projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Revert "mac80211: refactor virtual monitor code"
[deliverable/linux.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type);
27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
89a54e48
JB		 49/* returns ERR_PTR values */
50static struct wireless_dev *
51__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 52{
89a54e48
JB		 53 struct cfg80211_registered_device *rdev;
54 struct wireless_dev *result = NULL;
55 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
56 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
57 u64 wdev_id;
58 int wiphy_idx = -1;
59 int ifidx = -1;
55682965 60
89a54e48 61 assert_cfg80211_lock();
55682965 62
89a54e48
JB		 63 if (!have_ifidx && !have_wdev_id)
64 return ERR_PTR(-EINVAL);
55682965 65
89a54e48
JB		 66 if (have_ifidx)
67 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
68 if (have_wdev_id) {
69 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
70 wiphy_idx = wdev_id >> 32;
55682965
JB		 71 }
72
89a54e48
JB		 73 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
74 struct wireless_dev *wdev;
75
76 if (wiphy_net(&rdev->wiphy) != netns)
77 continue;
78
79 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
80 continue;
81
82 mutex_lock(&rdev->devlist_mtx);
83 list_for_each_entry(wdev, &rdev->wdev_list, list) {
84 if (have_ifidx && wdev->netdev &&
85 wdev->netdev->ifindex == ifidx) {
86 result = wdev;
87 break;
88 }
89 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
90 result = wdev;
91 break;
92 }
93 }
94 mutex_unlock(&rdev->devlist_mtx);
95
96 if (result)
97 break;
98 }
99
100 if (result)
101 return result;
102 return ERR_PTR(-ENODEV);
55682965
JB		 103}
104
a9455408 105static struct cfg80211_registered_device *
878d9ec7 106__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 107{
7fee4778
JB		 108 struct cfg80211_registered_device *rdev = NULL, *tmp;
109 struct net_device *netdev;
a9455408
JB		 110
111 assert_cfg80211_lock();
112
878d9ec7 113 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 114 !attrs[NL80211_ATTR_IFINDEX] &&
115 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 116 return ERR_PTR(-EINVAL);
117
878d9ec7 118 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 119 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 120 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 121
89a54e48
JB		 122 if (attrs[NL80211_ATTR_WDEV]) {
123 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
124 struct wireless_dev *wdev;
125 bool found = false;
126
127 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
128 if (tmp) {
129 /* make sure wdev exists */
130 mutex_lock(&tmp->devlist_mtx);
131 list_for_each_entry(wdev, &tmp->wdev_list, list) {
132 if (wdev->identifier != (u32)wdev_id)
133 continue;
134 found = true;
135 break;
136 }
137 mutex_unlock(&tmp->devlist_mtx);
138
139 if (!found)
140 tmp = NULL;
141
142 if (rdev && tmp != rdev)
143 return ERR_PTR(-EINVAL);
144 rdev = tmp;
145 }
146 }
147
878d9ec7
JB		 148 if (attrs[NL80211_ATTR_IFINDEX]) {
149 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
4f7eff10 150 netdev = dev_get_by_index(netns, ifindex);
7fee4778
JB		 151 if (netdev) {
152 if (netdev->ieee80211_ptr)
153 tmp = wiphy_to_dev(
154 netdev->ieee80211_ptr->wiphy);
155 else
156 tmp = NULL;
157
158 dev_put(netdev);
159
160 /* not wireless device -- return error */
161 if (!tmp)
162 return ERR_PTR(-EINVAL);
163
164 /* mismatch -- return error */
165 if (rdev && tmp != rdev)
166 return ERR_PTR(-EINVAL);
167
168 rdev = tmp;
a9455408 169 }
a9455408 170 }
a9455408 171
4f7eff10
JB		 172 if (!rdev)
173 return ERR_PTR(-ENODEV);
a9455408 174
4f7eff10
JB		 175 if (netns != wiphy_net(&rdev->wiphy))
176 return ERR_PTR(-ENODEV);
177
178 return rdev;
a9455408
JB		 179}
180
181/*
182 * This function returns a pointer to the driver
183 * that the genl_info item that is passed refers to.
184 * If successful, it returns non-NULL and also locks
185 * the driver's mutex!
186 *
187 * This means that you need to call cfg80211_unlock_rdev()
188 * before being allowed to acquire &cfg80211_mutex!
189 *
190 * This is necessary because we need to lock the global
191 * mutex to get an item off the list safely, and then
192 * we lock the rdev mutex so it doesn't go away under us.
193 *
194 * We don't want to keep cfg80211_mutex locked
195 * for all the time in order to allow requests on
196 * other interfaces to go through at the same time.
197 *
198 * The result of this can be a PTR_ERR and hence must
199 * be checked with IS_ERR() for errors.
200 */
201static struct cfg80211_registered_device *
4f7eff10 202cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408
JB		 203{
204 struct cfg80211_registered_device *rdev;
205
206 mutex_lock(&cfg80211_mutex);
878d9ec7 207 rdev = __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 208
209 /* if it is not an error we grab the lock on
210 * it to assure it won't be going away while
211 * we operate on it */
212 if (!IS_ERR(rdev))
213 mutex_lock(&rdev->mtx);
214
215 mutex_unlock(&cfg80211_mutex);
216
217 return rdev;
218}
219
55682965 220/* policy for the attributes */
b54452b0 221static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 222 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
223 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 224 .len = 20-1 },
31888487 225 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 226 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 227 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 228 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
229 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
230 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
231 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 232 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 233
234 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
235 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
236 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 237
e007b857
EP		 238 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
239 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
41ade00f 240
b9454e83 241 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 242 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
243 .len = WLAN_MAX_KEY_LEN },
244 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
245 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
246 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 247 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
e31b8213 248 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 249
250 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
251 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
252 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
253 .len = IEEE80211_MAX_DATA_LEN },
254 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
255 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 256 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
257 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
258 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
259 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
260 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 261 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 262 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 263 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 264 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 265 .len = IEEE80211_MAX_MESH_ID_LEN },
2ec600d6 266 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 267
b2e1b302
LR		 268 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
269 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
270
9f1ba906
JM		 271 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
272 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
273 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 274 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
275 .len = NL80211_MAX_SUPP_RATES },
50b12f59 276 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 277
24bdd9f4 278 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 279 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 280
6c739419 281 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 282
283 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
284 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
285 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 286 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
287 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 288
289 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
290 .len = IEEE80211_MAX_SSID_LEN },
291 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
292 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 293 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 294 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 295 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 296 [NL80211_ATTR_STA_FLAGS2] = {
297 .len = sizeof(struct nl80211_sta_flag_update),
298 },
3f77316c 299 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 300 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
301 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 302 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
303 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
304 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 305 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 306 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 307 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
308 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 309 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
310 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 311 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 312 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
313 .len = IEEE80211_MAX_DATA_LEN },
314 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 315 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 316 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 317 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 318 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 319 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
320 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 321 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 322 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
323 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 324 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 325 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 326 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 327 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 328 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 329 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 330 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 331 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 332 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 333 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
334 .len = IEEE80211_MAX_DATA_LEN },
335 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
336 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 337 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 338 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 339 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 340 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
341 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
342 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
343 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
344 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
e247bd90 345 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 346 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
347 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 348 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 349 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
350 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
351 .len = NL80211_HT_CAPABILITY_LEN
352 },
1d9d9213 353 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 354 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 355 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 356 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
55682965
JB		 357};
358
e31b8213 359/* policy for the key attributes */
b54452b0 360static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 361 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 362 [NL80211_KEY_IDX] = { .type = NLA_U8 },
363 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 364 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 365 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
366 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 367 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 368 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
369};
370
371/* policy for the key default flags */
372static const struct nla_policy
373nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
374 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
375 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 376};
377
ff1b6e69
JB		 378/* policy for WoWLAN attributes */
379static const struct nla_policy
380nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
381 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
382 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
383 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
384 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 385 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
386 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
387 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
388 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 389};
390
e5497d76
JB		 391/* policy for GTK rekey offload attributes */
392static const struct nla_policy
393nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
394 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
395 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
396 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
397};
398
a1f1c21c
LC		 399static const struct nla_policy
400nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 401 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 402 .len = IEEE80211_MAX_SSID_LEN },
88e920b4 403 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
a1f1c21c
LC		 404};
405
a043897a
HS		 406/* ifidx get helper */
407static int nl80211_get_ifidx(struct netlink_callback *cb)
408{
409 int res;
410
411 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
412 nl80211_fam.attrbuf, nl80211_fam.maxattr,
413 nl80211_policy);
414 if (res)
415 return res;
416
417 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
418 return -EINVAL;
419
420 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
421 if (!res)
422 return -EINVAL;
423 return res;
424}
425
67748893
JB		 426static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
427 struct netlink_callback *cb,
428 struct cfg80211_registered_device **rdev,
429 struct net_device **dev)
430{
431 int ifidx = cb->args[0];
432 int err;
433
434 if (!ifidx)
435 ifidx = nl80211_get_ifidx(cb);
436 if (ifidx < 0)
437 return ifidx;
438
439 cb->args[0] = ifidx;
440
441 rtnl_lock();
442
443 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
444 if (!*dev) {
445 err = -ENODEV;
446 goto out_rtnl;
447 }
448
449 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 450 if (IS_ERR(*rdev)) {
451 err = PTR_ERR(*rdev);
67748893
JB		 452 goto out_rtnl;
453 }
454
455 return 0;
456 out_rtnl:
457 rtnl_unlock();
458 return err;
459}
460
461static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
462{
463 cfg80211_unlock_rdev(rdev);
464 rtnl_unlock();
465}
466
f4a11bb0
JB		 467/* IE validation */
468static bool is_valid_ie_attr(const struct nlattr *attr)
469{
470 const u8 *pos;
471 int len;
472
473 if (!attr)
474 return true;
475
476 pos = nla_data(attr);
477 len = nla_len(attr);
478
479 while (len) {
480 u8 elemlen;
481
482 if (len < 2)
483 return false;
484 len -= 2;
485
486 elemlen = pos[1];
487 if (elemlen > len)
488 return false;
489
490 len -= elemlen;
491 pos += 2 + elemlen;
492 }
493
494 return true;
495}
496
55682965
JB		 497/* message building helper */
498static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
499 int flags, u8 cmd)
500{
501 /* since there is no private header just add the generic one */
502 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
503}
504
5dab3b8a
LR		 505static int nl80211_msg_put_channel(struct sk_buff *msg,
506 struct ieee80211_channel *chan)
507{
9360ffd1
DM		 508 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
509 chan->center_freq))
510 goto nla_put_failure;
5dab3b8a 511
9360ffd1
DM		 512 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
513 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
514 goto nla_put_failure;
515 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
516 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
517 goto nla_put_failure;
518 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
519 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
520 goto nla_put_failure;
521 if ((chan->flags & IEEE80211_CHAN_RADAR) &&
522 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
523 goto nla_put_failure;
5dab3b8a 524
9360ffd1
DM		 525 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
526 DBM_TO_MBM(chan->max_power)))
527 goto nla_put_failure;
5dab3b8a
LR		 528
529 return 0;
530
531 nla_put_failure:
532 return -ENOBUFS;
533}
534
55682965
JB		 535/* netlink command implementations */
536
b9454e83
JB		 537struct key_parse {
538 struct key_params p;
539 int idx;
e31b8213 540 int type;
b9454e83 541 bool def, defmgmt;
dbd2fd65 542 bool def_uni, def_multi;
b9454e83
JB		 543};
544
545static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
546{
547 struct nlattr *tb[NL80211_KEY_MAX + 1];
548 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
549 nl80211_key_policy);
550 if (err)
551 return err;
552
553 k->def = !!tb[NL80211_KEY_DEFAULT];
554 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
555
dbd2fd65
JB		 556 if (k->def) {
557 k->def_uni = true;
558 k->def_multi = true;
559 }
560 if (k->defmgmt)
561 k->def_multi = true;
562
b9454e83
JB		 563 if (tb[NL80211_KEY_IDX])
564 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
565
566 if (tb[NL80211_KEY_DATA]) {
567 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
568 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
569 }
570
571 if (tb[NL80211_KEY_SEQ]) {
572 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
573 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
574 }
575
576 if (tb[NL80211_KEY_CIPHER])
577 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
578
e31b8213
JB		 579 if (tb[NL80211_KEY_TYPE]) {
580 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
581 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
582 return -EINVAL;
583 }
584
dbd2fd65
JB		 585 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
586 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
2da8f419
JB		 587 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
588 tb[NL80211_KEY_DEFAULT_TYPES],
589 nl80211_key_default_policy);
dbd2fd65
JB		 590 if (err)
591 return err;
592
593 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
594 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
595 }
596
b9454e83
JB		 597 return 0;
598}
599
600static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
601{
602 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
603 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
604 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
605 }
606
607 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
608 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
609 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
610 }
611
612 if (info->attrs[NL80211_ATTR_KEY_IDX])
613 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
614
615 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
616 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
617
618 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
619 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
620
dbd2fd65
JB		 621 if (k->def) {
622 k->def_uni = true;
623 k->def_multi = true;
624 }
625 if (k->defmgmt)
626 k->def_multi = true;
627
e31b8213
JB		 628 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
629 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
630 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
631 return -EINVAL;
632 }
633
dbd2fd65
JB		 634 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
635 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
636 int err = nla_parse_nested(
637 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
638 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
639 nl80211_key_default_policy);
640 if (err)
641 return err;
642
643 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
644 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
645 }
646
b9454e83
JB		 647 return 0;
648}
649
650static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
651{
652 int err;
653
654 memset(k, 0, sizeof(*k));
655 k->idx = -1;
e31b8213 656 k->type = -1;
b9454e83
JB		 657
658 if (info->attrs[NL80211_ATTR_KEY])
659 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
660 else
661 err = nl80211_parse_key_old(info, k);
662
663 if (err)
664 return err;
665
666 if (k->def && k->defmgmt)
667 return -EINVAL;
668
dbd2fd65
JB		 669 if (k->defmgmt) {
670 if (k->def_uni || !k->def_multi)
671 return -EINVAL;
672 }
673
b9454e83
JB		 674 if (k->idx != -1) {
675 if (k->defmgmt) {
676 if (k->idx < 4 || k->idx > 5)
677 return -EINVAL;
678 } else if (k->def) {
679 if (k->idx < 0 || k->idx > 3)
680 return -EINVAL;
681 } else {
682 if (k->idx < 0 || k->idx > 5)
683 return -EINVAL;
684 }
685 }
686
687 return 0;
688}
689
fffd0934
JB		 690static struct cfg80211_cached_keys *
691nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
692 struct nlattr *keys)
693{
694 struct key_parse parse;
695 struct nlattr *key;
696 struct cfg80211_cached_keys *result;
697 int rem, err, def = 0;
698
699 result = kzalloc(sizeof(*result), GFP_KERNEL);
700 if (!result)
701 return ERR_PTR(-ENOMEM);
702
703 result->def = -1;
704 result->defmgmt = -1;
705
706 nla_for_each_nested(key, keys, rem) {
707 memset(&parse, 0, sizeof(parse));
708 parse.idx = -1;
709
710 err = nl80211_parse_key_new(key, &parse);
711 if (err)
712 goto error;
713 err = -EINVAL;
714 if (!parse.p.key)
715 goto error;
716 if (parse.idx < 0 || parse.idx > 4)
717 goto error;
718 if (parse.def) {
719 if (def)
720 goto error;
721 def = 1;
722 result->def = parse.idx;
dbd2fd65
JB		 723 if (!parse.def_uni || !parse.def_multi)
724 goto error;
fffd0934
JB		 725 } else if (parse.defmgmt)
726 goto error;
727 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 728 parse.idx, false, NULL);
fffd0934
JB		 729 if (err)
730 goto error;
731 result->params[parse.idx].cipher = parse.p.cipher;
732 result->params[parse.idx].key_len = parse.p.key_len;
733 result->params[parse.idx].key = result->data[parse.idx];
734 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
735 }
736
737 return result;
738 error:
739 kfree(result);
740 return ERR_PTR(err);
741}
742
743static int nl80211_key_allowed(struct wireless_dev *wdev)
744{
745 ASSERT_WDEV_LOCK(wdev);
746
fffd0934
JB		 747 switch (wdev->iftype) {
748 case NL80211_IFTYPE_AP:
749 case NL80211_IFTYPE_AP_VLAN:
074ac8df 750 case NL80211_IFTYPE_P2P_GO:
ff973af7 751 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 752 break;
753 case NL80211_IFTYPE_ADHOC:
754 if (!wdev->current_bss)
755 return -ENOLINK;
756 break;
757 case NL80211_IFTYPE_STATION:
074ac8df 758 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 759 if (wdev->sme_state != CFG80211_SME_CONNECTED)
760 return -ENOLINK;
761 break;
762 default:
763 return -EINVAL;
764 }
765
766 return 0;
767}
768
7527a782
JB		 769static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
770{
771 struct nlattr *nl_modes = nla_nest_start(msg, attr);
772 int i;
773
774 if (!nl_modes)
775 goto nla_put_failure;
776
777 i = 0;
778 while (ifmodes) {
9360ffd1
DM		 779 if ((ifmodes & 1) && nla_put_flag(msg, i))
780 goto nla_put_failure;
7527a782
JB		 781 ifmodes >>= 1;
782 i++;
783 }
784
785 nla_nest_end(msg, nl_modes);
786 return 0;
787
788nla_put_failure:
789 return -ENOBUFS;
790}
791
792static int nl80211_put_iface_combinations(struct wiphy *wiphy,
793 struct sk_buff *msg)
794{
795 struct nlattr *nl_combis;
796 int i, j;
797
798 nl_combis = nla_nest_start(msg,
799 NL80211_ATTR_INTERFACE_COMBINATIONS);
800 if (!nl_combis)
801 goto nla_put_failure;
802
803 for (i = 0; i < wiphy->n_iface_combinations; i++) {
804 const struct ieee80211_iface_combination *c;
805 struct nlattr *nl_combi, *nl_limits;
806
807 c = &wiphy->iface_combinations[i];
808
809 nl_combi = nla_nest_start(msg, i + 1);
810 if (!nl_combi)
811 goto nla_put_failure;
812
813 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
814 if (!nl_limits)
815 goto nla_put_failure;
816
817 for (j = 0; j < c->n_limits; j++) {
818 struct nlattr *nl_limit;
819
820 nl_limit = nla_nest_start(msg, j + 1);
821 if (!nl_limit)
822 goto nla_put_failure;
9360ffd1
DM		 823 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
824 c->limits[j].max))
825 goto nla_put_failure;
7527a782
JB		 826 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
827 c->limits[j].types))
828 goto nla_put_failure;
829 nla_nest_end(msg, nl_limit);
830 }
831
832 nla_nest_end(msg, nl_limits);
833
9360ffd1
DM		 834 if (c->beacon_int_infra_match &&
835 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
836 goto nla_put_failure;
837 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
838 c->num_different_channels) ||
839 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
840 c->max_interfaces))
841 goto nla_put_failure;
7527a782
JB		 842
843 nla_nest_end(msg, nl_combi);
844 }
845
846 nla_nest_end(msg, nl_combis);
847
848 return 0;
849nla_put_failure:
850 return -ENOBUFS;
851}
852
55682965
JB		 853static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
854 struct cfg80211_registered_device *dev)
855{
856 void *hdr;
ee688b00
JB		 857 struct nlattr *nl_bands, *nl_band;
858 struct nlattr *nl_freqs, *nl_freq;
859 struct nlattr *nl_rates, *nl_rate;
8fdc621d 860 struct nlattr *nl_cmds;
ee688b00
JB		 861 enum ieee80211_band band;
862 struct ieee80211_channel *chan;
863 struct ieee80211_rate *rate;
864 int i;
2e161f78
JB		 865 const struct ieee80211_txrx_stypes *mgmt_stypes =
866 dev->wiphy.mgmt_stypes;
55682965
JB		 867
868 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
869 if (!hdr)
870 return -1;
871
9360ffd1
DM		 872 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
873 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy)) ||
874 nla_put_u32(msg, NL80211_ATTR_GENERATION,
875 cfg80211_rdev_list_generation) ||
876 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
877 dev->wiphy.retry_short) ||
878 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
879 dev->wiphy.retry_long) ||
880 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
881 dev->wiphy.frag_threshold) ||
882 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
883 dev->wiphy.rts_threshold) ||
884 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
885 dev->wiphy.coverage_class) ||
886 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
887 dev->wiphy.max_scan_ssids) ||
888 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
889 dev->wiphy.max_sched_scan_ssids) ||
890 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
891 dev->wiphy.max_scan_ie_len) ||
892 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
893 dev->wiphy.max_sched_scan_ie_len) ||
894 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
895 dev->wiphy.max_match_sets))
896 goto nla_put_failure;
897
898 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
899 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
900 goto nla_put_failure;
901 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
902 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
903 goto nla_put_failure;
904 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
905 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
906 goto nla_put_failure;
907 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
908 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
909 goto nla_put_failure;
910 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
911 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
912 goto nla_put_failure;
913 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
914 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
915 goto nla_put_failure;
916
917 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
918 sizeof(u32) * dev->wiphy.n_cipher_suites,
919 dev->wiphy.cipher_suites))
920 goto nla_put_failure;
921
922 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
923 dev->wiphy.max_num_pmkids))
924 goto nla_put_failure;
925
926 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
927 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
928 goto nla_put_failure;
929
930 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
931 dev->wiphy.available_antennas_tx) ||
932 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
933 dev->wiphy.available_antennas_rx))
934 goto nla_put_failure;
935
936 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
937 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
938 dev->wiphy.probe_resp_offload))
939 goto nla_put_failure;
87bbbe22 940
7f531e03
BR		 941 if ((dev->wiphy.available_antennas_tx ||
942 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 943 u32 tx_ant = 0, rx_ant = 0;
944 int res;
945 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
946 if (!res) {
9360ffd1
DM		 947 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX,
948 tx_ant) ||
949 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX,
950 rx_ant))
951 goto nla_put_failure;
afe0cbf8
BR		 952 }
953 }
954
7527a782
JB		 955 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
956 dev->wiphy.interface_modes))
f59ac048
LR		 957 goto nla_put_failure;
958
ee688b00
JB		 959 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
960 if (!nl_bands)
961 goto nla_put_failure;
962
963 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
964 if (!dev->wiphy.bands[band])
965 continue;
966
967 nl_band = nla_nest_start(msg, band);
968 if (!nl_band)
969 goto nla_put_failure;
970
d51626df 971 /* add HT info */
9360ffd1
DM		 972 if (dev->wiphy.bands[band]->ht_cap.ht_supported &&
973 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
974 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
975 &dev->wiphy.bands[band]->ht_cap.mcs) ||
976 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
977 dev->wiphy.bands[band]->ht_cap.cap) ||
978 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
979 dev->wiphy.bands[band]->ht_cap.ampdu_factor) ||
980 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
981 dev->wiphy.bands[band]->ht_cap.ampdu_density)))
982 goto nla_put_failure;
d51626df 983
bf0c111e
MP		 984 /* add VHT info */
985 if (dev->wiphy.bands[band]->vht_cap.vht_supported &&
986 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
987 sizeof(dev->wiphy.bands[band]->vht_cap.vht_mcs),
988 &dev->wiphy.bands[band]->vht_cap.vht_mcs) ||
989 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
990 dev->wiphy.bands[band]->vht_cap.cap)))
991 goto nla_put_failure;
992
ee688b00
JB		 993 /* add frequencies */
994 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
995 if (!nl_freqs)
996 goto nla_put_failure;
997
998 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
999 nl_freq = nla_nest_start(msg, i);
1000 if (!nl_freq)
1001 goto nla_put_failure;
1002
1003 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 1004
1005 if (nl80211_msg_put_channel(msg, chan))
1006 goto nla_put_failure;
e2f367f2 1007
ee688b00
JB		 1008 nla_nest_end(msg, nl_freq);
1009 }
1010
1011 nla_nest_end(msg, nl_freqs);
1012
1013 /* add bitrates */
1014 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
1015 if (!nl_rates)
1016 goto nla_put_failure;
1017
1018 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
1019 nl_rate = nla_nest_start(msg, i);
1020 if (!nl_rate)
1021 goto nla_put_failure;
1022
1023 rate = &dev->wiphy.bands[band]->bitrates[i];
9360ffd1
DM		 1024 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1025 rate->bitrate))
1026 goto nla_put_failure;
1027 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1028 nla_put_flag(msg,
1029 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1030 goto nla_put_failure;
ee688b00
JB		 1031
1032 nla_nest_end(msg, nl_rate);
1033 }
1034
1035 nla_nest_end(msg, nl_rates);
1036
1037 nla_nest_end(msg, nl_band);
1038 }
1039 nla_nest_end(msg, nl_bands);
1040
8fdc621d
JB		 1041 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
1042 if (!nl_cmds)
1043 goto nla_put_failure;
1044
1045 i = 0;
1046#define CMD(op, n) \
1047 do { \
1048 if (dev->ops->op) { \
1049 i++; \
9360ffd1
DM		 1050 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1051 goto nla_put_failure; \
8fdc621d
JB		 1052 } \
1053 } while (0)
1054
1055 CMD(add_virtual_intf, NEW_INTERFACE);
1056 CMD(change_virtual_intf, SET_INTERFACE);
1057 CMD(add_key, NEW_KEY);
8860020e 1058 CMD(start_ap, START_AP);
8fdc621d
JB		 1059 CMD(add_station, NEW_STATION);
1060 CMD(add_mpath, NEW_MPATH);
24bdd9f4 1061 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 1062 CMD(change_bss, SET_BSS);
636a5d36
JM		 1063 CMD(auth, AUTHENTICATE);
1064 CMD(assoc, ASSOCIATE);
1065 CMD(deauth, DEAUTHENTICATE);
1066 CMD(disassoc, DISASSOCIATE);
04a773ad 1067 CMD(join_ibss, JOIN_IBSS);
29cbe68c 1068 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 1069 CMD(set_pmksa, SET_PMKSA);
1070 CMD(del_pmksa, DEL_PMKSA);
1071 CMD(flush_pmksa, FLUSH_PMKSA);
7c4ef712
JB		 1072 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1073 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 1074 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 1075 CMD(mgmt_tx, FRAME);
f7ca38df 1076 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 1077 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183 1078 i++;
9360ffd1
DM		 1079 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1080 goto nla_put_failure;
463d0183 1081 }
e8c9bd5b 1082 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
cc1d2806 1083 dev->ops->join_mesh) {
aa430da4
JB		 1084 i++;
1085 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1086 goto nla_put_failure;
1087 }
e8347eba 1088 CMD(set_wds_peer, SET_WDS_PEER);
109086ce
AN		 1089 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1090 CMD(tdls_mgmt, TDLS_MGMT);
1091 CMD(tdls_oper, TDLS_OPER);
1092 }
807f8a8c
LC		 1093 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
1094 CMD(sched_scan_start, START_SCHED_SCAN);
7f6cf311 1095 CMD(probe_client, PROBE_CLIENT);
1d9d9213 1096 CMD(set_noack_map, SET_NOACK_MAP);
5e760230
JB		 1097 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1098 i++;
9360ffd1
DM		 1099 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1100 goto nla_put_failure;
5e760230 1101 }
8fdc621d 1102
4745fc09
KV		 1103#ifdef CONFIG_NL80211_TESTMODE
1104 CMD(testmode_cmd, TESTMODE);
1105#endif
1106
8fdc621d 1107#undef CMD
b23aa676 1108
6829c878 1109 if (dev->ops->connect || dev->ops->auth) {
b23aa676 1110 i++;
9360ffd1
DM		 1111 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1112 goto nla_put_failure;
b23aa676
SO		 1113 }
1114
6829c878 1115 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676 1116 i++;
9360ffd1
DM		 1117 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1118 goto nla_put_failure;
b23aa676
SO		 1119 }
1120
8fdc621d
JB		 1121 nla_nest_end(msg, nl_cmds);
1122
7c4ef712 1123 if (dev->ops->remain_on_channel &&
9360ffd1
DM		 1124 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
1125 nla_put_u32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1126 dev->wiphy.max_remain_on_channel_duration))
1127 goto nla_put_failure;
a293911d 1128
9360ffd1
DM		 1129 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
1130 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
1131 goto nla_put_failure;
f7ca38df 1132
2e161f78
JB		 1133 if (mgmt_stypes) {
1134 u16 stypes;
1135 struct nlattr *nl_ftypes, *nl_ifs;
1136 enum nl80211_iftype ift;
1137
1138 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
1139 if (!nl_ifs)
1140 goto nla_put_failure;
1141
1142 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1143 nl_ftypes = nla_nest_start(msg, ift);
1144 if (!nl_ftypes)
1145 goto nla_put_failure;
1146 i = 0;
1147 stypes = mgmt_stypes[ift].tx;
1148 while (stypes) {
9360ffd1
DM		 1149 if ((stypes & 1) &&
1150 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1151 (i << 4) | IEEE80211_FTYPE_MGMT))
1152 goto nla_put_failure;
2e161f78
JB		 1153 stypes >>= 1;
1154 i++;
1155 }
1156 nla_nest_end(msg, nl_ftypes);
1157 }
1158
74b70a4e
JB		 1159 nla_nest_end(msg, nl_ifs);
1160
2e161f78
JB		 1161 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1162 if (!nl_ifs)
1163 goto nla_put_failure;
1164
1165 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1166 nl_ftypes = nla_nest_start(msg, ift);
1167 if (!nl_ftypes)
1168 goto nla_put_failure;
1169 i = 0;
1170 stypes = mgmt_stypes[ift].rx;
1171 while (stypes) {
9360ffd1
DM		 1172 if ((stypes & 1) &&
1173 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1174 (i << 4) | IEEE80211_FTYPE_MGMT))
1175 goto nla_put_failure;
2e161f78
JB		 1176 stypes >>= 1;
1177 i++;
1178 }
1179 nla_nest_end(msg, nl_ftypes);
1180 }
1181 nla_nest_end(msg, nl_ifs);
1182 }
1183
dfb89c56 1184#ifdef CONFIG_PM
ff1b6e69
JB		 1185 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
1186 struct nlattr *nl_wowlan;
1187
1188 nl_wowlan = nla_nest_start(msg,
1189 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
1190 if (!nl_wowlan)
1191 goto nla_put_failure;
1192
9360ffd1
DM		 1193 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
1194 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1195 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
1196 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1197 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
1198 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1199 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
1200 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1201 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
1202 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1203 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
1204 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1205 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
1206 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1207 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
1208 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1209 goto nla_put_failure;
ff1b6e69
JB		 1210 if (dev->wiphy.wowlan.n_patterns) {
1211 struct nl80211_wowlan_pattern_support pat = {
1212 .max_patterns = dev->wiphy.wowlan.n_patterns,
1213 .min_pattern_len =
1214 dev->wiphy.wowlan.pattern_min_len,
1215 .max_pattern_len =
1216 dev->wiphy.wowlan.pattern_max_len,
1217 };
9360ffd1
DM		 1218 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1219 sizeof(pat), &pat))
1220 goto nla_put_failure;
ff1b6e69
JB		 1221 }
1222
1223 nla_nest_end(msg, nl_wowlan);
1224 }
dfb89c56 1225#endif
ff1b6e69 1226
7527a782
JB		 1227 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1228 dev->wiphy.software_iftypes))
1229 goto nla_put_failure;
1230
1231 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
1232 goto nla_put_failure;
1233
9360ffd1
DM		 1234 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1235 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1236 dev->wiphy.ap_sme_capa))
1237 goto nla_put_failure;
562a7480 1238
9360ffd1
DM		 1239 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1240 dev->wiphy.features))
1241 goto nla_put_failure;
1f074bd8 1242
9360ffd1
DM		 1243 if (dev->wiphy.ht_capa_mod_mask &&
1244 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1245 sizeof(*dev->wiphy.ht_capa_mod_mask),
1246 dev->wiphy.ht_capa_mod_mask))
1247 goto nla_put_failure;
7e7c8926 1248
55682965
JB		 1249 return genlmsg_end(msg, hdr);
1250
1251 nla_put_failure:
bc3ed28c
TG		 1252 genlmsg_cancel(msg, hdr);
1253 return -EMSGSIZE;
55682965
JB		 1254}
1255
1256static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1257{
1258 int idx = 0;
1259 int start = cb->args[0];
1260 struct cfg80211_registered_device *dev;
1261
a1794390 1262 mutex_lock(&cfg80211_mutex);
79c97e97 1263 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1264 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1265 continue;
b4637271 1266 if (++idx <= start)
55682965
JB		 1267 continue;
1268 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
1269 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1270 dev) < 0) {
1271 idx--;
55682965 1272 break;
b4637271 1273 }
55682965 1274 }
a1794390 1275 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1276
1277 cb->args[0] = idx;
1278
1279 return skb->len;
1280}
1281
1282static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1283{
1284 struct sk_buff *msg;
4c476991 1285 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1286
fd2120ca 1287 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1288 if (!msg)
4c476991 1289 return -ENOMEM;
55682965 1290
4c476991
JB		 1291 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0) {
1292 nlmsg_free(msg);
1293 return -ENOBUFS;
1294 }
55682965 1295
134e6375 1296 return genlmsg_reply(msg, info);
55682965
JB		 1297}
1298
31888487
JM		 1299static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1300 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1301 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1302 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1303 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1304 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1305};
1306
1307static int parse_txq_params(struct nlattr *tb[],
1308 struct ieee80211_txq_params *txq_params)
1309{
a3304b0a 1310 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 1311 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1312 !tb[NL80211_TXQ_ATTR_AIFS])
1313 return -EINVAL;
1314
a3304b0a 1315 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 1316 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1317 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1318 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1319 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1320
a3304b0a
JB		 1321 if (txq_params->ac >= NL80211_NUM_ACS)
1322 return -EINVAL;
1323
31888487
JM		 1324 return 0;
1325}
1326
f444de05
JB		 1327static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1328{
1329 /*
cc1d2806
JB		 1330 * You can only set the channel explicitly for WDS interfaces,
1331 * all others have their channel managed via their respective
1332 * "establish a connection" command (connect, join, ...)
