xref: /openbmc/linux/net/mac80211/main.c (revision 95e9fd10)
1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License version 2 as
8  * published by the Free Software Foundation.
9  */
10 
11 #include <net/mac80211.h>
12 #include <linux/module.h>
13 #include <linux/init.h>
14 #include <linux/netdevice.h>
15 #include <linux/types.h>
16 #include <linux/slab.h>
17 #include <linux/skbuff.h>
18 #include <linux/etherdevice.h>
19 #include <linux/if_arp.h>
20 #include <linux/rtnetlink.h>
21 #include <linux/bitmap.h>
22 #include <linux/pm_qos.h>
23 #include <linux/inetdevice.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
26 
27 #include "ieee80211_i.h"
28 #include "driver-ops.h"
29 #include "rate.h"
30 #include "mesh.h"
31 #include "wep.h"
32 #include "led.h"
33 #include "cfg.h"
34 #include "debugfs.h"
35 
36 static struct lock_class_key ieee80211_rx_skb_queue_class;
37 
38 void ieee80211_configure_filter(struct ieee80211_local *local)
39 {
40 	u64 mc;
41 	unsigned int changed_flags;
42 	unsigned int new_flags = 0;
43 
44 	if (atomic_read(&local->iff_promiscs))
45 		new_flags |= FIF_PROMISC_IN_BSS;
46 
47 	if (atomic_read(&local->iff_allmultis))
48 		new_flags |= FIF_ALLMULTI;
49 
50 	if (local->monitors || test_bit(SCAN_SW_SCANNING, &local->scanning) ||
51 	    test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning))
52 		new_flags |= FIF_BCN_PRBRESP_PROMISC;
53 
54 	if (local->fif_probe_req || local->probe_req_reg)
55 		new_flags |= FIF_PROBE_REQ;
56 
57 	if (local->fif_fcsfail)
58 		new_flags |= FIF_FCSFAIL;
59 
60 	if (local->fif_plcpfail)
61 		new_flags |= FIF_PLCPFAIL;
62 
63 	if (local->fif_control)
64 		new_flags |= FIF_CONTROL;
65 
66 	if (local->fif_other_bss)
67 		new_flags |= FIF_OTHER_BSS;
68 
69 	if (local->fif_pspoll)
70 		new_flags |= FIF_PSPOLL;
71 
72 	spin_lock_bh(&local->filter_lock);
73 	changed_flags = local->filter_flags ^ new_flags;
74 
75 	mc = drv_prepare_multicast(local, &local->mc_list);
76 	spin_unlock_bh(&local->filter_lock);
77 
78 	/* be a bit nasty */
79 	new_flags |= (1<<31);
80 
81 	drv_configure_filter(local, changed_flags, &new_flags, mc);
82 
83 	WARN_ON(new_flags & (1<<31));
84 
85 	local->filter_flags = new_flags & ~(1<<31);
86 }
87 
88 static void ieee80211_reconfig_filter(struct work_struct *work)
89 {
90 	struct ieee80211_local *local =
91 		container_of(work, struct ieee80211_local, reconfig_filter);
92 
93 	ieee80211_configure_filter(local);
94 }
95 
96 int ieee80211_hw_config(struct ieee80211_local *local, u32 changed)
97 {
98 	struct ieee80211_channel *chan;
99 	int ret = 0;
100 	int power;
101 	enum nl80211_channel_type channel_type;
102 	u32 offchannel_flag;
103 
104 	might_sleep();
105 
106 	offchannel_flag = local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
107 	if (local->scan_channel) {
108 		chan = local->scan_channel;
109 		/* If scanning on oper channel, use whatever channel-type
110 		 * is currently in use.
111 		 */
112 		if (chan == local->oper_channel)
113 			channel_type = local->_oper_channel_type;
114 		else
115 			channel_type = NL80211_CHAN_NO_HT;
116 	} else if (local->tmp_channel) {
117 		chan = local->tmp_channel;
118 		channel_type = local->tmp_channel_type;
119 	} else {
120 		chan = local->oper_channel;
121 		channel_type = local->_oper_channel_type;
122 	}
123 
124 	if (chan != local->oper_channel ||
125 	    channel_type != local->_oper_channel_type)
126 		local->hw.conf.flags |= IEEE80211_CONF_OFFCHANNEL;
127 	else
128 		local->hw.conf.flags &= ~IEEE80211_CONF_OFFCHANNEL;
129 
130 	offchannel_flag ^= local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
131 
132 	if (offchannel_flag || chan != local->hw.conf.channel ||
133 	    channel_type != local->hw.conf.channel_type) {
134 		local->hw.conf.channel = chan;
135 		local->hw.conf.channel_type = channel_type;
136 		changed |= IEEE80211_CONF_CHANGE_CHANNEL;
137 	}
138 
139 	if (!conf_is_ht(&local->hw.conf)) {
140 		/*
141 		 * mac80211.h documents that this is only valid
142 		 * when the channel is set to an HT type, and
143 		 * that otherwise STATIC is used.
144 		 */
145 		local->hw.conf.smps_mode = IEEE80211_SMPS_STATIC;
146 	} else if (local->hw.conf.smps_mode != local->smps_mode) {
147 		local->hw.conf.smps_mode = local->smps_mode;
148 		changed |= IEEE80211_CONF_CHANGE_SMPS;
149 	}
150 
151 	if (test_bit(SCAN_SW_SCANNING, &local->scanning) ||
152 	    test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning) ||
153 	    test_bit(SCAN_HW_SCANNING, &local->scanning))
154 		power = chan->max_power;
155 	else
156 		power = local->power_constr_level ?
