new = kzalloc(size, GFP_KERNEL);
618 if (!new)
619 return -ENOMEM;
620
621 /* start filling the new info now */
622
623 /*
624 * pointers go into the block we allocated,
625 * memory is | beacon_data | head | tail |
626 */
627 new->head = ((u8 *) new) + sizeof(*new);
628 new->tail = new->head + new_head_len;
629 new->head_len = new_head_len;
630 new->tail_len = new_tail_len;
631
632 if (csa) {
633 new->csa_current_counter = csa->count;
634 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
635 csa->n_counter_offsets_beacon *
636 sizeof(new->csa_counter_offsets[0]));
637 }
638
639 /* copy in head */
640 if (params->head)
641 memcpy(new->head, params->head, new_head_len);
642 else
643 memcpy(new->head, old->head, new_head_len);
644
645 /* copy in optional tail */
646 if (params->tail)
647 memcpy(new->tail, params->tail, new_tail_len);
648 else
649 if (old)
650 memcpy(new->tail, old->tail, new_tail_len);
651
652 err = ieee80211_set_probe_resp(sdata, params->probe_resp,
653 params->probe_resp_len, csa);
654 if (err < 0)
655 return err;
656 if (err == 0)
657 changed |= BSS_CHANGED_AP_PROBE_RESP;
658
659 rcu_assign_pointer(sdata->u.ap.beacon, new);
660
661 if (old)
662 kfree_rcu(old, rcu_head);
663
664 return changed;
665 }
666
667 static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
668 struct cfg80211_ap_settings *params)
669 {
670 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
671 struct ieee80211_local *local = sdata->local;
672 struct beacon_data *old;
673 struct ieee80211_sub_if_data *vlan;
674 u32 changed = BSS_CHANGED_BEACON_INT |
675 BSS_CHANGED_BEACON_ENABLED |
676 BSS_CHANGED_BEACON |
677 BSS_CHANGED_SSID |
678 BSS_CHANGED_P2P_PS;
679 int err;
680
681 old = sdata_dereference(sdata->u.ap.beacon, sdata);
682 if (old)
683 return -EALREADY;
684
685 /* TODO: make hostapd tell us what it wants */
686 sdata->smps_mode = IEEE80211_SMPS_OFF;
687 sdata->needed_rx_chains = sdata->local->rx_chains;
688
689 mutex_lock(&local->mtx);
690 err = ieee80211_vif_use_channel(sdata, &params->chandef,
691 IEEE80211_CHANCTX_SHARED);
692 if (!err)
693 ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
694 mutex_unlock(&local->mtx);
695 if (err)
696 return err;
697
698 /*
699 * Apply control port protocol, this allows us to
700 * not encrypt dynamic WEP control frames.
701 */
702 sdata->control_port_protocol = params->crypto.control_port_ethertype;
703 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
704 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
705 &params->crypto,
706 sdata->vif.type);
707
708 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
709 vlan->control_port_protocol =
710 params->crypto.control_port_ethertype;
711 vlan->control_port_no_encrypt =
712 params->crypto.control_port_no_encrypt;
713 vlan->encrypt_headroom =
714 ieee80211_cs_headroom(sdata->local,
715 &params->crypto,
716 vlan->vif.type);
717 }
718
719 sdata->vif.bss_conf.beacon_int = params->beacon_interval;
720 sdata->vif.bss_conf.dtim_period = params->dtim_period;
721 sdata->vif.bss_conf.enable_beacon = true;
722
723 sdata->vif.bss_conf.ssid_len = params->ssid_len;
724 if (params->ssid_len)
725 memcpy(sdata->vif.bss_conf.ssid, params->ssid,
726 params->ssid_len);
727 sdata->vif.bss_conf.hidden_ssid =
728 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
729
730 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
731 sizeof(sdata->vif.bss_conf.p2p_noa_attr));
732 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
733 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
734 if (params->p2p_opp_ps)
735 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
736 IEEE80211_P2P_OPPPS_ENABLE_BIT;
737
738 err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
739 if (err < 0) {
740 ieee80211_vif_release_channel(sdata);
741 return err;
742 }
743 changed |= err;
744
745 err = drv_start_ap(sdata->local, sdata);
746 if (err) {
747 old = sdata_dereference(sdata->u.ap.beacon, sdata);
748
749 if (old)
750 kfree_rcu(old, rcu_head);
751 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
752 ieee80211_vif_release_channel(sdata);
753 return err;
754 }
755
756 ieee80211_recalc_dtim(local, sdata);
757 ieee80211_bss_info_change_notify(sdata, changed);
758
759 netif_carrier_on(dev);
760 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
761 netif_carrier_on(vlan->dev);
762
763 return 0;
764 }
765
766 static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
767 struct cfg80211_beacon_data *params)
768 {
769 struct ieee80211_sub_if_data *sdata;
770 struct beacon_data *old;
771 int err;
772
773 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
774 sdata_assert_lock(sdata);
775
776 /* don't allow changing the beacon while CSA is in place - offset
777 * of channel switch counter may change
778 */
779 if (sdata->vif.csa_active)
780 return -EBUSY;
781
782 old = sdata_dereference(sdata->u.ap.beacon, sdata);
783 if (!old)
784 return -ENOENT;
785
786 err = ieee80211_assign_beacon(sdata, params, NULL);
787 if (err < 0)
788 return err;
789 ieee80211_bss_info_change_notify(sdata, err);
790 return 0;
791 }
792
793 static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
794 {
795 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
796 struct ieee80211_sub_if_data *vlan;
797 struct ieee80211_local *local = sdata->local;
798 struct beacon_data *old_beacon;
799 struct probe_resp *old_probe_resp;
800 struct cfg80211_chan_def chandef;
801
802 sdata_assert_lock(sdata);
803
804 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
805 if (!old_beacon)
806 return -ENOENT;
807 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
808
809 /* abort any running channel switch */
810 mutex_lock(&local->mtx);
811 sdata->vif.csa_active = false;
812 if (sdata->csa_block_tx) {
813 ieee80211_wake_vif_queues(local, sdata,
814 IEEE80211_QUEUE_STOP_REASON_CSA);
815 sdata->csa_block_tx = false;
816 }
817
818 mutex_unlock(&local->mtx);
819
820 kfree(sdata->u.ap.next_beacon);
821 sdata->u.ap.next_beacon = NULL;
822
823 /* turn off carrier for this interface and dependent VLANs */
824 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
825 netif_carrier_off(vlan->dev);
826 netif_carrier_off(dev);
827
828 /* remove beacon and probe response */
829 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
830 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
831 kfree_rcu(old_beacon, rcu_head);
832 if (old_probe_resp)
833 kfree_rcu(old_probe_resp, rcu_head);
834 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
835
836 __sta_info_flush(sdata, true);
837 ieee80211_free_keys(sdata, true);
838
839 sdata->vif.bss_conf.enable_beacon = false;
840 sdata->vif.bss_conf.ssid_len = 0;
841 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
842 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
843
844 if (sdata->wdev.cac_started) {
845 chandef = sdata->vif.bss_conf.chandef;
846 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
847 cfg80211_cac_event(sdata->dev, &chandef,
848 NL80211_RADAR_CAC_ABORTED,
849 GFP_KERNEL);
850 }
851
852 drv_stop_ap(sdata->local, sdata);
853
854 /* free all potentially still buffered bcast frames */
855 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
856 skb_queue_purge(&sdata->u.ap.ps.bc_buf);
857
858 mutex_lock(&local->mtx);
859 ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
860 ieee80211_vif_release_channel(sdata);
861 mutex_unlock(&local->mtx);
862
863 return 0;
864 }
865
866 /* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
867 struct iapp_layer2_update {
868 u8 da[ETH_ALEN]; /* broadcast */
869 u8 sa[ETH_ALEN]; /* STA addr */
870 __be16 len; /* 6 */
871 u8 dsap; /* 0 */
872 u8 ssap; /* 0 */
873 u8 control;
874 u8 xid_info[3];
875 } __packed;
876
877 static void ieee80211_send_layer2_update(struct sta_info *sta)
878 {
879 struct iapp_layer2_update *msg;
880 struct sk_buff *skb;
881
882 /* Send Level 2 Update Frame to update forwarding tables in layer 2
883 * bridge devices */
884
885 skb = dev_alloc_skb(sizeof(*msg));
886 if (!skb)
887 return;
888 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
889
890 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
891 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
892
893 eth_broadcast_addr(msg->da);
894 memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
895 msg->len = htons(6);
896 msg->dsap = 0;
897 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */
898 msg->control = 0xaf; /* XID response lsb.1111F101.
899 * F=0 (no poll command; unsolicited frame) */
900 msg->xid_info[0] = 0x81; /* XID format identifier */
901 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */
902 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */
903
904 skb->dev = sta->sdata->dev;
905 skb->protocol = eth_type_trans(skb, sta->sdata->dev);
906 memset(skb->cb, 0, sizeof(skb->cb));
907 netif_rx_ni(skb);
908 }
909
910 static int sta_apply_auth_flags(struct ieee80211_local *local,
911 struct sta_info *sta,
912 u32 mask, u32 set)
913 {
914 int ret;
915
916 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
917 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
918 !test_sta_flag(sta, WLAN_STA_AUTH)) {
919 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
920 if (ret)
921 return ret;
922 }
923
924 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
925 set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
926 !test_sta_flag(sta, WLAN_STA_ASSOC)) {
927 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
928 if (ret)
929 return ret;
930 }
931
932 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
933 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
934 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
935 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
936 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
937 else
938 ret = 0;
939 if (ret)
940 return ret;
941 }
942
943 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
944 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
945 test_sta_flag(sta, WLAN_STA_ASSOC)) {
946 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
947 if (ret)
948 return ret;
949 }
950
951 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
952 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
953 test_sta_flag(sta, WLAN_STA_AUTH)) {
954 ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
955 if (ret)
956 return ret;
957 }
958
959 return 0;
960 }
961
962 static int sta_apply_parameters(struct ieee80211_local *local,
963 struct sta_info *sta,
964 struct station_parameters *params)
965 {
966 int ret = 0;
967 struct ieee80211_supported_band *sband;
968 struct ieee80211_sub_if_data *sdata = sta->sdata;
969 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
970 u32 mask, set;
971
972 sband = local->hw.wiphy->bands[band];
973
974 mask = params->sta_flags_mask;
975 set = params->sta_flags_set;
976
977 if (ieee80211_vif_is_mesh(&sdata->vif)) {
978 /*
979 * In mesh mode, ASSOCIATED isn't part of the nl80211
980 * API but must follow AUTHENTICATED for driver state.
