1 /* 2 * mac80211 configuration hooks for cfg80211 3 * 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net> 5 * 6 * This file is GPLv2 as found in COPYING. 7 */ 8 9 #include <linux/ieee80211.h> 10 #include <linux/nl80211.h> 11 #include <linux/rtnetlink.h> 12 #include <linux/slab.h> 13 #include <net/net_namespace.h> 14 #include <linux/rcupdate.h> 15 #include <linux/if_ether.h> 16 #include <net/cfg80211.h> 17 #include "ieee80211_i.h" 18 #include "driver-ops.h" 19 #include "cfg.h" 20 #include "rate.h" 21 #include "mesh.h" 22 23 static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy, 24 const char *name, 25 enum nl80211_iftype type, 26 u32 *flags, 27 struct vif_params *params) 28 { 29 struct ieee80211_local *local = wiphy_priv(wiphy); 30 struct wireless_dev *wdev; 31 struct ieee80211_sub_if_data *sdata; 32 int err; 33 34 err = ieee80211_if_add(local, name, &wdev, type, params); 35 if (err) 36 return ERR_PTR(err); 37 38 if (type == NL80211_IFTYPE_MONITOR && flags) { 39 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 40 sdata->u.mntr_flags = *flags; 41 } 42 43 return wdev; 44 } 45 46 static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev) 47 { 48 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev)); 49 50 return 0; 51 } 52 53 static int ieee80211_change_iface(struct wiphy *wiphy, 54 struct net_device *dev, 55 enum nl80211_iftype type, u32 *flags, 56 struct vif_params *params) 57 { 58 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 59 int ret; 60 61 ret = ieee80211_if_change_type(sdata, type); 62 if (ret) 63 return ret; 64 65 if (type == NL80211_IFTYPE_AP_VLAN && 66 params && params->use_4addr == 0) 67 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL); 68 else if (type == NL80211_IFTYPE_STATION && 69 params && params->use_4addr >= 0) 70 sdata->u.mgd.use_4addr = params->use_4addr; 71 72 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) { 73 struct ieee80211_local *local = sdata->local; 74 75 if (ieee80211_sdata_running(sdata)) { 76 u32 mask = MONITOR_FLAG_COOK_FRAMES | 77 MONITOR_FLAG_ACTIVE; 78 79 /* 80 * Prohibit MONITOR_FLAG_COOK_FRAMES and 81 * MONITOR_FLAG_ACTIVE to be changed while the 82 * interface is up. 83 * Else we would need to add a lot of cruft 84 * to update everything: 85 * cooked_mntrs, monitor and all fif_* counters 86 * reconfigure hardware 87 */ 88 if ((*flags & mask) != (sdata->u.mntr_flags & mask)) 89 return -EBUSY; 90 91 ieee80211_adjust_monitor_flags(sdata, -1); 92 sdata->u.mntr_flags = *flags; 93 ieee80211_adjust_monitor_flags(sdata, 1); 94 95 ieee80211_configure_filter(local); 96 } else { 97 /* 98 * Because the interface is down, ieee80211_do_stop 99 * and ieee80211_do_open take care of "everything" 100 * mentioned in the comment above. 101 */ 102 sdata->u.mntr_flags = *flags; 103 } 104 } 105 106 return 0; 107 } 108 109 static int ieee80211_start_p2p_device(struct wiphy *wiphy, 110 struct wireless_dev *wdev) 111 { 112 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 113 int ret; 114 115 mutex_lock(&sdata->local->chanctx_mtx); 116 ret = ieee80211_check_combinations(sdata, NULL, 0, 0); 117 mutex_unlock(&sdata->local->chanctx_mtx); 118 if (ret < 0) 119 return ret; 120 121 return ieee80211_do_open(wdev, true); 122 } 123 124 static void ieee80211_stop_p2p_device(struct wiphy *wiphy, 125 struct wireless_dev *wdev) 126 { 127 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev)); 128 } 129 130 static int ieee80211_set_noack_map(struct wiphy *wiphy, 131 struct net_device *dev, 132 u16 noack_map) 133 { 134 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 135 136 sdata->noack_map = noack_map; 137 return 0; 138 } 139 140 static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev, 141 u8 key_idx, bool pairwise, const u8 *mac_addr, 142 struct key_params *params) 143 { 144 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 145 struct ieee80211_local *local = sdata->local; 146 struct sta_info *sta = NULL; 147 const struct ieee80211_cipher_scheme *cs = NULL; 148 struct ieee80211_key *key; 149 int err; 150 151 if (!ieee80211_sdata_running(sdata)) 152 return -ENETDOWN; 153 154 /* reject WEP and TKIP keys if WEP failed to initialize */ 155 switch (params->cipher) { 156 case WLAN_CIPHER_SUITE_WEP40: 157 case WLAN_CIPHER_SUITE_TKIP: 158 case WLAN_CIPHER_SUITE_WEP104: 159 if (IS_ERR(local->wep_tx_tfm)) 160 return -EINVAL; 161 break; 162 case WLAN_CIPHER_SUITE_CCMP: 163 case WLAN_CIPHER_SUITE_AES_CMAC: 164 case WLAN_CIPHER_SUITE_GCMP: 165 break; 166 default: 167 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type); 168 break; 169 } 170 171 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len, 172 params->key, params->seq_len, params->seq, 173 cs); 174 if (IS_ERR(key)) 175 return PTR_ERR(key); 176 177 if (pairwise) 178 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE; 179 180 mutex_lock(&local->sta_mtx); 181 182 if (mac_addr) { 183 if (ieee80211_vif_is_mesh(&sdata->vif)) 184 sta = sta_info_get(sdata, mac_addr); 185 else 186 sta = sta_info_get_bss(sdata, mac_addr); 187 /* 188 * The ASSOC test makes sure the driver is ready to 189 * receive the key. When wpa_supplicant has roamed 190 * using FT, it attempts to set the key before 191 * association has completed, this rejects that attempt 192 * so it will set the key again after assocation. 193 * 194 * TODO: accept the key if we have a station entry and 195 * add it to the device after the station. 196 */ 197 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) { 198 ieee80211_key_free_unused(key); 199 err = -ENOENT; 200 goto out_unlock; 201 } 202 } 203 204 switch (sdata->vif.type) { 205 case NL80211_IFTYPE_STATION: 206 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED) 207 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 208 break; 209 case NL80211_IFTYPE_AP: 210 case NL80211_IFTYPE_AP_VLAN: 211 /* Keys without a station are used for TX only */ 212 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP)) 213 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 214 break; 215 case NL80211_IFTYPE_ADHOC: 216 /* no MFP (yet) */ 217 break; 218 case NL80211_IFTYPE_MESH_POINT: 219 #ifdef CONFIG_MAC80211_MESH 220 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE) 221 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 222 break; 223 #endif 224 case NL80211_IFTYPE_WDS: 225 case NL80211_IFTYPE_MONITOR: 226 case NL80211_IFTYPE_P2P_DEVICE: 227 case NL80211_IFTYPE_UNSPECIFIED: 228 case NUM_NL80211_IFTYPES: 229 case NL80211_IFTYPE_P2P_CLIENT: 230 case NL80211_IFTYPE_P2P_GO: 231 /* shouldn't happen */ 232 WARN_ON_ONCE(1); 233 break; 234 } 235 236 if (sta) 237 sta->cipher_scheme = cs; 238 239 err = ieee80211_key_link(key, sdata, sta); 240 241 out_unlock: 242 mutex_unlock(&local->sta_mtx); 243 244 return err; 245 } 246 247 static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev, 248 u8 key_idx, bool pairwise, const u8 *mac_addr) 249 { 250 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 251 struct ieee80211_local *local = sdata->local; 252 struct sta_info *sta; 253 struct ieee80211_key *key = NULL; 254 int ret; 255 256 mutex_lock(&local->sta_mtx); 257 mutex_lock(&local->key_mtx); 258 259 if (mac_addr) { 260 ret = -ENOENT; 261 262 sta = sta_info_get_bss(sdata, mac_addr); 263 if (!sta) 264 goto out_unlock; 265 266 if (pairwise) 267 key = key_mtx_dereference(local, sta->ptk[key_idx]); 268 else 269 key = key_mtx_dereference(local, sta->gtk[key_idx]); 270 } else 271 key = key_mtx_dereference(local, sdata->keys[key_idx]); 272 273 if (!key) { 274 ret = -ENOENT; 275 goto out_unlock; 276 } 277 278 ieee80211_key_free(key, true); 279 280 ret = 0; 281 out_unlock: 282 mutex_unlock(&local->key_mtx); 283 mutex_unlock(&local->sta_mtx); 284 285 return ret; 286 } 287 288 static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev, 289 u8 key_idx, bool pairwise, const u8 *mac_addr, 290 void *cookie, 291 void (*callback)(void *cookie, 292 struct key_params *params)) 293 { 294 struct ieee80211_sub_if_data *sdata; 295 struct sta_info *sta = NULL; 296 u8 seq[6] = {0}; 297 struct key_params params; 298 struct ieee80211_key *key = NULL; 299 u64 pn64; 300 u32 iv32; 301 u16 iv16; 302 int err = -ENOENT; 303 304 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 305 306 rcu_read_lock(); 307 308 if (mac_addr) { 309 sta = sta_info_get_bss(sdata, mac_addr); 310 if (!sta) 311 goto out; 312 313 if (pairwise && key_idx < NUM_DEFAULT_KEYS) 314 key = rcu_dereference(sta->ptk[key_idx]); 315 else if (!pairwise && 316 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS) 317 key = rcu_dereference(sta->gtk[key_idx]); 318 } else 319 key = rcu_dereference(sdata->keys[key_idx]); 320 321 if (!key) 322 goto out; 323 324 memset(¶ms, 0, sizeof(params)); 325 326 params.cipher = key->conf.cipher; 327 328 switch (key->conf.cipher) { 329 case WLAN_CIPHER_SUITE_TKIP: 330 iv32 = key->u.tkip.tx.iv32; 331 iv16 = key->u.tkip.tx.iv16; 332 333 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) 334 drv_get_tkip_seq(sdata->local, 335 key->conf.hw_key_idx, 336 &iv32, &iv16); 337 338 seq[0] = iv16 & 0xff; 339 seq[1] = (iv16 >> 8) & 0xff; 340 seq[2] = iv32 & 0xff; 341 seq[3] = (iv32 >> 8) & 0xff; 342 seq[4] = (iv32 >> 16) & 0xff; 343 seq[5] = (iv32 >> 24) & 0xff; 344 params.seq = seq; 345 params.seq_len = 6; 346 break; 347 case WLAN_CIPHER_SUITE_CCMP: 348 pn64 = atomic64_read(&key->u.ccmp.tx_pn); 349 seq[0] = pn64; 350 seq[1] = pn64 >> 8; 351 seq[2] = pn64 >> 16; 352 seq[3] = pn64 >> 24; 353 seq[4] = pn64 >> 32; 354 seq[5] = pn64 >> 40; 355 params.seq = seq; 356 params.seq_len = 6; 357 break; 358 case WLAN_CIPHER_SUITE_AES_CMAC: 359 pn64 = atomic64_read(&key->u.aes_cmac.tx_pn); 360 seq[0] = pn64; 361 seq[1] = pn64 >> 8; 362 seq[2] = pn64 >> 16; 363 seq[3] = pn64 >> 24; 364 seq[4] = pn64 >> 32; 365 seq[5] = pn64 >> 40; 366 params.seq = seq; 367 params.seq_len = 6; 368 break; 369 } 370 371 params.key = key->conf.key; 372 params.key_len = key->conf.keylen; 373 374 callback(cookie, ¶ms); 375 err = 0; 376 377 out: 378 rcu_read_unlock(); 379 return err; 380 } 381 382 static int ieee80211_config_default_key(struct wiphy *wiphy, 383 struct net_device *dev, 384 u8 key_idx, bool uni, 385 bool multi) 386 { 387 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 388 389 ieee80211_set_default_key(sdata, key_idx, uni, multi); 390 391 return 0; 392 } 393 394 static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy, 395 struct net_device *dev, 396 u8 key_idx) 397 { 398 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 399 400 ieee80211_set_default_mgmt_key(sdata, key_idx); 401 402 return 0; 403 } 404 405 void sta_set_rate_info_tx(struct sta_info *sta, 406 const struct ieee80211_tx_rate *rate, 407 struct rate_info *rinfo) 408 { 409 rinfo->flags = 0; 410 if (rate->flags & IEEE80211_TX_RC_MCS) { 411 rinfo->flags |= RATE_INFO_FLAGS_MCS; 412 rinfo->mcs = rate->idx; 413 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) { 414 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS; 415 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate); 416 rinfo->nss = ieee80211_rate_get_vht_nss(rate); 417 } else { 418 struct ieee80211_supported_band *sband; 419 int shift = ieee80211_vif_get_shift(&sta->sdata->vif); 420 u16 brate; 421 422 sband = sta->local->hw.wiphy->bands[ 423 ieee80211_get_sdata_band(sta->sdata)]; 424 brate = sband->bitrates[rate->idx].bitrate; 425 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift); 426 } 427 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH) 428 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 429 if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH) 430 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 431 if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH) 432 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 433 if (rate->flags & IEEE80211_TX_RC_SHORT_GI) 434 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 435 } 436 437 void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo) 438 { 439 rinfo->flags = 0; 440 441 if (sta->last_rx_rate_flag & RX_FLAG_HT) { 442 rinfo->flags |= RATE_INFO_FLAGS_MCS; 443 rinfo->mcs = sta->last_rx_rate_idx; 444 } else if (sta->last_rx_rate_flag & RX_FLAG_VHT) { 445 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS; 446 rinfo->nss = sta->last_rx_rate_vht_nss; 447 rinfo->mcs = sta->last_rx_rate_idx; 448 } else { 449 struct ieee80211_supported_band *sband; 450 int shift = ieee80211_vif_get_shift(&sta->sdata->vif); 451 u16 brate; 452 453 sband = sta->local->hw.wiphy->bands[ 454 ieee80211_get_sdata_band(sta->sdata)]; 455 brate = sband->bitrates[sta->last_rx_rate_idx].bitrate; 456 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift); 457 } 458 459 if (sta->last_rx_rate_flag & RX_FLAG_40MHZ) 460 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 461 if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI) 462 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 463 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80MHZ) 464 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 465 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80P80MHZ) 466 rinfo->flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH; 467 