1333 *
1334 * For AP/GO and mesh mode, the channel can be set with the
1335 * channel userspace API, but is only stored and passed to the
1336 * low-level driver when the AP starts or the mesh is joined.
1337 * This is for backward compatibility, userspace can also give
1338 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 1339 *
1340 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 1341 * whatever else is going on, so they have their own special
1342 * operation to set the monitor channel if possible.
f444de05
JB		 1343 */
1344 return !wdev ||
1345 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 1346 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1347 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1348 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1349}
1350
cd6c6598
JB		 1351static bool nl80211_valid_channel_type(struct genl_info *info,
1352 enum nl80211_channel_type *channel_type)
1353{
1354 enum nl80211_channel_type tmp;
1355
1356 if (!info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1357 return false;
1358
1359 tmp = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1360 if (tmp != NL80211_CHAN_NO_HT &&
1361 tmp != NL80211_CHAN_HT20 &&
1362 tmp != NL80211_CHAN_HT40PLUS &&
1363 tmp != NL80211_CHAN_HT40MINUS)
1364 return false;
1365
1366 if (channel_type)
1367 *channel_type = tmp;
1368
1369 return true;
1370}
1371
f444de05
JB		 1372static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1373 struct wireless_dev *wdev,
1374 struct genl_info *info)
1375{
aa430da4 1376 struct ieee80211_channel *channel;
f444de05
JB		 1377 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1378 u32 freq;
1379 int result;
e8c9bd5b
JB		 1380 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1381
1382 if (wdev)
1383 iftype = wdev->iftype;
f444de05
JB		 1384
1385 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1386 return -EINVAL;
1387
1388 if (!nl80211_can_set_dev_channel(wdev))
1389 return -EOPNOTSUPP;
1390
cd6c6598
JB		 1391 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
1392 !nl80211_valid_channel_type(info, &channel_type))
1393 return -EINVAL;
f444de05
JB		 1394
1395 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1396
1397 mutex_lock(&rdev->devlist_mtx);
e8c9bd5b 1398 switch (iftype) {
aa430da4
JB		 1399 case NL80211_IFTYPE_AP:
1400 case NL80211_IFTYPE_P2P_GO:
1401 if (wdev->beacon_interval) {
1402 result = -EBUSY;
1403 break;
1404 }
1405 channel = rdev_freq_to_chan(rdev, freq, channel_type);
1406 if (!channel || !cfg80211_can_beacon_sec_chan(&rdev->wiphy,
1407 channel,
1408 channel_type)) {
1409 result = -EINVAL;
1410 break;
1411 }
1412 wdev->preset_chan = channel;
1413 wdev->preset_chantype = channel_type;
1414 result = 0;
1415 break;
cc1d2806
JB		 1416 case NL80211_IFTYPE_MESH_POINT:
1417 result = cfg80211_set_mesh_freq(rdev, wdev, freq, channel_type);
1418 break;
e8c9bd5b
JB		 1419 case NL80211_IFTYPE_MONITOR:
1420 result = cfg80211_set_monitor_channel(rdev, freq, channel_type);
1421 break;
aa430da4 1422 default:
e8c9bd5b 1423 result = -EINVAL;
f444de05
JB		 1424 }
1425 mutex_unlock(&rdev->devlist_mtx);
1426
1427 return result;
1428}
1429
1430static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1431{
4c476991
JB		 1432 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1433 struct net_device *netdev = info->user_ptr[1];
f444de05 1434
4c476991 1435 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1436}
1437
e8347eba
BJ		 1438static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1439{
43b19952
JB		 1440 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1441 struct net_device *dev = info->user_ptr[1];
1442 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1443 const u8 *bssid;
e8347eba
BJ		 1444
1445 if (!info->attrs[NL80211_ATTR_MAC])
1446 return -EINVAL;
1447
43b19952
JB		 1448 if (netif_running(dev))
1449 return -EBUSY;
e8347eba 1450
43b19952
JB		 1451 if (!rdev->ops->set_wds_peer)
1452 return -EOPNOTSUPP;
e8347eba 1453
43b19952
JB		 1454 if (wdev->iftype != NL80211_IFTYPE_WDS)
1455 return -EOPNOTSUPP;
e8347eba
BJ		 1456
1457 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1458 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1459}
1460
1461
55682965
JB		 1462static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1463{
1464 struct cfg80211_registered_device *rdev;
f444de05
JB		 1465 struct net_device *netdev = NULL;
1466 struct wireless_dev *wdev;
a1e567c8 1467 int result = 0, rem_txq_params = 0;
31888487 1468 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1469 u32 changed;
1470 u8 retry_short = 0, retry_long = 0;
1471 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1472 u8 coverage_class = 0;
55682965 1473
f444de05
JB		 1474 /*
1475 * Try to find the wiphy and netdev. Normally this
1476 * function shouldn't need the netdev, but this is
1477 * done for backward compatibility -- previously
1478 * setting the channel was done per wiphy, but now
1479 * it is per netdev. Previous userland like hostapd
1480 * also passed a netdev to set_wiphy, so that it is
1481 * possible to let that go to the right netdev!
1482 */
4bbf4d56
JB		 1483 mutex_lock(&cfg80211_mutex);
1484
f444de05
JB		 1485 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1486 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1487
1488 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1489 if (netdev && netdev->ieee80211_ptr) {
1490 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1491 mutex_lock(&rdev->mtx);
1492 } else
1493 netdev = NULL;
4bbf4d56
JB		 1494 }
1495
f444de05 1496 if (!netdev) {
878d9ec7
JB		 1497 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
1498 info->attrs);
f444de05
JB		 1499 if (IS_ERR(rdev)) {
1500 mutex_unlock(&cfg80211_mutex);
4c476991 1501 return PTR_ERR(rdev);
f444de05
JB		 1502 }
1503 wdev = NULL;
1504 netdev = NULL;
1505 result = 0;
1506
1507 mutex_lock(&rdev->mtx);
cc1d2806 1508 } else if (nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
f444de05
JB		 1509 wdev = netdev->ieee80211_ptr;
1510 else
1511 wdev = NULL;
1512
1513 /*
1514 * end workaround code, by now the rdev is available
1515 * and locked, and wdev may or may not be NULL.
1516 */
4bbf4d56
JB		 1517
1518 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1519 result = cfg80211_dev_rename(
1520 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1521
1522 mutex_unlock(&cfg80211_mutex);
1523
1524 if (result)
1525 goto bad_res;
31888487
JM		 1526
1527 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1528 struct ieee80211_txq_params txq_params;
1529 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1530
1531 if (!rdev->ops->set_txq_params) {
1532 result = -EOPNOTSUPP;
1533 goto bad_res;
1534 }
1535
f70f01c2
EP		 1536 if (!netdev) {
1537 result = -EINVAL;
1538 goto bad_res;
1539 }
1540
133a3ff2
JB		 1541 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1542 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1543 result = -EINVAL;
1544 goto bad_res;
1545 }
1546
2b5f8b0b
JB		 1547 if (!netif_running(netdev)) {
1548 result = -ENETDOWN;
1549 goto bad_res;
1550 }
1551
31888487
JM		 1552 nla_for_each_nested(nl_txq_params,
1553 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1554 rem_txq_params) {
1555 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1556 nla_data(nl_txq_params),
1557 nla_len(nl_txq_params),
1558 txq_params_policy);
1559 result = parse_txq_params(tb, &txq_params);
1560 if (result)
1561 goto bad_res;
1562
1563 result = rdev->ops->set_txq_params(&rdev->wiphy,
f70f01c2 1564 netdev,
31888487
JM		 1565 &txq_params);
1566 if (result)
1567 goto bad_res;
1568 }
1569 }
55682965 1570
72bdcf34 1571 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1572 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1573 if (result)
1574 goto bad_res;
1575 }
1576
98d2ff8b
JO		 1577 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1578 enum nl80211_tx_power_setting type;
1579 int idx, mbm = 0;
1580
1581 if (!rdev->ops->set_tx_power) {
60ea385f 1582 result = -EOPNOTSUPP;
98d2ff8b
JO		 1583 goto bad_res;
1584 }
1585
1586 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1587 type = nla_get_u32(info->attrs[idx]);
1588
1589 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1590 (type != NL80211_TX_POWER_AUTOMATIC)) {
1591 result = -EINVAL;
1592 goto bad_res;
1593 }
1594
1595 if (type != NL80211_TX_POWER_AUTOMATIC) {
1596 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1597 mbm = nla_get_u32(info->attrs[idx]);
1598 }
1599
1600 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1601 if (result)
1602 goto bad_res;
1603 }
1604
afe0cbf8
BR		 1605 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1606 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1607 u32 tx_ant, rx_ant;
7f531e03
BR		 1608 if ((!rdev->wiphy.available_antennas_tx &&
1609 !rdev->wiphy.available_antennas_rx) ||
1610 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1611 result = -EOPNOTSUPP;
1612 goto bad_res;
1613 }
1614
1615 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1616 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1617
a7ffac95 1618 /* reject antenna configurations which don't match the
7f531e03
BR		 1619 * available antenna masks, except for the "all" mask */
1620 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1621 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1622 result = -EINVAL;
1623 goto bad_res;
1624 }
1625
7f531e03
BR		 1626 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1627 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1628
afe0cbf8
BR		 1629 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1630 if (result)
1631 goto bad_res;
1632 }
1633
b9a5f8ca
JM		 1634 changed = 0;
1635
1636 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1637 retry_short = nla_get_u8(
1638 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1639 if (retry_short == 0) {
1640 result = -EINVAL;
1641 goto bad_res;
1642 }
1643 changed |= WIPHY_PARAM_RETRY_SHORT;
1644 }
1645
1646 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1647 retry_long = nla_get_u8(
1648 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1649 if (retry_long == 0) {
1650 result = -EINVAL;
1651 goto bad_res;
1652 }
1653 changed |= WIPHY_PARAM_RETRY_LONG;
1654 }
1655
1656 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1657 frag_threshold = nla_get_u32(
1658 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1659 if (frag_threshold < 256) {
1660 result = -EINVAL;
1661 goto bad_res;
1662 }
1663 if (frag_threshold != (u32) -1) {
1664 /*
1665 * Fragments (apart from the last one) are required to
1666 * have even length. Make the fragmentation code
1667 * simpler by stripping LSB should someone try to use
1668 * odd threshold value.
1669 */
1670 frag_threshold &= ~0x1;
1671 }
1672 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1673 }
1674
1675 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1676 rts_threshold = nla_get_u32(
1677 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1678 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1679 }
1680
81077e82
LT		 1681 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1682 coverage_class = nla_get_u8(
1683 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1684 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1685 }
1686
b9a5f8ca
JM		 1687 if (changed) {
1688 u8 old_retry_short, old_retry_long;
1689 u32 old_frag_threshold, old_rts_threshold;
81077e82 1690 u8 old_coverage_class;
b9a5f8ca
JM		 1691
1692 if (!rdev->ops->set_wiphy_params) {
1693 result = -EOPNOTSUPP;
1694 goto bad_res;
1695 }
1696
1697 old_retry_short = rdev->wiphy.retry_short;
1698 old_retry_long = rdev->wiphy.retry_long;
1699 old_frag_threshold = rdev->wiphy.frag_threshold;
1700 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1701 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1702
1703 if (changed & WIPHY_PARAM_RETRY_SHORT)
1704 rdev->wiphy.retry_short = retry_short;
1705 if (changed & WIPHY_PARAM_RETRY_LONG)
1706 rdev->wiphy.retry_long = retry_long;
1707 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1708 rdev->wiphy.frag_threshold = frag_threshold;
1709 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1710 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1711 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1712 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1713
1714 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1715 if (result) {
1716 rdev->wiphy.retry_short = old_retry_short;
1717 rdev->wiphy.retry_long = old_retry_long;
1718 rdev->wiphy.frag_threshold = old_frag_threshold;
1719 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1720 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1721 }
1722 }
72bdcf34 1723
306d6112 1724 bad_res:
4bbf4d56 1725 mutex_unlock(&rdev->mtx);
f444de05
JB		 1726 if (netdev)
1727 dev_put(netdev);
55682965
JB		 1728 return result;
1729}
1730
71bbc994
JB		 1731static inline u64 wdev_id(struct wireless_dev *wdev)
1732{
1733 return (u64)wdev->identifier |
1734 ((u64)wiphy_to_dev(wdev->wiphy)->wiphy_idx << 32);
1735}
55682965
JB		 1736
1737static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 1738 struct cfg80211_registered_device *rdev,
72fb2abc 1739 struct wireless_dev *wdev)
55682965 1740{
72fb2abc 1741 struct net_device *dev = wdev->netdev;
55682965
JB		 1742 void *hdr;
1743
1744 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1745 if (!hdr)
1746 return -1;
1747
72fb2abc
JB		 1748 if (dev &&
1749 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
1750 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name) ||
1751 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dev->dev_addr)))
1752 goto nla_put_failure;
1753
1754 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
1755 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
71bbc994 1756 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9360ffd1
DM		 1757 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1758 rdev->devlist_generation ^
1759 (cfg80211_rdev_list_generation << 2)))
1760 goto nla_put_failure;
f5ea9120 1761
2e165b81
MK		 1762 if (rdev->monitor_channel) {
1763 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
1764 rdev->monitor_channel->center_freq) ||
1765 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
1766 rdev->monitor_channel_type))
59ef43e6 1767 goto nla_put_failure;
d91df0e3
PF		 1768 }
1769
55682965
JB		 1770 return genlmsg_end(msg, hdr);
1771
1772 nla_put_failure:
bc3ed28c
TG		 1773 genlmsg_cancel(msg, hdr);
1774 return -EMSGSIZE;
55682965
JB		 1775}
1776
1777static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1778{
1779 int wp_idx = 0;
1780 int if_idx = 0;
1781 int wp_start = cb->args[0];
1782 int if_start = cb->args[1];
f5ea9120 1783 struct cfg80211_registered_device *rdev;
55682965
JB		 1784 struct wireless_dev *wdev;
1785
a1794390 1786 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1787 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1788 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1789 continue;
bba95fef
JB		 1790 if (wp_idx < wp_start) {
1791 wp_idx++;
55682965 1792 continue;
bba95fef 1793 }
55682965
JB		 1794 if_idx = 0;
1795
f5ea9120 1796 mutex_lock(&rdev->devlist_mtx);
89a54e48 1797 list_for_each_entry(wdev, &rdev->wdev_list, list) {
bba95fef
JB		 1798 if (if_idx < if_start) {
1799 if_idx++;
55682965 1800 continue;
bba95fef 1801 }
55682965
JB		 1802 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
1803 cb->nlh->nlmsg_seq, NLM_F_MULTI,
72fb2abc 1804 rdev, wdev) < 0) {
f5ea9120 1805 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1806 goto out;
1807 }
1808 if_idx++;
55682965 1809 }
f5ea9120 1810 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1811
1812 wp_idx++;
55682965 1813 }
bba95fef 1814 out:
a1794390 1815 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1816
1817 cb->args[0] = wp_idx;
1818 cb->args[1] = if_idx;
1819
1820 return skb->len;
1821}
1822
1823static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1824{
1825 struct sk_buff *msg;
4c476991 1826 struct cfg80211_registered_device *dev = info->user_ptr[0];
72fb2abc 1827 struct wireless_dev *wdev = info->user_ptr[1];
55682965 1828
fd2120ca 1829 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1830 if (!msg)
4c476991 1831 return -ENOMEM;
55682965 1832
d726405a 1833 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
72fb2abc 1834 dev, wdev) < 0) {
4c476991
JB		 1835 nlmsg_free(msg);
1836 return -ENOBUFS;
1837 }
55682965 1838
134e6375 1839 return genlmsg_reply(msg, info);
55682965
JB		 1840}
1841
66f7ac50
MW		 1842static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1843 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1844 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1845 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1846 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1847 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1848};
1849
1850static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1851{
1852 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1853 int flag;
1854
1855 *mntrflags = 0;
1856
1857 if (!nla)
1858 return -EINVAL;
1859
1860 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1861 nla, mntr_flags_policy))
1862 return -EINVAL;
1863
1864 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1865 if (flags[flag])
1866 *mntrflags |= (1<<flag);
1867
1868 return 0;
1869}
1870
9bc383de 1871static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1872 struct net_device *netdev, u8 use_4addr,
1873 enum nl80211_iftype iftype)
9bc383de 1874{
ad4bb6f8 1875 if (!use_4addr) {
f350a0a8 1876 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1877 return -EBUSY;
9bc383de 1878 return 0;
ad4bb6f8 1879 }
9bc383de
JB		 1880
1881 switch (iftype) {
1882 case NL80211_IFTYPE_AP_VLAN:
1883 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1884 return 0;
1885 break;
1886 case NL80211_IFTYPE_STATION:
1887 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1888 return 0;
1889 break;
1890 default:
1891 break;
1892 }
1893
1894 return -EOPNOTSUPP;
1895}
1896
55682965
JB		 1897static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1898{
4c476991 1899 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1900 struct vif_params params;
e36d56b6 1901 int err;
04a773ad 1902 enum nl80211_iftype otype, ntype;
4c476991 1903 struct net_device *dev = info->user_ptr[1];
92ffe055 1904 u32 _flags, *flags = NULL;
ac7f9cfa 1905 bool change = false;
55682965 1906
2ec600d6
LCC		 1907 memset(&params, 0, sizeof(params));
1908
04a773ad 1909 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1910
723b038d 1911 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1912 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1913 if (otype != ntype)
ac7f9cfa 1914 change = true;
4c476991
JB		 1915 if (ntype > NL80211_IFTYPE_MAX)
1916 return -EINVAL;
723b038d
JB		 1917 }
1918
92ffe055 1919 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1920 struct wireless_dev *wdev = dev->ieee80211_ptr;
1921
4c476991
JB		 1922 if (ntype != NL80211_IFTYPE_MESH_POINT)
1923 return -EINVAL;
29cbe68c
JB		 1924 if (netif_running(dev))
1925 return -EBUSY;
1926
1927 wdev_lock(wdev);
1928 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1929 IEEE80211_MAX_MESH_ID_LEN);
1930 wdev->mesh_id_up_len =
1931 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1932 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1933 wdev->mesh_id_up_len);
1934 wdev_unlock(wdev);
2ec600d6
LCC		 1935 }
1936
8b787643
FF		 1937 if (info->attrs[NL80211_ATTR_4ADDR]) {
1938 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1939 change = true;
ad4bb6f8 1940 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1941 if (err)
4c476991 1942 return err;
8b787643
FF		 1943 } else {
1944 params.use_4addr = -1;
1945 }
1946
92ffe055 1947 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1948 if (ntype != NL80211_IFTYPE_MONITOR)
1949 return -EINVAL;
92ffe055
JB		 1950 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1951 &_flags);
ac7f9cfa 1952 if (err)
4c476991 1953 return err;
ac7f9cfa
JB		 1954
1955 flags = &_flags;
1956 change = true;
92ffe055 1957 }
3b85875a 1958
ac7f9cfa 1959 if (change)
3d54d255 1960 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1961 else
1962 err = 0;
60719ffd 1963
9bc383de
JB		 1964 if (!err && params.use_4addr != -1)
1965 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1966
55682965
JB		 1967 return err;
1968}
1969
1970static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1971{
4c476991 1972 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1973 struct vif_params params;
84efbb84 1974 struct wireless_dev *wdev;
1c90f9d4 1975 struct sk_buff *msg;
55682965
JB		 1976 int err;
1977 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1978 u32 flags;
55682965 1979
2ec600d6
LCC		 1980 memset(&params, 0, sizeof(params));
1981
55682965
JB		 1982 if (!info->attrs[NL80211_ATTR_IFNAME])
1983 return -EINVAL;
1984
1985 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1986 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1987 if (type > NL80211_IFTYPE_MAX)
1988 return -EINVAL;
1989 }
1990
79c97e97 1991 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 1992 !(rdev->wiphy.interface_modes & (1 << type)))
1993 return -EOPNOTSUPP;
55682965 1994
9bc383de 1995 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 1996 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 1997 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 1998 if (err)
4c476991 1999 return err;
9bc383de 2000 }
8b787643 2001
1c90f9d4
JB		 2002 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2003 if (!msg)
2004 return -ENOMEM;
2005
66f7ac50
MW		 2006 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
2007 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
2008 &flags);
84efbb84 2009 wdev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 2010 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 2011 type, err ? NULL : &flags, &params);
1c90f9d4
JB		 2012 if (IS_ERR(wdev)) {
2013 nlmsg_free(msg);
84efbb84 2014 return PTR_ERR(wdev);
1c90f9d4 2015 }
2ec600d6 2016
29cbe68c
JB		 2017 if (type == NL80211_IFTYPE_MESH_POINT &&
2018 info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 2019 wdev_lock(wdev);
2020 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2021 IEEE80211_MAX_MESH_ID_LEN);
2022 wdev->mesh_id_up_len =
2023 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2024 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2025 wdev->mesh_id_up_len);
2026 wdev_unlock(wdev);
2027 }
2028
1c90f9d4
JB		 2029 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
2030 rdev, wdev) < 0) {
2031 nlmsg_free(msg);
2032 return -ENOBUFS;
2033 }
2034
2035 return genlmsg_reply(msg, info);
55682965
JB		 2036}
2037
2038static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
2039{
4c476991 2040 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 2041 struct wireless_dev *wdev = info->user_ptr[1];
55682965 2042
4c476991
JB		 2043 if (!rdev->ops->del_virtual_intf)
2044 return -EOPNOTSUPP;
55682965 2045
84efbb84
JB		 2046 /*
2047 * If we remove a wireless device without a netdev then clear
2048 * user_ptr[1] so that nl80211_post_doit won't dereference it
2049 * to check if it needs to do dev_put(). Otherwise it crashes
2050 * since the wdev has been freed, unlike with a netdev where
2051 * we need the dev_put() for the netdev to really be freed.
2052 */
2053 if (!wdev->netdev)
2054 info->user_ptr[1] = NULL;
2055
2056 return rdev->ops->del_virtual_intf(&rdev->wiphy, wdev);
55682965
JB		 2057}
2058
1d9d9213
SW		 2059static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
2060{
2061 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2062 struct net_device *dev = info->user_ptr[1];
2063 u16 noack_map;
2064
2065 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
2066 return -EINVAL;
2067
2068 if (!rdev->ops->set_noack_map)
2069 return -EOPNOTSUPP;
2070
2071 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
2072
2073 return rdev->ops->set_noack_map(&rdev->wiphy, dev, noack_map);
2074}
2075
41ade00f
JB		 2076struct get_key_cookie {
2077 struct sk_buff *msg;
2078 int error;
b9454e83 2079 int idx;
41ade00f
JB		 2080};
2081
2082static void get_key_callback(void *c, struct key_params *params)
2083{
b9454e83 2084 struct nlattr *key;
41ade00f
JB		 2085 struct get_key_cookie *cookie = c;
2086
9360ffd1
DM		 2087 if ((params->key &&
2088 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
2089 params->key_len, params->key)) ||
2090 (params->seq &&
2091 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
2092 params->seq_len, params->seq)) ||
2093 (params->cipher &&
2094 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
2095 params->cipher)))
2096 goto nla_put_failure;
41ade00f 2097
b9454e83
JB		 2098 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
2099 if (!key)
2100 goto nla_put_failure;
2101
9360ffd1
DM		 2102 if ((params->key &&
2103 nla_put(cookie->msg, NL80211_KEY_DATA,
2104 params->key_len, params->key)) ||
2105 (params->seq &&
2106 nla_put(cookie->msg, NL80211_KEY_SEQ,
2107 params->seq_len, params->seq)) ||
2108 (params->cipher &&
2109 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
2110 params->cipher)))
2111 goto nla_put_failure;
b9454e83 2112
9360ffd1
DM		 2113 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
2114 goto nla_put_failure;
b9454e83
JB		 2115
2116 nla_nest_end(cookie->msg, key);
2117
41ade00f
JB		 2118 return;
2119 nla_put_failure:
2120 cookie->error = 1;
2121}
2122
2123static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
2124{
4c476991 2125 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2126 int err;
4c476991 2127 struct net_device *dev = info->user_ptr[1];
41ade00f 2128 u8 key_idx = 0;
e31b8213
JB		 2129 const u8 *mac_addr = NULL;
2130 bool pairwise;
41ade00f
JB		 2131 struct get_key_cookie cookie = {
2132 .error = 0,
2133 };
2134 void *hdr;
2135 struct sk_buff *msg;
2136
2137 if (info->attrs[NL80211_ATTR_KEY_IDX])
2138 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
2139
3cfcf6ac 2140 if (key_idx > 5)
41ade00f
JB		 2141 return -EINVAL;
2142
2143 if (info->attrs[NL80211_ATTR_MAC])
2144 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2145
e31b8213
JB		 2146 pairwise = !!mac_addr;
2147 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
2148 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
2149 if (kt >= NUM_NL80211_KEYTYPES)
2150 return -EINVAL;
2151 if (kt != NL80211_KEYTYPE_GROUP &&
2152 kt != NL80211_KEYTYPE_PAIRWISE)
2153 return -EINVAL;
2154 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
2155 }
2156
4c476991
JB		 2157 if (!rdev->ops->get_key)
2158 return -EOPNOTSUPP;
41ade00f 2159
fd2120ca 2160 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 2161 if (!msg)
2162 return -ENOMEM;
41ade00f
JB		 2163
2164 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2165 NL80211_CMD_NEW_KEY);
4c476991
JB		 2166 if (IS_ERR(hdr))
2167 return PTR_ERR(hdr);
41ade00f
JB		 2168
2169 cookie.msg = msg;
b9454e83 2170 cookie.idx = key_idx;
41ade00f 2171
9360ffd1
DM		 2172 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2173 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
2174 goto nla_put_failure;
2175 if (mac_addr &&
2176 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
2177 goto nla_put_failure;
41ade00f 2178
e31b8213
JB		 2179 if (pairwise && mac_addr &&
2180 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2181 return -ENOENT;
2182
2183 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
2184 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 2185
2186 if (err)
6c95e2a2 2187 goto free_msg;
41ade00f
JB		 2188
2189 if (cookie.error)
2190 goto nla_put_failure;
2191
2192 genlmsg_end(msg, hdr);
4c476991 2193 return genlmsg_reply(msg, info);
41ade00f
JB		 2194
2195 nla_put_failure:
2196 err = -ENOBUFS;
6c95e2a2 2197 free_msg:
41ade00f 2198 nlmsg_free(msg);
41ade00f
JB		 2199 return err;
2200}
2201
2202static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2203{
4c476991 2204 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 2205 struct key_parse key;
41ade00f 2206 int err;
4c476991 2207 struct net_device *dev = info->user_ptr[1];
41ade00f 2208
b9454e83
JB		 2209 err = nl80211_parse_key(info, &key);
2210 if (err)
2211 return err;
41ade00f 2212
b9454e83 2213 if (key.idx < 0)
41ade00f
JB		 2214 return -EINVAL;
2215
b9454e83
JB		 2216 /* only support setting default key */
2217 if (!key.def && !key.defmgmt)
41ade00f
JB		 2218 return -EINVAL;
2219
dbd2fd65 2220 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 2221
dbd2fd65
JB		 2222 if (key.def) {
2223 if (!rdev->ops->set_default_key) {
2224 err = -EOPNOTSUPP;
2225 goto out;
2226 }
41ade00f 2227
dbd2fd65
JB		 2228 err = nl80211_key_allowed(dev->ieee80211_ptr);
2229 if (err)
2230 goto out;
2231
dbd2fd65
JB		 2232 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
2233 key.def_uni, key.def_multi);
2234
2235 if (err)
2236 goto out;
fffd0934 2237
3d23e349 2238#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 2239 dev->ieee80211_ptr->wext.default_key = key.idx;
2240#endif
2241 } else {
2242 if (key.def_uni || !key.def_multi) {
2243 err = -EINVAL;
2244 goto out;
2245 }
2246
2247 if (!rdev->ops->set_default_mgmt_key) {
2248 err = -EOPNOTSUPP;
2249 goto out;
2250 }
2251
2252 err = nl80211_key_allowed(dev->ieee80211_ptr);
2253 if (err)
2254 goto out;
2255
2256 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
2257 dev, key.idx);
2258 if (err)
2259 goto out;
2260
2261#ifdef CONFIG_CFG80211_WEXT
2262 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 2263#endif
dbd2fd65
JB		 2264 }
2265
2266 out:
fffd0934 2267 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2268
41ade00f
JB		 2269 return err;
2270}
2271
2272static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2273{
4c476991 2274 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 2275 int err;
4c476991 2276 struct net_device *dev = info->user_ptr[1];
b9454e83 2277 struct key_parse key;
e31b8213 2278 const u8 *mac_addr = NULL;
41ade00f 2279
b9454e83
JB		 2280 err = nl80211_parse_key(info, &key);
2281 if (err)
2282 return err;
41ade00f 2283
b9454e83 2284 if (!key.p.key)
41ade00f
JB		 2285 return -EINVAL;
2286
41ade00f
JB		 2287 if (info->attrs[NL80211_ATTR_MAC])
2288 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2289
e31b8213
JB		 2290 if (key.type == -1) {
2291 if (mac_addr)
2292 key.type = NL80211_KEYTYPE_PAIRWISE;
2293 else
2294 key.type = NL80211_KEYTYPE_GROUP;
2295 }
2296
2297 /* for now */
2298 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2299 key.type != NL80211_KEYTYPE_GROUP)
2300 return -EINVAL;
2301
4c476991
JB		 2302 if (!rdev->ops->add_key)
2303 return -EOPNOTSUPP;
25e47c18 2304
e31b8213
JB		 2305 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2306 key.type == NL80211_KEYTYPE_PAIRWISE,
2307 mac_addr))
4c476991 2308 return -EINVAL;
41ade00f 2309
fffd0934
JB		 2310 wdev_lock(dev->ieee80211_ptr);
2311 err = nl80211_key_allowed(dev->ieee80211_ptr);
2312 if (!err)
2313 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 2314 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 2315 mac_addr, &key.p);
2316 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2317
41ade00f
JB		 2318 return err;
2319}
2320
2321static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2322{
4c476991 2323 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2324 int err;
4c476991 2325 struct net_device *dev = info->user_ptr[1];
41ade00f 2326 u8 *mac_addr = NULL;
b9454e83 2327 struct key_parse key;
41ade00f 2328
b9454e83
JB		 2329 err = nl80211_parse_key(info, &key);
2330 if (err)
2331 return err;
41ade00f
JB		 2332
2333 if (info->attrs[NL80211_ATTR_MAC])
2334 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2335
e31b8213
JB		 2336 if (key.type == -1) {
2337 if (mac_addr)
2338 key.type = NL80211_KEYTYPE_PAIRWISE;
2339 else
2340 key.type = NL80211_KEYTYPE_GROUP;
2341 }
2342
2343 /* for now */
2344 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2345 key.type != NL80211_KEYTYPE_GROUP)
2346 return -EINVAL;
2347
4c476991
JB		 2348 if (!rdev->ops->del_key)
2349 return -EOPNOTSUPP;
41ade00f 2350
fffd0934
JB		 2351 wdev_lock(dev->ieee80211_ptr);
2352 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 2353
2354 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2355 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2356 err = -ENOENT;
2357
fffd0934 2358 if (!err)
e31b8213
JB		 2359 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
2360 key.type == NL80211_KEYTYPE_PAIRWISE,
2361 mac_addr);
41ade00f 2362
3d23e349 2363#ifdef CONFIG_CFG80211_WEXT
08645126 2364 if (!err) {
b9454e83 2365 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2366 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2367 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2368 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2369 }
2370#endif
fffd0934 2371 wdev_unlock(dev->ieee80211_ptr);
08645126 2372
41ade00f
JB		 2373 return err;
2374}
2375
8860020e
JB		 2376static int nl80211_parse_beacon(struct genl_info *info,
2377 struct cfg80211_beacon_data *bcn)
ed1b6cc7 2378{
8860020e 2379 bool haveinfo = false;
ed1b6cc7 2380
9946ecfb
JM		 2381 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2382 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2383 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2384 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2385 return -EINVAL;
2386
8860020e 2387 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 2388
ed1b6cc7 2389 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
8860020e
JB		 2390 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2391 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2392 if (!bcn->head_len)
2393 return -EINVAL;
2394 haveinfo = true;
ed1b6cc7
JB		 2395 }
2396
2397 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
8860020e
JB		 2398 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2399 bcn->tail_len =
ed1b6cc7 2400 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 2401 haveinfo = true;
ed1b6cc7
JB		 2402 }
2403
4c476991
JB		 2404 if (!haveinfo)
2405 return -EINVAL;
3b85875a 2406
9946ecfb 2407 if (info->attrs[NL80211_ATTR_IE]) {
8860020e
JB		 2408 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2409 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 2410 }
2411
2412 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 2413 bcn->proberesp_ies =
9946ecfb 2414 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 2415 bcn->proberesp_ies_len =
9946ecfb
JM		 2416 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2417 }
2418
2419 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 2420 bcn->assocresp_ies =
9946ecfb 2421 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 2422 bcn->assocresp_ies_len =
9946ecfb
JM		 2423 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2424 }
2425
00f740e1 2426 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
8860020e 2427 bcn->probe_resp =
00f740e1 2428 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
8860020e 2429 bcn->probe_resp_len =
00f740e1
AN		 2430 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2431 }
2432
8860020e
JB		 2433 return 0;
2434}
2435
46c1dd0c
FF		 2436static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
2437 struct cfg80211_ap_settings *params)
2438{
2439 struct wireless_dev *wdev;
2440 bool ret = false;
2441
2442 mutex_lock(&rdev->devlist_mtx);
2443
89a54e48 2444 list_for_each_entry(wdev, &rdev->wdev_list, list) {
46c1dd0c
FF		 2445 if (wdev->iftype != NL80211_IFTYPE_AP &&
2446 wdev->iftype != NL80211_IFTYPE_P2P_GO)
2447 continue;
2448
2449 if (!wdev->preset_chan)
2450 continue;
2451
2452 params->channel = wdev->preset_chan;
2453 params->channel_type = wdev->preset_chantype;
2454 ret = true;
2455 break;
2456 }
2457
2458 mutex_unlock(&rdev->devlist_mtx);
2459
2460 return ret;
2461}
2462
8860020e
JB		 2463static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2464{
2465 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2466 struct net_device *dev = info->user_ptr[1];
2467 struct wireless_dev *wdev = dev->ieee80211_ptr;
2468 struct cfg80211_ap_settings params;
2469 int err;
2470
2471 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2472 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2473 return -EOPNOTSUPP;
2474
2475 if (!rdev->ops->start_ap)
2476 return -EOPNOTSUPP;
2477
2478 if (wdev->beacon_interval)
2479 return -EALREADY;
2480
2481 memset(&params, 0, sizeof(params));
2482
2483 /* these are required for START_AP */
2484 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2485 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
2486 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2487 return -EINVAL;
2488
2489 err = nl80211_parse_beacon(info, &params.beacon);
2490 if (err)
2491 return err;
2492
2493 params.beacon_interval =
2494 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2495 params.dtim_period =
2496 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2497
2498 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
2499 if (err)
2500 return err;
2501
2502 /*
2503 * In theory, some of these attributes should be required here
2504 * but since they were not used when the command was originally
2505 * added, keep them optional for old user space programs to let
2506 * them continue to work with drivers that do not need the
2507 * additional information -- drivers must check!