981 */
982 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
983 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
984 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
985 set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
986 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
987 /*
988 * TDLS -- everything follows authorized, but
989 * only becoming authorized is possible, not
990 * going back
991 */
992 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
993 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
994 BIT(NL80211_STA_FLAG_ASSOCIATED);
995 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
996 BIT(NL80211_STA_FLAG_ASSOCIATED);
997 }
998 }
999
1000 /* auth flags will be set later for TDLS stations */
1001 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1002 ret = sta_apply_auth_flags(local, sta, mask, set);
1003 if (ret)
1004 return ret;
1005 }
1006
1007 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
1008 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1009 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1010 else
1011 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1012 }
1013
1014 if (mask & BIT(NL80211_STA_FLAG_WME)) {
1015 if (set & BIT(NL80211_STA_FLAG_WME)) {
1016 set_sta_flag(sta, WLAN_STA_WME);
1017 sta->sta.wme = true;
1018 } else {
1019 clear_sta_flag(sta, WLAN_STA_WME);
1020 sta->sta.wme = false;
1021 }
1022 }
1023
1024 if (mask & BIT(NL80211_STA_FLAG_MFP)) {
1025 if (set & BIT(NL80211_STA_FLAG_MFP))
1026 set_sta_flag(sta, WLAN_STA_MFP);
1027 else
1028 clear_sta_flag(sta, WLAN_STA_MFP);
1029 }
1030
1031 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
1032 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1033 set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1034 else
1035 clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
1036 }
1037
1038 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1039 sta->sta.uapsd_queues = params->uapsd_queues;
1040 sta->sta.max_sp = params->max_sp;
1041 }
1042
1043 /*
1044 * cfg80211 validates this (1-2007) and allows setting the AID
1045 * only when creating a new station entry
1046 */
1047 if (params->aid)
1048 sta->sta.aid = params->aid;
1049
1050 /*
1051 * Some of the following updates would be racy if called on an
1052 * existing station, via ieee80211_change_station(). However,
1053 * all such changes are rejected by cfg80211 except for updates
1054 * changing the supported rates on an existing but not yet used
1055 * TDLS peer.
1056 */
1057
1058 if (params->listen_interval >= 0)
1059 sta->listen_interval = params->listen_interval;
1060
1061 if (params->supported_rates) {
1062 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1063 sband, params->supported_rates,
1064 params->supported_rates_len,
1065 &sta->sta.supp_rates[band]);
1066 }
1067
1068 if (params->ht_capa)
1069 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
1070 params->ht_capa, sta);
1071
1072 if (params->vht_capa)
1073 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
1074 params->vht_capa, sta);
1075
1076 if (params->opmode_notif_used) {
1077 /* returned value is only needed for rc update, but the
1078 * rc isn't initialized here yet, so ignore it
1079 */
1080 __ieee80211_vht_handle_opmode(sdata, sta,
1081 params->opmode_notif,
1082 band, false);
1083 }
1084
1085 if (ieee80211_vif_is_mesh(&sdata->vif)) {
1086 #ifdef CONFIG_MAC80211_MESH
1087 u32 changed = 0;
1088
1089 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1090 switch (params->plink_state) {
1091 case NL80211_PLINK_ESTAB:
1092 if (sta->plink_state != NL80211_PLINK_ESTAB)
1093 changed = mesh_plink_inc_estab_count(
1094 sdata);
1095 sta->plink_state = params->plink_state;
1096
1097 ieee80211_mps_sta_status_update(sta);
1098 changed |= ieee80211_mps_set_sta_local_pm(sta,
1099 sdata->u.mesh.mshcfg.power_mode);
1100 break;
1101 case NL80211_PLINK_LISTEN:
1102 case NL80211_PLINK_BLOCKED:
1103 case NL80211_PLINK_OPN_SNT:
1104 case NL80211_PLINK_OPN_RCVD:
1105 case NL80211_PLINK_CNF_RCVD:
1106 case NL80211_PLINK_HOLDING:
1107 if (sta->plink_state == NL80211_PLINK_ESTAB)
1108 changed = mesh_plink_dec_estab_count(
1109 sdata);
1110 sta->plink_state = params->plink_state;
1111
1112 ieee80211_mps_sta_status_update(sta);
1113 changed |= ieee80211_mps_set_sta_local_pm(sta,
1114 NL80211_MESH_POWER_UNKNOWN);
1115 break;
1116 default:
1117 /* nothing */
1118 break;
1119 }
1120 }
1121
1122 switch (params->plink_action) {
1123 case NL80211_PLINK_ACTION_NO_ACTION:
1124 /* nothing */
1125 break;
1126 case NL80211_PLINK_ACTION_OPEN:
1127 changed |= mesh_plink_open(sta);
1128 break;
1129 case NL80211_PLINK_ACTION_BLOCK:
1130 changed |= mesh_plink_block(sta);
1131 break;
1132 }
1133
1134 if (params->local_pm)
1135 changed |=
1136 ieee80211_mps_set_sta_local_pm(sta,
1137 params->local_pm);
1138 ieee80211_mbss_info_change_notify(sdata, changed);
1139 #endif
1140 }
1141
1142 /* set the STA state after all sta info from usermode has been set */
1143 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1144 ret = sta_apply_auth_flags(local, sta, mask, set);
1145 if (ret)
1146 return ret;
1147 }
1148
1149 return 0;
1150 }
1151
1152 static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
1153 const u8 *mac,
1154 struct station_parameters *params)
1155 {
1156 struct ieee80211_local *local = wiphy_priv(wiphy);
1157 struct sta_info *sta;
1158 struct ieee80211_sub_if_data *sdata;
1159 int err;
1160 int layer2_update;
1161
1162 if (params->vlan) {
1163 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1164
1165 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1166 sdata->vif.type != NL80211_IFTYPE_AP)
1167 return -EINVAL;
1168 } else
1169 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1170
1171 if (ether_addr_equal(mac, sdata->vif.addr))
1172 return -EINVAL;
1173
1174 if (is_multicast_ether_addr(mac))
1175 return -EINVAL;
1176
1177 sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
1178 if (!sta)
1179 return -ENOMEM;
1180
1181 /*
1182 * defaults -- if userspace wants something else we'll
1183 * change it accordingly in sta_apply_parameters()
1184 */
1185 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) {
1186 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
1187 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
1188 } else {
1189 sta->sta.tdls = true;
1190 }
1191
1192 err = sta_apply_parameters(local, sta, params);
1193 if (err) {
1194 sta_info_free(local, sta);
1195 return err;
1196 }
1197
1198 /*
1199 * for TDLS, rate control should be initialized only when
1200 * rates are known and station is marked authorized
1201 */
1202 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER))
1203 rate_control_rate_init(sta);
1204
1205 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1206 sdata->vif.type == NL80211_IFTYPE_AP;
1207
1208 err = sta_info_insert_rcu(sta);
1209 if (err) {
1210 rcu_read_unlock();
1211 return err;
1212 }
1213
1214 if (layer2_update)
1215 ieee80211_send_layer2_update(sta);
1216
1217 rcu_read_unlock();
1218
1219 return 0;
1220 }
1221
1222 static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
1223 const u8 *mac)
1224 {
1225 struct ieee80211_sub_if_data *sdata;
1226
1227 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1228
1229 if (mac)
1230 return sta_info_destroy_addr_bss(sdata, mac);
1231
1232 sta_info_flush(sdata);
1233 return 0;
1234 }
1235
1236 static int ieee80211_change_station(struct wiphy *wiphy,
1237 struct net_device *dev, const u8 *mac,
1238 struct station_parameters *params)
1239 {
1240 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1241 struct ieee80211_local *local = wiphy_priv(wiphy);
1242 struct sta_info *sta;
1243 struct ieee80211_sub_if_data *vlansdata;
1244 enum cfg80211_station_type statype;
1245 int err;
1246
1247 mutex_lock(&local->sta_mtx);
1248
1249 sta = sta_info_get_bss(sdata, mac);
1250 if (!sta) {
1251 err = -ENOENT;
1252 goto out_err;
1253 }
1254
1255 switch (sdata->vif.type) {
1256 case NL80211_IFTYPE_MESH_POINT:
1257 if (sdata->u.mesh.user_mpm)
1258 statype = CFG80211_STA_MESH_PEER_USER;
1259 else
1260 statype = CFG80211_STA_MESH_PEER_KERNEL;
1261 break;
1262 case NL80211_IFTYPE_ADHOC:
1263 statype = CFG80211_STA_IBSS;
1264 break;
1265 case NL80211_IFTYPE_STATION:
1266 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1267 statype = CFG80211_STA_AP_STA;
1268 break;
1269 }
1270 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1271 statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1272 else
1273 statype = CFG80211_STA_TDLS_PEER_SETUP;
1274 break;
1275 case NL80211_IFTYPE_AP:
1276 case NL80211_IFTYPE_AP_VLAN:
1277 statype = CFG80211_STA_AP_CLIENT;
1278 break;
1279 default:
1280 err = -EOPNOTSUPP;
1281 goto out_err;
1282 }
1283
1284 err = cfg80211_check_station_change(wiphy, params, statype);
1285 if (err)
1286 goto out_err;
1287
1288 if (params->vlan && params->vlan != sta->sdata->dev) {
1289 bool prev_4addr = false;
1290 bool new_4addr = false;
1291
1292 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1293
1294 if (params->vlan->ieee80211_ptr->use_4addr) {
1295 if (vlansdata->u.vlan.sta) {
1296 err = -EBUSY;
1297 goto out_err;
1298 }
1299
1300 rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
1301 new_4addr = true;
1302 }
1303
1304 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1305 sta->sdata->u.vlan.sta) {
1306 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
1307 prev_4addr = true;
1308 }
1309
1310 sta->sdata = vlansdata;
1311
1312 if (sta->sta_state == IEEE80211_STA_AUTHORIZED &&
1313 prev_4addr != new_4addr) {
1314 if (new_4addr)
1315 atomic_dec(&sta->sdata->bss->num_mcast_sta);
1316 else
1317 atomic_inc(&sta->sdata->bss->num_mcast_sta);
1318 }
1319
1320 ieee80211_send_layer2_update(sta);
1321 }
1322
1323 err = sta_apply_parameters(local, sta, params);
1324 if (err)
1325 goto out_err;
1326
1327 /* When peer becomes authorized, init rate control as well */
1328 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1329 test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1330 rate_control_rate_init(sta);
1331
1332 mutex_unlock(&local->sta_mtx);
1333
1334 if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1335 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1336 sta->known_smps_mode != sta->sdata->bss->req_smps &&
1337 test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1338 sta_info_tx_streams(sta) != 1) {
1339 ht_dbg(sta->sdata,
1340 "%pM just authorized and MIMO capable - update SMPS\n",
1341 sta->sta.addr);
1342 ieee80211_send_smps_action(sta->sdata,
1343 sta->sdata->bss->req_smps,
1344 sta->sta.addr,
1345 sta->sdata->vif.bss_conf.bssid);
1346 }
1347
1348 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1349 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1350 ieee80211_recalc_ps(local, -1);
1351 ieee80211_recalc_ps_vif(sdata);
1352 }
1353
1354 return 0;
1355 out_err:
1356 mutex_unlock(&local->sta_mtx);
1357 return err;
1358 }
1359
1360 #ifdef CONFIG_MAC80211_MESH
1361 static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
1362 const u8 *dst, const u8 *next_hop)
1363 {
1364 struct ieee80211_sub_if_data *sdata;
1365 struct mesh_path *mpath;
1366 struct sta_info *sta;
1367
1368 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1369
1370 rcu_read_lock();
1371 sta = sta_info_get(sdata, next_hop);
1372 if (!sta) {
1373 rcu_read_unlock();
1374 return -ENOENT;
1375 }
1376
1377 mpath = mesh_path_add(sdata, dst);
1378 if (IS_ERR(mpath)) {
1379 rcu_read_unlock();
1380 return PTR_ERR(mpath);
1381 }
1382
1383 mesh_path_fix_nexthop(mpath, sta);
1384
1385 rcu_read_unlock();
1386 return 0;
1387 }
1388
1389 static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
1390 const u8 *dst)
1391 {
1392 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1393
1394 if (dst)
1395 return mesh_path_del(sdata, dst);
1396
1397 mesh_path_flush_by_iface(sdata);
1398 return 0;
1399 }
1400
1401 static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1402 const u8 *dst, const u8 *next_hop)
1403 {
1404 struct ieee80211_sub_if_data *sdata;
1405 struct mesh_path *mpath;
1406 struct sta_info *sta;
1407
1408 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1409
1410 rcu_read_lock();
1411
1412 sta = sta_info_get(sdata, next_hop);
1413 if (!sta) {
1414 rcu_read_unlock();
1415 return -ENOENT;
1416 }
1417
1418 mpath = mesh_path_lookup(sdata, dst);
1419 if (!mpath) {
1420 rcu_read_unlock();
1421 return -ENOENT;
1422 }
1423
1424 mesh_path_fix_nexthop(mpath, sta);
1425
1426 rcu_read_unlock();
1427 return 0;
1428 }
1429
1430 static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1431 struct mpath_info *pinfo)
1432 {
1433 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1434
1435 if (next_hop_sta)
1436 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
1437 else
1438 memset(next_hop, 0, ETH_ALEN);
1439
1440 memset(pinfo, 0, sizeof(*pinfo));
1441
1442 pinfo->generation = mesh_paths_generation;
1443
1444 pinfo->filled = MPATH_INFO_FRAME_QLEN |
1445 MPATH_INFO_SN |
1446 MPATH_INFO_METRIC |
1447 MPATH_INFO_EXPTIME |
1448 MPATH_INFO_DISCOVERY_TIMEOUT |
1449 MPATH_INFO_DISCOVERY_RETRIES |
1450 MPATH_INFO_FLAGS;
1451