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_160MHZ) 468 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 469 } 470 471 static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev, 472 int idx, u8 *mac, struct station_info *sinfo) 473 { 474 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 475 struct ieee80211_local *local = sdata->local; 476 struct sta_info *sta; 477 int ret = -ENOENT; 478 479 mutex_lock(&local->sta_mtx); 480 481 sta = sta_info_get_by_idx(sdata, idx); 482 if (sta) { 483 ret = 0; 484 memcpy(mac, sta->sta.addr, ETH_ALEN); 485 sta_set_sinfo(sta, sinfo); 486 } 487 488 mutex_unlock(&local->sta_mtx); 489 490 return ret; 491 } 492 493 static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev, 494 int idx, struct survey_info *survey) 495 { 496 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 497 498 return drv_get_survey(local, idx, survey); 499 } 500 501 static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev, 502 const u8 *mac, struct station_info *sinfo) 503 { 504 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 505 struct ieee80211_local *local = sdata->local; 506 struct sta_info *sta; 507 int ret = -ENOENT; 508 509 mutex_lock(&local->sta_mtx); 510 511 sta = sta_info_get_bss(sdata, mac); 512 if (sta) { 513 ret = 0; 514 sta_set_sinfo(sta, sinfo); 515 } 516 517 mutex_unlock(&local->sta_mtx); 518 519 return ret; 520 } 521 522 static int ieee80211_set_monitor_channel(struct wiphy *wiphy, 523 struct cfg80211_chan_def *chandef) 524 { 525 struct ieee80211_local *local = wiphy_priv(wiphy); 526 struct ieee80211_sub_if_data *sdata; 527 int ret = 0; 528 529 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef)) 530 return 0; 531 532 mutex_lock(&local->mtx); 533 mutex_lock(&local->iflist_mtx); 534 if (local->use_chanctx) { 535 sdata = rcu_dereference_protected( 536 local->monitor_sdata, 537 lockdep_is_held(&local->iflist_mtx)); 538 if (sdata) { 539 ieee80211_vif_release_channel(sdata); 540 ret = ieee80211_vif_use_channel(sdata, chandef, 541 IEEE80211_CHANCTX_EXCLUSIVE); 542 } 543 } else if (local->open_count == local->monitors) { 544 local->_oper_chandef = *chandef; 545 ieee80211_hw_config(local, 0); 546 } 547 548 if (ret == 0) 549 local->monitor_chandef = *chandef; 550 mutex_unlock(&local->iflist_mtx); 551 mutex_unlock(&local->mtx); 552 553 return ret; 554 } 555 556 static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata, 557 const u8 *resp, size_t resp_len, 558 const struct ieee80211_csa_settings *csa) 559 { 560 struct probe_resp *new, *old; 561 562 if (!resp || !resp_len) 563 return 1; 564 565 old = sdata_dereference(sdata->u.ap.probe_resp, sdata); 566 567 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL); 568 if (!new) 569 return -ENOMEM; 570 571 new->len = resp_len; 572 memcpy(new->data, resp, resp_len); 573 574 if (csa) 575 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp, 576 csa->n_counter_offsets_presp * 577 sizeof(new->csa_counter_offsets[0])); 578 579 rcu_assign_pointer(sdata->u.ap.probe_resp, new); 580 if (old) 581 kfree_rcu(old, rcu_head); 582 583 return 0; 584 } 585 586 static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata, 587 struct cfg80211_beacon_data *params, 588 const struct ieee80211_csa_settings *csa) 589 { 590 struct beacon_data *new, *old; 591 int new_head_len, new_tail_len; 592 int size, err; 593 u32 changed = BSS_CHANGED_BEACON; 594 595 old = sdata_dereference(sdata->u.ap.beacon, sdata); 596 597 598 /* Need to have a beacon head if we don't have one yet */ 599 if (!params->head && !old) 600 return -EINVAL; 601 602 /* new or old head? */ 603 if (params->head) 604 new_head_len = params->head_len; 605 else 606 new_head_len = old->head_len; 607 608 /* new or old tail? */ 609 if (params->tail || !old) 610 /* params->tail_len will be zero for !params->tail */ 611 new_tail_len = params->tail_len; 612 else 613 new_tail_len = old->tail_len; 614 615 size = sizeof(*new) + new_head_len + new_tail_len; 616 617 new = kzalloc(size, GFP_KERNEL); 618 if (!new) 619 return -ENOMEM; 620 621 /* start filling the new info now */ 622 623 /* 624 * pointers go into the block we allocated, 625 * memory is | beacon_data | head | tail | 626 */ 627 new->head = ((u8 *) new) + sizeof(*new); 628 new->tail = new->head + new_head_len; 629 new->head_len = new_head_len; 630 new->tail_len = new_tail_len; 631 632 if (csa) { 633 new->csa_current_counter = csa->count; 634 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon, 635 csa->n_counter_offsets_beacon * 636 sizeof(new->csa_counter_offsets[0])); 637 } 638 639 /* copy in head */ 640 if (params->head) 641 memcpy(new->head, params->head, new_head_len); 642 else 643 memcpy(new->head, old->head, new_head_len); 644 645 /* copy in optional tail */ 646 if (params->tail) 647 memcpy(new->tail, params->tail, new_tail_len); 648 else 649 if (old) 650 memcpy(new->tail, old->tail, new_tail_len); 651 652 err = ieee80211_set_probe_resp(sdata, params->probe_resp, 653 params->probe_resp_len, csa); 654 if (err < 0) 655 return err; 656 if (err == 0) 657 changed |= BSS_CHANGED_AP_PROBE_RESP; 658 659 rcu_assign_pointer(sdata->u.ap.beacon, new); 660 661 if (old) 662 kfree_rcu(old, rcu_head); 663 664 return changed; 665 } 666 667 static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev, 668 struct cfg80211_ap_settings *params) 669 { 670 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 671 struct ieee80211_local *local = sdata->local; 672 struct beacon_data *old; 673 struct ieee80211_sub_if_data *vlan; 674 u32 changed = BSS_CHANGED_BEACON_INT | 675 BSS_CHANGED_BEACON_ENABLED | 676 BSS_CHANGED_BEACON | 677 BSS_CHANGED_SSID | 678 BSS_CHANGED_P2P_PS; 679 int err; 680 681 old = sdata_dereference(sdata->u.ap.beacon, sdata); 682 if (old) 683 return -EALREADY; 684 685 /* TODO: make hostapd tell us what it wants */ 686 sdata->smps_mode = IEEE80211_SMPS_OFF; 687 sdata->needed_rx_chains = sdata->local->rx_chains; 688 689 mutex_lock(&local->mtx); 690 err = ieee80211_vif_use_channel(sdata, ¶ms->chandef, 691 IEEE80211_CHANCTX_SHARED); 692 if (!err) 693 ieee80211_vif_copy_chanctx_to_vlans(sdata, false); 694 mutex_unlock(&local->mtx); 695 if (err) 696 return err; 697 698 /* 699 * Apply control port protocol, this allows us to 700 * not encrypt dynamic WEP control frames. 701 */ 702 sdata->control_port_protocol = params->crypto.control_port_ethertype; 703 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt; 704 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local, 705 ¶ms->crypto, 706 sdata->vif.type); 707 708 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) { 709 vlan->control_port_protocol = 710 params->crypto.control_port_ethertype; 711 vlan->control_port_no_encrypt = 712 params->crypto.control_port_no_encrypt; 713 vlan->encrypt_headroom = 714 ieee80211_cs_headroom(sdata->local, 715 ¶ms->crypto, 716 vlan->vif.type); 717 } 718 719 sdata->vif.bss_conf.beacon_int = params->beacon_interval; 720 sdata->vif.bss_conf.dtim_period = params->dtim_period; 721 sdata->vif.bss_conf.enable_beacon = true; 722 723 sdata->vif.bss_conf.ssid_len = params->ssid_len; 724 if (params->ssid_len) 725 memcpy(sdata->vif.bss_conf.ssid, params->ssid, 726 params->ssid_len); 727 sdata->vif.bss_conf.hidden_ssid = 728 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE); 729 730 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0, 731 sizeof(sdata->vif.bss_conf.p2p_noa_attr)); 732 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow = 733 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 734 if (params->p2p_opp_ps) 735 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 736 IEEE80211_P2P_OPPPS_ENABLE_BIT; 737 738 err = ieee80211_assign_beacon(sdata, ¶ms->beacon, NULL); 739 if (err < 0) { 740 ieee80211_vif_release_channel(sdata); 741 return err; 742 } 743 changed |= err; 744 745 err = drv_start_ap(sdata->local, sdata); 746 if (err) { 747 old = sdata_dereference(sdata->u.ap.beacon, sdata); 748 749 if (old) 750 kfree_rcu(old, rcu_head); 751 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL); 752 ieee80211_vif_release_channel(sdata); 753 return err; 754 } 755 756 ieee80211_recalc_dtim(local, sdata); 757 ieee80211_bss_info_change_notify(sdata, changed); 758 759 netif_carrier_on(dev); 760 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) 761 netif_carrier_on(vlan->dev); 762 763 return 0; 764 } 765 766 static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev, 767 struct cfg80211_beacon_data *params) 768 { 769 struct ieee80211_sub_if_data *sdata; 770 struct beacon_data *old; 771 int err; 772 773 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 774 sdata_assert_lock(sdata); 775 776 /* don't allow changing the beacon while CSA is in place - offset 777 * of channel switch counter may change 778 */ 779 if (sdata->vif.csa_active) 780 return -EBUSY; 781 782 old = sdata_dereference(sdata->u.ap.beacon, sdata); 783 if (!old) 784 return -ENOENT; 785 786 err = ieee80211_assign_beacon(sdata, params, NULL); 787 if (err < 0) 788 return err; 789 ieee80211_bss_info_change_notify(sdata, err); 790 return 0; 791 } 792 793 static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev) 794 { 795 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 796 struct ieee80211_sub_if_data *vlan; 797 struct ieee80211_local *local = sdata->local; 798 struct beacon_data *old_beacon; 799 struct probe_resp *old_probe_resp; 800 struct cfg80211_chan_def chandef; 801 802 sdata_assert_lock(sdata); 803 804 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata); 805 if (!old_beacon) 806 return -ENOENT; 807 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata); 808 809 /* abort any running channel switch */ 810 mutex_lock(&local->mtx); 811 sdata->vif.csa_active = false; 812 if (sdata->csa_block_tx) { 813 ieee80211_wake_vif_queues(local, sdata, 814 IEEE80211_QUEUE_STOP_REASON_CSA); 815 sdata->csa_block_tx = false; 816 } 817 818 mutex_unlock(&local->mtx); 819 820 kfree(sdata->u.ap.next_beacon); 821 sdata->u.ap.next_beacon = NULL; 822 823 /* turn off carrier for this interface and dependent VLANs */ 824 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) 825 netif_carrier_off(vlan->dev); 826 netif_carrier_off(dev); 827 828 /* remove beacon and probe response */ 829 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL); 830 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL); 831 kfree_rcu(old_beacon, rcu_head); 832 if (old_probe_resp) 833 kfree_rcu(old_probe_resp, rcu_head); 834 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF; 835 836 __sta_info_flush(sdata, true); 837 ieee80211_free_keys(sdata, true); 838 839 sdata->vif.bss_conf.enable_beacon = false; 840 sdata->vif.bss_conf.ssid_len = 0; 841 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state); 842 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED); 843 844 if (sdata->wdev.cac_started) { 845 chandef = sdata->vif.bss_conf.chandef; 846 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work); 847 cfg80211_cac_event(sdata->dev, &chandef, 848 NL80211_RADAR_CAC_ABORTED, 849 GFP_KERNEL); 850 } 851 852 drv_stop_ap(sdata->local, sdata); 853 854 /* free all potentially still buffered bcast frames */ 855 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf); 856 skb_queue_purge(&sdata->u.ap.ps.bc_buf); 857 858 mutex_lock(&local->mtx); 859 ieee80211_vif_copy_chanctx_to_vlans(sdata, true); 860 ieee80211_vif_release_channel(sdata); 861 mutex_unlock(&local->mtx); 862 863 return 0; 864 } 865 866 /* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */ 867 struct iapp_layer2_update { 868 u8 da[ETH_ALEN]; /* broadcast */ 869 u8 sa[ETH_ALEN]; /* STA addr */ 870 __be16 len; /* 6 */ 871 u8 dsap; /* 0 */ 872 u8 ssap; /* 0 */ 873 u8 control; 874 u8 xid_info[3]; 875 } __packed; 876 877 static void ieee80211_send_layer2_update(struct sta_info *sta) 878 { 879 struct iapp_layer2_update *msg; 880 struct sk_buff *skb; 881 882 /* Send Level 2 Update Frame to update forwarding tables in layer 2 883 * bridge devices */ 884 885 skb = dev_alloc_skb(sizeof(*msg)); 886 if (!skb) 887 return; 888 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg)); 889 890 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID) 891 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */ 892 893 eth_broadcast_addr(msg->da); 894 memcpy(msg->sa, sta->sta.addr, ETH_ALEN); 895 msg->len = htons(6); 896 msg->dsap = 0; 897 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */ 898 msg->control = 0xaf; /* XID response lsb.1111F101. 