?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
x86, gart: Make sure GART does not map physmem above 1TB
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / net / wireless / nl80211.c
blob7cb0d647fc34a53414e21a752923c65d8bfe55ed
1 /*
2 * This is the new netlink-based wireless configuration interface.
3 *
4 * Copyright 2006-2009 Johannes Berg <johannes@sipsolutions.net>
5 */
6
7 #include <linux/if.h>
8 #include <linux/module.h>
9 #include <linux/err.h>
10 #include <linux/list.h>
11 #include <linux/if_ether.h>
12 #include <linux/ieee80211.h>
13 #include <linux/nl80211.h>
14 #include <linux/rtnetlink.h>
15 #include <linux/netlink.h>
16 #include <linux/etherdevice.h>
17 #include <net/net_namespace.h>
18 #include <net/genetlink.h>
19 #include <net/cfg80211.h>
20 #include <net/sock.h>
21 #include "core.h"
22 #include "nl80211.h"
23 #include "reg.h"
24
25 /* the netlink family */
26 static struct genl_family nl80211_fam = {
27 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
28 .name = "nl80211", /* have users key off the name instead */
29 .hdrsize = 0, /* no private header */
30 .version = 1, /* no particular meaning now */
31 .maxattr = NL80211_ATTR_MAX,
32 .netnsok = true,
33 };
34
35 /* internal helper: get rdev and dev */
36 static int get_rdev_dev_by_info_ifindex(struct genl_info *info,
37 struct cfg80211_registered_device **rdev,
38 struct net_device **dev)
39 {
40 struct nlattr **attrs = info->attrs;
41 int ifindex;
42
43 if (!attrs[NL80211_ATTR_IFINDEX])
44 return -EINVAL;
45
46 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
47 *dev = dev_get_by_index(genl_info_net(info), ifindex);
48 if (!*dev)
49 return -ENODEV;
50
51 *rdev = cfg80211_get_dev_from_ifindex(genl_info_net(info), ifindex);
52 if (IS_ERR(*rdev)) {
53 dev_put(*dev);
54 return PTR_ERR(*rdev);
55 }
56
57 return 0;
58 }
59
60 /* policy for the attributes */
61 static struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] __read_mostly = {
62 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
63 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
64 .len = 20-1 },
65 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
66 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
67 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
68 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
69 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
70 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
71 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
72
73 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
74 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
75 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
76
77 [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
78 [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
79
80 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
81 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
82 .len = WLAN_MAX_KEY_LEN },
83 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
84 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
85 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
86 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
87
88 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
89 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
90 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
91 .len = IEEE80211_MAX_DATA_LEN },
92 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
93 .len = IEEE80211_MAX_DATA_LEN },
94 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
95 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
96 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
97 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
98 .len = NL80211_MAX_SUPP_RATES },
99 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
100 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
101 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
102 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
103 .len = IEEE80211_MAX_MESH_ID_LEN },
104 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
105
106 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
107 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
108
109 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
110 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
111 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
112 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
113 .len = NL80211_MAX_SUPP_RATES },
114
115 [NL80211_ATTR_MESH_PARAMS] = { .type = NLA_NESTED },
116
117 [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
118 .len = NL80211_HT_CAPABILITY_LEN },
119
120 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
121 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
122 .len = IEEE80211_MAX_DATA_LEN },
123 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
124 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
125
126 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
127 .len = IEEE80211_MAX_SSID_LEN },
128 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
129 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
130 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
131 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
132 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
133 [NL80211_ATTR_STA_FLAGS2] = {
134 .len = sizeof(struct nl80211_sta_flag_update),
135 },
136 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
137 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
138 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
139 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
140 [NL80211_ATTR_PID] = { .type = NLA_U32 },
141 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
142 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
143 .len = WLAN_PMKID_LEN },
144 };
145
146 /* policy for the attributes */
147 static struct nla_policy
148 nl80211_key_policy[NL80211_KEY_MAX + 1] __read_mostly = {
149 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
150 [NL80211_KEY_IDX] = { .type = NLA_U8 },
151 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
152 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
153 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
154 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
155 };
156
157 /* ifidx get helper */
158 static int nl80211_get_ifidx(struct netlink_callback *cb)
159 {
160 int res;
161
162 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
163 nl80211_fam.attrbuf, nl80211_fam.maxattr,
164 nl80211_policy);
165 if (res)
166 return res;
167
168 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
169 return -EINVAL;
170
171 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
172 if (!res)
173 return -EINVAL;
174 return res;
175 }
176
177 /* IE validation */
178 static bool is_valid_ie_attr(const struct nlattr *attr)
179 {
180 const u8 *pos;
181 int len;
182
183 if (!attr)
184 return true;
185
186 pos = nla_data(attr);
187 len = nla_len(attr);
188
189 while (len) {
190 u8 elemlen;
191
192 if (len < 2)
193 return false;
194 len -= 2;
195
196 elemlen = pos[1];
197 if (elemlen > len)
198 return false;
199
200 len -= elemlen;
201 pos += 2 + elemlen;
202 }
203
204 return true;
205 }
206
207 /* message building helper */
208 static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
209 int flags, u8 cmd)
210 {
211 /* since there is no private header just add the generic one */
212 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
213 }
214
215 static int nl80211_msg_put_channel(struct sk_buff *msg,
216 struct ieee80211_channel *chan)
217 {
218 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
219 chan->center_freq);
220
221 if (chan->flags & IEEE80211_CHAN_DISABLED)
222 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
223 if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
224 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
225 if (chan->flags & IEEE80211_CHAN_NO_IBSS)
226 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
227 if (chan->flags & IEEE80211_CHAN_RADAR)
228 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
229
230 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
231 DBM_TO_MBM(chan->max_power));
232
233 return 0;
234
235 nla_put_failure:
236 return -ENOBUFS;
237 }
238
239 /* netlink command implementations */
240
241 struct key_parse {
242 struct key_params p;
243 int idx;
244 bool def, defmgmt;
245 };
246
247 static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
248 {
249 struct nlattr *tb[NL80211_KEY_MAX + 1];
250 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
251 nl80211_key_policy);
252 if (err)
253 return err;
254
255 k->def = !!tb[NL80211_KEY_DEFAULT];
256 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
257
258 if (tb[NL80211_KEY_IDX])
259 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
260
261 if (tb[NL80211_KEY_DATA]) {
262 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
263 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
264 }
265
266 if (tb[NL80211_KEY_SEQ]) {
267 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
268 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
269 }
270
271 if (tb[NL80211_KEY_CIPHER])
272 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
273
274 return 0;
275 }
276
277 static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
278 {
279 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
280 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
281 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
282 }
283
284 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
285 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
286 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
287 }
288
289 if (info->attrs[NL80211_ATTR_KEY_IDX])
290 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
291
292 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
293 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
294
295 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
296 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
297
298 return 0;
299 }
300
301 static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
302 {
303 int err;
304
305 memset(k, 0, sizeof(*k));
306 k->idx = -1;
307
308 if (info->attrs[NL80211_ATTR_KEY])
309 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
310 else
311 err = nl80211_parse_key_old(info, k);
312
313 if (err)
314 return err;
315
316 if (k->def && k->defmgmt)
317 return -EINVAL;
318
319 if (k->idx != -1) {
320 if (k->defmgmt) {
321 if (k->idx < 4 || k->idx > 5)
322 return -EINVAL;
323 } else if (k->def) {
324 if (k->idx < 0 || k->idx > 3)
325 return -EINVAL;
326 } else {
327 if (k->idx < 0 || k->idx > 5)
328 return -EINVAL;
329 }
330 }
331
332 return 0;
333 }
334
335 static struct cfg80211_cached_keys *
336 nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
337 struct nlattr *keys)
338 {
339 struct key_parse parse;
340 struct nlattr *key;
341 struct cfg80211_cached_keys *result;
342 int rem, err, def = 0;
343
344 result = kzalloc(sizeof(*result), GFP_KERNEL);
345 if (!result)
346 return ERR_PTR(-ENOMEM);
347
348 result->def = -1;
349 result->defmgmt = -1;
350
351 nla_for_each_nested(key, keys, rem) {
352 memset(&parse, 0, sizeof(parse));
353 parse.idx = -1;
354
355 err = nl80211_parse_key_new(key, &parse);
356 if (err)
357 goto error;
358 err = -EINVAL;
359 if (!parse.p.key)
360 goto error;
361 if (parse.idx < 0 || parse.idx > 4)
362 goto error;
363 if (parse.def) {
364 if (def)
365 goto error;
366 def = 1;
367 result->def = parse.idx;
368 } else if (parse.defmgmt)
369 goto error;
370 err = cfg80211_validate_key_settings(rdev, &parse.p,
371 parse.idx, NULL);
372 if (err)
373 goto error;
374 result->params[parse.idx].cipher = parse.p.cipher;
375 result->params[parse.idx].key_len = parse.p.key_len;
376 result->params[parse.idx].key = result->data[parse.idx];
377 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
378 }
379
380 return result;
381 error:
382 kfree(result);
383 return ERR_PTR(err);
384 }
385
386 static int nl80211_key_allowed(struct wireless_dev *wdev)
387 {
388 ASSERT_WDEV_LOCK(wdev);
389
390 if (!netif_running(wdev->netdev))
391 return -ENETDOWN;
392
393 switch (wdev->iftype) {
394 case NL80211_IFTYPE_AP:
395 case NL80211_IFTYPE_AP_VLAN:
396 break;
397 case NL80211_IFTYPE_ADHOC:
398 if (!wdev->current_bss)
399 return -ENOLINK;
400 break;
401 case NL80211_IFTYPE_STATION:
402 if (wdev->sme_state != CFG80211_SME_CONNECTED)
403 return -ENOLINK;
404 break;
405 default:
406 return -EINVAL;
407 }
408
409 return 0;
410 }
411
412 static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
413 struct cfg80211_registered_device *dev)
414 {
415 void *hdr;
416 struct nlattr *nl_bands, *nl_band;
417 struct nlattr *nl_freqs, *nl_freq;
418 struct nlattr *nl_rates, *nl_rate;
419 struct nlattr *nl_modes;
420 struct nlattr *nl_cmds;
421 enum ieee80211_band band;
422 struct ieee80211_channel *chan;
423 struct ieee80211_rate *rate;
424 int i;
425 u16 ifmodes = dev->wiphy.interface_modes;
426
427 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
428 if (!hdr)
429 return -1;
430
431 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
432 NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
433
434 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
435 cfg80211_rdev_list_generation);
436
437 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
438 dev->wiphy.retry_short);
439 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
440 dev->wiphy.retry_long);
441 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
442 dev->wiphy.frag_threshold);
443 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
444 dev->wiphy.rts_threshold);
445
446 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
447 dev->wiphy.max_scan_ssids);
448 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
449 dev->wiphy.max_scan_ie_len);
450
451 NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
452 sizeof(u32) * dev->wiphy.n_cipher_suites,
453 dev->wiphy.cipher_suites);
454
455 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
456 dev->wiphy.max_num_pmkids);
457
458 nl_modes = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_IFTYPES);
459 if (!nl_modes)
460 goto nla_put_failure;
461
462 i = 0;
463 while (ifmodes) {
464 if (ifmodes & 1)
465 NLA_PUT_FLAG(msg, i);
466 ifmodes >>= 1;
467 i++;
468 }
469
470 nla_nest_end(msg, nl_modes);
471
472 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
473 if (!nl_bands)
474 goto nla_put_failure;
475
476 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
477 if (!dev->wiphy.bands[band])
478 continue;
479
480 nl_band = nla_nest_start(msg, band);
481 if (!nl_band)
482 goto nla_put_failure;
483
484 /* add HT info */
485 if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
486 NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
487 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
488 &dev->wiphy.bands[band]->ht_cap.mcs);
489 NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
490 dev->wiphy.bands[band]->ht_cap.cap);
491 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
492 dev->wiphy.bands[band]->ht_cap.ampdu_factor);
493 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
494 dev->wiphy.bands[band]->ht_cap.ampdu_density);
495 }
496
497 /* add frequencies */
498 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
499 if (!nl_freqs)
500 goto nla_put_failure;
501
502 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
503 nl_freq = nla_nest_start(msg, i);
504 if (!nl_freq)
505 goto nla_put_failure;
506
507 chan = &dev->wiphy.bands[band]->channels[i];
508
509 if (nl80211_msg_put_channel(msg, chan))
510 goto nla_put_failure;
511
512 nla_nest_end(msg, nl_freq);
513 }
514
515 nla_nest_end(msg, nl_freqs);
516
517 /* add bitrates */
518 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
519 if (!nl_rates)
520 goto nla_put_failure;
521
522 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
523 nl_rate = nla_nest_start(msg, i);
524 if (!nl_rate)
525 goto nla_put_failure;
526
527 rate = &dev->wiphy.bands[band]->bitrates[i];
528 NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
529 rate->bitrate);
530 if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
531 NLA_PUT_FLAG(msg,
532 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
533
534 nla_nest_end(msg, nl_rate);
535 }
536
537 nla_nest_end(msg, nl_rates);
538
539 nla_nest_end(msg, nl_band);
540 }
541 nla_nest_end(msg, nl_bands);
542
543 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
544 if (!nl_cmds)
545 goto nla_put_failure;
546
547 i = 0;
548 #define CMD(op, n) \
549 do { \
550 if (dev->ops->op) { \
551 i++; \
552 NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
553 } \
554 } while (0)
555
556 CMD(add_virtual_intf, NEW_INTERFACE);
557 CMD(change_virtual_intf, SET_INTERFACE);
558 CMD(add_key, NEW_KEY);
559 CMD(add_beacon, NEW_BEACON);
560 CMD(add_station, NEW_STATION);
561 CMD(add_mpath, NEW_MPATH);
562 CMD(set_mesh_params, SET_MESH_PARAMS);
563 CMD(change_bss, SET_BSS);
564 CMD(auth, AUTHENTICATE);
565 CMD(assoc, ASSOCIATE);
566 CMD(deauth, DEAUTHENTICATE);
567 CMD(disassoc, DISASSOCIATE);
568 CMD(join_ibss, JOIN_IBSS);
569 CMD(set_pmksa, SET_PMKSA);
570 CMD(del_pmksa, DEL_PMKSA);
571 CMD(flush_pmksa, FLUSH_PMKSA);
572 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
573 i++;
574 NLA_PUT_U32(msg, i, NL80211_CMD_SET_WIPHY_NETNS);
575 }
576
577 #undef CMD
578
579 if (dev->ops->connect || dev->ops->auth) {
580 i++;
581 NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
582 }
583
584 if (dev->ops->disconnect || dev->ops->deauth) {
585 i++;
586 NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
587 }
588
589 nla_nest_end(msg, nl_cmds);
590
591 return genlmsg_end(msg, hdr);
592
593 nla_put_failure:
594 genlmsg_cancel(msg, hdr);
595 return -EMSGSIZE;
596 }
597
598 static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
599 {
600 int idx = 0;
601 int start = cb->args[0];
602 struct cfg80211_registered_device *dev;
603
604 mutex_lock(&cfg80211_mutex);
605 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
606 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
607 continue;
608 if (++idx <= start)
609 continue;
610 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
611 cb->nlh->nlmsg_seq, NLM_F_MULTI,
612 dev) < 0) {
613 idx--;
614 break;
615 }
616 }
617 mutex_unlock(&cfg80211_mutex);
618
619 cb->args[0] = idx;
620
621 return skb->len;
622 }
623
624 static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
625 {
626 struct sk_buff *msg;
627 struct cfg80211_registered_device *dev;
628
629 dev = cfg80211_get_dev_from_info(info);
630 if (IS_ERR(dev))
631 return PTR_ERR(dev);
632
633 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
634 if (!msg)
635 goto out_err;
636
637 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0)
638 goto out_free;
639
640 cfg80211_unlock_rdev(dev);
641
642 return genlmsg_reply(msg, info);
643
644 out_free:
645 nlmsg_free(msg);
646 out_err:
647 cfg80211_unlock_rdev(dev);
648 return -ENOBUFS;
649 }
650
651 static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
652 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
653 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
654 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
655 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
656 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
657 };
658
659 static int parse_txq_params(struct nlattr *tb[],
660 struct ieee80211_txq_params *txq_params)
661 {
662 if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
663 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
664 !tb[NL80211_TXQ_ATTR_AIFS])
665 return -EINVAL;
666
667 txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
668 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
669 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
670 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
671 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
672
673 return 0;
674 }
675
676 static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
677 {
678 struct cfg80211_registered_device *rdev;
679 int result = 0, rem_txq_params = 0;
680 struct nlattr *nl_txq_params;
681 u32 changed;
682 u8 retry_short = 0, retry_long = 0;
683 u32 frag_threshold = 0, rts_threshold = 0;
684
685 rtnl_lock();
686
687 mutex_lock(&cfg80211_mutex);
688
689 rdev = __cfg80211_rdev_from_info(info);
690 if (IS_ERR(rdev)) {
691 mutex_unlock(&cfg80211_mutex);
692 result = PTR_ERR(rdev);
693 goto unlock;
694 }
695
696 mutex_lock(&rdev->mtx);
697
698 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
699 result = cfg80211_dev_rename(
700 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
701
702 mutex_unlock(&cfg80211_mutex);
703
704 if (result)
705 goto bad_res;
706
707 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
708 struct ieee80211_txq_params txq_params;
709 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
710
711 if (!rdev->ops->set_txq_params) {
712 result = -EOPNOTSUPP;
713 goto bad_res;
714 }
715
716 nla_for_each_nested(nl_txq_params,
717 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
718 rem_txq_params) {
719 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
720 nla_data(nl_txq_params),
721 nla_len(nl_txq_params),
722 txq_params_policy);
723 result = parse_txq_params(tb, &txq_params);
724 if (result)
725 goto bad_res;
726
727 result = rdev->ops->set_txq_params(&rdev->wiphy,
728 &txq_params);
729 if (result)
730 goto bad_res;
731 }
732 }
733
734 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
735 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
736 u32 freq;
737
738 result = -EINVAL;
739
740 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
741 channel_type = nla_get_u32(info->attrs[
742 NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
743 if (channel_type != NL80211_CHAN_NO_HT &&
744 channel_type != NL80211_CHAN_HT20 &&
745 channel_type != NL80211_CHAN_HT40PLUS &&
746 channel_type != NL80211_CHAN_HT40MINUS)
747 goto bad_res;
748 }
749
750 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
751
752 mutex_lock(&rdev->devlist_mtx);
753 result = rdev_set_freq(rdev, NULL, freq, channel_type);
754 mutex_unlock(&rdev->devlist_mtx);
755 if (result)
756 goto bad_res;
757 }
758
759 changed = 0;
760
761 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
762 retry_short = nla_get_u8(
763 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
764 if (retry_short == 0) {
765 result = -EINVAL;
766 goto bad_res;
767 }
768 changed |= WIPHY_PARAM_RETRY_SHORT;
769 }
770
771 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
772 retry_long = nla_get_u8(
773 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
774 if (retry_long == 0) {
775 result = -EINVAL;
776 goto bad_res;
777 }
778 changed |= WIPHY_PARAM_RETRY_LONG;
779 }
780
781 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
782 frag_threshold = nla_get_u32(
783 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
784 if (frag_threshold < 256) {
785 result = -EINVAL;
786 goto bad_res;
787 }
788 if (frag_threshold != (u32) -1) {
789 /*
790 * Fragments (apart from the last one) are required to
791 * have even length. Make the fragmentation code
792 * simpler by stripping LSB should someone try to use
793 * odd threshold value.
