1 /* 2 * Interface handling 3 * 4 * Copyright 2002-2005, Instant802 Networks, Inc. 5 * Copyright 2005-2006, Devicescape Software, Inc. 6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz> 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net> 8 * 9 * This program is free software; you can redistribute it and/or modify 10 * it under the terms of the GNU General Public License version 2 as 11 * published by the Free Software Foundation. 12 */ 13 #include <linux/slab.h> 14 #include <linux/kernel.h> 15 #include <linux/if_arp.h> 16 #include <linux/netdevice.h> 17 #include <linux/rtnetlink.h> 18 #include <net/mac80211.h> 19 #include <net/ieee80211_radiotap.h> 20 #include "ieee80211_i.h" 21 #include "sta_info.h" 22 #include "debugfs_netdev.h" 23 #include "mesh.h" 24 #include "led.h" 25 #include "driver-ops.h" 26 #include "wme.h" 27 #include "rate.h" 28 29 /** 30 * DOC: Interface list locking 31 * 32 * The interface list in each struct ieee80211_local is protected 33 * three-fold: 34 * 35 * (1) modifications may only be done under the RTNL 36 * (2) modifications and readers are protected against each other by 37 * the iflist_mtx. 38 * (3) modifications are done in an RCU manner so atomic readers 39 * can traverse the list in RCU-safe blocks. 40 * 41 * As a consequence, reads (traversals) of the list can be protected 42 * by either the RTNL, the iflist_mtx or RCU. 43 */ 44 45 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata) 46 { 47 struct ieee80211_chanctx_conf *chanctx_conf; 48 int power; 49 50 rcu_read_lock(); 51 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 52 if (!chanctx_conf) { 53 rcu_read_unlock(); 54 return false; 55 } 56 57 power = chanctx_conf->def.chan->max_power; 58 rcu_read_unlock(); 59 60 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL) 61 power = min(power, sdata->user_power_level); 62 63 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL) 64 power = min(power, sdata->ap_power_level); 65 66 if (power != sdata->vif.bss_conf.txpower) { 67 sdata->vif.bss_conf.txpower = power; 68 ieee80211_hw_config(sdata->local, 0); 69 return true; 70 } 71 72 return false; 73 } 74 75 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata) 76 { 77 if (__ieee80211_recalc_txpower(sdata)) 78 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER); 79 } 80 81 static u32 __ieee80211_idle_off(struct ieee80211_local *local) 82 { 83 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE)) 84 return 0; 85 86 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE; 87 return IEEE80211_CONF_CHANGE_IDLE; 88 } 89 90 static u32 __ieee80211_idle_on(struct ieee80211_local *local) 91 { 92 if (local->hw.conf.flags & IEEE80211_CONF_IDLE) 93 return 0; 94 95 ieee80211_flush_queues(local, NULL); 96 97 local->hw.conf.flags |= IEEE80211_CONF_IDLE; 98 return IEEE80211_CONF_CHANGE_IDLE; 99 } 100 101 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local, 102 bool force_active) 103 { 104 bool working = false, scanning, active; 105 unsigned int led_trig_start = 0, led_trig_stop = 0; 106 struct ieee80211_roc_work *roc; 107 108 lockdep_assert_held(&local->mtx); 109 110 active = force_active || 111 !list_empty(&local->chanctx_list) || 112 local->monitors; 113 114 if (!local->ops->remain_on_channel) { 115 list_for_each_entry(roc, &local->roc_list, list) { 116 working = true; 117 break; 118 } 119 } 120 121 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) || 122 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning); 123 124 if (working || scanning) 125 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK; 126 else 127 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK; 128 129 if (active) 130 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED; 131 else 132 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED; 133 134 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop); 135 136 if (working || scanning || active) 137 return __ieee80211_idle_off(local); 138 return __ieee80211_idle_on(local); 139 } 140 141 u32 ieee80211_idle_off(struct ieee80211_local *local) 142 { 143 return __ieee80211_recalc_idle(local, true); 144 } 145 146 void ieee80211_recalc_idle(struct ieee80211_local *local) 147 { 148 u32 change = __ieee80211_recalc_idle(local, false); 149 if (change) 150 ieee80211_hw_config(local, change); 151 } 152 153 static int ieee80211_change_mtu(struct net_device *dev, int new_mtu) 154 { 155 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN) 156 return -EINVAL; 157 158 dev->mtu = new_mtu; 159 return 0; 160 } 161 162 static int ieee80211_verify_mac(struct ieee80211_local *local, u8 *addr) 163 { 164 struct ieee80211_sub_if_data *sdata; 165 u64 new, mask, tmp; 166 u8 *m; 167 int ret = 0; 168 169 if (is_zero_ether_addr(local->hw.wiphy->addr_mask)) 170 return 0; 171 172 m = addr; 173 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 174 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 175 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 176 177 m = local->hw.wiphy->addr_mask; 178 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 179 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 180 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 181 182 183 mutex_lock(&local->iflist_mtx); 184 list_for_each_entry(sdata, &local->interfaces, list) { 185 if (sdata->vif.type == NL80211_IFTYPE_MONITOR) 186 continue; 187 188 m = sdata->vif.addr; 189 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 190 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 191 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 192 193 if ((new & ~mask) != (tmp & ~mask)) { 194 ret = -EINVAL; 195 break; 196 } 197 } 198 mutex_unlock(&local->iflist_mtx); 199 200 return ret; 201 } 202 203 static int ieee80211_change_mac(struct net_device *dev, void *addr) 204 { 205 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 206 struct sockaddr *sa = addr; 207 int ret; 208 209 if (ieee80211_sdata_running(sdata)) 210 return -EBUSY; 211 212 ret = ieee80211_verify_mac(sdata->local, sa->sa_data); 213 if (ret) 214 return ret; 215 216 ret = eth_mac_addr(dev, sa); 217 218 if (ret == 0) 219 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN); 220 221 return ret; 222 } 223 224 static inline int identical_mac_addr_allowed(int type1, int type2) 225 { 226 return type1 == NL80211_IFTYPE_MONITOR || 227 type2 == NL80211_IFTYPE_MONITOR || 228 type1 == NL80211_IFTYPE_P2P_DEVICE || 229 type2 == NL80211_IFTYPE_P2P_DEVICE || 230 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) || 231 (type1 == NL80211_IFTYPE_WDS && 232 (type2 == NL80211_IFTYPE_WDS || 233 type2 == NL80211_IFTYPE_AP)) || 234 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) || 235 (type1 == NL80211_IFTYPE_AP_VLAN && 236 (type2 == NL80211_IFTYPE_AP || 237 type2 == NL80211_IFTYPE_AP_VLAN)); 238 } 239 240 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata, 241 enum nl80211_iftype iftype) 242 { 243 struct ieee80211_local *local = sdata->local; 244 struct ieee80211_sub_if_data *nsdata; 245 246 ASSERT_RTNL(); 247 248 /* we hold the RTNL here so can safely walk the list */ 249 list_for_each_entry(nsdata, &local->interfaces, list) { 250 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) { 251 /* 252 * Allow only a single IBSS interface to be up at any 253 * time. This is restricted because beacon distribution 254 * cannot work properly if both are in the same IBSS. 255 * 256 * To remove this restriction we'd have to disallow them 257 * from setting the same SSID on different IBSS interfaces 258 * belonging to the same hardware. Then, however, we're 259 * faced with having to adopt two different TSF timers... 260 */ 261 if (iftype == NL80211_IFTYPE_ADHOC && 262 nsdata->vif.type == NL80211_IFTYPE_ADHOC) 263 return -EBUSY; 264 265 /* 266 * The remaining checks are only performed for interfaces 267 * with the same MAC address. 268 */ 269 if (!ether_addr_equal(sdata->vif.addr, 270 nsdata->vif.addr)) 271 continue; 272 273 /* 274 * check whether it may have the same address 275 */ 276 if (!identical_mac_addr_allowed(iftype, 277 nsdata->vif.type)) 278 return -ENOTUNIQ; 279 280 /* 281 * can only add VLANs to enabled APs 282 */ 283 if (iftype == NL80211_IFTYPE_AP_VLAN && 284 nsdata->vif.type == NL80211_IFTYPE_AP) 285 sdata->bss = &nsdata->u.ap; 286 } 287 } 288 289 return 0; 290 } 291 292 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata) 293 { 294 int n_queues = sdata->local->hw.queues; 295 int i; 296 297 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) { 298 for (i = 0; i < IEEE80211_NUM_ACS; i++) { 299 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] == 300 IEEE80211_INVAL_HW_QUEUE)) 301 return -EINVAL; 302 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >= 303 n_queues)) 304 return -EINVAL; 305 } 306 } 307 308 if ((sdata->vif.type != NL80211_IFTYPE_AP && 309 sdata->vif.type != NL80211_IFTYPE_MESH_POINT) || 310 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) { 311 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE; 312 return 0; 313 } 314 315 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE)) 316 return -EINVAL; 317 318 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues)) 319 return -EINVAL; 320 321 return 0; 322 } 323 324 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata, 325 const int offset) 326 { 327 struct ieee80211_local *local = sdata->local; 328 u32 flags = sdata->u.mntr_flags; 329 330 #define ADJUST(_f, _s) do { \ 331 if (flags & MONITOR_FLAG_##_f) \ 332 local->fif_##_s += offset; \ 333 } while (0) 334 335 ADJUST(FCSFAIL, fcsfail); 336 ADJUST(PLCPFAIL, plcpfail); 337 ADJUST(CONTROL, control); 338 ADJUST(CONTROL, pspoll); 339 ADJUST(OTHER_BSS, other_bss); 340 341 #undef ADJUST 342 } 343 344 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata) 345 { 346 struct ieee80211_local *local = sdata->local; 347 int i; 348 349 for (i = 0; i < IEEE80211_NUM_ACS; i++) { 350 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) 351 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE; 352 else if (local->hw.queues >= IEEE80211_NUM_ACS) 353 sdata->vif.hw_queue[i] = i; 354 else 355 sdata->vif.hw_queue[i] = 0; 356 } 357 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE; 358 } 359 360 int ieee80211_add_virtual_monitor(struct ieee80211_local *local) 361 { 362 struct ieee80211_sub_if_data *sdata; 363 int ret; 364 365 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF)) 366 return 0; 367 368 ASSERT_RTNL(); 369 370 if (local->monitor_sdata) 371 return 0; 372 373 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL); 374 if (!sdata) 375 return -ENOMEM; 376 377 /* set up data */ 378 sdata->local = local; 379 sdata->vif.type = NL80211_IFTYPE_MONITOR; 380 snprintf(sdata->name, IFNAMSIZ, "%s-monitor", 381 wiphy_name(local->hw.wiphy)); 382 383 ieee80211_set_default_queues(sdata); 384 385 ret = drv_add_interface(local, sdata); 386 if (WARN_ON(ret)) { 387 /* ok .. stupid driver, it asked for this! */ 388 kfree(sdata); 389 return ret; 390 } 391 392 ret = ieee80211_check_queues(sdata); 393 if (ret) { 394 kfree(sdata); 395 return ret; 396 } 397 398 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef, 399 IEEE80211_CHANCTX_EXCLUSIVE); 400 if (ret) { 401 drv_remove_interface(local, sdata); 402 kfree(sdata); 403 return ret; 404 } 405 406 mutex_lock(&local->iflist_mtx); 407 rcu_assign_pointer(local->monitor_sdata, sdata); 408 mutex_unlock(&local->iflist_mtx); 409 410 return 0; 411 } 412 413 void ieee80211_del_virtual_monitor(struct ieee80211_local *local) 414 { 415 struct ieee80211_sub_if_data *sdata; 416 417 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF)) 418 return; 419 420 ASSERT_RTNL(); 421 422 mutex_lock(&local->iflist_mtx); 423 424 sdata = rcu_dereference_protected(local->monitor_sdata, 425 lockdep_is_held(&local->iflist_mtx)); 426 if (!sdata) { 427 mutex_unlock(&local->iflist_mtx); 428 return; 429 } 430 431 rcu_assign_pointer(local->monitor_sdata, NULL); 432 mutex_unlock(&local->iflist_mtx); 433 434 synchronize_net(); 435 436 ieee80211_vif_release_channel(sdata); 437 438 drv_remove_interface(local, sdata); 439 440 kfree(sdata); 441 } 442 443 /* 444 * NOTE: Be very careful when changing this function, it must NOT return 445 * an error on interface type changes that have been pre-checked, so most 446 * checks should be in ieee80211_check_concurrent_iface. 