899 * F=0 (no poll command; unsolicited frame) */ 900 msg->xid_info[0] = 0x81; /* XID format identifier */ 901 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */ 902 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */ 903 904 skb->dev = sta->sdata->dev; 905 skb->protocol = eth_type_trans(skb, sta->sdata->dev); 906 memset(skb->cb, 0, sizeof(skb->cb)); 907 netif_rx_ni(skb); 908 } 909 910 static int sta_apply_auth_flags(struct ieee80211_local *local, 911 struct sta_info *sta, 912 u32 mask, u32 set) 913 { 914 int ret; 915 916 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 917 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 918 !test_sta_flag(sta, WLAN_STA_AUTH)) { 919 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH); 920 if (ret) 921 return ret; 922 } 923 924 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) && 925 set & BIT(NL80211_STA_FLAG_ASSOCIATED) && 926 !test_sta_flag(sta, WLAN_STA_ASSOC)) { 927 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC); 928 if (ret) 929 return ret; 930 } 931 932 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 933 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) 934 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED); 935 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 936 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC); 937 else 938 ret = 0; 939 if (ret) 940 return ret; 941 } 942 943 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) && 944 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) && 945 test_sta_flag(sta, WLAN_STA_ASSOC)) { 946 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH); 947 if (ret) 948 return ret; 949 } 950 951 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 952 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) && 953 test_sta_flag(sta, WLAN_STA_AUTH)) { 954 ret = sta_info_move_state(sta, IEEE80211_STA_NONE); 955 if (ret) 956 return ret; 957 } 958 959 return 0; 960 } 961 962 static int sta_apply_parameters(struct ieee80211_local *local, 963 struct sta_info *sta, 964 struct station_parameters *params) 965 { 966 int ret = 0; 967 struct ieee80211_supported_band *sband; 968 struct ieee80211_sub_if_data *sdata = sta->sdata; 969 enum ieee80211_band band = ieee80211_get_sdata_band(sdata); 970 u32 mask, set; 971 972 sband = local->hw.wiphy->bands[band]; 973 974 mask = params->sta_flags_mask; 975 set = params->sta_flags_set; 976 977 if (ieee80211_vif_is_mesh(&sdata->vif)) { 978 /* 979 * In mesh mode, ASSOCIATED isn't part of the nl80211 980 * API but must follow AUTHENTICATED for driver state. 981 */ 982 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED)) 983 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED); 984 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) 985 set |= BIT(NL80211_STA_FLAG_ASSOCIATED); 986 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 987 /* 988 * TDLS -- everything follows authorized, but 989 * only becoming authorized is possible, not 990 * going back 991 */ 992 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 993 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) | 994 BIT(NL80211_STA_FLAG_ASSOCIATED); 995 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) | 996 BIT(NL80211_STA_FLAG_ASSOCIATED); 997 } 998 } 999 1000 /* auth flags will be set later for TDLS stations */ 1001 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1002 ret = sta_apply_auth_flags(local, sta, mask, set); 1003 if (ret) 1004 return ret; 1005 } 1006 1007 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) { 1008 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) 1009 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE); 1010 else 1011 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE); 1012 } 1013 1014 if (mask & BIT(NL80211_STA_FLAG_WME)) { 1015 if (set & BIT(NL80211_STA_FLAG_WME)) { 1016 set_sta_flag(sta, WLAN_STA_WME); 1017 sta->sta.wme = true; 1018 } else { 1019 clear_sta_flag(sta, WLAN_STA_WME); 1020 sta->sta.wme = false; 1021 } 1022 } 1023 1024 if (mask & BIT(NL80211_STA_FLAG_MFP)) { 1025 if (set & BIT(NL80211_STA_FLAG_MFP)) 1026 set_sta_flag(sta, WLAN_STA_MFP); 1027 else 1028 clear_sta_flag(sta, WLAN_STA_MFP); 1029 } 1030 1031 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) { 1032 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER)) 1033 set_sta_flag(sta, WLAN_STA_TDLS_PEER); 1034 else 1035 clear_sta_flag(sta, WLAN_STA_TDLS_PEER); 1036 } 1037 1038 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) { 1039 sta->sta.uapsd_queues = params->uapsd_queues; 1040 sta->sta.max_sp = params->max_sp; 1041 } 1042 1043 /* 1044 * cfg80211 validates this (1-2007) and allows setting the AID 1045 * only when creating a new station entry 1046 */ 1047 if (params->aid) 1048 sta->sta.aid = params->aid; 1049 1050 /* 1051 * Some of the following updates would be racy if called on an 1052 * existing station, via ieee80211_change_station(). However, 1053 * all such changes are rejected by cfg80211 except for updates 1054 * changing the supported rates on an existing but not yet used 1055 * TDLS peer. 1056 */ 1057 1058 if (params->listen_interval >= 0) 1059 sta->listen_interval = params->listen_interval; 1060 1061 if (params->supported_rates) { 1062 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef, 1063 sband, params->supported_rates, 1064 params->supported_rates_len, 1065 &sta->sta.supp_rates[band]); 1066 } 1067 1068 if (params->ht_capa) 1069 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband, 1070 params->ht_capa, sta); 1071 1072 if (params->vht_capa) 1073 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband, 1074 params->vht_capa, sta); 1075 1076 if (params->opmode_notif_used) { 1077 /* returned value is only needed for rc update, but the 1078 * rc isn't initialized here yet, so ignore it 1079 */ 1080 __ieee80211_vht_handle_opmode(sdata, sta, 1081 params->opmode_notif, 1082 band, false); 1083 } 1084 1085 if (ieee80211_vif_is_mesh(&sdata->vif)) { 1086 #ifdef CONFIG_MAC80211_MESH 1087 u32 changed = 0; 1088 1089 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) { 1090 switch (params->plink_state) { 1091 case NL80211_PLINK_ESTAB: 1092 if (sta->plink_state != NL80211_PLINK_ESTAB) 1093 changed = mesh_plink_inc_estab_count( 1094 sdata); 1095 sta->plink_state = params->plink_state; 1096 1097 ieee80211_mps_sta_status_update(sta); 1098 changed |= ieee80211_mps_set_sta_local_pm(sta, 1099 sdata->u.mesh.mshcfg.power_mode); 1100 break; 1101 case NL80211_PLINK_LISTEN: 1102 case NL80211_PLINK_BLOCKED: 1103 case NL80211_PLINK_OPN_SNT: 1104 case NL80211_PLINK_OPN_RCVD: 1105 case NL80211_PLINK_CNF_RCVD: 1106 case NL80211_PLINK_HOLDING: 1107 if (sta->plink_state == NL80211_PLINK_ESTAB) 1108 changed = mesh_plink_dec_estab_count( 1109 sdata); 1110 sta->plink_state = params->plink_state; 1111 1112 ieee80211_mps_sta_status_update(sta); 1113 changed |= ieee80211_mps_set_sta_local_pm(sta, 1114 NL80211_MESH_POWER_UNKNOWN); 1115 break; 1116 default: 1117 /* nothing */ 1118 break; 1119 } 1120 } 1121 1122 switch (params->plink_action) { 1123 case NL80211_PLINK_ACTION_NO_ACTION: 1124 /* nothing */ 1125 break; 1126 case NL80211_PLINK_ACTION_OPEN: 1127 changed |= mesh_plink_open(sta); 1128 break; 1129 case NL80211_PLINK_ACTION_BLOCK: 1130 changed |= mesh_plink_block(sta); 1131 break; 1132 } 1133 1134 if (params->local_pm) 1135 changed |= 1136 ieee80211_mps_set_sta_local_pm(sta, 1137 params->local_pm); 1138 ieee80211_mbss_info_change_notify(sdata, changed); 1139 #endif 1140 } 1141 1142 /* set the STA state after all sta info from usermode has been set */ 1143 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1144 ret = sta_apply_auth_flags(local, sta, mask, set); 1145 if (ret) 1146 return ret; 1147 } 1148 1149 return 0; 1150 } 1151 1152 static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev, 1153 const u8 *mac, 1154 struct station_parameters *params) 1155 { 1156 struct ieee80211_local *local = wiphy_priv(wiphy); 1157 struct sta_info *sta; 1158 struct ieee80211_sub_if_data *sdata; 1159 int err; 1160 int layer2_update; 1161 1162 if (params->vlan) { 1163 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan); 1164 1165 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 1166 sdata->vif.type != NL80211_IFTYPE_AP) 1167 return -EINVAL; 1168 } else 1169 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1170 1171 if (ether_addr_equal(mac, sdata->vif.addr)) 1172 return -EINVAL; 1173 1174 if (is_multicast_ether_addr(mac)) 1175 return -EINVAL; 1176 1177 sta = sta_info_alloc(sdata, mac, GFP_KERNEL); 1178 if (!sta) 1179 return -ENOMEM; 1180 1181 /* 1182 * defaults -- if userspace wants something else we'll 1183 * change it accordingly in sta_apply_parameters() 1184 */ 1185 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) { 1186 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH); 1187 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC); 1188 } else { 1189 sta->sta.tdls = true; 1190 } 1191 1192 err = sta_apply_parameters(local, sta, params); 1193 if (err) { 1194 sta_info_free(local, sta); 1195 return err; 1196 } 1197 1198 /* 1199 * for TDLS, rate control should be initialized only when 1200 * rates are known and station is marked authorized 1201 */ 1202 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) 1203 rate_control_rate_init(sta); 1204 1205 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 1206 sdata->vif.type == NL80211_IFTYPE_AP; 1207 1208 err = sta_info_insert_rcu(sta); 1209 if (err) { 1210 rcu_read_unlock(); 1211 return err; 1212 } 1213 1214 if (layer2_update) 1215 ieee80211_send_layer2_update(sta); 1216 1217 rcu_read_unlock(); 1218 1219 return 0; 1220 } 1221 1222 static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev, 1223 const u8 *mac) 1224 { 1225 struct ieee80211_sub_if_data *sdata; 1226 1227 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1228 1229 if (mac) 1230 return sta_info_destroy_addr_bss(sdata, mac); 1231 1232 sta_info_flush(sdata); 1233 return 0; 1234 } 1235 1236 static int ieee80211_change_station(struct wiphy *wiphy, 1237 struct net_device *dev, const u8 *mac, 1238 struct station_parameters *params) 1239 { 1240 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1241 struct ieee80211_local *local = wiphy_priv(wiphy); 1242 struct sta_info *sta; 1243 struct ieee80211_sub_if_data *vlansdata; 1244 enum cfg80211_station_type statype; 1245 int err; 1246 1247 mutex_lock(&local->sta_mtx); 1248 1249 sta = sta_info_get_bss(sdata, mac); 1250 if (!sta) { 1251 err = -ENOENT; 1252 goto out_err; 1253 } 1254 1255 switch (sdata->vif.type) { 1256 case NL80211_IFTYPE_MESH_POINT: 1257 if (sdata->u.mesh.user_mpm) 1258 statype = CFG80211_STA_MESH_PEER_USER; 1259 else 1260 statype = CFG80211_STA_MESH_PEER_KERNEL; 1261 break; 1262 case NL80211_IFTYPE_ADHOC: 1263 statype = CFG80211_STA_IBSS; 1264 break; 1265 case NL80211_IFTYPE_STATION: 1266 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1267 statype = CFG80211_STA_AP_STA; 1268 break; 1269 } 1270 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 1271 statype = CFG80211_STA_TDLS_PEER_ACTIVE; 1272 else 1273 statype = CFG80211_STA_TDLS_PEER_SETUP; 1274 break; 1275 case NL80211_IFTYPE_AP: 1276 case NL80211_IFTYPE_AP_VLAN: 1277 statype = CFG80211_STA_AP_CLIENT; 1278 break; 1279 default: 1280 err = -EOPNOTSUPP; 1281 goto out_err; 1282 } 1283 1284 err = cfg80211_check_station_change(wiphy, params, statype); 1285 if (err) 1286 goto out_err; 1287 1288 if (params->vlan && params->vlan != sta->sdata->dev) { 1289 bool prev_4addr = false; 1290 bool new_4addr = false; 1291 1292 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan); 1293 1294 if (params->vlan->ieee80211_ptr->use_4addr) { 1295 if (vlansdata->u.vlan.sta) { 1296 err = -EBUSY; 1297 goto out_err; 1298 } 1299 1300 rcu_assign_pointer(vlansdata->u.vlan.sta, sta); 1301 new_4addr = true; 1302 } 1303 1304 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN && 1305 sta->sdata->u.vlan.sta) { 1306 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL); 1307 prev_4addr = true; 1308 } 1309 1310 sta->sdata = vlansdata; 1311 1312 if (sta->sta_state == IEEE80211_STA_AUTHORIZED && 1313 prev_4addr != new_4addr) { 1314 if (new_4addr) 1315 atomic_dec(&sta->sdata->bss->num_mcast_sta); 1316 else 1317 atomic_inc(&sta->sdata->bss->num_mcast_sta); 1318 } 1319 1320 ieee80211_send_layer2_update(sta); 1321 } 1322 1323 err = sta_apply_parameters(local, sta, params); 1324 if (err) 1325 goto out_err; 1326 1327 /* When peer becomes authorized, init rate control as well */ 1328 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) && 1329 test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 1330 rate_control_rate_init(sta); 1331 1332 mutex_unlock(&local->sta_mtx); 1333 1334 if ((sdata->vif.type == NL80211_IFTYPE_AP || 1335 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) && 1336 sta->known_smps_mode != sta->sdata->bss->req_smps && 1337 test_sta_flag(sta, WLAN_STA_AUTHORIZED) && 1338 sta_info_tx_streams(sta) != 1) { 1339 ht_dbg(sta->sdata, 1340 "%pM just authorized and MIMO capable - update SMPS\n", 1341 sta->sta.addr); 1342 ieee80211_send_smps_action(sta->sdata, 1343 sta->sdata->bss->req_smps, 1344 sta->sta.addr, 1345 sta->sdata->vif.bss_conf.bssid); 1346 } 1347 1348 if (sdata->vif.type == NL80211_IFTYPE_STATION && 1349 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 1350 ieee80211_recalc_ps(local, -1); 1351 ieee80211_recalc_ps_vif(sdata); 1352 } 1353 1354 return 0; 1355 out_err: 1356 mutex_unlock(&local->sta_mtx); 1357 return err; 1358 } 1359 1360 #ifdef CONFIG_MAC80211_MESH 1361 static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev, 1362 const u8 *dst, const u8 *next_hop) 1363 { 1364 struct ieee80211_sub_if_data *sdata; 1365 struct mesh_path *mpath; 1366 struct sta_info *sta; 1367 1368 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1369 1370 rcu_read_lock(); 1371 sta = sta_info_get(sdata, next_hop); 1372 if (!sta) { 