1 /* 2 * This is the linux wireless configuration interface. 3 * 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net> 5 */ 6 7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 8 9 #include <linux/if.h> 10 #include <linux/module.h> 11 #include <linux/err.h> 12 #include <linux/list.h> 13 #include <linux/slab.h> 14 #include <linux/nl80211.h> 15 #include <linux/debugfs.h> 16 #include <linux/notifier.h> 17 #include <linux/device.h> 18 #include <linux/etherdevice.h> 19 #include <linux/rtnetlink.h> 20 #include <linux/sched.h> 21 #include <net/genetlink.h> 22 #include <net/cfg80211.h> 23 #include "nl80211.h" 24 #include "core.h" 25 #include "sysfs.h" 26 #include "debugfs.h" 27 #include "wext-compat.h" 28 #include "ethtool.h" 29 #include "rdev-ops.h" 30 31 /* name for sysfs, %d is appended */ 32 #define PHY_NAME "phy" 33 34 MODULE_AUTHOR("Johannes Berg"); 35 MODULE_LICENSE("GPL"); 36 MODULE_DESCRIPTION("wireless configuration support"); 37 38 /* RCU-protected (and cfg80211_mutex for writers) */ 39 LIST_HEAD(cfg80211_rdev_list); 40 int cfg80211_rdev_list_generation; 41 42 DEFINE_MUTEX(cfg80211_mutex); 43 44 /* for debugfs */ 45 static struct dentry *ieee80211_debugfs_dir; 46 47 /* for the cleanup, scan and event works */ 48 struct workqueue_struct *cfg80211_wq; 49 50 static bool cfg80211_disable_40mhz_24ghz; 51 module_param(cfg80211_disable_40mhz_24ghz, bool, 0644); 52 MODULE_PARM_DESC(cfg80211_disable_40mhz_24ghz, 53 "Disable 40MHz support in the 2.4GHz band"); 54 55 /* requires cfg80211_mutex to be held! */ 56 struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx) 57 { 58 struct cfg80211_registered_device *result = NULL, *rdev; 59 60 assert_cfg80211_lock(); 61 62 list_for_each_entry(rdev, &cfg80211_rdev_list, list) { 63 if (rdev->wiphy_idx == wiphy_idx) { 64 result = rdev; 65 break; 66 } 67 } 68 69 return result; 70 } 71 72 int get_wiphy_idx(struct wiphy *wiphy) 73 { 74 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 75 76 return rdev->wiphy_idx; 77 } 78 79 /* requires cfg80211_rdev_mutex to be held! */ 80 struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx) 81 { 82 struct cfg80211_registered_device *rdev; 83 84 assert_cfg80211_lock(); 85 86 rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx); 87 if (!rdev) 88 return NULL; 89 return &rdev->wiphy; 90 } 91 92 struct cfg80211_registered_device * 93 cfg80211_get_dev_from_ifindex(struct net *net, int ifindex) 94 { 95 struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV); 96 struct net_device *dev; 97 98 mutex_lock(&cfg80211_mutex); 99 dev = dev_get_by_index(net, ifindex); 100 if (!dev) 101 goto out; 102 if (dev->ieee80211_ptr) { 103 rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy); 104 mutex_lock(&rdev->mtx); 105 } else 106 rdev = ERR_PTR(-ENODEV); 107 dev_put(dev); 108 out: 109 mutex_unlock(&cfg80211_mutex); 110 return rdev; 111 } 112 113 /* requires cfg80211_mutex to be held */ 114 int cfg80211_dev_rename(struct cfg80211_registered_device *rdev, 115 char *newname) 116 { 117 struct cfg80211_registered_device *rdev2; 118 int wiphy_idx, taken = -1, result, digits; 119 120 assert_cfg80211_lock(); 121 122 /* prohibit calling the thing phy%d when %d is not its number */ 123 sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken); 124 if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) { 125 /* count number of places needed to print wiphy_idx */ 126 digits = 1; 127 while (wiphy_idx /= 10) 128 digits++; 129 /* 130 * deny the name if it is phy<idx> where <idx> is printed 131 * without leading zeroes. taken == strlen(newname) here 132 */ 133 if (taken == strlen(PHY_NAME) + digits) 134 return -EINVAL; 135 } 136 137 138 /* Ignore nop renames */ 139 if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0) 140 return 0; 141 142 /* Ensure another device does not already have this name. */ 143 list_for_each_entry(rdev2, &cfg80211_rdev_list, list) 144 if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0) 145 return -EINVAL; 146 147 result = device_rename(&rdev->wiphy.dev, newname); 148 if (result) 149 return result; 150 151 if (rdev->wiphy.debugfsdir && 152 !debugfs_rename(rdev->wiphy.debugfsdir->d_parent, 153 rdev->wiphy.debugfsdir, 154 rdev->wiphy.debugfsdir->d_parent, 155 newname)) 156 pr_err("failed to rename debugfs dir to %s!