2508 */
2509 if (info->attrs[NL80211_ATTR_SSID]) {
2510 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2511 params.ssid_len =
2512 nla_len(info->attrs[NL80211_ATTR_SSID]);
2513 if (params.ssid_len == 0 ||
2514 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2515 return -EINVAL;
2516 }
2517
2518 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2519 params.hidden_ssid = nla_get_u32(
2520 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2521 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
2522 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
2523 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2524 return -EINVAL;
2525 }
2526
2527 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2528
2529 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2530 params.auth_type = nla_get_u32(
2531 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2532 if (!nl80211_valid_auth_type(params.auth_type))
2533 return -EINVAL;
2534 } else
2535 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2536
2537 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2538 NL80211_MAX_NR_CIPHER_SUITES);
2539 if (err)
2540 return err;
2541
1b658f11
VT		 2542 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
2543 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
2544 return -EOPNOTSUPP;
2545 params.inactivity_timeout = nla_get_u16(
2546 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
2547 }
2548
aa430da4
JB		 2549 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
2550 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
2551
2552 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
2553 !nl80211_valid_channel_type(info, &channel_type))
2554 return -EINVAL;
2555
2556 params.channel = rdev_freq_to_chan(rdev,
2557 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
2558 channel_type);
2559 if (!params.channel)
2560 return -EINVAL;
2561 params.channel_type = channel_type;
2562 } else if (wdev->preset_chan) {
2563 params.channel = wdev->preset_chan;
2564 params.channel_type = wdev->preset_chantype;
46c1dd0c 2565 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 2566 return -EINVAL;
2567
2568 if (!cfg80211_can_beacon_sec_chan(&rdev->wiphy, params.channel,
2569 params.channel_type))
2570 return -EINVAL;
2571
e4e32459
MK		 2572 mutex_lock(&rdev->devlist_mtx);
2573 err = cfg80211_can_use_chan(rdev, wdev, params.channel,
2574 CHAN_MODE_SHARED);
2575 mutex_unlock(&rdev->devlist_mtx);
2576
2577 if (err)
2578 return err;
2579
8860020e 2580 err = rdev->ops->start_ap(&rdev->wiphy, dev, &params);
46c1dd0c
FF		 2581 if (!err) {
2582 wdev->preset_chan = params.channel;
2583 wdev->preset_chantype = params.channel_type;
8860020e 2584 wdev->beacon_interval = params.beacon_interval;
f4489ebe 2585 wdev->channel = params.channel;
46c1dd0c 2586 }
56d1893d 2587 return err;
ed1b6cc7
JB		 2588}
2589
8860020e
JB		 2590static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
2591{
2592 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2593 struct net_device *dev = info->user_ptr[1];
2594 struct wireless_dev *wdev = dev->ieee80211_ptr;
2595 struct cfg80211_beacon_data params;
2596 int err;
2597
2598 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2599 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2600 return -EOPNOTSUPP;
2601
2602 if (!rdev->ops->change_beacon)
2603 return -EOPNOTSUPP;
2604
2605 if (!wdev->beacon_interval)
2606 return -EINVAL;
2607
2608 err = nl80211_parse_beacon(info, &params);
2609 if (err)
2610 return err;
2611
2612 return rdev->ops->change_beacon(&rdev->wiphy, dev, &params);
2613}
2614
2615static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 2616{
4c476991
JB		 2617 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2618 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 2619
60771780 2620 return cfg80211_stop_ap(rdev, dev);
ed1b6cc7
JB		 2621}
2622
5727ef1b
JB		 2623static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2624 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2625 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2626 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2627 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2628 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 2629 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 2630};
2631
eccb8e8f 2632static int parse_station_flags(struct genl_info *info,
bdd3ae3d 2633 enum nl80211_iftype iftype,
eccb8e8f 2634 struct station_parameters *params)
5727ef1b
JB		 2635{
2636 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2637 struct nlattr *nla;
5727ef1b
JB		 2638 int flag;
2639
eccb8e8f
JB		 2640 /*
2641 * Try parsing the new attribute first so userspace
2642 * can specify both for older kernels.
2643 */
2644 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2645 if (nla) {
2646 struct nl80211_sta_flag_update *sta_flags;
2647
2648 sta_flags = nla_data(nla);
2649 params->sta_flags_mask = sta_flags->mask;
2650 params->sta_flags_set = sta_flags->set;
2651 if ((params->sta_flags_mask |
2652 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2653 return -EINVAL;
2654 return 0;
2655 }
2656
2657 /* if present, parse the old attribute */
5727ef1b 2658
eccb8e8f 2659 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2660 if (!nla)
2661 return 0;
2662
2663 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2664 nla, sta_flags_policy))
2665 return -EINVAL;
2666
bdd3ae3d
JB		 2667 /*
2668 * Only allow certain flags for interface types so that
2669 * other attributes are silently ignored. Remember that
2670 * this is backward compatibility code with old userspace
2671 * and shouldn't be hit in other cases anyway.
2672 */
2673 switch (iftype) {
2674 case NL80211_IFTYPE_AP:
2675 case NL80211_IFTYPE_AP_VLAN:
2676 case NL80211_IFTYPE_P2P_GO:
2677 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2678 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2679 BIT(NL80211_STA_FLAG_WME) |
2680 BIT(NL80211_STA_FLAG_MFP);
2681 break;
2682 case NL80211_IFTYPE_P2P_CLIENT:
2683 case NL80211_IFTYPE_STATION:
2684 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2685 BIT(NL80211_STA_FLAG_TDLS_PEER);
2686 break;
2687 case NL80211_IFTYPE_MESH_POINT:
2688 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
2689 BIT(NL80211_STA_FLAG_MFP) |
2690 BIT(NL80211_STA_FLAG_AUTHORIZED);
2691 default:
2692 return -EINVAL;
2693 }
5727ef1b 2694
3383b5a6
JB		 2695 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
2696 if (flags[flag]) {
eccb8e8f 2697 params->sta_flags_set |= (1<<flag);
5727ef1b 2698
3383b5a6
JB		 2699 /* no longer support new API additions in old API */
2700 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
2701 return -EINVAL;
2702 }
2703 }
2704
5727ef1b
JB		 2705 return 0;
2706}
2707
c8dcfd8a
FF		 2708static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2709 int attr)
2710{
2711 struct nlattr *rate;
8eb41c8d
VK		 2712 u32 bitrate;
2713 u16 bitrate_compat;
c8dcfd8a
FF		 2714
2715 rate = nla_nest_start(msg, attr);
2716 if (!rate)
2717 goto nla_put_failure;
2718
2719 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2720 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 2721 /* report 16-bit bitrate only if we can */
2722 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
9360ffd1 2723 if ((bitrate > 0 &&
8eb41c8d
VK		 2724 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate)) ||
2725 (bitrate_compat > 0 &&
2726 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat)) ||
9360ffd1
DM		 2727 ((info->flags & RATE_INFO_FLAGS_MCS) &&
2728 nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs)) ||
2729 ((info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) &&
2730 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH)) ||
2731 ((info->flags & RATE_INFO_FLAGS_SHORT_GI) &&
2732 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI)))
2733 goto nla_put_failure;
c8dcfd8a
FF		 2734
2735 nla_nest_end(msg, rate);
2736 return true;
2737
2738nla_put_failure:
2739 return false;
2740}
2741
fd5b74dc 2742static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
66266b3a
JL		 2743 int flags,
2744 struct cfg80211_registered_device *rdev,
2745 struct net_device *dev,
98b62183 2746 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2747{
2748 void *hdr;
f4263c98 2749 struct nlattr *sinfoattr, *bss_param;
fd5b74dc
JB		 2750
2751 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2752 if (!hdr)
2753 return -1;
2754
9360ffd1
DM		 2755 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2756 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
2757 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
2758 goto nla_put_failure;
f5ea9120 2759
2ec600d6
LCC		 2760 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2761 if (!sinfoattr)
fd5b74dc 2762 goto nla_put_failure;
9360ffd1
DM		 2763 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
2764 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2765 sinfo->connected_time))
2766 goto nla_put_failure;
2767 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
2768 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2769 sinfo->inactive_time))
2770 goto nla_put_failure;
2771 if ((sinfo->filled & STATION_INFO_RX_BYTES) &&
2772 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
2773 sinfo->rx_bytes))
2774 goto nla_put_failure;
2775 if ((sinfo->filled & STATION_INFO_TX_BYTES) &&
2776 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
2777 sinfo->tx_bytes))
2778 goto nla_put_failure;
2779 if ((sinfo->filled & STATION_INFO_LLID) &&
2780 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
2781 goto nla_put_failure;
2782 if ((sinfo->filled & STATION_INFO_PLID) &&
2783 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
2784 goto nla_put_failure;
2785 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
2786 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
2787 sinfo->plink_state))
2788 goto nla_put_failure;
66266b3a
JL		 2789 switch (rdev->wiphy.signal_type) {
2790 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 2791 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
2792 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
2793 sinfo->signal))
2794 goto nla_put_failure;
2795 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
2796 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2797 sinfo->signal_avg))
2798 goto nla_put_failure;
66266b3a
JL		 2799 break;
2800 default:
2801 break;
2802 }
420e7fab 2803 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2804 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2805 NL80211_STA_INFO_TX_BITRATE))
2806 goto nla_put_failure;
2807 }
2808 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2809 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2810 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2811 goto nla_put_failure;
420e7fab 2812 }
9360ffd1
DM		 2813 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
2814 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
2815 sinfo->rx_packets))
2816 goto nla_put_failure;
2817 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
2818 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
2819 sinfo->tx_packets))
2820 goto nla_put_failure;
2821 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
2822 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
2823 sinfo->tx_retries))
2824 goto nla_put_failure;
2825 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
2826 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
2827 sinfo->tx_failed))
2828 goto nla_put_failure;
2829 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
2830 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
2831 sinfo->beacon_loss_count))
2832 goto nla_put_failure;
f4263c98
PS		 2833 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2834 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2835 if (!bss_param)
2836 goto nla_put_failure;
2837
9360ffd1
DM		 2838 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
2839 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
2840 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
2841 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
2842 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
2843 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
2844 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2845 sinfo->bss_param.dtim_period) ||
2846 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2847 sinfo->bss_param.beacon_interval))
2848 goto nla_put_failure;
f4263c98
PS		 2849
2850 nla_nest_end(msg, bss_param);
2851 }
9360ffd1
DM		 2852 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
2853 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
2854 sizeof(struct nl80211_sta_flag_update),
2855 &sinfo->sta_flags))
2856 goto nla_put_failure;
7eab0f64
JL		 2857 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
2858 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
2859 sinfo->t_offset))
2860 goto nla_put_failure;
2ec600d6 2861 nla_nest_end(msg, sinfoattr);
fd5b74dc 2862
9360ffd1
DM		 2863 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
2864 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2865 sinfo->assoc_req_ies))
2866 goto nla_put_failure;
50d3dfb7 2867
fd5b74dc
JB		 2868 return genlmsg_end(msg, hdr);
2869
2870 nla_put_failure:
bc3ed28c
TG		 2871 genlmsg_cancel(msg, hdr);
2872 return -EMSGSIZE;
fd5b74dc
JB		 2873}
2874
2ec600d6 2875static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2876 struct netlink_callback *cb)
2ec600d6 2877{
2ec600d6
LCC		 2878 struct station_info sinfo;
2879 struct cfg80211_registered_device *dev;
bba95fef 2880 struct net_device *netdev;
2ec600d6 2881 u8 mac_addr[ETH_ALEN];
bba95fef 2882 int sta_idx = cb->args[1];
2ec600d6 2883 int err;
2ec600d6 2884
67748893
JB		 2885 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2886 if (err)
2887 return err;
bba95fef
JB		 2888
2889 if (!dev->ops->dump_station) {
eec60b03 2890 err = -EOPNOTSUPP;
bba95fef
JB		 2891 goto out_err;
2892 }
2893
bba95fef 2894 while (1) {
f612cedf 2895 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2896 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2897 mac_addr, &sinfo);
2898 if (err == -ENOENT)
2899 break;
2900 if (err)
3b85875a 2901 goto out_err;
bba95fef
JB		 2902
2903 if (nl80211_send_station(skb,
2904 NETLINK_CB(cb->skb).pid,
2905 cb->nlh->nlmsg_seq, NLM_F_MULTI,
66266b3a 2906 dev, netdev, mac_addr,
bba95fef
JB		 2907 &sinfo) < 0)
2908 goto out;
2909
2910 sta_idx++;
2911 }
2912
2913
2914 out:
2915 cb->args[1] = sta_idx;
2916 err = skb->len;
bba95fef 2917 out_err:
67748893 2918 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2919
2920 return err;
2ec600d6 2921}
fd5b74dc 2922
5727ef1b
JB		 2923static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2924{
4c476991
JB		 2925 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2926 struct net_device *dev = info->user_ptr[1];
2ec600d6 2927 struct station_info sinfo;
fd5b74dc
JB		 2928 struct sk_buff *msg;
2929 u8 *mac_addr = NULL;
4c476991 2930 int err;
fd5b74dc 2931
2ec600d6 2932 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2933
2934 if (!info->attrs[NL80211_ATTR_MAC])
2935 return -EINVAL;
2936
2937 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2938
4c476991
JB		 2939 if (!rdev->ops->get_station)
2940 return -EOPNOTSUPP;
3b85875a 2941
4c476991 2942 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2943 if (err)
4c476991 2944 return err;
2ec600d6 2945
fd2120ca 2946 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 2947 if (!msg)
4c476991 2948 return -ENOMEM;
fd5b74dc
JB		 2949
2950 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
66266b3a 2951 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991
JB		 2952 nlmsg_free(msg);
2953 return -ENOBUFS;
2954 }
3b85875a 2955
4c476991 2956 return genlmsg_reply(msg, info);
5727ef1b
JB		 2957}
2958
2959/*
c258d2de 2960 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 2961 */
80b99899
JB		 2962static struct net_device *get_vlan(struct genl_info *info,
2963 struct cfg80211_registered_device *rdev)
5727ef1b 2964{
463d0183 2965 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 2966 struct net_device *v;
2967 int ret;
2968
2969 if (!vlanattr)
2970 return NULL;
2971
2972 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
2973 if (!v)
2974 return ERR_PTR(-ENODEV);
2975
2976 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
2977 ret = -EINVAL;
2978 goto error;
5727ef1b 2979 }
80b99899
JB		 2980
2981 if (!netif_running(v)) {
2982 ret = -ENETDOWN;
2983 goto error;
2984 }
2985
2986 return v;
2987 error:
2988 dev_put(v);
2989 return ERR_PTR(ret);
5727ef1b
JB		 2990}
2991
2992static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
2993{
4c476991 2994 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2995 int err;
4c476991 2996 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2997 struct station_parameters params;
2998 u8 *mac_addr = NULL;
2999
3000 memset(&params, 0, sizeof(params));
3001
3002 params.listen_interval = -1;
57cf8043 3003 params.plink_state = -1;
5727ef1b
JB		 3004
3005 if (info->attrs[NL80211_ATTR_STA_AID])
3006 return -EINVAL;
3007
3008 if (!info->attrs[NL80211_ATTR_MAC])
3009 return -EINVAL;
3010
3011 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3012
3013 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
3014 params.supported_rates =
3015 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3016 params.supported_rates_len =
3017 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3018 }
3019
3020 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3021 params.listen_interval =
3022 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
3023
36aedc90
JM		 3024 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3025 params.ht_capa =
3026 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3027
bdd90d5e
JB		 3028 if (!rdev->ops->change_station)
3029 return -EOPNOTSUPP;
3030
bdd3ae3d 3031 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3032 return -EINVAL;
3033
2ec600d6
LCC		 3034 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3035 params.plink_action =
3036 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3037
9c3990aa
JC		 3038 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
3039 params.plink_state =
3040 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
3041
a97f4424
JB		 3042 switch (dev->ieee80211_ptr->iftype) {
3043 case NL80211_IFTYPE_AP:
3044 case NL80211_IFTYPE_AP_VLAN:
074ac8df 3045 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 3046 /* disallow mesh-specific things */
3047 if (params.plink_action)
bdd90d5e
JB		 3048 return -EINVAL;
3049
3050 /* TDLS can't be set, ... */
3051 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3052 return -EINVAL;
3053 /*
3054 * ... but don't bother the driver with it. This works around
3055 * a hostapd/wpa_supplicant issue -- it always includes the
3056 * TLDS_PEER flag in the mask even for AP mode.
3057 */
3058 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3059
3060 /* accept only the listed bits */
3061 if (params.sta_flags_mask &
3062 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3063 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3064 BIT(NL80211_STA_FLAG_WME) |
3065 BIT(NL80211_STA_FLAG_MFP)))
3066 return -EINVAL;
3067
3068 /* must be last in here for error handling */
3069 params.vlan = get_vlan(info, rdev);
3070 if (IS_ERR(params.vlan))
3071 return PTR_ERR(params.vlan);
a97f4424 3072 break;
074ac8df 3073 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 3074 case NL80211_IFTYPE_STATION:
bdd90d5e
JB		 3075 /*
3076 * Don't allow userspace to change the TDLS_PEER flag,
3077 * but silently ignore attempts to change it since we
3078 * don't have state here to verify that it doesn't try
3079 * to change the flag.
3080 */
3081 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
267335d6
AQ		 3082 /* fall through */
3083 case NL80211_IFTYPE_ADHOC:
3084 /* disallow things sta doesn't support */
3085 if (params.plink_action)
3086 return -EINVAL;
3087 if (params.ht_capa)
3088 return -EINVAL;
3089 if (params.listen_interval >= 0)
3090 return -EINVAL;
bdd90d5e
JB		 3091 /* reject any changes other than AUTHORIZED */
3092 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
3093 return -EINVAL;
a97f4424
JB		 3094 break;
3095 case NL80211_IFTYPE_MESH_POINT:
3096 /* disallow things mesh doesn't support */
3097 if (params.vlan)
bdd90d5e 3098 return -EINVAL;
a97f4424 3099 if (params.ht_capa)
bdd90d5e 3100 return -EINVAL;
a97f4424 3101 if (params.listen_interval >= 0)
bdd90d5e
JB		 3102 return -EINVAL;
3103 /*
3104 * No special handling for TDLS here -- the userspace
3105 * mesh code doesn't have this bug.
3106 */
b39c48fa
JC		 3107 if (params.sta_flags_mask &
3108 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 3109 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 3110 BIT(NL80211_STA_FLAG_AUTHORIZED)))
bdd90d5e 3111 return -EINVAL;
a97f4424
JB		 3112 break;
3113 default:
bdd90d5e 3114 return -EOPNOTSUPP;
034d655e
JB		 3115 }
3116
bdd90d5e 3117 /* be aware of params.vlan when changing code here */
5727ef1b 3118
79c97e97 3119 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 3120
5727ef1b
JB		 3121 if (params.vlan)
3122 dev_put(params.vlan);
3b85875a 3123
5727ef1b
JB		 3124 return err;
3125}
3126
c75786c9
EP		 3127static struct nla_policy
3128nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
3129 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
3130 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
3131};
3132
5727ef1b
JB		 3133static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
3134{
4c476991 3135 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3136 int err;
4c476991 3137 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3138 struct station_parameters params;
3139 u8 *mac_addr = NULL;
3140
3141 memset(&params, 0, sizeof(params));
3142
3143 if (!info->attrs[NL80211_ATTR_MAC])
3144 return -EINVAL;
3145
5727ef1b
JB		 3146 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3147 return -EINVAL;
3148
3149 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
3150 return -EINVAL;
3151
0e956c13
TLSC		 3152 if (!info->attrs[NL80211_ATTR_STA_AID])
3153 return -EINVAL;
3154
5727ef1b
JB		 3155 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3156 params.supported_rates =
3157 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3158 params.supported_rates_len =
3159 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3160 params.listen_interval =
3161 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 3162
0e956c13
TLSC		 3163 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
3164 if (!params.aid || params.aid > IEEE80211_MAX_AID)
3165 return -EINVAL;
51b50fbe 3166
36aedc90
JM		 3167 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3168 params.ht_capa =
3169 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 3170
96b78dff
JC		 3171 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3172 params.plink_action =
3173 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3174
bdd90d5e
JB		 3175 if (!rdev->ops->add_station)
3176 return -EOPNOTSUPP;
3177
bdd3ae3d 3178 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3179 return -EINVAL;
3180
bdd90d5e
JB		 3181 switch (dev->ieee80211_ptr->iftype) {
3182 case NL80211_IFTYPE_AP:
3183 case NL80211_IFTYPE_AP_VLAN:
3184 case NL80211_IFTYPE_P2P_GO:
3185 /* parse WME attributes if sta is WME capable */
3186 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3187 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
3188 info->attrs[NL80211_ATTR_STA_WME]) {
3189 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3190 struct nlattr *nla;
3191
3192 nla = info->attrs[NL80211_ATTR_STA_WME];
3193 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3194 nl80211_sta_wme_policy);
3195 if (err)
3196 return err;
3197
3198 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3199 params.uapsd_queues =
3200 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
3201 if (params.uapsd_queues &
3202 ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3203 return -EINVAL;
c75786c9 3204
bdd90d5e
JB		 3205 if (tb[NL80211_STA_WME_MAX_SP])
3206 params.max_sp =
3207 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
c75786c9 3208
bdd90d5e
JB		 3209 if (params.max_sp &
3210 ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3211 return -EINVAL;
4319e193 3212
bdd90d5e
JB		 3213 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3214 }
3215 /* TDLS peers cannot be added */
3216 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4319e193 3217 return -EINVAL;
bdd90d5e
JB		 3218 /* but don't bother the driver with it */
3219 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 3220
bdd90d5e
JB		 3221 /* must be last in here for error handling */
3222 params.vlan = get_vlan(info, rdev);
3223 if (IS_ERR(params.vlan))
3224 return PTR_ERR(params.vlan);
3225 break;
3226 case NL80211_IFTYPE_MESH_POINT:
3227 /* TDLS peers cannot be added */
3228 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3229 return -EINVAL;
3230 break;
3231 case NL80211_IFTYPE_STATION:
3232 /* Only TDLS peers can be added */
3233 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3234 return -EINVAL;
3235 /* Can only add if TDLS ... */
3236 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
3237 return -EOPNOTSUPP;
3238 /* ... with external setup is supported */
3239 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
3240 return -EOPNOTSUPP;
3241 break;
3242 default:
3243 return -EOPNOTSUPP;
c75786c9
EP		 3244 }
3245
bdd90d5e 3246 /* be aware of params.vlan when changing code here */
5727ef1b 3247
79c97e97 3248 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 3249
5727ef1b
JB		 3250 if (params.vlan)
3251 dev_put(params.vlan);
5727ef1b
JB		 3252 return err;
3253}
3254
3255static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
3256{
4c476991
JB		 3257 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3258 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3259 u8 *mac_addr = NULL;
3260
3261 if (info->attrs[NL80211_ATTR_MAC])
3262 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3263
e80cf853 3264 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 3265 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 3266 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 3267 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3268 return -EINVAL;
5727ef1b 3269
4c476991
JB		 3270 if (!rdev->ops->del_station)
3271 return -EOPNOTSUPP;
3b85875a 3272
4c476991 3273 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 3274}
3275
2ec600d6
LCC		 3276static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
3277 int flags, struct net_device *dev,
3278 u8 *dst, u8 *next_hop,
3279 struct mpath_info *pinfo)
3280{
3281 void *hdr;
3282 struct nlattr *pinfoattr;
3283
3284 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
3285 if (!hdr)
3286 return -1;
3287
9360ffd1
DM		 3288 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3289 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
3290 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
3291 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
3292 goto nla_put_failure;
f5ea9120 3293
2ec600d6
LCC		 3294 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
3295 if (!pinfoattr)
3296 goto nla_put_failure;
9360ffd1
DM		 3297 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
3298 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
3299 pinfo->frame_qlen))
3300 goto nla_put_failure;
3301 if (((pinfo->filled & MPATH_INFO_SN) &&
3302 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
3303 ((pinfo->filled & MPATH_INFO_METRIC) &&
3304 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
3305 pinfo->metric)) ||
3306 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
3307 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
3308 pinfo->exptime)) ||
3309 ((pinfo->filled & MPATH_INFO_FLAGS) &&
3310 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
3311 pinfo->flags)) ||
3312 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
3313 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
3314 pinfo->discovery_timeout)) ||
3315 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
3316 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
3317 pinfo->discovery_retries)))
3318 goto nla_put_failure;
2ec600d6
LCC		 3319
3320 nla_nest_end(msg, pinfoattr);
3321
3322 return genlmsg_end(msg, hdr);
3323
3324 nla_put_failure:
bc3ed28c
TG		 3325 genlmsg_cancel(msg, hdr);
3326 return -EMSGSIZE;
2ec600d6
LCC		 3327}
3328
3329static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 3330 struct netlink_callback *cb)
2ec600d6 3331{
2ec600d6
LCC		 3332 struct mpath_info pinfo;
3333 struct cfg80211_registered_device *dev;
bba95fef 3334 struct net_device *netdev;
2ec600d6
LCC		 3335 u8 dst[ETH_ALEN];
3336 u8 next_hop[ETH_ALEN];
bba95fef 3337 int path_idx = cb->args[1];
2ec600d6 3338 int err;
2ec600d6 3339
67748893
JB		 3340 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3341 if (err)
3342 return err;
bba95fef
JB		 3343
3344 if (!dev->ops->dump_mpath) {
eec60b03 3345 err = -EOPNOTSUPP;
bba95fef
JB		 3346 goto out_err;
3347 }
3348
eec60b03
JM		 3349 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
3350 err = -EOPNOTSUPP;
0448b5fc 3351 goto out_err;
eec60b03
JM		 3352 }
3353
bba95fef
JB		 3354 while (1) {
3355 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
3356 dst, next_hop, &pinfo);
3357 if (err == -ENOENT)
2ec600d6 3358 break;
bba95fef 3359 if (err)
3b85875a 3360 goto out_err;
2ec600d6 3361
bba95fef
JB		 3362 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
3363 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3364 netdev, dst, next_hop,
3365 &pinfo) < 0)
3366 goto out;
2ec600d6 3367
bba95fef 3368 path_idx++;
2ec600d6 3369 }
2ec600d6 3370
2ec600d6 3371
bba95fef
JB		 3372 out:
3373 cb->args[1] = path_idx;
3374 err = skb->len;
bba95fef 3375 out_err:
67748893 3376 nl80211_finish_netdev_dump(dev);
bba95fef 3377 return err;
2ec600d6
LCC		 3378}
3379
3380static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
3381{
4c476991 3382 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3383 int err;
4c476991 3384 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3385 struct mpath_info pinfo;
3386 struct sk_buff *msg;
3387 u8 *dst = NULL;
3388 u8 next_hop[ETH_ALEN];
3389
3390 memset(&pinfo, 0, sizeof(pinfo));
3391
3392 if (!info->attrs[NL80211_ATTR_MAC])
3393 return -EINVAL;
3394
3395 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3396
4c476991
JB		 3397 if (!rdev->ops->get_mpath)
3398 return -EOPNOTSUPP;
2ec600d6 3399
4c476991
JB		 3400 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3401 return -EOPNOTSUPP;
eec60b03 3402
79c97e97 3403 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 3404 if (err)
4c476991 3405 return err;
2ec600d6 3406
fd2120ca 3407 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 3408 if (!msg)
4c476991 3409 return -ENOMEM;
2ec600d6
LCC		 3410
3411 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 3412 dev, dst, next_hop, &pinfo) < 0) {
3413 nlmsg_free(msg);
3414 return -ENOBUFS;
3415 }
3b85875a 3416
4c476991 3417 return genlmsg_reply(msg, info);
2ec600d6
LCC		 3418}
3419
3420static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
3421{
4c476991
JB		 3422 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3423 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3424 u8 *dst = NULL;
3425 u8 *next_hop = NULL;
3426
3427 if (!info->attrs[NL80211_ATTR_MAC])
3428 return -EINVAL;
3429
3430 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3431 return -EINVAL;
3432
3433 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3434 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3435
4c476991
JB		 3436 if (!rdev->ops->change_mpath)
3437 return -EOPNOTSUPP;
35a8efe1 3438
4c476991
JB		 3439 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3440 return -EOPNOTSUPP;
2ec600d6 3441
4c476991 3442 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 3443}
4c476991 3444
2ec600d6
LCC		 3445static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
3446{
4c476991
JB		 3447 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3448 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3449 u8 *dst = NULL;
3450 u8 *next_hop = NULL;
3451
3452 if (!info->attrs[NL80211_ATTR_MAC])
3453 return -EINVAL;
3454
3455 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3456 return -EINVAL;
3457
3458 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3459 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3460
4c476991
JB		 3461 if (!rdev->ops->add_mpath)
3462 return -EOPNOTSUPP;
35a8efe1 3463
4c476991
JB		 3464 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3465 return -EOPNOTSUPP;
2ec600d6 3466
4c476991 3467 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 3468}
3469
3470static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
3471{
4c476991
JB		 3472 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3473 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3474 u8 *dst = NULL;
3475
3476 if (info->attrs[NL80211_ATTR_MAC])
3477 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3478
4c476991
JB		 3479 if (!rdev->ops->del_mpath)
3480 return -EOPNOTSUPP;
3b85875a 3481
4c476991 3482 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 3483}
3484
9f1ba906
JM		 3485static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
3486{
4c476991
JB		 3487 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3488 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 3489 struct bss_parameters params;
3490
3491 memset(&params, 0, sizeof(params));
3492 /* default to not changing parameters */
3493 params.use_cts_prot = -1;
3494 params.use_short_preamble = -1;
3495 params.use_short_slot_time = -1;
fd8aaaf3 3496 params.ap_isolate = -1;
50b12f59 3497 params.ht_opmode = -1;
9f1ba906
JM		 3498
3499 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
3500 params.use_cts_prot =
3501 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
3502 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
3503 params.use_short_preamble =
3504 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
3505 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
3506 params.use_short_slot_time =
3507 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 3508 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
3509 params.basic_rates =
3510 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3511 params.basic_rates_len =
3512 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3513 }
fd8aaaf3
FF		 3514 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
3515 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 3516 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
3517 params.ht_opmode =
3518 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 3519
4c476991
JB		 3520 if (!rdev->ops->change_bss)
3521 return -EOPNOTSUPP;
9f1ba906 3522
074ac8df 3523 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 3524 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3525 return -EOPNOTSUPP;
3b85875a 3526
4c476991 3527 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 3528}
3529
b54452b0 3530static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 3531 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
3532 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
3533 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
3534 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
3535 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
3536 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
3537};
3538
3539static int parse_reg_rule(struct nlattr *tb[],
3540 struct ieee80211_reg_rule *reg_rule)
3541{
3542 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
3543 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
3544
3545 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
3546 return -EINVAL;
3547 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
3548 return -EINVAL;
3549 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
3550 return -EINVAL;
3551 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
3552 return -EINVAL;
3553 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
3554 return -EINVAL;
3555
3556 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
3557
3558 freq_range->start_freq_khz =
3559 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
3560 freq_range->end_freq_khz =
3561 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
3562 freq_range->max_bandwidth_khz =
3563 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
3564
3565 power_rule->max_eirp =
3566 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
3567
3568 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
3569 power_rule->max_antenna_gain =
3570 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
3571
3572 return 0;
3573}
3574
3575static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
3576{
3577 int r;
3578 char *data = NULL;
3579
80778f18
LR		 3580 /*
3581 * You should only get this when cfg80211 hasn't yet initialized
3582 * completely when built-in to the kernel right between the time
3583 * window between nl80211_init() and regulatory_init(), if that is
3584 * even possible.