1373 rcu_read_unlock(); 1374 return -ENOENT; 1375 } 1376 1377 mpath = mesh_path_add(sdata, dst); 1378 if (IS_ERR(mpath)) { 1379 rcu_read_unlock(); 1380 return PTR_ERR(mpath); 1381 } 1382 1383 mesh_path_fix_nexthop(mpath, sta); 1384 1385 rcu_read_unlock(); 1386 return 0; 1387 } 1388 1389 static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev, 1390 const u8 *dst) 1391 { 1392 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1393 1394 if (dst) 1395 return mesh_path_del(sdata, dst); 1396 1397 mesh_path_flush_by_iface(sdata); 1398 return 0; 1399 } 1400 1401 static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev, 1402 const u8 *dst, const u8 *next_hop) 1403 { 1404 struct ieee80211_sub_if_data *sdata; 1405 struct mesh_path *mpath; 1406 struct sta_info *sta; 1407 1408 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1409 1410 rcu_read_lock(); 1411 1412 sta = sta_info_get(sdata, next_hop); 1413 if (!sta) { 1414 rcu_read_unlock(); 1415 return -ENOENT; 1416 } 1417 1418 mpath = mesh_path_lookup(sdata, dst); 1419 if (!mpath) { 1420 rcu_read_unlock(); 1421 return -ENOENT; 1422 } 1423 1424 mesh_path_fix_nexthop(mpath, sta); 1425 1426 rcu_read_unlock(); 1427 return 0; 1428 } 1429 1430 static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop, 1431 struct mpath_info *pinfo) 1432 { 1433 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop); 1434 1435 if (next_hop_sta) 1436 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN); 1437 else 1438 memset(next_hop, 0, ETH_ALEN); 1439 1440 memset(pinfo, 0, sizeof(*pinfo)); 1441 1442 pinfo->generation = mesh_paths_generation; 1443 1444 pinfo->filled = MPATH_INFO_FRAME_QLEN | 1445 MPATH_INFO_SN | 1446 MPATH_INFO_METRIC | 1447 MPATH_INFO_EXPTIME | 1448 MPATH_INFO_DISCOVERY_TIMEOUT | 1449 MPATH_INFO_DISCOVERY_RETRIES | 1450 MPATH_INFO_FLAGS; 1451 1452 pinfo->frame_qlen = mpath->frame_queue.qlen; 1453 pinfo->sn = mpath->sn; 1454 pinfo->metric = mpath->metric; 1455 if (time_before(jiffies, mpath->exp_time)) 1456 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies); 1457 pinfo->discovery_timeout = 1458 jiffies_to_msecs(mpath->discovery_timeout); 1459 pinfo->discovery_retries = mpath->discovery_retries; 1460 if (mpath->flags & MESH_PATH_ACTIVE) 1461 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE; 1462 if (mpath->flags & MESH_PATH_RESOLVING) 1463 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING; 1464 if (mpath->flags & MESH_PATH_SN_VALID) 1465 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID; 1466 if (mpath->flags & MESH_PATH_FIXED) 1467 pinfo->flags |= NL80211_MPATH_FLAG_FIXED; 1468 if (mpath->flags & MESH_PATH_RESOLVED) 1469 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED; 1470 } 1471 1472 static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev, 1473 u8 *dst, u8 *next_hop, struct mpath_info *pinfo) 1474 1475 { 1476 struct ieee80211_sub_if_data *sdata; 1477 struct mesh_path *mpath; 1478 1479 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1480 1481 rcu_read_lock(); 1482 mpath = mesh_path_lookup(sdata, dst); 1483 if (!mpath) { 1484 rcu_read_unlock(); 1485 return -ENOENT; 1486 } 1487 memcpy(dst, mpath->dst, ETH_ALEN); 1488 mpath_set_pinfo(mpath, next_hop, pinfo); 1489 rcu_read_unlock(); 1490 return 0; 1491 } 1492 1493 static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev, 1494 int idx, u8 *dst, u8 *next_hop, 1495 struct mpath_info *pinfo) 1496 { 1497 struct ieee80211_sub_if_data *sdata; 1498 struct mesh_path *mpath; 1499 1500 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1501 1502 rcu_read_lock(); 1503 mpath = mesh_path_lookup_by_idx(sdata, idx); 1504 if (!mpath) { 1505 rcu_read_unlock(); 1506 return -ENOENT; 1507 } 1508 memcpy(dst, mpath->dst, ETH_ALEN); 1509 mpath_set_pinfo(mpath, next_hop, pinfo); 1510 rcu_read_unlock(); 1511 return 0; 1512 } 1513 1514 static int ieee80211_get_mesh_config(struct wiphy *wiphy, 1515 struct net_device *dev, 1516 struct mesh_config *conf) 1517 { 1518 struct ieee80211_sub_if_data *sdata; 1519 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1520 1521 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config)); 1522 return 0; 1523 } 1524 1525 static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask) 1526 { 1527 return (mask >> (parm-1)) & 0x1; 1528 } 1529 1530 static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh, 1531 const struct mesh_setup *setup) 1532 { 1533 u8 *new_ie; 1534 const u8 *old_ie; 1535 struct ieee80211_sub_if_data *sdata = container_of(ifmsh, 1536 struct ieee80211_sub_if_data, u.mesh); 1537 1538 /* allocate information elements */ 1539 new_ie = NULL; 1540 old_ie = ifmsh->ie; 1541 1542 if (setup->ie_len) { 1543 new_ie = kmemdup(setup->ie, setup->ie_len, 1544 GFP_KERNEL); 1545 if (!new_ie) 1546 return -ENOMEM; 1547 } 1548 ifmsh->ie_len = setup->ie_len; 1549 ifmsh->ie = new_ie; 1550 kfree(old_ie); 1551 1552 /* now copy the rest of the setup parameters */ 1553 ifmsh->mesh_id_len = setup->mesh_id_len; 1554 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len); 1555 ifmsh->mesh_sp_id = setup->sync_method; 1556 ifmsh->mesh_pp_id = setup->path_sel_proto; 1557 ifmsh->mesh_pm_id = setup->path_metric; 1558 ifmsh->user_mpm = setup->user_mpm; 1559 ifmsh->mesh_auth_id = setup->auth_id; 1560 ifmsh->security = IEEE80211_MESH_SEC_NONE; 1561 if (setup->is_authenticated) 1562 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED; 1563 if (setup->is_secure) 1564 ifmsh->security |= IEEE80211_MESH_SEC_SECURED; 1565 1566 /* mcast rate setting in Mesh Node */ 1567 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate, 1568 sizeof(setup->mcast_rate)); 1569 sdata->vif.bss_conf.basic_rates = setup->basic_rates; 1570 1571 sdata->vif.bss_conf.beacon_int = setup->beacon_interval; 1572 sdata->vif.bss_conf.dtim_period = setup->dtim_period; 1573 1574 return 0; 1575 } 1576 1577 static int ieee80211_update_mesh_config(struct wiphy *wiphy, 1578 struct net_device *dev, u32 mask, 1579 const struct mesh_config *nconf) 1580 { 1581 struct mesh_config *conf; 1582 struct ieee80211_sub_if_data *sdata; 1583 struct ieee80211_if_mesh *ifmsh; 1584 1585 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1586 ifmsh = &sdata->u.mesh; 1587 1588 /* Set the config options which we are interested in setting */ 1589 conf = &(sdata->u.mesh.mshcfg); 1590 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask)) 1591 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout; 1592 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask)) 1593 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout; 1594 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask)) 1595 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout; 1596 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask)) 1597 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks; 1598 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask)) 1599 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries; 1600 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask)) 1601 conf->dot11MeshTTL = nconf->dot11MeshTTL; 1602 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask)) 1603 conf->element_ttl = nconf->element_ttl; 1604 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) { 1605 if (ifmsh->user_mpm) 1606 return -EBUSY; 1607 conf->auto_open_plinks = nconf->auto_open_plinks; 1608 } 1609 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask)) 1610 conf->dot11MeshNbrOffsetMaxNeighbor = 1611 nconf->dot11MeshNbrOffsetMaxNeighbor; 1612 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask)) 1613 conf->dot11MeshHWMPmaxPREQretries = 1614 nconf->dot11MeshHWMPmaxPREQretries; 1615 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask)) 1616 conf->path_refresh_time = nconf->path_refresh_time; 1617 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask)) 1618 conf->min_discovery_timeout = nconf->min_discovery_timeout; 1619 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask)) 1620 conf->dot11MeshHWMPactivePathTimeout = 1621 nconf->dot11MeshHWMPactivePathTimeout; 1622 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask)) 1623 conf->dot11MeshHWMPpreqMinInterval = 1624 nconf->dot11MeshHWMPpreqMinInterval; 1625 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask)) 1626 conf->dot11MeshHWMPperrMinInterval = 1627 nconf->dot11MeshHWMPperrMinInterval; 1628 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME, 1629 mask)) 1630 conf->dot11MeshHWMPnetDiameterTraversalTime = 1631 nconf->dot11MeshHWMPnetDiameterTraversalTime; 1632 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) { 1633 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode; 1634 ieee80211_mesh_root_setup(ifmsh); 1635 } 1636 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) { 1637 /* our current gate announcement implementation rides on root 1638 * announcements, so require this ifmsh to also be a root node 1639 * */ 1640 if (nconf->dot11MeshGateAnnouncementProtocol && 1641 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) { 1642 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN; 1643 ieee80211_mesh_root_setup(ifmsh); 1644 } 1645 conf->dot11MeshGateAnnouncementProtocol = 1646 nconf->dot11MeshGateAnnouncementProtocol; 1647 } 1648 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask)) 1649 conf->dot11MeshHWMPRannInterval = 1650 nconf->dot11MeshHWMPRannInterval; 1651 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask)) 1652 conf->dot11MeshForwarding = nconf->dot11MeshForwarding; 1653 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) { 1654 /* our RSSI threshold implementation is supported only for 1655 * devices that report signal in dBm. 1656 */ 1657 if (!(sdata->local->hw.flags & IEEE80211_HW_SIGNAL_DBM)) 1658 return -ENOTSUPP; 1659 conf->rssi_threshold = nconf->rssi_threshold; 1660 } 1661 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) { 1662 conf->ht_opmode = nconf->ht_opmode; 1663 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode; 1664 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT); 1665 } 1666 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask)) 1667 conf->dot11MeshHWMPactivePathToRootTimeout = 1668 nconf->dot11MeshHWMPactivePathToRootTimeout; 1669 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask)) 1670 conf->dot11MeshHWMProotInterval = 1671 nconf->dot11MeshHWMProotInterval; 1672 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask)) 1673 conf->dot11MeshHWMPconfirmationInterval = 1674 nconf->dot11MeshHWMPconfirmationInterval; 1675 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) { 1676 conf->power_mode = nconf->power_mode; 1677 ieee80211_mps_local_status_update(sdata); 1678 } 1679 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask)) 1680 conf->dot11MeshAwakeWindowDuration = 1681 nconf->dot11MeshAwakeWindowDuration; 1682 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask)) 1683 conf->plink_timeout = nconf->plink_timeout; 1684 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON); 1685 return 0; 1686 } 1687 1688 static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev, 1689 const struct mesh_config *conf, 1690 const struct mesh_setup *setup) 1691 { 1692 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1693 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1694 int err; 1695 1696 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config)); 1697 err = copy_mesh_setup(ifmsh, setup); 1698 if (err) 1699 return err; 1700 1701 /* can mesh use other SMPS modes? */ 1702 sdata->smps_mode = IEEE80211_SMPS_OFF; 1703 sdata->needed_rx_chains = sdata->local->rx_chains; 1704 1705 mutex_lock(&sdata->local->mtx); 1706 err = ieee80211_vif_use_channel(sdata, &setup->chandef, 1707 IEEE80211_CHANCTX_SHARED); 1708 mutex_unlock(&sdata->local->mtx); 1709 if (err) 1710 return err; 1711 1712 return ieee80211_start_mesh(sdata); 1713 } 1714 1715 static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev) 1716 { 1717 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1718 1719 ieee80211_stop_mesh(sdata); 1720 mutex_lock(&sdata->local->mtx); 1721 ieee80211_vif_release_channel(sdata); 1722 mutex_unlock(&sdata->local->mtx); 1723 1724 return 0; 1725 } 1726 #endif 1727 1728 static int ieee80211_change_bss(struct wiphy *wiphy, 1729 struct net_device *dev, 1730 struct bss_parameters *params) 1731 { 1732 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1733 enum ieee80211_band band; 1734 u32 changed = 0; 1735 1736 if (!sdata_dereference(sdata->u.ap.beacon, sdata)) 1737 return -ENOENT; 1738 1739 band = ieee80211_get_sdata_band(sdata); 1740 1741 if (params->use_cts_prot >= 0) { 1742 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot; 1743 changed |= BSS_CHANGED_ERP_CTS_PROT; 1744 } 1745 if (params->use_short_preamble >= 0) { 1746 sdata->vif.bss_conf.use_short_preamble = 1747 params->use_short_preamble; 1748 changed |= BSS_CHANGED_ERP_PREAMBLE; 1749 } 1750 1751 if (!sdata->vif.bss_conf.use_short_slot && 1752 band == IEEE80211_BAND_5GHZ) { 1753 sdata->vif.bss_conf.use_short_slot = true; 1754 changed |= BSS_CHANGED_ERP_SLOT; 1755 } 1756 1757 if (params->use_short_slot_time >= 0) { 1758 sdata->vif.bss_conf.use_short_slot = 1759 params->use_short_slot_time; 1760 changed |= BSS_CHANGED_ERP_SLOT; 1761 } 1762 1763 if (params->basic_rates) { 1764 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef, 1765 wiphy->bands[band], 1766 params->basic_rates, 1767 params->basic_rates_len, 1768 &sdata->vif.bss_conf.basic_rates); 1769 changed |= BSS_CHANGED_BASIC_RATES; 1770 } 1771 1772 if (params->ap_isolate >= 0) { 1773 if (params->ap_isolate) 1774 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS; 1775 else 1776 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS; 1777 } 1778 1779 if (params->ht_opmode >= 0) { 1780 sdata->vif.bss_conf.ht_operation_mode = 1781 (u16) params->ht_opmode; 1782 changed |= BSS_CHANGED_HT; 1783 } 1784 1785 if (params->p2p_ctwindow >= 0) { 1786 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &= 1787 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 1788 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 1789 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 1790 changed |= BSS_CHANGED_P2P_PS; 1791 } 1792 1793 if (params->p2p_opp_ps > 0) { 1794 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 1795 IEEE80211_P2P_OPPPS_ENABLE_BIT; 1796 changed |= BSS_CHANGED_P2P_PS; 1797 } else if (params->p2p_opp_ps == 0) { 1798 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &= 1799 ~IEEE80211_P2P_OPPPS_ENABLE_BIT; 1800 changed |= BSS_CHANGED_P2P_PS; 1801 } 1802 1803 ieee80211_bss_info_change_notify(sdata, changed); 1804 1805 return 0; 1806 } 1807 1808 static int ieee80211_set_txq_params(struct wiphy *wiphy, 1809 struct net_device *dev, 1810 struct ieee80211_txq_params *params) 1811 { 1812 struct ieee80211_local *local = wiphy_priv(wiphy); 1813 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1814 struct ieee80211_tx_queue_params p; 1815 1816 if (!local->ops->conf_tx) 1817 return -EOPNOTSUPP; 1818 1819 if (local->hw.queues < IEEE80211_NUM_ACS) 1820 return -EOPNOTSUPP; 1821 1822 memset(&p, 0, sizeof(p)); 1823 p.aifs = params->aifs; 1824 p.cw_max = params->cwmax; 1825 p.cw_min = params->cwmin; 1826 p.txop = params->txop; 1827 1828 /* 1829 * Setting tx queue params disables u-apsd because it's only 1830 * called in master mode. 1831 */ 1832 p.uapsd = false; 1833 1834 sdata->tx_conf[params->ac] = p; 1835 if (drv_conf_tx(local, sdata, params->ac, &p)) { 1836 wiphy_debug(local->hw.wiphy, 1837 "failed to set TX queue parameters for AC %d\n", 1838 params->ac); 1839 return -EINVAL; 1840 } 1841 1842 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS); 1843 1844 return 0; 1845 } 1846 1847 #ifdef CONFIG_PM 1848 static int ieee80211_suspend(struct wiphy *wiphy, 1849 struct cfg80211_wowlan *wowlan) 1850 { 1851 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan); 1852 } 1853 1854 static int ieee80211_resume(struct wiphy *wiphy) 1855 { 1856 return __ieee80211_resume(wiphy_priv(wiphy)); 1857 } 1858 #else 1859 #define ieee80211_suspend NULL 1860 #define ieee80211_resume NULL 1861 #endif 1862 1863 static int ieee80211_scan(struct wiphy *wiphy, 1864 struct cfg80211_scan_request *req) 1865 { 1866 struct ieee80211_sub_if_data *sdata; 1867 1868 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev); 1869 1870 switch (ieee80211_vif_type_p2p(&sdata->vif)) { 1871 case NL80211_IFTYPE_STATION: 1872 case NL80211_IFTYPE_ADHOC: 1873 case NL80211_IFTYPE_MESH_POINT: 1874 case NL80211_IFTYPE_P2P_CLIENT: 1875 case NL80211_IFTYPE_P2P_DEVICE: 1876 break; 1877 case NL80211_IFTYPE_P2P_GO: 1878 if (sdata->local->ops->hw_scan) 1879 break; 1880 /* 1881 * FIXME: implement NoA while scanning in software, 1882 * for now fall through to allow scanning only when 1883 * beaconing hasn't been configured yet 1884 */ 1885 case NL80211_IFTYPE_AP: 1886 /* 1887 * If the scan has been forced (and the driver supports 1888 * forcing), don't care about being beaconing already. 1889 * This will create problems to the attached stations (e.g. all 1890 * the frames sent while scanning on other channel will be 1891 * lost) 1892 */ 1893 if (sdata->u.ap.beacon && 1894 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) || 1895 !(req->flags & NL80211_SCAN_FLAG_AP))) 1896 return -EOPNOTSUPP; 1897 break; 1898 default: 1899 return -EOPNOTSUPP; 1900 } 1901 1902 return ieee80211_request_scan(sdata, req); 1903 } 1904 1905 static int 1906 ieee80211_sched_scan_start(struct wiphy *wiphy, 1907 struct net_device *dev, 1908 struct cfg80211_sched_scan_request *req) 1909 { 1910 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1911 1912 if (!sdata->local->ops->sched_scan_start) 1913 return -EOPNOTSUPP; 1914 1915 return ieee80211_request_sched_scan_start(sdata, req); 1916 } 1917 1918 static int 1919 ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev) 1920 { 1921 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1922 1923 if (!sdata->local->ops->sched_scan_stop) 1924 return -EOPNOTSUPP; 1925 1926 return ieee80211_request_sched_scan_stop(sdata); 1927 } 1928 1929 static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev, 1930 struct cfg80211_auth_request *req) 1931 { 1932 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req); 1933 } 1934 1935 static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev, 1936 struct cfg80211_assoc_request *req) 1937 { 1938 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req); 1939 } 1940 1941 static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev, 1942 struct cfg80211_deauth_request *req) 1943 { 1944 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req); 1945 } 1946 1947 static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev, 1948 struct cfg80211_disassoc_request *req) 1949 { 1950 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req); 1951 } 1952 1953 static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev, 1954 struct cfg80211_ibss_params *params) 1955 { 1956 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params); 1957 } 1958 1959 static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev) 1960 { 1961 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev)); 1962 } 1963 1964 static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev, 1965 int rate[IEEE80211_NUM_BANDS]) 1966 { 1967 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1968 1969 memcpy(sdata->vif.bss_conf.mcast_rate, rate, 1970 sizeof(int) * IEEE80211_NUM_BANDS); 1971 1972 return 0; 1973 } 1974 1975 static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed) 1976 { 1977 struct ieee80211_local *local = wiphy_priv(wiphy); 1978 int err; 1979 1980 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) { 1981 err = drv_set_frag_threshold(local, wiphy->frag_threshold); 1982 1983 if (err) 1984 return err; 1985 } 1986 1987 if (changed & WIPHY_PARAM_COVERAGE_CLASS) { 1988 err = drv_set_coverage_class(local, wiphy->coverage_class); 1989 1990 if (err) 1991 return err; 1992 } 1993 1994 if (changed & WIPHY_PARAM_RTS_THRESHOLD) { 1995 err = drv_set_rts_threshold(local, wiphy->rts_threshold); 1996 1997 if (err) 1998 return err; 1999 } 2000 2001 if (changed & WIPHY_PARAM_RETRY_SHORT) { 2002 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY) 2003 return -EINVAL; 2004 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short; 2005 } 2006 if (changed & WIPHY_PARAM_RETRY_LONG) { 2007 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY) 2008 return -EINVAL; 2009 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long; 2010 } 2011 if (changed & 2012 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG)) 2013 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS); 2014 2015 return 0; 2016 } 2017 2018 static int ieee80211_set_tx_power(struct wiphy *wiphy, 2019 struct wireless_dev *wdev, 2020 enum nl80211_tx_power_setting type, int mbm) 2021 { 2022 struct ieee80211_local *local = wiphy_priv(wiphy); 2023 struct ieee80211_sub_if_data *sdata; 2024 2025 if (wdev) { 2026 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2027 2028 switch (type) { 2029 case NL80211_TX_POWER_AUTOMATIC: 2030 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL; 2031 break; 2032 case NL80211_TX_POWER_LIMITED: 2033 case NL80211_TX_POWER_FIXED: 2034 if (mbm < 0 || (mbm % 100)) 2035 return -EOPNOTSUPP; 2036 sdata->user_power_level = MBM_TO_DBM(mbm); 2037 break; 2038 } 2039 2040 ieee80211_recalc_txpower(sdata); 2041 2042 return 0; 2043 } 2044 2045 switch (type) { 2046 case NL80211_TX_POWER_AUTOMATIC: 2047 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL; 2048 break; 2049 case NL80211_TX_POWER_LIMITED: 2050 case NL80211_TX_POWER_FIXED: 2051 if (mbm < 0 || (mbm % 100)) 2052 return -EOPNOTSUPP; 2053 local->user_power_level = MBM_TO_DBM(mbm); 2054 break; 2055 } 2056 2057 mutex_lock(&local->iflist_mtx); 2058 list_for_each_entry(sdata, &local->interfaces, list) 2059 sdata->user_power_level = local->user_power_level; 2060 list_for_each_entry(sdata, &local->interfaces, list) 2061 ieee80211_recalc_txpower(sdata); 2062 mutex_unlock(&local->iflist_mtx); 2063 2064 return 0; 2065 } 2066 2067 static int ieee80211_get_tx_power(struct wiphy *wiphy, 2068 struct wireless_dev *wdev, 2069 int *dbm) 2070 { 2071 struct ieee80211_local *local = wiphy_priv(wiphy); 2072 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2073 2074 if (!local->use_chanctx) 2075 *dbm = local->hw.conf.power_level; 2076 else 2077 *dbm = sdata->vif.bss_conf.txpower; 2078 2079 return 0; 2080 } 2081 2082 static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev, 2083 const u8 *addr) 2084 { 2085 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2086 2087 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN); 2088 2089 return 0; 2090 } 2091 2092 static void ieee80211_rfkill_poll(struct wiphy *wiphy) 2093 { 2094 struct ieee80211_local *local = wiphy_priv(wiphy); 2095 2096 drv_rfkill_poll(local); 2097 } 2098 2099 #ifdef CONFIG_NL80211_TESTMODE 2100 static int ieee80211_testmode_cmd(struct wiphy *wiphy, 2101 struct wireless_dev *wdev, 2102 void *data, int len) 2103 { 2104 struct ieee80211_local *local = wiphy_priv(wiphy); 2105 struct ieee80211_vif *vif = NULL; 2106 2107 if (!local->ops->testmode_cmd) 2108 return -EOPNOTSUPP; 2109 2110 if (wdev) { 2111 struct ieee80211_sub_if_data *sdata; 2112 2113 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2114 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER) 2115 vif = &sdata->vif; 2116 } 2117 2118 return local->ops->testmode_cmd(&local->hw, vif, data, len); 2119 } 2120 2121 static int ieee80211_testmode_dump(struct wiphy *wiphy, 2122 struct sk_buff *skb, 2123 struct netlink_callback *cb, 2124 void *data, int len) 2125 { 2126 struct ieee80211_local *local = wiphy_priv(wiphy); 2127 2128 if (!local->ops->testmode_dump) 2129 return -EOPNOTSUPP; 2130 2131 return local->ops->testmode_dump(&local->hw, skb, cb, data, len); 2132 } 2133 #endif 2134 2135 int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata, 2136 enum ieee80211_smps_mode smps_mode) 2137 { 2138 struct sta_info *sta; 2139 enum ieee80211_smps_mode old_req; 2140 int i; 2141 2142 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP)) 2143 return -EINVAL; 2144 2145 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT) 2146 return 0; 2147 2148 old_req = sdata->u.ap.req_smps; 2149 sdata->u.ap.req_smps = smps_mode; 2150 2151 /* AUTOMATIC doesn't mean much for AP - don't allow it */ 2152 if (old_req == smps_mode || 2153 smps_mode == IEEE80211_SMPS_AUTOMATIC) 2154 return 0; 2155 2156 /* If no associated stations, there's no need to do anything */ 2157 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) { 2158 sdata->smps_mode = smps_mode; 2159 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps); 2160 return 0; 2161 } 2162 2163 ht_dbg(sdata, 2164 "SMSP %d requested in AP mode, sending Action frame to %d stations\n", 2165 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta)); 2166 2167 mutex_lock(&sdata->local->sta_mtx); 2168 for (i = 0; i < STA_HASH_SIZE; i++) { 2169 for (sta = rcu_dereference_protected(sdata->local->sta_hash[i], 2170 lockdep_is_held(&sdata->local->sta_mtx)); 2171 sta; 2172 sta = rcu_dereference_protected(sta->hnext, 2173 lockdep_is_held(&sdata->local->sta_mtx))) { 2174 /* 2175 * Only stations associated to our AP and 2176 * associated VLANs 2177 */ 2178 if (sta->sdata->bss != &sdata->u.ap) 2179 continue; 2180 2181 /* This station doesn't support MIMO - skip it */ 2182 if (sta_info_tx_streams(sta) == 1) 2183 continue; 2184 2185 /* 2186 * Don't wake up a STA just to send the action frame 2187 * unless we are getting more restrictive. 2188 */ 2189 if (test_sta_flag(sta, WLAN_STA_PS_STA) && 2190 !ieee80211_smps_is_restrictive(sta->known_smps_mode, 2191 smps_mode)) { 2192 ht_dbg(sdata, 2193 "Won't send SMPS to sleeping STA %pM\n", 2194 sta->sta.addr); 2195 continue; 2196 } 2197 2198 /* 2199 * If the STA is not authorized, wait until it gets 2200 * authorized and the action frame will be sent then. 2201 */ 2202 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 2203 continue; 2204 2205 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr); 2206 ieee80211_send_smps_action(sdata, smps_mode, 2207 sta->sta.addr, 2208 sdata->vif.bss_conf.bssid); 2209 } 2210 } 2211 mutex_unlock(&sdata->local->sta_mtx); 2212 2213 sdata->smps_mode = smps_mode; 2214 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps); 2215 2216 return 0; 2217 } 2218 2219 int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata, 2220 enum ieee80211_smps_mode smps_mode) 2221 { 2222 const u8 *ap; 2223 enum ieee80211_smps_mode old_req; 2224 int err; 2225 2226 lockdep_assert_held(&sdata->wdev.mtx); 2227 2228 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) 2229 return -EINVAL; 2230 2231 old_req = sdata->u.mgd.req_smps; 2232 sdata->u.mgd.req_smps = smps_mode; 2233 2234 if (old_req == smps_mode && 2235 smps_mode != IEEE80211_SMPS_AUTOMATIC) 2236 return 0; 2237 2238 /* 2239 * If not associated, or current association is not an HT 2240 * association, there's no need to do anything, just store 2241 * the new value until we associate. 