1452 pinfo->frame_qlen = mpath->frame_queue.qlen;
1453 pinfo->sn = mpath->sn;
1454 pinfo->metric = mpath->metric;
1455 if (time_before(jiffies, mpath->exp_time))
1456 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1457 pinfo->discovery_timeout =
1458 jiffies_to_msecs(mpath->discovery_timeout);
1459 pinfo->discovery_retries = mpath->discovery_retries;
1460 if (mpath->flags & MESH_PATH_ACTIVE)
1461 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1462 if (mpath->flags & MESH_PATH_RESOLVING)
1463 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
1464 if (mpath->flags & MESH_PATH_SN_VALID)
1465 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
1466 if (mpath->flags & MESH_PATH_FIXED)
1467 pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
1468 if (mpath->flags & MESH_PATH_RESOLVED)
1469 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
1470 }
1471
1472 static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1473 u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1474
1475 {
1476 struct ieee80211_sub_if_data *sdata;
1477 struct mesh_path *mpath;
1478
1479 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1480
1481 rcu_read_lock();
1482 mpath = mesh_path_lookup(sdata, dst);
1483 if (!mpath) {
1484 rcu_read_unlock();
1485 return -ENOENT;
1486 }
1487 memcpy(dst, mpath->dst, ETH_ALEN);
1488 mpath_set_pinfo(mpath, next_hop, pinfo);
1489 rcu_read_unlock();
1490 return 0;
1491 }
1492
1493 static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
1494 int idx, u8 *dst, u8 *next_hop,
1495 struct mpath_info *pinfo)
1496 {
1497 struct ieee80211_sub_if_data *sdata;
1498 struct mesh_path *mpath;
1499
1500 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1501
1502 rcu_read_lock();
1503 mpath = mesh_path_lookup_by_idx(sdata, idx);
1504 if (!mpath) {
1505 rcu_read_unlock();
1506 return -ENOENT;
1507 }
1508 memcpy(dst, mpath->dst, ETH_ALEN);
1509 mpath_set_pinfo(mpath, next_hop, pinfo);
1510 rcu_read_unlock();
1511 return 0;
1512 }
1513
1514 static int ieee80211_get_mesh_config(struct wiphy *wiphy,
1515 struct net_device *dev,
1516 struct mesh_config *conf)
1517 {
1518 struct ieee80211_sub_if_data *sdata;
1519 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1520
1521 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1522 return 0;
1523 }
1524
1525 static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1526 {
1527 return (mask >> (parm-1)) & 0x1;
1528 }
1529
1530 static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1531 const struct mesh_setup *setup)
1532 {
1533 u8 *new_ie;
1534 const u8 *old_ie;
1535 struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1536 struct ieee80211_sub_if_data, u.mesh);
1537
1538 /* allocate information elements */
1539 new_ie = NULL;
1540 old_ie = ifmsh->ie;
1541
1542 if (setup->ie_len) {
1543 new_ie = kmemdup(setup->ie, setup->ie_len,
1544 GFP_KERNEL);
1545 if (!new_ie)
1546 return -ENOMEM;
1547 }
1548 ifmsh->ie_len = setup->ie_len;
1549 ifmsh->ie = new_ie;
1550 kfree(old_ie);
1551
1552 /* now copy the rest of the setup parameters */
1553 ifmsh->mesh_id_len = setup->mesh_id_len;
1554 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
1555 ifmsh->mesh_sp_id = setup->sync_method;
1556 ifmsh->mesh_pp_id = setup->path_sel_proto;
1557 ifmsh->mesh_pm_id = setup->path_metric;
1558 ifmsh->user_mpm = setup->user_mpm;
1559 ifmsh->mesh_auth_id = setup->auth_id;
1560 ifmsh->security = IEEE80211_MESH_SEC_NONE;
1561 if (setup->is_authenticated)
1562 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1563 if (setup->is_secure)
1564 ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
1565
1566 /* mcast rate setting in Mesh Node */
1567 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1568 sizeof(setup->mcast_rate));
1569 sdata->vif.bss_conf.basic_rates = setup->basic_rates;
1570
1571 sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1572 sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1573
1574 return 0;
1575 }
1576
1577 static int ieee80211_update_mesh_config(struct wiphy *wiphy,
1578 struct net_device *dev, u32 mask,
1579 const struct mesh_config *nconf)
1580 {
1581 struct mesh_config *conf;
1582 struct ieee80211_sub_if_data *sdata;
1583 struct ieee80211_if_mesh *ifmsh;
1584
1585 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1586 ifmsh = &sdata->u.mesh;
1587
1588 /* Set the config options which we are interested in setting */
1589 conf = &(sdata->u.mesh.mshcfg);
1590 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1591 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1592 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1593 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1594 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1595 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1596 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1597 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1598 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1599 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1600 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1601 conf->dot11MeshTTL = nconf->dot11MeshTTL;
1602 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
1603 conf->element_ttl = nconf->element_ttl;
1604 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1605 if (ifmsh->user_mpm)
1606 return -EBUSY;
1607 conf->auto_open_plinks = nconf->auto_open_plinks;
1608 }
1609 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1610 conf->dot11MeshNbrOffsetMaxNeighbor =
1611 nconf->dot11MeshNbrOffsetMaxNeighbor;
1612 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1613 conf->dot11MeshHWMPmaxPREQretries =
1614 nconf->dot11MeshHWMPmaxPREQretries;
1615 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1616 conf->path_refresh_time = nconf->path_refresh_time;
1617 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1618 conf->min_discovery_timeout = nconf->min_discovery_timeout;
1619 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1620 conf->dot11MeshHWMPactivePathTimeout =
1621 nconf->dot11MeshHWMPactivePathTimeout;
1622 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1623 conf->dot11MeshHWMPpreqMinInterval =
1624 nconf->dot11MeshHWMPpreqMinInterval;
1625 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1626 conf->dot11MeshHWMPperrMinInterval =
1627 nconf->dot11MeshHWMPperrMinInterval;
1628 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1629 mask))
1630 conf->dot11MeshHWMPnetDiameterTraversalTime =
1631 nconf->dot11MeshHWMPnetDiameterTraversalTime;
1632 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1633 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1634 ieee80211_mesh_root_setup(ifmsh);
1635 }
1636 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
1637 /* our current gate announcement implementation rides on root
1638 * announcements, so require this ifmsh to also be a root node
1639 * */
1640 if (nconf->dot11MeshGateAnnouncementProtocol &&
1641 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1642 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
1643 ieee80211_mesh_root_setup(ifmsh);
1644 }
1645 conf->dot11MeshGateAnnouncementProtocol =
1646 nconf->dot11MeshGateAnnouncementProtocol;
1647 }
1648 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
1649 conf->dot11MeshHWMPRannInterval =
1650 nconf->dot11MeshHWMPRannInterval;
1651 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1652 conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
1653 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1654 /* our RSSI threshold implementation is supported only for
1655 * devices that report signal in dBm.
1656 */
1657 if (!(sdata->local->hw.flags & IEEE80211_HW_SIGNAL_DBM))
1658 return -ENOTSUPP;
1659 conf->rssi_threshold = nconf->rssi_threshold;
1660 }
1661 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1662 conf->ht_opmode = nconf->ht_opmode;
1663 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1664 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1665 }
1666 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1667 conf->dot11MeshHWMPactivePathToRootTimeout =
1668 nconf->dot11MeshHWMPactivePathToRootTimeout;
1669 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1670 conf->dot11MeshHWMProotInterval =
1671 nconf->dot11MeshHWMProotInterval;
1672 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1673 conf->dot11MeshHWMPconfirmationInterval =
1674 nconf->dot11MeshHWMPconfirmationInterval;
1675 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1676 conf->power_mode = nconf->power_mode;
1677 ieee80211_mps_local_status_update(sdata);
1678 }
1679 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
1680 conf->dot11MeshAwakeWindowDuration =
1681 nconf->dot11MeshAwakeWindowDuration;
1682 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
1683 conf->plink_timeout = nconf->plink_timeout;
1684 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
1685 return 0;
1686 }
1687
1688 static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1689 const struct mesh_config *conf,
1690 const struct mesh_setup *setup)
1691 {
1692 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1693 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1694 int err;
1695
1696 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1697 err = copy_mesh_setup(ifmsh, setup);
1698 if (err)
1699 return err;
1700
1701 /* can mesh use other SMPS modes? */
1702 sdata->smps_mode = IEEE80211_SMPS_OFF;
1703 sdata->needed_rx_chains = sdata->local->rx_chains;
1704
1705 mutex_lock(&sdata->local->mtx);
1706 err = ieee80211_vif_use_channel(sdata, &setup->chandef,
1707 IEEE80211_CHANCTX_SHARED);
1708 mutex_unlock(&sdata->local->mtx);
1709 if (err)
1710 return err;
1711
1712 return ieee80211_start_mesh(sdata);
1713 }
1714
1715 static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1716 {
1717 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1718
1719 ieee80211_stop_mesh(sdata);
1720 mutex_lock(&sdata->local->mtx);
1721 ieee80211_vif_release_channel(sdata);
1722 mutex_unlock(&sdata->local->mtx);
1723
1724 return 0;
1725 }
1726 #endif
1727
1728 static int ieee80211_change_bss(struct wiphy *wiphy,
1729 struct net_device *dev,
1730 struct bss_parameters *params)
1731 {
1732 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1733 enum ieee80211_band band;
1734 u32 changed = 0;
1735
1736 if (!sdata_dereference(sdata->u.ap.beacon, sdata))
1737 return -ENOENT;
1738
1739 band = ieee80211_get_sdata_band(sdata);
1740
1741 if (params->use_cts_prot >= 0) {
1742 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
1743 changed |= BSS_CHANGED_ERP_CTS_PROT;
1744 }
1745 if (params->use_short_preamble >= 0) {
1746 sdata->vif.bss_conf.use_short_preamble =
1747 params->use_short_preamble;
1748 changed |= BSS_CHANGED_ERP_PREAMBLE;
1749 }
1750
1751 if (!sdata->vif.bss_conf.use_short_slot &&
1752 band == IEEE80211_BAND_5GHZ) {
1753 sdata->vif.bss_conf.use_short_slot = true;
1754 changed |= BSS_CHANGED_ERP_SLOT;
1755 }
1756
1757 if (params->use_short_slot_time >= 0) {
1758 sdata->vif.bss_conf.use_short_slot =
1759 params->use_short_slot_time;
1760 changed |= BSS_CHANGED_ERP_SLOT;
1761 }
1762
1763 if (params->basic_rates) {
1764 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1765 wiphy->bands[band],
1766 params->basic_rates,
1767 params->basic_rates_len,
1768 &sdata->vif.bss_conf.basic_rates);
1769 changed |= BSS_CHANGED_BASIC_RATES;
1770 }
1771
1772 if (params->ap_isolate >= 0) {
1773 if (params->ap_isolate)
1774 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1775 else
1776 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1777 }
1778
1779 if (params->ht_opmode >= 0) {
1780 sdata->vif.bss_conf.ht_operation_mode =
1781 (u16) params->ht_opmode;
1782 changed |= BSS_CHANGED_HT;
1783 }
1784
1785 if (params->p2p_ctwindow >= 0) {
1786 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1787 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1788 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1789 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1790 changed |= BSS_CHANGED_P2P_PS;
1791 }
1792
1793 if (params->p2p_opp_ps > 0) {
1794 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1795 IEEE80211_P2P_OPPPS_ENABLE_BIT;
1796 changed |= BSS_CHANGED_P2P_PS;
1797 } else if (params->p2p_opp_ps == 0) {
1798 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1799 ~IEEE80211_P2P_OPPPS_ENABLE_BIT;
1800 changed |= BSS_CHANGED_P2P_PS;
1801 }
1802
1803 ieee80211_bss_info_change_notify(sdata, changed);
1804
1805 return 0;
1806 }
1807
1808 static int ieee80211_set_txq_params(struct wiphy *wiphy,
1809 struct net_device *dev,
1810 struct ieee80211_txq_params *params)
1811 {
1812 struct ieee80211_local *local = wiphy_priv(wiphy);
1813 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1814 struct ieee80211_tx_queue_params p;
1815
1816 if (!local->ops->conf_tx)
1817 return -EOPNOTSUPP;
1818
1819 if (local->hw.queues < IEEE80211_NUM_ACS)
1820 return -EOPNOTSUPP;
1821
1822 memset(&p, 0, sizeof(p));
1823 p.aifs = params->aifs;
1824 p.cw_max = params->cwmax;
1825 p.cw_min = params->cwmin;
1826 p.txop = params->txop;
1827
1828 /*
1829 * Setting tx queue params disables u-apsd because it's only
1830 * called in master mode.
