1 /* 2 * mac80211 configuration hooks for cfg80211 3 * 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net> 5 * Copyright 2013-2014 Intel Mobile Communications GmbH 6 * 7 * This file is GPLv2 as found in COPYING. 8 */ 9 10 #include <linux/ieee80211.h> 11 #include <linux/nl80211.h> 12 #include <linux/rtnetlink.h> 13 #include <linux/slab.h> 14 #include <net/net_namespace.h> 15 #include <linux/rcupdate.h> 16 #include <linux/if_ether.h> 17 #include <net/cfg80211.h> 18 #include "ieee80211_i.h" 19 #include "driver-ops.h" 20 #include "cfg.h" 21 #include "rate.h" 22 #include "mesh.h" 23 24 static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy, 25 const char *name, 26 enum nl80211_iftype type, 27 u32 *flags, 28 struct vif_params *params) 29 { 30 struct ieee80211_local *local = wiphy_priv(wiphy); 31 struct wireless_dev *wdev; 32 struct ieee80211_sub_if_data *sdata; 33 int err; 34 35 err = ieee80211_if_add(local, name, &wdev, type, params); 36 if (err) 37 return ERR_PTR(err); 38 39 if (type == NL80211_IFTYPE_MONITOR && flags) { 40 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 41 sdata->u.mntr_flags = *flags; 42 } 43 44 return wdev; 45 } 46 47 static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev) 48 { 49 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev)); 50 51 return 0; 52 } 53 54 static int ieee80211_change_iface(struct wiphy *wiphy, 55 struct net_device *dev, 56 enum nl80211_iftype type, u32 *flags, 57 struct vif_params *params) 58 { 59 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 60 int ret; 61 62 ret = ieee80211_if_change_type(sdata, type); 63 if (ret) 64 return ret; 65 66 if (type == NL80211_IFTYPE_AP_VLAN && 67 params && params->use_4addr == 0) 68 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL); 69 else if (type == NL80211_IFTYPE_STATION && 70 params && params->use_4addr >= 0) 71 sdata->u.mgd.use_4addr = params->use_4addr; 72 73 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) { 74 struct ieee80211_local *local = sdata->local; 75 76 if (ieee80211_sdata_running(sdata)) { 77 u32 mask = MONITOR_FLAG_COOK_FRAMES | 78 MONITOR_FLAG_ACTIVE; 79 80 /* 81 * Prohibit MONITOR_FLAG_COOK_FRAMES and 82 * MONITOR_FLAG_ACTIVE to be changed while the 83 * interface is up. 84 * Else we would need to add a lot of cruft 85 * to update everything: 86 * cooked_mntrs, monitor and all fif_* counters 87 * reconfigure hardware 88 */ 89 if ((*flags & mask) != (sdata->u.mntr_flags & mask)) 90 return -EBUSY; 91 92 ieee80211_adjust_monitor_flags(sdata, -1); 93 sdata->u.mntr_flags = *flags; 94 ieee80211_adjust_monitor_flags(sdata, 1); 95 96 ieee80211_configure_filter(local); 97 } else { 98 /* 99 * Because the interface is down, ieee80211_do_stop 100 * and ieee80211_do_open take care of "everything" 101 * mentioned in the comment above. 102 */ 103 sdata->u.mntr_flags = *flags; 104 } 105 } 106 107 return 0; 108 } 109 110 static int ieee80211_start_p2p_device(struct wiphy *wiphy, 111 struct wireless_dev *wdev) 112 { 113 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 114 int ret; 115 116 mutex_lock(&sdata->local->chanctx_mtx); 117 ret = ieee80211_check_combinations(sdata, NULL, 0, 0); 118 mutex_unlock(&sdata->local->chanctx_mtx); 119 if (ret < 0) 120 return ret; 121 122 return ieee80211_do_open(wdev, true); 123 } 124 125 static void ieee80211_stop_p2p_device(struct wiphy *wiphy, 126 struct wireless_dev *wdev) 127 { 128 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev)); 129 } 130 131 static int ieee80211_set_noack_map(struct wiphy *wiphy, 132 struct net_device *dev, 133 u16 noack_map) 134 { 135 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 136 137 sdata->noack_map = noack_map; 138 return 0; 139 } 140 141 static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev, 142 u8 key_idx, bool pairwise, const u8 *mac_addr, 143 struct key_params *params) 144 { 145 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 146 struct ieee80211_local *local = sdata->local; 147 struct sta_info *sta = NULL; 148 const struct ieee80211_cipher_scheme *cs = NULL; 149 struct ieee80211_key *key; 150 int err; 151 152 if (!ieee80211_sdata_running(sdata)) 153 return -ENETDOWN; 154 155 /* reject WEP and TKIP keys if WEP failed to initialize */ 156 switch (params->cipher) { 157 case WLAN_CIPHER_SUITE_WEP40: 158 case WLAN_CIPHER_SUITE_TKIP: 159 case WLAN_CIPHER_SUITE_WEP104: 160 if (IS_ERR(local->wep_tx_tfm)) 161 return -EINVAL; 162 break; 163 case WLAN_CIPHER_SUITE_CCMP: 164 case WLAN_CIPHER_SUITE_AES_CMAC: 165 case WLAN_CIPHER_SUITE_GCMP: 166 break; 167 default: 168 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type); 169 break; 170 } 171 172 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len, 173 params->key, params->seq_len, params->seq, 174 cs); 175 if (IS_ERR(key)) 176 return PTR_ERR(key); 177 178 if (pairwise) 179 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE; 180 181 mutex_lock(&local->sta_mtx); 182 183 if (mac_addr) { 184 if (ieee80211_vif_is_mesh(&sdata->vif)) 185 sta = sta_info_get(sdata, mac_addr); 186 else 187 sta = sta_info_get_bss(sdata, mac_addr); 188 /* 189 * The ASSOC test makes sure the driver is ready to 190 * receive the key. When wpa_supplicant has roamed 191 * using FT, it attempts to set the key before 192 * association has completed, this rejects that attempt 193 * so it will set the key again after assocation. 194 * 195 * TODO: accept the key if we have a station entry and 196 * add it to the device after the station. 197 */ 198 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) { 199 ieee80211_key_free_unused(key); 200 err = -ENOENT; 201 goto out_unlock; 202 } 203 } 204 205 switch (sdata->vif.type) { 206 case NL80211_IFTYPE_STATION: 207 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED) 208 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 209 break; 210 case NL80211_IFTYPE_AP: 211 case NL80211_IFTYPE_AP_VLAN: 212 /* Keys without a station are used for TX only */ 213 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP)) 214 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 215 break; 216 case NL80211_IFTYPE_ADHOC: 217 /* no MFP (yet) */ 218 break; 219 case NL80211_IFTYPE_MESH_POINT: 220 #ifdef CONFIG_MAC80211_MESH 221 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE) 222 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT; 223 break; 224 #endif 225 case NL80211_IFTYPE_WDS: 226 case NL80211_IFTYPE_MONITOR: 227 case NL80211_IFTYPE_P2P_DEVICE: 228 case NL80211_IFTYPE_UNSPECIFIED: 229 case NUM_NL80211_IFTYPES: 230 case NL80211_IFTYPE_P2P_CLIENT: 231 case NL80211_IFTYPE_P2P_GO: 232 /* shouldn't happen */ 233 WARN_ON_ONCE(1); 234 break; 235 } 236 237 if (sta) 238 sta->cipher_scheme = cs; 239 240 err = ieee80211_key_link(key, sdata, sta); 241 242 out_unlock: 243 mutex_unlock(&local->sta_mtx); 244 245 return err; 246 } 247 248 static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev, 249 u8 key_idx, bool pairwise, const u8 *mac_addr) 250 { 251 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 252 struct ieee80211_local *local = sdata->local; 253 struct sta_info *sta; 254 struct ieee80211_key *key = NULL; 255 int ret; 256 257 mutex_lock(&local->sta_mtx); 258 mutex_lock(&local->key_mtx); 259 260 if (mac_addr) { 261 ret = -ENOENT; 262 263 sta = sta_info_get_bss(sdata, mac_addr); 264 if (!sta) 265 goto out_unlock; 266 267 if (pairwise) 268 key = key_mtx_dereference(local, sta->ptk[key_idx]); 269 else 270 key = key_mtx_dereference(local, sta->gtk[key_idx]); 271 } else 272 key = key_mtx_dereference(local, sdata->keys[key_idx]); 273 274 if (!key) { 275 ret = -ENOENT; 276 goto out_unlock; 277 } 278 279 ieee80211_key_free(key, true); 280 281 ret = 0; 282 out_unlock: 283 mutex_unlock(&local->key_mtx); 284 mutex_unlock(&local->sta_mtx); 285 286 return ret; 287 } 288 289 static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev, 290 u8 key_idx, bool pairwise, const u8 *mac_addr, 291 void *cookie, 292 void (*callback)(void *cookie, 293 struct key_params *params)) 294 { 295 struct ieee80211_sub_if_data *sdata; 296 struct sta_info *sta = NULL; 297 u8 seq[6] = {0}; 298 struct key_params params; 299 struct ieee80211_key *key = NULL; 300 u64 pn64; 301 u32 iv32; 302 u16 iv16; 303 int err = -ENOENT; 304 305 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 306 307 rcu_read_lock(); 308 309 if (mac_addr) { 310 sta = sta_info_get_bss(sdata, mac_addr); 311 if (!sta) 312 goto out; 313 314 if (pairwise && key_idx < NUM_DEFAULT_KEYS) 315 key = rcu_dereference(sta->ptk[key_idx]); 316 else if (!pairwise && 317 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS) 318 key = rcu_dereference(sta->gtk[key_idx]); 319 } else 320 key = rcu_dereference(sdata->keys[key_idx]); 321 322 if (!key) 323 goto out; 324 325 memset(¶ms, 0, sizeof(params)); 326 327 params.cipher = key->conf.cipher; 328 329 switch (key->conf.cipher) { 330 case WLAN_CIPHER_SUITE_TKIP: 331 iv32 = key->u.tkip.tx.iv32; 332 iv16 = key->u.tkip.tx.iv16; 333 334 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) 335 drv_get_tkip_seq(sdata->local, 336 key->conf.hw_key_idx, 337 &iv32, &iv16); 338 339 seq[0] = iv16 & 0xff; 340 seq[1] = (iv16 >> 8) & 0xff; 341 seq[2] = iv32 & 0xff; 342 seq[3] = (iv32 >> 8) & 0xff; 343 seq[4] = (iv32 >> 16) & 0xff; 344 seq[5] = (iv32 >> 24) & 0xff; 345 params.seq = seq; 346 params.seq_len = 6; 347 break; 348 case WLAN_CIPHER_SUITE_CCMP: 349 pn64 = atomic64_read(&key->u.ccmp.tx_pn); 350 seq[0] = pn64; 351 seq[1] = pn64 >> 8; 352 seq[2] = pn64 >> 16; 353 seq[3] = pn64 >> 24; 354 seq[4] = pn64 >> 32; 355 seq[5] = pn64 >> 40; 356 params.seq = seq; 357 params.seq_len = 6; 358 break; 359 case WLAN_CIPHER_SUITE_AES_CMAC: 360 pn64 = atomic64_read(&key->u.aes_cmac.tx_pn); 361 seq[0] = pn64; 362 seq[1] = pn64 >> 8; 363 seq[2] = pn64 >> 16; 364 seq[3] = pn64 >> 24; 365 seq[4] = pn64 >> 32; 366 seq[5] = pn64 >> 40; 367 params.seq = seq; 368 params.seq_len = 6; 369 break; 370 } 371 372 params.key = key->conf.key; 373 params.key_len = key->conf.keylen; 374 375 callback(cookie, ¶ms); 376 err = 0; 377 378 out: 379 rcu_read_unlock(); 380 return err; 381 } 382 383 static int ieee80211_config_default_key(struct wiphy *wiphy, 384 struct net_device *dev, 385 u8 key_idx, bool uni, 386 bool multi) 387 { 388 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 389 390 ieee80211_set_default_key(sdata, key_idx, uni, multi); 391 392 return 0; 393 } 394 395 static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy, 396 struct net_device *dev, 397 u8 key_idx) 398 { 399 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 400 401 ieee80211_set_default_mgmt_key(sdata, key_idx); 402 403 return 0; 404 } 405 406 void sta_set_rate_info_tx(struct sta_info *sta, 407 const struct ieee80211_tx_rate *rate, 408 struct rate_info *rinfo) 409 { 410 rinfo->flags = 0; 411 if (rate->flags & IEEE80211_TX_RC_MCS) { 412 rinfo->flags |= RATE_INFO_FLAGS_MCS; 413 rinfo->mcs = rate->idx; 414 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) { 415 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS; 416 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate); 417 rinfo->nss = ieee80211_rate_get_vht_nss(rate); 418 } else { 419 struct ieee80211_supported_band *sband; 420 int shift = ieee80211_vif_get_shift(&sta->sdata->vif); 421 u16 brate; 422 423 sband = sta->local->hw.wiphy->bands[ 424 ieee80211_get_sdata_band(sta->sdata)]; 425 brate = sband->bitrates[rate->idx].bitrate; 426 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift); 427 } 428 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH) 429 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 430 if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH) 431 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 432 if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH) 433 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 434 if (rate->flags & IEEE80211_TX_RC_SHORT_GI) 435 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 436 } 437 438 void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo) 439 { 440 rinfo->flags = 0; 441 442 if (sta->last_rx_rate_flag & RX_FLAG_HT) { 443 rinfo->flags |= RATE_INFO_FLAGS_MCS; 444 rinfo->mcs = sta->last_rx_rate_idx; 445 } else if (sta->last_rx_rate_flag & RX_FLAG_VHT) { 446 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS; 447 rinfo->nss = sta->last_rx_rate_vht_nss; 448 rinfo->mcs = sta->last_rx_rate_idx; 449 } else { 450 struct ieee80211_supported_band *sband; 451 int shift = ieee80211_vif_get_shift(&sta->sdata->vif); 452 u16 brate; 453 454 sband = sta->local->hw.wiphy->bands[ 455 ieee80211_get_sdata_band(sta->sdata)]; 456 brate = sband->bitrates[sta->last_rx_rate_idx].bitrate; 457 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift); 458 } 459 460 if (sta->last_rx_rate_flag & RX_FLAG_40MHZ) 461 rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 462 if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI) 463 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 464 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80MHZ) 465 rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 466 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80P80MHZ) 467 rinfo->flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH; 468 if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_160MHZ) 469 rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 470 } 471 472 