157 			min(chan->max_power,
158 				(chan->max_reg_power  - local->power_constr_level)) :
159 			chan->max_power;
160 
161 	if (local->user_power_level >= 0)
162 		power = min(power, local->user_power_level);
163 
164 	if (local->hw.conf.power_level != power) {
165 		changed |= IEEE80211_CONF_CHANGE_POWER;
166 		local->hw.conf.power_level = power;
167 	}
168 
169 	if (changed && local->open_count) {
170 		ret = drv_config(local, changed);
171 		/*
172 		 * Goal:
173 		 * HW reconfiguration should never fail, the driver has told
174 		 * us what it can support so it should live up to that promise.
175 		 *
176 		 * Current status:
177 		 * rfkill is not integrated with mac80211 and a
178 		 * configuration command can thus fail if hardware rfkill
179 		 * is enabled
180 		 *
181 		 * FIXME: integrate rfkill with mac80211 and then add this
182 		 * WARN_ON() back
183 		 *
184 		 */
185 		/* WARN_ON(ret); */
186 	}
187 
188 	return ret;
189 }
190 
191 void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data *sdata,
192 				      u32 changed)
193 {
194 	struct ieee80211_local *local = sdata->local;
195 	static const u8 zero[ETH_ALEN] = { 0 };
196 
197 	if (!changed)
198 		return;
199 
200 	if (sdata->vif.type == NL80211_IFTYPE_STATION) {
201 		sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
202 	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
203 		sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
204 	else if (sdata->vif.type == NL80211_IFTYPE_AP)
205 		sdata->vif.bss_conf.bssid = sdata->vif.addr;
206 	else if (sdata->vif.type == NL80211_IFTYPE_WDS)
207 		sdata->vif.bss_conf.bssid = NULL;
208 	else if (ieee80211_vif_is_mesh(&sdata->vif)) {
209 		sdata->vif.bss_conf.bssid = zero;
210 	} else {
211 		WARN_ON(1);
212 		return;
213 	}
214 
215 	switch (sdata->vif.type) {
216 	case NL80211_IFTYPE_AP:
217 	case NL80211_IFTYPE_ADHOC:
218 	case NL80211_IFTYPE_WDS:
219 	case NL80211_IFTYPE_MESH_POINT:
220 		break;
221 	default:
222 		/* do not warn to simplify caller in scan.c */
223 		changed &= ~BSS_CHANGED_BEACON_ENABLED;
224 		if (WARN_ON(changed & BSS_CHANGED_BEACON))
225 			return;
226 		break;
227 	}
228 
229 	if (changed & BSS_CHANGED_BEACON_ENABLED) {
230 		if (local->quiescing || !ieee80211_sdata_running(sdata) ||
231 		    test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state)) {
232 			sdata->vif.bss_conf.enable_beacon = false;
233 		} else {
234 			/*
235 			 * Beacon should be enabled, but AP mode must
236 			 * check whether there is a beacon configured.
237 			 */
238 			switch (sdata->vif.type) {
239 			case NL80211_IFTYPE_AP:
240 				sdata->vif.bss_conf.enable_beacon =
241 					!!sdata->u.ap.beacon;
242 				break;
243 			case NL80211_IFTYPE_ADHOC:
244 				sdata->vif.bss_conf.enable_beacon =
245 					!!sdata->u.ibss.presp;
246 				break;
247 #ifdef CONFIG_MAC80211_MESH
248 			case NL80211_IFTYPE_MESH_POINT:
249 				sdata->vif.bss_conf.enable_beacon =
250 					!!sdata->u.mesh.mesh_id_len;
251 				break;
252 #endif
253 			default:
254 				/* not reached */
255 				WARN_ON(1);
256 				break;
257 			}
258 		}
259 	}
260 
261 	drv_bss_info_changed(local, sdata, &sdata->vif.bss_conf, changed);
262 }
263 
264 u32 ieee80211_reset_erp_info(struct ieee80211_sub_if_data *sdata)
265 {
266 	sdata->vif.bss_conf.use_cts_prot = false;
267 	sdata->vif.bss_conf.use_short_preamble = false;
268 	sdata->vif.bss_conf.use_short_slot = false;
269 	return BSS_CHANGED_ERP_CTS_PROT |
270 	       BSS_CHANGED_ERP_PREAMBLE |
271 	       BSS_CHANGED_ERP_SLOT;
272 }
273 
274 static void ieee80211_tasklet_handler(unsigned long data)
275 {
276 	struct ieee80211_local *local = (struct ieee80211_local *) data;
277 	struct sta_info *sta, *tmp;
278 	struct skb_eosp_msg_data *eosp_data;
279 	struct sk_buff *skb;
280 
281 	while ((skb = skb_dequeue(&local->skb_queue)) ||
282 	       (skb = skb_dequeue(&local->skb_queue_unreliable))) {
283 		switch (skb->pkt_type) {
284 		case IEEE80211_RX_MSG:
285 			/* Clear skb->pkt_type in order to not confuse kernel
286 			 * netstack. */
287 			skb->pkt_type = 0;
288 			ieee80211_rx(&local->hw, skb);
289 			break;
290 		case IEEE80211_TX_STATUS_MSG:
291 			skb->pkt_type = 0;
292 			ieee80211_tx_status(&local->hw, skb);
293 			break;
294 		case IEEE80211_EOSP_MSG:
295 			eosp_data = (void *)skb->cb;
296 			for_each_sta_info(local, eosp_data->sta, sta, tmp) {
297 				/* skip wrong virtual interface */
298 				if (memcmp(eosp_data->iface,
299 					   sta->sdata->vif.addr, ETH_ALEN))
300 					continue;