3585 */
3586 mutex_lock(&cfg80211_mutex);
3587 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 3588 mutex_unlock(&cfg80211_mutex);
3589 return -EINPROGRESS;
80778f18 3590 }
fe33eb39 3591 mutex_unlock(&cfg80211_mutex);
80778f18 3592
fe33eb39
LR		 3593 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3594 return -EINVAL;
b2e1b302
LR		 3595
3596 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3597
fe33eb39
LR		 3598 r = regulatory_hint_user(data);
3599
b2e1b302
LR		 3600 return r;
3601}
3602
24bdd9f4 3603static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 3604 struct genl_info *info)
93da9cc1 3605{
4c476991 3606 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3607 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 3608 struct wireless_dev *wdev = dev->ieee80211_ptr;
3609 struct mesh_config cur_params;
3610 int err = 0;
93da9cc1 3611 void *hdr;
3612 struct nlattr *pinfoattr;
3613 struct sk_buff *msg;
3614
29cbe68c
JB		 3615 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3616 return -EOPNOTSUPP;
3617
24bdd9f4 3618 if (!rdev->ops->get_mesh_config)
4c476991 3619 return -EOPNOTSUPP;
f3f92586 3620
29cbe68c
JB		 3621 wdev_lock(wdev);
3622 /* If not connected, get default parameters */
3623 if (!wdev->mesh_id_len)
3624 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3625 else
24bdd9f4 3626 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3627 &cur_params);
3628 wdev_unlock(wdev);
3629
93da9cc1 3630 if (err)
4c476991 3631 return err;
93da9cc1 3632
3633 /* Draw up a netlink message to send back */
fd2120ca 3634 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3635 if (!msg)
3636 return -ENOMEM;
93da9cc1 3637 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
24bdd9f4 3638 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3639 if (!hdr)
efe1cf0c 3640 goto out;
24bdd9f4 3641 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3642 if (!pinfoattr)
3643 goto nla_put_failure;
9360ffd1
DM		 3644 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3645 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3646 cur_params.dot11MeshRetryTimeout) ||
3647 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3648 cur_params.dot11MeshConfirmTimeout) ||
3649 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3650 cur_params.dot11MeshHoldingTimeout) ||
3651 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3652 cur_params.dot11MeshMaxPeerLinks) ||
3653 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
3654 cur_params.dot11MeshMaxRetries) ||
3655 nla_put_u8(msg, NL80211_MESHCONF_TTL,
3656 cur_params.dot11MeshTTL) ||
3657 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3658 cur_params.element_ttl) ||
3659 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3660 cur_params.auto_open_plinks) ||
7eab0f64
JL		 3661 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3662 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 3663 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3664 cur_params.dot11MeshHWMPmaxPREQretries) ||
3665 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3666 cur_params.path_refresh_time) ||
3667 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3668 cur_params.min_discovery_timeout) ||
3669 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3670 cur_params.dot11MeshHWMPactivePathTimeout) ||
3671 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3672 cur_params.dot11MeshHWMPpreqMinInterval) ||
3673 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3674 cur_params.dot11MeshHWMPperrMinInterval) ||
3675 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3676 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
3677 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3678 cur_params.dot11MeshHWMPRootMode) ||
3679 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3680 cur_params.dot11MeshHWMPRannInterval) ||
3681 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3682 cur_params.dot11MeshGateAnnouncementProtocol) ||
3683 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
3684 cur_params.dot11MeshForwarding) ||
3685 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 3686 cur_params.rssi_threshold) ||
3687 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3688 cur_params.ht_opmode) ||
3689 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3690 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
3691 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3692 cur_params.dot11MeshHWMProotInterval) ||
3693 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3694 cur_params.dot11MeshHWMPconfirmationInterval))
9360ffd1 3695 goto nla_put_failure;
93da9cc1 3696 nla_nest_end(msg, pinfoattr);
3697 genlmsg_end(msg, hdr);
4c476991 3698 return genlmsg_reply(msg, info);
93da9cc1 3699
3b85875a 3700 nla_put_failure:
93da9cc1 3701 genlmsg_cancel(msg, hdr);
efe1cf0c 3702 out:
d080e275 3703 nlmsg_free(msg);
4c476991 3704 return -ENOBUFS;
93da9cc1 3705}
3706
b54452b0 3707static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3708 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3709 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3710 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3711 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3712 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3713 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3714 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3715 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
d299a1f2 3716 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
93da9cc1 3717 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3718 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3719 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3720 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3721 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
dca7e943 3722 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3723 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3724 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3725 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3726 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
94f90656 3727 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
a4f606ea
CYY		 3728 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
3729 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6
CYY		 3730 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
3731 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
728b19e5 3732 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3733};
3734
c80d545d
JC		 3735static const struct nla_policy
3736 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 3737 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 3738 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3739 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3740 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3741 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
a4f606ea 3742 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3743 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3744};
3745
24bdd9f4 3746static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3747 struct mesh_config *cfg,
3748 u32 *mask_out)
93da9cc1 3749{
93da9cc1 3750 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3751 u32 mask = 0;
93da9cc1 3752
bd90fdcc
JB		 3753#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3754do {\
3755 if (table[attr_num]) {\
3756 cfg->param = nla_fn(table[attr_num]); \
3757 mask |= (1 << (attr_num - 1)); \
3758 } \
3759} while (0);\
3760
3761
24bdd9f4 3762 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3763 return -EINVAL;
3764 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3765 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3766 nl80211_meshconf_params_policy))
93da9cc1 3767 return -EINVAL;
3768
93da9cc1 3769 /* This makes sure that there aren't more than 32 mesh config
3770 * parameters (otherwise our bitfield scheme would not work.) */
3771 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3772
3773 /* Fill in the params struct */
93da9cc1 3774 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
a4f606ea
CYY		 3775 mask, NL80211_MESHCONF_RETRY_TIMEOUT,
3776 nla_get_u16);
93da9cc1 3777 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
a4f606ea
CYY		 3778 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3779 nla_get_u16);
93da9cc1 3780 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
a4f606ea
CYY		 3781 mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
3782 nla_get_u16);
93da9cc1 3783 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
a4f606ea
CYY		 3784 mask, NL80211_MESHCONF_MAX_PEER_LINKS,
3785 nla_get_u16);
93da9cc1 3786 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
a4f606ea
CYY		 3787 mask, NL80211_MESHCONF_MAX_RETRIES,
3788 nla_get_u8);
93da9cc1 3789 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
a4f606ea 3790 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21 3791 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
a4f606ea
CYY		 3792 mask, NL80211_MESHCONF_ELEMENT_TTL,
3793 nla_get_u8);
93da9cc1 3794 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
a4f606ea
CYY		 3795 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3796 nla_get_u8);
3797 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor, mask,
3798 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3799 nla_get_u32);
93da9cc1 3800 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
a4f606ea
CYY		 3801 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3802 nla_get_u8);
93da9cc1 3803 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
a4f606ea
CYY		 3804 mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
3805 nla_get_u32);
93da9cc1 3806 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
a4f606ea
CYY		 3807 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3808 nla_get_u16);
3809 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout, mask,
3810 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3811 nla_get_u32);
93da9cc1 3812 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
a4f606ea
CYY		 3813 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3814 nla_get_u16);
dca7e943 3815 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
a4f606ea
CYY		 3816 mask, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3817 nla_get_u16);
0507e159 3818 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3819 dot11MeshHWMPnetDiameterTraversalTime, mask,
3820 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3821 nla_get_u16);
3822 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
3823 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
3824 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
3825 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3826 nla_get_u16);
16dd7267 3827 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3828 dot11MeshGateAnnouncementProtocol, mask,
3829 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3830 nla_get_u8);
94f90656 3831 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding,
a4f606ea
CYY		 3832 mask, NL80211_MESHCONF_FORWARDING,
3833 nla_get_u8);
55335137 3834 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold,
a4f606ea
CYY		 3835 mask, NL80211_MESHCONF_RSSI_THRESHOLD,
3836 nla_get_u32);
70c33eaa 3837 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode,
a4f606ea 3838 mask, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3839 nla_get_u16);
3840 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
3841 mask,
3842 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3843 nla_get_u32);
3844 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval,
3845 mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3846 nla_get_u16);
3847 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3848 dot11MeshHWMPconfirmationInterval, mask,
3849 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
a4f606ea 3850 nla_get_u16);
bd90fdcc
JB		 3851 if (mask_out)
3852 *mask_out = mask;
c80d545d 3853
bd90fdcc
JB		 3854 return 0;
3855
3856#undef FILL_IN_MESH_PARAM_IF_SET
3857}
3858
c80d545d
JC		 3859static int nl80211_parse_mesh_setup(struct genl_info *info,
3860 struct mesh_setup *setup)
3861{
3862 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3863
3864 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3865 return -EINVAL;
3866 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3867 info->attrs[NL80211_ATTR_MESH_SETUP],
3868 nl80211_mesh_setup_params_policy))
3869 return -EINVAL;
3870
d299a1f2
JC		 3871 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
3872 setup->sync_method =
3873 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
3874 IEEE80211_SYNC_METHOD_VENDOR :
3875 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
3876
c80d545d
JC		 3877 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3878 setup->path_sel_proto =
3879 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3880 IEEE80211_PATH_PROTOCOL_VENDOR :
3881 IEEE80211_PATH_PROTOCOL_HWMP;
3882
3883 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3884 setup->path_metric =
3885 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3886 IEEE80211_PATH_METRIC_VENDOR :
3887 IEEE80211_PATH_METRIC_AIRTIME;
3888
581a8b0f
JC		 3889
3890 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3891 struct nlattr *ieattr =
581a8b0f 3892 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3893 if (!is_valid_ie_attr(ieattr))
3894 return -EINVAL;
581a8b0f
JC		 3895 setup->ie = nla_data(ieattr);
3896 setup->ie_len = nla_len(ieattr);
c80d545d 3897 }
b130e5ce
JC		 3898 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3899 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3900
3901 return 0;
3902}
3903
24bdd9f4 3904static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3905 struct genl_info *info)
bd90fdcc
JB		 3906{
3907 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3908 struct net_device *dev = info->user_ptr[1];
29cbe68c 3909 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3910 struct mesh_config cfg;
3911 u32 mask;
3912 int err;
3913
29cbe68c
JB		 3914 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3915 return -EOPNOTSUPP;
3916
24bdd9f4 3917 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3918 return -EOPNOTSUPP;
3919
24bdd9f4 3920 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3921 if (err)
3922 return err;
3923
29cbe68c
JB		 3924 wdev_lock(wdev);
3925 if (!wdev->mesh_id_len)
3926 err = -ENOLINK;
3927
3928 if (!err)
24bdd9f4 3929 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3930 mask, &cfg);
3931
3932 wdev_unlock(wdev);
3933
3934 return err;
93da9cc1 3935}
3936
f130347c
LR		 3937static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
3938{
3939 struct sk_buff *msg;
3940 void *hdr = NULL;
3941 struct nlattr *nl_reg_rules;
3942 unsigned int i;
3943 int err = -EINVAL;
3944
a1794390 3945 mutex_lock(&cfg80211_mutex);
f130347c
LR		 3946
3947 if (!cfg80211_regdomain)
3948 goto out;
3949
fd2120ca 3950 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 3951 if (!msg) {
3952 err = -ENOBUFS;
3953 goto out;
3954 }
3955
3956 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
3957 NL80211_CMD_GET_REG);
3958 if (!hdr)
efe1cf0c 3959 goto put_failure;
f130347c 3960
9360ffd1
DM		 3961 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
3962 cfg80211_regdomain->alpha2) ||
3963 (cfg80211_regdomain->dfs_region &&
3964 nla_put_u8(msg, NL80211_ATTR_DFS_REGION,
3965 cfg80211_regdomain->dfs_region)))
3966 goto nla_put_failure;
f130347c
LR		 3967
3968 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
3969 if (!nl_reg_rules)
3970 goto nla_put_failure;
3971
3972 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
3973 struct nlattr *nl_reg_rule;
3974 const struct ieee80211_reg_rule *reg_rule;
3975 const struct ieee80211_freq_range *freq_range;
3976 const struct ieee80211_power_rule *power_rule;
3977
3978 reg_rule = &cfg80211_regdomain->reg_rules[i];
3979 freq_range = &reg_rule->freq_range;
3980 power_rule = &reg_rule->power_rule;
3981
3982 nl_reg_rule = nla_nest_start(msg, i);
3983 if (!nl_reg_rule)
3984 goto nla_put_failure;
3985
9360ffd1
DM		 3986 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
3987 reg_rule->flags) ||
3988 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
3989 freq_range->start_freq_khz) ||
3990 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
3991 freq_range->end_freq_khz) ||
3992 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
3993 freq_range->max_bandwidth_khz) ||
3994 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
3995 power_rule->max_antenna_gain) ||
3996 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
3997 power_rule->max_eirp))
3998 goto nla_put_failure;
f130347c
LR		 3999
4000 nla_nest_end(msg, nl_reg_rule);
4001 }
4002
4003 nla_nest_end(msg, nl_reg_rules);
4004
4005 genlmsg_end(msg, hdr);
134e6375 4006 err = genlmsg_reply(msg, info);
f130347c
LR		 4007 goto out;
4008
4009nla_put_failure:
4010 genlmsg_cancel(msg, hdr);
efe1cf0c 4011put_failure:
d080e275 4012 nlmsg_free(msg);
f130347c
LR		 4013 err = -EMSGSIZE;
4014out:
a1794390 4015 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 4016 return err;
4017}
4018
b2e1b302
LR		 4019static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
4020{
4021 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
4022 struct nlattr *nl_reg_rule;
4023 char *alpha2 = NULL;
4024 int rem_reg_rules = 0, r = 0;
4025 u32 num_rules = 0, rule_idx = 0, size_of_regd;
8b60b078 4026 u8 dfs_region = 0;
b2e1b302
LR		 4027 struct ieee80211_regdomain *rd = NULL;
4028
4029 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4030 return -EINVAL;
4031
4032 if (!info->attrs[NL80211_ATTR_REG_RULES])
4033 return -EINVAL;
4034
4035 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4036
8b60b078
LR		 4037 if (info->attrs[NL80211_ATTR_DFS_REGION])
4038 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
4039
b2e1b302
LR		 4040 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4041 rem_reg_rules) {
4042 num_rules++;
4043 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 4044 return -EINVAL;
b2e1b302
LR		 4045 }
4046
61405e97
LR		 4047 mutex_lock(&cfg80211_mutex);
4048
d0e18f83
LR		 4049 if (!reg_is_valid_request(alpha2)) {
4050 r = -EINVAL;
4051 goto bad_reg;
4052 }
b2e1b302
LR		 4053
4054 size_of_regd = sizeof(struct ieee80211_regdomain) +
4055 (num_rules * sizeof(struct ieee80211_reg_rule));
4056
4057 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 4058 if (!rd) {
4059 r = -ENOMEM;
4060 goto bad_reg;
4061 }
b2e1b302
LR		 4062
4063 rd->n_reg_rules = num_rules;
4064 rd->alpha2[0] = alpha2[0];
4065 rd->alpha2[1] = alpha2[1];
4066
8b60b078
LR		 4067 /*
4068 * Disable DFS master mode if the DFS region was
4069 * not supported or known on this kernel.
4070 */
4071 if (reg_supported_dfs_region(dfs_region))
4072 rd->dfs_region = dfs_region;
4073
b2e1b302
LR		 4074 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4075 rem_reg_rules) {
4076 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
4077 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
4078 reg_rule_policy);
4079 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
4080 if (r)
4081 goto bad_reg;
4082
4083 rule_idx++;
4084
d0e18f83
LR		 4085 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
4086 r = -EINVAL;
b2e1b302 4087 goto bad_reg;
d0e18f83 4088 }
b2e1b302
LR		 4089 }
4090
4091 BUG_ON(rule_idx != num_rules);
4092
b2e1b302 4093 r = set_regdom(rd);
61405e97 4094
a1794390 4095 mutex_unlock(&cfg80211_mutex);
d0e18f83 4096
b2e1b302
LR		 4097 return r;
4098
d2372b31 4099 bad_reg:
61405e97 4100 mutex_unlock(&cfg80211_mutex);
b2e1b302 4101 kfree(rd);
d0e18f83 4102 return r;
b2e1b302
LR		 4103}
4104
83f5e2cf
JB		 4105static int validate_scan_freqs(struct nlattr *freqs)
4106{
4107 struct nlattr *attr1, *attr2;
4108 int n_channels = 0, tmp1, tmp2;
4109
4110 nla_for_each_nested(attr1, freqs, tmp1) {
4111 n_channels++;
4112 /*
4113 * Some hardware has a limited channel list for
4114 * scanning, and it is pretty much nonsensical
4115 * to scan for a channel twice, so disallow that
4116 * and don't require drivers to check that the
4117 * channel list they get isn't longer than what
4118 * they can scan, as long as they can scan all
4119 * the channels they registered at once.