447 */ 448 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up) 449 { 450 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 451 struct net_device *dev = wdev->netdev; 452 struct ieee80211_local *local = sdata->local; 453 struct sta_info *sta; 454 u32 changed = 0; 455 int res; 456 u32 hw_reconf_flags = 0; 457 458 switch (sdata->vif.type) { 459 case NL80211_IFTYPE_WDS: 460 if (!is_valid_ether_addr(sdata->u.wds.remote_addr)) 461 return -ENOLINK; 462 break; 463 case NL80211_IFTYPE_AP_VLAN: { 464 struct ieee80211_sub_if_data *master; 465 466 if (!sdata->bss) 467 return -ENOLINK; 468 469 list_add(&sdata->u.vlan.list, &sdata->bss->vlans); 470 471 master = container_of(sdata->bss, 472 struct ieee80211_sub_if_data, u.ap); 473 sdata->control_port_protocol = 474 master->control_port_protocol; 475 sdata->control_port_no_encrypt = 476 master->control_port_no_encrypt; 477 break; 478 } 479 case NL80211_IFTYPE_AP: 480 sdata->bss = &sdata->u.ap; 481 break; 482 case NL80211_IFTYPE_MESH_POINT: 483 case NL80211_IFTYPE_STATION: 484 case NL80211_IFTYPE_MONITOR: 485 case NL80211_IFTYPE_ADHOC: 486 case NL80211_IFTYPE_P2P_DEVICE: 487 /* no special treatment */ 488 break; 489 case NL80211_IFTYPE_UNSPECIFIED: 490 case NUM_NL80211_IFTYPES: 491 case NL80211_IFTYPE_P2P_CLIENT: 492 case NL80211_IFTYPE_P2P_GO: 493 /* cannot happen */ 494 WARN_ON(1); 495 break; 496 } 497 498 if (local->open_count == 0) { 499 res = drv_start(local); 500 if (res) 501 goto err_del_bss; 502 /* we're brought up, everything changes */ 503 hw_reconf_flags = ~0; 504 ieee80211_led_radio(local, true); 505 ieee80211_mod_tpt_led_trig(local, 506 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0); 507 } 508 509 /* 510 * Copy the hopefully now-present MAC address to 511 * this interface, if it has the special null one. 512 */ 513 if (dev && is_zero_ether_addr(dev->dev_addr)) { 514 memcpy(dev->dev_addr, 515 local->hw.wiphy->perm_addr, 516 ETH_ALEN); 517 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN); 518 519 if (!is_valid_ether_addr(dev->dev_addr)) { 520 res = -EADDRNOTAVAIL; 521 goto err_stop; 522 } 523 } 524 525 switch (sdata->vif.type) { 526 case NL80211_IFTYPE_AP_VLAN: 527 /* no need to tell driver, but set carrier and chanctx */ 528 if (rtnl_dereference(sdata->bss->beacon)) { 529 ieee80211_vif_vlan_copy_chanctx(sdata); 530 netif_carrier_on(dev); 531 } else { 532 netif_carrier_off(dev); 533 } 534 break; 535 case NL80211_IFTYPE_MONITOR: 536 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) { 537 local->cooked_mntrs++; 538 break; 539 } 540 541 if (local->monitors == 0 && local->open_count == 0) { 542 res = ieee80211_add_virtual_monitor(local); 543 if (res) 544 goto err_stop; 545 } 546 547 /* must be before the call to ieee80211_configure_filter */ 548 local->monitors++; 549 if (local->monitors == 1) { 550 local->hw.conf.flags |= IEEE80211_CONF_MONITOR; 551 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR; 552 } 553 554 ieee80211_adjust_monitor_flags(sdata, 1); 555 ieee80211_configure_filter(local); 556 mutex_lock(&local->mtx); 557 ieee80211_recalc_idle(local); 558 mutex_unlock(&local->mtx); 559 560 netif_carrier_on(dev); 561 break; 562 default: 563 if (coming_up) { 564 ieee80211_del_virtual_monitor(local); 565 566 res = drv_add_interface(local, sdata); 567 if (res) 568 goto err_stop; 569 res = ieee80211_check_queues(sdata); 570 if (res) 571 goto err_del_interface; 572 } 573 574 if (sdata->vif.type == NL80211_IFTYPE_AP) { 575 local->fif_pspoll++; 576 local->fif_probe_req++; 577 578 ieee80211_configure_filter(local); 579 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { 580 local->fif_probe_req++; 581 } 582 583 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) 584 changed |= ieee80211_reset_erp_info(sdata); 585 ieee80211_bss_info_change_notify(sdata, changed); 586 587 switch (sdata->vif.type) { 588 case NL80211_IFTYPE_STATION: 589 case NL80211_IFTYPE_ADHOC: 590 case NL80211_IFTYPE_AP: 591 case NL80211_IFTYPE_MESH_POINT: 592 netif_carrier_off(dev); 593 break; 594 case NL80211_IFTYPE_WDS: 595 case NL80211_IFTYPE_P2P_DEVICE: 596 break; 597 default: 598 /* not reached */ 599 WARN_ON(1); 600 } 601 602 /* 603 * set default queue parameters so drivers don't 604 * need to initialise the hardware if the hardware 605 * doesn't start up with sane defaults 606 */ 607 ieee80211_set_wmm_default(sdata, true); 608 } 609 610 set_bit(SDATA_STATE_RUNNING, &sdata->state); 611 612 if (sdata->vif.type == NL80211_IFTYPE_WDS) { 613 /* Create STA entry for the WDS peer */ 614 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr, 615 GFP_KERNEL); 616 if (!sta) { 617 res = -ENOMEM; 618 goto err_del_interface; 619 } 620 621 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH); 622 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC); 623 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED); 624 625 res = sta_info_insert(sta); 626 if (res) { 627 /* STA has been freed */ 628 goto err_del_interface; 629 } 630 631 rate_control_rate_init(sta); 632 netif_carrier_on(dev); 633 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) { 634 rcu_assign_pointer(local->p2p_sdata, sdata); 635 } 636 637 /* 638 * set_multicast_list will be invoked by the networking core 639 * which will check whether any increments here were done in 640 * error and sync them down to the hardware as filter flags. 641 */ 642 if (sdata->flags & IEEE80211_SDATA_ALLMULTI) 643 atomic_inc(&local->iff_allmultis); 644 645 if (sdata->flags & IEEE80211_SDATA_PROMISC) 646 atomic_inc(&local->iff_promiscs); 647 648 if (coming_up) 649 local->open_count++; 650 651 if (hw_reconf_flags) 652 ieee80211_hw_config(local, hw_reconf_flags); 653 654 ieee80211_recalc_ps(local, -1); 655 656 if (dev) { 657 unsigned long flags; 658 int n_acs = IEEE80211_NUM_ACS; 659 int ac; 660 661 if (local->hw.queues < IEEE80211_NUM_ACS) 662 n_acs = 1; 663 664 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 665 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE || 666 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 && 667 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) { 668 for (ac = 0; ac < n_acs; ac++) { 669 int ac_queue = sdata->vif.hw_queue[ac]; 670 671 if (local->queue_stop_reasons[ac_queue] == 0 && 672 skb_queue_empty(&local->pending[ac_queue])) 673 netif_start_subqueue(dev, ac); 674 } 675 } 676 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 677 } 678 679 return 0; 680 err_del_interface: 681 drv_remove_interface(local, sdata); 682 err_stop: 683 if (!local->open_count) 684 drv_stop(local); 685 err_del_bss: 