301 				clear_sta_flag(sta, WLAN_STA_SP);
302 				break;
303 			}
304 			dev_kfree_skb(skb);
305 			break;
306 		default:
307 			WARN(1, "mac80211: Packet is of unknown type %d\n",
308 			     skb->pkt_type);
309 			dev_kfree_skb(skb);
310 			break;
311 		}
312 	}
313 }
314 
315 static void ieee80211_restart_work(struct work_struct *work)
316 {
317 	struct ieee80211_local *local =
318 		container_of(work, struct ieee80211_local, restart_work);
319 
320 	/* wait for scan work complete */
321 	flush_workqueue(local->workqueue);
322 
323 	mutex_lock(&local->mtx);
324 	WARN(test_bit(SCAN_HW_SCANNING, &local->scanning) ||
325 	     rcu_dereference_protected(local->sched_scan_sdata,
326 				       lockdep_is_held(&local->mtx)),
327 		"%s called with hardware scan in progress\n", __func__);
328 	mutex_unlock(&local->mtx);
329 
330 	rtnl_lock();
331 	ieee80211_scan_cancel(local);
332 	ieee80211_reconfig(local);
333 	rtnl_unlock();
334 }
335 
336 void ieee80211_restart_hw(struct ieee80211_hw *hw)
337 {
338 	struct ieee80211_local *local = hw_to_local(hw);
339 
340 	trace_api_restart_hw(local);
341 
342 	wiphy_info(hw->wiphy,
343 		   "Hardware restart was requested\n");
344 
345 	/* use this reason, ieee80211_reconfig will unblock it */
346 	ieee80211_stop_queues_by_reason(hw,
347 		IEEE80211_QUEUE_STOP_REASON_SUSPEND);
348 
349 	/*
350 	 * Stop all Rx during the reconfig. We don't want state changes
351 	 * or driver callbacks while this is in progress.
352 	 */
353 	local->in_reconfig = true;
354 	barrier();
355 
356 	schedule_work(&local->restart_work);
357 }
358 EXPORT_SYMBOL(ieee80211_restart_hw);
359 
360 static void ieee80211_recalc_smps_work(struct work_struct *work)
361 {
362 	struct ieee80211_local *local =
363 		container_of(work, struct ieee80211_local, recalc_smps);
364 
365 	mutex_lock(&local->iflist_mtx);
366 	ieee80211_recalc_smps(local);
367 	mutex_unlock(&local->iflist_mtx);
368 }
369 
370 #ifdef CONFIG_INET
371 static int ieee80211_ifa_changed(struct notifier_block *nb,
372 				 unsigned long data, void *arg)
373 {
374 	struct in_ifaddr *ifa = arg;
375 	struct ieee80211_local *local =
376 		container_of(nb, struct ieee80211_local,
377 			     ifa_notifier);
378 	struct net_device *ndev = ifa->ifa_dev->dev;
379 	struct wireless_dev *wdev = ndev->ieee80211_ptr;
380 	struct in_device *idev;
381 	struct ieee80211_sub_if_data *sdata;
382 	struct ieee80211_bss_conf *bss_conf;
383 	struct ieee80211_if_managed *ifmgd;
384 	int c = 0;
385 
386 	/* Make sure it's our interface that got changed */
387 	if (!wdev)
388 		return NOTIFY_DONE;
389 
390 	if (wdev->wiphy != local->hw.wiphy)
391 		return NOTIFY_DONE;
392 
393 	sdata = IEEE80211_DEV_TO_SUB_IF(ndev);
394 	bss_conf = &sdata->vif.bss_conf;
395 
396 	/* ARP filtering is only supported in managed mode */
397 	if (sdata->vif.type != NL80211_IFTYPE_STATION)
398 		return NOTIFY_DONE;
399 
400 	idev = __in_dev_get_rtnl(sdata->dev);
401 	if (!idev)
402 		return NOTIFY_DONE;
403 
404 	ifmgd = &sdata->u.mgd;
405 	mutex_lock(&ifmgd->mtx);
406 
407 	/* Copy the addresses to the bss_conf list */
408 	ifa = idev->ifa_list;
409 	while (c < IEEE80211_BSS_ARP_ADDR_LIST_LEN && ifa) {
410 		bss_conf->arp_addr_list[c] = ifa->ifa_address;
411 		ifa = ifa->ifa_next;
412 		c++;
413 	}
414 
415 	/* If not all addresses fit the list, disable filtering */
416 	if (ifa) {
417 		sdata->arp_filter_state = false;
418 		c = 0;
419 	} else {
420 		sdata->arp_filter_state = true;
421 	}
422 	bss_conf->arp_addr_cnt = c;
423 
424 	/* Configure driver only if associated (which also implies it is up) */
425 	if (ifmgd->associated) {
426 		bss_conf->arp_filter_enabled = sdata->arp_filter_state;
427 		ieee80211_bss_info_change_notify(sdata,
428 						 BSS_CHANGED_ARP_FILTER);
429 	}
430 
431 	mutex_unlock(&ifmgd->mtx);
432 
433 	return NOTIFY_DONE;
434 }
435 #endif
436 
437 static int ieee80211_napi_poll(struct napi_struct *napi, int budget)
438 {
439 	struct ieee80211_local *local =
440 		container_of(napi, struct ieee80211_local, napi);
441 
442 	return local->ops->napi_poll(&local->hw, budget);
443 }
444 
445 void ieee80211_napi_schedule(struct ieee80211_hw *hw)
446 {
447 	struct ieee80211_local *local = hw_to_local(hw);
448 
449 	napi_schedule(&local->napi);
450 }
451 EXPORT_SYMBOL(ieee80211_napi_schedule);
452 
453 void ieee80211_napi_complete(struct ieee80211_hw *hw)
454 {
455 	struct ieee80211_local *local = hw_to_local(hw);
456 
457 	napi_complete(&local->napi);
458 }
459 EXPORT_SYMBOL(ieee80211_napi_complete);
460 