static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev, 473 int idx, u8 *mac, struct station_info *sinfo) 474 { 475 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 476 struct ieee80211_local *local = sdata->local; 477 struct sta_info *sta; 478 int ret = -ENOENT; 479 480 mutex_lock(&local->sta_mtx); 481 482 sta = sta_info_get_by_idx(sdata, idx); 483 if (sta) { 484 ret = 0; 485 memcpy(mac, sta->sta.addr, ETH_ALEN); 486 sta_set_sinfo(sta, sinfo); 487 } 488 489 mutex_unlock(&local->sta_mtx); 490 491 return ret; 492 } 493 494 static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev, 495 int idx, struct survey_info *survey) 496 { 497 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 498 499 return drv_get_survey(local, idx, survey); 500 } 501 502 static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev, 503 const u8 *mac, struct station_info *sinfo) 504 { 505 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 506 struct ieee80211_local *local = sdata->local; 507 struct sta_info *sta; 508 int ret = -ENOENT; 509 510 mutex_lock(&local->sta_mtx); 511 512 sta = sta_info_get_bss(sdata, mac); 513 if (sta) { 514 ret = 0; 515 sta_set_sinfo(sta, sinfo); 516 } 517 518 mutex_unlock(&local->sta_mtx); 519 520 return ret; 521 } 522 523 static int ieee80211_set_monitor_channel(struct wiphy *wiphy, 524 struct cfg80211_chan_def *chandef) 525 { 526 struct ieee80211_local *local = wiphy_priv(wiphy); 527 struct ieee80211_sub_if_data *sdata; 528 int ret = 0; 529 530 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef)) 531 return 0; 532 533 mutex_lock(&local->mtx); 534 mutex_lock(&local->iflist_mtx); 535 if (local->use_chanctx) { 536 sdata = rcu_dereference_protected( 537 local->monitor_sdata, 538 lockdep_is_held(&local->iflist_mtx)); 539 if (sdata) { 540 ieee80211_vif_release_channel(sdata); 541 ret = ieee80211_vif_use_channel(sdata, chandef, 542 IEEE80211_CHANCTX_EXCLUSIVE); 543 } 544 } else if (local->open_count == local->monitors) { 545 local->_oper_chandef = *chandef; 546 ieee80211_hw_config(local, 0); 547 } 548 549 if (ret == 0) 550 local->monitor_chandef = *chandef; 551 mutex_unlock(&local->iflist_mtx); 552 mutex_unlock(&local->mtx); 553 554 return ret; 555 } 556 557 static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata, 558 const u8 *resp, size_t resp_len, 559 const struct ieee80211_csa_settings *csa) 560 { 561 struct probe_resp *new, *old; 562 563 if (!resp || !resp_len) 564 return 1; 565 566 old = sdata_dereference(sdata->u.ap.probe_resp, sdata); 567 568 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL); 569 if (!new) 570 return -ENOMEM; 571 572 new->len = resp_len; 573 memcpy(new->data, resp, resp_len); 574 575 if (csa) 576 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp, 577 csa->n_counter_offsets_presp * 578 sizeof(new->csa_counter_offsets[0])); 579 580 rcu_assign_pointer(sdata->u.ap.probe_resp, new); 581 if (old) 582 kfree_rcu(old, rcu_head); 583 584 return 0; 585 } 586 587 static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata, 588 struct cfg80211_beacon_data *params, 589 const struct ieee80211_csa_settings *csa) 590 { 591 struct beacon_data *new, *old; 592 int new_head_len, new_tail_len; 593 int size, err; 594 u32 changed = BSS_CHANGED_BEACON; 595 596 old = sdata_dereference(sdata->u.ap.beacon, sdata); 597 598 599 /* Need to have a beacon head if we don't have one yet */ 600 if (!params->head && !old) 601 return -EINVAL; 602 603 /* new or old head? */ 604 if (params->head) 605 new_head_len = params->head_len; 606 else 607 new_head_len = old->head_len; 608 609 /* new or old tail? */ 610 if (params->tail || !old) 611 /* params->tail_len will be zero for !params->tail */ 612 new_tail_len = params->tail_len; 613 else 614 new_tail_len = old->tail_len; 615 616 size = sizeof(*new) + new_head_len + new_tail_len; 617 618 new = kzalloc(size, GFP_KERNEL); 619 if (!new) 620 return -ENOMEM; 621 622 /* start filling the new info now */ 623 624 /* 625 * pointers go into the block we allocated, 626 * memory is | beacon_data | head | tail | 627 */ 628 new->head = ((u8 *) new) + sizeof(*new); 629 new->tail = new->head + new_head_len; 630 new->head_len = new_head_len; 631 new->tail_len = new_tail_len; 632 633 if (csa) { 634 new->csa_current_counter = csa->count; 635 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon, 636 csa->n_counter_offsets_beacon * 637 sizeof(new->csa_counter_offsets[0])); 638 } 639 640 /* copy in head */ 641 if (params->head) 642 memcpy(new->head, params->head, new_head_len); 643 else 644 memcpy(new->head, old->head, new_head_len); 645 646 /* copy in optional tail */ 647 if (params->tail) 648 memcpy(new->tail, params->tail, new_tail_len); 649 else 650 if (old) 651 memcpy(new->tail, old->tail, new_tail_len); 652 653 err = ieee80211_set_probe_resp(sdata, params->probe_resp, 654 params->probe_resp_len, csa); 655 if (err < 0) 656 return err; 657 if (err == 0) 658 changed |= BSS_CHANGED_AP_PROBE_RESP; 659 660 rcu_assign_pointer(sdata->u.ap.beacon, new); 661 662 if (old) 663 kfree_rcu(old, rcu_head); 664 665 return changed; 666 } 667 668 static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev, 669 struct cfg80211_ap_settings *params) 670 { 671 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 672 struct ieee80211_local *local = sdata->local; 673 struct beacon_data *old; 674 struct ieee80211_sub_if_data *vlan; 675 u32 changed = BSS_CHANGED_BEACON_INT | 676 BSS_CHANGED_BEACON_ENABLED | 677 BSS_CHANGED_BEACON | 678 BSS_CHANGED_SSID | 679 BSS_CHANGED_P2P_PS; 680 int err; 681 682 old = sdata_dereference(sdata->u.ap.beacon, sdata); 683 if (old) 684 return -EALREADY; 685 686 switch (params->smps_mode) { 687 case NL80211_SMPS_OFF: 688 sdata->smps_mode = IEEE80211_SMPS_OFF; 689 break; 690 case NL80211_SMPS_STATIC: 691 sdata->smps_mode = IEEE80211_SMPS_STATIC; 692 break; 693 case NL80211_SMPS_DYNAMIC: 694 sdata->smps_mode = IEEE80211_SMPS_DYNAMIC; 695 break; 696 default: 697 return -EINVAL; 698 } 699 sdata->needed_rx_chains = sdata->local->rx_chains; 700 701 mutex_lock(&local->mtx); 702 err = ieee80211_vif_use_channel(sdata, ¶ms->chandef, 703 IEEE80211_CHANCTX_SHARED); 704 if (!err) 705 ieee80211_vif_copy_chanctx_to_vlans(sdata, false); 706 mutex_unlock(&local->mtx); 707 if (err) 708 return err; 709 710 /* 711 * Apply control port protocol, this allows us to 712 * not encrypt dynamic WEP control frames. 713 */ 714 sdata->control_port_protocol = params->crypto.control_port_ethertype; 715 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt; 716 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local, 717 ¶ms->crypto, 718 sdata->vif.type); 719 720 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) { 721 vlan->control_port_protocol = 722 params->crypto.control_port_ethertype; 723 vlan->control_port_no_encrypt = 724 params->crypto.control_port_no_encrypt; 725 vlan->encrypt_headroom = 726 ieee80211_cs_headroom(sdata->local, 727 ¶ms->crypto, 728 vlan->vif.type); 729 } 730 731 sdata->vif.bss_conf.beacon_int = params->beacon_interval; 732 sdata->vif.bss_conf.dtim_period = params->dtim_period; 733 sdata->vif.bss_conf.enable_beacon = true; 734 735 sdata->vif.bss_conf.ssid_len = params->ssid_len; 736 if (params->ssid_len) 737 memcpy(sdata->vif.bss_conf.ssid, params->ssid, 738 params->ssid_len); 739 sdata->vif.bss_conf.hidden_ssid = 740 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE); 741 742 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0, 743 sizeof(sdata->vif.bss_conf.p2p_noa_attr)); 744 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow = 745 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 746 if (params->p2p_opp_ps) 747 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 748 IEEE80211_P2P_OPPPS_ENABLE_BIT; 749 750 err = ieee80211_assign_beacon(sdata, ¶ms->beacon, NULL); 751 if (err < 0) { 752 ieee80211_vif_release_channel(sdata); 753 return err; 754 } 755 changed |= err; 756 757 err = drv_start_ap(sdata->local, sdata); 758 if (err) { 759 old = sdata_dereference(sdata->u.ap.beacon, sdata); 760 761 if (old) 762 kfree_rcu(old, rcu_head); 763 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL); 764 ieee80211_vif_release_channel(sdata); 765 return err; 766 } 767 768 ieee80211_recalc_dtim(local, sdata); 769 ieee80211_bss_info_change_notify(sdata, changed); 770 771 netif_carrier_on(dev); 772 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) 773 netif_carrier_on(vlan->dev); 774 775 return 0; 776 } 777 778 static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev, 779 struct cfg80211_beacon_data *params) 780 { 781 struct ieee80211_sub_if_data *sdata; 782 struct beacon_data *old; 783 int err; 784 785 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 786 sdata_assert_lock(sdata); 787 788 /* don't allow changing the beacon while CSA is in place - offset 789 * of channel switch counter may change 790 */ 791 if (sdata->vif.csa_active) 792 return -EBUSY; 793 794 old = sdata_dereference(sdata->u.ap.beacon, sdata); 795 if (!old) 796 return -ENOENT; 797 798 err = ieee80211_assign_beacon(sdata, params, NULL); 799 if (err < 0) 800 return err; 801 ieee80211_bss_info_change_notify(sdata, err); 802 return 0; 803 } 804 805 static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev) 806 { 807 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 808 struct ieee80211_sub_if_data *vlan; 809 struct ieee80211_local *local = sdata->local; 810 struct beacon_data *old_beacon; 811 struct probe_resp *old_probe_resp; 812 struct cfg80211_chan_def chandef; 813 814 sdata_assert_lock(sdata); 815 816 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata); 817 if (!old_beacon) 818 return -ENOENT; 819 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata); 820 821 /* abort any running channel switch */ 822 mutex_lock(&local->mtx); 823 sdata->vif.csa_active = false; 824 if (sdata->csa_block_tx) { 825 ieee80211_wake_vif_queues(local, sdata, 826 IEEE80211_QUEUE_STOP_REASON_CSA); 827 sdata->csa_block_tx = false; 828 } 829 830 mutex_unlock(&local->mtx); 831 832 kfree(sdata->u.ap.next_beacon); 833 sdata->u.ap.next_beacon = NULL; 834 835 /* turn off carrier for this interface and dependent VLANs */ 836 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) 837 netif_carrier_off(vlan->dev); 838 netif_carrier_off(dev); 839 840 /* remove beacon and probe response */ 841 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL); 842 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL); 843 kfree_rcu(old_beacon, rcu_head); 844 if (old_probe_resp) 845 kfree_rcu(old_probe_resp, rcu_head); 846 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF; 847 848 __sta_info_flush(sdata, true); 849 ieee80211_free_keys(sdata, true); 850 851 sdata->vif.bss_conf.enable_beacon = false; 852 sdata->vif.bss_conf.ssid_len = 0; 853 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state); 854 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED); 855 856 if (sdata->wdev.cac_started) { 857 chandef = sdata->vif.bss_conf.chandef; 858 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work); 859 cfg80211_cac_event(sdata->dev, &chandef, 860 NL80211_RADAR_CAC_ABORTED, 861 GFP_KERNEL); 862 } 863 864 drv_stop_ap(sdata->local, sdata); 865 866 /* free all potentially still buffered bcast frames */ 867 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf); 868 skb_queue_purge(&sdata->u.ap.ps.bc_buf); 869 870 mutex_lock(&local->mtx); 871 ieee80211_vif_copy_chanctx_to_vlans(sdata, true); 872 ieee80211_vif_release_channel(sdata); 873 mutex_unlock(&local->mtx); 874 875 return 0; 876 } 877 878 /* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */ 879 struct iapp_layer2_update { 880 u8 da[ETH_ALEN]; /* broadcast */ 881 u8 sa[ETH_ALEN]; /* STA addr */ 882 __be16 len; /* 6 */ 883 u8 dsap; /* 0 */ 884 u8 ssap; /* 0 */ 885 u8 control; 886 u8 xid_info[3]; 887 } __packed; 888 889 static void ieee80211_send_layer2_update(struct sta_info *sta) 890 { 891 struct iapp_layer2_update *msg; 892 struct sk_buff *skb; 893 894 /* Send Level 2 Update Frame to update forwarding tables in layer 2 895 * bridge devices */ 896 897 skb = dev_alloc_skb(sizeof(*msg)); 898 if (!skb) 899 return; 900 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg)); 901 902 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID) 903 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */ 904 905 eth_broadcast_addr(msg->da); 906 memcpy(msg->sa, sta->sta.addr, ETH_ALEN); 907 msg->len = htons(6); 908 msg->dsap = 0; 909 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */ 910 msg->control = 0xaf; /* XID response lsb.1111F101. 