1831 */
1832 p.uapsd = false;
1833
1834 sdata->tx_conf[params->ac] = p;
1835 if (drv_conf_tx(local, sdata, params->ac, &p)) {
1836 wiphy_debug(local->hw.wiphy,
1837 "failed to set TX queue parameters for AC %d\n",
1838 params->ac);
1839 return -EINVAL;
1840 }
1841
1842 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
1843
1844 return 0;
1845 }
1846
1847 #ifdef CONFIG_PM
1848 static int ieee80211_suspend(struct wiphy *wiphy,
1849 struct cfg80211_wowlan *wowlan)
1850 {
1851 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
1852 }
1853
1854 static int ieee80211_resume(struct wiphy *wiphy)
1855 {
1856 return __ieee80211_resume(wiphy_priv(wiphy));
1857 }
1858 #else
1859 #define ieee80211_suspend NULL
1860 #define ieee80211_resume NULL
1861 #endif
1862
1863 static int ieee80211_scan(struct wiphy *wiphy,
1864 struct cfg80211_scan_request *req)
1865 {
1866 struct ieee80211_sub_if_data *sdata;
1867
1868 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
1869
1870 switch (ieee80211_vif_type_p2p(&sdata->vif)) {
1871 case NL80211_IFTYPE_STATION:
1872 case NL80211_IFTYPE_ADHOC:
1873 case NL80211_IFTYPE_MESH_POINT:
1874 case NL80211_IFTYPE_P2P_CLIENT:
1875 case NL80211_IFTYPE_P2P_DEVICE:
1876 break;
1877 case NL80211_IFTYPE_P2P_GO:
1878 if (sdata->local->ops->hw_scan)
1879 break;
1880 /*
1881 * FIXME: implement NoA while scanning in software,
1882 * for now fall through to allow scanning only when
1883 * beaconing hasn't been configured yet
1884 */
1885 case NL80211_IFTYPE_AP:
1886 /*
1887 * If the scan has been forced (and the driver supports
1888 * forcing), don't care about being beaconing already.
1889 * This will create problems to the attached stations (e.g. all
1890 * the frames sent while scanning on other channel will be
1891 * lost)
1892 */
1893 if (sdata->u.ap.beacon &&
1894 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
1895 !(req->flags & NL80211_SCAN_FLAG_AP)))
1896 return -EOPNOTSUPP;
1897 break;
1898 default:
1899 return -EOPNOTSUPP;
1900 }
1901
1902 return ieee80211_request_scan(sdata, req);
1903 }
1904
1905 static int
1906 ieee80211_sched_scan_start(struct wiphy *wiphy,
1907 struct net_device *dev,
1908 struct cfg80211_sched_scan_request *req)
1909 {
1910 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1911
1912 if (!sdata->local->ops->sched_scan_start)
1913 return -EOPNOTSUPP;
1914
1915 return ieee80211_request_sched_scan_start(sdata, req);
1916 }
1917
1918 static int
1919 ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
1920 {
1921 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1922
1923 if (!sdata->local->ops->sched_scan_stop)
1924 return -EOPNOTSUPP;
1925
1926 return ieee80211_request_sched_scan_stop(sdata);
1927 }
1928
1929 static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
1930 struct cfg80211_auth_request *req)
1931 {
1932 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
1933 }
1934
1935 static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
1936 struct cfg80211_assoc_request *req)
1937 {
1938 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
1939 }
1940
1941 static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
1942 struct cfg80211_deauth_request *req)
1943 {
1944 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
1945 }
1946
1947 static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
1948 struct cfg80211_disassoc_request *req)
1949 {
1950 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
1951 }
1952
1953 static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
1954 struct cfg80211_ibss_params *params)
1955 {
1956 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
1957 }
1958
1959 static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
1960 {
1961 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
1962 }
1963
1964 static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
1965 int rate[IEEE80211_NUM_BANDS])
1966 {
1967 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1968
1969 memcpy(sdata->vif.bss_conf.mcast_rate, rate,
1970 sizeof(int) * IEEE80211_NUM_BANDS);
1971
1972 return 0;
1973 }
1974
1975 static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1976 {
1977 struct ieee80211_local *local = wiphy_priv(wiphy);
1978 int err;
1979
1980 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
1981 err = drv_set_frag_threshold(local, wiphy->frag_threshold);
1982
1983 if (err)
1984 return err;
1985 }
1986
1987 if (changed & WIPHY_PARAM_COVERAGE_CLASS) {
1988 err = drv_set_coverage_class(local, wiphy->coverage_class);
1989
1990 if (err)
1991 return err;
1992 }
1993
1994 if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
1995 err = drv_set_rts_threshold(local, wiphy->rts_threshold);
1996
1997 if (err)
1998 return err;
1999 }
2000
2001 if (changed & WIPHY_PARAM_RETRY_SHORT) {
2002 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2003 return -EINVAL;
2004 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
2005 }
2006 if (changed & WIPHY_PARAM_RETRY_LONG) {
2007 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2008 return -EINVAL;
2009 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
2010 }
2011 if (changed &
2012 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2013 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2014
2015 return 0;
2016 }
2017
2018 static int ieee80211_set_tx_power(struct wiphy *wiphy,
2019 struct wireless_dev *wdev,
2020 enum nl80211_tx_power_setting type, int mbm)
2021 {
2022 struct ieee80211_local *local = wiphy_priv(wiphy);
2023 struct ieee80211_sub_if_data *sdata;
2024
2025 if (wdev) {
2026 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2027
2028 switch (type) {
2029 case NL80211_TX_POWER_AUTOMATIC:
2030 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2031 break;
2032 case NL80211_TX_POWER_LIMITED:
2033 case NL80211_TX_POWER_FIXED:
2034 if (mbm < 0 || (mbm % 100))
2035 return -EOPNOTSUPP;
2036 sdata->user_power_level = MBM_TO_DBM(mbm);
2037 break;
2038 }
2039
2040 ieee80211_recalc_txpower(sdata);
2041
2042 return 0;
2043 }
2044
2045 switch (type) {
2046 case NL80211_TX_POWER_AUTOMATIC:
2047 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2048 break;
2049 case NL80211_TX_POWER_LIMITED:
2050 case NL80211_TX_POWER_FIXED:
2051 if (mbm < 0 || (mbm % 100))
2052 return -EOPNOTSUPP;
2053 local->user_power_level = MBM_TO_DBM(mbm);
2054 break;
2055 }
2056
2057 mutex_lock(&local->iflist_mtx);
2058 list_for_each_entry(sdata, &local->interfaces, list)
2059 sdata->user_power_level = local->user_power_level;
2060 list_for_each_entry(sdata, &local->interfaces, list)
2061 ieee80211_recalc_txpower(sdata);
2062 mutex_unlock(&local->iflist_mtx);
2063
2064 return 0;
2065 }
2066
2067 static int ieee80211_get_tx_power(struct wiphy *wiphy,
2068 struct wireless_dev *wdev,
2069 int *dbm)
2070 {
2071 struct ieee80211_local *local = wiphy_priv(wiphy);
2072 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2073
2074 if (!local->use_chanctx)
2075 *dbm = local->hw.conf.power_level;
2076 else
2077 *dbm = sdata->vif.bss_conf.txpower;
2078
2079 return 0;
2080 }
2081
2082 static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
2083 const u8 *addr)
2084 {
2085 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2086
2087 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2088
2089 return 0;
2090 }
2091
2092 static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2093 {
2094 struct ieee80211_local *local = wiphy_priv(wiphy);
2095
2096 drv_rfkill_poll(local);
2097 }
2098
2099 #ifdef CONFIG_NL80211_TESTMODE
2100 static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2101 struct wireless_dev *wdev,
2102 void *data, int len)
2103 {
2104 struct ieee80211_local *local = wiphy_priv(wiphy);
2105 struct ieee80211_vif *vif = NULL;
2106
2107 if (!local->ops->testmode_cmd)
2108 return -EOPNOTSUPP;
2109
2110 if (wdev) {
2111 struct ieee80211_sub_if_data *sdata;
2112
2113 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2114 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2115 vif = &sdata->vif;
2116 }
2117
2118 return local->ops->testmode_cmd(&local->hw, vif, data, len);
2119 }
2120
2121 static int ieee80211_testmode_dump(struct wiphy *wiphy,
2122 struct sk_buff *skb,
2123 struct netlink_callback *cb,
2124 void *data, int len)
2125 {
2126 struct ieee80211_local *local = wiphy_priv(wiphy);
2127
2128 if (!local->ops->testmode_dump)
2129 return -EOPNOTSUPP;
2130
2131 return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2132 }
2133 #endif
2134
2135 int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2136 enum ieee80211_smps_mode smps_mode)
2137 {
2138 struct sta_info *sta;
2139 enum ieee80211_smps_mode old_req;
2140 int i;
2141
2142 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2143 return -EINVAL;
2144
2145 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2146 return 0;
2147
2148 old_req = sdata->u.ap.req_smps;
2149 sdata->u.ap.req_smps = smps_mode;
2150
2151 /* AUTOMATIC doesn't mean much for AP - don't allow it */
2152 if (old_req == smps_mode ||
2153 smps_mode == IEEE80211_SMPS_AUTOMATIC)
2154 return 0;
2155
2156 /* If no associated stations, there's no need to do anything */
2157 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) {
2158 sdata->smps_mode = smps_mode;
2159 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2160 return 0;
2161 }
2162
2163 ht_dbg(sdata,
2164 "SMSP %d requested in AP mode, sending Action frame to %d stations\n",
2165 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2166
2167 mutex_lock(&sdata->local->sta_mtx);
2168 for (i = 0; i < STA_HASH_SIZE; i++) {
2169 for (sta = rcu_dereference_protected(sdata->local->sta_hash[i],
2170 lockdep_is_held(&sdata->local->sta_mtx));
2171 sta;
2172 sta = rcu_dereference_protected(sta->hnext,
2173 lockdep_is_held(&sdata->local->sta_mtx))) {
2174 /*
2175 * Only stations associated to our AP and
2176 * associated VLANs
2177 */
2178 if (sta->sdata->bss != &sdata->u.ap)
2179 continue;
2180
2181 /* This station doesn't support MIMO - skip it */
2182 if (sta_info_tx_streams(sta) == 1)
2183 continue;
2184
2185 /*
2186 * Don't wake up a STA just to send the action frame
2187 * unless we are getting more restrictive.