461 /* There isn't a lot of sense in it, but you can transmit anything you like */
462 static const struct ieee80211_txrx_stypes
463 ieee80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
464 	[NL80211_IFTYPE_ADHOC] = {
465 		.tx = 0xffff,
466 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
467 			BIT(IEEE80211_STYPE_AUTH >> 4) |
468 			BIT(IEEE80211_STYPE_DEAUTH >> 4),
469 	},
470 	[NL80211_IFTYPE_STATION] = {
471 		.tx = 0xffff,
472 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
473 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
474 	},
475 	[NL80211_IFTYPE_AP] = {
476 		.tx = 0xffff,
477 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
478 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
479 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
480 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
481 			BIT(IEEE80211_STYPE_AUTH >> 4) |
482 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
483 			BIT(IEEE80211_STYPE_ACTION >> 4),
484 	},
485 	[NL80211_IFTYPE_AP_VLAN] = {
486 		/* copy AP */
487 		.tx = 0xffff,
488 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
489 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
490 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
491 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
492 			BIT(IEEE80211_STYPE_AUTH >> 4) |
493 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
494 			BIT(IEEE80211_STYPE_ACTION >> 4),
495 	},
496 	[NL80211_IFTYPE_P2P_CLIENT] = {
497 		.tx = 0xffff,
498 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
499 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
500 	},
501 	[NL80211_IFTYPE_P2P_GO] = {
502 		.tx = 0xffff,
503 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
504 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
505 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
506 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
507 			BIT(IEEE80211_STYPE_AUTH >> 4) |
508 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
509 			BIT(IEEE80211_STYPE_ACTION >> 4),
510 	},
511 	[NL80211_IFTYPE_MESH_POINT] = {
512 		.tx = 0xffff,
513 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
514 			BIT(IEEE80211_STYPE_AUTH >> 4) |
515 			BIT(IEEE80211_STYPE_DEAUTH >> 4),
516 	},
517 };
518 
519 static const struct ieee80211_ht_cap mac80211_ht_capa_mod_mask = {
520 	.ampdu_params_info = IEEE80211_HT_AMPDU_PARM_FACTOR |
521 			     IEEE80211_HT_AMPDU_PARM_DENSITY,
522 
523 	.cap_info = cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
524 				IEEE80211_HT_CAP_MAX_AMSDU |
525 				IEEE80211_HT_CAP_SGI_40),
526 	.mcs = {
527 		.rx_mask = { 0xff, 0xff, 0xff, 0xff, 0xff,
528 			     0xff, 0xff, 0xff, 0xff, 0xff, },
529 	},
530 };
531 
532 struct ieee80211_hw *ieee80211_alloc_hw(size_t priv_data_len,
533 					const struct ieee80211_ops *ops)
534 {
535 	struct ieee80211_local *local;
536 	int priv_size, i;
537 	struct wiphy *wiphy;
538 
539 	if (WARN_ON(ops->sta_state && (ops->sta_add || ops->sta_remove)))
540 		return NULL;
541 
542 	/* Ensure 32-byte alignment of our private data and hw private data.
543 	 * We use the wiphy priv data for both our ieee80211_local and for
544 	 * the driver's private data
545 	 *
546 	 * In memory it'll be like this:
547 	 *
548 	 * +-------------------------+
549 	 * | struct wiphy	    |
550 	 * +-------------------------+
551 	 * | struct ieee80211_local  |
552 	 * +-------------------------+
553 	 * | driver's private data   |
554 	 * +-------------------------+
555 	 *
556 	 */
557 	priv_size = ALIGN(sizeof(*local), NETDEV_ALIGN) + priv_data_len;
558 
559 	wiphy = wiphy_new(&mac80211_config_ops, priv_size);
560 
561 	if (!wiphy)
562 		return NULL;
563 
564 	wiphy->mgmt_stypes = ieee80211_default_mgmt_stypes;
565 
566 	wiphy->privid = mac80211_wiphy_privid;
567 
568 	wiphy->flags |= WIPHY_FLAG_NETNS_OK |
569 			WIPHY_FLAG_4ADDR_AP |
570 			WIPHY_FLAG_4ADDR_STATION |
571 			WIPHY_FLAG_REPORTS_OBSS |
572 			WIPHY_FLAG_OFFCHAN_TX;
573 
574 	if (ops->remain_on_channel)
575 		wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
576 
577 	wiphy->features = NL80211_FEATURE_SK_TX_STATUS |
578 			  NL80211_FEATURE_HT_IBSS;
579 
580 	if (!ops->set_key)
581 		wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
582 
583 	wiphy->bss_priv_size = sizeof(struct ieee80211_bss);
584 
585 	local = wiphy_priv(wiphy);
586 
587 	local->hw.wiphy = wiphy;
588 
589 	local->hw.priv = (char *)local + ALIGN(sizeof(*local), NETDEV_ALIGN);
590 
591 	BUG_ON(!ops->tx);
592 	BUG_ON(!ops->start);
593 	BUG_ON(!ops->stop);