794 */
795 frag_threshold &= ~0x1;
796 }
797 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
798 }
799
800 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
801 rts_threshold = nla_get_u32(
802 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
803 changed |= WIPHY_PARAM_RTS_THRESHOLD;
804 }
805
806 if (changed) {
807 u8 old_retry_short, old_retry_long;
808 u32 old_frag_threshold, old_rts_threshold;
809
810 if (!rdev->ops->set_wiphy_params) {
811 result = -EOPNOTSUPP;
812 goto bad_res;
813 }
814
815 old_retry_short = rdev->wiphy.retry_short;
816 old_retry_long = rdev->wiphy.retry_long;
817 old_frag_threshold = rdev->wiphy.frag_threshold;
818 old_rts_threshold = rdev->wiphy.rts_threshold;
819
820 if (changed & WIPHY_PARAM_RETRY_SHORT)
821 rdev->wiphy.retry_short = retry_short;
822 if (changed & WIPHY_PARAM_RETRY_LONG)
823 rdev->wiphy.retry_long = retry_long;
824 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
825 rdev->wiphy.frag_threshold = frag_threshold;
826 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
827 rdev->wiphy.rts_threshold = rts_threshold;
828
829 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
830 if (result) {
831 rdev->wiphy.retry_short = old_retry_short;
832 rdev->wiphy.retry_long = old_retry_long;
833 rdev->wiphy.frag_threshold = old_frag_threshold;
834 rdev->wiphy.rts_threshold = old_rts_threshold;
835 }
836 }
837
838 bad_res:
839 mutex_unlock(&rdev->mtx);
840 unlock:
841 rtnl_unlock();
842 return result;
843 }
844
845
846 static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
847 struct cfg80211_registered_device *rdev,
848 struct net_device *dev)
849 {
850 void *hdr;
851
852 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
853 if (!hdr)
854 return -1;
855
856 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
857 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
858 NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
859 NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
860
861 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
862 rdev->devlist_generation ^
863 (cfg80211_rdev_list_generation << 2));
864
865 return genlmsg_end(msg, hdr);
866
867 nla_put_failure:
868 genlmsg_cancel(msg, hdr);
869 return -EMSGSIZE;
870 }
871
872 static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
873 {
874 int wp_idx = 0;
875 int if_idx = 0;
876 int wp_start = cb->args[0];
877 int if_start = cb->args[1];
878 struct cfg80211_registered_device *rdev;
879 struct wireless_dev *wdev;
880
881 mutex_lock(&cfg80211_mutex);
882 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
883 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
884 continue;
885 if (wp_idx < wp_start) {
886 wp_idx++;
887 continue;
888 }
889 if_idx = 0;
890
891 mutex_lock(&rdev->devlist_mtx);
892 list_for_each_entry(wdev, &rdev->netdev_list, list) {
893 if (if_idx < if_start) {
894 if_idx++;
895 continue;
896 }
897 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
898 cb->nlh->nlmsg_seq, NLM_F_MULTI,
899 rdev, wdev->netdev) < 0) {
900 mutex_unlock(&rdev->devlist_mtx);
901 goto out;
902 }
903 if_idx++;
904 }
905 mutex_unlock(&rdev->devlist_mtx);
906
907 wp_idx++;
908 }
909 out:
910 mutex_unlock(&cfg80211_mutex);
911
912 cb->args[0] = wp_idx;
913 cb->args[1] = if_idx;
914
915 return skb->len;
916 }
917
918 static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
919 {
920 struct sk_buff *msg;
921 struct cfg80211_registered_device *dev;
922 struct net_device *netdev;
923 int err;
924
925 err = get_rdev_dev_by_info_ifindex(info, &dev, &netdev);
926 if (err)
927 return err;
928
929 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
930 if (!msg)
931 goto out_err;
932
933 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
934 dev, netdev) < 0)
935 goto out_free;
936
937 dev_put(netdev);
938 cfg80211_unlock_rdev(dev);
939
940 return genlmsg_reply(msg, info);
941
942 out_free:
943 nlmsg_free(msg);
944 out_err:
945 dev_put(netdev);
946 cfg80211_unlock_rdev(dev);
947 return -ENOBUFS;
948 }
949
950 static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
951 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
952 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
953 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
954 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
955 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
956 };
957
958 static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
959 {
960 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
961 int flag;
962
963 *mntrflags = 0;
964
965 if (!nla)
966 return -EINVAL;
967
968 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
969 nla, mntr_flags_policy))
970 return -EINVAL;
971
972 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
973 if (flags[flag])
974 *mntrflags |= (1<<flag);
975
976 return 0;
977 }
978
979 static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
980 struct net_device *netdev, u8 use_4addr,
981 enum nl80211_iftype iftype)
982 {
983 if (!use_4addr) {
984 if (netdev && netdev->br_port)
985 return -EBUSY;
986 return 0;
987 }
988
989 switch (iftype) {
990 case NL80211_IFTYPE_AP_VLAN:
991 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
992 return 0;
993 break;
994 case NL80211_IFTYPE_STATION:
995 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
996 return 0;
997 break;
998 default:
999 break;
1000 }
1001
1002 return -EOPNOTSUPP;
1003 }
1004
1005 static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1006 {
1007 struct cfg80211_registered_device *rdev;
1008 struct vif_params params;
1009 int err;
1010 enum nl80211_iftype otype, ntype;
1011 struct net_device *dev;
1012 u32 _flags, *flags = NULL;
1013 bool change = false;
1014
1015 memset(&params, 0, sizeof(params));
1016
1017 rtnl_lock();
1018
1019 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1020 if (err)
1021 goto unlock_rtnl;
1022
1023 otype = ntype = dev->ieee80211_ptr->iftype;
1024
1025 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1026 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1027 if (otype != ntype)
1028 change = true;
1029 if (ntype > NL80211_IFTYPE_MAX) {
1030 err = -EINVAL;
1031 goto unlock;
1032 }
1033 }
1034
1035 if (info->attrs[NL80211_ATTR_MESH_ID]) {
1036 if (ntype != NL80211_IFTYPE_MESH_POINT) {
1037 err = -EINVAL;
1038 goto unlock;
1039 }
1040 params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
1041 params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1042 change = true;
1043 }
1044
1045 if (info->attrs[NL80211_ATTR_4ADDR]) {
1046 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1047 change = true;
1048 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
1049 if (err)
1050 goto unlock;
1051 } else {
1052 params.use_4addr = -1;
1053 }
1054
1055 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
1056 if (ntype != NL80211_IFTYPE_MONITOR) {
1057 err = -EINVAL;
1058 goto unlock;
1059 }
1060 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1061 &_flags);
1062 if (err)
1063 goto unlock;
1064
1065 flags = &_flags;
1066 change = true;
1067 }
1068
1069 if (change)
1070 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
1071 else
1072 err = 0;
1073
1074 if (!err && params.use_4addr != -1)
1075 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1076
1077 unlock:
1078 dev_put(dev);
1079 cfg80211_unlock_rdev(rdev);
1080 unlock_rtnl:
1081 rtnl_unlock();
1082 return err;
1083 }
1084
1085 static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1086 {
1087 struct cfg80211_registered_device *rdev;
1088 struct vif_params params;
1089 int err;
1090 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
1091 u32 flags;
1092
1093 memset(&params, 0, sizeof(params));
1094
1095 if (!info->attrs[NL80211_ATTR_IFNAME])
1096 return -EINVAL;
1097
1098 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1099 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1100 if (type > NL80211_IFTYPE_MAX)
1101 return -EINVAL;
1102 }
1103
1104 rtnl_lock();
1105
1106 rdev = cfg80211_get_dev_from_info(info);
1107 if (IS_ERR(rdev)) {
1108 err = PTR_ERR(rdev);
1109 goto unlock_rtnl;
1110 }
1111
1112 if (!rdev->ops->add_virtual_intf ||
1113 !(rdev->wiphy.interface_modes & (1 << type))) {
1114 err = -EOPNOTSUPP;
1115 goto unlock;
1116 }
1117
1118 if (type == NL80211_IFTYPE_MESH_POINT &&
1119 info->attrs[NL80211_ATTR_MESH_ID]) {
1120 params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
1121 params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1122 }
1123
1124 if (info->attrs[NL80211_ATTR_4ADDR]) {
1125 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1126 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
1127 if (err)
1128 goto unlock;
1129 }
1130
1131 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1132 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1133 &flags);
1134 err = rdev->ops->add_virtual_intf(&rdev->wiphy,
1135 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
1136 type, err ? NULL : &flags, &params);
1137
1138 unlock:
1139 cfg80211_unlock_rdev(rdev);
1140 unlock_rtnl:
1141 rtnl_unlock();
1142 return err;
1143 }
1144
1145 static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1146 {
1147 struct cfg80211_registered_device *rdev;
1148 int err;
1149 struct net_device *dev;
1150
1151 rtnl_lock();
1152
1153 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1154 if (err)
1155 goto unlock_rtnl;
1156
1157 if (!rdev->ops->del_virtual_intf) {
1158 err = -EOPNOTSUPP;
1159 goto out;
1160 }
1161
1162 err = rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
1163
1164 out:
1165 cfg80211_unlock_rdev(rdev);
1166 dev_put(dev);
1167 unlock_rtnl:
1168 rtnl_unlock();
1169 return err;
1170 }
1171
1172 struct get_key_cookie {
1173 struct sk_buff *msg;
1174 int error;
1175 int idx;
1176 };
1177
1178 static void get_key_callback(void *c, struct key_params *params)
1179 {
1180 struct nlattr *key;
1181 struct get_key_cookie *cookie = c;
1182
1183 if (params->key)
1184 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
1185 params->key_len, params->key);
1186
1187 if (params->seq)
1188 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
1189 params->seq_len, params->seq);
1190
1191 if (params->cipher)
1192 NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1193 params->cipher);
1194
1195 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1196 if (!key)
1197 goto nla_put_failure;
1198
1199 if (params->key)
1200 NLA_PUT(cookie->msg, NL80211_KEY_DATA,
1201 params->key_len, params->key);
1202
1203 if (params->seq)
1204 NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
1205 params->seq_len, params->seq);
1206
1207 if (params->cipher)
1208 NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
1209 params->cipher);
1210
1211 NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
1212
1213 nla_nest_end(cookie->msg, key);
1214
1215 return;
1216 nla_put_failure:
1217 cookie->error = 1;
1218 }
1219
1220 static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1221 {
1222 struct cfg80211_registered_device *rdev;
1223 int err;
1224 struct net_device *dev;
1225 u8 key_idx = 0;
1226 u8 *mac_addr = NULL;
1227 struct get_key_cookie cookie = {
1228 .error = 0,
1229 };
1230 void *hdr;
1231 struct sk_buff *msg;
1232
1233 if (info->attrs[NL80211_ATTR_KEY_IDX])
1234 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1235
1236 if (key_idx > 5)
1237 return -EINVAL;
1238
1239 if (info->attrs[NL80211_ATTR_MAC])
1240 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1241
1242 rtnl_lock();
1243
1244 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1245 if (err)
1246 goto unlock_rtnl;
1247
1248 if (!rdev->ops->get_key) {
1249 err = -EOPNOTSUPP;
1250 goto out;
1251 }
1252
1253 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1254 if (!msg) {
1255 err = -ENOMEM;
1256 goto out;
1257 }
1258
1259 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1260 NL80211_CMD_NEW_KEY);
1261
1262 if (IS_ERR(hdr)) {
1263 err = PTR_ERR(hdr);
1264 goto free_msg;
1265 }
1266
1267 cookie.msg = msg;
1268 cookie.idx = key_idx;
1269
1270 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1271 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
1272 if (mac_addr)
1273 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1274
1275 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, mac_addr,
1276 &cookie, get_key_callback);
1277
1278 if (err)
1279 goto free_msg;
1280
1281 if (cookie.error)
1282 goto nla_put_failure;
1283
1284 genlmsg_end(msg, hdr);
1285 err = genlmsg_reply(msg, info);
1286 goto out;
1287
1288 nla_put_failure:
1289 err = -ENOBUFS;
1290 free_msg:
1291 nlmsg_free(msg);
1292 out:
1293 cfg80211_unlock_rdev(rdev);
1294 dev_put(dev);
1295 unlock_rtnl:
1296 rtnl_unlock();
1297
1298 return err;
1299 }
1300
1301 static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
1302 {
1303 struct cfg80211_registered_device *rdev;
1304 struct key_parse key;
1305 int err;
1306 struct net_device *dev;
1307 int (*func)(struct wiphy *wiphy, struct net_device *netdev,
1308 u8 key_index);
1309
1310 err = nl80211_parse_key(info, &key);
1311 if (err)
1312 return err;
1313
1314 if (key.idx < 0)
1315 return -EINVAL;
1316
1317 /* only support setting default key */
1318 if (!key.def && !key.defmgmt)
1319 return -EINVAL;
1320
1321 rtnl_lock();
1322