\n", newname); 157 158 nl80211_notify_dev_rename(rdev); 159 160 return 0; 161 } 162 163 int cfg80211_switch_netns(struct cfg80211_registered_device *rdev, 164 struct net *net) 165 { 166 struct wireless_dev *wdev; 167 int err = 0; 168 169 if (!(rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK)) 170 return -EOPNOTSUPP; 171 172 list_for_each_entry(wdev, &rdev->wdev_list, list) { 173 if (!wdev->netdev) 174 continue; 175 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL; 176 err = dev_change_net_namespace(wdev->netdev, net, "wlan%d"); 177 if (err) 178 break; 179 wdev->netdev->features |= NETIF_F_NETNS_LOCAL; 180 } 181 182 if (err) { 183 /* failed -- clean up to old netns */ 184 net = wiphy_net(&rdev->wiphy); 185 186 list_for_each_entry_continue_reverse(wdev, &rdev->wdev_list, 187 list) { 188 if (!wdev->netdev) 189 continue; 190 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL; 191 err = dev_change_net_namespace(wdev->netdev, net, 192 "wlan%d"); 193 WARN_ON(err); 194 wdev->netdev->features |= NETIF_F_NETNS_LOCAL; 195 } 196 197 return err; 198 } 199 200 wiphy_net_set(&rdev->wiphy, net); 201 202 err = device_rename(&rdev->wiphy.dev, dev_name(&rdev->wiphy.dev)); 203 WARN_ON(err); 204 205 return 0; 206 } 207 208 static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data) 209 { 210 struct cfg80211_registered_device *rdev = data; 211 212 rdev_rfkill_poll(rdev); 213 } 214 215 void cfg80211_stop_p2p_device(struct cfg80211_registered_device *rdev, 216 struct wireless_dev *wdev) 217 { 218 lockdep_assert_held(&rdev->devlist_mtx); 219 lockdep_assert_held(&rdev->sched_scan_mtx); 220 221 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)) 222 return; 223 224 if (!wdev->p2p_started) 225 return; 226 227 rdev_stop_p2p_device(rdev, wdev); 228 wdev->p2p_started = false; 229 230 rdev->opencount--; 231 232 if (rdev->scan_req && rdev->scan_req->wdev == wdev) { 233 bool busy = work_busy(&rdev->scan_done_wk); 234 235 /* 236 * If the work isn't pending or running (in which case it would 237 * be waiting for the lock we hold) the driver didn't properly 238 * cancel the scan when the interface was removed. In this case 239 * warn and leak the scan request object to not crash later. 240 */ 241 WARN_ON(!busy); 242 243 rdev->scan_req->aborted = true; 244 ___cfg80211_scan_done(rdev, !busy); 245 } 246 } 247 248 static int cfg80211_rfkill_set_block(void *data, bool blocked) 249 { 250 struct cfg80211_registered_device *rdev = data; 251 struct wireless_dev *wdev; 252 253 if (!blocked) 254 return 0; 255 256 rtnl_lock(); 257 258 /* read-only iteration need not hold the devlist_mtx */ 259 260 list_for_each_entry(wdev, &rdev->wdev_list, list) { 261 if (wdev->netdev) { 262 dev_close(wdev->netdev); 263 continue; 264 } 265 /* otherwise, check iftype */ 266 switch (wdev->iftype) { 267 case NL80211_IFTYPE_P2P_DEVICE: 268 /* but this requires it */ 269 mutex_lock(&rdev->devlist_mtx); 270 mutex_lock(&rdev->sched_scan_mtx); 271 cfg80211_stop_p2p_device(rdev, wdev); 272 mutex_unlock(&rdev->sched_scan_mtx); 273 mutex_unlock(&rdev->devlist_mtx); 274 break; 275 default: 276 break; 277 } 278 } 279 280 rtnl_unlock(); 281 282 return 0; 283 } 284 285 static void cfg80211_rfkill_sync_work(struct work_struct *work) 286 { 287 struct cfg80211_registered_device *rdev; 288 289 rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync); 290 cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill)); 291 } 292 293 static void cfg80211_event_work(struct work_struct *work) 294 { 295 struct cfg80211_registered_device *rdev; 296 297 rdev = container_of(work, struct cfg80211_registered_device, 298 event_work); 299 300 rtnl_lock(); 301 cfg80211_lock_rdev(rdev); 302 303 cfg80211_process_rdev_events(rdev); 304 cfg80211_unlock_rdev(rdev); 305 