Merge tag 'master-2014-10-30' of git://git.kernel.org/pub/scm/linux/kernel/git/linvil...
[deliverable/linux.git] / net / mac80211 / cfg.c
1 /*
2 * mac80211 configuration hooks for cfg80211
3 *
4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
5 * Copyright 2013-2014 Intel Mobile Communications GmbH
6 *
7 * This file is GPLv2 as found in COPYING.
8 */
9
10 #include <linux/ieee80211.h>
11 #include <linux/nl80211.h>
12 #include <linux/rtnetlink.h>
13 #include <linux/slab.h>
14 #include <net/net_namespace.h>
15 #include <linux/rcupdate.h>
16 #include <linux/if_ether.h>
17 #include <net/cfg80211.h>
18 #include "ieee80211_i.h"
19 #include "driver-ops.h"
20 #include "cfg.h"
21 #include "rate.h"
22 #include "mesh.h"
23
24 static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
25 const char *name,
26 enum nl80211_iftype type,
27 u32 *flags,
28 struct vif_params *params)
29 {
30 struct ieee80211_local *local = wiphy_priv(wiphy);
31 struct wireless_dev *wdev;
32 struct ieee80211_sub_if_data *sdata;
33 int err;
34
35 err = ieee80211_if_add(local, name, &wdev, type, params);
36 if (err)
37 return ERR_PTR(err);
38
39 if (type == NL80211_IFTYPE_MONITOR && flags) {
40 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
41 sdata->u.mntr_flags = *flags;
42 }
43
44 return wdev;
45 }
46
47 static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
48 {
49 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
50
51 return 0;
52 }
53
54 static int ieee80211_change_iface(struct wiphy *wiphy,
55 struct net_device *dev,
56 enum nl80211_iftype type, u32 *flags,
57 struct vif_params *params)
58 {
59 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
60 int ret;
61
62 ret = ieee80211_if_change_type(sdata, type);
63 if (ret)
64 return ret;
65
66 if (type == NL80211_IFTYPE_AP_VLAN &&
67 params && params->use_4addr == 0)
68 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
69 else if (type == NL80211_IFTYPE_STATION &&
70 params && params->use_4addr >= 0)
71 sdata->u.mgd.use_4addr = params->use_4addr;
72
73 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) {
74 struct ieee80211_local *local = sdata->local;
75
76 if (ieee80211_sdata_running(sdata)) {
77 u32 mask = MONITOR_FLAG_COOK_FRAMES |
78 MONITOR_FLAG_ACTIVE;
79
80 /*
81 * Prohibit MONITOR_FLAG_COOK_FRAMES and
82 * MONITOR_FLAG_ACTIVE to be changed while the
83 * interface is up.
84 * Else we would need to add a lot of cruft
85 * to update everything:
86 * cooked_mntrs, monitor and all fif_* counters
87 * reconfigure hardware
88 */
89 if ((*flags & mask) != (sdata->u.mntr_flags & mask))
90 return -EBUSY;
91
92 ieee80211_adjust_monitor_flags(sdata, -1);
93 sdata->u.mntr_flags = *flags;
94 ieee80211_adjust_monitor_flags(sdata, 1);
95
96 ieee80211_configure_filter(local);
97 } else {
98 /*
99 * Because the interface is down, ieee80211_do_stop
100 * and ieee80211_do_open take care of "everything"
101 * mentioned in the comment above.
102 */
103 sdata->u.mntr_flags = *flags;
104 }
105 }
106
107 return 0;
108 }
109
110 static int ieee80211_start_p2p_device(struct wiphy *wiphy,
111 struct wireless_dev *wdev)
112 {
113 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
114 int ret;
115
116 mutex_lock(&sdata->local->chanctx_mtx);
117 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
118 mutex_unlock(&sdata->local->chanctx_mtx);
119 if (ret < 0)
120 return ret;
121
122 return ieee80211_do_open(wdev, true);
123 }
124
125 static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
126 struct wireless_dev *wdev)
127 {
128 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
129 }
130
131 static int ieee80211_set_noack_map(struct wiphy *wiphy,
132 struct net_device *dev,
133 u16 noack_map)
134 {
135 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
136
137 sdata->noack_map = noack_map;
138 return 0;
139 }
140
141 static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
142 u8 key_idx, bool pairwise, const u8 *mac_addr,
143 struct key_params *params)
144 {
145 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
146 struct ieee80211_local *local = sdata->local;
147 struct sta_info *sta = NULL;
148 const struct ieee80211_cipher_scheme *cs = NULL;
149 struct ieee80211_key *key;
150 int err;
151
152 if (!ieee80211_sdata_running(sdata))
153 return -ENETDOWN;
154
155 /* reject WEP and TKIP keys if WEP failed to initialize */
156 switch (params->cipher) {
157 case WLAN_CIPHER_SUITE_WEP40:
158 case WLAN_CIPHER_SUITE_TKIP:
159 case WLAN_CIPHER_SUITE_WEP104:
160 if (IS_ERR(local->wep_tx_tfm))
161 return -EINVAL;
162 break;
163 case WLAN_CIPHER_SUITE_CCMP:
164 case WLAN_CIPHER_SUITE_AES_CMAC:
165 case WLAN_CIPHER_SUITE_GCMP:
166 break;
167 default:
168 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
169 break;
170 }
171
172 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
173 params->key, params->seq_len, params->seq,
174 cs);
175 if (IS_ERR(key))
176 return PTR_ERR(key);
177
178 if (pairwise)
179 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
180
181 mutex_lock(&local->sta_mtx);
182
183 if (mac_addr) {
184 if (ieee80211_vif_is_mesh(&sdata->vif))
185 sta = sta_info_get(sdata, mac_addr);
186 else
187 sta = sta_info_get_bss(sdata, mac_addr);
188 /*
189 * The ASSOC test makes sure the driver is ready to
190 * receive the key. When wpa_supplicant has roamed
191 * using FT, it attempts to set the key before
192 * association has completed, this rejects that attempt
193 * so it will set the key again after assocation.
194 *
195 * TODO: accept the key if we have a station entry and
196 * add it to the device after the station.
197 */
198 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
199 ieee80211_key_free_unused(key);
200 err = -ENOENT;
201 goto out_unlock;
202 }
203 }
204
205 switch (sdata->vif.type) {
206 case NL80211_IFTYPE_STATION:
207 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
208 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
209 break;
210 case NL80211_IFTYPE_AP:
211 case NL80211_IFTYPE_AP_VLAN:
212 /* Keys without a station are used for TX only */
213 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
214 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
215 break;
216 case NL80211_IFTYPE_ADHOC:
217 /* no MFP (yet) */
218 break;
219 case NL80211_IFTYPE_MESH_POINT:
220 #ifdef CONFIG_MAC80211_MESH
221 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
222 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
223 break;
224 #endif
225 case NL80211_IFTYPE_WDS:
226 case NL80211_IFTYPE_MONITOR:
227 case NL80211_IFTYPE_P2P_DEVICE:
228 case NL80211_IFTYPE_UNSPECIFIED:
229 case NUM_NL80211_IFTYPES:
230 case NL80211_IFTYPE_P2P_CLIENT:
231 case NL80211_IFTYPE_P2P_GO:
232 /* shouldn't happen */
233 WARN_ON_ONCE(1);
234 break;
235 }
236
237 if (sta)
238 sta->cipher_scheme = cs;
239
240 err = ieee80211_key_link(key, sdata, sta);
241
242 out_unlock:
243 mutex_unlock(&local->sta_mtx);
244
245 return err;
246 }
247
248 static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
249 u8 key_idx, bool pairwise, const u8 *mac_addr)
250 {
251 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
252 struct ieee80211_local *local = sdata->local;
253 struct sta_info *sta;
254 struct ieee80211_key *key = NULL;
255 int ret;
256
257 mutex_lock(&local->sta_mtx);
258 mutex_lock(&local->key_mtx);
259
260 if (mac_addr) {
261 ret = -ENOENT;
262
263 sta = sta_info_get_bss(sdata, mac_addr);
264 if (!sta)
265 goto out_unlock;
266
267 if (pairwise)
268 key = key_mtx_dereference(local, sta->ptk[key_idx]);
269 else
270 key = key_mtx_dereference(local, sta->gtk[key_idx]);
271 } else
272 key = key_mtx_dereference(local, sdata->keys[key_idx]);
273
274 if (!key) {
275 ret = -ENOENT;
276 goto out_unlock;
277 }
278
279 ieee80211_key_free(key, true);
280
281 ret = 0;
282 out_unlock:
283 mutex_unlock(&local->key_mtx);
284 mutex_unlock(&local->sta_mtx);
285
286 return ret;
287 }
288
289 static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
290 u8 key_idx, bool pairwise, const u8 *mac_addr,
291 void *cookie,
292 void (*callback)(void *cookie,
293 struct key_params *params))
294 {
295 struct ieee80211_sub_if_data *sdata;
296 struct sta_info *sta = NULL;
297 u8 seq[6] = {0};
298 struct key_params params;
299 struct ieee80211_key *key = NULL;
300 u64 pn64;
301 u32 iv32;
302 u16 iv16;
303 int err = -ENOENT;
304
305 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
306
307 rcu_read_lock();
308
309 if (mac_addr) {
310 sta = sta_info_get_bss(sdata, mac_addr);
311 if (!sta)
312 goto out;
313
314 if (pairwise && key_idx < NUM_DEFAULT_KEYS)
315 key = rcu_dereference(sta->ptk[key_idx]);
316 else if (!pairwise &&
317 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
318 key = rcu_dereference(sta->gtk[key_idx]);
319 } else
320 key = rcu_dereference(sdata->keys[key_idx]);
321
322 if (!key)
323 goto out;
324
325 memset(&params, 0, sizeof(params));
326
327 params.cipher = key->conf.cipher;
328
329 switch (key->conf.cipher) {
330 case WLAN_CIPHER_SUITE_TKIP:
331 iv32 = key->u.tkip.tx.iv32;
332 iv16 = key->u.tkip.tx.iv16;
333
334 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)
335 drv_get_tkip_seq(sdata->local,
336 key->conf.hw_key_idx,
337 &iv32, &iv16);
338
339 seq[0] = iv16 & 0xff;
340 seq[1] = (iv16 >> 8) & 0xff;
341 seq[2] = iv32 & 0xff;
342 seq[3] = (iv32 >> 8) & 0xff;
343 seq[4] = (iv32 >> 16) & 0xff;
344 seq[5] = (iv32 >> 24) & 0xff;
345 params.seq = seq;
346 params.seq_len = 6;
347 break;
348 case WLAN_CIPHER_SUITE_CCMP:
349 pn64 = atomic64_read(&key->u.ccmp.tx_pn);
350 seq[0] = pn64;
351 seq[1] = pn64 >> 8;
352 seq[2] = pn64 >> 16;
353 seq[3] = pn64 >> 24;
354 seq[4] = pn64 >> 32;
355 seq[5] = pn64 >> 40;
356 params.seq = seq;
357 params.seq_len = 6;
358 break;
359 case WLAN_CIPHER_SUITE_AES_CMAC:
360 pn64 = atomic64_read(&key->u.aes_cmac.tx_pn);
361 seq[0] = pn64;
362 seq[1] = pn64 >> 8;
363 seq[2] = pn64 >> 16;
364 seq[3] = pn64 >> 24;
365 seq[4] = pn64 >> 32;
366 seq[5] = pn64 >> 40;
367 params.seq = seq;
368 params.seq_len = 6;
369 break;
370 }
371
372 params.key = key->conf.key;
373 params.key_len = key->conf.keylen;
374
375 callback(cookie, &params);
376 err = 0;
377
378 out:
379 rcu_read_unlock();
380 return err;
381 }
382
383 static int ieee80211_config_default_key(struct wiphy *wiphy,
384 struct net_device *dev,
385 u8 key_idx, bool uni,
386 bool multi)
387 {
388 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
389
390 ieee80211_set_default_key(sdata, key_idx, uni, multi);
391
392 return 0;
393 }
394
395 static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
396 struct net_device *dev,
397 u8 key_idx)
398 {
399 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
400
401 ieee80211_set_default_mgmt_key(sdata, key_idx);
402
403 return 0;
404 }
405
406 void sta_set_rate_info_tx(struct sta_info *sta,
407 const struct ieee80211_tx_rate *rate,
408 struct rate_info *rinfo)
409 {
410 rinfo->flags = 0;
411 if (rate->flags & IEEE80211_TX_RC_MCS) {
412 rinfo->flags |= RATE_INFO_FLAGS_MCS;
413 rinfo->mcs = rate->idx;
414 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
415 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
416 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
417 rinfo->nss = ieee80211_rate_get_vht_nss(rate);
418 } else {
419 struct ieee80211_supported_band *sband;
420 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
421 u16 brate;
422
423 sband = sta->local->hw.wiphy->bands[
424 ieee80211_get_sdata_band(sta->sdata)];
425 brate = sband->bitrates[rate->idx].bitrate;
426 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
427 }
428 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
429 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
430 if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
431 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
432 if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
433 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
434 if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
435 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
436 }
437
438 void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo)
439 {
440 rinfo->flags = 0;
441
442 if (sta->last_rx_rate_flag & RX_FLAG_HT) {
443 rinfo->flags |= RATE_INFO_FLAGS_MCS;
444 rinfo->mcs = sta->last_rx_rate_idx;
445 } else if (sta->last_rx_rate_flag & RX_FLAG_VHT) {
446 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
447 rinfo->nss = sta->last_rx_rate_vht_nss;
448 rinfo->mcs = sta->last_rx_rate_idx;
449 } else {
450 struct ieee80211_supported_band *sband;
451 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
452 u16 brate;
453
454 sband = sta->local->hw.wiphy->bands[
455 ieee80211_get_sdata_band(sta->sdata)];
456 brate = sband->bitrates[sta->last_rx_rate_idx].bitrate;
457 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
458 }
459
460 if (sta->last_rx_rate_flag & RX_FLAG_40MHZ)
461 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
462 if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI)