594 	BUG_ON(!ops->config);
595 	BUG_ON(!ops->add_interface);
596 	BUG_ON(!ops->remove_interface);
597 	BUG_ON(!ops->configure_filter);
598 	local->ops = ops;
599 
600 	/* set up some defaults */
601 	local->hw.queues = 1;
602 	local->hw.max_rates = 1;
603 	local->hw.max_report_rates = 0;
604 	local->hw.max_rx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF;
605 	local->hw.max_tx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF;
606 	local->hw.offchannel_tx_hw_queue = IEEE80211_INVAL_HW_QUEUE;
607 	local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
608 	local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
609 	local->hw.radiotap_mcs_details = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
610 					 IEEE80211_RADIOTAP_MCS_HAVE_GI |
611 					 IEEE80211_RADIOTAP_MCS_HAVE_BW;
612 	local->user_power_level = -1;
613 	wiphy->ht_capa_mod_mask = &mac80211_ht_capa_mod_mask;
614 
615 	INIT_LIST_HEAD(&local->interfaces);
616 
617 	__hw_addr_init(&local->mc_list);
618 
619 	mutex_init(&local->iflist_mtx);
620 	mutex_init(&local->mtx);
621 
622 	mutex_init(&local->key_mtx);
623 	spin_lock_init(&local->filter_lock);
624 	spin_lock_init(&local->queue_stop_reason_lock);
625 
626 	/*
627 	 * The rx_skb_queue is only accessed from tasklets,
628 	 * but other SKB queues are used from within IRQ
629 	 * context. Therefore, this one needs a different
630 	 * locking class so our direct, non-irq-safe use of
631 	 * the queue's lock doesn't throw lockdep warnings.
632 	 */
633 	skb_queue_head_init_class(&local->rx_skb_queue,
634 				  &ieee80211_rx_skb_queue_class);
635 
636 	INIT_DELAYED_WORK(&local->scan_work, ieee80211_scan_work);
637 
638 	INIT_WORK(&local->restart_work, ieee80211_restart_work);
639 
640 	INIT_WORK(&local->reconfig_filter, ieee80211_reconfig_filter);
641 	INIT_WORK(&local->recalc_smps, ieee80211_recalc_smps_work);
642 	local->smps_mode = IEEE80211_SMPS_OFF;
643 
644 	INIT_WORK(&local->dynamic_ps_enable_work,
645 		  ieee80211_dynamic_ps_enable_work);
646 	INIT_WORK(&local->dynamic_ps_disable_work,
647 		  ieee80211_dynamic_ps_disable_work);
648 	setup_timer(&local->dynamic_ps_timer,
649 		    ieee80211_dynamic_ps_timer, (unsigned long) local);
650 
651 	INIT_WORK(&local->sched_scan_stopped_work,
652 		  ieee80211_sched_scan_stopped_work);
653 
654 	spin_lock_init(&local->ack_status_lock);
655 	idr_init(&local->ack_status_frames);
656 	/* preallocate at least one entry */
657 	idr_pre_get(&local->ack_status_frames, GFP_KERNEL);
658 
659 	sta_info_init(local);
660 
661 	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
662 		skb_queue_head_init(&local->pending[i]);
663 		atomic_set(&local->agg_queue_stop[i], 0);
664 	}
665 	tasklet_init(&local->tx_pending_tasklet, ieee80211_tx_pending,
666 		     (unsigned long)local);
667 
668 	tasklet_init(&local->tasklet,
669 		     ieee80211_tasklet_handler,
670 		     (unsigned long) local);
671 
672 	skb_queue_head_init(&local->skb_queue);
673 	skb_queue_head_init(&local->skb_queue_unreliable);
674 
675 	/* init dummy netdev for use w/ NAPI */
676 	init_dummy_netdev(&local->napi_dev);
677 
678 	ieee80211_led_names(local);
679 
680 	ieee80211_roc_setup(local);
681 
682 	return &local->hw;
683 }
684 EXPORT_SYMBOL(ieee80211_alloc_hw);
685 
686 int ieee80211_register_hw(struct ieee80211_hw *hw)
687 {
688 	struct ieee80211_local *local = hw_to_local(hw);
689 	int result, i;
690 	enum ieee80211_band band;
691 	int channels, max_bitrates;
692 	bool supp_ht, supp_vht;
693 	netdev_features_t feature_whitelist;
694 	static const u32 cipher_suites[] = {
695 		/* keep WEP first, it may be removed below */
696 		WLAN_CIPHER_SUITE_WEP40,
697 		WLAN_CIPHER_SUITE_WEP104,
698 		WLAN_CIPHER_SUITE_TKIP,
699 		WLAN_CIPHER_SUITE_CCMP,
700 
701 		/* keep last -- depends on hw flags! */
702 		WLAN_CIPHER_SUITE_AES_CMAC
703 	};
704 
705 	if (hw->flags & IEEE80211_HW_QUEUE_CONTROL &&
706 	    (local->hw.offchannel_tx_hw_queue == IEEE80211_INVAL_HW_QUEUE ||
707 	     local->hw.offchannel_tx_hw_queue >= local->hw.queues))
708 		return -EINVAL;
709 
710 #ifdef CONFIG_PM
711 	if ((hw->wiphy->wowlan.flags || hw->wiphy->wowlan.n_patterns) &&
712 	    (!local->ops->suspend || !local->ops->resume))
713 		return -EINVAL;
714 #endif
715 
716 	if ((hw->flags & IEEE80211_HW_SCAN_WHILE_IDLE) && !local->ops->hw_scan)
717 		return -EINVAL;
718 
719 	/* Only HW csum features are currently compatible with mac80211 */
720 	feature_whitelist = NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM |
721 			    NETIF_F_HW_CSUM;