rtnl_unlock(); 306 } 307 308 /* exported functions */ 309 310 struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv) 311 { 312 static int wiphy_counter; 313 314 struct cfg80211_registered_device *rdev; 315 int alloc_size; 316 317 WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key)); 318 WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc)); 319 WARN_ON(ops->connect && !ops->disconnect); 320 WARN_ON(ops->join_ibss && !ops->leave_ibss); 321 WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf); 322 WARN_ON(ops->add_station && !ops->del_station); 323 WARN_ON(ops->add_mpath && !ops->del_mpath); 324 WARN_ON(ops->join_mesh && !ops->leave_mesh); 325 326 alloc_size = sizeof(*rdev) + sizeof_priv; 327 328 rdev = kzalloc(alloc_size, GFP_KERNEL); 329 if (!rdev) 330 return NULL; 331 332 rdev->ops = ops; 333 334 mutex_lock(&cfg80211_mutex); 335 336 rdev->wiphy_idx = wiphy_counter++; 337 338 if (unlikely(rdev->wiphy_idx < 0)) { 339 wiphy_counter--; 340 mutex_unlock(&cfg80211_mutex); 341 /* ugh, wrapped! */ 342 kfree(rdev); 343 return NULL; 344 } 345 346 mutex_unlock(&cfg80211_mutex); 347 348 /* give it a proper name */ 349 dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx); 350 351 mutex_init(&rdev->mtx); 352 mutex_init(&rdev->devlist_mtx); 353 mutex_init(&rdev->sched_scan_mtx); 354 INIT_LIST_HEAD(&rdev->wdev_list); 355 INIT_LIST_HEAD(&rdev->beacon_registrations); 356 spin_lock_init(&rdev->beacon_registrations_lock); 357 spin_lock_init(&rdev->bss_lock); 358 INIT_LIST_HEAD(&rdev->bss_list); 359 INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done); 360 INIT_WORK(&rdev->sched_scan_results_wk, __cfg80211_sched_scan_results); 361 INIT_DELAYED_WORK(&rdev->dfs_update_channels_wk, 362 cfg80211_dfs_channels_update_work); 363 #ifdef CONFIG_CFG80211_WEXT 364 rdev->wiphy.wext = &cfg80211_wext_handler; 365 #endif 366 367 device_initialize(&rdev->wiphy.dev); 368 rdev->wiphy.dev.class = &ieee80211_class; 369 rdev->wiphy.dev.platform_data = rdev; 370 371 #ifdef CONFIG_CFG80211_DEFAULT_PS 372 rdev->wiphy.flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT; 373 #endif 374 375 wiphy_net_set(&rdev->wiphy, &init_net); 376 377 rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block; 378 rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev), 379 &rdev->wiphy.dev, RFKILL_TYPE_WLAN, 380 &rdev->rfkill_ops, rdev); 381 382 if (!rdev->rfkill) { 383 kfree(rdev); 384 return NULL; 385 } 386 387 INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work); 388 INIT_WORK(&rdev->conn_work, cfg80211_conn_work); 389 INIT_WORK(&rdev->event_work, cfg80211_event_work); 390 391 init_waitqueue_head(&rdev->dev_wait); 392 393 /* 394 * Initialize wiphy parameters to IEEE 802.11 MIB default values. 395 * Fragmentation and RTS threshold are disabled by default with the 396 * special -1 value. 397 */ 398 rdev->wiphy.retry_short = 7; 399 rdev->wiphy.retry_long = 4; 400 rdev->wiphy.frag_threshold = (u32) -1; 401 rdev->wiphy.rts_threshold = (u32) -1; 402 rdev->wiphy.coverage_class = 0; 403 404 rdev->wiphy.features = NL80211_FEATURE_SCAN_FLUSH; 405 406 return &rdev->wiphy; 407 } 408 EXPORT_SYMBOL(wiphy_new); 409 410 static int wiphy_verify_combinations(struct wiphy *wiphy) 411 { 412 const struct ieee80211_iface_combination *c; 413 int i, j; 414 415 for (i = 0; i < wiphy->n_iface_combinations; i++) { 416 u32 cnt = 0; 417 u16 all_iftypes = 0; 418 419 c = &wiphy->iface_combinations[i]; 420 421 /* 422 * Combinations with just one interface aren't real, 423 * however we make an exception for DFS. 424 */ 425 if (WARN_ON((c->max_interfaces < 2) && !c->radar_detect_widths)) 426 return -EINVAL; 427 428 /* Need at least one channel */ 429 if (WARN_ON(!c->num_different_channels)) 430 return -EINVAL; 431 432 /* 433 * Put a sane limit on maximum number of different 434 * channels to simplify channel accounting code. 435 */ 436 if (WARN_ON(c->num_different_channels > 437 CFG80211_MAX_NUM_DIFFERENT_CHANNELS)) 438 return -EINVAL; 439 440 /* DFS only works on one channel. */ 441 if (WARN_ON(c->radar_detect_widths && 442 (c->num_different_channels > 1))) 443 return -EINVAL; 444 445 if (WARN_ON(!c->n_limits)) 446 return -EINVAL; 447 448 for (j = 0; j < c->n_limits; j++) { 449 u16 types = c->limits[j].types; 450 451 /* 452 * interface types shouldn't overlap, this is 453 * used in cfg80211_can_change_interface() 454 */ 455 if (WARN_ON(types & all_iftypes)) 456 return -EINVAL; 457 all_iftypes |= types; 458 459 if (WARN_ON(!c->limits[j].max)) 460 return -EINVAL; 461 462 /* Shouldn't list software iftypes in combinations! */ 463 if (WARN_ON(wiphy->software_iftypes & types)) 464 return -EINVAL; 465 466 /* Only a single P2P_DEVICE can be allowed */ 467 if (WARN_ON(types & BIT(NL80211_IFTYPE_P2P_DEVICE) && 468 c->limits[j].max > 1)) 469 return -EINVAL; 470 471 cnt += c->limits[j].max; 472 /* 473 * Don't advertise an unsupported type 474 * in a combination. 475 */ 476 if (WARN_ON((wiphy->interface_modes & types) != types)) 477 return -EINVAL; 478 } 479 480 /* You can't even choose that many! */ 481 if (WARN_ON(cnt < c->max_interfaces)) 482 return -EINVAL; 483 } 484 485 return 0; 486 } 487 488 int wiphy_register(struct wiphy *wiphy) 489 { 490 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 491 int res; 492 enum ieee80211_band band; 493 struct ieee80211_supported_band *sband; 494 bool have_band = false; 495 int i; 496 u16 ifmodes = wiphy->interface_modes; 497 498 #ifdef CONFIG_PM 499 if (WARN_ON((wiphy->wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) && 500 !(wiphy->wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY))) 501 return -EINVAL; 502 #endif 503 504 if (WARN_ON(wiphy->ap_sme_capa && 505 !(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME))) 506 return -EINVAL; 507 508 if (WARN_ON(wiphy->addresses && !wiphy->n_addresses)) 509 return -EINVAL; 510 511 if (WARN_ON(wiphy->addresses && 512 !is_zero_ether_addr(wiphy->perm_addr) && 513 memcmp(wiphy->perm_addr, wiphy->addresses[0].addr, 514 ETH_ALEN))) 515 return -EINVAL; 516 517 if (WARN_ON(wiphy->max_acl_mac_addrs && 518 (!(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME) || 519 !rdev->ops->set_mac_acl))) 520 return -EINVAL; 521 522 if (wiphy->addresses) 523 memcpy(wiphy->perm_addr, wiphy->addresses[0].addr, ETH_ALEN); 524 525 /* sanity check ifmodes */ 526 WARN_ON(!ifmodes); 527 ifmodes &= ((1 << NUM_NL80211_IFTYPES) - 1) & ~1; 528 if (WARN_ON(ifmodes != wiphy->interface_modes)) 529 wiphy->interface_modes = ifmodes; 530 531 res = wiphy_verify_combinations(wiphy); 532 if (res) 533 return res; 534 535 /* sanity check supported bands/channels */ 536 for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 537 sband = wiphy->bands[band]; 538 if (!sband) 539 continue; 540 541 sband->band = band; 542 if (WARN_ON(!sband->n_channels)) 543 return -EINVAL; 544 /* 545 * on 60gHz band, there are no legacy rates, so 546 * n_bitrates is 0 547 */ 548 if (WARN_ON(band != IEEE80211_BAND_60GHZ && 549 !sband->n_bitrates)) 550 return -EINVAL; 551 552 /* 553 * Since cfg80211_disable_40mhz_24ghz is global, we can 554 * modify the sband's ht data even if the driver uses a 555 * global structure for that. 556 */ 557 if (cfg80211_disable_40mhz_24ghz && 558 band == IEEE80211_BAND_2GHZ && 559 sband->ht_cap.ht_supported) { 560 sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40; 561 sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40; 562 } 563 564 /* 565 * Since we use a u32 for rate bitmaps in 566 * ieee80211_get_response_rate, we cannot 567 * have more than 32 legacy rates. 