4120 */
4121 nla_for_each_nested(attr2, freqs, tmp2)
4122 if (attr1 != attr2 &&
4123 nla_get_u32(attr1) == nla_get_u32(attr2))
4124 return 0;
4125 }
4126
4127 return n_channels;
4128}
4129
2a519311
JB		 4130static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
4131{
4c476991 4132 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 4133 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 4134 struct cfg80211_scan_request *request;
2a519311
JB		 4135 struct nlattr *attr;
4136 struct wiphy *wiphy;
83f5e2cf 4137 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 4138 size_t ie_len;
2a519311 4139
f4a11bb0
JB		 4140 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4141 return -EINVAL;
4142
79c97e97 4143 wiphy = &rdev->wiphy;
2a519311 4144
4c476991
JB		 4145 if (!rdev->ops->scan)
4146 return -EOPNOTSUPP;
2a519311 4147
4c476991
JB		 4148 if (rdev->scan_req)
4149 return -EBUSY;
2a519311
JB		 4150
4151 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 4152 n_channels = validate_scan_freqs(
4153 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 4154 if (!n_channels)
4155 return -EINVAL;
2a519311 4156 } else {
34850ab2 4157 enum ieee80211_band band;
83f5e2cf
JB		 4158 n_channels = 0;
4159
2a519311
JB		 4160 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4161 if (wiphy->bands[band])
4162 n_channels += wiphy->bands[band]->n_channels;
4163 }
4164
4165 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4166 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
4167 n_ssids++;
4168
4c476991
JB		 4169 if (n_ssids > wiphy->max_scan_ssids)
4170 return -EINVAL;
2a519311 4171
70692ad2
JM		 4172 if (info->attrs[NL80211_ATTR_IE])
4173 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4174 else
4175 ie_len = 0;
4176
4c476991
JB		 4177 if (ie_len > wiphy->max_scan_ie_len)
4178 return -EINVAL;
18a83659 4179
2a519311 4180 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 4181 + sizeof(*request->ssids) * n_ssids
4182 + sizeof(*request->channels) * n_channels
70692ad2 4183 + ie_len, GFP_KERNEL);
4c476991
JB		 4184 if (!request)
4185 return -ENOMEM;
2a519311 4186
2a519311 4187 if (n_ssids)
5ba63533 4188 request->ssids = (void *)&request->channels[n_channels];
2a519311 4189 request->n_ssids = n_ssids;
70692ad2
JM		 4190 if (ie_len) {
4191 if (request->ssids)
4192 request->ie = (void *)(request->ssids + n_ssids);
4193 else
4194 request->ie = (void *)(request->channels + n_channels);
4195 }
2a519311 4196
584991dc 4197 i = 0;
2a519311
JB		 4198 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4199 /* user specified, bail out if channel not found */
2a519311 4200 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 4201 struct ieee80211_channel *chan;
4202
4203 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4204
4205 if (!chan) {
2a519311
JB		 4206 err = -EINVAL;
4207 goto out_free;
4208 }
584991dc
JB		 4209
4210 /* ignore disabled channels */
4211 if (chan->flags & IEEE80211_CHAN_DISABLED)
4212 continue;
4213
4214 request->channels[i] = chan;
2a519311
JB		 4215 i++;
4216 }
4217 } else {
34850ab2
JB		 4218 enum ieee80211_band band;
4219
2a519311 4220 /* all channels */
2a519311
JB		 4221 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4222 int j;
4223 if (!wiphy->bands[band])
4224 continue;
4225 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 4226 struct ieee80211_channel *chan;
4227
4228 chan = &wiphy->bands[band]->channels[j];
4229
4230 if (chan->flags & IEEE80211_CHAN_DISABLED)
4231 continue;
4232
4233 request->channels[i] = chan;
2a519311
JB		 4234 i++;
4235 }
4236 }
4237 }
4238
584991dc
JB		 4239 if (!i) {
4240 err = -EINVAL;
4241 goto out_free;
4242 }
4243
4244 request->n_channels = i;
4245
2a519311
JB		 4246 i = 0;
4247 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4248 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 4249 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 4250 err = -EINVAL;
4251 goto out_free;
4252 }
57a27e1d 4253 request->ssids[i].ssid_len = nla_len(attr);
2a519311 4254 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 4255 i++;
4256 }
4257 }
4258
70692ad2
JM		 4259 if (info->attrs[NL80211_ATTR_IE]) {
4260 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 4261 memcpy((void *)request->ie,
4262 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 4263 request->ie_len);
4264 }
4265
34850ab2 4266 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 4267 if (wiphy->bands[i])
4268 request->rates[i] =
4269 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 4270
4271 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
4272 nla_for_each_nested(attr,
4273 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
4274 tmp) {
4275 enum ieee80211_band band = nla_type(attr);
4276
84404623 4277 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 4278 err = -EINVAL;
4279 goto out_free;
4280 }
4281 err = ieee80211_get_ratemask(wiphy->bands[band],
4282 nla_data(attr),
4283 nla_len(attr),
4284 &request->rates[band]);
4285 if (err)
4286 goto out_free;
4287 }
4288 }
4289
e9f935e3
RM		 4290 request->no_cck =
4291 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
4292
fd014284 4293 request->wdev = wdev;
79c97e97 4294 request->wiphy = &rdev->wiphy;
2a519311 4295
79c97e97 4296 rdev->scan_req = request;
fd014284 4297 err = rdev->ops->scan(&rdev->wiphy, request);
2a519311 4298
463d0183 4299 if (!err) {
fd014284
JB		 4300 nl80211_send_scan_start(rdev, wdev);
4301 if (wdev->netdev)
4302 dev_hold(wdev->netdev);
4c476991 4303 } else {
2a519311 4304 out_free:
79c97e97 4305 rdev->scan_req = NULL;
2a519311
JB		 4306 kfree(request);
4307 }
3b85875a 4308
2a519311
JB		 4309 return err;
4310}
4311
807f8a8c
LC		 4312static int nl80211_start_sched_scan(struct sk_buff *skb,
4313 struct genl_info *info)
4314{
4315 struct cfg80211_sched_scan_request *request;
4316 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4317 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 4318 struct nlattr *attr;
4319 struct wiphy *wiphy;
a1f1c21c 4320 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 4321 u32 interval;
807f8a8c
LC		 4322 enum ieee80211_band band;
4323 size_t ie_len;
a1f1c21c 4324 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 4325
4326 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4327 !rdev->ops->sched_scan_start)
4328 return -EOPNOTSUPP;
4329
4330 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4331 return -EINVAL;
4332
bbe6ad6d
LC		 4333 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
4334 return -EINVAL;
4335
4336 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
4337 if (interval == 0)
4338 return -EINVAL;
4339
807f8a8c
LC		 4340 wiphy = &rdev->wiphy;
4341
4342 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4343 n_channels = validate_scan_freqs(
4344 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4345 if (!n_channels)
4346 return -EINVAL;
4347 } else {
4348 n_channels = 0;
4349
4350 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4351 if (wiphy->bands[band])
4352 n_channels += wiphy->bands[band]->n_channels;
4353 }
4354
4355 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4356 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4357 tmp)
4358 n_ssids++;
4359
93b6aa69 4360 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 4361 return -EINVAL;
4362
a1f1c21c
LC		 4363 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
4364 nla_for_each_nested(attr,
4365 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4366 tmp)
4367 n_match_sets++;
4368
4369 if (n_match_sets > wiphy->max_match_sets)
4370 return -EINVAL;
4371
807f8a8c
LC		 4372 if (info->attrs[NL80211_ATTR_IE])
4373 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4374 else
4375 ie_len = 0;
4376
5a865bad 4377 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 4378 return -EINVAL;
4379
c10841ca
LC		 4380 mutex_lock(&rdev->sched_scan_mtx);
4381
4382 if (rdev->sched_scan_req) {
4383 err = -EINPROGRESS;
4384 goto out;
4385 }
4386
807f8a8c 4387 request = kzalloc(sizeof(*request)
a2cd43c5 4388 + sizeof(*request->ssids) * n_ssids
a1f1c21c 4389 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 4390 + sizeof(*request->channels) * n_channels
807f8a8c 4391 + ie_len, GFP_KERNEL);
c10841ca
LC		 4392 if (!request) {
4393 err = -ENOMEM;
4394 goto out;
4395 }
807f8a8c
LC		 4396
4397 if (n_ssids)
4398 request->ssids = (void *)&request->channels[n_channels];
4399 request->n_ssids = n_ssids;
4400 if (ie_len) {
4401 if (request->ssids)
4402 request->ie = (void *)(request->ssids + n_ssids);
4403 else
4404 request->ie = (void *)(request->channels + n_channels);
4405 }
4406
a1f1c21c
LC		 4407 if (n_match_sets) {
4408 if (request->ie)
4409 request->match_sets = (void *)(request->ie + ie_len);
4410 else if (request->ssids)
4411 request->match_sets =
4412 (void *)(request->ssids + n_ssids);
4413 else
4414 request->match_sets =
4415 (void *)(request->channels + n_channels);
4416 }
4417 request->n_match_sets = n_match_sets;
4418
807f8a8c
LC		 4419 i = 0;
4420 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4421 /* user specified, bail out if channel not found */
4422 nla_for_each_nested(attr,
4423 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
4424 tmp) {
4425 struct ieee80211_channel *chan;
4426
4427 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4428
4429 if (!chan) {
4430 err = -EINVAL;
4431 goto out_free;
4432 }
4433
4434 /* ignore disabled channels */
4435 if (chan->flags & IEEE80211_CHAN_DISABLED)
4436 continue;
4437
4438 request->channels[i] = chan;
4439 i++;
4440 }
4441 } else {
4442 /* all channels */
4443 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4444 int j;
4445 if (!wiphy->bands[band])
4446 continue;
4447 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
4448 struct ieee80211_channel *chan;
4449
4450 chan = &wiphy->bands[band]->channels[j];
4451
4452 if (chan->flags & IEEE80211_CHAN_DISABLED)
4453 continue;
4454
4455 request->channels[i] = chan;
4456 i++;
4457 }
4458 }
4459 }
4460
4461 if (!i) {
4462 err = -EINVAL;
4463 goto out_free;
4464 }
4465
4466 request->n_channels = i;
4467
4468 i = 0;
4469 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4470 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4471 tmp) {
57a27e1d 4472 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 4473 err = -EINVAL;
4474 goto out_free;
4475 }
57a27e1d 4476 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 4477 memcpy(request->ssids[i].ssid, nla_data(attr),
4478 nla_len(attr));
807f8a8c
LC		 4479 i++;
4480 }
4481 }
4482
a1f1c21c
LC		 4483 i = 0;
4484 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
4485 nla_for_each_nested(attr,
4486 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4487 tmp) {
88e920b4 4488 struct nlattr *ssid, *rssi;
a1f1c21c
LC		 4489
4490 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
4491 nla_data(attr), nla_len(attr),
4492 nl80211_match_policy);
4a4ab0d7 4493 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
a1f1c21c
LC		 4494 if (ssid) {
4495 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
4496 err = -EINVAL;
4497 goto out_free;
4498 }
4499 memcpy(request->match_sets[i].ssid.ssid,
4500 nla_data(ssid), nla_len(ssid));
4501 request->match_sets[i].ssid.ssid_len =
4502 nla_len(ssid);
4503 }
88e920b4
TP		 4504 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
4505 if (rssi)
4506 request->rssi_thold = nla_get_u32(rssi);
4507 else
4508 request->rssi_thold =
4509 NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 4510 i++;
4511 }
4512 }
4513
807f8a8c
LC		 4514 if (info->attrs[NL80211_ATTR_IE]) {
4515 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4516 memcpy((void *)request->ie,
4517 nla_data(info->attrs[NL80211_ATTR_IE]),
4518 request->ie_len);
4519 }
4520
4521 request->dev = dev;
4522 request->wiphy = &rdev->wiphy;
bbe6ad6d 4523 request->interval = interval;
807f8a8c
LC		 4524
4525 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
4526 if (!err) {
4527 rdev->sched_scan_req = request;
4528 nl80211_send_sched_scan(rdev, dev,
4529 NL80211_CMD_START_SCHED_SCAN);
4530 goto out;
4531 }
4532
4533out_free:
4534 kfree(request);
4535out:
c10841ca 4536 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 4537 return err;
4538}
4539
4540static int nl80211_stop_sched_scan(struct sk_buff *skb,
4541 struct genl_info *info)
4542{
4543 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 4544 int err;
807f8a8c
LC		 4545
4546 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4547 !rdev->ops->sched_scan_stop)
4548 return -EOPNOTSUPP;
4549
c10841ca
LC		 4550 mutex_lock(&rdev->sched_scan_mtx);
4551 err = __cfg80211_stop_sched_scan(rdev, false);
4552 mutex_unlock(&rdev->sched_scan_mtx);
4553
4554 return err;
807f8a8c
LC		 4555}
4556
9720bb3a
JB		 4557static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
4558 u32 seq, int flags,
2a519311 4559 struct cfg80211_registered_device *rdev,
48ab905d
JB		 4560 struct wireless_dev *wdev,
4561 struct cfg80211_internal_bss *intbss)
2a519311 4562{
48ab905d 4563 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 4564 void *hdr;
4565 struct nlattr *bss;
48ab905d
JB		 4566
4567 ASSERT_WDEV_LOCK(wdev);
2a519311 4568
9720bb3a 4569 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).pid, seq, flags,
2a519311
JB		 4570 NL80211_CMD_NEW_SCAN_RESULTS);
4571 if (!hdr)
4572 return -1;
4573
9720bb3a
JB		 4574 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
4575
9360ffd1
DM		 4576 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
4577 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
4578 goto nla_put_failure;
2a519311
JB		 4579
4580 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
4581 if (!bss)
4582 goto nla_put_failure;
9360ffd1
DM		 4583 if ((!is_zero_ether_addr(res->bssid) &&
4584 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)) ||
4585 (res->information_elements && res->len_information_elements &&
4586 nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
4587 res->len_information_elements,
4588 res->information_elements)) ||
4589 (res->beacon_ies && res->len_beacon_ies &&
4590 res->beacon_ies != res->information_elements &&
4591 nla_put(msg, NL80211_BSS_BEACON_IES,
4592 res->len_beacon_ies, res->beacon_ies)))
4593 goto nla_put_failure;
4594 if (res->tsf &&
4595 nla_put_u64(msg, NL80211_BSS_TSF, res->tsf))
4596 goto nla_put_failure;
4597 if (res->beacon_interval &&
4598 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
4599 goto nla_put_failure;
4600 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
4601 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
4602 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
4603 jiffies_to_msecs(jiffies - intbss->ts)))
4604 goto nla_put_failure;
2a519311 4605
77965c97 4606 switch (rdev->wiphy.signal_type) {
2a519311 4607 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 4608 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
4609 goto nla_put_failure;
2a519311
JB		 4610 break;
4611 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 4612 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
4613 goto nla_put_failure;
2a519311
JB		 4614 break;
4615 default:
4616 break;
4617 }
4618
48ab905d 4619 switch (wdev->iftype) {
074ac8df 4620 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 4621 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 4622 if (intbss == wdev->current_bss &&
4623 nla_put_u32(msg, NL80211_BSS_STATUS,
4624 NL80211_BSS_STATUS_ASSOCIATED))
4625 goto nla_put_failure;
48ab905d
JB		 4626 break;
4627 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 4628 if (intbss == wdev->current_bss &&
4629 nla_put_u32(msg, NL80211_BSS_STATUS,
4630 NL80211_BSS_STATUS_IBSS_JOINED))
4631 goto nla_put_failure;
48ab905d
JB		 4632 break;
4633 default:
4634 break;
4635 }
4636
2a519311
JB		 4637 nla_nest_end(msg, bss);
4638
4639 return genlmsg_end(msg, hdr);
4640
4641 nla_put_failure:
4642 genlmsg_cancel(msg, hdr);
4643 return -EMSGSIZE;
4644}
4645
4646static int nl80211_dump_scan(struct sk_buff *skb,
4647 struct netlink_callback *cb)
4648{
48ab905d
JB		 4649 struct cfg80211_registered_device *rdev;
4650 struct net_device *dev;
2a519311 4651 struct cfg80211_internal_bss *scan;
48ab905d 4652 struct wireless_dev *wdev;
2a519311
JB		 4653 int start = cb->args[1], idx = 0;
4654 int err;
4655
67748893
JB		 4656 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
4657 if (err)
4658 return err;
2a519311 4659
48ab905d 4660 wdev = dev->ieee80211_ptr;
2a519311 4661
48ab905d
JB		 4662 wdev_lock(wdev);
4663 spin_lock_bh(&rdev->bss_lock);
4664 cfg80211_bss_expire(rdev);
4665
9720bb3a
JB		 4666 cb->seq = rdev->bss_generation;
4667
48ab905d 4668 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 4669 if (++idx <= start)
4670 continue;
9720bb3a 4671 if (nl80211_send_bss(skb, cb,
2a519311 4672 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 4673 rdev, wdev, scan) < 0) {
2a519311 4674 idx--;
67748893 4675 break;
2a519311
JB		 4676 }
4677 }
4678
48ab905d
JB		 4679 spin_unlock_bh(&rdev->bss_lock);
4680 wdev_unlock(wdev);
2a519311
JB		 4681
4682 cb->args[1] = idx;
67748893 4683 nl80211_finish_netdev_dump(rdev);
2a519311 4684
67748893 4685 return skb->len;
2a519311
JB		 4686}
4687
61fa713c
HS		 4688static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
4689 int flags, struct net_device *dev,
4690 struct survey_info *survey)
4691{
4692 void *hdr;
4693 struct nlattr *infoattr;
4694
61fa713c
HS		 4695 hdr = nl80211hdr_put(msg, pid, seq, flags,
4696 NL80211_CMD_NEW_SURVEY_RESULTS);
4697 if (!hdr)
4698 return -ENOMEM;
4699
9360ffd1
DM		 4700 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
4701 goto nla_put_failure;
61fa713c
HS		 4702
4703 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
4704 if (!infoattr)
4705 goto nla_put_failure;
4706
9360ffd1
DM		 4707 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
4708 survey->channel->center_freq))
4709 goto nla_put_failure;
4710
4711 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
4712 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
4713 goto nla_put_failure;
4714 if ((survey->filled & SURVEY_INFO_IN_USE) &&
4715 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
4716 goto nla_put_failure;
4717 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
4718 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
4719 survey->channel_time))
4720 goto nla_put_failure;
4721 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
4722 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
4723 survey->channel_time_busy))
4724 goto nla_put_failure;
4725 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
4726 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
4727 survey->channel_time_ext_busy))
4728 goto nla_put_failure;
4729 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
4730 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
4731 survey->channel_time_rx))
4732 goto nla_put_failure;
4733 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
4734 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
4735 survey->channel_time_tx))
4736 goto nla_put_failure;
61fa713c
HS		 4737
4738 nla_nest_end(msg, infoattr);
4739
4740 return genlmsg_end(msg, hdr);
4741
4742 nla_put_failure:
4743 genlmsg_cancel(msg, hdr);
4744 return -EMSGSIZE;
4745}
4746
4747static int nl80211_dump_survey(struct sk_buff *skb,
4748 struct netlink_callback *cb)
4749{
4750 struct survey_info survey;
4751 struct cfg80211_registered_device *dev;
4752 struct net_device *netdev;
61fa713c
HS		 4753 int survey_idx = cb->args[1];
4754 int res;
4755
67748893
JB		 4756 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4757 if (res)
4758 return res;
61fa713c
HS		 4759
4760 if (!dev->ops->dump_survey) {
4761 res = -EOPNOTSUPP;
4762 goto out_err;
4763 }
4764
4765 while (1) {
180cdc79
LR		 4766 struct ieee80211_channel *chan;
4767
61fa713c
HS		 4768 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
4769 &survey);
4770 if (res == -ENOENT)
4771 break;
4772 if (res)
4773 goto out_err;
4774
180cdc79
LR		 4775 /* Survey without a channel doesn't make sense */
4776 if (!survey.channel) {
4777 res = -EINVAL;
4778 goto out;
4779 }
4780
4781 chan = ieee80211_get_channel(&dev->wiphy,
4782 survey.channel->center_freq);
4783 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4784 survey_idx++;
4785 continue;
4786 }
4787
61fa713c
HS		 4788 if (nl80211_send_survey(skb,
4789 NETLINK_CB(cb->skb).pid,
4790 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4791 netdev,
4792 &survey) < 0)
4793 goto out;
4794 survey_idx++;
4795 }
4796
4797 out:
4798 cb->args[1] = survey_idx;
4799 res = skb->len;
4800 out_err:
67748893 4801 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4802 return res;
4803}
4804
255e737e
JM		 4805static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
4806{
b23aa676
SO		 4807 return auth_type <= NL80211_AUTHTYPE_MAX;
4808}
4809
4810static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4811{
4812 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4813 NL80211_WPA_VERSION_2));
4814}
4815
636a5d36
JM		 4816static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4817{
4c476991
JB		 4818 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4819 struct net_device *dev = info->user_ptr[1];
19957bb3
JB		 4820 struct ieee80211_channel *chan;
4821 const u8 *bssid, *ssid, *ie = NULL;
4822 int err, ssid_len, ie_len = 0;
4823 enum nl80211_auth_type auth_type;
fffd0934 4824 struct key_parse key;
d5cdfacb 4825 bool local_state_change;
636a5d36 4826
f4a11bb0
JB		 4827 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4828 return -EINVAL;
4829
4830 if (!info->attrs[NL80211_ATTR_MAC])
4831 return -EINVAL;
4832
1778092e
JM		 4833 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4834 return -EINVAL;
4835
19957bb3
JB		 4836 if (!info->attrs[NL80211_ATTR_SSID])
4837 return -EINVAL;
4838
4839 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4840 return -EINVAL;
4841
fffd0934
JB		 4842 err = nl80211_parse_key(info, &key);
4843 if (err)
4844 return err;
4845
4846 if (key.idx >= 0) {
e31b8213
JB		 4847 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4848 return -EINVAL;
fffd0934
JB		 4849 if (!key.p.key || !key.p.key_len)
4850 return -EINVAL;
4851 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4852 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4853 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4854 key.p.key_len != WLAN_KEY_LEN_WEP104))
4855 return -EINVAL;
4856 if (key.idx > 4)
4857 return -EINVAL;
4858 } else {
4859 key.p.key_len = 0;
4860 key.p.key = NULL;
4861 }
4862
afea0b7a
JB		 4863 if (key.idx >= 0) {
4864 int i;
4865 bool ok = false;
4866 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4867 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4868 ok = true;
4869 break;
4870 }
4871 }
4c476991
JB		 4872 if (!ok)
4873 return -EINVAL;
afea0b7a
JB		 4874 }
4875
4c476991
JB		 4876 if (!rdev->ops->auth)
4877 return -EOPNOTSUPP;
636a5d36 4878
074ac8df 4879 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4880 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4881 return -EOPNOTSUPP;
eec60b03 4882
19957bb3 4883 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4884 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4885 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4886 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4887 return -EINVAL;
636a5d36 4888
19957bb3
JB		 4889 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4890 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4891
4892 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4893 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4894 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4895 }
4896
19957bb3 4897 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4c476991
JB		 4898 if (!nl80211_valid_auth_type(auth_type))
4899 return -EINVAL;
636a5d36 4900
d5cdfacb
JM		 4901 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4902
95de817b
JB		 4903 /*
4904 * Since we no longer track auth state, ignore
4905 * requests to only change local state.
4906 */
4907 if (local_state_change)
4908 return 0;
4909
4c476991
JB		 4910 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4911 ssid, ssid_len, ie, ie_len,
95de817b 4912 key.p.key, key.p.key_len, key.idx);
636a5d36
JM		 4913}
4914
c0692b8f
JB		 4915static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
4916 struct genl_info *info,
3dc27d25
JB		 4917 struct cfg80211_crypto_settings *settings,
4918 int cipher_limit)
b23aa676 4919{
c0b2bbd8
JB		 4920 memset(settings, 0, sizeof(*settings));
4921
b23aa676
SO		 4922 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
4923
c0692b8f
JB		 4924 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
4925 u16 proto;
4926 proto = nla_get_u16(
4927 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
4928 settings->control_port_ethertype = cpu_to_be16(proto);
4929 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
4930 proto != ETH_P_PAE)
4931 return -EINVAL;
4932 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
4933 settings->control_port_no_encrypt = true;
4934 } else
4935 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
4936
b23aa676
SO		 4937 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
4938 void *data;
4939 int len, i;
4940
4941 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4942 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4943 settings->n_ciphers_pairwise = len / sizeof(u32);
4944
4945 if (len % sizeof(u32))
4946 return -EINVAL;
4947
3dc27d25 4948 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 4949 return -EINVAL;
4950
4951 memcpy(settings->ciphers_pairwise, data, len);
4952
4953 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 4954 if (!cfg80211_supported_cipher_suite(
4955 &rdev->wiphy,
b23aa676
SO		 4956 settings->ciphers_pairwise[i]))
4957 return -EINVAL;
4958 }
4959
4960 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
4961 settings->cipher_group =
4962 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 4963 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
4964 settings->cipher_group))
b23aa676
SO		 4965 return -EINVAL;
4966 }
4967
4968 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
4969 settings->wpa_versions =
4970 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
4971 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
4972 return -EINVAL;
4973 }
4974
4975 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
4976 void *data;
6d30240e 4977 int len;
b23aa676
SO		 4978
4979 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
4980 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
4981 settings->n_akm_suites = len / sizeof(u32);
4982
4983 if (len % sizeof(u32))
4984 return -EINVAL;
4985
1b9ca027
JM		 4986 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
4987 return -EINVAL;
4988
b23aa676 4989 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 4990 }
4991
4992 return 0;
4993}
4994
636a5d36
JM		 4995static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
4996{
4c476991
JB		 4997 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4998 struct net_device *dev = info->user_ptr[1];
19957bb3 4999 struct cfg80211_crypto_settings crypto;
f444de05 5000 struct ieee80211_channel *chan;
3e5d7649 5001 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 5002 int err, ssid_len, ie_len = 0;
5003 bool use_mfp = false;
7e7c8926
BG		 5004 u32 flags = 0;
5005 struct ieee80211_ht_cap *ht_capa = NULL;
5006 struct ieee80211_ht_cap *ht_capa_mask = NULL;
636a5d36 5007
f4a11bb0
JB		 5008 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5009 return -EINVAL;
5010
5011 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 5012 !info->attrs[NL80211_ATTR_SSID] ||
5013 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 5014 return -EINVAL;
5015
4c476991
JB		 5016 if (!rdev->ops->assoc)
5017 return -EOPNOTSUPP;
636a5d36 5018
074ac8df 5019 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5020 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5021 return -EOPNOTSUPP;
eec60b03 5022
19957bb3 5023 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5024
19957bb3
JB		 5025 chan = ieee80211_get_channel(&rdev->wiphy,
5026 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 5027 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5028 return -EINVAL;
636a5d36 5029
19957bb3
JB		 5030 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5031 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 5032
5033 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5034 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5035 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5036 }
5037
dc6382ce 5038 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 5039 enum nl80211_mfp mfp =
dc6382ce 5040 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 5041 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 5042 use_mfp = true;
4c476991
JB		 5043 else if (mfp != NL80211_MFP_NO)
5044 return -EINVAL;
dc6382ce
JM		 5045 }
5046
3e5d7649
JB		 5047 if (info->attrs[NL80211_ATTR_PREV_BSSID])
5048 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
5049
7e7c8926
BG		 5050 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5051 flags |= ASSOC_REQ_DISABLE_HT;
5052
5053 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5054 ht_capa_mask =
5055 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
5056
5057 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5058 if (!ht_capa_mask)
5059 return -EINVAL;
5060 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5061 }
5062
c0692b8f 5063 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 5064 if (!err)
3e5d7649
JB		 5065 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
5066 ssid, ssid_len, ie, ie_len, use_mfp,
7e7c8926
BG		 5067 &crypto, flags, ht_capa,
5068 ht_capa_mask);
636a5d36 5069
636a5d36
JM		 5070 return err;
5071}
5072
5073static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
5074{
4c476991
JB		 5075 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5076 struct net_device *dev = info->user_ptr[1];
19957bb3 5077 const u8 *ie = NULL, *bssid;
4c476991 5078 int ie_len = 0;
19957bb3 5079 u16 reason_code;
d5cdfacb 5080 bool local_state_change;
636a5d36 5081
f4a11bb0
JB		 5082 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5083 return -EINVAL;
5084
5085 if (!info->attrs[NL80211_ATTR_MAC])
5086 return -EINVAL;
5087
5088 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5089 return -EINVAL;
5090
4c476991
JB		 5091 if (!rdev->ops->deauth)
5092 return -EOPNOTSUPP;
636a5d36 5093
074ac8df 5094 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5095 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5096 return -EOPNOTSUPP;
eec60b03 5097
19957bb3 5098 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5099
19957bb3
JB		 5100 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5101 if (reason_code == 0) {
f4a11bb0 5102 /* Reason Code 0 is reserved */
4c476991 5103 return -EINVAL;
255e737e 5104 }
636a5d36
JM		 5105
5106 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5107 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5108 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5109 }
5110
d5cdfacb
JM		 5111 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5112
4c476991
JB		 5113 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
5114 local_state_change);
636a5d36
JM		 5115}
5116
5117static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
5118{
4c476991
JB		 5119 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5120 struct net_device *dev = info->user_ptr[1];
19957bb3 5121 const u8 *ie = NULL, *bssid;
4c476991 5122 int ie_len = 0;
19957bb3 5123 u16 reason_code;
d5cdfacb 5124 bool local_state_change;
636a5d36 5125
f4a11bb0
JB		 5126 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5127 return -EINVAL;
5128
5129 if (!info->attrs[NL80211_ATTR_MAC])
5130 return -EINVAL;
5131
5132 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5133 return -EINVAL;
5134
4c476991
JB		 5135 if (!rdev->ops->disassoc)
5136 return -EOPNOTSUPP;
636a5d36 5137
074ac8df 5138 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5139 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5140 return -EOPNOTSUPP;
eec60b03 5141
19957bb3 5142 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5143
19957bb3
JB		 5144 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5145 if (reason_code == 0) {
f4a11bb0 5146 /* Reason Code 0 is reserved */
4c476991 5147 return -EINVAL;
255e737e 5148 }
636a5d36
JM		 5149
5150 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5151 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5152 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5153 }
5154
d5cdfacb
JM		 5155 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5156
4c476991
JB		 5157 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
5158 local_state_change);
636a5d36
JM		 5159}
5160
dd5b4cc7
FF		 5161static bool
5162nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
5163 int mcast_rate[IEEE80211_NUM_BANDS],
5164 int rateval)
5165{
5166 struct wiphy *wiphy = &rdev->wiphy;
5167 bool found = false;
5168 int band, i;
5169
5170 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5171 struct ieee80211_supported_band *sband;
5172
5173 sband = wiphy->bands[band];
5174 if (!sband)
5175 continue;
5176
5177 for (i = 0; i < sband->n_bitrates; i++) {
5178 if (sband->bitrates[i].bitrate == rateval) {
5179 mcast_rate[band] = i + 1;
5180 found = true;
5181 break;
5182 }
5183 }
5184 }
5185
5186 return found;
5187}
5188
04a773ad
JB		 5189static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
5190{
4c476991
JB		 5191 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5192 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 5193 struct cfg80211_ibss_params ibss;
5194 struct wiphy *wiphy;
fffd0934 5195 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 5196 int err;
5197
8e30bc55
JB		 5198 memset(&ibss, 0, sizeof(ibss));
5199
04a773ad
JB		 5200 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5201 return -EINVAL;
5202
5203 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5204 !info->attrs[NL80211_ATTR_SSID] ||
5205 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5206 return -EINVAL;
5207
8e30bc55
JB		 5208 ibss.beacon_interval = 100;
5209
5210 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
5211 ibss.beacon_interval =
5212 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5213 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
5214 return -EINVAL;
5215 }
5216
4c476991
JB		 5217 if (!rdev->ops->join_ibss)
5218 return -EOPNOTSUPP;
04a773ad 5219
4c476991
JB		 5220 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5221 return -EOPNOTSUPP;
04a773ad 5222
79c97e97 5223 wiphy = &rdev->wiphy;
04a773ad 5224
39193498 5225 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 5226 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 5227
5228 if (!is_valid_ether_addr(ibss.bssid))
5229 return -EINVAL;
5230 }
04a773ad
JB		 5231 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5232 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5233
5234 if (info->attrs[NL80211_ATTR_IE]) {
5235 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5236 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5237 }
5238
54858ee5
AS		 5239 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5240 enum nl80211_channel_type channel_type;
5241
cd6c6598 5242 if (!nl80211_valid_channel_type(info, &channel_type))
54858ee5
AS		 5243 return -EINVAL;
5244
5245 if (channel_type != NL80211_CHAN_NO_HT &&
5246 !(wiphy->features & NL80211_FEATURE_HT_IBSS))
5247 return -EINVAL;
5248
5249 ibss.channel_type = channel_type;
5250 } else {
5251 ibss.channel_type = NL80211_CHAN_NO_HT;
5252 }
5253
5254 ibss.channel = rdev_freq_to_chan(rdev,
5255 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
5256 ibss.channel_type);
04a773ad
JB		 5257 if (!ibss.channel ||
5258 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 5259 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
5260 return -EINVAL;
04a773ad 5261
54858ee5
AS		 5262 /* Both channels should be able to initiate communication */
5263 if ((ibss.channel_type == NL80211_CHAN_HT40PLUS ||
5264 ibss.channel_type == NL80211_CHAN_HT40MINUS) &&
5265 !cfg80211_can_beacon_sec_chan(&rdev->wiphy, ibss.channel,
5266 ibss.channel_type))
5267 return -EINVAL;
5268
04a773ad 5269 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 5270 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5271
fbd2c8dc
TP		 5272 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
5273 u8 *rates =
5274 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5275 int n_rates =
5276 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5277 struct ieee80211_supported_band *sband =
5278 wiphy->bands[ibss.channel->band];
fbd2c8dc 5279
34850ab2
JB		 5280 err = ieee80211_get_ratemask(sband, rates, n_rates,
5281 &ibss.basic_rates);
5282 if (err)
5283 return err;
fbd2c8dc 5284 }
dd5b4cc7
FF		 5285
5286 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
5287 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
5288 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
5289 return -EINVAL;
fbd2c8dc 5290
4c476991
JB		 5291 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5292 connkeys = nl80211_parse_connkeys(rdev,
5293 info->attrs[NL80211_ATTR_KEYS]);
5294 if (IS_ERR(connkeys))
5295 return PTR_ERR(connkeys);
5296 }
04a773ad 5297
267335d6
AQ		 5298 ibss.control_port =
5299 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
5300
4c476991 5301 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 5302 if (err)
5303 kfree(connkeys);
04a773ad
JB		 5304 return err;
5305}
5306
5307static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
5308{
4c476991
JB		 5309 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5310 struct net_device *dev = info->user_ptr[1];
04a773ad 5311
4c476991
JB		 5312 if (!rdev->ops->leave_ibss)
5313 return -EOPNOTSUPP;
04a773ad 5314
4c476991
JB		 5315 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5316 return -EOPNOTSUPP;
04a773ad 5317
4c476991 5318 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 5319}
5320
aff89a9b
JB		 5321#ifdef CONFIG_NL80211_TESTMODE
5322static struct genl_multicast_group nl80211_testmode_mcgrp = {
5323 .name = "testmode",
5324};
5325
5326static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
5327{
4c476991 5328 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 5329 int err;
5330
5331 if (!info->attrs[NL80211_ATTR_TESTDATA])
5332 return -EINVAL;
5333
aff89a9b
JB		 5334 err = -EOPNOTSUPP;
5335 if (rdev->ops->testmode_cmd) {
5336 rdev->testmode_info = info;
5337 err = rdev->ops->testmode_cmd(&rdev->wiphy,
5338 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
5339 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
5340 rdev->testmode_info = NULL;
5341 }
5342
aff89a9b
JB		 5343 return err;
5344}
5345
71063f0e
WYG		 5346static int nl80211_testmode_dump(struct sk_buff *skb,
5347 struct netlink_callback *cb)
5348{
00918d33 5349 struct cfg80211_registered_device *rdev;
71063f0e
WYG		 5350 int err;
5351 long phy_idx;
5352 void *data = NULL;
5353 int data_len = 0;
5354
5355 if (cb->args[0]) {
5356 /*
5357 * 0 is a valid index, but not valid for args[0],
5358 * so we need to offset by 1.