463 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
464 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80MHZ)
465 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
466 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80P80MHZ)
467 rinfo->flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
468 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_160MHZ)
469 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
470 }
471
472 static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
473 int idx, u8 *mac, struct station_info *sinfo)
474 {
475 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
476 struct ieee80211_local *local = sdata->local;
477 struct sta_info *sta;
478 int ret = -ENOENT;
479
480 mutex_lock(&local->sta_mtx);
481
482 sta = sta_info_get_by_idx(sdata, idx);
483 if (sta) {
484 ret = 0;
485 memcpy(mac, sta->sta.addr, ETH_ALEN);
486 sta_set_sinfo(sta, sinfo);
487 }
488
489 mutex_unlock(&local->sta_mtx);
490
491 return ret;
492 }
493
494 static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
495 int idx, struct survey_info *survey)
496 {
497 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
498
499 return drv_get_survey(local, idx, survey);
500 }
501
502 static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
503 const u8 *mac, struct station_info *sinfo)
504 {
505 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
506 struct ieee80211_local *local = sdata->local;
507 struct sta_info *sta;
508 int ret = -ENOENT;
509
510 mutex_lock(&local->sta_mtx);
511
512 sta = sta_info_get_bss(sdata, mac);
513 if (sta) {
514 ret = 0;
515 sta_set_sinfo(sta, sinfo);
516 }
517
518 mutex_unlock(&local->sta_mtx);
519
520 return ret;
521 }
522
523 static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
524 struct cfg80211_chan_def *chandef)
525 {
526 struct ieee80211_local *local = wiphy_priv(wiphy);
527 struct ieee80211_sub_if_data *sdata;
528 int ret = 0;
529
530 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
531 return 0;
532
533 mutex_lock(&local->mtx);
534 mutex_lock(&local->iflist_mtx);
535 if (local->use_chanctx) {
536 sdata = rcu_dereference_protected(
537 local->monitor_sdata,
538 lockdep_is_held(&local->iflist_mtx));
539 if (sdata) {
540 ieee80211_vif_release_channel(sdata);
541 ret = ieee80211_vif_use_channel(sdata, chandef,
542 IEEE80211_CHANCTX_EXCLUSIVE);
543 }
544 } else if (local->open_count == local->monitors) {
545 local->_oper_chandef = *chandef;
546 ieee80211_hw_config(local, 0);
547 }
548
549 if (ret == 0)
550 local->monitor_chandef = *chandef;
551 mutex_unlock(&local->iflist_mtx);
552 mutex_unlock(&local->mtx);
553
554 return ret;
555 }
556
557 static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
558 const u8 *resp, size_t resp_len,
559 const struct ieee80211_csa_settings *csa)
560 {
561 struct probe_resp *new, *old;
562
563 if (!resp || !resp_len)
564 return 1;
565
566 old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
567
568 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
569 if (!new)
570 return -ENOMEM;
571
572 new->len = resp_len;
573 memcpy(new->data, resp, resp_len);
574
575 if (csa)
576 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
577 csa->n_counter_offsets_presp *
578 sizeof(new->csa_counter_offsets[0]));
579
580 rcu_assign_pointer(sdata->u.ap.probe_resp, new);
581 if (old)
582 kfree_rcu(old, rcu_head);
583
584 return 0;
585 }
586
587 static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
588 struct cfg80211_beacon_data *params,
589 const struct ieee80211_csa_settings *csa)
590 {
591 struct beacon_data *new, *old;
592 int new_head_len, new_tail_len;
593 int size, err;
594 u32 changed = BSS_CHANGED_BEACON;
595
596 old = sdata_dereference(sdata->u.ap.beacon, sdata);
597
598
599 /* Need to have a beacon head if we don't have one yet */
600 if (!params->head && !old)
601 return -EINVAL;
602
603 /* new or old head? */
604 if (params->head)
605 new_head_len = params->head_len;
606 else
607 new_head_len = old->head_len;
608
609 /* new or old tail? */
610 if (params->tail || !old)
611 /* params->tail_len will be zero for !params->tail */
612 new_tail_len = params->tail_len;
613 else
614 new_tail_len = old->tail_len;
615
616 size = sizeof(*new) + new_head_len + new_tail_len;
617
618 new = kzalloc(size, GFP_KERNEL);
619 if (!new)
620 return -ENOMEM;
621
622 /* start filling the new info now */
623
624 /*
625 * pointers go into the block we allocated,
626 * memory is | beacon_data | head | tail |
627 */
628 new->head = ((u8 *) new) + sizeof(*new);
629 new->tail = new->head + new_head_len;
630 new->head_len = new_head_len;
631 new->tail_len = new_tail_len;
632
633 if (csa) {
634 new->csa_current_counter = csa->count;
635 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
636 csa->n_counter_offsets_beacon *
637 sizeof(new->csa_counter_offsets[0]));
638 }
639
640 /* copy in head */
641 if (params->head)
642 memcpy(new->head, params->head, new_head_len);
643 else
644 memcpy(new->head, old->head, new_head_len);
645
646 /* copy in optional tail */
647 if (params->tail)
648 memcpy(new->tail, params->tail, new_tail_len);
649 else
650 if (old)
651 memcpy(new->tail, old->tail, new_tail_len);
652
653 err = ieee80211_set_probe_resp(sdata, params->probe_resp,
654 params->probe_resp_len, csa);
655 if (err < 0)
656 return err;
657 if (err == 0)
658 changed |= BSS_CHANGED_AP_PROBE_RESP;
659
660 rcu_assign_pointer(sdata->u.ap.beacon, new);
661
662 if (old)
663 kfree_rcu(old, rcu_head);
664
665 return changed;
666 }
667
668 static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
669 struct cfg80211_ap_settings *params)
670 {
671 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
672 struct ieee80211_local *local = sdata->local;
673 struct beacon_data *old;
674 struct ieee80211_sub_if_data *vlan;
675 u32 changed = BSS_CHANGED_BEACON_INT |
676 BSS_CHANGED_BEACON_ENABLED |
677 BSS_CHANGED_BEACON |
678 BSS_CHANGED_SSID |
679 BSS_CHANGED_P2P_PS;
680 int err;
681
682 old = sdata_dereference(sdata->u.ap.beacon, sdata);
683 if (old)
684 return -EALREADY;
685
686 switch (params->smps_mode) {
687 case NL80211_SMPS_OFF:
688 sdata->smps_mode = IEEE80211_SMPS_OFF;
689 break;
690 case NL80211_SMPS_STATIC:
691 sdata->smps_mode = IEEE80211_SMPS_STATIC;
692 break;
693 case NL80211_SMPS_DYNAMIC:
694 sdata->smps_mode = IEEE80211_SMPS_DYNAMIC;
695 break;
696 default:
697 return -EINVAL;
698 }
699 sdata->needed_rx_chains = sdata->local->rx_chains;
700
701 mutex_lock(&local->mtx);
702 err = ieee80211_vif_use_channel(sdata, &params->chandef,
703 IEEE80211_CHANCTX_SHARED);
704 if (!err)
705 ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
706 mutex_unlock(&local->mtx);
707 if (err)
708 return err;
709
710 /*
711 * Apply control port protocol, this allows us to
712 * not encrypt dynamic WEP control frames.
713 */
714 sdata->control_port_protocol = params->crypto.control_port_ethertype;
715 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
716 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
717 &params->crypto,
718 sdata->vif.type);
719
720 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
721 vlan->control_port_protocol =
722 params->crypto.control_port_ethertype;
723 vlan->control_port_no_encrypt =
724 params->crypto.control_port_no_encrypt;
725 vlan->encrypt_headroom =
726 ieee80211_cs_headroom(sdata->local,
727 &params->crypto,
728 vlan->vif.type);
729 }
730
731 sdata->vif.bss_conf.beacon_int = params->beacon_interval;
732 sdata->vif.bss_conf.dtim_period = params->dtim_period;
733 sdata->vif.bss_conf.enable_beacon = true;
734
735 sdata->vif.bss_conf.ssid_len = params->ssid_len;
736 if (params->ssid_len)
737 memcpy(sdata->vif.bss_conf.ssid, params->ssid,
738 params->ssid_len);
739 sdata->vif.bss_conf.hidden_ssid =
740 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
741
742 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
743 sizeof(sdata->vif.bss_conf.p2p_noa_attr));
744 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
745 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
746 if (params->p2p_opp_ps)
747 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
748 IEEE80211_P2P_OPPPS_ENABLE_BIT;
749
750 err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
751 if (err < 0) {
752 ieee80211_vif_release_channel(sdata);
753 return err;
754 }
755 changed |= err;
756
757 err = drv_start_ap(sdata->local, sdata);
758 if (err) {
759 old = sdata_dereference(sdata->u.ap.beacon, sdata);
760
761 if (old)
762 kfree_rcu(old, rcu_head);
763 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
764 ieee80211_vif_release_channel(sdata);
765 return err;
766 }
767
768 ieee80211_recalc_dtim(local, sdata);
769 ieee80211_bss_info_change_notify(sdata, changed);
770
771 netif_carrier_on(dev);
772 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
773 netif_carrier_on(vlan->dev);
774
775 return 0;
776 }
777
778 static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
779 struct cfg80211_beacon_data *params)
780 {
781 struct ieee80211_sub_if_data *sdata;
782 struct beacon_data *old;
783 int err;
784
785 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
786 sdata_assert_lock(sdata);
787
788 /* don't allow changing the beacon while CSA is in place - offset
789 * of channel switch counter may change
790 */
791 if (sdata->vif.csa_active)
792 return -EBUSY;
793
794 old = sdata_dereference(sdata->u.ap.beacon, sdata);
795 if (!old)
796 return -ENOENT;
797
798 err = ieee80211_assign_beacon(sdata, params, NULL);
799 if (err < 0)
800 return err;
801 ieee80211_bss_info_change_notify(sdata, err);
802 return 0;
803 }
804
805 static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
806 {
807 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
808 struct ieee80211_sub_if_data *vlan;
809 struct ieee80211_local *local = sdata->local;
810 struct beacon_data *old_beacon;
811 struct probe_resp *old_probe_resp;
812 struct cfg80211_chan_def chandef;
813
814 sdata_assert_lock(sdata);
815
816 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
817 if (!old_beacon)
818 return -ENOENT;
819 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
820
821 /* abort any running channel switch */
822 mutex_lock(&local->mtx);
823 sdata->vif.csa_active = false;
824 if (sdata->csa_block_tx) {
825 ieee80211_wake_vif_queues(local, sdata,
826 IEEE80211_QUEUE_STOP_REASON_CSA);
827 sdata->csa_block_tx = false;
828 }
829
830 mutex_unlock(&local->mtx);
831
832 kfree(sdata->u.ap.next_beacon);
833 sdata->u.ap.next_beacon = NULL;
834
835 /* turn off carrier for this interface and dependent VLANs */
836 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
837 netif_carrier_off(vlan->dev);
838 netif_carrier_off(dev);
839
840 /* remove beacon and probe response */
841 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
842 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
843 kfree_rcu(old_beacon, rcu_head);
844 if (old_probe_resp)
845 kfree_rcu(old_probe_resp, rcu_head);
846 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
847
848 __sta_info_flush(sdata, true);
849 ieee80211_free_keys(sdata, true);
850
851 sdata->vif.bss_conf.enable_beacon = false;
852 sdata->vif.bss_conf.ssid_len = 0;
853 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
854 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
855
856 if (sdata->wdev.cac_started) {
857 chandef = sdata->vif.bss_conf.chandef;
858 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
859 cfg80211_cac_event(sdata->dev, &chandef,
860 NL80211_RADAR_CAC_ABORTED,
861 GFP_KERNEL);
862 }
863
864 drv_stop_ap(sdata->local, sdata);
865
866 /* free all potentially still buffered bcast frames */
867 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
868 skb_queue_purge(&sdata->u.ap.ps.bc_buf);
869
870 mutex_lock(&local->mtx);
871 ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
872 ieee80211_vif_release_channel(sdata);
873 mutex_unlock(&local->mtx);
874
875 return 0;
876 }
877
878 /* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
879 struct iapp_layer2_update {
880 u8 da[ETH_ALEN]; /* broadcast */
881 u8 sa[ETH_ALEN]; /* STA addr */
882 __be16 len; /* 6 */
883 u8 dsap; /* 0 */
884 u8 ssap; /* 0 */
885 u8 control;
886 u8 xid_info[3];
887 } __packed;
888
889 static void ieee80211_send_layer2_update(struct sta_info *sta)
890 {
891 struct iapp_layer2_update *msg;
892 struct sk_buff *skb;
893
894 /* Send Level 2 Update Frame to update forwarding tables in layer 2
895 * bridge devices */
896
897 skb = dev_alloc_skb(sizeof(*msg));
898 if (!skb)
899 return;
900 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
901
902 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
903 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
904
905 eth_broadcast_addr(msg->da);
906 memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
907 msg->len = htons(6);
908 msg->dsap = 0;
909 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */
910 msg->control = 0xaf; /* XID response lsb.1111F101.