686 sdata->bss = NULL; 687 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) 688 list_del(&sdata->u.vlan.list); 689 /* might already be clear but that doesn't matter */ 690 clear_bit(SDATA_STATE_RUNNING, &sdata->state); 691 return res; 692 } 693 694 static int ieee80211_open(struct net_device *dev) 695 { 696 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 697 int err; 698 699 /* fail early if user set an invalid address */ 700 if (!is_valid_ether_addr(dev->dev_addr)) 701 return -EADDRNOTAVAIL; 702 703 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type); 704 if (err) 705 return err; 706 707 return ieee80211_do_open(&sdata->wdev, true); 708 } 709 710 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, 711 bool going_down) 712 { 713 struct ieee80211_local *local = sdata->local; 714 unsigned long flags; 715 struct sk_buff *skb, *tmp; 716 u32 hw_reconf_flags = 0; 717 int i, flushed; 718 struct ps_data *ps; 719 720 clear_bit(SDATA_STATE_RUNNING, &sdata->state); 721 722 if (rcu_access_pointer(local->scan_sdata) == sdata) 723 ieee80211_scan_cancel(local); 724 725 /* 726 * Stop TX on this interface first. 727 */ 728 if (sdata->dev) 729 netif_tx_stop_all_queues(sdata->dev); 730 731 ieee80211_roc_purge(local, sdata); 732 733 if (sdata->vif.type == NL80211_IFTYPE_STATION) 734 ieee80211_mgd_stop(sdata); 735 736 /* 737 * Remove all stations associated with this interface. 738 * 739 * This must be done before calling ops->remove_interface() 740 * because otherwise we can later invoke ops->sta_notify() 741 * whenever the STAs are removed, and that invalidates driver 742 * assumptions about always getting a vif pointer that is valid 743 * (because if we remove a STA after ops->remove_interface() 744 * the driver will have removed the vif info already!) 745 * 746 * This is relevant only in WDS mode, in all other modes we've 747 * already removed all stations when disconnecting or similar, 748 * so warn otherwise. 749 * 750 * We call sta_info_flush_cleanup() later, to combine RCU waits. 751 */ 752 flushed = sta_info_flush_defer(sdata); 753 WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) || 754 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1)); 755 756 /* don't count this interface for promisc/allmulti while it is down */ 757 if (sdata->flags & IEEE80211_SDATA_ALLMULTI) 758 atomic_dec(&local->iff_allmultis); 759 760 if (sdata->flags & IEEE80211_SDATA_PROMISC) 761 atomic_dec(&local->iff_promiscs); 762 763 if (sdata->vif.type == NL80211_IFTYPE_AP) { 764 local->fif_pspoll--; 765 local->fif_probe_req--; 766 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { 767 local->fif_probe_req--; 768 } 769 770 if (sdata->dev) { 771 netif_addr_lock_bh(sdata->dev); 772 spin_lock_bh(&local->filter_lock); 773 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc, 774 sdata->dev->addr_len); 775 spin_unlock_bh(&local->filter_lock); 776 netif_addr_unlock_bh(sdata->dev); 777 } 778 779 del_timer_sync(&local->dynamic_ps_timer); 780 cancel_work_sync(&local->dynamic_ps_enable_work); 781 782 cancel_work_sync(&sdata->recalc_smps); 783 784 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work); 785 786 if (sdata->wdev.cac_started) { 787 WARN_ON(local->suspended); 788 mutex_lock(&local->iflist_mtx); 789 ieee80211_vif_release_channel(sdata); 790 mutex_unlock(&local->iflist_mtx); 791 cfg80211_cac_event(sdata->dev, NL80211_RADAR_CAC_ABORTED, 792 GFP_KERNEL); 793 } 794 795 /* APs need special treatment */ 796 if (sdata->vif.type == NL80211_IFTYPE_AP) { 797 struct ieee80211_sub_if_data *vlan, *tmpsdata; 798 799 /* down all dependent devices, that is VLANs */ 800 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans, 801 u.vlan.list) 802 dev_close(vlan->dev); 803 WARN_ON(!list_empty(&sdata->u.ap.vlans)); 804 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 805 /* remove all packets in parent bc_buf pointing to this dev */ 806 ps = &sdata->bss->ps; 807 808 spin_lock_irqsave(&ps->bc_buf.lock, flags); 809 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) { 810 if (skb->dev == sdata->dev) { 811 __skb_unlink(skb, &ps->bc_buf); 812 local->total_ps_buffered--; 813 ieee80211_free_txskb(&local->hw, skb); 814 } 815 } 816 spin_unlock_irqrestore(&ps->bc_buf.lock, flags); 817 } 818 819 if (going_down) 820 local->open_count--; 821 822 switch (sdata->vif.type) { 823 case NL80211_IFTYPE_AP_VLAN: 824 list_del(&sdata->u.vlan.list); 825 rcu_assign_pointer(sdata->vif.chanctx_conf, NULL); 826 /* no need to tell driver */ 827 break; 828 case NL80211_IFTYPE_MONITOR: 829 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) { 830 local->cooked_mntrs--; 831 break; 832 } 833 834 local->monitors--; 835 if (local->monitors == 0) { 836 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR; 837 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR; 838 } 839 840 ieee80211_adjust_monitor_flags(sdata, -1); 841 break; 842 case NL80211_IFTYPE_P2P_DEVICE: 843 /* relies on synchronize_rcu() below */ 844 rcu_assign_pointer(local->p2p_sdata, NULL); 845 /* fall through */ 846 default: 847 cancel_work_sync(&sdata->work); 848 /* 849 * When we get here, the interface is marked down. 850 * 851 * sta_info_flush_cleanup() requires rcu_barrier() 852 * first to wait for the station call_rcu() calls 853 * to complete, and we also need synchronize_rcu() 854 * to wait for the RX path in case it is using the 855 * interface and enqueuing frames at this very time on 856 * another CPU. 857 */ 858 synchronize_rcu(); 859 rcu_barrier(); 860 sta_info_flush_cleanup(sdata); 861 862 /* 863 * Free all remaining keys, there shouldn't be any, 864 * except maybe in WDS mode? 865 */ 866 ieee80211_free_keys(sdata); 867 868 /* fall through */ 869 case NL80211_IFTYPE_AP: 870 skb_queue_purge(&sdata->skb_queue); 871 } 872 873 sdata->bss = NULL; 874 875 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 876 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) { 877 skb_queue_walk_safe(&local->pending[i], skb, tmp) { 878 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 879 if (info->control.vif == &sdata->vif) { 880 __skb_unlink(skb, &local->pending[i]); 881 ieee80211_free_txskb(&local->hw, skb); 882 } 883 } 884 } 885 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 886 887 if (local->open_count == 0) 888 ieee80211_clear_tx_pending(local); 889 890 /* 891 * If the interface goes down while suspended, presumably because 892 * the device was unplugged and that happens before our resume, 893 * then the driver is already unconfigured and the remainder of 894 * this function isn't needed. 