722 	if (WARN_ON(hw->netdev_features & ~feature_whitelist))
723 		return -EINVAL;
724 
725 	if (hw->max_report_rates == 0)
726 		hw->max_report_rates = hw->max_rates;
727 
728 	/*
729 	 * generic code guarantees at least one band,
730 	 * set this very early because much code assumes
731 	 * that hw.conf.channel is assigned
732 	 */
733 	channels = 0;
734 	max_bitrates = 0;
735 	supp_ht = false;
736 	supp_vht = false;
737 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
738 		struct ieee80211_supported_band *sband;
739 
740 		sband = local->hw.wiphy->bands[band];
741 		if (!sband)
742 			continue;
743 		if (!local->oper_channel) {
744 			/* init channel we're on */
745 			local->hw.conf.channel =
746 			local->oper_channel = &sband->channels[0];
747 			local->hw.conf.channel_type = NL80211_CHAN_NO_HT;
748 		}
749 		channels += sband->n_channels;
750 
751 		if (max_bitrates < sband->n_bitrates)
752 			max_bitrates = sband->n_bitrates;
753 		supp_ht = supp_ht || sband->ht_cap.ht_supported;
754 		supp_vht = supp_vht || sband->vht_cap.vht_supported;
755 	}
756 
757 	local->int_scan_req = kzalloc(sizeof(*local->int_scan_req) +
758 				      sizeof(void *) * channels, GFP_KERNEL);
759 	if (!local->int_scan_req)
760 		return -ENOMEM;
761 
762 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
763 		if (!local->hw.wiphy->bands[band])
764 			continue;
765 		local->int_scan_req->rates[band] = (u32) -1;
766 	}
767 
768 	/* if low-level driver supports AP, we also support VLAN */
769 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
770 		hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_AP_VLAN);
771 		hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_AP_VLAN);
772 	}
773 
774 	/* mac80211 always supports monitor */
775 	hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_MONITOR);
776 	hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_MONITOR);
777 
778 	/*
779 	 * mac80211 doesn't support more than 1 channel, and also not more
780 	 * than one IBSS interface
781 	 */
782 	for (i = 0; i < hw->wiphy->n_iface_combinations; i++) {
783 		const struct ieee80211_iface_combination *c;
784 		int j;
785 
786 		c = &hw->wiphy->iface_combinations[i];
787 
788 		if (c->num_different_channels > 1)
789 			return -EINVAL;
790 
791 		for (j = 0; j < c->n_limits; j++)
792 			if ((c->limits[j].types & BIT(NL80211_IFTYPE_ADHOC)) &&
793 			    c->limits[j].max > 1)
794 				return -EINVAL;
795 	}
796 
797 #ifndef CONFIG_MAC80211_MESH
798 	/* mesh depends on Kconfig, but drivers should set it if they want */
799 	local->hw.wiphy->interface_modes &= ~BIT(NL80211_IFTYPE_MESH_POINT);
800 #endif
801 
802 	/* if the underlying driver supports mesh, mac80211 will (at least)
803 	 * provide routing of mesh authentication frames to userspace */
804 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_MESH_POINT))
805 		local->hw.wiphy->flags |= WIPHY_FLAG_MESH_AUTH;
806 
807 	/* mac80211 supports control port protocol changing */
808 	local->hw.wiphy->flags |= WIPHY_FLAG_CONTROL_PORT_PROTOCOL;
809 
810 	if (local->hw.flags & IEEE80211_HW_SIGNAL_DBM)
811 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
812 	else if (local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC)
813 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_UNSPEC;
814 
815 	WARN((local->hw.flags & IEEE80211_HW_SUPPORTS_UAPSD)
816 	     && (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK),
817 	     "U-APSD not supported with HW_PS_NULLFUNC_STACK\n");
818 
819 	/*
820 	 * Calculate scan IE length -- we need this to alloc
821 	 * memory and to subtract from the driver limit. It
822 	 * includes the DS Params, (extended) supported rates, and HT
823 	 * information -- SSID is the driver's responsibility.
824 	 */
825 	local->scan_ies_len = 4 + max_bitrates /* (ext) supp rates */ +
826 		3 /* DS Params */;
827 	if (supp_ht)
828 		local->scan_ies_len += 2 + sizeof(struct ieee80211_ht_cap);
829 
830 	if (supp_vht)
831 		local->scan_ies_len +=
832 			2 + sizeof(struct ieee80211_vht_capabilities);
833 
834 	if (!local->ops->hw_scan) {
835 		/* For hw_scan, driver needs to set these up. */
836 		local->hw.wiphy->max_scan_ssids = 4;
837 		local->hw.wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
838 	}
839 
840 	/*
841 	 * If the driver supports any scan IEs, then assume the
842 	 * limit includes the IEs mac80211 will add, otherwise
843 	 * leave it at zero and let the driver sort it out; we
844 	 * still pass our IEs to the driver but userspace will
845 	 * not be allowed to in that case.