1323 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1324 if (err)
1325 goto unlock_rtnl;
1326
1327 if (key.def)
1328 func = rdev->ops->set_default_key;
1329 else
1330 func = rdev->ops->set_default_mgmt_key;
1331
1332 if (!func) {
1333 err = -EOPNOTSUPP;
1334 goto out;
1335 }
1336
1337 wdev_lock(dev->ieee80211_ptr);
1338 err = nl80211_key_allowed(dev->ieee80211_ptr);
1339 if (!err)
1340 err = func(&rdev->wiphy, dev, key.idx);
1341
1342 #ifdef CONFIG_CFG80211_WEXT
1343 if (!err) {
1344 if (func == rdev->ops->set_default_key)
1345 dev->ieee80211_ptr->wext.default_key = key.idx;
1346 else
1347 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
1348 }
1349 #endif
1350 wdev_unlock(dev->ieee80211_ptr);
1351
1352 out:
1353 cfg80211_unlock_rdev(rdev);
1354 dev_put(dev);
1355
1356 unlock_rtnl:
1357 rtnl_unlock();
1358
1359 return err;
1360 }
1361
1362 static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
1363 {
1364 struct cfg80211_registered_device *rdev;
1365 int err;
1366 struct net_device *dev;
1367 struct key_parse key;
1368 u8 *mac_addr = NULL;
1369
1370 err = nl80211_parse_key(info, &key);
1371 if (err)
1372 return err;
1373
1374 if (!key.p.key)
1375 return -EINVAL;
1376
1377 if (info->attrs[NL80211_ATTR_MAC])
1378 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1379
1380 rtnl_lock();
1381
1382 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1383 if (err)
1384 goto unlock_rtnl;
1385
1386 if (!rdev->ops->add_key) {
1387 err = -EOPNOTSUPP;
1388 goto out;
1389 }
1390
1391 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx, mac_addr)) {
1392 err = -EINVAL;
1393 goto out;
1394 }
1395
1396 wdev_lock(dev->ieee80211_ptr);
1397 err = nl80211_key_allowed(dev->ieee80211_ptr);
1398 if (!err)
1399 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
1400 mac_addr, &key.p);
1401 wdev_unlock(dev->ieee80211_ptr);
1402
1403 out:
1404 cfg80211_unlock_rdev(rdev);
1405 dev_put(dev);
1406 unlock_rtnl:
1407 rtnl_unlock();
1408
1409 return err;
1410 }
1411
1412 static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
1413 {
1414 struct cfg80211_registered_device *rdev;
1415 int err;
1416 struct net_device *dev;
1417 u8 *mac_addr = NULL;
1418 struct key_parse key;
1419
1420 err = nl80211_parse_key(info, &key);
1421 if (err)
1422 return err;
1423
1424 if (info->attrs[NL80211_ATTR_MAC])
1425 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1426
1427 rtnl_lock();
1428
1429 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1430 if (err)
1431 goto unlock_rtnl;
1432
1433 if (!rdev->ops->del_key) {
1434 err = -EOPNOTSUPP;
1435 goto out;
1436 }
1437
1438 wdev_lock(dev->ieee80211_ptr);
1439 err = nl80211_key_allowed(dev->ieee80211_ptr);
1440 if (!err)
1441 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx, mac_addr);
1442
1443 #ifdef CONFIG_CFG80211_WEXT
1444 if (!err) {
1445 if (key.idx == dev->ieee80211_ptr->wext.default_key)
1446 dev->ieee80211_ptr->wext.default_key = -1;
1447 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
1448 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
1449 }
1450 #endif
1451 wdev_unlock(dev->ieee80211_ptr);
1452
1453 out:
1454 cfg80211_unlock_rdev(rdev);
1455 dev_put(dev);
1456
1457 unlock_rtnl:
1458 rtnl_unlock();
1459
1460 return err;
1461 }
1462
1463 static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
1464 {
1465 int (*call)(struct wiphy *wiphy, struct net_device *dev,
1466 struct beacon_parameters *info);
1467 struct cfg80211_registered_device *rdev;
1468 int err;
1469 struct net_device *dev;
1470 struct beacon_parameters params;
1471 int haveinfo = 0;
1472
1473 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]))
1474 return -EINVAL;
1475
1476 rtnl_lock();
1477
1478 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1479 if (err)
1480 goto unlock_rtnl;
1481
1482 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
1483 err = -EOPNOTSUPP;
1484 goto out;
1485 }
1486
1487 switch (info->genlhdr->cmd) {
1488 case NL80211_CMD_NEW_BEACON:
1489 /* these are required for NEW_BEACON */
1490 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
1491 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
1492 !info->attrs[NL80211_ATTR_BEACON_HEAD]) {
1493 err = -EINVAL;
1494 goto out;
1495 }
1496
1497 call = rdev->ops->add_beacon;
1498 break;
1499 case NL80211_CMD_SET_BEACON:
1500 call = rdev->ops->set_beacon;
1501 break;
1502 default:
1503 WARN_ON(1);
1504 err = -EOPNOTSUPP;
1505 goto out;
1506 }
1507
1508 if (!call) {
1509 err = -EOPNOTSUPP;
1510 goto out;
1511 }
1512
1513 memset(&params, 0, sizeof(params));
1514
1515 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
1516 params.interval =
1517 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
1518 haveinfo = 1;
1519 }
1520
1521 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
1522 params.dtim_period =
1523 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
1524 haveinfo = 1;
1525 }
1526
1527 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
1528 params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
1529 params.head_len =
1530 nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
1531 haveinfo = 1;
1532 }
1533
1534 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
1535 params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
1536 params.tail_len =
1537 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
1538 haveinfo = 1;
1539 }
1540
1541 if (!haveinfo) {
1542 err = -EINVAL;
1543 goto out;
1544 }
1545
1546 err = call(&rdev->wiphy, dev, &params);
1547
1548 out:
1549 cfg80211_unlock_rdev(rdev);
1550 dev_put(dev);
1551 unlock_rtnl:
1552 rtnl_unlock();
1553
1554 return err;
1555 }
1556
1557 static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
1558 {
1559 struct cfg80211_registered_device *rdev;
1560 int err;
1561 struct net_device *dev;
1562
1563 rtnl_lock();
1564
1565 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1566 if (err)
1567 goto unlock_rtnl;
1568
1569 if (!rdev->ops->del_beacon) {
1570 err = -EOPNOTSUPP;
1571 goto out;
1572 }
1573
1574 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
1575 err = -EOPNOTSUPP;
1576 goto out;
1577 }
1578 err = rdev->ops->del_beacon(&rdev->wiphy, dev);
1579
1580 out:
1581 cfg80211_unlock_rdev(rdev);
1582 dev_put(dev);
1583 unlock_rtnl:
1584 rtnl_unlock();
1585
1586 return err;
1587 }
1588
1589 static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
1590 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
1591 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
1592 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
1593 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
1594 };
1595
1596 static int parse_station_flags(struct genl_info *info,
1597 struct station_parameters *params)
1598 {
1599 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
1600 struct nlattr *nla;
1601 int flag;
1602
1603 /*
1604 * Try parsing the new attribute first so userspace
1605 * can specify both for older kernels.
1606 */
1607 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
1608 if (nla) {
1609 struct nl80211_sta_flag_update *sta_flags;
1610
1611 sta_flags = nla_data(nla);
1612 params->sta_flags_mask = sta_flags->mask;
1613 params->sta_flags_set = sta_flags->set;
1614 if ((params->sta_flags_mask |
1615 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
1616 return -EINVAL;
1617 return 0;
1618 }
1619
1620 /* if present, parse the old attribute */
1621
1622 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
1623 if (!nla)
1624 return 0;
1625
1626 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
1627 nla, sta_flags_policy))
1628 return -EINVAL;
1629
1630 params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
1631 params->sta_flags_mask &= ~1;
1632
1633 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
1634 if (flags[flag])
1635 params->sta_flags_set |= (1<<flag);
1636
1637 return 0;
1638 }
1639
1640 static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
1641 int flags, struct net_device *dev,
1642 u8 *mac_addr, struct station_info *sinfo)
1643 {
1644 void *hdr;
1645 struct nlattr *sinfoattr, *txrate;
1646 u16 bitrate;
1647
1648 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
1649 if (!hdr)
1650 return -1;
1651
1652 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1653 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1654
1655 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, sinfo->generation);
1656
1657 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
1658 if (!sinfoattr)
1659 goto nla_put_failure;
1660 if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
1661 NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
1662 sinfo->inactive_time);
1663 if (sinfo->filled & STATION_INFO_RX_BYTES)
1664 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
1665 sinfo->rx_bytes);
1666 if (sinfo->filled & STATION_INFO_TX_BYTES)
1667 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
1668 sinfo->tx_bytes);
1669 if (sinfo->filled & STATION_INFO_LLID)
1670 NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
1671 sinfo->llid);
1672 if (sinfo->filled & STATION_INFO_PLID)
1673 NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
1674 sinfo->plid);
1675 if (sinfo->filled & STATION_INFO_PLINK_STATE)
1676 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
1677 sinfo->plink_state);
1678 if (sinfo->filled & STATION_INFO_SIGNAL)
1679 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
1680 sinfo->signal);
1681 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
1682 txrate = nla_nest_start(msg, NL80211_STA_INFO_TX_BITRATE);
1683 if (!txrate)
1684 goto nla_put_failure;
1685
1686 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
1687 bitrate = cfg80211_calculate_bitrate(&sinfo->txrate);
1688 if (bitrate > 0)
1689 NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
1690
1691 if (sinfo->txrate.flags & RATE_INFO_FLAGS_MCS)
1692 NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS,
1693 sinfo->txrate.mcs);
1694 if (sinfo->txrate.flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
1695 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
1696 if (sinfo->txrate.flags & RATE_INFO_FLAGS_SHORT_GI)
1697 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
1698
1699 nla_nest_end(msg, txrate);
1700 }
1701 if (sinfo->filled & STATION_INFO_RX_PACKETS)
1702 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
1703 sinfo->rx_packets);
1704 if (sinfo->filled & STATION_INFO_TX_PACKETS)
1705 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
1706 sinfo->tx_packets);
1707 nla_nest_end(msg, sinfoattr);
1708
1709 return genlmsg_end(msg, hdr);
1710
1711 nla_put_failure:
1712 genlmsg_cancel(msg, hdr);
1713 return -EMSGSIZE;
1714 }
1715
1716 static int nl80211_dump_station(struct sk_buff *skb,
1717 struct netlink_callback *cb)
1718 {
1719 struct station_info sinfo;
1720 struct cfg80211_registered_device *dev;
1721 struct net_device *netdev;
1722 u8 mac_addr[ETH_ALEN];
1723 int ifidx = cb->args[0];
1724 int sta_idx = cb->args[1];
1725 int err;
1726
1727 if (!ifidx)
1728 ifidx = nl80211_get_ifidx(cb);
1729 if (ifidx < 0)
1730 return ifidx;
1731
1732 rtnl_lock();
1733
1734 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
1735 if (!netdev) {
1736 err = -ENODEV;
1737 goto out_rtnl;
1738 }
1739
1740 dev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
1741 if (IS_ERR(dev)) {
1742 err = PTR_ERR(dev);
1743 goto out_rtnl;
1744 }
1745
1746 if (!dev->ops->dump_station) {
1747 err = -EOPNOTSUPP;
1748 goto out_err;
1749 }
1750
1751 while (1) {
1752 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
1753 mac_addr, &sinfo);
1754 if (err == -ENOENT)
1755 break;
1756 if (err)
1757 goto out_err;
1758
1759 if (nl80211_send_station(skb,
1760 NETLINK_CB(cb->skb).pid,
1761 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1762 netdev, mac_addr,
1763 &sinfo) < 0)
1764 goto out;
1765
1766 sta_idx++;
1767 }
1768
1769
1770 out:
1771 cb->args[1] = sta_idx;
1772 err = skb->len;
1773 out_err:
1774 cfg80211_unlock_rdev(dev);
1775 out_rtnl:
1776 rtnl_unlock();
1777
1778 return err;
1779 }
1780
1781 static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
1782 {
1783 struct cfg80211_registered_device *rdev;
1784 int err;
1785 struct net_device *dev;
1786 struct station_info sinfo;
1787 struct sk_buff *msg;
1788 u8 *mac_addr = NULL;
1789
1790 memset(&sinfo, 0, sizeof(sinfo));
1791
1792 if (!info->attrs[NL80211_ATTR_MAC])
1793 return -EINVAL;
1794
1795 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1796
1797 rtnl_lock();
1798
1799 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1800 if (err)
1801 goto out_rtnl;
1802
1803 if (!rdev->ops->get_station) {
1804 err = -EOPNOTSUPP;
1805 goto out;
1806 }
1807
1808 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
1809 if (err)
1810 goto out;
1811
1812 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1813 if (!msg)
1814 goto out;
1815
1816 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
1817 dev, mac_addr, &sinfo) < 0)
1818 goto out_free;
1819
1820 err = genlmsg_reply(msg, info);
1821 goto out;
1822
1823 out_free:
1824 nlmsg_free(msg);
1825 out:
1826 cfg80211_unlock_rdev(rdev);
1827 dev_put(dev);
1828 out_rtnl:
1829 rtnl_unlock();
1830
1831 return err;
1832 }
1833
1834 /*
1835 * Get vlan interface making sure it is running and on the right wiphy.
