xref: /openbmc/linux/net/wireless/core.c (revision d0b73b48)
1 /*
2  * This is the linux wireless configuration interface.
3  *
4  * Copyright 2006-2010		Johannes Berg <johannes@sipsolutions.net>
5  */
6 
7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8 
9 #include <linux/if.h>
10 #include <linux/module.h>
11 #include <linux/err.h>
12 #include <linux/list.h>
13 #include <linux/slab.h>
14 #include <linux/nl80211.h>
15 #include <linux/debugfs.h>
16 #include <linux/notifier.h>
17 #include <linux/device.h>
18 #include <linux/etherdevice.h>
19 #include <linux/rtnetlink.h>
20 #include <linux/sched.h>
21 #include <net/genetlink.h>
22 #include <net/cfg80211.h>
23 #include "nl80211.h"
24 #include "core.h"
25 #include "sysfs.h"
26 #include "debugfs.h"
27 #include "wext-compat.h"
28 #include "ethtool.h"
29 #include "rdev-ops.h"
30 
31 /* name for sysfs, %d is appended */
32 #define PHY_NAME "phy"
33 
34 MODULE_AUTHOR("Johannes Berg");
35 MODULE_LICENSE("GPL");
36 MODULE_DESCRIPTION("wireless configuration support");
37 
38 /* RCU-protected (and cfg80211_mutex for writers) */
39 LIST_HEAD(cfg80211_rdev_list);
40 int cfg80211_rdev_list_generation;
41 
42 DEFINE_MUTEX(cfg80211_mutex);
43 
44 /* for debugfs */
45 static struct dentry *ieee80211_debugfs_dir;
46 
47 /* for the cleanup, scan and event works */
48 struct workqueue_struct *cfg80211_wq;
49 
50 static bool cfg80211_disable_40mhz_24ghz;
51 module_param(cfg80211_disable_40mhz_24ghz, bool, 0644);
52 MODULE_PARM_DESC(cfg80211_disable_40mhz_24ghz,
53 		 "Disable 40MHz support in the 2.4GHz band");
54 
55 /* requires cfg80211_mutex to be held! */
56 struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx)
57 {
58 	struct cfg80211_registered_device *result = NULL, *rdev;
59 
60 	if (!wiphy_idx_valid(wiphy_idx))
61 		return NULL;
62 
63 	assert_cfg80211_lock();
64 
65 	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
66 		if (rdev->wiphy_idx == wiphy_idx) {
67 			result = rdev;
68 			break;
69 		}
70 	}
71 
72 	return result;
73 }
74 
75 int get_wiphy_idx(struct wiphy *wiphy)
76 {
77 	struct cfg80211_registered_device *rdev;
78 	if (!wiphy)
79 		return WIPHY_IDX_STALE;
80 	rdev = wiphy_to_dev(wiphy);
81 	return rdev->wiphy_idx;
82 }
83 
84 /* requires cfg80211_rdev_mutex to be held! */
85 struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx)
86 {
87 	struct cfg80211_registered_device *rdev;
88 
89 	if (!wiphy_idx_valid(wiphy_idx))
90 		return NULL;
91 
92 	assert_cfg80211_lock();
93 
94 	rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx);
95 	if (!rdev)
96 		return NULL;
97 	return &rdev->wiphy;
98 }
99 
100 struct cfg80211_registered_device *
101 cfg80211_get_dev_from_ifindex(struct net *net, int ifindex)
102 {
103 	struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV);
104 	struct net_device *dev;
105 
106 	mutex_lock(&cfg80211_mutex);
107 	dev = dev_get_by_index(net, ifindex);
108 	if (!dev)
109 		goto out;
110 	if (dev->ieee80211_ptr) {
111 		rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy);
112 		mutex_lock(&rdev->mtx);
113 	} else
114 		rdev = ERR_PTR(-ENODEV);
115 	dev_put(dev);
116  out:
117 	mutex_unlock(&cfg80211_mutex);
118 	return rdev;
119 }
120 
121 /* requires cfg80211_mutex to be held */
122 int cfg80211_dev_rename(struct cfg80211_registered_device *rdev,
123 			char *newname)
124 {
125 	struct cfg80211_registered_device *rdev2;
126 	int wiphy_idx, taken = -1, result, digits;
127 
128 	assert_cfg80211_lock();
129 
130 	/* prohibit calling the thing phy%d when %d is not its number */
131 	sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken);
132 	if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) {
133 		/* count number of places needed to print wiphy_idx */
134 		digits = 1;
135 		while (wiphy_idx /= 10)
136 			digits++;
137 		/*
138 		 * deny the name if it is phy<idx> where <idx> is printed
139 		 * without leading zeroes. taken == strlen(newname) here
140 		 */
141 		if (taken == strlen(PHY_NAME) + digits)
142 			return -EINVAL;
143 	}
144 
145 
146 	/* Ignore nop renames */
147 	if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0)
148 		return 0;
149 