2242 */ 2243 if (!sdata->u.mgd.associated || 2244 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT) 2245 return 0; 2246 2247 ap = sdata->u.mgd.associated->bssid; 2248 2249 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) { 2250 if (sdata->u.mgd.powersave) 2251 smps_mode = IEEE80211_SMPS_DYNAMIC; 2252 else 2253 smps_mode = IEEE80211_SMPS_OFF; 2254 } 2255 2256 /* send SM PS frame to AP */ 2257 err = ieee80211_send_smps_action(sdata, smps_mode, 2258 ap, ap); 2259 if (err) 2260 sdata->u.mgd.req_smps = old_req; 2261 2262 return err; 2263 } 2264 2265 static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev, 2266 bool enabled, int timeout) 2267 { 2268 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2269 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 2270 2271 if (sdata->vif.type != NL80211_IFTYPE_STATION) 2272 return -EOPNOTSUPP; 2273 2274 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) 2275 return -EOPNOTSUPP; 2276 2277 if (enabled == sdata->u.mgd.powersave && 2278 timeout == local->dynamic_ps_forced_timeout) 2279 return 0; 2280 2281 sdata->u.mgd.powersave = enabled; 2282 local->dynamic_ps_forced_timeout = timeout; 2283 2284 /* no change, but if automatic follow powersave */ 2285 sdata_lock(sdata); 2286 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps); 2287 sdata_unlock(sdata); 2288 2289 if (local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS) 2290 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); 2291 2292 ieee80211_recalc_ps(local, -1); 2293 ieee80211_recalc_ps_vif(sdata); 2294 2295 return 0; 2296 } 2297 2298 static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy, 2299 struct net_device *dev, 2300 s32 rssi_thold, u32 rssi_hyst) 2301 { 2302 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2303 struct ieee80211_vif *vif = &sdata->vif; 2304 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf; 2305 2306 if (rssi_thold == bss_conf->cqm_rssi_thold && 2307 rssi_hyst == bss_conf->cqm_rssi_hyst) 2308 return 0; 2309 2310 bss_conf->cqm_rssi_thold = rssi_thold; 2311 bss_conf->cqm_rssi_hyst = rssi_hyst; 2312 2313 /* tell the driver upon association, unless already associated */ 2314 if (sdata->u.mgd.associated && 2315 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI) 2316 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM); 2317 2318 return 0; 2319 } 2320 2321 static int ieee80211_set_bitrate_mask(struct wiphy *wiphy, 2322 struct net_device *dev, 2323 const u8 *addr, 2324 const struct cfg80211_bitrate_mask *mask) 2325 { 2326 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2327 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 2328 int i, ret; 2329 2330 if (!ieee80211_sdata_running(sdata)) 2331 return -ENETDOWN; 2332 2333 if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) { 2334 ret = drv_set_bitrate_mask(local, sdata, mask); 2335 if (ret) 2336 return ret; 2337 } 2338 2339 for (i = 0; i < IEEE80211_NUM_BANDS; i++) { 2340 struct ieee80211_supported_band *sband = wiphy->bands[i]; 2341 int j; 2342 2343 sdata->rc_rateidx_mask[i] = mask->control[i].legacy; 2344 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs, 2345 sizeof(mask->control[i].ht_mcs)); 2346 2347 sdata->rc_has_mcs_mask[i] = false; 2348 if (!sband) 2349 continue; 2350 2351 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) 2352 if (~sdata->rc_rateidx_mcs_mask[i][j]) { 2353 sdata->rc_has_mcs_mask[i] = true; 2354 break; 2355 } 2356 } 2357 2358 return 0; 2359 } 2360 2361 static int ieee80211_start_roc_work(struct ieee80211_local *local, 2362 struct ieee80211_sub_if_data *sdata, 2363 struct ieee80211_channel *channel, 2364 unsigned int duration, u64 *cookie, 2365 struct sk_buff *txskb, 2366 enum ieee80211_roc_type type) 2367 { 2368 struct ieee80211_roc_work *roc, *tmp; 2369 bool queued = false; 2370 int ret; 2371 2372 lockdep_assert_held(&local->mtx); 2373 2374 if (local->use_chanctx && !local->ops->remain_on_channel) 2375 return -EOPNOTSUPP; 2376 2377 roc = kzalloc(sizeof(*roc), GFP_KERNEL); 2378 if (!roc) 2379 return -ENOMEM; 2380 2381 /* 2382 * If the duration is zero, then the driver 2383 * wouldn't actually do anything. Set it to 2384 * 10 for now. 2385 * 2386 * TODO: cancel the off-channel operation 2387 * when we get the SKB's TX status and 2388 * the wait time was zero before. 2389 */ 2390 if (!duration) 2391 duration = 10; 2392 2393 roc->chan = channel; 2394 roc->duration = duration; 2395 roc->req_duration = duration; 2396 roc->frame = txskb; 2397 roc->type = type; 2398 roc->mgmt_tx_cookie = (unsigned long)txskb; 2399 roc->sdata = sdata; 2400 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work); 2401 INIT_LIST_HEAD(&roc->dependents); 2402 2403 /* 2404 * cookie is either the roc cookie (for normal roc) 2405 * or the SKB (for mgmt TX) 2406 */ 2407 if (!txskb) { 2408 /* local->mtx protects this */ 2409 local->roc_cookie_counter++; 2410 roc->cookie = local->roc_cookie_counter; 2411 /* wow, you wrapped 64 bits ... more likely a bug */ 2412 if (WARN_ON(roc->cookie == 0)) { 2413 roc->cookie = 1; 2414 local->roc_cookie_counter++; 2415 } 2416 *cookie = roc->cookie; 2417 } else { 2418 *cookie = (unsigned long)txskb; 2419 } 2420 2421 /* if there's one pending or we're scanning, queue this one */ 2422 if (!list_empty(&local->roc_list) || 2423 local->scanning || local->radar_detect_enabled) 2424 goto out_check_combine; 2425 2426 /* if not HW assist, just queue & schedule work */ 2427 if (!local->ops->remain_on_channel) { 2428 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0); 2429 goto out_queue; 2430 } 2431 2432 /* otherwise actually kick it off here (for error handling) */ 2433 2434 ret = drv_remain_on_channel(local, sdata, channel, duration, type); 2435 if (ret) { 2436 kfree(roc); 2437 return ret; 2438 } 2439 2440 roc->started = true; 2441 goto out_queue; 2442 2443 out_check_combine: 2444 list_for_each_entry(tmp, &local->roc_list, list) { 2445 if (tmp->chan != channel || tmp->sdata != sdata) 2446 continue; 2447 2448 /* 2449 * Extend this ROC if possible: 2450 * 2451 * If it hasn't started yet, just increase the duration 2452 * and add the new one to the list of dependents. 2453 * If the type of the new ROC has higher priority, modify the 2454 * type of the previous one to match that of the new one. 2455 */ 2456 if (!tmp->started) { 2457 list_add_tail(&roc->list, &tmp->dependents); 2458 tmp->duration = max(tmp->duration, roc->duration); 2459 tmp->type = max(tmp->type, roc->type); 2460 queued = true; 2461 break; 2462 } 2463 2464 /* If it has already started, it's more difficult ... */ 2465 if (local->ops->remain_on_channel) { 2466 unsigned long j = jiffies; 2467 2468 /* 2469 * In the offloaded ROC case, if it hasn't begun, add 2470 * this new one to the dependent list to be handled 2471 * when the master one begins. If it has begun, 2472 * check that there's still a minimum time left and 2473 * if so, start this one, transmitting the frame, but 2474 * add it to the list directly after this one with 2475 * a reduced time so we'll ask the driver to execute 2476 * it right after finishing the previous one, in the 2477 * hope that it'll also be executed right afterwards, 2478 * effectively extending the old one. 2479 * If there's no minimum time left, just add it to the 2480 * normal list. 2481 * TODO: the ROC type is ignored here, assuming that it 2482 * is better to immediately use the current ROC. 2483 */ 2484 if (!tmp->hw_begun) { 2485 list_add_tail(&roc->list, &tmp->dependents); 2486 queued = true; 2487 break; 2488 } 2489 2490 if (time_before(j + IEEE80211_ROC_MIN_LEFT, 2491 tmp->hw_start_time + 2492 msecs_to_jiffies(tmp->duration))) { 2493 int new_dur; 2494 2495 ieee80211_handle_roc_started(roc); 2496 2497 new_dur = roc->duration - 2498 jiffies_to_msecs(tmp->hw_start_time + 2499 msecs_to_jiffies( 2500 tmp->duration) - 2501 j); 2502 2503 if (new_dur > 0) { 2504 /* add right after tmp */ 2505 list_add(&roc->list, &tmp->list); 2506 } else { 2507 list_add_tail(&roc->list, 2508 &tmp->dependents); 2509 } 2510 queued = true; 2511 } 2512 } else if (del_timer_sync(&tmp->work.timer)) { 2513 unsigned long new_end; 2514 2515 /* 2516 * In the software ROC case, cancel the timer, if 2517 * that fails then the finish work is already 2518 * queued/pending and thus we queue the new ROC 2519 * normally, if that succeeds then we can extend 2520 * the timer duration and TX the frame (if any.) 2521 */ 2522 2523 list_add_tail(&roc->list, &tmp->dependents); 2524 queued = true; 2525 2526 new_end = jiffies + msecs_to_jiffies(roc->duration); 2527 2528 /* ok, it was started & we canceled timer */ 2529 if (time_after(new_end, tmp->work.timer.expires)) 2530 mod_timer(&tmp->work.timer, new_end); 2531 else 2532 add_timer(&tmp->work.timer); 2533 2534 ieee80211_handle_roc_started(roc); 2535 } 2536 break; 2537 } 2538 2539 out_queue: 2540 if (!queued) 2541 list_add_tail(&roc->list, &local->roc_list); 2542 2543 return 0; 2544 } 2545 2546 static int ieee80211_remain_on_channel(struct wiphy *wiphy, 2547 struct wireless_dev *wdev, 2548 struct ieee80211_channel *chan, 2549 unsigned int duration, 2550 u64 *cookie) 2551 { 2552 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2553 struct ieee80211_local *local = sdata->local; 2554 int ret; 2555 2556 mutex_lock(&local->mtx); 2557 ret = ieee80211_start_roc_work(local, sdata, chan, 2558 duration, cookie, NULL, 2559 IEEE80211_ROC_TYPE_NORMAL); 2560 mutex_unlock(&local->mtx); 2561 2562 return ret; 2563 } 2564 2565 static int ieee80211_cancel_roc(struct ieee80211_local *local, 2566 u64 cookie, bool mgmt_tx) 2567 { 2568 struct ieee80211_roc_work *roc, *tmp, *found = NULL; 2569 int ret; 2570 2571 mutex_lock(&local->mtx); 2572 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) { 2573 struct ieee80211_roc_work *dep, *tmp2; 2574 2575 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) { 2576 if (!mgmt_tx && dep->cookie != cookie) 2577 continue; 2578 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie) 2579 continue; 2580 /* found dependent item -- just remove it */ 2581 list_del(&dep->list); 2582 mutex_unlock(&local->mtx); 2583 2584 ieee80211_roc_notify_destroy(dep, true); 2585 return 0; 2586 } 2587 2588 if (!mgmt_tx && roc->cookie != cookie) 2589 continue; 2590 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie) 2591 continue; 2592 2593 found = roc; 2594 break; 2595 } 2596 2597 if (!found) { 2598 mutex_unlock(&local->mtx); 2599 return -ENOENT; 2600 } 2601 2602 /* 2603 * We found the item to cancel, so do that. Note that it 2604 * may have dependents, which we also cancel (and send 2605 * the expired signal for.) Not doing so would be quite 2606 * tricky here, but we may need to fix it later. 