895 * XXX: what about WoWLAN? If the device has software state, e.g. 896 * memory allocated, it might expect teardown commands from 897 * mac80211 here? 898 */ 899 if (local->suspended) { 900 WARN_ON(local->wowlan); 901 WARN_ON(rtnl_dereference(local->monitor_sdata)); 902 return; 903 } 904 905 switch (sdata->vif.type) { 906 case NL80211_IFTYPE_AP_VLAN: 907 break; 908 case NL80211_IFTYPE_MONITOR: 909 if (local->monitors == 0) 910 ieee80211_del_virtual_monitor(local); 911 912 mutex_lock(&local->mtx); 913 ieee80211_recalc_idle(local); 914 mutex_unlock(&local->mtx); 915 break; 916 default: 917 if (going_down) 918 drv_remove_interface(local, sdata); 919 } 920 921 ieee80211_recalc_ps(local, -1); 922 923 if (local->open_count == 0) { 924 ieee80211_stop_device(local); 925 926 /* no reconfiguring after stop! */ 927 return; 928 } 929 930 /* do after stop to avoid reconfiguring when we stop anyway */ 931 ieee80211_configure_filter(local); 932 ieee80211_hw_config(local, hw_reconf_flags); 933 934 if (local->monitors == local->open_count) 935 ieee80211_add_virtual_monitor(local); 936 } 937 938 static int ieee80211_stop(struct net_device *dev) 939 { 940 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 941 942 ieee80211_do_stop(sdata, true); 943 944 return 0; 945 } 946 947 static void ieee80211_set_multicast_list(struct net_device *dev) 948 { 949 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 950 struct ieee80211_local *local = sdata->local; 951 int allmulti, promisc, sdata_allmulti, sdata_promisc; 952 953 allmulti = !!(dev->flags & IFF_ALLMULTI); 954 promisc = !!(dev->flags & IFF_PROMISC); 955 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI); 956 sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC); 957 958 if (allmulti != sdata_allmulti) { 959 if (dev->flags & IFF_ALLMULTI) 960 atomic_inc(&local->iff_allmultis); 961 else 962 atomic_dec(&local->iff_allmultis); 963 sdata->flags ^= IEEE80211_SDATA_ALLMULTI; 964 } 965 966 if (promisc != sdata_promisc) { 967 if (dev->flags & IFF_PROMISC) 968 atomic_inc(&local->iff_promiscs); 969 else 970 atomic_dec(&local->iff_promiscs); 971 sdata->flags ^= IEEE80211_SDATA_PROMISC; 972 } 973 974 /* 975 * TODO: If somebody needs this on AP interfaces, 976 * it can be enabled easily but multicast 977 * addresses from VLANs need to be synced. 978 */ 979 if (sdata->vif.type != NL80211_IFTYPE_MONITOR && 980 sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 981 sdata->vif.type != NL80211_IFTYPE_AP) 982 drv_set_multicast_list(local, sdata, &dev->mc); 983 984 spin_lock_bh(&local->filter_lock); 985 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len); 986 spin_unlock_bh(&local->filter_lock); 987 ieee80211_queue_work(&local->hw, &local->reconfig_filter); 988 } 989 990 /* 991 * Called when the netdev is removed or, by the code below, before 992 * the interface type changes. 993 */ 994 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata) 995 { 996 int flushed; 997 int i; 998 999 /* free extra data */ 1000 ieee80211_free_keys(sdata); 1001 1002 ieee80211_debugfs_remove_netdev(sdata); 1003 1004 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) 1005 __skb_queue_purge(&sdata->fragments[i].skb_list); 1006 sdata->fragment_next = 0; 1007 1008 if (ieee80211_vif_is_mesh(&sdata->vif)) 1009 mesh_rmc_free(sdata); 1010 1011 flushed = sta_info_flush(sdata); 1012 WARN_ON(flushed); 1013 } 1014 1015 static void ieee80211_uninit(struct net_device *dev) 1016 { 1017 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev)); 1018 } 1019 1020 static u16 ieee80211_netdev_select_queue(struct net_device *dev, 1021 struct sk_buff *skb) 1022 { 1023 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb); 1024 } 1025 1026 static const struct net_device_ops ieee80211_dataif_ops = { 1027 .ndo_open = ieee80211_open, 1028 .ndo_stop = ieee80211_stop, 1029 .ndo_uninit = ieee80211_uninit, 1030 .ndo_start_xmit = ieee80211_subif_start_xmit, 1031 .ndo_set_rx_mode = ieee80211_set_multicast_list, 1032 .ndo_change_mtu = ieee80211_change_mtu, 1033 .ndo_set_mac_address = ieee80211_change_mac, 1034 .ndo_select_queue = ieee80211_netdev_select_queue, 1035 }; 1036 1037 static u16 ieee80211_monitor_select_queue(struct net_device *dev, 1038 struct sk_buff *skb) 1039 { 1040 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1041 struct ieee80211_local *local = sdata->local; 1042 struct ieee80211_hdr *hdr; 1043 struct ieee80211_radiotap_header *rtap = (void *)skb->data; 1044 1045 if (local->hw.queues < IEEE80211_NUM_ACS) 1046 return 0; 1047 1048 if (skb->len < 4 || 1049 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */) 1050 return 0; /* doesn't matter, frame will be dropped */ 1051 1052 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len)); 1053 1054 return ieee80211_select_queue_80211(sdata, skb, hdr); 1055 } 1056 1057 static const struct net_device_ops ieee80211_monitorif_ops = { 1058 .ndo_open = ieee80211_open, 1059 .ndo_stop = ieee80211_stop, 1060 .ndo_uninit = ieee80211_uninit, 1061 .ndo_start_xmit = ieee80211_monitor_start_xmit, 1062 .ndo_set_rx_mode = ieee80211_set_multicast_list, 1063 .ndo_change_mtu = ieee80211_change_mtu, 1064 .ndo_set_mac_address = eth_mac_addr, 1065 .ndo_select_queue = ieee80211_monitor_select_queue, 1066 }; 1067 1068 static void ieee80211_if_setup(struct net_device *dev) 1069 { 1070 ether_setup(dev); 1071 dev->priv_flags &= ~IFF_TX_SKB_SHARING; 1072 dev->netdev_ops = &ieee80211_dataif_ops; 1073 dev->destructor = free_netdev; 1074 } 1075 1076 static void ieee80211_iface_work(struct work_struct *work) 1077 { 1078 struct ieee80211_sub_if_data *sdata = 1079 container_of(work, struct ieee80211_sub_if_data, work); 1080 struct ieee80211_local *local = sdata->local; 1081 struct sk_buff *skb; 1082 struct sta_info *sta; 1083 struct ieee80211_ra_tid *ra_tid; 1084 1085 if (!ieee80211_sdata_running(sdata)) 1086 return; 1087 1088 if (local->scanning) 1089 return; 1090 1091 /* 1092 * ieee80211_queue_work() should have picked up most cases, 1093 * here we'll pick the rest. 1094 */ 1095 