911 * F=0 (no poll command; unsolicited frame) */
912 msg->xid_info[0] = 0x81; /* XID format identifier */
913 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */
914 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */
915
916 skb->dev = sta->sdata->dev;
917 skb->protocol = eth_type_trans(skb, sta->sdata->dev);
918 memset(skb->cb, 0, sizeof(skb->cb));
919 netif_rx_ni(skb);
920 }
921
922 static int sta_apply_auth_flags(struct ieee80211_local *local,
923 struct sta_info *sta,
924 u32 mask, u32 set)
925 {
926 int ret;
927
928 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
929 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
930 !test_sta_flag(sta, WLAN_STA_AUTH)) {
931 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
932 if (ret)
933 return ret;
934 }
935
936 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
937 set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
938 !test_sta_flag(sta, WLAN_STA_ASSOC)) {
939 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
940 if (ret)
941 return ret;
942 }
943
944 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
945 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
946 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
947 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
948 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
949 else
950 ret = 0;
951 if (ret)
952 return ret;
953 }
954
955 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
956 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
957 test_sta_flag(sta, WLAN_STA_ASSOC)) {
958 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
959 if (ret)
960 return ret;
961 }
962
963 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
964 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
965 test_sta_flag(sta, WLAN_STA_AUTH)) {
966 ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
967 if (ret)
968 return ret;
969 }
970
971 return 0;
972 }
973
974 static int sta_apply_parameters(struct ieee80211_local *local,
975 struct sta_info *sta,
976 struct station_parameters *params)
977 {
978 int ret = 0;
979 struct ieee80211_supported_band *sband;
980 struct ieee80211_sub_if_data *sdata = sta->sdata;
981 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
982 u32 mask, set;
983
984 sband = local->hw.wiphy->bands[band];
985
986 mask = params->sta_flags_mask;
987 set = params->sta_flags_set;
988
989 if (ieee80211_vif_is_mesh(&sdata->vif)) {
990 /*
991 * In mesh mode, ASSOCIATED isn't part of the nl80211
992 * API but must follow AUTHENTICATED for driver state.
993 */
994 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
995 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
996 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
997 set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
998 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
999 /*
1000 * TDLS -- everything follows authorized, but
1001 * only becoming authorized is possible, not
1002 * going back
1003 */
1004 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1005 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1006 BIT(NL80211_STA_FLAG_ASSOCIATED);
1007 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1008 BIT(NL80211_STA_FLAG_ASSOCIATED);
1009 }
1010 }
1011
1012 /* auth flags will be set later for TDLS stations */
1013 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1014 ret = sta_apply_auth_flags(local, sta, mask, set);
1015 if (ret)
1016 return ret;
1017 }
1018
1019 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
1020 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1021 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1022 else
1023 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1024 }
1025
1026 if (mask & BIT(NL80211_STA_FLAG_WME))
1027 sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME);
1028
1029 if (mask & BIT(NL80211_STA_FLAG_MFP)) {
1030 if (set & BIT(NL80211_STA_FLAG_MFP))
1031 set_sta_flag(sta, WLAN_STA_MFP);
1032 else
1033 clear_sta_flag(sta, WLAN_STA_MFP);
1034 }
1035
1036 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
1037 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1038 set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1039 else
1040 clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
1041 }
1042
1043 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1044 sta->sta.uapsd_queues = params->uapsd_queues;
1045 sta->sta.max_sp = params->max_sp;
1046 }
1047
1048 /*
1049 * cfg80211 validates this (1-2007) and allows setting the AID
1050 * only when creating a new station entry
1051 */
1052 if (params->aid)
1053 sta->sta.aid = params->aid;
1054
1055 /*
1056 * Some of the following updates would be racy if called on an
1057 * existing station, via ieee80211_change_station(). However,
1058 * all such changes are rejected by cfg80211 except for updates
1059 * changing the supported rates on an existing but not yet used
1060 * TDLS peer.
1061 */
1062
1063 if (params->listen_interval >= 0)
1064 sta->listen_interval = params->listen_interval;
1065
1066 if (params->supported_rates) {
1067 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1068 sband, params->supported_rates,
1069 params->supported_rates_len,
1070 &sta->sta.supp_rates[band]);
1071 }
1072
1073 if (params->ht_capa)
1074 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
1075 params->ht_capa, sta);
1076
1077 if (params->vht_capa)
1078 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
1079 params->vht_capa, sta);
1080
1081 if (params->opmode_notif_used) {
1082 /* returned value is only needed for rc update, but the
1083 * rc isn't initialized here yet, so ignore it
1084 */
1085 __ieee80211_vht_handle_opmode(sdata, sta,
1086 params->opmode_notif,
1087 band, false);
1088 }
1089
1090 if (ieee80211_vif_is_mesh(&sdata->vif)) {
1091 #ifdef CONFIG_MAC80211_MESH
1092 u32 changed = 0;
1093
1094 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1095 switch (params->plink_state) {
1096 case NL80211_PLINK_ESTAB:
1097 if (sta->plink_state != NL80211_PLINK_ESTAB)
1098 changed = mesh_plink_inc_estab_count(
1099 sdata);
1100 sta->plink_state = params->plink_state;
1101
1102 ieee80211_mps_sta_status_update(sta);
1103 changed |= ieee80211_mps_set_sta_local_pm(sta,
1104 sdata->u.mesh.mshcfg.power_mode);
1105 break;
1106 case NL80211_PLINK_LISTEN:
1107 case NL80211_PLINK_BLOCKED:
1108 case NL80211_PLINK_OPN_SNT:
1109 case NL80211_PLINK_OPN_RCVD:
1110 case NL80211_PLINK_CNF_RCVD:
1111 case NL80211_PLINK_HOLDING:
1112 if (sta->plink_state == NL80211_PLINK_ESTAB)
1113 changed = mesh_plink_dec_estab_count(
1114 sdata);
1115 sta->plink_state = params->plink_state;
1116
1117 ieee80211_mps_sta_status_update(sta);
1118 changed |= ieee80211_mps_set_sta_local_pm(sta,
1119 NL80211_MESH_POWER_UNKNOWN);
1120 break;
1121 default:
1122 /* nothing */
1123 break;
1124 }
1125 }
1126
1127 switch (params->plink_action) {
1128 case NL80211_PLINK_ACTION_NO_ACTION:
1129 /* nothing */
1130 break;
1131 case NL80211_PLINK_ACTION_OPEN:
1132 changed |= mesh_plink_open(sta);
1133 break;
1134 case NL80211_PLINK_ACTION_BLOCK:
1135 changed |= mesh_plink_block(sta);
1136 break;
1137 }
1138
1139 if (params->local_pm)
1140 changed |=
1141 ieee80211_mps_set_sta_local_pm(sta,
1142 params->local_pm);
1143 ieee80211_mbss_info_change_notify(sdata, changed);
1144 #endif
1145 }
1146
1147 /* set the STA state after all sta info from usermode has been set */
1148 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1149 ret = sta_apply_auth_flags(local, sta, mask, set);
1150 if (ret)
1151 return ret;
1152 }
1153
1154 return 0;
1155 }
1156
1157 static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
1158 const u8 *mac,
1159 struct station_parameters *params)
1160 {
1161 struct ieee80211_local *local = wiphy_priv(wiphy);
1162 struct sta_info *sta;
1163 struct ieee80211_sub_if_data *sdata;
1164 int err;
1165 int layer2_update;
1166
1167 if (params->vlan) {
1168 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1169
1170 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1171 sdata->vif.type != NL80211_IFTYPE_AP)
1172 return -EINVAL;
1173 } else
1174 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1175
1176 if (ether_addr_equal(mac, sdata->vif.addr))
1177 return -EINVAL;
1178
1179 if (is_multicast_ether_addr(mac))
1180 return -EINVAL;
1181
1182 sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
1183 if (!sta)
1184 return -ENOMEM;
1185
1186 /*
1187 * defaults -- if userspace wants something else we'll
1188 * change it accordingly in sta_apply_parameters()
1189 */
1190 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) {
1191 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
1192 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
1193 } else {
1194 sta->sta.tdls = true;
1195 }
1196
1197 err = sta_apply_parameters(local, sta, params);
1198 if (err) {
1199 sta_info_free(local, sta);
1200 return err;
1201 }
1202
1203 /*
1204 * for TDLS, rate control should be initialized only when
1205 * rates are known and station is marked authorized
1206 */
1207 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER))
1208 rate_control_rate_init(sta);
1209
1210 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1211 sdata->vif.type == NL80211_IFTYPE_AP;
1212
1213 err = sta_info_insert_rcu(sta);
1214 if (err) {
1215 rcu_read_unlock();
1216 return err;
1217 }
1218
1219 if (layer2_update)
1220 ieee80211_send_layer2_update(sta);
1221
1222 rcu_read_unlock();
1223
1224 return 0;
1225 }
1226
1227 static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
1228 const u8 *mac)
1229 {
1230 struct ieee80211_sub_if_data *sdata;
1231
1232 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1233
1234 if (mac)
1235 return sta_info_destroy_addr_bss(sdata, mac);
1236
1237 sta_info_flush(sdata);
1238 return 0;
1239 }
1240
1241 static int ieee80211_change_station(struct wiphy *wiphy,
1242 struct net_device *dev, const u8 *mac,
1243 struct station_parameters *params)
1244 {
1245 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1246 struct ieee80211_local *local = wiphy_priv(wiphy);
1247 struct sta_info *sta;
1248 struct ieee80211_sub_if_data *vlansdata;
1249 enum cfg80211_station_type statype;
1250 int err;
1251
1252 mutex_lock(&local->sta_mtx);
1253
1254 sta = sta_info_get_bss(sdata, mac);
1255 if (!sta) {
1256 err = -ENOENT;
1257 goto out_err;
1258 }
1259
1260 switch (sdata->vif.type) {
1261 case NL80211_IFTYPE_MESH_POINT:
1262 if (sdata->u.mesh.user_mpm)
1263 statype = CFG80211_STA_MESH_PEER_USER;
1264 else
1265 statype = CFG80211_STA_MESH_PEER_KERNEL;
1266 break;
1267 case NL80211_IFTYPE_ADHOC:
1268 statype = CFG80211_STA_IBSS;
1269 break;
1270 case NL80211_IFTYPE_STATION:
1271 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1272 statype = CFG80211_STA_AP_STA;
1273 break;
1274 }
1275 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1276 statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1277 else
1278 statype = CFG80211_STA_TDLS_PEER_SETUP;
1279 break;
1280 case NL80211_IFTYPE_AP:
1281 case NL80211_IFTYPE_AP_VLAN:
1282 statype = CFG80211_STA_AP_CLIENT;
1283 break;
1284 default:
1285 err = -EOPNOTSUPP;
1286 goto out_err;
1287 }
1288
1289 err = cfg80211_check_station_change(wiphy, params, statype);
1290 if (err)
1291 goto out_err;
1292
1293 if (params->vlan && params->vlan != sta->sdata->dev) {
1294 bool prev_4addr = false;
1295 bool new_4addr = false;
1296
1297 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1298
1299 if (params->vlan->ieee80211_ptr->use_4addr) {
1300 if (vlansdata->u.vlan.sta) {
1301 err = -EBUSY;
1302 goto out_err;
1303 }
1304
1305 rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
1306 new_4addr = true;
1307 }
1308
1309 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1310 sta->sdata->u.vlan.sta) {
1311 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
1312 prev_4addr = true;
1313 }
1314
1315 sta->sdata = vlansdata;
1316
1317 if (sta->sta_state == IEEE80211_STA_AUTHORIZED &&
1318 prev_4addr != new_4addr) {
1319 if (new_4addr)
1320 atomic_dec(&sta->sdata->bss->num_mcast_sta);
1321 else
1322 atomic_inc(&sta->sdata->bss->num_mcast_sta);
1323 }
1324
1325 ieee80211_send_layer2_update(sta);
1326 }
1327
1328 err = sta_apply_parameters(local, sta, params);
1329 if (err)
1330 goto out_err;
1331
1332 /* When peer becomes authorized, init rate control as well */
1333 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1334 test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1335 rate_control_rate_init(sta);
1336
1337 mutex_unlock(&local->sta_mtx);
1338
1339 if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1340 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1341 sta->known_smps_mode != sta->sdata->bss->req_smps &&
1342 test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1343 sta_info_tx_streams(sta) != 1) {
1344 ht_dbg(sta->sdata,
1345 "%pM just authorized and MIMO capable - update SMPS\n",
1346 sta->sta.addr);
1347 ieee80211_send_smps_action(sta->sdata,
1348 sta->sdata->bss->req_smps,
1349 sta->sta.addr,
1350 sta->sdata->vif.bss_conf.bssid);
1351 }
1352
1353 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1354 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1355 ieee80211_recalc_ps(local, -1);
1356 ieee80211_recalc_ps_vif(sdata);
1357 }
1358
1359 return 0;
1360 out_err:
1361 mutex_unlock(&local->sta_mtx);
1362 return err;
1363 }
1364
1365 #ifdef CONFIG_MAC80211_MESH
1366 static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
1367 const u8 *dst, const u8 *next_hop)
1368 {
1369 struct ieee80211_sub_if_data *sdata;
1370 struct mesh_path *mpath;
1371 struct sta_info *sta;
1372
1373 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1374
1375 rcu_read_lock();
1376 sta = sta_info_get(sdata, next_hop);
1377 if (!sta) {
1378 rcu_read_unlock();
1379 return -ENOENT;
1380 }
1381
1382 mpath = mesh_path_add(sdata, dst);
1383 if (IS_ERR(mpath)) {
1384 rcu_read_unlock();
1385 return PTR_ERR(mpath);
1386 }
1387
1388 mesh_path_fix_nexthop(mpath, sta);
1389
1390 rcu_read_unlock();
1391 return 0;
1392 }
1393
1394 static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
1395 const u8 *dst)
1396 {
1397 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1398
1399 if (dst)
1400 return mesh_path_del(sdata, dst);
1401
1402 mesh_path_flush_by_iface(sdata);
1403 return 0;
1404 }
1405
1406 static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1407 const u8 *dst, const u8 *next_hop)