2188 */
2189 if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2190 !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2191 smps_mode)) {
2192 ht_dbg(sdata,
2193 "Won't send SMPS to sleeping STA %pM\n",
2194 sta->sta.addr);
2195 continue;
2196 }
2197
2198 /*
2199 * If the STA is not authorized, wait until it gets
2200 * authorized and the action frame will be sent then.
2201 */
2202 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2203 continue;
2204
2205 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2206 ieee80211_send_smps_action(sdata, smps_mode,
2207 sta->sta.addr,
2208 sdata->vif.bss_conf.bssid);
2209 }
2210 }
2211 mutex_unlock(&sdata->local->sta_mtx);
2212
2213 sdata->smps_mode = smps_mode;
2214 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2215
2216 return 0;
2217 }
2218
2219 int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2220 enum ieee80211_smps_mode smps_mode)
2221 {
2222 const u8 *ap;
2223 enum ieee80211_smps_mode old_req;
2224 int err;
2225
2226 lockdep_assert_held(&sdata->wdev.mtx);
2227
2228 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2229 return -EINVAL;
2230
2231 old_req = sdata->u.mgd.req_smps;
2232 sdata->u.mgd.req_smps = smps_mode;
2233
2234 if (old_req == smps_mode &&
2235 smps_mode != IEEE80211_SMPS_AUTOMATIC)
2236 return 0;
2237
2238 /*
2239 * If not associated, or current association is not an HT
2240 * association, there's no need to do anything, just store
2241 * the new value until we associate.
2242 */
2243 if (!sdata->u.mgd.associated ||
2244 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2245 return 0;
2246
2247 ap = sdata->u.mgd.associated->bssid;
2248
2249 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
2250 if (sdata->u.mgd.powersave)
2251 smps_mode = IEEE80211_SMPS_DYNAMIC;
2252 else
2253 smps_mode = IEEE80211_SMPS_OFF;
2254 }
2255
2256 /* send SM PS frame to AP */
2257 err = ieee80211_send_smps_action(sdata, smps_mode,
2258 ap, ap);
2259 if (err)
2260 sdata->u.mgd.req_smps = old_req;
2261
2262 return err;
2263 }
2264
2265 static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2266 bool enabled, int timeout)
2267 {
2268 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2269 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2270
2271 if (sdata->vif.type != NL80211_IFTYPE_STATION)
2272 return -EOPNOTSUPP;
2273
2274 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS))
2275 return -EOPNOTSUPP;
2276
2277 if (enabled == sdata->u.mgd.powersave &&
2278 timeout == local->dynamic_ps_forced_timeout)
2279 return 0;
2280
2281 sdata->u.mgd.powersave = enabled;
2282 local->dynamic_ps_forced_timeout = timeout;
2283
2284 /* no change, but if automatic follow powersave */
2285 sdata_lock(sdata);
2286 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
2287 sdata_unlock(sdata);
2288
2289 if (local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)
2290 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2291
2292 ieee80211_recalc_ps(local, -1);
2293 ieee80211_recalc_ps_vif(sdata);
2294
2295 return 0;
2296 }
2297
2298 static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2299 struct net_device *dev,
2300 s32 rssi_thold, u32 rssi_hyst)
2301 {
2302 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2303 struct ieee80211_vif *vif = &sdata->vif;
2304 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2305
2306 if (rssi_thold == bss_conf->cqm_rssi_thold &&
2307 rssi_hyst == bss_conf->cqm_rssi_hyst)
2308 return 0;
2309
2310 bss_conf->cqm_rssi_thold = rssi_thold;
2311 bss_conf->cqm_rssi_hyst = rssi_hyst;
2312
2313 /* tell the driver upon association, unless already associated */
2314 if (sdata->u.mgd.associated &&
2315 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2316 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2317
2318 return 0;
2319 }
2320
2321 static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2322 struct net_device *dev,
2323 const u8 *addr,
2324 const struct cfg80211_bitrate_mask *mask)
2325 {
2326 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2327 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2328 int i, ret;
2329
2330 if (!ieee80211_sdata_running(sdata))
2331 return -ENETDOWN;
2332
2333 if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) {
2334 ret = drv_set_bitrate_mask(local, sdata, mask);
2335 if (ret)
2336 return ret;
2337 }
2338
2339 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
2340 struct ieee80211_supported_band *sband = wiphy->bands[i];
2341 int j;
2342
2343 sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
2344 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2345 sizeof(mask->control[i].ht_mcs));
2346
2347 sdata->rc_has_mcs_mask[i] = false;
2348 if (!sband)
2349 continue;
2350
2351 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++)
2352 if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2353 sdata->rc_has_mcs_mask[i] = true;
2354 break;
2355 }
2356 }
2357
2358 return 0;
2359 }
2360
2361 static int ieee80211_start_roc_work(struct ieee80211_local *local,
2362 struct ieee80211_sub_if_data *sdata,
2363 struct ieee80211_channel *channel,
2364 unsigned int duration, u64 *cookie,
2365 struct sk_buff *txskb,
2366 enum ieee80211_roc_type type)
2367 {
2368 struct ieee80211_roc_work *roc, *tmp;
2369 bool queued = false;
2370 int ret;
2371
2372 lockdep_assert_held(&local->mtx);
2373
2374 if (local->use_chanctx && !local->ops->remain_on_channel)
2375 return -EOPNOTSUPP;
2376
2377 roc = kzalloc(sizeof(*roc), GFP_KERNEL);
2378 if (!roc)
2379 return -ENOMEM;
2380
2381 /*
2382 * If the duration is zero, then the driver
2383 * wouldn't actually do anything. Set it to
2384 * 10 for now.
2385 *
2386 * TODO: cancel the off-channel operation
2387 * when we get the SKB's TX status and
2388 * the wait time was zero before.
2389 */
2390 if (!duration)
2391 duration = 10;
2392
2393 roc->chan = channel;
2394 roc->duration = duration;
2395 roc->req_duration = duration;
2396 roc->frame = txskb;
2397 roc->type = type;
2398 roc->mgmt_tx_cookie = (unsigned long)txskb;
2399 roc->sdata = sdata;
2400 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
2401 INIT_LIST_HEAD(&roc->dependents);
2402
2403 /*
2404 * cookie is either the roc cookie (for normal roc)
2405 * or the SKB (for mgmt TX)
2406 */
2407 if (!txskb) {
2408 /* local->mtx protects this */
2409 local->roc_cookie_counter++;
2410 roc->cookie = local->roc_cookie_counter;
2411 /* wow, you wrapped 64 bits ... more likely a bug */
2412 if (WARN_ON(roc->cookie == 0)) {
2413 roc->cookie = 1;
2414 local->roc_cookie_counter++;
2415 }
2416 *cookie = roc->cookie;
2417 } else {
2418 *cookie = (unsigned long)txskb;
2419 }
2420
2421 /* if there's one pending or we're scanning, queue this one */
2422 if (!list_empty(&local->roc_list) ||
2423 local->scanning || local->radar_detect_enabled)
2424 goto out_check_combine;
2425
2426 /* if not HW assist, just queue & schedule work */
2427 if (!local->ops->remain_on_channel) {
2428 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
2429 goto out_queue;
2430 }
2431
2432 /* otherwise actually kick it off here (for error handling) */
2433
2434 ret = drv_remain_on_channel(local, sdata, channel, duration, type);
2435 if (ret) {
2436 kfree(roc);
2437 return ret;
2438 }
2439
2440 roc->started = true;
2441 goto out_queue;
2442
2443 out_check_combine:
2444 list_for_each_entry(tmp, &local->roc_list, list) {
2445 if (tmp->chan != channel || tmp->sdata != sdata)
2446 continue;
2447
2448 /*
2449 * Extend this ROC if possible:
2450 *
2451 * If it hasn't started yet, just increase the duration
2452 * and add the new one to the list of dependents.
2453 * If the type of the new ROC has higher priority, modify the
2454 * type of the previous one to match that of the new one.
2455 */
2456 if (!tmp->started) {
2457 list_add_tail(&roc->list, &tmp->dependents);
2458 tmp->duration = max(tmp->duration, roc->duration);
2459 tmp->type = max(tmp->type, roc->type);
2460 queued = true;
2461 break;
2462 }
2463
2464 /* If it has already started, it's more difficult ... */
2465 if (local->ops->remain_on_channel) {
2466 unsigned long j = jiffies;
2467
2468 /*
2469 * In the offloaded ROC case, if it hasn't begun, add
2470 * this new one to the dependent list to be handled
2471 * when the master one begins. If it has begun,
2472 * check that there's still a minimum time left and
2473 * if so, start this one, transmitting the frame, but
2474 * add it to the list directly after this one with
2475 * a reduced time so we'll ask the driver to execute
2476 * it right after finishing the previous one, in the
2477 * hope that it'll also be executed right afterwards,
2478 * effectively extending the old one.
2479 * If there's no minimum time left, just add it to the
2480 * normal list.
2481 * TODO: the ROC type is ignored here, assuming that it
2482 * is better to immediately use the current ROC.
2483 */
2484 if (!tmp->hw_begun) {
2485 list_add_tail(&roc->list, &tmp->dependents);
2486 queued = true;
2487 break;
2488 }
2489
2490 if (time_before(j + IEEE80211_ROC_MIN_LEFT,
2491 tmp->hw_start_time +
2492 msecs_to_jiffies(tmp->duration))) {
2493 int new_dur;
2494
2495 ieee80211_handle_roc_started(roc);
2496
2497 new_dur = roc->duration -
2498 jiffies_to_msecs(tmp->hw_start_time +
2499 msecs_to_jiffies(
2500 tmp->duration) -
2501 j);
2502
2503 if (new_dur > 0) {
2504 /* add right after tmp */
2505 list_add(&roc->list, &tmp->list);
2506 } else {
2507 list_add_tail(&roc->list,
2508 &tmp->dependents);
2509 }
2510 queued = true;
2511 }
2512 } else if (del_timer_sync(&tmp->work.timer)) {
2513 unsigned long new_end;
2514
2515 /*
2516 * In the software ROC case, cancel the timer, if
2517 * that fails then the finish work is already
2518 * queued/pending and thus we queue the new ROC
2519 * normally, if that succeeds then we can extend
2520 * the timer duration and TX the frame (if any.)