568 */ 569 if (WARN_ON(sband->n_bitrates > 32)) 570 return -EINVAL; 571 572 for (i = 0; i < sband->n_channels; i++) { 573 sband->channels[i].orig_flags = 574 sband->channels[i].flags; 575 sband->channels[i].orig_mag = INT_MAX; 576 sband->channels[i].orig_mpwr = 577 sband->channels[i].max_power; 578 sband->channels[i].band = band; 579 } 580 581 have_band = true; 582 } 583 584 if (!have_band) { 585 WARN_ON(1); 586 return -EINVAL; 587 } 588 589 #ifdef CONFIG_PM 590 if (rdev->wiphy.wowlan.n_patterns) { 591 if (WARN_ON(!rdev->wiphy.wowlan.pattern_min_len || 592 rdev->wiphy.wowlan.pattern_min_len > 593 rdev->wiphy.wowlan.pattern_max_len)) 594 return -EINVAL; 595 } 596 #endif 597 598 /* check and set up bitrates */ 599 ieee80211_set_bitrate_flags(wiphy); 600 601 mutex_lock(&cfg80211_mutex); 602 603 res = device_add(&rdev->wiphy.dev); 604 if (res) { 605 mutex_unlock(&cfg80211_mutex); 606 return res; 607 } 608 609 /* set up regulatory info */ 610 wiphy_regulatory_register(wiphy); 611 612 list_add_rcu(&rdev->list, &cfg80211_rdev_list); 613 cfg80211_rdev_list_generation++; 614 615 /* add to debugfs */ 616 rdev->wiphy.debugfsdir = 617 debugfs_create_dir(wiphy_name(&rdev->wiphy), 618 ieee80211_debugfs_dir); 619 if (IS_ERR(rdev->wiphy.debugfsdir)) 620 rdev->wiphy.debugfsdir = NULL; 621 622 if (wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) { 623 struct regulatory_request request; 624 625 request.wiphy_idx = get_wiphy_idx(wiphy); 626 request.initiator = NL80211_REGDOM_SET_BY_DRIVER; 627 request.alpha2[0] = '9'; 628 request.alpha2[1] = '9'; 629 630 nl80211_send_reg_change_event(&request); 631 } 632 633 cfg80211_debugfs_rdev_add(rdev); 634 mutex_unlock(&cfg80211_mutex); 635 636 /* 637 * due to a locking dependency this has to be outside of the 638 * cfg80211_mutex lock 639 */ 640 res = rfkill_register(rdev->rfkill); 641 if (res) 642 goto out_rm_dev; 643 644 rtnl_lock(); 645 rdev->wiphy.registered = true; 646 rtnl_unlock(); 647 return 0; 648 649 out_rm_dev: 650 device_del(&rdev->wiphy.dev); 651 return res; 652 } 653 EXPORT_SYMBOL(wiphy_register); 654 655 void wiphy_rfkill_start_polling(struct wiphy *wiphy) 656 { 657 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 658 659 if (!rdev->ops->rfkill_poll) 660 return; 661 rdev->rfkill_ops.poll = cfg80211_rfkill_poll; 662 rfkill_resume_polling(rdev->rfkill); 663 } 664 EXPORT_SYMBOL(wiphy_rfkill_start_polling); 665 666 void wiphy_rfkill_stop_polling(struct wiphy *wiphy) 667 { 668 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 669 670 rfkill_pause_polling(rdev->rfkill); 671 } 672 EXPORT_SYMBOL(wiphy_rfkill_stop_polling); 673 674 void wiphy_unregister(struct wiphy *wiphy) 675 { 676 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 677 678 rtnl_lock(); 679 rdev->wiphy.registered = false; 680 rtnl_unlock(); 681 682 rfkill_unregister(rdev->rfkill); 683 684 /* protect the device list */ 685 mutex_lock(&cfg80211_mutex); 686 687 wait_event(rdev->dev_wait, ({ 688 int __count; 689 mutex_lock(&rdev->devlist_mtx); 690 __count = rdev->opencount; 691 mutex_unlock(&rdev->devlist_mtx); 692 __count == 0; })); 693 694 mutex_lock(&rdev->devlist_mtx); 695 BUG_ON(!list_empty(&rdev->wdev_list)); 696 mutex_unlock(&rdev->devlist_mtx); 697 698 /* 699 * First remove the hardware from everywhere, this makes 700 * it impossible to find from userspace. 701 */ 702 debugfs_remove_recursive(rdev->wiphy.debugfsdir); 703 list_del_rcu(&rdev->list); 704 synchronize_rcu(); 705 706 /* 707 * Try to grab rdev->mtx. If a command is still in progress, 708 * hopefully the driver will refuse it since it's tearing 709 * down the device already. We wait for this command to complete 710 * before unlinking the item from the list. 711 * Note: as codified by the BUG_ON above we cannot get here if 712 * a virtual interface is still present. Hence, we can only get 713 * to lock contention here if userspace issues a command that 714 * identified the hardware by wiphy index. 715 */ 716 cfg80211_lock_rdev(rdev); 717 /* nothing */ 718 cfg80211_unlock_rdev(rdev); 719 720 /* 721 * If this device got a regulatory hint tell core its 722 * free to listen now to a new shiny device regulatory hint 723 */ 724 wiphy_regulatory_deregister(wiphy); 725 726 cfg80211_rdev_list_generation++; 727 device_del(&rdev->wiphy.dev); 728 729 mutex_unlock(&cfg80211_mutex); 730 731 flush_work(&rdev->scan_done_wk); 732 cancel_work_sync(&rdev->conn_work); 733 flush_work(&rdev->event_work); 734 cancel_delayed_work_sync(&rdev->dfs_update_channels_wk); 735 736 if (rdev->wowlan && rdev->ops->set_wakeup) 