911 * F=0 (no poll command; unsolicited frame) */ 912 msg->xid_info[0] = 0x81; /* XID format identifier */ 913 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */ 914 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */ 915 916 skb->dev = sta->sdata->dev; 917 skb->protocol = eth_type_trans(skb, sta->sdata->dev); 918 memset(skb->cb, 0, sizeof(skb->cb)); 919 netif_rx_ni(skb); 920 } 921 922 static int sta_apply_auth_flags(struct ieee80211_local *local, 923 struct sta_info *sta, 924 u32 mask, u32 set) 925 { 926 int ret; 927 928 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 929 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 930 !test_sta_flag(sta, WLAN_STA_AUTH)) { 931 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH); 932 if (ret) 933 return ret; 934 } 935 936 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) && 937 set & BIT(NL80211_STA_FLAG_ASSOCIATED) && 938 !test_sta_flag(sta, WLAN_STA_ASSOC)) { 939 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC); 940 if (ret) 941 return ret; 942 } 943 944 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 945 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) 946 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED); 947 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 948 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC); 949 else 950 ret = 0; 951 if (ret) 952 return ret; 953 } 954 955 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) && 956 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) && 957 test_sta_flag(sta, WLAN_STA_ASSOC)) { 958 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH); 959 if (ret) 960 return ret; 961 } 962 963 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) && 964 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) && 965 test_sta_flag(sta, WLAN_STA_AUTH)) { 966 ret = sta_info_move_state(sta, IEEE80211_STA_NONE); 967 if (ret) 968 return ret; 969 } 970 971 return 0; 972 } 973 974 static int sta_apply_parameters(struct ieee80211_local *local, 975 struct sta_info *sta, 976 struct station_parameters *params) 977 { 978 int ret = 0; 979 struct ieee80211_supported_band *sband; 980 struct ieee80211_sub_if_data *sdata = sta->sdata; 981 enum ieee80211_band band = ieee80211_get_sdata_band(sdata); 982 u32 mask, set; 983 984 sband = local->hw.wiphy->bands[band]; 985 986 mask = params->sta_flags_mask; 987 set = params->sta_flags_set; 988 989 if (ieee80211_vif_is_mesh(&sdata->vif)) { 990 /* 991 * In mesh mode, ASSOCIATED isn't part of the nl80211 992 * API but must follow AUTHENTICATED for driver state. 993 */ 994 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED)) 995 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED); 996 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) 997 set |= BIT(NL80211_STA_FLAG_ASSOCIATED); 998 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 999 /* 1000 * TDLS -- everything follows authorized, but 1001 * only becoming authorized is possible, not 1002 * going back 1003 */ 1004 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 1005 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) | 1006 BIT(NL80211_STA_FLAG_ASSOCIATED); 1007 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) | 1008 BIT(NL80211_STA_FLAG_ASSOCIATED); 1009 } 1010 } 1011 1012 /* auth flags will be set later for TDLS stations */ 1013 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1014 ret = sta_apply_auth_flags(local, sta, mask, set); 1015 if (ret) 1016 return ret; 1017 } 1018 1019 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) { 1020 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) 1021 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE); 1022 else 1023 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE); 1024 } 1025 1026 if (mask & BIT(NL80211_STA_FLAG_WME)) 1027 sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME); 1028 1029 if (mask & BIT(NL80211_STA_FLAG_MFP)) { 1030 if (set & BIT(NL80211_STA_FLAG_MFP)) 1031 set_sta_flag(sta, WLAN_STA_MFP); 1032 else 1033 clear_sta_flag(sta, WLAN_STA_MFP); 1034 } 1035 1036 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) { 1037 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER)) 1038 set_sta_flag(sta, WLAN_STA_TDLS_PEER); 1039 else 1040 clear_sta_flag(sta, WLAN_STA_TDLS_PEER); 1041 } 1042 1043 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) { 1044 sta->sta.uapsd_queues = params->uapsd_queues; 1045 sta->sta.max_sp = params->max_sp; 1046 } 1047 1048 /* 1049 * cfg80211 validates this (1-2007) and allows setting the AID 1050 * only when creating a new station entry 1051 */ 1052 if (params->aid) 1053 sta->sta.aid = params->aid; 1054 1055 /* 1056 * Some of the following updates would be racy if called on an 1057 * existing station, via ieee80211_change_station(). However, 1058 * all such changes are rejected by cfg80211 except for updates 1059 * changing the supported rates on an existing but not yet used 1060 * TDLS peer. 1061 */ 1062 1063 if (params->listen_interval >= 0) 1064 sta->listen_interval = params->listen_interval; 1065 1066 if (params->supported_rates) { 1067 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef, 1068 sband, params->supported_rates, 1069 params->supported_rates_len, 1070 &sta->sta.supp_rates[band]); 1071 } 1072 1073 if (params->ht_capa) 1074 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband, 1075 params->ht_capa, sta); 1076 1077 if (params->vht_capa) 1078 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband, 1079 params->vht_capa, sta); 1080 1081 if (params->opmode_notif_used) { 1082 /* returned value is only needed for rc update, but the 1083 * rc isn't initialized here yet, so ignore it 1084 */ 1085 __ieee80211_vht_handle_opmode(sdata, sta, 1086 params->opmode_notif, 1087 band, false); 1088 } 1089 1090 if (ieee80211_vif_is_mesh(&sdata->vif)) { 1091 #ifdef CONFIG_MAC80211_MESH 1092 u32 changed = 0; 1093 1094 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) { 1095 switch (params->plink_state) { 1096 case NL80211_PLINK_ESTAB: 1097 if (sta->plink_state != NL80211_PLINK_ESTAB) 1098 changed = mesh_plink_inc_estab_count( 1099 sdata); 1100 sta->plink_state = params->plink_state; 1101 1102 ieee80211_mps_sta_status_update(sta); 1103 changed |= ieee80211_mps_set_sta_local_pm(sta, 1104 sdata->u.mesh.mshcfg.power_mode); 1105 break; 1106 case NL80211_PLINK_LISTEN: 1107 case NL80211_PLINK_BLOCKED: 1108 case NL80211_PLINK_OPN_SNT: 1109 case NL80211_PLINK_OPN_RCVD: 1110 case NL80211_PLINK_CNF_RCVD: 1111 case NL80211_PLINK_HOLDING: 1112 if (sta->plink_state == NL80211_PLINK_ESTAB) 1113 changed = mesh_plink_dec_estab_count( 1114 sdata); 1115 sta->plink_state = params->plink_state; 1116 1117 ieee80211_mps_sta_status_update(sta); 1118 changed |= ieee80211_mps_set_sta_local_pm(sta, 1119 NL80211_MESH_POWER_UNKNOWN); 1120 break; 1121 default: 1122 /* nothing */ 1123 break; 1124 } 1125 } 1126 1127 switch (params->plink_action) { 1128 case NL80211_PLINK_ACTION_NO_ACTION: 1129 /* nothing */ 1130 break; 1131 case NL80211_PLINK_ACTION_OPEN: 1132 changed |= mesh_plink_open(sta); 1133 break; 1134 case NL80211_PLINK_ACTION_BLOCK: 1135 changed |= mesh_plink_block(sta); 1136 break; 1137 } 1138 1139 if (params->local_pm) 1140 changed |= 1141 ieee80211_mps_set_sta_local_pm(sta, 1142 params->local_pm); 1143 ieee80211_mbss_info_change_notify(sdata, changed); 1144 #endif 1145 } 1146 1147 /* set the STA state after all sta info from usermode has been set */ 1148 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1149 ret = sta_apply_auth_flags(local, sta, mask, set); 1150 if (ret) 1151 return ret; 1152 } 1153 1154 return 0; 1155 } 1156 1157 static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev, 1158 const u8 *mac, 1159 struct station_parameters *params) 1160 { 1161 struct ieee80211_local *local = wiphy_priv(wiphy); 1162 struct sta_info *sta; 1163 struct ieee80211_sub_if_data *sdata; 1164 int err; 1165 int layer2_update; 1166 1167 if (params->vlan) { 1168 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan); 1169 1170 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 1171 sdata->vif.type != NL80211_IFTYPE_AP) 1172 return -EINVAL; 1173 } else 1174 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1175 1176 if (ether_addr_equal(mac, sdata->vif.addr)) 1177 return -EINVAL; 1178 1179 if (is_multicast_ether_addr(mac)) 1180 return -EINVAL; 1181 1182 sta = sta_info_alloc(sdata, mac, GFP_KERNEL); 1183 if (!sta) 1184 return -ENOMEM; 1185 1186 /* 1187 * defaults -- if userspace wants something else we'll 1188 * change it accordingly in sta_apply_parameters() 1189 */ 1190 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) { 1191 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH); 1192 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC); 1193 } else { 1194 sta->sta.tdls = true; 1195 } 1196 1197 err = sta_apply_parameters(local, sta, params); 1198 if (err) { 1199 sta_info_free(local, sta); 1200 return err; 1201 } 1202 1203 /* 1204 * for TDLS, rate control should be initialized only when 1205 * rates are known and station is marked authorized 1206 */ 1207 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) 1208 rate_control_rate_init(sta); 1209 1210 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 1211 sdata->vif.type == NL80211_IFTYPE_AP; 1212 1213 err = sta_info_insert_rcu(sta); 1214 if (err) { 1215 rcu_read_unlock(); 1216 return err; 1217 } 1218 1219 if (layer2_update) 1220 ieee80211_send_layer2_update(sta); 1221 1222 rcu_read_unlock(); 1223 1224 return 0; 1225 } 1226 1227 static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev, 1228 const u8 *mac) 1229 { 1230 struct ieee80211_sub_if_data *sdata; 1231 1232 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1233 1234 if (mac) 1235 return sta_info_destroy_addr_bss(sdata, mac); 1236 1237 sta_info_flush(sdata); 1238 return 0; 1239 } 1240 1241 static int ieee80211_change_station(struct wiphy *wiphy, 1242 struct net_device *dev, const u8 *mac, 1243 struct station_parameters *params) 1244 { 1245 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1246 struct ieee80211_local *local = wiphy_priv(wiphy); 1247 struct sta_info *sta; 1248 struct ieee80211_sub_if_data *vlansdata; 1249 enum cfg80211_station_type statype; 1250 int err; 1251 1252 mutex_lock(&local->sta_mtx); 1253 1254 sta = sta_info_get_bss(sdata, mac); 1255 if (!sta) { 1256 err = -ENOENT; 1257 goto out_err; 1258 } 1259 1260 switch (sdata->vif.type) { 1261 case NL80211_IFTYPE_MESH_POINT: 1262 if (sdata->u.mesh.user_mpm) 1263 statype = CFG80211_STA_MESH_PEER_USER; 1264 else 1265 statype = CFG80211_STA_MESH_PEER_KERNEL; 1266 break; 1267 case NL80211_IFTYPE_ADHOC: 1268 statype = CFG80211_STA_IBSS; 1269 break; 1270 case NL80211_IFTYPE_STATION: 1271 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) { 1272 statype = CFG80211_STA_AP_STA; 1273 break; 1274 } 1275 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 1276 statype = CFG80211_STA_TDLS_PEER_ACTIVE; 1277 else 1278 statype = CFG80211_STA_TDLS_PEER_SETUP; 1279 break; 1280 case NL80211_IFTYPE_AP: 1281 case NL80211_IFTYPE_AP_VLAN: 1282 statype = CFG80211_STA_AP_CLIENT; 1283 break; 1284 default: 1285 err = -EOPNOTSUPP; 1286 goto out_err; 1287 } 1288 1289 err = cfg80211_check_station_change(wiphy, params, statype); 1290 if (err) 1291 goto out_err; 1292 1293 if (params->vlan && params->vlan != sta->sdata->dev) { 1294 bool prev_4addr = false; 1295 bool new_4addr = false; 1296 1297 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan); 1298 1299 if (params->vlan->ieee80211_ptr->use_4addr) { 1300 if (vlansdata->u.vlan.sta) { 1301 err = -EBUSY; 1302 goto out_err; 1303 } 1304 1305 rcu_assign_pointer(vlansdata->u.vlan.sta, sta); 1306 new_4addr = true; 1307 } 1308 1309 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN && 1310 sta->sdata->u.vlan.sta) { 1311 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL); 1312 prev_4addr = true; 1313 } 1314 1315 sta->sdata = vlansdata; 1316 1317 if (sta->sta_state == IEEE80211_STA_AUTHORIZED && 1318 prev_4addr != new_4addr) { 1319 if (new_4addr) 1320 atomic_dec(&sta->sdata->bss->num_mcast_sta); 1321 else 1322 atomic_inc(&sta->sdata->bss->num_mcast_sta); 1323 } 1324 1325 ieee80211_send_layer2_update(sta); 1326 } 1327 1328 err = sta_apply_parameters(local, sta, params); 1329 if (err) 1330 goto out_err; 1331 1332 /* When peer becomes authorized, init rate control as well */ 1333 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) && 1334 test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 1335 rate_control_rate_init(sta); 1336 1337 mutex_unlock(&local->sta_mtx); 1338 1339 if ((sdata->vif.type == NL80211_IFTYPE_AP || 1340 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) && 1341 sta->known_smps_mode != sta->sdata->bss->req_smps && 1342 test_sta_flag(sta, WLAN_STA_AUTHORIZED) && 1343 sta_info_tx_streams(sta) != 1) { 1344 ht_dbg(sta->sdata, 1345 "%pM just authorized and MIMO capable - update SMPS\n", 1346 sta->sta.addr); 1347 ieee80211_send_smps_action(sta->sdata, 1348 sta->sdata->bss->req_smps, 1349 sta->sta.addr, 1350 sta->sdata->vif.bss_conf.bssid); 1351 } 1352 1353 if (sdata->vif.type == NL80211_IFTYPE_STATION && 1354 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) { 1355 ieee80211_recalc_ps(local, -1); 1356 ieee80211_recalc_ps_vif(sdata); 1357 } 1358 1359 return 0; 1360 out_err: 1361 mutex_unlock(&local->sta_mtx); 1362 return err; 1363 } 1364 1365 #ifdef CONFIG_MAC80211_MESH 1366 static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev, 1367 const u8 *dst, const u8 *next_hop) 1368 { 1369 struct ieee80211_sub_if_data *sdata; 1370 struct mesh_path *mpath; 1371 struct sta_info *sta; 1372 1373 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1374 1375 rcu_read_lock(); 1376 sta = sta_info_get(sdata, next_hop); 1377 if (!sta) { 1378 rcu_read_unlock(); 1379 return -ENOENT; 1380 } 1381 1382 mpath = mesh_path_add(sdata, dst); 1383 if (IS_ERR(mpath)) { 1384 rcu_read_unlock(); 1385 return PTR_ERR(mpath); 1386 } 1387 1388 mesh_path_fix_nexthop(mpath, sta); 1389 1390 rcu_read_unlock(); 1391 return 0; 1392 } 1393 1394 static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev, 1395 const u8 *dst) 