1408 {
1409 struct ieee80211_sub_if_data *sdata;
1410 struct mesh_path *mpath;
1411 struct sta_info *sta;
1412
1413 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1414
1415 rcu_read_lock();
1416
1417 sta = sta_info_get(sdata, next_hop);
1418 if (!sta) {
1419 rcu_read_unlock();
1420 return -ENOENT;
1421 }
1422
1423 mpath = mesh_path_lookup(sdata, dst);
1424 if (!mpath) {
1425 rcu_read_unlock();
1426 return -ENOENT;
1427 }
1428
1429 mesh_path_fix_nexthop(mpath, sta);
1430
1431 rcu_read_unlock();
1432 return 0;
1433 }
1434
1435 static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1436 struct mpath_info *pinfo)
1437 {
1438 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1439
1440 if (next_hop_sta)
1441 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
1442 else
1443 memset(next_hop, 0, ETH_ALEN);
1444
1445 memset(pinfo, 0, sizeof(*pinfo));
1446
1447 pinfo->generation = mesh_paths_generation;
1448
1449 pinfo->filled = MPATH_INFO_FRAME_QLEN |
1450 MPATH_INFO_SN |
1451 MPATH_INFO_METRIC |
1452 MPATH_INFO_EXPTIME |
1453 MPATH_INFO_DISCOVERY_TIMEOUT |
1454 MPATH_INFO_DISCOVERY_RETRIES |
1455 MPATH_INFO_FLAGS;
1456
1457 pinfo->frame_qlen = mpath->frame_queue.qlen;
1458 pinfo->sn = mpath->sn;
1459 pinfo->metric = mpath->metric;
1460 if (time_before(jiffies, mpath->exp_time))
1461 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1462 pinfo->discovery_timeout =
1463 jiffies_to_msecs(mpath->discovery_timeout);
1464 pinfo->discovery_retries = mpath->discovery_retries;
1465 if (mpath->flags & MESH_PATH_ACTIVE)
1466 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1467 if (mpath->flags & MESH_PATH_RESOLVING)
1468 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
1469 if (mpath->flags & MESH_PATH_SN_VALID)
1470 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
1471 if (mpath->flags & MESH_PATH_FIXED)
1472 pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
1473 if (mpath->flags & MESH_PATH_RESOLVED)
1474 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
1475 }
1476
1477 static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1478 u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1479
1480 {
1481 struct ieee80211_sub_if_data *sdata;
1482 struct mesh_path *mpath;
1483
1484 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1485
1486 rcu_read_lock();
1487 mpath = mesh_path_lookup(sdata, dst);
1488 if (!mpath) {
1489 rcu_read_unlock();
1490 return -ENOENT;
1491 }
1492 memcpy(dst, mpath->dst, ETH_ALEN);
1493 mpath_set_pinfo(mpath, next_hop, pinfo);
1494 rcu_read_unlock();
1495 return 0;
1496 }
1497
1498 static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
1499 int idx, u8 *dst, u8 *next_hop,
1500 struct mpath_info *pinfo)
1501 {
1502 struct ieee80211_sub_if_data *sdata;
1503 struct mesh_path *mpath;
1504
1505 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1506
1507 rcu_read_lock();
1508 mpath = mesh_path_lookup_by_idx(sdata, idx);
1509 if (!mpath) {
1510 rcu_read_unlock();
1511 return -ENOENT;
1512 }
1513 memcpy(dst, mpath->dst, ETH_ALEN);
1514 mpath_set_pinfo(mpath, next_hop, pinfo);
1515 rcu_read_unlock();
1516 return 0;
1517 }
1518
1519 static int ieee80211_get_mesh_config(struct wiphy *wiphy,
1520 struct net_device *dev,
1521 struct mesh_config *conf)
1522 {
1523 struct ieee80211_sub_if_data *sdata;
1524 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1525
1526 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1527 return 0;
1528 }
1529
1530 static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1531 {
1532 return (mask >> (parm-1)) & 0x1;
1533 }
1534
1535 static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1536 const struct mesh_setup *setup)
1537 {
1538 u8 *new_ie;
1539 const u8 *old_ie;
1540 struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1541 struct ieee80211_sub_if_data, u.mesh);
1542
1543 /* allocate information elements */
1544 new_ie = NULL;
1545 old_ie = ifmsh->ie;
1546
1547 if (setup->ie_len) {
1548 new_ie = kmemdup(setup->ie, setup->ie_len,
1549 GFP_KERNEL);
1550 if (!new_ie)
1551 return -ENOMEM;
1552 }
1553 ifmsh->ie_len = setup->ie_len;
1554 ifmsh->ie = new_ie;
1555 kfree(old_ie);
1556
1557 /* now copy the rest of the setup parameters */
1558 ifmsh->mesh_id_len = setup->mesh_id_len;
1559 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
1560 ifmsh->mesh_sp_id = setup->sync_method;
1561 ifmsh->mesh_pp_id = setup->path_sel_proto;
1562 ifmsh->mesh_pm_id = setup->path_metric;
1563 ifmsh->user_mpm = setup->user_mpm;
1564 ifmsh->mesh_auth_id = setup->auth_id;
1565 ifmsh->security = IEEE80211_MESH_SEC_NONE;
1566 if (setup->is_authenticated)
1567 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1568 if (setup->is_secure)
1569 ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
1570
1571 /* mcast rate setting in Mesh Node */
1572 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1573 sizeof(setup->mcast_rate));
1574 sdata->vif.bss_conf.basic_rates = setup->basic_rates;
1575
1576 sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1577 sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1578
1579 return 0;
1580 }
1581
1582 static int ieee80211_update_mesh_config(struct wiphy *wiphy,
1583 struct net_device *dev, u32 mask,
1584 const struct mesh_config *nconf)
1585 {
1586 struct mesh_config *conf;
1587 struct ieee80211_sub_if_data *sdata;
1588 struct ieee80211_if_mesh *ifmsh;
1589
1590 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1591 ifmsh = &sdata->u.mesh;
1592
1593 /* Set the config options which we are interested in setting */
1594 conf = &(sdata->u.mesh.mshcfg);
1595 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1596 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1597 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1598 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1599 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1600 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1601 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1602 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1603 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1604 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1605 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1606 conf->dot11MeshTTL = nconf->dot11MeshTTL;
1607 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
1608 conf->element_ttl = nconf->element_ttl;
1609 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1610 if (ifmsh->user_mpm)
1611 return -EBUSY;
1612 conf->auto_open_plinks = nconf->auto_open_plinks;
1613 }
1614 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1615 conf->dot11MeshNbrOffsetMaxNeighbor =
1616 nconf->dot11MeshNbrOffsetMaxNeighbor;
1617 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1618 conf->dot11MeshHWMPmaxPREQretries =
1619 nconf->dot11MeshHWMPmaxPREQretries;
1620 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1621 conf->path_refresh_time = nconf->path_refresh_time;
1622 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1623 conf->min_discovery_timeout = nconf->min_discovery_timeout;
1624 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1625 conf->dot11MeshHWMPactivePathTimeout =
1626 nconf->dot11MeshHWMPactivePathTimeout;
1627 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1628 conf->dot11MeshHWMPpreqMinInterval =
1629 nconf->dot11MeshHWMPpreqMinInterval;
1630 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1631 conf->dot11MeshHWMPperrMinInterval =
1632 nconf->dot11MeshHWMPperrMinInterval;
1633 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1634 mask))
1635 conf->dot11MeshHWMPnetDiameterTraversalTime =
1636 nconf->dot11MeshHWMPnetDiameterTraversalTime;
1637 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1638 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1639 ieee80211_mesh_root_setup(ifmsh);
1640 }
1641 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
1642 /* our current gate announcement implementation rides on root
1643 * announcements, so require this ifmsh to also be a root node
1644 * */
1645 if (nconf->dot11MeshGateAnnouncementProtocol &&
1646 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1647 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
1648 ieee80211_mesh_root_setup(ifmsh);
1649 }
1650 conf->dot11MeshGateAnnouncementProtocol =
1651 nconf->dot11MeshGateAnnouncementProtocol;
1652 }
1653 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
1654 conf->dot11MeshHWMPRannInterval =
1655 nconf->dot11MeshHWMPRannInterval;
1656 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1657 conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
1658 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1659 /* our RSSI threshold implementation is supported only for
1660 * devices that report signal in dBm.
1661 */
1662 if (!(sdata->local->hw.flags & IEEE80211_HW_SIGNAL_DBM))
1663 return -ENOTSUPP;
1664 conf->rssi_threshold = nconf->rssi_threshold;
1665 }
1666 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1667 conf->ht_opmode = nconf->ht_opmode;
1668 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1669 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1670 }
1671 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1672 conf->dot11MeshHWMPactivePathToRootTimeout =
1673 nconf->dot11MeshHWMPactivePathToRootTimeout;
1674 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1675 conf->dot11MeshHWMProotInterval =
1676 nconf->dot11MeshHWMProotInterval;
1677 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1678 conf->dot11MeshHWMPconfirmationInterval =
1679 nconf->dot11MeshHWMPconfirmationInterval;
1680 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1681 conf->power_mode = nconf->power_mode;
1682 ieee80211_mps_local_status_update(sdata);
1683 }
1684 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
1685 conf->dot11MeshAwakeWindowDuration =
1686 nconf->dot11MeshAwakeWindowDuration;
1687 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
1688 conf->plink_timeout = nconf->plink_timeout;
1689 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
1690 return 0;
1691 }
1692
1693 static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1694 const struct mesh_config *conf,
1695 const struct mesh_setup *setup)
1696 {
1697 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1698 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1699 int err;
1700
1701 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1702 err = copy_mesh_setup(ifmsh, setup);
1703 if (err)
1704 return err;
1705
1706 /* can mesh use other SMPS modes? */
1707 sdata->smps_mode = IEEE80211_SMPS_OFF;
1708 sdata->needed_rx_chains = sdata->local->rx_chains;
1709
1710 mutex_lock(&sdata->local->mtx);
1711 err = ieee80211_vif_use_channel(sdata, &setup->chandef,
1712 IEEE80211_CHANCTX_SHARED);
1713 mutex_unlock(&sdata->local->mtx);
1714 if (err)
1715 return err;
1716
1717 return ieee80211_start_mesh(sdata);
1718 }
1719
1720 static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1721 {
1722 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1723
1724 ieee80211_stop_mesh(sdata);
1725 mutex_lock(&sdata->local->mtx);
1726 ieee80211_vif_release_channel(sdata);
1727 mutex_unlock(&sdata->local->mtx);
1728
1729 return 0;
1730 }
1731 #endif
1732
1733 static int ieee80211_change_bss(struct wiphy *wiphy,
1734 struct net_device *dev,
1735 struct bss_parameters *params)
1736 {
1737 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1738 enum ieee80211_band band;
1739 u32 changed = 0;
1740
1741 if (!sdata_dereference(sdata->u.ap.beacon, sdata))
1742 return -ENOENT;
1743
1744 band = ieee80211_get_sdata_band(sdata);
1745
1746 if (params->use_cts_prot >= 0) {
1747 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
1748 changed |= BSS_CHANGED_ERP_CTS_PROT;
1749 }
1750 if (params->use_short_preamble >= 0) {
1751 sdata->vif.bss_conf.use_short_preamble =
1752 params->use_short_preamble;
1753 changed |= BSS_CHANGED_ERP_PREAMBLE;
1754 }
1755
1756 if (!sdata->vif.bss_conf.use_short_slot &&
1757 band == IEEE80211_BAND_5GHZ) {
1758 sdata->vif.bss_conf.use_short_slot = true;
1759 changed |= BSS_CHANGED_ERP_SLOT;
1760 }
1761
1762 if (params->use_short_slot_time >= 0) {
1763 sdata->vif.bss_conf.use_short_slot =
1764 params->use_short_slot_time;
1765 changed |= BSS_CHANGED_ERP_SLOT;
1766 }
1767
1768 if (params->basic_rates) {
1769 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1770 wiphy->bands[band],
1771 params->basic_rates,
1772 params->basic_rates_len,
1773 &sdata->vif.bss_conf.basic_rates);
1774 changed |= BSS_CHANGED_BASIC_RATES;
1775 }
1776
1777 if (params->ap_isolate >= 0) {
1778 if (params->ap_isolate)
1779 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1780 else
1781 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1782 }
1783
1784 if (params->ht_opmode >= 0) {
1785 sdata->vif.bss_conf.ht_operation_mode =
1786 (u16) params->ht_opmode;
1787 changed |= BSS_CHANGED_HT;
1788 }
1789
1790 if (params->p2p_ctwindow >= 0) {
1791 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1792 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1793 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1794 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1795 changed |= BSS_CHANGED_P2P_PS;
1796 }
1797
1798 if (params->p2p_opp_ps > 0) {
1799 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1800 IEEE80211_P2P_OPPPS_ENABLE_BIT;
1801 changed |= BSS_CHANGED_P2P_PS;
1802 } else if (params->p2p_opp_ps == 0) {
1803 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1804 ~IEEE80211_P2P_OPPPS_ENABLE_BIT;
1805 changed |= BSS_CHANGED_P2P_PS;
1806 }
1807
1808 ieee80211_bss_info_change_notify(sdata, changed);
1809
1810 return 0;
1811 }
1812
1813 static int ieee80211_set_txq_params(struct wiphy *wiphy,
1814 struct net_device *dev,
1815 struct ieee80211_txq_params *params)
1816 {
1817 struct ieee80211_local *local = wiphy_priv(wiphy);
1818 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1819 struct ieee80211_tx_queue_params p;
1820
1821 if (!local->ops->conf_tx)
1822 return -EOPNOTSUPP;
1823
1824 if (local->hw.queues < IEEE80211_NUM_ACS)
1825 return -EOPNOTSUPP;
1826
1827 memset(&p, 0, sizeof(p));
1828 p.aifs = params->aifs;
1829 p.cw_max = params->cwmax;
1830 p.cw_min = params->cwmin;
1831 p.txop = params->txop;
1832
1833 /*
1834 * Setting tx queue params disables u-apsd because it's only
1835 * called in master mode.