150 	/* Ensure another device does not already have this name. */
151 	list_for_each_entry(rdev2, &cfg80211_rdev_list, list)
152 		if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0)
153 			return -EINVAL;
154 
155 	result = device_rename(&rdev->wiphy.dev, newname);
156 	if (result)
157 		return result;
158 
159 	if (rdev->wiphy.debugfsdir &&
160 	    !debugfs_rename(rdev->wiphy.debugfsdir->d_parent,
161 			    rdev->wiphy.debugfsdir,
162 			    rdev->wiphy.debugfsdir->d_parent,
163 			    newname))
164 		pr_err("failed to rename debugfs dir to %s!\n", newname);
165 
166 	nl80211_notify_dev_rename(rdev);
167 
168 	return 0;
169 }
170 
171 int cfg80211_switch_netns(struct cfg80211_registered_device *rdev,
172 			  struct net *net)
173 {
174 	struct wireless_dev *wdev;
175 	int err = 0;
176 
177 	if (!(rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK))
178 		return -EOPNOTSUPP;
179 
180 	list_for_each_entry(wdev, &rdev->wdev_list, list) {
181 		if (!wdev->netdev)
182 			continue;
183 		wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
184 		err = dev_change_net_namespace(wdev->netdev, net, "wlan%d");
185 		if (err)
186 			break;
187 		wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
188 	}
189 
190 	if (err) {
191 		/* failed -- clean up to old netns */
192 		net = wiphy_net(&rdev->wiphy);
193 
194 		list_for_each_entry_continue_reverse(wdev, &rdev->wdev_list,
195 						     list) {
196 			if (!wdev->netdev)
197 				continue;
198 			wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
199 			err = dev_change_net_namespace(wdev->netdev, net,
200 							"wlan%d");
201 			WARN_ON(err);
202 			wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
203 		}
204 
205 		return err;
206 	}
207 
208 	wiphy_net_set(&rdev->wiphy, net);
209 
210 	err = device_rename(&rdev->wiphy.dev, dev_name(&rdev->wiphy.dev));
211 	WARN_ON(err);
212 
213 	return 0;
214 }
215 
216 static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data)
217 {
218 	struct cfg80211_registered_device *rdev = data;
219 
220 	rdev_rfkill_poll(rdev);
221 }
222 
223 static int cfg80211_rfkill_set_block(void *data, bool blocked)
224 {
225 	struct cfg80211_registered_device *rdev = data;
226 	struct wireless_dev *wdev;
227 
228 	if (!blocked)
229 		return 0;
230 
231 	rtnl_lock();
232 	mutex_lock(&rdev->devlist_mtx);
233 
234 	list_for_each_entry(wdev, &rdev->wdev_list, list) {
235 		if (wdev->netdev) {
236 			dev_close(wdev->netdev);
237 			continue;
238 		}
239 		/* otherwise, check iftype */
240 		switch (wdev->iftype) {
241 		case NL80211_IFTYPE_P2P_DEVICE:
242 			if (!wdev->p2p_started)
243 				break;
244 			rdev_stop_p2p_device(rdev, wdev);
245 			wdev->p2p_started = false;
246 			rdev->opencount--;
247 			break;
248 		default:
249 			break;
250 		}
251 	}
252 
253 	mutex_unlock(&rdev->devlist_mtx);
254 	rtnl_unlock();
255 
256 	return 0;
257 }
258 
259 static void cfg80211_rfkill_sync_work(struct work_struct *work)
260 {
261 	struct cfg80211_registered_device *rdev;
262 
263 	rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync);
264 	cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill));
265 }
266 
267 static void cfg80211_event_work(struct work_struct *work)
268 {
269 	struct cfg80211_registered_device *rdev;
270 
271 	rdev = container_of(work, struct cfg80211_registered_device,
272 			    event_work);
273 
274 	rtnl_lock();
275 	cfg80211_lock_rdev(rdev);
276 
277 	cfg80211_process_rdev_events(rdev);
278 	cfg80211_unlock_rdev(rdev);
279 	rtnl_unlock();
280 }
281 
282 /* exported functions */
283 
284 struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv)
285 {
286 	static int wiphy_counter;
287 
288 	struct cfg80211_registered_device *rdev;
289 	int alloc_size;
290 
291 	WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key));
292 	WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc));
293 	WARN_ON(ops->connect && !ops->disconnect);
294 	WARN_ON(ops->join_ibss && !ops->leave_ibss);
295 	WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf);
296 	WARN_ON(ops->add_station && !ops->del_station);
297 	WARN_ON(ops->add_mpath && !ops->del_mpath);
298 	WARN_ON(ops->join_mesh && !ops->leave_mesh);
299 