2607 */ 2608 2609 if (local->ops->remain_on_channel) { 2610 if (found->started) { 2611 ret = drv_cancel_remain_on_channel(local); 2612 if (WARN_ON_ONCE(ret)) { 2613 mutex_unlock(&local->mtx); 2614 return ret; 2615 } 2616 } 2617 2618 list_del(&found->list); 2619 2620 if (found->started) 2621 ieee80211_start_next_roc(local); 2622 mutex_unlock(&local->mtx); 2623 2624 ieee80211_roc_notify_destroy(found, true); 2625 } else { 2626 /* work may be pending so use it all the time */ 2627 found->abort = true; 2628 ieee80211_queue_delayed_work(&local->hw, &found->work, 0); 2629 2630 mutex_unlock(&local->mtx); 2631 2632 /* work will clean up etc */ 2633 flush_delayed_work(&found->work); 2634 WARN_ON(!found->to_be_freed); 2635 kfree(found); 2636 } 2637 2638 return 0; 2639 } 2640 2641 static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy, 2642 struct wireless_dev *wdev, 2643 u64 cookie) 2644 { 2645 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2646 struct ieee80211_local *local = sdata->local; 2647 2648 return ieee80211_cancel_roc(local, cookie, false); 2649 } 2650 2651 static int ieee80211_start_radar_detection(struct wiphy *wiphy, 2652 struct net_device *dev, 2653 struct cfg80211_chan_def *chandef, 2654 u32 cac_time_ms) 2655 { 2656 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2657 struct ieee80211_local *local = sdata->local; 2658 int err; 2659 2660 mutex_lock(&local->mtx); 2661 if (!list_empty(&local->roc_list) || local->scanning) { 2662 err = -EBUSY; 2663 goto out_unlock; 2664 } 2665 2666 /* whatever, but channel contexts should not complain about that one */ 2667 sdata->smps_mode = IEEE80211_SMPS_OFF; 2668 sdata->needed_rx_chains = local->rx_chains; 2669 2670 err = ieee80211_vif_use_channel(sdata, chandef, 2671 IEEE80211_CHANCTX_SHARED); 2672 if (err) 2673 goto out_unlock; 2674 2675 ieee80211_queue_delayed_work(&sdata->local->hw, 2676 &sdata->dfs_cac_timer_work, 2677 msecs_to_jiffies(cac_time_ms)); 2678 2679 out_unlock: 2680 mutex_unlock(&local->mtx); 2681 return err; 2682 } 2683 2684 static struct cfg80211_beacon_data * 2685 cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon) 2686 { 2687 struct cfg80211_beacon_data *new_beacon; 2688 u8 *pos; 2689 int len; 2690 2691 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len + 2692 beacon->proberesp_ies_len + beacon->assocresp_ies_len + 2693 beacon->probe_resp_len; 2694 2695 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL); 2696 if (!new_beacon) 2697 return NULL; 2698 2699 pos = (u8 *)(new_beacon + 1); 2700 if (beacon->head_len) { 2701 new_beacon->head_len = beacon->head_len; 2702 new_beacon->head = pos; 2703 memcpy(pos, beacon->head, beacon->head_len); 2704 pos += beacon->head_len; 2705 } 2706 if (beacon->tail_len) { 2707 new_beacon->tail_len = beacon->tail_len; 2708 new_beacon->tail = pos; 2709 memcpy(pos, beacon->tail, beacon->tail_len); 2710 pos += beacon->tail_len; 2711 } 2712 if (beacon->beacon_ies_len) { 2713 new_beacon->beacon_ies_len = beacon->beacon_ies_len; 2714 new_beacon->beacon_ies = pos; 2715 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len); 2716 pos += beacon->beacon_ies_len; 2717 } 2718 if (beacon->proberesp_ies_len) { 2719 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len; 2720 new_beacon->proberesp_ies = pos; 2721 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len); 2722 pos += beacon->proberesp_ies_len; 2723 } 2724 if (beacon->assocresp_ies_len) { 2725 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len; 2726 new_beacon->assocresp_ies = pos; 2727 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len); 2728 pos += beacon->assocresp_ies_len; 2729 } 2730 if (beacon->probe_resp_len) { 2731 new_beacon->probe_resp_len = beacon->probe_resp_len; 2732 beacon->probe_resp = pos; 2733 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len); 2734 pos += beacon->probe_resp_len; 2735 } 2736 2737 return new_beacon; 2738 } 2739 2740 void ieee80211_csa_finish(struct ieee80211_vif *vif) 2741 { 2742 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2743 2744 ieee80211_queue_work(&sdata->local->hw, 2745 &sdata->csa_finalize_work); 2746 } 2747 EXPORT_SYMBOL(ieee80211_csa_finish); 2748 2749 static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata, 2750 u32 *changed) 2751 { 2752 int err; 2753 2754 switch (sdata->vif.type) { 2755 case NL80211_IFTYPE_AP: 2756 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon, 2757 NULL); 2758 kfree(sdata->u.ap.next_beacon); 2759 sdata->u.ap.next_beacon = NULL; 2760 2761 if (err < 0) 2762 return err; 2763 *changed |= err; 2764 break; 2765 case NL80211_IFTYPE_ADHOC: 2766 err = ieee80211_ibss_finish_csa(sdata); 2767 if (err < 0) 2768 return err; 2769 *changed |= err; 2770 break; 2771 #ifdef CONFIG_MAC80211_MESH 2772 case NL80211_IFTYPE_MESH_POINT: 2773 err = ieee80211_mesh_finish_csa(sdata); 2774 if (err < 0) 2775 return err; 2776 *changed |= err; 2777 break; 2778 #endif 2779 default: 2780 WARN_ON(1); 2781 return -EINVAL; 2782 } 2783 2784 return 0; 2785 } 2786 2787 static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata) 2788 { 2789 struct ieee80211_local *local = sdata->local; 2790 u32 changed = 0; 2791 int err; 2792 2793 sdata_assert_lock(sdata); 2794 lockdep_assert_held(&local->mtx); 2795 lockdep_assert_held(&local->chanctx_mtx); 2796 2797 /* 2798 * using reservation isn't immediate as it may be deferred until later 2799 * with multi-vif. once reservation is complete it will re-schedule the 2800 * work with no reserved_chanctx so verify chandef to check if it 2801 * completed successfully 2802 */ 2803 2804 if (sdata->reserved_chanctx) { 2805 /* 2806 * with multi-vif csa driver may call ieee80211_csa_finish() 2807 * many times while waiting for other interfaces to use their 2808 * reservations 2809 */ 2810 if (sdata->reserved_ready) 2811 return 0; 2812 2813 err = ieee80211_vif_use_reserved_context(sdata); 2814 if (err) 2815 return err; 2816 2817 return 0; 2818 } 2819 2820 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef, 2821 &sdata->csa_chandef)) 2822 return -EINVAL; 2823 2824 sdata->vif.csa_active = false; 2825 2826 err = ieee80211_set_after_csa_beacon(sdata, &changed); 2827 if (err) 2828 return err; 2829 2830 ieee80211_bss_info_change_notify(sdata, changed); 2831 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef); 2832 2833 if (sdata->csa_block_tx) { 2834 ieee80211_wake_vif_queues(local, sdata, 2835 IEEE80211_QUEUE_STOP_REASON_CSA); 2836 sdata->csa_block_tx = false; 2837 } 2838 2839 return 0; 2840 } 2841 2842 static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata) 2843 { 2844 if (__ieee80211_csa_finalize(sdata)) { 2845 sdata_info(sdata, "failed to finalize CSA, disconnecting\n"); 2846 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev, 2847 GFP_KERNEL); 2848 } 2849 } 2850 2851 void ieee80211_csa_finalize_work(struct work_struct *work) 2852 { 2853 struct ieee80211_sub_if_data *sdata = 2854 container_of(work, struct ieee80211_sub_if_data, 2855 csa_finalize_work); 2856 struct ieee80211_local *local = sdata->local; 2857 2858 sdata_lock(sdata); 2859 mutex_lock(&local->mtx); 2860 mutex_lock(&local->chanctx_mtx); 2861 2862 /* AP might have been stopped while waiting for the lock. */ 2863 if (!sdata->vif.csa_active) 2864 goto unlock; 2865 2866 if (!ieee80211_sdata_running(sdata)) 2867 goto unlock; 2868 2869 ieee80211_csa_finalize(sdata); 2870 2871 unlock: 2872 mutex_unlock(&local->chanctx_mtx); 2873 mutex_unlock(&local->mtx); 2874 sdata_unlock(sdata); 2875 } 2876 2877 static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata, 2878 struct cfg80211_csa_settings *params, 2879 u32 *changed) 2880 { 2881 struct ieee80211_csa_settings csa = {}; 2882 int err; 2883 2884 switch (sdata->vif.type) { 2885 case NL80211_IFTYPE_AP: 2886 sdata->u.ap.next_beacon = 2887 cfg80211_beacon_dup(¶ms->beacon_after); 2888 if (!sdata->u.ap.next_beacon) 2889 return -ENOMEM; 2890 2891 /* 2892 * With a count of 0, we don't have to wait for any 2893 * TBTT before switching, so complete the CSA 2894 * immediately. In theory, with a count == 1 we 2895 * should delay the switch until just before the next 2896 * TBTT, but that would complicate things so we switch 2897 * immediately too. If we would delay the switch 2898 * until the next TBTT, we would have to set the probe 2899 * response here. 2900 * 2901 * TODO: A channel switch with count <= 1 without 2902 * sending a CSA action frame is kind of useless, 2903 * because the clients won't know we're changing 2904 * channels. The action frame must be implemented 2905 * either here or in the userspace. 2906 */ 2907 if (params->count <= 1) 2908 break; 2909 2910 if ((params->n_counter_offsets_beacon > 2911 IEEE80211_MAX_CSA_COUNTERS_NUM) || 2912 (params->n_counter_offsets_presp > 2913 IEEE80211_MAX_CSA_COUNTERS_NUM)) 2914 return -EINVAL; 2915 2916 csa.counter_offsets_beacon = params->counter_offsets_beacon; 2917 csa.counter_offsets_presp = params->counter_offsets_presp; 2918 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon; 2919 csa.n_counter_offsets_presp = params->n_counter_offsets_presp; 2920 csa.count = params->count; 2921 2922 err = ieee80211_assign_beacon(sdata, ¶ms->beacon_csa, &csa); 2923 if (err < 0) { 2924 kfree(sdata->u.ap.next_beacon); 2925 return err; 2926 } 2927 *changed |= err; 2928 2929 break; 2930 case NL80211_IFTYPE_ADHOC: 2931 if (!sdata->vif.bss_conf.ibss_joined) 2932 return -EINVAL; 2933 2934 if (params->chandef.width != sdata->u.ibss.chandef.width) 2935 return -EINVAL; 2936 2937 switch (params->chandef.width) { 2938 case NL80211_CHAN_WIDTH_40: 2939 if (cfg80211_get_chandef_type(¶ms->chandef) != 2940 cfg80211_get_chandef_type(&sdata->u.ibss.chandef)) 2941 return -EINVAL; 2942 case NL80211_CHAN_WIDTH_5: 2943 case NL80211_CHAN_WIDTH_10: 2944 case NL80211_CHAN_WIDTH_20_NOHT: 2945 case NL80211_CHAN_WIDTH_20: 2946 break; 2947 default: 2948 return -EINVAL; 2949 } 2950 2951 /* changes into another band are not supported */ 2952 if (sdata->u.ibss.chandef.chan->band != 2953 params->chandef.chan->band) 2954 return -EINVAL; 2955 2956 /* see comments in the NL80211_IFTYPE_AP block */ 2957 if (params->count > 1) { 2958 err = ieee80211_ibss_csa_beacon(sdata, params); 2959 if (err < 0) 2960 return err; 2961 *changed |= err; 2962 } 2963 2964 ieee80211_send_action_csa(sdata, params); 2965 2966 break; 2967 #ifdef CONFIG_MAC80211_MESH 2968 case NL80211_IFTYPE_MESH_POINT: { 2969 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 2970 2971 if (params->chandef.width != sdata->vif.bss_conf.chandef.width) 2972 return -EINVAL; 2973 2974 /* changes into another band are not supported */ 2975 if (sdata->vif.bss_conf.chandef.chan->band != 2976 params->chandef.chan->band) 2977 return -EINVAL; 2978 2979 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) { 2980 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT; 2981 if (!ifmsh->pre_value) 2982 ifmsh->pre_value = 1; 2983 else 2984 ifmsh->pre_value++; 2985 } 2986 2987 /* see comments in the NL80211_IFTYPE_AP block */ 2988 if (params->count > 1) { 2989 err = ieee80211_mesh_csa_beacon(sdata, params); 2990 if (err < 0) { 2991 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE; 2992 return err; 2993 } 2994 *changed |= err; 2995 } 2996 2997 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) 2998 ieee80211_send_action_csa(sdata, params); 2999 3000 break; 3001 } 3002 #endif 3003 default: 3004 return -EOPNOTSUPP; 3005 } 3006 3007 return 0; 3008 } 3009 3010 static int 3011 __ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev, 3012 struct cfg80211_csa_settings *params) 3013 { 3014 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3015 struct ieee80211_local *local = sdata->local; 3016 struct ieee80211_chanctx_conf *conf; 3017 struct ieee80211_chanctx *chanctx; 3018 int err, changed = 0; 3019 3020 sdata_assert_lock(sdata); 3021 lockdep_assert_held(&local->mtx); 3022 3023 if (!list_empty(&local->roc_list) || local->scanning) 3024 return -EBUSY; 3025 3026 if (sdata->wdev.cac_started) 3027 return -EBUSY; 3028 3029 if (cfg80211_chandef_identical(¶ms->chandef, 3030 &sdata->vif.bss_conf.chandef)) 3031 return -EINVAL; 3032 3033 /* don't allow another channel switch if one is already active. */ 3034 if (sdata->vif.csa_active) 3035 return -EBUSY; 3036 3037 mutex_lock(&local->chanctx_mtx); 3038 conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 3039 lockdep_is_held(&local->chanctx_mtx)); 3040 if (!conf) { 3041 err = -EBUSY; 3042 goto out; 3043 } 3044 3045 chanctx = container_of(conf, struct ieee80211_chanctx, conf); 3046 if (!chanctx) { 3047 err = -EBUSY; 3048 goto out; 3049 } 3050 3051 err = ieee80211_vif_reserve_chanctx(sdata, ¶ms->chandef, 3052 chanctx->mode, 3053 params->radar_required); 3054 if (err) 3055 goto out; 3056 3057 /* if reservation is invalid then this will fail */ 3058 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0); 3059 if (err) { 3060 ieee80211_vif_unreserve_chanctx(sdata); 3061 goto out; 3062 } 3063 3064 err = ieee80211_set_csa_beacon(sdata, params, &changed); 3065 if (err) { 3066 ieee80211_vif_unreserve_chanctx(sdata); 3067 goto out; 3068 } 3069 3070 sdata->csa_chandef = params->chandef; 3071 sdata->csa_block_tx = params->block_tx; 3072 sdata->vif.csa_active = true; 3073 3074 if (sdata->csa_block_tx) 3075 ieee80211_stop_vif_queues(local, sdata, 3076 IEEE80211_QUEUE_STOP_REASON_CSA); 3077 3078 if (changed) { 3079 ieee80211_bss_info_change_notify(sdata, changed); 3080 drv_channel_switch_beacon(sdata, ¶ms->chandef); 3081 } else { 3082 /* if the beacon didn't change, we can finalize immediately */ 3083 ieee80211_csa_finalize(sdata); 3084 } 3085 3086 out: 3087 mutex_unlock(&local->chanctx_mtx); 3088 return err; 3089 } 3090 3091 int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev, 3092 struct cfg80211_csa_settings *params) 3093 { 3094 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3095 struct ieee80211_local *local = sdata->local; 3096 int err; 3097 3098 mutex_lock(&local->mtx); 3099 err = __ieee80211_channel_switch(wiphy, dev, params); 3100 mutex_unlock(&local->mtx); 3101 3102 return err; 3103 } 3104 3105 static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev, 3106 struct cfg80211_mgmt_tx_params *params, 3107 u64 *cookie) 3108 { 3109 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 3110 struct ieee80211_local *local = sdata->local; 3111 struct sk_buff *skb; 3112 struct sta_info *sta; 3113 const struct ieee80211_mgmt *mgmt = (void *)params->buf; 3114 bool need_offchan = false; 3115 u32 flags; 3116 int ret; 3117 u8 *data; 3118 3119 if (params->dont_wait_for_ack) 3120 flags = IEEE80211_TX_CTL_NO_ACK; 3121 else 3122 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX | 3123 IEEE80211_TX_CTL_REQ_TX_STATUS; 3124 3125 if (params->no_cck) 3126 flags |= IEEE80211_TX_CTL_NO_CCK_RATE; 3127 3128 switch (sdata->vif.type) { 3129 case NL80211_IFTYPE_ADHOC: 3130 if (!sdata->vif.bss_conf.ibss_joined) 3131 need_offchan = true; 3132 /* fall through */ 3133 #ifdef CONFIG_MAC80211_MESH 3134 case