1836 */
1837 p.uapsd = false;
1838
1839 sdata->tx_conf[params->ac] = p;
1840 if (drv_conf_tx(local, sdata, params->ac, &p)) {
1841 wiphy_debug(local->hw.wiphy,
1842 "failed to set TX queue parameters for AC %d\n",
1843 params->ac);
1844 return -EINVAL;
1845 }
1846
1847 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
1848
1849 return 0;
1850 }
1851
1852 #ifdef CONFIG_PM
1853 static int ieee80211_suspend(struct wiphy *wiphy,
1854 struct cfg80211_wowlan *wowlan)
1855 {
1856 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
1857 }
1858
1859 static int ieee80211_resume(struct wiphy *wiphy)
1860 {
1861 return __ieee80211_resume(wiphy_priv(wiphy));
1862 }
1863 #else
1864 #define ieee80211_suspend NULL
1865 #define ieee80211_resume NULL
1866 #endif
1867
1868 static int ieee80211_scan(struct wiphy *wiphy,
1869 struct cfg80211_scan_request *req)
1870 {
1871 struct ieee80211_sub_if_data *sdata;
1872
1873 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
1874
1875 switch (ieee80211_vif_type_p2p(&sdata->vif)) {
1876 case NL80211_IFTYPE_STATION:
1877 case NL80211_IFTYPE_ADHOC:
1878 case NL80211_IFTYPE_MESH_POINT:
1879 case NL80211_IFTYPE_P2P_CLIENT:
1880 case NL80211_IFTYPE_P2P_DEVICE:
1881 break;
1882 case NL80211_IFTYPE_P2P_GO:
1883 if (sdata->local->ops->hw_scan)
1884 break;
1885 /*
1886 * FIXME: implement NoA while scanning in software,
1887 * for now fall through to allow scanning only when
1888 * beaconing hasn't been configured yet
1889 */
1890 case NL80211_IFTYPE_AP:
1891 /*
1892 * If the scan has been forced (and the driver supports
1893 * forcing), don't care about being beaconing already.
1894 * This will create problems to the attached stations (e.g. all
1895 * the frames sent while scanning on other channel will be
1896 * lost)
1897 */
1898 if (sdata->u.ap.beacon &&
1899 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
1900 !(req->flags & NL80211_SCAN_FLAG_AP)))
1901 return -EOPNOTSUPP;
1902 break;
1903 default:
1904 return -EOPNOTSUPP;
1905 }
1906
1907 return ieee80211_request_scan(sdata, req);
1908 }
1909
1910 static int
1911 ieee80211_sched_scan_start(struct wiphy *wiphy,
1912 struct net_device *dev,
1913 struct cfg80211_sched_scan_request *req)
1914 {
1915 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1916
1917 if (!sdata->local->ops->sched_scan_start)
1918 return -EOPNOTSUPP;
1919
1920 return ieee80211_request_sched_scan_start(sdata, req);
1921 }
1922
1923 static int
1924 ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
1925 {
1926 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1927
1928 if (!sdata->local->ops->sched_scan_stop)
1929 return -EOPNOTSUPP;
1930
1931 return ieee80211_request_sched_scan_stop(sdata);
1932 }
1933
1934 static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
1935 struct cfg80211_auth_request *req)
1936 {
1937 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
1938 }
1939
1940 static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
1941 struct cfg80211_assoc_request *req)
1942 {
1943 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
1944 }
1945
1946 static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
1947 struct cfg80211_deauth_request *req)
1948 {
1949 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
1950 }
1951
1952 static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
1953 struct cfg80211_disassoc_request *req)
1954 {
1955 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
1956 }
1957
1958 static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
1959 struct cfg80211_ibss_params *params)
1960 {
1961 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
1962 }
1963
1964 static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
1965 {
1966 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
1967 }
1968
1969 static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
1970 int rate[IEEE80211_NUM_BANDS])
1971 {
1972 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1973
1974 memcpy(sdata->vif.bss_conf.mcast_rate, rate,
1975 sizeof(int) * IEEE80211_NUM_BANDS);
1976
1977 return 0;
1978 }
1979
1980 static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1981 {
1982 struct ieee80211_local *local = wiphy_priv(wiphy);
1983 int err;
1984
1985 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
1986 err = drv_set_frag_threshold(local, wiphy->frag_threshold);
1987
1988 if (err)
1989 return err;
1990 }
1991
1992 if ((changed & WIPHY_PARAM_COVERAGE_CLASS) ||
1993 (changed & WIPHY_PARAM_DYN_ACK)) {
1994 s16 coverage_class;
1995
1996 coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ?
1997 wiphy->coverage_class : -1;
1998 err = drv_set_coverage_class(local, coverage_class);
1999
2000 if (err)
2001 return err;
2002 }
2003
2004 if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
2005 err = drv_set_rts_threshold(local, wiphy->rts_threshold);
2006
2007 if (err)
2008 return err;
2009 }
2010
2011 if (changed & WIPHY_PARAM_RETRY_SHORT) {
2012 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2013 return -EINVAL;
2014 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
2015 }
2016 if (changed & WIPHY_PARAM_RETRY_LONG) {
2017 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2018 return -EINVAL;
2019 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
2020 }
2021 if (changed &
2022 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2023 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2024
2025 return 0;
2026 }
2027
2028 static int ieee80211_set_tx_power(struct wiphy *wiphy,
2029 struct wireless_dev *wdev,
2030 enum nl80211_tx_power_setting type, int mbm)
2031 {
2032 struct ieee80211_local *local = wiphy_priv(wiphy);
2033 struct ieee80211_sub_if_data *sdata;
2034
2035 if (wdev) {
2036 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2037
2038 switch (type) {
2039 case NL80211_TX_POWER_AUTOMATIC:
2040 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2041 break;
2042 case NL80211_TX_POWER_LIMITED:
2043 case NL80211_TX_POWER_FIXED:
2044 if (mbm < 0 || (mbm % 100))
2045 return -EOPNOTSUPP;
2046 sdata->user_power_level = MBM_TO_DBM(mbm);
2047 break;
2048 }
2049
2050 ieee80211_recalc_txpower(sdata);
2051
2052 return 0;
2053 }
2054
2055 switch (type) {
2056 case NL80211_TX_POWER_AUTOMATIC:
2057 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2058 break;
2059 case NL80211_TX_POWER_LIMITED:
2060 case NL80211_TX_POWER_FIXED:
2061 if (mbm < 0 || (mbm % 100))
2062 return -EOPNOTSUPP;
2063 local->user_power_level = MBM_TO_DBM(mbm);
2064 break;
2065 }
2066
2067 mutex_lock(&local->iflist_mtx);
2068 list_for_each_entry(sdata, &local->interfaces, list)
2069 sdata->user_power_level = local->user_power_level;
2070 list_for_each_entry(sdata, &local->interfaces, list)
2071 ieee80211_recalc_txpower(sdata);
2072 mutex_unlock(&local->iflist_mtx);
2073
2074 return 0;
2075 }
2076
2077 static int ieee80211_get_tx_power(struct wiphy *wiphy,
2078 struct wireless_dev *wdev,
2079 int *dbm)
2080 {
2081 struct ieee80211_local *local = wiphy_priv(wiphy);
2082 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2083
2084 if (!local->use_chanctx)
2085 *dbm = local->hw.conf.power_level;
2086 else
2087 *dbm = sdata->vif.bss_conf.txpower;
2088
2089 return 0;
2090 }
2091
2092 static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
2093 const u8 *addr)
2094 {
2095 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2096
2097 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2098
2099 return 0;
2100 }
2101
2102 static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2103 {
2104 struct ieee80211_local *local = wiphy_priv(wiphy);
2105
2106 drv_rfkill_poll(local);
2107 }
2108
2109 #ifdef CONFIG_NL80211_TESTMODE
2110 static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2111 struct wireless_dev *wdev,
2112 void *data, int len)
2113 {
2114 struct ieee80211_local *local = wiphy_priv(wiphy);
2115 struct ieee80211_vif *vif = NULL;
2116
2117 if (!local->ops->testmode_cmd)
2118 return -EOPNOTSUPP;
2119
2120 if (wdev) {
2121 struct ieee80211_sub_if_data *sdata;
2122
2123 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2124 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2125 vif = &sdata->vif;
2126 }
2127
2128 return local->ops->testmode_cmd(&local->hw, vif, data, len);
2129 }
2130
2131 static int ieee80211_testmode_dump(struct wiphy *wiphy,
2132 struct sk_buff *skb,
2133 struct netlink_callback *cb,
2134 void *data, int len)
2135 {
2136 struct ieee80211_local *local = wiphy_priv(wiphy);
2137
2138 if (!local->ops->testmode_dump)
2139 return -EOPNOTSUPP;
2140
2141 return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2142 }
2143 #endif
2144
2145 int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2146 enum ieee80211_smps_mode smps_mode)
2147 {
2148 struct sta_info *sta;
2149 enum ieee80211_smps_mode old_req;
2150 int i;
2151
2152 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2153 return -EINVAL;
2154
2155 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2156 return 0;
2157
2158 old_req = sdata->u.ap.req_smps;
2159 sdata->u.ap.req_smps = smps_mode;
2160
2161 /* AUTOMATIC doesn't mean much for AP - don't allow it */
2162 if (old_req == smps_mode ||
2163 smps_mode == IEEE80211_SMPS_AUTOMATIC)
2164 return 0;
2165
2166 /* If no associated stations, there's no need to do anything */
2167 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) {
2168 sdata->smps_mode = smps_mode;
2169 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2170 return 0;
2171 }
2172
2173 ht_dbg(sdata,
2174 "SMSP %d requested in AP mode, sending Action frame to %d stations\n",
2175 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2176
2177 mutex_lock(&sdata->local->sta_mtx);
2178 for (i = 0; i < STA_HASH_SIZE; i++) {
2179 for (sta = rcu_dereference_protected(sdata->local->sta_hash[i],
2180 lockdep_is_held(&sdata->local->sta_mtx));
2181 sta;
2182 sta = rcu_dereference_protected(sta->hnext,
2183 lockdep_is_held(&sdata->local->sta_mtx))) {
2184 /*
2185 * Only stations associated to our AP and
2186 * associated VLANs
2187 */
2188 if (sta->sdata->bss != &sdata->u.ap)
2189 continue;
2190
2191 /* This station doesn't support MIMO - skip it */
2192 if (sta_info_tx_streams(sta) == 1)
2193 continue;
2194
2195 /*
2196 * Don't wake up a STA just to send the action frame
2197 * unless we are getting more restrictive.
2198 */
2199 if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2200 !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2201 smps_mode)) {
2202 ht_dbg(sdata,
2203 "Won't send SMPS to sleeping STA %pM\n",
2204 sta->sta.addr);
2205 continue;
2206 }
2207
2208 /*
2209 * If the STA is not authorized, wait until it gets
2210 * authorized and the action frame will be sent then.
2211 */
2212 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2213 continue;
2214
2215 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2216 ieee80211_send_smps_action(sdata, smps_mode,
2217 sta->sta.addr,
2218 sdata->vif.bss_conf.bssid);
2219 }
2220 }
2221 mutex_unlock(&sdata->local->sta_mtx);
2222
2223 sdata->smps_mode = smps_mode;
2224 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2225
2226 return 0;
2227 }
2228
2229 int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2230 enum ieee80211_smps_mode smps_mode)
2231 {
2232 const u8 *ap;
2233 enum ieee80211_smps_mode old_req;
2234 int err;
2235
2236 lockdep_assert_held(&sdata->wdev.mtx);
2237
2238 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2239 return -EINVAL;
2240
2241 old_req = sdata->u.mgd.req_smps;
2242 sdata->u.mgd.req_smps = smps_mode;
2243
2244 if (old_req == smps_mode &&
2245 smps_mode != IEEE80211_SMPS_AUTOMATIC)
2246 return 0;
2247
2248 /*
2249 * If not associated, or current association is not an HT
2250 * association, there's no need to do anything, just store
2251 * the new value until we associate.
2252 */
2253 if (!sdata->u.mgd.associated ||
2254 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2255 return 0;
2256
2257 ap = sdata->u.mgd.associated->bssid;
2258
2259 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
2260 if (sdata->u.mgd.powersave)
2261 smps_mode = IEEE80211_SMPS_DYNAMIC;
2262 else
2263 smps_mode = IEEE80211_SMPS_OFF;
2264 }
2265
2266 /* send SM PS frame to AP */
2267 err = ieee80211_send_smps_action(sdata, smps_mode,
2268 ap, ap);
2269 if (err)
2270 sdata->u.mgd.req_smps = old_req;
2271
2272 return err;
2273 }
2274
2275 static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2276 bool enabled, int timeout)
2277 {
2278 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2279 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2280
2281 if (sdata->vif.type != NL80211_IFTYPE_STATION)
2282 return -EOPNOTSUPP;
2283
2284 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS))
2285 return -EOPNOTSUPP;
2286
2287 if (enabled == sdata->u.mgd.powersave &&
2288 timeout == local->dynamic_ps_forced_timeout)
2289 return 0;
2290
2291 sdata->u.mgd.powersave = enabled;
2292 local->dynamic_ps_forced_timeout = timeout;
2293
2294 /* no change, but if automatic follow powersave */
2295 sdata_lock(sdata);
2296 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
2297 sdata_unlock(sdata);
2298
2299 if (local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)
2300 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2301
2302 ieee80211_recalc_ps(local, -1);
2303 ieee80211_recalc_ps_vif(sdata);
2304
2305 return 0;
2306 }
2307
2308 static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2309 struct net_device *dev,
2310 s32 rssi_thold, u32 rssi_hyst)
2311 {
2312 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2313 struct ieee80211_vif *vif = &sdata->vif;
2314 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2315
2316 if (rssi_thold == bss_conf->cqm_rssi_thold &&
2317 rssi_hyst == bss_conf->cqm_rssi_hyst)
2318 return 0;
2319
2320 bss_conf->cqm_rssi_thold = rssi_thold;
2321 bss_conf->cqm_rssi_hyst = rssi_hyst;
2322
2323 /* tell the driver upon association, unless already associated */
2324 if (sdata->u.mgd.associated &&
2325 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2326 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2327
2328 return 0;
2329 }
2330
2331 static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2332 struct net_device *dev,
2333 const u8 *addr,
2334 const struct cfg80211_bitrate_mask *mask)
2335 {
2336 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2337 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2338 int i, ret;
2339
2340 if (!ieee80211_sdata_running(sdata))
2341 return -ENETDOWN;
2342
2343 if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) {
2344 ret = drv_set_bitrate_mask(local, sdata, mask);
2345 if (ret)
2346 return ret;
2347 }
2348
2349 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
2350 struct ieee80211_supported_band *sband = wiphy->bands[i];
2351 int j;
2352
2353 sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
2354 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2355 sizeof(mask->control[i].ht_mcs));
2356
2357 sdata->rc_has_mcs_mask[i] = false;
2358 if (!sband)
2359 continue;
2360
2361 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++)
2362 if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2363 sdata->rc_has_mcs_mask[i] = true;
2364 break;
2365 }
2366 }
2367
2368 return 0;
2369 }
2370
2371 static bool ieee80211_coalesce_started_roc(struct ieee80211_local *local,
2372 struct ieee80211_roc_work *new_roc,
2373 struct ieee80211_roc_work *cur_roc)
2374 {
2375 unsigned long j = jiffies;
2376 unsigned long cur_roc_end = cur_roc->hw_start_time +
2377 msecs_to_jiffies(cur_roc->duration);
2378 struct ieee80211_roc_work *next_roc;
2379 int new_dur;
2380
2381 if (WARN_ON(!cur_roc->started || !cur_roc->hw_begun))
2382 return false;
2383
2384 if (time_after(j + IEEE80211_ROC_MIN_LEFT, cur_roc_end))
2385 return false;
2386
2387 ieee80211_handle_roc_started(new_roc);
2388
2389 new_dur = new_roc->duration - jiffies_to_msecs(cur_roc_end - j);
2390
2391 /* cur_roc is long enough - add new_roc to the dependents list. */
2392 if (new_dur <= 0) {
2393 list_add_tail(&new_roc->list, &cur_roc->dependents);
2394 return true;
2395 }
2396
2397 new_roc->duration = new_dur;
2398
2399 /*
2400 * if cur_roc was already coalesced before, we might
2401 * want to extend the next roc instead of adding
2402 * a new one.