300 	alloc_size = sizeof(*rdev) + sizeof_priv;
301 
302 	rdev = kzalloc(alloc_size, GFP_KERNEL);
303 	if (!rdev)
304 		return NULL;
305 
306 	rdev->ops = ops;
307 
308 	mutex_lock(&cfg80211_mutex);
309 
310 	rdev->wiphy_idx = wiphy_counter++;
311 
312 	if (unlikely(!wiphy_idx_valid(rdev->wiphy_idx))) {
313 		wiphy_counter--;
314 		mutex_unlock(&cfg80211_mutex);
315 		/* ugh, wrapped! */
316 		kfree(rdev);
317 		return NULL;
318 	}
319 
320 	mutex_unlock(&cfg80211_mutex);
321 
322 	/* give it a proper name */
323 	dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx);
324 
325 	mutex_init(&rdev->mtx);
326 	mutex_init(&rdev->devlist_mtx);
327 	mutex_init(&rdev->sched_scan_mtx);
328 	INIT_LIST_HEAD(&rdev->wdev_list);
329 	INIT_LIST_HEAD(&rdev->beacon_registrations);
330 	spin_lock_init(&rdev->beacon_registrations_lock);
331 	spin_lock_init(&rdev->bss_lock);
332 	INIT_LIST_HEAD(&rdev->bss_list);
333 	INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done);
334 	INIT_WORK(&rdev->sched_scan_results_wk, __cfg80211_sched_scan_results);
335 #ifdef CONFIG_CFG80211_WEXT
336 	rdev->wiphy.wext = &cfg80211_wext_handler;
337 #endif
338 
339 	device_initialize(&rdev->wiphy.dev);
340 	rdev->wiphy.dev.class = &ieee80211_class;
341 	rdev->wiphy.dev.platform_data = rdev;
342 
343 #ifdef CONFIG_CFG80211_DEFAULT_PS
344 	rdev->wiphy.flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
345 #endif
346 
347 	wiphy_net_set(&rdev->wiphy, &init_net);
348 
349 	rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block;
350 	rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev),
351 				   &rdev->wiphy.dev, RFKILL_TYPE_WLAN,
352 				   &rdev->rfkill_ops, rdev);
353 
354 	if (!rdev->rfkill) {
355 		kfree(rdev);
356 		return NULL;
357 	}
358 
359 	INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work);
360 	INIT_WORK(&rdev->conn_work, cfg80211_conn_work);
361 	INIT_WORK(&rdev->event_work, cfg80211_event_work);
362 
363 	init_waitqueue_head(&rdev->dev_wait);
364 
365 	/*
366 	 * Initialize wiphy parameters to IEEE 802.11 MIB default values.
367 	 * Fragmentation and RTS threshold are disabled by default with the
368 	 * special -1 value.
369 	 */
370 	rdev->wiphy.retry_short = 7;
371 	rdev->wiphy.retry_long = 4;
372 	rdev->wiphy.frag_threshold = (u32) -1;
373 	rdev->wiphy.rts_threshold = (u32) -1;
374 	rdev->wiphy.coverage_class = 0;
375 
376 	rdev->wiphy.features = NL80211_FEATURE_SCAN_FLUSH;
377 
378 	return &rdev->wiphy;
379 }
380 EXPORT_SYMBOL(wiphy_new);
381 
382 static int wiphy_verify_combinations(struct wiphy *wiphy)
383 {
384 	const struct ieee80211_iface_combination *c;
385 	int i, j;
386 
387 	for (i = 0; i < wiphy->n_iface_combinations; i++) {
388 		u32 cnt = 0;
389 		u16 all_iftypes = 0;
390 
391 		c = &wiphy->iface_combinations[i];
392 
393 		/* Combinations with just one interface aren't real */
394 		if (WARN_ON(c->max_interfaces < 2))
395 			return -EINVAL;
396 
397 		/* Need at least one channel */
398 		if (WARN_ON(!c->num_different_channels))
399 			return -EINVAL;
400 
401 		/*
402 		 * Put a sane limit on maximum number of different
403 		 * channels to simplify channel accounting code.
404 		 */
405 		if (WARN_ON(c->num_different_channels >
406 				CFG80211_MAX_NUM_DIFFERENT_CHANNELS))
407 			return -EINVAL;
408 
409 		if (WARN_ON(!c->n_limits))
410 			return -EINVAL;
411 
412 		for (j = 0; j < c->n_limits; j++) {
413 			u16 types = c->limits[j].types;
414 
415 			/*
416 			 * interface types shouldn't overlap, this is
417 			 * used in cfg80211_can_change_interface()
418 			 */
419 			if (WARN_ON(types & all_iftypes))
420 				return -EINVAL;
421 			all_iftypes |= types;
422 
423 			if (WARN_ON(!c->limits[j].max))
424 				return -EINVAL;
425 
426 			/* Shouldn't list software iftypes in combinations! */
427 			if (WARN_ON(wiphy->software_iftypes & types))
428 				return -EINVAL;
429 
430 			/* Only a single P2P_DEVICE can be allowed */
431 			if (WARN_ON(types & BIT(NL80211_IFTYPE_P2P_DEVICE) &&
432 				    c->limits[j].max > 1))
433 				return -EINVAL;
434 
435 			cnt += c->limits[j].max;
436 			/*
437 			 * Don't advertise an unsupported type
438 			 * in a combination.