5359 */
5360 phy_idx = cb->args[0] - 1;
5361 } else {
5362 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
5363 nl80211_fam.attrbuf, nl80211_fam.maxattr,
5364 nl80211_policy);
5365 if (err)
5366 return err;
00918d33 5367
2bd7e35d
JB		 5368 mutex_lock(&cfg80211_mutex);
5369 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
5370 nl80211_fam.attrbuf);
5371 if (IS_ERR(rdev)) {
5372 mutex_unlock(&cfg80211_mutex);
5373 return PTR_ERR(rdev);
00918d33 5374 }
2bd7e35d
JB		 5375 phy_idx = rdev->wiphy_idx;
5376 rdev = NULL;
5377 mutex_unlock(&cfg80211_mutex);
5378
71063f0e
WYG		 5379 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
5380 cb->args[1] =
5381 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
5382 }
5383
5384 if (cb->args[1]) {
5385 data = nla_data((void *)cb->args[1]);
5386 data_len = nla_len((void *)cb->args[1]);
5387 }
5388
5389 mutex_lock(&cfg80211_mutex);
00918d33
JB		 5390 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
5391 if (!rdev) {
71063f0e
WYG		 5392 mutex_unlock(&cfg80211_mutex);
5393 return -ENOENT;
5394 }
00918d33 5395 cfg80211_lock_rdev(rdev);
71063f0e
WYG		 5396 mutex_unlock(&cfg80211_mutex);
5397
00918d33 5398 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 5399 err = -EOPNOTSUPP;
5400 goto out_err;
5401 }
5402
5403 while (1) {
5404 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).pid,
5405 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5406 NL80211_CMD_TESTMODE);
5407 struct nlattr *tmdata;
5408
9360ffd1 5409 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 5410 genlmsg_cancel(skb, hdr);
5411 break;
5412 }
5413
5414 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5415 if (!tmdata) {
5416 genlmsg_cancel(skb, hdr);
5417 break;
5418 }
00918d33
JB		 5419 err = rdev->ops->testmode_dump(&rdev->wiphy, skb, cb,
5420 data, data_len);
71063f0e
WYG		 5421 nla_nest_end(skb, tmdata);
5422
5423 if (err == -ENOBUFS || err == -ENOENT) {
5424 genlmsg_cancel(skb, hdr);
5425 break;
5426 } else if (err) {
5427 genlmsg_cancel(skb, hdr);
5428 goto out_err;
5429 }
5430
5431 genlmsg_end(skb, hdr);
5432 }
5433
5434 err = skb->len;
5435 /* see above */
5436 cb->args[0] = phy_idx + 1;
5437 out_err:
00918d33 5438 cfg80211_unlock_rdev(rdev);
71063f0e
WYG		 5439 return err;
5440}
5441
aff89a9b
JB		 5442static struct sk_buff *
5443__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
5444 int approxlen, u32 pid, u32 seq, gfp_t gfp)
5445{
5446 struct sk_buff *skb;
5447 void *hdr;
5448 struct nlattr *data;
5449
5450 skb = nlmsg_new(approxlen + 100, gfp);
5451 if (!skb)
5452 return NULL;
5453
5454 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
5455 if (!hdr) {
5456 kfree_skb(skb);
5457 return NULL;
5458 }
5459
9360ffd1
DM		 5460 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
5461 goto nla_put_failure;
aff89a9b
JB		 5462 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5463
5464 ((void **)skb->cb)[0] = rdev;
5465 ((void **)skb->cb)[1] = hdr;
5466 ((void **)skb->cb)[2] = data;
5467
5468 return skb;
5469
5470 nla_put_failure:
5471 kfree_skb(skb);
5472 return NULL;
5473}
5474
5475struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
5476 int approxlen)
5477{
5478 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5479
5480 if (WARN_ON(!rdev->testmode_info))
5481 return NULL;
5482
5483 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
5484 rdev->testmode_info->snd_pid,
5485 rdev->testmode_info->snd_seq,
5486 GFP_KERNEL);
5487}
5488EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
5489
5490int cfg80211_testmode_reply(struct sk_buff *skb)
5491{
5492 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
5493 void *hdr = ((void **)skb->cb)[1];
5494 struct nlattr *data = ((void **)skb->cb)[2];
5495
5496 if (WARN_ON(!rdev->testmode_info)) {
5497 kfree_skb(skb);
5498 return -EINVAL;
5499 }
5500
5501 nla_nest_end(skb, data);
5502 genlmsg_end(skb, hdr);
5503 return genlmsg_reply(skb, rdev->testmode_info);
5504}
5505EXPORT_SYMBOL(cfg80211_testmode_reply);
5506
5507struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
5508 int approxlen, gfp_t gfp)
5509{
5510 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5511
5512 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
5513}
5514EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
5515
5516void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
5517{
5518 void *hdr = ((void **)skb->cb)[1];
5519 struct nlattr *data = ((void **)skb->cb)[2];
5520
5521 nla_nest_end(skb, data);
5522 genlmsg_end(skb, hdr);
5523 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
5524}
5525EXPORT_SYMBOL(cfg80211_testmode_event);
5526#endif
5527
b23aa676
SO		 5528static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
5529{
4c476991
JB		 5530 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5531 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5532 struct cfg80211_connect_params connect;
5533 struct wiphy *wiphy;
fffd0934 5534 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 5535 int err;
5536
5537 memset(&connect, 0, sizeof(connect));
5538
5539 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5540 return -EINVAL;
5541
5542 if (!info->attrs[NL80211_ATTR_SSID] ||
5543 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5544 return -EINVAL;
5545
5546 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5547 connect.auth_type =
5548 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
5549 if (!nl80211_valid_auth_type(connect.auth_type))
5550 return -EINVAL;
5551 } else
5552 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5553
5554 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
5555
c0692b8f 5556 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 5557 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 5558 if (err)
5559 return err;
b23aa676 5560
074ac8df 5561 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5562 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5563 return -EOPNOTSUPP;
b23aa676 5564
79c97e97 5565 wiphy = &rdev->wiphy;
b23aa676 5566
4486ea98
BS		 5567 connect.bg_scan_period = -1;
5568 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
5569 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
5570 connect.bg_scan_period =
5571 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
5572 }
5573
b23aa676
SO		 5574 if (info->attrs[NL80211_ATTR_MAC])
5575 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5576 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5577 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5578
5579 if (info->attrs[NL80211_ATTR_IE]) {
5580 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5581 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5582 }
5583
5584 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
5585 connect.channel =
5586 ieee80211_get_channel(wiphy,
5587 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5588 if (!connect.channel ||
4c476991
JB		 5589 connect.channel->flags & IEEE80211_CHAN_DISABLED)
5590 return -EINVAL;
b23aa676
SO		 5591 }
5592
fffd0934
JB		 5593 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5594 connkeys = nl80211_parse_connkeys(rdev,
5595 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 5596 if (IS_ERR(connkeys))
5597 return PTR_ERR(connkeys);
fffd0934
JB		 5598 }
5599
7e7c8926
BG		 5600 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5601 connect.flags |= ASSOC_REQ_DISABLE_HT;
5602
5603 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5604 memcpy(&connect.ht_capa_mask,
5605 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
5606 sizeof(connect.ht_capa_mask));
5607
5608 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5609 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5610 return -EINVAL;
5611 memcpy(&connect.ht_capa,
5612 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
5613 sizeof(connect.ht_capa));
5614 }
5615
fffd0934 5616 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 5617 if (err)
5618 kfree(connkeys);
b23aa676
SO		 5619 return err;
5620}
5621
5622static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
5623{
4c476991
JB		 5624 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5625 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5626 u16 reason;
5627
5628 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5629 reason = WLAN_REASON_DEAUTH_LEAVING;
5630 else
5631 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5632
5633 if (reason == 0)
5634 return -EINVAL;
5635
074ac8df 5636 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5637 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5638 return -EOPNOTSUPP;
b23aa676 5639
4c476991 5640 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 5641}
5642
463d0183
JB		 5643static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
5644{
4c476991 5645 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 5646 struct net *net;
5647 int err;
5648 u32 pid;
5649
5650 if (!info->attrs[NL80211_ATTR_PID])
5651 return -EINVAL;
5652
5653 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
5654
463d0183 5655 net = get_net_ns_by_pid(pid);
4c476991
JB		 5656 if (IS_ERR(net))
5657 return PTR_ERR(net);
463d0183
JB		 5658
5659 err = 0;
5660
5661 /* check if anything to do */
4c476991
JB		 5662 if (!net_eq(wiphy_net(&rdev->wiphy), net))
5663 err = cfg80211_switch_netns(rdev, net);
463d0183 5664
463d0183 5665 put_net(net);
463d0183
JB		 5666 return err;
5667}
5668
67fbb16b
SO		 5669static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
5670{
4c476991 5671 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 5672 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
5673 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 5674 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 5675 struct cfg80211_pmksa pmksa;
5676
5677 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
5678
5679 if (!info->attrs[NL80211_ATTR_MAC])
5680 return -EINVAL;
5681
5682 if (!info->attrs[NL80211_ATTR_PMKID])
5683 return -EINVAL;
5684
67fbb16b
SO		 5685 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
5686 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5687
074ac8df 5688 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5689 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5690 return -EOPNOTSUPP;
67fbb16b
SO		 5691
5692 switch (info->genlhdr->cmd) {
5693 case NL80211_CMD_SET_PMKSA:
5694 rdev_ops = rdev->ops->set_pmksa;
5695 break;
5696 case NL80211_CMD_DEL_PMKSA:
5697 rdev_ops = rdev->ops->del_pmksa;
5698 break;
5699 default:
5700 WARN_ON(1);
5701 break;
5702 }
5703
4c476991
JB		 5704 if (!rdev_ops)
5705 return -EOPNOTSUPP;
67fbb16b 5706
4c476991 5707 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 5708}
5709
5710static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
5711{
4c476991
JB		 5712 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5713 struct net_device *dev = info->user_ptr[1];
67fbb16b 5714
074ac8df 5715 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5716 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5717 return -EOPNOTSUPP;
67fbb16b 5718
4c476991
JB		 5719 if (!rdev->ops->flush_pmksa)
5720 return -EOPNOTSUPP;
67fbb16b 5721
4c476991 5722 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 5723}
5724
109086ce
AN		 5725static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
5726{
5727 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5728 struct net_device *dev = info->user_ptr[1];
5729 u8 action_code, dialog_token;
5730 u16 status_code;
5731 u8 *peer;
5732
5733 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5734 !rdev->ops->tdls_mgmt)
5735 return -EOPNOTSUPP;
5736
5737 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
5738 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
5739 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
5740 !info->attrs[NL80211_ATTR_IE] ||
5741 !info->attrs[NL80211_ATTR_MAC])
5742 return -EINVAL;
5743
5744 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5745 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
5746 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
5747 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
5748
5749 return rdev->ops->tdls_mgmt(&rdev->wiphy, dev, peer, action_code,
5750 dialog_token, status_code,
5751 nla_data(info->attrs[NL80211_ATTR_IE]),
5752 nla_len(info->attrs[NL80211_ATTR_IE]));
5753}
5754
5755static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
5756{
5757 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5758 struct net_device *dev = info->user_ptr[1];
5759 enum nl80211_tdls_operation operation;
5760 u8 *peer;
5761
5762 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5763 !rdev->ops->tdls_oper)
5764 return -EOPNOTSUPP;
5765
5766 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
5767 !info->attrs[NL80211_ATTR_MAC])
5768 return -EINVAL;
5769
5770 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
5771 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5772
5773 return rdev->ops->tdls_oper(&rdev->wiphy, dev, peer, operation);
5774}
5775
9588bbd5
JM		 5776static int nl80211_remain_on_channel(struct sk_buff *skb,
5777 struct genl_info *info)
5778{
4c476991 5779 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 5780 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5
JM		 5781 struct ieee80211_channel *chan;
5782 struct sk_buff *msg;
5783 void *hdr;
5784 u64 cookie;
5785 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
5786 u32 freq, duration;
5787 int err;
5788
5789 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5790 !info->attrs[NL80211_ATTR_DURATION])
5791 return -EINVAL;
5792
5793 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5794
ebf348fc
JB		 5795 if (!rdev->ops->remain_on_channel ||
5796 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
5797 return -EOPNOTSUPP;
5798
9588bbd5 5799 /*
ebf348fc
JB		 5800 * We should be on that channel for at least a minimum amount of
5801 * time (10ms) but no longer than the driver supports.
9588bbd5 5802 */
ebf348fc 5803 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 5804 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 5805 return -EINVAL;
5806
cd6c6598
JB		 5807 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
5808 !nl80211_valid_channel_type(info, &channel_type))
5809 return -EINVAL;
9588bbd5
JM		 5810
5811 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5812 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5813 if (chan == NULL)
5814 return -EINVAL;
9588bbd5
JM		 5815
5816 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5817 if (!msg)
5818 return -ENOMEM;
9588bbd5
JM		 5819
5820 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5821 NL80211_CMD_REMAIN_ON_CHANNEL);
5822
5823 if (IS_ERR(hdr)) {
5824 err = PTR_ERR(hdr);
5825 goto free_msg;
5826 }
5827
71bbc994 5828 err = rdev->ops->remain_on_channel(&rdev->wiphy, wdev, chan,
9588bbd5
JM		 5829 channel_type, duration, &cookie);
5830
5831 if (err)
5832 goto free_msg;
5833
9360ffd1
DM		 5834 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
5835 goto nla_put_failure;
9588bbd5
JM		 5836
5837 genlmsg_end(msg, hdr);
4c476991
JB		 5838
5839 return genlmsg_reply(msg, info);
9588bbd5
JM		 5840
5841 nla_put_failure:
5842 err = -ENOBUFS;
5843 free_msg:
5844 nlmsg_free(msg);
9588bbd5
JM		 5845 return err;
5846}
5847
5848static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
5849 struct genl_info *info)
5850{
4c476991 5851 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 5852 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 5853 u64 cookie;
9588bbd5
JM		 5854
5855 if (!info->attrs[NL80211_ATTR_COOKIE])
5856 return -EINVAL;
5857
4c476991
JB		 5858 if (!rdev->ops->cancel_remain_on_channel)
5859 return -EOPNOTSUPP;
9588bbd5 5860
9588bbd5
JM		 5861 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5862
71bbc994 5863 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, wdev, cookie);
9588bbd5
JM		 5864}
5865
13ae75b1
JM		 5866static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
5867 u8 *rates, u8 rates_len)
5868{
5869 u8 i;
5870 u32 mask = 0;
5871
5872 for (i = 0; i < rates_len; i++) {
5873 int rate = (rates[i] & 0x7f) * 5;
5874 int ridx;
5875 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
5876 struct ieee80211_rate *srate =
5877 &sband->bitrates[ridx];
5878 if (rate == srate->bitrate) {
5879 mask |= 1 << ridx;
5880 break;
5881 }
5882 }
5883 if (ridx == sband->n_bitrates)
5884 return 0; /* rate not found */
5885 }
5886
5887 return mask;
5888}
5889
24db78c0
SW		 5890static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
5891 u8 *rates, u8 rates_len,
5892 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
5893{
5894 u8 i;
5895
5896 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
5897
5898 for (i = 0; i < rates_len; i++) {
5899 int ridx, rbit;
5900
5901 ridx = rates[i] / 8;
5902 rbit = BIT(rates[i] % 8);
5903
5904 /* check validity */
910570b5 5905 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
24db78c0
SW		 5906 return false;
5907
5908 /* check availability */
5909 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
5910 mcs[ridx] |= rbit;
5911 else
5912 return false;
5913 }
5914
5915 return true;
5916}
5917
b54452b0 5918static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 5919 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
5920 .len = NL80211_MAX_SUPP_RATES },
24db78c0
SW		 5921 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
5922 .len = NL80211_MAX_SUPP_HT_RATES },
13ae75b1
JM		 5923};
5924
5925static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
5926 struct genl_info *info)
5927{
5928 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 5929 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 5930 struct cfg80211_bitrate_mask mask;
4c476991
JB		 5931 int rem, i;
5932 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 5933 struct nlattr *tx_rates;
5934 struct ieee80211_supported_band *sband;
5935
5936 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
5937 return -EINVAL;
5938
4c476991
JB		 5939 if (!rdev->ops->set_bitrate_mask)
5940 return -EOPNOTSUPP;
13ae75b1
JM		 5941
5942 memset(&mask, 0, sizeof(mask));
5943 /* Default to all rates enabled */
5944 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
5945 sband = rdev->wiphy.bands[i];
5946 mask.control[i].legacy =
5947 sband ? (1 << sband->n_bitrates) - 1 : 0;
24db78c0
SW		 5948 if (sband)
5949 memcpy(mask.control[i].mcs,
5950 sband->ht_cap.mcs.rx_mask,
5951 sizeof(mask.control[i].mcs));
5952 else
5953 memset(mask.control[i].mcs, 0,
5954 sizeof(mask.control[i].mcs));
13ae75b1
JM		 5955 }
5956
5957 /*
5958 * The nested attribute uses enum nl80211_band as the index. This maps
5959 * directly to the enum ieee80211_band values used in cfg80211.
5960 */
24db78c0 5961 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
13ae75b1
JM		 5962 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
5963 {
5964 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 5965 if (band < 0 || band >= IEEE80211_NUM_BANDS)
5966 return -EINVAL;
13ae75b1 5967 sband = rdev->wiphy.bands[band];
4c476991
JB		 5968 if (sband == NULL)
5969 return -EINVAL;
13ae75b1
JM		 5970 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
5971 nla_len(tx_rates), nl80211_txattr_policy);
5972 if (tb[NL80211_TXRATE_LEGACY]) {
5973 mask.control[band].legacy = rateset_to_mask(
5974 sband,
5975 nla_data(tb[NL80211_TXRATE_LEGACY]),
5976 nla_len(tb[NL80211_TXRATE_LEGACY]));
218d2e26
BS		 5977 if ((mask.control[band].legacy == 0) &&
5978 nla_len(tb[NL80211_TXRATE_LEGACY]))
5979 return -EINVAL;
24db78c0
SW		 5980 }
5981 if (tb[NL80211_TXRATE_MCS]) {
5982 if (!ht_rateset_to_mask(
5983 sband,
5984 nla_data(tb[NL80211_TXRATE_MCS]),
5985 nla_len(tb[NL80211_TXRATE_MCS]),
5986 mask.control[band].mcs))
5987 return -EINVAL;
5988 }
5989
5990 if (mask.control[band].legacy == 0) {
5991 /* don't allow empty legacy rates if HT
5992 * is not even supported. */
5993 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
5994 return -EINVAL;
5995
5996 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
5997 if (mask.control[band].mcs[i])
5998 break;
5999
6000 /* legacy and mcs rates may not be both empty */
6001 if (i == IEEE80211_HT_MCS_MASK_LEN)
4c476991 6002 return -EINVAL;
13ae75b1
JM		 6003 }
6004 }
6005
4c476991 6006 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 6007}
6008
2e161f78 6009static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6010{
4c476991 6011 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6012 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 6013 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 6014
6015 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
6016 return -EINVAL;
6017
2e161f78
JB		 6018 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
6019 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 6020
71bbc994
JB		 6021 switch (wdev->iftype) {
6022 case NL80211_IFTYPE_STATION:
6023 case NL80211_IFTYPE_ADHOC:
6024 case NL80211_IFTYPE_P2P_CLIENT:
6025 case NL80211_IFTYPE_AP:
6026 case NL80211_IFTYPE_AP_VLAN:
6027 case NL80211_IFTYPE_MESH_POINT:
6028 case NL80211_IFTYPE_P2P_GO:
6029 break;
6030 default:
4c476991 6031 return -EOPNOTSUPP;
71bbc994 6032 }
026331c4
JM		 6033
6034 /* not much point in registering if we can't reply */
4c476991
JB		 6035 if (!rdev->ops->mgmt_tx)
6036 return -EOPNOTSUPP;
026331c4 6037
71bbc994 6038 return cfg80211_mlme_register_mgmt(wdev, info->snd_pid, frame_type,
026331c4
JM		 6039 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
6040 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 6041}
6042
2e161f78 6043static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6044{
4c476991 6045 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6046 struct wireless_dev *wdev = info->user_ptr[1];
026331c4
JM		 6047 struct ieee80211_channel *chan;
6048 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 6049 bool channel_type_valid = false;
026331c4
JM		 6050 u32 freq;
6051 int err;
d64d373f 6052 void *hdr = NULL;
026331c4 6053 u64 cookie;
e247bd90 6054 struct sk_buff *msg = NULL;
f7ca38df 6055 unsigned int wait = 0;
e247bd90
JB		 6056 bool offchan, no_cck, dont_wait_for_ack;
6057
6058 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
026331c4
JM		 6059
6060 if (!info->attrs[NL80211_ATTR_FRAME] ||
6061 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
6062 return -EINVAL;
6063
4c476991
JB		 6064 if (!rdev->ops->mgmt_tx)
6065 return -EOPNOTSUPP;
026331c4 6066
71bbc994
JB		 6067 switch (wdev->iftype) {
6068 case NL80211_IFTYPE_STATION:
6069 case NL80211_IFTYPE_ADHOC:
6070 case NL80211_IFTYPE_P2P_CLIENT:
6071 case NL80211_IFTYPE_AP:
6072 case NL80211_IFTYPE_AP_VLAN:
6073 case NL80211_IFTYPE_MESH_POINT:
6074 case NL80211_IFTYPE_P2P_GO:
6075 break;
6076 default:
4c476991 6077 return -EOPNOTSUPP;
71bbc994 6078 }
026331c4 6079
f7ca38df 6080 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 6081 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df
JB		 6082 return -EINVAL;
6083 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 6084
6085 /*
6086 * We should wait on the channel for at least a minimum amount
6087 * of time (10ms) but no longer than the driver supports.
6088 */
6089 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
6090 wait > rdev->wiphy.max_remain_on_channel_duration)
6091 return -EINVAL;
6092
f7ca38df
JB		 6093 }
6094
026331c4 6095 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
cd6c6598 6096 if (!nl80211_valid_channel_type(info, &channel_type))
4c476991 6097 return -EINVAL;
252aa631 6098 channel_type_valid = true;
026331c4
JM		 6099 }
6100
f7ca38df
JB		 6101 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
6102
7c4ef712
JB		 6103 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
6104 return -EINVAL;
6105
e9f935e3
RM		 6106 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
6107
026331c4
JM		 6108 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
6109 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 6110 if (chan == NULL)
6111 return -EINVAL;
026331c4 6112
e247bd90
JB		 6113 if (!dont_wait_for_ack) {
6114 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6115 if (!msg)
6116 return -ENOMEM;
026331c4 6117
e247bd90
JB		 6118 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6119 NL80211_CMD_FRAME);
026331c4 6120
e247bd90
JB		 6121 if (IS_ERR(hdr)) {
6122 err = PTR_ERR(hdr);
6123 goto free_msg;
6124 }
026331c4 6125 }
e247bd90 6126
71bbc994 6127 err = cfg80211_mlme_mgmt_tx(rdev, wdev, chan, offchan, channel_type,
f7ca38df 6128 channel_type_valid, wait,
2e161f78
JB		 6129 nla_data(info->attrs[NL80211_ATTR_FRAME]),
6130 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e247bd90 6131 no_cck, dont_wait_for_ack, &cookie);
026331c4
JM		 6132 if (err)
6133 goto free_msg;
6134
e247bd90 6135 if (msg) {
9360ffd1
DM		 6136 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6137 goto nla_put_failure;
026331c4 6138
e247bd90
JB		 6139 genlmsg_end(msg, hdr);
6140 return genlmsg_reply(msg, info);
6141 }
6142
6143 return 0;
026331c4
JM		 6144
6145 nla_put_failure:
6146 err = -ENOBUFS;
6147 free_msg:
6148 nlmsg_free(msg);
026331c4
JM		 6149 return err;
6150}
6151
f7ca38df
JB		 6152static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
6153{
6154 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6155 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 6156 u64 cookie;
6157
6158 if (!info->attrs[NL80211_ATTR_COOKIE])
6159 return -EINVAL;
6160
6161 if (!rdev->ops->mgmt_tx_cancel_wait)
6162 return -EOPNOTSUPP;
6163
71bbc994
JB		 6164 switch (wdev->iftype) {
6165 case NL80211_IFTYPE_STATION:
6166 case NL80211_IFTYPE_ADHOC:
6167 case NL80211_IFTYPE_P2P_CLIENT:
6168 case NL80211_IFTYPE_AP:
6169 case NL80211_IFTYPE_AP_VLAN:
6170 case NL80211_IFTYPE_P2P_GO:
6171 break;
6172 default:
f7ca38df 6173 return -EOPNOTSUPP;
71bbc994 6174 }
f7ca38df
JB		 6175
6176 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6177
71bbc994 6178 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, wdev, cookie);
f7ca38df
JB		 6179}
6180
ffb9eb3d
KV		 6181static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
6182{
4c476991 6183 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 6184 struct wireless_dev *wdev;
4c476991 6185 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6186 u8 ps_state;
6187 bool state;
6188 int err;
6189
4c476991
JB		 6190 if (!info->attrs[NL80211_ATTR_PS_STATE])
6191 return -EINVAL;
ffb9eb3d
KV		 6192
6193 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
6194
4c476991
JB		 6195 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
6196 return -EINVAL;
ffb9eb3d
KV		 6197
6198 wdev = dev->ieee80211_ptr;
6199
4c476991
JB		 6200 if (!rdev->ops->set_power_mgmt)
6201 return -EOPNOTSUPP;
ffb9eb3d
KV		 6202
6203 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
6204
6205 if (state == wdev->ps)
4c476991 6206 return 0;
ffb9eb3d 6207
4c476991
JB		 6208 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
6209 wdev->ps_timeout);
6210 if (!err)
6211 wdev->ps = state;
ffb9eb3d
KV		 6212 return err;
6213}
6214
6215static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
6216{
4c476991 6217 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 6218 enum nl80211_ps_state ps_state;
6219 struct wireless_dev *wdev;
4c476991 6220 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6221 struct sk_buff *msg;
6222 void *hdr;
6223 int err;
6224
ffb9eb3d
KV		 6225 wdev = dev->ieee80211_ptr;
6226
4c476991
JB		 6227 if (!rdev->ops->set_power_mgmt)
6228 return -EOPNOTSUPP;
ffb9eb3d
KV		 6229
6230 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6231 if (!msg)
6232 return -ENOMEM;
ffb9eb3d
KV		 6233
6234 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6235 NL80211_CMD_GET_POWER_SAVE);
6236 if (!hdr) {
4c476991 6237 err = -ENOBUFS;
ffb9eb3d
KV		 6238 goto free_msg;
6239 }
6240
6241 if (wdev->ps)
6242 ps_state = NL80211_PS_ENABLED;
6243 else
6244 ps_state = NL80211_PS_DISABLED;
6245
9360ffd1
DM		 6246 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
6247 goto nla_put_failure;
ffb9eb3d
KV		 6248
6249 genlmsg_end(msg, hdr);
4c476991 6250 return genlmsg_reply(msg, info);
ffb9eb3d 6251
4c476991 6252 nla_put_failure:
ffb9eb3d 6253 err = -ENOBUFS;
4c476991 6254 free_msg:
ffb9eb3d 6255 nlmsg_free(msg);
ffb9eb3d
KV		 6256 return err;
6257}
6258
d6dc1a38
JO		 6259static struct nla_policy
6260nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
6261 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
6262 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
6263 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
6264};
6265
6266static int nl80211_set_cqm_rssi(struct genl_info *info,
6267 s32 threshold, u32 hysteresis)
6268{
4c476991 6269 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 6270 struct wireless_dev *wdev;
4c476991 6271 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 6272
6273 if (threshold > 0)
6274 return -EINVAL;
6275
d6dc1a38
JO		 6276 wdev = dev->ieee80211_ptr;
6277
4c476991
JB		 6278 if (!rdev->ops->set_cqm_rssi_config)
6279 return -EOPNOTSUPP;
d6dc1a38 6280
074ac8df 6281 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6282 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6283 return -EOPNOTSUPP;
d6dc1a38 6284
4c476991
JB		 6285 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
6286 threshold, hysteresis);
d6dc1a38
JO		 6287}
6288
6289static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
6290{
6291 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
6292 struct nlattr *cqm;
6293 int err;
6294
6295 cqm = info->attrs[NL80211_ATTR_CQM];
6296 if (!cqm) {
6297 err = -EINVAL;
6298 goto out;
6299 }
6300
6301 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
6302 nl80211_attr_cqm_policy);
6303 if (err)
6304 goto out;
6305
6306 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
6307 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
6308 s32 threshold;
6309 u32 hysteresis;
6310 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
6311 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
6312 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
6313 } else
6314 err = -EINVAL;
6315
6316out:
6317 return err;
6318}
6319
29cbe68c
JB		 6320static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
6321{
6322 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6323 struct net_device *dev = info->user_ptr[1];
6324 struct mesh_config cfg;
c80d545d 6325 struct mesh_setup setup;
29cbe68c
JB		 6326 int err;
6327
6328 /* start with default */
6329 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 6330 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 6331
24bdd9f4 6332 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 6333 /* and parse parameters if given */
24bdd9f4 6334 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 6335 if (err)
6336 return err;
6337 }
6338
6339 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
6340 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
6341 return -EINVAL;
6342
c80d545d
JC		 6343 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
6344 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
6345
4bb62344
CYY		 6346 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
6347 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
6348 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
6349 return -EINVAL;
6350
c80d545d
JC		 6351 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
6352 /* parse additional setup parameters if given */
6353 err = nl80211_parse_mesh_setup(info, &setup);
6354 if (err)
6355 return err;
6356 }
6357
cc1d2806
JB		 6358 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6359 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
6360
6361 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
6362 !nl80211_valid_channel_type(info, &channel_type))
6363 return -EINVAL;
6364
6365 setup.channel = rdev_freq_to_chan(rdev,
6366 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
6367 channel_type);
6368 if (!setup.channel)
6369 return -EINVAL;
6370 setup.channel_type = channel_type;
6371 } else {
6372 /* cfg80211_join_mesh() will sort it out */
6373 setup.channel = NULL;
6374 }
6375
c80d545d 6376 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 6377}
6378
6379static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
6380{
6381 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6382 struct net_device *dev = info->user_ptr[1];
6383
6384 return cfg80211_leave_mesh(rdev, dev);
6385}
6386
dfb89c56 6387#ifdef CONFIG_PM
ff1b6e69
JB		 6388static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
6389{
6390 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6391 struct sk_buff *msg;
6392 void *hdr;
6393
6394 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6395 return -EOPNOTSUPP;
6396
6397 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6398 if (!msg)
6399 return -ENOMEM;
6400
6401 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6402 NL80211_CMD_GET_WOWLAN);
6403 if (!hdr)
6404 goto nla_put_failure;
6405
6406 if (rdev->wowlan) {
6407 struct nlattr *nl_wowlan;
6408
6409 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
6410 if (!nl_wowlan)
6411 goto nla_put_failure;
6412
9360ffd1
DM		 6413 if ((rdev->wowlan->any &&
6414 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6415 (rdev->wowlan->disconnect &&
6416 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6417 (rdev->wowlan->magic_pkt &&
6418 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6419 (rdev->wowlan->gtk_rekey_failure &&
6420 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6421 (rdev->wowlan->eap_identity_req &&
6422 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6423 (rdev->wowlan->four_way_handshake &&
6424 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6425 (rdev->wowlan->rfkill_release &&
6426 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
6427 goto nla_put_failure;
ff1b6e69
JB		 6428 if (rdev->wowlan->n_patterns) {
6429 struct nlattr *nl_pats, *nl_pat;
6430 int i, pat_len;
6431
6432 nl_pats = nla_nest_start(msg,
6433 NL80211_WOWLAN_TRIG_PKT_PATTERN);
6434 if (!nl_pats)
6435 goto nla_put_failure;
6436
6437 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
6438 nl_pat = nla_nest_start(msg, i + 1);
6439 if (!nl_pat)
6440 goto nla_put_failure;
6441 pat_len = rdev->wowlan->patterns[i].pattern_len;
9360ffd1
DM		 6442 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
6443 DIV_ROUND_UP(pat_len, 8),
6444 rdev->wowlan->patterns[i].mask) ||
6445 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
6446 pat_len,
6447 rdev->wowlan->patterns[i].pattern))
6448 goto nla_put_failure;
ff1b6e69
JB		 6449 nla_nest_end(msg, nl_pat);
6450 }
6451 nla_nest_end(msg, nl_pats);
6452 }
6453
6454 nla_nest_end(msg, nl_wowlan);
6455 }
6456
6457 genlmsg_end(msg, hdr);
6458 return genlmsg_reply(msg, info);
6459
6460nla_put_failure:
6461 nlmsg_free(msg);
6462 return -ENOBUFS;
6463}
6464
6465static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
6466{
6467 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6468 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 6469 struct cfg80211_wowlan new_triggers = {};
ae33bd81 6470 struct cfg80211_wowlan *ntrig;
ff1b6e69
JB		 6471 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
6472 int err, i;
6d52563f 6473 bool prev_enabled = rdev->wowlan;
ff1b6e69
JB		 6474
6475 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6476 return -EOPNOTSUPP;
6477
ae33bd81
JB		 6478 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
6479 cfg80211_rdev_free_wowlan(rdev);
6480 rdev->wowlan = NULL;
6481 goto set_wakeup;