2403 */
2404 next_roc = list_entry(cur_roc->list.next,
2405 struct ieee80211_roc_work, list);
2406 if (&next_roc->list != &local->roc_list &&
2407 next_roc->chan == new_roc->chan &&
2408 next_roc->sdata == new_roc->sdata &&
2409 !WARN_ON(next_roc->started)) {
2410 list_add_tail(&new_roc->list, &next_roc->dependents);
2411 next_roc->duration = max(next_roc->duration,
2412 new_roc->duration);
2413 next_roc->type = max(next_roc->type, new_roc->type);
2414 return true;
2415 }
2416
2417 /* add right after cur_roc */
2418 list_add(&new_roc->list, &cur_roc->list);
2419
2420 return true;
2421 }
2422
2423 static int ieee80211_start_roc_work(struct ieee80211_local *local,
2424 struct ieee80211_sub_if_data *sdata,
2425 struct ieee80211_channel *channel,
2426 unsigned int duration, u64 *cookie,
2427 struct sk_buff *txskb,
2428 enum ieee80211_roc_type type)
2429 {
2430 struct ieee80211_roc_work *roc, *tmp;
2431 bool queued = false;
2432 int ret;
2433
2434 lockdep_assert_held(&local->mtx);
2435
2436 if (local->use_chanctx && !local->ops->remain_on_channel)
2437 return -EOPNOTSUPP;
2438
2439 roc = kzalloc(sizeof(*roc), GFP_KERNEL);
2440 if (!roc)
2441 return -ENOMEM;
2442
2443 /*
2444 * If the duration is zero, then the driver
2445 * wouldn't actually do anything. Set it to
2446 * 10 for now.
2447 *
2448 * TODO: cancel the off-channel operation
2449 * when we get the SKB's TX status and
2450 * the wait time was zero before.
2451 */
2452 if (!duration)
2453 duration = 10;
2454
2455 roc->chan = channel;
2456 roc->duration = duration;
2457 roc->req_duration = duration;
2458 roc->frame = txskb;
2459 roc->type = type;
2460 roc->mgmt_tx_cookie = (unsigned long)txskb;
2461 roc->sdata = sdata;
2462 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
2463 INIT_LIST_HEAD(&roc->dependents);
2464
2465 /*
2466 * cookie is either the roc cookie (for normal roc)
2467 * or the SKB (for mgmt TX)
2468 */
2469 if (!txskb) {
2470 /* local->mtx protects this */
2471 local->roc_cookie_counter++;
2472 roc->cookie = local->roc_cookie_counter;
2473 /* wow, you wrapped 64 bits ... more likely a bug */
2474 if (WARN_ON(roc->cookie == 0)) {
2475 roc->cookie = 1;
2476 local->roc_cookie_counter++;
2477 }
2478 *cookie = roc->cookie;
2479 } else {
2480 *cookie = (unsigned long)txskb;
2481 }
2482
2483 /* if there's one pending or we're scanning, queue this one */
2484 if (!list_empty(&local->roc_list) ||
2485 local->scanning || local->radar_detect_enabled)
2486 goto out_check_combine;
2487
2488 /* if not HW assist, just queue & schedule work */
2489 if (!local->ops->remain_on_channel) {
2490 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
2491 goto out_queue;
2492 }
2493
2494 /* otherwise actually kick it off here (for error handling) */
2495
2496 ret = drv_remain_on_channel(local, sdata, channel, duration, type);
2497 if (ret) {
2498 kfree(roc);
2499 return ret;
2500 }
2501
2502 roc->started = true;
2503 goto out_queue;
2504
2505 out_check_combine:
2506 list_for_each_entry(tmp, &local->roc_list, list) {
2507 if (tmp->chan != channel || tmp->sdata != sdata)
2508 continue;
2509
2510 /*
2511 * Extend this ROC if possible:
2512 *
2513 * If it hasn't started yet, just increase the duration
2514 * and add the new one to the list of dependents.
2515 * If the type of the new ROC has higher priority, modify the
2516 * type of the previous one to match that of the new one.
2517 */
2518 if (!tmp->started) {
2519 list_add_tail(&roc->list, &tmp->dependents);
2520 tmp->duration = max(tmp->duration, roc->duration);
2521 tmp->type = max(tmp->type, roc->type);
2522 queued = true;
2523 break;
2524 }
2525
2526 /* If it has already started, it's more difficult ... */
2527 if (local->ops->remain_on_channel) {
2528 /*
2529 * In the offloaded ROC case, if it hasn't begun, add
2530 * this new one to the dependent list to be handled
2531 * when the master one begins. If it has begun,
2532 * check that there's still a minimum time left and
2533 * if so, start this one, transmitting the frame, but
2534 * add it to the list directly after this one with
2535 * a reduced time so we'll ask the driver to execute
2536 * it right after finishing the previous one, in the
2537 * hope that it'll also be executed right afterwards,
2538 * effectively extending the old one.
2539 * If there's no minimum time left, just add it to the
2540 * normal list.
2541 * TODO: the ROC type is ignored here, assuming that it
2542 * is better to immediately use the current ROC.
2543 */
2544 if (!tmp->hw_begun) {
2545 list_add_tail(&roc->list, &tmp->dependents);
2546 queued = true;
2547 break;
2548 }
2549
2550 if (ieee80211_coalesce_started_roc(local, roc, tmp))
2551 queued = true;
2552 } else if (del_timer_sync(&tmp->work.timer)) {
2553 unsigned long new_end;
2554
2555 /*
2556 * In the software ROC case, cancel the timer, if
2557 * that fails then the finish work is already
2558 * queued/pending and thus we queue the new ROC
2559 * normally, if that succeeds then we can extend
2560 * the timer duration and TX the frame (if any.)
2561 */
2562
2563 list_add_tail(&roc->list, &tmp->dependents);
2564 queued = true;
2565
2566 new_end = jiffies + msecs_to_jiffies(roc->duration);
2567
2568 /* ok, it was started & we canceled timer */
2569 if (time_after(new_end, tmp->work.timer.expires))
2570 mod_timer(&tmp->work.timer, new_end);
2571 else
2572 add_timer(&tmp->work.timer);
2573
2574 ieee80211_handle_roc_started(roc);
2575 }
2576 break;
2577 }
2578
2579 out_queue:
2580 if (!queued)
2581 list_add_tail(&roc->list, &local->roc_list);
2582
2583 return 0;
2584 }
2585
2586 static int ieee80211_remain_on_channel(struct wiphy *wiphy,
2587 struct wireless_dev *wdev,
2588 struct ieee80211_channel *chan,
2589 unsigned int duration,
2590 u64 *cookie)
2591 {
2592 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2593 struct ieee80211_local *local = sdata->local;
2594 int ret;
2595
2596 mutex_lock(&local->mtx);
2597 ret = ieee80211_start_roc_work(local, sdata, chan,
2598 duration, cookie, NULL,
2599 IEEE80211_ROC_TYPE_NORMAL);
2600 mutex_unlock(&local->mtx);
2601
2602 return ret;
2603 }
2604
2605 static int ieee80211_cancel_roc(struct ieee80211_local *local,
2606 u64 cookie, bool mgmt_tx)
2607 {
2608 struct ieee80211_roc_work *roc, *tmp, *found = NULL;
2609 int ret;
2610
2611 mutex_lock(&local->mtx);
2612 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
2613 struct ieee80211_roc_work *dep, *tmp2;
2614
2615 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) {
2616 if (!mgmt_tx && dep->cookie != cookie)
2617 continue;
2618 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie)
2619 continue;
2620 /* found dependent item -- just remove it */
2621 list_del(&dep->list);
2622 mutex_unlock(&local->mtx);
2623
2624 ieee80211_roc_notify_destroy(dep, true);
2625 return 0;
2626 }
2627
2628 if (!mgmt_tx && roc->cookie != cookie)
2629 continue;
2630 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie)
2631 continue;
2632
2633 found = roc;
2634 break;
2635 }
2636
2637 if (!found) {
2638 mutex_unlock(&local->mtx);
2639 return -ENOENT;
2640 }
2641
2642 /*
2643 * We found the item to cancel, so do that. Note that it
2644 * may have dependents, which we also cancel (and send
2645 * the expired signal for.) Not doing so would be quite
2646 * tricky here, but we may need to fix it later.