439 			 */
440 			if (WARN_ON((wiphy->interface_modes & types) != types))
441 				return -EINVAL;
442 		}
443 
444 		/* You can't even choose that many! */
445 		if (WARN_ON(cnt < c->max_interfaces))
446 			return -EINVAL;
447 	}
448 
449 	return 0;
450 }
451 
452 int wiphy_register(struct wiphy *wiphy)
453 {
454 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
455 	int res;
456 	enum ieee80211_band band;
457 	struct ieee80211_supported_band *sband;
458 	bool have_band = false;
459 	int i;
460 	u16 ifmodes = wiphy->interface_modes;
461 
462 #ifdef CONFIG_PM
463 	if (WARN_ON((wiphy->wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
464 		    !(wiphy->wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)))
465 		return -EINVAL;
466 #endif
467 
468 	if (WARN_ON(wiphy->ap_sme_capa &&
469 		    !(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME)))
470 		return -EINVAL;
471 
472 	if (WARN_ON(wiphy->addresses && !wiphy->n_addresses))
473 		return -EINVAL;
474 
475 	if (WARN_ON(wiphy->addresses &&
476 		    !is_zero_ether_addr(wiphy->perm_addr) &&
477 		    memcmp(wiphy->perm_addr, wiphy->addresses[0].addr,
478 			   ETH_ALEN)))
479 		return -EINVAL;
480 
481 	if (wiphy->addresses)
482 		memcpy(wiphy->perm_addr, wiphy->addresses[0].addr, ETH_ALEN);
483 
484 	/* sanity check ifmodes */
485 	WARN_ON(!ifmodes);
486 	ifmodes &= ((1 << NUM_NL80211_IFTYPES) - 1) & ~1;
487 	if (WARN_ON(ifmodes != wiphy->interface_modes))
488 		wiphy->interface_modes = ifmodes;
489 
490 	res = wiphy_verify_combinations(wiphy);
491 	if (res)
492 		return res;
493 
494 	/* sanity check supported bands/channels */
495 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
496 		sband = wiphy->bands[band];
497 		if (!sband)
498 			continue;
499 
500 		sband->band = band;
501 		if (WARN_ON(!sband->n_channels))
502 			return -EINVAL;
503 		/*
504 		 * on 60gHz band, there are no legacy rates, so
505 		 * n_bitrates is 0
506 		 */
507 		if (WARN_ON(band != IEEE80211_BAND_60GHZ &&
508 			    !sband->n_bitrates))
509 			return -EINVAL;
510 
511 		/*
512 		 * Since cfg80211_disable_40mhz_24ghz is global, we can
513 		 * modify the sband's ht data even if the driver uses a
514 		 * global structure for that.
515 		 */
516 		if (cfg80211_disable_40mhz_24ghz &&
517 		    band == IEEE80211_BAND_2GHZ &&
518 		    sband->ht_cap.ht_supported) {
519 			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
520 			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40;
521 		}
522 
523 		/*
524 		 * Since we use a u32 for rate bitmaps in
525 		 * ieee80211_get_response_rate, we cannot
526 		 * have more than 32 legacy rates.
527 		 */
528 		if (WARN_ON(sband->n_bitrates > 32))
529 			return -EINVAL;
530 
531 		for (i = 0; i < sband->n_channels; i++) {
532 			sband->channels[i].orig_flags =
533 				sband->channels[i].flags;
534 			sband->channels[i].orig_mag = INT_MAX;
535 			sband->channels[i].orig_mpwr =
536 				sband->channels[i].max_power;
537 			sband->channels[i].band = band;
538 		}
539 
540 		have_band = true;
541 	}
542 
543 	if (!have_band) {
544 		WARN_ON(1);
545 		return -EINVAL;
546 	}
547 
548 #ifdef CONFIG_PM
549 	if (rdev->wiphy.wowlan.n_patterns) {
550 		if (WARN_ON(!rdev->wiphy.wowlan.pattern_min_len ||
551 			    rdev->wiphy.wowlan.pattern_min_len >
552 			    rdev->wiphy.wowlan.pattern_max_len))
553 			return -EINVAL;
554 	}
555 #endif
556 
557 	/* check and set up bitrates */
558 	ieee80211_set_bitrate_flags(wiphy);
559 
560 	mutex_lock(&cfg80211_mutex);
561 
562 	res = device_add(&rdev->wiphy.dev);
563 	if (res) {
564 		mutex_unlock(&cfg80211_mutex);
565 		return res;
566 	}
567 
568 	/* set up regulatory info */
569 	wiphy_regulatory_register(wiphy);
570 