737 rdev_set_wakeup(rdev, false); 738 cfg80211_rdev_free_wowlan(rdev); 739 } 740 EXPORT_SYMBOL(wiphy_unregister); 741 742 void cfg80211_dev_free(struct cfg80211_registered_device *rdev) 743 { 744 struct cfg80211_internal_bss *scan, *tmp; 745 struct cfg80211_beacon_registration *reg, *treg; 746 rfkill_destroy(rdev->rfkill); 747 mutex_destroy(&rdev->mtx); 748 mutex_destroy(&rdev->devlist_mtx); 749 mutex_destroy(&rdev->sched_scan_mtx); 750 list_for_each_entry_safe(reg, treg, &rdev->beacon_registrations, list) { 751 list_del(®->list); 752 kfree(reg); 753 } 754 list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list) 755 cfg80211_put_bss(&rdev->wiphy, &scan->pub); 756 kfree(rdev); 757 } 758 759 void wiphy_free(struct wiphy *wiphy) 760 { 761 put_device(&wiphy->dev); 762 } 763 EXPORT_SYMBOL(wiphy_free); 764 765 void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked) 766 { 767 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy); 768 769 if (rfkill_set_hw_state(rdev->rfkill, blocked)) 770 schedule_work(&rdev->rfkill_sync); 771 } 772 EXPORT_SYMBOL(wiphy_rfkill_set_hw_state); 773 774 static void wdev_cleanup_work(struct work_struct *work) 775 { 776 struct wireless_dev *wdev; 777 struct cfg80211_registered_device *rdev; 778 779 wdev = container_of(work, struct wireless_dev, cleanup_work); 780 rdev = wiphy_to_dev(wdev->wiphy); 781 782 mutex_lock(&rdev->sched_scan_mtx); 783 784 if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) { 785 rdev->scan_req->aborted = true; 786 ___cfg80211_scan_done(rdev, true); 787 } 788 789 if (WARN_ON(rdev->sched_scan_req && 790 rdev->sched_scan_req->dev == wdev->netdev)) { 791 __cfg80211_stop_sched_scan(rdev, false); 792 } 793 794 mutex_unlock(&rdev->sched_scan_mtx); 795 796 mutex_lock(&rdev->devlist_mtx); 797 rdev->opencount--; 798 mutex_unlock(&rdev->devlist_mtx); 799 wake_up(&rdev->dev_wait); 800 801 dev_put(wdev->netdev); 802 } 803 804 void cfg80211_unregister_wdev(struct wireless_dev *wdev) 805 { 806 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy); 807 808 ASSERT_RTNL(); 809 810 if (WARN_ON(wdev->netdev)) 811 return; 812 813 mutex_lock(&rdev->devlist_mtx); 814 mutex_lock(&rdev->sched_scan_mtx); 815 list_del_rcu(&wdev->list); 816 rdev->devlist_generation++; 817 818 switch (wdev->iftype) { 819 case NL80211_IFTYPE_P2P_DEVICE: 820 cfg80211_stop_p2p_device(rdev, wdev); 821 break; 822 default: 823 WARN_ON_ONCE(1); 824 break; 825 } 826 mutex_unlock(&rdev->sched_scan_mtx); 827 mutex_unlock(&rdev->devlist_mtx); 828 } 829 EXPORT_SYMBOL(cfg80211_unregister_wdev); 830 831 static struct device_type wiphy_type = { 832 .name = "wlan", 833 }; 834 835 void cfg80211_update_iface_num(struct cfg80211_registered_device *rdev, 836 enum nl80211_iftype iftype, int num) 837 { 838 ASSERT_RTNL(); 839 840 rdev->num_running_ifaces += num; 841 if (iftype == NL80211_IFTYPE_MONITOR) 842 rdev->num_running_monitor_ifaces += num; 843 } 844 845 void cfg80211_leave(struct cfg80211_registered_device *rdev, 846 struct wireless_dev *wdev) 847 { 848 struct net_device *dev = wdev->netdev; 849 850 switch (wdev->iftype) { 851 case NL80211_IFTYPE_ADHOC: 852 cfg80211_leave_ibss(rdev, dev, true); 853 break; 854 case NL80211_IFTYPE_P2P_CLIENT: 855 case NL80211_IFTYPE_STATION: 856 mutex_lock(&rdev->sched_scan_mtx); 857 __cfg80211_stop_sched_scan(rdev, false); 858 mutex_unlock(&rdev->sched_scan_mtx); 859 860 wdev_lock(wdev); 861 #ifdef CONFIG_CFG80211_WEXT 862 kfree(wdev->wext.ie); 863 wdev->wext.ie = NULL; 864 wdev->wext.ie_len = 0; 865 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC; 866 #endif 867 __cfg80211_disconnect(rdev, dev, 868 WLAN_REASON_DEAUTH_LEAVING, true); 869 cfg80211_mlme_down(rdev, dev); 870 wdev_unlock(wdev); 871 break; 872 case NL80211_IFTYPE_MESH_POINT: 873 cfg80211_leave_mesh(rdev, dev); 874 break; 875 case NL80211_IFTYPE_AP: 876 cfg80211_stop_ap(rdev, dev); 877 break; 878 default: 879 break; 880 } 881 882 wdev->beacon_interval = 0; 883 } 884 885 static int cfg80211_netdev_notifier_call(struct notifier_block *nb, 886 unsigned