1396 { 1397 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1398 1399 if (dst) 1400 return mesh_path_del(sdata, dst); 1401 1402 mesh_path_flush_by_iface(sdata); 1403 return 0; 1404 } 1405 1406 static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev, 1407 const u8 *dst, const u8 *next_hop) 1408 { 1409 struct ieee80211_sub_if_data *sdata; 1410 struct mesh_path *mpath; 1411 struct sta_info *sta; 1412 1413 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1414 1415 rcu_read_lock(); 1416 1417 sta = sta_info_get(sdata, next_hop); 1418 if (!sta) { 1419 rcu_read_unlock(); 1420 return -ENOENT; 1421 } 1422 1423 mpath = mesh_path_lookup(sdata, dst); 1424 if (!mpath) { 1425 rcu_read_unlock(); 1426 return -ENOENT; 1427 } 1428 1429 mesh_path_fix_nexthop(mpath, sta); 1430 1431 rcu_read_unlock(); 1432 return 0; 1433 } 1434 1435 static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop, 1436 struct mpath_info *pinfo) 1437 { 1438 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop); 1439 1440 if (next_hop_sta) 1441 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN); 1442 else 1443 memset(next_hop, 0, ETH_ALEN); 1444 1445 memset(pinfo, 0, sizeof(*pinfo)); 1446 1447 pinfo->generation = mesh_paths_generation; 1448 1449 pinfo->filled = MPATH_INFO_FRAME_QLEN | 1450 MPATH_INFO_SN | 1451 MPATH_INFO_METRIC | 1452 MPATH_INFO_EXPTIME | 1453 MPATH_INFO_DISCOVERY_TIMEOUT | 1454 MPATH_INFO_DISCOVERY_RETRIES | 1455 MPATH_INFO_FLAGS; 1456 1457 pinfo->frame_qlen = mpath->frame_queue.qlen; 1458 pinfo->sn = mpath->sn; 1459 pinfo->metric = mpath->metric; 1460 if (time_before(jiffies, mpath->exp_time)) 1461 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies); 1462 pinfo->discovery_timeout = 1463 jiffies_to_msecs(mpath->discovery_timeout); 1464 pinfo->discovery_retries = mpath->discovery_retries; 1465 if (mpath->flags & MESH_PATH_ACTIVE) 1466 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE; 1467 if (mpath->flags & MESH_PATH_RESOLVING) 1468 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING; 1469 if (mpath->flags & MESH_PATH_SN_VALID) 1470 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID; 1471 if (mpath->flags & MESH_PATH_FIXED) 1472 pinfo->flags |= NL80211_MPATH_FLAG_FIXED; 1473 if (mpath->flags & MESH_PATH_RESOLVED) 1474 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED; 1475 } 1476 1477 static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev, 1478 u8 *dst, u8 *next_hop, struct mpath_info *pinfo) 1479 1480 { 1481 struct ieee80211_sub_if_data *sdata; 1482 struct mesh_path *mpath; 1483 1484 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1485 1486 rcu_read_lock(); 1487 mpath = mesh_path_lookup(sdata, dst); 1488 if (!mpath) { 1489 rcu_read_unlock(); 1490 return -ENOENT; 1491 } 1492 memcpy(dst, mpath->dst, ETH_ALEN); 1493 mpath_set_pinfo(mpath, next_hop, pinfo); 1494 rcu_read_unlock(); 1495 return 0; 1496 } 1497 1498 static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev, 1499 int idx, u8 *dst, u8 *next_hop, 1500 struct mpath_info *pinfo) 1501 { 1502 struct ieee80211_sub_if_data *sdata; 1503 struct mesh_path *mpath; 1504 1505 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1506 1507 rcu_read_lock(); 1508 mpath = mesh_path_lookup_by_idx(sdata, idx); 1509 if (!mpath) { 1510 rcu_read_unlock(); 1511 return -ENOENT; 1512 } 1513 memcpy(dst, mpath->dst, ETH_ALEN); 1514 mpath_set_pinfo(mpath, next_hop, pinfo); 1515 rcu_read_unlock(); 1516 return 0; 1517 } 1518 1519 static int ieee80211_get_mesh_config(struct wiphy *wiphy, 1520 struct net_device *dev, 1521 struct mesh_config *conf) 1522 { 1523 struct ieee80211_sub_if_data *sdata; 1524 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1525 1526 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config)); 1527 return 0; 1528 } 1529 1530 static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask) 1531 { 1532 return (mask >> (parm-1)) & 0x1; 1533 } 1534 1535 static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh, 1536 const struct mesh_setup *setup) 1537 { 1538 u8 *new_ie; 1539 const u8 *old_ie; 1540 struct ieee80211_sub_if_data *sdata = container_of(ifmsh, 1541 struct ieee80211_sub_if_data, u.mesh); 1542 1543 /* allocate information elements */ 1544 new_ie = NULL; 1545 old_ie = ifmsh->ie; 1546 1547 if (setup->ie_len) { 1548 new_ie = kmemdup(setup->ie, setup->ie_len, 1549 GFP_KERNEL); 1550 if (!new_ie) 1551 return -ENOMEM; 1552 } 1553 ifmsh->ie_len = setup->ie_len; 1554 ifmsh->ie = new_ie; 1555 kfree(old_ie); 1556 1557 /* now copy the rest of the setup parameters */ 1558 ifmsh->mesh_id_len = setup->mesh_id_len; 1559 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len); 1560 ifmsh->mesh_sp_id = setup->sync_method; 1561 ifmsh->mesh_pp_id = setup->path_sel_proto; 1562 ifmsh->mesh_pm_id = setup->path_metric; 1563 ifmsh->user_mpm = setup->user_mpm; 1564 ifmsh->mesh_auth_id = setup->auth_id; 1565 ifmsh->security = IEEE80211_MESH_SEC_NONE; 1566 if (setup->is_authenticated) 1567 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED; 1568 if (setup->is_secure) 1569 ifmsh->security |= IEEE80211_MESH_SEC_SECURED; 1570 1571 /* mcast rate setting in Mesh Node */ 1572 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate, 1573 sizeof(setup->mcast_rate)); 1574 sdata->vif.bss_conf.basic_rates = setup->basic_rates; 1575 1576 sdata->vif.bss_conf.beacon_int = setup->beacon_interval; 1577 sdata->vif.bss_conf.dtim_period = setup->dtim_period; 1578 1579 return 0; 1580 } 1581 1582 static int ieee80211_update_mesh_config(struct wiphy *wiphy, 1583 struct net_device *dev, u32 mask, 1584 const struct mesh_config *nconf) 1585 { 1586 struct mesh_config *conf; 1587 struct ieee80211_sub_if_data *sdata; 1588 struct ieee80211_if_mesh *ifmsh; 1589 1590 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1591 ifmsh = &sdata->u.mesh; 1592 1593 /* Set the config options which we are interested in setting */ 1594 conf = &(sdata->u.mesh.mshcfg); 1595 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask)) 1596 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout; 1597 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask)) 1598 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout; 1599 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask)) 1600 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout; 1601 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask)) 1602 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks; 1603 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask)) 1604 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries; 1605 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask)) 1606 conf->dot11MeshTTL = nconf->dot11MeshTTL; 1607 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask)) 1608 conf->element_ttl = nconf->element_ttl; 1609 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) { 1610 if (ifmsh->user_mpm) 1611 return -EBUSY; 1612 conf->auto_open_plinks = nconf->auto_open_plinks; 1613 } 1614 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask)) 1615 conf->dot11MeshNbrOffsetMaxNeighbor = 1616 nconf->dot11MeshNbrOffsetMaxNeighbor; 1617 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask)) 1618 conf->dot11MeshHWMPmaxPREQretries = 1619 nconf->dot11MeshHWMPmaxPREQretries; 1620 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask)) 1621 conf->path_refresh_time = nconf->path_refresh_time; 1622 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask)) 1623 conf->min_discovery_timeout = nconf->min_discovery_timeout; 1624 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask)) 1625 conf->dot11MeshHWMPactivePathTimeout = 1626 nconf->dot11MeshHWMPactivePathTimeout; 1627 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask)) 1628 conf->dot11MeshHWMPpreqMinInterval = 1629 nconf->dot11MeshHWMPpreqMinInterval; 1630 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask)) 1631 conf->dot11MeshHWMPperrMinInterval = 1632 nconf->dot11MeshHWMPperrMinInterval; 1633 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME, 1634 mask)) 1635 conf->dot11MeshHWMPnetDiameterTraversalTime = 1636 nconf->dot11MeshHWMPnetDiameterTraversalTime; 1637 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) { 1638 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode; 1639 ieee80211_mesh_root_setup(ifmsh); 1640 } 1641 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) { 1642 /* our current gate announcement implementation rides on root 1643 * announcements, so require this ifmsh to also be a root node 1644 * */ 1645 if (nconf->dot11MeshGateAnnouncementProtocol && 1646 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) { 1647 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN; 1648 ieee80211_mesh_root_setup(ifmsh); 1649 } 1650 conf->dot11MeshGateAnnouncementProtocol = 1651 nconf->dot11MeshGateAnnouncementProtocol; 1652 } 1653 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask)) 1654 conf->dot11MeshHWMPRannInterval = 1655 nconf->dot11MeshHWMPRannInterval; 1656 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask)) 1657 conf->dot11MeshForwarding = nconf->dot11MeshForwarding; 1658 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) { 1659 /* our RSSI threshold implementation is supported only for 1660 * devices that report signal in dBm. 1661 */ 1662 if (!(sdata->local->hw.flags & IEEE80211_HW_SIGNAL_DBM)) 1663 return -ENOTSUPP; 1664 conf->rssi_threshold = nconf->rssi_threshold; 1665 } 1666 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) { 1667 conf->ht_opmode = nconf->ht_opmode; 1668 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode; 1669 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT); 1670 } 1671 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask)) 1672 conf->dot11MeshHWMPactivePathToRootTimeout = 1673 nconf->dot11MeshHWMPactivePathToRootTimeout; 1674 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask)) 1675 conf->dot11MeshHWMProotInterval = 1676 nconf->dot11MeshHWMProotInterval; 1677 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask)) 1678 conf->dot11MeshHWMPconfirmationInterval = 1679 nconf->dot11MeshHWMPconfirmationInterval; 1680 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) { 1681 conf->power_mode = nconf->power_mode; 1682 ieee80211_mps_local_status_update(sdata); 1683 } 1684 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask)) 1685 conf->dot11MeshAwakeWindowDuration = 1686 nconf->dot11MeshAwakeWindowDuration; 1687 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask)) 1688 conf->plink_timeout = nconf->plink_timeout; 1689 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON); 1690 return 0; 1691 } 1692 1693 static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev, 1694 const struct mesh_config *conf, 1695 const struct mesh_setup *setup) 1696 { 1697 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1698 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 1699 int err; 1700 1701 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config)); 1702 err = copy_mesh_setup(ifmsh, setup); 1703 if (err) 1704 return err; 1705 1706 /* can mesh use other SMPS modes? */ 1707 sdata->smps_mode = IEEE80211_SMPS_OFF; 1708 sdata->needed_rx_chains = sdata->local->rx_chains; 1709 1710 mutex_lock(&sdata->local->mtx); 1711 err = ieee80211_vif_use_channel(sdata, &setup->chandef, 1712 IEEE80211_CHANCTX_SHARED); 1713 mutex_unlock(&sdata->local->mtx); 1714 if (err) 1715 return err; 1716 1717 return ieee80211_start_mesh(sdata); 1718 } 1719 1720 static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev) 1721 { 1722 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1723 1724 ieee80211_stop_mesh(sdata); 1725 mutex_lock(&sdata->local->mtx); 1726 ieee80211_vif_release_channel(sdata); 1727 mutex_unlock(&sdata->local->mtx); 1728 1729 return 0; 1730 } 1731 #endif 1732 1733 static int ieee80211_change_bss(struct wiphy *wiphy, 1734 struct net_device *dev, 1735 struct bss_parameters *params) 1736 { 1737 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1738 enum ieee80211_band band; 1739 u32 changed = 0; 1740 1741 if (!sdata_dereference(sdata->u.ap.beacon, sdata)) 1742 return -ENOENT; 1743 1744 band = ieee80211_get_sdata_band(sdata); 1745 1746 if (params->use_cts_prot >= 0) { 1747 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot; 1748 changed |= BSS_CHANGED_ERP_CTS_PROT; 1749 } 1750 if (params->use_short_preamble >= 0) { 1751 sdata->vif.bss_conf.use_short_preamble = 1752 params->use_short_preamble; 1753 changed |= BSS_CHANGED_ERP_PREAMBLE; 1754 } 1755 1756 if (!sdata->vif.bss_conf.use_short_slot && 1757 band == IEEE80211_BAND_5GHZ) { 1758 sdata->vif.bss_conf.use_short_slot = true; 1759 changed |= BSS_CHANGED_ERP_SLOT; 1760 } 1761 1762 if (params->use_short_slot_time >= 0) { 1763 sdata->vif.bss_conf.use_short_slot = 1764 params->use_short_slot_time; 1765 changed |= BSS_CHANGED_ERP_SLOT; 1766 } 1767 1768 if (params->basic_rates) { 1769 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef, 1770 wiphy->bands[band], 1771 params->basic_rates, 1772 params->basic_rates_len, 1773 &sdata->vif.bss_conf.basic_rates); 1774 changed |= BSS_CHANGED_BASIC_RATES; 1775 } 1776 1777 if (params->ap_isolate >= 0) { 1778 if (params->ap_isolate) 1779 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS; 1780 else 1781 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS; 1782 } 1783 1784 if (params->ht_opmode >= 0) { 1785 