846 	 */
847 	if (local->hw.wiphy->max_scan_ie_len)
848 		local->hw.wiphy->max_scan_ie_len -= local->scan_ies_len;
849 
850 	/* Set up cipher suites unless driver already did */
851 	if (!local->hw.wiphy->cipher_suites) {
852 		local->hw.wiphy->cipher_suites = cipher_suites;
853 		local->hw.wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
854 		if (!(local->hw.flags & IEEE80211_HW_MFP_CAPABLE))
855 			local->hw.wiphy->n_cipher_suites--;
856 	}
857 	if (IS_ERR(local->wep_tx_tfm) || IS_ERR(local->wep_rx_tfm)) {
858 		if (local->hw.wiphy->cipher_suites == cipher_suites) {
859 			local->hw.wiphy->cipher_suites += 2;
860 			local->hw.wiphy->n_cipher_suites -= 2;
861 		} else {
862 			u32 *suites;
863 			int r, w = 0;
864 
865 			/* Filter out WEP */
866 
867 			suites = kmemdup(
868 				local->hw.wiphy->cipher_suites,
869 				sizeof(u32) * local->hw.wiphy->n_cipher_suites,
870 				GFP_KERNEL);
871 			if (!suites)
872 				return -ENOMEM;
873 			for (r = 0; r < local->hw.wiphy->n_cipher_suites; r++) {
874 				u32 suite = local->hw.wiphy->cipher_suites[r];
875 				if (suite == WLAN_CIPHER_SUITE_WEP40 ||
876 				    suite == WLAN_CIPHER_SUITE_WEP104)
877 					continue;
878 				suites[w++] = suite;
879 			}
880 			local->hw.wiphy->cipher_suites = suites;
881 			local->hw.wiphy->n_cipher_suites = w;
882 			local->wiphy_ciphers_allocated = true;
883 		}
884 	}
885 
886 	if (!local->ops->remain_on_channel)
887 		local->hw.wiphy->max_remain_on_channel_duration = 5000;
888 
889 	if (local->ops->sched_scan_start)
890 		local->hw.wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
891 
892 	/* mac80211 based drivers don't support internal TDLS setup */
893 	if (local->hw.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS)
894 		local->hw.wiphy->flags |= WIPHY_FLAG_TDLS_EXTERNAL_SETUP;
895 
896 	result = wiphy_register(local->hw.wiphy);
897 	if (result < 0)
898 		goto fail_wiphy_register;
899 
900 	/*
901 	 * We use the number of queues for feature tests (QoS, HT) internally
902 	 * so restrict them appropriately.
903 	 */
904 	if (hw->queues > IEEE80211_MAX_QUEUES)
905 		hw->queues = IEEE80211_MAX_QUEUES;
906 
907 	local->workqueue =
908 		alloc_ordered_workqueue(wiphy_name(local->hw.wiphy), 0);
909 	if (!local->workqueue) {
910 		result = -ENOMEM;
911 		goto fail_workqueue;
912 	}
913 
914 	/*
915 	 * The hardware needs headroom for sending the frame,
916 	 * and we need some headroom for passing the frame to monitor
917 	 * interfaces, but never both at the same time.
918 	 */
919 	local->tx_headroom = max_t(unsigned int , local->hw.extra_tx_headroom,
920 				   IEEE80211_TX_STATUS_HEADROOM);
921 
922 	debugfs_hw_add(local);
923 
924 	/*
925 	 * if the driver doesn't specify a max listen interval we
926 	 * use 5 which should be a safe default
927 	 */
928 	if (local->hw.max_listen_interval == 0)
929 		local->hw.max_listen_interval = 5;
930 
931 	local->hw.conf.listen_interval = local->hw.max_listen_interval;
932 
933 	local->dynamic_ps_forced_timeout = -1;
934 
935 	result = ieee80211_wep_init(local);
936 	if (result < 0)
937 		wiphy_debug(local->hw.wiphy, "Failed to initialize wep: %d\n",
938 			    result);
939 
940 	ieee80211_led_init(local);
941 
942 	rtnl_lock();
943 
944 	result = ieee80211_init_rate_ctrl_alg(local,
945 					      hw->rate_control_algorithm);
946 	if (result < 0) {
947 		wiphy_debug(local->hw.wiphy,
948 			    "Failed to initialize rate control algorithm\n");
949 		goto fail_rate;
950 	}
951 
952 	/* add one default STA interface if supported */
953 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_STATION)) {
954 		result = ieee80211_if_add(local, "wlan%d", NULL,
955 					  NL80211_IFTYPE_STATION, NULL);
956 		if (result)
957 			wiphy_warn(local->hw.wiphy,
958 				   "Failed to add default virtual iface\n");
959 	}
960 
961 	rtnl_unlock();
962 
963 	local->network_latency_notifier.notifier_call =
964 		ieee80211_max_network_latency;
965 	result = pm_qos_add_notifier(PM_QOS_NETWORK_LATENCY,
966 				     &local->network_latency_notifier);
967 	if (result) {
968 		rtnl_lock();
969 		goto fail_pm_qos;
970 	}
971 
972 #ifdef CONFIG_INET
973 	local->ifa_notifier.notifier_call = ieee80211_ifa_changed;
974 	result = register_inetaddr_notifier(&local->ifa_notifier);
975 	if (result)
976 		goto fail_ifa;
977 #endif
978 
979 	netif_napi_add(&local->napi_dev, &local->napi, ieee80211_napi_poll,
980 			local->hw.napi_weight);
981 
982 	return 0;
983 
984 #ifdef CONFIG_INET
985  fail_ifa:
986 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
987 			       &local->network_latency_notifier);
988 	rtnl_lock();
989 #endif
990  fail_pm_qos:
991 	ieee80211_led_exit(local);
992 	ieee80211_remove_interfaces(local);
993  fail_rate:
994 	rtnl_unlock();
995 	ieee80211_wep_free(local);
996 	sta_info_stop(local);
997 	destroy_workqueue(local->workqueue);
998  fail_workqueue:
999 	wiphy_unregister(local->hw.wiphy);
1000  fail_wiphy_register:
1001 	if (local->wiphy_ciphers_allocated)
1002 		kfree(local->hw.wiphy->cipher_suites);
1003 	kfree(local->int_scan_req);
1004 	return result;
1005 }
1006 EXPORT_SYMBOL(ieee80211_register_hw);
1007 
1008 void ieee80211_unregister_hw(struct ieee80211_hw *hw)
1009 {
1010 	struct ieee80211_local *local = hw_to_local(hw);
1011 
1012 	tasklet_kill(&local->tx_pending_tasklet);
1013 	tasklet_kill(&local->tasklet);
1014 
1015 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
1016 			       &local->network_latency_notifier);
1017 #ifdef CONFIG_INET
1018 	unregister_inetaddr_notifier(&local->ifa_notifier);
1019 #endif
1020 
1021 	rtnl_lock();
1022 
1023 	/*
1024 	 * At this point, interface list manipulations are fine
1025 	 * because the driver cannot be handing us frames any
1026 	 * more and the tasklet is killed.