2521 */
2522
2523 list_add_tail(&roc->list, &tmp->dependents);
2524 queued = true;
2525
2526 new_end = jiffies + msecs_to_jiffies(roc->duration);
2527
2528 /* ok, it was started & we canceled timer */
2529 if (time_after(new_end, tmp->work.timer.expires))
2530 mod_timer(&tmp->work.timer, new_end);
2531 else
2532 add_timer(&tmp->work.timer);
2533
2534 ieee80211_handle_roc_started(roc);
2535 }
2536 break;
2537 }
2538
2539 out_queue:
2540 if (!queued)
2541 list_add_tail(&roc->list, &local->roc_list);
2542
2543 return 0;
2544 }
2545
2546 static int ieee80211_remain_on_channel(struct wiphy *wiphy,
2547 struct wireless_dev *wdev,
2548 struct ieee80211_channel *chan,
2549 unsigned int duration,
2550 u64 *cookie)
2551 {
2552 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2553 struct ieee80211_local *local = sdata->local;
2554 int ret;
2555
2556 mutex_lock(&local->mtx);
2557 ret = ieee80211_start_roc_work(local, sdata, chan,
2558 duration, cookie, NULL,
2559 IEEE80211_ROC_TYPE_NORMAL);
2560 mutex_unlock(&local->mtx);
2561
2562 return ret;
2563 }
2564
2565 static int ieee80211_cancel_roc(struct ieee80211_local *local,
2566 u64 cookie, bool mgmt_tx)
2567 {
2568 struct ieee80211_roc_work *roc, *tmp, *found = NULL;
2569 int ret;
2570
2571 mutex_lock(&local->mtx);
2572 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
2573 struct ieee80211_roc_work *dep, *tmp2;
2574
2575 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) {
2576 if (!mgmt_tx && dep->cookie != cookie)
2577 continue;
2578 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie)
2579 continue;
2580 /* found dependent item -- just remove it */
2581 list_del(&dep->list);
2582 mutex_unlock(&local->mtx);
2583
2584 ieee80211_roc_notify_destroy(dep, true);
2585 return 0;
2586 }
2587
2588 if (!mgmt_tx && roc->cookie != cookie)
2589 continue;
2590 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie)
2591 continue;
2592
2593 found = roc;
2594 break;
2595 }
2596
2597 if (!found) {
2598 mutex_unlock(&local->mtx);
2599 return -ENOENT;
2600 }
2601
2602 /*
2603 * We found the item to cancel, so do that. Note that it
2604 * may have dependents, which we also cancel (and send
2605 * the expired signal for.) Not doing so would be quite
2606 * tricky here, but we may need to fix it later.
2607 */
2608
2609 if (local->ops->remain_on_channel) {
2610 if (found->started) {
2611 ret = drv_cancel_remain_on_channel(local);
2612 if (WARN_ON_ONCE(ret)) {
2613 mutex_unlock(&local->mtx);
2614 return ret;
2615 }
2616 }
2617
2618 list_del(&found->list);
2619
2620 if (found->started)
2621 ieee80211_start_next_roc(local);
2622 mutex_unlock(&local->mtx);
2623
2624 ieee80211_roc_notify_destroy(found, true);
2625 } else {
2626 /* work may be pending so use it all the time */
2627 found->abort = true;
2628 ieee80211_queue_delayed_work(&local->hw, &found->work, 0);
2629
2630 mutex_unlock(&local->mtx);
2631
2632 /* work will clean up etc */
2633 flush_delayed_work(&found->work);
2634 WARN_ON(!found->to_be_freed);
2635 kfree(found);
2636 }
2637
2638 return 0;
2639 }
2640
2641 static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy,
2642 struct wireless_dev *wdev,
2643 u64 cookie)
2644 {
2645 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2646 struct ieee80211_local *local = sdata->local;
2647
2648 return ieee80211_cancel_roc(local, cookie, false);
2649 }
2650
2651 static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2652 struct net_device *dev,
2653 struct cfg80211_chan_def *chandef,
2654 u32 cac_time_ms)
2655 {
2656 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2657 struct ieee80211_local *local = sdata->local;
2658 int err;
2659
2660 mutex_lock(&local->mtx);
2661 if (!list_empty(&local->roc_list) || local->scanning) {
2662 err = -EBUSY;
2663 goto out_unlock;
2664 }
2665
2666 /* whatever, but channel contexts should not complain about that one */
2667 sdata->smps_mode = IEEE80211_SMPS_OFF;
2668 sdata->needed_rx_chains = local->rx_chains;
2669
2670 err = ieee80211_vif_use_channel(sdata, chandef,
2671 IEEE80211_CHANCTX_SHARED);
2672 if (err)
2673 goto out_unlock;
2674
2675 ieee80211_queue_delayed_work(&sdata->local->hw,
2676 &sdata->dfs_cac_timer_work,
2677 msecs_to_jiffies(cac_time_ms));
2678
2679 out_unlock:
2680 mutex_unlock(&local->mtx);
2681 return err;
2682 }
2683
2684 static struct cfg80211_beacon_data *
2685 cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2686 {
2687 struct cfg80211_beacon_data *new_beacon;
2688 u8 *pos;
2689 int len;
2690
2691 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2692 beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2693 beacon->probe_resp_len;
2694
2695 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2696 if (!new_beacon)
2697 return NULL;
2698
2699 pos = (u8 *)(new_beacon + 1);
2700 if (beacon->head_len) {
2701 new_beacon->head_len = beacon->head_len;
2702 new_beacon->head = pos;
2703 memcpy(pos, beacon->head, beacon->head_len);
2704 pos += beacon->head_len;
2705 }
2706 if (beacon->tail_len) {
2707 new_beacon->tail_len = beacon->tail_len;
2708 new_beacon->tail = pos;
2709 memcpy(pos, beacon->tail, beacon->tail_len);
2710 pos += beacon->tail_len;
2711 }
2712 if (beacon->beacon_ies_len) {
2713 new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2714 new_beacon->beacon_ies = pos;
2715 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2716 pos += beacon->beacon_ies_len;
2717 }
2718 if (beacon->proberesp_ies_len) {
2719 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2720 new_beacon->proberesp_ies = pos;
2721 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2722 pos += beacon->proberesp_ies_len;
2723 }
2724 if (beacon->assocresp_ies_len) {
2725 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2726 new_beacon->assocresp_ies = pos;
2727 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2728 pos += beacon->assocresp_ies_len;
2729 }
2730 if (beacon->probe_resp_len) {
2731 new_beacon->probe_resp_len = beacon->probe_resp_len;
2732 beacon->probe_resp = pos;
2733 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2734 pos += beacon->probe_resp_len;
2735 }
2736
2737 return new_beacon;
2738 }
2739
2740 void ieee80211_csa_finish(struct ieee80211_vif *vif)
2741 {
2742 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2743
2744 ieee80211_queue_work(&sdata->local->hw,
2745 &sdata->csa_finalize_work);
2746 }
2747 EXPORT_SYMBOL(ieee80211_csa_finish);
2748
2749 static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2750 u32 *changed)
2751 {
2752 int err;
2753
2754 switch (sdata->vif.type) {
2755 case NL80211_IFTYPE_AP:
2756 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2757 NULL);
2758 kfree(sdata->u.ap.next_beacon);
2759 sdata->u.ap.next_beacon = NULL;
2760
2761 if (err < 0)
2762 return err;
2763 *changed |= err;
2764 break;
2765 case NL80211_IFTYPE_ADHOC:
2766 err = ieee80211_ibss_finish_csa(sdata);
2767 if (err < 0)
2768 return err;
2769 *changed |= err;
2770 break;
2771 #ifdef CONFIG_MAC80211_MESH
2772 case NL80211_IFTYPE_MESH_POINT:
2773 err = ieee80211_mesh_finish_csa(sdata);
2774 if (err < 0)
2775 return err;
2776 *changed |= err;
2777 break;
2778 #endif
2779 default:
2780 WARN_ON(1);
2781 return -EINVAL;
2782 }
2783
2784 return 0;
2785 }
2786
2787 static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2788 {
2789 struct ieee80211_local *local = sdata->local;
2790 u32 changed = 0;
2791 int err;
2792
2793 sdata_assert_lock(sdata);
2794 lockdep_assert_held(&local->mtx);
2795 lockdep_assert_held(&local->chanctx_mtx);
2796
2797 /*
2798 * using reservation isn't immediate as it may be deferred until later
2799 * with multi-vif. once reservation is complete it will re-schedule the
2800 * work with no reserved_chanctx so verify chandef to check if it
2801 * completed successfully
2802 */
2803
2804 if (sdata->reserved_chanctx) {
2805 /*
2806 * with multi-vif csa driver may call ieee80211_csa_finish()
2807 * many times while waiting for other interfaces to use their
2808 * reservations
2809 */
2810 if (sdata->reserved_ready)
2811 return 0;
2812
2813 err = ieee80211_vif_use_reserved_context(sdata);
2814 if (err)
2815 return err;
2816
2817 return 0;
2818 }
2819
2820 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2821 &sdata->csa_chandef))
2822 return -EINVAL;
2823
2824 sdata->vif.csa_active = false;
2825
2826 err = ieee80211_set_after_csa_beacon(sdata, &changed);
2827 if (err)
2828 return err;
2829
2830 ieee80211_bss_info_change_notify(sdata, changed);
2831 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
2832
2833 if (sdata->csa_block_tx) {
2834 ieee80211_wake_vif_queues(local, sdata,
2835 IEEE80211_QUEUE_STOP_REASON_CSA);
2836 sdata->csa_block_tx = false;
2837 }
2838
2839 return 0;
2840 }
2841
2842 static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2843 {
2844 if (__ieee80211_csa_finalize(sdata)) {
2845 sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
2846 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
2847 GFP_KERNEL);
2848 }
2849 }
2850
2851 void ieee80211_csa_finalize_work(struct work_struct *work)
2852 {
2853 struct ieee80211_sub_if_data *sdata =
2854 container_of(work, struct ieee80211_sub_if_data,
2855 csa_finalize_work);
2856 struct ieee80211_local *local = sdata->local;
2857
2858 sdata_lock(sdata);
2859 mutex_lock(&local->mtx);
2860 mutex_lock(&local->chanctx_mtx);
2861
2862 /* AP might have been stopped while waiting for the lock. */
2863 if (!sdata->vif.csa_active)
2864 goto unlock;
2865
2866 if (!ieee80211_sdata_running(sdata))
2867 goto unlock;
2868
2869 ieee80211_csa_finalize(sdata);
2870
2871 unlock:
2872 mutex_unlock(&local->chanctx_mtx);
2873 mutex_unlock(&local->mtx);
2874 sdata_unlock(sdata);
2875 }
2876
2877 static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
2878 struct cfg80211_csa_settings *params,
2879 u32 *changed)
2880 {
2881 struct ieee80211_csa_settings csa = {};
2882 int err;
2883
2884 switch (sdata->vif.type) {
2885 case NL80211_IFTYPE_AP:
2886 sdata->u.ap.next_beacon =
2887 cfg80211_beacon_dup(&params->beacon_after);
2888 if (!sdata->u.ap.next_beacon)
2889 return -ENOMEM;
2890
2891 /*
2892 * With a count of 0, we don't have to wait for any
2893 * TBTT before switching, so complete the CSA
2894 * immediately. In theory, with a count == 1 we
2895 * should delay the switch until just before the next
2896 * TBTT, but that would complicate things so we switch
2897 * immediately too. If we would delay the switch
2898 * until the next TBTT, we would have to set the probe
2899 * response here.