571 	list_add_rcu(&rdev->list, &cfg80211_rdev_list);
572 	cfg80211_rdev_list_generation++;
573 
574 	/* add to debugfs */
575 	rdev->wiphy.debugfsdir =
576 		debugfs_create_dir(wiphy_name(&rdev->wiphy),
577 				   ieee80211_debugfs_dir);
578 	if (IS_ERR(rdev->wiphy.debugfsdir))
579 		rdev->wiphy.debugfsdir = NULL;
580 
581 	if (wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) {
582 		struct regulatory_request request;
583 
584 		request.wiphy_idx = get_wiphy_idx(wiphy);
585 		request.initiator = NL80211_REGDOM_SET_BY_DRIVER;
586 		request.alpha2[0] = '9';
587 		request.alpha2[1] = '9';
588 
589 		nl80211_send_reg_change_event(&request);
590 	}
591 
592 	cfg80211_debugfs_rdev_add(rdev);
593 	mutex_unlock(&cfg80211_mutex);
594 
595 	/*
596 	 * due to a locking dependency this has to be outside of the
597 	 * cfg80211_mutex lock
598 	 */
599 	res = rfkill_register(rdev->rfkill);
600 	if (res)
601 		goto out_rm_dev;
602 
603 	rtnl_lock();
604 	rdev->wiphy.registered = true;
605 	rtnl_unlock();
606 	return 0;
607 
608 out_rm_dev:
609 	device_del(&rdev->wiphy.dev);
610 	return res;
611 }
612 EXPORT_SYMBOL(wiphy_register);
613 
614 void wiphy_rfkill_start_polling(struct wiphy *wiphy)
615 {
616 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
617 
618 	if (!rdev->ops->rfkill_poll)
619 		return;
620 	rdev->rfkill_ops.poll = cfg80211_rfkill_poll;
621 	rfkill_resume_polling(rdev->rfkill);
622 }
623 EXPORT_SYMBOL(wiphy_rfkill_start_polling);
624 
625 void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
626 {
627 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
628 
629 	rfkill_pause_polling(rdev->rfkill);
630 }
631 EXPORT_SYMBOL(wiphy_rfkill_stop_polling);
632 
633 void wiphy_unregister(struct wiphy *wiphy)
634 {
635 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
636 
637 	rtnl_lock();
638 	rdev->wiphy.registered = false;
639 	rtnl_unlock();
640 
641 	rfkill_unregister(rdev->rfkill);
642 
643 	/* protect the device list */
644 	mutex_lock(&cfg80211_mutex);
645 
646 	wait_event(rdev->dev_wait, ({
647 		int __count;
648 		mutex_lock(&rdev->devlist_mtx);
649 		__count = rdev->opencount;
650 		mutex_unlock(&rdev->devlist_mtx);
651 		__count == 0; }));
652 
653 	mutex_lock(&rdev->devlist_mtx);
654 	BUG_ON(!list_empty(&rdev->wdev_list));
655 	mutex_unlock(&rdev->devlist_mtx);
656 
657 	/*
658 	 * First remove the hardware from everywhere, this makes
659 	 * it impossible to find from userspace.
660 	 */
661 	debugfs_remove_recursive(rdev->wiphy.debugfsdir);
662 	list_del_rcu(&rdev->list);
663 	synchronize_rcu();
664 
665 	/*
666 	 * Try to grab rdev->mtx. If a command is still in progress,
667 	 * hopefully the driver will refuse it since it's tearing
668 	 * down the device already. We wait for this command to complete
669 	 * before unlinking the item from the list.
670 	 * Note: as codified by the BUG_ON above we cannot get here if
671 	 * a virtual interface is still present. Hence, we can only get
672 	 * to lock contention here if userspace issues a command that
673 	 * identified the hardware by wiphy index.
674 	 */
675 	cfg80211_lock_rdev(rdev);
676 	/* nothing */
677 	cfg80211_unlock_rdev(rdev);
678 
679 	/*
680 	 * If this device got a regulatory hint tell core its
681 	 * free to listen now to a new shiny device regulatory hint
682 	 */
683 	wiphy_regulatory_deregister(wiphy);
684 
685 	cfg80211_rdev_list_generation++;
686 	device_del(&rdev->wiphy.dev);
687 
688 	mutex_unlock(&cfg80211_mutex);
689 
690 	flush_work(&rdev->scan_done_wk);
691 	cancel_work_sync(&rdev->conn_work);
692 	flush_work(&rdev->event_work);
693 
694 	if (rdev->wowlan && rdev->ops->set_wakeup)
695 		rdev_set_wakeup(rdev, false);
696 	cfg80211_rdev_free_wowlan(rdev);
697 }