2647 */
2648
2649 if (local->ops->remain_on_channel) {
2650 if (found->started) {
2651 ret = drv_cancel_remain_on_channel(local);
2652 if (WARN_ON_ONCE(ret)) {
2653 mutex_unlock(&local->mtx);
2654 return ret;
2655 }
2656 }
2657
2658 list_del(&found->list);
2659
2660 if (found->started)
2661 ieee80211_start_next_roc(local);
2662 mutex_unlock(&local->mtx);
2663
2664 ieee80211_roc_notify_destroy(found, true);
2665 } else {
2666 /* work may be pending so use it all the time */
2667 found->abort = true;
2668 ieee80211_queue_delayed_work(&local->hw, &found->work, 0);
2669
2670 mutex_unlock(&local->mtx);
2671
2672 /* work will clean up etc */
2673 flush_delayed_work(&found->work);
2674 WARN_ON(!found->to_be_freed);
2675 kfree(found);
2676 }
2677
2678 return 0;
2679 }
2680
2681 static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy,
2682 struct wireless_dev *wdev,
2683 u64 cookie)
2684 {
2685 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2686 struct ieee80211_local *local = sdata->local;
2687
2688 return ieee80211_cancel_roc(local, cookie, false);
2689 }
2690
2691 static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2692 struct net_device *dev,
2693 struct cfg80211_chan_def *chandef,
2694 u32 cac_time_ms)
2695 {
2696 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2697 struct ieee80211_local *local = sdata->local;
2698 int err;
2699
2700 mutex_lock(&local->mtx);
2701 if (!list_empty(&local->roc_list) || local->scanning) {
2702 err = -EBUSY;
2703 goto out_unlock;
2704 }
2705
2706 /* whatever, but channel contexts should not complain about that one */
2707 sdata->smps_mode = IEEE80211_SMPS_OFF;
2708 sdata->needed_rx_chains = local->rx_chains;
2709
2710 err = ieee80211_vif_use_channel(sdata, chandef,
2711 IEEE80211_CHANCTX_SHARED);
2712 if (err)
2713 goto out_unlock;
2714
2715 ieee80211_queue_delayed_work(&sdata->local->hw,
2716 &sdata->dfs_cac_timer_work,
2717 msecs_to_jiffies(cac_time_ms));
2718
2719 out_unlock:
2720 mutex_unlock(&local->mtx);
2721 return err;
2722 }
2723
2724 static struct cfg80211_beacon_data *
2725 cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2726 {
2727 struct cfg80211_beacon_data *new_beacon;
2728 u8 *pos;
2729 int len;
2730
2731 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2732 beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2733 beacon->probe_resp_len;
2734
2735 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2736 if (!new_beacon)
2737 return NULL;
2738
2739 pos = (u8 *)(new_beacon + 1);
2740 if (beacon->head_len) {
2741 new_beacon->head_len = beacon->head_len;
2742 new_beacon->head = pos;
2743 memcpy(pos, beacon->head, beacon->head_len);
2744 pos += beacon->head_len;
2745 }
2746 if (beacon->tail_len) {
2747 new_beacon->tail_len = beacon->tail_len;
2748 new_beacon->tail = pos;
2749 memcpy(pos, beacon->tail, beacon->tail_len);
2750 pos += beacon->tail_len;
2751 }
2752 if (beacon->beacon_ies_len) {
2753 new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2754 new_beacon->beacon_ies = pos;
2755 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2756 pos += beacon->beacon_ies_len;
2757 }
2758 if (beacon->proberesp_ies_len) {
2759 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2760 new_beacon->proberesp_ies = pos;
2761 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2762 pos += beacon->proberesp_ies_len;
2763 }
2764 if (beacon->assocresp_ies_len) {
2765 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2766 new_beacon->assocresp_ies = pos;
2767 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2768 pos += beacon->assocresp_ies_len;
2769 }
2770 if (beacon->probe_resp_len) {
2771 new_beacon->probe_resp_len = beacon->probe_resp_len;
2772 beacon->probe_resp = pos;
2773 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2774 pos += beacon->probe_resp_len;
2775 }
2776
2777 return new_beacon;
2778 }
2779
2780 void ieee80211_csa_finish(struct ieee80211_vif *vif)
2781 {
2782 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2783
2784 ieee80211_queue_work(&sdata->local->hw,
2785 &sdata->csa_finalize_work);
2786 }
2787 EXPORT_SYMBOL(ieee80211_csa_finish);
2788
2789 static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2790 u32 *changed)
2791 {
2792 int err;
2793
2794 switch (sdata->vif.type) {
2795 case NL80211_IFTYPE_AP:
2796 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2797 NULL);
2798 kfree(sdata->u.ap.next_beacon);
2799 sdata->u.ap.next_beacon = NULL;
2800
2801 if (err < 0)
2802 return err;
2803 *changed |= err;
2804 break;
2805 case NL80211_IFTYPE_ADHOC:
2806 err = ieee80211_ibss_finish_csa(sdata);
2807 if (err < 0)
2808 return err;
2809 *changed |= err;
2810 break;
2811 #ifdef CONFIG_MAC80211_MESH
2812 case NL80211_IFTYPE_MESH_POINT:
2813 err = ieee80211_mesh_finish_csa(sdata);
2814 if (err < 0)
2815 return err;
2816 *changed |= err;
2817 break;
2818 #endif
2819 default:
2820 WARN_ON(1);
2821 return -EINVAL;
2822 }
2823
2824 return 0;
2825 }
2826
2827 static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2828 {
2829 struct ieee80211_local *local = sdata->local;
2830 u32 changed = 0;
2831 int err;
2832
2833 sdata_assert_lock(sdata);
2834 lockdep_assert_held(&local->mtx);
2835 lockdep_assert_held(&local->chanctx_mtx);
2836
2837 /*
2838 * using reservation isn't immediate as it may be deferred until later
2839 * with multi-vif. once reservation is complete it will re-schedule the
2840 * work with no reserved_chanctx so verify chandef to check if it
2841 * completed successfully
2842 */
2843
2844 if (sdata->reserved_chanctx) {
2845 /*
2846 * with multi-vif csa driver may call ieee80211_csa_finish()
2847 * many times while waiting for other interfaces to use their
2848 * reservations
2849 */
2850 if (sdata->reserved_ready)
2851 return 0;
2852
2853 err = ieee80211_vif_use_reserved_context(sdata);
2854 if (err)
2855 return err;
2856
2857 return 0;
2858 }
2859
2860 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2861 &sdata->csa_chandef))
2862 return -EINVAL;
2863
2864 sdata->vif.csa_active = false;
2865
2866 err = ieee80211_set_after_csa_beacon(sdata, &changed);
2867 if (err)
2868 return err;
2869
2870 ieee80211_bss_info_change_notify(sdata, changed);
2871 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
2872
2873 if (sdata->csa_block_tx) {
2874 ieee80211_wake_vif_queues(local, sdata,
2875 IEEE80211_QUEUE_STOP_REASON_CSA);
2876 sdata->csa_block_tx = false;
2877 }
2878
2879 return 0;
2880 }
2881
2882 static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2883 {
2884 if (__ieee80211_csa_finalize(sdata)) {
2885 sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
2886 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
2887 GFP_KERNEL);
2888 }
2889 }
2890
2891 void ieee80211_csa_finalize_work(struct work_struct *work)
2892 {
2893 struct ieee80211_sub_if_data *sdata =
2894 container_of(work, struct ieee80211_sub_if_data,
2895 csa_finalize_work);
2896 struct ieee80211_local *local = sdata->local;
2897
2898 sdata_lock(sdata);
2899 mutex_lock(&local->mtx);
2900 mutex_lock(&local->chanctx_mtx);
2901
2902 /* AP might have been stopped while waiting for the lock. */
2903 if (!sdata->vif.csa_active)
2904 goto unlock;
2905
2906 if (!ieee80211_sdata_running(sdata))
2907 goto unlock;
2908
2909 ieee80211_csa_finalize(sdata);
2910
2911 unlock:
2912 mutex_unlock(&local->chanctx_mtx);
2913 mutex_unlock(&local->mtx);
2914 sdata_unlock(sdata);
2915 }
2916
2917 static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
2918 struct cfg80211_csa_settings *params,
2919 u32 *changed)
2920 {
2921 struct ieee80211_csa_settings csa = {};
2922 int err;
2923
2924 switch (sdata->vif.type) {
2925 case NL80211_IFTYPE_AP:
2926 sdata->u.ap.next_beacon =
2927 cfg80211_beacon_dup(&params->beacon_after);
2928 if (!sdata->u.ap.next_beacon)
2929 return -ENOMEM;
2930
2931 /*
2932 * With a count of 0, we don't have to wait for any
2933 * TBTT before switching, so complete the CSA
2934 * immediately. In theory, with a count == 1 we
2935 * should delay the switch until just before the next
2936 * TBTT, but that would complicate things so we switch
2937 * immediately too. If we would delay the switch
2938 * until the next TBTT, we would have to set the probe
2939 * response here.
2940 *
2941 * TODO: A channel switch with count <= 1 without
2942 * sending a CSA action frame is kind of useless,
2943 * because the clients won't know we're changing
2944 * channels. The action frame must be implemented
2945 * either here or in the userspace.
2946 */
2947 if (params->count <= 1)
2948 break;
2949
2950 if ((params->n_counter_offsets_beacon >
2951 IEEE80211_MAX_CSA_COUNTERS_NUM) ||
2952 (params->n_counter_offsets_presp >
2953 IEEE80211_MAX_CSA_COUNTERS_NUM))
2954 return -EINVAL;
2955
2956 csa.counter_offsets_beacon = params->counter_offsets_beacon;
2957 csa.counter_offsets_presp = params->counter_offsets_presp;
2958 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
2959 csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
2960 csa.count = params->count;
2961
2962 err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
2963 if (err < 0) {
2964 kfree(sdata->u.ap.next_beacon);
2965 return err;
2966 }
2967 *changed |= err;
2968
2969 break;
2970 case NL80211_IFTYPE_ADHOC:
2971 if (!sdata->vif.bss_conf.ibss_joined)
2972 return -EINVAL;
2973
2974 if (params->chandef.width != sdata->u.ibss.chandef.width)
2975 return -EINVAL;
2976
2977 switch (params->chandef.width) {
2978 case NL80211_CHAN_WIDTH_40:
2979 if (cfg80211_get_chandef_type(&params->chandef) !=
2980 cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
2981 return -EINVAL;
2982 case NL80211_CHAN_WIDTH_5:
2983 case NL80211_CHAN_WIDTH_10:
2984 case NL80211_CHAN_WIDTH_20_NOHT:
2985 case NL80211_CHAN_WIDTH_20:
2986 break;
2987 default:
2988 return -EINVAL;
2989 }
2990
2991 /* changes into another band are not supported */
2992 if (sdata->u.ibss.chandef.chan->band !=
2993 params->chandef.chan->band)
2994 return -EINVAL;
2995
2996 /* see comments in the NL80211_IFTYPE_AP block */
2997 if (params->count > 1) {
2998 err = ieee80211_ibss_csa_beacon(sdata, params);
2999 if (err < 0)
3000 return err;
3001 *changed |= err;
3002 }
3003
3004 ieee80211_send_action_csa(sdata, params);
3005
3006 break;
3007 #ifdef CONFIG_MAC80211_MESH
3008 case NL80211_IFTYPE_MESH_POINT: {
3009 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
3010
3011 if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
3012 return -EINVAL;
3013
3014 /* changes into another band are not supported */
3015 if (sdata->vif.bss_conf.chandef.chan->band !=
3016 params->chandef.chan->band)
3017 return -EINVAL;
3018
3019 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
3020 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
3021 if (!ifmsh->pre_value)
3022 ifmsh->pre_value = 1;
3023 else
3024 ifmsh->pre_value++;
3025 }
3026
3027 /* see comments in the NL80211_IFTYPE_AP block */
3028 if (params->count > 1) {
3029 err = ieee80211_mesh_csa_beacon(sdata, params);
3030 if (err < 0) {
3031 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
3032 return err;
3033 }
3034 *changed |= err;
3035 }
3036
3037 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
3038 ieee80211_send_action_csa(sdata, params);
3039
3040 break;
3041 }
3042 #endif
3043 default:
3044 return -EOPNOTSUPP;
3045 }
3046
3047 return 0;
3048 }
3049
3050 static int
3051 __ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3052 struct cfg80211_csa_settings *params)
3053 {
3054 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3055 struct ieee80211_local *local = sdata->local;
3056 struct ieee80211_chanctx_conf *conf;
3057 struct ieee80211_chanctx *chanctx;
3058 int err, changed = 0;
3059
3060 sdata_assert_lock(sdata);
3061 lockdep_assert_held(&local->mtx);
3062
3063 if (!list_empty(&local->roc_list) || local->scanning)
3064 return -EBUSY;
3065
3066 if (sdata->wdev.cac_started)
3067 return -EBUSY;
3068
3069 if (cfg80211_chandef_identical(&params->chandef,
3070 &sdata->vif.bss_conf.chandef))
3071 return -EINVAL;
3072
3073 /* don't allow another channel switch if one is already active. */
3074 if (sdata->vif.csa_active)
3075 return -EBUSY;
3076
3077 mutex_lock(&local->chanctx_mtx);
3078 conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3079 lockdep_is_held(&local->chanctx_mtx));
3080 if (!conf) {
3081 err = -EBUSY;
3082 goto out;
3083 }
3084
3085 chanctx = container_of(conf, struct ieee80211_chanctx, conf);
3086 if (!chanctx) {
3087 err = -EBUSY;
3088 goto out;
3089 }
3090
3091 err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3092 chanctx->mode,
3093 params->radar_required);
3094 if (err)
3095 goto out;
3096
3097 /* if reservation is invalid then this will fail */
3098 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3099 if (err) {
3100 ieee80211_vif_unreserve_chanctx(sdata);
3101 goto out;
3102 }
3103
3104 err = ieee80211_set_csa_beacon(sdata, params, &changed);
3105 if (err) {
3106 ieee80211_vif_unreserve_chanctx(sdata);
3107 goto out;
3108 }
3109
3110 sdata->csa_chandef = params->chandef;
3111 sdata->csa_block_tx = params->block_tx;
3112 sdata->vif.csa_active = true;
3113
3114 if (sdata->csa_block_tx)
3115 ieee80211_stop_vif_queues(local, sdata,
3116 IEEE80211_QUEUE_STOP_REASON_CSA);
3117
3118 if (changed) {
3119 ieee80211_bss_info_change_notify(sdata, changed);
3120 drv_channel_switch_beacon(sdata, &params->chandef);
3121 } else {
3122 /* if the beacon didn't change, we can finalize immediately */
3123 ieee80211_csa_finalize(sdata);
3124 }
3125
3126 out:
3127 mutex_unlock(&local->chanctx_mtx);
3128 return err;
3129 }
3130
3131 int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3132 struct cfg80211_csa_settings *params)
3133 {
3134 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3135 struct ieee80211_local *local = sdata->local;
3136 int err;
3137
3138 mutex_lock(&local->mtx);
3139 err = __ieee80211_channel_switch(wiphy, dev, params);
3140 mutex_unlock(&local->mtx);
3141
3142 return err;
3143 }
3144
3145 static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