1027 	 */
1028 	ieee80211_remove_interfaces(local);
1029 
1030 	rtnl_unlock();
1031 
1032 	cancel_work_sync(&local->restart_work);
1033 	cancel_work_sync(&local->reconfig_filter);
1034 
1035 	ieee80211_clear_tx_pending(local);
1036 	rate_control_deinitialize(local);
1037 
1038 	if (skb_queue_len(&local->skb_queue) ||
1039 	    skb_queue_len(&local->skb_queue_unreliable))
1040 		wiphy_warn(local->hw.wiphy, "skb_queue not empty\n");
1041 	skb_queue_purge(&local->skb_queue);
1042 	skb_queue_purge(&local->skb_queue_unreliable);
1043 	skb_queue_purge(&local->rx_skb_queue);
1044 
1045 	destroy_workqueue(local->workqueue);
1046 	wiphy_unregister(local->hw.wiphy);
1047 	sta_info_stop(local);
1048 	ieee80211_wep_free(local);
1049 	ieee80211_led_exit(local);
1050 	kfree(local->int_scan_req);
1051 }
1052 EXPORT_SYMBOL(ieee80211_unregister_hw);
1053 
1054 static int ieee80211_free_ack_frame(int id, void *p, void *data)
1055 {
1056 	WARN_ONCE(1, "Have pending ack frames!\n");
1057 	kfree_skb(p);
1058 	return 0;
1059 }
1060 
1061 void ieee80211_free_hw(struct ieee80211_hw *hw)
1062 {
1063 	struct ieee80211_local *local = hw_to_local(hw);
1064 
1065 	mutex_destroy(&local->iflist_mtx);
1066 	mutex_destroy(&local->mtx);
1067 
1068 	if (local->wiphy_ciphers_allocated)
1069 		kfree(local->hw.wiphy->cipher_suites);
1070 
1071 	idr_for_each(&local->ack_status_frames,
1072 		     ieee80211_free_ack_frame, NULL);
1073 	idr_destroy(&local->ack_status_frames);
1074 
1075 	wiphy_free(local->hw.wiphy);
1076 }
1077 EXPORT_SYMBOL(ieee80211_free_hw);
1078 
1079 static int __init ieee80211_init(void)
1080 {
1081 	struct sk_buff *skb;
1082 	int ret;
1083 
1084 	BUILD_BUG_ON(sizeof(struct ieee80211_tx_info) > sizeof(skb->cb));
1085 	BUILD_BUG_ON(offsetof(struct ieee80211_tx_info, driver_data) +
1086 		     IEEE80211_TX_INFO_DRIVER_DATA_SIZE > sizeof(skb->cb));
1087 
1088 	ret = rc80211_minstrel_init();
1089 	if (ret)
1090 		return ret;
1091 
1092 	ret = rc80211_minstrel_ht_init();
1093 	if (ret)
1094 		goto err_minstrel;
1095 
1096 	ret = rc80211_pid_init();
1097 	if (ret)
1098 		goto err_pid;
1099 
1100 	ret = ieee80211_iface_init();
1101 	if (ret)
1102 		goto err_netdev;
1103 
1104 	return 0;
1105  err_netdev:
1106 	rc80211_pid_exit();
1107  err_pid:
1108 	rc80211_minstrel_ht_exit();
1109  err_minstrel:
1110 	rc80211_minstrel_exit();
1111 
1112 	return ret;
1113 }
1114 
1115 static void __exit ieee80211_exit(void)
1116 {
1117 	rc80211_pid_exit();
1118 	rc80211_minstrel_ht_exit();
1119 	rc80211_minstrel_exit();
1120 
1121 	if (mesh_allocated)
1122 		ieee80211s_stop();
1123 
1124 	ieee80211_iface_exit();
1125 
1126 	rcu_barrier();
1127 }
1128 
1129 
1130 subsys_initcall(ieee80211_init);
1131 module_exit(ieee80211_exit);
1132 
1133 MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1134 MODULE_LICENSE("GPL");
1135