if (WARN(local->suspended, 1096 "interface work scheduled while going to suspend\n")) 1097 return; 1098 1099 /* first process frames */ 1100 while ((skb = skb_dequeue(&sdata->skb_queue))) { 1101 struct ieee80211_mgmt *mgmt = (void *)skb->data; 1102 1103 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) { 1104 ra_tid = (void *)&skb->cb; 1105 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra, 1106 ra_tid->tid); 1107 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) { 1108 ra_tid = (void *)&skb->cb; 1109 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra, 1110 ra_tid->tid); 1111 } else if (ieee80211_is_action(mgmt->frame_control) && 1112 mgmt->u.action.category == WLAN_CATEGORY_BACK) { 1113 int len = skb->len; 1114 1115 mutex_lock(&local->sta_mtx); 1116 sta = sta_info_get_bss(sdata, mgmt->sa); 1117 if (sta) { 1118 switch (mgmt->u.action.u.addba_req.action_code) { 1119 case WLAN_ACTION_ADDBA_REQ: 1120 ieee80211_process_addba_request( 1121 local, sta, mgmt, len); 1122 break; 1123 case WLAN_ACTION_ADDBA_RESP: 1124 ieee80211_process_addba_resp(local, sta, 1125 mgmt, len); 1126 break; 1127 case WLAN_ACTION_DELBA: 1128 ieee80211_process_delba(sdata, sta, 1129 mgmt, len); 1130 break; 1131 default: 1132 WARN_ON(1); 1133 break; 1134 } 1135 } 1136 mutex_unlock(&local->sta_mtx); 1137 } else if (ieee80211_is_data_qos(mgmt->frame_control)) { 1138 struct ieee80211_hdr *hdr = (void *)mgmt; 1139 /* 1140 * So the frame isn't mgmt, but frame_control 1141 * is at the right place anyway, of course, so 1142 * the if statement is correct. 1143 * 1144 * Warn if we have other data frame types here, 1145 * they must not get here. 1146 */ 1147 WARN_ON(hdr->frame_control & 1148 cpu_to_le16(IEEE80211_STYPE_NULLFUNC)); 1149 WARN_ON(!(hdr->seq_ctrl & 1150 cpu_to_le16(IEEE80211_SCTL_FRAG))); 1151 /* 1152 * This was a fragment of a frame, received while 1153 * a block-ack session was active. That cannot be 1154 * right, so terminate the session. 1155 */ 1156 mutex_lock(&local->sta_mtx); 1157 sta = sta_info_get_bss(sdata, mgmt->sa); 1158 if (sta) { 1159 u16 tid = *ieee80211_get_qos_ctl(hdr) & 1160 IEEE80211_QOS_CTL_TID_MASK; 1161 1162 __ieee80211_stop_rx_ba_session( 1163 sta, tid, WLAN_BACK_RECIPIENT, 1164 WLAN_REASON_QSTA_REQUIRE_SETUP, 1165 true); 1166 } 1167 mutex_unlock(&local->sta_mtx); 1168 } else switch (sdata->vif.type) { 1169 case NL80211_IFTYPE_STATION: 1170 ieee80211_sta_rx_queued_mgmt(sdata, skb); 1171 break; 1172 case NL80211_IFTYPE_ADHOC: 1173 ieee80211_ibss_rx_queued_mgmt(sdata, skb); 1174 break; 1175 case NL80211_IFTYPE_MESH_POINT: 1176 if (!ieee80211_vif_is_mesh(&sdata->vif)) 1177 break; 1178 ieee80211_mesh_rx_queued_mgmt(sdata, skb); 1179 break; 1180 default: 1181 WARN(1, "frame for unexpected interface type"); 1182 break; 1183 } 1184 1185 kfree_skb(skb); 1186 } 1187 1188 /* then other type-dependent work */ 1189 switch (sdata->vif.type) { 1190 case NL80211_IFTYPE_STATION: 1191 ieee80211_sta_work(sdata); 1192 break; 1193 case NL80211_IFTYPE_ADHOC: 1194 ieee80211_ibss_work(sdata); 1195 break; 1196 case NL80211_IFTYPE_MESH_POINT: 1197 if (!ieee80211_vif_is_mesh(&sdata->vif)) 1198 break; 1199 ieee80211_mesh_work(sdata); 1200 break; 1201 default: 1202 break; 1203 } 1204 } 1205 1206 static void ieee80211_recalc_smps_work(struct work_struct *work) 1207 { 1208 struct ieee80211_sub_if_data *sdata = 1209 container_of(work, struct ieee80211_sub_if_data, recalc_smps); 1210 1211 ieee80211_recalc_smps(sdata); 1212 } 1213 1214 /* 1215 * Helper function to initialise an interface to a specific type. 1216 */ 1217 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata, 1218 enum nl80211_iftype type) 1219 { 1220 /* clear type-dependent union */ 1221 memset(&sdata->u, 0, sizeof(sdata->u)); 1222 1223 /* and set some type-dependent values */ 1224 sdata->vif.type = type; 1225 sdata->vif.p2p = false; 1226 sdata->wdev.iftype = type; 1227 1228 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE); 1229 sdata->control_port_no_encrypt = false; 1230 1231 sdata->noack_map = 0; 1232 1233 /* only monitor/p2p-device differ */ 1234 if (sdata->dev) { 1235 sdata->dev->netdev_ops = &ieee80211_dataif_ops; 1236 sdata->dev->type = ARPHRD_ETHER; 1237 } 1238 1239 skb_queue_head_init(&sdata->skb_queue); 1240 INIT_WORK(&sdata->work, ieee80211_iface_work); 1241 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work); 1242 1243 switch (type) { 1244 case NL80211_IFTYPE_P2P_GO: 1245 type = NL80211_IFTYPE_AP; 1246 sdata->vif.type = type; 1247 sdata->vif.p2p = true; 1248 /* fall through */ 1249 case NL80211_IFTYPE_AP: 1250 skb_queue_head_init(&sdata->u.ap.ps.bc_buf); 1251 INIT_LIST_HEAD(&sdata->u.ap.vlans); 1252 sdata->vif.bss_conf.bssid = sdata->vif.addr; 1253 break; 1254 case NL80211_IFTYPE_P2P_CLIENT: 1255 type = NL80211_IFTYPE_STATION; 1256 sdata->vif.type = type; 1257 sdata->vif.p2p = true; 1258 /* fall through */ 1259 case NL80211_IFTYPE_STATION: 1260 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid; 1261 ieee80211_sta_setup_sdata(sdata); 1262 break; 1263 case NL80211_IFTYPE_ADHOC: 1264 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid; 1265 ieee80211_ibss_setup_sdata(sdata); 1266 break; 1267 case NL80211_IFTYPE_MESH_POINT: 1268 if (ieee80211_vif_is_mesh(&sdata->vif)) 1269 ieee80211_mesh_init_sdata(sdata); 1270 break; 1271 case NL80211_IFTYPE_MONITOR: 1272 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP; 1273 sdata->dev->netdev_ops = &ieee80211_monitorif_ops; 1274 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL | 1275 MONITOR_FLAG_OTHER_BSS; 1276 break; 1277 case NL80211_IFTYPE_WDS: 1278 sdata->vif.bss_conf.bssid = NULL; 1279 break; 1280 case NL80211_IFTYPE_AP_VLAN: 1281 break; 1282 case NL80211_IFTYPE_P2P_DEVICE: 1283 sdata->vif.bss_conf.bssid = sdata->vif.addr; 1284 break; 1285 case NL80211_IFTYPE_UNSPECIFIED: 1286 case NUM_NL80211_IFTYPES: 1287 BUG(); 1288 break; 1289 } 1290 1291 ieee80211_debugfs_add_netdev(sdata); 1292 } 1293 1294 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata, 1295 enum nl80211_iftype type) 1296 { 1297 struct ieee80211_local *local = sdata->local; 1298 int ret, err; 1299 enum nl80211_iftype internal_type = type; 1300 bool p2p = false; 1301 1302 ASSERT_RTNL(); 1303 1304 if (!local->ops->change_interface) 1305 return -EBUSY; 1306 1307 switch (sdata->vif.type) { 1308 case NL80211_IFTYPE_AP: 1309 case NL80211_IFTYPE_STATION: 1310 case NL80211_IFTYPE_ADHOC: 1311 /* 1312 * Could maybe also all others here? 1313 * Just not sure how that interacts 1314 * with the RX/config path e.g. for 1315 * mesh. 1316 */ 1317 break; 1318 default: 1319 return -EBUSY; 1320 } 1321 1322 switch (type) { 1323 case NL80211_IFTYPE_AP: 1324 case NL80211_IFTYPE_STATION: 1325 case NL80211_IFTYPE_ADHOC: 1326 /* 1327 * Could probably support everything 1328 * but WDS here (WDS do_open can fail 1329 * under memory pressure, which this 1330 * code isn't prepared to handle). 