3146 struct cfg80211_mgmt_tx_params *params,
3147 u64 *cookie)
3148 {
3149 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3150 struct ieee80211_local *local = sdata->local;
3151 struct sk_buff *skb;
3152 struct sta_info *sta;
3153 const struct ieee80211_mgmt *mgmt = (void *)params->buf;
3154 bool need_offchan = false;
3155 u32 flags;
3156 int ret;
3157 u8 *data;
3158
3159 if (params->dont_wait_for_ack)
3160 flags = IEEE80211_TX_CTL_NO_ACK;
3161 else
3162 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX |
3163 IEEE80211_TX_CTL_REQ_TX_STATUS;
3164
3165 if (params->no_cck)
3166 flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
3167
3168 switch (sdata->vif.type) {
3169 case NL80211_IFTYPE_ADHOC:
3170 if (!sdata->vif.bss_conf.ibss_joined)
3171 need_offchan = true;
3172 /* fall through */
3173 #ifdef CONFIG_MAC80211_MESH
3174 case NL80211_IFTYPE_MESH_POINT:
3175 if (ieee80211_vif_is_mesh(&sdata->vif) &&
3176 !sdata->u.mesh.mesh_id_len)
3177 need_offchan = true;
3178 /* fall through */
3179 #endif
3180 case NL80211_IFTYPE_AP:
3181 case NL80211_IFTYPE_AP_VLAN:
3182 case NL80211_IFTYPE_P2P_GO:
3183 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
3184 !ieee80211_vif_is_mesh(&sdata->vif) &&
3185 !rcu_access_pointer(sdata->bss->beacon))
3186 need_offchan = true;
3187 if (!ieee80211_is_action(mgmt->frame_control) ||
3188 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC ||
3189 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED ||
3190 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT)
3191 break;
3192 rcu_read_lock();
3193 sta = sta_info_get(sdata, mgmt->da);
3194 rcu_read_unlock();
3195 if (!sta)
3196 return -ENOLINK;
3197 break;
3198 case NL80211_IFTYPE_STATION:
3199 case NL80211_IFTYPE_P2P_CLIENT:
3200 if (!sdata->u.mgd.associated)
3201 need_offchan = true;
3202 break;
3203 case NL80211_IFTYPE_P2P_DEVICE:
3204 need_offchan = true;
3205 break;
3206 default:
3207 return -EOPNOTSUPP;
3208 }
3209
3210 /* configurations requiring offchan cannot work if no channel has been
3211 * specified
3212 */
3213 if (need_offchan && !params->chan)
3214 return -EINVAL;
3215
3216 mutex_lock(&local->mtx);
3217
3218 /* Check if the operating channel is the requested channel */
3219 if (!need_offchan) {
3220 struct ieee80211_chanctx_conf *chanctx_conf;
3221
3222 rcu_read_lock();
3223 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3224
3225 if (chanctx_conf) {
3226 need_offchan = params->chan &&
3227 (params->chan !=
3228 chanctx_conf->def.chan);
3229 } else if (!params->chan) {
3230 ret = -EINVAL;
3231 rcu_read_unlock();
3232 goto out_unlock;
3233 } else {
3234 need_offchan = true;
3235 }
3236 rcu_read_unlock();
3237 }
3238
3239 if (need_offchan && !params->offchan) {
3240 ret = -EBUSY;
3241 goto out_unlock;
3242 }
3243
3244 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len);
3245 if (!skb) {
3246 ret = -ENOMEM;
3247 goto out_unlock;
3248 }
3249 skb_reserve(skb, local->hw.extra_tx_headroom);
3250
3251 data = skb_put(skb, params->len);
3252 memcpy(data, params->buf, params->len);
3253
3254 /* Update CSA counters */
3255 if (sdata->vif.csa_active &&
3256 (sdata->vif.type == NL80211_IFTYPE_AP ||
3257 sdata->vif.type == NL80211_IFTYPE_ADHOC) &&
3258 params->n_csa_offsets) {
3259 int i;
3260 struct beacon_data *beacon = NULL;
3261
3262 rcu_read_lock();
3263
3264 if (sdata->vif.type == NL80211_IFTYPE_AP)
3265 beacon = rcu_dereference(sdata->u.ap.beacon);
3266 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
3267 beacon = rcu_dereference(sdata->u.ibss.presp);
3268 else if (ieee80211_vif_is_mesh(&sdata->vif))
3269 beacon = rcu_dereference(sdata->u.mesh.beacon);
3270
3271 if (beacon)
3272 for (i = 0; i < params->n_csa_offsets; i++)
3273 data[params->csa_offsets[i]] =
3274 beacon->csa_current_counter;
3275
3276 rcu_read_unlock();
3277 }
3278
3279 IEEE80211_SKB_CB(skb)->flags = flags;
3280
3281 skb->dev = sdata->dev;
3282
3283 if (!need_offchan) {
3284 *cookie = (unsigned long) skb;
3285 ieee80211_tx_skb(sdata, skb);
3286 ret = 0;
3287 goto out_unlock;
3288 }
3289
3290 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN |
3291 IEEE80211_TX_INTFL_OFFCHAN_TX_OK;
3292 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
3293 IEEE80211_SKB_CB(skb)->hw_queue =
3294 local->hw.offchannel_tx_hw_queue;
3295
3296 /* This will handle all kinds of coalescing and immediate TX */
3297 ret = ieee80211_start_roc_work(local, sdata, params->chan,
3298 params->wait, cookie, skb,
3299 IEEE80211_ROC_TYPE_MGMT_TX);
3300 if (ret)
3301 kfree_skb(skb);
3302 out_unlock:
3303 mutex_unlock(&local->mtx);
3304 return ret;
3305 }
3306
3307 static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
3308 struct wireless_dev *wdev,
3309 u64 cookie)
3310 {
3311 struct ieee80211_local *local = wiphy_priv(wiphy);
3312
3313 return ieee80211_cancel_roc(local, cookie, true);
3314 }
3315
3316 static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
3317 struct wireless_dev *wdev,
3318 u16 frame_type, bool reg)
3319 {
3320 struct ieee80211_local *local = wiphy_priv(wiphy);
3321
3322 switch (frame_type) {
3323 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
3324 if (reg)
3325 local->probe_req_reg++;
3326 else
3327 local->probe_req_reg--;
3328
3329 if (!local->open_count)
3330 break;
3331
3332 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
3333 break;
3334 default:
3335 break;
3336 }
3337 }
3338
3339 static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3340 {
3341 struct ieee80211_local *local = wiphy_priv(wiphy);
3342
3343 if (local->started)
3344 return -EOPNOTSUPP;
3345
3346 return drv_set_antenna(local, tx_ant, rx_ant);
3347 }
3348
3349 static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3350 {
3351 struct ieee80211_local *local = wiphy_priv(wiphy);
3352
3353 return drv_get_antenna(local, tx_ant, rx_ant);
3354 }
3355
3356 static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3357 struct net_device *dev,
3358 struct cfg80211_gtk_rekey_data *data)
3359 {
3360 struct ieee80211_local *local = wiphy_priv(wiphy);
3361 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3362
3363 if (!local->ops->set_rekey_data)
3364 return -EOPNOTSUPP;
3365
3366 drv_set_rekey_data(local, sdata, data);
3367
3368 return 0;
3369 }
3370
3371 static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3372 const u8 *peer, u64 *cookie)
3373 {
3374 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3375 struct ieee80211_local *local = sdata->local;
3376 struct ieee80211_qos_hdr *nullfunc;
3377 struct sk_buff *skb;
3378 int size = sizeof(*nullfunc);
3379 __le16 fc;
3380 bool qos;
3381 struct ieee80211_tx_info *info;
3382 struct sta_info *sta;
3383 struct ieee80211_chanctx_conf *chanctx_conf;
3384 enum ieee80211_band band;
3385
3386 rcu_read_lock();
3387 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3388 if (WARN_ON(!chanctx_conf)) {
3389 rcu_read_unlock();
3390 return -EINVAL;
3391 }
3392 band = chanctx_conf->def.chan->band;
3393 sta = sta_info_get_bss(sdata, peer);
3394 if (sta) {
3395 qos = sta->sta.wme;
3396 } else {
3397 rcu_read_unlock();
3398 return -ENOLINK;
3399 }
3400
3401 if (qos) {
3402 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3403 IEEE80211_STYPE_QOS_NULLFUNC |
3404 IEEE80211_FCTL_FROMDS);
3405 } else {
3406 size -= 2;
3407 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3408 IEEE80211_STYPE_NULLFUNC |
3409 IEEE80211_FCTL_FROMDS);
3410 }
3411
3412 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
3413 if (!skb) {
3414 rcu_read_unlock();
3415 return -ENOMEM;
3416 }
3417
3418 skb->dev = dev;
3419
3420 skb_reserve(skb, local->hw.extra_tx_headroom);
3421
3422 nullfunc = (void *) skb_put(skb, size);
3423 nullfunc->frame_control = fc;
3424 nullfunc->duration_id = 0;
3425 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3426 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3427 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3428 nullfunc->seq_ctrl = 0;
3429
3430 info = IEEE80211_SKB_CB(skb);
3431
3432 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3433 IEEE80211_TX_INTFL_NL80211_FRAME_TX;
3434
3435 skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3436 skb->priority = 7;
3437 if (qos)
3438 nullfunc->qos_ctrl = cpu_to_le16(7);
3439
3440 local_bh_disable();
3441 ieee80211_xmit(sdata, skb, band);
3442 local_bh_enable();
3443 rcu_read_unlock();
3444
3445 *cookie = (unsigned long) skb;
3446 return 0;
3447 }
3448
3449 static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3450 struct wireless_dev *wdev,
3451 struct cfg80211_chan_def *chandef)
3452 {
3453 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3454 struct ieee80211_local *local = wiphy_priv(wiphy);
3455 struct ieee80211_chanctx_conf *chanctx_conf;
3456 int ret = -ENODATA;
3457
3458 rcu_read_lock();
3459 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3460 if (chanctx_conf) {
3461 *chandef = sdata->vif.bss_conf.chandef;
3462 ret = 0;
3463 } else if (local->open_count > 0 &&
3464 local->open_count == local->monitors &&
3465 sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3466 if (local->use_chanctx)
3467 *chandef = local->monitor_chandef;
3468 else
3469 *chandef = local->_oper_chandef;
3470 ret = 0;
3471 }
3472 rcu_read_unlock();
3473
3474 return ret;
3475 }
3476
3477 #ifdef CONFIG_PM
3478 static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3479 {
3480 drv_set_wakeup(wiphy_priv(wiphy), enabled);
3481 }
3482 #endif
3483
3484 static int ieee80211_set_qos_map(struct wiphy *wiphy,
3485 struct net_device *dev,
3486 struct cfg80211_qos_map *qos_map)
3487 {
3488 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3489 struct mac80211_qos_map *new_qos_map, *old_qos_map;
3490
3491 if (qos_map) {
3492 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3493 if (!new_qos_map)
3494 return -ENOMEM;
3495 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3496 } else {
3497 /* A NULL qos_map was passed to disable QoS mapping */
3498 new_qos_map = NULL;
3499 }
3500
3501 old_qos_map = sdata_dereference(sdata->qos_map, sdata);
3502 rcu_assign_pointer(sdata->qos_map, new_qos_map);
3503 if (old_qos_map)
3504 kfree_rcu(old_qos_map, rcu_head);
3505
3506 return 0;
3507 }
3508
3509 static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3510 struct net_device *dev,
3511 struct cfg80211_chan_def *chandef)
3512 {
3513 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3514 int ret;
3515 u32 changed = 0;
3516
3517 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3518 if (ret == 0)
3519 ieee80211_bss_info_change_notify(sdata, changed);
3520
3521 return ret;
3522 }
3523
3524 const struct cfg80211_ops mac80211_config_ops = {
3525 .add_virtual_intf = ieee80211_add_iface,
3526 .del_virtual_intf = ieee80211_del_iface,
3527 .change_virtual_intf = ieee80211_change_iface,
3528 .start_p2p_device = ieee80211_start_p2p_device,
3529 .stop_p2p_device = ieee80211_stop_p2p_device,
3530 .add_key = ieee80211_add_key,
3531 .del_key = ieee80211_del_key,
3532 .get_key = ieee80211_get_key,
3533 .set_default_key = ieee80211_config_default_key,
3534 .set_default_mgmt_key = ieee80211_config_default_mgmt_key,
3535 .start_ap = ieee80211_start_ap,
3536 .change_beacon = ieee80211_change_beacon,
3537 .stop_ap = ieee80211_stop_ap,
3538 .add_station = ieee80211_add_station,
3539 .del_station = ieee80211_del_station,
3540 .change_station = ieee80211_change_station,
3541 .get_station = ieee80211_get_station,
3542 .dump_station = ieee80211_dump_station,
3543 .dump_survey = ieee80211_dump_survey,
3544 #ifdef CONFIG_MAC80211_MESH
3545 .add_mpath = ieee80211_add_mpath,
3546 .del_mpath = ieee80211_del_mpath,
3547 .change_mpath = ieee80211_change_mpath,
3548 .get_mpath = ieee80211_get_mpath,
3549 .dump_mpath = ieee80211_dump_mpath,
3550 .update_mesh_config = ieee80211_update_mesh_config,
3551 .get_mesh_config = ieee80211_get_mesh_config,
3552 .join_mesh = ieee80211_join_mesh,
3553 .leave_mesh = ieee80211_leave_mesh,
3554 #endif
3555 .change_bss = ieee80211_change_bss,
3556 .set_txq_params = ieee80211_set_txq_params,
3557 .set_monitor_channel = ieee80211_set_monitor_channel,
3558 .suspend = ieee80211_suspend,
3559 .resume = ieee80211_resume,
3560 .scan = ieee80211_scan,
3561 .sched_scan_start = ieee80211_sched_scan_start,
3562 .sched_scan_stop = ieee80211_sched_scan_stop,
3563 .auth = ieee80211_auth,
3564 .assoc = ieee80211_assoc,
3565 .deauth = ieee80211_deauth,
3566 .disassoc = ieee80211_disassoc,
3567 .join_ibss = ieee80211_join_ibss,
3568 .leave_ibss = ieee80211_leave_ibss,
3569 .set_mcast_rate = ieee80211_set_mcast_rate,
3570 .set_wiphy_params = ieee80211_set_wiphy_params,
3571 .set_tx_power = ieee80211_set_tx_power,
3572 .get_tx_power = ieee80211_get_tx_power,
3573 .set_wds_peer = ieee80211_set_wds_peer,
3574 .rfkill_poll = ieee80211_rfkill_poll,
3575 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
3576 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
3577 .set_power_mgmt = ieee80211_set_power_mgmt,
3578 .set_bitrate_mask = ieee80211_set_bitrate_mask,
3579 .remain_on_channel = ieee80211_remain_on_channel,
3580 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
3581 .mgmt_tx = ieee80211_mgmt_tx,
3582 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
3583 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
3584 .mgmt_frame_register = ieee80211_mgmt_frame_register,
3585 .set_antenna = ieee80211_set_antenna,
3586 .get_antenna = ieee80211_get_antenna,
3587 .set_rekey_data = ieee80211_set_rekey_data,
3588 .tdls_oper = ieee80211_tdls_oper,
3589 .tdls_mgmt = ieee80211_tdls_mgmt,
3590 .probe_client = ieee80211_probe_client,
3591 .set_noack_map = ieee80211_set_noack_map,
3592 #ifdef CONFIG_PM
3593 .set_wakeup = ieee80211_set_wakeup,
3594 #endif
3595 .get_channel = ieee80211_cfg_get_channel,
3596 .start_radar_detection = ieee80211_start_radar_detection,
3597 .channel_switch = ieee80211_channel_switch,
3598 .set_qos_map = ieee80211_set_qos_map,
3599 .set_ap_chanwidth = ieee80211_set_ap_chanwidth,
3600 };
This page took 0.159662 seconds and 5 git commands to generate.