sdata->vif.bss_conf.ht_operation_mode = 1786 (u16) params->ht_opmode; 1787 changed |= BSS_CHANGED_HT; 1788 } 1789 1790 if (params->p2p_ctwindow >= 0) { 1791 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &= 1792 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 1793 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 1794 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK; 1795 changed |= BSS_CHANGED_P2P_PS; 1796 } 1797 1798 if (params->p2p_opp_ps > 0) { 1799 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |= 1800 IEEE80211_P2P_OPPPS_ENABLE_BIT; 1801 changed |= BSS_CHANGED_P2P_PS; 1802 } else if (params->p2p_opp_ps == 0) { 1803 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &= 1804 ~IEEE80211_P2P_OPPPS_ENABLE_BIT; 1805 changed |= BSS_CHANGED_P2P_PS; 1806 } 1807 1808 ieee80211_bss_info_change_notify(sdata, changed); 1809 1810 return 0; 1811 } 1812 1813 static int ieee80211_set_txq_params(struct wiphy *wiphy, 1814 struct net_device *dev, 1815 struct ieee80211_txq_params *params) 1816 { 1817 struct ieee80211_local *local = wiphy_priv(wiphy); 1818 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1819 struct ieee80211_tx_queue_params p; 1820 1821 if (!local->ops->conf_tx) 1822 return -EOPNOTSUPP; 1823 1824 if (local->hw.queues < IEEE80211_NUM_ACS) 1825 return -EOPNOTSUPP; 1826 1827 memset(&p, 0, sizeof(p)); 1828 p.aifs = params->aifs; 1829 p.cw_max = params->cwmax; 1830 p.cw_min = params->cwmin; 1831 p.txop = params->txop; 1832 1833 /* 1834 * Setting tx queue params disables u-apsd because it's only 1835 * called in master mode. 1836 */ 1837 p.uapsd = false; 1838 1839 sdata->tx_conf[params->ac] = p; 1840 if (drv_conf_tx(local, sdata, params->ac, &p)) { 1841 wiphy_debug(local->hw.wiphy, 1842 "failed to set TX queue parameters for AC %d\n", 1843 params->ac); 1844 return -EINVAL; 1845 } 1846 1847 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS); 1848 1849 return 0; 1850 } 1851 1852 #ifdef CONFIG_PM 1853 static int ieee80211_suspend(struct wiphy *wiphy, 1854 struct cfg80211_wowlan *wowlan) 1855 { 1856 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan); 1857 } 1858 1859 static int ieee80211_resume(struct wiphy *wiphy) 1860 { 1861 return __ieee80211_resume(wiphy_priv(wiphy)); 1862 } 1863 #else 1864 #define ieee80211_suspend NULL 1865 #define ieee80211_resume NULL 1866 #endif 1867 1868 static int ieee80211_scan(struct wiphy *wiphy, 1869 struct cfg80211_scan_request *req) 1870 { 1871 struct ieee80211_sub_if_data *sdata; 1872 1873 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev); 1874 1875 switch (ieee80211_vif_type_p2p(&sdata->vif)) { 1876 case NL80211_IFTYPE_STATION: 1877 case NL80211_IFTYPE_ADHOC: 1878 case NL80211_IFTYPE_MESH_POINT: 1879 case NL80211_IFTYPE_P2P_CLIENT: 1880 case NL80211_IFTYPE_P2P_DEVICE: 1881 break; 1882 case NL80211_IFTYPE_P2P_GO: 1883 if (sdata->local->ops->hw_scan) 1884 break; 1885 /* 1886 * FIXME: implement NoA while scanning in software, 1887 * for now fall through to allow scanning only when 1888 * beaconing hasn't been configured yet 1889 */ 1890 case NL80211_IFTYPE_AP: 1891 /* 1892 * If the scan has been forced (and the driver supports 1893 * forcing), don't care about being beaconing already. 1894 * This will create problems to the attached stations (e.g. all 1895 * the frames sent while scanning on other channel will be 1896 * lost) 1897 */ 1898 if (sdata->u.ap.beacon && 1899 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) || 1900 !(req->flags & NL80211_SCAN_FLAG_AP))) 1901 return -EOPNOTSUPP; 1902 break; 1903 default: 1904 return -EOPNOTSUPP; 1905 } 1906 1907 return ieee80211_request_scan(sdata, req); 1908 } 1909 1910 static int 1911 ieee80211_sched_scan_start(struct wiphy *wiphy, 1912 struct net_device *dev, 1913 struct cfg80211_sched_scan_request *req) 1914 { 1915 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1916 1917 if (!sdata->local->ops->sched_scan_start) 1918 return -EOPNOTSUPP; 1919 1920 return ieee80211_request_sched_scan_start(sdata, req); 1921 } 1922 1923 static int 1924 ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev) 1925 { 1926 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1927 1928 if (!sdata->local->ops->sched_scan_stop) 1929 return -EOPNOTSUPP; 1930 1931 return ieee80211_request_sched_scan_stop(sdata); 1932 } 1933 1934 static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev, 1935 struct cfg80211_auth_request *req) 1936 { 1937 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req); 1938 } 1939 1940 static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev, 1941 struct cfg80211_assoc_request *req) 1942 { 1943 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req); 1944 } 1945 1946 static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev, 1947 struct cfg80211_deauth_request *req) 1948 { 1949 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req); 1950 } 1951 1952 static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev, 1953 struct cfg80211_disassoc_request *req) 1954 { 1955 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req); 1956 } 1957 1958 static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev, 1959 struct cfg80211_ibss_params *params) 1960 { 1961 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params); 1962 } 1963 1964 static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev) 1965 { 1966 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev)); 1967 } 1968 1969 static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev, 1970 int rate[IEEE80211_NUM_BANDS]) 1971 { 1972 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1973 1974 memcpy(sdata->vif.bss_conf.mcast_rate, rate, 1975 sizeof(int) * IEEE80211_NUM_BANDS); 1976 1977 return 0; 1978 } 1979 1980 static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed) 1981 { 1982 struct ieee80211_local *local = wiphy_priv(wiphy); 1983 int err; 1984 1985 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) { 1986 err = drv_set_frag_threshold(local, wiphy->frag_threshold); 1987 1988 if (err) 1989 return err; 1990 } 1991 1992 if ((changed & WIPHY_PARAM_COVERAGE_CLASS) || 1993 (changed & WIPHY_PARAM_DYN_ACK)) { 1994 s16 coverage_class; 1995 1996 coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ? 1997 wiphy->coverage_class : -1; 1998 err = drv_set_coverage_class(local, coverage_class); 1999 2000 if (err) 2001 return err; 2002 } 2003 2004 if (changed & WIPHY_PARAM_RTS_THRESHOLD) { 2005 err = drv_set_rts_threshold(local, wiphy->rts_threshold); 2006 2007 if (err) 2008 return err; 2009 } 2010 2011 if (changed & WIPHY_PARAM_RETRY_SHORT) { 2012 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY) 2013 return -EINVAL; 2014 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short; 2015 } 2016 if (changed & WIPHY_PARAM_RETRY_LONG) { 2017 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY) 2018 return -EINVAL; 2019 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long; 2020 } 2021 if (changed & 2022 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG)) 2023 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS); 2024 2025 return 0; 2026 } 2027 2028 static int ieee80211_set_tx_power(struct wiphy *wiphy, 2029 struct wireless_dev *wdev, 2030 enum nl80211_tx_power_setting type, int mbm) 2031 { 2032 struct ieee80211_local *local = wiphy_priv(wiphy); 2033 struct ieee80211_sub_if_data *sdata; 2034 2035 if (wdev) { 2036 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2037 2038 switch (type) { 2039 case NL80211_TX_POWER_AUTOMATIC: 2040 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL; 2041 break; 2042 case NL80211_TX_POWER_LIMITED: 2043 case NL80211_TX_POWER_FIXED: 2044 if (mbm < 0 || (mbm % 100)) 2045 return -EOPNOTSUPP; 2046 sdata->user_power_level = MBM_TO_DBM(mbm); 2047 break; 2048 } 2049 2050 ieee80211_recalc_txpower(sdata); 2051 2052 return 0; 2053 } 2054 2055 switch (type) { 2056 case NL80211_TX_POWER_AUTOMATIC: 2057 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL; 2058 break; 2059 case NL80211_TX_POWER_LIMITED: 2060 case NL80211_TX_POWER_FIXED: 2061 if (mbm < 0 || (mbm % 100)) 2062 return -EOPNOTSUPP; 2063 local->user_power_level = MBM_TO_DBM(mbm); 2064 break; 2065 } 2066 2067 mutex_lock(&local->iflist_mtx); 2068 list_for_each_entry(sdata, &local->interfaces, list) 2069 sdata->user_power_level = local->user_power_level; 2070 list_for_each_entry(sdata, &local->interfaces, list) 2071 ieee80211_recalc_txpower(sdata); 2072 mutex_unlock(&local->iflist_mtx); 2073 2074 return 0; 2075 } 2076 2077 static int ieee80211_get_tx_power(struct wiphy *wiphy, 2078 struct wireless_dev *wdev, 2079 int *dbm) 2080 { 2081 struct ieee80211_local *local = wiphy_priv(wiphy); 2082 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2083 2084 if (!local->use_chanctx) 2085 *dbm = local->hw.conf.power_level; 2086 else 2087 *dbm = sdata->vif.bss_conf.txpower; 2088 2089 return 0; 2090 } 2091 2092 static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev, 2093 const u8 *addr) 2094 { 2095 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2096 2097 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN); 2098 2099 return 0; 2100 } 2101 2102 static void ieee80211_rfkill_poll(struct wiphy *wiphy) 2103 { 2104 struct ieee80211_local *local = wiphy_priv(wiphy); 2105 2106 drv_rfkill_poll(local); 2107 } 2108 2109 #ifdef CONFIG_NL80211_TESTMODE 2110 static int ieee80211_testmode_cmd(struct wiphy *wiphy, 2111 struct wireless_dev *wdev, 2112 void *data, int len) 2113 { 2114 struct ieee80211_local *local = wiphy_priv(wiphy); 2115 struct ieee80211_vif *vif = NULL; 2116 2117 if (!local->ops->testmode_cmd) 2118 return -EOPNOTSUPP; 2119 2120 if (wdev) { 2121 struct ieee80211_sub_if_data *sdata; 2122 2123 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2124 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER) 2125 vif = &sdata->vif; 2126 } 2127 2128 return local->ops->testmode_cmd(&local->hw, vif, data, len); 2129 } 2130 2131 static int ieee80211_testmode_dump(struct wiphy *wiphy, 2132 struct sk_buff *skb, 2133 struct netlink_callback *cb, 2134 void *data, int len) 2135 { 2136 struct ieee80211_local *local = wiphy_priv(wiphy); 2137 2138 if (!local->ops->testmode_dump) 2139 return -EOPNOTSUPP; 2140 2141 return local->ops->testmode_dump(&local->hw, skb, cb, data, len); 2142 } 2143 #endif 2144 2145 int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata, 2146 enum ieee80211_smps_mode smps_mode) 2147 { 2148 struct sta_info *sta; 2149 enum ieee80211_smps_mode old_req; 2150 int i; 2151 2152 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP)) 2153 return -EINVAL; 2154 2155 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT) 2156 return 0; 2157 2158 old_req = sdata->u.ap.req_smps; 2159 sdata->u.ap.req_smps = smps_mode; 2160 2161 /* AUTOMATIC doesn't mean much for AP - don't allow it */ 2162 if (old_req == smps_mode || 2163 smps_mode == IEEE80211_SMPS_AUTOMATIC) 2164 return 0; 2165 2166 /* If no associated stations, there's no need to do anything */ 2167 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) { 2168 sdata->smps_mode = smps_mode; 2169 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps); 2170 return 0; 2171 } 2172 2173 ht_dbg(sdata, 2174 "SMSP %d requested in AP mode, sending Action frame to %d stations\n", 2175 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta)); 2176 2177 mutex_lock(&sdata->local->sta_mtx); 2178 for (i = 0; i < STA_HASH_SIZE; i++) { 2179 for (sta = rcu_dereference_protected(sdata->local->sta_hash[i], 2180 lockdep_is_held(&sdata->local->sta_mtx)); 2181 sta; 2182 sta = rcu_dereference_protected(sta->hnext, 2183 lockdep_is_held(&sdata->local->sta_mtx))) { 2184 /* 2185 * Only stations associated to our AP and 2186 * associated VLANs 2187 */ 2188 if (sta->sdata->bss != &sdata->u.ap) 2189 continue; 2190 2191 /* This station doesn't support MIMO - skip it */ 2192 if (sta_info_tx_streams(sta) == 1) 2193 continue; 2194 2195 /* 2196 * Don't wake up a STA just to send the action frame 2197 * unless we are getting more restrictive. 2198 */ 2199 if (test_sta_flag(sta, WLAN_STA_PS_STA) && 2200 !ieee80211_smps_is_restrictive(sta->known_smps_mode, 2201 smps_mode)) { 2202 ht_dbg(sdata, 2203 "Won't send SMPS to sleeping STA %pM\n", 2204 sta->sta.addr); 2205 continue; 2206 } 2207 2208 /* 2209 * If the STA is not authorized, wait until it gets 2210 * authorized and the action frame will be sent then. 2211 */ 2212 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 2213 continue; 2214 2215 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr); 2216 ieee80211_send_smps_action(sdata, smps_mode, 2217 sta->sta.addr, 2218 sdata->vif.bss_conf.bssid); 2219 } 2220 } 2221 mutex_unlock(&sdata->local->sta_mtx); 2222 2223 sdata->smps_mode = smps_mode; 2224 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps); 2225 2226 return 0; 2227 } 2228 2229 int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata, 2230 enum ieee80211_smps_mode smps_mode) 2231 { 2232 const u8 *ap; 2233 enum ieee80211_smps_mode old_req; 2234 int err; 2235 2236 lockdep_assert_held(&sdata->wdev.mtx); 2237 2238 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) 2239 return -EINVAL; 2240 2241 old_req = sdata->u.mgd.req_smps; 2242 sdata->u.mgd.req_smps = smps_mode; 2243 2244 if (old_req == smps_mode && 2245 smps_mode != IEEE80211_SMPS_AUTOMATIC) 2246 return 0; 2247 2248 /* 2249 * If not associated, or current association is not an HT 2250 * association, there's no need to do anything, just store 2251 * the new value until we associate. 