1331 */ 1332 break; 1333 case NL80211_IFTYPE_P2P_CLIENT: 1334 p2p = true; 1335 internal_type = NL80211_IFTYPE_STATION; 1336 break; 1337 case NL80211_IFTYPE_P2P_GO: 1338 p2p = true; 1339 internal_type = NL80211_IFTYPE_AP; 1340 break; 1341 default: 1342 return -EBUSY; 1343 } 1344 1345 ret = ieee80211_check_concurrent_iface(sdata, internal_type); 1346 if (ret) 1347 return ret; 1348 1349 ieee80211_do_stop(sdata, false); 1350 1351 ieee80211_teardown_sdata(sdata); 1352 1353 ret = drv_change_interface(local, sdata, internal_type, p2p); 1354 if (ret) 1355 type = sdata->vif.type; 1356 1357 /* 1358 * Ignore return value here, there's not much we can do since 1359 * the driver changed the interface type internally already. 1360 * The warnings will hopefully make driver authors fix it :-) 1361 */ 1362 ieee80211_check_queues(sdata); 1363 1364 ieee80211_setup_sdata(sdata, type); 1365 1366 err = ieee80211_do_open(&sdata->wdev, false); 1367 WARN(err, "type change: do_open returned %d", err); 1368 1369 return ret; 1370 } 1371 1372 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata, 1373 enum nl80211_iftype type) 1374 { 1375 int ret; 1376 1377 ASSERT_RTNL(); 1378 1379 if (type == ieee80211_vif_type_p2p(&sdata->vif)) 1380 return 0; 1381 1382 if (ieee80211_sdata_running(sdata)) { 1383 ret = ieee80211_runtime_change_iftype(sdata, type); 1384 if (ret) 1385 return ret; 1386 } else { 1387 /* Purge and reset type-dependent state. */ 1388 ieee80211_teardown_sdata(sdata); 1389 ieee80211_setup_sdata(sdata, type); 1390 } 1391 1392 /* reset some values that shouldn't be kept across type changes */ 1393 sdata->drop_unencrypted = 0; 1394 if (type == NL80211_IFTYPE_STATION) 1395 sdata->u.mgd.use_4addr = false; 1396 1397 return 0; 1398 } 1399 1400 static void ieee80211_assign_perm_addr(struct ieee80211_local *local, 1401 u8 *perm_addr, enum nl80211_iftype type) 1402 { 1403 struct ieee80211_sub_if_data *sdata; 1404 u64 mask, start, addr, val, inc; 1405 u8 *m; 1406 u8 tmp_addr[ETH_ALEN]; 1407 int i; 1408 1409 /* default ... something at least */ 1410 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN); 1411 1412 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) && 1413 local->hw.wiphy->n_addresses <= 1) 1414 return; 1415 1416 mutex_lock(&local->iflist_mtx); 1417 1418 switch (type) { 1419 case NL80211_IFTYPE_MONITOR: 1420 /* doesn't matter */ 1421 break; 1422 case NL80211_IFTYPE_WDS: 1423 case NL80211_IFTYPE_AP_VLAN: 1424 /* match up with an AP interface */ 1425 list_for_each_entry(sdata, &local->interfaces, list) { 1426 if (sdata->vif.type != NL80211_IFTYPE_AP) 1427 continue; 1428 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN); 1429 break; 1430 } 1431 /* keep default if no AP interface present */ 1432 break; 1433 case NL80211_IFTYPE_P2P_CLIENT: 1434 case NL80211_IFTYPE_P2P_GO: 1435 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) { 1436 list_for_each_entry(sdata, &local->interfaces, list) { 1437 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) 1438 continue; 1439 if (!ieee80211_sdata_running(sdata)) 1440 continue; 1441 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN); 1442 goto out_unlock; 1443 } 1444 } 1445 /* otherwise fall through */ 1446 default: 1447 /* assign a new address if possible -- try n_addresses first */ 1448 for (i = 0; i < local->hw.wiphy->n_addresses; i++) { 1449 bool used = false; 1450 1451 list_for_each_entry(sdata, &local->interfaces, list) { 1452 if (memcmp(local->hw.wiphy->addresses[i].addr, 1453 sdata->vif.addr, ETH_ALEN) == 0) { 1454 used = true; 1455 break; 1456 } 1457 } 1458 1459 if (!used) { 1460 memcpy(perm_addr, 1461 local->hw.wiphy->addresses[i].addr, 1462 ETH_ALEN); 1463 break; 1464 } 1465 } 1466 1467 /* try mask if available */ 1468 if (is_zero_ether_addr(local->hw.wiphy->addr_mask)) 1469 break; 1470 1471 m = local->hw.wiphy->addr_mask; 1472 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 1473 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 1474 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 1475 1476 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) { 1477 /* not a contiguous mask ... not handled now! */ 1478 pr_info("not contiguous\n"); 1479 break; 1480 } 1481 1482 m = local->hw.wiphy->perm_addr; 1483 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 1484 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 1485 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 1486 1487 inc = 1ULL<<__ffs64(mask); 1488 val = (start & mask); 1489 addr = (start & ~mask) | (val & mask); 1490 do { 1491 bool used = false; 1492 1493 tmp_addr[5] = addr >> 0*8; 1494 tmp_addr[4] = addr >> 1*8; 1495 tmp_addr[3] = addr >> 2*8; 1496 tmp_addr[2] = addr >> 3*8; 1497 tmp_addr[1] = addr >> 4*8; 1498 tmp_addr[0] = addr >> 5*8; 1499 1500 val += inc; 1501 1502 list_for_each_entry(sdata, &local->interfaces, list) { 1503 if (memcmp(tmp_addr, sdata->vif.addr, 1504 ETH_ALEN) == 0) { 1505 used = true; 1506 break; 1507 } 1508 } 1509 1510 if (!used) { 1511 memcpy(perm_addr, tmp_addr, ETH_ALEN); 1512 break; 1513 } 1514 addr = (start & ~mask) | (val & mask); 1515 } while (addr != start); 1516 1517 break; 1518 } 1519 1520 out_unlock: 1521 mutex_unlock(&local->iflist_mtx); 1522 } 1523 1524 static void ieee80211_cleanup_sdata_stas_wk(struct work_struct *wk) 1525 { 1526 struct ieee80211_sub_if_data *sdata; 1527 1528 sdata = container_of(wk, struct ieee80211_sub_if_data, cleanup_stations_wk); 1529 1530 ieee80211_cleanup_sdata_stas(sdata); 1531 } 1532 1533 int ieee80211_if_add(struct ieee80211_local *local, const char *name, 1534 struct wireless_dev **new_wdev, enum nl80211_iftype type, 1535 struct vif_params *params) 1536 { 1537 struct net_device *ndev = NULL; 1538 struct ieee80211_sub_if_data *sdata = NULL; 1539 int ret, i; 1540 int txqs = 1; 1541 1542 ASSERT_RTNL(); 1543 1544 if (type == NL80211_IFTYPE_P2P_DEVICE) { 1545 struct wireless_dev *wdev; 1546 1547 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, 1548 GFP_KERNEL); 1549 if (!sdata) 1550 return -ENOMEM; 1551 wdev = &sdata->wdev; 1552 1553 sdata->dev = NULL; 1554 strlcpy(sdata->name, name, IFNAMSIZ); 1555 ieee80211_assign_perm_addr(local, wdev->address, type); 1556 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN); 1557 } else { 1558 if (local->hw.queues >= IEEE80211_NUM_ACS) 1559 txqs = IEEE80211_NUM_ACS; 1560 1561 ndev = alloc_netdev_mqs(sizeof(*sdata) + 1562 local->hw.vif_data_size, 1563 name, ieee80211_if_setup, txqs, 1); 1564 if (!ndev) 1565 return -ENOMEM; 1566 dev_net_set(ndev, wiphy_net(local->hw.wiphy)); 1567 1568 ndev->needed_headroom = local->tx_headroom + 1569 4*6 /* four MAC addresses */ 1570 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */ 1571 + 6 /* mesh */ 1572 + 8 /* rfc1042/bridge tunnel */ 1573 - ETH_HLEN /* ethernet hard_header_len */ 1574 + IEEE80211_ENCRYPT_HEADROOM; 1575 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM; 1576 1577 ret = dev_alloc_name(ndev, ndev->name); 1578 if (ret < 0) { 1579 free_netdev(ndev); 1580 return ret; 1581 } 1582 1583 ieee80211_assign_perm_addr(local, ndev->perm_addr, type); 1584 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN); 1585 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy)); 1586 1587 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */ 1588 sdata = netdev_priv(ndev); 1589 ndev->ieee80211_ptr = &sdata->wdev; 1590 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN); 1591 memcpy(sdata->name, ndev->name, IFNAMSIZ); 1592 1593 sdata->dev = ndev; 1594 } 1595 1596 /* initialise type-independent data */ 1597 sdata->wdev.wiphy = local->hw.wiphy; 1598 sdata->local = local; 1599 1600 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) 1601 skb_queue_head_init(&sdata->fragments[i].skb_list); 1602 1603 INIT_LIST_HEAD(&sdata->key_list); 1604 1605 spin_lock_init(&sdata->cleanup_stations_lock); 1606 INIT_LIST_HEAD(&sdata->cleanup_stations); 1607 INIT_WORK(&sdata->cleanup_stations_wk, ieee80211_cleanup_sdata_stas_wk); 1608 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work, 1609 ieee80211_dfs_cac_timer_work); 1610 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk, 1611 ieee80211_delayed_tailroom_dec); 1612 1613 for (i = 0; i < IEEE80211_NUM_BANDS; i++) { 1614 struct ieee80211_supported_band *sband; 1615 sband = local->hw.wiphy->bands[i]; 1616 sdata->rc_rateidx_mask[i] = 1617 sband ? (1 << sband->n_bitrates) - 1 : 0; 1618 if (sband) 1619 memcpy(sdata->rc_rateidx_mcs_mask[i], 1620 sband->ht_cap.mcs.rx_mask, 1621 sizeof(sdata->rc_rateidx_mcs_mask[i])); 1622 else 1623 memset(sdata->rc_rateidx_mcs_mask[i], 0, 1624 sizeof(sdata->rc_rateidx_mcs_mask[i])); 1625 } 1626 1627 ieee80211_set_default_queues(sdata); 1628 1629 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL; 1630 sdata->user_power_level = local->user_power_level; 1631 1632 /* setup type-dependent data */ 1633 ieee80211_setup_sdata(sdata, type); 1634 1635 if (ndev) { 1636 if (params) { 1637 ndev->ieee80211_ptr->use_4addr = params->use_4addr; 1638 if (type == NL80211_IFTYPE_STATION) 1639 sdata->u.mgd.use_4addr = params->use_4addr; 1640 } 1641 1642 ndev->features |= local->hw.netdev_features; 1643 1644 ret = register_netdevice(ndev); 1645 if (ret) { 1646 free_netdev(ndev); 1647 return ret; 1648 } 1649 } 1650 1651 mutex_lock(&local->iflist_mtx); 1652 list_add_tail_rcu(&sdata->list, &local->interfaces); 1653 mutex_unlock(&local->iflist_mtx); 1654 1655 if (new_wdev) 1656 *new_wdev = &sdata->wdev; 1657 1658 return 0; 1659 } 1660 1661 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata) 1662 { 1663 ASSERT_RTNL(); 1664 1665 mutex_lock(&sdata->local->iflist_mtx); 1666 list_del_rcu(&sdata->list); 1667 mutex_unlock(&sdata->local->iflist_mtx); 1668 1669 synchronize_rcu(); 1670 1671 if (sdata->dev) { 1672 unregister_netdevice(sdata->dev); 1673 } else { 1674 cfg80211_unregister_wdev(&sdata->wdev); 1675 kfree(sdata); 1676 } 1677 } 1678 1679 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata) 1680 { 1681 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state))) 1682 return; 1683 ieee80211_do_stop(sdata, true); 1684 ieee80211_teardown_sdata(sdata); 1685 } 1686 1687 /* 1688 * Remove all interfaces, may only be called at hardware unregistration 1689 * time because it doesn't do RCU-safe list removals. 1690 */ 1691 void ieee80211_remove_interfaces(struct ieee80211_local *local) 1692 { 1693 struct ieee80211_sub_if_data *sdata, *tmp; 1694 LIST_HEAD(unreg_list); 1695 LIST_HEAD(wdev_list); 1696 1697 ASSERT_RTNL(); 1698 1699 mutex_lock(&local->iflist_mtx); 1700 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) { 1701 list_del(&sdata->list); 1702 1703 if (sdata->dev) 1704 unregister_netdevice_queue(sdata->dev, &unreg_list); 1705 else 1706 list_add(&sdata->list, &wdev_list); 1707 } 1708 mutex_unlock(&local->iflist_mtx); 1709 unregister_netdevice_many(&unreg_list); 1710 list_del(&unreg_list); 1711 1712 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) { 1713 list_del(&sdata->list); 1714 cfg80211_unregister_wdev(&sdata->wdev); 1715 kfree(sdata); 1716 } 1717 } 1718 1719 static int netdev_notify(struct notifier_block *nb, 1720 unsigned long state, 1721 void *ndev) 1722 { 1723 struct net_device *dev = ndev; 1724 struct ieee80211_sub_if_data *sdata; 1725 1726 if (state != NETDEV_CHANGENAME) 1727 return 0; 1728 1729 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy) 1730 return 0; 1731 1732 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid) 1733 return 0; 1734 1735 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1736 1737 memcpy(sdata->name, dev->name, IFNAMSIZ); 1738 1739 ieee80211_debugfs_rename_netdev(sdata); 1740 return 0; 1741 } 1742 1743 static struct notifier_block mac80211_netdev_notifier = { 1744 .notifier_call = netdev_notify, 1745 }; 1746 1747 int ieee80211_iface_init(void) 1748 { 1749 return register_netdevice_notifier(&mac80211_netdev_notifier); 1750 } 1751 1752 void ieee80211_iface_exit(void) 1753 { 1754 unregister_netdevice_notifier(&mac80211_netdev_notifier); 1755 } 1756