1836 */
1837 static int get_vlan(struct genl_info *info,
1838 struct cfg80211_registered_device *rdev,
1839 struct net_device **vlan)
1840 {
1841 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
1842 *vlan = NULL;
1843
1844 if (vlanattr) {
1845 *vlan = dev_get_by_index(genl_info_net(info),
1846 nla_get_u32(vlanattr));
1847 if (!*vlan)
1848 return -ENODEV;
1849 if (!(*vlan)->ieee80211_ptr)
1850 return -EINVAL;
1851 if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
1852 return -EINVAL;
1853 if (!netif_running(*vlan))
1854 return -ENETDOWN;
1855 }
1856 return 0;
1857 }
1858
1859 static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
1860 {
1861 struct cfg80211_registered_device *rdev;
1862 int err;
1863 struct net_device *dev;
1864 struct station_parameters params;
1865 u8 *mac_addr = NULL;
1866
1867 memset(&params, 0, sizeof(params));
1868
1869 params.listen_interval = -1;
1870
1871 if (info->attrs[NL80211_ATTR_STA_AID])
1872 return -EINVAL;
1873
1874 if (!info->attrs[NL80211_ATTR_MAC])
1875 return -EINVAL;
1876
1877 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1878
1879 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
1880 params.supported_rates =
1881 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1882 params.supported_rates_len =
1883 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1884 }
1885
1886 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
1887 params.listen_interval =
1888 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
1889
1890 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
1891 params.ht_capa =
1892 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
1893
1894 if (parse_station_flags(info, &params))
1895 return -EINVAL;
1896
1897 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
1898 params.plink_action =
1899 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
1900
1901 rtnl_lock();
1902
1903 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
1904 if (err)
1905 goto out_rtnl;
1906
1907 err = get_vlan(info, rdev, &params.vlan);
1908 if (err)
1909 goto out;
1910
1911 /* validate settings */
1912 err = 0;
1913
1914 switch (dev->ieee80211_ptr->iftype) {
1915 case NL80211_IFTYPE_AP:
1916 case NL80211_IFTYPE_AP_VLAN:
1917 /* disallow mesh-specific things */
1918 if (params.plink_action)
1919 err = -EINVAL;
1920 break;
1921 case NL80211_IFTYPE_STATION:
1922 /* disallow everything but AUTHORIZED flag */
1923 if (params.plink_action)
1924 err = -EINVAL;
1925 if (params.vlan)
1926 err = -EINVAL;
1927 if (params.supported_rates)
1928 err = -EINVAL;
1929 if (params.ht_capa)
1930 err = -EINVAL;
1931 if (params.listen_interval >= 0)
1932 err = -EINVAL;
1933 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
1934 err = -EINVAL;
1935 break;
1936 case NL80211_IFTYPE_MESH_POINT:
1937 /* disallow things mesh doesn't support */
1938 if (params.vlan)
1939 err = -EINVAL;
1940 if (params.ht_capa)
1941 err = -EINVAL;
1942 if (params.listen_interval >= 0)
1943 err = -EINVAL;
1944 if (params.supported_rates)
1945 err = -EINVAL;
1946 if (params.sta_flags_mask)
1947 err = -EINVAL;
1948 break;
1949 default:
1950 err = -EINVAL;
1951 }
1952
1953 if (err)
1954 goto out;
1955
1956 if (!rdev->ops->change_station) {
1957 err = -EOPNOTSUPP;
1958 goto out;
1959 }
1960
1961 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
1962
1963 out:
1964 if (params.vlan)
1965 dev_put(params.vlan);
1966 cfg80211_unlock_rdev(rdev);
1967 dev_put(dev);
1968 out_rtnl:
1969 rtnl_unlock();
1970
1971 return err;
1972 }
1973
1974 static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
1975 {
1976 struct cfg80211_registered_device *rdev;
1977 int err;
1978 struct net_device *dev;
1979 struct station_parameters params;
1980 u8 *mac_addr = NULL;
1981
1982 memset(&params, 0, sizeof(params));
1983
1984 if (!info->attrs[NL80211_ATTR_MAC])
1985 return -EINVAL;
1986
1987 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
1988 return -EINVAL;
1989
1990 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
1991 return -EINVAL;
1992
1993 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1994 params.supported_rates =
1995 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1996 params.supported_rates_len =
1997 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1998 params.listen_interval =
1999 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
2000
2001 if (info->attrs[NL80211_ATTR_STA_AID]) {
2002 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
2003 if (!params.aid || params.aid > IEEE80211_MAX_AID)
2004 return -EINVAL;
2005 }
2006
2007 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2008 params.ht_capa =
2009 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
2010
2011 if (parse_station_flags(info, &params))
2012 return -EINVAL;
2013
2014 rtnl_lock();
2015
2016 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2017 if (err)
2018 goto out_rtnl;
2019
2020 err = get_vlan(info, rdev, &params.vlan);
2021 if (err)
2022 goto out;
2023
2024 /* validate settings */
2025 err = 0;
2026
2027 switch (dev->ieee80211_ptr->iftype) {
2028 case NL80211_IFTYPE_AP:
2029 case NL80211_IFTYPE_AP_VLAN:
2030 /* all ok but must have AID */
2031 if (!params.aid)
2032 err = -EINVAL;
2033 break;
2034 case NL80211_IFTYPE_MESH_POINT:
2035 /* disallow things mesh doesn't support */
2036 if (params.vlan)
2037 err = -EINVAL;
2038 if (params.aid)
2039 err = -EINVAL;
2040 if (params.ht_capa)
2041 err = -EINVAL;
2042 if (params.listen_interval >= 0)
2043 err = -EINVAL;
2044 if (params.supported_rates)
2045 err = -EINVAL;
2046 if (params.sta_flags_mask)
2047 err = -EINVAL;
2048 break;
2049 default:
2050 err = -EINVAL;
2051 }
2052
2053 if (err)
2054 goto out;
2055
2056 if (!rdev->ops->add_station) {
2057 err = -EOPNOTSUPP;
2058 goto out;
2059 }
2060
2061 if (!netif_running(dev)) {
2062 err = -ENETDOWN;
2063 goto out;
2064 }
2065
2066 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
2067
2068 out:
2069 if (params.vlan)
2070 dev_put(params.vlan);
2071 cfg80211_unlock_rdev(rdev);
2072 dev_put(dev);
2073 out_rtnl:
2074 rtnl_unlock();
2075
2076 return err;
2077 }
2078
2079 static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
2080 {
2081 struct cfg80211_registered_device *rdev;
2082 int err;
2083 struct net_device *dev;
2084 u8 *mac_addr = NULL;
2085
2086 if (info->attrs[NL80211_ATTR_MAC])
2087 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2088
2089 rtnl_lock();
2090
2091 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2092 if (err)
2093 goto out_rtnl;
2094
2095 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2096 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
2097 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2098 err = -EINVAL;
2099 goto out;
2100 }
2101
2102 if (!rdev->ops->del_station) {
2103 err = -EOPNOTSUPP;
2104 goto out;
2105 }
2106
2107 err = rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
2108
2109 out:
2110 cfg80211_unlock_rdev(rdev);
2111 dev_put(dev);
2112 out_rtnl:
2113 rtnl_unlock();
2114
2115 return err;
2116 }
2117
2118 static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
2119 int flags, struct net_device *dev,
2120 u8 *dst, u8 *next_hop,
2121 struct mpath_info *pinfo)
2122 {
2123 void *hdr;
2124 struct nlattr *pinfoattr;
2125
2126 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2127 if (!hdr)
2128 return -1;
2129
2130 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2131 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
2132 NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
2133
2134 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, pinfo->generation);
2135
2136 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
2137 if (!pinfoattr)
2138 goto nla_put_failure;
2139 if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
2140 NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
2141 pinfo->frame_qlen);
2142 if (pinfo->filled & MPATH_INFO_SN)
2143 NLA_PUT_U32(msg, NL80211_MPATH_INFO_SN,
2144 pinfo->sn);
2145 if (pinfo->filled & MPATH_INFO_METRIC)
2146 NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
2147 pinfo->metric);
2148 if (pinfo->filled & MPATH_INFO_EXPTIME)
2149 NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
2150 pinfo->exptime);
2151 if (pinfo->filled & MPATH_INFO_FLAGS)
2152 NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
2153 pinfo->flags);
2154 if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
2155 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
2156 pinfo->discovery_timeout);
2157 if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
2158 NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
2159 pinfo->discovery_retries);
2160
2161 nla_nest_end(msg, pinfoattr);
2162
2163 return genlmsg_end(msg, hdr);
2164
2165 nla_put_failure:
2166 genlmsg_cancel(msg, hdr);
2167 return -EMSGSIZE;
2168 }
2169
2170 static int nl80211_dump_mpath(struct sk_buff *skb,
2171 struct netlink_callback *cb)
2172 {
2173 struct mpath_info pinfo;
2174 struct cfg80211_registered_device *dev;
2175 struct net_device *netdev;
2176 u8 dst[ETH_ALEN];
2177 u8 next_hop[ETH_ALEN];
2178 int ifidx = cb->args[0];
2179 int path_idx = cb->args[1];
2180 int err;
2181
2182 if (!ifidx)
2183 ifidx = nl80211_get_ifidx(cb);
2184 if (ifidx < 0)
2185 return ifidx;
2186
2187 rtnl_lock();
2188
2189 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
2190 if (!netdev) {
2191 err = -ENODEV;
2192 goto out_rtnl;
2193 }
2194
2195 dev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
2196 if (IS_ERR(dev)) {
2197 err = PTR_ERR(dev);
2198 goto out_rtnl;
2199 }
2200
2201 if (!dev->ops->dump_mpath) {
2202 err = -EOPNOTSUPP;
2203 goto out_err;
2204 }
2205
2206 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2207 err = -EOPNOTSUPP;
2208 goto out_err;
2209 }
2210
2211 while (1) {
2212 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
2213 dst, next_hop, &pinfo);
2214 if (err == -ENOENT)
2215 break;
2216 if (err)
2217 goto out_err;
2218
2219 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
2220 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2221 netdev, dst, next_hop,
2222 &pinfo) < 0)
2223 goto out;
2224
2225 path_idx++;
2226 }
2227
2228
2229 out:
2230 cb->args[1] = path_idx;
2231 err = skb->len;
2232 out_err:
2233 cfg80211_unlock_rdev(dev);
2234 out_rtnl:
2235 rtnl_unlock();
2236
2237 return err;
2238 }
2239
2240 static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
2241 {
2242 struct cfg80211_registered_device *rdev;
2243 int err;
2244 struct net_device *dev;
2245 struct mpath_info pinfo;
2246 struct sk_buff *msg;
2247 u8 *dst = NULL;
2248 u8 next_hop[ETH_ALEN];
2249
2250 memset(&pinfo, 0, sizeof(pinfo));
2251
2252 if (!info->attrs[NL80211_ATTR_MAC])
2253 return -EINVAL;
2254
2255 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2256
2257 rtnl_lock();
2258
2259 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2260 if (err)
2261 goto out_rtnl;
2262
2263 if (!rdev->ops->get_mpath) {
2264 err = -EOPNOTSUPP;
2265 goto out;
2266 }
2267
2268 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2269 err = -EOPNOTSUPP;
2270 goto out;
2271 }
2272
2273 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2274 if (err)
2275 goto out;
2276
2277 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2278 if (!msg)
2279 goto out;
2280
2281 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
2282 dev, dst, next_hop, &pinfo) < 0)
2283 goto out_free;
2284
2285 err = genlmsg_reply(msg, info);
2286 goto out;
2287
2288 out_free:
2289 nlmsg_free(msg);
2290 out:
2291 cfg80211_unlock_rdev(rdev);
2292 dev_put(dev);
2293 out_rtnl:
2294 rtnl_unlock();
2295
2296 return err;
2297 }
2298
2299 static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
2300 {
2301 struct cfg80211_registered_device *rdev;
2302 int err;
2303 struct net_device *dev;
2304 u8 *dst = NULL;
2305 u8 *next_hop = NULL;
2306
2307 if (!info->attrs[NL80211_ATTR_MAC])
2308 return -EINVAL;
2309
2310 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2311 return -EINVAL;
2312
2313 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2314 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2315
2316 rtnl_lock();
2317
2318 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2319 if (err)
2320 goto out_rtnl;
2321
2322 if (!rdev->ops->change_mpath) {
2323 err = -EOPNOTSUPP;
2324 goto out;
2325 }
2326
2327 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2328 err = -EOPNOTSUPP;
2329 goto out;
2330 }
2331
2332 if (!netif_running(dev)) {
2333 err = -ENETDOWN;
2334 goto out;
2335 }
2336
2337 err = rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2338
2339 out:
2340 cfg80211_unlock_rdev(rdev);
2341 dev_put(dev);
2342 out_rtnl:
2343 rtnl_unlock();
2344
2345 return err;
2346 }
2347 static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
2348 {
2349 struct cfg80211_registered_device *rdev;
2350 int err;
2351 struct net_device *dev;
2352 u8 *dst = NULL;
2353 u8 *next_hop = NULL;
2354
2355 if (!info->attrs[NL80211_ATTR_MAC])
2356 return -EINVAL;
2357
2358 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2359 return -EINVAL;
2360
2361 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2362 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2363
2364 rtnl_lock();
2365
2366 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2367 if (err)
2368 goto out_rtnl;
2369
2370 if (!rdev->ops->add_mpath) {
2371 err = -EOPNOTSUPP;
2372 goto out;
2373 }
2374
2375 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2376 err = -EOPNOTSUPP;
2377 goto out;
2378 }
2379
2380 if (!netif_running(dev)) {
2381 err = -ENETDOWN;
2382 goto out;
2383 }
2384
2385 err = rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2386
2387 out:
2388 cfg80211_unlock_rdev(rdev);
2389 dev_put(dev);
2390 out_rtnl:
2391 rtnl_unlock();
2392
2393 return err;
2394 }
2395
2396 static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
2397 {
2398 struct cfg80211_registered_device *rdev;
2399 int err;
2400 struct net_device *dev;
2401 u8 *dst = NULL;
2402
2403 if (info->attrs[NL80211_ATTR_MAC])
2404 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2405
2406 rtnl_lock();
2407
2408 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2409 if (err)
2410 goto out_rtnl;
2411
2412 if (!rdev->ops->del_mpath) {
2413 err = -EOPNOTSUPP;
2414 goto out;
2415 }
2416
2417 err = rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2418
2419 out:
2420 cfg80211_unlock_rdev(rdev);
2421 dev_put(dev);
2422 out_rtnl:
2423 rtnl_unlock();
2424
2425 return err;
2426 }
2427
2428 static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
2429 {
2430 struct cfg80211_registered_device *rdev;
2431 int err;
2432 struct net_device *dev;
2433 struct bss_parameters params;
2434
2435 memset(&params, 0, sizeof(params));
2436 /* default to not changing parameters */
2437 params.use_cts_prot = -1;
2438 params.use_short_preamble = -1;
2439 params.use_short_slot_time = -1;
2440
2441 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
2442 params.use_cts_prot =
2443 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
2444 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
2445 params.use_short_preamble =
2446 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
2447 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
2448 params.use_short_slot_time =
2449 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
2450 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
2451 params.basic_rates =
2452 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2453 params.basic_rates_len =
2454 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2455 }
2456
2457 rtnl_lock();
2458
2459 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2460 if (err)
2461 goto out_rtnl;
2462
2463 if (!rdev->ops->change_bss) {
2464 err = -EOPNOTSUPP;
2465 goto out;
2466 }
2467
2468 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
2469 err = -EOPNOTSUPP;
2470 goto out;
2471 }
2472
2473 err = rdev->ops->change_bss(&rdev->wiphy, dev, &params);
2474
2475 out:
2476 cfg80211_unlock_rdev(rdev);
2477 dev_put(dev);
2478 out_rtnl:
2479 rtnl_unlock();
2480
2481 return err;
2482 }
2483
2484 static const struct nla_policy
2485 reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
2486 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
2487 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
2488 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
2489 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
2490 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
2491 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
2492 };
2493
2494 static int parse_reg_rule(struct nlattr *tb[],
2495 struct ieee80211_reg_rule *reg_rule)
2496 {
2497 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
2498 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
2499
2500 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
2501 return -EINVAL;
2502 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
2503 return -EINVAL;
2504 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
2505 return -EINVAL;
2506 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
2507 return -EINVAL;
2508 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
2509 return -EINVAL;
2510
2511 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
2512
2513 freq_range->start_freq_khz =
2514 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
2515 freq_range->end_freq_khz =
2516 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
2517 freq_range->max_bandwidth_khz =
2518 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
2519
2520 power_rule->max_eirp =
2521 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
2522
2523 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
2524 power_rule->max_antenna_gain =
2525 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
2526
2527 return 0;
2528 }
2529
2530 static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
2531 {
2532 int r;
2533 char *data = NULL;
2534
2535 /*
2536 * You should only get this when cfg80211 hasn't yet initialized
2537 * completely when built-in to the kernel right between the time
2538 * window between nl80211_init() and regulatory_init(), if that is
2539 * even possible.