NL80211_IFTYPE_MESH_POINT: 3135 if (ieee80211_vif_is_mesh(&sdata->vif) && 3136 !sdata->u.mesh.mesh_id_len) 3137 need_offchan = true; 3138 /* fall through */ 3139 #endif 3140 case NL80211_IFTYPE_AP: 3141 case NL80211_IFTYPE_AP_VLAN: 3142 case NL80211_IFTYPE_P2P_GO: 3143 if (sdata->vif.type != NL80211_IFTYPE_ADHOC && 3144 !ieee80211_vif_is_mesh(&sdata->vif) && 3145 !rcu_access_pointer(sdata->bss->beacon)) 3146 need_offchan = true; 3147 if (!ieee80211_is_action(mgmt->frame_control) || 3148 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC || 3149 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED || 3150 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT) 3151 break; 3152 rcu_read_lock(); 3153 sta = sta_info_get(sdata, mgmt->da); 3154 rcu_read_unlock(); 3155 if (!sta) 3156 return -ENOLINK; 3157 break; 3158 case NL80211_IFTYPE_STATION: 3159 case NL80211_IFTYPE_P2P_CLIENT: 3160 if (!sdata->u.mgd.associated) 3161 need_offchan = true; 3162 break; 3163 case NL80211_IFTYPE_P2P_DEVICE: 3164 need_offchan = true; 3165 break; 3166 default: 3167 return -EOPNOTSUPP; 3168 } 3169 3170 /* configurations requiring offchan cannot work if no channel has been 3171 * specified 3172 */ 3173 if (need_offchan && !params->chan) 3174 return -EINVAL; 3175 3176 mutex_lock(&local->mtx); 3177 3178 /* Check if the operating channel is the requested channel */ 3179 if (!need_offchan) { 3180 struct ieee80211_chanctx_conf *chanctx_conf; 3181 3182 rcu_read_lock(); 3183 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3184 3185 if (chanctx_conf) { 3186 need_offchan = params->chan && 3187 (params->chan != 3188 chanctx_conf->def.chan); 3189 } else if (!params->chan) { 3190 ret = -EINVAL; 3191 rcu_read_unlock(); 3192 goto out_unlock; 3193 } else { 3194 need_offchan = true; 3195 } 3196 rcu_read_unlock(); 3197 } 3198 3199 if (need_offchan && !params->offchan) { 3200 ret = -EBUSY; 3201 goto out_unlock; 3202 } 3203 3204 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len); 3205 if (!skb) { 3206 ret = -ENOMEM; 3207 goto out_unlock; 3208 } 3209 skb_reserve(skb, local->hw.extra_tx_headroom); 3210 3211 data = skb_put(skb, params->len); 3212 memcpy(data, params->buf, params->len); 3213 3214 /* Update CSA counters */ 3215 if (sdata->vif.csa_active && 3216 (sdata->vif.type == NL80211_IFTYPE_AP || 3217 sdata->vif.type == NL80211_IFTYPE_ADHOC) && 3218 params->n_csa_offsets) { 3219 int i; 3220 struct beacon_data *beacon = NULL; 3221 3222 rcu_read_lock(); 3223 3224 if (sdata->vif.type == NL80211_IFTYPE_AP) 3225 beacon = rcu_dereference(sdata->u.ap.beacon); 3226 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) 3227 beacon = rcu_dereference(sdata->u.ibss.presp); 3228 else if (ieee80211_vif_is_mesh(&sdata->vif)) 3229 beacon = rcu_dereference(sdata->u.mesh.beacon); 3230 3231 if (beacon) 3232 for (i = 0; i < params->n_csa_offsets; i++) 3233 data[params->csa_offsets[i]] = 3234 beacon->csa_current_counter; 3235 3236 rcu_read_unlock(); 3237 } 3238 3239 IEEE80211_SKB_CB(skb)->flags = flags; 3240 3241 skb->dev = sdata->dev; 3242 3243 if (!need_offchan) { 3244 *cookie = (unsigned long) skb; 3245 ieee80211_tx_skb(sdata, skb); 3246 ret = 0; 3247 goto out_unlock; 3248 } 3249 3250 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN | 3251 IEEE80211_TX_INTFL_OFFCHAN_TX_OK; 3252 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) 3253 IEEE80211_SKB_CB(skb)->hw_queue = 3254 local->hw.offchannel_tx_hw_queue; 3255 3256 /* This will handle all kinds of coalescing and immediate TX */ 3257 ret = ieee80211_start_roc_work(local, sdata, params->chan, 3258 params->wait, cookie, skb, 3259 IEEE80211_ROC_TYPE_MGMT_TX); 3260 if (ret) 3261 kfree_skb(skb); 3262 out_unlock: 3263 mutex_unlock(&local->mtx); 3264 return ret; 3265 } 3266 3267 static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy, 3268 struct wireless_dev *wdev, 3269 u64 cookie) 3270 { 3271 struct ieee80211_local *local = wiphy_priv(wiphy); 3272 3273 return ieee80211_cancel_roc(local, cookie, true); 3274 } 3275 3276 static void ieee80211_mgmt_frame_register(struct wiphy *wiphy, 3277 struct wireless_dev *wdev, 3278 u16 frame_type, bool reg) 3279 { 3280 struct ieee80211_local *local = wiphy_priv(wiphy); 3281 3282 switch (frame_type) { 3283 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ: 3284 if (reg) 3285 local->probe_req_reg++; 3286 else 3287 local->probe_req_reg--; 3288 3289 if (!local->open_count) 3290 break; 3291 3292 ieee80211_queue_work(&local->hw, &local->reconfig_filter); 3293 break; 3294 default: 3295 break; 3296 } 3297 } 3298 3299 static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant) 3300 { 3301 struct ieee80211_local *local = wiphy_priv(wiphy); 3302 3303 if (local->started) 3304 return -EOPNOTSUPP; 3305 3306 return drv_set_antenna(local, tx_ant, rx_ant); 3307 } 3308 3309 static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant) 3310 { 3311 struct ieee80211_local *local = wiphy_priv(wiphy); 3312 3313 return drv_get_antenna(local, tx_ant, rx_ant); 3314 } 3315 3316 static int ieee80211_set_rekey_data(struct wiphy *wiphy, 3317 struct net_device *dev, 3318 struct cfg80211_gtk_rekey_data *data) 3319 { 3320 struct ieee80211_local *local = wiphy_priv(wiphy); 3321 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3322 3323 if (!local->ops->set_rekey_data) 3324 return -EOPNOTSUPP; 3325 3326 drv_set_rekey_data(local, sdata, data); 3327 3328 return 0; 3329 } 3330 3331 static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev, 3332 const u8 *peer, u64 *cookie) 3333 { 3334 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3335 struct ieee80211_local *local = sdata->local; 3336 struct ieee80211_qos_hdr *nullfunc; 3337 struct sk_buff *skb; 3338 int size = sizeof(*nullfunc); 3339 __le16 fc; 3340 bool qos; 3341 struct ieee80211_tx_info *info; 3342 struct sta_info *sta; 3343 struct ieee80211_chanctx_conf *chanctx_conf; 3344 enum ieee80211_band band; 3345 3346 rcu_read_lock(); 3347 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3348 if (WARN_ON(!chanctx_conf)) { 3349 rcu_read_unlock(); 3350 return -EINVAL; 3351 } 3352 band = chanctx_conf->def.chan->band; 3353 sta = sta_info_get_bss(sdata, peer); 3354 if (sta) { 3355 qos = test_sta_flag(sta, WLAN_STA_WME); 3356 } else { 3357 rcu_read_unlock(); 3358 return -ENOLINK; 3359 } 3360 3361 if (qos) { 3362 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 3363 IEEE80211_STYPE_QOS_NULLFUNC | 3364 IEEE80211_FCTL_FROMDS); 3365 } else { 3366 size -= 2; 3367 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 3368 IEEE80211_STYPE_NULLFUNC | 3369 IEEE80211_FCTL_FROMDS); 3370 } 3371 3372 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size); 3373 if (!skb) { 3374 rcu_read_unlock(); 3375 return -ENOMEM; 3376 } 3377 3378 skb->dev = dev; 3379 3380 skb_reserve(skb, local->hw.extra_tx_headroom); 3381 3382 nullfunc = (void *) skb_put(skb, size); 3383 nullfunc->frame_control = fc; 3384 nullfunc->duration_id = 0; 3385 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN); 3386 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN); 3387 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN); 3388 nullfunc->seq_ctrl = 0; 3389 3390 info = IEEE80211_SKB_CB(skb); 3391 3392 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS | 3393 IEEE80211_TX_INTFL_NL80211_FRAME_TX; 3394 3395 skb_set_queue_mapping(skb, IEEE80211_AC_VO); 3396 skb->priority = 7; 3397 if (qos) 3398 nullfunc->qos_ctrl = cpu_to_le16(7); 3399 3400 local_bh_disable(); 3401 ieee80211_xmit(sdata, skb, band); 3402 local_bh_enable(); 3403 rcu_read_unlock(); 3404 3405 *cookie = (unsigned long) skb; 3406 return 0; 3407 } 3408 3409 static int ieee80211_cfg_get_channel(struct wiphy *wiphy, 3410 struct wireless_dev *wdev, 3411 struct cfg80211_chan_def *chandef) 3412 { 3413 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 3414 struct ieee80211_local *local = wiphy_priv(wiphy); 3415 struct ieee80211_chanctx_conf *chanctx_conf; 3416 int ret = -ENODATA; 3417 3418 rcu_read_lock(); 3419 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3420 if (chanctx_conf) { 3421 *chandef = chanctx_conf->def; 3422 ret = 0; 3423 } else if (local->open_count > 0 && 3424 local->open_count == local->monitors && 3425 sdata->vif.type == NL80211_IFTYPE_MONITOR) { 3426 if (local->use_chanctx) 3427 *chandef = local->monitor_chandef; 3428 else 3429 *chandef = local->_oper_chandef; 3430 ret = 0; 3431 } 3432 rcu_read_unlock(); 3433 3434 return ret; 3435 } 3436 3437 #ifdef CONFIG_PM 3438 static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled) 3439 { 3440 drv_set_wakeup(wiphy_priv(wiphy), enabled); 3441 } 3442 #endif 3443 3444 static int ieee80211_set_qos_map(struct wiphy *wiphy, 3445 struct net_device *dev, 3446 struct cfg80211_qos_map *qos_map) 3447 { 3448 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3449 struct mac80211_qos_map *new_qos_map, *old_qos_map; 3450 3451 if (qos_map) { 3452 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL); 3453 if (!new_qos_map) 3454 return -ENOMEM; 3455 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map)); 3456 } else { 3457 /* A NULL qos_map was passed to disable QoS mapping */ 3458 new_qos_map = NULL; 3459 } 3460 3461 old_qos_map = sdata_dereference(sdata->qos_map, sdata); 3462 rcu_assign_pointer(sdata->qos_map, new_qos_map); 3463 if (old_qos_map) 3464 kfree_rcu(old_qos_map, rcu_head); 3465 3466 return 0; 3467 } 3468 3469 static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy, 3470 struct net_device *dev, 3471 struct cfg80211_chan_def *chandef) 3472 { 3473 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3474 int ret; 3475 u32 changed = 0; 3476 3477 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed); 3478 if (ret == 0) 3479 ieee80211_bss_info_change_notify(sdata, changed); 3480 3481 return ret; 3482 } 3483 3484 const struct cfg80211_ops mac80211_config_ops = { 3485 .add_virtual_intf = ieee80211_add_iface, 3486 .del_virtual_intf = ieee80211_del_iface, 3487 .change_virtual_intf = ieee80211_change_iface, 3488 .start_p2p_device = ieee80211_start_p2p_device, 3489 .stop_p2p_device = ieee80211_stop_p2p_device, 3490 .add_key = ieee80211_add_key, 3491 .del_key = ieee80211_del_key, 3492 .get_key = ieee80211_get_key, 3493 .set_default_key = ieee80211_config_default_key, 3494 .set_default_mgmt_key = ieee80211_config_default_mgmt_key, 3495 .start_ap = ieee80211_start_ap, 3496 .change_beacon = ieee80211_change_beacon, 3497 .stop_ap = ieee80211_stop_ap, 3498 .add_station = ieee80211_add_station, 3499 .del_station = ieee80211_del_station, 3500 .change_station = ieee80211_change_station, 3501 .get_station = ieee80211_get_station, 3502 .dump_station = ieee80211_dump_station, 3503 .dump_survey = ieee80211_dump_survey, 3504 #ifdef CONFIG_MAC80211_MESH 3505 .add_mpath = ieee80211_add_mpath, 3506 .del_mpath = ieee80211_del_mpath, 3507 .change_mpath = ieee80211_change_mpath, 3508 .get_mpath = ieee80211_get_mpath, 3509 .dump_mpath = ieee80211_dump_mpath, 3510 .update_mesh_config = ieee80211_update_mesh_config, 3511 .get_mesh_config = ieee80211_get_mesh_config, 3512 .join_mesh = ieee80211_join_mesh, 3513 .leave_mesh = ieee80211_leave_mesh, 3514 #endif 3515 .change_bss = ieee80211_change_bss, 3516 .set_txq_params = ieee80211_set_txq_params, 3517 .set_monitor_channel = ieee80211_set_monitor_channel, 3518 .suspend = ieee80211_suspend, 3519 .resume = ieee80211_resume, 3520 .scan = ieee80211_scan, 3521 .sched_scan_start = ieee80211_sched_scan_start, 3522 .sched_scan_stop = ieee80211_sched_scan_stop, 3523 .auth = ieee80211_auth, 3524 .assoc = ieee80211_assoc, 3525 .deauth = ieee80211_deauth, 3526 .disassoc = ieee80211_disassoc, 3527 .join_ibss = ieee80211_join_ibss, 3528 .leave_ibss = ieee80211_leave_ibss, 3529 .set_mcast_rate = ieee80211_set_mcast_rate, 3530 .set_wiphy_params = ieee80211_set_wiphy_params, 3531 .set_tx_power = ieee80211_set_tx_power, 3532 .get_tx_power = ieee80211_get_tx_power, 3533 .set_wds_peer = ieee80211_set_wds_peer, 3534 .rfkill_poll = ieee80211_rfkill_poll, 3535 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd) 3536 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump) 3537 .set_power_mgmt = ieee80211_set_power_mgmt, 3538 .set_bitrate_mask = ieee80211_set_bitrate_mask, 3539 .remain_on_channel = ieee80211_remain_on_channel, 3540 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel, 3541 .mgmt_tx = ieee80211_mgmt_tx, 3542 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait, 3543 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config, 3544 .mgmt_frame_register = ieee80211_mgmt_frame_register, 3545 .set_antenna = ieee80211_set_antenna, 3546 .get_antenna = ieee80211_get_antenna, 3547 .set_rekey_data = ieee80211_set_rekey_data, 3548 .tdls_oper = ieee80211_tdls_oper, 3549 .tdls_mgmt = ieee80211_tdls_mgmt, 3550 .probe_client = ieee80211_probe_client, 3551 .set_noack_map = ieee80211_set_noack_map, 3552 #ifdef CONFIG_PM 3553 .set_wakeup = ieee80211_set_wakeup, 3554 #endif 3555 .get_channel = ieee80211_cfg_get_channel, 3556 .start_radar_detection = ieee80211_start_radar_detection, 3557 .channel_switch = ieee80211_channel_switch, 3558 .set_qos_map = ieee80211_set_qos_map, 3559 .set_ap_chanwidth = ieee80211_set_ap_chanwidth, 3560 }; 3561