2252 */ 2253 if (!sdata->u.mgd.associated || 2254 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT) 2255 return 0; 2256 2257 ap = sdata->u.mgd.associated->bssid; 2258 2259 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) { 2260 if (sdata->u.mgd.powersave) 2261 smps_mode = IEEE80211_SMPS_DYNAMIC; 2262 else 2263 smps_mode = IEEE80211_SMPS_OFF; 2264 } 2265 2266 /* send SM PS frame to AP */ 2267 err = ieee80211_send_smps_action(sdata, smps_mode, 2268 ap, ap); 2269 if (err) 2270 sdata->u.mgd.req_smps = old_req; 2271 2272 return err; 2273 } 2274 2275 static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev, 2276 bool enabled, int timeout) 2277 { 2278 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2279 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 2280 2281 if (sdata->vif.type != NL80211_IFTYPE_STATION) 2282 return -EOPNOTSUPP; 2283 2284 if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS)) 2285 return -EOPNOTSUPP; 2286 2287 if (enabled == sdata->u.mgd.powersave && 2288 timeout == local->dynamic_ps_forced_timeout) 2289 return 0; 2290 2291 sdata->u.mgd.powersave = enabled; 2292 local->dynamic_ps_forced_timeout = timeout; 2293 2294 /* no change, but if automatic follow powersave */ 2295 sdata_lock(sdata); 2296 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps); 2297 sdata_unlock(sdata); 2298 2299 if (local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS) 2300 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS); 2301 2302 ieee80211_recalc_ps(local, -1); 2303 ieee80211_recalc_ps_vif(sdata); 2304 2305 return 0; 2306 } 2307 2308 static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy, 2309 struct net_device *dev, 2310 s32 rssi_thold, u32 rssi_hyst) 2311 { 2312 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2313 struct ieee80211_vif *vif = &sdata->vif; 2314 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf; 2315 2316 if (rssi_thold == bss_conf->cqm_rssi_thold && 2317 rssi_hyst == bss_conf->cqm_rssi_hyst) 2318 return 0; 2319 2320 bss_conf->cqm_rssi_thold = rssi_thold; 2321 bss_conf->cqm_rssi_hyst = rssi_hyst; 2322 2323 /* tell the driver upon association, unless already associated */ 2324 if (sdata->u.mgd.associated && 2325 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI) 2326 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM); 2327 2328 return 0; 2329 } 2330 2331 static int ieee80211_set_bitrate_mask(struct wiphy *wiphy, 2332 struct net_device *dev, 2333 const u8 *addr, 2334 const struct cfg80211_bitrate_mask *mask) 2335 { 2336 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2337 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr); 2338 int i, ret; 2339 2340 if (!ieee80211_sdata_running(sdata)) 2341 return -ENETDOWN; 2342 2343 if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) { 2344 ret = drv_set_bitrate_mask(local, sdata, mask); 2345 if (ret) 2346 return ret; 2347 } 2348 2349 for (i = 0; i < IEEE80211_NUM_BANDS; i++) { 2350 struct ieee80211_supported_band *sband = wiphy->bands[i]; 2351 int j; 2352 2353 sdata->rc_rateidx_mask[i] = mask->control[i].legacy; 2354 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs, 2355 sizeof(mask->control[i].ht_mcs)); 2356 2357 sdata->rc_has_mcs_mask[i] = false; 2358 if (!sband) 2359 continue; 2360 2361 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) 2362 if (~sdata->rc_rateidx_mcs_mask[i][j]) { 2363 sdata->rc_has_mcs_mask[i] = true; 2364 break; 2365 } 2366 } 2367 2368 return 0; 2369 } 2370 2371 static bool ieee80211_coalesce_started_roc(struct ieee80211_local *local, 2372 struct ieee80211_roc_work *new_roc, 2373 struct ieee80211_roc_work *cur_roc) 2374 { 2375 unsigned long j = jiffies; 2376 unsigned long cur_roc_end = cur_roc->hw_start_time + 2377 msecs_to_jiffies(cur_roc->duration); 2378 struct ieee80211_roc_work *next_roc; 2379 int new_dur; 2380 2381 if (WARN_ON(!cur_roc->started || !cur_roc->hw_begun)) 2382 return false; 2383 2384 if (time_after(j + IEEE80211_ROC_MIN_LEFT, cur_roc_end)) 2385 return false; 2386 2387 ieee80211_handle_roc_started(new_roc); 2388 2389 new_dur = new_roc->duration - jiffies_to_msecs(cur_roc_end - j); 2390 2391 /* cur_roc is long enough - add new_roc to the dependents list. */ 2392 if (new_dur <= 0) { 2393 list_add_tail(&new_roc->list, &cur_roc->dependents); 2394 return true; 2395 } 2396 2397 new_roc->duration = new_dur; 2398 2399 /* 2400 * if cur_roc was already coalesced before, we might 2401 * want to extend the next roc instead of adding 2402 * a new one. 2403 */ 2404 next_roc = list_entry(cur_roc->list.next, 2405 struct ieee80211_roc_work, list); 2406 if (&next_roc->list != &local->roc_list && 2407 next_roc->chan == new_roc->chan && 2408 next_roc->sdata == new_roc->sdata && 2409 !WARN_ON(next_roc->started)) { 2410 list_add_tail(&new_roc->list, &next_roc->dependents); 2411 next_roc->duration = max(next_roc->duration, 2412 new_roc->duration); 2413 next_roc->type = max(next_roc->type, new_roc->type); 2414 return true; 2415 } 2416 2417 /* add right after cur_roc */ 2418 list_add(&new_roc->list, &cur_roc->list); 2419 2420 return true; 2421 } 2422 2423 static int ieee80211_start_roc_work(struct ieee80211_local *local, 2424 struct ieee80211_sub_if_data *sdata, 2425 struct ieee80211_channel *channel, 2426 unsigned int duration, u64 *cookie, 2427 struct sk_buff *txskb, 2428 enum ieee80211_roc_type type) 2429 { 2430 struct ieee80211_roc_work *roc, *tmp; 2431 bool queued = false; 2432 int ret; 2433 2434 lockdep_assert_held(&local->mtx); 2435 2436 if (local->use_chanctx && !local->ops->remain_on_channel) 2437 return -EOPNOTSUPP; 2438 2439 roc = kzalloc(sizeof(*roc), GFP_KERNEL); 2440 if (!roc) 2441 return -ENOMEM; 2442 2443 /* 2444 * If the duration is zero, then the driver 2445 * wouldn't actually do anything. Set it to 2446 * 10 for now. 2447 * 2448 * TODO: cancel the off-channel operation 2449 * when we get the SKB's TX status and 2450 * the wait time was zero before. 2451 */ 2452 if (!duration) 2453 duration = 10; 2454 2455 roc->chan = channel; 2456 roc->duration = duration; 2457 roc->req_duration = duration; 2458 roc->frame = txskb; 2459 roc->type = type; 2460 roc->mgmt_tx_cookie = (unsigned long)txskb; 2461 roc->sdata = sdata; 2462 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work); 2463 INIT_LIST_HEAD(&roc->dependents); 2464 2465 /* 2466 * cookie is either the roc cookie (for normal roc) 2467 * or the SKB (for mgmt TX) 2468 */ 2469 if (!txskb) { 2470 /* local->mtx protects this */ 2471 local->roc_cookie_counter++; 2472 roc->cookie = local->roc_cookie_counter; 2473 /* wow, you wrapped 64 bits ... more likely a bug */ 2474 if (WARN_ON(roc->cookie == 0)) { 2475 roc->cookie = 1; 2476 local->roc_cookie_counter++; 2477 } 2478 *cookie = roc->cookie; 2479 } else { 2480 *cookie = (unsigned long)txskb; 2481 } 2482 2483 /* if there's one pending or we're scanning, queue this one */ 2484 if (!list_empty(&local->roc_list) || 2485 local->scanning || local->radar_detect_enabled) 2486 goto out_check_combine; 2487 2488 /* if not HW assist, just queue & schedule work */ 2489 if (!local->ops->remain_on_channel) { 2490 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0); 2491 goto out_queue; 2492 } 2493 2494 /* otherwise actually kick it off here (for error handling) */ 2495 2496 ret = drv_remain_on_channel(local, sdata, channel, duration, type); 2497 if (ret) { 2498 kfree(roc); 2499 return ret; 2500 } 2501 2502 roc->started = true; 2503 goto out_queue; 2504 2505 out_check_combine: 2506 list_for_each_entry(tmp, &local->roc_list, list) { 2507 if (tmp->chan != channel || tmp->sdata != sdata) 2508 continue; 2509 2510 /* 2511 * Extend this ROC if possible: 2512 * 2513 * If it hasn't started yet, just increase the duration 2514 * and add the new one to the list of dependents. 2515 * If the type of the new ROC has higher priority, modify the 2516 * type of the previous one to match that of the new one. 2517 */ 2518 if (!tmp->started) { 2519 list_add_tail(&roc->list, &tmp->dependents); 2520 tmp->duration = max(tmp->duration, roc->duration); 2521 tmp->type = max(tmp->type, roc->type); 2522 queued = true; 2523 break; 2524 } 2525 2526 /* If it has already started, it's more difficult ... */ 2527 if (local->ops->remain_on_channel) { 2528 /* 2529 * In the offloaded ROC case, if it hasn't begun, add 2530 * this new one to the dependent list to be handled 2531 * when the master one begins. If it has begun, 2532 * check that there's still a minimum time left and 2533 * if so, start this one, transmitting the frame, but 2534 * add it to the list directly after this one with 2535 * a reduced time so we'll ask the driver to execute 2536 * it right after finishing the previous one, in the 2537 * hope that it'll also be executed right afterwards, 2538 * effectively extending the old one. 2539 * If there's no minimum time left, just add it to the 2540 * normal list. 2541 * TODO: the ROC type is ignored here, assuming that it 2542 * is better to immediately use the current ROC. 2543 */ 2544 if (!tmp->hw_begun) { 2545 list_add_tail(&roc->list, &tmp->dependents); 2546 queued = true; 2547 break; 2548 } 2549 2550 if (ieee80211_coalesce_started_roc(local, roc, tmp)) 2551 queued = true; 2552 } else if (del_timer_sync(&tmp->work.timer)) { 2553 unsigned long new_end; 2554 2555 /* 2556 * In the software ROC case, cancel the timer, if 2557 * that fails then the finish work is already 2558 * queued/pending and thus we queue the new ROC 2559 * normally, if that succeeds then we can extend 2560 * the timer duration and TX the frame (if any.) 2561 */ 2562 2563 list_add_tail(&roc->list, &tmp->dependents); 2564 queued = true; 2565 2566 new_end = jiffies + msecs_to_jiffies(roc->duration); 2567 2568 /* ok, it was started & we canceled timer */ 2569 if (time_after(new_end, tmp->work.timer.expires)) 2570 mod_timer(&tmp->work.timer, new_end); 2571 else 2572 add_timer(&tmp->work.timer); 2573 2574 ieee80211_handle_roc_started(roc); 2575 } 2576 break; 2577 } 2578 2579 out_queue: 2580 if (!queued) 2581 list_add_tail(&roc->list, &local->roc_list); 2582 2583 return 0; 2584 } 2585 2586 static int ieee80211_remain_on_channel(struct wiphy *wiphy, 2587 struct wireless_dev *wdev, 2588 struct ieee80211_channel *chan, 2589 unsigned int duration, 2590 u64 *cookie) 2591 { 2592 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2593 struct ieee80211_local *local = sdata->local; 2594 int ret; 2595 2596 mutex_lock(&local->mtx); 2597 ret = ieee80211_start_roc_work(local, sdata, chan, 2598 duration, cookie, NULL, 2599 IEEE80211_ROC_TYPE_NORMAL); 2600 mutex_unlock(&local->mtx); 2601 2602 return ret; 2603 } 2604 2605 static int ieee80211_cancel_roc(struct ieee80211_local *local, 2606 u64 cookie, bool mgmt_tx) 2607 { 2608 struct ieee80211_roc_work *roc, *tmp, *found = NULL; 2609 int ret; 2610 2611 mutex_lock(&local->mtx); 2612 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) { 2613 struct ieee80211_roc_work *dep, *tmp2; 2614 2615 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) { 2616 if (!mgmt_tx && dep->cookie != cookie) 2617 continue; 2618 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie) 2619 continue; 2620 /* found dependent item -- just remove it */ 2621 list_del(&dep->list); 2622 mutex_unlock(&local->mtx); 2623 2624 ieee80211_roc_notify_destroy(dep, true); 2625 return 0; 2626 } 2627 2628 if (!mgmt_tx && roc->cookie != cookie) 2629 continue; 2630 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie) 2631 continue; 2632 2633 found = roc; 2634 break; 2635 } 2636 2637 if (!found) { 2638 mutex_unlock(&local->mtx); 2639 return -ENOENT; 2640 } 2641 2642 /* 2643 * We found the item to cancel, so do that. Note that it 2644 * may have dependents, which we also cancel (and send 2645 * the expired signal for.) Not doing so would be quite 2646 * tricky here, but we may need to fix it later. 