2540 */
2541 mutex_lock(&cfg80211_mutex);
2542 if (unlikely(!cfg80211_regdomain)) {
2543 mutex_unlock(&cfg80211_mutex);
2544 return -EINPROGRESS;
2545 }
2546 mutex_unlock(&cfg80211_mutex);
2547
2548 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2549 return -EINVAL;
2550
2551 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2552
2553 #ifdef CONFIG_WIRELESS_OLD_REGULATORY
2554 /* We ignore world regdom requests with the old regdom setup */
2555 if (is_world_regdom(data))
2556 return -EINVAL;
2557 #endif
2558
2559 r = regulatory_hint_user(data);
2560
2561 return r;
2562 }
2563
2564 static int nl80211_get_mesh_params(struct sk_buff *skb,
2565 struct genl_info *info)
2566 {
2567 struct cfg80211_registered_device *rdev;
2568 struct mesh_config cur_params;
2569 int err;
2570 struct net_device *dev;
2571 void *hdr;
2572 struct nlattr *pinfoattr;
2573 struct sk_buff *msg;
2574
2575 rtnl_lock();
2576
2577 /* Look up our device */
2578 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2579 if (err)
2580 goto out_rtnl;
2581
2582 if (!rdev->ops->get_mesh_params) {
2583 err = -EOPNOTSUPP;
2584 goto out;
2585 }
2586
2587 /* Get the mesh params */
2588 err = rdev->ops->get_mesh_params(&rdev->wiphy, dev, &cur_params);
2589 if (err)
2590 goto out;
2591
2592 /* Draw up a netlink message to send back */
2593 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2594 if (!msg) {
2595 err = -ENOBUFS;
2596 goto out;
2597 }
2598 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2599 NL80211_CMD_GET_MESH_PARAMS);
2600 if (!hdr)
2601 goto nla_put_failure;
2602 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_PARAMS);
2603 if (!pinfoattr)
2604 goto nla_put_failure;
2605 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2606 NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
2607 cur_params.dot11MeshRetryTimeout);
2608 NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
2609 cur_params.dot11MeshConfirmTimeout);
2610 NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
2611 cur_params.dot11MeshHoldingTimeout);
2612 NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
2613 cur_params.dot11MeshMaxPeerLinks);
2614 NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
2615 cur_params.dot11MeshMaxRetries);
2616 NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
2617 cur_params.dot11MeshTTL);
2618 NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
2619 cur_params.auto_open_plinks);
2620 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
2621 cur_params.dot11MeshHWMPmaxPREQretries);
2622 NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
2623 cur_params.path_refresh_time);
2624 NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
2625 cur_params.min_discovery_timeout);
2626 NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
2627 cur_params.dot11MeshHWMPactivePathTimeout);
2628 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
2629 cur_params.dot11MeshHWMPpreqMinInterval);
2630 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
2631 cur_params.dot11MeshHWMPnetDiameterTraversalTime);
2632 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
2633 cur_params.dot11MeshHWMPRootMode);
2634 nla_nest_end(msg, pinfoattr);
2635 genlmsg_end(msg, hdr);
2636 err = genlmsg_reply(msg, info);
2637 goto out;
2638
2639 nla_put_failure:
2640 genlmsg_cancel(msg, hdr);
2641 err = -EMSGSIZE;
2642 out:
2643 /* Cleanup */
2644 cfg80211_unlock_rdev(rdev);
2645 dev_put(dev);
2646 out_rtnl:
2647 rtnl_unlock();
2648
2649 return err;
2650 }
2651
2652 #define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
2653 do {\
2654 if (table[attr_num]) {\
2655 cfg.param = nla_fn(table[attr_num]); \
2656 mask |= (1 << (attr_num - 1)); \
2657 } \
2658 } while (0);\
2659
2660 static struct nla_policy
2661 nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] __read_mostly = {
2662 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
2663 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
2664 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
2665 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
2666 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
2667 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
2668 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
2669
2670 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
2671 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
2672 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
2673 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
2674 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
2675 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
2676 };
2677
2678 static int nl80211_set_mesh_params(struct sk_buff *skb, struct genl_info *info)
2679 {
2680 int err;
2681 u32 mask;
2682 struct cfg80211_registered_device *rdev;
2683 struct net_device *dev;
2684 struct mesh_config cfg;
2685 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
2686 struct nlattr *parent_attr;
2687
2688 parent_attr = info->attrs[NL80211_ATTR_MESH_PARAMS];
2689 if (!parent_attr)
2690 return -EINVAL;
2691 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
2692 parent_attr, nl80211_meshconf_params_policy))
2693 return -EINVAL;
2694
2695 rtnl_lock();
2696
2697 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2698 if (err)
2699 goto out_rtnl;
2700
2701 if (!rdev->ops->set_mesh_params) {
2702 err = -EOPNOTSUPP;
2703 goto out;
2704 }
2705
2706 /* This makes sure that there aren't more than 32 mesh config
2707 * parameters (otherwise our bitfield scheme would not work.) */
2708 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
2709
2710 /* Fill in the params struct */
2711 mask = 0;
2712 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
2713 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
2714 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
2715 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
2716 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
2717 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
2718 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
2719 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
2720 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
2721 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
2722 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
2723 mask, NL80211_MESHCONF_TTL, nla_get_u8);
2724 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
2725 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
2726 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
2727 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
2728 nla_get_u8);
2729 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
2730 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
2731 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
2732 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
2733 nla_get_u16);
2734 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
2735 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
2736 nla_get_u32);
2737 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
2738 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
2739 nla_get_u16);
2740 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
2741 dot11MeshHWMPnetDiameterTraversalTime,
2742 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
2743 nla_get_u16);
2744 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
2745 dot11MeshHWMPRootMode, mask,
2746 NL80211_MESHCONF_HWMP_ROOTMODE,
2747 nla_get_u8);
2748
2749 /* Apply changes */
2750 err = rdev->ops->set_mesh_params(&rdev->wiphy, dev, &cfg, mask);
2751
2752 out:
2753 /* cleanup */
2754 cfg80211_unlock_rdev(rdev);
2755 dev_put(dev);
2756 out_rtnl:
2757 rtnl_unlock();
2758
2759 return err;
2760 }
2761
2762 #undef FILL_IN_MESH_PARAM_IF_SET
2763
2764 static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
2765 {
2766 struct sk_buff *msg;
2767 void *hdr = NULL;
2768 struct nlattr *nl_reg_rules;
2769 unsigned int i;
2770 int err = -EINVAL;
2771
2772 mutex_lock(&cfg80211_mutex);
2773
2774 if (!cfg80211_regdomain)
2775 goto out;
2776
2777 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2778 if (!msg) {
2779 err = -ENOBUFS;
2780 goto out;
2781 }
2782
2783 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2784 NL80211_CMD_GET_REG);
2785 if (!hdr)
2786 goto nla_put_failure;
2787
2788 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
2789 cfg80211_regdomain->alpha2);
2790
2791 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
2792 if (!nl_reg_rules)
2793 goto nla_put_failure;
2794
2795 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
2796 struct nlattr *nl_reg_rule;
2797 const struct ieee80211_reg_rule *reg_rule;
2798 const struct ieee80211_freq_range *freq_range;
2799 const struct ieee80211_power_rule *power_rule;
2800
2801 reg_rule = &cfg80211_regdomain->reg_rules[i];
2802 freq_range = &reg_rule->freq_range;
2803 power_rule = &reg_rule->power_rule;
2804
2805 nl_reg_rule = nla_nest_start(msg, i);
2806 if (!nl_reg_rule)
2807 goto nla_put_failure;
2808
2809 NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
2810 reg_rule->flags);
2811 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
2812 freq_range->start_freq_khz);
2813 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
2814 freq_range->end_freq_khz);
2815 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
2816 freq_range->max_bandwidth_khz);
2817 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
2818 power_rule->max_antenna_gain);
2819 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
2820 power_rule->max_eirp);
2821
2822 nla_nest_end(msg, nl_reg_rule);
2823 }
2824
2825 nla_nest_end(msg, nl_reg_rules);
2826
2827 genlmsg_end(msg, hdr);
2828 err = genlmsg_reply(msg, info);
2829 goto out;
2830
2831 nla_put_failure:
2832 genlmsg_cancel(msg, hdr);
2833 err = -EMSGSIZE;
2834 out:
2835 mutex_unlock(&cfg80211_mutex);
2836 return err;
2837 }
2838
2839 static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
2840 {
2841 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
2842 struct nlattr *nl_reg_rule;
2843 char *alpha2 = NULL;
2844 int rem_reg_rules = 0, r = 0;
2845 u32 num_rules = 0, rule_idx = 0, size_of_regd;
2846 struct ieee80211_regdomain *rd = NULL;
2847
2848 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2849 return -EINVAL;
2850
2851 if (!info->attrs[NL80211_ATTR_REG_RULES])
2852 return -EINVAL;
2853
2854 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2855
2856 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
2857 rem_reg_rules) {
2858 num_rules++;
2859 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
2860 return -EINVAL;
2861 }
2862
2863 mutex_lock(&cfg80211_mutex);
2864
2865 if (!reg_is_valid_request(alpha2)) {
2866 r = -EINVAL;
2867 goto bad_reg;
2868 }
2869
2870 size_of_regd = sizeof(struct ieee80211_regdomain) +
2871 (num_rules * sizeof(struct ieee80211_reg_rule));
2872
2873 rd = kzalloc(size_of_regd, GFP_KERNEL);
2874 if (!rd) {
2875 r = -ENOMEM;
2876 goto bad_reg;
2877 }
2878
2879 rd->n_reg_rules = num_rules;
2880 rd->alpha2[0] = alpha2[0];
2881 rd->alpha2[1] = alpha2[1];
2882
2883 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
2884 rem_reg_rules) {
2885 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
2886 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
2887 reg_rule_policy);
2888 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
2889 if (r)
2890 goto bad_reg;
2891
2892 rule_idx++;
2893
2894 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
2895 r = -EINVAL;
2896 goto bad_reg;
2897 }
2898 }
2899
2900 BUG_ON(rule_idx != num_rules);
2901
2902 r = set_regdom(rd);
2903
2904 mutex_unlock(&cfg80211_mutex);
2905
2906 return r;
2907
2908 bad_reg:
2909 mutex_unlock(&cfg80211_mutex);
2910 kfree(rd);
2911 return r;
2912 }
2913
2914 static int validate_scan_freqs(struct nlattr *freqs)
2915 {
2916 struct nlattr *attr1, *attr2;
2917 int n_channels = 0, tmp1, tmp2;
2918
2919 nla_for_each_nested(attr1, freqs, tmp1) {
2920 n_channels++;
2921 /*
2922 * Some hardware has a limited channel list for
2923 * scanning, and it is pretty much nonsensical
2924 * to scan for a channel twice, so disallow that
2925 * and don't require drivers to check that the
2926 * channel list they get isn't longer than what
2927 * they can scan, as long as they can scan all
2928 * the channels they registered at once.
2929 */
2930 nla_for_each_nested(attr2, freqs, tmp2)
2931 if (attr1 != attr2 &&
2932 nla_get_u32(attr1) == nla_get_u32(attr2))
2933 return 0;
2934 }
2935
2936 return n_channels;
2937 }
2938
2939 static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
2940 {
2941 struct cfg80211_registered_device *rdev;
2942 struct net_device *dev;
2943 struct cfg80211_scan_request *request;
2944 struct cfg80211_ssid *ssid;
2945 struct ieee80211_channel *channel;
2946 struct nlattr *attr;
2947 struct wiphy *wiphy;
2948 int err, tmp, n_ssids = 0, n_channels, i;
2949 enum ieee80211_band band;
2950 size_t ie_len;
2951
2952 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
2953 return -EINVAL;
2954
2955 rtnl_lock();
2956
2957 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2958 if (err)
2959 goto out_rtnl;
2960
2961 wiphy = &rdev->wiphy;
2962
2963 if (!rdev->ops->scan) {
2964 err = -EOPNOTSUPP;
2965 goto out;
2966 }
2967
2968 if (!netif_running(dev)) {
2969 err = -ENETDOWN;
2970 goto out;
2971 }
2972
2973 if (rdev->scan_req) {
2974 err = -EBUSY;
2975 goto out;
2976 }
2977
2978 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
2979 n_channels = validate_scan_freqs(
2980 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
2981 if (!n_channels) {
2982 err = -EINVAL;
2983 goto out;
2984 }
2985 } else {
2986 n_channels = 0;
2987
2988 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
2989 if (wiphy->bands[band])
2990 n_channels += wiphy->bands[band]->n_channels;
2991 }
2992
2993 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
2994 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
2995 n_ssids++;
2996
2997 if (n_ssids > wiphy->max_scan_ssids) {
2998 err = -EINVAL;
2999 goto out;
3000 }
3001
3002 if (info->attrs[NL80211_ATTR_IE])
3003 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3004 else
3005 ie_len = 0;
3006
3007 if (ie_len > wiphy->max_scan_ie_len) {
3008 err = -EINVAL;
3009 goto out;
3010 }
3011
3012 request = kzalloc(sizeof(*request)
3013 + sizeof(*ssid) * n_ssids
3014 + sizeof(channel) * n_channels
3015 + ie_len, GFP_KERNEL);
3016 if (!request) {
3017 err = -ENOMEM;
3018 goto out;
3019 }
3020
3021 if (n_ssids)
3022 request->ssids = (void *)&request->channels[n_channels];
3023 request->n_ssids = n_ssids;
3024 if (ie_len) {
3025 if (request->ssids)
3026 request->ie = (void *)(request->ssids + n_ssids);
3027 else
3028 request->ie = (void *)(request->channels + n_channels);
3029 }
3030
3031 i = 0;
3032 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3033 /* user specified, bail out if channel not found */
3034 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
3035 struct ieee80211_channel *chan;
3036
3037 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3038
3039 if (!chan) {
3040 err = -EINVAL;
3041 goto out_free;
3042 }
3043
3044 /* ignore disabled channels */
3045 if (chan->flags & IEEE80211_CHAN_DISABLED)
3046 continue;
3047
3048 request->channels[i] = chan;
3049 i++;
3050 }
3051 } else {
3052 /* all channels */
3053 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3054 int j;
3055 if (!wiphy->bands[band])
3056 continue;
3057 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
3058 struct ieee80211_channel *chan;
3059
3060 chan = &wiphy->bands[band]->channels[j];
3061
3062 if (chan->flags & IEEE80211_CHAN_DISABLED)
3063 continue;
3064
3065 request->channels[i] = chan;
3066 i++;
3067 }
3068 }
3069 }
3070
3071 if (!i) {
3072 err = -EINVAL;
3073 goto out_free;
3074 }
3075
3076 request->n_channels = i;
3077
3078 i = 0;
3079 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3080 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
3081 if (request->ssids[i].ssid_len > IEEE80211_MAX_SSID_LEN) {
3082 err = -EINVAL;
3083 goto out_free;
3084 }
3085 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
3086 request->ssids[i].ssid_len = nla_len(attr);
3087 i++;
3088 }
3089 }
3090
3091 if (info->attrs[NL80211_ATTR_IE]) {
3092 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3093 memcpy((void *)request->ie,
3094 nla_data(info->attrs[NL80211_ATTR_IE]),
3095 request->ie_len);
3096 }
3097
3098 request->dev = dev;
3099 request->wiphy = &rdev->wiphy;
3100
3101 rdev->scan_req = request;
3102 err = rdev->ops->scan(&rdev->wiphy, dev, request);
3103
3104 if (!err) {
3105 nl80211_send_scan_start(rdev, dev);
3106 dev_hold(dev);
3107 }
3108
3109 out_free:
3110 if (err) {
3111 rdev->scan_req = NULL;
3112 kfree(request);
3113 }
3114 out:
3115 cfg80211_unlock_rdev(rdev);
3116 dev_put(dev);
3117 out_rtnl:
3118 rtnl_unlock();
3119
3120 return err;
3121 }
3122
3123 static int nl80211_send_bss(struct sk_buff *msg, u32 pid, u32 seq, int flags,
3124 struct cfg80211_registered_device *rdev,
3125 struct wireless_dev *wdev,
3126 struct cfg80211_internal_bss *intbss)
3127 {
3128 struct cfg80211_bss *res = &intbss->pub;
3129 void *hdr;
3130 struct nlattr *bss;
3131 int i;
3132
3133 ASSERT_WDEV_LOCK(wdev);
3134
3135 hdr = nl80211hdr_put(msg, pid, seq, flags,
3136 NL80211_CMD_NEW_SCAN_RESULTS);
3137 if (!hdr)
3138 return -1;
3139
3140 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation);
3141 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
3142