long state, 887 void *ndev) 888 { 889 struct net_device *dev = ndev; 890 struct wireless_dev *wdev = dev->ieee80211_ptr; 891 struct cfg80211_registered_device *rdev; 892 int ret; 893 894 if (!wdev) 895 return NOTIFY_DONE; 896 897 rdev = wiphy_to_dev(wdev->wiphy); 898 899 WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED); 900 901 switch (state) { 902 case NETDEV_POST_INIT: 903 SET_NETDEV_DEVTYPE(dev, &wiphy_type); 904 break; 905 case NETDEV_REGISTER: 906 /* 907 * NB: cannot take rdev->mtx here because this may be 908 * called within code protected by it when interfaces 909 * are added with nl80211. 910 */ 911 mutex_init(&wdev->mtx); 912 INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work); 913 INIT_LIST_HEAD(&wdev->event_list); 914 spin_lock_init(&wdev->event_lock); 915 INIT_LIST_HEAD(&wdev->mgmt_registrations); 916 spin_lock_init(&wdev->mgmt_registrations_lock); 917 918 mutex_lock(&rdev->devlist_mtx); 919 wdev->identifier = ++rdev->wdev_id; 920 list_add_rcu(&wdev->list, &rdev->wdev_list); 921 rdev->devlist_generation++; 922 /* can only change netns with wiphy */ 923 dev->features |= NETIF_F_NETNS_LOCAL; 924 925 if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj, 926 "phy80211")) { 927 pr_err("failed to add phy80211 symlink to netdev!\n"); 928 } 929 wdev->netdev = dev; 930 wdev->sme_state = CFG80211_SME_IDLE; 931 mutex_unlock(&rdev->devlist_mtx); 932 #ifdef CONFIG_CFG80211_WEXT 933 wdev->wext.default_key = -1; 934 wdev->wext.default_mgmt_key = -1; 935 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC; 936 #endif 937 938 if (wdev->wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT) 939 wdev->ps = true; 940 else 941 wdev->ps = false; 942 /* allow mac80211 to determine the timeout */ 943 wdev->ps_timeout = -1; 944 945 netdev_set_default_ethtool_ops(dev, &cfg80211_ethtool_ops); 946 947 if ((wdev->iftype == NL80211_IFTYPE_STATION || 948 wdev->iftype == NL80211_IFTYPE_P2P_CLIENT || 949 wdev->iftype == NL80211_IFTYPE_ADHOC) && !wdev->use_4addr) 950 dev->priv_flags |= IFF_DONT_BRIDGE; 951 break; 952 case NETDEV_GOING_DOWN: 953 cfg80211_leave(rdev, wdev); 954 break; 955 case NETDEV_DOWN: 956 cfg80211_update_iface_num(rdev, wdev->iftype, -1); 957 dev_hold(dev); 958 queue_work(cfg80211_wq, &wdev->cleanup_work); 959 break; 960 case NETDEV_UP: 961 /* 962 * If we have a really quick DOWN/UP succession we may 963 * have this work still pending ... cancel it and see 964 * if it was pending, in which case we need to account 965 * for some of the work it would have done. 966 */ 967 if (cancel_work_sync(&wdev->cleanup_work)) { 968 mutex_lock(&rdev->devlist_mtx); 969 rdev->opencount--; 970 mutex_unlock(&rdev->devlist_mtx); 971 dev_put(dev); 972 } 973 cfg80211_update_iface_num(rdev, wdev->iftype, 1); 974 cfg80211_lock_rdev(rdev); 975 mutex_lock(&rdev->devlist_mtx); 976 mutex_lock(&rdev->sched_scan_mtx); 977 wdev_lock(wdev); 978 switch (wdev->iftype) { 979 #ifdef CONFIG_CFG80211_WEXT 980 case NL80211_IFTYPE_ADHOC: 981 cfg80211_ibss_wext_join(rdev, wdev); 982 break; 983 case NL80211_IFTYPE_STATION: 984 cfg80211_mgd_wext_connect(rdev, wdev); 985 break; 986 #endif 987 #ifdef CONFIG_MAC80211_MESH 988 case NL80211_IFTYPE_MESH_POINT: 989 { 990 /* backward compat code... */ 991 struct mesh_setup setup; 992 memcpy(&setup, &default_mesh_setup, 993 sizeof(setup)); 994 /* back compat only needed for mesh_id */ 995 setup.mesh_id = wdev->ssid; 996 setup.mesh_id_len = wdev->mesh_id_up_len; 997 if (wdev->mesh_id_up_len) 998 __cfg80211_join_mesh(rdev, dev, 999 &setup, 1000 &default_mesh_config); 1001 break; 1002 } 1003 #endif 1004 default: 1005 break; 1006 } 1007 wdev_unlock(wdev); 1008 mutex_unlock(&rdev->sched_scan_mtx); 1009 rdev->opencount++; 1010 mutex_unlock(&rdev->devlist_mtx); 1011 cfg80211_unlock_rdev(rdev); 1012 1013 /* 1014 * Configure power management to the driver here so that its 1015 * correctly set also after interface type changes etc. 1016 */ 1017 if ((wdev->iftype == NL80211_IFTYPE_STATION || 1018 wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) && 1019 rdev->ops->set_power_mgmt) 1020 if (rdev_set_power_mgmt(rdev, dev, wdev->ps, 1021 wdev->ps_timeout)) { 1022 /* assume this means it's off */ 1023 wdev->ps = false; 1024 } 1025 break; 1026 case NETDEV_UNREGISTER: 1027 /* 1028 * NB: cannot take rdev->mtx here because this may be 1029 * called within code protected by it when interfaces 1030 * are removed with nl80211. 