2647 */ 2648 2649 if (local->ops->remain_on_channel) { 2650 if (found->started) { 2651 ret = drv_cancel_remain_on_channel(local); 2652 if (WARN_ON_ONCE(ret)) { 2653 mutex_unlock(&local->mtx); 2654 return ret; 2655 } 2656 } 2657 2658 list_del(&found->list); 2659 2660 if (found->started) 2661 ieee80211_start_next_roc(local); 2662 mutex_unlock(&local->mtx); 2663 2664 ieee80211_roc_notify_destroy(found, true); 2665 } else { 2666 /* work may be pending so use it all the time */ 2667 found->abort = true; 2668 ieee80211_queue_delayed_work(&local->hw, &found->work, 0); 2669 2670 mutex_unlock(&local->mtx); 2671 2672 /* work will clean up etc */ 2673 flush_delayed_work(&found->work); 2674 WARN_ON(!found->to_be_freed); 2675 kfree(found); 2676 } 2677 2678 return 0; 2679 } 2680 2681 static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy, 2682 struct wireless_dev *wdev, 2683 u64 cookie) 2684 { 2685 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 2686 struct ieee80211_local *local = sdata->local; 2687 2688 return ieee80211_cancel_roc(local, cookie, false); 2689 } 2690 2691 static int ieee80211_start_radar_detection(struct wiphy *wiphy, 2692 struct net_device *dev, 2693 struct cfg80211_chan_def *chandef, 2694 u32 cac_time_ms) 2695 { 2696 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 2697 struct ieee80211_local *local = sdata->local; 2698 int err; 2699 2700 mutex_lock(&local->mtx); 2701 if (!list_empty(&local->roc_list) || local->scanning) { 2702 err = -EBUSY; 2703 goto out_unlock; 2704 } 2705 2706 /* whatever, but channel contexts should not complain about that one */ 2707 sdata->smps_mode = IEEE80211_SMPS_OFF; 2708 sdata->needed_rx_chains = local->rx_chains; 2709 2710 err = ieee80211_vif_use_channel(sdata, chandef, 2711 IEEE80211_CHANCTX_SHARED); 2712 if (err) 2713 goto out_unlock; 2714 2715 ieee80211_queue_delayed_work(&sdata->local->hw, 2716 &sdata->dfs_cac_timer_work, 2717 msecs_to_jiffies(cac_time_ms)); 2718 2719 out_unlock: 2720 mutex_unlock(&local->mtx); 2721 return err; 2722 } 2723 2724 static struct cfg80211_beacon_data * 2725 cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon) 2726 { 2727 struct cfg80211_beacon_data *new_beacon; 2728 u8 *pos; 2729 int len; 2730 2731 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len + 2732 beacon->proberesp_ies_len + beacon->assocresp_ies_len + 2733 beacon->probe_resp_len; 2734 2735 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL); 2736 if (!new_beacon) 2737 return NULL; 2738 2739 pos = (u8 *)(new_beacon + 1); 2740 if (beacon->head_len) { 2741 new_beacon->head_len = beacon->head_len; 2742 new_beacon->head = pos; 2743 memcpy(pos, beacon->head, beacon->head_len); 2744 pos += beacon->head_len; 2745 } 2746 if (beacon->tail_len) { 2747 new_beacon->tail_len = beacon->tail_len; 2748 new_beacon->tail = pos; 2749 memcpy(pos, beacon->tail, beacon->tail_len); 2750 pos += beacon->tail_len; 2751 } 2752 if (beacon->beacon_ies_len) { 2753 new_beacon->beacon_ies_len = beacon->beacon_ies_len; 2754 new_beacon->beacon_ies = pos; 2755 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len); 2756 pos += beacon->beacon_ies_len; 2757 } 2758 if (beacon->proberesp_ies_len) { 2759 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len; 2760 new_beacon->proberesp_ies = pos; 2761 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len); 2762 pos += beacon->proberesp_ies_len; 2763 } 2764 if (beacon->assocresp_ies_len) { 2765 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len; 2766 new_beacon->assocresp_ies = pos; 2767 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len); 2768 pos += beacon->assocresp_ies_len; 2769 } 2770 if (beacon->probe_resp_len) { 2771 new_beacon->probe_resp_len = beacon->probe_resp_len; 2772 beacon->probe_resp = pos; 2773 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len); 2774 pos += beacon->probe_resp_len; 2775 } 2776 2777 return new_beacon; 2778 } 2779 2780 void ieee80211_csa_finish(struct ieee80211_vif *vif) 2781 { 2782 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2783 2784 ieee80211_queue_work(&sdata->local->hw, 2785 &sdata->csa_finalize_work); 2786 } 2787 EXPORT_SYMBOL(ieee80211_csa_finish); 2788 2789 static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata, 2790 u32 *changed) 2791 { 2792 int err; 2793 2794 switch (sdata->vif.type) { 2795 case NL80211_IFTYPE_AP: 2796 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon, 2797 NULL); 2798 kfree(sdata->u.ap.next_beacon); 2799 sdata->u.ap.next_beacon = NULL; 2800 2801 if (err < 0) 2802 return err; 2803 *changed |= err; 2804 break; 2805 case NL80211_IFTYPE_ADHOC: 2806 err = ieee80211_ibss_finish_csa(sdata); 2807 if (err < 0) 2808 return err; 2809 *changed |= err; 2810 break; 2811 #ifdef CONFIG_MAC80211_MESH 2812 case NL80211_IFTYPE_MESH_POINT: 2813 err = ieee80211_mesh_finish_csa(sdata); 2814 if (err < 0) 2815 return err; 2816 *changed |= err; 2817 break; 2818 #endif 2819 default: 2820 WARN_ON(1); 2821 return -EINVAL; 2822 } 2823 2824 return 0; 2825 } 2826 2827 static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata) 2828 { 2829 struct ieee80211_local *local = sdata->local; 2830 u32 changed = 0; 2831 int err; 2832 2833 sdata_assert_lock(sdata); 2834 lockdep_assert_held(&local->mtx); 2835 lockdep_assert_held(&local->chanctx_mtx); 2836 2837 /* 2838 * using reservation isn't immediate as it may be deferred until later 2839 * with multi-vif. once reservation is complete it will re-schedule the 2840 * work with no reserved_chanctx so verify chandef to check if it 2841 * completed successfully 2842 */ 2843 2844 if (sdata->reserved_chanctx) { 2845 /* 2846 * with multi-vif csa driver may call ieee80211_csa_finish() 2847 * many times while waiting for other interfaces to use their 2848 * reservations 2849 */ 2850 if (sdata->reserved_ready) 2851 return 0; 2852 2853 err = ieee80211_vif_use_reserved_context(sdata); 2854 if (err) 2855 return err; 2856 2857 return 0; 2858 } 2859 2860 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef, 2861 &sdata->csa_chandef)) 2862 return -EINVAL; 2863 2864 sdata->vif.csa_active = false; 2865 2866 err = ieee80211_set_after_csa_beacon(sdata, &changed); 2867 if (err) 2868 return err; 2869 2870 ieee80211_bss_info_change_notify(sdata, changed); 2871 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef); 2872 2873 if (sdata->csa_block_tx) { 2874 ieee80211_wake_vif_queues(local, sdata, 2875 IEEE80211_QUEUE_STOP_REASON_CSA); 2876 sdata->csa_block_tx = false; 2877 } 2878 2879 return 0; 2880 } 2881 2882 static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata) 2883 { 2884 if (__ieee80211_csa_finalize(sdata)) { 2885 sdata_info(sdata, "failed to finalize CSA, disconnecting\n"); 2886 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev, 2887 GFP_KERNEL); 2888 } 2889 } 2890 2891 void ieee80211_csa_finalize_work(struct work_struct *work) 2892 { 2893 struct ieee80211_sub_if_data *sdata = 2894 container_of(work, struct ieee80211_sub_if_data, 2895 csa_finalize_work); 2896 struct ieee80211_local *local = sdata->local; 2897 2898 sdata_lock(sdata); 2899 mutex_lock(&local->mtx); 2900 mutex_lock(&local->chanctx_mtx); 2901 2902 /* AP might have been stopped while waiting for the lock. */ 2903 if (!sdata->vif.csa_active) 2904 goto unlock; 2905 2906 if (!ieee80211_sdata_running(sdata)) 2907 goto unlock; 2908 2909 ieee80211_csa_finalize(sdata); 2910 2911 unlock: 2912 mutex_unlock(&local->chanctx_mtx); 2913 mutex_unlock(&local->mtx); 2914 sdata_unlock(sdata); 2915 } 2916 2917 static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata, 2918 struct cfg80211_csa_settings *params, 2919 u32 *changed) 2920 { 2921 struct ieee80211_csa_settings csa = {}; 2922 int err; 2923 2924 switch (sdata->vif.type) { 2925 case NL80211_IFTYPE_AP: 2926 sdata->u.ap.next_beacon = 2927 cfg80211_beacon_dup(¶ms->beacon_after); 2928 if (!sdata->u.ap.next_beacon) 2929 return -ENOMEM; 2930 2931 /* 2932 * With a count of 0, we don't have to wait for any 2933 * TBTT before switching, so complete the CSA 2934 * immediately. In theory, with a count == 1 we 2935 * should delay the switch until just before the next 2936 * TBTT, but that would complicate things so we switch 2937 * immediately too. If we would delay the switch 2938 * until the next TBTT, we would have to set the probe 2939 * response here. 2940 * 2941 * TODO: A channel switch with count <= 1 without 2942 * sending a CSA action frame is kind of useless, 2943 * because the clients won't know we're changing 2944 * channels. The action frame must be implemented 2945 * either here or in the userspace. 2946 */ 2947 if (params->count <= 1) 2948 break; 2949 2950 if ((params->n_counter_offsets_beacon > 2951 IEEE80211_MAX_CSA_COUNTERS_NUM) || 2952 (params->n_counter_offsets_presp > 2953 IEEE80211_MAX_CSA_COUNTERS_NUM)) 2954 return -EINVAL; 2955 2956 csa.counter_offsets_beacon = params->counter_offsets_beacon; 2957 csa.counter_offsets_presp = params->counter_offsets_presp; 2958 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon; 2959 csa.n_counter_offsets_presp = params->n_counter_offsets_presp; 2960 csa.count = params->count; 2961 2962 err = ieee80211_assign_beacon(sdata, ¶ms->beacon_csa, &csa); 2963 if (err < 0) { 2964 kfree(sdata->u.ap.next_beacon); 2965 return err; 2966 } 2967 *changed |= err; 2968 2969 break; 2970 case NL80211_IFTYPE_ADHOC: 2971 if (!sdata->vif.bss_conf.ibss_joined) 2972 return -EINVAL; 2973 2974 if (params->chandef.width != sdata->u.ibss.chandef.width) 2975 return -EINVAL; 2976 2977 switch (params->chandef.width) { 2978 case NL80211_CHAN_WIDTH_40: 2979 if (cfg80211_get_chandef_type(¶ms->chandef) != 2980 cfg80211_get_chandef_type(&sdata->u.ibss.chandef)) 2981 return -EINVAL; 2982 case NL80211_CHAN_WIDTH_5: 2983 case NL80211_CHAN_WIDTH_10: 2984 case NL80211_CHAN_WIDTH_20_NOHT: 2985 case NL80211_CHAN_WIDTH_20: 2986 break; 2987 default: 2988 return -EINVAL; 2989 } 2990 2991 /* changes into another band are not supported */ 2992 if (sdata->u.ibss.chandef.chan->band != 2993 params->chandef.chan->band) 2994 return -EINVAL; 2995 2996 /* see comments in the NL80211_IFTYPE_AP block */ 2997 if (params->count > 1) { 2998 err = ieee80211_ibss_csa_beacon(sdata, params); 2999 if (err < 0) 3000 return err; 3001 *changed |= err; 3002 } 3003 3004 ieee80211_send_action_csa(sdata, params); 3005 3006 break; 3007 #ifdef CONFIG_MAC80211_MESH 3008 case NL80211_IFTYPE_MESH_POINT: { 3009 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 3010 3011 if (params->chandef.width != sdata->vif.bss_conf.chandef.width) 3012 return -EINVAL; 3013 3014 /* changes into another band are not supported */ 3015 if (sdata->vif.bss_conf.chandef.chan->band != 3016 params->chandef.chan->band) 3017 return -EINVAL; 3018 3019 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) { 3020 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT; 3021 if (!ifmsh->pre_value) 3022 ifmsh->pre_value = 1; 3023 else 3024 ifmsh->pre_value++; 3025 } 3026 3027 /* see comments in the NL80211_IFTYPE_AP block */ 3028 if (params->count > 1) { 3029 err = ieee80211_mesh_csa_beacon(sdata, params); 3030 if (err < 0) { 3031 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE; 3032 return err; 3033 } 3034 *changed |= err; 3035 } 3036 3037 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT) 3038 ieee80211_send_action_csa(sdata, params); 3039 3040 break; 3041 } 3042 #endif 3043 default: 3044 return -EOPNOTSUPP; 3045 } 3046 3047 return 0; 3048 } 3049 3050 static int 3051 __ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev, 3052 struct cfg80211_csa_settings *params) 3053 { 3054 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3055 struct ieee80211_local *local = sdata->local; 3056 struct ieee80211_chanctx_conf *conf; 3057 struct ieee80211_chanctx *chanctx; 3058 int err, changed = 0; 3059 3060 sdata_assert_lock(sdata); 3061 lockdep_assert_held(&local->mtx); 3062 3063 if (!list_empty(&local->roc_list) || local->scanning) 3064 return -EBUSY; 3065 3066 if (sdata->wdev.cac_started) 3067 return -EBUSY; 3068 3069 if (cfg80211_chandef_identical(¶ms->chandef, 3070 &sdata->vif.bss_conf.chandef)) 3071 return -EINVAL; 3072 3073 /* don't allow another channel switch if one is already active. */ 3074 if (sdata->vif.csa_active) 3075 return -EBUSY; 3076 3077 mutex_lock(&local->chanctx_mtx); 3078 conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 3079 lockdep_is_held(&local->chanctx_mtx)); 3080 if (!conf) { 3081 err = -EBUSY; 3082 goto out; 3083 } 3084 3085 chanctx = container_of(conf, struct ieee80211_chanctx, conf); 3086 if (!chanctx) { 3087 err = -EBUSY; 3088 goto out; 3089 } 3090 3091 err = ieee80211_vif_reserve_chanctx(sdata, ¶ms->chandef, 3092 chanctx->mode, 3093 params->radar_required); 3094 if (err) 3095 goto out; 3096 3097 /* if reservation is invalid then this will fail */ 3098 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0); 3099 if (err) { 3100 ieee80211_vif_unreserve_chanctx(sdata); 3101 goto out; 3102 } 3103 3104 err = ieee80211_set_csa_beacon(sdata, params, &changed); 3105 if (err) { 3106 ieee80211_vif_unreserve_chanctx(sdata); 3107 goto out; 3108 } 3109 3110 sdata->csa_chandef = params->chandef; 3111 sdata->csa_block_tx = params->block_tx; 3112 sdata->vif.csa_active = true; 3113 3114 if (sdata->csa_block_tx) 3115 ieee80211_stop_vif_queues(local, sdata, 3116 IEEE80211_QUEUE_STOP_REASON_CSA); 3117 3118 if (changed) { 3119 ieee80211_bss_info_change_notify(sdata, changed); 3120 drv_channel_switch_beacon(sdata, ¶ms->chandef); 3121 } else { 3122 /* if the beacon didn't change, we can finalize immediately */ 3123 ieee80211_csa_finalize(sdata); 3124 } 3125 3126 out: 3127 mutex_unlock(&local->chanctx_mtx); 3128 return err; 3129 } 3130 3131 int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev, 3132 struct cfg80211_csa_settings *params) 3133 { 3134 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3135 struct ieee80211_local *local = sdata->local; 3136 int err; 3137 3138 mutex_lock(&local->mtx); 3139 err = __ieee80211_channel_switch(wiphy, dev, params); 3140 mutex_unlock(&local->mtx); 3141 3142 return err; 3143 } 3144 3145 static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev, 3146 struct cfg80211_mgmt_tx_params *params, 3147 u64 *cookie) 3148 { 3149 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 3150 struct ieee80211_local *local = sdata->local; 3151 struct sk_buff *skb; 3152 struct sta_info *sta; 3153 const struct ieee80211_mgmt *mgmt = (void *)params->buf; 3154 bool need_offchan = false; 3155 u32 flags; 3156 int ret; 3157 u8 *data; 3158 3159 if (params->dont_wait_for_ack) 3160 flags = IEEE80211_TX_CTL_NO_ACK; 3161 else 3162 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX | 3163 IEEE80211_TX_CTL_REQ_TX_STATUS; 3164 3165 if (params->no_cck) 3166 flags |= IEEE80211_TX_CTL_NO_CCK_RATE; 3167 3168 switch (sdata->vif.type) { 3169 case NL80211_IFTYPE_ADHOC: 3170 if (!sdata->vif.bss_conf.ibss_joined) 3171 need_offchan = true; 3172 /* fall through */ 3173 #ifdef CONFIG_MAC80211_MESH 3174 case NL80211_IFTYPE_MESH_POINT: 3175 if (ieee80211_vif_is_mesh(&sdata->vif) && 3176 !sdata->u.mesh.mesh_id_len) 3177 need_offchan = true; 3178 /* fall through */ 3179 #endif 3180 case NL80211_IFTYPE_AP: 3181 case NL80211_IFTYPE_AP_VLAN: 3182 case NL80211_IFTYPE_P2P_GO: 3183 if (sdata->vif.type != NL80211_IFTYPE_ADHOC && 3184 !ieee80211_vif_is_mesh(&sdata->vif) && 3185 !rcu_access_pointer(sdata->bss->beacon)) 3186 need_offchan = true; 3187 if (!ieee80211_is_action(mgmt->frame_control) || 3188 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC || 3189 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED || 3190 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT) 3191 break; 3192 rcu_read_lock(); 3193 sta = sta_info_get(sdata, mgmt->da); 3194 rcu_read_unlock(); 3195 if (!sta) 3196 return -ENOLINK; 3197 break; 3198 case NL80211_IFTYPE_STATION: 3199 case NL80211_IFTYPE_P2P_CLIENT: 3200 if (!sdata->u.mgd.associated) 3201 need_offchan = true; 3202 break; 3203 case NL80211_IFTYPE_P2P_DEVICE: 3204 need_offchan = true; 3205 break; 3206 default: 3207 return -EOPNOTSUPP; 3208 } 3209 3210 /* configurations requiring offchan cannot work if no channel has been 3211 * specified 3212 */ 3213 if (need_offchan && !params->chan) 3214 return -EINVAL; 3215 3216 mutex_lock(&local->mtx); 3217 3218 /* Check if the operating channel is the requested channel */ 3219 if (!need_offchan) { 3220 struct ieee80211_chanctx_conf *chanctx_conf; 3221 3222 rcu_read_lock(); 3223 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3224 3225 if (chanctx_conf) { 3226 need_offchan = params->chan && 3227 (params->chan != 3228 chanctx_conf->def.chan); 3229 } else if (!params->chan) { 3230 ret = -EINVAL; 3231 rcu_read_unlock(); 3232 goto out_unlock; 3233 } else { 3234 need_offchan = true; 3235 } 3236 rcu_read_unlock(); 3237 } 3238 3239 if (need_offchan && !params->offchan) { 3240 ret = -EBUSY; 3241 goto out_unlock; 3242 } 3243 3244 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len); 3245 if (!skb) { 3246 ret = -ENOMEM; 3247 goto out_unlock; 3248 } 3249 skb_reserve(skb, local->hw.extra_tx_headroom); 3250 3251 data = skb_put(skb, params->len); 3252 memcpy(data, params->buf, params->len); 3253 3254 /* Update CSA counters */ 3255 if (sdata->vif.csa_active && 3256 (sdata->vif.type == NL80211_IFTYPE_AP || 3257 sdata->vif.type == NL80211_IFTYPE_ADHOC) && 3258 params->n_csa_offsets) { 3259 int i; 3260 struct beacon_data *beacon = NULL; 3261 3262 rcu_read_lock(); 3263 3264 if (sdata->vif.type == NL80211_IFTYPE_AP) 3265 beacon = rcu_dereference(sdata->u.ap.beacon); 3266 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) 3267 beacon = rcu_dereference(sdata->u.ibss.presp); 3268 else if (ieee80211_vif_is_mesh(&sdata->vif)) 3269 beacon = rcu_dereference(sdata->u.mesh.beacon); 3270 3271 if (beacon) 3272 for (i = 0; i < params->n_csa_offsets; i++) 3273 data[params->csa_offsets[i]] = 3274 beacon->csa_current_counter; 3275 3276 rcu_read_unlock(); 3277 } 3278 3279 IEEE80211_SKB_CB(skb)->flags = flags; 3280 3281 skb->dev = sdata->dev; 3282 3283 if (!need_offchan) { 3284 *cookie = (unsigned long) skb; 3285 ieee80211_tx_skb(sdata, skb); 3286 ret = 0; 3287 goto out_unlock; 3288 } 3289 3290 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN | 3291 IEEE80211_TX_INTFL_OFFCHAN_TX_OK; 3292 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) 3293 IEEE80211_SKB_CB(skb)->hw_queue = 3294 local->hw.offchannel_tx_hw_queue; 3295 3296 /* This will handle all kinds of coalescing and immediate TX */ 3297 ret = ieee80211_start_roc_work(local, sdata, params->chan, 3298 params->wait, cookie, skb, 3299 IEEE80211_ROC_TYPE_MGMT_TX); 3300 if (ret) 3301 kfree_skb(skb); 3302 out_unlock: 3303 mutex_unlock(&local->mtx); 3304 return ret; 3305 } 3306 3307 static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy, 3308 struct wireless_dev *wdev, 3309 u64 cookie) 3310 { 3311 struct ieee80211_local *local = wiphy_priv(wiphy); 3312 3313 return ieee80211_cancel_roc(local, cookie, true); 3314 } 3315 3316 static void ieee80211_mgmt_frame_register(struct wiphy *wiphy, 3317 struct wireless_dev *wdev, 3318 u16 frame_type, bool reg) 3319 { 3320 struct ieee80211_local *local = wiphy_priv(wiphy); 3321 3322 switch (frame_type) { 3323 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ: 3324 if (reg) 3325 local->probe_req_reg++; 3326 else 3327 local->probe_req_reg--; 3328 3329 if (!local->open_count) 3330 break; 3331 3332 ieee80211_queue_work(&local->hw, &local->reconfig_filter); 3333 break; 3334 default: 3335 break; 3336 } 3337 } 3338 3339 static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant) 3340 { 3341 struct ieee80211_local *local = wiphy_priv(wiphy); 3342 3343 if (local->started) 3344 return -EOPNOTSUPP; 3345 3346 return drv_set_antenna(local, tx_ant, rx_ant); 3347 } 3348 3349 static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant) 3350 { 3351 struct ieee80211_local *local = wiphy_priv(wiphy); 3352 3353 return drv_get_antenna(local, tx_ant, rx_ant); 3354 } 3355 3356 static int ieee80211_set_rekey_data(struct wiphy *wiphy, 3357 struct net_device *dev, 3358 struct cfg80211_gtk_rekey_data *data) 3359 { 3360 struct ieee80211_local *local = wiphy_priv(wiphy); 3361 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3362 3363 if (!local->ops->set_rekey_data) 3364 return -EOPNOTSUPP; 3365 3366 drv_set_rekey_data(local, sdata, data); 3367 3368 return 0; 3369 } 3370 3371 static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev, 3372 const u8 *peer, u64 *cookie) 3373 { 3374 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3375 struct ieee80211_local *local = sdata->local; 3376 struct ieee80211_qos_hdr *nullfunc; 3377 struct sk_buff *skb; 3378 int size = sizeof(*nullfunc); 3379 __le16 fc; 3380 bool qos; 3381 struct ieee80211_tx_info *info; 3382 struct sta_info *sta; 3383 struct ieee80211_chanctx_conf *chanctx_conf; 3384 enum ieee80211_band band; 3385 3386 rcu_read_lock(); 3387 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3388 if (WARN_ON(!chanctx_conf)) { 3389 rcu_read_unlock(); 3390 return -EINVAL; 3391 } 3392 band = chanctx_conf->def.chan->band; 3393 sta = sta_info_get_bss(sdata, peer); 3394 if (sta) { 3395 qos = sta->sta.wme; 3396 } else { 3397 rcu_read_unlock(); 3398 return -ENOLINK; 3399 } 3400 3401 if (qos) { 3402 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 3403 IEEE80211_STYPE_QOS_NULLFUNC | 3404 IEEE80211_FCTL_FROMDS); 3405 } else { 3406 size -= 2; 3407 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 3408 IEEE80211_STYPE_NULLFUNC | 3409 IEEE80211_FCTL_FROMDS); 3410 } 3411 3412 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size); 3413 if (!skb) { 3414 rcu_read_unlock(); 3415 return -ENOMEM; 3416 } 3417 3418 skb->dev = dev; 3419 3420 skb_reserve(skb, local->hw.extra_tx_headroom); 3421 3422 nullfunc = (void *) skb_put(skb, size); 3423 nullfunc->frame_control = fc; 3424 nullfunc->duration_id = 0; 3425 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN); 3426 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN); 3427 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN); 3428 nullfunc->seq_ctrl = 0; 3429 3430 info = IEEE80211_SKB_CB(skb); 3431 3432 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS | 3433 IEEE80211_TX_INTFL_NL80211_FRAME_TX; 3434 3435 skb_set_queue_mapping(skb, IEEE80211_AC_VO); 3436 skb->priority = 7; 3437 if (qos) 3438 nullfunc->qos_ctrl = cpu_to_le16(7); 3439 3440 local_bh_disable(); 3441 ieee80211_xmit(sdata, skb, band); 3442 local_bh_enable(); 3443 rcu_read_unlock(); 3444 3445 *cookie = (unsigned long) skb; 3446 return 0; 3447 } 3448 3449 static int ieee80211_cfg_get_channel(struct wiphy *wiphy, 3450 struct wireless_dev *wdev, 3451 struct cfg80211_chan_def *chandef) 3452 { 3453 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 3454 struct ieee80211_local *local = wiphy_priv(wiphy); 3455 struct ieee80211_chanctx_conf *chanctx_conf; 3456 int ret = -ENODATA; 3457 3458 rcu_read_lock(); 3459 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 3460 if (chanctx_conf) { 3461 *chandef = sdata->vif.bss_conf.chandef; 3462 ret = 0; 3463 } else if (local->open_count > 0 && 3464 local->open_count == local->monitors && 3465 sdata->vif.type == NL80211_IFTYPE_MONITOR) { 3466 if (local->use_chanctx) 3467 *chandef = local->monitor_chandef; 3468 else 3469 *chandef = local->_oper_chandef; 3470 ret = 0; 3471 } 3472 rcu_read_unlock(); 3473 3474 return ret; 3475 } 3476 3477 #ifdef CONFIG_PM 3478 static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled) 3479 { 3480 drv_set_wakeup(wiphy_priv(wiphy), enabled); 3481 } 3482 #endif 3483 3484 static int ieee80211_set_qos_map(struct wiphy *wiphy, 3485 struct net_device *dev, 3486 struct cfg80211_qos_map *qos_map) 3487 { 3488 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3489 struct mac80211_qos_map *new_qos_map, *old_qos_map; 3490 3491 if (qos_map) { 3492 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL); 3493 if (!new_qos_map) 3494 return -ENOMEM; 3495 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map)); 3496 } else { 3497 /* A NULL qos_map was passed to disable QoS mapping */ 3498 new_qos_map = NULL; 3499 } 3500 3501 old_qos_map = sdata_dereference(sdata->qos_map, sdata); 3502 rcu_assign_pointer(sdata->qos_map, new_qos_map); 3503 if (old_qos_map) 3504 kfree_rcu(old_qos_map, rcu_head); 3505 3506 return 0; 3507 } 3508 3509 static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy, 3510 struct net_device *dev, 3511 struct cfg80211_chan_def *chandef) 3512 { 3513 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 3514 int ret; 3515 u32 changed = 0; 3516 3517 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed); 3518 if (ret == 0) 3519 ieee80211_bss_info_change_notify(sdata, changed); 3520 3521 return ret; 3522 } 3523 3524 const struct cfg80211_ops mac80211_config_ops = { 3525 .add_virtual_intf = ieee80211_add_iface, 3526 .del_virtual_intf = ieee80211_del_iface, 3527 .change_virtual_intf = ieee80211_change_iface, 3528 .start_p2p_device = ieee80211_start_p2p_device, 3529 .stop_p2p_device = ieee80211_stop_p2p_device, 3530 .add_key = ieee80211_add_key, 3531 .del_key = ieee80211_del_key, 3532 .get_key = ieee80211_get_key, 3533 .set_default_key = ieee80211_config_default_key, 3534 .set_default_mgmt_key = ieee80211_config_default_mgmt_key, 3535 .start_ap = ieee80211_start_ap, 3536 .change_beacon = ieee80211_change_beacon, 3537 .stop_ap = ieee80211_stop_ap, 3538 .add_station = ieee80211_add_station, 3539 .del_station = ieee80211_del_station, 3540 .change_station = ieee80211_change_station, 3541 .get_station = ieee80211_get_station, 3542 .dump_station = ieee80211_dump_station, 3543 .dump_survey = ieee80211_dump_survey, 3544 #ifdef CONFIG_MAC80211_MESH 3545 .add_mpath = ieee80211_add_mpath, 3546 .del_mpath = ieee80211_del_mpath, 3547 .change_mpath = ieee80211_change_mpath, 3548 .get_mpath = ieee80211_get_mpath, 3549 .dump_mpath = ieee80211_dump_mpath, 3550 .update_mesh_config = ieee80211_update_mesh_config, 3551 .get_mesh_config = ieee80211_get_mesh_config, 3552 .join_mesh = ieee80211_join_mesh, 3553 .leave_mesh = ieee80211_leave_mesh, 3554 #endif 3555 .change_bss = ieee80211_change_bss, 3556 .set_txq_params = ieee80211_set_txq_params, 3557 .set_monitor_channel = ieee80211_set_monitor_channel, 3558 .suspend = ieee80211_suspend, 3559 .resume = ieee80211_resume, 3560 .scan = ieee80211_scan, 3561 .sched_scan_start = ieee80211_sched_scan_start, 3562 .sched_scan_stop = ieee80211_sched_scan_stop, 3563 .auth = ieee80211_auth, 3564 .assoc = ieee80211_assoc, 3565 .deauth = ieee80211_deauth, 3566 .disassoc = ieee80211_disassoc, 3567 .join_ibss = ieee80211_join_ibss, 3568 .leave_ibss = ieee80211_leave_ibss, 3569 .set_mcast_rate = ieee80211_set_mcast_rate, 3570 .set_wiphy_params = ieee80211_set_wiphy_params, 3571 .set_tx_power = ieee80211_set_tx_power, 3572 .get_tx_power = ieee80211_get_tx_power, 3573 .set_wds_peer = ieee80211_set_wds_peer, 3574 .rfkill_poll = ieee80211_rfkill_poll, 3575 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd) 3576 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump) 3577 .set_power_mgmt = ieee80211_set_power_mgmt, 3578 .set_bitrate_mask = ieee80211_set_bitrate_mask, 3579 .remain_on_channel = ieee80211_remain_on_channel, 3580 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel, 3581 .mgmt_tx = ieee80211_mgmt_tx, 3582 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait, 3583 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config, 3584 .mgmt_frame_register = ieee80211_mgmt_frame_register, 3585 .set_antenna = ieee80211_set_antenna, 3586 .get_antenna = ieee80211_get_antenna, 3587 .set_rekey_data = ieee80211_set_rekey_data, 3588 .tdls_oper = ieee80211_tdls_oper, 3589 .tdls_mgmt = ieee80211_tdls_mgmt, 3590 .probe_client = ieee80211_probe_client, 3591 .set_noack_map = ieee80211_set_noack_map, 3592 #ifdef CONFIG_PM 3593 .set_wakeup = ieee80211_set_wakeup, 3594 #endif 3595 .get_channel = ieee80211_cfg_get_channel, 3596 .start_radar_detection = ieee80211_start_radar_detection, 3597 .channel_switch = ieee80211_channel_switch, 3598 .set_qos_map = ieee80211_set_qos_map, 3599 .set_ap_chanwidth = ieee80211_set_ap_chanwidth, 3600 }; 3601