3143 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
3144 if (!bss)
3145 goto nla_put_failure;
3146 if (!is_zero_ether_addr(res->bssid))
3147 NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
3148 if (res->information_elements && res->len_information_elements)
3149 NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
3150 res->len_information_elements,
3151 res->information_elements);
3152 if (res->tsf)
3153 NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
3154 if (res->beacon_interval)
3155 NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
3156 NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
3157 NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
3158 NLA_PUT_U32(msg, NL80211_BSS_SEEN_MS_AGO,
3159 jiffies_to_msecs(jiffies - intbss->ts));
3160
3161 switch (rdev->wiphy.signal_type) {
3162 case CFG80211_SIGNAL_TYPE_MBM:
3163 NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
3164 break;
3165 case CFG80211_SIGNAL_TYPE_UNSPEC:
3166 NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
3167 break;
3168 default:
3169 break;
3170 }
3171
3172 switch (wdev->iftype) {
3173 case NL80211_IFTYPE_STATION:
3174 if (intbss == wdev->current_bss)
3175 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3176 NL80211_BSS_STATUS_ASSOCIATED);
3177 else for (i = 0; i < MAX_AUTH_BSSES; i++) {
3178 if (intbss != wdev->auth_bsses[i])
3179 continue;
3180 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3181 NL80211_BSS_STATUS_AUTHENTICATED);
3182 break;
3183 }
3184 break;
3185 case NL80211_IFTYPE_ADHOC:
3186 if (intbss == wdev->current_bss)
3187 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3188 NL80211_BSS_STATUS_IBSS_JOINED);
3189 break;
3190 default:
3191 break;
3192 }
3193
3194 nla_nest_end(msg, bss);
3195
3196 return genlmsg_end(msg, hdr);
3197
3198 nla_put_failure:
3199 genlmsg_cancel(msg, hdr);
3200 return -EMSGSIZE;
3201 }
3202
3203 static int nl80211_dump_scan(struct sk_buff *skb,
3204 struct netlink_callback *cb)
3205 {
3206 struct cfg80211_registered_device *rdev;
3207 struct net_device *dev;
3208 struct cfg80211_internal_bss *scan;
3209 struct wireless_dev *wdev;
3210 int ifidx = cb->args[0];
3211 int start = cb->args[1], idx = 0;
3212 int err;
3213
3214 if (!ifidx)
3215 ifidx = nl80211_get_ifidx(cb);
3216 if (ifidx < 0)
3217 return ifidx;
3218 cb->args[0] = ifidx;
3219
3220 dev = dev_get_by_index(sock_net(skb->sk), ifidx);
3221 if (!dev)
3222 return -ENODEV;
3223
3224 rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3225 if (IS_ERR(rdev)) {
3226 err = PTR_ERR(rdev);
3227 goto out_put_netdev;
3228 }
3229
3230 wdev = dev->ieee80211_ptr;
3231
3232 wdev_lock(wdev);
3233 spin_lock_bh(&rdev->bss_lock);
3234 cfg80211_bss_expire(rdev);
3235
3236 list_for_each_entry(scan, &rdev->bss_list, list) {
3237 if (++idx <= start)
3238 continue;
3239 if (nl80211_send_bss(skb,
3240 NETLINK_CB(cb->skb).pid,
3241 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3242 rdev, wdev, scan) < 0) {
3243 idx--;
3244 goto out;
3245 }
3246 }
3247
3248 out:
3249 spin_unlock_bh(&rdev->bss_lock);
3250 wdev_unlock(wdev);
3251
3252 cb->args[1] = idx;
3253 err = skb->len;
3254 cfg80211_unlock_rdev(rdev);
3255 out_put_netdev:
3256 dev_put(dev);
3257
3258 return err;
3259 }
3260
3261 static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
3262 int flags, struct net_device *dev,
3263 struct survey_info *survey)
3264 {
3265 void *hdr;
3266 struct nlattr *infoattr;
3267
3268 /* Survey without a channel doesn't make sense */
3269 if (!survey->channel)
3270 return -EINVAL;
3271
3272 hdr = nl80211hdr_put(msg, pid, seq, flags,
3273 NL80211_CMD_NEW_SURVEY_RESULTS);
3274 if (!hdr)
3275 return -ENOMEM;
3276
3277 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3278
3279 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
3280 if (!infoattr)
3281 goto nla_put_failure;
3282
3283 NLA_PUT_U32(msg, NL80211_SURVEY_INFO_FREQUENCY,
3284 survey->channel->center_freq);
3285 if (survey->filled & SURVEY_INFO_NOISE_DBM)
3286 NLA_PUT_U8(msg, NL80211_SURVEY_INFO_NOISE,
3287 survey->noise);
3288
3289 nla_nest_end(msg, infoattr);
3290
3291 return genlmsg_end(msg, hdr);
3292
3293 nla_put_failure:
3294 genlmsg_cancel(msg, hdr);
3295 return -EMSGSIZE;
3296 }
3297
3298 static int nl80211_dump_survey(struct sk_buff *skb,
3299 struct netlink_callback *cb)
3300 {
3301 struct survey_info survey;
3302 struct cfg80211_registered_device *dev;
3303 struct net_device *netdev;
3304 int ifidx = cb->args[0];
3305 int survey_idx = cb->args[1];
3306 int res;
3307
3308 if (!ifidx)
3309 ifidx = nl80211_get_ifidx(cb);
3310 if (ifidx < 0)
3311 return ifidx;
3312 cb->args[0] = ifidx;
3313
3314 rtnl_lock();
3315
3316 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
3317 if (!netdev) {
3318 res = -ENODEV;
3319 goto out_rtnl;
3320 }
3321
3322 dev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3323 if (IS_ERR(dev)) {
3324 res = PTR_ERR(dev);
3325 goto out_rtnl;
3326 }
3327
3328 if (!dev->ops->dump_survey) {
3329 res = -EOPNOTSUPP;
3330 goto out_err;
3331 }
3332
3333 while (1) {
3334 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
3335 &survey);
3336 if (res == -ENOENT)
3337 break;
3338 if (res)
3339 goto out_err;
3340
3341 if (nl80211_send_survey(skb,
3342 NETLINK_CB(cb->skb).pid,
3343 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3344 netdev,
3345 &survey) < 0)
3346 goto out;
3347 survey_idx++;
3348 }
3349
3350 out:
3351 cb->args[1] = survey_idx;
3352 res = skb->len;
3353 out_err:
3354 cfg80211_unlock_rdev(dev);
3355 out_rtnl:
3356 rtnl_unlock();
3357
3358 return res;
3359 }
3360
3361 static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
3362 {
3363 return auth_type <= NL80211_AUTHTYPE_MAX;
3364 }
3365
3366 static bool nl80211_valid_wpa_versions(u32 wpa_versions)
3367 {
3368 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
3369 NL80211_WPA_VERSION_2));
3370 }
3371
3372 static bool nl80211_valid_akm_suite(u32 akm)
3373 {
3374 return akm == WLAN_AKM_SUITE_8021X ||
3375 akm == WLAN_AKM_SUITE_PSK;
3376 }
3377
3378 static bool nl80211_valid_cipher_suite(u32 cipher)
3379 {
3380 return cipher == WLAN_CIPHER_SUITE_WEP40 ||
3381 cipher == WLAN_CIPHER_SUITE_WEP104 ||
3382 cipher == WLAN_CIPHER_SUITE_TKIP ||
3383 cipher == WLAN_CIPHER_SUITE_CCMP ||
3384 cipher == WLAN_CIPHER_SUITE_AES_CMAC;
3385 }
3386
3387
3388 static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
3389 {
3390 struct cfg80211_registered_device *rdev;
3391 struct net_device *dev;
3392 struct ieee80211_channel *chan;
3393 const u8 *bssid, *ssid, *ie = NULL;
3394 int err, ssid_len, ie_len = 0;
3395 enum nl80211_auth_type auth_type;
3396 struct key_parse key;
3397
3398 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3399 return -EINVAL;
3400
3401 if (!info->attrs[NL80211_ATTR_MAC])
3402 return -EINVAL;
3403
3404 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
3405 return -EINVAL;
3406
3407 if (!info->attrs[NL80211_ATTR_SSID])
3408 return -EINVAL;
3409
3410 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
3411 return -EINVAL;
3412
3413 err = nl80211_parse_key(info, &key);
3414 if (err)
3415 return err;
3416
3417 if (key.idx >= 0) {
3418 if (!key.p.key || !key.p.key_len)
3419 return -EINVAL;
3420 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
3421 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
3422 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
3423 key.p.key_len != WLAN_KEY_LEN_WEP104))
3424 return -EINVAL;
3425 if (key.idx > 4)
3426 return -EINVAL;
3427 } else {
3428 key.p.key_len = 0;
3429 key.p.key = NULL;
3430 }
3431
3432 rtnl_lock();
3433
3434 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3435 if (err)
3436 goto unlock_rtnl;
3437
3438 if (!rdev->ops->auth) {
3439 err = -EOPNOTSUPP;
3440 goto out;
3441 }
3442
3443 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3444 err = -EOPNOTSUPP;
3445 goto out;
3446 }
3447
3448 if (!netif_running(dev)) {
3449 err = -ENETDOWN;
3450 goto out;
3451 }
3452
3453 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3454 chan = ieee80211_get_channel(&rdev->wiphy,
3455 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3456 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
3457 err = -EINVAL;
3458 goto out;
3459 }
3460
3461 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3462 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
3463
3464 if (info->attrs[NL80211_ATTR_IE]) {
3465 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3466 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3467 }
3468
3469 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
3470 if (!nl80211_valid_auth_type(auth_type)) {
3471 err = -EINVAL;
3472 goto out;
3473 }
3474
3475 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
3476 ssid, ssid_len, ie, ie_len,
3477 key.p.key, key.p.key_len, key.idx);
3478
3479 out:
3480 cfg80211_unlock_rdev(rdev);
3481 dev_put(dev);
3482 unlock_rtnl:
3483 rtnl_unlock();
3484 return err;
3485 }
3486
3487 static int nl80211_crypto_settings(struct genl_info *info,
3488 struct cfg80211_crypto_settings *settings,
3489 int cipher_limit)
3490 {
3491 memset(settings, 0, sizeof(*settings));
3492
3493 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
3494
3495 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
3496 void *data;
3497 int len, i;
3498
3499 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
3500 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
3501 settings->n_ciphers_pairwise = len / sizeof(u32);
3502
3503 if (len % sizeof(u32))
3504 return -EINVAL;
3505
3506 if (settings->n_ciphers_pairwise > cipher_limit)
3507 return -EINVAL;
3508
3509 memcpy(settings->ciphers_pairwise, data, len);
3510
3511 for (i = 0; i < settings->n_ciphers_pairwise; i++)
3512 if (!nl80211_valid_cipher_suite(
3513 settings->ciphers_pairwise[i]))
3514 return -EINVAL;
3515 }
3516
3517 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
3518 settings->cipher_group =
3519 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
3520 if (!nl80211_valid_cipher_suite(settings->cipher_group))
3521 return -EINVAL;
3522 }
3523
3524 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
3525 settings->wpa_versions =
3526 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
3527 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
3528 return -EINVAL;
3529 }
3530
3531 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
3532 void *data;
3533 int len, i;
3534
3535 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
3536 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
3537 settings->n_akm_suites = len / sizeof(u32);
3538
3539 if (len % sizeof(u32))
3540 return -EINVAL;
3541
3542 memcpy(settings->akm_suites, data, len);
3543
3544 for (i = 0; i < settings->n_ciphers_pairwise; i++)
3545 if (!nl80211_valid_akm_suite(settings->akm_suites[i]))
3546 return -EINVAL;
3547 }
3548
3549 return 0;
3550 }
3551
3552 static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
3553 {
3554 struct cfg80211_registered_device *rdev;
3555 struct net_device *dev;
3556 struct cfg80211_crypto_settings crypto;
3557 struct ieee80211_channel *chan, *fixedchan;
3558 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
3559 int err, ssid_len, ie_len = 0;
3560 bool use_mfp = false;
3561
3562 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3563 return -EINVAL;
3564
3565 if (!info->attrs[NL80211_ATTR_MAC] ||
3566 !info->attrs[NL80211_ATTR_SSID] ||
3567 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
3568 return -EINVAL;
3569
3570 rtnl_lock();
3571
3572 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3573 if (err)
3574 goto unlock_rtnl;
3575
3576 if (!rdev->ops->assoc) {
3577 err = -EOPNOTSUPP;
3578 goto out;
3579 }
3580
3581 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3582 err = -EOPNOTSUPP;
3583 goto out;
3584 }
3585
3586 if (!netif_running(dev)) {
3587 err = -ENETDOWN;
3588 goto out;
3589 }
3590
3591 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3592
3593 chan = ieee80211_get_channel(&rdev->wiphy,
3594 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3595 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
3596 err = -EINVAL;
3597 goto out;
3598 }
3599
3600 mutex_lock(&rdev->devlist_mtx);
3601 fixedchan = rdev_fixed_channel(rdev, NULL);
3602 if (fixedchan && chan != fixedchan) {
3603 err = -EBUSY;
3604 mutex_unlock(&rdev->devlist_mtx);
3605 goto out;
3606 }
3607 mutex_unlock(&rdev->devlist_mtx);
3608
3609 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3610 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
3611
3612 if (info->attrs[NL80211_ATTR_IE]) {
3613 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3614 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3615 }
3616
3617 if (info->attrs[NL80211_ATTR_USE_MFP]) {
3618 enum nl80211_mfp mfp =
3619 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
3620 if (mfp == NL80211_MFP_REQUIRED)
3621 use_mfp = true;
3622 else if (mfp != NL80211_MFP_NO) {
3623 err = -EINVAL;
3624 goto out;
3625 }
3626 }
3627
3628 if (info->attrs[NL80211_ATTR_PREV_BSSID])
3629 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3630
3631 err = nl80211_crypto_settings(info, &crypto, 1);
3632 if (!err)
3633 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
3634 ssid, ssid_len, ie, ie_len, use_mfp,
3635 &crypto);
3636
3637 out:
3638 cfg80211_unlock_rdev(rdev);
3639 dev_put(dev);
3640 unlock_rtnl:
3641 rtnl_unlock();
3642 return err;
3643 }
3644
3645 static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
3646 {
3647 struct cfg80211_registered_device *rdev;
3648 struct net_device *dev;
3649 const u8 *ie = NULL, *bssid;
3650 int err, ie_len = 0;
3651 u16 reason_code;
3652
3653 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3654 return -EINVAL;
3655
3656 if (!info->attrs[NL80211_ATTR_MAC])
3657 return -EINVAL;
3658
3659 if (!info->attrs[NL80211_ATTR_REASON_CODE])
3660 return -EINVAL;
3661
3662 rtnl_lock();
3663
3664 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3665 if (err)
3666 goto unlock_rtnl;
3667
3668 if (!rdev->ops->deauth) {
3669 err = -EOPNOTSUPP;
3670 goto out;
3671 }
3672
3673 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3674 err = -EOPNOTSUPP;
3675 goto out;
3676 }
3677
3678 if (!netif_running(dev)) {
3679 err = -ENETDOWN;
3680 goto out;
3681 }
3682
3683 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3684
3685 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
3686 if (reason_code == 0) {
3687 /* Reason Code 0 is reserved */
3688 err = -EINVAL;
3689 goto out;
3690 }
3691
3692 if (info->attrs[NL80211_ATTR_IE]) {
3693 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3694 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3695 }
3696
3697 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code);
3698
3699 out:
3700 cfg80211_unlock_rdev(rdev);
3701 dev_put(dev);
3702 unlock_rtnl:
3703 rtnl_unlock();
3704 return err;
3705 }
3706
3707 static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
3708 {
3709 struct cfg80211_registered_device *rdev;
3710 struct net_device *dev;
3711 const u8 *ie = NULL, *bssid;
3712 int err, ie_len = 0;
3713 u16 reason_code;
3714
3715 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3716 return -EINVAL;
3717
3718 if (!info->attrs[NL80211_ATTR_MAC])
3719 return -EINVAL;
3720
3721 if (!info->attrs[NL80211_ATTR_REASON_CODE])
3722 return -EINVAL;
3723
3724 rtnl_lock();
3725
3726 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3727 if (err)
3728 goto unlock_rtnl;
3729
3730 if (!rdev->ops->disassoc) {
3731 err = -EOPNOTSUPP;
3732 goto out;
3733 }
3734
3735 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3736 err = -EOPNOTSUPP;
3737 goto out;
3738 }
3739
3740 if (!netif_running(dev)) {
3741 err = -ENETDOWN;
3742 goto out;
3743 }
3744
3745 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3746
3747 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
3748 if (reason_code == 0) {
3749 /* Reason Code 0 is reserved */
3750 err = -EINVAL;
3751 goto out;
3752 }
3753
3754 if (info->attrs[NL80211_ATTR_IE]) {
3755 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3756 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3757 }
3758
3759 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code);
3760
3761 out:
3762 cfg80211_unlock_rdev(rdev);
3763 dev_put(dev);
3764 unlock_rtnl:
3765 rtnl_unlock();
3766 return err;
3767 }
3768
3769 static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
3770 {
3771 struct cfg80211_registered_device *rdev;
3772 struct net_device *dev;
3773 struct cfg80211_ibss_params ibss;
3774 struct wiphy *wiphy;
3775 struct cfg80211_cached_keys *connkeys = NULL;
3776 int err;
3777
3778 memset(&ibss, 0, sizeof(ibss));
3779
3780 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3781 return -EINVAL;
3782
3783 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
3784 !info->attrs[NL80211_ATTR_SSID] ||
3785 !nla_len(info->attrs[NL80211_ATTR_SSID]))
3786 return -EINVAL;
3787
3788 ibss.beacon_interval = 100;
3789
3790 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
3791 ibss.beacon_interval =
3792 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
3793 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
3794 return -EINVAL;
3795 }
3796
3797 rtnl_lock();
3798
3799 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3800 if (err)
3801 goto unlock_rtnl;
3802
3803 if (!rdev->ops->join_ibss) {
3804 err = -EOPNOTSUPP;
3805 goto out;
3806 }
3807
3808 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
3809 err = -EOPNOTSUPP;
3810 goto out;
3811 }
3812
3813 if (!netif_running(dev)) {