2900 *
2901 * TODO: A channel switch with count <= 1 without
2902 * sending a CSA action frame is kind of useless,
2903 * because the clients won't know we're changing
2904 * channels. The action frame must be implemented
2905 * either here or in the userspace.
2906 */
2907 if (params->count <= 1)
2908 break;
2909
2910 if ((params->n_counter_offsets_beacon >
2911 IEEE80211_MAX_CSA_COUNTERS_NUM) ||
2912 (params->n_counter_offsets_presp >
2913 IEEE80211_MAX_CSA_COUNTERS_NUM))
2914 return -EINVAL;
2915
2916 csa.counter_offsets_beacon = params->counter_offsets_beacon;
2917 csa.counter_offsets_presp = params->counter_offsets_presp;
2918 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
2919 csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
2920 csa.count = params->count;
2921
2922 err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
2923 if (err < 0) {
2924 kfree(sdata->u.ap.next_beacon);
2925 return err;
2926 }
2927 *changed |= err;
2928
2929 break;
2930 case NL80211_IFTYPE_ADHOC:
2931 if (!sdata->vif.bss_conf.ibss_joined)
2932 return -EINVAL;
2933
2934 if (params->chandef.width != sdata->u.ibss.chandef.width)
2935 return -EINVAL;
2936
2937 switch (params->chandef.width) {
2938 case NL80211_CHAN_WIDTH_40:
2939 if (cfg80211_get_chandef_type(&params->chandef) !=
2940 cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
2941 return -EINVAL;
2942 case NL80211_CHAN_WIDTH_5:
2943 case NL80211_CHAN_WIDTH_10:
2944 case NL80211_CHAN_WIDTH_20_NOHT:
2945 case NL80211_CHAN_WIDTH_20:
2946 break;
2947 default:
2948 return -EINVAL;
2949 }
2950
2951 /* changes into another band are not supported */
2952 if (sdata->u.ibss.chandef.chan->band !=
2953 params->chandef.chan->band)
2954 return -EINVAL;
2955
2956 /* see comments in the NL80211_IFTYPE_AP block */
2957 if (params->count > 1) {
2958 err = ieee80211_ibss_csa_beacon(sdata, params);
2959 if (err < 0)
2960 return err;
2961 *changed |= err;
2962 }
2963
2964 ieee80211_send_action_csa(sdata, params);
2965
2966 break;
2967 #ifdef CONFIG_MAC80211_MESH
2968 case NL80211_IFTYPE_MESH_POINT: {
2969 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
2970
2971 if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
2972 return -EINVAL;
2973
2974 /* changes into another band are not supported */
2975 if (sdata->vif.bss_conf.chandef.chan->band !=
2976 params->chandef.chan->band)
2977 return -EINVAL;
2978
2979 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
2980 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
2981 if (!ifmsh->pre_value)
2982 ifmsh->pre_value = 1;
2983 else
2984 ifmsh->pre_value++;
2985 }
2986
2987 /* see comments in the NL80211_IFTYPE_AP block */
2988 if (params->count > 1) {
2989 err = ieee80211_mesh_csa_beacon(sdata, params);
2990 if (err < 0) {
2991 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
2992 return err;
2993 }
2994 *changed |= err;
2995 }
2996
2997 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
2998 ieee80211_send_action_csa(sdata, params);
2999
3000 break;
3001 }
3002 #endif
3003 default:
3004 return -EOPNOTSUPP;
3005 }
3006
3007 return 0;
3008 }
3009
3010 static int
3011 __ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3012 struct cfg80211_csa_settings *params)
3013 {
3014 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3015 struct ieee80211_local *local = sdata->local;
3016 struct ieee80211_chanctx_conf *conf;
3017 struct ieee80211_chanctx *chanctx;
3018 int err, changed = 0;
3019
3020 sdata_assert_lock(sdata);
3021 lockdep_assert_held(&local->mtx);
3022
3023 if (!list_empty(&local->roc_list) || local->scanning)
3024 return -EBUSY;
3025
3026 if (sdata->wdev.cac_started)
3027 return -EBUSY;
3028
3029 if (cfg80211_chandef_identical(&params->chandef,
3030 &sdata->vif.bss_conf.chandef))
3031 return -EINVAL;
3032
3033 /* don't allow another channel switch if one is already active. */
3034 if (sdata->vif.csa_active)
3035 return -EBUSY;
3036
3037 mutex_lock(&local->chanctx_mtx);
3038 conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3039 lockdep_is_held(&local->chanctx_mtx));
3040 if (!conf) {
3041 err = -EBUSY;
3042 goto out;
3043 }
3044
3045 chanctx = container_of(conf, struct ieee80211_chanctx, conf);
3046 if (!chanctx) {
3047 err = -EBUSY;
3048 goto out;
3049 }
3050
3051 err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3052 chanctx->mode,
3053 params->radar_required);
3054 if (err)
3055 goto out;
3056
3057 /* if reservation is invalid then this will fail */
3058 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3059 if (err) {
3060 ieee80211_vif_unreserve_chanctx(sdata);
3061 goto out;
3062 }
3063
3064 err = ieee80211_set_csa_beacon(sdata, params, &changed);
3065 if (err) {
3066 ieee80211_vif_unreserve_chanctx(sdata);
3067 goto out;
3068 }
3069
3070 sdata->csa_chandef = params->chandef;
3071 sdata->csa_block_tx = params->block_tx;
3072 sdata->vif.csa_active = true;
3073
3074 if (sdata->csa_block_tx)
3075 ieee80211_stop_vif_queues(local, sdata,
3076 IEEE80211_QUEUE_STOP_REASON_CSA);
3077
3078 if (changed) {
3079 ieee80211_bss_info_change_notify(sdata, changed);
3080 drv_channel_switch_beacon(sdata, &params->chandef);
3081 } else {
3082 /* if the beacon didn't change, we can finalize immediately */
3083 ieee80211_csa_finalize(sdata);
3084 }
3085
3086 out:
3087 mutex_unlock(&local->chanctx_mtx);
3088 return err;
3089 }
3090
3091 int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3092 struct cfg80211_csa_settings *params)
3093 {
3094 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3095 struct ieee80211_local *local = sdata->local;
3096 int err;
3097
3098 mutex_lock(&local->mtx);
3099 err = __ieee80211_channel_switch(wiphy, dev, params);
3100 mutex_unlock(&local->mtx);
3101
3102 return err;
3103 }
3104
3105 static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
3106 struct cfg80211_mgmt_tx_params *params,
3107 u64 *cookie)
3108 {
3109 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3110 struct ieee80211_local *local = sdata->local;
3111 struct sk_buff *skb;
3112 struct sta_info *sta;
3113 const struct ieee80211_mgmt *mgmt = (void *)params->buf;
3114 bool need_offchan = false;
3115 u32 flags;
3116 int ret;
3117 u8 *data;
3118
3119 if (params->dont_wait_for_ack)
3120 flags = IEEE80211_TX_CTL_NO_ACK;
3121 else
3122 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX |
3123 IEEE80211_TX_CTL_REQ_TX_STATUS;
3124
3125 if (params->no_cck)
3126 flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
3127
3128 switch (sdata->vif.type) {
3129 case NL80211_IFTYPE_ADHOC:
3130 if (!sdata->vif.bss_conf.ibss_joined)
3131 need_offchan = true;
3132 /* fall through */
3133 #ifdef CONFIG_MAC80211_MESH
3134 case NL80211_IFTYPE_MESH_POINT:
3135 if (ieee80211_vif_is_mesh(&sdata->vif) &&
3136 !sdata->u.mesh.mesh_id_len)
3137 need_offchan = true;
3138 /* fall through */
3139 #endif
3140 case NL80211_IFTYPE_AP:
3141 case NL80211_IFTYPE_AP_VLAN:
3142 case NL80211_IFTYPE_P2P_GO:
3143 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
3144 !ieee80211_vif_is_mesh(&sdata->vif) &&
3145 !rcu_access_pointer(sdata->bss->beacon))
3146 need_offchan = true;
3147 if (!ieee80211_is_action(mgmt->frame_control) ||
3148 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC ||
3149 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED ||
3150 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT)
3151 break;
3152 rcu_read_lock();
3153 sta = sta_info_get(sdata, mgmt->da);
3154 rcu_read_unlock();
3155 if (!sta)
3156 return -ENOLINK;
3157 break;
3158 case NL80211_IFTYPE_STATION:
3159 case NL80211_IFTYPE_P2P_CLIENT:
3160 if (!sdata->u.mgd.associated)
3161 need_offchan = true;
3162 break;
3163 case NL80211_IFTYPE_P2P_DEVICE:
3164 need_offchan = true;
3165 break;
3166 default:
3167 return -EOPNOTSUPP;
3168 }
3169
3170 /* configurations requiring offchan cannot work if no channel has been
3171 * specified
3172 */
3173 if (need_offchan && !params->chan)
3174 return -EINVAL;
3175
3176 mutex_lock(&local->mtx);
3177
3178 /* Check if the operating channel is the requested channel */
3179 if (!need_offchan) {
3180 struct ieee80211_chanctx_conf *chanctx_conf;
3181
3182 rcu_read_lock();
3183 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3184
3185 if (chanctx_conf) {
3186 need_offchan = params->chan &&
3187 (params->chan !=
3188 chanctx_conf->def.chan);
3189 } else if (!params->chan) {
3190 ret = -EINVAL;
3191 rcu_read_unlock();
3192 goto out_unlock;
3193 } else {
3194 need_offchan = true;
3195 }
3196 rcu_read_unlock();
3197 }
3198
3199 if (need_offchan && !params->offchan) {
3200 ret = -EBUSY;
3201 goto out_unlock;
3202 }
3203
3204 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len);
3205 if (!skb) {
3206 ret = -ENOMEM;
3207 goto out_unlock;
3208 }
3209 skb_reserve(skb, local->hw.extra_tx_headroom);
3210
3211 data = skb_put(skb, params->len);
3212 memcpy(data, params->buf, params->len);
3213
3214 /* Update CSA counters */
3215 if (sdata->vif.csa_active &&
3216 (sdata->vif.type == NL80211_IFTYPE_AP ||
3217 sdata->vif.type == NL80211_IFTYPE_ADHOC) &&
3218 params->n_csa_offsets) {
3219 int i;
3220 struct beacon_data *beacon = NULL;
3221
3222 rcu_read_lock();
3223
3224 if (sdata->vif.type == NL80211_IFTYPE_AP)
3225 beacon = rcu_dereference(sdata->u.ap.beacon);
3226 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
3227 beacon = rcu_dereference(sdata->u.ibss.presp);
3228 else if (ieee80211_vif_is_mesh(&sdata->vif))
3229 beacon = rcu_dereference(sdata->u.mesh.beacon);
3230
3231 if (beacon)
3232 for (i = 0; i < params->n_csa_offsets; i++)
3233 data[params->csa_offsets[i]] =
3234 beacon->csa_current_counter;
3235
3236 rcu_read_unlock();
3237 }
3238
3239 IEEE80211_SKB_CB(skb)->flags = flags;
3240
3241 skb->dev = sdata->dev;
3242
3243 if (!need_offchan) {
3244 *cookie = (unsigned long) skb;
3245 ieee80211_tx_skb(sdata, skb);
3246 ret = 0;
3247 goto out_unlock;
3248 }
3249
3250 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN |
3251 IEEE80211_TX_INTFL_OFFCHAN_TX_OK;
3252 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
3253 IEEE80211_SKB_CB(skb)->hw_queue =
3254 local->hw.offchannel_tx_hw_queue;
3255
3256 /* This will handle all kinds of coalescing and immediate TX */
3257 ret = ieee80211_start_roc_work(local, sdata, params->chan,
3258 params->wait, cookie, skb,
3259 IEEE80211_ROC_TYPE_MGMT_TX);
3260 if (ret)
3261 kfree_skb(skb);
3262 out_unlock:
3263 mutex_unlock(&local->mtx);
3264 return ret;
3265 }
3266
3267 static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
3268 struct wireless_dev *wdev,
3269 u64 cookie)
3270 {
3271 struct ieee80211_local *local = wiphy_priv(wiphy);
3272
3273 return ieee80211_cancel_roc(local, cookie, true);
3274 }
3275
3276 static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
3277 struct wireless_dev *wdev,
3278 u16 frame_type, bool reg)
3279 {
3280 struct ieee80211_local *local = wiphy_priv(wiphy);
3281
3282 switch (frame_type) {
3283 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
3284 if (reg)
3285 local->probe_req_reg++;
3286 else
3287 local->probe_req_reg--;
3288
3289 if (!local->open_count)
3290 break;
3291
3292 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
3293 break;
3294 default:
3295 break;
3296 }
3297 }
3298
3299 static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3300 {
3301 struct ieee80211_local *local = wiphy_priv(wiphy);
3302
3303 if (local->started)
3304 return -EOPNOTSUPP;
3305
3306 return drv_set_antenna(local, tx_ant, rx_ant);
3307 }
3308
3309 static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3310 {
3311 struct ieee80211_local *local = wiphy_priv(wiphy);
3312
3313 return drv_get_antenna(local, tx_ant, rx_ant);
3314 }
3315
3316 static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3317 struct net_device *dev,
3318 struct cfg80211_gtk_rekey_data *data)
3319 {
3320 struct ieee80211_local *local = wiphy_priv(wiphy);
3321 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3322
3323 if (!local->ops->set_rekey_data)
3324 return -EOPNOTSUPP;
3325
3326 drv_set_rekey_data(local, sdata, data);
3327
3328 return 0;
3329 }
3330
3331 static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3332 const u8 *peer, u64 *cookie)
3333 {
3334 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3335 struct ieee80211_local *local = sdata->local;
3336 struct ieee80211_qos_hdr *nullfunc;
3337 struct sk_buff *skb;
3338 int size = sizeof(*nullfunc);
3339 __le16 fc;
3340 bool qos;
3341 struct ieee80211_tx_info *info;
3342 struct sta_info *sta;
3343 struct ieee80211_chanctx_conf *chanctx_conf;
3344 enum ieee80211_band band;
3345
3346 rcu_read_lock();
3347 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3348 if (WARN_ON(!chanctx_conf)) {
3349 rcu_read_unlock();
3350 return -EINVAL;
3351 }
3352 band = chanctx_conf->def.chan->band;
3353 sta = sta_info_get_bss(sdata, peer);
3354 if (sta) {
3355 qos = test_sta_flag(sta, WLAN_STA_WME);
3356 } else {
3357 rcu_read_unlock();
3358 return -ENOLINK;
3359 }
3360
3361 if (qos) {
3362 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3363 IEEE80211_STYPE_QOS_NULLFUNC |
3364 IEEE80211_FCTL_FROMDS);
3365 } else {
3366 size -= 2;
3367 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3368 IEEE80211_STYPE_NULLFUNC |
3369 IEEE80211_FCTL_FROMDS);
3370 }
3371
3372 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
3373 if (!skb) {
3374 rcu_read_unlock();
3375 return -ENOMEM;
3376 }
3377
3378 skb->dev = dev;
3379
3380 skb_reserve(skb, local->hw.extra_tx_headroom);
3381
3382 nullfunc = (void *) skb_put(skb, size);
3383 nullfunc->frame_control = fc;
3384 nullfunc->duration_id = 0;
3385 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3386 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3387 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3388 nullfunc->seq_ctrl = 0;
3389
3390 info = IEEE80211_SKB_CB(skb);
3391
3392 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3393 IEEE80211_TX_INTFL_NL80211_FRAME_TX;
3394
3395 skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3396 skb->priority = 7;
3397 if (qos)
3398 nullfunc->qos_ctrl = cpu_to_le16(7);
3399
3400 local_bh_disable();
3401 ieee80211_xmit(sdata, skb, band);
3402 local_bh_enable();
3403 rcu_read_unlock();
3404
3405 *cookie = (unsigned long) skb;
3406 return 0;
3407 }
3408
3409 static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3410 struct wireless_dev *wdev,
3411 struct cfg80211_chan_def *chandef)
3412 {
3413 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3414 struct ieee80211_local *local = wiphy_priv(wiphy);
3415 struct ieee80211_chanctx_conf *chanctx_conf;
3416 int ret = -ENODATA;
3417
3418 rcu_read_lock();
3419 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3420 if (chanctx_conf) {
3421 *chandef = chanctx_conf->def;
3422 ret = 0;
3423 } else if (local->open_count > 0 &&
3424 local->open_count == local->monitors &&
3425 sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3426 if (local->use_chanctx)
3427 *chandef = local->monitor_chandef;
3428 else
3429 *chandef = local->_oper_chandef;
3430 ret = 0;
3431 }
3432 rcu_read_unlock();
3433
3434 return ret;
3435 }
3436
3437 #ifdef CONFIG_PM
3438 static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3439 {
3440 drv_set_wakeup(wiphy_priv(wiphy), enabled);
3441 }
3442 #endif
3443
3444 static int ieee80211_set_qos_map(struct wiphy *wiphy,
3445 struct net_device *dev,
3446 struct cfg80211_qos_map *qos_map)
3447 {
3448 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3449 struct mac80211_qos_map *new_qos_map, *old_qos_map;
3450
3451 if (qos_map) {
3452 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3453 if (!new_qos_map)
3454 return -ENOMEM;
3455 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3456 } else {
3457 /* A NULL qos_map was passed to disable QoS mapping */
3458 new_qos_map = NULL;
3459 }
3460
3461 old_qos_map = sdata_dereference(sdata->qos_map, sdata);
3462 rcu_assign_pointer(sdata->qos_map, new_qos_map);
3463 if (old_qos_map)
3464 kfree_rcu(old_qos_map, rcu_head);
3465
3466 return 0;
3467 }
3468
3469 static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3470 struct net_device *dev,
3471 struct cfg80211_chan_def *chandef)
3472 {
3473 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3474 int ret;
3475 u32 changed = 0;
3476
3477 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3478 if (ret == 0)
3479 ieee80211_bss_info_change_notify(sdata, changed);
3480
3481 return ret;
3482 }
3483
3484 const struct cfg80211_ops mac80211_config_ops = {
3485 .add_virtual_intf = ieee80211_add_iface,
3486 .del_virtual_intf = ieee80211_del_iface,
3487 .change_virtual_intf = ieee80211_change_iface,
3488 .start_p2p_device = ieee80211_start_p2p_device,
3489 .stop_p2p_device = ieee80211_stop_p2p_device,
3490 .add_key = ieee80211_add_key,
3491 .del_key = ieee80211_del_key,
3492 .get_key = ieee80211_get_key,
3493 .set_default_key = ieee80211_config_default_key,
3494 .set_default_mgmt_key = ieee80211_config_default_mgmt_key,
3495 .start_ap = ieee80211_start_ap,
3496 .change_beacon = ieee80211_change_beacon,
3497 .stop_ap = ieee80211_stop_ap,
3498 .add_station = ieee80211_add_station,
3499 .del_station = ieee80211_del_station,
3500 .change_station = ieee80211_change_station,
3501 .get_station = ieee80211_get_station,
3502 .dump_station = ieee80211_dump_station,
3503 .dump_survey = ieee80211_dump_survey,
3504 #ifdef CONFIG_MAC80211_MESH
3505 .add_mpath = ieee80211_add_mpath,
3506 .del_mpath = ieee80211_del_mpath,
3507 .change_mpath = ieee80211_change_mpath,
3508 .get_mpath = ieee80211_get_mpath,
3509 .dump_mpath = ieee80211_dump_mpath,
3510 .update_mesh_config = ieee80211_update_mesh_config,
3511 .get_mesh_config = ieee80211_get_mesh_config,
3512 .join_mesh = ieee80211_join_mesh,
3513 .leave_mesh = ieee80211_leave_mesh,
3514 #endif
3515 .change_bss = ieee80211_change_bss,
3516 .set_txq_params = ieee80211_set_txq_params,
3517 .set_monitor_channel = ieee80211_set_monitor_channel,
3518 .suspend = ieee80211_suspend,
3519 .resume = ieee80211_resume,
3520 .scan = ieee80211_scan,
3521 .sched_scan_start = ieee80211_sched_scan_start,
3522 .sched_scan_stop = ieee80211_sched_scan_stop,
3523 .auth = ieee80211_auth,
3524 .assoc = ieee80211_assoc,
3525 .deauth = ieee80211_deauth,
3526 .disassoc = ieee80211_disassoc,
3527 .join_ibss = ieee80211_join_ibss,
3528 .leave_ibss = ieee80211_leave_ibss,
3529 .set_mcast_rate = ieee80211_set_mcast_rate,
3530 .set_wiphy_params = ieee80211_set_wiphy_params,
3531 .set_tx_power = ieee80211_set_tx_power,
3532 .get_tx_power = ieee80211_get_tx_power,
3533 .set_wds_peer = ieee80211_set_wds_peer,
3534 .rfkill_poll = ieee80211_rfkill_poll,
3535 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
3536 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
3537 .set_power_mgmt = ieee80211_set_power_mgmt,
3538 .set_bitrate_mask = ieee80211_set_bitrate_mask,
3539 .remain_on_channel = ieee80211_remain_on_channel,
3540 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
3541 .mgmt_tx = ieee80211_mgmt_tx,
3542 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
3543 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
3544 .mgmt_frame_register = ieee80211_mgmt_frame_register,
3545 .set_antenna = ieee80211_set_antenna,
3546 .get_antenna = ieee80211_get_antenna,
3547 .set_rekey_data = ieee80211_set_rekey_data,
3548 .tdls_oper = ieee80211_tdls_oper,
3549 .tdls_mgmt = ieee80211_tdls_mgmt,
3550 .probe_client = ieee80211_probe_client,
3551 .set_noack_map = ieee80211_set_noack_map,
3552 #ifdef CONFIG_PM
3553 .set_wakeup = ieee80211_set_wakeup,
3554 #endif
3555 .get_channel = ieee80211_cfg_get_channel,
3556 .start_radar_detection = ieee80211_start_radar_detection,
3557 .channel_switch = ieee80211_channel_switch,
3558 .set_qos_map = ieee80211_set_qos_map,
3559 .set_ap_chanwidth = ieee80211_set_ap_chanwidth,
3560 };
(deprecated) Btrfs devel tree