698 EXPORT_SYMBOL(wiphy_unregister);
699 
700 void cfg80211_dev_free(struct cfg80211_registered_device *rdev)
701 {
702 	struct cfg80211_internal_bss *scan, *tmp;
703 	struct cfg80211_beacon_registration *reg, *treg;
704 	rfkill_destroy(rdev->rfkill);
705 	mutex_destroy(&rdev->mtx);
706 	mutex_destroy(&rdev->devlist_mtx);
707 	mutex_destroy(&rdev->sched_scan_mtx);
708 	list_for_each_entry_safe(reg, treg, &rdev->beacon_registrations, list) {
709 		list_del(&reg->list);
710 		kfree(reg);
711 	}
712 	list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list)
713 		cfg80211_put_bss(&scan->pub);
714 	kfree(rdev);
715 }
716 
717 void wiphy_free(struct wiphy *wiphy)
718 {
719 	put_device(&wiphy->dev);
720 }
721 EXPORT_SYMBOL(wiphy_free);
722 
723 void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
724 {
725 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
726 
727 	if (rfkill_set_hw_state(rdev->rfkill, blocked))
728 		schedule_work(&rdev->rfkill_sync);
729 }
730 EXPORT_SYMBOL(wiphy_rfkill_set_hw_state);
731 
732 static void wdev_cleanup_work(struct work_struct *work)
733 {
734 	struct wireless_dev *wdev;
735 	struct cfg80211_registered_device *rdev;
736 
737 	wdev = container_of(work, struct wireless_dev, cleanup_work);
738 	rdev = wiphy_to_dev(wdev->wiphy);
739 
740 	cfg80211_lock_rdev(rdev);
741 
742 	if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
743 		rdev->scan_req->aborted = true;
744 		___cfg80211_scan_done(rdev, true);
745 	}
746 
747 	cfg80211_unlock_rdev(rdev);
748 
749 	mutex_lock(&rdev->sched_scan_mtx);
750 
751 	if (WARN_ON(rdev->sched_scan_req &&
752 		    rdev->sched_scan_req->dev == wdev->netdev)) {
753 		__cfg80211_stop_sched_scan(rdev, false);
754 	}
755 
756 	mutex_unlock(&rdev->sched_scan_mtx);
757 
758 	mutex_lock(&rdev->devlist_mtx);
759 	rdev->opencount--;
760 	mutex_unlock(&rdev->devlist_mtx);
761 	wake_up(&rdev->dev_wait);
762 
763 	dev_put(wdev->netdev);
764 }
765 
766 void cfg80211_unregister_wdev(struct wireless_dev *wdev)
767 {
768 	struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
769 
770 	ASSERT_RTNL();
771 
772 	if (WARN_ON(wdev->netdev))
773 		return;
774 
775 	mutex_lock(&rdev->devlist_mtx);
776 	list_del_rcu(&wdev->list);
777 	rdev->devlist_generation++;
778 
779 	switch (wdev->iftype) {
780 	case NL80211_IFTYPE_P2P_DEVICE:
781 		if (!wdev->p2p_started)
782 			break;
783 		rdev_stop_p2p_device(rdev, wdev);
784 		wdev->p2p_started = false;
785 		rdev->opencount--;
786 		break;
787 	default:
788 		WARN_ON_ONCE(1);
789 		break;
790 	}
791 	mutex_unlock(&rdev->devlist_mtx);
792 }
793 EXPORT_SYMBOL(cfg80211_unregister_wdev);
794 
795 static struct device_type wiphy_type = {
796 	.name	= "wlan",
797 };
798 
799 void cfg80211_update_iface_num(struct cfg80211_registered_device *rdev,
800 			       enum nl80211_iftype iftype, int num)
801 {
802 	ASSERT_RTNL();
803 
804 	rdev->num_running_ifaces += num;
805 	if (iftype == NL80211_IFTYPE_MONITOR)
806 		rdev->num_running_monitor_ifaces += num;
807 }
808 
809 static int cfg80211_netdev_notifier_call(struct notifier_block *nb,
810 					 unsigned long state,
811 					 void *ndev)
812 {
813 	struct net_device *dev = ndev;
814 	struct wireless_dev *wdev = dev->ieee80211_ptr;
815 	struct cfg80211_registered_device *rdev;
816 	int ret;
817 
818 	if (!wdev)
819 		return NOTIFY_DONE;
820 
821 	rdev = wiphy_to_dev(wdev->wiphy);
822 
823 	WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED);
824 
825 	switch (state) {
826 	case NETDEV_POST_INIT:
827 		SET_NETDEV_DEVTYPE(dev, &wiphy_type);
828 		break;
829 	case NETDEV_REGISTER:
830 		/*
831 		 * NB: cannot take rdev->mtx here because this may be
832 		 * called within code protected by it when interfaces
833 		 * are added with nl80211.