6482 }
ff1b6e69
JB		 6483
6484 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
6485 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6486 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6487 nl80211_wowlan_policy);
6488 if (err)
6489 return err;
6490
6491 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
6492 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
6493 return -EINVAL;
6494 new_triggers.any = true;
6495 }
6496
6497 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
6498 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
6499 return -EINVAL;
6500 new_triggers.disconnect = true;
6501 }
6502
6503 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
6504 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
6505 return -EINVAL;
6506 new_triggers.magic_pkt = true;
6507 }
6508
77dbbb13
JB		 6509 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
6510 return -EINVAL;
6511
6512 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
6513 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
6514 return -EINVAL;
6515 new_triggers.gtk_rekey_failure = true;
6516 }
6517
6518 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
6519 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
6520 return -EINVAL;
6521 new_triggers.eap_identity_req = true;
6522 }
6523
6524 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
6525 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
6526 return -EINVAL;
6527 new_triggers.four_way_handshake = true;
6528 }
6529
6530 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
6531 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
6532 return -EINVAL;
6533 new_triggers.rfkill_release = true;
6534 }
6535
ff1b6e69
JB		 6536 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
6537 struct nlattr *pat;
6538 int n_patterns = 0;
6539 int rem, pat_len, mask_len;
6540 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
6541
6542 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6543 rem)
6544 n_patterns++;
6545 if (n_patterns > wowlan->n_patterns)
6546 return -EINVAL;
6547
6548 new_triggers.patterns = kcalloc(n_patterns,
6549 sizeof(new_triggers.patterns[0]),
6550 GFP_KERNEL);
6551 if (!new_triggers.patterns)
6552 return -ENOMEM;
6553
6554 new_triggers.n_patterns = n_patterns;
6555 i = 0;
6556
6557 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6558 rem) {
6559 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
6560 nla_data(pat), nla_len(pat), NULL);
6561 err = -EINVAL;
6562 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
6563 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
6564 goto error;
6565 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
6566 mask_len = DIV_ROUND_UP(pat_len, 8);
6567 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
6568 mask_len)
6569 goto error;
6570 if (pat_len > wowlan->pattern_max_len ||
6571 pat_len < wowlan->pattern_min_len)
6572 goto error;
6573
6574 new_triggers.patterns[i].mask =
6575 kmalloc(mask_len + pat_len, GFP_KERNEL);
6576 if (!new_triggers.patterns[i].mask) {
6577 err = -ENOMEM;
6578 goto error;
6579 }
6580 new_triggers.patterns[i].pattern =
6581 new_triggers.patterns[i].mask + mask_len;
6582 memcpy(new_triggers.patterns[i].mask,
6583 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
6584 mask_len);
6585 new_triggers.patterns[i].pattern_len = pat_len;
6586 memcpy(new_triggers.patterns[i].pattern,
6587 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
6588 pat_len);
6589 i++;
6590 }
6591 }
6592
ae33bd81
JB		 6593 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
6594 if (!ntrig) {
6595 err = -ENOMEM;
6596 goto error;
ff1b6e69 6597 }
ae33bd81
JB		 6598 cfg80211_rdev_free_wowlan(rdev);
6599 rdev->wowlan = ntrig;
ff1b6e69 6600
ae33bd81 6601 set_wakeup:
6d52563f
JB		 6602 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
6603 rdev->ops->set_wakeup(&rdev->wiphy, rdev->wowlan);
6604
ff1b6e69
JB		 6605 return 0;
6606 error:
6607 for (i = 0; i < new_triggers.n_patterns; i++)
6608 kfree(new_triggers.patterns[i].mask);
6609 kfree(new_triggers.patterns);
6610 return err;
6611}
dfb89c56 6612#endif
ff1b6e69 6613
e5497d76
JB		 6614static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
6615{
6616 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6617 struct net_device *dev = info->user_ptr[1];
6618 struct wireless_dev *wdev = dev->ieee80211_ptr;
6619 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
6620 struct cfg80211_gtk_rekey_data rekey_data;
6621 int err;
6622
6623 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
6624 return -EINVAL;
6625
6626 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
6627 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
6628 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
6629 nl80211_rekey_policy);
6630 if (err)
6631 return err;
6632
6633 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
6634 return -ERANGE;
6635 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
6636 return -ERANGE;
6637 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
6638 return -ERANGE;
6639
6640 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
6641 NL80211_KEK_LEN);
6642 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
6643 NL80211_KCK_LEN);
6644 memcpy(rekey_data.replay_ctr,
6645 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
6646 NL80211_REPLAY_CTR_LEN);
6647
6648 wdev_lock(wdev);
6649 if (!wdev->current_bss) {
6650 err = -ENOTCONN;
6651 goto out;
6652 }
6653
6654 if (!rdev->ops->set_rekey_data) {
6655 err = -EOPNOTSUPP;
6656 goto out;
6657 }
6658
6659 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
6660 out:
6661 wdev_unlock(wdev);
6662 return err;
6663}
6664
28946da7
JB		 6665static int nl80211_register_unexpected_frame(struct sk_buff *skb,
6666 struct genl_info *info)
6667{
6668 struct net_device *dev = info->user_ptr[1];
6669 struct wireless_dev *wdev = dev->ieee80211_ptr;
6670
6671 if (wdev->iftype != NL80211_IFTYPE_AP &&
6672 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6673 return -EINVAL;
6674
6675 if (wdev->ap_unexpected_nlpid)
6676 return -EBUSY;
6677
6678 wdev->ap_unexpected_nlpid = info->snd_pid;
6679 return 0;
6680}
6681
7f6cf311
JB		 6682static int nl80211_probe_client(struct sk_buff *skb,
6683 struct genl_info *info)
6684{
6685 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6686 struct net_device *dev = info->user_ptr[1];
6687 struct wireless_dev *wdev = dev->ieee80211_ptr;
6688 struct sk_buff *msg;
6689 void *hdr;
6690 const u8 *addr;
6691 u64 cookie;
6692 int err;
6693
6694 if (wdev->iftype != NL80211_IFTYPE_AP &&
6695 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6696 return -EOPNOTSUPP;
6697
6698 if (!info->attrs[NL80211_ATTR_MAC])
6699 return -EINVAL;
6700
6701 if (!rdev->ops->probe_client)
6702 return -EOPNOTSUPP;
6703
6704 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6705 if (!msg)
6706 return -ENOMEM;
6707
6708 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6709 NL80211_CMD_PROBE_CLIENT);
6710
6711 if (IS_ERR(hdr)) {
6712 err = PTR_ERR(hdr);
6713 goto free_msg;
6714 }
6715
6716 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6717
6718 err = rdev->ops->probe_client(&rdev->wiphy, dev, addr, &cookie);
6719 if (err)
6720 goto free_msg;
6721
9360ffd1
DM		 6722 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6723 goto nla_put_failure;
7f6cf311
JB		 6724
6725 genlmsg_end(msg, hdr);
6726
6727 return genlmsg_reply(msg, info);
6728
6729 nla_put_failure:
6730 err = -ENOBUFS;
6731 free_msg:
6732 nlmsg_free(msg);
6733 return err;
6734}
6735
5e760230
JB		 6736static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
6737{
6738 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6739
6740 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
6741 return -EOPNOTSUPP;
6742
6743 if (rdev->ap_beacons_nlpid)
6744 return -EBUSY;
6745
6746 rdev->ap_beacons_nlpid = info->snd_pid;
6747
6748 return 0;
6749}
6750
4c476991
JB		 6751#define NL80211_FLAG_NEED_WIPHY 0x01
6752#define NL80211_FLAG_NEED_NETDEV 0x02
6753#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 6754#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
6755#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
6756 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef
JB		 6757#define NL80211_FLAG_NEED_WDEV 0x10
6758/* If a netdev is associated, it must be UP */
6759#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
6760 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 6761
6762static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
6763 struct genl_info *info)
6764{
6765 struct cfg80211_registered_device *rdev;
89a54e48 6766 struct wireless_dev *wdev;
4c476991 6767 struct net_device *dev;
4c476991
JB		 6768 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
6769
6770 if (rtnl)
6771 rtnl_lock();
6772
6773 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 6774 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 6775 if (IS_ERR(rdev)) {
6776 if (rtnl)
6777 rtnl_unlock();
6778 return PTR_ERR(rdev);
6779 }
6780 info->user_ptr[0] = rdev;
1bf614ef
JB		 6781 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
6782 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
89a54e48
JB		 6783 mutex_lock(&cfg80211_mutex);
6784 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
6785 info->attrs);
6786 if (IS_ERR(wdev)) {
6787 mutex_unlock(&cfg80211_mutex);
4c476991
JB		 6788 if (rtnl)
6789 rtnl_unlock();
89a54e48 6790 return PTR_ERR(wdev);
4c476991 6791 }
89a54e48 6792
89a54e48
JB		 6793 dev = wdev->netdev;
6794 rdev = wiphy_to_dev(wdev->wiphy);
6795
1bf614ef
JB		 6796 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
6797 if (!dev) {
6798 mutex_unlock(&cfg80211_mutex);
6799 if (rtnl)
6800 rtnl_unlock();
6801 return -EINVAL;
6802 }
6803
6804 info->user_ptr[1] = dev;
6805 } else {
6806 info->user_ptr[1] = wdev;
6807 }
6808
6809 if (dev) {
6810 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
6811 !netif_running(dev)) {
6812 mutex_unlock(&cfg80211_mutex);
6813 if (rtnl)
6814 rtnl_unlock();
6815 return -ENETDOWN;
6816 }
6817
6818 dev_hold(dev);
41265714 6819 }
89a54e48 6820
89a54e48
JB		 6821 cfg80211_lock_rdev(rdev);
6822
6823 mutex_unlock(&cfg80211_mutex);
6824
4c476991 6825 info->user_ptr[0] = rdev;
4c476991
JB		 6826 }
6827
6828 return 0;
6829}
6830
6831static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
6832 struct genl_info *info)
6833{
6834 if (info->user_ptr[0])
6835 cfg80211_unlock_rdev(info->user_ptr[0]);
1bf614ef
JB		 6836 if (info->user_ptr[1]) {
6837 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
6838 struct wireless_dev *wdev = info->user_ptr[1];
6839
6840 if (wdev->netdev)
6841 dev_put(wdev->netdev);
6842 } else {
6843 dev_put(info->user_ptr[1]);
6844 }
6845 }
4c476991
JB		 6846 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
6847 rtnl_unlock();
6848}
6849
55682965
JB		 6850static struct genl_ops nl80211_ops[] = {
6851 {
6852 .cmd = NL80211_CMD_GET_WIPHY,
6853 .doit = nl80211_get_wiphy,
6854 .dumpit = nl80211_dump_wiphy,
6855 .policy = nl80211_policy,
6856 /* can be retrieved by unprivileged users */
4c476991 6857 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 6858 },
6859 {
6860 .cmd = NL80211_CMD_SET_WIPHY,
6861 .doit = nl80211_set_wiphy,
6862 .policy = nl80211_policy,
6863 .flags = GENL_ADMIN_PERM,
4c476991 6864 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 6865 },
6866 {
6867 .cmd = NL80211_CMD_GET_INTERFACE,
6868 .doit = nl80211_get_interface,
6869 .dumpit = nl80211_dump_interface,
6870 .policy = nl80211_policy,
6871 /* can be retrieved by unprivileged users */
72fb2abc 6872 .internal_flags = NL80211_FLAG_NEED_WDEV,
55682965
JB		 6873 },
6874 {
6875 .cmd = NL80211_CMD_SET_INTERFACE,
6876 .doit = nl80211_set_interface,
6877 .policy = nl80211_policy,
6878 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6879 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6880 NL80211_FLAG_NEED_RTNL,
55682965
JB		 6881 },
6882 {
6883 .cmd = NL80211_CMD_NEW_INTERFACE,
6884 .doit = nl80211_new_interface,
6885 .policy = nl80211_policy,
6886 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6887 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6888 NL80211_FLAG_NEED_RTNL,
55682965
JB		 6889 },
6890 {
6891 .cmd = NL80211_CMD_DEL_INTERFACE,
6892 .doit = nl80211_del_interface,
6893 .policy = nl80211_policy,
41ade00f 6894 .flags = GENL_ADMIN_PERM,
84efbb84 6895 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 6896 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6897 },
6898 {
6899 .cmd = NL80211_CMD_GET_KEY,
6900 .doit = nl80211_get_key,
6901 .policy = nl80211_policy,
6902 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6903 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6904 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6905 },
6906 {
6907 .cmd = NL80211_CMD_SET_KEY,
6908 .doit = nl80211_set_key,
6909 .policy = nl80211_policy,
6910 .flags = GENL_ADMIN_PERM,
41265714 6911 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6912 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6913 },
6914 {
6915 .cmd = NL80211_CMD_NEW_KEY,
6916 .doit = nl80211_new_key,
6917 .policy = nl80211_policy,
6918 .flags = GENL_ADMIN_PERM,
41265714 6919 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6920 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6921 },
6922 {
6923 .cmd = NL80211_CMD_DEL_KEY,
6924 .doit = nl80211_del_key,
6925 .policy = nl80211_policy,
55682965 6926 .flags = GENL_ADMIN_PERM,
41265714 6927 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6928 NL80211_FLAG_NEED_RTNL,
55682965 6929 },
ed1b6cc7
JB		 6930 {
6931 .cmd = NL80211_CMD_SET_BEACON,
6932 .policy = nl80211_policy,
6933 .flags = GENL_ADMIN_PERM,
8860020e 6934 .doit = nl80211_set_beacon,
2b5f8b0b 6935 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6936 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 6937 },
6938 {
8860020e 6939 .cmd = NL80211_CMD_START_AP,
ed1b6cc7
JB		 6940 .policy = nl80211_policy,
6941 .flags = GENL_ADMIN_PERM,
8860020e 6942 .doit = nl80211_start_ap,
2b5f8b0b 6943 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6944 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 6945 },
6946 {
8860020e 6947 .cmd = NL80211_CMD_STOP_AP,
ed1b6cc7
JB		 6948 .policy = nl80211_policy,
6949 .flags = GENL_ADMIN_PERM,
8860020e 6950 .doit = nl80211_stop_ap,
2b5f8b0b 6951 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6952 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 6953 },
5727ef1b
JB		 6954 {
6955 .cmd = NL80211_CMD_GET_STATION,
6956 .doit = nl80211_get_station,
2ec600d6 6957 .dumpit = nl80211_dump_station,
5727ef1b 6958 .policy = nl80211_policy,
4c476991
JB		 6959 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6960 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6961 },
6962 {
6963 .cmd = NL80211_CMD_SET_STATION,
6964 .doit = nl80211_set_station,
6965 .policy = nl80211_policy,
6966 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6967 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6968 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6969 },
6970 {
6971 .cmd = NL80211_CMD_NEW_STATION,
6972 .doit = nl80211_new_station,
6973 .policy = nl80211_policy,
6974 .flags = GENL_ADMIN_PERM,
41265714 6975 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6976 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6977 },
6978 {
6979 .cmd = NL80211_CMD_DEL_STATION,
6980 .doit = nl80211_del_station,
6981 .policy = nl80211_policy,
2ec600d6 6982 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6983 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6984 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6985 },
6986 {
6987 .cmd = NL80211_CMD_GET_MPATH,
6988 .doit = nl80211_get_mpath,
6989 .dumpit = nl80211_dump_mpath,
6990 .policy = nl80211_policy,
6991 .flags = GENL_ADMIN_PERM,
41265714 6992 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6993 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6994 },
6995 {
6996 .cmd = NL80211_CMD_SET_MPATH,
6997 .doit = nl80211_set_mpath,
6998 .policy = nl80211_policy,
6999 .flags = GENL_ADMIN_PERM,
41265714 7000 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7001 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7002 },
7003 {
7004 .cmd = NL80211_CMD_NEW_MPATH,
7005 .doit = nl80211_new_mpath,
7006 .policy = nl80211_policy,
7007 .flags = GENL_ADMIN_PERM,
41265714 7008 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7009 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7010 },
7011 {
7012 .cmd = NL80211_CMD_DEL_MPATH,
7013 .doit = nl80211_del_mpath,
7014 .policy = nl80211_policy,
9f1ba906 7015 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7016 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7017 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 7018 },
7019 {
7020 .cmd = NL80211_CMD_SET_BSS,
7021 .doit = nl80211_set_bss,
7022 .policy = nl80211_policy,
b2e1b302 7023 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7024 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7025 NL80211_FLAG_NEED_RTNL,
b2e1b302 7026 },
f130347c
LR		 7027 {
7028 .cmd = NL80211_CMD_GET_REG,
7029 .doit = nl80211_get_reg,
7030 .policy = nl80211_policy,
7031 /* can be retrieved by unprivileged users */
7032 },
b2e1b302
LR		 7033 {
7034 .cmd = NL80211_CMD_SET_REG,
7035 .doit = nl80211_set_reg,
7036 .policy = nl80211_policy,
7037 .flags = GENL_ADMIN_PERM,
7038 },
7039 {
7040 .cmd = NL80211_CMD_REQ_SET_REG,
7041 .doit = nl80211_req_set_reg,
7042 .policy = nl80211_policy,
93da9cc1 7043 .flags = GENL_ADMIN_PERM,
7044 },
7045 {
24bdd9f4
JC		 7046 .cmd = NL80211_CMD_GET_MESH_CONFIG,
7047 .doit = nl80211_get_mesh_config,
93da9cc1 7048 .policy = nl80211_policy,
7049 /* can be retrieved by unprivileged users */
2b5f8b0b 7050 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7051 NL80211_FLAG_NEED_RTNL,
93da9cc1 7052 },
7053 {
24bdd9f4
JC		 7054 .cmd = NL80211_CMD_SET_MESH_CONFIG,
7055 .doit = nl80211_update_mesh_config,
93da9cc1 7056 .policy = nl80211_policy,
9aed3cc1 7057 .flags = GENL_ADMIN_PERM,
29cbe68c 7058 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7059 NL80211_FLAG_NEED_RTNL,
9aed3cc1 7060 },
2a519311
JB		 7061 {
7062 .cmd = NL80211_CMD_TRIGGER_SCAN,
7063 .doit = nl80211_trigger_scan,
7064 .policy = nl80211_policy,
7065 .flags = GENL_ADMIN_PERM,
fd014284 7066 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7067 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 7068 },
7069 {
7070 .cmd = NL80211_CMD_GET_SCAN,
7071 .policy = nl80211_policy,
7072 .dumpit = nl80211_dump_scan,
7073 },
807f8a8c
LC		 7074 {
7075 .cmd = NL80211_CMD_START_SCHED_SCAN,
7076 .doit = nl80211_start_sched_scan,
7077 .policy = nl80211_policy,
7078 .flags = GENL_ADMIN_PERM,
7079 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7080 NL80211_FLAG_NEED_RTNL,
7081 },
7082 {
7083 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
7084 .doit = nl80211_stop_sched_scan,
7085 .policy = nl80211_policy,
7086 .flags = GENL_ADMIN_PERM,
7087 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7088 NL80211_FLAG_NEED_RTNL,
7089 },
636a5d36
JM		 7090 {
7091 .cmd = NL80211_CMD_AUTHENTICATE,
7092 .doit = nl80211_authenticate,
7093 .policy = nl80211_policy,
7094 .flags = GENL_ADMIN_PERM,
41265714 7095 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7096 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7097 },
7098 {
7099 .cmd = NL80211_CMD_ASSOCIATE,
7100 .doit = nl80211_associate,
7101 .policy = nl80211_policy,
7102 .flags = GENL_ADMIN_PERM,
41265714 7103 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7104 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7105 },
7106 {
7107 .cmd = NL80211_CMD_DEAUTHENTICATE,
7108 .doit = nl80211_deauthenticate,
7109 .policy = nl80211_policy,
7110 .flags = GENL_ADMIN_PERM,
41265714 7111 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7112 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7113 },
7114 {
7115 .cmd = NL80211_CMD_DISASSOCIATE,
7116 .doit = nl80211_disassociate,
7117 .policy = nl80211_policy,
7118 .flags = GENL_ADMIN_PERM,
41265714 7119 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7120 NL80211_FLAG_NEED_RTNL,
636a5d36 7121 },
04a773ad
JB		 7122 {
7123 .cmd = NL80211_CMD_JOIN_IBSS,
7124 .doit = nl80211_join_ibss,
7125 .policy = nl80211_policy,
7126 .flags = GENL_ADMIN_PERM,
41265714 7127 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7128 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 7129 },
7130 {
7131 .cmd = NL80211_CMD_LEAVE_IBSS,
7132 .doit = nl80211_leave_ibss,
7133 .policy = nl80211_policy,
7134 .flags = GENL_ADMIN_PERM,
41265714 7135 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7136 NL80211_FLAG_NEED_RTNL,
04a773ad 7137 },
aff89a9b
JB		 7138#ifdef CONFIG_NL80211_TESTMODE
7139 {
7140 .cmd = NL80211_CMD_TESTMODE,
7141 .doit = nl80211_testmode_do,
71063f0e 7142 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 7143 .policy = nl80211_policy,
7144 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7145 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7146 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 7147 },
7148#endif
b23aa676
SO		 7149 {
7150 .cmd = NL80211_CMD_CONNECT,
7151 .doit = nl80211_connect,
7152 .policy = nl80211_policy,
7153 .flags = GENL_ADMIN_PERM,
41265714 7154 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7155 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 7156 },
7157 {
7158 .cmd = NL80211_CMD_DISCONNECT,
7159 .doit = nl80211_disconnect,
7160 .policy = nl80211_policy,
7161 .flags = GENL_ADMIN_PERM,
41265714 7162 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7163 NL80211_FLAG_NEED_RTNL,
b23aa676 7164 },
463d0183
JB		 7165 {
7166 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
7167 .doit = nl80211_wiphy_netns,
7168 .policy = nl80211_policy,
7169 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7170 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7171 NL80211_FLAG_NEED_RTNL,
463d0183 7172 },
61fa713c
HS		 7173 {
7174 .cmd = NL80211_CMD_GET_SURVEY,
7175 .policy = nl80211_policy,
7176 .dumpit = nl80211_dump_survey,
7177 },
67fbb16b
SO		 7178 {
7179 .cmd = NL80211_CMD_SET_PMKSA,
7180 .doit = nl80211_setdel_pmksa,
7181 .policy = nl80211_policy,
7182 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7183 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7184 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7185 },
7186 {
7187 .cmd = NL80211_CMD_DEL_PMKSA,
7188 .doit = nl80211_setdel_pmksa,
7189 .policy = nl80211_policy,
7190 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7191 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7192 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7193 },
7194 {
7195 .cmd = NL80211_CMD_FLUSH_PMKSA,
7196 .doit = nl80211_flush_pmksa,
7197 .policy = nl80211_policy,
7198 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7199 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7200 NL80211_FLAG_NEED_RTNL,
67fbb16b 7201 },
9588bbd5
JM		 7202 {
7203 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
7204 .doit = nl80211_remain_on_channel,
7205 .policy = nl80211_policy,
7206 .flags = GENL_ADMIN_PERM,
71bbc994 7207 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7208 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 7209 },
7210 {
7211 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
7212 .doit = nl80211_cancel_remain_on_channel,
7213 .policy = nl80211_policy,
7214 .flags = GENL_ADMIN_PERM,
71bbc994 7215 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7216 NL80211_FLAG_NEED_RTNL,
9588bbd5 7217 },
13ae75b1
JM		 7218 {
7219 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
7220 .doit = nl80211_set_tx_bitrate_mask,
7221 .policy = nl80211_policy,
7222 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7223 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7224 NL80211_FLAG_NEED_RTNL,
13ae75b1 7225 },
026331c4 7226 {
2e161f78
JB		 7227 .cmd = NL80211_CMD_REGISTER_FRAME,
7228 .doit = nl80211_register_mgmt,
026331c4
JM		 7229 .policy = nl80211_policy,
7230 .flags = GENL_ADMIN_PERM,
71bbc994 7231 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 7232 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 7233 },
7234 {
2e161f78
JB		 7235 .cmd = NL80211_CMD_FRAME,
7236 .doit = nl80211_tx_mgmt,
026331c4 7237 .policy = nl80211_policy,
f7ca38df 7238 .flags = GENL_ADMIN_PERM,
71bbc994 7239 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 7240 NL80211_FLAG_NEED_RTNL,
7241 },
7242 {
7243 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
7244 .doit = nl80211_tx_mgmt_cancel_wait,
7245 .policy = nl80211_policy,
026331c4 7246 .flags = GENL_ADMIN_PERM,
71bbc994 7247 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7248 NL80211_FLAG_NEED_RTNL,
026331c4 7249 },
ffb9eb3d
KV		 7250 {
7251 .cmd = NL80211_CMD_SET_POWER_SAVE,
7252 .doit = nl80211_set_power_save,
7253 .policy = nl80211_policy,
7254 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7255 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7256 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 7257 },
7258 {
7259 .cmd = NL80211_CMD_GET_POWER_SAVE,
7260 .doit = nl80211_get_power_save,
7261 .policy = nl80211_policy,
7262 /* can be retrieved by unprivileged users */
4c476991
JB		 7263 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7264 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 7265 },
d6dc1a38
JO		 7266 {
7267 .cmd = NL80211_CMD_SET_CQM,
7268 .doit = nl80211_set_cqm,
7269 .policy = nl80211_policy,
7270 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7271 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7272 NL80211_FLAG_NEED_RTNL,
d6dc1a38 7273 },
f444de05
JB		 7274 {
7275 .cmd = NL80211_CMD_SET_CHANNEL,
7276 .doit = nl80211_set_channel,
7277 .policy = nl80211_policy,
7278 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7279 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7280 NL80211_FLAG_NEED_RTNL,
f444de05 7281 },
e8347eba
BJ		 7282 {
7283 .cmd = NL80211_CMD_SET_WDS_PEER,
7284 .doit = nl80211_set_wds_peer,
7285 .policy = nl80211_policy,
7286 .flags = GENL_ADMIN_PERM,
43b19952
JB		 7287 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7288 NL80211_FLAG_NEED_RTNL,
e8347eba 7289 },
29cbe68c
JB		 7290 {
7291 .cmd = NL80211_CMD_JOIN_MESH,
7292 .doit = nl80211_join_mesh,
7293 .policy = nl80211_policy,
7294 .flags = GENL_ADMIN_PERM,
7295 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7296 NL80211_FLAG_NEED_RTNL,
7297 },
7298 {
7299 .cmd = NL80211_CMD_LEAVE_MESH,
7300 .doit = nl80211_leave_mesh,
7301 .policy = nl80211_policy,
7302 .flags = GENL_ADMIN_PERM,
7303 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7304 NL80211_FLAG_NEED_RTNL,
7305 },
dfb89c56 7306#ifdef CONFIG_PM
ff1b6e69
JB		 7307 {
7308 .cmd = NL80211_CMD_GET_WOWLAN,
7309 .doit = nl80211_get_wowlan,
7310 .policy = nl80211_policy,
7311 /* can be retrieved by unprivileged users */
7312 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7313 NL80211_FLAG_NEED_RTNL,
7314 },
7315 {
7316 .cmd = NL80211_CMD_SET_WOWLAN,
7317 .doit = nl80211_set_wowlan,
7318 .policy = nl80211_policy,
7319 .flags = GENL_ADMIN_PERM,
7320 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7321 NL80211_FLAG_NEED_RTNL,
7322 },
dfb89c56 7323#endif
e5497d76
JB		 7324 {
7325 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
7326 .doit = nl80211_set_rekey_data,
7327 .policy = nl80211_policy,
7328 .flags = GENL_ADMIN_PERM,
7329 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7330 NL80211_FLAG_NEED_RTNL,
7331 },
109086ce
AN		 7332 {
7333 .cmd = NL80211_CMD_TDLS_MGMT,
7334 .doit = nl80211_tdls_mgmt,
7335 .policy = nl80211_policy,
7336 .flags = GENL_ADMIN_PERM,
7337 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7338 NL80211_FLAG_NEED_RTNL,
7339 },
7340 {
7341 .cmd = NL80211_CMD_TDLS_OPER,
7342 .doit = nl80211_tdls_oper,
7343 .policy = nl80211_policy,
7344 .flags = GENL_ADMIN_PERM,
7345 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7346 NL80211_FLAG_NEED_RTNL,
7347 },
28946da7
JB		 7348 {
7349 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
7350 .doit = nl80211_register_unexpected_frame,
7351 .policy = nl80211_policy,
7352 .flags = GENL_ADMIN_PERM,
7353 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7354 NL80211_FLAG_NEED_RTNL,
7355 },
7f6cf311
JB		 7356 {
7357 .cmd = NL80211_CMD_PROBE_CLIENT,
7358 .doit = nl80211_probe_client,
7359 .policy = nl80211_policy,
7360 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7361 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 7362 NL80211_FLAG_NEED_RTNL,
7363 },
5e760230
JB		 7364 {
7365 .cmd = NL80211_CMD_REGISTER_BEACONS,
7366 .doit = nl80211_register_beacons,
7367 .policy = nl80211_policy,
7368 .flags = GENL_ADMIN_PERM,
7369 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7370 NL80211_FLAG_NEED_RTNL,
7371 },
1d9d9213
SW		 7372 {
7373 .cmd = NL80211_CMD_SET_NOACK_MAP,
7374 .doit = nl80211_set_noack_map,
7375 .policy = nl80211_policy,
7376 .flags = GENL_ADMIN_PERM,
7377 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7378 NL80211_FLAG_NEED_RTNL,
7379 },
7380
55682965 7381};
9588bbd5 7382
6039f6d2
JM		 7383static struct genl_multicast_group nl80211_mlme_mcgrp = {
7384 .name = "mlme",
7385};
55682965
JB		 7386
7387/* multicast groups */
7388static struct genl_multicast_group nl80211_config_mcgrp = {
7389 .name = "config",
7390};
2a519311
JB		 7391static struct genl_multicast_group nl80211_scan_mcgrp = {
7392 .name = "scan",
7393};
73d54c9e
LR		 7394static struct genl_multicast_group nl80211_regulatory_mcgrp = {
7395 .name = "regulatory",
7396};
55682965
JB		 7397
7398/* notification functions */
7399
7400void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
7401{
7402 struct sk_buff *msg;
7403
fd2120ca 7404 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 7405 if (!msg)
7406 return;
7407
7408 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
7409 nlmsg_free(msg);
7410 return;
7411 }
7412
463d0183
JB		 7413 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7414 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 7415}
7416
362a415d
JB		 7417static int nl80211_add_scan_req(struct sk_buff *msg,
7418 struct cfg80211_registered_device *rdev)
7419{
7420 struct cfg80211_scan_request *req = rdev->scan_req;
7421 struct nlattr *nest;
7422 int i;
7423
667503dd
JB		 7424 ASSERT_RDEV_LOCK(rdev);
7425
362a415d
JB		 7426 if (WARN_ON(!req))
7427 return 0;
7428
7429 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
7430 if (!nest)
7431 goto nla_put_failure;
9360ffd1
DM		 7432 for (i = 0; i < req->n_ssids; i++) {
7433 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
7434 goto nla_put_failure;
7435 }
362a415d
JB		 7436 nla_nest_end(msg, nest);
7437
7438 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
7439 if (!nest)
7440 goto nla_put_failure;
9360ffd1
DM		 7441 for (i = 0; i < req->n_channels; i++) {
7442 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
7443 goto nla_put_failure;
7444 }
362a415d
JB		 7445 nla_nest_end(msg, nest);
7446
9360ffd1
DM		 7447 if (req->ie &&
7448 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
7449 goto nla_put_failure;
362a415d
JB		 7450
7451 return 0;
7452 nla_put_failure:
7453 return -ENOBUFS;
7454}
7455
a538e2d5
JB		 7456static int nl80211_send_scan_msg(struct sk_buff *msg,
7457 struct cfg80211_registered_device *rdev,
fd014284 7458 struct wireless_dev *wdev,
a538e2d5
JB		 7459 u32 pid, u32 seq, int flags,
7460 u32 cmd)
2a519311
JB		 7461{
7462 void *hdr;
7463
7464 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
7465 if (!hdr)
7466 return -1;
7467
9360ffd1 7468 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 7469 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
7470 wdev->netdev->ifindex)) ||
7471 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9360ffd1 7472 goto nla_put_failure;
2a519311 7473
362a415d
JB		 7474 /* ignore errors and send incomplete event anyway */
7475 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 7476
7477 return genlmsg_end(msg, hdr);
7478
7479 nla_put_failure:
7480 genlmsg_cancel(msg, hdr);
7481 return -EMSGSIZE;
7482}
7483
807f8a8c
LC		 7484static int
7485nl80211_send_sched_scan_msg(struct sk_buff *msg,
7486 struct cfg80211_registered_device *rdev,
7487 struct net_device *netdev,
7488 u32 pid, u32 seq, int flags, u32 cmd)
7489{
7490 void *hdr;
7491
7492 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
7493 if (!hdr)
7494 return -1;
7495
9360ffd1
DM		 7496 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7497 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
7498 goto nla_put_failure;
807f8a8c
LC		 7499
7500 return genlmsg_end(msg, hdr);
7501
7502 nla_put_failure:
7503 genlmsg_cancel(msg, hdr);
7504 return -EMSGSIZE;
7505}
7506
a538e2d5 7507void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 7508 struct wireless_dev *wdev)
a538e2d5
JB		 7509{
7510 struct sk_buff *msg;
7511
7512 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
7513 if (!msg)
7514 return;
7515
fd014284 7516 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 7517 NL80211_CMD_TRIGGER_SCAN) < 0) {
7518 nlmsg_free(msg);
7519 return;
7520 }
7521
463d0183
JB		 7522 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7523 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 7524}
7525
2a519311 7526void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
fd014284 7527 struct wireless_dev *wdev)
2a519311
JB		 7528{
7529 struct sk_buff *msg;
7530
fd2120ca 7531 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7532 if (!msg)
7533 return;
7534
fd014284 7535 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7536 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 7537 nlmsg_free(msg);
7538 return;
7539 }
7540
463d0183
JB		 7541 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7542 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7543}
7544
7545void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
fd014284 7546 struct wireless_dev *wdev)
2a519311
JB		 7547{
7548 struct sk_buff *msg;
7549
fd2120ca 7550 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7551 if (!msg)
7552 return;
7553
fd014284 7554 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7555 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 7556 nlmsg_free(msg);
7557 return;
7558 }
7559
463d0183
JB		 7560 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7561 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7562}
7563
807f8a8c
LC		 7564void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
7565 struct net_device *netdev)
7566{
7567 struct sk_buff *msg;
7568
7569 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7570 if (!msg)
7571 return;
7572
7573 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
7574 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
7575 nlmsg_free(msg);
7576 return;
7577 }
7578
7579 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7580 nl80211_scan_mcgrp.id, GFP_KERNEL);
7581}
7582
7583void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
7584 struct net_device *netdev, u32 cmd)
7585{
7586 struct sk_buff *msg;
7587
7588 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
7589 if (!msg)
7590 return;
7591
7592 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
7593 nlmsg_free(msg);
7594 return;
7595 }
7596
7597 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7598 nl80211_scan_mcgrp.id, GFP_KERNEL);
7599}
7600
73d54c9e
LR		 7601/*
7602 * This can happen on global regulatory changes or device specific settings
7603 * based on custom world regulatory domains.