3814 err = -ENETDOWN;
3815 goto out;
3816 }
3817
3818 wiphy = &rdev->wiphy;
3819
3820 if (info->attrs[NL80211_ATTR_MAC])
3821 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3822 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3823 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
3824
3825 if (info->attrs[NL80211_ATTR_IE]) {
3826 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3827 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3828 }
3829
3830 ibss.channel = ieee80211_get_channel(wiphy,
3831 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3832 if (!ibss.channel ||
3833 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
3834 ibss.channel->flags & IEEE80211_CHAN_DISABLED) {
3835 err = -EINVAL;
3836 goto out;
3837 }
3838
3839 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
3840 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
3841
3842 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
3843 connkeys = nl80211_parse_connkeys(rdev,
3844 info->attrs[NL80211_ATTR_KEYS]);
3845 if (IS_ERR(connkeys)) {
3846 err = PTR_ERR(connkeys);
3847 connkeys = NULL;
3848 goto out;
3849 }
3850 }
3851
3852 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
3853
3854 out:
3855 cfg80211_unlock_rdev(rdev);
3856 dev_put(dev);
3857 unlock_rtnl:
3858 if (err)
3859 kfree(connkeys);
3860 rtnl_unlock();
3861 return err;
3862 }
3863
3864 static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
3865 {
3866 struct cfg80211_registered_device *rdev;
3867 struct net_device *dev;
3868 int err;
3869
3870 rtnl_lock();
3871
3872 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
3873 if (err)
3874 goto unlock_rtnl;
3875
3876 if (!rdev->ops->leave_ibss) {
3877 err = -EOPNOTSUPP;
3878 goto out;
3879 }
3880
3881 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
3882 err = -EOPNOTSUPP;
3883 goto out;
3884 }
3885
3886 if (!netif_running(dev)) {
3887 err = -ENETDOWN;
3888 goto out;
3889 }
3890
3891 err = cfg80211_leave_ibss(rdev, dev, false);
3892
3893 out:
3894 cfg80211_unlock_rdev(rdev);
3895 dev_put(dev);
3896 unlock_rtnl:
3897 rtnl_unlock();
3898 return err;
3899 }
3900
3901 #ifdef CONFIG_NL80211_TESTMODE
3902 static struct genl_multicast_group nl80211_testmode_mcgrp = {
3903 .name = "testmode",
3904 };
3905
3906 static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
3907 {
3908 struct cfg80211_registered_device *rdev;
3909 int err;
3910
3911 if (!info->attrs[NL80211_ATTR_TESTDATA])
3912 return -EINVAL;
3913
3914 rtnl_lock();
3915
3916 rdev = cfg80211_get_dev_from_info(info);
3917 if (IS_ERR(rdev)) {
3918 err = PTR_ERR(rdev);
3919 goto unlock_rtnl;
3920 }
3921
3922 err = -EOPNOTSUPP;
3923 if (rdev->ops->testmode_cmd) {
3924 rdev->testmode_info = info;
3925 err = rdev->ops->testmode_cmd(&rdev->wiphy,
3926 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
3927 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
3928 rdev->testmode_info = NULL;
3929 }
3930
3931 cfg80211_unlock_rdev(rdev);
3932
3933 unlock_rtnl:
3934 rtnl_unlock();
3935 return err;
3936 }
3937
3938 static struct sk_buff *
3939 __cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
3940 int approxlen, u32 pid, u32 seq, gfp_t gfp)
3941 {
3942 struct sk_buff *skb;
3943 void *hdr;
3944 struct nlattr *data;
3945
3946 skb = nlmsg_new(approxlen + 100, gfp);
3947 if (!skb)
3948 return NULL;
3949
3950 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
3951 if (!hdr) {
3952 kfree_skb(skb);
3953 return NULL;
3954 }
3955
3956 NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
3957 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
3958
3959 ((void **)skb->cb)[0] = rdev;
3960 ((void **)skb->cb)[1] = hdr;
3961 ((void **)skb->cb)[2] = data;
3962
3963 return skb;
3964
3965 nla_put_failure:
3966 kfree_skb(skb);
3967 return NULL;
3968 }
3969
3970 struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
3971 int approxlen)
3972 {
3973 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
3974
3975 if (WARN_ON(!rdev->testmode_info))
3976 return NULL;
3977
3978 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
3979 rdev->testmode_info->snd_pid,
3980 rdev->testmode_info->snd_seq,
3981 GFP_KERNEL);
3982 }
3983 EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
3984
3985 int cfg80211_testmode_reply(struct sk_buff *skb)
3986 {
3987 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
3988 void *hdr = ((void **)skb->cb)[1];
3989 struct nlattr *data = ((void **)skb->cb)[2];
3990
3991 if (WARN_ON(!rdev->testmode_info)) {
3992 kfree_skb(skb);
3993 return -EINVAL;
3994 }
3995
3996 nla_nest_end(skb, data);
3997 genlmsg_end(skb, hdr);
3998 return genlmsg_reply(skb, rdev->testmode_info);
3999 }
4000 EXPORT_SYMBOL(cfg80211_testmode_reply);
4001
4002 struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
4003 int approxlen, gfp_t gfp)
4004 {
4005 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4006
4007 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
4008 }
4009 EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
4010
4011 void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
4012 {
4013 void *hdr = ((void **)skb->cb)[1];
4014 struct nlattr *data = ((void **)skb->cb)[2];
4015
4016 nla_nest_end(skb, data);
4017 genlmsg_end(skb, hdr);
4018 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
4019 }
4020 EXPORT_SYMBOL(cfg80211_testmode_event);
4021 #endif
4022
4023 static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
4024 {
4025 struct cfg80211_registered_device *rdev;
4026 struct net_device *dev;
4027 struct cfg80211_connect_params connect;
4028 struct wiphy *wiphy;
4029 struct cfg80211_cached_keys *connkeys = NULL;
4030 int err;
4031
4032 memset(&connect, 0, sizeof(connect));
4033
4034 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4035 return -EINVAL;
4036
4037 if (!info->attrs[NL80211_ATTR_SSID] ||
4038 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4039 return -EINVAL;
4040
4041 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4042 connect.auth_type =
4043 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4044 if (!nl80211_valid_auth_type(connect.auth_type))
4045 return -EINVAL;
4046 } else
4047 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4048
4049 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
4050
4051 err = nl80211_crypto_settings(info, &connect.crypto,
4052 NL80211_MAX_NR_CIPHER_SUITES);
4053 if (err)
4054 return err;
4055 rtnl_lock();
4056
4057 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
4058 if (err)
4059 goto unlock_rtnl;
4060
4061 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
4062 err = -EOPNOTSUPP;
4063 goto out;
4064 }
4065
4066 if (!netif_running(dev)) {
4067 err = -ENETDOWN;
4068 goto out;
4069 }
4070
4071 wiphy = &rdev->wiphy;
4072
4073 if (info->attrs[NL80211_ATTR_MAC])
4074 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4075 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4076 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4077
4078 if (info->attrs[NL80211_ATTR_IE]) {
4079 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4080 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4081 }
4082
4083 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
4084 connect.channel =
4085 ieee80211_get_channel(wiphy,
4086 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4087 if (!connect.channel ||
4088 connect.channel->flags & IEEE80211_CHAN_DISABLED) {
4089 err = -EINVAL;
4090 goto out;
4091 }
4092 }
4093
4094 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4095 connkeys = nl80211_parse_connkeys(rdev,
4096 info->attrs[NL80211_ATTR_KEYS]);
4097 if (IS_ERR(connkeys)) {
4098 err = PTR_ERR(connkeys);
4099 connkeys = NULL;
4100 goto out;
4101 }
4102 }
4103
4104 err = cfg80211_connect(rdev, dev, &connect, connkeys);
4105
4106 out:
4107 cfg80211_unlock_rdev(rdev);
4108 dev_put(dev);
4109 unlock_rtnl:
4110 if (err)
4111 kfree(connkeys);
4112 rtnl_unlock();
4113 return err;
4114 }
4115
4116 static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
4117 {
4118 struct cfg80211_registered_device *rdev;
4119 struct net_device *dev;
4120 int err;
4121 u16 reason;
4122
4123 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4124 reason = WLAN_REASON_DEAUTH_LEAVING;
4125 else
4126 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4127
4128 if (reason == 0)
4129 return -EINVAL;
4130
4131 rtnl_lock();
4132
4133 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
4134 if (err)
4135 goto unlock_rtnl;
4136
4137 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
4138 err = -EOPNOTSUPP;
4139 goto out;
4140 }
4141
4142 if (!netif_running(dev)) {
4143 err = -ENETDOWN;
4144 goto out;
4145 }
4146
4147 err = cfg80211_disconnect(rdev, dev, reason, true);
4148
4149 out:
4150 cfg80211_unlock_rdev(rdev);
4151 dev_put(dev);
4152 unlock_rtnl:
4153 rtnl_unlock();
4154 return err;
4155 }
4156
4157 static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
4158 {
4159 struct cfg80211_registered_device *rdev;
4160 struct net *net;
4161 int err;
4162 u32 pid;
4163
4164 if (!info->attrs[NL80211_ATTR_PID])
4165 return -EINVAL;
4166
4167 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
4168
4169 rtnl_lock();
4170
4171 rdev = cfg80211_get_dev_from_info(info);
4172 if (IS_ERR(rdev)) {
4173 err = PTR_ERR(rdev);
4174 goto out_rtnl;
4175 }
4176
4177 net = get_net_ns_by_pid(pid);
4178 if (IS_ERR(net)) {
4179 err = PTR_ERR(net);
4180 goto out;
4181 }
4182
4183 err = 0;
4184
4185 /* check if anything to do */
4186 if (net_eq(wiphy_net(&rdev->wiphy), net))
4187 goto out_put_net;
4188
4189 err = cfg80211_switch_netns(rdev, net);
4190 out_put_net:
4191 put_net(net);
4192 out:
4193 cfg80211_unlock_rdev(rdev);
4194 out_rtnl:
4195 rtnl_unlock();
4196 return err;
4197 }
4198
4199 static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
4200 {
4201 struct cfg80211_registered_device *rdev;
4202 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
4203 struct cfg80211_pmksa *pmksa) = NULL;
4204 int err;
4205 struct net_device *dev;
4206 struct cfg80211_pmksa pmksa;
4207
4208 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
4209
4210 if (!info->attrs[NL80211_ATTR_MAC])
4211 return -EINVAL;
4212
4213 if (!info->attrs[NL80211_ATTR_PMKID])
4214 return -EINVAL;
4215
4216 rtnl_lock();
4217
4218 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
4219 if (err)
4220 goto out_rtnl;
4221
4222 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
4223 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4224
4225 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
4226 err = -EOPNOTSUPP;
4227 goto out;
4228 }
4229
4230 switch (info->genlhdr->cmd) {
4231 case NL80211_CMD_SET_PMKSA:
4232 rdev_ops = rdev->ops->set_pmksa;
4233 break;
4234 case NL80211_CMD_DEL_PMKSA:
4235 rdev_ops = rdev->ops->del_pmksa;
4236 break;
4237 default:
4238 WARN_ON(1);
4239 break;
4240 }
4241
4242 if (!rdev_ops) {
4243 err = -EOPNOTSUPP;
4244 goto out;
4245 }
4246
4247 err = rdev_ops(&rdev->wiphy, dev, &pmksa);
4248
4249 out:
4250 cfg80211_unlock_rdev(rdev);
4251 dev_put(dev);
4252 out_rtnl:
4253 rtnl_unlock();
4254
4255 return err;
4256 }
4257
4258 static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
4259 {
4260 struct cfg80211_registered_device *rdev;
4261 int err;
4262 struct net_device *dev;
4263
4264 rtnl_lock();
4265
4266 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
4267 if (err)
4268 goto out_rtnl;
4269
4270 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
4271 err = -EOPNOTSUPP;
4272 goto out;
4273 }
4274
4275 if (!rdev->ops->flush_pmksa) {
4276 err = -EOPNOTSUPP;
4277 goto out;
4278 }
4279
4280 err = rdev->ops->flush_pmksa(&rdev->wiphy, dev);
4281
4282 out:
4283 cfg80211_unlock_rdev(rdev);
4284 dev_put(dev);
4285 out_rtnl:
4286 rtnl_unlock();
4287
4288 return err;
4289
4290 }
4291
4292 static struct genl_ops nl80211_ops[] = {
4293 {
4294 .cmd = NL80211_CMD_GET_WIPHY,
4295 .doit = nl80211_get_wiphy,
4296 .dumpit = nl80211_dump_wiphy,
4297 .policy = nl80211_policy,
4298 /* can be retrieved by unprivileged users */
4299 },
4300 {
4301 .cmd = NL80211_CMD_SET_WIPHY,
4302 .doit = nl80211_set_wiphy,
4303 .policy = nl80211_policy,
4304 .flags = GENL_ADMIN_PERM,
4305 },
4306 {
4307 .cmd = NL80211_CMD_GET_INTERFACE,
4308 .doit = nl80211_get_interface,
4309 .dumpit = nl80211_dump_interface,
4310 .policy = nl80211_policy,
4311 /* can be retrieved by unprivileged users */
4312 },
4313 {
4314 .cmd = NL80211_CMD_SET_INTERFACE,
4315 .doit = nl80211_set_interface,
4316 .policy = nl80211_policy,
4317 .flags = GENL_ADMIN_PERM,
4318 },
4319 {
4320 .cmd = NL80211_CMD_NEW_INTERFACE,
4321 .doit = nl80211_new_interface,
4322 .policy = nl80211_policy,
4323 .flags = GENL_ADMIN_PERM,
4324 },
4325 {
4326 .cmd = NL80211_CMD_DEL_INTERFACE,
4327 .doit = nl80211_del_interface,
4328 .policy = nl80211_policy,
4329 .flags = GENL_ADMIN_PERM,
4330 },
4331 {
4332 .cmd = NL80211_CMD_GET_KEY,
4333 .doit = nl80211_get_key,
4334 .policy = nl80211_policy,
4335 .flags = GENL_ADMIN_PERM,
4336 },
4337 {
4338 .cmd = NL80211_CMD_SET_KEY,
4339 .doit = nl80211_set_key,
4340 .policy = nl80211_policy,
4341 .flags = GENL_ADMIN_PERM,
4342 },
4343 {
4344 .cmd = NL80211_CMD_NEW_KEY,
4345 .doit = nl80211_new_key,
4346 .policy = nl80211_policy,
4347 .flags = GENL_ADMIN_PERM,
4348 },
4349 {
4350 .cmd = NL80211_CMD_DEL_KEY,
4351 .doit = nl80211_del_key,
4352 .policy = nl80211_policy,
4353 .flags = GENL_ADMIN_PERM,
4354 },
4355 {
4356 .cmd = NL80211_CMD_SET_BEACON,
4357 .policy = nl80211_policy,
4358 .flags = GENL_ADMIN_PERM,
4359 .doit = nl80211_addset_beacon,
4360 },
4361 {
4362 .cmd = NL80211_CMD_NEW_BEACON,
4363 .policy = nl80211_policy,
4364 .flags = GENL_ADMIN_PERM,
4365 .doit = nl80211_addset_beacon,
4366 },
4367 {
4368 .cmd = NL80211_CMD_DEL_BEACON,
4369 .policy = nl80211_policy,
4370 .flags = GENL_ADMIN_PERM,
4371 .doit = nl80211_del_beacon,
4372 },
4373 {
4374 .cmd = NL80211_CMD_GET_STATION,
4375 .doit = nl80211_get_station,
4376 .dumpit = nl80211_dump_station,
4377 .policy = nl80211_policy,
4378 },
4379 {
4380 .cmd = NL80211_CMD_SET_STATION,
4381 .doit = nl80211_set_station,
4382 .policy = nl80211_policy,
4383 .flags = GENL_ADMIN_PERM,
4384 },
4385 {
4386 .cmd = NL80211_CMD_NEW_STATION,
4387 .doit = nl80211_new_station,
4388 .policy = nl80211_policy,
4389 .flags = GENL_ADMIN_PERM,
4390 },
4391 {
4392 .cmd = NL80211_CMD_DEL_STATION,
4393 .doit = nl80211_del_station,
4394 .policy = nl80211_policy,
4395 .flags = GENL_ADMIN_PERM,
4396 },
4397 {
4398 .cmd = NL80211_CMD_GET_MPATH,
4399 .doit = nl80211_get_mpath,
4400 .dumpit = nl80211_dump_mpath,
4401 .policy = nl80211_policy,
4402 .flags = GENL_ADMIN_PERM,
4403 },
4404 {
4405 .cmd = NL80211_CMD_SET_MPATH,
4406 .doit = nl80211_set_mpath,
4407 .policy = nl80211_policy,
4408 .flags = GENL_ADMIN_PERM,
4409 },
4410 {
4411 .cmd = NL80211_CMD_NEW_MPATH,
4412 .doit = nl80211_new_mpath,
4413 .policy = nl80211_policy,
4414 .flags = GENL_ADMIN_PERM,
4415 },
4416 {
4417 .cmd = NL80211_CMD_DEL_MPATH,
4418 .doit = nl80211_del_mpath,
4419 .policy = nl80211_policy,
4420 .flags = GENL_ADMIN_PERM,
4421 },
4422 {
4423 .cmd = NL80211_CMD_SET_BSS,
4424 .doit = nl80211_set_bss,
4425 .policy = nl80211_policy,
4426 .flags = GENL_ADMIN_PERM,
4427 },
4428 {
4429 .cmd = NL80211_CMD_GET_REG,
4430 .doit = nl80211_get_reg,
4431 .policy = nl80211_policy,
4432 /* can be retrieved by unprivileged users */
4433 },
4434 {
4435 .cmd = NL80211_CMD_SET_REG,
4436 .doit = nl80211_set_reg,
4437 .policy = nl80211_policy,
4438 .flags = GENL_ADMIN_PERM,
4439 },
4440 {
4441 .cmd = NL80211_CMD_REQ_SET_REG,
4442 .doit = nl80211_req_set_reg,
4443 .policy = nl80211_policy,
4444 .flags = GENL_ADMIN_PERM,
4445 },
4446 {
4447 .cmd = NL80211_CMD_GET_MESH_PARAMS,
4448 .doit = nl80211_get_mesh_params,
4449 .policy = nl80211_policy,
4450 /* can be retrieved by unprivileged users */
4451 },
4452 {
4453 .cmd = NL80211_CMD_SET_MESH_PARAMS,
4454 .doit = nl80211_set_mesh_params,
4455 .policy = nl80211_policy,
4456 .flags = GENL_ADMIN_PERM,
4457 },
4458 {
4459 .cmd = NL80211_CMD_TRIGGER_SCAN,
4460 .doit = nl80211_trigger_scan,
4461 .policy = nl80211_policy,
4462 .flags = GENL_ADMIN_PERM,
4463 },
4464 {
4465 .cmd = NL80211_CMD_GET_SCAN,
4466 .policy = nl80211_policy,
4467 .dumpit = nl80211_dump_scan,
4468 },
4469 {
4470 .cmd = NL80211_CMD_AUTHENTICATE,
4471 .doit = nl80211_authenticate,
4472 .policy = nl80211_policy,
4473 .flags = GENL_ADMIN_PERM,
4474 },
4475 {
4476 .cmd = NL80211_CMD_ASSOCIATE,
4477 .doit = nl80211_associate,
4478 .policy = nl80211_policy,
4479 .flags = GENL_ADMIN_PERM,
4480 },
4481 {
4482 .cmd = NL80211_CMD_DEAUTHENTICATE,
4483 .doit = nl80211_deauthenticate,
4484 .policy = nl80211_policy,
4485 .flags = GENL_ADMIN_PERM,
4486 },
4487 {
4488 .cmd = NL80211_CMD_DISASSOCIATE,
4489 .doit = nl80211_disassociate,
4490 .policy = nl80211_policy,
4491 .flags = GENL_ADMIN_PERM,
4492 },
4493 {
4494 .cmd = NL80211_CMD_JOIN_IBSS,
4495 .doit = nl80211_join_ibss,
4496 .policy = nl80211_policy,
4497 .flags = GENL_ADMIN_PERM,
4498 },
4499 {
4500 .cmd = NL80211_CMD_LEAVE_IBSS,
4501 .doit = nl80211_leave_ibss,
4502 .policy = nl80211_policy,
4503 .flags = GENL_ADMIN_PERM,
4504 },
4505 #ifdef CONFIG_NL80211_TESTMODE
4506 {
4507 .cmd = NL80211_CMD_TESTMODE,
4508 .doit = nl80211_testmode_do,
4509 .policy = nl80211_policy,
4510 .flags = GENL_ADMIN_PERM,
4511 },
4512 #endif
4513 {
4514 .cmd = NL80211_CMD_CONNECT,
4515 .doit = nl80211_connect,
4516 .policy = nl80211_policy,
4517 .flags = GENL_ADMIN_PERM,
4518 },
4519 {
4520 .cmd = NL80211_CMD_DISCONNECT,
4521 .doit = nl80211_disconnect,