834 		 */
835 		mutex_init(&wdev->mtx);
836 		INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work);
837 		INIT_LIST_HEAD(&wdev->event_list);
838 		spin_lock_init(&wdev->event_lock);
839 		INIT_LIST_HEAD(&wdev->mgmt_registrations);
840 		spin_lock_init(&wdev->mgmt_registrations_lock);
841 
842 		mutex_lock(&rdev->devlist_mtx);
843 		wdev->identifier = ++rdev->wdev_id;
844 		list_add_rcu(&wdev->list, &rdev->wdev_list);
845 		rdev->devlist_generation++;
846 		/* can only change netns with wiphy */
847 		dev->features |= NETIF_F_NETNS_LOCAL;
848 
849 		if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj,
850 				      "phy80211")) {
851 			pr_err("failed to add phy80211 symlink to netdev!\n");
852 		}
853 		wdev->netdev = dev;
854 		wdev->sme_state = CFG80211_SME_IDLE;
855 		mutex_unlock(&rdev->devlist_mtx);
856 #ifdef CONFIG_CFG80211_WEXT
857 		wdev->wext.default_key = -1;
858 		wdev->wext.default_mgmt_key = -1;
859 		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
860 #endif
861 
862 		if (wdev->wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT)
863 			wdev->ps = true;
864 		else
865 			wdev->ps = false;
866 		/* allow mac80211 to determine the timeout */
867 		wdev->ps_timeout = -1;
868 
869 		netdev_set_default_ethtool_ops(dev, &cfg80211_ethtool_ops);
870 
871 		if ((wdev->iftype == NL80211_IFTYPE_STATION ||
872 		     wdev->iftype == NL80211_IFTYPE_P2P_CLIENT ||
873 		     wdev->iftype == NL80211_IFTYPE_ADHOC) && !wdev->use_4addr)
874 			dev->priv_flags |= IFF_DONT_BRIDGE;
875 		break;
876 	case NETDEV_GOING_DOWN:
877 		switch (wdev->iftype) {
878 		case NL80211_IFTYPE_ADHOC:
879 			cfg80211_leave_ibss(rdev, dev, true);
880 			break;
881 		case NL80211_IFTYPE_P2P_CLIENT:
882 		case NL80211_IFTYPE_STATION:
883 			mutex_lock(&rdev->sched_scan_mtx);
884 			__cfg80211_stop_sched_scan(rdev, false);
885 			mutex_unlock(&rdev->sched_scan_mtx);
886 
887 			wdev_lock(wdev);
888 #ifdef CONFIG_CFG80211_WEXT
889 			kfree(wdev->wext.ie);
890 			wdev->wext.ie = NULL;
891 			wdev->wext.ie_len = 0;
892 			wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
893 #endif
894 			__cfg80211_disconnect(rdev, dev,
895 					      WLAN_REASON_DEAUTH_LEAVING, true);
896 			cfg80211_mlme_down(rdev, dev);
897 			wdev_unlock(wdev);
898 			break;
899 		case NL80211_IFTYPE_MESH_POINT:
900 			cfg80211_leave_mesh(rdev, dev);
901 			break;
902 		case NL80211_IFTYPE_AP:
903 			cfg80211_stop_ap(rdev, dev);
904 			break;
905 		default:
906 			break;
907 		}
908 		wdev->beacon_interval = 0;
909 		break;
910 	case NETDEV_DOWN:
911 		cfg80211_update_iface_num(rdev, wdev->iftype, -1);
912 		dev_hold(dev);
913 		queue_work(cfg80211_wq, &wdev->cleanup_work);
914 		break;
915 	case NETDEV_UP:
916 		/*
917 		 * If we have a really quick DOWN/UP succession we may
918 		 * have this work still pending ... cancel it and see
919 		 * if it was pending, in which case we need to account
920 		 * for some of the work it would have done.
921 		 */
922 		if (cancel_work_sync(&wdev->cleanup_work)) {
923 			mutex_lock(&rdev->devlist_mtx);
924 			rdev->opencount--;
925 			mutex_unlock(&rdev->devlist_mtx);
926 			dev_put(dev);
927 		}
928 		cfg80211_update_iface_num(rdev, wdev->iftype, 1);
929 		cfg80211_lock_rdev(rdev);
930 		mutex_lock(&rdev->devlist_mtx);
931 		wdev_lock(wdev);
932 		switch (wdev->iftype) {
933 #ifdef CONFIG_CFG80211_WEXT
934 		case NL80211_IFTYPE_ADHOC:
935 			cfg80211_ibss_wext_join(rdev, wdev);
936 			break;
937 		case NL80211_IFTYPE_STATION:
938 			cfg80211_mgd_wext_connect(rdev, wdev);
939 			break;
940 #endif
941 #ifdef CONFIG_MAC80211_MESH
942 		case NL80211_IFTYPE_MESH_POINT:
943 			{
944 				/* backward compat code... */
945 				struct mesh_setup setup;
946 				memcpy(&setup, &default_mesh_setup,
947 						sizeof(setup));
948 				 /* back compat only needed for mesh_id */
949 				setup.mesh_id = wdev->ssid;
950 				setup.mesh_id_len = wdev->mesh_id_up_len;
951 				if (wdev->mesh_id_up_len)
952 					__cfg80211_join_mesh(rdev, dev,
953 							&setup,
954 							&default_mesh_config);
955 				break;
956 			}
957 #endif
958 		default:
959 			break;
960 		}
961 		wdev_unlock(wdev);
962 		rdev->opencount++;
963 		mutex_unlock(&rdev->devlist_mtx);
964 		cfg80211_unlock_rdev(rdev);
965 
966 		/*
967 		 * Configure power management to the driver here so that its
968 		 * correctly set also after interface type changes etc.
969 		 */
970 		if ((wdev->iftype == NL80211_IFTYPE_STATION ||
971 		     wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
972 		    rdev->ops->set_power_mgmt)
973 			if (rdev_set_power_mgmt(rdev, dev, wdev->ps,
974 						wdev->ps_timeout)) {
975 				/* assume this means it's off */
976 				wdev->ps = false;
977 			}
978 		break;
979 	case NETDEV_UNREGISTER:
980 		/*
981 		 * NB: cannot take rdev->mtx here because this may be
982 		 * called within code protected by it when interfaces
983 		 * are removed with nl80211.