7604 */
7605void nl80211_send_reg_change_event(struct regulatory_request *request)
7606{
7607 struct sk_buff *msg;
7608 void *hdr;
7609
fd2120ca 7610 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 7611 if (!msg)
7612 return;
7613
7614 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
7615 if (!hdr) {
7616 nlmsg_free(msg);
7617 return;
7618 }
7619
7620 /* Userspace can always count this one always being set */
9360ffd1
DM		 7621 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
7622 goto nla_put_failure;
7623
7624 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
7625 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7626 NL80211_REGDOM_TYPE_WORLD))
7627 goto nla_put_failure;
7628 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
7629 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7630 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
7631 goto nla_put_failure;
7632 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
7633 request->intersect) {
7634 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7635 NL80211_REGDOM_TYPE_INTERSECTION))
7636 goto nla_put_failure;
7637 } else {
7638 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7639 NL80211_REGDOM_TYPE_COUNTRY) ||
7640 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
7641 request->alpha2))
7642 goto nla_put_failure;
7643 }
7644
7645 if (wiphy_idx_valid(request->wiphy_idx) &&
7646 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
7647 goto nla_put_failure;
73d54c9e 7648
3b7b72ee 7649 genlmsg_end(msg, hdr);
73d54c9e 7650
bc43b28c 7651 rcu_read_lock();
463d0183 7652 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 7653 GFP_ATOMIC);
7654 rcu_read_unlock();
73d54c9e
LR		 7655
7656 return;
7657
7658nla_put_failure:
7659 genlmsg_cancel(msg, hdr);
7660 nlmsg_free(msg);
7661}
7662
6039f6d2
JM		 7663static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
7664 struct net_device *netdev,
7665 const u8 *buf, size_t len,
e6d6e342 7666 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 7667{
7668 struct sk_buff *msg;
7669 void *hdr;
7670
e6d6e342 7671 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 7672 if (!msg)
7673 return;
7674
7675 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7676 if (!hdr) {
7677 nlmsg_free(msg);
7678 return;
7679 }
7680
9360ffd1
DM		 7681 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7682 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7683 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
7684 goto nla_put_failure;
6039f6d2 7685
3b7b72ee 7686 genlmsg_end(msg, hdr);
6039f6d2 7687
463d0183
JB		 7688 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7689 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 7690 return;
7691
7692 nla_put_failure:
7693 genlmsg_cancel(msg, hdr);
7694 nlmsg_free(msg);
7695}
7696
7697void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7698 struct net_device *netdev, const u8 *buf,
7699 size_t len, gfp_t gfp)
6039f6d2
JM		 7700{
7701 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7702 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 7703}
7704
7705void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
7706 struct net_device *netdev, const u8 *buf,
e6d6e342 7707 size_t len, gfp_t gfp)
6039f6d2 7708{
e6d6e342
JB		 7709 nl80211_send_mlme_event(rdev, netdev, buf, len,
7710 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 7711}
7712
53b46b84 7713void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7714 struct net_device *netdev, const u8 *buf,
7715 size_t len, gfp_t gfp)
6039f6d2
JM		 7716{
7717 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7718 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 7719}
7720
53b46b84
JM		 7721void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
7722 struct net_device *netdev, const u8 *buf,
e6d6e342 7723 size_t len, gfp_t gfp)
6039f6d2
JM		 7724{
7725 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7726 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 7727}
7728
cf4e594e
JM		 7729void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
7730 struct net_device *netdev, const u8 *buf,
7731 size_t len, gfp_t gfp)
7732{
7733 nl80211_send_mlme_event(rdev, netdev, buf, len,
7734 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
7735}
7736
7737void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
7738 struct net_device *netdev, const u8 *buf,
7739 size_t len, gfp_t gfp)
7740{
7741 nl80211_send_mlme_event(rdev, netdev, buf, len,
7742 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
7743}
7744
1b06bb40
LR		 7745static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
7746 struct net_device *netdev, int cmd,
e6d6e342 7747 const u8 *addr, gfp_t gfp)
1965c853
JM		 7748{
7749 struct sk_buff *msg;
7750 void *hdr;
7751
e6d6e342 7752 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 7753 if (!msg)
7754 return;
7755
7756 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7757 if (!hdr) {
7758 nlmsg_free(msg);
7759 return;
7760 }
7761
9360ffd1
DM		 7762 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7763 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7764 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
7765 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
7766 goto nla_put_failure;
1965c853 7767
3b7b72ee 7768 genlmsg_end(msg, hdr);
1965c853 7769
463d0183
JB		 7770 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7771 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 7772 return;
7773
7774 nla_put_failure:
7775 genlmsg_cancel(msg, hdr);
7776 nlmsg_free(msg);
7777}
7778
7779void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7780 struct net_device *netdev, const u8 *addr,
7781 gfp_t gfp)
1965c853
JM		 7782{
7783 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 7784 addr, gfp);
1965c853
JM		 7785}
7786
7787void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7788 struct net_device *netdev, const u8 *addr,
7789 gfp_t gfp)
1965c853 7790{
e6d6e342
JB		 7791 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
7792 addr, gfp);
1965c853
JM		 7793}
7794
b23aa676
SO		 7795void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
7796 struct net_device *netdev, const u8 *bssid,
7797 const u8 *req_ie, size_t req_ie_len,
7798 const u8 *resp_ie, size_t resp_ie_len,
7799 u16 status, gfp_t gfp)
7800{
7801 struct sk_buff *msg;
7802 void *hdr;
7803
7804 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7805 if (!msg)
7806 return;
7807
7808 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
7809 if (!hdr) {
7810 nlmsg_free(msg);
7811 return;
7812 }
7813
9360ffd1
DM		 7814 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7815 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7816 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
7817 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
7818 (req_ie &&
7819 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
7820 (resp_ie &&
7821 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
7822 goto nla_put_failure;
b23aa676 7823
3b7b72ee 7824 genlmsg_end(msg, hdr);
b23aa676 7825
463d0183
JB		 7826 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7827 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 7828 return;
7829
7830 nla_put_failure:
7831 genlmsg_cancel(msg, hdr);
7832 nlmsg_free(msg);
7833
7834}
7835
7836void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
7837 struct net_device *netdev, const u8 *bssid,
7838 const u8 *req_ie, size_t req_ie_len,
7839 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
7840{
7841 struct sk_buff *msg;
7842 void *hdr;
7843
7844 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7845 if (!msg)
7846 return;
7847
7848 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
7849 if (!hdr) {
7850 nlmsg_free(msg);
7851 return;
7852 }
7853
9360ffd1
DM		 7854 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7855 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7856 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
7857 (req_ie &&
7858 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
7859 (resp_ie &&
7860 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
7861 goto nla_put_failure;
b23aa676 7862
3b7b72ee 7863 genlmsg_end(msg, hdr);
b23aa676 7864
463d0183
JB		 7865 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7866 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 7867 return;
7868
7869 nla_put_failure:
7870 genlmsg_cancel(msg, hdr);
7871 nlmsg_free(msg);
7872
7873}
7874
7875void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
7876 struct net_device *netdev, u16 reason,
667503dd 7877 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 7878{
7879 struct sk_buff *msg;
7880 void *hdr;
7881
667503dd 7882 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 7883 if (!msg)
7884 return;
7885
7886 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
7887 if (!hdr) {
7888 nlmsg_free(msg);
7889 return;
7890 }
7891
9360ffd1
DM		 7892 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7893 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7894 (from_ap && reason &&
7895 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
7896 (from_ap &&
7897 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
7898 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
7899 goto nla_put_failure;
b23aa676 7900
3b7b72ee 7901 genlmsg_end(msg, hdr);
b23aa676 7902
463d0183
JB		 7903 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7904 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 7905 return;
7906
7907 nla_put_failure:
7908 genlmsg_cancel(msg, hdr);
7909 nlmsg_free(msg);
7910
7911}
7912
04a773ad
JB		 7913void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
7914 struct net_device *netdev, const u8 *bssid,
7915 gfp_t gfp)
7916{
7917 struct sk_buff *msg;
7918 void *hdr;
7919
fd2120ca 7920 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 7921 if (!msg)
7922 return;
7923
7924 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
7925 if (!hdr) {
7926 nlmsg_free(msg);
7927 return;
7928 }
7929
9360ffd1
DM		 7930 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7931 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7932 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
7933 goto nla_put_failure;
04a773ad 7934
3b7b72ee 7935 genlmsg_end(msg, hdr);
04a773ad 7936
463d0183
JB		 7937 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7938 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 7939 return;
7940
7941 nla_put_failure:
7942 genlmsg_cancel(msg, hdr);
7943 nlmsg_free(msg);
7944}
7945
c93b5e71
JC		 7946void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
7947 struct net_device *netdev,
7948 const u8 *macaddr, const u8* ie, u8 ie_len,
7949 gfp_t gfp)
7950{
7951 struct sk_buff *msg;
7952 void *hdr;
7953
7954 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7955 if (!msg)
7956 return;
7957
7958 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
7959 if (!hdr) {
7960 nlmsg_free(msg);
7961 return;
7962 }
7963
9360ffd1
DM		 7964 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7965 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7966 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
7967 (ie_len && ie &&
7968 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
7969 goto nla_put_failure;
c93b5e71 7970
3b7b72ee 7971 genlmsg_end(msg, hdr);
c93b5e71
JC		 7972
7973 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7974 nl80211_mlme_mcgrp.id, gfp);
7975 return;
7976
7977 nla_put_failure:
7978 genlmsg_cancel(msg, hdr);
7979 nlmsg_free(msg);
7980}
7981
a3b8b056
JM		 7982void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
7983 struct net_device *netdev, const u8 *addr,
7984 enum nl80211_key_type key_type, int key_id,
e6d6e342 7985 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 7986{
7987 struct sk_buff *msg;
7988 void *hdr;
7989
e6d6e342 7990 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 7991 if (!msg)
7992 return;
7993
7994 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
7995 if (!hdr) {
7996 nlmsg_free(msg);
7997 return;
7998 }
7999
9360ffd1
DM		 8000 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8001 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8002 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
8003 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
8004 (key_id != -1 &&
8005 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
8006 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
8007 goto nla_put_failure;
a3b8b056 8008
3b7b72ee 8009 genlmsg_end(msg, hdr);
a3b8b056 8010
463d0183
JB		 8011 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8012 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 8013 return;
8014
8015 nla_put_failure:
8016 genlmsg_cancel(msg, hdr);
8017 nlmsg_free(msg);
8018}
8019
6bad8766
LR		 8020void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
8021 struct ieee80211_channel *channel_before,
8022 struct ieee80211_channel *channel_after)
8023{
8024 struct sk_buff *msg;
8025 void *hdr;
8026 struct nlattr *nl_freq;
8027
fd2120ca 8028 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 8029 if (!msg)
8030 return;
8031
8032 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
8033 if (!hdr) {
8034 nlmsg_free(msg);
8035 return;
8036 }
8037
8038 /*
8039 * Since we are applying the beacon hint to a wiphy we know its
8040 * wiphy_idx is valid
8041 */
9360ffd1
DM		 8042 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8043 goto nla_put_failure;
6bad8766
LR		 8044
8045 /* Before */
8046 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
8047 if (!nl_freq)
8048 goto nla_put_failure;
8049 if (nl80211_msg_put_channel(msg, channel_before))
8050 goto nla_put_failure;
8051 nla_nest_end(msg, nl_freq);
8052
8053 /* After */
8054 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
8055 if (!nl_freq)
8056 goto nla_put_failure;
8057 if (nl80211_msg_put_channel(msg, channel_after))
8058 goto nla_put_failure;
8059 nla_nest_end(msg, nl_freq);
8060
3b7b72ee 8061 genlmsg_end(msg, hdr);
6bad8766 8062
463d0183
JB		 8063 rcu_read_lock();
8064 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
8065 GFP_ATOMIC);
8066 rcu_read_unlock();
6bad8766
LR		 8067
8068 return;
8069
8070nla_put_failure:
8071 genlmsg_cancel(msg, hdr);
8072 nlmsg_free(msg);
8073}
8074
9588bbd5
JM		 8075static void nl80211_send_remain_on_chan_event(
8076 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 8077 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8078 struct ieee80211_channel *chan,
8079 enum nl80211_channel_type channel_type,
8080 unsigned int duration, gfp_t gfp)
8081{
8082 struct sk_buff *msg;
8083 void *hdr;
8084
8085 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8086 if (!msg)
8087 return;
8088
8089 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8090 if (!hdr) {
8091 nlmsg_free(msg);
8092 return;
8093 }
8094
9360ffd1 8095 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8096 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8097 wdev->netdev->ifindex)) ||
8098 nla_put_u32(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9360ffd1
DM		 8099 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
8100 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type) ||
8101 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
8102 goto nla_put_failure;
9588bbd5 8103
9360ffd1
DM		 8104 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
8105 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
8106 goto nla_put_failure;
9588bbd5 8107
3b7b72ee 8108 genlmsg_end(msg, hdr);
9588bbd5
JM		 8109
8110 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8111 nl80211_mlme_mcgrp.id, gfp);
8112 return;
8113
8114 nla_put_failure:
8115 genlmsg_cancel(msg, hdr);
8116 nlmsg_free(msg);
8117}
8118
8119void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
71bbc994 8120 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8121 struct ieee80211_channel *chan,
8122 enum nl80211_channel_type channel_type,
8123 unsigned int duration, gfp_t gfp)
8124{
8125 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 8126 rdev, wdev, cookie, chan,
9588bbd5
JM		 8127 channel_type, duration, gfp);
8128}
8129
8130void nl80211_send_remain_on_channel_cancel(
71bbc994
JB		 8131 struct cfg80211_registered_device *rdev,
8132 struct wireless_dev *wdev,
9588bbd5
JM		 8133 u64 cookie, struct ieee80211_channel *chan,
8134 enum nl80211_channel_type channel_type, gfp_t gfp)
8135{
8136 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
71bbc994 8137 rdev, wdev, cookie, chan,
9588bbd5
JM		 8138 channel_type, 0, gfp);
8139}
8140
98b62183
JB		 8141void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
8142 struct net_device *dev, const u8 *mac_addr,
8143 struct station_info *sinfo, gfp_t gfp)
8144{
8145 struct sk_buff *msg;
8146
8147 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8148 if (!msg)
8149 return;
8150
66266b3a
JL		 8151 if (nl80211_send_station(msg, 0, 0, 0,
8152 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 8153 nlmsg_free(msg);
8154 return;
8155 }
8156
8157 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8158 nl80211_mlme_mcgrp.id, gfp);
8159}
8160
ec15e68b
JM		 8161void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
8162 struct net_device *dev, const u8 *mac_addr,
8163 gfp_t gfp)
8164{
8165 struct sk_buff *msg;
8166 void *hdr;
8167
8168 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8169 if (!msg)
8170 return;
8171
8172 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
8173 if (!hdr) {
8174 nlmsg_free(msg);
8175 return;
8176 }
8177
9360ffd1
DM		 8178 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8179 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
8180 goto nla_put_failure;
ec15e68b 8181
3b7b72ee 8182 genlmsg_end(msg, hdr);
ec15e68b
JM		 8183
8184 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8185 nl80211_mlme_mcgrp.id, gfp);
8186 return;
8187
8188 nla_put_failure:
8189 genlmsg_cancel(msg, hdr);
8190 nlmsg_free(msg);
8191}
8192
b92ab5d8
JB		 8193static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
8194 const u8 *addr, gfp_t gfp)
28946da7
JB		 8195{
8196 struct wireless_dev *wdev = dev->ieee80211_ptr;
8197 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8198 struct sk_buff *msg;
8199 void *hdr;
8200 int err;
8201 u32 nlpid = ACCESS_ONCE(wdev->ap_unexpected_nlpid);
8202
8203 if (!nlpid)
8204 return false;
8205
8206 msg = nlmsg_new(100, gfp);
8207 if (!msg)
8208 return true;
8209
b92ab5d8 8210 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 8211 if (!hdr) {
8212 nlmsg_free(msg);
8213 return true;
8214 }
8215
9360ffd1
DM		 8216 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8217 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8218 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
8219 goto nla_put_failure;
28946da7
JB		 8220
8221 err = genlmsg_end(msg, hdr);
8222 if (err < 0) {
8223 nlmsg_free(msg);
8224 return true;
8225 }
8226
8227 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
8228 return true;
8229
8230 nla_put_failure:
8231 genlmsg_cancel(msg, hdr);
8232 nlmsg_free(msg);
8233 return true;
8234}
8235
b92ab5d8
JB		 8236bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
8237{
8238 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
8239 addr, gfp);
8240}
8241
8242bool nl80211_unexpected_4addr_frame(struct net_device *dev,
8243 const u8 *addr, gfp_t gfp)
8244{
8245 return __nl80211_unexpected_frame(dev,
8246 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
8247 addr, gfp);
8248}
8249
2e161f78 8250int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
71bbc994 8251 struct wireless_dev *wdev, u32 nlpid,
804483e9
JB		 8252 int freq, int sig_dbm,
8253 const u8 *buf, size_t len, gfp_t gfp)
026331c4 8254{
71bbc994 8255 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8256 struct sk_buff *msg;
8257 void *hdr;
026331c4
JM		 8258
8259 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8260 if (!msg)
8261 return -ENOMEM;
8262
2e161f78 8263 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 8264 if (!hdr) {
8265 nlmsg_free(msg);
8266 return -ENOMEM;
8267 }
8268
9360ffd1 8269 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8270 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8271 netdev->ifindex)) ||
9360ffd1
DM		 8272 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8273 (sig_dbm &&
8274 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8275 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
8276 goto nla_put_failure;
026331c4 8277
3b7b72ee 8278 genlmsg_end(msg, hdr);
026331c4 8279
3b7b72ee 8280 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
026331c4
JM		 8281
8282 nla_put_failure:
8283 genlmsg_cancel(msg, hdr);
8284 nlmsg_free(msg);
8285 return -ENOBUFS;
8286}
8287
2e161f78 8288void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
71bbc994 8289 struct wireless_dev *wdev, u64 cookie,
2e161f78
JB		 8290 const u8 *buf, size_t len, bool ack,
8291 gfp_t gfp)
026331c4 8292{
71bbc994 8293 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8294 struct sk_buff *msg;
8295 void *hdr;
8296
8297 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8298 if (!msg)
8299 return;
8300
2e161f78 8301 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 8302 if (!hdr) {
8303 nlmsg_free(msg);
8304 return;
8305 }
8306
9360ffd1 8307 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8308 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8309 netdev->ifindex)) ||
9360ffd1
DM		 8310 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
8311 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8312 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
8313 goto nla_put_failure;
026331c4 8314
3b7b72ee 8315 genlmsg_end(msg, hdr);
026331c4
JM		 8316
8317 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
8318 return;
8319
8320 nla_put_failure:
8321 genlmsg_cancel(msg, hdr);
8322 nlmsg_free(msg);
8323}
8324
d6dc1a38
JO		 8325void
8326nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
8327 struct net_device *netdev,
8328 enum nl80211_cqm_rssi_threshold_event rssi_event,
8329 gfp_t gfp)
8330{
8331 struct sk_buff *msg;
8332 struct nlattr *pinfoattr;
8333 void *hdr;
8334
8335 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8336 if (!msg)
8337 return;
8338
8339 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8340 if (!hdr) {
8341 nlmsg_free(msg);
8342 return;
8343 }
8344
9360ffd1
DM		 8345 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8346 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8347 goto nla_put_failure;
d6dc1a38
JO		 8348
8349 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8350 if (!pinfoattr)
8351 goto nla_put_failure;
8352
9360ffd1
DM		 8353 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
8354 rssi_event))
8355 goto nla_put_failure;
d6dc1a38
JO		 8356
8357 nla_nest_end(msg, pinfoattr);
8358
3b7b72ee 8359 genlmsg_end(msg, hdr);
d6dc1a38
JO		 8360
8361 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8362 nl80211_mlme_mcgrp.id, gfp);
8363 return;
8364
8365 nla_put_failure:
8366 genlmsg_cancel(msg, hdr);
8367 nlmsg_free(msg);
8368}
8369
e5497d76
JB		 8370void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
8371 struct net_device *netdev, const u8 *bssid,
8372 const u8 *replay_ctr, gfp_t gfp)
8373{
8374 struct sk_buff *msg;
8375 struct nlattr *rekey_attr;
8376 void *hdr;
8377
8378 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8379 if (!msg)
8380 return;
8381
8382 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
8383 if (!hdr) {
8384 nlmsg_free(msg);
8385 return;
8386 }
8387
9360ffd1
DM		 8388 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8389 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8390 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8391 goto nla_put_failure;
e5497d76
JB		 8392
8393 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
8394 if (!rekey_attr)
8395 goto nla_put_failure;
8396
9360ffd1
DM		 8397 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
8398 NL80211_REPLAY_CTR_LEN, replay_ctr))
8399 goto nla_put_failure;
e5497d76
JB		 8400
8401 nla_nest_end(msg, rekey_attr);
8402
3b7b72ee 8403 genlmsg_end(msg, hdr);
e5497d76
JB		 8404
8405 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8406 nl80211_mlme_mcgrp.id, gfp);
8407 return;
8408
8409 nla_put_failure:
8410 genlmsg_cancel(msg, hdr);
8411 nlmsg_free(msg);
8412}
8413
c9df56b4
JM		 8414void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
8415 struct net_device *netdev, int index,
8416 const u8 *bssid, bool preauth, gfp_t gfp)
8417{
8418 struct sk_buff *msg;
8419 struct nlattr *attr;
8420 void *hdr;
8421
8422 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8423 if (!msg)
8424 return;
8425
8426 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
8427 if (!hdr) {
8428 nlmsg_free(msg);
8429 return;
8430 }
8431
9360ffd1
DM		 8432 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8433 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8434 goto nla_put_failure;
c9df56b4
JM		 8435
8436 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
8437 if (!attr)
8438 goto nla_put_failure;
8439
9360ffd1
DM		 8440 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
8441 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
8442 (preauth &&
8443 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
8444 goto nla_put_failure;
c9df56b4
JM		 8445
8446 nla_nest_end(msg, attr);
8447
3b7b72ee 8448 genlmsg_end(msg, hdr);
c9df56b4
JM		 8449
8450 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8451 nl80211_mlme_mcgrp.id, gfp);
8452 return;
8453
8454 nla_put_failure:
8455 genlmsg_cancel(msg, hdr);
8456 nlmsg_free(msg);
8457}
8458
5314526b
TP		 8459void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
8460 struct net_device *netdev, int freq,
8461 enum nl80211_channel_type type, gfp_t gfp)
8462{
8463 struct sk_buff *msg;
8464 void *hdr;
8465
8466 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8467 if (!msg)
8468 return;
8469
8470 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
8471 if (!hdr) {
8472 nlmsg_free(msg);
8473 return;
8474 }
8475
7eab0f64
JL		 8476 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8477 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8478 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, type))
8479 goto nla_put_failure;
5314526b
TP		 8480
8481 genlmsg_end(msg, hdr);
8482
8483 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8484 nl80211_mlme_mcgrp.id, gfp);
8485 return;
8486
8487 nla_put_failure:
8488 genlmsg_cancel(msg, hdr);
8489 nlmsg_free(msg);
8490}
8491
c063dbf5
JB		 8492void
8493nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
8494 struct net_device *netdev, const u8 *peer,
8495 u32 num_packets, gfp_t gfp)
8496{
8497 struct sk_buff *msg;
8498 struct nlattr *pinfoattr;
8499 void *hdr;
8500
8501 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8502 if (!msg)
8503 return;
8504
8505 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8506 if (!hdr) {
8507 nlmsg_free(msg);
8508 return;
8509 }
8510
9360ffd1
DM		 8511 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8512 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8513 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8514 goto nla_put_failure;
c063dbf5
JB		 8515
8516 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8517 if (!pinfoattr)
8518 goto nla_put_failure;
8519
9360ffd1
DM		 8520 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
8521 goto nla_put_failure;
c063dbf5
JB		 8522
8523 nla_nest_end(msg, pinfoattr);
8524
3b7b72ee 8525 genlmsg_end(msg, hdr);
c063dbf5
JB		 8526
8527 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8528 nl80211_mlme_mcgrp.id, gfp);
8529 return;
8530
8531 nla_put_failure:
8532 genlmsg_cancel(msg, hdr);
8533 nlmsg_free(msg);
8534}
8535
7f6cf311
JB		 8536void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
8537 u64 cookie, bool acked, gfp_t gfp)
8538{
8539 struct wireless_dev *wdev = dev->ieee80211_ptr;
8540 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8541 struct sk_buff *msg;
8542 void *hdr;
8543 int err;
8544
8545 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8546 if (!msg)
8547 return;
8548
8549 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
8550 if (!hdr) {
8551 nlmsg_free(msg);
8552 return;
8553 }
8554
9360ffd1
DM		 8555 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8556 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8557 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
8558 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8559 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
8560 goto nla_put_failure;
7f6cf311
JB		 8561
8562 err = genlmsg_end(msg, hdr);
8563 if (err < 0) {
8564 nlmsg_free(msg);
8565 return;
8566 }
8567
8568 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8569 nl80211_mlme_mcgrp.id, gfp);
8570 return;
8571
8572 nla_put_failure:
8573 genlmsg_cancel(msg, hdr);
8574 nlmsg_free(msg);
8575}
8576EXPORT_SYMBOL(cfg80211_probe_status);
8577
5e760230
JB		 8578void cfg80211_report_obss_beacon(struct wiphy *wiphy,
8579 const u8 *frame, size_t len,
804483e9 8580 int freq, int sig_dbm, gfp_t gfp)
5e760230
JB		 8581{
8582 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
8583 struct sk_buff *msg;
8584 void *hdr;
8585 u32 nlpid = ACCESS_ONCE(rdev->ap_beacons_nlpid);
8586
8587 if (!nlpid)
8588 return;
8589
8590 msg = nlmsg_new(len + 100, gfp);
8591 if (!msg)
8592 return;
8593
8594 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
8595 if (!hdr) {
8596 nlmsg_free(msg);
8597 return;
8598 }
8599
9360ffd1
DM		 8600 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8601 (freq &&
8602 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
8603 (sig_dbm &&
8604 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8605 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
8606 goto nla_put_failure;
5e760230
JB		 8607
8608 genlmsg_end(msg, hdr);
8609
8610 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
8611 return;
8612
8613 nla_put_failure:
8614 genlmsg_cancel(msg, hdr);
8615 nlmsg_free(msg);
8616}
8617EXPORT_SYMBOL(cfg80211_report_obss_beacon);
8618
026331c4
JM		 8619static int nl80211_netlink_notify(struct notifier_block * nb,
8620 unsigned long state,
8621 void *_notify)
8622{
8623 struct netlink_notify *notify = _notify;
8624 struct cfg80211_registered_device *rdev;
8625 struct wireless_dev *wdev;
8626
8627 if (state != NETLINK_URELEASE)
8628 return NOTIFY_DONE;
8629
8630 rcu_read_lock();
8631
5e760230 8632 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
89a54e48 8633 list_for_each_entry_rcu(wdev, &rdev->wdev_list, list)
2e161f78 8634 cfg80211_mlme_unregister_socket(wdev, notify->pid);
5e760230
JB		 8635 if (rdev->ap_beacons_nlpid == notify->pid)
8636 rdev->ap_beacons_nlpid = 0;
8637 }
026331c4
JM		 8638
8639 rcu_read_unlock();
8640
8641 return NOTIFY_DONE;
8642}
8643
8644static struct notifier_block nl80211_netlink_notifier = {
8645 .notifier_call = nl80211_netlink_notify,
8646};
8647
55682965
JB		 8648/* initialisation/exit functions */
8649
8650int nl80211_init(void)
8651{
0d63cbb5 8652 int err;
55682965 8653
0d63cbb5
MM		 8654 err = genl_register_family_with_ops(&nl80211_fam,
8655 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 8656 if (err)
8657 return err;
8658
55682965
JB		 8659 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
8660 if (err)
8661 goto err_out;
8662
2a519311
JB		 8663 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
8664 if (err)
8665 goto err_out;
8666
73d54c9e
LR		 8667 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
8668 if (err)
8669 goto err_out;
8670
6039f6d2
JM		 8671 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
8672 if (err)
8673 goto err_out;
8674
aff89a9b
JB		 8675#ifdef CONFIG_NL80211_TESTMODE
8676 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
8677 if (err)
8678 goto err_out;
8679#endif
8680
026331c4
JM		 8681 err = netlink_register_notifier(&nl80211_netlink_notifier);
8682 if (err)
8683 goto err_out;
8684
55682965
JB		 8685 return 0;
8686 err_out:
8687 genl_unregister_family(&nl80211_fam);
8688 return err;
8689}
8690
8691void nl80211_exit(void)
8692{
026331c4 8693 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 8694 genl_unregister_family(&nl80211_fam);
8695}
Linux kernel - Deliverables
This page took 1.144062 seconds and 5 git commands to generate.