4522 .policy = nl80211_policy,
4523 .flags = GENL_ADMIN_PERM,
4524 },
4525 {
4526 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
4527 .doit = nl80211_wiphy_netns,
4528 .policy = nl80211_policy,
4529 .flags = GENL_ADMIN_PERM,
4530 },
4531 {
4532 .cmd = NL80211_CMD_GET_SURVEY,
4533 .policy = nl80211_policy,
4534 .dumpit = nl80211_dump_survey,
4535 },
4536 {
4537 .cmd = NL80211_CMD_SET_PMKSA,
4538 .doit = nl80211_setdel_pmksa,
4539 .policy = nl80211_policy,
4540 .flags = GENL_ADMIN_PERM,
4541 },
4542 {
4543 .cmd = NL80211_CMD_DEL_PMKSA,
4544 .doit = nl80211_setdel_pmksa,
4545 .policy = nl80211_policy,
4546 .flags = GENL_ADMIN_PERM,
4547 },
4548 {
4549 .cmd = NL80211_CMD_FLUSH_PMKSA,
4550 .doit = nl80211_flush_pmksa,
4551 .policy = nl80211_policy,
4552 .flags = GENL_ADMIN_PERM,
4553 },
4554
4555 };
4556 static struct genl_multicast_group nl80211_mlme_mcgrp = {
4557 .name = "mlme",
4558 };
4559
4560 /* multicast groups */
4561 static struct genl_multicast_group nl80211_config_mcgrp = {
4562 .name = "config",
4563 };
4564 static struct genl_multicast_group nl80211_scan_mcgrp = {
4565 .name = "scan",
4566 };
4567 static struct genl_multicast_group nl80211_regulatory_mcgrp = {
4568 .name = "regulatory",
4569 };
4570
4571 /* notification functions */
4572
4573 void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
4574 {
4575 struct sk_buff *msg;
4576
4577 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4578 if (!msg)
4579 return;
4580
4581 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
4582 nlmsg_free(msg);
4583 return;
4584 }
4585
4586 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4587 nl80211_config_mcgrp.id, GFP_KERNEL);
4588 }
4589
4590 static int nl80211_add_scan_req(struct sk_buff *msg,
4591 struct cfg80211_registered_device *rdev)
4592 {
4593 struct cfg80211_scan_request *req = rdev->scan_req;
4594 struct nlattr *nest;
4595 int i;
4596
4597 ASSERT_RDEV_LOCK(rdev);
4598
4599 if (WARN_ON(!req))
4600 return 0;
4601
4602 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
4603 if (!nest)
4604 goto nla_put_failure;
4605 for (i = 0; i < req->n_ssids; i++)
4606 NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
4607 nla_nest_end(msg, nest);
4608
4609 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
4610 if (!nest)
4611 goto nla_put_failure;
4612 for (i = 0; i < req->n_channels; i++)
4613 NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
4614 nla_nest_end(msg, nest);
4615
4616 if (req->ie)
4617 NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
4618
4619 return 0;
4620 nla_put_failure:
4621 return -ENOBUFS;
4622 }
4623
4624 static int nl80211_send_scan_msg(struct sk_buff *msg,
4625 struct cfg80211_registered_device *rdev,
4626 struct net_device *netdev,
4627 u32 pid, u32 seq, int flags,
4628 u32 cmd)
4629 {
4630 void *hdr;
4631
4632 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
4633 if (!hdr)
4634 return -1;
4635
4636 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4637 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4638
4639 /* ignore errors and send incomplete event anyway */
4640 nl80211_add_scan_req(msg, rdev);
4641
4642 return genlmsg_end(msg, hdr);
4643
4644 nla_put_failure:
4645 genlmsg_cancel(msg, hdr);
4646 return -EMSGSIZE;
4647 }
4648
4649 void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
4650 struct net_device *netdev)
4651 {
4652 struct sk_buff *msg;
4653
4654 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
4655 if (!msg)
4656 return;
4657
4658 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4659 NL80211_CMD_TRIGGER_SCAN) < 0) {
4660 nlmsg_free(msg);
4661 return;
4662 }
4663
4664 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4665 nl80211_scan_mcgrp.id, GFP_KERNEL);
4666 }
4667
4668 void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
4669 struct net_device *netdev)
4670 {
4671 struct sk_buff *msg;
4672
4673 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4674 if (!msg)
4675 return;
4676
4677 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4678 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
4679 nlmsg_free(msg);
4680 return;
4681 }
4682
4683 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4684 nl80211_scan_mcgrp.id, GFP_KERNEL);
4685 }
4686
4687 void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
4688 struct net_device *netdev)
4689 {
4690 struct sk_buff *msg;
4691
4692 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4693 if (!msg)
4694 return;
4695
4696 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4697 NL80211_CMD_SCAN_ABORTED) < 0) {
4698 nlmsg_free(msg);
4699 return;
4700 }
4701
4702 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4703 nl80211_scan_mcgrp.id, GFP_KERNEL);
4704 }
4705
4706 /*
4707 * This can happen on global regulatory changes or device specific settings
4708 * based on custom world regulatory domains.
4709 */
4710 void nl80211_send_reg_change_event(struct regulatory_request *request)
4711 {
4712 struct sk_buff *msg;
4713 void *hdr;
4714
4715 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4716 if (!msg)
4717 return;
4718
4719 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
4720 if (!hdr) {
4721 nlmsg_free(msg);
4722 return;
4723 }
4724
4725 /* Userspace can always count this one always being set */
4726 NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
4727
4728 if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
4729 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4730 NL80211_REGDOM_TYPE_WORLD);
4731 else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
4732 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4733 NL80211_REGDOM_TYPE_CUSTOM_WORLD);
4734 else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
4735 request->intersect)
4736 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4737 NL80211_REGDOM_TYPE_INTERSECTION);
4738 else {
4739 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4740 NL80211_REGDOM_TYPE_COUNTRY);
4741 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
4742 }
4743
4744 if (wiphy_idx_valid(request->wiphy_idx))
4745 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
4746
4747 if (genlmsg_end(msg, hdr) < 0) {
4748 nlmsg_free(msg);
4749 return;
4750 }
4751
4752 rcu_read_lock();
4753 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
4754 GFP_ATOMIC);
4755 rcu_read_unlock();
4756
4757 return;
4758
4759 nla_put_failure:
4760 genlmsg_cancel(msg, hdr);
4761 nlmsg_free(msg);
4762 }
4763
4764 static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
4765 struct net_device *netdev,
4766 const u8 *buf, size_t len,
4767 enum nl80211_commands cmd, gfp_t gfp)
4768 {
4769 struct sk_buff *msg;
4770 void *hdr;
4771
4772 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4773 if (!msg)
4774 return;
4775
4776 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
4777 if (!hdr) {
4778 nlmsg_free(msg);
4779 return;
4780 }
4781
4782 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4783 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4784 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
4785
4786 if (genlmsg_end(msg, hdr) < 0) {
4787 nlmsg_free(msg);
4788 return;
4789 }
4790
4791 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4792 nl80211_mlme_mcgrp.id, gfp);
4793 return;
4794
4795 nla_put_failure:
4796 genlmsg_cancel(msg, hdr);
4797 nlmsg_free(msg);
4798 }
4799
4800 void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
4801 struct net_device *netdev, const u8 *buf,
4802 size_t len, gfp_t gfp)
4803 {
4804 nl80211_send_mlme_event(rdev, netdev, buf, len,
4805 NL80211_CMD_AUTHENTICATE, gfp);
4806 }
4807
4808 void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
4809 struct net_device *netdev, const u8 *buf,
4810 size_t len, gfp_t gfp)
4811 {
4812 nl80211_send_mlme_event(rdev, netdev, buf, len,
4813 NL80211_CMD_ASSOCIATE, gfp);
4814 }
4815
4816 void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
4817 struct net_device *netdev, const u8 *buf,
4818 size_t len, gfp_t gfp)
4819 {
4820 nl80211_send_mlme_event(rdev, netdev, buf, len,
4821 NL80211_CMD_DEAUTHENTICATE, gfp);
4822 }
4823
4824 void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
4825 struct net_device *netdev, const u8 *buf,
4826 size_t len, gfp_t gfp)
4827 {
4828 nl80211_send_mlme_event(rdev, netdev, buf, len,
4829 NL80211_CMD_DISASSOCIATE, gfp);
4830 }
4831
4832 static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
4833 struct net_device *netdev, int cmd,
4834 const u8 *addr, gfp_t gfp)
4835 {
4836 struct sk_buff *msg;
4837 void *hdr;
4838
4839 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4840 if (!msg)
4841 return;
4842
4843 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
4844 if (!hdr) {
4845 nlmsg_free(msg);
4846 return;
4847 }
4848
4849 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4850 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4851 NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
4852 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
4853
4854 if (genlmsg_end(msg, hdr) < 0) {
4855 nlmsg_free(msg);
4856 return;
4857 }
4858
4859 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4860 nl80211_mlme_mcgrp.id, gfp);
4861 return;
4862
4863 nla_put_failure:
4864 genlmsg_cancel(msg, hdr);
4865 nlmsg_free(msg);
4866 }
4867
4868 void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
4869 struct net_device *netdev, const u8 *addr,
4870 gfp_t gfp)
4871 {
4872 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
4873 addr, gfp);
4874 }
4875
4876 void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
4877 struct net_device *netdev, const u8 *addr,
4878 gfp_t gfp)
4879 {
4880 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
4881 addr, gfp);
4882 }
4883
4884 void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
4885 struct net_device *netdev, const u8 *bssid,
4886 const u8 *req_ie, size_t req_ie_len,
4887 const u8 *resp_ie, size_t resp_ie_len,
4888 u16 status, gfp_t gfp)
4889 {
4890 struct sk_buff *msg;
4891 void *hdr;
4892
4893 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
4894 if (!msg)
4895 return;
4896
4897 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
4898 if (!hdr) {
4899 nlmsg_free(msg);
4900 return;
4901 }
4902
4903 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4904 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4905 if (bssid)
4906 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
4907 NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
4908 if (req_ie)
4909 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
4910 if (resp_ie)
4911 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
4912
4913 if (genlmsg_end(msg, hdr) < 0) {
4914 nlmsg_free(msg);
4915 return;
4916 }
4917
4918 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4919 nl80211_mlme_mcgrp.id, gfp);
4920 return;
4921
4922 nla_put_failure:
4923 genlmsg_cancel(msg, hdr);
4924 nlmsg_free(msg);
4925
4926 }
4927
4928 void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
4929 struct net_device *netdev, const u8 *bssid,
4930 const u8 *req_ie, size_t req_ie_len,
4931 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
4932 {
4933 struct sk_buff *msg;
4934 void *hdr;
4935
4936 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
4937 if (!msg)
4938 return;
4939
4940 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
4941 if (!hdr) {
4942 nlmsg_free(msg);
4943 return;
4944 }
4945
4946 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4947 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4948 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
4949 if (req_ie)
4950 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
4951 if (resp_ie)
4952 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
4953
4954 if (genlmsg_end(msg, hdr) < 0) {
4955 nlmsg_free(msg);
4956 return;
4957 }
4958
4959 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4960 nl80211_mlme_mcgrp.id, gfp);
4961 return;
4962
4963 nla_put_failure:
4964 genlmsg_cancel(msg, hdr);
4965 nlmsg_free(msg);
4966
4967 }
4968
4969 void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
4970 struct net_device *netdev, u16 reason,
4971 const u8 *ie, size_t ie_len, bool from_ap)
4972 {
4973 struct sk_buff *msg;
4974 void *hdr;
4975
4976 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
4977 if (!msg)
4978 return;
4979
4980 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
4981 if (!hdr) {
4982 nlmsg_free(msg);
4983 return;
4984 }
4985
4986 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4987 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4988 if (from_ap && reason)
4989 NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
4990 if (from_ap)
4991 NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
4992 if (ie)
4993 NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
4994
4995 if (genlmsg_end(msg, hdr) < 0) {
4996 nlmsg_free(msg);
4997 return;
4998 }
4999
5000 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
5001 nl80211_mlme_mcgrp.id, GFP_KERNEL);
5002 return;
5003
5004 nla_put_failure:
5005 genlmsg_cancel(msg, hdr);
5006 nlmsg_free(msg);
5007
5008 }
5009
5010 void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
5011 struct net_device *netdev, const u8 *bssid,
5012 gfp_t gfp)
5013 {
5014 struct sk_buff *msg;
5015 void *hdr;
5016
5017 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5018 if (!msg)
5019 return;
5020
5021 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
5022 if (!hdr) {
5023 nlmsg_free(msg);
5024 return;
5025 }
5026
5027 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
5028 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
5029 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
5030
5031 if (genlmsg_end(msg, hdr) < 0) {
5032 nlmsg_free(msg);
5033 return;
5034 }
5035
5036 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
5037 nl80211_mlme_mcgrp.id, gfp);
5038 return;
5039
5040 nla_put_failure:
5041 genlmsg_cancel(msg, hdr);
5042 nlmsg_free(msg);
5043 }
5044
5045 void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
5046 struct net_device *netdev, const u8 *addr,
5047 enum nl80211_key_type key_type, int key_id,
5048 const u8 *tsc, gfp_t gfp)
5049 {
5050 struct sk_buff *msg;
5051 void *hdr;
5052
5053 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5054 if (!msg)
5055 return;
5056
5057 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
5058 if (!hdr) {
5059 nlmsg_free(msg);
5060 return;
5061 }
5062
5063 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
5064 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
5065 if (addr)
5066 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
5067 NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
5068 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
5069 if (tsc)
5070 NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
5071
5072 if (genlmsg_end(msg, hdr) < 0) {
5073 nlmsg_free(msg);
5074 return;
5075 }
5076
5077 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
5078 nl80211_mlme_mcgrp.id, gfp);
5079 return;
5080
5081 nla_put_failure:
5082 genlmsg_cancel(msg, hdr);
5083 nlmsg_free(msg);
5084 }
5085
5086 void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
5087 struct ieee80211_channel *channel_before,
5088 struct ieee80211_channel *channel_after)
5089 {
5090 struct sk_buff *msg;
5091 void *hdr;
5092 struct nlattr *nl_freq;
5093
5094 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
5095 if (!msg)
5096 return;
5097
5098 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
5099 if (!hdr) {
5100 nlmsg_free(msg);
5101 return;
5102 }
5103
5104 /*
5105 * Since we are applying the beacon hint to a wiphy we know its
5106 * wiphy_idx is valid
5107 */
5108 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
5109
5110 /* Before */
5111 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
5112 if (!nl_freq)
5113 goto nla_put_failure;
5114 if (nl80211_msg_put_channel(msg, channel_before))
5115 goto nla_put_failure;
5116 nla_nest_end(msg, nl_freq);
5117
5118 /* After */
5119 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
5120 if (!nl_freq)
5121 goto nla_put_failure;
5122 if (nl80211_msg_put_channel(msg, channel_after))
5123 goto nla_put_failure;
5124 nla_nest_end(msg, nl_freq);
5125
5126 if (genlmsg_end(msg, hdr) < 0) {
5127 nlmsg_free(msg);
5128 return;
5129 }
5130
5131 rcu_read_lock();
5132 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
5133 GFP_ATOMIC);
5134 rcu_read_unlock();
5135
5136 return;
5137
5138 nla_put_failure:
5139 genlmsg_cancel(msg, hdr);
5140 nlmsg_free(msg);
5141 }
5142
5143 /* initialisation/exit functions */
5144
5145 int nl80211_init(void)
5146 {
5147 int err;
5148
5149 err = genl_register_family_with_ops(&nl80211_fam,
5150 nl80211_ops, ARRAY_SIZE(nl80211_ops));
5151 if (err)
5152 return err;
5153
5154 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
5155 if (err)
5156 goto err_out;
5157
5158 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
5159 if (err)
5160 goto err_out;
5161
5162 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
5163 if (err)
5164 goto err_out;
5165
5166 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
5167 if (err)
5168 goto err_out;
5169
5170 #ifdef CONFIG_NL80211_TESTMODE
5171 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
5172 if (err)
5173 goto err_out;
5174 #endif
5175
5176 return 0;
5177 err_out:
5178 genl_unregister_family(&nl80211_fam);
5179 return err;
5180 }
5181
5182 void nl80211_exit(void)
5183 {
5184 genl_unregister_family(&nl80211_fam);
5185 }
Linux 2.6 ibm-acpi/thinkpad-acpi driver git tree