984 		 */
985 		mutex_lock(&rdev->devlist_mtx);
986 		/*
987 		 * It is possible to get NETDEV_UNREGISTER
988 		 * multiple times. To detect that, check
989 		 * that the interface is still on the list
990 		 * of registered interfaces, and only then
991 		 * remove and clean it up.
992 		 */
993 		if (!list_empty(&wdev->list)) {
994 			sysfs_remove_link(&dev->dev.kobj, "phy80211");
995 			list_del_rcu(&wdev->list);
996 			rdev->devlist_generation++;
997 			cfg80211_mlme_purge_registrations(wdev);
998 #ifdef CONFIG_CFG80211_WEXT
999 			kfree(wdev->wext.keys);
1000 #endif
1001 		}
1002 		mutex_unlock(&rdev->devlist_mtx);
1003 		/*
1004 		 * synchronise (so that we won't find this netdev
1005 		 * from other code any more) and then clear the list
1006 		 * head so that the above code can safely check for
1007 		 * !list_empty() to avoid double-cleanup.
1008 		 */
1009 		synchronize_rcu();
1010 		INIT_LIST_HEAD(&wdev->list);
1011 		/*
1012 		 * Ensure that all events have been processed and
1013 		 * freed.
1014 		 */
1015 		cfg80211_process_wdev_events(wdev);
1016 		break;
1017 	case NETDEV_PRE_UP:
1018 		if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))
1019 			return notifier_from_errno(-EOPNOTSUPP);
1020 		if (rfkill_blocked(rdev->rfkill))
1021 			return notifier_from_errno(-ERFKILL);
1022 		mutex_lock(&rdev->devlist_mtx);
1023 		ret = cfg80211_can_add_interface(rdev, wdev->iftype);
1024 		mutex_unlock(&rdev->devlist_mtx);
1025 		if (ret)
1026 			return notifier_from_errno(ret);
1027 		break;
1028 	}
1029 
1030 	return NOTIFY_DONE;
1031 }
1032 
1033 static struct notifier_block cfg80211_netdev_notifier = {
1034 	.notifier_call = cfg80211_netdev_notifier_call,
1035 };
1036 
1037 static void __net_exit cfg80211_pernet_exit(struct net *net)
1038 {
1039 	struct cfg80211_registered_device *rdev;
1040 
1041 	rtnl_lock();
1042 	mutex_lock(&cfg80211_mutex);
1043 	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1044 		if (net_eq(wiphy_net(&rdev->wiphy), net))
1045 			WARN_ON(cfg80211_switch_netns(rdev, &init_net));
1046 	}
1047 	mutex_unlock(&cfg80211_mutex);
1048 	rtnl_unlock();
1049 }
1050 
1051 static struct pernet_operations cfg80211_pernet_ops = {
1052 	.exit = cfg80211_pernet_exit,
1053 };
1054 
1055 static int __init cfg80211_init(void)
1056 {
1057 	int err;
1058 
1059 	err = register_pernet_device(&cfg80211_pernet_ops);
1060 	if (err)
1061 		goto out_fail_pernet;
1062 
1063 	err = wiphy_sysfs_init();
1064 	if (err)
1065 		goto out_fail_sysfs;
1066 
1067 	err = register_netdevice_notifier(&cfg80211_netdev_notifier);
1068 	if (err)
1069 		goto out_fail_notifier;
1070 
1071 	err = nl80211_init();
1072 	if (err)
1073 		goto out_fail_nl80211;
1074 
1075 	ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL);
1076 
1077 	err = regulatory_init();
1078 	if (err)
1079 		goto out_fail_reg;
1080 
1081 	cfg80211_wq = create_singlethread_workqueue("cfg80211");
1082 	if (!cfg80211_wq)
1083 		goto out_fail_wq;
1084 
1085 	return 0;
1086 
1087 out_fail_wq:
1088 	regulatory_exit();
1089 out_fail_reg:
1090 	debugfs_remove(ieee80211_debugfs_dir);
1091 out_fail_nl80211:
1092 	unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1093 out_fail_notifier:
1094 	wiphy_sysfs_exit();
1095 out_fail_sysfs:
1096 	unregister_pernet_device(&cfg80211_pernet_ops);
1097 out_fail_pernet:
1098 	return err;
1099 }
1100 subsys_initcall(cfg80211_init);
1101 
1102 static void __exit cfg80211_exit(void)
1103 {
1104 	debugfs_remove(ieee80211_debugfs_dir);
1105 	nl80211_exit();
1106 	unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1107 	wiphy_sysfs_exit();
1108 	regulatory_exit();
1109 	unregister_pernet_device(&cfg80211_pernet_ops);
1110 	destroy_workqueue(cfg80211_wq);
1111 }
1112 module_exit(cfg80211_exit);
1113