1031 */ 1032 mutex_lock(&rdev->devlist_mtx); 1033 /* 1034 * It is possible to get NETDEV_UNREGISTER 1035 * multiple times. To detect that, check 1036 * that the interface is still on the list 1037 * of registered interfaces, and only then 1038 * remove and clean it up. 1039 */ 1040 if (!list_empty(&wdev->list)) { 1041 sysfs_remove_link(&dev->dev.kobj, "phy80211"); 1042 list_del_rcu(&wdev->list); 1043 rdev->devlist_generation++; 1044 cfg80211_mlme_purge_registrations(wdev); 1045 #ifdef CONFIG_CFG80211_WEXT 1046 kfree(wdev->wext.keys); 1047 #endif 1048 } 1049 mutex_unlock(&rdev->devlist_mtx); 1050 /* 1051 * synchronise (so that we won't find this netdev 1052 * from other code any more) and then clear the list 1053 * head so that the above code can safely check for 1054 * !list_empty() to avoid double-cleanup. 1055 */ 1056 synchronize_rcu(); 1057 INIT_LIST_HEAD(&wdev->list); 1058 /* 1059 * Ensure that all events have been processed and 1060 * freed. 1061 */ 1062 cfg80211_process_wdev_events(wdev); 1063 break; 1064 case NETDEV_PRE_UP: 1065 if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype))) 1066 return notifier_from_errno(-EOPNOTSUPP); 1067 if (rfkill_blocked(rdev->rfkill)) 1068 return notifier_from_errno(-ERFKILL); 1069 mutex_lock(&rdev->devlist_mtx); 1070 ret = cfg80211_can_add_interface(rdev, wdev->iftype); 1071 mutex_unlock(&rdev->devlist_mtx); 1072 if (ret) 1073 return notifier_from_errno(ret); 1074 break; 1075 } 1076 1077 return NOTIFY_DONE; 1078 } 1079 1080 static struct notifier_block cfg80211_netdev_notifier = { 1081 .notifier_call = cfg80211_netdev_notifier_call, 1082 }; 1083 1084 static void __net_exit cfg80211_pernet_exit(struct net *net) 1085 { 1086 struct cfg80211_registered_device *rdev; 1087 1088 rtnl_lock(); 1089 mutex_lock(&cfg80211_mutex); 1090 list_for_each_entry(rdev, &cfg80211_rdev_list, list) { 1091 if (net_eq(wiphy_net(&rdev->wiphy), net)) 1092 WARN_ON(cfg80211_switch_netns(rdev, &init_net)); 1093 } 1094 mutex_unlock(&cfg80211_mutex); 1095 rtnl_unlock(); 1096 } 1097 1098 static struct pernet_operations cfg80211_pernet_ops = { 1099 .exit = cfg80211_pernet_exit, 1100 }; 1101 1102 static int __init cfg80211_init(void) 1103 { 1104 int err; 1105 1106 err = register_pernet_device(&cfg80211_pernet_ops); 1107 if (err) 1108 goto out_fail_pernet; 1109 1110 err = wiphy_sysfs_init(); 1111 if (err) 1112 goto out_fail_sysfs; 1113 1114 err = register_netdevice_notifier(&cfg80211_netdev_notifier); 1115 if (err) 1116 goto out_fail_notifier; 1117 1118 err = nl80211_init(); 1119 if (err) 1120 goto out_fail_nl80211; 1121 1122 ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL); 1123 1124 err = regulatory_init(); 1125 if (err) 1126 goto out_fail_reg; 1127 1128 cfg80211_wq = create_singlethread_workqueue("cfg80211"); 1129 if (!cfg80211_wq) { 1130 err = -ENOMEM; 1131 goto out_fail_wq; 1132 } 1133 1134 return 0; 1135 1136 out_fail_wq: 1137 regulatory_exit(); 1138 out_fail_reg: 1139 debugfs_remove(ieee80211_debugfs_dir); 1140 out_fail_nl80211: 1141 unregister_netdevice_notifier(&cfg80211_netdev_notifier); 1142 out_fail_notifier: 1143 wiphy_sysfs_exit(); 1144 out_fail_sysfs: 1145 unregister_pernet_device(&cfg80211_pernet_ops); 1146 out_fail_pernet: 1147 return err; 1148 } 1149 subsys_initcall(cfg80211_init); 1150 1151 static void __exit cfg80211_exit(void) 1152 { 1153 debugfs_remove(ieee80211_debugfs_dir); 1154 nl80211_exit(); 1155 unregister_netdevice_notifier(&cfg80211_netdev_notifier); 1156 wiphy_sysfs_exit(); 1157 regulatory_exit(); 1158 unregister_pernet_device(&cfg80211_pernet_ops); 1159 destroy_workqueue(cfg80211_wq); 1160 } 1161 module_exit(cfg80211_exit); 1162